From 7363d2c217cb04391f03b2f9958be70a9d0b5325 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Wed, 1 Jul 2026 23:29:53 +0200
Subject: [PATCH 01/76] fix(forks): require admin of both sides for the compare
 visibility guard (#9869)

The blast-radius guard added in #9866 forced `all_ahead_items_visible` true for
any fork/target admin. But `filter_visible_diffs` keeps a modified/conflict row
(one that exists in the source AND the fork) only when the caller can see it on
both sides, so an ahead diff can be dropped for a source-side visibility gap even
when the caller is a fork admin. Forcing the flag on fork-admin alone then wrongly
reported "all ahead items visible", letting the UI enable deployment from an
incomplete comparison.

Gate the guard on admin of BOTH the source and the fork (superadmin satisfies
both), which is what actually guarantees full visibility of every item on every
side. Adds a regression test where a fork admin who is only a plain member of the
parent (no access to the item's folder) must still get `all_ahead_items_visible
= false`, plus the superadmin sanity path.

Also restores the SQLx offline cache entry for the phantom-trigger test INSERT
that #9866 landed without (CI/`SQLX_OFFLINE=true` builds failed on it), and adds
entries for the new test's all-literal queries.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 ...3b22cb831e91026dcd59d362a6d4382dc240b.json |  12 ++
 ...4676237a3b37ffa59ff6c9134df79eed3b680.json |  12 ++
 ...d4aac2dbb2ef7596d819db222fb87187d9c4b.json |  12 ++
 ...481e28c360367f144f172b746cd11abfa67a2.json |  12 ++
 ...55e8365dbd4766f273ef3f68e734972a96cd6.json |  12 ++
 ...9f6f24e83e019d6cd1590c42b14524c00f4d3.json |  12 ++
 .../tests/workspace_comparison.rs             | 127 ++++++++++++++++++
 .../windmill-api-workspaces/src/workspaces.rs |  33 ++---
 8 files changed, 217 insertions(+), 15 deletions(-)
 create mode 100644 backend/.sqlx/query-0ff0b7abad7717d7de398f629853b22cb831e91026dcd59d362a6d4382dc240b.json
 create mode 100644 backend/.sqlx/query-3211c7631f46975fc0127f106e84676237a3b37ffa59ff6c9134df79eed3b680.json
 create mode 100644 backend/.sqlx/query-3535965aed37a1cc853b229e062d4aac2dbb2ef7596d819db222fb87187d9c4b.json
 create mode 100644 backend/.sqlx/query-80f526a401d5f26021b5eb424e7481e28c360367f144f172b746cd11abfa67a2.json
 create mode 100644 backend/.sqlx/query-b55b0f11b8d73ff9fd19da3bc5555e8365dbd4766f273ef3f68e734972a96cd6.json
 create mode 100644 backend/.sqlx/query-d3334846d5928e9b260d17e7ca99f6f24e83e019d6cd1590c42b14524c00f4d3.json

diff --git a/backend/.sqlx/query-0ff0b7abad7717d7de398f629853b22cb831e91026dcd59d362a6d4382dc240b.json b/backend/.sqlx/query-0ff0b7abad7717d7de398f629853b22cb831e91026dcd59d362a6d4382dc240b.json
new file mode 100644
index 0000000000..c43b9e53a1
--- /dev/null
+++ b/backend/.sqlx/query-0ff0b7abad7717d7de398f629853b22cb831e91026dcd59d362a6d4382dc240b.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO script (workspace_id, path, hash, content, summary, description, language, created_by, created_at, archived, schema_validation, ws_error_handler_muted, deleted, extra_perms)\n         VALUES ('test-workspace', 'f/restricted/item', 314159, 'def main(): return 1', '', '', 'python3', 'test-user', NOW(), false, false, false, false, '{}'::jsonb)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "0ff0b7abad7717d7de398f629853b22cb831e91026dcd59d362a6d4382dc240b"
+}
diff --git a/backend/.sqlx/query-3211c7631f46975fc0127f106e84676237a3b37ffa59ff6c9134df79eed3b680.json b/backend/.sqlx/query-3211c7631f46975fc0127f106e84676237a3b37ffa59ff6c9134df79eed3b680.json
new file mode 100644
index 0000000000..0624b86e0c
--- /dev/null
+++ b/backend/.sqlx/query-3211c7631f46975fc0127f106e84676237a3b37ffa59ff6c9134df79eed3b680.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO workspace_diff\n         (source_workspace_id, fork_workspace_id, path, kind, ahead, behind, has_changes, exists_in_source, exists_in_fork)\n         VALUES ('test-workspace', 'wm-fork-guard-test', 'f/restricted/item', 'script', 1, 0, true, true, true)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "3211c7631f46975fc0127f106e84676237a3b37ffa59ff6c9134df79eed3b680"
+}
diff --git a/backend/.sqlx/query-3535965aed37a1cc853b229e062d4aac2dbb2ef7596d819db222fb87187d9c4b.json b/backend/.sqlx/query-3535965aed37a1cc853b229e062d4aac2dbb2ef7596d819db222fb87187d9c4b.json
new file mode 100644
index 0000000000..b814575234
--- /dev/null
+++ b/backend/.sqlx/query-3535965aed37a1cc853b229e062d4aac2dbb2ef7596d819db222fb87187d9c4b.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM skip_workspace_diff_tally WHERE workspace_id IN ('test-workspace', 'wm-fork-guard-test')",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "3535965aed37a1cc853b229e062d4aac2dbb2ef7596d819db222fb87187d9c4b"
+}
diff --git a/backend/.sqlx/query-80f526a401d5f26021b5eb424e7481e28c360367f144f172b746cd11abfa67a2.json b/backend/.sqlx/query-80f526a401d5f26021b5eb424e7481e28c360367f144f172b746cd11abfa67a2.json
new file mode 100644
index 0000000000..384ea81940
--- /dev/null
+++ b/backend/.sqlx/query-80f526a401d5f26021b5eb424e7481e28c360367f144f172b746cd11abfa67a2.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO folder (workspace_id, name, display_name, owners, extra_perms, summary, created_by)\n         VALUES ('test-workspace', 'restricted', 'restricted', ARRAY['u/test-user']::varchar[], '{\"u/test-user\": true}'::jsonb, '', 'test-user')",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "80f526a401d5f26021b5eb424e7481e28c360367f144f172b746cd11abfa67a2"
+}
diff --git a/backend/.sqlx/query-b55b0f11b8d73ff9fd19da3bc5555e8365dbd4766f273ef3f68e734972a96cd6.json b/backend/.sqlx/query-b55b0f11b8d73ff9fd19da3bc5555e8365dbd4766f273ef3f68e734972a96cd6.json
new file mode 100644
index 0000000000..c6022d3013
--- /dev/null
+++ b/backend/.sqlx/query-b55b0f11b8d73ff9fd19da3bc5555e8365dbd4766f273ef3f68e734972a96cd6.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO workspace_diff\n         (source_workspace_id, fork_workspace_id, path, kind, ahead, behind, has_changes, exists_in_source, exists_in_fork)\n         VALUES\n         ('test-workspace', 'wm-fork-test-workspace', 'f/rt/ghost', 'http_trigger', 1, 0, true, false, true),\n         ('test-workspace', 'wm-fork-test-workspace', 'f/rt/ghost_behind', 'http_trigger', 0, 1, true, true, false)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "b55b0f11b8d73ff9fd19da3bc5555e8365dbd4766f273ef3f68e734972a96cd6"
+}
diff --git a/backend/.sqlx/query-d3334846d5928e9b260d17e7ca99f6f24e83e019d6cd1590c42b14524c00f4d3.json b/backend/.sqlx/query-d3334846d5928e9b260d17e7ca99f6f24e83e019d6cd1590c42b14524c00f4d3.json
new file mode 100644
index 0000000000..fe92251342
--- /dev/null
+++ b/backend/.sqlx/query-d3334846d5928e9b260d17e7ca99f6f24e83e019d6cd1590c42b14524c00f4d3.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO usr (workspace_id, email, username, is_admin, role)\n         VALUES ('wm-fork-guard-test', 'test2@windmill.dev', 'test-user-2', true, 'Admin')",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "d3334846d5928e9b260d17e7ca99f6f24e83e019d6cd1590c42b14524c00f4d3"
+}
diff --git a/backend/windmill-api-integration-tests/tests/workspace_comparison.rs b/backend/windmill-api-integration-tests/tests/workspace_comparison.rs
index f0e77d2038..e98ee07a61 100644
--- a/backend/windmill-api-integration-tests/tests/workspace_comparison.rs
+++ b/backend/windmill-api-integration-tests/tests/workspace_comparison.rs
@@ -1642,3 +1642,130 @@ async fn test_compare_workspaces_phantom_trigger_shortfuse(
 
     Ok(())
 }
+
+/// Regression: the "sees everything" guard must require admin of BOTH sides, not
+/// just the fork. `filter_visible_diffs` keeps a modified/conflict row (one that
+/// exists in the source AND the fork) only when the caller can see it on both
+/// sides, so an ahead diff can be dropped for a *source-side* visibility gap even
+/// when the caller is a fork admin. If the guard cleared the ahead flag on
+/// fork-admin alone, the UI would report "all ahead visible" and let the user
+/// deploy from an incomplete comparison. Here test-user-2 is admin of the fork
+/// but only a plain member of the parent with no access to folder `restricted`,
+/// so the parent copy of the modified script is hidden from them and the ahead
+/// diff is (correctly) dropped — the flag must stay false.
+#[sqlx::test(migrations = "../migrations", fixtures("base"))]
+async fn test_compare_workspaces_fork_admin_source_hidden_ahead(
+    db: Pool<Postgres>,
+) -> anyhow::Result<()> {
+    initialize_tracing().await;
+
+    let server = ApiServer::start(db.clone()).await?;
+    let port = server.addr.port();
+    let base_url = format!("http://localhost:{port}/api");
+    let admin = windmill_api_client::create_client(
+        &format!("http://localhost:{port}"),
+        "SECRET_TOKEN".to_string(),
+    );
+    let fork_admin_user = windmill_api_client::create_client(
+        &format!("http://localhost:{port}"),
+        "SECRET_TOKEN_2".to_string(),
+    );
+
+    // Parent folder `restricted` owned by test-user (the admin), NOT test-user-2,
+    // and a script inside it (access flows through the folder). test-user-2 is a
+    // plain member of the parent, so RLS hides this script from them.
+    sqlx::query!(
+        "INSERT INTO folder (workspace_id, name, display_name, owners, extra_perms, summary, created_by)
+         VALUES ('test-workspace', 'restricted', 'restricted', ARRAY['u/test-user']::varchar[], '{\"u/test-user\": true}'::jsonb, '', 'test-user')"
+    )
+    .execute(&db)
+    .await?;
+    sqlx::query!(
+        "INSERT INTO script (workspace_id, path, hash, content, summary, description, language, created_by, created_at, archived, schema_validation, ws_error_handler_muted, deleted, extra_perms)
+         VALUES ('test-workspace', 'f/restricted/item', 314159, 'def main(): return 1', '', '', 'python3', 'test-user', NOW(), false, false, false, false, '{}'::jsonb)"
+    )
+    .execute(&db)
+    .await?;
+
+    // Fork (clones the folder + script into the fork).
+    let resp = admin
+        .client()
+        .post(&format!(
+            "{base_url}/w/test-workspace/workspaces/create_fork"
+        ))
+        .json(&json!({"id": "wm-fork-guard-test", "name": "Guard Fork", "color": "#0000ff"}))
+        .send()
+        .await?;
+    assert!(
+        resp.status().is_success(),
+        "fork creation failed: {}",
+        resp.status()
+    );
+
+    // test-user-2 is ADMIN of the fork (so they see the fork copy via RLS bypass)
+    // but only a plain member of the parent.
+    sqlx::query!(
+        "INSERT INTO usr (workspace_id, email, username, is_admin, role)
+         VALUES ('wm-fork-guard-test', 'test2@windmill.dev', 'test-user-2', true, 'Admin')"
+    )
+    .execute(&db)
+    .await?;
+
+    // A confirmed modified/ahead diff on the script that exists on both sides.
+    sqlx::query!(
+        "INSERT INTO workspace_diff
+         (source_workspace_id, fork_workspace_id, path, kind, ahead, behind, has_changes, exists_in_source, exists_in_fork)
+         VALUES ('test-workspace', 'wm-fork-guard-test', 'f/restricted/item', 'script', 1, 0, true, true, true)"
+    )
+    .execute(&db)
+    .await?;
+    sqlx::query!(
+        "DELETE FROM skip_workspace_diff_tally WHERE workspace_id IN ('test-workspace', 'wm-fork-guard-test')"
+    )
+    .execute(&db)
+    .await?;
+
+    let comparison: serde_json::Value = fork_admin_user
+        .client()
+        .get(&format!(
+            "{base_url}/w/test-workspace/workspaces/compare/wm-fork-guard-test"
+        ))
+        .send()
+        .await?
+        .json()
+        .await?;
+
+    // The parent copy is hidden from test-user-2, so the ahead diff is dropped.
+    // Fork-admin alone must NOT clear the flag — the comparison is incomplete.
+    assert_eq!(
+        comparison["all_ahead_items_visible"].as_bool(),
+        Some(false),
+        "fork admin without source-side visibility must not be reported as seeing all ahead items: {comparison}"
+    );
+    assert!(
+        !comparison["diffs"]
+            .as_array()
+            .unwrap()
+            .iter()
+            .any(|d| d["path"] == "f/restricted/item"),
+        "source-hidden item must not appear in the fork admin's diff list: {comparison}"
+    );
+
+    // Sanity: a superadmin (admin of both sides) still sees everything.
+    let comparison: serde_json::Value = admin
+        .client()
+        .get(&format!(
+            "{base_url}/w/test-workspace/workspaces/compare/wm-fork-guard-test"
+        ))
+        .send()
+        .await?
+        .json()
+        .await?;
+    assert_eq!(
+        comparison["all_ahead_items_visible"].as_bool(),
+        Some(true),
+        "superadmin must see all ahead items: {comparison}"
+    );
+
+    Ok(())
+}
diff --git a/backend/windmill-api-workspaces/src/workspaces.rs b/backend/windmill-api-workspaces/src/workspaces.rs
index 072029d401..955a4d95a6 100644
--- a/backend/windmill-api-workspaces/src/workspaces.rs
+++ b/backend/windmill-api-workspaces/src/workspaces.rs
@@ -7293,22 +7293,25 @@ async fn compare_workspaces(
             .fold(0, |acc, s| acc + s.try_into().unwrap_or(0));
 
     // Blast-radius guard for the "changes not visible to your user" warning
-    // (which hides the deploy button entirely). The flag is a pure visibility
-    // guarantee — the actual deploy/update is separately authorized against the
-    // target workspace's create/update endpoints — so it must be forced true for
-    // anyone who, as a rule, sees every item on the relevant side (RLS is bypassed
-    // for admins); any diff the visibility filter dropped for them is provably a
-    // stale/phantom row, never a permission gap. Crucially the two sides live in
-    // different workspaces: ahead items are the fork's own changes (gated by the
-    // TARGET/fork admin), behind items physically live in the parent (gated by the
-    // SOURCE/parent admin). A target admin does NOT see the parent side, so it must
-    // not clear the behind flag, and vice versa. `target_admin` already folds in
-    // superadmin; `source_admin` (parent side) ORs it in explicitly.
+    // (which hides the deploy button). The flag is a pure visibility guarantee —
+    // the deploy re-authorizes each item against the target workspace's
+    // create/update endpoints — so it is safe to force true for a caller who sees
+    // every item on BOTH sides, for whom any diff the filter dropped is provably a
+    // stale/phantom row, never a permission gap.
+    //
+    // It must be BOTH sides, not per-side: `filter_visible_diffs` keeps a modified
+    // or conflict row (one that exists in the source AND the fork) only when the
+    // caller can see it on both sides, so an ahead/conflict diff can be dropped for
+    // a source-side visibility gap even when the caller is a fork admin. Gating the
+    // ahead flag on fork-admin alone would then wrongly report "all ahead visible"
+    // and let the UI deploy from an incomplete comparison. So require admin of the
+    // source AND the fork (superadmin satisfies both), which guarantees full
+    // visibility of every item on every side. `fork_authed.is_admin` already folds
+    // in superadmin; `authed.is_admin` (source side) does not, so OR it in.
     let is_super_admin = windmill_common::auth::is_super_admin_email(&db, &authed.email).await?;
-    let target_admin = fork_authed.is_admin;
-    let source_admin = is_super_admin || authed.is_admin;
-    let all_ahead_items_visible = all_ahead_items_visible || target_admin;
-    let all_behind_items_visible = all_behind_items_visible || source_admin;
+    let sees_all_items = is_super_admin || (authed.is_admin && fork_authed.is_admin);
+    let all_ahead_items_visible = all_ahead_items_visible || sees_all_items;
+    let all_behind_items_visible = all_behind_items_visible || sees_all_items;
 
     return Ok(Json(WorkspaceComparison {
         all_ahead_items_visible,

From a73b14d902d759226d0af2f2faf9bdd6588e358c Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Wed, 1 Jul 2026 23:49:25 +0200
Subject: [PATCH 02/76] fix(cli): correct misleading delete-fork command
 description (#9870)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(cli): correct misleading delete-fork command description

The `wmill workspace delete-fork` description claimed it deletes "a
forked workspace and git branch", but the implementation only deletes
the Windmill workspace via the backend API and removes the local
workspace profile. No git operations are performed, so the remote
branch is left untouched. Drop the "and git branch" clause and
regenerate the derived guidance/system-prompt files.

Fixes WIN-2120

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* test(cli): permanently delete temp workspaces in folder test cleanup

The isolated-workspace test helper archived each temp workspace on
teardown. After #9865 added a CE cap of 1 archived workspace, the second
archive-cleanup is refused, so temp workspaces leak into the active set
and hit the 2-workspace CE cap — failing every subsequent create/fork
across the shared test backend.

Permanently delete the workspace instead (DELETE /api/workspaces/delete),
which frees the slot without occupying the archived quota.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: Ruben Fiszel <ruben@windmill.dev>
---
 cli/src/commands/workspace/workspace.ts                |  2 +-
 cli/src/guidance/skills.gen.ts                         |  2 +-
 cli/test/folder_missing_meta.test.ts                   | 10 ++++++----
 system_prompts/auto-generated/cli/cli-commands.md      |  2 +-
 system_prompts/auto-generated/prompts.ts               |  2 +-
 .../auto-generated/skills/cli-commands/SKILL.md        |  2 +-
 6 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/cli/src/commands/workspace/workspace.ts b/cli/src/commands/workspace/workspace.ts
index 5628213b75..1e6030a44f 100644
--- a/cli/src/commands/workspace/workspace.ts
+++ b/cli/src/commands/workspace/workspace.ts
@@ -819,7 +819,7 @@ const command = new Command()
   .option("-y --yes", "Skip interactive prompts (defaults datatable behavior to 'skip'). On a non-base branch, requires --from-branch since the base branch can't be prompted for.")
   .action(createWorkspaceFork as any)
   .command("delete-fork")
-  .description("Delete a forked workspace and git branch")
+  .description("Delete a forked workspace")
   .arguments("<fork_name:string>")
   .option("-y --yes", "Skip confirmation prompt")
   .action(deleteWorkspaceFork as any)
diff --git a/cli/src/guidance/skills.gen.ts b/cli/src/guidance/skills.gen.ts
index 62ac23464e..cdfb45db63 100644
--- a/cli/src/guidance/skills.gen.ts
+++ b/cli/src/guidance/skills.gen.ts
@@ -7262,7 +7262,7 @@ workspace related commands
   - \`--datatable-behavior <behavior:string>\` - How to handle datatables: skip, schema_only, or schema_and_data (default: interactive prompt)
   - \`--from-branch <branch:string>\` - Non-interactive override for the 'turn my current working branch into the fork' workflow: base the fork on <branch> (its bound workspace is the parent) and rename the current branch onto wm-fork/<branch>/<id>. Usually unneeded — from a working branch \`wmill workspace fork\` offers this interactively; from a base branch it creates a fresh fork branch.
   - \`-y --yes\` - Skip interactive prompts (defaults datatable behavior to 'skip'). On a non-base branch, requires --from-branch since the base branch can't be prompted for.
-- \`workspace delete-fork <fork_name:string>\` - Delete a forked workspace and git branch
+- \`workspace delete-fork <fork_name:string>\` - Delete a forked workspace
   - \`-y --yes\` - Skip confirmation prompt
 - \`workspace merge\` - Compare and deploy changes between a fork and its parent workspace
   - \`--direction <direction:string>\` - Deploy direction: to-parent or to-fork
diff --git a/cli/test/folder_missing_meta.test.ts b/cli/test/folder_missing_meta.test.ts
index 429ef83b94..37e8ee3a14 100644
--- a/cli/test/folder_missing_meta.test.ts
+++ b/cli/test/folder_missing_meta.test.ts
@@ -70,11 +70,13 @@ async function withIsolatedWorkspace(
   } finally {
     if (workspaceCreated) {
       try {
-        const archiveResponse = await backend.apiRequest!(
-          `/api/w/${workspaceId}/workspaces/archive`,
-          { method: "POST" }
+        // Permanently delete (not archive): CE caps archived workspaces at 1, so archiving
+        // temp workspaces would leak them back into the active set and blow the 2-workspace cap.
+        const deleteResponse = await backend.apiRequest!(
+          `/api/workspaces/delete/${workspaceId}`,
+          { method: "DELETE" }
         );
-        await archiveResponse.text();
+        await deleteResponse.text();
       } catch {
         // Best-effort cleanup to avoid exceeding non-enterprise workspace limits.
       }
diff --git a/system_prompts/auto-generated/cli/cli-commands.md b/system_prompts/auto-generated/cli/cli-commands.md
index 0a64c3d8e6..9827a7b12a 100644
--- a/system_prompts/auto-generated/cli/cli-commands.md
+++ b/system_prompts/auto-generated/cli/cli-commands.md
@@ -764,7 +764,7 @@ workspace related commands
   - `--datatable-behavior <behavior:string>` - How to handle datatables: skip, schema_only, or schema_and_data (default: interactive prompt)
   - `--from-branch <branch:string>` - Non-interactive override for the 'turn my current working branch into the fork' workflow: base the fork on <branch> (its bound workspace is the parent) and rename the current branch onto wm-fork/<branch>/<id>. Usually unneeded — from a working branch `wmill workspace fork` offers this interactively; from a base branch it creates a fresh fork branch.
   - `-y --yes` - Skip interactive prompts (defaults datatable behavior to 'skip'). On a non-base branch, requires --from-branch since the base branch can't be prompted for.
-- `workspace delete-fork <fork_name:string>` - Delete a forked workspace and git branch
+- `workspace delete-fork <fork_name:string>` - Delete a forked workspace
   - `-y --yes` - Skip confirmation prompt
 - `workspace merge` - Compare and deploy changes between a fork and its parent workspace
   - `--direction <direction:string>` - Deploy direction: to-parent or to-fork
diff --git a/system_prompts/auto-generated/prompts.ts b/system_prompts/auto-generated/prompts.ts
index 7d096af860..dcd413b39a 100644
--- a/system_prompts/auto-generated/prompts.ts
+++ b/system_prompts/auto-generated/prompts.ts
@@ -3432,7 +3432,7 @@ workspace related commands
   - \`--datatable-behavior <behavior:string>\` - How to handle datatables: skip, schema_only, or schema_and_data (default: interactive prompt)
   - \`--from-branch <branch:string>\` - Non-interactive override for the 'turn my current working branch into the fork' workflow: base the fork on <branch> (its bound workspace is the parent) and rename the current branch onto wm-fork/<branch>/<id>. Usually unneeded — from a working branch \`wmill workspace fork\` offers this interactively; from a base branch it creates a fresh fork branch.
   - \`-y --yes\` - Skip interactive prompts (defaults datatable behavior to 'skip'). On a non-base branch, requires --from-branch since the base branch can't be prompted for.
-- \`workspace delete-fork <fork_name:string>\` - Delete a forked workspace and git branch
+- \`workspace delete-fork <fork_name:string>\` - Delete a forked workspace
   - \`-y --yes\` - Skip confirmation prompt
 - \`workspace merge\` - Compare and deploy changes between a fork and its parent workspace
   - \`--direction <direction:string>\` - Deploy direction: to-parent or to-fork
diff --git a/system_prompts/auto-generated/skills/cli-commands/SKILL.md b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
index 7c34e85706..16ec440df4 100644
--- a/system_prompts/auto-generated/skills/cli-commands/SKILL.md
+++ b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
@@ -769,7 +769,7 @@ workspace related commands
   - `--datatable-behavior <behavior:string>` - How to handle datatables: skip, schema_only, or schema_and_data (default: interactive prompt)
   - `--from-branch <branch:string>` - Non-interactive override for the 'turn my current working branch into the fork' workflow: base the fork on <branch> (its bound workspace is the parent) and rename the current branch onto wm-fork/<branch>/<id>. Usually unneeded — from a working branch `wmill workspace fork` offers this interactively; from a base branch it creates a fresh fork branch.
   - `-y --yes` - Skip interactive prompts (defaults datatable behavior to 'skip'). On a non-base branch, requires --from-branch since the base branch can't be prompted for.
-- `workspace delete-fork <fork_name:string>` - Delete a forked workspace and git branch
+- `workspace delete-fork <fork_name:string>` - Delete a forked workspace
   - `-y --yes` - Skip confirmation prompt
 - `workspace merge` - Compare and deploy changes between a fork and its parent workspace
   - `--direction <direction:string>` - Deploy direction: to-parent or to-fork

From 20cd1a02d582c0715bedacce52cc5c1e1e8d70ca Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Wed, 1 Jul 2026 23:52:34 +0200
Subject: [PATCH 03/76] feat(forks): partial-visibility deploy + surface hidden
 items (#9868)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(forks): let partial-visibility users deploy the visible subset

The fork Compare & Deploy page hid the deploy button entirely whenever the
comparison reported any item not visible to the user (all_ahead/all_behind
flags), telling them to hand the deploy to someone with full access. But the
non-visible items are already filtered out of the diff list, and the UI already
supports deploying an arbitrary subset via per-item selection — so blocking
everything was inconsistent and, for stale/phantom rows, blocked on items that
don't even exist.

Show the deploy footer regardless; the user acts on the visible/selected items
(the per-item disabled conditions are unchanged). The hidden-items notice is
kept but downgraded to a non-blocking, direction-scoped banner that explains the
excluded items instead of removing the action.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(forks): surface hidden-item counts by kind + admin path list

WIP: expose items dropped by the visibility filter (hidden_ahead/hidden_behind
in the compare response): by-kind counts for everyone, kind+path only for admins.

* fix(forks): don't close the deployment request on a partial (hidden-items) deploy

Making the deploy button reachable in the partial-visibility case exposed a bug:
a clean merge-into-parent deploy unconditionally closed any open fork deployment
request as "merged" — marking its comments obsolete and notifying the requester
and assignees of a merge — even when hidden ahead changes were excluded from the
list and left undeployed. Only close the request as merged when the full ahead
set was visible (all_ahead_items_visible); otherwise leave it open (with a toast)
so someone with full access can finish it.

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../windmill-api-workspaces/src/workspaces.rs |  62 +++++++
 backend/windmill-api/openapi.yaml             |  42 +++++
 .../lib/components/CompareWorkspaces.svelte   | 158 +++++++++++-------
 3 files changed, 205 insertions(+), 57 deletions(-)

diff --git a/backend/windmill-api-workspaces/src/workspaces.rs b/backend/windmill-api-workspaces/src/workspaces.rs
index 955a4d95a6..bb77a50973 100644
--- a/backend/windmill-api-workspaces/src/workspaces.rs
+++ b/backend/windmill-api-workspaces/src/workspaces.rs
@@ -6948,6 +6948,27 @@ pub struct WorkspaceComparison {
     pub skipped_comparison: bool,
     pub diffs: Vec<WorkspaceDiffRow>,
     pub summary: CompareSummary,
+    /// Items that exist in the diff but were dropped from `diffs` because they
+    /// are not visible to the caller (excluded from the partial deploy). Split
+    /// by direction: `hidden_ahead` lives in the fork, `hidden_behind` in the
+    /// parent. `by_kind`/`total` are always populated (aggregate, no names);
+    /// `items` (kind+path) is only filled for a caller who is admin of that side
+    /// — never leak the paths of items the ACL is hiding from a regular user.
+    pub hidden_ahead: HiddenItemsSummary,
+    pub hidden_behind: HiddenItemsSummary,
+}
+
+#[derive(Serialize, Default)]
+pub struct HiddenItemsSummary {
+    pub total: usize,
+    pub by_kind: std::collections::BTreeMap<String, usize>,
+    pub items: Vec<HiddenItem>,
+}
+
+#[derive(Serialize)]
+pub struct HiddenItem {
+    pub kind: String,
+    pub path: String,
 }
 
 #[derive(Serialize, Default)]
@@ -7032,6 +7053,8 @@ async fn compare_workspaces(
             skipped_comparison,
             diffs: vec![],
             summary: Default::default(),
+            hidden_ahead: Default::default(),
+            hidden_behind: Default::default(),
         }));
     }
 
@@ -7313,12 +7336,51 @@ async fn compare_workspaces(
     let all_ahead_items_visible = all_ahead_items_visible || sees_all_items;
     let all_behind_items_visible = all_behind_items_visible || sees_all_items;
 
+    // Items dropped by the visibility filter (in confirmed_diffs but not in the
+    // returned visible_diffs). Surface what the partial deploy excludes: aggregate
+    // counts by kind for everyone, but kind+path only to a caller who `sees_all_items`
+    // (superadmin, or admin of the source AND the fork). For them a dropped item is
+    // provably a phantom/stale row, not an ACL-hidden secret, so no path leaks —
+    // fork-admin alone is not enough (a fork-deleted ahead item lives only in the
+    // parent, whose path a non-parent-admin must not see).
+    let visible_keys: HashSet<(&str, &str)> = visible_diffs
+        .iter()
+        .map(|d| (d.kind.as_str(), d.path.as_str()))
+        .collect();
+    let mut hidden_ahead = HiddenItemsSummary::default();
+    let mut hidden_behind = HiddenItemsSummary::default();
+    for d in &confirmed_diffs {
+        if visible_keys.contains(&(d.kind.as_str(), d.path.as_str())) {
+            continue;
+        }
+        if d.ahead > 0 {
+            hidden_ahead.total += 1;
+            *hidden_ahead.by_kind.entry(d.kind.clone()).or_default() += 1;
+            if sees_all_items {
+                hidden_ahead
+                    .items
+                    .push(HiddenItem { kind: d.kind.clone(), path: d.path.clone() });
+            }
+        }
+        if d.behind > 0 {
+            hidden_behind.total += 1;
+            *hidden_behind.by_kind.entry(d.kind.clone()).or_default() += 1;
+            if sees_all_items {
+                hidden_behind
+                    .items
+                    .push(HiddenItem { kind: d.kind.clone(), path: d.path.clone() });
+            }
+        }
+    }
+
     return Ok(Json(WorkspaceComparison {
         all_ahead_items_visible,
         all_behind_items_visible,
         skipped_comparison: false,
         diffs: visible_diffs,
         summary,
+        hidden_ahead,
+        hidden_behind,
     }));
 }
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index ea6459c9bd..f316bc8e23 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -29330,6 +29330,8 @@ components:
         - skipped_comparison
         - diffs
         - summary
+        - hidden_ahead
+        - hidden_behind
       properties:
         all_ahead_items_visible:
           type: boolean
@@ -29348,6 +29350,46 @@ components:
         summary:
           $ref: "#/components/schemas/CompareSummary"
           description: Summary statistics of the comparison
+        hidden_ahead:
+          $ref: "#/components/schemas/HiddenItemsSummary"
+          description: Ahead items excluded from `diffs` because they are not visible to the caller
+        hidden_behind:
+          $ref: "#/components/schemas/HiddenItemsSummary"
+          description: Behind items excluded from `diffs` because they are not visible to the caller
+
+    HiddenItemsSummary:
+      type: object
+      required:
+        - total
+        - by_kind
+        - items
+      properties:
+        total:
+          type: integer
+          description: Total number of hidden items on this side
+        by_kind:
+          type: object
+          additionalProperties:
+            type: integer
+          description: Count of hidden items keyed by item kind (always populated)
+        items:
+          type: array
+          description: Kind and path of each hidden item; only populated when the caller is an admin of the relevant side (empty otherwise)
+          items:
+            $ref: "#/components/schemas/HiddenItem"
+
+    HiddenItem:
+      type: object
+      required:
+        - kind
+        - path
+      properties:
+        kind:
+          type: string
+          description: Type of the hidden item
+        path:
+          type: string
+          description: Path of the hidden item
 
     WorkspaceItemDiff:
       type: object
diff --git a/frontend/src/lib/components/CompareWorkspaces.svelte b/frontend/src/lib/components/CompareWorkspaces.svelte
index a9d36cd6f7..669805b49f 100644
--- a/frontend/src/lib/components/CompareWorkspaces.svelte
+++ b/frontend/src/lib/components/CompareWorkspaces.svelte
@@ -703,21 +703,32 @@
 		deselectAll()
 
 		// If every selected item deployed cleanly and the direction was
-		// merge-into-parent, close any open deployment request for this fork.
+		// merge-into-parent, resolve any open deployment request for this fork.
 		if (!anyFailed && mergeIntoParent) {
 			try {
 				const open = await WorkspaceService.getOpenDeploymentRequest({
 					workspace: currentWorkspaceId
 				})
 				if (open) {
-					await WorkspaceService.closeDeploymentRequestMerged({
-						workspace: currentWorkspaceId,
-						id: open.id
-					})
-					deploymentRequestPanel?.refresh()
+					if (comparison?.all_ahead_items_visible) {
+						await WorkspaceService.closeDeploymentRequestMerged({
+							workspace: currentWorkspaceId,
+							id: open.id
+						})
+						deploymentRequestPanel?.refresh()
+					} else {
+						// Hidden ahead changes remain: those items are excluded from the
+						// list and stay undeployed, so this deploy is only partial. Closing
+						// the request as "merged" (which marks its comments obsolete and
+						// notifies requester/assignees of a merge) would be a lie — leave it
+						// open so someone with full access can finish it.
+						sendUserToast(
+							'Deployed the changes visible to you. The deployment request stays open because some ahead changes are hidden from you and were not deployed.'
+						)
+					}
 				}
 			} catch (e) {
-				console.error('Failed to close open deployment request after merge', e)
+				console.error('Failed to resolve open deployment request after merge', e)
 			}
 		}
 
@@ -897,6 +908,28 @@
 		azure_trigger: 'Azure trigger',
 		email_trigger: 'Email trigger'
 	}
+
+	// Human label for a diff kind, lowercased for inline use in the hidden-items
+	// summary ("2 scripts, 1 http route").
+	function hiddenKindLabel(kind: string): string {
+		const base: Record<string, string> = {
+			script: 'script',
+			flow: 'flow',
+			app: 'app',
+			raw_app: 'app',
+			resource: 'resource',
+			variable: 'variable',
+			resource_type: 'resource type',
+			folder: 'folder'
+		}
+		return base[kind] ?? KIND_DISPLAY_NAMES[kind]?.toLowerCase() ?? kind
+	}
+
+	function formatHiddenByKind(byKind: Record<string, number>): string {
+		return Object.entries(byKind)
+			.map(([kind, n]) => `${n} ${hiddenKindLabel(kind)}${n !== 1 ? 's' : ''}`)
+			.join(', ')
+	}
 </script>
 
 {#if $workspaceStore != currentWorkspaceId}
@@ -1085,22 +1118,31 @@
 							</span>
 						</Alert>
 					{/if}
-					{#if !comparison.all_ahead_items_visible || !comparison.all_behind_items_visible}
-						<Alert
-							title="This fork has changes not visible to your user"
-							type="warning"
-							class="my-2"
-						>
-							{#if !comparison.all_ahead_items_visible && !comparison.all_behind_items_visible}
-								This fork is ahead and behind its parent
-							{:else if !comparison.all_behind_items_visible}
-								This fork is behind of its parent
-							{:else if !comparison.all_ahead_items_visible}
-								This fork is ahead of its parent
-							{/if}
-							and some of the changes are not visible by you. Only a user with access to the whole context
-							may deploy or update this fork. You can share the link to this page to someone with proper
-							permissions to get it deployed.
+					{@const hiddenDir = mergeIntoParent ? comparison.hidden_ahead : comparison.hidden_behind}
+					{#if hiddenDir.items.length > 0}
+						<!-- Caller is an admin of this side, so the dropped items are provably
+						     stale/phantom diff rows (they can see every real item). List them with
+						     paths — useful for debugging the "why is this fork ahead" question. -->
+						<Alert title="Hidden diff rows (visible to you as admin)" type="info" class="my-2">
+							{hiddenDir.items.length}
+							{mergeIntoParent ? 'ahead' : 'behind'} item{hiddenDir.items.length !== 1 ? 's' : ''}
+							{hiddenDir.items.length !== 1 ? 'are' : 'is'} excluded from the list below — they are not
+							resolvable as live items and are most likely stale/phantom diff rows:
+							<ul class="mt-1 font-mono text-2xs">
+								{#each hiddenDir.items as it}
+									<li>{hiddenKindLabel(it.kind)} · {it.path}</li>
+								{/each}
+							</ul>
+						</Alert>
+					{:else if mergeIntoParent ? !comparison.all_ahead_items_visible : !comparison.all_behind_items_visible}
+						<Alert title="Some changes are hidden from you" type="warning" class="my-2">
+							{hiddenDir.total}
+							{mergeIntoParent ? 'ahead' : 'behind'} item{hiddenDir.total !== 1 ? 's' : ''}
+							({formatHiddenByKind(hiddenDir.by_kind)})
+							{hiddenDir.total !== 1 ? 'are' : 'is'} not visible to your user and
+							{hiddenDir.total !== 1 ? 'are' : 'is'} excluded from the list below. You can still
+							{mergeIntoParent ? 'deploy' : 'update'} the items you can see — share this page with someone
+							who has full access to include the rest.
 						</Alert>
 					{/if}
 				{/snippet}
@@ -1285,44 +1327,46 @@
 							<div></div>
 
 							<div class="flex flex-col items-end gap-2">
-								{#if comparison.all_behind_items_visible && comparison.all_ahead_items_visible}
-									<div class="flex items-center gap-2">
-										{#if mergeIntoParent && !hasOpenDeploymentRequest && !deploymentRequestPanel?.isDialogOpen()}
-											<Button
-												variant="default"
-												startIcon={{ icon: UserPlus }}
-												on:click={() => deploymentRequestPanel?.openRequestDialog()}
-											>
-												Request deployment
-											</Button>
-										{/if}
+								<!-- Always show the deploy footer: only the items visible to the user are
+								     listed and selectable, so a partial-visibility user deploys the subset they
+								     can see. The hidden items are surfaced by the non-blocking banner above,
+								     not by removing the action. -->
+								<div class="flex items-center gap-2">
+									{#if mergeIntoParent && !hasOpenDeploymentRequest && !deploymentRequestPanel?.isDialogOpen()}
 										<Button
-											variant="accent"
-											disabled={selectedItems.length === 0 ||
-												deploying ||
-												(hasBehindChanges && !allowBehindChangesOverride) ||
-												(mergeIntoParent && !canDeployToParent) ||
-												hasUnselectedOnBehalfOf}
-											loading={deploying}
-											on:click={requestDeploy}
+											variant="default"
+											startIcon={{ icon: UserPlus }}
+											on:click={() => deploymentRequestPanel?.openRequestDialog()}
 										>
-											{mergeIntoParent ? 'Deploy' : 'Update'}
-											{selectedItems.length} Item{selectedItems.length !== 1 ? 's' : ''}
-											{#if selectedConflicts != 0}
-												({selectedConflicts} conflicts)
-											{/if}
+											Request deployment
 										</Button>
-									</div>
-									{#if !(mergeIntoParent && !canDeployToParent) && hasUnselectedOnBehalfOf}
-										<span class="text-xs text-yellow-600">
-											You must set the "on behalf of" user for all items before deploying
-											<Tooltip class="text-yellow-600">
-												The "run on behalf of" field defines which user's permissions will be
-												applied during execution. Make sure this is set to an appropriate user
-												before deploying.
-											</Tooltip>
-										</span>
 									{/if}
+									<Button
+										variant="accent"
+										disabled={selectedItems.length === 0 ||
+											deploying ||
+											(hasBehindChanges && !allowBehindChangesOverride) ||
+											(mergeIntoParent && !canDeployToParent) ||
+											hasUnselectedOnBehalfOf}
+										loading={deploying}
+										on:click={requestDeploy}
+									>
+										{mergeIntoParent ? 'Deploy' : 'Update'}
+										{selectedItems.length} Item{selectedItems.length !== 1 ? 's' : ''}
+										{#if selectedConflicts != 0}
+											({selectedConflicts} conflicts)
+										{/if}
+									</Button>
+								</div>
+								{#if !(mergeIntoParent && !canDeployToParent) && hasUnselectedOnBehalfOf}
+									<span class="text-xs text-yellow-600">
+										You must set the "on behalf of" user for all items before deploying
+										<Tooltip class="text-yellow-600">
+											The "run on behalf of" field defines which user's permissions will be applied
+											during execution. Make sure this is set to an appropriate user before
+											deploying.
+										</Tooltip>
+									</span>
 								{/if}
 
 								{#if deploymentErrorMessage != ''}

From 1a9debb689f756f38db085d1360c8fe7691ada48 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 00:09:56 +0200
Subject: [PATCH 04/76] fix(jobs): give flow dynselect a path and its worker
 tag, like scripts (#9867)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fetching options for a `dynselect`/`dynmultiselect` input was inconsistent
between deployed scripts and deployed flows:

- scripts ran through `push_script_job_by_path_into_queue` — a `script` job
  with the script's path, tag, lock and codebase resolution;
- flows ran their schema dyn-select code as an anonymous `preview` with no
  path and no tag (always the language default), and reported access
  failures as a raw `SqlErr: no rows`.

Deployed scripts are left exactly as they were (that path already handles
tag/lock/codebase/on-behalf-of correctly). The flow branch now:
- carries the flow path on the preview job,
- reads the flow's `tag` under RLS and routes the job to it (falling back to
  the language default when unset), matching the script's worker group, and
- runs `check_tag_available_for_workspace` on that tag — the same gate a
  normal flow run and the script path apply — so a caller who can read the
  flow but is not allowed to use its (custom/scoped) worker tag is rejected
  consistently.

The flow's tag read runs on every request, so it also serves as the
per-request access check, replacing the raw error with a clean
`NotAuthorized` / `NotFound`. Entrypoint-name validation now covers all
branches (it is interpolated into the generated wrapper). Inline is
unchanged: a `preview` with no path on the language default, blocked for
operators.

Fixes WIN-2118

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 ...ce48f63e4d6d3e2d4fa9247b50963112f47ad.json | 23 +++++
 ...30365210bba4bff0b7e32d06c53ed13572360.json | 23 +++++
 backend/windmill-api/src/jobs.rs              | 91 ++++++++++++++-----
 3 files changed, 116 insertions(+), 21 deletions(-)
 create mode 100644 backend/.sqlx/query-919bee5afcaba361f23760b5f64ce48f63e4d6d3e2d4fa9247b50963112f47ad.json
 create mode 100644 backend/.sqlx/query-ad07e40790b947d1e8da17dd4ae30365210bba4bff0b7e32d06c53ed13572360.json

diff --git a/backend/.sqlx/query-919bee5afcaba361f23760b5f64ce48f63e4d6d3e2d4fa9247b50963112f47ad.json b/backend/.sqlx/query-919bee5afcaba361f23760b5f64ce48f63e4d6d3e2d4fa9247b50963112f47ad.json
new file mode 100644
index 0000000000..34c18e2633
--- /dev/null
+++ b/backend/.sqlx/query-919bee5afcaba361f23760b5f64ce48f63e4d6d3e2d4fa9247b50963112f47ad.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT tag FROM flow WHERE workspace_id = $1 AND path = $2",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "tag",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      true
+    ]
+  },
+  "hash": "919bee5afcaba361f23760b5f64ce48f63e4d6d3e2d4fa9247b50963112f47ad"
+}
diff --git a/backend/.sqlx/query-ad07e40790b947d1e8da17dd4ae30365210bba4bff0b7e32d06c53ed13572360.json b/backend/.sqlx/query-ad07e40790b947d1e8da17dd4ae30365210bba4bff0b7e32d06c53ed13572360.json
new file mode 100644
index 0000000000..e543db2a30
--- /dev/null
+++ b/backend/.sqlx/query-ad07e40790b947d1e8da17dd4ae30365210bba4bff0b7e32d06c53ed13572360.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT 1 FROM flow WHERE workspace_id = $1 AND path = $2 LIMIT 1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "?column?",
+        "type_info": "Int4"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "ad07e40790b947d1e8da17dd4ae30365210bba4bff0b7e32d06c53ed13572360"
+}
diff --git a/backend/windmill-api/src/jobs.rs b/backend/windmill-api/src/jobs.rs
index 5192d27724..14cbb76c91 100644
--- a/backend/windmill-api/src/jobs.rs
+++ b/backend/windmill-api/src/jobs.rs
@@ -7602,26 +7602,32 @@ async fn run_dynamic_select(
         ));
     }
 
+    if !is_valid_entrypoint_name(&request.entrypoint_function) {
+        return Err(error::Error::BadRequest(format!(
+            "Invalid entrypoint_function {:?}: must match \
+             ^[A-Za-z_][A-Za-z0-9_]*$ (letters, digits and underscores, \
+             not starting with a digit)",
+            request.entrypoint_function
+        )));
+    }
+
+    // Deployed scripts keep their normal deployed-run path (a `script` job, resolved below by
+    // push_script_job_by_path_into_queue). Deployed flows and inline snippets have no deployed
+    // runnable, so they run their dyn-select code as a `preview`; the flow carries its path and
+    // worker tag so its option-fetching job lines up with the script run.
     let dynamic_input: DynamicInput;
+    let runnable_path: Option<String>;
+    let mut tag: Option<String> = None;
 
     match request.runnable_ref {
         DynamicSelectRunnableRef::Deployed { path, runnable_kind } => match runnable_kind {
             RunnableKind::Script => {
-                if !is_valid_entrypoint_name(&request.entrypoint_function) {
-                    return Err(error::Error::BadRequest(format!(
-                        "Invalid entrypoint_function {:?}: must match \
-                         ^[A-Za-z_][A-Za-z0-9_]*$ (letters, digits and underscores, \
-                         not starting with a digit)",
-                        request.entrypoint_function
-                    )));
-                }
                 let mut script_args = request.args.unwrap_or_default();
                 script_args.insert(
-                    "_ENTRYPOINT_OVERRIDE".to_string(),
+                    ENTRYPOINT_OVERRIDE.to_string(),
                     serde_json::value::to_raw_value(&request.entrypoint_function)?,
                 );
-
-                let push_args = PushArgsOwned { extra: None, args: script_args.clone() };
+                let push_args = PushArgsOwned { extra: None, args: script_args };
 
                 let (uuid, _, _) = push_script_job_by_path_into_queue(
                     authed.clone(),
@@ -7631,7 +7637,7 @@ async fn run_dynamic_select(
                     w_id.clone(),
                     StripPath(path),
                     run_query.clone(),
-                    push_args.clone(),
+                    push_args,
                     None,
                 )
                 .await?;
@@ -7639,13 +7645,40 @@ async fn run_dynamic_select(
                 return Ok((StatusCode::CREATED, uuid.to_string()).into_response());
             }
             RunnableKind::Flow => {
-                // Runs the deployed flow's dynamic-select code. Enforce the same
-                // path-scoped check the script branch gets via
-                // push_script_job_by_path_into_queue, so a token not scoped to this
-                // flow cannot trigger its code through dynamic select.
+                // Runs the deployed flow's dynamic-select code. Path-scoped so a token not
+                // scoped to this flow cannot trigger its code through dynamic select.
                 check_scopes(&authed, || format!("jobs:run:flows:{path}"))?;
                 let mut conn = user_db.clone().begin(&authed).await?;
 
+                // Read the flow's tag under RLS. This runs on every request (including the
+                // cache hit below), so it doubles as the access check and routes the
+                // option-fetching preview to the flow's worker group, matching the script branch.
+                let Some(flow_tag) = sqlx::query_scalar!(
+                    "SELECT tag FROM flow WHERE workspace_id = $1 AND path = $2",
+                    &w_id,
+                    &path
+                )
+                .fetch_optional(&mut *conn)
+                .await?
+                else {
+                    conn.commit().await?;
+                    let exists = sqlx::query_scalar!(
+                        "SELECT 1 FROM flow WHERE workspace_id = $1 AND path = $2 LIMIT 1",
+                        &w_id,
+                        &path
+                    )
+                    .fetch_optional(&db)
+                    .await?
+                    .is_some();
+                    if exists {
+                        return Err(error::Error::NotAuthorized(format!(
+                            "You are not authorized to access this flow: {path}"
+                        )));
+                    }
+                    return Err(Error::NotFound(format!("Flow not found at path {path}")));
+                };
+                tag = flow_tag;
+
                 let dynamic_input_res = match DYNAMIC_INPUT_CACHE.get(&format!("{}:{}", w_id, path))
                 {
                     Some(cached) => cached.as_ref().clone(),
@@ -7688,21 +7721,34 @@ async fn run_dynamic_select(
                 conn.commit().await?;
 
                 dynamic_input = dynamic_input_res;
+                runnable_path = Some(path);
             }
         },
         DynamicSelectRunnableRef::Inline { code, lang: language } => {
             // Inline dynamic select runs arbitrary, request-supplied code; require the broad
             // jobs:run scope so a narrowly-scoped token cannot escape its scope. The Deployed
-            // branches are path-scoped instead (scripts via push_script_job_by_path_into_queue,
-            // flows via the check_scopes above).
+            // branches are path-scoped instead.
             check_scopes(&authed, || format!("jobs:run"))?;
             dynamic_input = DynamicInput {
                 x_windmill_dyn_select_code: code,
                 x_windmill_dyn_select_lang: language.unwrap_or_default(),
             };
+            runnable_path = None;
         }
     }
 
+    // Same tag-permission gate a normal run gets (run_flow / push_script_job_by_path_into_queue):
+    // a caller allowed to read the flow must still be allowed to use its worker tag. No-op for
+    // inline (tag is None); the script branch checked this inside its helper and returned above.
+    check_tag_available_for_workspace(&db, &w_id, &tag, &authed).await?;
+
+    // Invoke the dyn-select entrypoint instead of `main`.
+    let mut args = request.args.unwrap_or_default();
+    args.insert(
+        ENTRYPOINT_OVERRIDE.to_string(),
+        serde_json::value::to_raw_value(&request.entrypoint_function)?,
+    );
+
     let scheduled_for = run_query.get_scheduled_for(&db).await?;
     let tx = PushIsolationLevel::Isolated(user_db.clone(), authed.clone().into());
 
@@ -7713,7 +7759,7 @@ async fn run_dynamic_select(
         JobPayload::Code(RawCode {
             hash: None,
             content: dynamic_input.x_windmill_dyn_select_code,
-            path: None,
+            path: runnable_path,
             language: dynamic_input.x_windmill_dyn_select_lang,
             lock: None,
             cache_ttl: None,
@@ -7722,9 +7768,11 @@ async fn run_dynamic_select(
             concurrency_settings: ConcurrencySettings::default().into(),
             debouncing_settings: DebouncingSettings::default(),
             modules: None,
+            // RawCode.tag is ignored by the queue path (`JobPayload::Code` destructures it as
+            // `tag: _`); the effective tag is the `tag` argument to `push` below.
             tag: None,
         }),
-        PushArgs::from(&request.args.unwrap_or_default()),
+        PushArgs::from(&args),
         authed.display_username(),
         &authed.email,
         username_to_permissioned_as(&authed.username),
@@ -7739,7 +7787,8 @@ async fn run_dynamic_select(
         false,
         None,
         true,
-        None,
+        // Deployed flow → the flow's worker tag; inline → `None` (language default).
+        tag,
         run_query.timeout,
         None,
         None,

From 9a24cd2beffbc3fd0169f6724ff9113b41072985 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 00:15:58 +0200
Subject: [PATCH 05/76] chore(main): release 1.745.0 (#9858)

* chore(main): release 1.745.0

* Apply automatic changes

---------

Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com>
---
 CHANGELOG.md                                  |  19 ++
 backend/Cargo.lock                            | 170 +++++++++---------
 backend/Cargo.toml                            |   4 +-
 .../parsers/windmill-parser-wasm/Cargo.lock   |  48 ++---
 .../parsers/windmill-parser-wasm/Cargo.toml   |   2 +-
 backend/windmill-api/openapi.yaml             |   2 +-
 benchmarks/lib.ts                             |   2 +-
 cli/src/core/constants.ts                     |   2 +-
 frontend/package-lock.json                    |   4 +-
 frontend/package.json                         |   2 +-
 lsp/Pipfile                                   |   2 +-
 openflow.openapi.yaml                         |   2 +-
 .../WindmillClient/WindmillClient.psd1        |   2 +-
 python-client/wmill/pyproject.toml            |   2 +-
 typescript-client/jsr.json                    |   2 +-
 typescript-client/package.json                |   2 +-
 version.txt                                   |   2 +-
 17 files changed, 144 insertions(+), 125 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c1bc3ea10f..a42f727fa6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,24 @@
 # Changelog
 
+## [1.745.0](https://github.com/windmill-labs/windmill/compare/v1.744.0...v1.745.0) (2026-07-01)
+
+
+### Features
+
+* **forks:** partial-visibility deploy + surface hidden items ([#9868](https://github.com/windmill-labs/windmill/issues/9868)) ([20cd1a0](https://github.com/windmill-labs/windmill/commit/20cd1a02d582c0715bedacce52cc5c1e1e8d70ca))
+* **frontend:** add zoom and download to Mermaid graphs ([#9859](https://github.com/windmill-labs/windmill/issues/9859)) ([289017b](https://github.com/windmill-labs/windmill/commit/289017bcb28c049c8258b2ffd7da0ec3e6ef120b))
+* use derived username instead of email for non-member superadmins ([#9857](https://github.com/windmill-labs/windmill/issues/9857)) ([76a9523](https://github.com/windmill-labs/windmill/commit/76a95230095ca3f43c9dc9eecde0e9de6520242f))
+
+
+### Bug Fixes
+
+* **cli:** correct misleading delete-fork command description ([#9870](https://github.com/windmill-labs/windmill/issues/9870)) ([a73b14d](https://github.com/windmill-labs/windmill/commit/a73b14d902d759226d0af2f2faf9bdd6588e358c))
+* **folders:** allow dots and at-signs in folder owner validation ([#9856](https://github.com/windmill-labs/windmill/issues/9856)) ([383c705](https://github.com/windmill-labs/windmill/commit/383c70523bf81c5c07784a4379ef6b1c93ff86e5))
+* **forks:** require admin of both sides for the compare visibility guard ([#9869](https://github.com/windmill-labs/windmill/issues/9869)) ([7363d2c](https://github.com/windmill-labs/windmill/commit/7363d2c217cb04391f03b2f9958be70a9d0b5325))
+* **forks:** reset diff tally on trigger delete + guard compare visibility for admins ([#9866](https://github.com/windmill-labs/windmill/issues/9866)) ([6a6f129](https://github.com/windmill-labs/windmill/commit/6a6f12960e29c314d11ad541519c71412f42567b))
+* **jobs:** give flow dynselect a path and its worker tag, like scripts ([#9867](https://github.com/windmill-labs/windmill/issues/9867)) ([1a9debb](https://github.com/windmill-labs/windmill/commit/1a9debb689f756f38db085d1360c8fe7691ada48))
+* **offboarding:** make global reassignment per-workspace and optional ([#9863](https://github.com/windmill-labs/windmill/issues/9863)) ([3586164](https://github.com/windmill-labs/windmill/commit/35861641f807a02b5c205608fb592e20ee7cad7f))
+
 ## [1.744.0](https://github.com/windmill-labs/windmill/compare/v1.743.0...v1.744.0) (2026-07-01)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index a275ef72c0..77850c7dc6 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -6627,14 +6627,14 @@ dependencies = [
 
 [[package]]
 name = "libredox"
-version = "0.1.17"
+version = "0.1.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f02ab6bace2054fb888a3c16f990117b579d14a3088e472d63c6011fa185c9d3"
+checksum = "c943259e342f1e06ff2da7a83eabdfe7f92ce10262688dbf1895ff0b3e6e4652"
 dependencies = [
  "bitflags 2.13.0",
  "libc",
  "plain",
- "redox_syscall 0.8.1",
+ "redox_syscall 0.9.0",
 ]
 
 [[package]]
@@ -9309,9 +9309,9 @@ dependencies = [
 
 [[package]]
 name = "redox_syscall"
-version = "0.8.1"
+version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b44b894f2a6e36457d665d1e08c3866add6ed5e70050c1b4ba8a8ddedb02ce7"
+checksum = "c5102a6aaa05aa011a238e178e6bca86d2cb56fc9f586d37cb80f5bca6e07759"
 dependencies = [
  "bitflags 2.13.0",
 ]
@@ -13735,7 +13735,7 @@ dependencies = [
 
 [[package]]
 name = "windmill"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -13817,7 +13817,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-ai"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "async-stream",
  "async-trait",
@@ -13850,7 +13850,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-alerting"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -13863,7 +13863,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -14001,7 +14001,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-agent-workers"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14024,7 +14024,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-assets"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14039,7 +14039,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-auth"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14065,7 +14065,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -14075,7 +14075,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-configs"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14092,7 +14092,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-debug"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "base64 0.22.1",
@@ -14114,7 +14114,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-embeddings"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14137,7 +14137,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flow-conversations"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14153,7 +14153,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flows"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14174,7 +14174,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-groups"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14195,7 +14195,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-inputs"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14209,7 +14209,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-integration-tests"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -14244,7 +14244,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-jobs"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14269,7 +14269,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-npm-proxy"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "flate2",
@@ -14287,7 +14287,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-openapi"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14309,7 +14309,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-schedule"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14329,7 +14329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-scripts"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14366,7 +14366,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-settings"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14394,7 +14394,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-sse"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "lazy_static",
  "serde",
@@ -14406,7 +14406,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-users"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "argon2",
  "axum 0.8.9",
@@ -14431,7 +14431,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workers"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14445,7 +14445,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workspaces"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14478,7 +14478,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -14492,7 +14492,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14511,7 +14511,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "aes-gcm",
  "aho-corasick",
@@ -14613,7 +14613,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-dep-map"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "chrono",
  "itertools 0.14.0",
@@ -14632,7 +14632,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "regex",
  "serde",
@@ -14647,7 +14647,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -14671,7 +14671,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-jseval"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14688,7 +14688,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -14704,7 +14704,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14725,7 +14725,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-native-triggers"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14756,7 +14756,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "arc-swap",
@@ -14781,7 +14781,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-object-store"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -14815,7 +14815,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-operator"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14833,7 +14833,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -14842,7 +14842,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14854,7 +14854,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14866,7 +14866,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -14878,7 +14878,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14890,7 +14890,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14902,7 +14902,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -14913,7 +14913,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14924,7 +14924,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14936,7 +14936,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -14947,7 +14947,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -14969,7 +14969,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14981,7 +14981,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14995,7 +14995,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -15012,7 +15012,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15025,7 +15025,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15037,7 +15037,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15055,7 +15055,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -15071,7 +15071,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -15087,7 +15087,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15098,7 +15098,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15137,7 +15137,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-runtime-nativets"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "const_format",
@@ -15176,7 +15176,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "getrandom 0.3.4",
  "wasm-bindgen",
@@ -15187,7 +15187,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-store"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15221,7 +15221,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-test-utils"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15245,7 +15245,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15278,7 +15278,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-azure"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15311,7 +15311,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-email"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15331,7 +15331,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-gcp"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15365,7 +15365,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-http"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15401,7 +15401,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-kafka"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15424,7 +15424,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-mqtt"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15448,7 +15448,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-nats"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -15472,7 +15472,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-postgres"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15507,7 +15507,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-sqs"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15535,7 +15535,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-websocket"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15560,7 +15560,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "bitflags 2.13.0",
@@ -15579,7 +15579,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
@@ -15689,7 +15689,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker-volumes"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "bytes",
  "futures",
@@ -16507,9 +16507,9 @@ dependencies = [
 
 [[package]]
 name = "zlib-rs"
-version = "0.6.4"
+version = "0.6.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "977347db8caa080403f6b6b7c1cda9479a8e869316f7e13a59b19076a40f94e3"
+checksum = "5431d5661c32445236631278f27946e444ddafe4684cac70b185272d4f9c52d5"
 
 [[package]]
 name = "zmij"
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index ff0a51ec15..0b3fa06521 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.744.0"
+version = "1.745.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -87,7 +87,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"]
 
 [workspace.package]
-version = "1.744.0"
+version = "1.745.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.lock b/backend/parsers/windmill-parser-wasm/Cargo.lock
index 8e059ddf5a..4e39f3b0c8 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.lock
+++ b/backend/parsers/windmill-parser-wasm/Cargo.lock
@@ -6191,7 +6191,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "windmill-common"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "aho-corasick",
  "anyhow",
@@ -6272,7 +6272,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6284,7 +6284,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "convert_case",
  "serde",
@@ -6293,7 +6293,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6305,7 +6305,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6317,7 +6317,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -6329,7 +6329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6341,7 +6341,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6353,7 +6353,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -6364,7 +6364,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6375,7 +6375,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6387,7 +6387,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6398,7 +6398,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -6420,7 +6420,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6432,7 +6432,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6446,7 +6446,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "convert_case",
@@ -6463,7 +6463,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6476,7 +6476,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6488,7 +6488,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6506,7 +6506,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -6522,7 +6522,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6538,7 +6538,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wasm"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "getrandom 0.2.17",
@@ -6570,7 +6570,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6581,7 +6581,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.744.0"
+version = "1.745.0"
 dependencies = [
  "anyhow",
  "bitflags",
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.toml b/backend/parsers/windmill-parser-wasm/Cargo.toml
index 8b88c201bd..1048b9f6ba 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.toml
+++ b/backend/parsers/windmill-parser-wasm/Cargo.toml
@@ -12,7 +12,7 @@ resolver = "2"
 members = ["."]
 
 [workspace.package]
-version = "1.744.0"
+version = "1.745.0"
 edition = "2021"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index f316bc8e23..0fcbb9132e 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.744.0
+  version: 1.745.0
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index d1dad43038..f5a0a6564d 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.744.0";
+export const VERSION = "v1.745.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/core/constants.ts b/cli/src/core/constants.ts
index a05f8b100a..457f4cc51e 100644
--- a/cli/src/core/constants.ts
+++ b/cli/src/core/constants.ts
@@ -10,4 +10,4 @@ export const WM_FORK_PREFIX = "wm-fork";
 // (e.g. utils.ts) can read it without importing main.ts and creating a circular
 // dependency (main → workspace → utils → main) that triggers a TDZ.
 // Re-exported from main.ts for backwards compatibility.
-export const VERSION = "1.744.0";
+export const VERSION = "1.745.0";
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 35a2a45fb9..483c4766b9 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.744.0",
+	"version": "1.745.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "@windmill-labs/components",
-			"version": "1.744.0",
+			"version": "1.745.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 4f1fe6ad5c..4aa51acb00 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.744.0",
+	"version": "1.745.0",
 	"scripts": {
 		"dev": "vite dev",
 		"dev:ui-builder": "mv static/ui_builder static/ui_builder.dev-disabled 2>/dev/null || true ; trap 'mv static/ui_builder.dev-disabled static/ui_builder 2>/dev/null || true' EXIT ; vite dev",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index 3dd22bc33a..535f538d26 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,7 +4,7 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.744.0"
+wmill = ">=1.745.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index 74be13d66b..dfee4df377 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.744.0
+  version: 1.745.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index a716b14f17..92a1a6628a 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.744.0'
+    ModuleVersion     = '1.745.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index 0612e5a2dd..45b7f56a17 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.744.0"
+version = "1.745.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index ca1b6c98ae..ebf0669fc2 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.744.0",
+  "version": "1.745.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index 1b8efd04d8..763196a9cf 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.744.0",
+  "version": "1.745.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "homepage": "https://github.com/windmill-labs/windmill/tree/main/typescript-client#readme",
diff --git a/version.txt b/version.txt
index 48207fbc7d..977091ab28 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.744.0
+1.745.0

From 79897950e7646b00d92a28a009174d91c705b251 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 07:37:53 +0200
Subject: [PATCH 06/76] fix(frontend): stack cron field and cron builder button
 on narrow screens (#9871)

The cron schedule row placed the input next to a shrink-0 button group, so
on narrow layouts the buttons kept their width and squeezed the input to
near-zero. Make the row wrap and give the input a min width so the buttons
drop below it, keeping both visible.

Fixes WIN-2121

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 frontend/src/lib/components/CronInput.svelte | 26 +++++++++++---------
 1 file changed, 14 insertions(+), 12 deletions(-)

diff --git a/frontend/src/lib/components/CronInput.svelte b/frontend/src/lib/components/CronInput.svelte
index b7febcdaca..d2b629d33e 100644
--- a/frontend/src/lib/components/CronInput.svelte
+++ b/frontend/src/lib/components/CronInput.svelte
@@ -204,18 +204,20 @@
 		<div class="flex flex-col gap-1">
 			<label for="cron-schedule" class="text-xs font-semibold text-emphasis">Cron</label>
 
-			<div class="flex flex-row gap-2 items-center">
-				<TextInput
-					inputProps={{
-						type: 'text',
-						id: 'cron-schedule',
-						name: 'cron-schedule',
-						placeholder: '0 0 */1 * * *',
-						disabled: disabled
-					}}
-					bind:value={schedule}
-					error={!validCRON}
-				/>
+			<div class="flex flex-row flex-wrap gap-2 items-center">
+				<div class="flex-1 min-w-[160px]">
+					<TextInput
+						inputProps={{
+							type: 'text',
+							id: 'cron-schedule',
+							name: 'cron-schedule',
+							placeholder: '0 0 */1 * * *',
+							disabled: disabled
+						}}
+						bind:value={schedule}
+						error={!validCRON}
+					/>
+				</div>
 				{#if !disabled}
 					<div class="flex flex-row gap-2 shrink-0">
 						{@render cronBuilder()}

From e77b7523a50ed665f4014af4c8971a4545abd58c Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 06:01:17 +0000
Subject: [PATCH 07/76] nit enterprise implies license feature

---
 backend/Cargo.toml                       | 2 +-
 backend/windmill-api-settings/Cargo.toml | 2 +-
 backend/windmill-api/Cargo.toml          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index 0b3fa06521..bf4b4fc022 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -112,7 +112,7 @@ strip = "none"
 default = []
 private = ["windmill-api/private", "windmill-api-agent-workers?/private", "windmill-autoscaling/private", "windmill-common/private", "windmill-dep-map/private", "windmill-object-store/private", "windmill-git-sync/private", "windmill-indexer/private", "windmill-operator?/private", "windmill-queue/private", "windmill-worker/private", "windmill-test-utils/private"]
 agent_worker_server = ["windmill-api/agent_worker_server", "dep:windmill-api-agent-workers", "windmill-test-utils/agent_worker_server"]
-enterprise = ["windmill-worker/enterprise", "windmill-queue/enterprise", "windmill-api/enterprise", "windmill-api-agent-workers?/enterprise", "dep:windmill-autoscaling", "windmill-autoscaling/enterprise", "windmill-git-sync/enterprise", "windmill-common/prometheus", "windmill-common/enterprise", "windmill-object-store/enterprise"]
+enterprise = ["windmill-worker/enterprise", "windmill-queue/enterprise", "windmill-api/enterprise", "windmill-api-agent-workers?/enterprise", "dep:windmill-autoscaling", "windmill-autoscaling/enterprise", "windmill-git-sync/enterprise", "windmill-common/prometheus", "windmill-common/enterprise", "windmill-object-store/enterprise", "license"]
 local_reports = ["windmill-common/local_reports"]
 enterprise_saml = ["windmill-api/enterprise_saml", "oauth2"]
 stripe = ["windmill-api/stripe"]
diff --git a/backend/windmill-api-settings/Cargo.toml b/backend/windmill-api-settings/Cargo.toml
index 5c4f429d9e..bc5078bce4 100644
--- a/backend/windmill-api-settings/Cargo.toml
+++ b/backend/windmill-api-settings/Cargo.toml
@@ -10,7 +10,7 @@ path = "src/lib.rs"
 
 [features]
 default = []
-enterprise = []
+enterprise = ["license"]
 private = ["windmill-common/private"]
 parquet = ["windmill-common/parquet", "windmill-object-store/parquet"]
 license = ["dep:rsa"]
diff --git a/backend/windmill-api/Cargo.toml b/backend/windmill-api/Cargo.toml
index 6ce463a5aa..56893a8737 100644
--- a/backend/windmill-api/Cargo.toml
+++ b/backend/windmill-api/Cargo.toml
@@ -11,7 +11,7 @@ path = "src/lib.rs"
 [features]
 default = []
 private = ["windmill-audit/private", "windmill-common/private", "windmill-api-auth/private", "windmill-store/private", "windmill-api-users/private", "windmill-api-workspaces/private", "windmill-api-groups/private", "windmill-api-configs/private", "windmill-api-settings/private", "windmill-api-agent-workers?/private", "windmill-trigger-kafka?/private", "windmill-trigger-postgres?/private", "windmill-trigger-mqtt?/private", "windmill-trigger-websocket?/private", "windmill-trigger-nats?/private", "windmill-trigger-sqs?/private", "windmill-trigger-gcp?/private", "windmill-trigger-azure?/private", "windmill-trigger-email?/private", "windmill-git-sync/private", "windmill-autoscaling?/private"]
-enterprise = ["windmill-queue/enterprise", "windmill-audit/enterprise", "windmill-git-sync/enterprise", "windmill-common/enterprise", "windmill-worker?/enterprise", "windmill-api-auth/enterprise", "windmill-store/enterprise", "windmill-api-jobs/enterprise", "windmill-api-scripts/enterprise", "windmill-api-flows/enterprise", "windmill-api-users/enterprise", "windmill-api-workspaces/enterprise", "windmill-api-groups/enterprise", "windmill-api-configs/enterprise", "windmill-api-settings/enterprise", "windmill-api-schedule/enterprise", "windmill-api-agent-workers?/enterprise", "windmill-trigger/enterprise", "windmill-trigger-kafka?/enterprise", "windmill-trigger-postgres?/enterprise", "windmill-trigger-mqtt?/enterprise", "windmill-trigger-websocket?/enterprise", "windmill-trigger-email?/enterprise", "windmill-trigger-nats?/enterprise", "windmill-trigger-sqs?/enterprise", "windmill-trigger-gcp?/enterprise", "windmill-trigger-azure?/enterprise", "windmill-trigger-http?/enterprise", "windmill-native-triggers?/enterprise", "dep:windmill-autoscaling", "windmill-autoscaling/enterprise"]
+enterprise = ["windmill-queue/enterprise", "windmill-audit/enterprise", "windmill-git-sync/enterprise", "windmill-common/enterprise", "windmill-worker?/enterprise", "windmill-api-auth/enterprise", "windmill-store/enterprise", "windmill-api-jobs/enterprise", "windmill-api-scripts/enterprise", "windmill-api-flows/enterprise", "windmill-api-users/enterprise", "windmill-api-workspaces/enterprise", "windmill-api-groups/enterprise", "windmill-api-configs/enterprise", "windmill-api-settings/enterprise", "windmill-api-schedule/enterprise", "windmill-api-agent-workers?/enterprise", "windmill-trigger/enterprise", "windmill-trigger-kafka?/enterprise", "windmill-trigger-postgres?/enterprise", "windmill-trigger-mqtt?/enterprise", "windmill-trigger-websocket?/enterprise", "windmill-trigger-email?/enterprise", "windmill-trigger-nats?/enterprise", "windmill-trigger-sqs?/enterprise", "windmill-trigger-gcp?/enterprise", "windmill-trigger-azure?/enterprise", "windmill-trigger-http?/enterprise", "windmill-native-triggers?/enterprise", "dep:windmill-autoscaling", "windmill-autoscaling/enterprise", "license"]
 stripe = []
 run_inline = ["dep:windmill-worker", "windmill-api-configs/run_inline"]
 agent_worker_server = ["dep:windmill-worker", "dep:windmill-api-agent-workers"]

From b883adbc0011073da592dc5b39e1b79db492c83c Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 10:35:39 +0200
Subject: [PATCH 08/76] fix(duckdb): auto-declare partition arg for `//
 partitioned` scripts (#9878)

* fix(duckdb): auto-declare the partition arg for // partitioned scripts

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(cli): pipeline run --arg to pass plain run args to cascade scripts

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../parsers/windmill-parser-sql/src/lib.rs    | 82 +++++++++++++++++++
 .../windmill-worker/src/duckdb_executor.rs    | 33 ++++++++
 cli/src/commands/pipeline/pipeline.ts         | 70 ++++++++++++----
 cli/src/commands/pipeline/pipelineUpload.ts   | 36 +++++++-
 cli/src/guidance/skills.gen.ts                |  1 +
 cli/test/pipeline_upload_unit.test.ts         | 45 ++++++++++
 .../auto-generated/cli/cli-commands.md        |  1 +
 system_prompts/auto-generated/prompts.ts      |  1 +
 .../skills/cli-commands/SKILL.md              |  1 +
 9 files changed, 252 insertions(+), 18 deletions(-)

diff --git a/backend/parsers/windmill-parser-sql/src/lib.rs b/backend/parsers/windmill-parser-sql/src/lib.rs
index 931f470d3c..dc094a0a7b 100644
--- a/backend/parsers/windmill-parser-sql/src/lib.rs
+++ b/backend/parsers/windmill-parser-sql/src/lib.rs
@@ -826,6 +826,29 @@ fn parse_duckdb_file(code: &str) -> anyhow::Result<Option<Vec<Arg>>> {
     }
 
     args.append(&mut parse_sql_sanitized_interpolation(code));
+
+    // A `// partitioned` script receives its resolved partition as a job arg
+    // named `partition` (windmill_common::partition::PARTITION_ARG), and duckdb
+    // binds named parameters only when they appear in the parsed signature —
+    // so auto-declare it (as `-- $partition (text)` would) to make `$partition`
+    // usable without a manual declaration. An explicit declaration wins.
+    // `has_default` keeps the field optional: the platform resolves the value
+    // at run start when it is not passed explicitly.
+    if !args.iter().any(|arg| arg.name == "partition")
+        && windmill_parser::asset_parser::parse_pipeline_annotations(code)
+            .partition
+            .is_some()
+    {
+        args.push(Arg {
+            name: "partition".to_string(),
+            typ: Typ::Str(None),
+            default: None,
+            otyp: Some("text".to_string()),
+            has_default: true,
+            oidx: None,
+            otyp_inferred: false,
+        });
+    }
     Ok(Some(args))
 }
 
@@ -1985,4 +2008,63 @@ SELECT x
 
         Ok(())
     }
+
+    #[test]
+    fn test_parse_duckdb_partitioned_auto_declares_partition() -> anyhow::Result<()> {
+        let code = r#"// partitioned daily
+// materialize ducklake://main/sales_daily
+SELECT $partition AS day, count(*) AS n FROM sales WHERE day = $partition
+"#;
+        let args = parse_duckdb_sig(code)?.args;
+        assert_eq!(
+            args,
+            vec![Arg {
+                otyp: Some("text".to_string()),
+                name: "partition".to_string(),
+                typ: Typ::Str(None),
+                default: None,
+                has_default: true,
+                oidx: None,
+                otyp_inferred: false,
+            }]
+        );
+
+        // `--`-style annotation headers auto-declare too.
+        let dash_code = "-- partitioned hourly\nSELECT $partition AS h\n";
+        assert_eq!(parse_duckdb_sig(dash_code)?.args, args);
+
+        Ok(())
+    }
+
+    #[test]
+    fn test_parse_duckdb_partitioned_explicit_declaration_wins() -> anyhow::Result<()> {
+        let code = r#"// partitioned daily
+-- $partition (text)
+-- $limit (int) = 10
+SELECT * FROM sales WHERE day = $partition LIMIT $limit
+"#;
+        let args = parse_duckdb_sig(code)?.args;
+        // No duplicate: the explicit (required) declaration is kept as-is.
+        assert_eq!(args.iter().filter(|a| a.name == "partition").count(), 1);
+        assert_eq!(
+            args[0],
+            Arg {
+                otyp: Some("text".to_string()),
+                name: "partition".to_string(),
+                typ: Typ::Str(None),
+                default: None,
+                has_default: false,
+                oidx: None,
+                otyp_inferred: false,
+            }
+        );
+        Ok(())
+    }
+
+    #[test]
+    fn test_parse_duckdb_unpartitioned_does_not_declare_partition() -> anyhow::Result<()> {
+        let code = "SELECT 1 AS partition_count\n";
+        assert_eq!(parse_duckdb_sig(code)?.args, vec![]);
+        Ok(())
+    }
 }
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index a932be102d..c0574a8f1d 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -1534,6 +1534,39 @@ mod tests {
         assert!(!rewritten.contains("-- $file"));
     }
 
+    // A `// partitioned` script referencing `$partition` needs no manual
+    // `-- $partition (text)` declaration: the parser auto-declares the arg, so
+    // the executor binds the injected `partition` job arg instead of failing
+    // with duckdb's "Wrong number of parameters" at prepare time.
+    #[test]
+    fn partitioned_auto_declares_partition_arg() {
+        let script = "// partitioned daily\n\
+                      // materialize ducklake://main/sales_daily\n\
+                      SELECT $partition AS day, count(*) AS n FROM dl.sales WHERE day = $partition";
+
+        let sig = parse_duckdb_sig(script).expect("sig parses").args;
+        let partition_arg = sig
+            .iter()
+            .find(|a| a.name == "partition")
+            .expect("`partition` auto-declared");
+        assert_eq!(partition_arg.otyp.as_deref(), Some("text"));
+
+        // The wrapped query keeps the `$partition` references so the parsed sig
+        // binds them at run time.
+        let (rewritten, _) = build_materialized_query(
+            script,
+            Some("2026-07-02"),
+            &std::collections::HashMap::new(),
+        )
+        .expect("materialize builds")
+        .expect("materialize present");
+        let rewritten = rewritten.expect("managed mode rewrites the query");
+        assert!(
+            rewritten.contains("$partition"),
+            "wrapped query must keep the `$partition` reference, got:\n{rewritten}"
+        );
+    }
+
     // SCD2 managed mode wraps the SELECT into the diff → close-old → open-new
     // shape (unit-covered in the parser's codegen tests); here we pin the
     // executor-level wiring: the natural key flows through and the wrap is
diff --git a/cli/src/commands/pipeline/pipeline.ts b/cli/src/commands/pipeline/pipeline.ts
index 6c10c09add..fd9be73d2e 100644
--- a/cli/src/commands/pipeline/pipeline.ts
+++ b/cli/src/commands/pipeline/pipeline.ts
@@ -40,6 +40,7 @@ import { generatePipelineDocs } from "./docs.ts";
 import {
   type UploadBinding,
   devUploadKey,
+  parseArgBinding,
   parseS3Uri,
   parseUploadBinding,
   s3Arg,
@@ -469,6 +470,7 @@ async function run(
     json?: boolean;
     local?: boolean;
     upload?: string[];
+    arg?: string[];
     defaultTs?: "bun" | "deno";
   },
   folder: string,
@@ -524,6 +526,24 @@ async function run(
     await enrichDeployedNonAutorunTriggers(workspace.workspaceId, graph);
   }
 
+  // Resolve a `--upload`/`--arg` script token to its graph node, with an
+  // actionable error when the short name is ambiguous or matches nothing.
+  const resolveScriptTokenOrThrow = (tok: string, flag: string): string => {
+    const id = resolveToken(graph, tok);
+    if (!id || !id.startsWith("script:")) {
+      const matches = graph.runnables.filter(
+        (r) => r.usage_kind === "script" && (r.path.split("/").pop() ?? r.path) === tok,
+      );
+      if (matches.length > 1) {
+        throw new Error(
+          `${flag} '${tok}' matches multiple scripts (${matches.map((r) => r.path).sort().join(", ")}) — use the full path.`,
+        );
+      }
+      throw new Error(`${flag} '${tok}' matched no script in f/${f}.`);
+    }
+    return id;
+  };
+
   // `--upload <script>[:<param>]=<file|s3://key>` binds an object to a
   // data_upload/webhook entry point so it becomes a runnable start (and its
   // downstream is no longer cut) — the arg is injected at execution. Repeatable
@@ -532,23 +552,28 @@ async function run(
   const boundNodeIds = new Set<string>();
   for (const spec of opts.upload ?? []) {
     const binding = parseUploadBinding(spec);
-    const id = resolveToken(graph, binding.scriptTok);
-    if (!id || !id.startsWith("script:")) {
-      const matches = graph.runnables.filter(
-        (r) => r.usage_kind === "script" && (r.path.split("/").pop() ?? r.path) === binding.scriptTok,
-      );
-      if (matches.length > 1) {
-        throw new Error(
-          `--upload '${binding.scriptTok}' matches multiple scripts (${matches.map((r) => r.path).sort().join(", ")}) — use the full path.`,
-        );
-      }
-      throw new Error(`--upload '${binding.scriptTok}' matched no script in f/${f}.`);
-    }
+    const id = resolveScriptTokenOrThrow(binding.scriptTok, "--upload");
     const p = scriptPathOf(id);
     (boundBindingsByPath.get(p) ?? boundBindingsByPath.set(p, []).get(p)!).push(binding);
     boundNodeIds.add(id);
   }
 
+  // `--arg <script>:<param>=<value>` overlays a plain run arg on a script in
+  // the selection. Unlike `--upload` it does not make the script a runnable
+  // start — it only supplies a value if the script runs.
+  const plainArgsByPath = new Map<string, Record<string, unknown>>();
+  for (const spec of opts.arg ?? []) {
+    const b = parseArgBinding(spec);
+    const p = scriptPathOf(resolveScriptTokenOrThrow(b.scriptTok, "--arg"));
+    const merged = plainArgsByPath.get(p) ?? plainArgsByPath.set(p, {}).get(p)!;
+    // Object.hasOwn, not `in`: a param named like a prototype member
+    // (`toString`, `constructor`, …) must not trip the duplicate check.
+    if (Object.hasOwn(merged, b.param)) {
+      throw new Error(`--arg binds ${p}:${b.param} more than once.`);
+    }
+    merged[b.param] = b.value;
+  }
+
   // Resolve the start: explicit --from (must be a valid start) or the folder's
   // sole valid start. `--upload`-bound scripts join the valid starts.
   const starts = new Set([...validStarts(graph), ...boundNodeIds]);
@@ -687,6 +712,9 @@ async function run(
   for (const p of boundBindingsByPath.keys()) {
     if (!orderSet.has(p)) log.warn(`--upload for ${p} is unused — it isn't in the run selection.`);
   }
+  for (const p of plainArgsByPath.keys()) {
+    if (!orderSet.has(p)) log.warn(`--arg for ${p} is unused — it isn't in the run selection.`);
+  }
 
   if (opts.json) {
     // Surface reachable/dropped ends so a machine-readable plan reflects the
@@ -717,7 +745,9 @@ async function run(
           colors.dim(runAll ? ` (whole pipeline)` : ` (from ${shortName(scriptPathOf(start!))})`),
       );
       order.forEach((p, i) =>
-        log.info(`  ${i + 1}. ${p}${boundBindingsByPath.has(p) ? colors.dim(" (← --upload)") : ""}`),
+        log.info(
+          `  ${i + 1}. ${p}${boundBindingsByPath.has(p) ? colors.dim(" (← --upload)") : ""}${plainArgsByPath.has(p) ? colors.dim(" (← --arg)") : ""}`,
+        ),
       );
     }
     return;
@@ -743,9 +773,14 @@ async function run(
   // Execute in topological order, stopping on the first failure.
   for (const nodePath of order) {
     if (!opts.json) log.info(colors.gray(`▶ running ${nodePath}…`));
-    // Spread the internal dispatch guard LAST so an `--upload`-bound arg can't
+    // `--arg` spreads after `--upload` so an explicit value wins for the same
+    // param; the internal dispatch guard spreads LAST so neither binding can
     // re-enable backend dispatch (the CLI owns the whole closure here).
-    const nodeArgs = { ...(uploadArgs.get(nodePath) ?? {}), _wmill_skip_asset_dispatch: true };
+    const nodeArgs = {
+      ...(uploadArgs.get(nodePath) ?? {}),
+      ...(plainArgsByPath.get(nodePath) ?? {}),
+      _wmill_skip_asset_dispatch: true,
+    };
     let id: string;
     if (opts.local) {
       const ls = localScripts!.get(nodePath);
@@ -827,6 +862,11 @@ const command = new Command()
     "Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.",
     { collect: true },
   )
+  .option(
+    "--arg <binding:string>",
+    "Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.",
+    { collect: true },
+  )
   .action(run as any)
   .command(
     "docs",
diff --git a/cli/src/commands/pipeline/pipelineUpload.ts b/cli/src/commands/pipeline/pipelineUpload.ts
index 060d680488..7e4f426ff6 100644
--- a/cli/src/commands/pipeline/pipelineUpload.ts
+++ b/cli/src/commands/pipeline/pipelineUpload.ts
@@ -1,6 +1,8 @@
-// Helpers for `wmill pipeline run --upload <script>[:<param>]=<file|s3://key>`:
-// bind an object to a `data_upload` / `webhook` entry point so it (and its
-// downstream) runs in the cascade instead of being skipped for want of input.
+// Helpers for `wmill pipeline run` per-script bindings:
+// `--upload <script>[:<param>]=<file|s3://key>` binds an object to a
+// `data_upload` / `webhook` entry point so it (and its downstream) runs in the
+// cascade instead of being skipped for want of input;
+// `--arg <script>:<param>=<value>` passes a plain (non-S3Object) run arg.
 import { basename } from "node:path";
 
 export type UploadBinding = { scriptTok: string; param?: string; source: string };
@@ -28,6 +30,34 @@ export function parseUploadBinding(spec: string): UploadBinding {
   return { scriptTok, param, source };
 }
 
+export type ArgBinding = { scriptTok: string; param: string; value: unknown };
+
+/**
+ * Parse an `--arg` spec: `<script>:<param>=<value>`. Split on the FIRST `=`
+ * (values may contain `=`); the value is JSON when it parses as JSON, else the
+ * raw string — so `stats:limit=10` is a number and
+ * `daily_report:partition=2026-07-02` a string. `:<param>` is required: unlike
+ * `--upload` there is no single-S3Object convention to infer it from.
+ */
+export function parseArgBinding(spec: string): ArgBinding {
+  const eq = spec.indexOf("=");
+  const left = eq < 0 ? "" : spec.slice(0, eq).trim();
+  const raw = eq < 0 ? "" : spec.slice(eq + 1).trim();
+  const colon = left.indexOf(":");
+  const scriptTok = colon < 0 ? "" : left.slice(0, colon).trim();
+  const param = colon < 0 ? "" : left.slice(colon + 1).trim();
+  if (!scriptTok || !param) {
+    throw new Error(`--arg '${spec}' must be <script>:<param>=<json-or-string>`);
+  }
+  let value: unknown;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    value = raw;
+  }
+  return { scriptTok, param, value };
+}
+
 /** Names of a schema's S3Object properties (`format: resource-s3_object`). */
 export function s3ObjectParams(schema: any): string[] {
   const props = schema?.properties ?? {};
diff --git a/cli/src/guidance/skills.gen.ts b/cli/src/guidance/skills.gen.ts
index cdfb45db63..223f5d55bc 100644
--- a/cli/src/guidance/skills.gen.ts
+++ b/cli/src/guidance/skills.gen.ts
@@ -6925,6 +6925,7 @@ inspect asset-driven pipelines (scripts marked \`// pipeline\`, wired by \`// on
   - \`--json\` - Output the plan as JSON (for piping to jq).
   - \`--local\` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - \`--upload <binding:string>\` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
+  - \`--arg <binding:string>\` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
 - \`pipeline docs <folder:string>\` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - \`--local\` - Build the graph from local working-tree files instead of the deployed workspace.
 - \`pipeline dev [folder:string]\` - Live-preview a data pipeline from local files: watch an \`f/<folder>\` of \`// pipeline\` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).
diff --git a/cli/test/pipeline_upload_unit.test.ts b/cli/test/pipeline_upload_unit.test.ts
index 6fbdb715bf..3484085887 100644
--- a/cli/test/pipeline_upload_unit.test.ts
+++ b/cli/test/pipeline_upload_unit.test.ts
@@ -1,6 +1,7 @@
 import { expect, test } from "bun:test";
 import {
   devUploadKey,
+  parseArgBinding,
   parseS3Uri,
   parseUploadBinding,
   s3Arg,
@@ -42,6 +43,50 @@ test("parseUploadBinding: malformed specs throw", () => {
   expect(() => parseUploadBinding(":file=./x.csv")).toThrow(); // empty script
 });
 
+test("parseArgBinding: JSON values parse, non-JSON falls back to the raw string", () => {
+  // a bare date is not valid JSON → string
+  expect(parseArgBinding("daily_report:partition=2026-07-02")).toEqual({
+    scriptTok: "daily_report",
+    param: "partition",
+    value: "2026-07-02",
+  });
+  // JSON scalars/objects keep their type
+  expect(parseArgBinding("stats:limit=10")).toEqual({
+    scriptTok: "stats",
+    param: "limit",
+    value: 10,
+  });
+  expect(parseArgBinding("stats:enabled=true")).toEqual({
+    scriptTok: "stats",
+    param: "enabled",
+    value: true,
+  });
+  expect(parseArgBinding('f/pd/stats:opts={"a":1}')).toEqual({
+    scriptTok: "f/pd/stats",
+    param: "opts",
+    value: { a: 1 },
+  });
+  // quoting forces a string even for number-looking values
+  expect(parseArgBinding('stats:code="42"')).toEqual({
+    scriptTok: "stats",
+    param: "code",
+    value: "42",
+  });
+  // split on the FIRST `=` — values may contain `=`
+  expect(parseArgBinding("stats:expr=a=b")).toEqual({
+    scriptTok: "stats",
+    param: "expr",
+    value: "a=b",
+  });
+});
+
+test("parseArgBinding: :param is required and malformed specs throw", () => {
+  expect(() => parseArgBinding("stats=10")).toThrow(); // no :param
+  expect(() => parseArgBinding("stats:limit")).toThrow(); // no `=`
+  expect(() => parseArgBinding(":limit=10")).toThrow(); // empty script
+  expect(() => parseArgBinding("stats:=10")).toThrow(); // empty param
+});
+
 test("s3ObjectParams: only resource-s3_object properties, in declaration order", () => {
   const schema = {
     properties: {
diff --git a/system_prompts/auto-generated/cli/cli-commands.md b/system_prompts/auto-generated/cli/cli-commands.md
index 9827a7b12a..4cbd484d94 100644
--- a/system_prompts/auto-generated/cli/cli-commands.md
+++ b/system_prompts/auto-generated/cli/cli-commands.md
@@ -427,6 +427,7 @@ inspect asset-driven pipelines (scripts marked `// pipeline`, wired by `// on <s
   - `--json` - Output the plan as JSON (for piping to jq).
   - `--local` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - `--upload <binding:string>` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
+  - `--arg <binding:string>` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
 - `pipeline docs <folder:string>` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - `--local` - Build the graph from local working-tree files instead of the deployed workspace.
 - `pipeline dev [folder:string]` - Live-preview a data pipeline from local files: watch an `f/<folder>` of `// pipeline` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).
diff --git a/system_prompts/auto-generated/prompts.ts b/system_prompts/auto-generated/prompts.ts
index dcd413b39a..a2e5455fca 100644
--- a/system_prompts/auto-generated/prompts.ts
+++ b/system_prompts/auto-generated/prompts.ts
@@ -3095,6 +3095,7 @@ inspect asset-driven pipelines (scripts marked \`// pipeline\`, wired by \`// on
   - \`--json\` - Output the plan as JSON (for piping to jq).
   - \`--local\` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - \`--upload <binding:string>\` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
+  - \`--arg <binding:string>\` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
 - \`pipeline docs <folder:string>\` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - \`--local\` - Build the graph from local working-tree files instead of the deployed workspace.
 - \`pipeline dev [folder:string]\` - Live-preview a data pipeline from local files: watch an \`f/<folder>\` of \`// pipeline\` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).
diff --git a/system_prompts/auto-generated/skills/cli-commands/SKILL.md b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
index 16ec440df4..cb09e88daa 100644
--- a/system_prompts/auto-generated/skills/cli-commands/SKILL.md
+++ b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
@@ -432,6 +432,7 @@ inspect asset-driven pipelines (scripts marked `// pipeline`, wired by `// on <s
   - `--json` - Output the plan as JSON (for piping to jq).
   - `--local` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - `--upload <binding:string>` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
+  - `--arg <binding:string>` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
 - `pipeline docs <folder:string>` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - `--local` - Build the graph from local working-tree files instead of the deployed workspace.
 - `pipeline dev [folder:string]` - Live-preview a data pipeline from local files: watch an `f/<folder>` of `// pipeline` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).

From 659642e4889361f86e8addb038cda62fc3471006 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 10:37:22 +0200
Subject: [PATCH 09/76] fix(parsers): infer py s3 assets from S3Object
 constructor and dict forms (#9877)

---
 .../windmill-parser-py-asset/src/lib.rs       | 227 ++++++++++++++++++
 docs/pipeline-local-dev.md                    |  16 +-
 2 files changed, 238 insertions(+), 5 deletions(-)

diff --git a/backend/parsers/windmill-parser-py-asset/src/lib.rs b/backend/parsers/windmill-parser-py-asset/src/lib.rs
index e8a0a1cc40..2282025092 100644
--- a/backend/parsers/windmill-parser-py-asset/src/lib.rs
+++ b/backend/parsers/windmill-parser-py-asset/src/lib.rs
@@ -262,6 +262,14 @@ impl AssetsFinder {
         };
 
         match arg_val {
+            // S3 helpers take an `S3Object` (constructor or dict literal) or an
+            // `s3://bucket/key` string. Other helpers take a bare resource-path
+            // string literal.
+            Some(arg) if matches!(kind, AssetKind::S3Object) => {
+                let path = s3_object_arg_path(arg).ok_or(())?;
+                self.assets
+                    .push(ParseAssetsResult { kind, path, access_type, columns: None });
+            }
             Some(Expr::Constant(ExprConstant { value: Constant::Str(value), .. })) => {
                 let path = parse_asset_syntax(&value, false)
                     .map(|(_, p)| p)
@@ -282,6 +290,69 @@ impl AssetsFinder {
 // Positional arguments in python can also be used by their name
 struct Arg(usize, &'static str);
 
+/// Extract a string-literal keyword argument, e.g. `s3="value"` in a call.
+fn keyword_str_value(keywords: &[rustpython_ast::Keyword], name: &str) -> Option<String> {
+    keywords
+        .iter()
+        .find(|kw| kw.arg.as_deref() == Some(name))
+        .and_then(|kw| match &kw.value {
+            Expr::Constant(ExprConstant { value: Constant::Str(s), .. }) => Some(s.clone()),
+            _ => None,
+        })
+}
+
+/// Extract a string-literal value from a dict literal, e.g. `{"s3": "value"}`.
+fn dict_str_value(dict: &rustpython_ast::ExprDict, name: &str) -> Option<String> {
+    dict.keys
+        .iter()
+        .zip(dict.values.iter())
+        .find_map(|(key, value)| match (key.as_ref()?, value) {
+            (
+                Expr::Constant(ExprConstant { value: Constant::Str(k), .. }),
+                Expr::Constant(ExprConstant { value: Constant::Str(v), .. }),
+            ) if k.as_str() == name => Some(v.clone()),
+            _ => None,
+        })
+}
+
+/// Resolve the SDK `S3Object` argument of `load_s3_file`/`load_s3_file_reader`/
+/// `write_s3_file` to a canonical asset path, mirroring `windmill-parser-ts-asset`:
+/// `S3Object(s3="<key>", storage="<bucket>"?)` — or the equivalent dict literal —
+/// maps to the URI `s3://<bucket>/<key>` (empty bucket for default storage, i.e.
+/// `s3:///<key>`), and a bare `"s3://bucket/key"` string is passed through.
+/// The resulting URI is fed through `parse_asset_syntax` so the stored path
+/// matches the TS object form and the `# on s3:///…` trigger form exactly.
+fn s3_object_arg_path(expr: &Expr) -> Option<String> {
+    let uri = match expr {
+        Expr::Constant(ExprConstant { value: Constant::Str(s), .. }) => s.clone(),
+        Expr::Call(call) => {
+            // `S3Object(...)` imported directly or as `wmill.S3Object(...)`
+            let func_name = call
+                .func
+                .as_name_expr()
+                .map(|n| n.id.as_str())
+                .or_else(|| call.func.as_attribute_expr().map(|a| a.attr.as_str()))?;
+            if func_name != "S3Object" {
+                return None;
+            }
+            let key = keyword_str_value(&call.keywords, "s3")?;
+            let storage = keyword_str_value(&call.keywords, "storage").unwrap_or_default();
+            format!("s3://{storage}/{key}")
+        }
+        Expr::Dict(dict) => {
+            let key = dict_str_value(dict, "s3")?;
+            let storage = dict_str_value(dict, "storage").unwrap_or_default();
+            format!("s3://{storage}/{key}")
+        }
+        _ => return None,
+    };
+    Some(
+        parse_asset_syntax(&uri, false)
+            .map(|(_, p)| p.to_string())
+            .unwrap_or(uri),
+    )
+}
+
 #[cfg(test)]
 mod tests {
     use std::collections::BTreeMap;
@@ -307,6 +378,162 @@ def main():
         );
     }
 
+    #[test]
+    fn test_py_asset_parser_write_s3_object_constructor() {
+        // The SDK signature is `write_s3_file(s3object: S3Object | str, ...)` and
+        // its docstring recommends the constructor form with a bare key. It must
+        // resolve to the same canonical path as the TS object form and a
+        // `# on s3:///<key>` trigger.
+        let input = r#"
+import wmill
+from wmill import S3Object
+def main():
+    wmill.write_s3_file(S3Object(s3="analytics/x.csv"), b"content")
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "/analytics/x.csv".to_string(),
+                access_type: Some(W),
+                columns: None,
+            },])
+        );
+    }
+
+    #[test]
+    fn test_py_asset_parser_s3_object_with_storage() {
+        // `S3Object(s3=..., storage=...)` maps to `s3://<storage>/<key>`,
+        // matching the `s3://bucket/key` string form and the TS object form.
+        let input = r#"
+import wmill
+from wmill import S3Object
+def main():
+    wmill.load_s3_file(S3Object(s3="dir/in.csv", storage="mybucket"))
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "mybucket/dir/in.csv".to_string(),
+                access_type: Some(R),
+                columns: None,
+            },])
+        );
+    }
+
+    #[test]
+    fn test_py_asset_parser_s3_object_reader_and_keyword_arg() {
+        // load_s3_file_reader + passing the S3Object via the `s3object` keyword
+        // and via the `wmill.S3Object` attribute form.
+        let input = r#"
+import wmill
+def main():
+    wmill.load_s3_file_reader(s3object=wmill.S3Object(s3="dir/in.csv"))
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "/dir/in.csv".to_string(),
+                access_type: Some(R),
+                columns: None,
+            },])
+        );
+    }
+
+    #[test]
+    fn test_py_asset_parser_s3_object_dict_literal() {
+        // `S3Object` subclasses dict, so the SDK also accepts a plain dict
+        // literal — same resolution as the constructor form.
+        let input = r#"
+import wmill
+def main():
+    wmill.write_s3_file({"s3": "out.json"}, b"{}")
+    wmill.load_s3_file({"s3": "dir/in.csv", "storage": "mybucket"})
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "/out.json".to_string(),
+                    access_type: Some(W),
+                    columns: None,
+                },
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "mybucket/dir/in.csv".to_string(),
+                    access_type: Some(R),
+                    columns: None,
+                },
+            ])
+        );
+    }
+
+    #[test]
+    fn test_py_asset_parser_multiple_s3_object_writes() {
+        // Several direct constructor-form writes in main() — all outputs must
+        // be detected (merge_assets returns a deterministic path-sorted order).
+        let input = r#"
+import wmill
+from wmill import S3Object
+def main():
+    wmill.write_s3_file(S3Object(s3="pipelines/km_real/raw_events.json"), b"[]")
+    wmill.write_s3_file(S3Object(s3="pipelines/km_real/enriched.json"), b"[]")
+    wmill.write_s3_file(S3Object(s3="pipelines/km_real/summary.json"), b"[]")
+    wmill.write_s3_file(S3Object(s3="pipelines/km_real/report.json"), b"{}")
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "/pipelines/km_real/enriched.json".to_string(),
+                    access_type: Some(W),
+                    columns: None,
+                },
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "/pipelines/km_real/raw_events.json".to_string(),
+                    access_type: Some(W),
+                    columns: None,
+                },
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "/pipelines/km_real/report.json".to_string(),
+                    access_type: Some(W),
+                    columns: None,
+                },
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "/pipelines/km_real/summary.json".to_string(),
+                    access_type: Some(W),
+                    columns: None,
+                },
+            ])
+        );
+    }
+
+    #[test]
+    fn test_py_asset_parser_s3_object_dynamic_key_no_false_positive() {
+        // A computed key can't be resolved statically — must yield nothing
+        // rather than a bogus path.
+        let input = r#"
+import wmill
+from wmill import S3Object
+def main(name: str):
+    wmill.write_s3_file(S3Object(s3=f"pipelines/{name}.json"), b"{}")
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(s.map_err(|e| e.to_string()), Ok(vec![]));
+    }
+
     #[test]
     fn test_py_asset_parser_unused_sql() {
         let input = r#"
diff --git a/docs/pipeline-local-dev.md b/docs/pipeline-local-dev.md
index 6a2b6e6cb1..8b394d0eda 100644
--- a/docs/pipeline-local-dev.md
+++ b/docs/pipeline-local-dev.md
@@ -86,8 +86,12 @@ python3, and SQL dialects all get wasm inference (SQL dialects route to `parse_a
 comment-header annotation scan is dialect-independent). `go`/`bash` have no wasm asset parser, so
 they fall back to a minimal `// pipeline` + `// on` scan (annotation-only). Note inferred asset
 **paths must match exactly** to connect nodes: DuckDB `read_csv('s3://x')` / `COPY ... TO 's3://x'`
-and `// on s3://x` all yield path `x` (no leading slash), whereas TS `writeS3File({s3:"x"})` yields
-`/x` — so an all-DuckDB example connects cleanly; mixing TS-write with annotation-read needs care.
+and `// on s3://x` all yield path `x` (no leading slash), whereas the SDK object forms — TS
+`writeS3File({s3:"x"})` and python `write_s3_file(S3Object(s3="x"))` (or the equivalent dict
+literal), both resolved as `s3://<storage>/<key>` with empty default storage — yield `/x`, matching
+the `// on s3:///x` (triple-slash) annotation form. So an all-DuckDB example connects cleanly, and
+SDK writes connect to `s3:///…` annotations; mixing SDK-write with the no-slash annotation form
+needs care.
 
 ## How to test
 
@@ -147,9 +151,11 @@ http://localhost:3000/pipeline_dev?workspace=<WS>&wm_token=<TOK>&folder=demo_pip
    `startProxyServer` for embedders that need a localhost origin (e.g. Claude Code preview).
 5. **`pipeline dev` editing**: the dev page is view+run only (editing stays in the user's editor).
    If in-browser editing with file round-trip is wanted, mirror flow-dev's `handleFlowRoundTrip`.
-6. **Asset-path normalization**: the TS-write leading-slash vs annotation/DuckDB no-slash mismatch
-   (see Language coverage) is inherited from the wasm/backend inference, not introduced here, but
-   it silently breaks lineage connection across languages — worth normalizing in the parser.
+6. **Asset-path normalization**: partially done — the python parser now resolves the
+   `S3Object(s3=…, storage=…?)` constructor / dict-literal forms to the same canonical path as the
+   TS `{s3, storage}` object form (see Language coverage), so SDK writes and reads connect across
+   ts/python. Still open: the SDK-form leading-slash (`/x`) vs bare-URI no-slash (`x`, DuckDB and
+   `// on s3://x`) mismatch silently breaks lineage across those two conventions.
 
 ## Plan reference
 

From 7b04820f8ef8c7f02f79dd4239a877f667d23e6a Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 11:13:29 +0200
Subject: [PATCH 10/76] feat(frontend): group compare & deploy items by folder
 (#9880)

* feat(frontend): group compare & deploy items by folder

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): group folder items with their folder, fix disabled hint

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../lib/components/CompareWorkspaces.svelte   |  14 ++
 .../components/WorkspaceDeployLayout.svelte   | 222 +++++++++++++-----
 .../common/checkbox/Checkbox.svelte           |   5 +
 frontend/tailwind.config.cjs                  |  10 +
 4 files changed, 190 insertions(+), 61 deletions(-)

diff --git a/frontend/src/lib/components/CompareWorkspaces.svelte b/frontend/src/lib/components/CompareWorkspaces.svelte
index 669805b49f..8dd30ff3f3 100644
--- a/frontend/src/lib/components/CompareWorkspaces.svelte
+++ b/frontend/src/lib/components/CompareWorkspaces.svelte
@@ -1028,6 +1028,20 @@
 						</div>
 					</div>
 				{/snippet}
+				{#snippet groupActions(groupItems)}
+					<!-- Conflicts stay visible at the folder level so a group can be
+					     (de)selected without scanning every row for orange badges. -->
+					{@const groupConflicts = groupItems.filter((i) => {
+						const d = i.diff as WorkspaceItemDiff
+						return d.ahead > 0 && d.behind > 0
+					}).length}
+					{#if groupConflicts > 0}
+						<Badge color="orange" size="xs">
+							<AlertTriangle class="w-3 h-3 inline mr-0.5" />
+							{groupConflicts} conflict{groupConflicts !== 1 ? 's' : ''}
+						</Badge>
+					{/if}
+				{/snippet}
 				{#if allCiTests.length > 0}
 					<div class="flex flex-col gap-1.5 mt-3 p-3 border bg-surface-secondary rounded text-xs">
 						<div class="flex items-center gap-1.5 font-semibold text-secondary">
diff --git a/frontend/src/lib/components/WorkspaceDeployLayout.svelte b/frontend/src/lib/components/WorkspaceDeployLayout.svelte
index 765c7f535a..b7d87d6321 100644
--- a/frontend/src/lib/components/WorkspaceDeployLayout.svelte
+++ b/frontend/src/lib/components/WorkspaceDeployLayout.svelte
@@ -1,5 +1,5 @@
 <script lang="ts">
-	import { Loader2 } from 'lucide-svelte'
+	import { Folder, Loader2, User } from 'lucide-svelte'
 	import { Badge } from './common'
 	import Checkbox from './common/checkbox/Checkbox.svelte'
 	import Row from './common/table/Row.svelte'
@@ -15,6 +15,14 @@
 		[key: string]: unknown
 	}
 
+	interface DeployGroup {
+		/** `f/<folder>` or `u/<user>`; '' for items outside both conventions. */
+		key: string
+		label: string
+		groupKind: 'folder' | 'user' | 'other'
+		items: DeployableItem[]
+	}
+
 	interface Props {
 		items: DeployableItem[]
 		selectedItems: string[]
@@ -33,6 +41,9 @@
 		alerts?: Snippet
 		/** Rendered on the right of the "Select all" row (e.g. a filter toggle). */
 		selectAllActions?: Snippet
+		/** Rendered on the right of each folder/user group header — receives the
+		 * group's items so pages can roll up their own badges (e.g. conflicts). */
+		groupActions?: Snippet<[DeployableItem[]]>
 		itemSummary?: Snippet<[DeployableItem]>
 		/** Overrides the secondary path line per item (e.g. to strike a renamed path). */
 		itemPath?: Snippet<[DeployableItem]>
@@ -56,6 +67,7 @@
 		header,
 		alerts,
 		selectAllActions,
+		groupActions,
 		itemSummary,
 		itemPath,
 		itemActions,
@@ -73,6 +85,56 @@
 	function handleSelect(item: DeployableItem) {
 		onToggleItem?.(item)
 	}
+
+	function groupOf(path: string): Pick<DeployGroup, 'key' | 'label' | 'groupKind'> {
+		const parts = path.split('/')
+		// >= 2 so a folder item itself (path `f/<name>`, kind 'folder') lands in
+		// its folder's group next to the items that need it, not in "other".
+		if (parts.length >= 2 && (parts[0] === 'f' || parts[0] === 'u')) {
+			const key = `${parts[0]}/${parts[1]}`
+			return { key, label: key, groupKind: parts[0] === 'f' ? 'folder' : 'user' }
+		}
+		return { key: '', label: 'other', groupKind: 'other' }
+	}
+
+	let groups = $derived.by((): DeployGroup[] => {
+		const byKey = new Map<string, DeployGroup>()
+		for (const item of items) {
+			const g = groupOf(item.path)
+			let group = byKey.get(g.key)
+			if (!group) {
+				group = { ...g, items: [] }
+				byKey.set(g.key, group)
+			}
+			group.items.push(item)
+		}
+		const rank = { folder: 0, user: 1, other: 2 }
+		return [...byKey.values()].sort(
+			(a, b) => rank[a.groupKind] - rank[b.groupKind] || a.key.localeCompare(b.key)
+		)
+	})
+
+	// A lone catch-all group would just duplicate "Select all" — skip headers then.
+	let showGroupHeaders = $derived(groups.some((g) => g.groupKind !== 'other'))
+
+	// Mirrors the per-row checkbox condition: already-deployed rows keep their
+	// selection frozen, so they don't count toward the group's tri-state.
+	function groupSelectable(group: DeployGroup): DeployableItem[] {
+		return group.items.filter(
+			(i) => selectablePredicate(i) && deploymentStatus[i.key]?.status !== 'deployed'
+		)
+	}
+
+	function toggleGroup(group: DeployGroup) {
+		const selectable = groupSelectable(group)
+		const target = !selectable.every((i) => selectedItems.includes(i.key))
+		// Snapshot which items need flipping before mutating: onToggleItem updates
+		// the parent's selection, which feeds back into `selectedItems` mid-loop.
+		const toToggle = selectable.filter((i) => selectedItems.includes(i.key) !== target)
+		for (const item of toToggle) {
+			onToggleItem?.(item)
+		}
+	}
 </script>
 
 <div class="flex flex-col h-full">
@@ -118,70 +180,108 @@
 		<!-- Items list -->
 		<div class="overflow-y-auto">
 			<div class="border rounded-md bg-surface-tertiary">
-				{#each items as item (item.key)}
-					{@const isSelectable = selectablePredicate(item)}
-					{@const isSelected = selectedItems.includes(item.key)}
-					{@const status = deploymentStatus[item.key]}
-					{@const isDeployed = status?.status === 'deployed'}
-					{@const blockedReason =
-						!isSelectable && !isDeployed ? selectBlockedReason?.(item) : undefined}
-
-					<Row
-						isSelectable={isSelectable && !isDeployed}
-						selectDisabledReason={blockedReason}
-						selectOnRowClick={true}
-						alignWithSelectable={true}
-						disabled={blockedReason ? false : !isSelectable}
-						selected={isSelected && !isDeployed}
-						onSelect={() => handleSelect(item)}
-						path={item.kind !== 'resource' &&
-						item.kind !== 'variable' &&
-						item.kind !== 'resource_type'
-							? item.path
-							: ''}
-						marked={undefined}
-						kind={item.kind}
-						triggerKind={item.triggerKind}
-						canFavorite={false}
-						workspaceId=""
-					>
-						{#snippet customSummary()}
-							{#if itemSummary}
-								{@render itemSummary(item)}
-							{:else}
-								{item.path}
+				{#each groups as group (group.key)}
+					{#if showGroupHeaders}
+						{@const selectable = groupSelectable(group)}
+						{@const selectedCount = selectable.filter((i) => selectedItems.includes(i.key)).length}
+						<!-- The disabled-state hint lives on the row: a disabled Checkbox is
+						     pointer-events-none, so a title on the input would never show. -->
+						<div
+							class="sticky top-0 z-10 flex items-center gap-2 px-4 py-1.5 bg-surface-secondary border-b first:rounded-t-md"
+							title={selectable.length === 0 ? 'No selectable items in this group' : undefined}
+						>
+							<Checkbox
+								checked={selectable.length > 0 && selectedCount === selectable.length}
+								indeterminate={selectedCount > 0 && selectedCount < selectable.length}
+								disabled={selectable.length === 0}
+								title={selectedCount === selectable.length
+									? `Deselect all in ${group.label}`
+									: `Select all in ${group.label}`}
+								onChange={() => toggleGroup(group)}
+							/>
+							{#if group.groupKind === 'folder'}
+								<Folder size={14} class="text-tertiary shrink-0" />
+							{:else if group.groupKind === 'user'}
+								<User size={14} class="text-tertiary shrink-0" />
 							{/if}
-						{/snippet}
-						{#snippet pathDisplay()}
-							{#if itemPath}
-								{@render itemPath(item)}
-							{:else}
-								{item.kind !== 'resource' &&
-								item.kind !== 'variable' &&
-								item.kind !== 'resource_type'
-									? item.path
+							<span class="text-xs font-semibold text-secondary truncate">{group.label}</span>
+							<span class="text-2xs text-tertiary whitespace-nowrap">
+								{group.items.length} item{group.items.length !== 1 ? 's' : ''}{selectedCount > 0
+									? ` · ${selectedCount} selected`
 									: ''}
+							</span>
+							{#if groupActions}
+								<div class="ml-auto flex items-center gap-1">
+									{@render groupActions(group.items)}
+								</div>
 							{/if}
-						{/snippet}
-						{#snippet actions()}
-							{#if itemActions}
-								{@render itemActions(item)}
-							{/if}
-							<!-- Deployment status always shown -->
-							{#if status}
-								{#if status.status === 'loading'}
-									<Loader2 class="animate-spin" />
-								{:else if status.status === 'deployed'}
-									<Badge color="green">Deployed</Badge>
-								{:else if status.status === 'failed'}
-									<div class="inline-flex gap-1">
-										<Badge color="red">Failed</Badge>
-										<Tooltip>{status.error}</Tooltip>
-									</div>
+						</div>
+					{/if}
+					{#each group.items as item (item.key)}
+						{@const isSelectable = selectablePredicate(item)}
+						{@const isSelected = selectedItems.includes(item.key)}
+						{@const status = deploymentStatus[item.key]}
+						{@const isDeployed = status?.status === 'deployed'}
+						{@const blockedReason =
+							!isSelectable && !isDeployed ? selectBlockedReason?.(item) : undefined}
+						{@const showPath =
+							item.kind !== 'resource' && item.kind !== 'variable' && item.kind !== 'resource_type'}
+						<!-- The group header already names the folder — the path line only
+						     carries what's below it. -->
+						{@const subPath =
+							group.key && item.path.startsWith(group.key + '/')
+								? item.path.slice(group.key.length + 1)
+								: item.path}
+
+						<Row
+							isSelectable={isSelectable && !isDeployed}
+							selectDisabledReason={blockedReason}
+							selectOnRowClick={true}
+							alignWithSelectable={true}
+							disabled={blockedReason ? false : !isSelectable}
+							selected={isSelected && !isDeployed}
+							onSelect={() => handleSelect(item)}
+							path={showPath ? item.path : ''}
+							marked={undefined}
+							kind={item.kind}
+							triggerKind={item.triggerKind}
+							canFavorite={false}
+							workspaceId=""
+						>
+							{#snippet customSummary()}
+								{#if itemSummary}
+									{@render itemSummary(item)}
+								{:else}
+									{item.path}
 								{/if}
-							{/if}
-						{/snippet}
-					</Row>
+							{/snippet}
+							{#snippet pathDisplay()}
+								{#if itemPath}
+									{@render itemPath(item)}
+								{:else}
+									{showPath ? (showGroupHeaders ? subPath : item.path) : ''}
+								{/if}
+							{/snippet}
+							{#snippet actions()}
+								{#if itemActions}
+									{@render itemActions(item)}
+								{/if}
+								<!-- Deployment status always shown -->
+								{#if status}
+									{#if status.status === 'loading'}
+										<Loader2 class="animate-spin" />
+									{:else if status.status === 'deployed'}
+										<Badge color="green">Deployed</Badge>
+									{:else if status.status === 'failed'}
+										<div class="inline-flex gap-1">
+											<Badge color="red">Failed</Badge>
+											<Tooltip>{status.error}</Tooltip>
+										</div>
+									{/if}
+								{/if}
+							{/snippet}
+						</Row>
+					{/each}
 				{/each}
 			</div>
 		</div>
diff --git a/frontend/src/lib/components/common/checkbox/Checkbox.svelte b/frontend/src/lib/components/common/checkbox/Checkbox.svelte
index 0c0fcef268..49e13e9519 100644
--- a/frontend/src/lib/components/common/checkbox/Checkbox.svelte
+++ b/frontend/src/lib/components/common/checkbox/Checkbox.svelte
@@ -4,6 +4,9 @@
 	interface Props {
 		/** Controlled checked state. */
 		checked?: boolean
+		/** Tri-state display (e.g. a group header with only part of its items
+		 * selected). Purely visual — `checked` still drives the value. */
+		indeterminate?: boolean
 		disabled?: boolean
 		/** Native title attribute (hover hint). */
 		title?: string | undefined
@@ -15,6 +18,7 @@
 
 	let {
 		checked = false,
+		indeterminate = false,
 		disabled = false,
 		title = undefined,
 		class: className = undefined,
@@ -25,6 +29,7 @@
 <input
 	type="checkbox"
 	{checked}
+	{indeterminate}
 	{disabled}
 	{title}
 	onchange={onChange}
diff --git a/frontend/tailwind.config.cjs b/frontend/tailwind.config.cjs
index bae0531c17..d7dbf2d754 100644
--- a/frontend/tailwind.config.cjs
+++ b/frontend/tailwind.config.cjs
@@ -641,6 +641,16 @@ const config = {
 				".dark [type='checkbox']:checked": {
 					backgroundImage: `url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3cpath d='M12.207 4.793a1 1 0 010 1.414l-5 5a1 1 0 01-1.414 0l-2-2a1 1 0 011.414-1.414L6.5 9.086l4.293-4.293a1 1 0 011.414 0z'/%3e%3c/svg%3e")`
 				},
+				// @tailwindcss/forms draws the indeterminate dash white-on-currentColor,
+				// but the checkbox theme above keeps a white/dark background — so restyle
+				// the dash to match the checkmark's fill in each mode.
+				"[type='checkbox']:indeterminate": {
+					backgroundColor: 'transparent',
+					backgroundImage: `url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='black' xmlns='http://www.w3.org/2000/svg'%3e%3cpath d='M4 8a1 1 0 011-1h6a1 1 0 110 2H5a1 1 0 01-1-1z'/%3e%3c/svg%3e")`
+				},
+				".dark [type='checkbox']:indeterminate": {
+					backgroundImage: `url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3cpath d='M4 8a1 1 0 011-1h6a1 1 0 110 2H5a1 1 0 01-1-1z'/%3e%3c/svg%3e")`
+				},
 				'input:not(.windmillapp):not(.no-default-style),input[type="text"]:not(.windmillapp):not(.no-default-style),input[type="email"]:not(.windmillapp):not(.no-default-style),input[type="url"]:not(.windmillapp):not(.no-default-style),input[type="password"]:not(.windmillapp):not(.no-default-style),input[type="number"]:not(.windmillapp):not(.no-default-style),input[type="date"]:not(.windmillapp):not(.no-default-style),input[type="datetime-local"]:not(.windmillapp):not(.no-default-style),input[type="month"]:not(.windmillapp):not(.no-default-style),input[type="search"]:not(.windmillapp):not(.no-default-style),input[type="tel"]:not(.windmillapp):not(.no-default-style),input[type="time"]:not(.windmillapp):not(.no-default-style),input[type="week"]:not(.windmillapp):not(.no-default-style),textarea:not(.windmillapp):not(.no-default-style):not(.monaco-mouse-cursor-text),select:not(.windmillapp):not(.no-default-style)':
 					{
 						display: 'block',

From 20351a6b4c262184c5f815eeb5de007ab1eaf4a0 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 11:14:19 +0200
Subject: [PATCH 11/76] feat(frontend): pipelines index page and sql editor
 hint (#9881)

* feat(frontend): surface pipelines in sidebar nav, index page and sql editor hint

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(frontend): remove pipelines sidebar nav item

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../src/lib/components/ScriptBuilder.svelte   |  55 +++++++++
 .../AssetGraph/PipelineFolderList.svelte      | 111 ++++++++++++++++++
 .../AssetGraph/PipelinePickerModal.svelte     |  93 +--------------
 .../(root)/(logged)/pipeline/+page.svelte     |  63 +++++-----
 4 files changed, 204 insertions(+), 118 deletions(-)
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/PipelineFolderList.svelte

diff --git a/frontend/src/lib/components/ScriptBuilder.svelte b/frontend/src/lib/components/ScriptBuilder.svelte
index 36ac67559b..fbfa4f1c1b 100644
--- a/frontend/src/lib/components/ScriptBuilder.svelte
+++ b/frontend/src/lib/components/ScriptBuilder.svelte
@@ -56,6 +56,7 @@
 		Code,
 		DiffIcon,
 		EllipsisVertical,
+		Network,
 		Plus,
 		Rocket,
 		Settings,
@@ -63,6 +64,9 @@
 		Tag,
 		X
 	} from 'lucide-svelte'
+	import { base } from '$lib/base'
+	import { useLocalStorageValue } from '$lib/svelte5Utils.svelte'
+	import { parsePipelineAnnotations } from './assets/AssetGraph/parsePipelineAnnotations'
 	import DropdownV2 from './DropdownV2.svelte'
 	import { type Item } from '$lib/utils'
 	import { sendUserToast } from '$lib/toast'
@@ -314,6 +318,21 @@
 
 	const enterpriseLangs = ['bigquery', 'snowflake', 'mssql', 'oracledb']
 
+	// Languages the pipeline editor treats as warehouse/dataset transforms —
+	// the ones where a `-- pipeline` annotation is a natural next step.
+	const pipelineHintLangs = ['duckdb', 'postgresql', 'bigquery', 'snowflake', 'mysql', 'mssql']
+	const pipelineHintDismissed = useLocalStorageValue(
+		'pipelineScriptHintDismissed',
+		false,
+		'boolean'
+	)
+	let showPipelineHint = $derived(
+		!pipelineHintDismissed.val &&
+			(script.kind === 'script' || script.kind === undefined) &&
+			pipelineHintLangs.includes(script.language ?? '') &&
+			!parsePipelineAnnotations(script.content ?? '').inPipeline
+	)
+
 	export function setCode(code: string): void {
 		editor?.setCode(code)
 	}
@@ -1993,6 +2012,42 @@
 			</div>
 		</div>
 
+		{#if showPipelineHint}
+			<div
+				class="flex items-center gap-2 px-4 py-1 border-y bg-surface-secondary text-xs text-secondary"
+			>
+				<Network size={14} class="shrink-0 text-tertiary" />
+				<span class="truncate">
+					This script can become a data pipeline step: annotate it with
+					<code class="font-mono text-2xs bg-surface px-1 py-0.5 rounded border">-- pipeline</code>
+					and
+					<code class="font-mono text-2xs bg-surface px-1 py-0.5 rounded border">
+						-- materialize
+					</code>
+					to materialize its result, or build it in the
+					<a href="{base}/pipeline" class="text-blue-500 hover:underline">pipeline editor</a>.
+					<a
+						href="https://www.windmill.dev/docs/pipelines"
+						target="_blank"
+						rel="noreferrer"
+						class="text-blue-500 hover:underline"
+					>
+						Learn more
+					</a>
+				</span>
+				<div class="ml-auto shrink-0">
+					<Button
+						iconOnly
+						variant="subtle"
+						unifiedSize="sm"
+						startIcon={{ icon: X }}
+						title="Dismiss pipelines hint"
+						onclick={() => (pipelineHintDismissed.val = true)}
+					/>
+				</div>
+			</div>
+		{/if}
+
 		<ScriptEditor
 			{disableAi}
 			bind:selectedTab={selectedInputTab}
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineFolderList.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineFolderList.svelte
new file mode 100644
index 0000000000..d35b4f21d6
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineFolderList.svelte
@@ -0,0 +1,111 @@
+<script lang="ts">
+	import { userStore, workspaceStore } from '$lib/stores'
+	import { base } from '$lib/base'
+	import { goto } from '$app/navigation'
+	import Button from '$lib/components/common/button/Button.svelte'
+	import FolderPicker from '$lib/components/FolderPicker.svelte'
+	import { AssetService, type ListPipelineFoldersResponse } from '$lib/gen'
+	import { resource } from 'runed'
+	import { ArrowRight, Loader2 } from 'lucide-svelte'
+
+	interface Props {
+		// When provided, the current folder is dropped from the existing list
+		// so users don't "switch" to the folder they're already on.
+		currentFolder?: string | undefined
+		// Carried over to the target URL so switching folders from the
+		// editor keeps the user in edit mode; the default view mode needs
+		// no param.
+		mode?: 'view' | 'edit'
+		// Called right before navigating — lets a wrapping modal close itself.
+		onOpen?: () => void
+	}
+	let { currentFolder = undefined, mode = 'view', onOpen = undefined }: Props = $props()
+
+	let pipelines = resource(
+		() => $workspaceStore,
+		async (ws) => {
+			if (!ws) return [] as ListPipelineFoldersResponse
+			return await AssetService.listPipelineFolders({ workspace: ws })
+		}
+	)
+
+	let pickedFolder = $state('')
+
+	let visiblePipelines = $derived(
+		(pipelines.current ?? []).filter((p) => p.folder !== currentFolder)
+	)
+
+	async function openExistingPipeline(folder: string) {
+		onOpen?.()
+		const modeQuery = mode !== 'view' ? `?mode=${mode}` : ''
+		await goto(`${base}/pipeline/${encodeURIComponent(folder)}${modeQuery}`)
+	}
+
+	async function openPicked() {
+		const name = pickedFolder.trim()
+		if (!name) return
+		await openExistingPipeline(name)
+	}
+</script>
+
+<div class="flex flex-col gap-6 w-full min-w-0">
+	<section class="flex flex-col gap-2">
+		<h3 class="text-xs font-semibold text-secondary uppercase tracking-wide">
+			Existing pipelines
+		</h3>
+		{#if pipelines.loading && !pipelines.current}
+			<div class="text-tertiary text-sm flex items-center gap-2">
+				<Loader2 size={14} class="animate-spin" />
+				Loading…
+			</div>
+		{:else if pipelines.error}
+			<div class="text-red-500 text-sm">Failed: {pipelines.error.message}</div>
+		{:else if visiblePipelines.length === 0}
+			<div class="text-tertiary text-sm">
+				{currentFolder
+					? 'No other pipelines in this workspace.'
+					: 'No pipelines yet. A pipeline is any folder whose scripts carry pipeline annotations.'}
+			</div>
+		{:else}
+			<div class="flex flex-col border rounded-md overflow-hidden max-h-64 overflow-y-auto">
+				{#each visiblePipelines as p (p.folder)}
+					<button
+						type="button"
+						class="flex items-center justify-between px-3 py-2 border-b last:border-b-0 bg-surface hover:bg-surface-hover transition-colors text-left"
+						onclick={() => openExistingPipeline(p.folder)}
+					>
+						<span class="font-mono text-sm">f/{p.folder}</span>
+						<span class="text-2xs text-tertiary">
+							{p.script_count}
+							{p.script_count === 1 ? 'script' : 'scripts'}
+						</span>
+					</button>
+				{/each}
+			</div>
+		{/if}
+	</section>
+
+	{#if !$userStore?.operator}
+		<!-- Operators only view existing pipelines — opening an arbitrary
+		     folder is a build-a-new-pipeline affordance. -->
+		<section class="flex flex-col gap-2">
+			<h3 class="text-xs font-semibold text-secondary uppercase tracking-wide">
+				Pick or create a folder
+			</h3>
+			<div class="flex items-center gap-2">
+				<div class="flex-1 min-w-0">
+					<FolderPicker bind:folderName={pickedFolder} />
+				</div>
+				<Button
+					variant="accent"
+					unifiedSize="sm"
+					disabled={!pickedFolder.trim()}
+					onclick={openPicked}
+					startIcon={{ icon: ArrowRight }}
+				>
+					Open
+				</Button>
+			</div>
+		</section>
+	{/if}
+</div>
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelinePickerModal.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelinePickerModal.svelte
index ded1013e25..b2183eec77 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelinePickerModal.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelinePickerModal.svelte
@@ -1,13 +1,6 @@
 <script lang="ts">
-	import { userStore, workspaceStore } from '$lib/stores'
-	import { base } from '$lib/base'
-	import { goto } from '$app/navigation'
-	import Button from '$lib/components/common/button/Button.svelte'
-	import FolderPicker from '$lib/components/FolderPicker.svelte'
 	import Modal from '$lib/components/common/modal/Modal.svelte'
-	import { AssetService, type ListPipelineFoldersResponse } from '$lib/gen'
-	import { resource } from 'runed'
-	import { ArrowRight, Loader2 } from 'lucide-svelte'
+	import PipelineFolderList from './PipelineFolderList.svelte'
 
 	interface Props {
 		open: boolean
@@ -20,90 +13,8 @@
 		mode?: 'view' | 'edit'
 	}
 	let { open = $bindable(), currentFolder = undefined, mode = 'view' }: Props = $props()
-
-	let pipelines = resource(
-		() => $workspaceStore,
-		async (ws) => {
-			if (!ws) return [] as ListPipelineFoldersResponse
-			return await AssetService.listPipelineFolders({ workspace: ws })
-		}
-	)
-
-	let pickedFolder = $state('')
-
-	let visiblePipelines = $derived(
-		(pipelines.current ?? []).filter((p) => p.folder !== currentFolder)
-	)
-
-	async function openExistingPipeline(folder: string) {
-		open = false
-		const modeQuery = mode !== 'view' ? `?mode=${mode}` : ''
-		await goto(`${base}/pipeline/${encodeURIComponent(folder)}${modeQuery}`)
-	}
-
-	async function openPicked() {
-		const name = pickedFolder.trim()
-		if (!name) return
-		await openExistingPipeline(name)
-	}
 </script>
 
 <Modal bind:open title="Open a pipeline">
-	<div class="flex flex-col gap-6 w-full min-w-0">
-		{#if visiblePipelines.length > 0 || pipelines.loading}
-			<section class="flex flex-col gap-2">
-				<h3 class="text-xs font-semibold text-secondary uppercase tracking-wide">
-					Existing pipelines
-				</h3>
-				{#if pipelines.loading && !pipelines.current}
-					<div class="text-tertiary text-sm flex items-center gap-2">
-						<Loader2 size={14} class="animate-spin" />
-						Loading…
-					</div>
-				{:else if pipelines.error}
-					<div class="text-red-500 text-sm">Failed: {pipelines.error.message}</div>
-				{:else}
-					<div class="flex flex-col border rounded-md overflow-hidden max-h-64 overflow-y-auto">
-						{#each visiblePipelines as p}
-							<button
-								type="button"
-								class="flex items-center justify-between px-3 py-2 border-b last:border-b-0 bg-surface hover:bg-surface-hover transition-colors text-left"
-								onclick={() => openExistingPipeline(p.folder)}
-							>
-								<span class="font-mono text-sm">f/{p.folder}</span>
-								<span class="text-2xs text-tertiary">
-									{p.script_count}
-									{p.script_count === 1 ? 'script' : 'scripts'}
-								</span>
-							</button>
-						{/each}
-					</div>
-				{/if}
-			</section>
-		{/if}
-
-		{#if !$userStore?.operator}
-			<!-- Operators only view existing pipelines — opening an arbitrary
-			     folder is a build-a-new-pipeline affordance. -->
-			<section class="flex flex-col gap-2">
-				<h3 class="text-xs font-semibold text-secondary uppercase tracking-wide">
-					Pick or create a folder
-				</h3>
-				<div class="flex items-center gap-2">
-					<div class="flex-1 min-w-0">
-						<FolderPicker bind:folderName={pickedFolder} />
-					</div>
-					<Button
-						variant="accent"
-						unifiedSize="sm"
-						disabled={!pickedFolder.trim()}
-						onclick={openPicked}
-						startIcon={{ icon: ArrowRight }}
-					>
-						Open
-					</Button>
-				</div>
-			</section>
-		{/if}
-	</div>
+	<PipelineFolderList {currentFolder} {mode} onOpen={() => (open = false)} />
 </Modal>
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte
index 98f598165e..ab36b4c1f7 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte
@@ -1,24 +1,20 @@
 <script lang="ts">
 	import { userStore } from '$lib/stores'
-	import Button from '$lib/components/common/button/Button.svelte'
-	import PipelinePickerModal from '$lib/components/assets/AssetGraph/PipelinePickerModal.svelte'
+	import PipelineFolderList from '$lib/components/assets/AssetGraph/PipelineFolderList.svelte'
 	import PipelineAlphaAckModal from '$lib/components/assets/AssetGraph/PipelineAlphaAckModal.svelte'
-	import { ArrowRight, NetworkIcon } from 'lucide-svelte'
+	import { BookOpen, NetworkIcon } from 'lucide-svelte'
 	import { onMount } from 'svelte'
 
 	const ACK_STORAGE_KEY = 'pipeline-alpha-ack'
 
-	// Gate the picker behind a one-time alpha acknowledgement. We read
+	// Gate the index behind a one-time alpha acknowledgement. We read
 	// localStorage in onMount (not at module scope) so SSR doesn't blow up.
 	let ackOpen = $state(false)
-	let pickerOpen = $state(false)
 
 	onMount(() => {
 		const acked =
 			typeof localStorage !== 'undefined' && localStorage.getItem(ACK_STORAGE_KEY) === 'true'
-		if (acked) {
-			pickerOpen = true
-		} else {
+		if (!acked) {
 			ackOpen = true
 		}
 	})
@@ -31,12 +27,11 @@
 			// flows through for this visit, the user just sees the modal again next time.
 		}
 		ackOpen = false
-		pickerOpen = true
 	}
 </script>
 
 <svelte:head>
-	<title>Pipeline editor — Windmill</title>
+	<title>Pipelines — Windmill</title>
 </svelte:head>
 
 <div class="flex flex-col h-full">
@@ -45,28 +40,42 @@
 	>
 		<div class="flex flex-row items-center gap-2">
 			<NetworkIcon size={16} class="text-tertiary shrink-0" />
-			<h1 class="text-sm font-semibold">
-				{$userStore?.operator ? 'Pipelines' : 'Pipeline editor'}
-			</h1>
-			<span class="text-xs text-tertiary">· no folder selected</span>
+			<h1 class="text-sm font-semibold">Pipelines</h1>
+			<span
+				class="text-2xs px-1.5 py-0.5 rounded font-semibold bg-emerald-100 text-emerald-700 dark:bg-emerald-900/40 dark:text-emerald-300"
+			>
+				Alpha
+			</span>
 		</div>
 	</div>
 
-	<div class="flex-1 min-h-0 relative bg-surface-secondary">
-		<div class="absolute inset-0 flex flex-col items-center justify-center gap-3 text-tertiary">
-			<NetworkIcon size={32} class="opacity-50" />
-			<span class="text-sm">Pick a folder to open its pipeline.</span>
-			<Button
-				variant="accent"
-				unifiedSize="sm"
-				onclick={() => (pickerOpen = true)}
-				startIcon={{ icon: ArrowRight }}
-			>
-				Choose a folder
-			</Button>
+	<div class="flex-1 min-h-0 overflow-y-auto bg-surface-secondary">
+		<div class="max-w-2xl mx-auto flex flex-col gap-6 px-4 py-8">
+			<div class="flex flex-col gap-2">
+				<h2 class="text-lg font-semibold">Data pipelines</h2>
+				<p class="text-sm text-tertiary">
+					Chain ingestion, transformation and materialization steps into an asset-aware graph.
+					{#if !$userStore?.operator}
+						Each pipeline lives in a folder: open one below, or pick a folder to start a new
+						pipeline.
+					{:else}
+						Open a pipeline below to view its graph and runs.
+					{/if}
+				</p>
+				<a
+					href="https://www.windmill.dev/docs/pipelines"
+					target="_blank"
+					rel="noreferrer"
+					class="text-xs text-blue-500 hover:underline inline-flex items-center gap-1"
+				>
+					<BookOpen size={12} />
+					Pipelines documentation
+				</a>
+			</div>
+
+			<PipelineFolderList />
 		</div>
 	</div>
 </div>
 
 <PipelineAlphaAckModal bind:open={ackOpen} onAck={handleAck} />
-<PipelinePickerModal bind:open={pickerOpen} />

From b92a86b8b3a60b877540c3a7f0ffefe36ccbb053 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 11:48:11 +0200
Subject: [PATCH 12/76] fix: polish pipeline graph view (layout, viewport,
 minimap, lineage, timestamps) (#9883)

* fix(frontend): keep pipeline graph layered when lineage has cycles

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): fit pipeline graph to visible canvas on initial load

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): style pipeline minimap so it reads as a minimap

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(parser): don't infer s3 reads from bare string-literal mentions in sql

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(duckdb): render temporal values as ISO strings in job results

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): key pipeline viewport fit on the loaded graph's folder

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(parser): treat list/named read-fn arguments as definitive s3 reads

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../src/asset_parser.rs                       | 220 ++++++++++++++++--
 .../windmill-duckdb-ffi-internal/src/lib.rs   | 114 ++++++++-
 .../assets/AssetGraph/AssetGraphCanvas.svelte |  50 +++-
 .../assets/AssetGraph/InitialFitView.svelte   |  30 +++
 .../AssetGraph/PipelineGraphEditor.svelte     |   9 +
 .../AssetGraph/assetGraphLayout.test.ts       |  40 +++-
 .../assets/AssetGraph/assetGraphLayout.ts     |  37 ++-
 .../sessions/PipelineEditorView.svelte        |  10 +
 .../(logged)/pipeline/[folder]/+page.svelte   |  11 +
 9 files changed, 482 insertions(+), 39 deletions(-)
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/InitialFitView.svelte

diff --git a/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs b/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs
index f7c578a274..c4f93efdb7 100644
--- a/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs
@@ -83,18 +83,56 @@ pub fn parse_assets(input: &str) -> anyhow::Result<ParseAssetsOutput> {
     // Body-inferred column lineage, with `// column` annotations taking
     // precedence per output column (explicit declaration overrides inference).
     pipeline.column_lineage = merge_column_lineage(inferred, pipeline.column_lineage);
-    Ok(ParseAssetsOutput::new(
-        merge_assets(collector.assets),
-        Vec::new(),
-        pipeline,
-    ))
+    // A bare string literal in query position is only weak read evidence: a
+    // summary `SELECT 's3:///out.csv' AS target` after `COPY … TO
+    // 's3:///out.csv'` must not turn the write into rw (which draws a
+    // spurious read edge and an asset⇄script cycle in the pipeline graph).
+    // Surface weak reads only for assets with no other recorded usage, so a
+    // path that is *merely* mentioned still shows up linked to the script.
+    let mut assets = merge_assets(collector.assets);
+    for weak in merge_assets(collector.weak_string_reads) {
+        if !assets
+            .iter()
+            .any(|a| a.kind == weak.kind && a.path == weak.path)
+        {
+            assets.push(weak);
+        }
+    }
+    assets.sort_by(|a, b| a.path.cmp(&b.path));
+    Ok(ParseAssetsOutput::new(assets, Vec::new(), pipeline))
+}
+
+/// Provenance of the innermost access context. The access type alone can't
+/// tell a definitive read apart from a mere mention: a bare string literal in
+/// generic query position (`QueryRead`) is only *weak* read evidence — e.g. a
+/// summary `SELECT 's3:///out.csv' AS target` echoing a path — while the same
+/// literal as a read-function argument or a `COPY` target is definitive.
+#[derive(Clone, Copy, PartialEq, Eq)]
+enum AccessCtx {
+    QueryRead,
+    ReadFn,
+    CopyWrite,
+}
+
+impl AccessCtx {
+    fn access_type(self) -> AssetUsageAccessType {
+        match self {
+            AccessCtx::QueryRead | AccessCtx::ReadFn => R,
+            AccessCtx::CopyWrite => W,
+        }
+    }
 }
 
 /// Visitor that collects S3 asset literals from SQL statements
 struct AssetCollector {
     assets: Vec<ParseAssetsResult>,
-    // e.g set to Read when we are inside a SELECT ... FROM ... statement
-    current_access_type_stack: Vec<AssetUsageAccessType>,
+    // Bare string literals seen in generic query position — weak read
+    // evidence, surfaced by `parse_assets` only when the script has no other
+    // recorded usage of the same asset (a real write must not gain a spurious
+    // read edge from a mention).
+    weak_string_reads: Vec<ParseAssetsResult>,
+    // e.g set to QueryRead when we are inside a SELECT ... FROM ... statement
+    current_access_type_stack: Vec<AccessCtx>,
     // e.g ATTACH 'ducklake://a' AS dl; => { "dl": (Ducklake, "a") }
     var_identifiers: BTreeMap<String, (AssetKind, String)>,
     // e.g USE dl;
@@ -119,6 +157,7 @@ impl AssetCollector {
     fn new() -> Self {
         Self {
             assets: Vec::new(),
+            weak_string_reads: Vec::new(),
             current_access_type_stack: Vec::with_capacity(8),
             var_identifiers: BTreeMap::new(),
             currently_used_asset: None,
@@ -162,7 +201,11 @@ impl AssetCollector {
         name: &ObjectName,
         access_type: Option<AssetUsageAccessType>,
     ) -> Option<ParseAssetsResult> {
-        let access_type = access_type.or_else(|| self.current_access_type_stack.last().copied());
+        let access_type = access_type.or_else(|| {
+            self.current_access_type_stack
+                .last()
+                .map(|c| c.access_type())
+        });
         if let Some((kind, path)) = &self.currently_used_asset {
             // We don't want to infer that any simple identifier refers to an asset if
             // we are not in a known R/W context
@@ -301,12 +344,18 @@ impl AssetCollector {
         // Check if the string matches our asset syntax patterns
         if let Some((kind, path)) = parse_asset_syntax(s, false) {
             if kind == AssetKind::S3Object {
-                self.assets.push(ParseAssetsResult {
+                let ctx = self.current_access_type_stack.last().copied();
+                let result = ParseAssetsResult {
                     kind,
                     path: path.to_string(),
-                    access_type: self.current_access_type_stack.last().copied(),
+                    access_type: ctx.map(AccessCtx::access_type),
                     columns: None,
-                });
+                };
+                if ctx == Some(AccessCtx::QueryRead) {
+                    self.weak_string_reads.push(result);
+                } else {
+                    self.assets.push(result);
+                }
             }
         }
     }
@@ -314,7 +363,7 @@ impl AssetCollector {
     fn handle_obj_name_pre(&mut self, name: &ObjectName) {
         if let Some(fname) = get_trivial_obj_name(name) {
             if is_read_fn(fname) {
-                self.current_access_type_stack.push(R);
+                self.current_access_type_stack.push(AccessCtx::ReadFn);
             }
         }
         if let Some(str_lit) = get_str_lit_from_obj_name(name) {
@@ -691,9 +740,20 @@ impl Visitor for AssetCollector {
         match table_factor {
             TableFactor::Table { name, args, .. } => {
                 if args.is_none() {
-                    // Avoid Table Functions
-                    self.handle_obj_name_pre(name);
+                    // FROM 's3:///…' is a definitive read — record it directly
+                    // so it isn't demoted to a weak in-query mention.
+                    if let Some(asset) = self.get_s3_asset_from_str_literal_table(table_factor) {
+                        self.assets.push(asset);
+                    }
                 }
+                // For a read-function table factor this pushes ReadFn, making
+                // every literal inside its arguments a definitive read — the
+                // direct form (read_csv('s3:///…')) but also list and named
+                // arguments (read_parquet(['s3:///…'])). Must run for BOTH the
+                // plain-table and table-function branches: post_visit_table_factor
+                // pops via handle_obj_name_post unconditionally, so skipping the
+                // push here would unbalance the stack.
+                self.handle_obj_name_pre(name);
             }
             _ => {}
         }
@@ -719,6 +779,13 @@ impl Visitor for AssetCollector {
             Expr::Value(ValueWithSpan { value: Value::DoubleQuotedString(s), .. }) => {
                 self.handle_string_literal(s);
             }
+            // Read-function call in expression position: its argument literals
+            // are definitive reads. Balances the pop in `post_visit_expr`.
+            Expr::Function(func) => {
+                if get_trivial_obj_name(&func.name).is_some_and(is_read_fn) {
+                    self.current_access_type_stack.push(AccessCtx::ReadFn);
+                }
+            }
             _ => {}
         }
         std::ops::ControlFlow::Continue(())
@@ -946,7 +1013,7 @@ impl Visitor for AssetCollector {
             }
 
             sqlparser::ast::Statement::Copy { target: CopyTarget::File { filename }, .. } => {
-                self.current_access_type_stack.push(W);
+                self.current_access_type_stack.push(AccessCtx::CopyWrite);
                 self.handle_string_literal(filename);
                 self.current_access_type_stack.pop();
             }
@@ -1013,7 +1080,7 @@ impl Visitor for AssetCollector {
         &mut self,
         query: &sqlparser::ast::Query,
     ) -> std::ops::ControlFlow<Self::Break> {
-        self.current_access_type_stack.push(R);
+        self.current_access_type_stack.push(AccessCtx::QueryRead);
         self.cte_name_stack.push(collect_cte_names(query));
         std::ops::ControlFlow::Continue(())
     }
@@ -1098,6 +1165,127 @@ mod tests {
         );
     }
 
+    #[test]
+    fn test_copy_target_echoed_in_select_stays_write_only() {
+        // The trailing summary SELECT merely mentions the COPY target — it
+        // must not add a read (rw would draw an asset⇄script cycle).
+        let input = r#"
+            COPY (SELECT 1 AS x) TO 's3:///out.csv';
+            SELECT 's3:///out.csv' AS target, 42 AS rows_written;
+        "#;
+        let s = parse_assets(input).map(|s| s.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "/out.csv".to_string(),
+                access_type: Some(W),
+                columns: None
+            }])
+        );
+    }
+
+    #[test]
+    fn test_bare_string_mention_without_other_usage_is_a_read() {
+        let input = r#"
+            SELECT 's3:///referenced.csv' AS path;
+        "#;
+        let s = parse_assets(input).map(|s| s.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "/referenced.csv".to_string(),
+                access_type: Some(R),
+                columns: None
+            }])
+        );
+    }
+
+    #[test]
+    fn test_self_refresh_read_fn_plus_copy_stays_rw() {
+        // A definitive read (read_csv) of the same file the script rewrites
+        // is a real rw — only *bare-literal* mentions are demoted.
+        let input = r#"
+            CREATE TABLE tmp AS SELECT * FROM read_csv('s3:///data.csv');
+            COPY (SELECT * FROM tmp) TO 's3:///data.csv';
+        "#;
+        let s = parse_assets(input).map(|s| s.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "/data.csv".to_string(),
+                access_type: Some(RW),
+                columns: None
+            }])
+        );
+    }
+
+    #[test]
+    fn test_read_fn_list_arg_plus_copy_stays_rw() {
+        // read_parquet's list form is as definitive as the direct literal —
+        // it must not be demoted to a weak mention when the file is rewritten.
+        let input = r#"
+            CREATE TABLE tmp AS SELECT * FROM read_parquet(['s3:///data.parquet']);
+            COPY (SELECT * FROM tmp) TO 's3:///data.parquet';
+        "#;
+        let s = parse_assets(input).map(|s| s.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "/data.parquet".to_string(),
+                access_type: Some(RW),
+                columns: None
+            }])
+        );
+    }
+
+    #[test]
+    fn test_read_fn_list_arg_multiple_files_are_reads() {
+        let input = r#"
+            SELECT * FROM read_parquet(['s3:///a.parquet', 's3:///b.parquet']);
+        "#;
+        let s = parse_assets(input).map(|s| s.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "/a.parquet".to_string(),
+                    access_type: Some(R),
+                    columns: None
+                },
+                ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "/b.parquet".to_string(),
+                    access_type: Some(R),
+                    columns: None
+                }
+            ])
+        );
+    }
+
+    #[test]
+    fn test_from_string_literal_of_written_file_stays_rw() {
+        // FROM-position string literal is likewise a definitive read.
+        let input = r#"
+            CREATE TABLE tmp AS SELECT * FROM 's3:///data.parquet';
+            COPY (SELECT * FROM tmp) TO 's3:///data.parquet';
+        "#;
+        let s = parse_assets(input).map(|s| s.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "/data.parquet".to_string(),
+                access_type: Some(RW),
+                columns: None
+            }])
+        );
+    }
+
     #[test]
     fn test_sql_asset_parser_attach_no_usage_is_registered_as_unknown() {
         let input = r#"
diff --git a/backend/windmill-duckdb-ffi-internal/src/lib.rs b/backend/windmill-duckdb-ffi-internal/src/lib.rs
index f3ee59cab7..054f892220 100644
--- a/backend/windmill-duckdb-ffi-internal/src/lib.rs
+++ b/backend/windmill-duckdb-ffi-internal/src/lib.rs
@@ -635,7 +635,9 @@ fn duckdb_value_to_json_value(
                 .ok_or_else(|| "Could not convert to f64".to_string())?,
         ),
         duckdb::types::Value::Decimal(d) => serde_json::Value::String(d.to_string()),
-        duckdb::types::Value::Timestamp(_, ts) => serde_json::Value::String(ts.to_string()),
+        duckdb::types::Value::Timestamp(unit, ts) => {
+            serde_json::Value::String(duckdb_timestamp_to_iso(unit, ts))
+        }
         duckdb::types::Value::Text(s) if type_alias.as_deref().unwrap_or_default() == "JSON" => {
             serde_json::from_str(&s)
                 .map_err(|e| format!("Error parsing JSON text: {}", e.to_string()))?
@@ -646,8 +648,15 @@ fn duckdb_value_to_json_value(
                 .map(|byte| serde_json::Value::Number(byte.into()))
                 .collect(),
         ),
-        duckdb::types::Value::Date32(d) => serde_json::Value::Number(d.into()),
-        duckdb::types::Value::Time64(_, t) => serde_json::Value::String(t.to_string()),
+        duckdb::types::Value::Date32(d) => {
+            match chrono::DateTime::from_timestamp(i64::from(d) * 86_400, 0) {
+                Some(dt) => serde_json::Value::String(dt.date_naive().to_string()),
+                None => serde_json::Value::Number(d.into()),
+            }
+        }
+        duckdb::types::Value::Time64(unit, t) => {
+            serde_json::Value::String(duckdb_time_to_iso(unit, t).unwrap_or_else(|| t.to_string()))
+        }
         duckdb::types::Value::Interval { months, days, nanos } => serde_json::json!({
             "months": months,
             "days": days,
@@ -688,6 +697,105 @@ fn duckdb_value_to_json_value(
     Ok(json_value)
 }
 
+// DuckDB surfaces TIMESTAMP[_S/_MS/_NS] values as a raw count since the epoch;
+// stringifying that count leaks values like "1782974022218435" into job
+// results. Render ISO-8601 instead (the Postgres executor's
+// "2024-01-15T10:30:00" shape); a count outside chrono's representable range
+// falls back to the raw number.
+fn duckdb_timestamp_to_iso(unit: duckdb::types::TimeUnit, ts: i64) -> String {
+    let dt = match unit {
+        duckdb::types::TimeUnit::Second => chrono::DateTime::from_timestamp(ts, 0),
+        duckdb::types::TimeUnit::Millisecond => chrono::DateTime::from_timestamp_millis(ts),
+        duckdb::types::TimeUnit::Microsecond => chrono::DateTime::from_timestamp_micros(ts),
+        duckdb::types::TimeUnit::Nanosecond => Some(chrono::DateTime::from_timestamp_nanos(ts)),
+    };
+    dt.map(|dt| dt.naive_utc().format("%Y-%m-%dT%H:%M:%S%.f").to_string())
+        .unwrap_or_else(|| ts.to_string())
+}
+
+// Same story for TIME: a raw count since midnight. None when out of range
+// (caller falls back to the raw number).
+fn duckdb_time_to_iso(unit: duckdb::types::TimeUnit, t: i64) -> Option<String> {
+    let (secs, nanos) = match unit {
+        duckdb::types::TimeUnit::Second => (t, 0),
+        duckdb::types::TimeUnit::Millisecond => (t / 1_000, (t % 1_000) * 1_000_000),
+        duckdb::types::TimeUnit::Microsecond => (t / 1_000_000, (t % 1_000_000) * 1_000),
+        duckdb::types::TimeUnit::Nanosecond => (t / 1_000_000_000, t % 1_000_000_000),
+    };
+    chrono::NaiveTime::from_num_seconds_from_midnight_opt(
+        u32::try_from(secs).ok()?,
+        u32::try_from(nanos).ok()?,
+    )
+    .map(|t| t.format("%H:%M:%S%.f").to_string())
+}
+
+#[cfg(test)]
+mod temporal_json_tests {
+    use super::*;
+    use duckdb::types::TimeUnit;
+
+    #[test]
+    fn timestamp_micros_renders_iso() {
+        // 2026-07-01 23:13:42.218435 UTC
+        assert_eq!(
+            duckdb_timestamp_to_iso(TimeUnit::Microsecond, 1_782_947_622_218_435),
+            "2026-07-01T23:13:42.218435"
+        );
+    }
+
+    #[test]
+    fn timestamp_seconds_renders_iso_without_subseconds() {
+        assert_eq!(
+            duckdb_timestamp_to_iso(TimeUnit::Second, 1_735_689_600),
+            "2025-01-01T00:00:00"
+        );
+    }
+
+    #[test]
+    fn out_of_range_timestamp_falls_back_to_raw() {
+        assert_eq!(
+            duckdb_timestamp_to_iso(TimeUnit::Second, i64::MAX),
+            i64::MAX.to_string()
+        );
+    }
+
+    #[test]
+    fn time_micros_renders_iso() {
+        assert_eq!(
+            duckdb_time_to_iso(TimeUnit::Microsecond, 37_800_500_000).as_deref(),
+            Some("10:30:00.500")
+        );
+    }
+
+    #[test]
+    fn temporal_values_render_iso_through_real_query() {
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        let mut stmt = conn
+            .prepare(
+                "SELECT TIMESTAMP '2026-07-01 23:13:42.218435' AS ts,
+                        TIMESTAMPTZ '2026-07-01 23:13:42+00' AS tstz,
+                        TIMESTAMP_NS '2026-07-01 23:13:42.218435678' AS ts_ns,
+                        DATE '2026-07-01' AS d,
+                        TIME '10:30:00' AS t",
+            )
+            .unwrap();
+        let mut rows = stmt.query([]).unwrap();
+        let row = rows.next().unwrap().unwrap();
+        let json_of = |i: usize| {
+            let v: duckdb::types::Value = row.get(i).unwrap();
+            duckdb_value_to_json_value(v, &None).unwrap()
+        };
+        assert_eq!(json_of(0), serde_json::json!("2026-07-01T23:13:42.218435"));
+        assert_eq!(json_of(1), serde_json::json!("2026-07-01T23:13:42"));
+        assert_eq!(
+            json_of(2),
+            serde_json::json!("2026-07-01T23:13:42.218435678")
+        );
+        assert_eq!(json_of(3), serde_json::json!("2026-07-01"));
+        assert_eq!(json_of(4), serde_json::json!("10:30:00"));
+    }
+}
+
 fn json_value_to_duckdb_value(
     json_value: &serde_json::Value,
     arg_type: &str,
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index 153d7c2965..6851fc843a 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -16,6 +16,7 @@
 	import DataTestNode from './DataTestNode.svelte'
 	import AssetGraphEdge from './AssetGraphEdge.svelte'
 	import PanToNode from './PanToNode.svelte'
+	import InitialFitView from './InitialFitView.svelte'
 	import { layoutAssetGraph } from './assetGraphLayout'
 	import { buildDownstreamMap } from './graphTraversal'
 	import { buildLineageDownstreamMap } from './boundedCascade'
@@ -162,6 +163,10 @@
 		/** Hide the minimap when the canvas is too narrow for it to be worth the
 		 * space (e.g. stacked layout in a side panel). Defaults to shown. */
 		showMinimap?: boolean
+		/** Identity of the displayed graph (e.g. the pipeline folder). The
+		 * initial viewport fit re-arms when it changes, so switching folders
+		 * in-place gets a fresh fit. */
+		viewportFitKey?: string
 	}
 	let {
 		graph,
@@ -188,7 +193,8 @@
 		onStartBoundedRun,
 		boundPick,
 		onPickEnd,
-		showMinimap = true
+		showMinimap = true,
+		viewportFitKey = ''
 	}: Props = $props()
 
 	// `${kind}:${path}` ids for the hovered / pinned runs (both script and flow
@@ -677,11 +683,27 @@
 	// edges + paths → same layout. Renames *do* change the layout for
 	// the renamed entry, since its id moves in the sort, but that's
 	// expected: a rename is a path change, which is part of the input.
+	// A script with rw access to an asset yields both a write (script → asset)
+	// and a read/trigger (asset → script) edge — a 2-cycle. The layout resolves
+	// it producer-above-asset by omitting the backward direction from its
+	// input; the rendered edges are untouched (both arrows still drawn).
+	let writeEdgePairs = $derived(
+		new Set(
+			model.edges.filter((e) => e.kind === 'lineage-write').map((e) => `${e.source}\n${e.target}`)
+		)
+	)
 	let layoutInput = $derived({
 		nodes: model.nodes
 			.map((n) => ({ id: n.id, data: n.data }))
 			.sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0)),
 		edges: model.edges
+			.filter(
+				(e) =>
+					!(
+						(e.kind === 'lineage-read' || e.kind === 'trigger-asset') &&
+						writeEdgePairs.has(`${e.target}\n${e.source}`)
+					)
+			)
 			.map((e) => ({ source: e.source, target: e.target }))
 			.sort((a, b) =>
 				a.source === b.source
@@ -1023,21 +1045,35 @@
 		--background-color={false}
 	>
 		<div class="absolute inset-0 !bg-surface-secondary h-full"></div>
+		<InitialFitView {nodes} fitKey={viewportFitKey} />
 		<PanToNode targetId={panToNodeId} {nodes} />
 		<Controls position="top-right" orientation="horizontal" showLock={false} class="!mr-10" />
 		{#if showMinimap}
+			<!-- Node hues mirror the canvas: blue asset cards, amber triggers,
+			     bordered neutral script cards. Visible strokes + rounded corners +
+			     a bordered container + the outlined viewport mask are what make
+			     this read as a minimap instead of a loading skeleton. -->
 			<MiniMap
 				pannable
 				zoomable
-				class="!bg-surface !mb-10"
+				class="!bg-surface !mb-10 rounded-md border border-gray-200 dark:border-gray-700 shadow-sm overflow-hidden"
+				nodeBorderRadius={12}
+				nodeStrokeWidth={6}
 				nodeColor={(n) =>
 					n.type === 'asset'
-						? 'rgb(96 165 250 / 0.5)'
+						? 'rgb(59 130 246 / 0.3)'
 						: n.type === 'trigger'
-							? 'rgb(251 191 36 / 0.5)'
-							: 'rgb(52 211 153 / 0.5)'}
-				nodeStrokeColor="transparent"
-				maskColor="rgb(0 0 0 / 0.2)"
+							? 'rgb(245 158 11 / 0.3)'
+							: 'rgb(148 163 184 / 0.15)'}
+				nodeStrokeColor={(n) =>
+					n.type === 'asset'
+						? 'rgb(59 130 246 / 0.8)'
+						: n.type === 'trigger'
+							? 'rgb(245 158 11 / 0.8)'
+							: 'rgb(100 116 139 / 0.7)'}
+				maskColor="rgb(100 116 139 / 0.12)"
+				maskStrokeColor="rgb(59 130 246 / 0.5)"
+				maskStrokeWidth={4}
 			/>
 		{/if}
 	</SvelteFlow>
diff --git a/frontend/src/lib/components/assets/AssetGraph/InitialFitView.svelte b/frontend/src/lib/components/assets/AssetGraph/InitialFitView.svelte
new file mode 100644
index 0000000000..eea1fb306d
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/InitialFitView.svelte
@@ -0,0 +1,30 @@
+<script lang="ts">
+	import { useNodesInitialized, useSvelteFlow, type Node } from '@xyflow/svelte'
+
+	// One-shot initial fit of the viewport to the laid-out graph. The graph
+	// arrives async after the canvas mounts (the first render often holds only
+	// the + node), so SvelteFlow's own init-time `fitView` prop would fit the
+	// wrong content — instead wait for the first real node set to be measured.
+	// `maxZoom: 1` means small graphs are centered at natural scale and only
+	// oversized ones zoom out. Lives inside <SvelteFlow> so useSvelteFlow()
+	// has the flow context (same pattern as PanToNode).
+	//
+	// `fitKey` re-arms the fit when it changes: the in-app folder switcher
+	// swaps the whole graph without remounting the canvas, and the new
+	// pipeline deserves its own initial fit.
+	let { nodes, fitKey = '' }: { nodes: Node[]; fitKey?: string } = $props()
+
+	const { fitView } = useSvelteFlow()
+	const nodesInitialized = useNodesInitialized()
+
+	let fittedFor: string | undefined = $state(undefined)
+	$effect(() => {
+		if (fittedFor === fitKey) return
+		// useNodesInitialized flips false while any node is unmeasured, so by
+		// the time it's true again the fresh nodes have real dimensions.
+		if (!nodesInitialized.current) return
+		if (!nodes.some((n) => n.type !== 'add')) return
+		fittedFor = fitKey
+		void fitView({ padding: 0.1, maxZoom: 1 })
+	})
+</script>
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
index 33d44eb7a4..8dca18bd8e 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
@@ -31,6 +31,7 @@
 		mode,
 		workspace,
 		folder,
+		viewportFitKey = undefined,
 		stackBelow = 680,
 		persistDrafts = false,
 		pathPrefix,
@@ -95,6 +96,13 @@
 		workspace: string | undefined
 		/** Folder the pipeline is scoped to — drives the autosave draft path. */
 		folder: string
+		/** Folder whose graph is actually *loaded* (not the route param). On an
+		 * in-place folder switch the stale graph stays rendered while the new
+		 * fetch is in flight, so keying the canvas's one-shot initial fit on
+		 * `folder` would consume the new folder's fit on the old graph. Pages
+		 * that stale-while-revalidate should pass the folder captured when the
+		 * fetch resolved; defaults to `folder`. */
+		viewportFitKey?: string
 		/** Below this container width (px) the graph/details split stacks
 		 * vertically instead of side-by-side — for narrow side panels / AI
 		 * session previews. Defaults to 680. */
@@ -433,6 +441,7 @@
 					{onPickEnd}
 					{panToNodeId}
 					showMinimap={!stacked}
+					viewportFitKey={viewportFitKey ?? folder}
 				/>
 				{#if boundBar}{@render boundBar()}{/if}
 				{#if mode === 'edit'}
diff --git a/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.test.ts b/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.test.ts
index a5a92f61c2..24e7d4c2da 100644
--- a/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.test.ts
@@ -38,7 +38,14 @@ describe('layoutAssetGraph (tidy-tree with join breaks)', () => {
 		// stays strictly left of every node of the right branch.
 		const pos = layoutAssetGraph({
 			nodes: [n('root'), n('a'), n('b'), n('a1'), n('a2'), n('a3'), n('b1')],
-			edges: [e('root', 'a'), e('root', 'b'), e('a', 'a1'), e('a', 'a2'), e('a', 'a3'), e('b', 'b1')]
+			edges: [
+				e('root', 'a'),
+				e('root', 'b'),
+				e('a', 'a1'),
+				e('a', 'a2'),
+				e('a', 'a3'),
+				e('b', 'b1')
+			]
 		})
 		const leftMax = Math.max(...['a', 'a1', 'a2', 'a3'].map((id) => pos.get(id)!.x))
 		const rightMin = Math.min(...['b', 'b1'].map((id) => pos.get(id)!.x))
@@ -83,14 +90,37 @@ describe('layoutAssetGraph (tidy-tree with join breaks)', () => {
 		}
 	})
 
-	it('falls back to a grid on cyclic input', () => {
+	it('lays a 2-cycle out as a chain (feedback edge dropped, no grid)', () => {
 		const pos = layoutAssetGraph({
 			nodes: [n('a'), n('b')],
 			edges: [e('a', 'b'), e('b', 'a')]
 		})
-		expect(pos.size).toBe(2)
-		expect(pos.get('a')).toBeDefined()
-		expect(pos.get('b')).toBeDefined()
+		// First-in-input wins the top slot; the b→a feedback edge is ignored.
+		expect(pos.get('a')!.y).toBeLessThan(pos.get('b')!.y)
+		expect(pos.get('a')!.x).toBe(pos.get('b')!.x)
+	})
+
+	it('keeps the acyclic part of a graph layered when one cycle exists', () => {
+		// root → a ⇄ b → leaf: the a⇄b cycle must not degrade root/leaf layering.
+		const pos = layoutAssetGraph({
+			nodes: [n('root'), n('a'), n('b'), n('leaf')],
+			edges: [e('root', 'a'), e('a', 'b'), e('b', 'a'), e('b', 'leaf')]
+		})
+		expect(pos.get('root')!.y).toBeLessThan(pos.get('a')!.y)
+		expect(pos.get('a')!.y).toBeLessThan(pos.get('b')!.y)
+		expect(pos.get('b')!.y).toBeLessThan(pos.get('leaf')!.y)
+		// A linear chain stays in one column.
+		expect(new Set(['root', 'a', 'b', 'leaf'].map((id) => pos.get(id)!.x)).size).toBe(1)
+	})
+
+	it('handles a longer cycle without dropping nodes', () => {
+		const pos = layoutAssetGraph({
+			nodes: [n('a'), n('b'), n('c')],
+			edges: [e('a', 'b'), e('b', 'c'), e('c', 'a')]
+		})
+		expect(pos.size).toBe(3)
+		const ys = ['a', 'b', 'c'].map((id) => pos.get(id)!.y)
+		expect(new Set(ys).size).toBe(3)
 	})
 
 	it('packs disjoint components side by side without overlap', () => {
diff --git a/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.ts b/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.ts
index cf55db6e0a..c9d7d60355 100644
--- a/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/assetGraphLayout.ts
@@ -53,8 +53,8 @@ interface Band {
 //
 // y comes from longest-path layering (same top-down orientation as before:
 // producers above, assets in the middle, consumers below). Returns positions
-// (band centers) normalized so the component's min x,y = 0. Throws on cyclic
-// input (caller falls back to a grid for the whole graph).
+// (band centers) normalized so the component's min x,y = 0. Cyclic input is
+// handled by dropping feedback edges (see the Kahn step below).
 function layoutComponent(
 	nodes: GraphInput['nodes'],
 	edges: GraphInput['edges']
@@ -76,21 +76,42 @@ function layoutComponent(
 		if (!parents.get(e.target)!.includes(e.source)) parents.get(e.target)!.push(e.source)
 	}
 
-	// Kahn topological order — also the cycle guard.
+	// Kahn topological order. Cycles don't abort the layout: when the queue
+	// drains with nodes left, the unplaced node with the fewest outstanding
+	// parents (first in input order on ties) is forced into the order and its
+	// not-yet-placed parent edges are dropped as feedback edges — layering and
+	// tree-building then operate on the resulting DAG while the rendered graph
+	// keeps every edge. (The caller already resolves write⇄read 2-cycles by
+	// omitting the read direction; this handles any longer cycle.)
 	const indeg = new Map<string, number>()
 	for (const n of nodes) indeg.set(n.id, parents.get(n.id)!.length)
 	const queue = nodes.filter((n) => indeg.get(n.id) === 0).map((n) => n.id)
+	const placed = new Set<string>()
 	const topo: string[] = []
-	while (queue.length) {
+	while (topo.length < nodes.length) {
+		if (queue.length === 0) {
+			let pick: string | undefined
+			for (const n of nodes) {
+				if (placed.has(n.id)) continue
+				if (pick === undefined || indeg.get(n.id)! < indeg.get(pick)!) pick = n.id
+			}
+			parents.set(
+				pick!,
+				parents.get(pick!)!.filter((p) => placed.has(p))
+			)
+			queue.push(pick!)
+		}
 		const cur = queue.shift()!
+		if (placed.has(cur)) continue
+		placed.add(cur)
 		topo.push(cur)
 		for (const c of children.get(cur)!) {
+			if (placed.has(c)) continue
 			const d = indeg.get(c)! - 1
 			indeg.set(c, d)
 			if (d === 0) queue.push(c)
 		}
 	}
-	if (topo.length !== nodes.length) throw new Error('cyclic asset graph')
 
 	// Longest-path layering: a node sits one layer below its lowest parent.
 	const layer = new Map<string, number>()
@@ -141,8 +162,7 @@ function layoutComponent(
 		out.set(id, { x: left + w / 2, y: layer.get(id)! * LAYER_H })
 		const kids = treeChildren.get(id)!
 		if (kids.length === 0) return
-		const kidsW =
-			kids.reduce((acc, k) => acc + W.get(k)!, 0) + SIBLING_GAP * (kids.length - 1)
+		const kidsW = kids.reduce((acc, k) => acc + W.get(k)!, 0) + SIBLING_GAP * (kids.length - 1)
 		let cursor = left + (w - kidsW) / 2
 		for (const k of kids) {
 			placeTree(k, cursor)
@@ -221,7 +241,8 @@ function layoutComponent(
 // disjoint components, so it's excluded from component detection and instead
 // re-placed centered one layer above the whole packed graph.
 //
-// Falls back to a stable grid if the component layout throws (cyclic inputs).
+// Falls back to a stable grid if the component layout throws (defensive —
+// cycles are already absorbed by feedback-edge dropping in layoutComponent).
 export function layoutAssetGraph(graph: GraphInput, anchorId?: string): Map<string, Positioned> {
 	const byId = new Map<string, Positioned>()
 	if (graph.nodes.length === 0) return byId
diff --git a/frontend/src/lib/components/sessions/PipelineEditorView.svelte b/frontend/src/lib/components/sessions/PipelineEditorView.svelte
index e0578ae139..0e3be64e36 100644
--- a/frontend/src/lib/components/sessions/PipelineEditorView.svelte
+++ b/frontend/src/lib/components/sessions/PipelineEditorView.svelte
@@ -75,6 +75,15 @@
 			workspace && folder ? await AssetService.getAssetsGraph({ workspace, folder }) : EMPTY_GRAPH
 	)
 
+	// Folder whose graph is actually rendered — `graphRes.current` is stale-
+	// while-revalidate on a folder retarget, so the canvas's one-shot initial
+	// fit is keyed on the folder captured when a graph lands, not on `path`
+	// (same rationale as the pipeline route page).
+	let viewportFitFolder = $state('')
+	$effect(() => {
+		if (graphRes.current) untrack(() => (viewportFitFolder = path))
+	})
+
 	// Deployed graph + the in-flight draft overlay (AI-built nodes render as plain
 	// dashed unsaved drafts, same as manual drafts). The session
 	// skips the route page's folder-wide asset prefetch (empty inferred maps); the
@@ -304,6 +313,7 @@
 			<PipelineGraphEditor
 				editor={pe}
 				folder={path}
+				viewportFitKey={viewportFitFolder}
 				persistDrafts={true}
 				displayGraph={resolvedGraph}
 				mode="edit"
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index 8136601d18..47b4bf6abc 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -1867,6 +1867,16 @@
 		}
 	)
 
+	// Folder whose graph is actually rendered. `graphRes.current` is stale-
+	// while-revalidate on an in-place folder switch, so keying the canvas's
+	// one-shot initial fit on the route param would fire the new folder's fit
+	// on the old graph and leave the fresh one unfitted. `folder` is read
+	// untracked: the key must move only when a graph lands.
+	let viewportFitFolder = $state('')
+	$effect(() => {
+		if (graphRes.current) untrack(() => (viewportFitFolder = folder))
+	})
+
 	// Body / inferred-assets prefetch sweep. Watches `g.runnables`; for any
 	// non-draft path we haven't fetched yet, fetches `getScriptByPath` and
 	// `inferAssets`, and stores both in their respective only-add caches.
@@ -2121,6 +2131,7 @@
 			<PipelineGraphEditor
 				editor={pe}
 				{folder}
+				viewportFitKey={viewportFitFolder}
 				persistDrafts={true}
 				{displayGraph}
 				{mode}

From 9c758df5eb1bbb4961eb0f73f7d2d3d882d53e31 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 11:58:31 +0200
Subject: [PATCH 13/76] reserve more fixed height for unsaved-changes banner to
 avoid content shift (#9873)

* fix(frontend): reserve fixed height for unsaved-changes banner to avoid content shift

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): remove border around reserved banner slot and shrink it

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): tighten top padding under the unsaved-changes banner

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): give unsaved-changes banner buttons minimal vertical breathing room

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* refactor(frontend): drop redundant Metadata section title in trigger and script editors

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): tuck schedule editor labels under summary to match convention

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* revert(frontend): keep Metadata section title in ScriptBuilder for a separate PR

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): drop leftover header-content margin on headless Section

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): drop top padding above resource editor first field

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* style(frontend): match variable editor bottom padding to resource

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): add Path label in new resource form to match edit

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): reserve half the banner height to halve the idle gap

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): reserve a third of the banner height when idle

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): don't reserve banner slot or tighten top for new entities

Gate the reserved-height slot and the tight content top padding on the banner's baseline (bannerReserved) instead of merely on the banner snippet being present, so new-entity drawers keep normal top spacing and add no empty slot.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs(frontend): trim banner comments to the 4-line invariant limit

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs(frontend): describe partial-reserve banner behavior accurately

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../src/lib/components/AppConnectInner.svelte | 32 ++++---
 .../lib/components/LocalDraftBanner.svelte    | 91 +++++++++++--------
 .../src/lib/components/ResourceEditor.svelte  |  2 +-
 .../components/ResourceEditorDrawer.svelte    |  2 +
 frontend/src/lib/components/Section.svelte    |  2 +-
 .../src/lib/components/VariableEditor.svelte  |  4 +-
 .../common/drawer/DrawerContent.svelte        | 44 ++++++---
 .../azure/AzureTriggerEditorInner.svelte      |  2 +
 .../email/EmailTriggerEditorInner.svelte      |  4 +-
 .../triggers/gcp/GcpTriggerEditorInner.svelte |  2 +
 .../triggers/http/RouteEditorInner.svelte     |  4 +-
 .../kafka/KafkaTriggerEditorInner.svelte      |  2 +
 .../mqtt/MqttTriggerEditorInner.svelte        |  2 +
 .../native/NativeTriggerEditor.svelte         |  2 +-
 .../nats/NatsTriggerEditorInner.svelte        |  2 +
 .../PostgresTriggerEditorInner.svelte         |  2 +
 .../schedules/ScheduleEditorInner.svelte      |  6 +-
 .../triggers/sqs/SqsTriggerEditorInner.svelte |  2 +
 .../triggers/useTriggerDraftSync.svelte.ts    | 12 +++
 .../WebsocketTriggerEditorInner.svelte        |  2 +
 20 files changed, 148 insertions(+), 73 deletions(-)

diff --git a/frontend/src/lib/components/AppConnectInner.svelte b/frontend/src/lib/components/AppConnectInner.svelte
index 9edd80dd54..ef632f5738 100644
--- a/frontend/src/lib/components/AppConnectInner.svelte
+++ b/frontend/src/lib/components/AppConnectInner.svelte
@@ -991,13 +991,15 @@
 		</div>
 	{:else if step == 2 && manual}
 		<div class="flex flex-col gap-8">
-			<Path
-				bind:error={pathError}
-				bind:path
-				initialPath=""
-				namePlaceholder={resourceType}
-				kind="resource"
-			/>
+			<Label label="Path">
+				<Path
+					bind:error={pathError}
+					bind:path
+					initialPath=""
+					namePlaceholder={resourceType}
+					kind="resource"
+				/>
+			</Label>
 			<LabelsInput bind:labels class="-mt-5" />
 			{#if deployTo}
 				<Label
@@ -1247,13 +1249,15 @@
 			<span class="text-xs text-primary font-normal"> Finish connection in popup window </span>
 		{/if}
 	{:else}
-		<Path
-			initialPath=""
-			namePlaceholder={resourceType}
-			bind:error={pathError}
-			bind:path
-			kind="resource"
-		/>
+		<Label label="Path">
+			<Path
+				initialPath=""
+				namePlaceholder={resourceType}
+				bind:error={pathError}
+				bind:path
+				kind="resource"
+			/>
+		</Label>
 		<LabelsInput bind:labels class="-mt-5" />
 		{#if deployTo}
 			<Label
diff --git a/frontend/src/lib/components/LocalDraftBanner.svelte b/frontend/src/lib/components/LocalDraftBanner.svelte
index 4aa2206f5b..dff131b281 100644
--- a/frontend/src/lib/components/LocalDraftBanner.svelte
+++ b/frontend/src/lib/components/LocalDraftBanner.svelte
@@ -10,7 +10,7 @@
 	} from '$lib/utils'
 	import { AlertCircle, Diff } from 'lucide-svelte'
 	import { twMerge } from 'tailwind-merge'
-	import { slide } from 'svelte/transition'
+	import { fade } from 'svelte/transition'
 
 	interface Props {
 		/** Whether there are unsaved local changes relative to the deployed baseline. */
@@ -25,6 +25,12 @@
 		disabled?: boolean
 		/** Diff drawer title. */
 		title?: string
+		/**
+		 * Whether the banner can appear, so it partially reserves its slot to keep
+		 * the shift small. Pass when `getDeployed()` is non-reactive; else defaults
+		 * to `getDeployed() != null`.
+		 */
+		reserveSpace?: boolean
 	}
 
 	let {
@@ -33,7 +39,8 @@
 		getCurrent,
 		onDiscard,
 		disabled = false,
-		title = 'Deployed <> Local changes'
+		title = 'Deployed <> Local changes',
+		reserveSpace
 	}: Props = $props()
 
 	/** Same cleaning + YAML serialization the DiffDrawer applies before
@@ -49,6 +56,11 @@
 		}
 	}
 
+	// Whether the banner can appear (a deployed baseline exists). Gates the
+	// partially-reserved slot below (keeps the toggle shift small); new entities
+	// have none, so no slot and no gap.
+	let hasBaseline = $derived(reserveSpace ?? getDeployed() != null)
+
 	// Suppress the banner when:
 	//   • There's no deployed baseline (brand-new entity — "Show diff"
 	//     would early-return and "Discard" is semantically backwards),
@@ -58,10 +70,8 @@
 	//     from baseline" check that can stale-fire after a save lands
 	//     or when `false`/`undefined` toggle noise flips a field.
 	let visible = $derived.by(() => {
-		if (!show) return false
-		const deployed = getDeployed()
-		if (deployed == null) return false
-		return diffKey(deployed) !== diffKey(getCurrent())
+		if (!show || !hasBaseline) return false
+		return diffKey(getDeployed()) !== diffKey(getCurrent())
 	})
 
 	let diffDrawer: DiffDrawer | undefined = $state()
@@ -99,37 +109,44 @@
 
 <DiffDrawer bind:this={diffDrawer} />
 
-{#if visible}
-	<div
-		transition:slide|local={{ duration: 120 }}
-		class={twMerge(
-			'flex flex-row items-center justify-between gap-2 px-4 py-1',
-			classes.warning.bgClass,
-			'!border-0 !rounded-none'
-		)}
-	>
-		<div class="flex flex-row items-center gap-2 min-w-0">
-			<AlertCircle class={classes.warning.iconClass} size={16} />
-			<span class={twMerge('text-xs font-semibold truncate', classes.warning.titleClass)}>
-				You have unsaved changes
-			</span>
-		</div>
-		<div class="flex flex-row items-center gap-2 shrink-0">
-			<Button
-				unifiedSize="sm"
-				variant="default"
-				startIcon={{ icon: Diff }}
-				btnClasses={classes.warning.titleClass}
-				on:click={showDiff}>Show diff</Button
+{#if hasBaseline}
+	<!-- Reserve ~a third of the banner height when idle (h-2.5), grow to the full
+	     h-8 when it shows: small idle gap, ~22px animated shift on appear. h-8 =
+	     button height + a couple px so the buttons don't touch the edges. -->
+	<div class={twMerge('shrink-0 transition-[height] duration-150', visible ? 'h-8' : 'h-2.5')}>
+		{#if visible}
+			<div
+				transition:fade|local={{ duration: 120 }}
+				class={twMerge(
+					'flex flex-row items-center justify-between gap-2 px-4 h-full',
+					classes.warning.bgClass,
+					'!border-0 !rounded-none'
+				)}
 			>
-			{#if !disabled}
-				<Button
-					unifiedSize="sm"
-					variant="subtle"
-					btnClasses={classes.warning.titleClass}
-					on:click={onDiscard}>Discard</Button
-				>
-			{/if}
-		</div>
+				<div class="flex flex-row items-center gap-2 min-w-0">
+					<AlertCircle class={classes.warning.iconClass} size={16} />
+					<span class={twMerge('text-xs font-semibold truncate', classes.warning.titleClass)}>
+						You have unsaved changes
+					</span>
+				</div>
+				<div class="flex flex-row items-center gap-2 shrink-0">
+					<Button
+						unifiedSize="sm"
+						variant="default"
+						startIcon={{ icon: Diff }}
+						btnClasses={classes.warning.titleClass}
+						on:click={showDiff}>Show diff</Button
+					>
+					{#if !disabled}
+						<Button
+							unifiedSize="sm"
+							variant="subtle"
+							btnClasses={classes.warning.titleClass}
+							on:click={onDiscard}>Discard</Button
+						>
+					{/if}
+				</div>
+			</div>
+		{/if}
 	</div>
 {/if}
diff --git a/frontend/src/lib/components/ResourceEditor.svelte b/frontend/src/lib/components/ResourceEditor.svelte
index d503763a06..8804ad8ac5 100644
--- a/frontend/src/lib/components/ResourceEditor.svelte
+++ b/frontend/src/lib/components/ResourceEditor.svelte
@@ -374,7 +374,7 @@
 </script>
 
 <div>
-	<div class="flex flex-col gap-6 py-2">
+	<div class="flex flex-col gap-6 pb-2">
 		{#if otherDirty.length > 0}
 			<Alert type="warning" title="Editing multiple workspaces">
 				You are going to edit the value in: {otherDirty.join(', ')}
diff --git a/frontend/src/lib/components/ResourceEditorDrawer.svelte b/frontend/src/lib/components/ResourceEditorDrawer.svelte
index 919f8edeff..6c0da69675 100644
--- a/frontend/src/lib/components/ResourceEditorDrawer.svelte
+++ b/frontend/src/lib/components/ResourceEditorDrawer.svelte
@@ -58,6 +58,7 @@
 <Drawer bind:this={drawer} size="50rem" {disableChatOffset}>
 	<DrawerContent
 		title={mode == 'edit' ? 'Edit ' + path : 'Add a resource'}
+		bannerReserved={mode == 'edit'}
 		on:close={drawer?.closeDrawer}
 	>
 		{#await import('./ResourceEditor.svelte')}
@@ -79,6 +80,7 @@
 		{#snippet banner()}
 			<LocalDraftBanner
 				show={hasLocalDraft}
+				reserveSpace={mode == 'edit'}
 				getDeployed={() => resourceEditor?.localDraftDeployed()}
 				getCurrent={() => resourceEditor?.localDraftCurrent()}
 				onDiscard={() => resourceEditor?.discardLocalDraft()}
diff --git a/frontend/src/lib/components/Section.svelte b/frontend/src/lib/components/Section.svelte
index 218beec7fa..f1425c51b7 100644
--- a/frontend/src/lib/components/Section.svelte
+++ b/frontend/src/lib/components/Section.svelte
@@ -104,7 +104,7 @@
 			{#if description}
 				<div class="text-xs text-primary mt-1 mb-2">{@html description}</div>
 			{/if}
-			<div class="flex flex-col gap-6 grow min-h-0 mt-4">
+			<div class={twMerge('flex flex-col gap-6 grow min-h-0', headless ? '' : 'mt-4')}>
 				<div class={twMerge('grow min-h-0', clazz)}>
 					{@render children?.()}
 				</div>
diff --git a/frontend/src/lib/components/VariableEditor.svelte b/frontend/src/lib/components/VariableEditor.svelte
index e26976f08c..b2570dea9c 100644
--- a/frontend/src/lib/components/VariableEditor.svelte
+++ b/frontend/src/lib/components/VariableEditor.svelte
@@ -292,11 +292,13 @@
 <Drawer bind:this={drawer} size="50rem">
 	<DrawerContent
 		title={edit ? `Update variable at ${initialPath}` : 'Add a variable'}
+		bannerReserved={edit}
 		on:close={drawer?.closeDrawer}
 	>
 		{#snippet banner()}
 			<LocalDraftBanner
 				show={edit && selectedDirty}
+				reserveSpace={edit}
 				getDeployed={() => (selected ? initialStates[selected] : undefined)}
 				getCurrent={() => current}
 				onDiscard={() => {
@@ -308,7 +310,7 @@
 				disabled={!can_write}
 			/>
 		{/snippet}
-		<div class="flex flex-col gap-8">
+		<div class="flex flex-col gap-8 pb-2">
 			{#if !can_write}
 				<Alert type="warning" title="Only read access">
 					You only have read access to this resource and cannot edit it
diff --git a/frontend/src/lib/components/common/drawer/DrawerContent.svelte b/frontend/src/lib/components/common/drawer/DrawerContent.svelte
index 6b76873c49..dfa7d248c6 100644
--- a/frontend/src/lib/components/common/drawer/DrawerContent.svelte
+++ b/frontend/src/lib/components/common/drawer/DrawerContent.svelte
@@ -24,6 +24,11 @@
 		titleExtra?: import('svelte').Snippet
 		/** Rendered fixed below the header, above the scrollable content. */
 		banner?: import('svelte').Snippet
+		/**
+		 * Whether the `banner` reserves space (its baseline exists). Only then does
+		 * the content hug it with tight top padding; new entities keep normal padding.
+		 */
+		bannerReserved?: boolean
 		children?: import('svelte').Snippet
 	}
 
@@ -43,6 +48,7 @@
 		actions,
 		titleExtra,
 		banner,
+		bannerReserved = false,
 		children
 	}: Props = $props()
 
@@ -86,19 +92,29 @@
 		{/if}
 	</div>
 
-	{#if banner}
-		{@render banner()}
-	{/if}
+	{#snippet contentBox(tightTop = false)}
+		<div
+			class={classNames(
+				noPadding ? '' : tightTop ? 'px-4 pb-4 pt-1' : 'p-4',
+				'grow min-h-0 max-h-full',
+				forceOverflowVisible ? '!overflow-visible' : ''
+			)}
+			class:overflow-y-auto={overflow_y}
+			style={overflow_y ? 'scrollbar-gutter: stable;' : ''}
+		>
+			{@render children?.()}
+		</div>
+	{/snippet}
 
-	<div
-		class={classNames(
-			noPadding ? '' : 'p-4',
-			'grow min-h-0 max-h-full',
-			forceOverflowVisible ? '!overflow-visible' : ''
-		)}
-		class:overflow-y-auto={overflow_y}
-		style={overflow_y ? 'scrollbar-gutter: stable;' : ''}
-	>
-		{@render children?.()}
-	</div>
+	{#if banner}
+		<!-- Banner + content share one `divide-y` cell: the header keeps its single
+		     divider (no bordered strip around the reserved slot) and the content hugs
+		     the slot with tight top padding (see `contentBox`/`bannerReserved`). -->
+		<div class="flex flex-col grow min-h-0 max-h-full">
+			{@render banner()}
+			{@render contentBox(bannerReserved)}
+		</div>
+	{:else}
+		{@render contentBox()}
+	{/if}
 </div>
diff --git a/frontend/src/lib/components/triggers/azure/AzureTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/azure/AzureTriggerEditorInner.svelte
index e628c7cc99..44fc57d4ef 100644
--- a/frontend/src/lib/components/triggers/azure/AzureTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/azure/AzureTriggerEditorInner.svelte
@@ -350,6 +350,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit Azure trigger ${initialPath}`
@@ -364,6 +365,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/email/EmailTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/email/EmailTriggerEditorInner.svelte
index 34cf4e92c3..1af45e9f2f 100644
--- a/frontend/src/lib/components/triggers/email/EmailTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/email/EmailTriggerEditorInner.svelte
@@ -368,7 +368,7 @@
 			{#if mode === 'suspended'}
 				<TriggerSuspendedJobsAlert {suspendedJobsModal} />
 			{/if}
-			<Section label="Metadata">
+			<Section headless>
 				<div class="flex flex-col gap-2">
 					<Label label="Path">
 						<Path
@@ -475,6 +475,7 @@
 {#if useDrawer}
 	<Drawer size="700px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit email trigger ${initialPath}`
@@ -489,6 +490,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/gcp/GcpTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/gcp/GcpTriggerEditorInner.svelte
index f2a22c359c..be3947fca0 100644
--- a/frontend/src/lib/components/triggers/gcp/GcpTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/gcp/GcpTriggerEditorInner.svelte
@@ -367,6 +367,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit GCP Pub/Sub trigger ${initialPath}`
@@ -381,6 +382,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/http/RouteEditorInner.svelte b/frontend/src/lib/components/triggers/http/RouteEditorInner.svelte
index d29a3d0cab..fa6225a8d7 100644
--- a/frontend/src/lib/components/triggers/http/RouteEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/http/RouteEditorInner.svelte
@@ -535,7 +535,7 @@
 			{#if mode === 'suspended'}
 				<TriggerSuspendedJobsAlert {suspendedJobsModal} />
 			{/if}
-			<Section label="Metadata">
+			<Section headless>
 				<div class="flex flex-col gap-6">
 					<Label label="Summary" for="summary">
 						<!-- svelte-ignore a11y_autofocus -->
@@ -1005,6 +1005,7 @@
 {#if useDrawer}
 	<Drawer size="700px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit route ${initialPath}`
@@ -1019,6 +1020,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/kafka/KafkaTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/kafka/KafkaTriggerEditorInner.svelte
index afdd9d7746..b9e6b6e05e 100644
--- a/frontend/src/lib/components/triggers/kafka/KafkaTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/kafka/KafkaTriggerEditorInner.svelte
@@ -416,6 +416,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit Kafka trigger ${initialPath}`
@@ -430,6 +431,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/mqtt/MqttTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/mqtt/MqttTriggerEditorInner.svelte
index 561608bd9f..7a6a561877 100644
--- a/frontend/src/lib/components/triggers/mqtt/MqttTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/mqtt/MqttTriggerEditorInner.svelte
@@ -391,6 +391,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit MQTT trigger ${initialPath}`
@@ -405,6 +406,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/native/NativeTriggerEditor.svelte b/frontend/src/lib/components/triggers/native/NativeTriggerEditor.svelte
index 583b7b623e..7c14d1c099 100644
--- a/frontend/src/lib/components/triggers/native/NativeTriggerEditor.svelte
+++ b/frontend/src/lib/components/triggers/native/NativeTriggerEditor.svelte
@@ -395,7 +395,7 @@
 			{/if}
 		</div>
 		<div class="flex flex-col gap-12 mt-6">
-			<Section label="Metadata">
+			<Section headless>
 				<div class="flex flex-col gap-6">
 					<label class="flex flex-col gap-1">
 						<span class="text-xs font-semibold text-emphasis">Summary</span>
diff --git a/frontend/src/lib/components/triggers/nats/NatsTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/nats/NatsTriggerEditorInner.svelte
index 4450cd6891..f92f5537c2 100644
--- a/frontend/src/lib/components/triggers/nats/NatsTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/nats/NatsTriggerEditorInner.svelte
@@ -388,6 +388,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit NATS trigger ${initialPath}`
@@ -402,6 +403,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/postgres/PostgresTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/postgres/PostgresTriggerEditorInner.svelte
index 6420d5f9b1..70494c30f5 100644
--- a/frontend/src/lib/components/triggers/postgres/PostgresTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/postgres/PostgresTriggerEditorInner.svelte
@@ -566,6 +566,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit Postgres trigger ${initialPath}`
@@ -578,6 +579,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/schedules/ScheduleEditorInner.svelte b/frontend/src/lib/components/triggers/schedules/ScheduleEditorInner.svelte
index 0d7198bf86..7801889406 100644
--- a/frontend/src/lib/components/triggers/schedules/ScheduleEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/schedules/ScheduleEditorInner.svelte
@@ -781,7 +781,7 @@
 			}}
 		/>
 		<div class="flex flex-col gap-8">
-			<Section label="Metadata">
+			<Section headless>
 				<div class="flex flex-col gap-6">
 					<label class="flex flex-col gap-1">
 						<span class="text-xs font-semibold text-emphasis">Summary</span>
@@ -807,7 +807,7 @@
 							bind:value={summary}
 						/>
 					</label>
-					<LabelsInput bind:labels />
+					<LabelsInput bind:labels class="-mt-4" />
 
 					<div class="flex flex-col gap-1">
 						<label for="path" class="text-xs font-semibold text-emphasis">Path</label>
@@ -1380,6 +1380,7 @@
 {#if useDrawer}
 	<Drawer size="900px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit schedule ${initialPath}`
@@ -1396,6 +1397,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/sqs/SqsTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/sqs/SqsTriggerEditorInner.svelte
index 6ca2d13ddd..01e4a28e29 100644
--- a/frontend/src/lib/components/triggers/sqs/SqsTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/sqs/SqsTriggerEditorInner.svelte
@@ -370,6 +370,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit SQS trigger ${initialPath}`
@@ -384,6 +385,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}
diff --git a/frontend/src/lib/components/triggers/useTriggerDraftSync.svelte.ts b/frontend/src/lib/components/triggers/useTriggerDraftSync.svelte.ts
index aba27de99f..ba09167d6d 100644
--- a/frontend/src/lib/components/triggers/useTriggerDraftSync.svelte.ts
+++ b/frontend/src/lib/components/triggers/useTriggerDraftSync.svelte.ts
@@ -48,6 +48,11 @@ export interface TriggerDraftSync {
 	 * loading and for brand-new triggers (no deployed baseline yet).
 	 */
 	readonly hasDraft: boolean
+	/**
+	 * Whether a deployed baseline exists (banner can appear). Reactive, unlike
+	 * reading `deployed` directly (a plain `let`), so callers can reserve its slot.
+	 */
+	readonly hasBaseline: boolean
 	/** The deployed baseline the dirty check compares against. */
 	readonly deployed: Cfg | undefined
 	/** The current form config (the live local draft). */
@@ -104,6 +109,10 @@ export function useTriggerDraftSync(opts: TriggerDraftSyncOptions): TriggerDraft
 			cfgDiffers(opts.getCfg() as Cfg, opts.deployed() as Cfg)
 	)
 
+	// Reactive "banner is possible" — depends on `drawerLoading()` so it
+	// re-evaluates (and re-reads the plain-`let` baseline) once the load settles.
+	const hasBaseline = $derived(!opts.drawerLoading() && opts.deployed() != null)
+
 	/** `auto: true` marks a discard from the reactive persist-effect (not an
 	 * explicit user action), so it respects the "Enable auto-save" toggle — else
 	 * with autosave off the editor would delete server drafts while writing none. */
@@ -189,6 +198,9 @@ export function useTriggerDraftSync(opts: TriggerDraftSyncOptions): TriggerDraft
 		get hasDraft() {
 			return hasDraft
 		},
+		get hasBaseline() {
+			return hasBaseline
+		},
 		get deployed() {
 			return opts.deployed()
 		},
diff --git a/frontend/src/lib/components/triggers/websocket/WebsocketTriggerEditorInner.svelte b/frontend/src/lib/components/triggers/websocket/WebsocketTriggerEditorInner.svelte
index 77b5149933..361d5b610b 100644
--- a/frontend/src/lib/components/triggers/websocket/WebsocketTriggerEditorInner.svelte
+++ b/frontend/src/lib/components/triggers/websocket/WebsocketTriggerEditorInner.svelte
@@ -457,6 +457,7 @@
 {#if useDrawer}
 	<Drawer size="800px" bind:this={drawer}>
 		<DrawerContent
+			bannerReserved={draftSync.hasBaseline}
 			title={edit
 				? can_write
 					? `Edit WebSocket trigger ${initialPath}`
@@ -471,6 +472,7 @@
 				<LocalDraftBanner
 					show={draftSync.hasDraft}
 					getDeployed={() => draftSync.deployed}
+					reserveSpace={draftSync.hasBaseline}
 					getCurrent={() => draftSync.current}
 					onDiscard={() => draftSync.resetToDeployed(initialPath)}
 					disabled={!can_write}

From d65f58c388d88fff71cda22dfa21aecdae70c450 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 12:04:54 +0200
Subject: [PATCH 14/76] =?UTF-8?q?fix:=20pipeline=20dogfooding=20fixes=20?=
 =?UTF-8?q?=E2=80=94=20SCD2=20data-test=20scope,=20--partition,=20s3object?=
 =?UTF-8?q?=20upload=20binding=20(#9875)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix: scope SCD2 built-in data tests to current rows

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat: add --partition to pipeline run and fix duckdb s3object upload binding

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs: note filesystem storage type is dev-only in storage settings

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: use ISO week for weekly partition default in pipeline run

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../windmill-parser/src/sql_materialize.rs    | 65 +++++++++++++--
 cli/src/commands/pipeline/boundedCascade.ts   |  8 +-
 cli/src/commands/pipeline/pipeline.ts         | 83 +++++++++++++++++--
 cli/src/commands/pipeline/pipelineUpload.ts   | 13 ++-
 cli/src/guidance/skills.gen.ts                |  1 +
 cli/test/pipeline_partition_unit.test.ts      | 23 +++++
 cli/test/pipeline_upload_unit.test.ts         | 12 +++
 docs/ducklake-materialization.md              |  5 ++
 .../workspaceSettings/StorageSettings.svelte  |  3 +
 .../auto-generated/cli/cli-commands.md        |  1 +
 system_prompts/auto-generated/prompts.ts      |  1 +
 .../skills/cli-commands/SKILL.md              |  1 +
 12 files changed, 200 insertions(+), 16 deletions(-)
 create mode 100644 cli/test/pipeline_partition_unit.test.ts

diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index 2b1523b1ff..c7c292a672 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -667,6 +667,7 @@ pub fn build_wrap_blocks(
     tests: &[DataTestResolved],
 ) -> Result<Vec<String>, String> {
     let target_qualified = format!("{TARGET_ALIAS}.{target_table}");
+    let scd2 = matches!(strategy, MaterializeStrategy::Scd2 { .. });
     let cg = MaterializeCodegen {
         target_qualified: &target_qualified,
         select_sql: &plan.output,
@@ -681,6 +682,7 @@ pub fn build_wrap_blocks(
         partition_col,
         partition_value_sql,
         partitioned,
+        scd2,
     };
     let test_sql = build_data_test_checks(tests, &ctx)?;
     let mut blocks: Vec<String> = Vec::new();
@@ -845,6 +847,11 @@ pub struct DataTestCtx<'a> {
     pub partition_value_sql: &'a str,
     /// Whether the target is partitioned (scopes probes to the slice).
     pub partitioned: bool,
+    /// Whether the target is an SCD2 history table. Built-in probes then assert
+    /// the *current snapshot* (`is_current` rows): the history legitimately
+    /// repeats the natural key across closed versions, so an unscoped
+    /// `unique(<key>)` would fail on the second change of any key.
+    pub scd2: bool,
 }
 
 /// A data test resolved enough to generate SQL. Built-ins carry only their
@@ -905,17 +912,31 @@ fn quote_lit(s: &str) -> String {
     format!("'{}'", s.replace('\'', "''"))
 }
 
-// The `WHERE`/`AND` fragment scoping a probe to the current partition, or
-// empty when unpartitioned. `prefix` is `WHERE ` or `AND ` per call site.
+// The `WHERE`/`AND` fragment scoping a probe to the current partition and/or
+// the SCD2 current snapshot, or empty when neither applies. `prefix` is
+// `WHERE ` or `AND ` per call site; further conditions chain with `AND`.
+// (`partitioned` and `scd2` are mutually exclusive today — the combo is
+// rejected at codegen — but the chaining keeps this correct if that changes.)
 fn partition_scope(ctx: &DataTestCtx, prefix: &str, table_alias: Option<&str>) -> String {
-    if !ctx.partitioned {
+    let qualify = |col: String| match table_alias {
+        Some(a) => format!("{a}.{col}"),
+        None => col,
+    };
+    let mut conds: Vec<String> = Vec::new();
+    if ctx.partitioned {
+        conds.push(format!(
+            "{} = {}",
+            qualify(quote_ident(ctx.partition_col)),
+            ctx.partition_value_sql
+        ));
+    }
+    if ctx.scd2 {
+        conds.push(qualify(SCD2_IS_CURRENT.to_string()));
+    }
+    if conds.is_empty() {
         return String::new();
     }
-    let col = match table_alias {
-        Some(a) => format!("{a}.{}", quote_ident(ctx.partition_col)),
-        None => quote_ident(ctx.partition_col),
-    };
-    format!("{prefix}{col} = {}", ctx.partition_value_sql)
+    format!("{prefix}{}", conds.join(" AND "))
 }
 
 // Record one check: its display `name` plus `count_query` (which yields a
@@ -1472,11 +1493,15 @@ mod tests {
             partition_col: "_wm_partition",
             partition_value_sql: "'2026-06-19'",
             partitioned: true,
+            scd2: false,
         }
     }
     fn ctx_unpartitioned() -> DataTestCtx<'static> {
         DataTestCtx { partitioned: false, ..ctx_partitioned() }
     }
+    fn ctx_scd2() -> DataTestCtx<'static> {
+        DataTestCtx { partitioned: false, scd2: true, ..ctx_partitioned() }
+    }
 
     #[test]
     fn data_test_unique_and_not_null_partition_scoped() {
@@ -1517,6 +1542,30 @@ mod tests {
         assert!(!sql.checks[0].violating.contains("_wm_partition"));
     }
 
+    #[test]
+    fn data_test_scd2_scopes_builtins_to_current_rows() {
+        // On an SCD2 history table the natural key repeats across closed
+        // versions, so built-in probes must assert the current snapshot only.
+        let tests = vec![
+            DataTestResolved::BuiltIn(DataTest::Unique { column: "customer_id".into() }),
+            DataTestResolved::BuiltIn(DataTest::NotNull { column: "tier".into() }),
+            DataTestResolved::BuiltIn(DataTest::AcceptedValues {
+                column: "region".into(),
+                values: vec!["emea".into()],
+            }),
+        ];
+        let sql = build_data_test_checks(&tests, &ctx_scd2()).unwrap();
+        assert!(sql.checks[0]
+            .violating
+            .contains("WHERE \"customer_id\" IS NOT NULL AND is_current"));
+        assert!(sql.checks[1]
+            .violating
+            .contains("WHERE \"tier\" IS NULL AND is_current"));
+        assert!(sql.checks[2].violating.contains("AND is_current"));
+        // no partition scope leaks in (scd2 is unpartitioned in v1)
+        assert!(!sql.checks[0].violating.contains("_wm_partition"));
+    }
+
     #[test]
     fn data_test_accepted_values_escapes_literals() {
         let tests = vec![DataTestResolved::BuiltIn(DataTest::AcceptedValues {
diff --git a/cli/src/commands/pipeline/boundedCascade.ts b/cli/src/commands/pipeline/boundedCascade.ts
index d928a72b64..9c7edb9cea 100644
--- a/cli/src/commands/pipeline/boundedCascade.ts
+++ b/cli/src/commands/pipeline/boundedCascade.ts
@@ -13,7 +13,13 @@
 // pipeline.ts.
 
 export type BCGraph = {
-  runnables: { path: string; usage_kind: "script" | "flow" | "job" }[];
+  runnables: {
+    path: string;
+    usage_kind: "script" | "flow" | "job";
+    // `// partitioned <kind>` on the script (daily/hourly/weekly/monthly/dynamic).
+    // Emitted by both the deployed graph endpoint and the local builder.
+    partition_kind?: string;
+  }[];
   assets: { kind: string; path: string }[];
   edges: {
     runnable_kind: string;
diff --git a/cli/src/commands/pipeline/pipeline.ts b/cli/src/commands/pipeline/pipeline.ts
index fd9be73d2e..1d11799956 100644
--- a/cli/src/commands/pipeline/pipeline.ts
+++ b/cli/src/commands/pipeline/pipeline.ts
@@ -462,6 +462,34 @@ async function resolveUploadArgs(
   return args;
 }
 
+// Default partition value for a `// partitioned <kind>` script, from the
+// current UTC instant — mirrors the backend defaults (partition_ee.rs):
+// hourly `%Y-%m-%dT%H`, weekly `%G-W%V` (ISO week-year), monthly `%Y-%m`,
+// daily `%Y-%m-%d`. `dynamic` has no time default and returns undefined.
+export function defaultPartitionValue(kind: string, now: Date = new Date()): string | undefined {
+  const pad = (n: number) => String(n).padStart(2, "0");
+  const date = `${now.getUTCFullYear()}-${pad(now.getUTCMonth() + 1)}-${pad(now.getUTCDate())}`;
+  switch (kind) {
+    case "hourly":
+      return `${date}T${pad(now.getUTCHours())}`;
+    case "weekly": {
+      // ISO 8601 week (chrono's `%G-W%V`): the week containing this date's
+      // nearest Thursday belongs to that Thursday's year.
+      const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
+      const dow = d.getUTCDay() || 7; // Mon=1 … Sun=7
+      d.setUTCDate(d.getUTCDate() + 4 - dow);
+      const week = Math.ceil(((d.getTime() - Date.UTC(d.getUTCFullYear(), 0, 1)) / 86400000 + 1) / 7);
+      return `${d.getUTCFullYear()}-W${pad(week)}`;
+    }
+    case "monthly":
+      return date.slice(0, 7);
+    case "daily":
+      return date;
+    default:
+      return undefined;
+  }
+}
+
 async function run(
   opts: GlobalOptions & SyncOptions & {
     from?: string;
@@ -471,6 +499,7 @@ async function run(
     local?: boolean;
     upload?: string[];
     arg?: string[];
+    partition?: string;
     defaultTs?: "bun" | "deno";
   },
   folder: string,
@@ -705,6 +734,36 @@ async function run(
     log.warn(`Skipping ${cyclic.length} script(s) on a dependency cycle: ${cyclic.sort().join(", ")}`);
   }
 
+  // `// partitioned` scripts need a resolved `partition` arg. Deployed runs get
+  // it from backend run-start resolution, but previews (`--local`) never do —
+  // so resolve it client-side there: `--partition` wins; otherwise time kinds
+  // default to the current UTC period (mirroring the backend defaults; custom
+  // `tz=`/`format=`/`start=` opts are a backend concern — pass --partition
+  // explicitly to match them). `dynamic` has no default. For deployed runs the
+  // arg is only injected when `--partition` is given (an explicit backfill).
+  const partitionKindByPath = new Map(
+    graph.runnables
+      .filter((r) => r.usage_kind === "script" && r.partition_kind)
+      .map((r) => [r.path, r.partition_kind!]),
+  );
+  const partitionValueFor = (nodePath: string): string | undefined => {
+    const kind = partitionKindByPath.get(nodePath);
+    if (!kind) return undefined;
+    if (opts.partition) return opts.partition;
+    if (!opts.local) return undefined; // deployed: backend resolves at run start
+    return defaultPartitionValue(kind);
+  };
+  if (opts.local && !opts.partition) {
+    const unresolvable = order.filter(
+      (p) => partitionKindByPath.get(p) === "dynamic",
+    );
+    if (unresolvable.length > 0) {
+      throw new Error(
+        `dynamic \`// partitioned\` script(s) need an explicit partition for a local run: ${unresolvable.sort().join(", ")} — pass --partition <value>.`,
+      );
+    }
+  }
+
   // A `--upload` whose script fell outside the selection is a no-op the user
   // should know about, rather than silently ignored.
   const orderSet = new Set(order);
@@ -744,11 +803,19 @@ async function run(
         colors.bold(`Bounded run plan — ${order.length} script${order.length === 1 ? "" : "s"}`) +
           colors.dim(runAll ? ` (whole pipeline)` : ` (from ${shortName(scriptPathOf(start!))})`),
       );
-      order.forEach((p, i) =>
-        log.info(
-          `  ${i + 1}. ${p}${boundBindingsByPath.has(p) ? colors.dim(" (← --upload)") : ""}${plainArgsByPath.has(p) ? colors.dim(" (← --arg)") : ""}`,
-        ),
-      );
+      order.forEach((p, i) => {
+        const pv = partitionValueFor(p);
+        const marks = [
+          boundBindingsByPath.has(p) ? " (← --upload)" : "",
+          plainArgsByPath.has(p) ? " (← --arg)" : "",
+          pv
+            ? ` (partition=${pv})`
+            : partitionKindByPath.has(p)
+              ? " (partition resolved by backend at run start)"
+              : "",
+        ].join("");
+        log.info(`  ${i + 1}. ${p}${marks ? colors.dim(marks) : ""}`);
+      });
     }
     return;
   }
@@ -776,7 +843,9 @@ async function run(
     // `--arg` spreads after `--upload` so an explicit value wins for the same
     // param; the internal dispatch guard spreads LAST so neither binding can
     // re-enable backend dispatch (the CLI owns the whole closure here).
+    const partitionValue = partitionValueFor(nodePath);
     const nodeArgs = {
+      ...(partitionValue !== undefined ? { partition: partitionValue } : {}),
       ...(uploadArgs.get(nodePath) ?? {}),
       ...(plainArgsByPath.get(nodePath) ?? {}),
       _wmill_skip_asset_dispatch: true,
@@ -867,6 +936,10 @@ const command = new Command()
     "Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.",
     { collect: true },
   )
+  .option(
+    "--partition <value:string>",
+    "Partition value for `// partitioned` scripts in the run (e.g. 2026-06-30) — use it to backfill a past slice. With --local, time kinds (daily/hourly/weekly/monthly) default to the current UTC period when omitted; `dynamic` always needs it. Deployed runs without it defer to backend run-start resolution.",
+  )
   .action(run as any)
   .command(
     "docs",
diff --git a/cli/src/commands/pipeline/pipelineUpload.ts b/cli/src/commands/pipeline/pipelineUpload.ts
index 7e4f426ff6..a753409464 100644
--- a/cli/src/commands/pipeline/pipelineUpload.ts
+++ b/cli/src/commands/pipeline/pipelineUpload.ts
@@ -58,10 +58,19 @@ export function parseArgBinding(spec: string): ArgBinding {
   return { scriptTok, param, value };
 }
 
-/** Names of a schema's S3Object properties (`format: resource-s3_object`). */
+/**
+ * Names of a schema's S3Object properties. The resource name in `format`
+ * varies by language parser — TS/python emit `resource-s3_object`, the SQL
+ * dialects emit `resource-S3Object` — so match it case/underscore-insensitively
+ * the way the frontend's ArgInput does.
+ */
 export function s3ObjectParams(schema: any): string[] {
   const props = schema?.properties ?? {};
-  return Object.keys(props).filter((k) => props[k]?.format === "resource-s3_object");
+  const isS3Object = (format: unknown): boolean =>
+    typeof format === "string" &&
+    format.startsWith("resource-") &&
+    format.slice("resource-".length).replaceAll("_", "").toLowerCase() === "s3object";
+  return Object.keys(props).filter((k) => isS3Object(props[k]?.format));
 }
 
 /**
diff --git a/cli/src/guidance/skills.gen.ts b/cli/src/guidance/skills.gen.ts
index 223f5d55bc..b8c209dcaf 100644
--- a/cli/src/guidance/skills.gen.ts
+++ b/cli/src/guidance/skills.gen.ts
@@ -6926,6 +6926,7 @@ inspect asset-driven pipelines (scripts marked \`// pipeline\`, wired by \`// on
   - \`--local\` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - \`--upload <binding:string>\` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
   - \`--arg <binding:string>\` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
+  - \`--partition <value:string>\` - Partition value for \`// partitioned\` scripts in the run (e.g. 2026-06-30) — use it to backfill a past slice. With --local, time kinds (daily/hourly/weekly/monthly) default to the current UTC period when omitted; \`dynamic\` always needs it. Deployed runs without it defer to backend run-start resolution.
 - \`pipeline docs <folder:string>\` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - \`--local\` - Build the graph from local working-tree files instead of the deployed workspace.
 - \`pipeline dev [folder:string]\` - Live-preview a data pipeline from local files: watch an \`f/<folder>\` of \`// pipeline\` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).
diff --git a/cli/test/pipeline_partition_unit.test.ts b/cli/test/pipeline_partition_unit.test.ts
new file mode 100644
index 0000000000..61fcc991b5
--- /dev/null
+++ b/cli/test/pipeline_partition_unit.test.ts
@@ -0,0 +1,23 @@
+import { expect, test } from "bun:test";
+import { defaultPartitionValue } from "../src/commands/pipeline/pipeline.ts";
+
+// Mirrors the backend defaults in partition_ee.rs::default_format — a --local
+// run resolves the partition client-side, so a divergence here writes a slice
+// the deployed cadence never reruns.
+test("defaultPartitionValue: time kinds match backend default formats (UTC)", () => {
+  const at = new Date(Date.UTC(2026, 6, 2, 6, 30)); // 2026-07-02T06:30Z, a Thursday
+  expect(defaultPartitionValue("daily", at)).toBe("2026-07-02");
+  expect(defaultPartitionValue("hourly", at)).toBe("2026-07-02T06");
+  expect(defaultPartitionValue("weekly", at)).toBe("2026-W27");
+  expect(defaultPartitionValue("monthly", at)).toBe("2026-07");
+  expect(defaultPartitionValue("dynamic", at)).toBeUndefined();
+});
+
+test("defaultPartitionValue: ISO week-year boundaries (%G-W%V)", () => {
+  // Jan 1 2026 is a Thursday → week 1 of 2026.
+  expect(defaultPartitionValue("weekly", new Date(Date.UTC(2026, 0, 1)))).toBe("2026-W01");
+  // Jan 1 2023 is a Sunday → still week 52 of 2022.
+  expect(defaultPartitionValue("weekly", new Date(Date.UTC(2023, 0, 1)))).toBe("2022-W52");
+  // Dec 30 2024 is a Monday → already week 1 of 2025.
+  expect(defaultPartitionValue("weekly", new Date(Date.UTC(2024, 11, 30)))).toBe("2025-W01");
+});
diff --git a/cli/test/pipeline_upload_unit.test.ts b/cli/test/pipeline_upload_unit.test.ts
index 3484085887..38a5a41035 100644
--- a/cli/test/pipeline_upload_unit.test.ts
+++ b/cli/test/pipeline_upload_unit.test.ts
@@ -101,6 +101,18 @@ test("s3ObjectParams: only resource-s3_object properties, in declaration order",
   expect(s3ObjectParams(undefined)).toEqual([]);
 });
 
+test("s3ObjectParams: matches SQL-dialect resource-S3Object casing too", () => {
+  // TS/python parsers emit `resource-s3_object`; the SQL dialects (duckdb
+  // `-- $file (s3object)`) emit `resource-S3Object` — both must bind.
+  const schema = {
+    properties: {
+      file: { type: "object", format: "resource-S3Object" },
+      other: { type: "object", format: "resource-s3" },
+    },
+  };
+  expect(s3ObjectParams(schema)).toEqual(["file"]);
+});
+
 test("devUploadKey: key scoped by script path + param so basenames don't clobber", () => {
   expect(devUploadKey("f/analytics/ingest", "file", "./fixtures/events.csv")).toBe(
     "wmilldev/pipeline/f/analytics/ingest/file/events.csv",
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index 4c71f93087..e7a52dbf80 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -339,6 +339,11 @@ load-bearing.
   slice just written (`WHERE _wm_partition = <value>`), so a rerun/backfill of
   one partition is independent of other partitions' (possibly pre-existing)
   data. Whole-table assertions are a follow-up.
+- **SCD2 scope.** On a `key=… history` target, built-in checks assert the
+  *current snapshot* (`WHERE is_current`): the history table legitimately
+  repeats the natural key across closed versions, so an unscoped
+  `unique(<key>)` would fail the run on the second change of any key. Custom
+  tests see the raw history and scope themselves.
 - **Commit-then-test.** Like dbt, the write commits before tests run; a failed
   test fails the *run* (and records `Failed`, so downstream cascade stops) but
   does not roll back the committed snapshot. Time-travel still lets you inspect
diff --git a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
index 87b68a4f21..329ea53e14 100644
--- a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
+++ b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
@@ -191,6 +191,9 @@
 						<div class="flex gap-2">
 							<div class="relative">
 								{#if tableRow[1].resourceType === 'filesystem'}
+									<!-- Filesystem storage is deliberately absent from the creatable
+									     types below: it is dev-only (set via the API), so the UI only
+									     renders it read-only when already configured. -->
 									<Select
 										items={[{ value: 'filesystem', label: 'Filesystem' }]}
 										value={'filesystem'}
diff --git a/system_prompts/auto-generated/cli/cli-commands.md b/system_prompts/auto-generated/cli/cli-commands.md
index 4cbd484d94..258e2ae785 100644
--- a/system_prompts/auto-generated/cli/cli-commands.md
+++ b/system_prompts/auto-generated/cli/cli-commands.md
@@ -428,6 +428,7 @@ inspect asset-driven pipelines (scripts marked `// pipeline`, wired by `// on <s
   - `--local` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - `--upload <binding:string>` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
   - `--arg <binding:string>` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
+  - `--partition <value:string>` - Partition value for `// partitioned` scripts in the run (e.g. 2026-06-30) — use it to backfill a past slice. With --local, time kinds (daily/hourly/weekly/monthly) default to the current UTC period when omitted; `dynamic` always needs it. Deployed runs without it defer to backend run-start resolution.
 - `pipeline docs <folder:string>` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - `--local` - Build the graph from local working-tree files instead of the deployed workspace.
 - `pipeline dev [folder:string]` - Live-preview a data pipeline from local files: watch an `f/<folder>` of `// pipeline` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).
diff --git a/system_prompts/auto-generated/prompts.ts b/system_prompts/auto-generated/prompts.ts
index a2e5455fca..8af1cde305 100644
--- a/system_prompts/auto-generated/prompts.ts
+++ b/system_prompts/auto-generated/prompts.ts
@@ -3096,6 +3096,7 @@ inspect asset-driven pipelines (scripts marked \`// pipeline\`, wired by \`// on
   - \`--local\` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - \`--upload <binding:string>\` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
   - \`--arg <binding:string>\` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
+  - \`--partition <value:string>\` - Partition value for \`// partitioned\` scripts in the run (e.g. 2026-06-30) — use it to backfill a past slice. With --local, time kinds (daily/hourly/weekly/monthly) default to the current UTC period when omitted; \`dynamic\` always needs it. Deployed runs without it defer to backend run-start resolution.
 - \`pipeline docs <folder:string>\` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - \`--local\` - Build the graph from local working-tree files instead of the deployed workspace.
 - \`pipeline dev [folder:string]\` - Live-preview a data pipeline from local files: watch an \`f/<folder>\` of \`// pipeline\` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).
diff --git a/system_prompts/auto-generated/skills/cli-commands/SKILL.md b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
index cb09e88daa..938f6199e7 100644
--- a/system_prompts/auto-generated/skills/cli-commands/SKILL.md
+++ b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
@@ -433,6 +433,7 @@ inspect asset-driven pipelines (scripts marked `// pipeline`, wired by `// on <s
   - `--local` - Run the local working-tree scripts via preview (no deploy) instead of the deployed versions; the graph is built from local files.
   - `--upload <binding:string>` - Bind an object to a data_upload/webhook entry point so it runs in the cascade, as SCRIPT[:PARAM]=SOURCE (SOURCE is a local file or an s3://key). Local files are uploaded to the workspace store; the S3Object param is inferred when the script has exactly one. Repeatable.
   - `--arg <binding:string>` - Pass a plain run arg to a script in the cascade, as SCRIPT:PARAM=VALUE (VALUE is parsed as JSON when possible, else taken as a string — e.g. daily_report:partition=2026-07-02). Repeatable.
+  - `--partition <value:string>` - Partition value for `// partitioned` scripts in the run (e.g. 2026-06-30) — use it to backfill a past slice. With --local, time kinds (daily/hourly/weekly/monthly) default to the current UTC period when omitted; `dynamic` always needs it. Deployed runs without it defer to backend run-start resolution.
 - `pipeline docs <folder:string>` - generate PIPELINE.md (+ AGENTS.md pointer) describing a folder's pipeline graph and datatable schemas, for an editor / agentic loop
   - `--local` - Build the graph from local working-tree files instead of the deployed workspace.
 - `pipeline dev [folder:string]` - Live-preview a data pipeline from local files: watch an `f/<folder>` of `// pipeline` scripts, push the working-tree graph to the dev page, and run the cascade via preview (no deploy).

From 53bbb92953178eb6d0017818ef870f3cb2399dfd Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 12:50:55 +0200
Subject: [PATCH 15/76] feat(pipeline): backfill a range of partitions from the
 asset drawer (#9885)

* feat(pipeline): backfill a range of partitions from the asset drawer (ee)

* feat(pipeline): cancel in-flight backfill job and show cancelling state

* refactor(pipeline): move backfill range logic behind private feature

* fix(pipeline): close backfill cancel-launch race and record dispatch intent

* docs(openapi): producer_path also covers SDK write-edge producers

* chore: update ee-repo-ref to c3852ecb36bd0be1a74c63169e513888f3347850

This commit updates the EE repository reference after PR #641 was merged in windmill-ee-private.

Previous ee-repo-ref: 7c1450ef89fbc9e844a121b39cafe0d7235d704b

New ee-repo-ref: c3852ecb36bd0be1a74c63169e513888f3347850

Automated by sync-ee-ref workflow.

---------

Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 ...7fee03012a3fa0fb943239e004cc4a7067501.json |  30 +++
 ...1563ef05db7cc54a958a72384b08a69eb784e.json |  23 ++
 backend/ee-repo-ref.txt                       |   2 +-
 backend/windmill-api-assets/Cargo.toml        |   3 +
 .../windmill-api-assets/src/backfill_oss.rs   |  18 ++
 backend/windmill-api-assets/src/lib.rs        |  62 ++++++
 backend/windmill-api/Cargo.toml               |   2 +-
 backend/windmill-api/openapi.yaml             |  57 +++++
 .../AssetGraph/BackfillRangeDialog.svelte     | 209 +++++++++++++++---
 .../AssetGraph/PartitionStatusGrid.svelte     | 174 +++++++++++----
 .../assets/AssetGraph/backfillRun.test.ts     | 118 ++++++++++
 .../assets/AssetGraph/backfillRun.ts          |  83 +++++++
 12 files changed, 699 insertions(+), 82 deletions(-)
 create mode 100644 backend/.sqlx/query-4add520575717d449a3758326777fee03012a3fa0fb943239e004cc4a7067501.json
 create mode 100644 backend/.sqlx/query-d4f047b0a672d5bfe9fd7db60f11563ef05db7cc54a958a72384b08a69eb784e.json
 create mode 100644 backend/windmill-api-assets/src/backfill_oss.rs
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/backfillRun.test.ts
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/backfillRun.ts

diff --git a/backend/.sqlx/query-4add520575717d449a3758326777fee03012a3fa0fb943239e004cc4a7067501.json b/backend/.sqlx/query-4add520575717d449a3758326777fee03012a3fa0fb943239e004cc4a7067501.json
new file mode 100644
index 0000000000..64330e91cf
--- /dev/null
+++ b/backend/.sqlx/query-4add520575717d449a3758326777fee03012a3fa0fb943239e004cc4a7067501.json
@@ -0,0 +1,30 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT ON (path) path AS \"path!\", content AS \"content!\"\n        FROM script\n        WHERE workspace_id = $1\n          AND auto_kind = 'pipeline'\n          AND archived = false\n          AND deleted = false\n          AND (content LIKE '%' || $2 || '%' OR path = ANY($3))\n        ORDER BY path, created_at DESC\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "content!",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "4add520575717d449a3758326777fee03012a3fa0fb943239e004cc4a7067501"
+}
diff --git a/backend/.sqlx/query-d4f047b0a672d5bfe9fd7db60f11563ef05db7cc54a958a72384b08a69eb784e.json b/backend/.sqlx/query-d4f047b0a672d5bfe9fd7db60f11563ef05db7cc54a958a72384b08a69eb784e.json
new file mode 100644
index 0000000000..3a5531b9a6
--- /dev/null
+++ b/backend/.sqlx/query-d4f047b0a672d5bfe9fd7db60f11563ef05db7cc54a958a72384b08a69eb784e.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT usage_path FROM asset\n        WHERE workspace_id = $1\n          AND kind = 'ducklake'\n          AND path = $2\n          AND usage_kind = 'script'\n          AND usage_access_type IN ('w', 'rw')\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "usage_path",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "d4f047b0a672d5bfe9fd7db60f11563ef05db7cc54a958a72384b08a69eb784e"
+}
diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index 0ef135d961..5e76f395d2 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-bdd4ba4dfd05c8ca7db365e530812dc914517d7f
+c3852ecb36bd0be1a74c63169e513888f3347850
diff --git a/backend/windmill-api-assets/Cargo.toml b/backend/windmill-api-assets/Cargo.toml
index c6e7676b6b..c75715a3ac 100644
--- a/backend/windmill-api-assets/Cargo.toml
+++ b/backend/windmill-api-assets/Cargo.toml
@@ -8,6 +8,9 @@ edition.workspace = true
 name = "windmill_api_assets"
 path = "src/lib.rs"
 
+[features]
+private = ["windmill-common/private"]
+
 [dependencies]
 windmill-api-auth.workspace = true
 windmill-common = { workspace = true, default-features = false }
diff --git a/backend/windmill-api-assets/src/backfill_oss.rs b/backend/windmill-api-assets/src/backfill_oss.rs
new file mode 100644
index 0000000000..b5f0da1d58
--- /dev/null
+++ b/backend/windmill-api-assets/src/backfill_oss.rs
@@ -0,0 +1,18 @@
+//! OSS fallback: backfilling a range of partitions is an enterprise
+//! feature (the resolution/enumeration logic lives in `windmill-ee-private`,
+//! `windmill-api-assets/src/backfill_ee.rs`). Single-partition runs with an
+//! explicit `partition` arg remain available in OSS.
+
+use windmill_common::error::{Error, Result};
+
+use crate::{PartitionsInRangeQuery, PartitionsInRangeResponse};
+
+pub(crate) async fn partitions_in_range(
+    _tx: &mut sqlx::Transaction<'_, sqlx::Postgres>,
+    _w_id: &str,
+    _q: &PartitionsInRangeQuery,
+) -> Result<PartitionsInRangeResponse> {
+    Err(Error::BadRequest(
+        "Backfilling a range of partitions is an enterprise feature".to_string(),
+    ))
+}
diff --git a/backend/windmill-api-assets/src/lib.rs b/backend/windmill-api-assets/src/lib.rs
index 29122bd793..19647c71d7 100644
--- a/backend/windmill-api-assets/src/lib.rs
+++ b/backend/windmill-api-assets/src/lib.rs
@@ -15,6 +15,18 @@ use windmill_common::{
 
 use windmill_api_auth::ApiAuthed;
 
+// Partition-range backfill preview. The logic (producer resolution, range
+// enumeration, status join) is enterprise: the `private` build compiles the
+// EE module, the public build a stub that errors.
+#[cfg(feature = "private")]
+mod backfill_ee;
+#[cfg(feature = "private")]
+use backfill_ee as backfill;
+#[cfg(not(feature = "private"))]
+mod backfill_oss;
+#[cfg(not(feature = "private"))]
+use backfill_oss as backfill;
+
 pub fn workspaced_service() -> Router {
     Router::new()
         .route("/list", get(list_assets))
@@ -23,6 +35,7 @@ pub fn workspaced_service() -> Router {
         .route("/graph", get(asset_graph))
         .route("/pipelines", get(list_pipeline_folders))
         .route("/partitions", get(list_partitions))
+        .route("/partitions_in_range", get(list_partitions_in_range))
         .route("/asset_schemas", get(list_asset_schemas))
         .route("/record_materialization", post(record_materialization))
 }
@@ -54,6 +67,55 @@ async fn list_partitions(
     Ok(Json(rows))
 }
 
+// Only the EE `backfill` module reads the fields; the OSS stub errors without
+// touching them.
+#[cfg_attr(not(feature = "private"), allow(dead_code))]
+#[derive(Deserialize)]
+struct PartitionsInRangeQuery {
+    // The materialized ducklake asset path (`<ducklake>/<table>`).
+    path: String,
+    // Inclusive calendar-day range (YYYY-MM-DD), local to the producer's
+    // partition tz.
+    from: chrono::NaiveDate,
+    to: chrono::NaiveDate,
+}
+
+#[derive(Serialize)]
+struct PartitionInRange {
+    partition: String,
+    // `missing` | `running` | `materialized` | `failed` — `missing` means no
+    // materialization was ever recorded for the slice.
+    status: &'static str,
+}
+
+#[derive(Serialize)]
+struct PartitionsInRangeResponse {
+    // The pipeline script that materializes the asset (managed `// materialize`
+    // target, or a partitioned writer using the SDK helpers) — the runnable a
+    // backfill launches (with an explicit `partition` arg per slice).
+    producer_path: String,
+    partition_kind: String,
+    partitions: Vec<PartitionInRange>,
+}
+
+// Backfill range preview: every partition the producer's `// partitioned` spec
+// expects in `[from, to]`, joined with what `materialized_partition` records —
+// the missing/failed subset is the backfill worklist. The logic is in the
+// `backfill` module pair: EE resolves and enumerates, the OSS stub errors
+// (single-partition runs stay available everywhere; fanning out over a range
+// is enterprise).
+async fn list_partitions_in_range(
+    authed: ApiAuthed,
+    Path(w_id): Path<String>,
+    Extension(user_db): Extension<UserDB>,
+    Query(q): Query<PartitionsInRangeQuery>,
+) -> JsonResult<PartitionsInRangeResponse> {
+    let mut tx = user_db.begin(&authed).await?;
+    let res = backfill::partitions_in_range(&mut tx, &w_id, &q).await?;
+    tx.commit().await?;
+    Ok(Json(res))
+}
+
 // Per-asset captured output schema versions for a ducklake asset (gap #2a) —
 // the schema-evolution history persisted after each managed `// materialize`.
 // Newest version first; materialization targets are ducklake-only in v1, so the
diff --git a/backend/windmill-api/Cargo.toml b/backend/windmill-api/Cargo.toml
index 56893a8737..ebbc98e83e 100644
--- a/backend/windmill-api/Cargo.toml
+++ b/backend/windmill-api/Cargo.toml
@@ -10,7 +10,7 @@ path = "src/lib.rs"
 
 [features]
 default = []
-private = ["windmill-audit/private", "windmill-common/private", "windmill-api-auth/private", "windmill-store/private", "windmill-api-users/private", "windmill-api-workspaces/private", "windmill-api-groups/private", "windmill-api-configs/private", "windmill-api-settings/private", "windmill-api-agent-workers?/private", "windmill-trigger-kafka?/private", "windmill-trigger-postgres?/private", "windmill-trigger-mqtt?/private", "windmill-trigger-websocket?/private", "windmill-trigger-nats?/private", "windmill-trigger-sqs?/private", "windmill-trigger-gcp?/private", "windmill-trigger-azure?/private", "windmill-trigger-email?/private", "windmill-git-sync/private", "windmill-autoscaling?/private"]
+private = ["windmill-audit/private", "windmill-common/private", "windmill-api-auth/private", "windmill-store/private", "windmill-api-users/private", "windmill-api-workspaces/private", "windmill-api-groups/private", "windmill-api-configs/private", "windmill-api-settings/private", "windmill-api-assets/private", "windmill-api-agent-workers?/private", "windmill-trigger-kafka?/private", "windmill-trigger-postgres?/private", "windmill-trigger-mqtt?/private", "windmill-trigger-websocket?/private", "windmill-trigger-nats?/private", "windmill-trigger-sqs?/private", "windmill-trigger-gcp?/private", "windmill-trigger-azure?/private", "windmill-trigger-email?/private", "windmill-git-sync/private", "windmill-autoscaling?/private"]
 enterprise = ["windmill-queue/enterprise", "windmill-audit/enterprise", "windmill-git-sync/enterprise", "windmill-common/enterprise", "windmill-worker?/enterprise", "windmill-api-auth/enterprise", "windmill-store/enterprise", "windmill-api-jobs/enterprise", "windmill-api-scripts/enterprise", "windmill-api-flows/enterprise", "windmill-api-users/enterprise", "windmill-api-workspaces/enterprise", "windmill-api-groups/enterprise", "windmill-api-configs/enterprise", "windmill-api-settings/enterprise", "windmill-api-schedule/enterprise", "windmill-api-agent-workers?/enterprise", "windmill-trigger/enterprise", "windmill-trigger-kafka?/enterprise", "windmill-trigger-postgres?/enterprise", "windmill-trigger-mqtt?/enterprise", "windmill-trigger-websocket?/enterprise", "windmill-trigger-email?/enterprise", "windmill-trigger-nats?/enterprise", "windmill-trigger-sqs?/enterprise", "windmill-trigger-gcp?/enterprise", "windmill-trigger-azure?/enterprise", "windmill-trigger-http?/enterprise", "windmill-native-triggers?/enterprise", "dep:windmill-autoscaling", "windmill-autoscaling/enterprise", "license"]
 stripe = []
 run_inline = ["dep:windmill-worker", "windmill-api-configs/run_inline"]
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 0fcbb9132e..e7b5badb8c 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -21498,6 +21498,42 @@ paths:
                 items:
                   $ref: "#/components/schemas/MaterializedPartition"
 
+  /w/{workspace}/assets/partitions_in_range:
+    get:
+      summary: List expected partitions of a ducklake asset in a date range with their materialization status (enterprise)
+      operationId: listAssetPartitionsInRange
+      tags:
+        - asset
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+        - name: path
+          in: query
+          required: true
+          description: The materialized ducklake asset path (`<ducklake>/<table>`)
+          schema:
+            type: string
+        - name: from
+          in: query
+          required: true
+          description: Inclusive range start (YYYY-MM-DD), local to the producer's partition tz
+          schema:
+            type: string
+            format: date
+        - name: to
+          in: query
+          required: true
+          description: Inclusive range end (YYYY-MM-DD), local to the producer's partition tz
+          schema:
+            type: string
+            format: date
+      responses:
+        "200":
+          description: expected partitions in range with per-slice status — the missing/failed subset is the backfill worklist
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/PartitionsInRange"
+
   /w/{workspace}/assets/asset_schemas:
     get:
       summary: List captured output-schema versions for a ducklake asset
@@ -29692,6 +29728,27 @@ components:
         error:
           type: string
           nullable: true
+    PartitionsInRange:
+      type: object
+      required: [producer_path, partition_kind, partitions]
+      properties:
+        producer_path:
+          type: string
+          description: the pipeline script that materializes the asset (managed `// materialize` target, or a partitioned writer using the SDK helpers) — the runnable a backfill launches
+        partition_kind:
+          type: string
+          enum: [daily, hourly, weekly, monthly, dynamic]
+        partitions:
+          type: array
+          items:
+            type: object
+            required: [partition, status]
+            properties:
+              partition:
+                type: string
+              status:
+                type: string
+                enum: [missing, running, materialized, failed]
     AssetSchemaVersion:
       type: object
       required: [version, columns, captured_at]
diff --git a/frontend/src/lib/components/assets/AssetGraph/BackfillRangeDialog.svelte b/frontend/src/lib/components/assets/AssetGraph/BackfillRangeDialog.svelte
index 1826ff6b41..e4390fe503 100644
--- a/frontend/src/lib/components/assets/AssetGraph/BackfillRangeDialog.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/BackfillRangeDialog.svelte
@@ -2,78 +2,217 @@
 	import { Button } from '$lib/components/common'
 	import Modal from '$lib/components/common/modal/Modal.svelte'
 	import DateInput from '$lib/components/DateInput.svelte'
+	import Toggle from '$lib/components/Toggle.svelte'
+	import { Loader2 } from 'lucide-svelte'
+	import { resource } from 'runed'
+	import { AssetService } from '$lib/gen'
 	import { enterpriseLicense } from '$lib/stores'
+	import type { BackfillSliceState } from './backfillRun'
 
-	// Backfill re-runs the CE materialization once per partition in [from, to].
-	// It is an enterprise feature (orchestration over a range); the dialog is
-	// only reachable when licensed, but we guard here too so the action can
-	// never fire in CE.
+	// Range backfill of a partitioned ducklake asset (enterprise). The dialog
+	// previews the expected partitions in [from, to] against what
+	// `materialized_partition` records (the missing/failed set is the
+	// worklist), then hands the worklist to the parent, which runs the
+	// producer once per slice (see `backfillRun.ts`). Progress state lives in
+	// the parent so a run survives closing the dialog.
 	interface Props {
 		// Controlled by the parent. `$bindable()` without a default per the
 		// AGENTS.md ban on `$bindable(default)` for optional props.
 		open?: boolean
 		assetPath: string
-		// Invoked with the inclusive ISO date range; the parent performs the
-		// actual fan-out (EE backfill endpoint).
-		onBackfill: (from: string, to: string) => Promise<void>
+		workspace: string
+		// Live per-slice states of the in-flight (or last finished) backfill.
+		slices?: BackfillSliceState[]
+		running?: boolean
+		// Cancellation was requested but the in-flight slice hasn't finished yet.
+		cancelRequested?: boolean
+		onStart: (producerPath: string, partitions: string[]) => void
+		onCancel: () => void
+		// Clear the finished run so the range picker shows again.
+		onReset: () => void
 	}
 
-	let { open = $bindable(), assetPath, onBackfill }: Props = $props()
+	let {
+		open = $bindable(),
+		assetPath,
+		workspace,
+		slices,
+		running,
+		cancelRequested,
+		onStart,
+		onCancel,
+		onReset
+	}: Props = $props()
 
 	let fromDate = $state<string | undefined>(undefined)
 	let toDate = $state<string | undefined>(undefined)
-	let loading = $state(false)
-	let error = $state<string | undefined>(undefined)
+	let onlyMissing = $state(true)
 
-	let canSubmit = $derived(!!$enterpriseLicense && !!fromDate && !!toDate && !loading)
-
-	async function submit() {
-		if (!fromDate || !toDate) return
-		loading = true
-		error = undefined
-		try {
-			await onBackfill(fromDate, toDate)
-			open = false
-		} catch (e) {
-			error = e instanceof Error ? e.message : String(e)
-		} finally {
-			loading = false
+	let preview = resource(
+		[() => workspace, () => assetPath, () => fromDate, () => toDate, () => open ?? false],
+		async ([ws, path, from, to, isOpen]) => {
+			if (!isOpen || !ws || !path || !from || !to) return undefined
+			return await AssetService.listAssetPartitionsInRange({ workspace: ws, path, from, to })
 		}
+	)
+
+	let worklist = $derived.by(() => {
+		const parts = preview.current?.partitions ?? []
+		const picked = onlyMissing
+			? parts.filter((p) => p.status === 'missing' || p.status === 'failed')
+			: parts
+		return picked.map((p) => p.partition)
+	})
+	let counts = $derived.by(() => {
+		const c = { missing: 0, materialized: 0, failed: 0, running: 0 }
+		for (const p of preview.current?.partitions ?? []) c[p.status]++
+		return c
+	})
+	let canStart = $derived(
+		!!$enterpriseLicense && !running && !preview.loading && worklist.length > 0
+	)
+
+	// Backend errors come back as a plain-text body (windmill_common::error).
+	function errText(e: unknown): string {
+		const err = e as { body?: unknown; message?: string }
+		if (typeof err?.body === 'string' && err.body) return err.body
+		return err?.message ?? String(e)
+	}
+
+	const previewChipClass: Record<string, string> = {
+		missing: 'bg-amber-100 text-amber-800 dark:bg-amber-900/40 dark:text-amber-300',
+		failed: 'bg-red-100 text-red-800 dark:bg-red-900/40 dark:text-red-300',
+		materialized: 'bg-green-100 text-green-800 dark:bg-green-900/40 dark:text-green-300',
+		running: 'bg-blue-100 text-blue-800 dark:bg-blue-900/40 dark:text-blue-300'
+	}
+	const sliceChipClass: Record<BackfillSliceState['status'], string> = {
+		pending: 'bg-surface-secondary text-tertiary',
+		running: 'bg-blue-100 text-blue-800 dark:bg-blue-900/40 dark:text-blue-300',
+		success: 'bg-green-100 text-green-800 dark:bg-green-900/40 dark:text-green-300',
+		failure: 'bg-red-100 text-red-800 dark:bg-red-900/40 dark:text-red-300'
 	}
 </script>
 
-<Modal bind:open={() => open ?? false, (v) => (open = v)} title={`Backfill ${assetPath}`}>
+<Modal
+	bind:open={() => open ?? false, (v) => (open = v)}
+	title={`Backfill ${assetPath}`}
+	cancelText="Close"
+>
 	<div class="flex flex-col gap-4">
 		{#if !$enterpriseLicense}
 			<p class="text-sm text-secondary">
 				Partition backfill is an enterprise feature. Materializing a single partition is available
 				in the open-source edition; reprocessing a historical range requires an enterprise license.
 			</p>
+		{:else if slices?.length}
+			<!-- A run is in flight (or just finished): show per-slice progress. -->
+			<p class="text-sm text-secondary">
+				{#if running && cancelRequested}
+					Cancelling — waiting for the current partition to finish; the rest will not run.
+				{:else if running}
+					Materializing {slices.filter((s) => s.status === 'success' || s.status === 'failure')
+						.length}/{slices.length} partitions sequentially — each run gets its partition as an explicit
+					arg.
+				{:else}
+					Backfill finished: {slices.filter((s) => s.status === 'success').length} succeeded,
+					{slices.filter((s) => s.status === 'failure').length} failed,
+					{slices.filter((s) => s.status === 'pending').length} not run.
+				{/if}
+			</p>
+			<div class="flex flex-col gap-1 max-h-64 overflow-auto">
+				{#each slices as s (s.partition)}
+					<div class="flex items-center gap-2 text-xs">
+						<span class="px-1.5 py-0.5 rounded text-3xs font-medium {sliceChipClass[s.status]}">
+							{s.status}
+						</span>
+						<span class="font-mono">{s.partition}</span>
+						{#if s.status === 'running'}
+							<Loader2 size={12} class="animate-spin text-tertiary" />
+						{/if}
+						{#if s.error}
+							<span class="text-3xs text-red-600 truncate" title={s.error}>{s.error}</span>
+						{/if}
+					</div>
+				{/each}
+			</div>
 		{:else}
 			<p class="text-sm text-secondary">
-				Re-runs the materialization for each partition in the range. Re-running a partition is
-				idempotent, so this is safe to repeat.
+				Re-runs the producing script once per partition in the range, each with an explicit
+				<span class="font-mono">partition</span> arg. Re-running a partition is idempotent, so this is
+				safe to repeat.
 			</p>
-			<div class="flex gap-3">
+			<div class="flex gap-3 items-end">
 				<div class="flex flex-col gap-1">
 					<span class="text-xs font-semibold">From</span>
-					<DateInput bind:value={fromDate} />
+					<DateInput bind:value={fromDate} dateFormat="yyyy-MM-dd" />
 				</div>
 				<div class="flex flex-col gap-1">
 					<span class="text-xs font-semibold">To</span>
-					<DateInput bind:value={toDate} />
+					<DateInput bind:value={toDate} dateFormat="yyyy-MM-dd" />
 				</div>
 			</div>
-			{#if error}
-				<p class="text-sm text-red-600">{error}</p>
+			{#if preview.loading}
+				<div class="flex items-center gap-2 text-tertiary text-xs">
+					<Loader2 size={14} class="animate-spin" /> Computing partitions in range…
+				</div>
+			{:else if preview.error}
+				<p class="text-sm text-red-600">{errText(preview.error)}</p>
+			{:else if preview.current}
+				<div class="flex flex-col gap-2">
+					<p class="text-xs text-secondary">
+						{preview.current.partitions.length}
+						{preview.current.partition_kind} partitions in range — {counts.missing} missing,
+						{counts.failed} failed, {counts.materialized} materialized. Producer:
+						<span class="font-mono">{preview.current.producer_path}</span>
+					</p>
+					<div class="flex flex-wrap gap-1 max-h-40 overflow-auto">
+						{#each preview.current.partitions as p (p.partition)}
+							<span
+								class="px-1.5 py-0.5 rounded text-3xs font-mono {previewChipClass[p.status]}"
+								title={p.status}
+							>
+								{p.partition}
+							</span>
+						{/each}
+					</div>
+					<Toggle
+						bind:checked={onlyMissing}
+						size="xs"
+						options={{ right: 'Only run missing and failed partitions' }}
+					/>
+				</div>
 			{/if}
 		{/if}
 	</div>
 
 	{#snippet actions()}
-		<Button variant="subtle" onclick={() => (open = false)}>Cancel</Button>
-		<Button variant="accent" disabled={!canSubmit} {loading} onclick={submit}>
-			Start backfill
-		</Button>
+		{#if running}
+			<Button variant="default" disabled={cancelRequested} onclick={onCancel}>
+				{cancelRequested ? 'Cancelling…' : 'Cancel backfill'}
+			</Button>
+		{:else if slices?.length}
+			<!-- The finished run just changed partition statuses — refresh the
+			     range preview along with clearing the run. -->
+			<Button
+				variant="default"
+				onclick={() => {
+					onReset()
+					preview.refetch()
+				}}
+			>
+				New backfill
+			</Button>
+		{:else}
+			<Button
+				variant="accent"
+				disabled={!canStart}
+				onclick={() => {
+					const producer = preview.current?.producer_path
+					if (producer) onStart(producer, worklist)
+				}}
+			>
+				Backfill {worklist.length} partition{worklist.length === 1 ? '' : 's'}
+			</Button>
+		{/if}
 	{/snippet}
 </Modal>
diff --git a/frontend/src/lib/components/assets/AssetGraph/PartitionStatusGrid.svelte b/frontend/src/lib/components/assets/AssetGraph/PartitionStatusGrid.svelte
index 4b7226e753..4be0bb8b6c 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PartitionStatusGrid.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PartitionStatusGrid.svelte
@@ -1,10 +1,12 @@
 <script lang="ts">
 	import { resource } from 'runed'
-	import { OpenAPI, AssetService, type MaterializedPartition } from '$lib/gen'
+	import { AssetService, JobService, type MaterializedPartition } from '$lib/gen'
 	import { Button } from '$lib/components/common'
 	import { Loader2, RefreshCw, History } from 'lucide-svelte'
-	import { sendUserToast } from '$lib/utils'
+	import { enterpriseLicense } from '$lib/stores'
 	import BackfillRangeDialog from './BackfillRangeDialog.svelte'
+	import { runBackfill, type BackfillSliceState } from './backfillRun'
+	import { makeWaitJobTerminal } from './cascadeRun'
 
 	interface Props {
 		// The materialized ducklake asset path (`<ducklake>/<table>`).
@@ -19,59 +21,131 @@
 	})
 
 	let backfillOpen = $state(false)
+	// Slice states of the in-flight (or last finished) backfill. Owned here —
+	// not in the dialog — so progress keeps streaming in the header when the
+	// dialog is closed mid-run.
+	let backfillSlices = $state<BackfillSliceState[] | undefined>(undefined)
+	let backfillRunning = $state(false)
+	let backfillCancelRequested = $state(false)
+
+	let backfillDone = $derived(
+		backfillSlices?.filter((s) => s.status === 'success' || s.status === 'failure').length ?? 0
+	)
+	let backfillFailed = $derived(backfillSlices?.filter((s) => s.status === 'failure').length ?? 0)
+
+	// Never throws: the job may already be terminal, and the sequential loop
+	// stops on the cancel flag regardless.
+	async function cancelJobById(jobId: string) {
+		try {
+			await JobService.cancelQueuedJob({
+				workspace,
+				id: jobId,
+				requestBody: { reason: 'backfill cancelled' }
+			})
+		} catch {}
+	}
+
+	// Stop scheduling further slices and cancel the in-flight run (its slice
+	// then reports failure); already-materialized slices are unaffected. A
+	// cancel that lands while a launch is in flight (no job id yet) is
+	// finished by the runner via its `cancelJob` hook.
+	async function cancelBackfill() {
+		backfillCancelRequested = true
+		const running = backfillSlices?.find((s) => s.status === 'running')
+		if (running?.jobId) {
+			await cancelJobById(running.jobId)
+		}
+	}
+
+	async function startBackfill(producerPath: string, worklist: string[]) {
+		if (backfillRunning || worklist.length === 0) return
+		backfillRunning = true
+		backfillCancelRequested = false
+		try {
+			await runBackfill({
+				partitions: worklist,
+				// Backend asset dispatch stays ON (unlike client-orchestrated dev
+				// cascades, which pass `_wmill_skip_asset_dispatch`): a backfilled
+				// slice refreshes its deployed consumers like any deployed run,
+				// carrying its partition down the chain.
+				launch: async (partition) =>
+					await JobService.runScriptByPath({
+						workspace,
+						path: producerPath,
+						requestBody: { partition }
+					}),
+				waitTerminal: async (jobId) => {
+					const term = await makeWaitJobTerminal(workspace)(jobId)
+					// The run just recorded (or failed to record) its
+					// materialized_partition row — stream it into the grid.
+					partitions.refetch()
+					return term
+				},
+				onUpdate: (s) => (backfillSlices = s),
+				isCancelled: () => backfillCancelRequested,
+				cancelJob: cancelJobById
+			})
+		} finally {
+			backfillRunning = false
+			partitions.refetch()
+		}
+	}
 
 	const statusClass: Record<MaterializedPartition['status'], string> = {
 		materialized: 'bg-green-100 text-green-800 dark:bg-green-900/40 dark:text-green-300',
 		running: 'bg-blue-100 text-blue-800 dark:bg-blue-900/40 dark:text-blue-300',
 		failed: 'bg-red-100 text-red-800 dark:bg-red-900/40 dark:text-red-300'
 	}
-
-	async function onBackfill(from: string, to: string) {
-		// The fan-out runner is an enterprise feature; the dialog only submits
-		// when licensed. This posts the intent to the (EE) backfill endpoint — a raw
-		// fetch since it's not in the OSS OpenAPI, so carry the bearer token
-		// explicitly (matches how `/pipeline_dev` authenticates: no session cookie).
-		const token = OpenAPI.TOKEN
-		const authHeader: Record<string, string> =
-			typeof token === 'string' && token ? { Authorization: `Bearer ${token}` } : {}
-		const res = await fetch(`${OpenAPI.BASE ?? ''}/w/${workspace}/assets/backfill`, {
-			method: 'POST',
-			credentials: 'include',
-			headers: { 'content-type': 'application/json', ...authHeader },
-			body: JSON.stringify({ path, from, to })
-		})
-		if (!res.ok) throw new Error(`backfill → ${res.status}`)
-		sendUserToast(`Backfill queued for ${path} (${from} → ${to})`)
-		await partitions.refetch()
-	}
 </script>
 
 <div class="flex flex-col h-full">
 	<div class="flex items-center justify-between gap-2 px-3 py-2 border-b shrink-0">
 		<span class="text-xs font-semibold text-secondary">Materialized partitions</span>
-		<div class="flex items-center gap-1">
-			<Button
-				variant="subtle"
-				unifiedSize="sm"
-				startIcon={{ icon: RefreshCw }}
-				iconOnly
-				onclick={() => partitions.refetch()}
-				title="Refresh"
-			/>
-			<!-- The backfill range runner (POST /assets/backfill) is a planned
-			     enterprise follow-up and not yet implemented on the backend, so the
-			     button stays disabled — enabling it would 404. Re-enable when the
-			     endpoint lands. -->
-			<Button
-				variant="default"
-				unifiedSize="sm"
-				startIcon={{ icon: History }}
-				disabled
-				onclick={() => (backfillOpen = true)}
-				title="Backfill a range of partitions — coming soon (enterprise)"
-			>
-				Backfill
-			</Button>
+		<div class="flex items-center gap-2">
+			{#if backfillRunning}
+				<button
+					class="flex items-center gap-1 text-3xs text-tertiary hover:text-primary"
+					onclick={() => (backfillOpen = true)}
+					title="Show backfill progress"
+				>
+					<Loader2 size={12} class="animate-spin" />
+					Backfilling {backfillDone}/{backfillSlices?.length ?? 0}
+				</button>
+			{:else if backfillSlices?.length}
+				<button
+					class="text-3xs {backfillFailed > 0
+						? 'text-red-600'
+						: 'text-tertiary'} hover:text-primary"
+					onclick={() => (backfillOpen = true)}
+					title="Show backfill result"
+				>
+					Backfill: {backfillDone - backfillFailed}/{backfillSlices.length} ok{backfillFailed > 0
+						? `, ${backfillFailed} failed`
+						: ''}
+				</button>
+			{/if}
+			<div class="flex items-center gap-1">
+				<Button
+					variant="subtle"
+					unifiedSize="sm"
+					startIcon={{ icon: RefreshCw }}
+					iconOnly
+					onclick={() => partitions.refetch()}
+					title="Refresh"
+				/>
+				<Button
+					variant="default"
+					unifiedSize="sm"
+					startIcon={{ icon: History }}
+					disabled={!$enterpriseLicense}
+					onclick={() => (backfillOpen = true)}
+					title={$enterpriseLicense
+						? 'Backfill a range of partitions'
+						: 'Backfill a range of partitions (enterprise feature)'}
+				>
+					Backfill
+				</Button>
+			</div>
 		</div>
 	</div>
 
@@ -122,4 +196,14 @@
 	</div>
 </div>
 
-<BackfillRangeDialog bind:open={backfillOpen} assetPath={path} {onBackfill} />
+<BackfillRangeDialog
+	bind:open={backfillOpen}
+	assetPath={path}
+	{workspace}
+	slices={backfillSlices}
+	running={backfillRunning}
+	cancelRequested={backfillCancelRequested}
+	onStart={startBackfill}
+	onCancel={cancelBackfill}
+	onReset={() => (backfillSlices = undefined)}
+/>
diff --git a/frontend/src/lib/components/assets/AssetGraph/backfillRun.test.ts b/frontend/src/lib/components/assets/AssetGraph/backfillRun.test.ts
new file mode 100644
index 0000000000..69fc6f9728
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/backfillRun.test.ts
@@ -0,0 +1,118 @@
+import { describe, expect, it } from 'vitest'
+import { runBackfill, type BackfillSliceState } from './backfillRun'
+
+// Deterministic fake backend: launch resolves with `job:<partition>`,
+// waitTerminal resolves per the `results` table (default success), recording
+// launch order.
+function fakeRunner(results: Record<string, 'success' | 'failure'> = {}) {
+	const launched: string[] = []
+	return {
+		launched,
+		launch: async (partition: string) => {
+			launched.push(partition)
+			return `job:${partition}`
+		},
+		waitTerminal: async (jobId: string) => results[jobId.slice(4)] ?? ('success' as const)
+	}
+}
+
+describe('runBackfill', () => {
+	it('runs slices sequentially in order and reports ok', async () => {
+		const r = fakeRunner()
+		const res = await runBackfill({
+			partitions: ['2026-06-26', '2026-06-27', '2026-06-29'],
+			launch: r.launch,
+			waitTerminal: r.waitTerminal
+		})
+		expect(r.launched).toEqual(['2026-06-26', '2026-06-27', '2026-06-29'])
+		expect(res.ok).toBe(true)
+		expect(res.cancelled).toBe(false)
+		expect(res.slices.map((s) => s.status)).toEqual(['success', 'success', 'success'])
+		expect(res.slices.map((s) => s.jobId)).toEqual([
+			'job:2026-06-26',
+			'job:2026-06-27',
+			'job:2026-06-29'
+		])
+	})
+
+	it('continues past a failed slice — each slice is independent', async () => {
+		const r = fakeRunner({ '2026-06-27': 'failure' })
+		const res = await runBackfill({
+			partitions: ['2026-06-26', '2026-06-27', '2026-06-29'],
+			launch: r.launch,
+			waitTerminal: r.waitTerminal
+		})
+		expect(r.launched).toEqual(['2026-06-26', '2026-06-27', '2026-06-29'])
+		expect(res.ok).toBe(false)
+		expect(res.slices.map((s) => s.status)).toEqual(['success', 'failure', 'success'])
+	})
+
+	it('records a launch error as slice failure and keeps going', async () => {
+		const r = fakeRunner()
+		const res = await runBackfill({
+			partitions: ['a', 'b'],
+			launch: async (p) => {
+				if (p === 'a') throw new Error('boom')
+				return r.launch(p)
+			},
+			waitTerminal: r.waitTerminal
+		})
+		expect(res.slices[0]).toMatchObject({ status: 'failure', error: 'boom' })
+		expect(res.slices[1].status).toBe('success')
+	})
+
+	it('stops before the next launch when cancelled, leaving the rest pending', async () => {
+		const r = fakeRunner()
+		let done = 0
+		const res = await runBackfill({
+			partitions: ['a', 'b', 'c'],
+			launch: r.launch,
+			waitTerminal: async (id) => {
+				done++
+				return r.waitTerminal(id)
+			},
+			isCancelled: () => done >= 1
+		})
+		expect(r.launched).toEqual(['a'])
+		expect(res.cancelled).toBe(true)
+		expect(res.ok).toBe(false)
+		expect(res.slices.map((s) => s.status)).toEqual(['success', 'pending', 'pending'])
+	})
+
+	it('cancels a job whose launch raced the cancellation', async () => {
+		let cancelled = false
+		const cancelledJobs: string[] = []
+		const res = await runBackfill({
+			partitions: ['a', 'b'],
+			launch: async (p) => {
+				// The user clicks cancel while the launch request is in flight —
+				// there is no job id to cancel yet.
+				cancelled = true
+				return `job:${p}`
+			},
+			waitTerminal: async () => 'failure',
+			isCancelled: () => cancelled,
+			cancelJob: async (id) => {
+				cancelledJobs.push(id)
+			}
+		})
+		expect(cancelledJobs).toEqual(['job:a'])
+		expect(res.cancelled).toBe(true)
+		expect(res.slices.map((s) => s.status)).toEqual(['failure', 'pending'])
+	})
+
+	it('emits a snapshot per transition, never mutating earlier snapshots', async () => {
+		const r = fakeRunner()
+		const snapshots: BackfillSliceState[][] = []
+		await runBackfill({
+			partitions: ['a'],
+			launch: r.launch,
+			waitTerminal: r.waitTerminal,
+			onUpdate: (s) => snapshots.push(s)
+		})
+		// initial pending, running, running+jobId, terminal
+		expect(snapshots.map((s) => s[0].status)).toEqual(['pending', 'running', 'running', 'success'])
+		expect(snapshots[1][0].jobId).toBeUndefined()
+		expect(snapshots[2][0].jobId).toBe('job:a')
+	})
+})
diff --git a/frontend/src/lib/components/assets/AssetGraph/backfillRun.ts b/frontend/src/lib/components/assets/AssetGraph/backfillRun.ts
new file mode 100644
index 0000000000..51fbc9664b
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/backfillRun.ts
@@ -0,0 +1,83 @@
+// Client-side orchestration of a partition-range backfill (enterprise): one
+// deployed run of the producing script per slice, launched with an explicit
+// `partition` arg (the worker only resolves a partition when the arg is
+// absent, so the caller-provided value wins). Slices run sequentially —
+// concurrent materializations of the same ducklake table would contend on
+// the catalog commit — and a failed slice does not stop the rest: each slice
+// is independent, and the missing/failed set is simply the next worklist.
+//
+// Pure module (no Svelte runes) so the loop is unit-testable; reactive
+// progress is delivered via `onUpdate` snapshots, mirroring
+// `cascadeOrchestrator.ts`.
+
+export type BackfillSliceStatus = 'pending' | 'running' | 'success' | 'failure'
+
+export type BackfillSliceState = {
+	partition: string
+	status: BackfillSliceStatus
+	jobId?: string
+	error?: string
+}
+
+export type BackfillRunOptions = {
+	/** Partition values to materialize, in run order. */
+	partitions: string[]
+	/** Launch one run of the producer with the given partition arg; returns the job id. */
+	launch: (partition: string) => Promise<string>
+	/** Resolve once the job reaches a terminal state. */
+	waitTerminal: (jobId: string) => Promise<'success' | 'failure'>
+	/** Snapshot of all slice states, emitted on every transition. */
+	onUpdate?: (slices: BackfillSliceState[]) => void
+	/** Checked before each launch; a true stop leaves the remaining slices 'pending'. */
+	isCancelled?: () => boolean
+	/**
+	 * Cancel a job whose launch raced the cancellation — the cancel click had
+	 * no job id to act on yet, so the loop cancels it as soon as the id
+	 * arrives. Must not throw (the job may already be terminal).
+	 */
+	cancelJob?: (jobId: string) => Promise<void>
+}
+
+export type BackfillRunResult = {
+	/** True when every slice ran and succeeded. */
+	ok: boolean
+	/** True when the loop stopped early on `isCancelled`. */
+	cancelled: boolean
+	slices: BackfillSliceState[]
+}
+
+export async function runBackfill(opts: BackfillRunOptions): Promise<BackfillRunResult> {
+	const { partitions, launch, waitTerminal, onUpdate, isCancelled, cancelJob } = opts
+	const slices: BackfillSliceState[] = partitions.map((partition) => ({
+		partition,
+		status: 'pending'
+	}))
+	const emit = () => onUpdate?.(slices.map((s) => ({ ...s })))
+	emit()
+	let cancelled = false
+	for (const slice of slices) {
+		if (isCancelled?.()) {
+			cancelled = true
+			break
+		}
+		slice.status = 'running'
+		emit()
+		try {
+			slice.jobId = await launch(slice.partition)
+			emit()
+			if (isCancelled?.() && cancelJob) {
+				await cancelJob(slice.jobId)
+			}
+			slice.status = await waitTerminal(slice.jobId)
+		} catch (e) {
+			slice.status = 'failure'
+			slice.error = e instanceof Error ? e.message : String(e)
+		}
+		emit()
+	}
+	return {
+		ok: !cancelled && slices.every((s) => s.status === 'success'),
+		cancelled,
+		slices
+	}
+}

From 5745dfc6ea69dcc15dbf70d548c706a8f2974d2a Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 12:51:17 +0200
Subject: [PATCH 16/76] smooth local pipeline dogfooding (#9888)

---
 AGENTS.md                                  |  1 +
 backend/CLAUDE.md                          |  5 +++
 cli/src/commands/pipeline/docs.ts          | 25 ++++++++++----
 cli/src/commands/pipeline/localGraph.ts    | 38 +++++++++++++++++++++-
 cli/test/pipeline_local_graph_unit.test.ts | 23 ++++++++++++-
 5 files changed, 83 insertions(+), 9 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index aead237e59..ac00741c49 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -24,6 +24,7 @@ Open-source platform for internal tools, workflows, API integrations, background
 ## Dev Environment
 
 - **Backend**: `cargo run` from `backend/` (API at http://localhost:8000)
+- **DuckDB local jobs**: before running DuckDB scripts locally, build the FFI shared library with `cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh`. Re-run it after clean builds or when `backend/target/debug/libwindmill_duckdb_ffi_internal.*` is missing.
 - **Frontend**: `REMOTE=http://localhost:8000 npm run dev` from `frontend/` (port 3000+)
 - **DB**: `psql postgres://postgres:changeme@localhost:5432/windmill`
 - **Login**: `admin@windmill.dev` / `changeme`
diff --git a/backend/CLAUDE.md b/backend/CLAUDE.md
index 9ff2c0be90..086e251962 100644
--- a/backend/CLAUDE.md
+++ b/backend/CLAUDE.md
@@ -6,3 +6,8 @@
 - **DB schema**: `backend/summarized_schema.txt`
 - **API routes entry point**: `windmill-api/src/lib.rs`
 - **OpenAPI spec**: `windmill-api/openapi.yaml`
+- **DuckDB local jobs**: build the dynamic FFI library before running DuckDB scripts locally:
+  ```bash
+  cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh
+  ```
+  Re-run after clean builds or when `target/debug/libwindmill_duckdb_ffi_internal.*` is missing.
diff --git a/cli/src/commands/pipeline/docs.ts b/cli/src/commands/pipeline/docs.ts
index 57fb70618a..b360c8b802 100644
--- a/cli/src/commands/pipeline/docs.ts
+++ b/cli/src/commands/pipeline/docs.ts
@@ -157,8 +157,6 @@ export async function generatePipelineDocs(
   opts: GlobalOptions & { local?: boolean; defaultTs?: "bun" | "deno" },
   folder: string,
 ) {
-  const workspace = await resolveWorkspace(opts);
-  await requireLogin(opts);
   const f = folder.replace(/^f\//, "").replace(/\/$/, "");
   // `docs` WRITES PIPELINE.md / AGENTS.md / CLAUDE.md under `f/<folder>`; a `..`
   // segment would escape the folder and clobber files elsewhere in the tree.
@@ -170,9 +168,12 @@ export async function generatePipelineDocs(
   // defaultTs (from wmill.yaml) drives .ts → bun/deno inference for the local graph.
   const merged = await mergeConfigWithConfigFile(opts);
 
+  const workspace = opts.local ? undefined : await resolveWorkspace(opts);
+  if (!opts.local) await requireLogin(opts);
+
   const graph = opts.local
     ? (await buildLocalPipelineGraph({ root, folder: f, defaultTs: merged.defaultTs })).graph
-    : await fetchDeployedGraph(workspace.workspaceId, f);
+    : await fetchDeployedGraph(workspace!.workspaceId, f);
 
   if (graph.runnables.length === 0) {
     // The deployed graph is empty — but a user/agent in a working tree may have
@@ -198,10 +199,20 @@ export async function generatePipelineDocs(
   }
 
   let datatableSchemas: any[] = [];
-  try {
-    datatableSchemas = await wmill.listDataTableSchemas({ workspace: workspace.workspaceId });
-  } catch (err: any) {
-    log.warn(colors.yellow(`Could not fetch datatable schemas: ${err.message}`));
+  const hasExplicitWorkspace =
+    !!opts.workspace ||
+    (!!opts.baseUrl && !!opts.token) ||
+    (!!process.env["WM_WORKSPACE"] &&
+      !!process.env["WM_TOKEN"] &&
+      !!(process.env["BASE_INTERNAL_URL"] ?? process.env["BASE_URL"]));
+  if (!opts.local || hasExplicitWorkspace) {
+    try {
+      const schemaWorkspace = workspace ?? await resolveWorkspace(opts);
+      if (opts.local) await requireLogin(opts);
+      datatableSchemas = await wmill.listDataTableSchemas({ workspace: schemaWorkspace.workspaceId });
+    } catch (err: any) {
+      log.warn(colors.yellow(`Could not fetch datatable schemas: ${err.message}`));
+    }
   }
 
   const md = generatePipelineMarkdown(f, graph, datatableSchemas, !!opts.local);
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index ce556d1d8e..9d40a0e4b7 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -241,6 +241,30 @@ function fallbackParse(content: string, language: string): ParseAssetsRaw {
   return out;
 }
 
+function recoverHeaderNativeTriggers(content: string, language: string): string[] {
+  const raw = commentPrefix(language);
+  const p = raw.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const out: string[] = [];
+  const seen = new Set<string>();
+  for (const line of content.split("\n")) {
+    const trimmed = line.trim();
+    if (trimmed === "") continue;
+    if (!trimmed.startsWith(raw)) break;
+    const marker = line.match(new RegExp(`^\\s*${p}\\s*on\\s+(\\S+)\\s*$`));
+    if (!marker) continue;
+    const kind = marker[1];
+    if (!NATIVE_KINDS.has(kind) || seen.has(kind)) continue;
+    seen.add(kind);
+    out.push(kind);
+  }
+  return out;
+}
+
+function normalizeRetry(retry: ParseAssetsRaw["retry"]): ParseAssetsRaw["retry"] {
+  if (!retry?.delay) return retry;
+  return { ...retry, delay: retry.delay.replace(/^delay=/, "") };
+}
+
 // Comment prefix for `volume:` annotations. Deliberately NOT `commentPrefix`
 // above (which returns `--` for SQL): volume annotations are only recognized for
 // the languages the backend/frontend recognize them for — mirrors
@@ -398,6 +422,8 @@ export async function buildLocalPipelineGraph(args: {
   for (const s of all) {
     const out = await inferScriptAssets(s.content, s.language);
     if (!out.in_pipeline) continue; // not a pipeline member
+    const retry = normalizeRetry(out.retry);
+    const nativeTriggers = recoverHeaderNativeTriggers(s.content, s.language);
     // Carry the parsed `// tag` so previews route to the same worker the
     // deployed pipeline would (both `pipeline run --local` and `/pipeline_dev`).
     pipelineScripts.push(out.tag ? { ...s, tag: out.tag } : s);
@@ -420,7 +446,7 @@ export async function buildLocalPipelineGraph(args: {
       ...(out.partition ? { partition_kind: out.partition.kind } : {}),
       ...(out.freshness ? { freshness: out.freshness.duration } : {}),
       ...(out.tag ? { tag: out.tag } : {}),
-      ...(out.retry ? { retry: out.retry } : {}),
+      ...(retry ? { retry } : {}),
       ...(out.data_tests && out.data_tests.length > 0 ? { data_tests: out.data_tests } : {}),
       ...(out.column_lineage && out.column_lineage.length > 0
         ? { column_lineage: out.column_lineage }
@@ -466,6 +492,7 @@ export async function buildLocalPipelineGraph(args: {
         });
       }
     }
+    const existingNativeTriggers = new Set<string>();
     for (const t of out.triggers ?? []) {
       if (t.kind === "asset") {
         const at = t as { kind: "asset"; asset_kind: string; path: string };
@@ -481,6 +508,7 @@ export async function buildLocalPipelineGraph(args: {
           runnable_path: s.path,
         });
       } else {
+        existingNativeTriggers.add(t.kind);
         triggers.push({
           trigger_kind: t.kind,
           runnable_kind: "script",
@@ -488,6 +516,14 @@ export async function buildLocalPipelineGraph(args: {
         });
       }
     }
+    for (const kind of nativeTriggers) {
+      if (existingNativeTriggers.has(kind)) continue;
+      triggers.push({
+        trigger_kind: kind,
+        runnable_kind: "script",
+        runnable_path: s.path,
+      });
+    }
   }
 
   return {
diff --git a/cli/test/pipeline_local_graph_unit.test.ts b/cli/test/pipeline_local_graph_unit.test.ts
index 6b192cb317..1368e14504 100644
--- a/cli/test/pipeline_local_graph_unit.test.ts
+++ b/cli/test/pipeline_local_graph_unit.test.ts
@@ -67,11 +67,32 @@ test("native triggers surface as trigger rows (no deploy needed)", async () => {
     {
       "ingest.bun.ts":
         `// pipeline\n// on data_upload\nimport * as wmill from "windmill-client"\nexport async function main() {}\n`,
+      "upload_trigger.duckdb.sql": `-- pipeline\n-- on data_upload\nSELECT 1;\n`,
     },
     async (root, folder) => {
       const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
       const native = graph.triggers.filter((t) => t.trigger_kind !== "asset");
-      expect(native.map((t) => t.trigger_kind)).toContain("data_upload");
+      expect(
+        native
+          .filter((t) => t.trigger_kind === "data_upload")
+          .map((t) => t.runnable_path)
+          .sort(),
+      ).toEqual(["f/mypipe/ingest", "f/mypipe/upload_trigger"]);
+    },
+  );
+});
+
+test("retry delay metadata strips the optional `delay=` prefix", async () => {
+  await withFolder(
+    {
+      "retry.duckdb.sql": `-- pipeline\n-- retry 2 delay=10s\nSELECT 1;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.runnables.find((r) => r.path === "f/mypipe/retry")?.retry).toEqual({
+        count: 2,
+        delay: "10s",
+      });
     },
   );
 });

From 789450731b0a3c8dffa336f7bfc3f3de528c09fb Mon Sep 17 00:00:00 2001
From: Alexander Petric <alpetric@users.noreply.github.com>
Date: Thu, 2 Jul 2026 12:51:36 +0200
Subject: [PATCH 17/76] fix(triggers): retry transient websocket connect
 failures before disabling (#9887)

A websocket trigger is permanently disabled (with a critical alert) when a
single connect attempt in get_consumer fails. Gateway endpoints fronted by
edge proxies (e.g. Discord behind Cloudflare) sporadically answer the
upgrade handshake with a transient 502/520, so a long-lived trigger that
reconnects frequently eventually catches one and dies until a human
re-enables it.

Retry transient failures (HTTP 5xx/429 handshake responses and IO errors)
up to 5 attempts with exponential backoff before surfacing the error, and
report retry progress through the trigger's error status. Permanent-looking
errors (bad URL, other 4xx, protocol/TLS mismatch) still disable immediately.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../src/listener.rs                           |  71 +++++++-
 .../tests/connect_retry.rs                    | 153 ++++++++++++++++++
 2 files changed, 216 insertions(+), 8 deletions(-)
 create mode 100644 backend/windmill-trigger-websocket/tests/connect_retry.rs

diff --git a/backend/windmill-trigger-websocket/src/listener.rs b/backend/windmill-trigger-websocket/src/listener.rs
index d46faf1b1a..e34fe6e4f6 100644
--- a/backend/windmill-trigger-websocket/src/listener.rs
+++ b/backend/windmill-trigger-websocket/src/listener.rs
@@ -11,7 +11,7 @@ use serde::Deserialize;
 use serde_json::value::RawValue;
 use std::{borrow::Cow, collections::HashMap, sync::Arc};
 use tokio::{net::TcpStream, sync::RwLock};
-use tokio_tungstenite::{tungstenite::Message, MaybeTlsStream, WebSocketStream};
+use tokio_tungstenite::{tungstenite, tungstenite::Message, MaybeTlsStream, WebSocketStream};
 use windmill_common::{
     error::{to_anyhow, Error, Result},
     jobs::JobTriggerKind,
@@ -22,13 +22,30 @@ use windmill_common::{
 };
 use windmill_queue::PushArgsOwned;
 use windmill_trigger::filter::{check_filters, Filter};
-use windmill_trigger::listener::ListeningTrigger;
+use windmill_trigger::listener::{update_rw_lock, ListeningTrigger};
 use windmill_trigger::trigger_helpers::{
     trigger_runnable, trigger_runnable_and_wait_for_raw_result,
     trigger_runnable_and_wait_for_raw_result_with_error_ctx, TriggerJobArgs,
 };
 use windmill_trigger::Listener;
 
+const MAX_CONNECT_ATTEMPTS: u32 = 5;
+
+/// Whether a failed WebSocket connect is worth retrying: network-level IO
+/// errors and HTTP 5xx/429 handshake responses are typically transient (edge
+/// proxies like Cloudflare return 502/520 sporadically), while other errors
+/// (bad URL, protocol mismatch, other 4xx) point at configuration and would
+/// fail identically on every attempt.
+fn is_transient_connect_error(err: &tungstenite::Error) -> bool {
+    match err {
+        tungstenite::Error::Io(_) => true,
+        tungstenite::Error::Http(resp) => {
+            resp.status().is_server_error() || resp.status().as_u16() == 429
+        }
+        _ => false,
+    }
+}
+
 async fn send_initial_messages(
     listening_trigger: &ListeningTrigger<WebsocketConfig>,
     writer: &mut SplitSink<WebSocketStream<MaybeTlsStream<TcpStream>>, Message>,
@@ -176,12 +193,50 @@ impl Listener for WebsocketTrigger {
 
         validate_websocket_url_for_ssrf(&connect_url).await?;
 
-        let connection = connect_async_with_proxy(&*connect_url)
-            .await
-            .map(|conn| Some(conn))
-            .map_err(|err| to_anyhow(err).into());
-
-        connection
+        // Gateway endpoints are often fronted by an edge proxy (e.g. Cloudflare)
+        // that sporadically answers the upgrade request with a transient 5xx
+        // instead of `101 Switching Protocols`, and a `get_consumer` error
+        // disables the trigger until a human re-enables it — so retry transient
+        // failures with backoff before giving up. The caller runs `loop_ping`
+        // concurrently so `last_server_ping` stays alive across the sleeps, and
+        // killpill cancels this future between awaits.
+        let mut attempt = 0;
+        loop {
+            attempt += 1;
+            match connect_async_with_proxy(&*connect_url).await {
+                Ok(conn) => return Ok(Some(conn)),
+                // Only retry in trigger mode: a failed connect there disables the
+                // trigger until a human re-enables it, while capture mode is an
+                // interactive test where instant feedback beats resilience (an
+                // `Io` error can also be a permanent misconfiguration, e.g. a
+                // typo'd host, which should surface immediately when iterating).
+                Err(err)
+                    if listening_trigger.trigger_mode
+                        && attempt < MAX_CONNECT_ATTEMPTS
+                        && is_transient_connect_error(&err) =>
+                {
+                    let delay_secs = 1u64 << attempt;
+                    tracing::warn!(
+                        "Transient error connecting to WebSocket for trigger {} (attempt {}/{}), retrying in {}s: {}",
+                        listening_trigger.path,
+                        attempt,
+                        MAX_CONNECT_ATTEMPTS,
+                        delay_secs,
+                        err
+                    );
+                    update_rw_lock(
+                        err_message.clone(),
+                        Some(format!(
+                            "Connection attempt {}/{} failed ({}), retrying in {}s...",
+                            attempt, MAX_CONNECT_ATTEMPTS, err, delay_secs
+                        )),
+                    )
+                    .await;
+                    tokio::time::sleep(std::time::Duration::from_secs(delay_secs)).await;
+                }
+                Err(err) => return Err(to_anyhow(err).into()),
+            }
+        }
     }
     async fn consume(
         &self,
diff --git a/backend/windmill-trigger-websocket/tests/connect_retry.rs b/backend/windmill-trigger-websocket/tests/connect_retry.rs
new file mode 100644
index 0000000000..2d21512692
--- /dev/null
+++ b/backend/windmill-trigger-websocket/tests/connect_retry.rs
@@ -0,0 +1,153 @@
+//! End-to-end tests for the websocket trigger connect-retry behavior: a mock
+//! TCP server rejects the websocket upgrade with a configurable HTTP status a
+//! number of times before completing a real handshake, and the tests assert
+//! which failures `get_consumer` retries.
+//!
+//! This lives in an integration-test binary (own process) because it sets
+//! ALLOW_PRIVATE_WEBSOCKET_URLS — the mock server listens on 127.0.0.1, which
+//! the SSRF check blocks — and that process-global env var must not leak into
+//! the crate's unit tests, which assert loopback URLs are rejected.
+
+use std::sync::{
+    atomic::{AtomicU32, Ordering},
+    Arc,
+};
+
+use tokio::{
+    io::{AsyncBufReadExt, AsyncWriteExt, BufReader},
+    net::TcpListener,
+    sync::{broadcast, RwLock},
+};
+use windmill_trigger::{listener::ListeningTrigger, Listener};
+use windmill_trigger_websocket::{
+    WebsocketConfig, WebsocketTrigger, ALLOW_PRIVATE_WEBSOCKET_URLS_ENV,
+};
+
+/// Mock server: rejects the first `failures` upgrade requests with
+/// `status_line` and closes, then completes real websocket handshakes and
+/// parks the connection open. Returns the bound address and the
+/// connection-attempt counter.
+async fn mock_ws_server(
+    failures: u32,
+    status_line: &'static str,
+) -> (std::net::SocketAddr, Arc<AtomicU32>) {
+    let listener = TcpListener::bind("127.0.0.1:0").await.unwrap();
+    let addr = listener.local_addr().unwrap();
+    let attempts = Arc::new(AtomicU32::new(0));
+    let served = attempts.clone();
+    tokio::spawn(async move {
+        loop {
+            let (mut socket, _) = listener.accept().await.unwrap();
+            let n = served.fetch_add(1, Ordering::SeqCst);
+            if n < failures {
+                // Drain the request head, then reject the upgrade.
+                let mut reader = BufReader::new(&mut socket);
+                let mut line = String::new();
+                loop {
+                    line.clear();
+                    let read = reader.read_line(&mut line).await.unwrap_or(0);
+                    if read == 0 || line == "\r\n" {
+                        break;
+                    }
+                }
+                socket
+                    .write_all(
+                        format!("HTTP/1.1 {status_line}\r\nContent-Length: 0\r\n\r\n").as_bytes(),
+                    )
+                    .await
+                    .ok();
+            } else if let Ok(ws) = tokio_tungstenite::accept_async(socket).await {
+                tokio::spawn(async move {
+                    let _open = ws;
+                    std::future::pending::<()>().await
+                });
+            }
+        }
+    });
+    (addr, attempts)
+}
+
+fn trigger(url: String, trigger_mode: bool) -> ListeningTrigger<WebsocketConfig> {
+    ListeningTrigger {
+        path: "f/test/ws".to_string(),
+        is_flow: false,
+        workspace_id: "test".to_string(),
+        edited_by: "test".to_string(),
+        permissioned_as: "u/test".to_string(),
+        trigger_config: WebsocketConfig {
+            url,
+            filters: vec![],
+            filter_logic: "and".to_string(),
+            initial_messages: None,
+            url_runnable_args: None,
+            can_return_message: false,
+            can_return_error_result: false,
+            heartbeat: None,
+        },
+        script_path: "f/test/script".to_string(),
+        trigger_mode,
+        error_handling: None,
+        suspended_mode: false,
+    }
+}
+
+async fn get_consumer_result(
+    lt: &ListeningTrigger<WebsocketConfig>,
+    err_message: Arc<RwLock<Option<String>>>,
+) -> windmill_common::error::Result<Option<<WebsocketTrigger as Listener>::Consumer>> {
+    // The static-URL path of `get_consumer` never touches the DB; a lazy pool
+    // satisfies the signature without a running postgres.
+    let db: windmill_common::DB =
+        sqlx::Pool::connect_lazy("postgres://unused:unused@127.0.0.1:1/unused").unwrap();
+    let (_killpill_tx, killpill_rx) = broadcast::channel::<()>(1);
+    WebsocketTrigger
+        .get_consumer(&db, lt, err_message, killpill_rx)
+        .await
+}
+
+#[tokio::test]
+async fn transient_502s_are_retried_until_the_upgrade_succeeds() {
+    std::env::set_var(ALLOW_PRIVATE_WEBSOCKET_URLS_ENV, "true");
+    let (addr, attempts) = mock_ws_server(2, "502 Bad Gateway").await;
+    let lt = trigger(format!("ws://{addr}"), true);
+    let err_message = Arc::new(RwLock::new(None));
+
+    let consumer = get_consumer_result(&lt, err_message.clone())
+        .await
+        .expect("connect should succeed after retries");
+
+    assert!(consumer.is_some(), "expected an established connection");
+    assert_eq!(attempts.load(Ordering::SeqCst), 3);
+    // Retry progress was reported through the shared status lock.
+    let status = err_message.read().await.clone().unwrap();
+    assert!(status.contains("attempt 2/5"), "got status: {status}");
+    assert!(status.contains("502"), "got status: {status}");
+}
+
+#[tokio::test]
+async fn non_transient_http_errors_fail_on_the_first_attempt() {
+    std::env::set_var(ALLOW_PRIVATE_WEBSOCKET_URLS_ENV, "true");
+    let (addr, attempts) = mock_ws_server(u32::MAX, "404 Not Found").await;
+    let lt = trigger(format!("ws://{addr}"), true);
+
+    let err = get_consumer_result(&lt, Arc::new(RwLock::new(None)))
+        .await
+        .expect_err("a 404 upgrade response should not be retried");
+
+    assert!(err.to_string().contains("404"), "got error: {err}");
+    assert_eq!(attempts.load(Ordering::SeqCst), 1);
+}
+
+#[tokio::test]
+async fn capture_mode_fails_fast_even_on_transient_errors() {
+    std::env::set_var(ALLOW_PRIVATE_WEBSOCKET_URLS_ENV, "true");
+    let (addr, attempts) = mock_ws_server(u32::MAX, "502 Bad Gateway").await;
+    let lt = trigger(format!("ws://{addr}"), false);
+
+    let err = get_consumer_result(&lt, Arc::new(RwLock::new(None)))
+        .await
+        .expect_err("capture mode should surface the first failure immediately");
+
+    assert!(err.to_string().contains("502"), "got error: {err}");
+    assert_eq!(attempts.load(Ordering::SeqCst), 1);
+}

From 5af91a677cad88faccba702e3556fc4fb7b6e640 Mon Sep 17 00:00:00 2001
From: Guilhem <guilhemlemouel@gmail.com>
Date: Thu, 2 Jul 2026 16:32:01 +0200
Subject: [PATCH 18/76] fix: stale AI chat context picker after workspace item
 changes (#9893)

* fix: revalidate workspace items cache on context picker open

The chat context picker (and workspace drill pickers) read from a
module-level cache that was only invalidated from two editor save paths,
so items created or deleted anywhere else stayed stale until a full page
reload. Make the loader do real stale-while-revalidate: cached items
render instantly and each workspace+kind is re-fetched once per picker
mount, keeping the state reference stable when nothing changed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: retry failed picker revalidation and handle its rejection

Mark a workspace+kind as revalidated only after the fetch succeeds, so a
failed revalidation is retried on the next ensureLoaded call instead of
stranding stale data for the rest of the mount. Catch the rejection
(callers fire-and-forget) and log it. Also dedupe the
stale-while-revalidate rationale to its canonical comment site in
workspacePicker.ts.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../components/workspaceItemsLoader.svelte.ts | 40 ++++++++++++++++---
 .../src/lib/components/workspacePicker.ts     | 14 ++++---
 2 files changed, 44 insertions(+), 10 deletions(-)

diff --git a/frontend/src/lib/components/workspaceItemsLoader.svelte.ts b/frontend/src/lib/components/workspaceItemsLoader.svelte.ts
index 45d64bd01b..4ac65f805b 100644
--- a/frontend/src/lib/components/workspaceItemsLoader.svelte.ts
+++ b/frontend/src/lib/components/workspaceItemsLoader.svelte.ts
@@ -21,13 +21,23 @@ import {
  * Both getters are read inside the returned closures so changing
  * workspace or kinds after mount Just Works.
  */
+function itemsEqual(a: WorkspaceItem[] | undefined, b: WorkspaceItem[]): boolean {
+	if (!a || a.length !== b.length) return false
+	return a.every(
+		(item, i) =>
+			item.path === b[i].path &&
+			item.summary === b[i].summary &&
+			item.kind === b[i].kind &&
+			item.raw_app === b[i].raw_app
+	)
+}
+
 export function useWorkspaceItemsLoader(
 	workspace: () => string | undefined,
 	kinds: () => readonly WorkspaceItemKind[]
 ) {
 	// Seed from the module-level cache so kinds already fetched in this
-	// session render on the first frame. Re-fetching `ensureLoaded` later
-	// quietly swaps in fresh data (stale-while-revalidate).
+	// session render on the first frame.
 	let loaded = $state<Partial<Record<WorkspaceItemKind, WorkspaceItem[]>>>(
 		(() => {
 			const ws = untrack(workspace)
@@ -41,18 +51,38 @@ export function useWorkspaceItemsLoader(
 		})()
 	)
 	let loadingKind = $state<Partial<Record<WorkspaceItemKind, boolean>>>({})
+	// Workspace+kind pairs this loader instance has refreshed — at most one
+	// background re-fetch per kind per mount. Marked on success only, so a
+	// failed fetch is retried by the next call instead of stranding stale data.
+	const revalidated = new Set<string>()
 
 	async function ensureLoaded(kind: WorkspaceItemKind) {
 		const ws = workspace()
 		if (!ws) return
+		const revalidateKey = `${ws}:${kind}`
 		// `loaded[kind]` read inside `untrack` so callers wiring this into
 		// a reactive context (DrillPicker's onFilterChange effect) don't
 		// subscribe to a signal `ensureLoaded` itself writes — that would
 		// re-fire the effect on every assignment and busy-loop.
-		if (!untrack(() => loaded[kind])) loadingKind[kind] = true
+		const hasCached = !!untrack(() => loaded[kind])
+		if (hasCached && revalidated.has(revalidateKey)) return
+		if (!hasCached) loadingKind[kind] = true
 		try {
-			const items = await loadKind(ws, kind)
-			loaded[kind] = items
+			const items = await loadKind(ws, kind, { revalidate: true })
+			revalidated.add(revalidateKey)
+			// Keep the reference stable when nothing changed so an open picker's
+			// derived tree isn't rebuilt under the user on every revalidation.
+			if (
+				!itemsEqual(
+					untrack(() => loaded[kind]),
+					items
+				)
+			)
+				loaded[kind] = items
+		} catch (e) {
+			// Callers fire-and-forget; surface the failure without an
+			// unhandled rejection. Cached items (if any) keep rendering.
+			console.error(`Failed to load workspace ${kind}s`, e)
 		} finally {
 			loadingKind[kind] = false
 		}
diff --git a/frontend/src/lib/components/workspacePicker.ts b/frontend/src/lib/components/workspacePicker.ts
index ba2985ecbb..92ea48af20 100644
--- a/frontend/src/lib/components/workspacePicker.ts
+++ b/frontend/src/lib/components/workspacePicker.ts
@@ -44,9 +44,10 @@ type WorkspaceCache = {
 }
 
 /** Module-level session cache. Persists across picker mounts within a single
- * page session. NOT invalidated automatically — call `invalidate()` after
- * creating/deleting an item if the picker may be opened again before a full
- * reload. */
+ * page session so cached kinds render on the first frame. Pickers revalidate
+ * once per mount via `loadKind(..., { revalidate: true })`, so stale entries
+ * self-heal on the next open; call `invalidate()` after creating/deleting an
+ * item when even a brief flash of the stale list must be avoided. */
 const cache = new Map<string, WorkspaceCache>()
 const inflight = new Map<string, Promise<WorkspaceItem[]>>()
 /** Bumped by `invalidate()`. Each in-flight `loadKind` captures the version
@@ -87,11 +88,14 @@ export function invalidate(workspace: string, kind?: WorkspaceItemKind) {
 
 export async function loadKind(
 	workspace: string,
-	kind: WorkspaceItemKind
+	kind: WorkspaceItemKind,
+	opts?: { revalidate?: boolean }
 ): Promise<WorkspaceItem[]> {
 	const existing = cache.get(workspace)?.[kind]
-	if (existing) return existing
+	if (existing && !opts?.revalidate) return existing
 	const key = cacheKey(workspace, kind)
+	// An in-flight fetch is already hitting the network, so it satisfies a
+	// revalidate request too.
 	const flying = inflight.get(key)
 	if (flying) return flying
 

From 37bb57474e8336823bb31527f2a708ef41cd39c4 Mon Sep 17 00:00:00 2001
From: Diego Imbert <70353967+diegoimbert@users.noreply.github.com>
Date: Thu, 2 Jul 2026 23:18:49 +0200
Subject: [PATCH 19/76] fix: make SMTP username and password optional in
 frontend validation (#9895)

---
 .../src/lib/components/instanceSettings/SmtpSettings.svelte   | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/frontend/src/lib/components/instanceSettings/SmtpSettings.svelte b/frontend/src/lib/components/instanceSettings/SmtpSettings.svelte
index c297b1a32f..f7607c5d6c 100644
--- a/frontend/src/lib/components/instanceSettings/SmtpSettings.svelte
+++ b/frontend/src/lib/components/instanceSettings/SmtpSettings.svelte
@@ -5,10 +5,6 @@
 			smtpSettings.smtp_host &&
 			smtpSettings.smtp_host.trim() !== '' &&
 			smtpSettings.smtp_port &&
-			smtpSettings.smtp_username &&
-			smtpSettings.smtp_username.trim() !== '' &&
-			smtpSettings.smtp_password &&
-			smtpSettings.smtp_password.trim() !== '' &&
 			smtpSettings.smtp_from &&
 			smtpSettings.smtp_from.trim() !== ''
 		)

From 186ac4933b79aed57fce23ebcf3b525fcfd1c474 Mon Sep 17 00:00:00 2001
From: Guilhem <guilhemlemouel@gmail.com>
Date: Thu, 2 Jul 2026 23:30:28 +0200
Subject: [PATCH 20/76] fix(frontend): home New submenus fall back below,
 hugging the right edge (#9894)

* fix(frontend): home New submenus fall back below hugging the right edge

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): re-hug submenu on window resize even without a melt reposition

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../components/home/CreateActionsMenu.svelte  | 41 +++++++++++++++++--
 1 file changed, 38 insertions(+), 3 deletions(-)

diff --git a/frontend/src/lib/components/home/CreateActionsMenu.svelte b/frontend/src/lib/components/home/CreateActionsMenu.svelte
index 146e390419..4d8adb88e9 100644
--- a/frontend/src/lib/components/home/CreateActionsMenu.svelte
+++ b/frontend/src/lib/components/home/CreateActionsMenu.svelte
@@ -243,7 +243,9 @@
 		forceVisible: true
 	})
 
-	// per-row fan-out submenus, anchored toward the page center (popover hugs the right edge)
+	// per-row fan-out submenus: open to the right when there's room. The popover hugs
+	// the right viewport edge on most screens, so the default flip (right → left) would
+	// cover the doc panel — fall back below the trigger row instead.
 	const {
 		elements: { subTrigger: wacSubTrigger, subMenu: wacSubMenu },
 		states: { subOpen: wacSubOpen }
@@ -251,7 +253,7 @@
 		positioning: {
 			placement: 'right-start',
 			gutter: 4,
-			flip: true,
+			flip: { fallbackPlacements: ['bottom-end', 'bottom-start', 'top-end', 'top-start'] },
 			fitViewport: true,
 			overflowPadding: 8
 		}
@@ -263,12 +265,43 @@
 		positioning: {
 			placement: 'right-end',
 			gutter: 4,
-			flip: true,
+			flip: { fallbackPlacements: ['bottom-end', 'bottom-start', 'top-end', 'top-start'] },
 			fitViewport: true,
 			overflowPadding: 8
 		}
 	})
 
+	// When a fan-out submenu falls below its row ('bottom'/'top' data-side), melt aligns
+	// it to the row's right edge, but free viewport space may remain beside the popover —
+	// slide it right until it hugs the viewport edge. Melt repositions on scroll/resize
+	// via style/data-side writes, so re-apply on attribute mutations.
+	function hugViewportRight(node: HTMLElement) {
+		let delta = 0
+		const apply = () => {
+			const side = node.getAttribute('data-side')
+			const baseRight = node.getBoundingClientRect().right - delta
+			const next =
+				side === 'bottom' || side === 'top'
+					? Math.max(0, document.documentElement.clientWidth - 8 - baseRight)
+					: 0
+			if (Math.abs(next - delta) < 0.5) return
+			delta = next
+			node.style.transform = next ? `translateX(${next}px)` : ''
+		}
+		const observer = new MutationObserver(apply)
+		observer.observe(node, { attributeFilter: ['style', 'data-side'] })
+		// melt only rewrites style when the reposition moves the submenu — a resize that
+		// changes clientWidth without moving it (scrollbar appearing, zoom) needs a direct hook
+		window.addEventListener('resize', apply)
+		apply()
+		return {
+			destroy: () => {
+				observer.disconnect()
+				window.removeEventListener('resize', apply)
+			}
+		}
+	}
+
 	// attach the menu trigger to the design-system <Button>'s DOM node, so it keeps its
 	// styling — melt element stores are callable on a node, exactly like `use:melt`.
 	let triggerEl: HTMLButtonElement | HTMLAnchorElement | undefined = $state(undefined)
@@ -438,6 +471,7 @@
 						{#if $wacSubOpen}
 							<div
 								use:melt={$wacSubMenu}
+								use:hugViewportRight
 								class="z-[6001] flex flex-col gap-0.5 p-1 w-52 rounded-lg border border-gray-200 dark:border-gray-700 bg-surface shadow-xl focus:outline-none"
 							>
 								{#each option.variants ?? [] as variant (variant.label)}
@@ -485,6 +519,7 @@
 				{#if $importSubOpen}
 					<div
 						use:melt={$importSubMenu}
+						use:hugViewportRight
 						class="z-[6001] flex flex-col gap-0.5 p-1 w-52 rounded-lg border border-gray-200 dark:border-gray-700 bg-surface shadow-xl focus:outline-none"
 					>
 						{#each importActions as action (action.label)}

From d9b080f57fa0be144cefa773d39742c45b40f043 Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Thu, 2 Jul 2026 23:42:44 +0200
Subject: [PATCH 21/76] feat(ai): add Azure AI Foundry as a native AI provider
 (#9879)

* feat(ai): add Azure AI Foundry as a native AI provider

Adds `azure_foundry` as a new AIProvider variant wired through the AI
chat (copilot) and AI agent flow steps. Foundry's chat completions API
is OpenAI-compatible and uses Azure conventions (api-key header, Azure
URL building), so it reuses the existing OpenAI-compatible query builder
and proxy path via the shared `is_azure` helper (renamed from
`is_azure_openai`).

Backend (windmill-ai):
- New `AzureFoundry` enum variant (serde `azure_foundry`)
- `get_base_url` requires a resource base URL (like Azure OpenAI / Custom)
- `is_azure()` covers Azure OpenAI + Foundry (api-key auth, Azure URL)
- Added to OpenAI-compatible proxy support and HttpForward proxy mode
- New proxy URL unit test

Frontend (copilot):
- New provider entry, completion config, model-token handling, streamed
  usage tracking, and reasoning registry (all model-id-gated, so a no-op
  for Foundry's non-OpenAI catalog)
- Treated as a chat-completions provider, not the OpenAI Responses API

OpenAPI:
- `azure_foundry` added to AIProvider (openapi.yaml) and AIProviderKind
  (openflow.openapi.yaml); regenerated CLI guidance

Note: the `azure_foundry` resource type (base_url + optional api_key) is
hub-managed and must be published to the Windmill Hub separately.

Fixes WIN-2122

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai): add azure_foundry to copilot flow Zod provider enum

The tracked copilot flow schema (openFlowZod.gen.ts and its openFlow.json
source) still carried the old AIProvider enum, so validateFlowModules /
validateSpecialFlowModule rejected AI-generated flow edits that create or
update an aiagent module with provider kind "azure_foundry" before they
could be saved. Add the value to both (preserving the generated single-line
format) and a regression test over the flow-module validation path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(ai): lead provider list with OpenAI, Anthropic, Google AI

Reorder AI_PROVIDERS so the three primary direct providers come first. The
AIProviderPicker renders the first three entries as quick-access buttons, so
these become the defaults (previously OpenAI, Azure OpenAI, Azure Foundry);
Azure OpenAI / Azure Foundry stay adjacent right after. No logic depends on
provider order (only per-provider defaultModels[0] is read).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 backend/windmill-ai/src/ai_providers.rs       | 22 +++++---
 backend/windmill-ai/src/providers/other.rs    |  4 +-
 backend/windmill-ai/src/proxy.rs              | 34 ++++++++++++-
 backend/windmill-api/openapi.yaml             |  1 +
 cli/src/guidance/skills.gen.ts                |  2 +-
 .../copilot/chat/flow/openFlow.json           |  2 +-
 .../copilot/chat/flow/openFlowZod.gen.ts      |  4 +-
 .../copilot/chat/flow/providerKind.test.ts    | 41 +++++++++++++++
 .../src/lib/components/copilot/chat/shared.ts |  6 ++-
 frontend/src/lib/components/copilot/lib.ts    | 51 +++++++++++++------
 .../components/copilot/reasoningRegistry.ts   |  7 ++-
 openflow.openapi.yaml                         |  1 +
 system_prompts/auto-generated/flow.md         |  2 +-
 system_prompts/auto-generated/prompts.ts      |  2 +-
 .../auto-generated/skills/write-flow/SKILL.md |  2 +-
 15 files changed, 146 insertions(+), 35 deletions(-)
 create mode 100644 frontend/src/lib/components/copilot/chat/flow/providerKind.test.ts

diff --git a/backend/windmill-ai/src/ai_providers.rs b/backend/windmill-ai/src/ai_providers.rs
index 5d8e763b69..776228cea7 100644
--- a/backend/windmill-ai/src/ai_providers.rs
+++ b/backend/windmill-ai/src/ai_providers.rs
@@ -49,6 +49,8 @@ pub enum AIProvider {
     OpenAI,
     #[serde(rename = "azure_openai")]
     AzureOpenAI,
+    #[serde(rename = "azure_foundry")]
+    AzureFoundry,
     Anthropic,
     Mistral,
     DeepSeek,
@@ -114,9 +116,12 @@ impl AIProvider {
             AIProvider::TogetherAI => Ok("https://api.together.xyz/v1".to_string()),
             AIProvider::Anthropic => Ok("https://api.anthropic.com/v1".to_string()),
             AIProvider::Mistral => Ok("https://api.mistral.ai/v1".to_string()),
-            p @ (AIProvider::CustomAI | AIProvider::AzureOpenAI) => Err(Error::BadRequest(
-                format!("{:?} provider requires a base URL in the resource", p),
-            )),
+            p @ (AIProvider::CustomAI | AIProvider::AzureOpenAI | AIProvider::AzureFoundry) => {
+                Err(Error::BadRequest(format!(
+                    "{:?} provider requires a base URL in the resource",
+                    p
+                )))
+            }
             AIProvider::AWSBedrock => {
                 // AWS Bedrock uses the SDK directly, not HTTP base URL
                 Err(Error::internal_err(
@@ -131,13 +136,16 @@ impl AIProvider {
         matches!(self, AIProvider::Anthropic)
     }
 
-    /// Check if this provider/URL combination represents Azure OpenAI
-    pub fn is_azure_openai(&self, base_url: &str) -> bool {
+    /// Check whether this provider/URL combination uses Azure conventions
+    /// (the `api-key` auth header and Azure URL building). This covers Azure
+    /// OpenAI, Azure AI Foundry, and the `OpenAI` provider pointed at an Azure
+    /// base path override.
+    pub fn is_azure(&self, base_url: &str) -> bool {
         (matches!(self, AIProvider::OpenAI) && base_url != OPENAI_BASE_URL)
-            || matches!(self, AIProvider::AzureOpenAI)
+            || matches!(self, AIProvider::AzureOpenAI | AIProvider::AzureFoundry)
     }
 
-    /// Build Azure OpenAI URL with deployment model path
+    /// Build an Azure-style URL (Azure OpenAI / Azure AI Foundry) for the given path
     pub fn build_azure_openai_url(base_url: &str, path: &str) -> String {
         let base_url = base_url.trim_end_matches('/');
         if base_url.ends_with("/openai") {
diff --git a/backend/windmill-ai/src/providers/other.rs b/backend/windmill-ai/src/providers/other.rs
index 650ce1c19e..7b4dab5ab5 100644
--- a/backend/windmill-ai/src/providers/other.rs
+++ b/backend/windmill-ai/src/providers/other.rs
@@ -248,7 +248,7 @@ impl QueryBuilder for OtherQueryBuilder {
     }
 
     fn get_endpoint(&self, base_url: &str, _model: &str, _output_type: &OutputType) -> String {
-        if self.provider_kind.is_azure_openai(base_url) {
+        if self.provider_kind.is_azure(base_url) {
             AIProvider::build_azure_openai_url(base_url, "chat/completions")
         } else {
             format!("{}/chat/completions", base_url)
@@ -261,7 +261,7 @@ impl QueryBuilder for OtherQueryBuilder {
         base_url: &str,
         _output_type: &OutputType,
     ) -> Vec<(&'static str, String)> {
-        if self.provider_kind.is_azure_openai(base_url) {
+        if self.provider_kind.is_azure(base_url) {
             vec![("api-key", api_key.to_string())]
         } else {
             vec![("Authorization", format!("Bearer {}", api_key))]
diff --git a/backend/windmill-ai/src/proxy.rs b/backend/windmill-ai/src/proxy.rs
index 891fa89486..5de4d231c4 100644
--- a/backend/windmill-ai/src/proxy.rs
+++ b/backend/windmill-ai/src/proxy.rs
@@ -51,6 +51,7 @@ pub fn supports_openai_compatible_proxy(provider: &AIProvider) -> bool {
         provider,
         AIProvider::OpenAI
             | AIProvider::AzureOpenAI
+            | AIProvider::AzureFoundry
             | AIProvider::Mistral
             | AIProvider::DeepSeek
             | AIProvider::Groq
@@ -64,6 +65,7 @@ pub fn proxy_execution_mode(provider: &AIProvider) -> ProxyExecutionMode {
     match provider {
         AIProvider::OpenAI
         | AIProvider::AzureOpenAI
+        | AIProvider::AzureFoundry
         | AIProvider::Anthropic
         | AIProvider::Mistral
         | AIProvider::DeepSeek
@@ -89,7 +91,7 @@ pub fn build_openai_compatible_proxy_request(args: &ProxyBuildArgs<'_>) -> Resul
     };
 
     let base_url = credentials.base_url.trim_end_matches('/');
-    let is_azure = credentials.provider.is_azure_openai(base_url);
+    let is_azure = credentials.provider.is_azure(base_url);
     let url = if is_azure {
         AIProvider::build_azure_openai_url(base_url, args.path)
     } else {
@@ -201,6 +203,7 @@ mod tests {
         let cases = [
             (AIProvider::OpenAI, ProxyExecutionMode::HttpForward),
             (AIProvider::AzureOpenAI, ProxyExecutionMode::HttpForward),
+            (AIProvider::AzureFoundry, ProxyExecutionMode::HttpForward),
             (AIProvider::Anthropic, ProxyExecutionMode::HttpForward),
             (AIProvider::Mistral, ProxyExecutionMode::HttpForward),
             (AIProvider::DeepSeek, ProxyExecutionMode::HttpForward),
@@ -253,6 +256,35 @@ mod tests {
             .contains(&("api-key".to_string(), "api-key".to_string())));
     }
 
+    #[test]
+    fn builds_azure_foundry_proxy_request() {
+        // Foundry's OpenAI-compatible endpoint uses the same Azure conventions
+        // (api-key header, /openai -> /openai/v1 path) as Azure OpenAI.
+        let credentials = credentials(
+            AIProvider::AzureFoundry,
+            "https://example.services.ai.azure.com/openai",
+        );
+        let method = Method::POST;
+        let headers = HeaderMap::new();
+
+        let request = build_openai_compatible_proxy_request(&ProxyBuildArgs {
+            method: &method,
+            path: "chat/completions",
+            headers: &headers,
+            body: br#"{"model":"gpt-4o","messages":[]}"#,
+            credentials: &credentials,
+        })
+        .unwrap();
+
+        assert_eq!(
+            request.url,
+            "https://example.services.ai.azure.com/openai/v1/chat/completions"
+        );
+        assert!(request
+            .headers
+            .contains(&("api-key".to_string(), "api-key".to_string())));
+    }
+
     #[test]
     fn injects_user_into_proxy_body() {
         let mut credentials = credentials(AIProvider::OpenAI, "https://api.openai.com/v1");
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index e7b5badb8c..3b90927901 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -22880,6 +22880,7 @@ components:
         [
           openai,
           azure_openai,
+          azure_foundry,
           anthropic,
           mistral,
           deepseek,
diff --git a/cli/src/guidance/skills.gen.ts b/cli/src/guidance/skills.gen.ts
index b8c209dcaf..cd2c856693 100644
--- a/cli/src/guidance/skills.gen.ts
+++ b/cli/src/guidance/skills.gen.ts
@@ -5291,7 +5291,7 @@ Reference a specific resource using \`$res:\` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
   "raw-app": `---
 name: raw-app
 description: MUST use when creating raw apps.
diff --git a/frontend/src/lib/components/copilot/chat/flow/openFlow.json b/frontend/src/lib/components/copilot/chat/flow/openFlow.json
index 0309aeaf91..c7ede4c0b5 100644
--- a/frontend/src/lib/components/copilot/chat/flow/openFlow.json
+++ b/frontend/src/lib/components/copilot/chat/flow/openFlow.json
@@ -1 +1 @@
-{"openapi":"3.0.3","info":{"version":"1.716.0","title":"OpenFlow Spec","contact":{"name":"Ruben Fiszel","email":"ruben@windmill.dev","url":"https://windmill.dev"},"license":{"name":"Apache 2.0","url":"https://www.apache.org/licenses/LICENSE-2.0.html"}},"paths":{},"externalDocs":{"description":"documentation portal","url":"https://windmill.dev"},"components":{"schemas":{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution — modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type"}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type"}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind"}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type"}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type"}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw",null]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw",null]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}]},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}}}
\ No newline at end of file
+{"openapi":"3.0.3","info":{"version":"1.716.0","title":"OpenFlow Spec","contact":{"name":"Ruben Fiszel","email":"ruben@windmill.dev","url":"https://windmill.dev"},"license":{"name":"Apache 2.0","url":"https://www.apache.org/licenses/LICENSE-2.0.html"}},"paths":{},"externalDocs":{"description":"documentation portal","url":"https://windmill.dev"},"components":{"schemas":{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution — modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type"}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type"}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind"}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type"}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type"}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw",null]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw",null]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}]},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}}}
\ No newline at end of file
diff --git a/frontend/src/lib/components/copilot/chat/flow/openFlowZod.gen.ts b/frontend/src/lib/components/copilot/chat/flow/openFlowZod.gen.ts
index 21e6735ab1..3e0b8fcf69 100644
--- a/frontend/src/lib/components/copilot/chat/flow/openFlowZod.gen.ts
+++ b/frontend/src/lib/components/copilot/chat/flow/openFlowZod.gen.ts
@@ -1,6 +1,6 @@
 import { z } from "zod"
 
-export const flowModuleValueSchema = z.discriminatedUnion("type", [z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "content": z.string().describe("The script source code. Should export a 'main' function"), "language": z.enum(["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]).describe("Programming language for this script"), "path": z.string().describe("Optional path for saving this script").optional(), "lock": z.string().describe("Lock file content for dependencies").optional(), "type": z.literal("rawscript"), "tag": z.string().describe("Worker group tag for execution routing").optional(), "concurrent_limit": z.number().describe("Maximum concurrent executions of this script").optional(), "concurrency_time_window_s": z.number().describe("Time window for concurrent_limit").optional(), "custom_concurrency_key": z.string().describe("Custom key for grouping concurrent executions").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional(), "assets": z.array(z.object({ "path": z.string().describe("Path to the asset"), "kind": z.enum(["s3object","resource","ducklake","datatable","volume"]).describe("Type of asset"), "access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Access level for this asset").optional(), "alt_access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Alternative access level").optional() })).describe("External resources this script accesses (S3 objects, resources, etc.)").optional() }).describe("Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "path": z.string().describe("Path to the script in the workspace (e.g., 'f/scripts/send_email')"), "hash": z.string().describe("Optional specific version hash of the script to use").optional(), "type": z.literal("script"), "tag_override": z.string().describe("Override the script's default worker group tag").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional() }).describe("Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments"), "path": z.string().describe("Path to the flow in the workspace (e.g., 'f/flows/process_user')"), "type": z.literal("flow") }).describe("Reference to an existing flow by path. Use this to call another flow as a subflow"), z.object({ "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'"), "iterator": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("forloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations"), z.object({ "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute in each iteration. Use stop_after_if to control when the loop ends"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("whileloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (use with caution in while loops)").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch condition").optional(), "expr": z.string().describe("JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"), "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute if this branch's expr is true") })).describe("Array of branches to evaluate in order. The first branch with expr evaluating to true executes"), "default": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute if no branch expressions match"), "type": z.literal("branchone") }).describe("Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch's purpose").optional(), "skip_failure": z.boolean().describe("If true, failure in this branch doesn't fail the entire flow").optional(), "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute in this branch") })).describe("Array of branches that all execute (either in parallel or sequentially)"), "type": z.literal("branchall"), "parallel": z.boolean().describe("If true, all branches execute concurrently. If false, they execute sequentially").optional() }).describe("Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently"), z.object({ "type": z.literal("identity"), "flow": z.boolean().describe("If true, marks this as a flow identity (special handling)").optional() }).describe("Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder"), z.object({ "input_transforms": z.object({ "provider": z.discriminatedUnion("type", [z.object({ "value": z.object({ "kind": z.enum(["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]).describe("Supported AI provider types"), "resource": z.string().describe("Resource reference in format '$res:{resource_path}' pointing to provider credentials"), "model": z.string().describe("Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')") }).describe("Complete AI provider configuration with resource reference and model selection"), "type": z.literal("static") }).describe("Static provider configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined"), "output_type": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"), "user_message": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."), "system_prompt": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("System instructions that guide the AI's behavior, persona, and response style. Optional.").optional(), "streaming": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n").optional(), "memory": z.discriminatedUnion("type", [z.object({ "value": z.discriminatedUnion("kind", [z.object({ "kind": z.literal("off") }).describe("No conversation memory/context"), z.object({ "kind": z.literal("auto"), "context_length": z.number().int().describe("Maximum number of messages to retain in context").optional(), "memory_id": z.string().describe("Identifier for persistent memory across agent invocations").optional() }).describe("Automatic context management"), z.object({ "kind": z.literal("manual"), "messages": z.array(z.object({ "role": z.enum(["user","assistant","system"]), "content": z.string() }).describe("A single message in conversation history")) }).describe("Explicit message history")]).describe("Conversation memory configuration"), "type": z.literal("static") }).describe("Static memory configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined").optional(), "output_schema": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n").optional(), "user_attachments": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n").optional(), "max_completion_tokens": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n").optional(), "temperature": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n").optional(), "max_iterations": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n").optional() }).describe("Input parameters for the AI agent mapped to their values"), "tools": z.array(z.object({ "id": z.string().describe("Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"), "summary": z.string().describe("Short description of what this tool does (shown to the AI)").optional(), "value": z.any().superRefine((x, ctx) => {
+export const flowModuleValueSchema = z.discriminatedUnion("type", [z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "content": z.string().describe("The script source code. Should export a 'main' function"), "language": z.enum(["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]).describe("Programming language for this script"), "path": z.string().describe("Optional path for saving this script").optional(), "lock": z.string().describe("Lock file content for dependencies").optional(), "type": z.literal("rawscript"), "tag": z.string().describe("Worker group tag for execution routing").optional(), "concurrent_limit": z.number().describe("Maximum concurrent executions of this script").optional(), "concurrency_time_window_s": z.number().describe("Time window for concurrent_limit").optional(), "custom_concurrency_key": z.string().describe("Custom key for grouping concurrent executions").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional(), "assets": z.array(z.object({ "path": z.string().describe("Path to the asset"), "kind": z.enum(["s3object","resource","ducklake","datatable","volume"]).describe("Type of asset"), "access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Access level for this asset").optional(), "alt_access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Alternative access level").optional() })).describe("External resources this script accesses (S3 objects, resources, etc.)").optional() }).describe("Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "path": z.string().describe("Path to the script in the workspace (e.g., 'f/scripts/send_email')"), "hash": z.string().describe("Optional specific version hash of the script to use").optional(), "type": z.literal("script"), "tag_override": z.string().describe("Override the script's default worker group tag").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional() }).describe("Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments"), "path": z.string().describe("Path to the flow in the workspace (e.g., 'f/flows/process_user')"), "type": z.literal("flow") }).describe("Reference to an existing flow by path. Use this to call another flow as a subflow"), z.object({ "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'"), "iterator": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("forloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations"), z.object({ "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute in each iteration. Use stop_after_if to control when the loop ends"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("whileloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (use with caution in while loops)").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch condition").optional(), "expr": z.string().describe("JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"), "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute if this branch's expr is true") })).describe("Array of branches to evaluate in order. The first branch with expr evaluating to true executes"), "default": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute if no branch expressions match"), "type": z.literal("branchone") }).describe("Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch's purpose").optional(), "skip_failure": z.boolean().describe("If true, failure in this branch doesn't fail the entire flow").optional(), "modules": z.array(z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.lazy(() => flowModuleValueSchema), "stop_after_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "stop_after_all_iters_if": z.object({ "skip_if_stopped": z.boolean().describe("If true, following steps are skipped when this condition triggers").optional(), "expr": z.string().describe("JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"), "error_message": z.string().nullable().describe("Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.").optional(), "error_include_result": z.boolean().describe("When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false.").optional() }).describe("Early termination condition for a module").optional(), "skip_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'") }).describe("Conditionally skip this step based on previous results or flow inputs").optional(), "sleep": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "cache_ttl": z.number().describe("Cache duration in seconds for this step's results").optional(), "cache_ignore_s3_path": z.boolean().optional(), "timeout": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "delete_after_secs": z.number().int().describe("If set, delete the step's args, result and logs after this many seconds following job completion").optional(), "summary": z.string().describe("Short description of what this step does").optional(), "mock": z.object({ "enabled": z.boolean().describe("If true, return mock value instead of executing").optional(), "return_value": z.any().describe("Value to return when mocked").optional() }).describe("Mock configuration for testing without executing the actual step").optional(), "suspend": z.object({ "required_events": z.number().int().describe("Number of approvals required before continuing").optional(), "timeout": z.number().int().describe("Timeout in seconds before auto-continuing or canceling").optional(), "resume_form": z.object({ "schema": z.record(z.string(), z.any()).describe("JSON Schema for the resume form").optional() }).describe("Form schema for collecting input when resuming").optional(), "user_auth_required": z.boolean().describe("If true, only authenticated users can approve").optional(), "user_groups_required": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "self_approval_disabled": z.boolean().describe("If true, the user who started the flow cannot approve").optional(), "hide_cancel": z.boolean().describe("If true, hide the cancel button on the approval form").optional(), "continue_on_disapprove_timeout": z.boolean().describe("If true, continue flow on timeout instead of canceling").optional() }).describe("Configuration for approval/resume steps that wait for user input").optional(), "priority": z.number().describe("Execution priority for this step (higher numbers run first)").optional(), "continue_on_error": z.boolean().describe("If true, flow continues even if this step fails").optional(), "retry": z.object({ "constant": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "seconds": z.number().int().describe("Seconds to wait between retries").optional() }).describe("Retry with constant delay between attempts").optional(), "exponential": z.object({ "attempts": z.number().int().describe("Number of retry attempts").optional(), "multiplier": z.number().int().describe("Multiplier for exponential backoff").optional(), "seconds": z.number().int().gte(1).describe("Initial delay in seconds").optional(), "random_factor": z.number().int().gte(0).lte(100).describe("Random jitter percentage (0-100) to avoid thundering herd").optional() }).describe("Retry with exponential backoff (delay doubles each time)").optional(), "retry_if": z.object({ "expr": z.string().describe("JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables") }).describe("Conditional retry based on error or result").optional() }).describe("Retry configuration for failed module executions").optional(), "debouncing": z.object({ "debounce_delay_s": z.number().int().describe("Delay in seconds to debounce this step's executions across flow runs").optional(), "debounce_key": z.string().describe("Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>").optional(), "debounce_args_to_accumulate": z.array(z.string()).describe("Array-type arguments to accumulate across debounced executions").optional(), "max_total_debouncing_time": z.number().int().describe("Maximum total time in seconds before forced execution").optional(), "max_total_debounces_amount": z.number().int().describe("Maximum number of debounces before forced execution").optional() }).describe("Debounce configuration for this step (EE only)").optional() }).describe("A single step in a flow. Can be a script, subflow, loop, or branch")).describe("Steps to execute in this branch") })).describe("Array of branches that all execute (either in parallel or sequentially)"), "type": z.literal("branchall"), "parallel": z.boolean().describe("If true, all branches execute concurrently. If false, they execute sequentially").optional() }).describe("Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently"), z.object({ "type": z.literal("identity"), "flow": z.boolean().describe("If true, marks this as a flow identity (special handling)").optional() }).describe("Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder"), z.object({ "input_transforms": z.object({ "provider": z.discriminatedUnion("type", [z.object({ "value": z.object({ "kind": z.enum(["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]).describe("Supported AI provider types"), "resource": z.string().describe("Resource reference in format '$res:{resource_path}' pointing to provider credentials"), "model": z.string().describe("Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')") }).describe("Complete AI provider configuration with resource reference and model selection"), "type": z.literal("static") }).describe("Static provider configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined"), "output_type": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"), "user_message": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."), "system_prompt": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("System instructions that guide the AI's behavior, persona, and response style. Optional.").optional(), "streaming": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n").optional(), "memory": z.discriminatedUnion("type", [z.object({ "value": z.discriminatedUnion("kind", [z.object({ "kind": z.literal("off") }).describe("No conversation memory/context"), z.object({ "kind": z.literal("auto"), "context_length": z.number().int().describe("Maximum number of messages to retain in context").optional(), "memory_id": z.string().describe("Identifier for persistent memory across agent invocations").optional() }).describe("Automatic context management"), z.object({ "kind": z.literal("manual"), "messages": z.array(z.object({ "role": z.enum(["user","assistant","system"]), "content": z.string() }).describe("A single message in conversation history")) }).describe("Explicit message history")]).describe("Conversation memory configuration"), "type": z.literal("static") }).describe("Static memory configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined").optional(), "output_schema": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n").optional(), "user_attachments": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n").optional(), "max_completion_tokens": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n").optional(), "temperature": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n").optional(), "max_iterations": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n").optional() }).describe("Input parameters for the AI agent mapped to their values"), "tools": z.array(z.object({ "id": z.string().describe("Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"), "summary": z.string().describe("Short description of what this tool does (shown to the AI)").optional(), "value": z.any().superRefine((x, ctx) => {
     const schemas = [z.intersection(z.object({ "tool_type": z.literal("flowmodule") }), z.lazy(() => flowModuleValueSchema)).describe("A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module"), z.object({ "tool_type": z.literal("mcp"), "resource_path": z.string().describe("Path to the MCP resource/server configuration"), "include_tools": z.array(z.string()).describe("Whitelist of specific tools to include from this MCP server").optional(), "exclude_tools": z.array(z.string()).describe("Blacklist of tools to exclude from this MCP server").optional() }).describe("Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers"), z.object({ "tool_type": z.literal("websearch") }).describe("A tool implemented as a websearch tool. The AI can call this like any other websearch tool")];
     const errors = schemas.reduce<z.ZodError[]>(
       (errors, schema) =>
@@ -20,7 +20,7 @@ export const flowModuleValueSchema = z.discriminatedUnion("type", [z.object({ "i
   }).describe("The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference") }).describe("A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool")).describe("Array of tools the agent can use. The agent decides which tools to call based on the task"), "type": z.literal("aiagent"), "omit_output_from_conversation": z.boolean().describe("If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled.").default(false), "parallel": z.boolean().describe("If true, the agent can execute multiple tool calls in parallel").optional() }).describe("AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task")]).describe("The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type")
 
 
-export const flowModuleSchema = z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.discriminatedUnion("type", [z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "content": z.string().describe("The script source code. Should export a 'main' function"), "language": z.enum(["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]).describe("Programming language for this script"), "path": z.string().describe("Optional path for saving this script").optional(), "lock": z.string().describe("Lock file content for dependencies").optional(), "type": z.literal("rawscript"), "tag": z.string().describe("Worker group tag for execution routing").optional(), "concurrent_limit": z.number().describe("Maximum concurrent executions of this script").optional(), "concurrency_time_window_s": z.number().describe("Time window for concurrent_limit").optional(), "custom_concurrency_key": z.string().describe("Custom key for grouping concurrent executions").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional(), "assets": z.array(z.object({ "path": z.string().describe("Path to the asset"), "kind": z.enum(["s3object","resource","ducklake","datatable","volume"]).describe("Type of asset"), "access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Access level for this asset").optional(), "alt_access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Alternative access level").optional() })).describe("External resources this script accesses (S3 objects, resources, etc.)").optional() }).describe("Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "path": z.string().describe("Path to the script in the workspace (e.g., 'f/scripts/send_email')"), "hash": z.string().describe("Optional specific version hash of the script to use").optional(), "type": z.literal("script"), "tag_override": z.string().describe("Override the script's default worker group tag").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional() }).describe("Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments"), "path": z.string().describe("Path to the flow in the workspace (e.g., 'f/flows/process_user')"), "type": z.literal("flow") }).describe("Reference to an existing flow by path. Use this to call another flow as a subflow"), z.object({ "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'"), "iterator": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("forloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations"), z.object({ "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute in each iteration. Use stop_after_if to control when the loop ends"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("whileloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (use with caution in while loops)").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch condition").optional(), "expr": z.string().describe("JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"), "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute if this branch's expr is true") })).describe("Array of branches to evaluate in order. The first branch with expr evaluating to true executes"), "default": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute if no branch expressions match"), "type": z.literal("branchone") }).describe("Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch's purpose").optional(), "skip_failure": z.boolean().describe("If true, failure in this branch doesn't fail the entire flow").optional(), "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute in this branch") })).describe("Array of branches that all execute (either in parallel or sequentially)"), "type": z.literal("branchall"), "parallel": z.boolean().describe("If true, all branches execute concurrently. If false, they execute sequentially").optional() }).describe("Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently"), z.object({ "type": z.literal("identity"), "flow": z.boolean().describe("If true, marks this as a flow identity (special handling)").optional() }).describe("Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder"), z.object({ "input_transforms": z.object({ "provider": z.discriminatedUnion("type", [z.object({ "value": z.object({ "kind": z.enum(["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]).describe("Supported AI provider types"), "resource": z.string().describe("Resource reference in format '$res:{resource_path}' pointing to provider credentials"), "model": z.string().describe("Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')") }).describe("Complete AI provider configuration with resource reference and model selection"), "type": z.literal("static") }).describe("Static provider configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined"), "output_type": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"), "user_message": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."), "system_prompt": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("System instructions that guide the AI's behavior, persona, and response style. Optional.").optional(), "streaming": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n").optional(), "memory": z.discriminatedUnion("type", [z.object({ "value": z.discriminatedUnion("kind", [z.object({ "kind": z.literal("off") }).describe("No conversation memory/context"), z.object({ "kind": z.literal("auto"), "context_length": z.number().int().describe("Maximum number of messages to retain in context").optional(), "memory_id": z.string().describe("Identifier for persistent memory across agent invocations").optional() }).describe("Automatic context management"), z.object({ "kind": z.literal("manual"), "messages": z.array(z.object({ "role": z.enum(["user","assistant","system"]), "content": z.string() }).describe("A single message in conversation history")) }).describe("Explicit message history")]).describe("Conversation memory configuration"), "type": z.literal("static") }).describe("Static memory configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined").optional(), "output_schema": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n").optional(), "user_attachments": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n").optional(), "max_completion_tokens": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n").optional(), "temperature": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n").optional(), "max_iterations": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n").optional() }).describe("Input parameters for the AI agent mapped to their values"), "tools": z.array(z.object({ "id": z.string().describe("Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"), "summary": z.string().describe("Short description of what this tool does (shown to the AI)").optional(), "value": z.any().superRefine((x, ctx) => {
+export const flowModuleSchema = z.object({ "id": z.string().describe("Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"), "value": z.discriminatedUnion("type", [z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "content": z.string().describe("The script source code. Should export a 'main' function"), "language": z.enum(["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]).describe("Programming language for this script"), "path": z.string().describe("Optional path for saving this script").optional(), "lock": z.string().describe("Lock file content for dependencies").optional(), "type": z.literal("rawscript"), "tag": z.string().describe("Worker group tag for execution routing").optional(), "concurrent_limit": z.number().describe("Maximum concurrent executions of this script").optional(), "concurrency_time_window_s": z.number().describe("Time window for concurrent_limit").optional(), "custom_concurrency_key": z.string().describe("Custom key for grouping concurrent executions").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional(), "assets": z.array(z.object({ "path": z.string().describe("Path to the asset"), "kind": z.enum(["s3object","resource","ducklake","datatable","volume"]).describe("Type of asset"), "access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Access level for this asset").optional(), "alt_access_type": z.union([z.literal("r"), z.literal("w"), z.literal("rw"), z.literal(null)]).nullable().describe("Alternative access level").optional() })).describe("External resources this script accesses (S3 objects, resources, etc.)").optional() }).describe("Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments"), "path": z.string().describe("Path to the script in the workspace (e.g., 'f/scripts/send_email')"), "hash": z.string().describe("Optional specific version hash of the script to use").optional(), "type": z.literal("script"), "tag_override": z.string().describe("Override the script's default worker group tag").optional(), "is_trigger": z.boolean().describe("If true, this script is a trigger that can start the flow").optional() }).describe("Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code"), z.object({ "input_transforms": z.record(z.string(), z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs")).describe("Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments"), "path": z.string().describe("Path to the flow in the workspace (e.g., 'f/flows/process_user')"), "type": z.literal("flow") }).describe("Reference to an existing flow by path. Use this to call another flow as a subflow"), z.object({ "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'"), "iterator": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("forloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations"), z.object({ "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute in each iteration. Use stop_after_if to control when the loop ends"), "skip_failures": z.boolean().describe("If true, iteration failures don't stop the loop. Failed iterations return null"), "type": z.literal("whileloopflow"), "parallel": z.boolean().describe("If true, iterations run concurrently (use with caution in while loops)").optional(), "parallelism": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").optional(), "squash": z.boolean().optional() }).describe("Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch condition").optional(), "expr": z.string().describe("JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"), "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute if this branch's expr is true") })).describe("Array of branches to evaluate in order. The first branch with expr evaluating to true executes"), "default": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute if no branch expressions match"), "type": z.literal("branchone") }).describe("Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes"), z.object({ "branches": z.array(z.object({ "summary": z.string().describe("Short description of this branch's purpose").optional(), "skip_failure": z.boolean().describe("If true, failure in this branch doesn't fail the entire flow").optional(), "modules": z.array(z.lazy(() => flowModuleSchema)).describe("Steps to execute in this branch") })).describe("Array of branches that all execute (either in parallel or sequentially)"), "type": z.literal("branchall"), "parallel": z.boolean().describe("If true, all branches execute concurrently. If false, they execute sequentially").optional() }).describe("Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently"), z.object({ "type": z.literal("identity"), "flow": z.boolean().describe("If true, marks this as a flow identity (special handling)").optional() }).describe("Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder"), z.object({ "input_transforms": z.object({ "provider": z.discriminatedUnion("type", [z.object({ "value": z.object({ "kind": z.enum(["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]).describe("Supported AI provider types"), "resource": z.string().describe("Resource reference in format '$res:{resource_path}' pointing to provider credentials"), "model": z.string().describe("Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')") }).describe("Complete AI provider configuration with resource reference and model selection"), "type": z.literal("static") }).describe("Static provider configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined"), "output_type": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"), "user_message": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."), "system_prompt": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("System instructions that guide the AI's behavior, persona, and response style. Optional.").optional(), "streaming": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n").optional(), "memory": z.discriminatedUnion("type", [z.object({ "value": z.discriminatedUnion("kind", [z.object({ "kind": z.literal("off") }).describe("No conversation memory/context"), z.object({ "kind": z.literal("auto"), "context_length": z.number().int().describe("Maximum number of messages to retain in context").optional(), "memory_id": z.string().describe("Identifier for persistent memory across agent invocations").optional() }).describe("Automatic context management"), z.object({ "kind": z.literal("manual"), "messages": z.array(z.object({ "role": z.enum(["user","assistant","system"]), "content": z.string() }).describe("A single message in conversation history")) }).describe("Explicit message history")]).describe("Conversation memory configuration"), "type": z.literal("static") }).describe("Static memory configuration passed directly to the AI agent"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined").optional(), "output_schema": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n").optional(), "user_attachments": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n").optional(), "max_completion_tokens": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n").optional(), "temperature": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n").optional(), "max_iterations": z.discriminatedUnion("type", [z.object({ "value": z.any().describe("The static value. For resources, use format '$res:path/to/resource'").optional(), "type": z.literal("static") }).describe("Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'"), z.object({ "expr": z.string().describe("JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"), "type": z.literal("javascript") }).describe("JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value"), z.object({ "type": z.literal("ai") }).describe("Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.")]).describe("Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs").describe("Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n").optional() }).describe("Input parameters for the AI agent mapped to their values"), "tools": z.array(z.object({ "id": z.string().describe("Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"), "summary": z.string().describe("Short description of what this tool does (shown to the AI)").optional(), "value": z.any().superRefine((x, ctx) => {
     const schemas = [z.intersection(z.object({ "tool_type": z.literal("flowmodule") }), z.lazy(() => flowModuleValueSchema)).describe("A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module"), z.object({ "tool_type": z.literal("mcp"), "resource_path": z.string().describe("Path to the MCP resource/server configuration"), "include_tools": z.array(z.string()).describe("Whitelist of specific tools to include from this MCP server").optional(), "exclude_tools": z.array(z.string()).describe("Blacklist of tools to exclude from this MCP server").optional() }).describe("Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers"), z.object({ "tool_type": z.literal("websearch") }).describe("A tool implemented as a websearch tool. The AI can call this like any other websearch tool")];
     const errors = schemas.reduce<z.ZodError[]>(
       (errors, schema) =>
diff --git a/frontend/src/lib/components/copilot/chat/flow/providerKind.test.ts b/frontend/src/lib/components/copilot/chat/flow/providerKind.test.ts
new file mode 100644
index 0000000000..ab520762ec
--- /dev/null
+++ b/frontend/src/lib/components/copilot/chat/flow/providerKind.test.ts
@@ -0,0 +1,41 @@
+import { describe, expect, it } from 'vitest'
+import { flowModulesSchema } from './openFlowZod.gen'
+
+// Guards against the generated copilot flow Zod schema (openFlowZod.gen.ts)
+// drifting from the AIProviderKind enum in openflow.openapi.yaml. A missing
+// provider kind here silently rejects AI-generated flow edits for that provider
+// in the copilot flow-editing path (validateFlowModules -> flowModulesSchema).
+function aiAgentModuleWithProviderKind(kind: string) {
+	return {
+		id: 'agent',
+		value: {
+			type: 'aiagent',
+			tools: [],
+			input_transforms: {
+				provider: {
+					type: 'static',
+					value: { kind, resource: '$res:u/admin/foundry', model: 'gpt-4o' }
+				},
+				user_message: { type: 'static', value: 'hello' },
+				output_type: { type: 'static', value: 'text' }
+			}
+		}
+	}
+}
+
+describe('copilot flow module validation - AI agent provider kind', () => {
+	it('accepts azure_foundry (and the existing azure_openai baseline)', () => {
+		expect(
+			flowModulesSchema.safeParse([aiAgentModuleWithProviderKind('azure_openai')]).success
+		).toBe(true)
+		expect(
+			flowModulesSchema.safeParse([aiAgentModuleWithProviderKind('azure_foundry')]).success
+		).toBe(true)
+	})
+
+	it('still rejects an unknown provider kind (enum is actually enforced)', () => {
+		expect(
+			flowModulesSchema.safeParse([aiAgentModuleWithProviderKind('not_a_real_provider')]).success
+		).toBe(false)
+	})
+})
diff --git a/frontend/src/lib/components/copilot/chat/shared.ts b/frontend/src/lib/components/copilot/chat/shared.ts
index b958283972..7abdc75168 100644
--- a/frontend/src/lib/components/copilot/chat/shared.ts
+++ b/frontend/src/lib/components/copilot/chat/shared.ts
@@ -950,7 +950,11 @@ export async function buildSchemaForTool(
 
 		// OPEN AI models don't support strict mode well with schema with complex properties, so we disable it
 		const model = getCurrentModel()
-		if (model.provider === 'openai' || model.provider === 'azure_openai') {
+		if (
+			model.provider === 'openai' ||
+			model.provider === 'azure_openai' ||
+			model.provider === 'azure_foundry'
+		) {
 			toolDef.function.strict = false
 		}
 		return true
diff --git a/frontend/src/lib/components/copilot/lib.ts b/frontend/src/lib/components/copilot/lib.ts
index ffa4e5db24..adb665f127 100644
--- a/frontend/src/lib/components/copilot/lib.ts
+++ b/frontend/src/lib/components/copilot/lib.ts
@@ -62,22 +62,10 @@ export const AI_PROVIDERS: Record<AIProvider, AIProviderDetails> = {
 		label: 'OpenAI',
 		defaultModels: OPENAI_MODELS
 	},
-	azure_openai: {
-		label: 'Azure OpenAI',
-		defaultModels: OPENAI_MODELS
-	},
 	anthropic: {
 		label: 'Anthropic',
 		defaultModels: ['claude-sonnet-4-6', 'claude-3-5-haiku-latest']
 	},
-	mistral: {
-		label: 'Mistral',
-		defaultModels: ['codestral-latest']
-	},
-	deepseek: {
-		label: 'DeepSeek',
-		defaultModels: ['deepseek-v4-pro', 'deepseek-chat', 'deepseek-reasoner']
-	},
 	googleai: {
 		label: 'Google AI',
 		defaultModels: [
@@ -89,6 +77,29 @@ export const AI_PROVIDERS: Record<AIProvider, AIProviderDetails> = {
 			'gemini-3.1-flash-lite'
 		]
 	},
+	azure_openai: {
+		label: 'Azure OpenAI',
+		defaultModels: OPENAI_MODELS
+	},
+	azure_foundry: {
+		label: 'Azure AI Foundry',
+		defaultModels: [
+			'gpt-4o',
+			'gpt-4o-mini',
+			'DeepSeek-R1',
+			'Llama-3.3-70B-Instruct',
+			'Phi-4',
+			'Mistral-Large-2411'
+		]
+	},
+	mistral: {
+		label: 'Mistral',
+		defaultModels: ['codestral-latest']
+	},
+	deepseek: {
+		label: 'DeepSeek',
+		defaultModels: ['deepseek-v4-pro', 'deepseek-chat', 'deepseek-reasoner']
+	},
 	groq: {
 		label: 'Groq',
 		defaultModels: ['llama-3.3-70b-versatile', 'llama-3.1-8b-instant']
@@ -267,7 +278,10 @@ export async function fetchAvailableModels(
 export function getModelMaxTokens(provider: AIProvider, model: string) {
 	if (model.includes('gpt-5')) {
 		return 128000
-	} else if ((provider === 'azure_openai' || provider === 'openai') && model.startsWith('o')) {
+	} else if (
+		(provider === 'azure_openai' || provider === 'openai' || provider === 'azure_foundry') &&
+		model.startsWith('o')
+	) {
 		return 100000
 	} else if (
 		model.includes('claude-sonnet') ||
@@ -287,7 +301,6 @@ export function getModelMaxTokens(provider: AIProvider, model: string) {
 	return 8192
 }
 
-
 function getModelSpecificConfig(
 	modelProvider: AIProviderModel,
 	tools?: OpenAI.Chat.Completions.ChatCompletionTool[]
@@ -302,7 +315,9 @@ function getModelSpecificConfig(
 	}
 	const maxTokens = customMaxTokensStore?.[modelKey] ?? defaultMaxTokens
 	if (
-		(modelProvider.provider === 'openai' || modelProvider.provider === 'azure_openai') &&
+		(modelProvider.provider === 'openai' ||
+			modelProvider.provider === 'azure_openai' ||
+			modelProvider.provider === 'azure_foundry') &&
 		requiresMaxCompletionTokens(modelProvider.model)
 	) {
 		return {
@@ -352,6 +367,7 @@ const DEFAULT_COMPLETION_CONFIG: ChatCompletionCreateParams = {
 export const PROVIDER_COMPLETION_CONFIG_MAP: Record<AIProvider, ChatCompletionCreateParams> = {
 	openai: DEFAULT_COMPLETION_CONFIG,
 	azure_openai: DEFAULT_COMPLETION_CONFIG,
+	azure_foundry: DEFAULT_COMPLETION_CONFIG,
 	groq: DEFAULT_COMPLETION_CONFIG,
 	openrouter: DEFAULT_COMPLETION_CONFIG,
 	togetherai: DEFAULT_COMPLETION_CONFIG,
@@ -906,7 +922,10 @@ export async function getCompletion(
 	// Use Completions API for other providers
 	const client = options?.openaiClient ?? workspaceAIClients.getOpenaiClient()
 	const completionConfig = applyReasoningToConfig(
-		(provider === 'openai' || provider === 'azure_openai' || provider === 'googleai') &&
+		(provider === 'openai' ||
+			provider === 'azure_openai' ||
+			provider === 'azure_foundry' ||
+			provider === 'googleai') &&
 			config.stream
 			? {
 					...config,
diff --git a/frontend/src/lib/components/copilot/reasoningRegistry.ts b/frontend/src/lib/components/copilot/reasoningRegistry.ts
index e1ce2467f2..ca4525298f 100644
--- a/frontend/src/lib/components/copilot/reasoningRegistry.ts
+++ b/frontend/src/lib/components/copilot/reasoningRegistry.ts
@@ -153,6 +153,9 @@ function supportsReasoningStatic(provider: AIProvider, model: string): boolean {
 			return /claude-opus-4-(6|7|8)/.test(m) || /claude-sonnet-4-6/.test(m) || m.includes('fable')
 		case 'openai':
 		case 'azure_openai':
+		// Azure AI Foundry hosts OpenAI models too; the model-id gate keeps
+		// this a no-op for its non-OpenAI catalog (Llama/DeepSeek/etc.).
+		case 'azure_foundry':
 			return base.startsWith('gpt-5') || /^o\d/.test(base)
 		case 'openrouter':
 			// Best-effort markers for models whose `supported_parameters` include
@@ -209,7 +212,7 @@ export function getReasoningCapability(provider: AIProvider, model: string): Rea
 			? anthropicReasoningLevels(bareModel)
 			: provider === 'googleai'
 				? geminiReasoningLevels(bareModel)
-				: provider === 'openai' || provider === 'azure_openai'
+				: provider === 'openai' || provider === 'azure_openai' || provider === 'azure_foundry'
 					? openaiReasoningLevels(bareModel)
 					: provider === 'openrouter'
 						? openrouterReasoningLevels(bareModel)
@@ -236,6 +239,7 @@ function canDisableReasoning(provider: AIProvider, model: string): boolean {
 			return geminiCanDisable(model)
 		case 'openai':
 		case 'azure_openai':
+		case 'azure_foundry':
 			// gpt-5.1+ accept effort 'none'; gpt-5 and o-series reject it and
 			// reason at `medium` by default, so omission isn't off either.
 			return /^gpt-5\./.test(base)
@@ -312,6 +316,7 @@ function explicitOffToken(provider: AIProvider, model: string): ReasoningEffort
 			return DEEPSEEK_OFF_SENTINEL
 		case 'openai':
 		case 'azure_openai':
+		case 'azure_foundry':
 			// gpt-5.1+ reasoning is off only via the explicit 'none' effort
 			// (gpt-5.5 defaults to medium when the field is omitted).
 			return /^gpt-5\./.test(baseModelId(model)) ? 'none' : undefined
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index dfee4df377..8b19b3fbf1 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -452,6 +452,7 @@ components:
       enum:
         - openai
         - azure_openai
+        - azure_foundry
         - anthropic
         - mistral
         - deepseek
diff --git a/system_prompts/auto-generated/flow.md b/system_prompts/auto-generated/flow.md
index 97d0d5143a..7f70280e9f 100644
--- a/system_prompts/auto-generated/flow.md
+++ b/system_prompts/auto-generated/flow.md
@@ -295,4 +295,4 @@ Reference a specific resource using `$res:` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file
diff --git a/system_prompts/auto-generated/prompts.ts b/system_prompts/auto-generated/prompts.ts
index 8af1cde305..9578f1b62d 100644
--- a/system_prompts/auto-generated/prompts.ts
+++ b/system_prompts/auto-generated/prompts.ts
@@ -2664,7 +2664,7 @@ class SqlQuery:
 
 export const OPENFLOW_SCHEMA = `## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`;
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`;
 
 export const CLI_COMMANDS = `# Windmill CLI Commands
 
diff --git a/system_prompts/auto-generated/skills/write-flow/SKILL.md b/system_prompts/auto-generated/skills/write-flow/SKILL.md
index 8c8057d48f..26f06fb667 100644
--- a/system_prompts/auto-generated/skills/write-flow/SKILL.md
+++ b/system_prompts/auto-generated/skills/write-flow/SKILL.md
@@ -381,4 +381,4 @@ Reference a specific resource using `$res:` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file

From a49c0871d7ab2aaf78a7713b8a786ead937434da Mon Sep 17 00:00:00 2001
From: Diego Imbert <70353967+diegoimbert@users.noreply.github.com>
Date: Thu, 2 Jul 2026 23:43:18 +0200
Subject: [PATCH 22/76] fix(frontend): show inline workspace name editor on
 general settings (Fixes GIT-911) (#9892)

* fix(frontend): show inline workspace name editor on general settings

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): guard rename and support enter-to-save on workspace name

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../settings/ChangeWorkspaceName.svelte       | 58 +++++++------------
 1 file changed, 21 insertions(+), 37 deletions(-)

diff --git a/frontend/src/lib/components/settings/ChangeWorkspaceName.svelte b/frontend/src/lib/components/settings/ChangeWorkspaceName.svelte
index 77eae741e9..3b4223f157 100644
--- a/frontend/src/lib/components/settings/ChangeWorkspaceName.svelte
+++ b/frontend/src/lib/components/settings/ChangeWorkspaceName.svelte
@@ -1,16 +1,13 @@
 <script lang="ts">
 	import { workspaceStore } from '$lib/stores'
 	import Button from '../common/button/Button.svelte'
+	import TextInput from '../text_input/TextInput.svelte'
 	import { sendUserToast } from '$lib/toast'
 	import { WorkspaceService } from '$lib/gen'
-	import Modal from '../common/modal/Modal.svelte'
-	import { Pen } from 'lucide-svelte'
 	import { untrack } from 'svelte'
 
-	let { open = false }: { open?: boolean } = $props()
-
-	let newName = $state('')
 	let currentName = $state('')
+	let newName = $state('')
 
 	$effect(() => {
 		if ($workspaceStore) {
@@ -20,10 +17,13 @@
 
 	async function getWorkspaceName() {
 		currentName = await WorkspaceService.getWorkspaceName({ workspace: $workspaceStore! })
+		newName = currentName
 	}
 
 	async function renameWorkspace() {
-		open = false
+		if (!newName || newName === currentName) {
+			return
+		}
 		await WorkspaceService.changeWorkspaceName({
 			workspace: $workspaceStore!,
 			requestBody: {
@@ -32,7 +32,6 @@
 		})
 
 		sendUserToast(`Changed workspace name to ${newName}`)
-		newName = ''
 		getWorkspaceName()
 	}
 </script>
@@ -41,44 +40,29 @@
 	<p class="font-semibold text-xs text-emphasis">Workspace name</p>
 	<p class="text-xs text-secondary font-normal">Displayable name</p>
 	<div class="flex flex-row gap-2 items-center">
-		<p class="text-primary text-xs">{currentName}</p>
-		<Button
-			on:click={() => {
-				open = true
-			}}
-			unifiedSize="sm"
-			iconOnly
-			variant="subtle"
-			startIcon={{
-				icon: Pen
+		<TextInput
+			bind:value={newName}
+			size="sm"
+			class="max-w-xs"
+			inputProps={{
+				placeholder: 'Workspace name',
+				'aria-label': 'Workspace name',
+				onkeydown: (e) => {
+					if (e.key === 'Enter') {
+						renameWorkspace()
+					}
+				}
 			}}
 		/>
-	</div>
-</div>
-
-<Modal bind:open title="Change workspace name">
-	<div class="flex flex-col gap-4 mt-4">
-		{#if currentName}
-			<p class="text-secondary text-xs"
-				>Current name <br /> <span class="text-emphasis">{currentName}</span></p
-			>
-		{/if}
-		<label class="flex flex-col gap-1">
-			<span class="text-emphasis text-xs">New name</span>
-			<input type="text" bind:value={newName} />
-		</label>
-	</div>
-
-	{#snippet actions()}
 		<Button
 			size="sm"
 			variant="accent"
-			disabled={!newName}
+			disabled={!newName || newName === currentName}
 			on:click={() => {
 				renameWorkspace()
 			}}
 		>
 			Save
 		</Button>
-	{/snippet}
-</Modal>
+	</div>
+</div>

From d15033cde6a474b548ebbaf18ff02223fc21f701 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 21:57:26 +0000
Subject: [PATCH 23/76] fix: invalidate bun bundle cache on transitive
 relative-import changes (#9891)

* fix: invalidate bun bundle cache on transitive relative-import changes

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: do not memoize transient fetch errors in bundle-key import cache

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: use regular comment on lazy_static block (deny unused_doc_comments)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: align bundle-key import version selection with loader content endpoint

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 ...44cfa928469ce3c1a53ec273ecc997f6e61f8.json |  23 +++
 ...1d1eefa5cf05ff6521ee605af7ac2b90fa60b.json |  23 ---
 backend/src/main.rs                           |   4 +
 backend/tests/bun_jobs.rs                     | 121 ++++++++++++++++
 backend/windmill-common/src/lib.rs            |  44 ++++++
 backend/windmill-worker/src/bun_executor.rs   | 131 +++++++++++++++---
 6 files changed, 301 insertions(+), 45 deletions(-)
 create mode 100644 backend/.sqlx/query-7fa8b53615a7cb678f9d5caedbc44cfa928469ce3c1a53ec273ecc997f6e61f8.json
 delete mode 100644 backend/.sqlx/query-8fef781ecef8bb7e4f5172adbab1d1eefa5cf05ff6521ee605af7ac2b90fa60b.json

diff --git a/backend/.sqlx/query-7fa8b53615a7cb678f9d5caedbc44cfa928469ce3c1a53ec273ecc997f6e61f8.json b/backend/.sqlx/query-7fa8b53615a7cb678f9d5caedbc44cfa928469ce3c1a53ec273ecc997f6e61f8.json
new file mode 100644
index 0000000000..e171d44af5
--- /dev/null
+++ b/backend/.sqlx/query-7fa8b53615a7cb678f9d5caedbc44cfa928469ce3c1a53ec273ecc997f6e61f8.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT hash FROM script WHERE path = $1 AND workspace_id = $2 AND archived = false ORDER BY created_at DESC LIMIT 1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "hash",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "7fa8b53615a7cb678f9d5caedbc44cfa928469ce3c1a53ec273ecc997f6e61f8"
+}
diff --git a/backend/.sqlx/query-8fef781ecef8bb7e4f5172adbab1d1eefa5cf05ff6521ee605af7ac2b90fa60b.json b/backend/.sqlx/query-8fef781ecef8bb7e4f5172adbab1d1eefa5cf05ff6521ee605af7ac2b90fa60b.json
deleted file mode 100644
index f65ea6d2d4..0000000000
--- a/backend/.sqlx/query-8fef781ecef8bb7e4f5172adbab1d1eefa5cf05ff6521ee605af7ac2b90fa60b.json
+++ /dev/null
@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT created_at FROM script WHERE workspace_id = $1 AND hash = $2",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "created_at",
-        "type_info": "Timestamptz"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "8fef781ecef8bb7e4f5172adbab1d1eefa5cf05ff6521ee605af7ac2b90fa60b"
-}
diff --git a/backend/src/main.rs b/backend/src/main.rs
index 94b8e2f4f6..0d7bef4d70 100644
--- a/backend/src/main.rs
+++ b/backend/src/main.rs
@@ -1708,6 +1708,10 @@ async fn process_notify_event(
                     match *source_type {
                         "script" => {
                             windmill_common::DEPLOYED_SCRIPT_HASH_CACHE.remove(&key);
+                            // Bundle-cache key resolution for imported scripts; evicted
+                            // together with the content-side caches below so key and
+                            // inlined content flip to the new version in the same window.
+                            windmill_common::IMPORTED_SCRIPT_HASH_CACHE.remove(&key);
                             // Evict the relative-import latest-hash cache so a redeployed
                             // imported script flips the content cache to its new version
                             // across all replicas within a poll interval (see #6769). Keyed
diff --git a/backend/tests/bun_jobs.rs b/backend/tests/bun_jobs.rs
index d51e51f58b..fc766253bc 100644
--- a/backend/tests/bun_jobs.rs
+++ b/backend/tests/bun_jobs.rs
@@ -1,3 +1,4 @@
+use futures::StreamExt;
 use sqlx::postgres::Postgres;
 use sqlx::Pool;
 use uuid::Uuid;
@@ -818,6 +819,126 @@ export function main() {
     Ok(())
 }
 
+// ============================================================================
+// Bundle cache invalidation on transitive relative-import change
+// ============================================================================
+
+async fn insert_deployed_bun_script(db: &Pool<Postgres>, path: &str, hash: i64, content: &str) {
+    // What gen_bun_lockfile stores for a script with no npm dependencies; a
+    // bare '' lock fails split_lockfile when the script is run directly.
+    const EMPTY_BUN_LOCK: &str = "{\n  \"dependencies\": {}\n}\n//bun.lock\n<empty>";
+    // Runtime query to avoid touching the sqlx offline cache.
+    sqlx::query(
+        "INSERT INTO script (workspace_id, created_by, content, schema, summary, description, path, hash, language, lock)
+         VALUES ('test-workspace', 'test-user', $1, '{\"$schema\":\"https://json-schema.org/draft/2020-12/schema\",\"properties\":{},\"required\":[],\"type\":\"object\"}', '', '', $2, $3, 'bun', $4)",
+    )
+    .bind(content)
+    .bind(path)
+    .bind(hash)
+    .bind(EMPTY_BUN_LOCK)
+    .execute(db)
+    .await
+    .unwrap();
+}
+
+fn run_main_script_job(hash: i64) -> RunJob {
+    RunJob::from(JobPayload::ScriptHash {
+        path: "f/stale_bundle/main_script".to_string(),
+        hash: windmill_common::scripts::ScriptHash(hash),
+        cache_ttl: None,
+        cache_ignore_s3_path: None,
+        dedicated_worker: None,
+        language: ScriptLang::Bun,
+        priority: None,
+        apply_preprocessor: false,
+        concurrency_settings: windmill_common::runnable_settings::ConcurrencySettings::default(),
+        debouncing_settings: windmill_common::runnable_settings::DebouncingSettings::default(),
+        labels: None,
+    })
+}
+
+/// Editing a script that a runnable imports only TRANSITIVELY (main -> mid ->
+/// leaf) must invalidate the runnable's cached bundle: the leaf's code is
+/// inlined in the bundle, so the cache key has to cover the whole closure, not
+/// just direct imports.
+#[sqlx::test(fixtures("base"))]
+async fn test_bun_transitive_import_change_rebundles(db: Pool<Postgres>) -> anyhow::Result<()> {
+    initialize_tracing().await;
+    let server = ApiServer::start(db.clone()).await?;
+    let port = server.addr.port();
+
+    // Hashes/paths unique across this test binary: the script/hash caches are
+    // process-global while parallel tests each run in their own DB.
+    const LEAF_V1: i64 = 41230001;
+    const MID: i64 = 41230002;
+    const MAIN: i64 = 41230003;
+    const LEAF_V2: i64 = 41230004;
+
+    insert_deployed_bun_script(
+        &db,
+        "f/stale_bundle/leaf",
+        LEAF_V1,
+        r#"export function leafValue() { return "V1_FROM_LEAF"; }"#,
+    )
+    .await;
+    insert_deployed_bun_script(
+        &db,
+        "f/stale_bundle/mid",
+        MID,
+        r#"import { leafValue } from "./leaf";
+export function midValue() { return `M(${leafValue()})`; }"#,
+    )
+    .await;
+    insert_deployed_bun_script(
+        &db,
+        "f/stale_bundle/main_script",
+        MAIN,
+        r#"import { midValue } from "./mid";
+export function main() { return midValue(); }"#,
+    )
+    .await;
+
+    let mut completed = listen_for_completed_jobs(&db).await;
+    let db2 = db.clone();
+    in_test_worker(
+        &db,
+        async move {
+            let job = run_main_script_job(MAIN).push(&db2).await;
+            completed.next().await;
+            let result = completed_job(job, &db2).await.json_result().unwrap();
+            assert_eq!(result, serde_json::json!("M(V1_FROM_LEAF)"));
+
+            // Deploy a new version of ONLY the leaf; main_script and mid keep
+            // their hash, content, and lock byte-identical.
+            insert_deployed_bun_script(
+                &db2,
+                "f/stale_bundle/leaf",
+                LEAF_V2,
+                r#"export function leafValue() { return "V2_FROM_LEAF"; }"#,
+            )
+            .await;
+
+            // Tests don't run the notify_event poll loop, so replay what its
+            // `notify_runnable_version_change` handler (main.rs) does on deploy:
+            // evict the leaf's latest-hash cache entries.
+            windmill_common::IMPORTED_SCRIPT_HASH_CACHE.remove(&(
+                "test-workspace".to_string(),
+                "f/stale_bundle/leaf".to_string(),
+            ));
+            windmill_api_scripts::scripts::RAW_SCRIPT_LATEST_HASH_CACHE
+                .remove(&format!("test-workspace:f/stale_bundle/leaf"));
+
+            let job = run_main_script_job(MAIN).push(&db2).await;
+            completed.next().await;
+            let result = completed_job(job, &db2).await.json_result().unwrap();
+            assert_eq!(result, serde_json::json!("M(V2_FROM_LEAF)"));
+        },
+        port,
+    )
+    .await;
+    Ok(())
+}
+
 #[sqlx::test(fixtures("base", "bun_edge_cases"))]
 async fn test_bun_shared_imports_both_styles(db: Pool<Postgres>) -> anyhow::Result<()> {
     initialize_tracing().await;
diff --git a/backend/windmill-common/src/lib.rs b/backend/windmill-common/src/lib.rs
index aaead77925..baa3e4b500 100644
--- a/backend/windmill-common/src/lib.rs
+++ b/backend/windmill-common/src/lib.rs
@@ -268,6 +268,10 @@ lazy_static::lazy_static! {
     pub static ref INSTANCE_NAME: String = rd_string(5);
 
     pub static ref DEPLOYED_SCRIPT_HASH_CACHE: Cache<(String, String), ExpiringLatestVersionId> = Cache::new(1000);
+    // Latest non-archived version per (workspace, path) for bundle cache keying —
+    // looser predicate than DEPLOYED_SCRIPT_HASH_CACHE (no lock requirement), so
+    // the two must not share entries. See get_latest_script_hash_for_import_cached.
+    pub static ref IMPORTED_SCRIPT_HASH_CACHE: Cache<(String, String), ExpiringLatestVersionId> = Cache::new(1000);
     pub static ref FLOW_VERSION_CACHE: Cache<(String, String), ExpiringLatestVersionId> = Cache::new(1000);
     pub static ref DYNAMIC_INPUT_CACHE: Cache<String, Arc<jobs::DynamicInput>> = Cache::new(1000);
     pub static ref DEPLOYED_SCRIPT_INFO_CACHE: Cache<(String, i64), ScriptHashInfo<ScriptRunnableSettingsHandle>> = Cache::new(1000);
@@ -1602,6 +1606,46 @@ pub async fn get_latest_script_hash<'e, E: sqlx::PgExecutor<'e>>(
     return Ok(hash);
 }
 
+/// Latest non-archived hash for an imported `path`, for bundle cache keying.
+/// MUST select the same row as the bundler's content endpoint
+/// (`raw_script_by_path_internal`: `archived = false ORDER BY created_at DESC`,
+/// no lock predicate) — a stricter filter here would let the key point at an
+/// older version than the content that gets inlined. Cached with the same
+/// freshness contract as that endpoint's `RAW_SCRIPT_LATEST_HASH_CACHE`:
+/// evicted by `notify_runnable_version_change` events, 60s TTL fallback.
+pub async fn get_latest_script_hash_for_import_cached(
+    db: &DB,
+    w_id: &str,
+    script_path: &str,
+) -> error::Result<Option<i64>> {
+    let use_cache = !DEPLOYED_SCRIPT_CACHE_DISABLED.load(std::sync::atomic::Ordering::Relaxed);
+    let cache_key = (w_id.to_string(), script_path.to_string());
+    if use_cache {
+        if let Some(cached) = IMPORTED_SCRIPT_HASH_CACHE.get(&cache_key) {
+            if cached.expires_at > std::time::Instant::now() {
+                return Ok(Some(cached.id));
+            }
+        }
+    }
+    let hash = sqlx::query_scalar!(
+        "SELECT hash FROM script WHERE path = $1 AND workspace_id = $2 AND archived = false ORDER BY created_at DESC LIMIT 1",
+        script_path,
+        w_id
+    )
+    .fetch_optional(db)
+    .await?;
+    if let (true, Some(hash)) = (use_cache, hash) {
+        IMPORTED_SCRIPT_HASH_CACHE.insert(
+            cache_key,
+            ExpiringLatestVersionId {
+                id: hash,
+                expires_at: std::time::Instant::now() + LATEST_VERSION_ID_CACHE_TTL,
+            },
+        );
+    }
+    Ok(hash)
+}
+
 pub async fn get_script_info_for_hash<'e, E: sqlx::PgExecutor<'e>>(
     db_authed: Option<UserDbWithAuthed<'e, AuthedRef<'e>>>,
     db: E,
diff --git a/backend/windmill-worker/src/bun_executor.rs b/backend/windmill-worker/src/bun_executor.rs
index 1e4f4aafd6..f6b093f766 100644
--- a/backend/windmill-worker/src/bun_executor.rs
+++ b/backend/windmill-worker/src/bun_executor.rs
@@ -1,6 +1,11 @@
 #[cfg(feature = "deno_core")]
 use std::time::Instant;
-use std::{collections::HashMap, fs, process::Stdio};
+use std::{
+    collections::{HashMap, HashSet},
+    fs,
+    process::Stdio,
+    sync::Arc,
+};
 
 use base64::Engine;
 use itertools::Itertools;
@@ -27,9 +32,10 @@ use crate::{
     NSJAIL_AVAILABLE, NSJAIL_PATH, PATH_ENV, PROXY_ENVS, TRACING_PROXY_CA_CERT_PATH, TZ_ENV,
 };
 use windmill_common::{
+    cache,
     client::AuthedClient,
     jobs::JobKind,
-    scripts::{id_to_codebase_info, CodebaseInfo, ScriptLang},
+    scripts::{id_to_codebase_info, CodebaseInfo, ScriptHash, ScriptLang},
     utils::WarnAfterExt,
     workspace_dependencies::WorkspaceDependenciesPrefetched,
 };
@@ -44,7 +50,6 @@ use tokio::io::AsyncReadExt;
 
 use windmill_common::{
     error::{self, Result},
-    get_latest_hash_for_path,
     worker::{write_file, Connection, DISABLE_BUNDLING},
     DB,
 };
@@ -1242,16 +1247,101 @@ pub fn ensure_bundle_output_exists(bundle_path: &str) -> Result<()> {
 
 pub const BUN_BUNDLE_OBJECT_STORE_PREFIX: &str = "bun_bundle/";
 
-async fn get_script_import_updated_at(db: &DB, w_id: &str, script_path: &str) -> Result<String> {
-    let script_hash = get_latest_hash_for_path(db, w_id, script_path, false).await?;
-    let last_updated_at = sqlx::query_scalar!(
-        "SELECT created_at FROM script WHERE workspace_id = $1 AND hash = $2",
-        w_id,
-        script_hash.0 .0
+// A script version's relative-import list never changes (content is immutable
+// per hash), so parses are memoized without any invalidation.
+lazy_static::lazy_static! {
+    static ref RELATIVE_IMPORTS_PER_HASH: quick_cache::sync::Cache<i64, Arc<Vec<String>>> =
+        quick_cache::sync::Cache::new(1000);
+}
+
+const MAX_TRANSITIVE_IMPORT_PATHS: usize = 256;
+
+/// `(path, latest hash)` for the whole transitive closure of relative imports
+/// of `inner_content` — the set of scripts whose code gets inlined into the
+/// bundle, so all of them must key the bundle cache. Resolution goes through
+/// `IMPORTED_SCRIPT_HASH_CACHE` (notify-evicted, 60s TTL fallback, same
+/// version-selection predicate as the loader's content endpoint) and the
+/// per-hash script/parse caches, so steady state costs no DB queries.
+async fn collect_transitive_import_versions(
+    db: &DB,
+    w_id: &str,
+    script_path: &str,
+    inner_content: &str,
+) -> Vec<(String, i64)> {
+    let conn = Connection::from(db.clone());
+    let mut queue = crate::worker_lockfiles::extract_relative_imports(
+        inner_content,
+        script_path,
+        &Some(ScriptLang::Bun),
     )
-    .fetch_one(db)
-    .await?;
-    Ok(last_updated_at.to_string())
+    .unwrap_or_default();
+    let mut visited: HashSet<String> = HashSet::new();
+    let mut versions: Vec<(String, i64)> = vec![];
+    while let Some(path) = queue.pop() {
+        if !visited.insert(path.clone()) {
+            continue;
+        }
+        if visited.len() > MAX_TRANSITIVE_IMPORT_PATHS {
+            tracing::warn!(
+                "transitive relative-import closure of {script_path} exceeds \
+                {MAX_TRANSITIVE_IMPORT_PATHS} scripts; bundle cache key covers only the first \
+                {MAX_TRANSITIVE_IMPORT_PATHS}"
+            );
+            break;
+        }
+        let hash = match windmill_common::get_latest_script_hash_for_import_cached(db, w_id, &path)
+            .await
+        {
+            Ok(Some(hash)) => hash,
+            // Not a deployed script at this path (deleted, or not a script):
+            // excluded from the key, matching what the bundler can inline.
+            Ok(None) => continue,
+            Err(e) => {
+                tracing::warn!(
+                    "could not resolve import {path} while computing bundle cache key for \
+                    {script_path}: {e:#}"
+                );
+                continue;
+            }
+        };
+        versions.push((path.clone(), hash));
+        let imports = match RELATIVE_IMPORTS_PER_HASH.get(&hash) {
+            Some(imports) => imports,
+            None => match cache::script::fetch(&conn, ScriptHash(hash)).await {
+                Ok((data, meta)) => {
+                    let imports = Arc::new(match meta.language {
+                        Some(ScriptLang::Bun)
+                        | Some(ScriptLang::Bunnative)
+                        | Some(ScriptLang::Deno) => {
+                            crate::worker_lockfiles::extract_relative_imports(
+                                &data.code,
+                                &path,
+                                &meta.language,
+                            )
+                            .unwrap_or_default()
+                        }
+                        _ => vec![],
+                    });
+                    RELATIVE_IMPORTS_PER_HASH.insert(hash, imports.clone());
+                    imports
+                }
+                // A fetch error is transient, not a property of the (immutable)
+                // content — memoizing it would drop this subtree from the key
+                // until worker restart. Skip caching and retry next run.
+                Err(e) => {
+                    tracing::warn!(
+                        "could not fetch import {path} (hash {hash}) while computing bundle \
+                        cache key for {script_path}: {e:#}"
+                    );
+                    Arc::new(vec![])
+                }
+            },
+        };
+        queue.extend(imports.iter().cloned());
+    }
+    // deterministic key regardless of traversal order
+    versions.sort();
+    versions
 }
 
 pub async fn compute_bundle_local_and_remote_path(
@@ -1265,16 +1355,13 @@ pub async fn compute_bundle_local_and_remote_path(
     let mut input_src = format!("{inner_content}{lock}",);
 
     if let Some(db) = db {
-        let relative_imports = crate::worker_lockfiles::extract_relative_imports(
-            &inner_content,
-            script_path,
-            &Some(ScriptLang::Bun),
-        );
-        for path in relative_imports.unwrap_or_default() {
-            if let Ok(updated_at) = get_script_import_updated_at(&db, w_id, &path).await {
-                input_src.push_str(&path);
-                input_src.push_str(&updated_at.to_string());
-            }
+        // The bundle inlines the whole transitive relative-import closure, so a
+        // new deployed version of ANY script in it must change the key.
+        for (path, hash) in
+            collect_transitive_import_versions(db, w_id, script_path, inner_content).await
+        {
+            input_src.push_str(&path);
+            input_src.push_str(&hash.to_string());
         }
     };
 

From 7c7d7474cc86a4052272032f281cc4d7a85db37b Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Thu, 2 Jul 2026 23:59:02 +0200
Subject: [PATCH 24/76] feat: support workspace forks on cloud using parent
 workspace limits (#9864)

* feat: support workspace forks on cloud using parent workspace limits

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs: clarify count_paid_seats approximates rather than mirrors billing seats

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: non-admin fork UI, attach cap, and fork-count for cloud forks

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: cloud fork billing cache on rename, usage display, attach cap edge

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat: fork count in cloud quotas + fork billing points to parent

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: invalidate billing/fork caches on fork deletion for id reuse

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: gate fork usage remap on CLOUD_HOSTED, not just the cloud feature

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs: note cloud feature vs CLOUD_HOSTED gating in backend guide

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: reserve fork-cap slots for an attach candidate's whole subtree

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: invalidate team-plan cache on delete, raise fork depth cap

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat: cap fork nesting depth (MAX_FORK_DEPTH, default 5)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: fork count/height robust to cycles and deleted intermediates

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): reset fork button loading state on creation error

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: invalidate billing cache for attached fork subtree; helper auth docs

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 ...0b70eb81b4e6b8f79d57db9d1d12d7f3ffde2.json |  22 ++
 ...bc9b6a776a4941e68d8e2b31904c677493e2d.json |  22 ++
 ...eaaee42e954e0b4ed0bd5ba6a5b308894d6ba.json |  22 ++
 ...dc898c0b40fe6f1c4e5c631b6f784f7e73a3d.json |  22 ++
 ...1af05c5a6882f988ba5e0ec1f63828353987b.json |  22 ++
 ...adcdd88b137bb892437a3ca67fd716772512b.json |  28 +++
 backend/CLAUDE.md                             |  10 +
 .../windmill-api-workspaces/src/workspaces.rs | 177 +++++++++++++-
 .../src/workspaces_extra.rs                   |  33 ++-
 backend/windmill-api/openapi.yaml             |   3 +
 backend/windmill-common/src/workspaces.rs     | 216 +++++++++++++++++-
 .../tests/billing_workspace.rs                | 211 +++++++++++++++++
 backend/windmill-queue/src/jobs.rs            |  35 ++-
 .../components/sessions/SessionForkBar.svelte |   9 +-
 .../sessions/WorkspaceFamilyPicker.svelte     |  13 +-
 .../components/settings/CloudQuotas.svelte    |   4 +-
 .../components/sidebar/WorkspaceMenu.svelte   |   2 +-
 .../CreateWorkspaceInner.svelte               |  39 ++--
 .../src/routes/(root)/(logged)/+layout.svelte |  11 +-
 .../(logged)/workspace_settings/+page.svelte  |  11 +-
 20 files changed, 860 insertions(+), 52 deletions(-)
 create mode 100644 backend/.sqlx/query-27a131537cee699ae53088cfd710b70eb81b4e6b8f79d57db9d1d12d7f3ffde2.json
 create mode 100644 backend/.sqlx/query-2eb746c4cc5c65e277d4c3a12e0bc9b6a776a4941e68d8e2b31904c677493e2d.json
 create mode 100644 backend/.sqlx/query-453c8dc05f4946a30fbbc517b5beaaee42e954e0b4ed0bd5ba6a5b308894d6ba.json
 create mode 100644 backend/.sqlx/query-71ee328f016bac75a9050dc3c13dc898c0b40fe6f1c4e5c631b6f784f7e73a3d.json
 create mode 100644 backend/.sqlx/query-bcb36b5d38a07dbdfed71983aec1af05c5a6882f988ba5e0ec1f63828353987b.json
 create mode 100644 backend/.sqlx/query-ebce1633afe3d3f8a1a68bc8d26adcdd88b137bb892437a3ca67fd716772512b.json
 create mode 100644 backend/windmill-common/tests/billing_workspace.rs

diff --git a/backend/.sqlx/query-27a131537cee699ae53088cfd710b70eb81b4e6b8f79d57db9d1d12d7f3ffde2.json b/backend/.sqlx/query-27a131537cee699ae53088cfd710b70eb81b4e6b8f79d57db9d1d12d7f3ffde2.json
new file mode 100644
index 0000000000..508eb32ed6
--- /dev/null
+++ b/backend/.sqlx/query-27a131537cee699ae53088cfd710b70eb81b4e6b8f79d57db9d1d12d7f3ffde2.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH RECURSIVE chain AS (\n                SELECT id, parent_workspace_id, 0 AS depth\n                FROM workspace WHERE id = $1\n                UNION ALL\n                SELECT w.id, w.parent_workspace_id, chain.depth + 1\n                FROM workspace w\n                JOIN chain ON w.id = chain.parent_workspace_id\n                WHERE chain.depth < 20\n            )\n            SELECT COALESCE(MAX(depth), 0)::bigint AS \"depth!\" FROM chain\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "depth!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "27a131537cee699ae53088cfd710b70eb81b4e6b8f79d57db9d1d12d7f3ffde2"
+}
diff --git a/backend/.sqlx/query-2eb746c4cc5c65e277d4c3a12e0bc9b6a776a4941e68d8e2b31904c677493e2d.json b/backend/.sqlx/query-2eb746c4cc5c65e277d4c3a12e0bc9b6a776a4941e68d8e2b31904c677493e2d.json
new file mode 100644
index 0000000000..44d9f8f36d
--- /dev/null
+++ b/backend/.sqlx/query-2eb746c4cc5c65e277d4c3a12e0bc9b6a776a4941e68d8e2b31904c677493e2d.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH RECURSIVE tree AS (\n                SELECT id, deleted, 0 AS depth FROM workspace WHERE id = $1\n                UNION ALL\n                SELECT w.id, w.deleted, tree.depth + 1 FROM workspace w\n                JOIN tree ON w.parent_workspace_id = tree.id\n                WHERE tree.depth < 20\n            )\n            SELECT COALESCE(MAX(depth) FILTER (WHERE NOT deleted), 0)::bigint AS \"height!\" FROM tree\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "height!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "2eb746c4cc5c65e277d4c3a12e0bc9b6a776a4941e68d8e2b31904c677493e2d"
+}
diff --git a/backend/.sqlx/query-453c8dc05f4946a30fbbc517b5beaaee42e954e0b4ed0bd5ba6a5b308894d6ba.json b/backend/.sqlx/query-453c8dc05f4946a30fbbc517b5beaaee42e954e0b4ed0bd5ba6a5b308894d6ba.json
new file mode 100644
index 0000000000..cb6bb20397
--- /dev/null
+++ b/backend/.sqlx/query-453c8dc05f4946a30fbbc517b5beaaee42e954e0b4ed0bd5ba6a5b308894d6ba.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH RECURSIVE tree AS (\n                SELECT id, deleted, 0 AS depth FROM workspace WHERE id = $1\n                UNION ALL\n                SELECT w.id, w.deleted, tree.depth + 1 FROM workspace w\n                JOIN tree ON w.parent_workspace_id = tree.id\n                WHERE tree.depth < 20\n            )\n            SELECT COUNT(DISTINCT id) AS \"count!\" FROM tree WHERE id != $1 AND NOT deleted\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "count!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "453c8dc05f4946a30fbbc517b5beaaee42e954e0b4ed0bd5ba6a5b308894d6ba"
+}
diff --git a/backend/.sqlx/query-71ee328f016bac75a9050dc3c13dc898c0b40fe6f1c4e5c631b6f784f7e73a3d.json b/backend/.sqlx/query-71ee328f016bac75a9050dc3c13dc898c0b40fe6f1c4e5c631b6f784f7e73a3d.json
new file mode 100644
index 0000000000..acfa08d0bf
--- /dev/null
+++ b/backend/.sqlx/query-71ee328f016bac75a9050dc3c13dc898c0b40fe6f1c4e5c631b6f784f7e73a3d.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH RECURSIVE tree AS (\n                SELECT id, 0 AS depth FROM workspace WHERE id = $1\n                UNION ALL\n                SELECT w.id, tree.depth + 1 FROM workspace w\n                JOIN tree ON w.parent_workspace_id = tree.id\n                WHERE tree.depth < 20\n            )\n            SELECT id AS \"id!\" FROM tree WHERE id != $1\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id!",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "71ee328f016bac75a9050dc3c13dc898c0b40fe6f1c4e5c631b6f784f7e73a3d"
+}
diff --git a/backend/.sqlx/query-bcb36b5d38a07dbdfed71983aec1af05c5a6882f988ba5e0ec1f63828353987b.json b/backend/.sqlx/query-bcb36b5d38a07dbdfed71983aec1af05c5a6882f988ba5e0ec1f63828353987b.json
new file mode 100644
index 0000000000..514024eb8d
--- /dev/null
+++ b/backend/.sqlx/query-bcb36b5d38a07dbdfed71983aec1af05c5a6882f988ba5e0ec1f63828353987b.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH RECURSIVE chain AS (\n                SELECT id, parent_workspace_id, 0 AS depth\n                FROM workspace WHERE id = $1\n                UNION ALL\n                SELECT w.id, w.parent_workspace_id, chain.depth + 1\n                FROM workspace w\n                JOIN chain ON w.id = chain.parent_workspace_id\n                WHERE chain.depth < 20\n            )\n            SELECT id AS \"id!\" FROM chain WHERE parent_workspace_id IS NULL LIMIT 1\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id!",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "bcb36b5d38a07dbdfed71983aec1af05c5a6882f988ba5e0ec1f63828353987b"
+}
diff --git a/backend/.sqlx/query-ebce1633afe3d3f8a1a68bc8d26adcdd88b137bb892437a3ca67fd716772512b.json b/backend/.sqlx/query-ebce1633afe3d3f8a1a68bc8d26adcdd88b137bb892437a3ca67fd716772512b.json
new file mode 100644
index 0000000000..1930427b94
--- /dev/null
+++ b/backend/.sqlx/query-ebce1633afe3d3f8a1a68bc8d26adcdd88b137bb892437a3ca67fd716772512b.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n            COUNT(*) FILTER (WHERE NOT operator AND NOT disabled AND NOT is_service_account) AS \"developers!\",\n            COUNT(*) FILTER (WHERE operator AND NOT disabled AND NOT is_service_account) AS \"operators!\"\n        FROM usr WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "developers!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "operators!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null
+    ]
+  },
+  "hash": "ebce1633afe3d3f8a1a68bc8d26adcdd88b137bb892437a3ca67fd716772512b"
+}
diff --git a/backend/CLAUDE.md b/backend/CLAUDE.md
index 086e251962..ff5d9b2f22 100644
--- a/backend/CLAUDE.md
+++ b/backend/CLAUDE.md
@@ -11,3 +11,13 @@
   cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh
   ```
   Re-run after clean builds or when `target/debug/libwindmill_duckdb_ffi_internal.*` is missing.
+
+## Cloud vs self-hosted gating
+
+The `cloud` cargo feature is compiled into **all** EE builds, so `#[cfg(feature = "cloud")]` is **not** a "cloud-only" runtime gate — it only means the code is present. The real gate for behavior specific to the managed cloud (app.windmill.dev) is the runtime flag `*CLOUD_HOSTED` (`windmill_common::worker::CLOUD_HOSTED`, from the `CLOUD_HOSTED` env var; note it's loaded from `.env` via `dotenv`, so it won't show in `/proc/<pid>/environ` — check the running behavior, not the exec env).
+
+Cloud-only logic must be behind `if *CLOUD_HOSTED { ... }`: feature-gate the helper so it compiles, then **runtime-gate the call**. `#[cfg(feature = "cloud")]` on its own is only sufficient for:
+- pure helper/struct definitions (they only run when a gated caller invokes them),
+- code already inside an `if *CLOUD_HOSTED { ... }` block,
+- handlers that early-return on `!*CLOUD_HOSTED`,
+- idempotent no-ops that are harmless off-cloud (e.g. cache invalidation).
diff --git a/backend/windmill-api-workspaces/src/workspaces.rs b/backend/windmill-api-workspaces/src/workspaces.rs
index bb77a50973..171ec94560 100644
--- a/backend/windmill-api-workspaces/src/workspaces.rs
+++ b/backend/windmill-api-workspaces/src/workspaces.rs
@@ -629,11 +629,13 @@ async fn list_pending_invites(
 }
 
 async fn is_premium(
-    authed: ApiAuthed,
+    _authed: ApiAuthed,
     Extension(_db): Extension<DB>,
     Path(_w_id): Path<String>,
 ) -> JsonResult<bool> {
-    require_admin(authed.is_admin, &authed.username)?;
+    // Any workspace member (not just admins) may read whether the workspace is on a paid plan: it's a
+    // single boolean, and the frontend needs it to decide whether to surface premium-gated affordances
+    // (e.g. forking) to non-admin developers too. The `_authed` extractor still enforces membership.
     #[cfg(feature = "cloud")]
     let premium = windmill_common::workspaces::get_team_plan_status(&_db, &_w_id)
         .await?
@@ -3797,6 +3799,24 @@ lazy_static::lazy_static! {
         }
     };
 
+    // Cloud only: how many forks a premium workspace may have per paid (developer) seat.
+    pub static ref MAX_FORKS_PER_SEAT: i64 = std::env::var("MAX_FORKS_PER_SEAT")
+        .ok()
+        .and_then(|v| v.parse::<i64>().ok())
+        .filter(|v| *v >= 0)
+        .unwrap_or(5);
+
+    // How deep a fork chain may nest (root = depth 0, a direct fork = depth 1). A general guardrail
+    // for all builds, independent of the cloud per-seat cap: deep fork chains are a footgun and no
+    // real use case needs them. Clamped to [1, 20] so it's always a real limit and can never exceed
+    // the fork-walk recursion backstop (20) that billing/count resolution uses (a chain deeper than
+    // the backstop would truncate and mis-resolve its root).
+    pub static ref MAX_FORK_DEPTH: i64 = std::env::var("MAX_FORK_DEPTH")
+        .ok()
+        .and_then(|v| v.parse::<i64>().ok())
+        .map(|v| v.clamp(1, 20))
+        .unwrap_or(5);
+
 }
 
 async fn create_workspace_require_superadmin() -> String {
@@ -4996,10 +5016,12 @@ async fn create_workspace_fork_branch(
     Path(w_id): Path<String>,
     Json(nw): Json<CreateWorkspaceFork>,
 ) -> JsonResult<Vec<Uuid>> {
+    // Pre-check the fork guards before creating any git branch, so we don't leave orphaned branches
+    // behind when the follow-up create_workspace_fork would be rejected anyway.
+    enforce_fork_depth(&db, &w_id, 0).await?;
+    #[cfg(feature = "cloud")]
     if *CLOUD_HOSTED {
-        return Err(Error::BadRequest(format!(
-            "Forking workspaces is not available on app.windmill.dev"
-        )));
+        enforce_cloud_fork_cap(&db, &w_id).await?;
     }
 
     if *DISABLE_WORKSPACE_FORK {
@@ -5171,16 +5193,83 @@ async fn apply_forked_datatable(
     Ok(())
 }
 
+/// Cloud: require the fork/dev's root (billing) workspace be premium; returns the resolved root id.
+#[cfg(feature = "cloud")]
+async fn require_cloud_fork_premium(db: &DB, parent_workspace_id: &str) -> Result<String> {
+    let root =
+        windmill_common::workspaces::get_billing_workspace_id(db, parent_workspace_id).await?;
+    if !windmill_common::workspaces::get_team_plan_status(db, &root)
+        .await?
+        .premium
+    {
+        return Err(Error::BadRequest(
+            "Creating a fork or dev workspace on the cloud requires a paid team plan. Upgrade the workspace first.".to_string(),
+        ));
+    }
+    Ok(root)
+}
+
+/// Cloud: reject if adding `incoming` fork/dev workspaces would push `root`'s family over its per-seat
+/// allotment. `incoming` is the number of workspaces the operation adds to the family — 1 for a plain
+/// create, but `1 + candidate_subtree` for an attach whose candidate already has child forks.
+#[cfg(feature = "cloud")]
+async fn enforce_cloud_fork_count(db: &DB, root: &str, incoming: i64) -> Result<()> {
+    let seats = windmill_common::workspaces::count_paid_seats(db, root).await?;
+    let per_seat = *MAX_FORKS_PER_SEAT;
+    // Any premium workspace has at least one paid seat, so floor the seat count at 1.
+    let allowed = seats.max(1) * per_seat;
+
+    let existing = windmill_common::workspaces::count_workspace_forks(db, root).await?;
+    let projected = existing + incoming;
+    if projected > allowed {
+        return Err(Error::BadRequest(format!(
+            "Fork limit reached: this would bring the workspace family to {projected} fork(s), over the cap of {allowed} ({seats} paid seat(s) × {per_seat} per seat). Delete a fork or add seats."
+        )));
+    }
+
+    Ok(())
+}
+
+/// Cloud-only guard for creating a fork/dev workspace. Forks piggyback on the parent's plan (a fork
+/// inherits the root's premium and meters its usage into the root's bill), so forking is limited to
+/// premium workspaces and capped at `MAX_FORKS_PER_SEAT` per paid (developer) seat of the root.
+#[cfg(feature = "cloud")]
+async fn enforce_cloud_fork_cap(db: &DB, parent_workspace_id: &str) -> Result<()> {
+    let root = require_cloud_fork_premium(db, parent_workspace_id).await?;
+    enforce_cloud_fork_count(db, &root, 1).await
+}
+
+/// General guardrail (all builds): reject creating a fork/dev under `parent` when it would nest deeper
+/// than `MAX_FORK_DEPTH`. `added_subtree_height` is the height of the subtree grafted below the new
+/// node — 0 for a plain fork, or the candidate's own subtree height for an attach.
+async fn enforce_fork_depth(
+    db: &DB,
+    parent_workspace_id: &str,
+    added_subtree_height: i64,
+) -> Result<()> {
+    let parent_depth =
+        windmill_common::workspaces::fork_chain_depth(db, parent_workspace_id).await?;
+    // The new node sits one level below the parent; its deepest descendant adds the grafted height.
+    let resulting_depth = parent_depth + 1 + added_subtree_height;
+    if resulting_depth > *MAX_FORK_DEPTH {
+        return Err(Error::BadRequest(format!(
+            "Fork depth limit reached: forks can be nested at most {} level(s) deep, but this would create a fork at depth {}. Fork from a workspace closer to the root instead.",
+            *MAX_FORK_DEPTH, resulting_depth
+        )));
+    }
+    Ok(())
+}
+
 async fn create_workspace_fork(
     authed: ApiAuthed,
     Extension(db): Extension<DB>,
     Path(parent_workspace_id): Path<String>,
     Json(nw): Json<CreateWorkspaceFork>,
 ) -> Result<String> {
+    enforce_fork_depth(&db, &parent_workspace_id, 0).await?;
+    #[cfg(feature = "cloud")]
     if *CLOUD_HOSTED {
-        return Err(Error::BadRequest(format!(
-            "Forking workspaces is not available on app.windmill.dev"
-        )));
+        enforce_cloud_fork_cap(&db, &parent_workspace_id).await?;
     }
 
     if nw.is_dev_workspace {
@@ -5347,10 +5436,30 @@ async fn attach_dev_workspace(
 ) -> Result<String> {
     require_admin(authed.is_admin, &authed.username)?;
 
+    // Attaching grafts the candidate (and its own fork subtree) under prod, so enforce the general
+    // depth limit on the deepest resulting node.
+    let candidate_height =
+        windmill_common::workspaces::fork_subtree_height(&db, &req.dev_workspace_id).await?;
+    enforce_fork_depth(&db, &prod_w_id, candidate_height).await?;
+
+    // Attaching reparents a workspace under prod (one dev per prod, admin-gated) and it then draws
+    // prod's plan, so hold it to the same premium requirement as creating a fork. Only enforce the
+    // per-seat count when the attach actually adds a new workspace to the family: re-designating a
+    // workspace already under this root as its dev doesn't increase the descendant count.
+    #[cfg(feature = "cloud")]
     if *CLOUD_HOSTED {
-        return Err(Error::BadRequest(
-            "Dev workspaces are not available on app.windmill.dev".to_string(),
-        ));
+        let root = require_cloud_fork_premium(&db, &prod_w_id).await?;
+        // Only count against the cap when this attach adds workspaces to the family (candidate not
+        // already under this root). The candidate may itself have child forks, so reserve slots for its
+        // whole incoming subtree (the candidate + its descendants), not just one.
+        if windmill_common::workspaces::get_billing_workspace_id(&db, &req.dev_workspace_id).await?
+            != root
+        {
+            let incoming =
+                1 + windmill_common::workspaces::count_workspace_forks(&db, &req.dev_workspace_id)
+                    .await?;
+            enforce_cloud_fork_count(&db, &root, incoming).await?;
+        }
     }
 
     let dev_w_id = req.dev_workspace_id;
@@ -5468,6 +5577,17 @@ async fn attach_dev_workspace(
     // The dev workspace's parent just changed (none -> prod); drop its cached fork->parent mapping
     // so per-workspace job tags route to the prod family immediately rather than after the TTL.
     windmill_queue::tags::invalidate_fork_parent_cache(&dev_w_id);
+    // Same reparent invalidates the billing-workspace mapping so its usage meters to prod at once. The
+    // candidate can bring its own fork subtree, whose descendants had resolved their (now-stale) root
+    // to the candidate's old family; invalidate them too so they meter to prod without waiting out the
+    // 60s TTL. Their immediate fork->parent links don't move, so the tag-routing cache needs no change.
+    #[cfg(feature = "cloud")]
+    {
+        windmill_common::workspaces::invalidate_billing_workspace_cache(&dev_w_id);
+        for id in windmill_common::workspaces::list_fork_descendants(&db, &dev_w_id).await? {
+            windmill_common::workspaces::invalidate_billing_workspace_cache(&id);
+        }
+    }
 
     if req.lock_prod_deploy || req.lock_prod_forking {
         windmill_common::workspaces::invalidate_protection_rules_cache(&prod_w_id);
@@ -6415,6 +6535,17 @@ async fn change_workspace_color(
 }
 
 async fn get_usage(Extension(db): Extension<DB>, Path(w_id): Path<String>) -> Result<String> {
+    // On cloud, a fork's executions meter against its billing root, so report the root's usage here too;
+    // otherwise the free-execs indicator would show the fork's own (often 0) count while enforcement
+    // applies the root's shared quota. Gated on `*CLOUD_HOSTED` (not just the `cloud` feature, which is
+    // compiled into all EE builds): self-hosted doesn't meter usage this way. Off-fork it resolves to
+    // `w_id` itself anyway.
+    #[cfg(feature = "cloud")]
+    let w_id = if *CLOUD_HOSTED {
+        windmill_common::workspaces::get_billing_workspace_id(&db, &w_id).await?
+    } else {
+        w_id
+    };
     let usage = sqlx::query_scalar!(
         "
     SELECT usage.usage FROM usage
@@ -8230,6 +8361,10 @@ struct CloudQuotas {
     apps: QuotaInfo,
     variables: QuotaInfo,
     resources: QuotaInfo,
+    /// Fork/dev workspaces under this workspace's billing root vs the per-seat cap. `limit` is 0 for a
+    /// non-premium root (forking is premium-only). Family-wide: resolves to the billing root, so it
+    /// reads the same whether viewed from the root or one of its forks.
+    forks: QuotaInfo,
 }
 
 async fn get_cloud_quotas(
@@ -8310,12 +8445,32 @@ async fn get_cloud_quotas(
     .await?
     .unwrap_or(0);
 
+    // Fork/dev workspaces vs the per-seat cap, resolved to the billing root. Non-premium roots can't
+    // fork, so their allowance is 0.
+    #[cfg(feature = "cloud")]
+    let forks = {
+        use windmill_common::workspaces::{
+            count_paid_seats, count_workspace_forks, get_billing_workspace_id, get_team_plan_status,
+        };
+        let root = get_billing_workspace_id(&db, &w_id).await?;
+        let used = count_workspace_forks(&db, &root).await?;
+        let limit = if get_team_plan_status(&db, &root).await?.premium {
+            count_paid_seats(&db, &root).await?.max(1) * *MAX_FORKS_PER_SEAT
+        } else {
+            0
+        };
+        QuotaInfo { used, limit, prunable: 0 }
+    };
+    #[cfg(not(feature = "cloud"))]
+    let forks = QuotaInfo { used: 0, limit: 0, prunable: 0 };
+
     Ok(Json(CloudQuotas {
         scripts: QuotaInfo { used: scripts_used, limit: 5000, prunable: scripts_prunable },
         flows: QuotaInfo { used: flows_used, limit: 1000, prunable: flows_prunable },
         apps: QuotaInfo { used: apps_used, limit: 1000, prunable: apps_prunable },
         variables: QuotaInfo { used: variables_used, limit: 10000, prunable: 0 },
         resources: QuotaInfo { used: resources_used, limit: 10000, prunable: 0 },
+        forks,
     }))
 }
 
diff --git a/backend/windmill-api-workspaces/src/workspaces_extra.rs b/backend/windmill-api-workspaces/src/workspaces_extra.rs
index 47d8c24b92..56abe689d5 100644
--- a/backend/windmill-api-workspaces/src/workspaces_extra.rs
+++ b/backend/windmill-api-workspaces/src/workspaces_extra.rs
@@ -726,10 +726,13 @@ pub(crate) async fn change_workspace_id(
     tx.commit().await?;
 
     // The children's parent_workspace_id changed (old root -> new root); invalidate their fork-parent
-    // routing cache so jobs route under the renamed root rather than the old (archived) one until the
-    // 300s TTL would otherwise expire.
+    // routing cache and their billing-workspace mapping so jobs route + meter under the renamed root
+    // rather than the old (archived) one, instead of waiting for the caches' TTLs. Deeper descendants
+    // (fork-of-fork) self-heal via the 60s billing-cache TTL.
     for child in &reparented_children {
         windmill_queue::tags::invalidate_fork_parent_cache(child);
+        #[cfg(feature = "cloud")]
+        windmill_common::workspaces::invalidate_billing_workspace_cache(child);
     }
 
     // Archive old workspace: disable schedules, cancel remaining jobs, set deleted=true
@@ -1017,6 +1020,16 @@ pub(crate) async fn delete_workspace(
     .await?
     .flatten();
 
+    // Capture direct child forks before the delete: the FK is ON DELETE SET NULL, so they're about to
+    // be orphaned (their billing root changes from this workspace's root to themselves). We drop their
+    // cached mappings after commit alongside the deleted id itself.
+    let orphaned_children: Vec<String> = sqlx::query_scalar!(
+        "SELECT id FROM workspace WHERE parent_workspace_id = $1",
+        &w_id
+    )
+    .fetch_all(&mut *tx)
+    .await?;
+
     sqlx::query!("DELETE FROM workspace WHERE id = $1", &w_id)
         .execute(&mut *tx)
         .await?;
@@ -1050,6 +1063,22 @@ pub(crate) async fn delete_workspace(
         windmill_common::workspaces::invalidate_protection_rules_cache(&parent);
     }
 
+    // Workspace ids are reusable after permanent deletion, so drop every cached mapping keyed by the
+    // deleted id (and any just-orphaned children) — otherwise a recreated id could inherit the gone
+    // workspace's state within the caches' lifetimes. This covers fork->parent (tag routing) and
+    // fork->root (billing), plus the premium/team-plan status: TEAM_PLAN_CACHE has no TTL and is only
+    // evicted by the premium-change NOTIFY, so without this a reused id would keep the old workspace's
+    // premium indefinitely (free forks/usage). Deeper (grandchild) descendants self-heal via the 60s
+    // billing TTL.
+    for id in std::iter::once(&w_id).chain(orphaned_children.iter()) {
+        windmill_queue::tags::invalidate_fork_parent_cache(id);
+        #[cfg(feature = "cloud")]
+        {
+            windmill_common::workspaces::invalidate_billing_workspace_cache(id);
+            windmill_common::workspaces::invalidate_team_plan_cache(id);
+        }
+    }
+
     Ok(format!("Deleted workspace {}", &w_id))
 }
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 3b90927901..eec76ea009 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -6221,12 +6221,15 @@ paths:
                     $ref: "#/components/schemas/QuotaInfo"
                   resources:
                     $ref: "#/components/schemas/QuotaInfo"
+                  forks:
+                    $ref: "#/components/schemas/QuotaInfo"
                 required:
                   - scripts
                   - flows
                   - apps
                   - variables
                   - resources
+                  - forks
 
   /w/{workspace}/workspaces/prune_versions:
     post:
diff --git a/backend/windmill-common/src/workspaces.rs b/backend/windmill-common/src/workspaces.rs
index cd3693cd92..5593a565ef 100644
--- a/backend/windmill-common/src/workspaces.rs
+++ b/backend/windmill-common/src/workspaces.rs
@@ -347,9 +347,215 @@ lazy_static::lazy_static! {
     pub static ref PUBLIC_APP_RATE_LIMIT_CACHE: Cache<String, (Option<i32>, i64)> = Cache::new(1000);
 }
 
+#[cfg(feature = "cloud")]
+lazy_static::lazy_static! {
+    // Maps a workspace id to its root (billing) ancestor. Value: (root_id, expiry_timestamp).
+    // Reparenting (attach/detach dev) is rare and self-heals via the 60s TTL, so a brief stale
+    // mapping only mis-attributes usage for <60s across other instances.
+    pub static ref BILLING_WORKSPACE_CACHE: Cache<String, (String, i64)> = Cache::new(5000);
+}
+
+/// Resolve the "billing" workspace for `w_id`: the root ancestor of the fork/dev chain (the
+/// workspace whose plan and usage a fork draws from). Returns `w_id` unchanged for a standalone
+/// workspace, an unknown id, or a (malformed) cyclic chain.
+///
+/// Unauthenticated metering helper: it only reads the parent chain and returns another workspace id,
+/// so callers must already be authorized for `w_id` (or run in trusted server-side code); `w_id` is
+/// expected to be a server-side id, not raw user input.
+#[cfg(feature = "cloud")]
+pub async fn get_billing_workspace_id(db: &crate::DB, w_id: &str) -> Result<String> {
+    let now = chrono::Utc::now().timestamp();
+    if let Some((root, expiry)) = BILLING_WORKSPACE_CACHE.get(w_id) {
+        if expiry > now {
+            return Ok(root);
+        }
+    }
+
+    // The depth bound is a cycle-safety backstop kept well above the enforced `MAX_FORK_DEPTH`, so a
+    // truncated (root-not-found) result — which would fall back to `w_id` and mis-attribute billing —
+    // is unreachable for any real hierarchy; only a malformed cycle could hit it.
+    let root = sqlx::query_scalar!(
+        r#"
+            WITH RECURSIVE chain AS (
+                SELECT id, parent_workspace_id, 0 AS depth
+                FROM workspace WHERE id = $1
+                UNION ALL
+                SELECT w.id, w.parent_workspace_id, chain.depth + 1
+                FROM workspace w
+                JOIN chain ON w.id = chain.parent_workspace_id
+                WHERE chain.depth < 20
+            )
+            SELECT id AS "id!" FROM chain WHERE parent_workspace_id IS NULL LIMIT 1
+        "#,
+        w_id
+    )
+    .fetch_optional(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("resolving billing workspace for {w_id}: {e:#}")))?
+    .unwrap_or_else(|| w_id.to_string());
+
+    BILLING_WORKSPACE_CACHE.insert(w_id.to_string(), (root.clone(), now + 60));
+    Ok(root)
+}
+
+/// Invalidate the billing-workspace mapping for a workspace (call after reparenting it).
+#[cfg(feature = "cloud")]
+pub fn invalidate_billing_workspace_cache(w_id: &str) {
+    BILLING_WORKSPACE_CACHE.remove(w_id);
+}
+
+/// Invalidate the cached team-plan (premium/past-due) status for a workspace. `TEAM_PLAN_CACHE` has
+/// no TTL — it's only evicted by the premium-change NOTIFY — so call this when a workspace id is
+/// permanently deleted, otherwise a reused id could inherit the old workspace's premium status.
+#[cfg(feature = "cloud")]
+pub fn invalidate_team_plan_cache(w_id: &str) {
+    TEAM_PLAN_CACHE.remove(w_id);
+}
+
+/// Depth of `w_id` in its fork chain: 0 for a root (no parent), 1 for a direct fork, and so on. Walks
+/// the parent chain up to the root. The recursion bound is a cycle-safety backstop set well above the
+/// enforced `MAX_FORK_DEPTH`; a (malformed) cyclic chain saturates it and so reads as "too deep",
+/// which safely rejects rather than allows.
+///
+/// Unauthenticated helper: reads workspace hierarchy for any `w_id`, so callers must already be
+/// authorized for that workspace (or run in trusted server-side code).
+pub async fn fork_chain_depth(db: &crate::DB, w_id: &str) -> Result<i64> {
+    let depth = sqlx::query_scalar!(
+        r#"
+            WITH RECURSIVE chain AS (
+                SELECT id, parent_workspace_id, 0 AS depth
+                FROM workspace WHERE id = $1
+                UNION ALL
+                SELECT w.id, w.parent_workspace_id, chain.depth + 1
+                FROM workspace w
+                JOIN chain ON w.id = chain.parent_workspace_id
+                WHERE chain.depth < 20
+            )
+            SELECT COALESCE(MAX(depth), 0)::bigint AS "depth!" FROM chain
+        "#,
+        w_id
+    )
+    .fetch_one(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("computing fork depth for {w_id}: {e:#}")))?;
+    Ok(depth)
+}
+
+/// Height of the fork subtree rooted at `w_id`: 0 when it has no live child forks, 1 with direct
+/// children, and so on. Used so that attaching a candidate which already has its own child forks can't
+/// push the family past the depth limit.
+///
+/// Unauthenticated helper: reads workspace hierarchy for any `w_id`, so callers must already be
+/// authorized for that workspace (or run in trusted server-side code).
+pub async fn fork_subtree_height(db: &crate::DB, w_id: &str) -> Result<i64> {
+    // The `deleted` filter is applied in the outer aggregation (not the recursive step, matching
+    // count_workspace_forks) so a live descendant under a soft-deleted intermediate is still measured
+    // at its true depth rather than pruned — otherwise the height could be underestimated and let the
+    // resulting chain exceed the depth limit.
+    let height = sqlx::query_scalar!(
+        r#"
+            WITH RECURSIVE tree AS (
+                SELECT id, deleted, 0 AS depth FROM workspace WHERE id = $1
+                UNION ALL
+                SELECT w.id, w.deleted, tree.depth + 1 FROM workspace w
+                JOIN tree ON w.parent_workspace_id = tree.id
+                WHERE tree.depth < 20
+            )
+            SELECT COALESCE(MAX(depth) FILTER (WHERE NOT deleted), 0)::bigint AS "height!" FROM tree
+        "#,
+        w_id
+    )
+    .fetch_one(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("computing fork subtree height for {w_id}: {e:#}")))?;
+    Ok(height)
+}
+
+/// Ids of every fork/dev workspace anywhere under `w_id` (excludes `w_id` itself), including live
+/// descendants beneath a soft-deleted intermediate. Used to invalidate per-workspace caches for a
+/// whole subtree after its ancestor is reparented.
+///
+/// Unauthenticated helper: reads workspace hierarchy for any `w_id`, so callers must already be
+/// authorized for that workspace (or run in trusted server-side code).
+pub async fn list_fork_descendants(db: &crate::DB, w_id: &str) -> Result<Vec<String>> {
+    let ids = sqlx::query_scalar!(
+        r#"
+            WITH RECURSIVE tree AS (
+                SELECT id, 0 AS depth FROM workspace WHERE id = $1
+                UNION ALL
+                SELECT w.id, tree.depth + 1 FROM workspace w
+                JOIN tree ON w.parent_workspace_id = tree.id
+                WHERE tree.depth < 20
+            )
+            SELECT id AS "id!" FROM tree WHERE id != $1
+        "#,
+        w_id
+    )
+    .fetch_all(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("listing fork descendants of {w_id}: {e:#}")))?;
+    Ok(ids)
+}
+
+/// Count non-deleted fork/dev workspaces anywhere under `root` (excludes `root` itself).
+///
+/// Unauthenticated metering helper: it reads workspace hierarchy for any `root` id, so callers must
+/// already be authorized for that workspace (or run in trusted server-side code). `root` is expected
+/// to be a server-resolved id, never raw user input.
+#[cfg(feature = "cloud")]
+pub async fn count_workspace_forks(db: &crate::DB, root: &str) -> Result<i64> {
+    // The `deleted` filter is on the outer SELECT (not the recursive step) so that a live sub-fork
+    // whose intermediate parent was soft-deleted is still counted rather than pruned with it. The
+    // depth bound is a cycle-safety backstop kept well above the enforced `MAX_FORK_DEPTH`, so
+    // descendants are never silently dropped from the cap count.
+    let count = sqlx::query_scalar!(
+        r#"
+            WITH RECURSIVE tree AS (
+                SELECT id, deleted, 0 AS depth FROM workspace WHERE id = $1
+                UNION ALL
+                SELECT w.id, w.deleted, tree.depth + 1 FROM workspace w
+                JOIN tree ON w.parent_workspace_id = tree.id
+                WHERE tree.depth < 20
+            )
+            SELECT COUNT(DISTINCT id) AS "count!" FROM tree WHERE id != $1 AND NOT deleted
+        "#,
+        root
+    )
+    .fetch_one(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("counting forks of {root}: {e:#}")))?;
+    Ok(count)
+}
+
+/// Approximate paid seats of a workspace as `ceil(developers + operators/2)`, excluding disabled and
+/// service-account members. Reuses billing's author/operator weighting, but counts provisioned
+/// members rather than the active-user population billing meters, so it only ever loosens the fork
+/// cap (never blocks a paid seat) — good enough for a soft guardrail.
+///
+/// Unauthenticated metering helper: reads member counts for any `w_id`, so callers must already be
+/// authorized for that workspace (or run in trusted server-side code).
+#[cfg(feature = "cloud")]
+pub async fn count_paid_seats(db: &crate::DB, w_id: &str) -> Result<i64> {
+    let row = sqlx::query!(
+        r#"SELECT
+            COUNT(*) FILTER (WHERE NOT operator AND NOT disabled AND NOT is_service_account) AS "developers!",
+            COUNT(*) FILTER (WHERE operator AND NOT disabled AND NOT is_service_account) AS "operators!"
+        FROM usr WHERE workspace_id = $1"#,
+        w_id
+    )
+    .fetch_one(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("counting paid seats of {w_id}: {e:#}")))?;
+    Ok(((row.developers as f64) + 0.5 * (row.operators as f64)).ceil() as i64)
+}
+
 #[cfg(feature = "cloud")]
 pub async fn get_team_plan_status(_db: &crate::DB, _w_id: &str) -> Result<TeamPlanStatus> {
-    let cached = TEAM_PLAN_CACHE.get(_w_id);
+    // A fork/dev workspace draws its plan from the root (billing) workspace. Resolve to the root and
+    // key the cache by it: the premium-change NOTIFY is keyed by the workspace whose premium row
+    // changed (the root), so keying by root keeps invalidation correct and lets forks share it.
+    let billing_w_id = get_billing_workspace_id(_db, _w_id).await?;
+    let cached = TEAM_PLAN_CACHE.get(&billing_w_id);
     if let Some(cached) = cached {
         return Ok(cached);
     }
@@ -368,7 +574,7 @@ pub async fn get_team_plan_status(_db: &crate::DB, _w_id: &str) -> Result<TeamPl
                 WHERE
                     w.id = $1
             "#,
-            _w_id
+            billing_w_id
         )
         .fetch_optional(_db)
         .await
@@ -380,13 +586,13 @@ pub async fn get_team_plan_status(_db: &crate::DB, _w_id: &str) -> Result<TeamPl
     )
     .notify(|err, dur| {
         tracing::error!(
-            "Failed to get team plan status for workspace {_w_id} (will retry in {dur:?}): {err:#}"
+            "Failed to get team plan status for workspace {billing_w_id} (will retry in {dur:?}): {err:#}"
         );
     })
     .await
     .map_err(|err| {
         Error::internal_err(format!(
-            "Failed to get team plan status for workspace {_w_id} after 10 retries: {err:#}"
+            "Failed to get team plan status for workspace {billing_w_id} after 10 retries: {err:#}"
         ))
     })?
     .unwrap_or_else(|| TeamPlanStatus {
@@ -395,7 +601,7 @@ pub async fn get_team_plan_status(_db: &crate::DB, _w_id: &str) -> Result<TeamPl
         max_tolerated_executions: None,
     });
 
-    TEAM_PLAN_CACHE.insert(_w_id.to_string(), team_plan_info.clone());
+    TEAM_PLAN_CACHE.insert(billing_w_id, team_plan_info.clone());
 
     Ok(team_plan_info)
 }
diff --git a/backend/windmill-common/tests/billing_workspace.rs b/backend/windmill-common/tests/billing_workspace.rs
new file mode 100644
index 0000000000..1b0186a5cf
--- /dev/null
+++ b/backend/windmill-common/tests/billing_workspace.rs
@@ -0,0 +1,211 @@
+#![cfg(feature = "cloud")]
+//! Tests for the fork/dev "billing workspace" resolution and the fork-cap seat/count helpers.
+
+use sqlx::{Pool, Postgres};
+use windmill_common::workspaces::{
+    count_paid_seats, count_workspace_forks, fork_chain_depth, fork_subtree_height,
+    get_billing_workspace_id, invalidate_billing_workspace_cache, list_fork_descendants,
+};
+
+async fn insert_ws(db: &Pool<Postgres>, id: &str, parent: Option<&str>, deleted: bool) {
+    sqlx::query(
+        "INSERT INTO workspace (id, name, owner, parent_workspace_id, deleted)
+         VALUES ($1, $1, 'test-user', $2, $3)",
+    )
+    .bind(id)
+    .bind(parent)
+    .bind(deleted)
+    .execute(db)
+    .await
+    .expect("insert workspace");
+    // The resolver caches per id (60s TTL) in a process-global cache shared across tests, so drop
+    // any stale mapping for this id before the test reads it.
+    invalidate_billing_workspace_cache(id);
+}
+
+async fn insert_member(
+    db: &Pool<Postgres>,
+    w_id: &str,
+    email: &str,
+    operator: bool,
+    disabled: bool,
+    is_service_account: bool,
+) {
+    // `usr.username` has a `proper_username` check (no `@`), so derive one from the email prefix.
+    let username = email.split('@').next().unwrap();
+    sqlx::query(
+        "INSERT INTO usr (workspace_id, email, username, is_admin, operator, disabled, is_service_account, role)
+         VALUES ($1, $2, $3, false, $4, $5, $6, 'Developer')",
+    )
+    .bind(w_id)
+    .bind(email)
+    .bind(username)
+    .bind(operator)
+    .bind(disabled)
+    .bind(is_service_account)
+    .execute(db)
+    .await
+    .expect("insert usr");
+}
+
+#[sqlx::test(migrations = "../migrations", fixtures("base"))]
+async fn billing_workspace_resolves_to_root(db: Pool<Postgres>) {
+    insert_ws(&db, "bwt-root", None, false).await;
+    insert_ws(&db, "bwt-fork", Some("bwt-root"), false).await;
+    insert_ws(&db, "bwt-grandchild", Some("bwt-fork"), false).await;
+
+    assert_eq!(
+        get_billing_workspace_id(&db, "bwt-root").await.unwrap(),
+        "bwt-root"
+    );
+    assert_eq!(
+        get_billing_workspace_id(&db, "bwt-fork").await.unwrap(),
+        "bwt-root"
+    );
+    assert_eq!(
+        get_billing_workspace_id(&db, "bwt-grandchild")
+            .await
+            .unwrap(),
+        "bwt-root"
+    );
+    // Unknown / orphaned ids resolve to themselves.
+    assert_eq!(
+        get_billing_workspace_id(&db, "bwt-missing").await.unwrap(),
+        "bwt-missing"
+    );
+}
+
+#[sqlx::test(migrations = "../migrations", fixtures("base"))]
+async fn billing_workspace_survives_cycles(db: Pool<Postgres>) {
+    insert_ws(&db, "bwc-a", None, false).await;
+    insert_ws(&db, "bwc-b", Some("bwc-a"), false).await;
+    // Introduce a cycle a -> b -> a; no row has a NULL parent, so resolution falls back to the input
+    // and the depth guard keeps it from looping forever.
+    sqlx::query("UPDATE workspace SET parent_workspace_id = 'bwc-b' WHERE id = 'bwc-a'")
+        .execute(&db)
+        .await
+        .unwrap();
+    invalidate_billing_workspace_cache("bwc-a");
+    invalidate_billing_workspace_cache("bwc-b");
+
+    assert_eq!(
+        get_billing_workspace_id(&db, "bwc-a").await.unwrap(),
+        "bwc-a"
+    );
+    assert_eq!(
+        get_billing_workspace_id(&db, "bwc-b").await.unwrap(),
+        "bwc-b"
+    );
+}
+
+#[sqlx::test(migrations = "../migrations", fixtures("base"))]
+async fn paid_seats_and_fork_count(db: Pool<Postgres>) {
+    insert_ws(&db, "seat-root", None, false).await;
+    // 2 developers + 2 operators counted -> ceil(2 + 0.5*2) = 3.
+    insert_member(&db, "seat-root", "dev1@w.dev", false, false, false).await;
+    insert_member(&db, "seat-root", "dev2@w.dev", false, false, false).await;
+    insert_member(&db, "seat-root", "op1@w.dev", true, false, false).await;
+    insert_member(&db, "seat-root", "op2@w.dev", true, false, false).await;
+    // These must NOT count towards seats.
+    insert_member(&db, "seat-root", "disabled@w.dev", false, true, false).await;
+    insert_member(&db, "seat-root", "svc@w.dev", false, false, true).await;
+
+    assert_eq!(count_paid_seats(&db, "seat-root").await.unwrap(), 3);
+
+    insert_ws(&db, "seat-fork1", Some("seat-root"), false).await;
+    insert_ws(&db, "seat-fork2", Some("seat-root"), false).await;
+    // A deleted fork itself is not counted...
+    insert_ws(&db, "seat-fork-deleted", Some("seat-root"), true).await;
+    // ...but a live sub-fork under it still is (deleted filter is on the outer SELECT, not the walk).
+    insert_ws(&db, "seat-deleted-child", Some("seat-fork-deleted"), false).await;
+    // A grandchild fork still counts.
+    insert_ws(&db, "seat-fork1-child", Some("seat-fork1"), false).await;
+
+    // Live: fork1, fork2, fork1-child, deleted-child -> 4 (seat-fork-deleted excluded).
+    assert_eq!(count_workspace_forks(&db, "seat-root").await.unwrap(), 4);
+    // A standalone workspace has no forks.
+    assert_eq!(count_workspace_forks(&db, "seat-fork2").await.unwrap(), 0);
+
+    // list_fork_descendants returns every descendant id (deleted included, for cache invalidation):
+    // fork1, fork2, fork-deleted, deleted-child, fork1-child -> 5.
+    let mut descendants = list_fork_descendants(&db, "seat-root").await.unwrap();
+    descendants.sort();
+    assert_eq!(
+        descendants,
+        vec![
+            "seat-deleted-child",
+            "seat-fork-deleted",
+            "seat-fork1",
+            "seat-fork1-child",
+            "seat-fork2",
+        ]
+    );
+    assert!(list_fork_descendants(&db, "seat-fork2")
+        .await
+        .unwrap()
+        .is_empty());
+}
+
+#[sqlx::test(migrations = "../migrations", fixtures("base"))]
+async fn billing_cache_invalidation_reflects_reparent(db: Pool<Postgres>) {
+    insert_ws(&db, "inv-root-a", None, false).await;
+    insert_ws(&db, "inv-root-b", None, false).await;
+    insert_ws(&db, "inv-fork", Some("inv-root-a"), false).await;
+
+    // Resolve + cache: fork -> root-a.
+    assert_eq!(
+        get_billing_workspace_id(&db, "inv-fork").await.unwrap(),
+        "inv-root-a"
+    );
+
+    // Reparent in the DB, as delete+recreate-under-another-root (or attach) would.
+    sqlx::query("UPDATE workspace SET parent_workspace_id = 'inv-root-b' WHERE id = 'inv-fork'")
+        .execute(&db)
+        .await
+        .unwrap();
+
+    // The cached mapping survives until invalidated (this is the staleness the delete/attach/rename
+    // paths must clear).
+    assert_eq!(
+        get_billing_workspace_id(&db, "inv-fork").await.unwrap(),
+        "inv-root-a"
+    );
+
+    // After invalidation (what delete_workspace / attach_dev_workspace / change_workspace_id now call),
+    // it re-resolves to the new root.
+    invalidate_billing_workspace_cache("inv-fork");
+    assert_eq!(
+        get_billing_workspace_id(&db, "inv-fork").await.unwrap(),
+        "inv-root-b"
+    );
+}
+
+#[sqlx::test(migrations = "../migrations", fixtures("base"))]
+async fn fork_depth_and_subtree_height(db: Pool<Postgres>) {
+    // Chain: root -> f1 -> f2 -> f3
+    insert_ws(&db, "fd-root", None, false).await;
+    insert_ws(&db, "fd-f1", Some("fd-root"), false).await;
+    insert_ws(&db, "fd-f2", Some("fd-f1"), false).await;
+    insert_ws(&db, "fd-f3", Some("fd-f2"), false).await;
+
+    // Depth walks up to the root: root = 0, each fork adds one.
+    assert_eq!(fork_chain_depth(&db, "fd-root").await.unwrap(), 0);
+    assert_eq!(fork_chain_depth(&db, "fd-f1").await.unwrap(), 1);
+    assert_eq!(fork_chain_depth(&db, "fd-f3").await.unwrap(), 3);
+    // An unknown id has no chain, so depth 0 (treated as a root by the guard).
+    assert_eq!(fork_chain_depth(&db, "fd-missing").await.unwrap(), 0);
+
+    // Height walks down: the deepest live descendant below the node.
+    assert_eq!(fork_subtree_height(&db, "fd-root").await.unwrap(), 3);
+    assert_eq!(fork_subtree_height(&db, "fd-f2").await.unwrap(), 1);
+    assert_eq!(fork_subtree_height(&db, "fd-f3").await.unwrap(), 0);
+
+    // A deleted leaf doesn't add to the height.
+    insert_ws(&db, "fd-f3-del", Some("fd-f3"), true).await;
+    assert_eq!(fork_subtree_height(&db, "fd-f3").await.unwrap(), 0);
+
+    // ...but a LIVE descendant below a soft-deleted intermediate still counts at its true depth
+    // (the walk traverses through the deleted node; only the aggregation filters deleted).
+    insert_ws(&db, "fd-f3-live-gc", Some("fd-f3-del"), false).await;
+    assert_eq!(fork_subtree_height(&db, "fd-f3").await.unwrap(), 2);
+}
diff --git a/backend/windmill-queue/src/jobs.rs b/backend/windmill-queue/src/jobs.rs
index c92cea9ef3..99f33da3bf 100644
--- a/backend/windmill-queue/src/jobs.rs
+++ b/backend/windmill-queue/src/jobs.rs
@@ -1914,22 +1914,31 @@ fn apply_completed_job_cloud_usage(
         tokio::task::spawn(async move {
             let additional_usage = _duration / 1000;
             let result = tokio::time::timeout(std::time::Duration::from_secs(10), async move {
+                // Fork/dev execution-seconds meter against the root (billing) workspace; resolves to
+                // `w_id` itself off-fork.
+                let billing_w_id =
+                    windmill_common::workspaces::get_billing_workspace_id(&db, &w_id)
+                        .await
+                        .unwrap_or_else(|e| {
+                            tracing::error!("Failed to resolve billing workspace for {w_id}: {e:#}");
+                            w_id.clone()
+                        });
                 // Update workspace usage
                 let workspace_result = sqlx::query!(
                     "INSERT INTO usage (id, is_workspace, month_, usage)
                     VALUES ($1, TRUE, EXTRACT(YEAR FROM current_date) * 12 + EXTRACT(MONTH FROM current_date), $2)
                     ON CONFLICT (id, is_workspace, month_) DO UPDATE SET usage = usage.usage + EXCLUDED.usage",
-                    &w_id,
+                    &billing_w_id,
                     additional_usage as i32
                 )
                 .execute(&db)
                 .await;
 
                 if let Err(e) = workspace_result {
-                    tracing::error!("Failed to update workspace usage for {}: {:#}", w_id, e);
+                    tracing::error!("Failed to update workspace usage for {}: {:#}", billing_w_id, e);
                 }
 
-                match windmill_common::workspaces::get_team_plan_status(&db, &w_id).await {
+                match windmill_common::workspaces::get_team_plan_status(&db, &billing_w_id).await {
                     Ok(team_plan_status) => {
                         // Update user usage for non-premium workspaces
                         if !team_plan_status.premium {
@@ -5124,8 +5133,13 @@ async fn push_inner<'c, 'd>(
 ) -> Result<(Uuid, Transaction<'c, Postgres>), Error> {
     #[cfg(feature = "cloud")]
     if *CLOUD_HOSTED {
+        // A fork/dev workspace draws its plan and usage from the root (billing) workspace, so its
+        // executions are metered against the parent's quota/bill. Resolves to `workspace_id` itself
+        // for a standalone workspace (no behavior change off-fork).
+        let billing_w_id =
+            windmill_common::workspaces::get_billing_workspace_id(db, workspace_id).await?;
         let team_plan_status =
-            windmill_common::workspaces::get_team_plan_status(db, workspace_id).await?;
+            windmill_common::workspaces::get_team_plan_status(db, &billing_w_id).await?;
         // we track only non flow steps
         let (workspace_usage, user_usage) = if !matches!(
             job_payload,
@@ -5134,12 +5148,12 @@ async fn push_inner<'c, 'd>(
             // Check current usage with SELECT (fast, no row locks)
             // Only check user usage for non-premium workspaces
             let (current_workspace_usage, current_user_usage) =
-                check_usage_limits(db, workspace_id, email, !team_plan_status.premium).await?;
+                check_usage_limits(db, &billing_w_id, email, !team_plan_status.premium).await?;
 
             // Spawn async task to update usage counters in the background
             increment_usage_async(
                 db.clone(),
-                workspace_id.to_string(),
+                billing_w_id.clone(),
                 if !team_plan_status.premium {
                     Some(email.to_string())
                 } else {
@@ -5242,7 +5256,7 @@ async fn push_inner<'c, 'd>(
                             WHERE is_workspace IS TRUE AND
                             month_ = EXTRACT(YEAR FROM current_date) * 12 + EXTRACT(MONTH FROM current_date)
                             AND id = $1",
-                            workspace_id
+                            billing_w_id
                         )
                         .fetch_optional(db)
                         .await?
@@ -5269,6 +5283,13 @@ async fn push_inner<'c, 'd>(
                             )));
                         }
 
+                        // These two burst guards intentionally stay keyed to `workspace_id`, not the
+                        // billing root: the shared caps are the monthly usage above (metered to the
+                        // root) and the per-user in-queue/concurrent guards further up (keyed by email,
+                        // global across the whole family). Keying these to the root would count the
+                        // root's own queue rather than this workspace's load or the family's; a true
+                        // family-shared burst cap would need a family-wide subquery, not worth the
+                        // hot-path cost for this downgrade-only soft guard.
                         let in_queue_workspace = sqlx::query_scalar!(
                             "SELECT COUNT(id) FROM v2_job_queue WHERE workspace_id = $1",
                             workspace_id
diff --git a/frontend/src/lib/components/sessions/SessionForkBar.svelte b/frontend/src/lib/components/sessions/SessionForkBar.svelte
index 982dc68c0f..a0aafee456 100644
--- a/frontend/src/lib/components/sessions/SessionForkBar.svelte
+++ b/frontend/src/lib/components/sessions/SessionForkBar.svelte
@@ -11,7 +11,7 @@
 	} from 'lucide-svelte'
 	import { Button } from '$lib/components/common'
 	import WorkspaceFamilyPicker from './WorkspaceFamilyPicker.svelte'
-	import { userStore, userWorkspaces, workspaceStore } from '$lib/stores'
+	import { isPremiumStore, userStore, userWorkspaces, workspaceStore } from '$lib/stores'
 	import { goto } from '$lib/navigation'
 	import { canCreateFork } from '$lib/utils/editInFork'
 	import { isCloudHosted } from '$lib/cloud'
@@ -52,9 +52,12 @@
 	const isFork = $derived(!!parentWorkspaceId)
 
 	// Same gate as the sidebar WorkspaceMenu / SessionWorkspaceBar.
-	// When forking isn't available the diff/review surface is moot.
+	// When forking isn't available the diff/review surface is moot. On cloud, forking is a
+	// premium-only feature (backend caps it per paid seat).
 	const forksAllowed = $derived(
-		!isCloudHosted() && canCreateFork($userStore) && $workspaceStore !== 'admins'
+		(!isCloudHosted() || $isPremiumStore) &&
+			canCreateFork($userStore) &&
+			$workspaceStore !== 'admins'
 	)
 
 	let diffDrawer: ForkDiffDrawer | undefined = $state(undefined)
diff --git a/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte b/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte
index 6987730b87..91a5922871 100644
--- a/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte
+++ b/frontend/src/lib/components/sessions/WorkspaceFamilyPicker.svelte
@@ -2,6 +2,7 @@
 	import { tick, type Snippet } from 'svelte'
 	import {
 		enterpriseLicense,
+		isPremiumStore,
 		userStore,
 		userWorkspaces,
 		workspaceStore,
@@ -114,12 +115,14 @@
 		rootRulesetsResource.loading || rootUserInfoResource.loading || !canDeployRoot
 	)
 
-	// Structural gate: hidden on cloud, in the admins workspace, or when the user
-	// can't fork. DisableWorkspaceForking on the active workspace (a locked prod)
-	// doesn't apply when there's a dev to fork from instead — the dev isn't
-	// locked, and devOfRoot only resolves when the user is a member of it.
+	// Structural gate: hidden in the admins workspace, or when the user can't fork; on cloud, forking
+	// is premium-only (backend caps it per paid seat). DisableWorkspaceForking on the active workspace
+	// (a locked prod) doesn't apply when there's a dev to fork from instead — the dev isn't locked, and
+	// devOfRoot only resolves when the user is a member of it.
 	const forksGateOpen = $derived(
-		!isCloudHosted() && $workspaceStore !== 'admins' && (canCreateFork($userStore) || !!devOfRoot)
+		(!isCloudHosted() || $isPremiumStore) &&
+			$workspaceStore !== 'admins' &&
+			(canCreateFork($userStore) || !!devOfRoot)
 	)
 	// A fork is a new workspace, so it's subject to the community-edition cap on
 	// the number of non-'admins' workspaces (backend _check_nb_of_workspaces,
diff --git a/frontend/src/lib/components/settings/CloudQuotas.svelte b/frontend/src/lib/components/settings/CloudQuotas.svelte
index 61158f13ec..ec597101ee 100644
--- a/frontend/src/lib/components/settings/CloudQuotas.svelte
+++ b/frontend/src/lib/components/settings/CloudQuotas.svelte
@@ -18,6 +18,7 @@
 				apps: QuotaInfo
 				variables: QuotaInfo
 				resources: QuotaInfo
+				forks: QuotaInfo
 		  }
 		| undefined = $state(undefined)
 
@@ -87,7 +88,8 @@
 		{ label: 'Flows', key: 'flows', prunable: true },
 		{ label: 'Apps', key: 'apps', prunable: true },
 		{ label: 'Variables', key: 'variables', prunable: false },
-		{ label: 'Resources', key: 'resources', prunable: false }
+		{ label: 'Resources', key: 'resources', prunable: false },
+		{ label: 'Forks', key: 'forks', prunable: false }
 	]
 </script>
 
diff --git a/frontend/src/lib/components/sidebar/WorkspaceMenu.svelte b/frontend/src/lib/components/sidebar/WorkspaceMenu.svelte
index 71e5636512..53ac410cc8 100644
--- a/frontend/src/lib/components/sidebar/WorkspaceMenu.svelte
+++ b/frontend/src/lib/components/sidebar/WorkspaceMenu.svelte
@@ -217,7 +217,7 @@
 					</MenuItem>
 				</div>
 			{/if}
-			{#if !strictWorkspaceSelect && !isCloudHosted() && canCreateFork($userStore) && $workspaceStore !== 'admins'}
+			{#if !strictWorkspaceSelect && (!isCloudHosted() || $isPremiumStore) && canCreateFork($userStore) && $workspaceStore !== 'admins'}
 				<div class="py-1" role="none">
 					<MenuItem
 						class={itemClass}
diff --git a/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte b/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte
index b20edba025..2012870d3a 100644
--- a/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte
+++ b/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte
@@ -228,20 +228,31 @@
 	}
 
 	async function completeFork(prefixed_id: string): Promise<void> {
-		let gitSyncJobIds = await WorkspaceService.createWorkspaceForkGitBranch({
-			workspace: $workspaceStore!,
-			requestBody: {
-				id: prefixed_id,
-				name,
-				color: colorEnabled && workspaceColor ? workspaceColor : undefined,
-				is_dev_workspace: createAsDevWorkspace,
-				// Send the lock intent in this first phase too so the backend can reject a non-admin's
-				// locked-dev request before any branch is created (avoids dangling branches).
-				lock_prod_deploy: createAsDevWorkspace && lockProdDeploy,
-				lock_prod_forking: createAsDevWorkspace && lockProdForking,
-				copy_members: copyMembers
-			}
-		})
+		let gitSyncJobIds: string[]
+		try {
+			gitSyncJobIds = await WorkspaceService.createWorkspaceForkGitBranch({
+				workspace: $workspaceStore!,
+				requestBody: {
+					id: prefixed_id,
+					name,
+					color: colorEnabled && workspaceColor ? workspaceColor : undefined,
+					is_dev_workspace: createAsDevWorkspace,
+					// Send the lock intent in this first phase too so the backend can reject a non-admin's
+					// locked-dev request before any branch is created (avoids dangling branches).
+					lock_prod_deploy: createAsDevWorkspace && lockProdDeploy,
+					lock_prod_forking: createAsDevWorkspace && lockProdForking,
+					copy_members: copyMembers
+				}
+			})
+		} catch (e) {
+			// The backend can reject here (fork cap, depth limit, premium, non-admin lock). Reset the
+			// loading state and surface the error rather than leaving the button spinning.
+			forkCreationError = `Failed to create fork '${prefixed_id}'`
+			errorMsgs.push(e?.body ?? e ?? 'Unknown error')
+			forkCreationLoading = false
+			sendUserToast(`Could not create fork '${prefixed_id}' ${e?.body ?? e}`, true)
+			return
+		}
 
 		try {
 			await Promise.all(
diff --git a/frontend/src/routes/(root)/(logged)/+layout.svelte b/frontend/src/routes/(root)/(logged)/+layout.svelte
index e91ad87583..030cf67fd0 100644
--- a/frontend/src/routes/(root)/(logged)/+layout.svelte
+++ b/frontend/src/routes/(root)/(logged)/+layout.svelte
@@ -147,8 +147,15 @@
 			} catch (e) {
 				console.error('Could not persist username to local storage', e)
 			}
-			if (isCloudHosted() && user?.is_admin) {
-				isPremiumStore.set(await WorkspaceService.getIsPremium({ workspace }))
+			// Populate for all members (not just admins) so non-admin developers also get premium-gated
+			// affordances like the fork entry points on cloud. The `is_premium` endpoint is a boolean
+			// and no longer admin-gated. Best-effort: a failure here must not block user-store init.
+			if (isCloudHosted()) {
+				try {
+					isPremiumStore.set(await WorkspaceService.getIsPremium({ workspace }))
+				} catch (e) {
+					console.error('Could not fetch premium status', e)
+				}
 			}
 		} else {
 			userStore.set(undefined)
diff --git a/frontend/src/routes/(root)/(logged)/workspace_settings/+page.svelte b/frontend/src/routes/(root)/(logged)/workspace_settings/+page.svelte
index 8fbec8f204..94628c8b17 100644
--- a/frontend/src/routes/(root)/(logged)/workspace_settings/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/workspace_settings/+page.svelte
@@ -1377,7 +1377,16 @@
 							/>
 							<WorkspaceRulesets />
 						{:else if tab == 'premium'}
-							<PremiumInfo {customer_id} {plan} />
+							{#if currentWsForDevTab?.parent_workspace_id}
+								<Alert type="info" title="Billing is managed on the parent workspace">
+									This workspace is a fork of <b>{currentWsForDevTab.parent_workspace_id}</b>. It
+									runs on the parent's plan and its executions count toward the parent's usage and
+									bill, so there is no separate subscription here. Manage billing, seats, and quotas
+									from the parent workspace's settings.
+								</Alert>
+							{:else}
+								<PremiumInfo {customer_id} {plan} />
+							{/if}
 						{:else if tab == 'slack'}
 							<SettingsPageHeader
 								title="Workspace connections to Slack and Teams"

From af01e90b5c65d1b1cfacf4433f8cff7effe73768 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 22:57:19 +0000
Subject: [PATCH 25/76] feat(s3): replace CE 50MB upload cap with 10GiB
 workspace storage quota (#9874)

* fix(s3_proxy): enforce CE 50MB upload cap on multipart uploads

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(s3): replace CE 50MB upload cap with 10GiB workspace storage quota

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): gate CE quota OSS stubs to not(enterprise) to match callers

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): delta-aware CE storage quota + guard usage-load retry loop

Account for the overwritten object's size in the quota check so valid
same-size overwrites near quota are not rejected (Codex review), and stop the
storage-usage $effect from re-firing on persistent API errors (Pi review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): count chunked PUTs; revert overreaching volume quota copy

Volumes write to workspace storage via a separate worker-side path with its own
50MB-per-file cap that this PR does not change, so revert the drawer copy that
claimed they count toward the 10GiB quota (Codex review). Bump ee-repo-ref for
the chunked-PUT accounting fix.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): add SQLx cache for CE usage-bump/quota queries; exclude volumes

Regenerate the missing offline SQLx cache for the not(enterprise) bump and
remaining-quota queries so the private CE offline build compiles, and bump
ee-repo-ref for the volumes/-prefix exclusion from the counted quota (Codex
review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): always HEAD for CE upload delta so overwrites don't inflate usage

Bump ee-repo-ref for the fast-path overwrite-accounting fix (Codex review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): reserve volumes/ prefix on CE write surfaces to close quota bypass

Reject direct writes to the reserved volume prefix on the app-upload surface and
add the OSS stub; bump ee-repo-ref (Codex review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): refuse new multipart work when CE workspace is at quota

Bump ee-repo-ref for the multipart-initiate/part quota gate (Codex review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(s3): reserve in-flight multipart bytes against CE storage quota

Add workspace_multipart_inflight table + grants, SQLx cache for the reservation
queries, and bump ee-repo-ref. Bounds abandoned multipart uploads that the
list-based recount can't see (Codex review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): clear multipart reservation only after a successful complete

Add exclude-upload arg to the OSS quota stub/caller and the SQLx cache for the
updated remaining-quota query; bump ee-repo-ref (Codex review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(s3): per-part multipart reservation; commit only on part success

Per-part workspace_multipart_inflight schema (upload_id, part_id) so retries
replace rather than double-count; SQLx cache for the reworked queries; bump
ee-repo-ref (Codex review).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* perf(s3): HEAD the multipart overwrite target once per upload, not per part

SQLx cache for the stored-credit lookup; bump ee-repo-ref.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to bea5a8b5120d6d69cab1ad4611ebe463559bd200

This commit updates the EE repository reference after PR #640 was merged in windmill-ee-private.

Previous ee-repo-ref: 6e6ff86f1939cf74736b7d435bf6851416437523

New ee-repo-ref: bea5a8b5120d6d69cab1ad4611ebe463559bd200

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 ...464b5ff9f34e43fbcc38154939461aadfca9f.json |  18 +++
 ...5a055b6972eb00e4dc1818f7a68bcf04c1ba7.json |  23 ++++
 ...e0d5d1c3769d095352002daf8c11d10eac57b.json |  30 +++++
 ...1bdb31f26e82fb0dc97bef7114d85959b6129.json |  35 ++++++
 ...1cd50b297f80e5392715f54f32fab4bf346fc.json |  22 ++++
 ...ebbe13e6298749b19570f9f8c4a0c7958b0ce.json |  36 ++++++
 ...03ff9c96d613fb2d9b698361f4ede8031e5d2.json |  15 +++
 ...01d9c16a9d4b5b422159fc239ff5502a7b71f.json |  15 +++
 ...aaff40a634fc5530e202f65fad6a241f2671a.json |  19 +++
 ...ed3e9625f54cd89cfd595665e4473c5f3ea6c.json |  37 ++++++
 ...b610b028e88d5d2dbbea44377bf9dc416cd03.json |  22 ++++
 ...5274749d7a436a753813da098758514a7493d.json |  22 ++++
 ...6fea272ac289fc17ea9fc5aa237f77778b58f.json |  29 +++++
 ...48af40192832c07c1c7049def3a80057bb683.json |  28 +++++
 ...0ebf972bcc7f821fbf1e0171266efd8d46616.json |  16 +++
 ...2d8ced2d4a75eef905cb40cb5be6eb8bd5e2b.json |  34 +++++
 ...406d1773657c62d67e55dac666f9469d50e6a.json |  15 +++
 ...e7c80dd0ef92d78224792bec4c3323e14023c.json |  36 ++++++
 ...05b693965f1bca6fef7418b19f98671c9204c.json |  16 +++
 backend/ee-repo-ref.txt                       |   2 +-
 ...702064737_workspace_storage_usage.down.sql |   1 +
 ...60702064737_workspace_storage_usage.up.sql |  17 +++
 ...3513_workspace_multipart_inflight.down.sql |   1 +
 ...213513_workspace_multipart_inflight.up.sql |  32 +++++
 backend/windmill-api/openapi.yaml             |  49 ++++++++
 backend/windmill-api/src/apps.rs              |  49 +++++++-
 backend/windmill-api/src/args.rs              |  38 +++++-
 backend/windmill-api/src/job_helpers_oss.rs   |  70 ++++++++++-
 .../workspaceSettings/StorageSettings.svelte  | 119 ++++++++++++++++--
 29 files changed, 833 insertions(+), 13 deletions(-)
 create mode 100644 backend/.sqlx/query-1b05728b33decc39766ccacca50464b5ff9f34e43fbcc38154939461aadfca9f.json
 create mode 100644 backend/.sqlx/query-3571fb1e1aee51850d5789e28025a055b6972eb00e4dc1818f7a68bcf04c1ba7.json
 create mode 100644 backend/.sqlx/query-3a20f8f159b7185940639716b2ae0d5d1c3769d095352002daf8c11d10eac57b.json
 create mode 100644 backend/.sqlx/query-3d4b21ca3f6dce2141b0a943d3b1bdb31f26e82fb0dc97bef7114d85959b6129.json
 create mode 100644 backend/.sqlx/query-472d351f0bba2dc3404d83aec131cd50b297f80e5392715f54f32fab4bf346fc.json
 create mode 100644 backend/.sqlx/query-59c1137f718d442c4e99fc07365ebbe13e6298749b19570f9f8c4a0c7958b0ce.json
 create mode 100644 backend/.sqlx/query-5cd47ddc6a0181c8e23998adae103ff9c96d613fb2d9b698361f4ede8031e5d2.json
 create mode 100644 backend/.sqlx/query-854c2e57362df2b6907082c660f01d9c16a9d4b5b422159fc239ff5502a7b71f.json
 create mode 100644 backend/.sqlx/query-93d95d25c6b2398faa416646f5daaff40a634fc5530e202f65fad6a241f2671a.json
 create mode 100644 backend/.sqlx/query-954ead4f28726b31e2cafbe04d3ed3e9625f54cd89cfd595665e4473c5f3ea6c.json
 create mode 100644 backend/.sqlx/query-a488e5a6492562bbc5fa86ab348b610b028e88d5d2dbbea44377bf9dc416cd03.json
 create mode 100644 backend/.sqlx/query-a7017ba623279e614ef31a3026c5274749d7a436a753813da098758514a7493d.json
 create mode 100644 backend/.sqlx/query-a8019c47b15baa9497ae44935456fea272ac289fc17ea9fc5aa237f77778b58f.json
 create mode 100644 backend/.sqlx/query-ab0dca3f021243d71222643165548af40192832c07c1c7049def3a80057bb683.json
 create mode 100644 backend/.sqlx/query-bb8318ddc8e2235dce5c832ff2b0ebf972bcc7f821fbf1e0171266efd8d46616.json
 create mode 100644 backend/.sqlx/query-ccff2c556f1171bd10b09b1aa1d2d8ced2d4a75eef905cb40cb5be6eb8bd5e2b.json
 create mode 100644 backend/.sqlx/query-d38e25120ec7bfcbd210d967ef2406d1773657c62d67e55dac666f9469d50e6a.json
 create mode 100644 backend/.sqlx/query-d4923137cf9b6bf06e0e21ba907e7c80dd0ef92d78224792bec4c3323e14023c.json
 create mode 100644 backend/.sqlx/query-e82d854f3f8736a9ba7e2604ac505b693965f1bca6fef7418b19f98671c9204c.json
 create mode 100644 backend/migrations/20260702064737_workspace_storage_usage.down.sql
 create mode 100644 backend/migrations/20260702064737_workspace_storage_usage.up.sql
 create mode 100644 backend/migrations/20260702213513_workspace_multipart_inflight.down.sql
 create mode 100644 backend/migrations/20260702213513_workspace_multipart_inflight.up.sql

diff --git a/backend/.sqlx/query-1b05728b33decc39766ccacca50464b5ff9f34e43fbcc38154939461aadfca9f.json b/backend/.sqlx/query-1b05728b33decc39766ccacca50464b5ff9f34e43fbcc38154939461aadfca9f.json
new file mode 100644
index 0000000000..708922a0cb
--- /dev/null
+++ b/backend/.sqlx/query-1b05728b33decc39766ccacca50464b5ff9f34e43fbcc38154939461aadfca9f.json
@@ -0,0 +1,18 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO workspace_multipart_inflight\n           (workspace_id, upload_id, storage, inflight_bytes, target_existing_size)\n         VALUES ($1, $2, $3, $4, $5)\n         ON CONFLICT (workspace_id, upload_id)\n         DO UPDATE SET inflight_bytes = $4",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Int8",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "1b05728b33decc39766ccacca50464b5ff9f34e43fbcc38154939461aadfca9f"
+}
diff --git a/backend/.sqlx/query-3571fb1e1aee51850d5789e28025a055b6972eb00e4dc1818f7a68bcf04c1ba7.json b/backend/.sqlx/query-3571fb1e1aee51850d5789e28025a055b6972eb00e4dc1818f7a68bcf04c1ba7.json
new file mode 100644
index 0000000000..16063b9a3f
--- /dev/null
+++ b/backend/.sqlx/query-3571fb1e1aee51850d5789e28025a055b6972eb00e4dc1818f7a68bcf04c1ba7.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT target_existing_size FROM workspace_multipart_inflight\n         WHERE workspace_id = $1 AND upload_id = $2 LIMIT 1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "target_existing_size",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "3571fb1e1aee51850d5789e28025a055b6972eb00e4dc1818f7a68bcf04c1ba7"
+}
diff --git a/backend/.sqlx/query-3a20f8f159b7185940639716b2ae0d5d1c3769d095352002daf8c11d10eac57b.json b/backend/.sqlx/query-3a20f8f159b7185940639716b2ae0d5d1c3769d095352002daf8c11d10eac57b.json
new file mode 100644
index 0000000000..291dc00310
--- /dev/null
+++ b/backend/.sqlx/query-3a20f8f159b7185940639716b2ae0d5d1c3769d095352002daf8c11d10eac57b.json
@@ -0,0 +1,30 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n             (SELECT COALESCE(SUM(bytes), 0) FROM workspace_storage_usage WHERE workspace_id = $1)::bigint as \"committed!\",\n             (SELECT COALESCE(SUM(GREATEST(inflight_bytes - target_existing_size, 0)), 0)\n                FROM workspace_multipart_inflight\n                WHERE workspace_id = $1 AND upload_id <> $2 AND created_at > now() - ($3::text)::interval)::bigint as \"other_reserved!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "committed!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "other_reserved!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null
+    ]
+  },
+  "hash": "3a20f8f159b7185940639716b2ae0d5d1c3769d095352002daf8c11d10eac57b"
+}
diff --git a/backend/.sqlx/query-3d4b21ca3f6dce2141b0a943d3b1bdb31f26e82fb0dc97bef7114d85959b6129.json b/backend/.sqlx/query-3d4b21ca3f6dce2141b0a943d3b1bdb31f26e82fb0dc97bef7114d85959b6129.json
new file mode 100644
index 0000000000..137af7638b
--- /dev/null
+++ b/backend/.sqlx/query-3d4b21ca3f6dce2141b0a943d3b1bdb31f26e82fb0dc97bef7114d85959b6129.json
@@ -0,0 +1,35 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n             (SELECT COALESCE(SUM(bytes), 0) FROM workspace_storage_usage WHERE workspace_id = $1)::bigint as \"committed!\",\n             COALESCE(\n               (SELECT MIN(computed_at) FROM workspace_storage_usage WHERE workspace_id = $1) < now() - interval '10 minutes',\n               true) as \"stale!\",\n             (SELECT COALESCE(SUM(GREATEST(inflight_bytes - target_existing_size, 0)), 0)\n                FROM workspace_multipart_inflight\n                WHERE workspace_id = $1 AND created_at > now() - ($2::text)::interval)::bigint as \"reserved!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "committed!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "stale!",
+        "type_info": "Bool"
+      },
+      {
+        "ordinal": 2,
+        "name": "reserved!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null,
+      null
+    ]
+  },
+  "hash": "3d4b21ca3f6dce2141b0a943d3b1bdb31f26e82fb0dc97bef7114d85959b6129"
+}
diff --git a/backend/.sqlx/query-472d351f0bba2dc3404d83aec131cd50b297f80e5392715f54f32fab4bf346fc.json b/backend/.sqlx/query-472d351f0bba2dc3404d83aec131cd50b297f80e5392715f54f32fab4bf346fc.json
new file mode 100644
index 0000000000..18af751ca0
--- /dev/null
+++ b/backend/.sqlx/query-472d351f0bba2dc3404d83aec131cd50b297f80e5392715f54f32fab4bf346fc.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT pg_advisory_xact_lock(hashtext('workspace_multipart_inflight'), hashtext($1))",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "pg_advisory_xact_lock",
+        "type_info": "Void"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "472d351f0bba2dc3404d83aec131cd50b297f80e5392715f54f32fab4bf346fc"
+}
diff --git a/backend/.sqlx/query-59c1137f718d442c4e99fc07365ebbe13e6298749b19570f9f8c4a0c7958b0ce.json b/backend/.sqlx/query-59c1137f718d442c4e99fc07365ebbe13e6298749b19570f9f8c4a0c7958b0ce.json
new file mode 100644
index 0000000000..cd2dd23319
--- /dev/null
+++ b/backend/.sqlx/query-59c1137f718d442c4e99fc07365ebbe13e6298749b19570f9f8c4a0c7958b0ce.json
@@ -0,0 +1,36 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n             (SELECT COALESCE(SUM(bytes), 0) FROM workspace_storage_usage WHERE workspace_id = $1)::bigint as \"committed!\",\n             COALESCE(\n               (SELECT MIN(computed_at) FROM workspace_storage_usage WHERE workspace_id = $1) < now() - interval '10 minutes',\n               true) as \"stale!\",\n             (SELECT COALESCE(SUM(GREATEST(inflight_bytes - target_existing_size, 0)), 0)\n                FROM workspace_multipart_inflight\n                WHERE workspace_id = $1 AND created_at > now() - ($2::text)::interval\n                  AND ($3::text IS NULL OR upload_id <> $3))::bigint as \"reserved!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "committed!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "stale!",
+        "type_info": "Bool"
+      },
+      {
+        "ordinal": 2,
+        "name": "reserved!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null,
+      null
+    ]
+  },
+  "hash": "59c1137f718d442c4e99fc07365ebbe13e6298749b19570f9f8c4a0c7958b0ce"
+}
diff --git a/backend/.sqlx/query-5cd47ddc6a0181c8e23998adae103ff9c96d613fb2d9b698361f4ede8031e5d2.json b/backend/.sqlx/query-5cd47ddc6a0181c8e23998adae103ff9c96d613fb2d9b698361f4ede8031e5d2.json
new file mode 100644
index 0000000000..be54b4a25d
--- /dev/null
+++ b/backend/.sqlx/query-5cd47ddc6a0181c8e23998adae103ff9c96d613fb2d9b698361f4ede8031e5d2.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM workspace_multipart_inflight WHERE workspace_id = $1 AND upload_id = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "5cd47ddc6a0181c8e23998adae103ff9c96d613fb2d9b698361f4ede8031e5d2"
+}
diff --git a/backend/.sqlx/query-854c2e57362df2b6907082c660f01d9c16a9d4b5b422159fc239ff5502a7b71f.json b/backend/.sqlx/query-854c2e57362df2b6907082c660f01d9c16a9d4b5b422159fc239ff5502a7b71f.json
new file mode 100644
index 0000000000..7250aff598
--- /dev/null
+++ b/backend/.sqlx/query-854c2e57362df2b6907082c660f01d9c16a9d4b5b422159fc239ff5502a7b71f.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM workspace_multipart_inflight\n         WHERE workspace_id = $1 AND created_at < now() - ($2::text)::interval",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "854c2e57362df2b6907082c660f01d9c16a9d4b5b422159fc239ff5502a7b71f"
+}
diff --git a/backend/.sqlx/query-93d95d25c6b2398faa416646f5daaff40a634fc5530e202f65fad6a241f2671a.json b/backend/.sqlx/query-93d95d25c6b2398faa416646f5daaff40a634fc5530e202f65fad6a241f2671a.json
new file mode 100644
index 0000000000..c0207b6bc7
--- /dev/null
+++ b/backend/.sqlx/query-93d95d25c6b2398faa416646f5daaff40a634fc5530e202f65fad6a241f2671a.json
@@ -0,0 +1,19 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO workspace_multipart_inflight\n           (workspace_id, upload_id, part_id, storage, part_bytes, target_existing_size)\n         VALUES ($1, $2, $3, $4, $5, $6)\n         ON CONFLICT (workspace_id, upload_id, part_id)\n         DO UPDATE SET part_bytes = $5",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Int8",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "93d95d25c6b2398faa416646f5daaff40a634fc5530e202f65fad6a241f2671a"
+}
diff --git a/backend/.sqlx/query-954ead4f28726b31e2cafbe04d3ed3e9625f54cd89cfd595665e4473c5f3ea6c.json b/backend/.sqlx/query-954ead4f28726b31e2cafbe04d3ed3e9625f54cd89cfd595665e4473c5f3ea6c.json
new file mode 100644
index 0000000000..253fe79753
--- /dev/null
+++ b/backend/.sqlx/query-954ead4f28726b31e2cafbe04d3ed3e9625f54cd89cfd595665e4473c5f3ea6c.json
@@ -0,0 +1,37 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n             (SELECT COALESCE(SUM(bytes), 0) FROM workspace_storage_usage WHERE workspace_id = $1)::bigint as \"committed!\",\n             -- reservation of every OTHER in-flight upload\n             (SELECT COALESCE(SUM(GREATEST(t.total - t.existing, 0)), 0)\n                FROM (SELECT SUM(part_bytes) as total, MAX(target_existing_size) as existing\n                        FROM workspace_multipart_inflight\n                        WHERE workspace_id = $1 AND upload_id <> $2\n                          AND created_at > now() - ($4::text)::interval\n                        GROUP BY upload_id) t)::bigint as \"other_reserved!\",\n             -- this upload's already-recorded parts, excluding the part being (re)uploaded\n             (SELECT COALESCE(SUM(part_bytes), 0)\n                FROM workspace_multipart_inflight\n                WHERE workspace_id = $1 AND upload_id = $2 AND part_id <> $3)::bigint as \"this_other_parts!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "committed!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "other_reserved!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "this_other_parts!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null,
+      null
+    ]
+  },
+  "hash": "954ead4f28726b31e2cafbe04d3ed3e9625f54cd89cfd595665e4473c5f3ea6c"
+}
diff --git a/backend/.sqlx/query-a488e5a6492562bbc5fa86ab348b610b028e88d5d2dbbea44377bf9dc416cd03.json b/backend/.sqlx/query-a488e5a6492562bbc5fa86ab348b610b028e88d5d2dbbea44377bf9dc416cd03.json
new file mode 100644
index 0000000000..0c3fdb8d0a
--- /dev/null
+++ b/backend/.sqlx/query-a488e5a6492562bbc5fa86ab348b610b028e88d5d2dbbea44377bf9dc416cd03.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT pg_try_advisory_xact_lock(hashtext('workspace_storage_usage'), hashtext($1))",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "pg_try_advisory_xact_lock",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "a488e5a6492562bbc5fa86ab348b610b028e88d5d2dbbea44377bf9dc416cd03"
+}
diff --git a/backend/.sqlx/query-a7017ba623279e614ef31a3026c5274749d7a436a753813da098758514a7493d.json b/backend/.sqlx/query-a7017ba623279e614ef31a3026c5274749d7a436a753813da098758514a7493d.json
new file mode 100644
index 0000000000..691016a610
--- /dev/null
+++ b/backend/.sqlx/query-a7017ba623279e614ef31a3026c5274749d7a436a753813da098758514a7493d.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT jsonb_object_keys(large_file_storage->'secondary_storage') as \"key!\"\n               FROM workspace_settings WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "key!",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "a7017ba623279e614ef31a3026c5274749d7a436a753813da098758514a7493d"
+}
diff --git a/backend/.sqlx/query-a8019c47b15baa9497ae44935456fea272ac289fc17ea9fc5aa237f77778b58f.json b/backend/.sqlx/query-a8019c47b15baa9497ae44935456fea272ac289fc17ea9fc5aa237f77778b58f.json
new file mode 100644
index 0000000000..0f1bcc2271
--- /dev/null
+++ b/backend/.sqlx/query-a8019c47b15baa9497ae44935456fea272ac289fc17ea9fc5aa237f77778b58f.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT inflight_bytes, target_existing_size FROM workspace_multipart_inflight\n         WHERE workspace_id = $1 AND upload_id = $2",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "inflight_bytes",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "target_existing_size",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "a8019c47b15baa9497ae44935456fea272ac289fc17ea9fc5aa237f77778b58f"
+}
diff --git a/backend/.sqlx/query-ab0dca3f021243d71222643165548af40192832c07c1c7049def3a80057bb683.json b/backend/.sqlx/query-ab0dca3f021243d71222643165548af40192832c07c1c7049def3a80057bb683.json
new file mode 100644
index 0000000000..1148679230
--- /dev/null
+++ b/backend/.sqlx/query-ab0dca3f021243d71222643165548af40192832c07c1c7049def3a80057bb683.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT COALESCE(SUM(bytes), 0)::bigint as \"total!\",\n                  COALESCE(MIN(computed_at) < now() - interval '10 minutes', true) as \"stale!\"\n           FROM workspace_storage_usage WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "total!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "stale!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null
+    ]
+  },
+  "hash": "ab0dca3f021243d71222643165548af40192832c07c1c7049def3a80057bb683"
+}
diff --git a/backend/.sqlx/query-bb8318ddc8e2235dce5c832ff2b0ebf972bcc7f821fbf1e0171266efd8d46616.json b/backend/.sqlx/query-bb8318ddc8e2235dce5c832ff2b0ebf972bcc7f821fbf1e0171266efd8d46616.json
new file mode 100644
index 0000000000..96608e1bc2
--- /dev/null
+++ b/backend/.sqlx/query-bb8318ddc8e2235dce5c832ff2b0ebf972bcc7f821fbf1e0171266efd8d46616.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO workspace_storage_usage (workspace_id, storage, bytes, computed_at)\n         VALUES ($1, $2, GREATEST($3::bigint, 0), to_timestamp(0))\n         ON CONFLICT (workspace_id, storage)\n         DO UPDATE SET bytes = GREATEST(workspace_storage_usage.bytes + $3::bigint, 0)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "bb8318ddc8e2235dce5c832ff2b0ebf972bcc7f821fbf1e0171266efd8d46616"
+}
diff --git a/backend/.sqlx/query-ccff2c556f1171bd10b09b1aa1d2d8ced2d4a75eef905cb40cb5be6eb8bd5e2b.json b/backend/.sqlx/query-ccff2c556f1171bd10b09b1aa1d2d8ced2d4a75eef905cb40cb5be6eb8bd5e2b.json
new file mode 100644
index 0000000000..abb128f463
--- /dev/null
+++ b/backend/.sqlx/query-ccff2c556f1171bd10b09b1aa1d2d8ced2d4a75eef905cb40cb5be6eb8bd5e2b.json
@@ -0,0 +1,34 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT storage, bytes, computed_at FROM workspace_storage_usage\n           WHERE workspace_id = $1 ORDER BY storage",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "storage",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "bytes",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "computed_at",
+        "type_info": "Timestamptz"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "ccff2c556f1171bd10b09b1aa1d2d8ced2d4a75eef905cb40cb5be6eb8bd5e2b"
+}
diff --git a/backend/.sqlx/query-d38e25120ec7bfcbd210d967ef2406d1773657c62d67e55dac666f9469d50e6a.json b/backend/.sqlx/query-d38e25120ec7bfcbd210d967ef2406d1773657c62d67e55dac666f9469d50e6a.json
new file mode 100644
index 0000000000..1fd1fbaece
--- /dev/null
+++ b/backend/.sqlx/query-d38e25120ec7bfcbd210d967ef2406d1773657c62d67e55dac666f9469d50e6a.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM workspace_storage_usage WHERE workspace_id = $1 AND storage != ALL($2)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "d38e25120ec7bfcbd210d967ef2406d1773657c62d67e55dac666f9469d50e6a"
+}
diff --git a/backend/.sqlx/query-d4923137cf9b6bf06e0e21ba907e7c80dd0ef92d78224792bec4c3323e14023c.json b/backend/.sqlx/query-d4923137cf9b6bf06e0e21ba907e7c80dd0ef92d78224792bec4c3323e14023c.json
new file mode 100644
index 0000000000..5609adaad8
--- /dev/null
+++ b/backend/.sqlx/query-d4923137cf9b6bf06e0e21ba907e7c80dd0ef92d78224792bec4c3323e14023c.json
@@ -0,0 +1,36 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n             (SELECT COALESCE(SUM(bytes), 0) FROM workspace_storage_usage WHERE workspace_id = $1)::bigint as \"committed!\",\n             COALESCE(\n               (SELECT MIN(computed_at) FROM workspace_storage_usage WHERE workspace_id = $1) < now() - interval '10 minutes',\n               true) as \"stale!\",\n             (SELECT COALESCE(SUM(GREATEST(t.total - t.existing, 0)), 0)\n                FROM (SELECT SUM(part_bytes) as total, MAX(target_existing_size) as existing\n                        FROM workspace_multipart_inflight\n                        WHERE workspace_id = $1 AND created_at > now() - ($2::text)::interval\n                          AND ($3::text IS NULL OR upload_id <> $3)\n                        GROUP BY upload_id) t)::bigint as \"reserved!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "committed!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 1,
+        "name": "stale!",
+        "type_info": "Bool"
+      },
+      {
+        "ordinal": 2,
+        "name": "reserved!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null,
+      null
+    ]
+  },
+  "hash": "d4923137cf9b6bf06e0e21ba907e7c80dd0ef92d78224792bec4c3323e14023c"
+}
diff --git a/backend/.sqlx/query-e82d854f3f8736a9ba7e2604ac505b693965f1bca6fef7418b19f98671c9204c.json b/backend/.sqlx/query-e82d854f3f8736a9ba7e2604ac505b693965f1bca6fef7418b19f98671c9204c.json
new file mode 100644
index 0000000000..4f0731f5e4
--- /dev/null
+++ b/backend/.sqlx/query-e82d854f3f8736a9ba7e2604ac505b693965f1bca6fef7418b19f98671c9204c.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO workspace_storage_usage (workspace_id, storage, bytes, computed_at)\n                     VALUES ($1, $2, $3, now())\n                     ON CONFLICT (workspace_id, storage) DO UPDATE SET bytes = $3, computed_at = now()",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "e82d854f3f8736a9ba7e2604ac505b693965f1bca6fef7418b19f98671c9204c"
+}
diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index 5e76f395d2..45adcf5f9f 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-c3852ecb36bd0be1a74c63169e513888f3347850
+bea5a8b5120d6d69cab1ad4611ebe463559bd200
diff --git a/backend/migrations/20260702064737_workspace_storage_usage.down.sql b/backend/migrations/20260702064737_workspace_storage_usage.down.sql
new file mode 100644
index 0000000000..e32480a602
--- /dev/null
+++ b/backend/migrations/20260702064737_workspace_storage_usage.down.sql
@@ -0,0 +1 @@
+DROP TABLE workspace_storage_usage;
diff --git a/backend/migrations/20260702064737_workspace_storage_usage.up.sql b/backend/migrations/20260702064737_workspace_storage_usage.up.sql
new file mode 100644
index 0000000000..d7274e8742
--- /dev/null
+++ b/backend/migrations/20260702064737_workspace_storage_usage.up.sql
@@ -0,0 +1,17 @@
+-- Cached per-(workspace, storage) byte usage of workspace object storage,
+-- refreshed by listing the storage location and adjusted optimistically as
+-- uploads complete. Read on every workspace-storage write in CE builds to
+-- enforce the storage quota, and by the storage_usage endpoint in all builds.
+CREATE TABLE workspace_storage_usage (
+    workspace_id VARCHAR(50) NOT NULL REFERENCES workspace (id) ON DELETE CASCADE,
+    storage VARCHAR(255) NOT NULL,
+    bytes BIGINT NOT NULL DEFAULT 0,
+    computed_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    PRIMARY KEY (workspace_id, storage)
+);
+
+-- Tables created after the one-time GRANT ALL in 20250205131523 need explicit
+-- grants: ALTER DEFAULT PRIVILEGES only covers objects created by the role
+-- that set them (same gap as workspace_diff, notify_event, script_trigger).
+GRANT ALL ON workspace_storage_usage TO windmill_user;
+GRANT ALL ON workspace_storage_usage TO windmill_admin;
diff --git a/backend/migrations/20260702213513_workspace_multipart_inflight.down.sql b/backend/migrations/20260702213513_workspace_multipart_inflight.down.sql
new file mode 100644
index 0000000000..e72edd0b12
--- /dev/null
+++ b/backend/migrations/20260702213513_workspace_multipart_inflight.down.sql
@@ -0,0 +1 @@
+DROP TABLE workspace_multipart_inflight;
diff --git a/backend/migrations/20260702213513_workspace_multipart_inflight.up.sql b/backend/migrations/20260702213513_workspace_multipart_inflight.up.sql
new file mode 100644
index 0000000000..9768eaf842
--- /dev/null
+++ b/backend/migrations/20260702213513_workspace_multipart_inflight.up.sql
@@ -0,0 +1,32 @@
+-- Reservation for the parts of in-flight (initiated but not yet completed)
+-- multipart uploads to workspace object storage. Uncommitted parts occupy
+-- object-store capacity but are invisible to the list-based storage recount
+-- until completion, so CE folds this reservation into the remaining quota to
+-- bound abandoned uploads. One row per uploaded part so a re-uploaded part
+-- (same part_id) replaces rather than double-counts; a part is recorded only
+-- after its upstream upload succeeds. Rows are removed on successful complete
+-- and lazily expired after a TTL (abort/abandon rely on the TTL, which matches
+-- when the object store reaps the uncommitted parts).
+--   part_id              - S3 part number or Azure block id (string)
+--   part_bytes           - size of that part
+--   target_existing_size - size of the object the upload will overwrite (0 if new),
+--                          credited so an overwrite only reserves the net growth
+CREATE TABLE workspace_multipart_inflight (
+    workspace_id VARCHAR(50) NOT NULL REFERENCES workspace (id) ON DELETE CASCADE,
+    upload_id VARCHAR(512) NOT NULL,
+    part_id VARCHAR(256) NOT NULL,
+    storage VARCHAR(255) NOT NULL,
+    part_bytes BIGINT NOT NULL DEFAULT 0,
+    target_existing_size BIGINT NOT NULL DEFAULT 0,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    PRIMARY KEY (workspace_id, upload_id, part_id)
+);
+
+CREATE INDEX idx_workspace_multipart_inflight_created_at
+    ON workspace_multipart_inflight (created_at);
+
+-- Tables created after the one-time GRANT ALL in 20250205131523 need explicit
+-- grants: ALTER DEFAULT PRIVILEGES only covers objects created by the role that
+-- set them (same gap as workspace_storage_usage, notify_event, script_trigger).
+GRANT ALL ON workspace_multipart_inflight TO windmill_user;
+GRANT ALL ON workspace_multipart_inflight TO windmill_admin;
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index eec76ea009..e661c3aeb8 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -19901,6 +19901,55 @@ paths:
             application/json:
               schema: {}
 
+  /w/{workspace}/job_helpers/storage_usage:
+    get:
+      summary: Get the storage usage of the workspace object storage, per configured storage. On Community Edition, also returns the workspace storage quota.
+      operationId: getStorageUsage
+      tags:
+        - helpers
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+        - name: refresh
+          in: query
+          description: recount usage by listing the storage instead of returning cached values
+          schema:
+            type: boolean
+      responses:
+        "200":
+          description: Storage usage
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  total_bytes:
+                    type: integer
+                    format: int64
+                  quota_bytes:
+                    type: integer
+                    format: int64
+                    description: only present on Community Edition, where workspace storage is capped
+                  storages:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        storage:
+                          type: string
+                        bytes:
+                          type: integer
+                          format: int64
+                        computed_at:
+                          type: string
+                          format: date-time
+                      required:
+                        - storage
+                        - bytes
+                        - computed_at
+                required:
+                  - total_bytes
+                  - storages
+
   /w/{workspace}/job_helpers/list_stored_files:
     get:
       summary: List the file keys available in a workspace object storage
diff --git a/backend/windmill-api/src/apps.rs b/backend/windmill-api/src/apps.rs
index 38fa5ff862..99d6156687 100644
--- a/backend/windmill-api/src/apps.rs
+++ b/backend/windmill-api/src/apps.rs
@@ -7,6 +7,11 @@ use std::{collections::HashMap, sync::Arc};
  * Please see the included NOTICE for copyright information and
  * LICENSE-AGPL for a copy of the license.
  */
+#[cfg(all(feature = "parquet", not(feature = "enterprise")))]
+use crate::job_helpers_oss::{
+    bump_storage_usage, ce_upload_budget, reject_reserved_volume_key,
+    spawn_storage_usage_recount_floored,
+};
 use crate::{
     auth::{get_end_user_email, OptTokened},
     db::{ApiAuthed, DB},
@@ -3544,7 +3549,49 @@ async fn upload_s3_file_from_app(
     ])
     .into();
 
-    let _put_result = upload_file_from_req(s3_client, &file_key, request, options).await?;
+    // Only workspace storage is quota-metered; a custom-resource upload lands in
+    // the user's own bucket and is neither capped nor counted. An overwrite of an
+    // existing key only spends the difference over its current size.
+    let _is_workspace_storage = query.s3_resource_path.is_none();
+    #[cfg(all(feature = "parquet", not(feature = "enterprise")))]
+    if _is_workspace_storage {
+        reject_reserved_volume_key(&file_key)?;
+    }
+    #[cfg(all(feature = "parquet", not(feature = "enterprise")))]
+    let (max_size, _existing_size) = if _is_workspace_storage {
+        let content_length = request
+            .headers()
+            .get(http::header::CONTENT_LENGTH)
+            .and_then(|h| h.to_str().ok())
+            .and_then(|s| s.parse::<i64>().ok());
+        let budget = ce_upload_budget(&db, &w_id, &s3_client, &file_key, content_length).await?;
+        (Some(budget.max_size), budget.existing_size)
+    } else {
+        (None, 0)
+    };
+    #[cfg(any(not(feature = "parquet"), feature = "enterprise"))]
+    let max_size: Option<usize> = None;
+
+    match upload_file_from_req(s3_client, &file_key, request, options, max_size).await {
+        Ok((_, _size)) =>
+        {
+            #[cfg(all(feature = "parquet", not(feature = "enterprise")))]
+            if _is_workspace_storage {
+                bump_storage_usage(
+                    &db,
+                    &w_id,
+                    windmill_object_store::DEFAULT_STORAGE,
+                    _size as i64 - _existing_size,
+                )
+                .await;
+            }
+        }
+        Err(e) => {
+            #[cfg(all(feature = "parquet", not(feature = "enterprise")))]
+            spawn_storage_usage_recount_floored(&db, &w_id);
+            return Err(e);
+        }
+    }
 
     let delete_token = jwt::encode_with_internal_secret(S3DeleteTokenClaims {
         file_key: file_key.clone(),
diff --git a/backend/windmill-api/src/args.rs b/backend/windmill-api/src/args.rs
index 3793e94b02..dc8b36fbaf 100644
--- a/backend/windmill-api/src/args.rs
+++ b/backend/windmill-api/src/args.rs
@@ -90,6 +90,10 @@ impl RawWebhookArgs {
         db: &DB,
         w_id: &str,
     ) -> Result<HashMap<String, Box<RawValue>>, Error> {
+        #[cfg(not(feature = "enterprise"))]
+        use crate::job_helpers_oss::{
+            bump_storage_usage, ce_storage_quota_remaining, spawn_storage_usage_recount_floored,
+        };
         use crate::job_helpers_oss::{
             get_random_file_name, get_workspace_s3_resource, upload_file_internal,
         };
@@ -139,8 +143,38 @@ impl RawWebhookArgs {
                             .into_stream()
                             .map_err(|err| std::io::Error::new(std::io::ErrorKind::Other, err));
 
-                        upload_file_internal(s3_client.clone(), &file_key, bytes_stream, options)
-                            .await?;
+                        // file_key is always freshly random here, so this never
+                        // overwrites an existing object; the full size is the delta.
+                        #[cfg(not(feature = "enterprise"))]
+                        let max_size = Some(ce_storage_quota_remaining(db, w_id, None).await? as usize);
+                        #[cfg(feature = "enterprise")]
+                        let max_size: Option<usize> = None;
+
+                        match upload_file_internal(
+                            s3_client.clone(),
+                            &file_key,
+                            bytes_stream,
+                            options,
+                            max_size,
+                        )
+                        .await
+                        {
+                            Ok((_, _size)) => {
+                                #[cfg(not(feature = "enterprise"))]
+                                bump_storage_usage(
+                                    db,
+                                    w_id,
+                                    windmill_object_store::DEFAULT_STORAGE,
+                                    _size as i64,
+                                )
+                                .await;
+                            }
+                            Err(e) => {
+                                #[cfg(not(feature = "enterprise"))]
+                                spawn_storage_usage_recount_floored(db, w_id);
+                                return Err(e);
+                            }
+                        }
 
                         files.entry(name).or_insert(vec![]).push(serde_json::json!({
                             "s3": &file_key
diff --git a/backend/windmill-api/src/job_helpers_oss.rs b/backend/windmill-api/src/job_helpers_oss.rs
index 23f20459c3..c6d8e397f2 100644
--- a/backend/windmill-api/src/job_helpers_oss.rs
+++ b/backend/windmill-api/src/job_helpers_oss.rs
@@ -87,7 +87,8 @@ pub async fn upload_file_from_req(
     _file_key: &str,
     _req: axum::extract::Request,
     _options: PutMultipartOpts,
-) -> error::Result<PutResult> {
+    _max_size: Option<usize>,
+) -> error::Result<(PutResult, usize)> {
     Err(error::Error::internal_err(
         "Not implemented in Windmill's Open Source repository".to_string(),
     ))
@@ -99,12 +100,77 @@ pub async fn upload_file_internal(
     _file_key: &str,
     _stream: impl Stream<Item = Result<Bytes, std::io::Error>> + Unpin,
     _options: PutMultipartOpts,
-) -> error::Result<()> {
+    _max_size: Option<usize>,
+) -> error::Result<(PutResult, usize)> {
     Err(error::Error::internal_err(
         "Not implemented in Windmill's Open Source repository".to_string(),
     ))
 }
 
+// These stubs stand in for the CE quota helpers in a pure-OSS build; their only
+// callers (apps.rs / args.rs uploads) are `not(enterprise)`, so gate them the
+// same way — an enterprise-without-private build compiles neither.
+#[cfg(all(
+    feature = "parquet",
+    not(feature = "private"),
+    not(feature = "enterprise")
+))]
+pub async fn ce_storage_quota_remaining(
+    _db: &DB,
+    _w_id: &str,
+    _exclude_upload_id: Option<&str>,
+) -> error::Result<i64> {
+    Ok(i64::MAX)
+}
+
+#[cfg(all(
+    feature = "parquet",
+    not(feature = "private"),
+    not(feature = "enterprise")
+))]
+pub fn reject_reserved_volume_key(_file_key: &str) -> error::Result<()> {
+    Ok(())
+}
+
+#[cfg(all(
+    feature = "parquet",
+    not(feature = "private"),
+    not(feature = "enterprise")
+))]
+pub struct CeUploadBudget {
+    pub max_size: usize,
+    pub existing_size: i64,
+}
+
+#[cfg(all(
+    feature = "parquet",
+    not(feature = "private"),
+    not(feature = "enterprise")
+))]
+pub async fn ce_upload_budget(
+    _db: &DB,
+    _w_id: &str,
+    _s3_client: &Arc<dyn ObjectStore>,
+    _file_key: &str,
+    _content_length: Option<i64>,
+) -> error::Result<CeUploadBudget> {
+    Ok(CeUploadBudget { max_size: usize::MAX, existing_size: 0 })
+}
+
+#[cfg(all(
+    feature = "parquet",
+    not(feature = "private"),
+    not(feature = "enterprise")
+))]
+pub async fn bump_storage_usage(_db: &DB, _w_id: &str, _storage: &str, _delta: i64) {}
+
+#[cfg(all(
+    feature = "parquet",
+    not(feature = "private"),
+    not(feature = "enterprise")
+))]
+pub fn spawn_storage_usage_recount_floored(_db: &DB, _w_id: &str) {}
+
 #[cfg(all(feature = "parquet", not(feature = "private")))]
 pub async fn download_s3_file_internal(
     _authed: OptJobAuthed,
diff --git a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
index 329ea53e14..be49e3c564 100644
--- a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
+++ b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
@@ -1,7 +1,7 @@
 <script lang="ts">
 	import { enterpriseLicense, workspaceStore } from '$lib/stores'
-	import { emptyString, pick, sendUserToast } from '$lib/utils'
-	import { ChevronDown, Plus, Shield } from 'lucide-svelte'
+	import { displaySize, emptyString, pick, sendUserToast } from '$lib/utils'
+	import { ChevronDown, Plus, RefreshCw, Shield } from 'lucide-svelte'
 	import Alert from '../common/alert/Alert.svelte'
 	import Button from '../common/button/Button.svelte'
 	import SettingsPageHeader from '../settings/SettingsPageHeader.svelte'
@@ -15,7 +15,7 @@
 		type S3ResourceSettings,
 		type S3ResourceSettingsItem
 	} from '$lib/workspace_settings'
-	import { WorkspaceService } from '$lib/gen'
+	import { HelpersService, WorkspaceService, type GetStorageUsageResponse } from '$lib/gen'
 	import S3FilePicker from '../S3FilePicker.svelte'
 	import Portal from '../Portal.svelte'
 	import Popover from '../meltComponents/Popover.svelte'
@@ -61,7 +61,51 @@
 		console.log('Large file storage settings changed', large_file_storage)
 		sendUserToast(`Large file storage settings changed`)
 		onSave?.()
+		loadStorageUsage(true)
 	}
+
+	let storageUsage: GetStorageUsageResponse | undefined = $state()
+	let storageUsageLoading = $state(false)
+	// Set on failure so the auto-load $effect below doesn't hammer a persistently
+	// failing endpoint; cleared only by an explicit user-triggered refresh.
+	let storageUsageErrored = $state(false)
+
+	async function loadStorageUsage(refresh: boolean = false): Promise<void> {
+		storageUsageLoading = true
+		if (refresh) storageUsageErrored = false
+		try {
+			storageUsage = await HelpersService.getStorageUsage({
+				workspace: $workspaceStore!,
+				refresh
+			})
+		} catch (e) {
+			storageUsageErrored = true
+			console.error('Failed to load storage usage', e)
+		} finally {
+			storageUsageLoading = false
+		}
+	}
+
+	$effect(() => {
+		if (
+			primaryStorageSaved &&
+			storageUsage === undefined &&
+			!storageUsageLoading &&
+			!storageUsageErrored
+		) {
+			loadStorageUsage()
+		}
+	})
+
+	let usedFraction: number | undefined = $derived(
+		storageUsage?.quota_bytes
+			? Math.min(storageUsage.total_bytes / storageUsage.quota_bytes, 1)
+			: undefined
+	)
+	let overQuota: boolean = $derived(
+		storageUsage?.quota_bytes !== undefined && storageUsage.total_bytes >= storageUsage.quota_bytes
+	)
+	let quotaDisplay: string = $derived(displaySize(storageUsage?.quota_bytes) ?? '10 GiB')
 	let tableHeadNames = ['Name', 'Storage resource', '', ''] as const
 	let tableHeadTooltips: Partial<Record<(typeof tableHeadNames)[number], string | undefined>> = {
 		'Storage resource':
@@ -144,10 +188,10 @@
 	link="https://www.windmill.dev/docs/core_concepts/object_storage_in_windmill#workspace-object-storage"
 />
 {#if !$enterpriseLicense}
-	<Alert type="info" title="S3 storage is limited to 20 files in Windmill CE">
-		Windmill S3 bucket browser will not work for buckets containing more than 20 files and uploads
-		are limited to files {'<'} 50MB. Consider upgrading to Windmill EE to use this feature with large
-		buckets.
+	<Alert type="info" title="Workspace storage is limited to {quotaDisplay} in Windmill CE">
+		Total workspace storage is capped at {quotaDisplay} in the Community Edition: writes that would exceed
+		the quota are rejected. The bucket browser will also not work for buckets containing more than 20
+		files. Consider upgrading to Windmill EE for unlimited workspace storage.
 	</Alert>
 {:else}
 	<Alert type="info" title="Logs storage is set at the instance level">
@@ -159,6 +203,67 @@
 		>, set by the superadmins in the instance settings UI.
 	</Alert>
 {/if}
+{#if primaryStorageSaved}
+	<div class="mt-4 flex flex-col gap-1.5 max-w-xl storage-usage-section">
+		<div class="flex items-center gap-2">
+			<span class="text-sm font-semibold">Storage usage</span>
+			<Button
+				variant="default"
+				size="xs2"
+				iconOnly
+				startIcon={{ icon: RefreshCw }}
+				loading={storageUsageLoading}
+				onclick={() => loadStorageUsage(true)}
+				title="Recount usage by listing the storage"
+			/>
+		</div>
+		{#if storageUsage}
+			{#if storageUsage.quota_bytes !== undefined && usedFraction !== undefined}
+				<div class="h-2 w-full rounded-full bg-surface-secondary overflow-hidden border">
+					<div
+						class="h-full rounded-full transition-all {overQuota
+							? 'bg-red-500'
+							: usedFraction >= 0.8
+								? 'bg-yellow-500'
+								: 'bg-accent'}"
+						style="width: {Math.max(usedFraction * 100, 1)}%"
+					></div>
+				</div>
+				<span class="text-xs text-secondary">
+					{displaySize(storageUsage.total_bytes)} of {quotaDisplay} used
+					{#if storageUsage.storages.length > 1}
+						({storageUsage.storages
+							.map(
+								(s) =>
+									`${s.storage === '_default_' ? 'primary' : s.storage}: ${displaySize(s.bytes)}`
+							)
+							.join(', ')})
+					{/if}
+				</span>
+				{#if overQuota}
+					<Alert type="error" title="Workspace storage quota exceeded">
+						Writes to workspace storage are rejected until usage drops below {quotaDisplay}. Delete
+						files from workspace storage or upgrade to Windmill EE for unlimited storage.
+					</Alert>
+				{/if}
+			{:else}
+				<span class="text-xs text-secondary">
+					{displaySize(storageUsage.total_bytes)} used
+					{#if storageUsage.storages.length > 1}
+						({storageUsage.storages
+							.map(
+								(s) =>
+									`${s.storage === '_default_' ? 'primary' : s.storage}: ${displaySize(s.bytes)}`
+							)
+							.join(', ')})
+					{/if}
+				</span>
+			{/if}
+		{:else if storageUsageLoading}
+			<span class="text-xs text-tertiary">Computing storage usage...</span>
+		{/if}
+	</div>
+{/if}
 {#if s3ResourceSettings}
 	<DataTable containerClass="storage-settings-table mt-4">
 		<Head>

From 84141add1ddf35c2573e3c213366ce7c5f1f2258 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 22:59:30 +0000
Subject: [PATCH 26/76] feat(pipelines): workspace duckdb macro libraries (//
 macros / // use) (#9890)

* feat(pipelines): parse duckdb macro-library annotations (// macros, // use)

* feat(pipelines): duckdb macro registry tables + deploy-path validation and writes

* feat(pipelines): inject workspace duckdb macros into consumer jobs at run time

* feat(pipelines): surface macro libraries and lib-consumer edges in asset graph api

* feat(frontend): macro-library nodes, lib-consumer edges and scaffold in pipeline graph

* docs: mark dbt gap #7 (packages/macros) shipped via workspace macro libraries

* fix(pipelines): review fixes - char-safe parsing, local macros win, fork clone, trust-model docs

* feat(frontend): duckdb macro autocomplete + workspace macro explorer drawer

* fix(pipelines): address CI review - use-setup retention, splice past local defs, orphan filter, full consumer rescan, index-keyed strip

* fix(pipelines): inject provider library setup for implicitly-called macros too

* fix(pipelines): rls-gate macro listing + honor library-level // use transitively

* fix(pipelines): weave injected macros around local definitions by bind order

* fix(pipelines): injected library setup always runs before user blocks

* perf(pipelines): cache macro registry per workspace with notify-event invalidation

* perf(pipelines): disable macro registry cache on cloud
---
 ...85b62e55f43d448332ff88d8f036443b1edd7.json |  46 +
 ...a7159de4488adccb9349cddfbdd572b4005e9.json |  29 +
 ...d4d4739fd663cf34f00d947f24b47c481f035.json |  14 +
 ...35bd5a777effb1e61f530f3c1868b407e74e4.json |  15 +
 ...185331f8b03eec083fa80c007f6f23019a5d2.json |  15 +
 ...96e034c48d960930a2c0c340b28b5c44fe87f.json |  15 +
 ...a7fd0fe229643573509bd1705a691ff7c4ba2.json |  19 +
 ...4a1503df8811d2d212f1a97ffd00599aeb4c7.json |  14 +
 ...440276ea6faee8589ff0febedf6917977a40e.json |  40 +
 ...95ba3ef329059366632dd94262f2e1bdfed97.json |  23 +
 ...76aeebb9081dd36b45f609823dfbb4d3b8e9d.json |  15 +
 ...6aa1cb9aae18a6c3a1e5d6b36697ed063b50c.json |  15 +
 ...c7cf162f2fa7c5f67f8a9e0071e5b7f238dcb.json |  29 +
 ...e07eab23e2b35e58f812c69ba29de2d8e2fa5.json |  16 +
 ...1292668a687ca01ae1c14c0ed3b5cf10fcb03.json |  16 +
 ...d592276fa08da3f13f9c74aeedb666a55df05.json |  16 +
 ...25e934a5a7677a9fdc7ea62f9dadbace15ec3.json |  46 +
 ...b6ebebd50e943263d6884bcdd322faeaa8345.json |  15 +
 ...d817a998bef51ac27e83942afc548640fb785.json |  14 +
 ...50d224da5beb74d289fe17ea960887aa50f1a.json |  29 +
 ...165d9a755102d1df51ffe63abf5900bcdb42c.json |  23 +
 ...e110a5d6dcdc65aa293b1a15d67dee5308ddc.json |  16 +
 ...60702095830_duckdb_macro_registry.down.sql |   2 +
 ...0260702095830_duckdb_macro_registry.up.sql |  31 +
 .../windmill-parser/src/asset_parser.rs       |  66 ++
 .../windmill-parser/src/duckdb_builtins.rs    | 936 ++++++++++++++++++
 .../windmill-parser/src/duckdb_macros.rs      | 591 +++++++++++
 backend/parsers/windmill-parser/src/lib.rs    |   2 +
 .../windmill-parser/src/sql_materialize.rs    |  30 +-
 .../tests/fixtures/pipeline_annotations.json  | 166 +++-
 .../tests/pipeline_annotations_parity.rs      |   9 +
 backend/src/main.rs                           |   7 +
 backend/summarized_schema.txt                 |   4 +
 backend/windmill-api-assets/src/lib.rs        | 186 +++-
 backend/windmill-api-scripts/src/scripts.rs   | 284 +++++-
 .../windmill-api-workspaces/src/workspaces.rs |  30 +
 .../src/workspaces_extra.rs                   |  27 +
 backend/windmill-api/openapi.yaml             |  64 ++
 backend/windmill-common/src/assets.rs         |  35 +
 .../windmill-worker/src/duckdb_executor.rs    | 849 ++++++++++++++++
 docs/pipelines-vs-dbt.md                      |  73 +-
 frontend/src/lib/components/Editor.svelte     |  60 ++
 .../assets/AssetGraph/AssetGraphCanvas.svelte |  42 +-
 .../AssetGraph/AssetGraphDetailsPane.svelte   | 155 +--
 .../assets/AssetGraph/AssetGraphEdge.svelte   |  36 +-
 .../AssetGraph/MacroExplorerDrawer.svelte     | 159 +++
 .../assets/AssetGraph/RunnableNode.svelte     |  15 +
 .../parsePipelineAnnotations.parity.test.ts   |  12 +-
 .../parsePipelineAnnotations.test.ts          |  27 +
 .../AssetGraph/parsePipelineAnnotations.ts    |  30 +-
 .../assets/AssetGraph/pipelineTemplates.ts    |  35 +-
 .../assets/AssetGraph/resolveGraph.test.ts    |  84 ++
 .../assets/AssetGraph/resolveGraph.ts         |  88 +-
 .../lib/components/assets/AssetGraph/types.ts |  18 +
 .../lib/components/assets/workspaceMacros.ts  |  32 +
 .../(logged)/pipeline/[folder]/+page.svelte   |  35 +-
 56 files changed, 4584 insertions(+), 116 deletions(-)
 create mode 100644 backend/.sqlx/query-12dec9fa086fd231cdba2ecaa4585b62e55f43d448332ff88d8f036443b1edd7.json
 create mode 100644 backend/.sqlx/query-21242859ee6b72466c6bfb9d826a7159de4488adccb9349cddfbdd572b4005e9.json
 create mode 100644 backend/.sqlx/query-246e302feda95892d5eb1a43a29d4d4739fd663cf34f00d947f24b47c481f035.json
 create mode 100644 backend/.sqlx/query-36fb69f46ccfb559cd5a25db5fb35bd5a777effb1e61f530f3c1868b407e74e4.json
 create mode 100644 backend/.sqlx/query-3740ea8dfc666c8b098e55784af185331f8b03eec083fa80c007f6f23019a5d2.json
 create mode 100644 backend/.sqlx/query-3e0c2268afa4ce21ae6da69d2a496e034c48d960930a2c0c340b28b5c44fe87f.json
 create mode 100644 backend/.sqlx/query-447dd940e6ee86be8eab6982c22a7fd0fe229643573509bd1705a691ff7c4ba2.json
 create mode 100644 backend/.sqlx/query-4b03b55595bbc02e63fc920cbaf4a1503df8811d2d212f1a97ffd00599aeb4c7.json
 create mode 100644 backend/.sqlx/query-689c85d30f898f237c8a3a1e883440276ea6faee8589ff0febedf6917977a40e.json
 create mode 100644 backend/.sqlx/query-6939fbbaaacd5d5a34016ed9eb295ba3ef329059366632dd94262f2e1bdfed97.json
 create mode 100644 backend/.sqlx/query-7e3d7f7516167c320c688c2406076aeebb9081dd36b45f609823dfbb4d3b8e9d.json
 create mode 100644 backend/.sqlx/query-9cfebb5bfee0d7d78f4e71c106a6aa1cb9aae18a6c3a1e5d6b36697ed063b50c.json
 create mode 100644 backend/.sqlx/query-a08e1e22ec6cc25bb8939e488a1c7cf162f2fa7c5f67f8a9e0071e5b7f238dcb.json
 create mode 100644 backend/.sqlx/query-a6d54bb1e2ad153e0c89a4c71ade07eab23e2b35e58f812c69ba29de2d8e2fa5.json
 create mode 100644 backend/.sqlx/query-b3a9ef177aecfbcb31abba9f25e1292668a687ca01ae1c14c0ed3b5cf10fcb03.json
 create mode 100644 backend/.sqlx/query-c961131f349c68b91b0aea9805fd592276fa08da3f13f9c74aeedb666a55df05.json
 create mode 100644 backend/.sqlx/query-cb04b72b25b7bd1163316be6a4e25e934a5a7677a9fdc7ea62f9dadbace15ec3.json
 create mode 100644 backend/.sqlx/query-cb1b8adfe43c193d8b97afc3b04b6ebebd50e943263d6884bcdd322faeaa8345.json
 create mode 100644 backend/.sqlx/query-d350eb5358c62526e70eba991fdd817a998bef51ac27e83942afc548640fb785.json
 create mode 100644 backend/.sqlx/query-e17d7fb386ec45386401a20d97b50d224da5beb74d289fe17ea960887aa50f1a.json
 create mode 100644 backend/.sqlx/query-e26401ac6ecefe4e11306f2c714165d9a755102d1df51ffe63abf5900bcdb42c.json
 create mode 100644 backend/.sqlx/query-f629c27daf692d7055fa299edaae110a5d6dcdc65aa293b1a15d67dee5308ddc.json
 create mode 100644 backend/migrations/20260702095830_duckdb_macro_registry.down.sql
 create mode 100644 backend/migrations/20260702095830_duckdb_macro_registry.up.sql
 create mode 100644 backend/parsers/windmill-parser/src/duckdb_builtins.rs
 create mode 100644 backend/parsers/windmill-parser/src/duckdb_macros.rs
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/MacroExplorerDrawer.svelte
 create mode 100644 frontend/src/lib/components/assets/workspaceMacros.ts

diff --git a/backend/.sqlx/query-12dec9fa086fd231cdba2ecaa4585b62e55f43d448332ff88d8f036443b1edd7.json b/backend/.sqlx/query-12dec9fa086fd231cdba2ecaa4585b62e55f43d448332ff88d8f036443b1edd7.json
new file mode 100644
index 0000000000..f2faa9f48a
--- /dev/null
+++ b/backend/.sqlx/query-12dec9fa086fd231cdba2ecaa4585b62e55f43d448332ff88d8f036443b1edd7.json
@@ -0,0 +1,46 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT name, params, body, is_table_macro, provider_path FROM macro_definition WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "name",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "params",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "body",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 3,
+        "name": "is_table_macro",
+        "type_info": "Bool"
+      },
+      {
+        "ordinal": 4,
+        "name": "provider_path",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "12dec9fa086fd231cdba2ecaa4585b62e55f43d448332ff88d8f036443b1edd7"
+}
diff --git a/backend/.sqlx/query-21242859ee6b72466c6bfb9d826a7159de4488adccb9349cddfbdd572b4005e9.json b/backend/.sqlx/query-21242859ee6b72466c6bfb9d826a7159de4488adccb9349cddfbdd572b4005e9.json
new file mode 100644
index 0000000000..1a3d7ef0e4
--- /dev/null
+++ b/backend/.sqlx/query-21242859ee6b72466c6bfb9d826a7159de4488adccb9349cddfbdd572b4005e9.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT consumer_path AS \"consumer_path!\", macro_name AS \"macro_name!\"\n           FROM macro_usage\n           WHERE workspace_id = $1\n             AND ($2::text IS NULL OR consumer_path LIKE $2)",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "consumer_path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "macro_name!",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "21242859ee6b72466c6bfb9d826a7159de4488adccb9349cddfbdd572b4005e9"
+}
diff --git a/backend/.sqlx/query-246e302feda95892d5eb1a43a29d4d4739fd663cf34f00d947f24b47c481f035.json b/backend/.sqlx/query-246e302feda95892d5eb1a43a29d4d4739fd663cf34f00d947f24b47c481f035.json
new file mode 100644
index 0000000000..f828b906cd
--- /dev/null
+++ b/backend/.sqlx/query-246e302feda95892d5eb1a43a29d4d4739fd663cf34f00d947f24b47c481f035.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM macro_definition WHERE workspace_id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "246e302feda95892d5eb1a43a29d4d4739fd663cf34f00d947f24b47c481f035"
+}
diff --git a/backend/.sqlx/query-36fb69f46ccfb559cd5a25db5fb35bd5a777effb1e61f530f3c1868b407e74e4.json b/backend/.sqlx/query-36fb69f46ccfb559cd5a25db5fb35bd5a777effb1e61f530f3c1868b407e74e4.json
new file mode 100644
index 0000000000..d95cc6dc75
--- /dev/null
+++ b/backend/.sqlx/query-36fb69f46ccfb559cd5a25db5fb35bd5a777effb1e61f530f3c1868b407e74e4.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO macro_usage (workspace_id, consumer_path, macro_name)\n         SELECT $2, consumer_path, macro_name\n         FROM macro_usage WHERE workspace_id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "36fb69f46ccfb559cd5a25db5fb35bd5a777effb1e61f530f3c1868b407e74e4"
+}
diff --git a/backend/.sqlx/query-3740ea8dfc666c8b098e55784af185331f8b03eec083fa80c007f6f23019a5d2.json b/backend/.sqlx/query-3740ea8dfc666c8b098e55784af185331f8b03eec083fa80c007f6f23019a5d2.json
new file mode 100644
index 0000000000..dcb81f26b8
--- /dev/null
+++ b/backend/.sqlx/query-3740ea8dfc666c8b098e55784af185331f8b03eec083fa80c007f6f23019a5d2.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM macro_usage WHERE workspace_id = $1 AND (consumer_path = $2 OR macro_name IN (SELECT name FROM macro_definition WHERE workspace_id = $1 AND provider_path = $2))",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "3740ea8dfc666c8b098e55784af185331f8b03eec083fa80c007f6f23019a5d2"
+}
diff --git a/backend/.sqlx/query-3e0c2268afa4ce21ae6da69d2a496e034c48d960930a2c0c340b28b5c44fe87f.json b/backend/.sqlx/query-3e0c2268afa4ce21ae6da69d2a496e034c48d960930a2c0c340b28b5c44fe87f.json
new file mode 100644
index 0000000000..667907e290
--- /dev/null
+++ b/backend/.sqlx/query-3e0c2268afa4ce21ae6da69d2a496e034c48d960930a2c0c340b28b5c44fe87f.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO macro_definition (workspace_id, name, provider_path, params, body, is_table_macro)\n         SELECT $2, name, provider_path, params, body, is_table_macro\n         FROM macro_definition WHERE workspace_id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "3e0c2268afa4ce21ae6da69d2a496e034c48d960930a2c0c340b28b5c44fe87f"
+}
diff --git a/backend/.sqlx/query-447dd940e6ee86be8eab6982c22a7fd0fe229643573509bd1705a691ff7c4ba2.json b/backend/.sqlx/query-447dd940e6ee86be8eab6982c22a7fd0fe229643573509bd1705a691ff7c4ba2.json
new file mode 100644
index 0000000000..1146134a34
--- /dev/null
+++ b/backend/.sqlx/query-447dd940e6ee86be8eab6982c22a7fd0fe229643573509bd1705a691ff7c4ba2.json
@@ -0,0 +1,19 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO macro_definition (workspace_id, name, provider_path, params, body, is_table_macro) VALUES ($1, $2, $3, $4, $5, $6)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Text",
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "447dd940e6ee86be8eab6982c22a7fd0fe229643573509bd1705a691ff7c4ba2"
+}
diff --git a/backend/.sqlx/query-4b03b55595bbc02e63fc920cbaf4a1503df8811d2d212f1a97ffd00599aeb4c7.json b/backend/.sqlx/query-4b03b55595bbc02e63fc920cbaf4a1503df8811d2d212f1a97ffd00599aeb4c7.json
new file mode 100644
index 0000000000..06b8754d5f
--- /dev/null
+++ b/backend/.sqlx/query-4b03b55595bbc02e63fc920cbaf4a1503df8811d2d212f1a97ffd00599aeb4c7.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO notify_event (channel, payload) VALUES ('notify_macro_registry_change', $1)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "4b03b55595bbc02e63fc920cbaf4a1503df8811d2d212f1a97ffd00599aeb4c7"
+}
diff --git a/backend/.sqlx/query-689c85d30f898f237c8a3a1e883440276ea6faee8589ff0febedf6917977a40e.json b/backend/.sqlx/query-689c85d30f898f237c8a3a1e883440276ea6faee8589ff0febedf6917977a40e.json
new file mode 100644
index 0000000000..83e2711cf5
--- /dev/null
+++ b/backend/.sqlx/query-689c85d30f898f237c8a3a1e883440276ea6faee8589ff0febedf6917977a40e.json
@@ -0,0 +1,40 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT name AS \"name!\", provider_path AS \"provider_path!\",\n                  params AS \"params!\", is_table_macro AS \"is_table_macro!\"\n           FROM macro_definition\n           WHERE workspace_id = $1\n           ORDER BY provider_path, name",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "name!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "provider_path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "params!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 3,
+        "name": "is_table_macro!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "689c85d30f898f237c8a3a1e883440276ea6faee8589ff0febedf6917977a40e"
+}
diff --git a/backend/.sqlx/query-6939fbbaaacd5d5a34016ed9eb295ba3ef329059366632dd94262f2e1bdfed97.json b/backend/.sqlx/query-6939fbbaaacd5d5a34016ed9eb295ba3ef329059366632dd94262f2e1bdfed97.json
new file mode 100644
index 0000000000..4dfdcaab97
--- /dev/null
+++ b/backend/.sqlx/query-6939fbbaaacd5d5a34016ed9eb295ba3ef329059366632dd94262f2e1bdfed97.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT name FROM macro_definition WHERE workspace_id = $1 AND provider_path != $2",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "name",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "6939fbbaaacd5d5a34016ed9eb295ba3ef329059366632dd94262f2e1bdfed97"
+}
diff --git a/backend/.sqlx/query-7e3d7f7516167c320c688c2406076aeebb9081dd36b45f609823dfbb4d3b8e9d.json b/backend/.sqlx/query-7e3d7f7516167c320c688c2406076aeebb9081dd36b45f609823dfbb4d3b8e9d.json
new file mode 100644
index 0000000000..f5fec50340
--- /dev/null
+++ b/backend/.sqlx/query-7e3d7f7516167c320c688c2406076aeebb9081dd36b45f609823dfbb4d3b8e9d.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE macro_usage SET workspace_id = $1 WHERE workspace_id = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "7e3d7f7516167c320c688c2406076aeebb9081dd36b45f609823dfbb4d3b8e9d"
+}
diff --git a/backend/.sqlx/query-9cfebb5bfee0d7d78f4e71c106a6aa1cb9aae18a6c3a1e5d6b36697ed063b50c.json b/backend/.sqlx/query-9cfebb5bfee0d7d78f4e71c106a6aa1cb9aae18a6c3a1e5d6b36697ed063b50c.json
new file mode 100644
index 0000000000..07a14677e4
--- /dev/null
+++ b/backend/.sqlx/query-9cfebb5bfee0d7d78f4e71c106a6aa1cb9aae18a6c3a1e5d6b36697ed063b50c.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM macro_definition WHERE workspace_id = $1 AND provider_path = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "9cfebb5bfee0d7d78f4e71c106a6aa1cb9aae18a6c3a1e5d6b36697ed063b50c"
+}
diff --git a/backend/.sqlx/query-a08e1e22ec6cc25bb8939e488a1c7cf162f2fa7c5f67f8a9e0071e5b7f238dcb.json b/backend/.sqlx/query-a08e1e22ec6cc25bb8939e488a1c7cf162f2fa7c5f67f8a9e0071e5b7f238dcb.json
new file mode 100644
index 0000000000..9ddc929622
--- /dev/null
+++ b/backend/.sqlx/query-a08e1e22ec6cc25bb8939e488a1c7cf162f2fa7c5f67f8a9e0071e5b7f238dcb.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT name, provider_path FROM macro_definition WHERE workspace_id = $1 AND name = ANY($2) LIMIT 1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "name",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "provider_path",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "a08e1e22ec6cc25bb8939e488a1c7cf162f2fa7c5f67f8a9e0071e5b7f238dcb"
+}
diff --git a/backend/.sqlx/query-a6d54bb1e2ad153e0c89a4c71ade07eab23e2b35e58f812c69ba29de2d8e2fa5.json b/backend/.sqlx/query-a6d54bb1e2ad153e0c89a4c71ade07eab23e2b35e58f812c69ba29de2d8e2fa5.json
new file mode 100644
index 0000000000..986638f649
--- /dev/null
+++ b/backend/.sqlx/query-a6d54bb1e2ad153e0c89a4c71ade07eab23e2b35e58f812c69ba29de2d8e2fa5.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM macro_usage WHERE workspace_id = $1 AND (consumer_path = $2 OR consumer_path = $3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "a6d54bb1e2ad153e0c89a4c71ade07eab23e2b35e58f812c69ba29de2d8e2fa5"
+}
diff --git a/backend/.sqlx/query-b3a9ef177aecfbcb31abba9f25e1292668a687ca01ae1c14c0ed3b5cf10fcb03.json b/backend/.sqlx/query-b3a9ef177aecfbcb31abba9f25e1292668a687ca01ae1c14c0ed3b5cf10fcb03.json
new file mode 100644
index 0000000000..545a9c161b
--- /dev/null
+++ b/backend/.sqlx/query-b3a9ef177aecfbcb31abba9f25e1292668a687ca01ae1c14c0ed3b5cf10fcb03.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM macro_definition WHERE workspace_id = $1 AND (provider_path = $2 OR provider_path = $3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "b3a9ef177aecfbcb31abba9f25e1292668a687ca01ae1c14c0ed3b5cf10fcb03"
+}
diff --git a/backend/.sqlx/query-c961131f349c68b91b0aea9805fd592276fa08da3f13f9c74aeedb666a55df05.json b/backend/.sqlx/query-c961131f349c68b91b0aea9805fd592276fa08da3f13f9c74aeedb666a55df05.json
new file mode 100644
index 0000000000..c1e5495204
--- /dev/null
+++ b/backend/.sqlx/query-c961131f349c68b91b0aea9805fd592276fa08da3f13f9c74aeedb666a55df05.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM macro_usage WHERE workspace_id = $1 AND macro_name = ANY($2) AND consumer_path != $3",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "c961131f349c68b91b0aea9805fd592276fa08da3f13f9c74aeedb666a55df05"
+}
diff --git a/backend/.sqlx/query-cb04b72b25b7bd1163316be6a4e25e934a5a7677a9fdc7ea62f9dadbace15ec3.json b/backend/.sqlx/query-cb04b72b25b7bd1163316be6a4e25e934a5a7677a9fdc7ea62f9dadbace15ec3.json
new file mode 100644
index 0000000000..8f0841180b
--- /dev/null
+++ b/backend/.sqlx/query-cb04b72b25b7bd1163316be6a4e25e934a5a7677a9fdc7ea62f9dadbace15ec3.json
@@ -0,0 +1,46 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT m.name AS \"name!\", m.params AS \"params!\", m.body AS \"body!\",\n                  m.is_table_macro AS \"is_table_macro!\", m.provider_path AS \"provider_path!\"\n           FROM macro_definition m\n           WHERE m.workspace_id = $1\n             AND EXISTS (\n                SELECT 1 FROM script s\n                WHERE s.workspace_id = m.workspace_id\n                  AND s.path = m.provider_path\n                  AND s.archived = false\n                  AND s.deleted = false\n             )\n           ORDER BY m.provider_path, m.name",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "name!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "params!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 2,
+        "name": "body!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 3,
+        "name": "is_table_macro!",
+        "type_info": "Bool"
+      },
+      {
+        "ordinal": 4,
+        "name": "provider_path!",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "cb04b72b25b7bd1163316be6a4e25e934a5a7677a9fdc7ea62f9dadbace15ec3"
+}
diff --git a/backend/.sqlx/query-cb1b8adfe43c193d8b97afc3b04b6ebebd50e943263d6884bcdd322faeaa8345.json b/backend/.sqlx/query-cb1b8adfe43c193d8b97afc3b04b6ebebd50e943263d6884bcdd322faeaa8345.json
new file mode 100644
index 0000000000..1419a1a20c
--- /dev/null
+++ b/backend/.sqlx/query-cb1b8adfe43c193d8b97afc3b04b6ebebd50e943263d6884bcdd322faeaa8345.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE macro_definition SET workspace_id = $1 WHERE workspace_id = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "cb1b8adfe43c193d8b97afc3b04b6ebebd50e943263d6884bcdd322faeaa8345"
+}
diff --git a/backend/.sqlx/query-d350eb5358c62526e70eba991fdd817a998bef51ac27e83942afc548640fb785.json b/backend/.sqlx/query-d350eb5358c62526e70eba991fdd817a998bef51ac27e83942afc548640fb785.json
new file mode 100644
index 0000000000..deed0f1cdb
--- /dev/null
+++ b/backend/.sqlx/query-d350eb5358c62526e70eba991fdd817a998bef51ac27e83942afc548640fb785.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM macro_usage WHERE workspace_id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "d350eb5358c62526e70eba991fdd817a998bef51ac27e83942afc548640fb785"
+}
diff --git a/backend/.sqlx/query-e17d7fb386ec45386401a20d97b50d224da5beb74d289fe17ea960887aa50f1a.json b/backend/.sqlx/query-e17d7fb386ec45386401a20d97b50d224da5beb74d289fe17ea960887aa50f1a.json
new file mode 100644
index 0000000000..c3db56398e
--- /dev/null
+++ b/backend/.sqlx/query-e17d7fb386ec45386401a20d97b50d224da5beb74d289fe17ea960887aa50f1a.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT DISTINCT ON (path) path AS \"path!\", content AS \"content!\"\n               FROM script\n               WHERE workspace_id = $1\n                 AND language = 'duckdb'::script_lang\n                 AND archived = false\n                 AND deleted = false\n                 AND path != $2\n               ORDER BY path, created_at DESC",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "content!",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "e17d7fb386ec45386401a20d97b50d224da5beb74d289fe17ea960887aa50f1a"
+}
diff --git a/backend/.sqlx/query-e26401ac6ecefe4e11306f2c714165d9a755102d1df51ffe63abf5900bcdb42c.json b/backend/.sqlx/query-e26401ac6ecefe4e11306f2c714165d9a755102d1df51ffe63abf5900bcdb42c.json
new file mode 100644
index 0000000000..4609e7adf4
--- /dev/null
+++ b/backend/.sqlx/query-e26401ac6ecefe4e11306f2c714165d9a755102d1df51ffe63abf5900bcdb42c.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT EXISTS(SELECT 1 FROM macro_definition WHERE workspace_id = $1 AND provider_path = $2) AS \"e!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "e!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "e26401ac6ecefe4e11306f2c714165d9a755102d1df51ffe63abf5900bcdb42c"
+}
diff --git a/backend/.sqlx/query-f629c27daf692d7055fa299edaae110a5d6dcdc65aa293b1a15d67dee5308ddc.json b/backend/.sqlx/query-f629c27daf692d7055fa299edaae110a5d6dcdc65aa293b1a15d67dee5308ddc.json
new file mode 100644
index 0000000000..9e32600de9
--- /dev/null
+++ b/backend/.sqlx/query-f629c27daf692d7055fa299edaae110a5d6dcdc65aa293b1a15d67dee5308ddc.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO macro_usage (workspace_id, consumer_path, macro_name) VALUES ($1, $2, $3) ON CONFLICT DO NOTHING",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "f629c27daf692d7055fa299edaae110a5d6dcdc65aa293b1a15d67dee5308ddc"
+}
diff --git a/backend/migrations/20260702095830_duckdb_macro_registry.down.sql b/backend/migrations/20260702095830_duckdb_macro_registry.down.sql
new file mode 100644
index 0000000000..6f48e71d0f
--- /dev/null
+++ b/backend/migrations/20260702095830_duckdb_macro_registry.down.sql
@@ -0,0 +1,2 @@
+DROP TABLE IF EXISTS macro_usage;
+DROP TABLE IF EXISTS macro_definition;
diff --git a/backend/migrations/20260702095830_duckdb_macro_registry.up.sql b/backend/migrations/20260702095830_duckdb_macro_registry.up.sql
new file mode 100644
index 0000000000..ccc4bcc8cc
--- /dev/null
+++ b/backend/migrations/20260702095830_duckdb_macro_registry.up.sql
@@ -0,0 +1,31 @@
+-- Workspace DuckDB macro registry: one row per macro defined by a deployed
+-- `// macros` library script. Names are workspace-unique (macros are injected
+-- unqualified into consumer jobs).
+CREATE TABLE macro_definition (
+    workspace_id VARCHAR(50) NOT NULL REFERENCES workspace (id) ON DELETE CASCADE,
+    name VARCHAR(255) NOT NULL,
+    provider_path VARCHAR(510) NOT NULL,
+    params TEXT NOT NULL,
+    body TEXT NOT NULL,
+    is_table_macro BOOLEAN NOT NULL,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    PRIMARY KEY (workspace_id, name)
+);
+CREATE INDEX idx_macro_definition_provider ON macro_definition (workspace_id, provider_path);
+
+-- Deploy-recorded consumer→macro edges, for the asset graph only (the worker
+-- re-detects calls live at job time).
+CREATE TABLE macro_usage (
+    workspace_id VARCHAR(50) NOT NULL REFERENCES workspace (id) ON DELETE CASCADE,
+    consumer_path VARCHAR(510) NOT NULL,
+    macro_name VARCHAR(255) NOT NULL,
+    PRIMARY KEY (workspace_id, consumer_path, macro_name)
+);
+CREATE INDEX idx_macro_usage_name ON macro_usage (workspace_id, macro_name);
+
+-- Both tables are written on user_db transactions (SET LOCAL ROLE); the
+-- one-time GRANT ALL migration predates them, so explicit grants are required.
+GRANT ALL ON macro_definition TO windmill_user;
+GRANT ALL ON macro_definition TO windmill_admin;
+GRANT ALL ON macro_usage TO windmill_user;
+GRANT ALL ON macro_usage TO windmill_admin;
diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index cc2c510b9a..c22359f6b0 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -122,6 +122,17 @@ pub struct ParseAssetsOutput {
     // column-lineage graph view, executes nothing.
     #[serde(skip_serializing_if = "Vec::is_empty", default)]
     pub column_lineage: Vec<ColumnLineage>,
+    // Bare `// macros` (must be alone on the line, like `// pipeline`) —
+    // marks this DuckDB script as a workspace *macro library*: its body is
+    // CREATE [OR REPLACE] MACRO statements (plus plain setup) registered at
+    // deploy and injected as TEMP macros into consumer jobs at run time.
+    #[serde(skip_serializing_if = "std::ops::Not::not", default)]
+    pub macros: bool,
+    // `// use <lib_script_path>` — force-inject the whole named macro
+    // library (definitions + its setup statements) into this script's jobs,
+    // for dynamic SQL that call-detection can't see. Accumulating.
+    #[serde(skip_serializing_if = "Vec::is_empty", default)]
+    pub use_libs: Vec<String>,
 }
 
 #[derive(Serialize, Debug, PartialEq, Clone)]
@@ -366,6 +377,8 @@ pub struct PipelineAnnotations {
     pub materialize: Option<MaterializeSpec>,
     pub data_tests: Vec<DataTest>,
     pub column_lineage: Vec<ColumnLineage>,
+    pub macros: bool,
+    pub use_libs: Vec<String>,
 }
 
 impl ParseAssetsOutput {
@@ -392,6 +405,8 @@ impl ParseAssetsOutput {
             materialize: pipeline.materialize,
             data_tests: pipeline.data_tests,
             column_lineage: pipeline.column_lineage,
+            macros: pipeline.macros,
+            use_libs: pipeline.use_libs,
         }
     }
 }
@@ -682,6 +697,30 @@ pub fn parse_pipeline_annotations(code: &str) -> PipelineAnnotations {
             continue;
         }
 
+        if let Some(after_kw) = consume_keyword(rest, "macros") {
+            // Strict like `pipeline`: keyword alone on the line, so prose
+            // such as `// macros are defined below` never false-positives.
+            if after_kw.trim().is_empty() {
+                out.macros = true;
+            }
+            continue;
+        }
+
+        // `// use <lib_script_path>` — accumulating. The argument must be a
+        // single whitespace-free token containing `/` (all script paths do),
+        // so prose like `// use this script to …` is dropped fail-safe.
+        if let Some(after_kw) = consume_keyword(rest, "use") {
+            let path = after_kw.trim();
+            if !path.is_empty()
+                && !path.contains(char::is_whitespace)
+                && path.contains('/')
+                && !out.use_libs.iter().any(|p| p == path)
+            {
+                out.use_libs.push(path.to_string());
+            }
+            continue;
+        }
+
         if let Some(after_kw) = consume_keyword(rest, "partitioned") {
             if out.partition.is_none() {
                 if let Some(spec) = parse_partitioned_spec(after_kw.trim()) {
@@ -1110,6 +1149,33 @@ mod pipeline_annotation_tests {
         assert!(!out.in_pipeline);
     }
 
+    #[test]
+    fn macros_marker_strict_like_pipeline() {
+        assert!(parse_pipeline_annotations("// macros\nCREATE MACRO m(a) AS a;").macros);
+        assert!(parse_pipeline_annotations("-- macros   \nSELECT 1;").macros);
+        // Trailing prose / keyword variants disqualify the line.
+        assert!(!parse_pipeline_annotations("// macros are defined below\n").macros);
+        assert!(!parse_pipeline_annotations("// macros_v2\n").macros);
+    }
+
+    #[test]
+    fn use_accumulates_dedups_and_rejects_prose() {
+        let out = parse_pipeline_annotations(
+            "// use f/lib/stats\n// use f/lib/dates\n// use f/lib/stats\nSELECT 1;",
+        );
+        assert_eq!(out.use_libs, vec!["f/lib/stats", "f/lib/dates"]);
+
+        // Prose, slashless tokens, and multi-token lines are dropped fail-safe.
+        let out = parse_pipeline_annotations(
+            "// use this script to compute\n// use standalone\n// use f/lib/ok extra\n",
+        );
+        assert!(out.use_libs.is_empty());
+
+        // Only the leading comment header is scanned.
+        let out = parse_pipeline_annotations("SELECT 1;\n-- use f/lib/late\n");
+        assert!(out.use_libs.is_empty());
+    }
+
     #[test]
     fn on_schedule_marker() {
         // `// on schedule` is marker-only — the binding is the schedule row's
diff --git a/backend/parsers/windmill-parser/src/duckdb_builtins.rs b/backend/parsers/windmill-parser/src/duckdb_builtins.rs
new file mode 100644
index 0000000000..d324fa4c30
--- /dev/null
+++ b/backend/parsers/windmill-parser/src/duckdb_builtins.rs
@@ -0,0 +1,936 @@
+// DuckDB built-in function names (scalar, aggregate, table, macro), used to
+// reject workspace macros that would silently shadow a built-in (DuckDB
+// allows the shadowing without error — verified on 1.5.4). Only
+// identifier-shaped names are listed: workspace macro names are validated
+// to `[a-z_][a-z0-9_]*` before this check, so operator names can't collide.
+//
+// Regenerate on DuckDB upgrades (sort in codepoint order — binary search):
+//   python3 -c "import duckdb,re; print('\\n'.join(sorted(set(r[0] for r in
+//     duckdb.connect().execute(\"SELECT DISTINCT lower(function_name) FROM
+//     duckdb_functions()\").fetchall() if re.fullmatch(r'[a-z_][a-z0-9_]*', r[0])))))"
+
+pub fn is_duckdb_builtin(name: &str) -> bool {
+    DUCKDB_BUILTIN_FUNCTIONS
+        .binary_search(&name.to_ascii_lowercase().as_str())
+        .is_ok()
+}
+
+const DUCKDB_BUILTIN_FUNCTIONS: &[&str] = &[
+    "__internal_compress_integral_ubigint",
+    "__internal_compress_integral_uinteger",
+    "__internal_compress_integral_usmallint",
+    "__internal_compress_integral_utinyint",
+    "__internal_compress_string_hugeint",
+    "__internal_compress_string_ubigint",
+    "__internal_compress_string_uhugeint",
+    "__internal_compress_string_uinteger",
+    "__internal_compress_string_usmallint",
+    "__internal_compress_string_utinyint",
+    "__internal_decompress_integral_bigint",
+    "__internal_decompress_integral_hugeint",
+    "__internal_decompress_integral_integer",
+    "__internal_decompress_integral_smallint",
+    "__internal_decompress_integral_ubigint",
+    "__internal_decompress_integral_uhugeint",
+    "__internal_decompress_integral_uinteger",
+    "__internal_decompress_integral_usmallint",
+    "__internal_decompress_string",
+    "abs",
+    "acos",
+    "acosh",
+    "add",
+    "add_parquet_key",
+    "age",
+    "aggregate",
+    "ago",
+    "alias",
+    "all_profiling_output",
+    "any_value",
+    "apply",
+    "approx_count_distinct",
+    "approx_quantile",
+    "approx_top_k",
+    "arbitrary",
+    "arg_max",
+    "arg_max_null",
+    "arg_max_nulls_last",
+    "arg_min",
+    "arg_min_null",
+    "arg_min_nulls_last",
+    "argmax",
+    "argmin",
+    "array_agg",
+    "array_aggr",
+    "array_aggregate",
+    "array_append",
+    "array_apply",
+    "array_cat",
+    "array_concat",
+    "array_contains",
+    "array_cosine_distance",
+    "array_cosine_similarity",
+    "array_cross_product",
+    "array_distance",
+    "array_distinct",
+    "array_dot_product",
+    "array_extract",
+    "array_filter",
+    "array_grade_up",
+    "array_has",
+    "array_has_all",
+    "array_has_any",
+    "array_indexof",
+    "array_inner_product",
+    "array_intersect",
+    "array_length",
+    "array_negative_dot_product",
+    "array_negative_inner_product",
+    "array_pop_back",
+    "array_pop_front",
+    "array_position",
+    "array_prepend",
+    "array_push_back",
+    "array_push_front",
+    "array_reduce",
+    "array_resize",
+    "array_reverse",
+    "array_reverse_sort",
+    "array_select",
+    "array_slice",
+    "array_sort",
+    "array_to_json",
+    "array_to_string",
+    "array_to_string_comma_default",
+    "array_transform",
+    "array_unique",
+    "array_value",
+    "array_where",
+    "array_zip",
+    "arrow_scan",
+    "arrow_scan_dumb",
+    "ascii",
+    "asin",
+    "asinh",
+    "atan",
+    "atan2",
+    "atanh",
+    "avg",
+    "bar",
+    "base64",
+    "bin",
+    "bit_and",
+    "bit_count",
+    "bit_length",
+    "bit_or",
+    "bit_position",
+    "bit_xor",
+    "bitstring",
+    "bitstring_agg",
+    "bool_and",
+    "bool_or",
+    "can_cast_implicitly",
+    "cardinality",
+    "cast_to_type",
+    "cbrt",
+    "ceil",
+    "ceiling",
+    "century",
+    "char_length",
+    "character_length",
+    "checkpoint",
+    "chr",
+    "col_description",
+    "collations",
+    "combine",
+    "concat",
+    "concat_ws",
+    "constant_or_null",
+    "contains",
+    "copy_database",
+    "corr",
+    "cos",
+    "cosh",
+    "cot",
+    "count",
+    "count_if",
+    "count_star",
+    "countif",
+    "covar_pop",
+    "covar_samp",
+    "create_sort_key",
+    "cume_dist",
+    "current_catalog",
+    "current_connection_id",
+    "current_database",
+    "current_date",
+    "current_localtime",
+    "current_localtimestamp",
+    "current_query",
+    "current_query_id",
+    "current_role",
+    "current_schema",
+    "current_schemas",
+    "current_setting",
+    "current_transaction_id",
+    "current_user",
+    "currval",
+    "damerau_levenshtein",
+    "database_list",
+    "database_size",
+    "date_add",
+    "date_diff",
+    "date_part",
+    "date_sub",
+    "date_trunc",
+    "datediff",
+    "datepart",
+    "datesub",
+    "datetrunc",
+    "day",
+    "dayname",
+    "dayofmonth",
+    "dayofweek",
+    "dayofyear",
+    "days_in_month",
+    "decade",
+    "decode",
+    "degrees",
+    "dense_rank",
+    "disable_checkpoint_on_shutdown",
+    "disable_logging",
+    "disable_object_cache",
+    "disable_optimizer",
+    "disable_print_progress_bar",
+    "disable_profile",
+    "disable_profiling",
+    "disable_progress_bar",
+    "disable_verification",
+    "disable_verify_external",
+    "disable_verify_fetch_row",
+    "disable_verify_parallelism",
+    "disable_verify_serializer",
+    "divide",
+    "duckdb_approx_database_count",
+    "duckdb_columns",
+    "duckdb_connection_count",
+    "duckdb_constraints",
+    "duckdb_coordinate_systems",
+    "duckdb_databases",
+    "duckdb_dependencies",
+    "duckdb_extensions",
+    "duckdb_external_file_cache",
+    "duckdb_functions",
+    "duckdb_indexes",
+    "duckdb_keywords",
+    "duckdb_log_contexts",
+    "duckdb_logs",
+    "duckdb_logs_parsed",
+    "duckdb_memory",
+    "duckdb_optimizers",
+    "duckdb_prepared_statements",
+    "duckdb_profiling_settings",
+    "duckdb_schemas",
+    "duckdb_secret_types",
+    "duckdb_secrets",
+    "duckdb_sequences",
+    "duckdb_settings",
+    "duckdb_table_sample",
+    "duckdb_tables",
+    "duckdb_temporary_files",
+    "duckdb_types",
+    "duckdb_variables",
+    "duckdb_views",
+    "editdist3",
+    "element_at",
+    "enable_checkpoint_on_shutdown",
+    "enable_logging",
+    "enable_object_cache",
+    "enable_optimizer",
+    "enable_print_progress_bar",
+    "enable_profile",
+    "enable_profiling",
+    "enable_progress_bar",
+    "enable_verification",
+    "encode",
+    "ends_with",
+    "entropy",
+    "enum_code",
+    "enum_first",
+    "enum_last",
+    "enum_range",
+    "enum_range_boundary",
+    "epoch",
+    "epoch_ms",
+    "epoch_ns",
+    "epoch_us",
+    "equi_width_bins",
+    "era",
+    "error",
+    "even",
+    "exp",
+    "extension_versions",
+    "factorial",
+    "favg",
+    "fdiv",
+    "fill",
+    "filter",
+    "finalize",
+    "first",
+    "first_value",
+    "flatten",
+    "floor",
+    "fmod",
+    "force_checkpoint",
+    "format",
+    "format_bytes",
+    "format_pg_type",
+    "format_type",
+    "formatreadabledecimalsize",
+    "formatreadablesize",
+    "from_base64",
+    "from_binary",
+    "from_hex",
+    "from_json",
+    "from_json_strict",
+    "fsum",
+    "functions",
+    "gamma",
+    "gcd",
+    "gen_random_uuid",
+    "generate_series",
+    "generate_subscripts",
+    "geomean",
+    "geometric_mean",
+    "get_bit",
+    "get_block_size",
+    "get_current_time",
+    "get_current_timestamp",
+    "get_type",
+    "getvariable",
+    "glob",
+    "grade_up",
+    "greatest",
+    "greatest_common_divisor",
+    "group_concat",
+    "hamming",
+    "has_any_column_privilege",
+    "has_column_privilege",
+    "has_database_privilege",
+    "has_foreign_data_wrapper_privilege",
+    "has_function_privilege",
+    "has_language_privilege",
+    "has_schema_privilege",
+    "has_sequence_privilege",
+    "has_server_privilege",
+    "has_table_privilege",
+    "has_tablespace_privilege",
+    "hash",
+    "hex",
+    "histogram",
+    "histogram_exact",
+    "histogram_values",
+    "hour",
+    "icu_calendar_names",
+    "icu_collate_af",
+    "icu_collate_am",
+    "icu_collate_ar",
+    "icu_collate_ar_sa",
+    "icu_collate_as",
+    "icu_collate_az",
+    "icu_collate_be",
+    "icu_collate_bg",
+    "icu_collate_bn",
+    "icu_collate_bo",
+    "icu_collate_br",
+    "icu_collate_bs",
+    "icu_collate_ca",
+    "icu_collate_ceb",
+    "icu_collate_chr",
+    "icu_collate_cs",
+    "icu_collate_cy",
+    "icu_collate_da",
+    "icu_collate_de",
+    "icu_collate_de_at",
+    "icu_collate_dsb",
+    "icu_collate_dz",
+    "icu_collate_ee",
+    "icu_collate_el",
+    "icu_collate_en",
+    "icu_collate_en_us",
+    "icu_collate_eo",
+    "icu_collate_es",
+    "icu_collate_et",
+    "icu_collate_fa",
+    "icu_collate_fa_af",
+    "icu_collate_ff",
+    "icu_collate_fi",
+    "icu_collate_fil",
+    "icu_collate_fo",
+    "icu_collate_fr",
+    "icu_collate_fr_ca",
+    "icu_collate_fy",
+    "icu_collate_ga",
+    "icu_collate_gl",
+    "icu_collate_gu",
+    "icu_collate_ha",
+    "icu_collate_haw",
+    "icu_collate_he",
+    "icu_collate_he_il",
+    "icu_collate_hi",
+    "icu_collate_hr",
+    "icu_collate_hsb",
+    "icu_collate_hu",
+    "icu_collate_hy",
+    "icu_collate_id",
+    "icu_collate_id_id",
+    "icu_collate_ig",
+    "icu_collate_is",
+    "icu_collate_it",
+    "icu_collate_ja",
+    "icu_collate_ka",
+    "icu_collate_kk",
+    "icu_collate_kl",
+    "icu_collate_km",
+    "icu_collate_kn",
+    "icu_collate_ko",
+    "icu_collate_kok",
+    "icu_collate_ku",
+    "icu_collate_ky",
+    "icu_collate_lb",
+    "icu_collate_lij",
+    "icu_collate_lkt",
+    "icu_collate_ln",
+    "icu_collate_lo",
+    "icu_collate_lt",
+    "icu_collate_lv",
+    "icu_collate_mk",
+    "icu_collate_ml",
+    "icu_collate_mn",
+    "icu_collate_mr",
+    "icu_collate_ms",
+    "icu_collate_mt",
+    "icu_collate_my",
+    "icu_collate_nb",
+    "icu_collate_nb_no",
+    "icu_collate_ne",
+    "icu_collate_nl",
+    "icu_collate_nn",
+    "icu_collate_noaccent",
+    "icu_collate_nso",
+    "icu_collate_om",
+    "icu_collate_or",
+    "icu_collate_pa",
+    "icu_collate_pa_in",
+    "icu_collate_pl",
+    "icu_collate_ps",
+    "icu_collate_pt",
+    "icu_collate_ro",
+    "icu_collate_ru",
+    "icu_collate_sa",
+    "icu_collate_se",
+    "icu_collate_si",
+    "icu_collate_sk",
+    "icu_collate_sl",
+    "icu_collate_smn",
+    "icu_collate_sq",
+    "icu_collate_sr",
+    "icu_collate_sr_ba",
+    "icu_collate_sr_me",
+    "icu_collate_sr_rs",
+    "icu_collate_st",
+    "icu_collate_sv",
+    "icu_collate_sw",
+    "icu_collate_ta",
+    "icu_collate_te",
+    "icu_collate_th",
+    "icu_collate_tk",
+    "icu_collate_tn",
+    "icu_collate_to",
+    "icu_collate_tr",
+    "icu_collate_ug",
+    "icu_collate_uk",
+    "icu_collate_ur",
+    "icu_collate_uz",
+    "icu_collate_vi",
+    "icu_collate_wae",
+    "icu_collate_wo",
+    "icu_collate_xh",
+    "icu_collate_yi",
+    "icu_collate_yo",
+    "icu_collate_yue",
+    "icu_collate_yue_cn",
+    "icu_collate_zh",
+    "icu_collate_zh_cn",
+    "icu_collate_zh_hk",
+    "icu_collate_zh_mo",
+    "icu_collate_zh_sg",
+    "icu_collate_zh_tw",
+    "icu_collate_zu",
+    "icu_sort_key",
+    "ilike_escape",
+    "import_database",
+    "in_search_path",
+    "inet_client_addr",
+    "inet_client_port",
+    "inet_server_addr",
+    "inet_server_port",
+    "instr",
+    "is_histogram_other_bin",
+    "isfinite",
+    "isinf",
+    "isnan",
+    "isodow",
+    "isoyear",
+    "jaccard",
+    "jaro_similarity",
+    "jaro_winkler_similarity",
+    "json",
+    "json_array",
+    "json_array_length",
+    "json_contains",
+    "json_deserialize_sql",
+    "json_each",
+    "json_execute_serialized_sql",
+    "json_exists",
+    "json_extract",
+    "json_extract_path",
+    "json_extract_path_text",
+    "json_extract_string",
+    "json_group_array",
+    "json_group_object",
+    "json_group_structure",
+    "json_keys",
+    "json_merge_patch",
+    "json_object",
+    "json_pretty",
+    "json_quote",
+    "json_serialize_plan",
+    "json_serialize_sql",
+    "json_structure",
+    "json_transform",
+    "json_transform_strict",
+    "json_tree",
+    "json_type",
+    "json_valid",
+    "json_value",
+    "julian",
+    "kahan_sum",
+    "kurtosis",
+    "kurtosis_pop",
+    "lag",
+    "last",
+    "last_day",
+    "last_value",
+    "lcase",
+    "lcm",
+    "lead",
+    "least",
+    "least_common_multiple",
+    "left",
+    "left_grapheme",
+    "len",
+    "length",
+    "length_grapheme",
+    "levenshtein",
+    "lgamma",
+    "like_escape",
+    "list",
+    "list_aggr",
+    "list_aggregate",
+    "list_any_value",
+    "list_append",
+    "list_apply",
+    "list_approx_count_distinct",
+    "list_avg",
+    "list_bit_and",
+    "list_bit_or",
+    "list_bit_xor",
+    "list_bool_and",
+    "list_bool_or",
+    "list_cat",
+    "list_concat",
+    "list_contains",
+    "list_cosine_distance",
+    "list_cosine_similarity",
+    "list_count",
+    "list_distance",
+    "list_distinct",
+    "list_dot_product",
+    "list_element",
+    "list_entropy",
+    "list_extract",
+    "list_filter",
+    "list_first",
+    "list_grade_up",
+    "list_has",
+    "list_has_all",
+    "list_has_any",
+    "list_histogram",
+    "list_indexof",
+    "list_inner_product",
+    "list_intersect",
+    "list_kurtosis",
+    "list_kurtosis_pop",
+    "list_last",
+    "list_mad",
+    "list_max",
+    "list_median",
+    "list_min",
+    "list_mode",
+    "list_negative_dot_product",
+    "list_negative_inner_product",
+    "list_pack",
+    "list_position",
+    "list_prepend",
+    "list_product",
+    "list_reduce",
+    "list_resize",
+    "list_reverse",
+    "list_reverse_sort",
+    "list_select",
+    "list_sem",
+    "list_skewness",
+    "list_slice",
+    "list_sort",
+    "list_stddev_pop",
+    "list_stddev_samp",
+    "list_string_agg",
+    "list_sum",
+    "list_transform",
+    "list_unique",
+    "list_value",
+    "list_var_pop",
+    "list_var_samp",
+    "list_where",
+    "list_zip",
+    "listagg",
+    "ln",
+    "log",
+    "log10",
+    "log2",
+    "lower",
+    "lpad",
+    "ltrim",
+    "mad",
+    "make_date",
+    "make_time",
+    "make_timestamp",
+    "make_timestamp_ms",
+    "make_timestamp_ns",
+    "make_timestamptz",
+    "make_type",
+    "map",
+    "map_concat",
+    "map_contains",
+    "map_contains_entry",
+    "map_contains_value",
+    "map_entries",
+    "map_extract",
+    "map_extract_value",
+    "map_from_entries",
+    "map_keys",
+    "map_to_pg_oid",
+    "map_values",
+    "max",
+    "max_by",
+    "md5",
+    "md5_number",
+    "md5_number_lower",
+    "md5_number_upper",
+    "mean",
+    "median",
+    "metadata_info",
+    "microsecond",
+    "millennium",
+    "millisecond",
+    "min",
+    "min_by",
+    "minute",
+    "mismatches",
+    "mod",
+    "mode",
+    "month",
+    "monthname",
+    "multiply",
+    "nanosecond",
+    "nextafter",
+    "nextval",
+    "nfc_normalize",
+    "normalized_interval",
+    "not_ilike_escape",
+    "not_like_escape",
+    "now",
+    "nth_value",
+    "ntile",
+    "nullif",
+    "obj_description",
+    "octet_length",
+    "ord",
+    "pandas_scan",
+    "parquet_bloom_probe",
+    "parquet_file_metadata",
+    "parquet_full_metadata",
+    "parquet_kv_metadata",
+    "parquet_metadata",
+    "parquet_scan",
+    "parquet_schema",
+    "parse_dirname",
+    "parse_dirpath",
+    "parse_duckdb_log_message",
+    "parse_filename",
+    "parse_formatted_bytes",
+    "parse_path",
+    "percent_rank",
+    "pg_collation_is_visible",
+    "pg_conf_load_time",
+    "pg_conversion_is_visible",
+    "pg_function_is_visible",
+    "pg_get_constraintdef",
+    "pg_get_expr",
+    "pg_get_viewdef",
+    "pg_has_role",
+    "pg_is_other_temp_schema",
+    "pg_my_temp_schema",
+    "pg_opclass_is_visible",
+    "pg_operator_is_visible",
+    "pg_opfamily_is_visible",
+    "pg_postmaster_start_time",
+    "pg_size_pretty",
+    "pg_sleep",
+    "pg_table_is_visible",
+    "pg_timezone_names",
+    "pg_ts_config_is_visible",
+    "pg_ts_dict_is_visible",
+    "pg_ts_parser_is_visible",
+    "pg_ts_template_is_visible",
+    "pg_type_is_visible",
+    "pg_typeof",
+    "pi",
+    "platform",
+    "position",
+    "pow",
+    "power",
+    "pragma_collations",
+    "pragma_database_size",
+    "pragma_metadata_info",
+    "pragma_platform",
+    "pragma_show",
+    "pragma_storage_info",
+    "pragma_table_info",
+    "pragma_user_agent",
+    "pragma_version",
+    "prefix",
+    "printf",
+    "product",
+    "python_map_function",
+    "quantile",
+    "quantile_cont",
+    "quantile_disc",
+    "quarter",
+    "query",
+    "query_table",
+    "radians",
+    "random",
+    "range",
+    "rank",
+    "rank_dense",
+    "read_blob",
+    "read_csv",
+    "read_csv_auto",
+    "read_duckdb",
+    "read_json",
+    "read_json_auto",
+    "read_json_objects",
+    "read_json_objects_auto",
+    "read_ndjson",
+    "read_ndjson_auto",
+    "read_ndjson_objects",
+    "read_parquet",
+    "read_text",
+    "reduce",
+    "regexp_escape",
+    "regexp_extract",
+    "regexp_extract_all",
+    "regexp_full_match",
+    "regexp_matches",
+    "regexp_replace",
+    "regexp_split_to_array",
+    "regexp_split_to_table",
+    "regr_avgx",
+    "regr_avgy",
+    "regr_count",
+    "regr_intercept",
+    "regr_r2",
+    "regr_slope",
+    "regr_sxx",
+    "regr_sxy",
+    "regr_syy",
+    "remap_struct",
+    "repeat",
+    "repeat_row",
+    "replace",
+    "replace_type",
+    "reservoir_quantile",
+    "reverse",
+    "right",
+    "right_grapheme",
+    "round",
+    "round_even",
+    "roundbankers",
+    "row",
+    "row_number",
+    "row_to_json",
+    "rpad",
+    "rtrim",
+    "second",
+    "sem",
+    "seq_scan",
+    "session_user",
+    "set_bit",
+    "setseed",
+    "sha1",
+    "sha256",
+    "shobj_description",
+    "show",
+    "show_databases",
+    "show_tables",
+    "show_tables_expanded",
+    "sign",
+    "signbit",
+    "sin",
+    "sinh",
+    "skewness",
+    "sleep_ms",
+    "sniff_csv",
+    "split",
+    "split_part",
+    "sqrt",
+    "st_asbinary",
+    "st_astext",
+    "st_aswkb",
+    "st_aswkt",
+    "st_crs",
+    "st_geomfromwkb",
+    "st_intersects_extent",
+    "st_setcrs",
+    "starts_with",
+    "stats",
+    "stddev",
+    "stddev_pop",
+    "stddev_samp",
+    "storage_info",
+    "str_split",
+    "str_split_regex",
+    "strftime",
+    "string_agg",
+    "string_split",
+    "string_split_regex",
+    "string_to_array",
+    "strip_accents",
+    "strlen",
+    "strpos",
+    "strptime",
+    "struct_concat",
+    "struct_contains",
+    "struct_extract",
+    "struct_extract_at",
+    "struct_has",
+    "struct_indexof",
+    "struct_insert",
+    "struct_keys",
+    "struct_pack",
+    "struct_position",
+    "struct_update",
+    "struct_values",
+    "substr",
+    "substring",
+    "substring_grapheme",
+    "subtract",
+    "suffix",
+    "sum",
+    "sum_no_overflow",
+    "sumkahan",
+    "summary",
+    "switch",
+    "table_info",
+    "tan",
+    "tanh",
+    "test_all_types",
+    "test_vector_types",
+    "time_bucket",
+    "timetz_byte_comparable",
+    "timezone",
+    "timezone_hour",
+    "timezone_minute",
+    "to_base",
+    "to_base64",
+    "to_binary",
+    "to_centuries",
+    "to_days",
+    "to_decades",
+    "to_hex",
+    "to_hours",
+    "to_json",
+    "to_microseconds",
+    "to_millennia",
+    "to_milliseconds",
+    "to_minutes",
+    "to_months",
+    "to_quarters",
+    "to_seconds",
+    "to_timestamp",
+    "to_weeks",
+    "to_years",
+    "today",
+    "transaction_timestamp",
+    "translate",
+    "trim",
+    "trunc",
+    "truncate_duckdb_logs",
+    "try_strptime",
+    "txid_current",
+    "typeof",
+    "ucase",
+    "unbin",
+    "unhex",
+    "unicode",
+    "union_extract",
+    "union_tag",
+    "union_value",
+    "unnest",
+    "unpivot_list",
+    "upper",
+    "url_decode",
+    "url_encode",
+    "user",
+    "user_agent",
+    "uuid",
+    "uuid_extract_timestamp",
+    "uuid_extract_version",
+    "uuidv4",
+    "uuidv7",
+    "var_pop",
+    "var_samp",
+    "variance",
+    "variant_bytes_to_variant",
+    "variant_extract",
+    "variant_normalize",
+    "variant_to_parquet_variant",
+    "variant_typeof",
+    "vector_type",
+    "verify_external",
+    "verify_fetch_row",
+    "verify_parallelism",
+    "verify_serializer",
+    "version",
+    "wavg",
+    "week",
+    "weekday",
+    "weekofyear",
+    "weighted_avg",
+    "which_secret",
+    "write_log",
+    "xor",
+    "year",
+    "yearweek",
+];
diff --git a/backend/parsers/windmill-parser/src/duckdb_macros.rs b/backend/parsers/windmill-parser/src/duckdb_macros.rs
new file mode 100644
index 0000000000..20438d23d1
--- /dev/null
+++ b/backend/parsers/windmill-parser/src/duckdb_macros.rs
@@ -0,0 +1,591 @@
+//! Workspace DuckDB macro libraries (`// macros` annotation).
+//!
+//! A macro-library script's body is `CREATE [OR REPLACE] [TEMP] MACRO`
+//! statements plus plain setup (ATTACH/INSTALL/LOAD/SET/PRAGMA). At deploy the
+//! macros are parsed into the `macro_definition` registry; at job time the
+//! worker injects the (transitively) called ones into consumer scripts as
+//! `CREATE OR REPLACE TEMP MACRO` blocks. Everything is stored and re-emitted
+//! **verbatim** (params, body) — no AST round-trip — so any expression DuckDB
+//! accepts survives unchanged.
+//!
+//! DuckDB bind-checks macro bodies at CREATE time (macro→macro and table
+//! references alike), so injected definitions must be emitted in dependency
+//! order — hence `topo_order_macros` — and after the consumer's ATTACHes.
+
+use std::collections::{BTreeMap, BTreeSet, HashSet};
+
+use crate::sql_materialize::{classify_block, split_statements, BlockClass};
+
+#[derive(Debug, Clone, PartialEq)]
+pub struct ParsedMacro {
+    /// Lowercased bare identifier (DuckDB identifiers are case-insensitive
+    /// unquoted; qualified / quoted names are rejected at parse).
+    pub name: String,
+    /// Verbatim text inside the parameter parens (may be empty).
+    pub params: String,
+    /// Verbatim text after `AS [TABLE]`, without the trailing `;`.
+    pub body: String,
+    pub is_table: bool,
+}
+
+#[derive(Debug, Clone, PartialEq)]
+pub enum LibStatement {
+    Macro(ParsedMacro),
+    /// A non-macro statement allowed in a library: setup-class only
+    /// (ATTACH/INSTALL/LOAD/SET/PRAGMA/USE/CREATE TEMP …). Re-emitted verbatim
+    /// ahead of the macro definitions when the lib is injected via `// use`.
+    Setup(String),
+}
+
+/// Statement text for injecting one macro into a consumer job. Always
+/// TEMP (session-scoped — no catalog writes) and OR REPLACE (idempotent).
+pub fn macro_create_statement(name: &str, params: &str, is_table: bool, body: &str) -> String {
+    format!(
+        "CREATE OR REPLACE TEMP MACRO {}({}) AS {}{};",
+        name,
+        params,
+        if is_table { "TABLE " } else { "" },
+        body
+    )
+}
+
+fn is_ident(s: &str) -> bool {
+    let mut chars = s.chars();
+    matches!(chars.next(), Some(c) if c.is_ascii_alphabetic() || c == '_')
+        && chars.all(|c| c.is_ascii_alphanumeric() || c == '_')
+}
+
+// Case-insensitive whole-word prefix strip (whitespace-bounded), returning the
+// remainder with leading whitespace trimmed. `get` (not slicing) so a
+// multi-byte char straddling the boundary yields None instead of panicking.
+fn strip_kw<'a>(s: &'a str, kw: &str) -> Option<&'a str> {
+    let prefix = s.get(..kw.len())?;
+    if prefix.eq_ignore_ascii_case(kw) {
+        let after = &s[kw.len()..];
+        if after.is_empty() || after.starts_with(|c: char| c.is_whitespace()) {
+            return Some(after.trim_start());
+        }
+    }
+    None
+}
+
+/// Parse one (comment-free, `;`-less) statement as a CREATE MACRO. Returns
+/// `Ok(None)` when the statement is not macro-shaped at all (caller decides
+/// whether it is acceptable setup), `Err` when it is macro-shaped but invalid.
+fn parse_create_macro(stmt: &str) -> Result<Option<ParsedMacro>, String> {
+    let Some(mut rest) = strip_kw(stmt.trim(), "create") else {
+        return Ok(None);
+    };
+    if let Some(r) = strip_kw(rest, "or") {
+        rest = strip_kw(r, "replace").ok_or("expected REPLACE after CREATE OR")?;
+    }
+    if let Some(r) = strip_kw(rest, "temp").or_else(|| strip_kw(rest, "temporary")) {
+        rest = r;
+    }
+    // `FUNCTION` is DuckDB's alias for `MACRO`.
+    let Some(rest) = strip_kw(rest, "macro").or_else(|| strip_kw(rest, "function")) else {
+        return Ok(None);
+    };
+
+    let name_end = rest
+        .find(|c: char| c.is_whitespace() || c == '(')
+        .unwrap_or(rest.len());
+    let raw_name = &rest[..name_end];
+    if raw_name.is_empty() {
+        return Err("CREATE MACRO: missing macro name".to_string());
+    }
+    if raw_name.contains('.') || raw_name.contains('"') || !is_ident(raw_name) {
+        return Err(format!(
+            "macro name `{}` must be a plain unqualified identifier ([A-Za-z_][A-Za-z0-9_]*) in v1",
+            raw_name
+        ));
+    }
+    let name = raw_name.to_ascii_lowercase();
+
+    let rest = rest[name_end..].trim_start();
+    if !rest.starts_with('(') {
+        return Err(format!(
+            "macro `{}`: expected a parenthesized parameter list after the name",
+            name
+        ));
+    }
+    // Balanced-paren scan for the verbatim param list. The statement comes
+    // from `split_statements` so comments are gone, but strings may contain
+    // parens (e.g. a default value) — skip quoted spans.
+    let bytes = rest.as_bytes();
+    let mut depth = 0usize;
+    let mut i = 0usize;
+    let mut close = None;
+    while i < bytes.len() {
+        match bytes[i] {
+            b'(' => depth += 1,
+            b')' => {
+                depth -= 1;
+                if depth == 0 {
+                    close = Some(i);
+                    break;
+                }
+            }
+            q @ (b'\'' | b'"') => {
+                i += 1;
+                while i < bytes.len() && bytes[i] != q {
+                    i += 1;
+                }
+            }
+            _ => {}
+        }
+        i += 1;
+    }
+    let Some(close) = close else {
+        return Err(format!(
+            "macro `{}`: unbalanced parameter parentheses",
+            name
+        ));
+    };
+    let params = rest[1..close].trim().to_string();
+
+    let after_params = rest[close + 1..].trim_start();
+    let Some(mut body) = strip_kw(after_params, "as") else {
+        return Err(format!(
+            "macro `{}`: expected AS after the parameter list",
+            name
+        ));
+    };
+    let is_table = match strip_kw(body, "table") {
+        Some(r) => {
+            body = r;
+            true
+        }
+        None => false,
+    };
+    let body = body.trim().trim_end_matches(';').trim_end().to_string();
+    if body.is_empty() {
+        return Err(format!("macro `{}`: empty body", name));
+    }
+    Ok(Some(ParsedMacro { name, params, body, is_table }))
+}
+
+fn stmt_head(stmt: &str) -> String {
+    stmt.split_whitespace()
+        .take(4)
+        .collect::<Vec<_>>()
+        .join(" ")
+}
+
+/// Managed ATTACH forms (`ducklake://…`, `datatable://…`, resource URIs) are
+/// rewritten by the worker's transform pass — which `// use`-injected lib
+/// setup bypasses — so a library may only use plain, self-contained ATTACHes.
+pub fn is_managed_attach(stmt: &str) -> bool {
+    let s = stmt.trim();
+    if strip_kw(s, "attach").is_none() {
+        return false;
+    }
+    let lower = s.to_ascii_lowercase();
+    [
+        "'ducklake:",
+        "'datatable:",
+        "'windmill:",
+        "'$res:",
+        "\"ducklake:",
+        "\"datatable:",
+        "\"windmill:",
+        "\"$res:",
+    ]
+    .iter()
+    .any(|p| lower.contains(p))
+}
+
+/// Parse a `// macros` library body. Statements are either macro definitions
+/// or setup; anything else is an error (user-facing message).
+pub fn parse_macro_library(sql: &str) -> Result<Vec<LibStatement>, String> {
+    let mut out = Vec::new();
+    for stmt in split_statements(sql) {
+        match parse_create_macro(&stmt)? {
+            Some(m) => out.push(LibStatement::Macro(m)),
+            None => match classify_block(&stmt) {
+                BlockClass::Setup => {
+                    if is_managed_attach(&stmt) {
+                        return Err(format!(
+                            "a `// macros` library cannot use managed ATTACH forms \
+                             (ducklake://, datatable://, resource URIs) in v1 — its setup is \
+                             injected verbatim into consumers, bypassing the ATTACH rewrite: `{}`",
+                            stmt_head(&stmt)
+                        ));
+                    }
+                    out.push(LibStatement::Setup(stmt))
+                }
+                _ => {
+                    return Err(format!(
+                        "a `// macros` library may only contain CREATE [OR REPLACE] MACRO \
+                         statements plus setup (ATTACH/INSTALL/LOAD/SET/PRAGMA); found: `{}`",
+                        stmt_head(&stmt)
+                    ))
+                }
+            },
+        }
+    }
+    Ok(out)
+}
+
+/// Whether the statement is macro-definition-shaped (`CREATE [OR REPLACE]
+/// [TEMP] MACRO|FUNCTION …`), regardless of whether the rest of the header
+/// parses. Used by the worker's injection splice to keep injected blocks
+/// *after* a script's own leading definitions (an injected body may only call
+/// a local macro once the local CREATE has run — DuckDB binds at CREATE).
+pub fn is_macro_definition(stmt: &str) -> bool {
+    let Some(mut rest) = strip_kw(stmt.trim(), "create") else {
+        return false;
+    };
+    if let Some(r) = strip_kw(rest, "or") {
+        let Some(r2) = strip_kw(r, "replace") else {
+            return false;
+        };
+        rest = r2;
+    }
+    if let Some(r) = strip_kw(rest, "temp").or_else(|| strip_kw(rest, "temporary")) {
+        rest = r;
+    }
+    strip_kw(rest, "macro")
+        .or_else(|| strip_kw(rest, "function"))
+        .is_some()
+}
+
+/// Parse a single macro-definition statement (`CREATE [OR REPLACE] [TEMP]
+/// MACRO …`). `None` when the statement isn't macro-shaped or its header is
+/// malformed — callers using definitions as placement anchors skip those
+/// (they fail at execution regardless).
+pub fn parse_macro_definition(stmt: &str) -> Option<ParsedMacro> {
+    parse_create_macro(stmt).ok().flatten()
+}
+
+/// Names of macros the given statements define themselves (`CREATE [OR
+/// REPLACE] [TEMP] MACRO …`). A consumer's own definition is authoritative
+/// over a same-named workspace macro — the worker subtracts these before
+/// planning injection, so deploying a library can never silently replace a
+/// script's local macro. Malformed macro-shaped statements are skipped (they
+/// fail at execution regardless).
+pub fn locally_defined_macro_names(statements: &[String]) -> HashSet<String> {
+    statements
+        .iter()
+        .filter_map(|s| parse_create_macro(s).ok().flatten().map(|m| m.name))
+        .collect()
+}
+
+/// Names from `names` that `sql` calls: an identifier token immediately
+/// followed by `(` (after optional whitespace), not `.`-qualified. Scans the
+/// comment-stripped statements; string-literal contents are skipped. Matching
+/// is deliberately lexical — over-matching only injects an unused TEMP macro.
+pub fn detect_macro_calls(sql: &str, names: &HashSet<String>) -> HashSet<String> {
+    let mut found = HashSet::new();
+    if names.is_empty() {
+        return found;
+    }
+    for stmt in split_statements(sql) {
+        let bytes = stmt.as_bytes();
+        let n = bytes.len();
+        let mut i = 0usize;
+        let mut prev: Option<u8> = None;
+        while i < n {
+            let c = bytes[i];
+            // skip quoted spans ('' escape for single quotes is handled by
+            // the fact that the reopened quote just starts another skip)
+            if c == b'\'' || c == b'"' {
+                let q = c;
+                i += 1;
+                while i < n && bytes[i] != q {
+                    i += 1;
+                }
+                i += 1;
+                prev = Some(q);
+                continue;
+            }
+            let is_ident_start = c.is_ascii_alphabetic() || c == b'_';
+            let prev_blocks =
+                matches!(prev, Some(p) if p == b'.' || p.is_ascii_alphanumeric() || p == b'_');
+            if is_ident_start && !prev_blocks {
+                let start = i;
+                while i < n && (bytes[i].is_ascii_alphanumeric() || bytes[i] == b'_') {
+                    i += 1;
+                }
+                let word = stmt[start..i].to_ascii_lowercase();
+                let mut j = i;
+                while j < n && (bytes[j] as char).is_whitespace() {
+                    j += 1;
+                }
+                if j < n && bytes[j] == b'(' && names.contains(&word) {
+                    found.insert(word);
+                }
+                prev = Some(bytes[i - 1]);
+                continue;
+            }
+            prev = Some(c);
+            i += 1;
+        }
+    }
+    found
+}
+
+/// Order `selected` macro names so every macro comes after the macros its
+/// body calls (Kahn's algorithm, name-sorted ties for determinism). `defs`
+/// maps each selected name to its body. Errors on a dependency cycle (only
+/// reachable via cross-library deploy interleaving — DuckDB itself could
+/// never have bound a cycle).
+pub fn topo_order_macros(
+    selected: &HashSet<String>,
+    defs: &BTreeMap<String, String>,
+) -> Result<Vec<String>, String> {
+    let all: HashSet<String> = selected.clone();
+    // deps[m] = selected macros m's body calls; rev[d] = macros depending on d
+    let mut deps: BTreeMap<String, BTreeSet<String>> = BTreeMap::new();
+    let mut rev: BTreeMap<String, BTreeSet<String>> = BTreeMap::new();
+    for name in selected {
+        let body = defs
+            .get(name)
+            .ok_or_else(|| format!("macro `{}` has no definition", name))?;
+        let mut called = detect_macro_calls(body, &all);
+        called.remove(name); // ignore self-recursion (DuckDB rejects it at CREATE anyway)
+        for d in &called {
+            rev.entry(d.clone()).or_default().insert(name.clone());
+        }
+        deps.insert(name.clone(), called.into_iter().collect());
+    }
+    let mut ready: BTreeSet<String> = deps
+        .iter()
+        .filter(|(_, d)| d.is_empty())
+        .map(|(n, _)| n.clone())
+        .collect();
+    let mut out = Vec::with_capacity(selected.len());
+    while let Some(name) = ready.iter().next().cloned() {
+        ready.remove(&name);
+        out.push(name.clone());
+        if let Some(dependents) = rev.get(&name) {
+            for dep in dependents.clone() {
+                let d = deps.get_mut(&dep).unwrap();
+                d.remove(&name);
+                if d.is_empty() {
+                    ready.insert(dep);
+                }
+            }
+        }
+        deps.remove(&name);
+    }
+    if !deps.is_empty() {
+        let cycle: Vec<String> = deps.keys().cloned().collect();
+        return Err(format!(
+            "macro dependency cycle involving: {}",
+            cycle.join(", ")
+        ));
+    }
+    Ok(out)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn names(list: &[&str]) -> HashSet<String> {
+        list.iter().map(|s| s.to_string()).collect()
+    }
+
+    #[test]
+    fn parses_scalar_macro() {
+        let lib =
+            parse_macro_library("CREATE MACRO surrogate_key(a, b) AS md5(concat_ws('||', a, b));")
+                .unwrap();
+        assert_eq!(
+            lib,
+            vec![LibStatement::Macro(ParsedMacro {
+                name: "surrogate_key".into(),
+                params: "a, b".into(),
+                body: "md5(concat_ws('||', a, b))".into(),
+                is_table: false,
+            })]
+        );
+    }
+
+    #[test]
+    fn parses_table_macro_or_replace_temp_and_function_alias() {
+        let lib = parse_macro_library(
+            "CREATE OR REPLACE TEMP MACRO top_n(t_max) AS TABLE SELECT * FROM t WHERE x <= t_max;\n\
+             create function dbl(a) as a * 2;",
+        )
+        .unwrap();
+        match &lib[0] {
+            LibStatement::Macro(m) => {
+                assert_eq!(m.name, "top_n");
+                assert!(m.is_table);
+                assert_eq!(m.body, "SELECT * FROM t WHERE x <= t_max");
+            }
+            other => panic!("expected macro, got {:?}", other),
+        }
+        match &lib[1] {
+            LibStatement::Macro(m) => {
+                assert_eq!(m.name, "dbl");
+                assert!(!m.is_table);
+            }
+            other => panic!("expected macro, got {:?}", other),
+        }
+    }
+
+    #[test]
+    fn parses_default_params_and_nested_parens() {
+        let lib = parse_macro_library(
+            "CREATE MACRO safe_div(a, b, fallback := (0)) AS CASE WHEN b = 0 THEN fallback ELSE a / b END;",
+        )
+        .unwrap();
+        match &lib[0] {
+            LibStatement::Macro(m) => {
+                assert_eq!(m.params, "a, b, fallback := (0)");
+                assert!(m.body.starts_with("CASE WHEN"));
+            }
+            other => panic!("expected macro, got {:?}", other),
+        }
+    }
+
+    #[test]
+    fn params_with_string_containing_paren() {
+        let lib = parse_macro_library("CREATE MACRO f(sep := '(') AS concat(sep, 'x');").unwrap();
+        match &lib[0] {
+            LibStatement::Macro(m) => assert_eq!(m.params, "sep := '('"),
+            other => panic!("expected macro, got {:?}", other),
+        }
+    }
+
+    #[test]
+    fn setup_statements_allowed_and_kept_in_order() {
+        let lib =
+            parse_macro_library("-- a comment\nATTACH 'x.duckdb' AS ext;\nCREATE MACRO m() AS 1;")
+                .unwrap();
+        assert_eq!(lib.len(), 2);
+        assert!(matches!(&lib[0], LibStatement::Setup(s) if s.starts_with("ATTACH")));
+        assert!(matches!(&lib[1], LibStatement::Macro(_)));
+    }
+
+    #[test]
+    fn rejects_non_setup_statements() {
+        let err = parse_macro_library("CREATE MACRO m() AS 1; SELECT 1;").unwrap_err();
+        assert!(err.contains("may only contain"), "{err}");
+        let err = parse_macro_library("CREATE TABLE t(x int);").unwrap_err();
+        assert!(err.contains("may only contain"), "{err}");
+    }
+
+    #[test]
+    fn rejects_managed_attach_setup() {
+        let err =
+            parse_macro_library("ATTACH 'ducklake://analytics' AS lake;\nCREATE MACRO m() AS 1;")
+                .unwrap_err();
+        assert!(err.contains("managed ATTACH"), "{err}");
+    }
+
+    #[test]
+    fn rejects_qualified_and_quoted_names() {
+        assert!(parse_macro_library("CREATE MACRO lake.m(a) AS a;")
+            .unwrap_err()
+            .contains("unqualified"));
+        assert!(parse_macro_library("CREATE MACRO \"weird name\"(a) AS a;").is_err());
+    }
+
+    #[test]
+    fn rejects_missing_params_or_body() {
+        assert!(parse_macro_library("CREATE MACRO m AS 1;").is_err());
+        assert!(parse_macro_library("CREATE MACRO m(a);").is_err());
+        assert!(parse_macro_library("CREATE MACRO m(a) AS ;").is_err());
+    }
+
+    #[test]
+    fn detect_basic_and_word_boundaries() {
+        let ns = names(&["dbl", "avg_x"]);
+        let found = detect_macro_calls("SELECT dbl(1), my_dbl(2), avg_x (3) FROM t", &ns);
+        assert!(found.contains("dbl"));
+        assert!(found.contains("avg_x")); // whitespace before paren ok
+        assert_eq!(found.len(), 2);
+    }
+
+    #[test]
+    fn detect_skips_qualified_strings_and_comments() {
+        let ns = names(&["dbl"]);
+        assert!(detect_macro_calls("SELECT lake.dbl(1)", &ns).is_empty());
+        assert!(detect_macro_calls("SELECT 'dbl(1)'", &ns).is_empty());
+        assert!(detect_macro_calls("-- dbl(1)\nSELECT 1", &ns).is_empty());
+        assert!(detect_macro_calls("SELECT dbl FROM t", &ns).is_empty()); // no call parens
+    }
+
+    #[test]
+    fn detect_case_insensitive_and_table_macro_position() {
+        let ns = names(&["top_n"]);
+        assert!(!detect_macro_calls("SELECT * FROM TOP_N(3)", &ns).is_empty());
+    }
+
+    #[test]
+    fn topo_chain_and_diamond() {
+        let mut defs = BTreeMap::new();
+        defs.insert("a".to_string(), "b(1) + c(2)".to_string());
+        defs.insert("b".to_string(), "d(1)".to_string());
+        defs.insert("c".to_string(), "d(2)".to_string());
+        defs.insert("d".to_string(), "1".to_string());
+        let sel = names(&["a", "b", "c", "d"]);
+        let order = topo_order_macros(&sel, &defs).unwrap();
+        let pos = |n: &str| order.iter().position(|x| x == n).unwrap();
+        assert!(pos("d") < pos("b"));
+        assert!(pos("d") < pos("c"));
+        assert!(pos("b") < pos("a"));
+        assert!(pos("c") < pos("a"));
+    }
+
+    #[test]
+    fn topo_cycle_errors() {
+        let mut defs = BTreeMap::new();
+        defs.insert("a".to_string(), "b(1)".to_string());
+        defs.insert("b".to_string(), "a(1)".to_string());
+        let err = topo_order_macros(&names(&["a", "b"]), &defs).unwrap_err();
+        assert!(err.contains("cycle"), "{err}");
+    }
+
+    #[test]
+    fn non_ascii_body_survives_verbatim() {
+        // Regression: the statement splitter must not Latin-1-mojibake
+        // multi-byte text — macro bodies are persisted and re-executed.
+        let lib = parse_macro_library("CREATE MACRO greet(a) AS a || ' café ☕';").unwrap();
+        match &lib[0] {
+            LibStatement::Macro(m) => assert_eq!(m.body, "a || ' café ☕'"),
+            other => panic!("expected macro, got {:?}", other),
+        }
+    }
+
+    #[test]
+    fn non_ascii_garbage_errors_instead_of_panicking() {
+        // Regression: keyword matching must not byte-slice across a char
+        // boundary (panicked on inputs like this before).
+        assert!(parse_macro_library("abcé foo;").is_err());
+        assert!(parse_macro_library("créate macro m(a) AS a;").is_err());
+    }
+
+    #[test]
+    fn locally_defined_names_extracted() {
+        let blocks = vec![
+            "ATTACH 'x' AS a;".to_string(),
+            "CREATE TEMP MACRO dbl(a) AS a * 2;".to_string(),
+            "SELECT dbl(2);".to_string(),
+        ];
+        let local = locally_defined_macro_names(&blocks);
+        assert!(local.contains("dbl"));
+        assert_eq!(local.len(), 1);
+    }
+
+    #[test]
+    fn create_statement_roundtrip() {
+        assert_eq!(
+            macro_create_statement("m", "a, b := 1", true, "SELECT a + b"),
+            "CREATE OR REPLACE TEMP MACRO m(a, b := 1) AS TABLE SELECT a + b;"
+        );
+    }
+
+    #[test]
+    fn builtin_lookup() {
+        use crate::duckdb_builtins::is_duckdb_builtin;
+        assert!(is_duckdb_builtin("concat"));
+        assert!(is_duckdb_builtin("CONCAT"));
+        assert!(is_duckdb_builtin("read_csv"));
+        assert!(!is_duckdb_builtin("surrogate_key"));
+    }
+}
diff --git a/backend/parsers/windmill-parser/src/lib.rs b/backend/parsers/windmill-parser/src/lib.rs
index 19bc5602cd..4270edcc79 100644
--- a/backend/parsers/windmill-parser/src/lib.rs
+++ b/backend/parsers/windmill-parser/src/lib.rs
@@ -13,6 +13,8 @@ use serde::Serialize;
 use serde_json::Value;
 
 pub mod asset_parser;
+pub mod duckdb_builtins;
+pub mod duckdb_macros;
 pub mod sql_materialize;
 
 /// S3 output format for SQL queries (moved here to avoid pulling sqlx into WASM via windmill-types)
diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index c7c292a672..e40cd0f057 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -87,28 +87,32 @@ impl WrapError {
 pub fn split_statements(sql: &str) -> Vec<String> {
     let mut out = Vec::new();
     let mut cur = String::new();
-    let bytes = sql.as_bytes();
+    // Char-wise, not byte-wise: the emitted strings are re-executed
+    // (materialize codegen) and persisted (macro registry), so a Latin-1
+    // `bytes[i] as char` decode would corrupt any multi-byte text inside
+    // statements. All delimiters are ASCII — split positions are unaffected.
+    let chars: Vec<char> = sql.chars().collect();
     let mut i = 0;
-    let n = bytes.len();
+    let n = chars.len();
     while i < n {
-        let c = bytes[i] as char;
+        let c = chars[i];
         // line comment — `--` (SQL) or `//`. The `//` form is not SQL, but it
         // is how Windmill pipeline annotations (`// materialize`, `// pipeline`,
         // …) are written, and they sit above the SQL in the same script; strip
         // them so they don't pollute the first statement block's classification
         // or the generated setup SQL.
-        if (c == '-' && i + 1 < n && bytes[i + 1] == b'-')
-            || (c == '/' && i + 1 < n && bytes[i + 1] == b'/')
+        if (c == '-' && i + 1 < n && chars[i + 1] == '-')
+            || (c == '/' && i + 1 < n && chars[i + 1] == '/')
         {
-            while i < n && bytes[i] != b'\n' {
+            while i < n && chars[i] != '\n' {
                 i += 1;
             }
             continue;
         }
         // block comment
-        if c == '/' && i + 1 < n && bytes[i + 1] == b'*' {
+        if c == '/' && i + 1 < n && chars[i + 1] == '*' {
             i += 2;
-            while i + 1 < n && !(bytes[i] == b'*' && bytes[i + 1] == b'/') {
+            while i + 1 < n && !(chars[i] == '*' && chars[i + 1] == '/') {
                 i += 1;
             }
             i += 2;
@@ -119,10 +123,10 @@ pub fn split_statements(sql: &str) -> Vec<String> {
             cur.push(c);
             i += 1;
             while i < n {
-                cur.push(bytes[i] as char);
-                if bytes[i] == b'\'' {
+                cur.push(chars[i]);
+                if chars[i] == '\'' {
                     // doubled '' is an escaped quote, stay in string
-                    if i + 1 < n && bytes[i + 1] == b'\'' {
+                    if i + 1 < n && chars[i + 1] == '\'' {
                         cur.push('\'');
                         i += 2;
                         continue;
@@ -139,8 +143,8 @@ pub fn split_statements(sql: &str) -> Vec<String> {
             cur.push(c);
             i += 1;
             while i < n {
-                cur.push(bytes[i] as char);
-                if bytes[i] == b'"' {
+                cur.push(chars[i]);
+                if chars[i] == '"' {
                     i += 1;
                     break;
                 }
diff --git a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
index 97c7d2959c..f7977239c1 100644
--- a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
+++ b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
@@ -48,7 +48,11 @@
 		"expected": {
 			"in_pipeline": true,
 			"asset_triggers": [],
-			"native_triggers": ["kafka", "schedule", "data_upload"],
+			"native_triggers": [
+				"kafka",
+				"schedule",
+				"data_upload"
+			],
 			"partition": null,
 			"freshness": null,
 			"tag": null,
@@ -154,7 +158,10 @@
 			"partition": null,
 			"freshness": null,
 			"tag": null,
-			"retry": { "count": 3, "delay": "5s" }
+			"retry": {
+				"count": 3,
+				"delay": "5s"
+			}
 		}
 	},
 	{
@@ -167,7 +174,10 @@
 			"partition": null,
 			"freshness": null,
 			"tag": null,
-			"retry": { "count": 2, "delay": null }
+			"retry": {
+				"count": 2,
+				"delay": null
+			}
 		}
 	},
 	{
@@ -201,7 +211,9 @@
 		"code": "// pipeline\n// on s3://bucket/daily/{partition}/data.parquet\nexport function main() {}",
 		"expected": {
 			"in_pipeline": true,
-			"asset_triggers": ["s3object:bucket/daily/{partition}/data.parquet"],
+			"asset_triggers": [
+				"s3object:bucket/daily/{partition}/data.parquet"
+			],
 			"native_triggers": [],
 			"partition": null,
 			"freshness": null,
@@ -214,7 +226,9 @@
 		"code": "   -- pipeline\n\t-- on datatable://main/x\nSELECT 1;",
 		"expected": {
 			"in_pipeline": true,
-			"asset_triggers": ["datatable:main/x"],
+			"asset_triggers": [
+				"datatable:main/x"
+			],
 			"native_triggers": [],
 			"partition": null,
 			"freshness": null,
@@ -269,7 +283,10 @@
 				"target_path": "analytics/dim_customer",
 				"unique_key": "id",
 				"scd2": true,
-				"track": ["name", "tier"],
+				"track": [
+					"name",
+					"tier"
+				],
 				"close_deleted": true
 			}
 		}
@@ -377,12 +394,22 @@
 				"unique_key": "order_id"
 			},
 			"data_tests": [
-				{ "type": "unique", "column": "order_id" },
-				{ "type": "not_null", "column": "user_id" },
+				{
+					"type": "unique",
+					"column": "order_id"
+				},
+				{
+					"type": "not_null",
+					"column": "user_id"
+				},
 				{
 					"type": "accepted_values",
 					"column": "status",
-					"values": ["paid", "pending", "refunded"]
+					"values": [
+						"paid",
+						"pending",
+						"refunded"
+					]
 				},
 				{
 					"type": "relationships",
@@ -406,7 +433,15 @@
 			"tag": null,
 			"retry": null,
 			"data_tests": [
-				{ "type": "accepted_values", "column": "kind", "values": ["a b", "c", "d"] }
+				{
+					"type": "accepted_values",
+					"column": "kind",
+					"values": [
+						"a b",
+						"c",
+						"d"
+					]
+				}
 			]
 		}
 	},
@@ -421,7 +456,12 @@
 			"freshness": null,
 			"tag": null,
 			"retry": null,
-			"data_tests": [{ "type": "custom", "path": "f/tests/orders_amount_sane" }]
+			"data_tests": [
+				{
+					"type": "custom",
+					"path": "f/tests/orders_amount_sane"
+				}
+			]
 		}
 	},
 	{
@@ -457,7 +497,12 @@
 			"freshness": null,
 			"tag": null,
 			"retry": null,
-			"data_tests": [{ "type": "unique", "column": "id" }]
+			"data_tests": [
+				{
+					"type": "unique",
+					"column": "id"
+				}
+			]
 		}
 	},
 	{
@@ -471,7 +516,12 @@
 			"freshness": null,
 			"tag": null,
 			"retry": null,
-			"data_tests": [{ "type": "unique", "column": "id" }]
+			"data_tests": [
+				{
+					"type": "unique",
+					"column": "id"
+				}
+			]
 		}
 	},
 	{
@@ -504,7 +554,11 @@
 				{
 					"column": "user_name",
 					"inputs": [
-						{ "from_kind": "datatable", "from_path": "prod/users", "from_column": "name" }
+						{
+							"from_kind": "datatable",
+							"from_path": "prod/users",
+							"from_column": "name"
+						}
 					]
 				}
 			]
@@ -564,5 +618,89 @@
 				}
 			]
 		}
+	},
+	{
+		"name": "bare macros marker",
+		"code": "// macros\nCREATE MACRO dbl(a) AS a * 2;",
+		"expected": {
+			"in_pipeline": false,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null,
+			"macros": true
+		}
+	},
+	{
+		"name": "macros with trailing prose is not a marker",
+		"code": "// macros are defined below\nCREATE MACRO dbl(a) AS a * 2;",
+		"expected": {
+			"in_pipeline": false,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null
+		}
+	},
+	{
+		"name": "macros marker with sql comment prefix",
+		"code": "-- macros\n-- pipeline\nCREATE MACRO dbl(a) AS a * 2;",
+		"expected": {
+			"in_pipeline": true,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null,
+			"macros": true
+		}
+	},
+	{
+		"name": "use accumulates in order and dedups",
+		"code": "// use f/lib/stats\n// use f/lib/dates\n// use f/lib/stats\nSELECT 1;",
+		"expected": {
+			"in_pipeline": false,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null,
+			"use_libs": [
+				"f/lib/stats",
+				"f/lib/dates"
+			]
+		}
+	},
+	{
+		"name": "use requires a slashed single token",
+		"code": "// use this script to compute stuff\n// use standalone\n// use f/lib/ok extra\nSELECT 1;",
+		"expected": {
+			"in_pipeline": false,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null
+		}
+	},
+	{
+		"name": "use stops at first code line",
+		"code": "// pipeline\nSELECT 1;\n-- use f/lib/late\n",
+		"expected": {
+			"in_pipeline": true,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null
+		}
 	}
 ]
diff --git a/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs b/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
index 96a81f863e..2df4acd2e4 100644
--- a/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
+++ b/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
@@ -47,6 +47,12 @@ struct Expected {
     // against `to_value(got.column_lineage)`. Absent === [].
     #[serde(default)]
     column_lineage: Vec<serde_json::Value>,
+    // `// macros` marker (strict, alone on the line). Absent === false.
+    #[serde(default)]
+    macros: bool,
+    // `// use <lib_path>` accumulation, declaration order, deduped. Absent === [].
+    #[serde(default)]
+    use_libs: Vec<String>,
 }
 
 #[derive(Deserialize)]
@@ -225,5 +231,8 @@ fn pipeline_annotation_fixtures_match() {
             serde_json::Value::Array(f.expected.column_lineage.clone()),
             "{ctx}: column lineage"
         );
+
+        assert_eq!(got.macros, f.expected.macros, "{ctx}: macros");
+        assert_eq!(got.use_libs, f.expected.use_libs, "{ctx}: use_libs");
     }
 }
diff --git a/backend/src/main.rs b/backend/src/main.rs
index 0d7bef4d70..0186f271e6 100644
--- a/backend/src/main.rs
+++ b/backend/src/main.rs
@@ -1679,6 +1679,13 @@ async fn process_notify_event(
             );
             windmill_queue::asset_dispatch::ASSET_PRODUCER_WRITES_CACHE.remove(payload);
         }
+        "notify_macro_registry_change" => {
+            tracing::debug!(
+                "Macro registry change for workspace {}, invalidating macro registry cache",
+                payload
+            );
+            windmill_common::assets::MACRO_REGISTRY_CACHE.remove(payload);
+        }
         "notify_workspace_key_change" => {
             tracing::info!(
                 "Workspace key change detected, invalidating workspace key cache: {}",
diff --git a/backend/summarized_schema.txt b/backend/summarized_schema.txt
index fe86b09b09..380adf679e 100644
--- a/backend/summarized_schema.txt
+++ b/backend/summarized_schema.txt
@@ -115,6 +115,10 @@ kafka_pending_commits: id(bigint), workspace_id(char), kafka_trigger_path(char),
   FK: (workspace_id, kafka_trigger_path) -> kafka_trigger(workspace_id, path)
 kafka_trigger: path(char), kafka_resource_path(char), topics(char), group_id(char), script_path(char), is_flow(bool), workspace_id(char), edited_by(char), email(char), edited_at(ts), extra_perms(jsonb), server_id(char), last_server_ping(ts), error(text), error_handler_path(char), error_handler_args(jsonb), retry(jsonb), mode(trigger_mode), filters(jsonb[]), auto_commit(bool), labels(text[])
 log_file: hostname(char), log_ts(ts), ok_lines(bigint), err_lines(bigint), mode(log_mode), worker_group(char), file_path(char), json_fmt(bool)
+macro_definition: workspace_id(char), name(char), provider_path(char), params(text), body(text), is_table_macro(bool), created_at(ts)
+  FK: (workspace_id) -> workspace(id)
+macro_usage: workspace_id(char), consumer_path(char), macro_name(char)
+  FK: (workspace_id) -> workspace(id)
 magic_link: email(char), token(char), expiration(ts)
 mcp_oauth_client: mcp_server_url(text), client_id(text), client_secret(text), client_secret_expires_at(ts), token_endpoint(text), created_at(ts)
 mcp_oauth_refresh_token: id(bigint), refresh_token(char), access_token_hash(char), client_id(char), user_email(char), workspace_id(char), scopes(text[]), token_family(uuid), created_at(ts), expires_at(ts), used_at(ts), revoked(bool)
diff --git a/backend/windmill-api-assets/src/lib.rs b/backend/windmill-api-assets/src/lib.rs
index 19647c71d7..b4b0583863 100644
--- a/backend/windmill-api-assets/src/lib.rs
+++ b/backend/windmill-api-assets/src/lib.rs
@@ -13,7 +13,7 @@ use windmill_common::{
     utils::escape_ilike_pattern,
 };
 
-use windmill_api_auth::ApiAuthed;
+use windmill_api_auth::{build_scope_path_predicate, ApiAuthed};
 
 // Partition-range backfill preview. The logic (producer resolution, range
 // enumeration, status join) is enterprise: the `private` build compiles the
@@ -38,6 +38,63 @@ pub fn workspaced_service() -> Router {
         .route("/partitions_in_range", get(list_partitions_in_range))
         .route("/asset_schemas", get(list_asset_schemas))
         .route("/record_materialization", post(record_materialization))
+        .route("/macros", get(list_macros))
+}
+
+// One registry macro, with its full definition — drives the macro-explorer
+// drawer (body preview) and the DuckDB editor autocomplete (signatures).
+#[derive(Serialize)]
+struct MacroListItem {
+    name: String,
+    params: String,
+    body: String,
+    is_table: bool,
+    provider_path: String,
+}
+
+// Every workspace macro (`// macros` libraries), grouped client-side by
+// provider. Small by construction — one row per macro definition. The rows
+// copy script body text, so visibility must match reading the provider
+// script itself: the EXISTS join runs under the user_db transaction (script
+// RLS filters libraries the caller can't read) and the scope predicate
+// covers path-scoped tokens, mirroring `list_scripts`.
+async fn list_macros(
+    authed: ApiAuthed,
+    Path(w_id): Path<String>,
+    Extension(user_db): Extension<UserDB>,
+) -> JsonResult<Vec<MacroListItem>> {
+    let scope_allowed = build_scope_path_predicate(&authed, "scripts", "read");
+    let mut tx = user_db.begin(&authed).await?;
+    let rows = sqlx::query!(
+        r#"SELECT m.name AS "name!", m.params AS "params!", m.body AS "body!",
+                  m.is_table_macro AS "is_table_macro!", m.provider_path AS "provider_path!"
+           FROM macro_definition m
+           WHERE m.workspace_id = $1
+             AND EXISTS (
+                SELECT 1 FROM script s
+                WHERE s.workspace_id = m.workspace_id
+                  AND s.path = m.provider_path
+                  AND s.archived = false
+                  AND s.deleted = false
+             )
+           ORDER BY m.provider_path, m.name"#,
+        &w_id,
+    )
+    .fetch_all(&mut *tx)
+    .await?;
+    tx.commit().await?;
+    Ok(Json(
+        rows.into_iter()
+            .filter(|r| scope_allowed(&r.provider_path))
+            .map(|r| MacroListItem {
+                name: r.name,
+                params: r.params,
+                body: r.body,
+                is_table: r.is_table_macro,
+                provider_path: r.provider_path,
+            })
+            .collect(),
+    ))
 }
 
 #[derive(Deserialize)]
@@ -599,6 +656,32 @@ struct GraphRunnableNode {
     // `merge` / any partitioned write INSERTs into a fixed-schema table.
     #[serde(skip_serializing_if = "Option::is_none", default)]
     materialize_strategy: Option<String>,
+    // Macros this script provides to the workspace registry (deployed
+    // `// macros` library). Drives the library node state + details-pane
+    // signature list. Lockstep with TS `AssetGraphRunnableNode.macros`.
+    #[serde(skip_serializing_if = "Vec::is_empty", default)]
+    macros: Vec<MacroInfo>,
+}
+
+// One macro of a `// macros` library, as surfaced on its graph node.
+#[derive(Serialize, Debug, Clone)]
+struct MacroInfo {
+    name: String,
+    // Verbatim parameter list, for the `name(params)` signature display.
+    params: String,
+    is_table: bool,
+}
+
+// A macro-library → consumer edge: the consumer calls `macro_names` of
+// `lib_path`'s macros (deploy-recorded detection), or pulls in the whole
+// library via `// use` (`via_use`, in which case `macro_names` lists all of
+// the library's macros).
+#[derive(Serialize, Debug)]
+struct MacroEdge {
+    lib_path: String,
+    consumer_path: String,
+    macro_names: Vec<String>,
+    via_use: bool,
 }
 
 // The output asset a producer's column lineage belongs to (the `// materialize`
@@ -699,6 +782,8 @@ struct AssetGraphResponse {
     runnables: Vec<GraphRunnableNode>,
     edges: Vec<GraphEdge>,
     triggers: Vec<TriggerEdge>,
+    #[serde(skip_serializing_if = "Vec::is_empty", default)]
+    macro_edges: Vec<MacroEdge>,
 }
 
 async fn asset_graph(
@@ -856,6 +941,31 @@ async fn asset_graph(
     .fetch_all(&mut *tx)
     .await?;
 
+    // Workspace macro registry + deploy-recorded call edges. Definitions are
+    // fetched unfiltered so an out-of-folder library still appears as the
+    // provider endpoint of in-scope consumers' edges; consumers honor the
+    // folder filter like every other runnable query.
+    let macro_def_rows = sqlx::query!(
+        r#"SELECT name AS "name!", provider_path AS "provider_path!",
+                  params AS "params!", is_table_macro AS "is_table_macro!"
+           FROM macro_definition
+           WHERE workspace_id = $1
+           ORDER BY provider_path, name"#,
+        &w_id,
+    )
+    .fetch_all(&mut *tx)
+    .await?;
+    let macro_usage_rows = sqlx::query!(
+        r#"SELECT consumer_path AS "consumer_path!", macro_name AS "macro_name!"
+           FROM macro_usage
+           WHERE workspace_id = $1
+             AND ($2::text IS NULL OR consumer_path LIKE $2)"#,
+        &w_id,
+        folder_filter.as_deref(),
+    )
+    .fetch_all(&mut *tx)
+    .await?;
+
     tx.commit().await?;
 
     // Parse each pipeline member's body once into its badge annotations, keyed
@@ -1012,6 +1122,74 @@ async fn asset_graph(
         triggers.push(edge);
     }
 
+    // Macro libraries + lib→consumer edges. Group per-provider macro lists,
+    // resolve each usage row's name to its provider (names are
+    // workspace-unique), and merge `// use` whole-lib edges from the parsed
+    // member annotations. Both endpoints are forced into the runnable set so
+    // an out-of-folder library still renders as the edge's provider node.
+    let mut macros_by_provider: std::collections::HashMap<String, Vec<MacroInfo>> =
+        Default::default();
+    let mut provider_by_name: std::collections::HashMap<String, String> = Default::default();
+    for r in macro_def_rows {
+        provider_by_name.insert(r.name.clone(), r.provider_path.clone());
+        macros_by_provider
+            .entry(r.provider_path)
+            .or_default()
+            .push(MacroInfo { name: r.name, params: r.params, is_table: r.is_table_macro });
+    }
+    let mut macro_edge_map: std::collections::BTreeMap<
+        (String, String),
+        (std::collections::BTreeSet<String>, bool),
+    > = Default::default();
+    for u in macro_usage_rows {
+        // Same orphan filter as the other edge loops.
+        if !runnable_exists(AssetUsageKind::Script, &u.consumer_path) {
+            continue;
+        }
+        let Some(lib) = provider_by_name.get(&u.macro_name) else {
+            continue;
+        };
+        let e = macro_edge_map
+            .entry((lib.clone(), u.consumer_path))
+            .or_default();
+        e.0.insert(u.macro_name);
+    }
+    for (path, ann) in &annotations_by_path {
+        for lib in &ann.use_libs {
+            // An undeployed `// use` target has no registry rows — the live
+            // draft overlay is the only surface that can render it.
+            let Some(lib_macros) = macros_by_provider.get(lib) else {
+                continue;
+            };
+            let e = macro_edge_map
+                .entry((lib.clone(), path.clone()))
+                .or_default();
+            e.1 = true;
+            e.0.extend(lib_macros.iter().map(|m| m.name.clone()));
+        }
+    }
+    let macro_edges: Vec<MacroEdge> = macro_edge_map
+        .into_iter()
+        // Same orphan filter as the other edge families: a registry row whose
+        // provider script no longer exists must not synthesize a phantom
+        // library node (consumers were filtered above, but the `// use` pass
+        // re-adds them, so re-check both endpoints).
+        .filter(|((lib_path, consumer_path), _)| {
+            runnable_exists(AssetUsageKind::Script, lib_path)
+                && runnable_exists(AssetUsageKind::Script, consumer_path)
+        })
+        .map(|((lib_path, consumer_path), (names, via_use))| MacroEdge {
+            lib_path,
+            consumer_path,
+            macro_names: names.into_iter().collect(),
+            via_use,
+        })
+        .collect();
+    for e in &macro_edges {
+        runnable_set.insert((AssetUsageKind::Script, e.lib_path.clone()));
+        runnable_set.insert((AssetUsageKind::Script, e.consumer_path.clone()));
+    }
+
     let mut assets: Vec<GraphAssetNode> = asset_set
         .into_iter()
         .map(|(kind, path)| GraphAssetNode { kind, path })
@@ -1064,6 +1242,11 @@ async fn asset_graph(
                         Some("replace".to_string())
                     }
                 }),
+                macros: (usage_kind == AssetUsageKind::Script)
+                    .then(|| macros_by_provider.get(&path))
+                    .flatten()
+                    .cloned()
+                    .unwrap_or_default(),
                 path,
                 usage_kind,
             }
@@ -1076,6 +1259,7 @@ async fn asset_graph(
         runnables,
         edges,
         triggers,
+        macro_edges,
     }))
 }
 
diff --git a/backend/windmill-api-scripts/src/scripts.rs b/backend/windmill-api-scripts/src/scripts.rs
index 5d5ea010bb..4f9de4f416 100644
--- a/backend/windmill-api-scripts/src/scripts.rs
+++ b/backend/windmill-api-scripts/src/scripts.rs
@@ -1316,6 +1316,78 @@ async fn create_script_internal<'c>(
             );
         }
     }
+    // `// macros` — this script is a workspace macro library: its body is
+    // CREATE [OR REPLACE] MACRO statements plus plain setup, registered into
+    // `macro_definition` and injected as TEMP macros into consumer jobs.
+    // Pure shape checks happen here; the registry writes and the cross-lib
+    // name-collision check run inside the deploy transaction below.
+    let macro_lib_defs: Option<Vec<windmill_parser::duckdb_macros::ParsedMacro>> =
+        if pipeline_annotations.macros {
+            if ns.language != ScriptLang::DuckDb {
+                return Err(Error::BadRequest(format!(
+                    "`// macros` is only supported for DuckDB scripts, not {}",
+                    ns.language.as_str()
+                )));
+            }
+            if pipeline_annotations.materialize.is_some() {
+                return Err(Error::BadRequest(
+                    "`// macros` and `// materialize` are mutually exclusive — a macro \
+                     library defines reusable macros, it does not produce an asset"
+                        .to_string(),
+                ));
+            }
+            let lib = windmill_parser::duckdb_macros::parse_macro_library(&ns.content)
+                .map_err(Error::BadRequest)?;
+            let macros: Vec<_> = lib
+                .into_iter()
+                .filter_map(|s| match s {
+                    windmill_parser::duckdb_macros::LibStatement::Macro(m) => Some(m),
+                    windmill_parser::duckdb_macros::LibStatement::Setup(_) => None,
+                })
+                .collect();
+            if macros.is_empty() {
+                return Err(Error::BadRequest(
+                    "`// macros` library defines no macros".to_string(),
+                ));
+            }
+            let all_names: std::collections::HashSet<String> =
+                macros.iter().map(|m| m.name.clone()).collect();
+            // DuckDB bind-checks a macro body at CREATE time, so a body may
+            // only call same-file macros defined *earlier* — this also makes
+            // file order a valid creation order for whole-lib (`// use`)
+            // injection and rules out within-lib cycles.
+            let mut defined: std::collections::HashSet<String> = Default::default();
+            for m in &macros {
+                if windmill_parser::duckdb_builtins::is_duckdb_builtin(&m.name) {
+                    return Err(Error::BadRequest(format!(
+                        "macro `{}` shadows a DuckDB built-in function; pick another name",
+                        m.name
+                    )));
+                }
+                if defined.contains(&m.name) {
+                    return Err(Error::BadRequest(format!(
+                        "macro `{}` is defined twice in this library",
+                        m.name
+                    )));
+                }
+                let called =
+                    windmill_parser::duckdb_macros::detect_macro_calls(&m.body, &all_names);
+                if let Some(fwd) = called
+                    .iter()
+                    .find(|c| !defined.contains(*c) && *c != &m.name)
+                {
+                    return Err(Error::BadRequest(format!(
+                        "macro `{}` calls `{}`, which is defined later in the file; define \
+                         `{}` first (DuckDB bind-checks macro bodies at creation)",
+                        m.name, fwd, fwd
+                    )));
+                }
+                defined.insert(m.name.clone());
+            }
+            Some(macros)
+        } else {
+            None
+        };
     let in_pipeline = pipeline_annotations.in_pipeline;
     // `// trigger all` → AND join barrier (else OR, the default).
     let pipeline_join_all = !pipeline_annotations.join_mode.is_any();
@@ -1379,7 +1451,9 @@ async fn create_script_internal<'c>(
     } else {
         effective_assets
     };
-    let auto_kind = if in_pipeline {
+    let auto_kind = if in_pipeline || macro_lib_defs.is_some() {
+        // A macro library is a pipeline member (graph node) even without the
+        // bare `// pipeline` marker.
         Some("pipeline".to_string())
     } else if ci_test_refs.is_some() {
         Some("test".to_string())
@@ -1500,6 +1574,173 @@ async fn create_script_internal<'c>(
         }
     }
 
+    // DuckDB workspace macros: wipe-and-reinsert this script's registry rows
+    // (as provider) and call-site edges (as consumer), by new+old path so
+    // renames are handled — mirrors the ci_test_reference block above.
+    let macro_defs_deleted = sqlx::query!(
+        "DELETE FROM macro_definition WHERE workspace_id = $1 AND (provider_path = $2 OR provider_path = $3)",
+        &w_id,
+        &ns.path,
+        old_path.unwrap_or(&ns.path)
+    )
+    .execute(&mut *tx)
+    .await?
+    .rows_affected();
+    sqlx::query!(
+        "DELETE FROM macro_usage WHERE workspace_id = $1 AND (consumer_path = $2 OR consumer_path = $3)",
+        &w_id,
+        &ns.path,
+        old_path.unwrap_or(&ns.path)
+    )
+    .execute(&mut *tx)
+    .await?;
+    // Workers cache the registry per workspace; a mutation must evict it on
+    // every replica. Transactional emit — pollers see it only on commit.
+    if macro_lib_defs.is_some() || macro_defs_deleted > 0 {
+        sqlx::query!(
+            "INSERT INTO notify_event (channel, payload) VALUES ('notify_macro_registry_change', $1)",
+            &w_id
+        )
+        .execute(&mut *tx)
+        .await?;
+    }
+
+    if let Some(ref macros) = macro_lib_defs {
+        // Macro names are workspace-unique (they're injected unqualified into
+        // consumers). This lib's own rows — old and new path — were deleted
+        // just above, so any remaining match is a genuine cross-lib clash.
+        let names: Vec<String> = macros.iter().map(|m| m.name.clone()).collect();
+        if let Some(clash) = sqlx::query!(
+            "SELECT name, provider_path FROM macro_definition WHERE workspace_id = $1 AND name = ANY($2) LIMIT 1",
+            &w_id,
+            &names[..]
+        )
+        .fetch_optional(&mut *tx)
+        .await?
+        {
+            return Err(Error::BadRequest(format!(
+                "macro `{}` is already defined by `{}`; macro names are workspace-unique",
+                clash.name, clash.provider_path
+            )));
+        }
+        for m in macros {
+            sqlx::query!(
+                "INSERT INTO macro_definition (workspace_id, name, provider_path, params, body, is_table_macro) \
+                 VALUES ($1, $2, $3, $4, $5, $6)",
+                &w_id,
+                &m.name,
+                &ns.path,
+                &m.params,
+                &m.body,
+                m.is_table
+            )
+            .execute(&mut *tx)
+            .await?;
+        }
+    }
+
+    if ns.language == ScriptLang::DuckDb {
+        // Record this script's macro-call edges for the asset graph (the
+        // worker re-detects calls live at job time, so these are display
+        // metadata only). A library's edges point at *other* libs' macros.
+        let registry_names: Vec<String> = sqlx::query_scalar!(
+            "SELECT name FROM macro_definition WHERE workspace_id = $1 AND provider_path != $2",
+            &w_id,
+            &ns.path
+        )
+        .fetch_all(&mut *tx)
+        .await?;
+        let names_set: std::collections::HashSet<String> = registry_names.into_iter().collect();
+        let mut called: Vec<String> =
+            windmill_parser::duckdb_macros::detect_macro_calls(&ns.content, &names_set)
+                .into_iter()
+                .collect();
+        called.sort();
+        for name in called {
+            sqlx::query!(
+                "INSERT INTO macro_usage (workspace_id, consumer_path, macro_name) VALUES ($1, $2, $3) ON CONFLICT DO NOTHING",
+                &w_id,
+                &ns.path,
+                &name
+            )
+            .execute(&mut *tx)
+            .await?;
+        }
+        // `// use` targets should be deployed macro libraries — warn only:
+        // git-sync deploys scripts in arbitrary order, so the consumer landing
+        // first must not hard-fail. The runtime is the enforcement point.
+        for lib in &pipeline_annotations.use_libs {
+            let exists = sqlx::query_scalar!(
+                r#"SELECT EXISTS(SELECT 1 FROM macro_definition WHERE workspace_id = $1 AND provider_path = $2) AS "e!""#,
+                &w_id,
+                lib
+            )
+            .fetch_one(&mut *tx)
+            .await?;
+            if !exists {
+                tracing::warn!(
+                    "script {}: `// use {}` does not (yet) match a deployed macro library",
+                    ns.path,
+                    lib
+                );
+            }
+        }
+    } else if !pipeline_annotations.use_libs.is_empty() {
+        tracing::warn!(
+            "script {}: `// use` is only honored on DuckDB scripts; annotation ignored",
+            ns.path
+        );
+    }
+
+    if let Some(ref macros) = macro_lib_defs {
+        // Refresh every other DuckDB script's edges for this lib's names (a
+        // redeploy may add/remove macros; late-bound runtime picks changes up
+        // regardless — this only keeps the deployed graph current). The rescan
+        // covers ALL live DuckDB scripts, not just pipeline members: their
+        // edges were recorded at their own deploy and must survive the wipe.
+        let names: Vec<String> = macros.iter().map(|m| m.name.clone()).collect();
+        sqlx::query!(
+            "DELETE FROM macro_usage WHERE workspace_id = $1 AND macro_name = ANY($2) AND consumer_path != $3",
+            &w_id,
+            &names[..],
+            &ns.path
+        )
+        .execute(&mut *tx)
+        .await?;
+        let names_set: std::collections::HashSet<String> = names.into_iter().collect();
+        let members = sqlx::query!(
+            r#"SELECT DISTINCT ON (path) path AS "path!", content AS "content!"
+               FROM script
+               WHERE workspace_id = $1
+                 AND language = 'duckdb'::script_lang
+                 AND archived = false
+                 AND deleted = false
+                 AND path != $2
+               ORDER BY path, created_at DESC"#,
+            &w_id,
+            &ns.path
+        )
+        .fetch_all(&mut *tx)
+        .await?;
+        for member in members {
+            let mut called: Vec<String> =
+                windmill_parser::duckdb_macros::detect_macro_calls(&member.content, &names_set)
+                    .into_iter()
+                    .collect();
+            called.sort();
+            for name in called {
+                sqlx::query!(
+                    "INSERT INTO macro_usage (workspace_id, consumer_path, macro_name) VALUES ($1, $2, $3) ON CONFLICT DO NOTHING",
+                    &w_id,
+                    &member.path,
+                    &name
+                )
+                .execute(&mut *tx)
+                .await?;
+            }
+        }
+    }
+
     let p_path_opt = parent_hashes_and_perms.as_ref().map(|x| x.p_path.clone());
     if let Some(ref p_path) = p_path_opt {
         if !skip_draft_deletion {
@@ -2776,6 +3017,7 @@ async fn archive_script_by_path(
     // anything. Wipe declared `// on ...` edges (asset-event subscribers
     // look these up).
     clear_script_triggers(&mut *tx, &w_id, path, AssetUsageKind::Script).await?;
+    clear_macro_registry(&mut *tx, &w_id, path).await?;
 
     audit_log(
         &mut *tx,
@@ -2856,6 +3098,7 @@ async fn archive_script_by_hash(
     // Pipeline event hygiene: archived scripts must not be triggered by
     // anything. Wipe declared `// on ...` edges.
     clear_script_triggers(&mut *tx, &w_id, &script.path, AssetUsageKind::Script).await?;
+    clear_macro_registry(&mut *tx, &w_id, &script.path).await?;
 
     audit_log(
         &mut *tx,
@@ -2920,6 +3163,7 @@ async fn delete_script_by_hash(
     // anything. Wipe declared `// on ...` edges. Idempotent — safe even if
     // the script was never a pipeline member.
     clear_script_triggers(&mut *tx, &w_id, &script.path, AssetUsageKind::Script).await?;
+    clear_macro_registry(&mut *tx, &w_id, &script.path).await?;
 
     audit_log(
         &mut *tx,
@@ -3036,6 +3280,7 @@ async fn delete_script_by_path(
     // anything. Wipe declared `// on ...` edges. Idempotent — safe even if
     // the script was never a pipeline member.
     clear_script_triggers(&mut *tx, &w_id, path, AssetUsageKind::Script).await?;
+    clear_macro_registry(&mut *tx, &w_id, path).await?;
 
     if !query.keep_captures.unwrap_or(false) {
         sqlx::query!(
@@ -3198,6 +3443,10 @@ async fn delete_scripts_bulk(
     .execute(&mut *tx)
     .await?;
 
+    for path in &deleted_paths {
+        clear_macro_registry(&mut *tx, &w_id, path).await?;
+    }
+
     audit_log(
         &mut *tx,
         &authed,
@@ -3248,6 +3497,39 @@ async fn delete_scripts_bulk(
     Ok(Json(deleted_paths))
 }
 
+/// Deployed-macro hygiene for an archived/deleted script: it must neither
+/// provide macros to the workspace registry nor keep stale call-site edges.
+/// Usage edges pointing at the script's own macros go too (names are
+/// workspace-unique, so those edges can only reference this provider).
+async fn clear_macro_registry(db: &mut sqlx::PgConnection, w_id: &str, path: &str) -> Result<()> {
+    sqlx::query!(
+        "DELETE FROM macro_usage WHERE workspace_id = $1 AND (consumer_path = $2 \
+         OR macro_name IN (SELECT name FROM macro_definition WHERE workspace_id = $1 AND provider_path = $2))",
+        w_id,
+        path
+    )
+    .execute(&mut *db)
+    .await?;
+    let deleted = sqlx::query!(
+        "DELETE FROM macro_definition WHERE workspace_id = $1 AND provider_path = $2",
+        w_id,
+        path
+    )
+    .execute(&mut *db)
+    .await?
+    .rows_affected();
+    // Evict workers' per-workspace registry cache (transactional emit).
+    if deleted > 0 {
+        sqlx::query!(
+            "INSERT INTO notify_event (channel, payload) VALUES ('notify_macro_registry_change', $1)",
+            w_id
+        )
+        .execute(&mut *db)
+        .await?;
+    }
+    Ok(())
+}
+
 /// Validates that script debouncing configuration is supported by all workers
 /// Returns an error if debouncing is configured but workers are behind required version
 async fn guard_script_from_debounce_data(ns: &NewScript) -> Result<()> {
diff --git a/backend/windmill-api-workspaces/src/workspaces.rs b/backend/windmill-api-workspaces/src/workspaces.rs
index 171ec94560..0bbd8b065a 100644
--- a/backend/windmill-api-workspaces/src/workspaces.rs
+++ b/backend/windmill-api-workspaces/src/workspaces.rs
@@ -4037,6 +4037,7 @@ async fn clone_workspace_data(
 
     // Clone CI test references
     clone_ci_test_references(tx, source_workspace_id, target_workspace_id).await?;
+    clone_macro_registry(tx, source_workspace_id, target_workspace_id).await?;
 
     // Clone flows with new versions
     clone_flows(tx, source_workspace_id, target_workspace_id).await?;
@@ -4600,6 +4601,35 @@ async fn clone_ci_test_references(
     Ok(())
 }
 
+// DuckDB macro registry + call-site edges are deploy-derived like
+// ci_test_reference: without cloning them, a forked consumer script fails at
+// run time until every macro library is manually redeployed in the fork.
+async fn clone_macro_registry(
+    tx: &mut Transaction<'_, Postgres>,
+    source_workspace_id: &str,
+    target_workspace_id: &str,
+) -> Result<()> {
+    sqlx::query!(
+        "INSERT INTO macro_definition (workspace_id, name, provider_path, params, body, is_table_macro)
+         SELECT $2, name, provider_path, params, body, is_table_macro
+         FROM macro_definition WHERE workspace_id = $1",
+        source_workspace_id,
+        target_workspace_id,
+    )
+    .execute(&mut **tx)
+    .await?;
+    sqlx::query!(
+        "INSERT INTO macro_usage (workspace_id, consumer_path, macro_name)
+         SELECT $2, consumer_path, macro_name
+         FROM macro_usage WHERE workspace_id = $1",
+        source_workspace_id,
+        target_workspace_id,
+    )
+    .execute(&mut **tx)
+    .await?;
+    Ok(())
+}
+
 async fn clone_flows(
     tx: &mut Transaction<'_, Postgres>,
     source_workspace_id: &str,
diff --git a/backend/windmill-api-workspaces/src/workspaces_extra.rs b/backend/windmill-api-workspaces/src/workspaces_extra.rs
index 56abe689d5..daf83171e4 100644
--- a/backend/windmill-api-workspaces/src/workspaces_extra.rs
+++ b/backend/windmill-api-workspaces/src/workspaces_extra.rs
@@ -276,6 +276,24 @@ pub(crate) async fn change_workspace_id(
     .execute(&mut *tx)
     .await?;
 
+    info!("Updating macro_definition table");
+    sqlx::query!(
+        "UPDATE macro_definition SET workspace_id = $1 WHERE workspace_id = $2",
+        &rw.new_id,
+        &old_id
+    )
+    .execute(&mut *tx)
+    .await?;
+
+    info!("Updating macro_usage table");
+    sqlx::query!(
+        "UPDATE macro_usage SET workspace_id = $1 WHERE workspace_id = $2",
+        &rw.new_id,
+        &old_id
+    )
+    .execute(&mut *tx)
+    .await?;
+
     info!("Updating deployment_metadata table");
     sqlx::query!(
         "UPDATE deployment_metadata SET workspace_id = $1 WHERE workspace_id = $2",
@@ -852,6 +870,15 @@ pub(crate) async fn delete_workspace(
     sqlx::query!("DELETE FROM dependency_map WHERE workspace_id = $1", &w_id)
         .execute(&mut *tx)
         .await?;
+    sqlx::query!("DELETE FROM macro_usage WHERE workspace_id = $1", &w_id)
+        .execute(&mut *tx)
+        .await?;
+    sqlx::query!(
+        "DELETE FROM macro_definition WHERE workspace_id = $1",
+        &w_id
+    )
+    .execute(&mut *tx)
+    .await?;
     sqlx::query!("DELETE FROM v2_job_queue WHERE workspace_id = $1", &w_id)
         .execute(&mut *tx)
         .await?;
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index e661c3aeb8..900e54b243 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -21433,6 +21433,20 @@ paths:
                         in_pipeline:
                           type: boolean
                           description: True iff the script is a pipeline member (deployed with `// pipeline`). Omitted when false.
+                        macros:
+                          type: array
+                          description: Macros this script provides to the workspace registry (deployed `// macros` library). Omitted when empty.
+                          items:
+                            type: object
+                            required: [name, params, is_table]
+                            properties:
+                              name:
+                                type: string
+                              params:
+                                type: string
+                                description: verbatim parameter list
+                              is_table:
+                                type: boolean
                   edges:
                     type: array
                     items:
@@ -21498,6 +21512,56 @@ paths:
                               $ref: "#/components/schemas/AssetUsageKind"
                             runnable_path:
                               type: string
+                  macro_edges:
+                    type: array
+                    description: Macro-library → consumer edges (deploy-recorded call detection plus `// use`). Omitted when empty.
+                    items:
+                      type: object
+                      required: [lib_path, consumer_path, macro_names, via_use]
+                      properties:
+                        lib_path:
+                          type: string
+                        consumer_path:
+                          type: string
+                        macro_names:
+                          type: array
+                          items:
+                            type: string
+                        via_use:
+                          type: boolean
+
+  /w/{workspace}/assets/macros:
+    get:
+      summary: List every workspace DuckDB macro (deployed `// macros` libraries)
+      operationId: listWorkspaceMacros
+      tags:
+        - asset
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      responses:
+        "200":
+          description: all registry macros, ordered by provider then name
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  type: object
+                  required: [name, params, body, is_table, provider_path]
+                  properties:
+                    name:
+                      type: string
+                    params:
+                      type: string
+                      description: verbatim parameter list
+                    body:
+                      type: string
+                      description: verbatim body after AS [TABLE]
+                    is_table:
+                      type: boolean
+                    provider_path:
+                      type: string
+                      description: path of the `// macros` library script
 
   /w/{workspace}/assets/pipelines:
     get:
diff --git a/backend/windmill-common/src/assets.rs b/backend/windmill-common/src/assets.rs
index c186f59141..0757ef6894 100644
--- a/backend/windmill-common/src/assets.rs
+++ b/backend/windmill-common/src/assets.rs
@@ -10,6 +10,41 @@ pub use windmill_parser::asset_parser::{
 };
 pub use windmill_types::assets::*;
 
+// --- Workspace DuckDB macro registry cache (worker hot path) ---
+// Every DuckDB job reads the `macro_definition` registry; cascades can run
+// many jobs per second. Primary invalidation is the
+// `notify_macro_registry_change` event, emitted transactionally with every
+// registry mutation and dispatched to this cache in main.rs — the TTL is a
+// backstop for mutation paths that don't emit (manual SQL edits).
+
+#[derive(Clone, Debug, sqlx::FromRow)]
+pub struct MacroRegistryEntry {
+    pub name: String,
+    pub params: String,
+    pub body: String,
+    pub is_table_macro: bool,
+    pub provider_path: String,
+}
+
+#[derive(Clone)]
+pub struct ExpiringMacroRegistry {
+    pub rows: std::sync::Arc<Vec<MacroRegistryEntry>>,
+    pub expires_at: std::time::Instant,
+}
+
+pub const MACRO_REGISTRY_TTL: std::time::Duration = std::time::Duration::from_secs(60);
+
+// Tests sharing one process across several databases must disable the cache:
+// it is keyed by workspace id alone, and a notify from one DB can't evict
+// entries populated from another (same hazard as DEPLOYED_SCRIPT_CACHE_DISABLED).
+pub static MACRO_REGISTRY_CACHE_DISABLED: std::sync::atomic::AtomicBool =
+    std::sync::atomic::AtomicBool::new(false);
+
+lazy_static::lazy_static! {
+    pub static ref MACRO_REGISTRY_CACHE: quick_cache::sync::Cache<String, ExpiringMacroRegistry> =
+        quick_cache::sync::Cache::new(1000);
+}
+
 #[derive(sqlx::Type, Debug, Clone, Copy, PartialEq)]
 #[sqlx(type_name = "SCRIPT_TRIGGER_KIND", rename_all = "lowercase")]
 pub enum ScriptTriggerKind {
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index c0574a8f1d..09e3158200 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -289,6 +289,469 @@ fn classify_wrap_or_err(query: &str) -> Result<windmill_parser::sql_materialize:
         .map_err(|e| Error::ExecutionErr(e.message()))
 }
 
+// One workspace-macro registry row (`macro_definition`, written at deploy of a
+// `// macros` library script). Shared with windmill-common so the registry
+// cache can live there (main.rs evicts it on `notify_macro_registry_change`).
+use windmill_common::assets::MacroRegistryEntry as MacroRow;
+
+// The registry read runs on every DuckDB job (including the common macro-free
+// case), so it's cached per workspace. Invalidation is primarily the
+// transactional `notify_macro_registry_change` event (registry mutations →
+// notify_event table → the poller in main.rs evicts); the TTL bounds
+// staleness for anything that doesn't emit.
+async fn fetch_macro_registry(
+    db: &windmill_common::DB,
+    w_id: &str,
+) -> Result<std::sync::Arc<Vec<MacroRow>>> {
+    use windmill_common::assets::{
+        ExpiringMacroRegistry, MACRO_REGISTRY_CACHE, MACRO_REGISTRY_CACHE_DISABLED,
+        MACRO_REGISTRY_TTL,
+    };
+    // Cloud: unbounded workspace count makes the 1000-entry per-workspace
+    // cache churn instead of hit, and its per-entry memory (full registry
+    // text) is tenant-controlled — skip it there; self-hosted keeps the fast
+    // path.
+    let use_cache = !*windmill_common::worker::CLOUD_HOSTED
+        && !MACRO_REGISTRY_CACHE_DISABLED.load(std::sync::atomic::Ordering::Relaxed);
+    if use_cache {
+        if let Some(e) = MACRO_REGISTRY_CACHE.get(w_id) {
+            if e.expires_at > std::time::Instant::now() {
+                return Ok(e.rows);
+            }
+        }
+    }
+    let rows = sqlx::query_as!(
+        MacroRow,
+        "SELECT name, params, body, is_table_macro, provider_path FROM macro_definition WHERE workspace_id = $1",
+        w_id
+    )
+    .fetch_all(db)
+    .await?;
+    let rows = std::sync::Arc::new(rows);
+    if use_cache {
+        MACRO_REGISTRY_CACHE.insert(
+            w_id.to_string(),
+            ExpiringMacroRegistry {
+                rows: rows.clone(),
+                expires_at: std::time::Instant::now() + MACRO_REGISTRY_TTL,
+            },
+        );
+    }
+    Ok(rows)
+}
+
+// Selection pass: seed = macros the (comment-stripped, transformed) blocks
+// call, plus every macro of each `// use` library; then the transitive
+// closure over macro bodies. Local definitions win — their names are removed
+// from the injectable set entirely, so a later workspace-library deploy can
+// never silently replace a script's own macro. Pure and separate from
+// `plan_macro_injection` so the shell knows which provider libraries to
+// fetch (their setup statements are injected too) before planning.
+fn select_workspace_macros(
+    blocks: &[String],
+    registry: &[MacroRow],
+    use_libs: &[String],
+) -> Result<std::collections::HashSet<String>> {
+    use std::collections::{BTreeMap, HashSet};
+    use windmill_parser::duckdb_macros::{detect_macro_calls, locally_defined_macro_names};
+
+    let local = locally_defined_macro_names(blocks);
+    let all_names: HashSet<String> = registry
+        .iter()
+        .map(|r| r.name.clone())
+        .filter(|n| !local.contains(n))
+        .collect();
+    let by_name: BTreeMap<&str, &MacroRow> =
+        registry.iter().map(|r| (r.name.as_str(), r)).collect();
+
+    let mut selected: HashSet<String> = HashSet::new();
+    for path in use_libs {
+        let lib_names: Vec<&str> = registry
+            .iter()
+            .filter(|r| &r.provider_path == path)
+            .map(|r| r.name.as_str())
+            .collect();
+        if lib_names.is_empty() {
+            return Err(Error::ExecutionErr(format!(
+                "`// use {path}`: no deployed macro library at this path"
+            )));
+        }
+        selected.extend(
+            lib_names
+                .into_iter()
+                .filter(|n| all_names.contains(*n))
+                .map(String::from),
+        );
+    }
+    selected.extend(detect_macro_calls(&blocks.join("\n"), &all_names));
+
+    // Transitive closure over macro bodies (a selected macro may call others).
+    let mut frontier: Vec<String> = selected.iter().cloned().collect();
+    while let Some(name) = frontier.pop() {
+        if let Some(row) = by_name.get(name.as_str()) {
+            for dep in detect_macro_calls(&row.body, &all_names) {
+                if selected.insert(dep.clone()) {
+                    frontier.push(dep);
+                }
+            }
+        }
+    }
+    Ok(selected)
+}
+
+// Fixpoint over library-level `// use`: a library may declare `// use` for
+// dynamic calls its macro bodies make (string-hidden from lexical detection,
+// e.g. inside `query('…')`). Those declarations are honored transitively —
+// consuming a macro from lib B pulls in whatever B `// use`s, so the dynamic
+// dependency stays encapsulated in the library instead of leaking to every
+// consumer. `lib_uses` maps provider path → its parsed `// use` list; the
+// shell grows it lazily and re-resolves until no new library appears.
+// Returns the selected macro names plus the effective `// use` list
+// (consumer's own first, in annotation order, then discovered libs).
+fn resolve_macro_selection(
+    blocks: &[String],
+    registry: &[MacroRow],
+    consumer_use_libs: &[String],
+    lib_uses: &std::collections::BTreeMap<String, Vec<String>>,
+) -> Result<(std::collections::HashSet<String>, Vec<String>)> {
+    let mut effective: Vec<String> = Vec::new();
+    for p in consumer_use_libs {
+        if !effective.contains(p) {
+            effective.push(p.clone());
+        }
+    }
+    loop {
+        let selected = select_workspace_macros(blocks, registry, &effective)?;
+        let mut relevant: Vec<String> = effective.clone();
+        for name in &selected {
+            if let Some(r) = registry.iter().find(|r| &r.name == name) {
+                if !relevant.contains(&r.provider_path) {
+                    relevant.push(r.provider_path.clone());
+                }
+            }
+        }
+        let mut grew = false;
+        for lib in &relevant {
+            for u in lib_uses.get(lib).map(Vec::as_slice).unwrap_or(&[]) {
+                if !effective.contains(u) {
+                    effective.push(u.clone());
+                    grew = true;
+                }
+            }
+        }
+        if !grew {
+            return Ok((selected, effective));
+        }
+    }
+}
+
+// Emit the blocks to inject: first every relevant library's setup statements
+// (a macro body may reference its own lib's ATTACH, and DuckDB bind-checks
+// at CREATE — so setup is injected for the provider of every selected macro,
+// not just `// use` libs), then the selected definitions in dependency order.
+// `lib_bodies` carries the parsed deployed content per provider path; setup
+// order = `// use` libs in annotation order, then remaining providers sorted.
+// Exact-duplicate setup statements across libraries are deduped (two libs
+// attaching the same catalog the same way must not double-ATTACH). Pure —
+// fetches happen in `inject_workspace_macros` — so this is unit-testable.
+fn plan_macro_injection(
+    selected: &std::collections::HashSet<String>,
+    registry: &[MacroRow],
+    use_libs: &[String],
+    lib_bodies: &std::collections::BTreeMap<
+        String,
+        Vec<windmill_parser::duckdb_macros::LibStatement>,
+    >,
+) -> Result<Vec<String>> {
+    use std::collections::{BTreeMap, BTreeSet, HashSet};
+    use windmill_parser::duckdb_macros::{macro_create_statement, topo_order_macros, LibStatement};
+
+    let by_name: BTreeMap<&str, &MacroRow> =
+        registry.iter().map(|r| (r.name.as_str(), r)).collect();
+
+    // Providers whose setup must run: every `// use` lib (annotation order —
+    // even with zero selected macros, the explicit `use` carries its ATTACH
+    // side effects), then the provider of each selected macro (sorted).
+    let mut providers: Vec<&str> = use_libs.iter().map(String::as_str).collect();
+    let selected_providers: BTreeSet<&str> = selected
+        .iter()
+        .filter_map(|n| by_name.get(n.as_str()).map(|r| r.provider_path.as_str()))
+        .collect();
+    for p in selected_providers {
+        if !providers.contains(&p) {
+            providers.push(p);
+        }
+    }
+
+    let mut injected: Vec<String> = Vec::new();
+    let mut seen_setup: HashSet<String> = HashSet::new();
+    for provider in providers {
+        let Some(statements) = lib_bodies.get(provider) else {
+            return Err(Error::ExecutionErr(format!(
+                "macro library `{provider}` has registry entries but its deployed script could \
+                 not be loaded"
+            )));
+        };
+        for s in statements {
+            if let LibStatement::Setup(stmt) = s {
+                let stmt = format!("{};", stmt.trim_end_matches(';').trim_end());
+                if seen_setup.insert(stmt.clone()) {
+                    injected.push(stmt);
+                }
+            }
+        }
+    }
+
+    if selected.is_empty() {
+        return Ok(injected);
+    }
+    let defs: BTreeMap<String, String> = selected
+        .iter()
+        .filter_map(|n| by_name.get(n.as_str()).map(|r| (n.clone(), r.body.clone())))
+        .collect();
+    let order = topo_order_macros(selected, &defs).map_err(Error::ExecutionErr)?;
+    for name in order {
+        let r = by_name.get(name.as_str()).ok_or_else(|| {
+            Error::ExecutionErr(format!("workspace macro `{name}` has no registry row"))
+        })?;
+        injected.push(macro_create_statement(
+            &r.name,
+            &r.params,
+            r.is_table_macro,
+            &r.body,
+        ));
+    }
+    Ok(injected)
+}
+
+// Weave the injected blocks into the user's statement list. DuckDB
+// bind-checks macro bodies at CREATE, in both directions:
+//   - an injected definition that a LOCAL macro calls must land *before*
+//     that local definition (pulling its own injected dependencies with it);
+//   - an injected definition that references a local macro must stay *after*
+//     it — a conflict between the two requirements is an error, not a
+//     silent mis-ordering.
+// The default slot (no local interplay) is after the leading prefix of setup
+// statements and local definitions, as before. Injected setup statements
+// (library ATTACHes) go at the earliest slot any injected definition landed
+// on: injected bodies are self-contained w.r.t. their own library's setup
+// and never depend on the consumer's setup.
+fn weave_macro_blocks(blocks: Vec<String>, injected: Vec<String>) -> Result<Vec<String>> {
+    if injected.is_empty() {
+        return Ok(blocks);
+    }
+    use std::collections::HashSet;
+    use windmill_parser::duckdb_macros::{
+        detect_macro_calls, is_macro_definition, parse_macro_definition,
+    };
+    use windmill_parser::sql_materialize::{classify_block, BlockClass};
+
+    // Default slot: insert before the first block that is neither setup nor
+    // a local macro definition (i.e. after the whole leading prefix).
+    let default_slot = blocks
+        .iter()
+        .position(|b| !matches!(classify_block(b), BlockClass::Setup) && !is_macro_definition(b))
+        .unwrap_or(blocks.len());
+
+    // The user's own macro definitions, as placement anchors.
+    let locals: Vec<(usize, windmill_parser::duckdb_macros::ParsedMacro)> = blocks
+        .iter()
+        .enumerate()
+        .filter_map(|(i, b)| parse_macro_definition(b).map(|m| (i, m)))
+        .collect();
+    let local_names: HashSet<String> = locals.iter().map(|(_, m)| m.name.clone()).collect();
+
+    // Plan emits [lib setup…, definitions in topo order…].
+    let (setup, defs): (Vec<String>, Vec<String>) =
+        injected.into_iter().partition(|s| !is_macro_definition(s));
+    let def_metas: Vec<windmill_parser::duckdb_macros::ParsedMacro> = defs
+        .iter()
+        .map(|s| {
+            parse_macro_definition(s).ok_or_else(|| {
+                Error::ExecutionErr(format!(
+                    "internal: generated macro statement failed to re-parse: {}",
+                    s.chars().take(80).collect::<String>()
+                ))
+            })
+        })
+        .collect::<Result<_>>()?;
+    let def_names: HashSet<String> = def_metas.iter().map(|m| m.name.clone()).collect();
+
+    // Per-injected-definition slot bounds from the local anchors. `slot = i`
+    // means "insert before block i".
+    let mut max_slot: Vec<usize> = vec![default_slot; defs.len()];
+    let mut min_slot: Vec<usize> = vec![0; defs.len()];
+    for (li, lm) in &locals {
+        let local_calls = detect_macro_calls(&lm.body, &def_names);
+        let referenced_locals_of: Vec<usize> = def_metas
+            .iter()
+            .enumerate()
+            .filter(|(_, dm)| detect_macro_calls(&dm.body, &local_names).contains(&lm.name))
+            .map(|(di, _)| di)
+            .collect();
+        for (di, dm) in def_metas.iter().enumerate() {
+            if local_calls.contains(&dm.name) {
+                max_slot[di] = max_slot[di].min(*li);
+            }
+        }
+        for di in referenced_locals_of {
+            min_slot[di] = min_slot[di].max(*li + 1);
+        }
+    }
+    // An injected definition must not land after any injected definition
+    // that depends on it: propagate upper bounds backwards through the topo
+    // order (dependents come later in `defs`).
+    let mut eff_slot = max_slot.clone();
+    for i in (0..defs.len()).rev() {
+        for j in (i + 1)..defs.len() {
+            if detect_macro_calls(&def_metas[j].body, &def_names).contains(&def_metas[i].name) {
+                eff_slot[i] = eff_slot[i].min(eff_slot[j]);
+            }
+        }
+        if min_slot[i] > eff_slot[i] {
+            return Err(Error::ExecutionErr(format!(
+                "workspace macro `{}` and this script's own macro definitions have conflicting \
+                 order requirements (a local macro calls it while it references a local macro \
+                 defined later); reorder the local definitions",
+                def_metas[i].name
+            )));
+        }
+    }
+    // Library setup runs before everything: the statements are self-contained
+    // (validated plain/non-managed at lib deploy, within-lib order preserved)
+    // and ANY consumer statement may depend on them at bind time — including
+    // a leading local macro definition that shadows a lib macro (so no def is
+    // injected) but still references the lib's ATTACHed catalog.
+    let mut out: Vec<String> = Vec::with_capacity(blocks.len() + defs.len() + setup.len());
+    out.extend(setup);
+    for slot in 0..=blocks.len() {
+        for (di, d) in defs.iter().enumerate() {
+            if eff_slot[di] == slot {
+                out.push(d.clone());
+            }
+        }
+        if let Some(b) = blocks.get(slot) {
+            out.push(b.clone());
+        }
+    }
+    Ok(out)
+}
+
+// Workspace-macro injection (`// macros` libraries): fetch the registry, plan
+// the needed `CREATE OR REPLACE TEMP MACRO` blocks and splice them into the
+// job's statement list. Late-bound: every run reads the current registry, so a
+// lib redeploy applies to the next run. On agent (Http) workers — no DB — the
+// implicit path silently degrades (a called macro then fails with DuckDB's
+// clear Catalog Error) but an explicit `// use` hard-errors like custom tests.
+async fn inject_workspace_macros(
+    conn: &Connection,
+    w_id: &str,
+    is_macro_lib: bool,
+    use_libs: &[String],
+    blocks: Vec<String>,
+) -> Result<Vec<String>> {
+    if is_macro_lib {
+        // A library run executes its own definitions; nothing to inject.
+        return Ok(blocks);
+    }
+    let db = match conn {
+        Connection::Sql(db) => db,
+        Connection::Http(_) => {
+            if !use_libs.is_empty() {
+                return Err(Error::ExecutionErr(
+                    "`// use` requires a server worker (not supported on agent workers in v1)"
+                        .to_string(),
+                ));
+            }
+            return Ok(blocks);
+        }
+    };
+    let registry = fetch_macro_registry(db, w_id).await?;
+    if registry.is_empty() && use_libs.is_empty() {
+        return Ok(blocks);
+    }
+    if select_workspace_macros(&blocks, &registry, use_libs)?.is_empty() && use_libs.is_empty() {
+        return Ok(blocks);
+    }
+    // Every relevant provider's deployed body is fetched: its setup
+    // statements are injected ahead of the definitions (a macro body may
+    // reference its own lib's ATTACH, which must run before the injected
+    // CREATE binds), and its own `// use` declarations are honored
+    // transitively — so the loop fetches lazily and re-resolves until no new
+    // library appears. Content fetches are cached by hash.
+    let mut lib_bodies: std::collections::BTreeMap<
+        String,
+        Vec<windmill_parser::duckdb_macros::LibStatement>,
+    > = Default::default();
+    let mut lib_uses: std::collections::BTreeMap<String, Vec<String>> = Default::default();
+    let (selected, effective_use) = loop {
+        let (selected, effective) =
+            resolve_macro_selection(&blocks, &registry, use_libs, &lib_uses)?;
+        let mut relevant: Vec<String> = effective.clone();
+        for name in &selected {
+            if let Some(r) = registry.iter().find(|r| &r.name == name) {
+                if !relevant.contains(&r.provider_path) {
+                    relevant.push(r.provider_path.clone());
+                }
+            }
+        }
+        let missing: Vec<String> = relevant
+            .into_iter()
+            .filter(|l| !lib_bodies.contains_key(l))
+            .collect();
+        if missing.is_empty() {
+            break (selected, effective);
+        }
+        for path in missing {
+            let content = fetch_macro_lib_body(conn, w_id, &path).await?;
+            let statements = windmill_parser::duckdb_macros::parse_macro_library(&content)
+                .map_err(|e| {
+                    Error::ExecutionErr(format!("macro library `{path}`: invalid content: {e}"))
+                })?;
+            lib_uses.insert(
+                path.clone(),
+                windmill_parser::asset_parser::parse_pipeline_annotations(&content).use_libs,
+            );
+            lib_bodies.insert(path, statements);
+        }
+    };
+    let injected = plan_macro_injection(&selected, &registry, &effective_use, &lib_bodies)?;
+    weave_macro_blocks(blocks, injected)
+}
+
+// Fetch a macro library's deployed body — for its setup statements; the
+// macro definitions themselves come from the registry. Used both for `// use`
+// libs and for the provider of every selected macro. Same server-worker
+// fetch path as custom data tests.
+async fn fetch_macro_lib_body(conn: &Connection, w_id: &str, path: &str) -> Result<String> {
+    let Connection::Sql(db) = conn else {
+        return Err(Error::ExecutionErr(
+            "workspace macros require a server worker (not supported on agent workers in v1)"
+                .to_string(),
+        ));
+    };
+    let hash = windmill_common::get_latest_script_hash(db, path, w_id)
+        .await?
+        .ok_or_else(|| {
+            Error::ExecutionErr(format!(
+                "macro library `{path}`: no deployed script found at this path"
+            ))
+        })?;
+    let content =
+        crate::get_script_content_by_hash(&windmill_common::scripts::ScriptHash(hash), w_id, conn)
+            .await?;
+    if !matches!(
+        content.language,
+        Some(windmill_common::scripts::ScriptLang::DuckDb)
+    ) {
+        return Err(Error::ExecutionErr(format!(
+            "macro library `{path}`: must be a DuckDB `// macros` library (got language {:?})",
+            content.language
+        )));
+    }
+    Ok(content.content)
+}
+
 // Pull a named i64 field (`snapshot_id` / `rows`) out of the trailing summary
 // read — which in wrap mode is the job result. Shape-tolerant (object / array /
 // nested), returns None if absent (literal mode, or capture failed).
@@ -573,6 +1036,11 @@ pub async fn do_duckdb(
         // `s3://` URIs — at run time.
         let sig = parse_duckdb_sig(query)?.args;
 
+        // `// macros` / `// use` also come off the ORIGINAL script text (the
+        // materialize rewrite strips the annotation comments). Drives the
+        // workspace-macro injection after the ATTACH-transform pass below.
+        let macro_ann = windmill_parser::asset_parser::parse_pipeline_annotations(query);
+
         let materialized_query;
         let query: &str = match &materialize {
             Some((Some(rewritten), _)) => {
@@ -684,6 +1152,19 @@ pub async fn do_duckdb(
             v
         };
 
+        // Workspace macros: splice `CREATE OR REPLACE TEMP MACRO` blocks for
+        // registry macros this script calls (plus whole `// use` libraries)
+        // after the setup/ATTACH prefix — post-transform, so macro bodies can
+        // reference the attached catalogs when DuckDB bind-checks the CREATE.
+        let query_block_list = inject_workspace_macros(
+            conn,
+            &job.workspace_id,
+            macro_ann.macros,
+            &macro_ann.use_libs,
+            query_block_list,
+        )
+        .await?;
+
         let base_internal_url = client.base_internal_url.clone();
         let w_id = job.workspace_id.clone();
         let job_dir = job_dir.to_string();
@@ -1460,6 +1941,374 @@ pub struct Arg {
 mod tests {
     use super::*;
 
+    fn mrow(name: &str, params: &str, body: &str, is_table: bool, provider: &str) -> MacroRow {
+        MacroRow {
+            name: name.to_string(),
+            params: params.to_string(),
+            body: body.to_string(),
+            is_table_macro: is_table,
+            provider_path: provider.to_string(),
+        }
+    }
+
+    fn blocks(list: &[&str]) -> Vec<String> {
+        list.iter().map(|s| s.to_string()).collect()
+    }
+
+    // Mimics the shell: resolve (incl. transitive library `// use`), parse the
+    // given lib sources, plan. `libs` maps provider path → deployed source
+    // (must cover every relevant provider).
+    fn select_and_plan(
+        b: &[String],
+        registry: &[MacroRow],
+        use_libs: &[&str],
+        libs: &[(&str, &str)],
+    ) -> Result<Vec<String>> {
+        use windmill_parser::asset_parser::parse_pipeline_annotations;
+        use windmill_parser::duckdb_macros::parse_macro_library;
+        let use_libs: Vec<String> = use_libs.iter().map(|s| s.to_string()).collect();
+        let lib_uses = libs
+            .iter()
+            .map(|(p, src)| (p.to_string(), parse_pipeline_annotations(src).use_libs))
+            .collect();
+        let (selected, effective) = resolve_macro_selection(b, registry, &use_libs, &lib_uses)?;
+        let lib_bodies = libs
+            .iter()
+            .map(|(p, src)| (p.to_string(), parse_macro_library(src).unwrap()))
+            .collect();
+        plan_macro_injection(&selected, registry, &effective, &lib_bodies)
+    }
+
+    #[test]
+    fn macro_injection_detects_and_orders_transitively() {
+        // consumer calls `outer`; `outer` calls `inner` — both injected, inner first.
+        let registry = vec![
+            mrow("outer", "a", "inner(a) + 1", false, "f/lib/m"),
+            mrow("inner", "a", "a * 2", false, "f/lib/m"),
+            mrow("unused", "a", "a", false, "f/lib/m"),
+        ];
+        let b = blocks(&["ATTACH 'x.duckdb' AS ext;", "SELECT outer(1);"]);
+        let injected = select_and_plan(&b, &registry, &[], &[("f/lib/m", "")]).unwrap();
+        assert_eq!(
+            injected,
+            vec![
+                "CREATE OR REPLACE TEMP MACRO inner(a) AS a * 2;".to_string(),
+                "CREATE OR REPLACE TEMP MACRO outer(a) AS inner(a) + 1;".to_string(),
+            ]
+        );
+    }
+
+    #[test]
+    fn implicit_call_injects_provider_setup() {
+        // A macro whose body references its own lib's ATTACH must carry that
+        // setup even on the implicit (detection) path — DuckDB bind-checks the
+        // body at CREATE, so `ext` must be attached first.
+        let registry = vec![mrow(
+            "lookup",
+            "k",
+            "(SELECT v FROM ext.kv WHERE key = k)",
+            false,
+            "f/lib/m",
+        )];
+        let b = blocks(&["SELECT lookup('a');"]);
+        let injected = select_and_plan(
+            &b,
+            &registry,
+            &[],
+            &[(
+                "f/lib/m",
+                "ATTACH 'ext.duckdb' AS ext;\nCREATE MACRO lookup(k) AS (SELECT v FROM ext.kv WHERE key = k);",
+            )],
+        )
+        .unwrap();
+        assert_eq!(injected[0], "ATTACH 'ext.duckdb' AS ext;");
+        assert!(injected[1].contains("TEMP MACRO lookup(k)"));
+    }
+
+    #[test]
+    fn provider_lib_use_is_honored_transitively() {
+        // Lib B's macro calls `base_macro` inside a string (invisible to
+        // lexical detection), so B declares `// use f/lib/base`. A consumer
+        // that merely calls B's macro must still get base's whole library —
+        // the dynamic dependency is encapsulated in B, not leaked to every
+        // consumer.
+        let registry = vec![
+            mrow(
+                "str_macro",
+                "",
+                "(SELECT v FROM query('SELECT base_macro() AS v'))",
+                false,
+                "f/lib/b",
+            ),
+            mrow("base_macro", "", "42", false, "f/lib/base"),
+        ];
+        let b = blocks(&["SELECT str_macro();"]);
+        let injected = select_and_plan(
+            &b,
+            &registry,
+            &[],
+            &[
+                (
+                    "f/lib/b",
+                    "-- macros\n-- use f/lib/base\nCREATE MACRO str_macro() AS (SELECT v FROM query('SELECT base_macro() AS v'));",
+                ),
+                ("f/lib/base", "-- macros\nCREATE MACRO base_macro() AS 42;"),
+            ],
+        )
+        .unwrap();
+        assert!(
+            injected
+                .iter()
+                .any(|s| s.contains("TEMP MACRO base_macro()")),
+            "{injected:?}"
+        );
+        assert!(injected
+            .iter()
+            .any(|s| s.contains("TEMP MACRO str_macro()")));
+        // Both defs are injected; string-hidden deps carry no topo edge, so
+        // their relative order falls back to name-sorted ties (deterministic
+        // for this input — the assertion pins the current behavior).
+        let base_idx = injected
+            .iter()
+            .position(|s| s.contains("TEMP MACRO base_macro()"))
+            .unwrap();
+        let str_idx = injected
+            .iter()
+            .position(|s| s.contains("TEMP MACRO str_macro()"))
+            .unwrap();
+        assert!(base_idx < str_idx, "{injected:?}");
+    }
+
+    #[test]
+    fn duplicate_setup_across_libs_is_deduped() {
+        // Two libs attaching the same catalog identically must not double-ATTACH.
+        let registry = vec![
+            mrow("m1", "a", "a", false, "f/lib/one"),
+            mrow("m2", "a", "a", false, "f/lib/two"),
+        ];
+        let b = blocks(&["SELECT m1(1), m2(2);"]);
+        let src = "ATTACH 'ext.duckdb' AS ext;\nCREATE MACRO m1(a) AS a;";
+        let src2 = "ATTACH 'ext.duckdb' AS ext;\nCREATE MACRO m2(a) AS a;";
+        let injected = select_and_plan(
+            &b,
+            &registry,
+            &[],
+            &[("f/lib/one", src), ("f/lib/two", src2)],
+        )
+        .unwrap();
+        assert_eq!(
+            injected
+                .iter()
+                .filter(|s| s.starts_with("ATTACH 'ext.duckdb'"))
+                .count(),
+            1
+        );
+    }
+
+    #[test]
+    fn macro_injection_empty_when_nothing_called() {
+        let registry = vec![mrow("m", "a", "a", false, "f/lib/m")];
+        let b = blocks(&["SELECT 1;"]);
+        assert!(select_workspace_macros(&b, &registry, &[])
+            .unwrap()
+            .is_empty());
+    }
+
+    #[test]
+    fn local_definition_wins_over_registry() {
+        // A consumer defining its own `dbl` must never get the registry's
+        // version injected — a library deploy can't change this job.
+        let registry = vec![mrow("dbl", "a", "a * 10", false, "f/lib/m")];
+        let b = blocks(&["CREATE TEMP MACRO dbl(a) AS a * 2;", "SELECT dbl(4);"]);
+        assert!(select_workspace_macros(&b, &registry, &[])
+            .unwrap()
+            .is_empty());
+    }
+
+    #[test]
+    fn use_lib_setup_survives_when_no_macros_selected() {
+        // Every lib macro shadowed locally — the explicit `// use` must still
+        // carry the lib's setup statements (its ATTACH side effects).
+        let registry = vec![mrow("dbl", "a", "a * 10", false, "f/lib/m")];
+        let b = blocks(&["CREATE TEMP MACRO dbl(a) AS a * 2;", "SELECT dbl(4);"]);
+        let injected = select_and_plan(
+            &b,
+            &registry,
+            &["f/lib/m"],
+            &[(
+                "f/lib/m",
+                "ATTACH 'ext.duckdb' AS ext;\nCREATE MACRO dbl(a) AS a * 10;",
+            )],
+        )
+        .unwrap();
+        assert_eq!(injected, vec!["ATTACH 'ext.duckdb' AS ext;".to_string()]);
+    }
+
+    #[test]
+    fn weave_lands_after_local_definition_it_references() {
+        // Injected bodies may call a local macro (local-wins excludes it from
+        // the registry set), so the leading local CREATE must run first.
+        let b = blocks(&[
+            "ATTACH 'x' AS a;",
+            "CREATE MACRO local_dbl(a) AS a * 2;",
+            "SELECT registry_m(1);",
+        ]);
+        let out = weave_macro_blocks(
+            b,
+            vec!["CREATE OR REPLACE TEMP MACRO registry_m(a) AS local_dbl(a) + 1;".into()],
+        )
+        .unwrap();
+        assert_eq!(
+            out[2],
+            "CREATE OR REPLACE TEMP MACRO registry_m(a) AS local_dbl(a) + 1;"
+        );
+    }
+
+    #[test]
+    fn weave_lands_before_local_definition_that_calls_it() {
+        // The inverse direction: a LOCAL macro whose body calls a registry
+        // macro bind-checks at its own CREATE, so the injected definition
+        // (and its library setup) must come first.
+        let b = blocks(&[
+            "CREATE MACRO outer(x) AS shared_inner(x) + 1;",
+            "SELECT outer(1);",
+        ]);
+        let out = weave_macro_blocks(
+            b,
+            vec![
+                "ATTACH 'ext.duckdb' AS ext;".into(),
+                "CREATE OR REPLACE TEMP MACRO shared_inner(x) AS x * 2;".into(),
+            ],
+        )
+        .unwrap();
+        assert_eq!(
+            out,
+            blocks(&[
+                "ATTACH 'ext.duckdb' AS ext;",
+                "CREATE OR REPLACE TEMP MACRO shared_inner(x) AS x * 2;",
+                "CREATE MACRO outer(x) AS shared_inner(x) + 1;",
+                "SELECT outer(1);",
+            ])
+        );
+    }
+
+    #[test]
+    fn weave_pulls_injected_dependencies_before_the_calling_local() {
+        // outer(local) calls injected `mid`, whose body calls injected `base`:
+        // both must precede the local definition, base before mid.
+        let b = blocks(&["CREATE MACRO outer(x) AS mid(x) + 1;", "SELECT outer(1);"]);
+        let out = weave_macro_blocks(
+            b,
+            vec![
+                "CREATE OR REPLACE TEMP MACRO base(x) AS x * 2;".into(),
+                "CREATE OR REPLACE TEMP MACRO mid(x) AS base(x) + 1;".into(),
+            ],
+        )
+        .unwrap();
+        let pos = |needle: &str| out.iter().position(|s| s.contains(needle)).unwrap();
+        assert!(pos("MACRO base(x)") < pos("MACRO mid(x)"));
+        assert!(pos("MACRO mid(x)") < pos("MACRO outer(x)"));
+    }
+
+    #[test]
+    fn weave_conflicting_local_order_errors() {
+        // local_a calls injected X; X references local_b, defined after
+        // local_a — unsatisfiable, must error rather than silently mis-order.
+        let b = blocks(&[
+            "CREATE MACRO local_a(x) AS conflicted(x);",
+            "CREATE MACRO local_b(x) AS x * 3;",
+            "SELECT local_a(1);",
+        ]);
+        let err = weave_macro_blocks(
+            b,
+            vec!["CREATE OR REPLACE TEMP MACRO conflicted(x) AS local_b(x) + 1;".into()],
+        )
+        .unwrap_err()
+        .to_string();
+        assert!(err.contains("conflicting"), "{err}");
+    }
+
+    #[test]
+    fn use_lib_injects_all_macros_and_setup() {
+        let registry = vec![
+            mrow("m1", "a", "a", false, "f/lib/m"),
+            mrow("m2", "", "SELECT 1", true, "f/lib/m"),
+        ];
+        let b = blocks(&["SELECT 'no calls here';"]);
+        let injected = select_and_plan(
+            &b,
+            &registry,
+            &["f/lib/m"],
+            &[(
+                "f/lib/m",
+                "ATTACH 'ext.duckdb' AS ext;\nCREATE MACRO m1(a) AS a;\nCREATE MACRO m2() AS TABLE SELECT 1;",
+            )],
+        )
+        .unwrap();
+        assert_eq!(injected[0], "ATTACH 'ext.duckdb' AS ext;");
+        assert!(injected[1..].iter().any(|s| s.contains("TEMP MACRO m1(a)")));
+        assert!(injected[1..]
+            .iter()
+            .any(|s| s.contains("TEMP MACRO m2() AS TABLE")));
+    }
+
+    #[test]
+    fn use_lib_without_registry_rows_errors() {
+        let b = blocks(&["SELECT 1;"]);
+        let err = select_workspace_macros(&b, &[], &["f/lib/gone".to_string()])
+            .unwrap_err()
+            .to_string();
+        assert!(err.contains("no deployed macro library"), "{err}");
+    }
+
+    #[test]
+    fn weave_lands_after_setup_prefix() {
+        let b = blocks(&[
+            "INSTALL ducklake;",
+            "ATTACH 'ducklake:postgres:...' AS lake (DATA_PATH 's3://x');",
+            "CREATE TABLE IF NOT EXISTS lake.t AS SELECT 1;",
+            "SELECT dbl(1);",
+        ]);
+        let out = weave_macro_blocks(
+            b,
+            vec!["CREATE OR REPLACE TEMP MACRO dbl(a) AS a * 2;".into()],
+        )
+        .unwrap();
+        assert_eq!(out[2], "CREATE OR REPLACE TEMP MACRO dbl(a) AS a * 2;");
+        assert_eq!(out.len(), 5);
+    }
+
+    #[test]
+    fn weave_setup_runs_before_all_user_blocks() {
+        // Injected library setup is self-contained and anything in the
+        // consumer may depend on it at bind time — it always goes first.
+        let out = weave_macro_blocks(blocks(&["ATTACH 'x' AS a;"]), blocks(&["m;"])).unwrap();
+        assert_eq!(out, blocks(&["m;", "ATTACH 'x' AS a;"]));
+        let out = weave_macro_blocks(vec![], blocks(&["m;"])).unwrap();
+        assert_eq!(out, blocks(&["m;"]));
+    }
+
+    #[test]
+    fn weave_use_setup_precedes_local_shadow_that_references_it() {
+        // `// use` with every lib macro shadowed locally: no defs are
+        // injected, but the local shadow's body references the lib's
+        // ATTACHed catalog — the injected setup must still run first or the
+        // local CREATE bind-fails.
+        let b = blocks(&[
+            "CREATE TEMP MACRO kv_lookup(k) AS (SELECT v FROM ext.kv WHERE key = k);",
+            "SELECT kv_lookup('a');",
+        ]);
+        let out = weave_macro_blocks(b, vec!["ATTACH 'ext.duckdb' AS ext;".into()]).unwrap();
+        assert_eq!(
+            out,
+            blocks(&[
+                "ATTACH 'ext.duckdb' AS ext;",
+                "CREATE TEMP MACRO kv_lookup(k) AS (SELECT v FROM ext.kv WHERE key = k);",
+                "SELECT kv_lookup('a');",
+            ])
+        );
+    }
+
     #[test]
     fn cgroup_bytes_unlimited_or_invalid_returns_none() {
         assert_eq!(cgroup_bytes_to_duckdb_memory_limit(0), None);
diff --git a/docs/pipelines-vs-dbt.md b/docs/pipelines-vs-dbt.md
index 3e08b35de4..c073c88b8c 100644
--- a/docs/pipelines-vs-dbt.md
+++ b/docs/pipelines-vs-dbt.md
@@ -52,7 +52,7 @@ Asset-centric, polyglot, annotation-driven, event-aware:
 | Snapshots / SCD2 | Yes (`key=… history`) | Managed strategy |
 | Selective execution grammar | No | UI/CLI surface |
 | Schema contracts | No, but design metadata model | TODO with design work |
-| Packages / community | Closed annotation parser starts to bind | Decide extensibility model |
+| Packages / community / macros | No | **Shipped** (`// macros` workspace macro libraries) |
 | Semantic layer / metrics | No | Large additive scope |
 
 The three items where the current abstraction needs deliberate decisions
@@ -156,31 +156,64 @@ schemas live (asset row, sidecar?), **when** they're captured (post-run?
 edit-time?), and **how** versioning works are non-trivial design choices.
 Worth doing intentionally now while the asset surface is still young.
 
-### 7. Packages / community
+### 7. Packages / community / macros — **shipped** (macro libraries)
 
 dbt: `dbt deps`, `dbt-utils`, `dbt-expectations`. Whole ecosystem on Jinja
-macros.
+macros — text templating that exists largely to paper over weak warehouse
+SQL and absent code reuse.
 
-Today: closed-vocabulary annotation parser — `parsePipelineAnnotations`
-hardcodes `pipeline`, `partitioned`, `freshness`, `trigger`, `debounce`,
-`tag`, `retry`, `on`. No way for a package to register
-`// test rows_between 100 1000000` or `// hook on_failure my_alert`.
+**Shipped** as workspace **DuckDB macro libraries** — engine-native
+`CREATE MACRO` (scalar + table-valued) instead of templating, resolved and
+injected by Windmill ("resolve-and-inject"):
 
-This is the one place the current abstraction starts to bind. Macros are
-also dbt's biggest pain source — we don't have to replicate them. Possible
-shapes:
+- A DuckDB script annotated `// macros` is a library: its body is
+  `CREATE OR REPLACE MACRO` statements (plus plain setup). Deploy parses each
+  macro into the `macro_definition` registry (workspace-unique names) —
+  available to consumers the moment the deploy transaction commits.
+- Any DuckDB script that *calls* a registered macro gets
+  `CREATE OR REPLACE TEMP MACRO …` blocks injected into its statement list at
+  job time — dependency-topo-ordered (DuckDB bind-checks macro bodies at
+  CREATE) and placed after the setup/ATTACH prefix. Each provider library's
+  own setup statements are injected ahead of the definitions (deduped across
+  libraries), so a macro body that references its lib's ATTACH binds on the
+  implicit path too. Late-bound: a lib redeploy applies to subsequent runs —
+  workers cache the registry per workspace and evict it via a transactional
+  `notify_macro_registry_change` event (worst-case staleness = the notify
+  poll interval, ~10s; 60s TTL as backstop) — dbt's semantics with a
+  deploy-time registry instead of a compile step.
+- `// use <lib_path>` force-injects a whole library (definitions + its setup
+  statements) — the escape hatch for dynamic SQL (e.g. calls inside
+  `query('…')` strings) that lexical detection can't see. A library's own
+  `// use` declarations are honored transitively: consuming a macro from lib B
+  pulls in whatever B `// use`s, so a dynamic dependency stays encapsulated in
+  the library instead of leaking to every consumer.
+- Deploy-time validation: builtin-shadow rejection (DuckDB silently allows
+  shadowing `concat`!), within-file forward references, cross-lib name
+  collisions, non-setup statements, managed-ATTACH setup.
+- Graph surface: the library renders as a node ("defines N macros" badge +
+  signature strip in the details pane) with violet lib→consumer edges from
+  deploy-recorded call detection (`macro_usage`) and `// use` annotations.
 
-- **Hooks-as-scripts**: `// on_failure f/lib/alert`, `// pre_run f/lib/setup`.
-  Value is a script path. Stays inside the closed annotation set; new
-  hook *types* still require parser changes but third-party *behavior*
-  ships as scripts.
-- **Test types as scripts**: a test is a script that returns 0/1, packaged
-  via the hub like anything else.
-- **Materialization plugins**: harder; template-generator would need to be
-  extensible.
+**Trust model (deliberate, dbt-package-like).** Macro libraries are
+workspace-trusted code: anyone who can deploy a script can publish macros,
+and implicit call detection injects them into other users' DuckDB jobs with
+the *consuming* job's credentials — the same trust boundary as a dbt package
+in the project (any committer changes every model). Two guardrails bound it:
+a script's **own** macro definitions always win (a library deploy can never
+replace a local `CREATE MACRO` — the name is excluded from injection
+entirely), and names are workspace-unique with built-in shadowing rejected
+at deploy. A call to a macro that doesn't exist yet is the residual surface
+(whoever first deploys a lib defining that name "captures" the call) — if
+workspaces ever need finer trust, per-consumer opt-in/opt-out or
+ACL-filtered injection can be layered on the same seam.
 
-Doing this *after* you've shipped 30 hardcoded annotations is much harder
-than doing it now.
+Table macros + `query_table(src)` cover most of dbt's *model factory*
+pattern (one parameterized transform, N thin per-asset scripts); DuckDB's
+richer SQL (`COLUMNS(*)`, native `PIVOT`, lambdas) absorbs much of
+dbt-utils outright. Parameterized custom data tests (dbt's generic tests)
+remain a follow-up on the `// data_test <script>` seam, as does the broader
+annotation-extensibility question (hooks-as-scripts etc.) — macros closed
+the reuse gap without opening the parser vocabulary.
 
 ### 8. Semantic layer / metrics
 
diff --git a/frontend/src/lib/components/Editor.svelte b/frontend/src/lib/components/Editor.svelte
index 1966074a92..ae413d2484 100644
--- a/frontend/src/lib/components/Editor.svelte
+++ b/frontend/src/lib/components/Editor.svelte
@@ -87,6 +87,10 @@
 	import { parseTypescriptDeps } from '$lib/relative_imports'
 
 	import { scriptLangToEditorLang } from '$lib/scripts'
+	import {
+		listWorkspaceMacrosCached,
+		macroDefinitionSql
+	} from '$lib/components/assets/workspaceMacros'
 	import * as htmllang from '$lib/svelteMonarch'
 	import { conf, language } from '$lib/vueMonarch'
 
@@ -625,6 +629,53 @@
 		})
 	}
 
+	let workspaceMacroCompletor: IDisposable | undefined = undefined
+
+	// Workspace DuckDB macros (deployed `// macros` libraries): suggest each
+	// macro while typing an identifier, with its signature + body as docs and
+	// a snippet insert that parks the cursor inside the call parens. Fetched
+	// via a short-TTL cache — macros are late-bound, so mild staleness is fine.
+	async function addWorkspaceMacroCompletions() {
+		workspaceMacroCompletor?.dispose()
+		const workspace = $workspaceStore
+		if (!workspace) return
+		let macros: Awaited<ReturnType<typeof listWorkspaceMacrosCached>> = []
+		try {
+			macros = await listWorkspaceMacrosCached(workspace)
+		} catch (e) {
+			console.error('error listing workspace macros', e)
+			return
+		}
+		if (macros.length === 0) return
+		workspaceMacroCompletor = languages.registerCompletionItemProvider('sql', {
+			provideCompletionItems: function (model, position) {
+				const word = model.getWordUntilPosition(position)
+				const range = {
+					startLineNumber: position.lineNumber,
+					endLineNumber: position.lineNumber,
+					startColumn: word.startColumn,
+					endColumn: word.endColumn
+				}
+				const suggestions = macros.map((m) => ({
+					label: `${m.name}(${m.params})`,
+					kind: m.is_table
+						? languages.CompletionItemKind.Interface
+						: languages.CompletionItemKind.Function,
+					detail: `${m.is_table ? 'table macro' : 'macro'} · ${m.provider_path}`,
+					documentation: {
+						value: '```sql\n' + macroDefinitionSql(m) + '\n```'
+					},
+					insertText: `${m.name}($0)`,
+					insertTextRules: languages.CompletionItemInsertTextRule.InsertAsSnippet,
+					filterText: m.name,
+					range,
+					sortText: 'b' + m.name
+				}))
+				return { suggestions }
+			}
+		})
+	}
+
 	let sqlSchemaCompletor: IDisposable | undefined = undefined
 
 	async function updateSchema(newSchemaRes: string | undefined) {
@@ -1833,6 +1884,7 @@
 		autocompletor && autocompletor.dispose()
 		sqlTypeCompletor && sqlTypeCompletor.dispose()
 		resultCollectionCompletor && resultCollectionCompletor.dispose()
+		workspaceMacroCompletor && workspaceMacroCompletor.dispose()
 		preprocessorCompletor && preprocessorCompletor.dispose()
 		timeoutModel && clearTimeout(timeoutModel)
 		changeChainStart = undefined
@@ -1908,6 +1960,14 @@
 			: (sqlTypeCompletor?.dispose(), resultCollectionCompletor?.dispose())
 	})
 
+	$effect(() => {
+		initialized && lang === 'sql' && scriptLang === 'duckdb'
+			? untrack(() => {
+					addWorkspaceMacroCompletions()
+				})
+			: workspaceMacroCompletor?.dispose()
+	})
+
 	$effect(() => {
 		initialized && canHavePreprocessor(lang) && enablePreprocessorSnippet
 			? untrack(() => addPreprocessorCompletions(lang))
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index 6851fc843a..1c5cf2dde6 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -221,6 +221,7 @@
 			| 'trigger-native'
 			| 'add-anchor'
 			| 'data-test'
+			| 'macro'
 		unsaved?: boolean
 		// Edge from a missing-trigger placeholder — styled red dashed to
 		// signal "this script declared `// on kafka` but no trigger row
@@ -232,6 +233,10 @@
 		// Producer's `// column` declared lineage, on the same write-edge —
 		// rendered as a columns badge on the link.
 		column_lineage?: NonNullable<AssetGraphResponse['runnables'][number]['column_lineage']>
+		// Macro-library edge payload: the macros the consumer calls (or the
+		// whole lib when pulled in via `// use`) — rendered as a ƒ badge.
+		macro_names?: string[]
+		via_use?: boolean
 	}
 
 	// Graph-id of the script the user just launched (zero-latency hint),
@@ -398,6 +403,7 @@
 					freshness: r.freshness,
 					tag: r.tag,
 					retry: r.retry,
+					macros: r.macros,
 					unsaved: r.unsaved ?? false,
 					// Same dispatch the asset node uses, only routed when the
 					// runnable is a script (the page handler short-circuits
@@ -495,6 +501,26 @@
 			}
 		}
 
+		// Macro-library → consumer edges (runnable→runnable, unlike the
+		// asset-mediated lineage above). Endpoints must exist as nodes — an
+		// undeployed `// use` target without a draft has none, so its edge is
+		// skipped (the annotation still shows in the script body itself).
+		const runnableNodeIds = new Set(g.runnables.map((r) => `${r.usage_kind}:${r.path}`))
+		for (const me of g.macro_edges ?? []) {
+			const libId = `script:${me.lib_path}`
+			const consumerId = `script:${me.consumer_path}`
+			if (!runnableNodeIds.has(libId) || !runnableNodeIds.has(consumerId)) continue
+			edges.push({
+				id: `macro:${libId}->${consumerId}`,
+				source: libId,
+				target: consumerId,
+				kind: 'macro',
+				unsaved: me.unsaved,
+				macro_names: me.macro_names,
+				via_use: me.via_use
+			})
+		}
+
 		// Non-asset triggers (schedule + native) are rendered as source nodes
 		// above the pipeline script. Real (non-missing) nodes are
 		// deduplicated per (kind, ref) tuple so a single schedule shared
@@ -913,6 +939,16 @@
 						label = 'triggers'
 						labelStyle = 'fill: rgb(107 114 128); font-size: 10px; font-weight: 600;'
 						break
+					case 'macro':
+						// Library → consumer: violet dashed, visually apart from both
+						// lineage (blue/gray solid) and trigger (gray dashed) families —
+						// it's a code dependency, not data flow or execution.
+						style = 'stroke: rgb(139 92 246); stroke-width: 1.25px;'
+						strokeDasharray = '5 3'
+						markerColor = 'rgb(139 92 246)'
+						label = e.via_use ? 'uses lib' : 'macros'
+						labelStyle = 'fill: rgb(139 92 246); font-size: 10px; font-weight: 600;'
+						break
 					default:
 						style = ''
 				}
@@ -962,7 +998,11 @@
 						testsRunStatus: e.data_tests?.length ? runStates?.get(e.source)?.status : undefined,
 						// Column-lineage badge on the same write-edge (the link is the
 						// transformation whose output columns the lineage describes).
-						column_lineage: e.column_lineage
+						column_lineage: e.column_lineage,
+						// Macro-edge badge: which of the library's macros the consumer
+						// calls (all of them when pulled in via `// use`).
+						macro_names: e.macro_names,
+						via_use: e.via_use
 					},
 					animated,
 					label,
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
index a9548a1e0e..1abe21f76d 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
@@ -14,6 +14,7 @@
 		Loader2,
 		PanelRightClose,
 		Save,
+		SquareFunction,
 		Trash2,
 		X,
 		Pencil
@@ -31,6 +32,7 @@
 		type PipelineAnnotations
 	} from './parsePipelineAnnotations'
 	import ColumnLineageTrace from './ColumnLineageTrace.svelte'
+	import { extractDraftMacros } from './resolveGraph'
 	import { assetColumnNodes, type ColumnLineageGraph } from './columnLineageGraph'
 	import SummaryPathDisplay from '$lib/components/SummaryPathDisplay.svelte'
 	import S3FilePreview from '$lib/components/S3FilePreview.svelte'
@@ -583,9 +585,17 @@
 					triggerAssets: [],
 					nativeTriggers: [],
 					dataTests: [],
-					columnLineage: []
+					columnLineage: [],
+					macros: false,
+					useLibs: []
 				}
 	)
+	// `// macros` library: the defined signatures for the strip above the
+	// source. Regex-light extraction (display only; deploy runs the strict
+	// Rust parser).
+	let macroDefs = $derived(
+		script && liveAnnotations.macros ? extractDraftMacros(script.content ?? '') : []
+	)
 	$effect(() => {
 		// Live-overlay emits are an edit-mode concern: in read-only modes
 		// the loaded content is the deployed version (already covered by
@@ -1108,20 +1118,25 @@
 			     the legitimate data-upload run form when applicable, and the
 			     same runs panel as the asset branch. -->
 			{#key script.path}
-				<PipelineScriptView
-					{script}
-					{isDraft}
-					canRun={canRunByPath}
-					onRun={onRunByPath}
-					onRunCascade={onRunCascadeByPath}
-					downstreamCount={downstreamSubscribers}
-					{runsRefreshKey}
-					{runsPendingJobId}
-					onRunCompleted={() => {
-						previewRefreshKey += 1
-						onRunCompleted?.()
-					}}
-				/>
+				<div class="flex flex-col h-full">
+					{@render macroLibStrip()}
+					<div class="flex-1 min-h-0">
+						<PipelineScriptView
+							{script}
+							{isDraft}
+							canRun={canRunByPath}
+							onRun={onRunByPath}
+							onRunCascade={onRunCascadeByPath}
+							downstreamCount={downstreamSubscribers}
+							{runsRefreshKey}
+							{runsPendingJobId}
+							onRunCompleted={() => {
+								previewRefreshKey += 1
+								onRunCompleted?.()
+							}}
+						/>
+					</div>
+				</div>
 			{/key}
 		{:else if script}
 			<!-- Key on path alone, NOT hash: deploying a draft or re-saving turns
@@ -1132,54 +1147,78 @@
 			     remounts while a same-script save doesn't. History is disabled
 			     here, so there's no revert-to-old-hash case needing a reset. -->
 			{#key script.path}
-				<ScriptEditor
-					bind:this={scriptEditorRef}
-					showCaptures={false}
-					noSyncFromGithub
-					requireValidAssets
-					lang={script.language}
-					path={script.path}
-					tag={script.tag}
-					fixedOverflowWidgets={false}
-					previewLayout="bottom"
-					customUi={{
-						previewPanel: {
-							disableHistory: true,
-							disableTracing: true,
-							disableTriggerCaptures: true,
-							disableJsonView: true,
-							// Drop the full args column (most pipeline scripts take
-							// no inputs), render the LogPanel full-width with
-							// logs|result side by side, and float the Test/Cancel
-							// button onto the editor band above. But when the
-							// script *does* declare inputs (e.g. a partitioned
-							// script that needs a `partition` arg to run), show a
-							// compact SchemaForm between the Test button and the
-							// logs so the run can actually be parameterised.
-							hideArgs: true,
-							argsAboveLogs: true,
-							logsResultSideBySide: true,
-							downstreamSubscribers,
-							onBoundedRun: onStartBoundedRun,
-							// Selecting a script node should immediately show
-							// "what happened last time it ran" — pulling the
-							// latest top-level completed job into the preview
-							// pane is far more useful than an empty placeholder.
-							loadLastRunOnMount: true
-						}
-					}}
-					bind:code={script.content}
-					bind:schema={script.schema}
-					bind:assets={liveBodyAssets}
-					bind:inferredColumnLineage={liveColumnLineage}
-					{onTestStateChange}
-					{args}
-				/>
+				<div class="flex flex-col h-full">
+					{@render macroLibStrip()}
+					<div class="flex-1 min-h-0 relative">
+						<ScriptEditor
+							bind:this={scriptEditorRef}
+							showCaptures={false}
+							noSyncFromGithub
+							requireValidAssets
+							lang={script.language}
+							path={script.path}
+							tag={script.tag}
+							fixedOverflowWidgets={false}
+							previewLayout="bottom"
+							customUi={{
+								previewPanel: {
+									disableHistory: true,
+									disableTracing: true,
+									disableTriggerCaptures: true,
+									disableJsonView: true,
+									// Drop the full args column (most pipeline scripts take
+									// no inputs), render the LogPanel full-width with
+									// logs|result side by side, and float the Test/Cancel
+									// button onto the editor band above. But when the
+									// script *does* declare inputs (e.g. a partitioned
+									// script that needs a `partition` arg to run), show a
+									// compact SchemaForm between the Test button and the
+									// logs so the run can actually be parameterised.
+									hideArgs: true,
+									argsAboveLogs: true,
+									logsResultSideBySide: true,
+									downstreamSubscribers,
+									onBoundedRun: onStartBoundedRun,
+									// Selecting a script node should immediately show
+									// "what happened last time it ran" — pulling the
+									// latest top-level completed job into the preview
+									// pane is far more useful than an empty placeholder.
+									loadLastRunOnMount: true
+								}
+							}}
+							bind:code={script.content}
+							bind:schema={script.schema}
+							bind:assets={liveBodyAssets}
+							bind:inferredColumnLineage={liveColumnLineage}
+							{onTestStateChange}
+							{args}
+						/>
+					</div>
+				</div>
 			{/key}
 		{/if}
 	</div>
 </div>
 
+{#snippet macroLibStrip()}
+	{#if macroDefs.length > 0}
+		<!-- `// macros` library: the defined signatures, always visible above the
+		     source so consumers can see what the lib provides at a glance. -->
+		<div class="shrink-0 px-3 py-1.5 border-b bg-surface-secondary flex items-start gap-2">
+			<SquareFunction size={12} class="shrink-0 mt-0.5 text-violet-600 dark:text-violet-400" />
+			<div class="flex flex-wrap gap-x-3 gap-y-0.5 text-2xs font-mono text-secondary min-w-0">
+				<!-- Index-keyed: a live buffer can transiently hold two defs with
+				     the same name mid-edit, which would crash a name-keyed each. -->
+				{#each macroDefs as m, i (i)}
+					<span class="truncate" title={m.is_table ? 'table macro' : 'scalar macro'}>
+						{m.name}({m.params}){m.is_table ? ' → table' : ''}
+					</span>
+				{/each}
+			</div>
+		</div>
+	{/if}
+{/snippet}
+
 {#if removeOpen}
 	<!-- Single combined modal. Archive is the always-available default;
 	     Delete shows only for workspace/super admins because it's
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphEdge.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphEdge.svelte
index c4bef2dd1f..329fad6902 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphEdge.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphEdge.svelte
@@ -1,7 +1,7 @@
 <script lang="ts">
 	import { BaseEdge, getBezierPath, type EdgeProps } from '@xyflow/svelte'
 	import { NODE } from '$lib/components/graph/util'
-	import { FlaskConical, Columns3 } from 'lucide-svelte'
+	import { FlaskConical, Columns3, SquareFunction } from 'lucide-svelte'
 	import type { ColumnLineage, DataTest } from './parsePipelineAnnotations'
 
 	let {
@@ -76,6 +76,20 @@
 	// they don't overlap on the link (each badge is 18px tall; +18 clears it).
 	let columnsBadgeY = $derived(tests && tests.length > 0 ? labelY + 18 : labelY)
 
+	// Macro-edge badge: which of the library's macros the consumer calls (all
+	// of them when the whole lib is pulled in via `// use`).
+	let macroNames = $derived((data as { macro_names?: string[] } | undefined)?.macro_names)
+	let macroViaUse = $derived((data as { via_use?: boolean } | undefined)?.via_use ?? false)
+	let macroBadgeTitle = $derived(
+		macroNames && macroNames.length > 0
+			? `${macroViaUse ? 'uses the whole library' : `calls ${macroNames.length} macro${macroNames.length > 1 ? 's' : ''}`}:\n${macroNames
+					.map((n) => `• ${n}()`)
+					.join('\n')}`
+			: macroViaUse
+				? 'uses the whole library'
+				: ''
+	)
+
 	// An edge that skips at least one full layer (source-bottom → target-top
 	// gap larger than gap + node row) while staying near-vertical runs
 	// straight under the nodes in between — the child-and-grandchild-of-the-
@@ -188,6 +202,26 @@
 	</foreignObject>
 {/if}
 
+{#if (macroNames && macroNames.length > 0) || macroViaUse}
+	<!-- Macro-edge badge, centered on the link like the data-test badge. -->
+	<foreignObject x={labelX - 28} y={labelY - 9} width="56" height="18" class="overflow-visible">
+		<div
+			xmlns="http://www.w3.org/1999/xhtml"
+			class="w-full h-full flex items-center justify-center"
+			style="pointer-events: none;"
+		>
+			<div
+				class="flex items-center gap-0.5 px-1 py-0.5 rounded-sm border shadow-sm text-3xs leading-none font-mono cursor-default bg-surface border-violet-300 dark:border-violet-900/60 text-violet-700 dark:text-violet-300"
+				style="pointer-events: all;"
+				title={macroBadgeTitle}
+			>
+				<SquareFunction size={10} />
+				<span>×{macroNames?.length ?? 0}</span>
+			</div>
+		</div>
+	</foreignObject>
+{/if}
+
 {#if columnLineage && columnLineage.length > 0}
 	<!-- Column-lineage badge, stacked below the data-test badge when both exist. -->
 	<foreignObject
diff --git a/frontend/src/lib/components/assets/AssetGraph/MacroExplorerDrawer.svelte b/frontend/src/lib/components/assets/AssetGraph/MacroExplorerDrawer.svelte
new file mode 100644
index 0000000000..32ac65bb2c
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/MacroExplorerDrawer.svelte
@@ -0,0 +1,159 @@
+<script lang="ts">
+	import { Drawer, DrawerContent } from '$lib/components/common'
+	import Button from '$lib/components/common/button/Button.svelte'
+	import TextInput from '$lib/components/text_input/TextInput.svelte'
+	import { workspaceStore } from '$lib/stores'
+	import { sendUserToast } from '$lib/utils'
+	import { Copy, ExternalLink, Loader2, RefreshCw, SquareFunction } from 'lucide-svelte'
+	import { resource } from 'runed'
+	import {
+		invalidateWorkspaceMacros,
+		listWorkspaceMacrosCached,
+		macroDefinitionSql,
+		macroSignature,
+		type WorkspaceMacro
+	} from '../workspaceMacros'
+
+	let {
+		// Called with the library script path when the user clicks "open" on a
+		// group header. The pipeline page selects the lib node when it's on the
+		// current canvas and falls back to the script page otherwise.
+		onOpenLib
+	}: { onOpenLib?: (path: string) => void } = $props()
+
+	let open = $state(false)
+	let refreshKey = $state(0)
+	let filter = $state('')
+
+	export function openDrawer() {
+		open = true
+	}
+
+	let macrosRes = resource(
+		() => (open ? { ws: $workspaceStore, key: refreshKey } : undefined),
+		(params) => {
+			if (!params?.ws) return Promise.resolve([] as WorkspaceMacro[])
+			return listWorkspaceMacrosCached(params.ws)
+		}
+	)
+
+	let filtered = $derived.by(() => {
+		const all = macrosRes.current ?? []
+		const q = filter.trim().toLowerCase()
+		if (!q) return all
+		return all.filter((m) => m.name.includes(q) || m.provider_path.toLowerCase().includes(q))
+	})
+
+	// provider_path → its macros, preserving the endpoint's (provider, name) order.
+	let byProvider = $derived.by(() => {
+		const groups = new Map<string, WorkspaceMacro[]>()
+		for (const m of filtered) {
+			const g = groups.get(m.provider_path)
+			if (g) g.push(m)
+			else groups.set(m.provider_path, [m])
+		}
+		return groups
+	})
+
+	function copyCall(m: WorkspaceMacro) {
+		navigator.clipboard.writeText(`${m.name}(${m.params})`)
+		sendUserToast(`Copied ${m.name}(…) call`)
+	}
+</script>
+
+<Drawer {open} size="700px" on:close={() => (open = false)}>
+	<DrawerContent title="Workspace macros" on:close={() => (open = false)}>
+		{#snippet actions()}
+			<Button
+				unifiedSize="sm"
+				variant="subtle"
+				startIcon={{ icon: RefreshCw }}
+				iconOnly
+				title="Refresh"
+				onclick={() => {
+					if ($workspaceStore) invalidateWorkspaceMacros($workspaceStore)
+					refreshKey++
+				}}
+			/>
+		{/snippet}
+		<div class="flex flex-col gap-3 h-full">
+			<div class="text-xs text-secondary">
+				DuckDB macros from deployed <span class="font-mono">// macros</span> libraries. Call them by
+				name from any DuckDB script in this workspace — Windmill injects the definitions at run
+				time. Add
+				<span class="font-mono">// use &lt;library path&gt;</span> to pull in a whole library when the
+				call is built dynamically.
+			</div>
+			<TextInput
+				size="md"
+				inputProps={{ placeholder: 'Filter by macro name or library path…' }}
+				bind:value={filter}
+			/>
+			{#if macrosRes.loading && !macrosRes.current}
+				<div class="flex items-center gap-2 text-tertiary text-xs py-8 justify-center">
+					<Loader2 size={14} class="animate-spin" /> Loading macros…
+				</div>
+			{:else if (macrosRes.current ?? []).length === 0}
+				<div class="text-xs text-tertiary py-8 text-center">
+					No macro libraries deployed yet. Create one from the pipeline editor's “+” menu (output
+					kind “Macro library”), or deploy a DuckDB script whose header starts with
+					<span class="font-mono">// macros</span>.
+				</div>
+			{:else if filtered.length === 0}
+				<div class="text-xs text-tertiary py-8 text-center">No macros match the filter.</div>
+			{:else}
+				<div class="flex-1 min-h-0 overflow-y-auto flex flex-col gap-4 pr-1">
+					{#each [...byProvider.entries()] as [provider, macros] (provider)}
+						<div class="flex flex-col gap-1.5">
+							<div class="flex items-center gap-2 sticky top-0 bg-surface py-1">
+								<SquareFunction size={14} class="shrink-0 text-violet-600 dark:text-violet-400" />
+								<span class="text-xs font-mono font-semibold text-emphasis truncate">
+									{provider}
+								</span>
+								<span class="text-2xs text-tertiary">
+									{macros.length} macro{macros.length > 1 ? 's' : ''}
+								</span>
+								{#if onOpenLib}
+									<Button
+										unifiedSize="sm"
+										variant="subtle"
+										startIcon={{ icon: ExternalLink }}
+										iconOnly
+										title="Open this library"
+										onclick={() => onOpenLib?.(provider)}
+									/>
+								{/if}
+							</div>
+							{#each macros as m (m.name)}
+								<div class="flex flex-col gap-1 border rounded-md px-2.5 py-1.5">
+									<div class="flex items-center gap-2 min-w-0">
+										<span class="flex-1 min-w-0 text-xs font-mono text-emphasis truncate">
+											{macroSignature(m)}
+										</span>
+										<span
+											class="shrink-0 text-3xs px-1 py-0.5 rounded-sm bg-surface-secondary text-secondary"
+										>
+											{m.is_table ? 'table' : 'scalar'}
+										</span>
+										<Button
+											unifiedSize="sm"
+											variant="subtle"
+											startIcon={{ icon: Copy }}
+											iconOnly
+											title={`Copy ${m.name}(${m.params})`}
+											onclick={() => copyCall(m)}
+										/>
+									</div>
+									<pre
+										class="text-2xs font-mono text-secondary whitespace-pre-wrap break-words max-h-32 overflow-y-auto bg-surface-secondary rounded-sm px-2 py-1"
+										title={macroDefinitionSql(m)}>{m.body}</pre
+									>
+								</div>
+							{/each}
+						</div>
+					{/each}
+				</div>
+			{/if}
+		</div>
+	</DrawerContent>
+</Drawer>
diff --git a/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte b/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
index c709866a5f..8b5e90170c 100644
--- a/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
@@ -10,6 +10,7 @@
 		Loader2,
 		Play,
 		RotateCw,
+		SquareFunction,
 		Tag,
 		Target,
 		Timer,
@@ -37,6 +38,9 @@
 			freshness?: string
 			tag?: string
 			retry?: { count: number; delay?: string }
+			// Macros this script provides (deployed/drafted `// macros` library).
+			// Non-empty renders the ƒ chip marking the node as a macro library.
+			macros?: { name: string; params: string; is_table: boolean }[]
 			// Last-run status + run count observed this session (from the
 			// folder queue poll). Undefined until the first observed run.
 			runState?: RunnableRunState
@@ -199,6 +203,17 @@
 				<span class="text-3xs leading-none">×{r.count}</span>
 			</div>
 		{/if}
+		{#if data.macros && data.macros.length > 0}
+			<div
+				class="shrink-0 flex items-center gap-0.5 px-1 py-0.5 mr-1 rounded-sm bg-surface-secondary text-secondary"
+				title={`// macros — defines ${data.macros.length} macro${data.macros.length > 1 ? 's' : ''}:\n${data.macros
+					.map((m) => `• ${m.name}(${m.params})${m.is_table ? ' → table' : ''}`)
+					.join('\n')}`}
+			>
+				<SquareFunction size={10} />
+				<span class="text-3xs leading-none">×{data.macros.length}</span>
+			</div>
+		{/if}
 		{#if data.runState}
 			{@const rs = data.runState}
 			<div
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts
index d48a0c316b..077377ec2a 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts
@@ -20,7 +20,9 @@ const ASSERTED_TS_FIELDS: Record<keyof PipelineAnnotations, true> = {
 	retry: true,
 	materialize: true,
 	dataTests: true,
-	columnLineage: true
+	columnLineage: true,
+	macros: true,
+	useLibs: true
 }
 
 // Parser-parity guard: this TS parser (drives the live graph preview) and
@@ -78,6 +80,10 @@ type Fixture = {
 		// Snake_case `ColumnLineage` serde shape — TS parser emits it verbatim,
 		// so the comparison is 1:1. Absent === [].
 		column_lineage?: Array<Record<string, unknown>>
+		// `// macros` marker. Absent === false.
+		macros?: boolean
+		// `// use <lib_path>` accumulation, declaration order, deduped. Absent === [].
+		use_libs?: string[]
 	}
 }
 
@@ -179,6 +185,10 @@ describe('parsePipelineAnnotations matches the shared Rust fixture corpus', () =
 			expect(got.dataTests, 'data tests').toEqual(f.expected.data_tests ?? [])
 
 			expect(got.columnLineage, 'column lineage').toEqual(f.expected.column_lineage ?? [])
+
+			expect(got.macros, 'macros').toBe(f.expected.macros ?? false)
+
+			expect(got.useLibs, 'use_libs').toEqual(f.expected.use_libs ?? [])
 		})
 	}
 })
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts
index 5f4b063e3f..315c7526f3 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts
@@ -95,6 +95,33 @@ describe('parsePipelineAnnotations: retry', () => {
 	})
 })
 
+describe('parsePipelineAnnotations: macros + use', () => {
+	it('parses the bare macros marker', () => {
+		const out = parsePipelineAnnotations('// macros\nCREATE MACRO m(a) AS a;')
+		expect(out.macros).toBe(true)
+	})
+
+	it('macros marker is strict — trailing prose and variants rejected', () => {
+		expect(parsePipelineAnnotations('// macros are defined below\n').macros).toBe(false)
+		expect(parsePipelineAnnotations('// macros_v2\n').macros).toBe(false)
+		expect(parsePipelineAnnotations('-- macros   \nSELECT 1;').macros).toBe(true)
+	})
+
+	it('use accumulates in order and dedups', () => {
+		const out = parsePipelineAnnotations(
+			'// use f/lib/stats\n// use f/lib/dates\n// use f/lib/stats\n'
+		)
+		expect(out.useLibs).toEqual(['f/lib/stats', 'f/lib/dates'])
+	})
+
+	it('use rejects prose, slashless and multi-token values', () => {
+		const out = parsePipelineAnnotations(
+			'// use this script to compute\n// use standalone\n// use f/lib/ok extra\n'
+		)
+		expect(out.useLibs).toEqual([])
+	})
+})
+
 describe('parsePipelineAnnotations: combined', () => {
 	it('parses all keywords together', () => {
 		const code = [
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
index f58ffa54ad..f33a03fff5 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
@@ -173,6 +173,12 @@ export type PipelineAnnotations = {
 	dataTests: DataTest[]
 	// `// column <out> <- <src>.<col>[, …]` — accumulating column lineage.
 	columnLineage: ColumnLineage[]
+	// Bare `// macros` (alone on the line, like `// pipeline`) — marks this
+	// DuckDB script as a workspace macro library.
+	macros: boolean
+	// `// use <lib_script_path>` — force-inject the named macro library into
+	// this script's jobs. Accumulating, declaration order, deduped.
+	useLibs: string[]
 }
 
 // Tokenize a `key=value [key="quoted value"] ...` option string. Bare
@@ -510,7 +516,9 @@ export function parsePipelineAnnotations(code: string): PipelineAnnotations {
 		triggerAssets: [],
 		nativeTriggers: [],
 		dataTests: [],
-		columnLineage: []
+		columnLineage: [],
+		macros: false,
+		useLibs: []
 	}
 
 	for (const rawLine of code.split('\n')) {
@@ -530,6 +538,26 @@ export function parsePipelineAnnotations(code: string): PipelineAnnotations {
 			continue
 		}
 
+		const afterMacros = consumeKeyword(inner, 'macros')
+		if (afterMacros !== undefined) {
+			// Strict like `pipeline`: keyword alone on the line, so prose such
+			// as `// macros are defined below` never false-positives.
+			if (afterMacros.trim() === '') out.macros = true
+			continue
+		}
+
+		// `// use <lib_script_path>` — accumulating. The argument must be a
+		// single whitespace-free token containing `/` (all script paths do),
+		// so prose like `// use this script to …` is dropped fail-safe.
+		const afterUse = consumeKeyword(inner, 'use')
+		if (afterUse !== undefined) {
+			const path = afterUse.trim()
+			if (path && !/\s/.test(path) && path.includes('/') && !out.useLibs.includes(path)) {
+				out.useLibs.push(path)
+			}
+			continue
+		}
+
 		const afterPart = consumeKeyword(inner, 'partitioned')
 		if (afterPart !== undefined) {
 			if (!out.partition) {
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
index cbb5476516..71a09318e6 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
@@ -19,6 +19,7 @@ export type PipelineOutputKind =
 	| 'materialize'
 	| 's3_parquet'
 	| 's3_object'
+	| 'macros'
 
 export type PipelineOutputKindMeta = {
 	id: PipelineOutputKind
@@ -56,6 +57,11 @@ export const PIPELINE_OUTPUT_KINDS: PipelineOutputKindMeta[] = [
 		label: 'S3 Object',
 		description: 'Generic file (JSON/CSV/binary)'
 	},
+	{
+		id: 'macros',
+		label: 'Macro library',
+		description: 'Reusable DuckDB macros, callable from every script in the workspace'
+	},
 	{
 		id: 'none',
 		label: 'No output',
@@ -77,7 +83,7 @@ const LANG_COMPATIBILITY: Record<ScriptLang, PipelineOutputKind[]> = {
 	// single SELECT. The Python/TS `wmll.ducklake` helper currently takes a SQL
 	// SELECT (not in-memory rows), so a polyglot managed materialize is a
 	// separate follow-up — those langs keep the `ducklake` raw-write kind.
-	duckdb: ['materialize', 'datatable', 'ducklake', 's3_parquet', 's3_object', 'none'],
+	duckdb: ['materialize', 'datatable', 'ducklake', 's3_parquet', 's3_object', 'macros', 'none'],
 	postgresql: ['datatable', 'none'],
 	mysql: ['none'],
 	mssql: ['none'],
@@ -176,6 +182,9 @@ export function autoOutputAsset(
 				path: `/pipelines/${folder}/${adj}_${pick(FILE_NOUNS)}_${slug}.${ext}`
 			}
 		}
+		// A macro library produces no asset — its "output" is the registry
+		// entries the deploy records.
+		case 'macros':
 		case 'none':
 			return undefined
 	}
@@ -330,6 +339,16 @@ function header(ctx: TemplateContext): string {
 					`${p} Strategy: add key=<col> to merge (upsert), or append for insert-only; default replaces the partition`
 				]
 			: []
+	// Macro library: the `// macros` marker registers every CREATE MACRO below
+	// into the workspace registry at deploy. The hint must not start with a
+	// parser keyword — `Consumers` is safe.
+	const macrosLine =
+		outputKind === 'macros'
+			? [
+					`${p} macros`,
+					`${p} Consumers just call these by name; add \`${p} use <this-script-path>\` in a consumer to force-inject the whole library`
+				]
+			: []
 	// Discoverability hint — the three annotations users most often miss
 	// when authoring their first pipeline script. Single line, real
 	// example values (not placeholders) so users see the syntax. Docs
@@ -337,7 +356,7 @@ function header(ctx: TemplateContext): string {
 	// line separates it from the parsed annotations above (`// pipeline`,
 	// `// on …`) so the editor reads as "real annotations, then a hint".
 	const more = `${p} More: partitioned daily, freshness 1h, retry 3, tag heavy — https://www.windmill.dev/docs/pipelines/annotations`
-	return [`${p} pipeline`, ...lines, ...matLine, '', more, ''].join('\n')
+	return [`${p} pipeline`, ...lines, ...matLine, ...macrosLine, '', more, ''].join('\n')
 }
 
 // Bun / Deno bodies. These share the wmill SDK surface, so we treat them
@@ -636,6 +655,18 @@ function bodyDuckdb(ctx: TemplateContext): string {
 				)
 			}
 			break
+		case 'macros':
+			// Library body: only CREATE [OR REPLACE] MACRO statements (plus plain
+			// setup). One scalar + one table example; bodies may only call macros
+			// defined EARLIER in the file (DuckDB bind-checks at creation).
+			lines.push(
+				`CREATE OR REPLACE MACRO safe_div(a, b, fallback := 0) AS`,
+				`  CASE WHEN b = 0 THEN fallback ELSE a / b END;`,
+				``,
+				`CREATE OR REPLACE MACRO sample_rows(src, n) AS TABLE`,
+				`  SELECT * FROM query_table(src) LIMIT n;`
+			)
+			break
 		case 'none':
 		default:
 			// With an uploaded file but no output asset, at least surface its
diff --git a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts
index 378c4e1469..3c98d57602 100644
--- a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts
@@ -9,6 +9,9 @@ const ann = (over: Partial<PipelineAnnotations> = {}): PipelineAnnotations => ({
 	triggerAssets: [],
 	nativeTriggers: [],
 	dataTests: [],
+	columnLineage: [],
+	macros: false,
+	useLibs: [],
 	...over
 })
 
@@ -452,4 +455,85 @@ describe('resolveGraph', () => {
 			missing: true
 		})
 	})
+
+	it('macro edges: base passes through; live `// use` adds an unsaved via_use edge', () => {
+		const base = baseGraph({
+			runnables: [
+				{
+					path: 'f/lib/stats',
+					usage_kind: 'script',
+					macros: [{ name: 'safe_div', params: 'a, b', is_table: false }]
+				},
+				{ path: 'f/x/cons', usage_kind: 'script' }
+			],
+			macro_edges: [
+				{
+					lib_path: 'f/lib/stats',
+					consumer_path: 'f/x/cons',
+					macro_names: ['safe_div'],
+					via_use: false
+				}
+			]
+		})
+		const r = resolveGraph(
+			input({
+				base,
+				liveAnnotations: {
+					scriptPath: 'f/x/other',
+					annotations: ann({ useLibs: ['f/lib/stats'] })
+				}
+			})
+		)
+		// Detection edge preserved untouched.
+		expect(r.macro_edges).toContainEqual({
+			lib_path: 'f/lib/stats',
+			consumer_path: 'f/x/cons',
+			macro_names: ['safe_div'],
+			via_use: false
+		})
+		// Live `// use` synthesizes an unsaved whole-lib edge with the lib's names.
+		expect(r.macro_edges).toContainEqual({
+			lib_path: 'f/lib/stats',
+			consumer_path: 'f/x/other',
+			macro_names: ['safe_div'],
+			via_use: true,
+			unsaved: true
+		})
+	})
+
+	it('macro edges: removing the `// use` line of an overlaid consumer retires its via_use edge', () => {
+		const base = baseGraph({
+			macro_edges: [
+				{
+					lib_path: 'f/lib/stats',
+					consumer_path: 'f/x/cons',
+					macro_names: ['safe_div'],
+					via_use: true
+				}
+			]
+		})
+		const r = resolveGraph(
+			input({
+				base,
+				liveAnnotations: { scriptPath: 'f/x/cons', annotations: ann() }
+			})
+		)
+		expect(r.macro_edges).toEqual([])
+	})
+
+	it('macro edges: draft `// macros` library gets the ƒ badge data from its body', () => {
+		const drafts = new Map([
+			[
+				'f/lib/new',
+				{
+					script: {
+						content: '// macros\nCREATE OR REPLACE MACRO dbl(a) AS a * 2;'
+					}
+				}
+			]
+		])
+		const r = resolveGraph(input({ drafts }))
+		const lib = r.runnables.find((x) => x.path === 'f/lib/new')
+		expect(lib?.macros).toEqual([{ name: 'dbl', params: 'a', is_table: false }])
+	})
 })
diff --git a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts
index e223379adb..849849c555 100644
--- a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts
@@ -1,4 +1,4 @@
-import type { AssetGraphResponse, NativeTriggerKind } from './types'
+import type { AssetGraphMacroEdge, AssetGraphResponse, NativeTriggerKind } from './types'
 import {
 	mergeColumnLineage,
 	parsePipelineAnnotations,
@@ -146,15 +146,94 @@ export function resolveGraph(input: ResolveGraphInput): AssetGraphResponse {
 			return false
 		return true
 	})
+	// Mirror the backend's skip-if-empty: no `macro_edges` key at all when
+	// there is nothing to show (also keeps the no-macros response shape
+	// byte-identical to before the feature).
+	const macroEdges = resolveMacroEdges(input)
 	return {
 		...base,
 		assets: acc.assets,
 		runnables: acc.runnables,
 		edges: acc.edges,
-		triggers: [...baseTriggers, ...acc.extraTriggers]
+		triggers: [...baseTriggers, ...acc.extraTriggers],
+		...(macroEdges.length > 0 || base.macro_edges ? { macro_edges: macroEdges } : {})
 	}
 }
 
+/**
+ * Macro-library → consumer edges: the deployed base edges, with `// use`
+ * declarations of overlaid scripts (drafts + the open buffer) taking over
+ * their consumer's `via_use` edges so adding/removing a `// use` line updates
+ * the canvas live. Detection-based edges (macro calls in the deployed body)
+ * are backend-owned and only refresh on redeploy.
+ */
+function resolveMacroEdges(input: ResolveGraphInput): AssetGraphMacroEdge[] {
+	const { base, drafts, liveAnnotations } = input
+	const libMacroNames = new Map<string, string[]>()
+	for (const r of base.runnables) {
+		if (r.usage_kind === 'script' && r.macros?.length) {
+			libMacroNames.set(
+				r.path,
+				r.macros.map((m) => m.name)
+			)
+		}
+	}
+	const useByPath = new Map<string, string[]>()
+	for (const [path, d] of drafts) {
+		useByPath.set(path, parsePipelineAnnotations(d.script.content).useLibs)
+	}
+	if (liveAnnotations.scriptPath) {
+		// `?? []` — callers may hand a minimal annotations object (tests, older
+		// call sites) that predates the field.
+		useByPath.set(liveAnnotations.scriptPath, liveAnnotations.annotations.useLibs ?? [])
+	}
+	const out: AssetGraphMacroEdge[] = []
+	for (const e of base.macro_edges ?? []) {
+		if (e.via_use && useByPath.has(e.consumer_path)) continue
+		out.push({ ...e })
+	}
+	for (const [path, libs] of useByPath) {
+		for (const lib of libs) {
+			const existing = out.find((e) => e.lib_path === lib && e.consumer_path === path)
+			if (existing) {
+				// Upgrade the detection edge in place: `// use` pulls in the whole
+				// library, so the edge covers every macro the lib defines.
+				existing.via_use = true
+				existing.unsaved = true
+				existing.macro_names = [
+					...new Set([...existing.macro_names, ...(libMacroNames.get(lib) ?? [])])
+				]
+			} else {
+				out.push({
+					lib_path: lib,
+					consumer_path: path,
+					macro_names: libMacroNames.get(lib) ?? [],
+					via_use: true,
+					unsaved: true
+				})
+			}
+		}
+	}
+	return out
+}
+
+// Light regex extraction of a draft macro library's definitions for the live
+// node badge. The strict grammar lives in the Rust `parse_macro_library` at
+// deploy; this only needs name/params/table-ness for display (nested parens
+// in a default value may truncate the shown signature, never the deploy).
+const MACRO_DEF_RE =
+	/create\s+(?:or\s+replace\s+)?(?:temp(?:orary)?\s+)?(?:macro|function)\s+([a-zA-Z_][a-zA-Z0-9_]*)\s*\(([^)]*)\)\s*as\s+(table\b)?/gi
+
+export function extractDraftMacros(
+	content: string
+): { name: string; params: string; is_table: boolean }[] {
+	const out: { name: string; params: string; is_table: boolean }[] = []
+	for (const m of content.matchAll(MACRO_DEF_RE)) {
+		out.push({ name: m[1].toLowerCase(), params: m[2].trim(), is_table: m[3] !== undefined })
+	}
+	return out
+}
+
 type ResolveContext = {
 	draftedPaths: Set<string>
 	isDrafted: (kind: string, p: string) => boolean
@@ -251,6 +330,9 @@ function seedDraftOverlays(acc: Accumulator, input: ResolveGraphInput) {
 		// duplicate (which would crash svelte-flow's keyed each), so the
 		// canvas + trigger-node labels reflect that there's pending body
 		// editing for this path.
+		// `// macros` library draft: extract the definitions for the live node
+		// badge (regex-light; the strict parse happens at deploy).
+		const draftMacros = parsed.macros ? extractDraftMacros(d.script.content) : []
 		const baseIdx = runnables.findIndex((r) => r.usage_kind === 'script' && r.path === path)
 		if (baseIdx === -1) {
 			runnables.push({
@@ -264,6 +346,7 @@ function seedDraftOverlays(acc: Accumulator, input: ResolveGraphInput) {
 				data_tests: parsed.dataTests.length > 0 ? parsed.dataTests : undefined,
 				column_lineage: mergedCL.length > 0 ? mergedCL : undefined,
 				materialize_target: materializeTarget,
+				macros: draftMacros.length > 0 ? draftMacros : undefined,
 				unsaved: true
 			})
 		} else {
@@ -276,6 +359,7 @@ function seedDraftOverlays(acc: Accumulator, input: ResolveGraphInput) {
 				data_tests: parsed.dataTests.length > 0 ? parsed.dataTests : undefined,
 				column_lineage: mergedCL.length > 0 ? mergedCL : undefined,
 				materialize_target: materializeTarget,
+				macros: draftMacros.length > 0 ? draftMacros : undefined,
 				unsaved: true
 			}
 		}
diff --git a/frontend/src/lib/components/assets/AssetGraph/types.ts b/frontend/src/lib/components/assets/AssetGraph/types.ts
index 274d218e82..0db259a389 100644
--- a/frontend/src/lib/components/assets/AssetGraph/types.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/types.ts
@@ -46,6 +46,11 @@ export interface AssetGraphRunnableNode {
 	// produced asset's schema can evolve: only whole-table `replace` can, since
 	// `append`/`merge`/partitioned writes INSERT into a fixed-schema table.
 	materialize_strategy?: 'replace' | 'append' | 'merge'
+	// Macros this script provides to the workspace registry (deployed
+	// `// macros` library). Non-empty marks the node as a macro library;
+	// drives the "defines N macros" badge and the details-pane signature
+	// list. `params` is the verbatim parameter list.
+	macros?: { name: string; params: string; is_table: boolean }[]
 	// Synthesized by the page from a local draft; the script doesn't exist
 	// in the DB yet. Drives a dashed/lower-opacity rendering to mirror how
 	// unsaved triggers are styled — visually distinct from persisted nodes.
@@ -113,11 +118,24 @@ export type AssetGraphTrigger =
 			missing?: boolean
 	  }
 
+// Macro-library → consumer edge: the consumer calls `macro_names` of
+// `lib_path`'s macros (deploy-recorded detection), or pulls in the whole
+// library via `// use` (`via_use`, macro_names then lists the full library).
+// `unsaved: true` marks a draft's `// use` overlay.
+export interface AssetGraphMacroEdge {
+	lib_path: string
+	consumer_path: string
+	macro_names: string[]
+	via_use: boolean
+	unsaved?: boolean
+}
+
 export interface AssetGraphResponse {
 	assets: AssetGraphAssetNode[]
 	runnables: AssetGraphRunnableNode[]
 	edges: AssetGraphEdge[]
 	triggers: AssetGraphTrigger[]
+	macro_edges?: AssetGraphMacroEdge[]
 }
 
 export type AssetGraphNodeData =
diff --git a/frontend/src/lib/components/assets/workspaceMacros.ts b/frontend/src/lib/components/assets/workspaceMacros.ts
new file mode 100644
index 0000000000..d25f9d1bea
--- /dev/null
+++ b/frontend/src/lib/components/assets/workspaceMacros.ts
@@ -0,0 +1,32 @@
+import { AssetService, type ListWorkspaceMacrosResponse } from '$lib/gen'
+
+export type WorkspaceMacro = ListWorkspaceMacrosResponse[number]
+
+// Workspace macros are late-bound (the worker reads the registry per job), so
+// mild staleness in editor surfaces is harmless — a short TTL keeps repeated
+// editor mounts / drawer opens from refetching on every keystroke-driven
+// remount while still picking up a lib deploy within seconds.
+const TTL_MS = 30_000
+const cache = new Map<string, { at: number; items: WorkspaceMacro[] }>()
+
+export async function listWorkspaceMacrosCached(workspace: string): Promise<WorkspaceMacro[]> {
+	const hit = cache.get(workspace)
+	if (hit && Date.now() - hit.at < TTL_MS) return hit.items
+	const items = await AssetService.listWorkspaceMacros({ workspace })
+	cache.set(workspace, { at: Date.now(), items })
+	return items
+}
+
+export function invalidateWorkspaceMacros(workspace: string) {
+	cache.delete(workspace)
+}
+
+/** `name(params)` display signature, with the table-macro arrow. */
+export function macroSignature(m: WorkspaceMacro): string {
+	return `${m.name}(${m.params})${m.is_table ? ' → table' : ''}`
+}
+
+/** Full `CREATE` statement for the copy button / documentation preview. */
+export function macroDefinitionSql(m: WorkspaceMacro): string {
+	return `CREATE OR REPLACE MACRO ${m.name}(${m.params}) AS ${m.is_table ? 'TABLE ' : ''}${m.body};`
+}
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index 47b4bf6abc..4d41f7ff05 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -29,6 +29,7 @@
 		PipelineMode
 	} from '$lib/components/assets/AssetGraph/types'
 	import PipelineModeToggle from '$lib/components/assets/AssetGraph/PipelineModeToggle.svelte'
+	import MacroExplorerDrawer from '$lib/components/assets/AssetGraph/MacroExplorerDrawer.svelte'
 	import { parsePipelineAnnotations } from '$lib/components/assets/AssetGraph/parsePipelineAnnotations'
 	import {
 		buildColumnGraph,
@@ -83,6 +84,7 @@
 		Play,
 		RefreshCw,
 		Save,
+		SquareFunction,
 		Target,
 		Telescope
 	} from 'lucide-svelte'
@@ -218,6 +220,24 @@
 		}
 	}
 
+	// Workspace-macro explorer drawer (all `// macros` libraries + their
+	// signatures/bodies). "Open" on a group selects the lib node when it's on
+	// this canvas; a lib living in another folder opens its script page.
+	let macroDrawer: MacroExplorerDrawer | undefined = $state()
+	function openMacroLib(path: string) {
+		const onCanvas = displayGraph?.runnables?.some(
+			(r) => r.usage_kind === 'script' && r.path === path
+		)
+		if (onCanvas) {
+			pe.selection = { kind: 'runnable', runnable_kind: 'script', path }
+			pe.activeDraftPath = undefined
+			panelHidden = false
+			focusPipelineNode(`script:${path}`)
+		} else {
+			window.open(`${base}/scripts/get/${path}`, '_blank')
+		}
+	}
+
 	// Draft autosave (the data_pipeline DraftService bundle) lives inside
 	// PipelineGraphEditor now; the route just supplies its path to the indicator.
 	let pipelineDraftPath = $derived(`f/${folder}/data_pipeline`)
@@ -233,7 +253,9 @@
 			triggerAssets: [],
 			nativeTriggers: [],
 			dataTests: [],
-			columnLineage: []
+			columnLineage: [],
+			macros: false,
+			useLibs: []
 		}
 	}
 
@@ -2105,6 +2127,15 @@
 					Activity
 				</Button>
 			{/if}
+			<Button
+				variant="subtle"
+				unifiedSize="sm"
+				startIcon={{ icon: SquareFunction }}
+				onclick={() => macroDrawer?.openDrawer()}
+				title="Browse the workspace's DuckDB macros (deployed // macros libraries)"
+			>
+				Macros
+			</Button>
 			<Button
 				variant="subtle"
 				unifiedSize="sm"
@@ -2369,3 +2400,5 @@
 		</div>
 	</div>
 {/if}
+
+<MacroExplorerDrawer bind:this={macroDrawer} onOpenLib={openMacroLib} />

From fad5419b9dda1fb7991ffd3cb12c9e01774f8873 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Thu, 2 Jul 2026 23:03:44 +0000
Subject: [PATCH 27/76] chore(main): release 1.746.0 (#9872)

* chore(main): release 1.746.0

* Apply automatic changes

---------

Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com>
---
 CHANGELOG.md                                  |  28 +++
 backend/Cargo.lock                            | 222 +++++++++---------
 backend/Cargo.toml                            |   4 +-
 .../parsers/windmill-parser-wasm/Cargo.lock   |  48 ++--
 .../parsers/windmill-parser-wasm/Cargo.toml   |   2 +-
 backend/windmill-api/openapi.yaml             |   2 +-
 benchmarks/lib.ts                             |   2 +-
 cli/src/core/constants.ts                     |   2 +-
 frontend/package-lock.json                    |   4 +-
 frontend/package.json                         |   2 +-
 lsp/Pipfile                                   |   2 +-
 openflow.openapi.yaml                         |   2 +-
 .../WindmillClient/WindmillClient.psd1        |   2 +-
 python-client/wmill/pyproject.toml            |   2 +-
 typescript-client/jsr.json                    |   2 +-
 typescript-client/package.json                |   2 +-
 version.txt                                   |   2 +-
 17 files changed, 179 insertions(+), 151 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a42f727fa6..668078da12 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,33 @@
 # Changelog
 
+## [1.746.0](https://github.com/windmill-labs/windmill/compare/v1.745.0...v1.746.0) (2026-07-02)
+
+
+### Features
+
+* **ai:** add Azure AI Foundry as a native AI provider ([#9879](https://github.com/windmill-labs/windmill/issues/9879)) ([d9b080f](https://github.com/windmill-labs/windmill/commit/d9b080f57fa0be144cefa773d39742c45b40f043))
+* **frontend:** group compare & deploy items by folder ([#9880](https://github.com/windmill-labs/windmill/issues/9880)) ([7b04820](https://github.com/windmill-labs/windmill/commit/7b04820f8ef8c7f02f79dd4239a877f667d23e6a))
+* **frontend:** pipelines index page and sql editor hint ([#9881](https://github.com/windmill-labs/windmill/issues/9881)) ([20351a6](https://github.com/windmill-labs/windmill/commit/20351a6b4c262184c5f815eeb5de007ab1eaf4a0))
+* **pipeline:** backfill a range of partitions from the asset drawer ([#9885](https://github.com/windmill-labs/windmill/issues/9885)) ([53bbb92](https://github.com/windmill-labs/windmill/commit/53bbb92953178eb6d0017818ef870f3cb2399dfd))
+* **pipelines:** workspace duckdb macro libraries (// macros / // use) ([#9890](https://github.com/windmill-labs/windmill/issues/9890)) ([84141ad](https://github.com/windmill-labs/windmill/commit/84141add1ddf35c2573e3c213366ce7c5f1f2258))
+* **s3:** replace CE 50MB upload cap with 10GiB workspace storage quota ([#9874](https://github.com/windmill-labs/windmill/issues/9874)) ([af01e90](https://github.com/windmill-labs/windmill/commit/af01e90b5c65d1b1cfacf4433f8cff7effe73768))
+* support workspace forks on cloud using parent workspace limits ([#9864](https://github.com/windmill-labs/windmill/issues/9864)) ([7c7d747](https://github.com/windmill-labs/windmill/commit/7c7d7474cc86a4052272032f281cc4d7a85db37b))
+
+
+### Bug Fixes
+
+* **duckdb:** auto-declare partition arg for `// partitioned` scripts ([#9878](https://github.com/windmill-labs/windmill/issues/9878)) ([b883adb](https://github.com/windmill-labs/windmill/commit/b883adbc0011073da592dc5b39e1b79db492c83c))
+* **frontend:** home New submenus fall back below, hugging the right edge ([#9894](https://github.com/windmill-labs/windmill/issues/9894)) ([186ac49](https://github.com/windmill-labs/windmill/commit/186ac4933b79aed57fce23ebcf3b525fcfd1c474))
+* **frontend:** show inline workspace name editor on general settings (Fixes GIT-911) ([#9892](https://github.com/windmill-labs/windmill/issues/9892)) ([a49c087](https://github.com/windmill-labs/windmill/commit/a49c0871d7ab2aaf78a7713b8a786ead937434da))
+* **frontend:** stack cron field and cron builder button on narrow screens ([#9871](https://github.com/windmill-labs/windmill/issues/9871)) ([7989795](https://github.com/windmill-labs/windmill/commit/79897950e7646b00d92a28a009174d91c705b251))
+* invalidate bun bundle cache on transitive relative-import changes ([#9891](https://github.com/windmill-labs/windmill/issues/9891)) ([d15033c](https://github.com/windmill-labs/windmill/commit/d15033cde6a474b548ebbaf18ff02223fc21f701))
+* make SMTP username and password optional in frontend validation ([#9895](https://github.com/windmill-labs/windmill/issues/9895)) ([37bb574](https://github.com/windmill-labs/windmill/commit/37bb57474e8336823bb31527f2a708ef41cd39c4))
+* **parsers:** infer py s3 assets from S3Object constructor and dict forms ([#9877](https://github.com/windmill-labs/windmill/issues/9877)) ([659642e](https://github.com/windmill-labs/windmill/commit/659642e4889361f86e8addb038cda62fc3471006))
+* pipeline dogfooding fixes — SCD2 data-test scope, --partition, s3object upload binding ([#9875](https://github.com/windmill-labs/windmill/issues/9875)) ([d65f58c](https://github.com/windmill-labs/windmill/commit/d65f58c388d88fff71cda22dfa21aecdae70c450))
+* polish pipeline graph view (layout, viewport, minimap, lineage, timestamps) ([#9883](https://github.com/windmill-labs/windmill/issues/9883)) ([b92a86b](https://github.com/windmill-labs/windmill/commit/b92a86b8b3a60b877540c3a7f0ffefe36ccbb053))
+* stale AI chat context picker after workspace item changes ([#9893](https://github.com/windmill-labs/windmill/issues/9893)) ([5af91a6](https://github.com/windmill-labs/windmill/commit/5af91a677cad88faccba702e3556fc4fb7b6e640))
+* **triggers:** retry transient websocket connect failures before disabling ([#9887](https://github.com/windmill-labs/windmill/issues/9887)) ([7894507](https://github.com/windmill-labs/windmill/commit/789450731b0a3c8dffa336f7bfc3f3de528c09fb))
+
 ## [1.745.0](https://github.com/windmill-labs/windmill/compare/v1.744.0...v1.745.0) (2026-07-01)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index 77850c7dc6..749dc880eb 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -237,9 +237,9 @@ checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
 
 [[package]]
 name = "arrayvec"
-version = "0.7.7"
+version = "0.7.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f02882884d3e1bc524fb12c79f107f6ad0e1cfd498c536ffb494301740995dfe"
+checksum = "d3fb67a6e08acf24fdeccbac2cb6ac4305825bd1f117462e0e6f2f193345ad56"
 
 [[package]]
 name = "arrow"
@@ -517,7 +517,7 @@ dependencies = [
  "futures-core",
  "libc",
  "portable-atomic",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "tokio",
  "tokio-stream",
  "xattr",
@@ -1531,7 +1531,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "regex",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "shlex 1.3.0",
  "syn 2.0.118",
 ]
@@ -1551,7 +1551,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "regex",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "shlex 1.3.0",
  "syn 2.0.118",
 ]
@@ -4212,7 +4212,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cf592ae6a864437e98ef9c6ae7936b822077e9d038a3a48ee081ab92313afad4"
 dependencies = [
  "num-bigint",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "swc_atoms",
  "swc_common",
  "swc_ecma_ast",
@@ -5553,7 +5553,7 @@ dependencies = [
  "hashbrown 0.14.5",
  "new_debug_unreachable",
  "once_cell",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "triomphe",
 ]
 
@@ -5661,9 +5661,9 @@ dependencies = [
 
 [[package]]
 name = "humantime"
-version = "2.3.0"
+version = "2.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "135b12329e5e3ce057a9f972339ea52bc954fe1e9358ef27f95e89716fbc5424"
+checksum = "15cdd26707701c53297e2fa6afb323d55fbc1d0810c3aec078ae3ef0424c3c15"
 
 [[package]]
 name = "hyper"
@@ -7246,7 +7246,7 @@ dependencies = [
  "native-tls",
  "pem 3.0.6",
  "percent-encoding",
- "rand 0.10.1",
+ "rand 0.10.2",
  "serde",
  "socket2 0.6.4",
  "thiserror 2.0.18",
@@ -7563,9 +7563,9 @@ dependencies = [
 
 [[package]]
 name = "num-bigint"
-version = "0.4.6"
+version = "0.4.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
+checksum = "c863e9ab5e7bf9c99ba75e1050f1e4d624ae87ed3532d6238ffbdc7b585dbbe6"
 dependencies = [
  "num-integer",
  "num-traits",
@@ -8984,7 +8984,7 @@ dependencies = [
  "pin-project-lite",
  "quinn-proto",
  "quinn-udp",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "rustls 0.23.35",
  "socket2 0.6.4",
  "thiserror 2.0.18",
@@ -9005,7 +9005,7 @@ dependencies = [
  "lru-slab",
  "rand 0.9.0",
  "ring 0.17.14",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "rustls 0.23.35",
  "rustls-pki-types",
  "slab",
@@ -9093,9 +9093,9 @@ dependencies = [
 
 [[package]]
 name = "rand"
-version = "0.10.1"
+version = "0.10.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2e8e8bcc7961af1fdac401278c6a831614941f6164ee3bf4ce61b7edb162207"
+checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
 dependencies = [
  "chacha20",
  "getrandom 0.4.3",
@@ -9559,7 +9559,7 @@ version = "0.5.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "dc05fbf560421a0357a750cbe78c7ca19d4923918490daabba313d5dbc871e47"
 dependencies = [
- "rand 0.10.1",
+ "rand 0.10.2",
 ]
 
 [[package]]
@@ -9843,9 +9843,9 @@ checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
 
 [[package]]
 name = "rustc-hash"
-version = "2.1.2"
+version = "2.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94300abf3f1ae2e2b8ffb7b58043de3d399c73fa6f4b73826402a5c457614dbe"
+checksum = "6b1e7f9a428571be2dc5bc0505c13fb6bf936822b894ec87abf8a08a4e51742d"
 
 [[package]]
 name = "rustc_version"
@@ -10889,7 +10889,7 @@ dependencies = [
  "data-encoding",
  "debugid",
  "if_chain",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "serde_json",
  "unicode-id-start",
@@ -11322,7 +11322,7 @@ dependencies = [
  "allocator-api2",
  "bumpalo",
  "hashbrown 0.14.5",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
 ]
 
 [[package]]
@@ -11351,7 +11351,7 @@ dependencies = [
  "new_debug_unreachable",
  "num-bigint",
  "once_cell",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "siphasher 0.3.11",
  "swc_atoms",
@@ -11400,7 +11400,7 @@ dependencies = [
  "num-bigint",
  "once_cell",
  "phf 0.11.3",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "string_enum",
  "swc_atoms",
@@ -11421,7 +11421,7 @@ dependencies = [
  "num-bigint",
  "once_cell",
  "regex",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "ryu-js",
  "serde",
  "swc_allocator",
@@ -11455,7 +11455,7 @@ dependencies = [
  "either",
  "num-bigint",
  "phf 0.11.3",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "seq-macro",
  "serde",
  "smallvec",
@@ -11475,7 +11475,7 @@ checksum = "c675d14700c92f12585049b22b02356f1e142f4b0c32a4d0eb4b7a968a4c0c1e"
 dependencies = [
  "anyhow",
  "pathdiff",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "swc_atoms",
  "swc_common",
@@ -11509,7 +11509,7 @@ dependencies = [
  "once_cell",
  "par-core",
  "phf 0.11.3",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "swc_atoms",
  "swc_common",
@@ -11552,7 +11552,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39b3b34f6a28348416174912009d09994ab71c867682ec78d641a9feb3a96b4e"
 dependencies = [
  "either",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "swc_atoms",
  "swc_common",
@@ -11573,7 +11573,7 @@ dependencies = [
  "bytes-str",
  "indexmap 2.14.0",
  "once_cell",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "sha1",
  "string_enum",
@@ -11594,7 +11594,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3872c006ccfdcc19f1cf5c01c15915a69964ba7982c9f581cdb7e727e77b9a2c"
 dependencies = [
  "bytes-str",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "swc_atoms",
  "swc_common",
@@ -11615,7 +11615,7 @@ dependencies = [
  "num_cpus",
  "once_cell",
  "par-core",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "ryu-js",
  "swc_atoms",
  "swc_common",
@@ -11673,7 +11673,7 @@ dependencies = [
  "data-encoding",
  "debugid",
  "if_chain",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "serde_json",
  "unicode-id-start",
@@ -11870,7 +11870,7 @@ dependencies = [
  "rayon",
  "regex",
  "rust-stemmers",
- "rustc-hash 2.1.2",
+ "rustc-hash 2.1.3",
  "serde",
  "serde_json",
  "sketches-ddsketch",
@@ -13735,7 +13735,7 @@ dependencies = [
 
 [[package]]
 name = "windmill"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -13817,7 +13817,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-ai"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "async-stream",
  "async-trait",
@@ -13850,7 +13850,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-alerting"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -13863,7 +13863,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -14001,7 +14001,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-agent-workers"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14024,7 +14024,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-assets"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14039,7 +14039,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-auth"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14065,7 +14065,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -14075,7 +14075,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-configs"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14092,7 +14092,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-debug"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "base64 0.22.1",
@@ -14114,7 +14114,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-embeddings"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14137,7 +14137,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flow-conversations"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14153,7 +14153,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flows"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14174,7 +14174,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-groups"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14195,7 +14195,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-inputs"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14209,7 +14209,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-integration-tests"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -14244,7 +14244,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-jobs"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14269,7 +14269,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-npm-proxy"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "flate2",
@@ -14287,7 +14287,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-openapi"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14309,7 +14309,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-schedule"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14329,7 +14329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-scripts"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14366,7 +14366,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-settings"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14394,7 +14394,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-sse"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "lazy_static",
  "serde",
@@ -14406,7 +14406,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-users"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "argon2",
  "axum 0.8.9",
@@ -14431,7 +14431,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workers"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14445,7 +14445,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workspaces"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14478,7 +14478,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -14492,7 +14492,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14511,7 +14511,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "aes-gcm",
  "aho-corasick",
@@ -14613,7 +14613,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-dep-map"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "chrono",
  "itertools 0.14.0",
@@ -14632,7 +14632,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "regex",
  "serde",
@@ -14647,7 +14647,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -14671,7 +14671,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-jseval"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14688,7 +14688,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -14704,7 +14704,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14725,7 +14725,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-native-triggers"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14756,7 +14756,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "arc-swap",
@@ -14781,7 +14781,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-object-store"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -14815,7 +14815,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-operator"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14833,7 +14833,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -14842,7 +14842,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14854,7 +14854,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14866,7 +14866,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -14878,7 +14878,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14890,7 +14890,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14902,7 +14902,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -14913,7 +14913,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14924,7 +14924,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14936,7 +14936,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -14947,7 +14947,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -14969,7 +14969,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14981,7 +14981,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14995,7 +14995,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -15012,7 +15012,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15025,7 +15025,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15037,7 +15037,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15055,7 +15055,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -15071,7 +15071,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -15087,7 +15087,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15098,7 +15098,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15137,7 +15137,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-runtime-nativets"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "const_format",
@@ -15176,7 +15176,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "getrandom 0.3.4",
  "wasm-bindgen",
@@ -15187,7 +15187,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-store"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15221,7 +15221,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-test-utils"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15245,7 +15245,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15278,7 +15278,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-azure"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15311,7 +15311,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-email"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15331,7 +15331,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-gcp"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15365,7 +15365,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-http"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15401,7 +15401,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-kafka"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15424,7 +15424,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-mqtt"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15448,7 +15448,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-nats"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -15472,7 +15472,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-postgres"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15507,7 +15507,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-sqs"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15535,7 +15535,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-websocket"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15560,7 +15560,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "bitflags 2.13.0",
@@ -15579,7 +15579,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
@@ -15689,7 +15689,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker-volumes"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "bytes",
  "futures",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index bf4b4fc022..276416f450 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.745.0"
+version = "1.746.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -87,7 +87,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"]
 
 [workspace.package]
-version = "1.745.0"
+version = "1.746.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.lock b/backend/parsers/windmill-parser-wasm/Cargo.lock
index 4e39f3b0c8..d9f4dac33c 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.lock
+++ b/backend/parsers/windmill-parser-wasm/Cargo.lock
@@ -6191,7 +6191,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "windmill-common"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "aho-corasick",
  "anyhow",
@@ -6272,7 +6272,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6284,7 +6284,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "convert_case",
  "serde",
@@ -6293,7 +6293,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6305,7 +6305,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6317,7 +6317,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -6329,7 +6329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6341,7 +6341,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6353,7 +6353,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -6364,7 +6364,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6375,7 +6375,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6387,7 +6387,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6398,7 +6398,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -6420,7 +6420,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6432,7 +6432,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6446,7 +6446,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "convert_case",
@@ -6463,7 +6463,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6476,7 +6476,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6488,7 +6488,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6506,7 +6506,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -6522,7 +6522,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6538,7 +6538,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wasm"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "getrandom 0.2.17",
@@ -6570,7 +6570,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6581,7 +6581,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.745.0"
+version = "1.746.0"
 dependencies = [
  "anyhow",
  "bitflags",
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.toml b/backend/parsers/windmill-parser-wasm/Cargo.toml
index 1048b9f6ba..b4ea7a2aeb 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.toml
+++ b/backend/parsers/windmill-parser-wasm/Cargo.toml
@@ -12,7 +12,7 @@ resolver = "2"
 members = ["."]
 
 [workspace.package]
-version = "1.745.0"
+version = "1.746.0"
 edition = "2021"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 900e54b243..e98c54b026 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.745.0
+  version: 1.746.0
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index f5a0a6564d..e3d8172bfe 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.745.0";
+export const VERSION = "v1.746.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/core/constants.ts b/cli/src/core/constants.ts
index 457f4cc51e..ea626e7d45 100644
--- a/cli/src/core/constants.ts
+++ b/cli/src/core/constants.ts
@@ -10,4 +10,4 @@ export const WM_FORK_PREFIX = "wm-fork";
 // (e.g. utils.ts) can read it without importing main.ts and creating a circular
 // dependency (main → workspace → utils → main) that triggers a TDZ.
 // Re-exported from main.ts for backwards compatibility.
-export const VERSION = "1.745.0";
+export const VERSION = "1.746.0";
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 483c4766b9..b4c91f72e7 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.745.0",
+	"version": "1.746.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "@windmill-labs/components",
-			"version": "1.745.0",
+			"version": "1.746.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 4aa51acb00..3682bfa089 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.745.0",
+	"version": "1.746.0",
 	"scripts": {
 		"dev": "vite dev",
 		"dev:ui-builder": "mv static/ui_builder static/ui_builder.dev-disabled 2>/dev/null || true ; trap 'mv static/ui_builder.dev-disabled static/ui_builder 2>/dev/null || true' EXIT ; vite dev",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index 535f538d26..9cea5c53a4 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,7 +4,7 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.745.0"
+wmill = ">=1.746.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index 8b19b3fbf1..2d3cba82d9 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.745.0
+  version: 1.746.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index 92a1a6628a..2d2f30285c 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.745.0'
+    ModuleVersion     = '1.746.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index 45b7f56a17..1d4c874cec 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.745.0"
+version = "1.746.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index ebf0669fc2..f11853e2bc 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.745.0",
+  "version": "1.746.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index 763196a9cf..e0b19d396f 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.745.0",
+  "version": "1.746.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "homepage": "https://github.com/windmill-labs/windmill/tree/main/typescript-client#readme",
diff --git a/version.txt b/version.txt
index 977091ab28..c8670bfad7 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.745.0
+1.746.0

From bcb4dd8d271a0157ea7cdd5eadf9254a027ee110 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Fri, 3 Jul 2026 11:39:45 +0200
Subject: [PATCH 28/76] docs link

---
 .../src/lib/components/assets/AssetGraph/pipelineTemplates.ts   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
index 71a09318e6..63a90ef099 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
@@ -355,7 +355,7 @@ function header(ctx: TemplateContext): string {
 	// link is the canonical reference once they want the details. A blank
 	// line separates it from the parsed annotations above (`// pipeline`,
 	// `// on …`) so the editor reads as "real annotations, then a hint".
-	const more = `${p} More: partitioned daily, freshness 1h, retry 3, tag heavy — https://www.windmill.dev/docs/pipelines/annotations`
+	const more = `${p} More: partitioned daily, freshness 1h, retry 3, tag heavy — https://www.windmill.dev/docs/core_concepts/pipelines`
 	return [`${p} pipeline`, ...lines, ...matLine, ...macrosLine, '', more, ''].join('\n')
 }
 

From 5c521d808a2b5d6d6bb7cf3da17fb2addc53fdf4 Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Fri, 3 Jul 2026 12:53:16 +0200
Subject: [PATCH 29/76] fix(forks): clone only the current raw-app bundle, via
 server-side copy (#9899)

* fix(forks): clone only the current raw-app bundle, via server-side copy

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(forks): fall back to get+put when object-store copy is unsupported

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../windmill-api-workspaces/src/workspaces.rs | 110 ++++++++++++------
 1 file changed, 74 insertions(+), 36 deletions(-)

diff --git a/backend/windmill-api-workspaces/src/workspaces.rs b/backend/windmill-api-workspaces/src/workspaces.rs
index 0bbd8b065a..43d4ef241b 100644
--- a/backend/windmill-api-workspaces/src/workspaces.rs
+++ b/backend/windmill-api-workspaces/src/workspaces.rs
@@ -4734,9 +4734,18 @@ async fn clone_apps(
     .await?;
 
     let mut app_id_mapping: HashMap<i64, i64> = HashMap::new();
+    // Only a raw app's current (last) version has a bundle worth carrying into the fork: bundles exist
+    // only for raw apps, and older versions aren't viewable/runnable (the bundle secret is only ever
+    // minted for `versions.last()`). Copying a bundle for every version of every app is what makes
+    // forking a workspace with many app versions hang — a serial S3 round-trip per version, held inside
+    // the fork transaction. Collect each app's current version here; intersect with raw versions below.
+    let mut latest_version_ids: HashSet<i64> = HashSet::new();
 
     // Clone apps with new IDs
     for app in apps {
+        if let Some(&current_version) = app.versions.last() {
+            latest_version_ids.insert(current_version);
+        }
         let new_app_id = sqlx::query_scalar!(
             "INSERT INTO app (workspace_id, path, summary, policy, versions, extra_perms, custom_path)
              VALUES ($1, $2, $3, $4, $5, $6, $7)
@@ -4756,6 +4765,7 @@ async fn clone_apps(
     }
 
     let mut version_id_mapping: HashMap<i64, i64> = HashMap::new();
+    let mut raw_version_ids: HashSet<i64> = HashSet::new();
 
     {
         // Clone app versions
@@ -4771,6 +4781,9 @@ async fn clone_apps(
 
         for version in app_versions {
             if let Some(&new_app_id) = app_id_mapping.get(&version.app_id) {
+                if version.raw_app {
+                    raw_version_ids.insert(version.id);
+                }
                 let new_version_id = sqlx::query_scalar!(
                     "INSERT INTO app_version (app_id, value, created_by, created_at, raw_app)
                  VALUES ($1, $2, $3, $4, $5) RETURNING id",
@@ -4788,9 +4801,16 @@ async fn clone_apps(
         }
     }
 
-    // Clone app bundles for raw apps
-    if !version_id_mapping.is_empty() {
-        let old_ids: Vec<i64> = version_id_mapping.keys().copied().collect();
+    // The bundles worth cloning: each raw app's current version (latest ∩ raw). Everything else either
+    // has no bundle (low-code apps) or an unreachable one (older versions), so we don't touch S3 for it.
+    let bundle_version_ids: HashSet<i64> = latest_version_ids
+        .intersection(&raw_version_ids)
+        .copied()
+        .collect();
+
+    // Clone app bundles — only the current version of each raw app (see bundle_version_ids).
+    if !bundle_version_ids.is_empty() {
+        let old_ids: Vec<i64> = bundle_version_ids.iter().copied().collect();
         let bundles = sqlx::query!(
             "SELECT app_version_id, file_type, data FROM app_bundles
              WHERE app_version_id = ANY($1) AND w_id = $2",
@@ -4826,40 +4846,31 @@ async fn clone_apps(
             let object_store = windmill_object_store::get_object_store().await;
             if let Some(os) = object_store {
                 for (&old_version_id, &new_version_id) in &version_id_mapping {
+                    if !bundle_version_ids.contains(&old_version_id) {
+                        continue;
+                    }
                     for file_type in &["js", "css"] {
                         if cloned_from_db.contains(&(old_version_id, file_type.to_string())) {
                             continue;
                         }
-                        let src_path = format!(
-                            "/app_bundles/{}/{}.{}",
-                            source_workspace_id, old_version_id, file_type
-                        );
-                        let get_result = os
-                            .get(&windmill_object_store::object_store_reexports::Path::from(
-                                src_path,
-                            ))
-                            .await;
-                        match get_result {
-                            Ok(result) => {
-                                let data = result.bytes().await.map_err(
-                                    windmill_object_store::object_store_error_to_error,
-                                )?;
-                                let dst_path = format!(
-                                    "/app_bundles/{}/{}.{}",
-                                    target_workspace_id, new_version_id, file_type
-                                );
-                                os.put(
-                                    &windmill_object_store::object_store_reexports::Path::from(
-                                        dst_path.clone(),
-                                    ),
-                                    data.into(),
-                                )
-                                .await
-                                .map_err(
-                                    windmill_object_store::object_store_error_to_error,
-                                )?;
+                        // Prefer a server-side copy (no bytes through the backend). A missing source —
+                        // e.g. a raw app with a js bundle but no css — surfaces as NotFound and is
+                        // skipped. Not every object-store provider supports server-side copy, so fall
+                        // back to download+upload on any other error.
+                        let src_path =
+                            windmill_object_store::object_store_reexports::Path::from(format!(
+                                "/app_bundles/{}/{}.{}",
+                                source_workspace_id, old_version_id, file_type
+                            ));
+                        let dst_path =
+                            windmill_object_store::object_store_reexports::Path::from(format!(
+                                "/app_bundles/{}/{}.{}",
+                                target_workspace_id, new_version_id, file_type
+                            ));
+                        match os.copy(&src_path, &dst_path).await {
+                            Ok(()) => {
                                 tracing::info!(
-                                    "Cloned app bundle from S3: {}.{} -> {}.{}",
+                                    "Cloned app bundle in object store: {}.{} -> {}.{}",
                                     old_version_id,
                                     file_type,
                                     new_version_id,
@@ -4867,12 +4878,39 @@ async fn clone_apps(
                                 );
                             }
                             Err(windmill_object_store::object_store_reexports::ObjectStoreError::NotFound { .. }) => {
-                                // No bundle in S3 for this version/type, skip
+                                // No bundle in the object store for this version/type, skip
                             }
-                            Err(e) => {
-                                return Err(
-                                    windmill_object_store::object_store_error_to_error(e),
+                            Err(copy_err) => {
+                                // Provider may not support server-side copy — fall back to get+put.
+                                tracing::warn!(
+                                    "object store copy failed ({copy_err:#}), falling back to get+put for app bundle {}.{}",
+                                    old_version_id, file_type
                                 );
+                                match os.get(&src_path).await {
+                                    Ok(result) => {
+                                        let data = result.bytes().await.map_err(
+                                            windmill_object_store::object_store_error_to_error,
+                                        )?;
+                                        os.put(&dst_path, data.into()).await.map_err(
+                                            windmill_object_store::object_store_error_to_error,
+                                        )?;
+                                        tracing::info!(
+                                            "Cloned app bundle via get+put fallback: {}.{} -> {}.{}",
+                                            old_version_id,
+                                            file_type,
+                                            new_version_id,
+                                            file_type
+                                        );
+                                    }
+                                    Err(windmill_object_store::object_store_reexports::ObjectStoreError::NotFound { .. }) => {
+                                        // No bundle for this version/type, skip
+                                    }
+                                    Err(e) => {
+                                        return Err(
+                                            windmill_object_store::object_store_error_to_error(e),
+                                        );
+                                    }
+                                }
                             }
                         }
                     }

From 3ec1f164be9c8c6c40e003188ce593a963c65a43 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Fri, 3 Jul 2026 13:58:56 +0000
Subject: [PATCH 30/76] fix: strip NUL characters from app values at save time
 (#9903)

App values are persisted to a json column, which permits the JSON NUL
escape (backslash-u-0000), but are later converted to jsonb (e.g. a
workspace fork clone_apps, search indexing), which rejects it with
"unsupported Unicode escape sequence" -- silently making the app
un-forkable. The usual source is a binary file such as .DS_Store
accidentally bundled into a raw app file map.

A real NUL is unstorable in jsonb either way, and frontend code that
needs the character writes it as the source escape (which JSON-encodes
to an escaped backslash + literal u0000 and is left untouched), so rather
than hard-failing the save we strip genuine NULs and warn.

Add strip_null_chars and apply it at both app_version insert sites
(create_app_internal and update_app_internal, covering the regular and
raw create/update routes). It removes a genuine NUL escape (odd run of
backslashes before u0000) while preserving an even run. Returns a
borrowed Cow (no allocation) when the value is already clean. Covered by
unit tests.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 backend/windmill-api/src/apps.rs | 123 +++++++++++++++++++++++++++++--
 1 file changed, 118 insertions(+), 5 deletions(-)

diff --git a/backend/windmill-api/src/apps.rs b/backend/windmill-api/src/apps.rs
index 99d6156687..a2ad8f3c3e 100644
--- a/backend/windmill-api/src/apps.rs
+++ b/backend/windmill-api/src/apps.rs
@@ -1,4 +1,4 @@
-use std::{collections::HashMap, sync::Arc};
+use std::{borrow::Cow, collections::HashMap, sync::Arc};
 
 /*
  * Author: Ruben Fiszel
@@ -1818,6 +1818,50 @@ fn custom_path_conflict_error(
     }
 }
 
+/// App values live in a `json` column, which — unlike `jsonb` — accepts the
+/// `\u0000` escape. Any later `json`→`jsonb` conversion (a workspace fork's
+/// `clone_apps`, search indexing, …) then aborts with "unsupported Unicode
+/// escape sequence". Strip genuine NULs so the value is jsonb-safe before it
+/// lands in the DB; the usual source is a binary file such as `.DS_Store`
+/// accidentally bundled into a raw app's file map. A real NUL is unstorable
+/// either way, and frontend code that needs the character writes it as the
+/// source escape `\u0000`, which JSON-encodes to `\\u0000` (an escaped
+/// backslash — the even-parity case below) and is left untouched.
+///
+/// Returns `Cow::Borrowed` (no allocation) when the value is already clean.
+fn strip_null_chars(raw: &str) -> Cow<'_, str> {
+    let bytes = raw.as_bytes();
+    let mut out: Option<String> = None;
+    let mut copied_to = 0;
+    let mut search_from = 0;
+    // A genuine NUL is `\u0000`: a `u0000` introduced by an *odd* run of
+    // backslashes. An even run (`\\u0000`) is an escaped backslash then the
+    // literal text "u0000" (common in minified JS regexes) and is preserved.
+    while let Some(rel) = raw[search_from..].find("u0000") {
+        let at = search_from + rel;
+        let mut backslashes = 0;
+        let mut j = at;
+        while j > 0 && bytes[j - 1] == b'\\' {
+            backslashes += 1;
+            j -= 1;
+        }
+        if backslashes % 2 == 1 {
+            // Drop the escaping backslash + `u0000` — the 6 chars in [at-1, at+5).
+            let out = out.get_or_insert_with(String::new);
+            out.push_str(&raw[copied_to..at - 1]);
+            copied_to = at + 5;
+        }
+        search_from = at + 5;
+    }
+    match out {
+        Some(mut out) => {
+            out.push_str(&raw[copied_to..]);
+            Cow::Owned(out)
+        }
+        None => Cow::Borrowed(raw),
+    }
+}
+
 async fn create_app_internal<'a>(
     authed: ApiAuthed,
     db: sqlx::Pool<sqlx::Postgres>,
@@ -1961,13 +2005,18 @@ async fn create_app_internal<'a>(
     )
     .fetch_one(&mut *tx)
     .await?;
+    // `.get()` keeps the raw text (and thus key order); strip any NUL so the
+    // `json`→`jsonb` conversion downstream (fork, indexing) can't choke on it.
+    let value = strip_null_chars(app.value.0.get());
+    if matches!(value, Cow::Owned(_)) {
+        tracing::warn!(path = %app.path, "stripped NUL character(s) from app value on create");
+    }
     let v_id = sqlx::query_scalar!(
         "INSERT INTO app_version
             (app_id, value, created_by, raw_app)
             VALUES ($1, $2::text::json, $3, $4) RETURNING id",
         id,
-        //to preserve key orders
-        serde_json::to_string(&app.value).unwrap(),
+        value.as_ref(),
         authed.username,
         raw_app
     )
@@ -2541,13 +2590,18 @@ async fn update_app_internal<'a>(
         .fetch_one(&mut *tx)
         .await?;
 
+        // `.get()` keeps the raw text (and thus key order); strip any NUL so the
+        // `json`→`jsonb` conversion downstream (fork, indexing) can't choke on it.
+        let value = strip_null_chars(nvalue.0.get());
+        if matches!(value, Cow::Owned(_)) {
+            tracing::warn!(path = %npath, "stripped NUL character(s) from app value on update");
+        }
         let v_id = sqlx::query_scalar!(
             "INSERT INTO app_version
                 (app_id, value, created_by, raw_app)
                 VALUES ($1, $2::text::json, $3, $4) RETURNING id",
             app_id,
-            //to preserve key orders
-            serde_json::to_string(&nvalue).unwrap(),
+            value.as_ref(),
             authed.username,
             raw_app
         )
@@ -4388,3 +4442,62 @@ mod embed_token_tests {
         assert!(parse_embed_policy("not json").is_err());
     }
 }
+
+#[cfg(test)]
+mod strip_null_chars_tests {
+    use super::strip_null_chars;
+    use std::borrow::Cow;
+
+    // Build `{"k":"<n backslashes>u0000"}` without writing the escape literally
+    // (a real NUL can't live in Rust source). Odd n => the trailing `u0000` is a
+    // genuine NUL escape; even n => an escaped backslash then the text "u0000".
+    fn doc(backslashes: usize) -> String {
+        format!(r#"{{"k":"{}u0000"}}"#, "\\".repeat(backslashes))
+    }
+
+    #[test]
+    fn strips_genuine_null_escape() {
+        // 1 backslash: the NUL escape is dropped, the string value becomes "".
+        assert_eq!(strip_null_chars(&doc(1)).as_ref(), r#"{"k":""}"#);
+        // 3 backslashes: escaped backslash + NUL -> keep the escaped backslash.
+        let three = doc(3);
+        let out = strip_null_chars(&three);
+        assert_eq!(out.as_ref(), r#"{"k":"\\"}"#);
+        // Result is now valid, NUL-free JSON (i.e. jsonb-safe).
+        let v: serde_json::Value = serde_json::from_str(out.as_ref()).unwrap();
+        assert!(!v["k"].as_str().unwrap().as_bytes().contains(&0u8));
+    }
+
+    #[test]
+    fn preserves_escaped_backslash_then_literal_u0000() {
+        // Even runs are the literal text "u0000" (e.g. a minified JS regex char
+        // class) and must be returned untouched, with no allocation.
+        for n in [2usize, 4] {
+            let s = doc(n);
+            let out = strip_null_chars(&s);
+            assert_eq!(out.as_ref(), s.as_str());
+            assert!(matches!(out, Cow::Borrowed(_)), "n={n} should be borrowed");
+        }
+    }
+
+    #[test]
+    fn preserves_clean_values() {
+        // Plain value, and the bare token "u0000" with no preceding backslash.
+        for s in [r#"{"files":{"/index.tsx":"hello"}}"#, r#"{"k":"u0000"}"#] {
+            let out = strip_null_chars(s);
+            assert_eq!(out.as_ref(), s);
+            assert!(matches!(out, Cow::Borrowed(_)));
+        }
+        // The escape for a literal backslash char (`u005c`) then text "u0000":
+        // the only "u0000" match is preceded by `c` (0 backslashes) -> no NUL.
+        let s = format!(r#"{{"k":"{}u005cu0000"}}"#, "\\");
+        assert!(matches!(strip_null_chars(&s), Cow::Borrowed(_)));
+    }
+
+    #[test]
+    fn strips_multiple_and_preserves_surrounding() {
+        // Mirrors the .DS_Store case: several NULs interleaved with real text.
+        let s = format!(r#"{{"a":"x{b}u0000{b}u0000y","b":"ok"}}"#, b = "\\");
+        assert_eq!(strip_null_chars(&s).as_ref(), r#"{"a":"xy","b":"ok"}"#);
+    }
+}

From ae85d274371a24c5badb6081f00deeb409123252 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Fri, 3 Jul 2026 16:05:50 +0000
Subject: [PATCH 31/76] feat(frontend): add federatedTokenFile field to
 instance object storage Azure config (#9904)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../ObjectStoreConfigSettings.svelte          | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/frontend/src/lib/components/ObjectStoreConfigSettings.svelte b/frontend/src/lib/components/ObjectStoreConfigSettings.svelte
index 2f9333f514..c7f7065565 100644
--- a/frontend/src/lib/components/ObjectStoreConfigSettings.svelte
+++ b/frontend/src/lib/components/ObjectStoreConfigSettings.svelte
@@ -30,6 +30,7 @@
 		tenantId: string
 		clientId: string
 		accessKey: string
+		federatedTokenFile?: string
 		endpoint?: string
 	}
 
@@ -634,6 +635,26 @@
 						}
 					/>
 				</label>
+				<label class="block pb-2">
+					<span class="text-xs font-semibold text-emphasis"
+						>Federated token file <span class="text-2xs text-primary">(optional)</span></span
+					>
+					<span class="text-primary text-2xs"
+						>Path to the projected service account token when using AKS Workload Identity with the
+						tenant ID and client ID above</span
+					>
+					<TextInput
+						inputProps={{ placeholder: '/var/run/secrets/azure/tokens/azure-identity-token' }}
+						bind:value={
+							() => (bucket_config as AzureConfig).federatedTokenFile,
+							(v) =>
+								(bucket_config = {
+									...(bucket_config as AzureConfig),
+									federatedTokenFile: v === '' ? undefined : v
+								})
+						}
+					/>
+				</label>
 				<label class="block pb-2">
 					<span class="text-xs font-semibold text-emphasis"
 						>Endpoint <span class="text-2xs text-primary">(optional)</span></span

From d600c7ecfe305533798e82e8d05e5f2f297f9b54 Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Fri, 3 Jul 2026 18:26:12 +0200
Subject: [PATCH 32/76] fix(ai): route Azure Foundry Claude models via
 Anthropic Messages API (#9908)

* fix(ai): route Azure Foundry Claude models via Anthropic Messages API

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai): keep explicit Azure OpenAI deployment base URLs intact

build_azure_openai_url only appends /openai/v1 for a bare resource root; any base with an explicit path (e.g. .../openai/deployments/<id>) is preserved. Adds a regression test and a unit test for usesAnthropicMessagesApi.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(ai): enable Claude extended thinking on Azure Foundry

Route azure_foundry+Claude through the Anthropic reasoning branch (adaptive thinking + output_config.effort) instead of the gpt/o gate, and recognize claude-sonnet-5. Live-verified: sonnet-5 and opus-4-8 on Foundry accept the low/medium/high/xhigh/max ladder and render summarized thinking.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 backend/windmill-ai/src/ai_providers.rs       | 139 +++++++++++++++++-
 .../windmill-ai/src/providers/anthropic.rs    |  58 +++++++-
 backend/windmill-ai/src/providers/mod.rs      |  17 ++-
 backend/windmill-ai/src/proxy.rs              |  27 ++++
 backend/windmill-api/src/ai.rs                |  10 +-
 backend/windmill-worker/src/ai_executor.rs    |   2 +-
 .../lib/components/copilot/chat/chatLoop.ts   |   3 +-
 .../components/copilot/modelConfig.test.ts    |  23 +++
 .../src/lib/components/copilot/modelConfig.ts |  14 ++
 .../copilot/reasoningRegistry.test.ts         |  30 ++++
 .../components/copilot/reasoningRegistry.ts   |  41 ++++--
 11 files changed, 336 insertions(+), 28 deletions(-)
 create mode 100644 frontend/src/lib/components/copilot/modelConfig.test.ts

diff --git a/backend/windmill-ai/src/ai_providers.rs b/backend/windmill-ai/src/ai_providers.rs
index 776228cea7..551ba3129b 100644
--- a/backend/windmill-ai/src/ai_providers.rs
+++ b/backend/windmill-ai/src/ai_providers.rs
@@ -145,18 +145,75 @@ impl AIProvider {
             || matches!(self, AIProvider::AzureOpenAI | AIProvider::AzureFoundry)
     }
 
-    /// Build an Azure-style URL (Azure OpenAI / Azure AI Foundry) for the given path
+    /// Build an Azure-style OpenAI-compatible URL (Azure OpenAI / Azure AI Foundry)
+    /// for the given path. The resource base URL may be stored as the bare resource
+    /// root (e.g. `https://<res>.services.ai.azure.com`) or with a legacy `/openai`
+    /// or `/openai/v1` suffix (older Foundry resources shipped that way); those forms
+    /// resolve to the canonical `<root>/openai/v1/<path>`. Any other explicit path
+    /// (e.g. an Azure OpenAI `.../openai/deployments/<id>` base) is preserved as-is
+    /// with only `/<path>` appended.
     pub fn build_azure_openai_url(base_url: &str, path: &str) -> String {
         let base_url = base_url.trim_end_matches('/');
-        if base_url.ends_with("/openai") {
+        if base_url.ends_with("/openai/v1") {
+            format!("{}/{}", base_url, path)
+        } else if base_url.ends_with("/openai") {
             format!("{}/v1/{}", base_url, path)
         } else if base_url.ends_with("/deployments") {
             format!("{}/v1/{}", base_url.trim_end_matches("/deployments"), path)
+        } else if Self::is_bare_host(base_url) {
+            // A resource root with no path (Foundry convention, or an Azure OpenAI
+            // resource root) targets the OpenAI-compatible v1 surface.
+            format!("{}/openai/v1/{}", base_url, path)
         } else {
+            // Any other explicit base path (e.g. an Azure OpenAI deployment URL
+            // `.../openai/deployments/<id>`) is kept intact.
             format!("{}/{}", base_url, path)
         }
     }
 
+    /// Whether the URL is a bare scheme+host with no path component, e.g.
+    /// `https://x.services.ai.azure.com` (vs `https://x.openai.azure.com/openai/deployments/y`).
+    fn is_bare_host(url: &str) -> bool {
+        let after_scheme = url.split_once("://").map(|(_, rest)| rest).unwrap_or(url);
+        !after_scheme.contains('/')
+    }
+
+    /// Strip any known Foundry API sub-path from the resource base URL to recover the
+    /// resource root, so the correct per-model-family path can be appended. Handles
+    /// both the current root-URL convention and legacy `/openai/v1`-style values.
+    fn azure_foundry_root(base_url: &str) -> &str {
+        let base_url = base_url.trim_end_matches('/');
+        for suffix in [
+            "/openai/v1",
+            "/anthropic/v1",
+            "/openai",
+            "/anthropic",
+            "/models",
+        ] {
+            if let Some(root) = base_url.strip_suffix(suffix) {
+                return root.trim_end_matches('/');
+            }
+        }
+        base_url
+    }
+
+    /// Build an Azure AI Foundry Anthropic Messages API URL. Claude deployments on
+    /// Foundry are served only through `<root>/anthropic/v1/...`, not the
+    /// OpenAI-compatible `/openai/v1` surface.
+    pub fn build_azure_foundry_anthropic_url(base_url: &str, path: &str) -> String {
+        format!(
+            "{}/anthropic/v1/{}",
+            Self::azure_foundry_root(base_url),
+            path
+        )
+    }
+
+    /// Whether a Foundry deployment name refers to an Anthropic (Claude) model,
+    /// which requires the Anthropic Messages API rather than OpenAI chat completions.
+    pub fn is_anthropic_model(model: &str) -> bool {
+        model.to_lowercase().starts_with("claude")
+    }
+
     /// Extract model from request body (needed for Azure deployments)
     pub fn extract_model_from_body(body: &[u8]) -> Result<String> {
         #[derive(serde::Deserialize)]
@@ -194,3 +251,81 @@ pub struct ProviderModel {
     pub model: String,
     pub provider: AIProvider,
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn azure_openai_url_handles_root_and_legacy_suffixes() {
+        // Current convention: resource stores the bare root.
+        assert_eq!(
+            AIProvider::build_azure_openai_url(
+                "https://wm-test-ai.services.ai.azure.com",
+                "chat/completions"
+            ),
+            "https://wm-test-ai.services.ai.azure.com/openai/v1/chat/completions"
+        );
+        // Legacy resources that already baked in /openai/v1 must still resolve.
+        assert_eq!(
+            AIProvider::build_azure_openai_url(
+                "https://wm-test-ai.services.ai.azure.com/openai/v1/",
+                "chat/completions"
+            ),
+            "https://wm-test-ai.services.ai.azure.com/openai/v1/chat/completions"
+        );
+        // Azure OpenAI resources typically end in /openai.
+        assert_eq!(
+            AIProvider::build_azure_openai_url(
+                "https://example.openai.azure.com/openai",
+                "chat/completions"
+            ),
+            "https://example.openai.azure.com/openai/v1/chat/completions"
+        );
+        assert_eq!(
+            AIProvider::build_azure_openai_url(
+                "https://example.openai.azure.com/openai/deployments",
+                "chat/completions"
+            ),
+            "https://example.openai.azure.com/openai/v1/chat/completions"
+        );
+        // An Azure OpenAI base that pins a specific deployment must be preserved
+        // as-is (not have /openai/v1 appended after the deployment id).
+        assert_eq!(
+            AIProvider::build_azure_openai_url(
+                "https://example.openai.azure.com/openai/deployments/my-deployment",
+                "chat/completions"
+            ),
+            "https://example.openai.azure.com/openai/deployments/my-deployment/chat/completions"
+        );
+    }
+
+    #[test]
+    fn azure_foundry_anthropic_url_from_root_and_legacy() {
+        // Root URL.
+        assert_eq!(
+            AIProvider::build_azure_foundry_anthropic_url(
+                "https://wm-test-ai.services.ai.azure.com",
+                "messages"
+            ),
+            "https://wm-test-ai.services.ai.azure.com/anthropic/v1/messages"
+        );
+        // Legacy /openai/v1 base is normalized back to the root, then routed to
+        // the Anthropic Messages API.
+        assert_eq!(
+            AIProvider::build_azure_foundry_anthropic_url(
+                "https://wm-test-ai.services.ai.azure.com/openai/v1",
+                "messages"
+            ),
+            "https://wm-test-ai.services.ai.azure.com/anthropic/v1/messages"
+        );
+    }
+
+    #[test]
+    fn detects_anthropic_models() {
+        assert!(AIProvider::is_anthropic_model("claude-sonnet-5"));
+        assert!(AIProvider::is_anthropic_model("Claude-Opus-4-8"));
+        assert!(!AIProvider::is_anthropic_model("gpt-4o"));
+        assert!(!AIProvider::is_anthropic_model("DeepSeek-R1"));
+    }
+}
diff --git a/backend/windmill-ai/src/providers/anthropic.rs b/backend/windmill-ai/src/providers/anthropic.rs
index 05398ce212..c2064f2029 100644
--- a/backend/windmill-ai/src/providers/anthropic.rs
+++ b/backend/windmill-ai/src/providers/anthropic.rs
@@ -380,6 +380,13 @@ impl AnthropicQueryBuilder {
         self.platform == AIPlatform::GoogleVertexAi
     }
 
+    /// Claude models hosted on Azure AI Foundry: the Anthropic Messages API is
+    /// served under the resource's `/anthropic/v1` path rather than at the
+    /// Anthropic public base URL.
+    fn is_azure_foundry(&self) -> bool {
+        matches!(self.provider_kind, AIProvider::AzureFoundry)
+    }
+
     fn transform_proxy_body_for_vertex(body: &[u8]) -> Result<(String, Vec<u8>), Error> {
         let mut json_body: std::collections::HashMap<String, serde_json::Value> =
             serde_json::from_slice(body).map_err(|e| {
@@ -426,6 +433,15 @@ impl AnthropicQueryBuilder {
                 format!("{}/{}:streamRawPredict", base_url, model),
                 transformed_body,
             )
+        } else if self.is_azure_foundry() {
+            // Claude on Foundry is served under the resource's /anthropic/v1 path,
+            // not the resource's /openai/v1 base. The Anthropic SDK sends the path
+            // as "v1/messages", so drop its leading "v1/" before re-appending.
+            let path = args.path.trim_start_matches("v1/");
+            (
+                AIProvider::build_azure_foundry_anthropic_url(base_url, path),
+                body,
+            )
         } else if is_anthropic_sdk {
             let truncated_base_url = base_url.trim_end_matches("/v1");
             (format!("{}/{}", truncated_base_url, args.path), body)
@@ -688,6 +704,8 @@ impl QueryBuilder for AnthropicQueryBuilder {
                 base_url.trim_end_matches('/'),
                 model
             )
+        } else if self.is_azure_foundry() {
+            AIProvider::build_azure_foundry_anthropic_url(base_url, "messages")
         } else {
             format!("{}/messages", base_url)
         }
@@ -748,8 +766,7 @@ mod tests {
     #[test]
     fn builds_standard_anthropic_proxy_request() {
         let credentials = credentials(AIPlatform::Standard);
-        let builder =
-            AnthropicQueryBuilder::new(AIProvider::Anthropic, AIPlatform::Standard);
+        let builder = AnthropicQueryBuilder::new(AIProvider::Anthropic, AIPlatform::Standard);
         let method = Method::POST;
         let mut headers = HeaderMap::new();
         headers.insert("anthropic-version", HeaderValue::from_static("2023-06-01"));
@@ -786,8 +803,7 @@ mod tests {
         let mut credentials = credentials(AIPlatform::GoogleVertexAi);
         credentials.base_url = "https://us-central1-aiplatform.googleapis.com/v1/projects/p/locations/us-central1/publishers/anthropic/models".to_string();
         credentials.user = Some("user-1".to_string());
-        let builder =
-            AnthropicQueryBuilder::new(AIProvider::Anthropic, AIPlatform::GoogleVertexAi);
+        let builder = AnthropicQueryBuilder::new(AIProvider::Anthropic, AIPlatform::GoogleVertexAi);
         let method = Method::POST;
         let mut headers = HeaderMap::new();
         headers.insert("anthropic-version", HeaderValue::from_static("2023-06-01"));
@@ -830,8 +846,7 @@ mod tests {
     #[test]
     fn rejects_vertex_proxy_request_without_model() {
         let credentials = credentials(AIPlatform::GoogleVertexAi);
-        let builder =
-            AnthropicQueryBuilder::new(AIProvider::Anthropic, AIPlatform::GoogleVertexAi);
+        let builder = AnthropicQueryBuilder::new(AIProvider::Anthropic, AIPlatform::GoogleVertexAi);
         let method = Method::POST;
         let headers = HeaderMap::new();
 
@@ -847,4 +862,35 @@ mod tests {
 
         assert!(matches!(err, Error::BadRequest(message) if message.contains("Missing 'model'")));
     }
+
+    #[test]
+    fn builds_azure_foundry_anthropic_proxy_request() {
+        // Foundry resource stored with a legacy /openai/v1 suffix; the Anthropic SDK
+        // sends the path as "v1/messages". Both must resolve to the resource's
+        // /anthropic/v1/messages surface.
+        let mut credentials = credentials(AIPlatform::Standard);
+        credentials.provider = AIProvider::AzureFoundry;
+        credentials.base_url = "https://wm-test-ai.services.ai.azure.com/openai/v1".to_string();
+        let builder = AnthropicQueryBuilder::new(AIProvider::AzureFoundry, AIPlatform::Standard);
+        let method = Method::POST;
+        let mut headers = HeaderMap::new();
+        headers.insert("anthropic-version", HeaderValue::from_static("2023-06-01"));
+        headers.insert("X-Anthropic-SDK", HeaderValue::from_static("true"));
+
+        let request = builder
+            .build_proxy_request(&ProxyBuildArgs {
+                method: &method,
+                path: "v1/messages",
+                headers: &headers,
+                body: br#"{"model":"claude-sonnet-5","messages":[]}"#,
+                credentials: &credentials,
+            })
+            .unwrap();
+
+        assert_eq!(
+            request.url,
+            "https://wm-test-ai.services.ai.azure.com/anthropic/v1/messages"
+        );
+        assert!(has_header(&request.headers, "X-API-Key", "api-key"));
+    }
 }
diff --git a/backend/windmill-ai/src/providers/mod.rs b/backend/windmill-ai/src/providers/mod.rs
index 80fbc8fcca..ab4f670b17 100644
--- a/backend/windmill-ai/src/providers/mod.rs
+++ b/backend/windmill-ai/src/providers/mod.rs
@@ -7,7 +7,9 @@ pub mod openrouter;
 pub mod other;
 
 use crate::{
-    ai_providers::AIProvider, credentials::ProviderCredentials, query_builder::QueryBuilder,
+    ai_providers::{AIPlatform, AIProvider},
+    credentials::ProviderCredentials,
+    query_builder::QueryBuilder,
 };
 
 use self::{
@@ -16,7 +18,15 @@ use self::{
 };
 
 /// Factory function to create the appropriate query builder from resolved credentials.
-pub fn create_query_builder(credentials: &ProviderCredentials) -> Box<dyn QueryBuilder> {
+///
+/// `model` is the deployment/model name of the request. It matters only for Azure AI
+/// Foundry, which fronts multiple model families under one resource: Claude
+/// deployments speak the Anthropic Messages API while everything else is
+/// OpenAI-compatible, so the builder is chosen per model rather than per provider.
+pub fn create_query_builder(
+    credentials: &ProviderCredentials,
+    model: &str,
+) -> Box<dyn QueryBuilder> {
     match credentials.provider {
         AIProvider::GoogleAI => Box::new(GoogleAIQueryBuilder::new(credentials.platform.clone())),
         AIProvider::OpenAI => Box::new(OpenAIQueryBuilder::new(credentials.provider.clone())),
@@ -25,6 +35,9 @@ pub fn create_query_builder(credentials: &ProviderCredentials) -> Box<dyn QueryB
             credentials.platform.clone(),
         )),
         AIProvider::OpenRouter => Box::new(OpenRouterQueryBuilder::new()),
+        AIProvider::AzureFoundry if AIProvider::is_anthropic_model(model) => Box::new(
+            AnthropicQueryBuilder::new(AIProvider::AzureFoundry, AIPlatform::Standard),
+        ),
         _ => Box::new(OtherQueryBuilder::new(credentials.provider.clone())),
     }
 }
diff --git a/backend/windmill-ai/src/proxy.rs b/backend/windmill-ai/src/proxy.rs
index 5de4d231c4..fe4a0229d4 100644
--- a/backend/windmill-ai/src/proxy.rs
+++ b/backend/windmill-ai/src/proxy.rs
@@ -305,4 +305,31 @@ mod tests {
         assert_eq!(body["user"], "user-1");
         assert_eq!(body["model"], "gpt-4o");
     }
+
+    #[test]
+    fn foundry_routes_claude_to_anthropic_messages_api() {
+        use crate::providers::create_query_builder;
+        use crate::types::OutputType;
+
+        let creds = credentials(
+            AIProvider::AzureFoundry,
+            "https://wm-test-ai.services.ai.azure.com/openai/v1",
+        );
+
+        // Claude deployment -> Anthropic Messages API surface + x-api-key auth.
+        let claude = create_query_builder(&creds, "claude-sonnet-5");
+        assert_eq!(
+            claude.get_endpoint(&creds.base_url, "claude-sonnet-5", &OutputType::Text),
+            "https://wm-test-ai.services.ai.azure.com/anthropic/v1/messages"
+        );
+        let auth = claude.get_auth_headers("api-key", &creds.base_url, &OutputType::Text);
+        assert!(auth.contains(&("x-api-key", "api-key".to_string())));
+
+        // OpenAI-compatible deployment -> chat completions surface.
+        let gpt = create_query_builder(&creds, "gpt-4o");
+        assert_eq!(
+            gpt.get_endpoint(&creds.base_url, "gpt-4o", &OutputType::Text),
+            "https://wm-test-ai.services.ai.azure.com/openai/v1/chat/completions"
+        );
+    }
 }
diff --git a/backend/windmill-api/src/ai.rs b/backend/windmill-api/src/ai.rs
index 6195fe5644..89dff4cfd6 100644
--- a/backend/windmill-api/src/ai.rs
+++ b/backend/windmill-api/src/ai.rs
@@ -571,7 +571,10 @@ async fn global_proxy(
 
     let request = match proxy_mode {
         ProxyExecutionMode::HttpForward => {
-            let query_builder = create_query_builder(&credentials);
+            // Azure AI Foundry routes Claude deployments through the Anthropic
+            // Messages API, so the builder is chosen from the request's model.
+            let model = AIProvider::extract_model_from_body(&body).unwrap_or_default();
+            let query_builder = create_query_builder(&credentials, &model);
             let proxy_request = query_builder.build_proxy_request(&ProxyBuildArgs {
                 method: &method,
                 path: &ai_path,
@@ -873,7 +876,10 @@ async fn proxy(
 
     let request = match proxy_mode {
         ProxyExecutionMode::HttpForward => {
-            let query_builder = create_query_builder(&credentials);
+            // Azure AI Foundry routes Claude deployments through the Anthropic
+            // Messages API, so the builder is chosen from the request's model.
+            let model = AIProvider::extract_model_from_body(&body).unwrap_or_default();
+            let query_builder = create_query_builder(&credentials, &model);
             let proxy_request = query_builder.build_proxy_request(&ProxyBuildArgs {
                 method: &method,
                 path: &ai_path,
diff --git a/backend/windmill-worker/src/ai_executor.rs b/backend/windmill-worker/src/ai_executor.rs
index 2591cc6495..cc346f98d4 100644
--- a/backend/windmill-worker/src/ai_executor.rs
+++ b/backend/windmill-worker/src/ai_executor.rs
@@ -591,7 +591,7 @@ pub async fn run_agent(
     let api_key = credentials.api_key.as_deref().unwrap_or("");
 
     // Create the query builder for the provider
-    let query_builder = create_query_builder(&credentials);
+    let query_builder = create_query_builder(&credentials, args.provider.get_model());
 
     // Initialize messages
     let mut messages =
diff --git a/frontend/src/lib/components/copilot/chat/chatLoop.ts b/frontend/src/lib/components/copilot/chat/chatLoop.ts
index 0e5e4923d7..914f95de8f 100644
--- a/frontend/src/lib/components/copilot/chat/chatLoop.ts
+++ b/frontend/src/lib/components/copilot/chat/chatLoop.ts
@@ -8,6 +8,7 @@ import type {
 import { getCompletion, parseOpenAICompletion, providerSupportsWebSearch } from '../lib'
 import { resolveRequestReasoning, type ReasoningProviderModel } from '../reasoningRegistry'
 import { getAnthropicCompletion, parseAnthropicCompletion } from './anthropic'
+import { usesAnthropicMessagesApi } from '../modelConfig'
 import { getOpenAIResponsesCompletion, parseOpenAIResponsesCompletion } from './openai-responses'
 import type { Tool, ToolCallbacks } from './shared'
 import { addChatTokenUsage, emptyChatTokenUsage, type ChatTokenUsage } from './tokenUsage'
@@ -257,7 +258,7 @@ export async function runChatLoop(config: ChatLoopConfig): Promise<ChatLoopResul
 
 		const isOpenAI =
 			modelProvider.provider === 'openai' || modelProvider.provider === 'azure_openai'
-		const isAnthropic = modelProvider.provider === 'anthropic'
+		const isAnthropic = usesAnthropicMessagesApi(modelProvider.provider, modelProvider.model)
 		// Resolve effort once in chat context (applies the default-on level for
 		// capable models, and the provider-native disable token for an explicit
 		// off on reasoning-by-default providers); passed explicitly to each seam
diff --git a/frontend/src/lib/components/copilot/modelConfig.test.ts b/frontend/src/lib/components/copilot/modelConfig.test.ts
new file mode 100644
index 0000000000..1788d9c365
--- /dev/null
+++ b/frontend/src/lib/components/copilot/modelConfig.test.ts
@@ -0,0 +1,23 @@
+import { describe, expect, it } from 'vitest'
+import { usesAnthropicMessagesApi } from './modelConfig'
+
+describe('usesAnthropicMessagesApi', () => {
+	it('routes the native Anthropic provider through the Messages API', () => {
+		expect(usesAnthropicMessagesApi('anthropic', 'claude-sonnet-5')).toBe(true)
+	})
+
+	it('routes Azure Foundry Claude deployments through the Messages API', () => {
+		expect(usesAnthropicMessagesApi('azure_foundry', 'claude-sonnet-5')).toBe(true)
+		expect(usesAnthropicMessagesApi('azure_foundry', 'Claude-Opus-4-8')).toBe(true)
+	})
+
+	it('keeps other Azure Foundry models on the OpenAI-compatible path', () => {
+		expect(usesAnthropicMessagesApi('azure_foundry', 'gpt-4o')).toBe(false)
+		expect(usesAnthropicMessagesApi('azure_foundry', 'DeepSeek-R1')).toBe(false)
+	})
+
+	it('does not affect other providers', () => {
+		expect(usesAnthropicMessagesApi('openai', 'gpt-4o')).toBe(false)
+		expect(usesAnthropicMessagesApi('azure_openai', 'gpt-4o')).toBe(false)
+	})
+})
diff --git a/frontend/src/lib/components/copilot/modelConfig.ts b/frontend/src/lib/components/copilot/modelConfig.ts
index 4ab08ce02c..af0dd942b2 100644
--- a/frontend/src/lib/components/copilot/modelConfig.ts
+++ b/frontend/src/lib/components/copilot/modelConfig.ts
@@ -1,3 +1,17 @@
+import type { AIProvider } from '$lib/gen'
+
+// Azure AI Foundry fronts multiple model families under one resource. Claude
+// deployments are served only through the Anthropic Messages API, so the chat must
+// route them like the native Anthropic provider (Anthropic SDK, message format)
+// rather than the OpenAI-compatible surface used for the rest of Foundry's catalog.
+// Mirrors the backend `AIProvider::is_anthropic_model`.
+export function usesAnthropicMessagesApi(provider: AIProvider, model: string): boolean {
+	return (
+		provider === 'anthropic' ||
+		(provider === 'azure_foundry' && model.toLowerCase().startsWith('claude'))
+	)
+}
+
 // gpt-5+ and o-series reasoning models reject the legacy `max_tokens` field on
 // the OpenAI/Azure Chat Completions API and require `max_completion_tokens`
 // instead. The check strips any provider prefix (e.g. OpenRouter's "openai/o3")
diff --git a/frontend/src/lib/components/copilot/reasoningRegistry.test.ts b/frontend/src/lib/components/copilot/reasoningRegistry.test.ts
index 42f0006a1d..2b27ac9d7b 100644
--- a/frontend/src/lib/components/copilot/reasoningRegistry.test.ts
+++ b/frontend/src/lib/components/copilot/reasoningRegistry.test.ts
@@ -243,6 +243,36 @@ describe('supportsReasoning (static registry)', () => {
 	})
 })
 
+describe('Azure AI Foundry reasoning follows the model family', () => {
+	it('treats Foundry Claude deployments like the Anthropic provider', () => {
+		// Live-verified: Foundry Claude accepts the adaptive-thinking effort ladder.
+		expect(supportsReasoning('azure_foundry', 'claude-sonnet-5')).toBe(true)
+		expect(supportsReasoning('azure_foundry', 'claude-opus-4-8')).toBe(true)
+		expect(getReasoningCapability('azure_foundry', 'claude-opus-4-8').levels).toEqual([
+			'low',
+			'medium',
+			'high',
+			'xhigh',
+			'max'
+		])
+		// Off is achieved by omission (Foundry rejects effort 'none'), like Anthropic.
+		expect(getReasoningCapability('azure_foundry', 'claude-sonnet-5').canDisable).toBe(true)
+		expect(
+			resolveRequestReasoning({
+				provider: 'azure_foundry',
+				model: 'claude-sonnet-5',
+				reasoning: REASONING_OFF
+			})
+		).toBeUndefined()
+	})
+
+	it('treats Foundry OpenAI deployments like the OpenAI provider', () => {
+		expect(supportsReasoning('azure_foundry', 'gpt-5.1')).toBe(true)
+		expect(supportsReasoning('azure_foundry', 'gpt-4o')).toBe(false)
+		expect(supportsReasoning('azure_foundry', 'DeepSeek-R1')).toBe(false)
+	})
+})
+
 describe('resolveEffectiveReasoning', () => {
 	it('defaults capable models to high when unset', () => {
 		expect(resolveEffectiveReasoning({ provider: 'anthropic', model: 'claude-sonnet-4-6' })).toBe(
diff --git a/frontend/src/lib/components/copilot/reasoningRegistry.ts b/frontend/src/lib/components/copilot/reasoningRegistry.ts
index ca4525298f..4776e64c79 100644
--- a/frontend/src/lib/components/copilot/reasoningRegistry.ts
+++ b/frontend/src/lib/components/copilot/reasoningRegistry.ts
@@ -1,4 +1,5 @@
 import type { AIProvider, AIProviderModel } from '$lib/gen'
+import { usesAnthropicMessagesApi } from './modelConfig'
 
 /**
  * Reasoning effort is provider/model-specific. We never normalize a single
@@ -38,6 +39,20 @@ function baseModelId(model: string): string {
 	return normalized.split('/').pop() ?? normalized
 }
 
+/**
+ * Azure AI Foundry hosts multiple model families under one provider, so reasoning
+ * support follows the underlying model rather than the provider: Claude deployments
+ * reason like the native Anthropic provider (adaptive thinking + `output_config.effort`),
+ * everything else (gpt-5 / o-series) like OpenAI. Resolving to the owning family here
+ * lets the rest of the registry keep its per-family logic unchanged.
+ */
+function reasoningProviderFamily(provider: AIProvider, model: string): AIProvider {
+	if (provider === 'azure_foundry') {
+		return usesAnthropicMessagesApi(provider, model) ? 'anthropic' : 'openai'
+	}
+	return provider
+}
+
 /**
  * Suggested effort levels per provider, sourced from each provider SDK's own
  * vocabulary.
@@ -143,19 +158,18 @@ function anthropicReasoningLevels(model: string): ReasoningEffort[] {
 function supportsReasoningStatic(provider: AIProvider, model: string): boolean {
 	const m = model.toLowerCase()
 	const base = baseModelId(model)
-	switch (provider) {
+	switch (reasoningProviderFamily(provider, model)) {
 		case 'anthropic':
 		// Bedrock serves the same Claude models under prefixed ids
 		// (e.g. `us.anthropic.claude-opus-4-6-v1`), so match on the full string.
 		case 'aws_bedrock':
 			// 4.6+ only: Opus 4.5 rejects adaptive thinking (and, on Bedrock,
 			// the whole output_config surface) — live-verified hard 400.
-			return /claude-opus-4-(6|7|8)/.test(m) || /claude-sonnet-4-6/.test(m) || m.includes('fable')
+			return (
+				/claude-opus-4-(6|7|8)/.test(m) || /claude-sonnet-(4-6|5)/.test(m) || m.includes('fable')
+			)
 		case 'openai':
 		case 'azure_openai':
-		// Azure AI Foundry hosts OpenAI models too; the model-id gate keeps
-		// this a no-op for its non-OpenAI catalog (Llama/DeepSeek/etc.).
-		case 'azure_foundry':
 			return base.startsWith('gpt-5') || /^o\d/.test(base)
 		case 'openrouter':
 			// Best-effort markers for models whose `supported_parameters` include
@@ -207,16 +221,17 @@ export function getReasoningCapability(provider: AIProvider, model: string): Rea
 	if (!supported) {
 		return { supported: false, levels: [], canDisable: false }
 	}
+	const family = reasoningProviderFamily(provider, bareModel)
 	const levels =
-		provider === 'anthropic' || provider === 'aws_bedrock'
+		family === 'anthropic' || family === 'aws_bedrock'
 			? anthropicReasoningLevels(bareModel)
-			: provider === 'googleai'
+			: family === 'googleai'
 				? geminiReasoningLevels(bareModel)
-				: provider === 'openai' || provider === 'azure_openai' || provider === 'azure_foundry'
+				: family === 'openai' || family === 'azure_openai'
 					? openaiReasoningLevels(bareModel)
-					: provider === 'openrouter'
+					: family === 'openrouter'
 						? openrouterReasoningLevels(bareModel)
-						: (PROVIDER_REASONING_LEVELS[provider] ?? ['low', 'medium', 'high'])
+						: (PROVIDER_REASONING_LEVELS[family] ?? ['low', 'medium', 'high'])
 	return { supported, levels, canDisable: canDisableReasoning(provider, bareModel) }
 }
 
@@ -229,7 +244,7 @@ export function getReasoningCapability(provider: AIProvider, model: string): Rea
 function canDisableReasoning(provider: AIProvider, model: string): boolean {
 	const m = model.toLowerCase()
 	const base = baseModelId(model)
-	switch (provider) {
+	switch (reasoningProviderFamily(provider, model)) {
 		case 'anthropic':
 		case 'aws_bedrock':
 			// Claude 4.6+ only think when asked, so omission is a real off —
@@ -239,7 +254,6 @@ function canDisableReasoning(provider: AIProvider, model: string): boolean {
 			return geminiCanDisable(model)
 		case 'openai':
 		case 'azure_openai':
-		case 'azure_foundry':
 			// gpt-5.1+ accept effort 'none'; gpt-5 and o-series reject it and
 			// reason at `medium` by default, so omission isn't off either.
 			return /^gpt-5\./.test(base)
@@ -306,7 +320,7 @@ export const DEEPSEEK_OFF_SENTINEL: ReasoningEffort = 'none'
  * the default-on behavior. Undefined means omission is the correct off.
  */
 function explicitOffToken(provider: AIProvider, model: string): ReasoningEffort | undefined {
-	switch (provider) {
+	switch (reasoningProviderFamily(provider, model)) {
 		case 'googleai':
 			// Gemini 2.5/3 think by default (dynamic budget / level). The backend
 			// proxy maps 'none' to off on Flash, or the floor on Pro (only
@@ -316,7 +330,6 @@ function explicitOffToken(provider: AIProvider, model: string): ReasoningEffort
 			return DEEPSEEK_OFF_SENTINEL
 		case 'openai':
 		case 'azure_openai':
-		case 'azure_foundry':
 			// gpt-5.1+ reasoning is off only via the explicit 'none' effort
 			// (gpt-5.5 defaults to medium when the field is omitted).
 			return /^gpt-5\./.test(baseModelId(model)) ? 'none' : undefined

From 4ba17d0f9cd70489f89c84f982a0c8f0062fed1a Mon Sep 17 00:00:00 2001
From: Guilhem <guilhemlemouel@gmail.com>
Date: Fri, 3 Jul 2026 18:26:30 +0200
Subject: [PATCH 33/76] fix: prevent truncated tool call args from bricking AI
 chat sessions (#9902)

* fix(frontend): prevent truncated ai chat tool-call arguments from bricking the session

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: heal empty tool-call arguments when replaying chat history

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs: state sanitize invariant without drafting history

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../copilot/chat/AIChatManager.svelte.ts      |   6 +-
 .../components/copilot/chat/chatLoop.test.ts  |  39 ++++
 .../lib/components/copilot/chat/chatLoop.ts   |   3 +-
 .../copilot/chat/toolCallArguments.test.ts    |  63 +++++++
 .../copilot/chat/toolCallArguments.ts         |  58 ++++++
 .../components/copilot/lib.toolCalls.test.ts  | 167 ++++++++++++++++++
 frontend/src/lib/components/copilot/lib.ts    |  22 ++-
 7 files changed, 355 insertions(+), 3 deletions(-)
 create mode 100644 frontend/src/lib/components/copilot/chat/toolCallArguments.test.ts
 create mode 100644 frontend/src/lib/components/copilot/chat/toolCallArguments.ts
 create mode 100644 frontend/src/lib/components/copilot/lib.toolCalls.test.ts

diff --git a/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts b/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts
index 343965b709..5f5835bd13 100644
--- a/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts
+++ b/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts
@@ -67,6 +67,7 @@ import type { Selection } from 'monaco-editor'
 import type AIChatInput from './AIChatInput.svelte'
 import { prepareApiSystemMessage, prepareApiUserMessage } from './api/core'
 import { runChatLoop, truncateToToolPairedPrefix } from './chatLoop'
+import { sanitizeToolCallArguments } from './toolCallArguments'
 import { normalizeContextUsage } from './tokenUsage'
 import type { ReviewChangesOpts } from './monaco-adapter'
 import {
@@ -491,7 +492,10 @@ export class AIChatManager {
 		this.compacting = true
 		try {
 			const raw = await getNonStreamingCompletion(
-				[...prefix, { role: 'user', content: getCompactionSummaryPrompt() }],
+				[
+					...sanitizeToolCallArguments(prefix),
+					{ role: 'user', content: getCompactionSummaryPrompt() }
+				],
 				abortController
 			)
 			const formatted = formatCompactSummary(raw ?? '')
diff --git a/frontend/src/lib/components/copilot/chat/chatLoop.test.ts b/frontend/src/lib/components/copilot/chat/chatLoop.test.ts
index 9c1863ae54..93acdfbd86 100644
--- a/frontend/src/lib/components/copilot/chat/chatLoop.test.ts
+++ b/frontend/src/lib/components/copilot/chat/chatLoop.test.ts
@@ -399,3 +399,42 @@ describe('truncateToToolPairedPrefix', () => {
 		expect(truncateToToolPairedPrefix(msgs)).toEqual(msgs)
 	})
 })
+
+describe('runChatLoop history sanitization', () => {
+	beforeEach(() => {
+		vi.resetAllMocks()
+		mocks.providerSupportsWebSearch.mockReturnValue(false)
+		mocks.resolveRequestReasoning.mockReturnValue(undefined)
+		mocks.getOpenAIResponsesCompletion.mockResolvedValue({})
+		mocks.parseOpenAIResponsesCompletion.mockResolvedValue({
+			shouldContinue: false,
+			tokenUsage
+		})
+	})
+
+	it('replaces unparseable historical tool_call arguments before sending, without mutating the stored history', async () => {
+		const config = createConfig({ workspace: `workspace-${randomUUID()}` })
+		const poisoned: ChatCompletionMessageParam = {
+			role: 'assistant',
+			tool_calls: [
+				{
+					id: 'call_1',
+					type: 'function',
+					function: { name: 'patch_app_file', arguments: '{"path": "u/x", "old_string": "trunc' }
+				}
+			]
+		}
+		config.messages.push(poisoned, {
+			role: 'tool',
+			tool_call_id: 'call_1',
+			content: 'Error while calling tool'
+		})
+
+		await runChatLoop(config)
+
+		const sent = mocks.getOpenAIResponsesCompletion.mock.calls[0][0] as any[]
+		const sentAssistant = sent.find((m) => m.role === 'assistant' && m.tool_calls)
+		expect(sentAssistant.tool_calls[0].function.arguments).toBe('{}')
+		expect((poisoned as any).tool_calls[0].function.arguments).toContain('trunc')
+	})
+})
diff --git a/frontend/src/lib/components/copilot/chat/chatLoop.ts b/frontend/src/lib/components/copilot/chat/chatLoop.ts
index 914f95de8f..edf5be4d07 100644
--- a/frontend/src/lib/components/copilot/chat/chatLoop.ts
+++ b/frontend/src/lib/components/copilot/chat/chatLoop.ts
@@ -11,6 +11,7 @@ import { getAnthropicCompletion, parseAnthropicCompletion } from './anthropic'
 import { usesAnthropicMessagesApi } from '../modelConfig'
 import { getOpenAIResponsesCompletion, parseOpenAIResponsesCompletion } from './openai-responses'
 import type { Tool, ToolCallbacks } from './shared'
+import { sanitizeToolCallArguments } from './toolCallArguments'
 import { addChatTokenUsage, emptyChatTokenUsage, type ChatTokenUsage } from './tokenUsage'
 
 export interface ChatClients {
@@ -267,7 +268,7 @@ export async function runChatLoop(config: ChatLoopConfig): Promise<ChatLoopResul
 
 		const messageParams = [
 			systemMessage,
-			...messages,
+			...sanitizeToolCallArguments(messages),
 			...(pendingUserMessage ? [pendingUserMessage] : [])
 		]
 		const toolDefs = tools.map((t) => t.def)
diff --git a/frontend/src/lib/components/copilot/chat/toolCallArguments.test.ts b/frontend/src/lib/components/copilot/chat/toolCallArguments.test.ts
new file mode 100644
index 0000000000..53246bc50e
--- /dev/null
+++ b/frontend/src/lib/components/copilot/chat/toolCallArguments.test.ts
@@ -0,0 +1,63 @@
+import { describe, expect, it } from 'vitest'
+import type { ChatCompletionMessageParam } from 'openai/resources/chat/completions.mjs'
+import { hasValidToolCallArguments, sanitizeToolCallArguments } from './toolCallArguments'
+
+describe('hasValidToolCallArguments', () => {
+	it('accepts empty or valid JSON arguments', () => {
+		expect(hasValidToolCallArguments(undefined)).toBe(true)
+		expect(hasValidToolCallArguments('')).toBe(true)
+		expect(hasValidToolCallArguments('{}')).toBe(true)
+		expect(hasValidToolCallArguments('{"path": "u/admin/app", "content": "x"}')).toBe(true)
+	})
+
+	it('rejects arguments truncated mid-stream', () => {
+		expect(hasValidToolCallArguments('{"path": "u/admin/app", "old_string": "setMess')).toBe(false)
+		expect(hasValidToolCallArguments('{"path": "u/admin/app"')).toBe(false)
+	})
+})
+
+describe('sanitizeToolCallArguments', () => {
+	const poisoned: ChatCompletionMessageParam = {
+		role: 'assistant',
+		tool_calls: [
+			{
+				id: 'call_bad',
+				type: 'function',
+				function: { name: 'patch_app_file', arguments: '{"path": "u/x", "old_string": "trunc' }
+			},
+			{
+				id: 'call_ok',
+				type: 'function',
+				function: { name: 'read_file', arguments: '{"file": "a.txt"}' }
+			}
+		]
+	}
+
+	it('replaces only unparseable arguments with {}', () => {
+		const [sanitized] = sanitizeToolCallArguments([poisoned]) as any[]
+		expect(sanitized.tool_calls[0].function.arguments).toBe('{}')
+		expect(sanitized.tool_calls[1].function.arguments).toBe('{"file": "a.txt"}')
+		// The stored history object is not mutated
+		expect((poisoned as any).tool_calls[0].function.arguments).toContain('trunc')
+	})
+
+	it('rewrites empty arguments to {} so replayed history stays parseable', () => {
+		const emptyArgs: ChatCompletionMessageParam = {
+			role: 'assistant',
+			tool_calls: [{ id: 'c1', type: 'function', function: { name: 'list_files', arguments: '' } }]
+		}
+		const [sanitized] = sanitizeToolCallArguments([emptyArgs]) as any[]
+		expect(sanitized.tool_calls[0].function.arguments).toBe('{}')
+	})
+
+	it('returns untouched messages by reference', () => {
+		const user: ChatCompletionMessageParam = { role: 'user', content: 'hi' }
+		const validAssistant: ChatCompletionMessageParam = {
+			role: 'assistant',
+			tool_calls: [{ id: 'c1', type: 'function', function: { name: 'read_file', arguments: '{}' } }]
+		}
+		const result = sanitizeToolCallArguments([user, validAssistant])
+		expect(result[0]).toBe(user)
+		expect(result[1]).toBe(validAssistant)
+	})
+})
diff --git a/frontend/src/lib/components/copilot/chat/toolCallArguments.ts b/frontend/src/lib/components/copilot/chat/toolCallArguments.ts
new file mode 100644
index 0000000000..997186a611
--- /dev/null
+++ b/frontend/src/lib/components/copilot/chat/toolCallArguments.ts
@@ -0,0 +1,58 @@
+import type { ChatCompletionMessageParam } from 'openai/resources/chat/completions.mjs'
+
+/**
+ * A tool call whose `arguments` string is not valid JSON (typically a stream
+ * cut mid-arguments) must never reach a provider: the whole request is
+ * rejected, and once persisted in the session history every follow-up request
+ * fails the same way.
+ *
+ * Empty arguments count as valid: some providers stream '' for no-arg tool
+ * calls, and flagging those would wrongly report the tool as not executed.
+ * Callers persisting arguments must normalize '' to '{}' themselves.
+ */
+export function hasValidToolCallArguments(args: string | undefined): boolean {
+	if (!args) {
+		return true
+	}
+	try {
+		JSON.parse(args)
+		return true
+	} catch {
+		return false
+	}
+}
+
+// '' is valid per hasValidToolCallArguments but JSON.parse('') still throws
+// provider-side, so replaying history additionally requires non-empty args.
+function isReplayableArguments(args: string | undefined): boolean {
+	return !!args && hasValidToolCallArguments(args)
+}
+
+/**
+ * Replaces unparseable or empty assistant tool_call arguments with '{}' in the
+ * outgoing copy of the history, so a session whose persisted history contains
+ * a truncated tool call recovers instead of failing every request. The paired
+ * tool result already tells the model the call failed.
+ */
+export function sanitizeToolCallArguments(
+	messages: ChatCompletionMessageParam[]
+): ChatCompletionMessageParam[] {
+	return messages.map((m) => {
+		if (
+			m.role !== 'assistant' ||
+			!m.tool_calls?.some(
+				(t) => t.type === 'function' && !isReplayableArguments(t.function.arguments)
+			)
+		) {
+			return m
+		}
+		return {
+			...m,
+			tool_calls: m.tool_calls.map((t) =>
+				t.type === 'function' && !isReplayableArguments(t.function.arguments)
+					? { ...t, function: { ...t.function, arguments: '{}' } }
+					: t
+			)
+		}
+	})
+}
diff --git a/frontend/src/lib/components/copilot/lib.toolCalls.test.ts b/frontend/src/lib/components/copilot/lib.toolCalls.test.ts
new file mode 100644
index 0000000000..36e667f57d
--- /dev/null
+++ b/frontend/src/lib/components/copilot/lib.toolCalls.test.ts
@@ -0,0 +1,167 @@
+import { describe, expect, it, vi } from 'vitest'
+import type { ChatCompletionMessageParam } from 'openai/resources/index.mjs'
+
+vi.mock('monaco-editor', () => ({
+	editor: {}
+}))
+
+vi.mock('$lib/stores', () => ({
+	workspaceStore: { subscribe: () => () => undefined }
+}))
+
+vi.mock('$lib/components/flows/flowTree', () => ({
+	findModuleInModules: () => undefined
+}))
+
+vi.mock('$lib/gen', () => ({
+	OpenAPI: {},
+	ResourceService: {},
+	ScriptService: {},
+	FlowService: {},
+	JobService: {},
+	ScheduleService: {},
+	HttpTriggerService: {},
+	WebsocketTriggerService: {},
+	KafkaTriggerService: {},
+	NatsTriggerService: {},
+	PostgresTriggerService: {},
+	MqttTriggerService: {},
+	SqsTriggerService: {},
+	GcpTriggerService: {},
+	AzureTriggerService: {}
+}))
+
+vi.mock('$lib/utils', () => ({
+	emptyString: (value: string | undefined | null) => !value,
+	generateRandomString: () => 'generated_id'
+}))
+
+vi.mock('$lib/scripts', () => ({
+	scriptLangToEditorLang: (language: string) => language
+}))
+
+vi.mock('$lib/aiStore', () => ({
+	getCurrentModel: () => undefined,
+	getMetadataModel: () => undefined,
+	copilotInfo: {
+		subscribe: (run: (value: unknown) => void) => {
+			run({})
+			return () => undefined
+		}
+	}
+}))
+
+vi.mock('@leeoniya/ufuzzy', () => ({
+	default: class {
+		search() {
+			return [[], [], []]
+		}
+	}
+}))
+
+function streamOf(chunks: unknown[]): any {
+	return (async function* () {
+		for (const chunk of chunks) {
+			yield chunk
+		}
+	})()
+}
+
+function toolCallChunk(delta: Record<string, unknown>) {
+	return { choices: [{ delta: { tool_calls: [{ index: 0, ...delta }] } }] }
+}
+
+function createCallbacks() {
+	return {
+		onNewToken: vi.fn(),
+		onMessageEnd: vi.fn(),
+		setToolStatus: vi.fn(),
+		removeToolStatus: vi.fn()
+	}
+}
+
+function createTool(fn = vi.fn().mockResolvedValue('tool ok')) {
+	return {
+		def: {
+			type: 'function' as const,
+			function: { name: 'patch_app_file', parameters: { type: 'object' } }
+		},
+		fn
+	}
+}
+
+describe('parseOpenAICompletion tool call arguments', () => {
+	it('does not execute nor persist a tool call whose streamed arguments are truncated', async () => {
+		const { parseOpenAICompletion } = await import('./lib')
+		const fn = vi.fn()
+		const callbacks = createCallbacks()
+		const messages: ChatCompletionMessageParam[] = []
+		const addedMessages: ChatCompletionMessageParam[] = []
+
+		const result = await parseOpenAICompletion(
+			streamOf([
+				toolCallChunk({
+					id: 'call_1',
+					function: { name: 'patch_app_file', arguments: '{"path": "u/admin/app", ' }
+				}),
+				// The stream ends mid-arguments (e.g. output token limit or dropped connection)
+				toolCallChunk({ function: { arguments: '"old_string": "setMessages(prev' } })
+			]),
+			callbacks,
+			messages,
+			addedMessages,
+			[createTool(fn)] as any,
+			{},
+			undefined,
+			{ workspace: 'test' }
+		)
+
+		expect(fn).not.toHaveBeenCalled()
+		expect(result.shouldContinue).toBe(true)
+
+		const assistant = messages.find((m) => m.role === 'assistant') as any
+		// Persisting the truncated arguments string would make every follow-up
+		// request fail provider-side JSON parsing, bricking the session.
+		expect(assistant.tool_calls[0].function.arguments).toBe('{}')
+
+		const toolResult = messages.find((m) => m.role === 'tool') as any
+		expect(toolResult.tool_call_id).toBe('call_1')
+		expect(toolResult.content).toContain('NOT executed')
+		expect(callbacks.setToolStatus).toHaveBeenCalledWith(
+			'call_1',
+			expect.objectContaining({ error: expect.stringContaining('invalid or truncated') })
+		)
+		expect(addedMessages).toEqual(messages)
+	})
+
+	it('executes a tool call with valid streamed arguments and keeps them verbatim', async () => {
+		const { parseOpenAICompletion } = await import('./lib')
+		const fn = vi.fn().mockResolvedValue('tool ok')
+		const messages: ChatCompletionMessageParam[] = []
+
+		const result = await parseOpenAICompletion(
+			streamOf([
+				toolCallChunk({
+					id: 'call_1',
+					function: { name: 'patch_app_file', arguments: '{"path": ' }
+				}),
+				toolCallChunk({ function: { arguments: '"u/admin/app"}' } })
+			]),
+			createCallbacks(),
+			messages,
+			[],
+			[createTool(fn)] as any,
+			{},
+			undefined,
+			{ workspace: 'test' }
+		)
+
+		expect(fn).toHaveBeenCalledWith(expect.objectContaining({ args: { path: 'u/admin/app' } }))
+		expect(result.shouldContinue).toBe(true)
+
+		const assistant = messages.find((m) => m.role === 'assistant') as any
+		expect(assistant.tool_calls[0].function.arguments).toBe('{"path": "u/admin/app"}')
+		const toolResult = messages.find((m) => m.role === 'tool') as any
+		expect(toolResult.content).toBe('tool ok')
+	})
+})
diff --git a/frontend/src/lib/components/copilot/lib.ts b/frontend/src/lib/components/copilot/lib.ts
index adb665f127..52896f0d80 100644
--- a/frontend/src/lib/components/copilot/lib.ts
+++ b/frontend/src/lib/components/copilot/lib.ts
@@ -18,6 +18,7 @@ import { requiresMaxCompletionTokens } from './modelConfig'
 import { applyReasoningToConfig } from './reasoningRegistry'
 import { formatResourceTypes } from './utils'
 import { processToolCall, type Tool, type ToolCallbacks } from './chat/shared'
+import { hasValidToolCallArguments } from './chat/toolCallArguments'
 import {
 	getNonStreamingOpenAIResponsesCompletion,
 	getOpenAIResponsesCompletionStream
@@ -1113,11 +1114,14 @@ export async function parseOpenAICompletion(
 	}
 
 	if (toolCalls.length > 0) {
+		const invalidToolCallIds = new Set(
+			toolCalls.filter((t) => !hasValidToolCallArguments(t.function.arguments)).map((t) => t.id)
+		)
 		const normalizedToolCalls = toolCalls.map((t) => ({
 			...t,
 			function: {
 				...t.function,
-				arguments: t.function.arguments || '{}'
+				arguments: invalidToolCallIds.has(t.id) ? '{}' : t.function.arguments || '{}'
 			}
 		}))
 		const toAdd = buildAssistantToolCallMessage({
@@ -1132,6 +1136,22 @@ export async function parseOpenAICompletion(
 		messages.push(toAdd)
 		addedMessages.push(toAdd)
 		for (const toolCall of toolCalls) {
+			if (invalidToolCallIds.has(toolCall.id)) {
+				callbacks.setToolStatus(toolCall.id, {
+					isLoading: false,
+					isStreamingArguments: false,
+					error: 'Tool call arguments were invalid or truncated'
+				})
+				const messageToAdd = {
+					role: 'tool' as const,
+					tool_call_id: toolCall.id,
+					content:
+						'The tool call arguments were invalid or truncated JSON, so the tool was NOT executed. Retry the call; if the arguments were long, split the work into several smaller calls.'
+				}
+				messages.push(messageToAdd)
+				addedMessages.push(messageToAdd)
+				continue
+			}
 			const messageToAdd = await processToolCall({
 				tools,
 				toolCall,

From 1b6065fa9201fd548c4b2ef199f1009200645929 Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Fri, 3 Jul 2026 18:38:09 +0200
Subject: [PATCH 34/76] fix(kafka): set https.ca.location=probe for OAUTHBEARER
 OIDC token endpoint (#9897)

* fix(kafka): set https.ca.location=probe for OAUTHBEARER OIDC token endpoint

Bump EE ref to pull in the mod_ee.rs change that sets https.ca.location for
the Kafka OAUTHBEARER (OIDC) token endpoint HTTPS request.

EE companion: windmill-labs/windmill-ee-private#642

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore: update ee-repo-ref to 81d8a449effdc540a6e8810668dd5d4aea0c485a

This commit updates the EE repository reference after PR #642 was merged in windmill-ee-private.

Previous ee-repo-ref: a6761c3cbbf788c7273296f49bb0c39eef85afb9

New ee-repo-ref: 81d8a449effdc540a6e8810668dd5d4aea0c485a

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
Co-authored-by: Ruben Fiszel <ruben@windmill.dev>
---
 backend/ee-repo-ref.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index 45adcf5f9f..857e48ba09 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-bea5a8b5120d6d69cab1ad4611ebe463559bd200
+81d8a449effdc540a6e8810668dd5d4aea0c485a

From df6e511763dbead310cf26ed7ed0dd37557d2e09 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Fri, 3 Jul 2026 17:40:01 +0000
Subject: [PATCH 35/76] chore(main): release 1.747.0 (#9901)

* chore(main): release 1.747.0

* Apply automatic changes

---------

Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com>
---
 CHANGELOG.md                                  |  16 ++
 backend/Cargo.lock                            | 156 +++++++++---------
 backend/Cargo.toml                            |   4 +-
 .../parsers/windmill-parser-wasm/Cargo.lock   |  48 +++---
 .../parsers/windmill-parser-wasm/Cargo.toml   |   2 +-
 backend/windmill-api/openapi.yaml             |   2 +-
 benchmarks/lib.ts                             |   2 +-
 cli/src/core/constants.ts                     |   2 +-
 frontend/package-lock.json                    |   4 +-
 frontend/package.json                         |   2 +-
 lsp/Pipfile                                   |   2 +-
 openflow.openapi.yaml                         |   2 +-
 .../WindmillClient/WindmillClient.psd1        |   2 +-
 python-client/wmill/pyproject.toml            |   2 +-
 typescript-client/jsr.json                    |   2 +-
 typescript-client/package.json                |   2 +-
 version.txt                                   |   2 +-
 17 files changed, 134 insertions(+), 118 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 668078da12..b5342e3024 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,21 @@
 # Changelog
 
+## [1.747.0](https://github.com/windmill-labs/windmill/compare/v1.746.0...v1.747.0) (2026-07-03)
+
+
+### Features
+
+* **frontend:** add federatedTokenFile field to instance object storage Azure config ([#9904](https://github.com/windmill-labs/windmill/issues/9904)) ([ae85d27](https://github.com/windmill-labs/windmill/commit/ae85d274371a24c5badb6081f00deeb409123252))
+
+
+### Bug Fixes
+
+* **ai:** route Azure Foundry Claude models via Anthropic Messages API ([#9908](https://github.com/windmill-labs/windmill/issues/9908)) ([d600c7e](https://github.com/windmill-labs/windmill/commit/d600c7ecfe305533798e82e8d05e5f2f297f9b54))
+* **forks:** clone only the current raw-app bundle, via server-side copy ([#9899](https://github.com/windmill-labs/windmill/issues/9899)) ([5c521d8](https://github.com/windmill-labs/windmill/commit/5c521d808a2b5d6d6bb7cf3da17fb2addc53fdf4))
+* **kafka:** set https.ca.location=probe for OAUTHBEARER OIDC token endpoint ([#9897](https://github.com/windmill-labs/windmill/issues/9897)) ([1b6065f](https://github.com/windmill-labs/windmill/commit/1b6065fa9201fd548c4b2ef199f1009200645929))
+* prevent truncated tool call args from bricking AI chat sessions ([#9902](https://github.com/windmill-labs/windmill/issues/9902)) ([4ba17d0](https://github.com/windmill-labs/windmill/commit/4ba17d0f9cd70489f89c84f982a0c8f0062fed1a))
+* strip NUL characters from app values at save time ([#9903](https://github.com/windmill-labs/windmill/issues/9903)) ([3ec1f16](https://github.com/windmill-labs/windmill/commit/3ec1f164be9c8c6c40e003188ce593a963c65a43))
+
 ## [1.746.0](https://github.com/windmill-labs/windmill/compare/v1.745.0...v1.746.0) (2026-07-02)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index 749dc880eb..aa66b845b3 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -13735,7 +13735,7 @@ dependencies = [
 
 [[package]]
 name = "windmill"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -13817,7 +13817,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-ai"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "async-stream",
  "async-trait",
@@ -13850,7 +13850,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-alerting"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -13863,7 +13863,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -14001,7 +14001,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-agent-workers"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14024,7 +14024,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-assets"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14039,7 +14039,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-auth"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14065,7 +14065,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -14075,7 +14075,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-configs"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14092,7 +14092,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-debug"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "base64 0.22.1",
@@ -14114,7 +14114,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-embeddings"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14137,7 +14137,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flow-conversations"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14153,7 +14153,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flows"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14174,7 +14174,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-groups"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14195,7 +14195,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-inputs"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14209,7 +14209,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-integration-tests"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -14244,7 +14244,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-jobs"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14269,7 +14269,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-npm-proxy"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "flate2",
@@ -14287,7 +14287,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-openapi"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14309,7 +14309,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-schedule"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14329,7 +14329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-scripts"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14366,7 +14366,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-settings"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14394,7 +14394,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-sse"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "lazy_static",
  "serde",
@@ -14406,7 +14406,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-users"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "argon2",
  "axum 0.8.9",
@@ -14431,7 +14431,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workers"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14445,7 +14445,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workspaces"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14478,7 +14478,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -14492,7 +14492,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14511,7 +14511,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "aes-gcm",
  "aho-corasick",
@@ -14613,7 +14613,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-dep-map"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "chrono",
  "itertools 0.14.0",
@@ -14632,7 +14632,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "regex",
  "serde",
@@ -14647,7 +14647,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -14671,7 +14671,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-jseval"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14688,7 +14688,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -14704,7 +14704,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14725,7 +14725,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-native-triggers"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14756,7 +14756,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "arc-swap",
@@ -14781,7 +14781,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-object-store"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -14815,7 +14815,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-operator"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14833,7 +14833,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -14842,7 +14842,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14854,7 +14854,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14866,7 +14866,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -14878,7 +14878,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14890,7 +14890,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14902,7 +14902,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -14913,7 +14913,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14924,7 +14924,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14936,7 +14936,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -14947,7 +14947,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -14969,7 +14969,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14981,7 +14981,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14995,7 +14995,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -15012,7 +15012,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15025,7 +15025,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15037,7 +15037,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15055,7 +15055,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -15071,7 +15071,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -15087,7 +15087,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15098,7 +15098,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15137,7 +15137,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-runtime-nativets"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "const_format",
@@ -15176,7 +15176,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "getrandom 0.3.4",
  "wasm-bindgen",
@@ -15187,7 +15187,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-store"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15221,7 +15221,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-test-utils"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15245,7 +15245,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15278,7 +15278,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-azure"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15311,7 +15311,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-email"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15331,7 +15331,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-gcp"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15365,7 +15365,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-http"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15401,7 +15401,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-kafka"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15424,7 +15424,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-mqtt"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15448,7 +15448,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-nats"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -15472,7 +15472,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-postgres"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15507,7 +15507,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-sqs"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15535,7 +15535,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-websocket"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15560,7 +15560,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "bitflags 2.13.0",
@@ -15579,7 +15579,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
@@ -15689,7 +15689,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker-volumes"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "bytes",
  "futures",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index 276416f450..a91518dc38 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.746.0"
+version = "1.747.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -87,7 +87,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"]
 
 [workspace.package]
-version = "1.746.0"
+version = "1.747.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.lock b/backend/parsers/windmill-parser-wasm/Cargo.lock
index d9f4dac33c..815d62644f 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.lock
+++ b/backend/parsers/windmill-parser-wasm/Cargo.lock
@@ -6191,7 +6191,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "windmill-common"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "aho-corasick",
  "anyhow",
@@ -6272,7 +6272,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6284,7 +6284,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "convert_case",
  "serde",
@@ -6293,7 +6293,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6305,7 +6305,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6317,7 +6317,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -6329,7 +6329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6341,7 +6341,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6353,7 +6353,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -6364,7 +6364,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6375,7 +6375,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6387,7 +6387,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6398,7 +6398,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -6420,7 +6420,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6432,7 +6432,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6446,7 +6446,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "convert_case",
@@ -6463,7 +6463,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6476,7 +6476,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6488,7 +6488,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6506,7 +6506,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -6522,7 +6522,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6538,7 +6538,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wasm"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "getrandom 0.2.17",
@@ -6570,7 +6570,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6581,7 +6581,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.746.0"
+version = "1.747.0"
 dependencies = [
  "anyhow",
  "bitflags",
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.toml b/backend/parsers/windmill-parser-wasm/Cargo.toml
index b4ea7a2aeb..9111ca8ccb 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.toml
+++ b/backend/parsers/windmill-parser-wasm/Cargo.toml
@@ -12,7 +12,7 @@ resolver = "2"
 members = ["."]
 
 [workspace.package]
-version = "1.746.0"
+version = "1.747.0"
 edition = "2021"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index e98c54b026..01ae7229e6 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.746.0
+  version: 1.747.0
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index e3d8172bfe..4b342d93bd 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.746.0";
+export const VERSION = "v1.747.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/core/constants.ts b/cli/src/core/constants.ts
index ea626e7d45..9e2110814d 100644
--- a/cli/src/core/constants.ts
+++ b/cli/src/core/constants.ts
@@ -10,4 +10,4 @@ export const WM_FORK_PREFIX = "wm-fork";
 // (e.g. utils.ts) can read it without importing main.ts and creating a circular
 // dependency (main → workspace → utils → main) that triggers a TDZ.
 // Re-exported from main.ts for backwards compatibility.
-export const VERSION = "1.746.0";
+export const VERSION = "1.747.0";
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index b4c91f72e7..3b9c1b8134 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.746.0",
+	"version": "1.747.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "@windmill-labs/components",
-			"version": "1.746.0",
+			"version": "1.747.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 3682bfa089..7f0ed5e1d9 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.746.0",
+	"version": "1.747.0",
 	"scripts": {
 		"dev": "vite dev",
 		"dev:ui-builder": "mv static/ui_builder static/ui_builder.dev-disabled 2>/dev/null || true ; trap 'mv static/ui_builder.dev-disabled static/ui_builder 2>/dev/null || true' EXIT ; vite dev",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index 9cea5c53a4..482c95db43 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,7 +4,7 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.746.0"
+wmill = ">=1.747.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index 2d3cba82d9..ab81f1ea14 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.746.0
+  version: 1.747.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index 2d2f30285c..0b3006323a 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.746.0'
+    ModuleVersion     = '1.747.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index 1d4c874cec..dda29ba2b4 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.746.0"
+version = "1.747.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index f11853e2bc..afcb96626d 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.746.0",
+  "version": "1.747.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index e0b19d396f..d8058153be 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.746.0",
+  "version": "1.747.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "homepage": "https://github.com/windmill-labs/windmill/tree/main/typescript-client#readme",
diff --git a/version.txt b/version.txt
index c8670bfad7..8eff60cc0e 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.746.0
+1.747.0

From af36498432e643108308e1c03b5d986d0f0f8888 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Fri, 3 Jul 2026 22:10:18 +0000
Subject: [PATCH 36/76] feat(pipelines): record upstream snapshot ids on
 cascade-dispatched jobs (#9910)

* feat(pipelines): record upstream snapshot ids on cascade-dispatched jobs

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor: batch upstream-snapshot lookup and memoize per subscriber

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 ...8d1d346f9d67056ef272314dd9b80bee9f285.json |  77 ++++++++++
 ...c21b6af282c68f06ce037a11f703284d8980d.json |  23 +++
 backend/tests/asset_trigger_dispatch.rs       | 129 +++++++++++++++++
 backend/windmill-queue/src/asset_dispatch.rs  | 134 +++++++++++++++++-
 docs/ducklake-materialization.md              |   8 ++
 .../runs/UpstreamSnapshotsPanel.svelte        |  82 +++++++++++
 .../(root)/(logged)/run/[...run]/+page.svelte |   2 +
 7 files changed, 452 insertions(+), 3 deletions(-)
 create mode 100644 backend/.sqlx/query-0ee4a4dc8c6f09e7027bd99f98d8d1d346f9d67056ef272314dd9b80bee9f285.json
 create mode 100644 backend/.sqlx/query-3703847d0cef9df3a480af8b6a5c21b6af282c68f06ce037a11f703284d8980d.json
 create mode 100644 frontend/src/lib/components/runs/UpstreamSnapshotsPanel.svelte

diff --git a/backend/.sqlx/query-0ee4a4dc8c6f09e7027bd99f98d8d1d346f9d67056ef272314dd9b80bee9f285.json b/backend/.sqlx/query-0ee4a4dc8c6f09e7027bd99f98d8d1d346f9d67056ef272314dd9b80bee9f285.json
new file mode 100644
index 0000000000..238522a3ff
--- /dev/null
+++ b/backend/.sqlx/query-0ee4a4dc8c6f09e7027bd99f98d8d1d346f9d67056ef272314dd9b80bee9f285.json
@@ -0,0 +1,77 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT DISTINCT ON (mp.asset_kind, mp.asset_path)\n                  mp.asset_kind AS \"asset_kind: AssetKind\", mp.asset_path,\n                  mp.snapshot_id AS \"snapshot_id!\", mp.partition\n             FROM materialized_partition mp\n             JOIN unnest($2::ASSET_KIND[], $3::text[]) AS u(kind, path)\n               ON mp.asset_kind = u.kind AND mp.asset_path = u.path\n            WHERE mp.workspace_id = $1\n              AND mp.status = 'materialized' AND mp.snapshot_id IS NOT NULL\n            ORDER BY mp.asset_kind, mp.asset_path, mp.snapshot_id DESC",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "asset_kind: AssetKind",
+        "type_info": {
+          "Custom": {
+            "name": "asset_kind",
+            "kind": {
+              "Enum": [
+                "s3object",
+                "resource",
+                "variable",
+                "ducklake",
+                "datatable",
+                "volume"
+              ]
+            }
+          }
+        }
+      },
+      {
+        "ordinal": 1,
+        "name": "asset_path",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "snapshot_id!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 3,
+        "name": "partition",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        {
+          "Custom": {
+            "name": "asset_kind[]",
+            "kind": {
+              "Array": {
+                "Custom": {
+                  "name": "asset_kind",
+                  "kind": {
+                    "Enum": [
+                      "s3object",
+                      "resource",
+                      "variable",
+                      "ducklake",
+                      "datatable",
+                      "volume"
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        },
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      true,
+      false
+    ]
+  },
+  "hash": "0ee4a4dc8c6f09e7027bd99f98d8d1d346f9d67056ef272314dd9b80bee9f285"
+}
diff --git a/backend/.sqlx/query-3703847d0cef9df3a480af8b6a5c21b6af282c68f06ce037a11f703284d8980d.json b/backend/.sqlx/query-3703847d0cef9df3a480af8b6a5c21b6af282c68f06ce037a11f703284d8980d.json
new file mode 100644
index 0000000000..3a784490ef
--- /dev/null
+++ b/backend/.sqlx/query-3703847d0cef9df3a480af8b6a5c21b6af282c68f06ce037a11f703284d8980d.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT DISTINCT trigger_ref AS \"trigger_ref!\"\n           FROM script_trigger\n           WHERE workspace_id = $1\n             AND runnable_path = $2\n             AND trigger_kind = 'asset'\n             AND runnable_kind = 'script'\n           ORDER BY trigger_ref",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "trigger_ref!",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "3703847d0cef9df3a480af8b6a5c21b6af282c68f06ce037a11f703284d8980d"
+}
diff --git a/backend/tests/asset_trigger_dispatch.rs b/backend/tests/asset_trigger_dispatch.rs
index 198472d404..7184d4810d 100644
--- a/backend/tests/asset_trigger_dispatch.rs
+++ b/backend/tests/asset_trigger_dispatch.rs
@@ -1044,3 +1044,132 @@ async fn reaper_clears_only_stale_join_slots(db: Pool<Postgres>) -> anyhow::Resu
 
     Ok(())
 }
+
+/// Seed one `materialized_partition` row (the state a managed `// materialize`
+/// write records) so dispatch has a snapshot to look up.
+async fn seed_materialization(
+    db: &Pool<Postgres>,
+    kind: &str,
+    asset_path: &str,
+    partition: &str,
+    status: &str,
+    snapshot_id: Option<i64>,
+) -> anyhow::Result<()> {
+    sqlx::query(
+        r#"INSERT INTO materialized_partition
+             (workspace_id, asset_kind, asset_path, partition, status, snapshot_id)
+           VALUES ($1, $2::asset_kind, $3, $4, $5::materialization_status, $6)"#,
+    )
+    .bind(WS)
+    .bind(kind)
+    .bind(asset_path)
+    .bind(partition)
+    .bind(status)
+    .bind(snapshot_id)
+    .execute(db)
+    .await?;
+    Ok(())
+}
+
+/// Dispatch records, on the consumer's `trigger` arg, the latest captured
+/// materialization snapshot of each of its direct upstream assets
+/// (`upstream_snapshots`) — the forensic "what did this run see" record.
+/// Covered here:
+///   - latest = highest `snapshot_id` with status `materialized` (a stale
+///     partition and a failed/no-snapshot row are both passed over),
+///   - whole-table (sentinel '') upstreams omit `partition`,
+///   - upstreams with no captured snapshot produce no entry,
+///   - a consumer with no materialized upstream at all gets no
+///     `upstream_snapshots` key.
+#[sqlx::test(fixtures("base"))]
+async fn upstream_snapshots_recorded_on_dispatch(db: Pool<Postgres>) -> anyhow::Result<()> {
+    initialize_tracing().await;
+
+    seed_script(&db, SUB_S3, "echo lake consumer", "bash").await?;
+    seed_script(&db, SUB_RES, "echo raw consumer", "bash").await?;
+    seed_asset_write(&db, PRODUCER, "ducklake", "analytics/orders").await?;
+    seed_asset_write(&db, PRODUCER, "s3object", "f/raw").await?;
+
+    // SUB_S3's direct upstream set: the firing ducklake asset, a second
+    // materialized ducklake dimension (written by some other producer), and a
+    // plain s3 object that is never materialized.
+    seed_subscription(&db, SUB_S3, "script", "ducklake://analytics/orders").await?;
+    seed_subscription(&db, SUB_S3, "script", "ducklake://analytics/customers").await?;
+    seed_subscription(&db, SUB_S3, "script", "s3://f/raw").await?;
+    // SUB_RES subscribes only to the raw (non-materialized) asset.
+    seed_subscription(&db, SUB_RES, "script", "s3://f/raw").await?;
+
+    // orders: an older partition, the latest one, and a failed slice with no
+    // snapshot — only 2026-06-19 @ 42 must be recorded.
+    seed_materialization(
+        &db,
+        "ducklake",
+        "analytics/orders",
+        "2026-06-18",
+        "materialized",
+        Some(41),
+    )
+    .await?;
+    seed_materialization(
+        &db,
+        "ducklake",
+        "analytics/orders",
+        "2026-06-19",
+        "materialized",
+        Some(42),
+    )
+    .await?;
+    seed_materialization(
+        &db,
+        "ducklake",
+        "analytics/orders",
+        "2026-06-20",
+        "failed",
+        None,
+    )
+    .await?;
+    // customers: unpartitioned (sentinel '') → entry without `partition`.
+    seed_materialization(
+        &db,
+        "ducklake",
+        "analytics/customers",
+        "",
+        "materialized",
+        Some(7),
+    )
+    .await?;
+
+    let id = seed_producer_job(&db, json!({})).await?;
+    let r = dispatch_asset_triggers(&db, &make_mini(id, PRODUCER)).await;
+    assert_eq!(
+        r.dispatched.len(),
+        3,
+        "SUB_S3 fired for both written assets, SUB_RES for the raw one"
+    );
+
+    let expected_snaps = json!([
+        { "asset": "ducklake://analytics/customers", "snapshot_id": 7 },
+        { "asset": "ducklake://analytics/orders", "snapshot_id": 42, "partition": "2026-06-19" },
+    ]);
+    for (path, _, args) in fetch_dispatched(&db).await? {
+        let trigger = args
+            .as_ref()
+            .and_then(|a| a.get("trigger"))
+            .cloned()
+            .expect("dispatched job carries a trigger arg");
+        match path.as_str() {
+            SUB_S3 => assert_eq!(
+                trigger.get("upstream_snapshots"),
+                Some(&expected_snaps),
+                "latest materialized snapshot per upstream, sorted by ref, raw asset absent"
+            ),
+            SUB_RES => assert!(
+                trigger.get("upstream_snapshots").is_none(),
+                "no materialized upstream → no upstream_snapshots key"
+            ),
+            other => panic!("unexpected dispatched path {other}"),
+        }
+    }
+
+    Ok(())
+}
diff --git a/backend/windmill-queue/src/asset_dispatch.rs b/backend/windmill-queue/src/asset_dispatch.rs
index 753614d07b..29f44b153d 100644
--- a/backend/windmill-queue/src/asset_dispatch.rs
+++ b/backend/windmill-queue/src/asset_dispatch.rs
@@ -37,21 +37,31 @@
 //!       "asset_path": "...",
 //!       "producer_path": "...",
 //!       "producer_job_id": "...",
-//!       "chain": ["f/a/producer0", "f/a/producer1"]
+//!       "chain": ["f/a/producer0", "f/a/producer1"],
+//!       "upstream_snapshots": [
+//!         { "asset": "ducklake://analytics/orders", "snapshot_id": 42 }
+//!       ]
 //!     }
 //!   }
 //!   ```
 //!
+//! `upstream_snapshots` is a forensic record only (present when at least one
+//! direct upstream has a captured materialization snapshot): it says which
+//! substrate version each of the subscriber's `// on` assets was at when the
+//! job was dispatched, so a failing run can be replayed against DuckLake
+//! time-travel (`AT (VERSION => n)`). Nothing pins the consumer's reads to it.
+//!
 //! Errors are logged but never bubble up to fail the producer's job.
 
 use crate::{push, MiniCompletedJob, PushArgs, PushIsolationLevel};
+use serde::Serialize;
 use serde_json::value::RawValue;
 use sqlx::types::Json;
 use sqlx::{Pool, Postgres};
 use std::collections::HashMap;
 use std::sync::Arc;
 use uuid::Uuid;
-use windmill_common::assets::AssetKind;
+use windmill_common::assets::{parse_asset_trigger_ref, AssetKind};
 use windmill_common::error::{self, Result};
 use windmill_common::get_latest_deployed_hash_for_path;
 use windmill_common::jobs::{JobKind, JobPayload, JobTriggerKind};
@@ -286,6 +296,10 @@ async fn try_dispatch(db: &DB, job: &MiniCompletedJob) -> Result<DispatchResult>
     // subscriber × asset write). The mid-pass join-slot writes
     // (record_and_check_join_slot) are a separate table and unaffected.
     let mut events: Vec<EventRow> = Vec::new();
+    // A subscriber listening to several of this producer's writes is pushed
+    // once per edge; its upstream-snapshot record is identical across those
+    // pushes (same instant, same trigger set), so resolve it once per pass.
+    let mut snapshot_memo: HashMap<String, Arc<Vec<UpstreamSnapshot>>> = HashMap::new();
     for (asset_kind, asset_path) in writes {
         let Some(prefix) = asset_kind.canonical_prefix() else {
             continue;
@@ -361,6 +375,29 @@ async fn try_dispatch(db: &DB, job: &MiniCompletedJob) -> Result<DispatchResult>
                     }
                 }
             }
+            // Forensic upstream-state capture, resolved at dispatch time (a
+            // debounced job that gets superseded is re-pushed by the later
+            // arrival, which re-resolves — the surviving job records what its
+            // own dispatch saw). Best-effort: a lookup failure must not stop
+            // the cascade.
+            let snapshots = match snapshot_memo.get(&sub_path) {
+                Some(s) => s.clone(),
+                None => {
+                    let s = Arc::new(
+                        upstream_snapshots(db, &job.workspace_id, &sub_path)
+                            .await
+                            .unwrap_or_else(|e| {
+                                tracing::error!(
+                                    "upstream-snapshot lookup failed for {}: {e:#}",
+                                    sub_path
+                                );
+                                Vec::new()
+                            }),
+                    );
+                    snapshot_memo.insert(sub_path.clone(), s.clone());
+                    s
+                }
+            };
             match push_subscriber(
                 db,
                 job,
@@ -373,6 +410,7 @@ async fn try_dispatch(db: &DB, job: &MiniCompletedJob) -> Result<DispatchResult>
                 debounce_s,
                 retry_count,
                 retry_delay_s,
+                &snapshots,
             )
             .await
             {
@@ -552,6 +590,91 @@ async fn workspace_producer_writes(
     Ok(map)
 }
 
+/// Forensic record of one direct upstream's state at dispatch time: the
+/// latest captured materialization snapshot of an asset in the subscriber's
+/// `// on` trigger set. Serialized into the dispatched job's `trigger` arg
+/// (`upstream_snapshots`) so a failing consumer run stays debuggable against
+/// DuckLake time-travel. Record-only — the consumer's reads are not pinned.
+#[derive(Debug, Serialize)]
+struct UpstreamSnapshot {
+    /// Canonical asset uri, e.g. `ducklake://analytics/orders_daily`.
+    asset: String,
+    snapshot_id: i64,
+    /// Partition whose write produced this snapshot — i.e. the latest slice
+    /// written, not necessarily the slice this consumer processes. The
+    /// snapshot itself is table-global. Omitted for whole-table
+    /// materializations.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    partition: Option<String>,
+}
+
+/// Latest captured snapshot per direct upstream of `subscriber_path`: its
+/// asset trigger set joined against `materialized_partition`, keeping the
+/// highest `snapshot_id` per asset (the newest substrate version the consumer
+/// could read). Assets with no captured snapshot (non-materialized upstreams)
+/// simply produce no entry. Two queries total regardless of upstream count.
+async fn upstream_snapshots(
+    db: &Pool<Postgres>,
+    workspace_id: &str,
+    subscriber_path: &str,
+) -> Result<Vec<UpstreamSnapshot>> {
+    let refs = sqlx::query_scalar!(
+        r#"SELECT DISTINCT trigger_ref AS "trigger_ref!"
+           FROM script_trigger
+           WHERE workspace_id = $1
+             AND runnable_path = $2
+             AND trigger_kind = 'asset'
+             AND runnable_kind = 'script'
+           ORDER BY trigger_ref"#,
+        workspace_id,
+        subscriber_path,
+    )
+    .fetch_all(db)
+    .await?;
+    // Keep only refs with a recognized asset prefix, preserving ref order so
+    // the recorded list is deterministic.
+    let parsed: Vec<(String, AssetKind, String)> = refs
+        .into_iter()
+        .filter_map(|r| parse_asset_trigger_ref(&r).map(|(k, p)| (r, k, p)))
+        .collect();
+    if parsed.is_empty() {
+        return Ok(Vec::new());
+    }
+    let kinds: Vec<AssetKind> = parsed.iter().map(|(_, k, _)| *k).collect();
+    let paths: Vec<String> = parsed.iter().map(|(_, _, p)| p.clone()).collect();
+    let rows = sqlx::query!(
+        r#"SELECT DISTINCT ON (mp.asset_kind, mp.asset_path)
+                  mp.asset_kind AS "asset_kind: AssetKind", mp.asset_path,
+                  mp.snapshot_id AS "snapshot_id!", mp.partition
+             FROM materialized_partition mp
+             JOIN unnest($2::ASSET_KIND[], $3::text[]) AS u(kind, path)
+               ON mp.asset_kind = u.kind AND mp.asset_path = u.path
+            WHERE mp.workspace_id = $1
+              AND mp.status = 'materialized' AND mp.snapshot_id IS NOT NULL
+            ORDER BY mp.asset_kind, mp.asset_path, mp.snapshot_id DESC"#,
+        workspace_id,
+        kinds as Vec<AssetKind>,
+        &paths,
+    )
+    .fetch_all(db)
+    .await?;
+    let mut latest: HashMap<(AssetKind, String), (i64, String)> = rows
+        .into_iter()
+        .map(|r| ((r.asset_kind, r.asset_path), (r.snapshot_id, r.partition)))
+        .collect();
+    Ok(parsed
+        .into_iter()
+        .filter_map(|(trigger_ref, kind, path)| {
+            let (snapshot_id, partition) = latest.remove(&(kind, path))?;
+            Some(UpstreamSnapshot {
+                asset: trigger_ref,
+                snapshot_id,
+                partition: (!partition.is_empty()).then_some(partition),
+            })
+        })
+        .collect())
+}
+
 /// A subscriber row resolved from `script_trigger`. Bundles the per-edge
 /// options (debounce) and the script-level policy fields (`join_all`,
 /// retry) that travel together to dispatch.
@@ -614,6 +737,7 @@ async fn push_subscriber(
     debounce_s: Option<i32>,
     retry_count: Option<i16>,
     retry_delay_s: Option<i32>,
+    upstream_snapshots: &[UpstreamSnapshot],
 ) -> Result<Uuid> {
     // Same resolution as every other trigger path (`script_path_to_payload`):
     // latest deployed hash plus the script's own runnable settings
@@ -700,7 +824,7 @@ async fn push_subscriber(
     };
 
     let mut args: HashMap<String, Box<RawValue>> = HashMap::new();
-    let trigger_payload = serde_json::json!({
+    let mut trigger_payload = serde_json::json!({
         "kind": "asset",
         "asset_kind": serde_json::to_value(&asset_kind).expect("AssetKind serializes"),
         "asset_path": asset_path,
@@ -709,6 +833,10 @@ async fn push_subscriber(
         CHAIN_KEY: chain,
         PARTITION_ARG: partition,
     });
+    if !upstream_snapshots.is_empty() {
+        trigger_payload["upstream_snapshots"] =
+            serde_json::to_value(upstream_snapshots).expect("UpstreamSnapshot serializes");
+    }
     args.insert(TRIGGER_ARG.to_string(), to_raw_value(&trigger_payload));
     // Carry the producer's resolved partition forward as a top-level arg so
     // the subscriber's body can read it and the next cascade hop's
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index e7a52dbf80..4481d7555b 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -268,6 +268,14 @@ without anyone asking. This is deliberately **not** built, for three reasons:
 If a workload ever shows the consistency race in practice, pinning can be layered
 on top — the capture and the snapshot surfacing built here are its foundation.
 
+What **is** built is the forensic slice of that sketch: when the cascade
+dispatches a consumer, it records the latest captured snapshot of each of the
+consumer's direct upstream assets into the job's `trigger` arg
+(`upstream_snapshots`, rendered read-only on the run detail page with a
+copyable `AT (VERSION => n)` clause). "What did the failing run actually see"
+stays answerable after the fact, with zero read-path changes — reads are
+*not* pinned to the recorded versions.
+
 This is distinct from **SCD2 history** (`// materialize … key=… history`), which *is* built:
 DuckLake time-travel answers "what did the whole table look like at snapshot N?"
 but not "give me each entity's version history as queryable rows"
diff --git a/frontend/src/lib/components/runs/UpstreamSnapshotsPanel.svelte b/frontend/src/lib/components/runs/UpstreamSnapshotsPanel.svelte
new file mode 100644
index 0000000000..ee265d5874
--- /dev/null
+++ b/frontend/src/lib/components/runs/UpstreamSnapshotsPanel.svelte
@@ -0,0 +1,82 @@
+<script lang="ts">
+	import { copyToClipboard } from '$lib/utils'
+	import { Button } from '$lib/components/common'
+	import Tooltip from '$lib/components/Tooltip.svelte'
+	import { ClipboardCopy } from 'lucide-svelte'
+
+	// Shape produced by asset-dispatch (backend asset_dispatch.rs
+	// `UpstreamSnapshot`): the substrate version each direct upstream asset was
+	// at when this job was dispatched. Forensic record only — the run's reads
+	// are not pinned to these versions.
+	type UpstreamSnapshot = { asset: string; snapshot_id: number; partition?: string }
+
+	type Props = { args: any }
+	let { args }: Props = $props()
+
+	const snapshots: UpstreamSnapshot[] = $derived.by(() => {
+		const trigger = args?.trigger
+		if (trigger?.kind !== 'asset' || !Array.isArray(trigger?.upstream_snapshots)) return []
+		// args are caller-supplied JSON, so dedupe by asset — a crafted
+		// duplicate would otherwise crash the keyed each below.
+		const seen = new Set<string>()
+		return trigger.upstream_snapshots.filter((s: any) => {
+			if (typeof s?.asset !== 'string' || typeof s?.snapshot_id !== 'number') return false
+			if (seen.has(s.asset)) return false
+			seen.add(s.asset)
+			return true
+		})
+	})
+</script>
+
+{#if snapshots.length > 0}
+	<div class="mr-2 sm:mr-0 mt-12 mb-6">
+		<h3 class="text-xs font-semibold text-emphasis mb-1">
+			Upstream snapshots
+			<Tooltip>
+				Version of each upstream asset when this run was dispatched. Recorded for debugging only —
+				the run reads the latest data, not these versions. To inspect what this run saw, query the
+				asset with the copied <span class="font-mono">AT (VERSION =&gt; n)</span> clause. For partitioned
+				assets, the partition shown is the slice whose write produced that snapshot — the snapshot itself
+				covers the whole table.
+			</Tooltip>
+		</h3>
+		<div class="border rounded-md overflow-hidden">
+			<table class="w-full text-xs">
+				<thead class="bg-surface-secondary text-secondary">
+					<tr>
+						<th class="text-left font-normal px-3 py-2">Asset</th>
+						<th class="text-left font-normal px-3 py-2">Snapshot</th>
+						<th class="text-right font-normal px-3 py-2">Time travel</th>
+					</tr>
+				</thead>
+				<tbody>
+					{#each snapshots as s (s.asset)}
+						<tr class="border-t">
+							<td class="px-3 py-2 align-top">
+								<span class="font-mono">{s.asset}</span>
+							</td>
+							<td class="px-3 py-2 align-top whitespace-nowrap">
+								<span class="font-mono">@ {s.snapshot_id}</span>
+								{#if s.partition}
+									<span class="text-secondary">
+										· partition <span class="font-mono">{s.partition}</span></span
+									>
+								{/if}
+							</td>
+							<td class="px-3 py-2 align-top text-right whitespace-nowrap">
+								<Button
+									variant="subtle"
+									unifiedSize="sm"
+									startIcon={{ icon: ClipboardCopy }}
+									onclick={() => copyToClipboard(`AT (VERSION => ${s.snapshot_id})`)}
+								>
+									AT (VERSION =&gt; {s.snapshot_id})
+								</Button>
+							</td>
+						</tr>
+					{/each}
+				</tbody>
+			</table>
+		</div>
+	</div>
+{/if}
diff --git a/frontend/src/routes/(root)/(logged)/run/[...run]/+page.svelte b/frontend/src/routes/(root)/(logged)/run/[...run]/+page.svelte
index 6ca81a5005..14acd3c89c 100644
--- a/frontend/src/routes/(root)/(logged)/run/[...run]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/run/[...run]/+page.svelte
@@ -42,6 +42,7 @@
 
 	import DisplayResult from '$lib/components/DisplayResult.svelte'
 	import DispatchEventsPanel from '$lib/components/runs/DispatchEventsPanel.svelte'
+	import UpstreamSnapshotsPanel from '$lib/components/runs/UpstreamSnapshotsPanel.svelte'
 	import {
 		enterpriseLicense,
 		initialArgsStore,
@@ -918,6 +919,7 @@
 						</div>
 					</div>
 					{#if job.id && job.workspace_id}
+						<UpstreamSnapshotsPanel args={job.args} />
 						<DispatchEventsPanel workspace={job.workspace_id} jobId={job.id} />
 					{/if}
 				{/if}

From 5d7fb6deca3e02e89d77e5d3856483beb8b8bfeb Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sat, 4 Jul 2026 04:23:44 +0000
Subject: [PATCH 37/76] =?UTF-8?q?feat(pipelines):=20asset=20freshness=20?=
 =?UTF-8?q?=E2=80=94=20fresh/stale=20badge=20(CE)=20+=20watchdog=20(EE)=20?=
 =?UTF-8?q?(#9909)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(pipelines): passive asset freshness tracking on the graph

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore(pipelines): drop dead freshness-enforcement stub, document query ordering

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(pipelines): freshness watchdog (EE) — auto re-run stale producers

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): watchdog review fixes — archived workspaces, badge kind parity, scan index

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): CI review — no singlestepflow in freshness, +N parity, completion-time fallback

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): CI review — history completedAt, freshness/asset trigger UI metadata

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 6f5fe0f7f56696fbef5a8349da38496c32e71666

This commit updates the EE repository reference after PR #643 was merged in windmill-ee-private.

Previous ee-repo-ref: 1f13380354bf591ae25a2c20d36917534bcc5459

New ee-repo-ref: 6f5fe0f7f56696fbef5a8349da38496c32e71666

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 ...bc7e9ee85289ff5c52af43166928337c257e7.json |   3 +-
 ...91f3afd87eeea5e4e8d935b1b86eb02f061e7.json |  15 +
 ...adbb2860ce52d37a56b2861de1215260ecff8.json |   6 +-
 ...cb3adcf0175d0a71013f2497397c1c8ccc619.json |   3 +-
 ...66b49254036ca93f7a6415ceb4e316ed64eed.json |  29 ++
 ...de8b6fcebe83002c74647666e3a6f5b8490dd.json |  23 ++
 ...5ff3ae182ff7c0631d4fa44b67b11a133498f.json |  17 +
 ...c23caf312ec377dd91e5307f00d3fb8ec325d.json |   3 +-
 ...07667fc1b5e802dc2465ffd13178a042e4f89.json |  24 ++
 ...f6d740a1720f7746c01f9ea693c70271ff55c.json |  17 +
 ...04af5a7eb488c76f783e690af0c2153b1d6a8.json |   3 +-
 ...6017386cf2767c953e0d152e7983a00218c6f.json |  15 +
 ...34128c3a6ade024d6662379857905a7447a2a.json |  32 ++
 ...a995a8a555e4a9c2d1387dd8cee9c81efd40b.json |  15 +
 ...fbafe5dc3cdecc17a3d5a7476b160c1b6e7e1.json |   3 +-
 ...e33244fe8ab9a803248fc23f334034d24aad4.json |   3 +-
 ...5bd601b7dcabdf70e85543455cb4fc3986d74.json |  23 ++
 ...bb6a8f961c119516e4c33dc928cd3b4f4edbc.json |   3 +-
 ...39a26f649c960a4ee8d0a584884a236129d43.json |  15 +
 ...77429c51e6166c414bcc5ce2e97fac25bcd77.json |   3 +-
 ...9746147aa9b8d0a81642a7b7cb4738a0cad66.json |   3 +-
 ...ad8bc7a2d226a9f22418782bcc66e46d0f706.json |  15 +
 ...e1ea2fe96a1b94f5a92953fb1c1642d15c016.json |   3 +-
 ...120e5b0f629f9f04e08a2982df33ff23ac7a9.json |   3 +-
 ...9352d4d1e3cb3a8a08f1c9c03055a1cab1235.json |   3 +-
 ...a088b5c0c1ad601146ff1c57d4a3ddc30556a.json |  34 ++
 ...dba01f2f3a02bb36a8d7c20e1990dc81e0472.json |  22 ++
 backend/ee-repo-ref.txt                       |   2 +-
 ...65613_pipeline_freshness_watchdog.down.sql |   5 +
 ...3165613_pipeline_freshness_watchdog.up.sql |  35 +++
 .../windmill-parser/src/asset_parser.rs       |  12 +-
 backend/src/monitor.rs                        |  31 ++
 backend/tests/freshness_watchdog.rs           | 294 ++++++++++++++++++
 backend/windmill-api-assets/src/lib.rs        |  57 ++++
 backend/windmill-api-scripts/src/scripts.rs   |  10 -
 backend/windmill-api/openapi.yaml             |   1 +
 backend/windmill-common/src/assets.rs         |   4 +
 .../src/pipeline_advanced_oss.rs              |  16 +-
 .../src/freshness_watchdog_oss.rs             |   9 +
 backend/windmill-queue/src/lib.rs             |   7 +
 backend/windmill-types/src/jobs.rs            |   4 +
 .../assets/AssetGraph/AssetGraphCanvas.svelte |   1 +
 .../assets/AssetGraph/RunnableNode.svelte     |  64 +++-
 .../AssetGraph/activeRunnables.svelte.ts      |  49 ++-
 .../parsePipelineAnnotations.test.ts          |  38 +++
 .../AssetGraph/parsePipelineAnnotations.ts    |  22 ++
 .../AssetGraph/pipelineHistory.svelte.ts      |  10 +-
 .../lib/components/assets/AssetGraph/types.ts |   5 +
 frontend/src/lib/components/triggers/utils.ts |  30 +-
 .../(logged)/pipeline/[folder]/+page.svelte   |  13 +-
 50 files changed, 998 insertions(+), 59 deletions(-)
 create mode 100644 backend/.sqlx/query-0e22295e40bfc173d85f0a962d491f3afd87eeea5e4e8d935b1b86eb02f061e7.json
 create mode 100644 backend/.sqlx/query-3ea82f16050318a0b3b87c12beb66b49254036ca93f7a6415ceb4e316ed64eed.json
 create mode 100644 backend/.sqlx/query-45a539e61a3c35098fb6d59c3d5de8b6fcebe83002c74647666e3a6f5b8490dd.json
 create mode 100644 backend/.sqlx/query-45c73bd8742601753ad947c88b65ff3ae182ff7c0631d4fa44b67b11a133498f.json
 create mode 100644 backend/.sqlx/query-572b80f7b16fd5d1a05f8fe9bbb07667fc1b5e802dc2465ffd13178a042e4f89.json
 create mode 100644 backend/.sqlx/query-5e0569092c559a1b19f636fae68f6d740a1720f7746c01f9ea693c70271ff55c.json
 create mode 100644 backend/.sqlx/query-6d81570849980f316b08487a03f6017386cf2767c953e0d152e7983a00218c6f.json
 create mode 100644 backend/.sqlx/query-7cd0b27f4b4a20b05ac876861b934128c3a6ade024d6662379857905a7447a2a.json
 create mode 100644 backend/.sqlx/query-81d1c56c369c5328d947f1ad21da995a8a555e4a9c2d1387dd8cee9c81efd40b.json
 create mode 100644 backend/.sqlx/query-b10e21ec9edf2d22ff956fdcd085bd601b7dcabdf70e85543455cb4fc3986d74.json
 create mode 100644 backend/.sqlx/query-bc6f566bc958923045dc3e1ff1639a26f649c960a4ee8d0a584884a236129d43.json
 create mode 100644 backend/.sqlx/query-d1a1f64cb6b14c561c53c44910cad8bc7a2d226a9f22418782bcc66e46d0f706.json
 create mode 100644 backend/.sqlx/query-e50bce4bba01c90171973862bcfa088b5c0c1ad601146ff1c57d4a3ddc30556a.json
 create mode 100644 backend/.sqlx/query-f26cde14890cc754e04341264c4dba01f2f3a02bb36a8d7c20e1990dc81e0472.json
 create mode 100644 backend/migrations/20260703165613_pipeline_freshness_watchdog.down.sql
 create mode 100644 backend/migrations/20260703165613_pipeline_freshness_watchdog.up.sql
 create mode 100644 backend/tests/freshness_watchdog.rs
 create mode 100644 backend/windmill-queue/src/freshness_watchdog_oss.rs

diff --git a/backend/.sqlx/query-089d7bc7acdbb97cf477159e111bc7e9ee85289ff5c52af43166928337c257e7.json b/backend/.sqlx/query-089d7bc7acdbb97cf477159e111bc7e9ee85289ff5c52af43166928337c257e7.json
index a779aa0e95..6efb66005d 100644
--- a/backend/.sqlx/query-089d7bc7acdbb97cf477159e111bc7e9ee85289ff5c52af43166928337c257e7.json
+++ b/backend/.sqlx/query-089d7bc7acdbb97cf477159e111bc7e9ee85289ff5c52af43166928337c257e7.json
@@ -35,7 +35,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-0e22295e40bfc173d85f0a962d491f3afd87eeea5e4e8d935b1b86eb02f061e7.json b/backend/.sqlx/query-0e22295e40bfc173d85f0a962d491f3afd87eeea5e4e8d935b1b86eb02f061e7.json
new file mode 100644
index 0000000000..906c710fdf
--- /dev/null
+++ b/backend/.sqlx/query-0e22295e40bfc173d85f0a962d491f3afd87eeea5e4e8d935b1b86eb02f061e7.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM pipeline_freshness_state WHERE workspace_id = $1 AND script_path = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "0e22295e40bfc173d85f0a962d491f3afd87eeea5e4e8d935b1b86eb02f061e7"
+}
diff --git a/backend/.sqlx/query-212553c83e4dcdc6d045eb2fe2dadbb2860ce52d37a56b2861de1215260ecff8.json b/backend/.sqlx/query-212553c83e4dcdc6d045eb2fe2dadbb2860ce52d37a56b2861de1215260ecff8.json
index f9bc97d29d..704883d4f1 100644
--- a/backend/.sqlx/query-212553c83e4dcdc6d045eb2fe2dadbb2860ce52d37a56b2861de1215260ecff8.json
+++ b/backend/.sqlx/query-212553c83e4dcdc6d045eb2fe2dadbb2860ce52d37a56b2861de1215260ecff8.json
@@ -39,7 +39,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
@@ -77,7 +78,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-3c84781704b84b8a927ecce5a3fcb3adcf0175d0a71013f2497397c1c8ccc619.json b/backend/.sqlx/query-3c84781704b84b8a927ecce5a3fcb3adcf0175d0a71013f2497397c1c8ccc619.json
index 3568d1723e..f5ee767768 100644
--- a/backend/.sqlx/query-3c84781704b84b8a927ecce5a3fcb3adcf0175d0a71013f2497397c1c8ccc619.json
+++ b/backend/.sqlx/query-3c84781704b84b8a927ecce5a3fcb3adcf0175d0a71013f2497397c1c8ccc619.json
@@ -128,7 +128,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-3ea82f16050318a0b3b87c12beb66b49254036ca93f7a6415ceb4e316ed64eed.json b/backend/.sqlx/query-3ea82f16050318a0b3b87c12beb66b49254036ca93f7a6415ceb4e316ed64eed.json
new file mode 100644
index 0000000000..60dbee76ab
--- /dev/null
+++ b/backend/.sqlx/query-3ea82f16050318a0b3b87c12beb66b49254036ca93f7a6415ceb4e316ed64eed.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT p.path AS \"path!\",\n               (SELECT c.completed_at\n                  FROM v2_job j\n                  JOIN v2_job_completed c ON c.id = j.id\n                 WHERE j.workspace_id = $1\n                   AND j.runnable_path = p.path\n                   AND j.parent_job IS NULL\n                   -- No 'singlestepflow': flows may share a script's path, and\n                   -- a same-path flow run must not read as the script being\n                   -- fresh (false-fresh). Script retries land as native\n                   -- 'script' jobs; only the rare flow-wrapper fallback is\n                   -- missed, which errs stale. Kept in lockstep with the\n                   -- freshness watchdog's queries (freshness_watchdog_ee).\n                   AND j.kind IN ('script', 'preview')\n                   AND c.status = 'success'\n                 ORDER BY j.created_at DESC\n                 LIMIT 1) AS last_success_at\n          FROM unnest($2::text[]) AS p(path)\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 1,
+        "name": "last_success_at",
+        "type_info": "Timestamptz"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      null,
+      null
+    ]
+  },
+  "hash": "3ea82f16050318a0b3b87c12beb66b49254036ca93f7a6415ceb4e316ed64eed"
+}
diff --git a/backend/.sqlx/query-45a539e61a3c35098fb6d59c3d5de8b6fcebe83002c74647666e3a6f5b8490dd.json b/backend/.sqlx/query-45a539e61a3c35098fb6d59c3d5de8b6fcebe83002c74647666e3a6f5b8490dd.json
new file mode 100644
index 0000000000..5b3e70acbf
--- /dev/null
+++ b/backend/.sqlx/query-45a539e61a3c35098fb6d59c3d5de8b6fcebe83002c74647666e3a6f5b8490dd.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT EXISTS(\n            SELECT 1 FROM v2_job_queue q\n            JOIN v2_job j ON j.id = q.id\n            WHERE q.workspace_id = $1\n              AND j.runnable_path = $2\n              AND j.parent_job IS NULL\n              AND j.kind IN ('script', 'preview')\n              AND (q.running = true OR q.scheduled_for <= now())\n        ) AS \"in_flight!\"\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "in_flight!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "45a539e61a3c35098fb6d59c3d5de8b6fcebe83002c74647666e3a6f5b8490dd"
+}
diff --git a/backend/.sqlx/query-45c73bd8742601753ad947c88b65ff3ae182ff7c0631d4fa44b67b11a133498f.json b/backend/.sqlx/query-45c73bd8742601753ad947c88b65ff3ae182ff7c0631d4fa44b67b11a133498f.json
new file mode 100644
index 0000000000..6dc5fdb9a6
--- /dev/null
+++ b/backend/.sqlx/query-45c73bd8742601753ad947c88b65ff3ae182ff7c0631d4fa44b67b11a133498f.json
@@ -0,0 +1,17 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        UPDATE pipeline_freshness_state\n        SET attempts = attempts + 1,\n            last_push_at = now(),\n            next_attempt_at = now()\n                + (LEAST($3::bigint, $4::bigint * (1::bigint << LEAST(attempts + 1, 20)))::text\n                   || ' seconds')::interval\n        WHERE workspace_id = $1 AND script_path = $2 AND next_attempt_at <= now()\n        ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Int8",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "45c73bd8742601753ad947c88b65ff3ae182ff7c0631d4fa44b67b11a133498f"
+}
diff --git a/backend/.sqlx/query-4a43d4df6c5b2e8dda4308dcb88c23caf312ec377dd91e5307f00d3fb8ec325d.json b/backend/.sqlx/query-4a43d4df6c5b2e8dda4308dcb88c23caf312ec377dd91e5307f00d3fb8ec325d.json
index 7d950f6d8f..7474818bf3 100644
--- a/backend/.sqlx/query-4a43d4df6c5b2e8dda4308dcb88c23caf312ec377dd91e5307f00d3fb8ec325d.json
+++ b/backend/.sqlx/query-4a43d4df6c5b2e8dda4308dcb88c23caf312ec377dd91e5307f00d3fb8ec325d.json
@@ -80,7 +80,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-572b80f7b16fd5d1a05f8fe9bbb07667fc1b5e802dc2465ffd13178a042e4f89.json b/backend/.sqlx/query-572b80f7b16fd5d1a05f8fe9bbb07667fc1b5e802dc2465ffd13178a042e4f89.json
new file mode 100644
index 0000000000..580666f07d
--- /dev/null
+++ b/backend/.sqlx/query-572b80f7b16fd5d1a05f8fe9bbb07667fc1b5e802dc2465ffd13178a042e4f89.json
@@ -0,0 +1,24 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT EXISTS(\n            SELECT 1 FROM v2_job j\n            JOIN v2_job_completed c ON c.id = j.id\n            WHERE j.workspace_id = $1\n              AND j.runnable_path = $2\n              AND j.parent_job IS NULL\n              AND j.kind IN ('script', 'preview')\n              AND c.status = 'success'\n              AND c.completed_at > now() - ($3::bigint::text || ' seconds')::interval\n        ) AS \"fresh!\"\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "fresh!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Int8"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "572b80f7b16fd5d1a05f8fe9bbb07667fc1b5e802dc2465ffd13178a042e4f89"
+}
diff --git a/backend/.sqlx/query-5e0569092c559a1b19f636fae68f6d740a1720f7746c01f9ea693c70271ff55c.json b/backend/.sqlx/query-5e0569092c559a1b19f636fae68f6d740a1720f7746c01f9ea693c70271ff55c.json
new file mode 100644
index 0000000000..18e0936d3a
--- /dev/null
+++ b/backend/.sqlx/query-5e0569092c559a1b19f636fae68f6d740a1720f7746c01f9ea693c70271ff55c.json
@@ -0,0 +1,17 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            INSERT INTO pipeline_freshness_state\n                (workspace_id, script_path, attempts, last_push_at, next_attempt_at)\n            VALUES ($1, $2, 1, now(),\n                    now() + (LEAST($3::bigint, $4::bigint * 2)::text || ' seconds')::interval)\n            ON CONFLICT (workspace_id, script_path) DO NOTHING\n            ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Int8",
+        "Int8"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "5e0569092c559a1b19f636fae68f6d740a1720f7746c01f9ea693c70271ff55c"
+}
diff --git a/backend/.sqlx/query-67e25a7c19ea0ffaf7ea5303fcd04af5a7eb488c76f783e690af0c2153b1d6a8.json b/backend/.sqlx/query-67e25a7c19ea0ffaf7ea5303fcd04af5a7eb488c76f783e690af0c2153b1d6a8.json
index 08ebe6bba5..fcc16e9a7c 100644
--- a/backend/.sqlx/query-67e25a7c19ea0ffaf7ea5303fcd04af5a7eb488c76f783e690af0c2153b1d6a8.json
+++ b/backend/.sqlx/query-67e25a7c19ea0ffaf7ea5303fcd04af5a7eb488c76f783e690af0c2153b1d6a8.json
@@ -161,7 +161,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-6d81570849980f316b08487a03f6017386cf2767c953e0d152e7983a00218c6f.json b/backend/.sqlx/query-6d81570849980f316b08487a03f6017386cf2767c953e0d152e7983a00218c6f.json
new file mode 100644
index 0000000000..4e8c7acee2
--- /dev/null
+++ b/backend/.sqlx/query-6d81570849980f316b08487a03f6017386cf2767c953e0d152e7983a00218c6f.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE pipeline_freshness_state SET next_attempt_at = now() - interval '1 second'\n         WHERE workspace_id = $1 AND script_path = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "6d81570849980f316b08487a03f6017386cf2767c953e0d152e7983a00218c6f"
+}
diff --git a/backend/.sqlx/query-7cd0b27f4b4a20b05ac876861b934128c3a6ade024d6662379857905a7447a2a.json b/backend/.sqlx/query-7cd0b27f4b4a20b05ac876861b934128c3a6ade024d6662379857905a7447a2a.json
new file mode 100644
index 0000000000..5c8ab6fb5b
--- /dev/null
+++ b/backend/.sqlx/query-7cd0b27f4b4a20b05ac876861b934128c3a6ade024d6662379857905a7447a2a.json
@@ -0,0 +1,32 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        SELECT DISTINCT ON (workspace_id, path)\n               workspace_id AS \"workspace_id!\", path AS \"path!\", content AS \"content!\"\n        FROM script\n        WHERE auto_kind = 'pipeline'\n          AND archived = false\n          AND deleted = false\n          AND content ILIKE '%freshness%'\n          -- Workspace archival stops all execution but leaves script rows\n          -- intact for unarchival; without this the watchdog would keep\n          -- resurrecting runs in a workspace the admin shut down.\n          AND EXISTS (SELECT 1 FROM workspace w\n                      WHERE w.id = script.workspace_id AND w.deleted = false)\n        ORDER BY workspace_id, path, created_at DESC\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "workspace_id!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "content!",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": [
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "7cd0b27f4b4a20b05ac876861b934128c3a6ade024d6662379857905a7447a2a"
+}
diff --git a/backend/.sqlx/query-81d1c56c369c5328d947f1ad21da995a8a555e4a9c2d1387dd8cee9c81efd40b.json b/backend/.sqlx/query-81d1c56c369c5328d947f1ad21da995a8a555e4a9c2d1387dd8cee9c81efd40b.json
new file mode 100644
index 0000000000..3f6a4a8136
--- /dev/null
+++ b/backend/.sqlx/query-81d1c56c369c5328d947f1ad21da995a8a555e4a9c2d1387dd8cee9c81efd40b.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        DELETE FROM pipeline_freshness_state s\n        WHERE NOT EXISTS (\n            SELECT 1 FROM unnest($1::text[], $2::text[]) AS w(workspace_id, script_path)\n            WHERE w.workspace_id = s.workspace_id AND w.script_path = s.script_path\n        )\n        ",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "TextArray",
+        "TextArray"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "81d1c56c369c5328d947f1ad21da995a8a555e4a9c2d1387dd8cee9c81efd40b"
+}
diff --git a/backend/.sqlx/query-9ecb404e46a4eac55f977f05a3afbafe5dc3cdecc17a3d5a7476b160c1b6e7e1.json b/backend/.sqlx/query-9ecb404e46a4eac55f977f05a3afbafe5dc3cdecc17a3d5a7476b160c1b6e7e1.json
index ad9e57801e..ab01730c02 100644
--- a/backend/.sqlx/query-9ecb404e46a4eac55f977f05a3afbafe5dc3cdecc17a3d5a7476b160c1b6e7e1.json
+++ b/backend/.sqlx/query-9ecb404e46a4eac55f977f05a3afbafe5dc3cdecc17a3d5a7476b160c1b6e7e1.json
@@ -35,7 +35,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-a4b6371d33206010b2f3ffd2b09e33244fe8ab9a803248fc23f334034d24aad4.json b/backend/.sqlx/query-a4b6371d33206010b2f3ffd2b09e33244fe8ab9a803248fc23f334034d24aad4.json
index 9a21f228ea..405904604a 100644
--- a/backend/.sqlx/query-a4b6371d33206010b2f3ffd2b09e33244fe8ab9a803248fc23f334034d24aad4.json
+++ b/backend/.sqlx/query-a4b6371d33206010b2f3ffd2b09e33244fe8ab9a803248fc23f334034d24aad4.json
@@ -191,7 +191,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-b10e21ec9edf2d22ff956fdcd085bd601b7dcabdf70e85543455cb4fc3986d74.json b/backend/.sqlx/query-b10e21ec9edf2d22ff956fdcd085bd601b7dcabdf70e85543455cb4fc3986d74.json
new file mode 100644
index 0000000000..d5b10b13b9
--- /dev/null
+++ b/backend/.sqlx/query-b10e21ec9edf2d22ff956fdcd085bd601b7dcabdf70e85543455cb4fc3986d74.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT attempts FROM pipeline_freshness_state WHERE workspace_id = $1 AND script_path = $2",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "attempts",
+        "type_info": "Int4"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "b10e21ec9edf2d22ff956fdcd085bd601b7dcabdf70e85543455cb4fc3986d74"
+}
diff --git a/backend/.sqlx/query-b3771b690c5966272b1f42c9965bb6a8f961c119516e4c33dc928cd3b4f4edbc.json b/backend/.sqlx/query-b3771b690c5966272b1f42c9965bb6a8f961c119516e4c33dc928cd3b4f4edbc.json
index 3efa843923..092d15e592 100644
--- a/backend/.sqlx/query-b3771b690c5966272b1f42c9965bb6a8f961c119516e4c33dc928cd3b4f4edbc.json
+++ b/backend/.sqlx/query-b3771b690c5966272b1f42c9965bb6a8f961c119516e4c33dc928cd3b4f4edbc.json
@@ -166,7 +166,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-bc6f566bc958923045dc3e1ff1639a26f649c960a4ee8d0a584884a236129d43.json b/backend/.sqlx/query-bc6f566bc958923045dc3e1ff1639a26f649c960a4ee8d0a584884a236129d43.json
new file mode 100644
index 0000000000..ce77275faf
--- /dev/null
+++ b/backend/.sqlx/query-bc6f566bc958923045dc3e1ff1639a26f649c960a4ee8d0a584884a236129d43.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO pipeline_freshness_state (workspace_id, script_path, attempts) VALUES ($1, $2, 3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "bc6f566bc958923045dc3e1ff1639a26f649c960a4ee8d0a584884a236129d43"
+}
diff --git a/backend/.sqlx/query-bcfa34cf80abea05f0c24883b9e77429c51e6166c414bcc5ce2e97fac25bcd77.json b/backend/.sqlx/query-bcfa34cf80abea05f0c24883b9e77429c51e6166c414bcc5ce2e97fac25bcd77.json
index f6ff25a4bf..419ab26383 100644
--- a/backend/.sqlx/query-bcfa34cf80abea05f0c24883b9e77429c51e6166c414bcc5ce2e97fac25bcd77.json
+++ b/backend/.sqlx/query-bcfa34cf80abea05f0c24883b9e77429c51e6166c414bcc5ce2e97fac25bcd77.json
@@ -80,7 +80,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-be6d2c92a62b7b284651c45af809746147aa9b8d0a81642a7b7cb4738a0cad66.json b/backend/.sqlx/query-be6d2c92a62b7b284651c45af809746147aa9b8d0a81642a7b7cb4738a0cad66.json
index 8dc66064dc..b9d33a6b5f 100644
--- a/backend/.sqlx/query-be6d2c92a62b7b284651c45af809746147aa9b8d0a81642a7b7cb4738a0cad66.json
+++ b/backend/.sqlx/query-be6d2c92a62b7b284651c45af809746147aa9b8d0a81642a7b7cb4738a0cad66.json
@@ -111,7 +111,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-d1a1f64cb6b14c561c53c44910cad8bc7a2d226a9f22418782bcc66e46d0f706.json b/backend/.sqlx/query-d1a1f64cb6b14c561c53c44910cad8bc7a2d226a9f22418782bcc66e46d0f706.json
new file mode 100644
index 0000000000..cbf96dad52
--- /dev/null
+++ b/backend/.sqlx/query-d1a1f64cb6b14c561c53c44910cad8bc7a2d226a9f22418782bcc66e46d0f706.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO pipeline_freshness_state (workspace_id, script_path) VALUES ($1, $2)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "d1a1f64cb6b14c561c53c44910cad8bc7a2d226a9f22418782bcc66e46d0f706"
+}
diff --git a/backend/.sqlx/query-d41ea93fd58381b89e151c965eae1ea2fe96a1b94f5a92953fb1c1642d15c016.json b/backend/.sqlx/query-d41ea93fd58381b89e151c965eae1ea2fe96a1b94f5a92953fb1c1642d15c016.json
index d5365ffe94..d97c02d26b 100644
--- a/backend/.sqlx/query-d41ea93fd58381b89e151c965eae1ea2fe96a1b94f5a92953fb1c1642d15c016.json
+++ b/backend/.sqlx/query-d41ea93fd58381b89e151c965eae1ea2fe96a1b94f5a92953fb1c1642d15c016.json
@@ -111,7 +111,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-d4211392e174a0e8f89c7fcebdf120e5b0f629f9f04e08a2982df33ff23ac7a9.json b/backend/.sqlx/query-d4211392e174a0e8f89c7fcebdf120e5b0f629f9f04e08a2982df33ff23ac7a9.json
index 33a5534b42..052d83fcd9 100644
--- a/backend/.sqlx/query-d4211392e174a0e8f89c7fcebdf120e5b0f629f9f04e08a2982df33ff23ac7a9.json
+++ b/backend/.sqlx/query-d4211392e174a0e8f89c7fcebdf120e5b0f629f9f04e08a2982df33ff23ac7a9.json
@@ -251,7 +251,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-e4d71278fb80126a7a9da73f1889352d4d1e3cb3a8a08f1c9c03055a1cab1235.json b/backend/.sqlx/query-e4d71278fb80126a7a9da73f1889352d4d1e3cb3a8a08f1c9c03055a1cab1235.json
index 470c651020..a35373a959 100644
--- a/backend/.sqlx/query-e4d71278fb80126a7a9da73f1889352d4d1e3cb3a8a08f1c9c03055a1cab1235.json
+++ b/backend/.sqlx/query-e4d71278fb80126a7a9da73f1889352d4d1e3cb3a8a08f1c9c03055a1cab1235.json
@@ -191,7 +191,8 @@
                 "ci_test",
                 "github",
                 "azure",
-                "asset"
+                "asset",
+                "freshness"
               ]
             }
           }
diff --git a/backend/.sqlx/query-e50bce4bba01c90171973862bcfa088b5c0c1ad601146ff1c57d4a3ddc30556a.json b/backend/.sqlx/query-e50bce4bba01c90171973862bcfa088b5c0c1ad601146ff1c57d4a3ddc30556a.json
new file mode 100644
index 0000000000..8c80c14ea4
--- /dev/null
+++ b/backend/.sqlx/query-e50bce4bba01c90171973862bcfa088b5c0c1ad601146ff1c57d4a3ddc30556a.json
@@ -0,0 +1,34 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT runnable_path AS \"runnable_path!\", created_by AS \"created_by!\",\n                  args AS \"args: sqlx::types::Json<serde_json::Value>\"\n             FROM v2_job\n             WHERE workspace_id = $1 AND trigger_kind = 'freshness'\n             ORDER BY created_at",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "runnable_path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "created_by!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "args: sqlx::types::Json<serde_json::Value>",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      true,
+      false,
+      true
+    ]
+  },
+  "hash": "e50bce4bba01c90171973862bcfa088b5c0c1ad601146ff1c57d4a3ddc30556a"
+}
diff --git a/backend/.sqlx/query-f26cde14890cc754e04341264c4dba01f2f3a02bb36a8d7c20e1990dc81e0472.json b/backend/.sqlx/query-f26cde14890cc754e04341264c4dba01f2f3a02bb36a8d7c20e1990dc81e0472.json
new file mode 100644
index 0000000000..8257722c5c
--- /dev/null
+++ b/backend/.sqlx/query-f26cde14890cc754e04341264c4dba01f2f3a02bb36a8d7c20e1990dc81e0472.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT COUNT(*) AS \"count!\" FROM pipeline_freshness_state WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "count!",
+        "type_info": "Int8"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "f26cde14890cc754e04341264c4dba01f2f3a02bb36a8d7c20e1990dc81e0472"
+}
diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index 857e48ba09..0cd164d1ce 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-81d8a449effdc540a6e8810668dd5d4aea0c485a
+6f5fe0f7f56696fbef5a8349da38496c32e71666
diff --git a/backend/migrations/20260703165613_pipeline_freshness_watchdog.down.sql b/backend/migrations/20260703165613_pipeline_freshness_watchdog.down.sql
new file mode 100644
index 0000000000..aed2f9d32a
--- /dev/null
+++ b/backend/migrations/20260703165613_pipeline_freshness_watchdog.down.sql
@@ -0,0 +1,5 @@
+-- Postgres has no ALTER TYPE ... DROP VALUE for enums. The 'freshness' value
+-- stays even on rollback, consistent with prior job_trigger_kind additions
+-- (see 20260510174213_asset_trigger_dispatch).
+DROP INDEX IF EXISTS idx_script_pipeline_freshness_scan;
+DROP TABLE IF EXISTS pipeline_freshness_state;
diff --git a/backend/migrations/20260703165613_pipeline_freshness_watchdog.up.sql b/backend/migrations/20260703165613_pipeline_freshness_watchdog.up.sql
new file mode 100644
index 0000000000..acf9545c96
--- /dev/null
+++ b/backend/migrations/20260703165613_pipeline_freshness_watchdog.up.sql
@@ -0,0 +1,35 @@
+-- Attribution for runs pushed by the pipeline freshness watchdog (the EE
+-- background loop that re-runs a `// freshness`-annotated producer whose
+-- output aged past its window).
+ALTER TYPE job_trigger_kind ADD VALUE IF NOT EXISTS 'freshness';
+
+-- Per-(workspace, script) watchdog state: exponential-backoff bookkeeping so
+-- a persistently failing producer isn't re-pushed on every scan tick, and an
+-- atomic claim so concurrent servers can't double-push in the same tick
+-- (claim = the UPDATE/INSERT that advances next_attempt_at; only the winner
+-- pushes). Rows exist only while a script is stale — observing it fresh (or
+-- its annotation gone) deletes the row, resetting the backoff.
+CREATE TABLE pipeline_freshness_state (
+    workspace_id VARCHAR(50) NOT NULL REFERENCES workspace (id) ON DELETE CASCADE,
+    script_path VARCHAR(510) NOT NULL,
+    attempts INTEGER NOT NULL DEFAULT 1,
+    last_push_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    next_attempt_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    PRIMARY KEY (workspace_id, script_path)
+);
+
+-- Written only by the server monitor loop on the raw (non-RLS) pool, but
+-- granted like every other app table so a future user-transaction reader
+-- doesn't hit the recurring missing-GRANT class of bug.
+GRANT ALL ON pipeline_freshness_state TO windmill_user;
+GRANT ALL ON pipeline_freshness_state TO windmill_admin;
+
+-- The watchdog's ~60s candidate scan (latest deployed pipeline members)
+-- filters on this exact predicate and orders by (workspace_id, path,
+-- created_at DESC); without a matching partial index it seq-scans the whole
+-- script-version heap on every tick, on instances that mostly have zero
+-- pipeline scripts. (idx_script_pipeline_path is text_pattern_ops for
+-- prefix LIKE — it can't serve this ordering.)
+CREATE INDEX idx_script_pipeline_freshness_scan
+    ON script (workspace_id, path, created_at DESC)
+    WHERE auto_kind = 'pipeline' AND archived = false AND deleted = false;
diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index c22359f6b0..299e3a70f9 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -77,10 +77,12 @@ pub struct ParseAssetsOutput {
     #[serde(skip_serializing_if = "Option::is_none", default)]
     pub partition: Option<PartitionSpec>,
     // `// freshness <duration>` — SLA stating outputs must be at most
-    // `duration` old. Active backstop: when no other trigger has fired the
-    // script within the window, a watchdog re-runs it. Distinct from
-    // schedule (which is producer cadence); freshness is consumer SLA and
-    // applies regardless of which trigger last fired.
+    // `duration` old. Drives passive monitoring in CE (the asset graph
+    // colors the node's badge fresh/stale against its last successful run)
+    // and the enterprise watchdog (windmill-queue `freshness_watchdog`),
+    // which re-runs a stale unpartitioned producer. Distinct from schedule
+    // (which is producer cadence); freshness is consumer SLA and applies
+    // regardless of which trigger last fired.
     #[serde(skip_serializing_if = "Option::is_none", default)]
     pub freshness: Option<FreshnessSpec>,
     // `// trigger all` → AND join barrier; default (`any`) = OR (current
@@ -637,7 +639,7 @@ fn parse_kv_opts(s: &str) -> BTreeMap<String, String> {
 //   - `on <trigger-spec>`        → asset / native trigger edge (including
 //                                  the marker-only `on schedule` form)
 //   - `partitioned <kind> [opts]` → partition declaration
-//   - `freshness <duration>`     → SLA / active backstop
+//   - `freshness <duration>`     → SLA window (badge + EE watchdog)
 //   - `tag <name>`               → worker-tag override (annotation wins
 //                                  over UI-set value at deploy)
 //   - `retry <count> [<delay>]`  → cascade-only retry policy
diff --git a/backend/src/monitor.rs b/backend/src/monitor.rs
index 817887eaad..60b4024c0a 100644
--- a/backend/src/monitor.rs
+++ b/backend/src/monitor.rs
@@ -178,6 +178,14 @@ lazy_static::lazy_static! {
     .and_then(|x| x.parse::<bool>().ok())
     .unwrap_or(false);
 
+    // Ops kill switch for the pipeline freshness watchdog (a background
+    // pusher — being able to stop it without a redeploy matters more than
+    // for read-only monitors).
+    pub static ref DISABLE_FRESHNESS_WATCHDOG: bool = std::env::var("DISABLE_FRESHNESS_WATCHDOG")
+    .ok()
+    .and_then(|x| x.parse::<bool>().ok())
+    .unwrap_or(false);
+
     pub static ref WORKERS_NAMES: Arc<RwLock<Vec<String>>> = Arc::new(RwLock::new(Vec::new()));
 
     static ref QUEUE_COUNT_TAGS: Arc<RwLock<Vec<String>>> = Arc::new(RwLock::new(Vec::new()));
@@ -2994,6 +3002,28 @@ pub async fn monitor_db(
         }
     };
 
+    // run every ~60s (2 iterations * 30s). Enterprise feature: the active
+    // `// freshness` backstop lives in windmill-queue's `freshness_watchdog`
+    // (`private`); OSS gets a no-op stub. Runtime-gated on an Enterprise
+    // license like the audit export above. Safe on concurrent servers — the
+    // watchdog claims per-script state rows atomically before pushing.
+    let pipeline_freshness_watchdog_f = async {
+        if server_mode
+            && !*DISABLE_FRESHNESS_WATCHDOG
+            && iteration.is_some()
+            && iteration.as_ref().unwrap().should_run(2)
+        {
+            if let Some(db) = conn.as_sql() {
+                if matches!(
+                    windmill_common::ee_oss::get_license_plan().await,
+                    windmill_common::ee_oss::LicensePlan::Enterprise
+                ) {
+                    windmill_queue::freshness_watchdog::tick(db).await;
+                }
+            }
+        }
+    };
+
     join!(
         expired_items_f,
         zombie_jobs_f,
@@ -3021,6 +3051,7 @@ pub async fn monitor_db(
         manage_audit_partitions_f,
         export_audit_logs_to_object_store_f,
         cleanup_scheduled_job_deletions_f,
+        pipeline_freshness_watchdog_f,
     );
 }
 
diff --git a/backend/tests/freshness_watchdog.rs b/backend/tests/freshness_watchdog.rs
new file mode 100644
index 0000000000..17851d0a1e
--- /dev/null
+++ b/backend/tests/freshness_watchdog.rs
@@ -0,0 +1,294 @@
+//! End-to-end tests for the pipeline freshness watchdog (Enterprise).
+//!
+//! `windmill_queue::freshness_watchdog::tick` is called directly against
+//! seeded `script` / `v2_job(_completed)` rows — no worker or API server is
+//! needed, since the watchdog's job ends at the push (the pushed job sitting
+//! in `v2_job_queue` is itself part of the assertions). Covers: staleness on
+//! never-ran and aged-out members, the fresh short-circuit + state reset,
+//! the in-flight suppression, the backoff claim, and the skip rules
+//! (partitioned, malformed window, non-pipeline scripts).
+
+#![cfg(feature = "private")]
+
+use sqlx::{Pool, Postgres};
+use windmill_queue::freshness_watchdog::tick;
+use windmill_test_utils::initialize_tracing;
+
+const WS: &str = "test-workspace";
+const PATH: &str = "u/test-user/freshness_producer";
+
+/// Seed a deployed pipeline-member script. Mirrors the deploy path's output:
+/// `auto_kind = 'pipeline'`, empty (non-NULL) lock so run-by-path resolution
+/// treats it as deployed, hash derived from path+content for uniqueness.
+async fn seed_pipeline_script(
+    db: &Pool<Postgres>,
+    path: &str,
+    content: &str,
+) -> anyhow::Result<()> {
+    let mut h = 0i64;
+    for b in path.bytes().chain(content.bytes()) {
+        h = h.wrapping_mul(31).wrapping_add(b as i64);
+    }
+    sqlx::query(
+        r#"INSERT INTO script (workspace_id, hash, path, summary, description, content,
+                                created_by, language, tag, lock, auto_kind)
+           VALUES ($1, $2, $3, '', '', $4, 'test-user', 'bash'::script_lang, 'bash', '', 'pipeline')
+           ON CONFLICT DO NOTHING"#,
+    )
+    .bind(WS)
+    .bind(h)
+    .bind(path)
+    .bind(content)
+    .execute(db)
+    .await?;
+    // Process-global deployed-script caches are keyed by (workspace, path) /
+    // (workspace, hash) and would leak between #[sqlx::test] isolated DBs
+    // that reuse both — resolve everything from this test's own DB.
+    windmill_common::DEPLOYED_SCRIPT_CACHE_DISABLED
+        .store(true, std::sync::atomic::Ordering::Relaxed);
+    Ok(())
+}
+
+/// Seed a completed root run of `path` that finished `age_s` seconds ago.
+async fn seed_completed_run(
+    db: &Pool<Postgres>,
+    path: &str,
+    age_s: i64,
+    success: bool,
+) -> anyhow::Result<()> {
+    let id = uuid::Uuid::new_v4();
+    sqlx::query(
+        r#"INSERT INTO v2_job (id, workspace_id, runnable_path, kind, created_at,
+                                created_by, permissioned_as, permissioned_as_email, tag)
+           VALUES ($1, $2, $3, 'script'::job_kind,
+                   now() - ($4::bigint::text || ' seconds')::interval,
+                   'test-user', 'u/test-user', 'test@windmill.dev', 'bash')"#,
+    )
+    .bind(id)
+    .bind(WS)
+    .bind(path)
+    .bind(age_s)
+    .execute(db)
+    .await?;
+    sqlx::query(
+        r#"INSERT INTO v2_job_completed (id, workspace_id, duration_ms, status, started_at, completed_at)
+           VALUES ($1, $2, 0, CASE WHEN $3 THEN 'success'::job_status ELSE 'failure'::job_status END,
+                   now() - ($4::bigint::text || ' seconds')::interval,
+                   now() - ($4::bigint::text || ' seconds')::interval)"#,
+    )
+    .bind(id)
+    .bind(WS)
+    .bind(success)
+    .bind(age_s)
+    .execute(db)
+    .await?;
+    Ok(())
+}
+
+/// Jobs the watchdog pushed: (path, created_by, args) rows attributed to
+/// `trigger_kind = 'freshness'`.
+async fn fetch_pushed(
+    db: &Pool<Postgres>,
+) -> anyhow::Result<Vec<(String, String, Option<serde_json::Value>)>> {
+    let rows = sqlx::query!(
+        r#"SELECT runnable_path AS "runnable_path!", created_by AS "created_by!",
+                  args AS "args: sqlx::types::Json<serde_json::Value>"
+             FROM v2_job
+             WHERE workspace_id = $1 AND trigger_kind = 'freshness'
+             ORDER BY created_at"#,
+        WS,
+    )
+    .fetch_all(db)
+    .await?;
+    Ok(rows
+        .into_iter()
+        .map(|r| (r.runnable_path, r.created_by, r.args.map(|a| a.0)))
+        .collect())
+}
+
+async fn state_row(db: &Pool<Postgres>, path: &str) -> anyhow::Result<Option<i32>> {
+    Ok(sqlx::query_scalar!(
+        "SELECT attempts FROM pipeline_freshness_state WHERE workspace_id = $1 AND script_path = $2",
+        WS,
+        path,
+    )
+    .fetch_optional(db)
+    .await?)
+}
+
+#[sqlx::test(fixtures("base"))]
+async fn never_ran_member_is_pushed_once(db: Pool<Postgres>) -> anyhow::Result<()> {
+    initialize_tracing().await;
+    seed_pipeline_script(&db, PATH, "# pipeline\n# freshness 30s\necho hi\n").await?;
+
+    tick(&db).await;
+
+    let pushed = fetch_pushed(&db).await?;
+    assert_eq!(pushed.len(), 1, "one watchdog push expected");
+    let (path, created_by, args) = &pushed[0];
+    assert_eq!(path, PATH);
+    assert_eq!(created_by, &format!("freshness-{PATH}"));
+    let args = args.as_ref().expect("args recorded");
+    assert_eq!(
+        args.get("_wmill_skip_asset_dispatch"),
+        Some(&serde_json::json!(true)),
+        "watchdog runs must not re-fire the cascade"
+    );
+    assert_eq!(
+        args.pointer("/trigger/kind"),
+        Some(&serde_json::json!("freshness"))
+    );
+    assert_eq!(state_row(&db, PATH).await?, Some(1), "claim row recorded");
+
+    // Second tick: the pushed job is queued-and-due, so the in-flight guard
+    // suppresses a duplicate regardless of backoff.
+    tick(&db).await;
+    assert_eq!(
+        fetch_pushed(&db).await?.len(),
+        1,
+        "no duplicate while queued"
+    );
+
+    // Simulate the queued job vanishing without a completion: the backoff
+    // claim (next_attempt_at in the future) now carries the suppression.
+    sqlx::query!("DELETE FROM v2_job_queue WHERE workspace_id = $1", WS)
+        .execute(&db)
+        .await?;
+    tick(&db).await;
+    assert_eq!(fetch_pushed(&db).await?.len(), 1, "backoff holds the retry");
+
+    // Force the backoff window open: the watchdog retries and escalates.
+    sqlx::query!(
+        "UPDATE pipeline_freshness_state SET next_attempt_at = now() - interval '1 second'
+         WHERE workspace_id = $1 AND script_path = $2",
+        WS,
+        PATH,
+    )
+    .execute(&db)
+    .await?;
+    tick(&db).await;
+    assert_eq!(fetch_pushed(&db).await?.len(), 2, "due retry pushed");
+    assert_eq!(state_row(&db, PATH).await?, Some(2), "attempts escalated");
+    Ok(())
+}
+
+#[sqlx::test(fixtures("base"))]
+async fn fresh_member_is_skipped_and_state_reset(db: Pool<Postgres>) -> anyhow::Result<()> {
+    initialize_tracing().await;
+    seed_pipeline_script(&db, PATH, "# pipeline\n# freshness 1h\necho hi\n").await?;
+    seed_completed_run(&db, PATH, 10, true).await?;
+    // Leftover backoff row from an earlier staleness episode.
+    sqlx::query!(
+        "INSERT INTO pipeline_freshness_state (workspace_id, script_path, attempts) VALUES ($1, $2, 3)",
+        WS,
+        PATH,
+    )
+    .execute(&db)
+    .await?;
+
+    tick(&db).await;
+
+    assert!(
+        fetch_pushed(&db).await?.is_empty(),
+        "fresh member not pushed"
+    );
+    assert_eq!(state_row(&db, PATH).await?, None, "backoff reset on fresh");
+    Ok(())
+}
+
+#[sqlx::test(fixtures("base"))]
+async fn aged_out_member_is_pushed(db: Pool<Postgres>) -> anyhow::Result<()> {
+    initialize_tracing().await;
+    seed_pipeline_script(&db, PATH, "# pipeline\n# freshness 1h\necho hi\n").await?;
+    // Old success outside the window + a recent failure: still stale.
+    seed_completed_run(&db, PATH, 7200, true).await?;
+    seed_completed_run(&db, PATH, 60, false).await?;
+
+    tick(&db).await;
+
+    assert_eq!(fetch_pushed(&db).await?.len(), 1, "aged-out member pushed");
+    Ok(())
+}
+
+#[sqlx::test(fixtures("base"))]
+async fn partitioned_malformed_and_plain_members_are_skipped(
+    db: Pool<Postgres>,
+) -> anyhow::Result<()> {
+    initialize_tracing().await;
+    // Partitioned: freshness means partition-gap detection, out of scope.
+    seed_pipeline_script(
+        &db,
+        "u/test-user/partitioned",
+        "# pipeline\n# partitioned daily\n# freshness 1h\necho hi\n",
+    )
+    .await?;
+    // Malformed window: fails safe to unwatched.
+    seed_pipeline_script(
+        &db,
+        "u/test-user/malformed",
+        "# pipeline\n# freshness soonish\necho hi\n",
+    )
+    .await?;
+    // Freshness only in prose (parser must reject; ILIKE prefilter passes).
+    seed_pipeline_script(
+        &db,
+        "u/test-user/prose",
+        "# pipeline\n# ensure freshness of data below\necho hi\n",
+    )
+    .await?;
+
+    tick(&db).await;
+
+    assert!(fetch_pushed(&db).await?.is_empty(), "no member is watched");
+    let rows = sqlx::query_scalar!(
+        r#"SELECT COUNT(*) AS "count!" FROM pipeline_freshness_state WHERE workspace_id = $1"#,
+        WS,
+    )
+    .fetch_one(&db)
+    .await?;
+    assert_eq!(rows, 0, "no state rows for unwatched members");
+    Ok(())
+}
+
+#[sqlx::test(fixtures("base"))]
+async fn archived_workspace_is_not_resurrected(db: Pool<Postgres>) -> anyhow::Result<()> {
+    initialize_tracing().await;
+    // Workspace archival stops all execution but keeps script rows for
+    // unarchival — the watchdog must not keep pushing runs there.
+    seed_pipeline_script(&db, PATH, "# pipeline\n# freshness 30s\necho hi\n").await?;
+    sqlx::query!("UPDATE workspace SET deleted = true WHERE id = $1", WS)
+        .execute(&db)
+        .await?;
+
+    tick(&db).await;
+
+    assert!(
+        fetch_pushed(&db).await?.is_empty(),
+        "no pushes into an archived workspace"
+    );
+    assert_eq!(
+        state_row(&db, PATH).await?,
+        None,
+        "no state bookkeeping either"
+    );
+    Ok(())
+}
+
+#[sqlx::test(fixtures("base"))]
+async fn state_of_unwatched_member_is_cleaned_up(db: Pool<Postgres>) -> anyhow::Result<()> {
+    initialize_tracing().await;
+    // A stale-bookkeeping row whose script no longer declares freshness
+    // (e.g. annotation removed and redeployed) must not survive the sweep.
+    sqlx::query!(
+        "INSERT INTO pipeline_freshness_state (workspace_id, script_path) VALUES ($1, $2)",
+        WS,
+        "u/test-user/gone",
+    )
+    .execute(&db)
+    .await?;
+
+    tick(&db).await;
+
+    assert_eq!(state_row(&db, "u/test-user/gone").await?, None);
+    Ok(())
+}
diff --git a/backend/windmill-api-assets/src/lib.rs b/backend/windmill-api-assets/src/lib.rs
index b4b0583863..2eb24cee6c 100644
--- a/backend/windmill-api-assets/src/lib.rs
+++ b/backend/windmill-api-assets/src/lib.rs
@@ -632,6 +632,14 @@ struct GraphRunnableNode {
     partition_kind: Option<String>,
     #[serde(skip_serializing_if = "Option::is_none", default)]
     freshness: Option<String>,
+    // Completion time of the most recently started successful run of this
+    // pipeline member. The canvas checks it against the `// freshness` window
+    // to color the badge fresh/stale. The badge itself is passive; on EE the
+    // freshness watchdog (windmill-queue) separately re-runs stale
+    // unpartitioned producers. Absent when no successful run is visible to
+    // the caller (job RLS applies).
+    #[serde(skip_serializing_if = "Option::is_none", default)]
+    last_success_at: Option<chrono::DateTime<chrono::Utc>>,
     #[serde(skip_serializing_if = "Option::is_none", default)]
     tag: Option<String>,
     #[serde(skip_serializing_if = "Option::is_none", default)]
@@ -920,6 +928,46 @@ async fn asset_graph(
     .fetch_all(&mut *tx)
     .await?;
 
+    // Newest successful completed run per pipeline member, for the passive
+    // freshness status on the canvas. Correlated per-path lookup walks
+    // ix_job_root_job_index_by_path_2 newest-first until the first success,
+    // so cost is bounded by the member count, not run history. "Newest" is
+    // by created_at (the index order), not completed_at: with overlapping
+    // runs of one path this can pick an earlier completion, erring toward
+    // stale — never toward false-fresh. Inside the user tx so job-visibility
+    // RLS applies — a caller who can't see the runs gets no timestamp rather
+    // than leaked completion times.
+    let member_paths: Vec<String> = pipeline_member_paths
+        .iter()
+        .map(|r| r.path.clone())
+        .collect();
+    let last_success_rows = sqlx::query!(
+        r#"
+        SELECT p.path AS "path!",
+               (SELECT c.completed_at
+                  FROM v2_job j
+                  JOIN v2_job_completed c ON c.id = j.id
+                 WHERE j.workspace_id = $1
+                   AND j.runnable_path = p.path
+                   AND j.parent_job IS NULL
+                   -- No 'singlestepflow': flows may share a script's path, and
+                   -- a same-path flow run must not read as the script being
+                   -- fresh (false-fresh). Script retries land as native
+                   -- 'script' jobs; only the rare flow-wrapper fallback is
+                   -- missed, which errs stale. Kept in lockstep with the
+                   -- freshness watchdog's queries (freshness_watchdog_ee).
+                   AND j.kind IN ('script', 'preview')
+                   AND c.status = 'success'
+                 ORDER BY j.created_at DESC
+                 LIMIT 1) AS last_success_at
+          FROM unnest($2::text[]) AS p(path)
+        "#,
+        &w_id,
+        &member_paths,
+    )
+    .fetch_all(&mut *tx)
+    .await?;
+
     // Existing scripts / flows in the workspace. Used to filter out
     // orphan trigger rows whose `script_path` no longer resolves — those
     // would otherwise be added to `runnable_set` below and surface as
@@ -1010,6 +1058,11 @@ async fn asset_graph(
             (r.path.clone(), lineage)
         })
         .collect();
+    let last_success_by_path: std::collections::HashMap<String, chrono::DateTime<chrono::Utc>> =
+        last_success_rows
+            .into_iter()
+            .filter_map(|r| r.last_success_at.map(|t| (r.path, t)))
+            .collect();
     let pipeline_member_script_paths: std::collections::HashSet<String> =
         pipeline_member_paths.into_iter().map(|r| r.path).collect();
     let existing_script_paths: std::collections::HashSet<String> =
@@ -1215,6 +1268,10 @@ async fn asset_graph(
                 freshness: ann
                     .and_then(|a| a.freshness.as_ref())
                     .map(|f| f.duration.clone()),
+                last_success_at: (usage_kind == AssetUsageKind::Script)
+                    .then(|| last_success_by_path.get(&path))
+                    .flatten()
+                    .copied(),
                 tag: ann.and_then(|a| a.tag.clone()),
                 retry: ann.and_then(|a| a.retry.clone()),
                 data_tests: ann.map(|a| a.data_tests.clone()).unwrap_or_default(),
diff --git a/backend/windmill-api-scripts/src/scripts.rs b/backend/windmill-api-scripts/src/scripts.rs
index 4f9de4f416..49a4091f07 100644
--- a/backend/windmill-api-scripts/src/scripts.rs
+++ b/backend/windmill-api-scripts/src/scripts.rs
@@ -1252,16 +1252,6 @@ async fn create_script_internal<'c>(
     // membership; parsed writes tell us what is produced (we don't record
     // them in auto_kind itself).
     let pipeline_annotations = parse_pipeline_annotations(&ns.content);
-    // `// freshness` is parsed but enforcement is a not-yet-implemented
-    // enterprise feature (skeleton in windmill_common::pipeline_advanced).
-    // Surface a clear TODO at deploy rather than silently accepting an
-    // annotation that does nothing.
-    if pipeline_annotations.freshness.is_some() {
-        tracing::warn!(
-            "{}",
-            windmill_common::pipeline_advanced::freshness_enforcement_todo()
-        );
-    }
     // `// materialize` materializes a `ducklake://<name>/<table>` target from a
     // DuckDB script. These two constraints hold for *both* modes: a non-DuckLake
     // target would otherwise deploy, register a producer in the asset graph, then
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 01ae7229e6..fbad5fffd4 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -25592,6 +25592,7 @@ components:
         - google
         - github
         - asset
+        - freshness
 
     TriggerMode:
       description: job trigger mode
diff --git a/backend/windmill-common/src/assets.rs b/backend/windmill-common/src/assets.rs
index 0757ef6894..722ad29747 100644
--- a/backend/windmill-common/src/assets.rs
+++ b/backend/windmill-common/src/assets.rs
@@ -352,6 +352,10 @@ mod debounce_duration_tests {
         assert_eq!(parse_duration_secs("5m"), Some(300));
         assert_eq!(parse_duration_secs("2h"), Some(7200));
         assert_eq!(parse_duration_secs(" 1d "), Some(86400));
+        // Explicit plus sign comes free with i64 parsing; the TS mirror
+        // (parseDurationSecs) matches it — keep the two in lockstep.
+        assert_eq!(parse_duration_secs("+5m"), Some(300));
+        assert_eq!(parse_duration_secs("+45"), Some(45));
     }
 
     #[test]
diff --git a/backend/windmill-common/src/pipeline_advanced_oss.rs b/backend/windmill-common/src/pipeline_advanced_oss.rs
index 009e783bd5..15bb4b127a 100644
--- a/backend/windmill-common/src/pipeline_advanced_oss.rs
+++ b/backend/windmill-common/src/pipeline_advanced_oss.rs
@@ -1,16 +1,12 @@
-//! OSS fallback: pipeline freshness/SLA enforcement and partition backfills
-//! are enterprise features; their implementations live in windmill-ee-private
-//! (see `pipeline_advanced_ee`). In the public build the entry points report
-//! that the enterprise edition is required.
+//! OSS fallback: pipeline partition backfills are an enterprise feature;
+//! their implementations live in windmill-ee-private (see
+//! `pipeline_advanced_ee`). In the public build the entry points report that
+//! the enterprise edition is required. (Freshness lives elsewhere: the
+//! fresh/stale badge is CE in the assets API, the active watchdog is
+//! windmill-queue's `freshness_watchdog`.)
 
 use crate::error::Error;
 
-pub fn freshness_enforcement_todo() -> Error {
-    Error::internal_err(
-        "Pipeline freshness/SLA enforcement requires the enterprise edition".to_string(),
-    )
-}
-
 pub fn backfill_todo() -> Error {
     Error::internal_err("Pipeline partition backfill requires the enterprise edition".to_string())
 }
diff --git a/backend/windmill-queue/src/freshness_watchdog_oss.rs b/backend/windmill-queue/src/freshness_watchdog_oss.rs
new file mode 100644
index 0000000000..319fb25f62
--- /dev/null
+++ b/backend/windmill-queue/src/freshness_watchdog_oss.rs
@@ -0,0 +1,9 @@
+//! OSS fallback for the pipeline freshness watchdog. The active backstop —
+//! re-running a `// freshness`-annotated producer whose output aged past its
+//! window — is an enterprise feature (see `freshness_watchdog_ee`). In the
+//! public build the tick is a no-op; CE keeps the passive fresh/stale badge
+//! on the asset graph.
+
+use windmill_common::DB;
+
+pub async fn tick(_db: &DB) {}
diff --git a/backend/windmill-queue/src/lib.rs b/backend/windmill-queue/src/lib.rs
index 6f689c7026..59ac7f1fa8 100644
--- a/backend/windmill-queue/src/lib.rs
+++ b/backend/windmill-queue/src/lib.rs
@@ -14,6 +14,13 @@ pub mod cascade_oss;
 pub use cascade_ee as cascade;
 #[cfg(not(feature = "private"))]
 pub use cascade_oss as cascade;
+#[cfg(feature = "private")]
+pub mod freshness_watchdog_ee;
+pub mod freshness_watchdog_oss;
+#[cfg(feature = "private")]
+pub use freshness_watchdog_ee as freshness_watchdog;
+#[cfg(not(feature = "private"))]
+pub use freshness_watchdog_oss as freshness_watchdog;
 pub mod jobs;
 #[cfg(feature = "private")]
 pub mod jobs_ee;
diff --git a/backend/windmill-types/src/jobs.rs b/backend/windmill-types/src/jobs.rs
index 448e6f4d01..f9372b949d 100644
--- a/backend/windmill-types/src/jobs.rs
+++ b/backend/windmill-types/src/jobs.rs
@@ -46,6 +46,9 @@ pub enum JobTriggerKind {
     // A run dispatched because an upstream pipeline script wrote an asset
     // this runnable subscribes to via `// on s3://...` annotations.
     Asset,
+    // A run pushed by the pipeline freshness watchdog (EE) because the
+    // script's `// freshness` window elapsed without a successful run.
+    Freshness,
 }
 
 impl std::fmt::Display for JobTriggerKind {
@@ -68,6 +71,7 @@ impl std::fmt::Display for JobTriggerKind {
             JobTriggerKind::Github => "github",
             JobTriggerKind::CiTest => "ci_test",
             JobTriggerKind::Asset => "asset",
+            JobTriggerKind::Freshness => "freshness",
         };
         write!(f, "{}", kind)
     }
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index 1c5cf2dde6..6352e6adc9 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -401,6 +401,7 @@
 					in_pipeline: r.in_pipeline ?? false,
 					partition_kind: r.partition_kind,
 					freshness: r.freshness,
+					last_success_at: r.last_success_at,
 					tag: r.tag,
 					retry: r.retry,
 					macros: r.macros,
diff --git a/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte b/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
index 8b5e90170c..6bbf8f5656 100644
--- a/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
@@ -22,12 +22,13 @@
 	import { preventDefault, stopPropagation } from 'svelte/legacy'
 	import type { GraphUsageKind } from './types'
 	import type { RunnableRunState } from './activeRunnables.svelte'
+	import { parseDurationSecs } from './parsePipelineAnnotations'
 	import { NODE } from '$lib/components/graph/util'
 	import DropdownV2 from '$lib/components/DropdownV2.svelte'
 	import Popover from '$lib/components/meltComponents/Popover.svelte'
 	import type { Item } from '$lib/utils'
 	import { workspaceStore } from '$lib/stores'
-	import { sendUserToast } from '$lib/utils'
+	import { sendUserToast, msToReadableTimeShort } from '$lib/utils'
 
 	interface Props {
 		data: {
@@ -36,6 +37,9 @@
 			in_pipeline?: boolean
 			partition_kind?: 'daily' | 'hourly' | 'weekly' | 'monthly' | 'dynamic'
 			freshness?: string
+			// Completion time (ISO) of the newest successful run visible to
+			// the caller. With `freshness`, drives the fresh/stale chip state.
+			last_success_at?: string
 			tag?: string
 			retry?: { count: number; delay?: string }
 			// Macros this script provides (deployed/drafted `// macros` library).
@@ -122,6 +126,44 @@
 		}
 	}
 
+	// Freshness verdict: newest successful run (server `last_success_at`,
+	// or a newer one the session poll observed) vs the `// freshness`
+	// window. No verdict (undefined) for drafts — no run history — and for
+	// unparseable windows; the chip then stays neutral like the other
+	// annotation chips.
+	let freshnessWindowS = $derived(data.freshness ? parseDurationSecs(data.freshness) : undefined)
+	// Ticks so a node crosses fresh→stale while the canvas stays open (the
+	// graph payload is static between refetches). Armed only when a verdict
+	// is rendered.
+	let nowMs = $state(Date.now())
+	$effect(() => {
+		if (freshnessWindowS === undefined || data.unsaved) return
+		const id = setInterval(() => (nowMs = Date.now()), 30_000)
+		return () => clearInterval(id)
+	})
+	let lastSuccessMs = $derived.by(() => {
+		const server = data.last_success_at ? new Date(data.last_success_at).getTime() : undefined
+		const polled = data.runState?.lastSuccessAt
+			? new Date(data.runState.lastSuccessAt).getTime()
+			: undefined
+		if (server === undefined) return polled
+		return polled === undefined ? server : Math.max(server, polled)
+	})
+	let freshnessState = $derived.by((): 'fresh' | 'stale' | undefined => {
+		if (freshnessWindowS === undefined || data.unsaved) return undefined
+		if (lastSuccessMs === undefined) return 'stale'
+		return nowMs - lastSuccessMs <= freshnessWindowS * 1000 ? 'fresh' : 'stale'
+	})
+	let freshnessTooltip = $derived.by(() => {
+		const base = `// freshness ${data.freshness}`
+		if (freshnessState === undefined) return base
+		if (lastSuccessMs === undefined) return `${base} — stale: no successful run yet`
+		const ago = msToReadableTimeShort(Math.max(0, nowMs - lastSuccessMs))
+		return freshnessState === 'fresh'
+			? `${base} — fresh: last successful run ${ago} ago`
+			: `${base} — stale: last successful run ${ago} ago`
+	})
+
 	// Cascade + bounded-run options live on the Run button's caret popover
 	// (whenever there's a cascade OR a bounded-run start — see `hasCaret`
 	// below), so the kebab menu stays focused on lifecycle actions only.
@@ -164,8 +206,8 @@
 		</span>
 		<!-- Annotation chips share one neutral treatment — the icon carries
 		     the meaning (colors are reserved for feedback, per the brand
-		     guidelines). Only the run-state chip below keeps semantic
-		     colors. -->
+		     guidelines). Only the freshness chip (when it has a verdict)
+		     and the run-state chip below use semantic colors. -->
 		{#if data.partition_kind}
 			<div
 				class="shrink-0 flex items-center gap-0.5 px-1 py-0.5 mr-1 rounded-sm bg-surface-secondary text-secondary"
@@ -175,10 +217,22 @@
 				<span class="text-3xs leading-none">{data.partition_kind}</span>
 			</div>
 		{/if}
+		<!-- Freshness is the one annotation chip that carries feedback (a
+		     fresh/stale verdict against real run history), so like the
+		     run-state chip it uses semantic colors: emerald = within window,
+		     amber = stale. Neutral when there's no verdict (drafts, bad
+		     window value). -->
 		{#if data.freshness}
 			<div
-				class="shrink-0 flex items-center gap-0.5 px-1 py-0.5 mr-1 rounded-sm bg-surface-secondary text-secondary"
-				title={`// freshness ${data.freshness}`}
+				class={twMerge(
+					'shrink-0 flex items-center gap-0.5 px-1 py-0.5 mr-1 rounded-sm',
+					freshnessState === 'fresh'
+						? 'bg-emerald-100 dark:bg-emerald-900/40 text-emerald-700 dark:text-emerald-300'
+						: freshnessState === 'stale'
+							? 'bg-amber-100 dark:bg-amber-900/40 text-amber-700 dark:text-amber-300'
+							: 'bg-surface-secondary text-secondary'
+				)}
+				title={freshnessTooltip}
 			>
 				<Timer size={10} />
 				<span class="text-3xs leading-none">{data.freshness}</span>
diff --git a/frontend/src/lib/components/assets/AssetGraph/activeRunnables.svelte.ts b/frontend/src/lib/components/assets/AssetGraph/activeRunnables.svelte.ts
index 917e21766a..f6682804c7 100644
--- a/frontend/src/lib/components/assets/AssetGraph/activeRunnables.svelte.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/activeRunnables.svelte.ts
@@ -1,8 +1,15 @@
 import { JobService } from '$lib/gen'
 
 export type RunStatus = 'running' | 'success' | 'failure'
-/** Per-runnable badge state: latest run status + runs observed this session. */
-export type RunnableRunState = { status: RunStatus; runs: number }
+/**
+ * Per-runnable badge state: latest run status + runs observed this session.
+ * `lastSuccessAt` is the completion time (start + duration when the listing
+ * carries it, else start as a conservative lower bound) of the newest
+ * successful run seen by the poll — lets the freshness chip go green right
+ * after an in-session run, ahead of the next graph refetch (whose
+ * `last_success_at` would carry it).
+ */
+export type RunnableRunState = { status: RunStatus; runs: number; lastSuccessAt?: string }
 
 export type EventStatus = 'queued' | 'running' | 'success' | 'failure'
 /** One folder activity-log row (a job observed by the poll). */
@@ -14,6 +21,12 @@ export type PipelineEvent = {
 	/** What started it, as far as the job listing reveals. */
 	source: 'schedule' | 'run'
 	at: string
+	/**
+	 * Completion time (start + duration) for completed rows. The freshness
+	 * chip compares against completion — `at` is the start time and would
+	 * read a long run as older than its output actually is.
+	 */
+	completedAt?: string
 	/**
 	 * Queued jobs: when the job is due to start. A future value means a
 	 * scheduled run waiting for its cron tick, not pipeline activity.
@@ -45,7 +58,8 @@ function statesEq(a: Map<string, RunnableRunState>, b: Map<string, RunnableRunSt
 	if (a.size !== b.size) return false
 	for (const [k, v] of a) {
 		const w = b.get(k)
-		if (!w || w.status !== v.status || w.runs !== v.runs) return false
+		if (!w || w.status !== v.status || w.runs !== v.runs || w.lastSuccessAt !== v.lastSuccessAt)
+			return false
 	}
 	return true
 }
@@ -128,7 +142,7 @@ export function useActiveRunnableIds(
 	// keeps showing the last status while idle; only `dispose()` clears them.
 	const completedHistory = new Map<
 		string,
-		{ runs: number; lastStatus: RunStatus; lastTs: string }
+		{ runs: number; lastStatus: RunStatus; lastTs: string; lastSuccessTs?: string }
 	>()
 	const countedJobIds = new Set<string>()
 	// Job ids we've observed in-flight at least once. The catch-up pulse is
@@ -241,10 +255,25 @@ export function useActiveRunnableIds(
 						const prev = completedHistory.get(id)
 						const status: RunStatus = (j as any).success === true ? 'success' : 'failure'
 						const ts = startedTs ?? new Date(pollStartedMs).toISOString()
+						// Freshness compares against COMPLETION time (that's
+						// when the output materialized — the server-side
+						// last_success_at is completed_at too). The listing
+						// only carries started_at, so add duration_ms; when
+						// absent, the start is a conservative lower bound
+						// (errs stale, never false-fresh).
+						const durationMs = (j as any).duration_ms
+						const doneTs =
+							typeof durationMs === 'number' && startedTs
+								? new Date(new Date(startedTs).getTime() + durationMs).toISOString()
+								: ts
 						completedHistory.set(id, {
 							runs: (prev?.runs ?? 0) + 1,
 							lastStatus: !prev || ts >= prev.lastTs ? status : prev.lastStatus,
-							lastTs: !prev || ts >= prev.lastTs ? ts : prev.lastTs
+							lastTs: !prev || ts >= prev.lastTs ? ts : prev.lastTs,
+							lastSuccessTs:
+								status === 'success' && (!prev?.lastSuccessTs || doneTs >= prev.lastSuccessTs)
+									? doneTs
+									: prev?.lastSuccessTs
 						})
 					}
 				}
@@ -267,6 +296,10 @@ export function useActiveRunnableIds(
 								: 'failure',
 						source: (j as any).schedule_path ? 'schedule' : 'run',
 						at: startedTs ?? new Date(pollStartedMs).toISOString(),
+						completedAt:
+							!isQueued && typeof (j as any).duration_ms === 'number' && startedTs
+								? new Date(new Date(startedTs).getTime() + (j as any).duration_ms).toISOString()
+								: undefined,
 						scheduledFor: isQueued ? ((j as any).scheduled_for as string | undefined) : undefined
 					})
 				}
@@ -289,7 +322,11 @@ export function useActiveRunnableIds(
 		// previous badge state until a worker picks the job up.
 		const snap = new Map<string, RunnableRunState>()
 		for (const [id, h] of completedHistory) {
-			snap.set(id, { status: runningThisTick.has(id) ? 'running' : h.lastStatus, runs: h.runs })
+			snap.set(id, {
+				status: runningThisTick.has(id) ? 'running' : h.lastStatus,
+				runs: h.runs,
+				lastSuccessAt: h.lastSuccessTs
+			})
 		}
 		for (const id of runningThisTick) {
 			if (!snap.has(id)) snap.set(id, { status: 'running', runs: 0 })
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts
index 315c7526f3..e9e23525ec 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.test.ts
@@ -1,6 +1,7 @@
 import { describe, expect, it } from 'vitest'
 import {
 	mergeColumnLineage,
+	parseDurationSecs,
 	parsePipelineAnnotations,
 	type ColumnLineage
 } from './parsePipelineAnnotations'
@@ -188,3 +189,40 @@ describe('mergeColumnLineage', () => {
 		expect(mergeColumnLineage([], annotated)).toEqual(annotated)
 	})
 })
+
+// Mirror of the Rust `parse_duration_secs` tests (windmill-common assets.rs)
+// — the freshness chip's staleness verdict depends on identical parsing.
+describe('parseDurationSecs', () => {
+	it('parses suffixed durations', () => {
+		expect(parseDurationSecs('30s')).toBe(30)
+		expect(parseDurationSecs('5m')).toBe(300)
+		expect(parseDurationSecs('2h')).toBe(7200)
+		expect(parseDurationSecs('1d')).toBe(86400)
+	})
+
+	it('bare integer means seconds', () => {
+		expect(parseDurationSecs('45')).toBe(45)
+	})
+
+	it('tolerates surrounding whitespace', () => {
+		expect(parseDurationSecs(' 5 m ')).toBe(300)
+	})
+
+	it('accepts an explicit plus sign (Rust i64 parsing does)', () => {
+		expect(parseDurationSecs('+5m')).toBe(300)
+		expect(parseDurationSecs('+45')).toBe(45)
+	})
+
+	it('rejects malformed / non-positive input', () => {
+		expect(parseDurationSecs('')).toBeUndefined()
+		expect(parseDurationSecs('h')).toBeUndefined()
+		expect(parseDurationSecs('1.5h')).toBeUndefined()
+		expect(parseDurationSecs('-5m')).toBeUndefined()
+		expect(parseDurationSecs('0')).toBeUndefined()
+		expect(parseDurationSecs('fast')).toBeUndefined()
+	})
+
+	it('rejects values beyond i32 seconds (mirrors backend cap)', () => {
+		expect(parseDurationSecs('999999999d')).toBeUndefined()
+	})
+})
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
index f33a03fff5..964e48570a 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
@@ -67,6 +67,28 @@ export type FreshnessSpec = {
 	duration: string
 }
 
+// Mirrors backend `parse_duration_secs` (windmill-common assets.rs): a bare
+// integer means seconds, otherwise `<n>` with an `s`/`m`/`h`/`d` suffix
+// (e.g. `30s`, `5m`, `2h`, `1d`). Returns undefined for malformed or
+// non-positive input so a typo'd `// freshness` window fails safe (the chip
+// stays neutral instead of guessing a staleness verdict).
+export function parseDurationSecs(s: string): number | undefined {
+	const t = s.trim()
+	if (!t) return undefined
+	const last = t[t.length - 1]
+	const mult =
+		last === 's' ? 1 : last === 'm' ? 60 : last === 'h' ? 3600 : last === 'd' ? 86400 : undefined
+	const num = (mult !== undefined ? t.slice(0, -1) : t).trim()
+	// `+?`: Rust's i64 parsing accepts an explicit plus sign (`+5m`), so the
+	// mirror must too — divergence here would leave the chip neutral for a
+	// window the deploy path and watchdog honor.
+	if (mult === undefined && !/^\+?\d+$/.test(t)) return undefined
+	if (!/^\+?\d+$/.test(num)) return undefined
+	const secs = Number(num) * (mult ?? 1)
+	if (!Number.isSafeInteger(secs) || secs <= 0 || secs > 2147483647) return undefined
+	return secs
+}
+
 // `// retry <count> [<delay>]` — see backend RetrySpec. Delay is kept as the
 // raw duration string and resolved to seconds at deploy.
 export type RetrySpec = {
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineHistory.svelte.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineHistory.svelte.ts
index 50ad3e1d6e..d654085179 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineHistory.svelte.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineHistory.svelte.ts
@@ -80,7 +80,15 @@ export function usePipelineHistory(
 						kind: j.job_kind.startsWith('flow') ? 'flow' : 'script',
 						status: j.success ? 'success' : 'failure',
 						source: j.schedule_path ? 'schedule' : 'run',
-						at: j.started_at ?? j.created_at
+						at: j.started_at ?? j.created_at,
+						// Same completion-time derivation as the live poll —
+						// the freshness chip compares against completion, and
+						// `at` (start) would read a long run as older than its
+						// output actually is.
+						completedAt:
+							j.started_at != undefined
+								? new Date(new Date(j.started_at).getTime() + j.duration_ms).toISOString()
+								: undefined
 					})
 				}
 				sawFullPage = rows.length === PER_PAGE
diff --git a/frontend/src/lib/components/assets/AssetGraph/types.ts b/frontend/src/lib/components/assets/AssetGraph/types.ts
index 0db259a389..fb7b5b1de7 100644
--- a/frontend/src/lib/components/assets/AssetGraph/types.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/types.ts
@@ -22,6 +22,11 @@ export interface AssetGraphRunnableNode {
 	// Raw `// freshness <duration>` value, e.g. "1h", "30m". Surfaced for
 	// the badge; the runtime parses it as needed.
 	freshness?: string
+	// Completion time (ISO) of the newest successful run of this pipeline
+	// member visible to the caller. The freshness chip compares it against
+	// the `// freshness` window to render fresh/stale. Absent = no
+	// successful run found (or none visible under job RLS).
+	last_success_at?: string
 	// `// tag <name>` worker-tag override. Surfaced for the badge so users
 	// can see which worker pool will pick this script up at a glance.
 	tag?: string
diff --git a/frontend/src/lib/components/triggers/utils.ts b/frontend/src/lib/components/triggers/utils.ts
index 231de5cea4..3d17491791 100644
--- a/frontend/src/lib/components/triggers/utils.ts
+++ b/frontend/src/lib/components/triggers/utils.ts
@@ -1,4 +1,14 @@
-import { Webhook, Mail, Calendar, Route, Unplug, Database, Terminal } from 'lucide-svelte'
+import {
+	Webhook,
+	Mail,
+	Calendar,
+	Route,
+	Unplug,
+	Database,
+	Terminal,
+	Timer,
+	Zap
+} from 'lucide-svelte'
 import KafkaIcon from '$lib/components/icons/KafkaIcon.svelte'
 import NatsIcon from '$lib/components/icons/NatsIcon.svelte'
 import MqttIcon from '$lib/components/icons/MqttIcon.svelte'
@@ -82,7 +92,8 @@ export const jobTriggerKinds: JobTriggerKind[] = [
 	'azure',
 	'google',
 	'github',
-	'asset'
+	'asset',
+	'freshness'
 ]
 
 export type Trigger = {
@@ -118,7 +129,12 @@ export const triggerIconMap = {
 	cli: Terminal,
 	nextcloud: NextcloudIcon,
 	google: GoogleIcon,
-	github: GithubIcon
+	github: GithubIcon,
+	// Job-attribution-only kinds (no trigger CRUD page): the pipeline asset
+	// cascade and the freshness watchdog. Needed so the Runs filter and job
+	// detail render these trigger kinds instead of a blank label / no icon.
+	asset: Zap,
+	freshness: Timer
 }
 
 export const triggerDisplayNamesMap = {
@@ -139,8 +155,12 @@ export const triggerDisplayNamesMap = {
 	cli: 'CLI',
 	nextcloud: 'Nextcloud',
 	google: 'Google',
-	github: 'GitHub'
-} as const satisfies Record<TriggerType, string>
+	github: 'GitHub',
+	asset: 'Asset cascade',
+	freshness: 'Freshness'
+	// `asset` / `freshness` are job-attribution-only (JobTriggerKind, not
+	// TriggerType) — hence the union in the satisfies below.
+} as const satisfies Record<TriggerType | 'asset' | 'freshness', string>
 
 /**
  * Converts a TriggerType to a CaptureTriggerKind when a mapping exists
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index 4d41f7ff05..845a93505b 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -1337,8 +1337,17 @@
 						? 'failure'
 						: 'success'
 			const cur = m.get(id)
-			if (cur) cur.runs += 1
-			else m.set(id, { status, runs: 1 })
+			// Freshness compares against completion; `at` (start) is the
+			// fallback lower bound for rows without a duration.
+			const successAt = e.status === 'success' ? (e.completedAt ?? e.at) : undefined
+			if (cur) {
+				cur.runs += 1
+				// Newest-first, so the first success per id is the latest one —
+				// it feeds the freshness chip between graph refetches.
+				if (successAt && !cur.lastSuccessAt) cur.lastSuccessAt = successAt
+			} else {
+				m.set(id, { status, runs: 1, lastSuccessAt: successAt })
+			}
 		}
 		return m
 	})

From 42e11c6570b62ffaa86598438fa8ddf462c4035f Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sat, 4 Jul 2026 08:40:00 +0000
Subject: [PATCH 38/76] =?UTF-8?q?feat(pipelines):=20schema=20contracts=20?=
 =?UTF-8?q?=E2=80=94=20save-time=20consumer=20checks=20vs=20captured=20sch?=
 =?UTF-8?q?emas=20(#9917)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(pipelines): schema contracts — save-time consumer checks vs captured schemas

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor: move schemaContractContext above schemaCanEvolve doc comment

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: emit scd2/on_schema_change in CLI local graph, address review notes

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix: gate editor _current ignore-suppression on scd2, matching backend

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 ...368a6862e35350ae43383fb2335e2c82a9419.json |  29 +
 ...eb5a0665c90c4926f1afb689d6cd16bd5b722.json |  29 +
 ...3ef4ab1ccfdc4ed33904e83e5130ac0bf5896.json |  41 ++
 .../windmill-parser/src/asset_parser.rs       |  67 ++
 .../tests/fixtures/pipeline_annotations.json  |  37 ++
 .../tests/pipeline_annotations_parity.rs      |  15 +
 backend/windmill-api-assets/src/lib.rs        |  17 +
 backend/windmill-api-scripts/src/scripts.rs   |  53 ++
 backend/windmill-api/openapi.yaml             |  77 +++
 backend/windmill-common/src/assets.rs         |   2 +-
 backend/windmill-common/src/lib.rs            |   1 +
 .../windmill-common/src/schema_contracts.rs   | 614 ++++++++++++++++++
 cli/src/commands/pipeline/localGraph.ts       |  33 +-
 docs/ducklake-materialization.md              |  31 +
 docs/pipelines-vs-dbt.md                      |  44 +-
 frontend/src/lib/components/Editor.svelte     |  91 ++-
 .../src/lib/components/ScriptBuilder.svelte   |   6 +
 .../src/lib/components/ScriptEditor.svelte    |  43 +-
 .../AssetGraph/AssetGraphDetailsPane.svelte   |  12 +-
 .../AssetGraph/PipelineGraphEditor.svelte     |   6 +
 .../parsePipelineAnnotations.parity.test.ts   |   5 +
 .../AssetGraph/parsePipelineAnnotations.ts    |  13 +-
 .../assets/AssetGraph/schemaContracts.test.ts | 276 ++++++++
 .../assets/AssetGraph/schemaContracts.ts      | 440 +++++++++++++
 .../lib/components/assets/AssetGraph/types.ts |  11 +-
 .../(logged)/pipeline/[folder]/+page.svelte   |   8 +
 26 files changed, 1972 insertions(+), 29 deletions(-)
 create mode 100644 backend/.sqlx/query-36da136cf9b9554702e3b3ec364368a6862e35350ae43383fb2335e2c82a9419.json
 create mode 100644 backend/.sqlx/query-431a5eb2eb5a0b57e096cc78f68eb5a0665c90c4926f1afb689d6cd16bd5b722.json
 create mode 100644 backend/.sqlx/query-c6c186eb3a108e1f695bf5730c23ef4ab1ccfdc4ed33904e83e5130ac0bf5896.json
 create mode 100644 backend/windmill-common/src/schema_contracts.rs
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/schemaContracts.test.ts
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/schemaContracts.ts

diff --git a/backend/.sqlx/query-36da136cf9b9554702e3b3ec364368a6862e35350ae43383fb2335e2c82a9419.json b/backend/.sqlx/query-36da136cf9b9554702e3b3ec364368a6862e35350ae43383fb2335e2c82a9419.json
new file mode 100644
index 0000000000..d05abd4f3a
--- /dev/null
+++ b/backend/.sqlx/query-36da136cf9b9554702e3b3ec364368a6862e35350ae43383fb2335e2c82a9419.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT DISTINCT path AS \"asset_path!\", usage_path AS \"producer_path!\"\n             FROM asset\n            WHERE workspace_id = $1 AND kind = 'ducklake' AND path = ANY($2)\n              AND usage_kind = 'script' AND usage_access_type IN ('w', 'rw')",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "asset_path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "producer_path!",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "36da136cf9b9554702e3b3ec364368a6862e35350ae43383fb2335e2c82a9419"
+}
diff --git a/backend/.sqlx/query-431a5eb2eb5a0b57e096cc78f68eb5a0665c90c4926f1afb689d6cd16bd5b722.json b/backend/.sqlx/query-431a5eb2eb5a0b57e096cc78f68eb5a0665c90c4926f1afb689d6cd16bd5b722.json
new file mode 100644
index 0000000000..b554ef8b55
--- /dev/null
+++ b/backend/.sqlx/query-431a5eb2eb5a0b57e096cc78f68eb5a0665c90c4926f1afb689d6cd16bd5b722.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT DISTINCT ON (path) path, content\n                 FROM script\n                WHERE workspace_id = $1 AND path = ANY($2)\n                  AND archived = false AND deleted = false\n                ORDER BY path, created_at DESC",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "content",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "431a5eb2eb5a0b57e096cc78f68eb5a0665c90c4926f1afb689d6cd16bd5b722"
+}
diff --git a/backend/.sqlx/query-c6c186eb3a108e1f695bf5730c23ef4ab1ccfdc4ed33904e83e5130ac0bf5896.json b/backend/.sqlx/query-c6c186eb3a108e1f695bf5730c23ef4ab1ccfdc4ed33904e83e5130ac0bf5896.json
new file mode 100644
index 0000000000..7cfc1f109f
--- /dev/null
+++ b/backend/.sqlx/query-c6c186eb3a108e1f695bf5730c23ef4ab1ccfdc4ed33904e83e5130ac0bf5896.json
@@ -0,0 +1,41 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT DISTINCT ON (asset_path)\n                  asset_path, version, columns AS \"columns: Json<Vec<SchemaColumn>>\", captured_at\n             FROM materialized_asset_schema\n            WHERE workspace_id = $1 AND asset_kind = 'ducklake' AND asset_path = ANY($2)\n            ORDER BY asset_path, version DESC",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "asset_path",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "version",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "columns: Json<Vec<SchemaColumn>>",
+        "type_info": "Jsonb"
+      },
+      {
+        "ordinal": 3,
+        "name": "captured_at",
+        "type_info": "Timestamptz"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "c6c186eb3a108e1f695bf5730c23ef4ab1ccfdc4ed33904e83e5130ac0bf5896"
+}
diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index 299e3a70f9..3e6d433405 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -252,6 +252,8 @@ pub struct RetrySpec {
 // history (`valid_from`/`valid_to`/`is_current`). The leading keyword `scd2` is a
 // recognized alias for `history`. `deletes=close` (scd2 only) also closes a key
 // that disappears from the snapshot; default leaves absent keys current.
+// `on_schema_change=ignore` suppresses downstream schema-contract warnings for
+// the produced asset (save-time metadata only; default `warn`).
 #[derive(Serialize, Debug, PartialEq, Clone)]
 pub struct MaterializeSpec {
     pub target_kind: AssetKind,
@@ -276,6 +278,32 @@ pub struct MaterializeSpec {
     // `hard_deletes=close`). Default (false) leaves absent keys current.
     #[serde(skip_serializing_if = "std::ops::Not::not", default)]
     pub close_deleted: bool,
+    // `on_schema_change=ignore` opts this producer's asset out of downstream
+    // schema-contract warnings (gap #2b): consumers referencing columns the
+    // captured schema no longer has warn by default (`warn`); `ignore` declares
+    // the schema deliberately unstable and suppresses those warnings. Save-time
+    // metadata only — the materialize write strategy is unaffected.
+    #[serde(skip_serializing_if = "OnSchemaChange::is_warn", default)]
+    pub on_schema_change: OnSchemaChange,
+}
+
+// dbt's `on_schema_change` narrowed to the save-time contract check: `warn`
+// (default) surfaces consumer warnings, `ignore` suppresses them. dbt's `fail`
+// is deliberately not offered — saves are never hard-blocked (a deliberate
+// upstream reshape must not fail every consumer save); a CI/CLI gate can layer
+// it on later without touching the grammar.
+#[derive(Serialize, Debug, PartialEq, Eq, Clone, Copy, Default)]
+#[serde(rename_all = "lowercase")]
+pub enum OnSchemaChange {
+    #[default]
+    Warn,
+    Ignore,
+}
+
+impl OnSchemaChange {
+    pub fn is_warn(&self) -> bool {
+        matches!(self, OnSchemaChange::Warn)
+    }
 }
 
 // `// data_test <kind> …` — a data-quality assertion run against the
@@ -917,6 +945,14 @@ fn parse_materialize_spec(s: &str) -> Option<MaterializeSpec> {
     // `deletes=close` (scd2 only) opts into hard-delete-close; any other value
     // (or absence) keeps the soft-delete default.
     let close_deleted = opts.get("deletes").map(|v| v == "close").unwrap_or(false);
+    // `on_schema_change=ignore` suppresses downstream contract warnings; any
+    // other value (or absence) keeps the `warn` default, fail-safe like
+    // `deletes=` above.
+    let on_schema_change = if opts.get("on_schema_change").map(String::as_str) == Some("ignore") {
+        OnSchemaChange::Ignore
+    } else {
+        OnSchemaChange::Warn
+    };
     Some(MaterializeSpec {
         target_kind,
         target_path: path.to_string(),
@@ -926,6 +962,7 @@ fn parse_materialize_spec(s: &str) -> Option<MaterializeSpec> {
         scd2,
         track,
         close_deleted,
+        on_schema_change,
     })
 }
 
@@ -1623,6 +1660,36 @@ mod pipeline_annotation_tests {
         assert!(!out.materialize.expect("materialize").close_deleted);
     }
 
+    #[test]
+    fn materialize_on_schema_change_opt() {
+        let out = parse_pipeline_annotations(
+            "// materialize ducklake://a/orders on_schema_change=ignore",
+        );
+        let m = out.materialize.expect("materialize");
+        assert_eq!(m.on_schema_change, OnSchemaChange::Ignore);
+        // default is warn
+        let out = parse_pipeline_annotations("// materialize ducklake://a/orders");
+        assert_eq!(
+            out.materialize.expect("materialize").on_schema_change,
+            OnSchemaChange::Warn
+        );
+        // unknown value keeps the warn default (fail-safe, like `deletes=`);
+        // `fail` is deliberately unrecognized in v1
+        let out =
+            parse_pipeline_annotations("// materialize ducklake://a/orders on_schema_change=fail");
+        assert_eq!(
+            out.materialize.expect("materialize").on_schema_change,
+            OnSchemaChange::Warn
+        );
+        // composes with other opts
+        let out = parse_pipeline_annotations(
+            "// materialize ducklake://a/dim key=id history on_schema_change=ignore",
+        );
+        let m = out.materialize.expect("materialize");
+        assert!(m.scd2);
+        assert_eq!(m.on_schema_change, OnSchemaChange::Ignore);
+    }
+
     #[test]
     fn materialize_key_without_history_is_plain_merge() {
         let out = parse_pipeline_annotations("// materialize ducklake://a/dim key=id");
diff --git a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
index f7977239c1..5ee2945d18 100644
--- a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
+++ b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
@@ -310,6 +310,43 @@
 			}
 		}
 	},
+	{
+		"name": "materialize on_schema_change=ignore opt",
+		"code": "// pipeline\n// materialize ducklake://analytics/orders on_schema_change=ignore\nSELECT 1;",
+		"expected": {
+			"in_pipeline": true,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null,
+			"materialize": {
+				"target_kind": "ducklake",
+				"target_path": "analytics/orders",
+				"on_schema_change": "ignore"
+			}
+		}
+	},
+	{
+		"name": "materialize on_schema_change unknown value keeps warn default (fail unrecognized in v1)",
+		"code": "// materialize ducklake://analytics/orders key=id on_schema_change=fail\nSELECT 1;",
+		"expected": {
+			"in_pipeline": false,
+			"asset_triggers": [],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null,
+			"materialize": {
+				"target_kind": "ducklake",
+				"target_path": "analytics/orders",
+				"unique_key": "id",
+				"on_schema_change": "warn"
+			}
+		}
+	},
 	{
 		"name": "materialize key without history is plain merge (SCD1, not scd2)",
 		"code": "// materialize ducklake://analytics/dim key=id\nSELECT 1;",
diff --git a/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs b/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
index 2df4acd2e4..b51b33faf8 100644
--- a/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
+++ b/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
@@ -71,6 +71,13 @@ struct ExpectedMaterialize {
     track: Vec<String>,
     #[serde(default)]
     close_deleted: bool,
+    // "warn" | "ignore"; absent === "warn" (the default).
+    #[serde(default = "default_on_schema_change")]
+    on_schema_change: String,
+}
+
+fn default_on_schema_change() -> String {
+    "warn".to_string()
 }
 
 #[derive(Deserialize)]
@@ -209,6 +216,14 @@ fn pipeline_annotation_fixtures_match() {
                     m.close_deleted, e.close_deleted,
                     "{ctx}: materialize close_deleted"
                 );
+                let osc = match m.on_schema_change {
+                    windmill_parser::asset_parser::OnSchemaChange::Warn => "warn",
+                    windmill_parser::asset_parser::OnSchemaChange::Ignore => "ignore",
+                };
+                assert_eq!(
+                    osc, e.on_schema_change,
+                    "{ctx}: materialize on_schema_change"
+                );
             }
             (got, want) => panic!(
                 "{ctx}: materialize mismatch — got {:?}, want present={}",
diff --git a/backend/windmill-api-assets/src/lib.rs b/backend/windmill-api-assets/src/lib.rs
index 2eb24cee6c..587307afbb 100644
--- a/backend/windmill-api-assets/src/lib.rs
+++ b/backend/windmill-api-assets/src/lib.rs
@@ -664,6 +664,13 @@ struct GraphRunnableNode {
     // `merge` / any partitioned write INSERTs into a fixed-schema table.
     #[serde(skip_serializing_if = "Option::is_none", default)]
     materialize_strategy: Option<String>,
+    // `on_schema_change=ignore` on the managed materialize — the producer's
+    // opt-out from downstream schema-contract warnings. Threaded to the editor
+    // so its client-side contract mirror suppresses the same warnings the
+    // server check does. Only serialized when set to `ignore` (default `warn`
+    // is absent). Lockstep with TS `AssetGraphRunnableNode.materialize_on_schema_change`.
+    #[serde(skip_serializing_if = "Option::is_none", default)]
+    materialize_on_schema_change: Option<String>,
     // Macros this script provides to the workspace registry (deployed
     // `// macros` library). Drives the library node state + details-pane
     // signature list. Lockstep with TS `AssetGraphRunnableNode.macros`.
@@ -1289,8 +1296,12 @@ async fn asset_graph(
                     }
                 }),
                 materialize_strategy: ann.and_then(|a| a.materialize.as_ref()).and_then(|m| {
+                    // Precedence mirrors the runtime strategy derivation:
+                    // scd2 (`history`) > append > merge (`key=`) > replace.
                     if m.manual {
                         None
+                    } else if m.scd2 {
+                        Some("scd2".to_string())
                     } else if m.append {
                         Some("append".to_string())
                     } else if m.unique_key.is_some() {
@@ -1299,6 +1310,12 @@ async fn asset_graph(
                         Some("replace".to_string())
                     }
                 }),
+                materialize_on_schema_change: ann
+                    .and_then(|a| a.materialize.as_ref())
+                    .filter(|m| {
+                        m.on_schema_change == windmill_common::assets::OnSchemaChange::Ignore
+                    })
+                    .map(|_| "ignore".to_string()),
                 macros: (usage_kind == AssetUsageKind::Script)
                     .then(|| macros_by_provider.get(&path))
                     .flatten()
diff --git a/backend/windmill-api-scripts/src/scripts.rs b/backend/windmill-api-scripts/src/scripts.rs
index 49a4091f07..e38d1925f0 100644
--- a/backend/windmill-api-scripts/src/scripts.rs
+++ b/backend/windmill-api-scripts/src/scripts.rs
@@ -141,6 +141,8 @@ pub fn workspaced_service() -> Router {
         // CI test results
         .route("/ci_test_results/{kind}/{*path}", get(get_ci_test_results))
         .route("/ci_test_results_batch", post(get_ci_test_results_batch))
+        // Save-time schema-contract check (pipelines gap #2b)
+        .route("/check_schema_contracts", post(check_schema_contracts))
 }
 
 #[derive(Serialize, FromRow)]
@@ -1305,6 +1307,14 @@ async fn create_script_internal<'c>(
                 ns.path
             );
         }
+        // `manual` materialize never captures a schema (no wrap codegen), so
+        // there is no contract for `on_schema_change` to mute downstream.
+        if m.manual && m.on_schema_change == windmill_parser::asset_parser::OnSchemaChange::Ignore {
+            tracing::warn!(
+                "script {}: `on_schema_change=ignore` on a `manual` materialize is inert — manual mode captures no schema, so consumers have no contract to check",
+                ns.path
+            );
+        }
     }
     // `// macros` — this script is a workspace macro library: its body is
     // CREATE [OR REPLACE] MACRO statements plus plain setup, registered into
@@ -3966,3 +3976,46 @@ async fn get_ci_test_results_batch(
 
     Ok(Json(result_map))
 }
+
+#[derive(Deserialize)]
+struct CheckSchemaContractsRequest {
+    language: ScriptLang,
+    content: String,
+}
+
+#[derive(Serialize)]
+struct CheckSchemaContractsResponse {
+    warnings: Vec<windmill_common::schema_contracts::ContractWarning>,
+}
+
+// Save-time schema-contract check (pipelines gap #2b): validate the given
+// script content's asset references (body column reads, `// column` lineage,
+// `// data_test relationships`) against the latest captured producer schemas
+// and return WARNINGS — never errors, and deploy never blocks on this. The
+// frontend calls it right after a successful deploy (post-commit, so a
+// self-produced target resolves to the fresh content) and the editor mirrors
+// the same diff client-side; this endpoint is the authoritative check. Parsing
+// uses the same server path as deploy (`effective_script_assets` +
+// `parse_pipeline_annotations`) so the verdict matches what deployed.
+async fn check_schema_contracts(
+    authed: ApiAuthed,
+    Extension(user_db): Extension<UserDB>,
+    Path(w_id): Path<String>,
+    Json(req): Json<CheckSchemaContractsRequest>,
+) -> JsonResult<CheckSchemaContractsResponse> {
+    let assets = crate::asset_inference::effective_script_assets(&req.language, &req.content, None)
+        .unwrap_or_default();
+    let ann = parse_pipeline_annotations(&req.content);
+    let mut tx = user_db.begin(&authed).await?;
+    let warnings = windmill_common::schema_contracts::check_schema_contracts(
+        &mut tx,
+        &w_id,
+        &assets,
+        &ann.column_lineage,
+        &ann.data_tests,
+        ann.materialize.as_ref(),
+    )
+    .await?;
+    tx.commit().await?;
+    Ok(Json(CheckSchemaContractsResponse { warnings }))
+}
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index fbad5fffd4..1f836cfb2b 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -9187,6 +9187,50 @@ paths:
                   items:
                     $ref: "#/components/schemas/CiTestResult"
 
+  /w/{workspace}/scripts/check_schema_contracts:
+    post:
+      summary: check a script's asset references against captured producer schemas
+      description: |
+        Save-time schema-contract check for data pipelines: validates the given
+        script content's asset references (body column reads, `// column` lineage,
+        `// data_test relationships`) against the latest captured producer schemas
+        and returns warnings. Warnings never block a save/deploy; an asset whose
+        producer declares `on_schema_change=ignore` is suppressed to a single
+        informational entry.
+      operationId: checkSchemaContracts
+      tags:
+        - script
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - language
+                - content
+              properties:
+                language:
+                  $ref: "#/components/schemas/ScriptLang"
+                content:
+                  type: string
+      responses:
+        "200":
+          description: contract warnings (empty when all references match)
+          content:
+            application/json:
+              schema:
+                type: object
+                required:
+                  - warnings
+                properties:
+                  warnings:
+                    type: array
+                    items:
+                      $ref: "#/components/schemas/ContractWarning"
+
   /w/{workspace}/scripts/raw_temp/store:
     post:
       summary: store raw script content temporarily for CLI lock generation
@@ -29903,6 +29947,39 @@ components:
         kind:
           $ref: "#/components/schemas/AssetKind"
       required: [path, kind]
+    ContractWarning:
+      description: |
+        One save-time schema-contract warning: a consumer reference that does
+        not match the referenced asset's latest captured schema.
+        `schema_version`/`captured_at` identify the capture the check ran
+        against (as-of the producer's last run, not its latest save).
+      type: object
+      required: [kind, asset_path, message]
+      properties:
+        kind:
+          type: string
+          enum:
+            - missing_column
+            - missing_lineage_source
+            - missing_relationship_column
+            - relationship_type_mismatch
+            - suppressed
+        asset_path:
+          type: string
+        column:
+          type: string
+        expected_type:
+          type: string
+        found_type:
+          type: string
+        schema_version:
+          type: integer
+          format: int64
+        captured_at:
+          type: string
+          format: date-time
+        message:
+          type: string
     Volume:
       type: object
       required:
diff --git a/backend/windmill-common/src/assets.rs b/backend/windmill-common/src/assets.rs
index 722ad29747..63309a1400 100644
--- a/backend/windmill-common/src/assets.rs
+++ b/backend/windmill-common/src/assets.rs
@@ -6,7 +6,7 @@ use crate::{error, scripts::ScriptHash};
 
 pub use windmill_parser::asset_parser::{
     merge_column_lineage, parse_pipeline_annotations, ColumnLineage, ColumnRef, DataTest,
-    PartitionKind, PipelineAnnotations, RetrySpec, TriggerSpec, PARTITION_TOKEN,
+    OnSchemaChange, PartitionKind, PipelineAnnotations, RetrySpec, TriggerSpec, PARTITION_TOKEN,
 };
 pub use windmill_types::assets::*;
 
diff --git a/backend/windmill-common/src/lib.rs b/backend/windmill-common/src/lib.rs
index baa3e4b500..acf97734d8 100644
--- a/backend/windmill-common/src/lib.rs
+++ b/backend/windmill-common/src/lib.rs
@@ -65,6 +65,7 @@ pub mod materialization;
 pub mod min_version;
 pub mod notify_events;
 pub mod runtime_assets;
+pub mod schema_contracts;
 pub mod workspace_dependencies;
 
 #[cfg(feature = "private")]
diff --git a/backend/windmill-common/src/schema_contracts.rs b/backend/windmill-common/src/schema_contracts.rs
new file mode 100644
index 0000000000..b605aae33b
--- /dev/null
+++ b/backend/windmill-common/src/schema_contracts.rs
@@ -0,0 +1,614 @@
+//! Save-time schema-contract check (pipelines gap #2b): validate a consumer
+//! script's asset references against the latest *captured* producer schema
+//! (`materialized_asset_schema`, written post-materialize by #2a) and return
+//! WARNINGS — never errors. A deliberate upstream reshape must not fail every
+//! consumer save; blocking (`on_schema_change=fail`) is deliberately not
+//! offered in v1.
+//!
+//! Ducklake-only: `// materialize` targets are ducklake-only in v1, so nothing
+//! else has a captured schema to check against; an asset with no captured
+//! schema produces no warnings (first deploy, datatable, external tables).
+//!
+//! The comparison itself (`diff_contract`) is pure so it can be unit-tested
+//! and mirrored 1:1 by the editor-side TS check
+//! (frontend/src/lib/components/assets/AssetGraph/schemaContracts.ts); the
+//! async wrapper owns the DB reads (schemas + producer resolution) and runs on
+//! the caller's RLS-scoped transaction.
+
+use std::collections::{HashMap, HashSet};
+
+use chrono::{DateTime, Utc};
+use serde::{Deserialize, Serialize};
+use sqlx::types::Json;
+use sqlx::{Postgres, Transaction};
+use windmill_parser::asset_parser::{
+    ColumnLineage, DataTest, MaterializeSpec, OnSchemaChange, PARTITION_TOKEN,
+};
+use windmill_types::assets::{AssetKind, AssetWithAltAccessType};
+
+use crate::error::Result;
+use crate::materialization::SchemaColumn;
+
+/// Columns the materialize engine adds/manages; never part of the captured
+/// schema, so consumer reads of them must not warn (`_wm_partition` is
+/// filtered out of the DESCRIBE capture on purpose).
+const RESERVED_COLUMNS: &[&str] = &["_wm_partition"];
+
+#[derive(Serialize, Deserialize, Debug, Clone, Copy, PartialEq, Eq)]
+#[serde(rename_all = "snake_case")]
+pub enum ContractWarningKind {
+    /// A column the body reads/writes is absent from the captured schema.
+    MissingColumn,
+    /// A `// column … <- <asset>.<col>` source column is absent.
+    MissingLineageSource,
+    /// A `// data_test relationships … -> <asset>.<col>` ref column is absent.
+    MissingRelationshipColumn,
+    /// Relationship join columns have different captured types (may still
+    /// coerce at run time — phrased as "differs", not "will fail").
+    RelationshipTypeMismatch,
+    /// Warnings for this asset were suppressed by the producer's
+    /// `on_schema_change=ignore` (one informational entry per asset).
+    Suppressed,
+}
+
+/// One save-time contract warning. `schema_version`/`captured_at` identify the
+/// capture the check ran against, so a stale-capture warning is
+/// self-explaining (the schema is as-of the producer's last run, not its
+/// latest save).
+#[derive(Serialize, Deserialize, Debug, Clone, PartialEq)]
+pub struct ContractWarning {
+    pub kind: ContractWarningKind,
+    /// Normalized ducklake asset path (`<lake>/<table>`).
+    pub asset_path: String,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub column: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub expected_type: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub found_type: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub schema_version: Option<i64>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub captured_at: Option<DateTime<Utc>>,
+    pub message: String,
+}
+
+/// The latest captured schema of one asset, as loaded by the wrapper.
+#[derive(Debug, Clone)]
+pub struct CapturedSchema {
+    pub columns: Vec<SchemaColumn>,
+    pub version: i64,
+    pub captured_at: DateTime<Utc>,
+}
+
+impl CapturedSchema {
+    /// Case-insensitive column lookup — DuckDB matches unquoted identifiers
+    /// case-insensitively, and the body parser preserves source casing while
+    /// DESCRIBE returns stored casing.
+    fn find(&self, name: &str) -> Option<&SchemaColumn> {
+        self.columns
+            .iter()
+            .find(|c| c.name.eq_ignore_ascii_case(name))
+    }
+}
+
+fn is_reserved(name: &str) -> bool {
+    RESERVED_COLUMNS
+        .iter()
+        .any(|r| r.eq_ignore_ascii_case(name))
+}
+
+/// Strip the `{partition}` token a declared URI may carry (`// on
+/// ducklake://lake/t/{partition}` or pasted refs) so lookups hit the captured
+/// path. Body-inferred paths never carry it, but annotation refs can.
+pub fn normalize_asset_path(path: &str) -> String {
+    path.replace(&format!("/{}", PARTITION_TOKEN), "")
+        .replace(PARTITION_TOKEN, "")
+        .trim_end_matches('/')
+        .to_string()
+}
+
+fn column_list(schema: &CapturedSchema) -> String {
+    schema
+        .columns
+        .iter()
+        .map(|c| c.name.as_str())
+        .collect::<Vec<_>>()
+        .join(", ")
+}
+
+/// Pure comparison: consumer refs vs captured schemas. `schemas` is keyed by
+/// normalized ducklake path (the `_current` → base-table fallback is resolved
+/// by the wrapper before this runs); `ignored` holds paths whose producer
+/// declared `on_schema_change=ignore`.
+pub fn diff_contract(
+    assets: &[AssetWithAltAccessType],
+    column_lineage: &[ColumnLineage],
+    data_tests: &[DataTest],
+    materialize: Option<&MaterializeSpec>,
+    schemas: &HashMap<String, CapturedSchema>,
+    ignored: &HashSet<String>,
+) -> Vec<ContractWarning> {
+    let mut warnings: Vec<ContractWarning> = vec![];
+
+    // W1 — body-read/written columns missing from the captured schema. Assets
+    // whose column set the parser could not derive (`columns: None`, e.g.
+    // wildcard SELECT or non-SQL access) are skipped fail-safe; a literal "*"
+    // key is skipped defensively for the same reason.
+    for a in assets {
+        if a.kind != AssetKind::Ducklake {
+            continue;
+        }
+        let Some(columns) = a.columns.as_ref() else {
+            continue;
+        };
+        let path = normalize_asset_path(&a.path);
+        let Some(schema) = schemas.get(&path) else {
+            continue;
+        };
+        for col in columns.keys() {
+            if col == "*" || is_reserved(col) {
+                continue;
+            }
+            if schema.find(col).is_none() {
+                warnings.push(ContractWarning {
+                    kind: ContractWarningKind::MissingColumn,
+                    asset_path: path.clone(),
+                    column: Some(col.clone()),
+                    expected_type: None,
+                    found_type: None,
+                    schema_version: Some(schema.version),
+                    captured_at: Some(schema.captured_at),
+                    message: format!(
+                        "column `{col}` of ducklake://{path} is not in its captured schema \
+                         (v{}, columns: {})",
+                        schema.version,
+                        column_list(schema)
+                    ),
+                });
+            }
+        }
+    }
+
+    // W2 — `// column` lineage source refs. Only annotation-declared lineage
+    // reaches this fn (AST-inferred lineage is redundant with W1 and can
+    // mis-attribute aliases).
+    for cl in column_lineage {
+        for input in &cl.inputs {
+            if input.from_kind != windmill_parser::asset_parser::AssetKind::Ducklake {
+                continue;
+            }
+            let path = normalize_asset_path(&input.from_path);
+            let Some(schema) = schemas.get(&path) else {
+                continue;
+            };
+            if is_reserved(&input.from_column) {
+                continue;
+            }
+            if schema.find(&input.from_column).is_none() {
+                warnings.push(ContractWarning {
+                    kind: ContractWarningKind::MissingLineageSource,
+                    asset_path: path.clone(),
+                    column: Some(input.from_column.clone()),
+                    expected_type: None,
+                    found_type: None,
+                    schema_version: Some(schema.version),
+                    captured_at: Some(schema.captured_at),
+                    message: format!(
+                        "`// column {}` reads `{}` from ducklake://{path}, which is not in \
+                         its captured schema (v{})",
+                        cl.column, input.from_column, schema.version
+                    ),
+                });
+            }
+        }
+    }
+
+    // W3 — relationships data-test refs: the referenced column must exist;
+    // when both sides have captured types, flag a difference. Types come from
+    // DuckDB DESCRIBE on both sides so verbatim spellings are comparable; the
+    // runtime probe's IN-subquery still coerces, so a difference is "differs",
+    // never "will fail".
+    let own_schema = materialize
+        .filter(|m| m.target_kind == windmill_parser::asset_parser::AssetKind::Ducklake)
+        .and_then(|m| schemas.get(&normalize_asset_path(&m.target_path)));
+    for dt in data_tests {
+        let DataTest::Relationships { column, to_kind, to_path, to_column } = dt else {
+            continue;
+        };
+        if *to_kind != windmill_parser::asset_parser::AssetKind::Ducklake {
+            continue;
+        }
+        let path = normalize_asset_path(to_path);
+        let Some(schema) = schemas.get(&path) else {
+            continue;
+        };
+        match schema.find(to_column) {
+            None => {
+                warnings.push(ContractWarning {
+                    kind: ContractWarningKind::MissingRelationshipColumn,
+                    asset_path: path.clone(),
+                    column: Some(to_column.clone()),
+                    expected_type: None,
+                    found_type: None,
+                    schema_version: Some(schema.version),
+                    captured_at: Some(schema.captured_at),
+                    message: format!(
+                        "`// data_test relationships {column}` references \
+                         ducklake://{path}.{to_column}, which is not in its captured schema \
+                         (v{})",
+                        schema.version
+                    ),
+                });
+            }
+            Some(ref_col) => {
+                if let Some(own_col) = own_schema.and_then(|s| s.find(column)) {
+                    if !own_col.data_type.eq_ignore_ascii_case(&ref_col.data_type) {
+                        warnings.push(ContractWarning {
+                            kind: ContractWarningKind::RelationshipTypeMismatch,
+                            asset_path: path.clone(),
+                            column: Some(to_column.clone()),
+                            expected_type: Some(own_col.data_type.clone()),
+                            found_type: Some(ref_col.data_type.clone()),
+                            schema_version: Some(schema.version),
+                            captured_at: Some(schema.captured_at),
+                            message: format!(
+                                "`// data_test relationships {column}` joins `{}` ({}) to \
+                                 ducklake://{path}.{to_column} ({}) — captured types differ",
+                                column, own_col.data_type, ref_col.data_type
+                            ),
+                        });
+                    }
+                }
+            }
+        }
+    }
+
+    // W4 — producer opted the asset out (`on_schema_change=ignore`): drop its
+    // warnings, leaving one informational entry per suppressed asset so the
+    // response still records that a mismatch exists but was muted upstream.
+    if !ignored.is_empty() {
+        let mut suppressed_assets: Vec<String> = vec![];
+        warnings.retain(|w| {
+            if ignored.contains(&w.asset_path) {
+                if !suppressed_assets.contains(&w.asset_path) {
+                    suppressed_assets.push(w.asset_path.clone());
+                }
+                false
+            } else {
+                true
+            }
+        });
+        for path in suppressed_assets {
+            warnings.push(ContractWarning {
+                kind: ContractWarningKind::Suppressed,
+                asset_path: path.clone(),
+                column: None,
+                expected_type: None,
+                found_type: None,
+                schema_version: None,
+                captured_at: None,
+                message: format!(
+                    "schema mismatches on ducklake://{path} suppressed by its producer's \
+                     `on_schema_change=ignore`"
+                ),
+            });
+        }
+    }
+
+    warnings
+}
+
+/// Load captured schemas + producer modes and run the contract check for one
+/// consumer script's parsed refs.
+///
+/// Runs on the caller's RLS-scoped transaction (`user_db`), consistent with
+/// the `listAssetSchemas` read path: a producer script the caller cannot read
+/// simply stays unresolved and keeps the default `warn` behavior. Draft-only
+/// producers have no `asset` write edges yet and likewise default to `warn`.
+pub async fn check_schema_contracts(
+    tx: &mut Transaction<'_, Postgres>,
+    workspace_id: &str,
+    assets: &[AssetWithAltAccessType],
+    column_lineage: &[ColumnLineage],
+    data_tests: &[DataTest],
+    materialize: Option<&MaterializeSpec>,
+) -> Result<Vec<ContractWarning>> {
+    // Referenced ducklake paths (normalized) across every ref family the diff
+    // inspects — plus the consumer's own materialize target (for W3 types).
+    let mut paths: HashSet<String> = HashSet::new();
+    for a in assets {
+        if a.kind == AssetKind::Ducklake && a.columns.is_some() {
+            paths.insert(normalize_asset_path(&a.path));
+        }
+    }
+    for cl in column_lineage {
+        for input in &cl.inputs {
+            if input.from_kind == windmill_parser::asset_parser::AssetKind::Ducklake {
+                paths.insert(normalize_asset_path(&input.from_path));
+            }
+        }
+    }
+    for dt in data_tests {
+        if let DataTest::Relationships { to_kind, to_path, .. } = dt {
+            if *to_kind == windmill_parser::asset_parser::AssetKind::Ducklake {
+                paths.insert(normalize_asset_path(to_path));
+            }
+        }
+    }
+    if let Some(m) = materialize {
+        if m.target_kind == windmill_parser::asset_parser::AssetKind::Ducklake {
+            paths.insert(normalize_asset_path(&m.target_path));
+        }
+    }
+    if paths.is_empty() {
+        return Ok(vec![]);
+    }
+
+    // A managed scd2 producer (re)creates a `<dim>_current` view with the base
+    // table's columns; only the base table's schema is captured. Include the
+    // base path in the lookup so `_current` readers can fall back to it (the
+    // fallback itself is gated on the producer's spec below).
+    let mut lookup_paths: HashSet<String> = paths.clone();
+    for p in &paths {
+        if let Some(base) = p.strip_suffix("_current") {
+            if !base.is_empty() {
+                lookup_paths.insert(base.to_string());
+            }
+        }
+    }
+    let lookup_vec: Vec<String> = lookup_paths.into_iter().collect();
+
+    let schema_rows = sqlx::query!(
+        r#"SELECT DISTINCT ON (asset_path)
+                  asset_path, version, columns AS "columns: Json<Vec<SchemaColumn>>", captured_at
+             FROM materialized_asset_schema
+            WHERE workspace_id = $1 AND asset_kind = 'ducklake' AND asset_path = ANY($2)
+            ORDER BY asset_path, version DESC"#,
+        workspace_id,
+        &lookup_vec,
+    )
+    .fetch_all(&mut **tx)
+    .await?;
+    let mut schemas: HashMap<String, CapturedSchema> = schema_rows
+        .into_iter()
+        .map(|r| {
+            (
+                r.asset_path,
+                CapturedSchema {
+                    columns: r.columns.0,
+                    version: r.version,
+                    captured_at: r.captured_at,
+                },
+            )
+        })
+        .collect();
+
+    // Producer resolution: write edges on the referenced assets → latest
+    // non-archived producer content → parsed `// materialize` spec. Drives
+    // both the `on_schema_change=ignore` suppression and the `_current`
+    // fallback. Flow writers are excluded — they cannot carry the annotation.
+    let paths_vec: Vec<String> = paths.iter().cloned().collect();
+    let producer_edges = sqlx::query!(
+        r#"SELECT DISTINCT path AS "asset_path!", usage_path AS "producer_path!"
+             FROM asset
+            WHERE workspace_id = $1 AND kind = 'ducklake' AND path = ANY($2)
+              AND usage_kind = 'script' AND usage_access_type IN ('w', 'rw')"#,
+        workspace_id,
+        &paths_vec,
+    )
+    .fetch_all(&mut **tx)
+    .await?;
+
+    let mut ignored: HashSet<String> = HashSet::new();
+    if !producer_edges.is_empty() {
+        let producer_paths: Vec<String> = producer_edges
+            .iter()
+            .map(|e| e.producer_path.clone())
+            .collect::<HashSet<_>>()
+            .into_iter()
+            .collect();
+        // Same latest-content pattern as the asset-graph endpoint; NOT
+        // `get_latest_script_hash`, whose `lock IS NOT NULL` filter transiently
+        // excludes a just-deployed producer pending its dependency job.
+        let producer_rows = sqlx::query!(
+            r#"SELECT DISTINCT ON (path) path, content
+                 FROM script
+                WHERE workspace_id = $1 AND path = ANY($2)
+                  AND archived = false AND deleted = false
+                ORDER BY path, created_at DESC"#,
+            workspace_id,
+            &producer_paths,
+        )
+        .fetch_all(&mut **tx)
+        .await?;
+        let producer_specs: HashMap<String, Option<MaterializeSpec>> = producer_rows
+            .into_iter()
+            .map(|r| {
+                (
+                    r.path,
+                    windmill_parser::asset_parser::parse_pipeline_annotations(&r.content)
+                        .materialize,
+                )
+            })
+            .collect();
+
+        for edge in &producer_edges {
+            let Some(Some(spec)) = producer_specs.get(&edge.producer_path) else {
+                continue;
+            };
+            if spec.target_kind != windmill_parser::asset_parser::AssetKind::Ducklake {
+                continue;
+            }
+            let target = normalize_asset_path(&spec.target_path);
+            // `on_schema_change=ignore` — any producer declaring it wins.
+            if spec.on_schema_change == OnSchemaChange::Ignore
+                && (target == edge.asset_path
+                    || (spec.scd2 && format!("{target}_current") == edge.asset_path))
+            {
+                ignored.insert(edge.asset_path.clone());
+            }
+            // `_current` fallback: a managed scd2 producer's view has exactly
+            // the base table's columns.
+            if spec.scd2
+                && !spec.manual
+                && format!("{target}_current") == edge.asset_path
+                && !schemas.contains_key(&edge.asset_path)
+            {
+                if let Some(base) = schemas.get(&target).cloned() {
+                    schemas.insert(edge.asset_path.clone(), base);
+                }
+            }
+        }
+    }
+
+    Ok(diff_contract(
+        assets,
+        column_lineage,
+        data_tests,
+        materialize,
+        &schemas,
+        &ignored,
+    ))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::collections::BTreeMap;
+    use windmill_parser::asset_parser::{parse_pipeline_annotations, ColumnRef};
+    use windmill_types::assets::AssetUsageAccessType;
+
+    fn schema(cols: &[(&str, &str)]) -> CapturedSchema {
+        CapturedSchema {
+            columns: cols
+                .iter()
+                .map(|(n, t)| SchemaColumn { name: n.to_string(), data_type: t.to_string() })
+                .collect(),
+            version: 2,
+            captured_at: DateTime::<Utc>::MIN_UTC,
+        }
+    }
+
+    fn read_asset(path: &str, cols: &[&str]) -> AssetWithAltAccessType {
+        AssetWithAltAccessType {
+            path: path.to_string(),
+            kind: AssetKind::Ducklake,
+            access_type: Some(AssetUsageAccessType::R),
+            alt_access_type: None,
+            columns: Some(
+                cols.iter()
+                    .map(|c| (c.to_string(), AssetUsageAccessType::R))
+                    .collect::<BTreeMap<_, _>>(),
+            ),
+        }
+    }
+
+    #[test]
+    fn missing_read_column_warns_case_insensitively() {
+        let schemas = HashMap::from([(
+            "lake/orders".to_string(),
+            schema(&[("Order_ID", "BIGINT"), ("amount_usd", "DOUBLE")]),
+        )]);
+        let assets = vec![read_asset("lake/orders", &["order_id", "amount"])];
+        let w = diff_contract(&assets, &[], &[], None, &schemas, &HashSet::new());
+        // order_id matches case-insensitively; amount is gone
+        assert_eq!(w.len(), 1);
+        assert_eq!(w[0].kind, ContractWarningKind::MissingColumn);
+        assert_eq!(w[0].column.as_deref(), Some("amount"));
+        assert_eq!(w[0].schema_version, Some(2));
+    }
+
+    #[test]
+    fn unknown_columns_wildcard_and_reserved_are_skipped() {
+        let schemas = HashMap::from([("lake/orders".to_string(), schema(&[("id", "BIGINT")]))]);
+        // columns: None (wildcard SELECT) — skipped entirely
+        let mut a = read_asset("lake/orders", &[]);
+        a.columns = None;
+        assert!(diff_contract(&[a], &[], &[], None, &schemas, &HashSet::new()).is_empty());
+        // literal "*" and the reserved partition column are skipped
+        let a = read_asset("lake/orders", &["*", "_wm_partition", "id"]);
+        assert!(diff_contract(&[a], &[], &[], None, &schemas, &HashSet::new()).is_empty());
+    }
+
+    #[test]
+    fn asset_without_captured_schema_is_silent() {
+        let assets = vec![read_asset("lake/unknown", &["whatever"])];
+        assert!(
+            diff_contract(&assets, &[], &[], None, &HashMap::new(), &HashSet::new()).is_empty()
+        );
+    }
+
+    #[test]
+    fn partition_token_is_normalized() {
+        let schemas = HashMap::from([("lake/orders".to_string(), schema(&[("id", "BIGINT")]))]);
+        let assets = vec![read_asset("lake/orders/{partition}", &["gone"])];
+        let w = diff_contract(&assets, &[], &[], None, &schemas, &HashSet::new());
+        assert_eq!(w.len(), 1);
+        assert_eq!(w[0].asset_path, "lake/orders");
+    }
+
+    #[test]
+    fn lineage_ref_missing_column_warns() {
+        let schemas = HashMap::from([("lake/orders".to_string(), schema(&[("id", "BIGINT")]))]);
+        let lineage = vec![ColumnLineage {
+            column: "total".to_string(),
+            inputs: vec![ColumnRef {
+                from_kind: windmill_parser::asset_parser::AssetKind::Ducklake,
+                from_path: "lake/orders".to_string(),
+                from_column: "amount".to_string(),
+            }],
+        }];
+        let w = diff_contract(&[], &lineage, &[], None, &schemas, &HashSet::new());
+        assert_eq!(w.len(), 1);
+        assert_eq!(w[0].kind, ContractWarningKind::MissingLineageSource);
+    }
+
+    #[test]
+    fn relationships_missing_and_type_mismatch() {
+        let schemas = HashMap::from([
+            ("lake/customers".to_string(), schema(&[("id", "VARCHAR")])),
+            (
+                "lake/orders".to_string(),
+                schema(&[("customer_id", "BIGINT")]),
+            ),
+        ]);
+        let ann = parse_pipeline_annotations(
+            "// materialize ducklake://lake/orders\n\
+             // data_test relationships customer_id -> ducklake://lake/customers.id\n\
+             // data_test relationships customer_id -> ducklake://lake/customers.uuid\n\
+             SELECT 1;",
+        );
+        let w = diff_contract(
+            &[],
+            &[],
+            &ann.data_tests,
+            ann.materialize.as_ref(),
+            &schemas,
+            &HashSet::new(),
+        );
+        assert_eq!(w.len(), 2);
+        assert!(w
+            .iter()
+            .any(|w| w.kind == ContractWarningKind::RelationshipTypeMismatch
+                && w.expected_type.as_deref() == Some("BIGINT")
+                && w.found_type.as_deref() == Some("VARCHAR")));
+        assert!(w
+            .iter()
+            .any(|w| w.kind == ContractWarningKind::MissingRelationshipColumn
+                && w.column.as_deref() == Some("uuid")));
+    }
+
+    #[test]
+    fn ignored_asset_suppresses_to_single_note() {
+        let schemas = HashMap::from([("lake/orders".to_string(), schema(&[("id", "BIGINT")]))]);
+        let assets = vec![read_asset("lake/orders", &["a", "b"])];
+        let ignored = HashSet::from(["lake/orders".to_string()]);
+        let w = diff_contract(&assets, &[], &[], None, &schemas, &ignored);
+        assert_eq!(w.len(), 1);
+        assert_eq!(w[0].kind, ContractWarningKind::Suppressed);
+        // and nothing at all when there was nothing to suppress
+        let assets = vec![read_asset("lake/orders", &["id"])];
+        assert!(diff_contract(&assets, &[], &[], None, &schemas, &ignored).is_empty());
+    }
+}
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index 9d40a0e4b7..98413876a5 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -44,9 +44,14 @@ export type GraphRunnable = {
   column_lineage?: unknown[];
   // `// materialize <asset>` target + strategy — the script's declared output,
   // so the UI anchors column lineage / the materialize badge to it (the producer
-  // write-edge is emitted separately).
+  // write-edge is emitted separately). `scd2` also identifies the producer of a
+  // `<dim>_current` view for the editor's schema-contract fallback.
   materialize_target?: { kind: string; path: string };
-  materialize_strategy?: "replace" | "append" | "merge";
+  materialize_strategy?: "replace" | "append" | "merge" | "scd2";
+  // `on_schema_change=ignore` — producer's opt-out from downstream
+  // schema-contract warnings; only present when set (default `warn` is absent),
+  // mirroring the deployed graph node.
+  materialize_on_schema_change?: string;
 };
 export type GraphEdge = {
   runnable_kind: string;
@@ -110,6 +115,9 @@ type ParseAssetsRaw = {
     manual?: boolean;
     append?: boolean;
     unique_key?: string;
+    scd2?: boolean;
+    // "ignore" when set; the default `warn` is skipped in serialization.
+    on_schema_change?: string;
   };
   // `// tag <worker-tag>` — the worker tag the deployed pipeline routes to.
   tag?: string;
@@ -428,16 +436,18 @@ export async function buildLocalPipelineGraph(args: {
     // deployed pipeline would (both `pipeline run --local` and `/pipeline_dev`).
     pipelineScripts.push(out.tag ? { ...s, tag: out.tag } : s);
     const mat = out.materialize;
-    // Managed-materialize write strategy, derived like the deployed graph
-    // (append → append; key=<col> → merge; else replace). Manual mode has no
-    // managed strategy.
+    // Managed-materialize write strategy, derived like the deployed graph —
+    // precedence mirrors the runtime: scd2 (`history`) > append > merge
+    // (key=<col>) > replace. Manual mode has no managed strategy.
     const materialize_strategy =
       mat && !mat.manual
-        ? mat.append
-          ? "append"
-          : mat.unique_key
-            ? "merge"
-            : "replace"
+        ? mat.scd2
+          ? "scd2"
+          : mat.append
+            ? "append"
+            : mat.unique_key
+              ? "merge"
+              : "replace"
         : undefined;
     runnables.push({
       path: s.path,
@@ -453,6 +463,9 @@ export async function buildLocalPipelineGraph(args: {
         : {}),
       ...(mat ? { materialize_target: { kind: mat.target_kind, path: mat.target_path } } : {}),
       ...(materialize_strategy ? { materialize_strategy } : {}),
+      ...(mat?.on_schema_change === "ignore"
+        ? { materialize_on_schema_change: "ignore" }
+        : {}),
     });
 
     for (const a of out.assets ?? []) {
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index 4481d7555b..83c25f3eec 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -49,6 +49,8 @@ stays separate because it is cross-cutting (cascade + scheduling + materialize).
 // materialize ducklake://analytics/orders_daily append       → managed, append
 // materialize ducklake://analytics/dim_customer key=id history → managed, SCD type 2 history
 // materialize manual ducklake://analytics/orders_daily       → track-only escape hatch
+// materialize ducklake://analytics/raw_events on_schema_change=ignore
+//                                  → managed, downstream contract warnings muted
 ```
 
 - **managed (default)** — the script is *setup + one trailing `SELECT`*; Windmill
@@ -366,6 +368,35 @@ load-bearing.
 - **Managed only.** `// materialize manual` + `// data_test` is rejected with a
   clear error (we can't know the manual script's target alias / partition col).
 
+## Schema contracts (save-time, gap #2b)
+
+The captured schema (#2a) is read back as a *contract*: at save/deploy time,
+every consumer's asset references — body-read/written columns, `// column`
+lineage sources, `// data_test relationships` refs — are diffed against the
+latest `materialized_asset_schema` version of each referenced ducklake asset,
+and mismatches surface as **warnings** (deploy never blocks; dbt's
+`on_schema_change=fail` is deliberately absent in v1). The diff lives in
+`windmill_common::schema_contracts` (endpoint:
+`POST /w/{ws}/scripts/check_schema_contracts`, called by the UI right after a
+save) and is mirrored 1:1 by the editor (`schemaContracts.ts`): live Monaco
+warning squiggles from the WASM buffer parse, plus column-name completion for
+annotation refs fed by the same captured schemas.
+
+Comparison rules worth knowing: column names are case-insensitive (DuckDB
+unquoted-identifier semantics); `_wm_partition` is whitelisted (it's excluded
+from capture); `{partition}` tokens are stripped before lookup; a
+`<dim>_current` reference falls back to the scd2 base table's capture; a
+relationships join across two captured assets also flags a captured-type
+*difference* (the runtime probe coerces, so it's "differs", not "will fail").
+An asset with no capture (never materialized, `manual` mode, any
+`datatable://`) produces no warnings.
+
+The producer opts a deliberately unstable schema out with
+`// materialize … on_schema_change=ignore` — consumers then get a single
+informational "suppressed" note instead of per-column warnings. On `manual`
+materialize the option is inert (nothing is captured) and deploy logs a
+warning saying so.
+
 ## Scoping decision: DuckLake vs DataTable
 
 **Make DuckLake the materialization/versioning substrate; keep DataTable as the
diff --git a/docs/pipelines-vs-dbt.md b/docs/pipelines-vs-dbt.md
index c073c88b8c..4ad8e65fb9 100644
--- a/docs/pipelines-vs-dbt.md
+++ b/docs/pipelines-vs-dbt.md
@@ -51,7 +51,7 @@ Asset-centric, polyglot, annotation-driven, event-aware:
 | Column lineage | No | **Shipped** (`// column`); docs site still TODO |
 | Snapshots / SCD2 | Yes (`key=… history`) | Managed strategy |
 | Selective execution grammar | No | UI/CLI surface |
-| Schema contracts | No, but design metadata model | TODO with design work |
+| Schema contracts | No, but design metadata model | **Shipped** (capture #2a + save-time check #2b) |
 | Packages / community / macros | No | **Shipped** (`// macros` workspace macro libraries) |
 | Semantic layer / metrics | No | Large additive scope |
 
@@ -140,21 +140,43 @@ Today: `requestRunCascadeSignal` in the canvas, `// tag` annotation parsed.
 Graph + tags + last-run state has all the inputs. UI/CLI surface, not
 abstraction work.
 
-### 6. Schema contracts
+### 6. Schema contracts — **shipped**
 
 dbt: `contract: enforced` + `columns: [{name, data_type}]`. Compile-time
 check that model output matches the declaration.
 
-Today: `// on datatable://users/active` is a string. Rename a column
-upstream → downstream breaks at runtime, silently.
+**Shipped**, capture-then-validate (no declaration to maintain): the schema a
+managed `// materialize` run captures post-DESCRIBE into the versioned
+`materialized_asset_schema` sidecar (#2a) *is* the contract, and every
+consumer save/deploy is validated against the latest capture. Three surfaces,
+same diff (`windmill_common::schema_contracts`, mirrored 1:1 in
+`schemaContracts.ts`):
 
-This is the item where the current asset abstraction is thinnest.
-To do contracts well: capture output schemas after a run (substrate-specific
-DESCRIBE), persist them as asset metadata, validate consumer references at
-save time. The asset-as-typed-node model accommodates it — but **where**
-schemas live (asset row, sidecar?), **when** they're captured (post-run?
-edit-time?), and **how** versioning works are non-trivial design choices.
-Worth doing intentionally now while the asset surface is still young.
+- **Save-time (authoritative)**: `POST /w/{ws}/scripts/check_schema_contracts`
+  runs on the deployed content right after a save and returns **warnings —
+  never errors**. A deliberate upstream reshape must not fail every consumer
+  save; that's why dbt's `on_schema_change=fail` is deliberately not offered
+  in v1 (a CI/CLI gate can layer it on later without touching the grammar).
+- **Editor flycheck**: the WASM parse that already runs on the open buffer
+  feeds the same diff, surfacing mismatches as live Monaco warning squiggles
+  anchored to the offending read / `// column` / `// data_test` line.
+- **Autocompletion**: annotation refs (`// column out <-
+  ducklake://lake/orders.`, `// data_test relationships … ->`) complete
+  column names from the captured schema — the broken ref never gets typed.
+
+What's checked (ducklake-only — the only substrate with capture in v1;
+datatable refs have no captured schema and stay silent): body-read/written
+columns missing from the capture, `// column` lineage sources, and
+`// data_test relationships` refs — including a captured-type *difference* on
+the join columns when both sides are captured (phrased "differs", since the
+runtime probe's IN-subquery still coerces). Column names compare
+case-insensitively (DuckDB unquoted-identifier semantics); the managed
+`_wm_partition` column is whitelisted; a `<dim>_current` scd2 view falls back
+to its base table's capture (identical columns by construction).
+
+The producer-side escape hatch is `// materialize … on_schema_change=ignore`:
+it declares the schema deliberately unstable and collapses downstream
+warnings for that asset into a single informational note. Default is `warn`.
 
 ### 7. Packages / community / macros — **shipped** (macro libraries)
 
diff --git a/frontend/src/lib/components/Editor.svelte b/frontend/src/lib/components/Editor.svelte
index ae413d2484..78a75734c9 100644
--- a/frontend/src/lib/components/Editor.svelte
+++ b/frontend/src/lib/components/Editor.svelte
@@ -91,6 +91,11 @@
 		listWorkspaceMacrosCached,
 		macroDefinitionSql
 	} from '$lib/components/assets/workspaceMacros'
+	import {
+		fetchLatestSchema,
+		normalizeAssetPath,
+		type ContractMarker
+	} from '$lib/components/assets/AssetGraph/schemaContracts'
 	import * as htmllang from '$lib/svelteMonarch'
 	import { conf, language } from '$lib/vueMonarch'
 
@@ -162,6 +167,11 @@
 		preparedAssetsSqlQueries?: InferAssetsSqlQueryDetails[] | undefined
 		// To execute preview scripts with the right worker group
 		customTag?: string
+		// Live schema-contract diagnostics (pipelines gap #2b): owner-scoped
+		// warning markers computed by the caller (ScriptEditor's contract
+		// mirror) from the buffer's asset refs vs captured producer schemas.
+		// Warning severity only — contracts never block; empty clears.
+		schemaContractMarkers?: ContractMarker[]
 	}
 
 	let {
@@ -194,7 +204,8 @@
 		enablePreprocessorSnippet = false,
 		rawAppRunnableKey = undefined,
 		preparedAssetsSqlQueries,
-		customTag
+		customTag,
+		schemaContractMarkers = []
 	}: Props = $props()
 
 	$effect.pre(() => {
@@ -676,6 +687,53 @@
 		})
 	}
 
+	let schemaContractCompletor: IDisposable | undefined = undefined
+
+	// Column-name completion for pipeline annotation refs (`// column out <-
+	// ducklake://lake/orders.|`, `// data_test relationships col ->
+	// ducklake://lake/customers.|`): suggests the referenced asset's *captured*
+	// columns (with types) so a broken ref never gets typed — the prevention
+	// side of the schema-contract check. Only fires on annotation comment lines
+	// with a ducklake URI right before the cursor's `.`; schemas come from the
+	// short-TTL contract cache, so per-keystroke cost is a map lookup.
+	function addSchemaContractCompletions() {
+		schemaContractCompletor?.dispose()
+		schemaContractCompletor = languages.registerCompletionItemProvider(lang, {
+			triggerCharacters: ['.'],
+			provideCompletionItems: async function (model, position) {
+				// Read the store per request, not at registration — the provider
+				// outlives a workspace switch.
+				const workspace = $workspaceStore
+				if (!workspace) return { suggestions: [] }
+				const before = model.getLineContent(position.lineNumber).slice(0, position.column - 1)
+				if (!/^\s*(\/\/|--|#)\s*(column|data_test|on|materialize)\b/.test(before)) {
+					return { suggestions: [] }
+				}
+				const uri = before.match(/ducklake:\/\/([\w/.{}-]+?)\.$/)
+				if (!uri) return { suggestions: [] }
+				const schema = await fetchLatestSchema(workspace, normalizeAssetPath(uri[1]))
+				if (!schema) return { suggestions: [] }
+				const word = model.getWordUntilPosition(position)
+				const range = {
+					startLineNumber: position.lineNumber,
+					endLineNumber: position.lineNumber,
+					startColumn: word.startColumn,
+					endColumn: word.endColumn
+				}
+				return {
+					suggestions: schema.columns.map((c) => ({
+						label: c.name,
+						kind: languages.CompletionItemKind.Field,
+						detail: `${c.type} · captured schema v${schema.version}`,
+						insertText: c.name,
+						range,
+						sortText: 'a' + c.name
+					}))
+				}
+			}
+		})
+	}
+
 	let sqlSchemaCompletor: IDisposable | undefined = undefined
 
 	async function updateSchema(newSchemaRes: string | undefined) {
@@ -1885,6 +1943,7 @@
 		sqlTypeCompletor && sqlTypeCompletor.dispose()
 		resultCollectionCompletor && resultCollectionCompletor.dispose()
 		workspaceMacroCompletor && workspaceMacroCompletor.dispose()
+		schemaContractCompletor && schemaContractCompletor.dispose()
 		preprocessorCompletor && preprocessorCompletor.dispose()
 		timeoutModel && clearTimeout(timeoutModel)
 		changeChainStart = undefined
@@ -1968,6 +2027,36 @@
 			: workspaceMacroCompletor?.dispose()
 	})
 
+	// Pipeline annotation grammar is language-agnostic (`//` / `--` / `#`
+	// comment headers), so contract-ref completions register for every script
+	// language that can be a pipeline member. The provider line-gates itself,
+	// so it is inert outside annotation lines.
+	$effect(() => {
+		initialized && ['duckdb', 'python3', 'bun', 'deno', 'nativets'].includes(scriptLang ?? '')
+			? untrack(() => addSchemaContractCompletions())
+			: schemaContractCompletor?.dispose()
+	})
+
+	// Schema-contract markers arrive as a prop because the mirror can finish
+	// computing before Monaco initializes on mount — reacting to `initialized`
+	// re-applies the pending set once the model exists. The ever-set latch
+	// keeps unrelated editors from calling setModelMarkers with [] forever.
+	let contractMarkersEverSet = false
+	$effect(() => {
+		const ms = schemaContractMarkers
+		if (!initialized || (ms.length === 0 && !contractMarkersEverSet)) return
+		contractMarkersEverSet = true
+		untrack(() => {
+			const model = editor?.getModel()
+			if (!model) return
+			meditor.setModelMarkers(
+				model,
+				'schema-contracts',
+				ms.map((m) => ({ ...m, severity: MarkerSeverity.Warning }))
+			)
+		})
+	})
+
 	$effect(() => {
 		initialized && canHavePreprocessor(lang) && enablePreprocessorSnippet
 			? untrack(() => addPreprocessorCompletions(lang))
diff --git a/frontend/src/lib/components/ScriptBuilder.svelte b/frontend/src/lib/components/ScriptBuilder.svelte
index fbfa4f1c1b..7d639b2c75 100644
--- a/frontend/src/lib/components/ScriptBuilder.svelte
+++ b/frontend/src/lib/components/ScriptBuilder.svelte
@@ -41,6 +41,7 @@
 	} from '$lib/utils'
 	import Path from './Path.svelte'
 	import { invalidateWorkspacePaths } from './PathNameAutocomplete.svelte'
+	import { notifyContractWarnings } from './assets/AssetGraph/schemaContracts'
 	import ScriptEditor from './ScriptEditor.svelte'
 	import { Alert, Button, Drawer, SecondsInput, Tab, TabContent, Tabs } from './common'
 	import LanguageIcon from './common/languageIcons/LanguageIcon.svelte'
@@ -654,6 +655,11 @@
 			// cache so it shows up immediately instead of after the 60s TTL.
 			invalidateWorkspacePaths($workspaceStore!)
 
+			// Authoritative save-time schema-contract check (pipelines gap #2b):
+			// warn-only, post-commit so a self-produced target resolves to the
+			// content just deployed. Fire-and-forget — must never gate the deploy.
+			notifyContractWarnings($workspaceStore!, script.language, script.content)
+
 			if (!initialPath) {
 				await CaptureService.moveCapturesAndConfigs({
 					workspace: $workspaceStore!,
diff --git a/frontend/src/lib/components/ScriptEditor.svelte b/frontend/src/lib/components/ScriptEditor.svelte
index f1944c73cc..50b5c8da95 100644
--- a/frontend/src/lib/components/ScriptEditor.svelte
+++ b/frontend/src/lib/components/ScriptEditor.svelte
@@ -105,6 +105,11 @@
 	import { canHavePreprocessor } from '$lib/script_helpers'
 	import { assetEq, type AssetWithAltAccessType } from './assets/lib'
 	import type { ColumnLineage } from './assets/AssetGraph/parsePipelineAnnotations'
+	import {
+		computeContractMarkers,
+		type ContractMarker,
+		type SchemaContractGraphContext
+	} from './assets/AssetGraph/schemaContracts'
 	import { editor as meditor } from 'monaco-editor'
 	import type { ReviewChangesOpts } from './copilot/chat/monaco-adapter'
 	import GitRepoViewer from './GitRepoViewer.svelte'
@@ -202,6 +207,11 @@
 		// regular /scripts/edit route keeps its current open-by-default UX;
 		// the session preview opts in to save vertical real estate.
 		initialTestPanelCollapsed?: boolean
+		// Producer-side facts for the live schema-contract diagnostics
+		// (`on_schema_change=ignore` suppression + scd2 `_current` fallback),
+		// built by the pipeline page from the resolved graph. Absent outside the
+		// pipeline editor — the check still runs, just without suppression.
+		schemaContractContext?: SchemaContractGraphContext
 	}
 
 	let {
@@ -242,7 +252,8 @@
 		previewLayout = 'right',
 		onTestStateChange,
 		onTestJob,
-		initialTestPanelCollapsed = false
+		initialTestPanelCollapsed = false,
+		schemaContractContext = undefined
 	}: Props = $props()
 
 	$effect(() => {
@@ -614,6 +625,35 @@
 		}
 	)
 
+	// Live schema-contract diagnostics (pipelines gap #2b): diff the buffer's
+	// asset refs against the captured producer schemas and surface mismatches
+	// as Monaco warning squiggles — the as-you-type mirror of the authoritative
+	// save-time check. The result is a prop on Editor (not an imperative call)
+	// because this can resolve before Monaco initializes on mount. Sequenced so
+	// a slow schema fetch can't overwrite the markers of a newer keystroke.
+	let contractMarkers: ContractMarker[] = $state([])
+	let contractCheckSeq = 0
+	watch([() => inferAssetsRes.current, () => schemaContractContext], () => {
+		const res = inferAssetsRes.current
+		const workspace = $workspaceStore
+		const seq = ++contractCheckSeq
+		if (!workspace || !res || res.status === 'error') {
+			contractMarkers = []
+			return
+		}
+		const bufferCode = code
+		computeContractMarkers(
+			workspace,
+			bufferCode,
+			(res.assets ?? []) as AssetWithAltAccessType[],
+			schemaContractContext
+		)
+			.then((markers) => {
+				if (seq === contractCheckSeq) contractMarkers = markers
+			})
+			.catch((e) => console.error('schema-contract diagnostics failed', e))
+	})
+
 	watch([() => code, () => lang], () => {
 		if (lang !== 'ansible') return
 		inferAnsibleExecutionMode(code).then((v) => {
@@ -2602,6 +2642,7 @@
 			bind:code={editorCode}
 			bind:websocketAlive
 			bind:this={editor}
+			schemaContractMarkers={contractMarkers}
 			{yContent}
 			awareness={wsProvider?.awareness}
 			on:change={(e) => {
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
index 1abe21f76d..c9b921be2e 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
@@ -1,5 +1,5 @@
 <script lang="ts">
-	import { ScriptService, type Script } from '$lib/gen'
+	import { ScriptService, type Script, type ScriptLang } from '$lib/gen'
 	import { resource } from 'runed'
 	import { base } from '$lib/base'
 	import Button from '$lib/components/common/button/Button.svelte'
@@ -38,6 +38,7 @@
 	import S3FilePreview from '$lib/components/S3FilePreview.svelte'
 	import DataTablePreview from './DataTablePreview.svelte'
 	import DucklakeAssetPanel from './DucklakeAssetPanel.svelte'
+	import { notifyContractWarnings, type SchemaContractGraphContext } from './schemaContracts'
 	import AssetRunsPanel from './AssetRunsPanel.svelte'
 	import { Pane, Splitpanes } from 'svelte-splitpanes'
 	import { fade } from 'svelte/transition'
@@ -146,6 +147,10 @@
 		// `replace` producer). Forwarded to the Schema tab: version history when
 		// true, a single fixed-schema view when false. Defaults to true (unknown).
 		schemaCanEvolve?: boolean
+		// Producer-side facts for the editor's live schema-contract diagnostics
+		// (ignore suppression + scd2 `_current` fallback), built by the page from
+		// the resolved graph and forwarded to ScriptEditor.
+		schemaContractContext?: SchemaContractGraphContext
 		// Bumped by the parent after dispatching a run so the runs panel
 		// re-fetches the listing immediately (rather than waiting on its
 		// background poll tick).
@@ -254,6 +259,7 @@
 		selectionProducers = [],
 		selectionColumnGraph,
 		schemaCanEvolve = true,
+		schemaContractContext = undefined,
 		runsRefreshKey,
 		runsPendingJobId,
 		onRunCompleted,
@@ -664,6 +670,9 @@
 			// same parent").
 			if (typeof newHash === 'string' && newHash) script.hash = newHash
 			sendUserToast(`Saved ${script.path}`)
+			// Authoritative save-time schema-contract check (pipelines gap #2b):
+			// warn-only, post-commit. Fire-and-forget — must never gate the save.
+			notifyContractWarnings(workspace, script.language as ScriptLang, script.content)
 			if (isDraft) {
 				onDraftSaved?.(script.path)
 			} else {
@@ -1155,6 +1164,7 @@
 							showCaptures={false}
 							noSyncFromGithub
 							requireValidAssets
+							{schemaContractContext}
 							lang={script.language}
 							path={script.path}
 							tag={script.tag}
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
index 8dca18bd8e..042c06144d 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
@@ -22,6 +22,7 @@
 	import type { RunnableRunState, PipelineEvent } from './activeRunnables.svelte'
 	import type { PipelineOutputKind } from './pipelineTemplates'
 	import type { PipelineEditorState } from './pipelineEditorState.svelte'
+	import type { SchemaContractGraphContext } from './schemaContracts'
 
 	type RunProducer = { kind: 'script' | 'flow'; path: string; unsaved?: boolean; cascade?: boolean }
 
@@ -73,6 +74,7 @@
 		selectionProducers = [],
 		selectionColumnGraph,
 		schemaCanEvolve = true,
+		schemaContractContext = undefined,
 		downstreamSubscribers = 0,
 		onStartBoundedRunForOpen,
 		canBoundedRunOpenScript = false,
@@ -170,6 +172,9 @@
 		/** Transitive column-lineage trace for a selected ducklake asset (route page). */
 		selectionColumnGraph?: ColumnLineageGraph
 		schemaCanEvolve?: boolean
+		/** Producer-side facts for the editor's live schema-contract diagnostics
+		 * (ignore suppression + scd2 `_current` fallback), from the route page. */
+		schemaContractContext?: SchemaContractGraphContext
 		downstreamSubscribers?: number
 		onStartBoundedRunForOpen?: (path: string) => void
 		canBoundedRunOpenScript?: boolean
@@ -486,6 +491,7 @@
 						selectionProducers={activeDraft ? [] : selectionProducers}
 						{selectionColumnGraph}
 						{schemaCanEvolve}
+						{schemaContractContext}
 						{runsRefreshKey}
 						{runsPendingJobId}
 						{activeRunnable}
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts
index 077377ec2a..0ad56c81f9 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.parity.test.ts
@@ -72,6 +72,8 @@ type Fixture = {
 			scd2?: boolean
 			track?: string[]
 			close_deleted?: boolean
+			// "warn" | "ignore"; absent === "warn" (the default)
+			on_schema_change?: string
 		} | null
 		// Snake_case form matching the Rust `DataTest` serde output, so the one
 		// corpus drives both sides. The TS parser emits this shape verbatim
@@ -180,6 +182,9 @@ describe('parsePipelineAnnotations matches the shared Rust fixture corpus', () =
 				expect(got.materialize?.closeDeleted ?? false, 'materialize close_deleted').toBe(
 					f.expected.materialize.close_deleted ?? false
 				)
+				expect(got.materialize?.onSchemaChange ?? 'warn', 'materialize on_schema_change').toBe(
+					f.expected.materialize.on_schema_change ?? 'warn'
+				)
 			}
 
 			expect(got.dataTests, 'data tests').toEqual(f.expected.data_tests ?? [])
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
index 964e48570a..4c754201c8 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
@@ -117,6 +117,10 @@ export type MaterializeSpec = {
 	track?: string[]
 	// SCD2 hard-delete-close (`deletes=close`): close absent keys; absent === false
 	closeDeleted?: boolean
+	// `on_schema_change=ignore` opts the produced asset out of downstream
+	// schema-contract warnings (save-time metadata only). Default `warn`;
+	// `fail` is deliberately unrecognized in v1 (saves never hard-block).
+	onSchemaChange?: 'warn' | 'ignore'
 }
 
 // `// data_test <kind> …` — a data-quality assertion run against the
@@ -264,7 +268,8 @@ function parseAssetSyntaxDefault(s: string): PipelineTriggerAsset | undefined {
 // managed mode; a leading `scd2` word is an alias for the `history` flag; the
 // next token is the target asset URI (default-syntax shorthands enabled); the
 // remainder are strategy options (`append` flag, `key=<col>`, `history` flag,
-// `track=<c1,c2,…>`, `deletes=close`). Missing/empty target → undefined (dropped).
+// `track=<c1,c2,…>`, `deletes=close`, `on_schema_change=ignore`). Missing/empty
+// target → undefined (dropped).
 function parseMaterializeSpec(s: string): MaterializeSpec | undefined {
 	// One optional leading mode keyword: `manual` (track-only) or `scd2` (an alias
 	// for the `history` flag below).
@@ -304,6 +309,9 @@ function parseMaterializeSpec(s: string): MaterializeSpec | undefined {
 	// `deletes=close` (scd2 only) opts into hard-delete-close; any other value
 	// (or absence) keeps the soft-delete default.
 	const closeDeleted = opts.get('deletes') === 'close'
+	// `on_schema_change=ignore` suppresses downstream contract warnings; any
+	// other value (or absence) keeps the `warn` default, fail-safe like `deletes=`.
+	const onSchemaChange = opts.get('on_schema_change') === 'ignore' ? 'ignore' : 'warn'
 	return {
 		targetKind: asset.kind,
 		targetPath: asset.path,
@@ -312,7 +320,8 @@ function parseMaterializeSpec(s: string): MaterializeSpec | undefined {
 		uniqueKey,
 		scd2,
 		track,
-		closeDeleted
+		closeDeleted,
+		onSchemaChange
 	}
 }
 
diff --git a/frontend/src/lib/components/assets/AssetGraph/schemaContracts.test.ts b/frontend/src/lib/components/assets/AssetGraph/schemaContracts.test.ts
new file mode 100644
index 0000000000..9247b23d9b
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/schemaContracts.test.ts
@@ -0,0 +1,276 @@
+import { describe, expect, it } from 'vitest'
+import {
+	buildSchemaContractContext,
+	diffSchemaContracts,
+	mapWarningsToMarkers,
+	normalizeAssetPath,
+	referencedDucklakePaths,
+	type CapturedSchemaLite
+} from './schemaContracts'
+import { parsePipelineAnnotations } from './parsePipelineAnnotations'
+import type { AssetWithAltAccessType } from '../lib'
+
+// Mirrors backend/windmill-common/src/schema_contracts.rs unit tests — the two
+// diffs must apply the same rules or the editor previews a different verdict
+// than the save-time check returns.
+
+function schema(cols: [string, string][], version = 2): CapturedSchemaLite {
+	return {
+		columns: cols.map(([name, type]) => ({ name, type })),
+		version,
+		capturedAt: '2026-01-01T00:00:00Z'
+	}
+}
+
+function readAsset(path: string, cols: string[]): AssetWithAltAccessType {
+	return {
+		path,
+		kind: 'ducklake',
+		access_type: 'r',
+		columns: Object.fromEntries(cols.map((c) => [c, 'r' as const]))
+	}
+}
+
+const NO_ANN = { columnLineage: [], dataTests: [] }
+
+describe('diffSchemaContracts', () => {
+	it('warns on a missing read column, matching case-insensitively', () => {
+		const schemas = new Map([
+			[
+				'lake/orders',
+				schema([
+					['Order_ID', 'BIGINT'],
+					['amount_usd', 'DOUBLE']
+				])
+			]
+		])
+		const w = diffSchemaContracts({
+			...NO_ANN,
+			assets: [readAsset('lake/orders', ['order_id', 'amount'])],
+			schemas,
+			ignored: new Set()
+		})
+		expect(w).toHaveLength(1)
+		expect(w[0].kind).toBe('missing_column')
+		expect(w[0].column).toBe('amount')
+		expect(w[0].schema_version).toBe(2)
+	})
+
+	it('skips unknown-column assets, "*" and reserved columns', () => {
+		const schemas = new Map([['lake/orders', schema([['id', 'BIGINT']])]])
+		const noColumns: AssetWithAltAccessType = {
+			path: 'lake/orders',
+			kind: 'ducklake',
+			access_type: 'r'
+		}
+		expect(
+			diffSchemaContracts({ ...NO_ANN, assets: [noColumns], schemas, ignored: new Set() })
+		).toEqual([])
+		expect(
+			diffSchemaContracts({
+				...NO_ANN,
+				assets: [readAsset('lake/orders', ['*', '_wm_partition', 'id'])],
+				schemas,
+				ignored: new Set()
+			})
+		).toEqual([])
+	})
+
+	it('is silent for assets without a captured schema', () => {
+		expect(
+			diffSchemaContracts({
+				...NO_ANN,
+				assets: [readAsset('lake/unknown', ['whatever'])],
+				schemas: new Map(),
+				ignored: new Set()
+			})
+		).toEqual([])
+	})
+
+	it('normalizes the {partition} token before lookup', () => {
+		const schemas = new Map([['lake/orders', schema([['id', 'BIGINT']])]])
+		const w = diffSchemaContracts({
+			...NO_ANN,
+			assets: [readAsset('lake/orders/{partition}', ['gone'])],
+			schemas,
+			ignored: new Set()
+		})
+		expect(w).toHaveLength(1)
+		expect(w[0].asset_path).toBe('lake/orders')
+	})
+
+	it('warns on broken // column lineage refs', () => {
+		const ann = parsePipelineAnnotations(
+			'// column total <- ducklake://lake/orders.amount\nSELECT 1;'
+		)
+		const schemas = new Map([['lake/orders', schema([['id', 'BIGINT']])]])
+		const w = diffSchemaContracts({
+			assets: [],
+			columnLineage: ann.columnLineage,
+			dataTests: [],
+			schemas,
+			ignored: new Set()
+		})
+		expect(w).toHaveLength(1)
+		expect(w[0].kind).toBe('missing_lineage_source')
+	})
+
+	it('flags missing relationship columns and captured-type differences', () => {
+		const ann = parsePipelineAnnotations(
+			'// materialize ducklake://lake/orders\n' +
+				'// data_test relationships customer_id -> ducklake://lake/customers.id\n' +
+				'// data_test relationships customer_id -> ducklake://lake/customers.uuid\n' +
+				'SELECT 1;'
+		)
+		const schemas = new Map([
+			['lake/customers', schema([['id', 'VARCHAR']])],
+			['lake/orders', schema([['customer_id', 'BIGINT']])]
+		])
+		const w = diffSchemaContracts({
+			assets: [],
+			columnLineage: ann.columnLineage,
+			dataTests: ann.dataTests,
+			materialize: ann.materialize,
+			schemas,
+			ignored: new Set()
+		})
+		expect(w).toHaveLength(2)
+		expect(
+			w.some(
+				(x) =>
+					x.kind === 'relationship_type_mismatch' &&
+					x.expected_type === 'BIGINT' &&
+					x.found_type === 'VARCHAR'
+			)
+		).toBe(true)
+		expect(w.some((x) => x.kind === 'missing_relationship_column' && x.column === 'uuid')).toBe(
+			true
+		)
+	})
+
+	it('suppresses ignored assets down to one informational note', () => {
+		const schemas = new Map([['lake/orders', schema([['id', 'BIGINT']])]])
+		const ignored = new Set(['lake/orders'])
+		const w = diffSchemaContracts({
+			...NO_ANN,
+			assets: [readAsset('lake/orders', ['a', 'b'])],
+			schemas,
+			ignored
+		})
+		expect(w).toHaveLength(1)
+		expect(w[0].kind).toBe('suppressed')
+		expect(
+			diffSchemaContracts({
+				...NO_ANN,
+				assets: [readAsset('lake/orders', ['id'])],
+				schemas,
+				ignored
+			})
+		).toEqual([])
+	})
+})
+
+describe('referencedDucklakePaths', () => {
+	it('collects paths from reads, lineage, relationships and materialize', () => {
+		const ann = parsePipelineAnnotations(
+			'// materialize ducklake://lake/out\n' +
+				'// column total <- ducklake://lake/a.amount\n' +
+				'// data_test relationships k -> ducklake://lake/b.id\n' +
+				'SELECT 1;'
+		)
+		const refs = referencedDucklakePaths({
+			assets: [readAsset('lake/c/{partition}', ['x'])],
+			columnLineage: ann.columnLineage,
+			dataTests: ann.dataTests,
+			materialize: ann.materialize
+		})
+		expect(refs.sort()).toEqual(['lake/a', 'lake/b', 'lake/c', 'lake/out'])
+	})
+})
+
+describe('buildSchemaContractContext', () => {
+	it('derives ignored assets and scd2 _current bases from graph runnables', () => {
+		const ctx = buildSchemaContractContext([
+			{
+				materialize_target: { kind: 'ducklake', path: 'lake/dim' },
+				materialize_strategy: 'scd2',
+				materialize_on_schema_change: 'ignore'
+			},
+			{
+				materialize_target: { kind: 'ducklake', path: 'lake/orders' },
+				materialize_strategy: 'replace'
+			},
+			// non-ducklake and absent targets are ignored
+			{ materialize_target: { kind: 's3object', path: 'x/y' }, materialize_strategy: 'scd2' },
+			{}
+		])
+		expect(ctx.ignoredAssets).toEqual(['lake/dim', 'lake/dim_current'])
+		expect(ctx.scd2CurrentBases).toEqual({ 'lake/dim_current': 'lake/dim' })
+	})
+
+	it('ignores _current only for scd2 producers (backend spec.scd2 gate)', () => {
+		const ctx = buildSchemaContractContext([
+			{
+				materialize_target: { kind: 'ducklake', path: 'lake/t' },
+				materialize_strategy: 'replace',
+				materialize_on_schema_change: 'ignore'
+			}
+		])
+		// a non-scd2 producer's `<base>_current` is an unrelated asset — it must
+		// keep warning, exactly like the server-side check
+		expect(ctx.ignoredAssets).toEqual(['lake/t'])
+		expect(ctx.scd2CurrentBases).toEqual({})
+	})
+})
+
+describe('mapWarningsToMarkers', () => {
+	it('anchors annotation warnings to their lines and body reads to the identifier', () => {
+		const code =
+			'-- pipeline\n' +
+			'-- on ducklake://lake/orders\n' +
+			'-- column total <- ducklake://lake/orders.amount\n' +
+			'-- data_test relationships k -> ducklake://lake/customers.uuid\n' +
+			'SELECT amount FROM dl.orders;'
+		const markers = mapWarningsToMarkers(code, [
+			{
+				kind: 'missing_lineage_source',
+				asset_path: 'lake/orders',
+				column: 'amount',
+				message: 'm1'
+			},
+			{
+				kind: 'missing_relationship_column',
+				asset_path: 'lake/customers',
+				column: 'uuid',
+				message: 'm2'
+			},
+			{ kind: 'missing_column', asset_path: 'lake/orders', column: 'amount', message: 'm3' },
+			{ kind: 'suppressed', asset_path: 'lake/orders', message: 'hidden' }
+		])
+		expect(markers).toHaveLength(3)
+		expect(markers[0].startLineNumber).toBe(3)
+		expect(markers[1].startLineNumber).toBe(4)
+		// body-read warning anchors to the first occurrence of the identifier,
+		// which is the annotation line mentioning `amount` (line 3)
+		expect(markers[2].startLineNumber).toBe(3)
+		// token range is tight around the identifier, not the whole line
+		const line3 = '-- column total <- ducklake://lake/orders.amount'
+		expect(markers[2].startColumn).toBe(line3.indexOf('amount') + 1)
+	})
+
+	it('falls back to the line mentioning the asset path', () => {
+		const code = '# pipeline\n# on ducklake://lake/orders\nprint(1)'
+		const markers = mapWarningsToMarkers(code, [
+			{ kind: 'missing_column', asset_path: 'lake/orders', column: 'zzz', message: 'm' }
+		])
+		expect(markers[0].startLineNumber).toBe(2)
+	})
+})
+
+describe('normalizeAssetPath', () => {
+	it('strips the partition token and trailing slashes', () => {
+		expect(normalizeAssetPath('lake/orders/{partition}')).toBe('lake/orders')
+		expect(normalizeAssetPath('lake/orders_{partition}')).toBe('lake/orders_')
+		expect(normalizeAssetPath('lake/orders/')).toBe('lake/orders')
+	})
+})
diff --git a/frontend/src/lib/components/assets/AssetGraph/schemaContracts.ts b/frontend/src/lib/components/assets/AssetGraph/schemaContracts.ts
new file mode 100644
index 0000000000..4a1de04e13
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/schemaContracts.ts
@@ -0,0 +1,440 @@
+// Client-side mirror of the save-time schema-contract check (pipelines gap
+// #2b, backend/windmill-common/src/schema_contracts.rs). The backend endpoint
+// (`checkSchemaContracts`) is the authoritative check run on save; this mirror
+// drives the *live* editor surface (Monaco warning markers + completions) from
+// the WASM parse that already runs on the open buffer, so the two must apply
+// the same rules: ducklake-only, case-insensitive column names, `columns`
+// absent ⇒ skip, `_wm_partition` whitelisted, `{partition}` token stripped,
+// annotation-declared lineage only, asset without captured schema ⇒ silent.
+
+import { AssetService, ScriptService, type ContractWarning, type ScriptLang } from '$lib/gen'
+import { sendUserToast } from '$lib/toast'
+import type { AssetWithAltAccessType } from '../lib'
+import {
+	parsePipelineAnnotations,
+	type ColumnLineage,
+	type DataTest,
+	type MaterializeSpec
+} from './parsePipelineAnnotations'
+
+// Columns the materialize engine manages; excluded from the captured schema on
+// purpose, so reads of them must not warn.
+const RESERVED_COLUMNS = ['_wm_partition']
+
+const PARTITION_TOKEN = '{partition}'
+
+export type CapturedSchemaLite = {
+	columns: { name: string; type: string }[]
+	version: number
+	capturedAt: string
+}
+
+// Strip the `{partition}` token a declared URI may carry so lookups hit the
+// captured path (mirrors `normalize_asset_path`).
+export function normalizeAssetPath(path: string): string {
+	return path
+		.replaceAll('/' + PARTITION_TOKEN, '')
+		.replaceAll(PARTITION_TOKEN, '')
+		.replace(/\/+$/, '')
+}
+
+function isReserved(name: string): boolean {
+	return RESERVED_COLUMNS.some((r) => r.toLowerCase() === name.toLowerCase())
+}
+
+function findColumn(
+	schema: CapturedSchemaLite,
+	name: string
+): { name: string; type: string } | undefined {
+	const lower = name.toLowerCase()
+	return schema.columns.find((c) => c.name.toLowerCase() === lower)
+}
+
+export type SchemaContractInputs = {
+	// Per-asset column reads/writes from the WASM parse (entries without a
+	// `columns` map are skipped — wildcard/unknown access).
+	assets: AssetWithAltAccessType[]
+	// Annotation-declared `// column` lineage ONLY (not merged AST-inferred
+	// lineage — redundant with body reads and alias-attribution can misfire).
+	columnLineage: ColumnLineage[]
+	dataTests: DataTest[]
+	materialize?: MaterializeSpec
+	// Latest captured schema per normalized ducklake path (after any
+	// `_current` → base-table fallback the caller resolved).
+	schemas: Map<string, CapturedSchemaLite>
+	// Normalized paths whose producer declares `on_schema_change=ignore`.
+	ignored: Set<string>
+}
+
+// Mirrors backend `diff_contract` — same warning kinds and suppression
+// semantics, minus the human message wording (the editor renders its own).
+export function diffSchemaContracts(input: SchemaContractInputs): ContractWarning[] {
+	const { assets, columnLineage, dataTests, materialize, schemas, ignored } = input
+	const warnings: ContractWarning[] = []
+
+	// W1 — body-read/written columns missing from the captured schema.
+	for (const a of assets) {
+		if (a.kind !== 'ducklake' || a.columns == undefined) continue
+		const path = normalizeAssetPath(a.path)
+		const schema = schemas.get(path)
+		if (!schema) continue
+		for (const col of Object.keys(a.columns)) {
+			if (col === '*' || isReserved(col)) continue
+			if (!findColumn(schema, col)) {
+				warnings.push({
+					kind: 'missing_column',
+					asset_path: path,
+					column: col,
+					schema_version: schema.version,
+					captured_at: schema.capturedAt,
+					message: `column \`${col}\` of ducklake://${path} is not in its captured schema (v${schema.version}, columns: ${schema.columns.map((c) => c.name).join(', ')})`
+				})
+			}
+		}
+	}
+
+	// W2 — `// column` lineage source refs.
+	for (const cl of columnLineage) {
+		for (const input of cl.inputs) {
+			if (input.from_kind !== 'ducklake' || isReserved(input.from_column)) continue
+			const path = normalizeAssetPath(input.from_path)
+			const schema = schemas.get(path)
+			if (!schema) continue
+			if (!findColumn(schema, input.from_column)) {
+				warnings.push({
+					kind: 'missing_lineage_source',
+					asset_path: path,
+					column: input.from_column,
+					schema_version: schema.version,
+					captured_at: schema.capturedAt,
+					message: `\`// column ${cl.column}\` reads \`${input.from_column}\` from ducklake://${path}, which is not in its captured schema (v${schema.version})`
+				})
+			}
+		}
+	}
+
+	// W3 — relationships refs: missing column, and captured-type difference
+	// when the consumer's own materialize target has a capture. Types still
+	// coerce at run time, so a difference is "differs", never "will fail".
+	const ownSchema =
+		materialize?.targetKind === 'ducklake'
+			? schemas.get(normalizeAssetPath(materialize.targetPath))
+			: undefined
+	for (const dt of dataTests) {
+		if (dt.type !== 'relationships' || dt.to_kind !== 'ducklake') continue
+		const path = normalizeAssetPath(dt.to_path)
+		const schema = schemas.get(path)
+		if (!schema) continue
+		const refCol = findColumn(schema, dt.to_column)
+		if (!refCol) {
+			warnings.push({
+				kind: 'missing_relationship_column',
+				asset_path: path,
+				column: dt.to_column,
+				schema_version: schema.version,
+				captured_at: schema.capturedAt,
+				message: `\`// data_test relationships ${dt.column}\` references ducklake://${path}.${dt.to_column}, which is not in its captured schema (v${schema.version})`
+			})
+		} else {
+			const ownCol = ownSchema && findColumn(ownSchema, dt.column)
+			if (ownCol && ownCol.type.toLowerCase() !== refCol.type.toLowerCase()) {
+				warnings.push({
+					kind: 'relationship_type_mismatch',
+					asset_path: path,
+					column: dt.to_column,
+					expected_type: ownCol.type,
+					found_type: refCol.type,
+					schema_version: schema.version,
+					captured_at: schema.capturedAt,
+					message: `\`// data_test relationships ${dt.column}\` joins \`${dt.column}\` (${ownCol.type}) to ducklake://${path}.${dt.to_column} (${refCol.type}) — captured types differ`
+				})
+			}
+		}
+	}
+
+	// W4 — producer `on_schema_change=ignore`: drop the asset's warnings,
+	// leaving one informational entry per suppressed asset.
+	if (ignored.size > 0) {
+		const suppressed: string[] = []
+		const kept = warnings.filter((w) => {
+			if (ignored.has(w.asset_path)) {
+				if (!suppressed.includes(w.asset_path)) suppressed.push(w.asset_path)
+				return false
+			}
+			return true
+		})
+		warnings.length = 0
+		warnings.push(...kept)
+		for (const path of suppressed) {
+			warnings.push({
+				kind: 'suppressed',
+				asset_path: path,
+				message: `schema mismatches on ducklake://${path} suppressed by its producer's \`on_schema_change=ignore\``
+			})
+		}
+	}
+
+	return warnings
+}
+
+// The ducklake paths a buffer references in ways the contract check inspects —
+// what the editor needs captured schemas for.
+export function referencedDucklakePaths(
+	input: Pick<SchemaContractInputs, 'assets' | 'columnLineage' | 'dataTests' | 'materialize'>
+): string[] {
+	const paths = new Set<string>()
+	for (const a of input.assets) {
+		if (a.kind === 'ducklake' && a.columns != undefined) paths.add(normalizeAssetPath(a.path))
+	}
+	for (const cl of input.columnLineage) {
+		for (const i of cl.inputs) {
+			if (i.from_kind === 'ducklake') paths.add(normalizeAssetPath(i.from_path))
+		}
+	}
+	for (const dt of input.dataTests) {
+		if (dt.type === 'relationships' && dt.to_kind === 'ducklake')
+			paths.add(normalizeAssetPath(dt.to_path))
+	}
+	if (input.materialize?.targetKind === 'ducklake')
+		paths.add(normalizeAssetPath(input.materialize.targetPath))
+	return [...paths]
+}
+
+// --- Captured-schema cache ------------------------------------------------
+
+// Short-TTL cache so per-keystroke recomputes and completion requests don't
+// re-fetch. Captured schemas only change when a producer materializes, so a
+// briefly stale hit is fine — the authoritative save-time check re-reads.
+const SCHEMA_TTL_MS = 30_000
+const schemaCache = new Map<string, { at: number; value: CapturedSchemaLite | undefined }>()
+
+export async function fetchLatestSchema(
+	workspace: string,
+	path: string
+): Promise<CapturedSchemaLite | undefined> {
+	const key = `${workspace}:${path}`
+	const hit = schemaCache.get(key)
+	if (hit && Date.now() - hit.at < SCHEMA_TTL_MS) return hit.value
+	let value: CapturedSchemaLite | undefined = undefined
+	try {
+		const versions = await AssetService.listAssetSchemas({ workspace, path })
+		const latest = versions[0]
+		if (latest) {
+			value = {
+				columns: latest.columns,
+				version: latest.version,
+				capturedAt: latest.captured_at
+			}
+		}
+	} catch (e) {
+		console.error('failed to fetch captured asset schema', path, e)
+	}
+	schemaCache.set(key, { at: Date.now(), value })
+	return value
+}
+
+// Resolve the schema map for a set of referenced paths, applying the scd2
+// `<dim>_current` → base-table fallback when the graph identifies the view's
+// producer as a managed scd2 materializer (the view is `SELECT * … WHERE
+// is_current`, so columns are identical).
+export async function fetchSchemasForPaths(
+	workspace: string,
+	paths: string[],
+	scd2CurrentBase?: (path: string) => string | undefined
+): Promise<Map<string, CapturedSchemaLite>> {
+	const out = new Map<string, CapturedSchemaLite>()
+	await Promise.all(
+		paths.map(async (p) => {
+			let schema = await fetchLatestSchema(workspace, p)
+			if (!schema && p.endsWith('_current')) {
+				const base = scd2CurrentBase?.(p)
+				if (base) schema = await fetchLatestSchema(workspace, base)
+			}
+			if (schema) out.set(p, schema)
+		})
+	)
+	return out
+}
+
+// --- Pipeline-graph context ---------------------------------------------------
+
+// Producer-side facts the contract mirror needs but cannot derive from the
+// open buffer: which assets are muted (`on_schema_change=ignore`) and which
+// `<dim>_current` views map to an scd2 base table. Built by the pipeline page
+// from the resolved graph; absent outside the pipeline editor (standalone
+// script editor), where suppression simply doesn't apply client-side — the
+// save-time server check remains authoritative either way.
+export type SchemaContractGraphContext = {
+	// Normalized asset paths whose producer declares `on_schema_change=ignore`.
+	ignoredAssets: string[]
+	// `<base>_current` → base for managed scd2 producers in the graph.
+	scd2CurrentBases: Record<string, string>
+}
+
+export function buildSchemaContractContext(
+	runnables: Pick<
+		import('./types').AssetGraphRunnableNode,
+		'materialize_target' | 'materialize_strategy' | 'materialize_on_schema_change'
+	>[]
+): SchemaContractGraphContext {
+	const ignoredAssets: string[] = []
+	const scd2CurrentBases: Record<string, string> = {}
+	for (const r of runnables) {
+		const t = r.materialize_target
+		if (!t || t.kind !== 'ducklake') continue
+		const base = normalizeAssetPath(t.path)
+		if (r.materialize_on_schema_change === 'ignore') {
+			ignoredAssets.push(base)
+			// The `_current` companion is the producer's own view only for scd2 —
+			// mirroring the backend's `spec.scd2` gate; for any other strategy a
+			// `<base>_current` ref is an unrelated asset that must keep warning.
+			if (r.materialize_strategy === 'scd2') {
+				ignoredAssets.push(`${base}_current`)
+			}
+		}
+		if (r.materialize_strategy === 'scd2') {
+			scd2CurrentBases[`${base}_current`] = base
+		}
+	}
+	return { ignoredAssets, scd2CurrentBases }
+}
+
+// --- Save-time surface ------------------------------------------------------
+
+// Run the authoritative backend check for just-deployed content and toast the
+// result. Never throws — a failed check must not taint a successful deploy.
+export async function notifyContractWarnings(
+	workspace: string,
+	language: ScriptLang,
+	content: string
+): Promise<void> {
+	// Every checkable ref carries the `ducklake` token (URIs and the bare
+	// default-syntax shorthand alike) — skip the round-trip for the vast
+	// majority of saves that can't produce a warning.
+	if (!content.includes('ducklake')) return
+	try {
+		const { warnings } = await ScriptService.checkSchemaContracts({
+			workspace,
+			requestBody: { language, content }
+		})
+		const real = warnings.filter((w) => w.kind !== 'suppressed')
+		if (real.length === 0) return
+		sendUserToast(
+			`Schema contract: ${real.length} warning${real.length > 1 ? 's' : ''}`,
+			'warning',
+			[],
+			real.map((w) => `• ${w.message}`).join('\n'),
+			10000
+		)
+	} catch (e) {
+		console.error('schema-contract check failed', e)
+	}
+}
+
+// End-to-end live-editor check: parse the buffer's annotations, resolve the
+// captured schemas for everything it references, diff, and anchor the result
+// to source positions. Cheap per keystroke — the annotation parse is a line
+// scan and schema fetches hit the short-TTL cache.
+export async function computeContractMarkers(
+	workspace: string,
+	code: string,
+	assets: AssetWithAltAccessType[],
+	context?: SchemaContractGraphContext
+): Promise<ContractMarker[]> {
+	const ann = parsePipelineAnnotations(code)
+	const inputs = {
+		assets,
+		// Annotation-declared lineage only — body-inferred lineage is redundant
+		// with the body-read check and its alias attribution can misfire.
+		columnLineage: ann.columnLineage,
+		dataTests: ann.dataTests,
+		materialize: ann.materialize
+	}
+	const refs = referencedDucklakePaths(inputs)
+	if (refs.length === 0) return []
+	const schemas = await fetchSchemasForPaths(
+		workspace,
+		refs,
+		context ? (p) => context.scd2CurrentBases[p] : undefined
+	)
+	if (schemas.size === 0) return []
+	const warnings = diffSchemaContracts({
+		...inputs,
+		schemas,
+		ignored: new Set(context?.ignoredAssets ?? [])
+	})
+	return mapWarningsToMarkers(code, warnings)
+}
+
+// --- Editor marker mapping ---------------------------------------------------
+
+export type ContractMarker = {
+	message: string
+	startLineNumber: number
+	startColumn: number
+	endLineNumber: number
+	endColumn: number
+}
+
+// Best-effort source anchoring: annotation-family warnings anchor to their
+// annotation line; body-read warnings anchor to the first occurrence of the
+// column identifier; fallback is the `// on`/first line mentioning the asset.
+export function mapWarningsToMarkers(code: string, warnings: ContractWarning[]): ContractMarker[] {
+	const lines = code.split('\n')
+
+	function lineMatching(pred: (line: string) => boolean): number | undefined {
+		const idx = lines.findIndex(pred)
+		return idx >= 0 ? idx + 1 : undefined
+	}
+
+	function tokenRange(
+		lineNumber: number,
+		token: string
+	): { startColumn: number; endColumn: number } {
+		const line = lines[lineNumber - 1] ?? ''
+		const idx = line.toLowerCase().indexOf(token.toLowerCase())
+		if (idx < 0) return { startColumn: 1, endColumn: line.length + 1 }
+		return { startColumn: idx + 1, endColumn: idx + 1 + token.length }
+	}
+
+	return warnings
+		.filter((w) => w.kind !== 'suppressed')
+		.map((w) => {
+			let lineNumber: number | undefined
+			let token: string | undefined = w.column ?? undefined
+			switch (w.kind) {
+				case 'missing_lineage_source':
+					lineNumber = lineMatching(
+						(l) => /^\s*(\/\/|--|#)\s*column\s/.test(l) && !!w.column && l.includes(w.column)
+					)
+					break
+				case 'missing_relationship_column':
+				case 'relationship_type_mismatch':
+					lineNumber = lineMatching(
+						(l) =>
+							/^\s*(\/\/|--|#)\s*data_test\s+relationships\s/.test(l) && l.includes(w.asset_path)
+					)
+					break
+				case 'missing_column': {
+					// first body occurrence of the column identifier
+					const re = new RegExp(`\\b${w.column?.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\b`, 'i')
+					lineNumber = w.column ? lineMatching((l) => re.test(l)) : undefined
+					break
+				}
+			}
+			if (lineNumber == undefined) {
+				// fallback: the `// on …` (or any) line mentioning the asset path
+				lineNumber = lineMatching((l) => l.includes(w.asset_path)) ?? 1
+				token = w.asset_path
+			}
+			const range = token
+				? tokenRange(lineNumber, token)
+				: { startColumn: 1, endColumn: (lines[lineNumber - 1]?.length ?? 0) + 1 }
+			return {
+				message: w.message,
+				startLineNumber: lineNumber,
+				endLineNumber: lineNumber,
+				...range
+			}
+		})
+}
diff --git a/frontend/src/lib/components/assets/AssetGraph/types.ts b/frontend/src/lib/components/assets/AssetGraph/types.ts
index fb7b5b1de7..f393686e24 100644
--- a/frontend/src/lib/components/assets/AssetGraph/types.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/types.ts
@@ -49,8 +49,15 @@ export interface AssetGraphRunnableNode {
 	// Managed `// materialize` write strategy. Absent for non-materializing or
 	// `manual` scripts. Used (with `partition_kind`) to decide whether a
 	// produced asset's schema can evolve: only whole-table `replace` can, since
-	// `append`/`merge`/partitioned writes INSERT into a fixed-schema table.
-	materialize_strategy?: 'replace' | 'append' | 'merge'
+	// `append`/`merge`/`scd2`/partitioned writes INSERT into a fixed-schema
+	// table. `scd2` also identifies the producer of a `<dim>_current` companion
+	// view for the schema-contract `_current` → base-table fallback.
+	materialize_strategy?: 'replace' | 'append' | 'merge' | 'scd2'
+	// `on_schema_change=ignore` on the managed materialize — the producer's
+	// opt-out from downstream schema-contract warnings. Only present when set
+	// to `ignore` (default `warn` is absent). Threaded into the editor's
+	// contract mirror so it suppresses the same warnings the server check does.
+	materialize_on_schema_change?: string
 	// Macros this script provides to the workspace registry (deployed
 	// `// macros` library). Non-empty marks the node as a macro library;
 	// drives the "defines N macros" badge and the details-pane signature
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index 845a93505b..d3a25387ad 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -36,6 +36,7 @@
 		type ColumnLineageGraph
 	} from '$lib/components/assets/AssetGraph/columnLineageGraph'
 	import { resolveGraph } from '$lib/components/assets/AssetGraph/resolveGraph'
+	import { buildSchemaContractContext } from '$lib/components/assets/AssetGraph/schemaContracts'
 	import {
 		computeDownstreamClosure,
 		computeInducedSchedule,
@@ -1675,6 +1676,12 @@
 			: EMPTY_COLUMN_GRAPH
 	)
 
+	// Producer-side facts for the editor's live schema-contract diagnostics:
+	// which assets are muted (`on_schema_change=ignore`) and which `_current`
+	// views map to an scd2 base table. Derived from the same resolved graph the
+	// canvas renders so the mirror suppresses exactly what the server check does.
+	let schemaContractContext = $derived(buildSchemaContractContext(graphWithDraft.runnables))
+
 	// Whether the selected ducklake asset's captured schema can *evolve* (drives
 	// the asset panel's Schema tab: version history vs. a single fixed schema).
 	// Only a whole-table `replace` producer (CREATE OR REPLACE) can change
@@ -2210,6 +2217,7 @@
 				{selectionProducers}
 				selectionColumnGraph={pe.activeDraft ? EMPTY_COLUMN_GRAPH : columnGraph}
 				{schemaCanEvolve}
+				{schemaContractContext}
 				downstreamSubscribers={editedScriptDownstreamCount}
 				onStartBoundedRunForOpen={startBoundedRun}
 				canBoundedRunOpenScript={!!openScriptPath &&

From a368d49bd8786a2dca6771f2051f1d44d1b2363d Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Sat, 4 Jul 2026 17:16:07 +0200
Subject: [PATCH 39/76] feat(ai-agent): support reasoning effort in AI agent
 workflow steps (#9886)

* feat(ai-agent): support reasoning effort in AI agent workflow steps

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): round-trip native Anthropic thinking blocks and fix DeepSeek/Mistral reasoning

Address review: native Anthropic now captures the signed thinking block during streaming and replays it before tool_use across iterations (prevents a 400 on multi-turn tool use). DeepSeek 'off' sends thinking:{type:disabled} instead of the rejected reasoning_effort:none, and Mistral drops temperature when reasoning is on.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(ai-agent): move reasoning effort into the provider/model selector

Store reasoning_effort on ProviderConfig (next to the model) instead of a separate flow arg, and render the selector inside AIProviderPicker under the model dropdown. Add an explicit 'off' option on models that disable reasoning by omission (e.g. Claude), so reasoning can always be turned off from the UI.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* refactor(ai-agent): use DropdownV2 for reasoning effort, matching copilot chat

Replace the Select combobox with the same DropdownV2 action-menu the copilot chat reasoning selector uses. Each option carries an action instead of a bound value, so click selection is unambiguous and there is no typeahead/sentinel-value mismatch on the off/default entries.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore(ai-agent): regenerate system prompts for ProviderConfig.reasoning_effort

Refresh system_prompts/auto-generated and cli skills.gen after adding reasoning_effort to the OpenFlow ProviderConfig schema (check-freshness).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): clear stale reasoning effort on model change; dedup bedrock reasoning folding

Address cubic review: (P1) the reasoning picker now clears the stored effort when the newly selected model doesn't accept it (e.g. carrying 'xhigh' from Opus onto a model that tops out at 'high'), not only when the model can't reason at all. (P3) the proxy's accumulate_reasoning_delta now delegates to the shared bedrock_stream_event_to_reasoning_delta so worker and proxy folding can't drift.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(ai-agent): stream reasoning summary and show a thinking affordance in flow chat

Add StreamingEvent::ReasoningTokenDelta, emitted from every worker reasoning path (Anthropic native thinking deltas, Bedrock, Gemini thought parts, OpenAI-compatible reasoning_content, OpenAI Responses reasoning_summary_text with summary:auto). The flow chat parses it and renders a collapsible 'Thinking' affordance on the assistant message (thinking tokens bill regardless of display, so surfacing the summary is billing-neutral).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): persist streamed reasoning onto the finished chat message

Reasoning isn't stored server-side, so the completion re-poll (which swaps temp messages for the persisted ones) was dropping the streamed thinking summary. Carry it onto the final assistant message so the 'Thought process' affordance survives the run.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(ai-agent): match flow-chat thinking box to the copilot chat reasoning UI

Replace the plain <details> thinking affordance with the same bordered, collapsible reasoning box the copilot chat uses (chevron + Brain/spinner + 'Thinking' header, markdown body, expand-while-streaming/collapse-on-answer).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): attribute streamed reasoning per turn by content; drop duplicated comment

Address review: the completion-poll carry-over now matches each temp assistant turn's thinking summary to its persisted message by content, so a multi-turn response (reasoning -> tool call -> final answer) no longer misattributes an earlier turn's thinking to the final answer or drops intermediate turns. Also removes a leftover duplicated comment block above the AIReasoningEffortPicker effect.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): address review round 2 (carry-over edges, off-token validity, aria, test)

cubic round 2: (1) reasoning carry-over now consumes temp turns in order verifying content, so identical/empty-content multi-turn responses attribute thinking correctly and reasoning-only turns aren't dropped; (2) the picker's stale-value check only accepts the off token when the model can actually disable reasoning; (3) add aria-expanded to the Thinking toggle; (4) add a test for the failed tool_result path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): add bottom margin below the flow-chat thinking box

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): don't request OpenAI reasoning summary, matching the copilot chat

OpenAI gates reasoning summaries behind org verification, so requesting summary: auto would 400 for unverified orgs. The copilot chat requests effort only and never asks for a summary; align the worker with it (reasoning: { effort }) and drop the now-unreachable summary-delta parsing. OpenAI reasoning no longer streams a summary in flow chat (consistent with the copilot); Anthropic/Bedrock/Gemini/DeepSeek reasoning display is unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): scope reasoning carry-over to newly persisted messages

cubic round 3: matching by content over the full history could attach a new turn's reasoning to an older message with identical text. Restrict eligible targets to the messages just fetched for this response (via afterSeq), so historical turns are never touched.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): carry reasoning newest-first instead of gating on the final poll

cubic round 4: gating the carry-over on the final poll's filteredResponse dropped reasoning for messages already fetched by an earlier streaming poll (their id is excluded by afterSeq). Walk persisted newest-first and consume the newest matching pending summary, stopping once summaries run out. This response's turns are always at the end, so they claim their own reasoning (P1) before older history is reached (P2), regardless of which poll persisted them.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* refactor(ai-agent): drop flow-chat reasoning display, keep backend + effort picker

The chat-side thinking box relied on non-deterministically matching streamed (ephemeral) reasoning back onto persisted messages, which kept spawning edge cases. Remove the flow-chat display entirely (ChatMessage box, FlowChatManager carry-over/threading, parseStreamDeltas reasoning) and keep the sound backend: per-provider reasoning-effort requests, thinking-block round-trips for tool calls, and ReasoningTokenDelta streaming. A display can be built on top later, deterministically (e.g. once the stream carries the persisted message id).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ai-agent): include reasoning_effort in default-config compare; document reasoning_token_delta

Codex/Pi nits: isSameAsStoredConfig now compares reasoning_effort so the 'use as personal default' toggle reflects effort-only changes; openflow streaming-events doc lists the reasoning_token_delta event (regenerated auto prompts).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 backend/windmill-ai/src/ai_bedrock.rs         | 184 +++++++++++++++-
 backend/windmill-ai/src/ai_google.rs          |   8 +-
 backend/windmill-ai/src/ai_types.rs           |  18 ++
 .../windmill-ai/src/providers/anthropic.rs    | 206 +++++++++++++++++-
 backend/windmill-ai/src/providers/bedrock.rs  |  96 ++++----
 .../windmill-ai/src/providers/google_ai.rs    |   9 +-
 backend/windmill-ai/src/providers/openai.rs   |  15 ++
 backend/windmill-ai/src/providers/other.rs    |  90 +++++++-
 backend/windmill-ai/src/query_builder.rs      |   3 +
 backend/windmill-ai/src/sse.rs                | 187 +++++++++++++++-
 backend/windmill-ai/src/types.rs              |  14 ++
 backend/windmill-worker/src/ai_executor.rs    |   2 +
 cli/src/guidance/skills.gen.ts                |   2 +-
 .../lib/components/AIProviderPicker.svelte    |  15 ++
 .../components/AIReasoningEffortPicker.svelte | 106 +++++++++
 .../src/lib/components/aiProviderStorage.ts   |   3 +-
 .../components/copilot/reasoningRegistry.ts   |   2 +-
 openflow.openapi.yaml                         |   5 +-
 system_prompts/auto-generated/flow.md         |   2 +-
 system_prompts/auto-generated/prompts.ts      |   2 +-
 .../auto-generated/skills/write-flow/SKILL.md |   2 +-
 21 files changed, 887 insertions(+), 84 deletions(-)
 create mode 100644 frontend/src/lib/components/AIReasoningEffortPicker.svelte

diff --git a/backend/windmill-ai/src/ai_bedrock.rs b/backend/windmill-ai/src/ai_bedrock.rs
index 8aa9addcae..02ab702d31 100644
--- a/backend/windmill-ai/src/ai_bedrock.rs
+++ b/backend/windmill-ai/src/ai_bedrock.rs
@@ -857,22 +857,91 @@ pub fn bedrock_stream_event_is_block_stop(event: &ConverseStreamOutput) -> bool
     matches!(event, ConverseStreamOutput::ContentBlockStop(_))
 }
 
-/// Convert accumulated streaming tool calls to OpenAI format
-pub fn streaming_tool_calls_to_openai(tool_calls: Vec<StreamingToolCall>) -> Vec<OpenAIToolCall> {
+/// Convert accumulated streaming tool calls to OpenAI format.
+///
+/// When thinking is enabled, `reasoning` carries the turn's Claude reasoning
+/// block; it is attached to the first tool call so the next request replays it
+/// before `toolUse` (required by Claude when thinking is enabled — see
+/// [`convert_message`]). When `None` (thinking off), tool calls carry no extra
+/// content, byte-identical to the pre-feature output.
+pub fn streaming_tool_calls_to_openai(
+    tool_calls: Vec<StreamingToolCall>,
+    reasoning: Option<crate::ai_types::BedrockExtraContent>,
+) -> Vec<OpenAIToolCall> {
+    let mut reasoning = reasoning;
     tool_calls
         .into_iter()
-        .map(|tc| OpenAIToolCall {
-            id: tc.id,
-            function: OpenAIFunction { name: tc.name, arguments: tc.arguments },
-            r#type: FUNCTION_TYPE.to_string(),
-            // Worker agent requests never enable thinking, so there is no
-            // reasoning block to round-trip here (the chat proxy path does —
-            // see providers/bedrock.rs).
-            extra_content: None,
+        .map(|tc| {
+            // `take` so only the first tool call carries the reasoning block.
+            let extra_content = reasoning.take().map(|block| crate::ai_types::ExtraContent {
+                bedrock: Some(block),
+                ..Default::default()
+            });
+            OpenAIToolCall {
+                id: tc.id,
+                function: OpenAIFunction { name: tc.name, arguments: tc.arguments },
+                r#type: FUNCTION_TYPE.to_string(),
+                extra_content,
+            }
         })
         .collect()
 }
 
+/// Fold a Bedrock `ReasoningContent` stream delta into an accumulating reasoning
+/// block (text + signature, or redacted bytes). Returns the readable text delta
+/// when the event carried one, so the caller can stream it as reasoning content.
+/// Mirrors the proxy path's accumulation in `providers/bedrock.rs`.
+pub fn bedrock_stream_event_to_reasoning_delta(
+    event: &ConverseStreamOutput,
+    reasoning: &mut Option<crate::ai_types::BedrockExtraContent>,
+) -> Option<String> {
+    let ConverseStreamOutput::ContentBlockDelta(delta_event) = event else {
+        return None;
+    };
+    let aws_sdk_bedrockruntime::types::ContentBlockDelta::ReasoningContent(rc) =
+        delta_event.delta()?
+    else {
+        return None;
+    };
+
+    let entry = reasoning.get_or_insert_with(Default::default);
+    match rc {
+        aws_sdk_bedrockruntime::types::ReasoningContentBlockDelta::Text(text) => {
+            entry
+                .reasoning_text
+                .get_or_insert_with(String::new)
+                .push_str(text);
+            Some(text.clone())
+        }
+        aws_sdk_bedrockruntime::types::ReasoningContentBlockDelta::Signature(signature) => {
+            entry
+                .signature
+                .get_or_insert_with(String::new)
+                .push_str(signature);
+            None
+        }
+        aws_sdk_bedrockruntime::types::ReasoningContentBlockDelta::RedactedContent(blob) => {
+            // Base64 of concatenated fragments != concatenated base64 fragments,
+            // so accumulate raw bytes and re-encode.
+            let mut bytes = entry
+                .redacted_content
+                .as_deref()
+                .and_then(|existing| {
+                    base64::Engine::decode(&base64::engine::general_purpose::STANDARD, existing)
+                        .ok()
+                })
+                .unwrap_or_default();
+            bytes.extend_from_slice(blob.as_ref());
+            entry.redacted_content = Some(base64::Engine::encode(
+                &base64::engine::general_purpose::STANDARD,
+                bytes,
+            ));
+            None
+        }
+        _ => None,
+    }
+}
+
 // ============================================================================
 // Tool Configuration Builder
 // ============================================================================
@@ -1028,6 +1097,101 @@ mod tests {
         assert!(matches!(&content[1], ContentBlock::ToolUse(_)));
     }
 
+    #[test]
+    fn streaming_tool_calls_to_openai_attaches_reasoning_to_first_call_only() {
+        let calls = vec![
+            StreamingToolCall {
+                id: "call_1".to_string(),
+                name: "a".to_string(),
+                arguments: "{}".to_string(),
+            },
+            StreamingToolCall {
+                id: "call_2".to_string(),
+                name: "b".to_string(),
+                arguments: "{}".to_string(),
+            },
+        ];
+        let reasoning = crate::ai_types::BedrockExtraContent {
+            reasoning_text: Some("thinking".to_string()),
+            signature: Some("sig".to_string()),
+            redacted_content: None,
+        };
+
+        let openai = streaming_tool_calls_to_openai(calls, Some(reasoning));
+
+        let with_reasoning = openai
+            .iter()
+            .filter(|tc| {
+                tc.extra_content
+                    .as_ref()
+                    .and_then(|e| e.bedrock.as_ref())
+                    .is_some()
+            })
+            .count();
+        assert_eq!(
+            with_reasoning, 1,
+            "exactly one tool call carries the reasoning block"
+        );
+        let block = openai[0]
+            .extra_content
+            .as_ref()
+            .and_then(|e| e.bedrock.as_ref())
+            .expect("first tool call carries reasoning");
+        assert_eq!(block.reasoning_text.as_deref(), Some("thinking"));
+        assert_eq!(block.signature.as_deref(), Some("sig"));
+    }
+
+    #[test]
+    fn streaming_tool_calls_to_openai_without_reasoning_has_no_extra_content() {
+        let calls = vec![StreamingToolCall {
+            id: "call_1".to_string(),
+            name: "a".to_string(),
+            arguments: "{}".to_string(),
+        }];
+
+        let openai = streaming_tool_calls_to_openai(calls, None);
+
+        assert!(openai[0].extra_content.is_none());
+    }
+
+    #[test]
+    fn bedrock_reasoning_delta_accumulates_text_and_signature() {
+        use aws_sdk_bedrockruntime::types::{
+            ContentBlockDelta, ContentBlockDeltaEvent, ConverseStreamOutput,
+            ReasoningContentBlockDelta,
+        };
+
+        let mut reasoning = None;
+        let text_event = ConverseStreamOutput::ContentBlockDelta(
+            ContentBlockDeltaEvent::builder()
+                .content_block_index(0)
+                .delta(ContentBlockDelta::ReasoningContent(
+                    ReasoningContentBlockDelta::Text("let me ".to_string()),
+                ))
+                .build()
+                .unwrap(),
+        );
+        assert_eq!(
+            bedrock_stream_event_to_reasoning_delta(&text_event, &mut reasoning).as_deref(),
+            Some("let me ")
+        );
+
+        let sig_event = ConverseStreamOutput::ContentBlockDelta(
+            ContentBlockDeltaEvent::builder()
+                .content_block_index(0)
+                .delta(ContentBlockDelta::ReasoningContent(
+                    ReasoningContentBlockDelta::Signature("sig".to_string()),
+                ))
+                .build()
+                .unwrap(),
+        );
+        assert!(bedrock_stream_event_to_reasoning_delta(&sig_event, &mut reasoning).is_none());
+
+        let block = reasoning.expect("reasoning accumulated");
+        assert_eq!(block.reasoning_text.as_deref(), Some("let me "));
+        assert_eq!(block.signature.as_deref(), Some("sig"));
+    }
+
     #[test]
     fn openai_messages_to_bedrock_skips_cache_points_when_disabled() {
         let messages = vec![
diff --git a/backend/windmill-ai/src/ai_google.rs b/backend/windmill-ai/src/ai_google.rs
index 94d3ef65e0..4374cb8628 100644
--- a/backend/windmill-ai/src/ai_google.rs
+++ b/backend/windmill-ai/src/ai_google.rs
@@ -312,7 +312,7 @@ impl GeminiToolCallEvent {
     pub fn to_extra_content(&self) -> Option<ExtraContent> {
         self.thought_signature.as_ref().map(|sig| ExtraContent {
             google: Some(GoogleExtraContent { thought_signature: Some(sig.clone()) }),
-            bedrock: None,
+            ..Default::default()
         })
     }
 }
@@ -1001,10 +1001,8 @@ mod tests {
 
     #[test]
     fn gemini_streaming_without_usage_emits_no_usage_chunk() {
-        let parsed = GeminiParsedEvent {
-            text: Some("the answer".to_string()),
-            ..Default::default()
-        };
+        let parsed =
+            GeminiParsedEvent { text: Some("the answer".to_string()), ..Default::default() };
 
         let mut tool_call_index = 0;
         let chunks = gemini_event_to_openai_sse_chunks(
diff --git a/backend/windmill-ai/src/ai_types.rs b/backend/windmill-ai/src/ai_types.rs
index c6f171daf3..b80e237920 100644
--- a/backend/windmill-ai/src/ai_types.rs
+++ b/backend/windmill-ai/src/ai_types.rs
@@ -118,6 +118,22 @@ pub struct BedrockExtraContent {
     pub redacted_content: Option<String>,
 }
 
+/// Native-Anthropic reasoning block emitted in the same assistant turn as a
+/// tool call. Like Bedrock, Anthropic requires the thinking block (text +
+/// unmodified signature, or redacted bytes) to precede `tool_use` on replay when
+/// thinking is enabled, so it is round-tripped through the OpenAI-shaped tool call.
+#[derive(Deserialize, Serialize, Clone, Debug, Default)]
+pub struct AnthropicExtraContent {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub thinking: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub signature: Option<String>,
+    /// Base64 `data` of a redacted (encrypted) thinking block, when the provider
+    /// returned one instead of readable text.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub redacted_thinking: Option<String>,
+}
+
 /// Extra content for provider-specific metadata (e.g., Google thought signatures)
 #[derive(Deserialize, Serialize, Clone, Debug, Default)]
 pub struct ExtraContent {
@@ -125,6 +141,8 @@ pub struct ExtraContent {
     pub google: Option<GoogleExtraContent>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub bedrock: Option<BedrockExtraContent>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub anthropic: Option<AnthropicExtraContent>,
 }
 
 #[derive(Deserialize, Serialize, Clone, Debug)]
diff --git a/backend/windmill-ai/src/providers/anthropic.rs b/backend/windmill-ai/src/providers/anthropic.rs
index c2064f2029..d71de2f35f 100644
--- a/backend/windmill-ai/src/providers/anthropic.rs
+++ b/backend/windmill-ai/src/providers/anthropic.rs
@@ -92,6 +92,10 @@ pub enum AnthropicRequestContent {
         #[serde(skip_serializing_if = "Option::is_none")]
         cache_control: Option<CacheControl>,
     },
+    #[serde(rename = "thinking")]
+    Thinking { thinking: String, signature: String },
+    #[serde(rename = "redacted_thinking")]
+    RedactedThinking { data: String },
     #[serde(rename = "image")]
     Image { source: AnthropicBase64Source },
     #[serde(rename = "document")]
@@ -131,6 +135,26 @@ pub struct AnthropicMessage {
     pub content: Vec<AnthropicRequestContent>,
 }
 
+/// Adaptive thinking config for Anthropic native API. `summarized` display
+/// matches the chat proxy path (renders a summarized thinking stream).
+#[derive(Serialize, Debug)]
+pub struct AnthropicThinking {
+    pub r#type: &'static str,
+    pub display: &'static str,
+}
+
+impl AnthropicThinking {
+    fn adaptive() -> Self {
+        Self { r#type: "adaptive", display: "summarized" }
+    }
+}
+
+/// Carries the reasoning effort token alongside adaptive thinking.
+#[derive(Serialize, Debug)]
+pub struct AnthropicOutputConfig {
+    pub effort: String,
+}
+
 /// Anthropic-specific request structure for standard API
 #[derive(Serialize)]
 pub struct AnthropicRequest<'a> {
@@ -145,6 +169,10 @@ pub struct AnthropicRequest<'a> {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub temperature: Option<f32>,
     #[serde(skip_serializing_if = "Option::is_none")]
+    pub thinking: Option<AnthropicThinking>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub output_config: Option<AnthropicOutputConfig>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     pub max_tokens: Option<u32>,
     pub stream: bool,
 }
@@ -166,6 +194,10 @@ pub struct AnthropicVertexRequest {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub temperature: Option<f32>,
     #[serde(skip_serializing_if = "Option::is_none")]
+    pub thinking: Option<AnthropicThinking>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub output_config: Option<AnthropicOutputConfig>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     pub max_tokens: Option<u32>,
     pub stream: bool,
 }
@@ -189,6 +221,25 @@ fn convert_messages_to_anthropic(messages: &[OpenAIMessage]) -> Vec<AnthropicMes
             "assistant" => {
                 let mut content: Vec<AnthropicRequestContent> = Vec::new();
 
+                // Replay the turn's thinking block first: when thinking is enabled,
+                // Claude requires the thinking block (with its unmodified signature)
+                // to precede tool_use in the assistant turn it was emitted in. It is
+                // round-tripped on the tool call's extra_content (see AnthropicExtraContent).
+                if let Some(reasoning) = msg
+                    .tool_calls
+                    .as_ref()
+                    .and_then(|tcs| {
+                        tcs.iter().find_map(|tc| {
+                            tc.extra_content
+                                .as_ref()
+                                .and_then(|ec| ec.anthropic.as_ref())
+                        })
+                    })
+                    .and_then(anthropic_reasoning_block_from_extra)
+                {
+                    content.push(reasoning);
+                }
+
                 // Add text content if present
                 if let Some(ref c) = msg.content {
                     let text = extract_text_content(c);
@@ -246,6 +297,25 @@ fn convert_messages_to_anthropic(messages: &[OpenAIMessage]) -> Vec<AnthropicMes
     result
 }
 
+/// Rebuild an Anthropic thinking content block from the round-tripped
+/// [`AnthropicExtraContent`](crate::ai_types::AnthropicExtraContent). Returns
+/// None when there is no replayable block (thinking text without a signature is
+/// rejected by Anthropic, so it is dropped rather than sent).
+fn anthropic_reasoning_block_from_extra(
+    extra: &crate::ai_types::AnthropicExtraContent,
+) -> Option<AnthropicRequestContent> {
+    if let Some(data) = extra.redacted_thinking.as_deref() {
+        return Some(AnthropicRequestContent::RedactedThinking { data: data.to_string() });
+    }
+    match (extra.thinking.as_deref(), extra.signature.as_deref()) {
+        (Some(thinking), Some(signature)) => Some(AnthropicRequestContent::Thinking {
+            thinking: thinking.to_string(),
+            signature: signature.to_string(),
+        }),
+        _ => None,
+    }
+}
+
 /// Convert OpenAI content to Anthropic content blocks
 fn convert_content_to_anthropic(content: &Option<OpenAIContent>) -> Vec<AnthropicRequestContent> {
     let Some(content) = content else {
@@ -591,6 +661,17 @@ impl AnthropicQueryBuilder {
             }
         }
 
+        // Adaptive thinking rejects sampling params, so drop temperature when
+        // reasoning is on (Anthropic returns a hard 400 otherwise).
+        let (thinking, output_config, temperature) = match args.reasoning_effort {
+            Some(effort) => (
+                Some(AnthropicThinking::adaptive()),
+                Some(AnthropicOutputConfig { effort: effort.to_string() }),
+                None,
+            ),
+            None => (None, None, args.temperature),
+        };
+
         // Build request based on platform
         if self.is_vertex() {
             // For Vertex AI: no model field, anthropic_version in body
@@ -600,7 +681,9 @@ impl AnthropicQueryBuilder {
                 messages: anthropic_messages,
                 tools: tools_option,
                 tool_choice,
-                temperature: args.temperature,
+                temperature,
+                thinking,
+                output_config,
                 max_tokens,
                 stream: true,
             };
@@ -614,7 +697,9 @@ impl AnthropicQueryBuilder {
                 messages: anthropic_messages,
                 tools: tools_option,
                 tool_choice,
-                temperature: args.temperature,
+                temperature,
+                thinking,
+                output_config,
                 max_tokens,
                 stream: true,
             };
@@ -843,6 +928,123 @@ mod tests {
         assert!(has_header(&request.headers, "anthropic-beta", "some-beta"));
     }
 
+    #[test]
+    fn convert_messages_replays_thinking_block_before_tool_use() {
+        let tool_call = crate::ai_types::OpenAIToolCall {
+            id: "call_1".to_string(),
+            function: crate::ai_types::OpenAIFunction {
+                name: "lookup".to_string(),
+                arguments: "{}".to_string(),
+            },
+            r#type: "function".to_string(),
+            extra_content: Some(crate::ai_types::ExtraContent {
+                anthropic: Some(crate::ai_types::AnthropicExtraContent {
+                    thinking: Some("let me think".to_string()),
+                    signature: Some("sig-abc".to_string()),
+                    redacted_thinking: None,
+                }),
+                ..Default::default()
+            }),
+        };
+        let assistant = OpenAIMessage {
+            role: "assistant".to_string(),
+            tool_calls: Some(vec![tool_call]),
+            ..Default::default()
+        };
+
+        let messages = convert_messages_to_anthropic(&[assistant]);
+        let content = &messages[0].content;
+        match &content[0] {
+            AnthropicRequestContent::Thinking { thinking, signature } => {
+                assert_eq!(thinking, "let me think");
+                assert_eq!(signature, "sig-abc");
+            }
+            other => panic!("expected thinking block first, got {:?}", other),
+        }
+        assert!(matches!(
+            &content[1],
+            AnthropicRequestContent::ToolUse { .. }
+        ));
+    }
+
+    #[test]
+    fn convert_messages_drops_thinking_without_signature() {
+        let tool_call = crate::ai_types::OpenAIToolCall {
+            id: "call_1".to_string(),
+            function: crate::ai_types::OpenAIFunction {
+                name: "lookup".to_string(),
+                arguments: "{}".to_string(),
+            },
+            r#type: "function".to_string(),
+            extra_content: Some(crate::ai_types::ExtraContent {
+                anthropic: Some(crate::ai_types::AnthropicExtraContent {
+                    thinking: Some("unsigned".to_string()),
+                    signature: None,
+                    redacted_thinking: None,
+                }),
+                ..Default::default()
+            }),
+        };
+        let assistant = OpenAIMessage {
+            role: "assistant".to_string(),
+            tool_calls: Some(vec![tool_call]),
+            ..Default::default()
+        };
+
+        let messages = convert_messages_to_anthropic(&[assistant]);
+        // An unsigned thinking block can't be replayed, so only tool_use remains.
+        assert!(matches!(
+            messages[0].content[0],
+            AnthropicRequestContent::ToolUse { .. }
+        ));
+    }
+
+    #[test]
+    fn anthropic_request_serializes_adaptive_thinking_without_temperature() {
+        let request = AnthropicRequest {
+            model: "claude-opus-4-8",
+            system: None,
+            messages: vec![],
+            tools: None,
+            tool_choice: None,
+            temperature: None,
+            thinking: Some(AnthropicThinking::adaptive()),
+            output_config: Some(AnthropicOutputConfig { effort: "high".to_string() }),
+            max_tokens: Some(64000),
+            stream: true,
+        };
+
+        let body: serde_json::Value =
+            serde_json::from_str(&serde_json::to_string(&request).unwrap()).unwrap();
+        assert_eq!(body["thinking"]["type"], "adaptive");
+        assert_eq!(body["thinking"]["display"], "summarized");
+        assert_eq!(body["output_config"]["effort"], "high");
+        // Sampling params are rejected alongside adaptive thinking.
+        assert!(body.get("temperature").is_none());
+    }
+
+    #[test]
+    fn anthropic_request_omits_thinking_when_reasoning_off() {
+        let request = AnthropicRequest {
+            model: "claude-opus-4-8",
+            system: None,
+            messages: vec![],
+            tools: None,
+            tool_choice: None,
+            temperature: Some(0.5),
+            thinking: None,
+            output_config: None,
+            max_tokens: Some(64000),
+            stream: true,
+        };
+
+        let body: serde_json::Value =
+            serde_json::from_str(&serde_json::to_string(&request).unwrap()).unwrap();
+        assert!(body.get("thinking").is_none());
+        assert!(body.get("output_config").is_none());
+        assert_eq!(body["temperature"], 0.5);
+    }
+
     #[test]
     fn rejects_vertex_proxy_request_without_model() {
         let credentials = credentials(AIPlatform::GoogleVertexAi);
diff --git a/backend/windmill-ai/src/providers/bedrock.rs b/backend/windmill-ai/src/providers/bedrock.rs
index ddc5f33998..4405a50dcb 100644
--- a/backend/windmill-ai/src/providers/bedrock.rs
+++ b/backend/windmill-ai/src/providers/bedrock.rs
@@ -9,10 +9,10 @@
 use crate::{
     ai_bedrock::{
         bedrock_model_supports_prompt_caching, bedrock_stream_event_is_block_stop,
-        bedrock_stream_event_to_text, bedrock_stream_event_to_tool_delta,
-        bedrock_stream_event_to_tool_delta_with_block_index, bedrock_stream_event_to_tool_start,
-        bedrock_stream_event_to_tool_start_with_block_index, build_tool_config,
-        create_inference_config, format_bedrock_error, json_to_document,
+        bedrock_stream_event_to_reasoning_delta, bedrock_stream_event_to_text,
+        bedrock_stream_event_to_tool_delta, bedrock_stream_event_to_tool_delta_with_block_index,
+        bedrock_stream_event_to_tool_start, bedrock_stream_event_to_tool_start_with_block_index,
+        build_tool_config, create_inference_config, format_bedrock_error, json_to_document,
         openai_messages_to_bedrock, streaming_tool_calls_to_openai, BearerTokenProvider,
         BedrockClient, StreamingToolCall,
     },
@@ -641,57 +641,13 @@ fn bedrock_sse_chunks_for_event(
 
 /// Fold a `ReasoningContent` stream delta into the state's pending reasoning
 /// block. Returns the text delta (for a `reasoning_content` SSE chunk) when the
-/// event carried readable reasoning text.
+/// event carried readable reasoning text. Shares the worker path's folding so
+/// the two never drift.
 fn accumulate_reasoning_delta(
     event: &aws_sdk_bedrockruntime::types::ConverseStreamOutput,
     state: &mut BedrockSseStreamState,
 ) -> Option<String> {
-    let aws_sdk_bedrockruntime::types::ConverseStreamOutput::ContentBlockDelta(delta_event) = event
-    else {
-        return None;
-    };
-    let aws_sdk_bedrockruntime::types::ContentBlockDelta::ReasoningContent(reasoning) =
-        delta_event.delta()?
-    else {
-        return None;
-    };
-
-    let entry = state.reasoning.get_or_insert_with(Default::default);
-    match reasoning {
-        aws_sdk_bedrockruntime::types::ReasoningContentBlockDelta::Text(text) => {
-            entry
-                .reasoning_text
-                .get_or_insert_with(String::new)
-                .push_str(text);
-            Some(text.clone())
-        }
-        aws_sdk_bedrockruntime::types::ReasoningContentBlockDelta::Signature(signature) => {
-            entry
-                .signature
-                .get_or_insert_with(String::new)
-                .push_str(signature);
-            None
-        }
-        aws_sdk_bedrockruntime::types::ReasoningContentBlockDelta::RedactedContent(blob) => {
-            // Base64 of concatenated fragments != concatenated base64 fragments,
-            // so accumulate raw bytes and re-encode.
-            let mut bytes = entry
-                .redacted_content
-                .as_deref()
-                .and_then(|existing| {
-                    base64::Engine::decode(&base64::engine::general_purpose::STANDARD, existing)
-                        .ok()
-                })
-                .unwrap_or_default();
-            bytes.extend_from_slice(blob.as_ref());
-            entry.redacted_content = Some(base64::Engine::encode(
-                &base64::engine::general_purpose::STANDARD,
-                bytes,
-            ));
-            None
-        }
-        _ => None,
-    }
+    bedrock_stream_event_to_reasoning_delta(event, &mut state.reasoning)
 }
 
 async fn handle_bedrock_sdk_non_streaming(
@@ -942,6 +898,7 @@ impl BedrockQueryBuilder {
         tools: Option<&[ToolDef]>,
         model: &str,
         temperature: Option<f32>,
+        reasoning_effort: Option<&str>,
         max_tokens: Option<u32>,
         api_key: &str,
         region: &str,
@@ -977,6 +934,9 @@ impl BedrockQueryBuilder {
         let (bedrock_messages, system_prompts) =
             openai_messages_to_bedrock(&prepared_messages, enable_prompt_caching)?;
 
+        // Adaptive thinking rejects sampling params; drop temperature when reasoning is on.
+        let temperature = reasoning_effort.is_none().then_some(temperature).flatten();
+
         // Build inference configuration using shared helper
         let inference_config = create_inference_config(temperature, max_tokens.map(|t| t as i32));
 
@@ -994,6 +954,7 @@ impl BedrockQueryBuilder {
             system_prompts,
             inference_config,
             tool_config,
+            reasoning_effort,
             stream_event_sink,
         )
         .await
@@ -1008,6 +969,7 @@ impl BedrockQueryBuilder {
         system_prompts: Vec<aws_sdk_bedrockruntime::types::SystemContentBlock>,
         inference_config: Option<aws_sdk_bedrockruntime::types::InferenceConfiguration>,
         tool_config: Option<aws_sdk_bedrockruntime::types::ToolConfiguration>,
+        reasoning_effort: Option<&str>,
         stream_event_sink: Option<Box<dyn StreamEventSink>>,
     ) -> Result<ParsedResponse, Error> {
         tracing::debug!(
@@ -1035,6 +997,11 @@ impl BedrockQueryBuilder {
             request_builder = request_builder.set_tool_config(Some(config));
         }
 
+        if let Some(effort) = reasoning_effort {
+            request_builder =
+                request_builder.additional_model_request_fields(bedrock_thinking_fields(effort));
+        }
+
         let mut stream = request_builder
             .send()
             .await
@@ -1053,11 +1020,32 @@ impl BedrockQueryBuilder {
         let mut accumulated_tool_calls: HashMap<String, StreamingToolCall> = HashMap::new();
         let mut current_tool_use_id: Option<String> = None;
         let mut usage: Option<TokenUsage> = None;
+        // Claude reasoning block for the turn (only populated when thinking is on),
+        // attached to the first tool call for replay before toolUse.
+        let mut reasoning: Option<crate::ai_types::BedrockExtraContent> = None;
 
         // Process stream events using shared parsing functions
         loop {
             match stream.recv().await {
                 Ok(Some(event)) => {
+                    // Fold reasoning deltas into the turn's reasoning block (for
+                    // replay before toolUse, required by Claude when thinking is
+                    // on) and stream the readable summary as a thinking affordance.
+                    if let Some(reasoning_delta) =
+                        bedrock_stream_event_to_reasoning_delta(&event, &mut reasoning)
+                    {
+                        if let Some(processor) = stream_event_sink.as_ref() {
+                            processor
+                                .send(
+                                    StreamingEvent::ReasoningTokenDelta {
+                                        content: reasoning_delta,
+                                    },
+                                    &mut events_str,
+                                )
+                                .await?;
+                        }
+                    }
+
                     // Handle tool use start using shared parser
                     if let Some(tool_call) = bedrock_stream_event_to_tool_start(&event) {
                         current_tool_use_id = Some(tool_call.id.clone());
@@ -1143,8 +1131,10 @@ impl BedrockQueryBuilder {
             Some(accumulated_text)
         };
 
-        let tool_calls =
-            streaming_tool_calls_to_openai(accumulated_tool_calls.into_values().collect());
+        let tool_calls = streaming_tool_calls_to_openai(
+            accumulated_tool_calls.into_values().collect(),
+            reasoning,
+        );
 
         Ok(ParsedResponse::Text {
             content,
diff --git a/backend/windmill-ai/src/providers/google_ai.rs b/backend/windmill-ai/src/providers/google_ai.rs
index 650e11c0c7..21428903fa 100644
--- a/backend/windmill-ai/src/providers/google_ai.rs
+++ b/backend/windmill-ai/src/providers/google_ai.rs
@@ -153,13 +153,18 @@ impl GoogleAIQueryBuilder {
             (None, None)
         };
 
+        // Map the effort token onto Gemini's native thinking controls; without
+        // one, leave provider defaults untouched.
+        let thinking_config = args
+            .reasoning_effort
+            .map(|effort| gemini_thinking_config(args.model, effort));
+
         build_gemini_generation_config(
             args.temperature,
             args.max_tokens,
             response_mime_type,
             response_schema,
-            // Worker AI-agent requests carry no reasoning knob; keep provider defaults.
-            None,
+            thinking_config,
         )
     }
 }
diff --git a/backend/windmill-ai/src/providers/openai.rs b/backend/windmill-ai/src/providers/openai.rs
index efd7229ebb..bdb882679b 100644
--- a/backend/windmill-ai/src/providers/openai.rs
+++ b/backend/windmill-ai/src/providers/openai.rs
@@ -192,6 +192,15 @@ pub struct ResponsesApiTextFormat {
     pub format: ResponsesApiTextFormatConfig,
 }
 
+/// Reasoning config for the Responses API (`reasoning: { effort }`).
+/// The summary is intentionally not requested, mirroring the copilot chat: OpenAI
+/// gates reasoning summaries behind organization verification, so asking for one
+/// would fail the request for unverified orgs.
+#[derive(Serialize)]
+pub struct ResponsesApiReasoning {
+    pub effort: String,
+}
+
 #[derive(Serialize)]
 pub struct ResponsesApiRequest<'a> {
     pub model: &'a str,
@@ -204,6 +213,8 @@ pub struct ResponsesApiRequest<'a> {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub temperature: Option<f32>,
     #[serde(skip_serializing_if = "Option::is_none")]
+    pub reasoning: Option<ResponsesApiReasoning>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     pub max_output_tokens: Option<u32>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub text: Option<ResponsesApiTextFormat>,
@@ -409,6 +420,9 @@ impl OpenAIQueryBuilder {
             tools,
             stream: Some(true),
             temperature: args.temperature,
+            reasoning: args
+                .reasoning_effort
+                .map(|effort| ResponsesApiReasoning { effort: effort.to_string() }),
             max_output_tokens: args.max_tokens,
             text,
         };
@@ -464,6 +478,7 @@ impl OpenAIQueryBuilder {
             tools,
             stream: None, // Image generation doesn't use streaming
             temperature: args.temperature,
+            reasoning: None, // Image generation models don't take a reasoning effort
             max_output_tokens: args.max_tokens,
             text: None, // No structured output for image generation
         };
diff --git a/backend/windmill-ai/src/providers/other.rs b/backend/windmill-ai/src/providers/other.rs
index 7b4dab5ab5..f641daec64 100644
--- a/backend/windmill-ai/src/providers/other.rs
+++ b/backend/windmill-ai/src/providers/other.rs
@@ -35,6 +35,12 @@ pub struct OpenAICompletionRequest<'a> {
     #[serde(skip_serializing_if = "Option::is_none")]
     pub temperature: Option<f32>,
     #[serde(skip_serializing_if = "Option::is_none")]
+    pub reasoning_effort: Option<&'a str>,
+    /// DeepSeek disables reasoning via a `thinking` object rather than an effort
+    /// token (`reasoning_effort: "none"` is rejected by their API).
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub thinking: Option<serde_json::Value>,
+    #[serde(skip_serializing_if = "Option::is_none")]
     pub max_completion_tokens: Option<u32>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub response_format: Option<ResponseFormat>,
@@ -51,6 +57,32 @@ pub struct BuiltRequests {
     pub without_usage: String,
 }
 
+/// Provider-specific reasoning translation for OpenAI-compatible providers,
+/// mirroring the chat proxy's `applyReasoningToConfig`. Returns the effort token
+/// to send, an optional `thinking` object, and the temperature to keep:
+/// - DeepSeek disables reasoning via `thinking: {type: disabled}` (the effort
+///   token `"none"` is rejected by their API).
+/// - Mistral rejects sampling params when reasoning is on (greedy sampling
+///   requires `top_p == 1`), so temperature is dropped.
+fn provider_reasoning_fields<'a>(
+    provider: &AIProvider,
+    reasoning_effort: Option<&'a str>,
+    temperature: Option<f32>,
+) -> (Option<&'a str>, Option<serde_json::Value>, Option<f32>) {
+    let (effort, thinking) = match provider {
+        AIProvider::DeepSeek if reasoning_effort == Some("none") => {
+            (None, Some(serde_json::json!({ "type": "disabled" })))
+        }
+        _ => (reasoning_effort, None),
+    };
+    let temperature = if *provider == AIProvider::Mistral && reasoning_effort.is_some() {
+        None
+    } else {
+        temperature
+    };
+    (effort, thinking, temperature)
+}
+
 /// Query builder for providers using the OpenAI-compatible completion endpoint
 /// (Mistral, DeepSeek, Groq, TogetherAI, CustomAI, etc.)
 pub struct OtherQueryBuilder {
@@ -109,12 +141,17 @@ impl OtherQueryBuilder {
             None
         };
 
+        let (reasoning_effort, thinking, temperature) =
+            provider_reasoning_fields(&self.provider_kind, args.reasoning_effort, args.temperature);
+
         // Build request with stream_options for usage tracking
         let request_with_usage = OpenAICompletionRequest {
             model: args.model,
             messages: &prepared_messages,
             tools: args.tools,
-            temperature: args.temperature,
+            temperature,
+            reasoning_effort,
+            thinking: thinking.clone(),
             max_completion_tokens: args.max_tokens,
             response_format: response_format.clone(),
             tool_choice: tool_choice.clone(),
@@ -127,7 +164,9 @@ impl OtherQueryBuilder {
             model: args.model,
             messages: &prepared_messages,
             tools: args.tools,
-            temperature: args.temperature,
+            temperature,
+            reasoning_effort,
+            thinking,
             max_completion_tokens: args.max_tokens,
             response_format,
             tool_choice,
@@ -268,3 +307,50 @@ impl QueryBuilder for OtherQueryBuilder {
         }
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn deepseek_off_translates_to_thinking_disabled() {
+        let (effort, thinking, temperature) =
+            provider_reasoning_fields(&AIProvider::DeepSeek, Some("none"), Some(0.5));
+        // "none" is rejected as an effort token, so it becomes a thinking disable.
+        assert_eq!(effort, None);
+        assert_eq!(thinking, Some(serde_json::json!({ "type": "disabled" })));
+        assert_eq!(temperature, Some(0.5));
+    }
+
+    #[test]
+    fn deepseek_level_passes_effort_through() {
+        let (effort, thinking, _) =
+            provider_reasoning_fields(&AIProvider::DeepSeek, Some("high"), None);
+        assert_eq!(effort, Some("high"));
+        assert!(thinking.is_none());
+    }
+
+    #[test]
+    fn mistral_drops_temperature_when_reasoning_on() {
+        let (effort, thinking, temperature) =
+            provider_reasoning_fields(&AIProvider::Mistral, Some("high"), Some(0.7));
+        assert_eq!(effort, Some("high"));
+        assert!(thinking.is_none());
+        assert_eq!(temperature, None);
+    }
+
+    #[test]
+    fn mistral_keeps_temperature_when_reasoning_off() {
+        let (_, _, temperature) = provider_reasoning_fields(&AIProvider::Mistral, None, Some(0.7));
+        assert_eq!(temperature, Some(0.7));
+    }
+
+    #[test]
+    fn other_providers_pass_reasoning_and_temperature_through() {
+        let (effort, thinking, temperature) =
+            provider_reasoning_fields(&AIProvider::OpenRouter, Some("high"), Some(0.3));
+        assert_eq!(effort, Some("high"));
+        assert!(thinking.is_none());
+        assert_eq!(temperature, Some(0.3));
+    }
+}
diff --git a/backend/windmill-ai/src/query_builder.rs b/backend/windmill-ai/src/query_builder.rs
index 9830045f57..79fca4bd7d 100644
--- a/backend/windmill-ai/src/query_builder.rs
+++ b/backend/windmill-ai/src/query_builder.rs
@@ -12,6 +12,9 @@ pub struct BuildRequestArgs<'a> {
     pub tools: Option<&'a [ToolDef]>,
     pub model: &'a str,
     pub temperature: Option<f32>,
+    /// Provider-native reasoning effort token (e.g. `low`, `high`, `none`).
+    /// Each `build_request` maps it onto the provider's thinking config.
+    pub reasoning_effort: Option<&'a str>,
     pub max_tokens: Option<u32>,
     pub output_schema: Option<&'a OpenAPISchema>,
     pub output_type: &'a OutputType,
diff --git a/backend/windmill-ai/src/sse.rs b/backend/windmill-ai/src/sse.rs
index bb1b9d9731..66ff7da9de 100644
--- a/backend/windmill-ai/src/sse.rs
+++ b/backend/windmill-ai/src/sse.rs
@@ -9,7 +9,9 @@ use windmill_common::{error::Error, utils::rd_string};
 use crate::{
     ai_google::{parse_gemini_sse_event, GeminiUsageMetadata},
     ai_types::UrlCitation,
-    ai_types::{ExtraContent, GoogleExtraContent, OpenAIFunction, OpenAIToolCall},
+    ai_types::{
+        AnthropicExtraContent, ExtraContent, GoogleExtraContent, OpenAIFunction, OpenAIToolCall,
+    },
     query_builder::StreamEventSink,
     types::StreamingEvent,
 };
@@ -30,6 +32,10 @@ pub struct OpenAIChoiceDeltaToolCall {
 #[derive(Deserialize)]
 pub struct OpenAIChoiceDelta {
     pub content: Option<String>,
+    /// Reasoning summary streamed by providers that expose it (e.g. DeepSeek's
+    /// `reasoning_content`). Rendered as a "thinking" affordance.
+    #[serde(default)]
+    pub reasoning_content: Option<String>,
     pub tool_calls: Option<Vec<OpenAIChoiceDeltaToolCall>>,
 }
 
@@ -142,6 +148,13 @@ impl SSEParser for OpenAISSEParser {
 
             if let Some(mut choices) = event.choices.filter(|s| !s.is_empty()) {
                 if let Some(delta) = choices.remove(0).delta {
+                    if let Some(reasoning) = delta.reasoning_content.filter(|s| !s.is_empty()) {
+                        let event = StreamingEvent::ReasoningTokenDelta { content: reasoning };
+                        self.stream_event_processor
+                            .send(event, &mut self.events_str)
+                            .await?;
+                    }
+
                     if let Some(content) = delta.content.filter(|s| !s.is_empty()) {
                         self.accumulated_content.push_str(&content);
                         let event = StreamingEvent::TokenDelta { content };
@@ -216,6 +229,16 @@ pub enum AnthropicContentBlockStart {
         id: String,
         name: String,
     },
+    #[serde(rename = "thinking")]
+    Thinking {
+        #[serde(default)]
+        thinking: String,
+    },
+    #[serde(rename = "redacted_thinking")]
+    RedactedThinking {
+        #[serde(default)]
+        data: String,
+    },
     #[serde(other)]
     Unknown,
 }
@@ -240,6 +263,10 @@ pub enum AnthropicDelta {
     InputJsonDelta { partial_json: String },
     #[serde(rename = "citations_delta")]
     CitationsDelta { citation: AnthropicCitationDelta },
+    #[serde(rename = "thinking_delta")]
+    ThinkingDelta { thinking: String },
+    #[serde(rename = "signature_delta")]
+    SignatureDelta { signature: String },
     #[serde(other)]
     Unknown,
 }
@@ -292,6 +319,7 @@ pub enum AnthropicSSEEvent {
 #[allow(dead_code)]
 enum ContentBlockState {
     Text,
+    Thinking,
     ToolUse { id: String, name: String },
     Unknown,
 }
@@ -310,6 +338,11 @@ pub struct AnthropicSSEParser {
     pub used_websearch: bool,
     /// Token usage from message_delta event
     pub usage: Option<AnthropicUsage>,
+    /// Claude thinking block accumulated from `thinking`/`signature` deltas
+    /// (or a redacted block). Attached to the first tool call of the turn so it
+    /// can be replayed before `tool_use` (required by Claude when thinking is on).
+    pending_reasoning: Option<AnthropicExtraContent>,
+    reasoning_attached: bool,
 }
 
 impl AnthropicSSEParser {
@@ -323,6 +356,8 @@ impl AnthropicSSEParser {
             annotations: Vec::new(),
             used_websearch: false,
             usage: None,
+            pending_reasoning: None,
+            reasoning_attached: false,
         }
     }
 }
@@ -363,6 +398,17 @@ impl SSEParser for AnthropicSSEParser {
                             self.stream_event_processor
                                 .send(event, &mut self.events_str)
                                 .await?;
+                            // Attach the turn's thinking block to the first tool call so it
+                            // can be replayed before tool_use on the next request.
+                            let extra_content = if self.reasoning_attached {
+                                None
+                            } else {
+                                self.reasoning_attached = true;
+                                self.pending_reasoning.take().map(|anthropic| ExtraContent {
+                                    anthropic: Some(anthropic),
+                                    ..Default::default()
+                                })
+                            };
                             // Initialize tool call accumulator
                             self.accumulated_tool_calls.insert(
                                 index as i64,
@@ -370,10 +416,35 @@ impl SSEParser for AnthropicSSEParser {
                                     id,
                                     function: OpenAIFunction { name, arguments: String::new() },
                                     r#type: "function".to_string(),
-                                    extra_content: None,
+                                    extra_content,
                                 },
                             );
                         }
+                        AnthropicContentBlockStart::Thinking { thinking } => {
+                            self.content_blocks
+                                .insert(index, ContentBlockState::Thinking);
+                            let entry = self.pending_reasoning.get_or_insert_with(Default::default);
+                            if !thinking.is_empty() {
+                                entry
+                                    .thinking
+                                    .get_or_insert_with(String::new)
+                                    .push_str(&thinking);
+                                self.stream_event_processor
+                                    .send(
+                                        StreamingEvent::ReasoningTokenDelta { content: thinking },
+                                        &mut self.events_str,
+                                    )
+                                    .await?;
+                            }
+                        }
+                        AnthropicContentBlockStart::RedactedThinking { data } => {
+                            // Redacted blocks arrive whole (no deltas).
+                            self.content_blocks
+                                .insert(index, ContentBlockState::Unknown);
+                            self.pending_reasoning
+                                .get_or_insert_with(Default::default)
+                                .redacted_thinking = Some(data);
+                        }
                         AnthropicContentBlockStart::ServerToolUse { name, .. } => {
                             // Detect websearch tool usage
                             if name == "web_search" {
@@ -417,6 +488,34 @@ impl SSEParser for AnthropicSSEParser {
                                 title: citation.title,
                             });
                         }
+                        AnthropicDelta::ThinkingDelta { thinking } => {
+                            if let Some(ContentBlockState::Thinking) =
+                                self.content_blocks.get(&index)
+                            {
+                                self.pending_reasoning
+                                    .get_or_insert_with(Default::default)
+                                    .thinking
+                                    .get_or_insert_with(String::new)
+                                    .push_str(&thinking);
+                                self.stream_event_processor
+                                    .send(
+                                        StreamingEvent::ReasoningTokenDelta { content: thinking },
+                                        &mut self.events_str,
+                                    )
+                                    .await?;
+                            }
+                        }
+                        AnthropicDelta::SignatureDelta { signature } => {
+                            if let Some(ContentBlockState::Thinking) =
+                                self.content_blocks.get(&index)
+                            {
+                                self.pending_reasoning
+                                    .get_or_insert_with(Default::default)
+                                    .signature
+                                    .get_or_insert_with(String::new)
+                                    .push_str(&signature);
+                            }
+                        }
                         AnthropicDelta::Unknown => {}
                     }
                 }
@@ -495,6 +594,15 @@ impl SSEParser for GeminiSSEParser {
             return Ok(());
         };
 
+        if let Some(reasoning) = parsed.reasoning.filter(|s| !s.is_empty()) {
+            self.stream_event_processor
+                .send(
+                    StreamingEvent::ReasoningTokenDelta { content: reasoning },
+                    &mut self.events_str,
+                )
+                .await?;
+        }
+
         if let Some(text) = parsed.text {
             self.accumulated_content.push_str(&text);
             self.stream_event_processor
@@ -522,7 +630,7 @@ impl SSEParser for GeminiSSEParser {
 
             let extra_content = tool_call.thought_signature.map(|sig| ExtraContent {
                 google: Some(GoogleExtraContent { thought_signature: Some(sig) }),
-                bedrock: None,
+                ..Default::default()
             });
 
             self.accumulated_tool_calls.insert(
@@ -805,3 +913,76 @@ impl SSEParser for OpenAIResponsesSSEParser {
         Ok(())
     }
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn reasoning_token_delta_serializes_with_snake_case_tag() {
+        let event = StreamingEvent::ReasoningTokenDelta { content: "hmm".to_string() };
+        let json: serde_json::Value =
+            serde_json::from_str(&serde_json::to_string(&event).unwrap()).unwrap();
+        assert_eq!(json["type"], "reasoning_token_delta");
+        assert_eq!(json["content"], "hmm");
+    }
+
+    #[test]
+    fn openai_delta_parses_reasoning_content() {
+        // DeepSeek and similar stream reasoning under `reasoning_content`.
+        let delta: OpenAIChoiceDelta =
+            serde_json::from_str(r#"{"reasoning_content":"let me think"}"#).unwrap();
+        assert_eq!(delta.reasoning_content.as_deref(), Some("let me think"));
+    }
+
+    #[test]
+    fn parses_anthropic_thinking_events() {
+        let start: AnthropicSSEEvent = serde_json::from_str(
+            r#"{"type":"content_block_start","index":0,"content_block":{"type":"thinking","thinking":"x"}}"#,
+        )
+        .unwrap();
+        assert!(matches!(
+            start,
+            AnthropicSSEEvent::ContentBlockStart {
+                content_block: AnthropicContentBlockStart::Thinking { .. },
+                ..
+            }
+        ));
+
+        let thinking_delta: AnthropicSSEEvent = serde_json::from_str(
+            r#"{"type":"content_block_delta","index":0,"delta":{"type":"thinking_delta","thinking":"more"}}"#,
+        )
+        .unwrap();
+        assert!(matches!(
+            thinking_delta,
+            AnthropicSSEEvent::ContentBlockDelta {
+                delta: AnthropicDelta::ThinkingDelta { .. },
+                ..
+            }
+        ));
+
+        let signature_delta: AnthropicSSEEvent = serde_json::from_str(
+            r#"{"type":"content_block_delta","index":0,"delta":{"type":"signature_delta","signature":"sig"}}"#,
+        )
+        .unwrap();
+        assert!(matches!(
+            signature_delta,
+            AnthropicSSEEvent::ContentBlockDelta {
+                delta: AnthropicDelta::SignatureDelta { .. },
+                ..
+            }
+        ));
+
+        let redacted: AnthropicSSEEvent = serde_json::from_str(
+            r#"{"type":"content_block_start","index":0,"content_block":{"type":"redacted_thinking","data":"abc"}}"#,
+        )
+        .unwrap();
+        assert!(matches!(
+            redacted,
+            AnthropicSSEEvent::ContentBlockStart {
+                content_block: AnthropicContentBlockStart::RedactedThinking { .. },
+                ..
+            }
+        ));
+    }
+}
diff --git a/backend/windmill-ai/src/types.rs b/backend/windmill-ai/src/types.rs
index 8f864468db..6991e0e0d3 100644
--- a/backend/windmill-ai/src/types.rs
+++ b/backend/windmill-ai/src/types.rs
@@ -203,6 +203,10 @@ pub struct ProviderWithResource {
     pub kind: AIProvider,
     pub resource: ProviderResource,
     pub model: String,
+    /// Provider-native reasoning effort token (e.g. `low`, `high`, `none`).
+    /// Belongs to the model selection, so it rides on the provider config.
+    #[serde(default)]
+    pub reasoning_effort: Option<String>,
 }
 
 impl ProviderWithResource {
@@ -214,6 +218,12 @@ impl ProviderWithResource {
         &self.model
     }
 
+    /// The reasoning effort to thread to the provider, treating an empty string
+    /// (e.g. a cleared flow input) as unset.
+    pub fn get_reasoning_effort(&self) -> Option<&str> {
+        self.reasoning_effort.as_deref().filter(|s| !s.is_empty())
+    }
+
     pub async fn get_base_url(&self, db: &DB) -> Result<String, Error> {
         self.kind
             .get_base_url(self.resource.base_url.clone(), db)
@@ -365,6 +375,10 @@ pub struct AIAgentResult<'a> {
 pub enum StreamingEvent {
     /// Individual token from the AI response
     TokenDelta { content: String },
+    /// Individual token of the model's reasoning / thinking summary. Emitted
+    /// before the answer when reasoning is enabled; renderable as a "thinking"
+    /// affordance (thinking tokens bill regardless of whether they are shown).
+    ReasoningTokenDelta { content: String },
     /// Tool call has started
     ToolCall { call_id: String, function_name: String },
     /// Tool call arguments are complete
diff --git a/backend/windmill-worker/src/ai_executor.rs b/backend/windmill-worker/src/ai_executor.rs
index cc346f98d4..3bde5e56bb 100644
--- a/backend/windmill-worker/src/ai_executor.rs
+++ b/backend/windmill-worker/src/ai_executor.rs
@@ -869,6 +869,7 @@ pub async fn run_agent(
                         tool_defs.as_deref(),
                         args.provider.get_model(),
                         args.temperature,
+                        args.provider.get_reasoning_effort(),
                         args.max_completion_tokens,
                         api_key,
                         region,
@@ -895,6 +896,7 @@ pub async fn run_agent(
                 tools: tool_defs.as_deref(),
                 model: args.provider.get_model(),
                 temperature: args.temperature,
+                reasoning_effort: args.provider.get_reasoning_effort(),
                 max_tokens: args.max_completion_tokens,
                 output_schema: args.output_schema.as_ref(),
                 output_type,
diff --git a/cli/src/guidance/skills.gen.ts b/cli/src/guidance/skills.gen.ts
index cd2c856693..d0fa0e8aaf 100644
--- a/cli/src/guidance/skills.gen.ts
+++ b/cli/src/guidance/skills.gen.ts
@@ -5291,7 +5291,7 @@ Reference a specific resource using \`$res:\` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"},"reasoning_effort":{"type":"string","description":"Provider-native reasoning effort token (e.g. 'low', 'high', 'none') for models that support extended thinking. Optional; unset leaves the provider default."}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, reasoning_token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
   "raw-app": `---
 name: raw-app
 description: MUST use when creating raw apps.
diff --git a/frontend/src/lib/components/AIProviderPicker.svelte b/frontend/src/lib/components/AIProviderPicker.svelte
index f6f2a4f43c..4392a2d513 100644
--- a/frontend/src/lib/components/AIProviderPicker.svelte
+++ b/frontend/src/lib/components/AIProviderPicker.svelte
@@ -11,6 +11,7 @@
 	import ToggleButtonMore from './common/toggleButton-v2/ToggleButtonMore.svelte'
 	import Toggle from './Toggle.svelte'
 	import { saveConfig, removeConfig, isSameAsStoredConfig } from './aiProviderStorage'
+	import AIReasoningEffortPicker from './AIReasoningEffortPicker.svelte'
 
 	interface Props {
 		value: ProviderConfig | undefined
@@ -106,6 +107,8 @@
 			value.kind = selectedProvider
 			value.resource = ''
 			value.model = ''
+			// Reasoning effort is model-specific; reset it with the model.
+			value.reasoning_effort = undefined
 		}
 	}
 
@@ -225,6 +228,18 @@
 			/>
 		</div>
 
+		<!-- Reasoning Effort (shown once a model is selected) -->
+		{#if value?.model}
+			<div class="flex flex-col gap-1">
+				<p class="text-xs font-normal text-primary">reasoning effort</p>
+				<AIReasoningEffortPicker
+					bind:value={() => value?.reasoning_effort, (v) => value && (value.reasoning_effort = v)}
+					providerConfig={value}
+					{disabled}
+				/>
+			</div>
+		{/if}
+
 		<!-- Use as Default Checkbox -->
 		<div class="flex justify-end pt-1">
 			<Toggle
diff --git a/frontend/src/lib/components/AIReasoningEffortPicker.svelte b/frontend/src/lib/components/AIReasoningEffortPicker.svelte
new file mode 100644
index 0000000000..3ebf94c9bf
--- /dev/null
+++ b/frontend/src/lib/components/AIReasoningEffortPicker.svelte
@@ -0,0 +1,106 @@
+<script lang="ts">
+	import { Brain, ChevronDown } from 'lucide-svelte'
+	import DropdownV2 from './DropdownV2.svelte'
+	import Button from './common/button/Button.svelte'
+	import type { Item } from '$lib/utils'
+	import type { AIProvider } from '$lib/gen'
+	import { getReasoningCapability, explicitOffToken } from './copilot/reasoningRegistry'
+
+	interface Props {
+		// The provider-native reasoning token sent to the model (e.g. `high`,
+		// `none`), or undefined to leave the provider default untouched.
+		value: string | undefined
+		// The selected provider config; only `kind` and `model` are read.
+		providerConfig: { kind?: AIProvider; model?: string } | string | undefined
+		disabled?: boolean
+	}
+
+	let { value = $bindable(), providerConfig, disabled = false }: Props = $props()
+
+	let provider = $derived(
+		typeof providerConfig === 'object'
+			? (providerConfig?.kind as AIProvider | undefined)
+			: undefined
+	)
+	let model = $derived(typeof providerConfig === 'object' ? providerConfig?.model : undefined)
+
+	let capability = $derived(
+		provider && model
+			? getReasoningCapability(provider, model)
+			: { supported: false, levels: [], canDisable: false }
+	)
+
+	// The token that turns reasoning off on a model that reasons by default
+	// (e.g. Gemini/OpenAI 'none'). Undefined means omission already disables it,
+	// so leaving the effort unset is itself off.
+	let offToken = $derived(provider && model ? explicitOffToken(provider, model) : undefined)
+
+	// When the model reasons only on request (Anthropic/Bedrock), an unset effort
+	// already means off, so the default choice is labelled "off". Models that
+	// reason by default keep a distinct "Model default" plus an explicit off.
+	let offViaOmission = $derived(capability.canDisable && offToken === undefined)
+
+	// Label shown on the trigger for the current selection.
+	let currentLabel = $derived(
+		!value ? (offViaOmission ? 'off' : 'Model default') : value === offToken ? 'off' : value
+	)
+
+	let items = $derived.by((): Item[] => {
+		const opts: Item[] = [
+			{
+				displayName: offViaOmission ? 'off' : 'Model default',
+				selected: !value,
+				action: () => (value = undefined)
+			}
+		]
+		if (capability.canDisable && offToken !== undefined) {
+			opts.push({
+				displayName: 'off',
+				selected: value === offToken,
+				action: () => (value = offToken)
+			})
+		}
+		for (const level of capability.levels) {
+			opts.push({ displayName: level, selected: value === level, action: () => (value = level) })
+		}
+		return opts
+	})
+
+	// Clear a stale selection once the model no longer accepts it — either it
+	// can't reason at all, or the token isn't a valid level/off for this model
+	// (e.g. carrying `xhigh` from Opus onto a model that tops out at `high`).
+	// Sending an unsupported token would be rejected by the provider.
+	$effect(() => {
+		if (!provider || !model || value === undefined) return
+		// Valid values are exactly the selectable options: the levels, plus the
+		// explicit off token only when this model can actually disable reasoning.
+		const valid =
+			capability.supported &&
+			(capability.levels.includes(value) ||
+				(capability.canDisable && offToken !== undefined && value === offToken))
+		if (!valid) value = undefined
+	})
+</script>
+
+{#if !provider || !model}
+	<div class="text-xs text-tertiary">Select a model to configure reasoning effort.</div>
+{:else if !capability.supported}
+	<div class="text-xs text-tertiary">The selected model does not support reasoning effort.</div>
+{:else}
+	<DropdownV2 {items} {disabled} placement="bottom-start" fixedHeight={false} class="justify-start">
+		{#snippet buttonReplacement()}
+			<Button
+				nonCaptureEvent
+				{disabled}
+				unifiedSize="xs"
+				variant="default"
+				startIcon={{ icon: Brain }}
+				endIcon={{ icon: ChevronDown }}
+				btnClasses="w-full justify-between font-normal text-secondary"
+				title="Reasoning effort"
+			>
+				<span class="truncate">{currentLabel}</span>
+			</Button>
+		{/snippet}
+	</DropdownV2>
+{/if}
diff --git a/frontend/src/lib/components/aiProviderStorage.ts b/frontend/src/lib/components/aiProviderStorage.ts
index ce6af230bb..7f6d705d3a 100644
--- a/frontend/src/lib/components/aiProviderStorage.ts
+++ b/frontend/src/lib/components/aiProviderStorage.ts
@@ -50,6 +50,7 @@ export function isSameAsStoredConfig(config: ProviderConfig | undefined): boolea
 		storedConfig !== undefined &&
 		storedConfig.kind === config?.kind &&
 		storedConfig.resource === config?.resource &&
-		storedConfig.model === config?.model
+		storedConfig.model === config?.model &&
+		storedConfig.reasoning_effort === config?.reasoning_effort
 	)
 }
diff --git a/frontend/src/lib/components/copilot/reasoningRegistry.ts b/frontend/src/lib/components/copilot/reasoningRegistry.ts
index 4776e64c79..519c1a4021 100644
--- a/frontend/src/lib/components/copilot/reasoningRegistry.ts
+++ b/frontend/src/lib/components/copilot/reasoningRegistry.ts
@@ -319,7 +319,7 @@ export const DEEPSEEK_OFF_SENTINEL: ReasoningEffort = 'none'
  * model that reasons *by default* — omitting the field would silently keep
  * the default-on behavior. Undefined means omission is the correct off.
  */
-function explicitOffToken(provider: AIProvider, model: string): ReasoningEffort | undefined {
+export function explicitOffToken(provider: AIProvider, model: string): ReasoningEffort | undefined {
 	switch (reasoningProviderFamily(provider, model)) {
 		case 'googleai':
 			// Gemini 2.5/3 think by default (dynamic budget / level). The backend
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index ab81f1ea14..b0508b2719 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -475,6 +475,9 @@ components:
         model:
           type: string
           description: Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')
+        reasoning_effort:
+          type: string
+          description: Provider-native reasoning effort token (e.g. 'low', 'high', 'none') for models that support extended thinking. Optional; unset leaves the provider default.
       required:
         - kind
         - resource
@@ -1028,7 +1031,7 @@ components:
                 - $ref: '#/components/schemas/InputTransform'
               description: |
                 Boolean. If true, stream the AI response incrementally.
-                Streaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result
+                Streaming events include: token_delta, reasoning_token_delta, tool_call, tool_call_arguments, tool_execution, tool_result
             memory:
               $ref: '#/components/schemas/MemoryTransform'
             output_schema:
diff --git a/system_prompts/auto-generated/flow.md b/system_prompts/auto-generated/flow.md
index 7f70280e9f..70bec07fe6 100644
--- a/system_prompts/auto-generated/flow.md
+++ b/system_prompts/auto-generated/flow.md
@@ -295,4 +295,4 @@ Reference a specific resource using `$res:` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"},"reasoning_effort":{"type":"string","description":"Provider-native reasoning effort token (e.g. 'low', 'high', 'none') for models that support extended thinking. Optional; unset leaves the provider default."}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, reasoning_token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file
diff --git a/system_prompts/auto-generated/prompts.ts b/system_prompts/auto-generated/prompts.ts
index 9578f1b62d..434a52da63 100644
--- a/system_prompts/auto-generated/prompts.ts
+++ b/system_prompts/auto-generated/prompts.ts
@@ -2664,7 +2664,7 @@ class SqlQuery:
 
 export const OPENFLOW_SCHEMA = `## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`;
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"},"reasoning_effort":{"type":"string","description":"Provider-native reasoning effort token (e.g. 'low', 'high', 'none') for models that support extended thinking. Optional; unset leaves the provider default."}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, reasoning_token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\\nRange: 1-1000.\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default \`flow\`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`;
 
 export const CLI_COMMANDS = `# Windmill CLI Commands
 
diff --git a/system_prompts/auto-generated/skills/write-flow/SKILL.md b/system_prompts/auto-generated/skills/write-flow/SKILL.md
index 26f06fb667..a2a5d294e7 100644
--- a/system_prompts/auto-generated/skills/write-flow/SKILL.md
+++ b/system_prompts/auto-generated/skills/write-flow/SKILL.md
@@ -381,4 +381,4 @@ Reference a specific resource using `$res:` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"preserve_step_tags":{"type":"boolean","description":"If true and the flow runs on a custom worker tag, steps that declare their own non-empty tag run on it instead of inheriting the flow tag. Steps without their own tag still inherit the flow tag."},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \"yellow\", \"#ffff00\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."},"error_include_result":{"type":"boolean","description":"When stopping with an error (error_message set), embed the stopping step's own result inside the raised error object (as error.result) instead of discarding it. The top-level result stays { error }. Defaults to false."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","azure_foundry","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"},"reasoning_effort":{"type":"string","description":"Provider-native reasoning effort token (e.g. 'low', 'high', 'none') for models that support extended thinking. Optional; unset leaves the provider default."}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\nValid values: 'text' (default) - plain text response, 'image' - image generation\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\nStreaming events include: token_delta, reasoning_token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\nFormat: Array<{ bucket: string, key: string }> - S3 object references\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\nRange: 0.0 to 2.0 (provider-dependent)\n- 0.0 = deterministic, focused responses\n- 0.7 = balanced (common default)\n- 1.0+ = more creative/random\n"},"max_iterations":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Number. Limits how many times the agent can loop through reasoning and tool use.\nRange: 1-1000.\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"tag":{"type":"string","description":"Worker group tag for execution routing. If not set, the AI agent step runs on the flow's tag (default `flow`)"},"omit_output_from_conversation":{"type":"boolean","default":false,"description":"If true, this AI agent step does not persist its assistant or tool messages to the flow conversation when chat mode is enabled."},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}
\ No newline at end of file

From dce247c6d2678a2c95bd728027e17ae3965638e2 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sat, 4 Jul 2026 15:19:49 +0000
Subject: [PATCH 40/76] feat(pipeline): write-audit-publish for materialization
 data tests (#9911)

* feat(pipeline): write-audit-publish for materialization data tests (EE)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs: EE worktree E0583 troubleshooting + duckdb feature check row

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs: clarify EE symlink example (absolute target, EE repo layout)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipeline): move bootstrap DDL inside guarded WAP transaction

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor(pipeline): move WAP guard SQL builder into EE, OSS keeps placement only

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: bump ee-repo-ref to EE branch rebased on EE main

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* style: reword test comment as current invariant per AGENTS.md

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: bump ee-repo-ref (EE module doc update)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor(pipeline): OSS emits typed materialize plan, EE owns WAP transform

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* test: make rewrite assertion build-aware; refresh oss module doc

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 7be0bad1a6d6b5c3a107c0a2cd4bf003c36ec34c

This commit updates the EE repository reference after PR #644 was merged in windmill-ee-private.

Previous ee-repo-ref: 63cabae75329429f647e01083936d70f8197dc9e

New ee-repo-ref: 7be0bad1a6d6b5c3a107c0a2cd4bf003c36ec34c

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 backend/ee-repo-ref.txt                       |   2 +-
 .../windmill-parser/src/sql_materialize.rs    | 213 +++++++++++++++---
 .../src/pipeline_advanced_oss.rs              |  27 ++-
 .../windmill-worker/src/duckdb_executor.rs    |  43 +++-
 docs/ducklake-materialization.md              |  20 +-
 docs/enterprise.md                            |  16 ++
 docs/pipelines-vs-dbt.md                      |   6 +
 docs/validation.md                            |   1 +
 8 files changed, 289 insertions(+), 39 deletions(-)

diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index 0cd164d1ce..e31f18cdd0 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-6f5fe0f7f56696fbef5a8349da38496c32e71666
+7be0bad1a6d6b5c3a107c0a2cd4bf003c36ec34c
diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index e40cd0f057..d684cf431b 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -440,7 +440,6 @@ impl<'a> MaterializeCodegen<'a> {
                 "CREATE TABLE IF NOT EXISTS {t} AS SELECT * FROM ({sel}) WHERE false;"
             ));
         }
-
         out.push("BEGIN TRANSACTION;".to_string());
         // The rows to write, with the partition column appended when partitioned.
         let source = if self.partitioned {
@@ -578,7 +577,7 @@ impl<'a> MaterializeCodegen<'a> {
         ];
         // Hard-delete-close (`deletes=close`): the keys that vanished from the
         // snapshot — present-and-current in the table, absent from the SELECT.
-        // Captured before the transaction (like `changed`) and disjoint from it (a
+        // Captured before the close (like `changed`) and disjoint from it (a
         // key is either in the snapshot or not), so the two closes never overlap.
         if close_deleted {
             out.push(format!(
@@ -646,6 +645,44 @@ pub fn snapshot_capture_sql(alias: &str) -> String {
 /// from the target ducklake's config and passes it in as `target_attach`.
 pub const TARGET_ALIAS: &str = "_wm_target";
 
+/// Structural role of one statement in a [`MaterializePlan`]. The public build
+/// executes the plan verbatim, so the kinds are pure metadata there; they exist
+/// so a downstream assembler (`pipeline_advanced::finalize_materialize_query`)
+/// can reason about the plan without parsing SQL.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum MaterializeStmtKind {
+    /// Pre-write statement: user setup, the target ATTACH, referenced-asset
+    /// ATTACHes.
+    Setup,
+    /// Write work against the target: bootstrap DDL, SCD2 temp-table captures,
+    /// the mutation itself, the `_current` view.
+    Write,
+    /// The `BEGIN TRANSACTION;` marker emitted by the strategy codegen.
+    TxnBegin,
+    /// The `COMMIT;` marker emitted by the strategy codegen.
+    TxnCommit,
+    /// The trailing one-row summary read (asset / rows / snapshot_id /
+    /// data_tests breakdown).
+    Summary,
+}
+
+/// One planned statement: its structural role and the SQL text.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct MaterializeStmt {
+    pub kind: MaterializeStmtKind,
+    pub sql: String,
+}
+
+/// The full ordered materialization plan [`build_wrap_blocks`] produces:
+/// statements in execution order plus the compiled data-test checks (also
+/// embedded in the summary statement's breakdown). Assembled into the final
+/// statement list by `pipeline_advanced::finalize_materialize_query`.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct MaterializePlan {
+    pub stmts: Vec<MaterializeStmt>,
+    pub checks: Vec<DataTestCheck>,
+}
+
 /// Assemble the full ordered statement list the DuckDB executor runs for a
 /// managed `// materialize` script. This is the single entry point the worker
 /// calls; it composes the already-tested pieces (classifier split → target
@@ -659,6 +696,14 @@ pub const TARGET_ALIAS: &str = "_wm_target";
 /// the full `<name>/<table>` for the result summary. The trailing statement is
 /// a one-row summary read (asset / rows / snapshot_id) that is both the job's
 /// result (a useful preview) and what the worker records.
+///
+/// Returns a [`MaterializePlan`] — the statements plus their structural role
+/// and the compiled data-test checks — rather than raw SQL: the executor hands
+/// the plan to `windmill_common::pipeline_advanced::finalize_materialize_query`
+/// (which this crate cannot depend on), whose public-build implementation
+/// assembles the statements verbatim. Everything this function produces runs
+/// as-is on the public build; the plan's structure is metadata about it, not a
+/// second mode.
 pub fn build_wrap_blocks(
     plan: &WrapPlan,
     target_attach: &str,
@@ -669,17 +714,9 @@ pub fn build_wrap_blocks(
     partitioned: bool,
     strategy: MaterializeStrategy,
     tests: &[DataTestResolved],
-) -> Result<Vec<String>, String> {
+) -> Result<MaterializePlan, String> {
     let target_qualified = format!("{TARGET_ALIAS}.{target_table}");
     let scd2 = matches!(strategy, MaterializeStrategy::Scd2 { .. });
-    let cg = MaterializeCodegen {
-        target_qualified: &target_qualified,
-        select_sql: &plan.output,
-        partition_col,
-        partition_value_sql,
-        partitioned,
-        strategy,
-    };
     let ctx = DataTestCtx {
         target_qualified: &target_qualified,
         asset_path,
@@ -689,27 +726,49 @@ pub fn build_wrap_blocks(
         scd2,
     };
     let test_sql = build_data_test_checks(tests, &ctx)?;
-    let mut blocks: Vec<String> = Vec::new();
+    let cg = MaterializeCodegen {
+        target_qualified: &target_qualified,
+        select_sql: &plan.output,
+        partition_col,
+        partition_value_sql,
+        partitioned,
+        strategy,
+    };
+    let mut stmts: Vec<MaterializeStmt> = Vec::new();
+    let setup = |sql: String| MaterializeStmt { kind: MaterializeStmtKind::Setup, sql };
     // Setup blocks come from the splitter with their `;` stripped — re-terminate
     // each so that when the executor re-joins and re-splits the assembled query,
     // adjacent statements (e.g. the user ATTACH and the synthetic target ATTACH)
     // don't merge into one malformed statement.
-    blocks.extend(plan.setup.iter().map(|s| terminate(s)));
-    blocks.push(target_attach.to_string());
+    stmts.extend(plan.setup.iter().map(|s| setup(terminate(s))));
+    stmts.push(setup(target_attach.to_string()));
     // Referenced-asset ATTACHes (relationships tests) — read-only, before the
     // write and the summary that probes them.
-    blocks.extend(test_sql.attaches);
-    blocks.extend(cg.statements());
+    stmts.extend(test_sql.attaches.into_iter().map(setup));
+    // Classify the codegen statements by matching the exact transaction-marker
+    // literals this module emits (`BEGIN TRANSACTION;` / `COMMIT;`); everything
+    // else the codegen produces is write work.
+    stmts.extend(cg.statements().into_iter().map(|sql| {
+        let kind = match sql.as_str() {
+            "BEGIN TRANSACTION;" => MaterializeStmtKind::TxnBegin,
+            "COMMIT;" => MaterializeStmtKind::TxnCommit,
+            _ => MaterializeStmtKind::Write,
+        };
+        MaterializeStmt { kind, sql }
+    }));
     // The summary read carries the per-test breakdown (when any tests apply).
-    blocks.push(materialize_result_sql(
-        &target_qualified,
-        asset_path,
-        partition_col,
-        partition_value_sql,
-        partitioned,
-        &test_sql.checks,
-    ));
-    Ok(blocks)
+    stmts.push(MaterializeStmt {
+        kind: MaterializeStmtKind::Summary,
+        sql: materialize_result_sql(
+            &target_qualified,
+            asset_path,
+            partition_col,
+            partition_value_sql,
+            partitioned,
+            &test_sql.checks,
+        ),
+    });
+    Ok(MaterializePlan { stmts, checks: test_sql.checks })
 }
 
 /// The trailing one-row summary the materialize run returns: the asset it
@@ -1454,7 +1513,7 @@ mod tests {
     #[test]
     fn build_wrap_blocks_orders_setup_attach_codegen_snapshot() {
         let plan = ok("ATTACH 'ducklake://main' AS dl;\n SELECT a FROM dl.orders WHERE d = '{p}'");
-        let blocks = build_wrap_blocks(
+        let blocks: Vec<String> = build_wrap_blocks(
             &plan,
             "ATTACH 'ducklake:postgres:…' AS _wm_target (DATA_PATH 's3://b/p');",
             "orders_daily",
@@ -1465,7 +1524,11 @@ mod tests {
             MaterializeStrategy::Replace,
             &[],
         )
-        .unwrap();
+        .unwrap()
+        .stmts
+        .into_iter()
+        .map(|s| s.sql)
+        .collect();
         // setup block first, then the target ATTACH, then codegen, then result.
         assert!(blocks[0].starts_with("ATTACH 'ducklake://main' AS dl"));
         // every setup block must be `;`-terminated so re-splitting can't merge it
@@ -1488,6 +1551,102 @@ mod tests {
         assert!(last.contains("ducklake_snapshots('_wm_target')"));
     }
 
+    // -- materialize plan structure ------------------------------------------
+
+    fn plan_for(strategy: MaterializeStrategy, partitioned: bool) -> MaterializePlan {
+        let plan = ok("SELECT a, b FROM src");
+        build_wrap_blocks(
+            &plan,
+            "ATTACH 'ducklake:…' AS _wm_target;",
+            "orders",
+            "main/orders",
+            "_wm_partition",
+            "'2026-06-19'",
+            partitioned,
+            strategy,
+            &[
+                DataTestResolved::BuiltIn(DataTest::NotNull { column: "a".into() }),
+                DataTestResolved::BuiltIn(DataTest::Unique { column: "b".into() }),
+            ],
+        )
+        .unwrap()
+    }
+
+    fn kidx(plan: &MaterializePlan, pred: impl Fn(&MaterializeStmt) -> bool) -> usize {
+        plan.stmts
+            .iter()
+            .position(|s| pred(s))
+            .expect("stmt present")
+    }
+
+    #[test]
+    fn plan_tags_structure_and_carries_checks() {
+        use MaterializeStmtKind::*;
+        let plan = plan_for(MaterializeStrategy::Replace, true);
+        // leading statements are Setup, ending with the target ATTACH
+        assert!(plan.stmts[0].kind == Setup);
+        assert!(plan
+            .stmts
+            .iter()
+            .take_while(|s| s.kind == Setup)
+            .any(|s| s.sql.contains("_wm_target")));
+        // txn markers are tagged, everything between them is Write
+        let begin = kidx(&plan, |s| s.kind == TxnBegin);
+        let commit = kidx(&plan, |s| s.kind == TxnCommit);
+        assert!(begin < commit);
+        assert!(plan.stmts[begin + 1..commit]
+            .iter()
+            .all(|s| s.kind == Write));
+        // bootstrap DDL is Write work (it targets the table, not the session)
+        let bootstrap = kidx(&plan, |s| s.sql.starts_with("CREATE TABLE IF NOT EXISTS"));
+        assert_eq!(plan.stmts[bootstrap].kind, Write);
+        // summary is last and carries the breakdown; checks ride along
+        let last = plan.stmts.last().unwrap();
+        assert_eq!(last.kind, Summary);
+        assert!(last.sql.contains("AS data_tests"));
+        assert_eq!(plan.checks.len(), 2);
+        assert!(plan.checks[0].name.contains("not_null(a)"));
+    }
+
+    #[test]
+    fn plan_whole_table_replace_has_no_txn_markers() {
+        use MaterializeStmtKind::*;
+        let plan = plan_for(MaterializeStrategy::Replace, false);
+        assert!(!plan.stmts.iter().any(|s| s.kind == TxnBegin));
+        assert!(!plan.stmts.iter().any(|s| s.kind == TxnCommit));
+        assert_eq!(
+            plan.stmts.iter().filter(|s| s.kind == Write).count(),
+            1,
+            "single atomic CREATE OR REPLACE"
+        );
+    }
+
+    #[test]
+    fn plan_scd2_captures_are_write_kind() {
+        use MaterializeStmtKind::*;
+        let plan = plan_for(
+            MaterializeStrategy::Scd2 { key: "a".into(), track: vec![], close_deleted: false },
+            false,
+        );
+        let capture = kidx(&plan, |s| s.sql.contains("TEMP TABLE _wm_scd2_changed"));
+        assert_eq!(plan.stmts[capture].kind, Write);
+        // no test declared ⇒ empty checks
+        let plain = ok("SELECT a FROM src");
+        let no_tests = build_wrap_blocks(
+            &plain,
+            "ATTACH 'ducklake:…' AS _wm_target;",
+            "orders",
+            "main/orders",
+            "_wm_partition",
+            "''",
+            false,
+            MaterializeStrategy::Append,
+            &[],
+        )
+        .unwrap();
+        assert!(no_tests.checks.is_empty());
+    }
+
     // -- data tests ---------------------------------------------------------
 
     fn ctx_partitioned() -> DataTestCtx<'static> {
diff --git a/backend/windmill-common/src/pipeline_advanced_oss.rs b/backend/windmill-common/src/pipeline_advanced_oss.rs
index 15bb4b127a..3220b251a0 100644
--- a/backend/windmill-common/src/pipeline_advanced_oss.rs
+++ b/backend/windmill-common/src/pipeline_advanced_oss.rs
@@ -1,12 +1,27 @@
-//! OSS fallback: pipeline partition backfills are an enterprise feature;
-//! their implementations live in windmill-ee-private (see
-//! `pipeline_advanced_ee`). In the public build the entry points report that
-//! the enterprise edition is required. (Freshness lives elsewhere: the
-//! fresh/stale badge is CE in the assets API, the active watchdog is
-//! windmill-queue's `freshness_watchdog`.)
+//! OSS fallback for enterprise pipeline features (implementations in
+//! windmill-ee-private, see `pipeline_advanced_ee`): partition backfill
+//! reports that the enterprise edition is required, and materialization-plan
+//! assembly runs the plan verbatim — dbt-like commit-then-test instead of the
+//! enterprise write-audit-publish. (Freshness lives elsewhere: the fresh/stale
+//! badge is CE in the assets API, the active watchdog is windmill-queue's
+//! `freshness_watchdog`.)
 
 use crate::error::Error;
 
 pub fn backfill_todo() -> Error {
     Error::internal_err("Pipeline partition backfill requires the enterprise edition".to_string())
 }
+
+/// Assemble a materialization plan into the statement list the DuckDB executor
+/// runs. The public build executes the plan verbatim — dbt-like
+/// commit-then-test: a failing `// data_test` still fails the run and stops
+/// the cascade, but the written slice stays live. The enterprise
+/// implementation (`pipeline_advanced_ee`) instead restructures the plan into
+/// write-audit-publish, where a failing test rolls the whole write back before
+/// anything is published.
+pub fn finalize_materialize_query(
+    plan: windmill_parser::sql_materialize::MaterializePlan,
+    _asset_path: &str,
+) -> Vec<String> {
+    plan.stmts.into_iter().map(|s| s.sql).collect()
+}
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index 09e3158200..a90c80acfc 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -242,7 +242,7 @@ fn build_materialized_query(
         }
     }
 
-    let blocks = build_wrap_blocks(
+    let mat_plan = build_wrap_blocks(
         &plan,
         &synthetic_attach,
         table,
@@ -254,6 +254,11 @@ fn build_materialized_query(
         &resolved,
     )
     .map_err(Error::ExecutionErr)?;
+    // Enterprise seam: assembles the plan into the final statement list —
+    // verbatim on the public build (commit-then-test), restructured into
+    // write-audit-publish (guarded transaction, rollback on violation) on EE.
+    let blocks =
+        windmill_common::pipeline_advanced::finalize_materialize_query(mat_plan, &m.target_path);
 
     Ok(Some((Some(blocks.join("\n")), meta)))
 }
@@ -1240,6 +1245,11 @@ pub async fn do_duckdb(
             // committed (like dbt), so the slice is recorded `Failed` and the
             // cascade stops. The error lists *every* test so the user sees the
             // whole picture, not just the first failure.
+            // Under enterprise write-audit-publish an in-transaction guard
+            // (the enterprise `finalize_materialize_query` restructure) already aborted a failing run before
+            // COMMIT — that surfaces on the Err path above with the same
+            // breakdown in the error string, and nothing was published; this
+            // post-commit path then only ever sees passing counts.
             let tests = extract_data_tests(&result);
             // Captured output schema (gap #2a) — recorded only on the successful
             // path below, not on the failure paths (a failed run shouldn't
@@ -2498,6 +2508,37 @@ mod tests {
         );
     }
 
+    // The rewritten SQL is the plan assembled by
+    // `pipeline_advanced::finalize_materialize_query`, so what it contains is
+    // build-dependent: the public assembly runs the plan verbatim (tests only
+    // in the post-commit summary breakdown), the enterprise assembly adds the
+    // in-transaction write-audit-publish guard (whose shape/placement is
+    // tested next to its implementation in windmill-common's
+    // `pipeline_advanced_ee`).
+    #[test]
+    fn materialize_rewrite_carries_data_test_summary() {
+        let script = "-- materialize ducklake://main/orders\n\
+                      -- data_test not_null id\n\
+                      SELECT id FROM dl.src";
+        let (rewritten, meta) =
+            build_materialized_query(script, None, &std::collections::HashMap::new())
+                .expect("materialize builds")
+                .expect("materialize present");
+        let rewritten = rewritten.expect("managed mode rewrites the query");
+        assert!(rewritten.contains("AS data_tests"));
+        assert_eq!(meta.n_data_tests, 1);
+        #[cfg(not(feature = "private"))]
+        assert!(
+            !rewritten.contains("error("),
+            "public assembly is commit-then-test (no guard)"
+        );
+        #[cfg(all(feature = "private", feature = "enterprise"))]
+        assert!(
+            rewritten.contains("error("),
+            "enterprise assembly places the WAP guard"
+        );
+    }
+
     // Tests for parse_attach_db_resource function
     #[test]
     fn test_parse_attach_db_resource_postgres_res_prefix() {
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index 83c25f3eec..f0a8c38f45 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -354,10 +354,22 @@ load-bearing.
   repeats the natural key across closed versions, so an unscoped
   `unique(<key>)` would fail the run on the second change of any key. Custom
   tests see the raw history and scope themselves.
-- **Commit-then-test.** Like dbt, the write commits before tests run; a failed
-  test fails the *run* (and records `Failed`, so downstream cascade stops) but
-  does not roll back the committed snapshot. Time-travel still lets you inspect
-  exactly what failed.
+- **Commit-then-test (public) / write-audit-publish (enterprise).** In the
+  public build, like dbt, the write commits before tests run; a failed test
+  fails the *run* (and records `Failed`, so downstream cascade stops) but does
+  not roll back the committed snapshot — time-travel still lets you inspect
+  exactly what failed. Enterprise upgrades this to write-audit-publish: the
+  same checks also run *inside* the write transaction as a guard statement
+  that raises on any violation, aborting the run before `COMMIT` — a failing
+  slice is never published, readers keep the previous version, and no snapshot
+  is created (even a *first* run of a new asset rolls back to "no table").
+  The whole mechanism lives in the enterprise repo:
+  `sql_materialize::build_wrap_blocks` produces a typed statement plan
+  (`MaterializePlan` — statements plus structural kinds and the compiled
+  checks), and `pipeline_advanced::finalize_materialize_query` assembles it —
+  verbatim on the public build, restructured into the guarded transaction on
+  EE. The public build thus carries only plan metadata, not the
+  write-audit-publish transform itself.
 - **Custom = DuckDB SQL, server worker.** The escape hatch fetches the deployed
   script's content (a single DuckDB `SELECT`/CTE returning the violating rows —
   it's embedded as a subquery, so a multi-statement body is rejected with a
diff --git a/docs/enterprise.md b/docs/enterprise.md
index 5ab869a651..229585ad25 100644
--- a/docs/enterprise.md
+++ b/docs/enterprise.md
@@ -47,3 +47,19 @@ cargo check --features enterprise,private
 # EE code that also requires license validation
 cargo check --features enterprise,private,license
 ```
+
+## Troubleshooting
+
+**`E0583: file not found for module <x>_ee` on `cargo check --features enterprise,private`**:
+the EE worktree is behind the OSS code it must satisfy. Fast-forward it to EE
+`origin/main` — EE worktrees are shallow clones, so run `git fetch --unshallow origin`
+first or the merge fails with "refusing to merge unrelated histories". After the
+fast-forward, any `*_ee.rs` file that is *new* since the worktree was created still
+needs its OSS symlink made by hand (worktree setup only links files that existed then).
+The EE repo has no `backend/` prefix — crates sit at its root. Use an absolute target
+(a relative one would resolve against the link's directory, not your cwd):
+
+```bash
+# from the windmill repo root
+ln -s ~/windmill-ee-private/<crate>/src/<x>_ee.rs backend/<crate>/src/<x>_ee.rs
+```
diff --git a/docs/pipelines-vs-dbt.md b/docs/pipelines-vs-dbt.md
index 4ad8e65fb9..126a4ac215 100644
--- a/docs/pipelines-vs-dbt.md
+++ b/docs/pipelines-vs-dbt.md
@@ -75,6 +75,12 @@ the annotation→verifier pattern that column-lineage will reuse. The keyword is
 `data_test`, not `test`, to stay clear of the unrelated `// test:` CI-test
 annotation.
 
+Enterprise goes one step *beyond* dbt here: write-audit-publish. dbt commits
+the model then tests it, so a failing test leaves the bad table live for BI
+readers; the enterprise build runs the same probes inside the write
+transaction and rolls back on violation, so a failing slice is never
+published (see `ducklake-materialization.md` §"Scoping decisions").
+
 ### 2. Incremental materializations
 
 See [Incremental deep-dive](#incremental-deep-dive) below.
diff --git a/docs/validation.md b/docs/validation.md
index ba775d01cf..3bfd1325ce 100644
--- a/docs/validation.md
+++ b/docs/validation.md
@@ -10,6 +10,7 @@ After making changes, run the appropriate checks and fix all errors before consi
 | Enterprise code (`*_ee.rs`) | `cargo check --features enterprise,private` | Also do EE PR workflow (see `docs/enterprise.md`) |
 | Enterprise + license-gated code | `cargo check --features enterprise,private,license` | When the feature requires a valid license key |
 | Kafka trigger code | `cargo check --features kafka` | |
+| DuckDB executor code | `cargo check -p windmill-worker --features duckdb` | `duckdb_executor.rs` (and its `#[cfg(test)]` tests) only compile with this flag — a plain check/test silently skips them |
 | Native trigger code | `cargo check --features native_trigger` | |
 | Parquet code | `cargo check --features parquet` | |
 | Multiple gated modules | `cargo check --features enterprise,parquet` | Combine only the flags you need |

From 33521505dbc34f22b575d21fda1cc76d698a8840 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sat, 4 Jul 2026 15:23:23 +0000
Subject: [PATCH 41/76] feat(ducklake): scheduled lake maintenance (expiry,
 compaction, orphan cleanup) (#9916)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(ducklake): scheduled lake maintenance (snapshot expiry, compaction, orphan cleanup)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(ducklake): review fixes — starts_with not LIKE, CE license-lapse escape

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs(ducklake): auth-contract docs + _unchecked rename per codex review

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor(ducklake): move maintenance payload construction into EE module

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(ducklake): fall through to script resolution for non-managed reserved-prefix schedules

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs(ducklake): document accepted pre-existing-schedule limitation on the reserved prefix

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(ducklake): CE save-off clears the managed schedule row and queued occurrence

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 2fab310d4f50ed7c34857d69c9b854f4491bf217

This commit updates the EE repository reference after PR #645 was merged in windmill-ee-private.

Previous ee-repo-ref: fff1fd830a36beba732486f05941ec243cf6b640

New ee-repo-ref: 2fab310d4f50ed7c34857d69c9b854f4491bf217

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 ...d76a4e5702c0324a27ef3a5740ef5d98d8946.json |  31 +++
 ...838563f28e832e37e5c165329441d8471acdb.json |  16 ++
 ...da5d913caa8d935b33ad8f21336dedefd1c23.json |  15 ++
 ...efef25885a9bca64bb2ba4bb173bc19dcbdba.json |  23 +++
 ...08c547742851975163550ec4f3823057e91fe.json |  20 ++
 ...4e6219434de4d2f9ae5e484ed8ce5da426109.json |  16 ++
 ...c8453d53c973dce61cc8ace7d278773c7506f.json |  31 +++
 ...6afc85a8350706fe694935b25ef46a847409e.json |  22 +++
 ...6e1a9307335b0e7a27613cd690e99812a99f3.json |  23 +++
 ...548e2783c2de7e92ba0ff7e6f4637419fcf7d.json |  16 ++
 ...a14576509147e51a86a95a2cc786bee3199d9.json |  16 ++
 ...6f59d0fbe8df62e0bd0be636d7cf70dcf95f0.json |  16 ++
 backend/ee-repo-ref.txt                       |   2 +-
 backend/windmill-api-schedule/src/lib.rs      |  39 +++-
 backend/windmill-api-workspaces/Cargo.toml    |   6 +-
 .../windmill-api-workspaces/src/workspaces.rs |  59 ++++--
 backend/windmill-api/Cargo.toml               |   2 +-
 backend/windmill-api/openapi.yaml             |  21 ++
 backend/windmill-api/src/workspaces_export.rs |   7 +-
 backend/windmill-common/src/workspaces.rs     |  74 +++++++
 .../src/ducklake_maintenance_oss.rs           |  96 +++++++++
 backend/windmill-queue/src/lib.rs             |   7 +
 backend/windmill-queue/src/schedule.rs        |  23 ++-
 backend/windmill-queue/tests/schedule_push.rs | 168 ++++++++++++++++
 .../workspaceSettings/DucklakeSettings.svelte | 187 +++++++++++++++++-
 25 files changed, 907 insertions(+), 29 deletions(-)
 create mode 100644 backend/.sqlx/query-0f141ca6a58901dee1ddcf25694d76a4e5702c0324a27ef3a5740ef5d98d8946.json
 create mode 100644 backend/.sqlx/query-142ae6939440654da21ebb06acf838563f28e832e37e5c165329441d8471acdb.json
 create mode 100644 backend/.sqlx/query-28ec31481bdaae8b0512d21d074da5d913caa8d935b33ad8f21336dedefd1c23.json
 create mode 100644 backend/.sqlx/query-333a703a53cc760842b047ad420efef25885a9bca64bb2ba4bb173bc19dcbdba.json
 create mode 100644 backend/.sqlx/query-5323858a017814206179d35fdb708c547742851975163550ec4f3823057e91fe.json
 create mode 100644 backend/.sqlx/query-53a1ec83aedcec2cdf6495637464e6219434de4d2f9ae5e484ed8ce5da426109.json
 create mode 100644 backend/.sqlx/query-8756a8100d6fd6ecb64ef73d6f2c8453d53c973dce61cc8ace7d278773c7506f.json
 create mode 100644 backend/.sqlx/query-8837a126698d924eb9014cfee0e6afc85a8350706fe694935b25ef46a847409e.json
 create mode 100644 backend/.sqlx/query-8a1e2e59c05b0f67e32c517a0c46e1a9307335b0e7a27613cd690e99812a99f3.json
 create mode 100644 backend/.sqlx/query-a0faa5b042bac00bcd09b925bcf548e2783c2de7e92ba0ff7e6f4637419fcf7d.json
 create mode 100644 backend/.sqlx/query-a7f0ed0081e98a9861ea4b081b8a14576509147e51a86a95a2cc786bee3199d9.json
 create mode 100644 backend/.sqlx/query-c832ebc7ff0be446bf36628f6e06f59d0fbe8df62e0bd0be636d7cf70dcf95f0.json
 create mode 100644 backend/windmill-queue/src/ducklake_maintenance_oss.rs

diff --git a/backend/.sqlx/query-0f141ca6a58901dee1ddcf25694d76a4e5702c0324a27ef3a5740ef5d98d8946.json b/backend/.sqlx/query-0f141ca6a58901dee1ddcf25694d76a4e5702c0324a27ef3a5740ef5d98d8946.json
new file mode 100644
index 0000000000..0dbcf04c6e
--- /dev/null
+++ b/backend/.sqlx/query-0f141ca6a58901dee1ddcf25694d76a4e5702c0324a27ef3a5740ef5d98d8946.json
@@ -0,0 +1,31 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n            schedule.path, t.jobs FROM schedule,\n            LATERAL(SELECT ARRAY(\n                SELECT json_build_object('id', id, 'success', status = 'success', 'duration_ms', duration_ms)\n                FROM v2_job_completed c JOIN v2_job j USING (id)\n                WHERE trigger_kind = 'schedule'\n                    AND trigger = schedule.path\n                    AND c.workspace_id = $1\n                    AND j.workspace_id = $1\n                    AND parent_job IS NULL AND runnable_path = schedule.script_path\n                    AND status <> 'skipped'\n                ORDER BY completed_at DESC\n                LIMIT 20\n            ) AS jobs) t\n        WHERE workspace_id = $1 AND NOT starts_with(schedule.path, $4)\n        ORDER BY edited_at DESC\n        LIMIT $2 OFFSET $3",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "jobs",
+        "type_info": "JsonArray"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Int8",
+        "Int8",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      null
+    ]
+  },
+  "hash": "0f141ca6a58901dee1ddcf25694d76a4e5702c0324a27ef3a5740ef5d98d8946"
+}
diff --git a/backend/.sqlx/query-142ae6939440654da21ebb06acf838563f28e832e37e5c165329441d8471acdb.json b/backend/.sqlx/query-142ae6939440654da21ebb06acf838563f28e832e37e5c165329441d8471acdb.json
new file mode 100644
index 0000000000..c19df789d4
--- /dev/null
+++ b/backend/.sqlx/query-142ae6939440654da21ebb06acf838563f28e832e37e5c165329441d8471acdb.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO schedule (\n            workspace_id, path, edited_by, edited_at, schedule, enabled, script_path,\n            args, extra_perms, is_flow, email, error, timezone, on_failure,\n            on_recovery, on_failure_times, on_failure_exact, on_failure_extra_args,\n            on_recovery_times, on_recovery_extra_args, ws_error_handler_muted, retry,\n            summary, no_flow_overlap, tag, paused_until, on_success, on_success_extra_args,\n            cron_version, description, dynamic_skip, permissioned_as, labels\n        )\n        SELECT\n            $1, path, edited_by, edited_at, schedule, FALSE, script_path,\n            args, extra_perms, is_flow, email, error, timezone, on_failure,\n            on_recovery, on_failure_times, on_failure_exact, on_failure_extra_args,\n            on_recovery_times, on_recovery_extra_args, ws_error_handler_muted, retry,\n            summary, no_flow_overlap, tag, paused_until, on_success, on_success_extra_args,\n            cron_version, description, dynamic_skip, permissioned_as, labels\n        FROM schedule WHERE workspace_id = $2 AND path NOT LIKE $3",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "142ae6939440654da21ebb06acf838563f28e832e37e5c165329441d8471acdb"
+}
diff --git a/backend/.sqlx/query-28ec31481bdaae8b0512d21d074da5d913caa8d935b33ad8f21336dedefd1c23.json b/backend/.sqlx/query-28ec31481bdaae8b0512d21d074da5d913caa8d935b33ad8f21336dedefd1c23.json
new file mode 100644
index 0000000000..a1e3edbbe2
--- /dev/null
+++ b/backend/.sqlx/query-28ec31481bdaae8b0512d21d074da5d913caa8d935b33ad8f21336dedefd1c23.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM schedule WHERE workspace_id = $1 AND path = ANY($2)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "28ec31481bdaae8b0512d21d074da5d913caa8d935b33ad8f21336dedefd1c23"
+}
diff --git a/backend/.sqlx/query-333a703a53cc760842b047ad420efef25885a9bca64bb2ba4bb173bc19dcbdba.json b/backend/.sqlx/query-333a703a53cc760842b047ad420efef25885a9bca64bb2ba4bb173bc19dcbdba.json
new file mode 100644
index 0000000000..dfbc2b75e6
--- /dev/null
+++ b/backend/.sqlx/query-333a703a53cc760842b047ad420efef25885a9bca64bb2ba4bb173bc19dcbdba.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT path FROM schedule WHERE workspace_id = $1 AND path LIKE $2",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "333a703a53cc760842b047ad420efef25885a9bca64bb2ba4bb173bc19dcbdba"
+}
diff --git a/backend/.sqlx/query-5323858a017814206179d35fdb708c547742851975163550ec4f3823057e91fe.json b/backend/.sqlx/query-5323858a017814206179d35fdb708c547742851975163550ec4f3823057e91fe.json
new file mode 100644
index 0000000000..a8facb9d1b
--- /dev/null
+++ b/backend/.sqlx/query-5323858a017814206179d35fdb708c547742851975163550ec4f3823057e91fe.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO schedule (\n                workspace_id, path, schedule, timezone, edited_by, script_path,\n                is_flow, enabled, email, permissioned_as, summary, tag, cron_version\n            ) VALUES ($1, $2, $3, 'Etc/UTC', $4, $2, false, true, $5, $6, $7, 'duckdb', 'v2')\n            ON CONFLICT (workspace_id, path) DO UPDATE SET\n                schedule = EXCLUDED.schedule,\n                timezone = EXCLUDED.timezone,\n                edited_by = EXCLUDED.edited_by,\n                edited_at = now(),\n                script_path = EXCLUDED.script_path,\n                is_flow = false,\n                enabled = true,\n                email = EXCLUDED.email,\n                permissioned_as = EXCLUDED.permissioned_as,\n                summary = EXCLUDED.summary,\n                tag = EXCLUDED.tag,\n                cron_version = EXCLUDED.cron_version,\n                error = NULL",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "5323858a017814206179d35fdb708c547742851975163550ec4f3823057e91fe"
+}
diff --git a/backend/.sqlx/query-53a1ec83aedcec2cdf6495637464e6219434de4d2f9ae5e484ed8ce5da426109.json b/backend/.sqlx/query-53a1ec83aedcec2cdf6495637464e6219434de4d2f9ae5e484ed8ce5da426109.json
new file mode 100644
index 0000000000..8bce508e75
--- /dev/null
+++ b/backend/.sqlx/query-53a1ec83aedcec2cdf6495637464e6219434de4d2f9ae5e484ed8ce5da426109.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM schedule WHERE workspace_id = $1 AND path = ANY($2) AND path != ALL($3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray",
+        "TextArray"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "53a1ec83aedcec2cdf6495637464e6219434de4d2f9ae5e484ed8ce5da426109"
+}
diff --git a/backend/.sqlx/query-8756a8100d6fd6ecb64ef73d6f2c8453d53c973dce61cc8ace7d278773c7506f.json b/backend/.sqlx/query-8756a8100d6fd6ecb64ef73d6f2c8453d53c973dce61cc8ace7d278773c7506f.json
new file mode 100644
index 0000000000..5741a1aa5b
--- /dev/null
+++ b/backend/.sqlx/query-8756a8100d6fd6ecb64ef73d6f2c8453d53c973dce61cc8ace7d278773c7506f.json
@@ -0,0 +1,31 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT\n            schedule.path, t.jobs FROM schedule,\n            LATERAL(SELECT ARRAY(\n                SELECT json_build_object('id', id, 'success', status = 'success', 'duration_ms', duration_ms)\n                FROM v2_job_completed c JOIN v2_job j USING (id)\n                WHERE trigger_kind = 'schedule'\n                    AND trigger = schedule.path\n                    AND c.workspace_id = $1\n                    AND j.workspace_id = $1\n                    AND parent_job IS NULL AND runnable_path = schedule.script_path\n                    AND status <> 'skipped'\n                ORDER BY completed_at DESC\n                LIMIT 20\n            ) AS jobs) t\n        WHERE workspace_id = $1 AND schedule.path NOT LIKE $4\n        ORDER BY edited_at DESC\n        LIMIT $2 OFFSET $3",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "jobs",
+        "type_info": "JsonArray"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Int8",
+        "Int8",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      null
+    ]
+  },
+  "hash": "8756a8100d6fd6ecb64ef73d6f2c8453d53c973dce61cc8ace7d278773c7506f"
+}
diff --git a/backend/.sqlx/query-8837a126698d924eb9014cfee0e6afc85a8350706fe694935b25ef46a847409e.json b/backend/.sqlx/query-8837a126698d924eb9014cfee0e6afc85a8350706fe694935b25ef46a847409e.json
new file mode 100644
index 0000000000..829083e0ec
--- /dev/null
+++ b/backend/.sqlx/query-8837a126698d924eb9014cfee0e6afc85a8350706fe694935b25ef46a847409e.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            SELECT ws.ducklake->'ducklakes' AS ducklake_name\n            FROM workspace_settings ws\n            WHERE ws.workspace_id = $1\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "ducklake_name",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "8837a126698d924eb9014cfee0e6afc85a8350706fe694935b25ef46a847409e"
+}
diff --git a/backend/.sqlx/query-8a1e2e59c05b0f67e32c517a0c46e1a9307335b0e7a27613cd690e99812a99f3.json b/backend/.sqlx/query-8a1e2e59c05b0f67e32c517a0c46e1a9307335b0e7a27613cd690e99812a99f3.json
new file mode 100644
index 0000000000..9fc8cf1336
--- /dev/null
+++ b/backend/.sqlx/query-8a1e2e59c05b0f67e32c517a0c46e1a9307335b0e7a27613cd690e99812a99f3.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT path FROM schedule WHERE workspace_id = $1 AND starts_with(path, $2)",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "path",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "8a1e2e59c05b0f67e32c517a0c46e1a9307335b0e7a27613cd690e99812a99f3"
+}
diff --git a/backend/.sqlx/query-a0faa5b042bac00bcd09b925bcf548e2783c2de7e92ba0ff7e6f4637419fcf7d.json b/backend/.sqlx/query-a0faa5b042bac00bcd09b925bcf548e2783c2de7e92ba0ff7e6f4637419fcf7d.json
new file mode 100644
index 0000000000..e3e8e3f2ad
--- /dev/null
+++ b/backend/.sqlx/query-a0faa5b042bac00bcd09b925bcf548e2783c2de7e92ba0ff7e6f4637419fcf7d.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM schedule WHERE workspace_id = $1 AND path LIKE $2 AND path != ALL($3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "a0faa5b042bac00bcd09b925bcf548e2783c2de7e92ba0ff7e6f4637419fcf7d"
+}
diff --git a/backend/.sqlx/query-a7f0ed0081e98a9861ea4b081b8a14576509147e51a86a95a2cc786bee3199d9.json b/backend/.sqlx/query-a7f0ed0081e98a9861ea4b081b8a14576509147e51a86a95a2cc786bee3199d9.json
new file mode 100644
index 0000000000..21e0f4613b
--- /dev/null
+++ b/backend/.sqlx/query-a7f0ed0081e98a9861ea4b081b8a14576509147e51a86a95a2cc786bee3199d9.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM schedule WHERE workspace_id = $1 AND starts_with(path, $2) AND path != ALL($3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "a7f0ed0081e98a9861ea4b081b8a14576509147e51a86a95a2cc786bee3199d9"
+}
diff --git a/backend/.sqlx/query-c832ebc7ff0be446bf36628f6e06f59d0fbe8df62e0bd0be636d7cf70dcf95f0.json b/backend/.sqlx/query-c832ebc7ff0be446bf36628f6e06f59d0fbe8df62e0bd0be636d7cf70dcf95f0.json
new file mode 100644
index 0000000000..d316c16fff
--- /dev/null
+++ b/backend/.sqlx/query-c832ebc7ff0be446bf36628f6e06f59d0fbe8df62e0bd0be636d7cf70dcf95f0.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO schedule (\n            workspace_id, path, edited_by, edited_at, schedule, enabled, script_path,\n            args, extra_perms, is_flow, email, error, timezone, on_failure,\n            on_recovery, on_failure_times, on_failure_exact, on_failure_extra_args,\n            on_recovery_times, on_recovery_extra_args, ws_error_handler_muted, retry,\n            summary, no_flow_overlap, tag, paused_until, on_success, on_success_extra_args,\n            cron_version, description, dynamic_skip, permissioned_as, labels\n        )\n        SELECT\n            $1, path, edited_by, edited_at, schedule, FALSE, script_path,\n            args, extra_perms, is_flow, email, error, timezone, on_failure,\n            on_recovery, on_failure_times, on_failure_exact, on_failure_extra_args,\n            on_recovery_times, on_recovery_extra_args, ws_error_handler_muted, retry,\n            summary, no_flow_overlap, tag, paused_until, on_success, on_success_extra_args,\n            cron_version, description, dynamic_skip, permissioned_as, labels\n        FROM schedule WHERE workspace_id = $2 AND NOT starts_with(path, $3)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "c832ebc7ff0be446bf36628f6e06f59d0fbe8df62e0bd0be636d7cf70dcf95f0"
+}
diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index e31f18cdd0..2c16f06c50 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-7be0bad1a6d6b5c3a107c0a2cd4bf003c36ec34c
+2fab310d4f50ed7c34857d69c9b854f4491bf217
diff --git a/backend/windmill-api-schedule/src/lib.rs b/backend/windmill-api-schedule/src/lib.rs
index 7cc0111c28..573c47e355 100644
--- a/backend/windmill-api-schedule/src/lib.rs
+++ b/backend/windmill-api-schedule/src/lib.rs
@@ -182,6 +182,19 @@ fn to_json_raw_opt(
     value.map(|v| sqlx::types::Json(to_raw_value(&v)))
 }
 
+/// Managed ducklake-maintenance schedules live under a reserved path prefix;
+/// their lifecycle is owned by the workspace ducklake settings, so the
+/// schedule API refuses to create/edit/delete/toggle them.
+fn reject_reserved_schedule_path(path: &str) -> Result<()> {
+    if path.starts_with(windmill_common::workspaces::DUCKLAKE_MAINTENANCE_PATH_PREFIX) {
+        return Err(Error::BadRequest(format!(
+            "Schedules under {} are managed by the workspace ducklake settings",
+            windmill_common::workspaces::DUCKLAKE_MAINTENANCE_PATH_PREFIX
+        )));
+    }
+    Ok(())
+}
+
 /// Validate that a dynamic skip handler (script or flow) exists
 async fn validate_dynamic_skip<'c>(
     tx: &mut Transaction<'c, Postgres>,
@@ -219,6 +232,7 @@ async fn create_schedule(
     Json(ns): Json<NewSchedule>,
 ) -> Result<String> {
     check_scopes(&authed, || format!("schedules:write:{}", ns.path))?;
+    reject_reserved_schedule_path(&ns.path)?;
 
     let authed = maybe_refresh_folders(&ns.path, &w_id, authed, &db).await;
 
@@ -468,6 +482,7 @@ async fn edit_schedule(
 ) -> Result<String> {
     let path = path.to_path();
     check_scopes(&authed, || format!("schedules:write:{}", path))?;
+    reject_reserved_schedule_path(path)?;
 
     let authed = maybe_refresh_folders(&path, &w_id, authed, &db).await;
     let mut tx = user_db.begin(&authed).await?;
@@ -750,6 +765,15 @@ async fn list_schedule(
         )
         .order_by("edited_at", true)
         .and_where("workspace_id = ?".bind(&w_id))
+        // managed ducklake-maintenance schedules are edited from the
+        // workspace ducklake settings, not the schedules UI/CLI.
+        // starts_with, not LIKE: the prefix contains `_` which LIKE treats as
+        // a wildcard, and a user folder like `ducklake-maintenance` must not
+        // be swept up.
+        .and_where(
+            "NOT starts_with(path, ?)"
+                .bind(&windmill_common::workspaces::DUCKLAKE_MAINTENANCE_PATH_PREFIX),
+        )
         .offset(offset)
         .limit(per_page)
         .clone();
@@ -923,12 +947,13 @@ async fn list_schedule_with_jobs(
                 ORDER BY completed_at DESC
                 LIMIT 20
             ) AS jobs) t
-        WHERE workspace_id = $1
+        WHERE workspace_id = $1 AND NOT starts_with(schedule.path, $4)
         ORDER BY edited_at DESC
         LIMIT $2 OFFSET $3",
         w_id,
         per_page as i64,
-        offset as i64
+        offset as i64,
+        windmill_common::workspaces::DUCKLAKE_MAINTENANCE_PATH_PREFIX
     )
     .fetch_all(&mut *tx)
     .await?;
@@ -1014,6 +1039,7 @@ pub async fn set_enabled(
     let mut tx = user_db.begin(&authed).await?;
     let path = path.to_path();
     check_scopes(&authed, || format!("schedules:write:{}", path))?;
+    reject_reserved_schedule_path(path)?;
 
     // Block enabling a schedule in a fork when the parent has the same path
     // (regardless of parent's enabled flag), unless force=true. Two enabled
@@ -1190,6 +1216,7 @@ async fn delete_schedule(
 ) -> Result<String> {
     let path = path.to_path();
     check_scopes(&authed, || format!("schedules:write:{}", path))?;
+    reject_reserved_schedule_path(path)?;
     let mut tx = user_db.begin(&authed).await?;
 
     clear_schedule(&mut tx, path, &w_id).await?;
@@ -1399,6 +1426,14 @@ async fn set_default_error_handler(
             }
         }
         for updated_schedule_path in updated_schedules {
+            // managed ducklake-maintenance rows get the handler update (their
+            // failures should reach workspace handlers) but must not be
+            // pushed into git-sync as deployed schedules
+            if updated_schedule_path
+                .starts_with(windmill_common::workspaces::DUCKLAKE_MAINTENANCE_PATH_PREFIX)
+            {
+                continue;
+            }
             handle_deployment_metadata(
                 &authed.email,
                 &authed.username,
diff --git a/backend/windmill-api-workspaces/Cargo.toml b/backend/windmill-api-workspaces/Cargo.toml
index 4a9e04c417..fc5a1fe874 100644
--- a/backend/windmill-api-workspaces/Cargo.toml
+++ b/backend/windmill-api-workspaces/Cargo.toml
@@ -11,7 +11,11 @@ path = "src/lib.rs"
 [features]
 default = []
 enterprise = ["windmill-common/enterprise"]
-private = ["windmill-common/private"]
+private = [
+    "windmill-common/private",
+    "windmill-queue/private",
+    "windmill-audit/private",
+]
 cloud = ["windmill-common/cloud"]
 no_auth = ["windmill-api-auth/no_auth"]
 parquet = ["windmill-object-store/parquet"]
diff --git a/backend/windmill-api-workspaces/src/workspaces.rs b/backend/windmill-api-workspaces/src/workspaces.rs
index 43d4ef241b..aaf04972e1 100644
--- a/backend/windmill-api-workspaces/src/workspaces.rs
+++ b/backend/windmill-api-workspaces/src/workspaces.rs
@@ -2295,6 +2295,17 @@ async fn edit_ducklake_config(
     require_admin(is_admin, &username)?;
     let is_superadmin = require_super_admin(&db, &email).await.is_ok();
 
+    // Lake names end up interpolated in `ATTACH 'ducklake://<name>'`,
+    // generated maintenance SQL and the reserved maintenance schedule path
+    // (CHECK-constrained to [\w-]+ segments).
+    for name in new_config.settings.ducklakes.keys() {
+        if !windmill_common::workspaces::is_valid_ducklake_name(name) {
+            return Err(Error::BadRequest(format!(
+                "Invalid ducklake name '{name}': only letters, digits, '_' and '-' are allowed"
+            )));
+        }
+    }
+
     let mut tx = db.begin().await?;
 
     let args_for_audit = format!("{:?}", new_config.settings);
@@ -2309,21 +2320,22 @@ async fn edit_ducklake_config(
     )
     .await?;
 
+    let old_ducklakes = sqlx::query_scalar!(
+        r#"
+            SELECT ws.ducklake->'ducklakes' AS ducklake_name
+            FROM workspace_settings ws
+            WHERE ws.workspace_id = $1
+        "#,
+        &w_id
+    )
+    .fetch_one(&mut *tx)
+    .await?
+    .unwrap_or(serde_json::Value::Null);
+    let old_ducklakes: HashMap<String, Ducklake> =
+        serde_json::from_value(old_ducklakes).unwrap_or_default();
+
     // Check that non-superadmins are not abusing Instance databases
     if !is_superadmin {
-        let old_ducklakes = sqlx::query_scalar!(
-            r#"
-                SELECT ws.ducklake->'ducklakes' AS ducklake_name
-                FROM workspace_settings ws
-                WHERE ws.workspace_id = $1
-            "#,
-            &w_id
-        )
-        .fetch_one(&mut *tx)
-        .await?
-        .unwrap_or(serde_json::Value::Null);
-        let old_ducklakes: HashMap<String, Ducklake> =
-            serde_json::from_value(old_ducklakes).unwrap_or_default();
         for (name, dl) in new_config.settings.ducklakes.iter() {
             if dl.catalog.resource_type == DucklakeCatalogResourceType::Instance {
                 let old_dl = old_ducklakes.get(name);
@@ -2341,7 +2353,7 @@ async fn edit_ducklake_config(
         }
     }
 
-    let config: serde_json::Value = serde_json::to_value(new_config.settings)
+    let config: serde_json::Value = serde_json::to_value(&new_config.settings)
         .map_err(|err| Error::internal_err(err.to_string()))?;
 
     sqlx::query!(
@@ -2352,6 +2364,19 @@ async fn edit_ducklake_config(
     .execute(&mut *tx)
     .await?;
 
+    // Same tx as the settings update: a failed schedule sync/push must fail
+    // the whole save — nothing reconciles a half-applied state later.
+    let tx = windmill_queue::ducklake_maintenance::sync_ducklake_maintenance_schedules(
+        &db,
+        tx,
+        &w_id,
+        &new_config.settings.ducklakes,
+        &old_ducklakes,
+        &username,
+        &email,
+    )
+    .await?;
+
     tx.commit().await?;
 
     Ok(format!("Edit ducklake config for workspace {}", &w_id))
@@ -4079,6 +4104,9 @@ async fn clone_triggers_and_schedules(
     source_workspace_id: &str,
     target_workspace_id: &str,
 ) -> Result<()> {
+    // Managed ducklake-maintenance schedules are excluded: the fork starts
+    // with no ducklake config, so cloned rows could never resolve a lake and
+    // the schedule API refuses mutations under the reserved prefix.
     sqlx::query!(
         r#"INSERT INTO schedule (
             workspace_id, path, edited_by, edited_at, schedule, enabled, script_path,
@@ -4095,9 +4123,10 @@ async fn clone_triggers_and_schedules(
             on_recovery_times, on_recovery_extra_args, ws_error_handler_muted, retry,
             summary, no_flow_overlap, tag, paused_until, on_success, on_success_extra_args,
             cron_version, description, dynamic_skip, permissioned_as, labels
-        FROM schedule WHERE workspace_id = $2"#,
+        FROM schedule WHERE workspace_id = $2 AND NOT starts_with(path, $3)"#,
         target_workspace_id,
         source_workspace_id,
+        windmill_common::workspaces::DUCKLAKE_MAINTENANCE_PATH_PREFIX,
     )
     .execute(&mut **tx)
     .await?;
diff --git a/backend/windmill-api/Cargo.toml b/backend/windmill-api/Cargo.toml
index ebbc98e83e..fa9ed3f2e5 100644
--- a/backend/windmill-api/Cargo.toml
+++ b/backend/windmill-api/Cargo.toml
@@ -10,7 +10,7 @@ path = "src/lib.rs"
 
 [features]
 default = []
-private = ["windmill-audit/private", "windmill-common/private", "windmill-api-auth/private", "windmill-store/private", "windmill-api-users/private", "windmill-api-workspaces/private", "windmill-api-groups/private", "windmill-api-configs/private", "windmill-api-settings/private", "windmill-api-assets/private", "windmill-api-agent-workers?/private", "windmill-trigger-kafka?/private", "windmill-trigger-postgres?/private", "windmill-trigger-mqtt?/private", "windmill-trigger-websocket?/private", "windmill-trigger-nats?/private", "windmill-trigger-sqs?/private", "windmill-trigger-gcp?/private", "windmill-trigger-azure?/private", "windmill-trigger-email?/private", "windmill-git-sync/private", "windmill-autoscaling?/private"]
+private = ["windmill-audit/private", "windmill-common/private", "windmill-api-auth/private", "windmill-store/private", "windmill-api-users/private", "windmill-api-workspaces/private", "windmill-api-groups/private", "windmill-api-configs/private", "windmill-api-settings/private", "windmill-api-assets/private", "windmill-api-agent-workers?/private", "windmill-trigger-kafka?/private", "windmill-trigger-postgres?/private", "windmill-trigger-mqtt?/private", "windmill-trigger-websocket?/private", "windmill-trigger-nats?/private", "windmill-trigger-sqs?/private", "windmill-trigger-gcp?/private", "windmill-trigger-azure?/private", "windmill-trigger-email?/private", "windmill-git-sync/private", "windmill-autoscaling?/private", "windmill-object-store/private"]
 enterprise = ["windmill-queue/enterprise", "windmill-audit/enterprise", "windmill-git-sync/enterprise", "windmill-common/enterprise", "windmill-worker?/enterprise", "windmill-api-auth/enterprise", "windmill-store/enterprise", "windmill-api-jobs/enterprise", "windmill-api-scripts/enterprise", "windmill-api-flows/enterprise", "windmill-api-users/enterprise", "windmill-api-workspaces/enterprise", "windmill-api-groups/enterprise", "windmill-api-configs/enterprise", "windmill-api-settings/enterprise", "windmill-api-schedule/enterprise", "windmill-api-agent-workers?/enterprise", "windmill-trigger/enterprise", "windmill-trigger-kafka?/enterprise", "windmill-trigger-postgres?/enterprise", "windmill-trigger-mqtt?/enterprise", "windmill-trigger-websocket?/enterprise", "windmill-trigger-email?/enterprise", "windmill-trigger-nats?/enterprise", "windmill-trigger-sqs?/enterprise", "windmill-trigger-gcp?/enterprise", "windmill-trigger-azure?/enterprise", "windmill-trigger-http?/enterprise", "windmill-native-triggers?/enterprise", "dep:windmill-autoscaling", "windmill-autoscaling/enterprise", "license"]
 stripe = []
 run_inline = ["dep:windmill-worker", "windmill-api-configs/run_inline"]
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 1f836cfb2b..fe7edb26b0 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -28917,6 +28917,27 @@ components:
                   - path
               extra_args:
                 type: string
+              maintenance:
+                type: object
+                description:
+                  Scheduled maintenance (enterprise) - snapshot expiry, adjacent-file
+                  compaction and orphaned-file cleanup, run as a managed per-lake schedule
+                required: [enabled]
+                properties:
+                  enabled:
+                    type: boolean
+                  schedule:
+                    type: string
+                    description: cron cadence (v2, UTC); defaults to daily at 03h with a per-lake minute offset
+                  retention_days:
+                    type: integer
+                    description: snapshot retention window in days (default 7); time-travel older than this stops working
+                  compaction:
+                    type: boolean
+                    description: merge adjacent small parquet files (default true)
+                  orphan_cleanup:
+                    type: boolean
+                    description: delete orphaned files older than max(retention, 1 day) (default true)
 
     DataTableSettings:
       type: object
diff --git a/backend/windmill-api/src/workspaces_export.rs b/backend/windmill-api/src/workspaces_export.rs
index 66bda77bac..fa112ef4e1 100644
--- a/backend/windmill-api/src/workspaces_export.rs
+++ b/backend/windmill-api/src/workspaces_export.rs
@@ -919,11 +919,16 @@ pub(crate) async fn tarball_workspace(
     }
 
     if include_schedules.unwrap_or(false) {
+        // Managed ducklake-maintenance schedules are excluded: they are
+        // derived from the workspace ducklake settings (and admins bypass the
+        // RLS that hides them), so exporting them would drag unsyncable rows
+        // into git.
         let schedules = sqlx::query_as::<_, Schedule>(
             "SELECT workspace_id, path, edited_by, edited_at, schedule, timezone, enabled, script_path, is_flow, args, extra_perms, email, permissioned_as, error, on_failure, on_failure_times, on_failure_exact, on_failure_extra_args, on_recovery, on_recovery_times, on_recovery_extra_args, on_success, on_success_extra_args, ws_error_handler_muted, retry, no_flow_overlap, summary, description, tag, paused_until, cron_version, dynamic_skip, labels FROM schedule
-             WHERE workspace_id = $1",
+             WHERE workspace_id = $1 AND NOT starts_with(path, $2)",
         )
         .bind(&w_id)
+        .bind(windmill_common::workspaces::DUCKLAKE_MAINTENANCE_PATH_PREFIX)
         .fetch_all(&mut *tx)
         .await?;
 
diff --git a/backend/windmill-common/src/workspaces.rs b/backend/windmill-common/src/workspaces.rs
index 5593a565ef..293490e434 100644
--- a/backend/windmill-common/src/workspaces.rs
+++ b/backend/windmill-common/src/workspaces.rs
@@ -842,6 +842,80 @@ pub struct Ducklake {
     pub storage: DucklakeStorage,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub extra_args: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub maintenance: Option<DucklakeMaintenance>,
+}
+
+/// Scheduled maintenance for a ducklake (enterprise): snapshot expiry,
+/// adjacent-file compaction and orphaned-file cleanup, run as a managed
+/// per-lake schedule. Not mirrored in `instance_config::Ducklake`:
+/// instance-level lakes have no workspace to schedule into.
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct DucklakeMaintenance {
+    pub enabled: bool,
+    /// Cron (v2/croner, seconds optional). None → daily at 03:00 UTC with a
+    /// deterministic per-(workspace, lake) minute offset.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub schedule: Option<String>,
+    /// Snapshot retention window in days (default 7). Snapshots older than
+    /// this are expired: time-travel reads (`AT (VERSION => n)`) older than
+    /// the window stop working. 0 keeps only the current snapshot.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub retention_days: Option<u32>,
+    /// Merge adjacent small parquet files (default true).
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub compaction: Option<bool>,
+    /// Delete orphaned files older than max(retention, 1 day) (default true).
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub orphan_cleanup: Option<bool>,
+}
+
+impl DucklakeMaintenance {
+    pub const DEFAULT_RETENTION_DAYS: u32 = 7;
+
+    pub fn retention_days(&self) -> u32 {
+        self.retention_days.unwrap_or(Self::DEFAULT_RETENTION_DAYS)
+    }
+    pub fn compaction(&self) -> bool {
+        self.compaction.unwrap_or(true)
+    }
+    pub fn orphan_cleanup(&self) -> bool {
+        self.orphan_cleanup.unwrap_or(true)
+    }
+}
+
+/// Reserved schedule path namespace for managed ducklake maintenance
+/// schedules. Must satisfy the `schedule.path` CHECK constraint
+/// (`^[ufg](\/[\w-]+){2,}$`), hence the `f/` prefix; the folder itself never
+/// exists. The schedule API rejects user mutations under this prefix and the
+/// list/export endpoints filter it out — the lifecycle is owned by the
+/// workspace ducklake settings.
+///
+/// Accepted limitation: a schedule that pre-dated this namespace under a real
+/// `ducklake_maintenance` folder keeps running (tick dispatch falls through
+/// to its script when its path's lake has no enabled maintenance config, and
+/// the settings sync only touches rows derived from config) but stays hidden
+/// from list/export and immutable via the schedule API until renamed out of
+/// the namespace. Judged unlikely enough to not warrant a discriminator
+/// column or a rename migration.
+pub const DUCKLAKE_MAINTENANCE_PATH_PREFIX: &str = "f/ducklake_maintenance/";
+
+pub fn ducklake_maintenance_schedule_path(lake: &str) -> String {
+    format!("{DUCKLAKE_MAINTENANCE_PATH_PREFIX}{lake}")
+}
+
+pub fn lake_from_ducklake_maintenance_path(path: &str) -> Option<&str> {
+    path.strip_prefix(DUCKLAKE_MAINTENANCE_PATH_PREFIX)
+}
+
+/// Lake names are interpolated into `ATTACH 'ducklake://<name>'`, generated
+/// maintenance SQL and the reserved schedule path (CHECK-constrained to
+/// `[\w-]+` segments), so they must stay to this charset.
+pub fn is_valid_ducklake_name(name: &str) -> bool {
+    !name.is_empty()
+        && name
+            .chars()
+            .all(|c| c.is_ascii_alphanumeric() || c == '_' || c == '-')
 }
 
 #[derive(Deserialize, Serialize, Debug)]
diff --git a/backend/windmill-queue/src/ducklake_maintenance_oss.rs b/backend/windmill-queue/src/ducklake_maintenance_oss.rs
new file mode 100644
index 0000000000..ab6e035847
--- /dev/null
+++ b/backend/windmill-queue/src/ducklake_maintenance_oss.rs
@@ -0,0 +1,96 @@
+//! OSS fallback: scheduled ducklake maintenance (snapshot expiry, adjacent-file
+//! compaction, orphaned-file cleanup via managed per-lake schedules) is an
+//! enterprise feature; the implementation lives in windmill-ee-private
+//! (see `ducklake_maintenance_ee`). In the public build the entry points report
+//! that the enterprise edition is required.
+
+use std::collections::HashMap;
+
+use sqlx::{Postgres, Transaction};
+use windmill_common::{
+    error::{Error, Result},
+    jobs::JobPayload,
+    schedule::Schedule,
+    workspaces::Ducklake,
+    DB,
+};
+
+/// Reconcile the managed `f/ducklake_maintenance/<lake>` schedule rows with
+/// the ducklake settings, inside the caller's transaction.
+///
+/// Not an authorization boundary: it mutates schedule rows for `w_id` on
+/// behalf of `edited_by`/`email`, so the caller MUST already have enforced
+/// workspace-admin on `w_id` and that the identity is the authenticated
+/// caller's (as `edit_ducklake_config` does via `require_admin`).
+// Only newly-enabled maintenance is rejected: a config that already had it
+// enabled (e.g. an enterprise license lapsed) must not make every unrelated
+// ducklake settings save fail, and the admin must be able to save it off.
+pub async fn sync_ducklake_maintenance_schedules<'c>(
+    _db: &DB,
+    mut tx: Transaction<'c, Postgres>,
+    w_id: &str,
+    ducklakes: &HashMap<String, Ducklake>,
+    previous: &HashMap<String, Ducklake>,
+    _edited_by: &str,
+    _email: &str,
+) -> Result<Transaction<'c, Postgres>> {
+    let enabled = |dl: &Ducklake| -> bool { dl.maintenance.as_ref().is_some_and(|m| m.enabled) };
+    if ducklakes
+        .iter()
+        .any(|(name, dl)| enabled(dl) && !previous.get(name).is_some_and(|prev| enabled(prev)))
+    {
+        return Err(Error::BadRequest(
+            "Ducklake scheduled maintenance is only available in the enterprise edition"
+                .to_string(),
+        ));
+    }
+
+    // Saving maintenance off (e.g. after an enterprise license lapsed) must
+    // remove the managed row AND its already-queued occurrence here too —
+    // otherwise a maintenance job pushed under the enterprise edition still
+    // runs once after the admin disabled it. Like the enterprise
+    // implementation, the removed set is derived from config, never from the
+    // path prefix.
+    let removed = previous
+        .iter()
+        .filter(|(name, dl)| enabled(dl) && !ducklakes.get(*name).is_some_and(|cur| enabled(cur)))
+        .map(|(name, _)| windmill_common::workspaces::ducklake_maintenance_schedule_path(name))
+        .collect::<Vec<_>>();
+    for path in removed.iter() {
+        crate::schedule::clear_schedule(&mut tx, path, w_id).await?;
+    }
+    sqlx::query!(
+        "DELETE FROM schedule WHERE workspace_id = $1 AND path = ANY($2)",
+        w_id,
+        &removed
+    )
+    .execute(&mut *tx)
+    .await?;
+
+    Ok(tx)
+}
+
+/// Build the job payload for one occurrence of a managed maintenance schedule
+/// (`push_scheduled_job` calls this for reserved-prefix schedule paths).
+/// Returns `(payload, tag, timeout, on_behalf_of_email, created_by)`.
+///
+/// Always `Ok(None)` in the public build: the caller falls through to normal
+/// script resolution, so a pre-existing user schedule under a real
+/// `ducklake_maintenance` folder keeps running, while a managed row left over
+/// from an enterprise period fails script resolution with NotFound and is
+/// auto-disabled with `schedule.error` recorded by the post-completion
+/// scheduler.
+pub async fn build_maintenance_schedule_payload<'c>(
+    _tx: &mut Transaction<'c, Postgres>,
+    _schedule: &Schedule,
+) -> Result<
+    Option<(
+        JobPayload,
+        Option<String>,
+        Option<i32>,
+        Option<String>,
+        String,
+    )>,
+> {
+    Ok(None)
+}
diff --git a/backend/windmill-queue/src/lib.rs b/backend/windmill-queue/src/lib.rs
index 59ac7f1fa8..8d8534c926 100644
--- a/backend/windmill-queue/src/lib.rs
+++ b/backend/windmill-queue/src/lib.rs
@@ -15,6 +15,13 @@ pub use cascade_ee as cascade;
 #[cfg(not(feature = "private"))]
 pub use cascade_oss as cascade;
 #[cfg(feature = "private")]
+pub mod ducklake_maintenance_ee;
+pub mod ducklake_maintenance_oss;
+#[cfg(feature = "private")]
+pub use ducklake_maintenance_ee as ducklake_maintenance;
+#[cfg(not(feature = "private"))]
+pub use ducklake_maintenance_oss as ducklake_maintenance;
+#[cfg(feature = "private")]
 pub mod freshness_watchdog_ee;
 pub mod freshness_watchdog_oss;
 #[cfg(feature = "private")]
diff --git a/backend/windmill-queue/src/schedule.rs b/backend/windmill-queue/src/schedule.rs
index 8816eeae25..2b5aef96a5 100644
--- a/backend/windmill-queue/src/schedule.rs
+++ b/backend/windmill-queue/src/schedule.rs
@@ -227,11 +227,30 @@ pub async fn push_scheduled_job<'c>(
         }
     }
 
+    // Managed ducklake maintenance schedule (enterprise): the runnable is a
+    // generated DuckDB script, not a deployed one — built in the EE module.
+    // None (CE build, or no enabled maintenance config for the path's lake)
+    // falls through to normal script resolution, so a user schedule that
+    // pre-dates the reserved prefix keeps running its script and a stale
+    // managed row fails resolution with NotFound (auto-disabling it with
+    // schedule.error recorded).
+    let maintenance_payload =
+        if windmill_common::workspaces::lake_from_ducklake_maintenance_path(&schedule.path)
+            .is_some()
+        {
+            crate::ducklake_maintenance::build_maintenance_schedule_payload(&mut tx, schedule)
+                .await?
+        } else {
+            None
+        };
+
     // If schedule handler is defined, wrap the scheduled job in a synthetic flow
     // with the handler as the first step (with stop_after_if to skip if handler returns false)
-    let (payload, tag, timeout, on_behalf_of_email, created_by) = if let Some(handler_path) =
-        &schedule.dynamic_skip
+    let (payload, tag, timeout, on_behalf_of_email, created_by) = if let Some(maintenance_payload) =
+        maintenance_payload
     {
+        maintenance_payload
+    } else if let Some(handler_path) = &schedule.dynamic_skip {
         // Build skip handler args
         let mut skip_handler_args = HashMap::<String, Box<serde_json::value::RawValue>>::new();
         skip_handler_args.insert(
diff --git a/backend/windmill-queue/tests/schedule_push.rs b/backend/windmill-queue/tests/schedule_push.rs
index 70a53763e0..745b2685e9 100644
--- a/backend/windmill-queue/tests/schedule_push.rs
+++ b/backend/windmill-queue/tests/schedule_push.rs
@@ -1592,4 +1592,172 @@ mod schedule_push {
 
         Ok(())
     }
+
+    // -----------------------------------------------------------------------
+    // push_scheduled_job: reserved ducklake-maintenance prefix
+    // -----------------------------------------------------------------------
+
+    // A schedule that pre-dates the reserved prefix (a user schedule under a
+    // real `ducklake_maintenance` folder) must fall through to normal script
+    // resolution when its path's lake has no enabled maintenance config —
+    // never be hijacked into the maintenance payload builder and auto-disabled.
+    #[sqlx::test(migrations = "../migrations", fixtures("base", "schedule_push"))]
+    async fn test_push_reserved_prefix_no_config_falls_through_to_script(
+        db: Pool<Postgres>,
+    ) -> anyhow::Result<()> {
+        let schedule = make_schedule(|s| {
+            s.path = "f/ducklake_maintenance/legacy".to_string();
+        });
+        let authed = make_authed();
+
+        let tx = db.begin().await?;
+        let tx = push_scheduled_job(&db, tx, &schedule, Some(&authed), None).await?;
+        tx.commit().await?;
+
+        assert_eq!(count_queued_jobs(&db).await, 1);
+        let (ws, path, trigger, _) = get_queued_job(&db).await.unwrap();
+        assert_eq!(ws, "test-workspace");
+        assert_eq!(
+            path.as_deref(),
+            Some("f/system/test_script"),
+            "must resolve the schedule's script_path, not the maintenance builder"
+        );
+        assert_eq!(trigger.as_deref(), Some("f/ducklake_maintenance/legacy"));
+        Ok(())
+    }
+
+    // With maintenance enabled for the path's lake, the occurrence is a
+    // raw-code duckdb job (kind preview, runnable_path = schedule path,
+    // duckdb tag pinned) — enterprise builds only.
+    #[cfg(feature = "private")]
+    #[sqlx::test(migrations = "../migrations", fixtures("base", "schedule_push"))]
+    async fn test_push_reserved_prefix_with_config_builds_maintenance_job(
+        db: Pool<Postgres>,
+    ) -> anyhow::Result<()> {
+        sqlx::query(
+            r#"UPDATE workspace_settings SET ducklake = '{"ducklakes": {"legacy": {
+                "catalog": {"resource_type": "postgresql", "resource_path": "u/test/pg"},
+                "storage": {"path": "legacy"},
+                "maintenance": {"enabled": true, "retention_days": 3}
+            }}}'::jsonb WHERE workspace_id = 'test-workspace'"#,
+        )
+        .execute(&db)
+        .await?;
+
+        let schedule = make_schedule(|s| {
+            s.path = "f/ducklake_maintenance/legacy".to_string();
+            s.script_path = "f/ducklake_maintenance/legacy".to_string();
+            s.tag = Some("duckdb".to_string());
+        });
+        let authed = make_authed();
+
+        let tx = db.begin().await?;
+        let tx = push_scheduled_job(&db, tx, &schedule, Some(&authed), None).await?;
+        tx.commit().await?;
+
+        assert_eq!(count_queued_jobs(&db).await, 1);
+        let (kind, path, tag, raw_code) = sqlx::query_as::<_, (String, Option<String>, String, Option<String>)>(
+            "SELECT j.kind::text, j.runnable_path, j.tag, j.raw_code
+             FROM v2_job j JOIN v2_job_queue q ON j.id = q.id LIMIT 1",
+        )
+        .fetch_one(&db)
+        .await?;
+        assert_eq!(kind, "preview");
+        assert_eq!(path.as_deref(), Some("f/ducklake_maintenance/legacy"));
+        assert_eq!(tag, "duckdb");
+        let raw_code = raw_code.expect("maintenance job must carry generated SQL");
+        assert!(raw_code.contains("ducklake_expire_snapshots"));
+        assert!(raw_code.contains("INTERVAL '3 days'"));
+        Ok(())
+    }
+
+    // Saving maintenance off must remove the managed row AND its queued
+    // occurrence in BOTH builds: the enterprise sync reconciles, and the
+    // public stub must not leave a job pushed under the enterprise edition
+    // to run after the admin disabled maintenance (EE-to-CE downgrade).
+    #[sqlx::test(migrations = "../migrations", fixtures("base", "schedule_push"))]
+    async fn test_sync_disable_clears_managed_row_and_queued_occurrence(
+        db: Pool<Postgres>,
+    ) -> anyhow::Result<()> {
+        use std::collections::HashMap;
+        use windmill_common::workspaces::{
+            Ducklake, DucklakeCatalog, DucklakeCatalogResourceType, DucklakeMaintenance,
+            DucklakeStorage,
+        };
+        use windmill_queue::ducklake_maintenance::sync_ducklake_maintenance_schedules;
+
+        fn lake(maintenance_enabled: bool) -> Ducklake {
+            Ducklake {
+                catalog: DucklakeCatalog {
+                    resource_type: DucklakeCatalogResourceType::Postgresql,
+                    resource_path: "u/test/pg".to_string(),
+                },
+                storage: DucklakeStorage { storage: None, path: "legacy".to_string() },
+                extra_args: None,
+                maintenance: Some(DucklakeMaintenance {
+                    enabled: maintenance_enabled,
+                    schedule: None,
+                    retention_days: None,
+                    compaction: None,
+                    orphan_cleanup: None,
+                }),
+            }
+        }
+
+        // a managed row with a queued occurrence (queued via fall-through: no
+        // lake config exists yet, so the push resolves the script path)
+        let schedule = make_schedule(|s| {
+            s.path = "f/ducklake_maintenance/legacy".to_string();
+        });
+        sqlx::query(
+            "INSERT INTO schedule (workspace_id, path, schedule, timezone, edited_by, script_path,
+                is_flow, enabled, email, permissioned_as, cron_version)
+             VALUES ($1, $2, $3, 'UTC', $4, $5, false, true, $6, $7, 'v2')",
+        )
+        .bind(&schedule.workspace_id)
+        .bind(&schedule.path)
+        .bind(&schedule.schedule)
+        .bind(&schedule.edited_by)
+        .bind(&schedule.script_path)
+        .bind(&schedule.email)
+        .bind(&schedule.permissioned_as)
+        .execute(&db)
+        .await?;
+        let authed = make_authed();
+        let tx = db.begin().await?;
+        let tx = push_scheduled_job(&db, tx, &schedule, Some(&authed), None).await?;
+        tx.commit().await?;
+        assert_eq!(count_queued_jobs(&db).await, 1);
+
+        // maintenance saved off
+        let previous = HashMap::from([("legacy".to_string(), lake(true))]);
+        let current = HashMap::from([("legacy".to_string(), lake(false))]);
+        let tx = db.begin().await?;
+        let tx = sync_ducklake_maintenance_schedules(
+            &db,
+            tx,
+            &schedule.workspace_id,
+            &current,
+            &previous,
+            "test-user",
+            "test@windmill.dev",
+        )
+        .await?;
+        tx.commit().await?;
+
+        assert_eq!(
+            count_queued_jobs(&db).await,
+            0,
+            "queued occurrence must be cleared when maintenance is saved off"
+        );
+        let row_exists: bool = sqlx::query_scalar(
+            "SELECT EXISTS(SELECT 1 FROM schedule WHERE workspace_id = $1 AND path = $2)",
+        )
+        .bind(&schedule.workspace_id)
+        .bind(&schedule.path)
+        .fetch_one(&db)
+        .await?;
+        assert!(!row_exists, "managed schedule row must be deleted");
+        Ok(())
+    }
 }
diff --git a/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte b/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte
index 4dd0ed0053..3ba4e9a213 100644
--- a/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte
+++ b/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte
@@ -1,6 +1,14 @@
 <script module lang="ts">
 	import { _ } from 'ag-grid-community'
 
+	export type DucklakeMaintenanceType = {
+		enabled: boolean
+		schedule?: string
+		retention_days?: number
+		compaction?: boolean
+		orphan_cleanup?: boolean
+	}
+
 	export type DucklakeSettingsType = {
 		ducklakes: {
 			name: string
@@ -13,6 +21,7 @@
 				path: string
 			}
 			extra_args?: string
+			maintenance?: DucklakeMaintenanceType
 		}[]
 	}
 
@@ -44,7 +53,8 @@
 			s.ducklakes[ducklake.name] = {
 				catalog: ducklake.catalog,
 				storage: ducklake.storage,
-				extra_args: ducklake.extra_args || undefined
+				extra_args: ducklake.extra_args || undefined,
+				maintenance: ducklake.maintenance
 			}
 		}
 		return s
@@ -52,7 +62,7 @@
 </script>
 
 <script lang="ts">
-	import { Plus, SettingsIcon } from 'lucide-svelte'
+	import { AlertTriangle, ExternalLink, Plus, SettingsIcon, Wrench } from 'lucide-svelte'
 
 	import Button from '../common/button/Button.svelte'
 	import SettingsFooter from './SettingsFooter.svelte'
@@ -65,10 +75,12 @@
 	import Select from '../select/Select.svelte'
 	import ResourcePicker from '../ResourcePicker.svelte'
 	import { usePromise } from '$lib/svelte5Utils.svelte'
-	import { SettingService, WorkspaceService } from '$lib/gen'
+	import { ScheduleService, SettingService, WorkspaceService } from '$lib/gen'
 	import type { GetSettingsResponse } from '$lib/gen'
 
-	import { workspaceStore } from '$lib/stores'
+	import { enterpriseLicense, workspaceStore } from '$lib/stores'
+	import { base } from '$app/paths'
+	import Toggle from '../Toggle.svelte'
 	import { sendUserToast } from '$lib/toast'
 	import ExploreAssetButton from '../ExploreAssetButton.svelte'
 	import Tooltip from '../Tooltip.svelte'
@@ -177,6 +189,40 @@
 		}
 	}
 
+	function editableMaintenance(
+		ducklake: DucklakeSettingsType['ducklakes'][number]
+	): DucklakeMaintenanceType {
+		if (!ducklake.maintenance) ducklake.maintenance = { enabled: false }
+		return ducklake.maintenance
+	}
+
+	// Health of the managed maintenance schedules (push failures auto-disable
+	// them with an error; the schedules UI hides the reserved prefix, so this
+	// is the only surface where that state is visible).
+	const maintenanceHealth = resource(
+		[() => $workspaceStore, () => ducklakeSavedSettings],
+		async ([workspace, saved]) => {
+			const out: Record<string, { enabled: boolean; error?: string }> = {}
+			if (!workspace) return out
+			await Promise.all(
+				(saved?.ducklakes ?? [])
+					.filter((d) => d.maintenance?.enabled)
+					.map(async (d) => {
+						try {
+							const s = await ScheduleService.getSchedule({
+								workspace,
+								path: `f/ducklake_maintenance/${d.name}`
+							})
+							out[d.name] = { enabled: s.enabled ?? false, error: s.error ?? undefined }
+						} catch {
+							// no schedule row (e.g. save predates the feature): nothing to report
+						}
+					})
+			)
+			return out
+		}
+	)
+
 	let secondaryStorageNames = usePromise(
 		() => SettingService.getSecondaryStorageNames({ workspace: $workspaceStore! }),
 		{ loadInit: false }
@@ -186,13 +232,15 @@
 		secondaryStorageNames.refresh()
 	})
 
-	let tableHeadNames = ['Name', 'Catalog', 'Workspace storage', '', ''] as const
+	let tableHeadNames = ['Name', 'Catalog', 'Workspace storage', 'Maintenance', '', ''] as const
 
 	let tableHeadTooltips: Partial<Record<(typeof tableHeadNames)[number], string | undefined>> = {
 		Name: "Ducklakes are referenced in DuckDB scripts with the <code class='px-1 py-0.5 border rounded-md'>ATTACH 'ducklake://name' AS dl;</code> syntax",
 		Catalog: 'Ducklake needs an SQL database to store metadata about the data',
 		'Workspace storage':
-			'Where the data is actually stored, in parquet format. You need to configure a workspace storage first'
+			'Where the data is actually stored, in parquet format. You need to configure a workspace storage first',
+		Maintenance:
+			'Scheduled snapshot expiry, small-file compaction and orphaned-file cleanup, run as jobs on a managed per-lake schedule (EE)'
 	}
 
 	let confirmationModal = createAsyncConfirmationModal()
@@ -337,6 +385,133 @@
 						/>
 					</div>
 				</Cell>
+				<Cell class="w-32">
+					<Popover contentClasses="p-4" enableFlyTransition closeOnOtherPopoverOpen>
+						{#snippet trigger()}
+							<div class="relative">
+								<Button
+									variant="default"
+									size="sm"
+									startIcon={{ icon: Wrench }}
+									btnClasses="whitespace-nowrap ducklake-maintenance-btn"
+								>
+									{ducklake.maintenance?.enabled
+										? `${ducklake.maintenance?.retention_days ?? 7}d retention`
+										: 'Off'}
+								</Button>
+								{#if maintenanceHealth.current?.[ducklake.name] && (maintenanceHealth.current[ducklake.name].error || !maintenanceHealth.current[ducklake.name].enabled)}
+									<AlertTriangle
+										size={14}
+										class="absolute -top-1.5 -right-1.5 text-yellow-500 bg-surface rounded-full"
+									/>
+								{/if}
+							</div>
+						{/snippet}
+						{#snippet content()}
+							<div class="flex flex-col gap-3 w-96">
+								<Toggle
+									size="sm"
+									disabled={!$enterpriseLicense && !ducklake.maintenance?.enabled}
+									eeOnly
+									options={{
+										right: 'Scheduled maintenance',
+										rightTooltip:
+											'Expire old snapshots, merge adjacent small parquet files and delete orphaned files on a schedule. Runs appear as jobs — run history is the audit trail.'
+									}}
+									bind:checked={
+										() => ducklake.maintenance?.enabled ?? false,
+										(v) => (editableMaintenance(ducklake).enabled = v)
+									}
+								/>
+								{#if ducklake.maintenance?.enabled}
+									<Label
+										label="Snapshot retention (days)"
+										tooltip="Snapshots older than this window are expired on each maintenance run. 0 keeps only the current snapshot."
+									>
+										<TextInput
+											inputProps={{ type: 'number', min: 0, step: 1 }}
+											bind:value={
+												() => ducklake.maintenance?.retention_days ?? 7,
+												(v) => {
+													const n = typeof v === 'number' ? v : parseInt(v ?? '')
+													editableMaintenance(ducklake).retention_days = isNaN(n)
+														? undefined
+														: Math.max(0, n)
+												}
+											}
+										/>
+									</Label>
+									{#if (ducklake.maintenance?.retention_days ?? 7) === 0}
+										<p class="text-2xs text-yellow-600 dark:text-yellow-500">
+											Retention 0 expires every snapshot but the current one on each run —
+											time-travel is effectively disabled for this lake.
+										</p>
+									{/if}
+									<Label
+										label="Cadence (cron, UTC)"
+										tooltip="v2 cron expression evaluated in UTC. Leave empty for the default: daily at 03h with a per-lake minute offset."
+									>
+										<TextInput
+											inputProps={{ placeholder: 'daily at 03h (default)' }}
+											bind:value={
+												() => ducklake.maintenance?.schedule ?? '',
+												(v) => (editableMaintenance(ducklake).schedule = v ? String(v) : undefined)
+											}
+										/>
+									</Label>
+									<Toggle
+										size="xs"
+										options={{
+											right: 'Compaction',
+											rightTooltip:
+												'Merge adjacent small parquet files (ducklake_merge_adjacent_files)'
+										}}
+										bind:checked={
+											() => ducklake.maintenance?.compaction ?? true,
+											(v) => (editableMaintenance(ducklake).compaction = v)
+										}
+									/>
+									<Toggle
+										size="xs"
+										options={{
+											right: 'Orphaned file cleanup',
+											rightTooltip:
+												'Delete files present in storage but unknown to the catalog, older than max(retention, 1 day)'
+										}}
+										bind:checked={
+											() => ducklake.maintenance?.orphan_cleanup ?? true,
+											(v) => (editableMaintenance(ducklake).orphan_cleanup = v)
+										}
+									/>
+									<p class="text-2xs text-secondary">
+										Expired snapshots are gone for good: time-travel reads (<code
+											>AT (VERSION => n)</code
+										>) and recorded snapshot references older than the retention window become
+										non-queryable. Freed files are physically deleted with a ~1 day lag.
+									</p>
+									{#if maintenanceHealth.current?.[ducklake.name]?.error || maintenanceHealth.current?.[ducklake.name]?.enabled === false}
+										<Alert title="Maintenance schedule needs attention" type="warning" size="xs">
+											{maintenanceHealth.current?.[ducklake.name]?.error ??
+												'The managed schedule is disabled.'}
+											Re-save the ducklake settings to retry.
+										</Alert>
+									{/if}
+									{#if ducklakeSavedSettings.ducklakes.find((d) => d.name === ducklake.name)?.maintenance?.enabled}
+										<a
+											href={`${base}/runs/?schedule_path=${encodeURIComponent(
+												`f/ducklake_maintenance/${ducklake.name}`
+											)}&job_kinds=previews`}
+											target="_blank"
+											class="text-2xs inline-flex items-center gap-1"
+										>
+											View maintenance runs <ExternalLink size={12} />
+										</a>
+									{/if}
+								{/if}
+							</div>
+						{/snippet}
+					</Popover>
+				</Cell>
 				<Cell class="w-12">
 					<div class="flex gap-1">
 						<Popover contentClasses="p-4" enableFlyTransition closeOnOtherPopoverOpen>

From 5ad2de91a26b312bf27124ceca16ef331621bde8 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sat, 4 Jul 2026 16:07:39 +0000
Subject: [PATCH 42/76] feat(sdk): enforce s3:// URIs for string S3 params +
 ingestion (EL) docs (#9912)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(pipelines): ingestion (EL) templates + docs

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): review nits — draft collision guard, template-mode selection reset, invariant test

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): lead the insert menu with ingestion templates

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor(pipelines): ingestion story as docs-only — drop editor template UI

The insert-menu template section mixed two selection grammars in one popover and confused more than it helped. The three E2E-verified example pipelines now live verbatim in docs/pipeline-ingestion.md; the Python bare-string S3 key fix in pipelineTemplates.ts stays.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(sdk): bare string S3 keys in py/ts clients + asset parsers

A plain string passed where an S3Object is expected is now a bare key in the default storage — previously the py client silently degraded it to s3="" (auto-generated key) and both asset parsers canonicalized it without the leading slash, splitting lineage. parseS3Object moves to s3Types.ts so it is unit-testable without the generated services. The pipeline template fix from the earlier commit is superseded (bare strings are the supported spelling again); docs examples flipped to bare keys.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor(sdk): enforce s3:// URIs for string S3Object params

Bare strings now raise/throw with a hint pointing at the s3:///<key> spelling instead of being treated as keys (previous commit) or silently degrading to an empty key (original behavior). One string spelling everywhere: SDK calls, // on annotations, and DuckDB SQL all use s3:///<key>. TS regains the s3://-template-literal type; the asset parsers record no asset for a bare string (the call can only error); templates emit the URI form.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs(pipelines): move ingestion (EL) guide to windmilldocs, keep design constraints

User-facing how-to (engine choice, cursor recipes, schema drift, worked examples) moves to windmilldocs core_concepts/63_pipelines (windmilldocs#1462); the repo keeps only the design constraints future feature work must not break, as a section of ducklake-materialization.md.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: regenerate system prompts after parse_s3_object docstring change

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(sdk): reject empty-key s3 URIs; align asset parsers with the runtime rule

Addresses CI review: s3:/// and s3://bucket/ now raise (an empty key would fall back to the auto-generated-key path the strict contract exists to prevent); the asset parsers' string branch applies the same valid-URI-with-non-empty-key rule so no R/W edge is recorded for a call that can only error (the generic URI-literal scan still records ambiguous access-None assets, by design); comments rephrased as current constraints per AGENTS.md.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../windmill-parser-py-asset/src/lib.rs       | 50 +++++++++++++++-
 .../windmill-parser-ts-asset/src/lib.rs       | 53 +++++++++++++++-
 cli/src/guidance/skills.gen.ts                | 60 ++++++++++++-------
 docs/ducklake-materialization.md              | 40 ++++++++++++-
 .../assets/AssetGraph/pipelineTemplates.ts    | 16 +++--
 python-client/tests/wmill_client_test.py      | 44 ++++++++++++++
 python-client/wmill/wmill/client.py           | 23 +++++--
 system_prompts/auto-generated/prompts.ts      | 24 +++++---
 system_prompts/auto-generated/script.md       | 24 +++++---
 system_prompts/auto-generated/sdks/python.md  |  6 +-
 .../auto-generated/sdks/typescript.md         | 18 +++---
 .../skills/write-script-bun/SKILL.md          | 18 +++---
 .../skills/write-script-bunnative/SKILL.md    | 18 +++---
 .../skills/write-script-deno/SKILL.md         | 18 +++---
 .../skills/write-script-python3/SKILL.md      |  6 +-
 typescript-client/client.ts                   | 13 +---
 typescript-client/s3Types.d.ts                |  1 +
 typescript-client/s3Types.ts                  | 26 +++++++-
 typescript-client/tests/s3Types.test.ts       | 52 ++++++++++++++++
 19 files changed, 417 insertions(+), 93 deletions(-)
 create mode 100644 typescript-client/tests/s3Types.test.ts

diff --git a/backend/parsers/windmill-parser-py-asset/src/lib.rs b/backend/parsers/windmill-parser-py-asset/src/lib.rs
index 2282025092..4e39a077f8 100644
--- a/backend/parsers/windmill-parser-py-asset/src/lib.rs
+++ b/backend/parsers/windmill-parser-py-asset/src/lib.rs
@@ -319,12 +319,24 @@ fn dict_str_value(dict: &rustpython_ast::ExprDict, name: &str) -> Option<String>
 /// `write_s3_file` to a canonical asset path, mirroring `windmill-parser-ts-asset`:
 /// `S3Object(s3="<key>", storage="<bucket>"?)` — or the equivalent dict literal —
 /// maps to the URI `s3://<bucket>/<key>` (empty bucket for default storage, i.e.
-/// `s3:///<key>`), and a bare `"s3://bucket/key"` string is passed through.
+/// `s3:///<key>`), and a `"s3://bucket/key"` URI string is passed through.
+/// String args mirror the runtime `parse_s3_object` contract exactly: only a
+/// `s3://<storage>/<key>` URI with a non-empty key is valid — any other
+/// string (bare key, `s3://x`, empty key) raises at run time, so recording an
+/// edge for it would be a phantom node for a call that can only error.
 /// The resulting URI is fed through `parse_asset_syntax` so the stored path
 /// matches the TS object form and the `# on s3:///…` trigger form exactly.
 fn s3_object_arg_path(expr: &Expr) -> Option<String> {
     let uri = match expr {
-        Expr::Constant(ExprConstant { value: Constant::Str(s), .. }) => s.clone(),
+        Expr::Constant(ExprConstant { value: Constant::Str(s), .. }) => {
+            match s
+                .strip_prefix("s3://")
+                .and_then(|rest| rest.split_once('/'))
+            {
+                Some((_, key)) if !key.is_empty() => s.clone(),
+                _ => return None,
+            }
+        }
         Expr::Call(call) => {
             // `S3Object(...)` imported directly or as `wmill.S3Object(...)`
             let func_name = call
@@ -378,6 +390,40 @@ def main():
         );
     }
 
+    #[test]
+    fn test_py_asset_parser_bare_string_no_asset() {
+        // A plain (non-`s3://`) string is rejected by the runtime
+        // `parse_s3_object`, so the parser must not record a phantom asset
+        // for a call that can only error.
+        let input = r#"
+import wmill
+def main():
+    wmill.write_s3_file("pipelines/etl/out.jsonl", b"")
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(s.map_err(|e| e.to_string()), Ok(vec![]));
+    }
+
+    #[test]
+    fn test_py_asset_parser_invalid_uri_no_write_edge() {
+        // `s3://x` (no key part) and `s3://bucket/` (empty key) are rejected
+        // by the runtime `parse_s3_object` — same rule for the SDK-arg path:
+        // no R/W edge. The generic URI-literal scan may still record them as
+        // ambiguous (`access_type: None`) assets, like any `s3://…` string
+        // constant anywhere in a script.
+        let input = r#"
+import wmill
+def main():
+    wmill.write_s3_file("s3://broken", b"")
+    wmill.write_s3_file("s3://bucket/", b"")
+"#;
+        let assets = parse_assets(input).expect("parse").assets;
+        assert!(
+            assets.iter().all(|a| a.access_type.is_none()),
+            "invalid URIs must not produce R/W edges: {assets:?}"
+        );
+    }
+
     #[test]
     fn test_py_asset_parser_write_s3_object_constructor() {
         // The SDK signature is `write_s3_file(s3object: S3Object | str, ...)` and
diff --git a/backend/parsers/windmill-parser-ts-asset/src/lib.rs b/backend/parsers/windmill-parser-ts-asset/src/lib.rs
index b7fe0fea5c..e38dc1e7f3 100644
--- a/backend/parsers/windmill-parser-ts-asset/src/lib.rs
+++ b/backend/parsers/windmill-parser-ts-asset/src/lib.rs
@@ -341,12 +341,25 @@ fn object_str_prop(obj: &ObjectLit, name: &str) -> Option<String> {
 /// `writeS3File` to a canonical asset path, mirroring the runtime
 /// `parseS3Object`: an object `{ s3: "<key>", storage?: "<bucket>" }` maps to
 /// the URI `s3://<bucket>/<key>` (empty bucket for default storage, i.e.
-/// `s3:///<key>`), and a bare `"s3://bucket/key"` string is passed through.
+/// `s3:///<key>`), and a `"s3://bucket/key"` URI string is passed through.
+/// String args mirror the runtime `parseS3Object` contract exactly: only a
+/// `s3://<storage>/<key>` URI with a non-empty key is valid — any other
+/// string (bare key, `s3://x`, empty key) throws at run time, so recording an
+/// edge for it would be a phantom node for a call that can only error.
 /// The resulting URI is fed through `parse_asset_syntax` so the stored path
 /// matches the `// on s3:///…` trigger form exactly.
 fn s3_object_arg_path(arg: &Expr) -> Option<String> {
     let uri = match arg {
-        Expr::Lit(Lit::Str(s)) => s.value.to_string(),
+        Expr::Lit(Lit::Str(s)) => {
+            let v = s.value.to_string();
+            match v
+                .strip_prefix("s3://")
+                .and_then(|rest| rest.split_once('/'))
+            {
+                Some((_, key)) if !key.is_empty() => v,
+                _ => return None,
+            }
+        }
         Expr::Object(obj) => {
             let key = object_str_prop(obj, "s3")?;
             let storage = object_str_prop(obj, "storage").unwrap_or_default();
@@ -477,6 +490,42 @@ mod tests {
         );
     }
 
+    #[test]
+    fn test_ts_asset_parser_bare_string_no_asset() {
+        // A plain (non-`s3://`) string is rejected by the runtime
+        // `parseS3Object`, so the parser must not record a phantom asset for
+        // a call that can only error.
+        let input = r#"
+            import * as wmill from "windmill-client"
+            export async function main() {
+                await wmill.writeS3File("pipelines/etl/out.jsonl", "[]")
+            }
+        "#;
+        let s = parse_assets(input);
+        assert_eq!(s.map(|r| r.assets).map_err(|e| e.to_string()), Ok(vec![]));
+    }
+
+    #[test]
+    fn test_ts_asset_parser_invalid_uri_no_write_edge() {
+        // `s3://x` (no key part) and `s3://bucket/` (empty key) are rejected
+        // by the runtime `parseS3Object` — same rule for the SDK-arg path:
+        // no R/W edge. The generic URI-literal scan may still record them as
+        // ambiguous (`access_type: None`) assets, like any `s3://…` string
+        // constant anywhere in a script.
+        let input = r#"
+            import * as wmill from "windmill-client"
+            export async function main() {
+                await wmill.writeS3File("s3://broken", "[]")
+                await wmill.writeS3File("s3://bucket/", "[]")
+            }
+        "#;
+        let assets = parse_assets(input).expect("parse").assets;
+        assert!(
+            assets.iter().all(|a| a.access_type.is_none()),
+            "invalid URIs must not produce R/W edges: {assets:?}"
+        );
+    }
+
     #[test]
     fn test_ts_asset_parser_multiple_s3_object_writes() {
         // Mirrors the f/km/r_seed shape: several direct object-form writes in
diff --git a/cli/src/guidance/skills.gen.ts b/cli/src/guidance/skills.gen.ts
index d0fa0e8aaf..b6d9394179 100644
--- a/cli/src/guidance/skills.gen.ts
+++ b/cli/src/guidance/skills.gen.ts
@@ -1000,13 +1000,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -1076,6 +1069,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (\`s3://storage/key\`, \`s3:///key\`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
@@ -1760,13 +1764,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -1836,6 +1833,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (\`s3://storage/key\`, \`s3:///key\`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
@@ -2612,13 +2620,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -2688,6 +2689,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (\`s3://storage/key\`, \`s3:///key\`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
@@ -4367,7 +4379,11 @@ def get_state_path() -> str
 # Parse resource syntax from string.
 def parse_resource_syntax(s: str) -> Optional[str]
 
-# Parse S3 object from string or S3Object format.
+# Parse S3 object from a \`s3://<storage>/<key>\` URI string (\`s3:///<key>\`
+# for the default storage) or S3Object format. Any other string raises
+# rather than falling back to an auto-generated key: an auto key is
+# requested by omitting the object, and a fallback would silently misplace
+# the upload on any typo.
 def parse_s3_object(s3_object: S3Object | str) -> S3Object
 
 # Parse variable syntax from string.
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index f0a8c38f45..8329958baa 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -2,7 +2,10 @@
 
 Design sketch for "managed, versioned, incremental" assets built on the
 DuckLake substrate. This is a companion to [`pipelines-vs-dbt.md`](./pipelines-vs-dbt.md)
-and extends its **Path C (hybrid, partition-first)** recommendation. The new
+and extends its **Path C (hybrid, partition-first)** recommendation. For the
+extract-load side that feeds these materializations, see §"Ingestion (EL)"
+at the end of this doc (user-facing guide: windmilldocs
+`core_concepts/63_pipelines` → "Ingestion (EL)"). The new
 contribution here is leveraging DuckLake's snapshot/time-travel layer, which
 the earlier doc's incremental deep-dive did not use. The annotation grammar is
 reconciled with that doc — `// partitioned` + `// unique_key` + `// append`
@@ -465,3 +468,38 @@ forces"; DuckLake-specific:
    rejects anything else at deploy with a clear error pointing to
    `// materialize manual`. The classifier (`sql_materialize.rs`) is the single
    source of truth.
+
+## Ingestion (EL): the sanctioned entry-node shape
+
+Design constraints for how external data enters the lake — the user-facing
+how-to (extract-engine choice, cursor recipes, schema-drift handling, worked
+examples) lives in windmilldocs `core_concepts/63_pipelines` → "Ingestion
+(EL)"; this section records only what future feature work must not break.
+
+- **`// materialize` is DuckDB-only** (deploy-rejected elsewhere, managed and
+  `manual` alike — `windmill-api-scripts/src/scripts.rs`), and the SDK
+  materialize helpers (`upsert_partition` / `upsertPartition`) build their SQL
+  inside the SDK, so the asset parsers cannot see the write. A polyglot node
+  that "writes the lake directly" therefore deploys with **no output edge** —
+  breaking lineage, cascade scheduling, and the backfill UI's producer lookup.
+- **The sanctioned polyglot shape is two scripts**: an entry node that lands
+  the raw batch as an object in workspace storage (`write_s3_file` — a
+  parser-visible write), and a DuckDB loader (`-- on s3:///<key>` +
+  `-- materialize`) that the asset dispatcher re-runs per batch. The landing
+  object is the seam; splitting E from L also keeps row work vectorized and
+  gives the load the full engine treatment (strategies, snapshots, partition
+  grid, `// data_test`).
+- **One string spelling: `s3:///<key>`.** SDK string params are strictly
+  `s3://…` URIs with a non-empty key; anything else raises (clients >
+  1.746.0 — older clients silently upload such strings to an auto-generated
+  `windmill_uploads/…` name, so keep URIs in code that must run on them).
+  The same URI is what
+  `// on` annotations and DuckDB SQL take, and all forms (URI, `{s3}` object,
+  `S3Object(s3=…)`) canonicalize to path `/<key>`. The asset parsers record
+  **no asset** for a bare-string SDK argument (the call can only error at
+  run time) — keep `parse_s3_object` (py client), `parseS3Object`
+  (ts client, `s3Types.ts`) and both `s3_object_arg_path` parsers in lockstep
+  when touching any of them.
+- DuckDB workers load no ICU extension: bare `TIMESTAMPTZ - INTERVAL`
+  arithmetic binder-errors. Incremental-pull SQL casts both sides
+  (`updated_at::TIMESTAMP > now()::TIMESTAMP - INTERVAL 7 DAY`).
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
index 63a90ef099..11077d3609 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
@@ -391,8 +391,11 @@ function bodyTs(ctx: TemplateContext): string {
 		if (!input) return ''
 		switch (input.kind) {
 			case 's3object':
+				// `s3:///<key>` URI — one spelling shared with the `// on
+				// s3:///…` annotation form (the object literal `{ s3: <key> }`
+				// is equivalent).
 				return [
-					`  const buf = await wmill.loadS3File({ s3: ${JSON.stringify(s3Key(input.path))} })`,
+					`  const buf = await wmill.loadS3File(${JSON.stringify(`s3:///${s3Key(input.path)}`)})`,
 					`  const rows = JSON.parse(new TextDecoder().decode(buf))`,
 					``
 				].join('\n')
@@ -418,9 +421,10 @@ function bodyTs(ctx: TemplateContext): string {
 		switch (outputKind) {
 			case 's3_parquet':
 			case 's3_object':
+				// `s3:///<key>` URI — see the loadS3File note above.
 				return [
 					`  const payload = new TextEncoder().encode(JSON.stringify(rows))`,
-					`  await wmill.writeS3File({ s3: ${JSON.stringify(s3Key(output.path))} }, payload)`
+					`  await wmill.writeS3File(${JSON.stringify(`s3:///${s3Key(output.path)}`)}, payload)`
 				].join('\n')
 			case 'datatable': {
 				const dbName = output.path.split('/')[0] ?? 'main'
@@ -474,8 +478,11 @@ function bodyPython(ctx: TemplateContext): string {
 		if (!input) return ''
 		switch (input.kind) {
 			case 's3object':
+				// `s3:///<key>` URI — SDK string params must be s3:// URIs
+				// (bare keys are rejected), and this form matches the
+				// `# on s3:///…` annotation spelling.
 				return [
-					`    buf = wmill.load_s3_file(${JSON.stringify(s3Key(input.path))})`,
+					`    buf = wmill.load_s3_file(${JSON.stringify(`s3:///${s3Key(input.path)}`)})`,
 					`    import json; rows = json.loads(buf.decode("utf-8"))`
 				].join('\n')
 			case 'datatable':
@@ -498,9 +505,10 @@ function bodyPython(ctx: TemplateContext): string {
 		switch (outputKind) {
 			case 's3_parquet':
 			case 's3_object':
+				// `s3:///<key>` URI — see the load_s3_file note above.
 				return [
 					`    import json`,
-					`    wmill.write_s3_file(${JSON.stringify(s3Key(output.path))}, json.dumps(rows).encode("utf-8"))`
+					`    wmill.write_s3_file(${JSON.stringify(`s3:///${s3Key(output.path)}`)}, json.dumps(rows).encode("utf-8"))`
 				].join('\n')
 			case 'datatable': {
 				const dbName = output.path.split('/')[0] ?? 'main'
diff --git a/python-client/tests/wmill_client_test.py b/python-client/tests/wmill_client_test.py
index 3309e1ab5f..6df80919cf 100644
--- a/python-client/tests/wmill_client_test.py
+++ b/python-client/tests/wmill_client_test.py
@@ -124,5 +124,49 @@ SET s3_secret_access_key='80yMndIMcyXwEujxVNINQbf0tBlIzRaLPyM2m1n4';
             wmill.load_s3_file(s3_obj)
 
 
+class TestParseS3Object(unittest.TestCase):
+    """Pure-unit tests for parse_s3_object — no network/env needed."""
+
+    def test_bare_string_raises_with_uri_hint(self):
+        # A bare key is rejected rather than silently uploading under an
+        # auto-generated name; the error points at the s3:/// spelling.
+        with self.assertRaisesRegex(ValueError, "s3:///dir/file.json"):
+            wmill.parse_s3_object("dir/file.json")
+
+    def test_triple_slash_uri_is_default_storage(self):
+        self.assertEqual(
+            wmill.parse_s3_object("s3:///dir/file.json"),
+            S3Object(s3="dir/file.json", storage=None),
+        )
+
+    def test_full_uri_splits_storage_and_key(self):
+        self.assertEqual(
+            wmill.parse_s3_object("s3://bucket/dir/f"),
+            S3Object(s3="dir/f", storage="bucket"),
+        )
+
+    def test_malformed_uri_raises(self):
+        # `s3://x` has no key part — fail loudly instead of silently
+        # misplacing the object.
+        with self.assertRaises(ValueError):
+            wmill.parse_s3_object("s3://broken")
+
+    def test_empty_key_uri_raises(self):
+        # An empty key is never a valid target: it would fall back to an
+        # auto-generated key, which is requested by omitting the object.
+        with self.assertRaises(ValueError):
+            wmill.parse_s3_object("s3:///")
+        with self.assertRaises(ValueError):
+            wmill.parse_s3_object("s3://bucket/")
+
+    def test_empty_string_raises(self):
+        # Auto-generated keys are requested by omitting the object (None),
+        # not by an empty string.
+        with self.assertRaises(ValueError):
+            wmill.parse_s3_object("")
+
+    def test_s3object_passes_through(self):
+        self.assertEqual(wmill.parse_s3_object(S3Object(s3="x")), S3Object(s3="x"))
+
 if __name__ == "__main__":
     unittest.main()
diff --git a/python-client/wmill/wmill/client.py b/python-client/wmill/wmill/client.py
index e1a59b312d..fc4c34737d 100644
--- a/python-client/wmill/wmill/client.py
+++ b/python-client/wmill/wmill/client.py
@@ -2212,12 +2212,27 @@ def parse_resource_syntax(s: str) -> Optional[str]:
     return None
 
 def parse_s3_object(s3_object: S3Object | str) -> S3Object:
-    """Parse S3 object from string or S3Object format."""
+    """Parse S3 object from a `s3://<storage>/<key>` URI string (`s3:///<key>`
+    for the default storage) or S3Object format. Any other string raises
+    rather than falling back to an auto-generated key: an auto key is
+    requested by omitting the object, and a fallback would silently misplace
+    the upload on any typo.
+    """
     if isinstance(s3_object, str):
-        match = re.match(r'^s3://([^/]*)/(.*)$', s3_object)
+        match = re.match(r'^s3://([^/]*)/(.+)$', s3_object)
         if match:
-            return S3Object(s3=match.group(2) or "", storage=match.group(1) or None)
-        return S3Object(s3="")
+            return S3Object(s3=match.group(2), storage=match.group(1) or None)
+        if s3_object.startswith("s3://"):
+            raise ValueError(
+                f"Invalid s3 object URI {s3_object!r}: expected "
+                "s3://<storage>/<key> with a non-empty key "
+                "(s3:///<key> for the default storage)"
+            )
+        raise ValueError(
+            f"Invalid s3 object {s3_object!r}: expected an s3://<storage>/<key> "
+            f"URI (e.g. 's3:///{s3_object}' for key {s3_object!r} in the default "
+            "storage) or S3Object(s3=<key>)"
+        )
     else:
         return s3_object
 
diff --git a/system_prompts/auto-generated/prompts.ts b/system_prompts/auto-generated/prompts.ts
index 434a52da63..7b7e3fcf52 100644
--- a/system_prompts/auto-generated/prompts.ts
+++ b/system_prompts/auto-generated/prompts.ts
@@ -1447,13 +1447,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -1523,6 +1516,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (\`s3://storage/key\`, \`s3:///key\`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
@@ -2108,7 +2112,11 @@ def get_state_path() -> str
 # Parse resource syntax from string.
 def parse_resource_syntax(s: str) -> Optional[str]
 
-# Parse S3 object from string or S3Object format.
+# Parse S3 object from a \`s3://<storage>/<key>\` URI string (\`s3:///<key>\`
+# for the default storage) or S3Object format. Any other string raises
+# rather than falling back to an auto-generated key: an auto key is
+# requested by omitting the object, and a fallback would silently misplace
+# the upload on any typo.
 def parse_s3_object(s3_object: S3Object | str) -> S3Object
 
 # Parse variable syntax from string.
diff --git a/system_prompts/auto-generated/script.md b/system_prompts/auto-generated/script.md
index bdfec21036..408f1354b7 100644
--- a/system_prompts/auto-generated/script.md
+++ b/system_prompts/auto-generated/script.md
@@ -1888,13 +1888,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -1964,6 +1957,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (`s3://storage/key`, `s3:///key`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
@@ -2549,7 +2553,11 @@ def get_state_path() -> str
 # Parse resource syntax from string.
 def parse_resource_syntax(s: str) -> Optional[str]
 
-# Parse S3 object from string or S3Object format.
+# Parse S3 object from a `s3://<storage>/<key>` URI string (`s3:///<key>`
+# for the default storage) or S3Object format. Any other string raises
+# rather than falling back to an auto-generated key: an auto key is
+# requested by omitting the object, and a fallback would silently misplace
+# the upload on any typo.
 def parse_s3_object(s3_object: S3Object | str) -> S3Object
 
 # Parse variable syntax from string.
diff --git a/system_prompts/auto-generated/sdks/python.md b/system_prompts/auto-generated/sdks/python.md
index e6bb79d8d8..c750f03bcf 100644
--- a/system_prompts/auto-generated/sdks/python.md
+++ b/system_prompts/auto-generated/sdks/python.md
@@ -526,7 +526,11 @@ def get_state_path() -> str
 # Parse resource syntax from string.
 def parse_resource_syntax(s: str) -> Optional[str]
 
-# Parse S3 object from string or S3Object format.
+# Parse S3 object from a `s3://<storage>/<key>` URI string (`s3:///<key>`
+# for the default storage) or S3Object format. Any other string raises
+# rather than falling back to an auto-generated key: an auto key is
+# requested by omitting the object, and a fallback would silently misplace
+# the upload on any typo.
 def parse_s3_object(s3_object: S3Object | str) -> S3Object
 
 # Parse variable syntax from string.
diff --git a/system_prompts/auto-generated/sdks/typescript.md b/system_prompts/auto-generated/sdks/typescript.md
index 8557995d55..8100929776 100644
--- a/system_prompts/auto-generated/sdks/typescript.md
+++ b/system_prompts/auto-generated/sdks/typescript.md
@@ -455,13 +455,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -531,6 +524,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (`s3://storage/key`, `s3:///key`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
diff --git a/system_prompts/auto-generated/skills/write-script-bun/SKILL.md b/system_prompts/auto-generated/skills/write-script-bun/SKILL.md
index e6b7e3273e..7dcaec30bc 100644
--- a/system_prompts/auto-generated/skills/write-script-bun/SKILL.md
+++ b/system_prompts/auto-generated/skills/write-script-bun/SKILL.md
@@ -626,13 +626,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -702,6 +695,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (`s3://storage/key`, `s3:///key`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
diff --git a/system_prompts/auto-generated/skills/write-script-bunnative/SKILL.md b/system_prompts/auto-generated/skills/write-script-bunnative/SKILL.md
index 8ef23a996c..86c3bfd010 100644
--- a/system_prompts/auto-generated/skills/write-script-bunnative/SKILL.md
+++ b/system_prompts/auto-generated/skills/write-script-bunnative/SKILL.md
@@ -626,13 +626,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -702,6 +695,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (`s3://storage/key`, `s3:///key`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
diff --git a/system_prompts/auto-generated/skills/write-script-deno/SKILL.md b/system_prompts/auto-generated/skills/write-script-deno/SKILL.md
index 9b1b04fa89..f7f3a517db 100644
--- a/system_prompts/auto-generated/skills/write-script-deno/SKILL.md
+++ b/system_prompts/auto-generated/skills/write-script-deno/SKILL.md
@@ -626,13 +626,6 @@ async requestInteractiveSlackApproval({ slackResourcePath, channelId, message, a
  */
 async requestInteractiveTeamsApproval({ teamName, channelName, message, approver, defaultArgsJson, dynamicEnumsJson, }: TeamsApprovalOptions): Promise<void>
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-parseS3Object(s3Object: S3Object): S3ObjectRecord
-
 setWorkflowCtx(ctx: WorkflowCtx | null): void
 
 async sleep(seconds: number): Promise<void>
@@ -702,6 +695,17 @@ async parallel<T, R>(items: T[], fn: (item: T) => PromiseLike<R> | R, options?:
  */
 async commitKafkaOffsets(triggerPath: string, topic: string, partition: number, offset: number,): Promise<void>
 
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (`s3://storage/key`, `s3:///key`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+parseS3Object(s3Object: S3Object): S3ObjectRecord
+
 /**
  * Create a SQL template function for PostgreSQL/datatable queries
  * @param name - Database/datatable name (default: "main")
diff --git a/system_prompts/auto-generated/skills/write-script-python3/SKILL.md b/system_prompts/auto-generated/skills/write-script-python3/SKILL.md
index 4aee54e29a..49c0ab057f 100644
--- a/system_prompts/auto-generated/skills/write-script-python3/SKILL.md
+++ b/system_prompts/auto-generated/skills/write-script-python3/SKILL.md
@@ -711,7 +711,11 @@ def get_state_path() -> str
 # Parse resource syntax from string.
 def parse_resource_syntax(s: str) -> Optional[str]
 
-# Parse S3 object from string or S3Object format.
+# Parse S3 object from a `s3://<storage>/<key>` URI string (`s3:///<key>`
+# for the default storage) or S3Object format. Any other string raises
+# rather than falling back to an auto-generated key: an auto key is
+# requested by omitting the object, and a fallback would silently misplace
+# the upload on any typo.
 def parse_s3_object(s3_object: S3Object | str) -> S3Object
 
 # Parse variable syntax from string.
diff --git a/typescript-client/client.ts b/typescript-client/client.ts
index 8b6117fef1..5d2342471b 100644
--- a/typescript-client/client.ts
+++ b/typescript-client/client.ts
@@ -16,10 +16,12 @@ import { OpenAPI } from "./core/OpenAPI";
 import {
   DenoS3LightClientSettings,
   S3ObjectRecord,
+  parseS3Object,
   type S3Object,
 } from "./s3Types";
 
 export {
+  parseS3Object,
   type S3Object,
   type S3ObjectRecord,
   type S3ObjectURI,
@@ -1505,17 +1507,6 @@ function parseResourceSyntax(s: string | undefined) {
   if (s?.startsWith("res://")) return s.substring(6);
 }
 
-/**
- * Parse an S3 object from URI string or record format
- * @param s3Object - S3 object as URI string (s3://storage/key) or record
- * @returns S3 object record with storage and s3 key
- */
-export function parseS3Object(s3Object: S3Object): S3ObjectRecord {
-  if (typeof s3Object === "object") return s3Object;
-  const match = s3Object.match(/^s3:\/\/([^/]*)\/(.*)$/);
-  return { storage: match?.[1] || undefined, s3: match?.[2] ?? "" };
-}
-
 function parseVariableSyntax(s: string) {
   if (s.startsWith("var://")) return s.substring(6);
 }
diff --git a/typescript-client/s3Types.d.ts b/typescript-client/s3Types.d.ts
index 4903edc8ff..57a4af2222 100644
--- a/typescript-client/s3Types.d.ts
+++ b/typescript-client/s3Types.d.ts
@@ -14,3 +14,4 @@ export type DenoS3LightClientSettings = {
     secretKey?: string;
     pathStyle?: boolean;
 };
+export declare function parseS3Object(s3Object: S3Object): S3ObjectRecord;
diff --git a/typescript-client/s3Types.ts b/typescript-client/s3Types.ts
index e9af9b2d30..d2049570f8 100644
--- a/typescript-client/s3Types.ts
+++ b/typescript-client/s3Types.ts
@@ -4,7 +4,8 @@
 export type S3Object = S3ObjectURI | S3ObjectRecord;
 
 /**
- * S3 object URI in the format `s3://storage/key`
+ * S3 object URI in the format `s3://storage/key` (`s3:///key` targets the
+ * workspace default storage)
  */
 export type S3ObjectURI = `s3://${string}/${string}`;
 
@@ -39,3 +40,26 @@ export type DenoS3LightClientSettings = {
   /** Use path-style URLs instead of virtual-hosted style */
   pathStyle?: boolean;
 };
+
+/**
+ * Parse an S3 object from URI string or record format
+ * @param s3Object - S3 object as URI string (`s3://storage/key`, `s3:///key`
+ *   for the default storage) or record. Any other string throws rather than
+ *   falling back to an auto-generated key: an auto key is requested by
+ *   omitting the object, and a fallback would silently misplace the upload
+ *   on any typo.
+ * @returns S3 object record with storage and s3 key
+ */
+export function parseS3Object(s3Object: S3Object): S3ObjectRecord {
+  if (typeof s3Object === "object") return s3Object;
+  const match = s3Object.match(/^s3:\/\/([^/]*)\/(.+)$/);
+  if (match) return { storage: match[1] || undefined, s3: match[2] };
+  if (s3Object.startsWith("s3://")) {
+    throw new Error(
+      `Invalid s3 object URI ${JSON.stringify(s3Object)}: expected s3://<storage>/<key> with a non-empty key (s3:///<key> for the default storage)`
+    );
+  }
+  throw new Error(
+    `Invalid s3 object ${JSON.stringify(s3Object)}: expected an s3://<storage>/<key> URI (e.g. "s3:///${s3Object}" for key "${s3Object}" in the default storage) or { s3: <key> }`
+  );
+}
diff --git a/typescript-client/tests/s3Types.test.ts b/typescript-client/tests/s3Types.test.ts
new file mode 100644
index 0000000000..6f67a6493c
--- /dev/null
+++ b/typescript-client/tests/s3Types.test.ts
@@ -0,0 +1,52 @@
+import { describe, expect, test } from "bun:test";
+import { parseS3Object } from "../s3Types";
+
+describe("parseS3Object", () => {
+  test("bare string throws with the s3:/// hint", () => {
+    // A bare key is rejected rather than silently uploading under an
+    // auto-generated name; the error points at the s3:/// spelling.
+    expect(() => parseS3Object("dir/file.json" as any)).toThrow(
+      /s3:\/\/\/dir\/file\.json/
+    );
+  });
+
+  test("triple-slash URI targets the default storage", () => {
+    expect(parseS3Object("s3:///dir/file.json")).toEqual({
+      storage: undefined,
+      s3: "dir/file.json",
+    });
+  });
+
+  test("full URI splits storage and key", () => {
+    expect(parseS3Object("s3://bucket/dir/f")).toEqual({
+      storage: "bucket",
+      s3: "dir/f",
+    });
+  });
+
+  test("malformed s3:// URI throws", () => {
+    // `s3://x` has no key part — fail loudly instead of silently misplacing
+    // the object.
+    expect(() => parseS3Object("s3://broken" as any)).toThrow(
+      /Invalid s3 object/
+    );
+  });
+
+  test("empty-key URIs throw", () => {
+    // An empty key is never a valid target: it would fall back to an
+    // auto-generated key, which is requested by omitting the object.
+    expect(() => parseS3Object("s3:///" as any)).toThrow(/Invalid s3 object/);
+    expect(() => parseS3Object("s3://bucket/")).toThrow(/Invalid s3 object/);
+  });
+
+  test("empty string throws (omit the object for an auto-generated key)", () => {
+    expect(() => parseS3Object("" as any)).toThrow(/Invalid s3 object/);
+  });
+
+  test("record form passes through", () => {
+    expect(parseS3Object({ s3: "x", storage: "b" })).toEqual({
+      s3: "x",
+      storage: "b",
+    });
+  });
+});

From d4b4374de8f8a7875b050c16d1236fcd0355812b Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sat, 4 Jul 2026 17:10:52 +0000
Subject: [PATCH 43/76] feat(pipelines): capture violating-row samples for data
 tests (#9919)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(pipelines): capture violating-row samples for data tests

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): byte-accurate sample cap and leaf-level payload sanitize

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: bump ee-repo-ref to WAP guard probe adaptation

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs: WAP failures are counts-only — samples exist only on commit-then-test

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs: qualify where sample row data appears — job result and failed-job log line

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* docs: error handlers receive the full result incl. samples, like any failed job

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 80d309edebb899e36a3bdcdf4ea73c4db070534d

This commit updates the EE repository reference after PR #646 was merged in windmill-ee-private.

Previous ee-repo-ref: 16e916bf11f26381920560b55771fce693e668c6

New ee-repo-ref: 80d309edebb899e36a3bdcdf4ea73c4db070534d

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 backend/ee-repo-ref.txt                       |   2 +-
 .../windmill-parser/src/sql_materialize.rs    | 244 ++++++++++++------
 .../windmill-duckdb-ffi-internal/src/lib.rs   | 149 +++++++++++
 .../windmill-worker/src/duckdb_executor.rs    | 148 +++++++++--
 docs/ducklake-materialization.md              |  77 +++++-
 .../src/lib/components/DataTestsResult.svelte |  67 +++--
 .../src/lib/components/DisplayResult.svelte   |  61 +++--
 7 files changed, 604 insertions(+), 144 deletions(-)

diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index 2c16f06c50..e6344939d1 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-2fab310d4f50ed7c34857d69c9b854f4491bf217
+80d309edebb899e36a3bdcdf4ea73c4db070534d
diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index d684cf431b..145e636904 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -837,16 +837,29 @@ pub fn materialize_result_sql(
     if checks.is_empty() {
         return format!("SELECT {base_cols};");
     }
-    // Per-test breakdown. Each check's violating-count is computed once as a CTE
-    // column (`c0`, `c1`, …); the `data_tests` list-of-struct then references
-    // those columns — DuckDB rejects scalar subqueries *inside* a struct/list
-    // literal, hence the CTE. Names are single-quote-escaped. The result row
-    // carries the whole breakdown so the worker runs every test (no
-    // abort-on-first) and decides pass/fail itself.
-    let cte_cols = checks
+    // Per-test breakdown. Each check's one-row probe `(v, s)` becomes a CTE
+    // (`_wm_t0`, `_wm_t1`, …); `_wm_tr` cross-joins them (all one-row, so the
+    // join stays one row) and the `data_tests` list-of-struct references the
+    // flattened columns — DuckDB rejects scalar subqueries *inside* a
+    // struct/list literal, hence the CTE lift. Names are single-quote-escaped.
+    // The result row carries the whole breakdown so the worker runs every
+    // test (no abort-on-first) and decides pass/fail itself.
+    let probe_ctes = checks
         .iter()
         .enumerate()
-        .map(|(i, c)| format!("{} AS c{i}", c.violating))
+        .map(|(i, c)| format!("_wm_t{i} AS ({})", c.probe))
+        .collect::<Vec<_>>()
+        .join(", ");
+    let tr_cols = checks
+        .iter()
+        .enumerate()
+        .map(|(i, _)| format!("_wm_t{i}.v AS c{i}, _wm_t{i}.s AS s{i}"))
+        .collect::<Vec<_>>()
+        .join(", ");
+    let tr_from = checks
+        .iter()
+        .enumerate()
+        .map(|(i, _)| format!("_wm_t{i}"))
         .collect::<Vec<_>>()
         .join(", ");
     let list_items = checks
@@ -854,12 +867,12 @@ pub fn materialize_result_sql(
         .enumerate()
         .map(|(i, c)| {
             let name = c.name.replace('\'', "''");
-            format!("{{'test': '{name}', 'violating': c{i}}}")
+            format!("{{'test': '{name}', 'violating': c{i}, 'sample': s{i}}}")
         })
         .collect::<Vec<_>>()
         .join(", ");
     format!(
-        "WITH _wm_tr AS (SELECT {cte_cols}) \
+        "WITH {probe_ctes}, _wm_tr AS (SELECT {tr_cols} FROM {tr_from}) \
          SELECT {base_cols}, [{list_items}] AS data_tests FROM _wm_tr;"
     )
 }
@@ -880,18 +893,19 @@ fn terminate(stmt: &str) -> String {
 //
 // A data test is the FIRST extensible annotation: the parser yields a
 // `DataTest` from a known vocabulary, and this module turns each into a
-// *check* — a `(name, violating-row-count query)` pair — that runs against the
-// freshly-materialized target after the write commits. The materialize summary
-// query embeds every check's count in one `data_tests` column, so all tests
-// run in a single pass (no abort-on-first) and the worker, not the SQL,
-// decides pass/fail and reports the full per-test breakdown.
+// *check* — a `(name, probe)` pair whose probe counts and samples the
+// violating rows — that runs against the freshly-materialized target after
+// the write commits. The materialize summary query embeds every check's
+// outcome in one `data_tests` column, so all tests run in a single pass (no
+// abort-on-first) and the worker, not the SQL, decides pass/fail and reports
+// the full per-test breakdown.
 //
-// The pattern is deliberately open: a verifier is just `(name, count query)`.
-// Built-ins differ only in their count query; the `Custom` escape hatch
-// supplies its own (a user SELECT returning the violating rows). A sibling
-// annotation family (column-lineage) can emit its own checks through the same
-// `push_check` shape rather than bolting on a parallel mechanism. See
-// `docs/ducklake-materialization.md`.
+// The pattern is deliberately open: a verifier is just `(name, violating-rows
+// query)` handed to `push_check`. Built-ins differ only in their rows query;
+// the `Custom` escape hatch supplies its own (a user SELECT returning the
+// violating rows). A sibling annotation family (column-lineage) can emit its
+// own checks through the same `push_check` shape rather than bolting on a
+// parallel mechanism. See `docs/ducklake-materialization.md`.
 
 use crate::asset_parser::{AssetKind, DataTest};
 
@@ -926,19 +940,31 @@ pub enum DataTestResolved {
     Custom { path: String, body: String },
 }
 
-/// One compiled data-test check: a human-readable `name` and a scalar SQL
-/// expression (`violating`) yielding the number of rows that violate it (0 =
-/// pass). The materialize summary query embeds every check's count so the
-/// worker gets the whole breakdown in one result — all tests run (no
-/// abort-on-first) and the worker, not the SQL, decides pass/fail.
+/// One compiled data-test check: a human-readable `name` and a one-row probe
+/// query yielding `(v, s)` — the violating-row count (0 = pass) and a bounded
+/// `to_json` sample of the violating rows as a VARCHAR (NULL when there are
+/// none, or when the serialized sample exceeds the size cap). The materialize
+/// summary query embeds every check's outcome so the worker gets the whole
+/// breakdown in one result — all tests run (no abort-on-first) and the
+/// worker, not the SQL, decides pass/fail. The sample is decoration only:
+/// enforcement reads `v`, never `s`.
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub struct DataTestCheck {
     pub name: String,
-    /// Scalar subquery yielding the violating-row count, e.g.
-    /// `(SELECT count(*) AS v FROM (…))`.
-    pub violating: String,
+    /// One-row subquery `SELECT … AS v, … AS s FROM (…)` counting and
+    /// sampling the check's violating rows in a single scan.
+    pub probe: String,
 }
 
+/// Row cap on a data-test sample. Bounded so the sample stays a debugging aid
+/// (the full count is still reported); no ORDER BY on the violating rows, so
+/// which rows land in the sample is nondeterministic.
+const SAMPLE_MAX_ROWS: usize = 20;
+/// Byte cap on one serialized sample. Oversized samples are dropped entirely
+/// (NULL), never truncated — truncated JSON would fail parsing downstream
+/// after paying the bytes anyway.
+const SAMPLE_MAX_BYTES: usize = 51_200;
+
 /// The SQL a set of data tests compiles to: referenced-asset `ATTACH`
 /// statements (resolved by the executor's ATTACH-transform pass) and the
 /// per-test checks, both in declaration order.
@@ -1002,11 +1028,40 @@ fn partition_scope(ctx: &DataTestCtx, prefix: &str, table_alias: Option<&str>) -
     format!("{prefix}{}", conds.join(" AND "))
 }
 
-// Record one check: its display `name` plus `count_query` (which yields a
-// single-column violating-row count) wrapped as a scalar subquery.
-fn push_check(out: &mut DataTestChecks, name: String, count_query: String) {
-    out.checks
-        .push(DataTestCheck { name, violating: format!("({count_query})") });
+// Record one check: its display `name` plus `rows_query`, the SELECT of its
+// violating rows. The probe counts and samples those rows in one scan:
+// `_wm_v` (the subquery alias) referenced as a column is the whole row as a
+// struct; `to_json(...)::VARCHAR` keeps the sample a JSON *string* through
+// the FFI — expanded rows would be visible to the executor's key-recursive
+// `extract_i64(result, "rows"/"snapshot_id")` scans, which a user column of
+// the same name could corrupt. `list()` over zero rows and an over-cap
+// sample both degrade to NULL (`s` is optional by contract).
+fn push_check(out: &mut DataTestChecks, name: String, rows_query: String) {
+    // `strlen` counts bytes (unlike `length`, characters) — the cap bounds
+    // payload size on the wire, so bytes are the right unit.
+    let probe = format!(
+        "SELECT v, CASE WHEN strlen(s_raw) <= {SAMPLE_MAX_BYTES} THEN s_raw END AS s \
+         FROM (SELECT count(*) AS v, \
+         to_json(list(_wm_v ORDER BY _wm_rn) FILTER (WHERE _wm_rn <= {SAMPLE_MAX_ROWS}))::VARCHAR AS s_raw \
+         FROM (SELECT _wm_v, row_number() OVER () AS _wm_rn FROM ({rows_query}) _wm_v))"
+    );
+    out.checks.push(DataTestCheck { name, probe });
+}
+
+// `SELECT *` for a sample rows-query, excluding the synthetic physical
+// partition column on partitioned targets — it's Windmill's storage detail,
+// not part of the producer's logical output (same rule as schema capture).
+// `qualifier` scopes the star when the query aliases the target (`_wm_src`).
+fn sample_star(ctx: &DataTestCtx, qualifier: Option<&str>) -> String {
+    let star = match qualifier {
+        Some(q) => format!("{q}.*"),
+        None => "*".to_string(),
+    };
+    if ctx.partitioned {
+        format!("{star} EXCLUDE ({})", quote_ident(ctx.partition_col))
+    } else {
+        star
+    }
 }
 
 /// Compile resolved data tests into ATTACH statements + per-test checks for
@@ -1028,28 +1083,34 @@ pub fn build_data_test_checks(
             DataTestResolved::BuiltIn(DataTest::Unique { column }) => {
                 let c = quote_ident(column);
                 let scope = partition_scope(ctx, " AND ", None);
+                // The rows are the GROUP BY result — one `{value, count}` per
+                // duplicated key — so the count (number of duplicated values,
+                // not of rows) and the sample share one grain and can't
+                // contradict each other in the UI.
                 let q = format!(
-                    "SELECT count(*) AS v FROM (SELECT {c} FROM {t} WHERE {c} IS NOT NULL{scope} \
-                     GROUP BY {c} HAVING count(*) > 1)"
+                    "SELECT {c} AS \"value\", count(*) AS \"count\" FROM {t} \
+                     WHERE {c} IS NOT NULL{scope} GROUP BY {c} HAVING count(*) > 1"
                 );
                 push_check(&mut out, format!("unique({column})"), q);
             }
             DataTestResolved::BuiltIn(DataTest::NotNull { column }) => {
                 let c = quote_ident(column);
                 let scope = partition_scope(ctx, " AND ", None);
-                let q = format!("SELECT count(*) AS v FROM {t} WHERE {c} IS NULL{scope}");
+                let star = sample_star(ctx, None);
+                let q = format!("SELECT {star} FROM {t} WHERE {c} IS NULL{scope}");
                 push_check(&mut out, format!("not_null({column})"), q);
             }
             DataTestResolved::BuiltIn(DataTest::AcceptedValues { column, values }) => {
                 let c = quote_ident(column);
                 let scope = partition_scope(ctx, " AND ", None);
+                let star = sample_star(ctx, None);
                 let list = values
                     .iter()
                     .map(|v| quote_lit(v))
                     .collect::<Vec<_>>()
                     .join(", ");
                 let q = format!(
-                    "SELECT count(*) AS v FROM {t} WHERE {c} IS NOT NULL AND {c} NOT IN ({list}){scope}"
+                    "SELECT {star} FROM {t} WHERE {c} IS NOT NULL AND {c} NOT IN ({list}){scope}"
                 );
                 push_check(&mut out, format!("accepted_values({column})"), q);
             }
@@ -1113,8 +1174,9 @@ pub fn build_data_test_checks(
                 // segment so the dot stays a schema separator, not a literal.
                 let rt = quote_qualified(ref_table);
                 let scope = partition_scope(ctx, " AND ", Some("_wm_src"));
+                let star = sample_star(ctx, Some("_wm_src"));
                 let q = format!(
-                    "SELECT count(*) AS v FROM {t} _wm_src \
+                    "SELECT {star} FROM {t} _wm_src \
                      WHERE _wm_src.{c} IS NOT NULL{scope} \
                      AND NOT EXISTS (SELECT 1 FROM {alias}.{rt} _wm_ref \
                      WHERE _wm_ref.{rc} = _wm_src.{c})"
@@ -1150,8 +1212,7 @@ pub fn build_data_test_checks(
                         stmts.len()
                     ));
                 }
-                let q = format!("SELECT count(*) AS v FROM ({})", stmts[0]);
-                push_check(&mut out, format!("custom({path})"), q);
+                push_check(&mut out, format!("custom({path})"), stmts[0].to_string());
             }
         }
     }
@@ -1678,21 +1739,34 @@ mod tests {
         // short, asset-free names (the asset is shown once by the breakdown).
         assert_eq!(sql.checks[0].name, "unique(order_id)");
         assert_eq!(sql.checks[1].name, "not_null(user_id)");
-        // each `violating` is a scalar count subquery.
+        // each probe counts and samples the violating rows in one scan, with
+        // the size guard on the serialized sample.
+        for c in &sql.checks {
+            assert!(c
+                .probe
+                .starts_with("SELECT v, CASE WHEN strlen(s_raw) <= 51200 THEN s_raw END AS s"));
+            assert!(c.probe.contains("count(*) AS v"));
+            assert!(c.probe.contains("FILTER (WHERE _wm_rn <= 20)"));
+        }
+        // unique: groups non-null keys within the slice, having count>1; the
+        // sample is `{value, count}` pairs at the same grain as the count.
         assert!(sql.checks[0]
-            .violating
-            .starts_with("(SELECT count(*) AS v FROM"));
-        // unique: groups non-null keys within the slice, having count>1
-        assert!(sql.checks[0]
-            .violating
+            .probe
             .contains("GROUP BY \"order_id\" HAVING count(*) > 1"));
         assert!(sql.checks[0]
-            .violating
+            .probe
+            .contains("SELECT \"order_id\" AS \"value\", count(*) AS \"count\""));
+        assert!(sql.checks[0]
+            .probe
             .contains("\"order_id\" IS NOT NULL AND \"_wm_partition\" = '2026-06-19'"));
-        // not_null: null rows in the slice
+        // not_null: null rows in the slice; the sample excludes the synthetic
+        // partition column (storage detail, not producer output).
         assert!(sql.checks[1]
-            .violating
+            .probe
             .contains("WHERE \"user_id\" IS NULL AND \"_wm_partition\" = '2026-06-19'"));
+        assert!(sql.checks[1]
+            .probe
+            .contains("SELECT * EXCLUDE (\"_wm_partition\") FROM"));
     }
 
     #[test]
@@ -1701,8 +1775,9 @@ mod tests {
             column: "id".into(),
         })];
         let sql = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap();
-        assert!(sql.checks[0].violating.contains("WHERE \"id\" IS NULL"));
-        assert!(!sql.checks[0].violating.contains("_wm_partition"));
+        assert!(sql.checks[0].probe.contains("WHERE \"id\" IS NULL"));
+        assert!(!sql.checks[0].probe.contains("_wm_partition"));
+        assert!(!sql.checks[0].probe.contains("EXCLUDE"));
     }
 
     #[test]
@@ -1719,14 +1794,14 @@ mod tests {
         ];
         let sql = build_data_test_checks(&tests, &ctx_scd2()).unwrap();
         assert!(sql.checks[0]
-            .violating
+            .probe
             .contains("WHERE \"customer_id\" IS NOT NULL AND is_current"));
         assert!(sql.checks[1]
-            .violating
+            .probe
             .contains("WHERE \"tier\" IS NULL AND is_current"));
-        assert!(sql.checks[2].violating.contains("AND is_current"));
+        assert!(sql.checks[2].probe.contains("AND is_current"));
         // no partition scope leaks in (scd2 is unpartitioned in v1)
-        assert!(!sql.checks[0].violating.contains("_wm_partition"));
+        assert!(!sql.checks[0].probe.contains("_wm_partition"));
     }
 
     #[test]
@@ -1736,10 +1811,8 @@ mod tests {
             values: vec!["paid".into(), "o'brien".into()],
         })];
         let sql = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap();
-        assert!(sql.checks[0]
-            .violating
-            .contains("NOT IN ('paid', 'o''brien')"));
-        assert!(sql.checks[0].violating.contains("\"status\" IS NOT NULL"));
+        assert!(sql.checks[0].probe.contains("NOT IN ('paid', 'o''brien')"));
+        assert!(sql.checks[0].probe.contains("\"status\" IS NOT NULL"));
     }
 
     #[test]
@@ -1763,14 +1836,19 @@ mod tests {
         assert_eq!(sql.attaches.len(), 1, "same db attached once");
         assert_eq!(sql.attaches[0], "ATTACH 'datatable://prod' AS _wm_ref_0;");
         assert!(sql.checks[0]
-            .violating
+            .probe
             .contains("NOT EXISTS (SELECT 1 FROM _wm_ref_0.\"users\""));
         assert!(sql.checks[1]
-            .violating
+            .probe
             .contains("NOT EXISTS (SELECT 1 FROM _wm_ref_0.\"buyers\""));
         assert!(sql.checks[0]
-            .violating
+            .probe
             .contains("_wm_src.\"_wm_partition\" = '2026-06-19'"));
+        // sample rows come from the aliased target and drop the synthetic
+        // partition column.
+        assert!(sql.checks[0]
+            .probe
+            .contains("SELECT _wm_src.* EXCLUDE (\"_wm_partition\") FROM"));
         assert_eq!(
             sql.checks[0].name,
             "relationships(user_id -> prod/users.id)"
@@ -1807,7 +1885,7 @@ mod tests {
             "same-lake ref must not ATTACH again"
         );
         assert!(sql.checks[0]
-            .violating
+            .probe
             .contains("NOT EXISTS (SELECT 1 FROM _wm_target.\"users\""));
     }
 
@@ -1828,10 +1906,10 @@ mod tests {
         );
         assert!(
             sql.checks[0]
-                .violating
+                .probe
                 .contains("FROM _wm_ref_0.\"main\".\"dim_products\""),
             "schema-qualified target should be quoted per segment: {}",
-            sql.checks[0].violating
+            sql.checks[0].probe
         );
     }
 
@@ -1853,10 +1931,11 @@ mod tests {
             body: "SELECT * FROM _wm_target.orders WHERE amount < 0;".into(),
         }];
         let sql = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap();
-        // trailing ; stripped, wrapped as a count subquery
-        assert!(sql.checks[0].violating.contains(
-            "SELECT count(*) AS v FROM (SELECT * FROM _wm_target.orders WHERE amount < 0)"
-        ));
+        // trailing ; stripped, body embedded as the probe's rows query
+        assert!(sql.checks[0]
+            .probe
+            .contains("FROM (SELECT * FROM _wm_target.orders WHERE amount < 0) _wm_v"));
+        assert!(sql.checks[0].probe.contains("count(*) AS v"));
         assert_eq!(sql.checks[0].name, "custom(f/tests/amount)");
     }
 
@@ -1883,14 +1962,8 @@ mod tests {
     #[test]
     fn materialize_result_sql_embeds_data_tests_breakdown() {
         let checks = vec![
-            DataTestCheck {
-                name: "unique(order_id)".into(),
-                violating: "(SELECT count(*) AS v FROM q0)".into(),
-            },
-            DataTestCheck {
-                name: "custom(f/t)".into(),
-                violating: "(SELECT count(*) AS v FROM q1)".into(),
-            },
+            DataTestCheck { name: "unique(order_id)".into(), probe: "SELECT v, s FROM q0".into() },
+            DataTestCheck { name: "custom(f/t)".into(), probe: "SELECT v, s FROM q1".into() },
         ];
         let sql = materialize_result_sql(
             "_wm_target.orders",
@@ -1900,10 +1973,17 @@ mod tests {
             false,
             &checks,
         );
-        // counts computed once in a CTE, referenced by the list-of-struct.
-        assert!(sql.starts_with("WITH _wm_tr AS (SELECT (SELECT count(*) AS v FROM q0) AS c0,"));
-        assert!(sql.contains("[{'test': 'unique(order_id)', 'violating': c0}, "));
-        assert!(sql.contains("{'test': 'custom(f/t)', 'violating': c1}] AS data_tests"));
+        // each probe runs once as a one-row CTE; _wm_tr cross-joins them and
+        // the list-of-struct references the flattened count/sample columns.
+        assert!(sql.starts_with(
+            "WITH _wm_t0 AS (SELECT v, s FROM q0), _wm_t1 AS (SELECT v, s FROM q1), \
+             _wm_tr AS (SELECT _wm_t0.v AS c0, _wm_t0.s AS s0, _wm_t1.v AS c1, _wm_t1.s AS s1 \
+             FROM _wm_t0, _wm_t1)"
+        ));
+        assert!(sql.contains("[{'test': 'unique(order_id)', 'violating': c0, 'sample': s0}, "));
+        assert!(
+            sql.contains("{'test': 'custom(f/t)', 'violating': c1, 'sample': s1}] AS data_tests")
+        );
         assert!(sql.contains("FROM _wm_tr;"));
         // no tests -> plain summary, no CTE / data_tests column.
         let plain = materialize_result_sql(
diff --git a/backend/windmill-duckdb-ffi-internal/src/lib.rs b/backend/windmill-duckdb-ffi-internal/src/lib.rs
index 054f892220..25347098f2 100644
--- a/backend/windmill-duckdb-ffi-internal/src/lib.rs
+++ b/backend/windmill-duckdb-ffi-internal/src/lib.rs
@@ -794,6 +794,155 @@ mod temporal_json_tests {
         assert_eq!(json_of(3), serde_json::json!("2026-07-01"));
         assert_eq!(json_of(4), serde_json::json!("10:30:00"));
     }
+
+    // The data-test sample probe shape emitted by
+    // `windmill-parser::sql_materialize::build_data_test_checks`: one scan
+    // yielding the violating-row count plus a bounded `to_json` sample of the
+    // rows as a VARCHAR. These tests gate that design against the *bundled*
+    // engine (json extension availability, row-as-struct alias reference,
+    // NULL degrade on zero rows / oversized samples, exotic column types).
+    fn sample_probe_sql(rows_query: &str, max_len: usize) -> String {
+        format!(
+            "SELECT v, CASE WHEN strlen(s_raw) <= {max_len} THEN s_raw END AS s \
+             FROM (SELECT count(*) AS v, \
+                   to_json(list(_wm_v ORDER BY _wm_rn) FILTER (WHERE _wm_rn <= 20))::VARCHAR AS s_raw \
+                   FROM (SELECT _wm_v, row_number() OVER () AS _wm_rn FROM ({rows_query}) _wm_v))"
+        )
+    }
+
+    fn run_sample_probe(
+        conn: &duckdb::Connection,
+        rows_query: &str,
+        max_len: usize,
+    ) -> (i64, Option<String>) {
+        let mut stmt = conn
+            .prepare(&sample_probe_sql(rows_query, max_len))
+            .unwrap();
+        let mut rows = stmt.query([]).unwrap();
+        let row = rows.next().unwrap().unwrap();
+        (row.get(0).unwrap(), row.get(1).unwrap())
+    }
+
+    #[test]
+    fn data_test_sample_probe_counts_and_samples() {
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        conn.execute_batch(
+            "CREATE TABLE t (id INT, name VARCHAR); \
+             INSERT INTO t VALUES (1, 'a'), (2, NULL), (3, NULL);",
+        )
+        .unwrap();
+        let (v, s) = run_sample_probe(&conn, "SELECT * FROM t WHERE name IS NULL", 51200);
+        assert_eq!(v, 2);
+        let parsed: serde_json::Value = serde_json::from_str(&s.unwrap()).unwrap();
+        assert_eq!(
+            parsed,
+            serde_json::json!([{"id": 2, "name": null}, {"id": 3, "name": null}])
+        );
+    }
+
+    #[test]
+    fn data_test_sample_probe_zero_rows_yields_null_sample() {
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        conn.execute_batch("CREATE TABLE t (id INT); INSERT INTO t VALUES (1);")
+            .unwrap();
+        let (v, s) = run_sample_probe(&conn, "SELECT * FROM t WHERE id IS NULL", 51200);
+        assert_eq!(v, 0);
+        assert!(s.is_none());
+    }
+
+    #[test]
+    fn data_test_sample_probe_caps_at_20_rows_but_counts_all() {
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        conn.execute_batch("CREATE TABLE t AS SELECT range AS id FROM range(50);")
+            .unwrap();
+        let (v, s) = run_sample_probe(&conn, "SELECT * FROM t", 51200);
+        assert_eq!(v, 50);
+        let parsed: serde_json::Value = serde_json::from_str(&s.unwrap()).unwrap();
+        assert_eq!(parsed.as_array().unwrap().len(), 20);
+    }
+
+    #[test]
+    fn data_test_sample_probe_oversized_sample_degrades_to_null() {
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        conn.execute_batch("CREATE TABLE t AS SELECT repeat('x', 1000) AS big FROM range(5);")
+            .unwrap();
+        let (v, s) = run_sample_probe(&conn, "SELECT * FROM t", 100);
+        assert_eq!(v, 5);
+        assert!(s.is_none());
+    }
+
+    #[test]
+    fn data_test_sample_probe_codegen_row_query_shapes() {
+        // The exact rows-query shapes emitted by `build_data_test_checks`:
+        // unique's `{value, count}` grain and the star-EXCLUDE forms used on
+        // partitioned targets (plain and `_wm_src.`-qualified).
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        conn.execute_batch(
+            "CREATE TABLE t (id INT, name VARCHAR, _wm_partition VARCHAR); \
+             INSERT INTO t VALUES (1, 'a', 'p'), (1, 'b', 'p'), (2, NULL, 'p');",
+        )
+        .unwrap();
+        let (v, s) = run_sample_probe(
+            &conn,
+            "SELECT \"id\" AS \"value\", count(*) AS \"count\" FROM t \
+             WHERE \"id\" IS NOT NULL GROUP BY \"id\" HAVING count(*) > 1",
+            51200,
+        );
+        assert_eq!(v, 1);
+        let parsed: serde_json::Value = serde_json::from_str(&s.unwrap()).unwrap();
+        assert_eq!(parsed, serde_json::json!([{"value": 1, "count": 2}]));
+
+        let (v, s) = run_sample_probe(
+            &conn,
+            "SELECT * EXCLUDE (\"_wm_partition\") FROM t WHERE name IS NULL",
+            51200,
+        );
+        assert_eq!(v, 1);
+        assert_eq!(
+            serde_json::from_str::<serde_json::Value>(&s.unwrap()).unwrap(),
+            serde_json::json!([{"id": 2, "name": null}])
+        );
+
+        let (v, s) = run_sample_probe(
+            &conn,
+            "SELECT _wm_src.* EXCLUDE (\"_wm_partition\") FROM t _wm_src WHERE _wm_src.name IS NULL",
+            51200,
+        );
+        assert_eq!(v, 1);
+        assert_eq!(
+            serde_json::from_str::<serde_json::Value>(&s.unwrap()).unwrap(),
+            serde_json::json!([{"id": 2, "name": null}])
+        );
+    }
+
+    #[test]
+    fn data_test_sample_probe_survives_exotic_types() {
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        conn.execute_batch(
+            "CREATE TABLE t AS SELECT \
+                INTERVAL 3 DAY AS iv, \
+                12345678901234567890123456789::HUGEINT AS hi, \
+                '\\xDE\\xAD'::BLOB AS bl, \
+                [1, 2, 3] AS li, \
+                {'a': 1, 'b': 'x'} AS st, \
+                TIMESTAMPTZ '2026-07-01 23:13:42+00' AS tstz, \
+                DECIMAL '12.34' AS dec;",
+        )
+        .unwrap();
+        let (v, s) = run_sample_probe(&conn, "SELECT * FROM t", 51200);
+        assert_eq!(v, 1);
+        let parsed: serde_json::Value = serde_json::from_str(&s.unwrap()).unwrap();
+        let row = &parsed.as_array().unwrap()[0];
+        // Exact renderings are DuckDB's to_json choices — the gate is only
+        // that every type serializes without error and parses back as JSON.
+        assert!(row.get("iv").is_some());
+        assert!(row.get("hi").is_some());
+        assert!(row.get("bl").is_some());
+        assert_eq!(row["li"], serde_json::json!([1, 2, 3]));
+        assert_eq!(row["st"], serde_json::json!({"a": 1, "b": "x"}));
+        assert!(row.get("tstz").is_some());
+        assert!(row.get("dec").is_some());
+    }
 }
 
 fn json_value_to_duckdb_value(
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index a90c80acfc..31db95b91a 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -11,7 +11,7 @@ use serde_json::{json, Value};
 use uuid::Uuid;
 use windmill_common::error::{to_anyhow, Error, Result};
 use windmill_common::utils::sanitize_string_from_password;
-use windmill_common::worker::{get_memory, Connection, SqlResultCollectionStrategy};
+use windmill_common::worker::{get_memory, to_raw_value, Connection, SqlResultCollectionStrategy};
 use windmill_common::workspaces::{
     get_datatable_resource_from_db_unchecked, get_ducklake_from_db_unchecked,
     DucklakeCatalogResourceType,
@@ -773,10 +773,14 @@ fn extract_i64(result: &RawValue, field: &str) -> Option<i64> {
 }
 
 // One data test's outcome as carried by the materialize summary's `data_tests`
-// column: its display name and how many rows violated it (0 = pass).
+// column: its display name, how many rows violated it (0 = pass), and an
+// optional bounded sample of the violating rows. The sample is decoration
+// only — enforcement reads `violating`, never `sample` — so a NULL, dropped
+// (over the size cap) or unparseable sample must never affect pass/fail.
 struct DataTestOutcome {
     name: String,
     violating: i64,
+    sample: Option<Value>,
 }
 
 // Pull the per-test breakdown out of the materialize summary result. The
@@ -793,7 +797,21 @@ fn extract_data_tests(result: &RawValue) -> Vec<DataTestOutcome> {
                             .get("violating")
                             .and_then(|x| x.as_i64().or_else(|| x.as_f64().map(|f| f as i64)))
                             .unwrap_or(0);
-                        out.push(DataTestOutcome { name: name.clone(), violating });
+                        // The probe serializes the sample as a JSON *string*
+                        // (a VARCHAR through the FFI), deliberately — parse it
+                        // only here, so sampled user columns named `rows` /
+                        // `snapshot_id` stay invisible to the key-recursive
+                        // `extract_i64` scans over the summary result. Accept
+                        // a native array too (FFI JSON-column quirk); anything
+                        // else (NULL, size-capped, garbage) degrades to None.
+                        let sample = o.get("sample").and_then(|s| match s {
+                            arr @ Value::Array(_) => Some(arr.clone()),
+                            Value::String(txt) => serde_json::from_str::<Value>(txt)
+                                .ok()
+                                .filter(|v| v.is_array()),
+                            _ => None,
+                        });
+                        out.push(DataTestOutcome { name: name.clone(), violating, sample });
                     }
                 }
             }
@@ -1304,7 +1322,42 @@ pub async fn do_duckdb(
                     Some(&breakdown),
                 )
                 .await;
-                return Err(Error::ExecutionErr(breakdown));
+                // Structured failure payload: the queue wraps it as
+                // `{"error": {...}}` (`WrappedError`) and result_processor
+                // derives the run description from the top-level `message`,
+                // so keep `message` at the top and add no `error` nesting of
+                // our own. Samples ride only on failed tests, only in this
+                // structured result — the message text stays counts-only.
+                let has_samples = tests.iter().any(|t| t.violating > 0 && t.sample.is_some());
+                let message = if has_samples {
+                    // Wording must not match the UI's breakdown-line parsing
+                    // (no ✓/✗, no `— N violating`), which older-result
+                    // rendering still relies on.
+                    format!(
+                        "{breakdown}\n\nSamples of the violating rows are \
+                         attached to this run's result (error.data_tests)."
+                    )
+                } else {
+                    breakdown
+                };
+                let data_tests = tests
+                    .iter()
+                    .map(|t| {
+                        let mut o = json!({ "test": t.name, "violating": t.violating });
+                        if t.violating > 0 {
+                            if let Some(s) = &t.sample {
+                                o["sample"] = s.clone();
+                            }
+                        }
+                        o
+                    })
+                    .collect::<Vec<_>>();
+                return Err(Error::ExecutionRawError(to_raw_value(&json!({
+                    "message": message,
+                    "name": "ExecutionErr",
+                    "step_id": job.flow_step_id,
+                    "data_tests": data_tests,
+                }))));
             }
             record_mat(
                 conn,
@@ -1347,14 +1400,46 @@ pub async fn do_duckdb(
     match result {
         Ok(result) => Ok(result),
         Err(e) => {
-            // Passwords might appear in the error message
-            let mut err_str = e.to_string();
-            for pwd in hidden_passwords.lock().unwrap().iter() {
-                if let Some(sanitized) = sanitize_string_from_password(&err_str, &pwd.clone()) {
-                    err_str = sanitized;
+            // Passwords might appear in the error message — and, for the
+            // structured data-test failure, in sampled row data read from an
+            // attached database — so every outgoing error is sanitized here.
+            let sanitize = |mut s: String| {
+                for pwd in hidden_passwords.lock().unwrap().iter() {
+                    if let Some(sanitized) = sanitize_string_from_password(&s, &pwd.clone()) {
+                        s = sanitized;
+                    }
                 }
+                s
+            };
+            match e {
+                // The structured payload must keep its variant: flattening it
+                // to a string (the arm below) would strip the data-test
+                // samples result_processor places verbatim into the failed
+                // job's result. Sanitize its string *leaves*, not the
+                // serialized text: a secret containing `"` or `\` is
+                // JSON-escaped in the text, so a plain-substring pass would
+                // miss it — and samples carry raw row data from attached
+                // databases.
+                Error::ExecutionRawError(raw) => {
+                    fn walk(v: &mut Value, f: &dyn Fn(String) -> String) {
+                        match v {
+                            Value::String(s) => *s = f(std::mem::take(s)),
+                            Value::Array(a) => a.iter_mut().for_each(|x| walk(x, f)),
+                            Value::Object(o) => o.values_mut().for_each(|x| walk(x, f)),
+                            _ => {}
+                        }
+                    }
+                    Err(match serde_json::from_str::<Value>(raw.get()) {
+                        Ok(mut v) => {
+                            walk(&mut v, &sanitize);
+                            Error::ExecutionRawError(to_raw_value(&v))
+                        }
+                        // Not valid JSON (shouldn't happen) — redact as text.
+                        Err(_) => Error::ExecutionErr(sanitize(raw.get().to_string())),
+                    })
+                }
+                e => Err(Error::ExecutionErr(sanitize(e.to_string()))),
             }
-            Err(Error::ExecutionErr(err_str))
         }
     }
 }
@@ -2908,15 +2993,22 @@ mod tests {
         // `data_tests` array (how the FFI serialises the list-of-struct).
         let r = raw(
             r#"[{"rows":3,"snapshot_id":17,"materialized":"ducklake://a/b",
-                "data_tests":[{"test":"unique(order_id)","violating":0},
-                              {"test":"accepted_values(status)","violating":2}]}]"#,
+                "data_tests":[{"test":"unique(order_id)","violating":0,"sample":null},
+                              {"test":"accepted_values(status)","violating":2,
+                               "sample":"[{\"id\":1,\"status\":\"bad\"}]"}]}]"#,
         );
         let out = extract_data_tests(&r);
         assert_eq!(out.len(), 2);
         assert_eq!(out[0].name, "unique(order_id)");
         assert_eq!(out[0].violating, 0);
+        assert!(out[0].sample.is_none());
         assert_eq!(out[1].name, "accepted_values(status)");
         assert_eq!(out[1].violating, 2);
+        // The probe emits the sample as a JSON string; it parses to rows here.
+        assert_eq!(
+            out[1].sample,
+            Some(serde_json::json!([{"id": 1, "status": "bad"}]))
+        );
     }
 
     #[test]
@@ -2927,10 +3019,30 @@ mod tests {
         assert_eq!(out.len(), 1);
         assert_eq!(out[0].name, "not_null(x)");
         assert_eq!(out[0].violating, 1);
+        assert!(out[0].sample.is_none());
         // Absent column (no tests) -> empty, no panic.
         assert!(extract_data_tests(&raw(r#"[{"rows":3}]"#)).is_empty());
     }
 
+    #[test]
+    fn extract_data_tests_sample_degrades_to_none_never_flips_outcome() {
+        // sample is optional by contract: native array accepted; non-array
+        // JSON, garbage text, and absence all degrade to None without
+        // touching `violating`.
+        let r = raw(r#"[{"data_tests":[
+                {"test":"a","violating":1,"sample":[{"id":9}]},
+                {"test":"b","violating":2,"sample":"{\"not\":\"an array\"}"},
+                {"test":"c","violating":3,"sample":"not json at all"},
+                {"test":"d","violating":4}]}]"#);
+        let out = extract_data_tests(&r);
+        assert_eq!(out.len(), 4);
+        assert_eq!(out[0].sample, Some(serde_json::json!([{"id": 9}])));
+        for (i, t) in out.iter().enumerate().skip(1) {
+            assert!(t.sample.is_none(), "test {} should have no sample", t.name);
+            assert_eq!(t.violating, i as i64 + 1);
+        }
+    }
+
     #[test]
     fn extract_schema_parses_nested_and_string_encoded() {
         // Real shape: the summary row carries a nested `output_schema`
@@ -2959,9 +3071,15 @@ mod tests {
     #[test]
     fn format_data_test_breakdown_lists_all_with_marks() {
         let tests = vec![
-            DataTestOutcome { name: "unique(order_id)".into(), violating: 1 },
-            DataTestOutcome { name: "not_null(user_id)".into(), violating: 0 },
-            DataTestOutcome { name: "accepted_values(status)".into(), violating: 2 },
+            DataTestOutcome { name: "unique(order_id)".into(), violating: 1, sample: None },
+            DataTestOutcome { name: "not_null(user_id)".into(), violating: 0, sample: None },
+            DataTestOutcome {
+                name: "accepted_values(status)".into(),
+                violating: 2,
+                // The breakdown is counts-only by design — samples never
+                // appear in the error text.
+                sample: Some(serde_json::json!([{"status": "bad"}])),
+            },
         ];
         let msg = format_data_test_breakdown("analytics/orders", &tests);
         assert_eq!(
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index 8329958baa..8f99b4c2c9 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -327,18 +327,73 @@ The reusable shape, in three layers, each a clean extension seam:
    match arm + its sub-parser; the `Custom` arm is the open fallback. A sibling
    family reuses this head-keyword dispatch rather than adding a parallel list.
 2. **Compile** (`sql_materialize.rs::build_data_test_checks`). Each test becomes
-   a **check**: `(name, violating-row-count query)`. Built-ins differ only in
-   their count query; `Custom` supplies its own (the user's SELECT of violating
-   rows). Referenced assets (relationships) emit an `ATTACH` resolved by the
-   same transform pass as the user's own.
+   a **check**: `(name, probe)`, where the probe is a one-row query counting
+   *and sampling* the test's violating rows in a single scan. Built-ins differ
+   only in their violating-rows query; `Custom` supplies its own (the user's
+   SELECT of violating rows). Referenced assets (relationships) emit an
+   `ATTACH` resolved by the same transform pass as the user's own.
 3. **Execute** (`duckdb_executor.rs`). The materialize summary query embeds
-   every check's count in one `data_tests` list-of-struct column (computed in a
-   CTE, since DuckDB rejects subqueries inside struct literals), so **all tests
-   run in a single pass** against the freshly-materialized slice — no
-   abort-on-first. The worker reads the breakdown from the result and decides
-   pass/fail: any violation **fails the run** (record `Failed`, propagate up the
-   cascade) with an error listing *every* test (✓/✗ + counts); a clean run
-   returns the per-test summary so the UI can render a checklist.
+   every check's outcome in one `data_tests` list-of-struct column (probes are
+   lifted into one-row CTEs and cross-joined, since DuckDB rejects subqueries
+   inside struct literals), so **all tests run in a single pass** against the
+   freshly-materialized slice — no abort-on-first. The worker reads the
+   breakdown from the result and decides pass/fail: any violation **fails the
+   run** (record `Failed`, propagate up the cascade) with an error listing
+   *every* test (✓/✗ + counts); a clean run returns the per-test summary so
+   the UI can render a checklist.
+
+### Violating-row samples
+
+Each check's probe also captures a bounded **sample of its violating rows**
+(≤20 rows, ≤50KB serialized per test — over-cap samples are *dropped*, never
+truncated, since truncated JSON fails parsing after paying the bytes). The
+sample is **optional by contract** at every layer: enforcement reads only the
+count; NULL / dropped / unparseable samples degrade to "no sample" and can
+never flip pass/fail. Where they surface:
+
+- **Failed run**: the worker returns a structured error payload
+  (`Error::ExecutionRawError`), so the failed job's result carries
+  `error.data_tests: [{test, violating, sample?}]` with samples on failed
+  tests only. The error *message* stays counts-only, plus a pointer at the
+  payload — so run descriptions and `materialized_partition.error` carry no
+  row data. The full payload is the job *result*, and follows every failed
+  job's result wherever that already goes: the worker's failed-job log line
+  (`add_completed_job_error`) and, on EE, the args of configured
+  global/workspace error handlers — the same pre-existing paths that carry
+  e.g. a failed process's own `result.json`. A handler that formats only
+  `error.message` (the common alert shape) stays counts-only; one that wants
+  the offending rows can read `error.data_tests`. The duckdb executor's
+  password-sanitize catch-all must special-case `ExecutionRawError` —
+  flattening it to a string would silently strip the payload.
+- **UI**: `DataTestsResult.svelte` renders a per-failed-test expandable
+  `AutoDataTable`; `DisplayResult.svelte` prefers the structured payload and
+  falls back to text-parsing the breakdown for results predating it.
+- **Enterprise (write-audit-publish)**: samples only exist on the
+  commit-then-test path. Under the EE in-transaction guard a violation aborts
+  pre-commit and the slice rolls back, so the violating rows cease to exist —
+  WAP failures are counts-only by construction (the guard's in-SQL ✓/✗
+  message), and the guard projects only the probe's count column
+  (`pipeline_advanced_ee.rs::data_test_guard_sql`).
+
+Sample mechanics worth knowing:
+
+- The sample rides as a **JSON string** (`to_json(...)::VARCHAR`) through the
+  summary row, deliberately: expanded rows would be visible to the executor's
+  key-recursive `extract_i64(result, "rows"/"snapshot_id")` scans, which a
+  user column of the same name could corrupt. It is parsed only inside
+  `extract_data_tests`.
+- No `ORDER BY` on the violating rows — *which* rows land in the sample is
+  nondeterministic (labelled "sample" in the UI for that reason).
+- `unique` samples `{value, count}` pairs at its count's grain (number of
+  duplicated *values*), so count and sample can't contradict each other.
+- On partitioned targets the synthetic `_wm_partition` column is `EXCLUDE`d
+  from samples (same rule as schema capture).
+- A custom body joining with `SELECT *` can yield duplicate column names —
+  duplicate JSON keys keep the last value; harmless but visible.
+- The probe shape is gated by in-memory tests against the bundled engine in
+  `windmill-duckdb-ffi-internal` (json extension availability, zero-row NULL
+  degrade, exotic types) — a sample-expr runtime error would fail the summary
+  read after the write committed, so keep those green when touching the shape.
 
 A new annotation family that produces post-materialize checks (or, for
 column-lineage, post-materialize *metadata reads*) plugs into the same three
diff --git a/frontend/src/lib/components/DataTestsResult.svelte b/frontend/src/lib/components/DataTestsResult.svelte
index cba28f3a82..385af187df 100644
--- a/frontend/src/lib/components/DataTestsResult.svelte
+++ b/frontend/src/lib/components/DataTestsResult.svelte
@@ -1,15 +1,22 @@
 <script lang="ts">
 	// Renders the per-test breakdown a managed `// materialize` run attaches to
-	// its result as `data_tests: [{ test, violating }]`. Shown above the raw
-	// result so "which tests ran, and which passed/failed" is clear at a glance.
-	// (On a failed run the job result is the error message — which already lists
-	// every test — so this success-path checklist and that error text together
-	// cover both outcomes.)
-	import { CheckCircle2, FlaskConical, XCircle } from 'lucide-svelte'
+	// its result as `data_tests: [{ test, violating, sample? }]`. Shown above
+	// the raw result so "which tests ran, and which passed/failed" is clear at
+	// a glance. A failed test may carry `sample` — a bounded, unordered sample
+	// of its violating rows — rendered as an expandable table. The sample is
+	// optional by contract: its absence only means no rows to show.
+	import { CheckCircle2, ChevronDown, ChevronRight, FlaskConical, XCircle } from 'lucide-svelte'
+	import { Button } from '$lib/components/common'
+	import AutoDataTable from '$lib/components/table/AutoDataTable.svelte'
+	import { SvelteSet } from 'svelte/reactivity'
 
-	let { tests }: { tests: Array<{ test: string; violating: number }> } = $props()
+	let {
+		tests
+	}: { tests: Array<{ test: string; violating: number; sample?: Record<string, any>[] }> } =
+		$props()
 
 	let failed = $derived(tests.filter((t) => t.violating > 0).length)
+	let expanded = new SvelteSet<string>()
 </script>
 
 <div
@@ -32,18 +39,40 @@
 	</div>
 	<ul class="divide-y divide-border">
 		{#each tests as t (t.test)}
-			<li class="flex items-center gap-1.5 px-2 py-1 font-mono">
-				{#if t.violating > 0}
-					<XCircle size={13} class="shrink-0 text-red-600 dark:text-red-400" />
-					<span class="sr-only">failed:</span>
-					<span class="text-primary">{t.test}</span>
-					<span class="text-red-600 dark:text-red-400"
-						>— {t.violating} violating row{t.violating === 1 ? '' : 's'}</span
-					>
-				{:else}
-					<CheckCircle2 size={13} class="shrink-0 text-emerald-600 dark:text-emerald-400" />
-					<span class="sr-only">passed:</span>
-					<span class="text-secondary">{t.test}</span>
+			<li class="px-2 py-1">
+				<div class="flex items-center gap-1.5 font-mono">
+					{#if t.violating > 0}
+						<XCircle size={13} class="shrink-0 text-red-600 dark:text-red-400" />
+						<span class="sr-only">failed:</span>
+						<span class="text-primary">{t.test}</span>
+						<span class="text-red-600 dark:text-red-400"
+							>— {t.violating} violating row{t.violating === 1 ? '' : 's'}</span
+						>
+						{#if t.sample && t.sample.length > 0}
+							<Button
+								variant="subtle"
+								unifiedSize="sm"
+								startIcon={{ icon: expanded.has(t.test) ? ChevronDown : ChevronRight }}
+								onclick={() => {
+									if (!expanded.delete(t.test)) expanded.add(t.test)
+								}}
+							>
+								{expanded.has(t.test) ? 'hide sample' : `view sample (${t.sample.length})`}
+							</Button>
+						{/if}
+					{:else}
+						<CheckCircle2 size={13} class="shrink-0 text-emerald-600 dark:text-emerald-400" />
+						<span class="sr-only">passed:</span>
+						<span class="text-secondary">{t.test}</span>
+					{/if}
+				</div>
+				{#if t.violating > 0 && t.sample && t.sample.length > 0 && expanded.has(t.test)}
+					<div class="mt-1 mb-1">
+						<div class="text-2xs text-tertiary mb-1">
+							sample of the violating rows ({t.sample.length} of {t.violating}, unordered)
+						</div>
+						<AutoDataTable objects={t.sample} />
+					</div>
 				{/if}
 			</li>
 		{/each}
diff --git a/frontend/src/lib/components/DisplayResult.svelte b/frontend/src/lib/components/DisplayResult.svelte
index cbd81086a9..efb1dd2da1 100644
--- a/frontend/src/lib/components/DisplayResult.svelte
+++ b/frontend/src/lib/components/DisplayResult.svelte
@@ -574,24 +574,53 @@
 	// formats are produced by this repo's worker (see duckdb_executor.rs); the
 	// derivation is inert (undefined) for every other DisplayResult use.
 	let dataTests = $derived.by(() => {
+		// Both structured shapes carry `[{ test, violating, sample? }]`; the
+		// sample (bounded violating-row rows) may arrive as a JSON string (the
+		// worker keeps it string-typed through the summary row) and is optional
+		// by contract — anything malformed degrades to no sample, never to a
+		// dropped checklist.
+		const normalize = (
+			dt: any
+		): Array<{ test: string; violating: number; sample?: Record<string, any>[] }> | undefined => {
+			if (typeof dt === 'string') {
+				try {
+					dt = JSON.parse(dt)
+				} catch {
+					return undefined
+				}
+			}
+			if (
+				!Array.isArray(dt) ||
+				dt.length === 0 ||
+				!dt.every((x) => x && typeof x.test === 'string' && typeof x.violating === 'number')
+			) {
+				return undefined
+			}
+			return dt.map((x) => {
+				let sample = x.sample
+				if (typeof sample === 'string') {
+					try {
+						sample = JSON.parse(sample)
+					} catch {
+						sample = undefined
+					}
+				}
+				if (!Array.isArray(sample) || !sample.every((r) => r && typeof r === 'object')) {
+					sample = undefined
+				}
+				return { test: x.test, violating: x.violating, sample }
+			})
+		}
 		// Success: structured column on the summary row.
 		const row = Array.isArray(result) ? (result as any)?.[0] : (result as any)
-		let dt = row?.data_tests
-		if (typeof dt === 'string') {
-			try {
-				dt = JSON.parse(dt)
-			} catch {
-				dt = undefined
-			}
-		}
-		if (
-			Array.isArray(dt) &&
-			dt.length > 0 &&
-			dt.every((x) => x && typeof x.test === 'string' && typeof x.violating === 'number')
-		) {
-			return dt as Array<{ test: string; violating: number }>
-		}
-		// Failure: parse the worker's breakdown out of the error message.
+		const fromRow = normalize(row?.data_tests)
+		if (fromRow) return fromRow
+		// Failure: the worker attaches the same structured breakdown (plus
+		// per-failed-test samples) to the error payload.
+		const fromError = normalize((result as any)?.error?.data_tests)
+		if (fromError) return fromError
+		// Failure fallback for results predating the structured error payload:
+		// parse the worker's breakdown out of the error message.
 		const msg = (result as any)?.error?.message
 		if (typeof msg === 'string' && msg.includes('data tests failed on')) {
 			const out: Array<{ test: string; violating: number }> = []

From 39eb9de1bce400109c130a081807e40e995ae068 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 09:58:06 +0200
Subject: [PATCH 44/76] feat(pipelines): fork data environments for ducklake
 materialization (dev data) (#9915)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(pipelines): fork-scoped ducklake namespaces with read-defer to parent

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(pipelines): fork graph indicator + fork ducklake namespace cleanup endpoint

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(pipelines): fork_views-keyed view transition, fork lineage clone, design doc

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): review hardening - fork DATA_PATH last-wins, registry cache TTL, defer tests

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(pipelines): per-lake isolated/shared choice at fork creation

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): chain-aware defer discovery + per-location fork namespace registry

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): lake-scoped fork schemas, catalog identity in registry, chain-aware graph chips

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): cleanup deletes fork data from the registered storage identity

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): collapse fork data-path segment to one component (slash-safe ids)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): per-catalog ancestor checks, ancestor extra_args passthrough, test compile fix

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): invalidate fork ancestor-chain cache on lineage mutations

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): sweep descendant ancestor-chain caches on delete/reparent

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): run fork ducklake cleanup inline in delete_workspace

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): resolve fork cleanup credentials pre-commit, destroy post-commit

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): shared dev-workspace authz gate for namespace drop, invalidatable registration cache, segment-boundary delete filter

- extract require_prod_admin_for_dev_workspace, used by both delete_workspace
  and drop_forked_ducklake_namespaces so the gates cannot drift
- key FORK_DUCKLAKE_REGISTERED per workspace and invalidate it in
  cleanup_fork_ducklake_namespaces so a same-id fork recreated within the TTL
  re-registers its namespaces
- filter listed object locations to the segment boundary before deletion

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): keep orphaned wm-fork-* workspaces ducklake-isolated

parent_workspace_id is ON DELETE SET NULL, so a fork can outlive its
parent with an empty ancestor chain while its cloned config still points
at the shared lake. Key the isolation gate on the wm-fork- prefix as well
as the chain (mirroring workspace_is_fork): orphaned forks get the write
redirect, registration and cleanup with zero ancestors (no defer), and
keep their 'fork' graph chips.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): attach orphaned wm-fork-* ancestors at their fork namespace

Chain position alone classified the last ancestor as a root, but an
orphaned wm-fork-* ancestor (its own parent deleted, SET NULL) ends the
chain the same way while its data lives in its fork namespace — its
descendants' defer views bound the dead root's lake instead. Key the
root-vs-fork decision on the wm-fork- prefix too, matching the
resolution gate.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): never inherit shared lake opt-out; durable cleanup ledger for failed fork deletions

- fork creation strips cloned fork_behavior stamps before applying the
  request's shared_ducklakes list: sharing is a per-creation choice, a
  fork of a shared fork defaults back to isolated
- fork_ducklake_namespace loses its ON DELETE CASCADE FK: rows are the
  durable cleanup ledger and outlive the workspace when physical cleanup
  fails post-commit; fork creation retries leftover rows for the reused
  id and refuses to create while a metadata schema still cannot be
  dropped (data-file leftovers alone are inert once the schema is gone
  and are swept by the next successful same-prefix cleanup)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): make orphaned-namespace cleanup retries independent of deleted fork resources

- ledger rows gain a schema_dropped phase flag: set when the schema drop
  succeeded but data cleanup failed, so later retries skip the schema
  phase and need no catalog credentials at all; registration resets it
  on re-attach (ON CONFLICT DO UPDATE) since attaching recreates the
  schema
- retry-path $res: resolution falls back to the workspace being forked
  (the deleted fork's resources were clones of a parent's); live paths
  (delete_workspace prepare, drop endpoint) pass no fallback

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): fork tables from failed-after-commit runs stay fork-owned in defer and graph

A failed materialization must not disguise a physically existing fork
table as deferred: CREATE VIEW IF NOT EXISTS silently yields to the
table, so reads hit fork data while the graph claims parent defer.

- record_mat upsert preserves the last committed snapshot_id on failure
- defer discovery and graph chips treat fork rows with a committed
  snapshot as fork-owned even when status is failed
- inspect_fork_catalog also lists live fork tables (same round trip) and
  the defer list is filtered against them — covers rows recorded before
  this fix and tables created by raw SQL
- drop stale FK-cascade wording in the design doc and sidebar comment

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(pipelines): fork-mode ducklake settings — per-lake isolated/shared chips + banner, fork_behavior round-trip

The workspace-settings ducklake editor had no fork awareness: no
reminder of each lake's isolated/shared choice and no warning about
what edits mean in a fork. It also rebuilt each lake explicitly on
save, silently dropping fork_behavior — any settings save in a shared
fork flipped the lake back to isolated.

- fork detection mirrors the backend gate (parent link or wm-fork- prefix)
- info banner explaining isolated vs shared semantics in a fork
- per-lake chip (emerald 'isolated' / amber 'shared with parent') with
  tooltips, matching the pipeline graph chip colors
- fork_behavior added to DucklakeSettingsType and preserved through
  convertDucklakeSettingsToBackend

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 ...d15474599734bc46ede6930650e2cba5d8a46.json |  15 +
 ...950a1563bd516e730aaa9d0f1501ea8cea7f9.json |  58 ++
 ...6fc3dc4e9e1f237ba7c86cbdd70140bc55541.json |  36 +
 ...4a6ae5091c37ec901975c3d564fd817a405b7.json |  23 +
 ...d4e427342fb78c66980984aefa7b8c7592ecb.json |  22 +
 ...c20a9e310092ae787efe4b0657399c799424.json} |   4 +-
 ...01fcab837629fd3c1a09cf82b21641a890444.json |  29 +
 ...650fb861aa19a009d6dfe9937304057f2b91f.json |  22 +
 ...a48ebfed85ad8800e293945eadc874d7e42f3.json |  19 +
 ...88958b335f6a24d1e93641eab6aaac86301f7.json |  14 +
 ...cb16a356cb6be5c48f95b5ba200e7e6ab0efd.json |  20 +
 ...92da8ee231c772f88dd9145f01d7cf3b8f8c1.json |  15 +
 ...b134780e55a521a5cee8eb657b67bbd4b2588.json |  19 +
 backend/Cargo.lock                            |   1 +
 ...703170745_fork_ducklake_namespace.down.sql |   1 +
 ...60703170745_fork_ducklake_namespace.up.sql |  51 ++
 backend/windmill-api-assets/src/lib.rs        |  89 +-
 backend/windmill-api-workspaces/Cargo.toml    |   3 +-
 .../windmill-api-workspaces/src/workspaces.rs | 126 +++
 .../src/workspaces_extra.rs                   | 602 ++++++++++++-
 backend/windmill-api/openapi.yaml             |  33 +
 .../windmill-common/src/materialization.rs    |  98 +-
 backend/windmill-common/src/workspaces.rs     | 841 +++++++++++++++++-
 backend/windmill-queue/tests/schedule_push.rs |  12 +-
 .../windmill-worker/src/duckdb_executor.rs    | 372 +++++++-
 docs/pipeline-env-isolation.md                | 219 +++++
 .../assets/AssetGraph/AssetGraphCanvas.svelte |   1 +
 .../AssetGraph/AssetGraphDetailsPane.svelte   |  33 +
 .../assets/AssetGraph/AssetNode.svelte        |  24 +-
 .../AssetGraph/PipelineGraphEditor.svelte     |   4 +
 .../lib/components/assets/AssetGraph/types.ts |   5 +
 .../components/sidebar/SidebarContent.svelte  |  19 +
 .../CreateWorkspaceInner.svelte               |   4 +
 .../workspaceSettings/DucklakeSettings.svelte |  66 +-
 .../ForkDucklakeSection.svelte                |  61 ++
 .../(logged)/pipeline/[folder]/+page.svelte   |  11 +
 36 files changed, 2930 insertions(+), 42 deletions(-)
 create mode 100644 backend/.sqlx/query-256a302afef987857016f2fa636d15474599734bc46ede6930650e2cba5d8a46.json
 create mode 100644 backend/.sqlx/query-3eeecc4bb26163cf6c2c19bc7c2950a1563bd516e730aaa9d0f1501ea8cea7f9.json
 create mode 100644 backend/.sqlx/query-63b0f39e3ea2b8d01d4c055258b6fc3dc4e9e1f237ba7c86cbdd70140bc55541.json
 create mode 100644 backend/.sqlx/query-6ca5cbe50df89e6eead890758e34a6ae5091c37ec901975c3d564fd817a405b7.json
 create mode 100644 backend/.sqlx/query-76af9b978fccef61f50a5eab335d4e427342fb78c66980984aefa7b8c7592ecb.json
 rename backend/.sqlx/{query-5e50ba0ae27b09a3ea1530c223e5039aa631bb5b0993ad09bc9a1381f6715f19.json => query-853230da671371fd8bbeeb4c87f8c20a9e310092ae787efe4b0657399c799424.json} (63%)
 create mode 100644 backend/.sqlx/query-8dec884a4c3b2d105afe22d1d7a01fcab837629fd3c1a09cf82b21641a890444.json
 create mode 100644 backend/.sqlx/query-cbbc6a894b6421d2cd49e59b7ed650fb861aa19a009d6dfe9937304057f2b91f.json
 create mode 100644 backend/.sqlx/query-cd492743a27a158c9f5ff1fdb50a48ebfed85ad8800e293945eadc874d7e42f3.json
 create mode 100644 backend/.sqlx/query-d1142126245cdaf5d01dc67ab2488958b335f6a24d1e93641eab6aaac86301f7.json
 create mode 100644 backend/.sqlx/query-e27cc16414c181a055bf0666eb0cb16a356cb6be5c48f95b5ba200e7e6ab0efd.json
 create mode 100644 backend/.sqlx/query-f3fef6964a211872b01c984b19192da8ee231c772f88dd9145f01d7cf3b8f8c1.json
 create mode 100644 backend/.sqlx/query-fbd1b02b9bbf86e17d6ee0da3e9b134780e55a521a5cee8eb657b67bbd4b2588.json
 create mode 100644 backend/migrations/20260703170745_fork_ducklake_namespace.down.sql
 create mode 100644 backend/migrations/20260703170745_fork_ducklake_namespace.up.sql
 create mode 100644 docs/pipeline-env-isolation.md
 create mode 100644 frontend/src/lib/components/workspaceSettings/ForkDucklakeSection.svelte

diff --git a/backend/.sqlx/query-256a302afef987857016f2fa636d15474599734bc46ede6930650e2cba5d8a46.json b/backend/.sqlx/query-256a302afef987857016f2fa636d15474599734bc46ede6930650e2cba5d8a46.json
new file mode 100644
index 0000000000..5f74d57491
--- /dev/null
+++ b/backend/.sqlx/query-256a302afef987857016f2fa636d15474599734bc46ede6930650e2cba5d8a46.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO script_trigger (workspace_id, runnable_kind, runnable_path, trigger_kind, trigger_ref, join_all, debounce_s, retry_count, retry_delay_s)\n         SELECT $2, runnable_kind, runnable_path, trigger_kind, trigger_ref, join_all, debounce_s, retry_count, retry_delay_s\n         FROM script_trigger WHERE workspace_id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "256a302afef987857016f2fa636d15474599734bc46ede6930650e2cba5d8a46"
+}
diff --git a/backend/.sqlx/query-3eeecc4bb26163cf6c2c19bc7c2950a1563bd516e730aaa9d0f1501ea8cea7f9.json b/backend/.sqlx/query-3eeecc4bb26163cf6c2c19bc7c2950a1563bd516e730aaa9d0f1501ea8cea7f9.json
new file mode 100644
index 0000000000..4599073796
--- /dev/null
+++ b/backend/.sqlx/query-3eeecc4bb26163cf6c2c19bc7c2950a1563bd516e730aaa9d0f1501ea8cea7f9.json
@@ -0,0 +1,58 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT ducklake_name AS \"ducklake_name!\", metadata_schema AS \"metadata_schema!\",\n                  catalog AS \"catalog!\", storage AS \"storage!\",\n                  storage_ref AS \"storage_ref!\", data_path AS \"data_path!\",\n                  schema_dropped AS \"schema_dropped!\"\n             FROM fork_ducklake_namespace WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "ducklake_name!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "metadata_schema!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 2,
+        "name": "catalog!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 3,
+        "name": "storage!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 4,
+        "name": "storage_ref!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 5,
+        "name": "data_path!",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 6,
+        "name": "schema_dropped!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false,
+      false,
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "3eeecc4bb26163cf6c2c19bc7c2950a1563bd516e730aaa9d0f1501ea8cea7f9"
+}
diff --git a/backend/.sqlx/query-63b0f39e3ea2b8d01d4c055258b6fc3dc4e9e1f237ba7c86cbdd70140bc55541.json b/backend/.sqlx/query-63b0f39e3ea2b8d01d4c055258b6fc3dc4e9e1f237ba7c86cbdd70140bc55541.json
new file mode 100644
index 0000000000..1bcb7e6e53
--- /dev/null
+++ b/backend/.sqlx/query-63b0f39e3ea2b8d01d4c055258b6fc3dc4e9e1f237ba7c86cbdd70140bc55541.json
@@ -0,0 +1,36 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n        WITH ancestor AS (\n            SELECT wid, ord FROM unnest($1::text[]) WITH ORDINALITY AS a(wid, ord)\n        ), anc_mat AS (\n            -- Per table, the nearest ancestor (lowest ord) that materialized it.\n            SELECT DISTINCT ON (mp.asset_path) mp.asset_path, a.wid, a.ord\n            FROM materialized_partition mp\n            JOIN ancestor a ON a.wid = mp.workspace_id\n            WHERE mp.asset_kind = 'ducklake' AND mp.status = 'materialized'\n              AND split_part(mp.asset_path, '/', 1) = $3 AND mp.asset_path LIKE '%/%'\n            ORDER BY mp.asset_path, a.ord\n        ), fork_mat AS (\n            -- Fork-OWNED assets: anything whose physical table exists in the fork\n            -- namespace, not just clean materializations. A committed write whose data\n            -- tests failed afterwards records status='failed' WITH a snapshot — its table\n            -- is real, and a defer view emitted over it would silently yield to it\n            -- (CREATE VIEW IF NOT EXISTS) while claiming the read defers to the parent.\n            SELECT DISTINCT asset_path FROM materialized_partition\n            WHERE workspace_id = $2 AND asset_kind = 'ducklake'\n              AND (status = 'materialized' OR snapshot_id IS NOT NULL)\n        ), latest_schema AS (\n            SELECT DISTINCT ON (workspace_id, asset_path) workspace_id, asset_path, columns\n            FROM materialized_asset_schema\n            WHERE workspace_id = ANY($1) AND asset_kind = 'ducklake'\n            ORDER BY workspace_id, asset_path, version DESC\n        )\n        SELECT am.asset_path AS \"asset_path!\",\n               am.ord AS \"ord!\",\n               COALESCE(EXISTS (\n                   SELECT 1 FROM jsonb_array_elements(ls.columns) e\n                   WHERE e->>'name' = 'is_current'\n               ), false) AS \"has_current!\"\n        FROM anc_mat am\n        LEFT JOIN latest_schema ls\n               ON ls.asset_path = am.asset_path AND ls.workspace_id = am.wid\n        WHERE am.asset_path NOT IN (SELECT asset_path FROM fork_mat)\n        ORDER BY am.asset_path\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "asset_path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "ord!",
+        "type_info": "Int8"
+      },
+      {
+        "ordinal": 2,
+        "name": "has_current!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "TextArray",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      null,
+      null
+    ]
+  },
+  "hash": "63b0f39e3ea2b8d01d4c055258b6fc3dc4e9e1f237ba7c86cbdd70140bc55541"
+}
diff --git a/backend/.sqlx/query-6ca5cbe50df89e6eead890758e34a6ae5091c37ec901975c3d564fd817a405b7.json b/backend/.sqlx/query-6ca5cbe50df89e6eead890758e34a6ae5091c37ec901975c3d564fd817a405b7.json
new file mode 100644
index 0000000000..9a0bbf46ef
--- /dev/null
+++ b/backend/.sqlx/query-6ca5cbe50df89e6eead890758e34a6ae5091c37ec901975c3d564fd817a405b7.json
@@ -0,0 +1,23 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE workspace_settings\n               SET ducklake = jsonb_set(ducklake, ARRAY['ducklakes', $2, 'fork_behavior'], '\"shared\"')\n               WHERE workspace_id = $1 AND ducklake->'ducklakes' ? $2\n               RETURNING 1 AS \"one!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "one!",
+        "type_info": "Int4"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "6ca5cbe50df89e6eead890758e34a6ae5091c37ec901975c3d564fd817a405b7"
+}
diff --git a/backend/.sqlx/query-76af9b978fccef61f50a5eab335d4e427342fb78c66980984aefa7b8c7592ecb.json b/backend/.sqlx/query-76af9b978fccef61f50a5eab335d4e427342fb78c66980984aefa7b8c7592ecb.json
new file mode 100644
index 0000000000..b6b0f06be5
--- /dev/null
+++ b/backend/.sqlx/query-76af9b978fccef61f50a5eab335d4e427342fb78c66980984aefa7b8c7592ecb.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT ducklake->'ducklakes' FROM workspace_settings WHERE workspace_id = $1",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "?column?",
+        "type_info": "Jsonb"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "76af9b978fccef61f50a5eab335d4e427342fb78c66980984aefa7b8c7592ecb"
+}
diff --git a/backend/.sqlx/query-5e50ba0ae27b09a3ea1530c223e5039aa631bb5b0993ad09bc9a1381f6715f19.json b/backend/.sqlx/query-853230da671371fd8bbeeb4c87f8c20a9e310092ae787efe4b0657399c799424.json
similarity index 63%
rename from backend/.sqlx/query-5e50ba0ae27b09a3ea1530c223e5039aa631bb5b0993ad09bc9a1381f6715f19.json
rename to backend/.sqlx/query-853230da671371fd8bbeeb4c87f8c20a9e310092ae787efe4b0657399c799424.json
index 17d372249b..5aacf1a295 100644
--- a/backend/.sqlx/query-5e50ba0ae27b09a3ea1530c223e5039aa631bb5b0993ad09bc9a1381f6715f19.json
+++ b/backend/.sqlx/query-853230da671371fd8bbeeb4c87f8c20a9e310092ae787efe4b0657399c799424.json
@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "INSERT INTO materialized_partition\n           (workspace_id, asset_kind, asset_path, partition, status,\n            snapshot_id, row_count, job_id, materialized_at, error)\n         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, now(), $9)\n         ON CONFLICT (workspace_id, asset_kind, asset_path, partition)\n         DO UPDATE SET status = EXCLUDED.status,\n                       snapshot_id = EXCLUDED.snapshot_id,\n                       row_count = EXCLUDED.row_count,\n                       job_id = EXCLUDED.job_id,\n                       materialized_at = now(),\n                       error = EXCLUDED.error",
+  "query": "INSERT INTO materialized_partition\n           (workspace_id, asset_kind, asset_path, partition, status,\n            snapshot_id, row_count, job_id, materialized_at, error)\n         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, now(), $9)\n         ON CONFLICT (workspace_id, asset_kind, asset_path, partition)\n         DO UPDATE SET status = EXCLUDED.status,\n                       -- A failed run records no snapshot, but must not erase the last\n                       -- committed one: a physical table from an earlier commit (or from a\n                       -- committed write whose data tests then failed) still exists, and\n                       -- fork defer/graph state keys on that evidence.\n                       snapshot_id = COALESCE(EXCLUDED.snapshot_id, materialized_partition.snapshot_id),\n                       row_count = EXCLUDED.row_count,\n                       job_id = EXCLUDED.job_id,\n                       materialized_at = now(),\n                       error = EXCLUDED.error",
   "describe": {
     "columns": [],
     "parameters": {
@@ -43,5 +43,5 @@
     },
     "nullable": []
   },
-  "hash": "5e50ba0ae27b09a3ea1530c223e5039aa631bb5b0993ad09bc9a1381f6715f19"
+  "hash": "853230da671371fd8bbeeb4c87f8c20a9e310092ae787efe4b0657399c799424"
 }
diff --git a/backend/.sqlx/query-8dec884a4c3b2d105afe22d1d7a01fcab837629fd3c1a09cf82b21641a890444.json b/backend/.sqlx/query-8dec884a4c3b2d105afe22d1d7a01fcab837629fd3c1a09cf82b21641a890444.json
new file mode 100644
index 0000000000..efd12114f3
--- /dev/null
+++ b/backend/.sqlx/query-8dec884a4c3b2d105afe22d1d7a01fcab837629fd3c1a09cf82b21641a890444.json
@@ -0,0 +1,29 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n                    -- Fork rows also count when a snapshot ever committed (a failed run\n                    -- preserves it): the physical table exists, so reads hit the FORK's\n                    -- data — showing 'deferred' would misstate what a query returns.\n                    -- Ancestor rows still require a clean materialization.\n                    SELECT DISTINCT asset_path AS \"asset_path!\", workspace_id AS \"workspace_id!\"\n                    FROM materialized_partition\n                    WHERE (workspace_id = $1 OR workspace_id = ANY($2))\n                      AND asset_kind = 'ducklake'\n                      AND (status = 'materialized'\n                           OR (workspace_id = $1 AND snapshot_id IS NOT NULL))\n                    ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "asset_path!",
+        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 1,
+        "name": "workspace_id!",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "TextArray"
+      ]
+    },
+    "nullable": [
+      false,
+      false
+    ]
+  },
+  "hash": "8dec884a4c3b2d105afe22d1d7a01fcab837629fd3c1a09cf82b21641a890444"
+}
diff --git a/backend/.sqlx/query-cbbc6a894b6421d2cd49e59b7ed650fb861aa19a009d6dfe9937304057f2b91f.json b/backend/.sqlx/query-cbbc6a894b6421d2cd49e59b7ed650fb861aa19a009d6dfe9937304057f2b91f.json
new file mode 100644
index 0000000000..0fac858572
--- /dev/null
+++ b/backend/.sqlx/query-cbbc6a894b6421d2cd49e59b7ed650fb861aa19a009d6dfe9937304057f2b91f.json
@@ -0,0 +1,22 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "\n            WITH RECURSIVE chain AS (\n                SELECT id, parent_workspace_id, 0 AS depth\n                FROM workspace WHERE id = $1\n                UNION ALL\n                SELECT w.id, w.parent_workspace_id, chain.depth + 1\n                FROM workspace w\n                JOIN chain ON w.id = chain.parent_workspace_id\n                WHERE chain.depth < 20\n            )\n            SELECT id AS \"id!\" FROM chain WHERE depth > 0 ORDER BY depth\n        ",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id!",
+        "type_info": "Varchar"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "cbbc6a894b6421d2cd49e59b7ed650fb861aa19a009d6dfe9937304057f2b91f"
+}
diff --git a/backend/.sqlx/query-cd492743a27a158c9f5ff1fdb50a48ebfed85ad8800e293945eadc874d7e42f3.json b/backend/.sqlx/query-cd492743a27a158c9f5ff1fdb50a48ebfed85ad8800e293945eadc874d7e42f3.json
new file mode 100644
index 0000000000..83f7394250
--- /dev/null
+++ b/backend/.sqlx/query-cd492743a27a158c9f5ff1fdb50a48ebfed85ad8800e293945eadc874d7e42f3.json
@@ -0,0 +1,19 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE fork_ducklake_namespace SET schema_dropped = true\n                 WHERE workspace_id = $1 AND ducklake_name = $2 AND catalog = $3\n                   AND storage = $4 AND storage_ref = $5 AND data_path = $6",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text",
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "cd492743a27a158c9f5ff1fdb50a48ebfed85ad8800e293945eadc874d7e42f3"
+}
diff --git a/backend/.sqlx/query-d1142126245cdaf5d01dc67ab2488958b335f6a24d1e93641eab6aaac86301f7.json b/backend/.sqlx/query-d1142126245cdaf5d01dc67ab2488958b335f6a24d1e93641eab6aaac86301f7.json
new file mode 100644
index 0000000000..f705dbc337
--- /dev/null
+++ b/backend/.sqlx/query-d1142126245cdaf5d01dc67ab2488958b335f6a24d1e93641eab6aaac86301f7.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE workspace_settings\n           SET ducklake = jsonb_set(ducklake, '{ducklakes}', (\n               SELECT COALESCE(jsonb_object_agg(key, value - 'fork_behavior'), '{}'::jsonb)\n               FROM jsonb_each(ducklake->'ducklakes')\n           ))\n           WHERE workspace_id = $1 AND jsonb_typeof(ducklake->'ducklakes') = 'object'",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "d1142126245cdaf5d01dc67ab2488958b335f6a24d1e93641eab6aaac86301f7"
+}
diff --git a/backend/.sqlx/query-e27cc16414c181a055bf0666eb0cb16a356cb6be5c48f95b5ba200e7e6ab0efd.json b/backend/.sqlx/query-e27cc16414c181a055bf0666eb0cb16a356cb6be5c48f95b5ba200e7e6ab0efd.json
new file mode 100644
index 0000000000..37bd25eb98
--- /dev/null
+++ b/backend/.sqlx/query-e27cc16414c181a055bf0666eb0cb16a356cb6be5c48f95b5ba200e7e6ab0efd.json
@@ -0,0 +1,20 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO fork_ducklake_namespace\n           (workspace_id, ducklake_name, metadata_schema, catalog, storage, storage_ref, data_path)\n         VALUES ($1, $2, $3, $4, $5, $6, $7)\n         ON CONFLICT (workspace_id, ducklake_name, catalog, storage, storage_ref, data_path)\n         DO UPDATE SET schema_dropped = false",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Varchar",
+        "Varchar",
+        "Text",
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "e27cc16414c181a055bf0666eb0cb16a356cb6be5c48f95b5ba200e7e6ab0efd"
+}
diff --git a/backend/.sqlx/query-f3fef6964a211872b01c984b19192da8ee231c772f88dd9145f01d7cf3b8f8c1.json b/backend/.sqlx/query-f3fef6964a211872b01c984b19192da8ee231c772f88dd9145f01d7cf3b8f8c1.json
new file mode 100644
index 0000000000..7049fafe37
--- /dev/null
+++ b/backend/.sqlx/query-f3fef6964a211872b01c984b19192da8ee231c772f88dd9145f01d7cf3b8f8c1.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO asset (workspace_id, path, kind, usage_access_type, usage_path, usage_kind, columns)\n         SELECT $2, path, kind, usage_access_type, usage_path, usage_kind, columns\n         FROM asset WHERE workspace_id = $1 AND usage_kind IN ('script', 'flow')",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Varchar"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "f3fef6964a211872b01c984b19192da8ee231c772f88dd9145f01d7cf3b8f8c1"
+}
diff --git a/backend/.sqlx/query-fbd1b02b9bbf86e17d6ee0da3e9b134780e55a521a5cee8eb657b67bbd4b2588.json b/backend/.sqlx/query-fbd1b02b9bbf86e17d6ee0da3e9b134780e55a521a5cee8eb657b67bbd4b2588.json
new file mode 100644
index 0000000000..ad17a60330
--- /dev/null
+++ b/backend/.sqlx/query-fbd1b02b9bbf86e17d6ee0da3e9b134780e55a521a5cee8eb657b67bbd4b2588.json
@@ -0,0 +1,19 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM fork_ducklake_namespace\n             WHERE workspace_id = $1 AND ducklake_name = $2 AND catalog = $3\n               AND storage = $4 AND storage_ref = $5 AND data_path = $6",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text",
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "fbd1b02b9bbf86e17d6ee0da3e9b134780e55a521a5cee8eb657b67bbd4b2588"
+}
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index aa66b845b3..1153916767 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -14449,6 +14449,7 @@ version = "1.747.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
+ "futures",
  "hex",
  "http 1.4.2",
  "hyper 1.10.1",
diff --git a/backend/migrations/20260703170745_fork_ducklake_namespace.down.sql b/backend/migrations/20260703170745_fork_ducklake_namespace.down.sql
new file mode 100644
index 0000000000..fd722bf414
--- /dev/null
+++ b/backend/migrations/20260703170745_fork_ducklake_namespace.down.sql
@@ -0,0 +1 @@
+DROP TABLE IF EXISTS fork_ducklake_namespace;
diff --git a/backend/migrations/20260703170745_fork_ducklake_namespace.up.sql b/backend/migrations/20260703170745_fork_ducklake_namespace.up.sql
new file mode 100644
index 0000000000..7762304199
--- /dev/null
+++ b/backend/migrations/20260703170745_fork_ducklake_namespace.up.sql
@@ -0,0 +1,51 @@
+-- Registry of ducklake namespaces provisioned for fork/dev workspaces. One row per
+-- (fork workspace, lake name): records the exact catalog metadata schema and data
+-- sub-path the fork's jobs attach to, so fork deletion can drop the pg schema and
+-- delete the S3 prefix deterministically (the row is written on first resolution,
+-- before any physical state exists).
+--
+-- Deliberately NO foreign key to workspace(id): rows are the durable cleanup ledger and
+-- must OUTLIVE the workspace row when physical cleanup fails after the delete commits
+-- (unreachable catalog, storage outage) — a CASCADE would erase the only record of the
+-- orphaned namespace, letting a recreated same-id fork silently reattach stale tables.
+-- Rows are deleted explicitly after each successful cleanup; leftover rows for a reused
+-- id are retried at fork creation, which refuses to proceed while they cannot be cleaned.
+CREATE TABLE fork_ducklake_namespace (
+    workspace_id VARCHAR(50) NOT NULL,
+    ducklake_name VARCHAR(255) NOT NULL,
+    metadata_schema VARCHAR(63) NOT NULL,
+    -- Canonical identity of the catalog database the metadata schema lives in
+    -- (`<resource_type>:<resource_path>`, e.g. `instance:wm_ducklake` or
+    -- `postgres:u/admin/pg`). Cleanup connects to THIS catalog, not whatever the fork's
+    -- settings point at by then — a drifted catalog resource must not make cleanup drop a
+    -- schema in the wrong database and orphan the real one.
+    catalog TEXT NOT NULL,
+    -- Named workspace storage holding the fork's data files; '' = the default storage
+    -- (part of the PK, which cannot hold NULL).
+    storage TEXT NOT NULL DEFAULT '',
+    -- The storage's RESOLVED identity at registration time (`<lfs type>:<resource path or
+    -- root path>`, e.g. `s3:u/admin/minio` or `filesystem:/data/lfs`; '' = unknown). Cleanup
+    -- deletes the fork prefix from THIS storage, not whatever the logical name points at by
+    -- then — repointing a storage after attach must not orphan the original fork data (or
+    -- delete a colliding prefix from the new one).
+    storage_ref TEXT NOT NULL DEFAULT '',
+    -- The fork namespace's data path within that storage (a bucket-root
+    -- `__wm_forks/<fork wid>/…` prefix).
+    data_path TEXT NOT NULL,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT now(),
+    -- Cleanup phase state: true once the metadata schema has been dropped but data files (or
+    -- the row delete) still failed. Later retries then skip the schema phase entirely — they
+    -- need NO catalog credentials, which may be gone for good with the deleted fork's
+    -- resources. Reset to false whenever a live fork re-registers the row (re-attaching
+    -- recreates the schema).
+    schema_dropped BOOLEAN NOT NULL DEFAULT false,
+    -- One row per physical location EVER attached: if the fork's lake settings drift
+    -- (catalog/storage/path change), later attaches add rows rather than replace them, so
+    -- cleanup covers every location the fork wrote, not just the first.
+    PRIMARY KEY (workspace_id, ducklake_name, catalog, storage, storage_ref, data_path)
+);
+
+-- Resolution runs under user_db transactions (SET LOCAL ROLE) in API contexts, so the
+-- windmill roles need explicit grants (default privileges don't apply to app-created tables).
+GRANT ALL ON fork_ducklake_namespace TO windmill_user;
+GRANT ALL ON fork_ducklake_namespace TO windmill_admin;
diff --git a/backend/windmill-api-assets/src/lib.rs b/backend/windmill-api-assets/src/lib.rs
index 587307afbb..2cebf9ed13 100644
--- a/backend/windmill-api-assets/src/lib.rs
+++ b/backend/windmill-api-assets/src/lib.rs
@@ -614,6 +614,12 @@ struct GraphQuery {
 struct GraphAssetNode {
     kind: AssetKind,
     path: String,
+    // Fork workspaces only: 'fork' when the fork has materialized this ducklake asset itself,
+    // 'deferred' when reads fall back to the parent workspace's current table (defer view).
+    // Absent outside forks, for non-ducklake assets, and for assets never materialized
+    // anywhere. Lockstep with TS `AssetGraphAssetNode.fork_materialization`.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    fork_materialization: Option<String>,
 }
 
 #[derive(Serialize, Debug)]
@@ -805,6 +811,7 @@ async fn asset_graph(
     authed: ApiAuthed,
     Path(w_id): Path<String>,
     Extension(user_db): Extension<UserDB>,
+    Extension(db): Extension<windmill_common::DB>,
     Query(q): Query<GraphQuery>,
 ) -> JsonResult<AssetGraphResponse> {
     let mut tx = user_db.begin(&authed).await?;
@@ -1250,9 +1257,89 @@ async fn asset_graph(
         runnable_set.insert((AssetUsageKind::Script, e.consumer_path.clone()));
     }
 
+    // Fork data-environment state per ducklake asset. The parent's rows are read on the plain
+    // pool: fork membership does not imply parent membership, and defer already exposes the
+    // parent's data to fork jobs — surfacing its materialization status is strictly less.
+    let fork_materialization_by_path: std::collections::HashMap<String, &'static str> = {
+        // The WHOLE ancestor chain, matching defer discovery: a grandchild fork whose direct
+        // parent only defers a table still reads it (from the grandparent), so it must show
+        // as deferred, not unmarked.
+        let ancestors = windmill_common::workspaces::fork_ancestor_chain(&db, &w_id).await?;
+        match ancestors {
+            // An orphaned `wm-fork-*` (parent deleted, chain empty) is still isolated — its
+            // own materializations must keep their 'fork' chips (nothing can be 'deferred').
+            a if a.is_empty() && !w_id.starts_with(windmill_common::workspaces::WM_FORK_PREFIX) => {
+                std::collections::HashMap::new()
+            }
+            ancestors => {
+                // Lakes the fork chose to SHARE at creation have no fork namespace — their
+                // assets live in the parent's tables for real, so no chip applies.
+                let shared_lakes: std::collections::HashSet<String> = sqlx::query_scalar!(
+                    "SELECT ducklake->'ducklakes' FROM workspace_settings WHERE workspace_id = $1",
+                    &w_id,
+                )
+                .fetch_optional(&db)
+                .await?
+                .flatten()
+                .and_then(|v| v.as_object().cloned())
+                .map(|lakes| {
+                    lakes
+                        .into_iter()
+                        .filter(|(_, cfg)| {
+                            cfg.get("fork_behavior").and_then(|b| b.as_str()) == Some("shared")
+                        })
+                        .map(|(name, _)| name)
+                        .collect()
+                })
+                .unwrap_or_default();
+                sqlx::query!(
+                    r#"
+                    -- Fork rows also count when a snapshot ever committed (a failed run
+                    -- preserves it): the physical table exists, so reads hit the FORK's
+                    -- data — showing 'deferred' would misstate what a query returns.
+                    -- Ancestor rows still require a clean materialization.
+                    SELECT DISTINCT asset_path AS "asset_path!", workspace_id AS "workspace_id!"
+                    FROM materialized_partition
+                    WHERE (workspace_id = $1 OR workspace_id = ANY($2))
+                      AND asset_kind = 'ducklake'
+                      AND (status = 'materialized'
+                           OR (workspace_id = $1 AND snapshot_id IS NOT NULL))
+                    "#,
+                    &w_id,
+                    &ancestors,
+                )
+                .fetch_all(&db)
+                .await?
+                .into_iter()
+                .filter(|r| {
+                    !shared_lakes.contains(r.asset_path.split('/').next().unwrap_or_default())
+                })
+                .fold(std::collections::HashMap::new(), |mut m, r| {
+                    // A fork row wins over an inherited 'deferred' from any ancestor's row.
+                    if r.workspace_id == w_id {
+                        m.insert(r.asset_path, "fork");
+                    } else {
+                        m.entry(r.asset_path).or_insert("deferred");
+                    }
+                    m
+                })
+            }
+        }
+    };
+
     let mut assets: Vec<GraphAssetNode> = asset_set
         .into_iter()
-        .map(|(kind, path)| GraphAssetNode { kind, path })
+        .map(|(kind, path)| GraphAssetNode {
+            fork_materialization: (kind == AssetKind::Ducklake)
+                .then(|| {
+                    fork_materialization_by_path
+                        .get(&path)
+                        .map(|s| s.to_string())
+                })
+                .flatten(),
+            kind,
+            path,
+        })
         .collect();
     assets.sort_by(|a, b| a.path.cmp(&b.path));
 
diff --git a/backend/windmill-api-workspaces/Cargo.toml b/backend/windmill-api-workspaces/Cargo.toml
index fc5a1fe874..c25bb8f42b 100644
--- a/backend/windmill-api-workspaces/Cargo.toml
+++ b/backend/windmill-api-workspaces/Cargo.toml
@@ -18,7 +18,7 @@ private = [
 ]
 cloud = ["windmill-common/cloud"]
 no_auth = ["windmill-api-auth/no_auth"]
-parquet = ["windmill-object-store/parquet"]
+parquet = ["windmill-object-store/parquet", "dep:futures"]
 
 [dependencies]
 windmill-common = { workspace = true, default-features = false }
@@ -35,6 +35,7 @@ windmill-store.workspace = true
 
 axum.workspace = true
 chrono.workspace = true
+futures = { workspace = true, optional = true }
 hex.workspace = true
 magic-crypt.workspace = true
 http.workspace = true
diff --git a/backend/windmill-api-workspaces/src/workspaces.rs b/backend/windmill-api-workspaces/src/workspaces.rs
index aaf04972e1..228b8d1831 100644
--- a/backend/windmill-api-workspaces/src/workspaces.rs
+++ b/backend/windmill-api-workspaces/src/workspaces.rs
@@ -183,6 +183,10 @@ pub fn workspaced_service() -> Router {
             "/drop_forked_datatable_databases",
             post(crate::workspaces_extra::drop_forked_datatable_databases),
         )
+        .route(
+            "/drop_forked_ducklake_namespaces",
+            post(crate::workspaces_extra::drop_forked_ducklake_namespaces),
+        )
         .route(
             "/get_datatable_full_schema",
             post(get_datatable_full_schema),
@@ -449,6 +453,11 @@ struct CreateWorkspaceFork {
     /// forked workspace's datatable config to point to the new database.
     #[serde(default)]
     forked_datatables: Vec<ForkedDatatableInfo>,
+    /// Lakes the user explicitly chose to SHARE with the parent (the fork then reads and
+    /// writes the parent's lake directly). Every lake not listed gets the default isolated
+    /// fork namespace + read-defer.
+    #[serde(default)]
+    shared_ducklakes: Vec<String>,
     /// Create the fork as a persistent dev workspace: the id is not required to carry the
     /// `wm-fork-` prefix, and at most one dev workspace may exist per parent.
     #[serde(default)]
@@ -4063,6 +4072,7 @@ async fn clone_workspace_data(
     // Clone CI test references
     clone_ci_test_references(tx, source_workspace_id, target_workspace_id).await?;
     clone_macro_registry(tx, source_workspace_id, target_workspace_id).await?;
+    clone_asset_usages_and_triggers(tx, source_workspace_id, target_workspace_id).await?;
 
     // Clone flows with new versions
     clone_flows(tx, source_workspace_id, target_workspace_id).await?;
@@ -4659,6 +4669,39 @@ async fn clone_macro_registry(
     Ok(())
 }
 
+// Asset usage rows and `// on` subscriber triggers are deploy-derived like
+// ci_test_reference / the macro registry: without cloning them the fork's
+// pipeline graph has no asset nodes or lineage edges, and — worse — the asset
+// dispatch cascade never fires in the fork (it reads `script_trigger`), so
+// materializing an upstream node can't trigger its consumers until every
+// script is manually redeployed. `job`-kind usage rows (runtime-detected,
+// ephemeral) are skipped like the graph does.
+async fn clone_asset_usages_and_triggers(
+    tx: &mut Transaction<'_, Postgres>,
+    source_workspace_id: &str,
+    target_workspace_id: &str,
+) -> Result<()> {
+    sqlx::query!(
+        "INSERT INTO asset (workspace_id, path, kind, usage_access_type, usage_path, usage_kind, columns)
+         SELECT $2, path, kind, usage_access_type, usage_path, usage_kind, columns
+         FROM asset WHERE workspace_id = $1 AND usage_kind IN ('script', 'flow')",
+        source_workspace_id,
+        target_workspace_id,
+    )
+    .execute(&mut **tx)
+    .await?;
+    sqlx::query!(
+        "INSERT INTO script_trigger (workspace_id, runnable_kind, runnable_path, trigger_kind, trigger_ref, join_all, debounce_s, retry_count, retry_delay_s)
+         SELECT $2, runnable_kind, runnable_path, trigger_kind, trigger_ref, join_all, debounce_s, retry_count, retry_delay_s
+         FROM script_trigger WHERE workspace_id = $1",
+        source_workspace_id,
+        target_workspace_id,
+    )
+    .execute(&mut **tx)
+    .await?;
+    Ok(())
+}
+
 async fn clone_flows(
     tx: &mut Transaction<'_, Postgres>,
     source_workspace_id: &str,
@@ -5380,6 +5423,42 @@ async fn create_workspace_fork(
     // conflict instead of a misleading "maximum number of workspaces" error.
     check_fork_w_id_conflict(&db, &nw.id).await?;
     purge_stale_fork_diff_state(&db, &nw.id).await?;
+    // A previously deleted fork with this id may have left ducklake namespaces behind if its
+    // physical cleanup failed after the delete committed (registry rows are the durable
+    // ledger — no FK, they outlive the workspace). Retry that cleanup now, and refuse to
+    // proceed while any metadata schema still can't be dropped: creating the fork anyway
+    // would silently reattach the deterministic namespace and its stale tables. Data-file
+    // leftovers alone don't block — once the schema is gone they are inert (a deleted fork's
+    // `$res:` storage resource is gone forever, so they may never resolve again), and the
+    // surviving registry row has the next successful same-prefix cleanup sweep them.
+    // `$res:` fallback = the workspace being forked: the deleted fork's resource clones came
+    // from a parent, so the new parent is the natural donor for the retry's credentials.
+    let leftover_issues = crate::workspaces_extra::drop_forked_ducklake_namespaces_impl(
+        &db,
+        &nw.id,
+        Some(&parent_workspace_id),
+    )
+    .await?;
+    let blocking: Vec<&str> = leftover_issues
+        .iter()
+        .filter(|i| i.blocking)
+        .map(|i| i.msg.as_str())
+        .collect();
+    if !blocking.is_empty() {
+        return Err(Error::BadRequest(format!(
+            "a previously deleted workspace with id '{}' left ducklake namespaces that could \
+             not be cleaned up: {}; retry once the catalog is reachable again",
+            nw.id,
+            blocking.join("; ")
+        )));
+    }
+    for i in &leftover_issues {
+        tracing::warn!(
+            "creating fork {}: leftover ducklake cleanup: {}",
+            nw.id,
+            i.msg
+        );
+    }
 
     #[cfg(not(feature = "enterprise"))]
     _check_nb_of_workspaces(&db).await?;
@@ -5477,6 +5556,42 @@ async fn create_workspace_fork(
         apply_forked_datatable(&db, &mut tx, &parent_workspace_id, &forked_id, fdt).await?;
     }
 
+    // The settings clone copies the source's ducklake config verbatim — including a parent
+    // fork's own `fork_behavior` stamps. Sharing is a per-fork-creation choice, never
+    // inherited: reset any cloned stamps first, then apply this fork's requested list.
+    sqlx::query!(
+        r#"UPDATE workspace_settings
+           SET ducklake = jsonb_set(ducklake, '{ducklakes}', (
+               SELECT COALESCE(jsonb_object_agg(key, value - 'fork_behavior'), '{}'::jsonb)
+               FROM jsonb_each(ducklake->'ducklakes')
+           ))
+           WHERE workspace_id = $1 AND jsonb_typeof(ducklake->'ducklakes') = 'object'"#,
+        &forked_id,
+    )
+    .execute(&mut *tx)
+    .await?;
+
+    // Stamp the per-lake ducklake fork choice into the fork's own settings. Only the `shared`
+    // opt-out needs stamping — absent `fork_behavior` already means isolated (the default),
+    // so unlisted lakes and API callers that omit the field stay safe.
+    for lake in &nw.shared_ducklakes {
+        let stamped = sqlx::query_scalar!(
+            r#"UPDATE workspace_settings
+               SET ducklake = jsonb_set(ducklake, ARRAY['ducklakes', $2, 'fork_behavior'], '"shared"')
+               WHERE workspace_id = $1 AND ducklake->'ducklakes' ? $2
+               RETURNING 1 AS "one!""#,
+            &forked_id,
+            lake,
+        )
+        .fetch_optional(&mut *tx)
+        .await?;
+        if stamped.is_none() {
+            return Err(Error::BadRequest(format!(
+                "cannot mark ducklake `{lake}` as shared: no such lake in the workspace settings"
+            )));
+        }
+    }
+
     // Lock the parent ("prod") so edits are funneled through this dev workspace.
     let locked_prod = nw.is_dev_workspace && (nw.lock_prod_deploy || nw.lock_prod_forking);
     if locked_prod {
@@ -5501,6 +5616,10 @@ async fn create_workspace_fork(
     .await?;
     tx.commit().await?;
 
+    // A pre-creation lookup could have cached an EMPTY ancestor chain for this id, which
+    // would bypass ducklake fork isolation for the TTL.
+    windmill_common::workspaces::invalidate_fork_ancestor_chain_cache(&forked_id);
+
     if locked_prod {
         windmill_common::workspaces::invalidate_protection_rules_cache(&parent_workspace_id);
     }
@@ -5674,6 +5793,13 @@ async fn attach_dev_workspace(
     // The dev workspace's parent just changed (none -> prod); drop its cached fork->parent mapping
     // so per-workspace job tags route to the prod family immediately rather than after the TTL.
     windmill_queue::tags::invalidate_fork_parent_cache(&dev_w_id);
+    // Drop the cached ancestor chains too — the workspace existed BEFORE the attach, so a
+    // cached empty chain reads as "not a fork" and its ducklake jobs would write the shared
+    // lake until the TTL. Descendants' chains also gained the new root.
+    windmill_common::workspaces::invalidate_fork_ancestor_chain_cache(&dev_w_id);
+    for id in windmill_common::workspaces::list_fork_descendants(&db, &dev_w_id).await? {
+        windmill_common::workspaces::invalidate_fork_ancestor_chain_cache(&id);
+    }
     // Same reparent invalidates the billing-workspace mapping so its usage meters to prod at once. The
     // candidate can bring its own fork subtree, whose descendants had resolved their (now-stale) root
     // to the candidate's old family; invalidate them too so they meter to prod without waiting out the
diff --git a/backend/windmill-api-workspaces/src/workspaces_extra.rs b/backend/windmill-api-workspaces/src/workspaces_extra.rs
index daf83171e4..9fbaad2bf3 100644
--- a/backend/windmill-api-workspaces/src/workspaces_extra.rs
+++ b/backend/windmill-api-workspaces/src/workspaces_extra.rs
@@ -749,6 +749,16 @@ pub(crate) async fn change_workspace_id(
     // (fork-of-fork) self-heal via the 60s billing-cache TTL.
     for child in &reparented_children {
         windmill_queue::tags::invalidate_fork_parent_cache(child);
+        windmill_common::workspaces::invalidate_fork_ancestor_chain_cache(child);
+        // Grandchildren's cached chains contain the old (renamed-away) ancestor id; a stale
+        // chain drops all defer ancestors in the ducklake resolver, so sweep the subtree
+        // rather than letting it wait out the TTL.
+        for id in windmill_common::workspaces::list_fork_descendants(&db, child)
+            .await
+            .unwrap_or_default()
+        {
+            windmill_common::workspaces::invalidate_fork_ancestor_chain_cache(&id);
+        }
         #[cfg(feature = "cloud")]
         windmill_common::workspaces::invalidate_billing_workspace_cache(child);
     }
@@ -829,28 +839,19 @@ pub(crate) async fn delete_workspace(
     // Deleting an attached dev workspace removes the parent prod's dev_workspace_lock (below), so it
     // must be a prod-admin action, not just the dev's own owner (dev ownership can diverge from
     // prod's) — mirrors detach_dev_workspace, which is prod-admin gated.
-    if let Some(prod) = sqlx::query_scalar!(
-        "SELECT parent_workspace_id FROM workspace WHERE id = $1 AND is_dev_workspace",
-        &w_id
-    )
-    .fetch_optional(&mut *tx)
-    .await?
-    .flatten()
-    {
-        let is_prod_admin = sqlx::query_scalar!(
-            "SELECT is_admin FROM usr WHERE workspace_id = $1 AND email = $2",
-            &prod,
-            &authed.email
-        )
-        .fetch_optional(&mut *tx)
-        .await?
-        .unwrap_or(false);
-        if !is_prod_admin && !is_super_admin_email(&db, &authed.email).await? {
-            return Err(Error::PermissionDenied(format!(
-                "Deleting dev workspace '{w_id}' requires being an admin of its parent prod workspace '{prod}' (or a superadmin)"
-            )));
-        }
-    }
+    require_prod_admin_for_dev_workspace(&db, &authed, &w_id).await?;
+
+    // Snapshot the fork's ducklake namespaces + RESOLVE their connection material NOW — the
+    // registry rows and the fork's `$res:` resources both CASCADE with the workspace row —
+    // but the destructive cleanup itself runs only after the commit below: a delete that
+    // fails mid-way must never leave a live workspace with its fork data destroyed and no
+    // registry row to retry from. Read-only: nothing is dropped here.
+    let fork_ducklake_cleanups = prepare_fork_ducklake_cleanups(&db, &w_id, None)
+        .await
+        .unwrap_or_else(|e| {
+            tracing::warn!("deleting workspace {w_id}: preparing ducklake cleanup: {e:#}");
+            vec![]
+        });
 
     sqlx::query!("DELETE FROM ai_agent_memory WHERE workspace_id = $1", &w_id)
         .execute(&mut *tx)
@@ -1086,6 +1087,17 @@ pub(crate) async fn delete_workspace(
     .await?;
     tx.commit().await?;
 
+    // Physical ducklake-namespace cleanup, post-commit, from the pre-read snapshot: fork
+    // namespaces are deterministic from (id, lake), so an orphan would silently REATTACH to a
+    // recreated identical fork id. Runs inline so every delete path is covered (CLI,
+    // force-delete dialog, direct API — not just the sidebar flow, which still calls the
+    // endpoint first for per-lake error toasts; the rerun is an idempotent no-op). Best
+    // effort: failures are logged — the workspace row is already gone, and broken storage
+    // credentials must not have made it undeletable.
+    for e in cleanup_fork_ducklake_namespaces(&db, &w_id, fork_ducklake_cleanups).await {
+        tracing::warn!("deleted workspace {w_id}: ducklake namespace cleanup: {}", e.msg);
+    }
+
     if let Some(parent) = dev_lock_parent {
         windmill_common::workspaces::invalidate_protection_rules_cache(&parent);
     }
@@ -1099,12 +1111,26 @@ pub(crate) async fn delete_workspace(
     // billing TTL.
     for id in std::iter::once(&w_id).chain(orphaned_children.iter()) {
         windmill_queue::tags::invalidate_fork_parent_cache(id);
+        windmill_common::workspaces::invalidate_fork_ancestor_chain_cache(id);
         #[cfg(feature = "cloud")]
         {
             windmill_common::workspaces::invalidate_billing_workspace_cache(id);
             windmill_common::workspaces::invalidate_team_plan_cache(id);
         }
     }
+    // Deeper descendants' cached ancestor CHAINS still contain the deleted workspace; unlike
+    // the sibling caches (which self-heal harmlessly via TTL), a stale chain makes the
+    // ducklake resolver drop all defer ancestors (all-or-nothing on broken links) — a visible
+    // defer/chips outage for up to the TTL. Anchor at the orphaned children: the deleted row
+    // is gone, but their subtrees are intact.
+    for child in orphaned_children.iter() {
+        for id in windmill_common::workspaces::list_fork_descendants(&db, child)
+            .await
+            .unwrap_or_default()
+        {
+            windmill_common::workspaces::invalidate_fork_ancestor_chain_cache(&id);
+        }
+    }
 
     Ok(format!("Deleted workspace {}", &w_id))
 }
@@ -1266,6 +1292,538 @@ pub async fn drop_forked_datatable_databases(
     Ok(Json(errors))
 }
 
+/// Drop this fork workspace's ducklake namespaces: the `wm_fork_*` metadata schema in each
+/// lake's catalog database, plus (best effort) the fork's `__wm_forks/<wid>/…` data files in
+/// the workspace storage. Driven by the `fork_ducklake_namespace` registry written at first
+/// fork attach, so it works even after settings drift. Returns errors per lake that failed;
+/// the registry row is only deleted once both cleanups succeeded, so a retry resumes.
+/// Same permission as delete_workspace: fork owner or super admin. `delete_workspace` also
+/// runs this inline (the UI calls this endpoint first for error visibility; the inline run
+/// covers every other delete path — CLI, force-delete dialogs, direct API — whose row delete
+/// would otherwise CASCADE the registry away while orphaning the physical namespaces, which a
+/// recreated identical fork id would then silently reattach).
+pub async fn drop_forked_ducklake_namespaces(
+    authed: ApiAuthed,
+    Extension(db): Extension<DB>,
+    Path(w_id): Path<String>,
+) -> Result<Json<Vec<String>>> {
+    let is_fork = workspace_is_fork(&db, &w_id).await?;
+    let mut tx = db.begin().await?;
+    if !(is_fork && is_workspace_owner(&authed, &w_id, &mut tx).await?)
+        && !is_super_admin_email(&db, &authed.email).await?
+    {
+        return Err(Error::PermissionDenied(
+            "Dropping forked ducklake namespaces requires being the fork's owner or a superadmin"
+                .to_string(),
+        ));
+    }
+    tx.commit().await?;
+    require_prod_admin_for_dev_workspace(&db, &authed, &w_id).await?;
+    Ok(Json(
+        drop_forked_ducklake_namespaces_impl(&db, &w_id, None)
+            .await?
+            .into_iter()
+            .map(|i| i.msg)
+            .collect(),
+    ))
+}
+
+/// The cleanup itself, shared by the endpoint and the post-commit `delete_workspace` run. No
+/// authorization of its own — callers gate.
+pub(crate) async fn drop_forked_ducklake_namespaces_impl(
+    db: &DB,
+    w_id: &str,
+    res_fallback_w_id: Option<&str>,
+) -> Result<Vec<ForkDucklakeCleanupIssue>> {
+    let prepared = prepare_fork_ducklake_cleanups(db, w_id, res_fallback_w_id).await?;
+    Ok(cleanup_fork_ducklake_namespaces(db, w_id, prepared).await)
+}
+
+struct ForkDucklakeNamespaceRow {
+    ducklake_name: String,
+    metadata_schema: String,
+    catalog: String,
+    storage: String,
+    storage_ref: String,
+    schema_dropped: bool,
+    data_path: String,
+}
+
+/// A namespace row plus its RESOLVED connection material. `delete_workspace` prepares these
+/// BEFORE its transaction commits — the registry rows AND the fork's `$res:` resources both
+/// disappear with the workspace row — and runs the destructive cleanup only AFTER the commit:
+/// a delete that fails mid-way must never leave a live workspace with its fork data
+/// destroyed, and a committed delete must still be able to reach catalogs/storages whose
+/// credentials lived in the (now gone) fork resources. Per-row resolution failures are
+/// carried as strings so they surface with the other cleanup errors.
+pub(crate) struct PreparedForkDucklakeCleanup {
+    ns: ForkDucklakeNamespaceRow,
+    catalog_pg: std::result::Result<windmill_common::PgDatabase, String>,
+    store: std::result::Result<(windmill_types::s3::LargeFileStorage, serde_json::Value), String>,
+}
+
+/// One row per (lake, catalog, storage, data path) ever attached — settings drift adds rows,
+/// so every location the fork wrote gets cleaned, not just the first. Read-only: resolves
+/// credentials but destroys nothing.
+/// `res_fallback_w_id`: second workspace to resolve `$res:` catalog/storage paths against
+/// when the row's own workspace no longer has them — the retry path runs AFTER the fork and
+/// its resources were deleted. Fork resources are clones of a parent's, so the workspace
+/// being forked again is the natural donor. None on live-workspace paths.
+pub(crate) async fn prepare_fork_ducklake_cleanups(
+    db: &DB,
+    w_id: &str,
+    res_fallback_w_id: Option<&str>,
+) -> Result<Vec<PreparedForkDucklakeCleanup>> {
+    let rows = sqlx::query_as!(
+        ForkDucklakeNamespaceRow,
+        r#"SELECT ducklake_name AS "ducklake_name!", metadata_schema AS "metadata_schema!",
+                  catalog AS "catalog!", storage AS "storage!",
+                  storage_ref AS "storage_ref!", data_path AS "data_path!",
+                  schema_dropped AS "schema_dropped!"
+             FROM fork_ducklake_namespace WHERE workspace_id = $1"#,
+        w_id
+    )
+    .fetch_all(db)
+    .await?;
+    let mut prepared = Vec::with_capacity(rows.len());
+    for ns in rows {
+        let catalog_pg = if ns.schema_dropped {
+            // Schema phase already done — the retry needs no catalog connection at all
+            // (its credentials may be unresolvable for good with the fork's resources gone).
+            Err("unused: metadata schema already dropped".to_string())
+        } else {
+            resolve_fork_catalog_pg(db, w_id, res_fallback_w_id, &ns.ducklake_name, &ns.catalog)
+                .await
+                .map_err(|e| e.to_string())
+        };
+        let storage = Some(ns.storage.as_str()).filter(|s| !s.is_empty());
+        let store = resolve_fork_storage(db, w_id, res_fallback_w_id, storage, &ns.storage_ref)
+            .await
+            .map_err(|e| e.to_string());
+        prepared.push(PreparedForkDucklakeCleanup { ns, catalog_pg, store });
+    }
+    Ok(prepared)
+}
+
+/// Drop the prepared namespaces' metadata schemas + data files, deleting each registry row
+/// only after both succeed (a no-op when the row already cascaded away with the workspace).
+/// Returns per-namespace error strings; never fails as a whole.
+/// One failed step of a fork ducklake cleanup. `blocking` = the metadata schema (or its
+/// guards) failed, so the namespace is still attachable and a same-id fork must NOT be
+/// created. Non-blocking = the schema is gone and only data files (or the registry-row
+/// delete) failed — inert storage leftovers, tracked by the surviving row and swept by the
+/// next successful cleanup of the same prefix.
+pub(crate) struct ForkDucklakeCleanupIssue {
+    pub(crate) blocking: bool,
+    pub(crate) msg: String,
+}
+
+pub(crate) async fn cleanup_fork_ducklake_namespaces(
+    db: &DB,
+    w_id: &str,
+    prepared: Vec<PreparedForkDucklakeCleanup>,
+) -> Vec<ForkDucklakeCleanupIssue> {
+    // The registration once-cache must not outlive the rows it mirrors: a same-id fork
+    // recreated within the TTL would otherwise skip re-registration, and ITS eventual
+    // deletion would find no rows — orphaning the deterministic namespace for the next
+    // same-id fork to silently reattach.
+    windmill_common::workspaces::invalidate_fork_ducklake_registration_cache(w_id);
+    let mut errors: Vec<ForkDucklakeCleanupIssue> = Vec::new();
+    for PreparedForkDucklakeCleanup { ns, catalog_pg, store } in prepared {
+        // Hard guards mirroring the forked-datatable drop: never touch a schema outside the
+        // fork prefix, never delete outside the fork data dir — even if a registry row was
+        // somehow tampered with.
+        if !ns
+            .metadata_schema
+            .starts_with(windmill_common::workspaces::FORK_DUCKLAKE_SCHEMA_PREFIX)
+        {
+            errors.push(ForkDucklakeCleanupIssue {
+                blocking: true,
+                msg: format!(
+                    "Refusing to drop schema '{}' for ducklake://{}: name does not start with '{}'",
+                    ns.metadata_schema,
+                    ns.ducklake_name,
+                    windmill_common::workspaces::FORK_DUCKLAKE_SCHEMA_PREFIX
+                ),
+            });
+            continue;
+        }
+        // The fork's directory segment, NOT the raw workspace id: ids are only
+        // git-branch-safe and may contain `/`, which raw would let one fork's prefix nest
+        // inside a sibling's (`wm-fork-a/b` under `wm-fork-a`) and be swept by its cleanup.
+        let expected_prefix = format!(
+            "{}/{}/",
+            windmill_common::workspaces::FORK_DUCKLAKE_DATA_DIR,
+            windmill_common::workspaces::fork_data_dir_segment(w_id)
+        );
+        if !format!("{}/", ns.data_path.trim_end_matches('/')).starts_with(&expected_prefix) {
+            errors.push(ForkDucklakeCleanupIssue {
+                blocking: true,
+                msg: format!(
+                    "Refusing to delete data path '{}' for ducklake://{}: not under '{}'",
+                    ns.data_path, ns.ducklake_name, expected_prefix
+                ),
+            });
+            continue;
+        }
+
+        let drop_res = if ns.schema_dropped {
+            // Recorded as already dropped by a prior partial cleanup; skipping means no
+            // catalog credentials are needed. Registration resets the flag when a live fork
+            // re-attaches (recreating the schema).
+            Ok(())
+        } else {
+            match catalog_pg {
+                Ok(pg) => drop_fork_ducklake_metadata_schema(db, pg, &ns.metadata_schema).await,
+                Err(e) => Err(Error::internal_err(e)),
+            }
+        };
+        if let Err(e) = drop_res {
+            errors.push(ForkDucklakeCleanupIssue {
+                blocking: true,
+                msg: format!(
+                    "Could not drop metadata schema '{}' for ducklake://{}: {e}",
+                    ns.metadata_schema, ns.ducklake_name
+                ),
+            });
+            continue;
+        }
+        let delete_res = match store {
+            Ok((lfs, resource_value)) => {
+                delete_fork_ducklake_data(lfs, resource_value, &ns.data_path).await
+            }
+            Err(e) => Err(Error::internal_err(e)),
+        };
+        if let Err(e) = delete_res {
+            // Record the completed schema phase so retries never need catalog credentials
+            // again (best effort — a failed update just means the next retry re-drops an
+            // absent schema, which requires the catalog to be reachable).
+            sqlx::query!(
+                "UPDATE fork_ducklake_namespace SET schema_dropped = true
+                 WHERE workspace_id = $1 AND ducklake_name = $2 AND catalog = $3
+                   AND storage = $4 AND storage_ref = $5 AND data_path = $6",
+                w_id,
+                &ns.ducklake_name,
+                &ns.catalog,
+                &ns.storage,
+                &ns.storage_ref,
+                &ns.data_path,
+            )
+            .execute(db)
+            .await
+            .ok();
+            errors.push(ForkDucklakeCleanupIssue {
+                blocking: false,
+                msg: format!(
+                    "Dropped metadata schema but could not delete data files under '{}' for ducklake://{}: {e}",
+                    ns.data_path, ns.ducklake_name
+                ),
+            });
+            continue;
+        }
+        sqlx::query!(
+            "DELETE FROM fork_ducklake_namespace
+             WHERE workspace_id = $1 AND ducklake_name = $2 AND catalog = $3
+               AND storage = $4 AND storage_ref = $5 AND data_path = $6",
+            w_id,
+            &ns.ducklake_name,
+            &ns.catalog,
+            &ns.storage,
+            &ns.storage_ref,
+            &ns.data_path,
+        )
+        .execute(db)
+        .await
+        .map_err(|e| {
+            errors.push(ForkDucklakeCleanupIssue {
+                blocking: false,
+                msg: format!(
+                    "Cleaned ducklake://{} but could not delete its registry row: {e}",
+                    ns.ducklake_name
+                ),
+            })
+        })
+        .ok();
+    }
+    errors
+}
+
+/// Drop the fork's metadata schema in the catalog database recorded by the registry row —
+/// NOT whatever the fork's settings point at by now: a drifted catalog resource must not make
+/// cleanup drop a schema in the wrong database while orphaning the real one. The pg schema
+/// holds only DuckLake metadata tables (auto-created at first fork attach), so a plain
+/// `DROP SCHEMA … CASCADE` on the catalog connection removes the whole fork namespace.
+/// Resolve the catalog connection recorded in the registry row (read-only): instance
+/// identities rebuild instance creds; resource identities resolve their `$res:` in the fork's
+/// workspace — which is why this must run BEFORE the workspace (and its resources) are
+/// deleted. Mysql never registers (rejected at resolution).
+async fn resolve_fork_catalog_pg(
+    db: &DB,
+    w_id: &str,
+    res_fallback_w_id: Option<&str>,
+    ducklake_name: &str,
+    catalog: &str,
+) -> Result<windmill_common::PgDatabase> {
+    let (resource_type, resource_path) = catalog.split_once(':').ok_or_else(|| {
+        Error::internal_err(format!(
+            "ducklake://{ducklake_name}: malformed registry catalog identity `{catalog}`"
+        ))
+    })?;
+    let catalog_resource = if resource_type == "instance" {
+        let mut pg_creds = windmill_common::PgDatabase::parse_uri(
+            &windmill_common::get_database_url().await?.as_str().await,
+        )?;
+        pg_creds.dbname = resource_path.to_string();
+        pg_creds.user = Some("custom_instance_user".to_string());
+        pg_creds.password =
+            Some(windmill_common::utils::get_custom_pg_instance_password(db).await?);
+        serde_json::to_value(&pg_creds)
+            .map_err(|e| Error::internal_err(format!("serializing pg creds: {e}")))?
+    } else {
+        resolve_res_with_fallback(db, w_id, res_fallback_w_id, resource_path).await?
+    };
+    serde_json::from_value(catalog_resource).map_err(|e| {
+        Error::internal_err(format!(
+            "ducklake://{ducklake_name}: catalog resource is not a postgres database: {e}"
+        ))
+    })
+}
+
+async fn drop_fork_ducklake_metadata_schema(
+    db: &DB,
+    pg: windmill_common::PgDatabase,
+    metadata_schema: &str,
+) -> Result<()> {
+    let (client, connection) = pg.connect(Some(db)).await?;
+    let join_handle = tokio::spawn(async move { connection.await });
+    let res = client
+        .execute(
+            &format!(
+                "DROP SCHEMA IF EXISTS \"{}\" CASCADE",
+                metadata_schema.replace('"', "\"\"")
+            ),
+            &[],
+        )
+        .await;
+    drop(client);
+    let _ = join_handle.await;
+    res.map_err(|e| Error::internal_err(format!("{e:#}")))?;
+    Ok(())
+}
+
+/// Resolve the storage identified by the registry's `storage_ref` (read-only) — the storage
+/// that was active when the fork's data was WRITTEN, not whatever the logical storage name
+/// points at by deletion time (a repointed storage must not orphan the original fork data,
+/// nor get a colliding prefix deleted). `storage_ref` = '' falls back to resolving the
+/// logical name against current settings (registration couldn't identify the storage — best
+/// effort). Resolves the `$res:` in the fork's workspace, which is why this must run BEFORE
+/// the workspace is deleted.
+async fn resolve_fork_storage(
+    db: &DB,
+    w_id: &str,
+    res_fallback_w_id: Option<&str>,
+    storage: Option<&str>,
+    storage_ref: &str,
+) -> Result<(windmill_types::s3::LargeFileStorage, serde_json::Value)> {
+    use windmill_types::s3::{
+        AzureBlobStorage, FilesystemStorage, GoogleCloudStorage, LargeFileStorage, S3Storage,
+    };
+
+    let lfs: LargeFileStorage = if let Some((typ, path)) = storage_ref.split_once(':') {
+        // Rebuild the LFS entry from the registered identity; only the variant (which
+        // resource parser applies) and the path matter to `lfs_to_object_store_resource`.
+        let s3 = |p: &str| S3Storage {
+            s3_resource_path: p.to_string(),
+            public_resource: None,
+            advanced_permissions: None,
+        };
+        match typ {
+            "S3Storage" => LargeFileStorage::S3Storage(s3(path)),
+            "S3AwsOidc" => LargeFileStorage::S3AwsOidc(s3(path)),
+            "AzureBlobStorage" => LargeFileStorage::AzureBlobStorage(AzureBlobStorage {
+                azure_blob_resource_path: path.to_string(),
+                public_resource: None,
+                advanced_permissions: None,
+            }),
+            "AzureWorkloadIdentity" => LargeFileStorage::AzureWorkloadIdentity(AzureBlobStorage {
+                azure_blob_resource_path: path.to_string(),
+                public_resource: None,
+                advanced_permissions: None,
+            }),
+            "GoogleCloudStorage" => LargeFileStorage::GoogleCloudStorage(GoogleCloudStorage {
+                gcs_resource_path: path.to_string(),
+                public_resource: None,
+                advanced_permissions: None,
+            }),
+            "FilesystemStorage" => LargeFileStorage::FilesystemStorage(FilesystemStorage {
+                root_path: path.to_string(),
+                public_resource: None,
+                advanced_permissions: None,
+            }),
+            other => {
+                return Err(Error::internal_err(format!(
+                    "unknown registered storage type `{other}`"
+                )))
+            }
+        }
+    } else {
+        let lfs_json = sqlx::query_scalar!(
+            "SELECT large_file_storage FROM workspace_settings WHERE workspace_id = $1",
+            w_id
+        )
+        .fetch_optional(db)
+        .await?
+        .flatten()
+        .ok_or_else(|| Error::BadRequest("workspace has no storage configured".to_string()))?;
+        // Named storages live under `secondary_storage`; `None`/`_default_` is the primary.
+        match storage.filter(|s| *s != "_default_") {
+            None => serde_json::from_value(lfs_json.clone())
+                .map_err(|e| Error::internal_err(format!("parsing large_file_storage: {e}")))?,
+            Some(name) => serde_json::from_value(
+                lfs_json
+                    .get("secondary_storage")
+                    .and_then(|s| s.get(name))
+                    .cloned()
+                    .ok_or_else(|| {
+                        Error::BadRequest(format!("workspace has no storage named {name}"))
+                    })?,
+            )
+            .map_err(|e| Error::internal_err(format!("parsing storage {name}: {e}")))?,
+        }
+    };
+    // Filesystem storage stores a direct path (`lfs_to_object_store_resource` ignores the
+    // resource value); everything else references a resource whose stored path may or may not
+    // carry the `$res:` prefix — same normalization as `get_workspace_s3_resource_from_lfs`.
+    let resource_value = if matches!(lfs, LargeFileStorage::FilesystemStorage(_)) {
+        serde_json::Value::Null
+    } else {
+        let path = lfs.get_s3_resource_path();
+        let path = path.strip_prefix("$res:").unwrap_or(path);
+        resolve_res_with_fallback(db, w_id, res_fallback_w_id, path).await?
+    };
+    Ok((lfs, resource_value))
+}
+
+/// Resolve a `$res:` path in `w_id`, falling back to the same path in `res_fallback_w_id`
+/// when the first lookup fails — retry-path cleanups run after the fork workspace (and its
+/// cloned resource rows) were deleted, and the fork's resources were clones of a parent's.
+async fn resolve_res_with_fallback(
+    db: &DB,
+    w_id: &str,
+    res_fallback_w_id: Option<&str>,
+    resource_path: &str,
+) -> Result<serde_json::Value> {
+    let res = windmill_common::workspaces::transform_json_value_unchecked(
+        &serde_json::Value::String(format!("$res:{resource_path}")),
+        w_id,
+        db,
+    )
+    .await;
+    match (res, res_fallback_w_id) {
+        (Ok(v), _) => Ok(v),
+        (Err(e), None) => Err(e),
+        (Err(_), Some(fb)) => {
+            windmill_common::workspaces::transform_json_value_unchecked(
+                &serde_json::Value::String(format!("$res:{resource_path}")),
+                fb,
+                db,
+            )
+            .await
+        }
+    }
+}
+
+/// Delete every object under the fork's data prefix in the pre-resolved storage. Requires the
+/// `parquet` (object store) feature; without it the metadata schema is still dropped and the
+/// unreachable data files are left for manual cleanup.
+#[cfg(feature = "parquet")]
+async fn delete_fork_ducklake_data(
+    lfs: windmill_types::s3::LargeFileStorage,
+    resource_value: serde_json::Value,
+    data_path: &str,
+) -> Result<()> {
+    use futures::{StreamExt, TryStreamExt};
+
+    let store = windmill_object_store::build_object_store_client(
+        &windmill_object_store::lfs_to_object_store_resource(&lfs, resource_value)?,
+    )
+    .await?;
+
+    let prefix = windmill_object_store::object_store_reexports::Path::from(
+        data_path.trim_matches('/').to_string(),
+    );
+    let locations: Vec<_> = store
+        .list(Some(&prefix))
+        .map_ok(|m| m.location)
+        .try_collect()
+        .await
+        .map_err(windmill_object_store::object_store_error_to_error)?;
+    // The object_store crate evaluates list prefixes on a path-SEGMENT basis (`a/b` does not
+    // match `a/bc/…`), so sibling fork segments sharing a string prefix are already excluded.
+    // Filter anyway — deletion must not depend on a listing implementation detail.
+    let boundary = format!("{}/", prefix.as_ref());
+    let locations: Vec<_> = locations
+        .into_iter()
+        .filter(|l| l.as_ref().starts_with(&boundary))
+        .collect();
+    // 1000-object chunks: S3 DeleteObjects caps a batch at 1000 keys.
+    for chunk in locations.chunks(1000) {
+        store
+            .delete_stream(futures::stream::iter(chunk.iter().cloned().map(Ok)).boxed())
+            .try_collect::<Vec<_>>()
+            .await
+            .map_err(windmill_object_store::object_store_error_to_error)?;
+    }
+    Ok(())
+}
+
+#[cfg(not(feature = "parquet"))]
+async fn delete_fork_ducklake_data(
+    _lfs: windmill_types::s3::LargeFileStorage,
+    _resource_value: serde_json::Value,
+    _data_path: &str,
+) -> Result<()> {
+    Err(Error::internal_err(
+        "object storage support (parquet feature) is not compiled in".to_string(),
+    ))
+}
+
+/// Destroying an ATTACHED dev workspace (or its data environments) must be a prod-admin
+/// action, not just the dev's own owner (dev ownership can diverge from prod's) — mirrors
+/// detach_dev_workspace. Shared by `delete_workspace` and `drop_forked_ducklake_namespaces`
+/// so the two gates cannot drift: the sidebar calls the drop endpoint BEFORE deleteWorkspace,
+/// and a weaker gate on the drop would let a non-prod-admin dev owner destroy the live dev's
+/// materializations and then have the deletion itself rejected. No-op for non-dev workspaces.
+async fn require_prod_admin_for_dev_workspace(
+    db: &DB,
+    authed: &ApiAuthed,
+    w_id: &str,
+) -> Result<()> {
+    if let Some(prod) = sqlx::query_scalar!(
+        "SELECT parent_workspace_id FROM workspace WHERE id = $1 AND is_dev_workspace",
+        w_id
+    )
+    .fetch_optional(db)
+    .await?
+    .flatten()
+    {
+        let is_prod_admin = sqlx::query_scalar!(
+            "SELECT is_admin FROM usr WHERE workspace_id = $1 AND email = $2",
+            &prod,
+            &authed.email
+        )
+        .fetch_optional(db)
+        .await?
+        .unwrap_or(false);
+        if !is_prod_admin && !is_super_admin_email(db, &authed.email).await? {
+            return Err(Error::PermissionDenied(format!(
+                "Destroying dev workspace '{w_id}' or its data requires being an admin of its parent prod workspace '{prod}' (or a superadmin)"
+            )));
+        }
+    }
+    Ok(())
+}
+
 async fn is_workspace_owner(
     authed: &ApiAuthed,
     w_id: &str,
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index fe7edb26b0..0c080b0a2a 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -4666,6 +4666,24 @@ paths:
                 items:
                   type: string
 
+  /w/{workspace}/workspaces/drop_forked_ducklake_namespaces:
+    post:
+      summary: drop this fork workspace's ducklake namespaces (catalog metadata schemas + data files)
+      operationId: dropForkedDucklakeNamespaces
+      tags:
+        - workspace
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+      responses:
+        "200":
+          description: list of errors (empty if all succeeded)
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  type: string
+
   /w/{workspace}/workspaces/import_pg_database:
     post:
       summary: import a PostgreSQL database from source to target via pg_dump
@@ -21464,6 +21482,10 @@ paths:
                           $ref: "#/components/schemas/AssetKind"
                         path:
                           type: string
+                        fork_materialization:
+                          type: string
+                          enum: [fork, deferred]
+                          description: Fork workspaces only — 'fork' when this ducklake asset was materialized in the fork itself, 'deferred' when reads fall back to the parent workspace's current table via a defer view. Omitted otherwise.
                   runnables:
                     type: array
                     items:
@@ -28178,6 +28200,11 @@ components:
               new_dbname:
                 type: string
                 description: "New database name for the fork"
+        shared_ducklakes:
+          type: array
+          items:
+            type: string
+          description: "Lake names the fork SHARES with the parent (reads and writes the parent's lake directly). Every lake not listed gets the default isolated fork namespace with read-defer to the parent."
         is_dev_workspace:
           type: boolean
           description: "Create the fork as a persistent dev workspace (id not required to carry the wm-fork- prefix; at most one per parent)"
@@ -28917,6 +28944,12 @@ components:
                   - path
               extra_args:
                 type: string
+              fork_behavior:
+                type: string
+                enum: [isolated, shared]
+                description:
+                  Fork workspaces only - how this lake behaves in the fork, stamped at fork
+                  creation. Absent = isolated (fork-scoped namespace + read-defer to parent).
               maintenance:
                 type: object
                 description:
diff --git a/backend/windmill-common/src/materialization.rs b/backend/windmill-common/src/materialization.rs
index 8d9e31899f..236a71c855 100644
--- a/backend/windmill-common/src/materialization.rs
+++ b/backend/windmill-common/src/materialization.rs
@@ -94,7 +94,11 @@ pub async fn record_materialization<'e>(
          VALUES ($1, $2, $3, $4, $5, $6, $7, $8, now(), $9)
          ON CONFLICT (workspace_id, asset_kind, asset_path, partition)
          DO UPDATE SET status = EXCLUDED.status,
-                       snapshot_id = EXCLUDED.snapshot_id,
+                       -- A failed run records no snapshot, but must not erase the last
+                       -- committed one: a physical table from an earlier commit (or from a
+                       -- committed write whose data tests then failed) still exists, and
+                       -- fork defer/graph state keys on that evidence.
+                       snapshot_id = COALESCE(EXCLUDED.snapshot_id, materialized_partition.snapshot_id),
                        row_count = EXCLUDED.row_count,
                        job_id = EXCLUDED.job_id,
                        materialized_at = now(),
@@ -255,6 +259,98 @@ pub async fn record_asset_schema(
     Ok(true)
 }
 
+/// One table a fork workspace should read from an ancestor through a defer view.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ForkDeferTable {
+    /// Lake-internal table name: the `asset_path` minus its `<lake>/` prefix (may itself be
+    /// `schema.table`).
+    pub table: String,
+    /// The owning ancestor's latest captured schema carries the SCD2 marker column
+    /// (`is_current`), so that lake also holds a managed `<table>_current` companion view
+    /// that consumers read — defer it alongside the table.
+    #[serde(default)]
+    pub with_current_view: bool,
+    /// Index into `DucklakeForkDefer.ancestors` (nearest-first) of the NEAREST ancestor that
+    /// materialized this table — the defer view must target that ancestor's namespace. In a
+    /// `fork → parent → root` chain where only root materialized a table, the parent has no
+    /// physical copy (it defers too), so a view over the parent would not bind. Defaults to 0
+    /// (the direct parent) for wire compatibility with agents that predate the field.
+    #[serde(default)]
+    pub ancestor_idx: u32,
+}
+
+/// Tables of lake `lake_name` materialized somewhere in the fork's ancestor chain
+/// (nearest-first) but not (yet) in the fork — the fork's read-defer set, each mapped to the
+/// nearest ancestor that owns a physical copy. Only `Materialized` rows count on every side: a
+/// deferred table must physically exist in the targeted ancestor (defer views bind at CREATE
+/// and would otherwise fail the whole job), and any successful fork materialization makes the
+/// fork's own table authoritative.
+///
+/// **Authorization:** performs no access control; trusted server-side callers only. It reads
+/// ancestor workspaces' rows on behalf of a fork — acceptable because defer itself exposes
+/// the ancestors' table contents to fork members.
+pub async fn list_fork_defer_tables<'e>(
+    executor: impl PgExecutor<'e>,
+    ancestor_workspace_ids: &[String],
+    fork_workspace_id: &str,
+    lake_name: &str,
+) -> Result<Vec<ForkDeferTable>> {
+    let rows = sqlx::query!(
+        r#"
+        WITH ancestor AS (
+            SELECT wid, ord FROM unnest($1::text[]) WITH ORDINALITY AS a(wid, ord)
+        ), anc_mat AS (
+            -- Per table, the nearest ancestor (lowest ord) that materialized it.
+            SELECT DISTINCT ON (mp.asset_path) mp.asset_path, a.wid, a.ord
+            FROM materialized_partition mp
+            JOIN ancestor a ON a.wid = mp.workspace_id
+            WHERE mp.asset_kind = 'ducklake' AND mp.status = 'materialized'
+              AND split_part(mp.asset_path, '/', 1) = $3 AND mp.asset_path LIKE '%/%'
+            ORDER BY mp.asset_path, a.ord
+        ), fork_mat AS (
+            -- Fork-OWNED assets: anything whose physical table exists in the fork
+            -- namespace, not just clean materializations. A committed write whose data
+            -- tests failed afterwards records status='failed' WITH a snapshot — its table
+            -- is real, and a defer view emitted over it would silently yield to it
+            -- (CREATE VIEW IF NOT EXISTS) while claiming the read defers to the parent.
+            SELECT DISTINCT asset_path FROM materialized_partition
+            WHERE workspace_id = $2 AND asset_kind = 'ducklake'
+              AND (status = 'materialized' OR snapshot_id IS NOT NULL)
+        ), latest_schema AS (
+            SELECT DISTINCT ON (workspace_id, asset_path) workspace_id, asset_path, columns
+            FROM materialized_asset_schema
+            WHERE workspace_id = ANY($1) AND asset_kind = 'ducklake'
+            ORDER BY workspace_id, asset_path, version DESC
+        )
+        SELECT am.asset_path AS "asset_path!",
+               am.ord AS "ord!",
+               COALESCE(EXISTS (
+                   SELECT 1 FROM jsonb_array_elements(ls.columns) e
+                   WHERE e->>'name' = 'is_current'
+               ), false) AS "has_current!"
+        FROM anc_mat am
+        LEFT JOIN latest_schema ls
+               ON ls.asset_path = am.asset_path AND ls.workspace_id = am.wid
+        WHERE am.asset_path NOT IN (SELECT asset_path FROM fork_mat)
+        ORDER BY am.asset_path
+        "#,
+        ancestor_workspace_ids,
+        fork_workspace_id,
+        lake_name,
+    )
+    .fetch_all(executor)
+    .await?;
+    Ok(rows
+        .into_iter()
+        .map(|r| ForkDeferTable {
+            table: r.asset_path[lake_name.len() + 1..].to_string(),
+            with_current_view: r.has_current,
+            // WITH ORDINALITY is 1-based; ancestors vec is 0-based.
+            ancestor_idx: (r.ord - 1).max(0) as u32,
+        })
+        .collect())
+}
+
 /// All captured schema versions for one asset, newest version first.
 ///
 /// **Authorization:** performs no access control (mirrors
diff --git a/backend/windmill-common/src/workspaces.rs b/backend/windmill-common/src/workspaces.rs
index 293490e434..14bc5fc344 100644
--- a/backend/windmill-common/src/workspaces.rs
+++ b/backend/windmill-common/src/workspaces.rs
@@ -842,10 +842,27 @@ pub struct Ducklake {
     pub storage: DucklakeStorage,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub extra_args: Option<String>,
+    /// How this lake behaves when the workspace is a fork/dev workspace. Only meaningful in a
+    /// fork's own settings; stamped at fork creation from the user's per-lake choice. Absent =
+    /// `Isolated` — the safe default, so forks created before this field existed (and API
+    /// callers that omit it) never write the parent's lake.
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub fork_behavior: Option<DucklakeForkBehavior>,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub maintenance: Option<DucklakeMaintenance>,
 }
 
+/// Per-lake fork data-environment choice, made at fork creation.
+#[derive(Deserialize, Serialize, Debug, Clone, Copy, PartialEq)]
+#[serde(rename_all = "snake_case")]
+pub enum DucklakeForkBehavior {
+    /// Fork-scoped namespace + read-defer to the parent (default).
+    Isolated,
+    /// The fork reads AND WRITES the parent's lake directly — explicit opt-out of isolation
+    /// (e.g. a fork meant to run prod-equivalent backfills).
+    Shared,
+}
+
 /// Scheduled maintenance for a ducklake (enterprise): snapshot expiry,
 /// adjacent-file compaction and orphaned-file cleanup, run as a managed
 /// per-lake schedule. Not mirrored in `instance_config::Ducklake`:
@@ -949,6 +966,213 @@ pub struct DucklakeWithConnData {
     pub storage: DucklakeStorage,
     #[serde(skip_serializing_if = "Option::is_none")]
     pub extra_args: Option<String>,
+    /// Present when the resolved workspace is a fork/dev workspace. Carries the read-defer
+    /// context (ancestor namespaces + tables to expose as views over the direct parent). The
+    /// fork *write* redirect is folded into `storage.path`/`extra_args` above, so an agent
+    /// worker that predates this field still writes the fork namespace (it only misses the
+    /// defer views).
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub fork_defer: Option<DucklakeForkDefer>,
+}
+
+/// Read-defer context for a fork workspace's ducklake: which ancestor namespaces to attach
+/// read-only, and which tables to expose as views over the direct parent because the fork has
+/// not materialized them yet. `ancestors` is empty when defer is unavailable (an ancestor no
+/// longer defines the lake) — the fork namespace still isolates writes in that case.
+#[derive(Deserialize, Serialize)]
+pub struct DucklakeForkDefer {
+    /// Nearest-first (direct parent … root), each resolved from that workspace's own settings.
+    pub ancestors: Vec<DucklakeAncestorAttach>,
+    pub defer_tables: Vec<crate::materialization::ForkDeferTable>,
+    /// Views currently live in the fork namespace (read from the catalog's `ducklake_view` at
+    /// resolution time, lake-internal names). The worker's view→table transition (DROP VIEW
+    /// before a managed materialize) keys on THIS, not on recorded materialization status:
+    /// after a failed run the status can't distinguish a defer view from a real table, and
+    /// `DROP VIEW` against a table (or `CREATE TABLE` against a view) errors — either guess
+    /// would wedge the asset until manual repair.
+    #[serde(default, skip_serializing_if = "Vec::is_empty")]
+    pub fork_views: Vec<String>,
+}
+
+/// Connection data for one ancestor namespace of a fork's ducklake.
+#[derive(Deserialize, Serialize)]
+pub struct DucklakeAncestorAttach {
+    pub workspace_id: String,
+    /// DuckDB catalog alias this namespace must be attached under. Persisted defer-view SQL
+    /// references it, so it is a pure function of (lake name, ancestor workspace id) and every
+    /// session reading those views attaches the ancestor under this exact alias.
+    pub alias: String,
+    pub catalog: DucklakeCatalog,
+    pub catalog_resource: serde_json::Value,
+    pub storage: DucklakeStorage,
+    /// None = the lake's default metadata schema (the ancestor is a root/non-fork workspace).
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub metadata_schema: Option<String>,
+    /// The ancestor config's own non-reserved ATTACH args (e.g. `ENCRYPTED true`), already
+    /// stripped of the fork-owned `METADATA_SCHEMA`/`DATA_PATH`/`OVERRIDE_DATA_PATH` — an
+    /// option-dependent lake would otherwise fail its read-only ancestor attach even though
+    /// the same lake attaches fine everywhere else.
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub extra_args: Option<String>,
+}
+
+/// Prefix of fork-scoped ducklake metadata schemas. Cleanup refuses to drop any pg schema not
+/// carrying it, mirroring the `wm_fork_` guard on forked datatable databases.
+pub const FORK_DUCKLAKE_SCHEMA_PREFIX: &str = "wm_fork_";
+
+/// Bucket-root directory holding all fork namespaces' data files: each fork writes under
+/// `{FORK_DUCKLAKE_DATA_DIR}/<fork segment>/<lake path>` where the segment is
+/// [`fork_data_dir_segment`] (see [`fork_data_path`] for why it wraps the lake's path instead
+/// of nesting under it).
+pub const FORK_DUCKLAKE_DATA_DIR: &str = "__wm_forks";
+
+fn mangle_identifier(s: &str, max: usize) -> String {
+    s.chars()
+        .take(max)
+        .map(|c| {
+            let c = c.to_ascii_lowercase();
+            if c.is_ascii_alphanumeric() {
+                c
+            } else {
+                '_'
+            }
+        })
+        .collect()
+}
+
+/// Deterministic, injective pg-schema name for a fork workspace's namespace of ONE lake:
+/// `wm_fork_<mangled wid (≤24)>_<mangled lake (≤16)>_<8-hex sha256>`, ≤58 chars (pg limit 63).
+/// Lake-scoped, not just workspace-scoped: two lakes of one workspace may share a catalog
+/// database, and a per-workspace schema would merge their namespaces in the fork (tables and
+/// snapshots colliding across `ducklake://a/…` and `ducklake://b/…`). The hash keeps distinct
+/// (workspace, lake) pairs distinct after mangling. The registry row records the computed name
+/// for cleanup, but ATTACH recomputes it — so this function must stay stable across releases
+/// or existing forks would silently lose their namespace.
+pub fn fork_ducklake_metadata_schema(w_id: &str, lake_name: &str) -> String {
+    use sha2::{Digest, Sha256};
+    let hash = hex::encode(&Sha256::digest(format!("{w_id}\0{lake_name}").as_bytes())[..4]);
+    format!(
+        "{FORK_DUCKLAKE_SCHEMA_PREFIX}{}_{}_{hash}",
+        mangle_identifier(w_id, 24),
+        mangle_identifier(lake_name, 16)
+    )
+}
+
+/// The `METADATA_SCHEMA '<x>'` value carried in a lake config's `extra_args`, if any — the
+/// schema the lake's OWN catalog namespace lives in (how one catalog database hosts several
+/// lakes). Ancestor read-only attaches must preserve it or they'd bind the wrong namespace.
+pub fn extract_metadata_schema_arg(extra_args: &str) -> Option<String> {
+    lazy_static::lazy_static! {
+        static ref MS: regex::Regex = regex::Regex::new(
+            r"(?i)\bMETADATA_SCHEMA\s*(?:'([^']*)'|([A-Za-z0-9_]+))"
+        )
+        .unwrap();
+    }
+    // Last occurrence wins, matching DuckDB's duplicate-option semantics.
+    MS.captures_iter(extra_args)
+        .last()
+        .and_then(|c| c.get(1).or_else(|| c.get(2)))
+        .map(|m| m.as_str().to_string())
+}
+
+/// Deterministic DuckDB attach alias for an ancestor namespace of a fork's lake. Persisted
+/// defer-view SQL references it (same stability requirement as
+/// [`fork_ducklake_metadata_schema`]).
+pub fn fork_ducklake_ancestor_alias(lake_name: &str, ancestor_w_id: &str) -> String {
+    use sha2::{Digest, Sha256};
+    let hash =
+        hex::encode(&Sha256::digest(format!("{lake_name}\0{ancestor_w_id}").as_bytes())[..4]);
+    format!(
+        "__wm_dl_{}_{}_{hash}",
+        mangle_identifier(lake_name, 20),
+        mangle_identifier(ancestor_w_id, 20)
+    )
+}
+
+/// Strip `METADATA_SCHEMA` / `DATA_PATH` / `OVERRIDE_DATA_PATH` tokens from ducklake ATTACH
+/// extra args. In a fork these options are injected by the fork resolution; a user- or
+/// settings-supplied duplicate silently wins (DuckDB keeps the last occurrence) and would
+/// escape the fork namespace back to the parent's, so they are removed rather than overridden.
+pub fn strip_fork_reserved_attach_args(extra_args: &str) -> String {
+    lazy_static::lazy_static! {
+        static ref RESERVED: regex::Regex = regex::Regex::new(
+            r"(?i)\b(METADATA_SCHEMA|DATA_PATH|OVERRIDE_DATA_PATH)\s*('[^']*'|[A-Za-z0-9_]+)"
+        )
+        .unwrap();
+    }
+    RESERVED
+        .replace_all(extra_args, "")
+        .split(',')
+        .map(str::trim)
+        .filter(|s| !s.is_empty())
+        .collect::<Vec<_>>()
+        .join(", ")
+}
+
+lazy_static::lazy_static! {
+    /// fork workspace id -> (ancestor chain nearest-first, expiry ts). Empty chain = not a fork.
+    /// `parent_workspace_id` only changes on dev-workspace attach/detach, so a short TTL is safe.
+    static ref FORK_ANCESTOR_CHAIN_CACHE: Cache<String, (Vec<String>, i64)> = Cache::new(5000);
+    /// fork workspace id -> (locations recently upserted into `fork_ducklake_namespace`,
+    /// expiry ts), so the registry write doesn't run on every job of a fork. Keyed by
+    /// workspace id so cleanup can drop a fork's whole entry: a same-id fork recreated within
+    /// the TTL must re-register, or its materializations would carry no registry row and leak
+    /// at ITS deletion. TTL'd as a second line of defense for cleanup paths that bypass
+    /// `cleanup_fork_ducklake_namespaces` (e.g. manual registry edits).
+    static ref FORK_DUCKLAKE_REGISTERED: Cache<String, (std::collections::HashSet<String>, i64)> =
+        Cache::new(5000);
+}
+
+/// Drop the "already registered" once-cache for a workspace. MUST be called whenever
+/// `fork_ducklake_namespace` rows for that workspace are deleted (namespace cleanup, workspace
+/// deletion): a surviving entry would make a same-id fork recreated within the TTL skip
+/// re-registration, orphaning its namespace at deletion time.
+pub fn invalidate_fork_ducklake_registration_cache(w_id: &str) {
+    FORK_DUCKLAKE_REGISTERED.remove(w_id);
+}
+
+/// Drop the cached ancestor chain for a workspace. MUST be called wherever
+/// `parent_workspace_id` lineage changes (fork creation, dev-workspace attach, reparenting
+/// rename, deletion): a cached EMPTY chain reads as "not a fork" and would bypass ducklake
+/// fork isolation for the TTL — the first jobs after a dev-workspace attach would write the
+/// shared lake.
+pub fn invalidate_fork_ancestor_chain_cache(w_id: &str) {
+    FORK_ANCESTOR_CHAIN_CACHE.remove(w_id);
+}
+
+/// Ancestors of `w_id`, nearest-first (direct parent … root). Empty for a non-fork workspace or
+/// an unknown id. The depth bound is a cycle-safety backstop, same convention as
+/// [`fork_chain_depth`].
+///
+/// Unauthenticated helper: reads workspace hierarchy for any `w_id`, so callers must already be
+/// authorized for that workspace (or run in trusted server-side code).
+pub async fn fork_ancestor_chain(db: &crate::DB, w_id: &str) -> Result<Vec<String>> {
+    let now = chrono::Utc::now().timestamp();
+    if let Some((chain, expiry)) = FORK_ANCESTOR_CHAIN_CACHE.get(w_id) {
+        if expiry > now {
+            return Ok(chain);
+        }
+    }
+    let chain = sqlx::query_scalar!(
+        r#"
+            WITH RECURSIVE chain AS (
+                SELECT id, parent_workspace_id, 0 AS depth
+                FROM workspace WHERE id = $1
+                UNION ALL
+                SELECT w.id, w.parent_workspace_id, chain.depth + 1
+                FROM workspace w
+                JOIN chain ON w.id = chain.parent_workspace_id
+                WHERE chain.depth < 20
+            )
+            SELECT id AS "id!" FROM chain WHERE depth > 0 ORDER BY depth
+        "#,
+        w_id
+    )
+    .fetch_all(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("resolving fork ancestors of {w_id}: {e:#}")))?;
+    FORK_ANCESTOR_CHAIN_CACHE.insert(w_id.to_string(), (chain.clone(), now + 60));
+    Ok(chain)
 }
 
 pub async fn get_ducklake_from_db_unchecked(
@@ -956,6 +1180,29 @@ pub async fn get_ducklake_from_db_unchecked(
     w_id: &str,
     db: &DB,
 ) -> Result<DucklakeWithConnData> {
+    let (base, fork_behavior) = ducklake_conn_data(name, w_id, db).await?;
+    let chain = fork_ancestor_chain(db, w_id).await?;
+    // `Shared` is the explicit fork-creation opt-out of isolation: the fork reads and writes
+    // the parent's lake through its own (cloned) config, exactly like a non-fork workspace.
+    // An empty chain alone does NOT mean "not a fork": `parent_workspace_id` is ON DELETE SET
+    // NULL, so a `wm-fork-*` workspace can outlive its parent — its cloned config still points
+    // at the shared lake, so the prefix keeps it isolated (mirrors `workspace_is_fork`). No
+    // ancestors ⇒ no defer, write redirect only. Prefix-less dev workspaces can't be orphaned
+    // (deletion of their prod is blocked while attached).
+    if (chain.is_empty() && !w_id.starts_with(WM_FORK_PREFIX))
+        || fork_behavior == Some(DucklakeForkBehavior::Shared)
+    {
+        return Ok(base);
+    }
+    fork_scoped_ducklake(name, w_id, base, chain, db).await
+}
+
+/// Resolve one workspace's own config for lake `name` — no fork awareness.
+async fn ducklake_conn_data(
+    name: &str,
+    w_id: &str,
+    db: &DB,
+) -> Result<(DucklakeWithConnData, Option<DucklakeForkBehavior>)> {
     let ducklake = sqlx::query_scalar!(
         r#"
             SELECT ws.ducklake->'ducklakes'->$2 AS config
@@ -988,13 +1235,447 @@ pub async fn get_ducklake_from_db_unchecked(
             )
             .await?
         };
+    let fork_behavior = ducklake.fork_behavior;
     let ducklake = DucklakeWithConnData {
         catalog_resource,
         catalog: ducklake.catalog,
         storage: ducklake.storage,
         extra_args: ducklake.extra_args,
+        fork_defer: None,
     };
-    Ok(ducklake)
+    Ok((ducklake, fork_behavior))
+}
+
+/// The fork's directory segment under `__wm_forks/`: mangled + hashed into ONE path component
+/// (same recipe and stability requirement as [`fork_ducklake_metadata_schema`]). Fork/dev
+/// workspace ids are only git-branch-safe and may contain `/` (e.g. `wm-fork-a/b`) — used
+/// raw, such an id would nest inside the sibling `wm-fork-a`'s prefix and be swept by ITS
+/// cleanup. The hash keeps distinct ids distinct after mangling.
+pub fn fork_data_dir_segment(fork_w_id: &str) -> String {
+    use sha2::{Digest, Sha256};
+    let hash = hex::encode(&Sha256::digest(fork_w_id.as_bytes())[..4]);
+    format!("{}_{hash}", mangle_identifier(fork_w_id, 40))
+}
+
+/// The fork namespace's data path within the same bucket: a bucket-root
+/// `__wm_forks/<fork segment>/` prefix wrapping the lake's own path, NOT a sub-path under it —
+/// the parent lake's maintenance (snapshot expiry / `ducklake_delete_orphaned_files`) scans
+/// everything under the parent's DATA_PATH and would treat live fork files nested there as
+/// orphans and delete them.
+pub fn fork_data_path(base_path: &str, fork_w_id: &str) -> String {
+    let segment = fork_data_dir_segment(fork_w_id);
+    let base = base_path.trim_matches('/');
+    if base.is_empty() {
+        format!("{FORK_DUCKLAKE_DATA_DIR}/{segment}")
+    } else {
+        format!("{FORK_DUCKLAKE_DATA_DIR}/{segment}/{base}")
+    }
+}
+
+/// Redirect a fork workspace's lake to its fork-scoped namespace (same catalog DB, fork
+/// metadata schema + data sub-path) and assemble the read-defer context over its ancestors.
+async fn fork_scoped_ducklake(
+    name: &str,
+    w_id: &str,
+    mut base: DucklakeWithConnData,
+    chain: Vec<String>,
+    db: &DB,
+) -> Result<DucklakeWithConnData> {
+    if base.catalog.resource_type == DucklakeCatalogResourceType::Mysql {
+        return Err(Error::BadRequest(format!(
+            "ducklake {name}: mysql-catalog lakes are not supported in fork workspaces — \
+             running against the shared catalog would write the parent workspace's data"
+        )));
+    }
+    let metadata_schema = fork_ducklake_metadata_schema(w_id, name);
+    let fork_path = fork_data_path(&base.storage.path, w_id);
+    let catalog_identity = ducklake_catalog_identity(&base.catalog);
+    register_fork_ducklake_namespace(
+        db,
+        w_id,
+        name,
+        &metadata_schema,
+        &catalog_identity,
+        base.storage.storage.as_deref(),
+        &fork_path,
+    )
+    .await?;
+
+    // Ancestor namespaces, nearest-first, each from its own settings so a fork-side settings
+    // edit can't silently repoint what "parent" means. All-or-nothing: a broken link anywhere
+    // in the chain disables defer entirely (a defer view over a missing ancestor attach fails
+    // at bind time and would kill unrelated jobs), but write isolation still applies.
+    let mut ancestors = Vec::with_capacity(chain.len());
+    for (i, ancestor_id) in chain.iter().enumerate() {
+        match ducklake_conn_data(name, ancestor_id, db).await {
+            Ok((mut a, ancestor_behavior)) => {
+                // A fork ancestor lives in its own namespace UNLESS its lake is `Shared` —
+                // then it never redirected and its data sits at its config's default
+                // location, exactly like a root workspace. Chain position alone can't tell
+                // the two apart: an orphaned `wm-fork-*` ancestor (its own parent deleted,
+                // `parent_workspace_id` SET NULL) ends the chain like a root but its data
+                // lives in ITS fork namespace — key on the prefix too, as in resolution.
+                let is_isolated_fork = (i + 1 < chain.len()
+                    || ancestor_id.starts_with(WM_FORK_PREFIX))
+                    && ancestor_behavior != Some(DucklakeForkBehavior::Shared);
+                let metadata_schema = if is_isolated_fork {
+                    a.storage.path = fork_data_path(&a.storage.path, ancestor_id);
+                    Some(fork_ducklake_metadata_schema(ancestor_id, name))
+                } else {
+                    // Root / shared ancestors live in their config's OWN catalog namespace —
+                    // which may be a non-default schema when one catalog database hosts
+                    // several lakes (`extra_args METADATA_SCHEMA '…'`). Preserve it, or the
+                    // read-only attach would bind the wrong (or a nonexistent) lake.
+                    a.extra_args
+                        .as_deref()
+                        .and_then(extract_metadata_schema_arg)
+                };
+                let extra_args = a
+                    .extra_args
+                    .as_deref()
+                    .map(strip_fork_reserved_attach_args)
+                    .filter(|s| !s.is_empty());
+                ancestors.push(DucklakeAncestorAttach {
+                    workspace_id: ancestor_id.clone(),
+                    alias: fork_ducklake_ancestor_alias(name, ancestor_id),
+                    catalog: a.catalog,
+                    catalog_resource: a.catalog_resource,
+                    storage: a.storage,
+                    metadata_schema,
+                    extra_args,
+                });
+            }
+            Err(e) => {
+                tracing::warn!(
+                    "fork {w_id}: ducklake {name} not resolvable in ancestor {ancestor_id} \
+                     ({e:#}); read-defer disabled, fork namespace still isolated"
+                );
+                ancestors.clear();
+                break;
+            }
+        }
+    }
+    // Drop fork ancestors whose namespace was never bootstrapped (e.g. a fresh intermediate
+    // fork that never attached this lake): their READ_ONLY attach would fail the whole job
+    // ("DuckLake does not exist" + creation disabled), and a nonexistent namespace can't own
+    // tables or be referenced by any persisted view. Checked against the fork's catalog DB —
+    // must happen BEFORE defer discovery so `ancestor_idx` values index the filtered list.
+    let (existing_schemas, fork_views, fork_tables) =
+        inspect_fork_catalog(&base, &metadata_schema, &ancestors, db).await?;
+    ancestors.retain(|a| {
+        a.metadata_schema
+            .as_ref()
+            .map_or(true, |s| existing_schemas.contains(s))
+    });
+    let defer_tables = if ancestors.is_empty() {
+        vec![]
+    } else {
+        // Discovery walks the WHOLE chain: a table only a grandparent materialized has no
+        // physical copy in the direct parent (it defers too), so its view must target the
+        // nearest ancestor that owns one.
+        let ancestor_ids: Vec<String> = ancestors.iter().map(|a| a.workspace_id.clone()).collect();
+        let mut tables =
+            crate::materialization::list_fork_defer_tables(db, &ancestor_ids, w_id, name).await?;
+        // Catalog truth beats recorded status: any table live in the fork namespace is
+        // fork-owned, whatever its materialized_partition row says (failed-after-commit,
+        // raw SQL) — a defer view over it would silently yield to it.
+        tables.retain(|t| !fork_tables.contains(&t.table));
+        tables
+    };
+
+    base.storage.path = fork_path;
+    base.extra_args = Some(match base.extra_args.take() {
+        Some(e) => {
+            let sanitized = strip_fork_reserved_attach_args(&e);
+            if sanitized.is_empty() {
+                format!("METADATA_SCHEMA '{metadata_schema}'")
+            } else {
+                format!("{sanitized}, METADATA_SCHEMA '{metadata_schema}'")
+            }
+        }
+        None => format!("METADATA_SCHEMA '{metadata_schema}'"),
+    });
+    base.fork_defer = Some(DucklakeForkDefer { ancestors, defer_tables, fork_views });
+    Ok(base)
+}
+
+/// One round trip to the fork's catalog DB for both namespace introspections: which fork
+/// ancestors' metadata schemas actually exist (a fresh intermediate fork may never have
+/// bootstrapped its namespace), and the views currently live in THIS fork's namespace
+/// (straight from DuckLake's `ducklake_view` metadata — missing metadata tables read as "no
+/// views", correct since nothing can exist there). Each ancestor's schema is checked in the
+/// ancestor's OWN catalog database — a fork whose catalog drifted away from an ancestor's
+/// must not misread that ancestor's (existing, elsewhere) namespace as missing. Ancestors
+/// whose catalog is unreachable read as missing — the safe direction: their defer is skipped
+/// (loud absent-table reads) rather than emitting a READ_ONLY attach that would fail every
+/// job in this fork.
+async fn inspect_fork_catalog(
+    base: &DucklakeWithConnData,
+    metadata_schema: &str,
+    ancestors: &[DucklakeAncestorAttach],
+    db: &DB,
+) -> Result<(
+    std::collections::HashSet<String>,
+    Vec<String>,
+    std::collections::HashSet<String>,
+)> {
+    // Ancestor fork-schemas grouped by which catalog database they live in.
+    let mut groups: std::collections::HashMap<String, (serde_json::Value, Vec<String>)> =
+        std::collections::HashMap::new();
+    for a in ancestors {
+        if let Some(ms) = &a.metadata_schema {
+            groups
+                .entry(ducklake_catalog_identity(&a.catalog))
+                .or_insert_with(|| (a.catalog_resource.clone(), vec![]))
+                .1
+                .push(ms.clone());
+        }
+    }
+
+    async fn query_schemas(
+        client: &tokio_postgres::Client,
+        schemas: Vec<String>,
+    ) -> std::result::Result<Vec<String>, tokio_postgres::Error> {
+        client
+            .query(
+                "SELECT schema_name::text FROM information_schema.schemata
+                 WHERE schema_name = ANY($1)",
+                &[&schemas],
+            )
+            .await
+            .map(|rows| rows.iter().map(|r| r.get::<_, String>(0)).collect())
+    }
+
+    let mut existing_schemas: std::collections::HashSet<String> = Default::default();
+
+    // The fork's own catalog: same-catalog ancestor schemas + this fork's live views.
+    let pg: crate::PgDatabase =
+        serde_json::from_value(base.catalog_resource.clone()).map_err(|e| {
+            Error::internal_err(format!("ducklake catalog resource is not postgres: {e}"))
+        })?;
+    let (client, connection) = pg.connect(Some(db)).await?;
+    let join_handle = tokio::spawn(async move { connection.await });
+    let same_catalog = groups.remove(&ducklake_catalog_identity(&base.catalog));
+    let same_catalog_res = match same_catalog {
+        Some((_, schemas)) => query_schemas(&client, schemas).await.map(Some),
+        None => Ok(None),
+    };
+    // Identifier-quoted schema: the name is server-derived (mangled + hashed) but quote anyway.
+    let q = format!(
+        r#"SELECT CASE WHEN s.schema_name = 'main' THEN v.view_name
+                       ELSE s.schema_name || '.' || v.view_name END AS name
+           FROM "{ms}".ducklake_view v
+           JOIN "{ms}".ducklake_schema s ON s.schema_id = v.schema_id AND s.end_snapshot IS NULL
+           WHERE v.end_snapshot IS NULL"#,
+        ms = metadata_schema.replace('"', "\"\"")
+    );
+    let view_rows = client.query(&q, &[]).await;
+    // Live TABLES in the fork's namespace, same name shape as the views — the defer list is
+    // filtered against them: `CREATE VIEW IF NOT EXISTS` silently yields to an existing
+    // table, so emitting a defer view over one would leave reads on the fork table while
+    // claiming they defer (recorded status can't tell — a committed write whose data tests
+    // failed, or a table left by raw SQL, has no `materialized` row).
+    let qt = format!(
+        r#"SELECT CASE WHEN s.schema_name = 'main' THEN t.table_name
+                       ELSE s.schema_name || '.' || t.table_name END AS name
+           FROM "{ms}".ducklake_table t
+           JOIN "{ms}".ducklake_schema s ON s.schema_id = t.schema_id AND s.end_snapshot IS NULL
+           WHERE t.end_snapshot IS NULL"#,
+        ms = metadata_schema.replace('"', "\"\"")
+    );
+    let table_rows = client.query(&qt, &[]).await;
+    drop(client);
+    let _ = join_handle.await;
+
+    existing_schemas.extend(
+        same_catalog_res
+            .map_err(|e| {
+                Error::internal_err(format!("checking fork ducklake ancestor schemas: {e}"))
+            })?
+            .unwrap_or_default(),
+    );
+    let fork_views = match view_rows {
+        Ok(rows) => rows.iter().map(|r| r.get::<_, String>(0)).collect(),
+        // 42P01 undefined_table / 3F000 invalid_schema_name: namespace not bootstrapped yet.
+        Err(e)
+            if e.code().map_or(false, |c| {
+                c == &tokio_postgres::error::SqlState::UNDEFINED_TABLE
+                    || c == &tokio_postgres::error::SqlState::INVALID_SCHEMA_NAME
+            }) =>
+        {
+            vec![]
+        }
+        Err(e) => {
+            return Err(Error::internal_err(format!(
+                "listing fork ducklake views in {metadata_schema}: {e}"
+            )))
+        }
+    };
+    let fork_tables = match table_rows {
+        Ok(rows) => rows.iter().map(|r| r.get::<_, String>(0)).collect(),
+        Err(e)
+            if e.code().map_or(false, |c| {
+                c == &tokio_postgres::error::SqlState::UNDEFINED_TABLE
+                    || c == &tokio_postgres::error::SqlState::INVALID_SCHEMA_NAME
+            }) =>
+        {
+            Default::default()
+        }
+        Err(e) => {
+            return Err(Error::internal_err(format!(
+                "listing fork ducklake tables in {metadata_schema}: {e}"
+            )))
+        }
+    };
+
+    // Ancestors living in OTHER catalog databases (this fork's catalog drifted after forking):
+    // one connection per distinct catalog, best-effort — an unreachable ancestor catalog only
+    // disables that ancestor's defer.
+    for (identity, (resource, schemas)) in groups {
+        let checked = async {
+            let pg: crate::PgDatabase = serde_json::from_value(resource)
+                .map_err(|e| Error::internal_err(format!("not a postgres resource: {e}")))?;
+            let (client, connection) = pg.connect(Some(db)).await?;
+            let join_handle = tokio::spawn(async move { connection.await });
+            let res = query_schemas(&client, schemas).await;
+            drop(client);
+            let _ = join_handle.await;
+            res.map_err(|e| Error::internal_err(format!("{e}")))
+        }
+        .await;
+        match checked {
+            Ok(found) => existing_schemas.extend(found),
+            Err(e) => {
+                tracing::warn!(
+                    "fork ancestor catalog `{identity}` unreachable while checking ducklake \
+                     namespaces ({e:#}); its ancestors' defer is disabled for this resolution"
+                );
+            }
+        }
+    }
+    Ok((existing_schemas, fork_views, fork_tables))
+}
+
+/// Canonical identity of a lake's catalog database (`<resource_type>:<resource_path>`) — used
+/// for the cleanup registry and for grouping ancestors by which catalog their namespace lives
+/// in. Identifies the database *pointer*, not its (live-resolved) credentials.
+pub fn ducklake_catalog_identity(catalog: &DucklakeCatalog) -> String {
+    format!(
+        "{}:{}",
+        catalog.resource_type.as_ref(),
+        catalog.resource_path
+    )
+}
+
+/// Record that a fork attached this lake at this physical location, so fork deletion knows
+/// exactly which pg metadata schema and which storage prefixes to clean up. One row per
+/// (lake, storage, data path) EVER attached — if the fork's lake settings drift, later
+/// attaches add rows rather than replace them, so cleanup covers every prefix the fork wrote.
+/// The once-cache is keyed on the full location for the same reason. Re-registering an
+/// existing row resets its `schema_dropped` cleanup phase: attaching recreates the metadata
+/// schema, so a stale "already dropped" marker would make the eventual cleanup skip a live
+/// schema.
+async fn register_fork_ducklake_namespace(
+    db: &DB,
+    w_id: &str,
+    name: &str,
+    metadata_schema: &str,
+    catalog: &str,
+    storage: Option<&str>,
+    data_path: &str,
+) -> Result<()> {
+    // '' = default storage (the column is part of the PK, which cannot hold NULL).
+    let storage = storage.unwrap_or("");
+    // Resolve the logical storage name to its identity NOW: cleanup must delete from the
+    // storage that was active when the data was written, not whatever the name points at by
+    // deletion time. '' = unresolvable (no LFS configured — the write itself will fail at the
+    // proxy, so nothing lands anywhere).
+    let storage_ref = fork_storage_ref(db, w_id, storage)
+        .await
+        .unwrap_or_default();
+    let location = format!("{name}\0{catalog}\0{storage}\0{storage_ref}\0{data_path}");
+    let now = chrono::Utc::now().timestamp();
+    if FORK_DUCKLAKE_REGISTERED
+        .get(w_id)
+        .is_some_and(|(locations, exp)| exp > now && locations.contains(&location))
+    {
+        return Ok(());
+    }
+    sqlx::query!(
+        "INSERT INTO fork_ducklake_namespace
+           (workspace_id, ducklake_name, metadata_schema, catalog, storage, storage_ref, data_path)
+         VALUES ($1, $2, $3, $4, $5, $6, $7)
+         ON CONFLICT (workspace_id, ducklake_name, catalog, storage, storage_ref, data_path)
+         DO UPDATE SET schema_dropped = false",
+        w_id,
+        name,
+        metadata_schema,
+        catalog,
+        storage,
+        &storage_ref,
+        data_path,
+    )
+    .execute(db)
+    .await
+    .map_err(|e| Error::internal_err(format!("registering fork ducklake namespace: {e:#}")))?;
+    let mut locations = FORK_DUCKLAKE_REGISTERED
+        .get(w_id)
+        .filter(|(_, exp)| *exp > now)
+        .map(|(locations, _)| locations)
+        .unwrap_or_default();
+    locations.insert(location);
+    FORK_DUCKLAKE_REGISTERED.insert(w_id.to_string(), (locations, now + 60));
+    Ok(())
+}
+
+/// Canonical identity of a workspace storage (`<lfs type>:<resource path or root path>`) as
+/// configured RIGHT NOW — recorded in the fork namespace registry so cleanup targets the
+/// storage the data was actually written to. `storage` = '' for the primary storage, else a
+/// `secondary_storage` name. Returns None when no matching storage is configured.
+async fn fork_storage_ref(db: &DB, w_id: &str, storage: &str) -> Option<String> {
+    let lfs_json = sqlx::query_scalar!(
+        "SELECT large_file_storage FROM workspace_settings WHERE workspace_id = $1",
+        w_id
+    )
+    .fetch_optional(db)
+    .await
+    .ok()
+    .flatten()
+    .flatten()?;
+    let entry = if storage.is_empty() || storage == "_default_" {
+        lfs_json.clone()
+    } else {
+        lfs_json.get("secondary_storage")?.get(storage)?.clone()
+    };
+    lfs_entry_storage_ref(&entry)
+}
+
+/// The pure part of [`fork_storage_ref`]: one `LargeFileStorage` JSON entry → its canonical
+/// `<type>:<path>` descriptor. The `$res:` prefix on resource paths is normalized away (stored
+/// configs are inconsistent about it); cleanup re-adds it when resolving.
+pub fn lfs_entry_storage_ref(entry: &serde_json::Value) -> Option<String> {
+    let typ = entry.get("type")?.as_str()?;
+    let path_field = match typ {
+        "S3Storage" | "S3AwsOidc" => "s3_resource_path",
+        "AzureBlobStorage" | "AzureWorkloadIdentity" => "azure_blob_resource_path",
+        "GoogleCloudStorage" => "gcs_resource_path",
+        "FilesystemStorage" => "root_path",
+        _ => return None,
+    };
+    let path = entry.get(path_field)?.as_str()?;
+    let path = path.strip_prefix("$res:").unwrap_or(path);
+    Some(format!("{typ}:{path}"))
+}
+
+/// Resolve a `$res:`/`$var:` reference tree to its concrete value (recursively, secrets
+/// decrypted). No permission checks — trusted server-side callers only; never echo the result
+/// to a user.
+pub async fn transform_json_value_unchecked(
+    value: &serde_json::Value,
+    w_id: &str,
+    db: &DB,
+) -> Result<serde_json::Value> {
+    transform_json_unchecked(value, w_id, db).await
 }
 
 // This does not check for any permission. Should never be displayed to a user.
@@ -1140,4 +1821,162 @@ mod tests {
         let long_id = format!("wm-fork-{}", "a".repeat(43));
         assert!(validate_fork_workspace_id(&long_id).is_err());
     }
+
+    #[test]
+    fn test_fork_ducklake_metadata_schema_shape() {
+        let s = fork_ducklake_metadata_schema("wm-fork-my-feature-42", "main");
+        assert!(s.starts_with(FORK_DUCKLAKE_SCHEMA_PREFIX), "{s}");
+        assert!(s.len() <= 63, "pg schema name limit: {s}");
+        assert!(
+            s.chars().all(|c| c.is_ascii_alphanumeric() || c == '_'),
+            "{s}"
+        );
+        // Deterministic (persisted view SQL / registry rows depend on it).
+        assert_eq!(
+            s,
+            fork_ducklake_metadata_schema("wm-fork-my-feature-42", "main")
+        );
+    }
+
+    #[test]
+    fn test_fork_ducklake_metadata_schema_injective_after_mangling() {
+        // `-` and `_` mangle to the same char; the hash suffix must keep them distinct.
+        let a = fork_ducklake_metadata_schema("wm-fork-a-b", "main");
+        let b = fork_ducklake_metadata_schema("wm-fork-a_b", "main");
+        assert_ne!(a, b);
+        // Lake-scoped: two lakes of one workspace may share a catalog database, so their fork
+        // namespaces must be distinct schemas.
+        assert_ne!(
+            fork_ducklake_metadata_schema("wm-fork-a-b", "lake_a"),
+            fork_ducklake_metadata_schema("wm-fork-a-b", "lake_b")
+        );
+        // Long ids truncate to the same mangled prefix; hash must still differ.
+        let long_a = fork_ducklake_metadata_schema(&format!("wm-fork-{}x", "a".repeat(40)), "main");
+        let long_b = fork_ducklake_metadata_schema(&format!("wm-fork-{}y", "a".repeat(40)), "main");
+        assert_ne!(long_a, long_b);
+        let long_lake =
+            fork_ducklake_metadata_schema(&format!("wm-fork-{}", "a".repeat(42)), &"l".repeat(40));
+        assert!(long_a.len() <= 63 && long_b.len() <= 63 && long_lake.len() <= 63);
+    }
+
+    #[test]
+    fn test_fork_ducklake_ancestor_alias_valid_identifier() {
+        let a = fork_ducklake_ancestor_alias("analytics", "wm-fork-dev-1");
+        assert!(a.starts_with("__wm_dl_"), "{a}");
+        assert!(
+            a.chars().all(|c| c.is_ascii_alphanumeric() || c == '_'),
+            "{a}"
+        );
+        // Distinct per lake for the same ancestor (a script can attach several lakes).
+        assert_ne!(a, fork_ducklake_ancestor_alias("staging", "wm-fork-dev-1"));
+        assert_ne!(
+            a,
+            fork_ducklake_ancestor_alias("analytics", "wm-fork-dev-2")
+        );
+    }
+
+    #[test]
+    fn test_extract_metadata_schema_arg() {
+        assert_eq!(
+            extract_metadata_schema_arg("METADATA_SCHEMA 'lake_b_ns', ENCRYPTED true"),
+            Some("lake_b_ns".to_string())
+        );
+        assert_eq!(
+            extract_metadata_schema_arg("metadata_schema bare_ident"),
+            Some("bare_ident".to_string())
+        );
+        // Last occurrence wins (DuckDB duplicate-option semantics).
+        assert_eq!(
+            extract_metadata_schema_arg("METADATA_SCHEMA 'a', METADATA_SCHEMA 'b'"),
+            Some("b".to_string())
+        );
+        assert_eq!(extract_metadata_schema_arg("ENCRYPTED true"), None);
+    }
+
+    #[test]
+    fn test_fork_data_path_prefix_isolation() {
+        // Fork/dev ids are git-branch-safe and may contain `/`: `wm-fork-a/b` is a valid id.
+        // Its data prefix must NOT nest inside `wm-fork-a`'s, or deleting `wm-fork-a` would
+        // sweep the sibling's files via the object-store prefix listing.
+        assert!(validate_fork_workspace_id("wm-fork-a/b").is_ok());
+        let a = fork_data_path("lake", "wm-fork-a");
+        let ab = fork_data_path("lake", "wm-fork-a/b");
+        assert!(
+            !format!("{ab}/").starts_with(&format!(
+                "{FORK_DUCKLAKE_DATA_DIR}/{}/",
+                fork_data_dir_segment("wm-fork-a")
+            )),
+            "{ab} nests under {a}'s cleanup prefix"
+        );
+        // Single path component: the segment itself contains no separator.
+        assert!(!fork_data_dir_segment("wm-fork-a/b").contains('/'));
+        // Injective after mangling (`/` and `_` both mangle to `_`).
+        assert_ne!(
+            fork_data_dir_segment("wm-fork-a/b"),
+            fork_data_dir_segment("wm-fork-a_b")
+        );
+        // Deterministic (registry rows + cleanup guard recompute it).
+        assert_eq!(a, fork_data_path("lake", "wm-fork-a"));
+        // Empty base path still yields a well-formed prefix.
+        assert_eq!(
+            fork_data_path("", "wm-fork-a"),
+            format!(
+                "{FORK_DUCKLAKE_DATA_DIR}/{}",
+                fork_data_dir_segment("wm-fork-a")
+            )
+        );
+    }
+
+    #[test]
+    fn test_lfs_entry_storage_ref() {
+        assert_eq!(
+            lfs_entry_storage_ref(&serde_json::json!({
+                "type": "S3Storage", "s3_resource_path": "$res:u/admin/minio"
+            })),
+            Some("S3Storage:u/admin/minio".to_string())
+        );
+        // The `$res:` prefix is optional in stored configs; normalized either way.
+        assert_eq!(
+            lfs_entry_storage_ref(&serde_json::json!({
+                "type": "AzureBlobStorage", "azure_blob_resource_path": "u/admin/az"
+            })),
+            Some("AzureBlobStorage:u/admin/az".to_string())
+        );
+        assert_eq!(
+            lfs_entry_storage_ref(&serde_json::json!({
+                "type": "FilesystemStorage", "root_path": "/data/lfs"
+            })),
+            Some("FilesystemStorage:/data/lfs".to_string())
+        );
+        assert_eq!(
+            lfs_entry_storage_ref(&serde_json::json!({"type": "SomethingNew"})),
+            None
+        );
+        assert_eq!(lfs_entry_storage_ref(&serde_json::json!({})), None);
+    }
+
+    #[test]
+    fn test_strip_fork_reserved_attach_args() {
+        // Reserved options removed wherever they appear, others preserved.
+        assert_eq!(
+            strip_fork_reserved_attach_args("METADATA_SCHEMA 'main', ENCRYPTED true"),
+            "ENCRYPTED true"
+        );
+        assert_eq!(
+            strip_fork_reserved_attach_args(
+                "ENCRYPTED true, DATA_PATH 's3://b/prod', OVERRIDE_DATA_PATH FALSE"
+            ),
+            "ENCRYPTED true"
+        );
+        // Case-insensitive, and quoted values may contain commas/spaces.
+        assert_eq!(
+            strip_fork_reserved_attach_args("data_path 's3://b/x, y', SNAPSHOT_VERSION 3"),
+            "SNAPSHOT_VERSION 3"
+        );
+        assert_eq!(strip_fork_reserved_attach_args(""), "");
+        assert_eq!(
+            strip_fork_reserved_attach_args("METADATA_SCHEMA 'wm_fork_evil'"),
+            ""
+        );
+    }
 }
diff --git a/backend/windmill-queue/tests/schedule_push.rs b/backend/windmill-queue/tests/schedule_push.rs
index 745b2685e9..e11ced23bc 100644
--- a/backend/windmill-queue/tests/schedule_push.rs
+++ b/backend/windmill-queue/tests/schedule_push.rs
@@ -1656,12 +1656,13 @@ mod schedule_push {
         tx.commit().await?;
 
         assert_eq!(count_queued_jobs(&db).await, 1);
-        let (kind, path, tag, raw_code) = sqlx::query_as::<_, (String, Option<String>, String, Option<String>)>(
-            "SELECT j.kind::text, j.runnable_path, j.tag, j.raw_code
+        let (kind, path, tag, raw_code) =
+            sqlx::query_as::<_, (String, Option<String>, String, Option<String>)>(
+                "SELECT j.kind::text, j.runnable_path, j.tag, j.raw_code
              FROM v2_job j JOIN v2_job_queue q ON j.id = q.id LIMIT 1",
-        )
-        .fetch_one(&db)
-        .await?;
+            )
+            .fetch_one(&db)
+            .await?;
         assert_eq!(kind, "preview");
         assert_eq!(path.as_deref(), Some("f/ducklake_maintenance/legacy"));
         assert_eq!(tag, "duckdb");
@@ -1694,6 +1695,7 @@ mod schedule_push {
                 },
                 storage: DucklakeStorage { storage: None, path: "legacy".to_string() },
                 extra_args: None,
+                fork_behavior: None,
                 maintenance: Some(DucklakeMaintenance {
                     enabled: maintenance_enabled,
                     schedule: None,
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index 31db95b91a..817c86281c 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -14,7 +14,7 @@ use windmill_common::utils::sanitize_string_from_password;
 use windmill_common::worker::{get_memory, to_raw_value, Connection, SqlResultCollectionStrategy};
 use windmill_common::workspaces::{
     get_datatable_resource_from_db_unchecked, get_ducklake_from_db_unchecked,
-    DucklakeCatalogResourceType,
+    strip_fork_reserved_attach_args, DucklakeCatalogResourceType,
 };
 use windmill_common::PgDatabase;
 use windmill_object_store::S3_PROXY_LAST_ERRORS_CACHE;
@@ -1155,6 +1155,7 @@ pub async fn do_duckdb(
                     conn,
                     &mut hidden_passwords,
                     &job.workspace_id,
+                    materialize.as_ref().map(|(_, m)| m.asset_path.as_str()),
                 )
                 .await?
                 {
@@ -1858,6 +1859,7 @@ async fn transform_attach_ducklake(
     conn: &Connection,
     hidden_passwords: &mut Arc<Mutex<Vec<String>>>,
     w_id: &str,
+    materialize_target: Option<&str>,
 ) -> Result<Option<Vec<String>>> {
     lazy_static::lazy_static! {
         static ref RE: regex::Regex = regex::Regex::new(r"(?i)ATTACH\s*'ducklake(://[^':]+)?'\s*AS\s+([^ ;]+)\s*(\([^)]*\))?").unwrap();
@@ -1867,15 +1869,28 @@ async fn transform_attach_ducklake(
     };
     let name = cap.get(1).map(|m| &m.as_str()[3..]).unwrap_or("main");
     let alias_name = cap.get(2).map(|m| m.as_str()).unwrap_or("");
-    let extra_args = cap
+    let user_extra_args = cap
         .get(3)
-        .map(|m| format!(", {}", &m.as_str()[1..m.as_str().len() - 1]))
-        .unwrap_or("".to_string());
+        .map(|m| m.as_str()[1..m.as_str().len() - 1].to_string())
+        .unwrap_or_default();
 
     let ducklake = match conn {
         Connection::Http(client) => get_ducklake_from_agent_http(client, name, w_id).await?,
         Connection::Sql(db) => get_ducklake_from_db_unchecked(name, w_id, db).await?,
     };
+    // In a fork, METADATA_SCHEMA / DATA_PATH / OVERRIDE_DATA_PATH are owned by the fork
+    // resolution (DuckDB silently keeps the last occurrence of a duplicated option, so a
+    // user-supplied one would escape the fork namespace back to the parent's).
+    let user_extra_args = if ducklake.fork_defer.is_some() {
+        strip_fork_reserved_attach_args(&user_extra_args)
+    } else {
+        user_extra_args
+    };
+    let extra_args = if user_extra_args.is_empty() {
+        String::new()
+    } else {
+        format!(", {}", user_extra_args)
+    };
     let db_type = match ducklake.catalog.resource_type {
         DucklakeCatalogResourceType::Instance => "postgres",
         _ => ducklake.catalog.resource_type.as_ref(),
@@ -1921,17 +1936,170 @@ async fn transform_attach_ducklake(
     } else {
         format!(", AUTOMATIC_MIGRATION TRUE{extra_args}")
     };
+    // In a fork, re-emit the fork-owned DATA_PATH as the LAST option: DuckDB keeps the last
+    // occurrence of a duplicated option, so this wins over anything the arg stripping might
+    // not recognize (e.g. a dollar-quoted literal), regardless of literal syntax. The
+    // METADATA_SCHEMA injected by the fork resolution is already last within `extra_args`.
+    let extra_args = if ducklake.fork_defer.is_some() {
+        format!("{extra_args}, DATA_PATH 's3://{storage}/{data_path}'")
+    } else {
+        extra_args
+    };
 
     let attach_str = format!(
         "ATTACH 'ducklake:{db_type}:{db_conn_str}' AS {alias_name} (DATA_PATH 's3://{storage}/{data_path}'{extra_args});",
     );
 
     let install_db_ext_str = get_attach_db_install_str(db_type)?;
-    Ok(Some(vec![
+    let mut statements = vec![
         "INSTALL ducklake;".to_string(),
         install_db_ext_str.to_string(),
         attach_str,
-    ]))
+    ];
+    if let Some(defer) = ducklake.fork_defer.as_ref() {
+        statements.extend(fork_defer_statements(
+            name,
+            alias_name,
+            defer,
+            materialize_target,
+            hidden_passwords,
+        )?);
+    }
+    Ok(Some(statements))
+}
+
+// Double-quote a possibly schema-qualified table reference, each dotted segment
+// independently (local copy of sql_materialize's private helper).
+fn quote_qualified_table(name: &str) -> String {
+    name.split('.')
+        .map(|id| format!("\"{}\"", id.replace('"', "\"\"")))
+        .collect::<Vec<_>>()
+        .join(".")
+}
+
+// `schema.table` → `schema.table_current`: the SCD2 companion view lives next to its table.
+fn current_companion(table: &str) -> String {
+    match table.rsplit_once('.') {
+        Some((s, t)) => format!("{s}.{t}_current"),
+        None => format!("{table}_current"),
+    }
+}
+
+/// Statements appended after a fork workspace's lake ATTACH: read-only attaches of the
+/// ancestor namespaces plus `CREATE VIEW IF NOT EXISTS` defer views over the direct parent for
+/// every table the fork has not materialized. When this job's managed materialize targets one
+/// of the deferred tables, its defer view is dropped instead of created — the write must hit a
+/// real fork table (`CREATE [OR REPLACE] TABLE` refuses to replace a view).
+fn fork_defer_statements(
+    lake_name: &str,
+    alias_name: &str,
+    defer: &windmill_common::workspaces::DucklakeForkDefer,
+    materialize_target: Option<&str>,
+    hidden_passwords: &mut Arc<Mutex<Vec<String>>>,
+) -> Result<Vec<String>> {
+    let mut stmts = vec![];
+    if defer.ancestors.is_empty() {
+        // Defer unavailable (an ancestor no longer defines this lake); the fork namespace
+        // still isolates writes.
+        return Ok(stmts);
+    }
+    for a in &defer.ancestors {
+        if let Some(pwd) = a.catalog_resource.get("password").and_then(|p| p.as_str()) {
+            hidden_passwords.lock().unwrap().push(pwd.to_string());
+        }
+        let db_type = match a.catalog.resource_type {
+            DucklakeCatalogResourceType::Instance => "postgres",
+            _ => a.catalog.resource_type.as_ref(),
+        };
+        stmts.push(get_attach_db_install_str(db_type)?.to_string());
+        let conn_str =
+            format_attach_db_conn_str(a.catalog_resource.clone(), db_type)?.replace('\'', "''");
+        let storage = a
+            .storage
+            .storage
+            .as_deref()
+            .unwrap_or(DEFAULT_STORAGE)
+            .replace('\'', "''");
+        let data_path = a.storage.path.replace('\'', "''");
+        let metadata_schema = a
+            .metadata_schema
+            .as_ref()
+            .map(|s| format!(", METADATA_SCHEMA '{}'", s.replace('\'', "''")))
+            .unwrap_or_default();
+        // The ancestor config's own non-reserved args (e.g. `ENCRYPTED true`) — an
+        // option-dependent lake wouldn't attach without them. Emitted FIRST: DuckDB keeps the
+        // last occurrence of a duplicated option, so the fork-owned DATA_PATH / READ_ONLY /
+        // METADATA_SCHEMA after them always win.
+        let extra_args = a
+            .extra_args
+            .as_ref()
+            .map(|e| format!("{e}, "))
+            .unwrap_or_default();
+        // READ_ONLY: a fork job must never write an ancestor namespace. No AUTOMATIC_MIGRATION
+        // / CREATE_IF_NOT_EXISTS: an ancestor lake that would need creating or migrating fails
+        // loudly rather than being mutated from a fork. IF NOT EXISTS: several ATTACH blocks in
+        // one script (e.g. the user's + the materialize synthetic one) emit the same ancestors.
+        stmts.push(format!(
+            "ATTACH IF NOT EXISTS 'ducklake:{db_type}:{conn_str}' AS {} ({extra_args}DATA_PATH 's3://{storage}/{data_path}', OVERRIDE_DATA_PATH TRUE, READ_ONLY{metadata_schema});",
+            a.alias
+        ));
+    }
+    let parent_alias = &defer.ancestors[0].alias;
+    let target_table = materialize_target.and_then(|ap| {
+        let (l, t) = ap.split_once('/')?;
+        (l == lake_name).then_some(t)
+    });
+    let mut created_schemas = std::collections::HashSet::new();
+    for dt in &defer.defer_tables {
+        if Some(dt.table.as_str()) == target_table {
+            continue;
+        }
+        // Each view targets the NEAREST ancestor that physically owns the table (a direct
+        // parent that itself defers has no copy to bind against). Out-of-range index (never
+        // produced by the resolver, but the field crosses the agent wire) falls back to the
+        // direct parent rather than panicking.
+        let owner_alias = defer
+            .ancestors
+            .get(dt.ancestor_idx as usize)
+            .map(|a| a.alias.as_str())
+            .unwrap_or(parent_alias);
+        if let Some((schema, _)) = dt.table.rsplit_once('.') {
+            if created_schemas.insert(schema) {
+                stmts.push(format!(
+                    "CREATE SCHEMA IF NOT EXISTS {alias_name}.{};",
+                    quote_qualified_table(schema)
+                ));
+            }
+        }
+        let q = quote_qualified_table(&dt.table);
+        stmts.push(format!(
+            "CREATE VIEW IF NOT EXISTS {alias_name}.{q} AS SELECT * FROM {owner_alias}.{q};"
+        ));
+        if dt.with_current_view {
+            let qc = quote_qualified_table(&current_companion(&dt.table));
+            stmts.push(format!(
+                "CREATE VIEW IF NOT EXISTS {alias_name}.{qc} AS SELECT * FROM {owner_alias}.{qc};"
+            ));
+        }
+    }
+    if let Some(t) = target_table {
+        // View→table transition: replace the target's defer view(s) with the real table this
+        // job writes (`CREATE [OR REPLACE] TABLE` refuses to replace a view). Keyed on the
+        // catalog's ACTUAL live views — not on recorded materialization status, which after a
+        // failed run can't tell a defer view from a real table, and a mismatched DROP VIEW
+        // would wedge the asset. `_current` is dropped too when it is a view — SCD2 codegen
+        // recreates it with `IF NOT EXISTS`, which would otherwise silently keep a view over
+        // the parent.
+        for name in [t.to_string(), current_companion(t)] {
+            if defer.fork_views.iter().any(|v| v == &name) {
+                stmts.push(format!(
+                    "DROP VIEW IF EXISTS {alias_name}.{};",
+                    quote_qualified_table(&name)
+                ));
+            }
+        }
+    }
+    Ok(stmts)
 }
 
 async fn transform_attach_datatable(
@@ -2036,6 +2204,198 @@ pub struct Arg {
 mod tests {
     use super::*;
 
+    fn test_ancestor(wid: &str) -> windmill_common::workspaces::DucklakeAncestorAttach {
+        windmill_common::workspaces::DucklakeAncestorAttach {
+            workspace_id: wid.to_string(),
+            alias: format!("__wm_dl_lake_{}_abcd1234", wid.replace('-', "_")),
+            catalog: windmill_common::workspaces::DucklakeCatalog {
+                resource_type: windmill_common::workspaces::DucklakeCatalogResourceType::Instance,
+                resource_path: "cat_db".to_string(),
+            },
+            catalog_resource: serde_json::json!({
+                "host": "h", "dbname": "cat_db", "user": "u", "password": "pw"
+            }),
+            storage: windmill_common::workspaces::DucklakeStorage {
+                storage: None,
+                path: "lake".to_string(),
+            },
+            metadata_schema: None,
+            extra_args: None,
+        }
+    }
+
+    fn test_fork_defer_chain(
+        ancestor_wids: Vec<&str>,
+        defer_tables: Vec<(&str, bool, u32)>,
+        fork_views: Vec<&str>,
+    ) -> windmill_common::workspaces::DucklakeForkDefer {
+        windmill_common::workspaces::DucklakeForkDefer {
+            ancestors: ancestor_wids.into_iter().map(test_ancestor).collect(),
+            defer_tables: defer_tables
+                .into_iter()
+                .map(
+                    |(t, cur, idx)| windmill_common::materialization::ForkDeferTable {
+                        table: t.to_string(),
+                        with_current_view: cur,
+                        ancestor_idx: idx,
+                    },
+                )
+                .collect(),
+            fork_views: fork_views.into_iter().map(str::to_string).collect(),
+        }
+    }
+
+    fn test_fork_defer(
+        defer_tables: Vec<(&str, bool)>,
+        fork_views: Vec<&str>,
+    ) -> windmill_common::workspaces::DucklakeForkDefer {
+        test_fork_defer_chain(
+            vec!["parent-ws"],
+            defer_tables.into_iter().map(|(t, c)| (t, c, 0)).collect(),
+            fork_views,
+        )
+    }
+
+    #[test]
+    fn test_fork_defer_statements_ancestor_extra_args() {
+        // The ancestor config's own args (e.g. ENCRYPTED) must ride on its read-only attach —
+        // BEFORE the fork-owned options, so DuckDB's last-occurrence-wins keeps DATA_PATH /
+        // READ_ONLY / METADATA_SCHEMA authoritative even if the args tried to override them.
+        let mut defer = test_fork_defer(vec![("orders", false)], vec![]);
+        defer.ancestors[0].extra_args = Some("ENCRYPTED true".to_string());
+        let mut hp = Arc::new(Mutex::new(vec![]));
+        let stmts = fork_defer_statements("lake", "dl", &defer, None, &mut hp).unwrap();
+        let attach = stmts
+            .iter()
+            .find(|s| s.starts_with("ATTACH IF NOT EXISTS"))
+            .unwrap();
+        assert!(attach.contains("(ENCRYPTED true, DATA_PATH "), "{attach}");
+        assert!(
+            attach.find("ENCRYPTED true").unwrap() < attach.find("READ_ONLY").unwrap(),
+            "{attach}"
+        );
+    }
+
+    #[test]
+    fn test_fork_defer_statements_chained_ancestors() {
+        // fork → parent → root: `orders` was only materialized in the root (idx 1) — its view
+        // must target the ROOT alias (the parent has no physical copy); `daily` owned by the
+        // direct parent (idx 0) targets the parent alias. Out-of-range idx falls back to the
+        // direct parent instead of panicking.
+        let defer = test_fork_defer_chain(
+            vec!["parent-ws", "root-ws"],
+            vec![("orders", false, 1), ("daily", false, 0), ("oob", false, 9)],
+            vec![],
+        );
+        let mut hp = Arc::new(Mutex::new(vec![]));
+        let stmts = fork_defer_statements("lake", "dl", &defer, None, &mut hp).unwrap();
+        let joined = stmts.join("\n");
+        assert!(
+            joined.contains(
+                "CREATE VIEW IF NOT EXISTS dl.\"orders\" AS SELECT * FROM __wm_dl_lake_root_ws_abcd1234.\"orders\""
+            ),
+            "{joined}"
+        );
+        assert!(
+            joined.contains(
+                "CREATE VIEW IF NOT EXISTS dl.\"daily\" AS SELECT * FROM __wm_dl_lake_parent_ws_abcd1234.\"daily\""
+            ),
+            "{joined}"
+        );
+        assert!(
+            joined.contains(
+                "CREATE VIEW IF NOT EXISTS dl.\"oob\" AS SELECT * FROM __wm_dl_lake_parent_ws_abcd1234.\"oob\""
+            ),
+            "{joined}"
+        );
+        // Both ancestors attached read-only.
+        assert_eq!(
+            joined.matches("ATTACH IF NOT EXISTS").count(),
+            2,
+            "{joined}"
+        );
+    }
+
+    #[test]
+    fn test_fork_defer_statements_shape() {
+        let defer = test_fork_defer(vec![("orders", false), ("dim", true)], vec![]);
+        let mut hp = Arc::new(Mutex::new(vec![]));
+        let stmts = fork_defer_statements("lake", "dl", &defer, None, &mut hp).unwrap();
+        let joined = stmts.join("\n");
+        // Ancestor attach: read-only, idempotent, never auto-migrating or auto-creating.
+        assert!(joined.contains("ATTACH IF NOT EXISTS"), "{joined}");
+        assert!(joined.contains("READ_ONLY"), "{joined}");
+        assert!(!joined.contains("AUTOMATIC_MIGRATION"), "{joined}");
+        assert!(!joined.contains("CREATE_IF_NOT_EXISTS"), "{joined}");
+        // Ancestor catalog password is hidden from logs.
+        assert_eq!(hp.lock().unwrap().as_slice(), ["pw"]);
+        // Defer views over the parent alias, plus the SCD2 `_current` companion.
+        assert!(
+            joined.contains(
+                "CREATE VIEW IF NOT EXISTS dl.\"orders\" AS SELECT * FROM __wm_dl_lake_parent_ws_abcd1234.\"orders\""
+            ),
+            "{joined}"
+        );
+        assert!(joined.contains("dl.\"dim_current\""), "{joined}");
+        // No target → no transition drops.
+        assert!(!joined.contains("DROP VIEW"), "{joined}");
+    }
+
+    #[test]
+    fn test_fork_defer_statements_target_transition() {
+        // Target currently a defer view → skip its CREATE, drop the view (+ companion).
+        let defer = test_fork_defer(vec![("orders", false)], vec!["orders", "orders_current"]);
+        let mut hp = Arc::new(Mutex::new(vec![]));
+        let stmts =
+            fork_defer_statements("lake", "_wm_target", &defer, Some("lake/orders"), &mut hp)
+                .unwrap();
+        let joined = stmts.join("\n");
+        assert!(!joined.contains("CREATE VIEW"), "{joined}");
+        assert!(
+            joined.contains("DROP VIEW IF EXISTS _wm_target.\"orders\";"),
+            "{joined}"
+        );
+        assert!(
+            joined.contains("DROP VIEW IF EXISTS _wm_target.\"orders_current\";"),
+            "{joined}"
+        );
+
+        // Target already a real table (NOT in fork_views, e.g. after a failed re-run whose
+        // status can't be trusted) → no DROP VIEW, or the job would wedge on a type mismatch.
+        let defer = test_fork_defer(vec![("orders", false)], vec![]);
+        let stmts =
+            fork_defer_statements("lake", "_wm_target", &defer, Some("lake/orders"), &mut hp)
+                .unwrap();
+        assert!(!stmts.join("\n").contains("DROP VIEW"), "{stmts:?}");
+
+        // Target in a different lake → this lake's defer views are untouched.
+        let defer = test_fork_defer(vec![("orders", false)], vec!["orders"]);
+        let stmts =
+            fork_defer_statements("lake", "dl", &defer, Some("other/orders"), &mut hp).unwrap();
+        let joined = stmts.join("\n");
+        assert!(
+            joined.contains("CREATE VIEW IF NOT EXISTS dl.\"orders\""),
+            "{joined}"
+        );
+        assert!(!joined.contains("DROP VIEW"), "{joined}");
+    }
+
+    #[test]
+    fn test_fork_defer_statements_schema_qualified() {
+        let defer = test_fork_defer(vec![("staging.raw", false)], vec![]);
+        let mut hp = Arc::new(Mutex::new(vec![]));
+        let stmts = fork_defer_statements("lake", "dl", &defer, None, &mut hp).unwrap();
+        let joined = stmts.join("\n");
+        assert!(
+            joined.contains("CREATE SCHEMA IF NOT EXISTS dl.\"staging\";"),
+            "{joined}"
+        );
+        assert!(
+            joined.contains("CREATE VIEW IF NOT EXISTS dl.\"staging\".\"raw\""),
+            "{joined}"
+        );
+    }
+
     fn mrow(name: &str, params: &str, body: &str, is_table: bool, provider: &str) -> MacroRow {
         MacroRow {
             name: name.to_string(),
diff --git a/docs/pipeline-env-isolation.md b/docs/pipeline-env-isolation.md
new file mode 100644
index 0000000000..2b6b87ba68
--- /dev/null
+++ b/docs/pipeline-env-isolation.md
@@ -0,0 +1,219 @@
+# Fork data environments for pipeline materialization ("dev data")
+
+Status: **implemented** (branch `pipeline-env-isolation`). Companion to
+[`ducklake-materialization.md`](./ducklake-materialization.md).
+
+## The problem
+
+Workspace forks fork the CODE, but `// materialize ducklake://<lake>/<table>` targets are
+absolute pointers into shared physical storage. A fork clones `workspace_settings.ducklake`
+verbatim, so `transform_attach_ducklake` resolved a fork's `ducklake://main` to the **parent's
+catalog database and S3 data path** — deploying or running a materializing pipeline inside a
+fork wrote the production tables. dbt answers this with target schemas + `--defer`; datatables
+already have a fork answer (`forked_datatables` → `wm_fork_*` databases + a drop endpoint);
+ducklake had none. `wmill pipeline run --local` only covers preview runs, and previews still
+resolve targets against the real workspace.
+
+## The design
+
+Everything hangs off two DuckLake ATTACH capabilities (verified in a spike, DuckDB 1.5.4 +
+current ducklake extension): `METADATA_SCHEMA` (the catalog's metadata tables live in a chosen
+pg schema of the same catalog DB — auto-created on first attach; default is `public`) and
+`READ_ONLY`, plus catalog-stored views that may reference other attached catalogs and rebind
+per session.
+
+### Fork-time choice: isolated (default) vs shared, per lake
+
+The fork-creation dialog offers a per-lake data-environment choice (the section renders only
+when the parent workspace has lakes configured, mirroring the datatable section):
+
+- **Isolated** (default — also what unlisted lakes and API callers that omit the field get) —
+  the full behavior described below.
+- **Shared** — explicit opt-out: the fork reads and writes the parent's lake directly through
+  its cloned config, like a non-fork workspace (e.g. a fork meant to run prod-equivalent
+  backfills). Stamped as `fork_behavior: "shared"` on the lake entry in the fork's own
+  `workspace_settings.ducklake` at creation (`shared_ducklakes` on the create-fork request);
+  the resolver, the graph indicator, and (trivially — nothing registers) cleanup all key off
+  it. Shared also lifts the mysql-catalog restriction, since nothing needs namespacing.
+
+Absent-field-means-isolated keeps every pre-existing fork and API caller on the safe path.
+Sharing is a per-fork-creation choice, never inherited: the settings clone copies the source's
+config verbatim, so fork creation strips any cloned `fork_behavior` stamps before applying its
+own `shared_ducklakes` list — a fork of a shared fork defaults back to isolated. A
+shared fork ancestor in a fork chain resolves like a root (its data lives at its config's
+default location). Flipping a fork's lake to `shared` later (settings edit) orphans any
+namespace it already materialized until fork deletion cleans it — the registry row survives
+the flip.
+
+### Write redirect — one seam, no grammar changes
+
+`get_ducklake_from_db_unchecked` (windmill-common/src/workspaces.rs) is fork-aware: when the
+resolved workspace has a `parent_workspace_id` (throwaway `wm-fork-*` fork or standing dev
+workspace), the returned `DucklakeWithConnData` is namespaced **in its existing fields**:
+
+- `extra_args` += `METADATA_SCHEMA 'wm_fork_<mangled wid>_<mangled lake>_<hash8>'` —
+  injective, ≤63 chars, stable across releases (persisted state depends on it), and
+  **lake-scoped**: two lakes of one workspace may share a catalog database, and a
+  per-workspace schema would merge their namespaces in the fork;
+- `storage.path` = `__wm_forks/<fork segment>/<original path>` — the segment is the
+  mangled+hashed workspace id collapsed to ONE path component (fork ids are only
+  git-branch-safe and may contain `/`; used raw, `wm-fork-a/b` would nest inside sibling
+  `wm-fork-a`'s cleanup prefix) — a **bucket-root prefix**, not a
+  sub-path of the parent's DATA_PATH, because lake maintenance
+  (`ducklake_delete_orphaned_files`, snapshot expiry) scans everything under the parent's path
+  and would delete live fork files nested there.
+
+Folding the redirect into existing fields means the EE agent-worker endpoint (which just
+serializes this struct) needs **no changes**, and an agent worker running an older binary still
+writes the fork namespace — it only misses the defer views (reads fail loudly; never a prod
+write). Every ducklake access funnels through the same ATTACH transform — the managed
+materialize's synthetic `_wm_target` attach, `materialize manual`, raw user SQL, and all UI
+preview / History / backfill surfaces (they are `WM_INTERNAL_DB_*` marker preview jobs) — so a
+fork cannot reach the parent namespace through the managed path at all.
+
+Hardening: in fork mode, user- and settings-supplied `METADATA_SCHEMA` / `DATA_PATH` /
+`OVERRIDE_DATA_PATH` ATTACH options are stripped before injection (DuckDB silently keeps the
+*last* occurrence of a duplicated option, so a duplicate would escape the namespace).
+MySQL-catalog lakes error loudly in forks (no pg schemas to namespace with) rather than ever
+writing the shared catalog.
+
+### Read-defer — iterate on one node without rebuilding upstream
+
+In a fork, `transform_attach_ducklake` additionally emits:
+
+1. `ATTACH IF NOT EXISTS … AS __wm_dl_<lake>_<ancestor>_<hash> ([<ancestor's own args>, ]
+   DATA_PATH <ancestor's>, OVERRIDE_DATA_PATH TRUE, READ_ONLY[, METADATA_SCHEMA
+   <ancestor's>])` per fork-chain ancestor, resolved from the **ancestor's own settings**
+   (fork-side settings drift can't repoint what "parent" means). The ancestor config's
+   non-reserved `extra_args` (e.g. `ENCRYPTED true`) ride along — FIRST, so the fork-owned
+   options win under DuckDB's last-occurrence-wins. No
+   `AUTOMATIC_MIGRATION`/`CREATE_IF_NOT_EXISTS` — a fork job must never mutate an ancestor
+   lake. `READ_ONLY` makes prod writes *physically impossible* through ducklake, including in
+   `materialize manual` and raw SQL. Fork ancestors whose namespace was never bootstrapped are
+   skipped, with existence checked in each ancestor's OWN catalog database (a fork whose
+   catalog drifted away from an ancestor's must not misread that ancestor's namespace as
+   missing); an unreachable ancestor catalog only disables that ancestor's defer.
+2. `CREATE VIEW IF NOT EXISTS <alias>.<table> AS SELECT * FROM <owning ancestor
+   alias>.<table>` for every **deferred table**: (`materialized_partition` rows with
+   `status = 'materialized'` anywhere in the ancestor chain) MINUS (the fork's own rows). Each
+   view targets the NEAREST ancestor that physically owns the table
+   (`ForkDeferTable.ancestor_idx`): in a `fork → parent → root` chain where only the root
+   materialized a table, the parent has no copy (it defers too), so a view over the parent
+   would not bind. SCD2 owners (detected by the `is_current` column in the owning ancestor's
+   latest captured `materialized_asset_schema`) also get the `<table>_current` companion view.
+   So a consumer reading `dl.orders` transparently reads the nearest owning ancestor's current
+   data until the fork materializes `orders` itself.
+3. When the running job's managed materialize targets a table that currently exists **as a
+   view** in the fork namespace, the view (and its `_current` companion) is dropped after the
+   target attach — the first fork materialize replaces the defer view with a real fork table
+   (`CREATE [OR REPLACE] TABLE` refuses to replace a view — verified — so without the drop the
+   transition fails; with it, `sql_materialize.rs` codegen needs no fork awareness at all).
+   The is-it-a-view decision keys on the catalog's ACTUAL live views (`ducklake_view`, read at
+   resolution time into `fork_defer.fork_views`), **not** on recorded materialization status:
+   after a failed run the status cannot distinguish a defer view from a real table, and a
+   mismatched `DROP VIEW` (or skipped drop) would wedge the asset on every retry — found live
+   in e2e when a storage failure flipped a fork asset's status to `Failed`.
+
+The graph shows the state per ducklake asset in a fork: an amber ↗ chip = *deferred* (some ancestor in the chain
+owns the table),
+an emerald fork chip = *fork-materialized* (`fork_materialization` on the `/assets/graph`
+response, computed from fork + parent `materialized_partition`; the parent's rows are read on
+the plain pool since fork membership doesn't imply parent membership). The details pane shows
+the equivalent banner.
+
+### Lifecycle & cleanup
+
+A sidecar registry `fork_ducklake_namespace(workspace_id, ducklake_name,
+metadata_schema, catalog, storage, storage_ref, data_path)` is upserted (behind a TTL'd in-process cache, keyed
+per workspace and invalidated whenever a workspace's registry rows are cleaned up — a same-id fork recreated
+within the TTL must re-register or its namespace would be orphaned at its own deletion) on fork
+resolution, **one row per physical location ever attached** — its PK includes
+`(catalog, storage, storage_ref, data_path)`, so if the fork's lake settings drift, later attaches add rows rather
+than replace them and cleanup covers every location the fork wrote, not just the first — connecting to the
+REGISTERED catalog identity and deleting files from the REGISTERED storage identity
+(`storage_ref`, resolved from the logical storage name at attach time), never whatever the
+fork's settings point at by deletion time. Explicit
+`GRANT`s ship in the same migration; the registry is not cloned into sub-forks.
+
+The registry has deliberately **no FK to `workspace`**: rows are the durable cleanup ledger and
+outlive the workspace row when physical cleanup fails after the delete commits (unreachable
+catalog, storage outage) — each row is deleted only after its schema + data cleanup succeed.
+Fork **creation** retries any leftover rows for the reused id and refuses to proceed while a
+metadata schema still cannot be dropped, so a recreated same-id fork can never silently
+reattach stale tables. Data-file leftovers alone don't block: a deleted fork's `$res:` storage
+resource is gone forever, but once the schema is dropped the files are inert — the surviving
+row keeps them tracked and the next successful cleanup of the same prefix (typically the
+recreated fork's own deletion, with live credentials) sweeps them.
+
+Retries after the fork is gone get two aids: the row's `schema_dropped` phase flag (set when
+the schema dropped but data cleanup failed; retries then skip the schema phase and need no
+catalog credentials — registration resets it on re-attach, which recreates the schema), and
+`$res:` fallback resolution against the workspace being forked (the deleted fork's resources
+were clones of a parent's, so the new parent is the natural credential donor).
+
+`POST /w/{fork}/workspaces/drop_forked_ducklake_namespaces` (same permissions as
+`delete_workspace` via a shared gate: fork owner or superadmin, plus parent-prod-admin when the
+fork is an attached dev workspace) drops each registered pg metadata schema
+(`DROP SCHEMA … CASCADE` on the catalog connection, hard-guarded on the `wm_fork_` prefix) and
+deletes the `__wm_forks/<fork segment>/…` objects in the workspace storage (hard-guarded on that
+prefix; `parquet` feature). The fork-deletion UI calls it next to
+`drop_forked_datatable_databases`, for the fork and for deleted child forks. Registry rows are
+deleted per-lake only after both cleanups succeed, so a partial failure is retryable.
+
+## Semantics & caveats (by design)
+
+- **Orphaned forks stay isolated.** `parent_workspace_id` is `ON DELETE SET NULL`, so a
+  `wm-fork-*` workspace can outlive its parent. Its ancestor chain is then empty, but its cloned
+  config still points at the shared lake — so fork resolution keys on the `wm-fork-` prefix as
+  well as the chain (mirroring `workspace_is_fork`). An orphaned fork gets the write redirect,
+  registration and cleanup but no defer views; pre-orphaning defer views fail loudly at bind and
+  flip to real tables on first materialize. The same rule applies to a fork's *ancestors*: a
+  last-in-chain `wm-fork-*` ancestor is an orphaned fork (not a root) and its READ_ONLY attach
+  targets its fork namespace, not its cloned base config. Prefix-less dev workspaces cannot be
+  orphaned (deleting their prod is blocked while attached).
+- **Defer is live, not snapshot-pinned.** A deferred read sees the parent's *current* table —
+  the same trade dbt `--defer` makes. Snapshot-pinned defer could later ride on the recorded
+  `snapshot_id`s.
+- **Defer granularity is per-table.** Materializing one partition in the fork makes the fork's
+  table authoritative for *all* partitions (the rest are empty until backfilled in the fork).
+- **Incremental strategies start empty in a fork.** `merge`/`append`/SCD2 create a fresh table
+  on first fork run — no parent rows are inherited, and fork SCD2 history diverges from the
+  parent's. Copy-on-fork seeding would be a follow-up opt-in.
+- **Only tracked tables defer.** A parent table with no `materialized_partition` row (raw SQL
+  writes outside `// materialize`) or whose latest run `Failed` is not deferred — defer views
+  bind at CREATE against the parent catalog, and a view on a missing table would fail every
+  unrelated fork job. Such tables read as absent in the fork.
+- **Transient race.** Between a fork materialize's commit and its state recording, a concurrent
+  fork job may still emit `CREATE VIEW IF NOT EXISTS` for that table — which silently yields to
+  an existing table (verified), so the race is a no-op.
+- **Accident prevention, not a security boundary.** A fork holds the parent's cloned
+  credentials by design; a determined fork user can still `ATTACH 'postgres:…'` with the cloned
+  catalog resource or `COPY TO 's3://…'` directly. The isolation guarantees are scoped to the
+  managed ducklake path (where they are physical: READ_ONLY parent attach + separate metadata
+  schema + separate data prefix).
+- **Fork chains** compose: each ancestor namespace is attached under a deterministic alias, and
+  a parent's own defer views (referencing *its* parent's alias) rebind correctly in the
+  grandchild's session because the whole chain is attached.
+- **Datatables are out of scope** — the existing `forked_datatables` chooser at fork creation
+  covers them (`keep_original` remains their default, which shares the parent DB; picking
+  `schema_only` there is the datatable analog of this feature).
+
+## Key files
+
+- `backend/windmill-common/src/workspaces.rs` — fork resolution (`fork_scoped_ducklake`),
+  `fork_ancestor_chain`, naming (`fork_ducklake_metadata_schema`,
+  `fork_ducklake_ancestor_alias`, `fork_data_path`), option stripping, registry.
+- `backend/windmill-common/src/materialization.rs` — `list_fork_defer_tables`.
+- `backend/windmill-worker/src/duckdb_executor.rs` — `fork_defer_statements` (ancestor
+  attaches, defer views, target transition), user-arg stripping.
+- `backend/windmill-api-assets/src/lib.rs` — `fork_materialization` on the graph.
+- `backend/windmill-api-workspaces/src/workspaces_extra.rs` —
+  `drop_forked_ducklake_namespaces`.
+- `backend/windmill-api-workspaces/src/workspaces.rs` — `clone_asset_usages_and_triggers`:
+  `asset` + `script_trigger` rows are deploy-derived and were never cloned into forks, so a
+  fork's pipeline graph had no asset nodes/edges and its dispatch cascade never fired (fixed
+  here because this feature is unusable without it).
+- `backend/migrations/20260703170745_fork_ducklake_namespace.*` — registry + GRANTs.
+- Frontend: `AssetGraph/{types.ts,AssetNode.svelte,AssetGraphCanvas.svelte,
+  AssetGraphDetailsPane.svelte}`, `pipeline/[folder]/+page.svelte`,
+  `sidebar/SidebarContent.svelte` (fork-delete wiring).
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index 6352e6adc9..41f5ddc3f5 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -330,6 +330,7 @@
 				data: {
 					asset_kind: a.kind,
 					path: a.path,
+					fork_materialization: a.fork_materialization,
 					onAddScript: onAddScriptForAsset,
 					pathPrefix,
 					defaultPathSuffix,
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
index c9b921be2e..095169e3b7 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
@@ -8,9 +8,11 @@
 	import { formatAssetKind, type AssetWithAltAccessType } from '$lib/components/assets/lib'
 	import {
 		AlertTriangle,
+		ArrowUpRight,
 		Code2,
 		ExternalLink,
 		GitBranch,
+		GitFork,
 		Loader2,
 		PanelRightClose,
 		Save,
@@ -147,6 +149,11 @@
 		// `replace` producer). Forwarded to the Schema tab: version history when
 		// true, a single fixed-schema view when false. Defaults to true (unknown).
 		schemaCanEvolve?: boolean
+		// Fork workspaces: data-environment state of the selected ducklake asset
+		// ('fork' = materialized here, 'deferred' = reads the parent's current
+		// data). Pulled from the graph node by the parent page, like
+		// `schemaCanEvolve`. Undefined outside forks.
+		selectionForkMaterialization?: 'fork' | 'deferred'
 		// Producer-side facts for the editor's live schema-contract diagnostics
 		// (ignore suppression + scd2 `_current` fallback), built by the page from
 		// the resolved graph and forwarded to ScriptEditor.
@@ -259,6 +266,7 @@
 		selectionProducers = [],
 		selectionColumnGraph,
 		schemaCanEvolve = true,
+		selectionForkMaterialization = undefined,
 		schemaContractContext = undefined,
 		runsRefreshKey,
 		runsPendingJobId,
@@ -1065,6 +1073,31 @@
 								     selected snapshot / tab instead of carrying state across. -->
 								{#key selection.path}
 									<div class="flex flex-col h-full overflow-auto">
+										{#if selectionForkMaterialization === 'deferred'}
+											<!-- Fork data environment: this asset has no fork copy yet;
+											     jobs here read the PARENT's live table through a defer
+											     view. Partition grid / history below reflect the (empty)
+											     fork namespace, hence the explicit callout. -->
+											<div
+												class="shrink-0 flex items-center gap-2 px-3 py-1.5 text-2xs bg-amber-50 dark:bg-amber-950/40 border-b border-amber-200 dark:border-amber-900/60 text-amber-700 dark:text-amber-300"
+											>
+												<ArrowUpRight size={12} class="shrink-0" />
+												<span class="truncate">
+													Deferred to parent workspace — reads its current data (not
+													snapshot-pinned). Materialize this node in the fork to iterate on it.
+												</span>
+											</div>
+										{:else if selectionForkMaterialization === 'fork'}
+											<div
+												class="shrink-0 flex items-center gap-2 px-3 py-1.5 text-2xs bg-emerald-50 dark:bg-emerald-950/40 border-b border-emerald-200 dark:border-emerald-900/60 text-emerald-700 dark:text-emerald-300"
+											>
+												<GitFork size={12} class="shrink-0" />
+												<span class="truncate">
+													Materialized in this fork — reads and writes use the fork's isolated
+													namespace; the parent workspace's table is untouched.
+												</span>
+											</div>
+										{/if}
 										{#if selectionColumnGraph && assetColumnNodes(selectionColumnGraph, selection.asset_kind, selection.path).length > 0}
 											<div class="border-b shrink-0">
 												<ColumnLineageTrace
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
index b5cba208e1..974108c4b5 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
@@ -5,7 +5,7 @@
 	import { formatShortAssetPath, type AssetKind } from '$lib/components/assets/lib'
 	import { NODE } from '$lib/components/graph/util'
 	import PipelineInsertMenu, { type PipelineInsertPick } from './PipelineInsertMenu.svelte'
-	import { Code2, Play, Loader2, Plus } from 'lucide-svelte'
+	import { ArrowUpRight, Code2, GitFork, Play, Loader2, Plus } from 'lucide-svelte'
 	import type { ScriptLang } from '$lib/gen'
 	import { workspaceStore } from '$lib/stores'
 	import { sendUserToast } from '$lib/utils'
@@ -26,6 +26,9 @@
 		data: {
 			asset_kind: AssetKind
 			path: string
+			// Fork workspaces: 'fork' = materialized in this fork, 'deferred' =
+			// reads fall back to the parent workspace's current data.
+			fork_materialization?: 'fork' | 'deferred'
 			onAddScript?: (
 				asset: { kind: AssetKind; path: string },
 				language: ScriptLang,
@@ -134,6 +137,25 @@
 		<span class="flex-1 min-w-0 pr-1 py-0.5 text-2xs font-mono text-emphasis truncate">
 			{formatShortAssetPath(asset)}
 		</span>
+		<!-- Fork data-environment marker: amber ↗ = deferred (reads the parent
+		     workspace's current table via a view), emerald fork glyph = the fork
+		     materialized its own copy. Icon-only — the pill truncates its path
+		     already, a labeled chip wouldn't fit; the title carries the meaning. -->
+		{#if data.fork_materialization === 'deferred'}
+			<span
+				class="shrink-0 mr-1.5 text-amber-600 dark:text-amber-400"
+				title="Deferred to parent workspace: reads the parent's current data. Materialize it in this fork to iterate on it."
+			>
+				<ArrowUpRight size={12} />
+			</span>
+		{:else if data.fork_materialization === 'fork'}
+			<span
+				class="shrink-0 mr-1.5 text-emerald-600 dark:text-emerald-500"
+				title="Materialized in this fork: reads and writes use the fork's isolated copy."
+			>
+				<GitFork size={12} />
+			</span>
+		{/if}
 	</div>
 	{#if showActions}
 		<!-- Run button revealed on hover/select. Floats off the LEFT edge —
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
index 042c06144d..6e6a694e82 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
@@ -74,6 +74,7 @@
 		selectionProducers = [],
 		selectionColumnGraph,
 		schemaCanEvolve = true,
+		selectionForkMaterialization = undefined,
 		schemaContractContext = undefined,
 		downstreamSubscribers = 0,
 		onStartBoundedRunForOpen,
@@ -172,6 +173,8 @@
 		/** Transitive column-lineage trace for a selected ducklake asset (route page). */
 		selectionColumnGraph?: ColumnLineageGraph
 		schemaCanEvolve?: boolean
+		/** Fork workspaces: data-environment state of the selected ducklake asset (route page). */
+		selectionForkMaterialization?: 'fork' | 'deferred'
 		/** Producer-side facts for the editor's live schema-contract diagnostics
 		 * (ignore suppression + scd2 `_current` fallback), from the route page. */
 		schemaContractContext?: SchemaContractGraphContext
@@ -491,6 +494,7 @@
 						selectionProducers={activeDraft ? [] : selectionProducers}
 						{selectionColumnGraph}
 						{schemaCanEvolve}
+						{selectionForkMaterialization}
 						{schemaContractContext}
 						{runsRefreshKey}
 						{runsPendingJobId}
diff --git a/frontend/src/lib/components/assets/AssetGraph/types.ts b/frontend/src/lib/components/assets/AssetGraph/types.ts
index f393686e24..9d4db75861 100644
--- a/frontend/src/lib/components/assets/AssetGraph/types.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/types.ts
@@ -6,6 +6,11 @@ export type GraphUsageKind = 'script' | 'flow'
 export interface AssetGraphAssetNode {
 	kind: AssetKind
 	path: string
+	// Fork workspaces only: 'fork' when this ducklake asset was materialized in
+	// the fork itself, 'deferred' when reads fall back to the parent workspace's
+	// current table via a defer view. Absent outside forks / for other kinds /
+	// when never materialized anywhere. Lockstep with Rust `GraphAssetNode`.
+	fork_materialization?: 'fork' | 'deferred'
 }
 
 export interface AssetGraphRunnableNode {
diff --git a/frontend/src/lib/components/sidebar/SidebarContent.svelte b/frontend/src/lib/components/sidebar/SidebarContent.svelte
index 395ce00fa2..82f48c35b6 100644
--- a/frontend/src/lib/components/sidebar/SidebarContent.svelte
+++ b/frontend/src/lib/components/sidebar/SidebarContent.svelte
@@ -138,9 +138,28 @@
 			}
 		}
 
+		// Fork-scoped ducklake namespaces (metadata schemas + data files) — driven by the
+		// backend registry, so no per-lake selection is needed. Best-effort: a failure is
+		// surfaced but doesn't block the workspace delete (the registry rows survive a
+		// failed cleanup and re-creating the same fork id retries it — the toast tells the
+		// user something was left behind).
+		try {
+			const dlErrors = await WorkspaceService.dropForkedDucklakeNamespaces({ workspace })
+			for (const err of dlErrors) {
+				sendUserToast(err, true)
+			}
+		} catch (err) {
+			sendUserToast(`Failed to drop fork ducklake namespaces: ${err}`, true)
+		}
+
 		if (deleteForkedChildren && forkedDescendants.length > 0) {
 			for (const child of forkedDescendants) {
 				try {
+					await WorkspaceService.dropForkedDucklakeNamespaces({ workspace: child.id }).then(
+						(errs) => errs.forEach((e) => sendUserToast(e, true)),
+						(err) =>
+							sendUserToast(`Failed to drop fork ducklake namespaces of ${child.id}: ${err}`, true)
+					)
 					await WorkspaceService.deleteWorkspace({ workspace: child.id })
 				} catch (err) {
 					sendUserToast(`Failed to delete forked child ${child.id}: ${err}`, true)
diff --git a/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte b/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte
index 2012870d3a..34f0277c4f 100644
--- a/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte
+++ b/frontend/src/lib/components/workspaceSettings/CreateWorkspaceInner.svelte
@@ -38,6 +38,7 @@
 	import { base } from '$lib/base'
 	import Label from '../Label.svelte'
 	import ForkDatatableSection from './ForkDatatableSection.svelte'
+	import ForkDucklakeSection from './ForkDucklakeSection.svelte'
 
 	interface Props {
 		isFork?: boolean
@@ -92,6 +93,7 @@
 	let checking = $state(false)
 
 	let forkDatatableSection: ReturnType<typeof ForkDatatableSection> | undefined = $state(undefined)
+	let forkDucklakeSection: ReturnType<typeof ForkDucklakeSection> | undefined = $state(undefined)
 
 	let workspaceColor: string | undefined = $state(undefined)
 	let colorEnabled = $state(false)
@@ -304,6 +306,7 @@
 					name,
 					color: colorEnabled && workspaceColor ? workspaceColor : undefined,
 					forked_datatables: forkedDatatables,
+					shared_ducklakes: forkDucklakeSection?.getSharedDucklakes() ?? [],
 					is_dev_workspace: createAsDevWorkspace,
 					lock_prod_deploy: createAsDevWorkspace && lockProdDeploy,
 					lock_prod_forking: createAsDevWorkspace && lockProdForking,
@@ -666,6 +669,7 @@
 						forkCreationLoading = false
 					}}
 				/>
+				<ForkDucklakeSection bind:this={forkDucklakeSection} />
 			{/if}
 			{#if !automateUsernameCreation}
 				<Label label="Your username in that workspace">
diff --git a/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte b/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte
index 3ba4e9a213..a0d29af434 100644
--- a/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte
+++ b/frontend/src/lib/components/workspaceSettings/DucklakeSettings.svelte
@@ -21,6 +21,10 @@
 				path: string
 			}
 			extra_args?: string
+			// Fork workspaces only — stamped at fork creation, absent = isolated.
+			// Not editable here, but it MUST round-trip through save or a settings
+			// save in a shared fork would silently flip the lake to isolated.
+			fork_behavior?: 'isolated' | 'shared'
 			maintenance?: DucklakeMaintenanceType
 		}[]
 	}
@@ -54,6 +58,7 @@
 				catalog: ducklake.catalog,
 				storage: ducklake.storage,
 				extra_args: ducklake.extra_args || undefined,
+				fork_behavior: ducklake.fork_behavior,
 				maintenance: ducklake.maintenance
 			}
 		}
@@ -62,7 +67,15 @@
 </script>
 
 <script lang="ts">
-	import { AlertTriangle, ExternalLink, Plus, SettingsIcon, Wrench } from 'lucide-svelte'
+	import {
+		AlertTriangle,
+		ArrowUpRight,
+		ExternalLink,
+		GitFork,
+		Plus,
+		SettingsIcon,
+		Wrench
+	} from 'lucide-svelte'
 
 	import Button from '../common/button/Button.svelte'
 	import SettingsFooter from './SettingsFooter.svelte'
@@ -78,7 +91,7 @@
 	import { ScheduleService, SettingService, WorkspaceService } from '$lib/gen'
 	import type { GetSettingsResponse } from '$lib/gen'
 
-	import { enterpriseLicense, workspaceStore } from '$lib/stores'
+	import { enterpriseLicense, userWorkspaces, workspaceStore } from '$lib/stores'
 	import { base } from '$app/paths'
 	import Toggle from '../Toggle.svelte'
 	import { sendUserToast } from '$lib/toast'
@@ -244,6 +257,14 @@
 	}
 
 	let confirmationModal = createAsyncConfirmationModal()
+
+	// Same fork detection as the backend's isolation gate: parent link (dev workspaces are
+	// prefix-less) or the wm-fork- prefix (an orphaned fork keeps isolation after its parent
+	// is deleted).
+	let isFork = $derived(
+		$userWorkspaces.find((w) => w.id === $workspaceStore)?.parent_workspace_id != null ||
+			($workspaceStore?.startsWith('wm-fork-') ?? false)
+	)
 </script>
 
 <div class="flex flex-col gap-4 mb-8">
@@ -256,6 +277,20 @@
 	</div>
 </div>
 
+{#if isFork && ducklakeSettings.ducklakes.length > 0}
+	<div class="mb-4">
+		<Alert title="Fork data environments" type="info">
+			This workspace is a fork, and these settings are its own copy. Lakes marked
+			<span class="font-semibold">isolated</span> read the parent's tables through defer views and
+			write to a fork-scoped namespace that is cleaned up when the fork is deleted. Lakes marked
+			<span class="font-semibold">shared with parent</span> read and write the parent's physical
+			lake directly — editing their catalog or storage here repoints the shared lake for this
+			fork's jobs. The choice is made per lake when the fork is created and cannot be changed
+			here.
+		</Alert>
+	</div>
+{/if}
+
 {#if ducklakeSettings.ducklakes.some((d) => d.catalog.resource_type === 'instance')}
 	<div transition:slide={{ duration: 200 }} class="mb-4">
 		<Alert title="Instance databases use the Windmill database" type="info">
@@ -303,6 +338,33 @@
 						inputProps={{ placeholder: 'Name' }}
 						class="ducklake-name"
 					/>
+					{#if isFork}
+						<div class="mt-1">
+							{#if ducklake.fork_behavior === 'shared'}
+								<span
+									class="inline-flex items-center gap-1 text-2xs px-1.5 py-0.5 rounded border border-amber-500/40 bg-amber-100 dark:bg-amber-900/30 text-amber-700 dark:text-amber-300"
+								>
+									<ArrowUpRight size={10} />
+									shared with parent
+								</span>
+								<Tooltip>
+									This fork reads and writes the parent's physical lake directly. Edits to this
+									lake's catalog or storage repoint the shared lake for this fork's jobs.
+								</Tooltip>
+							{:else}
+								<span
+									class="inline-flex items-center gap-1 text-2xs px-1.5 py-0.5 rounded border border-emerald-500/40 bg-emerald-100 dark:bg-emerald-900/30 text-emerald-700 dark:text-emerald-300"
+								>
+									<GitFork size={10} />
+									isolated
+								</span>
+								<Tooltip>
+									Writes go to a fork-scoped namespace; reads of tables not yet materialized in
+									this fork defer to the parent. Deleting the fork cleans the namespace up.
+								</Tooltip>
+							{/if}
+						</div>
+					{/if}
 				</Cell>
 				<Cell>
 					<div class="flex gap-1">
diff --git a/frontend/src/lib/components/workspaceSettings/ForkDucklakeSection.svelte b/frontend/src/lib/components/workspaceSettings/ForkDucklakeSection.svelte
new file mode 100644
index 0000000000..675247a1e3
--- /dev/null
+++ b/frontend/src/lib/components/workspaceSettings/ForkDucklakeSection.svelte
@@ -0,0 +1,61 @@
+<script lang="ts">
+	import { WorkspaceService } from '$lib/gen'
+	import { workspaceStore } from '$lib/stores'
+	import { resource } from 'runed'
+	import Select from '../select/Select.svelte'
+	import Label from '../Label.svelte'
+	import { TriangleAlert } from 'lucide-svelte'
+
+	// Keyed on the store so a direct page load (store hydrates after mount) still fetches.
+	let allDucklakes = resource(
+		() => $workspaceStore,
+		async (ws) => (ws ? WorkspaceService.listDucklakes({ workspace: ws }) : undefined)
+	)
+
+	let lakeBehaviors: Record<string, 'isolated' | 'shared'> = $state({})
+
+	// Lakes the user explicitly opted out of isolation for — sent as
+	// `shared_ducklakes` on the create-fork request. Unlisted lakes default to the
+	// isolated fork namespace with read-defer, so nothing needs sending for them.
+	export function getSharedDucklakes(): string[] {
+		return (allDucklakes.current ?? []).filter((name) => lakeBehaviors[name] === 'shared')
+	}
+
+	let anyShared = $derived((allDucklakes.current ?? []).some((n) => lakeBehaviors[n] === 'shared'))
+</script>
+
+<!-- Self-hides when the workspace has no ducklake configured, like the datatable section. -->
+{#if allDucklakes.current && allDucklakes.current.length > 0}
+	<Label label="Ducklake data environment">
+		<span class="text-xs text-secondary">
+			By default each lake is isolated in the fork: materializations write a fork-scoped namespace
+			and reads of not-yet-materialized tables defer to this workspace's current data.
+		</span>
+		<div class="border rounded-md divide-y">
+			{#each allDucklakes.current as name (name)}
+				<div class="flex items-center gap-2 justify-between px-4 py-1.5">
+					<span class="text-xs font-medium">{name}</span>
+					<Select
+						dropdownClass="max-w-96"
+						bind:value={() => lakeBehaviors[name] ?? 'isolated', (v) => (lakeBehaviors[name] = v)}
+						items={[
+							{ value: 'isolated', label: 'Isolated (defer reads to parent)' },
+							{ value: 'shared', label: 'Shared with parent' }
+						]}
+					/>
+				</div>
+			{/each}
+		</div>
+		{#if anyShared}
+			<div
+				class="flex items-start gap-2 px-3 py-2 text-xs rounded-md border border-amber-200 dark:border-amber-900/60 bg-amber-50 dark:bg-amber-950/40 text-amber-700 dark:text-amber-300"
+			>
+				<TriangleAlert size={14} class="shrink-0 mt-0.5" />
+				<span>
+					A shared lake is NOT isolated: pipeline runs in the fork read and write this workspace's
+					tables directly.
+				</span>
+			</div>
+		{/if}
+	</Label>
+{/if}
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index d3a25387ad..0889d53a01 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -1703,6 +1703,16 @@
 		return producers.length === 0 || !producers.every(knownFixed)
 	})
 
+	// Fork data-environment state of the selected ducklake asset (fork workspaces
+	// only): read off the graph node so the details pane can show the
+	// deferred-to-parent / fork-materialized banner matching the canvas chip.
+	let selectionForkMaterialization = $derived.by(() => {
+		const sel = pe.selection
+		if (!sel || sel.kind !== 'asset' || sel.asset_kind !== 'ducklake') return undefined
+		return displayGraph.assets.find((a) => a.kind === 'ducklake' && a.path === sel.path)
+			?.fork_materialization
+	})
+
 	// Downstream subscriber count for the currently-edited script. Drives
 	// the Test button's cascade UX: when > 0, ScriptEditor renders a split
 	// button exposing "just this step" (default, with `_wmill_skip_asset_dispatch`)
@@ -2217,6 +2227,7 @@
 				{selectionProducers}
 				selectionColumnGraph={pe.activeDraft ? EMPTY_COLUMN_GRAPH : columnGraph}
 				{schemaCanEvolve}
+				{selectionForkMaterialization}
 				{schemaContractContext}
 				downstreamSubscribers={editedScriptDownstreamCount}
 				onStartBoundedRunForOpen={startBoundedRun}

From 744a7597edaf3ca9a7fd2b21a34fb33457913a64 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 12:14:22 +0200
Subject: [PATCH 45/76] fix(cli): publish all windmill-parser-wasm-* deps so
 local pipeline graph keeps write edges (#9926)

* fix(cli): publish all windmill-parser-wasm-* deps so local pipeline graph keeps write edges

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* style: trim explanatory comment blocks to core constraints

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 cli/build-npm.ts                        | 24 +++++++--------
 cli/bun.lock                            |  3 ++
 cli/package-lock.json                   |  6 ++++
 cli/package.json                        |  1 +
 cli/src/commands/pipeline/localGraph.ts | 16 +++++++++-
 cli/test/parser_packages_unit.test.ts   | 40 +++++++++++++++++++++++++
 6 files changed, 75 insertions(+), 15 deletions(-)
 create mode 100644 cli/test/parser_packages_unit.test.ts

diff --git a/cli/build-npm.ts b/cli/build-npm.ts
index 5c9353dd21..1dbc9261de 100644
--- a/cli/build-npm.ts
+++ b/cli/build-npm.ts
@@ -4,24 +4,20 @@ import { join } from "node:path";
 
 const outDir = "./npm";
 
-// Parser npm packages — used as externals and added to generated package.json
-const parserPackages = [
-  "windmill-parser-wasm-py", "windmill-parser-wasm-ts",
-  "windmill-parser-wasm-regex", "windmill-parser-wasm-go",
-  "windmill-parser-wasm-php", "windmill-parser-wasm-rust",
-  "windmill-parser-wasm-yaml", "windmill-parser-wasm-csharp",
-  "windmill-parser-wasm-nu", "windmill-parser-wasm-java",
-  "windmill-parser-wasm-ruby",
-  "windmill-parser-wasm-py-imports",
-];
-const parserExternals = parserPackages.flatMap(p => ["--external", p]);
-
 // Forward parser specs from the dev package.json so the published CLI pins
-// to the same versions devs install/test against. Falls back to "*" if not
-// listed locally.
+// to the same versions devs install/test against.
 const cliDeps: Record<string, string> =
   JSON.parse(readFileSync("./package.json", "utf-8")).dependencies ?? {};
 
+// Parser packages: bundle externals + published dependencies. Derived from
+// package.json (not hand-listed) — a parser missing from this set ships a CLI
+// whose loadParser() silently falls back. package.json itself is kept in sync
+// with loadParser() call sites by test/parser_packages_unit.test.ts.
+const parserPackages = Object.keys(cliDeps).filter((p) =>
+  p.startsWith("windmill-parser-wasm")
+);
+const parserExternals = parserPackages.flatMap(p => ["--external", p]);
+
 // Clean output directory
 rmSync(outDir, { recursive: true, force: true });
 
diff --git a/cli/bun.lock b/cli/bun.lock
index 50bcc48222..1696e1aa65 100644
--- a/cli/bun.lock
+++ b/cli/bun.lock
@@ -27,6 +27,7 @@
         "windmill-parser-wasm-php": "1.647.1",
         "windmill-parser-wasm-py": "1.693.1",
         "windmill-parser-wasm-py-imports": "1.693.1",
+        "windmill-parser-wasm-r": "1.668.1",
         "windmill-parser-wasm-regex": "1.692.0",
         "windmill-parser-wasm-ruby": "1.526.1",
         "windmill-parser-wasm-rust": "1.647.1",
@@ -305,6 +306,8 @@
 
     "windmill-parser-wasm-py-imports": ["windmill-parser-wasm-py-imports@1.693.1", "", {}, "sha512-FC0KbREe2G/sa/9kYIR930wmWw+VL6PvEIqg12J3dsJes3A+0x5JIUPT/jeD+c24DrG0ko/Ub7yDnYs56Bem7g=="],
 
+    "windmill-parser-wasm-r": ["windmill-parser-wasm-r@1.668.1", "", {}, "sha512-5YNeUibxpNBvYrxCgQcz1PxGhTFx2CyEpg2udtIhq7bx0d4gF/KDZVupMeQmAObmrEtTSFGUWNRJ4zXSWNrSpQ=="],
+
     "windmill-parser-wasm-regex": ["windmill-parser-wasm-regex@1.692.0", "", {}, "sha512-BHGTxrinZJ9ef6hFxbKiBqBEr5uqgG/QySOgMA5r1LswO9n/8fyGswr8JcPT2kGaoeoweV6/RQ+RHVaOhosnKw=="],
 
     "windmill-parser-wasm-ruby": ["windmill-parser-wasm-ruby@1.526.1", "", {}, "sha512-rMBQA8s21wmL2kA5ztRs/ZgVA3ckxe9/NLjxl3iQPL0CX6DlvfaUH0O+AnhpXXDMyBs1Y1SZIhcnbnvsHZ3R8g=="],
diff --git a/cli/package-lock.json b/cli/package-lock.json
index 949b44e948..038e223255 100644
--- a/cli/package-lock.json
+++ b/cli/package-lock.json
@@ -28,6 +28,7 @@
         "windmill-parser-wasm-php": "1.647.1",
         "windmill-parser-wasm-py": "1.693.1",
         "windmill-parser-wasm-py-imports": "1.693.1",
+        "windmill-parser-wasm-r": "1.668.1",
         "windmill-parser-wasm-regex": "1.692.0",
         "windmill-parser-wasm-ruby": "1.526.1",
         "windmill-parser-wasm-rust": "1.647.1",
@@ -1450,6 +1451,11 @@
       "resolved": "https://registry.npmjs.org/windmill-parser-wasm-py-imports/-/windmill-parser-wasm-py-imports-1.693.1.tgz",
       "integrity": "sha512-FC0KbREe2G/sa/9kYIR930wmWw+VL6PvEIqg12J3dsJes3A+0x5JIUPT/jeD+c24DrG0ko/Ub7yDnYs56Bem7g=="
     },
+    "node_modules/windmill-parser-wasm-r": {
+      "version": "1.668.1",
+      "resolved": "https://registry.npmjs.org/windmill-parser-wasm-r/-/windmill-parser-wasm-r-1.668.1.tgz",
+      "integrity": "sha512-5YNeUibxpNBvYrxCgQcz1PxGhTFx2CyEpg2udtIhq7bx0d4gF/KDZVupMeQmAObmrEtTSFGUWNRJ4zXSWNrSpQ=="
+    },
     "node_modules/windmill-parser-wasm-regex": {
       "version": "1.692.0",
       "resolved": "https://registry.npmjs.org/windmill-parser-wasm-regex/-/windmill-parser-wasm-regex-1.692.0.tgz",
diff --git a/cli/package.json b/cli/package.json
index 1cf937d95e..5881847636 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -36,6 +36,7 @@
     "windmill-parser-wasm-php": "1.647.1",
     "windmill-parser-wasm-py": "1.693.1",
     "windmill-parser-wasm-py-imports": "1.693.1",
+    "windmill-parser-wasm-r": "1.668.1",
     "windmill-parser-wasm-regex": "1.692.0",
     "windmill-parser-wasm-ruby": "1.526.1",
     "windmill-parser-wasm-rust": "1.647.1",
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index 98413876a5..558592ce5b 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -15,6 +15,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import process from "node:process";
 import { loadParser } from "../../utils/metadata.ts";
+import * as log from "../../core/log.ts";
 import { exts, removeExtensionToPath } from "../script/script.ts";
 import { inferContentTypeFromFilePath } from "../../utils/script_common.ts";
 import { getWmillYamlPath } from "../../core/conf.ts";
@@ -339,6 +340,11 @@ export async function inferScriptAssets(
   return out;
 }
 
+// Warn once when the wasm asset parser can't load: the annotation-only
+// fallback silently drops all inferred read/write edges, so a packaging or
+// install problem would otherwise masquerade as a parsing limitation.
+let warnedAssetParserUnavailable = false;
+
 async function inferScriptAssetsBody(
   content: string,
   language: string,
@@ -349,7 +355,15 @@ async function inferScriptAssetsBody(
   try {
     const mod = await loadParser(ASSET_WASM_PKG);
     raw = mod[fn](content) as string;
-  } catch {
+  } catch (e) {
+    if (!warnedAssetParserUnavailable) {
+      warnedAssetParserUnavailable = true;
+      log.warnStderr(
+        `warning: ${ASSET_WASM_PKG} failed to load (${
+          e instanceof Error ? e.message : e
+        }) — falling back to annotation-only parsing; inferred read/write edges (materialize targets, COPY TO, writeS3File) will be missing from the local graph`,
+      );
+    }
     return fallbackParse(content, language);
   }
   if (raw.startsWith("err:")) return fallbackParse(content, language);
diff --git a/cli/test/parser_packages_unit.test.ts b/cli/test/parser_packages_unit.test.ts
new file mode 100644
index 0000000000..4270a4996e
--- /dev/null
+++ b/cli/test/parser_packages_unit.test.ts
@@ -0,0 +1,40 @@
+import { expect, test } from "bun:test";
+import { readFileSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+
+// build-npm.ts derives the published CLI's parser dependencies from
+// package.json, so a parser package that src/ loads but package.json omits
+// ships a CLI where loadParser() throws and callers silently degrade.
+
+const cliRoot = join(import.meta.dir, "..");
+
+function collectSourceFiles(dir: string, out: string[] = []): string[] {
+  for (const entry of readdirSync(dir)) {
+    const p = join(dir, entry);
+    if (statSync(p).isDirectory()) collectSourceFiles(p, out);
+    else if (p.endsWith(".ts")) out.push(p);
+  }
+  return out;
+}
+
+test("every windmill-parser-wasm-* package referenced in src/ is a declared dependency", () => {
+  const deps: Record<string, string> =
+    JSON.parse(readFileSync(join(cliRoot, "package.json"), "utf-8"))
+      .dependencies ?? {};
+
+  const referenced = new Set<string>();
+  for (const file of collectSourceFiles(join(cliRoot, "src"))) {
+    for (const m of readFileSync(file, "utf-8").matchAll(
+      /"(windmill-parser-wasm-[a-z-]+)"/g,
+    )) {
+      referenced.add(m[1]);
+    }
+  }
+
+  // Sanity: the scan must see the known call sites, else the regex went stale.
+  expect(referenced.has("windmill-parser-wasm-ts")).toBe(true);
+  expect(referenced.has("windmill-parser-wasm-asset")).toBe(true);
+
+  const missing = [...referenced].filter((p) => !(p in deps)).sort();
+  expect(missing).toEqual([]);
+});

From 28a6b086c842105298f236baa0a61868f71a5eb1 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 16:24:04 +0200
Subject: [PATCH 46/76] fix(cli): pipeline + workspace UX batch (init/bind
 stub, run errors, macro libs, lock-job report, upgrade errors) (#9929)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 cli/src/commands/init/init.ts               | 48 +++++++++-
 cli/src/commands/init/template.ts           |  6 +-
 cli/src/commands/pipeline/boundedCascade.ts |  3 +
 cli/src/commands/pipeline/localGraph.ts     | 11 +++
 cli/src/commands/pipeline/pipeline.ts       | 98 +++++++++++++++++++--
 cli/src/commands/sync/sync.ts               | 78 ++++++++++++++++
 cli/src/commands/workspace/workspace.ts     | 20 +++++
 cli/src/utils/upgrade.ts                    | 58 ++++++++++++
 cli/test/init_template_unit.test.ts         | 33 +++++--
 9 files changed, 339 insertions(+), 16 deletions(-)

diff --git a/cli/src/commands/init/init.ts b/cli/src/commands/init/init.ts
index f1a10d7cc9..fc6e70c5b2 100644
--- a/cli/src/commands/init/init.ts
+++ b/cli/src/commands/init/init.ts
@@ -251,7 +251,7 @@ async function initAction(opts: InitOptions) {
     );
   }
 
-  // Generate resource type namespace (only if a workspace was bound)
+  // Generate resource type namespace (needs a bound workspace)
   if (didBindWorkspace && boundProfile) {
     try {
       // Cache the bound profile so resolveWorkspace doesn't re-resolve and prompt again
@@ -266,9 +266,51 @@ async function initAction(opts: InitOptions) {
       );
     }
   } else {
-    log.info(
-      colors.gray("Skipped resource type namespace generation (no workspace bound). Run 'wmill workspace bind' then 'wmill init' to generate it.")
+    // generateRTNamespace resolves a workspace; its non-interactive
+    // multiple-workspaces path process.exit(-1)s (uncatchable), aborting init.
+    // So generate only for a single resolvable workspace (baseUrl + matching
+    // profile), passed via __secret_workspace to skip resolution; else skip.
+    const { readConfigFile, getWorkspaceNames, getEffectiveWorkspaceId } =
+      await import("../../core/conf.ts");
+    const config = await readConfigFile({ warnIfMissing: false });
+    const resolvable = getWorkspaceNames(config.workspaces).filter(
+      (n) => !!(config.workspaces as any)?.[n]?.baseUrl
     );
+    let boundProfileForGen: Workspace | undefined;
+    if (resolvable.length === 1) {
+      const name = resolvable[0];
+      const entry = (config.workspaces as any)[name];
+      let normalizedBaseUrl: string | undefined;
+      try {
+        normalizedBaseUrl = new URL(entry.baseUrl).toString();
+      } catch {
+        normalizedBaseUrl = undefined;
+      }
+      if (normalizedBaseUrl) {
+        const workspaceId = getEffectiveWorkspaceId(name, entry);
+        const profiles = await allWorkspaces(opts.configDir);
+        boundProfileForGen = profiles.find(
+          (p) => p.remote === normalizedBaseUrl && p.workspaceId === workspaceId
+        );
+      }
+    }
+    if (boundProfileForGen) {
+      try {
+        const rtOpts = { ...opts } as GlobalOptions;
+        (rtOpts as any).__secret_workspace = boundProfileForGen;
+        await generateRTNamespace(rtOpts);
+      } catch (error) {
+        log.warn(
+          `Could not pull resource types and generate TypeScript namespace: ${
+            error instanceof Error ? error.message : error
+          }`
+        );
+      }
+    } else {
+      log.info(
+        colors.gray("Skipped resource type namespace generation (no workspace bound). Run 'wmill workspace bind' then 'wmill init' to generate it.")
+      );
+    }
   }
 }
 
diff --git a/cli/src/commands/init/template.ts b/cli/src/commands/init/template.ts
index 210aae5aca..b0c83d7039 100644
--- a/cli/src/commands/init/template.ts
+++ b/cli/src/commands/init/template.ts
@@ -180,8 +180,12 @@ export const CONFIG_REFERENCE: ConfigOption[] = [
     additionalProperties: WORKSPACE_CONFIG_SCHEMA,
     section: "Workspace bindings",
     sectionNote: "Map workspace names to Windmill instances and override settings per workspace.\nThe key is a human-friendly workspace name. gitBranch and workspaceId default to the key name.",
-    templateValue: "\n  {{BRANCH}}: {}",
+    // Empty ` {}`, not a live `<name>: {}` stub: a stub has no baseUrl yet
+    // counts as a configured workspace, breaking auto-selection and making a
+    // later `workspace bind` ambiguous. The example stays commented.
+    templateValue: " {}",
     example: [
+      "  # {{BRANCH}}:",
       "{{BASEURL_LINE}}",
       "{{WORKSPACE_ID_LINE}}",
       "    # gitBranch: main                        # git branch (defaults to workspace name)",
diff --git a/cli/src/commands/pipeline/boundedCascade.ts b/cli/src/commands/pipeline/boundedCascade.ts
index 9c7edb9cea..16b25f0ebe 100644
--- a/cli/src/commands/pipeline/boundedCascade.ts
+++ b/cli/src/commands/pipeline/boundedCascade.ts
@@ -19,6 +19,9 @@ export type BCGraph = {
     // `// partitioned <kind>` on the script (daily/hourly/weekly/monthly/dynamic).
     // Emitted by both the deployed graph endpoint and the local builder.
     partition_kind?: string;
+    // `// macros` library: non-empty on a workspace macro library (deployed
+    // graph only). Definition-only — never a runnable cascade step.
+    macros?: { name: string }[];
   }[];
   assets: { kind: string; path: string }[];
   edges: {
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index 558592ce5b..805f30c710 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -53,6 +53,9 @@ export type GraphRunnable = {
   // schema-contract warnings; only present when set (default `warn` is absent),
   // mirroring the deployed graph node.
   materialize_on_schema_change?: string;
+  // `// macros` library: the macros it defines (deployed graph only — the wasm
+  // asset parser does not emit them). Non-empty ⇒ definition-only node.
+  macros?: { name: string; params?: string; is_table?: boolean }[];
 };
 export type GraphEdge = {
   runnable_kind: string;
@@ -81,6 +84,14 @@ export type AssetGraph = {
   assets: { kind: string; path: string }[];
   edges: GraphEdge[];
   triggers: GraphTrigger[];
+  // ƒ edges from a `// macros` library to the scripts calling its macros
+  // (deployed graph only).
+  macro_edges?: {
+    lib_path: string;
+    consumer_path: string;
+    macro_names: string[];
+    via_use?: boolean;
+  }[];
 };
 
 export type LocalScript = {
diff --git a/cli/src/commands/pipeline/pipeline.ts b/cli/src/commands/pipeline/pipeline.ts
index 1d11799956..5e686fcf57 100644
--- a/cli/src/commands/pipeline/pipeline.ts
+++ b/cli/src/commands/pipeline/pipeline.ts
@@ -302,6 +302,25 @@ async function renderGraph(
     return out.length > 0 ? " " + out.join(" ") : "";
   }
 
+  // `// macros` libraries: badge the node with the macros it defines and list
+  // its consumers as ƒ edges. Deployed graphs only — the local wasm parse does
+  // not emit `macros`/`macro_edges`, so local mode renders them as plain nodes.
+  const macrosByLib = new Map(
+    graph.runnables
+      .filter((r) => (r.macros?.length ?? 0) > 0)
+      .map((r) => [r.path, r.macros!]),
+  );
+  const macroConsumersByLib = new Map<
+    string,
+    { consumer: string; names: string[] }[]
+  >();
+  for (const me of graph.macro_edges ?? []) {
+    pushTo(macroConsumersByLib, me.lib_path, {
+      consumer: me.consumer_path,
+      names: me.macro_names,
+    });
+  }
+
   const printed = new Set<string>();
   const lines: string[] = [];
 
@@ -317,8 +336,22 @@ async function renderGraph(
       return;
     }
     printed.add(script);
-    lines.push(`${prefix}${colors.bold(shortName(script))}${triggerBadges(script)}${alsoOn}`);
+    const libMacros = macrosByLib.get(script);
+    const macroBadge = libMacros
+      ? " " +
+        colors.magenta(`[ƒ macros: ${libMacros.map((m) => m.name).join(", ")}]`)
+      : "";
+    lines.push(`${prefix}${colors.bold(shortName(script))}${macroBadge}${triggerBadges(script)}${alsoOn}`);
     const childPrefix = prefix.replace(/├─ $/, "│  ").replace(/└─ $/, "   ");
+    const macroConsumers = [...(macroConsumersByLib.get(script) ?? [])].sort(
+      (a, b) => a.consumer.localeCompare(b.consumer),
+    );
+    macroConsumers.forEach(({ consumer, names }, i) => {
+      const branch = i === macroConsumers.length - 1 ? "└─ƒ " : "├─ƒ ";
+      lines.push(
+        `${childPrefix}${branch}${shortName(consumer)} ${colors.dim(`(uses ${names.join(", ")})`)}`,
+      );
+    });
     const writes = [...(writesByScript.get(script) ?? [])].sort();
     writes.forEach((uri, i) => {
       const lastAsset = i === writes.length - 1;
@@ -368,7 +401,10 @@ async function renderGraph(
 
 // Poll a launched job to a terminal state. Modest fixed cadence; capped so a
 // wedged job can't hang the CLI forever.
-async function waitJob(workspace: string, id: string): Promise<boolean> {
+async function waitJob(
+  workspace: string,
+  id: string,
+): Promise<{ ok: boolean; result?: unknown }> {
   const MAX_RETRIES = 6000; // ~10min at 100ms
   for (let i = 0; i < MAX_RETRIES; i++) {
     try {
@@ -380,7 +416,7 @@ async function waitJob(workspace: string, id: string): Promise<boolean> {
       // A completed job without an explicit `success: true` is a failure
       // (mirrors the frontend `waitJobTerminal`): the cascade only advances on
       // a confirmed success.
-      if (r.completed) return r.success === true;
+      if (r.completed) return { ok: r.success === true, result: r.result };
     } catch {
       // transient — retry
     }
@@ -389,6 +425,26 @@ async function waitJob(workspace: string, id: string): Promise<boolean> {
   throw new Error(`Timed out waiting for job ${id}`);
 }
 
+// Render a failed job's `{error: {name, message}}` result for the terminal, so
+// the user sees WHY the cascade stopped without opening the UI. Result shapes
+// vary (structured data-test payloads, plain strings), so fall back to raw
+// JSON when the canonical error shape is absent.
+function formatJobFailure(result: unknown): string | undefined {
+  if (result == null) return undefined;
+  const err = (result as any)?.error;
+  if (err && typeof err === "object") {
+    const name = typeof err.name === "string" ? err.name : undefined;
+    const message = typeof err.message === "string" ? err.message : undefined;
+    if (message) return name ? `${name}: ${message}` : message;
+  }
+  if (typeof result === "string") return result;
+  try {
+    return JSON.stringify(result, null, 2);
+  } catch {
+    return undefined;
+  }
+}
+
 // Bounded-cascade run: start at a schedule / manual root, fan downstream, but
 // stop at the `--to` end node(s). Scripts run in topological order; each is
 // launched with `_wmill_skip_asset_dispatch` so the CLI owns the whole closure
@@ -603,9 +659,23 @@ async function run(
     merged[b.param] = b.value;
   }
 
+  // `// macros` libraries are definition-only: their macros are injected into
+  // consuming DuckDB scripts at run time, so "running" one is a no-op preview.
+  // They are excluded from starts and from every selection below (they'd
+  // otherwise read as manual roots, since nothing triggers them).
+  const macroLibPaths = new Set(
+    graph.runnables
+      .filter((r) => r.usage_kind === "script" && (r.macros?.length ?? 0) > 0)
+      .map((r) => r.path),
+  );
+
   // Resolve the start: explicit --from (must be a valid start) or the folder's
   // sole valid start. `--upload`-bound scripts join the valid starts.
-  const starts = new Set([...validStarts(graph), ...boundNodeIds]);
+  const starts = new Set(
+    [...validStarts(graph), ...boundNodeIds].filter(
+      (id) => !macroLibPaths.has(scriptPathOf(id)),
+    ),
+  );
   // `runAll` = no `--from` on a multi-root pipeline (fan-in): run the whole
   // pipeline in topological order rather than forcing a single start, the way
   // `dbt run` (no `--select`) runs the entire project. `--to` still needs an
@@ -627,6 +697,11 @@ async function run(
       }
       throw new Error(`--from '${opts.from}' matched no script in f/${f}.`);
     }
+    if (macroLibPaths.has(scriptPathOf(resolved))) {
+      throw new Error(
+        `--from '${opts.from}' is a \`// macros\` library — definition-only, injected into consuming scripts at run time, never a runnable step.`,
+      );
+    }
     if (!starts.has(resolved)) {
       throw new Error(
         `--from '${opts.from}' is not a valid bounded-run start. Starts must be schedule-triggered or manual roots; row-backed event triggers (kafka/mqtt/nats/postgres/sqs/gcp/email) fan out per-event and can't be bounded.`,
@@ -729,6 +804,11 @@ async function run(
     }
   }
 
+  // Selections can still pull a macro library in via graph reachability (e.g.
+  // whole-pipeline mode collects every root's closure) — drop them before
+  // ordering so they never run.
+  for (const p of macroLibPaths) selectedScripts.delete(p);
+
   const { order, cyclic } = topoOrder(graph, selectedScripts);
   if (cyclic.length > 0) {
     log.warn(`Skipping ${cyclic.length} script(s) on a dependency cycle: ${cyclic.sort().join(", ")}`);
@@ -877,9 +957,15 @@ async function run(
         requestBody: nodeArgs,
       });
     }
-    const ok = await waitJob(workspace.workspaceId, id);
+    const { ok, result } = await waitJob(workspace.workspaceId, id);
     if (!ok) {
-      throw new Error(`Bounded run failed at ${nodePath} (job ${id}).`);
+      const detail = formatJobFailure(result);
+      const runUrl = `${workspace.remote}run/${id}?workspace=${workspace.workspaceId}`;
+      throw new Error(
+        `Bounded run failed at ${nodePath} (job ${id}).` +
+          (detail ? `\n${detail}` : "") +
+          `\nFull logs: ${runUrl}`,
+      );
     }
     if (!opts.json) log.info(colors.green(`  ✓ ${nodePath}`));
   }
diff --git a/cli/src/commands/sync/sync.ts b/cli/src/commands/sync/sync.ts
index e0e4e73659..8e1ecdfef6 100644
--- a/cli/src/commands/sync/sync.ts
+++ b/cli/src/commands/sync/sync.ts
@@ -41,6 +41,7 @@ import { handleFile } from "../script/script.ts";
 import {
   deepEqual,
   fetchRemoteVersion,
+  getHeaders,
   isFileResource,
   isFilesetResource,
   isRawAppFile,
@@ -3550,6 +3551,61 @@ function removeSuffix(str: string, suffix: string) {
 const SYNC_PUSH_DESTRUCTIVE_WARNING =
   "`wmill sync push` is destructive: applying it deploys these changes to the remote workspace and overwrites or deletes remote items that differ from or are absent locally — this is not automatically reversible. If you are an AI agent, do NOT run `wmill sync push` (without --dry-run) until the user has explicitly confirmed this deploy, unless your custom instructions explicitly allow bypassing that confirmation.";
 
+// A script pushed without a local lock queues a server-side dependency job; if
+// that job fails the script deploys broken (no lock/assets) with no CLI signal.
+// One-shot (no polling): report this push's already-failed + still-running
+// dependency jobs.
+async function checkServerLockJobs(
+  workspaceId: string,
+  sinceIso: string,
+  changedPaths: string[],
+): Promise<{ pending: number; failed: { path: string; error?: string }[] }> {
+  // A dependency job's script_path has no file extension; changed paths do.
+  const belongsToPush = (scriptPath?: string) =>
+    !!scriptPath &&
+    changedPaths.some(
+      (p) => p === scriptPath || p.startsWith(scriptPath + "."),
+    );
+  // Raw fetch: the checked-in generated client predates the `created_after` /
+  // `success` filters on the job list routes (see the `apiGet` note in
+  // pipeline.ts).
+  const listJobs = async (path: string): Promise<unknown[]> => {
+    const { OpenAPI } = await import("../../../gen/index.ts");
+    const resp = await fetch(`${OpenAPI.BASE}${path}`, {
+      headers: { ...getHeaders(), Authorization: `Bearer ${OpenAPI.TOKEN}` },
+    });
+    if (!resp.ok) throw new Error(`GET ${path} -> ${resp.status}`);
+    return (await resp.json()) as unknown[];
+  };
+  try {
+    const since = encodeURIComponent(sinceIso);
+    const [queued, completed] = await Promise.all([
+      listJobs(
+        `/w/${workspaceId}/jobs/queue/list?job_kinds=dependencies&created_after=${since}`,
+      ),
+      listJobs(
+        `/w/${workspaceId}/jobs/completed/list?job_kinds=dependencies&created_after=${since}&success=false`,
+      ),
+    ]);
+    const pending = (queued as { script_path?: string }[]).filter((j) =>
+      belongsToPush(j.script_path),
+    ).length;
+    const failed = (
+      completed as { script_path?: string; result?: unknown }[]
+    )
+      .filter((j) => belongsToPush(j.script_path))
+      .map((j) => ({
+        path: j.script_path!,
+        error: (j.result as { error?: { message?: string } } | undefined)
+          ?.error?.message,
+      }));
+    return { pending, failed };
+  } catch {
+    // Advisory only: a failed check must not fail an otherwise-complete push.
+    return { pending: 0, failed: [] };
+  }
+}
+
 export async function push(
   opts: GlobalOptions & SyncOptions & { repository?: string; branch?: string; acceptOverridingPermissionedAsWithSelf?: boolean },
 ) {
@@ -4176,6 +4232,7 @@ export async function push(
     }
 
     const start = performance.now();
+    const pushStartedAt = new Date().toISOString();
     log.info(colors.gray(`Applying changes to files ...`));
 
     let stateful = opts.stateful;
@@ -4917,9 +4974,30 @@ export async function push(
     } catch (e) {
       log.warn(`Failed to push shared UI folder: ${e}`);
     }
+    const lockJobs = await checkServerLockJobs(
+      workspace.workspaceId,
+      pushStartedAt,
+      changes.map((c) => c.path.replaceAll(SEP, "/")),
+    );
+    if (!opts.jsonOutput) {
+      for (const f of lockJobs.failed) {
+        log.warn(
+          `⚠ server-side lock generation FAILED for ${f.path} — the deployed script is broken until it locks.` +
+            (f.error ? `\n  ${f.error.split("\n")[0]}` : ""),
+        );
+      }
+      if (lockJobs.pending > 0) {
+        log.info(
+          colors.gray(
+            `${lockJobs.pending} server-side lock job(s) still running — locks (and inferred assets) land when they finish; check the Runs page if a script stays broken.`,
+          ),
+        );
+      }
+    }
     if (opts.jsonOutput) {
       const result = {
         success: true,
+        lock_jobs: lockJobs,
         message: `All ${changes.length} changes pushed to the remote workspace ${workspace.workspaceId} named ${workspace.name}`,
         changes: changes.map((change) => ({
           type: change.name,
diff --git a/cli/src/commands/workspace/workspace.ts b/cli/src/commands/workspace/workspace.ts
index 1e6030a44f..7d6bb2c87e 100644
--- a/cli/src/commands/workspace/workspace.ts
+++ b/cli/src/commands/workspace/workspace.ts
@@ -669,6 +669,26 @@ async function bind(
     }
     (config.workspaces as any)[wsName] = entry;
 
+    // Drop empty `{}` placeholder entries (older `wmill init` scaffolded one):
+    // they resolve to nothing (no baseUrl) yet count as configured workspaces,
+    // so leaving one beside the real binding makes every later command demand
+    // --workspace to disambiguate.
+    for (const [name, e] of Object.entries(
+      config.workspaces as Record<string, unknown>
+    )) {
+      if (
+        name !== wsName &&
+        !!e &&
+        typeof e === "object" &&
+        Object.keys(e).length === 0
+      ) {
+        delete (config.workspaces as any)[name];
+        log.info(
+          colors.gray(`Removed empty placeholder workspace entry '${name}'`)
+        );
+      }
+    }
+
     log.info(
       colors.green(
         `✓ Bound workspace '${wsName}'` +
diff --git a/cli/src/utils/upgrade.ts b/cli/src/utils/upgrade.ts
index 44ab0741fd..e72a2a2a93 100644
--- a/cli/src/utils/upgrade.ts
+++ b/cli/src/utils/upgrade.ts
@@ -57,6 +57,64 @@ export class NpmProvider extends Provider {
   async hasRequiredPermissions(): Promise<boolean> {
     return true;
   }
+
+  // Cliffy's default runtime runs `npm install --silent`, so a failed upgrade
+  // throws with an empty message. Override to run npm without --silent and put
+  // the captured output + recovery hint in the error, so failures are actionable.
+  override async upgrade({
+    name,
+    to,
+    main,
+    verbose,
+  }: {
+    name: string;
+    to: string;
+    main?: string;
+    verbose?: boolean;
+  }): Promise<void> {
+    const specifier = this.getSpecifier(name, to, main).replace(/^npm:/, "");
+    const args = ["install", "--global", "--force", specifier];
+    this.logger?.log(`$ npm ${args.join(" ")}`);
+    const { spawn } = await import("node:child_process");
+    const HINT =
+      "If this is a permissions error, retry with sudo, or reinstall with: npm uninstall -g windmill-cli && npm install -g windmill-cli";
+    // `shell: true` so `npm` resolves on Windows (npm.cmd) — same spawn
+    // pattern as commands/app/bundle.ts.
+    const proc = spawn("npm", args, {
+      stdio: [null, "pipe", "pipe"],
+      shell: true,
+    });
+    const output: string[] = [];
+    proc.stdout?.on("data", (d) => {
+      output.push(String(d));
+      if (verbose) process.stdout.write(d);
+    });
+    proc.stderr?.on("data", (d) => {
+      output.push(String(d));
+      if (verbose) process.stderr.write(d);
+    });
+    // `error` fires when npm can't be spawned at all; without a listener that
+    // is an uncaught exception, crashing before any hint prints. `close`
+    // resolves null when npm died from a signal — a failure too.
+    const exitCode: number | null = await new Promise<number | null>(
+      (resolve, reject) => {
+        proc.on("error", reject);
+        proc.on("close", resolve);
+      }
+    ).catch((e) => {
+      throw new Error(
+        `failed to run npm: ${e instanceof Error ? e.message : e}\n\n${HINT}`
+      );
+    });
+    if (exitCode !== 0) {
+      const detail = output.join("").trim();
+      throw new Error(
+        `npm exited with ${
+          exitCode === null ? "a signal" : `code ${exitCode}`
+        }${detail ? `:\n${detail}` : ""}\n\n${HINT}`
+      );
+    }
+  }
 }
 
 type NpmApiPackageMetadata = {
diff --git a/cli/test/init_template_unit.test.ts b/cli/test/init_template_unit.test.ts
index e7d69c2184..227fc271a2 100644
--- a/cli/test/init_template_unit.test.ts
+++ b/cli/test/init_template_unit.test.ts
@@ -25,25 +25,46 @@ describe("generateCommentedTemplate", () => {
     expect(typeof config).toBe("object");
   });
 
-  test("uses provided branch name in workspaces", () => {
-    const config = parse(generateCommentedTemplate("my-feature"));
-    expect(config.workspaces["my-feature"]).toBeDefined();
+  // Without bindings, `workspaces` must stay EMPTY (a live `<branch>: {}`
+  // placeholder is unresolvable — no baseUrl — yet counts as a configured
+  // workspace, breaking auto-selection and making a later bind ambiguous).
+  // The branch name only appears in the commented example.
+  test("uses provided branch name in the commented workspaces example only", () => {
+    const yaml = generateCommentedTemplate("my-feature");
+    const config = parse(yaml);
+    expect(config.workspaces).toEqual({});
+    expect(yaml).toContain("# my-feature:");
   });
 
   test("defaults to 'main' when no branch name given", () => {
-    const config = parse(generateCommentedTemplate());
-    expect(config.workspaces["main"]).toBeDefined();
+    const yaml = generateCommentedTemplate();
+    const config = parse(yaml);
+    expect(config.workspaces).toEqual({});
+    expect(yaml).toContain("# main:");
   });
 
   test("quotes branch names with YAML-special characters", () => {
     const specialBranches = ["fix: something", "feat/my branch", "release#1"];
     for (const branch of specialBranches) {
       const yaml = generateCommentedTemplate(branch);
+      // Still valid YAML with an empty workspaces map; the (quoted) branch
+      // name only appears in comments.
       const config = parse(yaml);
-      expect(config.workspaces[branch]).toBeDefined();
+      expect(config.workspaces).toEqual({});
+      expect(yaml).toContain(branch);
     }
   });
 
+  test("renders live workspaces entries when bindings are provided", () => {
+    const yaml = generateCommentedTemplate("main", undefined, [
+      { name: "prod", baseUrl: "https://app.windmill.dev/", workspaceId: "prod-ws" },
+    ]);
+    const config = parse(yaml);
+    expect(config.workspaces["prod"]).toBeDefined();
+    expect(config.workspaces["prod"].baseUrl).toBe("https://app.windmill.dev/");
+    expect(config.workspaces["prod"].workspaceId).toBe("prod-ws");
+  });
+
   test("contains yaml-language-server schema directive", () => {
     const yaml = generateCommentedTemplate("main");
     expect(yaml.startsWith("# yaml-language-server: $schema=wmill.schema.json")).toBe(true);

From 377c02ec47389e64b7ef5cbbae0de05df648266d Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 16:43:11 +0200
Subject: [PATCH 47/76] feat(pipelines): on_schema_change write guardrails +
 data_test deploy validation (#9930)

* feat(pipelines): on_schema_change write guardrails + data_test deploy validation

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to fa7ac11c1e0ab39e84a0c18973ba427a240933ca

This commit updates the EE repository reference after PR #647 was merged in windmill-ee-private.

Previous ee-repo-ref: bd23b2a904cb2e6554c7ff209ff8adb9d91775d1

New ee-repo-ref: fa7ac11c1e0ab39e84a0c18973ba427a240933ca

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 backend/ee-repo-ref.txt                       |   2 +-
 .../windmill-parser/src/asset_parser.rs       | 130 +++-
 .../windmill-parser/src/sql_materialize.rs    | 350 ++++++++++-
 .../tests/fixtures/pipeline_annotations.json  |   4 +-
 .../tests/pipeline_annotations_parity.rs      |   2 +
 backend/windmill-api-scripts/src/scripts.rs   |  17 +
 .../windmill-worker/src/duckdb_executor.rs    | 559 +++++++++++++++++-
 7 files changed, 1034 insertions(+), 30 deletions(-)

diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index e6344939d1..c3ae39c767 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-80d309edebb899e36a3bdcdf4ea73c4db070534d
+fa7ac11c1e0ab39e84a0c18973ba427a240933ca
diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index 3e6d433405..4ef30246a6 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -278,26 +278,53 @@ pub struct MaterializeSpec {
     // `hard_deletes=close`). Default (false) leaves absent keys current.
     #[serde(skip_serializing_if = "std::ops::Not::not", default)]
     pub close_deleted: bool,
-    // `on_schema_change=ignore` opts this producer's asset out of downstream
-    // schema-contract warnings (gap #2b): consumers referencing columns the
-    // captured schema no longer has warn by default (`warn`); `ignore` declares
-    // the schema deliberately unstable and suppresses those warnings. Save-time
-    // metadata only — the materialize write strategy is unaffected.
+    // `on_schema_change=warn|ignore|fail|sync` governs two orthogonal things:
+    //   • Save-time contract warnings (gap #2b): consumers referencing columns
+    //     the captured schema no longer has warn by default; only `ignore`
+    //     suppresses those warnings (`warn`/`fail`/`sync` all keep them).
+    //   • Run-time write guardrails for the persist-and-mutate strategies
+    //     (partitioned replace, merge, append), where the table schema is fixed
+    //     at first CREATE and the write is positional — a renamed/added/removed
+    //     SELECT column silently lands in the wrong column. `warn` logs the
+    //     drift and proceeds positionally; `fail` aborts before mutating; `sync`
+    //     ALTERs the table to match and writes by name. Whole-table replace and
+    //     scd2 are unaffected. See `sql_materialize.rs`.
     #[serde(skip_serializing_if = "OnSchemaChange::is_warn", default)]
     pub on_schema_change: OnSchemaChange,
 }
 
-// dbt's `on_schema_change` narrowed to the save-time contract check: `warn`
-// (default) surfaces consumer warnings, `ignore` suppresses them. dbt's `fail`
-// is deliberately not offered — saves are never hard-blocked (a deliberate
-// upstream reshape must not fail every consumer save); a CI/CLI gate can layer
-// it on later without touching the grammar.
+// dbt's `on_schema_change`, covering both the save-time contract check and the
+// run-time write guardrail for the positional persist-and-mutate strategies:
+//   • `warn` (default): surface consumer contract warnings; at write time, log
+//     the drift loudly and proceed with the positional write against the fixed
+//     table schema.
+//   • `ignore`: suppress consumer contract warnings; at write time, no guard
+//     (the pre-guardrail behaviour).
+//   • `fail`: keep contract warnings; at write time, abort the run before
+//     mutating when the SELECT's column *set* diverges from the table's.
+//   • `sync`: keep contract warnings; at write time, ALTER the table to match
+//     the SELECT (add/drop columns) and INSERT BY NAME.
+// `warn`/`fail` drift detection is name-set based (added/removed columns), which
+// is what the positional persist-and-mutate INSERT can misalign on. It does NOT
+// flag a pure *reorder* of same-named columns: `SELECT b, a` into a `(a, b)`
+// table has an identical column set, so `fail` does not abort and the positional
+// INSERT swaps the values. Reorder-safety is exactly what `sync` provides
+// (INSERT BY NAME maps by name), so a SELECT whose column order is not pinned to
+// the table's should use `sync`, not `fail`. (An ordered-list comparison would
+// close this, but a false positive there would abort a correctly-aligned write,
+// so the guard stays on the set difference.)
+// `fail`/`sync` only affect partitioned replace, merge and append; whole-table
+// replace already rebuilds each run, and scd2 has no positional write — for an
+// scd2 target `sync` degrades to `warn` (no write-time effect; deploy-time
+// rejection is out of scope here).
 #[derive(Serialize, Debug, PartialEq, Eq, Clone, Copy, Default)]
 #[serde(rename_all = "lowercase")]
 pub enum OnSchemaChange {
     #[default]
     Warn,
     Ignore,
+    Fail,
+    Sync,
 }
 
 impl OnSchemaChange {
@@ -869,6 +896,39 @@ pub fn parse_pipeline_annotations(code: &str) -> PipelineAnnotations {
     out
 }
 
+// Count `// data_test <…>` lines in the leading comment header whose right-hand
+// side fails to parse into a check. `parse_pipeline_annotations` drops these
+// fail-safe (a malformed line just yields no check), which is the wrong default
+// for a data-quality assertion: a typo silently disables the test. The deploy
+// path uses this count to warn. Same leading-block boundary as the parser (stop
+// at the first non-comment line) so a body comment can't be miscounted, and the
+// same `parse_data_test_spec` grammar so "malformed" means exactly what the
+// parser rejects — no second grammar to drift.
+pub fn count_malformed_data_tests(code: &str) -> usize {
+    let mut malformed = 0;
+    for raw_line in code.lines() {
+        let line = raw_line.trim_start();
+        if line.is_empty() {
+            continue;
+        }
+        let rest = if let Some(r) = line.strip_prefix("//") {
+            r
+        } else if let Some(r) = line.strip_prefix("--") {
+            r
+        } else if let Some(r) = line.strip_prefix('#') {
+            r
+        } else {
+            break;
+        };
+        if let Some(after_kw) = consume_keyword(rest.trim_start(), "data_test") {
+            if parse_data_test_spec(after_kw.trim()).is_none() {
+                malformed += 1;
+            }
+        }
+    }
+    malformed
+}
+
 // Parse a `// retry <count> [<delay>]` right-hand side. `<count>` is a
 // non-negative decimal; `<delay>` is an optional raw duration string left
 // for `parse_duration_secs` to validate at deploy. A bare zero count (or
@@ -945,13 +1005,14 @@ fn parse_materialize_spec(s: &str) -> Option<MaterializeSpec> {
     // `deletes=close` (scd2 only) opts into hard-delete-close; any other value
     // (or absence) keeps the soft-delete default.
     let close_deleted = opts.get("deletes").map(|v| v == "close").unwrap_or(false);
-    // `on_schema_change=ignore` suppresses downstream contract warnings; any
-    // other value (or absence) keeps the `warn` default, fail-safe like
-    // `deletes=` above.
-    let on_schema_change = if opts.get("on_schema_change").map(String::as_str) == Some("ignore") {
-        OnSchemaChange::Ignore
-    } else {
-        OnSchemaChange::Warn
+    // `on_schema_change=ignore|fail|sync`; any other value (or absence) keeps
+    // the `warn` default, fail-safe like `deletes=` above (a typo must never
+    // silently disable the guardrail).
+    let on_schema_change = match opts.get("on_schema_change").map(String::as_str) {
+        Some("ignore") => OnSchemaChange::Ignore,
+        Some("fail") => OnSchemaChange::Fail,
+        Some("sync") => OnSchemaChange::Sync,
+        _ => OnSchemaChange::Warn,
     };
     Some(MaterializeSpec {
         target_kind,
@@ -1673,10 +1734,22 @@ mod pipeline_annotation_tests {
             out.materialize.expect("materialize").on_schema_change,
             OnSchemaChange::Warn
         );
-        // unknown value keeps the warn default (fail-safe, like `deletes=`);
-        // `fail` is deliberately unrecognized in v1
+        // fail + sync parse to their own variants
         let out =
             parse_pipeline_annotations("// materialize ducklake://a/orders on_schema_change=fail");
+        assert_eq!(
+            out.materialize.expect("materialize").on_schema_change,
+            OnSchemaChange::Fail
+        );
+        let out =
+            parse_pipeline_annotations("// materialize ducklake://a/orders on_schema_change=sync");
+        assert_eq!(
+            out.materialize.expect("materialize").on_schema_change,
+            OnSchemaChange::Sync
+        );
+        // unknown/junk value keeps the warn default (fail-safe, like `deletes=`)
+        let out =
+            parse_pipeline_annotations("// materialize ducklake://a/orders on_schema_change=bogus");
         assert_eq!(
             out.materialize.expect("materialize").on_schema_change,
             OnSchemaChange::Warn
@@ -2019,4 +2092,23 @@ mod pipeline_annotation_tests {
         ));
         assert!(out.column_lineage.is_empty());
     }
+
+    #[test]
+    fn count_malformed_data_tests_counts_only_broken_header_lines() {
+        let n = count_malformed_data_tests(concat!(
+            "-- data_test not_null id\n",                 // valid
+            "-- data_test unique id\n",                   // valid
+            "-- data_test accepted_values status paid\n", // malformed: missing `=`
+            "-- data_test relationships cust ducklake\n", // malformed: no `->`
+            "-- data_test\n",                             // malformed: bare keyword
+            "-- data_test f/tests/custom\n",              // valid: custom script path
+            "SELECT 1 -- data_test not_a_test\n",         // body line: not counted
+        ));
+        assert_eq!(n, 3);
+        // A clean header has zero.
+        assert_eq!(
+            count_malformed_data_tests("-- data_test unique id\nSELECT 1"),
+            0
+        );
+    }
 }
diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index 145e636904..fff036b22c 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -390,9 +390,39 @@ pub struct MaterializeCodegen<'a> {
     /// and the partition column / `SET PARTITIONED BY` are omitted.
     pub partitioned: bool,
     pub strategy: MaterializeStrategy,
+    /// Write-time guardrail for a drifted SELECT vs the fixed table schema.
+    /// Only the persist-and-mutate strategies (partitioned replace, merge,
+    /// append) act on it: `Fail` emits an in-txn guard that raises on drift,
+    /// `Sync` writes BY NAME and expects the executor to inject `ALTER TABLE`
+    /// DDL at the [`SYNC_ALTER_SENTINEL`] slot, `Warn`/`Ignore` write
+    /// positionally (drift surfaced by the summary in `Warn`, silent in
+    /// `Ignore`). See [`MaterializeCodegen::is_persist_and_mutate`].
+    pub on_schema_change: OnSchemaChange,
 }
 
+/// The exact statement the `sync` codegen emits right after `BEGIN
+/// TRANSACTION;` as the injection slot for `ALTER TABLE … ADD/DROP COLUMN`
+/// DDL. The executor computes the drift with a pre-pass probe and replaces this
+/// literal in the assembled query text (with the DDL, or removes it when there
+/// is no drift). Classified `Write` so the EE write-audit-publish reassembly
+/// keeps it inside the transaction with the mutations; a plain no-op SELECT so
+/// that if it is somehow left un-replaced the run still succeeds unchanged.
+pub const SYNC_ALTER_SENTINEL: &str = "SELECT '__wm_sync_alter_sentinel__' AS _wm_sync;";
+
 impl<'a> MaterializeCodegen<'a> {
+    /// Whether this (strategy, partitioned) uses the positional persist-and-
+    /// mutate write whose table schema is fixed at first CREATE — the only case
+    /// the `on_schema_change` write-time guardrail applies to. Whole-table
+    /// replace (`CREATE OR REPLACE`) and scd2 self-heal / are name-mapped, so
+    /// they are excluded.
+    pub fn is_persist_and_mutate(&self) -> bool {
+        match self.strategy {
+            MaterializeStrategy::Scd2 { .. } => false,
+            MaterializeStrategy::Replace => self.partitioned,
+            MaterializeStrategy::Append | MaterializeStrategy::Merge { .. } => true,
+        }
+    }
+
     /// The ordered statements that perform the materialization, to be run after
     /// the setup blocks and inside the caller's execution. The first-run
     /// bootstrap is idempotent (`IF NOT EXISTS`), so this is safe to run every
@@ -441,20 +471,38 @@ impl<'a> MaterializeCodegen<'a> {
             ));
         }
         out.push("BEGIN TRANSACTION;".to_string());
+        // Write-time schema guardrail, emitted right after BEGIN so it runs
+        // before any mutation (a failing guard aborts before touching data; the
+        // sync ALTERs run before the INSERT so the sets match). Reached only on
+        // the persist-and-mutate path here (whole-table replace and scd2 return
+        // above), so no extra strategy gate is needed.
+        match self.on_schema_change {
+            OnSchemaChange::Fail => out.push(schema_drift_guard_sql(sel, t, pcol)),
+            OnSchemaChange::Sync => out.push(SYNC_ALTER_SENTINEL.to_string()),
+            OnSchemaChange::Warn | OnSchemaChange::Ignore => {}
+        }
         // The rows to write, with the partition column appended when partitioned.
         let source = if self.partitioned {
             format!("SELECT *, {pval} AS {pcol} FROM ({sel})")
         } else {
             format!("SELECT * FROM ({sel})")
         };
+        // `sync` maps columns by name (positional would cross-wire: an ALTERed
+        // ADD COLUMN appends at the end, so a positional INSERT of the SELECT
+        // would fill it from the wrong source column).
+        let by_name = if self.on_schema_change == OnSchemaChange::Sync {
+            " BY NAME"
+        } else {
+            ""
+        };
         match &self.strategy {
             MaterializeStrategy::Replace => {
                 // Only reached when partitioned (whole-table replace returned above).
                 out.push(format!("DELETE FROM {t} WHERE {pcol} = {pval};"));
-                out.push(format!("INSERT INTO {t} {source};"));
+                out.push(format!("INSERT INTO {t}{by_name} {source};"));
             }
             MaterializeStrategy::Append => {
-                out.push(format!("INSERT INTO {t} {source};"));
+                out.push(format!("INSERT INTO {t}{by_name} {source};"));
             }
             MaterializeStrategy::Merge { unique_key } => {
                 // Upsert within the slice via delete-by-key + insert (dbt's
@@ -474,7 +522,7 @@ impl<'a> MaterializeCodegen<'a> {
                 out.push(format!(
                     "DELETE FROM {t} WHERE {scope}{unique_key} IN (SELECT {unique_key} FROM ({sel}));"
                 ));
-                out.push(format!("INSERT INTO {t} {source};"));
+                out.push(format!("INSERT INTO {t}{by_name} {source};"));
             }
             // Handled by the early return above (scd2 has no partitioned form).
             MaterializeStrategy::Scd2 { .. } => unreachable!("scd2 handled before this match"),
@@ -632,6 +680,89 @@ impl<'a> MaterializeCodegen<'a> {
     }
 }
 
+// ---------------------------------------------------------------------------
+// on_schema_change drift detection (write-time guardrail)
+// ---------------------------------------------------------------------------
+//
+// Drift is computed entirely in SQL against the live DuckDB session: the
+// SELECT's output columns come from `DESCRIBE`, the table's from `DESCRIBE` of
+// the target (the managed `_wm_partition` column is excluded so it is compared
+// as the producer's logical output, matching schema capture). `added` = SELECT
+// columns absent from the table, `removed` = table columns absent from the
+// SELECT. When the table was just created this run (first materialize) the two
+// DESCRIBEs agree, so both lists are empty and no guard fires.
+
+/// A `DESCRIBE`-derived set of column names of `rel_sql` (any SELECT-able
+/// relation, already parenthesized/qualified by the caller), optionally
+/// dropping the managed partition column.
+fn describe_col_names(rel_sql: &str, exclude_col: Option<&str>) -> String {
+    let filter = match exclude_col {
+        Some(c) => format!(" WHERE column_name <> {}", quote_lit(c)),
+        None => String::new(),
+    };
+    format!("SELECT column_name FROM (DESCRIBE SELECT * FROM {rel_sql}){filter}")
+}
+
+/// Scalar subqueries `(added, removed)` — the list of column names in the
+/// SELECT but not the table, and vice versa. Each is a `list(...)` over an
+/// `EXCEPT`; empty ⇒ `list()` yields an empty list (`len` 0). The partition
+/// column is excluded on the table side only.
+///
+/// Set difference, not ordered: this catches the add/remove/rename that a
+/// positional INSERT misaligns on, but by design NOT a pure reorder of
+/// same-named columns (identical sets ⇒ empty added/removed). See the
+/// `OnSchemaChange` doc in asset_parser.rs — reorder-safety is `sync`'s job
+/// (INSERT BY NAME); the set difference is deliberately kept over an ordered
+/// comparison so the `fail` guard cannot false-positive on a correctly-aligned
+/// write.
+fn drift_lists(sel_sql: &str, target_qualified: &str, partition_col: &str) -> (String, String) {
+    let sel = describe_col_names(&format!("({sel_sql})"), None);
+    let tbl = describe_col_names(target_qualified, Some(partition_col));
+    let added = format!("(SELECT list(column_name) FROM (({sel}) EXCEPT ({tbl})))");
+    let removed = format!("(SELECT list(column_name) FROM (({tbl}) EXCEPT ({sel})))");
+    (added, removed)
+}
+
+/// The `fail`-mode guard: a single statement that raises via DuckDB `error(...)`
+/// when the SELECT's columns diverge from the table's, naming the added/removed
+/// columns and the target. Both `CASE` branches are cast to VARCHAR so the
+/// planner cannot constant-fold the `error(...)` away, and the condition depends
+/// on the runtime drift subqueries so it is never folded to a constant.
+fn schema_drift_guard_sql(sel_sql: &str, target_qualified: &str, partition_col: &str) -> String {
+    let (added, removed) = drift_lists(sel_sql, target_qualified, partition_col);
+    // `target_qualified` is safe in table-reference position (quoted identifiers)
+    // but here it lands inside a SQL string literal, so single-quotes must be
+    // doubled (same as `quote_lit`).
+    let tq = target_qualified.replace('\'', "''");
+    format!(
+        "SELECT CASE WHEN coalesce(len(_wm_added), 0) + coalesce(len(_wm_removed), 0) > 0 \
+         THEN CAST(error('managed materialize: on_schema_change=fail blocked a schema-drifted \
+         write to {tq} — added column(s): [' || coalesce(array_to_string(_wm_added, ', '), '') || \
+         '], removed column(s): [' || coalesce(array_to_string(_wm_removed, ', '), '') || \
+         ']. The table schema is fixed at first create; set on_schema_change=sync to auto-migrate, \
+         or align the SELECT with the table.') AS VARCHAR) ELSE 'ok' END \
+         FROM (SELECT {added} AS _wm_added, {removed} AS _wm_removed);",
+        tq = tq,
+    )
+}
+
+/// The `warn`-mode summary column: a `schema_drift` struct `{added, removed}`
+/// when the SELECT drifted from the table, else NULL. Appended to the
+/// materialize summary row so the executor can log it and fold it into the job
+/// result without an extra round-trip.
+fn schema_drift_summary_field(
+    sel_sql: &str,
+    target_qualified: &str,
+    partition_col: &str,
+) -> String {
+    let (added, removed) = drift_lists(sel_sql, target_qualified, partition_col);
+    format!(
+        "(SELECT CASE WHEN coalesce(len(_wm_added), 0) + coalesce(len(_wm_removed), 0) > 0 \
+         THEN {{'added': _wm_added, 'removed': _wm_removed}} END \
+         FROM (SELECT {added} AS _wm_added, {removed} AS _wm_removed)) AS schema_drift"
+    )
+}
+
 /// The read that captures the DuckLake snapshot id produced by the write, for
 /// the given attach alias (e.g. `_wm_target`). The worker runs this last and
 /// records the result into `materialized_partition`.
@@ -713,6 +844,7 @@ pub fn build_wrap_blocks(
     partition_value_sql: &str,
     partitioned: bool,
     strategy: MaterializeStrategy,
+    on_schema_change: OnSchemaChange,
     tests: &[DataTestResolved],
 ) -> Result<MaterializePlan, String> {
     let target_qualified = format!("{TARGET_ALIAS}.{target_table}");
@@ -733,7 +865,17 @@ pub fn build_wrap_blocks(
         partition_value_sql,
         partitioned,
         strategy,
+        on_schema_change,
     };
+    // `warn` folds the post-write drift into the summary row (executor logs it +
+    // returns it) — only for the positional persist-and-mutate path, and only in
+    // `warn`: `fail`/`sync` guard the write itself, `ignore` is silent.
+    let drift_summary_select =
+        if on_schema_change == OnSchemaChange::Warn && cg.is_persist_and_mutate() {
+            Some(plan.output.as_str())
+        } else {
+            None
+        };
     let mut stmts: Vec<MaterializeStmt> = Vec::new();
     let setup = |sql: String| MaterializeStmt { kind: MaterializeStmtKind::Setup, sql };
     // Setup blocks come from the splitter with their `;` stripped — re-terminate
@@ -766,6 +908,7 @@ pub fn build_wrap_blocks(
             partition_value_sql,
             partitioned,
             &test_sql.checks,
+            drift_summary_select,
         ),
     });
     Ok(MaterializePlan { stmts, checks: test_sql.checks })
@@ -782,6 +925,10 @@ pub fn materialize_result_sql(
     partition_value_sql: &str,
     partitioned: bool,
     checks: &[DataTestCheck],
+    // `on_schema_change=warn` on a persist-and-mutate strategy: the SELECT to
+    // diff against the (post-write) table for the `schema_drift` summary column.
+    // `None` ⇒ no drift column (every other mode / strategy).
+    drift_summary_select: Option<&str>,
 ) -> String {
     let (count_expr, partition_sel) = if partitioned {
         // Row count is the slice this run wrote (the partition); `partition`
@@ -828,11 +975,20 @@ pub fn materialize_result_sql(
          FROM (SELECT column_name, column_type, row_number() OVER () AS _wm_ord \
                FROM (DESCRIBE SELECT * FROM {target_qualified}){partition_filter})) AS output_schema"
     );
+    // `on_schema_change=warn`: fold the drift `{added, removed}` (or NULL) into
+    // the same row so the executor logs it + returns it with no extra probe.
+    let drift_col = match drift_summary_select {
+        Some(sel) => format!(
+            ", {}",
+            schema_drift_summary_field(sel, target_qualified, partition_col)
+        ),
+        None => String::new(),
+    };
     let base_cols = format!(
         "'ducklake://{asset_path}' AS materialized, \
          {partition_sel}{count_expr} AS rows, \
          (SELECT max(snapshot_id) FROM ducklake_snapshots('{TARGET_ALIAS}')) AS snapshot_id, \
-         {schema_capture}"
+         {schema_capture}{drift_col}"
     );
     if checks.is_empty() {
         return format!("SELECT {base_cols};");
@@ -907,7 +1063,7 @@ fn terminate(stmt: &str) -> String {
 // own checks through the same `push_check` shape rather than bolting on a
 // parallel mechanism. See `docs/ducklake-materialization.md`.
 
-use crate::asset_parser::{AssetKind, DataTest};
+use crate::asset_parser::{AssetKind, DataTest, OnSchemaChange};
 
 /// Target context a data-test probe runs against — the materialized table and
 /// the partition slice (when partitioned, tests are scoped to the slice just
@@ -1355,6 +1511,7 @@ mod tests {
             partition_value_sql: "'2026-06-19'",
             partitioned: true,
             strategy: MaterializeStrategy::Replace,
+            on_schema_change: OnSchemaChange::Warn,
         };
         let st = cg.statements();
         assert!(st[0].contains("CREATE TABLE IF NOT EXISTS _wm_target.orders_daily"));
@@ -1380,6 +1537,7 @@ mod tests {
             partition_value_sql: "'2026-06-19'",
             partitioned: true,
             strategy: MaterializeStrategy::Merge { unique_key: "order_id".to_string() },
+            on_schema_change: OnSchemaChange::Warn,
         };
         let st = cg.statements();
         // upsert = delete-by-key (partition-scoped) + insert — NO `MERGE INTO`
@@ -1406,6 +1564,7 @@ mod tests {
             partition_value_sql: "'2026-06-19'",
             partitioned: true,
             strategy: MaterializeStrategy::Append,
+            on_schema_change: OnSchemaChange::Warn,
         };
         let st = cg.statements();
         assert!(st
@@ -1427,6 +1586,7 @@ mod tests {
             partition_value_sql: "''",
             partitioned: false,
             strategy: MaterializeStrategy::Replace,
+            on_schema_change: OnSchemaChange::Warn,
         };
         let st = cg.statements();
         assert_eq!(
@@ -1452,6 +1612,7 @@ mod tests {
                 track: vec![],
                 close_deleted: false,
             },
+            on_schema_change: OnSchemaChange::Warn,
         };
         let st = cg.statements();
         // bootstrap adds the three SCD metadata columns
@@ -1508,6 +1669,7 @@ mod tests {
                 track: vec!["name".to_string()],
                 close_deleted: false,
             },
+            on_schema_change: OnSchemaChange::Warn,
         };
         let st = cg.statements();
         // only key + tracked cols are compared (addr changes don't rotate a version)
@@ -1527,6 +1689,7 @@ mod tests {
                 track: vec![],
                 close_deleted: true,
             },
+            on_schema_change: OnSchemaChange::Warn,
         };
         let st = cg.statements();
         // the deleted-key set: current keys absent from the snapshot, captured
@@ -1563,6 +1726,169 @@ mod tests {
         assert!(begin < del_close && del_close < commit);
     }
 
+    fn persist_cg(strategy: MaterializeStrategy, osc: OnSchemaChange) -> Vec<String> {
+        MaterializeCodegen {
+            target_qualified: "_wm_target.t",
+            select_sql: "SELECT a, c FROM dl.src",
+            partition_col: "_wm_partition",
+            partition_value_sql: "''",
+            partitioned: false,
+            strategy,
+            on_schema_change: osc,
+        }
+        .statements()
+    }
+
+    #[test]
+    fn codegen_fail_emits_drift_guard_inside_txn_before_write() {
+        let st = persist_cg(
+            MaterializeStrategy::Merge { unique_key: "a".into() },
+            OnSchemaChange::Fail,
+        );
+        let begin = st.iter().position(|s| s == "BEGIN TRANSACTION;").unwrap();
+        let guard = st
+            .iter()
+            .position(|s| s.contains("error(") && s.contains("on_schema_change=fail"))
+            .expect("fail emits a guard");
+        let del = st
+            .iter()
+            .position(|s| s.starts_with("DELETE FROM"))
+            .unwrap();
+        let insert = st
+            .iter()
+            .position(|s| s.starts_with("INSERT INTO"))
+            .unwrap();
+        let commit = st.iter().position(|s| s == "COMMIT;").unwrap();
+        // guard runs right after BEGIN and before any mutation, inside the txn
+        assert!(begin < guard && guard < del && del < insert && insert < commit);
+        // both CASE branches are VARCHAR so the planner can't fold error() away
+        assert!(st[guard].contains("CAST(error("));
+        assert!(st[guard].contains("ELSE 'ok' END"));
+        // fail is positional (no BY NAME) and emits no sync sentinel
+        assert!(st[insert].starts_with("INSERT INTO _wm_target.t SELECT"));
+        assert!(!st.iter().any(|s| s == SYNC_ALTER_SENTINEL));
+    }
+
+    #[test]
+    fn fail_guard_drift_is_name_set_based_not_ordered() {
+        // Documents a deliberate boundary: the fail guard fires on the column
+        // SET difference (EXCEPT over column_name), so a pure reorder of
+        // same-named columns is NOT caught here — that is `sync`'s job (BY NAME).
+        // Keeping this name-set (not an ordered comparison) is what prevents the
+        // guard from false-positive-aborting a correctly-aligned write. If this
+        // ever moves to an ordered comparison, update the OnSchemaChange doc.
+        let guard =
+            schema_drift_guard_sql("SELECT b, a FROM dl.src", "_wm_target.t", "_wm_partition");
+        assert!(guard.contains("column_name"));
+        assert!(guard.contains("EXCEPT"));
+        // No positional/ordinal comparison in the guard condition.
+        assert!(!guard.to_lowercase().contains("ordinal"));
+        assert!(!guard.to_lowercase().contains("row_number"));
+    }
+
+    #[test]
+    fn codegen_sync_uses_by_name_and_sentinel() {
+        let st = persist_cg(MaterializeStrategy::Append, OnSchemaChange::Sync);
+        let begin = st.iter().position(|s| s == "BEGIN TRANSACTION;").unwrap();
+        let sentinel = st.iter().position(|s| s == SYNC_ALTER_SENTINEL).unwrap();
+        let insert = st
+            .iter()
+            .position(|s| s.starts_with("INSERT INTO"))
+            .unwrap();
+        // the ALTER-injection slot is right after BEGIN, before the write
+        assert!(begin < sentinel && sentinel < insert);
+        // name-mapped insert (a positional insert would cross-wire ALTERed cols)
+        assert!(st[insert].starts_with("INSERT INTO _wm_target.t BY NAME SELECT"));
+        assert!(!st.iter().any(|s| s.contains("error(")));
+    }
+
+    #[test]
+    fn codegen_ignore_and_warn_write_positionally_no_guard() {
+        for osc in [OnSchemaChange::Ignore, OnSchemaChange::Warn] {
+            let st = persist_cg(MaterializeStrategy::Append, osc);
+            assert!(!st.iter().any(|s| s.contains("error(")), "{osc:?}");
+            assert!(!st.iter().any(|s| s == SYNC_ALTER_SENTINEL), "{osc:?}");
+            let insert = st.iter().find(|s| s.starts_with("INSERT INTO")).unwrap();
+            assert!(
+                insert.starts_with("INSERT INTO _wm_target.t SELECT"),
+                "{osc:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn codegen_whole_table_replace_and_scd2_ignore_guardrail() {
+        // Whole-table replace (unpartitioned) and scd2 are not persist-and-mutate:
+        // fail/sync must not add a guard/sentinel/BY NAME there.
+        let repl = MaterializeCodegen {
+            target_qualified: "_wm_target.t",
+            select_sql: "SELECT a FROM dl.src",
+            partition_col: "_wm_partition",
+            partition_value_sql: "''",
+            partitioned: false,
+            strategy: MaterializeStrategy::Replace,
+            on_schema_change: OnSchemaChange::Fail,
+        };
+        assert!(!repl.is_persist_and_mutate());
+        let st = repl.statements();
+        assert!(!st
+            .iter()
+            .any(|s| s.contains("error(") || s == SYNC_ALTER_SENTINEL));
+
+        let scd2 = MaterializeCodegen {
+            strategy: MaterializeStrategy::Scd2 {
+                key: "a".into(),
+                track: vec![],
+                close_deleted: false,
+            },
+            on_schema_change: OnSchemaChange::Sync,
+            ..repl
+        };
+        assert!(!scd2.is_persist_and_mutate());
+        let st = scd2.statements();
+        assert!(!st.iter().any(|s| s == SYNC_ALTER_SENTINEL));
+        assert!(!st.iter().any(|s| s.contains(" BY NAME ")));
+    }
+
+    #[test]
+    fn summary_schema_drift_field_only_for_warn_persist_and_mutate() {
+        // warn + persist-and-mutate ⇒ summary carries the drift column
+        let warn = plan_for_osc(MaterializeStrategy::Append, false, OnSchemaChange::Warn);
+        assert!(warn.stmts.last().unwrap().sql.contains("AS schema_drift"));
+        // ignore / fail / sync ⇒ no summary drift column (they guard the write)
+        for osc in [
+            OnSchemaChange::Ignore,
+            OnSchemaChange::Fail,
+            OnSchemaChange::Sync,
+        ] {
+            let p = plan_for_osc(MaterializeStrategy::Append, false, osc);
+            assert!(
+                !p.stmts.last().unwrap().sql.contains("schema_drift"),
+                "{osc:?} must not emit the summary drift column"
+            );
+        }
+        // whole-table replace + warn ⇒ not persist-and-mutate ⇒ no drift column
+        let repl = plan_for_osc(MaterializeStrategy::Replace, false, OnSchemaChange::Warn);
+        assert!(!repl.stmts.last().unwrap().sql.contains("schema_drift"));
+    }
+
+    #[test]
+    fn fail_guard_is_write_kind_between_txn_markers() {
+        use MaterializeStmtKind::*;
+        let plan = plan_for_osc(
+            MaterializeStrategy::Merge { unique_key: "a".into() },
+            false,
+            OnSchemaChange::Fail,
+        );
+        let begin = kidx(&plan, |s| s.kind == TxnBegin);
+        let commit = kidx(&plan, |s| s.kind == TxnCommit);
+        let guard = kidx(&plan, |s| {
+            s.sql.contains("error(") && s.sql.contains("on_schema_change=fail")
+        });
+        assert_eq!(plan.stmts[guard].kind, Write);
+        assert!(begin < guard && guard < commit);
+    }
+
     #[test]
     fn snapshot_capture_targets_alias() {
         assert_eq!(
@@ -1583,6 +1909,7 @@ mod tests {
             "'2026-06-19'",
             true,
             MaterializeStrategy::Replace,
+            OnSchemaChange::Warn,
             &[],
         )
         .unwrap()
@@ -1615,6 +1942,14 @@ mod tests {
     // -- materialize plan structure ------------------------------------------
 
     fn plan_for(strategy: MaterializeStrategy, partitioned: bool) -> MaterializePlan {
+        plan_for_osc(strategy, partitioned, OnSchemaChange::Warn)
+    }
+
+    fn plan_for_osc(
+        strategy: MaterializeStrategy,
+        partitioned: bool,
+        on_schema_change: OnSchemaChange,
+    ) -> MaterializePlan {
         let plan = ok("SELECT a, b FROM src");
         build_wrap_blocks(
             &plan,
@@ -1625,6 +1960,7 @@ mod tests {
             "'2026-06-19'",
             partitioned,
             strategy,
+            on_schema_change,
             &[
                 DataTestResolved::BuiltIn(DataTest::NotNull { column: "a".into() }),
                 DataTestResolved::BuiltIn(DataTest::Unique { column: "b".into() }),
@@ -1702,6 +2038,7 @@ mod tests {
             "''",
             false,
             MaterializeStrategy::Append,
+            OnSchemaChange::Warn,
             &[],
         )
         .unwrap();
@@ -1972,6 +2309,7 @@ mod tests {
             "'2026-06-19'",
             false,
             &checks,
+            None,
         );
         // each probe runs once as a one-row CTE; _wm_tr cross-joins them and
         // the list-of-struct references the flattened count/sample columns.
@@ -1993,6 +2331,7 @@ mod tests {
             "'x'",
             false,
             &[],
+            None,
         );
         assert!(plain.starts_with("SELECT 'ducklake://analytics/orders' AS materialized"));
         assert!(!plain.contains("data_tests"));
@@ -2019,6 +2358,7 @@ mod tests {
             "'2026-06-19'",
             true,
             &[],
+            None,
         );
         assert!(sql.contains(
             "FROM (DESCRIBE SELECT * FROM _wm_target.orders_daily) \
diff --git a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
index 5ee2945d18..d41d05b58b 100644
--- a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
+++ b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
@@ -329,8 +329,8 @@
 		}
 	},
 	{
-		"name": "materialize on_schema_change unknown value keeps warn default (fail unrecognized in v1)",
-		"code": "// materialize ducklake://analytics/orders key=id on_schema_change=fail\nSELECT 1;",
+		"name": "materialize on_schema_change unknown value keeps warn default (fail-safe)",
+		"code": "// materialize ducklake://analytics/orders key=id on_schema_change=bogus\nSELECT 1;",
 		"expected": {
 			"in_pipeline": false,
 			"asset_triggers": [],
diff --git a/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs b/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
index b51b33faf8..7adb07b55c 100644
--- a/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
+++ b/backend/parsers/windmill-parser/tests/pipeline_annotations_parity.rs
@@ -219,6 +219,8 @@ fn pipeline_annotation_fixtures_match() {
                 let osc = match m.on_schema_change {
                     windmill_parser::asset_parser::OnSchemaChange::Warn => "warn",
                     windmill_parser::asset_parser::OnSchemaChange::Ignore => "ignore",
+                    windmill_parser::asset_parser::OnSchemaChange::Fail => "fail",
+                    windmill_parser::asset_parser::OnSchemaChange::Sync => "sync",
                 };
                 assert_eq!(
                     osc, e.on_schema_change,
diff --git a/backend/windmill-api-scripts/src/scripts.rs b/backend/windmill-api-scripts/src/scripts.rs
index e38d1925f0..c3d01dad13 100644
--- a/backend/windmill-api-scripts/src/scripts.rs
+++ b/backend/windmill-api-scripts/src/scripts.rs
@@ -1316,6 +1316,23 @@ async fn create_script_internal<'c>(
             );
         }
     }
+    // A `// data_test` line whose right-hand side doesn't parse into a known
+    // check is dropped silently by the parser (fail-safe). For a data-quality
+    // assertion that is a footgun — a typo disables the test with no signal —
+    // so warn at deploy. Warning, not rejection: it matches the other pipeline
+    // deploy checks above and can't false-positive a deploy on an edge the
+    // coarse count and the parser disagree on.
+    let malformed_data_tests =
+        windmill_parser::asset_parser::count_malformed_data_tests(&ns.content);
+    if malformed_data_tests > 0 {
+        tracing::warn!(
+            "script {}: {} `// data_test` line(s) are malformed and were dropped — the intended \
+             check(s) will not run. Fix the syntax (e.g. `data_test accepted_values <col> = a,b,c`, \
+             `data_test relationships <col> -> <asset>.<refcol>`).",
+            ns.path,
+            malformed_data_tests
+        );
+    }
     // `// macros` — this script is a workspace macro library: its body is
     // CREATE [OR REPLACE] MACRO statements plus plain setup, registered into
     // `macro_definition` and injected as TEMP macros into consumer jobs.
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index 817c86281c..d7436c579c 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -19,7 +19,7 @@ use windmill_common::workspaces::{
 use windmill_common::PgDatabase;
 use windmill_object_store::S3_PROXY_LAST_ERRORS_CACHE;
 use windmill_parser_sql::{parse_duckdb_sig, parse_sql_blocks};
-use windmill_queue::{CanceledBy, MiniPulledJob};
+use windmill_queue::{append_logs, CanceledBy, MiniPulledJob};
 use windmill_types::s3::S3Object;
 
 use crate::agent_workers::{get_datatable_resource_from_agent_http, get_ducklake_from_agent_http};
@@ -44,6 +44,27 @@ struct MaterializeExec {
     // (e.g. an FFI serialization change drops the column), we fail loud rather
     // than silently pass declared-but-unverified tests.
     n_data_tests: usize,
+    // `on_schema_change=warn` (default) on a positional persist-and-mutate write:
+    // the summary carries a `schema_drift` column the worker logs + returns.
+    on_schema_change: windmill_parser::asset_parser::OnSchemaChange,
+    // `on_schema_change=sync`: the pre-pass probe (setup + target ATTACH + the
+    // SELECT's/table's column reads) whose result drives the injected ALTER DDL.
+    // `None` for every other mode / non-persist-and-mutate strategy.
+    sync_prepass: Option<SyncPrepass>,
+}
+
+// Inputs for the `on_schema_change=sync` pre-pass: a probe query read against
+// the live session and the target table it migrates. The worker runs the probe
+// (same interpolation + ATTACH transform as the main query), diffs the SELECT's
+// columns against the table's, and splices `ALTER TABLE … ADD/DROP COLUMN` DDL
+// into the plan at the [`SYNC_ALTER_SENTINEL`] slot before the write.
+struct SyncPrepass {
+    // Setup + synthetic target ATTACH + the two column reads. Carries `$args`/
+    // `{partition}` verbatim (the worker interpolates it like the main query).
+    probe_query: String,
+    // Target table within `_wm_target` (e.g. `orders` or `schema.orders`), used
+    // to build the quoted `ALTER TABLE _wm_target.<table>` statements.
+    target_table: String,
 }
 
 // Fetch and validate a custom data-test script's body. v1 custom tests are
@@ -148,11 +169,14 @@ fn build_materialized_query(
         .target_path
         .split_once('/')
         .unwrap_or((m.target_path.as_str(), ""));
-    let meta = MaterializeExec {
+    let mut meta = MaterializeExec {
         asset_kind: windmill_common::assets::AssetKind::Ducklake,
         asset_path: m.target_path.clone(),
         partition: partition.clone(),
         n_data_tests: ann.data_tests.len(),
+        on_schema_change: m.on_schema_change,
+        // Set below once the strategy is known (managed persist-and-mutate only).
+        sync_prepass: None,
     };
 
     // `{partition}` → escaped SQL literal substitution, applied to the managed
@@ -242,6 +266,36 @@ fn build_materialized_query(
         }
     }
 
+    let cg_probe = windmill_parser::sql_materialize::MaterializeCodegen {
+        target_qualified: "",
+        select_sql: "",
+        partition_col: "_wm_partition",
+        partition_value_sql: "",
+        partitioned,
+        strategy: strategy.clone(),
+        on_schema_change: m.on_schema_change,
+    };
+    // `sync` needs a host round-trip: a pre-pass probe reads the SELECT's and the
+    // table's columns so the ALTER DDL can be computed, then spliced into the
+    // plan at the sentinel slot. Build the probe query here (setup + target
+    // ATTACH + the two column reads) while we still have the substituted SELECT +
+    // setup; the executor runs it through the same interpolation/ATTACH transform
+    // as the main query. Only for the positional persist-and-mutate strategies
+    // (scd2 / whole-table replace emit no sentinel).
+    if m.on_schema_change == windmill_parser::asset_parser::OnSchemaChange::Sync
+        && cg_probe.is_persist_and_mutate()
+    {
+        meta.sync_prepass = Some(SyncPrepass {
+            probe_query: build_sync_probe_query(
+                &plan.setup,
+                &synthetic_attach,
+                &plan.output,
+                table,
+            ),
+            target_table: table.to_string(),
+        });
+    }
+
     let mat_plan = build_wrap_blocks(
         &plan,
         &synthetic_attach,
@@ -251,6 +305,7 @@ fn build_materialized_query(
         &pval,
         partitioned,
         strategy,
+        m.on_schema_change,
         &resolved,
     )
     .map_err(Error::ExecutionErr)?;
@@ -263,6 +318,191 @@ fn build_materialized_query(
     Ok(Some((Some(blocks.join("\n")), meta)))
 }
 
+// Build the `on_schema_change=sync` pre-pass probe: the substituted setup + the
+// synthetic target ATTACH, then two column reads unioned — the SELECT's columns
+// (via `DESCRIBE`) tagged `sel`, and the target table's (via information_schema,
+// which yields zero rows when the table doesn't exist yet, so a first
+// materialize is a no-drift skip rather than an error) tagged `tbl`. The managed
+// `_wm_partition` column is filtered out of the table side. Carries
+// `$args`/`{partition}` verbatim; the caller interpolates + ATTACH-transforms it
+// like the main query so the DESCRIBE binds run-time args.
+fn build_sync_probe_query(
+    setup: &[String],
+    synthetic_attach: &str,
+    select_sql: &str,
+    table: &str,
+) -> String {
+    let (schema, tname) = match table.split_once('.') {
+        Some((s, t)) => (Some(s), t),
+        None => (None, table),
+    };
+    let esc = |s: &str| s.replace('\'', "''");
+    let schema_filter = schema
+        .map(|s| format!(" AND table_schema = '{}'", esc(s)))
+        .unwrap_or_default();
+    let mut out = String::new();
+    let mut push_stmt = |s: &str| {
+        let t = s.trim_end();
+        if t.is_empty() {
+            return;
+        }
+        out.push_str(t);
+        if !t.ends_with(';') {
+            out.push(';');
+        }
+        out.push('\n');
+    };
+    for s in setup {
+        push_stmt(s);
+    }
+    push_stmt(synthetic_attach);
+    // Read the target's columns from `information_schema.columns` scoped to the
+    // attached target catalog via `table_catalog` (DuckDB's catalog-qualified
+    // `<db>.information_schema` does NOT exist; the unqualified view spans
+    // attached catalogs and distinguishes them by `table_catalog`). It yields
+    // zero rows for a not-yet-created table — a no-drift skip, not an error
+    // (unlike `pragma_table_info`/`DESCRIBE`).
+    out.push_str(&format!(
+        "SELECT 'sel' AS _wm_which, column_name AS _wm_name, column_type AS _wm_type \
+         FROM (DESCRIBE SELECT * FROM ({select_sql})) \
+         UNION ALL \
+         SELECT 'tbl' AS _wm_which, column_name AS _wm_name, data_type AS _wm_type \
+         FROM information_schema.columns \
+         WHERE table_catalog = '{alias}' AND table_name = '{tname}'{schema_filter} \
+         AND column_name <> '_wm_partition';",
+        alias = windmill_parser::sql_materialize::TARGET_ALIAS,
+        tname = esc(tname),
+    ));
+    out
+}
+
+// Run the sync pre-pass probe (already interpolated + ATTACH-transformed by the
+// caller) and turn its column diff into the `ALTER TABLE … ADD/DROP COLUMN` DDL
+// to splice at the sentinel. Empty string when the table is fresh (no rows) or
+// the SELECT already matches. The probe failing is fatal (no silent fallback).
+async fn compute_sync_alter_ddl(
+    probe_blocks: Vec<String>,
+    job_args: Vec<Arg>,
+    target_table: String,
+    token: String,
+    base_internal_url: String,
+    w_id: String,
+    job_dir: String,
+) -> Result<String> {
+    let n = probe_blocks.len();
+    let (result, _) = tokio::task::spawn_blocking(move || {
+        run_duckdb_ffi_safe(
+            probe_blocks.iter().map(String::as_str),
+            n,
+            job_args,
+            &token,
+            &base_internal_url,
+            &w_id,
+            &job_dir,
+            SqlResultCollectionStrategy::LastStatementAllRows,
+        )
+    })
+    .await
+    .map_err(|e| Error::from(to_anyhow(e)))
+    .and_then(|r| r)
+    .map_err(|e| {
+        Error::ExecutionErr(format!(
+            "on_schema_change=sync: the schema pre-pass probe failed ({e}); refusing to write"
+        ))
+    })?;
+
+    let (added, removed) = parse_sync_drift(&result)?;
+    let tq = format!(
+        "{}.{}",
+        windmill_parser::sql_materialize::TARGET_ALIAS,
+        quote_qualified_table(&target_table)
+    );
+    let mut stmts = Vec::new();
+    for (name, typ) in &added {
+        if typ.is_empty() {
+            return Err(Error::ExecutionErr(format!(
+                "on_schema_change=sync: could not resolve a type for new column `{name}`"
+            )));
+        }
+        // `typ` is DuckDB's own DESCRIBE type name (e.g. BIGINT, VARCHAR,
+        // DECIMAL(10,2)) — a valid type expression, injected verbatim.
+        stmts.push(format!(
+            "ALTER TABLE {tq} ADD COLUMN \"{}\" {typ};",
+            name.replace('"', "\"\"")
+        ));
+    }
+    for name in &removed {
+        stmts.push(format!(
+            "ALTER TABLE {tq} DROP COLUMN \"{}\";",
+            name.replace('"', "\"\"")
+        ));
+    }
+    Ok(stmts.join("\n"))
+}
+
+// Parse the sync probe result rows (`_wm_which`/`_wm_name`/`_wm_type`) into the
+// column diff: `added` = SELECT columns (with their types) absent from the
+// table, `removed` = table columns absent from the SELECT. `_wm_partition` and
+// empty names are ignored. An empty table side means the table doesn't exist
+// yet — a no-op first materialize, so both lists are empty.
+fn parse_sync_drift(result: &RawValue) -> Result<(Vec<(String, String)>, Vec<String>)> {
+    let root: Value = serde_json::from_str(result.get()).map_err(|e| {
+        Error::ExecutionErr(format!("on_schema_change=sync: bad probe result json: {e}"))
+    })?;
+    // The FFI may surface the rows as an array, a single object, or a JSON
+    // string — normalize to a list of row objects.
+    let owned;
+    let rows: Vec<&Value> = match &root {
+        Value::Array(a) => a.iter().collect(),
+        Value::Object(_) => vec![&root],
+        Value::String(s) => {
+            owned = serde_json::from_str::<Value>(s).unwrap_or(Value::Null);
+            match &owned {
+                Value::Array(a) => a.iter().collect(),
+                Value::Object(_) => vec![&owned],
+                _ => vec![],
+            }
+        }
+        _ => vec![],
+    };
+    let mut sel: Vec<(String, String)> = Vec::new();
+    let mut tbl: std::collections::HashSet<String> = std::collections::HashSet::new();
+    for row in rows {
+        let Some(o) = row.as_object() else { continue };
+        let name = o
+            .get("_wm_name")
+            .and_then(|v| v.as_str())
+            .unwrap_or("")
+            .to_string();
+        if name.is_empty() || name == "_wm_partition" {
+            continue;
+        }
+        let typ = o
+            .get("_wm_type")
+            .and_then(|v| v.as_str())
+            .unwrap_or("")
+            .to_string();
+        match o.get("_wm_which").and_then(|v| v.as_str()).unwrap_or("") {
+            "sel" => sel.push((name, typ)),
+            "tbl" => {
+                tbl.insert(name);
+            }
+            _ => {}
+        }
+    }
+    if tbl.is_empty() {
+        return Ok((Vec::new(), Vec::new()));
+    }
+    let sel_names: std::collections::HashSet<&String> = sel.iter().map(|(n, _)| n).collect();
+    let added = sel
+        .iter()
+        .filter(|(n, _)| !tbl.contains(n))
+        .cloned()
+        .collect();
+    let removed = tbl.into_iter().filter(|n| !sel_names.contains(n)).collect();
+    Ok((added, removed))
+}
+
 // Fetch the deployed body of every `// data_test <path>` custom test declared in
 // `query`, keyed by path, so the sync `build_materialized_query` can splice them
 // in. The DB read is the only part of materialize codegen that needs a
@@ -878,6 +1118,50 @@ fn extract_schema(
     }
 }
 
+// Pull the `on_schema_change=warn` drift out of the materialize summary's
+// `schema_drift` column: a `{added: [..], removed: [..]}` struct (or NULL when
+// the SELECT matched the table). Like `output_schema`, the FFI may surface it
+// nested or as a JSON string — accept both. `None` when there is no drift.
+fn extract_schema_drift(result: &RawValue) -> Option<(Vec<String>, Vec<String>)> {
+    fn str_list(v: Option<&Value>) -> Vec<String> {
+        match v {
+            Some(Value::Array(a)) => a
+                .iter()
+                .filter_map(|x| x.as_str().map(str::to_string))
+                .collect(),
+            _ => Vec::new(),
+        }
+    }
+    fn find_field(v: &Value) -> Option<&Value> {
+        match v {
+            Value::Object(o) => o.get("schema_drift"),
+            Value::Array(a) => a.iter().find_map(find_field),
+            _ => None,
+        }
+    }
+    let root = serde_json::from_str::<Value>(result.get()).ok()?;
+    let field = find_field(&root)?;
+    let owned;
+    let obj = match field {
+        Value::Object(_) => field,
+        // FFI serialized the struct as a JSON string — parse it.
+        Value::String(s) => {
+            owned = serde_json::from_str::<Value>(s).ok()?;
+            &owned
+        }
+        // NULL / absent ⇒ no drift.
+        _ => return None,
+    };
+    let o = obj.as_object()?;
+    let added = str_list(o.get("added"));
+    let removed = str_list(o.get("removed"));
+    if added.is_empty() && removed.is_empty() {
+        None
+    } else {
+        Some((added, removed))
+    }
+}
+
 // Render the full pass/fail breakdown for a failed data-test run — every test,
 // not just the first failure, so the user sees the whole picture in one place.
 fn format_data_test_breakdown(asset_path: &str, tests: &[DataTestOutcome]) -> String {
@@ -1092,7 +1376,27 @@ pub async fn do_duckdb(
 
         let (query, _) =
             &sanitize_and_interpolate_unsafe_sql_args(query, &sig, &job_args, &reserved_variables)?;
-        let query = transform_s3_uris(query).await?;
+        let mut query = transform_s3_uris(query).await?;
+
+        // `on_schema_change=sync`: interpolate the pre-pass probe with the same
+        // sig / args / reserved vars as the main query (before `sig` is consumed
+        // and the arg map drained just below) so its `DESCRIBE` of the SELECT
+        // binds `$args`/`$partition` the same way.
+        let sync_probe_interpolated = match materialize
+            .as_ref()
+            .and_then(|(_, m)| m.sync_prepass.as_ref())
+        {
+            Some(pp) => {
+                let (interp, _) = sanitize_and_interpolate_unsafe_sql_args(
+                    &pp.probe_query,
+                    &sig,
+                    &job_args,
+                    &reserved_variables,
+                )?;
+                Some(transform_s3_uris(&interp).await?)
+            }
+            None => None,
+        };
 
         let job_args = {
             let mut m = Vec::new();
@@ -1127,6 +1431,96 @@ pub async fn do_duckdb(
             m
         };
 
+        // `on_schema_change=sync` pre-pass: run the probe (through the same
+        // ATTACH transform as the main query), diff the SELECT's columns against
+        // the table's, and splice the `ALTER TABLE … ADD/DROP COLUMN` DDL into
+        // the plan at the sentinel slot (removing the sentinel when there is no
+        // drift). Runs before the main query so the ALTERs are in place when the
+        // BY NAME insert executes.
+        if let (Some(probe_sql), Some(pp)) = (
+            &sync_probe_interpolated,
+            materialize
+                .as_ref()
+                .and_then(|(_, m)| m.sync_prepass.as_ref()),
+        ) {
+            let mut probe_blocks = vec![];
+            // Held for the whole probe (through compute_sync_alter_ddl): a
+            // `TYPE bigquery` ATTACH needs GOOGLE_APPLICATION_CREDENTIALS + the
+            // temp creds file set before DuckDB binds the extension, exactly as
+            // the main query path does — otherwise the probe DESCRIBE fails.
+            let mut probe_bigquery_credentials = None;
+            for query_block in parse_sql_blocks(probe_sql, true).iter() {
+                let query_block = remove_comments(query_block);
+                if let Some(parsed) = parse_attach_db_resource(query_block) {
+                    probe_blocks.extend(
+                        transform_attach_db_resource_query(
+                            &parsed,
+                            &job.id,
+                            client,
+                            &mut hidden_passwords,
+                        )
+                        .await?,
+                    );
+                    if parsed.db_type == "bigquery" {
+                        probe_bigquery_credentials = Some(UseBigQueryCredentialsFile::new(
+                            job.id,
+                            parsed.resource_path,
+                        )?);
+                    }
+                } else if let Some(q) = transform_attach_ducklake(
+                    &query_block,
+                    conn,
+                    &mut hidden_passwords,
+                    &job.workspace_id,
+                    materialize.as_ref().map(|(_, m)| m.asset_path.as_str()),
+                )
+                .await?
+                {
+                    probe_blocks.extend(q);
+                } else if let Some(q) = transform_attach_datatable(
+                    &query_block,
+                    conn,
+                    &mut hidden_passwords,
+                    &job.workspace_id,
+                )
+                .await?
+                {
+                    probe_blocks.extend(q);
+                } else {
+                    probe_blocks.push(query_block.to_string());
+                }
+            }
+            // The probe `DESCRIBE`s the same SELECT as the main query, so it
+            // needs the same workspace-macro / `// use` library definitions
+            // injected (post-ATTACH), or a macro-calling SELECT fails to bind
+            // here and the fatal probe makes `sync` unusable with macros.
+            let probe_blocks = inject_workspace_macros(
+                conn,
+                &job.workspace_id,
+                macro_ann.macros,
+                &macro_ann.use_libs,
+                probe_blocks,
+            )
+            .await?;
+            let alter_ddl = compute_sync_alter_ddl(
+                probe_blocks,
+                job_args.clone(),
+                pp.target_table.clone(),
+                token.clone(),
+                client.base_internal_url.clone(),
+                job.workspace_id.clone(),
+                job_dir.to_string(),
+            )
+            .await?;
+            query = query.replace(
+                windmill_parser::sql_materialize::SYNC_ALTER_SENTINEL,
+                &alter_ddl,
+            );
+            // Kept alive until the probe finished; the main query path recreates
+            // its own credentials for its own ATTACH pass below.
+            drop(probe_bigquery_credentials);
+        }
+
         let query_block_list = parse_sql_blocks(&query, true);
 
         // Replace custom ATTACH statements with the real instructions
@@ -1283,6 +1677,37 @@ pub async fn do_duckdb(
             } else {
                 None
             };
+            // `on_schema_change=warn` (default): the summary carries a
+            // `schema_drift` column when the SELECT's columns diverged from the
+            // fixed table schema. The write already happened positionally (data
+            // may have landed in the wrong/old columns) — log it LOUDLY so the
+            // drift isn't silent. The drift also rides back in the job result
+            // (it's a column of the returned summary row).
+            if is_managed
+                && meta.on_schema_change == windmill_parser::asset_parser::OnSchemaChange::Warn
+            {
+                if let Some((added, removed)) = extract_schema_drift(&result) {
+                    let fmt = |cols: &[String]| {
+                        if cols.is_empty() {
+                            "(none)".to_string()
+                        } else {
+                            cols.join(", ")
+                        }
+                    };
+                    let warning = format!(
+                        "\n⚠️  SCHEMA DRIFT on {asset}: the SELECT's columns no longer match the \
+                         existing table.\n    added (in SELECT, not in table): {added}\n    removed \
+                         (in table, not in SELECT): {removed}\n    The write proceeded POSITIONALLY \
+                         against the existing table schema — data may have landed in the wrong \
+                         columns. Set `on_schema_change=fail` to block this, or \
+                         `on_schema_change=sync` to migrate the table automatically.\n",
+                        asset = meta.asset_path,
+                        added = fmt(&added),
+                        removed = fmt(&removed),
+                    );
+                    append_logs(&job.id, &job.workspace_id, warning, conn).await;
+                }
+            }
             // Defense-in-depth: codegen embedded `n_data_tests` checks, so the
             // summary row must carry that many outcomes. Recovering fewer means
             // the `data_tests` column was dropped/reshaped before we read it —
@@ -2984,6 +3409,134 @@ mod tests {
         );
     }
 
+    // on_schema_change=fail on a persist-and-mutate strategy (merge) emits the
+    // drift guard inside the write, and no sync artifacts.
+    #[test]
+    fn materialize_fail_emits_drift_guard() {
+        let script = "-- materialize ducklake://main/dim key=id on_schema_change=fail\n\
+                      SELECT id, name FROM dl.src";
+        let (rewritten, meta) =
+            build_materialized_query(script, None, &std::collections::HashMap::new())
+                .expect("materialize builds")
+                .expect("materialize present");
+        let rewritten = rewritten.expect("managed mode rewrites the query");
+        assert!(
+            rewritten.contains("CAST(error(") && rewritten.contains("on_schema_change=fail"),
+            "fail emits the drift guard: {rewritten}"
+        );
+        assert!(!rewritten.contains("BY NAME"), "fail writes positionally");
+        assert!(meta.sync_prepass.is_none(), "fail needs no pre-pass probe");
+    }
+
+    // on_schema_change=sync writes BY NAME, emits the ALTER sentinel, and builds
+    // the pre-pass probe (DESCRIBE of the SELECT + information_schema read).
+    #[test]
+    fn materialize_sync_by_name_and_prepass() {
+        let script = "-- materialize ducklake://main/dim key=id on_schema_change=sync\n\
+                      SELECT id, name FROM dl.src";
+        let (rewritten, meta) =
+            build_materialized_query(script, None, &std::collections::HashMap::new())
+                .expect("materialize builds")
+                .expect("materialize present");
+        let rewritten = rewritten.expect("managed mode rewrites the query");
+        assert!(
+            rewritten.contains("INSERT INTO _wm_target.dim BY NAME"),
+            "sync insert is name-mapped: {rewritten}"
+        );
+        assert!(
+            rewritten.contains(windmill_parser::sql_materialize::SYNC_ALTER_SENTINEL),
+            "sync emits the ALTER injection sentinel"
+        );
+        let pp = meta.sync_prepass.expect("sync builds a pre-pass probe");
+        assert_eq!(pp.target_table, "dim");
+        assert!(pp
+            .probe_query
+            .contains("DESCRIBE SELECT * FROM (SELECT id, name FROM dl.src)"));
+        assert!(pp.probe_query.contains("FROM information_schema.columns"));
+        assert!(pp
+            .probe_query
+            .contains("table_catalog = '_wm_target' AND table_name = 'dim'"));
+        assert!(pp
+            .probe_query
+            .contains("ATTACH 'ducklake://main' AS _wm_target;"));
+    }
+
+    // on_schema_change=warn (default) on a persist-and-mutate strategy folds the
+    // drift into the summary; no guard, no sync artifacts.
+    #[test]
+    fn materialize_warn_summary_carries_schema_drift() {
+        let script = "-- materialize ducklake://main/dim key=id\n\
+                      SELECT id, name FROM dl.src";
+        let (rewritten, meta) =
+            build_materialized_query(script, None, &std::collections::HashMap::new())
+                .expect("materialize builds")
+                .expect("materialize present");
+        let rewritten = rewritten.expect("managed mode rewrites the query");
+        assert!(
+            rewritten.contains("AS schema_drift"),
+            "warn folds drift into the summary: {rewritten}"
+        );
+        assert!(!rewritten.contains("CAST(error("));
+        assert!(!rewritten.contains("BY NAME"));
+        assert!(meta.sync_prepass.is_none());
+    }
+
+    // Whole-table replace (unpartitioned, no key/append) is not persist-and-
+    // mutate: even with on_schema_change=fail there is no guard / sentinel — the
+    // CREATE OR REPLACE already rebuilds the schema each run.
+    #[test]
+    fn materialize_whole_table_replace_ignores_guardrail() {
+        let script = "-- materialize ducklake://main/t on_schema_change=fail\n\
+                      SELECT a, b FROM dl.src";
+        let (rewritten, meta) =
+            build_materialized_query(script, None, &std::collections::HashMap::new())
+                .expect("materialize builds")
+                .expect("materialize present");
+        let rewritten = rewritten.expect("managed mode rewrites the query");
+        assert!(rewritten.contains("CREATE OR REPLACE TABLE _wm_target.t"));
+        assert!(!rewritten.contains("on_schema_change=fail"));
+        assert!(!rewritten.contains(windmill_parser::sql_materialize::SYNC_ALTER_SENTINEL));
+        assert!(meta.sync_prepass.is_none());
+    }
+
+    #[test]
+    fn extract_schema_drift_parses_struct_and_string_and_null() {
+        // nested struct form
+        let r = raw(
+            r#"{"materialized":"ducklake://main/dim","schema_drift":{"added":["c"],"removed":["b"]}}"#,
+        );
+        let (added, removed) = extract_schema_drift(&r).expect("drift present");
+        assert_eq!(added, vec!["c".to_string()]);
+        assert_eq!(removed, vec!["b".to_string()]);
+        // FFI string-encoded form
+        let r = raw(r#"{"schema_drift":"{\"added\":[\"x\"],\"removed\":[]}"}"#);
+        let (added, removed) = extract_schema_drift(&r).expect("drift present");
+        assert_eq!(added, vec!["x".to_string()]);
+        assert!(removed.is_empty());
+        // NULL / both-empty ⇒ no drift
+        assert!(extract_schema_drift(&raw(r#"{"schema_drift":null}"#)).is_none());
+        assert!(
+            extract_schema_drift(&raw(r#"{"schema_drift":{"added":[],"removed":[]}}"#)).is_none()
+        );
+        assert!(extract_schema_drift(&raw(r#"{"rows":3}"#)).is_none());
+    }
+
+    #[test]
+    fn parse_sync_drift_computes_added_removed_and_skips_fresh_table() {
+        // table (a, b) vs SELECT (a, c): add c, drop b; _wm_partition ignored
+        let r = raw(r#"[{"_wm_which":"sel","_wm_name":"a","_wm_type":"BIGINT"},
+                {"_wm_which":"sel","_wm_name":"c","_wm_type":"VARCHAR"},
+                {"_wm_which":"tbl","_wm_name":"a","_wm_type":"BIGINT"},
+                {"_wm_which":"tbl","_wm_name":"b","_wm_type":"BIGINT"}]"#);
+        let (added, removed) = parse_sync_drift(&r).unwrap();
+        assert_eq!(added, vec![("c".to_string(), "VARCHAR".to_string())]);
+        assert_eq!(removed, vec!["b".to_string()]);
+        // no `tbl` rows ⇒ table doesn't exist yet ⇒ no migration
+        let r = raw(r#"[{"_wm_which":"sel","_wm_name":"a","_wm_type":"BIGINT"}]"#);
+        let (added, removed) = parse_sync_drift(&r).unwrap();
+        assert!(added.is_empty() && removed.is_empty());
+    }
+
     // Tests for parse_attach_db_resource function
     #[test]
     fn test_parse_attach_db_resource_postgres_res_prefix() {

From 5769b6036cf14b0cb424c5b3d9d878c600a5652e Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 17:10:06 +0200
Subject: [PATCH 48/76] fix(pipelines): activity-axis label clarity + select
 failed node on cascade failure (#9931)

* fix(pipelines): clarify activity-window axis label + select failed node on cascade failure

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(pipelines): clear active draft so failed-node focus is not masked

PipelineGraphEditor gives an open draft (activeDraftPath) priority over
selection via openScriptPath, so the cascade-failure focus set only selection
and stayed masked while a draft pane was open.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
---
 .../assets/AssetGraph/ActivityHistogram.svelte   |  5 +++--
 .../(logged)/pipeline/[folder]/+page.svelte      | 16 ++++++++++++++++
 2 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/frontend/src/lib/components/assets/AssetGraph/ActivityHistogram.svelte b/frontend/src/lib/components/assets/AssetGraph/ActivityHistogram.svelte
index fcfd95a5d3..cd9548de59 100644
--- a/frontend/src/lib/components/assets/AssetGraph/ActivityHistogram.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/ActivityHistogram.svelte
@@ -147,9 +147,10 @@
 			></div>
 		{/if}
 	</div>
-	<!-- Always-on window axis: the period the bars span. -->
+	<!-- Always-on window axis: the period the bars span. The `from` prefix keeps
+	     the left edge from reading as a date header for the run list below it. -->
 	<div class="flex justify-between text-3xs text-tertiary tabular-nums mt-0.5">
-		<span>{fmtTime(from)}</span>
+		<span>from {fmtTime(from)}</span>
 		<span>now</span>
 	</div>
 </div>
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index 0889d53a01..167aaa8f25 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -1480,6 +1480,14 @@
 			} else {
 				const failed = [...res.statuses.entries()].filter(([, s]) => s.status === 'failure')
 				const skipped = [...res.statuses.values()].filter((s) => s.status === 'skipped').length
+				// Surface the failed node's error in the details pane. Clear the
+				// active draft too — it has pane priority over `selection`
+				// (openScriptPath), so a bare selection would stay masked while a
+				// draft is open.
+				if (failed.length > 0) {
+					pe.activeDraftPath = undefined
+					pe.selection = { kind: 'runnable', runnable_kind: 'script', path: failed[0][0] }
+				}
 				sendUserToast(
 					`Chain run failed at ${failed.map(([p]) => p).join(', ')}` +
 						(skipped > 0 ? ` — ${skipped} downstream skipped` : ''),
@@ -1616,6 +1624,14 @@
 			} else {
 				const failed = [...res.statuses.entries()].filter(([, s]) => s.status === 'failure')
 				const skipped = [...res.statuses.values()].filter((s) => s.status === 'skipped').length
+				// Surface the failed node's error in the details pane. Clear the
+				// active draft too — it has pane priority over `selection`
+				// (openScriptPath), so a bare selection would stay masked while a
+				// draft is open.
+				if (failed.length > 0) {
+					pe.activeDraftPath = undefined
+					pe.selection = { kind: 'runnable', runnable_kind: 'script', path: failed[0][0] }
+				}
 				sendUserToast(
 					`Bounded run failed at ${failed.map(([p]) => p).join(', ')}` +
 						(skipped > 0 ? ` — ${skipped} downstream skipped` : ''),

From 182b10b2ad084cce28be3f25fdded44b9bf51f9e Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 18:01:20 +0200
Subject: [PATCH 49/76] render FFI errors with real newlines and no stray
 quoting (#9932)

* fix(duckdb): render FFI errors with real newlines and no stray quoting

The DuckDB FFI returns errors as ERROR <json-encoded-message>, so the
executor was surfacing the serde_json-escaped form (wrapping quotes,
literal \\n). Multi-line errors like the write-audit-publish data-test
breakdown were unreadable. Decode the JSON string back to the raw message
at both FFI error sites.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs: tighten decode_ffi_error comment to the invariant

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../windmill-worker/src/duckdb_executor.rs    | 38 ++++++++++++++++++-
 1 file changed, 36 insertions(+), 2 deletions(-)

diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index d7436c579c..e51c59cb98 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -2004,6 +2004,15 @@ fn cgroup_bytes_to_duckdb_memory_limit(bytes: i64) -> Option<String> {
 }
 
 // Read backend/windmill-duckdb-ffi-internal/README_DEV.md for details about why we use FFI
+// The FFI returns errors as `ERROR <json-encoded-message>` (the message is
+// serde_json::to_string'd). Decode the JSON string back so multi-line errors
+// render with real newlines, not escaped `\n` inside wrapping quotes; fall back
+// to the raw slice if it is somehow not a JSON string.
+fn decode_ffi_error(result_str: &str) -> String {
+    let raw = result_str.strip_prefix("ERROR ").unwrap_or(result_str);
+    serde_json::from_str::<String>(raw).unwrap_or_else(|_| raw.to_string())
+}
+
 fn run_duckdb_ffi_safe<'a>(
     query_block_list: impl Iterator<Item = &'a str>,
     query_block_list_count: usize,
@@ -2069,7 +2078,7 @@ fn run_duckdb_ffi_safe<'a>(
     };
 
     if result_str.starts_with("ERROR") {
-        Err(Error::ExecutionErr(result_str[6..].to_string()))
+        Err(Error::ExecutionErr(decode_ffi_error(&result_str)))
     } else {
         let result = if collection_strategy == SqlResultCollectionStrategy::AllStatementsAllRows {
             // Avoid parsing JSON
@@ -2133,7 +2142,7 @@ fn prepare_duckdb_ffi_safe<'a>(
     };
 
     if result_str.starts_with("ERROR") {
-        Err(Error::ExecutionErr(result_str[6..].to_string()))
+        Err(Error::ExecutionErr(decode_ffi_error(&result_str)))
     } else {
         Ok(serde_json::value::RawValue::from_string(result_str).map_err(to_anyhow)?)
     }
@@ -2629,6 +2638,31 @@ pub struct Arg {
 mod tests {
     use super::*;
 
+    #[test]
+    fn decode_ffi_error_unescapes_multiline_and_strips_quotes() {
+        // Mirror the FFI: JSON-encode the raw DuckDB message, prefix "ERROR ".
+        let raw_msg = "Invalid Input Error: data tests failed on main/raw_orders \
+             (1/3 failed) — write rolled back, previous version left live:\n  \
+             ✓ not_null(order_id)\n  ✗ accepted_values(status) — 12 violating row(s)";
+        let ffi = format!("ERROR {}", serde_json::to_string(raw_msg).unwrap());
+        let decoded = decode_ffi_error(&ffi);
+        assert_eq!(decoded, raw_msg);
+        // real newlines, no literal `\n`, no wrapping quotes
+        assert!(decoded.contains('\n') && !decoded.contains("\\n"));
+        assert!(!decoded.starts_with('"'));
+        // single-line error with inner quotes round-trips unescaped
+        let single = format!(
+            "ERROR {}",
+            serde_json::to_string("Binder Error: column \"x\" not found").unwrap()
+        );
+        assert_eq!(
+            decode_ffi_error(&single),
+            "Binder Error: column \"x\" not found"
+        );
+        // non-JSON payload falls back to the raw slice
+        assert_eq!(decode_ffi_error("ERROR not json"), "not json");
+    }
+
     fn test_ancestor(wid: &str) -> windmill_common::workspaces::DucklakeAncestorAttach {
         windmill_common::workspaces::DucklakeAncestorAttach {
             workspace_id: wid.to_string(),

From 799b9e3b7c1998c1264c17cafba858bf192b8cb8 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 18:23:51 +0200
Subject: [PATCH 50/76] chore(main): release 1.748.0 (#9914)

* chore(main): release 1.748.0

* Apply automatic changes

---------

Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com>
---
 CHANGELOG.md                                  |  23 ++
 backend/Cargo.lock                            | 211 +++++++++---------
 backend/Cargo.toml                            |   4 +-
 .../parsers/windmill-parser-wasm/Cargo.lock   |  48 ++--
 .../parsers/windmill-parser-wasm/Cargo.toml   |   2 +-
 backend/windmill-api/openapi.yaml             |   2 +-
 benchmarks/lib.ts                             |   2 +-
 cli/src/core/constants.ts                     |   2 +-
 frontend/package-lock.json                    |   4 +-
 frontend/package.json                         |   2 +-
 lsp/Pipfile                                   |   2 +-
 openflow.openapi.yaml                         |   2 +-
 .../WindmillClient/WindmillClient.psd1        |   2 +-
 python-client/wmill/pyproject.toml            |   2 +-
 typescript-client/jsr.json                    |   2 +-
 typescript-client/package.json                |   2 +-
 version.txt                                   |   2 +-
 17 files changed, 174 insertions(+), 140 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b5342e3024..ec10dc8990 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,28 @@
 # Changelog
 
+## [1.748.0](https://github.com/windmill-labs/windmill/compare/v1.747.0...v1.748.0) (2026-07-05)
+
+
+### Features
+
+* **ai-agent:** support reasoning effort in AI agent workflow steps ([#9886](https://github.com/windmill-labs/windmill/issues/9886)) ([a368d49](https://github.com/windmill-labs/windmill/commit/a368d49bd8786a2dca6771f2051f1d44d1b2363d))
+* **ducklake:** scheduled lake maintenance (expiry, compaction, orphan cleanup) ([#9916](https://github.com/windmill-labs/windmill/issues/9916)) ([3352150](https://github.com/windmill-labs/windmill/commit/33521505dbc34f22b575d21fda1cc76d698a8840))
+* **pipelines:** asset freshness — fresh/stale badge (CE) + watchdog (EE) ([#9909](https://github.com/windmill-labs/windmill/issues/9909)) ([5d7fb6d](https://github.com/windmill-labs/windmill/commit/5d7fb6deca3e02e89d77e5d3856483beb8b8bfeb))
+* **pipelines:** capture violating-row samples for data tests ([#9919](https://github.com/windmill-labs/windmill/issues/9919)) ([d4b4374](https://github.com/windmill-labs/windmill/commit/d4b4374de8f8a7875b050c16d1236fcd0355812b))
+* **pipelines:** fork data environments for ducklake materialization (dev data) ([#9915](https://github.com/windmill-labs/windmill/issues/9915)) ([39eb9de](https://github.com/windmill-labs/windmill/commit/39eb9de1bce400109c130a081807e40e995ae068))
+* **pipelines:** on_schema_change write guardrails + data_test deploy validation ([#9930](https://github.com/windmill-labs/windmill/issues/9930)) ([377c02e](https://github.com/windmill-labs/windmill/commit/377c02ec47389e64b7ef5cbbae0de05df648266d))
+* **pipelines:** record upstream snapshot ids on cascade-dispatched jobs ([#9910](https://github.com/windmill-labs/windmill/issues/9910)) ([af36498](https://github.com/windmill-labs/windmill/commit/af36498432e643108308e1c03b5d986d0f0f8888))
+* **pipelines:** schema contracts — save-time consumer checks vs captured schemas ([#9917](https://github.com/windmill-labs/windmill/issues/9917)) ([42e11c6](https://github.com/windmill-labs/windmill/commit/42e11c6570b62ffaa86598438fa8ddf462c4035f))
+* **pipeline:** write-audit-publish for materialization data tests ([#9911](https://github.com/windmill-labs/windmill/issues/9911)) ([dce247c](https://github.com/windmill-labs/windmill/commit/dce247c6d2678a2c95bd728027e17ae3965638e2))
+* **sdk:** enforce s3:// URIs for string S3 params + ingestion (EL) docs ([#9912](https://github.com/windmill-labs/windmill/issues/9912)) ([5ad2de9](https://github.com/windmill-labs/windmill/commit/5ad2de91a26b312bf27124ceca16ef331621bde8))
+
+
+### Bug Fixes
+
+* **cli:** pipeline + workspace UX batch (init/bind stub, run errors, macro libs, lock-job report, upgrade errors) ([#9929](https://github.com/windmill-labs/windmill/issues/9929)) ([28a6b08](https://github.com/windmill-labs/windmill/commit/28a6b086c842105298f236baa0a61868f71a5eb1))
+* **cli:** publish all windmill-parser-wasm-* deps so local pipeline graph keeps write edges ([#9926](https://github.com/windmill-labs/windmill/issues/9926)) ([744a759](https://github.com/windmill-labs/windmill/commit/744a7597edaf3ca9a7fd2b21a34fb33457913a64))
+* **pipelines:** activity-axis label clarity + select failed node on cascade failure ([#9931](https://github.com/windmill-labs/windmill/issues/9931)) ([5769b60](https://github.com/windmill-labs/windmill/commit/5769b6036cf14b0cb424c5b3d9d878c600a5652e))
+
 ## [1.747.0](https://github.com/windmill-labs/windmill/compare/v1.746.0...v1.747.0) (2026-07-03)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index 1153916767..cd780be48c 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -2057,9 +2057,9 @@ dependencies = [
 
 [[package]]
 name = "cc"
-version = "1.2.65"
+version = "1.2.66"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e228eec9be7c17ccb640b59b36a5cd805ea2a564a4c5e162c2f659fea30d3b96"
+checksum = "f5d6cac793997bd970000024b2934968efe83b382de4fdcf4fcb46b6ee4ad996"
 dependencies = [
  "find-msvc-tools",
  "jobserver",
@@ -5072,9 +5072,11 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
 dependencies = [
  "cfg-if",
+ "js-sys",
  "libc",
  "r-efi 6.0.0",
  "rand_core 0.10.1",
+ "wasm-bindgen",
 ]
 
 [[package]]
@@ -7563,9 +7565,9 @@ dependencies = [
 
 [[package]]
 name = "num-bigint"
-version = "0.4.7"
+version = "0.4.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c863e9ab5e7bf9c99ba75e1050f1e4d624ae87ed3532d6238ffbdc7b585dbbe6"
+checksum = "c89e69e7e0f03bea5ef08013795c25018e101932225a656383bd384495ecc367"
 dependencies = [
  "num-integer",
  "num-traits",
@@ -8361,9 +8363,9 @@ checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
 
 [[package]]
 name = "pest"
-version = "2.8.6"
+version = "2.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e0848c601009d37dfa3430c4666e147e49cdcf1b92ecd3e63657d8a5f19da662"
+checksum = "47627dd7305c6a2d6c8c6bcd24c5a4c17dbbf425f4f9c5313e724b38fc9782e9"
 dependencies = [
  "memchr",
  "ucd-trie",
@@ -8371,9 +8373,9 @@ dependencies = [
 
 [[package]]
 name = "pest_derive"
-version = "2.8.6"
+version = "2.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "11f486f1ea21e6c10ed15d5a7c77165d0ee443402f0780849d1768e7d9d6fe77"
+checksum = "4b4254325ecad416ab689e27ba51da03ba01a9632bc6e108f5fe7c3c4ad29d58"
 dependencies = [
  "pest",
  "pest_generator",
@@ -8381,9 +8383,9 @@ dependencies = [
 
 [[package]]
 name = "pest_generator"
-version = "2.8.6"
+version = "2.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8040c4647b13b210a963c1ed407c1ff4fdfa01c31d6d2a098218702e6664f94f"
+checksum = "6c4c0e91ead7a8f7acecbca6f003fc2e8282b1dbe2dd9c9d2f16aba42995e0a7"
 dependencies = [
  "pest",
  "pest_meta",
@@ -8394,12 +8396,11 @@ dependencies = [
 
 [[package]]
 name = "pest_meta"
-version = "2.8.6"
+version = "2.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "89815c69d36021a140146f26659a81d6c2afa33d216d736dd4be5381a7362220"
+checksum = "f9744bc48116fee06334924bb5f2bad41eed5e89bd26e29b0b799f9a3f82c210"
 dependencies = [
  "pest",
- "sha2 0.10.9",
 ]
 
 [[package]]
@@ -8995,15 +8996,16 @@ dependencies = [
 
 [[package]]
 name = "quinn-proto"
-version = "0.11.15"
+version = "0.11.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fcb935c5bec503c2f0e306bdd3e58bb9029dcb14fa8d9ac76e3a5256ac0763e"
+checksum = "2f4bfc015262b9df63c8845072ce59068853ff5872180c2ce2f13038b970e560"
 dependencies = [
  "aws-lc-rs",
  "bytes",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
  "lru-slab",
- "rand 0.9.0",
+ "rand 0.10.2",
+ "rand_pcg",
  "ring 0.17.14",
  "rustc-hash 2.1.3",
  "rustls 0.23.35",
@@ -9017,16 +9019,16 @@ dependencies = [
 
 [[package]]
 name = "quinn-udp"
-version = "0.5.14"
+version = "0.5.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+checksum = "35a133f956daabe89a61a685c2649f13d82d5aa4bd5d12d1277e1072a21c0694"
 dependencies = [
  "cfg_aliases",
  "libc",
  "once_cell",
  "socket2 0.6.4",
  "tracing",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -9184,6 +9186,15 @@ dependencies = [
  "rand_core 0.5.1",
 ]
 
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
 [[package]]
 name = "raw-cpuid"
 version = "11.6.0"
@@ -13322,9 +13333,9 @@ checksum = "7fcfc827f90e53a02eaef5e535ee14266c1d569214c6aa70133a624d8a3164ba"
 
 [[package]]
 name = "utf8-width"
-version = "0.1.8"
+version = "0.1.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1292c0d970b54115d14f2492fe0170adf21d68a1de108eebc51c1df4f346a091"
+checksum = "159a7cadce548703edd50d24069bc294c5415ecab0a480e0cd1ca06d112dc94a"
 
 [[package]]
 name = "utf8_iter"
@@ -13735,7 +13746,7 @@ dependencies = [
 
 [[package]]
 name = "windmill"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -13817,7 +13828,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-ai"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "async-stream",
  "async-trait",
@@ -13850,7 +13861,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-alerting"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -13863,7 +13874,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -14001,7 +14012,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-agent-workers"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14024,7 +14035,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-assets"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14039,7 +14050,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-auth"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14065,7 +14076,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -14075,7 +14086,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-configs"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14092,7 +14103,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-debug"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "base64 0.22.1",
@@ -14114,7 +14125,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-embeddings"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14137,7 +14148,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flow-conversations"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14153,7 +14164,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flows"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14174,7 +14185,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-groups"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14195,7 +14206,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-inputs"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14209,7 +14220,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-integration-tests"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -14244,7 +14255,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-jobs"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14269,7 +14280,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-npm-proxy"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "flate2",
@@ -14287,7 +14298,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-openapi"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14309,7 +14320,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-schedule"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14329,7 +14340,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-scripts"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14366,7 +14377,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-settings"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14394,7 +14405,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-sse"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "lazy_static",
  "serde",
@@ -14406,7 +14417,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-users"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "argon2",
  "axum 0.8.9",
@@ -14431,7 +14442,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workers"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14445,7 +14456,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workspaces"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14479,7 +14490,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -14493,7 +14504,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14512,7 +14523,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "aes-gcm",
  "aho-corasick",
@@ -14614,7 +14625,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-dep-map"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "chrono",
  "itertools 0.14.0",
@@ -14633,7 +14644,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "regex",
  "serde",
@@ -14648,7 +14659,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -14672,7 +14683,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-jseval"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14689,7 +14700,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -14705,7 +14716,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14726,7 +14737,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-native-triggers"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14757,7 +14768,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "arc-swap",
@@ -14782,7 +14793,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-object-store"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -14816,7 +14827,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-operator"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14834,7 +14845,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -14843,7 +14854,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14855,7 +14866,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14867,7 +14878,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -14879,7 +14890,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14891,7 +14902,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14903,7 +14914,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -14914,7 +14925,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14925,7 +14936,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14937,7 +14948,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -14948,7 +14959,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -14970,7 +14981,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14982,7 +14993,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14996,7 +15007,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -15013,7 +15024,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15026,7 +15037,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15038,7 +15049,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15056,7 +15067,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -15072,7 +15083,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -15088,7 +15099,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15099,7 +15110,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15138,7 +15149,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-runtime-nativets"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "const_format",
@@ -15177,7 +15188,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "getrandom 0.3.4",
  "wasm-bindgen",
@@ -15188,7 +15199,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-store"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15222,7 +15233,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-test-utils"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15246,7 +15257,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15279,7 +15290,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-azure"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15312,7 +15323,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-email"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15332,7 +15343,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-gcp"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15366,7 +15377,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-http"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15402,7 +15413,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-kafka"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15425,7 +15436,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-mqtt"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15449,7 +15460,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-nats"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -15473,7 +15484,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-postgres"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15508,7 +15519,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-sqs"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15536,7 +15547,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-websocket"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15561,7 +15572,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "bitflags 2.13.0",
@@ -15580,7 +15591,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
@@ -15690,7 +15701,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker-volumes"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "bytes",
  "futures",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index a91518dc38..e80fbc89db 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.747.0"
+version = "1.748.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -87,7 +87,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"]
 
 [workspace.package]
-version = "1.747.0"
+version = "1.748.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.lock b/backend/parsers/windmill-parser-wasm/Cargo.lock
index 815d62644f..a9caa82ede 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.lock
+++ b/backend/parsers/windmill-parser-wasm/Cargo.lock
@@ -6191,7 +6191,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "windmill-common"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "aho-corasick",
  "anyhow",
@@ -6272,7 +6272,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6284,7 +6284,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "convert_case",
  "serde",
@@ -6293,7 +6293,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6305,7 +6305,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6317,7 +6317,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -6329,7 +6329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6341,7 +6341,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6353,7 +6353,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -6364,7 +6364,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6375,7 +6375,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6387,7 +6387,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6398,7 +6398,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -6420,7 +6420,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6432,7 +6432,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6446,7 +6446,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "convert_case",
@@ -6463,7 +6463,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6476,7 +6476,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6488,7 +6488,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6506,7 +6506,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -6522,7 +6522,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6538,7 +6538,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wasm"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "getrandom 0.2.17",
@@ -6570,7 +6570,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6581,7 +6581,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.747.0"
+version = "1.748.0"
 dependencies = [
  "anyhow",
  "bitflags",
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.toml b/backend/parsers/windmill-parser-wasm/Cargo.toml
index 9111ca8ccb..521fb7a132 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.toml
+++ b/backend/parsers/windmill-parser-wasm/Cargo.toml
@@ -12,7 +12,7 @@ resolver = "2"
 members = ["."]
 
 [workspace.package]
-version = "1.747.0"
+version = "1.748.0"
 edition = "2021"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 0c080b0a2a..afe8cbc0b6 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.747.0
+  version: 1.748.0
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index 4b342d93bd..37132a3b9e 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.747.0";
+export const VERSION = "v1.748.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/core/constants.ts b/cli/src/core/constants.ts
index 9e2110814d..f01ea9c68b 100644
--- a/cli/src/core/constants.ts
+++ b/cli/src/core/constants.ts
@@ -10,4 +10,4 @@ export const WM_FORK_PREFIX = "wm-fork";
 // (e.g. utils.ts) can read it without importing main.ts and creating a circular
 // dependency (main → workspace → utils → main) that triggers a TDZ.
 // Re-exported from main.ts for backwards compatibility.
-export const VERSION = "1.747.0";
+export const VERSION = "1.748.0";
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 3b9c1b8134..f0fd64f6fc 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.747.0",
+	"version": "1.748.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "@windmill-labs/components",
-			"version": "1.747.0",
+			"version": "1.748.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 7f0ed5e1d9..adfd48cad4 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.747.0",
+	"version": "1.748.0",
 	"scripts": {
 		"dev": "vite dev",
 		"dev:ui-builder": "mv static/ui_builder static/ui_builder.dev-disabled 2>/dev/null || true ; trap 'mv static/ui_builder.dev-disabled static/ui_builder 2>/dev/null || true' EXIT ; vite dev",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index 482c95db43..d2b78d3e8f 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,7 +4,7 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.747.0"
+wmill = ">=1.748.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index b0508b2719..32f13a4f0c 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.747.0
+  version: 1.748.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index 0b3006323a..f99fb3832d 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.747.0'
+    ModuleVersion     = '1.748.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index dda29ba2b4..3219756afa 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.747.0"
+version = "1.748.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index afcb96626d..191bab2bf6 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.747.0",
+  "version": "1.748.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index d8058153be..02a1bbb060 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.747.0",
+  "version": "1.748.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "homepage": "https://github.com/windmill-labs/windmill/tree/main/typescript-client#readme",
diff --git a/version.txt b/version.txt
index 8eff60cc0e..a16d7ab553 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.747.0
+1.748.0

From 22452ce54034a9bea8f7d48946818fd148b938c0 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 22:20:55 +0200
Subject: [PATCH 51/76] fix(object-storage): remove 20-file bucket-browser
 listing cap in CE (#9935)

* fix(object-storage): remove 20-file bucket-browser cap in CE

The Community Edition build rejected the object-storage `list_stored_files`
endpoint with an error once a workspace bucket held more than 20 objects,
making the bucket browser unusable on larger buckets. The listing already
collects up to `max_keys` objects, so the hard cap was purely a gate.

Drops the CE listing cap (in the EE-symlinked `job_helpers_ee.rs`, tracked
in the companion windmill-ee-private PR) and removes the now-inaccurate
sentence from the workspace object-storage settings banner. The 10 GiB
total-storage write quota remains as the intentional CE limit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore: update ee-repo-ref to 4bd7b73dcef1b77dc2866bc58e0c86962559495c

This commit updates the EE repository reference after PR #648 was merged in windmill-ee-private.

Previous ee-repo-ref: aa14d0724216030948c2f575bcc19c0e6e0476a7

New ee-repo-ref: 4bd7b73dcef1b77dc2866bc58e0c86962559495c

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 backend/ee-repo-ref.txt                                        | 2 +-
 .../lib/components/workspaceSettings/StorageSettings.svelte    | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index c3ae39c767..cc9c36f5a5 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-fa7ac11c1e0ab39e84a0c18973ba427a240933ca
+4bd7b73dcef1b77dc2866bc58e0c86962559495c
diff --git a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
index be49e3c564..1e6c990819 100644
--- a/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
+++ b/frontend/src/lib/components/workspaceSettings/StorageSettings.svelte
@@ -190,8 +190,7 @@
 {#if !$enterpriseLicense}
 	<Alert type="info" title="Workspace storage is limited to {quotaDisplay} in Windmill CE">
 		Total workspace storage is capped at {quotaDisplay} in the Community Edition: writes that would exceed
-		the quota are rejected. The bucket browser will also not work for buckets containing more than 20
-		files. Consider upgrading to Windmill EE for unlimited workspace storage.
+		the quota are rejected. Consider upgrading to Windmill EE for unlimited workspace storage.
 	</Alert>
 {:else}
 	<Alert type="info" title="Logs storage is set at the instance level">

From 52ce805f619747af4f998cde7819a164c754205a Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 22:24:41 +0200
Subject: [PATCH 52/76] fix(pipelines): dedup guard for keyed merge +
 deploy-time SCD2 validation (#9936)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Two correctness/validation improvements to managed materialization:

1. A keyed `merge` (`key=<col>`) is delete-by-key + insert-all and does NOT
   deduplicate its source, so two incoming rows sharing a key both landed
   under that key — silently breaking the one-row-per-key contract. Codegen
   now emits an in-transaction guard (same `error(...)` shape as the schema
   -drift guard) that fails the run when the SELECT returns more than one row
   for a non-NULL key, naming the key. Authors deduplicate in the SELECT or
   switch to `append`. NULL keys are exempt, matching the delete's `IN (...)`
   scope.

2. The two SCD2 misconfigurations that were only caught at run time — `history`
   without `key=`, and `history` + `// partitioned` — now fail fast at deploy
   via a shared `MaterializeSpec::validate`, called from `create_script_internal`.
   The DuckDB executor keeps the same check as a safety net for preview/test
   runs that never deploy (shared message, no drift).

Adds unit tests for the merge guard codegen and for `validate` (all four
cases), and updates docs/ducklake-materialization.md and docs/pipelines-vs-dbt.md.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../windmill-parser/src/asset_parser.rs       | 79 +++++++++++++++++++
 .../windmill-parser/src/sql_materialize.rs    | 64 +++++++++++++++
 backend/windmill-api-scripts/src/scripts.rs   |  7 ++
 .../windmill-worker/src/duckdb_executor.rs    | 18 +++--
 docs/ducklake-materialization.md              | 19 ++++-
 docs/pipelines-vs-dbt.md                      | 11 ++-
 6 files changed, 185 insertions(+), 13 deletions(-)

diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index 4ef30246a6..d95234a297 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -333,6 +333,40 @@ impl OnSchemaChange {
     }
 }
 
+impl MaterializeSpec {
+    /// Deploy-time validation of the option combination against the script's
+    /// partitioning, returning a human-facing error for combinations the
+    /// runtime cannot honor. Called at save (`create_script_internal`) so a
+    /// misconfigured script is rejected up front, and again in the DuckDB
+    /// executor as a safety net for preview/test runs that never deploy. Both
+    /// checks are SCD2-specific and inert for `manual` mode (which owns its DDL
+    /// and ignores the reconciliation strategy). `partitioned` is whether the
+    /// script declares `// partitioned`.
+    pub fn validate(&self, partitioned: bool) -> Result<(), String> {
+        if self.manual || !self.scd2 {
+            return Ok(());
+        }
+        // SCD2 needs a natural key to identify an entity across versions.
+        if self.unique_key.as_deref().map_or(true, str::is_empty) {
+            return Err(
+                "materialize scd2: requires a natural key — add `key=<col>` (e.g. \
+                 `// materialize ducklake://<name>/<table> key=id history`)"
+                    .to_string(),
+            );
+        }
+        // SCD2's diff/close/open shape has no partition-scoped form in v1.
+        if partitioned {
+            return Err(
+                "materialize scd2: `// partitioned` is not supported with scd2 in v1 — remove \
+                 `// partitioned`, or drop `history`/`scd2` to materialize the partition without \
+                 history"
+                    .to_string(),
+            );
+        }
+        Ok(())
+    }
+}
+
 // `// data_test <kind> …` — a data-quality assertion run against the
 // freshly-materialized asset (post DELETE+INSERT), failing the run on
 // violation. The first extensible annotation family: the parser turns a
@@ -1721,6 +1755,51 @@ mod pipeline_annotation_tests {
         assert!(!out.materialize.expect("materialize").close_deleted);
     }
 
+    #[test]
+    fn materialize_validate_scd2_requires_key() {
+        // scd2 without `key=` is rejected at deploy (was a run-time error).
+        let m = parse_pipeline_annotations("// materialize ducklake://a/dim history")
+            .materialize
+            .expect("materialize");
+        assert!(m.scd2 && m.unique_key.is_none());
+        let err = m.validate(false).expect_err("scd2 without key must fail");
+        assert!(err.contains("requires a natural key"));
+        // with a key it validates
+        let m = parse_pipeline_annotations("// materialize ducklake://a/dim key=id history")
+            .materialize
+            .expect("materialize");
+        assert!(m.validate(false).is_ok());
+    }
+
+    #[test]
+    fn materialize_validate_scd2_rejects_partitioned() {
+        // scd2 + `// partitioned` has no v1 form — rejected at deploy.
+        let m = parse_pipeline_annotations("// materialize ducklake://a/dim key=id history")
+            .materialize
+            .expect("materialize");
+        let err = m.validate(true).expect_err("scd2 + partitioned must fail");
+        assert!(err.contains("`// partitioned` is not supported with scd2"));
+        // unpartitioned scd2 is fine
+        assert!(m.validate(false).is_ok());
+    }
+
+    #[test]
+    fn materialize_validate_non_scd2_and_manual_are_inert() {
+        // Non-scd2 strategies are unconstrained by these checks, partitioned or not.
+        let m = parse_pipeline_annotations("// materialize ducklake://a/orders key=id")
+            .materialize
+            .expect("materialize");
+        assert!(m.validate(true).is_ok());
+        assert!(m.validate(false).is_ok());
+        // `manual` owns its DDL and ignores the strategy — never rejected here,
+        // even with a partitioned scd2-looking combo.
+        let m = parse_pipeline_annotations("// materialize manual ducklake://a/dim history")
+            .materialize
+            .expect("materialize");
+        assert!(m.manual && m.scd2);
+        assert!(m.validate(true).is_ok());
+    }
+
     #[test]
     fn materialize_on_schema_change_opt() {
         let out = parse_pipeline_annotations(
diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index fff036b22c..dccf8ec313 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -514,6 +514,11 @@ impl<'a> MaterializeCodegen<'a> {
                 // same write shape as `replace`, which is reliable. The DELETE is
                 // scoped to the current partition when partitioned so it stays
                 // slice-local (a key present in another partition is untouched).
+                //
+                // Guard first: the DELETE+INSERT does not dedup the source, so
+                // two incoming rows sharing a key would both persist under it.
+                // Raise instead of silently double-writing (see the helper).
+                out.push(duplicate_source_key_guard_sql(sel, unique_key));
                 let scope = if self.partitioned {
                     format!("{pcol} = {pval} AND ")
                 } else {
@@ -746,6 +751,29 @@ fn schema_drift_guard_sql(sel_sql: &str, target_qualified: &str, partition_col:
     )
 }
 
+/// In-transaction guard for the keyed `merge` strategy: raises via DuckDB
+/// `error(...)` when the source SELECT holds more than one row for the same
+/// non-NULL `unique_key`. A keyed merge is delete-by-key + insert-all (it does
+/// NOT deduplicate the source), so duplicate source keys would land every
+/// duplicate row under one key — the exact silent double-write this guards
+/// against. Erroring keeps the semantics explicit: the author must deduplicate
+/// in the SELECT (or use `append`). NULL keys are excluded to match the delete's
+/// `key IN (...)` scope, which never matches NULL. `unique_key` is embedded raw
+/// in identifier position (matching the merge's own DELETE/IN) and doubled-quote
+/// escaped where it lands inside the error string literal.
+fn duplicate_source_key_guard_sql(sel_sql: &str, unique_key: &str) -> String {
+    let key_lit = unique_key.replace('\'', "''");
+    format!(
+        "SELECT CASE WHEN _wm_dup_keys > 0 THEN CAST(error('managed materialize: keyed merge on \
+         `{key_lit}` blocked — the source has ' || _wm_dup_keys || ' key value(s) with more than \
+         one row. A keyed merge keeps one row per key and does not deduplicate; deduplicate in the \
+         SELECT (e.g. QUALIFY row_number() OVER (PARTITION BY {key_lit} ORDER BY …) = 1) or use \
+         `append`.') AS VARCHAR) ELSE 'ok' END FROM (SELECT count(*) AS _wm_dup_keys FROM (SELECT \
+         {unique_key} FROM ({sel_sql}) WHERE {unique_key} IS NOT NULL GROUP BY {unique_key} HAVING \
+         count(*) > 1));"
+    )
+}
+
 /// The `warn`-mode summary column: a `schema_drift` struct `{added, removed}`
 /// when the SELECT drifted from the table, else NULL. Appended to the
 /// materialize summary row so the executor can log it and fold it into the job
@@ -1555,6 +1583,42 @@ mod tests {
             .any(|s| s.starts_with("INSERT INTO _wm_target.orders_daily SELECT *, '2026-06-19'")));
     }
 
+    #[test]
+    fn codegen_merge_emits_duplicate_source_key_guard() {
+        // A keyed merge does not dedup its source, so codegen must emit a guard
+        // that fails the write when the SELECT has >1 row per key — otherwise
+        // duplicate source keys silently double-write.
+        let cg = MaterializeCodegen {
+            target_qualified: "_wm_target.orders_daily",
+            select_sql: "SELECT order_id, amount FROM dl.orders",
+            partition_col: "_wm_partition",
+            partition_value_sql: "'2026-06-19'",
+            partitioned: false,
+            strategy: MaterializeStrategy::Merge { unique_key: "order_id".to_string() },
+            on_schema_change: OnSchemaChange::Warn,
+        };
+        let st = cg.statements();
+        let guard = st
+            .iter()
+            .find(|s| s.contains("_wm_dup_keys"))
+            .expect("duplicate-key guard stmt");
+        // raises via error(), counts non-NULL keys appearing more than once
+        assert!(guard.contains("error('managed materialize: keyed merge on `order_id` blocked"));
+        assert!(guard.contains("GROUP BY order_id HAVING count(*) > 1"));
+        assert!(guard.contains("WHERE order_id IS NOT NULL"));
+        // must run before the mutations so a violation aborts before any write
+        let guard_pos = st.iter().position(|s| s.contains("_wm_dup_keys")).unwrap();
+        let del_pos = st
+            .iter()
+            .position(|s| s.starts_with("DELETE FROM"))
+            .unwrap();
+        let ins_pos = st
+            .iter()
+            .position(|s| s.starts_with("INSERT INTO"))
+            .unwrap();
+        assert!(guard_pos < del_pos && guard_pos < ins_pos);
+    }
+
     #[test]
     fn codegen_append_inserts_only() {
         let cg = MaterializeCodegen {
diff --git a/backend/windmill-api-scripts/src/scripts.rs b/backend/windmill-api-scripts/src/scripts.rs
index c3d01dad13..0ae16b9d51 100644
--- a/backend/windmill-api-scripts/src/scripts.rs
+++ b/backend/windmill-api-scripts/src/scripts.rs
@@ -1307,6 +1307,13 @@ async fn create_script_internal<'c>(
                 ns.path
             );
         }
+        // SCD2 (`key=<col> history` / `scd2`) option-combination checks the
+        // runtime cannot honor: reject at deploy with a clear message rather
+        // than letting the script deploy and fail on its first run. Mirrors the
+        // executor's safety-net `MaterializeSpec::validate` (duckdb_executor).
+        if let Err(e) = m.validate(pipeline_annotations.partition.is_some()) {
+            return Err(Error::BadRequest(e));
+        }
         // `manual` materialize never captures a schema (no wrap codegen), so
         // there is no contract for `on_schema_change` to mute downstream.
         if m.manual && m.on_schema_change == windmill_parser::asset_parser::OnSchemaChange::Ignore {
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index e51c59cb98..051aa77488 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -219,19 +219,18 @@ fn build_materialized_query(
     for s in plan.setup.iter_mut() {
         *s = substitute(s);
     }
+    // Deploy (`create_script_internal`) already rejects the invalid SCD2 combos,
+    // but preview/test runs reach the executor without a deploy — re-check so a
+    // bad combo fails with the same clear message instead of a raw DuckDB error.
+    m.validate(partitioned).map_err(Error::ExecutionErr)?;
     let strategy = if m.scd2 {
-        // SCD2 needs a natural key to identify an entity across versions, and its
-        // diff/close/open shape has no partition-scoped form in v1.
+        // SCD2 needs a natural key to identify an entity across versions (checked
+        // by `validate` above, which guarantees a non-empty key here).
         let key = m.unique_key.clone().ok_or_else(|| {
             Error::ExecutionErr(
                 "materialize scd2: requires a natural key — add `key=<col>`".to_string(),
             )
         })?;
-        if partitioned {
-            return Err(Error::ExecutionErr(
-                "materialize scd2: `// partitioned` is not supported with scd2 in v1".to_string(),
-            ));
-        }
         MaterializeStrategy::Scd2 { key, track: m.track.clone(), close_deleted: m.close_deleted }
     } else if m.append {
         MaterializeStrategy::Append
@@ -3510,7 +3509,10 @@ mod tests {
             rewritten.contains("AS schema_drift"),
             "warn folds drift into the summary: {rewritten}"
         );
-        assert!(!rewritten.contains("CAST(error("));
+        // No schema-drift *fail* guard in warn mode (the keyed merge still emits
+        // its own duplicate-source-key guard, which is a different `error(...)`).
+        assert!(!rewritten.contains("on_schema_change=fail blocked"));
+        assert!(rewritten.contains("keyed merge on `id` blocked"));
         assert!(!rewritten.contains("BY NAME"));
         assert!(meta.sync_prepass.is_none());
     }
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index 8f99b4c2c9..38c38a01f2 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -62,9 +62,18 @@ stays separate because it is cross-cutting (cascade + scheduling + materialize).
   error pointing to the `wmll.ducklake` helpers).
 - **`manual`** — escape hatch: the script writes its own DDL; Windmill only
   records state (no snapshot capture, no idempotency guarantee). Rare; explicit.
-- **`key=<col>`** → MERGE (dedup within slice, SCD type 1 — overwrites history);
-  **`append`** → INSERT-only; neither → DELETE-by-partition + INSERT (replace).
-  `append` wins over `key` if both are given (deploy warning).
+- **`key=<col>`** → MERGE (upsert-by-key within the slice, SCD type 1 —
+  overwrites history); **`append`** → INSERT-only; neither → DELETE-by-partition
+  + INSERT (replace). `append` wins over `key` if both are given (deploy warning).
+  - **Source must have unique keys.** The merge is delete-by-key + insert-all: it
+    reconciles the incoming rows against the *target* (rows whose key is in the
+    SELECT are replaced), but it does **not** deduplicate the *source*. Two
+    incoming rows sharing a key would therefore both land under that key, silently
+    breaking the "one row per key" contract. The managed write guards against this
+    — the run **fails** with a clear error when the SELECT returns more than one
+    row for a non-NULL key (`NULL` keys are exempt, matching the insert-only path).
+    Deduplicate in the SELECT (e.g. `QUALIFY row_number() OVER (PARTITION BY <key>
+    ORDER BY <recency-col> DESC) = 1`) or use `append` if duplicates are intended.
 - **`key=<col> history [track=<c1,c2,…>] [deletes=close]`** → upgrades the keyed
   merge to managed SCD **type 2** history (the leading keyword `scd2` is an alias).
   The SELECT is the *current snapshot* (one row per `key`), and the runtime adds
@@ -73,7 +82,9 @@ stays separate because it is cross-cutting (cascade + scheduling + materialize).
   history. Diff → close-old (`UPDATE`) → open-new (`INSERT`) in one transaction;
   the effective timestamp is the transaction clock (`now()`), so a run is
   self-consistent. v1 is **non-partitioned only** (`// partitioned` + history is
-  rejected). Unlike `manual`, it is managed, so `// data_test` and schema capture
+  rejected **at deploy**), and it **requires `key=`** (also rejected at deploy).
+  Both misconfigurations fail fast at save with a clear message instead of on the
+  first run. Unlike `manual`, it is managed, so `// data_test` and schema capture
   work.
   - **Deletes.** By default a key that disappears from the snapshot stays current
     (soft delete — dbt's `hard_deletes=ignore`). `deletes=close` opts into
diff --git a/docs/pipelines-vs-dbt.md b/docs/pipelines-vs-dbt.md
index 126a4ac215..d00a78aa7f 100644
--- a/docs/pipelines-vs-dbt.md
+++ b/docs/pipelines-vs-dbt.md
@@ -137,7 +137,9 @@ schema capture, and each run (re)creates a `<dim>_current` view; consumers get
 effective-dated joins via native `ASOF JOIN … >= valid_from`. Deletes follow dbt:
 soft by default (absent keys stay current), or `deletes=close` for
 `hard_deletes=close`. v1 is non-partitioned; partitioned history is a follow-up.
-See `ducklake-materialization.md`.
+Both misconfigurations — `history` without `key=`, and `history` + `//
+partitioned` — are rejected **at deploy** (fail-fast at save, not on the first
+run). See `ducklake-materialization.md`.
 
 ### 5. Selective execution grammar
 
@@ -434,6 +436,13 @@ DELETE-by-partition + INSERT works only if you reprocess from a
 source-of-truth source. If you're consuming amendments and need dedup
 *within* the slice, you need MERGE on `order_id`, not DELETE on partition.
 
+Note the boundary: the keyed merge reconciles the incoming rows against the
+*target* (delete-by-key + insert), but it does not deduplicate the *source*.
+"Latest version per `order_id`" is still your SELECT's job — pick one row per
+key (e.g. `QUALIFY row_number() OVER (PARTITION BY order_id ORDER BY updated_at
+DESC) = 1`). A source that still has two rows for one key is rejected at run
+time rather than double-written (see `ducklake-materialization.md`).
+
 This is what dbt's `unique_key` does. Orthogonal to partitioning:
 `partitioned` answers "which slice?"; `unique_key` answers "how do I dedup
 inside the slice?"

From 0ad174fa490e17eeb26280b5bdfd62956dfed9ff Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 22:29:35 +0200
Subject: [PATCH 53/76] feat(pipelines): self-teaching custom data_test errors
 + scaffold (#9937)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Custom `// data_test <path>` scripts must be a single SELECT reading the
freshly-materialized target via the internal `_wm_target.<table>` alias —
neither was documented or scaffolded. Make the codegen errors name the exact
violation (multi-statement, non-SELECT, wrong alias, empty) and append a
copyable `SELECT * FROM _wm_target.<table> WHERE <condition>` example. Add a
DuckDB-only 'Data test' pipeline output kind that scaffolds that starter body.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../windmill-parser/src/sql_materialize.rs    | 136 ++++++++++++++++--
 .../pipelineTemplates.dataTest.test.ts        |  56 ++++++++
 .../assets/AssetGraph/pipelineTemplates.ts    |  48 ++++++-
 3 files changed, 227 insertions(+), 13 deletions(-)
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.dataTest.test.ts

diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index dccf8ec313..1b24a5bccd 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -1248,6 +1248,28 @@ fn sample_star(ctx: &DataTestCtx, qualifier: Option<&str>) -> String {
     }
 }
 
+// Self-teaching tail appended to every malformed-custom-test error. It states
+// the two rules that aren't documented or scaffolded anywhere else — the body
+// is a single SELECT, and it reads the freshly-materialized target through the
+// internal `_wm_target.<table>` alias — and doubles that alias into a copyable
+// one-line example. `target_qualified` is already `_wm_target.<table>`.
+fn custom_test_hint(target_qualified: &str) -> String {
+    format!(
+        "Write a single SELECT against `{target_qualified}` returning the offending rows, e.g. \
+         `SELECT * FROM {target_qualified} WHERE <condition>` — an empty result means the test \
+         passes."
+    )
+}
+
+// Whether a custom-test statement reads the materialized target through the
+// reserved `_wm_target` alias (the only handle the runtime attaches it under).
+// SQL identifiers are case-insensitive, so match case-insensitively;
+// `split_statements` has already stripped comments, so a match here is a real
+// reference, not one buried in a comment. `TARGET_ALIAS` is lowercase.
+fn references_target(stmt: &str) -> bool {
+    stmt.to_lowercase().contains(TARGET_ALIAS)
+}
+
 /// Compile resolved data tests into ATTACH statements + per-test checks for
 /// `ctx`'s target. Pure: returns SQL text, executes nothing. Errors carry an
 /// actionable message (e.g. a relationships target that isn't an attachable
@@ -1379,24 +1401,44 @@ pub fn build_data_test_checks(
             }
             DataTestResolved::Custom { path, body } => {
                 // dbt singular-test convention: the body is a *single* SELECT
-                // (or CTE) returning the violating rows. It is embedded as a
-                // subquery (`FROM (<body>)`), so a multi-statement body would
-                // produce invalid SQL — validate up front with an actionable
-                // error. It runs in the target's connection (can read
-                // `_wm_target` + the user's attaches); partition substitution is
-                // already applied by the worker.
+                // (or CTE) returning the violating rows, reading the
+                // freshly-materialized target through the internal `_wm_target`
+                // schema. It is embedded as a subquery (`FROM (<body>)`), so a
+                // multi-statement or non-SELECT body would produce invalid SQL.
+                // Neither rule is documented or scaffolded elsewhere, so the
+                // errors are self-teaching: they name the exact violation and
+                // append a correct one-line example. It runs in the target's
+                // connection (can read `_wm_target` + the user's attaches);
+                // partition substitution is already applied by the worker.
+                let hint = custom_test_hint(t);
                 let stmts = split_statements(body);
                 if stmts.is_empty() {
-                    return Err(format!("data_test custom `{path}`: empty test body"));
+                    return Err(format!(
+                        "data_test custom `{path}`: empty test body. {hint}"
+                    ));
                 }
                 if stmts.len() > 1 {
                     return Err(format!(
-                        "data_test custom `{path}`: must be a single SELECT returning the \
-                         violating rows (found {} statements)",
+                        "data_test custom `{path}`: a custom data test must be a single SELECT, \
+                         but found {} statements. {hint}",
                         stmts.len()
                     ));
                 }
-                push_check(&mut out, format!("custom({path})"), stmts[0].to_string());
+                let stmt = &stmts[0];
+                if classify_block(stmt) != BlockClass::Output {
+                    return Err(format!(
+                        "data_test custom `{path}`: a custom data test must be a single SELECT, \
+                         not a write or DDL statement. {hint}"
+                    ));
+                }
+                if !references_target(stmt) {
+                    return Err(format!(
+                        "data_test custom `{path}`: the test never reads the freshly-materialized \
+                         target — reference it through the internal `{TARGET_ALIAS}` schema (as \
+                         `{t}`), not the table name on its own. {hint}"
+                    ));
+                }
+                push_check(&mut out, format!("custom({path})"), stmt.to_string());
             }
         }
     }
@@ -2343,13 +2385,85 @@ mod tests {
     #[test]
     fn data_test_custom_rejects_multi_statement_body() {
         // The body is embedded as a subquery, so a setup-then-SELECT body would
-        // produce invalid SQL — reject it up front with an actionable error.
+        // produce invalid SQL — reject it up front with a self-teaching error
+        // that names the violation and shows the correct single-SELECT shape.
         let tests = vec![DataTestResolved::Custom {
             path: "f/tests/amount".into(),
             body: "SET threads = 1; SELECT * FROM _wm_target.orders WHERE amount < 0".into(),
         }];
         let err = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap_err();
         assert!(err.contains("single SELECT"), "unexpected error: {err}");
+        assert!(
+            err.contains("found 2 statements"),
+            "unexpected error: {err}"
+        );
+        // the copyable example points at the internal target alias.
+        assert!(
+            err.contains("SELECT * FROM _wm_target.orders WHERE <condition>"),
+            "unexpected error: {err}"
+        );
+    }
+
+    #[test]
+    fn data_test_custom_rejects_non_select_body() {
+        // A write/DDL body can't be embedded as `FROM (<body>)`; the error must
+        // say so and teach the single-SELECT convention.
+        let tests = vec![DataTestResolved::Custom {
+            path: "f/tests/amount".into(),
+            body: "DELETE FROM _wm_target.orders WHERE amount < 0".into(),
+        }];
+        let err = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap_err();
+        assert!(err.contains("single SELECT"), "unexpected error: {err}");
+        assert!(
+            err.contains("SELECT * FROM _wm_target.orders WHERE <condition>"),
+            "unexpected error: {err}"
+        );
+    }
+
+    #[test]
+    fn data_test_custom_rejects_wrong_target_alias() {
+        // Referencing the target by its bare table name (not `_wm_target.<table>`)
+        // is the most common custom-test mistake — the runtime only attaches the
+        // freshly-materialized target under `_wm_target`, so the query would fail
+        // at runtime. Catch it at codegen with a self-teaching error.
+        let tests = vec![DataTestResolved::Custom {
+            path: "f/tests/amount".into(),
+            body: "SELECT * FROM orders WHERE amount < 0".into(),
+        }];
+        let err = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap_err();
+        assert!(err.contains("_wm_target"), "unexpected error: {err}");
+        assert!(
+            err.contains("SELECT * FROM _wm_target.orders WHERE <condition>"),
+            "unexpected error: {err}"
+        );
+    }
+
+    #[test]
+    fn data_test_custom_accepts_from_first_and_uppercased_alias() {
+        // DuckDB's FROM-first syntax is a valid Output, and the alias match is
+        // case-insensitive (SQL identifiers are), so this passes.
+        let tests = vec![DataTestResolved::Custom {
+            path: "f/tests/amount".into(),
+            body: "FROM _WM_TARGET.orders WHERE amount < 0".into(),
+        }];
+        let sql = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap();
+        assert!(sql.checks[0]
+            .probe
+            .contains("FROM (FROM _WM_TARGET.orders WHERE amount < 0) _wm_v"));
+    }
+
+    #[test]
+    fn data_test_custom_empty_body_teaches_shape() {
+        let tests = vec![DataTestResolved::Custom {
+            path: "f/tests/amount".into(),
+            body: "   \n-- just a comment\n".into(),
+        }];
+        let err = build_data_test_checks(&tests, &ctx_unpartitioned()).unwrap_err();
+        assert!(err.contains("empty test body"), "unexpected error: {err}");
+        assert!(
+            err.contains("SELECT * FROM _wm_target.orders WHERE <condition>"),
+            "unexpected error: {err}"
+        );
     }
 
     #[test]
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.dataTest.test.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.dataTest.test.ts
new file mode 100644
index 0000000000..2acdf2abfb
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.dataTest.test.ts
@@ -0,0 +1,56 @@
+import { describe, expect, it } from 'vitest'
+import {
+	autoOutputAsset,
+	compatibleOutputKinds,
+	generatePipelineDraft,
+	PIPELINE_OUTPUT_KINDS
+} from './pipelineTemplates'
+
+// The `data_test` output kind scaffolds a *custom* (singular) data test: a
+// standalone DuckDB script referenced from a materialize script's
+// `-- data_test <path>` line. It must be a single SELECT that reads the
+// freshly-materialized target through the internal `_wm_target` schema — the
+// two rules the backend's self-teaching errors enforce.
+describe('data_test scaffold', () => {
+	it('is a DuckDB-only output kind exposed in the picker', () => {
+		expect(compatibleOutputKinds('duckdb')).toContain('data_test')
+		expect(compatibleOutputKinds('python3')).not.toContain('data_test')
+		expect(PIPELINE_OUTPUT_KINDS.map((k) => k.id)).toContain('data_test')
+	})
+
+	it('produces no output asset (it asserts against an existing target)', () => {
+		expect(autoOutputAsset('data_test', 'folder', 'duckdb')).toBeUndefined()
+	})
+
+	it('scaffolds a single SELECT against `_wm_target.<table>`', () => {
+		const src = generatePipelineDraft({
+			language: 'duckdb',
+			outputKind: 'data_test',
+			triggers: []
+		})
+		// starter body is a single SELECT against the internal target alias.
+		expect(src).toContain('SELECT * FROM _wm_target.your_table WHERE your_condition;')
+		// exactly one SQL statement (single SELECT) — count statement lines, not
+		// the word "SELECT" that also appears in the guidance comment.
+		const stmtLines = src.split('\n').filter((l) => /^\s*SELECT\b/i.test(l))
+		expect(stmtLines).toHaveLength(1)
+		// no `-- materialize <uri>` output annotation — a data test declares no
+		// asset (the word still appears in the guidance comment, which is fine).
+		expect(src).not.toMatch(/^--\s*materialize\s/m)
+		// teaches how to wire it up + the offending-rows convention.
+		expect(src).toContain('-- data_test <this-script-path>')
+		expect(src).toContain('offending rows')
+	})
+
+	it('seeds the table name from an upstream ducklake asset when present', () => {
+		const src = generatePipelineDraft({
+			language: 'duckdb',
+			outputKind: 'data_test',
+			input: { kind: 'ducklake', path: 'analytics/orders' },
+			triggers: []
+		})
+		expect(src).toContain('SELECT * FROM _wm_target.orders WHERE your_condition;')
+		// no ATTACH of the input — the runtime attaches the target as `_wm_target`.
+		expect(src).not.toContain('ATTACH')
+	})
+})
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
index 11077d3609..f81d1a330d 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
@@ -17,6 +17,7 @@ export type PipelineOutputKind =
 	| 'datatable'
 	| 'ducklake'
 	| 'materialize'
+	| 'data_test'
 	| 's3_parquet'
 	| 's3_object'
 	| 'macros'
@@ -37,6 +38,11 @@ export const PIPELINE_OUTPUT_KINDS: PipelineOutputKindMeta[] = [
 		label: 'Materialized table',
 		description: 'Managed DuckLake table — idempotent, versioned, tracked'
 	},
+	{
+		id: 'data_test',
+		label: 'Data test',
+		description: 'Custom assertion — a single SELECT returning offending rows (empty = pass)'
+	},
 	{
 		id: 'datatable',
 		label: 'Data table',
@@ -83,7 +89,16 @@ const LANG_COMPATIBILITY: Record<ScriptLang, PipelineOutputKind[]> = {
 	// single SELECT. The Python/TS `wmll.ducklake` helper currently takes a SQL
 	// SELECT (not in-memory rows), so a polyglot managed materialize is a
 	// separate follow-up — those langs keep the `ducklake` raw-write kind.
-	duckdb: ['materialize', 'datatable', 'ducklake', 's3_parquet', 's3_object', 'macros', 'none'],
+	duckdb: [
+		'materialize',
+		'data_test',
+		'datatable',
+		'ducklake',
+		's3_parquet',
+		's3_object',
+		'macros',
+		'none'
+	],
 	postgresql: ['datatable', 'none'],
 	mysql: ['none'],
 	mssql: ['none'],
@@ -183,8 +198,10 @@ export function autoOutputAsset(
 			}
 		}
 		// A macro library produces no asset — its "output" is the registry
-		// entries the deploy records.
+		// entries the deploy records. A custom data test produces no asset
+		// either — it asserts against an existing materialized target.
 		case 'macros':
+		case 'data_test':
 		case 'none':
 			return undefined
 	}
@@ -316,6 +333,17 @@ export type TemplateContext = {
 function header(ctx: TemplateContext): string {
 	const { language, triggers, output, outputKind } = ctx
 	const p = commentPrefix(language)
+	// A custom data test is a standalone script, not a graph node that produces
+	// an asset — so it gets no `// pipeline` / output annotation. Instead, tell
+	// the author how to wire it up (the `data_test` reference) and the two rules
+	// that aren't obvious: single SELECT, returning the offending rows.
+	if (outputKind === 'data_test') {
+		return [
+			`${p} Custom data test — reference it from a materialize script with \`${p} data_test <this-script-path>\`.`,
+			`${p} It must be a single SELECT returning the offending rows; the run fails if any row comes back.`,
+			''
+		].join('\n')
+	}
 	const lines = triggers.map((t) => {
 		switch (t.kind) {
 			case 'asset':
@@ -544,6 +572,22 @@ function bodyPython(ctx: TemplateContext): string {
 function bodyDuckdb(ctx: TemplateContext): string {
 	const { input, output, outputKind } = ctx
 	const dataUpload = isDataUpload(ctx.triggers)
+	if (outputKind === 'data_test') {
+		// Standalone custom data test: it reads ONLY the freshly-materialized
+		// target, which the runtime attaches under the internal `_wm_target`
+		// schema — so it emits no ATTACH / input load of its own. When the test
+		// was created off a ducklake asset, seed its table name; otherwise a
+		// clear placeholder. This exact shape (single SELECT vs `_wm_target`) is
+		// what the backend's self-teaching errors ask for.
+		const testTable = input?.kind === 'ducklake' ? catalogTableRef(input.path) : 'your_table'
+		return [
+			'',
+			`-- Return the rows that VIOLATE your assertion; an empty result means the test passes.`,
+			`-- \`_wm_target\` is the freshly-materialized target, attached by the runtime.`,
+			`SELECT * FROM _wm_target.${testTable} WHERE your_condition;`,
+			''
+		].join('\n')
+	}
 	const lines: string[] = []
 	if (dataUpload) {
 		// `(s3object)` param declaration → the run form renders the S3 picker

From 46be39dfb7fbfb2b70e61819d6065b45810c41c9 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 22:34:58 +0200
Subject: [PATCH 54/76] fix(pipelines): order data_test relationships refs
 before the tested script in a cascade (#9934)

* fix(pipelines): order data_test relationships refs before the tested script in a cascade

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): key custom-test reads by (usage_kind, path) to avoid same-path flow collisions

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 backend/windmill-api-assets/src/lib.rs        | 118 ++++++++++++++++++
 backend/windmill-api/openapi.yaml             |  32 +++++
 docs/ducklake-materialization.md              |  34 +++++
 .../assets/AssetGraph/AssetGraphCanvas.svelte |  27 ++++
 .../assets/AssetGraph/boundedCascade.test.ts  |  71 ++++++++++-
 .../assets/AssetGraph/boundedCascade.ts       |  14 +++
 .../lib/components/assets/AssetGraph/types.ts |  17 +++
 7 files changed, 311 insertions(+), 2 deletions(-)

diff --git a/backend/windmill-api-assets/src/lib.rs b/backend/windmill-api-assets/src/lib.rs
index 2cebf9ed13..c0a93c039b 100644
--- a/backend/windmill-api-assets/src/lib.rs
+++ b/backend/windmill-api-assets/src/lib.rs
@@ -797,6 +797,25 @@ enum TriggerEdge {
     },
 }
 
+// Ordering-only "must-run-after" edge: `runnable_path`'s data test reads
+// `asset` (a `// data_test relationships` ref, or a custom test whose body
+// reads a known pipeline asset), so the asset's in-pipeline producer must
+// materialize before `runnable_path` runs. NOT a data-consumption edge — the
+// tested script doesn't ingest the asset's rows, it only needs the table to
+// exist at test time. Rendered dashed (like macro edges) and fed into the
+// cascade topo-sort so a cold cascade orders the referenced dimension first.
+// Only emitted when the referenced asset has a producer in the graph; an
+// external table (no producer) adds no edge — the runtime error stands.
+#[derive(Serialize, Debug)]
+struct TestEdge {
+    producer_kind: AssetUsageKind,
+    producer_path: String,
+    runnable_kind: AssetUsageKind,
+    runnable_path: String,
+    asset_kind: AssetKind,
+    asset_path: String,
+}
+
 #[derive(Serialize, Debug)]
 struct AssetGraphResponse {
     assets: Vec<GraphAssetNode>,
@@ -805,6 +824,8 @@ struct AssetGraphResponse {
     triggers: Vec<TriggerEdge>,
     #[serde(skip_serializing_if = "Vec::is_empty", default)]
     macro_edges: Vec<MacroEdge>,
+    #[serde(skip_serializing_if = "Vec::is_empty", default)]
+    test_edges: Vec<TestEdge>,
 }
 
 async fn asset_graph(
@@ -1257,6 +1278,102 @@ async fn asset_graph(
         runnable_set.insert((AssetUsageKind::Script, e.consumer_path.clone()));
     }
 
+    // Data-test ordering edges. A `// data_test relationships <col> -> <asset>`
+    // (and, best-effort, a custom `// data_test <script>` whose body reads a
+    // pipeline asset) needs the referenced asset materialized before the tested
+    // script runs — but that dependency is otherwise absent from the execution
+    // DAG, so a cold cascade can run the tested script first and hard-fail
+    // ("Catalog Error: Table … does not exist"). Resolve the referenced asset's
+    // producer(s) from the write edges built above and add an ordering-only
+    // edge producer → testing_script. No producer (external table) ⇒ no edge.
+    let mut producers_by_asset: std::collections::HashMap<
+        (AssetKind, String),
+        Vec<(AssetUsageKind, String)>,
+    > = Default::default();
+    for e in &edges {
+        if matches!(e.access_type.as_deref(), Some("w") | Some("rw")) {
+            producers_by_asset
+                .entry((e.asset_kind, e.asset_path.clone()))
+                .or_default()
+                .push((e.runnable_kind, e.runnable_path.clone()));
+        }
+    }
+    // Assets a runnable reads, keyed by (usage_kind, path) — used to order a
+    // custom-test *script*'s producers before whichever member declares
+    // `// data_test <path>`. Keyed on the kind too because a flow can share a
+    // script's path; `// data_test <path>` resolves a deployed script body, so
+    // the lookup below pins `Script` and never pulls a same-path flow's reads.
+    let mut reads_by_runnable: std::collections::HashMap<
+        (AssetUsageKind, String),
+        Vec<(AssetKind, String)>,
+    > = Default::default();
+    for e in &edges {
+        if matches!(e.access_type.as_deref(), None | Some("r") | Some("rw")) {
+            reads_by_runnable
+                .entry((e.runnable_kind, e.runnable_path.clone()))
+                .or_default()
+                .push((e.asset_kind, e.asset_path.clone()));
+        }
+    }
+    let mut test_edges: Vec<TestEdge> = Vec::new();
+    // Dedup on (producer, tested_script, asset) so several tests referencing the
+    // same asset, or a repeated producer, yield one edge.
+    let mut seen_test_edges: std::collections::HashSet<(String, String, AssetKind, String)> =
+        Default::default();
+    for (member_path, ann) in &annotations_by_path {
+        for dt in &ann.data_tests {
+            use windmill_common::assets::DataTest;
+            let referenced: Vec<(AssetKind, String)> = match dt {
+                DataTest::Relationships { to_kind, to_path, .. } => {
+                    vec![(
+                        windmill_common::assets::asset_kind_from_parser(*to_kind),
+                        to_path.clone(),
+                    )]
+                }
+                // Best-effort: the custom test *script*'s parsed reads. Reading
+                // the member's OWN output resolves to the member as producer and
+                // is dropped by the self-edge guard below.
+                DataTest::Custom { path } => reads_by_runnable
+                    .get(&(AssetUsageKind::Script, path.clone()))
+                    .cloned()
+                    .unwrap_or_default(),
+                _ => vec![],
+            };
+            for (asset_kind, asset_path) in referenced {
+                let Some(producers) = producers_by_asset.get(&(asset_kind, asset_path.clone()))
+                else {
+                    continue;
+                };
+                for (producer_kind, producer_path) in producers {
+                    // Skip a self-edge: the tested script produces the asset it
+                    // tests (a materialize + relationships/custom on its own output).
+                    if *producer_kind == AssetUsageKind::Script && producer_path == member_path {
+                        continue;
+                    }
+                    if seen_test_edges.insert((
+                        producer_path.clone(),
+                        member_path.clone(),
+                        asset_kind,
+                        asset_path.clone(),
+                    )) {
+                        test_edges.push(TestEdge {
+                            producer_kind: *producer_kind,
+                            producer_path: producer_path.clone(),
+                            runnable_kind: AssetUsageKind::Script,
+                            runnable_path: member_path.clone(),
+                            asset_kind,
+                            asset_path: asset_path.clone(),
+                        });
+                    }
+                }
+            }
+        }
+    }
+    for e in &test_edges {
+        runnable_set.insert((e.producer_kind, e.producer_path.clone()));
+        runnable_set.insert((e.runnable_kind, e.runnable_path.clone()));
+    }
+
     // Fork data-environment state per ducklake asset. The parent's rows are read on the plain
     // pool: fork membership does not imply parent membership, and defer already exposes the
     // parent's data to fork jobs — surfacing its materialization status is strictly less.
@@ -1421,6 +1538,7 @@ async fn asset_graph(
         edges,
         triggers,
         macro_edges,
+        test_edges,
     }))
 }
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index afe8cbc0b6..1726234a8d 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -21595,6 +21595,38 @@ paths:
                             type: string
                         via_use:
                           type: boolean
+                  test_edges:
+                    type: array
+                    description: >-
+                      Ordering-only "must-run-after" edges — a `// data_test relationships`
+                      (or custom test reading a pipeline asset) requires the referenced
+                      asset's producer to run before the tested script. Not a data-consumption
+                      edge; fed into the cascade topo-sort so cold runs order correctly.
+                      Omitted when empty.
+                    items:
+                      type: object
+                      required:
+                        [
+                          producer_kind,
+                          producer_path,
+                          runnable_kind,
+                          runnable_path,
+                          asset_kind,
+                          asset_path,
+                        ]
+                      properties:
+                        producer_kind:
+                          $ref: "#/components/schemas/AssetUsageKind"
+                        producer_path:
+                          type: string
+                        runnable_kind:
+                          $ref: "#/components/schemas/AssetUsageKind"
+                        runnable_path:
+                          type: string
+                        asset_kind:
+                          $ref: "#/components/schemas/AssetKind"
+                        asset_path:
+                          type: string
 
   /w/{workspace}/assets/macros:
     get:
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index 38c38a01f2..50e7c21de0 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -412,6 +412,40 @@ seams: add a parsed variant, emit its check/reader SQL into the summary, read
 it back in the worker. Nothing about the closed set of *today's* keywords is
 load-bearing.
 
+### Cascade ordering (`test_edges`)
+
+A `relationships` test — and, best-effort, a custom test whose body reads a
+pipeline asset — needs the *referenced* asset to exist at test time, but it is
+**not** a data-consumption `// on`/read of that asset, so it contributes no
+lineage edge. Without an ordering constraint, a cold cascade can run the tested
+script before the referenced dimension is materialized and hard-fail
+(`Catalog Error: Table … does not exist`).
+
+`asset_graph` (`windmill-api-assets/src/lib.rs`) closes this by resolving the
+referenced asset's in-pipeline **producer** (from the write edges it already
+builds) and emitting an ordering-only `test_edges` entry
+`producer → testing_script`. It is:
+
+- **Only emitted when a producer exists in the graph.** An external table (no
+  in-pipeline producer) adds no edge — the missing dependency is real and the
+  runtime error is the correct signal. Self-edges (a script relationship-testing
+  its own output) are dropped.
+- **Rendered distinctly** — amber dashed "test needs" link on the canvas, apart
+  from lineage (blue/gray solid) and triggers (gray) — because the tested script
+  does not ingest the asset's rows.
+- **Fed into the cascade topo-sort** via `buildLineageDag`
+  (`AssetGraph/boundedCascade.ts`), routed *through* the referenced asset node
+  (`asset → testing_script`) so the existing `producer → asset` write edge
+  extends into `producer → asset → testing_script` and the two-hop
+  `buildLineageDownstreamMap` invariant holds. Bounded and full-pipeline runs
+  (`computeInducedSchedule`) then order the producer first.
+
+Scope caveat: this orders *within a single client-driven cascade* (dev run /
+bounded run / full-pipeline run). It does not change the production reactive
+asset-dispatch of two independently-scheduled roots — there, `relationships`
+targets on a disjoint root should still be co-scheduled or bound with an
+explicit `// on <dim>` if a hard ordering is required.
+
 ### Scoping decisions (v1)
 
 - **Partition scope.** When `// partitioned`, built-in checks are scoped to the
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index 41f5ddc3f5..d2ae645a97 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -222,6 +222,7 @@
 			| 'add-anchor'
 			| 'data-test'
 			| 'macro'
+			| 'test-dependency'
 		unsaved?: boolean
 		// Edge from a missing-trigger placeholder — styled red dashed to
 		// signal "this script declared `// on kafka` but no trigger row
@@ -523,6 +524,22 @@
 			})
 		}
 
+		// Data-test ordering edges (producer → tested script): the referenced
+		// asset must be materialized before the test runs, so the cascade orders
+		// the producer first. Rendered as a dashed "must run after" link, distinct
+		// from data flow — the tested script doesn't consume the asset's rows.
+		for (const te of g.test_edges ?? []) {
+			const producerId = `${te.producer_kind}:${te.producer_path}`
+			const testedId = `${te.runnable_kind}:${te.runnable_path}`
+			if (!runnableNodeIds.has(producerId) || !runnableNodeIds.has(testedId)) continue
+			edges.push({
+				id: `testdep:${producerId}->${testedId}`,
+				source: producerId,
+				target: testedId,
+				kind: 'test-dependency'
+			})
+		}
+
 		// Non-asset triggers (schedule + native) are rendered as source nodes
 		// above the pipeline script. Real (non-missing) nodes are
 		// deduplicated per (kind, ref) tuple so a single schedule shared
@@ -951,6 +968,16 @@
 						label = e.via_use ? 'uses lib' : 'macros'
 						labelStyle = 'fill: rgb(139 92 246); font-size: 10px; font-weight: 600;'
 						break
+					case 'test-dependency':
+						// Producer → tested script: amber dashed ordering link. Not
+						// data flow (blue/gray) nor execution trigger (gray "triggers")
+						// — it only says "the test needs this asset to exist first".
+						style = 'stroke: rgb(217 119 6); stroke-width: 1.25px;'
+						strokeDasharray = '5 3'
+						markerColor = 'rgb(217 119 6)'
+						label = 'test needs'
+						labelStyle = 'fill: rgb(217 119 6); font-size: 10px; font-weight: 600;'
+						break
 					default:
 						style = ''
 				}
diff --git a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
index fa735682b7..0c3b9dea64 100644
--- a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
@@ -16,15 +16,17 @@ import { computeInducedSchedule } from './graphTraversal'
 type W = [script: string, asset: string] // producer write edge (datatable)
 type R = [script: string, asset: string] // pure-read edge (datatable)
 type S = [script: string, asset: string] // `// on <asset>` subscription
+type T = [producer: string, tested: string, asset: string] // `// data_test` ordering edge
 
 function graph(opts: {
 	scripts?: string[]
 	writes?: W[]
 	reads?: R[]
 	subs?: S[]
+	tests?: T[]
 	native?: Array<[kind: NativeTriggerKind, script: string]>
 }): AssetGraphResponse {
-	const { scripts = [], writes = [], reads = [], subs = [], native = [] } = opts
+	const { scripts = [], writes = [], reads = [], subs = [], tests = [], native = [] } = opts
 	const triggers: AssetGraphTrigger[] = [
 		...subs.map(
 			([s, a]) =>
@@ -60,7 +62,15 @@ function graph(opts: {
 				access_type: 'r' as const
 			}))
 		],
-		triggers
+		triggers,
+		test_edges: tests.map(([producer, tested, a]) => ({
+			producer_kind: 'script' as const,
+			producer_path: producer,
+			runnable_kind: 'script' as const,
+			runnable_path: tested,
+			asset_kind: 'datatable' as const,
+			asset_path: a
+		}))
 	}
 }
 
@@ -95,6 +105,22 @@ describe('buildLineageDag', () => {
 		expect([...(dag.down.get(sn('u')) ?? [])]).toEqual([asset('x')])
 		expect(dag.up.get(sn('u'))).toBeUndefined() // asset is not upstream of its own writer
 	})
+
+	it('routes a data_test ordering edge through the referenced asset', () => {
+		// prod writes x; tested has a `// data_test` against x (prod → tested edge).
+		// The DAG must place x (and thus prod) upstream of tested so a cascade
+		// materializes x first.
+		const g = graph({
+			scripts: ['prod', 'tested'],
+			writes: [['prod', 'x']],
+			tests: [['prod', 'tested', 'x']]
+		})
+		const dag = buildLineageDag(g)
+		// asset x → tested (routed through the asset, not a direct prod → tested hop)
+		expect([...(dag.down.get(asset('x')) ?? [])]).toEqual([sn('tested')])
+		// prod → x → tested makes prod an ancestor of tested.
+		expect(ancestors(dag, sn('tested'))).toEqual(new Set([asset('x'), sn('prod')]))
+	})
 })
 
 describe('ancestors / descendants', () => {
@@ -271,6 +297,47 @@ describe('buildLineageDownstreamMap (read-aware scheduling)', () => {
 		expect(readAware.indegree.get('c')).toBe(1)
 		expect(readAware.nodes).toEqual(['a', 'c'])
 	})
+
+	it('orders a disjoint-root producer before a data_test that references it', () => {
+		// Two disjoint roots (the HD-1 repro): `dim` produces the dimension
+		// `dimc`; `fct` produces `fcto` and has a `// data_test relationships`
+		// against `dimc`. Without the test edge they are unordered and a cold
+		// cascade can run `fct` first ("table dimc does not exist"). The test
+		// edge must place `dim` strictly before `fct`.
+		const g = graph({
+			scripts: ['dim', 'fct'],
+			writes: [
+				['dim', 'dimc'],
+				['fct', 'fcto']
+			],
+			tests: [['dim', 'fct', 'dimc']]
+		})
+		const selected = new Set(['dim', 'fct'])
+		const map = buildLineageDownstreamMap(g)
+		expect([...(map.get('dim') ?? [])]).toEqual(['fct'])
+		const schedule = computeInducedSchedule(g, selected, map)
+		expect(schedule.roots).toEqual(['dim'])
+		expect(schedule.indegree.get('fct')).toBe(1)
+		expect(schedule.nodes).toEqual(['dim', 'fct'])
+		expect(schedule.cyclic).toEqual([])
+	})
+
+	it('adds no ordering when the referenced asset has no in-pipeline producer', () => {
+		// `fct` tests against an external `ext` table nothing produces — the
+		// backend emits no test edge, so the frontend sees none and `fct` stays
+		// an independent root (the runtime error stands, as designed).
+		const g = graph({
+			scripts: ['dim', 'fct'],
+			writes: [['fct', 'fcto']],
+			tests: [] // no producer for `ext` ⇒ backend omitted the edge
+		})
+		const schedule = computeInducedSchedule(
+			g,
+			new Set(['dim', 'fct']),
+			buildLineageDownstreamMap(g)
+		)
+		expect(schedule.roots.sort()).toEqual(['dim', 'fct'])
+	})
 })
 
 describe('assetUriToNodeId', () => {
diff --git a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
index 44a26d9c71..8b401d8017 100644
--- a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
@@ -70,10 +70,17 @@ export type LineageDag = {
  *   - producer script → asset   (write / rw edges)
  *   - asset → reader script      (pure-read edges — a data dependency)
  *   - asset → subscriber script  (`// on <asset>` triggers)
+ *   - asset → testing script     (`// data_test` ordering edges)
  *
  * An `rw` edge is treated as production only (script → asset); emitting the
  * reverse asset → script too would make every upsert a 2-cycle through its own
  * asset.
+ *
+ * `test_edges` are modeled through the referenced asset (asset → testing
+ * script), NOT as a direct producer → testing-script hop: the producer already
+ * has a write edge to that asset, so this yields producer → asset → testing
+ * script and keeps the two-hop (script → asset → script) invariant that
+ * `buildLineageDownstreamMap` relies on.
  */
 export function buildLineageDag(g: AssetGraphResponse): LineageDag {
 	const down = new Map<string, Set<string>>()
@@ -107,6 +114,13 @@ export function buildLineageDag(g: AssetGraphResponse): LineageDag {
 		if (t.trigger_kind !== 'asset' || t.runnable_kind !== 'script') continue
 		addEdge(assetKey(t), scriptNodeId(t.runnable_path))
 	}
+	// Data-test ordering edges: the referenced asset must exist before the
+	// tested script runs. Routed through the asset node so the existing
+	// producer → asset write edge extends into producer → asset → testing script.
+	for (const t of g.test_edges ?? []) {
+		if (t.runnable_kind !== 'script') continue
+		addEdge(assetKey(t), scriptNodeId(t.runnable_path))
+	}
 
 	return { down, up, nodes }
 }
diff --git a/frontend/src/lib/components/assets/AssetGraph/types.ts b/frontend/src/lib/components/assets/AssetGraph/types.ts
index 9d4db75861..5dea3319c7 100644
--- a/frontend/src/lib/components/assets/AssetGraph/types.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/types.ts
@@ -147,12 +147,29 @@ export interface AssetGraphMacroEdge {
 	unsaved?: boolean
 }
 
+// Ordering-only "must-run-after" edge: `runnable_path`'s `// data_test`
+// (a `relationships` ref, or a custom test reading a pipeline asset) needs
+// `asset` materialized before the tested script runs — but the tested script
+// doesn't consume the asset's rows, so this is NOT a lineage edge. Resolved
+// server-side to the referenced asset's in-pipeline producer; fed into the
+// cascade topo-sort (buildLineageDag) so a cold cascade orders the referenced
+// dimension first, and rendered dashed on the canvas (like macro edges).
+export interface AssetGraphTestEdge {
+	producer_kind: GraphUsageKind
+	producer_path: string
+	runnable_kind: GraphUsageKind
+	runnable_path: string
+	asset_kind: AssetKind
+	asset_path: string
+}
+
 export interface AssetGraphResponse {
 	assets: AssetGraphAssetNode[]
 	runnables: AssetGraphRunnableNode[]
 	edges: AssetGraphEdge[]
 	triggers: AssetGraphTrigger[]
 	macro_edges?: AssetGraphMacroEdge[]
+	test_edges?: AssetGraphTestEdge[]
 }
 
 export type AssetGraphNodeData =

From 574d3ac9ff5015b5d3f53040c9d4dfbfd161a076 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 22:35:46 +0200
Subject: [PATCH 55/76] fix(pipelines): link SCD2 <dim>_current view to its
 producer across all graph surfaces (#9933)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(pipelines): link SCD2 <dim>_current view to its producer across all graph surfaces

An SCD2 producer (`// materialize … history`) creates the base table AND a
`<dim>_current` view at runtime. The deploy path already registered both writes,
but the CLI `--local` graph and the frontend live-editor graph only emitted the
base write, so a consumer reading only `<dim>_current` orphaned there. Centralize
the companion derivation in `MaterializeSpec::write_targets` /
`scd2_current_target` (+ TS `scd2CurrentTargetPath` mirror), emit the `_current`
write in every surface, and mark the companion node `derived_from` the base so the
canvas renders it as a derived "current view" instead of an unrelated table.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): keep scd2 _current write edge when editing a saved producer

Addresses Codex CI review (P1): opening a deployed scd2 materialize producer for
editing dropped its persisted `<dim>_current` write edge. `liveRefKeys` (the set
of asset keys a saved-script edit preserves against stale-filtering) only added
the base materialize target, so the companion `_current` write was judged stale
and filtered — orphaning consumers of only the view mid-edit. Add
`scd2CurrentTargetPath(m)` to `liveRefKeys` too; covered by a new saved-edit test.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../windmill-parser/src/asset_parser.rs       | 80 ++++++++++++++++
 backend/windmill-api-assets/src/lib.rs        | 28 ++++++
 backend/windmill-api-scripts/src/scripts.rs   | 22 ++---
 cli/src/commands/pipeline/localGraph.ts       | 77 ++++++++++-----
 cli/test/pipeline_local_graph_unit.test.ts    |  9 ++
 .../assets/AssetGraph/AssetGraphCanvas.svelte |  1 +
 .../assets/AssetGraph/AssetNode.svelte        | 18 +++-
 .../AssetGraph/parsePipelineAnnotations.ts    | 10 ++
 .../assets/AssetGraph/resolveGraph.test.ts    | 93 +++++++++++++++++++
 .../assets/AssetGraph/resolveGraph.ts         | 39 ++++++--
 .../lib/components/assets/AssetGraph/types.ts |  5 +
 11 files changed, 340 insertions(+), 42 deletions(-)

diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index d95234a297..c2cf65309b 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -293,6 +293,30 @@ pub struct MaterializeSpec {
     pub on_schema_change: OnSchemaChange,
 }
 
+impl MaterializeSpec {
+    /// The `<target>_current` SCD2 companion view this managed materialize also
+    /// produces, or `None` when it isn't a managed scd2 target. Managed scd2
+    /// creates the base table *and* a `<dim>_current` "latest row per key" view
+    /// each run (see `sql_materialize.rs`); `manual` mode owns its own DDL and
+    /// short-circuits before that codegen, so it produces no companion.
+    pub fn scd2_current_target(&self) -> Option<(AssetKind, String)> {
+        (self.scd2 && !self.manual)
+            .then(|| (self.target_kind, format!("{}_current", self.target_path)))
+    }
+
+    /// Every asset this managed materialize produces: the base table, plus — for
+    /// managed scd2 — the `<target>_current` companion view. The producer's
+    /// trailing `SELECT` doesn't express these writes (the runtime generates the
+    /// DDL), so this is the single source of truth every graph surface (deploy
+    /// asset rows, the CLI `--local` graph, and the frontend live graph) uses to
+    /// link reads of the base *and* the `_current` view back to this producer.
+    pub fn write_targets(&self) -> Vec<(AssetKind, String)> {
+        let mut targets = vec![(self.target_kind, self.target_path.clone())];
+        targets.extend(self.scd2_current_target());
+        targets
+    }
+}
+
 // dbt's `on_schema_change`, covering both the save-time contract check and the
 // run-time write guardrail for the positional persist-and-mutate strategies:
 //   • `warn` (default): surface consumer contract warnings; at write time, log
@@ -1740,6 +1764,62 @@ mod pipeline_annotation_tests {
         assert!(!m.close_deleted);
     }
 
+    #[test]
+    fn materialize_scd2_write_targets_include_current_view() {
+        // A managed scd2 materialize produces the base table AND the
+        // `<dim>_current` companion view, so the producer must be recorded as
+        // writing both (reads of the view otherwise resolve to an orphan asset).
+        let out = parse_pipeline_annotations(
+            "// materialize ducklake://main/dim_customers key=id history",
+        );
+        let m = out.materialize.expect("materialize");
+        assert_eq!(
+            m.write_targets(),
+            vec![
+                (AssetKind::Ducklake, "main/dim_customers".to_string()),
+                (
+                    AssetKind::Ducklake,
+                    "main/dim_customers_current".to_string()
+                ),
+            ]
+        );
+        assert_eq!(
+            m.scd2_current_target(),
+            Some((
+                AssetKind::Ducklake,
+                "main/dim_customers_current".to_string()
+            ))
+        );
+    }
+
+    #[test]
+    fn materialize_non_scd2_write_targets_are_base_only() {
+        // A plain merge (no `history`) creates no companion view — only the base.
+        let out = parse_pipeline_annotations("// materialize ducklake://main/dim_customers key=id");
+        let m = out.materialize.expect("materialize");
+        assert_eq!(
+            m.write_targets(),
+            vec![(AssetKind::Ducklake, "main/dim_customers".to_string())]
+        );
+        assert_eq!(m.scd2_current_target(), None);
+    }
+
+    #[test]
+    fn materialize_manual_scd2_has_no_companion_view() {
+        // `manual` mode owns its own DDL and never creates the `_current` view,
+        // so registering it would be a false producer edge.
+        let out = parse_pipeline_annotations(
+            "// materialize manual ducklake://main/dim_customers key=id history",
+        );
+        let m = out.materialize.expect("materialize");
+        assert!(m.manual && m.scd2);
+        assert_eq!(m.scd2_current_target(), None);
+        assert_eq!(
+            m.write_targets(),
+            vec![(AssetKind::Ducklake, "main/dim_customers".to_string())]
+        );
+    }
+
     #[test]
     fn materialize_scd2_deletes_close_opt() {
         let out = parse_pipeline_annotations(
diff --git a/backend/windmill-api-assets/src/lib.rs b/backend/windmill-api-assets/src/lib.rs
index c0a93c039b..997879e155 100644
--- a/backend/windmill-api-assets/src/lib.rs
+++ b/backend/windmill-api-assets/src/lib.rs
@@ -620,6 +620,15 @@ struct GraphAssetNode {
     // anywhere. Lockstep with TS `AssetGraphAssetNode.fork_materialization`.
     #[serde(skip_serializing_if = "Option::is_none")]
     fork_materialization: Option<String>,
+    // The base dimension this asset is the SCD2 `<dim>_current` companion view
+    // of — set only on a `ducklake://…/<dim>_current` node whose producer
+    // declares `// materialize … history` on `<dim>`. The producer edge already
+    // links it to that script (both writes are registered at deploy); this lets
+    // the canvas render it as a derived "current view" of the base rather than an
+    // unrelated table. Absent for every other asset. Lockstep with TS
+    // `AssetGraphAssetNode.derived_from`.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    derived_from: Option<String>,
 }
 
 #[derive(Serialize, Debug)]
@@ -1444,6 +1453,24 @@ async fn asset_graph(
         }
     };
 
+    // (kind, `<dim>_current` path) → base `<dim>` path, for every managed scd2
+    // producer in the graph. Reads of the companion view resolve to a node
+    // whose producer edge already exists (the deploy path registers both writes)
+    // — this map lets that node advertise which base dimension it derives from.
+    let scd2_current_base: std::collections::HashMap<(AssetKind, String), String> =
+        annotations_by_path
+            .values()
+            .filter_map(|a| a.materialize.as_ref())
+            .filter_map(|m| {
+                m.scd2_current_target().map(|(k, current)| {
+                    (
+                        (windmill_common::assets::asset_kind_from_parser(k), current),
+                        m.target_path.clone(),
+                    )
+                })
+            })
+            .collect();
+
     let mut assets: Vec<GraphAssetNode> = asset_set
         .into_iter()
         .map(|(kind, path)| GraphAssetNode {
@@ -1454,6 +1481,7 @@ async fn asset_graph(
                         .map(|s| s.to_string())
                 })
                 .flatten(),
+            derived_from: scd2_current_base.get(&(kind, path.clone())).cloned(),
             kind,
             path,
         })
diff --git a/backend/windmill-api-scripts/src/scripts.rs b/backend/windmill-api-scripts/src/scripts.rs
index 0ae16b9d51..d7a461dafa 100644
--- a/backend/windmill-api-scripts/src/scripts.rs
+++ b/backend/windmill-api-scripts/src/scripts.rs
@@ -1446,21 +1446,17 @@ async fn create_script_internal<'c>(
     // body's `SELECT` doesn't express the write (the runtime generates it), so
     // server-side inference wouldn't otherwise link it.
     let effective_assets = if let Some(m) = pipeline_annotations.materialize.as_ref() {
-        let kind = windmill_common::assets::asset_kind_from_parser(m.target_kind);
         let mut a = effective_assets.unwrap_or_default();
         // Produced assets: the managed table, plus — for managed scd2 — the
-        // `<dim>_current` companion view the runtime (re)creates each run.
-        // Registering the view as a write asset lets `// on
-        // ducklake://…/<dim>_current` subscribers be dispatched by the cascade
-        // (which fans out from these deploy-time asset rows); without it a
-        // subscriber on the view would silently never fire. Gated on `!manual`:
-        // manual mode owns its own DDL and short-circuits before the scd2 codegen
-        // (no view is created), so registering it there would be a false edge.
-        let mut targets = vec![m.target_path.clone()];
-        if m.scd2 && !m.manual {
-            targets.push(format!("{}_current", m.target_path));
-        }
-        for path in targets {
+        // `<dim>_current` companion view the runtime (re)creates each run
+        // (`MaterializeSpec::write_targets`). Registering the view as a write
+        // asset lets `// on ducklake://…/<dim>_current` subscribers be
+        // dispatched by the cascade (which fans out from these deploy-time asset
+        // rows) and connects a consumer that reads only the view back to this
+        // producer; without it a subscriber on the view would silently never
+        // fire and the view would be an orphan node in the lineage graph.
+        for (target_kind, path) in m.write_targets() {
+            let kind = windmill_common::assets::asset_kind_from_parser(target_kind);
             if !a.iter().any(|x| x.kind == kind && x.path == path) {
                 a.push(windmill_common::assets::AssetWithAltAccessType {
                     path,
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index 805f30c710..3143605d4d 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -81,7 +81,11 @@ export type GraphTrigger =
     };
 export type AssetGraph = {
   runnables: GraphRunnable[];
-  assets: { kind: string; path: string }[];
+  // `derived_from` is the base `<dim>` path when this node is the SCD2
+  // `<dim>_current` companion view of a managed `// materialize … history`
+  // producer — lets the canvas mark it as a derived "current view". Absent
+  // otherwise. Lockstep with backend `GraphAssetNode`.
+  assets: { kind: string; path: string; derived_from?: string }[];
   edges: GraphEdge[];
   triggers: GraphTrigger[];
   // ƒ edges from a `// macros` library to the scripts calling its macros
@@ -449,7 +453,14 @@ export async function buildLocalPipelineGraph(args: {
   const runnables: GraphRunnable[] = [];
   const edges: GraphEdge[] = [];
   const triggers: GraphTrigger[] = [];
-  const assetSet = new Map<string, { kind: string; path: string }>();
+  const assetSet = new Map<
+    string,
+    { kind: string; path: string; derived_from?: string }
+  >();
+  // `<kind>:<current-path>` → base `<dim>` path, for scd2 `_current` companion
+  // views. Applied to the final asset nodes so a consumer's `// on …_current`
+  // trigger (processed after the producer) can't clobber the derived marker.
+  const derivedFromByKey = new Map<string, string>();
   const pipelineScripts: LocalScript[] = [];
 
   for (const s of all) {
@@ -507,27 +518,44 @@ export async function buildLocalPipelineGraph(args: {
     // SQL body, so body-inference misses it. Translate the parsed materialize
     // target into the producer's write edge here (mirrors frontend
     // resolveGraph.ts) so the materialized asset connects to its `// on`
-    // consumers; dedup against any body write.
+    // consumers; dedup against any body write. A managed scd2 materialize also
+    // produces the `<dim>_current` companion view — register it as a second
+    // write (mirrors the deploy path) so a consumer reading only the view links
+    // back to this producer instead of orphaning.
     if (mat) {
-      assetSet.set(`${mat.target_kind}:${mat.target_path}`, {
-        kind: mat.target_kind,
-        path: mat.target_path,
-      });
-      const hasWrite = edges.some(
-        (e) =>
-          e.runnable_path === s.path &&
-          e.asset_kind === mat.target_kind &&
-          e.asset_path === mat.target_path &&
-          (e.access_type === "w" || e.access_type === "rw"),
-      );
-      if (!hasWrite) {
-        edges.push({
-          runnable_kind: "script",
-          runnable_path: s.path,
-          asset_kind: mat.target_kind,
-          asset_path: mat.target_path,
-          access_type: "w",
+      const matWrites: { path: string; derived_from?: string }[] = [
+        { path: mat.target_path },
+      ];
+      if (mat.scd2 && !mat.manual) {
+        const currentPath = `${mat.target_path}_current`;
+        matWrites.push({ path: currentPath, derived_from: mat.target_path });
+        derivedFromByKey.set(
+          `${mat.target_kind}:${currentPath}`,
+          mat.target_path,
+        );
+      }
+      for (const w of matWrites) {
+        assetSet.set(`${mat.target_kind}:${w.path}`, {
+          kind: mat.target_kind,
+          path: w.path,
+          ...(w.derived_from ? { derived_from: w.derived_from } : {}),
         });
+        const hasWrite = edges.some(
+          (e) =>
+            e.runnable_path === s.path &&
+            e.asset_kind === mat.target_kind &&
+            e.asset_path === w.path &&
+            (e.access_type === "w" || e.access_type === "rw"),
+        );
+        if (!hasWrite) {
+          edges.push({
+            runnable_kind: "script",
+            runnable_path: s.path,
+            asset_kind: mat.target_kind,
+            asset_path: w.path,
+            access_type: "w",
+          });
+        }
       }
     }
     const existingNativeTriggers = new Set<string>();
@@ -564,10 +592,15 @@ export async function buildLocalPipelineGraph(args: {
     }
   }
 
+  const assets = [...assetSet.entries()].map(([key, a]) => {
+    const derived_from = a.derived_from ?? derivedFromByKey.get(key);
+    return derived_from ? { ...a, derived_from } : a;
+  });
+
   return {
     graph: {
       runnables,
-      assets: [...assetSet.values()],
+      assets,
       edges,
       triggers,
     },
diff --git a/cli/test/pipeline_local_graph_unit.test.ts b/cli/test/pipeline_local_graph_unit.test.ts
index 1368e14504..d0e8b4d281 100644
--- a/cli/test/pipeline_local_graph_unit.test.ts
+++ b/cli/test/pipeline_local_graph_unit.test.ts
@@ -143,6 +143,15 @@ test("`// materialize <asset>` producer connects to its `// on` consumer", async
   );
 });
 
+// NOTE: the scd2 `<dim>_current` companion-view write edge (buildLocalPipelineGraph)
+// is exercised end-to-end by the backend parser test
+// (`materialize_scd2_write_targets_include_current_view`) and the frontend
+// live-graph test (`resolveGraph.test.ts` — "scd2 materialize draft"). It has no
+// unit test here because it depends on the `scd2` flag emitted by the bundled
+// `windmill-parser-wasm-asset`, which lags the source (the vendored build
+// predates the scd2 fields); the branch activates once a wasm carrying `scd2` is
+// republished (cf. the wasm-publish plumbing in #9926).
+
 test("a bare `.sql` (ambiguous dialect) is skipped, not a build-aborting crash", async () => {
   // `inferContentTypeFromFilePath` throws on a dialect-less `.sql`; one such file
   // must not abort the whole graph build (it also wedged `pipeline dev` at start).
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index d2ae645a97..a63bdca62b 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -332,6 +332,7 @@
 					asset_kind: a.kind,
 					path: a.path,
 					fork_materialization: a.fork_materialization,
+					derived_from: a.derived_from,
 					onAddScript: onAddScriptForAsset,
 					pathPrefix,
 					defaultPathSuffix,
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
index 974108c4b5..7d784b74b7 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
@@ -5,7 +5,7 @@
 	import { formatShortAssetPath, type AssetKind } from '$lib/components/assets/lib'
 	import { NODE } from '$lib/components/graph/util'
 	import PipelineInsertMenu, { type PipelineInsertPick } from './PipelineInsertMenu.svelte'
-	import { ArrowUpRight, Code2, GitFork, Play, Loader2, Plus } from 'lucide-svelte'
+	import { ArrowUpRight, Code2, GitFork, History, Play, Loader2, Plus } from 'lucide-svelte'
 	import type { ScriptLang } from '$lib/gen'
 	import { workspaceStore } from '$lib/stores'
 	import { sendUserToast } from '$lib/utils'
@@ -29,6 +29,11 @@
 			// Fork workspaces: 'fork' = materialized in this fork, 'deferred' =
 			// reads fall back to the parent workspace's current data.
 			fork_materialization?: 'fork' | 'deferred'
+			// Set on an SCD2 `<dim>_current` companion view: the base `<dim>` path
+			// its producer materializes with `// materialize … history`. Drives the
+			// "current view of <dim>" marker so it reads as a derived node, not an
+			// unrelated table.
+			derived_from?: string
 			onAddScript?: (
 				asset: { kind: AssetKind; path: string },
 				language: ScriptLang,
@@ -156,6 +161,17 @@
 				<GitFork size={12} />
 			</span>
 		{/if}
+		<!-- SCD2 companion marker: this node is the `<dim>_current` "latest row
+		     per key" view its producer maintains alongside the base dimension.
+		     Icon-only (the pill already truncates); the title names the base. -->
+		{#if data.derived_from}
+			<span
+				class="shrink-0 mr-1.5 text-violet-600 dark:text-violet-400"
+				title={`SCD2 current view of ${data.derived_from}: latest row per key, maintained by the same producer as the base dimension.`}
+			>
+				<History size={12} />
+			</span>
+		{/if}
 	</div>
 	{#if showActions}
 		<!-- Run button revealed on hover/select. Floats off the LEFT edge —
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
index 4c754201c8..4d355803e6 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
@@ -123,6 +123,16 @@ export type MaterializeSpec = {
 	onSchemaChange?: 'warn' | 'ignore'
 }
 
+// The `<targetPath>_current` SCD2 companion view this managed materialize also
+// produces, or `undefined` when it isn't a managed scd2 target. Mirrors Rust
+// `MaterializeSpec::scd2_current_target`: managed scd2 creates the base table
+// *and* the `_current` view each run; `manual` mode owns its own DDL and creates
+// no companion. The graph surfaces register it as a second write of the producer
+// so a read of the view links back instead of orphaning.
+export function scd2CurrentTargetPath(m: MaterializeSpec): string | undefined {
+	return m.scd2 && !m.manual ? `${m.targetPath}_current` : undefined
+}
+
 // `// data_test <kind> …` — a data-quality assertion run against the
 // freshly-materialized asset, failing the run on violation. See backend
 // `DataTest`. The first extensible annotation family: a keyword head selects
diff --git a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts
index 3c98d57602..2216d37b0f 100644
--- a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.test.ts
@@ -99,6 +99,50 @@ describe('resolveGraph', () => {
 		})
 	})
 
+	it('scd2 materialize draft: writes both the base dim and its _current companion view', () => {
+		const drafts = new Map([
+			[
+				'f/x/dim',
+				{
+					script: {
+						content: '-- materialize ducklake://main/dim_customers key=id history\nselect 1'
+					}
+				}
+			]
+		])
+		const r = resolveGraph(input({ drafts }))
+		// Base dimension: a plain write output node.
+		expect(r.assets).toContainEqual({ kind: 'ducklake', path: 'main/dim_customers' })
+		// Companion `_current` view: same producer, marked derived from the base.
+		expect(r.assets).toContainEqual({
+			kind: 'ducklake',
+			path: 'main/dim_customers_current',
+			derived_from: 'main/dim_customers'
+		})
+		for (const path of ['main/dim_customers', 'main/dim_customers_current']) {
+			expect(r.edges).toContainEqual({
+				runnable_path: 'f/x/dim',
+				runnable_kind: 'script',
+				asset_kind: 'ducklake',
+				asset_path: path,
+				access_type: 'w',
+				unsaved: true
+			})
+		}
+	})
+
+	it('non-scd2 materialize draft: writes only the base dim, no _current companion', () => {
+		const drafts = new Map([
+			[
+				'f/x/dim',
+				{ script: { content: '-- materialize ducklake://main/dim_customers key=id\nselect 1' } }
+			]
+		])
+		const r = resolveGraph(input({ drafts }))
+		expect(r.assets).toContainEqual({ kind: 'ducklake', path: 'main/dim_customers' })
+		expect(r.assets.some((a) => a.path === 'main/dim_customers_current')).toBe(false)
+	})
+
 	it('active draft: live body writes are authoritative over the snapshot', () => {
 		const drafts = new Map([
 			[
@@ -341,6 +385,55 @@ describe('resolveGraph', () => {
 		expect(r.edges.some((e) => e.asset_path === 'main/out' && e.access_type === 'w')).toBe(true)
 	})
 
+	it('editing a saved scd2 producer keeps both the base and _current persisted write edges', () => {
+		// Deploy persists a write to both `main/dim` and `main/dim_current`.
+		// Opening the producer for editing must not judge the companion `_current`
+		// write stale — otherwise a consumer of only the view orphans mid-edit.
+		const base = baseGraph({
+			runnables: [{ path: 'f/x/dim', usage_kind: 'script' }],
+			edges: [
+				{
+					runnable_path: 'f/x/dim',
+					runnable_kind: 'script',
+					asset_kind: 'ducklake',
+					asset_path: 'main/dim_customers',
+					access_type: 'w'
+				},
+				{
+					runnable_path: 'f/x/dim',
+					runnable_kind: 'script',
+					asset_kind: 'ducklake',
+					asset_path: 'main/dim_customers_current',
+					access_type: 'w'
+				}
+			]
+		})
+		const r = resolveGraph(
+			input({
+				base,
+				liveAnnotations: {
+					scriptPath: 'f/x/dim',
+					annotations: ann({
+						materialize: {
+							targetKind: 'ducklake',
+							targetPath: 'main/dim_customers',
+							uniqueKey: 'id',
+							scd2: true
+						}
+					})
+				},
+				liveBodyAssets: { scriptPath: 'f/x/dim', assets: [] }
+			})
+		)
+		for (const path of ['main/dim_customers', 'main/dim_customers_current']) {
+			expect(
+				r.edges.some(
+					(e) => e.runnable_path === 'f/x/dim' && e.asset_path === path && e.access_type === 'w'
+				)
+			).toBe(true)
+		}
+	})
+
 	it('selecting a saved script unchanged drops nothing (no stale removal)', () => {
 		const base = baseGraph({
 			runnables: [{ path: 'f/x/prod', usage_kind: 'script' }],
diff --git a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts
index 849849c555..328535ef87 100644
--- a/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/resolveGraph.ts
@@ -2,6 +2,7 @@ import type { AssetGraphMacroEdge, AssetGraphResponse, NativeTriggerKind } from
 import {
 	mergeColumnLineage,
 	parsePipelineAnnotations,
+	scd2CurrentTargetPath,
 	type ColumnLineage,
 	type PipelineAnnotations
 } from './parsePipelineAnnotations'
@@ -265,9 +266,16 @@ function makeContext(input: ResolveGraphInput): ResolveContext {
 			// lives in an annotation (not the SQL body), so neither triggerAssets
 			// (inputs) nor the body-inferred assets cover it. Without this its
 			// persisted write-edge is judged stale and dropped the moment the
-			// script is selected/edited — leaving the output asset unlinked.
+			// script is selected/edited — leaving the output asset unlinked. A
+			// managed scd2 producer persists a second write to the `<dim>_current`
+			// companion view, so keep that too or a consumer of only the view
+			// orphans while the producer is open for editing.
 			const m = liveAnnotations.annotations.materialize
-			if (m) liveRefKeys.add(`${m.targetKind}:${m.targetPath}`)
+			if (m) {
+				liveRefKeys.add(`${m.targetKind}:${m.targetPath}`)
+				const currentPath = scd2CurrentTargetPath(m)
+				if (currentPath) liveRefKeys.add(`${m.targetKind}:${currentPath}`)
+			}
 		}
 		for (const a of liveBodyAssets.assets) liveRefKeys.add(`${a.kind}:${a.path}`)
 	}
@@ -373,7 +381,7 @@ function seedDraftOverlays(acc: Accumulator, input: ResolveGraphInput) {
 		//      creation/last edit, or the seeded output for a fresh draft
 		//      whose body doesn't yet write anything inferable).
 		const liveForThisDraft = liveBodyAssets.scriptPath === path
-		const writeOuts: Array<{ kind: AssetKind; path: string }> = []
+		const writeOuts: Array<{ kind: AssetKind; path: string; derivedFrom?: string }> = []
 		if (liveForThisDraft) {
 			writeOuts.push(...extractWrites(liveBodyAssets.assets))
 		} else if (d.outputAssets) {
@@ -382,16 +390,35 @@ function seedDraftOverlays(acc: Accumulator, input: ResolveGraphInput) {
 		// `// materialize <asset>` declares a write output via annotation, not
 		// the SQL body, so the body-inference tiers above miss it. Add it from
 		// the live-parsed annotations so an edited materialize script keeps its
-		// output edge (the loop below dedups against existing assets/edges).
+		// output edge (the loop below dedups against existing assets/edges). A
+		// managed scd2 materialize also produces the `<dim>_current` companion
+		// view — add it too (mirrors the deploy path) so a draft consuming only
+		// the view links back to this producer instead of orphaning.
 		if (parsed.materialize) {
 			writeOuts.push({
 				kind: parsed.materialize.targetKind,
 				path: parsed.materialize.targetPath
 			})
+			const currentPath = scd2CurrentTargetPath(parsed.materialize)
+			if (currentPath) {
+				writeOuts.push({
+					kind: parsed.materialize.targetKind,
+					path: currentPath,
+					derivedFrom: parsed.materialize.targetPath
+				})
+			}
 		}
 		for (const out of writeOuts) {
-			const hasAsset = assets.some((a) => a.kind === out.kind && a.path === out.path)
-			if (!hasAsset) assets.push({ kind: out.kind, path: out.path })
+			const existing = assets.find((a) => a.kind === out.kind && a.path === out.path)
+			if (!existing) {
+				assets.push({
+					kind: out.kind,
+					path: out.path,
+					...(out.derivedFrom ? { derived_from: out.derivedFrom } : {})
+				})
+			} else if (out.derivedFrom && existing.derived_from == undefined) {
+				existing.derived_from = out.derivedFrom
+			}
 			// Dedup against edges already in the overlay (this draft's base
 			// edges were dropped above, so this only guards against duplicate
 			// writeOuts entries — not against the persisted version).
diff --git a/frontend/src/lib/components/assets/AssetGraph/types.ts b/frontend/src/lib/components/assets/AssetGraph/types.ts
index 5dea3319c7..0e055abca2 100644
--- a/frontend/src/lib/components/assets/AssetGraph/types.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/types.ts
@@ -11,6 +11,11 @@ export interface AssetGraphAssetNode {
 	// current table via a defer view. Absent outside forks / for other kinds /
 	// when never materialized anywhere. Lockstep with Rust `GraphAssetNode`.
 	fork_materialization?: 'fork' | 'deferred'
+	// Base dimension path this node is the SCD2 `<dim>_current` companion view of
+	// (its producer declares `// materialize … history` on `<dim>`). Set only on
+	// the `_current` node; lets the canvas mark it as a derived "current view"
+	// rather than an unrelated table. Lockstep with Rust `GraphAssetNode`.
+	derived_from?: string
 }
 
 export interface AssetGraphRunnableNode {

From 55451db009e3060c21948ece2c97e102a3c9b171 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 23:08:08 +0200
Subject: [PATCH 56/76] fix(datatable): self-teaching error for unresolved
 datatable:// references (#9941)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`ATTACH 'datatable://main'` (or any datatable schema/executor path) failed
with a bare "datatable main not found", giving the user no way forward — the
datatable substrate has no auto-provisioning like a DuckLake catalog, so the
fix is always to create one in workspace settings, but nothing said so.

`get_datatable_resource_from_db_unchecked` now returns a NotFound error that
lists the workspace's configured data tables (to catch typos) and points at
the "Data tables" settings tab, noting `main` is the default name used by
`datatable://main`. The message bubbles up wherever the resolver is called
(pipeline ATTACH, schema fetch, postgres executor, agent HTTP endpoint).

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 ...3656e27f1c962c2f0438e0cc06530661fbf8.json} |  7 +--
 backend/windmill-common/src/workspaces.rs     | 62 +++++++++++++++++--
 2 files changed, 59 insertions(+), 10 deletions(-)
 rename backend/.sqlx/{query-caf4dc1046769f410d1277cdd3747763e0d674e8a1d9f3512629cb5a9e5a3439.json => query-dc60d43814e2b5220db648677dbb3656e27f1c962c2f0438e0cc06530661fbf8.json} (53%)

diff --git a/backend/.sqlx/query-caf4dc1046769f410d1277cdd3747763e0d674e8a1d9f3512629cb5a9e5a3439.json b/backend/.sqlx/query-dc60d43814e2b5220db648677dbb3656e27f1c962c2f0438e0cc06530661fbf8.json
similarity index 53%
rename from backend/.sqlx/query-caf4dc1046769f410d1277cdd3747763e0d674e8a1d9f3512629cb5a9e5a3439.json
rename to backend/.sqlx/query-dc60d43814e2b5220db648677dbb3656e27f1c962c2f0438e0cc06530661fbf8.json
index f2398bf143..0d36677337 100644
--- a/backend/.sqlx/query-caf4dc1046769f410d1277cdd3747763e0d674e8a1d9f3512629cb5a9e5a3439.json
+++ b/backend/.sqlx/query-dc60d43814e2b5220db648677dbb3656e27f1c962c2f0438e0cc06530661fbf8.json
@@ -1,17 +1,16 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n            SELECT ws.datatable->'datatables'->$2 AS config\n            FROM workspace_settings ws\n            WHERE ws.workspace_id = $1\n        ",
+  "query": "\n            SELECT ws.datatable->'datatables' AS datatables\n            FROM workspace_settings ws\n            WHERE ws.workspace_id = $1\n        ",
   "describe": {
     "columns": [
       {
         "ordinal": 0,
-        "name": "config",
+        "name": "datatables",
         "type_info": "Jsonb"
       }
     ],
     "parameters": {
       "Left": [
-        "Text",
         "Text"
       ]
     },
@@ -19,5 +18,5 @@
       null
     ]
   },
-  "hash": "caf4dc1046769f410d1277cdd3747763e0d674e8a1d9f3512629cb5a9e5a3439"
+  "hash": "dc60d43814e2b5220db648677dbb3656e27f1c962c2f0438e0cc06530661fbf8"
 }
diff --git a/backend/windmill-common/src/workspaces.rs b/backend/windmill-common/src/workspaces.rs
index 14bc5fc344..3b5220d46f 100644
--- a/backend/windmill-common/src/workspaces.rs
+++ b/backend/windmill-common/src/workspaces.rs
@@ -796,25 +796,55 @@ pub enum DataTableCatalogResourceType {
     Instance,
 }
 
+/// Build a self-teaching error for an unresolved `datatable://<name>` reference.
+/// The raw "not found" gives the user no way forward — the datatable substrate has
+/// no auto-provisioning (unlike a DuckLake catalog), so the fix is always to create
+/// one in workspace settings. Surface the available names (to catch typos) and point
+/// at the settings page so the message is actionable wherever it bubbles up
+/// (pipeline `ATTACH`, schema fetch, postgres executor, ...).
+fn datatable_not_found_error(name: &str, datatables: Option<&serde_json::Value>) -> Error {
+    let available: Vec<&str> = datatables
+        .and_then(|d| d.as_object())
+        .map(|o| o.keys().map(String::as_str).collect())
+        .unwrap_or_default();
+
+    let hint = if available.is_empty() {
+        "No data table is configured in this workspace yet.".to_string()
+    } else {
+        format!("Configured data tables: {}.", available.join(", "))
+    };
+
+    Error::NotFound(format!(
+        "Data table '{name}' not found. {hint} \
+         Create one in workspace settings under the \"Data tables\" tab \
+         (/workspace_settings?tab=windmill_data_tables) — the name \"main\" is the default \
+         used by `datatable://main`."
+    ))
+}
+
 pub async fn get_datatable_resource_from_db_unchecked(
     db: &DB,
     w_id: &str,
     name: &str,
 ) -> Result<serde_json::Value> {
-    let datatable = sqlx::query_scalar!(
+    let datatables = sqlx::query_scalar!(
         r#"
-            SELECT ws.datatable->'datatables'->$2 AS config
+            SELECT ws.datatable->'datatables' AS datatables
             FROM workspace_settings ws
             WHERE ws.workspace_id = $1
         "#,
         &w_id,
-        name
     )
     .fetch_one(db)
     .await
-    .map_err(|err| Error::internal_err(format!("getting datatable {name}: {err}")))?
-    .ok_or_else(|| Error::internal_err(format!("datatable {name} not found")))?;
-    let datatable = serde_json::from_value::<DataTable>(datatable)?;
+    .map_err(|err| Error::internal_err(format!("getting datatable {name}: {err}")))?;
+
+    let datatable = datatables
+        .as_ref()
+        .and_then(|d| d.get(name))
+        .filter(|v| !v.is_null())
+        .ok_or_else(|| datatable_not_found_error(name, datatables.as_ref()))?;
+    let datatable = serde_json::from_value::<DataTable>(datatable.clone())?;
 
     let db_resource = if datatable.database.resource_type == DataTableCatalogResourceType::Instance
     {
@@ -1979,4 +2009,24 @@ mod tests {
             ""
         );
     }
+
+    #[test]
+    fn test_datatable_not_found_error_no_datatables() {
+        let msg = datatable_not_found_error("main", None).to_string();
+        assert!(msg.contains("'main' not found"), "{msg}");
+        assert!(msg.contains("No data table is configured"), "{msg}");
+        // Always signposts the settings tab so the message is actionable.
+        assert!(msg.contains("tab=windmill_data_tables"), "{msg}");
+    }
+
+    #[test]
+    fn test_datatable_not_found_error_lists_available() {
+        let configured = serde_json::json!({ "analytics": {}, "staging": {} });
+        let msg = datatable_not_found_error("main", Some(&configured)).to_string();
+        assert!(msg.contains("'main' not found"), "{msg}");
+        // Surface configured names to catch typos.
+        assert!(msg.contains("analytics"), "{msg}");
+        assert!(msg.contains("staging"), "{msg}");
+        assert!(msg.contains("tab=windmill_data_tables"), "{msg}");
+    }
 }

From b40b504513580f600d187af2008880472ea9f374 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 23:16:14 +0200
Subject: [PATCH 57/76] docs: document feature set + gotchas for running
 DuckLake pipelines from source (#9940)

---
 AGENTS.md         |  1 +
 backend/CLAUDE.md | 35 +++++++++++++++++++++++++++++++++++
 2 files changed, 36 insertions(+)

diff --git a/AGENTS.md b/AGENTS.md
index ac00741c49..7bcf7efffd 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -25,6 +25,7 @@ Open-source platform for internal tools, workflows, API integrations, background
 
 - **Backend**: `cargo run` from `backend/` (API at http://localhost:8000)
 - **DuckDB local jobs**: before running DuckDB scripts locally, build the FFI shared library with `cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh`. Re-run it after clean builds or when `backend/target/debug/libwindmill_duckdb_ffi_internal.*` is missing.
+- **Data pipelines (DuckLake) from source**: a plain `cargo run` (even `--features quickjs`) advertises a `duckdb` worker tag but **cannot** execute DuckDB scripts and has **no** working S3 proxy (DuckLake writes 404). Build CE DuckLake with `cargo run --features quickjs,duckdb,parquet,private` (add `,python` for Python scripts, `,enterprise,license` for EE) **and** build the FFI (bullet above). See `backend/CLAUDE.md` → "Running data pipelines (DuckLake) from source" for the exact feature sets and the two feature-gate gotchas.
 - **Frontend**: `REMOTE=http://localhost:8000 npm run dev` from `frontend/` (port 3000+)
 - **DB**: `psql postgres://postgres:changeme@localhost:5432/windmill`
 - **Login**: `admin@windmill.dev` / `changeme`
diff --git a/backend/CLAUDE.md b/backend/CLAUDE.md
index ff5d9b2f22..bfbd0ee65b 100644
--- a/backend/CLAUDE.md
+++ b/backend/CLAUDE.md
@@ -11,6 +11,41 @@
   cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh
   ```
   Re-run after clean builds or when `target/debug/libwindmill_duckdb_ffi_internal.*` is missing.
+- **Running data pipelines (DuckLake) from source**: see the section below — a plain build
+  advertises the `duckdb` tag but cannot execute DuckDB scripts and has no working S3 proxy.
+
+## Running data pipelines (DuckLake) from source
+
+DuckLake pipelines need **both** the right cargo features **and** the prebuilt DuckDB FFI. A
+plain `cargo run` (or `cargo run --features quickjs`) does **not** suffice, and the failure modes
+are silent-ish, so agents lose time. Verify feature names against `backend/Cargo.toml` `[features]`.
+
+**Feature sets** (run from `backend/`):
+
+| Goal | Command |
+|---|---|
+| CE DuckLake (DuckDB scripts + S3 proxy) | `cargo run --features quickjs,duckdb,parquet,private` |
+| + Python scripts | add `,python` |
+| EE features (WAP, partitioning, forks, …) | add `,enterprise,license` |
+
+`enterprise` already pulls in `license`, but list both when you want the license-gated paths.
+`quickjs` is for JS eval, not DuckLake per se — keep it if your baseline build had it.
+
+**Before running any DuckDB script**, build the FFI (see the bullet above):
+`cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh`.
+
+**Two gotchas that a wrong feature set produces:**
+
+1. **`duckdb` tag advertised, feature missing.** The `duckdb` worker tag is in the *unconditional*
+   default tag list (`windmill-common/src/worker.rs`, `DEFAULT_TAGS`), so a worker advertises it even
+   without the `duckdb` feature. Jobs then dispatch but fail at execution with
+   `"Duck DB requires the duckdb feature to be enabled"` (`windmill-worker/src/worker.rs`). Fix:
+   compile with `--features duckdb`.
+2. **DuckLake writes 404 (no S3 proxy).** The workspace S3 proxy (`/w/{ws}/s3_proxy/*`) that
+   DuckLake uses for reads/writes only mounts the real service under
+   `#[cfg(all(feature = "private", feature = "parquet"))]` (`windmill-api/src/s3_proxy_oss.rs`);
+   otherwise it's an empty router and every proxied request 404s. Fix: compile with **both**
+   `private` and `parquet`.
 
 ## Cloud vs self-hosted gating
 

From a582e04bf40cf685f88bceaf88e3d24bde3d420a Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Sun, 5 Jul 2026 23:41:09 +0200
Subject: [PATCH 58/76] fix: rebuild windows bun loader main.ts filter from
 forward-slash cdir (#9946)

---
 backend/windmill-worker/loader.bun.windows.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/backend/windmill-worker/loader.bun.windows.js b/backend/windmill-worker/loader.bun.windows.js
index e89b70c26c..f024af671b 100644
--- a/backend/windmill-worker/loader.bun.windows.js
+++ b/backend/windmill-worker/loader.bun.windows.js
@@ -32,7 +32,11 @@ const p = {
 
     let cdirNodeModules = `${cdirFwd}/node_modules/`;
 
-    const filterLoad = new RegExp(`^${cdir}\/main\\.ts$`);
+    // Match the entry main.ts against bun's forward-slash resolver output on
+    // Windows — raw `cdir` carries backslashes that corrupt the regex, so the
+    // onLoad below would never fire and extensionless relative imports in
+    // main.ts would slip past filterResolve unrewritten.
+    const filterLoad = new RegExp(`^(?:${cdirFwd}|${cdirPosix})\/main\\.ts$`);
     const transpiler = new Bun.Transpiler({
       loader: "ts",
     });

From 6ae8dd37b1de930ab17344cebf7c28385c6cfdba Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 00:08:24 +0200
Subject: [PATCH 59/76] fix(pipelines): pipeline-level run control, tables
 label, data-test rollback + fork badges (#9944)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(pipelines): pipeline-level run control, tables label, data-test rollback + fork badges

- Add always-visible "Run pipeline" header control (edit mode) that runs
  every script in dependency order via the bounded-cascade engine, so a run
  no longer requires hovering a node's play button.
- Header summary counts ducklake/datatable assets as "tables" (and s3object
  as "files") instead of the raw kind, collapsing shared nouns.
- Surface a data-test outcome badge on guarded asset nodes: EE shows a
  rolled-back (previous version left live) state, CE shows published-despite-
  failure — driven by the producer's last run state and the edition.
- Make the fork data-environment marker a prominent labeled chip
  (⑂ fork / ↗ parent) instead of a bare icon.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): address CI review — scope Run pipeline to members, anchor guard badge, spin loader

- Run pipeline now filters to `in_pipeline` script runnables, so it never
  launches dependency-only endpoints the graph shows for context (macro
  libraries, custom data-test scripts, out-of-folder producers).
- Data-test guard badge only attaches to the producer's declared
  `// materialize` target, so a multi-output producer no longer badges its
  other ducklake writes.
- Spin the Loader2 icon in the "Run pipeline" button while a run is in
  progress (startIcon classes), matching every other loading affordance.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): data-test badge copy speaks to write policy, not failure cause

producerFailed is a generic job-failure signal, so the failed-state tooltip
no longer claims the run "failed its data tests" (it could be a runtime/worker
error). It now states the edition's behavior on any failed materialize: EE
rolls back (previous version left live), CE may leave a failing write live.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): Run pipeline keeps independent branches running after a failure

runSelection used a single global fail-fast flag, so once any node failed it
refused to schedule *any* newly-ready node — a failure in one branch could
strand an unrelated healthy branch as 'skipped' depending on job timing. Now a
failure poisons only its transitive descendants; independent branches finish.

Add regression tests: independent-branch-survives-failure and join-node-skipped
-when-one-upstream-fails.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 .../assets/AssetGraph/AssetGraphCanvas.svelte | 40 ++++++++-
 .../assets/AssetGraph/AssetNode.svelte        | 88 ++++++++++++++++---
 .../AssetGraph/cascadeOrchestrator.test.ts    | 43 ++++++++-
 .../assets/AssetGraph/cascadeOrchestrator.ts  | 28 +++++-
 .../(logged)/pipeline/[folder]/+page.svelte   | 64 +++++++++++++-
 5 files changed, 245 insertions(+), 18 deletions(-)

diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index a63bdca62b..53097f5379 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -323,8 +323,44 @@
 		// own adjacency (boundedCascade.buildLineageDownstreamMap).
 		const hasLineageDownstream = new Set<string>(buildLineageDownstreamMap(g).keys())
 
+		// Producers that declare `// data_test` checks, keyed by runnable id — the
+		// asset node uses this (plus the producer's run state) to render the
+		// data-test outcome badge. Tests only assert on ducklake `// materialize`
+		// targets (v1), so guard status is a ducklake-only concept below.
+		const producerHasTests = new Set<string>()
+		// Producer → its declared `// materialize` target, so a multi-output
+		// producer's guard badge lands only on the table its tests assert on —
+		// not on its other ducklake outputs. Mirrors the write-edge badge anchor.
+		const guardMaterializeTarget = new Map<
+			string,
+			NonNullable<AssetGraphResponse['runnables'][number]['materialize_target']>
+		>()
+		for (const r of g.runnables) {
+			if (r.data_tests && r.data_tests.length > 0) producerHasTests.add(`${r.usage_kind}:${r.path}`)
+			if (r.materialize_target)
+				guardMaterializeTarget.set(`${r.usage_kind}:${r.path}`, r.materialize_target)
+		}
+
 		for (const a of g.assets) {
 			const assetId = `asset:${a.kind}:${a.path}`
+			// Guard/outcome badge inputs: is a producer of this (ducklake) asset
+			// test-guarded, and did that guarded producer's latest run fail?
+			let dataTestGuarded = false
+			let producerFailed = false
+			if (a.kind === 'ducklake') {
+				for (const p of producersByAsset.get(`${a.kind}:${a.path}`) ?? []) {
+					const rid = `${p.kind}:${p.path}`
+					if (!producerHasTests.has(rid)) continue
+					// Tests assert on the producer's `// materialize` target; when the
+					// producer declares one, only that table is guarded (a multi-output
+					// producer must not badge its other ducklake writes). No declared
+					// target → single-output producer, so its lone ducklake write is it.
+					const mt = guardMaterializeTarget.get(rid)
+					if (mt && !(mt.kind === a.kind && mt.path === a.path)) continue
+					dataTestGuarded = true
+					if (runStates?.get(rid)?.status === 'failure') producerFailed = true
+				}
+			}
 			nodes.push({
 				id: assetId,
 				type: 'asset',
@@ -337,7 +373,9 @@
 					pathPrefix,
 					defaultPathSuffix,
 					producers: producersByAsset.get(`${a.kind}:${a.path}`) ?? [],
-					onRunProducer
+					onRunProducer,
+					dataTestGuarded,
+					producerFailed
 				}
 			})
 		}
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
index 7d784b74b7..762bdbc0fc 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetNode.svelte
@@ -5,9 +5,19 @@
 	import { formatShortAssetPath, type AssetKind } from '$lib/components/assets/lib'
 	import { NODE } from '$lib/components/graph/util'
 	import PipelineInsertMenu, { type PipelineInsertPick } from './PipelineInsertMenu.svelte'
-	import { ArrowUpRight, Code2, GitFork, History, Play, Loader2, Plus } from 'lucide-svelte'
+	import {
+		ArrowUpRight,
+		Code2,
+		GitFork,
+		History,
+		Play,
+		Loader2,
+		Plus,
+		ShieldCheck,
+		ShieldAlert
+	} from 'lucide-svelte'
 	import type { ScriptLang } from '$lib/gen'
-	import { workspaceStore } from '$lib/stores'
+	import { enterpriseLicense, workspaceStore } from '$lib/stores'
 	import { sendUserToast } from '$lib/utils'
 	import { PIPELINE_LANGUAGES } from './pipelineLanguages'
 	import type { PipelineOutputKind } from './pipelineTemplates'
@@ -55,6 +65,15 @@
 			// cached draft content). Without this callback, the play button
 			// is hidden — runs only make sense in editor contexts.
 			onRunProducer?: (producer: AssetProducer) => Promise<string | undefined>
+			// True when a producer materializing this asset declares `// data_test`
+			// checks — the asset's write is guarded. Drives the data-test outcome
+			// badge, whose meaning differs by edition (EE rolls a failing write
+			// back; CE publishes it anyway).
+			dataTestGuarded?: boolean
+			// True when the latest observed run of a producer materializing this
+			// asset failed. Escalates the guard badge from "protected" to a
+			// failed-run outcome (rolled-back on EE, published-anyway on CE).
+			producerFailed?: boolean
 		}
 		// SvelteFlow injects this on the node component when the user clicks
 		// the node. Combined with our own `hovered` state to drive the
@@ -109,6 +128,37 @@
 	}
 
 	let showAdd = $derived(data.onAddScript != undefined)
+
+	// Data-test outcome badge. Only guarded assets show it. The write's fate on a
+	// failing test differs by edition — surface which one applies so a shared
+	// parent/fork table name can't hide a silently-published bad version.
+	let isEE = $derived(!!$enterpriseLicense)
+	let showGuardBadge = $derived(data.dataTestGuarded === true)
+	let guardFailed = $derived(data.producerFailed === true)
+	let GuardIcon = $derived(isEE ? ShieldCheck : ShieldAlert)
+	// Filled + colored when the last run failed (the actionable state); a quiet
+	// ring at rest so the badge doesn't shout on every healthy guarded asset.
+	let guardClass = $derived(
+		guardFailed
+			? isEE
+				? 'bg-amber-500 text-white border-amber-600'
+				: 'bg-red-500 text-white border-red-600'
+			: isEE
+				? 'bg-surface-secondary text-emerald-600 dark:text-emerald-400 border-emerald-500/60'
+				: 'bg-surface-secondary text-amber-600 dark:text-amber-400 border-amber-500/60'
+	)
+	// Failed copy speaks to the edition's write policy, not the failure cause:
+	// `producerFailed` is a generic job failure (could be a runtime/worker error,
+	// not a data-test violation), so we don't assert "failed its data tests".
+	let guardTitle = $derived(
+		guardFailed
+			? isEE
+				? 'Last run failed — Enterprise rolls a failed materialize back, so the previous version is left live.'
+				: 'Last run failed — Community Edition does not roll a failed materialize back (Enterprise does), so a failing write may be left live. Verify the table.'
+			: isEE
+				? 'Guarded by data tests: a failing write is rolled back, keeping the previous version live.'
+				: 'Guarded by data tests, but Community Edition does not block on failure — a failing write is still published. Rollback is Enterprise-only.'
+	)
 </script>
 
 <!-- onmouseenter/leave on the wrapper (not the inner card) so the run
@@ -142,23 +192,26 @@
 		<span class="flex-1 min-w-0 pr-1 py-0.5 text-2xs font-mono text-emphasis truncate">
 			{formatShortAssetPath(asset)}
 		</span>
-		<!-- Fork data-environment marker: amber ↗ = deferred (reads the parent
-		     workspace's current table via a view), emerald fork glyph = the fork
-		     materialized its own copy. Icon-only — the pill truncates its path
-		     already, a labeled chip wouldn't fit; the title carries the meaning. -->
+		<!-- Fork data-environment chip: in a fork every asset shares its parent's
+		     name, so the env it resolves to must read at a glance. Labeled + tinted
+		     (amber "parent" = deferred read of the parent's current table via a
+		     view; emerald "fork" = the fork's own materialized copy) rather than a
+		     bare icon, which was too easy to miss. The title carries the detail. -->
 		{#if data.fork_materialization === 'deferred'}
 			<span
-				class="shrink-0 mr-1.5 text-amber-600 dark:text-amber-400"
+				class="shrink-0 mr-1.5 flex items-center gap-0.5 rounded px-1 py-px text-3xs font-semibold uppercase tracking-wide bg-amber-100 dark:bg-amber-900/40 text-amber-700 dark:text-amber-300 border border-amber-300 dark:border-amber-700"
 				title="Deferred to parent workspace: reads the parent's current data. Materialize it in this fork to iterate on it."
 			>
-				<ArrowUpRight size={12} />
+				<ArrowUpRight size={10} />
+				parent
 			</span>
 		{:else if data.fork_materialization === 'fork'}
 			<span
-				class="shrink-0 mr-1.5 text-emerald-600 dark:text-emerald-500"
+				class="shrink-0 mr-1.5 flex items-center gap-0.5 rounded px-1 py-px text-3xs font-semibold uppercase tracking-wide bg-emerald-100 dark:bg-emerald-900/40 text-emerald-700 dark:text-emerald-300 border border-emerald-300 dark:border-emerald-700"
 				title="Materialized in this fork: reads and writes use the fork's isolated copy."
 			>
-				<GitFork size={12} />
+				<GitFork size={10} />
+				fork
 			</span>
 		{/if}
 		<!-- SCD2 companion marker: this node is the `<dim>_current` "latest row
@@ -173,6 +226,21 @@
 			</span>
 		{/if}
 	</div>
+	{#if showGuardBadge}
+		<!-- Data-test outcome badge. Floats off the TOP-RIGHT corner (opposite the
+		     left-edge run button and the bottom + inserter) so it never collides
+		     with the other node affordances. Shield = guarded; its fill escalates to
+		     amber/red when the last run failed, encoding the edition's write policy. -->
+		<div
+			class={twMerge(
+				'absolute -top-2 -right-2 z-10 rounded-full w-5 h-5 grid place-items-center border shadow-sm',
+				guardClass
+			)}
+			title={guardTitle}
+		>
+			<GuardIcon size={12} strokeWidth={2.25} />
+		</div>
+	{/if}
 	{#if showActions}
 		<!-- Run button revealed on hover/select. Floats off the LEFT edge —
 		     visually closer to the upstream producer it triggers (which lays
diff --git a/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.test.ts b/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.test.ts
index 92d7a977fe..3a0fd4fbd3 100644
--- a/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.test.ts
@@ -201,7 +201,48 @@ describe('runSelection', () => {
 		expect(r.launched.indexOf('c')).toBeGreaterThan(r.launched.indexOf('b'))
 	})
 
-	it('stops scheduling after a failure', async () => {
+	it('skips a failed node’s descendants but keeps independent branches running', async () => {
+		// Two independent chains: a → b and c → d. `a` fails; `b` (its descendant)
+		// must be skipped, but `d` depends only on the successful `c`, so it must
+		// still run — a failure must not stall unrelated branches.
+		const sched = schedule(
+			[
+				['a', 'b'],
+				['c', 'd']
+			],
+			['a', 'b', 'c', 'd'],
+			['a', 'c']
+		)
+		const r = fakeRunner({ a: 'failure' })
+		const res = await runSelection({ schedule: sched, ...r })
+		expect(res.ok).toBe(false)
+		expect(res.statuses.get('a')?.status).toBe('failure')
+		expect(res.statuses.get('b')?.status).toBe('skipped')
+		expect(res.statuses.get('c')?.status).toBe('success')
+		expect(res.statuses.get('d')?.status).toBe('success')
+		expect(r.launched).toContain('d')
+		expect(r.launched).not.toContain('b')
+	})
+
+	it('skips a join node when any one of its upstreams fails', async () => {
+		// {a, b} → c. `a` fails; `c` needs both, so it must be skipped even though
+		// `b` succeeds — a poisoned lineage isn’t rescued by a sibling success.
+		const sched = schedule(
+			[
+				['a', 'c'],
+				['b', 'c']
+			],
+			['a', 'b', 'c'],
+			['a', 'b']
+		)
+		const r = fakeRunner({ a: 'failure' })
+		const res = await runSelection({ schedule: sched, ...r })
+		expect(res.ok).toBe(false)
+		expect(res.statuses.get('c')?.status).toBe('skipped')
+		expect(r.launched).not.toContain('c')
+	})
+
+	it('stops scheduling a failed node’s chain', async () => {
 		const sched = schedule([['a', 'b']], ['a', 'b'], ['a'])
 		const r = fakeRunner({ a: 'failure' })
 		const res = await runSelection({ schedule: sched, ...r })
diff --git a/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.ts b/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.ts
index 16d357af00..424f1581ec 100644
--- a/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/cascadeOrchestrator.ts
@@ -128,8 +128,9 @@ export type SelectionRunOptions = {
  * Execute an arbitrary selected set of scripts (e.g. a bounded-cascade
  * selection) in topological order. Unlike `runCascade` there is no single
  * privileged root — every `schedule.roots` entry is seeded at once and a node
- * runs as soon as its in-set upstreams all succeed. Failure stops *scheduling*
- * (in-flight jobs finish); everything not yet started ends 'skipped'.
+ * runs as soon as its in-set upstreams all succeed. A failure abandons only
+ * that node's lineage (its transitive descendants end 'skipped'); INDEPENDENT
+ * branches keep running. In-flight jobs always finish.
  */
 export async function runSelection(opts: SelectionRunOptions): Promise<CascadeRunResult> {
 	const { schedule, launch, waitTerminal, onUpdate } = opts
@@ -137,10 +138,29 @@ export async function runSelection(opts: SelectionRunOptions): Promise<CascadeRu
 	for (const n of schedule.nodes) statuses.set(n, { status: 'pending' })
 	const remaining = new Map(schedule.indegree)
 	let failed = false
+	// Nodes a failed prerequisite has made unrunnable — the transitive descendants
+	// of every failure. Gating scheduling on this (rather than a single global
+	// fail-fast flag) is what lets independent branches finish: only the lineage
+	// below a failure is skipped, not every node that happens to become ready
+	// afterwards. Poisoned nodes are never scheduled, so they end 'skipped' below.
+	const poisoned = new Set<string>()
 	const inFlight = new Set<Promise<void>>()
 
 	const emit = () => onUpdate?.(new Map(statuses))
 
+	function poison(path: string) {
+		const stack = [path]
+		while (stack.length > 0) {
+			const n = stack.pop()!
+			for (const s of schedule.edges.get(n) ?? []) {
+				if (!poisoned.has(s)) {
+					poisoned.add(s)
+					stack.push(s)
+				}
+			}
+		}
+	}
+
 	function schedule_(path: string) {
 		const p = runNode(path).finally(() => inFlight.delete(p))
 		inFlight.add(p)
@@ -159,6 +179,7 @@ export async function runSelection(opts: SelectionRunOptions): Promise<CascadeRu
 			emit()
 			if (term === 'failure') {
 				failed = true
+				poison(path)
 				return
 			}
 		} catch (e) {
@@ -169,12 +190,13 @@ export async function runSelection(opts: SelectionRunOptions): Promise<CascadeRu
 			})
 			emit()
 			failed = true
+			poison(path)
 			return
 		}
 		for (const s of schedule.edges.get(path) ?? []) {
 			const d = (remaining.get(s) ?? 0) - 1
 			remaining.set(s, d)
-			if (d === 0 && !failed) schedule_(s)
+			if (d === 0 && !poisoned.has(s)) schedule_(s)
 		}
 	}
 
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index 167aaa8f25..d09c1be15f 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -1643,6 +1643,25 @@
 		}
 	}
 
+	// Every pipeline-member script, for the always-visible header "Run pipeline"
+	// control. Per-node runs are hover/select-gated on the canvas; this
+	// pipeline-level affordance runs the whole graph without hunting for a root
+	// node to hover. Gated on `in_pipeline` so it never launches dependency-only
+	// endpoints the graph surfaces for context (macro libraries, custom
+	// data-test scripts, out-of-folder producers) — only actual pipeline steps.
+	let allPipelineScripts = $derived(
+		displayGraph.runnables
+			.filter((r) => r.usage_kind === 'script' && r.in_pipeline)
+			.map((r) => r.path)
+	)
+	// Run the whole pipeline: hand every script to the bounded-cascade engine,
+	// which topo-orders them (roots first) and fans downstream — i.e. run + all
+	// downstream from every source at once. Reuses the same per-hop launch/poll
+	// and one-cascade-at-a-time guard as the node-level chain runs.
+	async function runWholePipeline() {
+		await runBoundedCascade(allPipelineScripts)
+	}
+
 	// Counter bumped when the canvas Run button targets the currently-open
 	// script — the pane intercepts and routes through ScriptEditor.runTest
 	// so logs/result/cancel land in the test panel instead of going off
@@ -2004,6 +2023,18 @@
 		return `${n} ${singular}${n === 1 ? '' : 's'}`
 	}
 
+	// Human noun per asset kind for the header summary. The raw `ducklake` kind
+	// counts materialized tables/views (including `_current` history views), so
+	// "N ducklakes" mis-reads as a count of lakes — surface "table" instead. Other
+	// kinds keep their own noun; unmapped kinds fall back to the raw kind.
+	const ASSET_KIND_NOUN: Record<string, string> = {
+		ducklake: 'table',
+		datatable: 'table',
+		s3object: 'file',
+		volume: 'volume',
+		resource: 'resource'
+	}
+
 	let summary = $derived.by<string[]>(() => {
 		const g = graphRes.current
 		if (!g) return []
@@ -2012,9 +2043,14 @@
 		const flows = g.runnables.filter((r) => r.usage_kind === 'flow').length
 		if (scripts) parts.push(pluralize(scripts, 'script'))
 		if (flows) parts.push(pluralize(flows, 'flow'))
-		const byKind = new Map<string, number>()
-		for (const a of g.assets) byKind.set(a.kind, (byKind.get(a.kind) ?? 0) + 1)
-		for (const [kind, n] of byKind) parts.push(pluralize(n, kind))
+		// Collapse kinds that share a noun (ducklake + datatable → "table") into a
+		// single tally so the summary reads "5 tables", not "3 tables · 2 tables".
+		const byNoun = new Map<string, number>()
+		for (const a of g.assets) {
+			const noun = ASSET_KIND_NOUN[a.kind] ?? a.kind
+			byNoun.set(noun, (byNoun.get(noun) ?? 0) + 1)
+		}
+		for (const [noun, n] of byNoun) parts.push(pluralize(n, noun))
 		return parts
 	})
 </script>
@@ -2098,6 +2134,28 @@
 			</div>
 		{/if}
 		<div class="flex flex-row items-center gap-2 flex-1 justify-end">
+			{#if mode === 'edit' && !isOperator && allPipelineScripts.length > 0}
+				<!-- Pipeline-level run: always visible so a run doesn't require
+				     hovering a specific node's play button. Runs every script in
+				     dependency order (roots first, cascading downstream). -->
+				<Button
+					variant="accent-secondary"
+					unifiedSize="sm"
+					startIcon={{
+						icon: cascadeRunningRoot ? Loader2 : Play,
+						classes: cascadeRunningRoot ? 'animate-spin' : undefined
+					}}
+					onclick={runWholePipeline}
+					disabled={!!cascadeRunningRoot}
+					title={cascadeRunningRoot
+						? 'A pipeline run is already in progress'
+						: `Run all ${allPipelineScripts.length} script${
+								allPipelineScripts.length === 1 ? '' : 's'
+							} in dependency order (roots first, cascading downstream)`}
+				>
+					{cascadeRunningRoot ? 'Running…' : 'Run pipeline'}
+				</Button>
+			{/if}
 			{#if mode === 'edit' && saveErrors.size > 0}
 				<!-- Compact errors popover anchored next to Save all so users
 				     can see exactly which drafts failed and why without losing

From 475b072987b33d50111f5251a5f69f4245f930ae Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 00:10:28 +0200
Subject: [PATCH 60/76] feat(pipelines): partition run-arg picker + first-run
 setup signpost (#9943)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(pipelines): partition run-arg picker + first-run setup signpost

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): honor partition start= anchor in picker default and per-input upstream hint

Addresses CI review (Codex):

- P1: never seed/offer a pre-start bucket — the worker takes an explicit partition arg verbatim, so seeding today's bucket before start= would materialize early. defaultBucket now clamps to the start bucket and drops pre-start recent-missing chips; a hint explains the start anchor.

- P2: upstream-missing hint checks each partitioned ducklake input separately instead of unioning, so a fan-in where one input has the bucket no longer masks another that lacks it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): reseed partition picker on header change and fail safe on bad tz/start

Addresses second CI review (Codex):

- P1: run form is now keyed on the parsed partition spec as well as the schema, so editing the // partitioned header (same schema) remounts the picker and reseeds/re-strips instead of keeping a stale bucket that re-bypasses the start anchor.

- P1: malformed metadata is fail-safe in parity with the backend — invalid tz= no longer throws in Intl (falls back to UTC for display), invalid start= (e.g. 2026-02-31) is rejected via round-trip check, and neither auto-seeds an explicit partition (which would bypass the worker's own tz/start validation). A warning hint points at the header.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 .../AssetGraph/PartitionArgControl.svelte     | 250 +++++++++++++++++
 .../assets/AssetGraph/PipelineRunForm.svelte  |  55 +++-
 .../AssetGraph/PipelineScriptView.svelte      |  62 ++++-
 .../AssetGraph/PipelineSetupSignpost.svelte   | 120 ++++++++
 .../AssetGraph/partitionBuckets.test.ts       | 161 +++++++++++
 .../assets/AssetGraph/partitionBuckets.ts     | 261 ++++++++++++++++++
 .../(root)/(logged)/pipeline/+page.svelte     |   7 +-
 7 files changed, 902 insertions(+), 14 deletions(-)
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/PartitionArgControl.svelte
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/PipelineSetupSignpost.svelte
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/partitionBuckets.test.ts
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/partitionBuckets.ts

diff --git a/frontend/src/lib/components/assets/AssetGraph/PartitionArgControl.svelte b/frontend/src/lib/components/assets/AssetGraph/PartitionArgControl.svelte
new file mode 100644
index 0000000000..dac1ecdb02
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/PartitionArgControl.svelte
@@ -0,0 +1,250 @@
+<script lang="ts">
+	import { resource } from 'runed'
+	import { AssetService, type AssetKind, type MaterializedPartition } from '$lib/gen'
+	import TextInput from '$lib/components/text_input/TextInput.svelte'
+	import { CalendarClock, CircleCheck, CircleDashed, TriangleAlert } from 'lucide-svelte'
+	import type { PartitionSpec } from './parsePipelineAnnotations'
+	import { untrack } from 'svelte'
+	import {
+		bucketFromInputValue,
+		defaultBucket,
+		inputValueFromBucket,
+		isBeforeStart,
+		partitionInputType,
+		partitionMetadataError,
+		recentBuckets,
+		recentWindow,
+		startBucketOf,
+		usesCalendarPicker
+	} from './partitionBuckets'
+
+	interface Props {
+		// The partition cadence parsed from the script's `// partitioned` header.
+		spec: PartitionSpec
+		// Bound to `args.partition`. `$bindable()` without a default per the
+		// AGENTS.md ban on `$bindable(default)` for optional props.
+		value?: string | undefined
+		workspace: string
+		// The `// materialize` ducklake target, if any — enables the
+		// "already materialized / recently missing" hints against this
+		// producer's own output.
+		materializeTarget?: { kind: AssetKind; path: string }
+		// Partitioned ducklake inputs (`// on ducklake://…`) — enables the
+		// "no upstream data for this bucket yet" hint.
+		upstreamAssets?: { kind: AssetKind; path: string }[]
+	}
+
+	let {
+		value = $bindable(),
+		spec,
+		workspace,
+		materializeTarget,
+		upstreamAssets = []
+	}: Props = $props()
+
+	const inputType = $derived(partitionInputType(spec))
+	const calendarPicker = $derived(usesCalendarPicker(spec))
+	// Non-undefined when the `// partitioned` metadata is unusable (bad tz/start).
+	const metadataError = $derived(partitionMetadataError(spec))
+
+	// Seed the default bucket on (re)mount. The run form is keyed on the schema
+	// AND the partition spec (PipelineScriptView), so a real change to either
+	// remounts this and reseeds — an identical re-resolve keeps the user's
+	// in-progress pick. `defaultBucket` honours the `start=` anchor (never seeds
+	// a pre-start bucket the worker would take verbatim). We deliberately do NOT
+	// auto-seed when the metadata is invalid (bad tz/start): the worker takes an
+	// explicit `partition` arg verbatim, so seeding one would bypass the
+	// backend's own tz/start validation — leave it empty and let the backend
+	// surface the error. Dynamic / custom-format specs also stay empty (free
+	// text). `untrack` so this fires once per mount, not on every `value` edit.
+	$effect(() => {
+		untrack(() => {
+			value = calendarPicker && !metadataError ? defaultBucket(spec, new Date()) : undefined
+		})
+	})
+
+	// Whether the producer hasn't reached its `start=` anchor yet — explains why
+	// the default bucket is the start rather than today.
+	let beforeStart = $derived(calendarPicker && !metadataError && isBeforeStart(spec, new Date()))
+
+	// The native <input> string mirrors `value`; hourly carries an extra minute
+	// component that the canonical bucket drops.
+	let inputValue = $derived(value ? inputValueFromBucket(spec, value) : '')
+	function onNativeInput(raw: string) {
+		value = raw ? bucketFromInputValue(spec, raw) : ''
+	}
+
+	function listPartitions(kind: AssetKind, path: string) {
+		// Only ducklake assets carry materialized-partition rows.
+		if (kind !== 'ducklake' || !path) return Promise.resolve([] as MaterializedPartition[])
+		return AssetService.listAssetPartitions({ workspace, path }).catch(
+			() => [] as MaterializedPartition[]
+		)
+	}
+
+	// This producer's own materialized partitions — powers the selected-bucket
+	// status and the recently-missing list.
+	let ownPartitions = resource(
+		[() => workspace, () => materializeTarget?.kind, () => materializeTarget?.path],
+		async ([ws, kind, path]) => {
+			if (!ws || !kind || !path) return [] as MaterializedPartition[]
+			return listPartitions(kind, path)
+		}
+	)
+	let materializedSet = $derived(
+		new Set(
+			(ownPartitions.current ?? [])
+				.filter((p) => p.status === 'materialized')
+				.map((p) => p.partition)
+		)
+	)
+
+	let selectedMaterialized = $derived(!!value && materializedSet.has(value))
+
+	// Recently-missing buckets: the last N cadence buckets not yet materialized.
+	// Pre-`start=` buckets are dropped — they never materialize on their own, so
+	// offering them as run chips would let a click launch a pre-start partition.
+	let recentlyMissing = $derived.by(() => {
+		if (!materializeTarget || materializeTarget.kind !== 'ducklake' || !calendarPicker) return []
+		if (metadataError || ownPartitions.loading) return []
+		const startBucket = startBucketOf(spec)
+		return recentBuckets(spec, new Date(), recentWindow(spec.kind)).filter(
+			(b) => !materializedSet.has(b) && (!startBucket || b >= startBucket)
+		)
+	})
+
+	// Upstream ducklake inputs, one materialized-set PER input (not unioned).
+	// A per-input `tracked` flag (has ≥1 non-empty partition) distinguishes a
+	// partitioned input from a whole-table one, so a non-partitioned upstream
+	// (single whole-table row) never false-alarms as "no data for this bucket".
+	let ducklakeUpstreams = $derived(upstreamAssets.filter((a) => a.kind === 'ducklake'))
+	let upstream = resource(
+		[() => workspace, () => ducklakeUpstreams.map((a) => a.path).join('\n')],
+		async ([ws, joined]) => {
+			const paths = joined ? joined.split('\n') : []
+			if (!ws || paths.length === 0) return [] as { tracked: boolean; materialized: Set<string> }[]
+			return await Promise.all(
+				paths.map(async (p) => {
+					const rows = await listPartitions('ducklake', p)
+					return {
+						tracked: rows.some((r) => r.partition !== ''),
+						materialized: new Set(
+							rows.filter((r) => r.status === 'materialized').map((r) => r.partition)
+						)
+					}
+				})
+			)
+		}
+	)
+	// Warn when ANY partition-tracked upstream is missing the selected bucket —
+	// checked per-input so a fan-in where one input has the bucket doesn't mask
+	// another that lacks it. Never fires while loading or for untracked inputs.
+	let upstreamMissing = $derived(
+		!!value &&
+			calendarPicker &&
+			!upstream.loading &&
+			(upstream.current ?? []).some((u) => u.tracked && !u.materialized.has(value!))
+	)
+
+	const MAX_MISSING_CHIPS = 8
+</script>
+
+<div class="flex flex-col gap-1.5">
+	<span class="text-xs font-semibold text-emphasis inline-flex items-center gap-1.5">
+		<CalendarClock size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
+		Partition
+		<span class="text-3xs font-medium text-tertiary px-1 py-0.5 rounded bg-surface-secondary">
+			{spec.kind}
+		</span>
+	</span>
+
+	{#if calendarPicker}
+		<input
+			type={inputType}
+			class="app-editor-input !w-full text-xs"
+			value={inputValue}
+			onchange={(e) => onNativeInput(e.currentTarget.value)}
+		/>
+		{#if metadataError}
+			<span class="text-3xs inline-flex items-start gap-1 text-amber-700 dark:text-amber-400">
+				<TriangleAlert size={12} class="mt-0.5 shrink-0" />
+				<span>
+					The <span class="font-mono">// partitioned</span> header has {metadataError} — fix it in the
+					script; no default is filled in.
+				</span>
+			</span>
+		{:else if beforeStart}
+			<span class="text-3xs text-tertiary">
+				Partitioning starts <span class="font-mono">{spec.start}</span> — defaulted to the first partition.
+			</span>
+		{/if}
+	{:else}
+		<TextInput
+			bind:value={() => value ?? '', (v) => (value = v)}
+			size="sm"
+			inputProps={{
+				placeholder: spec.kind === 'dynamic' ? 'Partition key value' : 'Partition bucket'
+			}}
+		/>
+		<span class="text-3xs text-tertiary">
+			{#if spec.kind === 'dynamic'}
+				Dynamic partition — leave blank to let the run resolve it from the payload.
+			{:else}
+				Custom partition format — enter the bucket exactly as the producer renders it.
+			{/if}
+		</span>
+	{/if}
+
+	<!-- Selected-bucket status against this producer's own materialized set. -->
+	{#if calendarPicker && materializeTarget?.kind === 'ducklake' && value}
+		{#if selectedMaterialized}
+			<span class="text-3xs inline-flex items-center gap-1 text-green-700 dark:text-green-400">
+				<CircleCheck size={12} />
+				<span class="font-mono">{value}</span> is already materialized — running replaces it.
+			</span>
+		{:else}
+			<span class="text-3xs inline-flex items-center gap-1 text-tertiary">
+				<CircleDashed size={12} />
+				<span class="font-mono">{value}</span> not materialized yet — running creates it.
+			</span>
+		{/if}
+	{/if}
+
+	<!-- No upstream data for the selected bucket. -->
+	{#if upstreamMissing}
+		<span class="text-3xs inline-flex items-start gap-1 text-amber-700 dark:text-amber-400">
+			<TriangleAlert size={12} class="mt-0.5 shrink-0" />
+			<span>
+				No upstream data for <span class="font-mono">{value}</span> yet — this run may materialize an
+				empty partition.
+			</span>
+		</span>
+	{/if}
+
+	<!-- Recently-missing buckets, a compact "what's not filled in" hint. -->
+	{#if recentlyMissing.length > 0}
+		<div class="flex flex-col gap-1">
+			<span class="text-3xs text-tertiary">
+				{recentlyMissing.length} of the last {recentWindow(spec.kind)}
+				{spec.kind} partitions are not materialized:
+			</span>
+			<div class="flex flex-wrap gap-1">
+				{#each recentlyMissing.slice(0, MAX_MISSING_CHIPS) as b (b)}
+					<button
+						type="button"
+						class="px-1.5 py-0.5 rounded text-3xs font-mono bg-amber-100 text-amber-800 dark:bg-amber-900/40 dark:text-amber-300 hover:ring-1 hover:ring-amber-400"
+						title="Set the partition to {b}"
+						onclick={() => (value = b)}
+					>
+						{b}
+					</button>
+				{/each}
+				{#if recentlyMissing.length > MAX_MISSING_CHIPS}
+					<span class="text-3xs text-tertiary self-center">
+						+{recentlyMissing.length - MAX_MISSING_CHIPS} more
+					</span>
+				{/if}
+			</div>
+		</div>
+	{/if}
+</div>
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineRunForm.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineRunForm.svelte
index fc5e7ad945..4384f125ba 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineRunForm.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineRunForm.svelte
@@ -1,6 +1,9 @@
 <script lang="ts">
 	import SchemaForm from '$lib/components/SchemaForm.svelte'
 	import { emptySchema } from '$lib/utils'
+	import type { AssetKind } from '$lib/gen'
+	import type { PartitionSpec } from './parsePipelineAnnotations'
+	import PartitionArgControl from './PartitionArgControl.svelte'
 
 	interface Props {
 		// The script's schema to render inputs for. SchemaForm normalizes/mutates
@@ -8,9 +11,40 @@
 		schema: any
 		args: Record<string, any>
 		isValid: boolean
+		// When the script is `// partitioned`, the bare `partition` string arg is
+		// pulled out of the SchemaForm and rendered by PartitionArgControl (a
+		// cadence-appropriate date picker + missing/upstream hints) instead.
+		partitionSpec?: PartitionSpec
+		workspace?: string
+		materializeTarget?: { kind: AssetKind; path: string }
+		upstreamAssets?: { kind: AssetKind; path: string }[]
 	}
 
-	let { schema, args = $bindable(), isValid = $bindable() }: Props = $props()
+	let {
+		schema,
+		args = $bindable(),
+		isValid = $bindable(),
+		partitionSpec,
+		workspace = '',
+		materializeTarget,
+		upstreamAssets = []
+	}: Props = $props()
+
+	// Drop the `partition` property from the schema clone so SchemaForm doesn't
+	// also render it as a bare string — PartitionArgControl owns `args.partition`.
+	function stripPartition(s: any): any {
+		if (!s || typeof s !== 'object') return s
+		if (s.properties && 'partition' in s.properties) {
+			delete s.properties.partition
+		}
+		if (Array.isArray(s.order)) {
+			s.order = s.order.filter((k: string) => k !== 'partition')
+		}
+		if (Array.isArray(s.required)) {
+			s.required = s.required.filter((k: string) => k !== 'partition')
+		}
+		return s
+	}
 
 	// Mutable clone SchemaForm can normalize without touching the parent's script.
 	// Seeded ONCE per mount — the parent remounts this via `{#key <schema content>}`
@@ -18,7 +52,22 @@
 	// $effect, and an unchanged re-resolve (a WS bundle with the same schema) keeps
 	// in-progress input.
 	// svelte-ignore state_referenced_locally
-	let formSchema = $state<any>(structuredClone($state.snapshot(schema) ?? emptySchema()))
+	let formSchema = $state<any>(
+		partitionSpec
+			? stripPartition(structuredClone($state.snapshot(schema) ?? emptySchema()))
+			: structuredClone($state.snapshot(schema) ?? emptySchema())
+	)
 </script>
 
-<SchemaForm bind:schema={formSchema} bind:args bind:isValid compact />
+<div class="flex flex-col gap-2">
+	{#if partitionSpec}
+		<PartitionArgControl
+			spec={partitionSpec}
+			bind:value={() => args.partition, (v) => (args.partition = v)}
+			{workspace}
+			{materializeTarget}
+			{upstreamAssets}
+		/>
+	{/if}
+	<SchemaForm bind:schema={formSchema} bind:args bind:isValid compact />
+</div>
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
index cadd3c6a94..64e24e0ad2 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
@@ -1,11 +1,13 @@
 <script lang="ts">
-	import type { Script } from '$lib/gen'
-	import { Loader2, Play, Upload, Zap } from 'lucide-svelte'
+	import type { AssetKind, Script } from '$lib/gen'
+	import { CalendarClock, Loader2, Play, Upload, Zap } from 'lucide-svelte'
 	import Button from '$lib/components/common/button/Button.svelte'
 	import HighlightCode from '$lib/components/HighlightCode.svelte'
 	import PipelineRunForm from './PipelineRunForm.svelte'
 	import AssetRunsPanel from './AssetRunsPanel.svelte'
 	import { Pane, Splitpanes } from 'svelte-splitpanes'
+	import { workspaceStore } from '$lib/stores'
+	import { parsePipelineAnnotations } from './parsePipelineAnnotations'
 
 	interface Props {
 		script: Script
@@ -52,13 +54,40 @@
 	// and the script actually has subscribers to fan out to.
 	let hasCascade = $derived(!!onRunCascade && downstreamCount > 0)
 
+	// Parse the pipeline header for the partition cadence + materialize target +
+	// ducklake inputs, so a partitioned producer's run form swaps the bare
+	// `partition` string for a cadence-aware date picker with missing/upstream
+	// hints (see PartitionArgControl).
+	let annotations = $derived(parsePipelineAnnotations(script.content ?? ''))
+	let partitionSpec = $derived(annotations.partition)
+	let materializeTarget = $derived<{ kind: AssetKind; path: string } | undefined>(
+		annotations.materialize
+			? { kind: annotations.materialize.targetKind, path: annotations.materialize.targetPath }
+			: undefined
+	)
+	let upstreamAssets = $derived(
+		annotations.triggerAssets.map((a) => ({ kind: a.kind, path: a.path }))
+	)
+
+	// The run form appears for data-upload entry points (S3 picker) and for any
+	// partitioned producer — materializing a single partition is available in
+	// OSS, and the picker is where the user chooses which one.
+	let showRunForm = $derived(canRun || !!partitionSpec)
+	// A partitioned producer that isn't a data-upload entry is materializing a
+	// partition rather than uploading data — reflect that in the header.
+	let partitionOnly = $derived(!canRun && !!partitionSpec)
+
 	// The details pane keys this component on script.path only, so a same-path
 	// re-resolve (in /pipeline_dev the selected node re-resolves on every WS
 	// bundle) does NOT remount us. `PipelineRunForm` owns the SchemaForm clone and
-	// is keyed on the serialized schema below, so a local edit that adds/removes
-	// args reseeds the run form while an unchanged re-resolve keeps in-progress
-	// input (else the form could run against a stale schema with missing inputs).
-	let schemaKey = $derived(JSON.stringify(script.schema ?? null))
+	// is keyed on the serialized schema + partition spec below: a local edit that
+	// adds/removes args OR changes the `// partitioned` header (which the schema
+	// alone wouldn't capture) reseeds the run form and re-strips the `partition`
+	// field, while an unchanged re-resolve keeps in-progress input (else the form
+	// could run against a stale schema/spec — e.g. keep a pre-`start=` bucket).
+	let schemaKey = $derived(
+		JSON.stringify(script.schema ?? null) + '|' + JSON.stringify(partitionSpec ?? null)
+	)
 
 	async function run(cascade = false) {
 		const dispatch = cascade ? onRunCascade : onRun
@@ -83,12 +112,17 @@
 	<Splitpanes horizontal class="!h-full">
 		<Pane size={55} minSize={20}>
 			<div class="flex flex-col h-full overflow-auto">
-				{#if canRun}
+				{#if showRunForm}
 					<div class="shrink-0 flex flex-col gap-2 p-3 border-b" data-run-form>
 						<div class="flex items-center justify-between gap-2">
 							<span class="text-xs font-semibold text-emphasis inline-flex items-center gap-1.5">
-								<Upload size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
-								Run pipeline
+								{#if partitionOnly}
+									<CalendarClock size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
+									Materialize a partition
+								{:else}
+									<Upload size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
+									Run pipeline
+								{/if}
 							</span>
 							<div class="flex items-center gap-1.5">
 								{#if hasCascade}
@@ -120,7 +154,15 @@
 							</div>
 						</div>
 						{#key schemaKey}
-							<PipelineRunForm schema={script.schema} bind:args bind:isValid />
+							<PipelineRunForm
+								schema={script.schema}
+								bind:args
+								bind:isValid
+								{partitionSpec}
+								workspace={$workspaceStore ?? ''}
+								{materializeTarget}
+								{upstreamAssets}
+							/>
 						{/key}
 					</div>
 				{/if}
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineSetupSignpost.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineSetupSignpost.svelte
new file mode 100644
index 0000000000..751ecbbdc8
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineSetupSignpost.svelte
@@ -0,0 +1,120 @@
+<script lang="ts">
+	import { resource } from 'runed'
+	import { WorkspaceService } from '$lib/gen'
+	import { base } from '$lib/base'
+	import { CircleCheck, CircleAlert, Database, HardDrive, ArrowRight } from 'lucide-svelte'
+
+	interface Props {
+		workspace: string
+	}
+	let { workspace }: Props = $props()
+
+	// A pipeline can't materialize anything until the workspace has (a) object
+	// storage for the parquet files and (b) at least one DuckLake catalog. A
+	// brand-new user has no signal these are prerequisites — this first-run
+	// checklist surfaces them and links straight to the settings that fix them.
+	//
+	// Both probes fail SAFE: an errored settings read (e.g. non-admin) resolves
+	// to `undefined`, and an undefined state never renders a red "missing" —
+	// the signpost only asserts "not configured" when it positively knows so.
+	let storage = resource([() => workspace], async ([ws]) => {
+		if (!ws) return undefined
+		try {
+			const s = await WorkspaceService.getSettings({ workspace: ws })
+			return !!s.large_file_storage
+		} catch {
+			return undefined
+		}
+	})
+	let ducklakes = resource([() => workspace], async ([ws]) => {
+		if (!ws) return undefined
+		try {
+			return (await WorkspaceService.listDucklakes({ workspace: ws })).length > 0
+		} catch {
+			return undefined
+		}
+	})
+
+	// Only surface the signpost once we have a definite "not configured" for at
+	// least one prerequisite — never while loading, and never on an errored
+	// probe (which would nag a user who can't act on it anyway).
+	let storageMissing = $derived(storage.current === false)
+	let ducklakeMissing = $derived(ducklakes.current === false)
+	let show = $derived(storageMissing || ducklakeMissing)
+
+	type Step = {
+		done: boolean | undefined
+		icon: typeof Database
+		title: string
+		description: string
+		href: string
+		cta: string
+	}
+	let steps = $derived<Step[]>([
+		{
+			done: storage.current,
+			icon: HardDrive,
+			title: 'Workspace object storage',
+			description:
+				'Materialized partitions and DuckLake data files are written to S3 / object storage.',
+			href: `${base}/workspace_settings?tab=windmill_lfs`,
+			cta: 'Configure object storage'
+		},
+		{
+			done: ducklakes.current,
+			icon: Database,
+			title: 'A DuckLake catalog',
+			description:
+				'DuckLake is the table format pipelines materialize into — add at least one catalog.',
+			href: `${base}/workspace_settings?tab=ducklake`,
+			cta: 'Configure DuckLake'
+		}
+	])
+</script>
+
+{#if show}
+	<div
+		class="flex flex-col gap-3 rounded-lg border border-amber-300 dark:border-amber-900/60 bg-amber-50 dark:bg-amber-950/30 p-4"
+	>
+		<div class="flex items-start gap-2">
+			<CircleAlert size={18} class="text-amber-600 dark:text-amber-400 mt-0.5 shrink-0" />
+			<div class="flex flex-col gap-0.5">
+				<h3 class="text-sm font-semibold text-emphasis">Finish setting up pipelines</h3>
+				<p class="text-xs text-tertiary">
+					Pipelines materialize data into DuckLake tables backed by object storage. Configure the
+					following before your first pipeline can run.
+				</p>
+			</div>
+		</div>
+
+		<ul class="flex flex-col gap-2">
+			{#each steps as step (step.title)}
+				{@const Icon = step.icon}
+				<li class="flex items-center gap-3 rounded-md border bg-surface px-3 py-2">
+					{#if step.done === true}
+						<CircleCheck size={16} class="text-green-600 dark:text-green-400 shrink-0" />
+					{:else if step.done === false}
+						<CircleAlert size={16} class="text-amber-600 dark:text-amber-400 shrink-0" />
+					{:else}
+						<Icon size={16} class="text-tertiary shrink-0" />
+					{/if}
+					<div class="flex flex-col min-w-0 flex-1">
+						<span class="text-xs font-semibold text-primary">{step.title}</span>
+						<span class="text-2xs text-tertiary">{step.description}</span>
+					</div>
+					{#if step.done !== true}
+						<a
+							href={step.href}
+							class="shrink-0 inline-flex items-center gap-1 text-xs text-blue-500 hover:underline whitespace-nowrap"
+						>
+							{step.cta}
+							<ArrowRight size={12} />
+						</a>
+					{:else}
+						<span class="shrink-0 text-2xs text-green-700 dark:text-green-400">Configured</span>
+					{/if}
+				</li>
+			{/each}
+		</ul>
+	</div>
+{/if}
diff --git a/frontend/src/lib/components/assets/AssetGraph/partitionBuckets.test.ts b/frontend/src/lib/components/assets/AssetGraph/partitionBuckets.test.ts
new file mode 100644
index 0000000000..a8a47af259
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/partitionBuckets.test.ts
@@ -0,0 +1,161 @@
+import { describe, expect, it } from 'vitest'
+import {
+	bucketFor,
+	bucketFromInputValue,
+	defaultBucket,
+	inputValueFromBucket,
+	isBeforeStart,
+	isValidStart,
+	isValidTimeZone,
+	partitionInputType,
+	partitionMetadataError,
+	recentBuckets,
+	startBucketOf,
+	usesCalendarPicker
+} from './partitionBuckets'
+import type { PartitionSpec } from './parsePipelineAnnotations'
+
+const spec = (kind: PartitionSpec['kind'], extra: Partial<PartitionSpec> = {}): PartitionSpec =>
+	({ kind, ...extra }) as PartitionSpec
+
+// A fixed UTC instant: 2026-07-05 14:37Z (a Sunday — ISO week 27 of 2026).
+// Explicit UTC so the assertions are independent of the test runner's TZ, and
+// they exercise the same UTC default the backend uses when `spec.tz` is absent.
+const at = new Date(Date.UTC(2026, 6, 5, 14, 37, 0))
+
+describe('bucketFor mirrors backend default_format (UTC)', () => {
+	it('daily -> %Y-%m-%d', () => {
+		expect(bucketFor(spec('daily'), at)).toBe('2026-07-05')
+	})
+	it('hourly -> %Y-%m-%dT%H', () => {
+		expect(bucketFor(spec('hourly'), at)).toBe('2026-07-05T14')
+	})
+	it('monthly -> %Y-%m', () => {
+		expect(bucketFor(spec('monthly'), at)).toBe('2026-07')
+	})
+	it('weekly -> ISO %G-W%V', () => {
+		expect(bucketFor(spec('weekly'), at)).toBe('2026-W27')
+	})
+})
+
+describe('bucketFor honours spec.tz', () => {
+	// 2026-07-05 02:30Z is still 2026-07-04 in America/New_York (UTC-4 in July).
+	const nearMidnight = new Date(Date.UTC(2026, 6, 5, 2, 30, 0))
+	it('shifts the day boundary by the producer tz', () => {
+		expect(bucketFor(spec('daily'), nearMidnight)).toBe('2026-07-05') // UTC default
+		expect(bucketFor(spec('daily', { tz: 'America/New_York' }), nearMidnight)).toBe('2026-07-04')
+	})
+	it('shifts the hour bucket by the producer tz', () => {
+		// 02:30Z -> 22 (previous day) in New York.
+		expect(bucketFor(spec('hourly', { tz: 'America/New_York' }), nearMidnight)).toBe(
+			'2026-07-04T22'
+		)
+	})
+})
+
+describe('defaultBucket honours the start= anchor', () => {
+	// `at` is 2026-07-05.
+	it('seeds the current bucket when at or after start', () => {
+		expect(defaultBucket(spec('daily'), at)).toBe('2026-07-05')
+		expect(defaultBucket(spec('daily', { start: '2026-01-01' }), at)).toBe('2026-07-05')
+		expect(defaultBucket(spec('daily', { start: '2026-07-05' }), at)).toBe('2026-07-05') // == start, not before
+	})
+	it('seeds the start bucket (never a pre-start one) when before start', () => {
+		expect(defaultBucket(spec('daily', { start: '2026-08-01' }), at)).toBe('2026-08-01')
+		expect(defaultBucket(spec('monthly', { start: '2026-08-01' }), at)).toBe('2026-08')
+		expect(defaultBucket(spec('hourly', { start: '2026-08-01' }), at)).toBe('2026-08-01T00')
+	})
+	it('isBeforeStart mirrors the backend date comparison', () => {
+		expect(isBeforeStart(spec('daily', { start: '2026-08-01' }), at)).toBe(true)
+		expect(isBeforeStart(spec('daily', { start: '2026-07-05' }), at)).toBe(false)
+		expect(isBeforeStart(spec('daily'), at)).toBe(false)
+	})
+	it('startBucketOf renders the anchor in the cadence, undefined when unset', () => {
+		expect(startBucketOf(spec('daily', { start: '2026-08-01' }))).toBe('2026-08-01')
+		expect(startBucketOf(spec('monthly', { start: '2026-08-15' }))).toBe('2026-08')
+		expect(startBucketOf(spec('hourly', { start: '2026-08-01' }))).toBe('2026-08-01T00')
+		expect(startBucketOf(spec('daily'))).toBeUndefined()
+	})
+})
+
+describe('malformed metadata fails safe (parity with backend validation)', () => {
+	it('isValidTimeZone rejects garbage, accepts real zones and absence', () => {
+		expect(isValidTimeZone(undefined)).toBe(true)
+		expect(isValidTimeZone('UTC')).toBe(true)
+		expect(isValidTimeZone('America/New_York')).toBe(true)
+		expect(isValidTimeZone('Not/AZone')).toBe(false)
+		expect(isValidTimeZone('garbage')).toBe(false)
+	})
+	it('isValidStart rejects malformed and JS-normalized dates', () => {
+		expect(isValidStart(undefined)).toBe(true)
+		expect(isValidStart('2026-08-01')).toBe(true)
+		expect(isValidStart('2026-02-31')).toBe(false) // JS would roll to Mar 3
+		expect(isValidStart('2026-13-01')).toBe(false)
+		expect(isValidStart('08/01/2026')).toBe(false)
+	})
+	it('partitionMetadataError reports the first problem, else undefined', () => {
+		expect(partitionMetadataError(spec('daily'))).toBeUndefined()
+		expect(
+			partitionMetadataError(spec('daily', { tz: 'America/New_York', start: '2026-08-01' }))
+		).toBeUndefined()
+		expect(partitionMetadataError(spec('daily', { tz: 'Not/AZone' }))).toContain('timezone')
+		expect(partitionMetadataError(spec('daily', { start: '2026-02-31' }))).toContain('start date')
+	})
+	it('bucketFor never throws on an invalid tz (falls back to UTC)', () => {
+		expect(bucketFor(spec('daily', { tz: 'Not/AZone' }), at)).toBe('2026-07-05')
+	})
+	it('an invalid start is treated as no anchor (isBeforeStart/startBucketOf)', () => {
+		expect(isBeforeStart(spec('daily', { start: '2026-02-31' }), at)).toBe(false)
+		expect(startBucketOf(spec('daily', { start: '2026-02-31' }))).toBeUndefined()
+	})
+})
+
+describe('partitionInputType', () => {
+	it('maps each calendar kind to its native input', () => {
+		expect(partitionInputType(spec('daily'))).toBe('date')
+		expect(partitionInputType(spec('hourly'))).toBe('datetime-local')
+		expect(partitionInputType(spec('weekly'))).toBe('week')
+		expect(partitionInputType(spec('monthly'))).toBe('month')
+	})
+	it('falls back to text for dynamic and custom-format specs', () => {
+		expect(partitionInputType(spec('dynamic', { key: '$.tenant' }))).toBe('text')
+		expect(partitionInputType(spec('daily', { format: '%Y/%m/%d' }))).toBe('text')
+		expect(usesCalendarPicker(spec('dynamic', { key: '$.tenant' }))).toBe(false)
+		expect(usesCalendarPicker(spec('daily', { format: '%Y/%m/%d' }))).toBe(false)
+	})
+})
+
+describe('native input <-> bucket round-trip', () => {
+	it('hourly truncates the datetime-local minutes and restores :00', () => {
+		expect(bucketFromInputValue(spec('hourly'), '2026-07-05T14:37')).toBe('2026-07-05T14')
+		expect(inputValueFromBucket(spec('hourly'), '2026-07-05T14')).toBe('2026-07-05T14:00')
+	})
+	it('non-hourly kinds pass through unchanged', () => {
+		expect(bucketFromInputValue(spec('daily'), '2026-07-05')).toBe('2026-07-05')
+		expect(inputValueFromBucket(spec('weekly'), '2026-W27')).toBe('2026-W27')
+	})
+	it('empty stays empty', () => {
+		expect(bucketFromInputValue(spec('hourly'), '')).toBe('')
+		expect(inputValueFromBucket(spec('daily'), '')).toBe('')
+	})
+})
+
+describe('recentBuckets (UTC)', () => {
+	it('walks back day by day, most recent first', () => {
+		expect(recentBuckets(spec('daily'), at, 3)).toEqual(['2026-07-05', '2026-07-04', '2026-07-03'])
+	})
+	it('walks back hour by hour', () => {
+		expect(recentBuckets(spec('hourly'), at, 3)).toEqual([
+			'2026-07-05T14',
+			'2026-07-05T13',
+			'2026-07-05T12'
+		])
+	})
+	it('walks back month by month across a year boundary without day roll-over', () => {
+		const jan31 = new Date(Date.UTC(2026, 0, 31, 0, 0, 0))
+		expect(recentBuckets(spec('monthly'), jan31, 3)).toEqual(['2026-01', '2025-12', '2025-11'])
+	})
+	it('walks back week by week', () => {
+		expect(recentBuckets(spec('weekly'), at, 3)).toEqual(['2026-W27', '2026-W26', '2026-W25'])
+	})
+})
diff --git a/frontend/src/lib/components/assets/AssetGraph/partitionBuckets.ts b/frontend/src/lib/components/assets/AssetGraph/partitionBuckets.ts
new file mode 100644
index 0000000000..401ef82cae
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/partitionBuckets.ts
@@ -0,0 +1,261 @@
+// Client-side partition-bucket math for the run form's partition picker.
+// Produces the same canonical bucket strings the backend renders in
+// `windmill-common/src/partition_ee.rs` (`resolve_time_partition` /
+// `default_format`): the instant is localized to the spec's timezone
+// (`spec.tz`, defaulting to UTC — NOT the browser's zone) and then formatted.
+// Getting the zone right matters — a browser in a non-UTC zone would otherwise
+// seed a default bucket, and compare against materialized rows, off by a
+// day/hour near every boundary and always for an explicit `tz=` spec.
+//
+//   daily   %Y-%m-%d      -> 2026-07-05
+//   hourly  %Y-%m-%dT%H   -> 2026-07-05T14
+//   weekly  %G-W%V (ISO)  -> 2026-W27
+//   monthly %Y-%m         -> 2026-07
+//
+// Pure module (no Svelte runes) so the mapping is unit-testable.
+
+import type { PartitionSpec } from './parsePipelineAnnotations'
+
+export type PartitionInputType = 'date' | 'month' | 'week' | 'datetime-local' | 'text'
+
+// A spec carrying a custom strftime `format` can't be reproduced by the native
+// date pickers (arbitrary strftime), and `dynamic` partitions are a free-form
+// key extracted from the payload — both fall back to a plain text input.
+export function usesCalendarPicker(spec: PartitionSpec): boolean {
+	return spec.kind !== 'dynamic' && !spec.format
+}
+
+export function partitionInputType(spec: PartitionSpec): PartitionInputType {
+	if (!usesCalendarPicker(spec)) return 'text'
+	switch (spec.kind) {
+		case 'monthly':
+			return 'month'
+		case 'weekly':
+			return 'week'
+		case 'hourly':
+			return 'datetime-local'
+		default:
+			return 'date'
+	}
+}
+
+function pad(n: number): string {
+	return String(n).padStart(2, '0')
+}
+
+const ZONED_PARTS_OPTS: Intl.DateTimeFormatOptions = {
+	year: 'numeric',
+	month: '2-digit',
+	day: '2-digit',
+	hour: '2-digit',
+	minute: '2-digit',
+	second: '2-digit',
+	hourCycle: 'h23'
+}
+
+// Re-express `at` as a Date whose UTC fields equal the wall-clock in `tz`, so
+// all downstream field reads / calendar arithmetic can use the UTC getters and
+// stay in the producer's zone. `hourCycle: 'h23'` keeps hours 00–23. A
+// malformed `tz` (rejected by `Intl`) falls back to UTC rather than throwing —
+// the backend validates `tz=` and is the source of truth for the error; the
+// picker must never crash the graph view (`partitionMetadataError` gates
+// auto-seeding so a bogus bucket isn't silently sent).
+function zonedAsUtc(at: Date, tz: string): Date {
+	let parts: Intl.DateTimeFormatPart[]
+	try {
+		parts = new Intl.DateTimeFormat('en-US', { ...ZONED_PARTS_OPTS, timeZone: tz }).formatToParts(
+			at
+		)
+	} catch {
+		parts = new Intl.DateTimeFormat('en-US', {
+			...ZONED_PARTS_OPTS,
+			timeZone: 'UTC'
+		}).formatToParts(at)
+	}
+	const g = (t: string) => Number(parts.find((p) => p.type === t)?.value)
+	return new Date(
+		Date.UTC(g('year'), g('month') - 1, g('day'), g('hour'), g('minute'), g('second'))
+	)
+}
+
+// `tz=` is valid iff `Intl` accepts it (absent === UTC === valid).
+export function isValidTimeZone(tz?: string): boolean {
+	if (!tz) return true
+	try {
+		new Intl.DateTimeFormat('en-US', { timeZone: tz })
+		return true
+	} catch {
+		return false
+	}
+}
+
+// `start=` is valid iff it's a real `YYYY-MM-DD` calendar date. The round-trip
+// check rejects dates JS would silently normalize (e.g. `2026-02-31` → Mar 3),
+// which the backend's `NaiveDate::parse_from_str` also rejects.
+export function isValidStart(start?: string): boolean {
+	if (!start) return true
+	const m = start.match(/^(\d{4})-(\d{2})-(\d{2})$/)
+	if (!m) return false
+	const y = Number(m[1])
+	const mo = Number(m[2])
+	const d = Number(m[3])
+	const dt = new Date(Date.UTC(y, mo - 1, d))
+	return dt.getUTCFullYear() === y && dt.getUTCMonth() === mo - 1 && dt.getUTCDate() === d
+}
+
+// A human-readable reason the `// partitioned` metadata is unusable, or
+// undefined when it's sound. Mirrors the backend's `tz=` / `start=` validation
+// so the picker can refuse to auto-seed a bucket the backend would reject.
+export function partitionMetadataError(spec: PartitionSpec): string | undefined {
+	if (!isValidTimeZone(spec.tz)) return `invalid timezone "${spec.tz}"`
+	if (!isValidStart(spec.start)) return `invalid start date "${spec.start}" (want YYYY-MM-DD)`
+	return undefined
+}
+
+// ISO 8601 week-numbering year + week (chrono's %G / %V) of a UTC-substituted
+// date. Standard "nearest Thursday" algorithm, all in UTC.
+function isoWeekOf(d: Date): { isoYear: number; week: number } {
+	const date = new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate()))
+	const dayNum = (date.getUTCDay() + 6) % 7 // Mon=0 … Sun=6
+	date.setUTCDate(date.getUTCDate() - dayNum + 3) // Thursday of this week
+	const isoYear = date.getUTCFullYear()
+	const firstThursday = new Date(Date.UTC(isoYear, 0, 4))
+	const fdNum = (firstThursday.getUTCDay() + 6) % 7
+	firstThursday.setUTCDate(firstThursday.getUTCDate() - fdNum + 3)
+	const week = 1 + Math.round((date.getTime() - firstThursday.getTime()) / (7 * 86400000))
+	return { isoYear, week }
+}
+
+// Render a UTC-substituted date into its canonical bucket for the cadence.
+function fmtBucket(kind: PartitionSpec['kind'], d: Date): string {
+	const y = d.getUTCFullYear()
+	const m = d.getUTCMonth() + 1
+	const day = d.getUTCDate()
+	const h = d.getUTCHours()
+	switch (kind) {
+		case 'hourly':
+			return `${y}-${pad(m)}-${pad(day)}T${pad(h)}`
+		case 'monthly':
+			return `${y}-${pad(m)}`
+		case 'weekly': {
+			const { isoYear, week } = isoWeekOf(d)
+			return `${isoYear}-W${pad(week)}`
+		}
+		default:
+			return `${y}-${pad(m)}-${pad(day)}`
+	}
+}
+
+export function bucketFor(spec: PartitionSpec, at: Date): string {
+	return fmtBucket(spec.kind, zonedAsUtc(at, spec.tz ?? 'UTC'))
+}
+
+// The zoned start date (`spec.start`, `YYYY-MM-DD`) as a UTC-substituted Date at
+// 00:00, or undefined if unset/malformed. `start` is a plain date in the
+// producer's tz — the backend parses it as a NaiveDate and compares by date.
+function startDate(spec: PartitionSpec): Date | undefined {
+	if (!spec.start || !isValidStart(spec.start)) return undefined
+	const m = spec.start.match(/^(\d{4})-(\d{2})-(\d{2})$/)!
+	return new Date(Date.UTC(Number(m[1]), Number(m[2]) - 1, Number(m[3])))
+}
+
+// True when `at` (localized to the producer tz) falls on a date before the
+// `start=` anchor — exactly the backend's `local.date_naive() < start_date`
+// check (`resolve_time_partition`), which resolves such an instant to no
+// partition.
+export function isBeforeStart(spec: PartitionSpec, at: Date): boolean {
+	const start = startDate(spec)
+	if (!start) return false
+	const zoned = zonedAsUtc(at, spec.tz ?? 'UTC')
+	const zonedDate = Date.UTC(zoned.getUTCFullYear(), zoned.getUTCMonth(), zoned.getUTCDate())
+	return zonedDate < start.getTime()
+}
+
+// The canonical bucket of the `start=` anchor (its date at 00:00), or undefined
+// if unset. Buckets sort lexicographically within a cadence, so callers can
+// compare against it to drop pre-start buckets.
+export function startBucketOf(spec: PartitionSpec): string | undefined {
+	const start = startDate(spec)
+	return start ? fmtBucket(spec.kind, start) : undefined
+}
+
+// The bucket to pre-fill the picker with. Normally the current bucket (matching
+// the backend's "absent partition arg -> current bucket" resolution), but when
+// the current instant is before the `start=` anchor the backend would resolve
+// to NO partition — so default to the first valid bucket (the start) rather
+// than a pre-start one the worker would take verbatim and materialize early.
+export function defaultBucket(spec: PartitionSpec, at: Date): string {
+	if (isBeforeStart(spec, at)) {
+		const start = startDate(spec)
+		if (start) return fmtBucket(spec.kind, start)
+	}
+	return bucketFor(spec, at)
+}
+
+// Native input value -> canonical bucket. Only hourly differs: datetime-local
+// carries a minute component the hourly bucket drops. The picked wall-clock is
+// taken verbatim as the bucket (the user picks in the producer's frame), so no
+// timezone conversion happens here.
+export function bucketFromInputValue(spec: PartitionSpec, inputValue: string): string {
+	if (!inputValue) return ''
+	if (spec.kind === 'hourly') {
+		const m = inputValue.match(/^(\d{4}-\d{2}-\d{2}T\d{2})/)
+		return m ? m[1] : inputValue
+	}
+	return inputValue
+}
+
+// Canonical bucket -> native input value. Only hourly differs: datetime-local
+// needs a minute component the bucket omits.
+export function inputValueFromBucket(spec: PartitionSpec, bucket: string): string {
+	if (!bucket) return ''
+	if (spec.kind === 'hourly') {
+		return /T\d{2}$/.test(bucket) ? `${bucket}:00` : bucket
+	}
+	return bucket
+}
+
+// The last `count` buckets ending at (and including) `now`, most-recent first,
+// localized to `spec.tz`. Arithmetic walks calendar units in the zoned frame,
+// so it's exact across DST (no ±1 drift). Undefined for non-calendar specs
+// (the caller guards on `usesCalendarPicker`).
+export function recentBuckets(spec: PartitionSpec, now: Date, count: number): string[] {
+	const base = zonedAsUtc(now, spec.tz ?? 'UTC')
+	const out: string[] = []
+	for (let i = 0; i < count; i++) {
+		const d = new Date(base)
+		switch (spec.kind) {
+			case 'hourly':
+				d.setUTCHours(d.getUTCHours() - i)
+				break
+			case 'weekly':
+				d.setUTCDate(d.getUTCDate() - 7 * i)
+				break
+			case 'monthly':
+				// Normalize to the 1st first so subtracting months can't roll over
+				// a short target month (e.g. Mar 31 − 1mo → Mar 3).
+				d.setUTCDate(1)
+				d.setUTCMonth(d.getUTCMonth() - i)
+				break
+			default:
+				d.setUTCDate(d.getUTCDate() - i)
+		}
+		out.push(fmtBucket(spec.kind, d))
+	}
+	return out
+}
+
+// How many recent buckets the "missing partitions" hint scans, per kind — a
+// window that reads as "recent" for each cadence without flooding the hint.
+export function recentWindow(kind: PartitionSpec['kind']): number {
+	switch (kind) {
+		case 'hourly':
+			return 24
+		case 'weekly':
+			return 8
+		case 'monthly':
+			return 6
+		default:
+			return 14
+	}
+}
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte
index ab36b4c1f7..e15c3abdf7 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/+page.svelte
@@ -1,6 +1,7 @@
 <script lang="ts">
-	import { userStore } from '$lib/stores'
+	import { userStore, workspaceStore } from '$lib/stores'
 	import PipelineFolderList from '$lib/components/assets/AssetGraph/PipelineFolderList.svelte'
+	import PipelineSetupSignpost from '$lib/components/assets/AssetGraph/PipelineSetupSignpost.svelte'
 	import PipelineAlphaAckModal from '$lib/components/assets/AssetGraph/PipelineAlphaAckModal.svelte'
 	import { BookOpen, NetworkIcon } from 'lucide-svelte'
 	import { onMount } from 'svelte'
@@ -73,6 +74,10 @@
 				</a>
 			</div>
 
+			{#if !$userStore?.operator && $workspaceStore}
+				<PipelineSetupSignpost workspace={$workspaceStore} />
+			{/if}
+
 			<PipelineFolderList />
 		</div>
 	</div>

From 2d3a77344104a587548f23f1b614ceffd52a5778 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 00:11:25 +0200
Subject: [PATCH 61/76] feat(pipelines): mid-DAG selective execution (dbt
 `model+`) for pipeline runs (#9945)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(pipelines): mid-DAG selective execution (dbt `model+`) for pipeline runs

Relax the root-only constraint on bounded-cascade starts so `--from` can name
any node in a pipeline — not just a schedule/manual root. A mid-DAG start runs
that node plus its transitive downstream and never re-runs upstream, giving
dbt's most common gesture (`dbt run --select model+`) a direct form:

    wmill pipeline run f/orders --from fct_orders_daily

Previously this errored with "Starts must be schedule-triggered or manual
roots". The bounded-run engine already computed downstream/path-between sets
generically; only the eligibility gate was root-only.

- Shared engine (`boundedCascade.ts`, CLI + frontend mirror): add
  `validFromStarts` — every autorun-able script (roots AND mid-DAG asset
  subscribers / pure readers), excluding only event/input-only handlers
  (kafka/mqtt/…/webhook/data_upload) that can't run with empty args.
- CLI: `--from` accepts any `validFromStarts` node; asset `--from` and
  non-autorun handlers still rejected (the latter runnable via `--upload`). An
  explicit mid-DAG start is protected from the barrier cut. Help text + regenerated
  system_prompts describe the new surface.
- Frontend graph UI parity: any node with downstream now offers "Run + downstream…"
  (was roots-only). With no end picked the bounded-run bar runs the full downstream
  closure (`model+`); picking end(s) still bounds the path-between set.
- Unit tests for the new selection semantics in both engines.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): address CI review — scheduled-root --from regression + pick-mode barrier parity

Codex review findings on #9945:

- P1: explicit `--from` rejected a scheduled root that also carries a secondary
  non-autorun trigger (e.g. `// on schedule` + `// on data_upload`), even though
  it stays a valid IMPLICIT start. `validFromStarts` excluded anything in
  `nonAutorunTriggerScripts`; now it unions in `validStarts` (which lets the
  schedule identity win over the secondary trigger), so a scheduled root is
  `--from`-eligible in both CLI and the graph UI. Regression tests added in both
  engines.

- P2: bounded-pick mode built `eligible` (pickable end bounds) from raw
  `descendants`, so an event handler — or a node only reachable through one —
  could be clicked as an end yet be silently dropped from the barrier-cut run.
  `eligible` is now the barrier-cut closure, so those nodes are dimmed and
  non-pickable. The highlighted `bounded` ring now also reflects the actual
  (barrier-cut) run set, including the no-ends "Run + downstream" case.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): frontend barrier set must exclude all valid roots, not just the picked start

Codex review follow-up: the frontend `boundReachable` barrier set only protected
the picked start (`id !== boundPickStart`), while the CLI protects every valid
root (`!starts.has(id)`). So a scheduled root that also carries an event trigger,
reached downstream from another start, was wrongly treated as a barrier — the UI
dimmed/skipped it and its downstream, diverging from the CLI run set.

Exclude `validStarts` from the barrier set too (a scheduled/manual root runs on
its own identity even with a secondary event trigger). Regression test asserts a
scheduled-event root and its downstream stay reachable from an upstream start,
and that the naive (start-only) barrier set would have dropped them.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): frontend must exclude webhook/data_upload as mid-DAG autorun starts

Codex review follow-up: the frontend `validFromStarts` only excluded
`EVENT_TRIGGER_KINDS`, so a mid-DAG `webhook`/`data_upload` subscriber was added
by the new eligibility loop — the UI would offer "Run + downstream" and launch it
with empty args (no uploaded S3Object / webhook body). The CLI mirror already
excludes these input-only kinds.

Add a frontend `NON_AUTORUN_TRIGGER_KINDS` (event kinds + webhook + data_upload),
mirroring the CLI, and use it in both `validFromStarts` (exclude such mid-DAG
handlers from starts) and `nonAutorunTriggerScripts` (cut them as barriers).
When the marker is visible (editor overlay / draft) these are now handled
exactly as the CLI does; the deployed-graph blind spot (no webhook/data_upload
rows) remains the documented pre-existing `validStarts` limitation.

Regression test: a `data_upload`/`webhook` mid-DAG subscriber is not an eligible
start and is barrier-cut (with its exclusive downstream) when running from an
upstream root.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 cli/src/commands/pipeline/boundedCascade.ts   |  26 +++
 cli/src/commands/pipeline/pipeline.ts         |  53 ++++--
 cli/src/guidance/skills.gen.ts                |   4 +-
 .../pipeline_bounded_cascade_unit.test.ts     |  53 ++++++
 .../assets/AssetGraph/AssetGraphCanvas.svelte |   4 +-
 .../assets/AssetGraph/RunnableNode.svelte     |   6 +-
 .../assets/AssetGraph/TriggerNode.svelte      |   2 +-
 .../assets/AssetGraph/boundedCascade.test.ts  | 164 +++++++++++++++++-
 .../assets/AssetGraph/boundedCascade.ts       |  97 ++++++++++-
 .../(logged)/pipeline/[folder]/+page.svelte   |  56 ++++--
 .../auto-generated/cli/cli-commands.md        |   4 +-
 system_prompts/auto-generated/prompts.ts      |   4 +-
 .../skills/cli-commands/SKILL.md              |   4 +-
 13 files changed, 436 insertions(+), 41 deletions(-)

diff --git a/cli/src/commands/pipeline/boundedCascade.ts b/cli/src/commands/pipeline/boundedCascade.ts
index 16b25f0ebe..8abcbe1596 100644
--- a/cli/src/commands/pipeline/boundedCascade.ts
+++ b/cli/src/commands/pipeline/boundedCascade.ts
@@ -215,6 +215,32 @@ export function validStarts(g: BCGraph): Set<string> {
   return out;
 }
 
+/**
+ * Script node ids eligible as an EXPLICIT bounded-run start from *anywhere* in
+ * the DAG (dbt's `--select model+`): every script that can run with empty args —
+ * i.e. all scripts except non-autorun-trigger ones (kafka/mqtt/…/webhook/
+ * data_upload, which fan out per event or need caller-supplied input). Unlike
+ * `validStarts` (schedule/manual roots only), this INCLUDES mid-DAG asset
+ * subscribers and pure readers, so `--from <mid-model>` runs that node plus its
+ * transitive downstream WITHOUT re-running upstream. Roots stay a subset of this
+ * set. A non-autorun handler still qualifies once it's `--upload`-bound (handled
+ * by the caller, which unions in the bound node ids).
+ */
+export function validFromStarts(g: BCGraph): Set<string> {
+  const nonAutorun = nonAutorunTriggerScripts(g);
+  // Seed with the schedule/manual roots: `validStarts` lets a schedule identity
+  // win over a secondary non-autorun trigger (a `// on schedule` + `// on
+  // data_upload` script IS a scheduled root), so a root must stay `--from`-
+  // eligible even though it's also in `nonAutorunTriggerScripts`.
+  const out = new Set<string>(validStarts(g));
+  for (const r of g.runnables ?? []) {
+    if (r.usage_kind !== "script") continue;
+    const id = scriptNodeId(r.path);
+    if (!nonAutorun.has(id)) out.add(id);
+  }
+  return out;
+}
+
 /**
  * Script node ids that carry a trigger requiring caller-supplied input or
  * per-event fanout (kafka/mqtt/nats/postgres/sqs/gcp/email/webhook/data_upload).
diff --git a/cli/src/commands/pipeline/pipeline.ts b/cli/src/commands/pipeline/pipeline.ts
index 5e686fcf57..2d207444eb 100644
--- a/cli/src/commands/pipeline/pipeline.ts
+++ b/cli/src/commands/pipeline/pipeline.ts
@@ -20,6 +20,7 @@ import {
   scriptsOf,
   topoOrder,
   validStarts,
+  validFromStarts,
 } from "./boundedCascade.ts";
 import {
   type AssetGraph,
@@ -445,13 +446,15 @@ function formatJobFailure(result: unknown): string | undefined {
   }
 }
 
-// Bounded-cascade run: start at a schedule / manual root, fan downstream, but
-// stop at the `--to` end node(s). Scripts run in topological order; each is
-// launched with `_wmill_skip_asset_dispatch` so the CLI owns the whole closure
-// (the backend dispatcher never double-fires the deployed part). With no
-// `--to`, runs the full read-aware downstream of `--from` (every descendant in
-// the lineage DAG, pure readers included — broader than the canvas cascade,
-// which dispatches subscribers only).
+// Bounded-cascade run: start at `--from` — a schedule/manual root OR any mid-DAG
+// model (asset subscriber / pure reader) — fan downstream, but stop at the
+// `--to` end node(s). A mid-DAG start runs that node plus its transitive
+// downstream and never re-runs upstream (dbt `--select model+`). Scripts run in
+// topological order; each is launched with `_wmill_skip_asset_dispatch` so the
+// CLI owns the whole closure (the backend dispatcher never double-fires the
+// deployed part). With no `--to`, runs the full read-aware downstream of
+// `--from` (every descendant in the lineage DAG, pure readers included — broader
+// than the canvas cascade, which dispatches subscribers only).
 // Resolve one `--upload` binding to the run-arg it injects: pick the target
 // S3Object parameter (explicit `:param`, else the script's sole S3Object arg)
 // and turn the source into an object key — an `s3://` source is used as-is, a
@@ -669,13 +672,26 @@ async function run(
       .map((r) => r.path),
   );
 
-  // Resolve the start: explicit --from (must be a valid start) or the folder's
-  // sole valid start. `--upload`-bound scripts join the valid starts.
+  // Resolve the start. Two eligibility sets:
+  //   `starts`       — schedule/manual roots (+ `--upload`-bound handlers). The
+  //                    fan-in candidates for an IMPLICIT start (`runAll`, or the
+  //                    folder's sole root).
+  //   `fromEligible` — every autorun-able script, roots AND mid-DAG models
+  //                    (asset subscribers, pure readers). An EXPLICIT `--from`
+  //                    may name any of these: `--from <mid-model>` runs that node
+  //                    plus its transitive downstream, without re-running upstream
+  //                    (dbt `--select model+`). Non-autorun handlers stay out
+  //                    unless `--upload`-bound.
   const starts = new Set(
     [...validStarts(graph), ...boundNodeIds].filter(
       (id) => !macroLibPaths.has(scriptPathOf(id)),
     ),
   );
+  const fromEligible = new Set(
+    [...validFromStarts(graph), ...boundNodeIds].filter(
+      (id) => !macroLibPaths.has(scriptPathOf(id)),
+    ),
+  );
   // `runAll` = no `--from` on a multi-root pipeline (fan-in): run the whole
   // pipeline in topological order rather than forcing a single start, the way
   // `dbt run` (no `--select`) runs the entire project. `--to` still needs an
@@ -702,9 +718,14 @@ async function run(
         `--from '${opts.from}' is a \`// macros\` library — definition-only, injected into consuming scripts at run time, never a runnable step.`,
       );
     }
-    if (!starts.has(resolved)) {
+    if (!resolved.startsWith("script:")) {
       throw new Error(
-        `--from '${opts.from}' is not a valid bounded-run start. Starts must be schedule-triggered or manual roots; row-backed event triggers (kafka/mqtt/nats/postgres/sqs/gcp/email) fan out per-event and can't be bounded.`,
+        `--from '${opts.from}' is an asset, not a runnable — start a run from a script (assets are produced, not run).`,
+      );
+    }
+    if (!fromEligible.has(resolved)) {
+      throw new Error(
+        `--from '${opts.from}' can't start a run: row-backed event triggers (kafka/mqtt/nats/postgres/sqs/gcp/email) and input-only entrypoints (webhook/data_upload) fan out per-event or need caller-supplied input — bind it with --upload to run it.`,
       );
     }
     start = resolved;
@@ -762,8 +783,12 @@ async function run(
   // barriers: a valid start (a schedule/manual root, or an `--upload`-bound
   // handler) runs with its own input even if it ALSO carries a non-autorun
   // trigger — cutting it would drop a legitimately-scheduled root and its chain.
+  // An explicit mid-DAG `--from` is likewise protected: the user named it as the
+  // start, so it runs even if it also carries a non-autorun trigger.
   const barriers = new Set(
-    [...nonAutorunTriggerScripts(graph)].filter((id) => !starts.has(id)),
+    [...nonAutorunTriggerScripts(graph)].filter(
+      (id) => !starts.has(id) && id !== start,
+    ),
   );
   let selectedScripts: Set<string>;
   let reachableEnds: string[] = [];
@@ -994,12 +1019,12 @@ const command = new Command()
   .action(show as any)
   .command(
     "run",
-    "run a bounded cascade: from a schedule/manual root, fan downstream up to the --to end node(s)",
+    "run a cascade: from --from (a root OR any mid-DAG model), fan downstream up to the --to end node(s)",
   )
   .arguments("<folder:string>")
   .option(
     "--from <script:string>",
-    "Start script (short name or path). Defaults to the folder's sole schedule/manual root.",
+    "Start script (short name or path). May be any node, including a mid-DAG model — that node plus its transitive downstream runs, upstream is NOT re-run (dbt `--select model+`). Defaults to the folder's sole schedule/manual root.",
   )
   .option(
     "--to <node:string>",
diff --git a/cli/src/guidance/skills.gen.ts b/cli/src/guidance/skills.gen.ts
index b6d9394179..6e2c1d7723 100644
--- a/cli/src/guidance/skills.gen.ts
+++ b/cli/src/guidance/skills.gen.ts
@@ -6934,8 +6934,8 @@ inspect asset-driven pipelines (scripts marked \`// pipeline\`, wired by \`// on
 - \`pipeline show <folder:string>\` - render a pipeline folder's DAG (sources, lineage, subscriptions) in the terminal
   - \`--json\` - Output the raw asset graph as JSON
   - \`--local\` - Build the graph from local working-tree files (// pipeline scripts) instead of the deployed workspace — no deploy needed.
-- \`pipeline run <folder:string>\` - run a bounded cascade: from a schedule/manual root, fan downstream up to the --to end node(s)
-  - \`--from <script:string>\` - Start script (short name or path). Defaults to the folder's sole schedule/manual root.
+- \`pipeline run <folder:string>\` - run a cascade: from --from (a root OR any mid-DAG model), fan downstream up to the --to end node(s)
+  - \`--from <script:string>\` - Start script (short name or path). May be any node, including a mid-DAG model — that node plus its transitive downstream runs, upstream is NOT re-run (dbt \`--select model+\`). Defaults to the folder's sole schedule/manual root.
   - \`--to <node:string>\` - End node(s) to stop at — script names/paths or asset URIs (e.g. datatable://main/staged). Repeatable or comma-separated. Omit to run the full downstream.
   - \`--dry-run\` - Print the topological run plan without executing.
   - \`--json\` - Output the plan as JSON (for piping to jq).
diff --git a/cli/test/pipeline_bounded_cascade_unit.test.ts b/cli/test/pipeline_bounded_cascade_unit.test.ts
index 271d231839..6a0f4543b4 100644
--- a/cli/test/pipeline_bounded_cascade_unit.test.ts
+++ b/cli/test/pipeline_bounded_cascade_unit.test.ts
@@ -15,6 +15,7 @@ import {
   scriptsOf,
   topoOrder,
   validStarts,
+  validFromStarts,
   nonAutorunTriggerScripts,
   reachableCutting,
   isScriptNode,
@@ -154,6 +155,58 @@ test("a scheduled root with a secondary data_upload trigger stays a start and is
   expect(sel.has("consumer")).toBe(true); // …and its downstream isn't cut off
 });
 
+test("validFromStarts: mid-DAG models are eligible starts, event/upload/webhook are not", () => {
+  // a(root) → x → sub → y → reader ; k=kafka, upl=data_upload, hook=webhook.
+  const g = graph({
+    scripts: ["a", "sub", "reader", "k", "upl", "hook"],
+    writes: [["a", "x"], ["sub", "y"]],
+    reads: [["reader", "y"]],
+    subs: [["sub", "x"]],
+    native: [["kafka", "k"], ["data_upload", "upl"], ["webhook", "hook"]],
+  });
+  const from = validFromStarts(g);
+  expect(from.has(sn("a"))).toBe(true); // root
+  expect(from.has(sn("sub"))).toBe(true); // mid-DAG subscriber — NOT a validStart
+  expect(from.has(sn("reader"))).toBe(true); // pure reader
+  expect(validStarts(g).has(sn("sub"))).toBe(false); // old root-only gate rejected it
+  // Non-autorun handlers stay out (they need caller input / fan out per event).
+  expect(from.has(sn("k"))).toBe(false);
+  expect(from.has(sn("upl"))).toBe(false);
+  expect(from.has(sn("hook"))).toBe(false);
+});
+
+test("validFromStarts keeps a scheduled root that also carries a non-autorun trigger", () => {
+  // Regression: `--from sched_upload` must be accepted just like the implicit
+  // start. `sched_upload` is a scheduled root AND a data_upload handler — schedule
+  // wins in validStarts, so it stays --from-eligible despite being a nonAutorun
+  // handler (else explicit --from throws where the implicit start succeeds).
+  const g = graph({
+    scripts: ["sched_upload", "consumer"],
+    writes: [["sched_upload", "x"]],
+    subs: [["consumer", "x"]],
+    native: [["schedule", "sched_upload"], ["data_upload", "sched_upload"]],
+  });
+  expect(validStarts(g).has(sn("sched_upload"))).toBe(true);
+  expect(nonAutorunTriggerScripts(g).has(sn("sched_upload"))).toBe(true);
+  expect(validFromStarts(g).has(sn("sched_upload"))).toBe(true); // union with roots
+});
+
+test("a mid-DAG start runs itself + downstream, never upstream", () => {
+  // Starting at `sub`, the unbounded downstream is {sub, reader}; `a`/`x` upstream
+  // are never pulled in (dbt `--select sub+`).
+  const g = graph({
+    scripts: ["a", "sub", "reader"],
+    writes: [["a", "x"], ["sub", "y"]],
+    reads: [["reader", "y"]],
+    subs: [["sub", "x"]],
+  });
+  const dag = buildLineageDag(g);
+  const downstream = new Set([sn("sub"), ...descendants(dag, sn("sub"))]);
+  expect(sorted(scriptsOf(downstream))).toEqual(["reader", "sub"]);
+  expect(downstream.has(sn("a"))).toBe(false);
+  expect(downstream.has("datatable:x")).toBe(false);
+});
+
 test("nonAutorunTriggerScripts: event + upload/webhook handlers, incl. subscribers (descendants)", () => {
   const g = graph({
     scripts: ["a", "evt", "upl"],
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index 53097f5379..6f8460fa10 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -142,8 +142,8 @@
 		// editor passes it, so the asset-graph page is unaffected. The page
 		// clears it once the pan has had time to settle.
 		panToNodeId?: string | undefined
-		// Script paths eligible to *start* a bounded-cascade run (schedule
-		// roots + manual roots — see boundedCascade.validStarts). When a path is
+		// Script paths eligible to *start* a bounded-cascade run — roots AND
+		// mid-DAG models (see boundedCascade.validFromStarts). When a path is
 		// in this set and `onStartBoundedRun` is wired, its node's cascade menu
 		// gains a "Run downstream up to…" entry.
 		validStartPaths?: ReadonlySet<string>
diff --git a/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte b/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
index 6bbf8f5656..4cb65ee8f3 100644
--- a/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/RunnableNode.svelte
@@ -410,10 +410,10 @@
 								>
 									<Target size={14} class="mt-0.5 shrink-0 text-secondary" />
 									<div class="flex flex-col min-w-0">
-										<span class="font-medium">Run downstream up to…</span>
+										<span class="font-medium">Run + downstream…</span>
 										<span class="text-2xs text-secondary">
-											Pick end node(s) on the graph, then run only the cascade between this script
-											and them.
+											Run this script and everything downstream. Or pick end node(s) on the graph to
+											bound the cascade between this script and them.
 										</span>
 									</div>
 								</button>
diff --git a/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte b/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte
index caf7d90482..b888ae226a 100644
--- a/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte
@@ -183,7 +183,7 @@
 		...(data.onStartBoundedRun
 			? [
 					{
-						displayName: 'Run downstream up to…',
+						displayName: 'Run + downstream…',
 						icon: Target,
 						action: () => data.onStartBoundedRun?.()
 					}
diff --git a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
index 0c3b9dea64..552733a841 100644
--- a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
@@ -7,9 +7,12 @@ import {
 	buildLineageDag,
 	buildLineageDownstreamMap,
 	descendants,
+	nonAutorunTriggerScripts,
+	reachableCutting,
 	scriptNodeId,
 	scriptsOf,
-	validStarts
+	validStarts,
+	validFromStarts
 } from './boundedCascade'
 import { computeInducedSchedule } from './graphTraversal'
 
@@ -273,6 +276,165 @@ describe('validStarts', () => {
 	})
 })
 
+describe('validFromStarts (mid-DAG selective execution)', () => {
+	// a → x → sub (subscriber) → y → reader (pure read). `k` is event-triggered.
+	const g = () =>
+		graph({
+			scripts: ['a', 'sub', 'reader', 'k'],
+			writes: [
+				['a', 'x'],
+				['sub', 'y']
+			],
+			reads: [['reader', 'y']],
+			subs: [['sub', 'x']],
+			native: [['kafka', 'k']]
+		})
+
+	it('includes mid-DAG subscribers and pure readers, not just roots', () => {
+		const from = validFromStarts(g())
+		expect(from.has(sn('a'))).toBe(true) // root
+		expect(from.has(sn('sub'))).toBe(true) // mid-DAG subscriber — NOT a validStart
+		expect(from.has(sn('reader'))).toBe(true) // pure reader
+		// The old root-only gate would have rejected the mid-DAG nodes.
+		expect(validStarts(g()).has(sn('sub'))).toBe(false)
+	})
+
+	it('excludes event-triggered scripts (no run-now gesture)', () => {
+		expect(validFromStarts(g()).has(sn('k'))).toBe(false)
+	})
+
+	it('excludes webhook/data_upload mid-DAG subscribers (need caller input)', () => {
+		// a → x → upload_mid (subscribes x AND `// on data_upload`) → y → consumer.
+		// upload_mid must NOT be an eligible start (empty-arg run has no S3Object),
+		// and must be a barrier so `consumer` isn't run with a skipped producer.
+		const g2 = graph({
+			scripts: ['a', 'upload_mid', 'hook_mid', 'consumer'],
+			writes: [
+				['a', 'x'],
+				['upload_mid', 'y']
+			],
+			subs: [
+				['upload_mid', 'x'],
+				['hook_mid', 'x'],
+				['consumer', 'y']
+			],
+			native: [
+				['data_upload', 'upload_mid'],
+				['webhook', 'hook_mid']
+			]
+		})
+		const from = validFromStarts(g2)
+		expect(from.has(sn('upload_mid'))).toBe(false)
+		expect(from.has(sn('hook_mid'))).toBe(false)
+		expect(from.has(sn('a'))).toBe(true) // the plain root is still eligible
+		// and they're barriers, so running downstream from `a` cuts them + consumer.
+		const bars = nonAutorunTriggerScripts(g2)
+		expect(bars.has(sn('upload_mid'))).toBe(true)
+		expect(bars.has(sn('hook_mid'))).toBe(true)
+		expect(scriptsOf(reachableCutting(buildLineageDag(g2), [sn('a')], bars)).sort()).toEqual(['a'])
+	})
+
+	it('keeps a scheduled root that also carries an event trigger', () => {
+		// schedule wins over the secondary kafka trigger in validStarts, so the
+		// scheduled root stays --from-eligible (regression guard).
+		const g2 = graph({
+			scripts: ['sched_evt', 'consumer'],
+			writes: [['sched_evt', 'x']],
+			subs: [['consumer', 'x']],
+			native: [
+				['schedule', 'sched_evt'],
+				['kafka', 'sched_evt']
+			]
+		})
+		expect(validStarts(g2).has(sn('sched_evt'))).toBe(true)
+		expect(nonAutorunTriggerScripts(g2).has(sn('sched_evt'))).toBe(true)
+		expect(validFromStarts(g2).has(sn('sched_evt'))).toBe(true) // union with roots
+	})
+
+	it('runs a mid-DAG start plus its downstream WITHOUT re-running upstream', () => {
+		// Starting at `sub`, the unbounded downstream is {sub, y, reader} — `a`/`x`
+		// upstream are never pulled in (dbt `--select sub+`).
+		const dag = buildLineageDag(g())
+		const downstream = new Set([sn('sub'), ...descendants(dag, sn('sub'))])
+		expect(scriptsOf(downstream).sort()).toEqual(['reader', 'sub'])
+		expect(downstream.has(sn('a'))).toBe(false)
+		expect(downstream.has(asset('x'))).toBe(false)
+	})
+})
+
+describe('reachableCutting (barrier cut for "Run + downstream")', () => {
+	// a → x → k(kafka, also reads x) → z → consumer. Starting at `a` and running
+	// downstream must cut the event handler `k` AND `consumer` (only reachable
+	// through it) — else they'd launch with empty args. Mirrors the CLI cut.
+	const g = () =>
+		graph({
+			scripts: ['a', 'k', 'consumer'],
+			writes: [
+				['a', 'x'],
+				['k', 'z']
+			],
+			reads: [['k', 'x']],
+			subs: [['consumer', 'z']],
+			native: [['kafka', 'k']]
+		})
+
+	it('detects event-triggered scripts as barriers', () => {
+		expect(nonAutorunTriggerScripts(g()).has(sn('k'))).toBe(true)
+		expect(nonAutorunTriggerScripts(g()).has(sn('a'))).toBe(false)
+	})
+
+	it('cuts an event descendant and its event-only downstream from a run set', () => {
+		const dag = buildLineageDag(g())
+		const barriers = nonAutorunTriggerScripts(g())
+		const runNodes = reachableCutting(dag, [sn('a')], barriers)
+		expect(scriptsOf(runNodes).sort()).toEqual(['a']) // k + consumer cut
+		expect(runNodes.has(sn('k'))).toBe(false)
+		expect(runNodes.has(sn('consumer'))).toBe(false)
+	})
+
+	it('protects an explicit start even if it carries an event trigger', () => {
+		const dag = buildLineageDag(g())
+		// start = k itself (user named it); it runs, and so does its downstream.
+		const barriers = new Set([...nonAutorunTriggerScripts(g())].filter((id) => id !== sn('k')))
+		const runNodes = reachableCutting(dag, [sn('k')], barriers)
+		expect(scriptsOf(runNodes).sort()).toEqual(['consumer', 'k'])
+	})
+
+	it('keeps a scheduled event root (and its downstream) reachable from an upstream start', () => {
+		// a → x → sched_evt(schedule + kafka) → y → consumer. Running downstream
+		// from `a`, sched_evt is a scheduled root so it must NOT be a barrier even
+		// though it carries an event trigger — matching the CLI, which excludes all
+		// valid roots (`starts`), not just the picked start. Mirror of the page's
+		// barrier construction: nonAutorunTriggerScripts minus validStarts minus start.
+		const g2 = graph({
+			scripts: ['a', 'sched_evt', 'consumer'],
+			writes: [
+				['a', 'x'],
+				['sched_evt', 'y']
+			],
+			subs: [
+				['sched_evt', 'x'],
+				['consumer', 'y']
+			],
+			native: [
+				['schedule', 'sched_evt'],
+				['kafka', 'sched_evt']
+			]
+		})
+		const dag = buildLineageDag(g2)
+		const roots = validStarts(g2)
+		const barriers = new Set(
+			[...nonAutorunTriggerScripts(g2)].filter((id) => !roots.has(id) && id !== sn('a'))
+		)
+		const runNodes = reachableCutting(dag, [sn('a')], barriers)
+		expect(scriptsOf(runNodes).sort()).toEqual(['a', 'consumer', 'sched_evt'])
+		// Without the validStarts exclusion, sched_evt (a kafka handler) would be a
+		// barrier and `consumer` would be dropped — the bug this guards.
+		const naiveBarriers = new Set([...nonAutorunTriggerScripts(g2)].filter((id) => id !== sn('a')))
+		expect(scriptsOf(reachableCutting(dag, [sn('a')], naiveBarriers)).sort()).toEqual(['a'])
+	})
+})
+
 describe('buildLineageDownstreamMap (read-aware scheduling)', () => {
 	// a writes x; c only *reads* x (no `// on x`). c must still run after a.
 	const g = graph({
diff --git a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
index 8b401d8017..de3e78452a 100644
--- a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
@@ -44,8 +44,6 @@ export function assetUriToNodeId(uri: string): string | undefined {
 // Native trigger kinds that fan out *per event*: a single event always flows
 // through the whole reactive downstream, so "run up to X now" is not a
 // meaningful gesture and these are never offered as bounded-run starts.
-// `webhook`/`data_upload` have no trigger row in `/assets/graph`, so a root
-// whose only entry is one of those reads as a *manual* root below.
 const EVENT_TRIGGER_KINDS: ReadonlySet<string> = new Set<NativeTriggerKind>([
 	'kafka',
 	'mqtt',
@@ -56,6 +54,20 @@ const EVENT_TRIGGER_KINDS: ReadonlySet<string> = new Set<NativeTriggerKind>([
 	'email'
 ])
 
+// Trigger kinds a cascade must NOT auto-run: the per-event kinds above PLUS the
+// input-only entrypoints `webhook`/`data_upload`, which need caller-supplied
+// input (a request body / an uploaded S3Object) and would run the wrong thing
+// with empty args. Mirror of the CLI `NON_AUTORUN_TRIGGER_KINDS`. When the
+// deployed `/assets/graph` omits a `webhook`/`data_upload` row (it has none for
+// them), such a script simply reads as a manual root here — but whenever the
+// marker IS visible (editor overlay / draft), it's excluded from bounded-run
+// starts and cut as a barrier, exactly as the CLI does.
+const NON_AUTORUN_TRIGGER_KINDS: ReadonlySet<string> = new Set<string>([
+	...EVENT_TRIGGER_KINDS,
+	'webhook',
+	'data_upload'
+])
+
 export type LineageDag = {
 	/** upstream node id → set of direct downstream node ids. */
 	down: Map<string, Set<string>>
@@ -152,6 +164,37 @@ export function ancestors(dag: LineageDag, n: string): Set<string> {
 	return closure(dag.up, n)
 }
 
+/**
+ * Nodes reachable from `starts` over the lineage DAG, treating `barriers` as cut
+ * points: a barrier node is neither included NOR traversed through, so a node
+ * reachable ONLY via a barrier is excluded while one also reachable via another
+ * path stays. Mirror of the CLI `reachableCutting`. Used to keep event handlers
+ * (and their event-only downstream) out of a cascade run — running such a
+ * consumer whose producer was skipped would feed it missing/stale inputs.
+ */
+export function reachableCutting(
+	dag: LineageDag,
+	starts: Iterable<string>,
+	barriers: Set<string>
+): Set<string> {
+	const seen = new Set<string>()
+	const queue: string[] = []
+	for (const s of starts) {
+		if (barriers.has(s) || seen.has(s)) continue
+		seen.add(s)
+		queue.push(s)
+	}
+	while (queue.length > 0) {
+		const n = queue.shift()!
+		for (const next of dag.down.get(n) ?? []) {
+			if (barriers.has(next) || seen.has(next)) continue
+			seen.add(next)
+			queue.push(next)
+		}
+	}
+	return seen
+}
+
 export type BoundedResult = {
 	/** Path-between node set (scripts + assets), always including `start`. */
 	nodes: Set<string>
@@ -215,6 +258,56 @@ export function validStarts(g: AssetGraphResponse): Set<string> {
 	return out
 }
 
+/**
+ * Script node ids eligible as an EXPLICIT bounded-run start from *anywhere* in
+ * the DAG (dbt's `--select model+`): every script that can run with empty args —
+ * i.e. all scripts except event-triggered ones (kafka/mqtt/nats/postgres/sqs/
+ * gcp/email fan out per event and have no "run now" gesture). Unlike
+ * `validStarts` (schedule/manual roots only), this INCLUDES mid-DAG asset
+ * subscribers and pure readers, so "Run + downstream" can begin at any model —
+ * that node plus its transitive downstream runs, upstream is never re-run.
+ * (`webhook`/`data_upload` have no trigger row here — same as `validStarts` they
+ * read as manual roots and are already included.)
+ */
+export function validFromStarts(g: AssetGraphResponse): Set<string> {
+	const nonAutorunScripts = new Set<string>()
+	for (const t of g.triggers ?? []) {
+		if (t.runnable_kind !== 'script') continue
+		if (NON_AUTORUN_TRIGGER_KINDS.has(t.trigger_kind)) nonAutorunScripts.add(t.runnable_path)
+	}
+	// Seed with schedule/manual roots: `validStarts` lets a schedule identity win
+	// over a secondary non-autorun trigger, so a scheduled root that also carries
+	// e.g. a `// on kafka` stays `--from`-eligible. The mid-DAG loop then adds only
+	// scripts that can run with empty args — a `webhook`/`data_upload` subscriber
+	// is NOT added (it needs caller-supplied input).
+	const out = new Set<string>(validStarts(g))
+	for (const r of g.runnables ?? []) {
+		if (r.usage_kind !== 'script') continue
+		if (!nonAutorunScripts.has(r.path)) out.add(scriptNodeId(r.path))
+	}
+	return out
+}
+
+/**
+ * Script node ids carrying a non-autorun trigger (event kinds kafka/mqtt/…/email
+ * PLUS input-only webhook/data_upload) — they fan out per event or need
+ * caller-supplied input, so a cascade must cut them (as `barriers` for
+ * `reachableCutting`) even when they're a lineage descendant of the start.
+ * Mirror of the CLI `nonAutorunTriggerScripts`. Only detects what the graph
+ * surfaces: the deployed `/assets/graph` omits `webhook`/`data_upload` rows, so
+ * such a handler is only cut when its marker is visible (editor overlay / draft)
+ * — the same limitation as `validStarts`; the CLI closes it via graph enrichment.
+ */
+export function nonAutorunTriggerScripts(g: AssetGraphResponse): Set<string> {
+	const out = new Set<string>()
+	for (const t of g.triggers ?? []) {
+		if (t.runnable_kind === 'script' && NON_AUTORUN_TRIGGER_KINDS.has(t.trigger_kind)) {
+			out.add(scriptNodeId(t.runnable_path))
+		}
+	}
+	return out
+}
+
 /** Project a node-id set to the script paths it contains (run targets). */
 export function scriptsOf(nodes: Iterable<string>): string[] {
 	const out: string[] = []
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index d09c1be15f..78ce96a1f2 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -47,10 +47,12 @@
 		boundedSet,
 		buildLineageDag,
 		buildLineageDownstreamMap,
-		descendants,
 		isScriptNode,
+		nonAutorunTriggerScripts,
+		reachableCutting,
 		scriptNodeId,
 		scriptsOf,
+		validFromStarts,
 		validStarts
 	} from '$lib/components/assets/AssetGraph/boundedCascade'
 	import {
@@ -1510,7 +1512,11 @@
 	let boundPickEnds = $state<Set<string>>(new Set())
 
 	// Script paths eligible to start a bounded run, for the canvas menu gate.
-	let validStartPaths = $derived(new Set(scriptsOf(validStarts(displayGraph))))
+	// Any node with downstream — roots AND mid-DAG models — can be a "Run +
+	// downstream" start (dbt `model+`); only event-triggered scripts are excluded
+	// (see boundedCascade.validFromStarts). The canvas additionally requires the
+	// node to have lineage downstream before offering the entry.
+	let validStartPaths = $derived(new Set(scriptsOf(validFromStarts(displayGraph))))
 	// Scripts with read-aware downstream — the same gate the canvas applies
 	// (AssetGraphCanvas `hasLineageDownstream`). A valid start with no downstream
 	// has no end to pick, so the bounded-run entry is suppressed everywhere,
@@ -1519,15 +1525,45 @@
 
 	// Rebuilt only while a pick is active (cheap to skip otherwise).
 	let boundDag = $derived(boundPickStart ? buildLineageDag(displayGraph) : undefined)
-	let boundEligible = $derived(
-		boundDag && boundPickStart ? descendants(boundDag, boundPickStart) : new Set<string>()
-	)
 	let boundResult = $derived(
 		boundDag && boundPickStart
 			? boundedSet(boundDag, boundPickStart, [...boundPickEnds])
 			: undefined
 	)
-	let boundScripts = $derived(boundResult ? scriptsOf(boundResult.nodes) : [])
+	// Event handlers (kafka/mqtt/…) can't run with empty args, so they're cut from
+	// any cascade run — as is a consumer reachable only through one. But a
+	// scheduled/manual root is NEVER a barrier even if it also carries an event
+	// trigger: it runs on its own schedule/manual identity (schedule wins in
+	// validStarts), so it — and its downstream — stay reachable when running from
+	// an upstream start. The explicit start is likewise protected. Parity with the
+	// CLI `barriers` set (`nonAutorunTriggerScripts` minus `starts` minus start).
+	let boundReachable = $derived.by(() => {
+		if (!boundDag || !boundPickStart) return new Set<string>()
+		const roots = validStarts(displayGraph)
+		const barriers = new Set(
+			[...nonAutorunTriggerScripts(displayGraph)].filter(
+				(id) => !roots.has(id) && id !== boundPickStart
+			)
+		)
+		return reachableCutting(boundDag, [boundPickStart], barriers)
+	})
+	// Nodes pickable as end bounds: the barrier-cut downstream (excluding the
+	// start), NOT raw descendants — else an event handler or a node only reachable
+	// through one could be clicked as an end yet get silently dropped from the run.
+	let boundEligible = $derived(new Set([...boundReachable].filter((id) => id !== boundPickStart)))
+	// The actual run set (nodes, scripts + assets). No end picked → "Run +
+	// downstream" (dbt `model+`): the start plus its full transitive downstream.
+	// Picking end(s) narrows it to the path-between set. Either way, intersect with
+	// the barrier-cut closure so an event descendant is never launched empty. The
+	// canvas highlights exactly this set, so the ring matches what will run.
+	let boundRunNodes = $derived(
+		boundPickStart
+			? boundPickEnds.size === 0
+				? boundReachable
+				: new Set([...(boundResult?.nodes ?? [])].filter((n) => boundReachable.has(n)))
+			: new Set<string>()
+	)
+	let boundScripts = $derived(scriptsOf(boundRunNodes))
 
 	// Engine id → canvas id: scripts keep `script:path`; assets gain the
 	// canvas's `asset:` prefix (AssetGraphCanvas node ids).
@@ -1545,7 +1581,7 @@
 					start: boundPickStart,
 					eligible: new Set([...boundEligible].map(toCanvasId)),
 					ends: new Set([...boundPickEnds].map(toCanvasId)),
-					bounded: new Set([...(boundResult?.nodes ?? [])].map(toCanvasId))
+					bounded: new Set([...boundRunNodes].map(toCanvasId))
 				}
 			: undefined
 	)
@@ -2374,7 +2410,7 @@
 							<div class="flex flex-col leading-tight">
 								<span class="text-xs font-semibold text-emphasis">
 									{boundPickEnds.size === 0
-										? 'Click end node(s) to bound the run'
+										? `Run + all downstream · ${boundScripts.length} script${boundScripts.length === 1 ? '' : 's'} (click node(s) to bound)`
 										: `${boundScripts.length} script${boundScripts.length === 1 ? '' : 's'} up to ${boundPickEnds.size} end${boundPickEnds.size === 1 ? '' : 's'}`}
 								</span>
 								<span class="text-2xs text-tertiary">
@@ -2386,10 +2422,10 @@
 								variant="accent"
 								unifiedSize="sm"
 								startIcon={{ icon: Play }}
-								disabled={boundPickEnds.size === 0 || boundScripts.length === 0}
+								disabled={boundScripts.length === 0}
 								onclick={confirmBoundedRun}
 							>
-								Run selection
+								{boundPickEnds.size === 0 ? 'Run + downstream' : 'Run selection'}
 							</Button>
 						</div>
 					{/if}
diff --git a/system_prompts/auto-generated/cli/cli-commands.md b/system_prompts/auto-generated/cli/cli-commands.md
index 258e2ae785..01579a737a 100644
--- a/system_prompts/auto-generated/cli/cli-commands.md
+++ b/system_prompts/auto-generated/cli/cli-commands.md
@@ -420,8 +420,8 @@ inspect asset-driven pipelines (scripts marked `// pipeline`, wired by `// on <s
 - `pipeline show <folder:string>` - render a pipeline folder's DAG (sources, lineage, subscriptions) in the terminal
   - `--json` - Output the raw asset graph as JSON
   - `--local` - Build the graph from local working-tree files (// pipeline scripts) instead of the deployed workspace — no deploy needed.
-- `pipeline run <folder:string>` - run a bounded cascade: from a schedule/manual root, fan downstream up to the --to end node(s)
-  - `--from <script:string>` - Start script (short name or path). Defaults to the folder's sole schedule/manual root.
+- `pipeline run <folder:string>` - run a cascade: from --from (a root OR any mid-DAG model), fan downstream up to the --to end node(s)
+  - `--from <script:string>` - Start script (short name or path). May be any node, including a mid-DAG model — that node plus its transitive downstream runs, upstream is NOT re-run (dbt `--select model+`). Defaults to the folder's sole schedule/manual root.
   - `--to <node:string>` - End node(s) to stop at — script names/paths or asset URIs (e.g. datatable://main/staged). Repeatable or comma-separated. Omit to run the full downstream.
   - `--dry-run` - Print the topological run plan without executing.
   - `--json` - Output the plan as JSON (for piping to jq).
diff --git a/system_prompts/auto-generated/prompts.ts b/system_prompts/auto-generated/prompts.ts
index 7b7e3fcf52..374cabb57a 100644
--- a/system_prompts/auto-generated/prompts.ts
+++ b/system_prompts/auto-generated/prompts.ts
@@ -3096,8 +3096,8 @@ inspect asset-driven pipelines (scripts marked \`// pipeline\`, wired by \`// on
 - \`pipeline show <folder:string>\` - render a pipeline folder's DAG (sources, lineage, subscriptions) in the terminal
   - \`--json\` - Output the raw asset graph as JSON
   - \`--local\` - Build the graph from local working-tree files (// pipeline scripts) instead of the deployed workspace — no deploy needed.
-- \`pipeline run <folder:string>\` - run a bounded cascade: from a schedule/manual root, fan downstream up to the --to end node(s)
-  - \`--from <script:string>\` - Start script (short name or path). Defaults to the folder's sole schedule/manual root.
+- \`pipeline run <folder:string>\` - run a cascade: from --from (a root OR any mid-DAG model), fan downstream up to the --to end node(s)
+  - \`--from <script:string>\` - Start script (short name or path). May be any node, including a mid-DAG model — that node plus its transitive downstream runs, upstream is NOT re-run (dbt \`--select model+\`). Defaults to the folder's sole schedule/manual root.
   - \`--to <node:string>\` - End node(s) to stop at — script names/paths or asset URIs (e.g. datatable://main/staged). Repeatable or comma-separated. Omit to run the full downstream.
   - \`--dry-run\` - Print the topological run plan without executing.
   - \`--json\` - Output the plan as JSON (for piping to jq).
diff --git a/system_prompts/auto-generated/skills/cli-commands/SKILL.md b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
index 938f6199e7..cc314a5067 100644
--- a/system_prompts/auto-generated/skills/cli-commands/SKILL.md
+++ b/system_prompts/auto-generated/skills/cli-commands/SKILL.md
@@ -425,8 +425,8 @@ inspect asset-driven pipelines (scripts marked `// pipeline`, wired by `// on <s
 - `pipeline show <folder:string>` - render a pipeline folder's DAG (sources, lineage, subscriptions) in the terminal
   - `--json` - Output the raw asset graph as JSON
   - `--local` - Build the graph from local working-tree files (// pipeline scripts) instead of the deployed workspace — no deploy needed.
-- `pipeline run <folder:string>` - run a bounded cascade: from a schedule/manual root, fan downstream up to the --to end node(s)
-  - `--from <script:string>` - Start script (short name or path). Defaults to the folder's sole schedule/manual root.
+- `pipeline run <folder:string>` - run a cascade: from --from (a root OR any mid-DAG model), fan downstream up to the --to end node(s)
+  - `--from <script:string>` - Start script (short name or path). May be any node, including a mid-DAG model — that node plus its transitive downstream runs, upstream is NOT re-run (dbt `--select model+`). Defaults to the folder's sole schedule/manual root.
   - `--to <node:string>` - End node(s) to stop at — script names/paths or asset URIs (e.g. datatable://main/staged). Repeatable or comma-separated. Omit to run the full downstream.
   - `--dry-run` - Print the topological run plan without executing.
   - `--json` - Output the plan as JSON (for piping to jq).

From b13113964a51f670b87e9aba263375bedb783b7e Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 01:18:29 +0200
Subject: [PATCH 62/76] fix(pipelines): canonicalize S3 asset keys so SDK
 writes and DuckDB reads connect (#9939)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(pipelines): canonicalize S3 asset keys so SDK writes and DuckDB reads connect

The SDK object forms — TS `writeS3File({s3:"exports/x"})` and Python
`write_s3_file(S3Object(s3="exports/x"))` — resolve to the URI `s3:///exports/x`
(empty default storage), whose parsed asset path was `/exports/x` (leading
slash). DuckDB `read_csv('s3://exports/x')` and the `// on s3://exports/x`
trigger form yielded the bare `exports/x`. The same object thus produced two
asset identities, so a DuckDB consumer never connected to a TS/Python producer
in the pipeline graph.

`parse_asset_syntax` (shared by the native backend parsers and the wasm parser
that drives `frontend/src/lib/infer.ts` and the CLI `localGraph`) now strips a
single leading slash from S3 paths, so `s3:///key`, `s3://storage/key`, DuckDB
`s3://…`, and `// on` all canonicalize to one key. Both deploy-time inference
and editor/CLI inference agree, and the producer's write edge and the
consumer's read/trigger edge share a node.

Only one leading slash is stripped, so `s3:///` triple-slash default-storage
keys collapse to the bare key while Hive-partition keys
(`s3://bucket/y=2024/f.parquet`) and explicit-storage `s3://storage/key` paths
are untouched. Non-S3 asset kinds (res://, ducklake://, …) keep their paths
verbatim.

Note: existing deployed pipelines that recorded `/key` paths need a redeploy to
pick up the canonical `key`; the fix is forward-consistent for anything parsed
after this change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs(pipelines): mark S3 asset-path normalization (item 6) resolved

The open-issues list still flagged the SDK-form leading-slash vs bare-URI
no-slash mismatch as "Still open", contradicting the fix in this PR. Mark it
resolved to match the updated Language-coverage prose.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs+test(pipelines): disclose S3 explicit-storage vs default-storage-nested-key aliasing

Collapsing to one canonical key means `s3://storage/key` (explicit storage) and
`s3:///storage/key` (default-storage nested key) now alias to the same node
`storage/key`, though they name different objects. Low-probability (needs a
storage config named to match a default-storage prefix) and inherent to a
best-effort lineage graph that doesn't split the first segment as a storage
name, but previously undisclosed. Document the tradeoff and pin the intended
aliasing with a test so it's intentional, not a latent surprise.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): mirror S3 leading-slash strip in frontend live-preview parser

The pipeline graph live preview parses `// on` annotations client-side via the
hand-written `parsePipelineAnnotations.ts` (a TS mirror of the Rust annotation
scanner), NOT the wasm parser. Its `parseAssetSyntax` still returned the raw
suffix, so `// on s3:///exports/x` yielded `/exports/x` while the deploy-time
and wasm parsers now canonicalize to `exports/x`. `resolveGraph` synthesizes
trigger edges from that path, so the browser preview could still render
disconnected `/exports/x` and `exports/x` nodes for the exact triple-slash case
this PR fixes at deploy time.

Mirror the S3-only single-leading-slash strip in the TS parser and extend the
shared parity fixture corpus (run by both the Rust and TS parity suites) with
the triple-slash trigger case, so Rust/TS drift on this is now caught.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): seed slashless S3 template asset paths to match canonical key

`autoOutputAsset` seeded new S3 template outputs with a leading slash
(`/pipelines/…`), which the old parser required to match `s3:///key` writes.
This PR made `parse_asset_syntax` strip that slash, so the seeded draft asset
(stored as `outputAssets`, used by `resolveGraph` for inactive-draft node
identity) no longer matched the body-inferred identity `pipelines/…` — the live
preview could render a duplicate `/pipelines/…` node and a phantom post-deploy
drift warning.

Seed the canonical slashless key instead, and switch the DuckDB body's S3 URIs
from `s3://${path}` to `s3:///${path}` so the generated runtime URI stays the
triple-slash default-storage form byte-for-byte (the SDK sites already build
`s3:///` + bare key). Add a pure-logic parity test asserting, for every
language and S3 output kind, that the seeded asset path is slashless and that
every S3 URI the generated body emits is triple-slash and canonicalizes back to
that seeded path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): canonicalize S3 keys in CLI + frontend bounded-cascade resolvers

Two more hand-written S3-URI sites returned the raw suffix, so `s3:///exports/x`
stayed `/exports/x` while native/wasm parsers now canonicalize to `exports/x`:

- `cli/src/commands/pipeline/localGraph.ts` — the no-wasm fallback `// on`
  scanner (go/bash/ruby). A fallback consumer's `// on s3:///x` would not
  connect to a wasm-inferred `x` producer in `wmill pipeline show/run --local`.
- `boundedCascade.ts` `assetUriToNodeId` (duplicated in the CLI and the frontend
  AssetGraph engines, kept in sync) — `--to s3:///exports/x` / a cascade bound
  token would not resolve against the canonical graph node `s3object:exports/x`.
  `resolveToken` delegates here, so it is covered too.

Mirror the S3-only single-leading-slash strip in all three, and add `s3:///`
tests to the CLI local-graph fallback suite and both bounded-cascade suites
(explicit-storage and Hive-partition keys asserted untouched).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs(pipelines): phrase S3 template test comment as a current invariant

Describe the slashless-seed requirement as the invariant it is, not as change
history, per the AGENTS.md "describe the code as it is" rule.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): strip all leading slashes from S3 keys so trigger refs round-trip

`parse_asset_syntax` stripped only one leading slash, so `S3Object(s3="/x")` —
which resolves to the quad-slash URI `s3:////x` — parsed to path `/x`. But
`trigger_spec_to_row` rebuilds a stored trigger ref as `s3://<path>` =
`s3:///x`, which `parse_asset_trigger_ref` then parses back to `x`. The
producer recorded `/x` while its consumer trigger resolved to `x` → a broken
edge. The same asymmetry affects every `s3://`+path reconstruction site
(backend refs, frontend `assetUri`, page refs) whenever a path starts with `/`.

Strip ALL leading slashes so a canonical S3 path never starts with `/`; naive
`prefix + path` reconstruction then round-trips everywhere. Applied uniformly
across all six S3-URI sites (Rust `parse_asset_syntax`, the TS live-preview
parser, template `s3Key`, and the frontend+CLI `assetUriToNodeId` and CLI
fallback scanner). The pathological leading-slash key collapses to the bare key
— acceptable for a best-effort lineage graph that never split storage anyway.

Tests: a windmill-common round-trip test (parse → trigger_spec_to_row →
parse_asset_trigger_ref) over every URI form incl. the quad-slash case; a
`s3:////x` shared parity fixture (Rust + TS); and quad-slash assertions in the
Rust parser test and both bounded-cascade suites.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* test(pipelines): align S3 template parity helper with strip-all canonicalization

The template seed/body parity test's `canonicalS3Key` helper (and its comment)
still stripped a single leading slash, so it no longer mirrored the parser it
claims to pin. Strip all leading slashes to match `parse_asset_syntax` and the
frontend/CLI mirrors.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../windmill-parser-py-asset/src/lib.rs       | 46 ++++++---
 .../src/asset_parser.rs                       | 52 +++++++---
 .../windmill-parser-ts-asset/src/lib.rs       | 38 ++++++--
 .../windmill-parser/src/asset_parser.rs       | 95 +++++++++++++++++++
 .../tests/fixtures/pipeline_annotations.json  | 30 ++++++
 backend/windmill-common/src/assets.rs         | 39 ++++++++
 cli/src/commands/pipeline/boundedCascade.ts   |  7 +-
 cli/src/commands/pipeline/localGraph.ts       |  8 +-
 .../pipeline_bounded_cascade_unit.test.ts     | 12 +++
 cli/test/pipeline_local_graph_unit.test.ts    | 26 +++++
 docs/pipeline-local-dev.md                    | 33 ++++---
 .../assets/AssetGraph/boundedCascade.test.ts  | 11 +++
 .../assets/AssetGraph/boundedCascade.ts       |  6 +-
 .../AssetGraph/parsePipelineAnnotations.ts    | 13 ++-
 .../AssetGraph/pipelineTemplates.test.ts      | 60 ++++++++++++
 .../assets/AssetGraph/pipelineTemplates.ts    | 29 +++---
 16 files changed, 443 insertions(+), 62 deletions(-)
 create mode 100644 frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts

diff --git a/backend/parsers/windmill-parser-py-asset/src/lib.rs b/backend/parsers/windmill-parser-py-asset/src/lib.rs
index 4e39a077f8..8d2e87a53e 100644
--- a/backend/parsers/windmill-parser-py-asset/src/lib.rs
+++ b/backend/parsers/windmill-parser-py-asset/src/lib.rs
@@ -383,7 +383,7 @@ def main():
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/test.csv".to_string(),
+                path: "test.csv".to_string(),
                 access_type: Some(R),
                 columns: None,
             },])
@@ -441,7 +441,31 @@ def main():
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/analytics/x.csv".to_string(),
+                path: "analytics/x.csv".to_string(),
+                access_type: Some(W),
+                columns: None,
+            },])
+        );
+    }
+
+    #[test]
+    fn test_py_write_key_matches_duckdb_read_key() {
+        // Cross-language lineage: this write records `exports/x`, the same path a
+        // DuckDB `read_csv('s3://exports/x')` resolves to (see
+        // windmill-parser-sql-asset `test_duckdb_read_key_matches_sdk_write_key`),
+        // so the producer and consumer connect in the pipeline graph.
+        let input = r#"
+import wmill
+from wmill import S3Object
+def main():
+    wmill.write_s3_file(S3Object(s3="exports/x"), b"content")
+"#;
+        let s = parse_assets(input).map(|o| o.assets);
+        assert_eq!(
+            s.map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "exports/x".to_string(),
                 access_type: Some(W),
                 columns: None,
             },])
@@ -484,7 +508,7 @@ def main():
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/dir/in.csv".to_string(),
+                path: "dir/in.csv".to_string(),
                 access_type: Some(R),
                 columns: None,
             },])
@@ -507,14 +531,14 @@ def main():
             Ok(vec![
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/out.json".to_string(),
-                    access_type: Some(W),
+                    path: "mybucket/dir/in.csv".to_string(),
+                    access_type: Some(R),
                     columns: None,
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "mybucket/dir/in.csv".to_string(),
-                    access_type: Some(R),
+                    path: "out.json".to_string(),
+                    access_type: Some(W),
                     columns: None,
                 },
             ])
@@ -540,25 +564,25 @@ def main():
             Ok(vec![
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/enriched.json".to_string(),
+                    path: "pipelines/km_real/enriched.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/raw_events.json".to_string(),
+                    path: "pipelines/km_real/raw_events.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/report.json".to_string(),
+                    path: "pipelines/km_real/report.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/summary.json".to_string(),
+                    path: "pipelines/km_real/summary.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
diff --git a/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs b/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs
index c4f93efdb7..d2ab5b51a7 100644
--- a/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser-sql-asset/src/asset_parser.rs
@@ -1145,13 +1145,13 @@ mod tests {
             Ok(vec![
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/a.parquet".to_string(),
+                    path: "a.parquet".to_string(),
                     access_type: Some(R),
                     columns: None
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/c.parquet".to_string(),
+                    path: "c.parquet".to_string(),
                     access_type: Some(W),
                     columns: None
                 },
@@ -1165,6 +1165,30 @@ mod tests {
         );
     }
 
+    #[test]
+    fn test_duckdb_read_key_matches_sdk_write_key() {
+        // Cross-language lineage: a TS `writeS3File({ s3: "exports/x" })` or
+        // Python `write_s3_file(S3Object(s3="exports/x"))` records the asset path
+        // `exports/x` (default storage). A DuckDB reader of the same object must
+        // resolve to the identical path so the graph connects the producer and
+        // consumer — both the bare `s3://exports/x` and the triple-slash
+        // `s3:///exports/x` default-storage form must yield `exports/x`.
+        for uri in ["s3://exports/x", "s3:///exports/x"] {
+            let input = format!("SELECT * FROM read_csv('{uri}');");
+            let assets = parse_assets(&input).expect("parse").assets;
+            assert_eq!(
+                assets,
+                vec![ParseAssetsResult {
+                    kind: AssetKind::S3Object,
+                    path: "exports/x".to_string(),
+                    access_type: Some(R),
+                    columns: None
+                }],
+                "DuckDB read of {uri} must resolve to the SDK write key"
+            );
+        }
+    }
+
     #[test]
     fn test_copy_target_echoed_in_select_stays_write_only() {
         // The trailing summary SELECT merely mentions the COPY target — it
@@ -1178,7 +1202,7 @@ mod tests {
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/out.csv".to_string(),
+                path: "out.csv".to_string(),
                 access_type: Some(W),
                 columns: None
             }])
@@ -1195,7 +1219,7 @@ mod tests {
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/referenced.csv".to_string(),
+                path: "referenced.csv".to_string(),
                 access_type: Some(R),
                 columns: None
             }])
@@ -1215,7 +1239,7 @@ mod tests {
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/data.csv".to_string(),
+                path: "data.csv".to_string(),
                 access_type: Some(RW),
                 columns: None
             }])
@@ -1235,7 +1259,7 @@ mod tests {
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/data.parquet".to_string(),
+                path: "data.parquet".to_string(),
                 access_type: Some(RW),
                 columns: None
             }])
@@ -1253,13 +1277,13 @@ mod tests {
             Ok(vec![
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/a.parquet".to_string(),
+                    path: "a.parquet".to_string(),
                     access_type: Some(R),
                     columns: None
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/b.parquet".to_string(),
+                    path: "b.parquet".to_string(),
                     access_type: Some(R),
                     columns: None
                 }
@@ -1279,7 +1303,7 @@ mod tests {
             s.map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/data.parquet".to_string(),
+                path: "data.parquet".to_string(),
                 access_type: Some(RW),
                 columns: None
             }])
@@ -1961,7 +1985,7 @@ mod tests {
 
         assert_eq!(result.len(), 1);
         assert_eq!(result[0].kind, AssetKind::S3Object);
-        assert_eq!(result[0].path, "/example_file.parquet");
+        assert_eq!(result[0].path, "example_file.parquet");
         assert_eq!(result[0].access_type, Some(R));
 
         let columns = result[0].columns.as_ref().expect("Should have columns");
@@ -1992,7 +2016,7 @@ mod tests {
 
         assert_eq!(result.len(), 1);
         assert_eq!(result[0].kind, AssetKind::S3Object);
-        assert_eq!(result[0].path, "/example_file.parquet");
+        assert_eq!(result[0].path, "example_file.parquet");
         assert!(result[0].columns.is_none());
     }
 
@@ -2005,7 +2029,7 @@ mod tests {
 
         assert_eq!(result.len(), 1);
         assert_eq!(result[0].kind, AssetKind::S3Object);
-        assert_eq!(result[0].path, "/example_file.parquet");
+        assert_eq!(result[0].path, "example_file.parquet");
 
         let columns = result[0].columns.as_ref().expect("Should have columns");
         assert_eq!(columns.get("col1"), Some(&R));
@@ -2024,7 +2048,7 @@ mod tests {
         assert_eq!(result.len(), 2);
 
         assert!(result.iter().any(|a| {
-            a.path == "/file1.parquet"
+            a.path == "file1.parquet"
                 && a.columns.as_ref().map_or(false, |c| c.contains_key("col1"))
         }));
         assert!(result.iter().any(|a| {
@@ -2057,7 +2081,7 @@ mod tests {
 
         assert_eq!(result.len(), 1);
         assert_eq!(result[0].kind, AssetKind::S3Object);
-        assert_eq!(result[0].path, "/test.parquet");
+        assert_eq!(result[0].path, "test.parquet");
         assert_eq!(result[0].access_type, Some(R));
 
         let columns = result[0].columns.as_ref().expect("Should have columns");
diff --git a/backend/parsers/windmill-parser-ts-asset/src/lib.rs b/backend/parsers/windmill-parser-ts-asset/src/lib.rs
index e38dc1e7f3..f273db5cbe 100644
--- a/backend/parsers/windmill-parser-ts-asset/src/lib.rs
+++ b/backend/parsers/windmill-parser-ts-asset/src/lib.rs
@@ -433,7 +433,7 @@ mod tests {
             s.map(|r| r.assets).map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/test.csv".to_string(),
+                path: "test.csv".to_string(),
                 access_type: Some(R),
                 columns: None,
             },])
@@ -461,7 +461,31 @@ mod tests {
             s.map(|r| r.assets).map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/pipelines/km_real/raw_events.json".to_string(),
+                path: "pipelines/km_real/raw_events.json".to_string(),
+                access_type: Some(W),
+                columns: None,
+            },])
+        );
+    }
+
+    #[test]
+    fn test_ts_write_key_matches_duckdb_read_key() {
+        // Cross-language lineage: this write records `exports/x`, the same path a
+        // DuckDB `read_csv('s3://exports/x')` resolves to (see
+        // windmill-parser-sql-asset `test_duckdb_read_key_matches_sdk_write_key`),
+        // so the producer and consumer connect in the pipeline graph.
+        let input = r#"
+            import * as wmill from "windmill-client"
+            export async function main() {
+                await wmill.writeS3File({ s3: "exports/x" }, "[]")
+            }
+        "#;
+        let s = parse_assets(input);
+        assert_eq!(
+            s.map(|r| r.assets).map_err(|e| e.to_string()),
+            Ok(vec![ParseAssetsResult {
+                kind: AssetKind::S3Object,
+                path: "exports/x".to_string(),
                 access_type: Some(W),
                 columns: None,
             },])
@@ -546,25 +570,25 @@ mod tests {
             Ok(vec![
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/enriched.json".to_string(),
+                    path: "pipelines/km_real/enriched.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/raw_events.json".to_string(),
+                    path: "pipelines/km_real/raw_events.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/report.json".to_string(),
+                    path: "pipelines/km_real/report.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
                 ParseAssetsResult {
                     kind: AssetKind::S3Object,
-                    path: "/pipelines/km_real/summary.json".to_string(),
+                    path: "pipelines/km_real/summary.json".to_string(),
                     access_type: Some(W),
                     columns: None,
                 },
@@ -585,7 +609,7 @@ mod tests {
             s.map(|r| r.assets).map_err(|e| e.to_string()),
             Ok(vec![ParseAssetsResult {
                 kind: AssetKind::S3Object,
-                path: "/out.json".to_string(),
+                path: "out.json".to_string(),
                 access_type: Some(W),
                 columns: None,
             },])
diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index c2cf65309b..94b43c1d7f 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -637,6 +637,24 @@ pub fn parse_asset_syntax(s: &str, enable_default_syntax: bool) -> Option<(Asset
     for (prefix, kind) in ASSET_KINDS.iter() {
         if s.starts_with(prefix) {
             let path = &s[prefix.len()..];
+            // Canonicalize S3 keys to a single asset identity. The SDK object
+            // form (`{ s3: "key" }` / `S3Object(s3="key")`, default storage)
+            // resolves to `s3:///key`, whose path is `/key`, while DuckDB
+            // `s3://key` and `// on s3://key` yield the bare `key`. Strip every
+            // leading slash so the triple-slash default-storage form and the
+            // `s3://storage/key` form share one path — otherwise a TS/Python
+            // writer and a DuckDB reader of the same object become disconnected
+            // nodes in the pipeline graph. Stripping ALL leading slashes (not
+            // just one) keeps the identity stable through URI reconstruction:
+            // `trigger_spec_to_row` rebuilds `s3://<path>`, so a canonical path
+            // must never itself start with `/` or the rebuilt ref would parse
+            // back to a different key. Only leading slashes are touched, so
+            // Hive-partition keys (`s3://b/y=2024/f.parquet`) are untouched.
+            let path = if matches!(kind, AssetKind::S3Object) {
+                path.trim_start_matches('/')
+            } else {
+                path
+            };
             return Some((*kind, path));
         }
     }
@@ -1281,6 +1299,83 @@ fn parse_trigger_spec(s: &str) -> Option<TriggerSpec> {
 mod pipeline_annotation_tests {
     use super::*;
 
+    #[test]
+    fn s3_key_normalization_unifies_uri_forms() {
+        // A TS/Python SDK write of `{ s3: "exports/x" }` (default storage)
+        // resolves to the URI `s3:///exports/x`, while a DuckDB read of
+        // `s3://exports/x` and the `// on s3://exports/x` trigger form yield the
+        // bare `exports/x`. All three must canonicalize to one asset key so
+        // the writer and reader connect in the pipeline graph.
+        let sdk_write = parse_asset_syntax("s3:///exports/x", false);
+        let duckdb_read = parse_asset_syntax("s3://exports/x", false);
+        assert_eq!(sdk_write, Some((AssetKind::S3Object, "exports/x")));
+        assert_eq!(duckdb_read, Some((AssetKind::S3Object, "exports/x")));
+        assert_eq!(sdk_write, duckdb_read);
+
+        // The `// on` trigger annotation goes through the same function.
+        assert_eq!(
+            parse_asset_syntax("s3:///exports/x", true),
+            parse_asset_syntax("s3://exports/x", true)
+        );
+
+        // Explicit-storage form is unaffected (no leading slash to strip).
+        assert_eq!(
+            parse_asset_syntax("s3://mybucket/exports/x", false),
+            Some((AssetKind::S3Object, "mybucket/exports/x"))
+        );
+
+        // Hive-partition keys and nested paths under default storage are
+        // preserved verbatim (only leading slashes are stripped).
+        assert_eq!(
+            parse_asset_syntax("s3:///t/year=2024/month=01/f.parquet", false),
+            Some((AssetKind::S3Object, "t/year=2024/month=01/f.parquet"))
+        );
+
+        // Every leading slash is stripped so a canonical S3 path never starts
+        // with `/`. `S3Object(s3="/x")` resolves to the quad-slash URI
+        // `s3:////x`; the identity must be the bare `x` (not `/x`) so the ref
+        // that `trigger_spec_to_row` rebuilds round-trips back to it.
+        assert_eq!(
+            parse_asset_syntax("s3:////x", false),
+            Some((AssetKind::S3Object, "x"))
+        );
+        assert_eq!(
+            parse_asset_syntax("s3://///deep///", false),
+            Some((AssetKind::S3Object, "deep///"))
+        );
+
+        // Non-S3 kinds keep their leading slash (their paths are workspace-
+        // relative and the slash is significant).
+        assert_eq!(
+            parse_asset_syntax("res://f/foo", false),
+            Some((AssetKind::Resource, "f/foo"))
+        );
+        assert_eq!(
+            parse_asset_syntax("ducklake://analytics/orders", false),
+            Some((AssetKind::Ducklake, "analytics/orders"))
+        );
+    }
+
+    #[test]
+    fn s3_explicit_storage_aliases_default_storage_nested_key() {
+        // Accepted tradeoff of one canonical key: the explicit-storage form
+        // `s3://storage/key` and the default-storage nested-key form
+        // `s3:///storage/key` collapse to the same node `storage/key`, even
+        // though they name different objects. This is a best-effort lineage
+        // graph that does not split the first segment as a storage name; the
+        // collision only happens when a storage config is named to match a
+        // default-storage prefix. Pinned so the aliasing is intentional, not a
+        // latent surprise.
+        assert_eq!(
+            parse_asset_syntax("s3://mybucket/x", false),
+            parse_asset_syntax("s3:///mybucket/x", false)
+        );
+        assert_eq!(
+            parse_asset_syntax("s3://mybucket/x", false),
+            Some((AssetKind::S3Object, "mybucket/x"))
+        );
+    }
+
     #[test]
     fn bare_pipeline_marker() {
         let out = parse_pipeline_annotations("// pipeline\nconsole.log('hi')");
diff --git a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
index d41d05b58b..cabfe20ddf 100644
--- a/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
+++ b/backend/parsers/windmill-parser/tests/fixtures/pipeline_annotations.json
@@ -739,5 +739,35 @@
 			"tag": null,
 			"retry": null
 		}
+	},
+	{
+		"name": "s3 triple-slash default-storage trigger canonicalizes to bare key",
+		"code": "// pipeline\n// on s3:///exports/x\nexport function main() {}",
+		"expected": {
+			"in_pipeline": true,
+			"asset_triggers": [
+				"s3object:exports/x"
+			],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null
+		}
+	},
+	{
+		"name": "s3 quad-slash trigger strips all leading slashes to the bare key",
+		"code": "// pipeline\n// on s3:////x\nexport function main() {}",
+		"expected": {
+			"in_pipeline": true,
+			"asset_triggers": [
+				"s3object:x"
+			],
+			"native_triggers": [],
+			"partition": null,
+			"freshness": null,
+			"tag": null,
+			"retry": null
+		}
 	}
 ]
diff --git a/backend/windmill-common/src/assets.rs b/backend/windmill-common/src/assets.rs
index 63309a1400..862bd645c3 100644
--- a/backend/windmill-common/src/assets.rs
+++ b/backend/windmill-common/src/assets.rs
@@ -369,6 +369,45 @@ mod debounce_duration_tests {
     }
 }
 
+#[cfg(test)]
+mod trigger_ref_roundtrip_tests {
+    use super::{parse_asset_trigger_ref, trigger_spec_to_row, AssetKind, ScriptTriggerKind};
+    use windmill_parser::asset_parser::{parse_asset_syntax, AssetKind as PAssetKind, TriggerSpec};
+
+    // `trigger_spec_to_row` rebuilds a stored ref as `s3://<path>`, and
+    // `parse_asset_trigger_ref` parses it back. The two must be inverse for
+    // every S3 URI form, or a consumer's `// on` trigger lands on a different
+    // graph node than the producer's inferred write. Because `parse_asset_syntax`
+    // strips ALL leading slashes, a canonical path never starts with `/`, so the
+    // naive `prefix + path` rebuild round-trips — including the `S3Object(s3="/x")`
+    // quad-slash case that previously desynced (path `/x` rebuilt to `s3:///x`,
+    // which re-parsed to `x`).
+    fn roundtrip(uri: &str) -> String {
+        let (pkind, path) = parse_asset_syntax(uri, false).expect("parse uri");
+        assert_eq!(pkind, PAssetKind::S3Object);
+        let spec = TriggerSpec::Asset { asset_kind: pkind, path: path.to_string(), debounce: None };
+        let (kind, stored) = trigger_spec_to_row(&spec).expect("to row");
+        assert_eq!(kind, ScriptTriggerKind::Asset);
+        let (rkind, rpath) = parse_asset_trigger_ref(&stored).expect("parse ref");
+        assert_eq!(rkind, AssetKind::S3Object);
+        // The producer path and the round-tripped consumer path must match.
+        assert_eq!(
+            rpath, path,
+            "round-trip diverged for {uri} (stored {stored})"
+        );
+        rpath
+    }
+
+    #[test]
+    fn s3_trigger_ref_roundtrips_for_every_uri_form() {
+        assert_eq!(roundtrip("s3:///exports/x"), "exports/x"); // SDK default storage
+        assert_eq!(roundtrip("s3://exports/x"), "exports/x"); // DuckDB / bare
+        assert_eq!(roundtrip("s3://mybucket/exports/x"), "mybucket/exports/x"); // explicit
+        assert_eq!(roundtrip("s3:////x"), "x"); // S3Object(s3="/x") quad-slash
+        assert_eq!(roundtrip("s3:///y=2024/f.parquet"), "y=2024/f.parquet"); // Hive
+    }
+}
+
 // Inverse of trigger_spec_to_row for the Asset variant: parses a stored
 // trigger_ref (e.g. `s3://foo`, `$res:bar`) back into the (kind, path) pair
 // used as a graph node id. Returns None for refs that don't match any known
diff --git a/cli/src/commands/pipeline/boundedCascade.ts b/cli/src/commands/pipeline/boundedCascade.ts
index 8abcbe1596..87c0636c0d 100644
--- a/cli/src/commands/pipeline/boundedCascade.ts
+++ b/cli/src/commands/pipeline/boundedCascade.ts
@@ -74,7 +74,12 @@ export function assetUriToNodeId(uri: string): string | undefined {
   if (!m) return undefined;
   const prefix = m[1].toLowerCase();
   const kind = prefix === "s3" ? "s3object" : prefix;
-  return `${kind}:${m[2]}`;
+  // Mirror Rust `parse_asset_syntax`: strip all leading slashes from S3 keys so a
+  // `--to s3:///exports/x` token resolves to the canonical graph node
+  // `s3object:exports/x` (default storage), same as `s3://exports/x`, and a
+  // canonical key never starts with `/`.
+  const path = kind === "s3object" ? m[2].replace(/^\/+/, "") : m[2];
+  return `${kind}:${path}`;
 }
 
 export type LineageDag = {
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index 3143605d4d..df1018ff0d 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -253,7 +253,13 @@ function fallbackParse(content: string, language: string): ParseAssetsRaw {
     if (uri) {
       const prefix = uri[1].toLowerCase();
       const kind = prefix === "s3" ? "s3object" : prefix;
-      out.triggers!.push({ kind: "asset", asset_kind: kind, path: uri[2] });
+      // Mirror Rust `parse_asset_syntax`: strip all leading slashes from S3 keys
+      // so `s3:///key` (default storage) and `s3://key` / DuckDB canonicalize
+      // to the same node id (and a canonical key never starts with `/`) —
+      // otherwise a go/bash fallback consumer's `// on s3:///x` would not
+      // connect to a wasm-inferred `x` producer.
+      const path = kind === "s3object" ? uri[2].replace(/^\/+/, "") : uri[2];
+      out.triggers!.push({ kind: "asset", asset_kind: kind, path });
     } else if (NATIVE_KINDS.has(firstTok) && rest === firstTok) {
       // A native marker (`// on data_upload`) must stand alone: the canonical
       // parser rejects a marker line with trailing content (`// on data_upload
diff --git a/cli/test/pipeline_bounded_cascade_unit.test.ts b/cli/test/pipeline_bounded_cascade_unit.test.ts
index 6a0f4543b4..06781e0c6a 100644
--- a/cli/test/pipeline_bounded_cascade_unit.test.ts
+++ b/cli/test/pipeline_bounded_cascade_unit.test.ts
@@ -256,6 +256,18 @@ test("assetUriToNodeId maps s3 → s3object, others verbatim", () => {
   expect(assetUriToNodeId("nope")).toBe(undefined);
 });
 
+test("assetUriToNodeId strips leading slashes from S3 keys (canonical node)", () => {
+  // Mirror of Rust `parse_asset_syntax`: `--to s3:///exports/x` must resolve to
+  // the same canonical node as the graph's `s3object:exports/x`.
+  expect(assetUriToNodeId("s3:///exports/x")).toBe("s3object:exports/x");
+  expect(assetUriToNodeId("s3:///exports/x")).toBe(assetUriToNodeId("s3://exports/x"));
+  // All leading slashes stripped so a canonical key never starts with `/`
+  // (the quad-slash `S3Object(s3="/x")` form collapses to `x`).
+  expect(assetUriToNodeId("s3:////x")).toBe("s3object:x");
+  // Hive-partition keys and non-S3 kinds are untouched.
+  expect(assetUriToNodeId("s3:///t/y=2024/f.parquet")).toBe("s3object:t/y=2024/f.parquet");
+});
+
 test("resolveToken: short name, full path, and asset URI", () => {
   const g = graph({ scripts: ["f/p/stage"], writes: [["f/p/stage", "main/staged"]] });
   g.assets = [{ kind: "datatable", path: "main/staged" }];
diff --git a/cli/test/pipeline_local_graph_unit.test.ts b/cli/test/pipeline_local_graph_unit.test.ts
index d0e8b4d281..b6cdfaa809 100644
--- a/cli/test/pipeline_local_graph_unit.test.ts
+++ b/cli/test/pipeline_local_graph_unit.test.ts
@@ -223,6 +223,32 @@ test("go/bash fallback: leading-header `// on` only, options stripped, no body p
   );
 });
 
+test("go/bash fallback: `// on s3:///key` canonicalizes to the slashless key", async () => {
+  // Mirror of the Rust/wasm `parse_asset_syntax` S3 strip: a fallback consumer's
+  // triple-slash default-storage trigger must resolve to the bare key `exports/x`
+  // — the same identity a wasm-inferred SDK/DuckDB producer uses — or the local
+  // graph shows a disconnected `/exports/x` node. Explicit storage is untouched.
+  await withFolder(
+    {
+      "triple.go": `// pipeline\n// on s3:///exports/x\npackage inner\nfunc main() {}\n`,
+      "bare.go": `// pipeline\n// on s3://exports/x\npackage inner\nfunc main() {}\n`,
+      "storage.go": `// pipeline\n// on s3://mybucket/exports/x\npackage inner\nfunc main() {}\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      const pathFor = (p: string) =>
+        graph.triggers.find(
+          (t) => t.trigger_kind === "asset" && t.runnable_path === p
+        ) as Extract<(typeof graph.triggers)[number], { trigger_kind: "asset" }> | undefined;
+      // triple-slash and bare both canonicalize to `exports/x` → same node
+      expect(pathFor("f/mypipe/triple")?.asset_path).toBe("exports/x");
+      expect(pathFor("f/mypipe/bare")?.asset_path).toBe("exports/x");
+      // explicit storage keeps its `storage/key` path (no leading slash to strip)
+      expect(pathFor("f/mypipe/storage")?.asset_path).toBe("mybucket/exports/x");
+    },
+  );
+});
+
 test("go/bash fallback: a native marker with trailing content is rejected (parity)", async () => {
   // The canonical parser rejects a marker line with trailing content, so the
   // fallback must too — else a `// on data_upload f/foo` / `# on kafka topic`
diff --git a/docs/pipeline-local-dev.md b/docs/pipeline-local-dev.md
index 8b394d0eda..6ee6a59a14 100644
--- a/docs/pipeline-local-dev.md
+++ b/docs/pipeline-local-dev.md
@@ -84,14 +84,22 @@ makes the client own the whole cascade so the backend dispatcher never double-fi
 `inferScriptAssets` mirrors `frontend/src/lib/infer.ts:inferAssets`: ts (bun/deno/nativets),
 python3, and SQL dialects all get wasm inference (SQL dialects route to `parse_assets_sql`; its
 comment-header annotation scan is dialect-independent). `go`/`bash` have no wasm asset parser, so
-they fall back to a minimal `// pipeline` + `// on` scan (annotation-only). Note inferred asset
-**paths must match exactly** to connect nodes: DuckDB `read_csv('s3://x')` / `COPY ... TO 's3://x'`
-and `// on s3://x` all yield path `x` (no leading slash), whereas the SDK object forms — TS
-`writeS3File({s3:"x"})` and python `write_s3_file(S3Object(s3="x"))` (or the equivalent dict
-literal), both resolved as `s3://<storage>/<key>` with empty default storage — yield `/x`, matching
-the `// on s3:///x` (triple-slash) annotation form. So an all-DuckDB example connects cleanly, and
-SDK writes connect to `s3:///…` annotations; mixing SDK-write with the no-slash annotation form
-needs care.
+they fall back to a minimal `// pipeline` + `// on` scan (annotation-only). Inferred asset paths
+must match to connect nodes, and all S3 URI forms canonicalize to one key: `parse_asset_syntax`
+(shared by the native and wasm parsers) strips leading slashes from S3 paths, so the SDK
+object forms — TS `writeS3File({s3:"x"})` and python `write_s3_file(S3Object(s3="x"))`, which
+resolve to `s3:///x` (empty default storage) — the triple-slash annotation `// on s3:///x`, DuckDB
+`read_csv('s3://x')` / `COPY ... TO 's3://x'`, and `// on s3://x` all yield path `x`. A TS/Python
+writer and a DuckDB reader of the same object therefore connect regardless of which URI form each
+side uses. (Only leading slashes are stripped — so a canonical key never starts with `/`, which
+keeps the identity stable through `// on` trigger-ref reconstruction — while Hive-partition keys
+like `s3://bucket/y=2024/f.parquet` and the explicit-storage form `s3://storage/key` keep their
+`bucket/…` / `storage/key` paths.) Tradeoff of collapsing to one canonical key: the explicit-storage
+form `s3://storage/key` and the default-storage nested-key form `s3:///storage/key` now alias to
+the same node `storage/key`, even though they name different objects (a bucket `storage` vs. an
+object under the `storage/` prefix in default storage). This only collides when a storage config is
+named to match a default-storage prefix — unlikely, and acceptable for a best-effort lineage graph
+that already doesn't split the first segment as a storage name.
 
 ## How to test
 
@@ -151,11 +159,12 @@ http://localhost:3000/pipeline_dev?workspace=<WS>&wm_token=<TOK>&folder=demo_pip
    `startProxyServer` for embedders that need a localhost origin (e.g. Claude Code preview).
 5. **`pipeline dev` editing**: the dev page is view+run only (editing stays in the user's editor).
    If in-browser editing with file round-trip is wanted, mirror flow-dev's `handleFlowRoundTrip`.
-6. **Asset-path normalization**: partially done — the python parser now resolves the
+6. **Asset-path normalization**: done — the python parser resolves the
    `S3Object(s3=…, storage=…?)` constructor / dict-literal forms to the same canonical path as the
-   TS `{s3, storage}` object form (see Language coverage), so SDK writes and reads connect across
-   ts/python. Still open: the SDK-form leading-slash (`/x`) vs bare-URI no-slash (`x`, DuckDB and
-   `// on s3://x`) mismatch silently breaks lineage across those two conventions.
+   TS `{s3, storage}` object form, and `parse_asset_syntax` now strips leading slashes from
+   S3 keys so the SDK-form `s3:///x` (`/x`) and the bare-URI no-slash form (`x`, DuckDB and
+   `// on s3://x`) canonicalize to one key (see Language coverage). SDK writes and DuckDB reads of
+   the same object connect regardless of URI convention.
 
 ## Plan reference
 
diff --git a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
index 552733a841..e4692de6b8 100644
--- a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.test.ts
@@ -509,4 +509,15 @@ describe('assetUriToNodeId', () => {
 		expect(assetUriToNodeId('ducklake://lake/t')).toBe('ducklake:lake/t')
 		expect(assetUriToNodeId('not-a-uri')).toBeUndefined()
 	})
+	it('strips leading slashes from S3 keys so s3:/// and s3:// share a node', () => {
+		// Mirror of Rust `parse_asset_syntax`: `--to s3:///exports/x` must resolve
+		// to the same canonical node as the graph's `s3object:exports/x`.
+		expect(assetUriToNodeId('s3:///exports/x')).toBe('s3object:exports/x')
+		expect(assetUriToNodeId('s3:///exports/x')).toBe(assetUriToNodeId('s3://exports/x'))
+		// All leading slashes are stripped so a canonical key never starts with
+		// `/` (the quad-slash `S3Object(s3="/x")` form collapses to `x`).
+		expect(assetUriToNodeId('s3:////x')).toBe('s3object:x')
+		// Hive-partition keys and non-S3 kinds are untouched.
+		expect(assetUriToNodeId('s3:///t/y=2024/f.parquet')).toBe('s3object:t/y=2024/f.parquet')
+	})
 })
diff --git a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
index de3e78452a..6fcabbe71f 100644
--- a/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/boundedCascade.ts
@@ -38,7 +38,11 @@ export function assetUriToNodeId(uri: string): string | undefined {
 	// `s3` is the URI prefix for the `s3object` asset kind (mirrors the CLI
 	// `assetUri` and the canvas). All other kinds use their name verbatim.
 	const kind = prefix === 's3' ? 's3object' : prefix
-	return `${kind}:${m[2]}`
+	// Mirror Rust `parse_asset_syntax`: strip all leading slashes from S3 keys so
+	// `s3:///key` (default storage) and `s3://key` resolve to the same node id
+	// and a canonical key never starts with `/`.
+	const path = kind === 's3object' ? m[2].replace(/^\/+/, '') : m[2]
+	return `${kind}:${path}`
 }
 
 // Native trigger kinds that fan out *per event*: a single event always flows
diff --git a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
index 4d355803e6..47eea81246 100644
--- a/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/parsePipelineAnnotations.ts
@@ -257,7 +257,18 @@ function parseKvOpts(s: string): Map<string, string> {
 function parseAssetSyntax(s: string): PipelineTriggerAsset | undefined {
 	for (const [prefix, kind] of ASSET_PREFIXES) {
 		if (s.startsWith(prefix)) {
-			return { kind, path: s.slice(prefix.length) }
+			let path = s.slice(prefix.length)
+			// Mirror the Rust `parse_asset_syntax` S3 canonicalization: strip all
+			// leading slashes so the SDK object form (`s3:///key`, default
+			// storage) and DuckDB / `// on s3://key` share one asset path, and a
+			// canonical key never starts with `/` (so ref reconstruction
+			// round-trips). Without this the live graph preview would show
+			// disconnected `/key` and `key` nodes. S3-only; leading slashes only,
+			// so Hive-partition keys are untouched.
+			if (kind === 's3object') {
+				path = path.replace(/^\/+/, '')
+			}
+			return { kind, path }
 		}
 	}
 	return undefined
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts
new file mode 100644
index 0000000000..262d36e6cf
--- /dev/null
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts
@@ -0,0 +1,60 @@
+import { describe, expect, it } from 'vitest'
+import type { ScriptLang } from '$lib/gen'
+import {
+	autoOutputAsset,
+	generatePipelineDraft,
+	type PipelineOutputKind
+} from './pipelineTemplates'
+
+// The seeded draft asset (`autoOutputAsset`, stored as `outputAssets` and used
+// by resolveGraph for inactive-draft node identity) must match the asset
+// identity the deploy-time / wasm parser infers from the generated body. The
+// parser canonicalizes any S3 URI by stripping the `s3://` prefix and all
+// leading slashes (see backend `parse_asset_syntax`); if the seed carried a
+// leading slash while the body wrote `s3:///key`, the preview would render a
+// duplicate `/key` node and a phantom post-deploy drift. This pins the two in
+// lockstep so that class of drift can't regress.
+
+// Mirror of the parser's S3 canonicalization for a raw `s3://…` URI.
+function canonicalS3Key(uri: string): string {
+	const rest = uri.replace(/^s3:\/\//, '')
+	return rest.replace(/^\/+/, '')
+}
+
+const S3_KINDS: PipelineOutputKind[] = ['s3_parquet', 's3_object']
+const LANGS: ScriptLang[] = ['bun', 'python3', 'duckdb']
+
+describe('pipelineTemplates S3 seed/body parity', () => {
+	for (const language of LANGS) {
+		for (const outputKind of S3_KINDS) {
+			it(`${language} ${outputKind}: seeded asset path matches the body's S3 write URI`, () => {
+				const output = autoOutputAsset(outputKind, 'demo', language)
+				expect(output).toBeDefined()
+				const asset = output!
+
+				// The seed must be a canonical slashless key so it matches the
+				// identity the parser infers from the generated body.
+				expect(asset.kind).toBe('s3object')
+				expect(asset.path.startsWith('/')).toBe(false)
+
+				const body = generatePipelineDraft({
+					language,
+					outputKind,
+					output: asset,
+					triggers: []
+				})
+
+				// Every S3 URI the generated body emits must canonicalize back to
+				// the seeded asset path — the write target especially.
+				const uris = body.match(/s3:\/\/[^'"`)\s]+/g) ?? []
+				expect(uris.length).toBeGreaterThan(0)
+				for (const uri of uris) {
+					// Runtime form must stay triple-slash (default storage); a bare
+					// `s3://key` would target a named storage `key` at run time.
+					expect(uri.startsWith('s3:///')).toBe(true)
+					expect(canonicalS3Key(uri)).toBe(asset.path)
+				}
+			})
+		}
+	}
+})
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
index f81d1a330d..04d4232dd0 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
@@ -175,16 +175,16 @@ export function autoOutputAsset(
 		case 'ducklake':
 		case 'materialize':
 			return { kind: 'ducklake', path: `main/${adj}_${pick(TABLE_NOUNS)}_${slug}` }
-		// s3 paths carry the canonical leading slash of a default-storage
-		// object (`s3:///<key>` parses to path `/<key>`). The deploy-time
-		// parser stores writes in that form — a slashless seeded path would
-		// never match it, and the post-deploy drift check would report the
-		// output as lost (it isn't; the key differs by one '/'). Bodies that
-		// take a bare key (`{ s3: ... }`) strip the slash via `s3Key`.
+		// s3 outputs use the canonical slashless key. `parse_asset_syntax`
+		// normalizes `s3:///<key>` (default storage) and `s3://<key>` to the
+		// bare `<key>`, so the seeded draft asset must be slashless to match the
+		// deploy-time inferred identity — otherwise the post-deploy drift check
+		// would flag the output as a phantom `/`-prefixed node. The generated
+		// bodies still emit the `s3:///<key>` default-storage URI for runtime I/O.
 		case 's3_parquet':
 			return {
 				kind: 's3object',
-				path: `/pipelines/${folder}/${adj}_${pick(DATASET_NOUNS)}_${slug}.parquet`
+				path: `pipelines/${folder}/${adj}_${pick(DATASET_NOUNS)}_${slug}.parquet`
 			}
 		case 's3_object': {
 			// duckdb's natural output for a generic blob is CSV (one COPY TO
@@ -194,7 +194,7 @@ export function autoOutputAsset(
 			const ext = language === 'duckdb' ? 'csv' : 'json'
 			return {
 				kind: 's3object',
-				path: `/pipelines/${folder}/${adj}_${pick(FILE_NOUNS)}_${slug}.${ext}`
+				path: `pipelines/${folder}/${adj}_${pick(FILE_NOUNS)}_${slug}.${ext}`
 			}
 		}
 		// A macro library produces no asset — its "output" is the registry
@@ -222,10 +222,11 @@ export function assetUri(asset: { kind: AssetKind; path: string }): string {
 	return `${ASSET_URI_PREFIX[asset.kind]}${asset.path}`
 }
 
-// Bare object key for the SDK's `{ s3: <key> }` forms: the canonical asset
-// path of a default-storage object has a leading slash, the key must not.
+// Bare object key for the SDK's `{ s3: <key> }` / `s3:///<key>` forms. Asset
+// paths are already canonical slashless keys; strip stray leading slashes
+// defensively so the emitted key never starts with '/'.
 function s3Key(path: string): string {
-	return path.replace(/^\//, '')
+	return path.replace(/^\/+/, '')
 }
 
 // Splits a datatable asset path (`<db>/<table>` or `<db>/<schema>.<table>`)
@@ -636,7 +637,7 @@ function bodyDuckdb(ctx: TemplateContext): string {
 		if (!input) return null
 		switch (input.kind) {
 			case 's3object':
-				return `read_parquet('s3://${input.path}')`
+				return `read_parquet('s3:///${input.path}')`
 			case 'datatable':
 				// `pg` is the attached Postgres catalog (see ATTACH above).
 				// Use a 2-part `pg.<table>` ref so the asset parser maps it
@@ -659,7 +660,7 @@ function bodyDuckdb(ctx: TemplateContext): string {
 					`COPY (`,
 					`  SELECT *`,
 					`  FROM ${fromExpr}`,
-					`) TO 's3://${output.path}' (FORMAT 'parquet');`
+					`) TO 's3:///${output.path}' (FORMAT 'parquet');`
 				)
 			}
 			break
@@ -670,7 +671,7 @@ function bodyDuckdb(ctx: TemplateContext): string {
 					`COPY (`,
 					`  SELECT *`,
 					`  FROM ${fromExpr}`,
-					`) TO 's3://${output.path}' (FORMAT 'csv', HEADER);`
+					`) TO 's3:///${output.path}' (FORMAT 'csv', HEADER);`
 				)
 			}
 			break

From e3f43033cafcdb5df253aeb55ce93e599b2584d2 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 01:36:42 +0200
Subject: [PATCH 63/76] fix(cli): macro-library parity in --local pipeline
 graph + read-only run --dry-run (#9942)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(cli): surface macro libraries in --local pipeline graph + make run --dry-run read-only

* fix(cli): resolve workspace-wide macro libraries in --local graph (shared libs outside the pipeline folder)

* fix(cli): macro-lib consumers + //-prefix parity in --local pipeline graph

Address Codex review P1s: (1) macro libraries that consume another library's
macros now produce lib->lib edges (any folder DuckDB script is a consumer, not
just // pipeline members) so an upstream provider node no longer disappears;
(2) parseMacroAnnotations accepts //, --, and # prefixes like the backend, so a
.duckdb.sql library headed with // macros is detected locally. Both edge
endpoints are forced into the node set. Verified byte-for-byte against deployed.

* fix(cli): exclude non-pipeline macro-consumer nodes from --local run selection

Address Codex P1: buildMacroEdges surfaces macro-consumer nodes (a DuckDB script
calling a macro but not marked // pipeline) for lineage display. Those have no
local file, so pipeline run --local must not treat them as manual roots — a
dry-run listed them and a real run failed resolving local content. Exclude any
--local graph node absent from localScripts (the previewable set) from starts and
selection, alongside the existing macro-library exclusion.

* fix(cli): reject display-only macro consumers in explicit --from (post-merge with #9945)

The mid-DAG --from feature (#9945, now on main) admits any autorun-able script
via validFromStarts/fromEligible, which was filtered only by macroLibPaths. A
non-// pipeline macro-consumer helper (a --local display node) therefore passed
--from eligibility and produced an empty plan. Filter fromEligible by the broader
notRunnablePaths too, and reject such a --from with a clear message instead of a
silent empty plan.

* chore(cli): remove NUL edge-key separator + refresh stale macro comments

Address Codex P2 nits: (1) the macro edge map packed (lib, consumer) into a
string with a literal NUL separator, which made localGraph.ts read as a binary
file to grep/rg — replace with a nested lib->consumer Map (no separator); (2)
comments claiming macro nodes/edges are 'deployed graph only' contradicted this
PR's local derivation — describe the code as it is.

* fix(cli): tag unused // pipeline + // macros libraries so --local run excludes them

Address Codex P1: the deployed builder sets 'macros' on any node whose path
provides macros (edge or not), so a // pipeline + // macros script with no
consumers is still recognized as definition-only. Local enrichment only tagged
edge providers, leaving an unused pipeline macro library as a bare runnable that
pipeline run --local would schedule as a manual root. Also tag any library whose
path is already a runnable; unused non-pipeline libraries stay suppressed.

* fix(pipelines): `// macros` takes precedence over `// pipeline` (a library is never a member)

A macro library is definition-only — its macros are injected into consumers and
running it is a no-op — so marking it `// pipeline` is meaningless and only
produced a confusing state (an unused pipeline macro library appearing as a
manual root). Make `// macros` win: parse_pipeline_annotations forces in_pipeline
false when macros is set. Mirrored in all three parsers that must agree — the Rust
canonical parser (drives deploy membership), the frontend TS parser (live graph),
and the CLI local graph (pinned wasm still reports in_pipeline, so precedence is
applied when skipping members). Shared parity fixture + unit tests on each side.

* docs(cli): trim narrative comment blocks to non-obvious constraints

Address Codex P2: duckdbMacros.ts opened with a ~19-line narrative block whose
parity rationale belongs in the PR description; reduce to the two real constraints
(keep in lockstep with duckdb_macros.rs; dynamic-SQL calls need // use). Per the
AGENTS.md comment policy.

* fix(cli): model macro libraries as pipeline members, matching the deployed graph

Reverts the parser-precedence approach (b398b69): the backend deliberately marks
EVERY macro library auto_kind='pipeline' (scripts.rs:1474, macro_lib_defs), so a
macro library IS a graph member — the // pipeline marker is redundant, not
authoritative. Precedence was a no-op on deploy while diverging the CLI/frontend.

Instead mirror reality in the CLI local graph: an in-folder // macros library is a
member node (in_pipeline=true, with signatures) whether used or not; its // use is
processed (it's a member) so a library that reaches another only via dynamic SQL
still gets the via_use lib->lib edge (fixes the missing-edge case); an out-of-folder
library referenced by an in-folder consumer is a non-member provider node. Macro
libraries stay excluded from runs (via macros) and from the previewable scripts set.

Verified byte-for-byte (incl. in_pipeline) against the deployed graph: unused
in-folder lib, lexical lib->lib chain, // use dynamic-SQL lib->lib, out-of-folder
shared lib.
---
 cli/src/commands/pipeline/docs.ts          |  49 +++-
 cli/src/commands/pipeline/duckdbMacros.ts  | 261 +++++++++++++++++
 cli/src/commands/pipeline/localGraph.ts    | 194 +++++++++++-
 cli/src/commands/pipeline/pipeline.ts      |  71 +++--
 cli/test/duckdb_macros_unit.test.ts        |  87 ++++++
 cli/test/pipeline_local_graph_unit.test.ts | 326 +++++++++++++++++++++
 6 files changed, 961 insertions(+), 27 deletions(-)
 create mode 100644 cli/src/commands/pipeline/duckdbMacros.ts
 create mode 100644 cli/test/duckdb_macros_unit.test.ts

diff --git a/cli/src/commands/pipeline/docs.ts b/cli/src/commands/pipeline/docs.ts
index b360c8b802..abee64cbf3 100644
--- a/cli/src/commands/pipeline/docs.ts
+++ b/cli/src/commands/pipeline/docs.ts
@@ -43,7 +43,7 @@ async function fetchDeployedGraph(
 }
 
 // Render the pipeline graph as a markdown document.
-function generatePipelineMarkdown(
+export function generatePipelineMarkdown(
   folder: string,
   graph: AssetGraph,
   datatableSchemas: any[],
@@ -73,7 +73,26 @@ function generatePipelineMarkdown(
     }
   }
 
-  const scripts = graph.runnables.filter((r) => r.usage_kind === "script").map((r) => r.path).sort();
+  // `// macros` libraries are definition-only nodes (not runnable pipeline
+  // steps), so they get their own section below and are excluded from the
+  // per-script listing + the script count.
+  const macroLibs = graph.runnables
+    .filter((r) => r.usage_kind === "script" && (r.macros?.length ?? 0) > 0)
+    .sort((a, b) => a.path.localeCompare(b.path));
+  const macroLibPaths = new Set(macroLibs.map((r) => r.path));
+  const macroConsumersByLib = new Map<string, { consumer: string; names: string[]; viaUse?: boolean }[]>();
+  for (const me of graph.macro_edges ?? []) {
+    (macroConsumersByLib.get(me.lib_path) ?? macroConsumersByLib.set(me.lib_path, []).get(me.lib_path)!).push({
+      consumer: me.consumer_path,
+      names: me.macro_names,
+      viaUse: me.via_use,
+    });
+  }
+
+  const scripts = graph.runnables
+    .filter((r) => r.usage_kind === "script" && !macroLibPaths.has(r.path))
+    .map((r) => r.path)
+    .sort();
 
   let md = `# Pipeline \`f/${folder}\`
 
@@ -85,7 +104,7 @@ produces data by reading/writing assets in its body (\`datatable://\`,
 \`ducklake://\`, \`s3://\`, \`volume://\`). The cascade runs a producer, then every
 downstream subscriber, in topological order.
 
-- **${scripts.length}** script${scripts.length === 1 ? "" : "s"} · **${graph.assets.length}** asset${graph.assets.length === 1 ? "" : "s"}
+- **${scripts.length}** script${scripts.length === 1 ? "" : "s"} · **${graph.assets.length}** asset${graph.assets.length === 1 ? "" : "s"}${macroLibs.length > 0 ? ` · **${macroLibs.length}** macro librar${macroLibs.length === 1 ? "y" : "ies"}` : ""}
 
 ## Scripts
 
@@ -107,6 +126,30 @@ downstream subscriber, in topological order.
     md += `\n`;
   }
 
+  // Macro libraries: `// macros` scripts whose macros are injected into consuming
+  // DuckDB scripts at run time. List each library's signatures and its callers so
+  // an agent discovers the reuse layer instead of re-inlining the logic.
+  if (macroLibs.length > 0) {
+    md += `## Macro libraries\n\n`;
+    md += `\`// macros\` DuckDB libraries. Their \`CREATE MACRO\` definitions are injected as\nTEMP macros into consuming scripts at run time — call a macro by name, or force the\nwhole library in with \`// use <lib-path>\` (needed for macros only reached via dynamic SQL).\n\n`;
+    for (const lib of macroLibs) {
+      md += `### \`${lib.path}\`\n\n`;
+      for (const m of lib.macros ?? []) {
+        md += `- \`${m.name}(${m.params ?? ""})\`${m.is_table ? " → TABLE" : ""}\n`;
+      }
+      const consumers = [...(macroConsumersByLib.get(lib.path) ?? [])].sort((a, b) =>
+        a.consumer.localeCompare(b.consumer),
+      );
+      if (consumers.length > 0) {
+        md += `- **Used by:**\n`;
+        for (const c of consumers) {
+          md += `  - \`${c.consumer}\` (${c.viaUse ? "via \`// use\`" : `calls ${c.names.map((n) => `\`${n}\``).join(", ")}`})\n`;
+        }
+      }
+      md += `\n`;
+    }
+  }
+
   // Datatable schemas, restricted to datatables this pipeline references.
   const referencedDatatables = new Set(
     graph.assets.filter((a) => a.kind === "datatable").map((a) => a.path.split("/")[0]),
diff --git a/cli/src/commands/pipeline/duckdbMacros.ts b/cli/src/commands/pipeline/duckdbMacros.ts
new file mode 100644
index 0000000000..be505874d7
--- /dev/null
+++ b/cli/src/commands/pipeline/duckdbMacros.ts
@@ -0,0 +1,261 @@
+// Faithful TS port of the lexical rules in
+// `backend/parsers/windmill-parser/src/duckdb_macros.rs` — keep the two in
+// lockstep. Deliberately lexical, not an AST parse: over-matching a call only
+// draws a spurious edge, never a wrong run. A macro reached only through dynamic
+// SQL (`query('…')`) is invisible to call detection here as on the server —
+// `// use <lib>` forces the whole-library edge instead.
+
+export type ParsedMacro = {
+  // Lowercased bare identifier (DuckDB identifiers are case-insensitive unquoted;
+  // qualified / quoted names are rejected, matching the backend).
+  name: string;
+  // Verbatim text inside the parameter parens (may be empty).
+  params: string;
+  isTable: boolean;
+};
+
+// Case-insensitive whole-word prefix strip (whitespace-bounded). Returns the
+// remainder with leading whitespace trimmed, or null when `s` does not start with
+// `kw` as a whole word. `kw` must be lowercase. Mirrors `strip_kw`.
+function stripKw(s: string, kw: string): string | null {
+  if (s.length < kw.length) return null;
+  if (s.slice(0, kw.length).toLowerCase() !== kw) return null;
+  const after = s.slice(kw.length);
+  if (after.length === 0 || /^\s/.test(after)) return after.replace(/^\s+/, "");
+  return null;
+}
+
+function isIdent(s: string): boolean {
+  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(s);
+}
+
+// Split a script body into `;`-terminated statements with line comments
+// (`--`, `//`), block comments (`/* */`), and quoted spans stripped/preserved as
+// in the SQL executor. Char-wise (not byte-wise) so multi-byte text survives.
+// Mirrors `split_statements`.
+export function splitStatements(sql: string): string[] {
+  const out: string[] = [];
+  let cur = "";
+  const chars = [...sql];
+  let i = 0;
+  const n = chars.length;
+  while (i < n) {
+    const c = chars[i];
+    // line comment: `--` (SQL) or `//` (Windmill annotation prefix)
+    if (
+      (c === "-" && i + 1 < n && chars[i + 1] === "-") ||
+      (c === "/" && i + 1 < n && chars[i + 1] === "/")
+    ) {
+      while (i < n && chars[i] !== "\n") i += 1;
+      continue;
+    }
+    // block comment
+    if (c === "/" && i + 1 < n && chars[i + 1] === "*") {
+      i += 2;
+      while (i + 1 < n && !(chars[i] === "*" && chars[i + 1] === "/")) i += 1;
+      i += 2;
+      continue;
+    }
+    // single-quoted string ('' escapes an embedded quote)
+    if (c === "'") {
+      cur += c;
+      i += 1;
+      while (i < n) {
+        cur += chars[i];
+        if (chars[i] === "'") {
+          if (i + 1 < n && chars[i + 1] === "'") {
+            cur += "'";
+            i += 2;
+            continue;
+          }
+          i += 1;
+          break;
+        }
+        i += 1;
+      }
+      continue;
+    }
+    // double-quoted identifier
+    if (c === '"') {
+      cur += c;
+      i += 1;
+      while (i < n) {
+        cur += chars[i];
+        if (chars[i] === '"') {
+          i += 1;
+          break;
+        }
+        i += 1;
+      }
+      continue;
+    }
+    if (c === ";") {
+      const t = cur.trim();
+      if (t !== "") out.push(t);
+      cur = "";
+      i += 1;
+      continue;
+    }
+    cur += c;
+    i += 1;
+  }
+  const t = cur.trim();
+  if (t !== "") out.push(t);
+  return out;
+}
+
+// Parse one comment-free, `;`-less statement as a CREATE MACRO. Returns null when
+// the statement is not a well-formed macro definition (unlike the backend, which
+// distinguishes "not macro-shaped" from "malformed" to surface deploy errors —
+// the local graph is lenient and simply skips anything it can't read). Mirrors
+// `parse_create_macro` for the shape it accepts.
+export function parseCreateMacro(stmt: string): ParsedMacro | null {
+  let rest = stripKw(stmt.trim(), "create");
+  if (rest === null) return null;
+  const afterOr = stripKw(rest, "or");
+  if (afterOr !== null) {
+    const afterReplace = stripKw(afterOr, "replace");
+    if (afterReplace === null) return null; // CREATE OR <not replace>
+    rest = afterReplace;
+  }
+  const afterTemp = stripKw(rest, "temp") ?? stripKw(rest, "temporary");
+  if (afterTemp !== null) rest = afterTemp;
+  // `FUNCTION` is DuckDB's alias for `MACRO`.
+  const afterMacro = stripKw(rest, "macro") ?? stripKw(rest, "function");
+  if (afterMacro === null) return null;
+  rest = afterMacro;
+
+  const nameEndMatch = rest.match(/[\s(]/);
+  const nameEnd = nameEndMatch ? nameEndMatch.index! : rest.length;
+  const rawName = rest.slice(0, nameEnd);
+  if (rawName === "" || rawName.includes(".") || rawName.includes('"') || !isIdent(rawName)) {
+    return null;
+  }
+  const name = rawName.toLowerCase();
+
+  rest = rest.slice(nameEnd).replace(/^\s+/, "");
+  if (!rest.startsWith("(")) return null;
+  // Balanced-paren scan for the verbatim param list; skip quoted spans (a default
+  // value may contain a paren).
+  const pchars = [...rest];
+  let depth = 0;
+  let j = 0;
+  let close = -1;
+  while (j < pchars.length) {
+    const ch = pchars[j];
+    if (ch === "(") depth += 1;
+    else if (ch === ")") {
+      depth -= 1;
+      if (depth === 0) {
+        close = j;
+        break;
+      }
+    } else if (ch === "'" || ch === '"') {
+      const q = ch;
+      j += 1;
+      while (j < pchars.length && pchars[j] !== q) j += 1;
+    }
+    j += 1;
+  }
+  if (close === -1) return null; // unbalanced
+  const params = pchars.slice(1, close).join("").trim();
+
+  const afterParams = pchars.slice(close + 1).join("").replace(/^\s+/, "");
+  let body = stripKw(afterParams, "as");
+  if (body === null) return null;
+  let isTable = false;
+  const afterTable = stripKw(body, "table");
+  if (afterTable !== null) {
+    body = afterTable;
+    isTable = true;
+  }
+  const trimmedBody = body.replace(/;+\s*$/, "").trim();
+  if (trimmedBody === "") return null; // empty body
+  return { name, params, isTable };
+}
+
+// All well-formed macro definitions in a `// macros` library body, in source
+// order. Non-macro statements (setup: ATTACH/INSTALL/… ) are skipped.
+export function parseMacroLibrary(sql: string): ParsedMacro[] {
+  const out: ParsedMacro[] = [];
+  for (const stmt of splitStatements(sql)) {
+    const m = parseCreateMacro(stmt);
+    if (m) out.push(m);
+  }
+  return out;
+}
+
+// Names from `names` that `sql` calls: an identifier token immediately followed
+// by `(` (after optional whitespace), not `.`-qualified, outside strings and
+// comments. Lexical (over-matching only adds an unused edge). Mirrors
+// `detect_macro_calls`.
+export function detectMacroCalls(sql: string, names: Set<string>): Set<string> {
+  const found = new Set<string>();
+  if (names.size === 0) return found;
+  for (const stmt of splitStatements(sql)) {
+    const chars = [...stmt];
+    const n = chars.length;
+    let i = 0;
+    let prev: string | undefined = undefined;
+    while (i < n) {
+      const c = chars[i];
+      if (c === "'" || c === '"') {
+        const q = c;
+        i += 1;
+        while (i < n && chars[i] !== q) i += 1;
+        i += 1;
+        prev = q;
+        continue;
+      }
+      const isIdentStart = /[A-Za-z_]/.test(c);
+      const prevBlocks = prev !== undefined && /[.A-Za-z0-9_]/.test(prev);
+      if (isIdentStart && !prevBlocks) {
+        const start = i;
+        while (i < n && /[A-Za-z0-9_]/.test(chars[i])) i += 1;
+        const word = chars.slice(start, i).join("").toLowerCase();
+        let k = i;
+        while (k < n && /\s/.test(chars[k])) k += 1;
+        if (k < n && chars[k] === "(" && names.has(word)) found.add(word);
+        prev = chars[i - 1];
+        continue;
+      }
+      prev = c;
+      i += 1;
+    }
+  }
+  return found;
+}
+
+// Scan the LEADING comment header for the `// macros` marker and `// use <lib>`
+// annotations, independent of the wasm parser (which drops both). Faithful mirror
+// of the canonical `parse_pipeline_annotations` (asset_parser.rs): each line's
+// prefix is stripped as `//`, `--`, or `#` REGARDLESS of language (a DuckDB
+// library may legitimately head its annotations with `// macros`), scanning stops
+// at the first non-comment line, the marker must stand alone on its line, and a
+// `// use` target is a single whitespace-free token containing `/`.
+export function parseMacroAnnotations(
+  content: string,
+): { macros: boolean; useLibs: string[] } {
+  let macros = false;
+  const useLibs: string[] = [];
+  for (const raw of content.split("\n")) {
+    const line = raw.replace(/^\s+/, "");
+    if (line === "") continue;
+    let rest: string;
+    if (line.startsWith("//") || line.startsWith("--")) rest = line.slice(2);
+    else if (line.startsWith("#")) rest = line.slice(1);
+    else break; // first line of actual code ends the annotation header
+    rest = rest.replace(/^\s+/, "");
+    // marker: `macros` as the only content on the line (rejects `macros_v2`,
+    // `macros are below`)
+    if (/^macros\s*$/.test(rest)) {
+      macros = true;
+      continue;
+    }
+    // `use <lib>`: a single whitespace-free path token (must contain `/`, so
+    // prose like `use this to …` is dropped)
+    const u = rest.match(/^use\s+(\S+)\s*$/);
+    if (u && u[1].includes("/") && !useLibs.includes(u[1])) useLibs.push(u[1]);
+  }
+  return { macros, useLibs };
+}
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index df1018ff0d..c1a5882849 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -19,6 +19,12 @@ import * as log from "../../core/log.ts";
 import { exts, removeExtensionToPath } from "../script/script.ts";
 import { inferContentTypeFromFilePath } from "../../utils/script_common.ts";
 import { getWmillYamlPath } from "../../core/conf.ts";
+import {
+  detectMacroCalls,
+  parseMacroAnnotations,
+  parseMacroLibrary,
+  type ParsedMacro,
+} from "./duckdbMacros.ts";
 
 // Resolve the workspace root (the directory containing wmill.yaml) for reading
 // local files, falling back to the current directory.
@@ -53,8 +59,9 @@ export type GraphRunnable = {
   // schema-contract warnings; only present when set (default `warn` is absent),
   // mirroring the deployed graph node.
   materialize_on_schema_change?: string;
-  // `// macros` library: the macros it defines (deployed graph only — the wasm
-  // asset parser does not emit them). Non-empty ⇒ definition-only node.
+  // `// macros` library: the macros it defines. Derived locally by
+  // `buildMacroEdges` (the wasm asset parser emits neither the marker nor the
+  // registry). Non-empty ⇒ definition-only node.
   macros?: { name: string; params?: string; is_table?: boolean }[];
 };
 export type GraphEdge = {
@@ -89,7 +96,7 @@ export type AssetGraph = {
   edges: GraphEdge[];
   triggers: GraphTrigger[];
   // ƒ edges from a `// macros` library to the scripts calling its macros
-  // (deployed graph only).
+  // (present on both the deployed graph and the locally-derived one).
   macro_edges?: {
     lib_path: string;
     consumer_path: string;
@@ -456,6 +463,10 @@ export async function buildLocalPipelineGraph(args: {
   const folderDir = path.join(args.root, "f", folderClean);
   const all = await collectScripts(folderDir, args.root, args.defaultTs);
 
+  // `// macros` DuckDB libraries across the whole workspace (a pipeline may use a
+  // shared library outside its folder).
+  const libMacros = collectMacroLibraries(args.root);
+
   const runnables: GraphRunnable[] = [];
   const edges: GraphEdge[] = [];
   const triggers: GraphTrigger[] = [];
@@ -471,6 +482,26 @@ export async function buildLocalPipelineGraph(args: {
 
   for (const s of all) {
     const out = await inferScriptAssets(s.content, s.language);
+    // A `// macros` library is a pipeline-member node carrying its macro
+    // signatures — whether or not any consumer uses it — matching the deployed
+    // graph, which marks every macro library `auto_kind='pipeline'`. It is
+    // definition-only (no assets/triggers, never run), so we add just the node;
+    // it is NOT a previewable script (excluded from `pipelineScripts`).
+    const macroLibDefs = libMacros.get(s.path);
+    if (macroLibDefs) {
+      runnables.push({
+        path: s.path,
+        usage_kind: "script",
+        in_pipeline: true,
+        ...(out.tag ? { tag: out.tag } : {}),
+        macros: macroLibDefs.map((m) => ({
+          name: m.name,
+          params: m.params,
+          is_table: m.isTable,
+        })),
+      });
+      continue;
+    }
     if (!out.in_pipeline) continue; // not a pipeline member
     const retry = normalizeRetry(out.retry);
     const nativeTriggers = recoverHeaderNativeTriggers(s.content, s.language);
@@ -598,6 +629,8 @@ export async function buildLocalPipelineGraph(args: {
     }
   }
 
+  const macroEdges = buildMacroEdges(all, libMacros, runnables);
+
   const assets = [...assetSet.entries()].map(([key, a]) => {
     const derived_from = a.derived_from ?? derivedFromByKey.get(key);
     return derived_from ? { ...a, derived_from } : a;
@@ -609,7 +642,162 @@ export async function buildLocalPipelineGraph(args: {
       assets,
       edges,
       triggers,
+      ...(macroEdges.length > 0 ? { macro_edges: macroEdges } : {}),
     },
     scripts: pipelineScripts,
   };
 }
+
+// Every `// macros` DuckDB library in the workspace, keyed by its windmill path,
+// mapped to its parsed macro definitions. Walks the whole `f/` tree (not just the
+// pipeline folder) because the deployed graph resolves consumers against the
+// workspace-wide macro registry — a pipeline may `// use` / call a shared library
+// living outside its own folder. Only `*.duckdb.sql` files are read (macros are
+// DuckDB-only), so the extra walk stays cheap.
+function collectMacroLibraries(root: string): Map<string, ParsedMacro[]> {
+  const out = new Map<string, ParsedMacro[]>();
+  const walk = (dir: string) => {
+    let entries: fs.Dirent[];
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      if (e.name.startsWith(".") || e.name === "node_modules") continue;
+      const abs = path.join(dir, e.name);
+      if (e.isDirectory()) {
+        walk(abs);
+        continue;
+      }
+      if (!e.isFile() || !e.name.endsWith(".duckdb.sql")) continue;
+      let content: string;
+      try {
+        content = fs.readFileSync(abs, "utf-8");
+      } catch {
+        continue;
+      }
+      if (!parseMacroAnnotations(content).macros) continue;
+      const relFromRoot = path.relative(root, abs).replaceAll("\\", "/");
+      out.set(removeExtensionToPath(relFromRoot), parseMacroLibrary(content));
+    }
+  };
+  walk(path.join(root, "f"));
+  return out;
+}
+
+// Derive lib→consumer edges (lexical calls + `// use`). In-folder libraries are
+// already member nodes; this adds any out-of-folder provider referenced by an
+// in-folder consumer. Mirrors the deployed `asset_graph`: libraries resolve
+// workspace-wide, consumers are folder-scoped.
+function buildMacroEdges(
+  all: LocalScript[],
+  libMacros: Map<string, ParsedMacro[]>,
+  runnables: GraphRunnable[],
+): NonNullable<AssetGraph["macro_edges"]> {
+  if (libMacros.size === 0) return [];
+  const useLibsByScript = new Map<string, string[]>();
+  for (const s of all) {
+    if (s.language !== "duckdb") continue;
+    const { useLibs } = parseMacroAnnotations(s.content);
+    if (useLibs.length > 0) useLibsByScript.set(s.path, useLibs);
+  }
+
+  // Macro name → providing library. Names are workspace-unique (the deploy path
+  // enforces this); on a local collision, last-writer-wins, harmlessly.
+  const providerByName = new Map<string, string>();
+  for (const [lib, macros] of libMacros) {
+    for (const m of macros) providerByName.set(m.name, lib);
+  }
+  const allMacroNames = new Set(providerByName.keys());
+
+  // Aggregate per (lib, consumer): the set of called macro names and whether the
+  // edge came (also) from a whole-library `// use`. Consumers are folder-scoped
+  // (`all` is this folder's scripts).
+  const pipelinePaths = new Set(runnables.map((r) => r.path));
+  type EdgeAgg = { names: Set<string>; viaUse: boolean };
+  // lib_path → consumer_path → aggregate. Nested (not a packed single-string key)
+  // so no separator can ever collide with a path.
+  const edgeMap = new Map<string, Map<string, EdgeAgg>>();
+  const aggFor = (lib: string, consumer: string): EdgeAgg => {
+    let byConsumer = edgeMap.get(lib);
+    if (!byConsumer) {
+      byConsumer = new Map();
+      edgeMap.set(lib, byConsumer);
+    }
+    let agg = byConsumer.get(consumer);
+    if (!agg) {
+      agg = { names: new Set(), viaUse: false };
+      byConsumer.set(consumer, agg);
+    }
+    return agg;
+  };
+  for (const s of all) {
+    if (s.language !== "duckdb") continue;
+    // Lexical call edges: the deploy path records `macro_usage` for EVERY DuckDB
+    // script in the folder (not only pipeline members) — including a macro
+    // library that calls another library's macros — so a lib→lib edge and its
+    // upstream provider node survive. Mirror that: any folder DuckDB script is a
+    // candidate consumer here.
+    for (const name of detectMacroCalls(s.content, allMacroNames)) {
+      const lib = providerByName.get(name)!;
+      if (lib === s.path) continue; // a library calling its own macro is not an edge
+      aggFor(lib, s.path).names.add(name);
+    }
+    // `// use` whole-library edges: the deployed graph re-parses these only from
+    // pipeline members (`annotations_by_path`), so scope them the same way.
+    if (!pipelinePaths.has(s.path)) continue;
+    for (const lib of useLibsByScript.get(s.path) ?? []) {
+      const macros = libMacros.get(lib);
+      // An out-of-tree / unknown `// use` target can't be resolved locally.
+      if (!macros || lib === s.path) continue;
+      const agg = aggFor(lib, s.path);
+      agg.viaUse = true;
+      for (const m of macros) agg.names.add(m.name);
+    }
+  }
+
+  const edges = [...edgeMap.entries()]
+    .flatMap(([lib_path, byConsumer]) =>
+      [...byConsumer.entries()].map(([consumer_path, agg]) => ({
+        lib_path,
+        consumer_path,
+        macro_names: [...agg.names].sort(),
+        // `via_use` is always present (the deployed `MacroEdge` serializes it
+        // unconditionally) so `--json` matches byte-for-byte.
+        via_use: agg.viaUse,
+      })),
+    )
+    .sort((a, b) =>
+      a.lib_path.localeCompare(b.lib_path) ||
+      a.consumer_path.localeCompare(b.consumer_path),
+    );
+
+  // In-folder libraries are already member nodes (added above with `in_pipeline`
+  // + macros). An OUT-OF-folder library referenced by an in-folder consumer is
+  // added here as a non-member provider node (no `in_pipeline`), matching the
+  // deployed graph, which folder-scopes membership but pulls the out-of-folder
+  // provider in as the edge's endpoint.
+  const libPaths = new Set<string>(edges.map((e) => e.lib_path));
+  for (const lib of libPaths) {
+    if (runnables.some((r) => r.path === lib)) continue;
+    const macros = (libMacros.get(lib) ?? []).map((m) => ({
+      name: m.name,
+      params: m.params,
+      is_table: m.isTable,
+    }));
+    runnables.push({ path: lib, usage_kind: "script", macros });
+  }
+  // Force every edge's CONSUMER endpoint into the node set too, like the deployed
+  // builder, so no edge dangles at a missing runnable. Members and libraries are
+  // already nodes; only a non-member DuckDB helper (calls a macro but isn't
+  // `// pipeline` and isn't itself a library) needs a bare node here.
+  for (const consumer of new Set(edges.map((e) => e.consumer_path))) {
+    if (!runnables.some((r) => r.path === consumer)) {
+      runnables.push({ path: consumer, usage_kind: "script" });
+    }
+  }
+  runnables.sort((a, b) => a.path.localeCompare(b.path));
+
+  return edges;
+}
diff --git a/cli/src/commands/pipeline/pipeline.ts b/cli/src/commands/pipeline/pipeline.ts
index 2d207444eb..0738283fba 100644
--- a/cli/src/commands/pipeline/pipeline.ts
+++ b/cli/src/commands/pipeline/pipeline.ts
@@ -304,8 +304,9 @@ async function renderGraph(
   }
 
   // `// macros` libraries: badge the node with the macros it defines and list
-  // its consumers as ƒ edges. Deployed graphs only — the local wasm parse does
-  // not emit `macros`/`macro_edges`, so local mode renders them as plain nodes.
+  // its consumers as ƒ edges. Populated on both the deployed graph and the local
+  // graph (localGraph.ts derives `macros`/`macro_edges` from the working tree,
+  // since the wasm asset parser emits neither).
   const macrosByLib = new Map(
     graph.runnables
       .filter((r) => (r.macros?.length ?? 0) > 0)
@@ -590,19 +591,25 @@ async function run(
     // Resolve relative imports from local (not-yet-deployed) content so a script
     // that imports a sibling workspace lib previews against local edits. Same
     // trick as `wmill dev` / `wmill app dev`; degrades to undefined gracefully.
-    try {
-      const codebases = await listSyncCodebases(merged);
-      const { buildPreviewTempScriptRefs } = await import(
-        "../generate-metadata/generate-metadata.ts"
-      );
-      tempScriptRefs = await buildPreviewTempScriptRefs(
-        workspace,
-        merged,
-        codebases,
-        { kind: "all" },
-      );
-    } catch {
-      // best-effort: relative imports fall back to deployed versions
+    // Skipped for `--dry-run`: it locks/uploads scripts as a side effect (it
+    // regenerates `*.script.yaml` / `*.script.lock` / `wmill-lock.yaml`), and a
+    // plan preview must stay READ-ONLY — the refs are only consumed when a
+    // preview job actually runs below, which dry-run never reaches.
+    if (!opts.dryRun) {
+      try {
+        const codebases = await listSyncCodebases(merged);
+        const { buildPreviewTempScriptRefs } = await import(
+          "../generate-metadata/generate-metadata.ts"
+        );
+        tempScriptRefs = await buildPreviewTempScriptRefs(
+          workspace,
+          merged,
+          codebases,
+          { kind: "all" },
+        );
+      } catch {
+        // best-effort: relative imports fall back to deployed versions
+      }
     }
   } else {
     graph = await apiGet<BCGraph>(
@@ -671,6 +678,20 @@ async function run(
       .filter((r) => r.usage_kind === "script" && (r.macros?.length ?? 0) > 0)
       .map((r) => r.path),
   );
+  // Non-runnable graph nodes: the macro libraries above, plus (under `--local`)
+  // any script node with no local file. The local graph surfaces macro-consumer
+  // nodes for lineage display — a DuckDB script that calls a macro but isn't a
+  // `// pipeline` member (so has no previewable content). They must never enter
+  // the run: as a manual root they'd be scheduled, and a preview would fail with
+  // no local content to send.
+  const notRunnablePaths = new Set<string>(macroLibPaths);
+  if (opts.local && localScripts) {
+    for (const r of graph.runnables) {
+      if (r.usage_kind === "script" && !localScripts.has(r.path)) {
+        notRunnablePaths.add(r.path);
+      }
+    }
+  }
 
   // Resolve the start. Two eligibility sets:
   //   `starts`       — schedule/manual roots (+ `--upload`-bound handlers). The
@@ -684,12 +705,12 @@ async function run(
   //                    unless `--upload`-bound.
   const starts = new Set(
     [...validStarts(graph), ...boundNodeIds].filter(
-      (id) => !macroLibPaths.has(scriptPathOf(id)),
+      (id) => !notRunnablePaths.has(scriptPathOf(id)),
     ),
   );
   const fromEligible = new Set(
     [...validFromStarts(graph), ...boundNodeIds].filter(
-      (id) => !macroLibPaths.has(scriptPathOf(id)),
+      (id) => !notRunnablePaths.has(scriptPathOf(id)),
     ),
   );
   // `runAll` = no `--from` on a multi-root pipeline (fan-in): run the whole
@@ -718,6 +739,14 @@ async function run(
         `--from '${opts.from}' is a \`// macros\` library — definition-only, injected into consuming scripts at run time, never a runnable step.`,
       );
     }
+    // A `--local` display-only node (a non-`// pipeline` DuckDB script surfaced
+    // only because it calls a macro) has no previewable content — reject it
+    // clearly rather than admitting it and silently producing an empty plan.
+    if (notRunnablePaths.has(scriptPathOf(resolved))) {
+      throw new Error(
+        `--from '${opts.from}' isn't a \`// pipeline\` script — it appears in the local graph only as a macro consumer (lineage). Mark it \`// pipeline\` to run it.`,
+      );
+    }
     if (!resolved.startsWith("script:")) {
       throw new Error(
         `--from '${opts.from}' is an asset, not a runnable — start a run from a script (assets are produced, not run).`,
@@ -829,10 +858,10 @@ async function run(
     }
   }
 
-  // Selections can still pull a macro library in via graph reachability (e.g.
-  // whole-pipeline mode collects every root's closure) — drop them before
-  // ordering so they never run.
-  for (const p of macroLibPaths) selectedScripts.delete(p);
+  // Selections can still pull a non-runnable node in via graph reachability (e.g.
+  // whole-pipeline mode collects every root's closure) — drop macro libraries and
+  // local-only display nodes before ordering so they never run.
+  for (const p of notRunnablePaths) selectedScripts.delete(p);
 
   const { order, cyclic } = topoOrder(graph, selectedScripts);
   if (cyclic.length > 0) {
diff --git a/cli/test/duckdb_macros_unit.test.ts b/cli/test/duckdb_macros_unit.test.ts
new file mode 100644
index 0000000000..9ad1fec568
--- /dev/null
+++ b/cli/test/duckdb_macros_unit.test.ts
@@ -0,0 +1,87 @@
+import { expect, test } from "bun:test";
+
+import {
+  detectMacroCalls,
+  parseCreateMacro,
+  parseMacroAnnotations,
+  parseMacroLibrary,
+  splitStatements,
+} from "../src/commands/pipeline/duckdbMacros.ts";
+
+// These mirror the accepted-shape cases of the backend parser
+// (backend/parsers/windmill-parser/src/duckdb_macros.rs) so the local graph
+// derives the same macro registry the server records at deploy.
+
+test("parseCreateMacro: scalar, OR REPLACE / TEMP / TABLE, FUNCTION alias", () => {
+  expect(parseCreateMacro("CREATE MACRO surrogate_key(a, b) AS md5(concat_ws('||', a, b))")).toEqual(
+    { name: "surrogate_key", params: "a, b", isTable: false },
+  );
+  expect(parseCreateMacro("CREATE OR REPLACE TEMP MACRO top_n(t_max) AS TABLE SELECT * FROM t")).toEqual(
+    { name: "top_n", params: "t_max", isTable: true },
+  );
+  // FUNCTION is DuckDB's alias for MACRO; name lowercased
+  expect(parseCreateMacro("create function Dbl(a) as a * 2")).toEqual(
+    { name: "dbl", params: "a", isTable: false },
+  );
+});
+
+test("parseCreateMacro: default params + nested/string parens in the param list", () => {
+  expect(
+    parseCreateMacro("CREATE MACRO safe_div(a, b, fallback := (0)) AS CASE WHEN b = 0 THEN fallback ELSE a / b END")?.params,
+  ).toBe("a, b, fallback := (0)");
+  expect(parseCreateMacro("CREATE MACRO f(sep := '(') AS concat(sep, 'x')")?.params).toBe("sep := '('");
+});
+
+test("parseCreateMacro: rejects non-macro, qualified/quoted names, missing params/body", () => {
+  expect(parseCreateMacro("SELECT 1")).toBeNull();
+  expect(parseCreateMacro("CREATE TABLE t(x int)")).toBeNull();
+  expect(parseCreateMacro("CREATE MACRO lake.m(a) AS a")).toBeNull();
+  expect(parseCreateMacro('CREATE MACRO "weird name"(a) AS a')).toBeNull();
+  expect(parseCreateMacro("CREATE MACRO m AS 1")).toBeNull(); // no params
+  expect(parseCreateMacro("CREATE MACRO m(a) AS")).toBeNull(); // empty body
+  expect(parseCreateMacro("CREATE OR MACRO m(a) AS a")).toBeNull(); // OR without REPLACE
+});
+
+test("splitStatements strips comments/strings and parseMacroLibrary skips setup", () => {
+  const lib = `-- macros
+ATTACH 'x.duckdb' AS ext;
+CREATE MACRO m1(a) AS a; -- inline comment ; not a split
+CREATE MACRO m2(b) AS b + 1;`;
+  expect(splitStatements("SELECT 1; -- c ; still\nSELECT ';' AS x;").length).toBe(2);
+  expect(parseMacroLibrary(lib).map((m) => m.name)).toEqual(["m1", "m2"]);
+});
+
+test("detectMacroCalls: word-boundary, case-insensitive, skips qualified/strings/comments", () => {
+  const ns = new Set(["dbl", "avg_x"]);
+  const found = detectMacroCalls("SELECT DBL(1), my_dbl(2), avg_x (3) FROM t", ns);
+  expect([...found].sort()).toEqual(["avg_x", "dbl"]);
+  expect(detectMacroCalls("SELECT lake.dbl(1)", new Set(["dbl"])).size).toBe(0);
+  expect(detectMacroCalls("SELECT 'dbl(1)'", new Set(["dbl"])).size).toBe(0);
+  expect(detectMacroCalls("-- dbl(1)\nSELECT 1", new Set(["dbl"])).size).toBe(0);
+  expect(detectMacroCalls("SELECT dbl FROM t", new Set(["dbl"])).size).toBe(0); // no call parens
+});
+
+test("parseMacroAnnotations: leading-header only, marker stands alone, `// use` needs a path token", () => {
+  expect(parseMacroAnnotations("-- macros\nCREATE MACRO m(a) AS a;")).toEqual({
+    macros: true,
+    useLibs: [],
+  });
+  // marker with trailing prose is not the macros marker
+  expect(parseMacroAnnotations("-- macros are below\nSELECT 1;").macros).toBe(false);
+  // `// use` accumulates path-shaped tokens, dedups, and stops at the body
+  expect(
+    parseMacroAnnotations("-- pipeline\n-- use f/lib/a\n-- use f/lib/a\n-- use notapath\nSELECT 1;").useLibs,
+  ).toEqual(["f/lib/a"]);
+  // an annotation after code is ignored (leading header only)
+  expect(parseMacroAnnotations("SELECT 1;\n-- use f/lib/a").useLibs).toEqual([]);
+});
+
+test("parseMacroAnnotations accepts `//`, `--`, and `#` prefixes (backend parity, any language)", () => {
+  // The canonical backend parser strips `//`/`--`/`#` regardless of language, so
+  // a DuckDB library headed with `// macros` (not `-- macros`) must be detected.
+  expect(parseMacroAnnotations("// macros\nCREATE MACRO m(a) AS a;").macros).toBe(true);
+  expect(parseMacroAnnotations("# macros\nSELECT 1;").macros).toBe(true);
+  expect(parseMacroAnnotations("// use f/lib/a\nSELECT 1;").useLibs).toEqual(["f/lib/a"]);
+  // mixed prefixes in one header both register
+  expect(parseMacroAnnotations("// pipeline\n-- use f/lib/a\nSELECT 1;").useLibs).toEqual(["f/lib/a"]);
+});
diff --git a/cli/test/pipeline_local_graph_unit.test.ts b/cli/test/pipeline_local_graph_unit.test.ts
index b6cdfaa809..377da60851 100644
--- a/cli/test/pipeline_local_graph_unit.test.ts
+++ b/cli/test/pipeline_local_graph_unit.test.ts
@@ -321,6 +321,300 @@ test("`# volume:` producer connects to its `# on volume://` consumer", async ()
   );
 });
 
+test("`// macros` library: node with signatures + call-detected consumer edge, counted", async () => {
+  // The wasm asset parser drops `// macros`/`// use`; the CLI-side lexical scan
+  // must surface the library node, its macro signatures, and the caller edge so
+  // `--local` reaches parity with the deployed graph.
+  await withFolder(
+    {
+      "macros_finance.duckdb.sql":
+        `-- macros\nCREATE MACRO net_revenue(gross, refunds) AS gross - refunds;\nCREATE OR REPLACE MACRO safe_div(a, b) AS TABLE SELECT a / b;\n`,
+      "fct.duckdb.sql":
+        `-- pipeline\n-- on datatable://main/orders\nSELECT net_revenue(gross, refunds) AS rev FROM main.orders;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+
+      // the library is a node carrying its macro signatures
+      const lib = graph.runnables.find((r) => r.path === "f/mypipe/macros_finance");
+      expect(lib?.macros).toEqual([
+        { name: "net_revenue", params: "gross, refunds", is_table: false },
+        { name: "safe_div", params: "a, b", is_table: true },
+      ]);
+
+      // library counts toward the script total (2 scripts, not just the 1 pipeline member)
+      expect(graph.runnables.map((r) => r.path).sort()).toEqual([
+        "f/mypipe/fct",
+        "f/mypipe/macros_finance",
+      ]);
+
+      // the caller edge names only the macro actually called (safe_div is not)
+      expect(graph.macro_edges).toEqual([
+        {
+          lib_path: "f/mypipe/macros_finance",
+          consumer_path: "f/mypipe/fct",
+          macro_names: ["net_revenue"],
+          via_use: false,
+        },
+      ]);
+    },
+  );
+});
+
+test("`// use <lib>` forces a whole-library edge even with no lexical call", async () => {
+  // Dynamic-SQL callers annotate `// use`; the edge lists every macro and is
+  // flagged via_use (mirrors the deployed graph).
+  await withFolder(
+    {
+      "stats.duckdb.sql":
+        `-- macros\nCREATE MACRO zscore(x, m, s) AS (x - m) / s;\n`,
+      "report.duckdb.sql":
+        `-- pipeline\n-- on datatable://main/metrics\n-- use f/mypipe/stats\nSELECT query('SELECT zscore(v, 0, 1) FROM main.metrics');\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.macro_edges).toEqual([
+        {
+          lib_path: "f/mypipe/stats",
+          consumer_path: "f/mypipe/report",
+          macro_names: ["zscore"],
+          via_use: true,
+        },
+      ]);
+      // the library still becomes a node
+      expect(graph.runnables.some((r) => r.path === "f/mypipe/stats")).toBe(true);
+    },
+  );
+});
+
+test("an UNUSED in-folder `// macros` library is still a member node (deployed parity)", async () => {
+  // The deployed graph marks every macro library `auto_kind='pipeline'`, so an
+  // in-folder library is a member node (in_pipeline, with signatures) whether or
+  // not a consumer uses it. It is still excluded from runs (via `macros`).
+  await withFolder(
+    {
+      "unused.duckdb.sql": `-- macros\nCREATE MACRO helper(a) AS a + 1;\n`,
+      "solo.duckdb.sql": `-- pipeline\nSELECT 1;\n`,
+    },
+    async (root, folder) => {
+      const { graph, scripts } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      const lib = graph.runnables.find((r) => r.path === "f/mypipe/unused");
+      expect(lib?.in_pipeline).toBe(true);
+      expect(lib?.macros).toEqual([{ name: "helper", params: "a", is_table: false }]);
+      expect(graph.macro_edges).toBeUndefined();
+      // but it is not a previewable/runnable script — only `solo` is
+      expect(scripts.map((s) => s.path)).toEqual(["f/mypipe/solo"]);
+    },
+  );
+});
+
+test("a shared macro library OUTSIDE the pipeline folder is resolved (workspace-wide)", async () => {
+  // The deployed graph loads the macro registry workspace-wide and only
+  // folder-scopes consumers, so a pipeline in `f/mypipe` can use a shared library
+  // in `f/shared`. Local discovery must walk the whole `f/` tree, not just the
+  // folder, or the edge/node/docs are missing (parity gap).
+  const root = mkdtempSync(join(tmpdir(), "wm-pl-"));
+  writeFileSync(join(root, "wmill.yaml"), "defaultTs: bun\n");
+  mkdirSync(join(root, "f", "shared"), { recursive: true });
+  mkdirSync(join(root, "f", "mypipe"), { recursive: true });
+  writeFileSync(
+    join(root, "f", "shared", "stats.duckdb.sql"),
+    `-- macros\nCREATE MACRO zscore(x, m, s) AS (x - m) / s;\n`,
+  );
+  // one consumer calls the shared macro lexically, another pulls it via `// use`
+  writeFileSync(
+    join(root, "f", "mypipe", "fct.duckdb.sql"),
+    `-- pipeline\n-- on datatable://main/metrics\nSELECT zscore(v, 0, 1) FROM main.metrics;\n`,
+  );
+  writeFileSync(
+    join(root, "f", "mypipe", "dyn.duckdb.sql"),
+    `-- pipeline\n-- on datatable://main/metrics\n-- use f/shared/stats\nSELECT query('SELECT zscore(v, 0, 1)');\n`,
+  );
+  try {
+    const { graph } = await buildLocalPipelineGraph({ root, folder: "mypipe", defaultTs: "bun" });
+    expect(graph.macro_edges).toEqual([
+      {
+        lib_path: "f/shared/stats",
+        consumer_path: "f/mypipe/dyn",
+        macro_names: ["zscore"],
+        via_use: true,
+      },
+      {
+        lib_path: "f/shared/stats",
+        consumer_path: "f/mypipe/fct",
+        macro_names: ["zscore"],
+        via_use: false,
+      },
+    ]);
+    // the out-of-folder library is surfaced as a node with its signatures
+    expect(graph.runnables.find((r) => r.path === "f/shared/stats")?.macros).toEqual([
+      { name: "zscore", params: "x, m, s", is_table: false },
+    ]);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test("macro library that CONSUMES another library gets a lib→lib edge (both nodes surface)", async () => {
+  // The deploy path records macro_usage for any DuckDB script, including a macro
+  // library calling another library's macros. A `base → derived` edge must exist
+  // (and `base`, an in-folder library, is a member node not just an edge stub).
+  await withFolder(
+    {
+      "base.duckdb.sql": `-- macros\nCREATE MACRO base_add(a, b) AS a + b;\n`,
+      // derived is a `// macros` library (NOT `// pipeline`) whose body calls base_add
+      "derived.duckdb.sql":
+        `-- macros\nCREATE MACRO derived_sum(a, b) AS base_add(a, b) * 2;\n`,
+      // the pipeline consumer calls derived_sum
+      "report.duckdb.sql":
+        `-- pipeline\n-- on datatable://main/t\nSELECT derived_sum(x, y) FROM main.t;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.macro_edges).toEqual([
+        // base → derived: the intermediate library is itself a consumer
+        {
+          lib_path: "f/mypipe/base",
+          consumer_path: "f/mypipe/derived",
+          macro_names: ["base_add"],
+          via_use: false,
+        },
+        // derived → report: the pipeline consumer
+        {
+          lib_path: "f/mypipe/derived",
+          consumer_path: "f/mypipe/report",
+          macro_names: ["derived_sum"],
+          via_use: false,
+        },
+      ]);
+      // both libraries surface as nodes with their signatures (base does NOT
+      // disappear just because it is only reached transitively)
+      expect(graph.runnables.find((r) => r.path === "f/mypipe/base")?.macros).toEqual([
+        { name: "base_add", params: "a, b", is_table: false },
+      ]);
+      expect(graph.runnables.find((r) => r.path === "f/mypipe/derived")?.macros).toEqual([
+        { name: "derived_sum", params: "a, b", is_table: false },
+      ]);
+      // both intermediate libraries are members (in_pipeline), like the deployed graph
+      expect(graph.runnables.find((r) => r.path === "f/mypipe/base")?.in_pipeline).toBe(true);
+      expect(graph.runnables.find((r) => r.path === "f/mypipe/derived")?.in_pipeline).toBe(true);
+    },
+  );
+});
+
+test("macro library reaching another only via dynamic SQL gets a `// use` lib→lib edge", async () => {
+  // A library that calls another's macro only inside a `query('…')` string is
+  // invisible to lexical detection; `// use` forces the lib→lib edge. Exercises
+  // the case where the CONSUMER is itself a `// macros` library.
+  await withFolder(
+    {
+      "base.duckdb.sql": `-- macros\nCREATE MACRO base_add(a, b) AS a + b;\n`,
+      "derived.duckdb.sql":
+        `-- macros\n-- use f/mypipe/base\nCREATE MACRO wrap(a, b) AS query('SELECT base_add(1, 2)');\n`,
+      "report.duckdb.sql":
+        `-- pipeline\n-- on datatable://main/t\nSELECT wrap(x, y) FROM main.t;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.macro_edges).toEqual([
+        // base → derived comes from `// use` (via_use), NOT a lexical call
+        {
+          lib_path: "f/mypipe/base",
+          consumer_path: "f/mypipe/derived",
+          macro_names: ["base_add"],
+          via_use: true,
+        },
+        {
+          lib_path: "f/mypipe/derived",
+          consumer_path: "f/mypipe/report",
+          macro_names: ["wrap"],
+          via_use: false,
+        },
+      ]);
+    },
+  );
+});
+
+test("a `// macros` (slash-prefix) DuckDB library is detected (backend prefix parity)", async () => {
+  // A `.duckdb.sql` library may head its annotation with `// macros` (the backend
+  // accepts `//`/`--`/`#` for any language); the local scan must too.
+  await withFolder(
+    {
+      "lib.duckdb.sql": `// macros\nCREATE MACRO dbl(a) AS a * 2;\n`,
+      "use_it.duckdb.sql": `-- pipeline\n-- on datatable://main/t\nSELECT dbl(x) FROM main.t;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.macro_edges).toEqual([
+        {
+          lib_path: "f/mypipe/lib",
+          consumer_path: "f/mypipe/use_it",
+          macro_names: ["dbl"],
+          via_use: false,
+        },
+      ]);
+      expect(graph.runnables.find((r) => r.path === "f/mypipe/lib")?.macros).toEqual([
+        { name: "dbl", params: "a", is_table: false },
+      ]);
+    },
+  );
+});
+
+test("a non-pipeline DuckDB macro consumer is a display-only node, never a run step", async () => {
+  // A `.duckdb.sql` helper that calls a macro but isn't `// pipeline` surfaces as
+  // a graph node (lineage parity) but is NOT a runnable pipeline script: it must
+  // be absent from `scripts` (the previewable set `run --local` selects from), so
+  // it can never be scheduled or fail a preview for lack of local content.
+  await withFolder(
+    {
+      "lib.duckdb.sql": `-- macros\nCREATE MACRO dbl(a) AS a * 2;\n`,
+      "helper.duckdb.sql": `-- on ducklake://main/src\nSELECT dbl(x) FROM main.src;\n`,
+      "root.duckdb.sql": `-- pipeline\n-- materialize ducklake://main/out\nSELECT dbl(1) AS v;\n`,
+    },
+    async (root, folder) => {
+      const { graph, scripts } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+
+      // the helper IS a node (macro consumer, for lineage display) …
+      const helper = graph.runnables.find((r) => r.path === "f/mypipe/helper");
+      expect(helper).toBeDefined();
+      // … but not a pipeline member (no local file to preview) and carries no macros
+      expect(helper?.in_pipeline).toBeFalsy();
+      expect(helper?.macros).toBeUndefined();
+      // the previewable set (what `run --local` can schedule) is ONLY the member
+      expect(scripts.map((s) => s.path)).toEqual(["f/mypipe/root"]);
+      // and the macro edge still connects lib → helper for the lineage view
+      expect(graph.macro_edges).toContainEqual({
+        lib_path: "f/mypipe/lib",
+        consumer_path: "f/mypipe/helper",
+        macro_names: ["dbl"],
+        via_use: false,
+      });
+    },
+  );
+});
+
+test("`// pipeline` on a macros library is redundant — it's a library node either way", async () => {
+  // The backend marks a macro library `auto_kind='pipeline'` regardless of the
+  // `// pipeline` marker, so a `-- pipeline -- macros` script behaves exactly like
+  // a plain `-- macros` one: a member library node (in_pipeline + signatures),
+  // excluded from runs (via `macros`) and from the previewable `scripts` set.
+  await withFolder(
+    {
+      "lib.duckdb.sql": `-- pipeline\n-- macros\nCREATE MACRO dbl(a) AS a * 2;\n`,
+      "root.duckdb.sql": `-- pipeline\n-- materialize ducklake://main/out\nSELECT 1 AS v;\n`,
+    },
+    async (root, folder) => {
+      const { graph, scripts } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      const lib = graph.runnables.find((r) => r.path === "f/mypipe/lib");
+      expect(lib?.in_pipeline).toBe(true);
+      expect(lib?.macros).toEqual([{ name: "dbl", params: "a", is_table: false }]);
+      // unused here → no edges, but still a node; not previewable/runnable
+      expect(graph.macro_edges).toBeUndefined();
+      expect(scripts.map((s) => s.path)).toEqual(["f/mypipe/root"]);
+    },
+  );
+});
+
 test("`#`-comment languages (ruby) use the `#` annotation fallback (no wasm parser)", async () => {
   await withFolder(
     { "ingest.rb": `# pipeline\n# on s3://demo/raw.csv\nputs "hi"\n` },
@@ -335,3 +629,35 @@ test("`#`-comment languages (ruby) use the `#` annotation fallback (no wasm pars
     },
   );
 });
+
+test("pipeline docs renders a `Macro libraries` section (call + `// use`)", async () => {
+  const { generatePipelineMarkdown } = await import(
+    "../src/commands/pipeline/docs.ts"
+  );
+  await withFolder(
+    {
+      "macros_finance.duckdb.sql":
+        `-- macros\nCREATE MACRO net_revenue(gross, refunds) AS gross - refunds;\nCREATE MACRO safe_div(a, b) AS TABLE SELECT a / b;\n`,
+      "fct.duckdb.sql":
+        `-- pipeline\n-- on datatable://main/orders\nSELECT net_revenue(gross, refunds) FROM main.orders;\n`,
+      "report.duckdb.sql":
+        `-- pipeline\n-- on datatable://main/orders\n-- use f/mypipe/macros_finance\nSELECT query('SELECT safe_div(1, 2)');\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      const md = generatePipelineMarkdown(folder, graph, [], true);
+
+      // count line mentions the library; two pipeline scripts, one library
+      expect(md).toContain("**2** scripts · **1** asset · **1** macro library");
+      // dedicated section with signatures (TABLE marker) and callers
+      expect(md).toContain("## Macro libraries");
+      expect(md).toContain("### `f/mypipe/macros_finance`");
+      expect(md).toContain("- `net_revenue(gross, refunds)`");
+      expect(md).toContain("- `safe_div(a, b)` → TABLE");
+      expect(md).toContain("`f/mypipe/fct` (calls `net_revenue`)");
+      expect(md).toContain("`f/mypipe/report` (via `// use`)");
+      // the library is NOT double-listed under `## Scripts`
+      expect(md).not.toContain("### `f/mypipe/macros_finance`\n\n- **");
+    },
+  );
+});

From 891b32195a836e0e2fc6943cf39a24e055e8488c Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 01:40:42 +0200
Subject: [PATCH 64/76] chore(main): release 1.749.0 (#9938)

* chore(main): release 1.749.0

* Apply automatic changes

---------

Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com>
---
 CHANGELOG.md                                  |  21 +++
 backend/Cargo.lock                            | 156 +++++++++---------
 backend/Cargo.toml                            |   4 +-
 .../parsers/windmill-parser-wasm/Cargo.lock   |  48 +++---
 .../parsers/windmill-parser-wasm/Cargo.toml   |   2 +-
 backend/windmill-api/openapi.yaml             |   2 +-
 benchmarks/lib.ts                             |   2 +-
 cli/src/core/constants.ts                     |   2 +-
 frontend/package-lock.json                    |   4 +-
 frontend/package.json                         |   2 +-
 lsp/Pipfile                                   |   2 +-
 openflow.openapi.yaml                         |   2 +-
 .../WindmillClient/WindmillClient.psd1        |   2 +-
 python-client/wmill/pyproject.toml            |   2 +-
 typescript-client/jsr.json                    |   2 +-
 typescript-client/package.json                |   2 +-
 version.txt                                   |   2 +-
 17 files changed, 139 insertions(+), 118 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ec10dc8990..365084fbfb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,26 @@
 # Changelog
 
+## [1.749.0](https://github.com/windmill-labs/windmill/compare/v1.748.0...v1.749.0) (2026-07-05)
+
+
+### Features
+
+* **pipelines:** mid-DAG selective execution (dbt `model+`) for pipeline runs ([#9945](https://github.com/windmill-labs/windmill/issues/9945)) ([2d3a773](https://github.com/windmill-labs/windmill/commit/2d3a77344104a587548f23f1b614ceffd52a5778))
+* **pipelines:** partition run-arg picker + first-run setup signpost ([#9943](https://github.com/windmill-labs/windmill/issues/9943)) ([475b072](https://github.com/windmill-labs/windmill/commit/475b072987b33d50111f5251a5f69f4245f930ae))
+* **pipelines:** self-teaching custom data_test errors + scaffold ([#9937](https://github.com/windmill-labs/windmill/issues/9937)) ([0ad174f](https://github.com/windmill-labs/windmill/commit/0ad174fa490e17eeb26280b5bdfd62956dfed9ff))
+
+
+### Bug Fixes
+
+* **cli:** macro-library parity in --local pipeline graph + read-only run --dry-run ([#9942](https://github.com/windmill-labs/windmill/issues/9942)) ([e3f4303](https://github.com/windmill-labs/windmill/commit/e3f43033cafcdb5df253aeb55ce93e599b2584d2))
+* **datatable:** self-teaching error for unresolved datatable:// references ([#9941](https://github.com/windmill-labs/windmill/issues/9941)) ([55451db](https://github.com/windmill-labs/windmill/commit/55451db009e3060c21948ece2c97e102a3c9b171))
+* **object-storage:** remove 20-file bucket-browser listing cap in CE ([#9935](https://github.com/windmill-labs/windmill/issues/9935)) ([22452ce](https://github.com/windmill-labs/windmill/commit/22452ce54034a9bea8f7d48946818fd148b938c0))
+* **pipelines:** dedup guard for keyed merge + deploy-time SCD2 validation ([#9936](https://github.com/windmill-labs/windmill/issues/9936)) ([52ce805](https://github.com/windmill-labs/windmill/commit/52ce805f619747af4f998cde7819a164c754205a))
+* **pipelines:** link SCD2 &lt;dim&gt;_current view to its producer across all graph surfaces ([#9933](https://github.com/windmill-labs/windmill/issues/9933)) ([574d3ac](https://github.com/windmill-labs/windmill/commit/574d3ac9ff5015b5d3f53040c9d4dfbfd161a076))
+* **pipelines:** order data_test relationships refs before the tested script in a cascade ([#9934](https://github.com/windmill-labs/windmill/issues/9934)) ([46be39d](https://github.com/windmill-labs/windmill/commit/46be39dfb7fbfb2b70e61819d6065b45810c41c9))
+* **pipelines:** pipeline-level run control, tables label, data-test rollback + fork badges ([#9944](https://github.com/windmill-labs/windmill/issues/9944)) ([6ae8dd3](https://github.com/windmill-labs/windmill/commit/6ae8dd37b1de930ab17344cebf7c28385c6cfdba))
+* rebuild windows bun loader main.ts filter from forward-slash cdir ([#9946](https://github.com/windmill-labs/windmill/issues/9946)) ([a582e04](https://github.com/windmill-labs/windmill/commit/a582e04bf40cf685f88bceaf88e3d24bde3d420a))
+
 ## [1.748.0](https://github.com/windmill-labs/windmill/compare/v1.747.0...v1.748.0) (2026-07-05)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index cd780be48c..aa0707e417 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -13746,7 +13746,7 @@ dependencies = [
 
 [[package]]
 name = "windmill"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -13828,7 +13828,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-ai"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "async-stream",
  "async-trait",
@@ -13861,7 +13861,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-alerting"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -13874,7 +13874,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -14012,7 +14012,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-agent-workers"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14035,7 +14035,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-assets"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14050,7 +14050,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-auth"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14076,7 +14076,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -14086,7 +14086,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-configs"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14103,7 +14103,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-debug"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "base64 0.22.1",
@@ -14125,7 +14125,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-embeddings"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14148,7 +14148,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flow-conversations"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14164,7 +14164,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-flows"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14185,7 +14185,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-groups"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14206,7 +14206,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-inputs"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14220,7 +14220,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-integration-tests"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -14255,7 +14255,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-jobs"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14280,7 +14280,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-npm-proxy"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "flate2",
@@ -14298,7 +14298,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-openapi"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14320,7 +14320,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-schedule"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14340,7 +14340,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-scripts"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14377,7 +14377,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-settings"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14405,7 +14405,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-sse"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "lazy_static",
  "serde",
@@ -14417,7 +14417,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-users"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "argon2",
  "axum 0.8.9",
@@ -14442,7 +14442,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workers"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14456,7 +14456,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-workspaces"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "axum 0.8.9",
  "chrono",
@@ -14490,7 +14490,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -14504,7 +14504,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "axum 0.8.9",
@@ -14523,7 +14523,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "aes-gcm",
  "aho-corasick",
@@ -14625,7 +14625,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-dep-map"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "chrono",
  "itertools 0.14.0",
@@ -14644,7 +14644,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "regex",
  "serde",
@@ -14659,7 +14659,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -14683,7 +14683,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-jseval"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14700,7 +14700,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -14716,7 +14716,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14737,7 +14737,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-native-triggers"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -14768,7 +14768,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "arc-swap",
@@ -14793,7 +14793,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-object-store"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -14827,7 +14827,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-operator"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -14845,7 +14845,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -14854,7 +14854,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14866,7 +14866,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14878,7 +14878,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -14890,7 +14890,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -14902,7 +14902,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14914,7 +14914,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -14925,7 +14925,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14936,7 +14936,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -14948,7 +14948,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -14959,7 +14959,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -14981,7 +14981,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -14993,7 +14993,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15007,7 +15007,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -15024,7 +15024,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15037,7 +15037,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15049,7 +15049,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15067,7 +15067,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -15083,7 +15083,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -15099,7 +15099,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15110,7 +15110,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15149,7 +15149,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-runtime-nativets"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "const_format",
@@ -15188,7 +15188,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "getrandom 0.3.4",
  "wasm-bindgen",
@@ -15199,7 +15199,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-store"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15233,7 +15233,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-test-utils"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15257,7 +15257,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15290,7 +15290,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-azure"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15323,7 +15323,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-email"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15343,7 +15343,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-gcp"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15377,7 +15377,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-http"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15413,7 +15413,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-kafka"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15436,7 +15436,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-mqtt"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15460,7 +15460,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-nats"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -15484,7 +15484,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-postgres"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15519,7 +15519,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-sqs"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15547,7 +15547,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-trigger-websocket"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -15572,7 +15572,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "bitflags 2.13.0",
@@ -15591,7 +15591,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
@@ -15701,7 +15701,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker-volumes"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "bytes",
  "futures",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index e80fbc89db..48e48da15d 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.748.0"
+version = "1.749.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -87,7 +87,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"]
 
 [workspace.package]
-version = "1.748.0"
+version = "1.749.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.lock b/backend/parsers/windmill-parser-wasm/Cargo.lock
index a9caa82ede..6d36c2f8f2 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.lock
+++ b/backend/parsers/windmill-parser-wasm/Cargo.lock
@@ -6191,7 +6191,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "windmill-common"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "aho-corasick",
  "anyhow",
@@ -6272,7 +6272,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -6284,7 +6284,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "convert_case",
  "serde",
@@ -6293,7 +6293,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6305,7 +6305,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6317,7 +6317,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -6329,7 +6329,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6341,7 +6341,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6353,7 +6353,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -6364,7 +6364,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6375,7 +6375,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -6387,7 +6387,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6398,7 +6398,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -6420,7 +6420,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-r"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -6432,7 +6432,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6446,7 +6446,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "convert_case",
@@ -6463,7 +6463,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6476,7 +6476,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6488,7 +6488,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -6506,7 +6506,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde-wasm-bindgen",
@@ -6522,7 +6522,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wac"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "rustpython-ast",
@@ -6538,7 +6538,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-wasm"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "getrandom 0.2.17",
@@ -6570,7 +6570,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -6581,7 +6581,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-types"
-version = "1.748.0"
+version = "1.749.0"
 dependencies = [
  "anyhow",
  "bitflags",
diff --git a/backend/parsers/windmill-parser-wasm/Cargo.toml b/backend/parsers/windmill-parser-wasm/Cargo.toml
index 521fb7a132..b8b9263a91 100644
--- a/backend/parsers/windmill-parser-wasm/Cargo.toml
+++ b/backend/parsers/windmill-parser-wasm/Cargo.toml
@@ -12,7 +12,7 @@ resolver = "2"
 members = ["."]
 
 [workspace.package]
-version = "1.748.0"
+version = "1.749.0"
 edition = "2021"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 1726234a8d..8b59c7ef08 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.748.0
+  version: 1.749.0
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index 37132a3b9e..71ec4f546e 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.748.0";
+export const VERSION = "v1.749.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/core/constants.ts b/cli/src/core/constants.ts
index f01ea9c68b..f016b94c24 100644
--- a/cli/src/core/constants.ts
+++ b/cli/src/core/constants.ts
@@ -10,4 +10,4 @@ export const WM_FORK_PREFIX = "wm-fork";
 // (e.g. utils.ts) can read it without importing main.ts and creating a circular
 // dependency (main → workspace → utils → main) that triggers a TDZ.
 // Re-exported from main.ts for backwards compatibility.
-export const VERSION = "1.748.0";
+export const VERSION = "1.749.0";
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index f0fd64f6fc..103e4bf4e0 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.748.0",
+	"version": "1.749.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "@windmill-labs/components",
-			"version": "1.748.0",
+			"version": "1.749.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index adfd48cad4..0b9f20ce34 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@windmill-labs/components",
-	"version": "1.748.0",
+	"version": "1.749.0",
 	"scripts": {
 		"dev": "vite dev",
 		"dev:ui-builder": "mv static/ui_builder static/ui_builder.dev-disabled 2>/dev/null || true ; trap 'mv static/ui_builder.dev-disabled static/ui_builder 2>/dev/null || true' EXIT ; vite dev",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index d2b78d3e8f..17233bac9c 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,7 +4,7 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.748.0"
+wmill = ">=1.749.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index 32f13a4f0c..da3cbd2325 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.748.0
+  version: 1.749.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index f99fb3832d..863a7c487f 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.748.0'
+    ModuleVersion     = '1.749.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index 3219756afa..16470eba60 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.748.0"
+version = "1.749.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index 191bab2bf6..a47fa427c2 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.748.0",
+  "version": "1.749.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index 02a1bbb060..c142b1b01a 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.748.0",
+  "version": "1.749.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "homepage": "https://github.com/windmill-labs/windmill/tree/main/typescript-client#readme",
diff --git a/version.txt b/version.txt
index a16d7ab553..1575293753 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.748.0
+1.749.0

From f9840cd4777d323bc49b517aeed9659decef6c2b Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 02:54:42 +0200
Subject: [PATCH 65/76] add missing amber-950 shade so dark pipeline callouts
 render (#9951)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 frontend/tailwind.config.cjs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/frontend/tailwind.config.cjs b/frontend/tailwind.config.cjs
index d7dbf2d754..39e43c7722 100644
--- a/frontend/tailwind.config.cjs
+++ b/frontend/tailwind.config.cjs
@@ -295,7 +295,8 @@ const config = {
 				600: '#d97706',
 				700: '#b45309',
 				800: '#92400e',
-				900: '#78350f'
+				900: '#78350f',
+				950: '#451a03'
 			},
 			emerald: {
 				50: '#ecfdf5',

From 6eabb96ae78fb966f9916f907bb693d569b04c0b Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 03:06:31 +0200
Subject: [PATCH 66/76] fix(pipelines): make node & pipeline-level run
 affordances always visible (#9948)

* fix(pipelines): make node & pipeline-level run affordances always visible

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): don't leave node Run disabled by stale form validity

The always-visible node Run button read `isValid` directly, but that flag is
only meaningful while PipelineRunForm is mounted to set it. On a same-path
re-resolve (the component is keyed on script.path) from an input-carrying
script to an input-less one, the form unmounts leaving `isValid=false`, which
wrongly kept the empty-args Run button disabled. Gate validity through a
`runValid` derived that is true whenever no form is rendered.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): run with {} when node has no form, not stale args

The always-visible node Run button dispatched $state.snapshot(args)
unconditionally. `args` persists across a same-path re-resolve (component keyed
on script.path), so a script that once had inputs/partition args and is
re-resolved as input-less would run with the stale hidden args instead of {}.
Send {} whenever no form is rendered, matching the no-form run intent.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../AssetGraph/PipelineScriptView.svelte      | 106 +++++++++++-------
 .../(logged)/pipeline/[folder]/+page.svelte   |  10 +-
 2 files changed, 69 insertions(+), 47 deletions(-)

diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
index 64e24e0ad2..18564c6edd 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
@@ -69,13 +69,24 @@
 		annotations.triggerAssets.map((a) => ({ kind: a.kind, path: a.path }))
 	)
 
-	// The run form appears for data-upload entry points (S3 picker) and for any
-	// partitioned producer — materializing a single partition is available in
-	// OSS, and the picker is where the user chooses which one.
-	let showRunForm = $derived(canRun || !!partitionSpec)
+	// Whether the script declares any inputs — a run then needs the SchemaForm
+	// to collect them, so the form must render even for a plain (non-upload,
+	// non-partitioned) script rather than firing with empty args.
+	let hasInputs = $derived(Object.keys(script.schema?.properties ?? {}).length > 0)
+	// The run form appears for data-upload entry points (S3 picker), for any
+	// partitioned producer (materialize a single partition — available in OSS,
+	// and the picker is where the user chooses which one), and whenever the
+	// script takes inputs the run needs.
+	let showRunForm = $derived(canRun || !!partitionSpec || hasInputs)
 	// A partitioned producer that isn't a data-upload entry is materializing a
 	// partition rather than uploading data — reflect that in the header.
 	let partitionOnly = $derived(!canRun && !!partitionSpec)
+	// `isValid` is only meaningful while a form is mounted to vouch for it; with
+	// no form the run fires with `{}`, which is always valid. Deriving this rather
+	// than reading `isValid` directly avoids a stuck-disabled Run button when a
+	// required-input form leaves `isValid=false` behind as it unmounts on a
+	// same-path re-resolve to an input-less script (we're keyed on script.path).
+	let runValid = $derived(showRunForm ? isValid : true)
 
 	// The details pane keys this component on script.path only, so a same-path
 	// re-resolve (in /pipeline_dev the selected node re-resolves on every WS
@@ -94,7 +105,9 @@
 		if (!dispatch || running) return
 		running = true
 		try {
-			await dispatch(script.path, $state.snapshot(args))
+			// No form rendered ⇒ no inputs to collect: run with {} rather than args a
+			// prior (input-carrying) resolve of this same path left behind unmounted.
+			await dispatch(script.path, showRunForm ? $state.snapshot(args) : {})
 		} finally {
 			running = false
 		}
@@ -112,47 +125,54 @@
 	<Splitpanes horizontal class="!h-full">
 		<Pane size={55} minSize={20}>
 			<div class="flex flex-col h-full overflow-auto">
-				{#if showRunForm}
-					<div class="shrink-0 flex flex-col gap-2 p-3 border-b" data-run-form>
-						<div class="flex items-center justify-between gap-2">
-							<span class="text-xs font-semibold text-emphasis inline-flex items-center gap-1.5">
-								{#if partitionOnly}
-									<CalendarClock size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
-									Materialize a partition
-								{:else}
-									<Upload size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
-									Run pipeline
-								{/if}
-							</span>
-							<div class="flex items-center gap-1.5">
-								{#if hasCascade}
-									<Button
-										variant="accent-secondary"
-										unifiedSize="sm"
-										startIcon={{ icon: running ? Loader2 : Zap }}
-										onclick={() => run(true)}
-										disabled={isDraft || running || !isValid}
-										title={`Run this script with these inputs, then run its ${downstreamCount} downstream pipeline script${downstreamCount === 1 ? '' : 's'} in order`}
-									>
-										Run + downstream
-									</Button>
-								{/if}
+				<!-- Run affordance is always the first thing in the node panel so
+				     it's discoverable the moment a script is selected — never
+				     buried below the source. The parameter form renders under it
+				     only when the run actually needs inputs (upload/partition/args). -->
+				<div class="shrink-0 flex flex-col gap-2 p-3 border-b" data-run-form>
+					<div class="flex items-center justify-between gap-2">
+						<span class="text-xs font-semibold text-emphasis inline-flex items-center gap-1.5">
+							{#if partitionOnly}
+								<CalendarClock size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
+								Materialize a partition
+							{:else if canRun}
+								<Upload size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
+								Run pipeline
+							{:else}
+								<Play size={13} class="text-fuchsia-600 dark:text-fuchsia-400" />
+								Run this step
+							{/if}
+						</span>
+						<div class="flex items-center gap-1.5">
+							{#if hasCascade}
 								<Button
-									variant="accent"
+									variant="accent-secondary"
 									unifiedSize="sm"
-									startIcon={{ icon: running ? Loader2 : Play }}
-									onclick={() => run(false)}
-									disabled={isDraft || running || !isValid || !onRun}
-									title={isDraft
-										? 'Deploy this draft to run it for real'
-										: hasCascade
-											? 'Run just this step — downstream scripts are not triggered'
-											: 'Run the deployed script — downstream pipeline scripts cascade for real'}
+									startIcon={{ icon: running ? Loader2 : Zap }}
+									onclick={() => run(true)}
+									disabled={isDraft || running || !runValid}
+									title={`Run this script with these inputs, then run its ${downstreamCount} downstream pipeline script${downstreamCount === 1 ? '' : 's'} in order`}
 								>
-									{running ? 'Starting…' : 'Run'}
+									Run + downstream
 								</Button>
-							</div>
+							{/if}
+							<Button
+								variant="accent"
+								unifiedSize="sm"
+								startIcon={{ icon: running ? Loader2 : Play }}
+								onclick={() => run(false)}
+								disabled={isDraft || running || !runValid || !onRun}
+								title={isDraft
+									? 'Deploy this draft to run it for real'
+									: hasCascade
+										? 'Run just this step — downstream scripts are not triggered'
+										: 'Run the deployed script — downstream pipeline scripts cascade for real'}
+							>
+								{running ? 'Starting…' : 'Run'}
+							</Button>
 						</div>
+					</div>
+					{#if showRunForm}
 						{#key schemaKey}
 							<PipelineRunForm
 								schema={script.schema}
@@ -164,8 +184,8 @@
 								{upstreamAssets}
 							/>
 						{/key}
-					</div>
-				{/if}
+					{/if}
+				</div>
 				<div class="flex-1 min-h-0 overflow-auto text-xs p-3">
 					<HighlightCode code={script.content ?? ''} language={script.language} />
 				</div>
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index 78ce96a1f2..e65c97b83d 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -2170,10 +2170,12 @@
 			</div>
 		{/if}
 		<div class="flex flex-row items-center gap-2 flex-1 justify-end">
-			{#if mode === 'edit' && !isOperator && allPipelineScripts.length > 0}
-				<!-- Pipeline-level run: always visible so a run doesn't require
-				     hovering a specific node's play button. Runs every script in
-				     dependency order (roots first, cascading downstream). -->
+			{#if !isOperator && allPipelineScripts.length > 0}
+				<!-- Pipeline-level run: always visible in both View and Edit so a
+				     run never requires hunting for a specific node's play button
+				     (dbt `build` / Dagster "Materialize all"). Runs every script in
+				     dependency order (roots first, cascading downstream) over the
+				     displayed graph — deployed in View, draft-overlaid in Edit. -->
 				<Button
 					variant="accent-secondary"
 					unifiedSize="sm"

From ad6f23d6bfcf1056bcb6d8c6b552114e88177328 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 03:08:54 +0200
Subject: [PATCH 67/76] fix(cli): HD-1 test_edges + HD-2 scd2 _current write in
 --local pipeline graph (#9947)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(cli): emit HD-1 test_edges + HD-2 scd2 _current write in --local pipeline graph

Close the remaining local-vs-deployed graph parity gaps in `wmill pipeline
show <folder> --local` so it matches the deployed graph (backend
`asset_graph`, windmill-api-assets):

- HD-1 `test_edges`: synthesize ordering-only producer → tested-script edges
  from parsed `// data_test` annotations. A `relationships` test references
  its `to_path` asset; a custom `// data_test <script>` resolves best-effort
  against that script's parsed reads. Each referenced asset is resolved to its
  in-pipeline producer via the write edges; self-edges and producer-less
  (external) assets are dropped — mirroring the backend set semantics.
  Routed through the asset node in boundedCascade's lineage DAG (asset →
  tested script) so a cold/bounded cascade orders the referenced dimension
  first, matching the frontend.

- HD-2 scd2 `<dim>_current` companion write: a managed `// materialize …
  history` (scd2 && !manual) also produces a `<dim>_current` view. Register it
  as a second write edge and mark the asset `derived_from` its base dimension,
  so a consumer reading only the view links back to the producer instead of
  orphaning. Gated exactly like the backend `MaterializeSpec::write_targets` /
  `scd2_current_target`.

The pinned `windmill-parser-wasm-asset` (1.740.0) predates the `scd2`
materialize flag, so `buildLocalPipelineGraph` takes an injectable parser and
the HD-2 test injects one that re-adds `scd2` for a `history` materialize —
exercising the already-shipped companion-write branch until a wasm carrying
`scd2` is republished (cf. #9926).

Extends cli/test/pipeline_local_graph_unit.test.ts with HD-1 (relationships,
no-producer, self-test, custom) and HD-2 coverage.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore(cli): pin windmill-parser-wasm-asset 1.749.0, drop HD-2 test parser seam

Now that windmill-parser-wasm-asset 1.749.0 (which serializes the `scd2`
materialize flag) is published, bump the CLI pin and retire the temporary
injection seam:

- Remove the `infer?` parameter from `buildLocalPipelineGraph`; it always uses
  the wasm-backed `inferScriptAssets` again.
- The HD-2 `<dim>_current` companion-write test drives the real wasm directly
  (drops the `inferWithScd2` wrapper that re-added `scd2` against the pinned
  1.740.0 build).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore(frontend): pin windmill-parser-wasm-asset 1.749.0 to match CLI

Restore the CLI↔frontend lockstep on the asset parser wasm broken by the
previous commit: every other windmill-parser-wasm-* package is pinned to the
same version in both cli/package.json and frontend/package.json, so keep the
asset parser aligned too. The frontend derives materialize/scd2 from its own
TS annotation parser (`parsePipelineAnnotations`), so this bump only affects
body asset inference in the live graph — moving it in step with the CLI
`--local` graph and the deployed backend parser.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
---
 cli/bun.lock                                |   4 +-
 cli/package-lock.json                       |   8 +-
 cli/package.json                            |   2 +-
 cli/src/commands/pipeline/boundedCascade.ts |  20 +++
 cli/src/commands/pipeline/localGraph.ts     | 144 +++++++++++++++++-
 cli/test/pipeline_local_graph_unit.test.ts  | 154 +++++++++++++++++++-
 frontend/package-lock.json                  |   8 +-
 frontend/package.json                       |   2 +-
 8 files changed, 316 insertions(+), 26 deletions(-)

diff --git a/cli/bun.lock b/cli/bun.lock
index 1696e1aa65..a745acbcba 100644
--- a/cli/bun.lock
+++ b/cli/bun.lock
@@ -19,7 +19,7 @@
         "pg-gateway": "0.3.0-beta.4",
         "svelte": "^5.45.2",
         "tar-stream": "^3.1.7",
-        "windmill-parser-wasm-asset": "1.740.0",
+        "windmill-parser-wasm-asset": "1.749.0",
         "windmill-parser-wasm-csharp": "1.510.1",
         "windmill-parser-wasm-go": "1.510.1",
         "windmill-parser-wasm-java": "1.510.1",
@@ -290,7 +290,7 @@
 
     "utility-types": ["utility-types@3.11.0", "", {}, "sha512-6Z7Ma2aVEWisaL6TvBCy7P8rm2LQoPv6dJ7ecIaIixHcwfbJ0x7mWdbcwlIM5IGQxPZSFYeqRCqlOOeKoJYMkw=="],
 
-    "windmill-parser-wasm-asset": ["windmill-parser-wasm-asset@1.740.0", "", {}, "sha512-Dgn5sQ93vJpqTQkv9iAy25+bqH2bUnIMdCfERb2Tia0Ql9T6iHbQhi4yzH9FbGW4Drv9GP46Qyetphqvp8vFOw=="],
+    "windmill-parser-wasm-asset": ["windmill-parser-wasm-asset@1.749.0", "", {}, "sha512-gj8g9sWQ0tXKfXso7xJxR56sS8Loe/RsnFy+0af5R8siZeCag9ikquGbQ8d8kOqIK2U8eCNA0LqsU/xAFDJIOg=="],
 
     "windmill-parser-wasm-csharp": ["windmill-parser-wasm-csharp@1.510.1", "", {}, "sha512-qm09YmnbeYHLwYn1jUnObVzPhYO9NZKMlIO7nlo7zPJBXqksgG5fK/KCtwGw9rChrnz+DsvM9wP5FhrwRLMtwQ=="],
 
diff --git a/cli/package-lock.json b/cli/package-lock.json
index 038e223255..a9d72696b2 100644
--- a/cli/package-lock.json
+++ b/cli/package-lock.json
@@ -20,7 +20,7 @@
         "pg-gateway": "0.3.0-beta.4",
         "svelte": "^5.45.2",
         "tar-stream": "^3.1.7",
-        "windmill-parser-wasm-asset": "1.740.0",
+        "windmill-parser-wasm-asset": "1.749.0",
         "windmill-parser-wasm-csharp": "1.510.1",
         "windmill-parser-wasm-go": "1.510.1",
         "windmill-parser-wasm-java": "1.510.1",
@@ -1412,9 +1412,9 @@
       }
     },
     "node_modules/windmill-parser-wasm-asset": {
-      "version": "1.740.0",
-      "resolved": "https://registry.npmjs.org/windmill-parser-wasm-asset/-/windmill-parser-wasm-asset-1.740.0.tgz",
-      "integrity": "sha512-Dgn5sQ93vJpqTQkv9iAy25+bqH2bUnIMdCfERb2Tia0Ql9T6iHbQhi4yzH9FbGW4Drv9GP46Qyetphqvp8vFOw=="
+      "version": "1.749.0",
+      "resolved": "https://registry.npmjs.org/windmill-parser-wasm-asset/-/windmill-parser-wasm-asset-1.749.0.tgz",
+      "integrity": "sha512-gj8g9sWQ0tXKfXso7xJxR56sS8Loe/RsnFy+0af5R8siZeCag9ikquGbQ8d8kOqIK2U8eCNA0LqsU/xAFDJIOg=="
     },
     "node_modules/windmill-parser-wasm-csharp": {
       "version": "1.510.1",
diff --git a/cli/package.json b/cli/package.json
index 5881847636..589bc52271 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -28,7 +28,7 @@
     "pg-gateway": "0.3.0-beta.4",
     "svelte": "^5.45.2",
     "tar-stream": "^3.1.7",
-    "windmill-parser-wasm-asset": "1.740.0",
+    "windmill-parser-wasm-asset": "1.749.0",
     "windmill-parser-wasm-csharp": "1.510.1",
     "windmill-parser-wasm-go": "1.510.1",
     "windmill-parser-wasm-java": "1.510.1",
diff --git a/cli/src/commands/pipeline/boundedCascade.ts b/cli/src/commands/pipeline/boundedCascade.ts
index 87c0636c0d..69166726c5 100644
--- a/cli/src/commands/pipeline/boundedCascade.ts
+++ b/cli/src/commands/pipeline/boundedCascade.ts
@@ -41,6 +41,18 @@ export type BCGraph = {
       }
     | { trigger_kind: string; runnable_kind: string; runnable_path: string }
   )[];
+  // `// data_test` ordering edges (HD-1): the referenced asset's producer must
+  // materialize before the tested script runs. Fed into the lineage DAG so a
+  // bounded/cold cascade orders the referenced dimension first. Optional — the
+  // deployed graph omits it when empty, and older local graphs never emit it.
+  test_edges?: {
+    producer_kind: string;
+    producer_path: string;
+    runnable_kind: string;
+    runnable_path: string;
+    asset_kind: string;
+    asset_path: string;
+  }[];
 };
 
 export const SCRIPT_PREFIX = "script:";
@@ -118,6 +130,14 @@ export function buildLineageDag(g: BCGraph): LineageDag {
     const at = t as Extract<BCGraph["triggers"][number], { trigger_kind: "asset" }>;
     addEdge(dag, assetNodeId(at.asset_kind, at.asset_path), scriptNodeId(at.runnable_path));
   }
+  // Data-test ordering edges: route through the referenced asset node so the
+  // existing producer → asset write edge extends into producer → asset → testing
+  // script (mirrors frontend boundedCascade.ts) — the tested script runs after
+  // the referenced dimension materializes.
+  for (const t of g.test_edges ?? []) {
+    if (t.runnable_kind !== "script") continue;
+    addEdge(dag, assetNodeId(t.asset_kind, t.asset_path), scriptNodeId(t.runnable_path));
+  }
   return dag;
 }
 
diff --git a/cli/src/commands/pipeline/localGraph.ts b/cli/src/commands/pipeline/localGraph.ts
index c1a5882849..3c531c4aa9 100644
--- a/cli/src/commands/pipeline/localGraph.ts
+++ b/cli/src/commands/pipeline/localGraph.ts
@@ -71,6 +71,23 @@ export type GraphEdge = {
   asset_path: string;
   access_type?: "r" | "w" | "rw";
 };
+// Ordering-only "must-run-after" edge (HD-1): a `// data_test relationships`
+// (or, best-effort, a custom `// data_test <script>` whose body reads an
+// in-pipeline asset) needs the referenced asset's producer to materialize before
+// the tested script runs — a dependency otherwise absent from the DAG, so a cold
+// cascade could run the tested script first and hard-fail. Synthesized locally
+// from the parsed `data_tests` + write edges; mirrors the deployed graph's
+// `test_edges` (backend `asset_graph`) so `--local` orders a cold cascade the
+// same way. Only emitted when the referenced asset has an in-pipeline producer;
+// an external table (no producer) adds no edge. NOT a data-consumption edge.
+export type GraphTestEdge = {
+  producer_kind: string;
+  producer_path: string;
+  runnable_kind: string;
+  runnable_path: string;
+  asset_kind: string;
+  asset_path: string;
+};
 export type GraphTrigger =
   | {
       trigger_kind: "asset";
@@ -103,6 +120,10 @@ export type AssetGraph = {
     macro_names: string[];
     via_use?: boolean;
   }[];
+  // `// data_test` ordering edges (HD-1); present on both the deployed graph and
+  // this local one. Absent when empty (matches the deployed graph's
+  // `skip_serializing_if = Vec::is_empty`).
+  test_edges?: GraphTestEdge[];
 };
 
 export type LocalScript = {
@@ -118,7 +139,25 @@ export type LocalScript = {
 // `ParseAssetsOutput`). `triggers` is internally tagged on `kind`
 // (`#[serde(tag = "kind", rename_all = "lowercase")]`): asset triggers carry
 // `asset_kind` + `path`; native triggers are bare `{ kind }`.
-type ParseAssetsRaw = {
+// One parsed `// data_test` entry (serialized Rust `DataTest`, tagged on `type`).
+// A proper discriminated union over the five built-ins so a `dt.type` switch
+// narrows; only `relationships` / `custom` carry a cross-asset ref that the
+// local test-edge synthesis reads. Kept structurally identical to the wasm
+// output and the deployed graph's `data_tests`.
+export type ParsedDataTest =
+  | { type: "unique"; column: string }
+  | { type: "not_null"; column: string }
+  | { type: "accepted_values"; column: string; values: string[] }
+  | {
+      type: "relationships";
+      column: string;
+      to_kind: string;
+      to_path: string;
+      to_column: string;
+    }
+  | { type: "custom"; path: string };
+
+export type ParseAssetsRaw = {
   assets?: {
     kind: string;
     path: string;
@@ -148,7 +187,7 @@ type ParseAssetsRaw = {
   partition?: { kind: string };
   freshness?: { duration: string };
   retry?: { count: number; delay?: string };
-  data_tests?: unknown[];
+  data_tests?: ParsedDataTest[];
   column_lineage?: unknown[];
 };
 
@@ -349,10 +388,11 @@ function parseVolumeAnnotations(
 }
 
 // Infer a single script's assets + pipeline annotations. Returns the raw
-// `ParseAssetsOutput` (incl. `materialize`, which the wasm asset parser emits as
-// of windmill-parser-wasm-asset 1.740.0 — kept in lockstep with the frontend's
-// pin so the local graph mirrors the deployed one), plus `volume:` annotation
-// assets the wasm doesn't surface (merged in below, like the frontend/backend).
+// `ParseAssetsOutput` (incl. `materialize` with its `scd2` flag, which the wasm
+// asset parser emits as of windmill-parser-wasm-asset 1.749.0 — kept in lockstep
+// with the frontend's pin so the local graph mirrors the deployed one), plus
+// `volume:` annotation assets the wasm doesn't surface (merged in below, like
+// the frontend/backend).
 // wasm parse errors degrade to the annotation fallback so a syntactically-broken
 // script still shows as a pipeline node if it's annotated.
 export async function inferScriptAssets(
@@ -479,9 +519,24 @@ export async function buildLocalPipelineGraph(args: {
   // trigger (processed after the producer) can't clobber the derived marker.
   const derivedFromByKey = new Map<string, string>();
   const pipelineScripts: LocalScript[] = [];
+  // For HD-1 test edges: a pipeline member's parsed `// data_test`s, and the
+  // assets each script READS (any script, so a custom test resolves against a
+  // non-member test script's reads — best-effort, mirroring the backend, which
+  // resolves custom tests against every deployed runnable's asset usages).
+  const dataTestsByPath = new Map<string, ParsedDataTest[]>();
+  const readsByRunnable = new Map<string, { kind: string; path: string }[]>();
 
   for (const s of all) {
     const out = await inferScriptAssets(s.content, s.language);
+    const reads = (out.assets ?? [])
+      .filter(
+        (a) =>
+          a.access_type == null ||
+          a.access_type === "r" ||
+          a.access_type === "rw",
+      )
+      .map((a) => ({ kind: a.kind, path: a.path }));
+    if (reads.length > 0) readsByRunnable.set(s.path, reads);
     // A `// macros` library is a pipeline-member node carrying its macro
     // signatures — whether or not any consumer uses it — matching the deployed
     // graph, which marks every macro library `auto_kind='pipeline'`. It is
@@ -503,6 +558,9 @@ export async function buildLocalPipelineGraph(args: {
       continue;
     }
     if (!out.in_pipeline) continue; // not a pipeline member
+    if (out.data_tests && out.data_tests.length > 0) {
+      dataTestsByPath.set(s.path, out.data_tests);
+    }
     const retry = normalizeRetry(out.retry);
     const nativeTriggers = recoverHeaderNativeTriggers(s.content, s.language);
     // Carry the parsed `// tag` so previews route to the same worker the
@@ -631,6 +689,8 @@ export async function buildLocalPipelineGraph(args: {
 
   const macroEdges = buildMacroEdges(all, libMacros, runnables);
 
+  const testEdges = buildTestEdges(dataTestsByPath, readsByRunnable, edges);
+
   const assets = [...assetSet.entries()].map(([key, a]) => {
     const derived_from = a.derived_from ?? derivedFromByKey.get(key);
     return derived_from ? { ...a, derived_from } : a;
@@ -643,11 +703,83 @@ export async function buildLocalPipelineGraph(args: {
       edges,
       triggers,
       ...(macroEdges.length > 0 ? { macro_edges: macroEdges } : {}),
+      ...(testEdges.length > 0 ? { test_edges: testEdges } : {}),
     },
     scripts: pipelineScripts,
   };
 }
 
+// Synthesize HD-1 ordering edges from parsed `// data_test`s. Ports backend
+// `asset_graph` (windmill-api-assets): resolve each test's referenced asset(s)
+// to their in-pipeline producer(s) via the write edges, and add an ordering-only
+// producer → tested-script edge. A `relationships` test references its `to_path`
+// asset directly; a `custom` test references the tested/other script's parsed
+// reads (best-effort). Self-edges (a script testing its own output) and assets
+// with no in-pipeline producer are dropped, exactly like the backend.
+function buildTestEdges(
+  dataTestsByPath: Map<string, ParsedDataTest[]>,
+  readsByRunnable: Map<string, { kind: string; path: string }[]>,
+  edges: GraphEdge[],
+): GraphTestEdge[] {
+  const producersByAsset = new Map<string, { kind: string; path: string }[]>();
+  for (const e of edges) {
+    if (e.access_type !== "w" && e.access_type !== "rw") continue;
+    // `\u0000` as the (kind, path) separator: it can't occur in an asset path,
+    // so no packed key can collide.
+    const key = `${e.asset_kind}\u0000${e.asset_path}`;
+    (producersByAsset.get(key) ?? producersByAsset.set(key, []).get(key)!).push({
+      kind: e.runnable_kind,
+      path: e.runnable_path,
+    });
+  }
+
+  const out: GraphTestEdge[] = [];
+  // Dedup on (producer, tested_script, asset) so repeated tests / producers
+  // referencing the same asset yield one edge (mirrors the backend's set).
+  const seen = new Set<string>();
+  for (const [memberPath, dts] of dataTestsByPath) {
+    for (const dt of dts) {
+      let referenced: { kind: string; path: string }[] = [];
+      if (dt.type === "relationships") {
+        referenced = [{ kind: dt.to_kind, path: dt.to_path }];
+      } else if (dt.type === "custom") {
+        // The custom test script's own parsed reads. Reading the member's OWN
+        // output resolves to the member as producer and is dropped below.
+        referenced = readsByRunnable.get(dt.path) ?? [];
+      }
+      for (const ref of referenced) {
+        const producers = producersByAsset.get(`${ref.kind}\u0000${ref.path}`);
+        if (!producers) continue; // external table (no producer) ⇒ no edge
+        for (const p of producers) {
+          // Skip a self-edge: the tested script produces the asset it tests.
+          if (p.kind === "script" && p.path === memberPath) continue;
+          const key = [p.path, memberPath, ref.kind, ref.path].join("\u0000");
+          if (seen.has(key)) continue;
+          seen.add(key);
+          out.push({
+            producer_kind: p.kind,
+            producer_path: p.path,
+            runnable_kind: "script",
+            runnable_path: memberPath,
+            asset_kind: ref.kind,
+            asset_path: ref.path,
+          });
+        }
+      }
+    }
+  }
+  // Deterministic order for stable `--json` output (the deployed graph iterates
+  // an unordered map; the local one sorts so snapshots don't churn).
+  out.sort(
+    (a, b) =>
+      a.producer_path.localeCompare(b.producer_path) ||
+      a.runnable_path.localeCompare(b.runnable_path) ||
+      a.asset_kind.localeCompare(b.asset_kind) ||
+      a.asset_path.localeCompare(b.asset_path),
+  );
+  return out;
+}
+
 // Every `// macros` DuckDB library in the workspace, keyed by its windmill path,
 // mapped to its parsed macro definitions. Walks the whole `f/` tree (not just the
 // pipeline folder) because the deployed graph resolves consumers against the
diff --git a/cli/test/pipeline_local_graph_unit.test.ts b/cli/test/pipeline_local_graph_unit.test.ts
index 377da60851..9b0c88ea11 100644
--- a/cli/test/pipeline_local_graph_unit.test.ts
+++ b/cli/test/pipeline_local_graph_unit.test.ts
@@ -143,14 +143,152 @@ test("`// materialize <asset>` producer connects to its `// on` consumer", async
   );
 });
 
-// NOTE: the scd2 `<dim>_current` companion-view write edge (buildLocalPipelineGraph)
-// is exercised end-to-end by the backend parser test
-// (`materialize_scd2_write_targets_include_current_view`) and the frontend
-// live-graph test (`resolveGraph.test.ts` — "scd2 materialize draft"). It has no
-// unit test here because it depends on the `scd2` flag emitted by the bundled
-// `windmill-parser-wasm-asset`, which lags the source (the vendored build
-// predates the scd2 fields); the branch activates once a wasm carrying `scd2` is
-// republished (cf. the wasm-publish plumbing in #9926).
+test("HD-1: `// data_test relationships` adds a producer → tested-script ordering edge", async () => {
+  // Mirror of the deployed graph's `test_edges` (backend `asset_graph`): the
+  // referenced dimension's in-pipeline producer must materialize before the
+  // tested script runs, so a cold cascade orders it first. The wasm emits the
+  // parsed `relationships` test; the local builder resolves its producer.
+  await withFolder(
+    {
+      "dim_customers.duckdb.sql":
+        `-- pipeline\n-- materialize ducklake://main/dim_customers\nSELECT 1 AS id;\n`,
+      "fct_orders_daily.duckdb.sql":
+        `-- pipeline\n-- on ducklake://main/orders\n-- data_test relationships customer_id -> ducklake://main/dim_customers.id\nSELECT customer_id FROM main.orders;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.test_edges).toEqual([
+        {
+          producer_kind: "script",
+          producer_path: "f/mypipe/dim_customers",
+          runnable_kind: "script",
+          runnable_path: "f/mypipe/fct_orders_daily",
+          asset_kind: "ducklake",
+          asset_path: "main/dim_customers",
+        },
+      ]);
+    },
+  );
+});
+
+test("HD-1: a relationships ref to an asset with no in-pipeline producer adds no edge", async () => {
+  // No producer (external / not-yet-in-pipeline table) ⇒ no ordering edge — the
+  // runtime error stands, exactly like the backend (`test_edges` stays empty and
+  // is omitted from the graph).
+  await withFolder(
+    {
+      "fct.duckdb.sql":
+        `-- pipeline\n-- on ducklake://main/orders\n-- data_test relationships customer_id -> ducklake://main/external_dim.id\nSELECT customer_id FROM main.orders;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.test_edges).toBeUndefined();
+    },
+  );
+});
+
+test("HD-1: a self-test (relationships on the script's own materialize output) is dropped", async () => {
+  // The tested script produces the very asset it references — the backend's
+  // self-edge guard drops it, and so must the local builder (no self-ordering).
+  await withFolder(
+    {
+      "dim.duckdb.sql":
+        `-- pipeline\n-- materialize ducklake://main/dim\n-- data_test relationships id -> ducklake://main/dim.id\nSELECT 1 AS id;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.test_edges).toBeUndefined();
+    },
+  );
+});
+
+test("HD-1: a custom `// data_test <script>` whose body reads an in-pipeline asset orders it (best-effort)", async () => {
+  // Escape-hatch test: the tested member declares `// data_test f/mypipe/test_dim`;
+  // that script reads `s3://demo/dim.parquet`, which a pipeline member produces.
+  // The producer must run before the tested script, so the custom test resolves
+  // to a producer → tested-script edge through the shared asset (mirrors the
+  // backend resolving custom tests against the script's parsed reads).
+  await withFolder(
+    {
+      // producer writes the S3 asset the custom test reads
+      "export_dim.duckdb.sql":
+        `-- pipeline\nCOPY (SELECT 1 AS id) TO 's3://demo/dim.parquet';\n`,
+      // the escape-hatch test script (NOT a pipeline member) reads that asset
+      "test_dim.duckdb.sql":
+        `SELECT * FROM read_parquet('s3://demo/dim.parquet') WHERE id IS NULL;\n`,
+      // the tested member points at the custom test
+      "fct.duckdb.sql":
+        `-- pipeline\n-- on ducklake://main/orders\n-- data_test f/mypipe/test_dim\nSELECT 1 AS id;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({ root, folder, defaultTs: "bun" });
+      expect(graph.test_edges).toEqual([
+        {
+          producer_kind: "script",
+          producer_path: "f/mypipe/export_dim",
+          runnable_kind: "script",
+          runnable_path: "f/mypipe/fct",
+          asset_kind: "s3object",
+          asset_path: "demo/dim.parquet",
+        },
+      ]);
+    },
+  );
+});
+
+test("HD-2: an scd2 `history` producer writes both `<dim>` and `<dim>_current` so a `_current` reader resolves to it", async () => {
+  // Managed `// materialize … history` (scd2) also produces a `<dim>_current`
+  // companion view (backend `MaterializeSpec::write_targets`). The wasm asset
+  // parser emits the `scd2` flag; the local builder must add the second write
+  // edge and mark the view `derived_from` its base dimension so a consumer
+  // reading only the view links back to the producer instead of orphaning.
+  await withFolder(
+    {
+      "dim.duckdb.sql":
+        `-- pipeline\n-- materialize ducklake://main/dim_customers key=id history\nSELECT 1 AS id;\n`,
+      // a consumer reading ONLY the `_current` companion view
+      "consume.duckdb.sql":
+        `-- pipeline\n-- on ducklake://main/dim_customers_current\nSELECT * FROM main.dim_customers_current;\n`,
+    },
+    async (root, folder) => {
+      const { graph } = await buildLocalPipelineGraph({
+        root,
+        folder,
+        defaultTs: "bun",
+      });
+
+      // the producer carries BOTH write edges (base dim + `_current` companion)
+      const writes = graph.edges
+        .filter(
+          (e) =>
+            e.runnable_path === "f/mypipe/dim" && e.access_type === "w",
+        )
+        .map((e) => e.asset_path)
+        .sort();
+      expect(writes).toEqual(["main/dim_customers", "main/dim_customers_current"]);
+
+      // the strategy is derived as scd2 on the producer node
+      expect(
+        graph.runnables.find((r) => r.path === "f/mypipe/dim")?.materialize_strategy,
+      ).toBe("scd2");
+
+      // the `_current` asset is marked as derived from its base dimension, so the
+      // canvas renders it as a companion view rather than an orphan table
+      expect(graph.assets).toContainEqual({
+        kind: "ducklake",
+        path: "main/dim_customers_current",
+        derived_from: "main/dim_customers",
+      });
+
+      // the `_current` reader's `// on` trigger points at the same node the
+      // producer now writes — no orphaned read
+      const at = graph.triggers.find(
+        (t) => t.trigger_kind === "asset" && t.runnable_path === "f/mypipe/consume",
+      ) as Extract<(typeof graph.triggers)[number], { trigger_kind: "asset" }> | undefined;
+      expect(at?.asset_path).toBe("main/dim_customers_current");
+    },
+  );
+});
 
 test("a bare `.sql` (ambiguous dialect) is skipped, not a build-aborting crash", async () => {
   // `inferContentTypeFromFilePath` throws on a dialect-less `.sql`; one such file
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 103e4bf4e0..4489e6160e 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -79,7 +79,7 @@
 				"vscode-languageclient": "~9.0.1",
 				"vscode-uri": "~3.1.0",
 				"vscode-ws-jsonrpc": "~3.5.0",
-				"windmill-parser-wasm-asset": "1.740.0",
+				"windmill-parser-wasm-asset": "1.749.0",
 				"windmill-parser-wasm-csharp": "1.510.1",
 				"windmill-parser-wasm-go": "1.510.1",
 				"windmill-parser-wasm-java": "1.510.1",
@@ -14321,9 +14321,9 @@
 			}
 		},
 		"node_modules/windmill-parser-wasm-asset": {
-			"version": "1.740.0",
-			"resolved": "https://registry.npmjs.org/windmill-parser-wasm-asset/-/windmill-parser-wasm-asset-1.740.0.tgz",
-			"integrity": "sha512-Dgn5sQ93vJpqTQkv9iAy25+bqH2bUnIMdCfERb2Tia0Ql9T6iHbQhi4yzH9FbGW4Drv9GP46Qyetphqvp8vFOw=="
+			"version": "1.749.0",
+			"resolved": "https://registry.npmjs.org/windmill-parser-wasm-asset/-/windmill-parser-wasm-asset-1.749.0.tgz",
+			"integrity": "sha512-gj8g9sWQ0tXKfXso7xJxR56sS8Loe/RsnFy+0af5R8siZeCag9ikquGbQ8d8kOqIK2U8eCNA0LqsU/xAFDJIOg=="
 		},
 		"node_modules/windmill-parser-wasm-csharp": {
 			"version": "1.510.1",
diff --git a/frontend/package.json b/frontend/package.json
index 0b9f20ce34..42ab8ba684 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -154,7 +154,7 @@
 		"vscode-languageclient": "~9.0.1",
 		"vscode-uri": "~3.1.0",
 		"vscode-ws-jsonrpc": "~3.5.0",
-		"windmill-parser-wasm-asset": "1.740.0",
+		"windmill-parser-wasm-asset": "1.749.0",
 		"windmill-parser-wasm-csharp": "1.510.1",
 		"windmill-parser-wasm-go": "1.510.1",
 		"windmill-parser-wasm-java": "1.510.1",

From bf9662172ad7e0ff53d39adc338fd7886672c8f9 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 03:49:51 +0200
Subject: [PATCH 68/76] fix: resolve extensionless bun relative imports on
 windows loader (#9949)

* fix: resolve extensionless bun relative imports on windows loader

* fix: resolve local module probe against importer dir not job root

* fix: keep node_modules-internal relative imports out of windmill resolver on windows
---
 backend/windmill-worker/loader.bun.windows.js | 51 +++++++++++++++----
 1 file changed, 40 insertions(+), 11 deletions(-)

diff --git a/backend/windmill-worker/loader.bun.windows.js b/backend/windmill-worker/loader.bun.windows.js
index f024af671b..a877266662 100644
--- a/backend/windmill-worker/loader.bun.windows.js
+++ b/backend/windmill-worker/loader.bun.windows.js
@@ -10,7 +10,7 @@ const p = {
   name: "windmill-relative-resolver",
   async setup(build) {
     const { readFileSync } = await import("fs");
-    const { resolve } = await import("node:path");
+    const { resolve, dirname } = await import("node:path");
 
     const base_internal_url = "BASE_INTERNAL_URL".replace(
       "localhost",
@@ -26,12 +26,22 @@ const p = {
     // Normalize path to forward slashes to match Bun's resolver output on Windows
     const cdirFwd = cdir.replace(/\\/g, "/");
     const cdirPosix = cdirFwd.replace(/^[a-zA-Z]:/, "");
+    // Match either an already-normalized `.ts` specifier OR an *extensionless*
+    // windmill relative/workspace import (`./`, `../`, `f/`, `/f/`, `u/`, `/u/`).
+    // The extensionless branch is essential on Windows: the `main.ts` onLoad that
+    // would rewrite `./mid` → `./mid.ts` only fires when its path filter matches
+    // bun's resolver output, and the 8.3 short-name (`RUNNER~1`) vs canonical-path
+    // mismatch makes that unreliable — so bare imports must be resolvable here
+    // directly rather than depending on the rewrite. The `(?!.*\.[A-Za-z0-9]+$)`
+    // guard keeps extension-bearing relative imports (a package's internal
+    // `./foo.js`/`./x.json` requires) OUT of this resolver so they fall through
+    // to bun's default resolver — a windmill script import is always `.ts` or
+    // extensionless. Bare npm specifiers (no `./` prefix, not `f/`/`u/`) never
+    // match either branch.
     const filterResolve = new RegExp(
-      `^(?!\\.\/main\\.ts)(?!\\.\/_wm_)(?!${cdirFwd}\/main\\.ts)(?!${cdirFwd}\/_wm_)(?!${cdirPosix}\/main\\.ts)(?!${cdirPosix}\/_wm_)(?!(?:/private)?${cdirNoPrivate}\/wrapper\\.mjs).*\\.ts$`
+      `^(?!\\.\/main\\.ts)(?!\\.\/_wm_)(?!${cdirFwd}\/main\\.ts)(?!${cdirFwd}\/_wm_)(?!${cdirPosix}\/main\\.ts)(?!${cdirPosix}\/_wm_)(?!(?:/private)?${cdirNoPrivate}\/wrapper\\.mjs)(?:.*\\.ts|(?:\\.\\.?\/|\/?f\/|\/?u\/)(?!.*\\.[A-Za-z0-9]+$).*)$`
     );
 
-    let cdirNodeModules = `${cdirFwd}/node_modules/`;
-
     // Match the entry main.ts against bun's forward-slash resolver output on
     // Windows — raw `cdir` carries backslashes that corrupt the regex, so the
     // onLoad below would never fire and extensionless relative imports in
@@ -121,16 +131,35 @@ const p = {
     // Resolve windmill script imports from the file namespace (e.g. from main.ts)
     build.onResolve({ filter: filterResolve }, (args) => {
       const importerFwd = args.importer?.replace(/\\/g, "/") ?? "";
-      if (importerFwd.startsWith(cdirNodeModules)) {
+      // Let bun natively resolve any import originating INSIDE a dependency, so a
+      // package's own relative requires (`./string.js`, extensionless `./foo`)
+      // are never sent to the windmill resolver. Match `/node_modules/` anywhere
+      // rather than a `cdir`-anchored prefix: on Windows `cdir` (canonical, e.g.
+      // `runneradmin`) and the importer path (8.3 short name, e.g. `RUNNER~1`)
+      // disagree, so a prefix check silently fails and dependency imports 404.
+      if (importerFwd.includes("/node_modules/")) {
         return undefined;
       }
-      // Check if the import resolves to a local module file (written by write_module_files)
+      // Check if the import resolves to a local module file (written by
+      // write_module_files, which can nest files in subdirectories). Resolve
+      // candidates against the importer's own directory — not the job root — so
+      // a subdir module importing a sibling (`dir/a.ts` → `./b`) finds
+      // `dir/b.ts` rather than a phantom `job_dir/b.ts`. For imports from
+      // `main.ts` the importer dir IS the job root, so behavior is unchanged.
+      // Module files carry a `.ts` extension, so also try the `.ts` variant of
+      // a bare relative import before falling through to the remote resolver.
       if (args.path.startsWith(".")) {
-        const cwdPath = resolve(cdir, args.path);
-        try {
-          readFileSync(cwdPath);
-          return { path: cwdPath };
-        } catch {}
+        const importerDir = args.importer ? dirname(args.importer) : cdir;
+        const candidates = args.path.endsWith(".ts")
+          ? [args.path]
+          : [args.path, args.path + ".ts"];
+        for (const candidate of candidates) {
+          const cwdPath = resolve(importerDir, candidate);
+          try {
+            readFileSync(cwdPath);
+            return { path: cwdPath };
+          } catch {}
+        }
       }
       const isMainTs =
         args.importer == "./main.ts" || importerFwd.endsWith("/main.ts");

From 234a7254d5f482b6392f05074e382de959031073 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 08:55:02 +0200
Subject: [PATCH 69/76] chore: share DuckDB FFI build cache across worktrees
 (#9954)

The `duckdb` bundled feature compiles the whole DuckDB C++ library from
source (~2min), which dominates the FFI crate's build. A fresh git
worktree had an empty target dir and paid that cost every time.

build_dev.sh now builds into a per-user cache shared across worktrees,
keyed by Cargo.lock + build.rs so distinct DuckDB versions don't collide.
Uncommitted changes to the crate source fall back to an isolated
per-worktree ./target so active FFI development neither disturbs nor is
disturbed by the shared cache. Add a crate .gitignore for /target, and
note the shared cache in the AGENTS.md / backend CLAUDE.md build steps.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 AGENTS.md                                     |  2 +-
 backend/CLAUDE.md                             |  4 ++
 .../windmill-duckdb-ffi-internal/.gitignore   |  1 +
 .../windmill-duckdb-ffi-internal/build_dev.sh | 39 ++++++++++++++++++-
 4 files changed, 44 insertions(+), 2 deletions(-)
 create mode 100644 backend/windmill-duckdb-ffi-internal/.gitignore

diff --git a/AGENTS.md b/AGENTS.md
index 7bcf7efffd..83b68f7d36 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -24,7 +24,7 @@ Open-source platform for internal tools, workflows, API integrations, background
 ## Dev Environment
 
 - **Backend**: `cargo run` from `backend/` (API at http://localhost:8000)
-- **DuckDB local jobs**: before running DuckDB scripts locally, build the FFI shared library with `cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh`. Re-run it after clean builds or when `backend/target/debug/libwindmill_duckdb_ffi_internal.*` is missing.
+- **DuckDB local jobs**: before running DuckDB scripts locally, build the FFI shared library with `cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh`. Re-run it after clean builds or when `backend/target/debug/libwindmill_duckdb_ffi_internal.*` is missing. The bundled DuckDB compile (~2min) is cached in a per-user dir shared across worktrees, so a fresh worktree reuses it and the build is near-instant.
 - **Data pipelines (DuckLake) from source**: a plain `cargo run` (even `--features quickjs`) advertises a `duckdb` worker tag but **cannot** execute DuckDB scripts and has **no** working S3 proxy (DuckLake writes 404). Build CE DuckLake with `cargo run --features quickjs,duckdb,parquet,private` (add `,python` for Python scripts, `,enterprise,license` for EE) **and** build the FFI (bullet above). See `backend/CLAUDE.md` → "Running data pipelines (DuckLake) from source" for the exact feature sets and the two feature-gate gotchas.
 - **Frontend**: `REMOTE=http://localhost:8000 npm run dev` from `frontend/` (port 3000+)
 - **DB**: `psql postgres://postgres:changeme@localhost:5432/windmill`
diff --git a/backend/CLAUDE.md b/backend/CLAUDE.md
index bfbd0ee65b..24cf2cb837 100644
--- a/backend/CLAUDE.md
+++ b/backend/CLAUDE.md
@@ -11,6 +11,10 @@
   cd backend/windmill-duckdb-ffi-internal && ./build_dev.sh
   ```
   Re-run after clean builds or when `target/debug/libwindmill_duckdb_ffi_internal.*` is missing.
+  The bundled DuckDB compile (~2min) is cached in a per-user dir shared across
+  worktrees (keyed by the crate's `Cargo.lock`), so a fresh worktree reuses it and
+  the build is near-instant — you don't pay the full compile per worktree. Editing
+  the FFI crate's own source falls back to an isolated per-worktree `./target`.
 - **Running data pipelines (DuckLake) from source**: see the section below — a plain build
   advertises the `duckdb` tag but cannot execute DuckDB scripts and has no working S3 proxy.
 
diff --git a/backend/windmill-duckdb-ffi-internal/.gitignore b/backend/windmill-duckdb-ffi-internal/.gitignore
new file mode 100644
index 0000000000..ea8c4bf7f3
--- /dev/null
+++ b/backend/windmill-duckdb-ffi-internal/.gitignore
@@ -0,0 +1 @@
+/target
diff --git a/backend/windmill-duckdb-ffi-internal/build_dev.sh b/backend/windmill-duckdb-ffi-internal/build_dev.sh
index d4ae2b7583..f3ce520c68 100755
--- a/backend/windmill-duckdb-ffi-internal/build_dev.sh
+++ b/backend/windmill-duckdb-ffi-internal/build_dev.sh
@@ -1,3 +1,40 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")"
+
+# The `duckdb` "bundled" feature compiles the whole DuckDB C++ library from
+# source (~minutes) and dominates this crate's build. The crate changes very
+# rarely, so by default build into a per-user cache shared across worktrees and
+# keyed by the dependency lock: a fresh worktree reuses the already-compiled
+# DuckDB instead of rebuilding it, and distinct DuckDB versions don't collide.
+# Override the cache root with WINDMILL_DUCKDB_FFI_TARGET.
+#
+# If you are actively editing this crate in a worktree, uncommitted changes to
+# its source switch to an isolated per-worktree ./target so your incremental
+# builds neither disturb nor are disturbed by the shared cache.
+
+src_dirty="$(git status --porcelain -- src Cargo.toml Cargo.lock build.rs 2>/dev/null || true)"
+
+if [ -n "$src_dirty" ]; then
+  export CARGO_TARGET_DIR="$PWD/target"
+  echo "duckdb-ffi: local crate changes detected -> isolated target $CARGO_TARGET_DIR"
+else
+  cache_root="${WINDMILL_DUCKDB_FFI_TARGET:-${XDG_CACHE_HOME:-$HOME/.cache}/windmill/duckdb-ffi-target}"
+  if command -v sha256sum >/dev/null 2>&1; then hash_cmd=sha256sum; else hash_cmd="shasum -a 256"; fi
+  key="$(cat Cargo.lock build.rs | $hash_cmd | cut -c1-16)"
+  export CARGO_TARGET_DIR="$cache_root/$key"
+  echo "duckdb-ffi: shared cache $CARGO_TARGET_DIR"
+  # The cache key covers only the dependency inputs (Cargo.lock + build.rs), so
+  # the expensive bundled-DuckDB build is shared even when this crate's own
+  # source differs between checkouts. But the shared dir's uplifted cdylib is a
+  # single fixed-name artifact written by whichever worktree built last. Touch
+  # our sources so cargo re-links THIS checkout's cdylib and re-uplifts it
+  # before we copy — the copied artifact then always matches this worktree,
+  # never a sibling's. The bundled dependency is a separate crate and stays
+  # cached, so this only costs a ~1s relink.
+  find src -type f -exec touch {} +
+fi
+
 CARGO_NET_GIT_FETCH_WITH_CLI=true cargo build --release -p windmill_duckdb_ffi_internal
 mkdir -p ../target/debug/
-cp target/release/libwindmill_duckdb_ffi_internal.* ../target/debug/
+cp "$CARGO_TARGET_DIR/release/"libwindmill_duckdb_ffi_internal.* ../target/debug/

From a6c0b3756be78ca3fadc7bad6bae98c0887fd538 Mon Sep 17 00:00:00 2001
From: Guilhem <guilhemlemouel@gmail.com>
Date: Mon, 6 Jul 2026 09:23:54 +0200
Subject: [PATCH 70/76] feat: chat-scoped session changes bar + unified diff
 drawer (#9762)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(frontend): chat-scoped unified session changes bar

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* refactor(frontend): drop diff-baseline toggle, show natural per-row diffs

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): carry Draft marker to expanded raw-app file rows

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): show raw-app Draft badge once at tree root, not per file

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* refactor(frontend): reuse shared DraftBadge in session diff drawer

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): show draft-author avatars in session diff badge, icon-only in sidebar

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): keep badge pill around avatar in icon-only DraftBadge

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): small draft marker = indigo pen + avatar; correct itemKind label

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore(frontend): drop package-lock churn from merge (match origin/main)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): dedup diff-button count for legacy fork sessions; test mask helper

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): collapsible session diff panel + per-row open-diff action

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): shared sessionDeployModel for review & deploy (S1)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): model-driven session review drawer, deploy inert (S2)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): wire session deploy + on-behalf/conflict gating (S3)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): behind banner + Update fork + deployment request (S4)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): session changes dock opens drawer by filter (S5)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): session review UI polish (badge, dock, In parent, tree width)

- draft rows show only the avatar DraftBadge, not a duplicate state pill
- drop redundant dock Review button (same as "N to review")
- rename Done -> In parent with a "deployed in parent workspace" tooltip
- widen the file tree

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): existence-gate In parent rows; Badge filters; badge hover

- drop discarded mask-only items from the In-parent segment (existence check)
- use the Badge component for the drawer filter segments and the changes dock
- soften the blue Badge hover (blue-50 base was jumping to blue-200)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): polish session diff drawer (layout, badges, actions)

- remove empty fork-banner gap; uniform sidebar tree padding
- full-bleed diff list: drop card borders/side padding, separators between items
- clamp tree x-overflow; right-align tree badges (min-w-0 on the row button)
- brand-compliant selected filter badges; smaller draft badge
- hide per-row open-diff button when the panel is open
- rename "Delete draft" to "Discard draft" (destructive); remove header Review button
- larger sm deploy/discard action buttons; remove per-item diff-content collapse

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): session Edits dock — deploy gating + change-op tracking

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(frontend): session bar per-status badges; drop change-op tracking

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(frontend): unwrap raw apps into per-file tree in session diff sidebar

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(frontend): dot-parcours pipeline (badge-derived, melt tooltip) + discard confirm

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): behind-only session item reads as deployed, not bare

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* style(frontend): even sidebar tree margins; gutter-aware right padding

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): pass chat id as from_session; wire deploying flag

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): session diff drawer scroll-to-flush, ordering, spacer, deploy gating

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(frontend): preserve chat mask on compact; guard stale existence checks; clear poll timers

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): refresh bar after drawer deploys; conflict hint over chip; plain conflict badge

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* style(frontend): diff drawer card layout with flash ring and aligned insets

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): hide stale deployed chip once row status badge reads deployed

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor(frontend): session dock to two states; drop parent deploy

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(frontend): staged deploy animation in session edits drawer

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(frontend): stale-draft warning in session edits drawer

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): keep chat mask honest on deploy and discard

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): map trigger_email deploy kind; serialize mask persists

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): reset mask on new chat; close review-flagged races

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* style(frontend): rename session drawer title to Edited during session

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): keep mask persist queue alive after a failed save

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): sync session chatId on chat rotation; gate deploy on canWrite

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* feat(frontend): keep compare handoff for deletion-only session edits

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* fix(frontend): hold deploy success beat across re-keyed rows

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../src/lib/components/CompareDrafts.svelte   |   69 +-
 .../lib/components/CompareWorkspaces.svelte   |   45 +-
 frontend/src/lib/components/DraftBadge.svelte |   74 +-
 .../lib/components/common/badge/Badge.svelte  |    2 +-
 .../copilot/chat/AIChatManager.svelte.ts      |  147 +-
 .../copilot/chat/AIChatManager.test.ts        |    4 +-
 .../copilot/chat/HistoryManager.svelte.ts     |   55 +-
 .../copilot/chat/HistoryManager.test.ts       |   27 +
 .../components/copilot/chat/global/core.ts    |   40 +
 .../copilot/chat/global/userDraftAdapter.ts   |   35 +-
 .../src/lib/components/copilot/chat/shared.ts |   10 +
 .../sessions/DraftDiffDrawer.svelte           |  204 ---
 .../components/sessions/ForkDiffDrawer.svelte |  125 --
 .../sessions/SessionChangesBar.svelte         |  264 ++++
 .../sessions/SessionDiffDrawer.svelte         |  107 ++
 .../sessions/SessionDraftBar.svelte           |   77 -
 .../components/sessions/SessionForkBar.svelte |  212 ---
 .../components/sessions/SessionPicker.svelte  |   41 +-
 .../sessions/SessionStatusDot.svelte          |   26 +-
 .../components/sessions/SessionWrapper.svelte |   18 +-
 .../sessions/WorkspaceDiffDrawer.svelte       | 1254 +++++++++++------
 .../lib/components/sessions/diffTree.test.ts  |   37 +
 .../src/lib/components/sessions/diffTree.ts   |   32 +-
 .../components/sessions/forkDiffCache.test.ts |   20 +-
 .../sessions/modifiedItemsMask.test.ts        |   66 +
 .../components/sessions/modifiedItemsMask.ts  |   52 +
 .../sessions/sessionDeployModel.svelte.ts     |  351 +++++
 .../sessions/sessionDeployModel.test.ts       |  232 +++
 .../components/sessions/sessionDeployModel.ts |  274 ++++
 .../sessions/sessionRuntime.svelte.ts         |  129 +-
 .../sessions/sessionState.svelte.ts           |   43 +-
 .../components/sessions/sessionState.test.ts  |   69 +-
 frontend/src/lib/utils_draft_deploy.test.ts   |   40 +
 frontend/src/lib/utils_draft_deploy.ts        |   50 +
 frontend/src/lib/utils_workspace_deploy.ts    |   44 +
 .../lib/workspaceProtectionRules.svelte.ts    |   11 +-
 .../(logged)/forks/compare/+page.svelte       |   36 +
 .../(root)/(logged)/sessions/+page.svelte     |   12 +-
 .../deploy_animation/+page.svelte             |  194 +++
 39 files changed, 3080 insertions(+), 1448 deletions(-)
 delete mode 100644 frontend/src/lib/components/sessions/DraftDiffDrawer.svelte
 delete mode 100644 frontend/src/lib/components/sessions/ForkDiffDrawer.svelte
 create mode 100644 frontend/src/lib/components/sessions/SessionChangesBar.svelte
 create mode 100644 frontend/src/lib/components/sessions/SessionDiffDrawer.svelte
 delete mode 100644 frontend/src/lib/components/sessions/SessionDraftBar.svelte
 delete mode 100644 frontend/src/lib/components/sessions/SessionForkBar.svelte
 create mode 100644 frontend/src/lib/components/sessions/modifiedItemsMask.test.ts
 create mode 100644 frontend/src/lib/components/sessions/modifiedItemsMask.ts
 create mode 100644 frontend/src/lib/components/sessions/sessionDeployModel.svelte.ts
 create mode 100644 frontend/src/lib/components/sessions/sessionDeployModel.test.ts
 create mode 100644 frontend/src/lib/components/sessions/sessionDeployModel.ts
 create mode 100644 frontend/src/lib/utils_draft_deploy.test.ts
 create mode 100644 frontend/src/routes/kitchen_sink/deploy_animation/+page.svelte

diff --git a/frontend/src/lib/components/CompareDrafts.svelte b/frontend/src/lib/components/CompareDrafts.svelte
index 867268cd1a..2614adf445 100644
--- a/frontend/src/lib/components/CompareDrafts.svelte
+++ b/frontend/src/lib/components/CompareDrafts.svelte
@@ -14,7 +14,13 @@
 	import { editUrlFor } from './sessions/forkEditUrl'
 	import { AppService, FlowService, ScriptService, type WorkspaceItemDiff } from '$lib/gen'
 	import { sendUserToast } from '$lib/toast'
-	import { getDraftDiffValues, deployDraft, discardDraft } from '$lib/utils_draft_deploy'
+	import {
+		getDraftDiffValues,
+		deployDraft,
+		discardDraft,
+		draftBaseIsStale
+	} from '$lib/utils_draft_deploy'
+	import { checkDeployPermission, type DeployPermission } from '$lib/utils_workspace_deploy'
 	import { type DraftItem, useWorkspaceDrafts } from '$lib/workspaceDrafts.svelte'
 	import type { Kind as LayoutKind } from '$lib/utils_deployable'
 	import { userStore } from '$lib/stores'
@@ -35,6 +41,15 @@
 		deployCount?: number
 		updateCount?: number
 		draftCount?: number
+		/** When set (reached via a session's Review button), preselect only the
+		 * rows this chat modified — `${UserDraftItemKind}:${path}` keys, matching
+		 * Row.key. Undefined → preselect all deployable rows (the default). All rows
+		 * are still shown either way. */
+		chatMask?: Set<string>
+		/** False while the (async) chatMask is still loading. The select-all default
+		 * waits for this so it doesn't race the mask and select everything. Defaults
+		 * to true for callers that don't pass a mask. */
+		chatMaskReady?: boolean
 		/** Selecting deploy_to/update asks the page to swap to CompareWorkspaces. */
 		onModeSelected?: (v: CompareMode) => void
 		/** Fired after a deploy/discard so the page can refresh the *fork*
@@ -52,6 +67,8 @@
 		deployCount = 0,
 		updateCount = 0,
 		draftCount = 0,
+		chatMask,
+		chatMaskReady = true,
 		onModeSelected,
 		onChanged
 	}: Props = $props()
@@ -216,27 +233,11 @@
 							path: item.path,
 							getDraft: true
 						}))) as any
-			// A draft is stale when the version it forked from no longer matches the
-			// current deployed head: a newer version was deployed after the draft began.
-			// Scripts compare `parent_hash` vs the deployed `hash`; flows the pinned
-			// `version_id` vs the deployed head `version_id`; apps the pinned
-			// `parent_version` vs the deployed head (`versions[last]`).
 			const draftBlob = r.draft as any
-			const appHead = Array.isArray(r.versions) ? r.versions[r.versions.length - 1] : undefined
-			const stale =
-				item.draftKind === 'script'
-					? !!r.hash && !!draftBlob?.parent_hash && draftBlob.parent_hash !== r.hash
-					: item.draftKind === 'flow'
-						? r.version_id != null &&
-							draftBlob?.version_id != null &&
-							draftBlob.version_id !== r.version_id
-						: appHead != null &&
-							draftBlob?.parent_version != null &&
-							draftBlob.parent_version !== appHead
 			summaryCache[item.key] = {
 				deployed: r.summary,
 				draft: draftBlob?.summary,
-				stale,
+				stale: draftBaseIsStale(item.draftKind, r),
 				loading: false
 			}
 		} catch (error) {
@@ -263,6 +264,21 @@
 
 	let selectedItems = $state<string[]>([])
 	let deploying = $state(false)
+
+	// Whether the user may deploy drafts into this workspace — fills the
+	// `RestrictDeployToDeployers` (+ operator) gap via the shared util, same as the
+	// fork compare page and the session review drawer. Fail-open while resolving.
+	let deployPerm = $state<DeployPermission>({ ok: true })
+	$effect(() => {
+		const ws = currentWorkspaceId
+		// Reset to fail-open on workspace change, and drop a stale resolution —
+		// otherwise the previous workspace's verdict lingers (or lands last) and
+		// gates the wrong workspace.
+		deployPerm = { ok: true }
+		void checkDeployPermission(ws).then((p) => {
+			if (ws === currentWorkspaceId) deployPerm = p
+		})
+	})
 	// Select all on the first non-empty load (deploy-all is the common intent);
 	// only once, so a refetch after a deploy doesn't re-select the leftovers.
 	let hasAutoSelected = $state(false)
@@ -286,8 +302,13 @@
 	})
 
 	$effect(() => {
-		if (!hasAutoSelected && visibleItems.length > 0) {
-			selectedItems = visibleItems.filter(isSelectable).map((i) => i.key)
+		if (!hasAutoSelected && chatMaskReady && visibleItems.length > 0) {
+			// Default intent is deploy-all; when reached from a session's Review
+			// (chatMask set), preselect only that chat's items instead.
+			const selectable = visibleItems.filter(isSelectable)
+			selectedItems = (chatMask ? selectable.filter((i) => chatMask.has(i.key)) : selectable).map(
+				(i) => i.key
+			)
 			hasAutoSelected = true
 		}
 	})
@@ -695,15 +716,19 @@
 			{/snippet}
 
 			{#snippet footer()}
-				<div class="flex items-center justify-end">
+				<div class="flex flex-col items-end gap-2">
 					<Button
 						variant="accent"
-						disabled={selectedCount === 0 || deploying}
+						disabled={selectedCount === 0 || deploying || !deployPerm.ok}
+						title={!deployPerm.ok ? deployPerm.reason : undefined}
 						loading={deploying}
 						onClick={deploySelected}
 					>
 						Deploy {selectedCount} draft{selectedCount !== 1 ? 's' : ''}
 					</Button>
+					{#if !deployPerm.ok}
+						<span class="text-xs text-yellow-600">{deployPerm.reason}</span>
+					{/if}
 				</div>
 			{/snippet}
 		</WorkspaceDeployLayout>
diff --git a/frontend/src/lib/components/CompareWorkspaces.svelte b/frontend/src/lib/components/CompareWorkspaces.svelte
index 8dd30ff3f3..8cfa311141 100644
--- a/frontend/src/lib/components/CompareWorkspaces.svelte
+++ b/frontend/src/lib/components/CompareWorkspaces.svelte
@@ -37,10 +37,12 @@
 
 	import type { Kind } from '$lib/utils_deployable'
 	import {
+		checkDeployPermission,
 		deployItem,
 		deleteItemInWorkspace,
 		getItemValue,
 		getOnBehalfOf,
+		type DeployPermission,
 		type DeployResult
 	} from '$lib/utils_workspace_deploy'
 	import { isTriggerOrScheduleKind } from 'windmill-utils-internal'
@@ -58,6 +60,7 @@
 	import { base } from '$lib/base'
 	import CompareModeToggle, { type CompareMode } from './CompareModeToggle.svelte'
 	import { editUrlFor } from './sessions/forkEditUrl'
+	import { diffInMask } from './sessions/modifiedItemsMask'
 	import DatatableSchemaDiff from './DatatableSchemaDiff.svelte'
 
 	interface Props {
@@ -77,6 +80,14 @@
 		 * out of the default selection — deploying/updating moves the deployed
 		 * version, not the draft. The page derives this from the fork drafts. */
 		draftKeys?: Set<string>
+		/** When set (reached via a session's Review button), preselect only the
+		 * diffs this chat caused (matched via diffInMask). The deploy_to default
+		 * narrows to these; the update direction (parent→fork) preselects nothing,
+		 * since it's never chat-caused. All rows are still shown. */
+		chatMask?: Set<string>
+		/** False while the (async) chatMask is still loading. The select-all default
+		 * waits for this so it doesn't race the mask. Defaults to true. */
+		chatMaskReady?: boolean
 		/** Selecting `draft` asks the page to swap us out for CompareDrafts;
 		 * deploy_to/update are handled internally but reported so the page can
 		 * remember the direction. */
@@ -95,6 +106,8 @@
 		updateCount = 0,
 		draftCount = 0,
 		draftKeys = new Set<string>(),
+		chatMask,
+		chatMaskReady = true,
 		onModeSelected,
 		onChanged
 	}: Props = $props()
@@ -752,11 +765,19 @@
 		// to parent" flow. The user picks them à la carte by clicking the row.
 		// Items with a pending draft are also left out by default: the deployed
 		// version (not the draft) is what moves, so we make the user opt in.
+		// The update direction (parent→fork) is never something the chat caused, so
+		// when scoped to a chat's items (chatMask set) preselect nothing there.
+		if (chatMask && !mergeIntoParent) {
+			selectedItems = []
+			return
+		}
 		const filtered = selectableDiffs.filter((d) => !isTriggerOrScheduleKind(d.kind) && !hasDraft(d))
 		const conflictSafe = mergeIntoParent
 			? filtered
 			: filtered.filter((d) => !(d.ahead > 0 && d.behind > 0))
-		selectedItems = conflictSafe
+		// When reached from a session's Review, narrow the default to this chat's items.
+		const scoped = chatMask ? conflictSafe.filter((d) => diffInMask(d, chatMask)) : conflictSafe
+		selectedItems = scoped
 			.map((d) => getItemKey(d))
 			.filter((k) => !(deploymentStatus[k]?.status == 'deployed'))
 	}
@@ -798,6 +819,21 @@
 		fetchPermissions()
 	})
 
+	// Can the user actually deploy into the target workspace? Fills the frontend
+	// gap for the `RestrictDeployToDeployers` rule (+ operator), shared with the
+	// session review drawer via the same checkDeployPermission util. Cached per
+	// workspace; `deployPerm` tracks whichever side the current direction targets.
+	let deployPerms = $state<Record<string, DeployPermission>>({})
+	const deployPermFetched = new Set<string>()
+	$effect(() => {
+		for (const ws of [currentWorkspaceId, parentWorkspaceId]) {
+			if (!ws || deployPermFetched.has(ws)) continue
+			deployPermFetched.add(ws)
+			void checkDeployPermission(ws).then((p) => (deployPerms = { ...deployPerms, [ws]: p }))
+		}
+	})
+	let deployPerm = $derived(deployPerms[deployTargetWorkspace] ?? { ok: true })
+
 	// Fetch summaries and on_behalf_of_email when comparison data loads
 	$effect(() => {
 		if (comparison?.diffs) {
@@ -808,7 +844,7 @@
 
 	// Auto-select items on initial load
 	$effect(() => {
-		if (comparison?.diffs && !hasAutoSelected && selectableDiffs.length > 0) {
+		if (comparison?.diffs && !hasAutoSelected && chatMaskReady && selectableDiffs.length > 0) {
 			selectDefault()
 			hasAutoSelected = true
 		}
@@ -1361,7 +1397,9 @@
 											deploying ||
 											(hasBehindChanges && !allowBehindChangesOverride) ||
 											(mergeIntoParent && !canDeployToParent) ||
+											!deployPerm.ok ||
 											hasUnselectedOnBehalfOf}
+										title={!deployPerm.ok ? deployPerm.reason : undefined}
 										loading={deploying}
 										on:click={requestDeploy}
 									>
@@ -1372,6 +1410,9 @@
 										{/if}
 									</Button>
 								</div>
+								{#if !deployPerm.ok}
+									<span class="text-xs text-yellow-600">{deployPerm.reason}</span>
+								{/if}
 								{#if !(mergeIntoParent && !canDeployToParent) && hasUnselectedOnBehalfOf}
 									<span class="text-xs text-yellow-600">
 										You must set the "on behalf of" user for all items before deploying
diff --git a/frontend/src/lib/components/DraftBadge.svelte b/frontend/src/lib/components/DraftBadge.svelte
index 75cc6cec0b..1527feef73 100644
--- a/frontend/src/lib/components/DraftBadge.svelte
+++ b/frontend/src/lib/components/DraftBadge.svelte
@@ -38,6 +38,10 @@
 		/** Offer "Load" alongside "View Diff" on other users' rows. The deploy /
 		 * review page sets this false: loading into a fresh editor is moot there. */
 		allowFork?: boolean
+		/** Compact variant: render only the avatar circles (no "Draft" pill text),
+		 * slightly smaller — for tight spots like the diff-tree sidebar. The hover
+		 * popover is unchanged. */
+		iconOnly?: boolean
 	}
 
 	let {
@@ -49,7 +53,8 @@
 		itemKind = undefined,
 		path = undefined,
 		onMigrated = undefined,
-		allowFork = true
+		allowFork = true,
+		iconOnly = false
 	}: Props = $props()
 
 	// Authed user lands first; everyone else keeps the backend's ordering.
@@ -193,6 +198,30 @@
 	}
 </script>
 
+{#snippet circleStack()}
+	<!-- `-space-x-1` overlaps the circles; the indigo ring tint makes the overlap read intentional. -->
+	<span class="flex -space-x-1">
+		{#each visibleUsers as u, i (i)}
+			<span
+				class="inline-flex h-3 w-3 items-center justify-center rounded-full text-[8px] font-semibold text-white ring-1 ring-indigo-100 dark:ring-indigo-700/40 {colorFor(
+					u
+				)}"
+				title={u.username === currentUsername ? `${fullLabel(u)} (you)` : fullLabel(u)}
+			>
+				{initials(u)}
+			</span>
+		{/each}
+		{#if overflowCount > 0}
+			<span
+				class="inline-flex h-3 w-3 items-center justify-center rounded-full bg-gray-500 text-[8px] font-semibold text-white ring-1 ring-indigo-100 dark:ring-indigo-700/40"
+				title="{overflowCount} more"
+			>
+				+{overflowCount}
+			</span>
+		{/if}
+	</span>
+{/snippet}
+
 {#if showBadge}
 	<!-- inline-flex/items-center so the trigger button hugs the badge and lines up
 	     with sibling badges (a plain button is taller, dropping the pill ~2px). -->
@@ -204,32 +233,23 @@
 		bind:isOpen={popoverOpen}
 	>
 		{#snippet trigger()}
-			<Badge small color="indigo">
-				{#if orderedUsers.length > 0}
-					<!-- `-space-x-1` overlaps the circles; the indigo ring tint makes the overlap read intentional. -->
-					<span class="flex -space-x-1">
-						{#each visibleUsers as u, i (i)}
-							<span
-								class="inline-flex h-3.5 w-3.5 items-center justify-center rounded-full text-[8px] font-semibold text-white ring-1 ring-indigo-100 dark:ring-indigo-700/40 {colorFor(
-									u
-								)}"
-								title={u.username === currentUsername ? `${fullLabel(u)} (you)` : fullLabel(u)}
-							>
-								{initials(u)}
-							</span>
-						{/each}
-						{#if overflowCount > 0}
-							<span
-								class="inline-flex h-3.5 w-3.5 items-center justify-center rounded-full bg-gray-500 text-[8px] font-semibold text-white ring-1 ring-indigo-100 dark:ring-indigo-700/40"
-								title="{overflowCount} more"
-							>
-								+{overflowCount}
-							</span>
-						{/if}
-					</span>
-				{/if}
-				{draft_only ? 'Draft only' : 'Draft'}
-			</Badge>
+			{#if iconOnly}
+				<!-- Compact "has a draft" marker for tight spots like the diff-tree
+				     sidebar: a small indigo pencil + the author avatar(s). -->
+				<span class="inline-flex items-center gap-0.5" title={draft_only ? 'Draft only' : 'Draft'}>
+					<Pencil class="h-3 w-3 shrink-0 text-indigo-500 dark:text-indigo-400" />
+					{#if orderedUsers.length > 0}
+						{@render circleStack()}
+					{/if}
+				</span>
+			{:else}
+				<Badge small color="indigo" class="px-1 py-0 gap-0.5">
+					{#if orderedUsers.length > 0}
+						{@render circleStack()}
+					{/if}
+					{draft_only ? 'Draft only' : 'Draft'}
+				</Badge>
+			{/if}
 		{/snippet}
 		{#snippet content()}
 			<div class="flex flex-col gap-2 min-w-[16rem] text-xs p-4 pb-1">
diff --git a/frontend/src/lib/components/common/badge/Badge.svelte b/frontend/src/lib/components/common/badge/Badge.svelte
index cf7a7cad66..c57d41029c 100644
--- a/frontend/src/lib/components/common/badge/Badge.svelte
+++ b/frontend/src/lib/components/common/badge/Badge.svelte
@@ -90,7 +90,7 @@
 
 	const hovers: Partial<Record<BadgeColor, string>> = {
 		gray: 'hover:bg-surface-hover',
-		blue: 'hover:bg-blue-200 dark:hover:bg-blue-700/40',
+		blue: 'hover:bg-blue-100 dark:hover:bg-blue-700/60',
 		red: 'hover:bg-red-200 dark:hover:bg-red-500/25',
 		green: 'hover:bg-green-200 dark:hover:bg-green-500/25',
 		yellow: 'hover:bg-yellow-200 dark:hover:bg-yellow-500/25',
diff --git a/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts b/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts
index 5f5835bd13..c67bcd17b5 100644
--- a/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts
+++ b/frontend/src/lib/components/copilot/chat/AIChatManager.svelte.ts
@@ -44,6 +44,9 @@ import {
 	buildSummaryMessageContent
 } from './compactionPrompt'
 import { dfs } from '$lib/components/flows/previousResults'
+import { SvelteSet } from 'svelte/reactivity'
+import type { UserDraftItemKind } from '$lib/gen'
+import { maskKey } from '$lib/components/sessions/modifiedItemsMask'
 import { getStringError } from './utils'
 import { type PasteAttachment } from './pasteTokens'
 import { chatDraft, expanded } from './chatDraft'
@@ -343,6 +346,75 @@ export class AIChatManager {
 	// session rather than the UI-active one — keeps backgrounded sessions isolated.
 	sessionId: string | undefined = undefined
 
+	// Fired whenever the active chat id changes away from the one the consumer
+	// knows (a "/clear" rotation or a history switch). Session runtimes wire this
+	// to keep the session record's chatId aligned — the compare-page handoff
+	// (`from_session`) reads it, and a stale id would preselect the previous
+	// chat's items. Set here (not imported) to avoid a copilot→sessions cycle.
+	onChatRotated: ((chatId: string) => void) | undefined = undefined
+
+	// Workspace items the CURRENT chat modified via AI tool calls, as
+	// `${UserDraftItemKind}:${storagePath}` keys (see modifiedItemsMask.ts).
+	// undefined = untracked: the global side-panel chat (never initialised) and
+	// loaded legacy chats with no stored mask, both of which fall back to the
+	// show-all bar. A SvelteSet (even empty) = tracked. Reactive so the session
+	// bar updates as tools record mid-turn.
+	modifiedItems = $state<SvelteSet<string> | undefined>(undefined)
+
+	// Start tracking for a brand-new session chat (empty = "tracked, nothing yet").
+	initModifiedItemsTracking() {
+		this.modifiedItems = new SvelteSet()
+	}
+
+	// Record an item an AI tool call created/edited/deleted. No-op when untracked
+	// (the global singleton never initialises the set), so it stays unaffected.
+	recordModifiedItem(itemKind: UserDraftItemKind, storagePath: string) {
+		this.modifiedItems?.add(maskKey(itemKind, storagePath))
+	}
+
+	// Un-record an item whose chat-made change was discarded — without this the
+	// still-existing deployed item would keep reading as this chat's "Deployed"
+	// edit. Persisted immediately: unlike recordModifiedItem (whose persistence
+	// rides on the turn's saveChat), a discard can fire from the review dock
+	// outside any turn, and waiting would resurrect the entry on reload.
+	async removeModifiedItem(itemKind: UserDraftItemKind, storagePath: string) {
+		if (!this.modifiedItems?.delete(maskKey(itemKind, storagePath))) return
+		await this.#persistModifiedItems()
+	}
+
+	// Move a mask entry to the path a draft actually deployed to. A draft-only
+	// flow/app parks at a synthetic `draft_{uuid}` storage path and deploys to
+	// its chosen path — without the move, the existence check at the synthetic
+	// path fails after reload and the deployed row vanishes from the dock.
+	async renameModifiedItem(itemKind: UserDraftItemKind, fromPath: string, toPath: string) {
+		if (fromPath === toPath) return
+		if (!this.modifiedItems?.delete(maskKey(itemKind, fromPath))) return
+		this.modifiedItems.add(maskKey(itemKind, toPath))
+		await this.#persistModifiedItems()
+	}
+
+	// Serialized, snapshot-at-write-time persistence: two rapid dock actions
+	// would otherwise race their saveChat writes, and the earlier (staler)
+	// snapshot could land last — dropping the later mutation until the next
+	// turn-end save.
+	#maskPersistQueue: Promise<void> = Promise.resolve()
+	#persistModifiedItems(): Promise<void> {
+		this.#maskPersistQueue = this.#maskPersistQueue.then(() =>
+			this.historyManager
+				.saveChat(
+					this.displayMessages,
+					this.messages,
+					this.contextUsage,
+					this.modifiedItems ? [...this.modifiedItems] : undefined
+				)
+				// Swallow (and log) a failed write so it can't wedge the queue as a
+				// rejected link — the next persist snapshots the full current set, so
+				// a lost write self-heals on the next mutation or turn-end save.
+				.catch((e) => console.error('Failed to persist modified-items mask', e))
+		)
+		return this.#maskPersistQueue
+	}
+
 	// Workspace AI skills (name + description) advertised in the GLOBAL system
 	// prompt and surfaced as slash commands in session chat. Loaded
 	// asynchronously when entering GLOBAL mode; the system message is rebuilt
@@ -659,7 +731,12 @@ export class AIChatManager {
 			)
 			switch (result) {
 				case 'ok':
-					await this.historyManager.saveChat(this.displayMessages, this.messages, this.contextUsage)
+					await this.historyManager.saveChat(
+						this.displayMessages,
+						this.messages,
+						this.contextUsage,
+						this.modifiedItems ? [...this.modifiedItems] : undefined
+					)
 					sendUserToast('Conversation compacted.')
 					break
 				case 'empty':
@@ -1636,7 +1713,12 @@ export class AIChatManager {
 			const projectedContextTokens = this.contextTokens + this.estimateMessagesTokens([userMessage])
 
 			this.messages.push(userMessage)
-			await this.historyManager.saveChat(this.displayMessages, this.messages, this.contextUsage)
+			await this.historyManager.saveChat(
+				this.displayMessages,
+				this.messages,
+				this.contextUsage,
+				this.modifiedItems ? [...this.modifiedItems] : undefined
+			)
 
 			this.currentReply = ''
 			this.currentReasoning = ''
@@ -1672,7 +1754,12 @@ export class AIChatManager {
 							this.contextUsage = Math.max(0, this.contextUsage - freed)
 						}
 					}
-					await this.historyManager.saveChat(this.displayMessages, this.messages, this.contextUsage)
+					await this.historyManager.saveChat(
+						this.displayMessages,
+						this.messages,
+						this.contextUsage,
+						this.modifiedItems ? [...this.modifiedItems] : undefined
+					)
 				}
 			}
 			// Rollback anchors for restoreUnsentTurn: captured after compaction so
@@ -1758,7 +1845,10 @@ export class AIChatManager {
 					},
 					requestConfirmation: this.requestConfirmation,
 					shouldAutoAcceptToolConfirmations: () => this.autoAcceptToolConfirmationsActive,
-					requestUserQuestion: this.requestUserQuestion
+					requestUserQuestion: this.requestUserQuestion,
+					onItemModified: (kind, path) => this.recordModifiedItem(kind, path),
+					onItemDeployed: (kind, from, to) => void this.renameModifiedItem(kind, from, to),
+					onItemDiscarded: (kind, path) => void this.removeModifiedItem(kind, path)
 				}
 			}
 
@@ -1794,7 +1884,12 @@ export class AIChatManager {
 				this.contextUsage = result?.lastIterationUsage
 					? result.lastIterationUsage.prompt + result.lastIterationUsage.completion
 					: undefined
-				await this.historyManager.saveChat(this.displayMessages, this.messages, this.contextUsage)
+				await this.historyManager.saveChat(
+					this.displayMessages,
+					this.messages,
+					this.contextUsage,
+					this.modifiedItems ? [...this.modifiedItems] : undefined
+				)
 				// Still counts as the saved first turn — skipping the hook here would
 				// permanently miss it (the next turn isn't "first" anymore).
 				if (isFirstUserTurn && this.afterFirstTurnSaved) {
@@ -1824,7 +1919,12 @@ export class AIChatManager {
 					// user message on reload. Remove it instead.
 					this.historyManager.deletePastChat(this.historyManager.getCurrentChatId())
 				} else {
-					await this.historyManager.saveChat(this.displayMessages, this.messages, this.contextUsage)
+					await this.historyManager.saveChat(
+						this.displayMessages,
+						this.messages,
+						this.contextUsage,
+						this.modifiedItems ? [...this.modifiedItems] : undefined
+					)
 				}
 				if (!wasAborted) {
 					sendUserToast('The model returned no response — your message was restored to the input.')
@@ -1843,7 +1943,12 @@ export class AIChatManager {
 				if (this.autoAcceptEditsActive) {
 					this.acceptPendingFlowEdits()
 				}
-				await this.historyManager.saveChat(this.displayMessages, this.messages, this.contextUsage)
+				await this.historyManager.saveChat(
+					this.displayMessages,
+					this.messages,
+					this.contextUsage,
+					this.modifiedItems ? [...this.modifiedItems] : undefined
+				)
 				// Only this branch is a clean send: the queued-message flush below
 				// auto-sends the next message after it (set after saveChat so a
 				// persistence failure falls through to the restore path instead).
@@ -1867,7 +1972,12 @@ export class AIChatManager {
 				// compaction on the next send instead of failing the same way again.
 				this.contextUsage = undefined
 				try {
-					await this.historyManager.saveChat(this.displayMessages, this.messages, this.contextUsage)
+					await this.historyManager.saveChat(
+						this.displayMessages,
+						this.messages,
+						this.contextUsage,
+						this.modifiedItems ? [...this.modifiedItems] : undefined
+					)
 				} catch (saveErr) {
 					console.error('Failed to persist partial chat after error', saveErr)
 				}
@@ -1996,15 +2106,25 @@ export class AIChatManager {
 		// Drop any message queued in this conversation so it can't auto-send into
 		// the fresh chat or linger as a card across the switch.
 		this.queuedMessage = ''
-		await this.historyManager.save(this.displayMessages, this.messages, this.contextUsage)
+		await this.historyManager.save(
+			this.displayMessages,
+			this.messages,
+			this.contextUsage,
+			this.modifiedItems ? [...this.modifiedItems] : undefined
+		)
 		this.displayMessages = []
 		this.messages = []
 		this.contextUsage = undefined
+		// The mask belongs to the conversation just saved — the fresh chat starts
+		// its own (empty) tracking; carrying entries over would claim the previous
+		// conversation's edits for the new one. Untracked chats stay untracked.
+		if (this.modifiedItems) this.modifiedItems = new SvelteSet()
 		// In an AI session, linked files are session-scoped: they persist across conversations
 		// (cleared only when the session is deleted). The ephemeral global side-panel chat has no
 		// session, so "New chat" must clear them — otherwise the next, unrelated conversation
 		// would still get the previous file roster and could read/search it.
 		if (!this.isSessionChat) this.attachedFiles.clear()
+		this.onChatRotated?.(this.historyManager.getCurrentChatId())
 	}
 
 	loadPastChat = async (id: string) => {
@@ -2019,7 +2139,16 @@ export class AIChatManager {
 			this.displayMessages = chat.displayMessages
 			this.messages = chat.actualMessages
 			this.contextUsage = normalizeContextUsage(chat.contextUsage)
+			// Seed the modified-items mask from the stored chat. A stored array
+			// (even empty) → tracked; a legacy chat with no field stays untracked
+			// (undefined) so the session bar falls back to showing all drafts. The
+			// global side-panel chat never tracks, so leave it untouched there.
+			if (this.isSessionChat) {
+				const stored = this.historyManager.getModifiedItems(id)
+				this.modifiedItems = stored !== undefined ? new SvelteSet(stored) : undefined
+			}
 			this.#automaticScroll = true
+			this.onChatRotated?.(id)
 		}
 	}
 
diff --git a/frontend/src/lib/components/copilot/chat/AIChatManager.test.ts b/frontend/src/lib/components/copilot/chat/AIChatManager.test.ts
index d23cbf96a1..a415377a7b 100644
--- a/frontend/src/lib/components/copilot/chat/AIChatManager.test.ts
+++ b/frontend/src/lib/components/copilot/chat/AIChatManager.test.ts
@@ -693,7 +693,9 @@ describe('AIChatManager context compaction', () => {
 		expect(manager.messages[0]).toMatchObject({ role: 'user', content: 'c'.repeat(400) })
 		// Mid-turn, the report is debited by the freed estimate (visible in the
 		// compaction-time save) so a rolled-back turn keeps a consistent value
-		expect(saveChat).toHaveBeenCalledWith(expect.anything(), expect.anything(), 650_000)
+		// 4th arg: the modified-items mask rides on every save (undefined here —
+		// this bare manager never initialised tracking).
+		expect(saveChat).toHaveBeenCalledWith(expect.anything(), expect.anything(), 650_000, undefined)
 		// At commit, the no-report turn clears the stored value; the readable
 		// number falls back to estimating the now-tiny compacted history
 		expect(manager.contextUsage).toBeUndefined()
diff --git a/frontend/src/lib/components/copilot/chat/HistoryManager.svelte.ts b/frontend/src/lib/components/copilot/chat/HistoryManager.svelte.ts
index 9173e4c441..0db0751293 100644
--- a/frontend/src/lib/components/copilot/chat/HistoryManager.svelte.ts
+++ b/frontend/src/lib/components/copilot/chat/HistoryManager.svelte.ts
@@ -25,6 +25,12 @@ interface ChatSchema extends IDBSchema {
 			// New writes store the plain reported token count; chats persisted by
 			// earlier versions may still hold the legacy anchor object.
 			contextUsage?: PersistedContextUsage
+			// Workspace items this chat modified via AI tool calls, as
+			// `${UserDraftItemKind}:${storagePath}` keys. Persisted out-of-band from
+			// the message arrays so it survives compaction. Absent (undefined) on
+			// chats predating this feature → consumers fall back to showing all
+			// workspace drafts; a defined array (even empty) means "tracked".
+			modifiedItems?: string[]
 		}
 	}
 }
@@ -80,6 +86,29 @@ export function __resetLegacyChatClaimForTesting(): void {
 	legacyChatClaim = undefined
 }
 
+// Read a chat's modified-items mask by chatId WITHOUT mounting an AIChatManager,
+// for the standalone /forks/compare route. Returns undefined for a legacy chat
+// (no field) so the page falls back to selecting all items; a defined array
+// (even empty) narrows the preselection. Opens a throwaway user-scoped handle;
+// the `get` is O(1) on the `id` keyPath.
+export async function readChatModifiedItems(chatId: string): Promise<string[] | undefined> {
+	const dbh = userScopedDb<ChatSchema>(DB_NAME, {
+		version: 1,
+		upgrade: createChatStore,
+		migrate: migrateLegacyChatDb
+	})
+	try {
+		const db = await dbh.whenReady()
+		const chat = await db?.get('chats', chatId)
+		return chat?.modifiedItems
+	} catch (err) {
+		console.error('Could not read chat modified items', err)
+		return undefined
+	} finally {
+		dbh.close()
+	}
+}
+
 export default class HistoryManager {
 	// Per-instance handle to the shared per-user DB lifecycle. There is one
 	// HistoryManager per AIChatManager (the singleton + one per session runtime),
@@ -100,6 +129,7 @@ export default class HistoryManager {
 			lastModified: number
 			sessionId?: string
 			contextUsage?: PersistedContextUsage
+			modifiedItems?: string[]
 		}
 	> = $state({})
 
@@ -173,10 +203,15 @@ export default class HistoryManager {
 		return Object.values(this.savedChats)
 	}
 
+	getModifiedItems(id: string): string[] | undefined {
+		return this.savedChats[id]?.modifiedItems
+	}
+
 	async saveChat(
 		displayMessages: DisplayMessage[],
 		messages: ChatCompletionMessageParam[],
-		contextUsage?: number
+		contextUsage?: number,
+		modifiedItems?: string[]
 	) {
 		if (displayMessages.length > 0) {
 			// Compaction replaces the original first message with a summary boundary.
@@ -203,7 +238,18 @@ export default class HistoryManager {
 				id: this.currentChatId,
 				lastModified: Date.now(),
 				...(this.sessionId ? { sessionId: this.sessionId } : {}),
-				...(contextUsage !== undefined ? { contextUsage } : {})
+				...(contextUsage !== undefined ? { contextUsage } : {}),
+				// Only persist when the caller passes a defined array. Loaded legacy
+				// chats keep their accumulator undefined, so we never retroactively
+				// stamp them with [] (which would flip them to the filtered view).
+				// But since `put` replaces the whole record, a caller that omits the
+				// argument must not ERASE a tracked chat's stored mask — fall back to
+				// the previously saved field.
+				...(modifiedItems !== undefined
+					? { modifiedItems }
+					: this.savedChats[this.currentChatId]?.modifiedItems !== undefined
+						? { modifiedItems: this.savedChats[this.currentChatId].modifiedItems }
+						: {})
 			}
 			this.savedChats = {
 				...this.savedChats,
@@ -218,9 +264,10 @@ export default class HistoryManager {
 	async save(
 		displayMessages: DisplayMessage[],
 		messages: ChatCompletionMessageParam[],
-		contextUsage?: number
+		contextUsage?: number,
+		modifiedItems?: string[]
 	) {
-		await this.saveChat(displayMessages, messages, contextUsage)
+		await this.saveChat(displayMessages, messages, contextUsage, modifiedItems)
 		this.currentChatId = createLongHash()
 	}
 
diff --git a/frontend/src/lib/components/copilot/chat/HistoryManager.test.ts b/frontend/src/lib/components/copilot/chat/HistoryManager.test.ts
index 38fb7ecf0d..540dfaf72e 100644
--- a/frontend/src/lib/components/copilot/chat/HistoryManager.test.ts
+++ b/frontend/src/lib/components/copilot/chat/HistoryManager.test.ts
@@ -141,3 +141,30 @@ describe('HistoryManager title across compaction', () => {
 		expect(hm.getAllSavedChats().find((c) => c.id === id)?.title).toBe('original first question')
 	})
 })
+
+describe('HistoryManager modified-items mask persistence', () => {
+	const msgs = [{ role: 'user', content: 'hello', index: 0 }] as DisplayMessage[]
+
+	it('a save without the argument preserves a previously stored mask', async () => {
+		const hm = new HistoryManager()
+		await hm.init()
+		const id = hm.getCurrentChatId()
+
+		await hm.saveChat(msgs, [] as ChatCompletionMessageParam[], undefined, ['script:u/a/x'])
+		expect(hm.getModifiedItems(id)).toEqual(['script:u/a/x'])
+
+		// e.g. manual compaction re-saving the transcript: the whole record is
+		// rewritten, but the tracked mask must survive.
+		await hm.saveChat(msgs, [] as ChatCompletionMessageParam[])
+		expect(hm.getModifiedItems(id)).toEqual(['script:u/a/x'])
+	})
+
+	it('never retroactively stamps an untracked chat', async () => {
+		const hm = new HistoryManager()
+		await hm.init()
+		const id = hm.getCurrentChatId()
+
+		await hm.saveChat(msgs, [] as ChatCompletionMessageParam[])
+		expect(hm.getModifiedItems(id)).toBeUndefined()
+	})
+})
diff --git a/frontend/src/lib/components/copilot/chat/global/core.ts b/frontend/src/lib/components/copilot/chat/global/core.ts
index 90dcb655f4..24045280d0 100644
--- a/frontend/src/lib/components/copilot/chat/global/core.ts
+++ b/frontend/src/lib/components/copilot/chat/global/core.ts
@@ -114,6 +114,7 @@ import {
 	getEphemeralSecretVariableDraftValue,
 	getGlobalDraft,
 	getGlobalDraftStoragePath,
+	itemKindFor,
 	listGlobalDrafts,
 	persistGlobalDraft,
 	readGlobalDraftValue,
@@ -2779,6 +2780,7 @@ function finishAppDraftWrite(
 ): string {
 	const failure = draftWriteFailure(result, ctx)
 	if (failure) return failure
+	ctx.toolCallbacks.onItemModified?.(result.itemKind, result.storagePath)
 	const { content, message } = onSaved()
 	ctx.toolCallbacks.setToolStatus(ctx.toolId, { content, result: 'Saved as draft' })
 	return JSON.stringify({ success: true, message }, null, 2)
@@ -2791,6 +2793,7 @@ function finishDraftWrite(
 ): string {
 	const failure = draftWriteFailure(result, ctx)
 	if (failure) return failure
+	ctx.toolCallbacks.onItemModified?.(result.itemKind, result.storagePath)
 	const stored = result.item
 	const verb = existed ? 'Updated' : 'Created'
 	// Don't echo the flow value back: the model just sent it in the write call,
@@ -3898,6 +3901,16 @@ async function discardLocalDraft(
 
 	await deleteGlobalDraft(workspace, type, path, triggerKind)
 
+	// The chat's touch on the item is undone — drop it from the mask so a
+	// pre-existing deployed item doesn't keep reading as this chat's edit.
+	const discardedKind = itemKindFor(type, triggerKind)
+	if (discardedKind) {
+		toolCallbacks.onItemDiscarded?.(
+			discardedKind,
+			getGlobalDraftStoragePath(workspace, type, path, triggerKind)
+		)
+	}
+
 	toolCallbacks.setToolStatus(toolId, {
 		content: `Discarded ${type} "${path}" draft`,
 		result: 'Draft discarded'
@@ -4237,6 +4250,9 @@ async function deployDraft(
 	})
 
 	let actions: ToolDisplayAction[] | undefined
+	// Where the deploy actually lands — the app branch can resolve a different
+	// target from the draft's own path fields; the mask rename below must track it.
+	let deployedPath = path
 
 	if (type === 'script' || type === 'flow') {
 		// Promote the full persisted draft via the shared deploy module — the same
@@ -4429,6 +4445,7 @@ async function deployDraft(
 						throw e
 					}
 				}
+				deployedPath = targetPath
 				if (await AppService.existsApp({ workspace, path: targetPath })) {
 					// Omit custom_path on update for now. The backend preserves it when absent, while
 					// sending it requires admin privileges; this chat deploy path does not yet mirror
@@ -4478,6 +4495,18 @@ async function deployDraft(
 
 	await deleteGlobalDraft(workspace, type, path, triggerKind, { preserveLiveDraft: true })
 
+	// Move the chat's mask entry to the deployed path: a draft-only item's
+	// synthetic storage key never exists deployed, so the entry would otherwise
+	// stop matching anything after the draft is gone.
+	const deployedKind = itemKindFor(type, triggerKind)
+	if (deployedKind) {
+		toolCallbacks.onItemDeployed?.(
+			deployedKind,
+			getGlobalDraftStoragePath(workspace, type, path, triggerKind),
+			deployedPath
+		)
+	}
+
 	// Reload the session preview if it's open on the deployed item. Map the
 	// deploy type to the preview kind — a raw app deploys under 'app' but the
 	// preview addresses it as 'raw_app'; non-previewable types map to undefined.
@@ -4548,6 +4577,17 @@ async function deleteWorkspaceItem(
 
 	await deleteGlobalDraft(workspace, type, path, triggerKind)
 
+	// Record the deletion in the chat's modified-items mask. In a fork this leaves a
+	// reviewable "removed" diff vs the parent that stays scoped to this chat. Keyed
+	// by the same (itemKind, storagePath) as writes so it joins the draft/fork lists.
+	const deletedKind = itemKindFor(type, triggerKind)
+	if (deletedKind) {
+		toolCallbacks.onItemModified?.(
+			deletedKind,
+			getGlobalDraftStoragePath(workspace, type, path, triggerKind)
+		)
+	}
+
 	toolCallbacks.setToolStatus(toolId, {
 		content: `Deleted ${type} "${path}"`,
 		result: 'Deleted'
diff --git a/frontend/src/lib/components/copilot/chat/global/userDraftAdapter.ts b/frontend/src/lib/components/copilot/chat/global/userDraftAdapter.ts
index 87ca767904..2717d41608 100644
--- a/frontend/src/lib/components/copilot/chat/global/userDraftAdapter.ts
+++ b/frontend/src/lib/components/copilot/chat/global/userDraftAdapter.ts
@@ -108,7 +108,7 @@ function clearEphemeralSecretVariableDraftValues(workspace: string): void {
 	secretVariableDraftValues.delete(workspace)
 }
 
-function itemKindFor(
+export function itemKindFor(
 	type: WorkspaceItemType,
 	triggerKind?: TriggerKind
 ): UserDraftItemKind | undefined {
@@ -377,10 +377,25 @@ export async function readGlobalDraftValue<V>(
 	return (await fetchBackendDraftValue(workspace, itemKind, storagePath)) as V | undefined
 }
 
+// `itemKind` + `storagePath` are the canonical identity of the persisted draft
+// (NOT item.path, which is the friendly display path). Callers use them to record
+// the chat's modified-items mask.
 export type DraftPersistResult =
-	| { status: 'saved'; item: WorkspaceItem }
-	| { status: 'conflict'; item: WorkspaceItem; serverTimestamp?: string }
-	| { status: 'error'; item: WorkspaceItem; message: string }
+	| { status: 'saved'; item: WorkspaceItem; itemKind: UserDraftItemKind; storagePath: string }
+	| {
+			status: 'conflict'
+			item: WorkspaceItem
+			itemKind: UserDraftItemKind
+			storagePath: string
+			serverTimestamp?: string
+	  }
+	| {
+			status: 'error'
+			item: WorkspaceItem
+			itemKind: UserDraftItemKind
+			storagePath: string
+			message: string
+	  }
 
 // Persist a built draft value. `UserDraft.seed` reflects it into an open editor's
 // cell WITHOUT a double-POST (no-ops if no cell; its seedNextWrite suppresses the
@@ -417,14 +432,20 @@ export async function persistGlobalDraft(
 	// the chat "saved" while the DB-backed source of truth was never updated.
 	const saveState = UserDraftDbSyncer.getState({ workspace, itemKind, path: storagePath })
 	if (saveState.state === 'failed') {
-		return { status: 'error', item, message: saveState.failureMessage ?? 'Draft save failed' }
+		return {
+			status: 'error',
+			item,
+			itemKind,
+			storagePath,
+			message: saveState.failureMessage ?? 'Draft save failed'
+		}
 	}
 	const conflict = opts.force
 		? undefined
 		: UserDraftDbSyncer.getConflict({ workspace, itemKind, path: storagePath }).conflict
 	return conflict
-		? { status: 'conflict', item, serverTimestamp: conflict.serverTimestamp }
-		: { status: 'saved', item }
+		? { status: 'conflict', item, itemKind, storagePath, serverTimestamp: conflict.serverTimestamp }
+		: { status: 'saved', item, itemKind, storagePath }
 }
 
 export async function getGlobalDraft(
diff --git a/frontend/src/lib/components/copilot/chat/shared.ts b/frontend/src/lib/components/copilot/chat/shared.ts
index 7abdc75168..c454f15fe6 100644
--- a/frontend/src/lib/components/copilot/chat/shared.ts
+++ b/frontend/src/lib/components/copilot/chat/shared.ts
@@ -3,6 +3,7 @@ import type {
 	ChatCompletionMessageFunctionToolCall,
 	ChatCompletionMessageParam
 } from 'openai/resources/chat/completions.mjs'
+import type { UserDraftItemKind } from '$lib/gen'
 
 /**
  * Special module IDs used throughout the flow system
@@ -759,6 +760,15 @@ export interface ToolCallbacks {
 		toolId: string,
 		question: UserQuestionDisplay
 	) => Promise<string | undefined>
+	/** Records a workspace item the tool call created/edited/deleted, by its
+	 * canonical (itemKind, storagePath). Session chats wire this to accumulate the
+	 * chat's modified-items mask; the global side-panel chat omits it (no-op). */
+	onItemModified?: (itemKind: UserDraftItemKind, storagePath: string) => void
+	/** A tool deployed a draft: the mask entry moves from the draft's storage path
+	 * to the deployed path (they differ for synthetic draft-only storage keys). */
+	onItemDeployed?: (itemKind: UserDraftItemKind, storagePath: string, deployedPath: string) => void
+	/** A tool discarded a draft: the chat's touch on the item is undone. */
+	onItemDiscarded?: (itemKind: UserDraftItemKind, storagePath: string) => void
 }
 
 export function createToolDef(
diff --git a/frontend/src/lib/components/sessions/DraftDiffDrawer.svelte b/frontend/src/lib/components/sessions/DraftDiffDrawer.svelte
deleted file mode 100644
index 0b529b2056..0000000000
--- a/frontend/src/lib/components/sessions/DraftDiffDrawer.svelte
+++ /dev/null
@@ -1,204 +0,0 @@
-<script lang="ts">
-	import WorkspaceDiffDrawer, { type DiffRow } from './WorkspaceDiffDrawer.svelte'
-	import { Pencil } from 'lucide-svelte'
-	import { DraftService, ScriptService, type WorkspaceItemDiff } from '$lib/gen'
-	import { userWorkspaces } from '$lib/stores'
-	import { editUrlFor as buildEditUrl } from './forkEditUrl'
-	import { getDraftDiffValues, type DraftKind } from '$lib/utils_draft_deploy'
-	import { getDraftItems } from '$lib/workspaceDrafts.svelte'
-
-	// Draft rows carry the user-draft itemKind (`trigger_schedule`, `trigger_http`…),
-	// but the shared row icon/label and the edit-link builder speak the deploy-style
-	// kinds (`schedule`, `http_trigger`…) the fork drawer and compare page use. Map
-	// to deploy-style for display, and back for the draft-value getter.
-	const DEPLOY_KIND_BY_DRAFT_KIND: Partial<Record<DraftKind, string>> = {
-		trigger_schedule: 'schedule',
-		trigger_http: 'http_trigger',
-		trigger_websocket: 'websocket_trigger',
-		trigger_kafka: 'kafka_trigger',
-		trigger_nats: 'nats_trigger',
-		trigger_postgres: 'postgres_trigger',
-		trigger_mqtt: 'mqtt_trigger',
-		trigger_sqs: 'sqs_trigger',
-		trigger_gcp: 'gcp_trigger',
-		trigger_azure: 'azure_trigger',
-		trigger_email: 'email_trigger'
-	}
-	const DRAFT_KIND_BY_DEPLOY_KIND = Object.fromEntries(
-		Object.entries(DEPLOY_KIND_BY_DRAFT_KIND).map(([d, p]) => [p, d])
-	) as Record<string, DraftKind>
-
-	// Thin wrapper: supplies the deployed ↔ draft data source (server `draft`
-	// table, same as the compare page) to the generic WorkspaceDiffDrawer.
-	// Read-only, mirroring ForkDiffDrawer; deploy/discard live on the Review page.
-	let { workspaceId }: { workspaceId: string } = $props()
-
-	let inner: WorkspaceDiffDrawer | undefined = $state(undefined)
-	let rows: DiffRow[] = $state([])
-	let loading = $state(false)
-	let error: string | undefined = $state(undefined)
-	// draft_only per item — drives the "added" rendering (empty before).
-	let draftOnlyByKey: Record<string, boolean> = $state({})
-	// Pre-resolved before/after for exploded pipeline-node rows (see below),
-	// keyed by `${kind}/${path}`. Their content lives in the bundle, not a
-	// per-item draft endpoint, so `loadValues` reads it from here instead of
-	// calling `getDraftDiffValues`.
-	let pipelineNodeValues: Record<string, { before?: unknown; after: unknown }> = $state({})
-
-	const ws = $derived($userWorkspaces.find((w) => w.id === workspaceId))
-
-	export function open() {
-		void fetchDrafts()
-		inner?.open()
-	}
-
-	type ScriptBody = { language?: string; content?: string }
-	type PipelineBundle = {
-		drafts?: Array<[string, { script?: { language?: string; content?: string; summary?: string } }]>
-	}
-
-	// Explode a `data_pipeline` bundle draft into one row per node, nested under
-	// the bundle's folder so they read as the pipeline's subitems. Each node is a
-	// script with its own draft body; the deployed body (if the node is already
-	// deployed) is the "before" so its line changes show. Returns undefined to let
-	// the caller fall back to a single bundle row if the bundle can't be read.
-	async function explodePipelineBundle(bundlePath: string): Promise<DiffRow[] | undefined> {
-		let bundle: PipelineBundle
-		try {
-			const row = (await DraftService.getOwnDraft({
-				workspace: workspaceId,
-				kind: 'data_pipeline',
-				path: bundlePath
-			})) as { value?: PipelineBundle }
-			bundle = row?.value ?? {}
-		} catch (e) {
-			console.warn('Draft diff: pipeline bundle load failed', bundlePath, e)
-			return undefined
-		}
-		const entries = Array.isArray(bundle.drafts) ? bundle.drafts : []
-		// The bundle is keyed at `f/<folder>/data_pipeline`; nodes live in `f/<folder>`.
-		const folder = bundlePath.replace(/\/data_pipeline$/, '')
-		const out: DiffRow[] = []
-		await Promise.all(
-			entries.map(async ([nodePath, d]) => {
-				const after: ScriptBody = {
-					language: d?.script?.language,
-					content: d?.script?.content ?? ''
-				}
-				let before: ScriptBody | undefined
-				try {
-					const dep = await ScriptService.getScriptByPath({
-						workspace: workspaceId,
-						path: nodePath
-					})
-					before = { language: dep.language, content: dep.content }
-				} catch {
-					// Node not deployed yet → no "before" (renders as added).
-				}
-				const rel = nodePath.startsWith(`${folder}/`) ? nodePath.slice(folder.length + 1) : nodePath
-				// Nest under the bundle folder (`…/data_pipeline/<node>`) so the nodes
-				// group as the pipeline's subitems in the tree.
-				const displayPath = `${bundlePath}/${rel}`
-				// A pipeline node shares `script/<nodePath>` with a standalone script
-				// draft at the same path, so identify the row by its distinct
-				// bundle-nested path — `path` stays the real node for the edit link.
-				const key = `pipeline:${displayPath}`
-				pipelineNodeValues[key] = { before, after }
-				out.push({
-					kind: 'script',
-					path: nodePath,
-					displayPath,
-					key,
-					summary: d?.script?.summary || undefined,
-					status: before ? 'modified' : 'added'
-				})
-			})
-		)
-		return out
-	}
-
-	async function fetchDrafts() {
-		loading = true
-		error = undefined
-		try {
-			// One source of truth (Workspace Drafts) — same list the compare page and
-			// the count use.
-			const items = await getDraftItems(workspaceId)
-			const donly: Record<string, boolean> = {}
-			pipelineNodeValues = {}
-			const out: DiffRow[] = []
-			for (const it of items) {
-				if (it.kind === 'data_pipeline') {
-					// A pipeline bundle isn't a single diffable item — explode it into its
-					// node-script subitems. An unreadable bundle is skipped (it has no
-					// single-item diff to show).
-					const nodes = await explodePipelineBundle(it.path)
-					if (nodes) out.push(...nodes)
-					continue
-				}
-				// Raw apps must surface as `raw_app` so the row's edit link points at the
-				// raw-app editor (mirrors CompareDrafts); `getDraftItems` carries the flag.
-				const baseKind = it.raw_app ? 'raw_app' : it.kind
-				const kind = DEPLOY_KIND_BY_DRAFT_KIND[baseKind] ?? baseKind
-				donly[`${kind}/${it.path}`] = it.draft_only
-				// A never-deployed app/raw_app is parked at a synthetic `…/draft_<uuid>`
-				// storage path with the user's typed name in `draft_path`; show that
-				// (matches the home list) while `path` stays the storage key for loading.
-				// `summary` comes straight from the draft row, so it shows for every kind
-				// up front instead of only after the diff value loads.
-				out.push({
-					kind,
-					path: it.path,
-					displayPath: it.draft_path ?? it.path,
-					summary: it.summary,
-					status: it.draft_only ? 'added' : 'modified'
-				})
-			}
-			rows = out
-			draftOnlyByKey = donly
-		} catch (e) {
-			console.error('Draft diff: list failed', e)
-			error = `Failed to load drafts: ${e}`
-			rows = []
-		} finally {
-			loading = false
-		}
-	}
-
-	async function loadValues(d: DiffRow): Promise<{ before: unknown; after: unknown }> {
-		// Exploded pipeline-node rows carry their content from the bundle, not a
-		// per-item draft endpoint — keyed by the row's unique `key` so a standalone
-		// script draft at the same path can't read a node's cached value.
-		const pipelineNode = d.key ? pipelineNodeValues[d.key] : undefined
-		if (pipelineNode) return { before: pipelineNode.before, after: pipelineNode.after }
-		const draftOnly = draftOnlyByKey[`${d.kind}/${d.path}`] ?? false
-		// getDraftDiffValues keys on the draft itemKind: `raw_app` must stay
-		// `raw_app` (the helper sends rawApp:true only for that exact kind, which a
-		// never-deployed raw app needs, else it hits the normal app endpoint and
-		// 404s). Only the trigger display kinds map back from their deploy-style names.
-		const kind = (DRAFT_KIND_BY_DEPLOY_KIND[d.kind] ?? d.kind) as DraftKind
-		const { deployed, draft } = await getDraftDiffValues(kind, d.path, workspaceId, draftOnly)
-		// draft_only items have never been deployed → render as "added" (empty
-		// before), matching how the fork drawer renders added items.
-		return { before: draftOnly ? undefined : deployed, after: draft }
-	}
-</script>
-
-<WorkspaceDiffDrawer
-	bind:this={inner}
-	diffs={rows}
-	{loadValues}
-	{loading}
-	{error}
-	emptyMessage="No drafts in this workspace."
-	title="Drafts"
-	reviewHref={`/forks/compare?workspace_id=${encodeURIComponent(workspaceId)}&mode=draft`}
-	editUrlFor={(d) => buildEditUrl(d as unknown as WorkspaceItemDiff, workspaceId)}
->
-	{#snippet titleExtra()}
-		<div class="flex items-center gap-2 text-xs text-secondary">
-			<Pencil class="w-3.5 h-3.5 shrink-0" />
-			<span class="font-medium truncate">{ws?.name ?? workspaceId}</span>
-		</div>
-	{/snippet}
-</WorkspaceDiffDrawer>
diff --git a/frontend/src/lib/components/sessions/ForkDiffDrawer.svelte b/frontend/src/lib/components/sessions/ForkDiffDrawer.svelte
deleted file mode 100644
index e03fc5a49c..0000000000
--- a/frontend/src/lib/components/sessions/ForkDiffDrawer.svelte
+++ /dev/null
@@ -1,125 +0,0 @@
-<script lang="ts">
-	import WorkspaceDiffDrawer, { type DiffRow } from './WorkspaceDiffDrawer.svelte'
-	import Badge from '$lib/components/common/badge/Badge.svelte'
-	import { AlertTriangle, ArrowRight, GitFork } from 'lucide-svelte'
-	import { WorkspaceService, type WorkspaceComparison, type WorkspaceItemDiff } from '$lib/gen'
-	import { getItemValue } from '$lib/utils_workspace_deploy'
-	import { userWorkspaces } from '$lib/stores'
-	import { editUrlFor as buildEditUrl } from './forkEditUrl'
-
-	// Thin wrapper: supplies the deployed-parent ↔ deployed-fork data source to
-	// the generic WorkspaceDiffDrawer. Display/behavior unchanged from before.
-	let {
-		forkWorkspaceId,
-		parentWorkspaceId
-	}: { forkWorkspaceId: string; parentWorkspaceId: string } = $props()
-
-	let inner: WorkspaceDiffDrawer | undefined = $state(undefined)
-	let comparison: WorkspaceComparison | undefined = $state(undefined)
-	let loading = $state(false)
-	let error: string | undefined = $state(undefined)
-
-	const forkWs = $derived($userWorkspaces.find((w) => w.id === forkWorkspaceId))
-	const parentWs = $derived($userWorkspaces.find((w) => w.id === parentWorkspaceId))
-
-	function statusOf(d: WorkspaceItemDiff): DiffRow['status'] {
-		if (d.exists_in_fork && !d.exists_in_source) return 'added'
-		if (!d.exists_in_fork && d.exists_in_source) return 'removed'
-		if (d.ahead > 0 && d.behind > 0) return 'conflict'
-		return 'modified'
-	}
-
-	// Keep the original diffs by key so loadValues can honor exists flags
-	// (skip the non-existent side for added/removed items).
-	let diffByKey: Record<string, WorkspaceItemDiff> = $state({})
-
-	const rows = $derived.by<DiffRow[]>(() =>
-		(comparison?.diffs ?? []).map((d) => ({
-			kind: d.kind,
-			path: d.path,
-			status: statusOf(d),
-			ahead: d.ahead,
-			behind: d.behind
-		}))
-	)
-
-	function skipNotice(c: WorkspaceComparison | undefined): string | undefined {
-		return c?.skipped_comparison
-			? 'This fork was created before change tracking was added — diffs are not available.'
-			: undefined
-	}
-	const notice = $derived(skipNotice(comparison))
-
-	export function open() {
-		void fetchComparison()
-		inner?.open()
-	}
-
-	async function fetchComparison() {
-		loading = true
-		error = undefined
-		try {
-			comparison = await WorkspaceService.compareWorkspaces({
-				workspace: parentWorkspaceId,
-				targetWorkspaceId: forkWorkspaceId
-			})
-			diffByKey = Object.fromEntries(
-				(comparison?.diffs ?? []).map((d) => [`${d.kind}/${d.path}`, d])
-			)
-		} catch (e) {
-			console.error('Fork diff: comparison failed', e)
-			error = `Failed to load comparison: ${e}`
-			comparison = undefined
-		} finally {
-			loading = false
-		}
-	}
-
-	async function loadValues(d: DiffRow): Promise<{ before: unknown; after: unknown }> {
-		const od = diffByKey[`${d.kind}/${d.path}`]
-		const existsSource = od ? od.exists_in_source !== false : true
-		const existsFork = od ? od.exists_in_fork !== false : true
-		const [before, after] = await Promise.all([
-			existsSource
-				? getItemValue(d.kind as any, d.path, parentWorkspaceId).catch(() => undefined)
-				: Promise.resolve(undefined),
-			existsFork
-				? getItemValue(d.kind as any, d.path, forkWorkspaceId).catch(() => undefined)
-				: Promise.resolve(undefined)
-		])
-		return { before, after }
-	}
-</script>
-
-<WorkspaceDiffDrawer
-	bind:this={inner}
-	diffs={rows}
-	{loadValues}
-	{loading}
-	{error}
-	{notice}
-	emptyMessage="No changes between this fork and its parent."
-	title="Fork changes"
-	reviewHref={`/forks/compare?workspace_id=${encodeURIComponent(forkWorkspaceId)}`}
-	editUrlFor={(d) => buildEditUrl(d as unknown as WorkspaceItemDiff, forkWorkspaceId)}
->
-	{#snippet titleExtra()}
-		<div class="flex items-center gap-2 text-xs text-secondary">
-			<GitFork class="w-3.5 h-3.5 shrink-0" />
-			<span class="font-medium truncate">{forkWs?.name ?? forkWorkspaceId}</span>
-			<ArrowRight class="w-3 h-3 shrink-0 text-tertiary" />
-			<span class="font-medium truncate">{parentWs?.name ?? parentWorkspaceId}</span>
-			{#if comparison}
-				<Badge color="transparent" class="ml-2">
-					{comparison.summary.total_diffs} item{comparison.summary.total_diffs !== 1 ? 's' : ''}
-				</Badge>
-				{#if comparison.summary.conflicts > 0}
-					<Badge color="orange">
-						<AlertTriangle class="w-3 h-3 inline mr-1" />
-						{comparison.summary.conflicts} conflict{comparison.summary.conflicts !== 1 ? 's' : ''}
-					</Badge>
-				{/if}
-			{/if}
-		</div>
-	{/snippet}
-</WorkspaceDiffDrawer>
diff --git a/frontend/src/lib/components/sessions/SessionChangesBar.svelte b/frontend/src/lib/components/sessions/SessionChangesBar.svelte
new file mode 100644
index 0000000000..9f59d1f320
--- /dev/null
+++ b/frontend/src/lib/components/sessions/SessionChangesBar.svelte
@@ -0,0 +1,264 @@
+<script lang="ts">
+	import {
+		Archive,
+		ExternalLink,
+		GitPullRequestClosed,
+		MoveRight,
+		Pencil,
+		Trash2
+	} from 'lucide-svelte'
+	import { Button } from '$lib/components/common'
+	import Badge from '$lib/components/common/badge/Badge.svelte'
+	import WorkspaceFamilyPicker from './WorkspaceFamilyPicker.svelte'
+	import { isPremiumStore, userStore, userWorkspaces, workspaceStore } from '$lib/stores'
+	import { canCreateFork } from '$lib/utils/editInFork'
+	import { isCloudHosted } from '$lib/cloud'
+	import { sessionState, type Session } from './sessionState.svelte'
+	import { getRuntime } from './sessionRuntime.svelte'
+	import SessionDiffDrawer from './SessionDiffDrawer.svelte'
+	import { useWorkspaceDrafts } from '$lib/workspaceDrafts.svelte'
+	import { badgeCounts, buildDeployItems } from './sessionDeployModel'
+	import { useExistingMaskKeys } from './sessionDeployModel.svelte'
+
+	// Unified session bar: surfaces what the CURRENT chat changed — pending
+	// drafts and deployed items — as one count badge per status that opens the
+	// session diff drawer.
+	let {
+		session,
+		onMove,
+		onCreateForkAndMove,
+		onArchive,
+		onDelete
+	}: {
+		session: Session
+		onMove?: (workspaceId: string) => void
+		onCreateForkAndMove?: (fork: {
+			parent_workspace_id: string
+			id: string
+			name: string
+		}) => void | Promise<void>
+		onArchive?: () => void
+		onDelete?: () => void
+	} = $props()
+
+	// Only meaningful once the session committed to a workspace (post first send).
+	const committedId = $derived(session.workspace_id)
+	const sessionWorkspace = $derived(
+		committedId ? $userWorkspaces.find((w) => w.id === committedId) : undefined
+	)
+	const parentWorkspaceId = $derived(sessionWorkspace?.parent_workspace_id ?? undefined)
+	const parentWorkspace = $derived(
+		parentWorkspaceId ? $userWorkspaces.find((w) => w.id === parentWorkspaceId) : undefined
+	)
+	const isFork = $derived(!!parentWorkspaceId)
+
+	// Same gate as the sidebar WorkspaceMenu / SessionWorkspaceBar. On cloud,
+	// forking is a premium-only feature (backend caps it per paid seat).
+	const forksAllowed = $derived(
+		(!isCloudHosted() || $isPremiumStore) &&
+			canCreateFork($userStore) &&
+			$workspaceStore !== 'admins'
+	)
+
+	const runtime = $derived(getRuntime(session.id))
+
+	// The chat's modified-items mask (`${UserDraftItemKind}:${storagePath}`).
+	// undefined = legacy/untracked chat → fall back to showing every draft.
+	// A Set (even empty) → filter to just this chat's items.
+	const mask = $derived(runtime?.manager.modifiedItems)
+
+	// Workspace Drafts (fetches on mount and on every Server-Draft invalidation);
+	// scoped to the chat's mask inside the deploy model below.
+	const drafts = useWorkspaceDrafts(() => committedId)
+
+	// The committed workspace vanished from the user's list (deleted, archived,
+	// or access revoked) — the session can't operate in it anymore.
+	const isUnavailable = $derived(!!committedId && !sessionWorkspace)
+
+	// The committed workspace is gone, so we can't read its parent to know if
+	// it was a fork — fall back to the fork-id convention for the wording.
+	const committedIsFork = $derived(committedId?.startsWith('wm-fork-') ?? false)
+
+	// Full dock refresh: re-run existence checks + draft list. Both are
+	// stale-while-revalidate — a hard reset would blank dockItems for the
+	// round-trip, hiding the bar (and unmounting the drawer) mid-deploy.
+	function refreshDock() {
+		existing.refresh()
+		drafts.refresh()
+	}
+
+	// Refresh the draft list when the AI finishes a turn (loading true → false):
+	// tool calls may have created/edited/deleted items. Deploys happen
+	// server-side, so the frontend only has this coarse signal.
+	let wasLoading = $state(false)
+	$effect(() => {
+		const isLoading = runtime?.manager.loading ?? false
+		if (wasLoading && !isLoading) refreshDock()
+		wasLoading = isLoading
+	})
+
+	// Refresh when the tab regains visibility — covers edits in another tab / by
+	// another user while we were away.
+	$effect(() => {
+		if (!committedId) return
+		function onVisibilityChange() {
+			if (document.visibilityState !== 'visible') return
+			if (sessionState.currentSessionId !== session.id) return
+			refreshDock()
+		}
+		document.addEventListener('visibilitychange', onVisibilityChange)
+		return () => document.removeEventListener('visibilitychange', onVisibilityChange)
+	})
+
+	let diffDrawer: SessionDiffDrawer | undefined = $state(undefined)
+
+	// The dock counts are computed from the same pure model over this chat's
+	// drafts; the readout mirrors the drawer's item states.
+	// Existence check for mask-only (deployed) items — without it they'd be
+	// dropped from the dock counts while the drawer (which runs the same check)
+	// still shows them as Deployed.
+	const existing = useExistingMaskKeys(() => ({
+		draftItems: drafts.items,
+		mask: committedId ? mask : undefined,
+		workspaceId: committedId ?? ''
+	}))
+	const dockItems = $derived(
+		committedId
+			? buildDeployItems({ draftItems: drafts.items, mask, existingKeys: existing.keys })
+			: []
+	)
+	const dockCounts = $derived(badgeCounts(dockItems))
+
+	// Deletion-only fork chat: the mask has entries but every one failed the
+	// (resolved) existence check — the chat's edits were deletions, which have no
+	// dock row by design. The pending fork→parent removal is still reviewable on
+	// the compare page, so the bar must keep that doorway instead of vanishing.
+	// Gated on a resolved check (undefined = still loading) so the bar doesn't
+	// flash this state while deployed rows are being confirmed, and on isFork —
+	// a non-fork deletion is immediate and final, with nothing left to review.
+	const deletionOnly = $derived(
+		isFork && (mask?.size ?? 0) > 0 && existing.keys !== undefined && dockItems.length === 0
+	)
+	const compareHref = $derived(
+		committedId
+			? `/forks/compare?workspace_id=${encodeURIComponent(committedId)}&mode=fork` +
+					(session.chatId ? `&from_session=${encodeURIComponent(session.chatId)}` : '')
+			: undefined
+	)
+
+	// One "Edits" bar for both fork and non-fork sessions, shown when this chat
+	// edited anything. The fork's identity lives in the modal (SessionDiffDrawer's
+	// title), not on the bar. Fork sessions still need the forking gate + a
+	// resolvable fork/parent pair.
+	const showBar = $derived(
+		!!committedId &&
+			(dockItems.length > 0 || deletionOnly) &&
+			(!isFork || (forksAllowed && !!sessionWorkspace && !!parentWorkspace && !!parentWorkspaceId))
+	)
+</script>
+
+{#snippet dock()}
+	<!-- One count badge per row status, same vocabulary/colors as the drawer's
+	     badges (draft/deployed) so the bar reads at a glance. -->
+	<div class="flex items-center gap-1 shrink-0">
+		{#if dockCounts.draft > 0}
+			<Badge small clickable color="indigo" onclick={() => diffDrawer?.open()}>
+				{dockCounts.draft} draft{dockCounts.draft === 1 ? '' : 's'}
+			</Badge>
+		{/if}
+		{#if dockCounts.deployed > 0}
+			<Badge small clickable color="green" onclick={() => diffDrawer?.open()}>
+				{dockCounts.deployed} deployed
+			</Badge>
+		{/if}
+		{#if deletionOnly && compareHref}
+			<!-- Deleted items have no dock row; the pending fork→parent removal is
+			     reviewed on the compare page, so keep that doorway on the bar. -->
+			<a
+				href={compareHref}
+				target="_blank"
+				rel="noopener noreferrer"
+				title="This chat's edits were deletions — review and promote them on the compare page"
+				class="inline-flex items-center gap-1 text-2xs font-medium text-accent hover:underline shrink-0"
+			>
+				Review deletions on compare page
+				<ExternalLink class="w-3 h-3" />
+			</a>
+		{/if}
+	</div>
+{/snippet}
+
+{#if committedId && isUnavailable}
+	<!-- Committed workspace is no longer in the user's list (deleted, archived,
+	     or access revoked). Surface an actionable banner: move the session
+	     to a still-valid workspace, or discard it (archive / delete). The
+	     chat input is disabled by SessionWrapper while this is shown. Shown even
+	     for an archived session — unarchiving in place can't help when the
+	     workspace is gone, so move/discard is the only real recovery path. -->
+	<div class="flex flex-col gap-2 py-2 px-3 text-xs border rounded-md bg-surface-tertiary">
+		<div class="flex flex-row items-start gap-2">
+			<GitPullRequestClosed class="w-4 h-4 shrink-0 text-tertiary mt-0.5" />
+			<div class="flex flex-col min-w-0 flex-1">
+				<span class="text-primary font-medium"
+					>The {committedIsFork ? 'fork' : 'workspace'} has been archived or deleted</span
+				>
+				<span class="text-2xs text-tertiary">
+					Move this session to another workspace, or discard it.
+					<span class="font-mono text-tertiary" title={committedId}>{committedId}</span>
+				</span>
+			</div>
+		</div>
+		<div class="flex flex-row items-center justify-end gap-1.5">
+			<WorkspaceFamilyPicker
+				onPick={(workspaceId) => onMove?.(workspaceId)}
+				onCreateFork={async (fork) => {
+					await onCreateForkAndMove?.(fork)
+				}}
+				createForkCaption="Created immediately and the session moved into it."
+			>
+				{#snippet trigger()}
+					<Button variant="default" unifiedSize="sm" startIcon={{ icon: MoveRight }}>
+						Move to workspace
+					</Button>
+				{/snippet}
+			</WorkspaceFamilyPicker>
+			<Button
+				variant="default"
+				unifiedSize="sm"
+				startIcon={{ icon: Archive }}
+				dropdownItems={[{ label: 'Delete', icon: Trash2, onClick: () => onDelete?.() }]}
+				onclick={() => onArchive?.()}
+			>
+				Archive
+			</Button>
+		</div>
+	</div>
+{:else if showBar && committedId}
+	<!-- The "Edits" bar: what the AI changed this session. Fork identity / sync
+	     status lives inside the modal, not here. -->
+	<div
+		class="flex flex-row items-center justify-between gap-2 py-2 px-3 text-xs border rounded-md bg-surface-tertiary"
+	>
+		<div class="flex items-center gap-1.5 min-w-0" title="Edited by the chat during this session">
+			<Pencil class="w-3.5 h-3.5 shrink-0 text-secondary" />
+			<span class="truncate text-secondary font-medium">Edits</span>
+		</div>
+		{@render dock()}
+	</div>
+{/if}
+
+<!-- Mounted independently of the bar: a transient dip of the dock counts to
+     zero (mid-refresh after a deploy) must not unmount an open drawer. -->
+{#if committedId && !isUnavailable}
+	<SessionDiffDrawer
+		bind:this={diffDrawer}
+		workspaceId={committedId}
+		{parentWorkspaceId}
+		chatId={session.chatId}
+		keys={mask}
+		onDataChanged={refreshDock}
+		onItemDeployed={(item) =>
+			void runtime?.manager.renameModifiedItem(item.draftKind, item.path, item.displayPath)}
+		onItemDiscarded={(item) => void runtime?.manager.removeModifiedItem(item.draftKind, item.path)}
+	/>
+{/if}
diff --git a/frontend/src/lib/components/sessions/SessionDiffDrawer.svelte b/frontend/src/lib/components/sessions/SessionDiffDrawer.svelte
new file mode 100644
index 0000000000..1a6692048c
--- /dev/null
+++ b/frontend/src/lib/components/sessions/SessionDiffDrawer.svelte
@@ -0,0 +1,107 @@
+<script lang="ts">
+	import WorkspaceDiffDrawer from './WorkspaceDiffDrawer.svelte'
+	import { ArrowRight, GitFork, Pencil } from 'lucide-svelte'
+	import { userWorkspaces } from '$lib/stores'
+	import { useSessionDeployModel } from './sessionDeployModel.svelte'
+	import type { DeployItem } from './sessionDeployModel'
+
+	// Session "Edits" drawer. Builds the deploy model over the session
+	// workspace's drafts and hands it to WorkspaceDiffDrawer, which renders the
+	// tree + scroll-through diff column. The parent workspace only informs the
+	// title identity and the compare-page link — deploys land in the session
+	// workspace itself.
+	let {
+		workspaceId,
+		parentWorkspaceId,
+		chatId,
+		keys,
+		onDataChanged,
+		onItemDeployed,
+		onItemDiscarded
+	}: {
+		workspaceId: string
+		parentWorkspaceId?: string
+		/** CHAT id (Session.chatId — the IndexedDB `chats` key, NOT the session id),
+		 *  threaded to the footer's compare-page link as `from_session`: the compare
+		 *  page resolves it via readChatModifiedItems to preselect this chat's edits. */
+		chatId?: string
+		keys?: Set<string>
+		/** Notified after a deploy/discard mutated workspace state, so the owner
+		 *  (session bar) can refresh its cached draft sources. */
+		onDataChanged?: () => void
+		/** Mask maintenance, forwarded to the deploy model (see its args' docs):
+		 *  a deploy moves the item's mask entry to its deployed path, a discard
+		 *  drops it. */
+		onItemDeployed?: (item: DeployItem) => void
+		onItemDiscarded?: (item: DeployItem) => void
+	} = $props()
+
+	const isFork = $derived(!!parentWorkspaceId)
+	const ws = $derived($userWorkspaces.find((w) => w.id === workspaceId))
+	const parentWs = $derived(
+		parentWorkspaceId ? $userWorkspaces.find((w) => w.id === parentWorkspaceId) : undefined
+	)
+
+	let inner: WorkspaceDiffDrawer | undefined = $state(undefined)
+
+	const model = useSessionDeployModel(() => ({
+		workspaceId,
+		mask: keys,
+		onDataChanged,
+		onItemDeployed,
+		onItemDiscarded
+	}))
+
+	// Editor URL for a row (every item lives in the session workspace).
+	function editUrlFor(item: DeployItem): string | undefined {
+		const ws = encodeURIComponent(workspaceId)
+		const path = item.path
+		if (item.deployKind === 'flow') return `/flows/edit/${path}?workspace=${ws}`
+		if (item.deployKind === 'script') return `/scripts/edit/${path}?workspace=${ws}`
+		if (item.deployKind === 'app') return `/apps/edit/${path}?workspace=${ws}`
+		if (item.deployKind === 'raw_app') return `/apps_raw/edit/${path}?workspace=${ws}`
+		return undefined
+	}
+
+	const title = 'Edited during session'
+
+	// Compare page = the batch/PR surface. The footer hands off THIS session's
+	// edits via `from_session`, so the compare page opens preselected.
+	const compareSessionHref = $derived(
+		`/forks/compare?workspace_id=${encodeURIComponent(workspaceId)}&mode=${isFork ? 'fork' : 'draft'}` +
+			(chatId ? `&from_session=${encodeURIComponent(chatId)}` : '')
+	)
+
+	export function open() {
+		inner?.open()
+	}
+</script>
+
+<WorkspaceDiffDrawer
+	bind:this={inner}
+	{model}
+	{title}
+	{editUrlFor}
+	{compareSessionHref}
+	workspaceLabel={ws?.name ?? workspaceId}
+>
+	{#snippet titleExtra()}
+		<div class="flex items-center gap-1.5 text-xs text-secondary min-w-0">
+			{#if isFork}
+				<GitFork class="w-3.5 h-3.5 shrink-0" />
+				<span class="font-medium truncate" title={ws?.name ?? workspaceId}>
+					{ws?.name ?? workspaceId}
+				</span>
+				<ArrowRight class="w-3 h-3 shrink-0 text-tertiary" />
+				<span class="font-medium truncate" title={parentWs?.name ?? parentWorkspaceId}>
+					{parentWs?.name ?? parentWorkspaceId}
+				</span>
+			{:else}
+				<Pencil class="w-3.5 h-3.5 shrink-0" />
+				<span class="font-medium truncate" title={ws?.name ?? workspaceId}>
+					{ws?.name ?? workspaceId}
+				</span>
+			{/if}
+		</div>
+	{/snippet}
+</WorkspaceDiffDrawer>
diff --git a/frontend/src/lib/components/sessions/SessionDraftBar.svelte b/frontend/src/lib/components/sessions/SessionDraftBar.svelte
deleted file mode 100644
index d23070151a..0000000000
--- a/frontend/src/lib/components/sessions/SessionDraftBar.svelte
+++ /dev/null
@@ -1,77 +0,0 @@
-<script lang="ts">
-	import { Pencil } from 'lucide-svelte'
-	import { Button } from '$lib/components/common'
-	import { goto } from '$lib/navigation'
-	import { sessionState, type Session } from './sessionState.svelte'
-	import { getRuntime } from './sessionRuntime.svelte'
-	import DraftDiffDrawer from './DraftDiffDrawer.svelte'
-	import SessionDiffButton from './SessionDiffButton.svelte'
-	import { useWorkspaceDrafts } from '$lib/workspaceDrafts.svelte'
-	import Tooltip from '$lib/components/meltComponents/Tooltip.svelte'
-
-	let { session }: { session: Session } = $props()
-
-	// Only meaningful once the session committed to a workspace (post first send).
-	// The Draft Count comes from the shared Workspace Drafts resource: it fetches
-	// on mount and whenever a Server-Draft mutation invalidates the workspace, so
-	// the count is fresh on every (re)open with no per-session caching.
-	const committedId = $derived(session.workspace_id)
-	const drafts = useWorkspaceDrafts(() => committedId)
-	const count = $derived(drafts.count)
-
-	// Deploys/saves from the Preview editor invalidate the workspace directly
-	// (ScriptEditorView / FlowEditorView / RawAppEditorView call
-	// invalidateWorkspaceDrafts). The chat itself can also deploy items, but
-	// those happen server-side and the frontend never sees the individual calls —
-	// so refresh on the same coarse signals the fork bar uses: the AI turn ending
-	// and the tab regaining visibility.
-	const runtime = $derived(getRuntime(session.id))
-
-	let wasLoading = $state(false)
-	$effect(() => {
-		const isLoading = runtime?.manager.loading ?? false
-		if (wasLoading && !isLoading) drafts.refresh()
-		wasLoading = isLoading
-	})
-
-	$effect(() => {
-		if (!committedId) return
-		function onVisibilityChange() {
-			if (document.visibilityState !== 'visible') return
-			if (sessionState.currentSessionId !== session.id) return
-			drafts.refresh()
-		}
-		document.addEventListener('visibilitychange', onVisibilityChange)
-		return () => document.removeEventListener('visibilitychange', onVisibilityChange)
-	})
-
-	let drawer: DraftDiffDrawer | undefined = $state(undefined)
-
-	function openReview() {
-		if (!committedId) return
-		goto(`/forks/compare?workspace_id=${encodeURIComponent(committedId)}&mode=draft`)
-	}
-</script>
-
-{#if committedId && count > 0}
-	<div
-		class="flex flex-row items-center justify-between gap-2 py-2 px-3 text-xs border rounded-md bg-surface-tertiary"
-	>
-		<div class="flex items-center gap-1.5 min-w-0">
-			<span class="inline-flex shrink-0"><Pencil class="w-3.5 h-3.5 text-secondary" /></span>
-			<Tooltip placement="top" class="truncate text-secondary">
-				{count} draft{count === 1 ? '' : 's'}
-				{#snippet text()}
-					Tracks all unsaved draft changes in this workspace — including edits made outside this
-					chat (e.g. in the editor), not only changes made by the assistant.
-				{/snippet}
-			</Tooltip>
-		</div>
-		<div class="flex items-center gap-1 shrink-0">
-			<SessionDiffButton {count} onclick={() => drawer?.open()} />
-			<Button variant="default" unifiedSize="xs" onclick={openReview}>Review</Button>
-		</div>
-	</div>
-
-	<DraftDiffDrawer bind:this={drawer} workspaceId={committedId} />
-{/if}
diff --git a/frontend/src/lib/components/sessions/SessionForkBar.svelte b/frontend/src/lib/components/sessions/SessionForkBar.svelte
deleted file mode 100644
index a0aafee456..0000000000
--- a/frontend/src/lib/components/sessions/SessionForkBar.svelte
+++ /dev/null
@@ -1,212 +0,0 @@
-<script lang="ts">
-	import {
-		Archive,
-		ArrowRight,
-		GitCompareArrows,
-		GitFork,
-		GitPullRequestArrow,
-		GitPullRequestClosed,
-		MoveRight,
-		Trash2
-	} from 'lucide-svelte'
-	import { Button } from '$lib/components/common'
-	import WorkspaceFamilyPicker from './WorkspaceFamilyPicker.svelte'
-	import { isPremiumStore, userStore, userWorkspaces, workspaceStore } from '$lib/stores'
-	import { goto } from '$lib/navigation'
-	import { canCreateFork } from '$lib/utils/editInFork'
-	import { isCloudHosted } from '$lib/cloud'
-	import { deriveForkStatus, sessionState, type Session } from './sessionState.svelte'
-	import { getRuntime } from './sessionRuntime.svelte'
-	import ForkDiffDrawer from './ForkDiffDrawer.svelte'
-	import SessionDiffButton from './SessionDiffButton.svelte'
-
-	let {
-		session,
-		onMove,
-		onCreateForkAndMove,
-		onArchive,
-		onDelete
-	}: {
-		session: Session
-		onMove?: (workspaceId: string) => void
-		onCreateForkAndMove?: (fork: {
-			parent_workspace_id: string
-			id: string
-			name: string
-		}) => void | Promise<void>
-		onArchive?: () => void
-		onDelete?: () => void
-	} = $props()
-
-	// The fork bar surfaces a committed workspace relationship — only
-	// visible after the session locked its workspace at first send. Drafts
-	// (workspace_id undefined) get nothing here.
-	const committedId = $derived(session.workspace_id)
-	const sessionWorkspace = $derived(
-		committedId ? $userWorkspaces.find((w) => w.id === committedId) : undefined
-	)
-	const parentWorkspaceId = $derived(sessionWorkspace?.parent_workspace_id ?? undefined)
-	const parentWorkspace = $derived(
-		parentWorkspaceId ? $userWorkspaces.find((w) => w.id === parentWorkspaceId) : undefined
-	)
-	const isFork = $derived(!!parentWorkspaceId)
-
-	// Same gate as the sidebar WorkspaceMenu / SessionWorkspaceBar.
-	// When forking isn't available the diff/review surface is moot. On cloud, forking is a
-	// premium-only feature (backend caps it per paid seat).
-	const forksAllowed = $derived(
-		(!isCloudHosted() || $isPremiumStore) &&
-			canCreateFork($userStore) &&
-			$workspaceStore !== 'admins'
-	)
-
-	let diffDrawer: ForkDiffDrawer | undefined = $state(undefined)
-
-	// Comparison data lives on the shared SessionRuntime resource so any
-	// future consumer (e.g. the diff drawer, a merge action) reads the
-	// same cache and can invalidate it after mutating the fork.
-	const runtime = $derived(getRuntime(session.id))
-	const comparison = $derived(runtime?.forkComparison.val)
-	const totalDiffs = $derived(comparison?.summary?.total_diffs ?? 0)
-	const forkStatus = $derived(deriveForkStatus(session, $userWorkspaces, comparison))
-	const isUnavailable = $derived(forkStatus === 'unavailable')
-
-	// The committed workspace is gone, so we can't read its parent to know if
-	// it was a fork — fall back to the fork-id convention for the wording.
-	const committedIsFork = $derived(committedId?.startsWith('wm-fork-') ?? false)
-
-	$effect(() => {
-		if (!runtime || !committedId || !parentWorkspaceId) return
-		void runtime.ensureForkComparison(parentWorkspaceId, committedId)
-	})
-
-	function refreshComparison() {
-		if (!runtime || !committedId || !parentWorkspaceId) return
-		runtime.invalidateForkComparison()
-		void runtime.ensureForkComparison(parentWorkspaceId, committedId)
-	}
-
-	// Refresh when the AI finishes a turn (loading transitions true →
-	// false). Tool calls in that turn may have created / edited / deleted
-	// fork items, so the diff count needs to reflect them immediately.
-	let wasLoading = $state(false)
-	$effect(() => {
-		const isLoading = runtime?.manager.loading ?? false
-		if (wasLoading && !isLoading) refreshComparison()
-		wasLoading = isLoading
-	})
-
-	// Refresh when the tab regains visibility — covers edits made in
-	// another tab or by another user while we were away.
-	$effect(() => {
-		if (!runtime || !committedId || !parentWorkspaceId) return
-		function onVisibilityChange() {
-			if (document.visibilityState !== 'visible') return
-			if (sessionState.currentSessionId !== session.id) return
-			refreshComparison()
-		}
-		document.addEventListener('visibilitychange', onVisibilityChange)
-		return () => document.removeEventListener('visibilitychange', onVisibilityChange)
-	})
-
-	export const refresh = refreshComparison
-
-	function openReview() {
-		if (!committedId || isUnavailable) return
-		goto(`/forks/compare?workspace_id=${encodeURIComponent(committedId)}`)
-	}
-</script>
-
-{#if committedId && isUnavailable}
-	<!-- Committed workspace is no longer in the user's list (deleted, archived,
-	     or access revoked). Surface an actionable banner: move the session
-	     to a still-valid workspace, or discard it (archive / delete). The
-	     chat input is disabled by SessionWrapper while this is shown. Shown even
-	     for an archived session — unarchiving in place can't help when the
-	     workspace is gone, so move/discard is the only real recovery path. -->
-	<div class="flex flex-col gap-2 py-2 px-3 text-xs border rounded-md bg-surface-tertiary">
-		<div class="flex flex-row items-start gap-2">
-			<GitPullRequestClosed class="w-4 h-4 shrink-0 text-tertiary mt-0.5" />
-			<div class="flex flex-col min-w-0 flex-1">
-				<span class="text-primary font-medium"
-					>The {committedIsFork ? 'fork' : 'workspace'} has been archived or deleted</span
-				>
-				<span class="text-2xs text-tertiary">
-					Move this session to another workspace, or discard it.
-					<span class="font-mono text-tertiary" title={committedId}>{committedId}</span>
-				</span>
-			</div>
-		</div>
-		<div class="flex flex-row items-center justify-end gap-1.5">
-			<WorkspaceFamilyPicker
-				onPick={(workspaceId) => onMove?.(workspaceId)}
-				onCreateFork={async (fork) => {
-					await onCreateForkAndMove?.(fork)
-				}}
-				createForkCaption="Created immediately and the session moved into it."
-			>
-				{#snippet trigger()}
-					<Button variant="default" unifiedSize="sm" startIcon={{ icon: MoveRight }}>
-						Move to workspace
-					</Button>
-				{/snippet}
-			</WorkspaceFamilyPicker>
-			<Button
-				variant="default"
-				unifiedSize="sm"
-				startIcon={{ icon: Archive }}
-				dropdownItems={[{ label: 'Delete', icon: Trash2, onClick: () => onDelete?.() }]}
-				onclick={() => onArchive?.()}
-			>
-				Archive
-			</Button>
-		</div>
-	</div>
-{:else if forksAllowed && isFork && sessionWorkspace && parentWorkspace && parentWorkspaceId && committedId}
-	{@const StatusIcon =
-		forkStatus === 'ahead'
-			? GitPullRequestArrow
-			: forkStatus === 'diverged'
-				? GitCompareArrows
-				: GitFork}
-	{@const statusColor =
-		forkStatus === 'ahead'
-			? 'text-blue-500'
-			: forkStatus === 'diverged'
-				? 'text-amber-500'
-				: 'text-secondary'}
-	{@const statusTitle =
-		forkStatus === 'ahead'
-			? 'Ahead of parent'
-			: forkStatus === 'diverged'
-				? 'Diverged from parent'
-				: forkStatus === 'in_sync'
-					? 'In sync with parent'
-					: 'Fork'}
-	<div
-		class="flex flex-row items-center justify-between gap-2 py-2 px-3 text-xs border rounded-md bg-surface-tertiary"
-	>
-		<div class="flex items-center gap-1.5 min-w-0">
-			<span title={statusTitle} class="inline-flex shrink-0">
-				<StatusIcon class="w-3.5 h-3.5 {statusColor}" />
-			</span>
-			<span class="truncate text-secondary" title={sessionWorkspace.name}>
-				{sessionWorkspace.name}
-			</span>
-			<ArrowRight class="w-3 h-3 shrink-0 text-tertiary" />
-			<span class="truncate text-secondary" title={parentWorkspace.name}>
-				{parentWorkspace.name}
-			</span>
-		</div>
-		<div class="flex items-center gap-1 shrink-0">
-			<SessionDiffButton
-				count={totalDiffs}
-				disabled={totalDiffs === 0}
-				onclick={() => diffDrawer?.open()}
-			/>
-			<Button variant="default" unifiedSize="xs" onclick={openReview}>Review</Button>
-		</div>
-	</div>
-
-	<ForkDiffDrawer bind:this={diffDrawer} forkWorkspaceId={committedId} {parentWorkspaceId} />
-{/if}
diff --git a/frontend/src/lib/components/sessions/SessionPicker.svelte b/frontend/src/lib/components/sessions/SessionPicker.svelte
index aad3de26c3..0342fd53e1 100644
--- a/frontend/src/lib/components/sessions/SessionPicker.svelte
+++ b/frontend/src/lib/components/sessions/SessionPicker.svelte
@@ -21,7 +21,6 @@
 	import { slide } from 'svelte/transition'
 	import {
 		createSession,
-		deriveForkStatus,
 		deleteSessionsForWorkspace,
 		isForkSession,
 		reconcileAfterWorkspaceChange,
@@ -53,15 +52,6 @@
 	import { sendUserToast } from '$lib/toast'
 	import { currentWorkspaceRootId, workspaceRootId } from './sessionScope.svelte'
 
-	// Look up the cached fork comparison for a session through its runtime
-	// (if any). The deriveForkStatus helper handles the "no runtime yet"
-	// and "comparison not loaded" cases by returning undefined; we render
-	// a neutral fork icon in that interim, then upgrade to the proper
-	// status icon once the comparison lands.
-	function forkStatusFor(session: Session) {
-		return deriveForkStatus(session, $userWorkspaces, getRuntime(session.id)?.forkComparison.val)
-	}
-
 	function isForkFor(session: Session): boolean {
 		return isForkSession(session, $userWorkspaces)
 	}
@@ -124,8 +114,8 @@
 	}
 
 	// Flat list passing the archive + scope filters. Grouping for display happens
-	// in `sessionGroups`; this flat view drives the runtime / fork-comparison
-	// effects, the unread total, and keyboard navigation.
+	// in `sessionGroups`; this flat view drives the runtime effect, the unread
+	// total, and keyboard navigation.
 	const visibleSessions = $derived(
 		sessionState.sessions.filter((s) => {
 			if (s.transient) return false
@@ -211,23 +201,6 @@
 		}
 	})
 
-	// Pre-fetch the fork comparison for every visible fork session so the
-	// sidebar icons reflect the right ahead/diverged state without
-	// requiring the user to click into each session. Cheap enough at
-	// typical session counts; falls back to a plain dot until the
-	// fetch lands.
-	$effect(() => {
-		if (sectionCollapsed.val) return
-		for (const session of visibleSessions) {
-			if (!session.workspace_id) continue
-			const ws = $userWorkspaces.find((w) => w.id === session.workspace_id)
-			if (!ws?.parent_workspace_id) continue
-			const rt = getRuntime(session.id)
-			if (!rt) continue
-			void rt.ensureForkComparison(ws.parent_workspace_id, session.workspace_id)
-		}
-	})
-
 	function isUnavailableFork(session: Session): boolean {
 		return !!session.workspace_id && !$userWorkspaces.find((w) => w.id === session.workspace_id)
 	}
@@ -241,10 +214,6 @@
 		if (!isUnavailableFork(session)) {
 			syncWorkspaceTo(session.workspace_id)
 		}
-		// Refresh the fork diff count — users typically click back into a
-		// session after editing items elsewhere in the SPA, where neither
-		// the visibility-change nor the AI-loading signal would fire.
-		void getRuntime(session.id)?.refreshForkComparison()
 		await goto(`/sessions?session_name=${encodeURIComponent(session.name)}`)
 		if (restoreFocus) {
 			// goto() resets focus to <body> — put it back on the active session button
@@ -436,7 +405,7 @@
 											<SessionStatusDot
 												{status}
 												isFork={isForkFor(session)}
-												forkStatus={forkStatusFor(session)}
+												unavailable={isUnavailableFork(session)}
 											/>
 											<span
 												class={twMerge(
@@ -587,7 +556,7 @@
 									<SessionStatusDot
 										{status}
 										isFork={isForkFor(session)}
-										forkStatus={forkStatusFor(session)}
+										unavailable={isUnavailableFork(session)}
 									/>
 									<!-- svelte-ignore a11y_autofocus -->
 									<input
@@ -619,7 +588,7 @@
 									<SessionStatusDot
 										{status}
 										isFork={isForkFor(session)}
-										forkStatus={forkStatusFor(session)}
+										unavailable={isUnavailableFork(session)}
 									/>
 									<span class="truncate flex-1">{session.summary ?? 'Untitled session'}</span>
 									{#if draft || unread > 0}
diff --git a/frontend/src/lib/components/sessions/SessionStatusDot.svelte b/frontend/src/lib/components/sessions/SessionStatusDot.svelte
index b47816ab19..35028c80cc 100644
--- a/frontend/src/lib/components/sessions/SessionStatusDot.svelte
+++ b/frontend/src/lib/components/sessions/SessionStatusDot.svelte
@@ -3,19 +3,16 @@
 		AlertCircle,
 		AlertTriangle,
 		Building,
-		GitCompareArrows,
 		GitFork,
-		GitPullRequestArrow,
 		GitPullRequestClosed
 	} from 'lucide-svelte'
 	import type { SessionChatStatus } from './sessionRuntime.svelte'
-	import type { ForkStatus } from './sessionState.svelte'
 
 	let {
 		status,
 		isFork,
-		forkStatus
-	}: { status: SessionChatStatus; isFork: boolean; forkStatus?: ForkStatus } = $props()
+		unavailable = false
+	}: { status: SessionChatStatus; isFork: boolean; unavailable?: boolean } = $props()
 
 	const statusTooltip: Record<SessionChatStatus, string> = {
 		idle: 'No chat activity',
@@ -26,13 +23,6 @@
 		error: 'Last message had an error'
 	}
 
-	const forkTooltip: Record<ForkStatus, string> = {
-		in_sync: 'Fork — in sync with parent',
-		ahead: 'Fork — ahead of parent',
-		diverged: 'Fork — diverged from parent',
-		unavailable: 'Fork — no longer available'
-	}
-
 	// Live chat signals take precedence over the persistent kind/fork
 	// indicator: streaming, needs-confirmation, and error are time-critical
 	// and warrant briefly hijacking the icon slot.
@@ -41,7 +31,11 @@
 	)
 
 	const persistentTitle = $derived(
-		isFork ? (forkStatus ? forkTooltip[forkStatus] : 'Fork session') : 'Root workspace session'
+		isFork
+			? unavailable
+				? 'Fork — no longer available'
+				: 'Fork session'
+			: 'Root workspace session'
 	)
 
 	const title = $derived(liveOverride ? statusTooltip[status] : persistentTitle)
@@ -59,11 +53,7 @@
 	{:else if status === 'error'}
 		<AlertTriangle class="w-3 h-3 text-red-500" />
 	{:else if isFork}
-		{#if forkStatus === 'ahead'}
-			<GitPullRequestArrow class="w-3 h-3 text-blue-500" />
-		{:else if forkStatus === 'diverged'}
-			<GitCompareArrows class="w-3 h-3 text-amber-500" />
-		{:else if forkStatus === 'unavailable'}
+		{#if unavailable}
 			<GitPullRequestClosed class="w-3 h-3 text-red-500" />
 		{:else}
 			<GitFork class="w-3 h-3 text-tertiary" />
diff --git a/frontend/src/lib/components/sessions/SessionWrapper.svelte b/frontend/src/lib/components/sessions/SessionWrapper.svelte
index c9fdb6454f..ee8cbed6e0 100644
--- a/frontend/src/lib/components/sessions/SessionWrapper.svelte
+++ b/frontend/src/lib/components/sessions/SessionWrapper.svelte
@@ -30,8 +30,7 @@
 	import RawAppEditorView from './RawAppEditorView.svelte'
 	import PipelineEditorView from './PipelineEditorView.svelte'
 	import SessionWorkspaceBar from './SessionWorkspaceBar.svelte'
-	import SessionForkBar from './SessionForkBar.svelte'
-	import SessionDraftBar from './SessionDraftBar.svelte'
+	import SessionChangesBar from './SessionChangesBar.svelte'
 	import {
 		createSession,
 		deleteSessionsForWorkspace,
@@ -235,7 +234,7 @@
 
 	// True when the session committed to a workspace that's no longer in
 	// the user's list (deleted / archived / access revoked). The chat is
-	// disabled and SessionForkBar shows a move/discard banner.
+	// disabled and SessionChangesBar shows a move/discard banner.
 	const isUnavailable = $derived(
 		!!session?.workspace_id && !$userWorkspaces.find((w) => w.id === session!.workspace_id)
 	)
@@ -274,16 +273,16 @@
 		{#if !hasFirstUserMessage}
 			<SessionWorkspaceBar {session} />
 		{/if}
-		<!-- gap-1 (4px) spaces the fork bar and draft bar when both are visible.
-		     Each bar renders a single in-flow root (or nothing); the draft drawer
-		     is position:fixed, so it doesn't count as a flex item — no stray gap
-		     when only one bar shows. -->
+		<!-- gap-1 (4px) spaces the archived banner and the changes bar when both
+		     are visible. Each renders a single in-flow root (or nothing); the diff
+		     drawer is position:fixed, so it doesn't count as a flex item — no stray
+		     gap when only one shows. -->
 		<div class="flex flex-col gap-1">
 			{#if session.archived && !isUnavailable}
 				<!-- Unarchive is only meaningful when the workspace is still live:
 				     putSession refuses to resurrect a session whose workspace is gone,
 				     and reconcile would re-archive a workspace-archived one anyway. When
-				     the workspace is unavailable the SessionForkBar below shows the
+				     the workspace is unavailable the SessionChangesBar below shows the
 				     move/discard banner instead (its actions are the real recovery path). -->
 				<div
 					class="flex flex-row items-center justify-between gap-2 py-2 px-3 text-xs border rounded-md bg-surface-tertiary"
@@ -302,14 +301,13 @@
 					</Button>
 				</div>
 			{/if}
-			<SessionForkBar
+			<SessionChangesBar
 				{session}
 				onMove={(workspaceId) => moveAndActivate(workspaceId)}
 				onCreateForkAndMove={(fork) => createForkAndMove(fork)}
 				onArchive={() => archiveAndReset()}
 				onDelete={() => (deleteConfirmOpen = true)}
 			/>
-			<SessionDraftBar {session} />
 		</div>
 	{/snippet}
 
diff --git a/frontend/src/lib/components/sessions/WorkspaceDiffDrawer.svelte b/frontend/src/lib/components/sessions/WorkspaceDiffDrawer.svelte
index e6b4e5fd2f..50c6653b0a 100644
--- a/frontend/src/lib/components/sessions/WorkspaceDiffDrawer.svelte
+++ b/frontend/src/lib/components/sessions/WorkspaceDiffDrawer.svelte
@@ -1,45 +1,19 @@
-<script lang="ts" module>
-	export type DiffStatus = 'added' | 'removed' | 'modified' | 'conflict'
-	// One changed item. `status` drives the dot/badge; `ahead`/`behind` are
-	// optional (fork-only) and only render when present.
-	export type DiffRow = {
-		kind: string
-		path: string
-		status: DiffStatus
-		ahead?: number
-		behind?: number
-		/** Human-facing path; defaults to `path`. Lets a draft parked at a
-		 * synthetic storage path (`…/draft_<uuid>`) show its friendly typed path
-		 * while keys, value-loading and edit links stay keyed on `path`. */
-		displayPath?: string
-		/** Summary supplied by the data source. Preferred over the one derived
-		 * from the loaded diff value, and shown before that value loads. */
-		summary?: string
-		/** Explicit unique row identity, overriding the default `kind/path`. For a
-		 * row whose `kind/path` isn't unique on its own (a pipeline-bundle node
-		 * shares `script/<path>` with a standalone script draft at the same path)
-		 * while `path` must stay the real edit/display target. */
-		key?: string
-	}
-</script>
-
 <script lang="ts">
-	import { buildDiffTree, type AppRootMeta, type TreeNode } from './diffTree'
+	import { buildDiffTree, folderKeyFor, type AppRootMeta, type TreeNode } from './diffTree'
 	import { Button, Drawer, DrawerContent } from '$lib/components/common'
 	import Badge from '$lib/components/common/badge/Badge.svelte'
 	import {
 		AlertTriangle,
+		Check,
+		CheckCircle2,
 		ChevronDown,
 		ChevronRight,
+		ExternalLink,
 		Folder,
-		GitMerge,
 		Loader2,
-		Minus,
-		Pencil,
-		Plus,
+		Save,
 		User
 	} from 'lucide-svelte'
-	import { goto } from '$lib/navigation'
 	import RowIcon from '$lib/components/common/table/RowIcon.svelte'
 	import WorkspaceItemRow from '$lib/components/WorkspaceItemRow.svelte'
 	import WorkspaceItemDiffViewer from '$lib/components/WorkspaceItemDiffViewer.svelte'
@@ -47,44 +21,52 @@
 		rawAppDiffToItems,
 		type RawAppish,
 		type RawAppFileItem,
-		type RawAppRunnableItem
+		type RawAppRunnableItem,
+		type RawAppSyntheticItem
 	} from '$lib/components/raw_apps/rawAppDiffUtils'
 	import SearchItems from '$lib/components/SearchItems.svelte'
 	import ToggleButtonGroup from '$lib/components/common/toggleButton-v2/ToggleButtonGroup.svelte'
 	import ToggleButton from '$lib/components/common/toggleButton-v2/ToggleButton.svelte'
 	import { DiffIcon, SquareSplitHorizontal } from 'lucide-svelte'
-	import { untrack, type Snippet } from 'svelte'
+	import { tick, untrack } from 'svelte'
+	import { fade, fly, slide } from 'svelte/transition'
+	import { cubicOut } from 'svelte/easing'
+	import type { Snippet } from 'svelte'
+	import ConfirmationModal from '$lib/components/common/confirmationModal/ConfirmationModal.svelte'
+	import { createAsyncConfirmationModal } from '$lib/components/common/confirmationModal/asyncConfirmationModal.svelte'
 	import ExternalEditLink from '../ExternalEditLink.svelte'
+	import Popover from '$lib/components/meltComponents/Popover.svelte'
+	import { actionFor, badgeOf, type DeployItem } from './sessionDeployModel'
+	import { maskKey } from './modifiedItemsMask'
+	import type { SessionDeployModel, DiffValues } from './sessionDeployModel.svelte'
 
-	// Read-only, multi-item before/after diff viewer with a file tree. The data
-	// source (fork comparison vs deployed-vs-draft) is supplied by the parent
-	// wrapper via `diffs` + `loadValues`; everything here is generic rendering.
+	// The session "Edits" surface. Reads a unified item model (the session's
+	// drafts, scoped to what this session edited) and renders a folder tree
+	// (left) plus a scroll-through diff column with per-block sticky headers
+	// (right). Deploy is granular per-item; batch/PR flows and fork→parent
+	// promotion are handed to the compare page via the footer link.
 	let {
-		diffs,
-		loadValues,
-		loading = false,
-		error = undefined,
-		notice = undefined,
-		emptyMessage = 'No changes.',
+		model,
 		title,
-		reviewHref,
-		reviewLabel = 'Review',
 		editUrlFor = undefined,
-		titleExtra
+		titleExtra,
+		compareSessionHref,
+		workspaceLabel,
+		successHoldMs = 1200
 	}: {
-		diffs: DiffRow[]
-		loadValues: (d: DiffRow) => Promise<{ before: unknown; after: unknown }>
-		loading?: boolean
-		error?: string | undefined
-		/** Replaces the diff list with an informational message (e.g. fork
-		 * created before change tracking). */
-		notice?: string | undefined
-		emptyMessage?: string
+		model: SessionDeployModel
 		title: string
-		reviewHref: string
-		reviewLabel?: string
-		editUrlFor?: (d: DiffRow) => string | undefined
+		/** Editor URL for a row (opens in the workspace the item lives in). */
+		editUrlFor?: (item: DeployItem) => string | undefined
 		titleExtra?: Snippet
+		/** Display name of the workspace deploys land in — the deployed tick's
+		 *  hover reads "Deployed in <label>". */
+		workspaceLabel?: string
+		/** How long the post-deploy check beat holds before the row flips. */
+		successHoldMs?: number
+		/** Compare page for this session's edits (footer) — preselected via
+		 *  `from_session`. Where "deploy all / request review" happens. */
+		compareSessionHref?: string
 	} = $props()
 
 	let drawer: Drawer | undefined = $state(undefined)
@@ -92,115 +74,123 @@
 	let diffStyle = $state<'sbs' | 'inline'>('sbs')
 	const inlineDiff = $derived(diffStyle === 'inline')
 
+	// The sidebar's inner right padding must ADAPT to the reserved scrollbar
+	// gutter (platform-dependent: 0 for overlay scrollbars, ~15px classic) so
+	// gutter + padding always totals the same 6px inset the left side uses.
+	// Pure CSS can't express "6px minus the gutter", hence the measurement.
+	function padRightForGutter(node: HTMLElement) {
+		const apply = () => {
+			const gutter = node.offsetWidth - node.clientWidth
+			node.style.paddingRight = `${Math.max(0, 6 - gutter)}px`
+		}
+		apply()
+		const ro = new ResizeObserver(apply)
+		ro.observe(node)
+		return { destroy: () => ro.disconnect() }
+	}
+
+	// Discard is destructive (a draft-only item disappears entirely) — confirm.
+	const discardConfirm = createAsyncConfirmationModal()
+	async function confirmDiscard(item: DeployItem) {
+		const confirmed = await discardConfirm.ask({
+			title: 'Discard draft?',
+			confirmationText: 'Discard draft',
+			children: item.draftOnly
+				? `${item.displayPath} was never deployed — discarding its draft deletes it entirely.`
+				: `The draft changes on ${item.displayPath} will be permanently discarded; the deployed version is kept.`
+		})
+		if (confirmed) void model.discardRow(item)
+	}
+
+	// Post-deploy staging (same pattern as SaveButton): on success, the row keeps
+	// rendering its pre-deploy snapshot while a green check flies in over the
+	// Deploy button; after the hold it releases, letting the collapse + badge
+	// transitions play on the real (deployed) state.
+	let staged = $state<Record<string, DeployItem>>({})
+	let stagedTimers: ReturnType<typeof setTimeout>[] = []
+	$effect(() => {
+		return () => stagedTimers.forEach(clearTimeout)
+	})
+	async function deployStaged(item: DeployItem) {
+		if (!(await model.deployRow(item))) return
+		// The deploy can re-key the row before this renders: a draft-only (or
+		// renamed) item deploys to its displayPath and the mask entry moves with
+		// it. Stage the snapshot under both keys so the re-keyed card still
+		// renders the held check beat instead of skipping straight to done.
+		const keys = [item.key, maskKey(item.draftKind, item.displayPath)]
+		const next = { ...staged }
+		for (const k of keys) next[k] = item
+		staged = next
+		stagedTimers.push(
+			setTimeout(() => {
+				const after = { ...staged }
+				for (const k of keys) delete after[k]
+				staged = after
+			}, successHoldMs)
+		)
+	}
+
 	export function open() {
-		// Reset per-item caches so an edit-then-reopen doesn't show stale
-		// expanded content. The wrapper re-fetches `diffs`, which re-triggers
-		// the eager-load effect below.
 		loadedDiffs = {}
-		summaries = {}
 		mountedRows = {}
+		folderOpen = {}
+		staged = {}
+		model.load()
 		drawer?.openDrawer()
 		setTimeout(() => searchInputEl?.focus(), 50)
 	}
 
-	// A row in the list is either a real backend diff or a synthesized raw-app
-	// item: a file/metadata leaf (`RawAppFileItem`) or a runnable rendered as a
-	// script/flow (`RawAppRunnableItem`). All are diff-shaped, so the tree /
-	// search / count / nav operate over `DisplayDiff` uniformly.
-	type DisplayDiff = DiffRow | RawAppFileItem | RawAppRunnableItem
+	// ── Badge presentation ─────────────────────────────────────────────────────
+	// One footprint for both status pills (draft / deployed) so they line up at a
+	// compact, uniform size.
+	const STATUS_BADGE_CLASS = 'px-1.5 py-0.5 gap-0.5 text-2xs'
 
-	function itemKey(d: DisplayDiff): string {
-		// Synthetic raw-app items (files/runnables) carry their composite
-		// `<appPath>/…` path and can share kind+path with a real workspace item —
-		// e.g. a runnable rendered as `script` at `<appPath>/runnables/foo` vs a real
-		// script literally at that path. Prefix synthetic items so the {#each} key,
-		// load cache, row id and nav identity never collide with a real DiffRow.
-		if ('key' in d && d.key) return d.key
-		return ('appPath' in d ? 'rawapp:' : '') + `${d.kind}/${d.path}`
+	// ── Rendered list: all session items, then text-searched (no filter tabs) ──
+	const segmentItems = $derived(model.items)
+
+	// A tree row is either a real deploy item or — once its raw app's values
+	// have loaded — a synthetic per-file/per-runnable item: the app's leaf row
+	// is replaced by its files, and the folder at the app's path becomes the app
+	// root (tagged via appRootMeta). Synthetics carry `appPath`.
+	type DisplayEntry = DeployItem | RawAppSyntheticItem
+	function isSynthetic(e: DisplayEntry): e is RawAppSyntheticItem {
+		return 'appPath' in e
+	}
+	// Synthetic keys are prefixed so they can't collide with a real item that
+	// happens to live at `<appPath>/runnables/foo`.
+	function displayKey(e: DisplayEntry): string {
+		return isSynthetic(e) ? `rawapp:${e.kind}/${e.path}` : e.key
+	}
+	function displayPathOf(e: DisplayEntry): string {
+		return e.displayPath ?? e.path
 	}
 
-	// Friendly path for display only; `path` stays the storage key everywhere
-	// keys/loads happen, so a never-deployed draft still loads from `…/draft_<uuid>`.
-	function displayPathOf(d: DisplayDiff): string {
-		return ('displayPath' in d ? d.displayPath : undefined) ?? d.path
-	}
+	// Raw-app storage path → its deploy item (owning-app lookup for synthetics).
+	const appByPath = $derived(
+		new Map(segmentItems.filter((d) => d.deployKind === 'raw_app').map((d) => [d.path, d]))
+	)
 
-	const KIND_LABELS: Record<string, string> = {
-		script: 'Script',
-		flow: 'Flow',
-		app: 'App',
-		raw_app: 'Raw app',
-		raw_app_file: 'File',
-		resource: 'Resource',
-		variable: 'Variable',
-		resource_type: 'Resource type',
-		folder: 'Folder',
-		schedule: 'Schedule',
-		http_trigger: 'HTTP route',
-		websocket_trigger: 'Websocket trigger',
-		kafka_trigger: 'Kafka trigger',
-		nats_trigger: 'NATS trigger',
-		postgres_trigger: 'Postgres trigger',
-		mqtt_trigger: 'MQTT trigger',
-		sqs_trigger: 'SQS trigger',
-		gcp_trigger: 'GCP trigger',
-		azure_trigger: 'Azure trigger',
-		email_trigger: 'Email trigger'
-	}
-
-	type LoadedDiff = {
-		state: 'loading' | 'ready' | 'error'
-		error?: string
-		before?: unknown
-		after?: unknown
-	}
-	let loadedDiffs: Record<string, LoadedDiff> = $state({})
-	let summaries: Record<string, string | undefined> = $state({})
-
-	// Lazy Monaco mount: exploding a raw app into N per-file rows would otherwise
-	// mount N DiffEditors at once. Each row's editor mounts only once its block
-	// scrolls within `MOUNT_MARGIN` of the viewport (rooted on the scroll
-	// container); `mountedRows` latches true so it never unmounts on scroll-away.
-	let mainScrollEl: HTMLElement | undefined = $state()
-	let mountedRows: Record<string, boolean> = $state({})
-	// Small look-ahead only: a large margin would catch the whole (collapsed-
-	// height) list at once, and each mount growing its block would cascade the
-	// rest into view. A modest margin mounts what's near the fold; as editors
-	// grow they push the pending blocks away, so the rest stay deferred.
-	const MOUNT_MARGIN = '200px 0px'
-	function lazyMount(node: HTMLElement, key: string) {
-		const io = new IntersectionObserver(
-			(entries) => {
-				if (entries.some((e) => e.isIntersecting)) {
-					mountedRows[key] = true
-					io.disconnect()
-				}
-			},
-			{ root: mainScrollEl ?? null, rootMargin: MOUNT_MARGIN }
-		)
-		io.observe(node)
-		return { destroy: () => io.disconnect() }
-	}
-
-	// The rendered list: each raw_app whose value has loaded is expanded into
-	// its per-file items (so files are independent rows that flow through the
-	// tree / search / count). An unloaded raw_app stays a single placeholder row
-	// until its value arrives, then expands in place.
-	const displayDiffs = $derived.by(() => {
-		const out: DisplayDiff[] = []
-		for (const d of diffs) {
-			if (d.kind === 'raw_app') {
-				const loaded = loadedDiffs[itemKey(d)]
+	const displayEntries = $derived.by(() => {
+		const out: DisplayEntry[] = []
+		for (const d of segmentItems) {
+			if (d.deployKind === 'raw_app') {
+				const loaded = loadedDiffs[d.key]
 				if (loaded?.state === 'ready') {
-					out.push(
-						...rawAppDiffToItems(
-							d.path,
-							loaded.before as RawAppish | undefined,
-							loaded.after as RawAppish | undefined,
-							displayPathOf(d)
-						)
-					)
-					continue
+					// A deployed (done) app has no changed files to diff — unwrap it
+					// into its full current contents instead (one-sided → every file
+					// listed; rows are plain so the 'added' status never shows).
+					const subs = d.done
+						? rawAppDiffToItems(
+								d.path,
+								undefined,
+								loaded.after as RawAppish | undefined,
+								d.displayPath
+							)
+						: rawAppItems(d, loaded)
+					if (subs.length > 0) {
+						out.push(...subs)
+						continue
+					}
 				}
 			}
 			out.push(d)
@@ -208,110 +198,174 @@
 		return out
 	})
 
-	async function loadDiffFor(d: DiffRow) {
-		const key = itemKey(d)
-		if (loadedDiffs[key]) return
-		loadedDiffs[key] = { state: 'loading' }
-		try {
-			const { before, after } = await loadValues(d)
-			loadedDiffs[key] = { state: 'ready', before, after }
-			const summary =
-				(after && typeof after === 'object' && (after as any).summary) ||
-				(before && typeof before === 'object' && (before as any).summary) ||
-				undefined
-			if (typeof summary === 'string' && summary.trim().length > 0) {
-				summaries[key] = summary
-			}
-		} catch (e) {
-			console.error('WorkspaceDiffDrawer: loadValues failed', d, e)
-			loadedDiffs[key] = { state: 'error', error: String(e) }
-		}
+	function searchableText(e: DisplayEntry): string {
+		if (isSynthetic(e)) return [displayPathOf(e), e.kind].join(' ')
+		return [e.displayPath, e.deployKind, e.summary ?? ''].join(' ')
 	}
+	let searchedEntries: (DisplayEntry & { marked?: string })[] | undefined = $state(undefined)
+	const searchActive = $derived(searchQuery.trim().length > 0)
+	const filteredEntries = $derived.by(() => {
+		if (!searchActive) return displayEntries
+		return (searchedEntries ?? []) as DisplayEntry[]
+	})
 
-	// Eagerly load each row (diffs render expanded). Tracks `diffs` only; the
-	// cache reads/writes are untracked so this doesn't loop on itself.
+	// File names inside unexpanded apps don't exist client-side until the app's
+	// values load — a live search loads every raw app so matches are complete.
 	$effect(() => {
-		const ds = diffs
+		if (!searchActive) return
+		const items = segmentItems
 		untrack(() => {
-			for (const d of ds) void loadDiffFor(d)
+			for (const d of items) if (d.deployKind === 'raw_app') void loadDiffFor(d)
 		})
 	})
 
-	function onDetailsToggle(d: DisplayDiff, e: Event) {
-		// Synthetic raw-app items (files + runnables) carry their content
-		// already — nothing to fetch.
-		if ('appPath' in d) return
-		const target = e.currentTarget as HTMLDetailsElement | null
-		if (target?.open) void loadDiffFor(d)
-	}
-
-	function statusBadgeColor(s: DiffStatus): 'green' | 'red' | 'orange' | 'blue' {
-		if (s === 'added') return 'green'
-		if (s === 'removed') return 'red'
-		if (s === 'conflict') return 'orange'
-		return 'blue'
-	}
-
-	const statusIcons = { added: Plus, removed: Minus, modified: Pencil, conflict: AlertTriangle }
-
-	// ── File tree ───────────────────────────────────────────────────────────
-	// Friendly app path → app metadata, for tagging the matching tree folder as a
-	// raw-app root. Keyed on `displayPathOf` so it lines up with the friendly
-	// virtual paths the synthetic file items carry.
+	// ── Tree ─────────────────────────────────────────────────────────────────
 	const appRootMeta = $derived.by(() => {
 		const m = new Map<string, AppRootMeta>()
-		for (const d of diffs) {
-			if (d.kind !== 'raw_app') continue
-			m.set(displayPathOf(d), {
-				summaryKey: itemKey(d),
-				summary: 'summary' in d ? d.summary : undefined
+		for (const it of model.items) {
+			if (it.deployKind !== 'raw_app') continue
+			m.set(it.displayPath, {
+				summaryKey: it.key,
+				summary: it.summary,
+				hasDraft: it.hasDraft,
+				draftOnly: it.draftOnly,
+				draftUsers: it.draftUsers,
+				draftItemKind: it.draftKind
 			})
 		}
 		return m
 	})
 
-	function searchableText(d: DisplayDiff): string {
-		const parts = [displayPathOf(d), KIND_LABELS[d.kind] ?? d.kind]
-		const s = summaries[itemKey(d)] ?? ('summary' in d ? d.summary : undefined)
-		if (s) parts.push(s)
-		return parts.join(' ')
-	}
-	let searchedDiffs: (DisplayDiff & { marked?: string })[] | undefined = $state(undefined)
-
-	const filteredDiffs = $derived.by(() => {
-		const q = searchQuery.trim()
-		if (!q) return displayDiffs
-		return (searchedDiffs ?? []) as DisplayDiff[]
-	})
-
 	const treeModel = $derived(
 		buildDiffTree(
-			filteredDiffs.map((d) => ({ key: itemKey(d), structurePath: displayPathOf(d), data: d })),
+			filteredEntries.map((e) => ({
+				key: displayKey(e),
+				structurePath: displayPathOf(e),
+				data: e
+			})),
 			appRootMeta
 		)
 	)
 
-	function rowId(d: DisplayDiff): string {
-		return `ws-diff-${itemKey(d)}`
+	// Content blocks follow the sidebar's order: walk the tree (all folders open,
+	// so collapsing the sidebar never hides a block) and emit each owning deploy
+	// item once, so the diff column top-to-bottom matches the tree.
+	const orderedItems = $derived.by(() => {
+		const seen = new Set<string>()
+		const out: DeployItem[] = []
+		for (const entry of treeModel.order(() => true)) {
+			if (entry.type !== 'file') continue
+			const item = isSynthetic(entry.data) ? appByPath.get(entry.data.appPath) : entry.data
+			if (item && !seen.has(item.key)) {
+				seen.add(item.key)
+				out.push(item)
+			}
+		}
+		return out
+	})
+
+	function rowId(d: DeployItem): string {
+		return `ws-diff-${d.key}`
 	}
 
-	function scrollToDiff(d: DisplayDiff) {
-		const el = document.getElementById(rowId(d)) as HTMLDetailsElement | null
-		if (!el) return
-		el.open = true
-		el.scrollIntoView({ behavior: 'smooth', block: 'start' })
+	// Keep the column's pt-3 breathing room when a click scrolls a card to the top.
+	const SCROLL_TOP_INSET = 12
+
+	// Smooth-scroll the row's card near the top (leaving the column's top inset).
+	// Native scrollIntoView lands short here because lazily-mounted diffs grow the
+	// list mid-scroll; instead we ease toward the target and re-measure it every
+	// frame, so the animation stays smooth while still landing flush once the
+	// layout settles. Bails on user scroll.
+	function scrollToDiff(d: DeployItem) {
+		const el = document.getElementById(rowId(d))
+		const container = mainScrollEl
+		if (!el || !container) return
+		let frames = 0
+		let settled = 0
+		let cancelled = false
+		const cancel = () => (cancelled = true)
+		container.addEventListener('wheel', cancel, { once: true, passive: true })
+		container.addEventListener('touchstart', cancel, { once: true, passive: true })
+		const teardown = () => {
+			container.removeEventListener('wheel', cancel)
+			container.removeEventListener('touchstart', cancel)
+		}
+		const step = () => {
+			if (cancelled) return teardown()
+			const off =
+				el.getBoundingClientRect().top - container.getBoundingClientRect().top - SCROLL_TOP_INSET
+			if (Math.abs(off) < 1) {
+				if (++settled >= 2) return teardown()
+			} else {
+				settled = 0
+				// Ease-out for the long haul; snap the final approach so it settles fast.
+				container.scrollTop += Math.abs(off) < 20 ? off : Math.round(off * 0.22)
+			}
+			if (frames++ < 120) requestAnimationFrame(step)
+			else teardown()
+		}
+		step()
 	}
 
-	// ── Keyboard nav (matches WorkspaceItemDrillPicker) ─────────────────────
+	// Transient ring pulse on the card a tree click just revealed, so the eye
+	// lands on the right block after the scroll.
+	let flashKey = $state<string | undefined>(undefined)
+	let flashTimer: ReturnType<typeof setTimeout> | undefined
+	function flashRow(key: string) {
+		flashKey = key
+		clearTimeout(flashTimer)
+		flashTimer = setTimeout(() => (flashKey = undefined), 800)
+	}
+
+	function revealDiff(d: DeployItem, key?: string) {
+		if (key) highlightedKey = key
+		flashRow(d.key)
+		scrollToDiff(d)
+	}
+
+	// A file's sub-diff anchor lives inside the app's main-panel block, which
+	// mounts lazily on scroll — force-mount it before scrolling to the anchor.
+	// A deployed app's block has no per-file sections ("no pending changes"), so
+	// fall back to the app block itself.
+	async function revealSynthetic(s: RawAppSyntheticItem, key?: string) {
+		if (key) highlightedKey = key
+		const app = appByPath.get(s.appPath)
+		if (!app) return
+		flashRow(app.key)
+		if (!mountedRows[app.key]) {
+			mountedRows[app.key] = true
+			await tick()
+		}
+		const target =
+			document.getElementById(`ws-diff-${displayKey(s)}`) ?? document.getElementById(rowId(app))
+		target?.scrollIntoView({ behavior: 'smooth', block: 'start' })
+	}
+
+	// ── Keyboard nav ─────────────────────────────────────────────────────────
 	let folderOpen: Record<string, boolean> = $state({})
+	// Folders default open, raw-app roots default collapsed; a live search
+	// forces everything open so matches inside apps are visible.
+	const appFolderKeys = $derived(new Set([...appRootMeta.keys()].map((p) => folderKeyFor(p))))
 	function isFolderOpen(key: string): boolean {
-		return folderOpen[key] ?? true
+		if (searchActive) return true
+		return folderOpen[key] ?? !appFolderKeys.has(key)
 	}
 
+	// Expand a still-unloaded raw app from its leaf row: mark the future app
+	// folder open and fetch the values; once ready, the leaf is replaced by the
+	// app root + file children. Re-expanding after a failure retries the load.
+	function expandApp(d: DeployItem) {
+		const fkey = folderKeyFor(d.displayPath)
+		folderOpen[fkey] = true
+		if (loadedDiffs[d.key]?.state === 'error') delete loadedDiffs[d.key]
+		const wasHighlighted = highlightedKey === d.key
+		void loadDiffFor(d).then(() => {
+			if (wasHighlighted) highlightedKey = fkey
+		})
+	}
 	const navEntries = $derived(treeModel.order((k) => isFolderOpen(k)))
 	const navKeys = $derived(navEntries.map((e) => e.key))
 	const entryByKey = $derived(new Map(navEntries.map((e) => [e.key, e])))
-
 	let highlightedKey: string | undefined = $state(undefined)
 	let mouseActive = $state(false)
 	let searchInputEl: HTMLInputElement | undefined = $state()
@@ -319,49 +373,46 @@
 
 	$effect(() => {
 		if (navKeys.length === 0) return
-		if (!highlightedKey || !navKeys.includes(highlightedKey)) {
-			highlightedKey = navKeys[0]
-		}
+		if (!highlightedKey || !navKeys.includes(highlightedKey)) highlightedKey = navKeys[0]
 	})
-
 	function scrollHighlightIntoView() {
 		if (!sidebarRoot || !highlightedKey) return
-		const el = sidebarRoot.querySelector<HTMLElement>(
-			`[data-nav-key="${CSS.escape(highlightedKey)}"]`
-		)
-		el?.scrollIntoView({ block: 'nearest', behavior: 'smooth' })
+		sidebarRoot
+			.querySelector<HTMLElement>(`[data-nav-key="${CSS.escape(highlightedKey)}"]`)
+			?.scrollIntoView({ block: 'nearest', behavior: 'smooth' })
 	}
-
 	function moveHighlight(delta: 1 | -1) {
 		if (navKeys.length === 0) return
 		const cur = navKeys.indexOf(highlightedKey ?? '')
-		const next = cur < 0 ? 0 : (cur + delta + navKeys.length) % navKeys.length
-		highlightedKey = navKeys[next]
+		highlightedKey = navKeys[cur < 0 ? 0 : (cur + delta + navKeys.length) % navKeys.length]
 		mouseActive = false
 		requestAnimationFrame(scrollHighlightIntoView)
 	}
-
 	function setHoverHighlight(key: string) {
 		if (mouseActive) highlightedKey = key
 	}
-
 	function activateHighlighted() {
 		if (!highlightedKey) return
 		const entry = entryByKey.get(highlightedKey)
 		if (!entry) return
 		if (entry.type === 'file') {
-			scrollToDiff(entry.data)
-		} else {
-			folderOpen[entry.key] = !isFolderOpen(entry.key)
+			if (isSynthetic(entry.data)) void revealSynthetic(entry.data)
+			else void revealDiff(entry.data)
+			return
 		}
+		// App roots activate like rows (reveal the diff); folding stays on the
+		// chevron / ArrowRight. Plain folders keep Enter-to-toggle.
+		const appItem = entry.node.app
+			? segmentItems.find((d) => d.key === entry.node.app?.summaryKey)
+			: undefined
+		if (appItem) revealDiff(appItem)
+		else folderOpen[entry.key] = !isFolderOpen(entry.key)
 	}
-
 	function selectKey(key: string) {
 		highlightedKey = key
 		mouseActive = false
 		requestAnimationFrame(scrollHighlightIntoView)
 	}
-
 	function handleSearchKeydown(e: KeyboardEvent) {
 		if (e.key === 'ArrowDown') {
 			e.preventDefault()
@@ -374,7 +425,15 @@
 			activateHighlighted()
 		} else if (e.key === 'ArrowRight') {
 			const entry = highlightedKey ? entryByKey.get(highlightedKey) : undefined
-			if (!entry || entry.type !== 'folder') return
+			if (!entry) return
+			if (entry.type === 'file') {
+				// An unloaded raw app is still a leaf — ArrowRight expands it.
+				if (!isSynthetic(entry.data) && entry.data.deployKind === 'raw_app') {
+					e.preventDefault()
+					expandApp(entry.data)
+				}
+				return
+			}
 			if (!isFolderOpen(entry.key)) {
 				e.preventDefault()
 				folderOpen[entry.key] = true
@@ -400,16 +459,153 @@
 			}
 		}
 	}
+
+	// ── Diff values (lazy Monaco mount, one resolver via the model) ──────────
+	type LoadedDiff = {
+		state: 'loading' | 'ready' | 'error'
+		error?: string
+		before?: unknown
+		after?: unknown
+	}
+	let loadedDiffs: Record<string, LoadedDiff> = $state({})
+	let mainScrollEl: HTMLElement | undefined = $state()
+	// Visible height of the scroll area, used to size the trailing spacer so the
+	// last item can always be scrolled until its header reaches the top.
+	let mainHeight = $state(0)
+	// The trailing spacer only needs to cover the gap the last item can't fill on
+	// its own: viewport − lastItemHeight (0 when the item already fills the view).
+	// Reserving the full viewport would let you scroll a whole item-height into
+	// blank space past the end. A ResizeObserver keeps it right as the row grows.
+	let lastRowHeight = $state(0)
+	$effect(() => {
+		const last = orderedItems.at(-1)
+		const el = last && mainScrollEl ? document.getElementById(rowId(last)) : undefined
+		if (!el) {
+			lastRowHeight = 0
+			return
+		}
+		lastRowHeight = el.offsetHeight
+		const ro = new ResizeObserver(() => (lastRowHeight = el.offsetHeight))
+		ro.observe(el)
+		return () => ro.disconnect()
+	})
+	const trailingSpace = $derived(Math.max(0, mainHeight - lastRowHeight))
+	let mountedRows: Record<string, boolean> = $state({})
+	const MOUNT_MARGIN = '200px 0px'
+
+	async function loadDiffFor(item: DeployItem) {
+		if (loadedDiffs[item.key]) return
+		loadedDiffs[item.key] = { state: 'loading' }
+		try {
+			const { before, after }: DiffValues = await model.loadDiffValues(item)
+			loadedDiffs[item.key] = { state: 'ready', before, after }
+		} catch (e) {
+			console.error('WorkspaceDiffDrawer: loadDiffValues failed', item, e)
+			loadedDiffs[item.key] = { state: 'error', error: String(e) }
+		}
+	}
+
+	function lazyMount(node: HTMLElement, item: DeployItem) {
+		const io = new IntersectionObserver(
+			(entries) => {
+				if (entries.some((e) => e.isIntersecting)) {
+					mountedRows[item.key] = true
+					void loadDiffFor(item)
+					io.disconnect()
+				}
+			},
+			{ root: mainScrollEl ?? null, rootMargin: MOUNT_MARGIN }
+		)
+		io.observe(node)
+		return { destroy: () => io.disconnect() }
+	}
+
+	// Raw-app blocks explode into their per-file / per-runnable sub-diffs; other
+	// kinds render one before/after viewer.
+	function rawAppItems(
+		item: DeployItem,
+		loaded: LoadedDiff
+	): (RawAppFileItem | RawAppRunnableItem)[] {
+		return rawAppDiffToItems(
+			item.path,
+			loaded.before as RawAppish | undefined,
+			loaded.after as RawAppish | undefined,
+			item.displayPath
+		)
+	}
 </script>
 
 <SearchItems
 	filter={searchQuery}
-	items={displayDiffs}
-	bind:filteredItems={searchedDiffs}
-	f={(d: DisplayDiff) => searchableText(d)}
+	items={displayEntries}
+	bind:filteredItems={searchedEntries}
+	f={(e: DisplayEntry) => searchableText(e)}
 />
 
-{#snippet renderTreeNode(node: TreeNode<DisplayDiff>, depth: number)}
+<!-- The single row badge. Everything here was edited by the AI this session,
+     so the draft badge is a plain pill — no author avatars. -->
+{#snippet rowBadge(item: DeployItem)}
+	{#if badgeOf(item) === 'draft'}
+		{#if model.staleOf(item.key)}
+			<!-- Same warning as the compare page: the deployed head moved after this
+			     draft began, so deploying it reverts the newer deploy. Warn, don't
+			     block — reviewing the diff is exactly what this surface is for. -->
+			<Popover openOnHover debounceDelay={50}>
+				{#snippet trigger()}
+					<AlertTriangle size={14} class="text-orange-500" />
+				{/snippet}
+				{#snippet content()}
+					<div class="text-xs p-3 max-w-xs text-primary">
+						Started from an older deployed version. A newer version was deployed after this draft
+						began. Review the latest deploy before deploying.
+					</div>
+				{/snippet}
+			</Popover>
+		{/if}
+		<Badge
+			color="indigo"
+			small
+			class={STATUS_BADGE_CLASS}
+			title={item.draftOnly ? 'Never deployed and is only a draft' : 'Is deployed and has a draft'}
+		>
+			{item.draftOnly ? 'Draft only' : 'Draft'}
+		</Badge>
+	{:else}
+		<!-- Deployed is the quiet terminal state — an icon-only green badge; the
+		     hover carries the words. Fades in when a row transitions on deploy. -->
+		<span in:fade={{ duration: 200 }} class="inline-flex shrink-0">
+			<Badge
+				color="green"
+				small
+				class="px-1 py-0.5"
+				title={`Deployed in ${workspaceLabel ?? 'this workspace'}`}
+			>
+				<Check class="w-3 h-3" aria-label="Deployed" />
+			</Badge>
+		</span>
+	{/if}
+{/snippet}
+
+<!-- Failure only — while deploying the button itself carries a spinner, and a
+     success flies the green check over the button (see deployStaged). -->
+{#snippet deployFailed(item: DeployItem)}
+	{@const s = model.statusOf(item.key)}
+	{#if s?.status === 'failed'}
+		<span class="inline-flex items-center gap-1" title={s.error}>
+			<Badge color="red" small>Failed</Badge>
+			<Button
+				variant="subtle"
+				unifiedSize="xs"
+				disabled={model.deploying}
+				onclick={() => deployStaged(item)}
+			>
+				Retry
+			</Button>
+		</span>
+	{/if}
+{/snippet}
+
+{#snippet renderTreeNode(node: TreeNode<DisplayEntry>, depth: number)}
 	{#if node.type === 'folder'}
 		{@const isUserScope = node.isScope && node.name.startsWith('u/')}
 		{@const fkey = node.key}
@@ -417,36 +613,62 @@
 		{@const isHl = fkey === highlightedKey}
 		<details
 			{open}
-			ontoggle={(e) => (folderOpen[fkey] = (e.currentTarget as HTMLDetailsElement).open)}
+			ontoggle={(e) => {
+				// Record real user toggles only; skip the echo fired when the `open`
+				// attribute is driven by state (search force-open, expandApp).
+				const domOpen = (e.currentTarget as HTMLDetailsElement).open
+				if (domOpen !== isFolderOpen(fkey)) folderOpen[fkey] = domOpen
+			}}
 			class="select-none"
 		>
 			{#if node.app}
-				{@const appSummary = summaries[node.app.summaryKey] ?? node.app.summary}
-				<!-- Raw-app root: expandable folder, but its header reads as a normal
-				     item row (icon + label). Single line showing the summary, falling
-				     back to the short name (the tree already places it under its scope;
-				     full path on hover). The expand chevron sits at the end of the row. -->
+				{@const appItem = segmentItems.find((it) => it.key === node.app?.summaryKey)}
+				<!-- App root: the row click reveals the app's diff like any item row;
+				     folding is chevron-only (preventDefault blocks the native toggle). -->
 				<summary
 					role="option"
 					aria-selected={isHl}
 					data-nav-key={fkey}
 					onmouseenter={() => setHoverHighlight(fkey)}
+					onclick={(e) => {
+						e.preventDefault()
+						if (appItem) revealDiff(appItem, fkey)
+					}}
 					title={node.fullPath}
-					class="flex items-center gap-1.5 px-3 py-1.5 cursor-pointer hover:bg-surface-hover list-none [&::-webkit-details-marker]:hidden tree-summary {isHl
+					class="flex items-center gap-2 pl-3 pr-1 py-2 rounded-md cursor-pointer hover:bg-surface-hover list-none [&::-webkit-details-marker]:hidden tree-summary {isHl
 						? 'bg-surface-hover'
 						: ''}"
 					style="padding-left: {depth * 12 + 8}px"
 				>
 					<RowIcon kind="raw_app" size={12} />
 					<span
-						class="flex-1 min-w-0 truncate text-xs font-normal text-primary {appSummary
+						class="flex-1 min-w-0 truncate text-xs font-normal text-primary {node.app.summary
 							? ''
 							: 'font-mono'}"
 					>
-						{appSummary ?? node.name}
+						{node.app.summary ?? node.name}
 					</span>
-					<ChevronDown class="w-3 h-3 shrink-0 text-tertiary tree-chevron-open" />
-					<ChevronRight class="w-3 h-3 shrink-0 text-tertiary tree-chevron-closed" />
+					{#if appItem}
+						{@render rowBadge(staged[appItem.key] ?? appItem)}
+					{/if}
+					<!-- Raw button (not the design-system Button) on purpose: it nests inside
+					     the <summary> whose native toggle is preventDefault'd, and needs the
+					     tree rows' compact w-5 footprint — Button's smallest size doesn't fit
+					     and its styling fights the row hover. -->
+					<button
+						type="button"
+						aria-expanded={open}
+						title={open ? 'Hide files' : 'Show files'}
+						class="w-5 h-5 flex items-center justify-center shrink-0 rounded hover:bg-surface-secondary"
+						onclick={(e) => {
+							e.preventDefault()
+							e.stopPropagation()
+							folderOpen[fkey] = !open
+						}}
+					>
+						<ChevronDown class="w-3 h-3 shrink-0 text-tertiary tree-chevron-open" />
+						<ChevronRight class="w-3 h-3 shrink-0 text-tertiary tree-chevron-closed" />
+					</button>
 				</summary>
 			{:else}
 				<summary
@@ -454,7 +676,7 @@
 					aria-selected={isHl}
 					data-nav-key={fkey}
 					onmouseenter={() => setHoverHighlight(fkey)}
-					class="flex items-center gap-1.5 px-3 py-1.5 cursor-pointer text-xs font-normal font-mono text-secondary hover:bg-surface-hover list-none [&::-webkit-details-marker]:hidden tree-summary {isHl
+					class="flex items-center gap-2 pl-3 pr-1 py-2 rounded-md cursor-pointer text-xs font-normal font-mono text-secondary hover:bg-surface-hover list-none [&::-webkit-details-marker]:hidden tree-summary {isHl
 						? 'bg-surface-hover'
 						: ''}"
 					style="padding-left: {depth * 12 + 8}px"
@@ -465,14 +687,13 @@
 						<Folder size={12} class="shrink-0 text-tertiary" />
 					{/if}
 					<span class="flex-1 min-w-0 truncate" title={node.name}>{node.name}</span>
-					<ChevronDown class="w-3 h-3 shrink-0 text-tertiary tree-chevron-open" />
-					<ChevronRight class="w-3 h-3 shrink-0 text-tertiary tree-chevron-closed" />
+					<span class="w-5 flex items-center justify-center shrink-0">
+						<ChevronDown class="w-3 h-3 shrink-0 text-tertiary tree-chevron-open" />
+						<ChevronRight class="w-3 h-3 shrink-0 text-tertiary tree-chevron-closed" />
+					</span>
 				</summary>
 			{/if}
 			<div class="relative">
-				<!-- Indent guide: a vertical rule down the left of the folder's
-				     children, at the parent chevron's midpoint (depth*12+8 + 6).
-				     Absolute so it doesn't shift the rows; clicks pass through. -->
 				<div
 					class="pointer-events-none absolute top-0 bottom-0 border-l border-light"
 					style="left: {depth * 12 + 14}px"
@@ -486,26 +707,134 @@
 	{:else}
 		{@const d = node.data}
 		{@const key = node.key}
-		<!-- Folders place their icon at the base padding (depth*12+8) — the chevron
-		     now sits at the row's end, not the front. WorkspaceItemRow adds its own
-		     12px base, so indent = depth*12-4 lines a file's icon up with sibling
-		     folder icons. Keep in sync with the folder summary. -->
-		<WorkspaceItemRow
-			kind={d.kind as any}
-			iconPath={d.path}
-			baseClass="py-1.5"
-			singleLine
-			summary={summaries[key] ?? ('summary' in d ? d.summary : undefined)}
-			secondary={node.name}
-			highlighted={key === highlightedKey}
-			navKey={key}
-			indent={depth * 12 - 4}
-			title={displayPathOf(d)}
-			onclick={() => {
-				highlightedKey = key
-				scrollToDiff(d)
-			}}
-			onmouseenter={() => setHoverHighlight(key)}
+		<!-- Indentation lives on the wrapper (outside the row's hover surface) so the
+		     highlight starts at the row content instead of bleeding across the indent.
+		     Every row ends with a w-5 slot (chevron or spacer) to keep badges aligned
+		     with the folder rows' chevrons. -->
+		<div class="flex items-stretch" style="padding-left: {depth * 12 + 4}px">
+			{#if isSynthetic(d)}
+				<WorkspaceItemRow
+					kind={d.kind as any}
+					iconPath={d.path}
+					baseClass="py-2 min-w-0 pr-1 pl-1 rounded-md"
+					singleLine
+					secondary={node.name}
+					highlighted={key === highlightedKey}
+					navKey={key}
+					indent={0}
+					title={displayPathOf(d)}
+					onclick={() => void revealSynthetic(d, key)}
+					onmouseenter={() => setHoverHighlight(key)}
+				>
+					{#snippet extras()}
+						<span class="w-5 shrink-0"></span>
+					{/snippet}
+				</WorkspaceItemRow>
+			{:else}
+				<WorkspaceItemRow
+					kind={d.deployKind as any}
+					iconPath={d.path}
+					baseClass="py-2 min-w-0 pr-1 pl-1 rounded-md"
+					singleLine
+					summary={d.summary}
+					secondary={node.name}
+					highlighted={key === highlightedKey}
+					navKey={key}
+					indent={0}
+					title={d.displayPath}
+					onclick={() => revealDiff(d, key)}
+					onmouseenter={() => setHoverHighlight(key)}
+				>
+					{#snippet extras()}
+						{@render rowBadge(staged[d.key] ?? d)}
+						{#if d.deployKind === 'raw_app'}
+							<!-- Unloaded app leaf: row click reveals the diff, the chevron
+							     loads the values and unwraps the file tree. A span (not a
+							     button/Button) because it nests inside WorkspaceItemRow's
+							     clickable row — nested interactive elements are invalid — and
+							     it stays out of the tab order: the keyboard path is ArrowRight
+							     on the highlighted row (handleSearchKeydown). -->
+							<span
+								role="button"
+								tabindex="-1"
+								title="Show files"
+								class="w-5 h-5 flex items-center justify-center shrink-0 rounded cursor-pointer hover:bg-surface-secondary"
+								onclick={(e) => {
+									e.stopPropagation()
+									expandApp(d)
+								}}
+							>
+								{#if loadedDiffs[d.key]?.state === 'loading'}
+									<Loader2 class="w-3 h-3 animate-spin text-tertiary" />
+								{:else}
+									<ChevronRight class="w-3 h-3 text-tertiary" />
+								{/if}
+							</span>
+						{:else}
+							<span class="w-5 shrink-0"></span>
+						{/if}
+					{/snippet}
+				</WorkspaceItemRow>
+			{/if}
+		</div>
+	{/if}
+{/snippet}
+
+<!-- Live (non-done) diff content only — the done state renders at the card
+     level so the two can cross-animate on deploy. -->
+{#snippet diffBlock(item: DeployItem)}
+	{@const loaded = loadedDiffs[item.key]}
+	{#if !mountedRows[item.key]}
+		<div
+			use:lazyMount={item}
+			class="flex items-center gap-2 text-2xs text-tertiary p-3 min-h-[10rem]"
+		>
+			<Loader2 class="w-3.5 h-3.5 animate-spin" />
+			Diff loads on scroll…
+		</div>
+	{:else if !loaded || loaded.state === 'loading'}
+		<div class="flex items-center gap-2 text-xs text-secondary p-3">
+			<Loader2 class="w-3.5 h-3.5 animate-spin" />
+			Loading diff…
+		</div>
+	{:else if loaded.state === 'error'}
+		<div class="text-xs text-red-600 dark:text-red-400 p-3">{loaded.error}</div>
+	{:else if item.deployKind === 'raw_app'}
+		<div class="flex flex-col">
+			{#each rawAppItems(item, loaded) as sub (displayKey(sub))}
+				<!-- Anchor target for the sidebar's per-file rows; scroll-mt clears the
+				     app block's sticky header. -->
+				<div
+					id={`ws-diff-${displayKey(sub)}`}
+					class="border-t border-light first:border-t-0 scroll-mt-10"
+				>
+					<div class="px-3 py-1.5 text-2xs text-secondary font-mono truncate" title={sub.path}>
+						{sub.path}
+					</div>
+					{#if sub.kind === 'raw_app_file'}
+						<WorkspaceItemDiffViewer
+							kind="raw_app_file"
+							rawFile={sub as RawAppFileItem}
+							{inlineDiff}
+						/>
+					{:else}
+						{@const runnable = sub as RawAppRunnableItem}
+						<WorkspaceItemDiffViewer
+							kind="script"
+							originalRaw={runnable.originalRaw}
+							currentRaw={runnable.currentRaw}
+							{inlineDiff}
+						/>
+					{/if}
+				</div>
+			{/each}
+		</div>
+	{:else}
+		<WorkspaceItemDiffViewer
+			kind={item.deployKind}
+			originalRaw={loaded.before}
+			currentRaw={loaded.after}
+			{inlineDiff}
 		/>
 	{/if}
 {/snippet}
@@ -540,178 +869,215 @@
 					/>
 				{/snippet}
 			</ToggleButtonGroup>
-			<Button
-				variant="accent"
-				unifiedSize="sm"
-				startIcon={{ icon: GitMerge }}
-				onclick={() => goto(reviewHref)}
-			>
-				{reviewLabel}
-			</Button>
 		{/snippet}
-		<div class="flex flex-row h-full min-h-0">
-			{#if diffs.length > 0}
-				<aside
-					bind:this={sidebarRoot}
-					onmousemove={() => (mouseActive = true)}
-					class="flex-none w-56 border-r border-light flex flex-col min-h-0"
-				>
-					<div class="px-3 pt-3 pb-2 shrink-0">
-						<!-- Raw input (not the design-system TextInput) on purpose: this is a
-						     bespoke filter wired to the file tree's keyboard navigation — it
-						     needs a direct element ref to focus (the `/` shortcut) and a
-						     keydown handler that hands ArrowDown/Enter off to the tree.
-						     TextInput/ClearableInput swallow/rebubble those and don't expose
-						     the element ref. -->
-						<input
-							bind:this={searchInputEl}
-							type="search"
-							bind:value={searchQuery}
-							placeholder="Filter files..."
-							onkeydown={handleSearchKeydown}
-							class="w-full text-xs px-2 py-1 rounded border border-light bg-surface focus:outline-none focus:border-accent"
-						/>
-					</div>
-					<div class="flex-1 min-h-0 overflow-y-auto pb-3 flex flex-col gap-1">
-						{#if treeModel.root.children.length > 0}
-							{#each treeModel.root.children as child}
-								{@render renderTreeNode(child, 0)}
-							{/each}
-						{:else}
-							<div class="text-2xs text-tertiary px-3 py-2">No matches</div>
-						{/if}
-					</div>
-				</aside>
-			{/if}
-			<main bind:this={mainScrollEl} class="flex-1 min-w-0 overflow-y-auto">
-				<div class="px-3 pt-3 pb-4 flex flex-col gap-3">
-					{#if loading && diffs.length === 0}
-						<div class="flex items-center gap-2 text-sm text-secondary py-8 self-center">
-							<Loader2 class="w-4 h-4 animate-spin" />
-							Loading comparison...
+		<div class="flex flex-col h-full min-h-0">
+			<div class="flex flex-row flex-1 min-h-0">
+				{#if model.items.length > 0}
+					<aside
+						bind:this={sidebarRoot}
+						onmousemove={() => (mouseActive = true)}
+						class="flex-none w-96 flex flex-col min-h-0 pt-3 px-1"
+					>
+						<!-- Both containers reserve the same stable scrollbar gutter (the input
+						     wrapper never actually scrolls), so input and tree rows share one
+						     right edge. padRightForGutter tops the gutter up to the 6px inner
+						     padding target so the visual right margin equals the left one no
+						     matter the platform's scrollbar width (0 for overlay scrollbars). -->
+						<div
+							class="pl-2 pb-1 shrink-0 overflow-y-auto"
+							style="scrollbar-gutter: stable;"
+							use:padRightForGutter
+						>
+							<!-- Raw input (not the design-system TextInput) on purpose: this is a
+							     bespoke filter wired to the file tree's keyboard navigation — it
+							     needs a direct element ref (focused on open) and a keydown handler
+							     that hands ArrowDown/Enter/ArrowLeft/Right off to the tree.
+							     TextInput/ClearableInput swallow/rebubble those and don't expose
+							     the element ref. -->
+							<input
+								bind:this={searchInputEl}
+								type="search"
+								bind:value={searchQuery}
+								placeholder="Filter files..."
+								onkeydown={handleSearchKeydown}
+								class="w-full text-xs px-2 py-1 rounded border border-light bg-surface focus:outline-none focus:border-accent"
+							/>
 						</div>
-					{:else if error}
-						<div class="text-sm text-red-600 dark:text-red-400 py-4">{error}</div>
-					{:else if notice}
-						<div class="text-sm text-secondary py-4">{notice}</div>
-					{:else if diffs.length === 0}
-						<div class="text-sm text-secondary py-4">{emptyMessage}</div>
-					{:else if filteredDiffs.length === 0}
-						<div class="text-sm text-secondary py-4">No files match "{searchQuery}".</div>
-					{:else}
-						<div class="flex flex-col gap-2">
-							{#each filteredDiffs as d (itemKey(d))}
-								{@const key = itemKey(d)}
-								{@const status = d.status}
-								{@const StatusIcon = statusIcons[status]}
-								{@const loaded = loadedDiffs[key]}
-								<!-- A synthesized raw-app item (file or runnable) links to its
-								     owning app's editor. -->
-								{@const editUrl =
-									'appPath' in d
-										? editUrlFor?.({ ...d, kind: 'raw_app', path: d.appPath })
-										: editUrlFor?.(d)}
-								{@const dpath = displayPathOf(d)}
-								<details
-									open
-									id={rowId(d)}
-									class="border border-light rounded-md bg-surface scroll-mt-2"
-									ontoggle={(e) => onDetailsToggle(d, e)}
-								>
-									<summary
-										class="sticky top-0 z-30 bg-surface flex items-center gap-2 px-3 py-2 cursor-pointer list-none [&::-webkit-details-marker]:hidden border-b border-transparent rounded-md relative before:content-[''] before:absolute before:inset-0 before:bg-surface-hover before:opacity-0 before:pointer-events-none before:transition-opacity hover:before:opacity-100"
+						<div
+							class="flex-1 min-h-0 overflow-y-auto overflow-x-hidden pl-2 pt-1.5 pb-2 flex flex-col gap-1"
+							style="scrollbar-gutter: stable;"
+							use:padRightForGutter
+						>
+							{#if treeModel.root.children.length > 0}
+								{#each treeModel.root.children as child}
+									{@render renderTreeNode(child, 0)}
+								{/each}
+							{:else}
+								<div class="text-2xs text-tertiary px-3 py-2">No matches</div>
+							{/if}
+						</div>
+					</aside>
+				{/if}
+				<main
+					bind:this={mainScrollEl}
+					bind:clientHeight={mainHeight}
+					class="flex-1 min-w-0 overflow-y-auto bg-surface"
+				>
+					<div class="pl-1 pr-3 pt-3 pb-4 flex flex-col gap-3">
+						{#if model.loading && model.items.length === 0}
+							<div class="flex items-center gap-2 text-sm text-secondary py-8 self-center">
+								<Loader2 class="w-4 h-4 animate-spin" />
+								Loading changes...
+							</div>
+						{:else if model.error}
+							<div class="text-sm text-red-600 dark:text-red-400 py-4">{model.error}</div>
+						{:else if model.items.length === 0}
+							<div class="text-sm text-secondary py-4">No changes.</div>
+						{:else if orderedItems.length === 0}
+							<div class="text-sm text-secondary py-4">No files match.</div>
+						{:else}
+							<div class="flex flex-col">
+								{#each orderedItems as d (d.key)}
+									<!-- While a deploy's success is being staged, the card renders its
+									     pre-deploy snapshot so the state flip waits for the check-mark
+									     beat instead of racing it. -->
+									{@const view = staged[d.key] ?? d}
+									{@const action = actionFor(view)}
+									{@const editUrl = editUrlFor?.(d)}
+									{@const status = model.statusOf(d.key)}
+									<div
+										id={rowId(d)}
+										class="mb-6 scroll-mt-3 rounded-md border border-light transition-shadow duration-500 {flashKey ===
+										d.key
+											? 'ring-1 ring-border-accent'
+											: 'ring-0 ring-transparent'}"
 									>
-										<ChevronDown
-											class="w-3.5 h-3.5 shrink-0 text-tertiary transition-transform chevron"
-										/>
-										<RowIcon kind={d.kind as any} path={d.path} size={14} />
-										<div class="min-w-0 flex-1">
-											{#if editUrl}
-												<ExternalEditLink
-													href={editUrl}
-													title={dpath}
-													class="text-xs text-primary font-mono truncate"
+										<div
+											class="sticky top-0 z-30 bg-surface-tertiary rounded-t-md flex items-center gap-2 px-3 py-2 border-b border-transparent"
+										>
+											<RowIcon kind={d.deployKind as any} path={d.path} size={14} />
+											<div class="min-w-0 flex-1">
+												{#if editUrl}
+													<ExternalEditLink
+														href={editUrl}
+														title={d.displayPath}
+														class="text-xs text-primary font-mono truncate"
+													>
+														<span class="truncate">{d.displayPath}</span>
+													</ExternalEditLink>
+												{:else}
+													<div
+														class="text-xs text-primary font-mono truncate"
+														title={d.displayPath}
+													>
+														{d.displayPath}
+													</div>
+												{/if}
+											</div>
+											<div class="shrink-0 flex items-center gap-2">
+												{@render rowBadge(view)}
+												{#if status?.status === 'failed'}
+													{@render deployFailed(d)}
+												{:else if action.op !== 'none'}
+													{#if action.secondary?.length}
+														<Button
+															variant="subtle"
+															unifiedSize="sm"
+															destructive
+															disabled={model.deploying || !!staged[d.key]}
+															onclick={() => confirmDiscard(d)}
+														>
+															{action.secondary[0].label}
+														</Button>
+													{/if}
+													<div class="relative overflow-hidden rounded-md">
+														<Button
+															variant="accent"
+															unifiedSize="sm"
+															disabled={model.deploying ||
+																!!staged[d.key] ||
+																!view.canWrite ||
+																!model.deployPermission.ok}
+															startIcon={status?.status === 'loading'
+																? { icon: Loader2, classes: 'animate-spin' }
+																: { icon: Save }}
+															title={!view.canWrite
+																? "You don't have write permission on this path"
+																: model.deployPermission.ok
+																	? undefined
+																	: model.deployPermission.reason}
+															onclick={() => deployStaged(d)}
+														>
+															{action.label}
+														</Button>
+														{#if staged[d.key]}
+															<!-- Success beat: green check flies in over the button
+															     (SaveButton pattern), holds, then the row flips. -->
+															<div
+																class="absolute inset-0 flex items-center justify-center bg-green-200 dark:bg-green-800 rounded-md"
+																transition:fly={{ y: -10, duration: 300 }}
+															>
+																<CheckCircle2 class="w-4 h-4 text-green-700 dark:text-green-300" />
+															</div>
+														{/if}
+													</div>
+												{/if}
+											</div>
+										</div>
+										<div class="bg-surface-tertiary rounded-b-md overflow-hidden">
+											<!-- Deploy collapses the (tall) diff into the one-line done note —
+											     slide both branches so the card height animates instead of
+											     snapping. Transitions are local: nothing plays on drawer open. -->
+											{#if view.done}
+												<div
+													transition:slide={{ duration: 300, easing: cubicOut }}
+													class="text-2xs text-tertiary p-3"
 												>
-													<span class="truncate">{dpath}</span>
-												</ExternalEditLink>
+													Deployed — no pending changes.
+												</div>
 											{:else}
-												<div class="text-xs text-primary font-mono truncate" title={dpath}>
-													{dpath}
+												<div transition:slide={{ duration: 300, easing: cubicOut }}>
+													{@render diffBlock(view)}
 												</div>
 											{/if}
 										</div>
-										<div class="shrink-0 flex items-center gap-2">
-											{#if d.ahead && d.ahead > 0}
-												<span class="text-2xs text-secondary">{d.ahead} ahead</span>
-											{/if}
-											{#if d.behind && d.behind > 0}
-												<span class="text-2xs text-secondary">{d.behind} behind</span>
-											{/if}
-											<Badge color={statusBadgeColor(status)}>
-												<StatusIcon class="w-3 h-3 inline mr-0.5" />
-												{status}
-											</Badge>
-										</div>
-									</summary>
-									<div
-										class="border-t border-light bg-surface-tertiary rounded-b-md overflow-hidden"
-									>
-										{#if !mountedRows[key]}
-											<!-- Defer the Monaco mount until this block scrolls near the
-											     viewport, so an exploded many-file app doesn't mount every
-											     editor at once. -->
-											<div
-												use:lazyMount={key}
-												class="flex items-center gap-2 text-2xs text-tertiary p-3 min-h-[10rem]"
-											>
-												<Loader2 class="w-3.5 h-3.5 animate-spin" />
-												Diff loads on scroll…
-											</div>
-										{:else if d.kind === 'raw_app_file'}
-											<!-- DiffRow.kind is a plain string, so the kind check doesn't narrow
-											     the union — assert the synthetic file item. -->
-											{@const rawFile = d as RawAppFileItem}
-											<WorkspaceItemDiffViewer kind="raw_app_file" {rawFile} {inlineDiff} />
-										{:else if 'appPath' in d}
-											<!-- Synthesized runnable: render script-style (Content + Metadata),
-											     forcing `script` so flow runnables don't hit FlowDiffViewer. -->
-											{@const runnable = d as RawAppRunnableItem}
-											<WorkspaceItemDiffViewer
-												kind="script"
-												originalRaw={runnable.originalRaw}
-												currentRaw={runnable.currentRaw}
-												{inlineDiff}
-											/>
-										{:else if !loaded || loaded.state === 'loading'}
-											<div class="flex items-center gap-2 text-xs text-secondary p-3">
-												<Loader2 class="w-3.5 h-3.5 animate-spin" />
-												Loading diff…
-											</div>
-										{:else if loaded.state === 'error'}
-											<div class="text-xs text-red-600 dark:text-red-400">{loaded.error}</div>
-										{:else if loaded.state === 'ready'}
-											<WorkspaceItemDiffViewer
-												kind={d.kind}
-												originalRaw={loaded.before}
-												currentRaw={loaded.after}
-												{inlineDiff}
-											/>
-										{/if}
 									</div>
-								</details>
-							{/each}
-						</div>
-					{/if}
-				</div></main
-			>
+								{/each}
+							</div>
+							<!-- Just enough trailing room for the last item to reach the top;
+							     without it the container bottoms out and short lists sit low. -->
+							<div aria-hidden="true" class="shrink-0" style="height: {trailingSpace}px"></div>
+						{/if}
+					</div>
+				</main>
+			</div>
+			<!-- Batch / PR (deploy all, request review, reconcile) is the compare page's
+			     job — the dock deploys per item; this footer is just the doorway there.
+			     A plain anchor (not Button href): it's a text-level navigation link, and
+			     the design-system Button renders link-hrefs with button chrome. -->
+			{#if model.items.length > 0 && compareSessionHref}
+				<div
+					class="shrink-0 border-t border-light bg-surface px-3 py-1.5 flex items-center justify-end text-xs"
+				>
+					<a
+						href={compareSessionHref}
+						target="_blank"
+						rel="noopener noreferrer"
+						class="inline-flex items-center gap-1 font-medium text-accent hover:underline shrink-0"
+					>
+						Deploy all / request review on compare page
+						<ExternalLink class="w-3 h-3" />
+					</a>
+				</div>
+			{/if}
+			<!-- Inside the drawer subtree: the drawer is portaled/elevated, so a
+			     sibling modal would stack beneath it. -->
+			<ConfirmationModal {...discardConfirm.props} />
 		</div>
 	</DrawerContent>
 </Drawer>
 
 <style>
-	details:not([open]) :global(.chevron) {
-		transform: rotate(-90deg);
-	}
 	details:not([open]) > .tree-summary :global(.tree-chevron-open) {
 		display: none;
 	}
diff --git a/frontend/src/lib/components/sessions/diffTree.test.ts b/frontend/src/lib/components/sessions/diffTree.test.ts
index e2907fbbdc..44f1cb9ca5 100644
--- a/frontend/src/lib/components/sessions/diffTree.test.ts
+++ b/frontend/src/lib/components/sessions/diffTree.test.ts
@@ -47,6 +47,43 @@ describe('buildDiffTree — structure', () => {
 		expect(t.root.children[0]).toMatchObject({ type: 'file', name: 'orphan', key: 'orphan' })
 	})
 
+	it('app roots sort as items among leaves — same position before and after unwrap', () => {
+		const apps = new Map<string, AppRootMeta>([['u/admin/beta_app', { summaryKey: 'raw_app/b' }]])
+		// Unloaded: the app is a plain leaf between alpha and zeta.
+		const before = buildDiffTree(
+			[
+				item('a', 'u/admin/alpha'),
+				item('raw_app/b', 'u/admin/beta_app'),
+				item('z', 'u/admin/zeta')
+			],
+			apps
+		)
+		const scopeBefore = before.root.children[0]
+		if (scopeBefore.type !== 'folder') throw new Error('expected scope')
+		expect(scopeBefore.children.map((c) => `${c.type}:${c.name}`)).toEqual([
+			'file:alpha',
+			'file:beta_app',
+			'file:zeta'
+		])
+		// Loaded: the leaf is replaced by the app-root folder — same position,
+		// not hoisted to the folder group.
+		const after = buildDiffTree(
+			[
+				item('a', 'u/admin/alpha'),
+				item('f', 'u/admin/beta_app/App.tsx'),
+				item('z', 'u/admin/zeta')
+			],
+			apps
+		)
+		const scopeAfter = after.root.children[0]
+		if (scopeAfter.type !== 'folder') throw new Error('expected scope')
+		expect(scopeAfter.children.map((c) => `${c.type}:${c.name}`)).toEqual([
+			'file:alpha',
+			'folder:beta_app',
+			'file:zeta'
+		])
+	})
+
 	it('tags the folder matching an app root and leaves others untagged', () => {
 		const apps = new Map<string, AppRootMeta>([
 			['u/admin/my_app', { summaryKey: 'raw_app/x', summary: 'My app' }]
diff --git a/frontend/src/lib/components/sessions/diffTree.ts b/frontend/src/lib/components/sessions/diffTree.ts
index 1ede7be628..a91d2c1d90 100644
--- a/frontend/src/lib/components/sessions/diffTree.ts
+++ b/frontend/src/lib/components/sessions/diffTree.ts
@@ -29,7 +29,14 @@ export type DiffTreeItem<T> = {
 
 /** Marks a folder as a raw app's root so the drawer renders its header as the
  * raw-app row instead of a plain folder. Keyed by the app's friendly path. */
-export type AppRootMeta = { summaryKey: string; summary?: string }
+export type AppRootMeta = {
+	summaryKey: string
+	summary?: string
+	hasDraft?: boolean
+	draftOnly?: boolean
+	draftUsers?: { username?: string | null }[]
+	draftItemKind?: import('$lib/gen').UserDraftItemKind
+}
 
 export type FolderNode<T> = {
 	type: 'folder'
@@ -57,7 +64,7 @@ export type DiffTreeModel<T> = {
 	firstChildKeyOf(folderKey: string): string | undefined
 }
 
-function folderKeyFor(fullPath: string): string {
+export function folderKeyFor(fullPath: string): string {
 	return `folder:${fullPath}`
 }
 
@@ -119,21 +126,28 @@ export function buildDiffTree<T>(
 		addFile(parent, rest[rest.length - 1], it)
 	}
 
+	// Tag the folder matching each raw app's friendly path as its app root.
+	// Must happen before sorting: app roots sort as items, not as folders.
+	for (const [fp, meta] of appMeta) {
+		const f = folderCache.get(fp)
+		if (f) f.app = meta
+	}
+
+	// Path folders group first; everything item-like — leaves AND app roots —
+	// sorts together by name, so a raw app keeps its position when expanding
+	// turns its leaf row into an app-root folder.
+	const isGrouping = (n: TreeNode<T>) => n.type === 'folder' && !n.app
 	const sortRec = (n: FolderNode<T>) => {
 		n.children.sort((a, b) => {
-			if (a.type !== b.type) return a.type === 'folder' ? -1 : 1
+			const ga = isGrouping(a) ? 0 : 1
+			const gb = isGrouping(b) ? 0 : 1
+			if (ga !== gb) return ga - gb
 			return a.name.localeCompare(b.name)
 		})
 		for (const c of n.children) if (c.type === 'folder') sortRec(c)
 	}
 	sortRec(root)
 
-	// Tag the folder matching each raw app's friendly path as its app root.
-	for (const [fp, meta] of appMeta) {
-		const f = folderCache.get(fp)
-		if (f) f.app = meta
-	}
-
 	return {
 		root,
 		order(isOpen) {
diff --git a/frontend/src/lib/components/sessions/forkDiffCache.test.ts b/frontend/src/lib/components/sessions/forkDiffCache.test.ts
index 2d38320a6a..9b5bc6d9d5 100644
--- a/frontend/src/lib/components/sessions/forkDiffCache.test.ts
+++ b/frontend/src/lib/components/sessions/forkDiffCache.test.ts
@@ -1,15 +1,15 @@
 import { describe, it, expect } from 'vitest'
 
-// Documents the cache-invalidation contract that ForkDiffDrawer.fetchComparison
-// relies on. The bug (cubic P2): per-item raw diffs (`loadedDiffs[key]`) and
-// per-item `summaries` are component-local $state that persist for the
-// drawer's lifetime. fetchComparison re-fetches the comparison on every
-// open(), but loadDiffFor short-circuits on `loadedDiffs[key]` — so an
-// edit-then-reopen would show fresh counts but the prior open's cached
-// expanded raw content. The fix clears both records at the top of
-// fetchComparison before the await. This test pins the contract from the
-// outside: nothing is allowed to read a stale per-item value across a
-// fetchComparison invocation.
+// Documents the cache-invalidation contract behind the session fork diff. The
+// bug (cubic P2): per-item raw diffs (`loadedDiffs[key]`) and per-item
+// `summaries` are component-local $state in WorkspaceDiffDrawer that persist for
+// the drawer's lifetime. The comparison is re-fetched on every open(), but
+// loadDiffFor short-circuits on `loadedDiffs[key]` — so an edit-then-reopen
+// would show fresh counts but the prior open's cached expanded raw content. The
+// fix clears both records on open() (and, for an in-place data-source swap like
+// the draft↔fork toggle, on a `resetKey` change). This test pins the contract
+// from the outside: nothing is allowed to read a stale per-item value across a
+// re-fetch.
 
 type LoadedDiff = { state: 'ready'; parentRaw: string; forkRaw: string }
 
diff --git a/frontend/src/lib/components/sessions/modifiedItemsMask.test.ts b/frontend/src/lib/components/sessions/modifiedItemsMask.test.ts
new file mode 100644
index 0000000000..b66b83b2f1
--- /dev/null
+++ b/frontend/src/lib/components/sessions/modifiedItemsMask.test.ts
@@ -0,0 +1,66 @@
+import { describe, it, expect } from 'vitest'
+import { maskKey, forkDiffKindToUserDraftKind, diffInMask } from './modifiedItemsMask'
+import type { WorkspaceItemDiff } from '$lib/gen'
+
+// The fork-diff → user-draft kind bridge must stay the inverse of
+// CompareDrafts.toLayoutKind (different taxonomies: `http_trigger` vs
+// `trigger_http`, `schedule` vs `trigger_schedule`). A drift here silently breaks
+// the chat-scoped mask join, so pin the table.
+
+describe('maskKey', () => {
+	it('joins kind and path with a colon', () => {
+		expect(maskKey('script', 'u/admin/foo')).toBe('script:u/admin/foo')
+		expect(maskKey('raw_app', 'f/bar/app')).toBe('raw_app:f/bar/app')
+	})
+})
+
+describe('forkDiffKindToUserDraftKind', () => {
+	it('maps trigger/schedule/app fork-diff kinds to their user-draft kind', () => {
+		const cases: Array<[WorkspaceItemDiff['kind'], string]> = [
+			['schedule', 'trigger_schedule'],
+			['http_trigger', 'trigger_http'],
+			['websocket_trigger', 'trigger_websocket'],
+			['kafka_trigger', 'trigger_kafka'],
+			['nats_trigger', 'trigger_nats'],
+			['postgres_trigger', 'trigger_postgres'],
+			['mqtt_trigger', 'trigger_mqtt'],
+			['sqs_trigger', 'trigger_sqs'],
+			['gcp_trigger', 'trigger_gcp'],
+			['azure_trigger', 'trigger_azure'],
+			['email_trigger', 'trigger_default_email'],
+			['app', 'raw_app']
+		]
+		for (const [forkKind, expected] of cases) {
+			expect(forkDiffKindToUserDraftKind(forkKind)).toBe(expected)
+		}
+	})
+
+	it('passes identity kinds through unchanged', () => {
+		for (const k of ['script', 'flow', 'raw_app', 'resource', 'variable'] as const) {
+			expect(forkDiffKindToUserDraftKind(k)).toBe(k)
+		}
+	})
+
+	it('returns undefined for kinds with no user-draft equivalent', () => {
+		expect(forkDiffKindToUserDraftKind('resource_type')).toBeUndefined()
+		expect(forkDiffKindToUserDraftKind('folder')).toBeUndefined()
+	})
+})
+
+describe('diffInMask', () => {
+	const diff = (kind: WorkspaceItemDiff['kind'], path: string): WorkspaceItemDiff =>
+		({ kind, path }) as WorkspaceItemDiff
+
+	it('matches a fork diff against the mask via the bridged kind', () => {
+		const mask = new Set(['trigger_http:f/foo/route', 'script:u/me/s'])
+		expect(diffInMask(diff('http_trigger', 'f/foo/route'), mask)).toBe(true)
+		expect(diffInMask(diff('script', 'u/me/s'), mask)).toBe(true)
+	})
+
+	it('does not match when path or kind differ, or kind has no equivalent', () => {
+		const mask = new Set(['trigger_http:f/foo/route'])
+		expect(diffInMask(diff('http_trigger', 'f/other/route'), mask)).toBe(false)
+		expect(diffInMask(diff('script', 'f/foo/route'), mask)).toBe(false)
+		expect(diffInMask(diff('folder', 'f/foo/route'), mask)).toBe(false)
+	})
+})
diff --git a/frontend/src/lib/components/sessions/modifiedItemsMask.ts b/frontend/src/lib/components/sessions/modifiedItemsMask.ts
new file mode 100644
index 0000000000..14ab16a653
--- /dev/null
+++ b/frontend/src/lib/components/sessions/modifiedItemsMask.ts
@@ -0,0 +1,52 @@
+import type { UserDraftItemKind, WorkspaceItemDiff } from '$lib/gen'
+
+// The "modified items mask" tracks which workspace items an AI chat touched via
+// tool calls. Each key is `${UserDraftItemKind}:${storagePath}`. UserDraftItemKind
+// is canonical because it is what `itemKindFor`/`persistGlobalDraft` emit at capture
+// time and what `DraftItem.kind` (GET /drafts/list) already uses — so the mask joins
+// directly against the draft list. The fork comparison (`compareWorkspaces`) uses a
+// DIFFERENT kind taxonomy (`http_trigger` vs `trigger_http`, `schedule` vs
+// `trigger_schedule`), so `forkDiffKindToUserDraftKind` bridges the two.
+
+export function maskKey(kind: UserDraftItemKind, path: string): string {
+	return `${kind}:${path}`
+}
+
+type ForkDiffKind = WorkspaceItemDiff['kind']
+
+// Inverse of the draft→layout naming used in CompareDrafts.toLayoutKind. Only the
+// non-identity cases need an entry; everything else falls through to identity.
+// `resource_type`/`folder` have no UserDraftItemKind (never AI-authored) → undefined.
+const FORK_DIFF_KIND_TO_USER_DRAFT_KIND: Partial<Record<ForkDiffKind, UserDraftItemKind>> = {
+	schedule: 'trigger_schedule',
+	http_trigger: 'trigger_http',
+	websocket_trigger: 'trigger_websocket',
+	kafka_trigger: 'trigger_kafka',
+	nats_trigger: 'trigger_nats',
+	postgres_trigger: 'trigger_postgres',
+	mqtt_trigger: 'trigger_mqtt',
+	sqs_trigger: 'trigger_sqs',
+	gcp_trigger: 'trigger_gcp',
+	azure_trigger: 'trigger_azure',
+	email_trigger: 'trigger_default_email',
+	app: 'raw_app'
+}
+
+const IDENTITY_FORK_DIFF_KINDS = new Set<ForkDiffKind>([
+	'script',
+	'flow',
+	'raw_app',
+	'resource',
+	'variable'
+])
+
+export function forkDiffKindToUserDraftKind(kind: ForkDiffKind): UserDraftItemKind | undefined {
+	if (IDENTITY_FORK_DIFF_KINDS.has(kind)) return kind as UserDraftItemKind
+	return FORK_DIFF_KIND_TO_USER_DRAFT_KIND[kind]
+}
+
+// True when a fork-comparison diff names an item present in the chat-modified mask.
+export function diffInMask(diff: WorkspaceItemDiff, mask: Set<string>): boolean {
+	const kind = forkDiffKindToUserDraftKind(diff.kind)
+	return kind !== undefined && mask.has(maskKey(kind, diff.path))
+}
diff --git a/frontend/src/lib/components/sessions/sessionDeployModel.svelte.ts b/frontend/src/lib/components/sessions/sessionDeployModel.svelte.ts
new file mode 100644
index 0000000000..28f0075880
--- /dev/null
+++ b/frontend/src/lib/components/sessions/sessionDeployModel.svelte.ts
@@ -0,0 +1,351 @@
+import { getDraftItems, type DraftItem } from '$lib/workspaceDrafts.svelte'
+import {
+	checkDeployPermission,
+	checkItemExists,
+	getItemValue,
+	type DeployPermission,
+	type DeployResult
+} from '$lib/utils_workspace_deploy'
+import {
+	deployDraft,
+	discardDraft,
+	fetchDraftBaseStale,
+	getDraftDiffValues
+} from '$lib/utils_draft_deploy'
+import { untrack } from 'svelte'
+import {
+	buildDeployItems,
+	deployPlanFor,
+	diffBaseFor,
+	discardPlanFor,
+	maskOnlyCandidates,
+	type DeployItem,
+	type DeployPlanEntry
+} from './sessionDeployModel'
+import { maskKey } from './modifiedItemsMask'
+
+export type DeploymentStatus = { status: 'loading' | 'failed'; error?: string }
+
+// Reactive wrapper over the pure sessionDeployModel: owns the async draft list
+// and builds the unified item list. The diff-value loader lives here too so both
+// the tree and the diff column read one resolver. The dock is granular per-item
+// deploy (deployRow/discardRow); batch flows and fork→parent promotion are the
+// compare page's concern.
+
+export interface SessionDeployModelArgs {
+	workspaceId: string
+	/** Called after a deploy/discard mutated workspace state. Lets the consumer
+	 *  refresh ITS OWN data sources — without this, the bar shows stale counts
+	 *  until the next turn end / tab refocus / reload. */
+	onDataChanged?: () => void
+	/** A draft deployed: the consumer owning the mask moves the item's entry to
+	 *  its deployed path (`displayPath` — differs from the synthetic storage
+	 *  `path` for draft-only items, which never exists deployed). */
+	onItemDeployed?: (item: DeployItem) => void
+	/** A draft was discarded: the chat's touch is undone — the consumer drops
+	 *  the item's mask entry so a pre-existing deployed item doesn't keep
+	 *  reading as this chat's "Deployed" edit. */
+	onItemDiscarded?: (item: DeployItem) => void
+	/** Chat-modified-items mask; undefined shows every draft. */
+	mask?: Set<string>
+}
+
+export interface DiffValues {
+	before: unknown
+	after: unknown
+}
+
+/** Resolves which mask-only candidates still exist in the session workspace
+ *  (deployed) vs are gone (discarded drafts / deleted items) — the
+ *  `existingKeys` input of `buildDeployItems`. Undefined while resolving, so
+ *  deployed rows only appear once confirmed. Shared by the drawer model and the
+ *  bar's dock counts. */
+export function useExistingMaskKeys(
+	getInput: () => Omit<Parameters<typeof buildDeployItems>[0], 'existingKeys'> & {
+		workspaceId: string
+	}
+) {
+	let existingKeys = $state<Set<string> | undefined>(undefined)
+	// Existence is checked once per distinct candidate set; the signature avoids
+	// re-firing while results stream back.
+	let lastCandidateSig = ''
+	// Bumped by refresh() to force a re-check even when the candidate set (the
+	// effect's other dependency) is unchanged.
+	let recheck = $state(0)
+	$effect(() => {
+		void recheck
+		const { workspaceId, ...buildInput } = getInput()
+		const cands = maskOnlyCandidates(buildInput)
+		// The workspace is part of the identity: the same candidate keys in a
+		// different workspace must re-check, not reuse the previous verdict.
+		const sig =
+			workspaceId +
+			'|' +
+			cands
+				.map((c) => c.key)
+				.sort()
+				.join(',')
+		untrack(() => {
+			if (sig === lastCandidateSig) return
+			lastCandidateSig = sig
+			if (cands.length === 0) {
+				existingKeys = new Set()
+				return
+			}
+			// A mask-only item that was deployed still exists in the session
+			// workspace; a discarded or deleted one doesn't.
+			void Promise.all(
+				cands.map((c) =>
+					checkItemExists(c.deployKind, c.path, workspaceId)
+						.then((exists) => (exists ? c.key : null))
+						.catch(() => null)
+				)
+			).then((keys) => {
+				// A slower batch for a superseded candidate set (or one voided by
+				// reset()) must not overwrite the current result.
+				if (sig !== lastCandidateSig) return
+				existingKeys = new Set(keys.filter((k): k is string => !!k))
+			})
+		})
+	})
+	return {
+		get keys() {
+			return existingKeys
+		},
+		/** Force a fresh existence check (an item may have been deleted since).
+		 *  Hard invalidate: current keys are dropped until the check resolves, so
+		 *  rows derived from them disappear meanwhile — use on a fresh surface
+		 *  (drawer open), not on a live one. */
+		reset() {
+			lastCandidateSig = ''
+			existingKeys = undefined
+		},
+		/** Re-check while keeping the current keys (stale-while-revalidate), so a
+		 *  live surface doesn't blank out during the round-trip. */
+		refresh() {
+			lastCandidateSig = ''
+			recheck++
+		}
+	}
+}
+
+export function useSessionDeployModel(getArgs: () => SessionDeployModelArgs) {
+	let draftItems = $state<DraftItem[]>([])
+	let loading = $state(false)
+	let error = $state<string | undefined>(undefined)
+
+	// Mask keys confirmed to still exist → allowed to show as terminal deployed
+	// rows (a discarded draft is a mask entry with no item, so it stays out).
+	const existing = useExistingMaskKeys(() => ({
+		draftItems,
+		mask: getArgs().mask,
+		workspaceId: getArgs().workspaceId
+	}))
+
+	// Optimistic knowledge from this model's own deploys: a deployed key exists
+	// in the session workspace before the async existence check confirms it.
+	// Without this a deployed row falls out of the list for ~1s, unmounting its
+	// card.
+	let deployedKeys = $state<ReadonlySet<string>>(new Set())
+
+	const items = $derived.by(() => {
+		const existingKeys =
+			deployedKeys.size === 0 ? existing.keys : new Set([...(existing.keys ?? []), ...deployedKeys])
+		return buildDeployItems({ draftItems, mask: getArgs().mask, existingKeys })
+	})
+
+	async function fetchDrafts() {
+		loading = true
+		error = undefined
+		try {
+			draftItems = await getDraftItems(getArgs().workspaceId)
+		} catch (e) {
+			console.error('Session deploy model: draft list failed', e)
+			error = `Failed to load drafts: ${e}`
+			draftItems = []
+		} finally {
+			loading = false
+		}
+	}
+
+	/** (Re)fetch. Called on open. */
+	function load() {
+		// Re-check existence fresh (an item may have been deleted since last open).
+		existing.reset()
+		// Drop the optimistic bridge with it: it only covers the gap until the
+		// fresh check resolves, and a stale entry would keep a since-deleted item
+		// reading as deployed forever.
+		deployedKeys = new Set()
+		// Staleness can change between opens (a deploy elsewhere moves the head).
+		staleFetched.clear()
+		staleKeys = new Set()
+		void fetchDrafts()
+	}
+
+	// ── Stale drafts (base ≠ deployed head) ──────────────────────────────────
+	// A draft forked from a version that is no longer the deployed head: someone
+	// deployed in between, so deploying the draft would silently revert them.
+	// Same detection as the compare page; surfaced as a warning, deploy stays
+	// allowed. Only own drafts on deployed script/flow/app items carry a base.
+	let staleKeys = $state<ReadonlySet<string>>(new Set())
+	const staleFetched = new Set<string>()
+	$effect(() => {
+		const list = items
+		const ws = getArgs().workspaceId
+		untrack(() => {
+			for (const it of list) {
+				if (!it.hasDraft || it.draftOnly || !it.mine) continue
+				if (!['script', 'flow', 'app', 'raw_app'].includes(it.draftKind)) continue
+				if (staleFetched.has(it.key)) continue
+				staleFetched.add(it.key)
+				void fetchDraftBaseStale(it.draftKind, it.path, ws).then((stale) => {
+					if (stale) staleKeys = new Set(staleKeys).add(it.key)
+				})
+			}
+		})
+	})
+
+	// ── Deploy permission ────────────────────────────────────────────────────
+	// Preflight the shared checkDeployPermission (operator / RestrictDeployToDeployers)
+	// for the session workspace so the button disables with a reason instead of
+	// failing on click. `ok` defaults true while resolving (fail-open).
+	let deployPerm = $state<DeployPermission>({ ok: true })
+	let deployPermFetchedFor = ''
+	$effect(() => {
+		const ws = getArgs().workspaceId
+		untrack(() => {
+			if (!ws || deployPermFetchedFor === ws) return
+			deployPermFetchedFor = ws
+			// Reset to fail-open for the new workspace and drop a stale resolution
+			// (a slower fetch for the previous workspace must not gate this one).
+			deployPerm = { ok: true }
+			void checkDeployPermission(ws).then((perm) => {
+				if (deployPermFetchedFor === ws) deployPerm = perm
+			})
+		})
+	})
+
+	// ── Deploy execution ─────────────────────────────────────────────────────
+	// Per-item transient deploy state (keyed by DeployItem.key): loading or
+	// failed. Success has no status — the row's badge flipping to Deployed is
+	// the feedback. Reassigned, not mutated.
+	let deploymentStatus = $state<Record<string, DeploymentStatus>>({})
+	let deploying = $state(false)
+
+	function setStatus(key: string, s: DeploymentStatus | undefined) {
+		const next = { ...deploymentStatus }
+		if (s) next[key] = s
+		else delete next[key]
+		deploymentStatus = next
+	}
+
+	async function runPlan(entry: DeployPlanEntry): Promise<DeployResult> {
+		const cur = getArgs().workspaceId
+		switch (entry.op) {
+			case 'deploy_draft':
+				return deployDraft(entry.draftKind, entry.path, cur, {
+					draftOnly: entry.draftOnly,
+					rawApp: entry.rawApp
+				})
+			case 'discard':
+				return discardDraft(entry.draftKind, entry.path, cur, entry.draftOnly, entry.legacy)
+		}
+	}
+
+	function refreshData() {
+		void fetchDrafts()
+		getArgs().onDataChanged?.()
+	}
+
+	/** Deploy (or discard) a single item; returns whether it succeeded. */
+	async function deployOne(item: DeployItem, discard = false): Promise<boolean> {
+		const plan = discard ? discardPlanFor(item) : deployPlanFor(item)
+		if (!plan) return false
+		// Don't attempt a deploy we know the user can't make (no write permission
+		// on the path, or blocked by the operator / deployer rule) — the UI
+		// disables it too; this is the guard behind that.
+		if (!discard && (!item.canWrite || !deployPerm.ok)) return false
+		setStatus(item.key, { status: 'loading' })
+		deploying = true
+		try {
+			const res = await runPlan(plan)
+			setStatus(item.key, res.success ? undefined : { status: 'failed', error: res.error })
+			if (res.success) {
+				if (discard) {
+					getArgs().onItemDiscarded?.(item)
+				} else {
+					// Bridge under the DEPLOYED path's key too: the mask rewrite
+					// (onItemDeployed) re-keys a synthetic-storage row to displayPath.
+					deployedKeys = new Set(deployedKeys)
+						.add(item.key)
+						.add(maskKey(item.draftKind, item.displayPath))
+					getArgs().onItemDeployed?.(item)
+				}
+			}
+			return res.success
+		} finally {
+			deploying = false
+		}
+	}
+
+	/** Returns success so the UI can stage its post-deploy animation. */
+	async function deployRow(item: DeployItem): Promise<boolean> {
+		const ok = await deployOne(item)
+		if (ok) refreshData()
+		return ok
+	}
+
+	async function discardRow(item: DeployItem) {
+		if (await deployOne(item, true)) refreshData()
+	}
+
+	// ── Diff values (one resolver for tree + column) ─────────────────────────
+	async function loadDiffValues(item: DeployItem): Promise<DiffValues> {
+		const base = diffBaseFor(item, getArgs().workspaceId)
+		if (base.kind === 'draft') {
+			const { deployed, draft } = await getDraftDiffValues(
+				base.draftKind,
+				item.path,
+				base.workspaceId,
+				base.draftOnly
+			)
+			return { before: base.draftOnly ? undefined : deployed, after: draft }
+		}
+		const v = await getItemValue(base.deployKind, base.path, base.workspaceId).catch(
+			() => undefined
+		)
+		return { before: v, after: v }
+	}
+
+	return {
+		get items() {
+			return items
+		},
+		get loading() {
+			return loading
+		},
+		get error() {
+			return error
+		},
+		load,
+		loadDiffValues,
+		get deploying() {
+			return deploying
+		},
+		statusOf(key: string): DeploymentStatus | undefined {
+			return deploymentStatus[key]
+		},
+		/** Whether a draft row's base is stale (deployed head moved since). */
+		staleOf(key: string): boolean {
+			return staleKeys.has(key)
+		},
+		/** Whether the user may deploy into the session workspace. */
+		get deployPermission(): DeployPermission {
+			return deployPerm
+		},
+		deployRow,
+		discardRow
+	}
+}
+
+export type SessionDeployModel = ReturnType<typeof useSessionDeployModel>
diff --git a/frontend/src/lib/components/sessions/sessionDeployModel.test.ts b/frontend/src/lib/components/sessions/sessionDeployModel.test.ts
new file mode 100644
index 0000000000..7fa4e3cca8
--- /dev/null
+++ b/frontend/src/lib/components/sessions/sessionDeployModel.test.ts
@@ -0,0 +1,232 @@
+import { describe, it, expect } from 'vitest'
+import type { UserDraftItemKind } from '$lib/gen'
+import type { DraftItem } from '$lib/workspaceDrafts.svelte'
+import {
+	buildDeployItems,
+	maskOnlyCandidates,
+	badgeOf,
+	actionFor,
+	diffBaseFor,
+	badgeCounts,
+	deployPlanFor,
+	discardPlanFor
+} from './sessionDeployModel'
+import { maskKey } from './modifiedItemsMask'
+
+// ── Fixtures ────────────────────────────────────────────────────────────────
+
+function draft(kind: UserDraftItemKind, path: string, over: Partial<DraftItem> = {}): DraftItem {
+	return {
+		kind,
+		path,
+		summary: undefined,
+		draft_path: undefined,
+		draft_only: false,
+		legacy_draft: false,
+		raw_app: kind === 'raw_app',
+		can_write: true,
+		draft_users: undefined,
+		mine: true,
+		...over
+	}
+}
+
+// ── buildDeployItems ─────────────────────────────────────────────────────────
+
+describe('buildDeployItems', () => {
+	it('a draft is a live (not done) row carrying the draft flags', () => {
+		const items = buildDeployItems({
+			draftItems: [draft('script', 'u/a/foo', { draft_only: true })]
+		})
+		expect(items).toHaveLength(1)
+		expect(items[0].hasDraft).toBe(true)
+		expect(items[0].done).toBe(false)
+		expect(items[0].draftOnly).toBe(true)
+		expect(items[0].key).toBe(maskKey('script', 'u/a/foo'))
+	})
+
+	it('maps the trigger taxonomy to the deploy kind (trigger_schedule → schedule)', () => {
+		const items = buildDeployItems({ draftItems: [draft('trigger_schedule', 'u/a/sched')] })
+		expect(items[0].deployKind).toBe('schedule')
+		expect(items[0].draftKind).toBe('trigger_schedule')
+	})
+
+	it('maps both email draft kinds to the email_trigger deploy kind', () => {
+		const items = buildDeployItems({
+			draftItems: [draft('trigger_email', 'u/a/em'), draft('trigger_default_email', 'u/a/dem')]
+		})
+		expect(items.map((i) => i.deployKind)).toEqual(['email_trigger', 'email_trigger'])
+	})
+
+	it('mask scopes drafts to touched items', () => {
+		const mask = new Set([maskKey('script', 'u/a/keep')])
+		const items = buildDeployItems({
+			draftItems: [draft('script', 'u/a/keep'), draft('flow', 'u/a/other')],
+			mask
+		})
+		expect(items.map((i) => i.path)).toEqual(['u/a/keep'])
+	})
+
+	it('mask-only entries that still exist surface as terminal deployed rows', () => {
+		const key = maskKey('script', 'u/a/done')
+		const items = buildDeployItems({
+			draftItems: [],
+			mask: new Set([key]),
+			existingKeys: new Set([key])
+		})
+		expect(items).toHaveLength(1)
+		expect(items[0].done).toBe(true)
+		expect(items[0].hasDraft).toBe(false)
+		expect(items[0].path).toBe('u/a/done')
+	})
+
+	it('a mask-only entry that no longer exists (discarded or deleted) is dropped', () => {
+		const key = maskKey('script', 'u/a/gone')
+		// Existence unresolved → no mask-only rows yet.
+		expect(buildDeployItems({ draftItems: [], mask: new Set([key]) })).toHaveLength(0)
+		// Existence resolved to gone → dropped.
+		expect(
+			buildDeployItems({ draftItems: [], mask: new Set([key]), existingKeys: new Set() })
+		).toHaveLength(0)
+	})
+
+	it('a draft covers its mask entry (no duplicate deployed row)', () => {
+		const key = maskKey('script', 'u/a/foo')
+		const items = buildDeployItems({
+			draftItems: [draft('script', 'u/a/foo')],
+			mask: new Set([key]),
+			existingKeys: new Set([key])
+		})
+		expect(items).toHaveLength(1)
+		expect(items[0].hasDraft).toBe(true)
+	})
+
+	it('maskOnlyCandidates returns keys not covered by a draft', () => {
+		const cands = maskOnlyCandidates({
+			draftItems: [draft('script', 'u/a/draft')],
+			mask: new Set([maskKey('script', 'u/a/draft'), maskKey('trigger_schedule', 'u/a/done')])
+		})
+		expect(cands.map((c) => c.key)).toEqual([maskKey('trigger_schedule', 'u/a/done')])
+		expect(cands[0].deployKind).toBe('schedule')
+	})
+
+	it('no mask lists every draft', () => {
+		const items = buildDeployItems({
+			draftItems: [draft('script', 'u/a/x'), draft('flow', 'u/a/y')]
+		})
+		expect(items).toHaveLength(2)
+	})
+})
+
+// ── badge ────────────────────────────────────────────────────────────────────
+
+describe('badgeOf / badgeCounts', () => {
+	it('draft row → draft; deployed row → deployed', () => {
+		const key = maskKey('script', 'u/a/done')
+		const items = buildDeployItems({
+			draftItems: [draft('script', 'u/a/d')],
+			mask: new Set([maskKey('script', 'u/a/d'), key]),
+			existingKeys: new Set([key])
+		})
+		const by = new Map(items.map((i) => [i.path, i]))
+		expect(badgeOf(by.get('u/a/d')!)).toBe('draft')
+		expect(badgeOf(by.get('u/a/done')!)).toBe('deployed')
+		expect(badgeCounts(items)).toEqual({ draft: 1, deployed: 1 })
+	})
+})
+
+// ── action ──────────────────────────────────────────────────────────────────
+
+describe('actionFor', () => {
+	it('draft → Deploy + discard secondary', () => {
+		const [item] = buildDeployItems({ draftItems: [draft('script', 'u/a/f')] })
+		const a = actionFor(item)
+		expect(a.op).toBe('deploy_draft')
+		expect(a.label).toBe('Deploy')
+		expect(a.secondary?.[0].op).toBe('discard')
+	})
+
+	it('draft-only discard is labelled "Discard draft"', () => {
+		const [item] = buildDeployItems({
+			draftItems: [draft('script', 'u/a/f', { draft_only: true })]
+		})
+		expect(actionFor(item).secondary?.[0].label).toBe('Discard draft')
+	})
+
+	it('deployed (done) → op none', () => {
+		const key = maskKey('script', 'u/a/done')
+		const [item] = buildDeployItems({
+			draftItems: [],
+			mask: new Set([key]),
+			existingKeys: new Set([key])
+		})
+		expect(actionFor(item).op).toBe('none')
+	})
+})
+
+// ── diff base ───────────────────────────────────────────────────────────────
+
+describe('diffBaseFor', () => {
+	it('draft row → deployed↔draft base', () => {
+		const [item] = buildDeployItems({
+			draftItems: [draft('script', 'u/a/f', { draft_only: true })]
+		})
+		const b = diffBaseFor(item, 'ws')
+		expect(b.kind).toBe('draft')
+		if (b.kind === 'draft') {
+			expect(b.draftKind).toBe('script')
+			expect(b.draftOnly).toBe(true)
+			expect(b.workspaceId).toBe('ws')
+		}
+	})
+
+	it('deployed row → self base in the session workspace', () => {
+		const key = maskKey('script', 'u/a/done')
+		const [item] = buildDeployItems({
+			draftItems: [],
+			mask: new Set([key]),
+			existingKeys: new Set([key])
+		})
+		const b = diffBaseFor(item, 'ws')
+		expect(b.kind).toBe('self')
+		if (b.kind === 'self') {
+			expect(b.workspaceId).toBe('ws')
+			expect(b.path).toBe('u/a/done')
+		}
+	})
+})
+
+// ── deploy plan ─────────────────────────────────────────────────────────────
+
+describe('deployPlanFor / discardPlanFor', () => {
+	it('draft → deploy_draft carrying rawApp/draftOnly', () => {
+		const [item] = buildDeployItems({
+			draftItems: [draft('raw_app', 'u/a/app', { raw_app: true, draft_only: true })]
+		})
+		const p = deployPlanFor(item)!
+		expect(p.op).toBe('deploy_draft')
+		expect(p.rawApp).toBe(true)
+		expect(p.draftOnly).toBe(true)
+	})
+
+	it('deployed (done) rows have no plan', () => {
+		const key = maskKey('script', 'u/a/done')
+		const [item] = buildDeployItems({
+			draftItems: [],
+			mask: new Set([key]),
+			existingKeys: new Set([key])
+		})
+		expect(item.done).toBe(true)
+		expect(deployPlanFor(item)).toBeUndefined()
+		expect(discardPlanFor(item)).toBeUndefined()
+	})
+
+	it('discardPlanFor carries the legacy flag', () => {
+		const [d] = buildDeployItems({
+			draftItems: [draft('script', 'u/a/f', { legacy_draft: true })]
+		})
+		const p = discardPlanFor(d)!
+		expect(p.op).toBe('discard')
+		expect(p.legacy).toBe(true)
+	})
+})
diff --git a/frontend/src/lib/components/sessions/sessionDeployModel.ts b/frontend/src/lib/components/sessions/sessionDeployModel.ts
new file mode 100644
index 0000000000..173f732132
--- /dev/null
+++ b/frontend/src/lib/components/sessions/sessionDeployModel.ts
@@ -0,0 +1,274 @@
+import type { UserDraftItemKind } from '$lib/gen'
+import type { DraftItem } from '$lib/workspaceDrafts.svelte'
+import type { Kind } from '$lib/utils_deployable'
+import { maskKey } from './modifiedItemsMask'
+
+// Unified item model for the session Review & Deploy surface. This is the pure,
+// UI-free core: every item the session touched is either a pending **draft** or
+// **deployed** in the session workspace (terminal). Deploying always lands in
+// the session's own workspace — promoting a fork's changes to its parent is the
+// compare page's concern, not modeled here.
+//
+// Kept free of Svelte runes and async so it unit-tests in the node project. The
+// reactive wrapper (data loading, deploy execution) lives in the sibling
+// `.svelte.ts` and consumes these functions.
+
+// ── Item taxonomy bridge ────────────────────────────────────────────────────
+// The draft list speaks UserDraftItemKind (`trigger_schedule`, `raw_app`); the
+// deploy utils speak the layout `Kind` (`schedule`, `raw_app`, `http_trigger`).
+// This maps draft→deploy to key deploy calls and row icons. Only non-identity
+// cases listed; everything else is identity.
+const DEPLOY_KIND_BY_DRAFT_KIND: Partial<Record<UserDraftItemKind, Kind>> = {
+	trigger_schedule: 'schedule',
+	trigger_http: 'http_trigger',
+	trigger_websocket: 'websocket_trigger',
+	trigger_kafka: 'kafka_trigger',
+	trigger_nats: 'nats_trigger',
+	trigger_postgres: 'postgres_trigger',
+	trigger_mqtt: 'mqtt_trigger',
+	trigger_sqs: 'sqs_trigger',
+	trigger_gcp: 'gcp_trigger',
+	trigger_azure: 'azure_trigger',
+	// Both email draft kinds deploy as the one email trigger kind: the editor
+	// saves per-path email-trigger drafts as `trigger_email`, the fork diff
+	// speaks `trigger_default_email`.
+	trigger_default_email: 'email_trigger',
+	trigger_email: 'email_trigger',
+	raw_app: 'raw_app'
+}
+
+function deployKindOf(draftKind: UserDraftItemKind, rawApp: boolean): Kind {
+	if (rawApp) return 'raw_app'
+	return DEPLOY_KIND_BY_DRAFT_KIND[draftKind] ?? (draftKind as unknown as Kind)
+}
+
+// ── Public types ────────────────────────────────────────────────────────────
+
+export interface DeployItem {
+	/** Canonical identity `${UserDraftItemKind}:${path}`. */
+	key: string
+	/** Layout/deploy kind (script, flow, raw_app, http_trigger, schedule…). */
+	deployKind: Kind
+	/** UserDraftItemKind for draft ops. */
+	draftKind: UserDraftItemKind
+	path: string
+	/** Friendly path for display; storage `path` stays the op/edit key. */
+	displayPath: string
+	summary?: string
+	/** Deployed with no pending draft — the terminal state. */
+	done: boolean
+	hasDraft: boolean
+	draftOnly: boolean
+	draftUsers?: { username?: string | null }[]
+	/** Own draft (deployable/discardable). */
+	mine: boolean
+	canWrite: boolean
+	/** Legacy workspace-level draft (drives discard's `legacy` flag). */
+	legacy: boolean
+	rawApp: boolean
+}
+
+export interface BuildInput {
+	draftItems: DraftItem[]
+	/** Chat-modified-items mask (`UserDraftItemKind:path`). When set, only masked
+	 *  items are included, and mask-only entries (no draft) surface as terminal
+	 *  deployed rows — but only when confirmed to still exist (see `existingKeys`). */
+	mask?: Set<string>
+	/** Mask keys confirmed to still exist in the workspace (deployed). A mask-only
+	 *  key that isn't here is treated as gone (a discarded draft or a deleted item)
+	 *  and dropped, so it doesn't masquerade as deployed. Undefined → no mask-only
+	 *  rows are emitted yet (existence still resolving). */
+	existingKeys?: Set<string>
+}
+
+// ── Build: draft list + mask-only deployed rows into unified items ──────────
+
+export function buildDeployItems(input: BuildInput): DeployItem[] {
+	const { draftItems, mask, existingKeys } = input
+	const scopedDrafts = mask
+		? draftItems.filter((it) => mask.has(maskKey(it.kind, it.path)))
+		: draftItems
+
+	const out: DeployItem[] = []
+	const seen = new Set<string>()
+
+	// 1. Pending drafts.
+	for (const it of scopedDrafts) {
+		const canonical = maskKey(it.kind, it.path)
+		if (seen.has(canonical)) continue
+		seen.add(canonical)
+		out.push({
+			key: canonical,
+			deployKind: deployKindOf(it.kind, it.raw_app),
+			draftKind: it.kind,
+			path: it.path,
+			displayPath: it.draft_path ?? it.path,
+			summary: it.summary,
+			done: false,
+			hasDraft: true,
+			draftOnly: it.draft_only,
+			draftUsers: it.draft_users,
+			mine: it.mine,
+			canWrite: it.can_write,
+			legacy: it.legacy_draft,
+			rawApp: it.raw_app
+		})
+	}
+
+	// 2. Mask-only items (touched by the chat, no pending draft) → terminal
+	//    deployed rows, but ONLY when confirmed to still exist. A discarded draft
+	//    or a deleted item leaves a mask entry with no item; without this guard it
+	//    would masquerade as deployed.
+	if (mask) {
+		for (const k of mask) {
+			if (seen.has(k)) continue
+			if (!existingKeys?.has(k)) continue
+			const sep = k.indexOf(':')
+			if (sep < 0) continue
+			const udk = k.slice(0, sep) as UserDraftItemKind
+			const path = k.slice(sep + 1)
+			seen.add(k)
+			out.push({
+				key: k,
+				deployKind: deployKindOf(udk, udk === 'raw_app'),
+				draftKind: udk,
+				path,
+				displayPath: path,
+				summary: undefined,
+				done: true,
+				hasDraft: false,
+				draftOnly: false,
+				draftUsers: undefined,
+				mine: true,
+				canWrite: true,
+				legacy: false,
+				rawApp: udk === 'raw_app'
+			})
+		}
+	}
+
+	return out
+}
+
+/** Mask keys not covered by a current draft — the candidates for a terminal
+ *  deployed row. The reactive layer existence-checks these (in the session
+ *  workspace) to tell a deployed item from a discarded/deleted one, then feeds
+ *  the survivors back as `existingKeys`. */
+export function maskOnlyCandidates(
+	input: Omit<BuildInput, 'existingKeys'>
+): { key: string; deployKind: Kind; draftKind: UserDraftItemKind; path: string }[] {
+	const { draftItems, mask } = input
+	if (!mask) return []
+	const covered = new Set<string>()
+	for (const it of draftItems) {
+		const k = maskKey(it.kind, it.path)
+		if (mask.has(k)) covered.add(k)
+	}
+	const out: { key: string; deployKind: Kind; draftKind: UserDraftItemKind; path: string }[] = []
+	for (const k of mask) {
+		if (covered.has(k)) continue
+		const sep = k.indexOf(':')
+		if (sep < 0) continue
+		const udk = k.slice(0, sep) as UserDraftItemKind
+		const path = k.slice(sep + 1)
+		out.push({ key: k, draftKind: udk, deployKind: deployKindOf(udk, udk === 'raw_app'), path })
+	}
+	return out
+}
+
+// ── Status badge ─────────────────────────────────────────────────────────────
+
+export type BadgeKind = 'draft' | 'deployed'
+
+/** The single status badge a row shows: a pending draft, or deployed (green,
+ *  terminal). Every built row is one of the two. */
+export function badgeOf(item: DeployItem): BadgeKind {
+	return item.done ? 'deployed' : 'draft'
+}
+
+/** Per-status tallies over `badgeOf` — the bar's at-a-glance readout, so its
+ *  counts always agree with the badges the drawer rows show. */
+export function badgeCounts(items: DeployItem[]): Record<BadgeKind, number> {
+	const out: Record<BadgeKind, number> = { draft: 0, deployed: 0 }
+	for (const it of items) out[badgeOf(it)]++
+	return out
+}
+
+// ── Action ──────────────────────────────────────────────────────────────────
+
+export type DeployOp = 'deploy_draft' | 'discard' | 'none'
+
+export interface DeployAction {
+	op: DeployOp
+	label: string
+	secondary?: DeployAction[]
+}
+
+/** The primary (and secondary) action for a row: a draft deploys into the
+ *  session workspace, a deployed row has nothing left to do. */
+export function actionFor(item: DeployItem): DeployAction {
+	if (item.done) return { op: 'none', label: 'Done' }
+	return {
+		op: 'deploy_draft',
+		label: 'Deploy',
+		secondary: [{ op: 'discard', label: item.draftOnly ? 'Discard draft' : 'Discard' }]
+	}
+}
+
+// ── Diff base ───────────────────────────────────────────────────────────────
+
+export type DiffBase =
+	| { kind: 'draft'; draftKind: UserDraftItemKind; workspaceId: string; draftOnly: boolean }
+	| { kind: 'self'; deployKind: Kind; path: string; workspaceId: string }
+
+/** Where a row's before/after diff values come from. A draft row diffs
+ *  deployed↔draft; a deployed row has nothing to diff but its value is still
+ *  loadable (`self`) — the sidebar unwraps a deployed raw app into its files.
+ *  The executor maps this to getDraftDiffValues / getItemValue. */
+export function diffBaseFor(item: DeployItem, workspaceId: string): DiffBase {
+	if (item.hasDraft) {
+		return { kind: 'draft', draftKind: item.draftKind, workspaceId, draftOnly: item.draftOnly }
+	}
+	return { kind: 'self', deployKind: item.deployKind, path: item.path, workspaceId }
+}
+
+// ── Deploy plan (executed by the reactive layer) ─────────────────────────────
+
+export interface DeployPlanEntry {
+	key: string
+	op: Exclude<DeployOp, 'none'>
+	draftKind: UserDraftItemKind
+	path: string
+	draftOnly: boolean
+	rawApp: boolean
+	legacy: boolean
+}
+
+/** Concrete util arguments for deploying one item's draft into the session
+ *  workspace. Returns undefined for deployed (terminal) rows. Mirrors actionFor. */
+export function deployPlanFor(item: DeployItem): DeployPlanEntry | undefined {
+	if (!item.hasDraft) return undefined
+	return {
+		key: item.key,
+		op: 'deploy_draft',
+		draftKind: item.draftKind,
+		path: item.path,
+		draftOnly: item.draftOnly,
+		rawApp: item.rawApp,
+		legacy: item.legacy
+	}
+}
+
+/** Discard plan for a draft row (secondary action). */
+export function discardPlanFor(item: DeployItem): DeployPlanEntry | undefined {
+	if (!item.hasDraft) return undefined
+	return {
+		key: item.key,
+		op: 'discard',
+		draftKind: item.draftKind,
+		path: item.path,
+		draftOnly: item.draftOnly,
+		rawApp: item.rawApp,
+		legacy: item.legacy
+	}
+}
diff --git a/frontend/src/lib/components/sessions/sessionRuntime.svelte.ts b/frontend/src/lib/components/sessions/sessionRuntime.svelte.ts
index f8a9e1045d..a1aa92cbdc 100644
--- a/frontend/src/lib/components/sessions/sessionRuntime.svelte.ts
+++ b/frontend/src/lib/components/sessions/sessionRuntime.svelte.ts
@@ -7,12 +7,10 @@ import {
 	AppService,
 	FlowService,
 	ScriptService,
-	WorkspaceService,
 	type Flow,
 	type NewScript,
 	type Script,
-	type UserDraftOverlay,
-	type WorkspaceComparison
+	type UserDraftOverlay
 } from '$lib/gen'
 
 // `get_draft=true` does NOT merge: the top-level fields stay the deployed
@@ -141,37 +139,13 @@ export interface SessionRuntime {
 	requestRuntimeLogs(limit: number): Promise<RawAppRuntimeLogEntry[] | undefined>
 	setAppRunsProvider(provider: RawAppRunsProvider | undefined): void
 	getAppRuns(): RawAppRunSummary[] | undefined
-	// Discard the local draft + refresh the fork diff + force-reload the editor,
-	// so the preview matches the deployed version. Used by editor onDeploy + the
-	// chat deploy handler.
+	// Discard the local draft + force-reload the editor, so the preview matches
+	// the deployed version. Used by editor onDeploy + the chat deploy handler.
 	syncPreviewWithDeployed(
 		workspace: string,
 		kind: 'script' | 'flow' | 'raw_app',
 		path: string
 	): void
-	// Fork comparison cache: shared between SessionForkBar (count + dropdown)
-	// and any future consumer that needs the parent ↔ fork diff list. Keyed
-	// implicitly by the (parent, fork) pair last passed to ensureForkComparison;
-	// invalidateForkComparison() forces a refresh after a known-mutating action.
-	readonly forkComparison: { val: WorkspaceComparison | undefined }
-	readonly loadingForkComparison: boolean
-	ensureForkComparison(parent: string, fork: string): Promise<void>
-	invalidateForkComparison(): void
-	// Force-refresh against the last (parent, fork) pair the runtime
-	// fetched for. No-op if no comparison has ever been loaded. Useful
-	// for session-activation hooks that need a fresh count regardless of
-	// the dedupe key match.
-	refreshForkComparison(): Promise<void>
-	// Re-fetch the comparison shortly after a local mutation (e.g. an
-	// editor "Save draft"). The backend tally that registers the change
-	// lands asynchronously, so an immediate refresh races it — this
-	// schedules a couple of delayed refreshes so the fork-bar count
-	// updates without waiting for an AI turn or a tab refocus.
-	scheduleForkComparisonRefresh(): void
-	// Cancel pending fork-comparison refresh timers. Called by disposeRuntime so
-	// a torn-down (e.g. LRU-evicted, deleted) runtime can't fire a stray
-	// refreshForkComparisonNow / compareWorkspaces after it's gone.
-	dispose(): void
 }
 
 const runtimes = new SvelteMap<string, SessionRuntime>()
@@ -320,34 +294,6 @@ function createRuntime(session: Session): SessionRuntime {
 	let runtimeLogRequester: RawAppRuntimeLogRequester | undefined = undefined
 	let appRunsProvider: RawAppRunsProvider | undefined = undefined
 
-	const forkComparison: { val: WorkspaceComparison | undefined } = $state({ val: undefined })
-	let loadingForkComparison = $state(false)
-	let forkComparisonKey: string | undefined = undefined
-	let forkRefreshTimers: ReturnType<typeof setTimeout>[] = []
-
-	// Stale-while-revalidate re-fetch against the last (parent, fork) pair.
-	// Shared by refreshForkComparison() and scheduleForkComparisonRefresh().
-	async function refreshForkComparisonNow() {
-		const key = forkComparisonKey
-		if (!key) return
-		const sep = key.indexOf('|')
-		if (sep < 0) return
-		const parent = key.slice(0, sep)
-		const fork = key.slice(sep + 1)
-		if (loadingForkComparison) return
-		loadingForkComparison = true
-		try {
-			forkComparison.val = await WorkspaceService.compareWorkspaces({
-				workspace: parent,
-				targetWorkspaceId: fork
-			})
-		} catch (e) {
-			console.error('SessionRuntime: forkComparison refresh failed', e)
-		} finally {
-			loadingForkComparison = false
-		}
-	}
-
 	return {
 		sessionId: session.id,
 		manager,
@@ -645,7 +591,6 @@ function createRuntime(session: Session): SessionRuntime {
 		},
 
 		syncPreviewWithDeployed(workspace, kind, path) {
-			this.scheduleForkComparisonRefresh()
 			// After deploy the editor state equals the deployed value; the reload
 			// below re-seeds the cell from it, which must NOT POST as a fresh draft.
 			// The full-page editor guards this with discardDraftAfterDeploy, but the
@@ -671,63 +616,6 @@ function createRuntime(session: Session): SessionRuntime {
 		},
 		getAppRuns() {
 			return appRunsProvider ? appRunsProvider() : undefined
-		},
-
-		forkComparison,
-		get loadingForkComparison() {
-			return loadingForkComparison
-		},
-
-		async ensureForkComparison(parent: string, fork: string) {
-			const key = `${parent}|${fork}`
-			if (forkComparisonKey === key && forkComparison.val) return
-			if (loadingForkComparison && forkComparisonKey === key) return
-			forkComparisonKey = key
-			loadingForkComparison = true
-			try {
-				forkComparison.val = await WorkspaceService.compareWorkspaces({
-					workspace: parent,
-					targetWorkspaceId: fork
-				})
-			} catch (e) {
-				console.error('SessionRuntime: forkComparison fetch failed', e)
-				forkComparison.val = undefined
-				// On error, clear the key so the next call retries.
-				if (forkComparisonKey === key) forkComparisonKey = undefined
-			} finally {
-				loadingForkComparison = false
-			}
-		},
-
-		invalidateForkComparison() {
-			forkComparisonKey = undefined
-			forkComparison.val = undefined
-		},
-
-		// Stale-while-revalidate: re-fetch in place so the cached status
-		// (driving the sidebar dot, fork bar, etc.) stays put until the new
-		// result lands. Clearing forkComparison.val here flickered the icon
-		// back to the neutral GitFork on every session-activate refresh.
-		refreshForkComparison() {
-			return refreshForkComparisonNow()
-		},
-
-		scheduleForkComparisonRefresh() {
-			// The backend fork tally registers a draft save (createScript
-			// draft_only / DraftService.createDraft) asynchronously — ~300ms
-			// after the API call returns — so an immediate refresh races it.
-			// Fetch once after the tally typically lands, then again as a
-			// backstop for slower backends. Coalesce rapid saves by clearing
-			// any still-pending timers first.
-			for (const t of forkRefreshTimers) clearTimeout(t)
-			forkRefreshTimers = [
-				setTimeout(() => void refreshForkComparisonNow(), 700),
-				setTimeout(() => void refreshForkComparisonNow(), 2200)
-			]
-		},
-		dispose() {
-			for (const t of forkRefreshTimers) clearTimeout(t)
-			forkRefreshTimers = []
 		}
 	}
 }
@@ -741,11 +629,21 @@ async function initRuntime(runtime: SessionRuntime, session: Session) {
 	await manager.attachedFiles.restore(session.id, !session.transient)
 	await ensureChatIdsSeeded(manager.historyManager)
 
+	// Keep the session record's chatId following the manager's active chat: a
+	// "/clear" rotation or a history switch would otherwise leave it pointing at
+	// the previous chat, and the compare-page handoff (`from_session`) would
+	// preselect the wrong chat's items.
+	manager.onChatRotated = (chatId) => setSessionChatId(session.id, chatId)
+
 	if (session.chatId) {
 		manager.historyManager.setCurrentChatId(session.chatId)
 		await manager.historyManager.tagChatWithSession(session.chatId, session.id)
 		await manager.loadPastChat(session.chatId)
 	} else {
+		// Brand-new session chat: start tracking modified items now (empty mask)
+		// so the session bar filters to this chat's changes from the first turn.
+		// (loadPastChat handles seeding for the existing-chat branch above.)
+		manager.initModifiedItemsTracking()
 		setSessionChatId(session.id, manager.historyManager.getCurrentChatId())
 	}
 }
@@ -763,7 +661,6 @@ export function getOrCreateRuntime(session: Session): SessionRuntime {
 export function disposeRuntime(sessionId: string) {
 	const runtime = runtimes.get(sessionId)
 	if (!runtime) return
-	runtime.dispose()
 	runtime.manager.cancel('runtime disposed')
 	runtime.manager.historyManager.close()
 	runtimes.delete(sessionId)
diff --git a/frontend/src/lib/components/sessions/sessionState.svelte.ts b/frontend/src/lib/components/sessions/sessionState.svelte.ts
index 4d976a163f..a4ce0d0853 100644
--- a/frontend/src/lib/components/sessions/sessionState.svelte.ts
+++ b/frontend/src/lib/components/sessions/sessionState.svelte.ts
@@ -32,7 +32,7 @@ export function syncWorkspaceTo(workspaceId: string | undefined): void {
 	if (workspaceId === get(workspaceStore)) return
 	switchWorkspace(workspaceId)
 }
-import { WorkspaceService, type WorkspaceComparison } from '$lib/gen'
+import { WorkspaceService } from '$lib/gen'
 import { sendUserToast } from '$lib/toast'
 import type HistoryManager from '$lib/components/copilot/chat/HistoryManager.svelte'
 import { onUserChange } from '$lib/userScopedStorage'
@@ -52,23 +52,9 @@ export const EDITOR_TARGET_KINDS: ReadonlySet<SessionTarget['kind']> = new Set([
 	'pipeline'
 ])
 
-// Lifecycle status for a fork session. Git-parallel:
-//   in_sync     — fork is up to date with parent (or only behind — treated
-//                 the same since the user has no unmerged work either way).
-//   ahead       — fork has unmerged changes vs parent (branch ahead).
-//   diverged    — fork has unmerged changes AND parent has moved (branch
-//                 diverged from upstream — potential conflicts).
-//   unavailable — fork workspace is no longer in the user's list (deleted,
-//                 archived, or access revoked). Read-only fallback.
-//
-// `undefined` is the loading / not-applicable state (root session,
-// comparison not yet fetched).
-export type ForkStatus = 'in_sync' | 'ahead' | 'diverged' | 'unavailable'
-
 // Whether the session points at a workspace that is itself a fork (i.e.
-// has a parent). Independent of comparison-fetch state — used by the
-// sidebar to pick between a root (Building) icon and a fork-status icon
-// before the comparison has loaded.
+// has a parent). Used by the sidebar to pick between a root (Building)
+// icon and a fork icon.
 //
 // Sessions whose committed workspace is no longer in the user's list are
 // still treated as forks (the "unavailable" terminal state) so we don't
@@ -81,29 +67,6 @@ export function isForkSession(session: Session, allWorkspaces: UserWorkspace[]):
 	return !!ws.parent_workspace_id
 }
 
-export function deriveForkStatus(
-	session: Session,
-	allWorkspaces: UserWorkspace[],
-	comparison: WorkspaceComparison | undefined
-): ForkStatus | undefined {
-	const wsId = session.workspace_id ?? session.pending_workspace_id
-	if (!wsId) return undefined
-	const ws = allWorkspaces.find((w) => w.id === wsId)
-	// Committed fork workspaces that disappear from the user's list
-	// (deleted, archived, or access lost) are flagged unavailable so
-	// the UI can render a terminal state without trying to switch into
-	// them. Drafts whose pending workspace also vanished get the same
-	// treatment.
-	if (!ws) return session.workspace_id ? 'unavailable' : undefined
-	if (!ws.parent_workspace_id) return undefined
-	if (!comparison) return undefined
-	const ahead = comparison.summary?.total_ahead ?? 0
-	const behind = comparison.summary?.total_behind ?? 0
-	if (ahead > 0 && behind > 0) return 'diverged'
-	if (ahead > 0) return 'ahead'
-	return 'in_sync'
-}
-
 export type PendingFork = {
 	// Existing workspace to fork from (drives routing/scope pre-send).
 	parent_workspace_id: string
diff --git a/frontend/src/lib/components/sessions/sessionState.test.ts b/frontend/src/lib/components/sessions/sessionState.test.ts
index 851ab27153..d81d797737 100644
--- a/frontend/src/lib/components/sessions/sessionState.test.ts
+++ b/frontend/src/lib/components/sessions/sessionState.test.ts
@@ -3,7 +3,6 @@ import { get } from 'svelte/store'
 import {
 	commitSessionWorkspace,
 	decideSessionLifecycle,
-	deriveForkStatus,
 	isForkSession,
 	renameSession,
 	setGeneratedSessionSummary,
@@ -16,7 +15,7 @@ import {
 	workspaceStore,
 	type UserWorkspace
 } from '$lib/stores'
-import { WorkspaceService, type WorkspaceComparison } from '$lib/gen'
+import { WorkspaceService } from '$lib/gen'
 
 // Force createWorkspaceFork to fail so we can pin commitSessionWorkspace's
 // failure contract (the invariant the beforeSend abort fix relies on).
@@ -40,9 +39,6 @@ function session(over: Partial<Session> = {}): Session {
 function ws(id: string, parent?: string): UserWorkspace {
 	return { id, name: id, parent_workspace_id: parent } as unknown as UserWorkspace
 }
-function comparison(total_ahead: number, total_behind: number): WorkspaceComparison {
-	return { summary: { total_ahead, total_behind } } as unknown as WorkspaceComparison
-}
 
 describe('isForkSession', () => {
 	it('is false for a draft with no workspace at all', () => {
@@ -72,60 +68,6 @@ describe('isForkSession', () => {
 	})
 })
 
-describe('deriveForkStatus', () => {
-	it('is undefined for a draft with no workspace', () => {
-		expect(deriveForkStatus(session(), [], undefined)).toBeUndefined()
-	})
-
-	it('is unavailable when a committed workspace is no longer in the list', () => {
-		expect(deriveForkStatus(session({ workspace_id: 'gone' }), [], comparison(0, 0))).toBe(
-			'unavailable'
-		)
-	})
-
-	it('is undefined when a draft pending workspace is missing (not yet committed)', () => {
-		expect(
-			deriveForkStatus(session({ pending_workspace_id: 'gone' }), [], undefined)
-		).toBeUndefined()
-	})
-
-	it('is undefined for a non-fork (root) workspace', () => {
-		expect(
-			deriveForkStatus(session({ workspace_id: 'root' }), [ws('root')], comparison(3, 3))
-		).toBeUndefined()
-	})
-
-	it('is undefined for a fork before the comparison has loaded', () => {
-		expect(
-			deriveForkStatus(session({ workspace_id: 'fork' }), [ws('fork', 'root')], undefined)
-		).toBeUndefined()
-	})
-
-	it('is diverged when the fork is both ahead and behind', () => {
-		expect(
-			deriveForkStatus(session({ workspace_id: 'fork' }), [ws('fork', 'root')], comparison(2, 1))
-		).toBe('diverged')
-	})
-
-	it('is ahead when the fork has unmerged changes and the parent has not moved', () => {
-		expect(
-			deriveForkStatus(session({ workspace_id: 'fork' }), [ws('fork', 'root')], comparison(2, 0))
-		).toBe('ahead')
-	})
-
-	it('is in_sync when neither side is ahead', () => {
-		expect(
-			deriveForkStatus(session({ workspace_id: 'fork' }), [ws('fork', 'root')], comparison(0, 0))
-		).toBe('in_sync')
-	})
-
-	it('is in_sync when only the parent moved (behind-only, fork has no local changes)', () => {
-		expect(
-			deriveForkStatus(session({ workspace_id: 'fork' }), [ws('fork', 'root')], comparison(0, 2))
-		).toBe('in_sync')
-	})
-})
-
 describe('commitSessionWorkspace — fork-creation failure', () => {
 	it('returns undefined and drops pending_fork (so beforeSend aborts the send)', async () => {
 		const id = 'test-commit-fork-fail'
@@ -351,9 +293,12 @@ describe('decideSessionLifecycle — the never-orphaned rule (pure)', () => {
 	})
 
 	it('active workspace → unarchive only the ones WE archived (archivedByWorkspace)', () => {
-		expect(decideSessionLifecycle(mk({ archived: true, archivedByWorkspace: true }), 'active')).toEqual(
-			{ action: 'unarchive', patch: { archived: undefined, archivedByWorkspace: undefined } }
-		)
+		expect(
+			decideSessionLifecycle(mk({ archived: true, archivedByWorkspace: true }), 'active')
+		).toEqual({
+			action: 'unarchive',
+			patch: { archived: undefined, archivedByWorkspace: undefined }
+		})
 		// user-archived (no archivedByWorkspace flag) is left alone
 		expect(decideSessionLifecycle(mk({ archived: true }), 'active')).toEqual({ action: 'noop' })
 		expect(decideSessionLifecycle(mk(), 'active')).toEqual({ action: 'noop' })
diff --git a/frontend/src/lib/utils_draft_deploy.test.ts b/frontend/src/lib/utils_draft_deploy.test.ts
new file mode 100644
index 0000000000..bae50691cc
--- /dev/null
+++ b/frontend/src/lib/utils_draft_deploy.test.ts
@@ -0,0 +1,40 @@
+import { describe, it, expect } from 'vitest'
+import { draftBaseIsStale } from './utils_draft_deploy'
+
+// draftBaseIsStale compares a draft's base pointer against the deployed head
+// of the item it was fetched with (`get_draft=true`). Shared by CompareDrafts
+// and the session Edits drawer — a regression here silently hides (or
+// fabricates) the "started from an older deployed version" warning.
+
+describe('draftBaseIsStale', () => {
+	it('script: stale iff the draft parent_hash differs from the deployed hash', () => {
+		expect(draftBaseIsStale('script', { hash: 'v2', draft: { parent_hash: 'v1' } })).toBe(true)
+		expect(draftBaseIsStale('script', { hash: 'v2', draft: { parent_hash: 'v2' } })).toBe(false)
+	})
+
+	it('script: no base pointer or no head → not stale (nothing to compare)', () => {
+		expect(draftBaseIsStale('script', { hash: 'v2', draft: {} })).toBe(false)
+		expect(draftBaseIsStale('script', { draft: { parent_hash: 'v1' } })).toBe(false)
+	})
+
+	it('flow: compares the pinned version_id against the deployed head', () => {
+		expect(draftBaseIsStale('flow', { version_id: 7, draft: { version_id: 5 } })).toBe(true)
+		expect(draftBaseIsStale('flow', { version_id: 7, draft: { version_id: 7 } })).toBe(false)
+		expect(draftBaseIsStale('flow', { version_id: 7, draft: {} })).toBe(false)
+	})
+
+	it('app/raw_app: compares parent_version against the last of versions', () => {
+		expect(draftBaseIsStale('app', { versions: [1, 2, 3], draft: { parent_version: 2 } })).toBe(
+			true
+		)
+		expect(draftBaseIsStale('raw_app', { versions: [1, 2, 3], draft: { parent_version: 3 } })).toBe(
+			false
+		)
+		expect(draftBaseIsStale('app', { versions: [], draft: { parent_version: 2 } })).toBe(false)
+	})
+
+	it('no draft on the response → not stale', () => {
+		expect(draftBaseIsStale('script', { hash: 'v2' })).toBe(false)
+		expect(draftBaseIsStale('script', undefined)).toBe(false)
+	})
+})
diff --git a/frontend/src/lib/utils_draft_deploy.ts b/frontend/src/lib/utils_draft_deploy.ts
index 2b08b379cf..ee8538e4db 100644
--- a/frontend/src/lib/utils_draft_deploy.ts
+++ b/frontend/src/lib/utils_draft_deploy.ts
@@ -262,6 +262,56 @@ export async function getDraftDiffValues(
 	}
 }
 
+/**
+ * Whether a draft's base is stale: the deployed version the draft forked from
+ * no longer matches the current deployed head — a newer version was deployed
+ * after the draft began, so deploying the draft would silently revert it.
+ * Scripts compare the draft's `parent_hash` vs the deployed `hash`; flows the
+ * pinned `version_id` vs the deployed head `version_id`; apps (incl. raw) the
+ * pinned `parent_version` vs the head of `versions`. `r` is the item fetched
+ * with `get_draft=true`; only script/flow/app kinds carry a base pointer.
+ */
+export function draftBaseIsStale(draftKind: UserDraftItemKind, r: any): boolean {
+	const draft = r?.draft
+	if (!draft) return false
+	if (draftKind === 'script') {
+		return !!r.hash && !!draft.parent_hash && draft.parent_hash !== r.hash
+	}
+	if (draftKind === 'flow') {
+		return r.version_id != null && draft.version_id != null && draft.version_id !== r.version_id
+	}
+	const head = Array.isArray(r.versions) ? r.versions[r.versions.length - 1] : undefined
+	return head != null && draft.parent_version != null && draft.parent_version !== head
+}
+
+/** Fetch-and-test wrapper over `draftBaseIsStale` for one draft item. Returns
+ *  false for kinds without a base pointer and on fetch errors (warn, not block). */
+export async function fetchDraftBaseStale(
+	draftKind: UserDraftItemKind,
+	path: string,
+	workspace: string
+): Promise<boolean> {
+	try {
+		if (draftKind === 'script') {
+			const r = await ScriptService.getScriptByPath({ workspace, path, getDraft: true })
+			return draftBaseIsStale(draftKind, r)
+		}
+		if (draftKind === 'flow') {
+			const r = await FlowService.getFlowByPath({ workspace, path, getDraft: true })
+			return draftBaseIsStale(draftKind, r)
+		}
+		if (draftKind === 'app' || draftKind === 'raw_app') {
+			// The apps endpoint auto-detects a raw app and overlays its draft.
+			const r = await AppService.getAppByPath({ workspace, path, getDraft: true })
+			return draftBaseIsStale(draftKind, r)
+		}
+		return false
+	} catch (e) {
+		console.error(`Stale-draft check failed for ${draftKind}:${path}`, e)
+		return false
+	}
+}
+
 /**
  * Deploy a script/flow draft's trigger changes the same way the editors do.
  * Scripts and flows can carry `draft_triggers`; the create/update call below
diff --git a/frontend/src/lib/utils_workspace_deploy.ts b/frontend/src/lib/utils_workspace_deploy.ts
index bde0003882..112ed69e17 100644
--- a/frontend/src/lib/utils_workspace_deploy.ts
+++ b/frontend/src/lib/utils_workspace_deploy.ts
@@ -14,9 +14,14 @@ import {
 	ScheduleService,
 	ScriptService,
 	SqsTriggerService,
+	UserService,
 	VariableService,
 	WebsocketTriggerService
 } from '$lib/gen'
+import {
+	fetchProtectionRulesForWorkspace,
+	canUserBypassRuleKindInRulesets
+} from '$lib/workspaceProtectionRules.svelte'
 import {
 	existsTrigger,
 	getTriggersDeployData,
@@ -382,3 +387,42 @@ export async function getOnBehalfOf(
 	}
 	return sharedGetOnBehalfOf(makeProvider(), kind as DeployKind, path, workspace)
 }
+
+export type DeployPermission = { ok: boolean; reason?: string }
+
+/**
+ * Whether the current user may deploy into `workspace`. Mirrors the server-side
+ * deploy authorization (`check_user_against_rule` in windmill-common) so the UI
+ * can disable the action with a reason instead of letting the click 403:
+ *  - operators can never deploy;
+ *  - when the `RestrictDeployToDeployers` protection rule is active, only
+ *    admins, `wm_deployers` members (implicitly), and per-ruleset bypass
+ *    users/groups may deploy.
+ * Fails open on any error — the server still enforces on the actual deploy.
+ * Shared by the session dock and the compare page so both gate identically.
+ */
+export async function checkDeployPermission(workspace: string): Promise<DeployPermission> {
+	try {
+		const me = await UserService.whoami({ workspace })
+		if (me.operator) {
+			return { ok: false, reason: "You're an operator in this workspace — operators can't deploy" }
+		}
+		// Admins and wm_deployers members always satisfy RestrictDeployToDeployers
+		// (the backend allows wm_deployers implicitly, so check it before the
+		// per-ruleset bypass_users/bypass_groups fallback).
+		const isDeployer = me.is_admin || (me.groups ?? []).includes('wm_deployers')
+		if (!isDeployer) {
+			const rulesets = await fetchProtectionRulesForWorkspace(workspace)
+			const userInfo = { is_admin: !!me.is_admin, username: me.username, groups: me.groups ?? [] }
+			if (!canUserBypassRuleKindInRulesets(rulesets, 'RestrictDeployToDeployers', userInfo)) {
+				return {
+					ok: false,
+					reason: 'Only workspace admins and members of wm_deployers can deploy here'
+				}
+			}
+		}
+		return { ok: true }
+	} catch {
+		return { ok: true }
+	}
+}
diff --git a/frontend/src/lib/workspaceProtectionRules.svelte.ts b/frontend/src/lib/workspaceProtectionRules.svelte.ts
index fa9627ba02..1774ed60e2 100644
--- a/frontend/src/lib/workspaceProtectionRules.svelte.ts
+++ b/frontend/src/lib/workspaceProtectionRules.svelte.ts
@@ -1,6 +1,11 @@
 import { WorkspaceService, type ProtectionRuleset, type ProtectionRuleKind } from './gen'
 import type { UserExt } from './stores'
 
+// The slice of the user identity the bypass checks read — structural, so
+// callers can pass a whoami response (normalised groups) as well as the
+// UserExt store value.
+export type RuleBypassUser = Pick<UserExt, 'is_admin' | 'username' | 'groups'>
+
 /**
  * Internal reactive state using Svelte 5 $state rune
  */
@@ -94,7 +99,7 @@ export async function fetchProtectionRulesForWorkspace(
  * @param userInfo The user information
  * @returns true if user can bypass (is admin, in bypass_users, or has group in bypass_groups)
  */
-export function canUserBypassRule(ruleset: ProtectionRuleset, userInfo: UserExt): boolean {
+export function canUserBypassRule(ruleset: ProtectionRuleset, userInfo: RuleBypassUser): boolean {
 	// Admin always bypasses
 	if (userInfo.is_admin) {
 		return true
@@ -134,7 +139,7 @@ export function isRuleActive(ruleKind: ProtectionRuleKind): boolean {
  */
 export function canUserBypassRuleKind(
 	ruleKind: ProtectionRuleKind,
-	userInfo: UserExt | undefined
+	userInfo: RuleBypassUser | undefined
 ): boolean {
 	// If no user info, default to permissive
 	if (!userInfo) {
@@ -187,7 +192,7 @@ export function isRuleActiveInRulesets(
 export function canUserBypassRuleKindInRulesets(
 	rulesets: ProtectionRuleset[],
 	ruleKind: ProtectionRuleKind,
-	userInfo: UserExt | undefined
+	userInfo: RuleBypassUser | undefined
 ): boolean {
 	// If no user info, default to not allowing bypass
 	if (!userInfo) {
diff --git a/frontend/src/routes/(root)/(logged)/forks/compare/+page.svelte b/frontend/src/routes/(root)/(logged)/forks/compare/+page.svelte
index b521cf8dc5..6670be1225 100644
--- a/frontend/src/routes/(root)/(logged)/forks/compare/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/forks/compare/+page.svelte
@@ -19,6 +19,7 @@
 	import { sendUserToast } from '$lib/toast'
 	import { switchWorkspace } from '$lib/storeUtils'
 	import { goto } from '$lib/navigation'
+	import { readChatModifiedItems } from '$lib/components/copilot/chat/HistoryManager.svelte'
 
 	type CompareMode = 'fork' | 'draft'
 
@@ -48,6 +49,37 @@
 	// selection here; the page only swaps which comparison component is shown.
 	let forkDirection = $state<'deploy_to' | 'update'>('deploy_to')
 
+	// When reached via a session's Review button (`from_session=<chatId>`), preselect
+	// only the items that chat modified. The mask is the chat's stored
+	// `${UserDraftItemKind}:${storagePath}` set; undefined for a legacy chat (no
+	// stored mask) → the children fall back to selecting all deployable items.
+	// Derived from the live URL: an in-app navigation to this route with a
+	// different from_session must reload the mask, not keep the first one.
+	const fromChatId = $derived(page.url.searchParams.get('from_session'))
+	let chatMask = $state<Set<string> | undefined>(undefined)
+	// The mask loads asynchronously, while the resolved value can legitimately be
+	// undefined (legacy chat). The children must not run their select-all default
+	// until the mask is known, else they'd race it and select everything. Ready
+	// immediately when there's no session to read from.
+	let chatMaskReady = $state(!page.url.searchParams.get('from_session'))
+	$effect(() => {
+		const id = fromChatId
+		chatMask = undefined
+		chatMaskReady = !id
+		if (!id) return
+		untrack(() => {
+			void readChatModifiedItems(id)
+				.then((arr) => {
+					// A slower read for a superseded chat id must not win.
+					if (id !== untrack(() => fromChatId)) return
+					chatMask = arr ? new Set(arr) : undefined
+				})
+				.finally(() => {
+					if (id === untrack(() => fromChatId)) chatMaskReady = true
+				})
+		})
+	})
+
 	function selectMode(v: 'deploy_to' | 'update' | 'draft') {
 		if (v === 'draft') {
 			mode = 'draft'
@@ -252,6 +284,8 @@
 			{deployCount}
 			{updateCount}
 			{draftCount}
+			{chatMask}
+			{chatMaskReady}
 			onModeSelected={selectMode}
 		/>
 	{:else if parentWorkspaceId}
@@ -264,6 +298,8 @@
 			{updateCount}
 			{draftCount}
 			{draftKeys}
+			{chatMask}
+			{chatMaskReady}
 			onChanged={refreshCounts}
 			onModeSelected={selectMode}
 		/>
diff --git a/frontend/src/routes/(root)/(logged)/sessions/+page.svelte b/frontend/src/routes/(root)/(logged)/sessions/+page.svelte
index 1d6f3f45ec..d5bf3ceceb 100644
--- a/frontend/src/routes/(root)/(logged)/sessions/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/sessions/+page.svelte
@@ -51,17 +51,12 @@
 
 	// Touch the runtime for the active session so it gets created on first visit
 	// and the pane shows up. Subsequent renders find it via listRuntimes().
-	// Also refresh the fork diff count: deep-link / back-button navigation
-	// changes the URL but doesn't fire the picker.activate path nor the
-	// visibility-change signal, so this is the only hook that catches a
-	// user returning from another route in the same tab.
 	//
 	// Gate on session identity (id) rather than the full activeSession
 	// derived — sessionState.sessions mutates on every persisted change
 	// (including token-by-token last_message updates during AI streaming),
-	// so a value-trigger would re-fetch compareWorkspaces dozens of times
-	// per turn. We only want to refresh when the user actually arrives at
-	// a new session.
+	// so a value-trigger would re-run dozens of times per turn. We only
+	// want to react when the user actually arrives at a new session.
 	let lastArrivedSessionId: string | undefined
 	$effect(() => {
 		const session = activeSession
@@ -76,8 +71,7 @@
 			// (refresh hooks, picker selection) react to deep links the
 			// same way they react to picker clicks.
 			selectSession(session.id)
-			const rt = getOrCreateRuntime(session)
-			void rt.refreshForkComparison()
+			getOrCreateRuntime(session)
 		})
 	})
 
diff --git a/frontend/src/routes/kitchen_sink/deploy_animation/+page.svelte b/frontend/src/routes/kitchen_sink/deploy_animation/+page.svelte
new file mode 100644
index 0000000000..6cd7e7197f
--- /dev/null
+++ b/frontend/src/routes/kitchen_sink/deploy_animation/+page.svelte
@@ -0,0 +1,194 @@
+<script lang="ts">
+	import WorkspaceDiffDrawer from '$lib/components/sessions/WorkspaceDiffDrawer.svelte'
+	import { Button } from '$lib/components/common'
+	import Toggle from '$lib/components/Toggle.svelte'
+	import DarkModeToggle from '$lib/components/sidebar/DarkModeToggle.svelte'
+	import type { DeployItem } from '$lib/components/sessions/sessionDeployModel'
+	import type {
+		DeploymentStatus,
+		SessionDeployModel
+	} from '$lib/components/sessions/sessionDeployModel.svelte'
+
+	// Playground for the session Edits drawer deploy animation: the REAL
+	// WorkspaceDiffDrawer driven by a mock model with adjustable latency,
+	// outcome, data-flip lag, and content size — no backend involved.
+
+	let deployMs = $state(800)
+	let flipDelayMs = $state(300)
+	let holdMs = $state(1200)
+	let diffLines = $state(25)
+	let itemCount = $state(3)
+	let failDeploys = $state(false)
+	let permOk = $state(true)
+	let staleDrafts = $state(false)
+
+	function makeItem(i: number, done = false): DeployItem {
+		return {
+			key: `script:u/dev/demo_${i}`,
+			deployKind: 'script',
+			draftKind: 'script',
+			path: `u/dev/demo_${i}`,
+			displayPath: `u/dev/demo_${i}`,
+			summary: `Demo script ${i}`,
+			done,
+			hasDraft: !done,
+			draftOnly: i % 2 === 0,
+			draftUsers: undefined,
+			mine: true,
+			canWrite: true,
+			legacy: false,
+			rawApp: false
+		}
+	}
+
+	let items = $state<DeployItem[]>([])
+	let statuses = $state<Record<string, DeploymentStatus>>({})
+	let deploying = $state(false)
+
+	function reset() {
+		statuses = {}
+		items = [...Array.from({ length: itemCount }, (_, i) => makeItem(i)), makeItem(99, true)]
+	}
+	reset()
+
+	const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms))
+
+	function genContent(seed: string, lines: number, mutated: boolean): string {
+		const out = [`// ${seed}`, 'export async function main() {']
+		for (let i = 0; i < lines; i++) {
+			out.push(
+				mutated && i % 4 === 0
+					? `\tconst v${i} = ${i} * 2 // changed by the chat`
+					: `\tconst v${i} = ${i}`
+			)
+		}
+		if (mutated) out.push('\tconst added = "new trailing logic"')
+		out.push(`\treturn v0`, '}')
+		return out.join('\n')
+	}
+
+	function fakeScript(content: string) {
+		return { summary: 'Demo', description: '', content, language: 'bun', schema: {} }
+	}
+
+	function setStatus(key: string, s: DeploymentStatus | undefined) {
+		const next = { ...statuses }
+		if (s) next[key] = s
+		else delete next[key]
+		statuses = next
+	}
+
+	const model: SessionDeployModel = {
+		get items() {
+			return items
+		},
+		get loading() {
+			return false
+		},
+		get error() {
+			return undefined
+		},
+		load() {},
+		async loadDiffValues(item: DeployItem) {
+			await sleep(250)
+			const after = fakeScript(genContent(item.key, diffLines, true))
+			if (item.done) return { before: after, after }
+			return {
+				before: item.draftOnly ? undefined : fakeScript(genContent(item.key, diffLines, false)),
+				after
+			}
+		},
+		get deploying() {
+			return deploying
+		},
+		statusOf(key: string) {
+			return statuses[key]
+		},
+		staleOf(key: string) {
+			// Only non-draft_only rows carry a base pointer in production.
+			return staleDrafts && !items.find((it) => it.key === key)?.draftOnly
+		},
+		get deployPermission() {
+			return permOk
+				? { ok: true as const }
+				: { ok: false as const, reason: 'Deploy disabled by the playground toggle' }
+		},
+		async deployRow(item: DeployItem) {
+			setStatus(item.key, { status: 'loading' })
+			deploying = true
+			await sleep(deployMs)
+			deploying = false
+			if (failDeploys) {
+				setStatus(item.key, { status: 'failed', error: 'Simulated failure from the playground' })
+				return false
+			}
+			setStatus(item.key, undefined)
+			// Mimic the production lag between deploy success and the draft
+			// refetch flipping the item to done.
+			setTimeout(() => {
+				items = items.map((it) =>
+					it.key === item.key ? { ...it, done: true, hasDraft: false, draftOnly: false } : it
+				)
+			}, flipDelayMs)
+			return true
+		},
+		async discardRow(item: DeployItem) {
+			await sleep(deployMs)
+			items = items.filter((it) => it.key !== item.key)
+		}
+	}
+
+	let drawer: WorkspaceDiffDrawer | undefined = $state(undefined)
+</script>
+
+<div class="p-8 flex flex-col gap-6 max-w-2xl">
+	<div class="flex items-center justify-between">
+		<h1 class="text-lg font-semibold text-primary">Deploy animation playground</h1>
+		<DarkModeToggle forcedDarkMode={false} />
+	</div>
+	<p class="text-xs text-secondary">
+		Drives the real <code>WorkspaceDiffDrawer</code> with a mock deploy model. Tune the knobs, open the
+		drawer, hit Deploy, feel the transition. Reset re-arms the drafts.
+	</p>
+
+	<div class="grid grid-cols-2 gap-x-8 gap-y-4 text-xs text-primary">
+		<label class="flex flex-col gap-1">
+			<span>Deploy latency: <b>{deployMs}ms</b> (spinner phase)</span>
+			<input type="range" min="0" max="5000" step="100" bind:value={deployMs} />
+		</label>
+		<label class="flex flex-col gap-1">
+			<span>Success hold: <b>{holdMs}ms</b> (green check beat)</span>
+			<input type="range" min="0" max="4000" step="100" bind:value={holdMs} />
+		</label>
+		<label class="flex flex-col gap-1">
+			<span>Data flip lag: <b>{flipDelayMs}ms</b> (mock draft refetch)</span>
+			<input type="range" min="0" max="3000" step="100" bind:value={flipDelayMs} />
+		</label>
+		<label class="flex flex-col gap-1">
+			<span>Diff size: <b>{diffLines}</b> lines</span>
+			<input type="range" min="3" max="200" step="1" bind:value={diffLines} />
+		</label>
+		<label class="flex flex-col gap-1">
+			<span>Items: <b>{itemCount}</b> drafts (+1 deployed)</span>
+			<input type="range" min="1" max="10" step="1" bind:value={itemCount} onchange={reset} />
+		</label>
+		<div class="flex flex-col gap-2 justify-center">
+			<Toggle bind:checked={failDeploys} options={{ right: 'Fail deploys' }} size="xs" />
+			<Toggle bind:checked={permOk} options={{ right: 'Deploy permission' }} size="xs" />
+			<Toggle bind:checked={staleDrafts} options={{ right: 'Stale drafts' }} size="xs" />
+		</div>
+	</div>
+
+	<div class="flex items-center gap-2">
+		<Button variant="accent" unifiedSize="sm" onclick={() => drawer?.open()}>Open drawer</Button>
+		<Button variant="default" unifiedSize="sm" onclick={reset}>Reset items</Button>
+	</div>
+</div>
+
+<WorkspaceDiffDrawer
+	bind:this={drawer}
+	{model}
+	title="Deploy animation playground"
+	workspaceLabel="playground-workspace"
+	successHoldMs={holdMs}
+/>

From aaeb9524b369f088622e7fdf78d59a60b3891a93 Mon Sep 17 00:00:00 2001
From: "windmill-internal-app[bot]"
 <217088191+windmill-internal-app[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 10:01:13 +0200
Subject: [PATCH 71/76] chore: refresh vendored docs snapshot (#9955)

Co-authored-by: hugocasa <15649739+hugocasa@users.noreply.github.com>
---
 .../docs_snapshot/llms-full.txt.gz            | Bin 625113 -> 674196 bytes
 .../windmill-api/docs_snapshot/llms.txt.gz    | Bin 8745 -> 9144 bytes
 2 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/backend/windmill-api/docs_snapshot/llms-full.txt.gz b/backend/windmill-api/docs_snapshot/llms-full.txt.gz
index f5420b1cb5e7d4b35116714df4b55d67fc56024b..cc52e79f2cf39799b37d179d98c12ae3ec37d93a 100644
GIT binary patch
literal 674196
zcmV(oK=HpHiwFP!000021JqpWZW~9I{?DhVje)Vqu*q0*1{>wFkYy($#EuQi9%CQ`
zWU;$QcGT?Z?dlfIfftxx^8kx|!g-SY&N)?mp(xw&IzKiDBC@-#=lY!sb5FfV^JJ4|
z*<kQP^I4@%>0H^u<dL&=85?{}lrz~fT3c7?MP}62me<S7Zk5SbX)YrYb7L}0D^-!{
zYH7=js;pYnX_kzYE#tLuRjDg8=FuCQr<E;LnpdXGb*7wMR$E<StxCCAXJ(=v(cES)
zH*N=4)@JyAcA@mj<dx$kbzRwwu2P%3iTbg|RhF4~n=aBUt#-;TRcsR+J+0R2_^U5f
zrt?*e=~$<z7g-wfB1M_r;E*ay7o{$DD%}*etehNLtIXnP;i?;Kt;}0oIW;-xWQ!`@
zq<=Sw!tLpBN9UQYvFAB99;@@ZbhgCbrx)r^>aUml81pNWI~;mAQBUZ8IDs?Ks?>N%
z7se;PlbrkoSg<PT(3iR0E;D_Nm4DXDYduzv>-hTdBR=WZxS%uTO&S|_U|nb8x+JRb
znwOW)vE13Sr}*#r#WPRLB&~4Wl@mTxIE#8&yK205P2tsG@Ww1$TA5R|uByVFPN&=L
zcCz(CH37v2k8NBN$@n^VkDDeoc7vbN>M!-89ks$i>%}Ctn`syvWqRS7Z-ev9)=4`-
z7e#;j-g2~7@9lHQ``L?&yXQ|yBXp5Y*3||I^J)z}S*Fm1*y2hl_*1RH&Adt>!;LZ}
z-8(A{K~*lzSC|&wOw^eIGaz#iK2t^oL=v=4%v)iO%}tb%jwQy$Wm<?Vkdof$G-GXq
z#@tEFEZewA^|k_s?%h+5O6U<Zv{jYC;F6X61N@lk<VHirlj%a1n01#pyl_K=4TKa&
zhOTJ0Bcp(OvVB<Gnx!i3t|8p6j@Lx43PuC;g8fiivw*ObU_rjZZB9>5(|l<MzgXCd
z8Z_UoK?lv|0!yw+TNfbHf2hCNTDi5YGg5B50L6Cdsx%rhzOZ#g=US$vtA0J2Os4oZ
zwxyYYsj(?4H~nTN3(j~!H)YODHp$!JgpM#6JlcUXOI>HsjJ@4+y#Z6_rC}2??=x+?
zPI1L8(Ps^X!;|0a!YesR(mY<5c9YhdIcS0lzu}d!f^+FA$GV_nMM5Zh@j{ToO5<;s
z3gJ<BQda6HGrG)Sb;-c;wXaebU?n2ue&^lq(cH+-9fA@><F&pqbSP&kzCe!@u)g39
z4&f@2=<pK58}dw`QwGONSxNM!$eLkZ#qbHFroBm0V0SViZ;;h+*p}S65EAl>=MhXt
zVV#-mHrZS>S6Hya*<*OTI>!h$={VJY)@ghVK@sXTd~LW>rmJ<;yW)gwf@w*=NOSTZ
z%$J4fFy8X9T)3Pg!px_&E2o$;ZMZH(<>|Q*b|<Oh73csCGPAI6>2X=-B*b8T%Kpu3
zonKzop$jHnU=}-7kQ70!m_AXI+sLm6%4FKBR}8fzMSfZ5ISp>EMpPgX>YhWm7TgM4
z&Gke*gWij75{;`8-a{lqTm?TRkAIWmD{D1t)GN6Xs{<L$X5+|!Ek$7xf44EO(8^tA
z;_86z1VMmc(k_mKk-xM2l4)Tm<0=CtUOi<+S>pjo<L@^LWM-edW$|_N<(_(x>D^WY
z=IBwK4+n$!d|vGeZ_ft<MFI}mu<8F^>8%Dky=|Q2X8QuqkA~l3oV=oOla;OP(HD(-
zv=&Z<+~XG**sNHkRn{)a^Z3z`4C?O`XHbu$A-yO~Rf7sVcJN<xUVoJu<gW~5{{O>G
zzTLmdx8W{P6fvXDbq*XVkgmw=j@2J>0;c|M#~6pTX6;(Duokwm8T8+l9tkjDZnvxm
zh<a4P#1n77fZrrh^kx-?G=ASQ5cJ0BGS+~@Bd|#DlB9l#8~MG)Y6%qq7-2zWo3{b9
zRN*=RjT*+02eWb~z=P=x$U$@_VD7vn!zSh?wY6iz&e$<Y<V&mzE$|!0fL5=J-Z)l7
zfi1H9G3lUuJW>Dp$N%`x4{2YU!wQoDB&}bYoK>C;BAJ^)6L6wyCUwjdG5Jke+MLP3
z)|!d1vHUWG6426j>XJ8kr``~5U{jPN_zK_&nSr4x4SoF)Qyh(=zl8>zR__MyBKar$
zegD_qV@y_8vh{;skM8kJqX$vs*06+0v<=$~vF9Z}Q_Zunn%C30`qw}ITg{jF@J{_=
z!+##A&dSHl%EwWJYeh?1A_8wBFf7`b60hoX816S#{7AjN7!$QBBeX1Qh=!?L*yC?>
z`TkBP%}yt>(~5w>E{|#LM`@IRjJz0BY(;njuf_+WsId5fEgm*oJd`aqz*=cbsi@&E
z?fI<#QXP?^(sWq<DapxjZ?EGou~|Tq>PaHt!b<?14Qd&w(a7^`G!lNWXUccV$b?B}
z%rVB4CQA(ux@ynDTwsrK{MD>^Jmbe5AHq6xb$}0tozd5Sp0#6VVQkkYc_HTDx(h=H
zDmHOF1kK+C2m#JLwlzZ`#N-L9`6>f=&eTbVxEbO=!gDZgn@ydQ=l2AhsOPwPV~jX9
z`}OF~*lIWy;sm-wYp)8OCX`CZKS;5ABHlKSn$R$&4ToK>oPaBAn682x^12Tm%<z3i
z-#a85_X%~y=V!jOp|rXr(*1==_v;a4D~%yzL&+2zq6vq~+t!Y-c^Zvi)M0#&RSnPO
zMx*YTAF?DdMO>pkygn?WKNQyd;F;Kp3aDeZ=Vh5~?Y@y244&MWa!2Od+jlbBUg!go
zLSWO*n5f4g^+QpfVUsK)(^A<j=tp-`JovB-Klt;kv=H1G?l!|Zo0NT4m&b*!)<bm!
z3-}$a_QQ0}iZWKT24$?U^M>d`p&dt=K;2?hVcsk-V#;1l`-kdkX|u$XhY$4c9@_DN
zWMEH4k6?hmljn4jiDJ*4N)n)Ps)#pSN;1SSfEm{Y4;)$$t}bi}O(WsZ8T(*E3}CWP
z1a_U3@j4|92bLyl^gQp7Umej@Bal<gHwcvGLk#LLg?JDMM?oo$EK=l|RT0$16fX-z
zNeATy&1zh^RK3fNMR4VNl+i9w)|O|V%Hbj6D4jD!fR=G89Yaf;#JPqnssS{qB-+AZ
z;gX;dW0hO69sKEl)f5t55(fr@2NQJ;0io496l7WeI7m!VdeR>^V_6wWiJraKxKELr
zd;ZA~H_`+%0G%AUKi(B*{|#pkxkirjJt<m(1#-wXvX0Mg5SI;sHowqha6)patNWaM
zA!ScmnV^VJqFY9Dl2jo|HFDFyB_`WhC&3#tSvcZj;6IiKiX^xwg3LhP*aAde;wI{X
z<qDReH3#gJLe5pLwxIykr&O2;2&;FEs4h!mvfY>yLqaH4XO)zCS%vfo*tg*W-lUqT
zb;Yk?K4BO)hdKAvjK?tJ1XB0HI*{@W!B1MPXKBXtXxCU6M%5i775D|hlol7IJM`3v
zkns%(ePhCMwo)<xQM1n7(kn6ktkXi4)Ri9s?soKPGI$8zO9~B4w^{H+33r>(l93_)
z=aj)uNQn?|k3%$J#D9gGda;n(Te&F3BZ76v99`OtAr(RRb=@(=-dF7T7v5#ZsSUR#
zimi15Q;o$_XEREJk_Y762Wh)j6kV9DS`p<IW=T32uXT<Xh8Pg95AHJQ8$e#lrz(t?
z6td5hrr0&Bg|voVF3E&2OV|&Z%$Z5YaUQcSoh69}Ey1n_5RK5WvW37YpJcg31p&tJ
z%IX5)Ed*)YQ_f(c_R!-;fJb%)L>9T$c+VsAGQI@E$6e_7y490#g%4vc2_jlJ6OrU|
zcu}WqgfUT9FFqTPMR12x#D>#Yr=Em9{%!okZFz&hEHcUg0^z=;t;E+Vw;=#L-)_9V
zn{wVs<%v6Y701%5pe)wwi?;AZ5|FnZ==@@O{+K^eJ*TZvO}xmQNG6X$%m&A?F)xG{
zOAoK4+(UptZ*YH?`4SE0G|}%$60D^WM3;kP9fWTS3AYCABaGlM*f5sl)Z4O+xF;O)
z@`>8WhJZH&#@&iQomJ^l!sSem7V8#W3M8v6fD7H{R)jZh@~rNfOxT)<O9!CgE3zl0
zW?Te5UbznhmvBdk6-MH~WHrigEY1xCQ_|6Sso!;s$t1wx!}#i!933(0)#2C=hGVv$
zAq`Ej<(yogATX@*IVGP3cu(TL#eEJ)FAOT>cqzr(bqsxj=nc##1gDgTmUYw;Yk*?3
z^trd89h*|EahlcokFhI*!M|NW9XUG`PCngRbXKP`4txrPKs^+Ak3P3hkW<FD3CXaB
z>Vi!<Lnzhck-g-CBBRkyjK?T^JMKWt;A(xPqPvApl=0de`a!|1#ON6ejL-P<@Wxqq
zgjJFYW>UC`zsxZec{yA?h=6gCpZr1J+`0#XOiC$@Mjd&5>8JV&k+0Ldo*)mydpXQ`
z>}wJ|(IkbZnI|&y4*CX*?PWEC`3RPm#ob9D#2#4eHjNI8_%#@BZETV*cjRk1FDCIz
z>tQ=`zo8lgsVzt@g7Yb;_xE~bPEbTVpVL%)=!4EGIO6sRXj$Ka!Cn08Wki6n8c7*w
z)cAV#R24$b71x@)JBV$OVq*vr7vc1cO%nijvgPb1O<YSOMFV`hVAlqv;0@M*f1I=)
zt2j%c`J>TGF|&UHS^03@Jd8$iWN(F;o#}EJpvmV)9|VTaJP;-vyr+VqO0ETOOyvd;
zW)c_P0WjZ#icbc82pc>j^`Q8*0W`T>*QCgfxZ`5XwzCE*K(w6E=V1>HV+(?np>8YK
zftq8)<3a$^T%yT~$4|IwPUzu^yJXUsI$#))5;O^}2o55ieluIuIF6h0GN94TjAqVs
z+O_>z3Vh$`Y3Ut}WnqDEg*tuICM`?L$%I@Gk5w;TO4PY9UI0uYIEK#Sm%2~kAn2aU
zG1)?XIMILP3kGn>Qq#SaH0#3mlLo$rw}ZjC&GS$_>?k*vNVs029x$zsC55!&B0*tY
z%6zT4nEEk^MVM($?s%nzsiUHET2*528BWqZK}?F;twXKfbhji$rnT`>ysd3TiHryX
zQlFMur6lBx+0>HyqNKTp09Q6{0V@v183wAhL;B<(SGSNH-|pe85tQ(}D=0)@n$3X-
z3r0&y(2xvp==l(-T~V1Ktt3^o;!++7664KoXeB-u?@5@j9Lqa93$ES{8YtWAwfJLG
zxV;4K9T~e<cSXW<XF;)D3XQ27fkhy}<g<Nw^Mx(nNhGAYD-C${(}$&!SiVeGH673H
z!JSiKq8C_}M{<E8wtP4iwKg)6loU1yvh5lP?JYbO6hWG^=ogAuC23`tYpM|Jbknlo
zt?`|-fE<>)#-GevR-MlI{wFiIsA<P`M6NJ#x=iDUQG<}<+U&6Zk3EA%@+vNzYLAZ2
z#$~nXcd$*gkc|9+Qaf<=ob;L#Ol<*|L}Xv8j-A-YtRIC{`_cg8<>4lb;-;YPi<Uaz
zrgYMc>F-m$;8JS}vg&e=bRshT!W~?B9%Q2*xprCku>g}q@e&IJnC#KQmu!q<F~JZ4
zs??ATY?2^zlG*lF^WeI=?UB>|7-1w_fV8l3j-69FKH1ter9OSLM*skyOML@K@EV3<
zG`gU+Bb}vxH@-w1=Hs-~(q@Y~3k=#9PkI*DWywY9hCF0v+ve4f^6Uvc*l=lNO*Y(H
zon42x3PRp^94Ro|t>O3heH1kjwBV&sE*l1RcK~}|t6j&ma?s@s!HCuwwXSDW*^$`q
zHixTTS#AMroSKIOY%SO{aLRMfIFRQT(N$-$Z-5PlQAcFz;Nov|1`1L-fL{`WOS1%|
zpqh}c##}W;LB6=RkZm#YgPo<ldBYBKC#q@DA_R0whW=_!l%ZOr07_=#M=&N%<3yN3
zENb@<Us~3=^MWBfpiSnI5(-8(^G-{|cyjwJ5e%3Zng9Et7#hsENxUd&2Z?a_D4*%h
z*Txikppr6Dp#sV=2%&%;kf287PInql?=+B$r<J50Jtlw2fwh*!JLz4iUbavK+y6$v
z<JRW)N&RC(^|1y#5h^F=-)q`qi8$-j!MX5J*=v&@P6R!iZOvkBZ7<fLNfA#PDhG>{
zNN>;l&9jTAPiL>5|NP{ac~BK+U^T0WM;w00o98cozI<_Z{zS44{^{$NPv`1Jm#KvE
z)L)dgcAW`^`*0t9Vk$r>*Ecz0AU@Xc+{x=;dJw5SOY?N2vz`SU49>iR>hvA-a6v}o
zlF)?n!rYWbuLj-#y>h2&QRjm+k26Fr7@<_8mebK_VBY#i>gv}4B_{tG=y6K@iiV%P
z^iHJv?2_pmo(wuT1B;Ua(q9GZ=FICddrwz7jRHj;v5cMaRB2HoyWi#+8ki!<jo*P~
z2o*N|!$FQW`u!=7ZkEuJ)2unNZ4xFupxRc&cCEkmB?erk0t%+AOu$NXz3F#?jXJu;
zaZrF(eRU3rk5I1Cne!oVqu)OAJr#1@0w+zVjp#cl;>W}=?790kH_PT@*}Q3QK$txi
zH*@O;9gT`-X}i<(!R*G-4^g6KT(9qhGJN^Lfc-PX>wMDufFmI<%!sEKowf-tG3>!U
z^zkPrS)RecFuW3$gfvzYwvB8#;-?y1EH}Oz?8Qs9u%Plb<f#e*gdD<C>aQ)vQ}Kd}
zpd`(bJeUl=#&LuB4NmZgh4XfQ8Kz+~$(as0c*X@Xz2gMMKKLN;avK7@H{<g#WPCod
zHIaiP`UOeNIh#<f;L|61N3I%wx>xAsT3)=2$h0(>G%xd`rWJ0)?aX7&_5Bw5t{W8K
zBT<Q&o4ku~ow*p7)={!Ft5S+4+uw%K4-E3y=be2%<zbUg+3U<}J1+-=3(6^g68&Zh
z=_=)*uM<`GBU#_P=Y1EKS)eCU;*^j<5+t{?2e4%aNvYN_!_YlOOU?3<#1RvBbO;xm
z4864rI99}nYG8EWmeW2<Dy<Dffxy{zGy36!REz?gXUEzQjFtTxpR1g$*0WXCGZT{L
zvV03oqU|NXFWLlgui9rVTOfBi>lc|aoUK!fu6)O>51X2VrS$i+0449)?qKR;YZ<Q-
z!-pL<dmh^S0Ov4`+mG8bQ&B67+YblZFfU|OxD|#|0lpcfn+PC|_8^8&lDy~<|1g{(
z@X|0T3Z@}qeTjm0L~Ru$VyTKWqn<E)D0#mo<#Ly7^h<W^ciK^8Os_t+Xm=ElZJ{f&
zn3NduyrYJ5sryhWarZeJPkkCK+xa%}(1tB`m4A{Vj)t|Dda~Qxfiz-!c<|2iMp`%8
z{_ES_)zN;hwWk+QR`)Z$(CwA~hX%Iad+*+{aclp1M=70sY2n;Mb3e-AsQZ*LbiqN;
zt^}aClHgg<i%sr-FzM4KqVi4-QEGb^KIh+e%;Of3wPNEbDk+CO_3c(J+Zp|Qr9NOz
z+Fu=fFl}UdT0Nj9g}rCvrlk5&iKKp}=x)o<O#pE^#+G<j*qrf|P=Ld=Ll@_c`~9VR
z&Z99~x2SXH+%E0g^h-;&zRpw{rWZQ$+#BB8r#xj*c+K`Mpfo0Xn^<cLbmXn~7vC>l
zk46E-fXsJORwg&UChJ~H9aX-MhHyyJIoz6S$<PoYsGa{kaX9v{&A@ekjmGXIED&6<
z{8~f2U32X|>s?@cL$CV|sB{aY6wcbvbSP!OefsPzH1bqy=L<IR0Si}}7gFFfocX(x
zgyafur~z&%z(E><b&p~#+HTrbIA*>xT}PsLI}^p$jDMPAi=7IwpKoy4PZxY22r|Bv
zN%%hCFke{~-y!&#9oPZXM)xg95aH5xggd+Wqt>Z*lSp#h9?A&{MnEi>)*^TZ?cvJg
z*7f(2UvjMX<*#__rV7&ydQYVB2T@$nmgWv9q)*;{_KZmr(l;d+DvdO)AP9^0e+1J{
zsC;62WG~6#@B4{)4nLb8hpYv+2g`b@)s66g4)w)yDzFKM`@%mDz9FPy6npPaJQhv;
z{Ac2P&K{mkOq}V`^g*p0qv@2Uju?{!2-`c-ycZ;m)uAj90?A4f3CKStluyu^4}Pf~
zLH>UO-8@N7zc9Xr(fvbHPvNIlFH9NvCg--b*~=t{W&#fPe_@}SZ5A>V6vK8J(8tu#
zG3K2TYE`1`#XLy@UAs<hfm5-*ybhhG;vD~<Ii_Aso3>JEpyzIACStXNSzo7ZBGqSL
zIcdBrd_lYS^8(1*|FZXI{f%5#z99Ns_!MEJ+azcVIY_pP%FHrzkVHF`$&;k4s%EJX
z0U|(#5=6iVfJ|D_{hgQFPxq<&KK6Y*AFMvfUH>)gArRn@N>63`)KL;K?AXKFYp?OY
zW^CD^R>$-JD_tV`ibYsc5VtN^B^Is{#;R1H35joH{a+%SgfM)lxa3U>$b_w#f`A~I
zf)lz5i8gi~dQL0H3B|+^nkYCClTN)<CqKyA$j8HsNRUN-Qw6mXY9i7TGZapY?c5{Y
zazck=Nql+uejxAl&+}!*42r+&gCb%Qh0+u4gI2XVKhG9dyUEs8i>MbiogwUtyNUls
zOX!QaSpI&w$apC9`}-eT8wMv#5IILf<h@bzNJpnFzQtR-{&cbmhBT}$PVmq@Ect10
zLydd14T|Yn``0vG&MV;|9F-?gzKbyq-Ops|0bfDqowY{HVUbTW9JF>k>FO-Xa;eED
zY@B6vLc;ZlEmkB>%;!@M41?B2PwnieY`rYbbCtIF-lZi&aB$;7QiL6uH%DAmvPtsy
zg@Aep6=OI=ndJ)GRzfdkbRfGpKM9T$pN(!BksHsee0l+Rn?q2krq<9Rw{do@(N+7~
zbOR@?nFB14m^Yf2-h|lKIHnWPF#E*aUYcoIo-d-!;UY(oXj?AKtjb9*F2)nxsdqjV
zi4^=v4B+npWx?HHhRcC`3mAkokBrSyJ;x<wrm=g>_RDPZ2XM_Fh-v;{Jo5)*nAFu?
zNQyn0^T!zD)8sJ|@KZRaKbLViuFc`A<BOsyu_Yx|kVACEc&GuK;^%f0<d`sKq0B{D
zu;}uWY{4#i44HHnm_W+ekQi__oeaxK%HCy!f){L+#SG2OC^}IynT*~cad3Kv2&@qY
zn-Oo|&UA(EK`whnAG#>Y#cp!(V2x5DS^QW1MB``8dehQ~+>dEdiS2Hl64_ZXD=n5*
zVq?{fsT)>erPL|zb(@2?w~v5@aht_^H40Y5*Ou_`sLpeI%N!L}pLSFRw2W%eL9q6m
zroEo}6(q3K^H(B`qwajDC1<Mn#R<>z>8gqq<{+#jlKbN<Fr5Q8C#NN+OsetM_EB~x
z!|p~?phmKi3It39Qd@kaR&2y!KEW;%*#%V+daJlAiq6Ik6!Y7lA!^*k2}{Eb`lC&o
znV==m%WT=DZX}?oaEgUkgn=oc2p2s@W(!;%*JC%Rm&h3k5Gu$GvuQL+?7xNA0<2xI
zB+vi^&?p**4KK3nY+e27A}~I)M?GKz9xd90rTvMEDgCei`F}sM93wh;uf(nL{H!c1
z@uu;EtyT!0A<3Q!OtjQ}B*+BrbY|xiP@$Z2c9Q4Pjd@lC>`vaLwUC3<<8Bc5or2J0
zKJYi4FlUUK#W|PU32fF;9&vT!Ip^7T<w9}yq~kanE^~$)SX>DE)oEb-587QdoCQ6H
z8Q;gUwa^r&Spm&yT3}TptOmpBbK!uVq8P7jme-LQ!qZ;!%R;xB<YMbym(2TmYEhT*
z62=@C!tTFK5w&$Vg7DKp0+o*eZ^)vuU^Pke!tBZxS@#E)b4O{(!#b)!m@M@HKq{x4
zgHW=E)(K^|aT*?4Fg47g5Ba~3_`jbpeUJd-z|C+}Bgso*$XVc(nT`_4goJh@0%;E2
z#Ve=guayoM=FB!X#m5vUI6-xZ;1<>$%9bpO88p9Pv<9-3-{wLr5e{I0KU8oc#|MB7
z6+?ZI8rhd@R?P`$wIo|7#l>A%x@em!T#$&SN*aJKQ4B0FZlEObS-}zR+Gudz;U{1d
z<P{TOPDP|0GC!h@-5+W<h76&`mm>jYK~e&pADiC))sXF%8{VcpY%*=vbxM`{S{N8y
z^$SVB&BFOnKa21Ov#Q51R)Yb*u&ZwjRs&XT2Ip5p4|GL4h_tK<Jnv^uo+O_<>?Gf_
z0tbigC7*#Wkpi)uzI;Cyf%B7xaBeJ<pMU?m!#A({6`i)T(_(U^?R0)j85--y0Jci*
zd=_GGePtU=I$v$-J^rW-Kz<Ih&9_Flg%t<~EwUhV4jehWDJH9#un9!;Y|GH~!wf6K
zM_}0NZ;I)dWce}3(-9<{W~({33boaolNEyg9SaYZj<@g$=PYH&mYe22OFqxVd$W@|
z%@$^EXe`9uPA!5W-3cDR1|V``z3p}su;cIOB!S<+RLTQAa>}?4#eGVS5gmq8^&C=y
zw60oSmD71KuD!~lDgZ96&;DiZ0=?^|*s^Tsj2so<rp&)3I71CHS+E8GiL?U%NTZg+
zAl67m-&77D(jiCLu4b&<v|7e}7_QI4A~`y7c=Yn{=;e#y+pk~0-h1}yWg49+7I|pk
zjvOcU{X5$1KMuafvi+DEa)EtJ3>V(x;21z`3r#m|TZhv!MYc&Zg)w!V*R~j+0qW)f
zjF<#p%y_ZIe0X~Tx_KWd;GMABCpdM1gVLwT>#tAh&pyMx%lo8)wKt8s9pLg2Aw1Ex
z`y2vwl5Y?G4|(oC2ZL_XZZi{7{v)`0qVv)+9P)G9Xr`Nd|6?a&Ob1tVB+hsy=JMyg
zoA{`pD@*$=*y3~^#K5lX^@;z!zPH_8A0zjNUn2!LUo73*;LX}xz*42#`!nrzcN2l*
z$PsIcWPOyp5TN4Y_WEkHzfCphCOCChm8KXPz9_ByGJ6l|X4kg?Q77B!V34u_=ZGlj
zP%Yc(J-KEb&6g+rj()|cRx?WlI*=_y$ZTYLkXVAwf%<G)m3T9hKs6TmZ!ww6XY>H&
z>^zyU3K~kDE$G96umMeg_)>C}BWamLO#KFln4@fb>XdfvC_EaPw2Fvg!Etm>?ckzq
zecc5yRHsG`@mLDyCQ+OOP77O-O1}+DNH>{ql3U3xfEj~fDUx?Fb2&-GyKuWt;+hT>
z$v%sGLPI~pc2_Q;{$^>Y&*XFW4EiqC!OiJH*9#b^L~gs5EGB{PL`AU0ogwFe_?6hY
zF*gd}D#PPHIImWbTD7ktkP9HNcrisYWrPC>T7?=#jJQ(T`B;g!-4KGrOnYLTuSB?H
z>M(6hIIxZm%PGAMrCOIrQ!E(op|TB*)5?j{)8g)uG~T(#`U3C~8ETtx<|k~Adj4v^
zBYVw**}dBDsvR(uWPM4lL=+QV%uZBeYA`?u^cP!s5V6x*!o*6dqGk@@;AV0_uuvgD
zB{(R7uDK49EgoCAQIBz$&>x6J;&fN_zp+U?`9<qk(*v9rxyY;NS>7QWC~7o>1;D7*
zGL6lxy)R(XnZ-aA!Eb6)+<z+GCo0|xTlsocOyFclvD9fYNK$%?|0St8B|;dT$ZAvy
zMkfS><JAPl${XHctA(QL-?F4p7=u+5T2+=d!OqCNgMEa;C}wJPmOGPprE$nW8BZXl
zBYb?mVihU<?vJVPU&ar09|Y8;+KD-o%txRl{s-SlA7c<tg%2M0df(B;`xZc+ubAj%
zdnVs-<hk6X4@w6}v(6xm<vnn8KAKpIh}wl{r&ju~^#eNkmRG&`LgH7%<FoNQ&Si^P
zk|3!nkG})$#=g_<_xU5w%5n)1mwDytB-lYCxtrz=mXD_+dme!y=Zv7Aap$sWkyTn-
zfaL~`zDDF7A9+Fm5dR=<frIXv$cI1`JdA(ow8B5;vk(97;Z0mH88l^~Q9K~r25+2H
z*i))fK`K6C_p{4P81o0AHIbP~lWms8Qg9zM1*~ge4{_h#p-uz+K~u(d2BCL#!^$RL
zi=CH0)ryQSREl(#nX8E;m{C@pwL*`MP?jtyt;u(POt$*R-}dpwmOf~0Vhtw)^mCv|
zM~Myv*Ysf*L<P#448|idwT2()Uu4r&-Uo)L$%5u(0;g5AD7=!`zNtu_U>#?9wy|b{
z<CTfymC62+-H!4ejAglNjC72##!pE#kC`M`pJ(h&_Gd;sd+1m4_>U`MHh$}P(N+Py
z8{cX}0veaeevkk|H281r=pm_2u<*fe)xWjlY0PHTWxkMaMx`=rWKx*rI7nYt(^iP|
zshB((=Y_L&%@Ag%QP&Bj!BoL_TUA<v0-*}vgD+o-Nm%0Sl!-e4d9YbN@AmdBUj@<$
zJ_756#x0B&?2gvwc~#@;DD>a=zDSB7bZMe;L&F|V>eSlhoS9@bmx%vm?#^f%qE8JS
zU2*Dx4&eAXGI8H8f9;b(PxK1XLOXB~ofd+&?czua7oisl2C~{xzJqQbr(r{z@=NI?
z>hZ>C{{Bs`bu?n<RilxTChr3>hoaCOVdi`Lf%C_S9=5Sjl_3?1T1$lTR_m{xABg#X
z5lC%&^ZAEJZ3yOq<VLSE#wVYlOe1_DU^+MogfSW=5H+(zuq;(2k*6w;FMxQ$D3mYW
z`S`XmyMtAArT~uIrTDi1hOCK#Y|50tR~I_#n%1l=?QPS?`HAE)&eb8G!=6{|ElyX8
zTm6IkA))Lqd<mJP`G2wa63Q<d|0jZh>j^{wj-G|7!Gm9l2!KR+>Np?f_o6}x5BfZh
z?s3o@rvomNv=22Op?fT-Y@UwjIk!CUH}<&n6CU)Er3F+tO*u$La+2hP?bTrmBsU8!
z;_47r@yV*AP;xGMnvd7;#inl4LuQB&#R0tRviK8YZkMR7G=VIlVyhnoZ|t|EV-X)b
zr2W3+V7EW4%;S2<-a*l+FLcMXTAv&26q*ntB;quhI)>OtNkc_TRb%BVX;%7jRze?}
zmg*n;CLbNL)MKYJfYjL9xC?;^0vzO_9wU#-U!1NZf6mGtT->P+=8JqL0RW7F$FZ)h
zmb;ktaarI&WW7uvFcXgIj)H7T>>t4Fe%BrAwma1ZdkDHg<YdZ;9rdfM*(iCe&D`44
zY8EcVE4!NWv83evj(gk%Bf7aE+J^8^S<M~$DY4%Ck#K&m@=9iMytwMoH0Td;(e}93
zjtj$lm7iuOS2m>9!2(*0?%S0rYI?IPu#K0QvaT>g7K3uVW<Z`)jjaLCMcDKhpvSVe
z;mq^7_*DSN=vG(G^qTkV4s`6gBz59ss;qSq-uJ$E`TFRP7F8p{U+f*x|9kf8rCifG
zZYF$iXY^<`{~jL{%<M$U<X(JNwH~j2IQ?Pr)PrvSz(F}b81OIY0C6pn7qrYvv8jK+
zVL0}02TjH2pnE3u3~ri>LzP8e39HFw5dV&u?4*?qklqgvH3@l)E1l39(0kmGp}ZD^
zw5Z%Ch#8RD<k)oxO|EMdV-Y8Z|Kk;RslWxnDuvB_<}55=lv)c9&sI|8q#p?a<6s(I
z*)i`g+F`$j%(AW>*gLAYi}Sq-6a?LUIC9_E`Fhv$_V$OZs_gW_8!=AMj$~T}J3`cW
zL3{YSKXz&-?e!y5PQq=<c53}H{Q56zy;=KBoqG+NjOET5bOIZh!`}zkFhAVAb=V19
z>vOGz_{XXIX8qJXfteywo?a~r63I6`4r6g8kKeH~CSO>2tW5S$tM!u66Cnc_71PE#
zg@FTDfPTi=4lYK~&3dVO8oR;~Uh<emaih$40|DNF_Jr){o2g74n2H}9KnZosnj*Pr
zON3u18dwmmEMcL%%~rXExY{_H+ia_Awi;<KJx23Nea}<>`v=c#x!#`?kHf5N>v_9t
zU~FqWPkR*_uL^(|rPg>fN4mdV672*A5OZxsyI!XcHh@Oy`dL;LC(^au>#3}L`0~}u
z=SRs-^7-30UupdHtNpL`kCF%X+d^~?`^o<h!cL-e6K>^(_ItBnU)sl>zxn$0(e_RU
zgOW@I{y6gDmX&@K`G7oE0DR4pXw)}-(|<{WvbH;IGmz<(Ew`l)tu#j#o-w2-yuWh7
z^r2P;3?8^7Q3Q!>%kre0>f?fjhj*&l@uT9AIuPL3x7w~;s*q$I_Ku5{dV5ZrubaGh
zmS-1;gPNc2!T+h=Kn}@O1WRxgAwV{o1>f5|L)^dH9&3NL&HFKTt*98bUBe#-a5$^p
zpU+?;^BYxSH@sBx=_ijK^*;Ud{{4=&%Ib=>8vb}z2%IyDt%W=P!NXto@6-Q#P}}|?
z6X?N?Ov1-F<-P_#p1aK5#4ZPoFKDUDa|X{8d3M|h`LDSo;8ENMAK(K*B7I|;O&rZ`
z!?)05Zllr{v!0IOF$9MfJA*6DHnQ*$mvLsIl^X!cM40P_6o9z`kkCu#4g+s)G{wb*
zwFCI{`AXc?wn4Ozhf1f(Hsjo+^V6YyKUE7>S+XwAn~Cet-BK9h4bdPC9U_}5k}N?$
zZjpCEFdRGVdK%4dtF_l4@gmp(+dJ9v5(<QV^l3MHFnW0MX#7e3>Eu_xjX%Vq&en&%
z>{#$ti<CZ)?epbg`pf46Sy0YZJ27Bf2>}h5lyN4nN&Cf4B(#kk*D8~T1`h78O6;DI
zhU`^>F0++D6+}XRI%hFNU#~;JT*Kt}t9RgW|9$0@;IyDWZzHD!?9?~D##PN|EGzjz
zY}L2Ek-KjC${Md-<E}y1KNgcc2#RW$vMmIv+rwZ0)H|-2fIB;{irMP@&dx3zl}lH+
z+3(?=yr1&J=h?}dLw<O)$S>W~(_%FLW7;6=g`3SbiUT6GNd4Q0YZ!_X_?~;3xuev_
zTQ3y*yrd;TAJ}})oiqJlwLrkt2W+l8?;#-)i9=8~{01w5kMpT*4%pY2s=VH(frVZ}
z+SKio*&V2`CQepL-V)eoAZJVxm3vtT4c%_!lp&j~ec2nG@(atC`!KUpe$jL9OLM=#
zrjQFqK@bL{@O9LBuNT){E-u2}!;&FSva1+Rk^#VSYsPt3JvBeW;LQ<alI6-U^p(iM
zV!{@%1eX&=>dj;|<%yO=GYxnR9_}U=*|ZqTE!f~$#L>a9dCJPvbCm8t91THLDQ&En
zadeS->bYnIdsw;7Lg+TnF96fve~9_ZTj9g;1_!1AWq40|G#3k)ziV^B&OFPZN03~0
ziQe}UfiF@>05k1N{?KXunZTXe*5FSpNNF4Q=-i)2aNof+qG%!_IXIE58_z~15gT^T
zVjOD>g@$tshE6m3m@kR%>s!8x{le!|@)-Y>tLjS7<DPRFirGc^&JaDcXnK~UJ423h
z=K#zp=bD5IzyX2d9I2TiLSLRs7)G+*W|;bqglm_anM&W)P3jiM!utZ;yaE;L*@v&d
zwQiQ!k1dO&X`YfwrGfARR@b#eqs9$Lj2%aI&^j#H_j*qZSFA{Df!h~sNZ;9UhhGO-
zHQtk>gvLPyaw;a6XNg&NgPC%zfwI|+Dqu}=jCfRdCJ`L>QjWxb5qpxWPzw3Qd7Nwl
z_-MeJNikV)c_*zBb-F^_fz}g;o`HFlB&q`t8m1|2Ai9(%ZGo8m%0v{nFu_uZqq?E)
z%HyaHh^_hP{zKZ&;>xI!)Rzs^8FbUj>l&hDuh`4_E>|bJkr++xJ5HQZ-}{Q@d`j!W
zg#o`jIyxXq@e{pVWD}g_@kfIKuWJ*39K>$iJ-h%V3u*Yep;+?L#I<=QSWuROaD#Au
zTetR4_}>Q6{ijImcQs|y`JIRxT$w5m#5VDA2l=5P)pa)0Pp+{{tkJia^;ckdO5RKl
zr6I!t#|lq=W<}evi34KUs-m^-Z~U}5f$M9{X_l@4k?zpXBz%c4ef{>81%N6xg@ojh
zys)<~KD-V~4`(V#5Y^L>*iRblrgr|^3y=wA*8GtKx#xGQ^SQ5JXB9k=Hswz)UC4=L
zR8@m~IpqKrf3{eWdk9PM`6M_`%;Z}q<60|nbS1y|MH2Puz^~8ss}T3nulXnU@893h
zZ>K)L_2<48yc7@&MFZBluqyL7U!Z4bsBi1f0!SN@$mK-^i9N%EVz4vx5v`w)khr^I
z%pC#i;Q03aNVp(g-Jf%CL4V1f@&0Hvvp-Ku{--)Kxr4*>-sOTRA;p8JKk!&dnndaY
z$*5(T-j$0n;1r<UWJ|ugl{&~odU==B(rUH1uy8dmFrod=i}xJ2Cz6sbJ6rty!qYI`
zzTA89)l2xMsm~mbpuxK-(o&)kaBX2^TK84(ac4upXzyJW;%L_8SddRk9y7<&=y4#W
zy{ghh+%Yo0)muP<%WR=(uGag8D&aZ?i9A>mwZI+$UuDiYXRYG{`?J~G{HsSp_i%V{
zb9%ThH4YWCJl!?n&0Y~H?$Q$fY(fE0GZ?t1(nv#LDSK`(3Op0m+UX*jpV>G~N^sfY
z6_*X+m^?Qq$s|BXi8VsqzZZU@2MX$Ow|n*sv4x9{i;IZCTWklXY`^2ZZ2E!iHiTT6
zhShwqJDV)yaGTr{&cd-NJk87U=+V#~kfPVLv&PeSiQF!f#5pd=%1@20ps(fTY>H|&
zW@RzwceUbu3>l$W5cn7}fF5~cSnxRN;xYdFH2s0t7)Ru@k)2(AVpyf^{#z_AoA>yv
zPk-A>wW#a3nDuY;Gtw-9k6La+-LtqogIInl(MhHrdk<qjG=VjpmTx0MYF^8=6uv&k
zHSq*&ecyiH-c3IJaZ7S@B9%MYu2GM+*lGR_@cHC@PMN>%d%u?N)t!tIP_e0XrS1We
zNJ?&VjP_>j-A6xexoKx#V?91z@Mkt|W6AlwcK;sP2|+p=LU1|0Tay0#VJoereNK%)
znvKW{rs*mcoG*mUiA>S?$>&MIC6rh5b<51!whae%n@xL&qaxS=8jTgxt-jA`m^BvI
zzt*o4^`=pB@??Mrz4mVV;r)ld>fL`p|JVLe{lX{%6`BNGJ!UQP$eQZc`)X@(hkK>R
zY$)M;#`#@MM6lLsNryni(Uq&2E7)Zs|2(^5#n{{PUIrP~F=)*PnfErs+q6QNxL5zw
zraLa&i~%SEbTxIs101Jy>{28)963Yx0G~LV2NWh)wvJs{o8}fC4&4LXf>h0klQazq
zscUI;tVy>T$^h3;bRpUf95n4f(X1SP8z~913Za6PoX^-C$XIJhVcpHB_h9yX)x<2T
z_$m3R5X#s-In9ys26ib;7qeEBr4RsjFROey@e)}bHkOfSD+LS{WFXZcPs-^u8<h%{
z#2P;~h~xu=Q2QQvV6N5q;8WgaXoeVXQd34<7B3CC6=0%v0>ti0@WCsGW+T079mn1B
z#c^djFj9<UxRTJ4&B|FJCJK9GC<6|$c)9xcCsKX9R^7rw7I#`a1B%{IFII%L79_-|
z27zWER4&wH+45!2@7~9?3h9bX$CevS^j8oqfg+qwfv=x0FY`PEpUnX+D<c)a1Id?8
zgO#e%*0zpPAL%F0AU;ZQ;me?;U^L`+`IUl-(o%g@oT{x|AkU%>3~JvCQ&sPs+nWv?
z*`V<eMDE{`%2LUf)S*IyJ5>?NWal{;5Qo-bwR0ml$Oss$>oS<=P|h_EHDC%H0_G~p
zc;h$kMRWamlQ{eIENB5dxNoe@EaCnx_(<(GH@CjA<5uHWlI<FU=&V5#hfK#1taRVA
zN=Jerh|*=Uas7cgd!1mCwB6onfKL;~wW>s4KPedsw4tb{CQ)89GcBgd>n0~*6&fgG
z^skhZ<D!H>n37`_Tqr0)1-oq3a?C2MRDx`@iVeFg9@A``D{!7G%fKyeX5Xz4pAYoI
zb_~dAnsCcA<0@t~SBzwX)#<EU*j9$#uD+w^A(>ut0t?I*gHMkG_eZo-ITwQ%a=~_i
z=zME6VyH@twp0~T*a1<6ec$yx1fG|(!|3h42M3NZ#%b9%0C|HT)_}Yn2&&<8uUBfj
zBepl`DAWA?I>5IRADW&fCNy+Uni$daAg2TSM-9O?1{aT7`>0^&K`gcY?_RK8ZM59>
z{+wW=wDD&97E?aSrqy3z&Oc}(?<wf|(h_wW*q4&_-m6z(1(qafAZmwT6OVA?_|`_}
zpEM?Cy{`?gKDZ|Ec}W6sU6!-h{5jd2e{QExYr2Z%*(HYgzdDL|D3}y{0IVjH;=LYz
zT0E`A2ONv19z#A5-9&(JU*8|6E(V3qNt$mH4W#x|u8_!JsVzpY6h*;OZU9%gkx4qo
zxv$x$9jF(*<6?8MM}$uzAglsyPztJ~y+D?;(uD$Jt$@U~2fA8{67|5(tQ0jJIW#y1
zv)$QwuATLJ2^DP=F;k+X<gLpy#J}W>RLntd!ECD7g0)Vi;Lk;Gp26KnBH(C*pNo8w
zeED+kMaqb^uS<DHzEsY8QzY?eNgmUw7Y-w%S5%C!*+BnJcQNl=e1OIW#dTsuSfkAj
z#L&BLt7_GXqFV7#!!pJxHv-l}ljkn5Mc^wmRVVLYtl-L;HOgoqjXkf{x!!h-O?FzA
z*~x(H;Re1&1Zl-R01Ljk1N2n;7GGPFh#CL_gOYk>UD|22_NGzMJvLv2faXD^C}`|%
zw-~g)f`_;!))RBxFq3c(VH!SUeAhP0g*!fMjcR-$YSzk>@Z7#GWy9Hmrcy|cy_{@9
z3n#QL^O~%?KEpvSW?d;_g~n`Qs%)h#|EJxNr&vwr#K#kuIRqhED?n+sA2KdQ0CY*1
z%6_iYgPOHqaRS<Za+xh8v5BD*7$Z3F>tt8)>N9kEKlxg7TphM3m?;3CfDhQxI<oPL
z>Yw&*j?YbD@(f3%T9EgVT@yv5)!NxPAaX!NMuUw5Ft4nJb#~#!s~xFzm4S<O)t_lr
zyzDVPDyqK7aw_dLw5E@7TMf^$$CFQSgS1{N0U*saKE$p1C%KB5N&(@!?ixR@)qpU2
z70#h;(N^)~`aCwz-nv@WJcBn)9@@F(1m0!t(Cn?|Z^P8#{if;DnL7&Pp-M6BV@m*L
z71vqXn#D?1ht*~=W^jr%I2Egri@X&}C2Um4|42%+v)~wa#;vZes3E*2^3S>wRu=VT
zDVUl_@2Xp~Ygdav0cWK=DFUDF_6Z4m60Zn_Sh{QBk?M4wmNYx+w=Nc~|JeKLRp6K4
zn9H22NHbQTV<qt>XCuioSSQf<u3P`$`<|ZgNPnK6W8Ky@-sYDhqV)}!X~-cSararY
zEufe$-U))(I*0EHe2Aa1MKr}=xUE=%S!%88keeEEgM+sczzo>7#cbqCle2ker*9fV
zU<z_;sgKn5rZMuMZ`<KhJQ+J_hub<*#Z{YX*mqrAhqBpl*}+~l+?!>~s^PN5zBk-D
z|KqZ$q3VxK51*dQ*Z9NE&Y{A4*?0`@D|keTnaBg{+*jrcQV;E9b(|UYfTStWM_irC
z-8Bxp-QYPun;pTB3GsqChUUP5AuB{OaAU>*24SpZ!4O@;JXSXzjByC{)$V2y4ssI=
za`28Sx#1gC1M?pSEv(%W_JH-M-&rjzzSpsBXR#eby_#Csuv(64&mszk)P#zw391DQ
zTKJmVD^TmTY{BR{<vxqWV#N=17Bjezq(`krTh{I-Th>M!!5uXJ=6ZA27#Xs8F{Hz%
z3d|^GE(m8`?$u3I8x2+5L<J^xjze_k!|f8F{HO}Y+Tu;P$V^c2lT8H9ZVbi_GgfG<
z<s&C_E;?NCSV0ZqA|;9KZVT!yZ;i&SYt2=7*U#s*b}(O(Ay~xgtcu+BtxSvjq!80)
zyO^`V-hGq^{=MBG16ZM3juLI(YLIyF+A%UAeo2&~rY~zY_0@2s?o3`QAZx;(FG}ik
zDG8!8Ds8D{O>AfjL|@KIslBl*S+o#)7vJnBT<k@CudFRKktJMgCn6|DHFc|?2BCbv
zk*|p<jj=kaY?31}_M1rFtU_FN+hyS?0VK*usHrl@d4JN7UuNBsr7Is$=hxRW{0v&+
zvvQF9XR@2@B>$GQlgG)^<cFkh5)FGUK^S-tHj7og1%*}Q2Nec79jb3kR9L)fW+uzF
zfE#S#bX+MXD<cr^ae0E%#hWy=sa=J|7oohZaEoBHy^Dwa2W^|SDwu)ZdY88wM%-ba
z7SNUaR1$sIH-_?!;e)ou<DX|Jj|K{X-@B0b2_C-0b1HfwEe-lQcCIST>^<NpRy-Bi
zilD4i-WVK|0G5)!oc?!F7USTnLQT&A%4~kX%2o4Oz~oeBV=Thg8_5|ob4j|x^s2Y2
z0vTEat7raX;I$MJRQ?`N%M#^4TGW|T(wwnDmPXBAb<CgJ`GV`BsRMI*g|^--PHDFP
zl>1X+bfsm6f;<aQv_kbuvW%QD?wuU-jOJceNE<Awv!FeRQsc@rQW&vPJR_GoeJ&z5
zCQzd~(AFRFMKQT*l2t|qH_Z1WG=eKi=(nVVX;8<E7wCva4_<v%mJ+9ZPmL{=R&wIh
zb_+yr)OFY-zO(ZjCNMWb9`~$5__CCtkBWJS?b&>sx?H?;B)73yT*v7Z9$puNJQ0{*
z1$oa#sBFciE>o0X;@;UY0a`QhjM#txfS2E)4l{MDLi*GDt3P?9&G71gshh#Yc_5B<
zf|*jJZ3~XRBr)nVw0Z~gBgamCb{br*N#WKonh`UDE94kj`YL;eu}foH3um&;t;kGZ
zk1rQNcD^8w$CkIrG&_~)i@e8(Mms^pU<oB)yjFU$a-NP_u{2&dJ5`y|zGx_=ryBOL
z-P>FOyCd@<pFpLbO@-L_MysNYMJrPw6bjsrXZZ{EjJSXTK2H09y=ND_8Mu1Bm<YPi
z4FQE)lGInl7`HIKl0@Ev9%JU$U`E+@RYpDxhxi$Xj}>F@`Y@em$@Y;j;&Yu?3JI`}
zN_uZY1X2HQn*1_$wrRnGz+vJeshrn@MVA?HoR*6$Ufz~cm@^8(#G}R9u5$o^bfU@j
zw@3hjC4J}@D0K`Ul6A>Y#GFLqrFi*<$C8bLbYu_$4UmN)6DXkBN@9292~7Zojyh40
z5;>>O>Yl|>H1%FO_+J2a<Ho<IEdMcbg1J^i_I&Q6Y18ZM&078xQLWdSoTaBPLU`W~
z>M94Xezcx8MCLGM+{y_B`zVP5rNxo$vXr_`FO>|2I@n6q+$WN>UyHm^o56Z4A}9(c
z1j@9AyM!9vHp=4G!`Q>m91p1SsdG{aM^(zRSnCD`n?x|>z?guRO3DE3H^d8<r>A0M
zw9=H<6^=`exf{YigIW(gIvF%w$(L=cEa5iT%{|Y79nWT@(_)EhJ!iIZ&CVo}RXs@?
z+PaRL!=5XH|3V7P`6I#NmOtkbV;>NqEVap`ffxo_uu((&O9^_v5eQn432uu7%^g^S
zf|kpz`1hTmpd~c?S}bVyNC*a<JeF?X8XEc|WXP<g$Nc2Xm^EPOqybu5(&Hj*>6?0)
z29slG)r$bfm0d8taT7Tdi{F_Lg&W=gWz8*wSl0N$U|C9f^dLxbjB~HKBk5!yi3*TN
z(`%M~L!(LfzN1n0kqc2WMl}=a5knfdR$Xn5rj2qEL0sDarRris4}Dw5y`B~Md8~g3
zO2arHy~n{1y8HN+Bz#Ny-B_OGW<oR?jHpoKVr_S$=$`m?`pqbe&)4S8Ei#=I)tRKG
zq&G}t!z&GNq_VQ{Zz#72!r{(e&vzKt#@J5ssyww!0N8yway_5-Mpr%jt0*VgC`Vcr
z$^^5Ldsbeugo(3R@?=T!+kYV?goOaOs7h~ImUDw&v2Y|B>4{(%jEjq6EFr^E2>MFO
z|K`hPcFegl5esZeKKe<_@B_HrM&7f5khmb(jaaH51)l8oDUTlovFx^akizj(`x8Gj
zAyRp=)pQC{Bc*T%9|%I$E>SYE>`1%OOZtiTeuE~RHQT{<v9vbUH`+fZNq4v3@3+xb
z`{(qy{QBINpR8}8WHlhIcTo(qtjcg%4ghCBn7^wja=|1`kpFJ)O4If%|5qMki0!i7
zZNrN{%cu0HAdyY!8jJ#Tfin-2G3=QzGPQr)N}KXNf2boVu+^trF@W^!YAK~Y)r_Y2
z3X&BnX`+2tRMwI~`wmm;XDpg#wyiAn3NyH@SXcufi@V>SV@jh}+8vjRv_Hcddr&2*
z@jD?hx4jSfG04e74L>e_MSl#7@l!rgs~o)ctf2W?oSbpi0<$aBi&cyqDHh1NLMqlu
zynoOvGGQCqJw09Ir+l#U1A_fCl`mA9|NXmi#L_jr>}sM(nL`hEZ!uFm&RXK7)d^^|
zK3AzUgpfLRWdwM#e>IePno;t#6+q)}j9t>$U$y{3SO);G8*E53NFzl86C(u+-Y$U%
z+pnM0>L-}U@i7W0aIF~b<43NCz@7Y91rb=gi3L$#FK|+*+8U$)ho^~H=a!4r2?I<V
zL%OxS2^<whz48R}(d!yWSjC4aclxStB-HQ3-4|<kQn>9FI-ZtBytS4m-w*Y?h7ZTO
zTKHiW(_LP-rQn5%1?z^|4^|jB+e|I45{7x@1HJS?OPk%$UsDYE2g@A0a!SS;qFwyU
zD2jg$RnaMnexyxxh{Eab-?pb4MYdRDvo#CVM_GhREJ$5pO!lPy*m=Q)Ts<{^V+r7@
zX2on$QqjOBT~y3t+j*%=%+G2j-tejB$fj;XegyYhbHLyyO|}`Zq3W<V43&DfXXUIX
z7rS(PvJU?C)nSK5D~`!vek^3FRBscLa=&R4ajvaQOHeA1Se+%6#e=R^BUb}P>|GKB
z4pX0|nKXrSVIF5!KHbL_f*ARx-4t|;wAQO@(MN8zP5ef<)ecah?n>n1Lpr|<cX?81
z^dzEE&gV-nlr_R4+)G|?HTq2QS!YIToK0Z_DY1(xarrN7oD#6<*F+B?1nIWIhZGL`
zv$J_hdsi}{>y*gCpR>$*)VQ_05F&=tQ!ajd4N0-D-wuFa>HCKLKXn3@`;_a|x|Bqx
zb}=0bxoL%|D-kd?@}j<jv3<pjaU5nv`07;6paq|P8kA)YACF-RFgPNDd3MU107${q
zWexx-S>hvlXZRwEBFM3^iir(5eV!T+NH+@OPxsW}^-MtvIc~RDasXbUmE7_6wl59{
zD0Ie#0x_s?D&E+%55SZ;4r>V8G+Id?9jr+HsZxQk@_y~mE6qdFU{;69+z&V>)UHj-
zl}rZHVw5^W&17eXI3`?LJ3C-3xGBTa5eW>N@Cc2L9y_stKEyf2%x3x$-awKi9j7PD
zo{(5?1SpUUemhnjh%NJN*8t;|!<jihyQ-9wL;Np~(UQNn&-;+ZOEyQc)^>@KpbUpK
zLQa1$If@5{ohg2OiDhx6oIgMVhzdlCafPL;0E@&G@p8(*hsc2IDn+ZY>EIk`*rRrg
zoVwCqjv%&KI0r$T<>y%?L(6<Y=(>W!<!2*A1qN?HiEdX1!6n>m$B<p?J?mblFm$h}
zuGX<Ktl4RPv-Wc=Wc2O2A?(JpYttcRK#eFiXU9>)QDl!<DLOogin*7bdIR;;B$)Gz
zlNSt;NZY{3xjIG4wWMsAq8<9`fcCho=*AaxO?2IpZ776QZLvG9tw4En!=(|P<Z^f!
zI|(1>rkWm>Z-kHHTTM^0sAmsuWGjm1rTVdOhk%86YnkB)YAN5!osTNw+i(lmjg;F}
zY=h@Gn5Tl5Pqf`LQuhH?Y!~4#F(l2&nJxySNl8|TG@hez<z*kCac#-!gOj*^mO*In
z1>tFF!R6lajc>Q_$rF%LX&pL>Etz{`3sO}Pj=`*-BpQamHnd46W7E;-DoqAZj;&jk
z<Jw$(D^z88ZRc8*)Ra0^J_O9!Gcu)aX}lGA9_}@<V*!_+EsHSO{gxITt$o0VS|QRo
z&&+&2y<&mzW}A$1g+TKJ7^<=n=E6eM)omIhPUIW<BHHT{sVD7nGS!@LQ=0-77U}+w
z5c&Mp)$sf9PR%8o_j90D1iRW9ylyiSj!`zZr7Z7OMl;VteOvpwp93H=3zWOD#lj-b
zEvUUaG0|_Q9adcb@J}Evmwlex_;^7|OcgYq2qV}m(kH?o+@YCz79p?j{Hh|Uyh2pa
z=~W}sV3EOTz8oQ}0-$n`uD|QWHak<)+2_@U;92gLPgSc}PAry&E(25fYN=w1R|TZc
zeZjN?I1)+D8lSycgpv?I1(7i+oMlih?_P`%@-DofPqMUT<FFl|+6DTu&^<@eElSlk
z9m{pWITr54V<KsM0e3MX8E2K`#qrW0NV%I#^X$Sx*d(}(dc)9_)QN>gp0c132IO%?
z3Z0m~KQ9)!DsoE!U(hyrJ$W%De4hjjSm0N4iPIBI`2X;zQ8n5~#w)-?NTuRI3b5Bn
z@t%gE?IQ$Az>fNZ$zW2JzZ@z&<xsjc%inWIVcK-JV>y*4NRr{M&a-N{S^Mb^>|8-~
zqZXgwz${ywa7swmu-;daqCnaXNRDMQLnjk6kPWQEYvZQHd#zEZAmgR!0c#*a<Vbr`
zb#}}#n=~g93C|&4AZ)fEI9hQ_BQ-lr6`~&W##xQ9y6#va4&y3`upNmVUj5q{aBdQU
z|N7$L->Jy989|nJqgwo;rN8ofvUNQNXE4{3a-M6=B5^9|d42=)pA1HHU+r3QVt7OY
zoQ5~NA1?B`x5;fWb^^^10mB{|+8Ddw$TN(adcESfV2)^RHY3p%@Z6uz839O_;|hGE
z&Xojjg7`8M_R(ThExVeqbirZgzH<U3p-Ja8IXJ5V4q$tXp)o+1Fqi~k%&rQ&!1u4@
z*pb?St5LNqmaAp1LYje4Z$60_3e}7~4*lKOh1TlPvx$}Ef$4Y*b2DccR-}R_dj5G#
zc?8uX!C(qxwky+THB~zrKOBE{_z6}kv8?Y9HXw;z;o+tw^_aN{+M|q~&rtR9t)mu+
z%R8`g(t(GNQzDEAmakajgbr$idkn84n}zsfj5ZR(F_vP?k+d=Xb`Ms>9y^bq7zhpX
zDbLGinQIat?~e=O;k*<Q*v=($gm+gA3x)$gy%tu$S_9~vZGeMfV-s?SMee}Zr61?3
zC7-Je6b=}i;?(jJz%HhdUsv6R0!1KYoz!AuAeP=OyNgrdh4<2)xI$$?cG|7r!G)XN
zU=d1w*nE6%Vk&9aa+4+L7L7J|#-nB%Y*2S^)y_Pb{@R*|#|cqmZuZ%srq)U(WNg1;
zCaxyXCapE1Z%#nZwDFNM7ntEist|ZtwgG%>gL`Q1lmO}=5#~dzowX=zHg?v-wOcJ0
zlx=vgwTv9Ybqz{=Md=b!89?I(8c=i0u)$e|D6N!LVaSNAISGq>bgmb5E{Z+}(tmzd
zL>U`NeT<>0#vFp{&)BZhddc8MV5{`d*`nkGKDCF~D_t>^L=&S5lw=P0WFm)R=xrDR
zy{6-pGbWfHI|R0y4`nM~wmvzYAZyW=8|Frjf?r&7pExhu@tdbV8opHaW!ajB5@buQ
z6Nd{J5oT_)?{_FK0QN8+H4|qA;x(dE2WLuT4%XB}vktL7VO|@IlIt3<o+<z(im9_!
zLu>=d8#OCDSy5d}{6Ytp@@<aMuYY^f+w0$H>}Axsz6OoZ-0dCg$G(c@1#b)?nNICH
zr)z{|IbK(qN?u+&d=?agy%P;Lo>x~lv|$BYuE?5ErfF0kP<*$s4DVmE`qy9Uf7etU
zyFOsx&s>x2uk}CGL(iax!f%{5QOIks(}wHpZ^By!ciI1MLLnqNhZ%os15Y3O+fRe~
z$A_wx2MMx#R<b3ko2&+i?Hk}OP|7B3YjjSet{eg^-b*?hq6he7!TbkpvKqqpf9eY4
zz+rv`O!3b$AL@%wle-YeH*7_9%nE^B4klF_tim#S8|8=o-y(fXITi6P^Pzf;4>xpE
zvt3uuP$Y+l<PFV$vpLw*`BTTA6o2jcu%)^a1KAson{v=yI{c<tQ8-dIUyB<H`n;&#
zq6x3(cvpXx-LZMU6q8B1>Bzm7p_-}wq`~!P(qP{?31fG^)IOF#noW{N|F1$HuuJqL
z-yyyAe7un|S~M8WM3I2$=5z@W)YPK$7a!!^=YxyVsX7>FV|Kn^x}K)>`S@CD-(D05
zR+8i#V;}(+<<jU}LqWC8?fIfO&lZLHYptmET*|>$o&Mjzd~meOo%ajO_EBkeJ`Y7|
zhcVOwRSnlAR=U{WpTjm4#XH)j!(lD0U%;FHmm(@(B37#4q)C$iB1dIRB91`h#Wzm-
zc3Jd3VnvZ90<tmt@ZZ{@Ya7OA|2NHtyB$o47sx_<?OOF^Z==v$4<?x4slQbYGR{XU
z#*gatXb2<P$?0uR7`!>qmpIAl?^|%!3E^_x=>`^(KIYp`>vfNfLQuu{U|&jpD`l`a
z?qm@T*+q4=u|4!RKOr7ar<sKauuU{2@s{CYMyUI&c~3M$thc~)(ha739j`~A<2V>@
z%(rJ+k6tY;18?=PG!8V{|FcbqWf$GXP;_0ckqqKCcA{IDuhy(ZH`s#$%i_8L>NdtA
z1mFDASoBZZ&_7K<|Frykbj3ARMHSTQW(}5;qgZdXu&HIN)51|^sDPUo=|A<<f2yVb
z)I$HMbpBJv{HIF!PYv>)3gd^UhcQ;Kk0`k@bVeSnyuMb8m{~`QboBwHroy<nLUI&M
zv=&5Ug>B*xn6dP>4hka(xEn$|h&LlXU$VJ;2cqiGd>L0e8i67>VFtR>(KLqx1~%d0
z3j)1GPJ^phptJnFTx9!pGwE^Y&!U`0A<c}7c7-4=rYtVJ#$t5@K7MpH&%<v%k6IF#
zYd&fmB$aD+m(gESF0QIU=3V*8ut4@>4>5aoLlWH4WmofO8T7!n=n4zjs}2;aegPwJ
z7q!YOK9G&ah32TOe?n*072v`9dd+GK1()cMj(#&@JAb6KG&sJ)uqW{cjNbjrzt6Am
zrq&^F(-1Vkq*>cg<v7>yP>x!02owT1UIjTSl6}K3NGuWPby@%*mNg(HHgl)qLF9V`
zZrRT6tzD-AxNJ;1Xv?`YsWJ07UgNEFpf`<vM?<&glRx-~`PJzg-?-TFbuT%;zF+f%
zq6vL~UO!N&lLbb=NuHHBi!EePXJ+7zqo#@Vsn3SHrc3!OtBMc+H%uwu_^WkW70Z8~
zYb}kR`z5$8sHxRbdtLpdhA%CHqN>-~zR>13E<n#Mpx3Xjjj{?Y1E$cQU-89j4Q|)H
zw<+f{oZh-_Estp8PTjeC!w9g&S`BS_ef_p`88pTkpQy~Su6v8lB$3AL=cAEzgjp=I
z^Mk6pn<6PXH!tdx^K<XrIUM1prtL+hJ7#G}kg&KHV+=P;l043frb$ZY92ncASl-Z9
zl*jw59&6LMw<F!IiRbYy=ZfbFeSUoxTw78%*fzPpeCJIaHR|(UWuP1c8^Ewe8ZHtq
zyNdJ^MB#F2pmlvVZBkp)(%-&L-(45(R73Ev$LwXm_F?Gn1N%OQ(EsaDQtXDOXT#HJ
zghE)(W<p0=EapWJJ;FT-3)S8z$rhDIPn)V;=G<c9BSzC@6XsgvHs^GFE`@cVGpv7#
zE^=lfbPi{G{-MDh9o(fhQBIZZLUic;AmHht#2pK?jzCB|3EeBVk2jafoAP1KbmPy~
zxRRx0u%-3~UnnyaHD}`hJA-6ZHV|-Qk*L3ZsD<q{N5lKCNZVZA_l?`eGEou`RK;KO
zsD(e6WHYcps#+mS!@l=WU^*#We5zqqEM8qF<#}c(Sc7rS8pCD7H2omiCg<hCX%tp~
zCF*!>nQa)BgmRPW5@eO^10;SrRm{f^$S5hI2I>tSm5DwOCw2sYnzQ-2d!~1q*ynoG
zxYflTJ0wB@&OPOc)M`u@5AXL;ZM-VG;+>pvIUthjPtT;d-;6{*tyVkDu7JwL5K+&k
z<!U@Z*~R2&1?<}{Cmoz~*#*u)<F`-fi^M+^bh@7)={U&4lZw+A+?Ox+Uc7vJnB=ny
zhx9AsY~}A6>q(z@B5k2^;;#OAkxf^5*I$1a-FPSyp;dd9mT(?Uz0~zuogi};#`e(_
z^804S@z)a3)(}nE)K$3?V}EkfCuFviaf9yge2_RO&AJ4Bo-%FDicow#KV879!H+Vr
ztn><>6PLb>fpx)v7BeoQq+ja_&eg4ksUPrY^&afEW#w{^?5;j$BndBjC{5>{lWa&V
zFheo{9J!KA&$tKZ_d*U~NlKo9Al4d^LQq^Qjmrd~y}na6&UjYzRSYA1zYE2<_EiQC
zu<VTg*PxGg7AL_pC|7&DE%Om}2lqQ(GWy@+um9=pAOF+szx}7^)1Mddw<pEjKdx0w
z@v2rd?c?wD?lkm<zxP8juU4Z@j5hnba`ZuL@;ki8ug8e8bUpP6iu8TnEJ%9lf`Wii
zExANu*5WevUc}-QIh+`rlZkuXBvqv9)RiLKfKScFN5h{^J>GQHh&LT!<9^4(;KDd4
z<wcSM_e&N3%`mt8HN18A=!*!5{-eiQY>0VCK0c6a1Gt0aDo118;8`UG%v$C)ILEx0
zYx$+`{&*KBp+hgj<n_X`6G06M{{6YwZ%0>J3Q=>4jo$Ed|BheP@)f<2MHSFhLwZi@
zU*(6n%A7pV|4@Uz9);;OGt8y{fwj?d6C~aLDQ*N{*yiIjxz$(Y;h*qP2Vz&87t7c+
zk<L~q3+ZP3HUGpR&D)kyBT0UoIWt=F=zf<t&imxS{rjE%ZN8dKr*(%=eXI`EX*KHc
zcekbf4cH5P<e3AylnL=R4Stx7)ihh;E;2uDw&2nO;aH1!#{CSt@6xzKtS)7p{aep)
zQE{F*S0+hsTvr?82QO_?otKdH29&eAk>MIO3cr1*Ey!t7!!Dx^U)N5+H<AcxD_>5B
z#FKIy#PXR(`k8p<t=__QACZMk?mzg~@h6}BdenRH;FC!&yZ_)fz5AnIKkWT${^=(V
zCZk{f`sDsYC(3;xDkC?e%2TUF7o8@RjRd^f4V72Dc6>74#ki>Eq$*r<csAFbk!lZJ
zsZ`T-6(72a9n7<k?7wI{7rD4ZF@Ad6v+))O;ARZKTbxI?I&?N6K*z(n{W5+o<yCY!
z#41%<RFT31Wquh{z1n}Vt0TVEm*8fS7r2DcAuk#(sB+UnjRCq$d<l-R|N4La?<Cvx
zfPYM)^uKNQv4`2CNsnIYB*}yR!%E*7u`dD*Dt1cr&ZE&MC;HB#{wEceO2k{PN>OrO
z$K>Dn<mA(_`_6-=cOI<0^Xd3kdEB@9I}g|1`BnbwN&FqWak882nT(jMz4PnIZ|>_m
z_xr!88h7O)uh@yhyHetUE9UnThLjgqDswU;x@&^RJS9p^855!#H<x}0`>U~Mka(qA
zBKtBKZe$PFi^`3~sy5f5;zKQ}Le(rbbCH;!|G}<{cg^m`*KfZM@t-IBzje}=>n(!=
zr5SuA1kT$=-&!O7?SQa5)<ys|hNp<yZrQ|xjZHiZn}|qOU$DiKG8ascuBOQ6@llB7
z>^l37=ijp6PSLu>gd2zOb_b}23`!w{)@sQW092{`Nqza_DqqQlXrze~dF3vr#_cP5
zT~o^LnzO`54`+Icr1qy|{^D;5osb#O@XsH79U6|IVoSS$L$z9a4nNASX{jT7G&3=%
zLAtm{bVXW)29Ve``9R6WOH$M>$x&KJN)a$kJkT0W5_-Xx^`+W*&vGRF>S1G3gO8-H
zlkpOvq6`wT^Zs~dP=EQ8e)5Lqgt72vf=Cxq@|JL`wPv``o;4F0J6;ut`uPBB$CO{R
z1_E;jZg@9~L8(<9BPf6x-Bv4qWsx0Pn^}W8Iw1mFu`tkCNhaZH9$8?m$Ev`hG6B`I
z(1wrDlt@5{fbds|E9SPH_I>fpZj$z`7yb(7W2n8ctL!i7YViOG=dkh<E~-nyjEJwy
z-p#=JQB5IVEQ?&=_KF!#OTw1l>KYVw%w=-yhPZ~k&f)dJ6wtwC(aGHiurzu^qRGP8
zDHM8fMTvbN)4<0uc}zy0$aN>*1|ayqbn?tCtvr9eq>?66k4o9+M3cl`z&OWj^JJMj
z@U==bJ>(;l<?DZtHKJF}dVo7qt@Y)5Kta;AKjjP5K=V*&f*EV5dNV1o;db6#jXsR#
z*0T+evXKY%eTqp?0Yqp&EI%i3yAl&F@cTs-)zP^@YknPfJK1)BT`~l(a12FiV@DhP
zxT5V(3^T3r#YJ(#aBY*~R11dKgeaP@PL~z8hxP|vE6qYqyr5Bv0b9yhocC+M>0pqG
zLFzbP0Nt>*LwB2)fNXbeY7K*&Sy6sY>uf0*$#VqfmJmG}TN4y<;uPQESQC;}=?H7a
z;jIjv8m%6KNCQK<wuZrq6+ykh<}cSN#Ys!+G(_*O(-p&mvKBrYqa01mV_YkK2-iJr
zDM22r-(tp>UGhCk)X<xJ!XS^QkSMijHalIh8{QGD((7)Lj#e`q7W1p+Svh;ef1b_p
z&uNMOj`JD+3zXDUzM7)y4be=hSak@`;6i-awBo|8;u9Gsr_*wz)m$QOD|5?%WjsM|
zb$)hfC#>=yAf(EdO?A2AYDkRPYDMG}W6eRDfu}H{FhHS&9;D2tUv{B*qPeIpyO-y_
zD3)KYM#-K!${>sc1L!3<jdznj80cz)pg`&=<UQK)*!S1DlW{*Hw~!}ppuU5wSj5r`
zZ~hOdX+yNKy~sNbe;vEWHiv`Xw>ieQWco}RJ22bYhe%}3FxT=8#hxg8B5+5k14=f-
zYL*<^GaC>sfAz?T$svg4uB(PsP8{CqdA30H<#aIcUq%9;qy><0d?r2sJb<#@T;}yD
zLgr`XGSl43Js&?SF{u$MumlU`<1l928JRyL7EhYDY(5Lc$GoMo(FB`VIZq}9)cFfu
z#L=LF9!vZdCc@{n?&Nr4>B|==9eI)W9MG&*473mvX08j8dQn7$V>#r3G3?;w{M-tJ
zB-*QQx9{=4z2E`KUDF3TofwXJZ#qBAT8;p;>J*KbE`KIilx}{(6PDR~LA2D!IxW%7
zmHRHr=>-?)Jyhra@xcd?2T6~od0g-*=mdMl5y$1Lm6{iF?&&x_Ox%o%uTjphZ|#_@
zRFrj3)rxfn`AAM;6B}gZ5h=|m8rwwE@BXO5?xEU;qYrUiw2hr**h?!s=z5JmWUZzD
zZvhj#sDj#Eq{O&3UhI8g!ytkD9MzR~6?77Z8uk!7$}!_=lXfyUbdBrb=@b2LqnViP
zc{nloBRo`Z#q)w7w$cyDGnOFmiaaO~%B3mz&AZC7Y1a2OsrM_Kgym#{(REqz;ivdG
z_Ej-`wR+DGH!KGid3UQ3t5$CrI$LV90I@kEg>y^{nT{R7-xiCYQ(Y5@A4JgIqAcmu
z6_IaD>YvoR7j2(UUMycZFG)A&^RZk|2fB>!%~YnbKb%99COKyajq`0%hw1!1CFWvD
zSBe}e0WB*;>&~fjHitazL^(8)<d<PbxNe}PQePnaJwI8w0L)u%>3i<|o_ilY*xqVR
zz3!oaY3Gi_#uNHj9^$e9hnQ-UGPh~(&@U^)4hs$`DK9L<SfhsAcB#r~?$>4zE=}L(
zz$K3{v;47_!89A#dbZrP&*QrlwS(_+R=Vtguix&QCdEbOmmCo`7$D?#K%{a?GHVAl
z;^(>COG-6k`*H{U<PC&(xM(fL2@KLNSihkF+5t-O2@?n?2@T9iSam72x;8AD_pjO2
z{L%(55IA0EeSg2z&Nggm697=V(Vc_aZo_sy3)n(YNd#8NAG8vI_W&=YCiP=BnDBBP
zxQl#E!iibZup2b<w;*WuIF30!s;u)tfks{6hxZ@;s(1fay+`*`8iFW@Gn!)5H=zZT
zj)-%yT#Y!Zi`|RF*QPLWA4AIkoc%5Ob&lxA0&wJFJ;j!DeeH=8vPT=aXKm67eZ$4W
zZHc<cvY@>}t1_;f+g-PbDV<**Jx}KJol=2}OCm&~ND`b>Nrt3!2`{PX=sZZbG}+?R
z?bzMNpy%_aPoh;q)lg6uBoM1&27gYVKFT~RgB81!OeL&Y*`ktylT4X{wp>=MJrRqY
z!fv0D=B9-pxCnK)-CR#sM0j+(SZ9x|x8FYDvkI1D)E64DM$Cp)-p@mMFQuKIUgo2-
zvV4~+`r^FA4y;gmGuh^dawK-SP1|8sPgKJNI<kPWlWl2KLQCU>M^2jM>d4faw0cCW
z<T0)hBY8S_{4NI)hZC2$pED1!slDHp_v~?#x{L(0IjQ?&Y21g8?CrUOy}<!9)0jn`
zcvcv#s_hA)YAcBv67-JGf*PXCrVEv1Q=9CxzBDaOMO15z1citNM=1`$`HTtxPQ|Vp
zqSsyyfB@?16));`v{YTcQuOD$Z1N5zGTChz+IK=VVWf_ObM3E@OB$B3;rlgW-CTU;
zbI$vd$9yoKJDzY3HAy2Vw{@N`BuOWP4T-qAxsOa2zqX~IL>{&IOy!x1cos=B{G_X7
zq>>cJShH({sD{+%tKqwOAp!n;EMk@Oo4&~fQtVy+vN9^(`{V5DdV$avU2-LtZu+7$
z6`mKKVWR_|i`6Eem1rlc!O!p0o4%)Q6vzQs4w)pYC;fr^(f2krs5959c&*kN=Z5&V
zNq6<74k|U%#j1`YHd8r6O;&tYe8OwmqZa7SoV~->j|p=NI-MZ9h|Nad<fA<jg3d?N
zE8)|s-7PrNgz-R7wT<N@n7oC8G*4BuQspi_pGdgNs2mrXQNlA38W6yV*<KLY38XwR
z9~ND$vZnF{S8&TKU&HO|ea!@9WlRR|Xsm(k+%AiSZa3c<DPZL(gl?Na7y&SK^sku#
zT)|^s8`eyXNbu#gPMmP%7CX4K5V6oHKq!v}((sRnte30rOPb%ReCi~p|3o60=AG1`
z+qT5eLMmvtQB@(a8@WJYBai`EG6t>lG&$xq-%t_d;gIh})&V_|+{*d$P!0i{tjBsj
z>9ftPKl;s39vkXo!(uixvso>fjI(Pr5lw<R1dNHZ7jYggk{7F!cdtmi5F+M^bO<bx
zL#vw{u*H{G>+pZPa)KkyQ<mU~jIV^qaaw<td{OeV&%!!j*&_Fq$!#CN9C-_x$8l*v
z+ZVYltDa#EhN+EuFx?EwI}-<mru7*AeagRQWv`s)VyJN2`*BGJbuoLY`tmor&oc8$
z(1wTy5td<!O=Qu2ifv@OAW~7KD-@uL6bGrdxV+w8$ALtW@rx8ju&u-L<Xx^}9>&hr
zDPH|WV0vLDC*R_E&1xOZ$4GP*j=`#<hbNPC6}a<g3qesrC+d25*Ubb!&55?f@~WS_
z97}mblJc)S1BV}3KACKbd`P{X!5f8;BT`5Jp#Tn+>+AH;0-kO$hA3;b+&4du4z`S*
z#(~yP*z_^YkYyDz=egv{Gm{CC8Cj-P{u1kaU8%<9`~_y!>ATWdVdZE%VF(SoB60F8
zvg2M#Q9~%649sMcdZ$@8EOcK8z*Nun)gA2+0rj&EgP&fAz6b~i4n&x7O|(uQJ-q)Q
z(3N%Hpp_Rq5lB6bO~4TnmgvO*m0?Fd+$m$@i7E(-DhdFeeOdnwJC4po0ny}`eqd6G
zH!G|C{3mzbWeYp!!H_N3yws}o!UI9-1g|wo>C4?m_wV0NHGYn-PFcEi2Y-WECQO9H
zS@W6I?{j*ET;K9E;^hdUCQq}rU0Hkh*>M9SlPzo`6B3Qhv%KeSV;czOWXPxZoLb#_
z6*tK}Qq~*uuC0y+A-X6!|5ACvG_St0O?(+5Kxi%wt;C9<L5k|Z{=v&v`>$Wp(Uw{l
zbSsRR*hkG~YB2<IUN388%~SH=!ElZwybAl<&eZ`+(fn3rW)qIh>5`_hs*-f?i<hsD
z4!K8kcs+l$_w@_u9}C+oTEGKCd}C~!R7_)IW>=tW9Hap!W)Ab-$#B(bF#+yKlvPkH
z-ON_89hnFGSzy45p9`hqzE*ff2IAQJ<_y8+gM4!f_p)!OiaZ?)e>L#f+0|5B5)Dwj
z;;IN9^_HueShp5m=sIO;%7Hk2`6#gdHgx6&+~CZiS;^yF!%$FR+8ZpihnnMAZS0`5
z`xpn!5C+(%$zyp{eg&o9^(f&8B>VA`VvpA1i9RrrNI0?^frLsjKoCL^9fop{kZ$wY
zZwj~xhM#IfI+@(wB{cN7Ne{mu!jKE>f9swwI0WHI-{gi@M1m}}$p$#AcUUa;=q#x7
zW{wB$eZkgG$=$31cR!o<cFmOA8v8||i@~p_E$jMl$-(@Oqu)<kMKvtx^gN?G_UBU<
z*^JJ%zUOFwHh-zTo3!<t?XFx8KE`*$kJ~fRH~Fc!7xtX>fFE()X}5mVXiK$dZd>3%
zXBU<*YRhpT1#B=qjq{K3iq5Hh7CK1KQ4$4JVxkuJ)Bvh6fV|y2tQILEr4`cSvpa02
z;VaQVqn_`@aA5STjo5dm8&p4~S6Fk_D99@n1+5q=E5kya5RnY-4h0F-=^T9yp65ZM
z@;7uWa7b-(zhgC1gmV*JwCbP|ITsEOKNEyyh{E?ljK9)Xt&y1NS9UGnvU2Sf48QKE
zxQX3sSJs)m_3_BTH>k3}Z1*NMZ;^Zv47^Cjx90ptf6|s3TAIssYLYY)O;EWrtZz+w
zX;D@o%340VDCj{x8d&)Vnl~obM@(4%JN#!(`b7U!wDo?a5PciwQ_rSb9YjAV{`HQT
zUN;>@n@^!=S>+`1QJTxL;RuQH78&IzFy^5--sVfF8T6gOvea!svz=ZytLu;Z<O<{s
z3;E7S@ZLzmqq1BQSIp*3bS#<5Q4^-o*sdZb$?-}S0l0|@{C7x9uU7P_#Z~fH{}3xm
z$Zw;==36D7<gtC_79!2xaUp_h(oX&!>j;GD^=>ak3{7{9CdT*wR@Wpo@-vare%omL
zHjxwzCsM+t1ACvvwRRKUBK&W0%5doXw?xXGRA<>@9>&IwS10erBOf!%+S(sE2jjc!
z0{*-7{Hl@*=av2;A?t!;I$Pntq?(>gb7@FpaOY*UJf(wOUYVDdbm9Pir53TfSdFfN
zAl<Z@m6wxg_AXBwdEE1maY!?^)agXIRW&%{lPez&^+>;wb!>c9zwyYWc1In+EH->T
zTUGPo1Q0gX0rPPgf8x_Mlml<<q33N|U!V)-W=LZ8wk3#f>MJhUc2k%`C!@!&=_L=x
z@%inyd9M>#P@EytL6Whnjv4=l1nf4P3h-4W24^KUWIh1TV1FI~U=;QW6<mo@PjYe0
zh-p=dJcOMSGp`2!BIvYSKp>i4X|j^DRq4nyxuEV8GtGd%>L)}`?02M$y_rc(9&5q;
zXM8&eL&M_!Ih1K0z?fmIGXviQB9zsokStuqP-cLwNQYP$VRgmzFRi{K;k+($!DPwK
z{*l_gm)_1JfDqbISy7JKR$Mf?;Vk_u=dvNmd-J)iavnG1VM*6Z2i3_!NDmNTE+XHB
zbNhLdEK)3^TcFVIvev2|@#~4C>raZE?;TfKXTd?1(|$`s-x_e*GWP&nCqX#U6w<at
zE^Kq!4gcK<l1G@b;gZzYSUIF5oJNuhPdKU&le-L7uWM}Ncn!k)+ig>gPU(@=s86p9
zTzvjC8&&=ngC(jDdN7)nBMF-GO(K2}*}6c$SRfLLwwxsL<g=5j0JYpO@tl#_JymRq
zQ~vbRp?iE7J|5_c5>^ehIeC?zX7owJmONM>PFls~)l3jD-R$sOVcU#xEQVB}gtE?`
zY8nsyIpZu@rz4M6OZB&Mw_Tw0Pt-I%K&RNKJ;V}^aVsem-*krVvFANtnsEc0&rwp(
zQb0oX+_r>&IN*7fg;d>Qvt9QUcL-Ue_cf|AJMbG06TU9MtLh*VXd2Cjo2@I&n=}lG
z9sh5nXWFQ*Q#2J0sEK|KZDt$vOuwoC5lpX}(fCof<UWermb`uiY!Q^kLn?H)2LQa$
zr#Oa3$z#(3b2NHr*KSJq|A`jv4>D(OG&yh7bZ97U(KhD<-xj9epZ~i#%Q^XPqEi3W
ziUE#M43H0F!5FhY1=fr+gFM<bM;lA|FR{1_Ityp^G6(prLmA-cB9iy*Mlb1m4`3n?
z30gcukZ)mLL%h*g-)R4w)Ysj9zu!h%?Vr=*^6T>;hHs7AB&)$$K3f!n^SlDGz;Ia(
zt7&%fF6oVvt?%3XcY9YFw`cjk@)-Mk%XYU7HDH!c=}|d6r*sW|Sh@f`8ZrGDDw<{I
z?H{*Noy-c8Sz!v6X$+m_BOz7{JZ0IWqFO919AJX9CQZp|1_<i^Lu~Wb&yJDZV<9q5
zn$;LOco^va58Zu<P>5d9D1^6xdr%xfd<=b8wH~j2IQ?Prbnw_P7=JiL#grd3?qJ|B
zZJaxVB=-+<hVYB70cXDFbSl+CegS}RudrzXcILB!IrA6M?}aL+c~)Ju{K4x0sQdgK
zCa!q|$27{%3@IiEc?|<=`yMIS)oeL#sF%Q?MKCS|4hDC(Cx}VxdSbzb1<b%J5qdus
z8(0GMJcypzMzF~Mfnkh@GvF|7C@NoO7b2UiPgCF}VTtsbiB?Ywkw<GiDb+$e*(3Ld
z!{j+fZoDU<whD8{h#L7_1kDT{3@<7~c=X(Jv3_L>6pK%5amduywH)^NZ6MR<y>c?~
zYi)6PjM<QL5r$=k3RG;nT(4Kg&{Dikh2VP?mhn)+{S5Jk;}6S9<y1|q4T|AOF)x?W
zV&M-Oo5i10mjldpf_N1+rS3;4d)5p$+;8nKWt77)j4}&Y%lt^Y8o3IQn&Z>yd*f0N
zG?20*WY*KNQ;eV_(Lo}taatPNz3541$qY{+eh<UA=bbj<WOi5xkcl|Ufy$LFuKa|O
zK%KMSk40<t*jY9$(YUq6X2<Fs-<Jwovq@pDY0ZsyMN}11<EYf*_sTB{Zye1Q2!P7D
z!s?Y`n;W1YATkuoCfUvwiwuF(!VM)t9B4zKiEO<*nJJIsNT)Am#gg>*Z^Fr+mgPH5
z<TN{?D|WE4dBDtb@afX*cAisM4K;^0(kK1|Ld-PG!^5iPs`a+?(owZb1T|~fR7f4L
z$zW%vWfQWS9Dm!wHbvzz`4tuQQdEhku2;h~F6|Xu*Xmw+rC!5pH<@J9%3ZfQUUr!e
z90UMFg%W5-M5Pbnf(PChhVT~&33Z$_C?WxS5qE7P@D$H0``FjAg`_$FENyBa<qy(*
zU13%B7l2eMXJa{jEcco*Il$65P}lPaODb3^qHd(13`QT*xLe-D(s4<QGt7?lhQl{D
zG};h9K${LA?Ah8qLCn(~5cGCDR)iB+K4_PmoP~GU;B%%Y)fkCJ=QN?ke7dPUZQ`*8
zqIip4F@Bm#@R2V-#%sd9D2FpSy$be_9f<3W{M&u7RXde7zAV#v-OKc4f$v&cr(H>$
zQPGp2W(nHi7vxlQC;Q8n61a)tIk?Y9?}G<JI?jjq9Urk=a!V+V#=Um3GTW{Sny)J<
zTm-5Y)39?uXtwC|s-;=uVO~C@A1@hsqbz;@o;~fWUv?~uY>~I3ggQ+~6$<T#745i(
zI1aTAINMw+JoFU~q6&d$#Qj^ram?HAWa%;y7E<+tc>a_N#j*FtriS-SeQFTj7*7o%
zUVsl1pn1f}v>#=9x*{NmO4(xLsPPotg9yXA$fg>}qKk{_qj3<CU*X31ov9TYjSpoU
zx{~OqVG!cy4GRm!Dc@G6ba~dyzea+9fV={W0c!YeG|rfJh6&+ob~78~2h<vf%};+R
zbh^I{ThU*p^ugbnf#(c1iL-n<Pp>I;uCVTS%pKeRO=w_4&G+>gV1{B@K`_R<ifAgM
z{|y#(zjf7jAQAK`t2=w$4Cq6!^$C7~U@{)sWr(H9+EgWAz>V3-;>!8M%h6<2on(K#
zVXx1?8a!p=44~Fg9i0+!-?H?<xPA3vnjwQrI?tBtFaFK!f}j-l#+vuU2l#N_Q0o3G
zm+bg1S8%?t5bn0qUg01LD<=+;)XYQsQ2$dAh)Cy|Rt!QY#xBiTT9m9A3YY>zy-LEm
z<}`nBtrW&oPPt0C*0E1Fal*gzYWEu}<Ivc+Dr=SAbQW;!)-ZUUb*)NmPuq|x+1gRT
zz_k=)X7_NX|F=2=TAsef2hzuU{b^dOc#nj`1AvOYbKq0!7Bm*?$M(?QJPp9w(OWI1
zwL&_NasBJX^l2K+0O$459Zt_wBMwao2TQFOcEC?6=kG_11`N`nLyMWvWl2FC9)!ZQ
zMq^cfzEDxy1@DS^&sj*)O}hZac#Yn@WqMmIH=M>GXJV)S_s0h?1F<-8(+o(VA%4Zr
zM*r`Z6JiFOY3x=s;GX_F7mcmflUN{o&K8(9&44RyrIX;E?*I3h0m$l`rQ-Sw@Y8?q
z+EHx=*z>t@7u07!p8oH(3(N$b-f9Ls@cNfWM+XVb#}c-52a(WC4m1G2oBSS7T;1gL
z-qB$<Is6~=pD&&tkghcv9Ii&)<g5R2boAFbLF#<K74W{z3<UOHeXsv_PXnaXq?@H;
zn*l%aK<TAd`+vu~fKNlIW#7}%C53=x`dQG^5Z-gGdhef1)FN`uAo4-n3MqT@a)HE&
ziI$9)cP+VKT+X(9z3EY|4iX?zJAYUIFEInst#nN<kn5rtpep(cADoQZ2<*R!L|!!j
z^mlgHn$HTb`YILfD40P(dm*`Es&NdlLd|M#|1U-b`Rt;>PL@8V>rcIuc(*zDJ)p)p
zf{Bv`be_R9Rt7yK=6OUyPf33Wb5>~z{$d+T=AeMJ)D?mW=D_N}JY^~Ac?@OitHdn5
zzg{XNd6x-?4}|#z+u3=E2q1m}zB}4Vqp7+T%<a|b2V@j^&#jmJ<iNfTubSaDraLgm
zuzJd&di2F&nrscW#PpKx#P=O~PmUSz^>04n47`4Gv_1<Phi6^r|K+)1{(ia0YE<x7
zrU7NCjL^)*=h0G)9D-)qt97zec-Z`;oVosS8}yZG(zLODa5?gud~4T1peW{EvujN>
z{!PBMH5Zz5uGPJ6Bcz;#p0)L_UgKEP?_BFyqmlg6v-S_`Nc+e0o88Sp5Eus6Jp^nb
zEo*X*#ApRi{f!LxAIBf?4`=@WhqLzo!x{JQ=-aQ(Zt(5@z3k!Jy7B?G+w98!J7Zcu
z)pP&%X^i=Ya8Lcid87W}oKOF7zNUXT*U~?nC+Q!~ar6)8C;EqT3;n}+f&KxVKL3C|
zp1)m}&PVdtG!OVM?!o!1Gp>Iehm8(c(Jj*YF4pU6=CPwGOZ2)XOsg@*G1&lBnTy?5
zsCHi&E?zQTDO4Y@tQ(No|I8~4hm@bUChRv<+6pbrzF3im@{~;IkB$-dmxF}67njsv
z_nQ<k_l_<UcXBCxoT2Tqx4A+Q<26dQHWoJOG>=3o4v8njm5RvmC9U~27Li?2gK<2Z
z0$ecJQ@D#{fR||}`qb@(OGjt?829y_)M*uDD+V*P<s28)370J5HJeGEzEvs2TbfG?
zQ1G&RC-+wKz8kqrL@K3Zv_Pgn^^e0Ul2Vs;!sIWnxL%v{u~-Nwde>-66Q%?FNA|zd
zbFS*6S**C4?4mqfWape7gl|-<bH%R@D$#Ydrm`<?BjgRZ&Dbe!(12NTwmQ#dJwSHy
zC@!<<I|Hhq5y>(}%d2aOvz)u>$CFPcL_}_2?%1bOx#H(5!=sNHbQ8&`o=nHM(eqW!
zH4`^>vFbzz|GQTojB6o&MdnpsVN;)bu**oiTGbGluY&5zuG>9%_E2#0fF=QGOOPSg
zd<9s+aSD_c8JythaT&w(4tqG*wvBB`6+A8Yf{ZcC)mGdSCqf&}XE@io`$-7zjmxDT
zU1y|2rn7SPg0CFlLfUDyd{vlkl(g%L@O9yn*VX2t=3w<)Aygb2494IXA98TUa+01s
z9S+gL03I{DKyME;_uXBiR^@uKt-vPoVme6q1^!nb0{YBkQoN@g5|<JzB(MM(rh`wZ
zI_i(fF3MtD$(XJxK$qm>)4X>A1P7$R;{>)!gR+Usaw-fGs1y}#Kq(&7=N|bl&=Hw&
z<#R@E^mRL;vnQTzL3m(tw37$342+X7JzvnT*T6GSNwdm(`etg#56dL2e}$1DxF##|
zrChqyRKPiPB!jdsQ`>hlt7+g|!dpq`Syl-n;wpf?3KNemM$W*nf`fDcY4kkbO}6OX
z7S6^k02Xg?g;8W{3Bpn_U2+ks2HXuaXcCDNy|zzj-)Qb!ho<rvcKlw_-q~q~MQDAk
z)^8*Djs)O{ag!|;2KQ&tLwjL8klOP!faeMVf^m<h&Nt+yC<X}uk`r{`$uv8q5lDs2
z(uowz%yFc5>Tn_g@lnGQS-+@&BK}5%C?fnXOvhXY>kwruKOw<wc_mGVco(+%IajC&
zF6<E}h#n9gV3%5c`PN46<SLV;?uvV&m%pyouYJKb!rH|{H73<A|31G8y8A_wk%EWz
zjIaK|UDTI&X0fyZLuSTVvs(C|pl{qpZ?(Pxsz*;_B2@Y1GKa!a9d2@<?x#MHGGO<~
zOH?wooJX+dmK>3jMUfMMUWJuHktErS6xMZR1-W>1V2MMRlMB-5w!kdiqnqHq0-hL{
zD`<BsD%UPo1X4e<hey-95ky)`XxKHgKX&2>hSJt|+Q~M=4w|8kzCp*ZtlX`hcO#Up
zCCNHXGDHvEm9o!F3C+VGhPpn4U;w+^M2}7$6;NzX>?#yXfGa{B<k#J3b{VBB5{dll
zOaL^>z<|`o<L%}#M*Ko{0xrWUS7Ln5Jhkh-g&4gekHK`TP_uh4XkPdPPo2N0+{9gt
z(tUShd2bVmCEE}+M>#ds(Waf-%f^S(q`ews)BODaQ$E~j>mBC?Y<e`GUEs+UA3`wz
zSwnBMkj~z#SHVe6??P%UXNS?yT8-WGUzU@E&OhnrS}*;RfM)^W*^pEQ3m%-<ICzE~
z3*<>>mPGu|%1srFh}BDWc5v}Yjb*@Ww~sQ(rb;;0LbO3A{iFcI65waJVydIPKDU?#
zl%Ga>QR$mnhvuMO+GSMo((x(Zqhh?iOSqTvHMddj{H<WqFr(D3XuG=0Q)+?BGgb!3
zzs5?XLMd<&#cqpggUcXiofhO+)7Gy+zUd^}`pM*%5%=T7_KvFqjd}poVyvFyaR#=V
z;ZQg^V|^Te-!KMX9k~%LgJz}ZrX`)SP~UaLJ|&;V9ECM4%Xv>~2gvC#_d#C*?Cuw<
zilB?inJv>gkHJ?Y0yyF=ymnEWra8MNQf)Iv4WQ=6`N@=R3h^dZ<t0AnO134uW43}7
z`UyyuW`PlS1TovY<~(ZVyg<nbt!sy)KbSV1NG>J5%TV5-K|Og40)3h?EgScDOVoAs
z+&4il__DMyegcyQ^aiL6G>V6Pn%3vKc7A*4CK3$VMYUAv<C4+##6p1Kgj>;ilnS2a
zMUU&y)0vTtM)*nEdGh7Uy%)5UkMPk~VdsMH=}cL#v4v4gc>^jME0uOw&B`X<iS-O?
zwr5e@8nO<hxegW8U5{{gmuPHkopVmlZjvug`khvGf{F_Dh`2D~-EYXS!u++U7^bBa
z6007NSnLaPmaZTwp593Xa7HE+mOfTJ*^p`VuN$3Bp6SY~t%!~|USGX>t{`-Lnsh@(
z>q|3=T>v$jrI-vIQqjRNNE{2c>M9cfExQJ*4g=j_E4~+wf0s9-4Wg_4ls+~$8tz7e
znnk0ekN2X6;SBRar`AV@R9A0yHQU(mJwsO285o4;fm;t=9<A;fT6NimwLrac4&lT{
zU<IgQ5wYq*2i6&8;X4@ll)#>c+N~UEEB<qi3LnrJTc%)XlqVm0<Cuvh+h@fo?X#tO
zO?XE~xErw<;)tv&(r#aSwj-?Qz&O4aW$|<|iH`$r$MQ`&!ce~Pj6QtTO`hxZru{cU
zwTw>d6Et?@&p#bG+G3+XWDDrX41QIdsv({~=lP=U>(IkVi}y^>U8S51C#rOvL~)kE
zGrGvZ`ouNmO|MbA-CDD}y;^u=IC9^123{%1?L{9YQ&K1R1YwI^v>UVOWk#R1h~9qd
z>sc{jG#_t$QB^kPAwtOJ%3tB=Ql%PJS^AimXR(5<?TBG2hu|1;Sbm*!N7Q{@>L~<-
z<}t~%EH+%C5a^8US*|z@R;Qxx<a4WMjhaxwS+>x4(9GG)0?EoR#0*v_)Z3|ABHYEp
zEMOx%FSUM{^DO{?8J00;I%l~lTg<p0L68A2mO9|eS?yF383r3%4i+;QW=+lVBG1|S
z9Unk~U3$*6nfsc=CI`VSGjj-LyBkdN`g-eL@?ZbY|62*2y0aCK;udCS%g@dhnhuVq
zd*H_31OYL;ilXLrjRgu@gXAP%6#kQQHJD0W7<?+oPOy`r8<TA}+|k`ulMvdiAG4^%
zx30;h{p7HKV@QdFH{oUO%swqPq;`$9z}OSTH}Ni`%|pD|MLI+q5IZiApCF#+lVuA?
zn=I^Yqm28ye$(kE$KNzdu3`tjh4|Xy-QjADiOoHb_+XVX^|Oyv>bsK2qJGet(QL3;
zj1=^fY{h8cc`H&2gn-p$fL2VP*}v9Nc{_KVb8DGug6#nZnR9o*QztwzaL=iCZrwGf
zI+S-iY1M_lro*afAIj@WlmGR9{$HU*!kHnR0lQ|}cYfJs!!}QZH}VgDmtACP?>C7d
zC}Hlc;B3=h<WsIh$)$02ldb;X{HixCMq91G)&`6D*3Qmgr@ySWzU4cC{a){oSm19<
zi3e}=!1+q8YvqS6XWLnpbQKu)#fe@$S&<fa{tP1}4J+BotI?{Mj<@uyu=ZzDe05rm
zX??f4$rdf)$x=T|bVT%EAAbGj#mnK#*MFdPym8QmhM7S_{lUDPUeWfMR{ifV0P#3Z
zBPH4iwP8gA#Xp{uE7)FDsye=7;6TmkSS?Pt+#8#mXhJ)(cBq+@Bv*O$Z@Z{yInA@#
zXDu<>0q`-tI?0MDq(kCJ%i0T^LZYU{_zuWCyh4`-1MvzuhmcK%e%X0N);r~VBb#rr
zhh+VBW9I_z$NCMnTCQJ)g|p#dvB#~C)Z8L|h;>VI+*r*A(s+|SA&qy$AJTZsg!aap
zzt6AM$5eNOtPc)ONIttPhRBanuh2UZkrsTcau<)k#pTE;w|1}bvU5lNn>ihSP@m&x
zY>HK8M0bt*;XUc}H<4z?dW;=*>V)y-3z^x9P2RIsYV~_zD(ixRyBAn<YkiMw!VUM9
ze(CGCCXUMLcdEwKO_CqwA8+1zoxxEnuYbGC<zO^<J^6*}I?d9Hbzvjfjs=>I7+OjR
zme5z75EHF@%_FjQPX)NO>rQ;5I|tcfS!C14L6@J}bL*1b4KGw17VY|FyME!WUApTQ
zZ}alG1>}EzG!m`_;EHSok)!Jsm2pi=36zvpuuMFX)$HA@yyS0&T4a1D)Fs0^tzi0t
z1^m&~4b&2aTvtcD&ldk5#zmrg^odsM8@Bgdi1FD~^Sb_JF8rB1pO#XNaORBjt=7KP
zIIwf|gq|`L%6*(`BXJao*byu`-IWaTdI*R9EnIDj)m%$XZ*$=x|Ay1FS*(s_D_CAJ
zwxSYTd)UdtvIOxEjuf8WHO;v|UCof``a&vPM_6^<?I&1!k{{)%UmkvSbkOnEqp&R>
zdZO3Z^x5|ne{mYHCxG*SVfNMF9nA~)_kaKQ@Nu?4xylJayh~WqnDye(6(UVteMp~I
z5z=j`!n#$|VfVSjOu-kPt)YMfd5)Pyy3~p)NI?nO3mwy?p)-@-<8&zHdu~qH-ZQrH
zq^z}(+_rTAN76+;t3Tg~izzfLXvI}OgX<fX0)?G0c0`y~e*Rn#Wo6Y<!nUliid(0K
ziIoaLJf*y1T+AB*#UAF_cSB}J^T2BpUP(jQZ0XQmw$H;t6kCFYEu}$&q86B>7b{on
zo8M&Y^r{LvH_Fw-EIe&Y3xu4Svs_}r%H(*F_cXEQx&UcFmcQB({ENQT^GP_!->EuU
zjYy(qbcm6sC;*{x6HJnwP!v?Fa?-#lxa4<H`65VK{#K^9Ju97kxC$b6vMCt(m1PPU
zrwVI$ASc2p&-_s}PadL7q4zlPs=8ur#299(X!CQn8(qhx4UW2^)g8gVi}Ze9h=n9&
zHXl>NIkniSTfe7QYjz{oxPHAS1sDGlT4IkrAqWD=<M-wJQSZP0=l^=Dw@^H>SB#U#
zNA-)m^V*N`H}AryZ4HlG!NHdiJC{1@{p1@dmcpDx1~qhfX55W5S->u?rGNZ{n+TBn
z(w+BKLYM16Qoje<ApJR15Cr8gDR-et0}A3Zn$0{UkW6T<q*Gt-Z&gYAxlD|oDIyVG
zpEin~E!pq|9TS<ZhZb!s3y7(=Q)yhDSiQO6awR>6o#$T0YHE-E&uNS}4P-?+&U=GE
zaCR7U6VFEN^s=4$W^Y9_Ns1-*@^&hJ42y9(u)l?*(@yBGt1&fSJrN4c2USm8@r%+x
z6_h{cR`<qw1jthXToo5!KxL*Tv??j@gcF?~t5s%hu19SRCXaJcxu?4#1U*fTQMQx_
zVXRlAc0DMSsf2%Wq6nR>kM$3GnQt<+v-{UwzPa%6ow2227^gc!HA&_Pk6hE@FxUJW
zlR|sQu~nN=OEKyDR2`ctUrAYhZ+`WS#iji@%PN1=y237-(viSgEm()YQYL(cvb15u
z=-=xHDNaf_I`^sn8MS7aFh*}Wt=6{79|ExjnPL9tU0YkPPySpgJqEkWoozxbZ58)_
ztN+5l)fU%z<h^ud?lVUwyBqgpLz}XP9{!{rSz6c!b|E>xviBZ5d?X!uRO^sm?%VgR
z3nRI!%50wyXId79Iy*$BpU~|jB;~~Ovi9By@vZ&YNxz*a6KnsjJewsi%Dn9h%ELK$
z9g7z4VI!AT54pUV1b*Ec*|feHbLyLz>K$2X$TaTAPGe?zJ60+~8aHpcw^pS!zdaFM
zH*p)c6EtwE)Ru|tC`%f&Az>#f_1Us&ja{ydT3R_+=#eWFzh0`#Sf$YkM>7eJVTE1W
zsuc~aR--Ea;|gmRG{asax>|X|7EryeBbTVhbRx^F)z0}|&z)9}Ye&8v*heV9DaA=I
z%Y@zO!C+++9F(a?*MnWhZgu%*eml!7MAHN3#Mk0^ORSgb4qL{BVmDG#KWf6Czm2Ul
z9nWYWtb@hsTmIfv1$CC4F$T`Tr0|H!lFAG_>h$X($!A41pJwuDUv*ZH)`D4kxSQ;$
z0_EZxF*Ey|Iu$8c?ta&07ote~GU~r16-uu;++l4g8pjMxp1nHG#8ac?aQJIv5DmCk
zYUS<d1J_JPR}+=*yd(OFPoHH3NA3&lFogPQ5T(^X<lQdbhKOymu_^Vj3nG#S_GdLm
zx!Ty&>X5Vx#5Gid-wfsMklr1ty)-D@X{uVWfFX0l!Me3A%kOh_<>&&kE+mLDx~$VK
zcSJO&elJKC*FR|UhR=_4PRna(iFOm?`6Q3|_tV5xj*p)c9=h>ScM5q9ZsWU`yh6?B
z%$ibbUnnk=v;6vL(5K<eXJtC^BW}N-i=+de7PFk4a&72UU&-?6Y@ZeL=0W=gvuSaX
zZyd3IZd8ukp|M9g=8|zUBT~w6IUpsD)Nu#BC#d7h-ft$V2cHc2i6OoaQq%VFOV}>v
zi-LCROOcGe-5$_y7??Zj`KkILEQ7}Y4sS7;p|tJofPsGk25=+r?oYtjHR0b#(ZN!E
z&Q4keR@PhnJHaowitOoHgT5^NcHT!kl;RBZg-p{Lh=n$&W{h_n(;7D@w-VffQ9@ej
zCaDCt;xF0294+@gKUv8~4Df~H@B%cSxA}6ln7KH!Q4psG<8`&9E!w|k=v>@61XHaw
zD8-*|(cZdP=b6IW{De6=3~-3D#59OBy+*Tsb!D3-+QsDI{fEEm-G4y;Cy9I<kmGaG
za#X2YqjQq}KXF_52uDS{ebp*fKM5R&s*e{oo4iO6wLK??P{7Gl+!IblEPI-ba+1gR
zAF-L_@8<=HHb5G9EN~f><KyzS@o|BAUE{jp{63FQW{GkVf#vyr@?AONpfA@XO^(bd
z4W@PU=JzjOKl%A~L&vS(Cq)u<_|dQK-|w{g{eDw_+dt<PRe>_&nT1PykOA$&z3dyR
zxY<`KxLo+F!Rp%8R7k5qL7UoX<?$zr*`})M@tV6%xf8-HdA_?1eTgl4u~OlUdhY4i
zuy=EB#J(qwOI(we{)sGB`IE=|k2n7H6u6S9GKf2S@;LYrnfnwv<jG_GV|TW~$tyQY
zh;6qp|9#-evUa3=$Z;aPFPJ26&0C(Cs^DgH6G7Z;(Bm=ABSig=im89g^YtU5+S{qY
zG?YfjJ$xxZ;5y<tq-*sF?SBwLlA7u_!Pw!-wwYQxs+8jVavr#7Nfo4sTI^o~uI`p8
z)iDN_7)n0);$8@;a@Qd{se$)Xh<K%!9MX62#UoC4QS_y%Do=_ma>QN#ag%(oT{mN?
z-)&ko^1f2fORP=S?LOd+Mddl+7(wJQ^K(Ptec3+08rrS)M#dP>9RhlD_V%_R2YlK_
z658UO!1&nutIe@Ce>She*^&qS+WHy_i?bA%nBXS;S_U1A#PMbBVq%1z#Jsru)f!kZ
zY?j7}AGkxvdGc>Kh2k<O@iD|6ZVOm&Z$RGKH0xc9fwGDw&Z3}C(p^SD**q=$(Z`4%
zjgPIyv+THrBK~)A-ng-)jz2P8>zulo;9z!LhW^@?{R^F1f9<+2A6s?&$md@T!~P~F
zse5Vzoc;d9@sX~3h7D-2X^lds|Mjctgku*Vq*3&o_-i={t=5+?@)lJXxyH#w7mcsG
zAZ&ymitwoMb6teXR_aA}L4jQkef6Sa@Gu9_4oRa1qCz=B6gn=O9I5P9o8_Y^YLzaE
z7BY61eFR^u7$IAMI^5>|ws({Eq?k?FVp-;5D<oxf#cn$0Rqbx8?S|4;;0d}G3<Rx6
z@EsCY%;G37(38Q~=*jPYq)R%kHU>7G$`^Q4!3X@9?4k|HRHtv4Q6hmM$kX@`HL3~Y
z3@TMKDw<`t7}#SKWWKoU3yzT2qc09q++Q+uj0>k*l;yI;RHlg;U5;$7!T>GWCu_h3
z3iL(aT`tNg_EffP9j~Q8BcuwyIEVySdfB`XTkP>#a&+zC>Wm+5jmrRmNc}c*m;=T|
zg-nt-eaGV|WMf5rU@Q3U?(VXfCnN!tJ#X~pJf~U??4^YMtiu}8$QMu;czUmcHEap2
zVL#cFh~yvwn=_9j;mGojS~XxmmuViQ1Ep$MSW7?BGrj{^iMO93)-~hCsT38$*tPx=
zFm|#+ys<dH!>}5!G#1h2Qs((MBzZ>V$foarD(VfqYmu4^=!o1vj5^NJtd`|`&H|Fh
zBtgJ%Rq%`0Ae=T#@>3^~J=F?e;&7kO3VLnAJI7_d(W#JG%%bZF2lm05j4XUfyW|D7
zGIM61Mvr{=m+S!KSg<lk?$pfM)yxgOrQ2Bgy~t0q1(M|1Rd>ma&_h>}ept*d%6CY}
zZBh4UWn$nSoIKQ(L|OMOrrlQhI)n?5CmEAA+45V6vpDG>SkeiT&9VIi!5~7JLtl|b
z#h{)pI}wH-WR(G`NBl%et!G5e@bd4C$71!A3k+bCFE<c!4FVA{?410|4_B@2KOAz3
zM>qN3am4>FM_4;CIEg#MLZHw~^2(rI580!*8)En|*ETHJp12%$lb;J^KUpJlrw<$|
zE6MF_+{32l_{bRXwe<L2L9)Lt@=xkYjLKKT)oV`}SSW<VTSts*ge`1=gFnjwrCQSW
zFCMgNuwGyScLBq?2G7gGRc(aul1FUXEn5ZPF3IUs0;-*){R5{gvXm`ocPMwXm?LCe
z<=&*>zjWs~b(2X<@t*!bkSj^0ZJOP7@}EB>ZR8lWA(f_dDb>%#Fo?Y1X&=I?IyCeH
z4uhK7x4*f0%Ln0hk7eEX#}@!V456qEps>&!acMY8phD|>;hInIKQHmn8suSeo-a-{
z&b^$w4}@)B-|SkS*RT(@(J0jqE#rbS7IX6|iE`_Tbh)v(k#E!`30k8rY3G)Wy5}1j
z<@CaO!;Axb$HoObIQW9@OKaOIG}T+h23>2kUhODsR%p;QD?e}9*_eP`R-`q?ps}}X
zik}S{LLQ~H1Dx4gHp7s#L3bobz;#G|-nL5$Wb2!Axq&b8IRf_SIltPDhmC`qH+;(T
z`|zchA-GJ?kTKY`&F#BtD)wmHs%4M{jaquz&27e|XrdZ4T6yNb{^$Sd#2@4s?BHvh
zq;&JA0z{n3FGiHl8Z;`Q4|i!*gC*h_H^io3!u8T!ns#|tQRBbQuYz^~(s1*1pKY!Y
zqm9GYF`ed6$L`tR+%QM`!_WLfvYNptyPZBrI~wtfr@WuNGPr&=nMk{UxvAbNt_vFH
z3kLMEx$B=J4vO0mxmsC8f@Fe9Oq}oR6Vyd+nf~3};M*14ytAeG*@HfY+2uTb{NBVL
z{r*G5k~8|yiRleP+OAbfpeFUt;861u>V*kWsa&=*qqqm%bcjUgqy5;><TI=H0@0)i
znS{NTj2GtFQ#~WwIFqDhdNKJ1rbKd<)nWOs|MUMFP@Y32lTX$V#OY&nMc}s?WPH<S
zw)K#TQa_3%Qzi6_+hKm|ume$)hfBXl`a7E1?es$E9{<umZ!TvNveaXcF^tOIGksb=
z;nKy?zWc#Vi6JeLZv;bP?32us>MY|brveNbADKbA9X0NM1+8=2-~Whz8dB3a)G$Ua
zbVY>Z6Cn%~eS>~lmTu1@_Se1#Ei|s=qo8||f*2%UssI>bOF;+>et*2LL}*nql;Ou8
zi-!cFPq-gFjiKJqxCBvK%k&N@p9$lmWn;AvKL@)p00g$01}X(YR3SR<nlj;Z3A&-|
zWmlAnR_m=Q5+2MjQ-uQR{Z{2Gmz-oXHDnjF3H2%;o4HJI@Dc3O+D>=+)G#+7#e(|y
zH2-!upHRqQUxMq6zdO3}wm@O+&Kw|CKEBAvrD$|?#Vmhto-Z?m`B_w|Mh*jSuf@j7
z;`D6kg`q1$Vq5e#gUyp_2t5>?_9khsP6c!8^pR**ol4be#oEcVAa>5l<Qy>@)<l>i
zSMP*G)1}k4`pH)cYdI>HXDygQwYV`30k{wtQwfHF**IH_6UMKnH<#Ia1yZIFp^}rq
zW5QYp3sZ~zOjUl04b_!uP7c&l*^1nRn@`UOnhu1L(J^fps**!pt7&CGdkLFdtBQ?9
zHq%WOg8*o{j_t-~v4I$zLv&(!>mCCaL5d?1C7xArq6s5oF%qg@x>#YodHt|*0Ze~g
zR}}y!Kjdw!PjbGhmNJWKf-&#kC~u+M3Q;{I99NF1;7bv(rsoyAiU`PNFOaZKcXdM2
z6<Z`R_87Dlk>iUTrf5r>WEiHPqcD{bRTaWc7zA^@V3jRk-%Z|~<}If9a^eeEttsYR
z2lp*8Y`&-cMxq;CDaqBUibXw6zR^km_=3+(#xKZ;CnBURIfa^WdxKI1+j^LG<MJd<
zKkv3;ZMy3<;BMk{L4~ldfZ}D&+y&q!w^caowww;tb*fKy6UsujCZKmDFoFfNowOzO
z4>VUsM&xYTHZE#PP@`>zcT%mJK>ZA|v|3t4so>x_BY@a&5>SDOVi6IDOx9{a@~dhA
zc_C23Y`tc32PYiwB>{6#PS<a}B<+BtO&G;(t#=!$Q->Y)Mwz>HIH+xW?N@!p<fgBR
z)#k&#%%mj<V1*WSx>ZklOp;M|OozFtBP>2!KX#DKzO!!P*+%yL+Eu}VVKdum2CqS@
zMlUYFhKP_zH^li-v7PT}v(puPx;O|D>gGk>+JMr&nn4ep3E3j~{!qe$OeJ6hc0QyK
z2?L~w79T0qvMk4jfxsn662UyoZZp*uCGc4*szIxv17%QcQv#MeD69ISqQy}|+1;qb
zV%BfysJ0z`Pb_J7`x>*s8@|QQL|<Z4+uc5N3{GqL6!?2^AL`jq{4PNjMRR9b))~AS
zk6I0OckGTb^AAfK+UA_0mJ?0E$o8JUsya8#r1mxJf3t<~Zlj6JJ%%hSN@O4ypJ%gT
zg1jse;OW74B=3vQwu?|Dw$F$}xO~4%)gY&mdx+b3KoT4vWtC2^=iR<np}Epcz?#AG
zw&ONgFFAH6?S^EXp*}!6HC#fC&S4pXWv<Ojw_Z=a)_rFgy>stzdLEmAU;{W6zA}{1
zf-zB}JrU6$45_V;P}AEFyVW>sS982JYBA5=dC0MOHpm34Ze9T?a9`_(nso0@IX^LR
zuoWc^-fjR|u)a?IW<CD!$*jSNC)*|&Lht_*sS;iGgHuN?NQCT)!J#E+`3u?Wx7YyI
z&szUspuTh0uQO2tQhN$bo<;=_C_d*;42&(Pg~3Hp5QprLV8DtUc$C>{1>^}I2=u4`
zwP`aG3(K-=>;WVpGyLg1I9qx!3uZ<SXF=`hjHR!svjxYsvBC-B;}{iyhCe`k#n%$j
zOe%&&f|x!9>$92T0~>rl`GZJU>EkEK{gl&_Po~-VJRf7OsMUTV2WHP5Uao0QW#-@!
z`%2VDfj8eKVGc)KOKPpc1`g|@nAk--396o+<>wvEXL3rCDoplSnv9lJ6P5UJ9oC%4
zXfsW^#~#m~I(m$K54R;rjwKRNwV^r(qtqgjh{QbVMC_c{)<TzBv$iFdJCgET5ur`T
zf`TUg3k#+>FRIF5`jUeM=flA;bHeqIFxxFFUjvzZkqcrI!`9y@AMzyh%;Dna22PXP
zPRUzPs7?jH7&=invWX+d#mpc@8-NLhh#7~wmW_ZCws~uDy8=OV{EGgD4G`C00klp>
zj+#5Ir$X3uCC|L7YdfZi6yPg)wh%84{SuQMVtiU!blwQoII55E1>i|P`6j3~1Z_Xh
z5VOS1$VXfHEo3q%R6z7uPLq#7-OSj`N)CrY5pyr+93D?hhuL8h#G9l<vcSgi!h%9=
zW9ONu(@o3os3=a_R=`|ZYqp_v#@1@ZZY^5jce(RzWy@s-0g4Sp9N{RG+*NEaEoZ}9
zr{%Vvt0iN_K!{z?>ELZgG*n-rJbA2H2d?|xg?6g}yk;OoS??Xux_3e&9Gq*d<0kJ~
z%^Bl-Z5sAsOiyDF{RtK^?;{QOqP2&0dOj_$1S}2q^qiyMsJ&Ec8n8zXeW6WmHoum_
zUb-H-Qcuoot7(-QTBdc(=8R~0Q7W2*l*esxdE8>=q8CHGWzBVX+wJ+HsKl}$$di+t
zRCFQ?m_ordU1Cx=UqQtmhOvSTHk-8s)4pDxs-JvGW4zK}=S6v$(V@0hR&(=4V8ulq
z>v<QbBdMAb^LE3AX>b{sL`GMUBh%ILH6(mG{GVGG^%<QnTnia>ju+V_bYK?-TIk6w
zg%Gs(1_PMrmw@7*o?o$pG^nXeSD=1dO=bL6k7-a-8Lepl!)E%mR{HCW^nDv_p`H11
z(%_m_S{e0}lUvqP7S7tTV#=A-PxfV%0ZrtYXnjf@@rDlIb*{kG(uu<8%EfCE!osz@
zct9`wL4CdNW>QR8WQ8gx=DRFTh_2XQET!bFDx&ipThS3k{*{AcXJ=RVoMNuJj4aMx
zKs5~{G5`cUMa}|*2Otg)GuWiiauOU>6})symY&U1AO&UwTa;v`h1KVq4I#%)C&O|w
zRD38*0@wE~<p@RB7`lbFL&e~X?Mxs)p^LSpW(uc!s8J8!Tnc)vQX<C@vx(YQzd?|*
z*6=Btr-m9F3!@mbydm4Cl{r^CEv*&swpI<9)PKh$6riiENQ;H>!|=f7r;BXNWo*oO
zwHBr7P^ju9o0XKjqd%Y{=i*;?oiN}E)<|qK*B8T(kEug&MQ1?<s?Jb@5q_nX#RZ^z
z5$eOty>Q4-J;gaDL#&gTLd%mdM~rQ86;=I(I^sm|R0~;Hl|QL-p?z6&Vr7G5x7P6?
z4Mt8W`9gVG2y*DB!%A)q<<^jI)wSs3=PvGn-M;*x4O;o5M?*K|teNZ6L7VJ4Lp(WD
z?HOE?0Q5j%pCFRgr%g1*@JjApP;ev-<3e_}T`<!QM@9L(K<iu(q`z$q33|E@<Cb8z
zz;{=Re%<V5lR+!2+xt7eZeBV`bYxz~Z?{jrt0X2lug*Cn`3)DTNzO}Hy|iw+eO5%v
zwa*@iT~VqHp(LHru#aZu2BgA@M5<`j6~%eyS}XE*@}o3*$c0yQ1SjQO6kwh6a5kc%
zENL7kW$RQYX{XAO3Nz)@CfxyUfm}>YIMB}v0ieK5>yC)ET4)C~UZn-8^};RSd|HfE
zO6?{lt<tUM<@ubNl<HpaCNHy@2K}U?Y&O&JY;NEP3JkH(xx<B)8bdm5aIJ#;x6|*W
zCRJ6XLC|H&?B%9!=*%SYaNrLaUDb|ags|MMluv&k+^}BAr>%v2+G~Y;+F>D|b{D|c
z<9sMoT5(*4Ry3AloT#~8l&3vE#e3QNqO|s#D*^QfQuHS(1k@jlfgZD7#%J$ffB5y=
zSG&np+h;En{SXJSR@A2*7WHvsmG!n(zoRj?2RrUK7{Oem{<58cq&mog*c<Kse0GWy
zNZ5B)i>akU)M^&>2fUj7rK{}}RhZ`!E{JwoJL2L4?)x9<iLbJ`9XKCSM4k_XhVt=I
zCZl-At+e2{T(L5tz~`!@x1w^-+fflWF-SReJ}f30R7}%qftJ`c3o4lrVYPlrdEbr2
z?McnwkOV__){|gvQ;uEB&3}|a^Y<jIf^8C<+IIJ1^S5u}wzcNh%O3@G;TsCkZ!Rrg
ztyfwPYpv5}jVr-_yH*O`KO&XWzir*FjJto&*Khwes>+@myK?N`Zmh?Cq*Zkq>kUfX
z0L}mt`;wFr;Oy!U9D>UNa@A`TrgUYm)s{KhQ2ZJ~*A5?lI}z~FJ+4?0KgzXtKU6Gp
zC48f^eVvgI8#WNQO~jsRoDK8@i;ZIwQ+A4I@TJ=Dj-w1aR|9cl)%BpPx+VoT6;pRu
zp|vU>3LY2LN^Kr$$l>~H)s>VzYI8v$$f&U|Y8C6(i?6fOND54_Qh3vsf`Yg7tEpfT
zZtQKU0q?*`VA|VI4_-<`==Yl9+^_ktd&;>ut|>b241k;pA6Ez#{pWL1rz@Ae8V;Vg
z8=Dlhn{i3dI3k#@-CR>%@?Sd!3UY6)QI5oI+WM{5GlX2Rm=%=eJj>=>ZW~{htN{)h
zwXJ~gL$O*`K{DTIzHF_R<OccXi)BdAKJ-;XhF!(aTCq<g4EUSit@S5#7HH_7ucip*
zU9v}p&XrB2N^f}ze;5n$;b?W8z(IQOM7lXsebU0o>Tg*{S<_q2_g;TVLk^nWu^^K*
zjYaAfHN4^cy0!F+BUs%0ZC#G6s!{0=oTfhm%1P>DB<vdkwaAAPS9XCzB8>=C3WN{;
zgIi}Mg~Q3DHZfO`4_ZZq=hleS8acnzKuq!kPBO$;o2i{^plYJHn!Mfl$F<5=46w4Q
z#0AIYjs0}9@sQKa6@eg-jl&w|T$`Lx(Zkxv&gjmu{qMEpE)E)F5q&90{(Q~8tqB3X
zp0ucwvO#kamYDlREFIBE5DLO;e9Cqen!pLm#+5p@%k4E9(gj?q6=QggM)*l{l6?7c
z??u{|3h1wRN9!3FbTdp}({tjY$k4Kd`v*^47WCcpx&u_rw5}w4W5Ia#xjC!XG`oTf
zDau&App{7bS`fbHipO(wHL)!zAMc9CyVCI;UZKYGWv!qS>-wT|i#y666g+p~!QjJ%
zYvtnmC=Krm!&@~jc5Zm9QNQ(RKY6wWk+4ligLE2NTu{vql&^^>Tw~hDOA8hXv+AG(
zH6JqkmM>7wZv2Mge=RBg*G+Q3f=Fn_^##h2l9x8s9fm8bB?jv}!pg7`AZmP4!L_+^
z_qH$F-MXf1cXGS3-L1y6)On`EB&lR)J4hzlan<6PKrJzj_FzBxy({y58jD^WeG6l4
zp0j_%I|%u12R^N!RvQ?wFa|!x!IQ(q0Y@`Bry;iDbSqaJ+~-DtGx+Tk&;vvUp6%Jv
zr3*xDZ5X<uQ|JhZjxshv#?!_TzUHd&9!m^_V@_M8)R31}`pIF#&|RodHpU<#5`{G(
z{vw9M@#onn98x?N^&uV3vUhop%d+v=KU=O1rAxClU-CFel!RLjyizMC_LEn<J6n$V
zWJFh|^}T1E377>;&5}e$-S`FvFEQq#TvgL61`sx80p5N_$2(i*X?}FtT}yC`Wr}zU
zPh5UJCoUR(iOxE8mI!`G>%abg{~y+lw%kKoy3JT?OyGu)`au%-fvN>swje~EQa~Iu
zzpA2uHK~3WTXxXK0ZAXQpbJ8=RI>KqGR)72i`0>27P;ae7fTOC=@~~~G~}<WZi$PN
zbMmUoR2ABi^rXnGO#CIt-f0P9){Z3k>_k~U+(cJ&YpZ-Pmuh&*p;_(}?fX2>W<oh3
zpI;N0ydo3INPyacvZ`7&t0Ed$)GH?wf3A@LekE*fytpDZ%nVP9a^vr)6gMtdU@-m_
zKLEe7q&c3fn8PlzOQ_I#P^+R)JFZxj%1_Q_8fq{vtBRwTAi*)56D|FzSR`5uLL``0
zqa0ZZc@UDYqw{I*v8{^DSpuoGKhyNO)ihhM%awa4q<R^d`_$#?Re!<Xf^W6gqn8@q
z3Cej`5{`PGX=a&qLeaxV-Sn9IH%a?E8v}S&L7vNntdM*kr<`ttY|2Xw;g0&U%{sBU
z?jVm#hy)@R<;cS!+o>0WR5!2&D&|5Y0Xkifm+cGNeF!>TgX{)$y5<jrU~^Fs5%33$
zCNBLc*<*U$LCYa-alxSwa;iq43BY5RKp~j1U6~6)oRrfkLeR44OhML_mOP9f5Ii+R
z+;Ef?LTuCv`S8(@I$bge5B(!U`EKaWJY5w4jw(WGOpdv!<dZwKb&p@_eL}+cc-*Uv
z*o&9SP1vn`8JO;^Zmxq&kK|R*%qcLng8D013+A<EpaK(JtK;RR5@&Gq3Ye4r!=y#2
zw)&Ws@hP)Z?AP(*0e<Uw_bNu84TrI&K43g)^2b%qVK2+(&qo!z#PxrMs1n&XzA?NW
z*RA1z^s|g3F#(T8!~}tJ4KR&?Lb+6MWHVZy)wK%H5*5K9cJ*qvCv0E^;;>|&*2fMk
z`u@fR5iNTS-rg@*P&W(P5UO)FH^e~)XkZ|7+=X)(EM+!P%iZ_4-{R;2;ya^amKlh)
z&igMmPKt)~oXY%Zm1MRK84+@E;muUXv*YctL%jQKc%c}7i`u>Dhr$fIolu?@uB39D
zRqIMI5PuQBJ%XLVghmUZ8%`uYQfZ<_+Hnm*BJ^WXaPu*MCHT)?92MBV5&8IU0@C-c
zaKC?jwBMVNfMdEbK;~Hx@fl$BqHxu&+r2`jL8-ur)maHPU^63SbX7g{#452+rx#bP
z2AT2WwQA7yE*E2uM7{rFy~FalNEN<M^rXa5p|qEWBo@jHVOsLps{c_4Lou&Il=>sf
zQ-@DRJ03f1rqiHmPj{nt5>sdQFlWB(u=Ab}OX~FR(&L-)wKrFX_*>qojhNim?$*EA
zEvz`+C(u87JuSkNTvG;tFKU^cnBA+-*<htP&a(d(Ul%uuK%_I4ls=Bx6nm`>gDQ!!
z<Au1(>5LsmuzmR1F~n<Ewp9(m!BJ{e;V}o*x?3+~BK_NprB>*R$KvYHrEArQndz06
zGgk#Hu=W99nHvqwqkoo>wz<x1ySdKk0WoJdASP=~qQ705n69(0E}6acuN7Tfjo>}0
zpHUM-mUbGozq)dYR2!d3+V0T@4<EJVtG8pRE)XdULb|@2N$~k3{BY9HmW=6v3c6OK
zLKf$?V|>_ci{uv<^mK&L{;oWm^=a4k+t+v8s3O_0!NQR}Ox7qjvF~_9-r7M~g<^Ew
ztFfU%hu(x@N`!hA3jQn`xO@k#g=+J#%oYGK4n~OiWC&^jt;tMmR75XWx+>j5P+zje
zRfyCVb%kR(f__+)0k(Q5WVyn|8}VN|=4)hjeX!2gZdC>3PABY7lS}U`BSsV2%s>u<
z`L45%alFlgExBo`gU3CAuIb!&(8^sQS6B!<rRZMvEz*xh1>QLJ@l?aw{XSuE#%dWV
zKmB@z?pl}E6yAER?s!|da@|2>QH;Z}i6E_9_n(&_e*!gr5Gl&2ZY<b+TO!;rX=^m7
z6%@W8PIZ<~=dIS>lH;5t{MqcLS@n)@`$NDMHSL|H3J#Ser^N;81Jn71@+VdzTJ3d4
zWab$Cg@d7|ZtHLp2DASTI9+m}q%KmHzC%pvXU8yppet}epG=D({zkZL|1uxVJHFt+
z<yo1X7tQ=$?rk8<u#mFfh7z<S7AB1=wQHLT1=hdlw>>~n**kE$2+GDhFK5L1k;Yig
zdh9!pPjJBszNK#}N2+%~Ck;0Cymu}>?NPZ@^T>AkzI;FG{n!8eUuh>PNANpHVE-|K
zoGUcU#U2FcB@BR$?{!$R8m~_Bz@ho#nHtE|%lY-b7AAwyb~oG&K3GM39;6kV4)_bH
zAZx)*fuBR_da4nWE|@pS-t{AMNx{GL7)=O#nG9S*1N#3%sX%(oGU+V$__gFe5$@ij
z7q!;=W1GLHdJA^yUNKG{AJs34-1C?X+0303u6_^VY7g<VBs+}r^LYu3q+OsHELO9b
zGu^p)H6g*w7-g@Ve@1_J6GW=LNHt+hS4HtcU5Y=9U{Y3rGfdq}yop_(Q_qC8bU2J6
zLUmhJlEU7~k^5;NG0-ld{aGcwe@_nH93D9_GbEd0;9iw^`Z8&QKFUS$C#igtJj=5M
z?Jl0=|9JED+g@1P6wZTlB(TF{hD?cV27Rfz&f=o3RIUP)FJQp$uEA>vNtze16F3vr
zb|l0oOJWKxS2`-#__gpb{hu>rVD^N1EYRQu%*DE`H<8`gJtObRke?&Lyt2)JB^tT~
zlWVeKS|4YP8znEGC%=AkWXzw*Vr|n5Y|9K}s|}<|Hw@?M!(DRhk~ei}ZajOqBqq(g
zy6fNz;8dI^j}VkG>5I+Xx_+UgMoPZ4adTa#A#s1WUN9$v#yeKV5|J<McFMlZdMunn
zumfA>;^yK*4$(~L5Z(jMj}^dcOl^DUstihIn?4-6gbbgW!%+jhfT;S|v9%3}bN7cK
z2Sr0e-^tL2r55q(>iit=?k5~uu$mQrT;)xQ1B;3rT2>{#f|3Idja&hy(`z)IM!c#J
zX%V3Id!6CyhIko+nQK0xvzvNQ$c^~t48U<JJ>_&t&oe{nmxg(FGZFzQrckTa3R2Ni
zy=>-ekR5Rsn~*(cBZAnC$2kB#!cub{g~lN37}H@*z$>F#az0pmf2L`@6-$L~7G!)J
z{U&jep_iD2Drg1BoNC*N+k_|K56eJsTfjxaA>Y?6NSwi=5qrn@`)pCpia$lqM3bud
zIW_PdtB2(i5zHE&&#ILMHm@%<M@eWq;}G=AmeafF=!an4uug=$6^J-S0}f4)sh1f#
zhgVI4NfInL<Z372Oo*miUgivN>O-dbT1-{PGgl*%N{<{5vp9#5t6@NX@S3d1=B`C9
zvKZim-yw$z*v;hv;{C~4iMs3(Vo=VaQn2G3j#oLXf)09vgdi*7yGU}EPviJ3W~)3f
z*tl$UBZ<UPaWo2Ipo!d(o>#@s=($w8r!NLY-<diS>L8uAKy?61Do;^VKJ%|}TyBE+
z7ejjj%Aoa^DY%-KBHwT|CyqAMLue*?L+v116Z&fXPaY$#`f00q0CxAfy6^`X5MOA{
z0R~JG`*-EY_EIL)NMD+<`VN!?MO9)3B1J@(n?61n2s%$S(6)#9a=Kv{&Cf<P4i*1T
z4#^J*AHgmd%(<1JwX)VMNF};tsq4Huov~A`g#!FLBlVFVRmw0G$a63M-ZWcsprz2U
ze95es^1YyGg%h5vW+z%J3Mu)^VoFpcN!1!L;M(^Ue*)_q%S`2}3XLt%NZsp)FMe-M
zLoTNVb!3xUjHZ&OSi-K(mgiGmrv1PS%(6SkYq@Dw<<LSQJ()OuSNJfui*SC<?B*H_
z^I{&z@AS*P!4Eq<^=p9gG_9qZTZ{AYQ_B*D84kG5w^~TCVQ$q6r6OQx>Bp|0*8*{w
zSNB*twMJ!ZLZK~%QILTFNuD?3c4t?UYQKmYlC0p-P{W&_XzU_=ZD@~dZ><Kf0}R|_
zTb)+am@5a(iOKU~2p$|ZWe>Qf^da96BCRt^ZO`o3<;YQfg18GwzOGT?dqa76IJ)A*
z>><Cjy){u>{%W8H<`AdcRu`IO_2m1lVm4nbw|0{)2D#e$vAG9P2Y5?h{%J;#tE<V7
zh|b&GpRgySJ|MPgnfq?Mr!G9W-%Ylz=#Pi@sT(d9=3qZ8lnO;qGKh%OaW6J^2l&;9
z@3^4nm@kqrd{)BP;GDpfIe(U`#mvycoj$1Kj(r?`AT*5Jw2e&#<T?;;gQ$VGwvPm$
zo>SnRBCG81B(E{9EJ=;hQ=kJ@;^HzEO`C;w?XG5-eHFGDbfTA}5m94}I%(3Y?T2_{
z*;|f&Yj4HqY#dQpf4VF8_@%=QFEvn)yb5CBH?JYi(G{mit+#VVylxx+8Q!`fJl)(O
z-CoyqE4#K|4Ci!BBaBK|+xULXXs>Mx3vjcqSt%SNI}yMbl*}Z0pa<<$w$W`z??`XA
zDzV?$n#qIlQZ+m+H0GE&6Qk_Wm>PWuuBbR9rmJ&*jg&2fD`MhIg&Hz0{M?abOSjS!
zcWK)t%MVwJ>60z&SlX~`wm2)R<?e6p-@m`rZ3!O4yL|R!3w8}L59)QN+UPy^d#lxf
zw1cWe`e9`)Eyn`odh?lK7q&cuJA4#df&=zoa2jm!<}~|q5y$u)KI&ni=~c#-B$ZtD
z{)Y2!eI5@Vz2Qt&4C+;xjSZBGpFDijsvZr?(RVZ|dvLpY^kfSpJ6M(j29;aBU(#^c
zFgNo@03a=f^fn&ZmR5M?zTq4pUwnhUfj@`-{n6H!`E=^*Q~zvBgxx-yH*0Nnlkjc+
z!XYP3s;<FFh%gio$vz?~NWOl%U+v1@gU58{K2=X`j6ZQNRDfkxyYkXw{rObihIC0^
zA49a&Ti4IUmVCQm3Yj9L_rW<ObxTG_&cur;kD#9%7C0G{Pz+S-LI2mE{HA}u%RU_O
zRx1>bCeyF4T-r$%S;6p4Ny_N6FOf%*He!+qjFqqd0^d+ve4A6r)zaK}S0ebi0&AD+
z&m<`VfKsz#&~}jAYK0aRs<Wwu3Bc%LgQ@H{LwSFwuMCUX(3PzA<~UeLdRdP{_{D7d
zs8=p}@@`Mx?MXo%dd`qxCr<tlgBC{`@_D*0CCA~VoIfKh@2er(w$n&&cjw?liXK~F
zb5Uw4y(za^mnJxrLzW@&G|My2sDdGcgU?m?;}V|PBv;f^QJ(k-d4Y3J^d0|7S51FR
z>mbZ!z@gM)HD{{?+Au-Wx$t-kIOf~|><mr_JD_3-PYsyFpp>tQ0v1SZA6G{6dhuIq
zv!AFHFQ|<`CytuLA_W)zJo+%5%$QE$^HNNTZT9?O#!PU9G@e~WR2G_10}6FH*N!}~
zbb`Re2WI8ZcGjr>B&!pS)a%!#K${?%sRmxMH;b{6Y)E}5B9F6#XlnArg+ZNw_^N(U
z>R+;yZGcieY0t_@314pe>El86wCQ!MT7O}0$z#_l+YJjAtJ>Lk9I4sdE!^N~PoLA-
zQub-G=vG)kL5^r#Zykr%zg4@=lcfEBJm}w7@7J4!Zl)777rNf?Tapf%6!-8i46=ZE
z6f0yjNza31kwq^p?C#q9e?~7I(+U^m?k+UuZ(EtTd}gXZC%vb@J|I@{c)Qb0o|W$(
zkFRFLsK>jzoQk-+%O}axr^)v$Q_<mzG)7AuW*Q|12%@M21q<;~=Yb@*yQ}B%cIV$d
zYgr?2JaU->{ZTyVP0h^m%Wa1Nc37V0+ijs?5&GJ+LPI$yw>zC~?aA{iFaBNsWTT`R
zzrt_0(Y$%LjcY%8%c85x;}?g9{6z?Tz0HRzXZw#kEsWM#B6g8BGtP&|`rF;*)0~Bn
z*y;eZA~>SG1*6^RXO~&AM8EWN$fa|JjHz50vg>uNL4d}hQI>G=$Pi!>wKflfArO)G
zBh9c)3pC^<jApBwSgW)K^l-Z?$Wgv!H*c<-)Y`l`RdyRnKF!!Y+Hs5Gf+R@H)$Z;K
zusGQmoo`zbypp^a39Lo(eZniLQYDEjBsK3Qs|UYIer)l)*vz{(-26D{KbY_hGwtk8
zHq%(a^_GSt*Im=vVK7{qW7mn6qtlQ^@ZX<pf8WL+0XgSr7XW)0D_#8blSdDKG-?mO
zu2<$-vE+}_cB^4&w2o4=Fi>(sJ(<TH7_~wRl4!~HaU%!0sa;^I=qj?-`ruf6!03d;
ze$=7xWIVXv0aI~44>~a)+*g^tYQ^&#^xAbguzZD`{&V*^`1Oc>VF-`zSDaQ_uEZt>
zWU+3dO!E)<VpJ;T8g3+ZW3K}Aj|~H|BgFBhb^Kj9iWl)4dVs|j_&QXa!vR{K7Bn=Z
zXSRPKE8LZS{|fz<PU64o8w1V4&akSuN%_-n3N$9ytYOzgB8vrad4OKx-{)o!X$71C
zeKd>1TE7EhOZ@`@b#vHLm@ix7Kg@O1UUDneBl|_#{oVpvc9Y`KLt{DI*lzTo>#&-5
z8o7*g!dOhz@FFvq_~ow|!C&81rXnBN$V{})M7^JYaWu@@!J-7ms9ZvIG;N2v_;Y>A
zK5M_XfBk8f$uwH<uc2TW;yhm8f8m6Th^Ab#m<jvgC&GP&$0rLPo#74Rc`gz$Wbfwy
z6%%nEs)>{6h0KE7REfvsfN{J>G9X7?R!LY+g}wmwahS~u`csvnuGXg&Xu3jcGKzf0
z39|~iiL+QmO`F<1sRYPU;YXJ5ZYjR8lUpYP<K_r6_2__6y0$pjl2^rMU|VHW`m>_{
z;uyl^-CZmj9`{1tFYubg0m%W~jc$3wM0dHpN6JwySgW?g+H1xbm=bBXQ8df+|J~&K
z-GBSBEp<UVpTz<lld+#_KdU#-Rev?RTx9d@&fmeDJu62xV|SXXA7h{NQT0<b?`0L}
z-5!`d(!SR&$GUeM2Yh?ybI>d>?Vhay3k1q+S7!qfF_PmK`K<JJxZ?Jdb}QXfXzjnA
z|2i1LhxxFV6)%f|IN!pHy|xyyTFph5Fkvt^(2SacTEbvhw-#s`u7@>Mz>g?(Du_c5
z@M+5lX^RLF;^o+6IP!}_2m30U{`TTQ|Ix4d57uh?g<tHTuUP&~ttv6_OhqrEhBs_q
z=+b~kTloP8z7sLoi@CwMO%&cePJPESJiz5yu^2;HTwd9elG4Apl9(73%;Udf-~al)
z`FrsHV=zBPL(^XxbZ1}5M&(7WF>BPSDUzuhlj1*U>Np7jIVY~TZ@WP;G-GP69z^GE
z1p(C!Lq1}k9URb%d!g;wrduu8fUo9Mi5261WEJld35esp5Lov5o~woxNjVT)JVJM6
zv7vnm#&m0D{R0PjXFmvq0e%X+BV&+Xj>IA@q}Bt{m1so0Vm2X>A|Hz-Ug*5)*_$MN
zjB8&~<L{=DoA*`Ks)ihD#+L^VhV11R{Vcd17PMI80;YjzK-*AiN0oAsR-wZp(<EO{
zh(nYBZzB(Cw=(W<zxBBhgKlMHW1;$|JAxvQf%K&EfP*Usb#syl+LcC{s!|%wk`Jw%
zWR+wYa+UjvT~qn{{6w1DUTOekv``&685R<sOxuvF!<bFpIJ67NUzAhFm}5I<k2nc>
z8sIQT2G2$(&ZnOS@y_An;bP(NJ^@x2>reGkxvGvCf>!|afKUj)J-uSy#R1<RgGe#{
z<I5as$4gWb%SSyV8StT?;1YD1I9R9eC*|PfLGRZOA8GwTTSu$yNYBsnIUeZA1J)IL
zKqkSuP@e@ejv8P1isl%WQ)YI$vf?B}r1(1`#K4#AxSFha2?Q3Rs&lF74K4(}iS=!)
zAS3U;wc;uJGFyOEk%xQoaE~8mH(SpNOW4%%JRKht;`NGXTOxOS$zx2EJQvj|?$L9-
z@HuUgRB-IigDVoH-{zc?TQ0CVbGg%-U(E}YZPYvZn)sWn4vNLK<2An1(>t!ts(mf*
zdFf?t1y&G;cRDRcNTn$7Nxi|n2;Oivdh|w5-snYdbR@S2=^``Pk+d|#ns9bTv&Kh}
zEI7$Fr>o4$hAPVw-`equ#(ne)<ypQ6xSbEb8tR>}3b+7US<TG3uhU|?NP44hCfkR$
zjiS>dfNpc9H_v-f=?Ou>j`L<oy$-hH;yz9soHM`BDvJ@ng-P9|Z#!^C>!Q#cU|;Q-
zaB>CT%(WM8!%)-<cs*wra47|5%VP=at{Ohw=Q$Db>u&1ZB5xRtg0#sz#b<>?l37-!
zH4~<R{F#Te7d8m9jO4FVcjwvVOucJWRi0?9P_}fv<&EohlBT>E%XY>QE`CZE8Sq>q
zBrIP*PDYhhUACQtQE&iNR3}|>5l~#WB`0T?QxU$)$sfhCsu9QjQbDn$ZXQD#)8M9g
zi{ZOG9ZS|i=xGm0+NwBy!|4-vs?faI)dErcCzXiX6U`B@pkK(MyP@E*D9fcJBU^My
z{qcVCje=ALow5bU-{YJX1=1k8&N+D@Ie2Ss(O4L`vaHqhHj-l;M_x}lrHNgQICIct
z)=jff<$euD#0CfG*8qr_^nn3W`@%mW{;>sdayw22)#8NSna=^=xTq{T^BXy_HNzzf
z)?4uXK!|}oP9G15-u6os76}gXT0#mtjz~<twIPn>lc7Ef<8_cmCK7<Z*YUKO+>$nr
z*Cen;9xib_GP-Dk0YGz>O|KMO+BS7J{J}JFEL3WPrm4U6Ne#KFK<PpEwyI(Lc^6EB
zFyhJuK=s|SkS56zCtYuz-+vv-Z7mcZ3YHMA^J|4^HK=43uu|6qaDv-rirVSX0bQ{b
zn%cyMkvOUc_wS#BDUEx}vX^t&yFFKNt&4nLqebK1vfgeQ>g;Qc195|ld3fw`E1PHL
z{&2j=CQD9ZlxKs<=~{INR}4EobvRLN&NMiQm7U6^Z}|f#yvwTXND}XlUDdtfg9JxK
zGDb%nzM-5TLC438O?@S^8yrM68^)xVxy-X;6xQCLvJ9zLkQRq?q7a@uDN!&)ea4Wy
z=0p`18vbe@rXN)h!aC9XkxzzveHdJimV(z)r}LD{pY<egh*dlu=XR<JFN_oY`4yu8
z2Ui3wIJ|ON(v^I9($_NR4x`vAB*ub7m%r(%(Kmcl%O$Qi=3Z)O&@EKl7A`lo745R9
zy}n10l=OFGGe6R@dQhLjSwxh!R32C8>KOmXAR~_B1heTh<@I_58?;Y^1h9oBu7&3c
zLQ&<|&MKGLh7GF=XVg1(rXW1T8!FGGpg8x9k0ISfs?7;Lb6^)nX?m8Oi={(2B(4hD
zW(7V>2@R{1hk=O<ZtH-AbR4EY&=^g>H*nHmDnh1On>ssKoGu$q;o419mgqX7sBB_<
zWT_Nc9cLQrEA|!#5}j4=s@Mo8@UlEdn4XvebnyZP<sOGfQ{!`700Q&s_?!!l=e0v3
zDUxesjl2O`syZ@>f)c@ST!3ZBTZw0@ND?wF1@rfHWP^l*CA<I8bby4c9F=AP2;2=a
zH->M#*jf+2$b30Mrhdc4#anLz(?N&}y?dQS;HNS6?#H$V@S7iE5J&(CkS+3SOeU2B
zLsw&ol}5Ss<Z$t2&PLC~>Mb>(Znm>@1>IB^g%7$ss|thYZ8~3XRq)qb&8iz=^1O2Z
zYAQ20hY}B6MD&f=J0UiRNWrR52tpVhGsmme#QSyFus+RbCYGX<TG(;7m0FqPvXr(b
z{l|hz!MH1ZJv<mHgBHy!mKu6&J^(J85~WStOVo@XPKD$T(x)VSkX@bIThD{#_?d<A
z?}^Z0m~k>g8@?csh|<%R<Y=t=xYZ9op7@d0^B6UWjXS134n=v;ED<X!EhnZp4z$jc
zvZvCUw!^0o8M^36l0QiW{nOnfZJuGNvy3tbtG)-0jP3>}F)Nnia*g6$C1wrd&?7ur
z^nN^xbezT0R0XH)EGXtDSS8{_(J{$nZ=B|PLaCQUmD{Q5;(j%Z<IFX@CI4<|n|=AY
zv29+aXZdAjI-<#&Qe9IXv?Xy5@S%NC<d?|;`Q1{N(DQv~)mOi+c1^YpdlknL?>+U*
zs+{EkEQr6(wI@IpB+ei}$NFMo1jr`HdDe7|7a~M(qCxz^EhJiHkhfy-l6v+wys|%u
z6bj5NR~1{p-_1Q{opo&XZ$T7gk7IR$GCXIQ;Qh5+e6e_y)naM3E9O)n1aX8QrkOKW
zgywt{eb`;WK#-UN@HNqOVigT5<{S~o%03QSa1g1B0G*2-BAI@kAs{}Vq1dq?`e-u6
zAb7v$-yevh%h!J4csyf<Rm`QrLF~5fdHLbNu|QzZYKmj|+wktgr%&$pKe-=Xdi2}V
zV)@GkBhUF2PS!#2WS{P~EOjmT<oczD>z5t{?6KePGl!&qU9cA58<vaMR?HT37_D-?
z6>Ad<7%q~)ipV)p<$0`ia1(;5uSJR+@o-`bz2p6S0D#R|G0<~zUd*D_I8ufSwJ)+^
zL`d=StUnMf(i5zLo5?w7t6HD28z=0bki(v2qhi){%%l6hgrmkOlmSeco4JMPBz7={
zomfj++|=LX9zM96)W@k0&hiRWt-&bvuw3ow)$4}5Z}xDKyDGdqV>|i@o0duAfF~5p
z*rF2nc+oew_^ebhQUD=-y-_w|W^NG_^Fl#h!^Q-iQ1#h!*QNpD^jlx5W44IpM907I
zHn;37>1rGF;Ur<K2C*!9I*ra(GbbPbX+S5}V1ybyw_TIuOE5F&6F4leNSNm4X8&}{
zW*_wL$Ia4(jm=_-UAq%HmCHU2pnl;`jbG;3SpPQf0!*_Jb#Qzd9;+UH(k+A9L|TL|
zr$bA!IyWDL9a>IMM$JbKIPp8X+cH0VQ2bd8frcX02NM!^o~QtF(g6?F;Y-UvQO{1K
zR3ROW@k-{a(UkVEEPrIaM>pN62djh@#+1$?$k|A#T8+-xMob^BR-7_+%uxcxXtm7E
zes*3|CnONK8=;;1o*L?V>RR<KVXNm!OzB$Rc~G}V54tMZ+0l1)b~e1#)zBuj*@TXD
zO~O-{=f;o=>{r!lj5H$eO+BPU;@DKg75^koV0k!-R?}9+rp&^X$q5sdjGM+%lamL7
zfj-f?=Rl%#evxnX^vR?CgNJRp8I9>la!i*v*b^@i6Rp}^yCMwwDRzawI9r|1d8a(&
z47Pj8xAJv&3|Tudo9Du`W5>hM2uC{2*HK#p|EWUoy0wMK?d^7mS{k674=^2V$-Np+
z=&kv<|AH=kj;zvcYpsv)bxYAwm1;ae<oCEZS(;|WX}(H%TGcWN9EA<mK=P>zC(COo
zLTUxoRs$KbToWo<2!7NWfq#__ehwE`*(430MybR_cEy1vfl!HfljM_6?gtWNKCk-n
z*?ze=#qZvIdV*v``<53RTP@l_@o1_uS}oE!c6J2!;hMpQaZXVGnsZ&P!9K^1Y67}P
zE1Rt7b({aSiL<)7QT!oJXtlS_h-ErlbXvMtmYQGfCbA2fNRH{DEzkt4;^|QF{4d)^
z9EhXR5ilqn_3t8^YS3Z;5ua|}fvK%%OlGDWg|;ehk!rPGHsq2!6A&VZ0Z+%K24sMy
ztBZ6Cv_t&12LM;_E*2(x@wJnDv6LVp94>J=EUEh`{c&9pZ__>umt#7gN!5nAg&{=Q
zdB}2#E0!hN5N3p9;bcMNJv`pBV@thtCZ{E#g<4ifE(5yAGJU{k&kFh%dkGdiP&hx+
zOAh{Hc=Yz`!=slkhF`upJbDt{zQ>4pD$WXSi=Vx4Mto!YuV1|U_u=yZUqGP0mv4`r
zs6nTP=c)lb?Y)z%f3lGJUM2>7{Rcb3g}AlSX3%&g8lu)PGzqV$&Vq>8^R57+QV(A5
z9qs?&rE~%LRH+=5DL#Z1O=v|GrjIU(o)g|!@B&Q(f4AGNU+;5OyyJa`(&=KK=p29W
zo1vLz9N1?Bw7}uU1qx`1xAXWVL-a0SR$&JT0yzit8+Ha50e-gGBHJG*!3|mWrHR|x
z@GQWz?s>esdf1l2)F^1V`icdC`mPRR&u>7{`n_ZKK~syONxOaX8>7o;$Gqdh8CFrk
z2?@(Hl|}Xs67wuZzF=V_cZy33<SF&5i~f=&X;V;Is=`jWxH9z9pnLt~z`p0Z;N4gr
zw~M74kqDrIPNy}iaS}@39N9?wSlwK%VGQXQrDp9dUV+~X=Zjn)8ln*1B8o4)hZi*7
zQlb$uV*oFhJyE~J|7FSetBWLr((CnfORIR(>uE`l!Sa0WLs>Z3z~B@g4IexhG)<?M
zJ(w90=g<?@%sMB#NqSAgkI%F3%EeRqx0untjo(NWfK<X(N~>TJES;U|f!xYx0rPtv
zwcwKgak-f&*tm&EAufiZ5fZY%yx!R|OooX<sMX`P5G}Y`vRiI(B}$Sw<HVz8s+1nm
z#1t4lMSX>Q)HoL#LR?UknGa|>+`10XA&iA$*_8Mg@k*M06nb@rY7&SVHyLRdeC$}@
zz)#^Xh-KLreEM;CNtaJNLx-m!4PU)^zV~YQ;^o0hI@w-7-+y_y0j_47J-a=NR~vU!
zm7#NY8pN(&2x2md7W-n&j_W8=s`ESAVzDLro~x8nBgDX;Ad+2Px6<kJUglt)splu_
z>ZUb$5z|YFl{`MbdIW4j{PRHmdC2pHzaD8^wM%r{oPOc64}NkAM%dK)hrCPfFOrJk
zKlgW+jzNp)dmo0yFE2~C*Q{cRJC$}fCHb*4d1IPizx51OVKL?r`Dy!==#M_{kZpVM
zG`qn^AyneJ`>DwzRsJ`bH}cQKk><n^kRBKNrE4Sn8GUNBDyH<`s~#Q?!|vI7z(F89
z_j6j91yndJubf_7mE_NqB=Tp>66xV^?-9rDF$eF-oRGxEhrZXZp2_tn0c18mciE81
zFPtii%TYRp#DLJ{o;}^`g;)QXiBZqQsPozn&cnD%_C?55VjIv$=OKNK7k9K}@P&40
zOroPDge|O{pjdSkkj4#3ytY=sG|0(kS1x@wj;n?(cDu+Pk+y>l+c+>ZOO|+W|Nj5x
zc0Ym)<uFcO6YJ}L=cz$VTWms~T}dz;aYvVlR=LFE!5~@9)W0U<VcZ0j--3&Rj9Jk1
zWsB)mw?4aG6~RY2?>SzM?s|-<pGg-T&rWeyi1fNMw|1zaA_>zy6EnWAWG-yc48#*x
zp`3}5j$d$^aA^Z1U4d7$MQ)tgK=l{AhSkCseQZ3`K5*v$nJ4jQ&XZV6lQ6tim(C&t
z@!JRe2cP`9|0w-udc;4|BR({Wc9X>PkDE2|&$NkurcL}aZQ>)OO^5)N7p&QQe8qj6
zV|_)^$;V=pZ^+6(AJ&sH+~ND*EgeHN+fcJ(D*!&loHCR|U4Zc@_lKsNjN?sY*kv2V
zhp=1Gh_ST73Z`%>I8Q2VR@7;zx;{?H0t3&LWd?J{?2Aq_=2byt_j!IodUH{oE02Jd
zz?5150E<nyud?&eIAiSUX}KDEyrNxNFgXD6ahW*V@qVpL!OAN<G4|#?z0lWa)}mA^
zpqGiu5Yd{KLO<vDuvKc3tfARBX3C26qZ=;b&u&*THAzeuAJ6foD4Pm%vh923!kBn!
zCqOQ=L)$qzxGtgAp^zW}`vDnh!ifSVmk6*rPOc5YIuVwwIUn{adjxVjH-Q$g-DhrM
zxV9umcXXm8q@&BSIR)v@V^oULg+9LdC}9inpF6FnZW`0keQ>r>y}e_#wcTu?{B!3i
zJyT}ND!Fby#>&clq^7GgAUI$GOF+L^yZ3W8E_sB^$tDuesDv!h+_xQaALYFb(8Bu3
zhUR<(fu)pkx?vhdH+HycPi8qXP-q@#wj$U(DL3d?TtAV#h%3zRmUua?#LdnDsACQ1
z<kcSQI-?8t2x?BSm(Q}ag47~}kmTnaWs@VWbf(eoTCxHI_-W}N+zV4ElrETsMbqJC
zYUAm3*Tl4S%Thf#ExB8A+V`BE_M?2G-5&%=X{1TCePY^$pfoq-rG+j(Hp;xM?`oQw
zW%izpQL7WwyUo?UD<w@YEp#I|%Z1>o+pLA@@dis5S)3%`E0{Ohc-{g#UX*j5DjF=P
zCZ9>@V7Xyr;;H4XF3VCCk@M_I!Uow^Qrn&D4gCw?F}FR^=;x)!qVdVQv#_GIOh(s<
z+6VwiZ=M=r@FmxbVJXoUyTOL%hI(j-PBY}jT`D>!=_H8bs$>>PHS^XnGnC}xc#a{d
zNPA{$Ozr)?oV$o$O@*<XXY(pa2a|zDd<|BE)K#U>0^YJxE)8%#U2zQ{*J#ijFWMMn
zBqYuzRvkAJS76*DX+u_Jh!FFzXP3nyuo9;18kIXH&$8y>wUg!nn&2dhj%%&&TmRC=
ziAgK4cq8uG_HIH~|E0~*Q2OIv+B73O^y8Q|A^!TdD_2+UD*pPGF8<h}|5MuW{91x<
z0+%|-TbM4JfH|X!p_p|EyF}$~AMk?`oh4xiIF8bZ6<)7aBmK)k#XDnz`akODxZBc*
zLZ+{ai!%8#=VX;=({n8H^vX-k84J-&3$@VFTgWx7)`5%r)CXe|G)wX~MEWHY(y~aC
z3rr2z-1GHrn8CiOD{dDzu<hEBkG#$Li4WEemqKAt#?Rfk{tG+R?aT_)6lf{x@^Tt!
z?ByBdCz-_`Z_+U2i+)p1uY!;~%U{|SJS)v&0Aji``$zMzX@cU2%GU>9xizbqv@NpI
z0mMe(mEnsTTX|1i^l6{Iw>U|Y?VwJ1M{IQ0Qb0F3MFHrK5LwD#<&IY9m-VR+QsqE%
zA3q)>3Hc-sKMDrf5(kb*Iy2sO8hgS*<#xs8*B<og|NVxB!3=TxVIQipY446n@M0{=
z_gA)*j7=34ob%g=bG}v_aQu#>YNwl9@7O%1;(_b24oEm69XGAPfbR6??@s$cp5^Wk
z4IgpI!_%|*@O|*V)^E?R%Ejrf_2Y?YxDD;_lfoL=BocPd77(=VO*Lv3&rh?Ht0a9r
zKer-4_BlPKXlilQLMVy*&k;4qdY?MTi}5%Y4;QMNvyn|BT8$drRDS*TRkAG~C1Tv0
zLZ8)@?7CpL=;_es_fcrFajd&Zdd=*<`R4V@x4f0OM0}F!1*Sb_6<-v~FIS_)lI*!y
z`r<U36@L=mi;EzW=aNK^(JI(=E)nO(N*dXz_c2O+uVj0)YJMdcYoB+8h5O(`eO4zk
zCF8={1uY<1467Z|<6|BfKm0Vc;7VRVHxKb6emdw}TV+$Z!NX=P!~r>8mTL&wHV8Ln
z-eoi-5kPHm93P}R-&LF*6Ly)d4oAQL-{%kBz4`s0zNuaxe0}l$;j8)8*MHjo-5-mG
ztL*aOqx_GTE~iv1dbLv%IU?^7vJTCCEx(}ZrY~N;e#1fix<&Z+(W}GZ^S$BW(VMp~
zQ!AnsXM7k^H0x&D8cq@-p2vXaD2&De8Awn)YYKk87S6|;Zpd{}1B3Uy;P0O6jzn9r
za#PGErP%GD;%HP|r~lJ4K6;6pq#Kei!r07dd6keDdOH1(XiR!}czQO(%lEJ!QPAYP
z6vdai&DDFiPZp$a_FRcXZ_?>-HYm@Bc7&ax<v5feG(llHwa`+`-3w<8t(xBPaYI3)
z!nPi&vvRmBQQ>49>&Kib5|2Y9I9JD4+!<3J`sM`5Wq!gE?=jv-%?tV9gCQ|Bu7gyM
zy_1eOD}5HYiy)zi0l2Gq;yj5#BDqZ`7|g32hW*QI`p#(;0en20HDJUPFEXF=&|tJ!
zXAtS>zE9#fJ%-`wZo^EaT^+obG;T9W;a|mqGZpDXfzTc%NV(52rcm%L`P~n?!9fe8
zL}&(=2IU72YZjI+8{*scqzs6K*~2(4l~V&pRC_WIgU=v4&;G=_TZ&WRIlmsRAAO!Q
zgmo{9(^GZ<F+0=GMxd*%TIgs&D|N=_(Ku;eo}0g18y#%ygIf1}dRsJLXYrAdRWjy-
zx9je9>511lv*h{y;Q0$289G--t{FL_fUP11Z2&yLAjw}l&*8RE%oU_J1l_^n@%=Fx
z<U$VeQ=}fF7bPMh$;+GwTS%+E@&Pby+^-43-*e|u*SFn5^#jh};Eh7fwcg<x0qUW#
z&7dxmB{tq7@Ay5ArxM5kLVxO<^}AA5nzq)L=Ek9$+36xX54IuE#tK=h>REG)Qr8oq
z#F!#hS0Y|S8UrWWR6q?GdRk}wBzh8x$x}w6sd6daaD2$q?qq*FZeNB^0C#(Iw}-nu
zyVG%wTVcMA0anX=?(|AG0!!u;J0w0)-NXk)^|gJYA(6@Pb9PUW#G_SS4)f`x_hkv_
zisV{Vs>g0UuTc|6Ul#Kk;*xG&u-trfR+jHXX<Sv&ehQsdW{BtI@or!Z$g%?yvTJl;
zssiq_ksdtw<iRIcz8+?xhfntGW=CuMDxMNi*h)?~I#m9+%Api3PMu@Qdah%ElrsT!
zp-I)qjd$3=W^?iUEC*nOMk5`&;41Et9UF@v+wj(i#8DF+bR5#A(YuSKVUIDF^RTXQ
zYD+|*MpUwUcM}V<-$aa>#&RrLL1Ujg!Jrt6n%T5D4Ms>J%(zNAJ2t4HS6R>y$1p=f
zp%H6y&^Xu%Ojo%+CMWY~T@#G$@y~k1Ti?8RvzzRVk%2eP%cR$P>ehk{eJg0?CnZM|
zup)jcp^ak^Y=j#mip(SFm1g-MA`1n=t{LVX@VK=m17uA=j!unoK?DArbKl(bxHacF
zu0x{G1w7SV-)h}TL@?ZKS;<lzL2Gm1MU#GFTls|OUkuso4Pj`Q2y7=5H8@jA_k?5R
zdZ>b-1LUK|#__FJ9K(LB^>?I`HxEnMX|LxtI;TANjSd2fBZR72)}iIUu<t84tcA`;
zg{bI41ROHt)*zNhbp0$Fr8;A$!i>f<stbMHMyXHiIP{=Ria#^u3L?PxRMnqiz4lFc
z>f*K5Ps>!s>6KA4HF-|FcftaoyPqJtfbC|0KDU*%!&YNxm*w0u90@l%V!S=RA~v_>
zhR*h$Cf~Rphic)#Ra<`U5;STDtOnUMpbz8JQ^bOTM~MQiOTdwVxNRH8*;kz940i%D
zb(N9C2CqdD;}N*oQ%NNGdM4!uGOaAeEYE#gv`<5-&(_Gsg2`$oZ4aMEZ~FQ01k8p8
z6Mtc#lA&DF|7huT;<7oWc2O9v0>V=r>ziH$0|M`^-U%O9wx9wga7cD`o=aaiW>bXm
zdA{(`Ddh+roSmIyTkVh?e(MXw{MMghI0A7{?Ck6&&uc<H+Eutgb<l8%nZ24TpdYu0
zqm2{Zwg7;&0+b?-J|?7|o`vzmWL4wtc2ZgcA@`F#WFM$V!?6X%2J5_B&qL}HOGzUM
zdMK7lsh{D-SWYI`R&m!vyGbw4d#c?yhfcA~&r{%-s88>`>;{rxYI@Qad{ifUBC#@+
zI6dZssLd3a%GFm8eS{sF$^g|UxTnmL*$i9Y9WO9`dTb08RFqAr<?)rWB~8PP)Rt%y
zT*LZB-soxLouHl{re3n4PTa0*P}5{^m(HT>XLKj^OqfGbM6F}X5kiGpQs1H-sRFxZ
zTVW$ZAP!*l+AVqj5UwONiZRJPu&c!_dx_UqcXnDNYwWg;_TGN+@@V+%?cVF>U+!{4
ztrj8%cUuB^HAGPB&@hR1TL@zAp)0G=YPMYUBpkm*d*!^SIMracrMCNOH^EA@&_d6(
zkX$YbC~{mS8q%Kc9)jC<?Qk5NK(r+}?Y9@7xF=**bfcnOLrZe?JE?!W$q(*l0)yCm
zApoO4|Ni?#Wk^y#Iane2@yFypgQtJ-3w>dc(@8M9%_~3rps(nf_nz@vG`;<3cJW^C
z%iFZr>n%w%&674gtB-O%e;>e{L)pmvbA-yA;@x)b<xxr0-zLH{TLE!7-H%GHTR|tB
z#`oioTW!}46Nhi~i~XZ7zkW76dh`32uXlL}q>L`|Wz`SwP!mkRnqPC2vlJ}~n?RRd
zCbBodwvfdUD$QORq*EO{>uR_4pzpY{3qjOlsD_7IXMkOXLE(HA@p1bkYe`<Bc{!dG
z@Ss%JumHT;)5kjf)<fzKYh1-d_cpO{n`W9=Wm%4$`3-mc&6~HsKRnob{&M(w@2i*J
z4vr6>zuiAL8XoK&efg~*Oz3$qmJ*-N0`Z8BV`Gl^Cg(46FKRCY2gMPyXE#eKsElL{
z*yY=I!Ex-wXIQ(+xfK|OLg01<%m|0?QOU+wo^S9`j_-{@gva@4b=nQ&G4Kl(*rbfJ
zU>@K`8?3mU$lUf5voJ{Fh4vS2m26@C?djYrFaOfhGk;_$y(=^{?2=_<JBe8>{R&Yg
zpptWv3ko)<=Gl3raM2tzqW(Y3B$E?c%HpRZ<Ft>sH`Gg(bTVe_fUOiSR_;}V2`A2p
zHY6w=&=#ix4(RNETsu^(xvcp+A2hv%L7#9!Id+)@ha?YnlS8nQU;}t1$VJ37D^x9q
zf>r;R4Mtrav||Cuh)>hb{C!R*KZp9-y!d1{*Nx_=*-t(RV&m6+jvdzHGCEIAXOfkH
zPsAGGu@0*F1HaKMFUh}=CxiBRBMV~*s!|2kY?ls#4`T=JYe&2gkA$<-hX<$Ea1j>)
z+(X^iQxQB!o-pJ^kGXC2yD;1{#Isz^=;B#1k1^v?i(ghx@~#&g><-v>4@Pmc^+4x<
z&iyvPz>d)VgRM%x8b124>CuP&(KLXCV+kuPJjRJfFWrK<YVP7XpurH4l~d-HYI4A)
z7I~J18o$0mRF??wv>n3MZNBVck33lIjFbsZ8y)BVi-EI3=eHkr5QQ!D>!y1w7bw3q
zjyoOLnxakjkT#u>k5|6e9P`FhPihnwIB6n!(?|{5d_1WK1}*52{$(clpil!mPZ_%o
zBs*88(1K|FaDoH`$C2>bSJ{=>eMP$EI%)ZgeSKJiGtSWHCHoF9Ph?yE4j%z09;nVQ
zWh8Gi`gCCDGVm_PoNYzKj_XCdDoRkVo6~9U{p&DvV+OmOC-Awq1bd=c1`x!|FnHx5
z%_sQE6z44l{K7ly=#?r`cHD9vyyaQ^j~Y_rF*h7&lh<n;J*N>m(|s>?yY~G0X)u4r
z)+ul4_qG7}woR#1cP%^-T!k)TP~O1Kvur^x^tL<y);MHsw|1k<=XG`&a!bh%)Qq#K
ztL&OrHD)NMt_cJZn5cycEG1pfQQ$9}usMU+K$M*y_+Z_(M}oiDJ8KSfRi{4Gg|5D6
z1u=>mj3kS)4n)Bu#h^iw%QP)Zeh~94fXF4*X(7fBF)TrZ4kO3A3GZbI*dq4fGjT4@
zFx?7jk-1(tP}3FHClI;O16Z2J3Ao5U!O|_di#l}Rc3~i?58e+%RNeTBN8@FB9-Je=
z<T)+ZtWX3p<5dzFWn$~rBAz3J<inb@<PcR-ED^2D#t9hZIeJ|}39f0Icjm)K!xMXC
z=pPx%BX!UJ@@$dEGE>khGQOr&LUR16iw*dCU;J8PZtEc~a~!f^=R`5VuAjU>c6K;h
zz2s21lRH6Bd{lEu<y3~xoBeP;G{K@P&U3ip{B>bzyk~jAMmS59)L5%g$?ofYPLM)p
zsGninM!4)g!Df0THY%UE7zwC>ICESd;RocY2YMv8CUzAmjDn!MvBe<<R+=iikdPv5
zKm^NorCzJE6Y}xKDr-Mn6OtaiL3zSL4xOH0lfm$6k)y{E*rXi$LT~p2S(qD(p$XWH
zjq4z6K67LbL%pMcU70B?aQ!R;yDYDsLm!lOf@ih;V7a@@S2(I|CPf1Lk<7?0G#g!w
z2Z${8bS@B?XVXvzS)Q#zQd_E88p2Ze5Dw43;Qu4`C4COO>T*&~GMdLCTL@pj;*f^3
zlI3N=6fnzLF$>|P8JcTZmb4?Ql?3>l7HSs<s6}~t<)&LxLI9^pQ-)|E(kpM}1v9yL
zw^l@$C~wU?=sN1eKb;RIgRYCiV6jMgrsHt<ant3Miv>Al7AhdH$lmQu3x?pKvx+zV
zJS(D;AMageK!LZ8bQQPbIPxV5nf?mNBA!%3Dn%m491|^wY7@?L;cT$VtTQtPpvNBL
zgCcTtqF=6xL(NI38U8YOWDP@gC>=#Ims#-C6-ze}LF`blYajJD#I@~46zb-(X-~U+
zt5_uKcojMe3v#_@MfM_Rm(NttCDmQVC=?QVmRGlq!5Rk!V5a+qIJ1Zz5|%o`4IKIn
z4%f|QE|(65WUUNk-U37M#tN|)Cx{KQCOK2jc^Bg6yZ)!|I5NOBUw=Iesuq<(s)aCX
z32X9+#*Q4sEH}z0tiR~q@dpbFIaa#*Onopc!_iF8=vOn%V=;(0gGz**r;9O4a*D+8
zc}>ohq6lL7ep1MfC)-c@^^i(`aMF>?J7A4ci4D{P5sN11GiOp24m`jt56rtaaEPc@
zwxy0T6H;9eN6@;i!?d0s9upK|`nf1lwmSetWnV;Mt5o76g_cXvt*f8_8J``=ag4;I
zNlKD97w$cTkw}1*Jje&t;K308>f`cYRmv7()Ps7~Ix{LSAkukmxUq};l%`z{MWtS8
zhF|d#bU##BE+VVLofVdln~TB{H@H^|DPisw@c94^11$d*(u@e1<#Zf?7+Go2H98U_
zV4!b=SR~sZMHn-VjaoP4=MU|^*aA7DvYwH9Y=qw2#>1ft{^mB+_Yt;okxf^eG@xm@
z(TUb(|6F*CkhYW?LU^)+nC_i;r)oS;&tLp{zq8vA=5xCf*28a<4Z@#4R^_n0_1VhI
znR#+1YC677t2$A18gvz(eg{jj1VC};x)Fw!7el7SBtN-2nKDcUa6J}dpqO7VdG&pW
zx$*_@nUG>R6>Tiwqp^5?Gih4bVhq+^3PO7Y_H-ufDVJ|oOr0m?ih%_#k!{6s9)dIf
zC|I~@fyzPD5~^yhX22NK{`VQg(pY0{Z5BCWeI3)~Wo~W`qQHE)32)|CL;vj1o{ffh
zm;6OjL!&89E=VSiR%HX1U~>*l#JhsSZ)E|wj0LCUGxLobVk6zo&Vgeu2+1g%2&s0P
z8|a+tM@hL76@FC`@lh<Qx^z`2fU&aAUw&P(gC2e9rJQSCyhk6h+W0`s%m`r;ftzuu
zffGFte(>P_ivU23BU!q!^ewO^y&yZ-e}Df4qCMg%5@=$G8PYom&)(TVCjUI-oYHOI
z69_s;p@sv8(Nx4F9*xT;B-&68n1Np0R+)iAwk*5>&vVWp{n3%$>~lmB15PrY$_08;
zYqvra9x+C`+$J4zjP<CvKHQnkPBd^IDeD8!^4Y2@^OwJ$Gw73sN5RS+?<KW|!C+*3
zw;hu;eegdY<E8(6+C~-zWWcxw-5^qji13P&qd7?{fQUR+0#AOSA{&FH@M{2R5xxq<
zKYXf_h_zx5V_?^(ctEIQE)Pa4q8UFDb>_LZ0YuZ<YCR8^C18POfMFsM6M_~DO19%E
zP5$fu{J&@oKj#OvVr@WHteNlZc;kop?sj(c&1hcT)#qUV**Jcr)89BEABC=^B@r-t
zUd+}_9#<M-FcHJ1pf|W7W2EA<d@0x;TIaxvGPOR@3Y@~ewjI+++bRKA@RIvNR$1Py
zM1@_{0pn&3+=b%_EX*^U)%_O;V8bSvd9s!dNhT!33=6ldF(8f?cr&-ix*(TZ2Q6m=
z(L2PB|9nbcG98D=j_VILoJNvvxB0kIoN$miG7mVM%-!rr#VIg{XZ!($j0F#`5U9t>
z0&1G9$v2&y9eeda-Q~K(bmNm~pt&q95gUwR=lS`FmY0`O%w#MkNz|fieyg$vB~e7Z
zhUFBd5b>mn9h{N3dfAB{_#{Mje9T6TkBSBWla$5`u$;wuBNx*2fYB^rl`P(>t?^{T
zPLQLG9}#6nw*wda6@LP_!}o(7jZr5>CeLR?Ld(#mRNMSc-)?W(3T@p9U3x?bhw0{N
z8zm8YCnWcDlaO$&UKwVy9j=76)K7K>KQbRX$PD<`4<j&Q^4Z~nR4l4bT?+BeH+UyD
zUR7>QVi8z$K$0k!9o~hBS^1BQ;p}8vLL4j0Wq7D<gKfja#%4P~4VQz_DofW+!R@6B
zs98I+^fX4FJD;f>q?zJnO)M}E>K>1f+1#61!yYB(jgYoGjT{_G;*NKAr2T7`3nzre
z_+()?QcV#zh=OTs!eXE(-#8Pj#eCO%2iuw4#%ViSnwiS0ijj_kt%I;){y56H)L3Nh
z4+Y_WOsKRzjr@v55d%`t;{uDd#-Y|8qYo3ydOj_vNjIJ2`i!^s+y=kq_;Vmz4P+A^
zjry(*o<VyuB)^l)iN-pBYO0xA{bs8Y)3f6<ZGBdi2w&tvgr7%FAKE%yAb|70<q_e`
zBl?gYIKmD3+JX%Kyu8ROKTJKHGAUy$7${>OU#m?-L3w;|G3XQzw5Cl7YZ=3BC*s_c
z^Vg^Og#9L*rhfxljRi>;_zz|QPT@-M$Z9j&r8Sbe%W5YOvuOK^QY^d?`yD`3#j9;I
z{a2oYZa$CI+sru)%#!NIi5UPl9r%Hb-63pFg}CZ=0Cu2oJ0D+XRq+R<%^9e5EX$@5
z>X8X+$dJHYM;2?wx4AoS#!6aBJD3Y$wO!Q+#RIh<GSnEOX!fKa3}@0vy=Il4w7@Z*
zcTB846{_a0^A*|;GI=kGirJCgya~Mf<|(X7b@BR5>(Rwga`p6VX)1@PaBHGgt!uG$
zg)6swaM#$>4(f6mJxgn%V@VNc@2`&+;f-O}=Hs=aPJ~@pIKZA|0ZNbZFP=toG)h9U
zOt?h=t*yFP-?9k}nZpU#6Ivy0d;`qlKOfWMq(91GKhHH>0#m=GA+X-C7g_rvlK>Ay
z4a$LJ#k{%_OPa_Fs|xDp=n7e;Q1>}Q9)3`^>Rq|yQx&gy--z{qSfYZm0n*-J;>6~2
zl1TvwK*U<go0ZhDd4|o$?yXI|bNrcAaVhw4CwT#0z7f)}0nt_BBwV7q;I3$#f_ar~
zq}w41n8KE+3&PQe*DC0g;lM)Pg=;RyONR4MT>;CoSV@IKB-<y)r#B}<Ghv+y^ME&=
zdoDc<Olt>b8VJ*rWr8En3biz_k;71yVkybnCd8)TPTv~WX8{n`&&u;$XmUhM0e-H9
zZkf6XgSHPp#~_33bh98JuRb)2t}^{tmE1D@!G*l`<5rAadw|<;{<`Fjo`rjC)AJf<
zC0UwKMOQ^nZmtT&*(F`47rGLhgMd5kO#Nor%x2?t65-8fFr{AX6gPl}NSEwXqohSp
zVvs%ll3dN@9x~#600ag=kjTM%2m7?$uR30OKF?rjXl^hIB+Z^L&{~SiDIBiYFHNlD
z9z*DCdY$7V8PA7fiUVA2UVqs676Lt0CUZ~BaOlh!HVHwaobRJTTy5t0<Lnm`e0AhG
zyKqp9b*3SjYh9B(u<Hm`LK${;IFm7uYqSBFJ!YFGlSj9}MnX4K^hQtk^!~k@K<PhB
zui>b?d{H@d)8<U0X92lXF1S=1`<o5?-wq5hwwi?p@)zR3yB594Q@UU#BlDxbBhZ1+
z$Pt_YR?-Vc{9+lfgg`HhDWKvRo#k3RTXHgWVg>C)RAlY?BJV*ZTli=}ey@<wWj6n3
zr&;04VB$i;*<(yRa|NYqtI?2;R(1{2;p&R@Y@$}?iyR0b#+6ylRMoxh5FxXJ(L0-E
z_<1i%h~_@#A{+B7FENM<GoS{G<>uFzeD-0)UlbhmDq0E$1hP$!=8iLa7=T)1Ib7bp
zX=OS@1~jhkvSRs}X2956jJBg$R}#b^#sn~v@JtLQ#Gv?l$@6k<A-QG^W}1(UW9$v>
zhD6N^todEqk3ewiB@&}#d#`JFK>1kC?rAYY-_oDcj@(THB(Qi~N;AxU7#bKLp_RkJ
zm4qYi9E+3njf##O>T<J{6gBB3o}T^h78HBE{#R!|NqZBGwUxxY)h*aUZMB#=q7#~f
zI4Sv%UhCW2hrEE8Rf!i6ZKQTJX}?9Wj~RWm;M&eY*!)@Vby+t`K}i-ELTN^`s9oIr
zy2<^-F!>U=!+6q{xmMIzmv(tqI;|@ch|#s<HE=a~Ic^(N?AdAj%9b2wb#<$&K6o~p
zsHljz%u^&~jkUC=n|2Hwl0_Rw+u|x3ygEhr^D64^?0n{IG7{7qKjaMT(wbzmRetnb
zRY+px@|rc#>{C@Z6>Q#gh>^<fHyCau)=T+=T9^f?jPzR<8TZOL+*!njr&>bh!KmKm
zq-HmHWlVy&PCe`DF{n+r1>43rJE0`Sv0v3Xsccp2$?>!f5}nRT89Wr&zD-v*BbnK{
z?&M60>4|Nwj7(9pKlS~0n`0G4;bE8Sx@UZ(sz^@_4heCcYAJAE+?aF;YMgI}dAm=0
zs42b8+8j-ErUytS=li;%YASEX4(MuG&gZ`P1%i8XFUxb^!_#52=TiBA1_5vhP%F=C
zU~BvUR!O$0<Oc(fda-myUmwza<X+R~PH-~0WSxnEz&rOwPh$O>zjm`aVej?my`FoI
z9o+02#vz4wx@&8E%F!@Ep4*Gn$-7tJ^IYI6loRJ%EA<`M9#c-!wel7j7sXJt`ye$q
zmg>+VfGwvDjF!%_oQ_S@1Lp7?$<J6Kl*ML;XRY2X(O#_AH%}FNG|@;X*;jCM_Quo*
z2B>-$!~0`b8eXTw@VIa`2F$#B7@NLE?bCrLjTl~sB=m;J=2DC3%0G~BOlGZULY5pq
z%c`?G761NZNc!8^hO*yb$zsmmyhpm>Y&<I8Cy%)UPt%}CyG4<Wvm9v@*!A19(#BTd
zAC7g=D?K`W>>i1_C)q+av}8qd!96iPRR$UTT{+V8@_1H#mlaamhGeA`ahj{4%PfqB
zApPx%Igz;q!d<kA4^iP_#qm*`E!N|#!KE(%R8(<PmCuIYP|zR*NoYlIkBeoib)ZpV
zG6*N;iT38_F`Pfhk9k<tbQ$Lv$jt2Q$c(@d!6qwwKoV)Ol0;C|Sw5Xgrak}p#IEbo
z&96w{o$WsAKX}-y=<uXlEKRH}ZaeIpE(<15db9ufaR0^2V31O`#eXOtvvXXQN;ECT
zc;J>CP4T<5tb<W88&qdnbH!!loL1D}2;o?qk!QXyI$nPMpqu>sVVA*Y8F%DK`{xhZ
zEg9XTq<50E6=k@(sy+kY?`*lfg$XIQy13S-)-R49eA{U!?VqE8wnEd^x@sPN>uG9T
z?VY5~Z7x$V6J0>&ozEILF7xyG68gPwGHUMS>!Y{-aqwpU^--GqGD)9*^@2e@gVZF0
z;oGKdGG$dXeb1w%@Bi2T{9m2*2{J@Y|B=~+VrqROw(l3kB9*W~aXk2FOE>$@dEqsg
z?ev?k1T_PoThI0mUk<6?FW<i2do}#}?JMh#2*}@w{fuTvGtSdy6DmFov(X8cy}ERw
zXt4Di<Kwd7w0|zjDNRbc(Sk4cBdh&6f*?G$6|7u6fi|WkU7pVs12r{s1t#WdLnm6z
ztPq;@2!oGyIAXrp?0K@>ZF<0w1U9Ne2$3^S97(c=x|$E!^lfd!7y{>tO2NXg1>sU(
zmY0cwZ&vJg-`P1>O{W9Y5z0<Dg7G*#S&-J3Hli4wmgVU*r+<2GMhr%~!ywuyi4l_c
zWQrPQs87b~0@r7`s+NM5heLjW*y1abcxaT%yj(3SPn&FRQgCYhM5@OH3mq_Py?MT`
zVMD@f&@7vN1ofSjJ`u1L>8F>C$B14R(a}!SQ)0ZltyeR#Z;$n2C5}Q>A5eN%^C^J+
z(NA>7G>}vh9V;-;6Kv0HarIevs#U7w?9jsPNHQ~>mb^%e+TP(V%*x=%&ykJ^fDArg
z*^I{1Sy+t|4tv<yA%Ox*sEvU&R8Cc!R2FIC+GUPL8&|i73(H1q@Vv@b<Fe-$3>*Mi
zSt!n68ZABpt*02XgVXe=gtpYAlC1@1fyn)oMl|NZab28MF($eiC->bh6K1-a0iK;c
zda9-#Ku5z*1fpQGSR^PYr8}rNov)pu+HoBu%6}Hr0pXIOv~nx8_IS}kr)}+g3W%0w
z5Odj$=aI%hic7(jm3)O4X_!e+(udWP`nhWkYo#tDzedWV<ZWYIs7qCF9#=nkT{7IK
zEFF=FSnvRCBQl{vPR5ljnQFUX$rMmWkK0f3>Li<E3B;MotBk${OU$N<c$q72U&&>=
zxt?&3;jXeybGx+W66Y&hq({GHfpAu8AK<Zfgu00sH2gVV;+pFyPuNT@b|cRkGgrEA
zQax+ce6F_mO!-iT$A>EMn$*CuwU5w8WV6o$=86!YCgvbZr8`@wi_s_D$laG&olAvG
zYu~hNfE|$jj-GOSP%u=ak~SFBsFLWi#<K)eL?bMT9kVF`R$jz=rZ4sn_ny6aIedNi
zyS@EaPbS&4%2TO1&JwbIK%y=WE&D(mjzb)0L;McTWV2*h@s%jq*l9TclBtZpcC{p4
ztXE*NHmMaMgT&JBOQW<!*x$kxz-G`^oH0pklWMl|#Z%bXSA0M*l8!?ea`8(s)+U?B
z$|cHQmf2WSaLSd1qj5?vYiE7o9^Wv26X*&RtS&Tie*IXJV+x53(Fr_3pw9ws`KzY0
zFEGxDPjt)(BhhJhq<%4`6(MckIL9Suq>AxT-g!M0HAq&S7AKI2w^Jp*A@@OW`{Zug
zb##%=^2>aYYATV8stEcYoZ3iaWsBM}J5{k^SJ3`a^^nWMi5>2XyeAVGMc(x7n}bwp
z*r#~VZ1mzH;%3-UiCNf&(}p^h&EfejCb&7tmmCP0s?9&OSfk8D5pBiRn<O9SQ8O0v
z8M;EUf<_iNUplwYPYw#U_j4Q}x3!%X=cm6VVfNvtzuF~nJmu`};{1HIbXk!ie4x0G
zvSoOeb+-Zci`a0(;+$vihqygF9|en3PA0T4k|e5A440Xb;Ft~#5Vf?6qMrHK`ajpy
zd{q?Gfx)g6NP|*FS6;WIk>|Yj*YuHRg?rl2$q~&@FGnm4E!;(M;sL>FmypoUNMXD#
z;WiOi^9({mH!xf|GGsIXAMk!6kWYvhj7v&2^j5p)Dt&>(Y3AmF$${A5*&kQgRPs`4
zwgkvx*>qk&=tLN7`q)}|I?(GxdW`4V^Nj?rGt$ItS*|1yQbMR|WpUsgi~4PMxc*Mc
zIrJiy59a0g97P9lLn{Q1rYJ@ZLog~Cu&{4T<AfM0Jn?jf2&m3B7n)A*|LXpITDK<t
z;o<26>mm(L58GNvpCYf!TM+mMjzsw5g5a^ON<~WKxhNbIJJn$11fUzsZAi9KB?J;=
zZ=6~&ZBR&>zt2y=FxZe!e@sgNHcv!Cvlltr4+1g1LYoCPgv)Gk&IdlRkLmJEoT+{J
zV73?)#9vW*qelWXOMR^Gi&#hvNfBd_6H@+7B#2W$evCos_zc>|+fIB-w0tkS_htXG
z3Mq9$v0Afo)?+0DVj7Bea}@b9>=oUqOn#q<bGcfL@cbeyccPMk7y1-VW}IDh%vxb~
zuDrswDa6C+mO`OJKf?w?wx5-Zhkd46j_KEcCmiKH`vYl2=rG7WetC|5n4$d6X4@RE
z5B=*64Qiq`qcbv|nWn4yG6_Ue+>VV18Tpb4khwq)eL|1&ZdmW<`0%Tv123nd$6QN&
z0@D!7s}S07CP;UCW+5G1(&F}ts#l#a=L4=^7j-^FcjBb5IPWt|xa6!f>?_%c5ANTW
z4p#zeohk6l^AJL9?Q?bODhG!jpNM7k9{;O}&Os(CmkM#eIuUdM0yEe!D-{p5C09OS
zK983+c)6Q2^iAUrya4E9nz&+^2Favj;vs1i;`y`VT66rM_NQN?q9I>rK!x_k*V-M6
zJ8@%gwLXUzuFLg>5|3cUY!N5i!%tmRGh_fuuu`c-I-MLlUyVrGO7;&D39&bD2)ZC@
zC~Qhg=XG-qa&MoUbJ+y_<ik(<%w(Sv>0U8o59V>{;JB=4cD-Dw#Gn<lnh3V|{c4mi
zNSng~#n|yyB%}t?hu13(5)|M;A!<%?bp1Wcr{|FV7HrY^kQyUsp(ibLBxlbGVg%hZ
zY}pf!{Eo3*mh8!2jD5Y-7q1Upe^p&qtTjPN(^@=Mxo&-F%K*a^%T~n;<d%9n@1ORQ
zV>yU=dj8yD-~*iJ13;w=;x_tM=ToUnE$iM97*EpZzxsC_uI?4kcmJ{L(YQowQfM$;
zzkKbeeTc1(WTer{AU);yzU&R21H{-m)KCNfn_#kG@_2OC4eLV~5GjKjvdw(aFvd>*
z1180wZ5PnPU_%;<pM@l{>%WG0Di4V#vA0qbC#dqPQE`yC<-C!%yFkXTR;R2^2nx!k
zKK5ITrQ-mZt&^N%LUe6vuCMbMe#nG_57Mgd$>}C7bpipr{hZW@Hhjm-ikr%Z4%XTg
z{=4?9@Le{UOQxRHF|m?$1{IJ;oO{>TlU>ckIHKnxTcoAFWc-TDL~4AG4o@hWDj}J0
z;o>#q9jhu8$qsU8#Z@<&r3}kO)J1Wp5XXO2!q#gqaAiA9(<DNE4B+trb?WTtFCV)D
z@t5xEFEyk*tMW$=6VgIR<R3r%?c<Opc-Qku-ZV=Qx0S@B#`*H8LL8*0OgL`KfKGHd
zf?4q8xpcy5mvcl%OOuAOsf2vEBqKfC5<s*sfHn<)ktL&7&sLmC+STfZa8)Tt+PGYb
zk9<sXlUIiD-od6qyjeYsB0%G9Bq7GA9czSB&`XeKka1fn2XIit9(YwUyn}selj8KS
zATDU!ckp3~tIHLzF3MsoF|o4=Nfyf>bWGD=>&2DoK=6FS0_{A=nF9>gET-+o8k^Sw
zoWkO$fP&|e?~#7*gG7q)kG=1C-iDaBAAgJUSEv%FA~QP?FuUQrv8>2or(y@Sq(Twq
z*gEE&xSsiPR9{d@%lmnkWr&XoeF2XN8$WlsTCsv4BU*};Qi`=fkUP(p!dp1TZ_{o;
z0xat9aQkBJP=92wPnnjwPC#TmCQH&^rn~Gn|FFIP%Y1h61S|6k#^8UlT&(h6K!Y!5
zPgYg$l1?CH4?|@S;-r`1H12|EFdmdDNq?Ir)z$f^oNgXOHbuGG+jJ@>jh4cT!)RPv
z@ESIc34O-Ni2`MK{Mrx^57HNCuC4D$WN1@w+PezJ)Wrqv6)vG;a!GoJYudqf>qqX?
ze*_=9404*{ItjkJsF;v0vdba&Diw<>{Wf|N#0Xdo@E{jZAM3N4&AMQ1<2>@B1s__{
z%cIrOpx#qJr_idUEXPSfvBi~tQyS8TRJco#C<NoiQHlQ^uDG}n{(M1ens%h&CC%s%
zF&C*q@w{J32!@Jy(lQc@aZ9XYXUp@cJVfHtjCiHCh3i3E{;{>Ta7)_qAB@`)^AJyV
zN=meZ`2-hlp0(S|n{Uu2&tCMy2%bSG92Rt)7HL$PbKZ$R6;zk1lf3f{M@))y#BGpl
ze4MMhLs?pYe<k&*%u7S8{!wQGQrd5Z^6XHbC6RIH6qcZvfeUY!$9wvC$2nlMzBz;F
z*9aR`Xdk&6THERO^b<Q0ylq(y-sM;A<VOhjVNQB&2tnm_IVXb^mtuz;aLT6#%4lp=
zVGU*3!4l_nbT!Y#%!GPGL|ohTRqG_*^J=3AV>!+H)ADq?{W2)q-R>s!clyL;I-jk-
z_5#d?F`*mZVqTOydGbWL5jXK8IyM+cNgUv9yQ(CPD3m?5_GV+N#-bpuuzyQ!&T_G#
z4#%Tm_)v@%76i<lF#0;+wiCt2EUKm{wC?Untg@r#jf5;y6hr$xNu=6QeTM!G6N_?7
zZ7=GyKXXm+{Cx$}_vQxbbNre1cabkw3xr)OT$cfgNHSFbY&u!Z_`CF)z9aNe!OyT5
z>acdT10n7Am3bVu!E@W+9^e1AZ!!lrA-x4pX?)!=VSPHlHsK3Aw4usPyM8u!RcKu#
z)`yNAj@Q;<@SwI^>;0F52`z`+3a$oQAh=xX#Hb|V&t@&zMd4;h4}|8J=P^Yvf&BdY
zxFbJ;h5Y>c;A=mIpH6v?VBba`Zrrqf_nC01dyr2Sza#NWx85~7Pqz%*a^Uy61r>8O
zR&@ZTEZO!Sf@&_QjIqg1tyByQ0ZsT9E<C=CIxZ|Nv)10Aeu!qu>b$-rS}9a{mHUQ#
zLDcx@88e*<h}K}NXaHWLY*aMOY_GGPaNUSX{&rl!Dcq90;Jmm}uz<BwE_xz?YO1<H
zF6}2TtTFdN@q;2otvq)G=CX2uhGDY)dG=1?jFX%;hLj~ksB5+;rV#suky__OX3~m+
zL2VR^pX+J#1~tciEa32L(moYnj2B2J24O4)@g@^_^y)A<Avsz~S>&zOvmjGIQ>z^?
zC7c<FSg{g=6l56_&%p6U&(s=B1k7&1MTtL`BCV!Fjstvuvj9{pj^t#q8}6&HDMJsH
z4J?DCu2^{^?HE!Olf$FEw@1_!jadm>DXK6`1P-Y<U)aKD%}^_?`gqdhh}2nZa*>PB
z;Sw?X8Z7ogFf|Tdeq}Kp2>5_OEyeT=sZ+z}FW(*w=?RVUb=QCY@;`<Lzkh!C8@Z{c
z0vEUr+H;Wh;iyDC7pE$TIDHqm#--`1&3)kNaMyN3pWw5Knre))Rl;RAr)@fK)^$0O
zF7iiXf-4Iu3cBucl8G;)5BGkf`ZB;hXUHgyAe`_9_Hqzb&&U|nG?~9UseY66mgW2%
z{WB|17FWbGd(<vwXigeu4;+Ag4Ea%95-!Ubz!NunR_8%Y2{meRfk0Ybs(OdRm4xmG
z4-;ZBM5so%iyUz(<FEl~n-eI<sDxu|Nn?o29;~KgM26vGnv!;rO^b2n9#RcE?A}D|
zYtBN>PFGAHLdL{2$${Kqk%e$K2W=S`uj02laJe|?;#%xi;XGfsn%~XLTmsS+4uBTx
z_=}s-FcJWLoibf&el(-YxHh-HJR;V$C|B&B`X(P8YKqJ6v&p-R4(8=azoSU@lE!`H
zEEGX0Vv<DJt6}F15=2}@X78WsHVw&x-HV^VRceM=VW%JY8G`~wzDkwV!f=`3VOF4(
zKFO{$9o*sAYk7*UVrz8Gl6PL#jjZAjQ0!riAPcfRJ;eGVKV40;Md*Ou1i3Qc`Eglx
z;@4;5vy{CxSF>_dHHzl`VOP5jEPjEt_A^j>jD3q{ICoZiAOVQ-nnzuT^TnEFs0a6l
z{L;`~TF>R{@dG{UgjDZ|U8W9C-n&JsFyi6;d`eqoiS;=ZHT<qY58A@ex4?DY2VdmA
zRrOUvbdSz^x1JL3fjV_A$b7NX0DTwZ!Jxd~anO)5t@ComwYyl}!9hX1;GE<wE~TsA
z1`tRknfXq}Af7o#6dAU=@Om}X(uPxTtssEm{{O~3d2pZp@ZG`YEvC6E`(CXkwDyH!
zObIY?Rgd?uAY8U}FOWRQ_4EYZIYEe!KoubbsftQ*o)8aM6eZis7rAeljo`{WHE|7x
zWHDQnt7>{BWmw)Xwa_LBFXgxrw=@@w;o6smpK!8RadK-^=1LZj779$cT&P6kGVcvT
z!S@|9->Rx}Z((8V3|MGkQ-c*jIM#(<uv+4xh_^akG0@YiLr+?!_hnKcFeruqp0`+f
zEJ}GHQ^^05oC{<q;)(eW?sKR9^<NQ1zYK#W>~(n@vo)pdq)})FpvX~8T`or@ybH*K
zvn%%v=uY>8!i)mwM?Jc)fX?n&apeB%zcxKgy<^0s8TC*^hq>@tgLR?Bx+ul~SmNyx
ztm7zKXzd=ULo4?DPa!ash^uFBkgepl!frIrw|I8OTt}if*KMa1r-i>56>86UF#xNx
zxji}DWfAE(miT)bf@ag#X0>5WoWG4_IVe;tK?&l5{?x-NEbtjOg$YuJjlkW|a2N{T
zN5(SDOvQYZgg414Y%#40+?Qn*<{?ugo+p+Gly3Z&d&o>oI79~)*b8EQS@o{<FX21e
z4?pd=M-O>@Hb496eg7<taB<C}zYd!HyhK%~&CmYpzjj(8q0)c2&V<^<t}(s9RMGmE
z!C><c58@H(qs>D+h)1Z;HV*M19-;N1afk=u2<1_;c=)rCE1q(hE2*`ee0RD0fCEyR
z;h5MVni+C4jUV{kH%H*j4n5C{K!^-oLY2V7h>ev(kX8YXQED;`g+%mvQJn{VZd0DU
zo=aa647b3gfP-Wq#{|cuThJ80WRY6I_w%u`^AMzoeUNsrs}q>EllDbRma$bb{0x6W
z8snp9-C7bDNW!{54O+tSt;+4dHgG(m78vW%-3GT@&5A#+*jFd(gSp}qGgjqA<3uRq
zHZCGyR)Y4r30LLoy0D;5vRuJF&lTJ>aAKO#et2{rVUU_B!E&_7#r&Ww$7NU;n%k8c
zau5!pdqJ4uiROY;{D}3MKEvT5Ix069|MXclg=lqrNOQPB82#0d5yaV|7pz+#lk%rJ
zNiT^}3zOp#X)Vi5=K5Q-Yz=gPAR~X8KwDcN)8**0WN?^QwaPQCYyxT$+rfjx8cu#m
zKh{_K30=jMbd*|fgUvs>_vA2Rw3EQwZzgsbeUqt&bD5E+O$`oT{`=AJ;Ol3v_MgKD
zqHa=&x`d?xHi?&CSxCb6+rx*S{;FeA5cA8%FT19H_s#DQIr&=B<rY)3<<JcrgJUVE
z$ikA!VQ~*sb{DZ#UOe)prO#38$p;yx?~1XO@9tZ*0!}Vku%Iau76i?)$C-1iSbldI
zN#W<!wDD<jPBQH>w@{;|c`Y<dn1xy?g~q-!pA{gLZ(!QcY+_EJs?;dtc%s$j#k*RT
zM7Cv0tQ+2!A)BX25%4O^yBWg3M4r&Hc{5K`(rl2TpzI*s3wd{{?pTpgM<k#j*aENi
zT?gmc6{pPT@GQ0{b_w$mh`Zi+lzQv!r_ljZI!7wPRMT;8UVU8n(&lFi+PJU)r<}Yl
zz7bOvSS<_QlquoI^;O$|w}0Dh*=?j_fR%GM!Z01}c@&EzIp4enzBYCyDC=iY8ee!Q
zSz?~naUREjZ_!8L3&-FVi;VsL;nyp*^Jo~a8udP;H%z|ky`c~6&#bDXZL@ezgd(i^
ziusy(7+RRRHUR#k3jO$x6be+PH>4qHq1(KMA?lx;JE$DN@K0uMR!9XwNVr7{3be`q
zl5roBZ2=YKLIrv$m_w!&t{+|>uK4?+@pA1eewJ$_ItIvHfGUT;&?Knej@_AuGMyLG
zy2;LttC{XrltbF3D!9XdLUs?(C+Q15BORaIs-kx#6x{2|<t&_r@JUZFO3&0!UU-oz
zWFjn#<Hi}0mqLy(5C)YTm0A}p=rNMHrUn}x^l5YzSj#d*03#?Xlh(aJDtcX7Oom7-
z-JOsKoG*rWVVC~%piBRGh=@?J#4zSLV<6YU>)ooYRVY_JA3PVL&B1CT>(dx^;o}4Z
z6o@yVcT+8+6UB|m#d#Pb=R^vAM$VeuHDybJ0siC7*KdahZ}<POck~jn0?8+75C41i
z@{9e~$=k!dMDHeam+z4N!~ec~{i5+cX*)Fy&bm(>hYy|3^UxP=hsT;TJ-lE?!jpt^
z!1a<b?%-<3p#CjvA!4lV&hfXnrwg*19P9JOG29>D9)C+yBTviz^)0v?LdLZlfm5Gk
zZrIcy1PXB+^3QGY!qc=!ghDnwrNeu9cD|czv23;_*GY2OU0X1Xa(F)nV&DFZUU_h~
z1+RRk<-RI}@FdADv%>nIAGOI3LM!A?n{fBb=2|Z3jL8p~5cxZt=JhN3kW7^8rACOf
zO%7_4?96>O?U_ScM<8#J;ZXBh`J>Z4jW?Pg?U0YJ*WAoZ=?WH4SRdj5ML@d0b0p_)
z{{Pwg*WE_4Y+V%l-F%8z%HAz87lYI#vo7k&T&<LpnX1yQMP*fYYn90$8Iq!sWUv{e
zl&Xud|M&m~3>Y{*fMLT14h;Am{NHb~Ucj&5`HjoG1cORtR(7vmXLs+tD#f_Wn3plf
z9M^ALcpp`D1An)^=<uBmmEg9(LJqTq-X}K~GL}do7i{t=f>MdQQP_l(lQsv`<y4d$
zMy+>o6t)i}Z$la{rv0uc5i0#|BW{ol2$&a}%Rm`6+(hd#&s)jomtSlRzSuPX^m@Im
zWNT})|M}MXXHUPpeA2(%`m)=gs*RbSW(3>b*m{1@2}-iO74lk$a9wS!!j|<(`qN79
zzP|3g>Srg}*X=hy9&8+E2Zq?sp7wVSK0A0j`O~+%=J#ke`3rt$Uw_$5?>73I-`@2`
zFK2&gn`@)L-1P47%(t^Ye>W@+e#o=GjJ~}2<LkksH#(ao-@PjiM`yzU+8qsl{L|*k
zx4rL%^MfBI>;3V!!^7RLC;g2tZ~Cvkz5DZ@&TjhI!DoLNy)62hZwhMr)!DE=KFUsp
zvw?Yb+#h|p(SL1!Z}qmmp7yt1T>p9V+sov;KVlrC-sTq>+WqsN%<muew~l@|T0c4O
zub=F_ML(ZlY)9w)yQ3f9+#a3pJURK(dUHI!-g)(dVF11P>+8cGzun!Np8sWZcJ}7W
zAOAS$Tusbr`$exkzd87B_|0eMN%HP0|6v?|G5h1&jf1_rx3`_|UJu5Hr&r%iPi9}v
zU!CrpzT8`H7l(iSrgIu6M;m|q;+r?|pW<)Rt-l`qF>X)iPY)*h@r$e7aqsDPy;E$C
z&OVFxd&AGtcc*{;<9A=be0lucA3OaYJ{#`6+`RmA`}2+Ko6UptkAJ-_iq~(R{CRI<
z{==K$`gF80-Tm?Gn^*I1;_Tb$m!rYUyW1C=-+cKrdojNLdOiNr;rOoj;qK_ko7sH!
z>aT}?{q`?c2d|UfX!G^;)yw1K!^_vR$>r7YpJ&szTf?p4yWKw*(=UG*?LGa=)^L2-
z|L*wu#ol-CUJS?S-NEGZyV>Vk*N3yuZ=U|~n{V@PetdcLrgQN2vh(uWckAc7pASZF
zZuY-9zW(dw50~E@?{u|#HpFI1ZKP0DY*|E8&PhZ|oCxBvnsi|0#<7-Q&!>hHPss2s
zn+2Oh4(6uQ?Fd!@ct8LUq4aQ)<sr*Z?tyh_S#TcuIIx<0afB>ey_8S-*ft?CpV>@n
zar+)R=e+(vyQ4a-VQF-Y=wIxv4Iovt;B3l{IA#u1Z=K9XG;Bq$&k9>_#q;9Ps%RZe
zav~SkoTfeE!G+qCb4e>YB&Fjhdsnz!yiV?`hPaK46uo=U+TBwaX(^wCj|;3T*M>pX
zi0v9ftOE^Mx<f;l5x7Kyy;HQ5S<E6eOT(C|>#12~*3a4PGRr1*Mj2uj+QycRk}+C%
z(#ypGdo|DC_1xDF;Kepx%mc{xGA%xSEUg06pWD3%8+H{b$OuA@3k>X5$08Va+#?;D
zI^VEH@5Ea%-~eK+ep2TyH=}Z?_eXfb!WYNtVvoshAM1G$yAQ^6?8gZ;t&i7r7n)-=
zBRxWg`UFrC47FJ*G-*Ft*GeO@3g2?5ftr>1giVMJ*zIlZm7WP}##53|=?N=1=uX<$
z>PSpOM;`G44zx#QBXk(0!o}gSWS)fMRfrD_&>RoBkYi6=!rQ4dH**4G*c3}IVjwMP
z4zlFR$S9_5#$Rb+%KJ8&g`y!>%TKRzPGg(4S?uVXtbjUkGF(_Qa`6RUa}p%Hy5_}%
zUi4y4D5yP1gGbcm1`HS3j3IqXuh<NBTbQ@hB)&F7{tn5Ni>z!Li9ifF9_?&LyPD-U
zncex#terUygVLO~;_O(SEqzuquU~Q01Se*%nP0Exy#}rxqA(oA_c)}cF)X<>P>!)_
zmYC)wpUj68-Zd)~`4XLdjC>J8DU+r*su$bQ5!cZ{X(QU+7{E&kKVWn!P^)tT$?BBi
zfoz#L=WX(^Y?lPuaP8SQ#Y3JY%QS)tL%STs+YIl#K)Rq@k|8tFD0XeNSDJT$3+0F<
z?{h@bl+1zKxLfClx&`+Zn-LtymZX8<v=U#FSw-4P1V@DqPYNms+iVd8l_O)?LiQ;J
zu{IlMvl;C!q1rWBP+KU+tRoXo-JO|iCTDu_j|d9K^yce|(9g3O{Q*=Qd~twy<m}3P
zry_UXdaTeT{L#FU*YRGH{*nVS9!0CNJLS?U-KHMKbNvW>zPwP#T^v*1@y*gr$;TcK
z*cSkpA8_qpL!lm%COYFff)zChfo)`u)LGJ_sh6UR{~GNK2pezA=egM%TXta(uccKz
zQU0pqqdo8e06)@|fJd~#N0_W_oE|w*gmx@*@WmUKQG1)0J-AY8&(;%`$=R7q5JdY%
z6x0iM`GNg=#LFHV>6jzKip)@)R54$4BB$ePI_@GxgemnWIJhW8+3R5<Ff43&9Yi1A
zS^xF8-1Aqj_uG+6>6F&3=QCRKI>$Z%EwF43MH1vBd*>Ybuh(hPhbuuYETjNC$pygT
zEKLRkpw9+u)Fj!JAn6ra<tbIWa_%FmRA0Pl0}1(P|NHF=!btx958l@<PR?Haj3>Tt
zU7YQoo^<F*?9DFKSLLX)G;j|jK0ukHa;^(tXf2QhXj_4S>FLkXU`Ym`r@+9ZLUEq}
z+w=@YDp`1V*4Y|DnHx(F@)dE~NEUf;yipAMuCu=SyuA$mVtG03uo4qD&73Od<QiU!
zj8ip`vYa6(B7THy8I>jpdxpN)P$p(X>c}ab-Xo6HXXl1g@l+-ebkL2IPWS*E$*XC+
z?MY;%V=NKWM?VMUgAYs1K=zpzfq0aNjIi==pgO5+!C_k7sd~pKiUbhiPo9PsyHIm^
zL$TDIDnuIDd^V#=38~qFb?EDa4!KCr+%%5pRYgh4uEq>OfHO_R=vSw&l<Il#uC$6q
zrt{+q!jyT_%7hERFik$aH2Nl?r{UK};Z{D#Ygd!2D2|bI5v%n*HjnU`YL2rVPFJVb
zyz>PdP>Qz)4JA_}`<Z_wLhCDJ8)O5?jOTN-q6xPO&z?ss?e=S0Ch2X#m7FARo~}9%
zy&2+`>!hDop<h~<m3#Udlg~fwv;-1V2oo!M^sjhWG8W`wMY_Kt&QB`{(g3{N6?@2r
zd1Xma<o%4yr1n*ei;Hkc+@N`Aay<p6ha{?U>1D26Z%CHA075l4I%dcn$^{`Z<$It@
zuS)4R<_iaVtSeG3Z0*QFc)<ugrw|e<;b3iD59_#JpfYi`Fio$eXae6<gMHA9ULt-j
z#VP?`yz=wZ_~5?wp=gWbTV57Vq4Ee4VcWx@w@HDTWrWLKsvA<G!#PY_@t|RLqo5QE
zZ1ldFsSyoJ{nAI#&X1Vrz4Yc}BCG+@PG*ShbefI(*#uT09Fs(sM;WXi`Q;4a(KIm&
z=k(PvGkiZzPx6wYH8OM|Vq}b-FMc5=OB-Qe&h9uYtas<P$3>G^sNpW#lAraar^0p<
z-0XTaA(yc#4;{dL2Kevhynyv6V_Zu9!Q+rDE-s9M2M7bjpFs<@5zK{<mrQa#y-L);
z7Ib2on@vig{LXVsVMUg|Tc(v?E*VurK&Qm^=biENB_pf}Gg3Ki=Pz&0_B(s~-=3Vd
zxtPToftLUz#`LR0^V!kqd|v;<AiZhQMH1w`@<;Q$^_3X}5;vc>V0LMJ<-Y&iy35qm
z!ZuAhy01zS%6ZO#(IgD_va*G;A@537suw>38wn<g@_4+8ybhmle8+}e&n!AhY{}AB
zB%&JWSrAe;nA2Njgs)c$&|(WKT4JTG+w-8T7=`dt4*XBeyNUy5apy3kSiSHchtlUa
zQEvtcd$-B2x71`=bS-ZFU4?)YoQ-}6)-YA2u8R!8cruOiaZJUfc(Pd_+V;z7mgGm~
zC6GT)&)A0TN<Rr_Ok`adA~Y;A>{r{SB3C3NB4sBbAU3K~ScphR*$GYQFqC}smg)?@
zzn_$A=4wYk*v_3)y?_e2P@I~K^Ja*kK74Ut&SaJ+Nh|p7=-}|M^WDkWH|^7%-F;U+
zQ(M+(BwCuVbr}&WF=ofyHT0xbL<9*v5!@-S+#l6JWvM2;$?|#O&L}D+r3AvFGu*H^
zp;R<@f3GuJA${TF){!KwPzY!FeOFz187`q2sf!f0W%F<-UrK7U+0cZ6ro6#RTt|c>
zLA~4WO--ZM2%A`y4zE_y3t*Co+ycUZH!P43s)&qc@lve#7mj*SgYx}F?&_W=$7V85
zfVyVG#F#5JA+sK+<*gB2FndkP{0uI&rpHavaVxc^hL|Hs|FG5ESZ`T=kQtUob`1DF
zK##Fw6-BHk78wyNi_}irD^zQ)^s;MJ%_H1f*Ct*{yf+?!Zd0;MmEWOS;#^wL+{Akm
zGG?0}(4%5#KPYQc_rj<|hn*rZiOjkBP?KyF%0Dki2ouXnB|=N*Htk*K`P*{%cuX(V
zee0jKW{_pPU_%pRk9*fhMrq5x(aeN1;O>#Tt7x&aN)pH6=MA5KWG71>DbIGDxX?g%
zEEmGE=f#4_(<!G=xL7X4V84}3zJlv=z^+gMl=+x~aWq;?rR|K8IuSaUXH?{qxtqdm
z^D8-u1Ch52t^$1L%1?4$tdjL*2P@KH>zB7qMgSz*b?!o~3~vM5IAo~FQ9bztTQ8WC
zMzkqO(+>PVUF1Eo2k4O>u-hnLw`4h5V6ls_sg_r`$H7atAILyCRbV+vGzpL3Ts4l1
zTRB1PaesG&UOPU9S86Dn9nrDLm|d2&(l4;o+Y#~57CbuX_-4CyzH|0!|Ge|!Z0C6Q
z^)}nxYZMn*E9SisQgGp%&`r5rLk%RuUbmxp&nQ&$m@8e>JZXBnrVtO?R4c0%?EP&H
z)2(qF*esoRy+cIAw(`psse}1^_J^A%_6eR3;R^nQ$P*EARkx#`?awH>f~z+|B4hO1
zpMHvDPfyd!4z1`fzeNA;J^j1i$qUnz3cf$!m7jl>SA?U*FX$~Zz0F{D@m~D;AuYzS
z(a_9^ykee}M;Yh{f&3j2^90J>yt`6*nGoPsjNsFk?9Seu%G^Tqt6nGU2KeQd)fL+g
z5r=E^)xr7eH!parZPO5hVKx0brU@e5Zkc|`ib}XpzM5d^S1DJ!(m^UU^zHYN^9tJJ
zPCwGP{@X>1PFC0oGb*0WdlJ;FC3K00dKj(?qBmqZ0FC-Cy)Y7l601=RN+loZ7@==$
z%Mad#ZUaV<<saM2S%Q7ca;0rqzd-3gB*j4YZ$zAUyNrUhZF^ml{lfcsCD_m_Rr^zR
zpX^IZ9?Q1vR&B}7CR0a@!fbADM}mLiXb$&diILcjHrKVaN6~lAR+M_yC5K9HeruQ%
zC;gLNe(~MW_Y!iidX4}e1#t+@^*6|y|874@2K{8Vs-<KkC1Om-)i{y#V4%%}YSgJy
z28eI~_yFcdc48|UBbl2^OT_slt)~4XWySbnH)QPFRBUz<l{Aj1lrG}b`do{?UbSF4
zPr^3rJR=sHCbLt%v%pDrPmYcb&O1l@?e@;A{bws46S<c?c}<uxTwEBw7B;mKJ^SBB
z|GR%T>+|p5N8f)>WedmNTZVp(90ISHKLlP{v8SzKaZzRUZ8n)uVgNaAJZ@9D3^IvQ
z#?ntWmz43@N<}~Lk!Sdi5vQI<zZDjE^5*>X&AIpZW#&kBjrzl38FR8sOerv1!o@u3
zVh+?1^%q+Pp%_9g<&`DAD)-!qUT*WoZ3gSw<l-eo6CIEK<(W~p%pa@EmwP-JG4Yx1
z##feW#70>A!$$M7FE*R&-qS&p1$_DOogwcy#z$f&lF0>yQj(w6%xEq+wymdViSyAp
z%2IuB5_!@fKLSB4Mxb)o5Ja<Ie&KVf@}Od)M&(HrN?IR$UM+}U590kQj}bSo=HyGc
zICJnt-u-vx+4}u`sY&QfC|EDg6g?9#CMRbvrBary$hH0Kw?D~NJllWy$Ou<O3mmCv
z{o*}u$>`Z{*LXMo)@x!V`Z<DKe6{#l*Gm70e_nMrTR+D?U#-?_WzJwb{Oq^(Lsd-T
zpGVn0kFtLrW&dLxWjqjPLe@dJr#{WWCMO#_Ehl6U0TTfBCDD>O7?Ag0*l-+11=M<u
zYSz7~c&EX+5J@2csR*9hH4ML(POn&VqUy$Kb>X1;A~UlI_#5YUA=4E(mnel=z^DZC
z$xsWG5JspqX=}x7I`6w$OKjt@!vHGbLIETVAJW`tHTj?tg*a9w2~|9|?jyV^)%#vj
z2u#5<cxrSv35qFdTqHxVpc+zaO$?Y0@dU6?c*}Z>sSuL|J<`@}a1RL0LFxr@L>Z+{
zz=J}$=K3bvmAj9{Rr=Wcf!a{0h>EHo3@TtQ+8!WO*gl~}Kd=-G4CyLNazyYDg^Sm^
zEh%_TAMo2^j9*4K#9#CRjB^f#jS&{~L7S1hMtz&kQM>5Uh(X<YX&U@eLF#c7Owt2J
zQ*=<Er_*edP}K>5K?r>i2#k6t$<Wr&Pf;uT@5-&{+erA6n+#wj@Qr+?2t6P@*QW=y
zMb7N<@Zw(()YkWFkMJv&7wXQwplx$0mvqW-3uxRlCOGb5xn%NiaVB9D=(0I47AI8t
zmycyarEuWm$A$?XICL+eZ^m8)iPHn$sW{-lE7Bu7hW6=+9nTqGe&{8yKRw5PN4&4i
z^3nrm$~Nf{{pF%D=^?dZyB;y$v^=@S0h&rF!a(Wi6I*d63+{R^^PF6#gSmb}e+{_K
zd1+8*KBA_1fiAu&bewOB5R8&;zoJxGx=(*DJm4XA#?k%*@jp)ur@o>hKY|2$ymQ`e
zMD0JC|Ge5gHHT}j)rL#z=#S^;ybr!x2z%yE4f9?(KHMv)NIPgu5VV-hx9MGJDbnC3
zJ?}Z(Y-RW?Eta?lo_dZr|8dVB$4g__Svv4*%}Wl%uDDbh=2S5p>xTZMLNtI_4BVl9
z`)-!K{3rOKdxRee)}qc0J|@aea4#0w%ZRJ?yobSvXjgSb`p`v5-+aG|QXnJ1U2rS#
z*%Rlm_^uYy-TC}&IDn{Omem-^jLv`NkO;VBmFTNUf}=X-=byK}BK-(*+;cvX-lj&>
ziR6=<>gKaBJRSm{)C53}B`f3+4~Ho-u5QffH=(t#ffE8&Nl9IZ)sTl2OB>G-UbmK&
zEKO#E3usekpf@30%B=t=N|Eo_DmFf>Fpu1aY|R8lgi8bBnKuUnYn&xzhi2_x%FbsF
zh!iEw<y4gx8j*dRLAAr_<c!jUvoFN#HFWIQJxtj5JQ%q2W_dIE8p7LEE~zSEEL0<+
z>e^A4(;q6D?JBaxkPwT+As>iuiG`L|d@G7)bO9V3@8R(t7hB}M7>vP(3|3XyE|rJ}
z<fU|L&Jr3{{Q_rm`H1H7ui)tB4*qd><PVm`R8(g70^`3*02Kk9z*r*)v|e94Pptq1
z7dC8JM{9$%mf<9?p(IB|#8zG54i~0LD=^6nhc*HPM-Wns;7}$@5t<u}0gn0Ol%B~Q
zG}k+l>WLC6ingJ7Lyo|q=?QAxjG*U%cuy%&=Tcpb97K@a8ET8NORC3{SfP+|Cm5g8
z^cngF7r%jI2QI|mP`2V3b-C=sC6~~c6^l}Kp)`uzw+yhzQo8!_<5R$z&m>hlXboS+
zAW(MPYwbeBj#lakph{8;M5qF+Q^-_;p7}6+{-khW0-FJ5rDsw<D(3Ny&<1B|GLqfF
zA6HETQnb0ZT3DzLEI#9=;YM_ol7?@nKOd5pu^a}e%$36kC)p%5WUeLB&%E46P2|v$
zlU}G{)qW|cF!j)TPiWzs0v5c?tZn4!g3SE5Iu388IA2!~UP{pu-mPv#QV!B7)tNM^
z@$@bR4l?ngl+}z|O~_$Un;Q{hjr%0pX{X~sb?!(hDwCTSN|~3i5rAJWFo`gC)elUN
zhJrMYbjCc%rB0L*V$=e|Vzf=ZDUXJd6cGDb>H;mi<t$Fb$C7*Btd^B*;H?WeMW*Rc
z3S4}m)RPF+<t<__2^>N{2x0*gx9L|e8)h>d>r5f5lqw~V#GLbFxR6&glj!}atE|kh
zl|1%F87u`p&ZYE%xgp$cWGGWND96$k4WN+{AbKF-#}*Y!A?Jx0_8bx@Mf0YBMa>E3
z%Rg*j&>G(O`9F%z?W86!$gXGa5?x!enI*U1_QI#gHZCT^ikjS>7;Z(sl0M;@By0w6
zu01b_eJG}fM1$~$Fa8P&_;%(ya0qAY3nqn+EHfY2#RCP2AmgX4=&_L6Rd|x6TTK^`
zK9mafYM^jXX3#Eenes4ee0b;Ny|ntpNpPw)lm;vqU0LB%DTg|9NYx8GF}%jrm#=)J
z3gQNwxmIEaJ!HX)m}XwanM25+q~r|CZPWTa>2Ntz?|Pu;*wG>(Cp5)1oGp${^t%Ai
zlkq%Q=)OY!-K><LM_hn*+`-;HXn|wj8cwKrKvMczx0G()japH+WKr%Cyg9Y_ZJSJ}
zjHX}sbsL76n~By&=cd5Mj_q>+T0|UO>|9amEw(=gr{qJcVvn+--}<s6F^RTS#*I#b
z{;P#|cbI^d(6>gkJD(Q$l(cBf>e23L>@hvg-e~G5Va@3Jg_VrrxbtfN_`Getz*<7_
zmV@($>NUEO@}S6{z2f?W8ua~+mg&ygb~#5@7s4o=D0Z+|6Ty)0t{j!@#nF68SHOgL
zr&eLSyQeNmk7an4W0V&e32T^JXoF#%Ph4FXi*I6|M$DQIXyS7>HNN{LMzGCnwO?!B
z_VS&qW6!dZ84w~Eu$N=c!=B6%!+7-EQ_$2KP0pSXfP-0yAqiI+w5`x1E?idtdc2~W
z<j8Y1Tyhnq&2${5$#m?2c+4kZr?wp;(e5z&b%;c?VHBE(kSpkKWf$`YV@j|d6AY-#
z)}%oF!cPC);!baR$QgnkLm{)<d|lG?IR|e6RVFW?%2d7-R->+ZN9Xu;c6F@~G9=%8
z@MK?`7CK=I70pUTrfi6##_9LKxr9Xy=Ol<~M5WxX7v45fV`47Oq(;IvMeX~UUR3`r
z8fGY@04QrVezyO3*c1?f0ESs4CY-Pk{Qu*>|1Zo?M93u1E9_x#d{6KPEf)kHt=@sk
zg?)<9F9PtDQFf*I@>A)Q>H4_1B;tp)#vd*w1L}om@Blia5f=pbbegg(X*Lv9MP_?6
z59sk@>Nw>F(9YaB<$&uq2MsqkEB3iJxb8*@`*l%%(oLK;54o~nKwuiq8qD5*ou_lC
z{-v|lN=mpTMssrl&v7m@l5?${jr(a8G`8UhMsXVFQXPpt)~Fx_BjwKfY|)|O8rXKO
z*I;9KCn(>=DK1oBk3QSdPh!2Nr09~-fpWITSHm=R%NxDk;T^Wv6RF3NL<PO%(F9}G
zJbrv;ltXKilzMwOS`5_|guHv5QMM+*vl@{LJ8Fs${5xBn&-9SXE)jW&-H`IgO3mNu
z8gnidhDWAGtTJ<D(@{2%)9TUcYS0C}5M9AiHZb~mgI%hHR`{_sJIU6u)nuQBX;5J}
zyagyY#}sg4Kw^5m6W#>F7Z)6ZRUOl5efrAfS@dz45Ak?%)y(o%y#bdTY{s+|S*IbS
zD+NYcEo@(~4Df~nG3z*I(bo`^zr#GWBIA^R)JNeP+iFQ_UnnhNNVsZV;P_u_e$;+2
zVI2|Pm`7KR8G^d>msTf(?aQ7Kj@L-;u!kh2Il@G5>iu+YK&wF@n5TgA2pZb`hRpy|
zgQUNkEW7{_oHHd>d?E2)6e^F_3X~Hfmw{Yjc(sN8EU;%Wq65HC5dfn#i+^LQ>2R0#
zUXb|AU>f2hoy>t1A^D{*b$*GE2V{S+HSs13(`L1l`Pj0NZ9B<aVGeIDj@ZyW9lPA3
z0=rktn@%YOaII12*?3#OcW$J8Qki5DU~}<@z(luIhW<ibvJt?)rz77|Mtndgo+Ee=
zZ)LVAv5A2m6VjDi+b=zHc$?wF?(}Pv&OSat8A6PzW>B^m)nW?sVaR6T6)9)KI@zZ@
zx1L(pWw1V82;(fvs(%Nje@!U01-p6U%OT_l8Wf+Ve{`b+E+A~ucj-)JfO^Te;w^Zh
zYJSfzbJ@GIlX>srvoX!@4xtiegV>eDx-ApvEp!7g=(^$*%(PHkN;7pA*4!$HuW;R9
zWM2<Z7S!p>W^0l85|wT^yg}JeGjM#{+41QJb1nCyoYMNe&1;$^E4Z&!SCgqxQ+)@w
zs;5`1!gORAT3=`Z$s*9KHNQ{%+J4Q;QfGak!*$R|hi04GL{y0-!&!3YXNuV}@7BA_
zF+5=w>)nKK+h_4GO^R7e-@KY9RB%CT+>a=e-JEL){S&QG84+KYl#bP%nt~+?qK<{O
z7G5nf98<|SrGk77lG&Cq%qkwwdf*kw(B_C0Y4fESi$@tE7CwN+X`U6}$P$EZ8V+1_
zVg<`734*usv7&6)4IbcJ3Y;I)=&Lk0JZEy9!7+l(-<z|gl)6ccid65G5L!B?9TV45
z>mI9c7b*-<R7Q0~!j~O>sKXBh<yvu=CRbAWkgRibLN}b_&yI=$%+QTXs(nIraPK`A
ztvKdSXBbWZ7+Ye7EOzX9EE2rcdR0J+yJfZ+>LIvC-Sdb=jqcsOo%5X+JMDc=7_X|5
z!_FtA8xC`_&~z4yj!R1)w<&;e;E~z39CD>EA)Yug&vWjjR6;P_WK^huRv5SPl*pRN
zqP*y85}^?diS;%~y{RERF31{8%=CjCdLC{-sgDFF%x{&~)9N0~aK#jE%g>SwA*^Ci
zxM1gqOCBv291Tzss^2qYKAfwC<wIoeXwB8T7TX$3`4=LQyLTsip@|)DMnmb++<;L6
zxOYmbc74#&&UfwTY_BaM^3GqPR<tvp=F`O7dzI%<tr*r8BQok(tjI4)+b|t_gQibG
zZL<?aApl-I8k#0m47@k3C6x+#hl)Zky+ai&@X7(oG<qfmUamu<^^6O`C?e+VR}mh%
zdw~J=^UlO5eMLviKt3ZOyyx6=Em^h!@{;;GGl6+aBF~e;#p0nM&B3|}^ZHf~4_E!Y
zf@AxZ4DtFg8}TZhi#OTE3J1p%V5Qunv=9NIZM*E6N8ugqEx)Ad165Shj_&Q&l1cWh
zW|B-K!0oTYW`E4Idb3e`Yr3*+nx@8TBQviUAM#N+rrgGP4|+As8SdDK!tH1a**dmi
zPGdpLkZFk2FOCKuCGR>;<}|OZY_6{(l)jheGuWyo{3Pt&gPy*n3s}mwjJUp#ca<x(
zI}_RKbU30|-I<<cRwJsA1EfY%^%6HY0z!=tV5jR6>+3i*lo2Zz_C*(7CP{c|uA;?0
z@?uW*cDFSRfmU|ieS3}eQtz%_yT$-D7~dt(${!X?hjN-@z)(caASs`JGaWu#(UpVM
zQXbd_aGD|f!5^f<X5qJ=KH1u|PpnimD`n}mug})29%5GRJp|L|UU&d)8!0(KX~s$I
zt=Sp<*-$R{zDx@i#Ctc6ZIhc1cuNEp@2w{m^T~lY!hM<*EX+YjK-5O9_Mj5<a%dK%
zz!`W*C|TOvpYc|Zm_r*-NM^&bLvAuD6ms7>Rt-<SS#*A9;{`)|lLBD*&MZgSUdtDU
zFq~-pY8zI~YI|GZ!np|G5>PV6?s62p$%uUm7JLroU{G)jkqlBx9giB9p&^a(X5oDE
z)P08aAzd&skFjUgGo$jZBoHl9uD#j~2Za9l;WgDWeeV%m2C7}NA&qG4caeR><43UR
zjIYdm4Kp^k6FihyMWr^ldfyi7t4h(dLGZ!sk`OG&{bx&!txb~tTjciqP{5=hhd23|
znzMH^QS?0jRsR}=B^kmlgpEq3)-N~9Cox=FT0gn4v^c!cXZ$E&mSdgh;@csZWr@in
zG`DaRzewHU$XxhzQ>;*l%$Hy9!p4tcc45=E?R$<?C_`^4szvSLUMX=hL&~<|qW119
zQhHi^0bU@k{}Op2@cD2)%*j8_ZNr&Y`K_UqII)`E1M|W+u&x$PqoGQiVbHZ5$R$eH
zPB`4kZc-2vn-f^{p$aEVCt*8rG&08ltAI1)PR_?ziH-I35efeQk23!>T~R29xJ01@
z<)Tnt_o>^(JvewA5y_(y)`9~VF>39tQh=7#TLt`<UJ^TS*}U&-$il4xvlzuvh7q;k
z7~*o2E>Pt4pmM_t<#^cnAXh>3x&6dJ`xO2B9>xPeQ`gmwdxW4(SKjmXN?k)%c#|OT
zMfbq?GM!E}hDlk$T3h7%I_d9W5kIxYd<bs~S=xv4s)uqYYSqZ7*9u5yq0NkXaWyBK
zmS4*{T3)(=yyBmFrKvmbr9S0`Y>0U=CnxG&YIu#<gY^7EYhF>rpwddf0}{b2rC>FC
zuGpwGB?WJmdE@GpTi2ZnIL{Q$*=)dJewDG*^t2<lI((}`w}J>I7_q$$>o_n(=5+=5
z(tis>4ViHq8~MN-fR@<!6to$92o$2gX~k=m3X-5P3P{Z~CY1teFmvXsQu?u|wOWQP
zPO>q9G}54JxF)RIy9j}jqxp@leP_BNZA|Fz8b220Bun5}W(oB1<6|QlZWFojTTV>!
zlt%BQEGo|D%ZHr5&Bu>b4#IW#5wzGORV*J{xwVHgQ;M9Ek7=9|3XoJBwU%|#v$$}R
zMjz^jiKgZPqE4QMw1*I}haBhR@8HKj_DsL1IMk~*=hhP~DP$<dugFC2#O_}G!-ay2
z1>W#kN0uxk{@jkv8ypo`On{U5qeK?TyN!VJDN9PMIAN$&(9*ho(zf9rf7oblJo&u2
z#j$i*SxUj#NMEHYYm0(PAfSjD_`?mr{}2+*j^!~heOeL}s+486(@>TZ7bHGvkm4jR
zoB~=sGwYqfG`XC046l%qU;%0-2gV6`gW?v9*P{uMp5@V*-P1nHR-d)rRpe@t<EH75
zLjau&VRYLk!Qs@&#vNDs*54V-%VXx{G4b*k%M@#~u{0awbchY7kosf2IpQ=5VfQ=|
zuXY9^>AaB-5O_gVF+IM*ON&SEY=Z9CS^zK3=Hq3DaL05O5@ly%NQ`Fxay}yj>G?RI
z&j}PNvHu?)knsCaVYiYYBI^MgJQ<b~o5(-|UF-4#9pth!CwGAM_OHx}@|CN+s~$Y5
zohYR-IQ(<q^5*HK27OcQd{rN%aO<kZ>`N65+La31!sW`gf_)ma=OtTT5nwMWootC*
zh-1Z{#@?Mx{VG-NAXW^Tq+GOxIKzs(2Z+~H(2XKVJ<YEWC{O&A$^(oRLkp+mi!686
zZ}1Rp$uu20U}`$QWFHD%16Ndp@S<!Fwi<}c6aXfrN-jNDkXGU7&w|8G-=D-WL#orr
zI8>}PV|*iSyZfU!%Ts47U?>&%Q@C)`v|$KdiNY#=`W%N5s|yNlcg{P;L=p^Y@wO<%
zIf!>ptR*1}Xo$!uAuyj_8ecPO;FMN6Ez68pb&Zm&Y)(ddOp`dMw;8#FNgou>Q6pZx
zb31uWm63dIh*VP2KW*ZQCE0{kSTyZfKQ#dR@SwrqApQhW1j&5tMK*Ek{uk-QfB=~$
zgQjmq1A#kPy;f_d7#+mF0c30{sD8!O7We#JAH4P<M^1g=^DHWV(5Lwo{_N9*&$5($
z-zQ(?Y$AA-Hx?P1Q;e((n27FZ@!e73!aJO=Qz_=ds)$)45^pXgU%)dXGX_qrW<)wx
zDXwx=C)R4eS(z4nxOV<JH;M$K74ZgMc|Z34RW5?zO0DiH$6@b6h8&b;@KtW>66WM(
zGbeiz6b2v=)quI%4jY~6wA|(d`Jh@`@hWeQ@`1GlQTU!j84&;huCKIOV&h!duGzmM
ze+HtPjpozlhPCheL<9Ko_H{ax@}%x}!)drvN>>Nz+u$O1GU%2u9i0zFdoCA=B!vqr
ze#s%zlqH<Qe?E7D3dz8{q)ky1(V2oe$6bz(=p#{l4B_+Wj(>)$#AZd_=$?2=XE(o1
zF<tC7>iK0QyYZO>kcqpn>%4d$)32!9UbN9%Z?4xYs?w=c`SA-dvX>eQe3>AU;?it@
zI@Q?VBQ4PqCgCG&+S9T@ZWV)!EibA5f*Tp+{W)kVVY{Vz0EWo7XpXdei~yG#iM2(w
zL|W$5&5Z(MyU?1=kvp6Wi<WdDc5@UDv)+^=BQOk?PwZD@@}{6v0+-bs?(U8qGu5s)
zv{P9^&x*bW>ZmDPNiM_czOeP<JGPLXljW!B71>s)Rt+Voxl?bUoHW768M3ye)ckFb
zjhBsa4SmNBFpm)3*Ikg4(k6LQ^{AYt&Le**U?LWufU8{viS4ZGdUWs#I}kANS+Ex*
zB!D*J0((E6GgG)Yo-YfrTknWzrbCE(blK<t@aXzi-0Y6$b%$NV47->O42gt0jL$OY
z@aAq6<2sYBoqbTx%qcg86j<4}dW9V@<YdmWgJtOoVXxH%KTCKoe&cz+j;`1f3wIV$
z6T4?S$DBgWz5ypJ3eVq)2gzM@etsBC&$OnWHam7&x4+=>GIDh4t_&u_JM%z|AQ8Tb
zt#xay9{p4U2;ZO8ofv`0YQNaI4rB$xyDBm`NhDKjaH`VDGJgrfWX;aP&Sdglb>51{
zDDC&@w9J1hng3KW|K3U_g$Yv`IXm+qIS{%I3f#D%n0ZF(j?o*lx7>?jK4SQpORW=4
zAL6Q`Xq$YiR3^^_7nWDu3pQwI&M+#~aayJ{-36EEic6@pPfed%;Xn~(FiJweL;$m}
zLfZr)?I4!`I>|gS7kEi^m;&13a|66EN(Cg=&5M=+r(+Ni$5x9rO?_8}&-aK*`4i~5
zl0EraxKe_(VJ}tumExPxYjem_1QgdNGiTQ2oS;=%IIs-g#l}4#e^mF=^6yKedNPPa
zSn%_piG+K|Ig~L|O_izHt|&Tm=Tk~Zk$BFndEe{+M6Dxkn!JVDEvmzojfYbG&uh*n
z7$uQxJQ)I=D|!JTC{BukWhu&i<oph8As6ookA?Pt(mxvXiC@zw-loLLUMj=V4cKss
zWJ0h`u#$^Nri#I$i<Kj4U8WRXG}}X~8&#^fRIu8}T{AWy%PW+DxA2O_Lccj^)()B4
z7EeTAx{;tk)V^YL(_)1}y%+bkxZ$)};q1|C)uefA>IPp<#{_q}WElez0Rh9rz&-Iz
z3`N<+N&-4N@KCMGPvVyJ#9%0v4Ugq4vTo>Yf%*w8^rTLx50R)wee5J#g~yacBeXx>
zAM1ZkQX{3}w?<=W4I}wkM8Au~yuZZHX12XPOV)RJI{d1Q*D5PBA0D|?)_UM~t!Q@P
z5{tr&r7acSr~+CsM?#qS+%gZt#%G;rK9tdUrG0$YiEX34yilgwpN!du(@w%BTpwXs
zlnP}U36uDk`voLQ2L&o=vH*P$ASmxiiMq=QXRKVDmB8nMrKj{OV5z$xZs9Z^Q2ntr
zO_2*^)K8ua2X<}~eJBRT_Q!sr=~h_1lN9e#esV=I0I_goG@9~NngeKBpM0@#d~lgu
z5m#-94DJ5Od^*WFjmHJaEUTlca3dFpROZA{A5#@!oSeCnF4>B<XexJ~-ts$+;yC(9
zOn2G8r>kbx)Pk`bBi{qbLR>u6Xgwn5T)5y>YT~2%Qnw<FCC!C3qx?h8+pgXT9=anN
zPO_P64s{i=7v1w18Qosk1VoDE?{h(ETyuT}CdKlTLW+VGi=u9Z|Hv;wz!g|={I#qM
znj|r*QL$V_8B#`Axl)t|^B~u1Cae+vp*1@dw+raDV9777RmN_Al}`mTMXC(4yV+9d
z6`{z&h9`xeDUn};&6_e}1(Zlh1je-nO!qLkee}j-iycvD+wMU_kNMKW>BDxji%G@E
zR}H7iS(L#j;IJM8xKL<^;vcHN`h^5Xurrzg1HCV56CCRkQwQsaR#<8CcfxP1nBOF!
zz=1&Ntpy{KYYFk34zsH(B%WCV@(jc^pBQnOJW9Hh386V45FT&Y^=3;Ohil`Tu_Y^>
zbBgYC6V;%Q?Ln#uTzRyD6<*OmWe9(x+(zut$6Z)MFggUNr*2v${)y&<<iYUik6-4h
zNsrA3EC^A|AE-;f6J;eK{KH0HVHA{l$7L!B*LzASqg2_pM}a-s*ex7+_6-_4$@M~5
zv~wCI?&hEItRG4?0cb)|&1tux+(i)$=A7aN-9^4s{GLxF0;UA2$S}Q1`i`PFzn6*Q
zT1tK*Hv(U28o}}tpN<J*Lu6y03kS}VQ99}gTO?yMK~N%|n%$ffMTSXsLsZYDaMEll
zY-r7V1rAV^^L_M{Mns`GPS<&JQ2%}KHszdg-Q<)!)C11eA9KEKZAW89N#Yho3|x}A
zIv?*8K-zAfv`!4w085utD*UJJ>vr=(lR{PG+GldWThW?sO3JuVwhEp{x7n@%egQX4
zBl-qWGHc+h4Ey|Rm@BtH{Pp65P!jTwZ!eby>LTr$q3R`#wI-_6NNa)Nvd<vTB{=RK
z;W(nHvx)2s%xsOM74+Sa@u#5Tx-VzI&c(bIa`Ng~+UF`AlGTpQw@L;8s*M3XkqN{|
zgS_D+1P;3%_+kkIKWiyU(d>t~ytQsby*rZkDSaAZ<lIUV{d_)_0*;U-FHSjF-wWF>
zXCzSu2%`dF6sXcQq?kvKFEKS)V!~`HA=HtEayeAE7uq{?mT+93%%QAhrM$)qhzcHb
zW{}Y3OGyy87=V!q;}$Gz`A>+TwVMOP<X<lEukRJ(Wwt^cy&gQn?>~xOAnRy89kM`c
zOVo<xL|jolc}PVzhX_+UxD0FCip38bR?Mw1h!n7#a=1%OfgR4=XI>J+kiaz11vLg`
zV`-&H5a%2%fEF)^u@K1{HWM%y>l8`EJZyt`Dfbn?n(0(fH6OWZ33imV8rOtKh87pq
z8inmR{a8Z__z7x9aah-;mmsP_%3=Eyj;Y=pfDr;K&j}usN+-}sh0^S3GP`RmY4MVL
z-k$4F5m+fGHot`zfzIb{v_|orsNAD*^f2+%$@nwl<HZ_Vd(-^3VB9G-_hMVP9%v73
z7IC>{a!wifjL;V@eeh}eL`6%4_45wu;XvY96VDh`%zJ~J8r6{Bf~+G&QyPZ$-Ib8b
zn`Ah5u|48OPcO4~HXFh&SM{W>l@`cboH`wUD*>MLO*Xq*fe<*$$BcnQ#W=3hWGM9M
zJ~LrB_f!i<5Fa9ZH#-wldq=7qaKeXx!DHv}L$pzb<TeFxw$L#hoDt7ct+tnIRb63j
zBzXu>3hV!T+AE?8d(uDe(A8?36~n`kLO=z7*dKrNC$g<h2hJP<lNI3yTn^2ml39cd
zg@`;Km~+MaU(E0D-=lZ(vsJG*71)YPSr-799%d+qW;%cLqE<Uf-esfti0>F)#AQ#U
zi~>K@6qo><I?~>r$cqRdLy5y$=|aRM=xm*v3xuszAD5f!9o!6}3ucUB6i;%)D(~tI
zm#?mBIeYmT<?T8hPFVjiPZ;hpqm!*+_RkzJT;`PJA}(ZZ=T=;qgMwg|W@*_{1vrcg
zF<$zEqPjd3TBXCGwA9v@9e%hY4<oWsCd*85(1g?mVU&!*EkQEEsY?d};_}u;=KNL+
zZ0W3cFHP5iMyhA_Nk^%(gnyt#sU%3UmtN*v{gCZg{j3M^f-xE`#1SG9{}z*v8Ttmf
z^HlbSoDCeG!J3j`8L%o7T7`L!vh2SuJ;{(C4&TYlP`5Q3O`N^(D^4qT-ulXXrIQVw
zcdNi9$j|03SdK?|1|-{D?7LLP{e@IUryyUYEO_<qTqqjlNE574GIaXtg}h8>hu0S7
zy?4ikKNgDSgeo8x{@~lNCH5&*&w(oDp>5RMSnNI9<EbNW<gLo*9)_;*s7QyGG0v@e
zL@*_WwbN1dRzN`2lWWr{$Jph-Qnfmy6i0DYIT_DZAnA|G&v%WSqK#N>o4{qMaz~N7
z6dylxU{0kVMY8gwT{^2Xa^f!<v8eYJYKPA!iks-3rAQeyqwH>T4m*C%O60Vbz<~ow
zD4Y{L!ReaOfo%PDb%LriY9Nc%LW<=`V)F^pXQ~o`0GP1xY0w~Er_TU+r+Wf<in$e#
za?Dwn4AJijw;t3`Hh$9d?}jfukSJU>k-Q%B>vhjlA@)IQzxI3IR7{k`L9t@=0n=n=
zRv(<*P2?e70g&U?Q`U+&eIv=H@fD0>gJ7f^Uv^wZb0;77@`PN#-jLm!u@?<t*tav4
zIH)PZ@h>5D_{7p+`H`X*nC_tN6@<hq#Oq_g^^*zAKD~4>aCA&G*KMcCtk{m;MXl&g
zg0Obq*b9c#_TTl>bl}Cso5oBNG%1ug=hHETASaNND5ZuGPPjjVDNK1JI<vfK+7bJk
zn+`uXr1)gB8XDEW*BAH%8DD95D7?#JmyaSKQX!dwC>H#ZSHQB*q_E72M20foVok^j
z?@1Ar?qgL_l+iRzs}qh*oviL&Ebu4)IJloxMYPI%7iX`8Td+^kD$5>^H5)3p;>Gw{
zhK;vZb)c)f$#AIgqm(kY%V}lNn{hUC8m4yA%)u#7*UpfvT?~2StW#7XC<%gxe1_@z
z<P;at3f%emiFuN^Q3Gfe*LiWXv02-!;Ft}NI*I14C5#dBi^WGO76L3HyYwvP9#RhO
zmnl?$7nvAZOO~rlXr#y2=FAtH2TMno722E>kFb^s9+!aRT{yet67$uQ4m|?zzAre|
z7x1#yMn<p|I}!~9g_h@IWLPhbqyD#$9Y4|J?&y?6R`rP1(3N_{^xFBODjSmH;Ll4_
zwWIB5>oY!2qP6{fqs44Ikzc#}IO6R>NF=lxggL=s#(Cl}&L><T%g=9(q1z*F-aX9C
zfD41qmX5(hD(59*F3yO0PiAC2l<2v&2douy+YG_udI&=xS4x$lUq<XAw4In9LOLfZ
zF2wv$EDuQ}Yi~}fI)KO};Br0{#L4kh45sJ-^W;tmOD++z2wg?$v9KXR4WPHGvDpk5
zHl)R{lQ=s6FfxyT8}DOQQ>8YZGbyg}P7Vrhdbm16FhN3F)*Bq&t<^3BB{G!Km$<vX
z=<w?uc^$b&R=KHgLzR|+eRJ(CT?zB^f>D-+C{=L}H(1op>5bT2<TZCF6H?AkirjFz
zwnH`G>Wg`J<ZpF~tqwg|iXtM}M+#zG)5%MA!=aH(yb3Ya@mwa&Uo(f+qFkOtzg)7>
zstI<8oHFgLh9qCSFk_F}{CtD(7f%lMb|Xsv^6?ghLL%$5xhru-Ipv_mkl9AVX%uhX
zViC#(K}>_$y1mun&bYa6y~<@he)r%7Hw#0FEWA8y?S636VhMj_rlwZ=IeJM_?9YZT
zI^q52+RrinPydx)=J^*)r9YGLk-Tym_2ftx&z+@L)D)zdVR|`J%dW~H>f8%?Ax+tD
z&Ej;<_Fo;G98*)08w081VDIBw+}YjTZ?`+&?EkrQu-7mm2?y2oHz80^upmCx=4#0J
z*hhb<y}x_5e~vFL{mi}svHr|X9>(KWwVTM(%%>u^ipSt=6HOgu<Aa<hhVr3cio^o4
zGZ#_dESr&ulDRS4>dZU5@@_+X3<a3wAX^wMegz$H>#{Q`2p3P|&0WczoWAGX9=2-V
zK3t-KpE>EH`ZI}rt{EMsP~vIr*b)zS2~~$mT>jzCH*KmNLFFh8$O%2Wqfefj1J|@j
zB)6t6lDhx#nR^1GqqNKWp6|OSFz@L=d_ptI`eNGfUp+->Ok2e@|ACWt)GV$;=C?i6
zp2{ILBK9S;Zjx!s=(jB?3N9&e)QJ3uGkGVbtKBledOfV9UB_-q^ou*FTJ^I;+o+n2
zmrS3fYGAqN56|mM-ZIoMUU!4gf-_##d5;hr97*C6lMvCiHE-FqZg|VcF`E_3xHe2R
z3&S<Wr0Cayn32otovrWtfORG#we-^~+-XC>8y;xV@J?p;;ApSi)Xgs^-`|D#Q$(iu
z;FK>|o6=OD&Nyxw<E0nj&fhsZ)>qA6;)6ZdInsD1M83gusxa5n@pf`sY-h=6dwXMZ
z>&es4KL6s&^^MJKJm110T?fg18inLhrMU2EC$s7c{`9tmGL#d4LtOFvI$fX{P~D|g
zkGZc|qeFb%Hs>uVF|&|&iYVoK!h!ie>d`iMwR;*6q6X=#z4~Uqg0qSyfVXU1K8sAW
zNcgTA7OIBHJ#u*}>|wQOigTB^PNoukMs}2XYk9!ielU^Ej-YTZM0}Bz?`leEJmwt_
z-?==)YY0`ls2pnvVZ3=o^G{sstwR@2$L7;1hq_xyZ-I-|ZFKIpN2`myP(yI;4Uu*8
zFyS{~e10NPX)PpZ$(#}3*f7;51!0O|H({n;?Y0A#u*Ry&0#z-YjS%dmJl9@G_NR!}
z*+xw&%!!d7lJQ%nedMtQAp<<VRW8X4^2qD~$!y+;^x{1b3^~fpxCKuzdM4Q!-A5%X
z$B-BTa;Lp)hO|{#fWqlR-oEknim0LQSLo%u)Sy7p<+5t!)#(09HO;IDa=|~^+$2>l
zPzT%U+lWlPg{3?;`Z%1}<|1*Fwc|bfD|)Uo7IvvoYQNQ$;@Z}9Dg<0%Y+3W)8_b^l
z+59g)I*Rx9S{f3;or=gn+-L0EM4}5k{s5vt;O7`D;8OCS)O>WE&!{jtIU8_HxW%yv
z!{pdxlCo!tU7@LGi&!%nGTTs~DbR<FkT9&5Ht0Rp49RJ&Fk~!E{E}Lhc_ifn{UOjw
zT(l4Nj~t6i$IaX9Z8kCMlQi?`RSUmbZD9aLALo<7tOe~x<e$zuzJUS9jI$Y8&OvB*
zMOKKnfrmu<Kj_axtOQHQ@sVxQw|C9*1@aF)5ueCDsUR4y=RGf?>V+3UcBfH#`rHy5
z$Yw{77CP7SUJw;v1Mn?!-qdsx{Vs+{aV^;ygelR>k-;Z=DhF)=DxcLK91?oCnr~DD
zW(V*_6ud3LQB7DO5kxfC7=OxDaQ;Vs9xU6lU2>wgSTPxtnxZLxfJ+&%fwz(d3NcC?
z%Z6dt^3-Td4T-_mC}oKpj(&!hj-ZIv{HMK#OoR1LPY9UUWRgX!U)5^C$L)2A?bMQA
z(AwP@zCbaOR5>$WoH>W*!|3OczDOH{zJbkwZ^Vjrg6yA9Hxp`!Fs+6Mmj^$B2o{8-
zzg19I32VaeyGSteV<@^*EAH3sBesEFljlfx0M#&aC7rmSaWa{RUxV{Nk%OF13&(3S
zil-BmmkKKlTAmx#A$DoLpV_lLI%z^V?V4BCtGCzmD)e3Jx+g|I#C-Nhse@<B95mBu
zJ{8zde;^wEmcS!{qN-FifdkUak)3KypF|W!qnH~}$q7gv0jzlva>7;ZNZ_YWo2L__
zR~aFB&NbA%^g3#Z_x6fM3o8=fhoZ8aoW$Ld8nH$)<>+~@hK;R7>BrW4M(WKD9djKD
zge^la6Z`T_K0rJDbI6ALw6Ut(ut&B$s`=+?3`mbP)0MiW3;BWEqNt*)TI%T`oqbdk
zd0kSC8X7Y$3_KBDhGbr{INO<#gz1c&FVjH`N$F120nYU$QPy;(u^2rf)wLyg0lZeN
z6+t@cjIrAJ>r_gf0+g=+x*18xEt$0uk=$&Vfru@-eX`;ebK{gUiPyvIhyewd9AqG3
zbwI9W?2|6?M#cGLyH`F=nA}zcu}Y?KmU~D7358!c2eCJqm;kIUaRJteh}KrI9p%Wq
zpY!n?kLSov03l$MHa|qgVe^@dbs;LHbWo8`JP)SvM-u$4MX;5Cthd4=A3-Ga3MSc1
z&W}yuWaBI^+$ve7R+j<cXxO+<sA?E&T0#XdGD+0Reh_<uAqrg>PLnI&JhN%2hM?!1
z6RAT)aF;is=(!cb{PqlcYZ~#{^!|cVnw=<IK7LyNX88IueyYCeQga1w1#-%(Y=&c+
zR*xb6bs<~yQQjAHO*0YNy8u!^t-l9Ht@h5*VKu)qcRAYMJP|tPo^*<2G^BMY`q{`X
zi^uh7dIjW~wZ)JRE|IUFcJwhtRxcMWu$`v;ZoW=^kzKF%{JkH#$mr-1|JkaBmE(wN
z8Ch(V<=CQ>xBszbI+{VEOmM@uWF41eS>Fg^!>QdlFgUesn9*3%NUioK?-z-qCua_n
zNhDKxMVlZ)D1)&Xo;DbGSZaEmgVW!9>y?zdn`ESc8Lo2iV(#VM_vYhfaZT69lTjFi
zZZ7;#kZlRKkLOqEtn>gb*>)YY+TR*B&wT92FyV3QYqN+ShIY2q`N6zX4aBBj9HH&l
z1HEI>?P52XUgfPbbLf1~H^1ym%`4UTYM+cg|K-Bb1vZlFJ?|uUSDD3|ZzJjlYnK(2
zBvB~j_ifsD(sxE|TlOa3e1AK~laZK>>_cHg$EQd3j=W>Y7SAgdAXga(-=b@S@=h=>
zHee}mpddo@WFM9G{0ZalbwU5rei!N%oh&TQ&$*~4ZBQ;7pp^_S^bJS;6cp{Y5fF`T
zHr88eF@ySK?zZT)I+<idBjDmAwtzY@IaIk=V|(OA)BL|L3|&%HkG0L_ySl4C?yNs%
zmJQo}cNeX(LQ9aPih;%n9CnSQ1nRZ=gp_sZpfm%}xAsw_DCY!sE0$EkPb(L$t0-Wg
zccVZJ#1DnDmV}eSW>Wx`tZN16ccbBZm!#?)nO$eQhTD)p9-ton^!3iSJDt}jNBh6D
znxoBD_-c_yyNFTCIHQYP7gBW0RxGmh;76J0QJQ-s0GFJUM?Ol63VrcO8Cbnk&1M(e
z*M@nD48+P(Vd1e9!ydfN+d1JB2eZqMc6sbgBcI9Svg+zc+iuH?Ps%clToxX8W>L*r
z&eAcjBr-mXB5KyLPy9OQr<Aot?upGGQJ#duO!{x+C-N#A*^iDmA#5!sLaCXgd*~?@
zX`u;QiH`-yl3Ct{FvV7Ewi{3rB>`gODZU&xs{pacVRHZ+_7&!^(goY1C1U0&30LNI
z)-OMqmi=+=UWHV_nS<`@J6!ofKNlx{E+I^4Lmw>UMd|6D|1`oQ3A?S-b2ze%9Le@M
zjw@4~GQz04k%I`eLTBmKodSi(#DJ+F;?yCoAYQ~_?G{@41MRQ4_%iRXgl)|ul09T0
zPJ?~2>p3blrL}8lbewj1yDLbfPN|DR$wn3<?4m#o&-~pIH2N<(N!F1^{Jl_&lSu*3
zLT{cC?xF75ggqt6bjr|c-Jf)F8y5VaVF3Yt>58=+WfxtxDMPCQLbY~Li=v;R6>Vf?
zJ6gHA?oXRpzS4+Rv_)JV-NpEc%i26YJ?XrA_iiQnrLowQJ?cH0D7V|s%1t(#P19WM
z`>@cfa&`+>Sxj;+G%t&%oD1Wk5|pLnu>n2Sl`v!@#&`ElcE8y_>+GH!zdU#)tD22(
za<Vk?T8m?)OA)QQ(p+<$7g;FNR?$+sJLT+BQfuJwW}Y3au0^sd+f*6A(7c}XC079M
z3bBE~K35PT5&cCtMD!QrLJ<Xb&5V&BiLH5v9T}%X(6;==Ob;?}KX`N*T+`<reXhgL
z`7}Gr0S<C>eu|jl(QHzWMr^M4k5kosIK@_aglwMn5Qas^SG;$}9OP2M7;<V9y=j}e
zI8v=7I!}|)!whRylZj_|$93KM#vHFMO_hLmQUL|>mX*G5dlp)`Y~?~-71PM<7S<=h
z`JiF3v{7o2)PmhoFSHp#I0zT1qxVQ<SY7t!s-c>f^C?`|1Y>gNqGUNpc7zm>GNmX@
zzd86AnsKQiD@SO(qVYEeD+*lnN!$+QsZ*wiiKE3Y^|xx$^qp1NXv_OvtL>}Vk>_ve
z^l1_UwNF9AZz<wyl0k`bt$d>W`iR<(seQ8Fpi+}7lUHYMxN~~I9T8x}9=Q~A$yzY_
zhv9Z+1fNqv1jU_@6;+ZN7FinH=MJX`;K;-Wf={!Z8H1<7-|}Uy$wj-&oGL~y8^SxH
z>0R=PhMzte@}eN1LCy8pVul+^aEbyx`>D3c0%Kw`a#67akMv4RS7O~*^#v9YvaDK-
zQe}-6*|+uQS2eA`JWo%rsxgeK4BGMr=<IZ^s29-g=<!eIqQfi_6b7|}Uq-m15`jjz
zN%;gOZVu?doGW0POHlac#nK9K_ZtwE*Lx!IbkX~4KmYKR5GL$O$$9D~%_*bUlH-3H
zk$P0-B8q;F2<<g0#q7Q3e+a<iAijwIi1hcv{znbGMuHwb+@6t+^E0o3<PKc(-TQiQ
ziU=1paLhi3uz?BRy{~~c3aYiV7i3Akrw58pwX}hWd!niVO5olZ45rxgejCg_61k(?
zQOJ>Y12=Fm0t#AY4$#9k8hDZCMu|q)=^GN|yt``yP5ZhuB3oKV14J~O=RH=`W(hqY
zt2K!sJRIu}jDU$58{vU&cy^a`d?Sjr`P5{ZGJ<2BBQt=AdXtpU*Kdrv&rHX#LKfa@
zXtne5?BwW~3b=n@gcHcveE0Q9`}`TWU-JqR;%=OtoSi>=`o-t`>rH$A?0DyB{~1l&
zLMx{`?e=#kXM4|*$)uy}#G<)^v6Hc!{Fx*zd6i2U=@>++Y`{YFZghY$(80X`dBC(_
zp+;k>Feok5EnGVx36&?4oQ`*9J>IDs-nnq019!(}?NI38CL47L86J=GYVz|K%qruz
zT_TGVToMOdlV%)+K5A$q!bf=mb|#ZltaFZi2=7WMT8vK=ub+Rr<-?a4q~;Ih7jy~f
zk;Qd9@<AG=DM6S=-KzGwY_g<58Lb4EFt2C}rol!e`{2UIx-QxWseN|OW7=<g;49iJ
z)UKKOpH`#QUuw1I5f{sS{CHc60IW_mhxrvt%(&(u^k2BDs$(G2S~leDxZ*_f!)?Vc
zUbK>NahpzC8(%#AVr%Q)u7}Ukab4{xM!M(*Gu!nlSDWK8`|CV)<0Iq>o+g`*e91VS
zg=nJ!aYRqvN=1OalK^DC)nnggPBcJ#wnSUMWYUT;H#{jy?-N>)?(X^7Vf3%jN!R-D
z#jZTI_x{vn(Jq@cgNAs+NIUyQzuVyV$YI*uzWpof)cOEq3gEJwrDWnO0U4V?59Pq8
z{<g{REhI1kaEVQE$jf_tVTq^j`-D{z{YF9U>E$J$)7;Kx>i~g^U`_`{_AFmBtSy!u
zbBy4hYJ_G*CD1td;9Ssw3LOmWk(C*CKNI_+z)$4?(yoA87R|`pt=hauEDNnO1|XOA
z;N=z!6{bcF2@f_C@-!7$h-7Sv&rF$G&20Kb9fNJ9@?tu}Ou@q+%c%VNIUEPzfz=0f
zNH|1+>z3V+r8Wo@Aove**?WQe!Z*zZOi+Ij;5iJM?xqP?OJjPGXR>TcAS-H-hj*QI
zkt{CX2?$duADE(B3k49X)qsFUl-W-KG;nH|xaT;|J?%o?R6K8vK|%)_92`J_Ci4l~
z^<+M%bKc~s7ypNx>J0i_b{0{MTzdR?5!n5Cbi{>mu`bW;ARj-Luzr_D%b1PQ=`}5|
z;)TK4V25F5_SRj0Xk;ggO5_#M;ZHmq>&i>zm78@=xkZ4{h_dq(y^ZOc5!x)qIw?#r
zkxS76efk5?w#4Rk;LoZnZL+h(^s%`K>#ppVl7eH?-5P{2F%-X&xjaIjbJB5UA(iq9
z6gh7LAGdyNgcu-qppaVA=qxwcmDCuiUh|y;THrHVrri+IfaQ3ybMG90Va^&{fyj-Z
zAt?3(MqwJJ!p1k6=0ncTZeG`qJ$~%K6J3Xi$BbQUPoSD_HvL|QZAoH|tqZrL?Q!nq
z69#Jkx&QVwC9ep<_}DlhC#kcirW;h&$Rz?*pVk@6D*DStM01|9hJeC$J6=bf?aP@o
zwP%bHlu*^1m|<eW+DHN=>wi|9S>*5?n<+dA5jryuJKD@7TN8dC^?hgJq6<pCFe5|s
zjoLfyXGK?1KiJMe2f%}!*ZVtr`)6%M&@^*dy3>Vz1HHy_a@GT>G$2=&Crim}hO~N#
z2fQ|uAvbsj<n!4Tm02>Q*P!4vz+&wjG@_j`0`w+XU$Xie(Tj92&0$mh){G;4Cl$_6
zL5AB+1iLwjixfzchTU#E0iiU4XDfe-Po`JfW+mWp`BS_<zS$<Mpp~d;oenH5ydhCQ
zaYRjLXVc^oPC_D(OE%?jFd<5}O^r-SzDM%$<H$9?2*wNSEq#ZAIlz>9$9d(~E%Pd!
zt1>}N)QYqv9HOpV?&@53c|Mb@8`h3sLmPxAFK2}^Rd}gLg21T?r4>$%J{`oMyCDaS
zBauoR6ogK8ZnRmWw3(&)9Xwdj-_kjGE$+EZk#Mtg*qPW%o=*cWy7$&j&i4=NzIn87
z^e~c|?K2dD#bP!DEjGc83B201<a7ckm-b~8maS`>$a2%-8($~s6>zluu&E#Dnps<z
z&-hJv0MAn+K88=uaEYIw%_*;x1}8~&V+-Q%`azIakSM?oQ0%H`2!=Ts#_)dD4_zN$
zb`XD^7Bsh&DKS>-me&dSKA#OI9wH*%<5+|lMaEJrEmzM&jkRI4cFu!oM2FO$BW}yW
z4rLXg(_qRJG)~4Sv+T3n3^hO+EYhJ@k1`>A9LVU~hS6P3Cw;@w)Ns>ao7R)9jn8QT
z9zVv^x2W0P{1Q*<179@669_Wu?EeXx_5NAs<owX6c4sH&C%Y$y&w{rRFN5ve4X^Uf
zme>(pBno?(5uTWD%^BpWAVIVC8C{*7?n0swo37b$7qnClS-!fIj8=~XJFJ8q69}vj
zSFPs%0;n6855m<J{?m41Dyd;TE){O2C_`&KaOs3<3z`FIl8iY_Q&yIMKSdFFb716g
zqDwB&g0#hf2oFXb8M>M!@@7NR5eSn^>^w%6Zcv)-yda@NVxh7T!*$s-GY7U^-qeqR
z-5g`?>WF3|h$e5TTs~ey_LECobUTo6JM|UjD9H#q5|#3rrB_o03E)$ok{vKjDtHJK
z4o87u+HP|a{|J5Z@#7uVnPAYjrHT!?Vug<xx6G9s+vd0nc#vo2of7LPH6o#`o+c&h
zA9XLyA$W~CuDbe7>dMi<`4JyL(g8M<**ay>8pmxkI1CT*Y7Hum{=%G<jR=uJjcE5#
zBRZbrSMRRA?T%}uL^=bJw_@&i)d~|!rF;U?#1pO-$<-2oML@}3uU%PeVil6>r5#2-
zC-83zRnJ-Fl<&ye8=3_}V`<29o`{*DP|<|Eh;}={s*oVVs0E(T;Y%HJNlvX#mNaJ1
z&wauJM}m_(Gi^w)J2dHh5nfJfsFIc1oTxm)nAznQ>+2iPI9l?8lt>1jNvB+di~i)=
zTlA-QDgzstLv{%Bm=iu6B(isrN^r2Z&{`v;J#&IViF1NIU6;77z*5G65DL&n65;1k
z2Z4(>0!Ndw8M*lk;TL9{llhSMgGK8{mr3y=I6gy;kcW-dO#tm$GrWj6<(P2SNKWRV
zXnhjyKl3+A=e?oiJC(Pn4v*0_3>g_&7K(AxHyc^JINH!%!`y(#*P%uUhPuO_>i{UQ
z;jryG+-JI6?=nQL?HXqYr-TWrF*7y@<6>HZAvBEAL+hqXK!Kx{k&Qdkat;o<ZCy*k
zaO?gGlfu1_O<(?|VXpaj!Kd$^`3R_*g5SELkKOZ~<MV@W|J*s+`BUfMcyIqto%4gE
z{mysh@00I39j91W+%~K*g$_+o5+tXT`@t2`Ey0pu>Ea}FxoOsKoOmd7OzB2(>#<dV
zCjezz3pS6TZ87_s8F|apl+QTi$E>Q9QnIuxTy6rmbqdlk8b=18<acJeW+X`cC<W?p
z&7p}qYFwjCL2QaT#liKd32-kmppAe5U-3Py+uD=lNr9Q<a>VE+p`GTO^6FK4^`Ivu
z&edx?Mb(m_U;4{@M1rDRfmp#vX2|-SYh#X}Nz=}j$8ROvQ$wg2{DB7t=DZ_+bJ7yo
z_bf=J<EMmrV|3d7b%Vs@SvH$f$ma@`7a(M!6_P4aCzHx>Y-Rc$v6w3xDR3scml*~V
zFs~6`p_j}_G`%CoH+4x_3R`f|GR2-!vHRTna4AZH1X5y+0Ys<=vu>HKp;`!CKp|kF
z`I>(z5@mllryM??mkLyE&h?=@E=ZLFuBPn6qQs4i7hQ|CUb$pLBU_C70klCPMG3&&
zzj;w7D-7k*QBJCz$B!U(pTG~sOs{<e;BDB4_*A7nvM+F&QiY~5TboUvsrM2jydj9B
zEIGSGH~1L;OYR}Yn)p?Fh>50h4{<d)E*F9c25<)p;=P4k<sYjezg@vA^l`h$KkVu0
zPrsR*38Gfp8Rz3WLx6<>VMG0<u%Y45Mj!&~7V!d8WG3q&-i%60dnS=eG--iyMQy0}
z(eR)mNFNltFGLxVF+EKN!D(ugpv)h8Z$&}}=*zCN9P{nM3Kvj)*;H_^=(+87ZSbn7
zGuGwp>0-f*L9NliZuNy*B=6YS0<?CJxdw*D^S|bmx6T2}0=QYWLX+F7Zl0EGXBe;a
zC40qtj0InPgnu>ks@rupyQgnpkS9q1?~!js-r~yFip^~+klAne=-1B3LCUL{E=wP>
zPdT<%tLojCzU+laYKFX}1TQj@3f(NMB?I8UFCW>djfI1mpy+jl@g{43<|Era6zpA~
z&Ffl@6!P-I_?>-8!2pho&^|J29t;(+&~qvF9T>+Pjxg}m9me2d_nQ(tz}%F3;o&jJ
z=;`EX0Lq=JbVTz{hjEXScRGbLx`autcn+iT$V1~qxbK+He8e{U2iiCuL{<<*k{0jV
zRm<l~39DklNV^C))Q7MfYh_qzGsKN~cqQ=F7xp^SsE-~%70uY+8sJHMdi49C7U9ZX
zemf?-IoIDSg3OWntpwn&Y49b(d7(KcBv~O2aKJ^>=*!Nw_7kd1{1X2}c3{|+e&I|E
z7a1d>42fNC%XzT-WME?!L9^&}MIbA;ZGM|FQuF$R4?L-V#1ap2hAIRHmrrRs3b3}q
z!^<#|!sQ*-hh2#?7G!71$k3^nEm?SwRDO@W?o1}Wj~E<kcq!o81AQJr6PN`4Nm*6)
zm)}^MePUkOBJ&KDo#K*Y8=b3c*1>Pz9$bOx>1U5tbq3mXcTpPYRs<1W5;hHIS3Q2b
zBf)&p^Xj>H{1^h4_2ssG#E_4(gna~drq(57*h^cc&?0DZ$1QV_LVAlu?7NXg$9%ot
zMjLg;8#XgYNWN&^{GknV@)MDaH`n?`dpN&RBu@NU>W)6@BL(AG2PnJb1qD3<jN;nq
z{!v|C)Z8UN9eR;=c1V6J0_ccXPCvX{;wReGB&|G44dH~o2m*DvvaYt2ydLxH0_k63
zEcRZ&9XkZz33_dR8V-<Ljg5w86tzK8T+@;3!s+sHJTQj`1yY%PeNBlK8aQWnwkz$x
zm6ILmDM1IpF!tl`A>$BC%ttqpQhU1;+5h<Q*?b)B*>NDAf#U6uugbiFRNo=`f1BdJ
z4KDxydJ$DglX^ikG&iC%seDMqBiNO~Ib%5Lk_mUO&`OTvqcEyjI&R&iI2>D)>&&he
zTS=S^-F6zFgbaEeuHVRMG2Z&<qG(QxH_#e`rSn#ez9TtpCNU0f>y|e!Z{Np{_q0$+
z+vwzG&I~>C*{s*e@IYKWpF|r^xqfXyMcZ(PTY+iBR$rl3PKE=96`?>Dv8CYHzVTy5
zqHd+ZwW|_B_&P^uMz1il0DVzwa#oO~fa<?Z8j&~W<{>s<QH`Jed_*Q{^IR{z%jKkU
zrc<%7@{kS*sGkQ$i!YO7CSjdX{LS#XToSVzO_Do^07bNhMApew#}LMRH11%Ix^<Xd
z$kQREiVK{>JSem8Cqq=NGlvo9A)`T>TMJFcwD&yPh`xD2Lm7hg4Wy&HwuWeQn&(66
zX8Vta?~JsQ52>L>lnsWdUu?8N2BF{rnb$e)<<t<CAz#x-SoIYG6~+ci?j!;@+tmeO
z<iIc1|64SlWy9=85$$+2<nEVG{~LB4RbDoK|Emn)oY=%sLU?ZA0&cE-f*Sw?&G5}(
zDtinUT2$?eSYm^#Hp3Tpll14P7RmSwIe}mP$cFR+vPOYDEyg?7EH`5f`&(u#+`%?F
z|3~H#J{>6AFr9<Z+AFU}Ci`&4$SO*TN|zKRMiw<AE=03uZwCQBK)6m!n+1uw1xmug
zcTA!R2@A8x?O&cD>X)+7Se(KGdz)trsqh?oZ}&BTghz=MyWyBs+ws1c(V{B_3!*l}
zLNbwQ*iDMbp{tnrW1?u&5e*=aNNYG6oJEbdLAbZYlP&u~9Ryq~LpOj!Fg^FMILy3l
ztT)!z*PGF6b_S3Wp@^<P7g{o&zGPb>BQ30R$Yx6^Oo~6HTu;8Ck-Dr=;!F4t;fLW5
z`f9CacqyH(hsdSyb*fseP4PbtLj~a}0iqS5so1Oy%EssfEmSsZ&s@mR7l=*7Tw5pk
zAW-Z)4cSFf4$=;%Wq86Z8?Wzt-A39`%w8L>Kplngnn6veUVtrYDZrSODJWv8Amnpb
zX^m@hB2nnh0*HY!0Zh9PXzD($T~+<XLngbB0_r?_Lj)_xSYmm-?tv6+Z*R}C$>K~K
zT}Wje(^W$PTdK#=x!=oK5+m%zv{qYu-$(Y|Jv<P=e6O-4Fwfqrba>}wE^#m(I0O4+
zZO(qdfvM78vlkW7F6=U<)8S+C@YoKsiE2Y*BdRei>LZ-n9YB8Lop>vblL5(^G5THS
z$xus>*~e)zvbx?~$|c&(p{)aNaPe1(;iR<yb79re7U{ESdbW&JV%Sx0&Y)(TL@s*V
z;yAJY%`XY9A!=2Fjxwj2IV+_&#uYjHN=S`HhMwjK#IoU@nZ^I`YAn6PUp$NJ9lJ)I
zOZ-*d1f*}a?_c^R8O|v<M45yGjU<g8@lNB_8Fj=3m|k)W44^=atV+@AnBHyH0%U8*
zMsQY_L3jhF8rw%*G`1mP>aL-YVOGj1?GGsj!0X06n>Z6fzD#a%ayA_7?VHiQhVPZ~
zd>o8T1T7@r1{meg#z4usLMsvR&Z-+1Bx{%*k53cW?syPudPFQ;v24I4R&W8~NhwyB
z0nt&sn<fX(IGDhNVbQ_4FffdW!oJd^@TS$DRRqc+cu7E`!O1+{L1;~e0{fDdjj85b
z4+r33du;imO9_#6(A43I;C*te&x>m@hmRz>z(>aN^B>4VkxjAvX6ZyWgAl;j#b;IY
zj<{*Uos`LK5+01?l5yPvzTpK3kKP(CAC2y8L$&@O_{k}QgF$Kecw7htnH2#lle7F^
zfHQaTP*+LHqjBs=B5|)Xx1})=<b>;smyprP2HzthWR%a+@8vzJN{-KQpBcK0G-x#>
zme8ZZ5joX6n8U~xj)Wb-Ol0@6#i?US)SWwIfA%<%uNujST7yX}xp;zY60oq9zs>Bq
zpUm0&anUUes9QB}+$mZE3M`)yjalpLB8fD_xh}zB9yXLs)ooC!j6ir7O)qB=*4(i~
zjDRPC$tFG@B<9e-Mzj1~YI6zVkZg{I>}Z<7$prS9x7lQ(bA_livUG^0bO6%F(Xv1$
zc6OpTMia41IF<`C4E<@x%=AGA;ywidGYq!I30OZoCrKm@0+Z68yUocRGIE=<g8sS6
zy8?CQ87|c%Ul%RZ!D@0N@-&^9-KJpa+$E!7SBt>1xtP(J3R)pJd2KTSY5_x>BsI|?
zo7j{K7DTMIk%dqaJ}Y(skP+yE*38^DyeiS#GC_<e8(N{w6W{<{WV3Z81{Uai!fy>F
zq#^n?qG%0gg0W6mBvzOX-lYq`8>kVY@^<kK&lyh^+t3A1kizF&%$#I=f#wEmp~Vj8
zsuPryMK!R6M6Kj1F&@Fv$;<?XxC;mYOCTe*I&dg-_%$x{l1z)h?^ajwjNGAeo><Ud
zZ|^wK0&+bqG?^hNvMQ0>N-JdAgAFnqqy-O0xYXdo<&iZN6llNu%=?k#L7ET8AzZPL
zk2@J~Fs%6-TzwvO-P`;|FVAN{Q=3GWt<hbFxL8YK#s#TQpggyr(a|71dQ~FV)*CkL
zjo3WD$%$bS5l+{QU{TeYC4)7;r~xN!LIfFPGn@YFLmw&%2zH3Kab&B=fYrDiJ22j0
zJ~`fpai%9;)ja8&z?UqYCBw3oedzv|OfMk4NRmL9<Ggsngq+#X1TorXvnlv5vgQ9q
zL_<8Jl4Q6HPR}$CkhBgS3|5%l^q7Vt7)n*u9(>#01+7@y(kGdnld;4Gltp8(7#wdf
zSut_R;ECM0S1|iP4qkI7J4s&Owxh7CmN^Zxj<trgHaa&2$UnBv`Q;><eg?Dz3Zo-l
z&^v=bMQbjrbTX+o!XpKovKlxYhFB4{JmtP2nK``vSLOhRyL;gj=KCEgV#Eise}&Ix
z|H>6$1t@n;b0Xwu<>PRWhKF5)zF9i8g9iDuu4v4@RMDWFm9Q;bu52r0Bz}8d?!Xo0
zD<Zgl%RAHjS?oD6EHrbl1R~OT^f18_09blR=?6HJkW5VkG@)7%ku5JAEB~B^%Y-b%
zbU95^%0;p4*SfpqSmV${m>IHEGbyRMW<(X1n5?qPFe_gn1eVzB#J-^>Q5lEIZ3>Wn
z6c7M<r7H*{<S13(U|E`wUi`3d8LL?c!zKnIt<i_W6j@JXleTT}&wMiAs&<QHK@+Ef
zppM9w(I^bvm(dyva$hT)36XQ0afso-xDx}C@CG><pPalu$i;>(!!)z_0FeSRVxd)A
zlmr*fDW4P<Zc=psrDDb-p>m1vKqOp;RCWg4bVV~{S@7BwQeZf?%A4uYQUV|#3W}hD
zyHu=&+ygR8WMj^b82HTvg0_m1W5TX!MlT@x#;|1)pf#8~pG3BWJW?PhjD=`uiM(%x
z>9<A<H3x3zmEy|S5lL^iJMfp<+e-29o9aAw>^zhIbm3WePdhuJI*jr`cA05WH*Wn%
zuL1Fea%J_Y4n4)~hEJhUVCV3X*?K7N81)Lc8t*7noN6aY*m&IqM)MRw<e<}35ijAM
z7>lt)fJCT#hg-cyi4;8*!zC=a01KNn9UEPsaKFGVV-cuYDEQn0Nwi#(eoc4c5?2c=
zB(dIHpT}ycP#KpAb6?>&dEOOEl79wcr^1&ulZg<@S5Zf!3xcX9PKHs$0>|!ED#)ix
zgaX1uW^Q45v`wB|y32JHyeM>zU3Ven6uTW=h^d*)!k=}_(UX^OIz=KAP!Ku~y->Mp
zYZ9d_^*p+mNM?l^v913@v;!VIo0Xq*d>-7%##}>&p73n>x&p{g5))~hjW1JkG!0_d
zYGUbktjPWK<s}bq89muna}5C2Ylmu{EK6V0RD#WDjaLkX7Apjmuy~Z185nzsON#OP
zI#nT+P69nomaiUJiI#A^fTLn@Y{x^xke`DKm^2lOL(>V~5orIWd8@0VrBVeXa@;9%
zDA^3?9rKEBLhxU9F?T9ejX0hGxoA}M@1dq}CyoVn2DE*r;+_yGJh;<jXter)TbaAa
z)uB{47%RZ}>$e22`>E$L@gEN@5HIF4iAH8|!y<ZBXk}z&EP#FAzy3EvRjU%A3Ojs*
z3m)3nXkzWgSE<Z7=)t}r%5|5h{>;*%uXO7^?@D<Iact7N_miUKtP3Z4Gbm1N!!+p-
z7xM_`2aJ77uAHr8-14|0Ddw3g*GzbdILo}zPAtZc<wZ3Pg$OTF)WPG&`|l)9^fG7$
zcWaffocDuu(pxSa8`hk0UMGZ0vS;20hsoBG@OnhX(0ktUztx+M>-rXoo>YHNq93mp
zuES1xec!iU<rUY(K)d{{v;FpY)mxNeUfD;6C$*tG;cQ$ri@y$+jqB(xc)`9ky1VbK
z7unSxDZQxlR`0L(z11G)x0gc%W0dCb^4=b{5#yvmyj~BB``&tG_UUzLWHj^Duh==%
z5>2H!EH>_W>v&$h%H#R+Rj#!&vmcYGH9@%;2ODke_|^T#%)K^f+VTEH&Eggvm<(UI
zQxma$J6c_>d15>Lra+r*(~=RA=a8YJi|=c!Ea2*I<<DqUrBPUzW4=lSum;oQa@N{h
z-&~J3Hd}mS)w~H2Wm}3Xn4binMU6+W6&uzB{dzn4=@)ZBjhuA<w&+k*%nr1=VLI&q
z6?`CIvjWGNQ}*U%{wb{CFG&(mdsjZ?Vjx)`fl1by&9=K<YGk1?#~$_*xTeerUHB^N
zWnvaTOQ!A+0_?=g(B`N5fg<wQOugvOD0n7kg{0DP)C4t_%p5Jz$5F%eQ<&de_zVo6
zFZ4L{f|Mxm1*a|nlSN&7WV*9&jpB$v^}*>X!jChXcI$#X;qo^J%g%l|3JuYc4cuZ?
z$kyWGDJ(GAI*lQUhi6Z$u-4m`^nhP^jZjC}tcHV?WuI?&10bAF&sHJcmBXZ%L9Ana
zLepLSXy&q4ge;ygHBAugPVV~|W2qsrkWiG_=W65!h*-_Y?E-NGULbs0+tbuvmMJD$
z2>eNBAwaEVq?(Sr=D_?OMTZ$7Wu`Y-dK;*M$b2x|#r=o`{X;_n5Y8D-Q}Tm*xMhHv
zDg1Z`By^%@taeW!EKZBSFHZc^Gd4|=TL|n;a$ONN2SEzRx7cHGmHu9g*s^}~2{Oya
zGt*K4x**>n5?b@PX`|$)Yk2az;-dMk1s6ZW)q@EhLqQd_2@1jE5fsQIpHEo#m1Ceq
zSz$Fhudw-lJs(Y|$`7L5HSmI*3idH0gpo8zP6+yBE1eDTGQs5x(iw|&oK`)T5@$#Q
zAU%Z~5)vWPACy|@(4W!oeiyl3NyLMIi|Y30YK5Q9C16wokh<Nu7rVm*iWM5J#(lC4
zcR;M2Bn#mrnT{tYS+hp@JZ9Q}o<k{Nkn;-)$q);-jE(}6)xZp3xoJlFshLYMjuCeT
zewCnZNrm@DBvT+T+KfKPwRsERk|hLFd~uphQc&3vZR)eF&P1Q^2V?Ed+{ZkhZ0p|C
z=Xqb=LTN(ag_0NwBDGrfscsNPMB7#-idWLMb_J<R_md0~yN_W8ftK9x`MiA(DGY|L
zL3J&#Bm_v%I(0QK&BmpwUkY07Y?^u>*Muz&WF#E8HWX7kd(oOXpX#2`R$qm!R=C*$
zO)?EzUbJvu%Z6czabA0sh)O|ltZNb^x;2n%b7uK>=hGrr2=#{42Ln{;luawP3vUkC
zn?i{BzmxV;4k4gKlcoF0{QurCzk(RH6>n_BMi}F*)#86T_6@dvE;PhBDdtEqylX&3
zO^79uG>d$Tl&%pJPa>%V3lWBX79>U6;(TH#DpU-+Nqv}px-2m=HWqDYv7r$zn@>l|
zrTs*D(}hdJXW6mq3}H2UM@F$T$)cZ(aA`lf9i0&-)>p-hW2gAv=f5WjRQj^;kU4?P
z6TkR4mD1IoE!V~-s_%|EN2r&z*D-U|d3kWS-;FM+suV22)&0EVJ>0R~uBiG!>|QC&
zPC8@$1{KU^MU8EK5h25h5C&GY;!<NNVeStb%_mRSo9l5eoh8l9m0FEq56x?E&|S{Q
zeQ{T3<F$9&GIw>F;p8?k63PpsW|Jhlw$f}}<~b#|t~8?6pMEja6={SBz{)RH7Uyc^
z`{-HZziAt0Gq#!PZ)Hl>R?I`FiDv%kCDWDq;-gyCdhI7OQdCiUviS?YKu-hqCO0!?
z_RO09=9Tv*KU^o`n9Zl-=$%r*!DY1Af0FY!l&BG1bgx`@yGy{2-4b*CX^tTCQ{*{q
z4kkYvaK?t*MC^Wb!&T{9+UxE|)gXUF1_)xjM(*TKupQcdDej@VojelXdXxhkEL?N;
z%-BVwk$?@<G6dyvuqiQ2Bkr+k2n(Qt&7z>wqDd7@?ev*3cD*I-YJ?=^$O&w)rs7oW
zHmT-LF=^vmja&GRis!h?kf$8DI<j0)QZDJ-k)jKf&e<~m940-MirX{d<E_&vz*-Ou
zP6l%|=-Vhs=uq%_KqcW2Ib=`3ZJ1w{Vo&sC*7qz=9QAM<W;3tG#O^_BcTX$!5v;ro
zG#<=36%65%HsD<RP10w25&iZ{V%os=_vAG2Da;zP1Zueeb<-#<FH6>er$=N2D8pSB
zfJ#5Bowiolgdj7KhGifNelzy3%J;CgIA@2XOIv3q<0T44jne`a<vgQjP-H_olOu@2
zD<!j+#q}69xXkQNhS_YJ*@(^k<*&iFAmDbK{lP*LWFE!Ct9F>Ftl)jdwP<}}gfGEp
zc5t)^zL8ep75r|A3gd3UXyE`56nBqQPObw$nQvnFPA(BJF-R%-3im*fgIw|zEUfi{
zc*{EWyO~uKX@N27LMcGMEST<H)vMj=NgH0I$<BfMgm|Sx%^;{iohZb$)L-XZtv)>;
zLoi|hVwTWC1mZqjqZ+MLhNHXlYXA7W-88gmsInWa$!yl6SbX6<LHe`u91Aoy5*yPA
zaoDqUlyWP|ZmFjCU3`-y?A^niH+%cs2S*v`M)hh-2+$wG{@0~D!vXUVB%jIFawU5G
z+;-|qlc%m#yfx!1TGknMg^WmdHI^JjqnXn+>wY`)Y0Wn&lu5ynXGnnbqBxBtBm|bQ
z5><#TgK5)q3rH0s&BaPM1pdABIV<=LOP~aYLDMEJN^#Q&RVWKNG2ytQ>H$<fE7ux?
zPdmjm#qM{YIp?svTxA|xeFQg2oKNH4d>j)HFiuqU+?p*A%lk3EAJhAFv%;-QbMQA2
zi`JUcUqZOr{U)<YuKwzi?+Ba~uRoRrHSa&}Mq!GAdgD04p&2wRO@`D+x`jY%`n33a
zO0}>=hr}*(bt=J`e1?dJ@&c&2A66yYbB$M4(SF2UC?Rz!gYMW(m#4X7CS=KE-I5_t
zqYt`hOrDXmylFAqs>s_?lEr)T(d9i0v4lhViCDnYgAJ<@9H4BK4XKvfjHylQtc2f@
z8nRT3pu3_RqjwPi-WMMwPSzd%oaxnc)*O&;3o(h_W*nr3nMj782xU?bm^L{BP9O*7
z?7SP<-m`*?ks0Z9=5o-apc%;?o*A^1XA7g?#iz)#ZANfmQ#k+3mj3X7J$Ut<aHi(l
z$$ScA;zDA%?_8lKNCVbeE2=fu<-r20<}I;nc2H|x(dq^RfQhbcSEx>*7$h^3MMDi5
z4v*V~-jGa1HR8(FW=;d3Fvestjy4dy(Ip2aqy=sUDPd-q(JrRgP8bFYaSnC<(nUq4
z@`LTy<y6xdN&Uk}vshHBaOMaO<0C1Xg5GWcuhSzvAK-I@6L}XN?gE#s05M(;c|d-@
zHhbJ3989{)Y5SAqkpGvW?b<&UZC_Lqx5Wfk|H^q@or}LfxEJ?R?)PhttWk~%RLrhj
zl?odZ^hwB@AZyHdXY`&I^RY*Ka!Oml8)xDWLB93qchQA;*4;xWMsaO!=)ko&Jg6G7
z{1_;iHYu09ppX`H&GKn&koM+RSB%+81rI1)6k7Z^n@mzy4bat+gca;ETI0jLiI|)w
z%vdm9{ifAI*;Gw)=db)O3O^zuiCBLu5F-v~2%la+bTEj3erqHv&_LszD2~Z8A0cam
z<KA#UwxX_?AbzIm0f|K-FQNF12~mVyIZZ7$x;l`E?>w5_rU_>N3oMqayu^-fH8YrT
z*txPsG=|n%`|AAUoBiYGjp!@bfM4vi_W|woyskMVBHnT^Aj=@~H7ev0*l+DeT=TWx
zfPP>Wg!yf4^}C}EeQ>oN{oB7qtK+;wwXRni<p<G|&cX3Hs(T)GOqb*h5SyVjTNZWu
zi}m&O)mr`c+~LLV!*cnM&j-(a<kwmBqDn`1VFIhOB_q3{y1K168!jwNm8QwRp9zRa
zJyNH!qS2cFPrLee*wrO8Ns%5Mr_10$V%TeVbGDc7eU5ec!_7u>>$B!YS$H>;T*(-4
z7}|0U6a?n+8Hoye59<h@TFOBl&OIh~;2xb0M9@wrdiE?@?R3CDI-OO7$VAbj2eS}7
zjjE>=oCM?WILUU@m7KwN6kRqYLEN%~?t3`FvZa>US+dNv3q8^NRW3rq2zQHPfAW5-
zu5~ah0hW$&KaW(&wEB_%B)N_9Zc!zi`50_h6xNeW(^^;A0n}>q_je~}-?UG6cK1b7
zUf=@I>`>FK;*NT69Jb<OZPZ51J2V`|B0>)W;K>F|AEk5!wgK7z<QjqoC=ILI>e@^l
z;mkD2mr_Ml0KzCfbxg)iH*7MD*N6o+qBJ9?w^*+jLS-y5_*!Z+y0~TGNNm}aCf%A8
z&gIjBuyDE2n7-6)Mmx6lZaC{DkerhCnhlz@7lcwq0o{n1mANbw5FS-1a@%*!b@w5N
z6-@+CUqrQ9s1}YEx+;rb*q`biD?AcrCw*?`vwgmEzTY|BIe*=yj3&qVc`|%4f*gDl
zDJ=CIxf%m5H=@f5FW(RrYNOA;nGU08kuT}Yr^DaVZM@tzH|4QrG4HVxZ|#eQy*NzA
zSLV}kv{i4CNqcRzwQ9~TsuRK8dd4j^3t&gD@!#&XM&w_qH&J(0+OVg0A?K`{kyU;z
zJfi<Aj7dd;_YR3Hk?C}ljguh>O>d45{sg3p8TfNyH?hQ_4f5I|2YI%P9YnfapCO&&
zpx8ObE{c4KGY}+eHac;d4%3^2PJv5X5>yiQD7fTS(~61g`1okj0KOxn#lj*f!4|85
zZWY_WY$6;lGk2JvuI9Ko%3w6jFK1$+kLR4&WSWjScC1BMp&2|tR3ujKDs)iGwA$II
zGtNV>G5Vtc1ifhG;ZwQ7FH}ybyJs2FGan^pg_oMxmX|OP%(I3|SzOsL3smDqD2$NS
zq#|x*!K4MP-^Hz%|F16*#QTCq`a2a<B*Ej;g^*Sp@|DLNJ4J1b6jh8jGhw*sHJMY{
zwHP`}2)e_FZx>92j*if$=1m5;v0^qKWI0h1*;QCpX<1o}ER(ed2(4c>Hx~@fwv`SR
zu7l4$;u)#46fq`oGB6jA-^wdcU~aA`Xq~lP2L6Z=K98$qj)_!XA*H3+LxXoa#RdZS
zj23|{)^ex_HVxI4xg-B#Qe+IA%~KB^CI#dLw}i`p)|#fl?8=DNl*Psyolym`9Hf2d
z%D?ojH6T2%6d&zIENl(&A}f;gwz3_qtT#8C>njah4W^+mH!nzD{;9^H^(#0J@d{Rt
z-k__n1>@@EHi^e(E!-U`D1w_zTJBc=c7V&j{mE|Mmn2~S;=Rps;y#7zLfXU&gW%Kh
z$j<bNdW+wPN{M3$ZHs%;w{&3#|NZSxnBZSlzPIlaG3fB33ND3DE@e~=_o8wuJRdNu
z@EOas@Lb5a_@Q6?t|6HS4}v!M0fg#*uV#=>xS%iQ<Nu`f?D=0_vYh`LTQ?iH+co#Q
z<}B#SJ6-F6bA>&*{wjxU*s~wU)Ys|k#gvdE4)*qoT5aD|Z*p>iH3Uz{Gws3z{g(}^
z=c97$in7<hwrb=9U>Yiw5l&}4dY>3QB0E|}YDr)!kBLdg0p-P_v0l$c!$%wSnsPYQ
z7Nzh}W>2++Wi(>pvQ@0<(wS%cm8%89LF6x%MFRVEyq$Qhx*ASVC5ym@qn?p0fn)r^
zE{BP2qvP6G(lo(jn!R4_7W}fqbx%4J+8#Iry-Y<Cb0>?fOD?iR-D(1arc0RLQ0?Ve
zs!}!YNk}2*-j_3|5twfjEsCHaO_2TNt_`*tO-AO-gETqJ8qwQ%4{h)%Xb5X0dja4M
zcN*TOI<IC?8`T8Bt1dT(paiMX#+`V<_53F^c6uBZ055k_(r*sNE*OMQR0O4wErzsq
zP9CqAJR2iz6Q^f6qa)mvJ}fey|0S{?0{fMJT3OC%(mdRB!l5ZvrKa_nr4pg<zQG%6
zfH1l#;g`HTJ2{H3uKQDzT&)H%*oH|B7){gY0Z+$iN-u~q?9Z_)JfyMHwc6R6<0zTT
z;wy@gqg?Ud{SH?Yt2?@AHk;qqYP&~!hV$!JR=!u|E!r2og3-Ad-sW@;lVNH&8zmGN
zQmTK%z;!6Lm(oM~Q@d!|kK#MJ%t)H?Bx<FzzF|(Y*4y+BdT&9u`$j>I;>)6a7&#%g
z*Tiwkjx%DMSCcFAR?A(DQHY{xE;msF<L4+ce@3xksmauka}?)`pYz_vi}dxhf1N{A
z>O~h^JtywnJ$v7q-{03${OoM5H{TfsIe;RVQylV&>7$u`*DH-D2ey85;C}&Es;EHb
zGni)c)(_wgy>U@&#Za&DBbmM3Xs*ZW^0$%gvcXllsh9eO;ceQ72h$P#ZT@`swkLr)
zdI1qHsP~cDD}w~P#{Qg|O*X}^f3Hz%S3TR>#Au6oY&t^UOpKzTcank<oG2fN2L*c3
zLB(*-Dz%#XO9=gW1Qe8QN>o=PB)R3e^ltU`iq^UwEhDn5u>7F8eDe&GyW1&cHPP;w
z-~9T`Gru7aXglhO{RZ83KlO<vm(46rivOHB(y9nF3lWn_%CO0n?ef?B^hwnuFJ$^+
zd9isn0<PABkz_pZn8k+bl<~mefc8M6tQaxOQ-B}g3yDM(McS}P2JA24Ga~x!Pexce
zINEu&FQVypYLzOv3zxM+AKw<ySNgCWHCwQ|wPtzCBPD(&F{1sp6|ME_6+KzR0)p3O
ziBrzuMR%JdQ&TjP;+o)_vSNf%Q)m#QELnHY_OiQhZtk4DvfbqE;CHpghn5~uq441U
zQo|mj%w6XLks{&+F@nn)`Kjcd2KR6wLuENdT+g}ErV)&&mfH9x9dmqj*i9-8&H~?H
zG3VL>14(r~PC9LvRVlb`Er*nh5qJWz5J*-2z)FK54*|!_OJOvxZHhhvep5jWG7{Dg
zd9PVp?6F^;%ZQ&S(q-!?Smf>nj^I`8q7w5`eX2j4qa;>AsPT8fcPI+o7Q|yoJUX&y
zEzz5Uum<BsAdYt&u1ja01tlY7re)~#H07ra;fA>@=S)j<Fms*m!STU)r@ec2aC+Xg
z>D2F8LxQJ~uX*s)_S?L$3JIAEfbqhmjxh}cNvV$TPdE#%8<I?3TqEZYwpClUUJ+6_
zN+0;qiK@r!9jDq>HyQH%)_7xs^4@+?h>6gvE@MU>kP<nh$Zo`0E23n$+K(Q%HpiBJ
zW4dqj&z&KsJ^<^OE15}pm_!oj7kT=+*xTX@==>ye153;=UCJ?(8GS`7LBZ*&f<Hv%
z3+8&BA=|KdoAxGkYtVMqYl;pbuYt#jCPoX&EncqG=`{1y=}&-wyfa&6WcPT(=F?;|
zK8uY!Ks@(G%%PIh%55vAmk(&_^@IVo*@SMEfV}8t&=R~AbUEq2rN-I5VMgG&KNQ&r
ze1Cp}E}G}3Gr&tE?2)}FNiF3R2KYUO2#%QFwCuc7t&7$p`X}aDLSa#dXhxO%=wnO^
z_9KN=XJt;|tO~cGrb17-s*eRp5Cj95W$eOu8o3lbV%;1&oN6>%u<2Juv_NPV1YbL4
zp0VhsM_2Sj96a%h=kCzm>0xYDz0!^BgeWqCe1g;D6(H+0pabT0wqqp540w*HT&lJh
za(s%C<P6J<GKR}hDrU0A7OOp($rywgNPpDgfegZAhI+Rm_q1lCiIdIxs1q+Pjm}r2
z<cECv-29u3&A+XxiD1bf@QTISzpduRM)UD@)V=2$Tb+%K%7(i^JDU$^XLCtAlu_F?
z#EE?`B-Hhw`{H<pqE0iz;D*T+hjx~B9ofdhMe;zO!=?ex&rIVhdH;E&pNKwYCcN?w
zw0gR;8IDtmxze<2cWG?bX>tRLC*|h_sCZIba{|*6;R=uEqsg7(^;)bnkN@y-l-%Um
zfYNSIWlx8Tgs^L5C72$xuM+|>$$C@XvDBg@@beL$hw>Gt9g+i=Q&G)_n*LZ^4<PMc
zWcS#VNC2ZEypf!XY&BEx+qM>F@Q~;ztA-Ct;=;k0?fU=p$Sg32xyAle{sK|WvhqY<
zV0u}?I7TG#Wi}KDTO7zF>>1#sO=U-`MRZZ_teH$sn0&eb*(k2apbjmBjG31EAbRKT
zcF8WyVu#@eqsffJpE=2hGr)N;BoCh6ogT1cCD|UTohcTgL^zu%e%PF9TwH1s@E<=u
zJvg<lWH++MkExKMmB)NJ?n8~lm{8#=8l<J+svp?YBcAM7nu)a;#k-uP$b69!Ahc?1
z%H(5ZlyEY%BQcs~3oNOVOwJI>4+W4SRn?v;+z|3aA3vU^SLr+D>5m`NxvE>6KZ67r
zx7YcvXU{g8PX%NqEK_X*k<4Or4o`M>4m*4Mr~Aiy`^UQn`|WOZ{_`3M1!fW^31tP4
z@gXd&ZbQ=!NCx~>s~{{>Uhe423_P)<Wx!7a{$ok;^TjMXaTI&SZ1KL$%tTC}R5H41
z5@rI1w@Z#};)}8qBmF2~t>lt?`j&EFXVdHo<p&eqg{AGq61a9LbnQFu4;2;XGl(Pt
zr3_DUQJ7dSNQ_`=Env5wO#qmN`EZuOG8MirGP1%{2P~0fB6-ei#rKI;O|Ohdm3fcm
z?fvI4&+n%=gdcsNp;5cF%wkw!EnH?Pbf9#}%=6B*4XK$Pe6UBZ(D!T;D*AfDFex~R
zp4ESyr*qhv4C4aY6R7HzK!;Ukrs72;&I?je!Qz0tNM0T5X&aH|17iwhf;Xc#gv<qh
z7auK7Ql$cQ1>9m;GL$0)=zc@0EgTd9Fx{kbwlEr{snlogL1}_$AsB!z0u!LjuKQA6
z1|u+&AXiBipU?7fK0*+ua|hBEUKlcu)f`m>MkqQDly*a806!eaX!o6cf--11W`IIS
zQ?7xmGb1V=AujBmz7fpfk=Y&)ljeHLj1jd=FB+va2egosf|yUIDTf=|0;h#}b2s65
zaIT5C`B{V&$M&bu0LNgIj}4<(GacDjUmx)`bF(h8Xg~<&_jNwaegv50kSiCH^0Mt5
zl{(ENUnAa%4jM{woy@7o_6P<{?=eF=^FDe_cpc{oa6LveF(K7U$hiohMt_{$0t8>0
zC<Tq*po9Pc4dqis*~tob4PWF4FI2omTo|t_mr!(2;EtN-mSQ#jj?I48z<-mz(27i9
zcpIW>usL>cWiZ#AH_BpV!sW8n5*TcIHG+c)6!Q4-3-Ij6MiJUkq9c>tyf*?I16jft
zsX@lXm6nw5dh_91z~hN+l3Ls~>y?e?hOp7>*WBb3Q$^%QmX15=x7VnVImontj#D{n
zYV6F6B_CBZWTb>Ui>qWNq6iwBkIe}@$iyTyn<j8Y^DKOmqF%B&{`xWl`zWF=dk7!m
z8sx5qGNZp>hRtG9sbL{`9ELF$AV(}`pJvgJF5b2@Xf%*(<o*rlQ87~G{r=n>ApJYM
za+*$oXf3{V`mS$iEGCqU$1DP4Te~T!rZyvAwX2yG>*>t$&AH!WwxRog#fZXIbhW?<
z0W*utN+K;|DnSgF2@cRg4$rSWk`qItqeub9GQ^w^mg6ua<V-_X&a_ID_Uu3YkN<CK
z*>5cR|NdX29Vt=n6Z(RgpyAbAS322P$I_tQI-M1mST>JuMtq$r=NuWGZ!{m-Zoo+Z
z?ADESe0(!{7HzKkXBo^N>20c0UNk(56Yu5uq#4n3KA&oEK!+Npu!^!bkCJ!P0qCm}
zrdn<X^gs!6^nnpj!(n<P?57bM{|(dqlMY5*0%YKIj;Museip5rBE_ye&;F{`qkmoU
zl<BS4JxQno5H~FY6SaAb9)C(b$09Twy=+MpcpAngEx~uCsb71FFKtmL=+Di%>Gj4_
z^V_V7S&*l0LFnutcZyk9N-i3(XJvwJfSVxigop=UEWDYsWFQOi8sNPoEHKlcCJIea
zbnJ;@n0+Qg&qZs7LBGY`f_sMmlIX+}<V~|08%@IoUS{v$PfCm+n9Ya@v~fPL$=3Fm
zX@RK3?OYyLet8+=$=W8G16-!aUTAAqOE#P1cif_BcIRIRGs`{-3CY5NMsPynuhqKi
zDJ-RVw6Pu0VG-@0AA0-<3xDR=1}(k_JzTMTkYorbPYDR5VYeWLv9+$V-*AP}B@AlQ
z9GCMc0A4_$zwv11$Q}y>)on}jAd+<u^cK}b*9OgNJJ#CC&r6Hu(a#&3!IP!!zpZVx
z<jH5zljdghAOF+;Y$n^1-Q&l?37)#`o#-KIM+56Byov9q&b^rkBllokAeS{uGrS29
zKcghj8E~8Su7N*x?@SZ5rqrf9U$nS!r4%ct(%8f4f9hr*R06m}ScEp*)L<69y$^=C
z-ues^veEqPbGx(6vsJT5&zSXjYM%e1xn=ijOn`qI>qYQch+ES<A8ngS-dOi%Ihdra
z?dUt+V|I%clk6?XbzyprIkl4Z>!!ztWRuFCHK)WE-c4FRoDtE6%mYmt=E7?a<Yb1n
z0ZwH1*NA5TGPG{vZPT_q_eI5X=&~(df-XabOx%8Ev#WXj*%mF*vyJsy&24c1Nu+F<
zKXLT1QH?pYIqRw70!zn*6jj1=<RYXetvnK$6_`kNuHmr%ttqS_LpkX?Zc$9ZzQs&p
z{zk;stN<sP936R9vSiN7#w{aVK!j$lC{>u%+7p`OK0I)fqfxR;LYA7D^}H&;EO!co
zc171lFp4KSEMD>4gF{eC-D*aMDX<^RSzmgd^iU`m0(7t3+&c(E&%Ie)f;9@h-3{h(
z+iaDEPBbD0lt($Cj5#zLq)nHMNJhtjFM)Rl>18q>&dN=@J>^>TiXx{#sW)$%u`cc1
z)?y35q~_9*hO(03-Hhbw;6S$BwnV@gpS>aD7547RdPGw|UB^K9&`<<JvLw=&)~5i%
zR%zGyI7tm0K&8KAZINq^r;zbzul<pBgh>C`ZSo1AbR~DDD^^c6^g<uyJw##(h?bR-
z6T4jqeu)^dSyZDn6*DgM>^9We^Ut6Dx4OA?bw!!ZQias9LaP+e_^7d0DG7NTtUw!7
z8OK$QqaQ|gnj!DtFN1?&KMwB3$;j|WyCWO+sRh<iB^Lxr<TgsMoF)JtF&bC&bL25D
zD{cxLrqo@D<iDtyk-0(q9NCI3<QFIQ+zLc{e#etses&zS{3y6<^C{Q!0AGtK(nrjj
zKSyTzz2(T&H=HnJ;&brUj{S;l1AYP9#38wmNLmaUgS__iU-dMnw|9;1MSS(==ra_S
zSoZ{TR^D~aA*Rmo5~)i5Y9zxe?7r&}ht$h1^@Js@u|dii3D3t?#S2E4$su6HYp?T+
z97ZLsHl7;FcsgRk!Pff7Db=v)=!k$VnRE6su(pY-UQd(anoWL>^b>4H5-Xasc~K#t
zZ0zx5^8_)Fg3%@Ay<s-W#55!NE1p|WSwRB6wo2qFJ)jp1{cwX=l+gqt5egC%W#Y6X
z+8#lA`#IWp^}_sj-H_Do8@{3O@;^tLbZ<lN9K!Z%E<ES!o4CGaW2jifpRf^y?oHDx
z)6Nj&WR@ynTLF)|4oZNavumU{n|H?(;Li+a>E8xZZKseuUL(;Z<u2mD%)yx5WP>>~
zVFy(J-wqXDr$gFGV9YJsT&Wb`Dc}l4!^)T_%}Fc6hI{a=jTmzPSJK@?m`E|#1ORGo
z5A~#+G}|CO0^~}JSYel*yn6AkVX1hkLv@o6=cCkGN-4m>8Y~|_=7k_Hm;Z&M!-xvW
zA!JW9BQ|J!fv;fuavL!S-rTxL{i75*UqbVhzU$)@@tn-7MX)Lj2Dg=Jk__S?01nb1
z%x2^{Xxc*uElVTwf<l8(QA^F3;S!5q3I5iTlcQ)2JPyjG&<+)zQGG(_{-y}{H>Bl(
zVUCxVd^pU!LI|`wdh@|m>Q!p#gAh~YTS61$EGTHFSOMMWg(+<62qS<$c9<0-o?MV#
zaSh)S*}u`iOEQ}bX}uO(s9X{j&#3Hg0@qb9bzk~19h58&Ps~QMAS?E`gKHCv@{6$Z
z(HeF;#Csq=UgbF_IFpFRB&Vb<19;-HXKWLjUK71!NWPHLaU7fdAB;I#ds6k`g|VAG
zLcDbsI3LJ!8)ZMr2`|j9m$ADj^H?d96RVM;KVXHgrpXvKRwLQbayp5SKEBb~Sl0l&
zR4nymCwH`x7^PmRN~;2s6M>#KO_tRc_)MVefFt{c3_4h3GhQr+yi0(`5u6}T>XGe>
z{C4F$>nqm<jcvVNRw4`Juub0v$>pRM3A(hVdsD&Ym1CshO>?fRb751#1Ml+27ahG}
zJ;#3EikvGMG61n`$ov*`B&pQA3FY+jd~s=iPD)2s<U?8c4|U5)6CJM!uVE^JA{HC(
z3G1+v80^CNW+5w2=?GhRkEMegE*u`1;lI<wVF{B(eUi`E?>0o$MwF_B7c7TU?ds}|
zaffX5r-VKb)M6jv3X`Mz;wVK8Q^Ru#FTTykEVd#qJcO)ToZKMVHNExG;BG%MMNs{Z
zgd(d*6g&tIs72ut7}-gu$ctLisZ`GoIf91b<M8LO;lUDs>2ZXyT^u(t1U!*mWt1pN
zcE{6$z3A8?k{;-jj~^Qzq((a{H4Hv=5eOMHWt9xF0{7{Z6n(X!@>~%z&pI19kK14G
z92`b%)3ILuj!d1V*Hi_W&Q)NE&oGybph$-|A8VW^oDA#G>mNV9*a7@=bZ=_t<`*3T
ziLT%`^!@K_;I))`$+(`nky%K$;rKJMZjOxj*=I>Wb1aN#ReM5R@uQbNm;|XOhk#Q?
zoGKeoBvRX2e&zV|3zxxDtM@@JYI)I6{;~~4=C@_1mIueO|Mi`}CCSGwo)Sz8`_|nP
z4aQEout9e`V2SQtK=uT~M8*uvksQ!xx=M+q;ocG2<@8R1@-V{GfO(D72M|n&k1TCb
zH$6CmTlk)g8tIyK>YG={Uwlbn4VY5S%D8|?v7{gC9kNGyGZ4h%D#i_s-c5>>^PbPB
zLKepekgBY)FEG-=usI(i1z?(y4lc{8Xj)=L!s!f&dp@Qk2|7LpzE})X3JNkO7<KEw
zLXg>W<v5>Z{S?v}oJx*3DByKr_Zu4atHMSv5dS25o{Bvf*5$yIJyL_6qL+F#Dy_)J
z4mgmXM|VC7p9F_mLnNyjHdUpXxHv1OV)dIC>PrqJ88G;~RDL239hAf{Vu*xj4pVrP
z5lG>mXvlRkGqM(r+O*9xQh(1e%P=%tTF<l6>;{QM->*IL3TKDV14Z3}y#!b(Fa}pI
z1gjq3QGtqL*+c(UtKrU?o;3%1^~yzM<Q#+vS*E0`5CUqGHv=Tj@hpc%&V7e)%<g<l
z_E|57&=APy1pYU~L--j(rYP{&MoXS=ZV=i+kdMIiaoAd8qjHEBnMvkw%L-n^x&GY=
zLh$A@Bijk*@Lnhp7S(oZ;bQBzlWfp3m%Davd#_cqp7PuBRAmdKCu>1fqc<+Rd^zaq
zdfw4mE@AEAJx)a;!wg{E&F~fD$t@aLu97ia*cv-rIeiVCb25l&5O<{le&2?q*gEVr
z3aDE~xkez94Y}kI-n)`HsKQiR>g`p1+w5I6RM~i}D2g<C&-}T6yz}C4zw_p}{d(tY
zzhgf9%<SG&o~p6Tv(LRkj-6RD6e2+64ztRO#Y9)uL^?1)bzp$<&yO{&RcrM&VZ6vy
z7(pL_?Aqsih5EMigUawmOVU`qer-oV=N~_|=K=YH0}3+x>G9*GCjeJnfSqt*cv7j=
zLIG1X8RB0v#>}j9*fAXm_B@!6<r#@$v9HhUs%JAB%|A;gs2Byz2)R3=lEep^^;(gq
z+%OwTgm#VDfp*c?fUfZS9&!uKZpGAA<QW63wb^Wn=wQcSF4gGXo6=W2j2PT5uT)t4
z`BC&$9JG)X<}Ht|dA;LkZ|8i6&}M){_uHTRpTEc>M<;s>E@uQ2z5-a8{j<)ivy(Tc
z&t$Cyel}jV4VLwasB7nPMwza1$40q)&~z@$$Ri`L+{&5{{vN|$KKQUJHb~fWZcFGI
zop+SIODe!IxT=Ld${o}p+2Z;qZF<RQ)x($$L5-tU{g2gr3e?y0(^W~H7rdW>%!@j;
zc)Gx!;>boEnXN2|GY?=q)Z81W29^sK)ZCGXc`_+z)igOy4O1W|iDZ@<8MQwf%B?1%
z0JUcwC>-OW(;wz2A4=%ay(}5G-t<ft=5;Z?hfcIdj2+M2bsP*mH7oGKQ(Z$Ar+^9w
zn!~eRUY9QRLHp!z=ltO0xbyOG=T-aJN*t3)WacE9#M3;V>2Gr&oBv)yME56brB=mi
z88)a}-B?$quZaAaVO7k{cSAGS%8NsZA)=vo%loJ67W(mH5t|TKYctwsxy$As%Uq!t
z8QN#fh0Wv0o<@EbBs=;l(rwvuzHC&n1P>IYp>S9;iUeuEGTn#jYhKn$!r6@5cJu7F
zXgeB;22wN}i)*XEn})Bbx^A5t^ykk|Fn$%w2X0U3qI}-FnXO~Jf$>0bs=P|vVVbGT
z>&q>p{1aL+jjh{^b~%r&geO49rKYC329e;pMCY32k!Xxl&ZgDlQ$8U3LsNh_S^*Z|
z&~R7Y8jrX#xT>az453JGRZu-k4riY&o3Q$)+hyj5`TPnDrsvZ+i4#8MtJx=bWo?`<
zEFniV)@zRhgyqm#O)V|N5;_JnU7KA8IWE*G=;2>ALK@DF%c9z*EXMNYS^KEzeIK{7
z`l!alL|U6xj|JXT%+D9O4Cu0lI>Tz!Zbm0#&RWG2r4^F>bE!@(=pAXLP+b*#ub*Jo
zS$=tGvp&zWaYkK1G!d#aO4O)8KP=lg6cob;7<~h+WS-gDGwsq5a)Bo*VQ}6~DNCq@
z2PiKNpWINEM!6gM{U-O;rnhM1j&$9O0&WQMmvWH@iQ6HbdvbCVi$Bv5q12U4-x0`y
z`QFCX=h526<`>bwM(u-F-y9qs*8Lix$*5=e4Z)R@pVGAZ7t{nzy*44t+b$a3JE4gA
zHuX_O{i#+a<u0=ovwsaFA7^c=oy)8WOB<+GVM_zpISvzgsTQle3p%M<l}q@+DdtHG
zsAG-MBQw)1T9fjgY8Oj-Wd8IV9;RD75OU<&IV7NsYK}>rLV{g|7;%1Zd_b_>&szMF
z1rfqqPIi20#sU{eFTGA~G9;^*(RP;zpk2xr77-BBF&}$aF;l|dH)6u$$DYbV&hJSw
z&ib%wQ9RImVnjEY4=%K77K13jsP08!@%Czq-SBJQYCovD_$9T{tnH(jZN0Z0ov7QM
zfjIzJj`Wq<OFCns4`uuCv2i-2*#`gd-~V6HE(w|0Wm#Bacop8$+tKO+<<C`W6ShJo
z!EF_ni)gjX@>Zh-WtccmaO9BetZjZX@8SDqzFM!-;pn}ME1TQZqNPh)KR0rm^9L}a
zhV5v{c>o;>CJ`JZl!q0zin<Hl4Atoq!Lfv+L2SUnPUx9EHXfK`%aBL~4VztBq<Y{u
zammmW$S1x`NSEM^AlOHJluc!!Y3Z&Y4q+(He3UkU`AD?pom>GHkAMM5br(VR3~bR_
zE=HjARdb^-JH1x^-_KFo>UTerC{aWo_CJY!s{CK%-HMh!cF+GfDvET=wUB1()cgPV
zfBYY!KXaddc4W!6nousSbP?A5_InggZ1~EsZfB>u{Y8!U-szEJVJ|J-&hkmLM&GOG
zKYVs1k#UEBGll3+b)1z2jHT_1mR?8u|M&m(|M&m-KbwV>@lZI$l{1enI2!j}sCD$-
zA&~YjLnwWMioPt{L|uvFF>l)*$R`|^iCPi(O!S^rSg^QMupT=Eif;7>4p=cZepzrf
zMEm-p6>B>e!F+wNSGO5{mV}@^F4#+eBGnFFa+s-yH+48LR&d~o5X@|R?=R)dlC;6A
zXxsH2m*7$~bm`P8Jyx?e8`Y3v0zdOLEV#0qdn<GjY09lm=Mo$k@I;!0KP!ey$#ra&
z(eU)?oB|&GdNlG5na#b27aYpbk5snEQue~s+AlLkamHSJ4nu)_Y31}@dY4y6vjmIk
zqQj^#{eahNnb2;%ZnPH+Co=O16Ie`{6&z0@4-_^yA#{iF?SHG)F8HrXk^U;ruZC%B
zT>M}TsXFNemGL$Ckk|DUJufNaV!V?mJr@<>-Xt^H*Q#I=A*x?x(NQdk^%KPAK;ouj
zn}Akk*Br-pENf@Abt5X#Cr%{DVo`0EbQcL8;7BKWW%u+=L%cbSARLLGsW1w<!BCCP
z3WJv90eaE%?3FUlLjKeBNylz|C@{h-l1dy){S-|~miD4>1XPGkD5QMRA~ML>9l@uJ
z^GKlP1qaSE)|4Gp+yUP&wLo7D5|5X;pFBlj@1RYrom&V+BO3m!^pS03TzNb9vVxX$
zqXk>0DDw!R3`+<?ZbZBiPHDd~4aq`r0irdJHtPJs>NK^Qmt#DA)#0hR@-F2GmRT%i
zO2}0!5M~sAG@Irc#T&{c9Asgg&$bMXMZ7^=Szyoz?QOJ06{#k;^>KK&P)5`7z&*&+
zE_?*F1*G!bR#U2;BXA(cWL|hxt=C@6$MwHce^4}Wp)W5Cwf?=n4}|@N4q#8~YD!0n
z59z{enx+rw0%2XiHBhp{3elCfLW7xaG|4lHB3WRo%rez6C?}ysFCsIsjE0rfQ7;{^
zSwtM_mXR^Lg8nYW?HN~uScM$UvRT$tAQx^yteE5@iU#(0hHQGSiXOP{Ns}f`y(lE;
z$R1AsdZfe!-ff;*rFVsSIAiJk9()@}B85KWglS0(fghR(t1AV)h)?KDc#ZJ%TN~0=
za()N?AbI#ce@QRxC$L&(GaK)+;E7>_9I>?dc$5@Km*YT<t~<R6qJunh_5}2F5fKfV
zfTckqkqhw0(ODW)RX6V>T#NW^*ukckbGsx6LkOf>bq;l-|M>6!i!L1ZBzW{qd;d%f
zQg~3#;<BBZCXYC|*B4}C_OhW76@g7iA?OqvDHN;T;*$OWM=#a!upZ5Q0-ZtgHpIbi
znmxlvn%y=G<nZu&`fX%XMeB~E_Mh9GoxP)jW9w|^ky2Phi}$u~Pa3N`fNllNob9(y
z-kk03b2H-Lj`DoeDM-Ib20!?LVH&58^A@&7vg1x&i~HxNyE~^|6o7VYGVRZXYo})&
z^N9Js-8X0ZFAmPz9AR&V&&k5TJ~U05i3HCu3JDjWMT4k_v`rp-!+pl&R5!}T4r(&o
z{~U=YZ`gMg%r?y|Pjr`&<!)IAzqAFznEg$1Be~vbO%{spK)_DPoKK_x{z%)$@d|8^
zA?$2M6nJC!36gvn<Pl`J#4};{JUJZ6!Du5fb82P-kOH2C9#1zoNjg!7M-}bsv(5$|
zh_cZd8egw_JKR=0L-r1WC3M7;?`LLZyK1Mik*=^MYl(qGJ>>S{Sb#P<1^-+l9#4)b
z4R1zD%^*e0i}_LJRD``D1VVqC$)w60b&`w|8eEi`oi<6Ms|;Nze?hQRDyIiKMq^Zc
zYH5^OrbV7YXe*CV`79@M7b<2Wf>h*9%pd0=n+3$Ih=3_N=vqJ}yiby71TbL~{TL&S
z)DQz100`HxJh@to*hN5^xiTyih01C_M=uSBgY|yF8YsuH{0hVSVILf)?=|~{hQ6}d
zFZfNZROy!1>hluoCPtwD=l@BKOp6!L(D8y>S07{xl~p7k(ALqyF}`SuTKHMjkVdB7
zWJM-i&b|3MGlJ82@uxQQZAL{zsiA%EF!Z|h;XNuT%#~KQ2h2B#GLF8kGs6d_{p&mN
zSXQKua1?T>R6yB7sU;y8T2BEI2&YctB$-AL&1~3opct3(b*g2Ax*wZ_Z81%+B{|Mn
z7B&~MTjYDoU0m$%W!IAJNAR&lGZLkZU{~pAq_DI)b+PUJrjB#p22~2xc|dSG`u6xS
z%!8D(K>%mw^)#Os2>Bw1gtJzJvnhR|%v46aGBekQQBeY8?r~D<7nv))%t3x-+tz`k
zyNS_J6pm=EYt(j^Y1U<JCn{Zy%2{-3k}J5BeV6H^<38G5FjROwVuou0>`<6jvc$AJ
zc`5ap;*Qg)C}w5KtHz^kdbvlwC!b7Aj~_EB7{XW>YH{DF9zV|MrRDOm5*d!}sg2Mh
zeXr?b!DLcp<Kp0>G8D}Ws$tr+5G3s-1({c>ZRt-x?}T>cPEt^fS-<f=?;IU2l#3<C
z^I@~qlOir^vtc$;cGx4jFR?WNEM0_9_FgG@fcg%-jpTr(HBVZI6sDo;#2n{FGSKbI
zALXNhiWJ-?cf>n-ocQm%1Lu<x9hM2N$rY2V8G>^Q5u(4w7Ndq&owoI2ZhoVxY$JMQ
z{tp(EhEZ1wqkrx`YD8a~zBQtqu~fD`eSM0%y}LS03=>X2<mndRZN{TaBES(&39`~K
z<*e{lpd&=TR_`)6g*q|KUeX*}emEkx26L339?8YnUHrvGI|K@#zpH5(u}vjU?7eAX
zy`;$evc+9#tn2kgViQ?$aAh3)i6vtg@kmT=oeeBxpOWmMCR>iBuA)>O=T{~5p^!Mo
za8PWMHU~!$a1s}lG>8}{m_q8#U8{~(C7z;>BIFWG;f~d+jo@r2O)u0=I#8=|(L0)w
z>Jfy@cEuLaWus#4QDmDkGBJhjuW|Z-h6$}$aayL@wJ|Gdt(I%RtMuwokLlSkzq(>{
za&3%Vs%v6Vqs(juYS1b*=9NO`u!;(*T|gHCGvS_F;y`@*S%)7DSg1J0G{ua)zyPK$
zW;X4nFeJ;+)jYvEdOm9XY^~5dDEn;5nZ4#^a;bewa?t7z%5Ndud?}u?nBs7Me0@b4
zNJa4cvV<4wi@4KHf-4D(AjD<|W8t|(>7?tWE<1=#^#T>ajO@XQdp24*aadK>lyE7!
z*X7d8zGmQE@V54vBC%*=bvKWt8H%Ijj+*yLzmcm0bot(NXbUjlV+&9~<%9ts5kj}&
zB_H`tAA%NjlR#d$g9jw`uyaImA8lriEVqa^GJO(uyzo_?Z-JC>U0}%{VG`k6=HL~O
zJ?i8RkcZ_$<9()Lw#3}4I4oLESU0ek7M{mA^iffF{J16ugHJ9jB5e1H<l16dmU`nj
zh1`BRh=1TDd8&@5Q2@S+p7OANZO8;mRg7$LPmF}1R=FsNg<y!M7{@tik#kxD*Y&sQ
z6tHfAo`Sv*$mN}@J}t}w{GY2Fd3XqBCl?xfSkyjK()o2zgVejW=Bc`+b2x}OJT0FJ
z<%FnHlDC75`h5DyGWtKq%zTrk6G{3mr0nc~#=1}O!J2<VdbA6$g38M9?^Fx;izfN}
z$tPNN_%Lh%_>s|}at?eI5J)X8Cs}vS)vl_I#QIG0q1ep5cB|)g<FgJuO^N;9(|&S4
znBuuvUz`fpc|LQ29AZjG;41-bLYn8<TzOv%>I#mxUATHA+I=B@)bdP;RF?2jvRO+Q
zDuGA3M2Uxlqt+f6jEZCc<@J}YFE0EaM&`P<7T><N!Dkz2l7I#<3CS3wwk8q=)ja05
z$OT&$3H1Gqu0+qDFTCy|ocFZytk_n!y_Hcr4@VC_aHY<dWI??@O{ctaQFR_~RGH=a
zcaXKb7+du2AV`nEfl%tGt)oz$4n<1fNZ_?0qbV4nBCX#)j1TBD-(8k*@_@i@R~dKP
z0z!lX5zOCFawooIuV~;sIXEKsEreV9)K>f|lKKEbn&bltFxtM?xw$|-oKOqstM`Tz
zso2WmDtOLz#iG%A5en#bv`Qi74yK=?L<2|+{VD|^n$Cgw)60H(c2%a%vaZUSXyU7d
zH-mPpd^=c@h1_%s=8YknEX@7`LS;)IZrWN2g{Qu+Xw2sjRh?$3Xec53IT$<qL<hQ3
z5@}qWyz*HA(3wgkK^s$d#+6W9bqE}lk|!zQSybe(q?kA%n4E$6xHN^BIUe=SckO8Z
zn>LU6MLwGi(<#{9EZR9b2*z5z3A!kvF1B*h=umVJblfTTY`q)cMzQzKf^;m24~PN;
zgp#^ohQs3vX0o8EWV8n}3XVBWJORq|6|MkJ`>u1=!p<o9G1tiO&GpSKh-cwNKSL^*
z0CbPU9!%aC6wfkeQ&1r!{UIEJrB6A)-!Kz8&HVga+JLgZ*4WY%ahX`Lgva!ydefGQ
zrzl0xN#QhNKZ8NF9<f0O;}8LHqL{&j#W&ZAio;|+#-ygB$<W44)AA7#k6+cNTR{h1
zg{d%Y5lqE}4SN!Cf+Yot%2-)OO)Jr}Xyvn~Pq#i>Q2-0`4*+y7l!D9sG^h5Q>Y9XM
zYFzjB*8CqWGzE*LZ;KY*DP}Ev_iAo*v=+A)YkP%&&TxD&5~T_?2XTIA@I8tj{8e~i
z9$J_MtWeM}iiG=BxM&YXMZ>4|tWxyduThHJCldmA=hQ%3)<%oVn-8{u&ik4xoZp9+
z5=VRXpjrU)yzsrd->Mzy<B{=V3MjT{t$w&EW7hFpk*r8x`Mkq|W7x>9%Dyopfm&-Q
z-nL$$_J??d;<BG_VJgn73U>MlRItc`nMpV#(c>KDybZ}NYxhYf!6O|g{pH4tlq)em
zY#$IS#AKLZRJxb=sAv=3n~}2m)4K`p?W*r>t#@oqbHRu+Ypm~t9grs7ZK}(fqUef)
z_!PkCk3jYm%4I-LX~wF{z=|$kv$#aSWh$YDv6RLDxrP`F(-8ZRQr;t`x;pztSmD~0
zoJ4ZgFx;wD)0@;F0pCtFuwM<Rrs24ciWK|}bm@Z5r@lG2X69Sh=0{9F>Rg-w+Yz5}
z0(Y|(lo^Hj<6@!ew!=Zu)iiY1Z*6?ux#i2ttSsPMR-yZsi?)aBtsgNhx<vqM(zT+Z
zp;d37V(4?N_ejanQBm=jvvip5Ur_N+JmHq0=|PtodCoKu5oEtrCANsl^Ra-Vo2?L?
znij5bPZ_a_PNFmyB32{Li>zhTLH$g_vokBu7op3ewDP$hN9^L8G)|vVy(j~U{WdH<
zBE5uozasYr-c%!n9L)H&Ldv0DlYJE6$OEed?3^CZgJVYM&K1W{;lkXZ19WZVcydlo
z`VM4kNOImY-5B1nvNx4F#rhd)8VDq0DG&s(z=|25k`=bV{KF<iMf0jjF%5I7KG#g4
z0(2JGxc=}l+um37nioYJW$^Ty|J#ZbC$&sLb}WbOQy<R-aMi<MR!~HoxEwEzObh)S
zknzzzIcgm*9i)rC+os?C#Sw=iA-JxZ1%KWdxkqd>^=R#4cbLxy(eDfsHzKD|9gCDW
zqwFteC*Q9b^*ux3lzQDCh7mNS?q5G28Y;{+QUQAh%EgpSBl)|#Xsw?N26t4F6MW0s
zo`@B?O<Ir2A@)4s4Vpnhr*Wfj1wIMCl$fgJs8qmL8q=^+Lp;NQ_&Cc6;&3%yP!zkz
zwYl^vdXc^J)>aBeVgf{sv3M5I`C;3Lz2>CWx|s59jiFJv<6W8$!98oT^vWwCk4$4L
zjgbs2C4(H&HruuJnSStYQ7-imlWg9IUhSSXqMaYj;bn$tB=7jDKZz6kj>jo{pXR|g
zy^LBjPt4^{y8hB^(kwSuFNb#-r+~apXFpOr=u2~CQGv?6>?%X?v6Ft9j2lqh$R0*T
zLT;10M)a*&K=Z=Mx33#OW21A68i_Btjd;LK#5tOPmE5!t7t%m{gZJb7<~puxkvVpv
zjPvTUj14kLEgZ>Bt8@Fa(uj^z0`vA4*TqLX@W34<;{?{13wQE5rRS|XjkCOE_|l8{
zOrTL9WKj(p5+)ja<<3?EFVQR|UX*FJ9>^68p>K~yay`&4p~J&jGK7m37IG}a<&!-#
zoezbO&5Jk^HoTfb(Z-Dy#@&cFqgOBR<k`+qvqaXC_M%fn1!|-Sfc>6Pw)YQTU|sOv
zox>M(L8jt&EVo`e+cT@j?YIAUXdazU4HIg(gWF67t*e>lU`btu22E_wA`mWOM<kX4
z5PI{DEWtz9hu)nR5CrRw2Xfa{2gOCxs5IYS*!(8^VxB`MxiXJR{P2%glLC>4z2Sx_
z!4ks38_?Ey#vFB)wDIY{NYC_0tKNt%%tmq3?Oq}t(d2wwdad~D5RVI^v2EjLbCe<6
zFu$C!x<8KR1uyRfww`+${HQrg``4|yoB~5X;k&8jgO||~4l1O8*)R=XLL^>{Bf_$e
zJ}S76y`w~yt}l$buL$8)JJA`}qA%7LXf3Zg7^p&5QRMxMA<iX|grGcC<)|DO@SFO|
z5a@B3W;oOiLtrDZk|0b6RHpfgpmd@xD6xwO4wmY&nFimxlpmC0CD3jL<5AnmM;4X~
zDhiNfhNKnK8xQT3OWETdm_2L9CD*I9=*sv9<}7Yd1T0l5$hqUuMZ0|hUv@SQl$Xs8
z-R|Vce0IIy9VR-BcJ>;YBknX@GdHiY+3R@^zP@Q{bozwqLvL?y8##ncw!3W#8S<PU
z%CTvOogNfgqtjO^&1+uTS%bBaTU7Hlk|A69FLUJMQ1Pou3}e$`lN=1)?_M9A?;jqt
z&pZ3a-?m|(GoSA4|7m~s4LN_z)dsHYo*bX=931bTb#~A8_x6v^4|WcbCj}qTw;-4U
zdTek1<<6VKb93XBd7CcrpDSI(wSE+-oM1Mh{N+ktpbSc!T64S-vWI~|1`uJ>e;rcV
z<sFC48$wGZrE;2&AdgDS2ZLG>l$pk6AikAdP?|-3l~U*m#Kf3v!QMALsgj6%hgBl}
zZay)*NZk6fJV)?cA{xIUCxAUnzymmWv?OzhM8RT`B9J1D6O2xZ<^F1U$z$mpktxs_
zd69ZYtS7OQ-MmG~Dp8U$X)53zo90*<v8!?;QdpGsnNP`9+pe^qn8t>-9$X@&b+$EM
z&B|rI1&8}b=Yt##Brbag4u0~Xz)yK;780n)(paiz_ZCM2ZP(T=svwEIvpKx`y*b9Z
z^mV-NKiAib-*X?6>Qg@R#4!a)uhnEg7u3l2R0fQS*ZVpX$6hmTqZov>fUBW%Qt<7d
z*XS_&VtswRZWVo~Olwk^2%04<y*L49bt~=gYg_B<8}$Y4YT=npBTyX7#BwA(Dxz~E
z5@@&bF(0a%Ptn6t=Qf{iK4p{r1=7ZbS}#!Ssz#i_)s9{b<QOZ@UFXBW`>ZZJlLZ}b
z$cww<hlZ4Rr;o*$9m}p*yAJg7CQ2T?mE%Q$?+SK^rd(R%DCuuUUGR;lwKHKm1es^W
z2$oDHUD49>+rm7`Q7}wkxI>ODT%Qkei5x=6NcdQd*7I(XmW~7=CanzLpHGL@3_4A2
zo1B0TA4;E0Gqd}0@hJ_z0zo{^D<UpF#kcI1!YAyHPth_qAsWTMwb~%CG$7I{mVDV)
zIf(QEA2Z+bEQaMP^~fA4H+eSv|NgIZOpR?q_yq|XuCP}&Ex7C{lw|y%%G5DEr3xqc
z^C}bxsR$efjQU33+j~^fxI!fj(pwiqR?-rCnJe8z#O)mDwj7=9L6d|Wma?h_5Mch3
z4C<>wDo)et(7IdsoaDfT=7JDd;yD`o;MCSZ&uOlvxpgO(9f`mpjKgRvQHv}DbEB$~
z!&GbW9E`<uFV&X=>yy>;=oQTt@LP2auDLUt<;gvLncV006*4yjN~;kPjUwAp<u#r4
zn{}Q|f*O_>zo26r$7dshCFa)=A+eBVa43>R(>66yBe>=wVvV<1g|+cViTP*TrH_$*
zL2nPD?so_0ucH@#KHX`z&koyN0n{LbByU2z_{1dYy2q)#rbbZ}K+@&Bnprw&NETX#
zsC6SNTq%eQ1rkEm5q3v?S_yl);!L;cJ9E_WK0lj}ZKEzdgpxuYKlVap(Bk9AeCkqO
z5{g)}^_mC4bG}C8s-o5^3KW}9^BfU6L-VQ`bvx5RuR~KIb7;ok=!2D3M3}a^6FJ(t
zOk?IbGHQTEFsp36@M0N10f)p)#DiX(6tP{crV+xyHJ9D1P4K{1r)LM>9vtq!+TZK=
zyZd<*UoL-@mcbpSG{aP}4FjGRE{-!`7?Y%sx?7ftuM?4zFxd-aN^$1)A|ajgyrB=T
z&UTK^qwtmJ{3QA+=!EX~j+x}=zc0T;kG}664&E|azS)<Js!dBAviqjJ^J>4Vrid;(
zRl0^g&DKm9godntkYfzZkY+Parbc>8QwvvME)In$E@4@ZACud1=Ikbh#6hMWQ?YN{
z5*EI=MmT+l){5C%*JzA8=lgb%?7aNGTSsx^Yr?BZ#>~}mJlQ@aGlFJIx!NCG*uE9d
z^pMjZ5&<j>_`@I<ljZ%-Td7xfCJ_t5zNw&aP)0%K9@Ra81mk9ZjjH;pvZ@|k+R^=V
z3jN7$V%r__z#yj;5jfK_UA9UzDP$lV*#h^>Tp}`6um0;C|6SmFE(*YmXPk*IkjX||
zb4-E<W36F_qnXDlk8!nAi@8Xp(MpW4ym4sCqLbsOz59CqXh*(;%@7Q(QQBd$9jwU!
z0aq1P=aP*o6jfv>WeKKHArF)SXT^*ZT<dTcZy+}iM<>^y1(vg}uzf~PB-ux;Iv0!g
zJr|iL2Z4pr8|G8w>wBBtS(EU`)J1(H4aKG*AaC;8`K|jU3rU8vI0e>mw8mjmH{PX@
zW6p+_k%TCWX;o{v+J{#;0@sEzf8036(rl~`)qObc8HDV`<+W?36?Z*t)p?7}2sU(*
zOS%hxLCa2CUtAK*;H^sdlljz0(z52MTk@2b9Hv3m)Doz&$*_sS=kBLBMW;*}9+7Z)
z)?E7C2ajbKG5YlfKZL~@wYXWYuPh_Wc*g0aX0!`3awBRV?yzmbJV8D2&_E?mukd>%
z6T3KAXv3UUM$vYruXaaEkYiucsWkiYyb?jaq=jgCm1UV_&aN&%ol71>OzF}Dw0cE3
zIuZYuR-=1w4kW8<-gIiTr-KVy2EHIeS-2in74jkBmXv434q1YOV1vQyQh=cpXRWSN
z9~-jtNaH@h3oq#V!=t>dn{Ro}gN7PCJomxN|9qLV!f#|FuO>wh6Dm&Opr*4evZw<!
zJL7$Yp;fEbh+fR2cx8CiJcAycA>t&q8$v=9tc=i1InoJ2d{>%kg!~!HzVZT$>CJSw
z;+1*OljURZEFM9YiH!*B^I;Oa#&;#VWP<#1xI+szo)Zu#tc(RZG0fhE<w-1?^-Ndf
zQwt&^MZDSmVm<n)rkFfEl!^Q4w>x`#XZ!8;FZR0hr^Eee-4?CKky>qv$u{hn%bv9l
zT7qLU@-}RzenP!=zba6KJ%oklAC#}e{1vr>n!zN!{3dO9MOMMnXqBA(c<mFJ(&{MN
zM72`z(Prer%xyH7{iv0ftHx)D3}=Za7ex{?<93i>+fh`H52bSfE6Q?9J#8r4i@Mf_
zc~dOJ#@O&OYDz*aDMX@AY_`H4=9{HLnk@h=W(bzdE)=VV!<T;z$?Jq*%MW)KulZ>e
z+wlF?YS!$=<6zqrpU6e@`uzN~9kCE9*}TxsE@s2xp_A5P(>rkATIRKSWPdlKBNg`~
z3_1j(YD$*~(7H$Z4D=eff4F??d}bI9<?~b6iP{)<c8~T6lq>J&!v@1_%TnzS#ZWRW
zVRhJ41q{@%?g33|Nug!cRl~?^bS?LV!tJme5XR^fbWp)Cljqn$lo2LN?j6DcM<K!>
zcR!cvj)IKJ{B~D4kO++=Bn=p{F6x?Djci>Q^r|^A$FRKu$;({mx`_{)#h04Vk<YUw
zrohrscl*hct*)QZ(lyk>HVkfrq&nbGnSoDj{22Ti5_YUIop2bf4(kehQaQ^H2xG9d
znx=^nCEu1|pQGq?%GGTWm)Jq^xFr_ihU=el(rRg5Akrri&Cs3kBV7yGODZbjPqClu
zRl5hXnOEf->~0`HwA*}yAwN;=(a9j02!4+_f(=~?UQXskkm<l}qf;A+5kfI>o)2wo
zqu~M7#5H2b$H*Op#IHka8{R<c2e%|BBwK9CavE<BM*4zwOx@b5dv<Tr9%qaKbZch5
zLHo-IQs8=ozPh^A{Cu@mbFx+x4SIsVN<xT2u9_7W8%w2CAL2$}WoNf>*}gA3U@<@n
z_R6yHzout1H@hA2c`b!U)g-#T@kDTONY6r|D4ck);V&@iaONbV$~gGgL9c^PZ?}x7
z-Wq1T*2D%Gw5SRM9%K4+FFk#-wMjpO#=Q3QtfdRY!^79M?Yj$dY80KGw9j7|*`)*9
z_je~}d)q<;qqO|Q-iz(<Ti0naoLv)4gEoh(sO{)tb@ym5Zol3?JX~!=tCK4uj>3#|
z7sYSv+^v2u@4%-yy-9{<j@JuqCmW^t+%)yHuq$DdO8~|`#YQj7M*iZ2RbkDP%*}HQ
zAG<AJUKKP}Ug`Umw7fVZnJt;%2h^CgRc3iG4_Rhh5N4!fF&v}lKuqQPx|8rf!yEVj
z+E&G;!)td(kC>A;9eQ7qhMTOPxtwkP9t44=?%ZZ+IhqIuv(aF34V3xJ&Xn2IXrj8^
zDIu#aG~1z@j;9pQ46FHw77!)+3<+avPN@N#V_k;yn)*jHE3@&ebkp)MmJ&a>-J(2V
zX09L8(BEd@#d}8nK}{LK<{pB3@4HQ$RC+=^t2pKY=HZt<|3u7V%U+RSK(`AyP22r8
z`*JcjudHsYde_*jvmI@&Kl$RQ=8(Lh%)ENRnN`J|kqX~MtDCQ~)%P>2U&oWY%GdYS
zzJ3qG`c(|-5zcPLRrf-_jkYeS6@#=lziLF^?C+m;zCL-;**jn)X^t48_gb^jq!sk2
zbS^*gJ|H0(1t&d2HiKP2!Qckvcr~`yNdTpnIb>&oPI~jI#IH2b@OITjH+O7f;#o5!
zeAnp%<$609MvJadwfIL40#TxXxH1g^K7w>sSfN`X17kBfW*@^3T5l&KW4Fb0G73H`
zW(0UmAs@r+>UwsY;=k-fW6u`B3PekM7~8UX(4DWY`%|P7RND#SG~Fhflt!wg>8IS4
zn;)?&*PE65a${4r<$uzi<C(ShjyWurUbB4jZ?zX6L}_N$$&NryziC1s`%H8P9JXN7
zxy>@K$kQv457;F+jMp0A>cS#8_JP4%5l)Wq+d12x#ji9&LdlG+Sk6AMqL11S&62Ao
z#<NJf(xq*_yMzWGEhocAAtgSlk}n@s(Bq>;l6+LA%9V|k@N)UMcyvE$KB}P3M-L>>
zN7Xd?sFF-&67{}Mk&h~f^3ft)KJrQP(SuHkM}MQk;!)|mc=WeCG9G=*sqyF|4-Ock
zeMb8pE{(?-`r=+Td>?E4K*gr4YFW$qf?93*reg(aRIAB@{KN{5`O0$b#xv`Gh<1aX
z{|eQ{zWxyLKKkA7qSIt{eL6KQzFX_UHSu7f-+pO9;5T<ZO3%?2f1Q%!TKT(8L2=(4
zJiL()RCj_GAEfJe5eOf$(f!xF4ZlpjT8}t#h9Vmr%$L_nL!vKz9P5f8mS4#|D!9dF
zt>&=`wY^2-IlZ!sUFv<uRQO8G?|^=qzsK-tUUy_E{ktJ&V>_e|+eWB|7Nn+DqdYQe
zxaG)Z4o3Do{v0f$FNMXxf`I&*1mt_MnhU|_>RwD{t4O{3m*_QF|8My0^iu$FT;90=
z=pHbwQj)xE+!lqE*No_vrijlt7+XZ*MqoPDo-SkpsaY1~_aGU<tedk>m%(X^YhV$<
zHDiNf23a8if=!h9C4;){Q8$heAkx1kb9Xl$bRC#gMA^kuU+TUYvf=p}E@m!CAs4KK
zrVElZLBd(B_7aDE1rWDeD;TT2Mi8npA5GK~a$(_RKc;-*VtT}*!>5u?bHQEwgbi=L
z2Pd*pnywZkd~Q>=uq<eDWj)T9m#ai&4ndr8m1!!A3|N+X<K{@LyU8=aF!j^a!loc;
zmO{R`V%faM%8Dxp|AwG;IYN*AWYD>BdTS_4+#z9x5L{<=-$Q84sk-cZyqq$@Cd;}^
z`5DY}*>-*ph1>i9@mgku2YyeLzGyf$NnIbe<#3DSl2R4DIDebbbY)lp&3pPzQhdo8
zkvY6$(|#uTWe7wiKf!cvv_K!zP)-S#B{}5cTx6qAsT@;tolFN*Fi)Ke(c0EJ{EbGV
zDBu-mV(>Cdgfn%kCa4=FSKxwLr_SYHB|~;~sE>~M4a)WyZM2`-A<<e8m!$JG>XHGZ
zYw1B^swiMDsBKm>YsV+&`;0w`z_Bc!7h1A7p$z4jz`G7Yhk3(i*cM+&$Jd)@q$5qt
zMGny7k`zXB(oSjk=~)Vf6$Bx8X`d*FAh0BcsKL`X2hL2FmzP4|J&fBkCUAc)Ff1{Z
zmX?C64u$G<N;QDwe2|<U_A}czs)42(_k7jso(K(16bqHmpAsF=u@lGgpx%|OG94k|
zz-~2>J9t}3V9SzbgA*ola2^EtL5rqg2?=Q81~Jx#SOee><>pAXY8KZVo?$jYhA0g@
zQnczdY&n;DEC6#pa+R5tcs?;pzDF^YDTmljIq}PuT)(7aStGm7_ILJ<_P@WNG%sv~
zQ7SkR{6y`-hFro#P#~-EjvxPCo&MBAn<?c70$wI&HnU{P2Re<IBB(`<_`#f+(UeS-
zh)L7KRU+E{I?wuVhj%p>Rz61P{fs^Gekm2Mo#E#!pnufin*EC&y0s5za<G4BN~lyI
zXS@8jqGi4$wk#gAAPPua7o&Re2lX+R+bhq@p=|pR{ksaku?>uT=I(m`a}RQ+g?nC@
zf90afI@?9OSXjlT7ftUSr%pn3i^p+n{-K*L9=hJS$Z$svalsunEN^KHQ>`M1xQW#7
zw2YDC5n<$$?)My;?gbQca-lhF%x;bL_c`i7(d>Dtnvi*9Q@a4=?b>eyzTKDfZCJF@
zu9m{(02~bnaB)nQYOh`A6A$ItPx7&%IyjUji?~K5JO>Cnj9TO)I7e&GjfA9UaD91J
zr-042w<1!ILL|PePO-&`lb<E+g25^1g<`yZK-RdH&?y7J;6vsE8rUTes&fyfLQ(xB
zyw2h3*aWXyZMQ0u2+ec&U_Rz-FwP=E@c!+XY8^^`$+E1X=;XWO{WHApzQy3%g`Z{E
z@H3ghOsydM!)56?eWeBrZ90-A_l2MpIYRp%Bi-%;bL=>SwY%&g6pO1}kjnNc;!c-+
zrp|CtW8l27T(qDomy*}-OVINPU};8P_>iFXvl!>+9cm8eLsADNnoDYiSHJ{v4KpNE
zQCVbHoJ~GvX1V9&)av15Ke&Wh&cE{t9=lxVGcQh#KU$*@GMl>Qb{yX(;SIT8bWTeK
zon`I$_+v7>B&F+vGQwO2n30=P1#IK~NIF{XQU`T74Njfvp1$gE^UuEGho5%^m!&Ex
zgKT4zJl8F0VO=NRH}(94?PX{tO=DCGPsY{&?{16TAKfsVwUF~`jH694a`Pz)CC^-l
zpyER!_>{V+P<)RccU#FM)3zleb3O((5nwF{&a%Obe-N!bjaiL~&d(3)AO$37Nl{C#
zPOX)C*1F=YF%#Gwq*o|nJ?K(!Zg)P`dv&UzEtBr+l?7LO=CZX);x7Fv8N#WpK>bmB
zo^j41<|06-Dx}1;5uUMmsI+6zq=8$phdU!f4+b8sxx8tV66E@jm*&*Dc7wN_hI%*d
z-w8@F8KyD{zt4GA%%l|Ak5Een7}Y3whvEC)P)%u~9i*CAgOOTsbepSd5-{4*-3-;Z
zu7$!->6!|8&>{#{9*<8K#!RhU8n&e^oq0aC)XW7E!bJM($qo3AP(~;Rtm*&+$A_}A
z#GpV-&XGZNKjvfGlO|PCLsjFHsz9NHl6I-cEgmd2<KMONm<+kYlhBzUnGTdGm#s`C
zYuFhTRd>;&Vv<u0x2pSC>JHX;=}j!XfD}|eV5p)?5-baQ-S)xZ{_*a9=k@;1;rZ*%
z;mNDElyO+bb|4!AE=kv2IR%WgzyO`hp>ipTu?I=z$cMIxXWg@RPWeVeV#uphVjd8T
zz8!gd#0IEtYs93$DD0)f<gU$@7zB7mFf(QOz+T!|XC|%PD*;spfvC27rSMb<O<mbN
z+FNNvD-fITZ+waWmJwAb*~aVo%J(%tP<4v}Rc(+e$F153)h(;NzqEKOVhjHmi$0M>
z#aZtR8h2jKsIE5yzgQ_+l}f+jVwX5rkjmMOT2WU6fV<I}RyV~LF1WWRJBAlN2)eFL
zAlv0R0KhgufOK%JL)Qpgd!_v3N?pV>e|(DT#6j~PolVC1tuAjvn79`JukR28XT0#L
z549FP!h>0OHW-cC{9(0%9hef#IhH^nwX`^NuzVNp<oQ@Y{zu;7rJwccWrA_Cl<xJ@
zbQ1uB?YnVbL;W@Hz{2K77q+fFu%MQ}Fm83M<(|4okNV5P1+T4~V?OJdv*x`JJHH;S
z1^G=RTMd#sAw33ylQA-|JLpsgP3sgqgEiVQEHNo&-mbc0&!$C+!Ft(Y(}zUEv={L$
ze%zH6;LnwxT&cT)0TLJGCp>v(7(&0}@{>h?UBNKROByI=y8*mzc$t_XkoE+lfamt@
zCo$DJ#Kc}CMqJEbLzWZUYb5P8<!&>dUg39ZbA9v4`jgEk8&95?KU*LAJyOXIf4_IO
z&E`0^A05%2*xd<-<iS)@DIcj`7(NDK#`*c#6I5!*DT|)?Xc0C0(;2y6#|8OlHk;9|
zt}Qbcn1e9Wr7t&89Ooz>plW3W6qy%yloeh}sF61>rhK}zsEAL?jJ!N19H*49EQP|J
zG%0ZM;P~L&=on`Qr{_@+EF>vE>ZV}NQe4rnd)zt@YF@#(p_dVElX%YF9CzNF8ts0+
zv%AyT-9I}&czLjkpF5^E=R0TTB5zb80)Kqn6gb9$96t=Lw6Z)>f+LU`>^>hi{EHL(
zjKF2{%_w;?p;AQHJNFFlbm#namkMyF=A;}b-bMjUA}g+`e)xa<_y1cF5#h2(Rw;As
z?H`|X&JWx8K>PgUZ2y^*@g3zq8p=(oYX#b5bid$5DTO<gs@q)9(TFug^g9y0%>13B
zSKHjJv;9B5*>9gy4_>@E-aFiX#>EzkA>|AfWh$hN@w=$qKBOt>yfji~35A6$ogp34
zY*d$FF83St>sJfgNr*{r)4Lf|p*R~+-eGLC2~-8g;bK_EbOOGy62;_02r?egS-^~t
zyUE>R2r#6ew$ODMDXkVg+5F*c5ykW;sqm{Cn_Ewwe)jnnt5H180q8oJg(iX83kRO;
zab31YNBlaO1I&C37%g4*lgJYp9Uuj%Dg>503~{-?-uYID1Zh}aemfuoNKl|B&d=Vo
z&-po`(*Qx**-m~ivmAK?wg!2aPRAkcQ9<@k1k6QZEEO1`C2;+IaK?-fg|R`)%^2nT
zB?odBDcN|6MGm8ffWV5and7Z>l?{wA4Tw-FeQPF;tSNV5g9*NZ8N{?(WOFGU=~_;v
zSCkKKyAxg91}>eFzwEuy4}tq;HceADG|B~is_q!71=#7D;p`M|3dywOpU3(5%#6mO
zuy-e<^!PO%q4s_CFENVyX~DoaeqO5yFsmypR8GmRIhfb0Ywx-Djxl&K*0L!d(t<ZL
z`g+(X;(0#4O?kVv6cP7Bn!PWarB;Qd`*Dps0MQVA_v2b4<WP20eLw>~@zw$l?MF7^
z^@yEk<_vd5uzUdKo$uNoUkVG5|DE)$`M-Wq)iMhD)s~_wQz!-1{9C)&hh(4iee*_}
z!#J1L7eKYYdR^;n8}1J2l&z-M>Kufxe3niM2ZZFsLKtEtH4m0JX1|Oz;LMg%vWEk*
z?yV%g9K^l>K6#rmOZTk<5e!c#F=E5?W^*Z~XI+GbYbt=MIVo<FDIF3EB|Hg&#;;IG
zu6dTI79L(Gd3g_9PZcs!x9*kjbU{FrU++}DX87Uv7a1)T7A2-D)qT5GQY0Oei;S9~
zl?rlGInk4eEhZX2xH>4NMe!7Z0;9FqlaZE|(hO>6E*m32n?I~*Xt@|@ogL*N@{lHn
zWgmh(ROLe_NyK`hGCI^fD;TH|1S8vxzJ0dW4hzJT5sH>nziE1f+=5Ctq(bxlWqg%<
zI$}b!bFCpEkF@BKeTG98=-SJL_dX<!(w%1ls8qCgVBkQpVLNd@_;9_X81chJ6*Ckt
z9A`n~GH<C=jSHuk<a>)A0nLSq5|CkrBMiVm_&qFz7b7+B@q+_=Pdsk=atNo(3$1su
z%k>`sP(ZK0hm?-v6_qjnN0w;;X|EB+*u=xr2<vB3hrd1DZ6MUrJR;SuEQ}WOMk?{e
z;Oa7O63SvGFPW7BE(zs^BT}&9r?$Q=yGkrszyNFbFljglx^sna$v|Y)PLB1p^RIYn
zW?t1Scy6Yb%75=}I^re_bxaM_SZ1xA%Z;qfwwheU5!(LK=H@#poK&~%QrXzH`8FCo
zwnt03A$tC7P-r)H&4EZoe1lEa$5oq(S+(G6gI?2gi7Mrg^3iLSd$srCR8%4=$}NB2
z*DAfnrCiP=+&3IeNiViR!8{9O%y`i2g0NZDii<_^inF^ac3!BGLnpjno*@&tA)j&4
z5jOZ}K7pgmkbOMMV;3nDOY~En6?>}r=wT_=DFSK4<|j;{7sgboFgvwz#vb)H%t$Xe
zjz0|Ha>mxGxTufRj_Ry)4O|qNW3ybfCyBf>P!0itiWQ~U`~+17yoGt3VB;-tzTGwq
zub#B{NJ86^cseLzrL%g#-u--wjb`*_LY`uKI4m-GD>~tuVmO8k@uk!fVH6}OOzt=Y
zY=`_Uwx&QZgpE&%<5rwzgfXr0U()aidFqNXP7=3P+qncsuSy0<N?!rPqY@luu$DpN
zgGNrIGO|@Oz``s$3kw&Zd4A79N?=S^c|H)lFRA53v6zYhZ>vQG>=`Chs-SfHfJ%2u
z&wAKoDFCh%4a`Gf<k2Gcw~L?Mr_K&5llk?m@N&C-7?>uL!V^v{n3Fw*8C{K1p<I+l
z1sT6ro7wfX8CxX!{mM-Le<)?fu*<8A5U+aEEWIR`+D(?;5>1gx!L<miXU9ktOcP^U
z`7A9<7UC<zqqklaSWaNFm{fkRjhv9*rc)(cDyzjS;DT5di^>*K%0s(qJLzD?1&N<j
z7LH^qf1p{jo6EZ@xg=OVHx-6x&1d<<NQ$=wU&sWcPr4b*isZ&d$2t0S#gib&`Q#p&
zrBsF5rpA;Ai2|W$nI-cZBQoqqqrGuxa%dXwLVaDWc>w8~BfcpaHWsI;^f6+T$nUsL
zCh4}(#!3ZT4OMMMD_oUpGM~Z(w6b7`=i-qLOoJ~s!!o*f#;bPA-6AgIZDhwiUj{Ml
z=jqf)!G@3iTf~y5{1kA&04$Mxd%intwa{8{IKMwGtE*BQ=@+r>inI0jMMY_H?L4%3
z&Y4ruz^Hg!Vx*>98(a7<E>L`TVF#9W9i7cw5C=R`9}9f4=ClB$15hz2+tQkt<C{sp
z%XfCKbFRX>d$4yF^(dNK$+Lf*qm*d$T?*>E%01HSZmc)y|Ft$g>qeM%)MmRAcgU@h
zh}6h)V7Q=UDhqLwYQo9Esg0sXAGliwr#GKz^%j*K_)bNgSF^>2sbT$wVEyXak>T=G
zh6mHVso{>8rA-PT#zcw6R8#B_4(t+Hg*1<#<{wwA4kAw|2*$KgDj{jDC8iG;9zwLD
zoxkvhM2sek*S+JmLVsdOOA+CvRR==kTaEN!rt4FIHBpfE6Pb?8E2*NID2gkgi9_=d
zanWE^KwDZ!hEj_7sU67)aWS&lxJS7!NIEwS??5|~I%6--PL71%1Ot*U9)!?|?e=TT
zYf!*j%Ii=vi$14mDWwnNbuw8U-5s2^3|UhAM%M*(_*6v&3AtG#Crvcvq&L61LW-~*
zYQn{IyCkp#!%Fl6;sDZ!Bg5}K2Eeu9FKy;4MLf(T^i&N%Q$BO-91%Y=0+gXSOz>t|
zspsC3j~sNC=t}sV<f4fbw4>XPBa`VhH^a8BP>JMxG<vC`xR8%bMlB@gO|yQLgiwJ5
zOhiuHfi_g`51T(sT!k0Fhj%vOwp(q#dP0fh&QBucQS03jSA`zs%6J8w)ZD@a!?4E#
zWJogQb6CX{7Kb<MHh0Wv?LsMpz1=6TughcgbbHGh&9bm$K=EBDg<*z{wYw#5%bacF
zv*t#8wt=soiv|&}ZC{-&vF&K>)D<QBwry0co7Q=X+GqiqYKRz3so_*T{c21i{FqS6
zM-vo0Kp{`!Q9C}9B?BZ3W%P47k7f}d-uX+k_rl4qV6kEGG<J`g1>gdV{=>4?qCZ_q
zmMr2JeIG6f%be0kiLmLrNlKxpw5$?*#{Kjg&nOJ=GE1jEPaO1=C#IlMulAEj;xIQu
z`(dfGucxWm2>@K@l2M*7{F^kLQ0J(|B(i~NFM7dM#P|7$kh_u+f-%@gx)AR7y{BUm
zbz!A?a@AzB6#HGxrP0%YUUJ*bX)s=pwx?&9BYn(F+J@>u_Thrb>7tg>q}_#ZqYGrf
zLNmbzb}|`^L(P(Y#ts9NTH~bP7W~Dp5ct*FeZ6zqIiw`_=JjketSivIA0AjW2$cWv
zcR<in&WZN~SZjECx*kNUOHBkUuF)Z)r#_~2={XgO+j)ZsRs>3G`P;NQA~p5I3fIgD
zSe`^@!4QdevTUI1y0N(qO7=#`42)99+@VMH15JNoQ3w$YmYI$AHFz+#)or4szRH=)
z!~BXx{U35j(uJ8?%lci$%U*d_`Dui*%T#3fAUNmwP;#}VJ;~ia?&*N=>q^s-P<Ebh
zUFHa6KA{336a!+${A7LoRo07In4|Ue=-}kEEds}kB|T?v^UCPJK8`#<X!DrLU76V%
z%i#71Y(r+8B#|*$uHh@63nnytyG_p)A(km$?NohPTgfzU4?E<|nVu;#B+S2GAj7UT
zbbyL_=pENH5}}t%Cx+79^}>l;(I`$z2ILR9uUM}Hk3NyqB@1d-DYqwso2*DZ8<KA*
zn$NEDsh!|+g<Y4g4%16Je624Nbphnu#R^$q1}`tg@kC3_3h7URx3$2B?+~3I>>QOY
z<LE$WwYf2<{@C|xkFsQBjjC~YS8S{j%Fg*Kbl_pR^>ajRM>a_*IO;8^Iu$yymTO6A
z5)X@tG&rOKepEgu4y0bA9Sd3T9D6S~#McES`P+uqao_<PIgb)zQRb6E^&G-q!mP?V
zqTNOL!`smf4y)q~r7KEVk;Gmo<A#?o+yRMm_bi5&8RoetECJl}CViUBNGTvx#tzQI
z7D}b~I{UgF?nSedmkq(p@ZjkkeQuVU15?WLk<}uM>P#tJO6?$U4n&K-l^Pntjx2SV
zxO;#m<yWr1AH>DlUE$}OrnD4AMxoY*ir@gE1{ZgPT|M7b_V}^V7hN{oub?uU|I_~r
z9mgxtfh!U@j6dZoEB7qSN)1kh$B$o8VLT2Y8x$S0=cL}Lum=^<NHpXANZO?Ni!&kR
zJ*Wu!^zY?4{6i-u>Pi<h2o`bD$;@9zGTT>i2uL|W*_Dr$aH!n+cSgZ8cbn$ZdoPe_
z(lr0Dz$J2zp_nbq3zSrJkYR(E(b$<J{%<Gahl2Tl)a_Z>H%DuKwz3_q>_FOFX~^{*
z5+`t-+(o@@Ijigg8iR*NlIeKc3~pN<{c4(CnU|k$e<ku^oDH6D4=7)G`>R1Oi}jGi
z4U73t@I=1^i(wXe;rT9=3Rk3!GO6tb-alNisTc=)(HhAKqB|S;H}2Y^HoIW~4Vzx(
zXLU>FZr2cy8LCwTlnrci(MJm|VAkDMN8nff@D-*=^Ua>SI714uwcj*^)H&OKb#QWA
zoy4|n6T8e^sH3rfs<{^#7!oEqvp(rOzBL3EZ>(6ju18Y53>*%0>m@@WGYh-_oA%?!
z46@C^DTwd6fEWGL2muH5^z80_5=X?C5H}W|@;1zz3}RNfW?8BdydMNa1Ppr>7xjb>
z{o>%Pz4H;@!m&(AK(T2v7CU{M1iL6&Bi>5M=J>LBjw0P_b)Ar1nvjHLGIOZmHDW&w
zQ!U&q-N>r|s*V|W6g-E5E98>T5h!ksd>lKq+RxGcbZWZuv(X-gb0X)TYd^>QKm8Yf
znkT!bi#+<099UiR{x0(VLaHKL4<D{dy#xgGE}`ONmcr5aajw598-p}Gn0mT&O#iGo
zC*rA)tO5_sx+@@9XzLs-G`dR1X;3Tr=jdCbBA5dK%WTV*4;JUs<8nU-hMkgpO~?~P
zl38bQhIkvXH8hsHW!OPteK3~`Wwq$AwVL6CxCxc~8K-48ic`~YGjOM<VpuXjVE|NA
z$T!;Rh@g##@=zhwl`XpR7NaE$$%3J!Y&hgl(-_#Sa5+sF*+!5?<LJ$p(nYCXFO%t&
z7J8Da9M0#5?1;$fcikLXc`WLb7^Y9g@m>m-M<C&HSfH>|#5=L*#aSZFD$|C<%c-`%
z_U?<%I-fnEfVQ2pqtBiM%WGQLIXgZ$ezhHahoDC*OtaA@DA`AJR1QR<0%9V@XQ;qB
z>tCyEc+w8O75Y}j6^$*t%?047V3ThF^sO1C@X3=lLC#r6pW2?f2t-N;*?eTpIi|Z6
z%RsLoLO{$AiylB*v(?fpR$sz}%Fe)s_4au<r@UcC$-8Vc9~mvckR9|*r)k*z@fmfc
zh}NDu(0jwkrW}DFo<;&x&xb>fhoQ8mx@gI2Cxi80+%xZYAi-kZXF7BC6c`O&VBZUN
z8O&GMA;%JaXER~hLFAUUxJO}M49Q!j!<X%yWFfRXtmL_Jwsdt#U8ksFJ0;&*62d%`
ztl(iZB06|ZVDU^IK-UNzf8s{k5=?pVK{V`gmFTBY<^A=TUGTAc{8aKBw#{~Qa0*Ks
z!XtII&%Mrw1hl{bWA0HrQy15%ASi9KtE6Sb8LIxs)p#CmbJ2Eiba4?cw6`JbIQNQ~
z0VI?C9~cAAU?Jda<NTKQ33$K85%8))iY9iCbuH52O}XeFnLl!ukcP!D^UghJlU7gB
zD@YqczscW4vdXf#8Ws~wloVJ5Izbme-rcG%`78VJUu1q!@zG5qryd)2+Yd-q$$2}7
zxC$s8o93>t076{#u3(n}A!{2QE$6UX__iF3jN-*K%Rb3+fjoi$rrMAV=Sd59)Zsz<
zd>@clN;rIWINrzEa6}+O!u+5*q)JlcYHS06fC~^({XxY_bQyI)Zl?$xzGbaclMdl2
z;>Sz+YCW*d(0pv0AsS3PAklmI5FZTr%z}(?y04Av+Gv)ff(ZqgQU`)ryH}EllVQ)9
zqDEr5Ru{aHBm35D<`{+L95+v-apB{mWP)lOsGKk)3vAUs7u(as;{`UBAc!7l2h4pN
zDeT(l`}zJMEkArudve$h<%(aLwgpG(ExeM_6Q6}Xfa~oJGmb*pwN6bN4z+Xm0+b+q
zYZ$K27U_Zup9>Fz%cf8sv%uSB9_+YvR7}dYTxMUpam0~`<j8$aUiLHdr&urHrUl-6
z$kBu_43FyizIm?<Mi*H27z$Mx4n}^QzMF-e^v{l^oRD96m2m+})KbmJR82)dH`bR=
zF87UFujH088c$w&$f!D_$*&xk_rdoLaC6xJ%bHh7rzQCzh(Y_TB9IO~ElLOIAUpfu
zY=5s~KK0U%apus8sz*Z6v@DO}jg!-Jqw4M)>KjW$*Q!VT7`A)w2hxo#-R=oO#Qhec
zZ5ZYZw+=b6>73XUtAM^tiCx+@dw<6$7~3rUw^-AO)+n5J*1uk&vS7EBRFk?d$wHMk
zol0&CM1=Vf05{omHYd}xm^wnpWnV1P5&$g1Ac#s_UAXBVE;9)~wfs87@A2^%5bywU
zLI%fnv~jb0`UYOS=2J-KN93e6gBQ;xhfu3i&3ybbUkAcAL?v0rzkz&B&Q5lv<Tn{a
zH{_k^XJH50HV5UH<^G(n(g8?;@f)6FPa;9aOV*ce3dno+{wfpOUmfn8@3+qlogeP+
zwD+HPqcynb-(M<h@kLTi_UpVRf~Y-Bq2M?GlMu1E1dQ_j5J_ncnGFQwPGDyx%=Yqz
z_hKA4Sc;XnfyDXj8?m13kB%6&qd)JrHP~i4bB8vBbwd;9yAa>eYx56|8Sz`H!B;gr
zFwu?3(oqCLl6nN<tEw=uM%}O5C&!(aM}qFrh`L^3QbC~%%0yXPuV?oCYVU<DC;R*l
z`1SgveSW-iwEvuH(b_5fx1tzgOFoli#cl{A3H{hc+FOgAwL2o(kps-|%MWpqxS$Gk
zQ#{_V;q{S;*0(M&v$S_rad2T!ih!pvs94msWo{c(*dF+&%aO#C3V;5YA@4W3<Tz4H
zF>|sOxN@$jV%?|o`%GcQx=(}H94)r3=8_tD55hAk!g6vBn;XMrmJSC6+xLVjVHO=F
zV`6~jL*ecM6?iKuKXplkD2yi8Ip1l2)7k&i{_Y!`9G$b1!~M?A*>RVlwaE$dQ|&h^
zmelv$xwx_&UDST_8*}?NzgfYW!^2YIEh`PWOS}cQKb%cS3;oG_1)y!4Pxv=)3tW1-
z^%-A+1bW0fPx~gl^ZJLS<|cpRjS9PVg}1BT107UcR?P=(&HAn>^W9VL7JY_p{eu5~
z&pk|)b*yk=uUvJzdTF<Hi`(y!$Amgz+L13cDqr=t{^IMOlo#CF4=|<0?+ckMOcjAL
zosyc1Ns+69+mG5T-c`dH0;ia{#UIC=J);Af55W0%TOdeC`miDa&GzBn=mRlHq<DjJ
zZz?I;dzyWSczj;OFwVuB3(piY!`DXfgsNBJQPZ$DW}dMXW>n+^aYK;6`xSvfWY(o%
zh#$zjR=$_9D=H#wDY+)di00B$xgy|*xKfj@n*T!^D+KC)SFzz^undfUC4FZ!N=z{X
zm7OWg&{y}c9NOtCBB&i1s**J`QXk!swbylDv62qFs<Ub0lgf%ZK6VA19D$!al#3N3
zg3?3?Pgwy|p)XjTvI3?;m!^ga&Agl%=>%yMvMhLW$CFp_%AZKurIlZ?j)6A$1zy_8
zIy^Xj^Cz?Lztn#59Gq4ZuX4Rq3g&$4A4)JUiNl*B4sZPz5{GqG|8vFR50^5JbGE+7
z1;3=#J%Z+DWLN0d37Rr(=4Vx*>A$@I>RTgTn1|FQg5?DOdv&?EE=?E9_}z+1o84vN
z<VqWri5$1=ezyL^uw1k7{d~%x!YreGZe-iLq7Gx^iVLxn7deRJgQZ&yl+9)h&sq9E
zh)BsR`N>2|RG2!q%gC$f3!A7pRuVS1)<55@7B+vig!hjkru_;@)8GD!uM2&Cgp4Tb
z{$D{x^hxv+%ZT?&U+%+yOTlY#Z&ou`*<lbz-9+;l1RF8U+ak+dDUb7$iFnw`B@qu>
z`9DF#3t&ttWjlW2pCaBrMLbW$8~;O!cucDQ#U;FdN?;F{zyjX%iEVrT6t_O9xFv8G
z|C^S!D#-EE30=~uBJEGp*@^Ai#rF@8#uhsEPoeA|Stx_|yh;?K2#$YT0qnn`%h?6R
zJWTq+3)}1)?tZw~gqXm;yZ`k)(ux^Sm3#t(^j7m9NHDoiF8P}Z8D@e$P_%F~^7r%>
zg19QYh5qG#WN+a=_R(&M;O}Zhk+1$;PixB$9&$c=T;gwcF#m%&#Jr&V@&O$LCI0iE
z{*(vxV!Y=A4{YznUv+SA{=E<G|FKV9Z`nTZ^j%!=zw;@)S$zs`{__<6wWsg`QT$y`
z<I>mv8By}U1Jn<A*DM*NhNr^CaL9%H$Ytn_T_)3K9$f56?*`!c09xaeqvCBwx(n)K
z3D8b5EH}$xoDGSbR_8b+%u4Dy=NSPC2&qOK{3*yOCzI5#8TcwE+!j3p%R$WXuqTNd
z`Q(mLLiUc^O>RW7%#hPF`%ThgEJI0g0xEfs7<foUSSdp45+xu5U_ZYUD^B3|mSY93
zAQ-%b@S1XJH$ye&HVcw(GvJLEnveYQ!JJ@-xeAJ3Ry8wBNNTDI7B<DuauwNhlw`vo
z3b(nW%+HTV2L2U=e(-(=32R9w8`SQF!KQCX*6_v7H*FWnZO+c=m}?Uh`Q?m(62|eo
z;PzVyO8P`=+`wWfpgM;bn=fAQBYS?C3lH1y<uHAh0mg+hHXhyqhnCU0ls1I)T6IZE
z;A)?@$?$CvtSc&7@LFzbA_Ac}4=nOD!J_*R@Ckv2P>BtKtD<zeeohE%cDDgEXPN*m
zM3<Pr1Q#HmXl>$bunhMp))u+?iwDKSb>V6?mO!QGLd0kj)W>g+7~b20MqqHrax_wF
zp?IW}YB3-68Y-`)MpzS^@ehR=C$u^erzzR`KmPmwWixt3iO^?2TyRi!MCT>2AgYJL
z^ij-vMSq&nzyaIAS9cE&9zqfQVJ1`|==U-Gip}-90^+9wH2c<2YJWC#jlQ*{3yF&M
z6y+bZP*4#h9=r~^@Ji{LU(Mp0-y)m{{eJLX&Cj1!KpI74HfMyPfa_ZFW02?<#W6+g
ze>J^&ZvIxOI#PrjTOC^)HuLz62V&thYj&zO`tLw|k%kj0jzf<>mm3x=hkHWbmRHPS
z9W!F%mVfDH6ocF>@@Z%9Nzu8nkMQ1#C&M{7Agzhq5+Dz=Ws7U7Kgk1nm4+-`v62BL
zYI7E(*V_xDyh>-W|90h2D~D-oRU$E1l6ZlfuDEk<XD<hGd-$$yC<GeeI2`OD<EfZS
zI{kODVJ%P&awuc7^pFIQQF)VR15Z7LYJ*}Ugp0U1Cvp&d^vZKjWAn{^EWHeFD1T94
zo;#XKEz4lZemTcy;X<H}837wGO5QLmI9G|!S5fukN^ZV?WJX$?Mz4qtho=(a%Xf;m
zb8fDhtP4iTWXj)s`k7oN$s;VD8QihSH>+PU(yP7ld{rLQ0P&5_ob1@ne#GgFvy8w}
zsKU;HkCKWaJB!$(ble&FFu))!DnLkmxY2HD#9aq}XC}{3-xp8644U%`hqFM0Y(0D(
zDMdMW+HI4%EZCw!XFmukbSYpbmH-9@mN*;^r|dEueFFlG?olF}LeO0VP@~o7-sXD8
zJQbdI1R}&^dYu6;!$UU4=w1f!#CES=09igpp*S<arsJ=7K8dWOU5&3zUt+&6B7$|}
z#aq!|Okd8lD_tJU3r1nY5O&JYj3isjbo#|v);>4f?#|6(o$Oczs@-axJuHL+bPcha
zn+xjEtzQ6*k+vVg2?o888Hf(@!92mTZhA8WSwm0Nx+vJFI4UR)zEo|`<93SZG_?hv
z2?yg_(-K3ZT_`AmB(|>M7M*%mY)YtqS~_t8Z!BLni*^ERhuaLIZ_p<TZSlA6LyRH?
z1j0mk^g0<fGZ8avLEKUO0kxMd4Wqk7#wZ~SaIKnz+<d_uvF8?(v=4j>^ZNF~s7hOj
z88!Y_oi=EK-=YD=IGgo2F$^uvCb2?K&;hN3H8<Q*Jh=BUN2XTUA{-Oabd1hG;#cYP
zCFEbi;E*C&5mmhoO3RreAe~aJOj5lIMY+G|LP3rPy*Mdi_mElnt|OOea@*vzVBG9e
zA>-M78NyUQWm&^@MoH~{cX0kXdhut3|C}ARwIZoNH#tO8)o?8w^MbXa>j`uW{X&N|
z*DI9@O{IK;1iF_kwkEYmnW6v~8poCVjIacWBcp7a?RstZY=7r`KZ1$OK1}sUe_wrz
zy7&7UW0D3h0GYJ>7<$9lr$zrd9VN=R`1LpKomczO$#K-)eZ7CQqX;Dx?L7E-?z#J{
zg6TMgl&v9Lu3W+J!5aMlusRx`bJWLM-i}J6=B4sJ|9gE;#r18199{aJGi|E$y0S2}
z_TjJ4{g}E>Qr`2Wt5ETz>KBGSQ-DHBy$4rHjwL_C{+~aKHkwa1o;25up5SWC2gtw7
ziVC4sl1Q?Y(b~<khOA;et7rI!VU?mwbCXPVw=iCGz3o%pIOL*YM~8wYs$@>jrbfpa
z2uKeB*h(QR4<kbe-Aew2V<V_9Xa%ZA=GEAR1M_P!S)}45R@UseKxIK(TY)g_fK($@
zR!_z1QPYVI30K2j4QxI?5}p-!S^T2iUSq6b@d{ggr^}Uro4{J_GIJo<RU5=?I6An_
z9@WD0jO<N8`Ui_#k%t`c82LmfRY}>_o2j`RAji5m>9U&f2k*dY>N`y<Vbl4I?=A_S
z6xE{U1J#<I2&rv@z6zO#12%qamnL6qB5v+2*Dq;I4sEh@LuygF`*is-@}`@604{Jp
zh;@V9d0kgJv}s3Ti#!v@3f7X(K(6l@Zc4`Q4ou+=!j!h0`xHT@s&+y<$SWIKLW1@;
zi(i#damc*mj@?PTA@)P;F|S~B36xAKeppLwfUNal24OM;D4bfXf<ir7J7j=ODmm$+
zc)c=<d21Ai1F2r@svCd6hh2N|6}Q(CQ*GS0?ZsNR5Ju})2fK~v@N+4zDu8T3iA*j@
z!XS_5hwVrz@@bW2hN)y>iy*h7s!`F0>PGT1|0s{OX2GBU`@XXWiM2<yR8O^7H13EE
z#=L@~<D+dn^1e=*nb50Sy@kI+ZK&ctW17YNY%q;hzOn=vw>F=|<_x6c@WwpxTwtWh
zI&TlLapmN>YUTbe<K4n^gjto@(h`Qhj%u`(xPpB6Lq>DCt$XzttQhFF-ns9)@^*DH
zG~*rI*)rmU11;oajl#~x3GbYdS0_O5GV4WzxYh+c8PW^{(2M@;veK>PP`JPmlUx-8
z^9~~!X28V3`pj>tUd_=xD{M=zm@u3}$=FaeU8Q!+1yDp&eI=oJ-JB$_fDp=`b-Tas
zB^*1zAfG9w%gWYg>+5)LHk5D13<JwQ_(IirDz`a;oCjx#+O(y#2{i8Tn_c)b@KwA^
z>BN(1dV^Xrm845rYk!y%WB4xZwe$YlbQajn)+%6c>rrwksGZipvb7%bCpAymP#A?I
zNbwFXr7K!ZMPF76mC_GR#T~1Zk`QC_Q6JaR=2eq4>kC|tx#+LQiv6ot8gquqq47<6
z7k!H!|GFLcHoc2)&`gX^6{dYs-9;2de|hohQrA^$H(k7d24^$}GUIK0(NXTvQQTec
z5G4c8d^)TL6)#-jDS3mB(URBuIJwEL{QA|h0#tg$#}Yj_z2B?NYEWSYla4>7OPkrz
zZT6!eKDzb3^J{5{jPM?>Mzm&q7VjyJB4n`Oy!bHrVZoW;o!Xb4I#}UW#aNd+8HlKl
z^xJmaTo=u-Wx;v{BkS9*c<NW)LyQv&-<r|J!|cW|ejf48-b1UjsQnKr7>?lad+N4u
z`|n+%PgBQ5C6Gn$Q%;`6ntH_snLxJk^X9mba0s=3s-pOh;))94tC@KXB7KBU+)K0L
zreyDSo6mLMzHZw!1F{V)ngth(3d=`kdKbMC9_CscX0Q#IH3!3n0O<P&QQ}J~93AZK
zAD<tb|GBe!cwqkO9PB;&?V8^=)S+MAtLnLqV{`OPwHF72C^m;naZ}fin*MaqpUy$M
z{bv7+zli1aKlT8ZtNqXl7W9AyXB1tOXm0XQjcU7Mzg`R61eFWskK8`sIfU<9D%T+2
zwG8M(S5)8U#aj7oX}VU_=sWNI0Qrs!6>LlRm6R9RwkmwtkvJciMInskNoIH|v51{L
zs*SP#jt>M+im{)eL}$a2z%07epZv<I)X%rSDwR8-Nq8=*uSSY#1xK171lx#5pA;Lc
zk&}Im5Q2~!deT-NT??ui2reYGR(A-7RCJA{R}FOIGH|Z4pECsj=HF|k889~Hqu`z3
zXkH1{2YCW2Sl0*G{_UX`bBqA>g8Mb_9KFH^q^CIaQH%s-Rk@}@nRSW5+Iv1jlq4#<
z37Bf>6l^|hunXNKE90l}uVn>f-TQY{PBd$-MxTzGnG<i^&nC&xF*FSWKsJFyt)1#q
zm7$yacJbu+1!B4HX{puJ&0uXRp^)GgED$_&{+@SO3Y$HBrMb<*VP(4^#)XaeF*oUr
zn}(8`JJUgLRM@fe<6J;T+3BSC>oB7D>}L-&3Pyt-X8u`FD(%_gI+U!1qVYTD$mA+X
z2AISSPejK~g2iTs&&7KF?DwokxV?Y4zk41%=1SVj+gn>*=-q0At(5Xl{r8qzj-xAb
zSd_}2NePY_g+KW6J3BQJ;M5{+t>@&si@~Dz?fbPy*0qeQF<q@goAKjvr36xiTf&wM
zbM6!8a{Bkab5*lTV(0J>ej4?uI4kNhr$^wQ=q{hrE(@E6VH7S#!>e%Yg=-9NQBA?C
zRO&s}OD|!;hlKq9XYb#(+qklHVemTn6p?iPNzw&?mSksTF>UA2(PoxpYm0Px=VrNq
zAP^+O0uV?9Ac|>ujK1%_?2CSieyIORdVce;4iSM91=%i@G^)}B5V6i{p655EbZH=o
zdRvBD?2Evqv#`S2SyREY=CF=W|GgVL+_i_JI1dS)U<#NIY8BfOPC^)GdUJOgE%0uE
zkF=RB8Q^)dzP}0-Q!TAkE*@|TqIyY_>R*X7E~ZRviH)gLC$wH_N<m(F#d4r30*95O
z=3B!ylnsheKK_xbfk{E=Niir*av05Lsg^ZAzbcBC$^ZTT{QrpZQLygeifYP182OwW
z6hHgB_L;m%9%U}3G$?@<S3$EvX!rlmcP}1yPal7CpCxIOKjZ3?ew|Q9l*RJkc_(>u
zxilxZEB~#r?BLBOj~_jLasTx3qweXq|M~cv?vvxEkI@KY_FGxXX`yRWmAZuX2hH98
z?)2+#UqBfE3I-Z-19xR|T{s6ypuzH8LcPu)VDyK@oHjt?xxd2qV~Kp$KwOg4(gVpH
zuw5xp!ec@AI)QXTQy}6I#*$PFx^n4RSX4nTzU{w)=j>hG+Z{G^ij|U7^=#-YmePWY
z)wcdokI>mk=}{(6njv_*79`M5$|sraR5A@MJ5HL@(DL#qxvSsA-L2PQ*uFq;)SAEZ
z7R~SIt<ZXlM~&v_1?`A>OFNC6rMe>hCAIF|b#)8*8a_}~!Pb~YPv-8Vp9!@JGD0*9
z<>qcc8pXJzywnvxaDv7@9jlg|4oOx>U7-psxpiPS4VCC-{F{{Pg@Hi{4Wa}>6IV0U
zVS3G3OBfj}Yb+Vnn1s@a4odLepGn~6eA22jEoSD9aT#X~f<F+4lcj^QLKI~<EGaG{
zsvXq2_0^hGPcAEl1Z@oV=0I$B)h6&`*)I$p!mOGkZL_f5CV|Nl1W<tDy6lXz*<r_U
zS35hOiUu9EnX@20Fm@f7Fg;j5crf+M5f*_Hp|kTDqGG*0QPRE4;3y5M-T^xNI!8<=
zq&GfRcRx+8h{2UDlg4CmGfphi_edE*Ffn!0XPCUug#nH}%_{m3?ctcTacJgD+bzNA
z<SG>_VKEv>GH>4BJjY2I=}IGAZDdj7Qg>Xxqdl{FR%j)Qo}~qtU1ynk%S2=-HHXNO
zrcj9!(X8y~mzdU}KnLa{F@cjX%;t)-=QqS}T|n`rxD&d3{Am)ObhU#nF@^q1{`&B4
zcfv1)-vzQLF2EU*=ui07jhepGg<2>-G&kQty)@QH)0vxvGWu-5mEth~=bJp^tQ_k9
zUKfcszM)pMfL>a|ai<-kr8CLx3W?b%muF8d=3@y4P9&NZW!A=fvz9L+Mi*f|a@9Y0
z{|35qRzVB_NG$Z(?(zOJk)uOAL!I~`C=xq*u=(fg-RI&W*t17;Cx!(>`PuLpz<qeb
zGySy7pSlBi43bfGf2_8e9+L8A+>e*TtsgC)W<&9w*H03NP`Ttx6YnY6tb_Cze#cc#
z6KW`>+O&Cho{?~h5tj7M@Mh=2JB`@OJWOxkU*wPoa}%|8dfLH7QApbtozLk_qMB?J
z?C8P52OuLzWEKsY1Tn~bB9ciFJ5iP7pwq3LbG7Be_%ai*L|6L<;HuC%XZw2(gC+R=
z-hpt}`%=X_9m`zhVl3!^tKI3{*xBJ(%sU)X8g`!enaVhDI%ObJ($=SA8JGq*+2P_{
zJ<%<;TzDRutWqiLn76dysT~ZX&Gt)rGV5F(CB5bq#vb)x<Lu2lpX06iuN@!cLt;pQ
z3s^f_RyS!rW$UTD9&dUlUd8+(iI<6`1b#0HX_ql$gnmx4*bA5WBRQ$p91$hvU03|l
zRVKBD_vF8O+Ga;SE^M2(=|RT098B5lg0cZaAG9rT4=`bZ!%?biN=)U9o$pZUT*iCH
zfkj|wa&;JXVj#S57?s$O_JaeXWI&DuQ3}9UROk*Lo5HL38YlKvgvvrC#|5_O!F(gy
zbCT0A(kZG|7M{s{B<G}U4Yjo)DVr`0wWT4Bi0vP+C1QOl=GopNN|tO!$$ny5_OtY{
zdw6je-nPSlo^@vBuBT}vGo2%Du7RX^2D_uS8RjXpzFX$hEwzFmKi?TaIITepCp{W+
zFM$gUOfMUAGTFW?cUXUX;L7iw;V^7>lpoO*C=L?ERXA9%L@%lbkFLQiea%I(=TI$3
zjLoJ~k&L0QSmiz3i8DUri3lg<Ivm>KkuT;`K2=d6bfuf4^hW3=yO_?)Vu(tTI==ce
zen*60xPR~$1A2HOOIq@QhE0CRW$P^J-4D2xob|3X<|Lo>RuBIpRe9Rj+0y0C4%+88
z?Q1buP(ud-gM6)NfUE>0vr=Z-J8%v<A*vF?9k0U?5q4?M3|BpSzr){mfM?SaYBowI
zWzwVTqd2#R^TS>c<d5kplW>fX6Asg$(V#g#uLEqg+*>A6PA$!6!SLzg>s{{BAfl07
zOU*#d_3z;%>Mxq7AsU$XRW?shIkawi0OB*6&<;$$jbK}LL31323kb@`3_{Z3zZ4&a
zR>!`@Uq1-YiUSGp^7k3H)@-)E^QSJm9lEsO-3cO8OHLXHPYS&q$2EaYinxvP^J4^^
zPLL;QVf<VV-gqNF$RkLG`AZB59^;Ec*}}teey)FwZn}|NA}V_2O8YyD$QbH+h|`UN
z^&rUcttPU{l;4RHX(^~rbdc0?LG*M$l#Mf3<z$`D^Wh9uW8$S6RXWP(q7OWy4*@Tn
zPict;<Ecw<71v{}r-e*~Is6dCRJG7Dou@$t!$8SO&6NG+Cb_~w2+_i$O~^r@)zq90
zw<Mzsri;8BVR1@f$G+?`Z`jjxbUsMI-Pxk+l&cbV`&<@~I+ukrNkh%<5J(gXBrEa6
zz(;TC7eQKtXgzLi>E=60MYlq`v&$s49XYmjklD)uh>M9TK?3d6lq;1@gUB-)p-B&{
zkjD-MS}LV}tb9%8<yB7&IyZJ=cxjOc<D6G?eo<Mp#2y5(xhTDEAG8>y4{bOTVgb8!
z^G&@+2g~-HZ>y|DcvHCvv_N!Qhhnb?@|a3%4^krIBHgMu<)!>-237^Pu@eT*5&Pl;
zD@ekbrq{dT#*`Rid@E!S1<P`tpGZ(j?{=h;+1JVLeeoRpOS!{?jD+cF@;SSbzuZke
zKmO+A^!_&wAAiZ^&8`nWXAzf!NK}w2kpOr&Is6=Cg0z(@2V8MFP5Un!4Jmf*!y5>=
zq}yH0g-KL144`bZ<3KXzJYLnH=L|y#>xjmnNH|Dp60%2j=GXLRfF5b1p4b7!VVbpP
zq+VPi{nFohHuBI+UV_W>#QxOP*F#ALOlU49ZjM^iOBHD{G9D}>bqo3Ln)X;TZUulx
zCU#B|5v(VeuNVOj%;z^K*cBb!r{S=t9w5n+qOtNF@H2~7*q3T;32cRIw@n_OY`)R7
zEVG5hotDsXSFDsL$b3rdxJuTCX*uI@b}EQREYa~^%RUC%oR5cetKHJkYF^+LsI?38
zo=-0=yGQm^l0f)18+s|;KIjJWdVXOcP4U5!@rFiGy0=cF+}s*kUUh@FKT2NA$9^sd
z<T*L{y0RD`ttm%KUu`7xf7%6+Szw)1(h5zPCOv{EgTNBmDLyXZhj2W3%FY8DVoUag
zQxt!kk0xwEm<dh+KxV|uLxidrvdE^%<HYzbac?@w_tTs&;}|h+!;l=dG#$M65iJ(5
zbA$x4%<^SV)lF;>k9|n;p{c#Nkl1Ch-UO2%0*C_hrQbL+sf1IPs8Ya8O;UJXj~KLc
z0G&5iuqcuba0qGk3_-?@biuwrqI)ZW2PP4`KCyPvP3U9ihr?8WC2VBcF_)BN-g<$w
zNdD=^;@r3~n{6JlQ1C}oe7|U8q}25C5Mc{PrfYa{5#}uU*yTqWxDKn$B^J&Kq0r_A
z%cQ`ntbC-?DRAw;>#kWKii|UIKJ+y35wNr3=4|I2)*V2fwVhFo&B)dqpZ77szX~=d
zDWla&_d%qB;2t0eE}X&wP>?@&`60!`im0=tgR7K6hYDt->kR+v?twZ{=%{fzE>F&Z
z8z38vmq9_tX35Jeo0K7s5$#NdeOA&_=f!JkjYnJ3a^u8x<-X9uN4yZTKe?AMV6hm_
zg+@tQMX5$6_Bbi@(KX%TAND`OSM6DWeC9U3^0DI*$!LL`7QMd1aATad%khKMwF0@a
zp&}w)U3H)KlCx?S#v1t?BtIQjb2pOqm&rqBX8>z+m^djy4Dvykh&d$Ld0fg`z)Dg*
z<d9Tw-e|mfYK)5P>^v|>i6<m>K4AhKG9Q@&Q=V<2UXbtk=4j3?`wKK;fjrr@heVuY
zJ4C2`V4CGsK5<9f0}o_ObO3Nn$BRaC)>9K!3G+DaAXrJ;?M7RNeAwHhusac|Ot2f)
zYyIFaETD^Aw92s*gh!frBMf=uhSr>vU-?ed2y6a9G+^K1szsaS_6nqoO&yL%vH89O
zZJDUzG(E%*UHs7Fu%su9CR~e2N=O(;^nVe}1EP%Rov*EKdx2ac3n&5!M7xI}gY3wg
z5Hj#4o?%1hzGW2k?%qX`AU}nJX;1lBLTf_6Sh_E>8xBQ!{H#p`r+{8&h%oe1OK_V8
z!m@>Obo}VMlli$epvgDP5;YBteqqMS3)p)}LgScWE6ZLo$r(hz){*ybaQCy%?)*n`
zpZ-0(_szdLoldXA854GHdIlf|a^EJJu5WyfMiH~l<AOI~GV9LAzC#X?V!Lrbk3DPw
z1_S$0G$W{gQ&Q=T*kLk|SMzC!nBR=^i9mqq;9NrIoh8qXPoK3yl|@*b-y4n?k?q-W
z*~Af1AsKF=gyS#I8p2F)jaVS6om3Jc{~un$VdIbK&7zho`Q{Dvfv=(!)5}Q{orLkH
z-qVhTTz|3qhdaB8`}a|^pwyx-NdI8@&slLeOqf;#aX_=Aoy`l{wMho)XD91l70GTN
zrMs~Tf6(4Afj{hD>D@Y@<Fw12ikwx7(53Pm;KAsI>`1;ue+FH-oyrpLT7$a~yhZnz
z4RCV!Y@Z{KJaZzL$#whkUnVulp?=%p^9Ch_G%{SP10DQN|Fx^Oo&VZBO8(1r`Cq#&
z`XmFvFMrr?8X<zeb6OTZ(&UeSOt@vn_dyMEe2_TkpEXPyDg-i!ZHd1-Zb4swUSo`j
zb)3UHUHrEz25sTOD%-(|#HJ|7U1H)Y1Ltf&#Pw+LHtPA{4eMIik>GJ9dq3^k98gD#
zXx8i9pZ9!_m5Nn}kSW>Qra84l{0B_ueAJ5VtsYT634Dw7x+9n=y7EAYV7BUoP6@B#
zLrFtt+q6jFL#B*!kmNKR(ton)R3fH=GsWkuWpMVTLDVyfo>)>x#jC6grF-Pf;Er3A
zgnh4Lg76Q3fpPm^bbVW{Gf@SUNTf5bBy^G|w#iU%v*{jV1HzjmN~_4P$ZRD#l9Kem
zREOI9i&x0KaPI(0HMpt+gAF?|#j@+@k*Z>II!c{47yQ3}5U1%yo=v~(MFcBROM$Hf
z6Q;jFnlE7u9ZMh*FtlGITvQV=B``^1#ME^B=!Wh)aUa=t!6(tQPZV#U1>t-RHhs4$
z<P?lWfV+4_sfD?>(jozt?X<zELZlv>W%3ac4Uo5*3mI~>vqr-(iHlS~bU+Xa<C~>G
zW#hKdJ>)dwVp6$_cjYqTmy+({L6y$`fypjf+u4yZR;VsfK=;UA>4@(U(IpPz2U-ya
z1g3l>=qMu5W5&kF!9~)(@|V#qkA*WXl%UvED~%-kd_qw}QyDNT34cJDzg{9}^&~K=
z;U#KLl7-?;XO~8>Avnl35q8TBA~<No4)OW-L-W2Bx$SyK0u>b}F}4B7Ze6n>$cyxd
zVG>iVIiKv5*h108B?VU1<7+yNVg;|?@%rM!wiir_<EQC?^UQ@x211))r17?l5do-b
zcF+&59;S;`{tKHg?Id7yFEhB{Wne<rdw;mo>HJ~bLue;lr}-s{o*>o|4yI%fUAkbY
ziAWR$&~ilgcRm4GPMG}o2No~&dO{>%*M2sOX)#-<LB2VOgfIIG;kLe52nieNQA*Xa
z97s?{Kznd(xkpQS5q5A5(F;Ugl;^Q~8n6)h73bwZ2H@jKG)1Vt3%D(3kWgtV<H3;a
z_wFkdc?AxLw!csF-0z*x=JscJ=s&ZYhbqH-ag&w30}ck|-BX^y$BfQyET}?ogHV3o
z&P)6=T_`~-5~*%J9$Ku8JGj|vL}=%5$w{1lg9xoaNp`fvtztz1uCo+endN05r?8L=
z^8rmz+5(tLPuxg?0GrV1$8vO%=c>hGjeu|#BZel=*{GJV!Gu_oP@d5KrUWZGD(A)E
zMolVZ%@Bu6E!Wd$cu4?*0r$AeNe70Lj*h=Mef;8^`%gLhsHMnHf+?sO+``H^Z-6w3
z@1J!)?o~2k=3}3>9|#dZy>9EU-FWUlKV~v?&Tflq4g!Jb1Em9Y&RnzZ+W>FV#b`7d
z9o5X0OcV^DhHdK-A`A@la0zi}I?}<}xcm_X4b=R!+V*r5HpGIHhCD+;Q`BUWQt(le
zhM9)t!wfP-a)JPCcQDx1f){77t_^Q=WGD9y&qZQkD;K_fo=w}}-4$UFO!f+NnI3s{
zhy9{N7utLlq%1?l4#tS}p^4M!aWuXB*E2h^`Nw4kEHf(dqKQF~w|I6H!}jU4MA4+j
zf#!^9VTsPZ5Aq3UGMDA1#R85bmfe;~a=cU7XO-f0slp^OHlu0qw(wmC<?6g%1(W}F
z5}BNjWXe&WbTYGwi8(T+tS~j_9Q!3np^?>DmG_F(Z+~1k3!}we9Y}l_t9|1JQ)KJ6
zVxbeQRMa15u<eu@?cu+f-1Lsv6)gxN4%}PUO;+9@8QEs$<c)!HWff<fOe8{AkJj>X
zPKTbjGHzxokzm7?+S{h{bE1}$t4RwI+fc!Rrs=g54VVCSdTLS)T@sc8u(cXU(Jw^<
z3|X-{Uc}!5ZK=(pL>gOqsg9RGC2NcGlC+!gd~$$+@%4lERW+d&ds(pv!$NJq8dOg#
zHk;-W3nNw!o4=+VR~<v8aHznd`{MEaN6#KR#6TgacKD3f4Kl_MKx!|OB7rUo{E&ZF
z*m;FJ+t?GS;H6#nenXSbnEfO!_onc1@pSQ7k!c}Kr8KT7)@}_*!5(5Ne-v9U2hH;y
zxV6YL1#J2%7eDaMj#F@5RD$ylv^+h4D4v|r_38R`HM$m{aF>ViBVzM#;t~=GSO|*y
zyKca4<*7&^pt%p+Xa&A!UIwQExXngF7^v2n1PwG3-%q-OX?ihZFM&K)2~vVl4?xca
z<0+KMm6Vmx9QTyhFX&XTv;B<r@%ss_FB-G82J1W%-y*7J$Sl~$__g>Lm%A91;XVsM
zT}g@73KCC`bvrHSg#pULkf27F0nZ6T^FxP!k{DVzy+yt1@nz9Gh^71PnC^z{*Aus2
z_px6rHqFQRKS>2UGdSM`-keXnuUrRFlqyGFXh@adhhfGSxv`=&9~e|H3mDGC@Dc_a
z+N#U2Di?NI9&VhcD?a5`=t7bLH@yCCg}eHGLz9&+6y=@E88J$k0xXS9V1+m{$tAWT
zIDT49fy+OnQ|RPTIFP3$E<6r3C}?TUr!>|pjqIXh`}O=>M$)meFNivQsa$>rQgzpy
zE>I-X^Fru=6qP~+CP1UXWl))!udBv0`}kvR?c<NFy|cJMA4bPh;K$|Q+@(XEj_H(0
zbdx>OW$=hFmW<zN-(@7vHV>mst+uJN_9!EnvpvrbWZ=#_E{=1ihPe0fkmS<OvUJoE
zfm|wSK_}!$KF|!A?FC5Lupp9}3zwX!Y|W7T8ScrY5{Z__J8b(!qgRNK%Mmq)GE!8l
z%ZktSV`N@BpK-+H=86kn{7TP_g!Tn#6H0J}>9jn@X?Yb*M$C8~3Z%UtF82<iam&1%
z@$N{WlS91LmDf~Ae+=r)msQFKGCOuBUWIexkhu6<(+5U0-bKlaNhG^6q-$!+;zD2(
zsqZCWusGd7W>lwqd8EZ-{4EPE4+?)gBc0uiz&XP%F4R3H@se@(+~ikzRI(zdAyPps
zkE;$wH*@YhUv^^Lb>==!={Uyclt-+#ewzsh3YN}N1<DMBVrB=1$O65Pjx#Qv$n8FI
z+sn_;AkeP=w$$Ps91ZGFUhpW+_A4$l<2DvTN^u=TE7^Ipd~NA+-hcTNOU*|s&~>=_
z%JY1Z!ID&3pgkReJRPFi(3!ot(LtnlhV+i|MVS-Zwd6oy;BC!q_Gns`bPc(&eUkzA
z(~ZO7%6pU^ITicBxjX|Utxt`qiXZ<++%2AJhfi_dkd64@fR_t00N((t4(V7Hmguhl
z|H|nH{FghzJU*FWRIRdhh<AQ}=4p#^0^t-a?2xp=INoKI*>xr)z$o6f<OS(nYh+8D
zZ%^|Ps)Yu$V9-m23(3bZ;o}mS4J{(2o{o`xQM<Uo5v8s2le`yn{``e4rf7~3Z|P<Q
z%sAzU&qSeck-Yx#$1gI@jr*hD4!)IB{<?Gn(1db4#CN)osmWDG*80aEV^w8K^d&U*
zP~WeE#ef`mySQH?l#TJ<hrM7=Sm|hB(qfpc6(jt1ELyz=#+lgH3RqC0f>$O|EK<=D
z<foG0H@h*}w&g?t0Zq7OELIS<VR4=glY8xO0;CQ6WmOQKcL=g`Y0{C=24XOTZ*L7C
zo)$}N2Q4FR><w{7N1QP?7|C{|%Ry4+K5uMPeeys`;)$vB#4dUnCMnuDJ`y3M2ueF}
zKEi>d&9ODflm`j%y3>Vzh0k%YvjZ7&P_!+d#m43xOo8521S2N_f^?icJU)B~5C?G-
za!>!El2rHds(U#MgebWOZGG4fx*SR2v+C&GrStlRnGZC`T9#dnnUx1}{1z;pM7sY9
z8w-zcmPuK>;LScmsu)p_gWV>Pky!m8tK3GFPjXQMH7-VYg6M^RG<8$oH#RoP%l_fN
zcln{NDk;I%$kWIqofU0}rER@`2hc+AE9)I!5r5)jvC{FQX;I7${0QOP#K^>S47r@|
zUzw1IaK%m)`cWgIjh7!u$-NVS9l+}#RmxOmM0Z`1&V)`xJ|8iT@LUo~W?Tv{;54Gu
zNeZXdJU!2>H4|2bT3=543`gqw-V0)og=CIk?=nCwsk{?*y;n+0>|jU*R_&$vm$`s-
zGJx^S9deFUoWKVl$l(=ghSsf3y?y7LsQe%oSU0!@gM??@leW!P{8(3M>7}Oet0M1b
zGI<#7%PgJA!$kBjb&ejMkIpm3xKv#-B=0g0m&?Wo9$Xlk8j@OvatoZe2oOH{O+~bL
z#gct4&@G(3MH(R<b;>IjM7;BfjDp1bM;U7%Iy<OPgMq#=19(D~v8I($%fu`?45=KB
zJug+@AJAIx^>B=hU&hUB@mewbp5}7AEZLs#(mN!`GuR)+%eZitTMkl7vp+<{5Pl_C
zCtCJ9f&Xi$fgpNc2NKuD(H#qT<+vDYg<+(^N*0=4G9bR+(EeXIP5Y98#*C7m--z0#
zmwT^FDtyvtNyxa7f*yW85HLl9J7VF=mlgepzw_ZuERltv?lD2*>fY*lz^EC^=;1K$
zzqC95eISF5=Pq3@M<&;lk%!#lJsFE4FSt$w7|5d@N`U-GLy`yPhZr+3l%qA$m~RBT
zIkSq2!4x?&@=iyny&_1$1J0$3&NIHIB3rq8x?=i>5vvK{__e1<7d{!E2BF>=o=~il
zE5HsrqNPlQ=Q=$f$(>toQoaI>0XGWeSu(Y`Mhu8AACoXw?vqj1St@j<53JNZF{fWh
z&Zd-bx3h2MS9}!`i4PYSsQ}Sji+qiyK9yw=Ymo#|z`E+oxM)3@VIW_-G9OMI)-j6h
zpKFE;_<P(3UqFrSt5c|1#CZApot@8r-)<+T-#+@56mL+SSvEm-06;*$zc~J@MFwa*
zv(m`iMR+Tmo3h>hQp2S{$s{7`qS@|ZrQ|{JEC4iD@ONam6ZJd4VM*C<4(9=Mn(pA=
z;D46mEvs^QeU)Xy%55^Y8^eiSS-B%Q5KMXF!z%}N!F70&2WdUd5~Z1F;hxk;0xzAn
zRa9?6&kg|J6{7GQNCdwUxIu2vz_klRzxHq<zd?Rr(+!h3vUM-{T*ulKU~W}sszFOy
zqx4A=ZP(3V_qm>l;9|ZIa9h`iyB=Y7wrZKhG{5AN9lU>^%Syo%qixq8;sO0w1gfef
ziHl8JZ#McJLAQmSk@z@HfzO@xt;tED69_8Y*<6N}yWmc|i>J^M4w^qwlXlOuK(cm{
zr2$--;KKYq8D<x=fIFW}OunHfmS{||S1Yu#X{Kh?Qp#~9r4jVA%hhUDD=eG0pxB_g
zPLxE2S?PhZC@puItSc=Sb)boubSeT6KGf%Y{2EEv!07i5!hmcGhz}t6gja>OoT{0_
z@-GAI(VbWiRNMD_0`<MGlsGUwFp)>#^Ya&WZxCFpcq>)Ig^i=(A}l1Fet(>L2uYIz
zAzsC<({RU`pa=o+R&~A}B})!^?sBf?3YYke)`Lj}Eo*|(+5I{DML6FkT$bBt$1V^<
z8E<LzZq73aKzkMrPQ$1y7_bNbCr-ThC`h#vlbZ1PG^`NK!VV^(=K+C*2&8-B3^TIG
z$B)!_B;lSCIV$9i2r9SV);b1hSr+|Vh@opV3t~l^UOxQXcKHFn^W|YrgBW|&UpNRa
zIKq-YUWWa8h$uTc`mCjEYqmp2z-3eq;cTMsgDG=Tkz|tqyonj4pB3FTsd-uH*Du-|
zS>8&M5A^2w*G#yIkd*6a${YWCv*vdpT(e7W!@oCT_`B^tYE6%ZT3YV}-$}%b{{hdd
z7hMh^?&&M7Zl0GMCZ=$(r6;Rw0iDruI&a6U2#qY}YN6|^LI+9_R%*Jjmq8j(*_r#h
zQ3=-5zd>2KE8dKA?$YLkufPm@H7&-9@gOcbG23cY3W<0U5!5FeiI19%+YsQGj4JDN
zrTqqm)lo6!GDTvkjZ3z2?3T0G*!;}*tq(ykAnk5cG2rVIW85&2DsgT5Lk+ywfD5@B
zEPp+6ox^zwKRkj=i8ee%ohpI+B1KX|(a#=v2km#q3!E=^yV_J2O*z_Wn&>k&BL<ru
z4t8ID{qFd{2RbZtWklT0SYfb+fza5rFm~8PtO=Qk9xE*c&VgCH{ZnVWloW1GaS@~m
zk447J>oRr(3M!6FM8<y9sBza^6?fUPF8LBLLb2H@rO9&qxPUXjln8xJ(lstF<ajo%
zgDK%X=fBYHSBC>j-uhc43|PUusVp8(L{*AoI*ssjTtSnt2dS4?$%Y+8sbPfUO!1q`
zVw5>wpcb%U6Dz(4Vk8n}+)mZy2}9WT4qB1QMb#vpu_wdX>m(1v10%Ob)DM1^M{Dm}
ziiU!8c)Q_+v0Eob%rcmHIua2JGzOkMY<FIe)ADBwADbesR;Up7=>bsS%}#l@Ir7g|
z&4X@0vreaDZ~XG5=UH9hQL`{O^*hG<FOd{|L?Wn}8DvW^JCt@9E}N*C(lrxtO<PL7
zW22XYH7cfVb*M=gEL*-kIfk<(vl1*bCMGB^!jhMpu^bMgy64%9Ei@32CE^eGbL>sB
zST#wT@Ggl+9Vvr2fXm$b93AqRM9IsWJaWcrzQ_b?#fc3o!y_<QAI0vDtC+)^-K(aC
zpISN>6Jz3o14N0`rDR187T-B1JJ^dHAth!jWim>$7+<DLkY6Hj!#AOIypUzLV8Y=r
z7X)pDn#iWQctGAxGtpSLX2x-o%u2b=96#-$I7UjvWr5)iP-I|HXBohTMfCH`<(Lm7
zsU|=uwQ?4YLjuQ%x;RAL*}Sw;!R*EHrjL>G8K)|W{mXH4zPgt|#9pi;v?|(d&X9~M
z9GKAPZM$BQF^EG*nSLd_E-F#PwWdT}2jQ}oIEr0_=CMZy<+eQ<WOTIMO<>AZOeJ;B
zY|o*rC8|<@bQj?HNGL~PU`&A<ec5qN)`)V@MQ>_@Y3CNgIfm?j@_y2miD8%7tgMHl
zRLAQDOEeVKq<%4%+@v%)n`lHz^DzH(uWJuPupEMC7=(?KYrO9t7XgA>a`7@6b|Nk-
zmU<;UYe^i-e(Ga@=)R`B0-!ykG=eYg)AvZtH4uL-qd@C1P;C2Nw|hO3un%CyLew36
zi40atQFIkP=cxDVz+mjgRFA-3sq--sW~rnhhW?R@lNS4lgAlP}aCCV1IsW_Q;pf~M
zDW2cGI9BVOuZ9uA1&LHhhX$qwSEQ!0@+}UeKlxuzTT&Dt(_mM~n-@7Uy;7ukTSzhA
zayNqlLCUWJ<|Ofqe*#8Z*MA$?poBz%V)#SvVl*YMPg00=9eE>>f0IoQR6&-cC09zl
z@y<nIOy?@!^KRl-TCbM>rp#CfhCPV0f&>}5u=G1=pSIC_Iv7&RovPW5#NrLk@eB{t
z>os(2`AD+)5Nrv^mU;`=d><Zi1FvO&`ZQxGMs^JN6rTA+QqPY-3jmit6=y{}P+l|f
z>$ypW7gW=fq_Qjgdo5UHWoM*#4=1!r9jQ=w-xE3mjx90|a+*#aKDwLG;Rr+OH@o^D
zmHolpwl>i&iRKS)+DxAj3^2$?f^l4GSes_y=|$-3wy;Tll8zy1@doC)8;W6qssJdf
zEvH2YDl@Lx3<+d|VE^5oh!0&B5SeAFUTaicZOKhEbA$}l!(m+K)c2qc(y<ZhSI%+E
z+)|ob#ZT(Y!1kx@oIQh_$(#iLr=$og9jUQ~o~urGE&04KSPv!63|@MTi?9)Y{Bf8J
z=T6t9CG0L{K^{niJ-1QlLoj)B|8uia4n|U~a>F!sYcBIq-M1x;jElsjC3X<_M*6B4
zU0G6*P)n#58k?IGVcw};ZI4ukpW0BMU!_B~L?~JOi%(-^5sFnay5IfadJAks;Q0_Y
zM=>xQZ#NO;4<fqDvU97mbi^nrj6MI-+#g<V;~Wo>pMriOhq`mHic6yRtrnyeDI?iG
zxp&Y5jFz1bP09|01wBH6bfMVs*`SRjZ|fQDU*(gIhC7+a8|L35vGqF0h||ntoA1EG
z%UMUXAW!+IYn{#H*$pb@7z_8dE;q7$cM()TsEPssMp#gTM_Z%=9dDkY`^b5a<p9)%
zUX@@HL}eI-K3XTCAVgM&nFHIGB=VP8EnenYS>R8HAFGGgJ9I;TZsQfVmUkCk^WFHG
zyG!mU(P2`*i?%lo98pg^EPO13kM$sQl8+C64s7@u8fDnKwy2~WPp$yV;m9i=Ge<7d
z68TA1U^9Mg6QT4Yq(s>FZGQcL20cak7}Rz;sczZixN`y>mQ0z6WN@kC%Ons^KMqLh
z8B^(TLq|2qB9=WkKSy}&O*U&8Nn@*xGN(xYP+syE=`te@pAJbVmB@>R4x`RY5nz>?
z!4k><QPYIw4q%yvL9oB9yYUKFv02S<x*wKQL@YL2a!y^;TD*OFWq1X5ZRP@4Y;)Yj
zi@Q8WiDcwaAqO-NYjqTDj6w$(9KMH=p}DhD32hL$wSX;-#nu7o#Jo6ak#r}}tx@Th
zc@ZtKAuUlD1UNR*7qq-K>moARIHFVFKR_(4l42|AJ^%LPG^rpj2l6$h)0L@oO=0Nz
zsW|9{$ippRe=eFp@UL~%DuDu`u$SqD7Co4e{GDGgd(=8&K-V6j2mnokK|H3j>y%_f
zq2Hm16OcSMk-*2V&JbP?5^=45NvK&M{xi}w1b4HdL#P23Pz<Foa2T=on3axQkPWYM
zl%79Hb2q>=*#+0%jZ$yef6qQ$-~o#<#|#Jom?@hfh2{B-r{ue_B4v4$C82(4WlEB<
zpC+7t)sk>$wr;d}?L!AB=bU?Ir=jP#i=ycBM2vv^0E5mXi=wi=lLG5e|1O1|qrrfp
zLgKg72t)t{mW7upilb#4EAxBx@T#q9m|tZ5o4zPV)w#<Sb9E3fN=;mnOYF>qZSQwZ
zFH0-1#Ce7o=-GAsK_^9Q4qNaMQJXg2gNr)lg6ytcl-Qng&>=)4fiV?fql#pz2J*>-
z%Uo1!ZA|J#eT6nbof!(EWW3*Nk8XU3k;Z(74wI^r&DpsNHMD*FaijU+^5c)y`Y_56
zplu3`20{RB!LcEx3t>%3Ut_qUi=bYwJ8B$aDy^_%iD`;6$r$3qh11{l6g&wdZ}Vmg
z3Yzb!)2*lW8lFL~>e20~+!hx_^EheLhVwqSHFquVgL%8JYi%ExefyEK6*-qIgM?V>
z!U4O6!l+8Yv+%3#_6y8f*P0`+v7{G4J)=Mz_MM^rW<4p(swZ=Gy0Np4eEjil97Bpl
zIMNfENT69czaZkVOS;{xxV-e*L|y~j^?^;uOOm^GN_U1{Rryk#M|w$Gm7_*|Up8=p
z=#E(Zn6}6~GPq<vz9_nB^2|Xc)}6%=V494r1E~fXAo<%4QZwFKqw%+PdeitC44Kg=
zuj+jq4?##2hvslO3>%D0T@bN}FvxHMPzDsWCBnD?F#Ke~|I>|X`gp+P)HfKk&Vv{I
zGX9Q@Cd3}bKAd4N=c>I{dVu8S0lQYF5D$6hV0%)o>(DDy`ElL1B!1pX5h#R;K%-tL
zvY6|;>?9AIO}ZtK;eg14Q|*<AaekZ<yv9N1L2Opa*!RIuo#w@^9yb`N)e;6mWUs*)
z*nxzRYI46;sh)(x?8IA^!26j^+4-$S%JnN{dBI{hFdX76INb7FPrWlUP97D!{0rxK
zEct0qnHTL`2YHQYWmLxfSc=wT^J!NOj=t9&<|JNBZ~U3*%DYH+>|AH(lLMZcpzHe$
zU^6_{+D|LXWkX#MJP>jLR4jXd$AXYv!_$!nV&@Ml7+Kq=J@_6G<UuOUA+3kz?9iMa
zZ{w6m=z<*z4Sh9gr-e8CG3Dc*2ipmhiXM!-9hM^$Gl#$61B7CY?f41x8O}%<ePxv<
z=!YQRh0g&-ne2bkO70*dC7bm-2SHohc!yEm>g@?Ypfv>48!K$1biK!?%US+lXNeA!
z+WCQc35014SIWne`HT_gz!>s@)tGrv>$`NFyAJu?o|L??Gah&9^nT)%cvyT1UHv2;
zA`Sc1nv8m*&9Gq#>Y{4`HNYWC=@ti`dwX4tZ1*P<SICX=YGrVqa~K*=Dp{N~*iZO+
z$xES!Od)f9i^<vlawRqv73lbPG*&j(;!w;Ki5xA}HRBi3g23hXp~N<xk-RWQ@ip@_
zDV_@T(zdd?tW^(L7`CSspN>Rd7YvUID6ZZVq7=V@#E4)z{r8+?K2B0Aee7L`haQCF
zSvs|T7NB&&N<V523p`5fnfPDzYi{fe@pY&;lP#aEd+dOkL9uv6s(M3*TYm|OONV}N
zuk7!odk23}T<>q?v<9n!WkGSv#j8+_Q*?{qS7FhlYiqFc#!#qvI}lHYzfK+Uu-&~1
z2hn~ZS<1Z6Ng9PVF7Mj+u<K<WFvTwiy{qJ*)~|kFe<_%+pjjU?9eiVy&|b%v`nIB8
zJATzk+IOHej0^uA>%H>an+7=xwzzWZ!d6#Wt@jg4T=*`ecnn3Tx?D<vbo8rW%=Y-(
z|D>UDsPV3AY?s-7-1hC5KHltH<`)NR6V`Yh9|-IJJi<!*Ob2uMRB;y4^O&Tz<U$|0
zJAR^qvpLu44Uku9AGEb~=U_2$4Q8xVc4HzNPV{I~Vr%hqG}hJB%LU){k#(k}K^Roz
zm6$`JIZlOUSTbCNVqB%JShil$EPR(e6}@6i!;zTR-jPM)A;3YmNbGzTa~bC7@ahLd
z^OAm>&bCJ`U3+Ldu@6im?PD-m*4YGE5;pt1oD2a#Ee{6Cd1vlrpZz7DJLzTna+(hq
zF!LZ$(kJ@TrM<EN$<%iu{b)JKtWWE`qL!x`VCy!Uqb_p9m0O_kb;0g{@+kS=?eul7
zem03)O48{xW!)EFmRy>O;j{E(a#aim4phk%7W;=ZWDb~k0QS&iSj>`rAZ~IA1}q?H
zQJQG?Fnk3Bh5k93@<vF>8$1Q9UA{B)WkwV=wNHu5##vjk+caTiC#2O!LY|J2hA$gG
ztxLx?{Kvxzck)fbg-&=0x#mb>EQ^bd$fq-Cv907@EBW*XE_*c1{{<respx3Pv_`}^
zoM*!z%zUo)58h385ZEuKa3_4ftgg-@IX7xo4o*@K`WsYI-`=T8Di&X<#XKhRoDKu4
zw;z2lAQxu!x07$b;Yz{mB%Ed@aFlo%B~k5?I2QP3;ptJGV^J>D(xdH8_Of%W$Ma~h
zM6vAOy61T5A?7hGUk6p>7Oq2lOyf^_n36ln%%xD5f)46li0<=9F2de}bh_6{_MYbB
zY%ifdPWoJSnE$>%%~JYf?*+JRf+v&x$Bz$Ij3JRmoi@dl&?K>T8tPCxj~MKa?O_T-
z9zGdl7eojYo^z=oG6#I1)ZtF2EiH~&$~0QIk*OEI-Xwu)yWW9Xe4>on1)IM%ty_FZ
zxLL7>nPhhM!-^$8yZc#-{_nF-e$X}dHZ6AJr&FaiA0=)tc`M_UaW`-kA94QzhLWrh
z@Eg}_Bkr)i0<d5eSFa-$GNEN`CBa{xebP$){j(pIudNr)+EXkseSaG{&Al87Y`#tq
ztKA-v<^JVYBr3)T#10i62%!qS&t^}xPWqy9ei&s1pV$};b0KeAo>JGt`Dl!7&&RoD
zuqbtrvBWm_K``ntYqaV`4Q@JTmNPTUhQkv?Dzn9%<bO8T=MY9MBBI0PgeEsTgY1Gc
zZTCsQ!%j{!uIYKUV@L0&o$w&;vP~B?yYj(qtMbz@driOGseJ85L%;pB%WM?ypVLv;
zZP9<z{!6&rNJ)0Tae-BS;Ah`h@aIo{7$DPV#wNB49cWH7cf)CZFTLc~Di8f2MUOUF
z;pXK{zP2hj65!pJ-M>m*{a8#dIS=xTN@NEQIC>+GHi~t#hoV?Kek@0pB@Xkx194xg
zpju%9_yM%YMer^Wt{NoaK?ReV^%B$oo{rRO#u>9=D`yZ_mTF%=rms@DO@}ffB;y`L
z$|jzbP`T|XoM^MFZGL3eN<WL<>AzX6dX8Dw#2W$5NTg!g4k_C7R}3Q^fH4Dxi(1rH
zOsC^uO1k!E$2d?HjLdM%5q92xbosk@Vqpq0V=J#xNt<T;zS;0-micr5lj=}S(5mG{
zlJRoZZ2Y*+gJacfea_p!Vx@BFedxiTOK|p=y%oxomkmx`9tRjqM=%RA)v8T-z$WyQ
zeOF?O*W6X@vTRa1+R#;&TlDZmdEl&+Qi;PHB>QJtxlPt;X-kagXf{eNrNx8fjgq={
zT&VYK=XXEt{O)()EX+mdPp0lft^ZbB5$i07WaC@V?xW=HXFI<mvK_p0H+}~}qm_5=
zeM0Z-D3uRJWV4Efw6pU&<%ZL&<Vs@u2Y=c5Szi9_SdQDt8QmDU=*!!r$Apv|2ud(J
zYu&p&ztaHNS4*uDJRcpz;WkS6+H4v=QA;P=L{}P#%`VD!I2=f|rFc9VP>{lpFDW~6
z6(lX`{#S{ob6VkB0&HcOXh%az*i#q^_{klD5L+QEUQC&Qc+uIkfPPhQRTh7LtnW&6
zY9PL81gR!0Ak+cr4fkExZ|HlUO47~Q1IGHJ<vUc=KU^IAaLQ3y_(9^e+z+x^_(2v&
zet?@urW#@Ztu0G4r_nbdNRuiXwYGO)6gT8675iGvVBciBU#%*=Yn$6jgWOWfSU~01
z)xzG5k#4mG@60P7z}6IDv`y!q$Vz>Gr2J;Gf-fDDJcE61p?aEfr-4&$f;t=26+nU|
z1QNu#v$g$sLel%<bLPF;%WW>fB&~jUC=AY~`8kIKxa+Ivexrh}ht(xc=n87NrXo}o
z5I>E;XLzVfPRC>n4lPw!ibV<7dXFtu{VnF<KGNs!RWI=o-W=Q{+aWM_UR&AHez?L7
zLYkuK+;$#}Hs)5D!xBs1I#7Pc{Vg3SH;)%Y>v=B9b-4Jcz|GwHTmd%HX5lBGfs^u+
z_9ju6=&kdX^LUP!)wG#pZtYwF$H${-Z0|q?^N{0|JYiKDoAcl%kk_{~53j6G1%~20
zaN>p_3b&ufV=ieeMyT7;UHt3)^mEVq{?TT$|03kloh|OiL*!ofXJf#K*5{$ec=bG_
zBBkkO?3h-N>+6Il=jGK5QTlkMCF$P%8UI1k<0&1y?fv+Enog4YD*tWkexOYYUn<5y
zq0lW~jF1l&1#pJmnh%EaIJr{9=L=~(mVMvNJRWjnuG^8XCA`|5EA{TIr!PC5U)t1A
zZMzvJ;l7J`tR20wJ*jqCgv%DC&M4%tk#g0nY+|ao&3r5jvGF7?j8j}-;#<;>(RlEc
z#`!oVFtsOcHJ_lLO7u`uKN3symi?4=-o!@K&`){$`GD_N&UHK=3-YQxxLH5r?AmGw
zHSZ7drOKJZbi2(i$+-p$e6skwEjU^ZL4M7CEOd6^{m~$J7gnE|`Ry_t=cNLDtKmWL
z_*`I(y^4M=@?jV}SntOk5QHC>c+#kaESZm*O6a&f<Z2?dbKr9w_`rG7N-<uy!#8Sh
zV=WeXtC&7}fnM8_g{>O%#l{n=qA?>o4Svx)eNLW`%xu4~ymDm(n4zmV&46+*#vE-*
zn$_RyQGAj2{g+`7zZi>9CLyUGu~_KXcNktFQa2v<t{37LzoUPN`;VJ|aPeTl8k-HA
zIQ#j9gXIixIIVZ?*~Ccc3f*K?T|6WOra1UBWqxh7`{Hf6rHpd<yJb5v%E#a51Jd^v
z5m9;|AI*VFiKil~%Ho!rdb+6EO2VE(A2}{ip9?!qGkAuX#R?$*g-zI%;b2$=v@A=|
z;Z1@=auFeISUn=3^vWRHa6;VU6LwRI@LN3#q4`+cnQ_8YFogYw%&Yo2&?g?z<Xb4c
z(1%Y8AhqA2_BN`jOKR5A9W9YWwd~{<(}5SKt^c&_3tC~>KUlpCp1iNI%0B2qJJVw-
z4P=Am2Na&}7bq+`&88YC8BfPW9%Y=FCQq90c^|d>S_#)#Y-u^0hBbT>+LZG#8xgYx
z$8G%6Iv!kgz3K}BCTxumVJ*0*6)^oJM;SG*fe}>R(9XYJ<dFQNt4^8FC;3^o{O7RQ
zNg2ctSlxwx&KcGYj)DtX4<K4fc%o4#gDhnJJ~Y5BKVw1olMryOqtrV}PQ<6H(cKlc
z8>~x&PY2<w;0@z}1eL-7tigaV2uZjsl6|ngmRrAr4ksv<;83;BqeIU9<A__#njCcb
zB+V2T7iG529LksZ#A;FUIy-E2@zimaXB*z6blSh72Ja{GXTsHH20;O?Af*-~z=$8*
z)P`Ub?<Ob)FTgOqDnc<80IOcFM~7gCc;FxINOddz8&#(<J^pY{$Fp<t`03+^r^(03
zlNaAUGgz`R`Tpz2FCHhed`6pd{Pg%gA18bN*Ix4G4c?^xr4LV!pB<l44@XDG-<&4j
zK6!HTm_FX+kAD&Gr1JsAH|7?uAZsA<1;wrIY4O8IK1QHQO=y1n_?CB8FfL0@XtSyL
zP?qNK3=M^8Yr)OK1BX0<GHtV{PP3ePgZAGmSJdw8L=!%?)u_xl_<n1oDnR_);%d04
zoFR#&TMNgL#$2l$tAIb(NctE7?wK)wlTQQrjo~-TBV-s~6ulPR@;TQs!k-FP){}s$
z9%HoiBx{a4z5o1pqvMa4Hc0)5C-&Y2*y!}u@bj+g-(4JUvt^I%hMw9jszN-XSwm=k
z#g@6yCcBGszFU>FW_FP}$wLw4mfr_D1a=){M9f=mH=-oj-3_9VxTSbVx7oEp!wI<E
zh{Bd`J1)*MDBuPH0M1}@OS=9|CtHEtt)+f39cR<ct<Jn_)Hi|*x3Fv4(%bACYdV0?
zxaB$8D@R28_sk-RmYPp?#_lbCy2mG3{_Hd>D@32uiD0DOe%Bs*JSE{*;tLEK@2tH>
z#|VeeAZ~u0PQm6Qvb5Q7IC;J0&gv0)R!<xvh**m$`<4WNh_P0>_=uf|jlFYDU{f@m
zl?|tnAnB0nDHzVW2oe`uq4&pm>54tG_S-_mlJr$hzwT$un0et4l?Me?&}4!@#`Qz}
z-H!^!cLouK-r{CVwrE@(`B5L|HZ`=rNkWL-yJi@6s<#aS83%H3&lvI{{0(tnhj*H#
z9qaz1a93CY6-|ea!_LmLqS~g<a9~6&hII|!5kqM3h3#f)L7=)ny56Fk0Y8up*(T0-
zG>bGq@Ye7`mhm3>E*b;g#OQvAk#zMj(P+XKO_4c~p@qXfH0dQnZ}kV3^eGc<<Kech
zN+4DSnOql9Cf6)pI4x1bCT<_3sDiPGmQ`fE1uZGS-c*ExdaHoZd_9vdRnd9qb|*Ry
z3-<P`vY9tY4Dz%3ZfTe@$0(QU1Szk-DUsl;Bk{wCQ-^5gzH*r6fLT_3v=HCR+!;q{
zuJNqlnRU7Noc<Bs4-CAi&1Gj;JQRL07M!fc@!Kh`jbBn&6D5xB?8wo8VHmrqFL#pr
z?r({GZGKIBCD)ltuyQ4a>Ie4P4Z$8tdN7~EQr~kpVstQDVS~8?l5*o=^i^2$NKO1Y
zBeszI;ivxWb;la}`RAU3O7%{uxn2ctA@waqw~rCn+1WGH!b~pMKHkspkjRc{QFwO<
z7^+o?n4qh9`W+kj_)6-sAeY3nPTh}QrK6rQL-&{<uQ7M@7u|Wl0s?v*6ivB?23|Ec
z%A2j|J!>vXJ=lPhOTP46kQwc0$<~CVOM78R#|RIVlpcZ9_9ja)%T`X8#C*`YoSx_t
z65)@X(P;k0K0SD-c+7j=7Ns`zp3o5mg42>JJ)hE5Z?Y%n*|#ionCZX*foKUSu$}12
z=St$^x&qdfD{tmS42SQz{6N*@l8RmRR<m;Nx1%>!&^8ja<+8Z~or-8z`nXH%N9pJj
zic|TsW!M98%5)g1KlU<5*#XUT9mMWk*=g>pWwl8BjS35qi+h=$)XEzmNhpe8RT?8+
zY!7f|wmijCYjYw_^~rD8b}o;p9X<H<fv6zzGaH@Gi`ViK{9p1tm(!Z${g+m(Z=le$
zBdL4ad-SOD>{;g@^si^blY9K}$NW)poTM?vJCF;b<v{pWX;0H)G5|g<<W~9lA+kYr
zeE2gOh<p=_<f9iazWVCH10BY3pU?1u_SLxB=KwGU?!li@vXN=Y+0%KSv++y;8uDi;
zEG|7f1$2eh^aJHz*o~{Q*IA@|sSy5d)GpU}NDthX?yiL8L9?omA0ndLHQ{<iTu4w!
zb{fv9v@WnW;!bwq9#aH%wy(HcAUwr|EA4Hk0}%9T3ohMnm75q_j-yLE(h=2FAg*Iu
za3&LqK3q=a!YVkLIFb;=%ysVfQ1AoRON|uNyv~a(8;X!2JUQUj<`0^4A(~b~_ZJ?#
zGl7fey0efEqa@Eib<G-kl?^9>6pWO)SB%``imEhEXbij%&=;-1%MM1?96wK!t7&%e
z#jbM*OeXPx+C_507rWy^sMqe7?m%#%`p*y3FI$O$euqQgU1`W?I*K_@8N|Bm>;zvo
zDfNsVgfiV$g@}nWE><jPoHa`r>uMLp)YAP1uGUN-3MENfVcJhMRV-$dW25iErC2QT
zEbPguG~|tOMx7lcfx!*OLY%n;gEoJ!yTrsIlXZy0R^>=)Q?MVN(RW%ZJsa;xSiS`k
zQzmFPos}z6kpf(o0_(H*o(7KDBV<>A<1<B&?_0?Ud!Xa*Xidk3eyUn53Jbc$+L>&O
zW#b~fu|?@@Rzpf#p2I3QYAm#JU;X}kO8k9ZN?A|&RWR02EP0yt!{XWj5@sEqGt>-F
ztI1>c_A7I<?~&f$lSX<>E(O9D@5&bUG&r`m2*ooz=#qNatE|v$0hAnPrm(x4IsCO9
z_p)K7S$8pvUl&_<eiIL-0sME3Qy0eV%Bv~{0*g9Alm_WBtm?FmL0sd+jKj~(1PUhe
zpmh8ym71o`S`w)wme=Kj3?!o@%pEIcK5)TlF0*2i46}=wx(MWCKTYY{sONOZe^)X`
z9XFQP(0|or*814R3~=_)K)FFj974Bdkh&k$u4=dUitT?DFn3ADh47d>^T6ENfL5R|
z#BQfG1TW)u+o*sMjRCO`C}TOTLr1?Ibp3k^RZr{ph_U#l$^XV83NYWa`&w7h{U|1z
zE04+s^+Bwt!TW1_%6&hvg64<wk8n6QmErtDhVu%Sw%;_Ef81s;H}%0x(`z~I1O6*G
zU-E?thk9_;#DY+3<(H^l-xqXyhkWn3X^U010f)r6lR#VwPYI{D7%&%wRXu7t(7)SC
z&|~?GD{!&x-d3o~-*@?Yoy3WMG7d}+uc9<Zw>3ncmv^jbSF-Xf!0f9G!=IaXFc9Ck
zAIh_0z(^H`Bm5C;8-ITLU6W?sYRgV$86reE6<_`ghN<6#{EH-g5sA3b`ApS#E)grW
z*{$ZFRhbcZAI<Iy;#&1<aj0YyN8ZzELA+te@;Z}v{UR7w^vrfEgCy47`%G-($^%$r
zk5ukg`9lGgx94hEUrO}MrWxx!1O1|lFWg#7we5w$WiIq~5H?o<X-N~*pl`E!@77vT
zYEhfec^mL*l=$IVm6FO@T+WAZmGg7PQNa>`qzt)^bHTB-=Jcg!%8XWHtc4JLn7sy*
zg=o^HFv-f=tj{R*#Wt^Dm05n1z7iC^!!iFA9BBC>SmukgpA$jni~$2aaOJemaW=B)
zUYUIN;wdz}mK=OK8%H~LI+FEk(9X_DADDz_Q${4(PUgT+(B~w0I-Oq5N6sEZI)O`%
zpsqSQcZu>(q=FNdnVG@;Gvr|~iDGOn0ASw>AC#NotROT3SH#>$7)Vi8z;P4z;)r4_
zwYs|;(l#wre#xtHp3SbaZ0wL-4fikX#_^J%2E~xso~u34r7wbwh#p*c?5ELF4y3{>
z2I7LObh`F2iU$Xe`fk+LuAQh;QgHN0k**UTDg7;&gR}mntQnmPQ|3jJEit_sN91Ha
z8bNC_uS>izDh3!PP-)|l0t$y*4nc<!p|7v2``D&(LqaJa0>&~=pmxda)fZIzvhTXV
zXsVBDMYZz)E;-Dk8)}hGk2cTs|7K<`H>x3iw7}vN5R~L${Fryo<ztEH?`YznKpI+4
zJRo~m>fIqbTWb|@5jlk7C<$as>bMBruf5vR%E?@fS?H$e+nQlAaH3ZLozL=@d=6I<
zLq2In*uPCp4sA**a#Xrs``$#u<Z2vMp~5Cqsoc>dS=1->TPQCg6FMGS(Q=zmZr@ZV
z6hHcwyW|?%ZLtx;cn3GFxZ@1bSj=2mb+t=z)*jZQHukmGqcTTZk3=kOMuVCmzZ7QQ
zfr*J3u3Tb=`@OcbX^gw}T4nwx^Yc;8C3Z)Aqxd5#4v#{u#y_-L<O&}~z?}s?II}w}
zYHHP!N7Y2llx2+-@QR`vHmh~jQIFgss|Q^ht;7yMT7!^ig_6_cq;V<E=M7Sz^k0y;
zfx4Jnm_sIq;LW#M10l>9LSDw`b*kZ-9HTA^9Rq6Zp#_B!Pd&T*{TXsA6IoPuQrA9P
z7)qNvZr6@k)bxgD*0)=?@D$f$n7wrltSRVM-P#2k#1AjdNwMcruJ7H6LJhdvCwky8
zG6}>8x_PqxQG@sb)WvjMUUT(avkg0Xq&;o4RyrbDD<_FLUk}Sa^r<%Lz#X(`>^xEn
z_O1`rce3dQqwlsGbhN=}6rm3`Zv0&tHNLvVn7zRzdp)6zkN|KCwQw`y)^9N%ZX{re
zFF279&5OsI#eDj%%e$do@Icb9JYJum)u52H+bQW-$PMOKlm?0apvC5|Vj{WkL#e_6
zi)kV1WUZ$SC+j8=&i0`w&U)a0N?SW{efP*MHqZH1xfP2r;m{-3>W1?`OA8L+b9(=p
zgdNOfqJP)sV?V4lC--pu8a<EO*>D!t@Pe5<9;NxvZw!+Chqakx{-Nd580(|;Nd*0D
zIs<O9Zk=GOF<U42uiBu)aHkcEuaDM8{Y}`$hQpRd7c9F%4czc$(7)>!LVs9m4%gFs
zHiP?l!~iUGw@38wjWB<N^SIXP(|j0rwCO$3x9c+GFdwKvoc{_XNB-ir+ae8bI!+x#
zO=1B1E!|LINblZmyb>6P(UO41Kz35*Dl08L!8Nqu(8EDh$Ilf>n0erjO~>rUDU01C
zaY)INO_=}>rfIF+B3F+)FW)*x-LG>rPF~;R+niuDxJcZ{M*_P{|E-M}KQ0=vV@v>5
zfZamys_6}pB;2bT$q{}OY-aPV>_*4=kBN;NQ)?W1@Z4ro5Kj}#Y&Mr#QyU-c>bz<#
z#?vbu=(Svo5c%58O%W(JnH4EQ6V-$8%}on5ltscpa+9UOF>@o>@CwUF{T$^BH@heK
zFp!cUoYnU2!aZUW;y^`KQ>G-;i9{!b_yXguZ+T;7%a5W);P1(B<`ZZ~O6u?7tLmt$
zPcFRS@_^1l0_o`8^Ev6a5=t)Z%VQf+|KPp)EpLQZ7lneqSV562m$N|!lGiuY7i1K*
z^=<}x_jrD{)zlPQcT<MyPIJtVG}t+~rWXHPzp9mo7fygR8#(E?qKK!hWcu}sX@=-W
zcoxgUdtLWHm#%M@<Lko+P+o-C14Cl+O98p!*e{9SGZ2nhb~#PG&#gYm4csO1VpP|U
zL8pVo3t*vxg$tiry6qltns>j6!$)mxcnHGLHJ?`)PW_pMF*GC$?hy%mgx)=bKNR0o
zswuE*Fe@$ax;l3=#=+9-D>8Dd8LY!>(6%&g`64ZqB*Fsb9Xjx4`y3B{J!V?|c->2!
zo_Cio45BrHmEqux+R|`9$ZvjabSmr94tl<Eb);s8+0{biAa;ZVRggkA$c8nYBAA_y
z7cB&BtDMaTd7<J3f7O+*!Z3r?AqH`CJ_|bdQf$XG_qKTX-OqyTHIh1T#Zbe0n`bj%
zbB9ll9Baa<HO4Q~T`&E#{p%hD(=w>zC0Jj+Ik!bJ=_YK+yMWX2$t(rB4e!<d0Pz$3
z9ER}&b;ZW)cfBnQt8k4ATK`AB-JP9~dSku3ACb$lm?QjRE|DJ3C1t~scvl}n+=_LN
zPbKhmmZbw3HcJaU+f9W99!I6#p)5>bGc|i@)xx`KY55&z&Ao-)vqt=om&HE7eq@a2
zbS-Ls@vX%RMxIz`w@_^)^Yx80YxC>7>G}=suVa7}@*wd?I7)n8<2;g(!iNbX`ug<Q
z(~U-iKIpf+E*hlFFGgv|C+N#{Xr2i)C_;h;FtSm)5z)qL)gkHR4zFgTFfavQuN;*=
z#5C(xE5)7G7iszu9vfLH`8!%J`D*3pf(QKw>u+zifI1wek@dD5nSB1}3EP$j7s1Hs
z%Qa3Oo>DK>@6pc22IIj+<Jn`kfTWu^SA~46dMPxqWhG^)03^H!u{`45HuF8`sHziq
zT3kYy`LQ5TlP&kd;<9UK!$G0}J!V5(XA0CxJbpGKa4MzY&-{(M<aq_HZ!)iNsDT^r
z34)W5+%qrZslhqjl^;S!WbpVpQ`1Lzc4%?w%!0-@GA{%p4Q3V|q-bWr4tLLQy7WVr
z2GD#0-HW$Ai%Vy`XpFZxt-)L*fUc=+M;;jFqy+8+;%_D7T)*k!n<(-;e6$)N#Hnpw
zEAUiA0Ft>()wH;zfw<VjN0#19(&=1MDddYTz6h;w;e&C<u0sx<l=#;R7e(h{Vm=bT
z{6RJEH`uk2n(xBCTyQp!vRGhaI59u6|E>s>$*yZ;SK%GF?5;75VKE!BOKHM?g{*_W
zSciM)gIsLhoK^VnH;GfkpFf5)MSonQX?xPuu+)}2KbAhp9_jAZNihXPslijZ%$Q3E
ze&R=XMIXBO5DdsYu*Q&rXLZ8A_Z@7yR~Srts4%$^=drrUqC9A+<WPH+?$=pFelT1@
z_wv$O%;7TnQtP*=uwGF#zM2;ENn=_!>UmEP;grv=^05ztwe)Z)$rI*hI^Z*lAZK_0
zHhWA5mOjAdIJVnmuXBNTE1^&dzV?U<MqMj)$wz?Zkf$R#i-UGwWF!q&02vgDZJRI*
zu1R2uS?ltL<so_416w@N{|8Art7NA#?7?Kx9uln_R&$^EOW(S-<*Hd!+R`?XhbJd7
zgd4pB9Bm1CJG&ef=Sa!J!$gwhV_Rnhgo1~0gWMis*e27wnC7z^p9l~(rT6*yG;0GD
zn-+W&C55tqY9haC29yNe8(JRhDK`xm0?xeIdsv64>xrdtY!3vx)^m6_EI4b=j4{%9
zQT`la_Z`wmvF%-XzDfaXN5GxpyMkG3bWRyO)JdM`G?1*y7H{D?NtSc`xj>ZAQpcq8
z`d&#2axpCV)<Zqw|LOLLf2ZX{EET6|KEzp0`a?`8pd2&(rNhV`hx+@082W<YtzHlP
zugC-}(S+}Vdp))^1eh$3l5@JlmyD6BxGwwoxKF3Eyh@3&x9A9@eL74Bt>j#A<?VMY
zODmbCgM41nud|y8$t&sP>c*b9D8RGxe*pz5rTcpW^f1tg7MHZZDQ1iVg>M^H&l6yz
zBCsS{4mA<6sYzlpxg>K%Mz96;r*w3Vs|b+CV0)Q9;noD$7Rbi5nA6G)bYp81m0;k3
zHc^E(P{}yLw5_)$yrVdTTHnLdI2%La_VyX??MM1V8(Vdt$vRoGiz>}lMVx20%j4s;
zFgv`rsxGcc8&g5_S0D|f-6J=unr<O=3Y-x-*;l}?7ON<wLRfw!Yv$*w5pyV0BH5M9
zE{LZh_}dr;tzo8Q(k4_vw;I>a0)r#c?g<4KmVT!F`|o)n{sR{=jP2t<-K@+nmD*l%
ziCFDgmt`dIG}EFimGO;d`BYrH0?lQ~py`mwEzTfkp3s9NPt(aC2>y<hg_IJ#<I9%t
z8U9Nd%kT!hVc63-WAq&Z$6UZ{<SLBI`BWFiXC(RoN4ZhcY+f3U?kF>qpxWAqE}~fU
zNDds5fFqHNXAglv13;3o$o?nU@S^>7QQ~$i$LCMJF0P?bwA62?%$BI{Xg<b5={tPw
zG-Z+Hcui59WYc`)Ku{Sx4z_r@<WoAHj6KH<>Ku4+B#DJn0O!+5Q8N11(8KqXnM<H#
zBeYfrr<1Sc*aENyg_85|n~IuZw_d==?AAM8SvCk6VK}TXX(cu8^?@aHR<Ic~n~p&N
z`ObU($|~w(i?saP9O*!oT@BXyN^y!W-FElnZa$d<(U3{-&d&WXZ_VQf(nNM2W#vo6
zsb2W!cQNThTIt<q#W?~B!rxHB<%(16xZmKXR<r`d7g&{_G7K;qM6u9}!Pdfc<X%}A
zMIVv+>CqUauCtaXy_6vFWKLI8)-a>Z(Z!pjQ-!|M40RNw8W$~v<2VRpP|<w1C4Qc3
zYrfqL(@Kz~6@k;RT$fJiG@xo6r)Uuc%@hu-hUFCX79$h!P+Ysd&9DHQVn7L~E0AS$
zHRVyEog&+=>P&%@1fZ$0rDpi1ttQqiuO9KBl7sNRm5+ERN?lp=pL!8KNWwlNG6Spo
z!0<em3ljEpTc1AgDst(IfJLSDT$R}8{_Hup_{MS+sI$y)qP1ERQ5lKo-=azq)vvj+
zGnYxbe75ef18OE899dw`n=tJ)bpF5bDZu-C>E6L#wAz+CbL-Xgi2t276t!4U@52@R
zc)N-ptBQOq`?p>Jkhd)XBE@TwVYp%ytx`h6QwysbKZiLs8D&<>A%t@4Y_^J`YSoHG
zGaNe+apH#Q^ks`wG-jfg(<~d~KO{D<DmH;Oe7OmiU^N7^;}$AR*uU4rgvt>KvV(+%
zNpkG#Vf@sxTG!<$sSOd`ZCWVg34<j%_TISB79!X%ktIX44{<d=8>$o^;~-Xx{*X-b
z#saOlgM(#f@!buPaq49NorSCTK-52u1GvR?SvbV+#wI1aaX_!3QB@1cNw)doD}*85
zzksw5jqn#4V#@ul8X*tyR1y0iun-65Xxd+5qa`oa@3+foW&J}(g4#nnCyEpAWxk`3
z8KE)pr-;N<%gxmM*lH^d5dGV6a-t3y)sG`V&*1WAZlQb)S|^;PPF`Rz<N}J?75!kM
zqYi3NkRqo)1)CINIcBf3{+ufVqNT426)(Sg@wCzwEfp)4afCW6Uk>;Mz$NQ+W3^&n
z>|}ptoGxGKxwOiX3m#vq%SS#Gt4Pag7ZH{RARSgU$vSViT8o90b&HK9f%tI?0VEJQ
zHmoLgTY-YR#MB##DlHTaL@6Qh{P3bEl$@Xqwr<G@3lCVQsqPi&!gK=GuTd0^r$Qdk
zwI>Ria2{drh$#9|vf|7x-T${1Ot)W%Zk^-v_HybrYj!uCK5U8{h5NvY>3#l_S2tQ*
zJoELDWRCs(WpCv%Ir||fK*lIGK=D<08k7_jGL$>ZNtF&MxDWShPm4nbx~83^3MpEH
za;zd8o^GspKpJ*?eOj^ZrgAUOG)Cc#R|1!j2dRd_#&#<%t_=j@h5?*m^>kH}Zw*(u
zneeV$l||%ptx0Mi49^C&gzOMCLnwEAkBWdCkupZo)$b!<WCM%Di$50U$AgB#-5O7{
zs7I{S<5wc3j0eMPx<rPFC5|k7OG-KyW0PZ!0<q3R#d#lyposX6U|$gvp05=f;!8`j
z7xQ6YdNe4=Z5bc?uDy?9n8^>wlWz%#cv_%_bu=C+Aw*sKGUMtf_9l4&#qQ~l@R(+a
zM7krRt6Ligj~74;4YdfMZ4gZ~VSE9tvxi~@+gLQ2p{<dj#A|#)T=_s_OQaB9KFa*;
z5xn2aNyh9jZ_w&I`~|OSkD<$>ClsoTu6w4rF~Vm&KCQU^5JtEENh`V2O72P>`=Bju
zyz?@<X=+b`>Z~E)w^!`fXk%2ykqCZ>8^w^*TU{B9L{-N4*`<QTOYs^wG+fad4wg_%
zZmFb^yr@m0bhB_Hm+Dgq=_x};A1k2U`s`U;3ND0vxA?u~rt$@}<AcTggT?$^Tg<CR
zZ<XQv&2p`vQB}E(;_?nPmu;8hUQ7Mif(ic}>PBy^R~>`SZ*WcosdL3SStj@2OLFN_
z#Mt;4%TGj|QJ$;wYn_wRoFiSH6iRv^dy9awzl(wZ>2$Z1>>}>U{@c#S?oZ+(!Porp
zV8xnPt5RGU!1LFPiaO3mu8IwZzH>d5sVl)WsMg@^-}DiKhPt~ZGY=4DQ7{O6@h=ht
zQjTWM#_jJ;M11}}J3oAQa&qW;YtMN8ZHMf>9lh%<RIkmnub3BiZli#O^q1aMairF7
zT){HxvRdK#p@foeO{cNuKC)=`UpxqYg=AD6$a^Idoz|*NGR`Hi>jnyWa$UgMKP!)t
z|J_bs<7X6R<>0me?-*Y~hE}X*{g|NQm9Lb1p;P#WG-Qf&JOFzL85haEL=dr;lj~-=
zdfF8+f&Mv3;f-A8^-WOkhSlT3)!66;_U(7WZFyMXPQFQgEQ|39!hQzTtd-nrC7=EP
zo0qR+!VQ@QGc^og2c~VlA>K`Q5E#wB)Hpi6tV)|7$+?l}(kwVhUJsSaceCYFWpxOz
zLo^4irK^F6K*#r^4+ca!GqmMGYH^N=ffQ(;W<K^#(y-hmalGeED6($z!0O?Pj?`Aq
zp7=Fv4$eip!eFiYo7{1%2bFsrbiXc8U~YUA9MOGR_Ei$d+1=0Rq|*O?_Q?<0L)xFs
zb@5$C(V?po6R)1FW6gfIt`1K|jy5xVzawd#2js;i6)2bQN|H?S%sVQyezRm=?Q{8x
z^Z7ZKZyZ1-90O7nq9hVE@IS>co!*~jDQ6|%@sgM)Y0C#4TcK|!CgI9iSvjDee%1qH
z3|=#07RwAQ&!7r#IU_bZ#*IGImpVuZInXkbok(1AV5wV^m>klpRG;<j|M!7>T_JKc
z%;AG2>VKXkiuU>M5G<BYmY!nqBep}eL?$_6HRnz8%p&|b_l;8v`V|Xu#aPv|-uKby
zUb^R6yz}n|J;ynMle*M!wRT9w?aWU#tI);)6`OGj?(n&<X<HAcSS$lz9Xg$kaf5(j
z1x0c@O*6E$kv&^Cek0rjMvRJDaXPP!q7!x~A$G~h{PL2>zH%5B>~*{Nu3*9%$DxsY
zN$I=kMEyS{$)~FGZ@25A^dQ}S4Mzp_nI+#ShVAw{zCs`1@rIMT*exE2Va->fPI?xe
zW`6dCm{|e`f8`*Gn<wVu&d+nH3EJCY=hkr78rB@}*fY0LLbzqIS^k%LfJZ4Ku}VJ)
z%P_=FiNC0~N<4JqN_OA{@&+x1Py^_=3Gqxx&WdIla+WKaav9>pOVYTu<FPryP+(@)
z2l>jdcD-UnZA!@AF8|bdy(=+S`mGByL_5KNv?2#hHj^AP@ZJdu9F3i6%?BL#{_`2h
zvKKVKJ3d#~NfDedoN^+mtMJ=#QqO{&4eS3_f^IAW^r7#*j9j}sp<OPx_D})vkZFeK
z8%#WyFV|XoVj;`H4<s{*MA|afwM%qE%A(|*^2gicn09tP?Ihn6*YPUul?}OPzO?+h
z)#MwFncCECs69Co{J&j(q6<~BW2HU2<@{WHzroG1qi=e7`bw-54yROe;9VJNS72H|
z$RkKou1=T6yEf;tTp0SU;5h6i5I8T3>5VoGqlomIa=x4(s<whRdpJ`v&>l&C%nq9&
zS^un$F&?Wt7_K56Wf?@p$6v{vme`Lo&2j{y#;0N8x!Vvy?a2~0g!HRm6GtJfjBBiI
zk5tAb-9-PX_VuB{+o}q0tF*7m`hC#B{%7l8rwY=$Oar5XQq{l0P*(8=3a8-O7BdZ0
zPNaPV1hnoPczay+1TNOC-mGmv-PlYQD^(R;X`A*p?kS)lPTD^EVU@hCf4`|xD<&;=
z_Z>Z25_;O;`}WJap-*&ic)})5(qJ}~WV&E+D$@?&0xCIgnZN<KRX*lOG@7QKQ11%G
z_m-ruZv`}WVMJ;_KDC>NrqVs&y1m)@!KrMtbCG`%y4{Hwu}EcG<iOTo)Vlj~-SVyg
z_<!9=p81eQ6N3R{SGrioI(&kJ(JhPF^l_JO8@Txvahof7tWNj6X0A5Hh<e`-Hao_~
zVt;e0LVql>(i&TV>os(yooAILYtW~UVnTQtse<v{C7H`%7r3hx6?od({fY`#@g=MD
z^WVIR)rxDeU}Epx-Kfs<Hedm_jedMb$y;xOAh6{)#Z64vlFA)fgg01kCp)aM-YZPh
zhpP<K(V5Y3E}~7@Wy*LveD|}#TH|icR$e^rHN;P-rfw)qYD#ZK>BC&1iRvub*<2Q$
zZ&4zSlJ8C)wUWo*y=Wz0J$T+q9^R*q_rIh6`P=h<(8q7+e~!PQUms{r=h~^))bQr(
z4al!yR_(~f%AttBc58q2fd6y+7}!VcNA#bIY5NHc^IZP(W7_^3&1N!dpFZW^9^U5{
z9^PLyZtlazjY71kGil1IH~39%X;k0Lu3m|3e3LlEuYqH!|HgCEN~MQwvC~Sm2=LQd
zPycO8kDO`kk>>gtzfM6Cu;emlg9L}$=n#w#lN2Sq_|yu21S9r)pj>zP1f%q=rBX#@
zobQ`3@kE?FCA7##!InqINB6(Y=yD5whLG)$_$*nEAI*leAp2}9b*d-6WPkyB5N{u#
z_4}-lArF08TpvZn)6@B^Kv=do93*}Q>nC@mFtoAZd^A=xMb_wBE}k!<(rS*4+H`r(
z+$9p@OM@~`uOZRW`jD2#_t_0^Am8{b&(Jn3X`T#6XX&Y^P~Z3-uTD@QUY_sWXLVSf
z?!kmUA;t5CQ$__-4>AFUW=<Z<;vW+A`*xy>E&HRV23MPt+;q80hG>NkVKU7}sNV82
zyD3|>1rsRAEWaG<12gQU?Sv*xGFpUU`M!93|MYQkdjG-G$Gzm_e?8?L9s*?|RD^Y`
zFR)B)r()Zg;sBmNVZZP`Mx7P~dsiCZAK9HZDh7z=WIH!quu<Ac{^9(8{I;8=7&>gS
zQ2vqM$Q6hDL+EQhk%FedY-QJU1<NbY-V}2(Oi0_{-u<Vik6+lNIhI~9brsV_RtTAd
z$^As3>EmO=aG*+Z)DAabv=f&bIGd*9GF5!h<k6$2$-dceXxau~sfOpY|I)`itGT-8
zGO2n;HM?|jl?^BAF<RR?-IkZi1M#q00#}Rx$TW3?1*R!Rcds!hJ4QyV!%8a%Xh^#C
ze&m_p#PlGcV2aO+a&|e*XulTG$xpgElaN$?)-C@zY^0qZO{7Ko{h*bcJ-gXr)1w<}
z^(5J5vt?V`JsB6*7sK>rwyma1YY?qJ$S?obJe%HZtMT*v@}Fq$pyi5sCC2|7e42Oe
zba4<R4V^kIrX)MDBq!XzRM#e*4yzd1I|}1`T^-A}DPze3^*IQOJ<ViC<ODwj&>JOm
z2oNB`HbmM}U{G|eIlu8<8D0VwlXPNy;_;_WNE${7SIB+ejx}P<jfk0u7^qu5VaT+u
zNimrZnZ>$`CjA6nZA~9`!sX5m_mVE?!`V|`Plg8YB}DrOVk!3wzUz2y@PrZApf4sF
z6^5^Xv!3bICRvveGz~r$25!dvD<X18cX#twCSgM{q4?CddMhe*@-m+YkiP7>XF;@)
zAp!y?=Ia<zhF0hg=L4UtUVA^m&B+-wI!;euMCXBI*z&;LIa}C9kg&k6IG}i$IAU^$
zv0mm@m{l6e6q1zB!C~B8E>`sAbF>5yCui^==jS7mLm{YbGBy9!T9Y}x2oFroxMHN2
z4(05FO&3`?-kWK%M=UV4s$T@2bfR<ONvGv7QyFWv|HIefvFZZy5G_U+0w^yA8Uqcg
z<VqH#+0m6hzi|??dnAyUi*a;kpUkId87f=L0OWaUM4O6Iy<vi}9pwS3D~?o4j{C1u
zlTMRCqH3aT(*Eb`_u67C^#06cCDmxlO{ZoDUN?execNr-WV>O^@ET@T?&5n+g?czl
zfgrLbs8aHHG@(t0VR4*z>955uJ}8+3=W7LM4N26TP^MvH(qo@{6wBR{Av=4cAlAj5
z%P)Q@>5wEBLjlOTlk6ia*-Dtg4&_ru!U91*5}TFvZ{w)&4~KHx+GYMPl=L__kkR4D
zySuaYD4p#!&@s7001#iSUHU<l-p$*!+dFlwi>fQJiv#K7nH9s9vc<QY!ZQSGy1Lqo
zNL2dvVB{S4bt_-cXrB2J*~#}{&<|Pf+<1d!fr5hDii3pKIttguUq9i<trt?T&)={O
zyF2ktW(ftGN`ppQfgCy0#59EV(6Lsfie8pb&Q)FYe)_q`GaKJjXb@|nD&I_C?h{;g
zIk5@w`L%kHivSld`7L(yYX!Pd2_b?3<KIrQbV?-qEm|(6h4XaUsTh*CoNfgX%DZF3
z_LT{&mu@8niJFI%+dICEcNGn8nphR|_93Y6Lt@o$II$`^sp}<HZPlZ_FrR9>9%$}o
zl#hA3u|ILmq$Wk2B;j>59|@K5inh;a;(pTCZ{1J&dUZd8<}9sE`f2pYh8_K4sY27n
zRH1<E*HeXfkwu)?Dig9MD?M;wSpP+x4~5{@jBGDX5xjz0yhKSQ25$gI-G~U>6<ZH(
zh{JjwC5>;&pmfa6Uuf;@uE(mXGy1@*-U+Yz_+ul<AAhXH);8r34q_=RMZ6|Ukh!}V
zzsknBLL2tkg>o(0oTdyF&U(S=S!tPPBuGyf4q%LgB&#2o<G7?GAr6RpWhwib^4G51
zUQA-dLnU*jCofs?q0=8Tt2zff=vA-$`_Hc)OX}JqflpgohId*}XcUqFW_nrk>xc%q
zC?W0V8B?Tfcf@qA6ZZ2DqIX;GhKXn;d-?Ah^2JO{Axn8<Be|66eLKyK#;pt25y1N-
zaRbyHI~h1B6zO>TyZ+%_-1gnS!!+KfPX`@z|Ma&UGX);?3knkhyE6HB<~I}<Nu`LO
zU17x4XXP@4PvhAeJG#-ce4wL-YeLG9DC2ayLW(w7=>g-Bzt`52(`3r-egPNbQkN!+
zNJF<!n00s?YRuJve-J}HsLa1nmDwHDUlWYvw*^(Qo(3L=4y&HLoUzO+C8nB`aHTh!
ztqy6~+ZaxRu70cGROOc24X06T*>pT?k)LIgaCIyOe|1HjJAs9vL@UuKpl}d_E;n2q
z6L%`fi5uXgU^qoAW8G@6Ld2NC+YKkekllPBemEjjnbfs5L{Mco7R?t(ZkmvloMiHI
z`$7sm;E@aC#Q9jh$;J7wNXk>R&^m>yvXMr@6Pt<nZs;P)v1&FDp|-;I9TjM`;;i^1
zP@p59MeXa2Ohz1zORsuyENp6Hfy|FMFcO6=u4yW2p3etK?SsMSw`(w}oZ0u>Y-G6!
zsI`kA$=ex^td)tj!l%Z0)s0aknWzImp&+(@on<fePgbiL^H;qU&**F34c?1w`CyDn
zMqYP|W9)>M2(7txeDZDb=RbXNN54Kwc5mok``NShU~u~N*GHq#QCS|HoSgih-Bvim
zWcThTcki_C+-ZOEr_;Olj_&=((Y;SPpM3HOp5tTzYWaj`vwvWUwFq!LdlEIbGy725
z{O>Y*l}?^iq?1kNT|@#-XpM7=5Kt~iD`ypP#YYd>4~kIVEXKT*DRD69JbTu`+9tfJ
zYq{LqM1DiQw?76W@)Fh?{FxKKy@@DGXrPT}grH1*C6>=fVkkLeW}0PN6VJ5Kt~6Tf
zg_#<v`mWAJ3}39U{4}|sciO}JW#&t`DJK6|@C_x560c4(rlMTC%D2ks<`M^mZ%y_w
zJSnUlZZxg!z@hNzL8WKP?4NUt9i5dvxyu*a4Pdi&cD@u^FbB-XoTMa_AI`%7b(PG{
zzSs3efb!`aeE%vXE;#&QKiU>rsu}&t@psqhtbg^_S6@6k{p$ametYNsVE*htgw}BV
zHWFC%#Wr3HZHUOiLm-*fINsT@3?`ROM@yPbQ;RR-05H7ZYgQ~Ol&l$bw3?{@>+|b)
zGd0{1O=-zs4)w#68uS<cEU(jK#{H|fIr(l;gV9TsuY6DwzlA&i$#xUU&g0}_5zrz4
zK6jN52h&XBY`?+Jc1L!0{5h>-=GarZFemd7;?gl9R<`7$5iYbLGdO-^j~qX$|LQ@P
z?5Qe-QXpN7v)6L48?oUc&^K05r;6yOpnrA+Ho}4n%4;`|gwrLiGl|>gB*bDIjLmW;
z0&u%@c#XQz+`J`M3T<$|IbJQtMxX_-LPkpI#zUgMmJ$b-g`J#WV8<82d|Lj8D9ch}
zNc|~rmuJ}_Xu2G$&$Hj}#tR}pM<}m;G!=T`AGtN<XnTR6;)n30pVdDj!qcJ%&z<{d
z(vut|{>J!rIAp$)`Y0a|p&dAHif%JWr>a<0TCW_3Ap6%>AS}7^kOLN62749n-Zyk4
zuoGW3ou2Q?EIzqq49qZd6tMYP9Q!jCj5>T(=kDIYnQnek)kj0vfUl}y$ULX#$R;i3
zWjwEmeyd~qs>ocZy6l~7fc7R5^96CdPKfv82NPr&S9gPlqfP5-S5NjJJD*?f?0n}~
z4}ZaBB7G*wkMq$)D#hPKazo`{vCtwUikLWe4CR`i%r7o79=6=YtZY7<JUT%EWK6H~
z8w4lUAEZ-uNm@7vmgA}=yA1ttwv8J6nD!M9th$+TJyVt~%oK6kjM<)H7{1<XB`-<A
z7yRKW!b3D>0L1OTJTT<u5X1`Ykf6d#%SnT*2uLcC!^6_s`zi>UXQae^)c0=H5ENU<
zNlx3GPW99A_!X_}xxUq6oB9NZX%Vf{ykm8(0k~PRi=1)|^4~0#!ghj?ep=^Zd|sr}
zfhM=0O0phn2)j+f-q-W<qn)#F{cGBvSCp>i=dlFN#P{we6*}8)(_hv~TU*gd-5<Q7
zQ;FNGa_7!Y?W=?|QDy+SSb!K;;GE8(k$(C=e59W5-fQ2v+rInfwpxqYc=k{~bUC+6
zipKsowLLo3h)aV_lh<2Qi=@HsYgUQ0_5Z!I<Ng#>l`9{S0?c@k<L!}+II;D&K@5N!
z%6n^94yV{?hFsJ9_|^_%XCm0l5P5r_u(%YFB^+WFt@0$^4Gbql68kU5MAm%S#&OnJ
zF~^4}JytQ?EbQ^4Px#-TK5=-bcsb||-1&;=8_3^?Q{sjqpnKO>^#b2)`vTvD7x*9k
z0{=rU@GEnZ)~@eAZgYKaHow0Ac>k~OKR#UF_x<`7*JG$#s!DI|5^J+vYqp^$w!Ow*
zF0RgM&!uo58^!`-T_~=ES;{L7j^-t!-w5DY^4*K40w0l?E`0VNEwev;nq*^?YZ>Sc
zEPxXEa~Hjr-E$J)rZ-(QSucOOgmNsJ?R!T*Y7<=!Ncv_i*wJ4hwru;w)z`u={WSvD
zwi5WJm$7MIm9)_jdy>cT+nZI}itjt_V?-eK-~Bz;BzrtEj_U^05l1(MZH?w?wM?64
z+W95VFjwJSd|z)fSGesFs$p|gQo%iSe$D$T+%hZ=z=$PN-~|oR=}S}+y}X*WlFMn9
zjq#uKW~Gd9u0X)iT)C%Tb*?2#It}~!x@;xosFjQc3C;JimAoFV4TVcDCbhYur_QfR
zhq<Dahh%@V7KZWds?*t=r83<`?y3%00k3yG*FhAu`3uhVJoB!YUua(+2$14&Uzq&{
zv}xg7zpKO==V&`Xz*X!<sg3kY(JKaExd7OuP4yR<Ysy{zvQv#T6b63Vnqs1@`F2^6
z5O6t;fb^v#d<=x)jWC!U+xrcc)ZYMLT1g$k^jrbtCKF^#(Nki;zj01{S=nkGlXp~u
zBomJ;aP*)X@KiaN>D`nfk#&8KbsL-ChAPdHVhSr18?V`HSGT#Pa<Z9<vTZGeNBvEa
zJO^Tz(z-VrR3um_ytq#Rp9>-Ma6dCfQj)5T=h^H!t9h|44&q#^^>L7$oSf5qHq4qw
z-Aun%j#?X@al>kb;=gMpNj*`McRH(2$kXMb|H@G>QFgovuvHzv8`L%v;#<iWp)RY<
zeJ0FrRhsvP$L6(OCXugmuF*oWb-8>E!Fubr@$Dt-dScVBG3rfa<u|{@<k~l3Qf*_-
zQ<zFyv*$154@q1q5h=5fV3rRbPaGsst}O5d4E26sH17>dLnsn?AY(e~4~ud|t_eSK
zP;LAnzKvRclkk($dP8-;GLkvhuIg7>SwBoCsOXovI(|Od$jh@L^>yS;9_!k#@+=TC
z<PaHs!9YE0#0w>Ui2+li;dVj^zL*T8boY3^JwaX??MkDyUN|u={3;GHb16dE=$s>p
znOT-Jg()DvAMiy*p%4}Q;}RjIh7Gym7$YkT5p;;k<W0L;L3_U6_aUDMT((lk`M;!w
zM#WXYsNP)o8GE4Mx^5e3Sci~%-3GHpl3iRNqHSNHv`57t9kv{>GZYp{U^$ScWx1q!
zxj0*O5MlO(4U!g*gTq<HU_vJkmun~rjl1){=?l+fF|(0HqT+8^Ry}5Z?v(@Asb8O8
zQt#NFL**CIG~Qm#c-QhS;IU08NO91E+Aw_fm~8w)67G_5#>VPF<@{|R<-Ti~HZnBF
z<J?HDeaBL4v*ENd-kK!q<T@|Yu3_%Hy%xDeqvsl?%6B);4GfkGi&uw$CM#)QK;1UV
zWL3`^BAkU0Fz7UEBq6W?&v9V7{3@QIg}O=Vkd~#6$iUF>87R1BV|_d#p1NK1fDBD~
z=zypPuAJn*SdQQ{)<^4D$3dH$VmEP<>xX<jZW`?SCaA=d{5A1@erZG>?(q3A?PpiT
zaG<r@*F_eQWwVPK9_xv3v9kmQrvhuck~=T%FiN@YtZ<aAJHuPDg*pq^R)-7d`*y%;
zLIyoU?u)E!lf~xtg-|ysgDNEo8WWept*?W^aFoqfNjf4>JVg)NKehN28H`eK5Ngg#
zf~3R0mr{~_CdnF1#C<cH(r`bVkdQy&ZsrroA!DtYAw56@S!<tWS{*(uf03xb>MW(@
z+fB54&M&XexPpG)TfP;|alOLl>oKp|zrYVyYjf)w^6ePkdg}BR)a3hGgIks#3kvfu
z-8V!-t>cYIcJmP`@%`7wyUAaYUE1X#P86-*;bd^J8wbL1Q9X#jLPa1SN)d37mvgIL
zHES}Y`?@vGj=3RssQvTi{n{}&zOb~;mIu9Zb<4H<o?6~U!Z$gkP3b2FdkVIbGy~kO
z;R(DH+oUJCg#`&jxve8xS@c$`QR|8M3N7zgD$XU(fPUew)jL{QtrH|GJ7PQ-^cV(6
z+EQC3ya)pK#7>DGT1<U?K`;7uVxbim`LKb)G^{LJ*i&8Ea@mP(^iRFRGg|}bTWj}M
zD$#FN*Mt8h1F)4y{<<O4F$|3mOVn1<KWY7?DpP5KNDm>vJ-*UC2o^oAo0!-K&B7P4
zpl#BMmg069C{7x}#_pE~ohG+bAjPfilQNeSuG2%VI2?GFLLe9KIdYCBri?PO(x-Je
z=@kSUhjLzSO?;&$yVhi-2TVQqVsRcyP!C-nWiUAgUqSJUY4Iu_NTgJmoc*mhZ<ZPF
ze$xH1IFHK2=9Zm*#sd)v$=*i$Bx!be4)T+{MGFgmjwgJc;Oz6DE~n|_s)b~C*jjnW
zE%<Qy*{}s6e2U<&{31D%ztbTjnO6GMj_ncYnmtCA$M3{>zla-&xPEU0wlQdDHDF`o
z&b@bHZZydya<0Q4eS2KLid5=BOWzvGkDI3JksL$KUuOG=SyvS<?ToGwU7fXWnQ=HQ
zChksfr}g-4$te65cHs)2&^dc+xy)RD)d?Aawb~FMt70ke5(D0{?<0O+De%y=E$?ov
z9mNM2!glQy)M8+-pifHZ(bGy)GzMn?-xVu#c@1Mm-3ZN%ZECr215*%(733`%?|T<d
z>ytQPy~&0HiG|QmMXO)i65y*S@PvdD09<hyctvNGaFl9fHIMFY*AQH3eEzr4RO16H
z7+(?s`&fK((%auozWt{20XX-)0nYvSV+LzXXS{q|GdA_N>jH;S<vSrx^w;0@1)-qm
z$C`-xAt~KH#2wuq4t-xFvR%lDU%MB2e|bmwIGoe5`?O?c)VzOdQR}TFn@)>q*qKr7
zHDXe>Txt5(N!i^li19nrFb&kW*&wq<SzG~&f=Ur;JZx>T5VN56k=cxJs6xQ7Tg7op
z49@g2OTJ1c$!4g|4da(|njtrMNezbK`ZD5dn2k8FZhPk^a_yDA*78c<-cLW9fal6$
zm&WBC-D5JLO)E|0@-M<9U{2)Tj&OT5u28myZY3#yAej1gs*XEtxvW+e%f|CjnQUwP
zJZ?0(y}`5DgsG=cB@rn(%#L=P1)G3BF_D61jK)wF%n_LupY2x6TBtWe@S3<7=Yv4%
z(;mv($$niMVFmfMLGy?dpE#Otb6Ob_xCOq0TM#jB*ax@z5m(}TL_dv|Urg3kwERNC
ziQV!<3Qf2am4K`z8V=iH1HmO&3g&y2HLf*$8zP{`RL%F;Nyw|w(R`zT+iuFNW;Dd=
zG$lp`MfHe8=a8hv+19LO9w4pDt#`HcCH?vjajbQazNl}IjPu&ib!hJLj_+}Jvm_Pr
zs;T?ir$sJk?wzGaHm}}$s@}PyIvWkQb}+duYV-8jQ(0{MwbEj%53ymKNjSdPgm9zZ
z^&Ri=nBHrheO)ZDb^k5)vM(aG%UB>N@zHiY=$rjp&PfG@V_~(0;8XAOt2;#2=%{|N
zo1T}&a1M33n6y7lhS|leeV3VBo5<WO+x_zEj810qhoAbh*B$T?NIXA(et31~%bxPd
z@Iv6COtUdU-`;$v;J9W5$7zOTp<P%$TlZKkb?k-xQZ3KuUf~?FziiJU{kCT5Cfjsu
zBgU!ftRo$5WT1|zshQ{>5~atZPwezLFQYG*&}SP<^#QTt5{H=9nmz@>64ACgu5&=_
zZ;1B3rt{hB^_U%ft_f1bnB|TycEQ$)>yF}}Pl|H(EGx_Ol6I7DChh9(mnUFL`1H93
zaDRyg{n*FFHT`$iztY?gZUC|q54<)h8PAX9j&@Gc6FYdHlGu`w?6tr1yFG1WueI~L
zefH!YBwu`){Iv7C-{lvHeAD5OxG%o=BH6o=q4Mv)ONS&z?b~;M!B>ZeD4#(Lw=5b8
zQUH!wc9E@sL6seP_vfA8{Y-;k<#C5v<B6NNfQZp;i3@pO;0L8mF57^3()-Vk7YGWp
z@Emd4zbeXXEao_s0k}$aUvk@ie};B85g_p9`T_)x^1T%xbau<khHHxz8=zxUZF|Y)
zvcXD9DPd9lp#SyDDV>Zgnn;Kt-KRM!*z~zj)6xvEH9Jx0dczy7!G}g&)zY^%fJ9C1
zej3FWp_!&Wv;^z4c$p>N=L4c08+8(?{@46|&<oat8jk#o$A~)I8g-GzT&ql9@aIB(
zL?T|I{9#ZWyu<FNsT7f#T^C6)k<8!=y@dRbHgMz`DmD5?GMV8Pljm577(u8Ta0}&#
zE9T%gNnh3m;O)8BQivjw^{Vf&>2zu@(ig-jFqgPkfcz|UF`oZMBoeREZ@HtB$!?{&
z)zKi87v4M4snc6XJKrqN{ryEzR3n1BT*>-nF;9i;IJD9?^}NJZa&qrmHG8j@;CnbM
zE{jh2%JMVxQoj`-jEwL<=@0}oo-Y4%*wTC7qU*bAWc0Y3fj0S)nrs>F0kuQ~WdFy>
zWs5Fei>7eUl0HB<?(zHkTswpzk4iesG_?a^b$lM5<g;LSYVV^fRJ;P%7-zMvAm{oH
z{{ET-Ur+GZjdPLDDrvFj#p_iWsC10k@Y}S#n_=f1CV^jr+YAxj@{3@&B)RV~<g~?H
zqS(s#hUjWqD){#A&z{3NDbKSiQd`?is3tNzyJ)8Cn(1mY5=^(UHxSh?ox%)@EWM%r
znBYAog$suo#{=E_b5}e$Hk58Y?iz#jMC~KjTw5M*yTf%p@4w7uovrG=Z>{{cH&<RO
z{3sSiqPjU-lS-`BuC!Y3hvk&$yVzt;1VR0BX>uC>dJVlO>G8LqOB{r}>l)i_aTJNw
zg5svx4=fHlM1NSfp__vRhq3;Ewl@+RqWN|%^NWL3GQxtnf2i;MKhKUQ)wWiKOVL4z
zEqEvZO{;z6w3U-=7L^C1H(<@PYF_DH>(0SqTV9jmyJ3`Rqh7l<bh~=RXspMWSEz@v
zG{aviO>-_ZUkGwxN<k^Lz&1d-(yRg+Npn)c#qy+rKEG5N{Ry%PU<%t7ksWed)+Q#3
zzk*p>_`_iCGTSipemWhn9yNtl$ksBLl-Ni&^EGx`qBm;Xgh@y2HAa?56*@L~aAOYi
z7E=(#+8-6Kn2(19TqPGEP1#BnQV%X1T1!2q<&2-V!8mX#=eN&ZgX23*bw1AjInT`d
z9c}y)uP#>e7Eat4^zW_QwvV^5Xfi{Gjiq-*P7H6pM-bCWeeCx~?daIx+{=kJcKFU|
z_78u-tJ>@E1qq+v;Y~B5OLUV&80G8geeB#1#+vMZ(n{{MlDm??!JOAOwGrEOZ-r*f
zb~x0|%j~9Ubg!bY2YM*6oPW(H=`mtf&loq2GQM4<Se?uHWKvAIav^Ud;%YeHi2f8X
z=BsSfNnX_YE?wuYLw>jCV<TtvE3MC-Ns)F7E7niK$QAi*x%d$``$6b<N3qe)kA_HC
zD*)Sb-}Zd$Gy6ZAym7=W0%y;U<&O8wc}d_v+!tP^!P7ZO#`5z{jNlVdKGz&5kO(>r
zU9lTbI#DjRI@Nu{H1~?v{WnxY=fBOr21)F#^7nsB)qVck{Nr6<<`Lh85SU<9{hfPp
z1FGBO*75h94@Z5iyTCw~9LC!SVz6u%db<}zv3r!<=_Q>`C)fpUE)-`zY{rUR5U1Ma
zP!fjH@sJjIH+b6+lH`hbU?hEz_Gb49a4ugI*SjA!$9CZviH@=p&tFHL)D=-*?%%yn
zKB;0hjPh|lnvc}&NgYh`*V(W{nGzW80H|WR@h<nh%fJ&E3m(|5|8cwUbp}XO-GbZf
z!redDcHv6e43_`Hzva8|JiW}vsTVBQrAWKa(s6nzT7zi@yGhiZY8WGZP*sELg4D9v
zRWT@!U?+)$@FND~V&EH>Ajb(GmlCwls>tk8Fj$OBB2zG=nIVTy*bQ#IxX>&Ow6I2q
zYF?LYJzy%@N`{#zuwt?*UrJQGo0jHN`6Tbtz|6=))pLw!`&XnbvTUDMi;|e4YP*2n
z=Hpr8U04HK=1vVoCJgE4b*NLKU{**t^*dV4V*ej=7qYMl-{!k;Z^<qQkA@9y!mj8I
zwxgab^B(Vl<x5Jno^oTHCC4f%GExYWsZFO-x^e?8)%-!DSOp^WtAcL8ZQl&HF^mj&
z+W_5A(`Bt+{l5NEFkj{X72>ggLv$7-lRYgi?Wk_eK~h|HU6Yj_*j?hkSPO3n5Jr--
z{=&kzw}80x`?Fvin^?bt>8*w0(Ky}r&GZ{j@&icGTLI@(FmrJJKcEwB8=Yv;A{$|R
zmQJ=s5JzZATf~UzkClWE0a%(@kt5zV6__>p?<TYgudSVV5Dn|StH#5VTNXR}u8>Na
zLt(cMDIx$G#rQIx0ho2Ei6ata?|c>}(cAlW2{W8R`-JmkNF6hIZi9|K`y}Yd-e1xW
zcl3XXVzh?QCKk@``HudD_v2<4SnAU0O9@L_ANC@$%Fzi!3RPz%$Vox>qY2++vAW^#
zP551%3dqG|DiJgs|KbRSi^^FRZgi`lqfLU5ZWWTW^mOAAPqWMF04wnL`h;LmG0KU9
z#>A?Tx;reGDmA3m%!<j=>|%!Fnf#G&LpA@!9sEDmFAKfRIk`k>rsLXamLATF*{m47
zVB2BP%bGpN+sTw)Z|EgrVAGc<GqgP}X6=P-3qO-jE16pGpwGvzzr7iUleZ<{x!%_9
z8f>rn&ilvvrY|wUhhb@{_d!HwI0DUUST~#gBZ=i_c#^9u9c0u08Ydrx-<I=p`@w$+
zARva+?flpH<KST!1n|xGoc(%TBpSaYq^Nq}eZGCiC)rsD=2C7GE%`}?Sm}I-OB^3B
zf5~V1d%r9@bh71+&u%6K&*G*%8O|^Bak7sxY>zB}P)f12lDn^m2OkgtJ|F_T4I)5|
z*lz_9piZqjwSyW&dL7kHBwhO9B%5w_F5B`FozEy>tm0(>PZ=R*6PZ7A;?r~``-*Dh
zxH4+6ZjB{NW3E*eL-8k<@ogynZWUeO5$H=it&6qwb*fudD>h1YVv!2Dq86@dT)h^P
zyprQ`+wU*C)#<HQlBV|WmPK2GK)y{y`BgP&wpXh47HR;Gj!)xhJ{x9B*Y1{uC1t~A
z+`N|X;J;0<#?PH4YbUoRt{=O_^0Ci}!UCe#X_^W;vIfegA6;BEcH^S4%RFILH8vjI
z8ueoR=;B(jTP+n!4J7r^tx+Y`j}8@LAHI_UvEiq%0-cSrRvR{|2rExjYv29Sql;?e
zMP9w%nCSQ>6d9XnWF#m$q8O5|M(UNsu$mAEQE+|v@bSb!Qk4V0ooGJOV47aD)9y`z
zCt3QFF`e~?MY%%I<VR{k=0kiNwf-jIC#Cg<JgzbnDb`Qpvg$CHO_0JBl&g1nTQU-e
zE0`voAbFFAy7sF)3HbC}p)a2y7U9N|@W%0@(QvE6nIdCvQ9|oVi*fsYVK3G%OEApG
zFJ&I7iL*d!rx!ZOv0`qXNwq6}0X2f9;1rKR#GW7@YCf}iLtcK8LCJRLYRfL*ejm&3
zr&`9!NCBg_>tkhYxB61vSfZB%>pU!h&PYq#tD%wTrs)_Elrq%3bdJ_i8CKTNb#>;k
zdc7}bkeS@)e(mPt3z`hczp@-D%b1*m#0U4|k53>w_CNmkh|igOkw+b8EA^W#Djja-
zJF&@<rm(cBARAh1Z}HoYU!}vw_u`5N08VCYaNSY|J3AZ<<hzsn>}We?ZlA`11my6K
z<rqsn>P;b#+uT-Lx6u2hqNZ<ARzup|z}eMs^*-cdeW+FOp;pCvTB~9Wt^Cbes`xha
z@J74%FQH?L8;zIZRQ26;l+@)KYDIqzb>~V9$1u>5x6w1p%adX<pDfdj(Q`l0f7jA}
zSNneP<_f)+@f8By_RU&q?P{-cIa;ODzA*+E$(Aa+;fit0x>JYLMA-XwoSe-2{j4lC
z`<%Xbj4RbsaVx~8^AAIWVBzUe0or+m<kxocRiP5fd^)6$29rToMXvQ(jKKn7m2q6a
z!O)h4!cZ$I5n*Z=gh8%uTlStBVaAVlMFKE}O23GPfS*+1(S}74y2YzaE5NJc=6`a9
z5{~>85U>#Q_&%<~7JLx5^*wA5tXs({*x1)#w(^AtCyn~snx#|inyp<oRc|@#yR1*~
z1r6sZ<%PM~i}^6rYoQm5lW}W`ZP=vtkl1H-{{-JG)NWB?&p}CQC6|U;dr?~(DhI(p
zH_#3m2me7o_#X)pwUMS014VgB9%52Do-?%Cnu^PtBvuaqBxNn$`S*jK(xu8--A+Ze
zWFvUxEg~n}3OM220VXt|3ap#XzWbyoc9Xv(yARUouE8P8Hf=NchZ8}DX+OIvhA8B)
z!3a-+(L~kjS;MVYmOgh_Q=Lsm$i^@>X6gxBKhY|TfjPclt{@7%+C~M}r}MUJcpuDw
zr8X{H`xYad6$LWtZY;@D0{33~wvn;o-ShdloMkDix(a7x!QW#P3+jUeFAV%x5x-d{
zhzssYT%bORr*xQadTN6h!*9}8=jn7?GR0V1^X+n0BmW(6r;D_o4|51=rLibpS}YrC
z51cDhm*ocaPz&Xs^K5$4YY8|TuxfYibdrbm81GPq)%S?#+7xYMKA9t2S)b#UTq!Ss
z)FzqF;g5g!;%R5+ZinS^-AuYtvYGUo*iOdTwLsL}3m=q7itlydFaooPtJuVda5(iW
zRvPX%)-?!sWz#OLT7Jn(WQ7kcQ@Oa1Iuc<wt7A4~N8US3ZJcPCx`@{mzXUH-^#E#_
zVqaE}1b)35;)9tKrDBXK=v^6*1AH1}WzO!DXGIm!DZnQKii*!`mqSRsodwks*Ejl0
z9(vG`)a7s;<&h*-4Gn)+qQU|@*gNF?n!FI2q1LLOu=`CRMx|Ysz<@Ta<^U~WD>yn)
zI8}$c%*QV)k)9#fh&%g6FRz*nK#6z=wXb(^F={`A<Yu=c+2&kdA)M*r-h2GC8Spff
zlsfAvdutj;3nua_!z(D$oT(D`{lA!AvPjQxiC=?OuDR;H$D_&YhC7yK0+SUr#bg(Q
zm`tFTXzw7vOp~<gOe^XA^<{SRg<vS+z1~N7v)9oSa2G!DCJ2^zW5Wv5FBZo{@Fi-F
zh+qJcoGA5pyM0`7o7O{6d1UR4*432*Ep{!fIub_h>tW`^hTy#O>OD;30E)NjnB*py
z0>Zx8`k@3WxdNA`H6;P$_#y-YZ9b8+sHg@zdzkD0qgo0wIO7l)vf;&1@-Xl?OX4@(
zUzUik^2;kW7Y8?A{X0%>P`{~oW<#$Lu>&;vPk)&CAk&!nEDy7p*hU6|T{_R{OJm@J
z{DK|VPJOr!B+RjEJ8INPCCWhzg>w)fx^rOe>n1qMkD%x3&j&}L1SM8se3mN&NhexR
zlVYfa1*_;q6C)SyU0OQCBhW}_z-E&Z4>({fj-?foDRR|O5GPO(t5zJ4h(fla@Pc@=
z$H9BiQ2CKcpT9p7DM`eNO^j3`V#u~~B1_m1Qdr`q!H<cP-?9f4zv~@ov%3d@Y+tn~
zJjiZ}@qp#(K)b2Q=yHwt@NvBuJg>3ffvnT{pCfXF!K-UBztdVkYMm&%j58(7vJv8J
zd%(yeQY~uDE<gJ0v(K8UL(P%0LPtKU;eazI2vQp_i}j_P0$JCEldkA*mS=W>*s7nJ
zXX%Y(L9LW1F`Q@k#xvDwi5BkIFQ+llu<XiOX*pVAg=Rqi-AxXYUEHc{jL4&)Mic+?
z<0M=369!iQ#cG+H!X&f7^xnEui7dvq)7*5kbr&Nja-75s(9SV-iUTLw-}Mj6w*MXV
z!%3~#J?Oj%DBf*pT@#s$2;8Q|lyz+>;%^q2qAGZwGB5Mub>$wZrzuqI7Z^b#DXqB9
zrWbROoMPhu+XTj0iMB(;ac0g4ib=;W9Rp6!VNkijN9Jn*4_AgMVva}Jr>}mTk0v5a
zz;VUkQVMo&inFg6!;MIr`vTk|qSuXZhqIKOR?QF&cmC9!lDu4YN%H7Uvgs%%?V6ZJ
zXdbY6i0DO<N{N9Sbl4i#w0y&&py|KLOR>n)c*cD8q6r1VW?`eE+K&((!}7>$8di>o
zLfX%CL}LYKds3K1$}J4XS~`E%1yq?*gh#112~Rr4ILuxr*9gG3RGVpbA*fR9Dvlh)
zW*Rxuatj>tDSuYNJp+f}H;NjE_`j`L@3_sbwpr~Xz$fExmbwH}d$jHf3|rmQ6)26i
zCCGAZU*I>5qyFFv{NM}x?fC*LXLYGBa7|fzW5ko1Pj533dwt=$!Sl7i08x{yY2JXB
zj$jjI(Sr6m@top_&bV0Vnh+sz6DG0;-HYHp%Eyt*cKx!bHHhF<J*BVTx~KH@Iz53U
z-KM8Iz9(*CNjFQ-1XrV+tnDbP`O2bVNzqx-lj7O#bK+7Y6b-h^cqiJbXT8;aMCuH`
zTfu(a!*vE6x4kI~wuU!l!p|3s{(WP^wRtWNS6(lc<94N87sV*Qn|iGRiW?B~b-|(C
ziaG5nTES*|F0*@(UEq+g<$T@lz8hQKj>2?SjOFLj=FB`qLG0oE3uN$!oqk*0rQBw<
zx1{daST~r#KE$2}HYdn}Hu*SiPj)w?ymnAtGzKbEwq6QRMf7)Yu{ENLrl`e7PlR;Q
zAFDC__^FG0m<c7N51W$D!9`Rhdo|q*hxOhOOP*Xah1{GtZg@!7w-~QJ&d!1v-O_~^
zMu&s>Xmrz|!=MM>9jn@y6+Lf*dIxv3-b9F=CkFz(yvnod&UR5~-V%gn^RVvdPQ>(K
zSj>i7!$F>CYrb9HEB<>OTA>eK(a~QSo>Oi0y}Ii4*cHwn7AqoGVSs~oLhqGF$^UMX
zLQ*mkBU{#Bg5z=xwEOrHM7EPWhAmV-CJ+xKr5rC^=oJ1T4Ox(VJ$Q!wlC<v0{*2Ci
zOFSkmR98IcxZ~6ShfM#R7`GPI+Pja%#T}|quMJ#c?<N43hZXMUo8-r`7_U&d&rsvC
zmE3D3pZ*ZLB)B1~0y(wn)Z&+)vWmkoB)q5YI82HhAzz$$E_YGM-y=CaV(86+^W@F8
zas_X;e6|wxZC`61ESu2b)P5z&D9AUN-UOo$26Uaz`W!Ozx07$bLH>%=6q#mb=d&n5
zcU2sDe-mazZu7wE;j8h?t(`sY!Og+t8Lkk8b${6cp~^j)u<%J;pg_KV6dcigTK0og
z2leh}bW-X6Kl|hd?IG>Y=DPT<qv+5*tPv9@?`#dU@$HGo(H4Oo-->vAtGRk>5soDJ
z>1W-UhgkE!m6q%G!+t0U@P_<Yc8ckx2m*-9EN8^k#<)6%`cmg=HX0r%lyD?wyg(h{
zZAlqZY0S0Cma<_!hzf5v*?9OxoH7v&oAR!>$xU?>Zg+hRMf&*QSNY&q`3?J3?2s;V
zsJuf6`E^|_?+{&nIXquJZm{jIHtv72!eJq#WW9BWTp8<+;nTY-Tp62;!L}ATJ{yeT
z&L?#j5t`U|9N`!crn<ox?lz2po7i*^Z0Uq>d!inn&DY^%GDSX=#l5m@t!<R^%S#FF
zkkDX9@1W$-lA%njLMw+3rwz{Joejp&SzTVtL-TD8_AgGaz;dzfSzK9MYaPpMNL<#i
z%!W>}PpWP)ku?;&-q~f{^LLt`N7$b}92cz$;F5=11JiY|zFls#)(gfJeYH@&nnq7$
z!%PyzG$<T-5iDGVPi-V%g#(rFwy3SukoOCw@m|SZl{uPrJBv3c%h|_)ShK`w&Y$6#
zd!Jz0it(WAga@w_Q|)%a6sFp2*8?ildXnQ8eYx-evPD4hWG6s(KC=!MgxKBdx(7JQ
z4mO7<zK&IcIBPHp?z74x65)1+kCz(bZ9RtH(Lo45c4;l#qG`Sw?ngA)&2C7vo*O75
zix&8OQ%mX--2@kFO~mT;QM0xu6W<0|Ya6&*TacwCjf;b$4X}3UzlC_x8(>TCo&%ep
zV&7t6N2MG(tah7L7B)H#a1y9(M|EyVbT$gDa&&2}(KgiMjY1F3UZv9<XLCVSxvu>#
zLnksa&7zFkjY6obvD?5dVC+xk^oA6fUv*{{VnJ_!3#~iy#sOJL9eR~f4IWES*@!pX
z`Q(%TD-L&;7dj153h#XEOJwVqB6e;mTHmgo)`l?<w?c1l6Wk|3wD$-4c+_L;s&sY`
zn3pw?JV2mQlvtLV^uq4!+(&)^ye4Pa>#RSYNzyYg6owaE2Yh}$%*!hS<6UUgnH0mk
ze{;aD5P!}guK|No@&efFoB@2`Z3P)g42-rLK_fJH$rWYn;!NRziA!e!1xjK-CNfaU
zhlYfJ#iH20AU4=FrcbjBsV^St7qvm!VlBqEx&-2-8E4{zniZFqL=kqaA2rX4P{-0<
zHrQ3Sustid#nqEc`!c*q4wI!VnSgx3MXDV%fJYYNh#H4Qb`}u!)$jwHtTLvP@+uuJ
zKMi=I6!Gu&lWCF^Bk{_g5xm^xmsyY6yM3p72a7=BrVCHXx=3;S-uggsoS`F~$$3_W
z7^pEgph7OTrovE@U2C$^1FJ6ni?xbAdn7+!_F2>d-_S-Xfgj%n>Oj+=-#b+xn&jKo
zg}Y6#!dp~{+bH~?p=R77899(AdOz)66vggQ^6A~54YGh8w0f<BgDb08c0QC&dyjlS
zzqyjz>lE9*CE{swSX@XU=%7ly?RUU9y5~2j*4;(p3wy0H6Zg}t*$SGFq*Ox;JNsL4
zzIHwFd{E^}eoVLIP<|oQyxY|F?ndmZVVT}%Mix%@y(o1`Co(x6#3%p_T+5>^)TzZ;
zd?r^OY)@8}@VMU`b@W!TRW$PLsAKb%yqk572r=hk$i3Mr4Mw|NYqzN{M|p#9>qOVw
z5A<JFM5L~};!$v^A(~w=pS75<6cbDzvFjX?iICo+^z=0BY11$yn^Wg9zgUk{HqPrq
zK+*@H^fwrgR6no3LbCTSl<HkG(BCrAJIG>NoaX(glIFb@ZqgcQ-oEqBmW{`^agN>2
z%)FsNx;aa)c65Vmy%vHbzCL~Sv^~sUW=VNNgz~lF*I*Ti0uG0?z(Wb9AEmLTa&ix>
zWUJZLW!NNoU~ZMnCybq>Y_a<7LR~~2P=+VaI`r=Oy#F$rG24^w<grcIUHIPm2Cl{9
z{=oMB=dry$3Bc1QIGU@<i_&v^gd1v%0&I+p+9K0&`L5hN2+ZGnH^$){TRYY`60FwB
zn^gb~vuZ)lgBI9;&K*g9&qU$QQ2Om^9^ha3E2z+S)<rggIl!hP$X!Z_+&k26F;>_n
zgF0g~yxc_^!m0b@PFqUqz_4E167TIj<RAB3naehy>9v8f)<T&BP>S}Zn3p7GEN&33
zM2&LlxQ!c-VZN7^+;Z7N?a?h?Qy1UK^q$dMVISYwJ5ftSzO&hah92>6z707Q#wVKs
zPNKY|HRYR4`R3cQ<2b+W7pR)P@TT96lk-34$g)MDE8yIq%jKivnF&Si&iVK;YQ{C4
z10FERUgssNzKN0m_q%A70VlP)*;yQn+=u2(#|@N#4@xQHleEy4F$24dnRxhLA9F2_
z0L~5B_`6Ha42zuHol|ik1*AM4OaTFjTt;^ml+KREo@iAHSJ+s`=R+Zuk3BR8ZFJs`
zFU+wSp#GUlJ5>NYb!d(R@B)=+$4V&Q1a}pZUU*kS1I@CrKboeO92PK`787qGV2Tm+
zPNN$&tUG$G;jxE|Xz5*Lz6?Bbp&r?$WB<c{{lte75mo>7^9Jkg@F88#8=ZK!?r~B0
zU*^ozLTc7p?$yESw*eK{Cc?l{i{pJEB1C2^&s+<;c;xEYRT;|!#t%E2n;;j9Lmjt-
z3k%h49C-kW$u&~44WkcCSV;}-#3^W7jhpu2(kDTb^cpqiQoG6ZoX3+}Rhio~(D>v-
zX}J$p#^1b^@npTCa_=<tv0ftXou)Z96?}{6{Q73V^=iE_ShN%}3*O%}Rc!sbXmu#d
zWI6EAW@gSByJy=iF-%#Ei+oznZZ|)XDDZlv4$8z@XDQkRL`zii?bkDiSJu8}2Kap8
z+P|$WcOxwEHOjIrDN_6EgdGZGc#ZQji05|Me^;8U^uUUv|AI^7&S-+^5Ys^EWxpUC
zcF*PCXg+LsPHU@XwY^4Jh`PdF;j5y=5>S(()9DwfMozPt!`BX@6?BUi3LF^aMiK`-
z-@T>S!7K7X_V^%s{6=LD8Q^JpzH)eU>#Bp}<8b8Ci7iRRiaeoI50|q*`}^qp&Ot2h
z=<V2sKlSaQyWY~p`WEKHT1waYwel7hz7<+51wf>N9xOcG_Xk+2gHGg#{rhbku`A^i
z9*81<xgm6Jo!GNYevYBVUQM-hrRQ7boZMpEe!w@u(SGx6bC#ZO!Zqpf+cM2)@*jBS
z2cG$XXGXN?1Iv6jEEAP}eiJN{2eLJmxhBV4hhfU`4ESX}$WZPH1Kt|Pls3E4X0;FI
zn!z`5p|10^lyc2<sZZlyufg<^9)F9fb3Hu2t4-|+qYK*INI?unEHSVv*j(fIKQOxg
zk&Nya=OaxZRSlfu7U_hyiFcHeHA-J-tjCyF6{LzMTPx%T$e>(mCN8wdHB*W;?Q%4n
znolnEncA^EuFp@FM!!RQ9AkuTjXY{=zTLHPNEeoRla@C2#PM4jNcWX7ejs=sB>Uf>
zC(cgkdLs6_sR*>8xc!bQ1+9xix(VoG^2w^&X-ZZ$ha%l%7y?GR42^V?VJs-Qw#I7Q
zNh(#>HtfAIq2ljx-MkgUm{$rPH5>6ZSPiQ#yrD-hD2Rk%6md!8%@(Bw33}^cL@_~|
z?n(`zbt8CGyD3`$Y5k?N#z<;YnWSDEim_ixz`yj<>DJQQOKY_&t=9Xo{q*0}$~=Pw
zc@wHH5hIrYy7**TTu!C#@CtEfK~L|S*i)P5BF6cy%Ajr|OY7a$PJK&8dz#NI7<oM#
zlfIzAx%|OL=W2de6w3HktM_+}Ygv1E`a)EMLoQc@!WSihGmaXH4(0v%FvUd>f!Z{h
zmgGB&?%TgX?Uv4ghQr8Z-JpnUfX;1KosED0S10*u3i`{0c2bn2dcMk9MEeHv)i}FM
z@l|Kt)uYSvQSywgV%n&SH{$KB@oycB(DkrFw<5eY*$5Wd47T|1myn2gZoGkSwQq89
zj*??!KeV)L<y&DdN>lzE=XB4ei$E_si}!8+_(JFRMY79n?j9JT(<WzfE&SB=a8wV6
z#bwbcUpdpXjK*T(FvcUM5A;eQL}E}}k1Zb!zjs#74fbJ2(T<Y&bl6G&4@1<YKr<;@
znzKKB+Dd+$WR2frgtf0%Qy=O|{^lXjtSlP`TSp=aDrc>(3J}kY&J#^7I#$2@z9mF}
zheJ<WrM&7U2QmhxheSQuqE*eB3tBdvY!VsPuCn1o>}rq<i}@@;R$$&{?G4>1H$svQ
zlS^T6`9MpKsig+urGCxcd_*EJWahYNd>n<@L``eCsEUct6q3qhRXgW3V{Lj9rLRk7
z$^^f#&jao~pJuP}VqW%G&h34Zy`J?nJCG(t;^H8m5~~>Am~4tM07CM9<A?(wc(iw2
zjQ7+msR6XGOBR--Hbxo|ui^DoKFlHr8RD@-zs4Nvn2}yHT|@S+Y}@-LbgwYtFO~+@
z=H$z4`<vJS7qCrrRA8gb<nRBPjvS2o8~G}XDLND{M{U%WGt|5wFdo+3u&eOhDj-Hp
zP1iw_mt+@d(rwsuTF&nGLj~ONpWTVx%-vS9i;H4@YrK<43U)%r9WV`Ed}izZ2Ykfe
zv@b4lS(OV}&T@BEY5polz}InCA-U5LJUd`PLOHd^9AM+Nn3B7sa+go*<Je7m8w>=1
znGIUej6&xbr|mKV$<}y1H`$dYD?RWA_%9YZ)HLxUjUFE6<Cij}G$0|zvVrbVSsIaj
zX0o(pZEbl;vw<=?_uJXT-4_pfHpq<cxL>>ZSfRCr3#H8CSbX5a^6|%lzx?sXN18gR
zF9vdk!7l{FB3#c7H}f6#pQ8wuHWiR0&0FEOACuhB_}-ZUUF&L&A!pHBYocJ&s(lL_
zY2Tf|Qg{o4P7S-ZT9#-!4j+7%?}R~o{IR*{KK@wtWn+(FC^0)j?wT$_nY)`Yk))hW
z!w_am$-tTNFXPPhG1d~sSz6{9vExZPqeD!r{hMNDdK->QN;)7Nyg`;?K%@M1GPoJ1
zBRW5^!v(Uk%^7&}8OkQnA&s4vb&u#l56fpN1(xqwDuKdwPA~FoI8dAz9OfK_mj7-#
z2#Y7^$C`-xd70hVhq$Br!=dksR1xl^T)!83e|bmwIGoe*I8>Sz%#51%Z!K!QC8|W&
z8Qp^?a?2Y{*l*UdwB6pg?L?Zj%wca~r&f6r0gi9h()gFF_DUdCCRO&v&5NalD{8|5
z$8nTXXt0BH`m#m*^73ldN-kkm#edS9RYnB7msEP<=B1}H|5vn6uSst$N3CQuNT@g3
z^4G()%@yS+srH2CIqy+9MkF67kH?WDjo<U>1o4POHhbTWX{ETzhAP<f#bX@7p0XgT
z=YpCL{$X$~=Gl)5(3&gS9{TWAp^R}p9nwb=IT0Mp*WfI+1Q78&<mg0De6-~pTeAW>
z1T~C{BnQ5od^<sUKyt=l26&hMa14lk8BEjbY>J=cFKhVW5K)%5c(rK-cy-+TPp*n<
zxwA>}Dx1>q-^+E_0y4*KQ8;QCzoILzp&@UKu3`EwUi`5*KOTfGBz;j~r5E+MDCDnE
zdS5paS1;(=skllRAU24^&R07!ULmnZn!T701I^|XzivyXnMq@4bxfi?Buwsne~^)G
zM<j{FKssDUM@M6bC6D~Kv}*PWkBFD*9JayWRk7fyp>~>$=mL5ndJgA8CwWeLUS<NJ
z1HtY7<yX^uAmhL(PcJX&bC*B6dvJy#5ipL^-p>bl!Ph~*>dII0Y>=Rok4Z%a-W#T)
zb$NK?t6=F<d5%LKWv&}WJj&}qz#|QSwA<vXImvY}-ZJXc6gu!VI_6GFllfsQMq$UZ
zW608jxrmULc-ICo%FF)Ye{}gf-Bc&4lUn2EyI5N}jaTA*(^F1;jU<Os7l>iE6~5}I
zakmz)xUC+8SbYBN`HwV~FMAt-J;-Qr3D|l^drr!Hu_JJa!}(||$}CD-jnbK>JNOz`
zQap=pDwZGdKdxLH55^bA#R&CC{dN?<HY<E58sg2C;gyP?1%&fiIXFtbQwr3pw$zKf
zFPij|CJ2;bEk#xy+<Bbb|0?n1s}r2Pl@Kkfe7}qQ^XvNJe~G}DcOP!^c2NLp=a>Bw
zaXRlX`lrm&Y5!``+1j%Z$Gujv_u$5rS<#Q439N`0@a?#KFYflAbJS?2t8$SKxwL>$
zr_OKlY&}v(ze!~)ZsNi!m+MA|(ueP_*gg|W8H0EnztPn?9_KTtsv?)Kq+7y1ZV`)8
zVQ+cVtxtFyYG8jvU&Vf=EJ*7|s>67ek{IX(-9Yv$D}C&nXl<`_=wTJEUj5nR>zvDn
z$k!if1N^>3l4<ts6NW{4K^%iFn3pHs>Dhu%dCi7Qhsy+(rLd-!4YjOv?Js<`c20zT
zc+r7(G_<>$_<Eh*l<JW%A_Rv(K!o5$&|k!95D>bCN1?B2FXyz?By_m9+!0y+nh7f*
z(|17GJ^tL|sflyLep^&hIM;}6Y*~2PJB(xL%*bhS_JFAcG$5rLvEt+I0xZtwK$?7&
z=^)oi>DxqZSnB-Wgr_cY$bYNUq%QI<9aDq<eGOwnl|qCmhq%g(WAfE}?TJOnAHJnZ
z@?uj<lFGQKr3$yNT0|ngyhf1J0B1m$zv&j!vMn83+KiK{wKl8i+gAmVsDf!%q_)%e
zUy+tF<fx-g@)*}bp-)l+bA_*i8&~*}Y342yuvIg4cH@!Wkx!P7-FsKXH2)XcBh`p~
z*_v^^_>EVZv!c)6?-Mf^(EJy_0gV9{SRdrqj>oU^GG`@X%%zljM|QsDbzI#b8r!T$
zwCq>}F1|cqWc(X`oU7s1yq2lcsnug8ae)`}A$ykKiII@B34%a1B#k{+Oo;efUUErO
zJuTph4;^9R!HzAbQZpH3FUw_T86BGDNwY3#^?Dk(g~vQzfK5JVr<l5?K*Bhv3n=6`
z=Y9ylq?z;4157z5UZkac)P;y!?yO-NDc@_$NV!ZoeY08(-A-Oc#5-2&bX&@|kYou1
zcSz*#mO(AF5_h9pN$r-d63Vz)2iOr1qY$s7v%U2Cw@9mBnNDAcqpJdYe25kM?-48J
z%-+8^s=?a^bfHSY)?^ZH%i46+2v(M-MXf@10^sRQeE@iQZOntyXgnXHhCU!3{PqwJ
zPF=k`cB!lf9kv=d%=uI{00UdRv^&cZ41-T!XLJ>l?~Cbh@cXbriNF4xaM~+s7H^nf
zx4p#H#u~@l&VE}<k=Lca@mD0-<Fry(nalaP`}@2Y+~B_)`LoyB>!&=ymBwd&FRCWP
zy)7!b^01iPn1Q!(gBF_JR$Jd3D0!n<x9@wFz=c!l3GUy8XXTv@WhOm$-a$E+w=LmP
z2_lIN7|cA^F-~t3OcFEwj;nAtgn7<tD*r=uPM5@lAN=c9Ax%7o&$Dq)Qq+pN&TTDm
zhT))?vvJ9^;aNa%xQBdJ5q^@b7R}^Z(ynG^*nXuB>n)44_!e&?D77WndoyvVGTskD
z(+8pHw=6XM%1}|iG$_=v645ISDOx0Y-73*_XroH4=(Pb?*DM$9JA9B`fVybb^tv<r
zu7af`S<aqwpG&JV&fVhxX^#`cMM5o0ds`i*7v{JR``Z#ek`qnhz4Y~Boa65Hb+|Vu
zq`jmPb}+g+91*T^I?d8;vSev5Y}<x`Pq$#kKC3)?JpoKSSBAv2(4b@0-1;pTH8;Z0
zwQF$bcnTl*^9TO?+vLxBPPf9HZ-q+rw!HZl<IKjGe__77F;~7V&$8#=7mk&WvMsBT
z)MB7U2JK@o{&SskIah(i2@W-smfjGi<X+u~CAr~1cT9GDE4!;XRKs9D@Td>zy1%`2
z-RLH7si?<>eCjPLc&y8y1SyR+hUdFcy^fey7-BF8L=+tA>r!e#Nq%B7Eneje{3Scj
zNx?0IkZ_=0soqyX7f5#b=X`dv%ft+0;9wk1CS&}qqh$B%ua8EfT`hn4EPeg<Q&RNd
z-^i5Ss<O#4hVD+f7|-v1dd1n+>1?B-sP^L<PV+z`GLug7J*F@IY6tF+x`aht5B=nb
z$Wg+R=cu(S{E?0hC!=4E`8U^F;r#Xr^M8}rRz~X;Ni@8~r92o548`T;7LyINHQz2v
zEd2Kh)z${yU}%=tH`QJFtqly!l|g<G3_d8Yzd_~IPU)|sy8d!%Yk)-26!W~489bHO
zR9%u4i;SEr%W-e97`M`)w^vo`eqTSkTdAqbw!PtQE!(@8W5tfy*deQ{u^8m6#w^yw
zINLZwUv*P-Cp{<vrse6&HWIDuVgGvyeI_^Xt$PVwzs2M{oo<f>OKaS2!hf=&E+2w*
zRYw4ad+U#M3T}{xPR*-T**x4Q^U;X7s#}{E85)|;1lq@8x~*cdl`*_mJhpk2b53u#
zNI9SQ?4hMH{ILI#OKUh#1AfAGdin(xo&#QL`Yu{&`f+NX+w?g^Kj=6%&#mt4_};+1
z4}BVi0Kcu3mjSu#btid7ngwlWkc+`8d5JiE{z0?KV=M+zMu1%Fa`norrB7KSN)_tM
zHcMaXb-BJO5PO;rXo*ZlPsguPseh<V@fpdf*I{-stF2^^Vt{w_(J3&7Hd$d6MrEkM
zPHrNT;%;{RPKXJs+T`v*5D&|?6PZp&LQE^kUrQrd>x&=9oeHLhOAw^jSUxb~*Zady
z{n_hIDYyS;&g38p$@--02?NBGWQ>5}6P1dwbUuO*rN15|XG%x(aw1rXX6~NTehzG-
z>APsrPpym1*4qMe{ZgYLUFB%^b-61iqI2kuM3=r;z5&ySGLoV`vb*GG^uR5+SI-p?
znOgW3;Edt4tHarJ{%%MZeB(M8EBbqOnI^-0wl#(D6*btE2BX%o%<khF@GQZzS44Sv
zdHi=9s)iU;8!xV}9X5>heNzyDx1*r)Ye)O8r9f;L?z>z^;MO$bd=uHca)4BW`jFVN
zwr=c*$nx2`$71a`c@t8xSn+kQAgkrzFS;k;jcZnR->HLkZU5~%b=<CnmoC!K=6a-|
z;b;R>I-}W?ad8<%%VmPSx?~;a!YEr#$9anU^jBFj85YFce$#Qraq@PR4m75gZyaY_
zZS_saQnltCv9f%|b;Qc;aaU=(%WZeH?S*~%57p{sULuz_NLqPqnSnG#c_++-UYHyF
zs^0bO6NDQZTR%&<nA{xt+~Ce?9$#Oz_mth+;Y6c@?0kNC3GmQOPi62Xi4XVy14s#s
zZ8i3=c;5=*=lxSSF2zKRB<|}(5ifmIK2f6yqj8ape1;c!%0Ohnt>|aOQ4c@sj*2ms
zri<<Fl9JaI?7=Qx2&T^Ux_rGbqJ=q_I&E+%XPT$vj37yVk(^J9mjI!~nH#anc&;Qc
zD`%2=e|9?MSpV{>DCFF*(r~Xk3%=*uIgGK$<82^XdV?czi+%8~Vk7*g@AW0l^=IIK
z{=A$OqxL8rIM8*P%0=4G0x!E!cri?<+`_u^1;lf?NkE!I#OigySS@((Oh(eML!WeM
zV=rWD<e~70BV}STQM8vA#CzKJ1>yEZMkjdckzcSUmQ%`4&<6a`u<}JZOUF0hR@YYr
z>$YcHAyXc17}uRYbxE+xN*>rGn~w6bgfte8PGN;ub;AIk)1Kz#Rl@)64{w$YPN08h
z2+JH|Sa_yBNJ+TvPf7p#?!{Bo&9Uu@vHZ&Pm9%-rt66Ti&>!(n2WSAN8Pud@fyd_=
zNTR%<;4vR1PqTD7X8IPNRn~$=8EXm~p4F`FU;QXKrRh!cba<5b?~{iwo?)Hn^k$+O
zkEJjWFH?A;lk<7b;cNgr!k<{{oTcE$zBz#X6c<FcWeZVtfq9-jslADrBvwC1=@^I@
zObsT2%L&L%zCm1?0mh{10DrPOCzu00GG*fzhmc)M)Cr1(PV;PbgU2tj6ckF)fq1W9
z5j9d2%Y}1o0W$WAwoo7u4ezKFg3~ON9~`+m3{R8>XKAn5>#RSYF%hKgrztZm(%D02
z$wSMgNjFL%cbe5~?RhfI+8Fx`0N-<VPRLwv-p+>w>VxoLvT;A1kkH0p@D9IS)uWU+
za-Q+{2U(e4j-6$tV_2)IyeVReUrgo5XJ60He{g_bSM&4ul=1<+^XZ}3UG*BHrW)SI
z0r)&kuBO?=7rWL34pY>`E=_Rw#qPKe5o7nuN7;xIPG6Q2qOYGHreAuaI-Mt!aygk#
z1mqSZ_tNTT2=?ap0-1Ye&-l@o`VGUC9SD(8Oe+@CXSxvnuwSAo2_0`lG;u9TobM+@
zTDfyfIp-%YfT}}3&C9I%@^yM+-g=cXWHxRyjcfWmIHtWU9;N5NxOKBV1N&GoAJB_~
zjz9bYpMKV~QcVAX&!ul^G&opu=MS2$K7zo8Hx?o01p@lX1|r5}>pc@g9<7I422a3@
zcm=Yj-bWYhKx32}{Un1A3Tlb`Sl|8H474#f`NKP(-MM>sfri>>sBJ$S$knzAHNYZ<
z@;zlK=9V4ZqYZ!%-_+B06RpSa*1ddsIOn!%y|^_lXVbYAvlKp?mb&0VE1xR`KiWx>
zcJeeYIp)Xc`ca|)Zu~13d$2ss)E-KD&P3lsD|nKN>f&WoMAGj9O}FyPu~eb#@qg{h
z=hM7jZQ_5;NfgUxH<hnX0DUFiHu^<i;d+3hXD$>?Oc;|5GyXQ1Yr|SFGaJjJ(W=}h
zGJHd_2)+M2&mKb4l^;&7@`;$aN9iQ#JxeDT)I(#G(YQSO44bZuPog9AN%vq|qblU7
z=sgx?n;NwJZQNd~)r7Fn>5Ro2J0-w02@V%)gi5!0jTjw>E`PxSFjR^%aG9RPn(Imy
z+N8*fk{~t*c(u@na}~ha5Kpk>@#R@dsXTrWp6CEqh9gu|<<_P|_zRW-U7?nv%{}nQ
z3pJC{E-Jt0B(2jLv+sMH{}V3s0d+*|+&lcVC4Qb^0^BQ7m%8DxfxlGl;o!TbSGcBY
zcRn4u7f8CUJSc@<`SA(vp?j1+HMROry_)Vx`=a{rjzEH51N2?sZyesGjNTjEm1}2J
zkal8&dIBe=L5B=t-x0#Ca0lf|t-2&i+^M7Tl{~{|U}S(l9FW)oVZv+~o6e>zlH5&z
zwm61u(9SC9H*{m5VN?6xATASnPF!3JT|otyT}_MYu`Bf{N>^pUAh2YwCsG59^-6%5
z^T;lX8Iv_O2YP(G^Q@m5f7ZDLMMc%q;4U^VyDmx(A9`~5d7~im%(=J+o$6^iF1hUD
zlnx4KK)hzT3=!bH-jC&u^rD8!4%+$)eqo}6mM-a?`IHT2SS=f4(6G20*$Ae^l>})t
z18V8sO!mMd;sLE3_Nq)g1uZ-%QW`hGQ*u{E=SAv9PMT%4%~{kew{*=BNJQ8$;LtbB
zO;+lvEn0!Uc8G!O@9PaZNWS<o`Dy2ObZzJ!{gfb@ndw6-y!kD;sx5yHe@?!zOZb<a
z-)S!!y#AM+pAU2|m=Hb&&2+c=8#;=*a<G8ftjtUx)EBW2&VUY@?r$<SlAZ7(K5`AZ
zAa265rC`0j9TQn8uCpni9945f^G-<4g(9ct`4CeOTEn8NE0M?Sb)3ZpTi&3t{+f;}
zAs~87R5YHKVY{=YfH$_+p*67uhjDNb)@cNH>z34Lh8UK^YKX#wQ$3{)daMZPtr%mu
zD*#<m7o^VO<Os8sLyC5;r!dq*N(VX7I}e>lq}8xVKB;hN%;3dvD##Z&m2^qWyG5rg
zs2@hh=Px_%+@;qkou2*>2`C*%^!t0pviA-;(&zq9jR(_Cq#n`a=Yvl6&;7j|sP6fI
zj_A*FNZG8NqnxyQJv1C}SQIabdB4n<@Mw8p5wKXg;lfJpvn);kuF66UGxb<H+X*DW
zor>_MH>UCe_cV+}JUUksS|U2EBN#Mf-@qB<Bv-|o`2M)3{q8YC^EBEiR#r2nwWI9G
zHIfpUy5M4%vjtRDV6_)eRyrI{Wo@%S2&*0AO3MvQeuEB$Ztnc9Lez>GiH=Ifs8>1#
z&}aVelm7j4EBV7ueL6_;M=>AIIGBfy>F<8_$0*u4CpQPmfLv4?*p*$!cw<|Q+vga*
zBLn=j<3S<A7&Z){{%XfD%6_QNo(e<asziLxnItjZk3TC~;3M3*g`Fq?_}$O`O3Osg
z>`}f_Qjnyh&2{rZDXfg{sd6!8V<vYx7FGVWLzj0zT#uiebn-#+#TQ@54X4-gi)8=z
zjw7NWxBJ*Y9++d13;A2j6vGp=21`6j?o<y82bQt0<%Nl~Ea#S~R27T`VAy2tGP&a<
zrhJ6NC81Gl8y^fL))3n%^&9oxcv@v!3^S|7QY`6h?B6!s#uG4@Xs<1LdW@AqJS5I`
zS+JmLI<J_p{5a|q$&}*wYKKQVaH-n4D+}rxra&9tv8mp(LMEP<o_85-@zkz%TPh7E
zi;Yn6y<jt2sFSb~UY}ENCv+i*x&g6!f4``l^`A&{9bb~@jKf!im*X$|3=yI;eF7)`
zPV(1ekNVh4j*{T(yZD;4Y<#^3YvSGy|MqWs8ohW&4Px*|h()A!I|Y2j@+ZA(f8zBY
zTJ$XE0}z!w+q*;JY&HTu-Ch2x#GlUujD?P;efa}*7?a8h<8x)#S@X8!GS6PwlnVO@
z-w${Nl+zVbRWN>~zHiUy)rAL(+ExE{{1|knxNZilGxYfMC3Vt^OrIj(foti{cJI*m
zl4AtR^W~J5cTlIafhenu3f-1s6@gw13rKLDb=iu*(4ovMD{niNK@limbbd)sET%a3
zH)HQ;pke0YeKnrJPj~hM6WxgPtD3?e_{bBlmD^?<H?c36?fOr~dk>Po{xv!KAr#@p
zk#K@(eN_}lg`f>95#m@~DYqc<13;|DwAfo)pUT2a0nuM(Uu6Xfi|;!*!_uG9N&cTf
ziC(X`Wn;WBxGygdC6F(^dvWZXOx7CRXnl!3(N8REiv-OSZ=Y^%&nz9Z2W97y*NFNq
z*?EBPxMa(v4D;~EvKaqWTmRw@KgDDD`Hv*F)3-A8pL;vMW0Jxg*9OojUJBP`^8+&_
zu0FcolOm)%F7}-|v9q#oN3{K}HG~b#OXz=e2>v2sh0K`Wx7oVqG5&owDvnl?CX(M1
zY25qvKlc`lu6lUXX7Y!hf;Or{aHQx9iHj0-qCETLhYqdhD5Im>v1dZfdYI0R+{+#M
z)S^%0@GBgUnV8CTGg!^`^!qt2Tu$>PS_JhUf0tg`P*DL^piuveQ+G+7c$F9PGC0z8
zx~b|#Oa&|D>!BxwmS(RljVj+pI#YPhOm|{NVTN!OE;)+v`$!Q{fixoTfsksJa4++!
zY`Y%q&BcW4<4)aD4R7T95*c=O`E}?c%<WC&k-rz>IA_AR|C8}rR!HU@Cj4F40Dn#r
zd;yjzpL^iTn({a&DHt5SqMfKodhtSviLt^Q>$;>F|C}CKlcG$^VHdDUkdweS&`BQ5
zXARn3P!y<QpD6v{%x+Y*yxSXn32_fjy-{+F^WXr2I10IwJgI~wvwPqEuKW9~7822o
zQsqQ5U{(X1>oGwlxKyfjvG@0@{8cvgT7WOqJF}{{y|m~Z*)aoMlj84~HlHT{ktoqw
zT6BU+Ivr@doleI;11_3m2x?vZs^_@h>jrb}mI4=pLz*C^i2@Rjed$&uwVh)4k?CyJ
zNwiJS4Hs&G_ayX0g1BJTLQHNthE6uj5Q-S-yn5&YBk>{`f3xAp{^->X7WS{fhe*r)
zQ8|Vxw6FQg*MUNNKq5S(9%r`d@l`0e$DZ9ATqzMgeG!7}f||an)XCCiSHT6!qY{SN
z_RT_XM$d<$v%#~<0o-Zk;dGLdEXoOzca{a*1Sw?2xJ^`2&~DpexIFNo)EYG^cb!p#
znVh5n1yRe8cS1YMR&@00J72lPO%mSHtJi_ux=(`Mq*E<q)k^Mo!t9J-O?w#`!~%}C
zm7S60k%JMMlXXdWJ(VoO-tKG(;T2%pS?uhSb+y#xydN0I!-k|#lI6>Z)VpLmDo?IE
z4%@0z{0{MrwnH!3G^6v7?eC}k{=CKhT)uDknEV@m?r?jDcRu-~m3(sWbMo-(Cr120
z>w4*=XI!wdA)U~wT+XtI#Cj_0x-Qf@ugTXB5#db2Sg)e;iPexEctkrt%k*U684}s2
zZjw7Y{JY&+rZL_;3<ExVDs*YC)9K*tPJGNBj1nEs{N*c~Pt`9(Ym_Sb1ywJI8(DRA
z-)=c><JV9+bUY}%MUg&qq!jG_1Id=~n%qx`YQ1zu*_q)K0H^I-W;2tK_r+7<!z_;n
zzNx^_9lpzVgQIBN+kRXJ3w$voYpOd&bo#vmd?T?;EVcg5M$knXlOGPG)ZYcBtfQba
z{>`S#e`Ch@LnqCD2h)K4mOGZiw9jO<s(II!=g95ZL!GcswK@o0rcmQrqWcBwU0neu
z`|pKg*=yc6c_wy5iFPX8ym^!Sp0!6Y;f3m{sHXhbUppge3!Y(mzV{FYSok?0IQYOH
z7B!C_CA)w4DIfg2>$FwfPV_>$>4GJzor<PKbM_0>W1Nki70?7iOKiwr<jAu%<6Yg0
z9d(ga!)?L>jrVuMOb<Fe`3aU5(!xHz&G{Sp&*x}J*Oxy3+rJ$|M%U`5)5B-^4}Vc#
z!jfIuY@19ViFOG+=}ysB=~++y?F-v1VM*~m@-t4Jhyu;EM8l>*=K9)4$<yMx4U11u
zrU7etnf7lEILtO5Ulhqx{z6T-4R1h!=10WG44GStCuWkpI0BhHyO<A$?p+cPWmNdK
zi*Gq4=b)uI^w>}Yn@Zri9C=5wOIg$x85Az+@#IxDoH@Wkk*1vQ-y(lK_y|-1HYYJF
zDm93#VPYg)GJ1j!_+hWgd;-ls8%RhGrb}y_4GT7RbC__^x7g@-(iXeCWF=GN_*{}y
zJZKN5MHIxZ%uN^LJH+%I`}7n=$pGRaG0j(b2~$j1X_WCG2AOP<3rptIm!{=x5eG*+
z)jGQdzsv>pYj2vlEXX1O-d<7q1UE_bf}aTC1vAZVs3(Q#3dIY<Q{h#;NdClj7E4is
zn02R<oSjNS)sl3vk2L4%VCOD9|By2~fi=Q^(24JAqHL5bS9Xt*d-S*_aMJS%;Bb(9
z+6i(DEVbz)chW@Vp>{v(1StcFW&jujCdW83;)y=c)(7|y*aHVUf1*aPMkliyQd%$R
zjZ*$PK)SzQy{26MXgL^5LYIyK5BB`adkU^0>tvWiz)481vf)G`z;h3T!>>WKw=q1+
z#`C5TNE(E$KM%p+EhapJkE$6ptm|W6WDtgGq9(r#2j8Sae@Fzm6l2sp2w7v52)T&v
zF!}DdlSpbMUtYh_t;E6%MkLU~Y>2FkGXIx+$H|prfS>XcfJ=1{GMxo8XgW_aA!4lJ
z#0vtI_R7kkUl6qfU&GDpN)#o5PGwaixbB*xLFeOTP+X9O?8XOOc_05qnAv8w2F#q^
z4-Bida)!>9hJ?kSq_{p`a5kGaS&Rh?%Ed-$_!4zev$KVHCz61aPb4FT&jiaJ+&Jqo
z>?>|uSzarS7IoDd?dsGnFLg@nx43kGIufE<I#3@Q9O+}FqUfrvZ<vdH-#Sx!ypah<
zMPO$t1B<;xmDDkV(qJiqE9ko6q_he-a@nTm#SC17zl`sVr_Xj#%<$#6HZ)-3@CM9u
znnlY{PoeS$D!gf6uW7^i2&y>SK2M0nA%xHh#>;t$qgpwKHsfd?_5Q1vH|uMQT;JJN
z)g|epy$YNTs924tuR&5PCucET3$Ormb2Nf|gRKcpO1LqlKSR^ZPUOsB=E~%c8Uq);
zC{S8Rex*k)Q30II-&jay)1(7i@cKhRDzcPL1ujZ}bB`k_$gxl`Gz-r|yg`y0w)k&&
zGf2#{#IKf?WuG`O4+&lwaf%>%J;B(mPcf)Vk2(Pue6<WL|7tR%k_%5JI0Kfg02Rv8
z(b?I7(lyjRgGKEZQ}I3esGE2rh}`5P_QbN6H2=WUKzF?AJ;d8qX}yW;x-;wKlQqt&
zK~Mz<KbDndw=K4oxVvZW4Q+uB#t9woJ_8E-cv{T)v1L=pSF}&Zk2?H3TRJP~2$C~`
z$?D)F(bC1~`p{YHL-Dlwj>-Bo%Q8+SZ|2R*1Ty3&j1g|%GWpaJN0!`Dv5%<VA;4Ah
znGNBb5p3@AP29I!#L@4n&ooV*$}rd2;9w!T>0sccyn1tc2Mt|442^J`b{PAMo4Ssg
z-&-L4shmsdt^83hDHz;v(!mE#IP~spP&PX5L+EFkfP{=&K#4`8WWFU1;D;wCL?+Kp
ziC#g6_NgN?{ia_^FvX&C^({w<W5$-m9Bb`P=1>N`nf6}sr$CE;5eqTDh<JInM81UY
zXZ5XIE`^@e#88r$#9QZ)q8bF#vnCQrullb&pFY^S#Cn#!N{8r<|9h~pz#7YH0gJ8@
z8n!Ua0zu3b**vX(DQ1N;R^kH{k=6G)ph_6?=8O(4g+qX6PSXAxWxgg+FWC<k96Pp@
zi8Tpc8!EDuCiWD)P6#(rv@8{NP|bn;_+$Sr1TApqAi_>%M?dJ~p+WTob>O`xFQ0Xy
zMs@MgYM`~&5<v9n4*Q{^rZISZtktypctE{oT>W5Hv76{5zs}M@HZ_6jia*&fYUk;A
z=1@fGb)<)atGiUS4u55W*}SZ^695~XXRheNnEwEv21#K7ZGU?5+y{4Y(`OHfu4D~R
z9(O<O_EU~6bEo&fLGALJ&IEY>xas}7-8AoBW~99{3kdH(*vx$zCA;UsFCTL)IR<q(
z5%*DWvE*7bT&=iSt+QbH%2LyzR1W6zquhC*tpEXsC(c8<FePGSD2uZ4=SR8$O|w2;
zFtSke(4rH1D!8R<k&Nm{#e@XCA<`m4T%6BDuZVt^4FBUWB%^`qA0;Q%pdBmaSQ8Lh
z0YwU7^{5{QJaGtYfq-c2Yey}iX$Q?si0#)pR-WN>8bhU8g{{CM?t=|DRya^MeN;19
zGRQ`z#yvl&AvM<F7%R)Y8AnsqJEj4RL&b`nS3>rJlg|fCtOAXXwEXW_4Hv~V9}nS6
z9fjov;J}`bJp{Rqb}Ec)ngPO2l#j;|H$O`Fb7Yz@i77}75a_NdSTwcl72Lqa!P&rQ
zf1WDJOeKBKG(cW`4y8QLXy7hsd>~Ho8>?><;18-)7a(r@{;Ym0SF+fyDap)X>kX*<
zp2Qay*0=C;bGY5Yo7>rOCx?!O9-eeIOF0^|es&Nlgr5|esd}<Wn`;XH`&;@dJy{q6
zSi~WKy3T#%y|5-xMLJ~*ImbTLu2EZmI`G{%Xj2x7E{DZATp^rL&6|%m)Y@JREtJiC
z(qtZGOc^^fX!xu@do2R_LfB~|-&r{eWlrwy!e>MuS%Tf+VZ9sbWd{z{g0AbZxZDRW
zHrssQ{-zfM@(XA=GEp((Fb)*QS^Zw<#YIsBaaQz6yu3f}_%HtLi{y^9dBN8;JnA68
zA|$)G(^A|3LDex3h*2>>+P!3IbFD@+m~}3X64z5_GB2<8?;IG)){L8HlDZd;@63f;
z(&tuk=Z8Ihqk|S177q~3;MzaV*~e`|Dru0f)nvt<!>CpF_uh^*<f695>8tz_>$iVd
z%!-3nh^lR8ao<DDve;g786gB^@6(^B>G=VgJs!Iqv~a6{XsM^u*+g(O@~JMRscJi}
zFbfxD*?W*q_jJ=wg;7<S(N>(m%Yp=t>O{ZdC_17lQEVkGh0i)qnwaL!PSdw*#`!iG
zpsSRCsKBeNLYllNR#g+Hj>Y8DSW^tTz_E(R+W01f>6DbZd}^u7+UZ$&m9qXaDrh}N
z(M#oe>NgP(1a3C2Sj99#OXj?s@o#~@q#gaBwh`f&J3Dp8dDg@^*Bkj7{561fq;C<b
z!b}i+R&W}tq|?X#m)CuHN1A5<Oi-4z6o8o5Gp5B@a@uL6M;psGtL3p%pWPs!6VB<F
zAdiJr9(oISZJ=OvTeMh}US#bBazVJBL2-h&lOhD8aXu@oSD5kbjB|Y!Xpk3%b5cyK
zFk}cNN3sl``Q0!cc+86xU4W>JL{kj#E+dtUrB)B*mc^^FTz(;q&%M_z#$9<&M482H
zLZtap(jY>ElI+kT*?h0mN%k}-sOJENrj?%f!fM66A})L7FMsd6m+Wh?4p#|wIZzV#
zxt4#$O>q{=Q_Hd!$*FSWc6Qi~5vbuFh!?_oi;tGG(e3)2eU-$jf>4tlv3olc4|?v-
zimtWiJQfRWJ+SP<W+hqDwmqTlS!Nsv;BZ+rt|rz)A3E@>vnWZR!3@bE=N0wRxj2*^
z!!^PRr4LXyyON2naWX;~xX9`lv&_;-xeOgx4!Ew#2D<3bnw5#=3peFT>hof;J5t6B
zA4y;urW_}s$cIiI8x(AJrbWLh3XRDf(nXlVrf8-x$=G>^>dI;CT4Uy*lRXPG+%@?T
z(O}_6fj!hec?4{*xMl(q;6OkL))!DXkE&L&z)eQeiA{fHEUBck5Vj*9IoEAazXIl+
z``$vwUb_lI-78Jv012EcR&UrZJrS_(HDwN16VG(4r3p-|dz-7q#3zv~z#I5y4uxXx
zhx~jXQEWc%C$H2e)%*iz8wkhkXBJLuR-cuaZ=*77W*YN$Qk#vlCrJG@oN^Nl*Bk7a
zSm{<0d9@-6VE1hKSTsJ~2S~`2{toM_NOzdfw_`;WJ3E<WlZkk6mX4v6=c=`SkWc^0
zx7}H_RGd0tw_cibGP0B(Y7{%=0#6%%!>5u1YSi9+>JesO%|8neXHWvme>#wDa6!`Q
z2;uS~^>kWqc`7c5F*(6jt-AgNwj^maJPGqtUvOK`M|mKan~<?_CvJBiw28M9yD-+T
zVMH<|#tg>{_7RBNOu^F1V{u{et9(GxC080i*r&+XNDV1oqZ`pYkKzNYcweAs#C3^^
zLCJ9pQ+{oNDZkf6A~;e0t8A1CSUHLCp=-cfshJ5Ej^2B%LGu!$OX(?dxQ$_86vw&<
zeELVap+O`N_Dg;~IC8Gan(`9X#k!rCWIfh>@2iBRkHQNARuv*L<%04z5sc|t%8XZ{
zM<fg8Bs>ruNiSwveKRT!p;@@>!>9&!4G~#!opF4H>t2=5Y921Mt3GdgoYgMNCjkYH
z#1lE{$)CMWHB&Uds1PnEtMSEGltX9q`e{c2RFDY(&(~41_qXC|yoa0>hONE(3BvX@
zOg~=7z9Hz?%uS7SfLvnuJ6ef;__bx>j?FBmnRh{N+=&%UTw8r%=`O<4KN}R+V_3sM
z74so8`8#*I_H7s6mF#w#Pm0(Xp6s)<-Gpoh5-bwwDrJUk|A8Lk!bY6cr8Hf63FRba
zaa}Zcn}X_9(&)fE1Iy$R@lkE!vWfBHgZ@qU*xUjVdVv-R=bG>A#GCLkMj{Ree!)h0
zojTwgabz=|Y2j1V8`KIMMOOQxA`@qU^+AXotGBE95BtrcmO{yNZslN>6I$`dyP~VV
zU%^*bsT2C3nhcgS<>HtkCVZcmF!Q?PA<uDV=f#Q>=-!5y1XZ;bY2pzYXonf|k}cu#
zo>d|ZBzfDc#;}#nh8JX+gz+BU4z-X+3*)WGTCpiiJPHs+rxFmvW}i4HC`{cq#;<{(
z>=v^i4wok@hX-rUSE*;YFQ&imE<JRiIgM*-x^OG4wQXP&{EkM;vDJ^Y(2EPU=q<Lu
zeH0qFa2NH*_N-9D&(h(oxP;>yv1wI|cS{;{S8<uZwzG5gU}KF7p@E3hSgj$=&qw*J
z%LuixmZW~U8e?7_rna8&m_!K14kb1|avSsCN*~`Z)Gk{wkcs%x)q=ZRc3yS>bmTDK
z>ho&bS<<2jw<m&8K=fHq`!qC*dDbCOYV+B%lEL^qV!Y1=L7Abm&=GW=U8Tbd#s!f|
zN21nE3R;32jd1fud0KgP@re5qA<o%!kLxaZnpRb3?seU-tjjQIj$Jp$&SfjpnxtG$
zNlcujXlCM@NCrh#vYUw=*J`U&=!UZw@w%)$6V_o@p0Dcv`#}NZbMTv-RD!$=BJbJ5
zpg~uFi;-1}eYRTTes|gK>~<_SO`g5|KJOYayx_aY4sV3A#!9KTS)6TR@lsKp*?{8!
zd>w8-;8hL}J34r?E09xsU2fl_T_#2S3SC%4MAwNTQk-5f8<@~Qa?ID%{HrVoZ1s^k
zii}_LR)9kX1E|SDE+Wq4+0Z#&)nFG%L=7{Q;G@9+U|@l}q<4QX@Xy^iNQ$6Nl3>*E
z73fzSExp&hP*QE^cKL40a&@Bx;mvMn$($n)h@=iwC18g`EjhDvy<khJOIL9gNa1^Z
z*oc(RI0Ck(JjmH1Nk5w+wlo=-$wFhj?5WU<>H}aHluV69^rrQ6$<SKXlrJ7`iS(RC
z%Hp6Z);{YcvuITrx2Cexr{@CHk*K0kx4zybv~xP2SET9Mfri6lCJD+Pe|(}(!sz<M
z%vuk9kYx*H4b&qz(<0<JNUpp^k9V)f5NpU`{`lj^GH~5GHcuCo*|dyG(xKax?GN|G
zQM^e}mbo{>?MgmOP@w`jwb%z+VSd$?%$nPm#Oz``C_4v=gv=GLUS(b~@%`giuo*bm
zbmJeoS?J}nWR#ER4Btryq^GfE8hiUmPo$0Z(xbxP<qFI^$)<Th@``iObDyCdYssN$
z2r#qQFNRkFG$7;cT>zu`t>V0lVXxz2RVxWXvD~><!DA-Typpabov#QAbA#wndp#RB
zD)ecHuNbNp#eA``>S5HOQz%P>9$57;$yy__!D-|1h-^lh9dYV|HD{St=H-CXHrJEj
zV6w(2Rr!VSJQ`O<LHa7iOnUtFdQ;~|ZQ9mDP%%MzaKz*M#z)Q?@v`o;0*mz$#)Rz=
zJ=hC^pb-7Fvtxy-d-&K3{1-u>7^}aoY@k%pJh>Uq($~)9h`0AA>Fmm5){e95)AanW
zM^@wcK)Qb83$LT<Gcc0k`qgiC-UJ1w-$ehhFR7Itdh1CcY*z>URO=AMqwjFh>7ERz
zm+YHK`XDMmO^OL?M`7(;w3UxN6d>pD7pSbhv-7wT*vLz;r+5VjVv{cxCT8ssA)C&#
zpc+adv30?w$QSXp#No)IF^OrE9*v;HS+?Og0AWeP2-3qx^SD|=)Dn^4Gis+?N5L!A
zjfgx;06DOkf40uceg8r?Z0LlpBG}eijg<0m)WH2disA7}t<ywmk4KFhk6-1&%hqZn
zx5wkD+`<`3uRWq$R`U3#S+>#32lZPi$7kQ;SG6Qw(!p76`AX)4o)&qJucXIs3(DWf
z8yHTn;SCP!^q_B&7}b37be0@IddIGlpzzUmbr8PTkax#Du%Ju1nobW0Zm0V$zM!GX
z5MIa1=D5d#{rMF)q++INSZ6<ATGo(k36FcxutJqz7OvB<1~wFAX6Dl{)$f~PrhJ+c
zm!ukx_c}oHUt(t8HEGt0!iAZ4>8pYkrk_uxfVmrA*}(7OiS6sg)p$blW4vhD?Ed9f
z(|iyvmwgv6)TI*o^s;?PKRP$0I`34jsE*Lusvj?9H5_-XposP{=r|9GmPb4XVW$Ob
z08!{+S}SekJpiOw<%(`1)tUuq=d9lZaI?N`1a>KonMun$<KhrA)Zpy|gh67<LjtHE
z*y;F2SHmBuoKxgTZyF%BHRXxtuam*eI31DT6IbNYbbs!^B|3N9;zrTvF-MPnig&uS
zz(2S<S@4+oD68cDR|z(B(T-P}Zle2ABt>S9kwVf5Mu(5_h*%U#k@CRU?7$bh=6O~+
z$8*0bA*+lqCTtj8BTeIBSIAj^NcvZ>DEv8I75>VWrM?*a^KW-GczBJ=Ap@_hhsI=O
zFl@cdLRCP(dinBmC<dQc4G&Yb#a%{gB|4P>0%|~;G{IL<nC$N*9lK8an~S<>S+Ry+
zYiD?&s$vigu-Eh&eed2ggk?WReVHfJAVUclrD05ZOl02qaAWTehqkxGh_y!AX1hvF
ztk~H9PD>mvu#$u<oj%DqP3WP+SLP5FU8vkFUtYs^@BFHiz>h3m5@A$V#r0{Cq6F~?
zLt}#Jq0SPqR$MeI+Mx`_p5E6(Rl8L0NY!^K5tUgspY8ZcG${CNAH^&+6pHVOd=u#R
zSRa7N{;fc<YA%z*M&}=kbE!Ey&dV#eHu~f~{d(+oyF-1A_xG)I*Wn>7x(J8l*!G>D
z4|cY^QrvxS*?G|6U+aW;s$K+|F{T5Ik-k!|LH4R}la?>P$*#@gv$J!*d?_eh&MkQh
zucU<CoB@{9T6S?AxAH5xjfsaFUd5vX^8T-@0`rPmOdN>C&d#GaZq97D^Xae!zkiwi
z=~FBFq+NKB0ELo;MWFasJ{+c<VtRR)joaUy2oTWs+4<r9=f{VzTo>05xV1z1PnR2o
zz>N(WWby$v3D`crn+`YZ=DQcihbM@srHw`l9G`V|a?e|kYlq~|UHPpGn=6VX=i{!~
z%mN%%m)g>n$J_e2-}G=r_nG(|`R({ADepPl^+ezOtN-Tb7BBoabR7Qrjt>h))^J;S
zuN$|zmFQ+L)b2f3ahsd7QCCcyQPW%@JY)@=RwJvW2QqoieszSQO2|Q+*G(dVMl@7X
zNrI=MNC%FzwP*)XvYmG?FJEdvly@!r@M@_Y2{jMs4lY&Dvfg-b9k{G6=d>Z?8DI{j
zL^O?WD!}R*C17ASmgj=(7WN*cuOv#z&yb@K*s;wX>=3NzP>_l^K0-s<JYpw4vEOMp
ztOR>>k|$Da957!ki=POB$1Rx`AhV?532w#L8HXB+Go9C+2Zg23Rj|4QjKf&64`@8_
z;Szq);g$e$GOst-7_r2c>UUGeJ-QDIG6_rot?hga2>%)MUAQK>f+w<Bf_L+=Vs<m=
z^V<X`d?ahrwwK%TavLwV-M3{M@3#5fw!VwYZ$N1V{ks7;T3=s@af7k2iXE(0LWYi}
z?MmwaTO3}la)^VMtlG6Sxfix8K>)FsWFnLu=lqefG~<B*2v-^z7UI$6j7$WvE8^ow
z*7Q8X)=Jm_$99&C%8B}~wJPLpo@E57ffICHBs7zP6D@krigThCJ?_3owC?4snDi9<
zoFA&D`?|ynLuyW*N@Ls)h`9t8%)(%YAX>D{a6jNo?Nk64g92qf_;a<H{!TYS8tf`=
zqedZ_b5X<1>(Le?En8zxc#YZ|&R0ZwI2pkQ&;!u(lBj~#pXJ!MD_rtQoGnM&!H^_R
zx+Z-nryxpK1c<;N31kPoXwIDzoSLTSk&~<Zg18S9Al`z?@4?$)K#a;*$|y?q;xN$S
z!x|pnM1Pj`1Ty_4&l`9V(_%7FE--RE@=fa`(WLk)ET0KKqA7Ov9UafMU~ZC(G4?zx
zTs)4prn|9V_`$t#W7p6F+{xQ@_*Ad1TbzpR6kHeAJ33)Bpgrb+>)mOFT?6dzOpj61
zYX+_x93mzwVW4xvTJtj+rL@7!kB*M$Ozu1@UR6%M9Ce|0s5CgPPM+g35ifI1+MN_Y
z05pU^s6`7`-@%NZY7U-~-!`5K)|Q7no8Cw+&LpkgOBPVroKn(d<dDX}j1i4pkPHtV
zNHU~z-nmP!4(B5QlfL3irWP8I8gp<=^toJ&<OSBiE27K8tMg4()==Y5DoJ>{L_nlx
zrq59j)y8Wf!959j?p1P<YYn9+Xrl1;z3Lq}xhkf!K0{c)aUV=;3gzhc{U4<ENGnJx
zpWp9)qP0Ankv8*h$wQ6hcvwts8n|rvzV5%x|L;2g=V{5+XeRl4KmBO_|J(L|KKq}t
z{XGA@`%^gkpo8yW{>K-jip7b<9=0{8@+cS?0iMQ1BtspGRG}pJ7VRk^*TT5cOy}Lr
ze?Hlh{XecC+D0RH+{FzkngeMJ%%d4Z`#LX)Wl1$er!sVYtNV{44!r*-emacs=FJ{{
zB}BI>#Nr@u&#V@r5Cj4%AVGANtfV9?%W8?L;&g^`evTLe(KA)&9kOM7?2Bhwy##r7
zont9rb@F_tY5qLsy?FjEJ$vCA=;S%=LrPJI^hRG`F}An{GOslkffuZ{2EK;6t%I1`
zPU?fxf(fJygpn~##n4k%#L94m=?^Fw^q*&5FOrVnJ_U%GwSLkB%uvQpS)p|Xk_x14
zDbIi}U0`ZOjeD&5jRtegO6PL~803A3+*2ZYbKcbO2{h@-H3xBpycbbmUL@W=%FgGP
zic#1g?Wc~&-a>h)p!7Q{Q*(KyO^i-WK`v~A`qe5wEr;g+$d6cZugkVo1Gxnxe`j%(
z=S|@Gmo)QBA@^U@vY3_)>X!KaZ&Q$}E#JKRf>c)cYFlNg+LnFbt$z(Q?_&5!GqPS-
z!2wrCcpTQl2}e;T*BK2il_~_zFy&8cj3|U!NQISQIvz{8;P9r!?Q=2_&}+E-8+!>Z
zQrgEno%)OcbAw@c4l%Q73poM!TdiSJS@%v{$IBJ<*t|Bxiv}$Jit+l_FYd5OeTUmr
za&Uzl?!S{l4yS7sa(D~^tR6830C%QmnZ=;0*=9NUX~2+D+jfvZr3p-W%gg!&ucgY+
z?X8)QqJm|WnsOh?mVGE&_MvRqyDeK5c+DypcuZ7kM%=*v<~MbCqXFFkTTKVRBWDBk
ztdxl87W=zN!<i=gnJN*It!6CMFtQHp9EJWb984+I)u~F?O6nq(%iruX^=kyqJP4)~
z!mHf4l@=rlzm7qr;ZPq@F{i@Y-M-{Ap`8Klix5zc(5w0Tt0ltDP9?iRh#;REHLvU7
zTP`b7=-4#9!JYWpKxz#Vu?)xEc$@^THk@#10>aaw^Up0o5g+=ffyt0GF;?-yR61K|
z`Woq)oW(m9?82-;QN$7ChMWe$CWPjL<1(COMBFGaz3pp1CD)pBPZvIg)cLqzI@oDz
zA`*V(WP|JYEQN>Tis;kj6$cZ(;(+k`Kz<z4U3-<G2p|WH)CTWI6Ev{)X=$P2Kqu*?
z9S>3`M6p;*6z?)o)CWTSlgG`;|G~wxVc|yr065LJEN@djzF(F>`FNDdvriADD!CE>
z#v3ZZ4`7Fo)W!UAtnM(Z>yV=glrpo<a6V-N!H5J<+-yWPodq?q5wM0H1rPy)SsE)K
zKN>v}p($$XK<r0DMuBED^dSG;=Y`)7By7yrd9}}dsD<PR4R4N&mtfx0KuYOPi&7Lc
z3DaO1U?kXEAj@btmknY0QUeA(47XqD7K0{?XH!~GNIb)$?{o2aKuictX=+*e)bPfN
z8&2oKe!mx<h<f!>r_htnY+NFuMWIx!Dy4b;6({;^n$2C#)`%g#<c|Xxi-#f3(h<?S
z$+TdC*HXo}<l?-bmkJ?AG*c=TU1wV6swiI4c&2Qz8x+!ilD)o4!MR`=%d;tXILCjV
z^@q48tXAT$wnMjfbyw<gkW(S(%5hctP~~G71u?adsD|^6r~z=G6x`9wf+G#V`AQPS
z{az`ctgJ4LyFZ+l7&bV{!(lNW5JP;7>oA$-BukNeanb&|C>bs6kiP440I~;3kw_~g
zaU>Uv=3|(L9*c!72pF(xD>TpSHJ}bg&P2)^j;j|yS&YMabPNaKO8`vfQ-B#jx*Z|{
z?ULmv8m-}fx#}n!Z*k#@dN?_qji%YP$^_V%B-j~&<xE*_PA-WAaN-_B^l3qox62pN
z%?*kd2o{T(x1!WF9$&R5sQ^u)9VeR!El;P&%=5qu$d5z))n<X%F0!krlsI;+4t5rK
zb*L?;p(q5BuF2Wg5}o}3aS~03)fWp=qXu*M-u0;Md?r2p0xgGs6N{l+&pWr^>$VtA
zOZ!=}i{elEOyigJF~kq+Q`gfJY0Z^ygLfMbgGbRg=KakrTT7TOswQbkRZ}f$cTTWH
z!X@Uah#6|`_>w^7Od&Uv2ncZ_3dQJRA}g1y9yl99RGgu-a$6;-fsj!QO``A?vfAWu
z957Hrk^mzpi+-NEaI@-3W`j+M2vs5-=qwF$F?Wx--0-g1!yS-IKFdZek@XFKp9aPQ
z<?GHxiv1XisT-0g(0sm`*%bq==J&P4jas;>CK#M!eHq&((4_+C`@}NvWGxxbCK!pc
zRC##{W0mMaB8wJ};?;_~o#gM(x0)B%Ei53-Ns8z6;+oRd3Tk>n^{J5<QR9h!$&$od
zR*UQF?A)V`(lsr3$&Qk5RMM3V<-vvn<U{I!d@K8?)+h&<%{|7*yulVuX@0LD+hfyZ
z`&<P{E2Tz4B{o7ftp+IdA6+li9nuDO<v9^0{d)=@b;>NB8Q#c>E2XcpL9L#$mQ}cP
z7u2dAaYVMBNs*w8Rb&VO*Q98@MFu$(+&m4;1iZI-o+QlK>Q{(7(!ybU>0;~nyJX)(
z^9iBo>8GANa3HLFEWCmzASa=pdJG>`b`;(v?f~cChT+9G{w)a8Q<f;lLtf-r?LC(t
z_7aUq8(W<WxGm+8`;g`KI^tOLB|=2>im~jZN}a>_Lz=^F5_@{wb`KfI0KXg#vS~vz
zf9}G>Gm$nf_^F0gO3`sn_{f;txa>g6Gk%DQWf#1!2lH8eIZb1Kn<@=bQJvH9-C=aV
zRLkYCC2Yna)^Wetl3p2_Od3#VRd@i?(U4_zbu2UI;gjDdsrHr3!-?O*zpC<wxmc88
znV=aMd1fK9@8S`{+$hr+2vpfO0dP=Eps%lR9Q9Q;Eac^t<k@orozVTSRifzEJ@#bN
zAASk<%-|`B5n-14HRm?bNx2Ks>eHcH+9N#=%W}Oov(s-P<F*9PHta-*xod)eOl$9z
z_x3Ajf?j(`A@ocmEQceqGt9zK=l};P5bb8smIyllQSbR6X`=?b&}A7;z_^X=jthrS
zo-#xs#v778*;l9Hj6da8A7q%hmOy651HT;nDxWsASZUv3hw@V%P!C2qrgE6cryb92
zg&oZD5;esF$C&5}Ej19~t3A1|*<M^c!p9N^`_Zs-np$B`j=VLfa>`YFK?sE@z_xd!
zJ1KfH$S8hw1Fl~55yuxGk!ub*LCj}1SB@Y+7+fGjhbvf@96p?p4&3KD1kl6!GbyyD
z$QoC?7qpoD6mk_El*;JzBp{ngT9&jBK8(XMlb-ADUGN6Z1I}nAkRU;$8_oq1(WsUQ
za=qW@cxXlvM31NpZM#DIL3j}>fK*4)oxr5%y!JDIO2&A@0zp6rc&Fne{^X~fL^C4V
z({zx}Ni_TPlgaDEcZ=$t{00I-+U7k25EkCOC>Y-DUnEm~R)0@0Fp@_pF?u2p;$a`y
zrvTlLbP23T55M*FaO<fW6#Y4?$I}97!>5I-q?@V*&?yM8VUWP`+6%}s++wOyNv|Uv
z=$`mf)bVS>!}BZD=A;o`CLid~FNVm)zMMkOZCI++uR><3uaz_ZJyIYPIyD>F|5RG)
z@_QfoBH9jFg?~7{2;2}Z{q3p{FlA(&rdTtxZdQu9{HaTtzse%?=qN9NrWGT{D2k&O
ze|)7qF>4rs%O%Vr7N0o?WLQW(h>FZ%Yn|qaX_+RG7)baZlh_c-3SNW=%s0lBJBrUx
zYN}YZVJqn=(yg+y6-%{B<YM6^TBh^tf<Y4J)3MVpOl)AnaYD3ZK8evMgF19-T|HtM
zP96>Bfdnpkq#K+P7T0#`kM5Gt_N~oMc8@JP#9>$xkbthHjS9-F9|Z^6Qm!uq;$f3B
z9n~|zv5p(F+(@yQT7-)yEu1##nFKpp<j4n!xzZHN8|L7-E>u3!DoE~8x!o<(0m9lY
z)WQQ&HxNcw3}0n2iX=O*zI*W$)pop2ktPqC(vUmxvPqv}$2_ZyWMy8STfq=0KL~}4
zVooYWW$L~+6}c-zOGc=k%q8M&o|S2yJ!sCXuTz*m%T{;K^D%M9F4_z0M~I#qEIKl}
z;<{l=Tsyx+MKPyHvWn<d)MbS8wN<AI*G=-0%`~pE#NmUktoQx0oR4sntZEV_!0jwp
z^Ts9T+Rsk{tfgpx+!9CbVyHWAaqJ-!D!gBE+P@~s`(*wD=62M&ug;l{Nkb+XWXLtN
z=~rk?GyD1r$KE?4us)XO6d*|&J5g}9D`M_WD$x1T6Vg<NfBnLe_p9&vQ$3?KIG=mf
z$t)PWF$f~@O}dx9a5J=a@3WXLbXcaM&7Bt{@9$5uf6k><`sE4zby2)Npf}xY@mNP>
z{fAfiaIi0}xH+HtxXgg?kffN8jGUygJ69U;gXbUjU4t*2EN%mK5;?|F8=J`Pm9hQI
zN9UojKX*2~lhB<*$sP2I+Hid247ZX!JkY_T4ipQ%nTrsGn$EeFXTM}E?QbXFeskn6
z#)s4V;WYnNPP3^<Bqm=I$8l%6xip-$Bx?}D(cGfmr~rv=Tt5a1=~%0i@BqbP8Wpf>
zDpa>|RJbf-SPL%}{2LbI7bsn4GV0UxUpK0zZXlix>8-B36*b}hjJ?b%V}ueHS|Gv(
z5Rk}@&c?T#-6$5Mf#?Luq~Q|f;lo%IPIfk=6X!p6868EKlK%TMH^Q2Q_s-p}o0gxT
zn0DP;R(0etoU~J~-)E_PY*k@rO$)r3i<cxv_zA)!T3nUa6>+(7lhCnitlddA%G*P~
z#>WWW3cqSK^~R3`ok=%R{}keFI<tfhQ-DV107pQ$zgLTPluc2?a9dr;uFwaqBbN=O
z-sa<3J`84+WrN7f1j{jdFvjfcAHlpK=UZbY&F5lfWm+sB{0GUKfkSBUukt=ej(EeR
z7)tEFLEPD(bP#0{Y^SS}8eoEHqW(uq)94^7>L}@*?WVh}WcPgchh7T_l~x`ISG6gk
z6rBdQ?OTg9+~BUc=tO%xxt!;NEG`(nc7(F}Xj~9(=$Z-Q)Y?}ZImyZUbwHXxVI-cN
zvH3WNq?X`64QQ4KOk|q0lUh_Teb-c&&qriR<k^5YSrmS@IQ9&r8IL!G<?>lxRxCcO
zAnCJN8-j<UCKi>UjEd$3AUp<oEZzlInXe(e>?%tKK6gwNEir6It;C~LU&JicF61t<
zk(Kdf^H5nU8{&;QwEJcv_Kk|Goc;guF>}U!eT_lDB%v-+C8dVN%j~8^$YOs!EjfNs
zoNm(cdYdc#>PL0DMekcVq1xGFvUZ<wllZ3qhe@B+Fp#nmtQ{Wd9x0+DQqFr~8_`eI
z%uT*z^e~6%>!bX4^+DlD^rRTf^wBf<bPH#uOAtUQ8Gw`*7u@_+T3%`6_%j3u(-Cp)
z4SEtJUY}%YZ}&cTSpgE6wXb1WhYFU)6*GIBd!VmZ^ALib=xq)#{cAq>;?CWBy@OU0
zE)m2B=sT|T2z6i?588))T)3{zCZ{iWn_<(Ixzc=Fs_K%&jWlOa)UzjIP%1|VD}nV0
z6Xp2+>#>hK4;ezOVrR;wAAD?~JRW~1Xm-P4I`MEaYhd2=e(H2OKf9t~F3`l6W2`6N
z2x54^G^%07Hjswea&?L?f4AK$LK_-e1Br;xXZX^c#%bW2)S<jem(dJkBQJ{Uqq_W_
zN-c9f;`Fep0Y?gnBszf>0=n>JEa^#M>_?TFRpAptE003*?LhV8=iC5~1<buR%3Q$a
z>rvoKH>KOafvYFfu8jp>k>opPc{R?34_CnMYT|%^8Zyq&_O1);)2d;dgCXBFrIek<
zxtsR3ULKEmVcGKe)J>&U8rMI);B;?trVS+{SVx-va=Gb#V^;GmwAVbSL9bbtT8n-@
zE*r9&1Cn8zYgtg1_vG@UMPm?JsN~|i;{|CtE;;8nmw&S|{U-U4ee)svX1%krUh>WM
zGH)RA5Hsvs$X8R@m7sPU7pJJA68I3##j~rH1$5EmN6DF0J6YNQJ;Y<voQZc|M5eKZ
z%x}6nOt8&?`9X*#mqpTG#m#C+FWHk1)ulgFmtI(1T1n=wP*eJC7DhxX&RsHWkHJE6
zm|048?U^Pe3BXJb16w3F!DBL+bePR%mNg*iQD{1Rj!W6sppOmAhkTj)U3st4OcXC7
zxCNY1)*ht;vn3#Y=pw~>If@$>g|$3s44XkYEUg>Ce;Ue*@Q^e5t<5O_=naP{+Rxww
zF%k*P<<aAvLwwc6S3H}TJUj?u=+6e(WLVtr2|D}}cOu`gZ%n#yBv9y-`U;u?Gu8<G
zVu)FZt^r9u&xVC0=<)5jxNUU0gN{$Ryf{w@bw|Z+)}Io;)9w83#nakt`K%jkeQ*pc
z`l<3h&i?&mSH9SFp=APA6q-7?QZBZL<$F5mngK|BMv(nrJnfT+nC$1Btb@eMA;VOQ
z{naMYvbJMynBb?CGP;QyU1f(I3_bs7Ba^LUZl(wUL@KjEJ0Cl=dz?drC%5I<+wFH1
zAloSNHwAj6-pqF_dM9yxmnk8-b!Bos4%#XP`ZB<x?*5+G7B`tZEiT8&@p!%6rqRf5
zSKd}S_X2A5Fds3s<H}@Hk&O7eikU`-yPuAW@y)21mj~h!U<rctIwW67L2Uk$T6@KH
z6mTHu|7Z*70*BD@>A8j&PdrhQqbAYHx{R`@%Keltqe0<bTt}cG95DGZxj%RXH_`xq
zQqvt5O7KeMr{t4FiWZ;@_-G=iW>)lZ8m^9?MvBR`WpeU!i)D?}g@WTd)nX<896=5{
z8luU$I*l=zbGQ6_sC;g3<*<t#B%eB<8ec#oDrZ5<*fahxx^dirnABl<__-2#R6G6>
zTE@4~k1;^potBzkc=ULLP0Ac*?ByE2<Q&Rkib~(jdBquJnTsFp&ZnZP?8Xi32G{^E
zGBBK50^&{aas><TnB$PGw|euQH)=kEORfaaKFLJ+>)B1EzU1u-1waOaJ(mwbD+!pA
z%Pixt1R%z@=?t}jbT5(aoTRL|$>#AG57Ozt9GgD0!{t@bBmI}P08y}ZSrvX7w&hUw
z8OtgO>^cyNbk+Xo;!asgN1_T}+JeO&Nlm#<aktnm@nD`04Pu={o=jUo;Th7aXLg)v
z%x(){U&=y5mzD&1vXP9?wmrYTD!9%Fx)qvJxW2UI7xtsB2)8ZA=+&Hb0Ul}BA1>-b
zdZ4Q<saK(FHFT+Z952j`w^4{^U;qT#t$RuOKY8?@+%fT>{^6a^x-x)r@Y2oeKz4%`
zo`=cVB;kpE80oGqP#ni3h!Su6DDn2UbpIPd#X%wHs>^DK(&CqF!6mBkwODXeb#4}0
zcD--;o>WCSC)Md97vJl=)ZF3f>68qy7nwXTtqw$!r|c?UPxBd~Sp!2bYJQgpB)HpQ
z%Q9Ui&drgijj9O^na_sir*%-prac~b`?k3QF8n3MiGN+iDYR8#L^<SOJtm$z;PzeG
zR^>Ir1WPM9wX7tkuqc2fmGcYa>{tpj>nw;kIXmYo=$4U>x!&$|4mzXqfpu>rq_ZNh
z>h3$+Qe>4|ObDVxa3x-~V@N-F#1uX#bPF`Y_Y4V1jE<={(U&8;q(eGCXNGBfrA@50
z^q-W8`s^-i?4ToAf<$Ls&al*_q3tLox|z<~)y{Y_lDf-8JlQZr+ke6prsX9rh&B>{
zN=O`)SAj4}56P>@d4pj#im_(EK*PIxWzHg6w$H4iEYNm)<+Ok3XhvsNqL8qb^OC~X
zyo2r%hH$oj>Ig{L!*8EG|Mr{5-<)>8x&Q1j4p#3~KFd177OBmiSnX#0t4bpxNLVS1
zog`5&0>nnFDo*&nca(u(xW~s&9t%xqSQj3ttjwP~$#)YM9@`@cZ+6)4ck=uq>-;F=
z@#GrXH@wP~n(pwovUb8aA9!NWG&h!mlmz>?)!AqnGv_4H9^U=r?!ES%J8k@Lo9|XT
zFsP_xq%W!=cR{luh7wBS4d%?=a2Ym}lS+NL>s}5T6wq30G~=ko=Z~J?@;?9OE0-_|
zO9;SdpxLohoHNO>rkgabuKq~-7&7eSv4gq^Q-Z_|WBKgtkdhEf>%sxP`rIjT`LdUG
zD71oI+G6~SO>w2_2;YDE;y)k1=zjI$+wYzyXW95wPNa!%q5&o}Oy%&?fA0p5b{#}R
zB?C$Uzj>5r7-lwY(nbHHE5E6oph8S{bvJf7j%lEIIVp+J{VSB#oR4<dSrhan%_Y*D
zl`1m9!PZX|Ew`E_uL<nqQvvj#yW0t%t7)GlJ%#BBQmRz;Wt5DJW;4Kvsr^`1G)#Te
z#pr1?UO%1CzDsnh%Sv{MpcYyx<cZohbCk#Av3&-AbXE+5$ujRjq_DwsD9Nc_(^t%c
z)Px=Xj3l)S&?)s-ULj@Ek{M~1ckX`jN%ETQ9G&F;ST#-2LHRJddV6!V(@VQr)y6f-
zVRmdqVVT9d@S?8uaMRLH1{drwqm|oNDvFWn8kPrI)F&v(D~1MUqWF4dVrxBC_LFXv
zRvd=4eZA8^*=uSL6idDjBUZ<O(=7n1AWBPTnMgQm`ppt-2$g^=$TARNTfyp--ij6U
zMoZGh8Mm`TOL#IQQ6t$es-y$}sX!Ybk|vKt)oF7T|Jh(v;&%zSZY5`rNQN(_gZg6w
z`N0WRk2zLs|Lo-1>GOt0N3#hYJ&4Ltn0Uv|QFlbuKj%v;io}g&_wdKEJ2cO5fUEWz
znymcYwc)#nn_7z@dpeb>eH(G5nY|Ode(Gvt@)x*f3_7P(I0b=!K`q5hePbGlE|{Yd
zsinHQTb*awcwS!+R^+v34%M()gaQYxk%k%`7zC4Pyr2Vs0ESBzh22IGx30qBu}XiE
zyvc>E&a((|IB$qS!Ef+Hk-${3oZ3M05cXG%I5c>=XT{-*Y*5J1=lD3Kj~dHGoH*^H
z1^~wx<5%`_pbDJ)DdB^hx77DlC#3D~QL-$IKAi=%9rm=MnHmb7!jQ(<$MmHj7LU@`
z`V8pmoj?6~@;dQ#(#DDknBFiNVJ3L9L>^MXOi2xaowd4T0#tEs4VwEiYg&48y#!}S
zv$ObR`CZYPe2k6;uM7*z4RA9hmA7w*?DlimIBjhYm;t?3(t8S<OpmES@4lJGdkwWO
zPnB!%1Ja~`Re0&TyrBgc?UmZCq)KX{t<>904ihQExn#(?KN1yM_`01Kp_T2lik(fv
zba?~r+C^^rsB)o1p8qRr0Mv&$0KO!Q!*oB~m_yWiyS4-Br*LJphS+OeD)?3wx~s*9
zrNv3?g!2%roE%dF?nZxJK@rfYW*sXsQ24TiU3_gr^MK`Y-vR)0y`YN9?*Qr#@4DE!
ziaUbmn}?{1R+ePy=9BdP@BjDzH~F{ZL64TL_we+^Q~n^?F|O|wbHpIK5(*#*GVaCN
z{Iod0@)<f5dpF00B|L69-KXJnpUQL}1VdXfVVOlZ<?!X&q$Q(y`JBBsSWUriXF_JL
z>BEMC7AqRPS7|hQOq!Ni-)`N%3)lTSS@#!ybyh4puVc9C!K;R`g&?oq|NZ~^|Mg_0
z`A-S`awdC^gjk8xodm^*h#s1gm}ZDb?i+{5CDCmrW;tY}Gw)Yk>}%GxqWS{WlFo|S
zHgE;R)n=p(wR~_tAWOV6SlaWj46jI$)MO@aQq^r^ruugqx>L{{YLvbUX80nLK=zdJ
z>cVeeo#j3J|FidR>un@gx+r?xe2O&XWsx!f>QLna?Q&0+q^e?DDyc=uHG6S-0ZAZ9
zrUf8jBp`~mYk%`<J;2)QX1`uP$&UXYhlogkI#t=-^WbmJE)kg-85uERoX0<8v8r^n
z-m{mJ_(WfyNX&#S<9V^&TWFL!J3jZ*e>-~m1jNP)0k3@`#cp#jJQ)6|1<6D9l@i!3
zmu>ED$d^piKY8&7D1a4jj5@G9=v-laMj;mF2Ns7(@9f~mhxw0(ad-G(2L-<~|GrEi
znad6d6ocf&B`<O>dyFfDw?+piyqlTMy)UT+>obIZ@g1B-I5m9iovR=#FvO5jm$P*c
ztjH(6pyflJ!0?V2SgDUC4!`u(qF<hz!4KaiTwCns(?vc#vPgdiJVeHltb??By(INI
zV6)zi#6ijW(H`wo(*hS=PWmX@NypH#tQdz%JD`Wp?Md>MV_gZ^YNqtVl#zb`5o_nI
zoc}vXZyVHBdyCWYAK)KUrd^+(gEd&;fI&c?RjaGYyy2%-N-$ZL=c_I6xI5$(@&@5k
z@lCgQY2SJ5DSXlGDso|EoF6@`KHt~p<@Diu$OpEdqIURcxN|7^m9kCAqqZ|Im+XZX
zgmROqBb&cVd{7QY#0Z6~Ia>?X(I&*uX1VbHA_d@u^aVr>MC30FH~>N*H*|11fhVih
zFzY5zKA=Fs*TL{vX-|SMCiS(?Rgch>*Elbd0QC^bV!zCM8?x-ygN}@9;-_HrnD>lG
z#3LPMq;?d|$VD=AXR9oLWFjZA=V6@!YBxzL&hxoW1&9|JY&Z$+J5uuGefXGY*tW#q
znv))pA~8=5OX!+cZC)zGR+B+euJyB|!6vmT8h_U6l3EkO!WyA&t&3m+6nd33Zlu=M
z@day%Ln(?G^Bg`k+3%MAvTv3-*5>b)pqWP50r|yt6QD`ilXvV9Ws!9=Lmu6cXx5rw
zHnG-HtgP*1<^9YWFG>!PrNvz~4689MulONpd3Myb0Qb(F=aR>+NsiO&cTG;x4w*T_
z*f0<D#w3&UJxNM*zvdP``!O!g<nf_C{tsZ@mdBHEGdb^<5+>sSn-t{LUlE>x`73cC
zZsB%5#(Wjzf&!H`tud~(3nn{ajIHi(4>I5?2oT;LsH8<bslbsjMI9bEs({Fob+;1u
zNClUAwOj(uj|H*SN^%O4DmBJi$f8odm2B-FTFJ3^8(!ElNb+GDJD%1<_@t*p{Pc#S
z^pjD-$R|Oa%7@1G`Yvr;@9<^Grr6vZFG8H1(-W`3KN~JA=fm}~h2p4avR7<u18CZ%
zbhY#;ygF9QW+*&A)A1|mfk1J(F-MDWZ-lw;_GJxpDTe-pNZ5^mZfm`0{Q6E?zy!Zo
zYdoNSwl$6I_Ii#e=$zOm@bbrRV!j2EnS|pp#llz7zL7gOz4m5Dno4@`S=>`g%}800
ztmNyeT6nWh%tYp}5tQ~RrRChmj~+|Q0))6R%4ypDHT*yM^Txb+Oy6$hA3<%zfAs;)
zH#8$+Tbf$2r>USwb3}~oQv1Jj*5V#&V$O%SnoL9C>Qfr(&@Brmk}|m}s?wcp=tX_-
z0?VPjS0Uf#+(LY^G`m<Vn^hyI6)2jN_B0?9DvjalWG#h?o**pEQ!O)VCZ&z$KuLNU
zbFIFv1x|u8rbG~Ff|fvxGMB}}C&yGC!d4^MF#_O&@JKNFy&z4qBkDO`W`L?(cUgyx
zCpe6cx<4pln<PISNuwmo`cf{qLE9Vkl62_=#*efayIBu_<wLILA9W<cNJG6p8f%si
zrLpF(r1v>3@1Cq=enRZ%=s=pj?{pOwePb>UhJo$oMq*I;xtu=i`#F?+Pduqf<@N81
z)5i)C25$2)*<$#bzS`>hirWGLRn8Z7mBkgsecdL|$vxeVo+q!gRtsE9@}4S=J@Hnc
zK3LsCNOY0v?TQ4ZFq|SBYDiM{i$YS^G?>h5wm3UUvnS-fS+y!z2F+o!!K`7|=@mDG
z<iA)?r#Ea1u1n?Mn#q;Qv9gET%lACIAB(6Xix<KH;N7Zv-|-WU!t9A=J$36{s4E<E
zIOY!Uk0<4sb>6sk59+-<t?x9Ed!B4xE?-xx#T1kyfClYqJ*gYg20Eg&|BU|&EW$4`
zQgJ0>U%Cu@MX46Jmj?2&<V3D6M!$3RdWa6FZoQf4S97RRs}CZ7wVeK(SrU>vaao_Q
z^lvnw(E3Cz!uRp^)P+6~t`~bS2ePQN6Zh$PxRI#vH-Kk<fcy0p?&!-M{d(T_mGD{`
zXye}{>jM<4pwE@{w6(M?#fXmkFK0uNla3_8R=YLp=lzT<k0Db$rT(_-^cyW?>~3;9
zEH<;5^qgj{vcW0#)Lmx{s0ooTIfL$$jfy(YWmI$a28+OU2Nw-{(d|o?f6~nS%XJvv
zQxy5|e>=tB|Lu>1v-Nxcr{nGbd13P2B-r_=nm2>4S|xB%LHcXnzhujB;^x{cH3THU
zabj{v>XP=G$!vbfY;R%*xA2!E+GpkX!AxUOnB|~4)WjaGY4R|zG%c4kM}*#VYTNkg
zcsu0<BQ{KI=*73gb)6ZE(Lv54-Czr81+g0a5x?luDVt>hosZ;q!MC4(7JoJ`l4%M2
z@s#>^{7lvBel^7JLow>DPC8YLHL&#(Pb&rW66qrUBBq4q_hULy5^tIoCW`me_W@3B
zKIw9k0ej~my(J8Y%!K`@tnkCAC+Av;2}SvUS3+iiG4UdnZf7Sg(`BGUI!#)T#6%#q
zeT*x#+G-Y*0u^2?%f)5(5)Q@JygJTb!tq>l4wI>8$W03mO|LDTr`<Lk1zNCONA6!e
zQ7s5(ansQA=4wI6t;)B_6Xa2t$>6%2O$EXotu<du*W{#;V7q7n3#(i7$IvEGN%M@T
zO9U1lWI7g}ktCL`D-dEO<wES@>7F3%51LGgO`O}NNU{u%j!~LGa%XG1l8N}>9zoHj
zyApOzSiFmQFdynMik?~ljARL14v|W`UC6M08;_6L_DUqjIKH6J*W`&>qhO-YeouRh
zikCD&h!MYD(o@crA0Ia8=*#+z5%lR*(v%@)_-|(ypMM^8%3*qYX2hLCB%h8%D>ByA
zw~35yP>(ilWRhT-{zUG!bhC65G(}E3HRhKR=X#<a4Tqqt)zH>KjP}lbG}#*zRC;Rg
z88U+GAvGpMA5YAMkF>HKBrTYBNG(3{a@kf)xsqwbn%rr9NkKi&OBUG|d(egs9?m8|
z7d_}X0QUdpw|&(A{)Rj%E**}-|ET}_TloC`C;YGYw8#FF{g0o2=T6kAnNFr*k~??a
zx%+}Aqm(l(g9doXrkF{<GZCg@Ma>cB59Y;xrrl3JKQSrZ`Ss!RU##by5R7~$A)Gw_
z##iG?+Lf$QsTT_-I!)uImDKL})9xSOIAkqV`6ekxip6k0<nteTY+f{)UQ}r`)uwq}
z&BMz4jTKj7WTW`ts{Tv4oG7SP8s6Xh#wg*<A7y0(sztqe@nqw@Yboh^4Gd=lqnL7F
zl`9i%8Pv>0^SY8&jlo>;1xm|UJlT1Z_$Bev9W6eIE-n16ILZTs@}LDBW4CP|p&k6^
zWPR!9A5A8yyZFYh$LC86FC6F0>!8$_CQ|$-=KL%(QEKQKhq)rQCP3CE)<W#<l6vRz
z6+rs5qZ8;Ma0bz$^(2INQtaS#L<t^-!wJ|_m5meN7+7C)KYTvJwt_LY64>GV6MYhS
zZeY?^>Tk9@|5=oP50KXXV8P5OjXVk_JZ!W@SZe-!WO7M4H9Tm-UzdSSxCzq|;Ol7x
z0|C=^&Dn-vZx(yo9b~H%r{rXNJQ;PT6iK?CsQN$nyKP*Y5;^&(*t$xmytv(v_-uGp
zodsLvb(%o{+0f@h`)<KBIKP+3E`g^hExYIHW2ut{b3foqtS@>w^)7YoNWa7r?ED^m
zf9p#vfKi>K6FT%}Vb5!L+oK4fpp3Fb>$X*n#VM&i;`148-EaEQBDghUi+h1n*?ac~
zf<l03DeLw+T@#x5I~T4qCGsWdRy<1f``H^<W|}%48K?R$1%U-kw<@d0xPb)^K9Jx4
z<P;G3u<EX6eb)n$D2FGySeb29Jj}(M1`gq(oC-2*MU!*6R;*X`_MLvG^a?*<`)Ne2
zMZ9PjEm4Z-(aPr2actroBp%SyFV}vkF67IHEFBG2Ckov-;*cRl{(Nvxzz8Mgn*5%c
z?5*`mL!MEZCPb{*+S~LJ7D?t#+$=^HbLa0UFtK^VD*475l?&*)77LS*;QD!AkcD^R
z#(mqe^SYW&yu0{I7OPv9!^5aLe{g~WqxkwrXM~q|yLX%#+o0P~$ipw3KpbRB@^Lp|
z5TG48D0+TJI^aV5NPF2UPM==~ePaIMgWex5_{5C^e%*ZdU=M~D&5Z+nS!#6bgNFKS
z2snfr2Rr%KCm%l6=fn2T)0>8p{?c=Ta?s&7M^mHmYbJIY4z_t?5-Pyw6zzJU^{87&
zh8{R@-w1gC-tQO`Nl+viS5KHFx10g$ca{1mC!GgQ>6w-L1;gZ~w27E>1D|=%4pxLV
zj5s5bUb+EWnWw9vYQLUOksj*IENP(8!B>IHIh|#WwDODLy59a4CIL9I3IkG#qcRp3
z`@?kEQQ4d%oZOUcBJEaXsVyWHQ&b4Sc~H;rqYdGAX##)eSvU{76Zy)MS#H`AP9u3N
zE6z(eRQhiYl9Zlw-pW^PnN7aa<wxxF-n6<X$Jd`WS*>{3K38PjVyX!>r)OxhH-UvQ
z`|4wXdE+Qz_8Y{uG1?9=)=7G}-bo;daDhebP#7r^@ka}qAnhg*Rb!Y8C2xtP6Cm^W
zP8x-2ajUz(wKVJxek&gAfW(RmIR#oGaE8A-X4Bpme#L~^WG>d~K)qjj)-^i!91#+t
zR{8yH+ByZwurj*61yPQd)g<isa|_LT&@QPwj2W^XNpwJ52tmPu^IXBi&t$<6U6|~t
z*28$+P$K!0Xf&BNCT&xgN(PBNc~qwmOS9_*`V^Lv@C>$kP&WtF9PA@(#R1+p8BW3z
zgUglbF(RFz3);pc^nSaw)bL&oJU{w5^+sz^lH<$Eie=xK^^os%AUQ|t1E{58^20^b
zt}eopf1Zxw02(|Vg^L${)nTVG4`hx>@`)?hvZMlI6qS@6Zq;*tOYw#F2>1=UI6iwp
za2ITr!j$3edfQWf-T5b^=@}yVZ+89(Quk2NSHhq8qU7r242DtiL)%VK8ITST$TpD8
zB>4&5>WAZMsX!pra8b?T<?ny9vm<3<fxwaN<IN{=X7+3?50jar8|goVFMZWkzJi0n
zz&gi=|0BBBjvQ0%StT%FPHsCp<7t>{5jShkukE8*K~ebH@Gn`Kn!Qeo!dHfWB@4s9
z({+)D(`Df=H?GRgPEf_=<Gp`oT!lE@Fv)+qwXp_Vfg?HF^R#ZkNzH&DmKSSDQfakU
zgSBG-;cMG;KAmBid<a6jywxwICgkDaVKAUONVyJ~?Q=Bc(GLQAsi0~(l^OfparVm;
za>mqQ5_?QjI>QT(EjKJJ^0|~L)z+0_BN2{h!zqGyU?4W-k=Kn}RIIj8&=o)b(HR=e
zbjbp8AVjg`>s2=6ECw6Rn+={ICSZ8E&1mnoa-{R7@y@HlC=b&^;t%?U?d`@VceORa
z*Nr@M(dYwTCvVzvKh*dHer>#7PK$n9^uH-~kJjP6OT{5QEWWIQAY2wd{qE`T<+I;E
z{&u(cZ{dLK{`AYElgGp3Z(lxs@$J!*;j0%<f;LqjTpi#>z;K;BKYI8$0=~m!IY{Qg
zQQ$`T)1Qm}vKSCqN#^#G)33tL0^0s#DVsaAm9S%fxpg^>Dh3dKxBR^2h404*yEXQa
z`hIzzYD83Nt^h+MFj86?6ko5EFhW2(j?v7LsOv3NT5z@{`E?QP_)?uZNE{;(3t8z2
zYUKzpO%(XF^*9KhaFQod&(?0o`~*TGQcVUZ6BVUp6qjy<z^HMk-<E6{{l(4hUSE%0
zv=aJacixDuyZbxS=!o<3+k^6V9$+(vB&w>HNac8wDSua*>3ALWwsUfwv=0jT4cW|z
zvze4(?Ec)E5Qcf|s^Y&v9$Tp6exlxj9HrcdtzGbRyqePFi!EQW^d1>X4S#CRpjmE%
zvTM5v4+10$AjK?6P4xS<HeMKHWM_D!m_hK<8KzotCbnzF`7GbB87KGOpc(J%L<L^U
zMB-#O+Ynk(brcN2w3f8RH%>M+To?*FHV@M2vZvtTdPBA#rK&mh1`zmRG5Tq^`|!8+
z$WY+6NoC858NwNyHq!o94gulEHlH=y1}0+9k>vDvg>AmwrUt;EIEe&6pXfOd#uUwH
z<Mu$+VbkiY)ErzQOm5N$)H!{<Ii`kvVq_hhF}&-u3Xagao%vaEb}Zf*o;9X5{}h_f
zD9u`u6&wxz;o{!t=_YaSWbh9Y_co)C7xy;T4;A-+c*p(!C~+Uf;)jcSMw`mkfl;-n
z5EC^>rz<ph3icO@u8<w7xe3}vfIU*1CMfU6E7`RwEBf>UarFE+A+yahlqR2b8EIr1
z+gNeJty2$5ZK;4CQ-PTJP3mDfz^!PZ9~~!!XdVl<l3@B3j*i*ni>?8SL}+$rFz5oa
zK+<$4CqFQ<)8rl7B;EaCHmlsZ=wI&Xqo4HI$<rF5NPkLd0yQF`{<9=$m5}X%@)jLy
z>|!Ae#*K;ey+WW}UtAz_HV{HDC>wKWL#Wxc{5OaZ9=Cxz1pPCqYQ57h=yQv1!QCxm
zXp@g`*y1k#B#?aKaL+zA3GAUEY>d=!9YC2+n|V2I@?<N2NQ+3B(gDEgtVd)u&l*Ao
zse&x^m3ygdNo_)sOrs$pv_mSiN#|@mw_3$CNhIAN^Lp8PeLCUT(Z7TaXOrX*Ke4)w
z6Y1^o90i5rW?Jk$IeEUXjTmoB!`5)!a{Ej}-nPb4FLdY5yN5<uy02dl_<%8K-#Mk8
z*Q%q-gLDy)0a-Y@b$ybxk;V2p7F`*sIog<Pi|Ku3Ey6ThBd-jEF$4U)57kSeuruU~
zw@H;t_k9$^Vdsg`A;7fQed)ND6G1xNc+AXwR8H&FwW2+^pL^qNu4yKAPHcT<w}%}o
z&}b3|=uoVlutoBlirC`C`ux0Cd^u$cjpx^NRLC8ajX}x;=@KNz__h2RBy9Nq90&03
zckX;wot+>)#`X+xs|=oCW9o536E$xG6W>HmU<fToPqBxVRWK!~SXOT}EG;SFWJ(`$
zj<%4?XZV<h-9vm5xgWmhs7(%VCy1NJ?KNJv?PZ`1_rK!l-c}~k%eY9e2dg*Wh6z6=
znY2~<6YT}f#*}7#+MR%PTv~r|88&%}jVAk6p04EwDQh=Gxs1hsc^%W*gxRzk{31O%
z^Gi^DyU_vwECn9-WM7k|%|qmj=OmTDy~6Qk2!5at3-$$c;ZJC+5kDG@E!mR-^Y9Z#
z^s4dY*0Z0ssxy15@QSKWk=<^#4U=JR7(H3MmJuv3S4@n*Xb$HAjGh`~7Jd=*RH|-o
z7XlceAZt7fj1SPtiIz>EHPrrGA{%)MD6ry`kQ67Z4Et0}x|Gj*J7ux5wHvTCZkK46
z7v!)S6DORLU^z(8&LovWh$O4;Vto%sjRBob+$U8G686w5lF!sGUod@wfiqDHC+K(9
zu~_D-{Xdq~C30Tg#L~(P-_Dm_no-7W)V0qaf?3LBX!#B~J2G<va`O>rbJ88{+U_JK
zZ?@KCl`ZWGL7c+OfjVF%O!Q3yF#+}Q+KWZ%iW72!#6eL&Nu<N1MT4i>e*Bqe{n;$x
zCK)sRRi$;?NyJ4i-eM7~GZ(Jt{raY+lgmchK*-tB)AFJM^!7ML6o4iyj{89E33`${
z?z8Z>&-x~Hw|X0veV8Vwsixa`UR7OyQS~D)4it|czKYCw3np3S29;-{l#vwrRw@iA
zc}FN5Dt=y^2&(C9!heeo><{%!fw@q~FH2vXhF@d66C3=do(-Di#lgNpK+n4?WaHel
zDq(<#Otx!x+Zr6p%%cqZPi@`(zQW1+@RKkL=c}3wSIxm|eKLG<Y|D*rk|C+unZOJT
z4wn3C>0J(d?s9j&)bS-Yg`vDn5?4CUBK_jjhOznU{dE)j;R5z_vLxDJHXZkeXDE5O
zVAsA$()q|g3wMpDNNZ<Da<=G@gr4sdnPepm=0)Pqfq(+dT{I^i{<E;RmjEna&WC)3
zp~=#}dBJ|@Q}R?TY6zN=`W2r~D|l1p-po41VXs^7vz4gazX|8B3X1o#68s%zhy|Ij
zZeypjUkoiN4Ro0%(pY^yO7E*yB$pK4THgtjl%KK<k_CKj0coQzf9>O{8#s1GS?Qit
zZ{CX5hTJ1P_mX=!(oxvQ8l|Zwg0pN!KRaQ(GPzU7@;m$SPLBGOW#I@V)-AFTZ&_|m
zKmN+QpU2${cO`o(SEUCAu4p$5{QA&0F<gi{DjXzPyr8-^X&*kqb#zHR0X`9`@7H!Z
zC1fSJ2~8X}h2Ki>g)}-vfcFO3-8?sCdu<)E^tiYwAokAbBjy_BOjhy_IjNvUk#(cV
z$D&!lR)8WE82=KOi*k^_3&8`W2`4<gnh!bH#y+iUn|h4gL*ys9EKap!r`m3->-RzL
zDww5ApuJRc73I`s(^T`VdTZKWaFFpf0W*0oZ@akc@HKhvHqma<9}|2nQp$S|($0=D
zV_&&b<<t7a7KSODUO!Y$ycpiS;zh6c7X0l`;miMJJ*@+$da*tWD%c4uZdr}z%~iGJ
z-?mr-B!*ex!L&PNaA$9sY9#fjlf4?o_>RC{QeOw!Y{M2*Z|gHO!jOKc8s}=!bN+Rp
zW2;aQEMWSH(zW5u(wAjIK*i(8fBilb!%M(Jh@k50Q3w=#nzO8TFXVwf7lz8&m{$*;
zQCSU36MG_AXbLn55DRAmosP};hBldx0)bmz`Y(nGhLUxOPmi?l1Ab^P_D#%1;CVA%
zQ%FImn3E`-l`FgdJ2m`2Nou(JKmeJXW(a@Kz{xms)o}hEDaX*6KTM3PG&Ck}T$;Uk
zYoHLOLOyn&DVOY1T^2!QSy$TjRl2f>|M6zckWFja*C}*sp~!X_%c0MGx{d2}T}YWi
ze@jwX63fsE!Xgq4?I__(<WjFt0SfGmz98%7mSw7R8$7dv$grGRC&%y?u}g|Q0Y;|&
zx*|*;t_G#DuWmxcx0TfYvJFDjrzjYSq6sMkt+;u}GCl9je4EVLcP`J$o8yCL;aMaa
zz|kd5mg9prrAxSAQ*0G7qdpxFK^!lez{`Tj=+2UDnxyflbvYBT8Q^IYkKv@ic8i%R
zQGMM)!3vV&)J8;4A&%HUO-fvKU8#^K+&x))s|Uj5_Nu|fz|(pRLYf(*qq-TWIDu_9
z;Ohn^R^<`2E82RSaK3?|biD6AIhrE@>@yRNWf@89%q?0B>j6^hY|FE0f;@@%dBi0E
zq)=)pjyKK&A@xj{dA(g2<(cRKWg#GMT1N8t{beNKS*@FwEOe(>IA*pJZFuCw<Qo;_
zSI5dpN-g8iKR1pB5usudf2k0GO6=D$ae_${#v1?qzyH6%s-xyXCwAfK*5|QSCgzH3
z_9^srZ!xZzbz8C{G!2XW3&OwIeoefRDK4lIX%d0VB94z8?vR+5QebyRE&(WSc)tvJ
zyo^U9e(MGpYoa)RFyX!1KhUK?flUg8*C=wif-Gz9t0&ATZk2g5u){Gk51nJ0N*X+m
z*^1t2)5|yD;H17(c?D+9h!Qct*q#p&{Q+9<akF`8{TED2W9oetQ>S0GzL*OO@{ROj
ze}nYQd(&eWX;5#L4;_$gFKN{!QFhVb!-ROKH(`aMmGR-&LKtWRVf03LQQQr~2<hzk
zo%ikygJC?xg{}j`04K-NW*lQ|M^VlZr0)&87}EJf&=z^sud_(6LZ%)aC(+c8^VNyV
zWsT^vw(K^BlO?1aO##9XM4Hm9+DOd%j@~(pMf*tH!fjG<w0HW4d|4ci^G4G~*Rih;
z^vCsh0&fIWSP7VO18=g7cuPMlGWv7Y$+43BHhy@5Ou;B&1gE%xa<wbn79Wo54C#3`
z0AV(IH$4*BxM78SZ44N#oJ^J$1SO+@bPp<FM=cfK33fP2g9;!p$#PHY*OfP2p@Zl{
z+pdJgwL0x>xy@UOxc5bKIc2O-%*7ktcz4KqhIUV0O}0hzg*X2yew8SkTq}mn3U5cq
z2vCCum2G_o?MOF-8}EPuKsTfwTurBeY5(=$PH|FR$AsXErco460>drpMMd}MKNoin
zzGvUcAj8wX#@h8j!%^<GT1?krPqtd_dWr1i%aYh>(;Mm7m+wsP+(*mglAa0pV1njg
zYHebk$Wle&A10<ijTD$cOYKv*O1znxEi_jz_qHW;Lbem{z808k@R5qMAPgK-t;jOA
zZ2$YvI?o*jHN(0`bdZ(p_*8A+?2foS5h3FG<Ort%x7{p1t;@tMdwgGdYoqE)_m>mm
zC&L5?`n#xZsVb<tV5v8Fh3=wUx8BV>=KTUtU|QJSBIA-m<HsLZek!=|St;?h0^+n_
z^#%ITADjdUxvKW_qU%@3Ev>C}OP|@P8$~_Ml59UBt9^q>cohDFD>b$YK~1MVoi-O@
zKF_MKPvej3vVKb}c6~Ce%Hzk}aq$`?no(ANn;kQa=Abm5wegi3c}<Sgd_Jv&>&skr
z_99HR;bHdMpbB&<H)L}!30kY!+3lMApKNd3uvWc9f&FpYr0zEBE)Wy660c)w^wwDh
zY+J6!8tj?T_O&nHp_W;;1ayrgte_al;SI9>-rZT7%xyn)vg2zJ<huWhr{??sWGG?+
z%<>L%o_e<YxDm<w`A-KKGsiku8jv7CQ4xlZzLfk#pBNcL+)Bnd+oo4!y&1~lG>koO
zq5X#?IeMO`6&ocfh;)>Tnl-Dp5PpER5O<SxpKwz_APZg~KH=UB@}JR(X5EVOHM}PY
z=EVr!X;jl=)a=19{@MWmm{lc#U!kp}(ZBMdgdbJ|d$UEgVtSyU2+wiXl(FSxHDEX*
z5o)@+mfeOeS4P*hG{8XZek3f}tZiK3^P%6RhcKJ^=DQ!f)wfzdEOPcvCyla5H%qyH
zv1q3C_*$)qF)&Ki9|Y2*gq&HA#b8}hA+uBgTnIlyIG#0cm{!gJCWnf)^?FW4G2Y!+
zhxVY}K7O3Eq~9MDD18EoeA2l7v53yB44<Gc&+QWe;U=RDa$_rKYvn>pNR(5=Fq>Ci
zaNgxgQO--oG|KsFDb+$iH3`$rISt7i3Y_WN@afcP?)|D)+`oJOv);y;Lo@g(%F-}Y
z@@2LMdu+ZO%&sfJLh$gAMk%+O+M@6b^{&j#qrctux;zbKy0UF*N%*E|jU`ymC!4;?
zj^CC0ice5e>kW$5ppvQImaQ7jkn;6Ld11N_rTDyqv9PWs*wswe{>m8DIE+nQv4Hd2
z(OtJo2;E&RhdoD15m7H;*sI@WGn3L|TcWB?QCELmyq-gWi)qfMv{HgC?-ODB`XJt1
z!?j1x%kW8csaE8k8mT>v5B3b6{!urowJkm*jw%qmBUVX%x!P5_RIiSEBqTbc+&L<1
zEbdim{7GoYTsh71qMU2(iG-cg*&DvhWm7ZjA?CWG|Jkf$TS17>tGPgDtCN8i)*))8
zPy_@>(qP*Vwuu1si*;&b<wQh323M|2MXetkNhE{sc5SJeiHBd_DnwCwqZ+Zo^P~|6
z6Ga)DDr!C3hg`HvkWZQlYaCnGetVptmm*<8be(BiZvZJTbw$%km1ysisknad2{}HC
zD(rA4#iujqcWMY;;s27~#^ch8X-+Fpy4(~e(fcsd)o<6{_#oT$?2xDDo4o-+i+-+?
zYLJzp0jKGW9dlkpr1WNpxe=P75?1ordL?F~$uLMQnrpS>;IwOEKw#_|FKSyY>X+|F
z#|E4X(9TSg@u298mrbkgiElNyVqYMYnytX$$;pKI+XwTQTSbx>X46758>o1yUJ?}K
zz?y`21udH4TW-l*Fg?A(F$*je>U#B}WOg;g$+~mLn<AlXsw!vgojcki2y&dI8|Y2O
zR8AbrdRDJAvQdc>M9|+$dJY%J3Sj>ukJ%4EI;t`&&0%rdYN|8_5*Yxog8tjU1cv`-
z(CUJj0N?WPX;6NLj-1wYzKgqsO%;S(7EGK73tmqQVny&j9C7}lQU7MJKiMAGNA*q8
z1Q~S9y-A??(z<&)X7obmnFCYNv62UwPo+)hK^9d3S(QJy8!BA7b4NJQ+XSkS4j1VT
zbmz{X5H*@lWObv6nx^1g+7G#7Vh)NYLC@=%ESqL#O)HU_>7-BlL3H>gi~#K!Ope}-
zvdzWvlv$5w)ABDod13f`drx0h$Wth%LB&#vI9TaV`@>$i;iz6>Ig{(9{34g1Bg6)H
zn=PD7F7duc<pnfYKJpDx&8zK?fcf3JlpFSkC`@_UNE1V(U<R#B-p#MKsatcXKu*&M
zgGZ7*-X^90RBhqK>J?|@YBjC;Nt&SOggE?`jzxFX%G+bp{Z*bpd@06b9`vPaM%sa#
z)yqjRh^y-gR)<yH_JDpPYR1$t;~pJ--FmpY7wB+lr@0B|y}5uc5lCbLQbj0d8V(67
zpTv(9PM6dXS&HNtHHF-!mcFMrZi$2tFQPP;i}*c3Mlb3lro9$U6DEGPlol?O#zFfG
zTF=6?8~)ZT>N(gJ7gS@xVPsQb6t1V6%wmTjyz|mbs<SGPgS@Tl$EA4IHn|rKmgYPc
zQH@SiB=x*HuUA_9j_>dCDN(niVFS~>Yr#zzzZP{;I?IPKc#IjZqbdvkrwjpkBT=Vi
zad{oyJrS-gEIquK_qNn<fIAh8;)Uj~waxj8(mReMjL-@n5|lrQIUmFXpM$TPgXiBo
zKS2J=!HY1lgNL`IT+AG0)=$U4AK35(%6&CGw>FvR{Ri01u-c_G#8gaaT1i20LMvdZ
zc4|G-w-^qA<Vsyto!s2iI$m|iuBWszH}$PJz4yocp6dubo<s5BULT;iME@<>`qz~E
z%^TZc>9CsK;tF!2$@%^>h-i3-esp4K$*F%tzihdR+njOthJM?yZ0SeL+<8{wjzGl~
zdPuc}GDz@xV_ti90!phYk|jy&IR4a}If_}m%(Cb#R~hY<=yOtX)v@*sD69<R$apcr
zid|;3tfXXzh20O2A8AJ%c+atB3P*MFuTKOB?2;NG1__j0SqTNzwK5hYTIqu=5`Zbu
z&z5Q>PX$+puqo%)+9+o|TbM$L(u;5^SAFDIulfY_@0{D7az9<^>MeFgeeZ#j;7Gk;
zDgp8eU}XgYj3q<kCCcLWX3V<_Gr3%^VEzRAD_BP`HrW!4R^C3BiFqc=N`uaM$1lg&
zL=QG^!|V-3CrOYv`dUzuHe>hm@wGK{wIGg+HU@EwwGVvKlCzq&vUL^&j<Iuf*+3`R
zJ6*zcTV*cz&xZOV8szk{s8p4vZTwQxHex`kTIwV1x&;Luv_ZZs(y>1u@+ZBm{HQQM
zcwh{+qB)Vt?e~XOxtv}P+aL>d=z5Og8b5zqlj?po)WAgQ(bk{(kkEZTEB#v8J)#6K
z$TA68_T1dn-2RxJCyox0n>gJ`oA?OL-GK3|va&91#7d>VFoh}^H}R{=wLux=&}GGv
z8Eu%2zx#UGu>v)p``{e<Fg<zGR$Q>E;`J?3*N=_4_S4Vc`^8gO!w!EouLMBTIvQQ6
zAPi^8CT?R|$1Jhx497teJG9fXSQM&<f%U3d>{ajia!TuMYq&;JeI-2_8xtrVdlbxR
zDfzH6P`s_DeY^Az=at@djnMk(hNpFY7JN9B0Xv;xKPIb!c|Nh#n`Y}Uz<72o|5fqK
z<^YxeLx0s(b!MIKJ}O=avNo+)Htpom?{j6f2haFi%_Uzx36e?Hrbrw-NTq^gAit$5
zunAPRUq$x`B)>(up?tbRU9uEKGTA}g&EXDhh`fRQV{<0`gx7B%V-Y^n%oPNOF}F7i
z0dGKKSu;kSOhRLU&Z*g(JtXffp<^bCi2A-jvg6AXR@p4UD4~O1JS)QoZOgX*x{-?L
zn}`l7vN)QOyfDEanm2O_14$Vq#dywkER6ufB)y${zAUoFoT5KTHC50_FWh(9Q5Og7
z^n34*hnZUK+HbijiW7+GGI^b3pDo`&f86`3EKl~ka@ggaMZU`ASsh4gd7Wy$iOQ==
zFjZbve^v7x5SfmT2HJX3&dw$!mg(z<&kJekZ4+xLJ(U58*O`Y;uc`vVk{PiACRW@b
zeY#;V$k8v3p1qVLvN**JtqRJuN8ES-B2LJgUxkH3XtIh>we@VaCSUjZhcu;u_5@J!
z`C6+Ev2NV1ULXLomL|!G{}UnP=^IhZSEAE2Y5N7ugnd&liPXm43m!0KD};Id=XK>b
zq@hx=F(67jNll0|zDv=kl<2glptG<P{!7bFBTUr6xuqp7D-omS$|}BQ^0=1ZK{6P2
z%Q9?X3cexxz6cU#-ekrMVwQ;M8DbxvlL5zCr5bd#unrC;Mh__6ZsJWrb7ffoM7JaV
zs#~{l$k;?9RUN+*IG`^M(!GO<rf#4lnK_ohYy(Ww2I-}{1!FRfx&jntqJACZCjg(M
zVJP2?mYIZ!p>HK<?Twt{#zEQ-{P42@JIxNY{%P$s%&W91FdL}ris)tUnuEC7Dv9N9
zBj!@uLHL=7@B>^<#UN;;Gq%x=yvMSRP9B)7l4y#TKGhm(+zdyi0Y~|$n!8E(x}Mp+
zu}&e$|HsXDdAu$G=Z1v6b?ZJK*V!G008m{^X<<2yZ8V4vYy2WC%W^`A3QxtfN+Nb<
zuqS<H@)lf*MLwgc5kzfk+`iq}`C1!1F?_j9V+@eERJPQut{Hn_(dKM&TqXljIxn?(
zs`=Xjt8b)c9v<t=Ibrs``M~KQ)qWT2HV^M<BCN-U=#A3w#GN~Q8z5;?A9wB&HaYDZ
zbmxwH#F*Gd?UTVkam>^NV8X!SuTs~v@^lL|u|dt!T(w*s>Ou9&HCj5y#4a=azc9}@
zH9^={NuVhiIw`XxXq)5T_!$(hrJ&L~*Ac0VL<WhWT`97O`r9)Aplmd^tN{eKP<=44
zcx#R<ylfRCci~B$k#@g>B#Z8*&MMJ)FGmfKG9>G%cpN>ov`ylZn5@#B^#8*Gi#()P
zmOTgM{j(c3rsL#(QDKL-Ih>cgvOiQ?BhLjW(+J$~Ww`NA)e0_bbRY;!_HtPKtQewp
z_zYsLmDtF4S;$9%dEw{zujV^D;r~$W41y?`G2h+lTl<keLER+CM-nQ-I2wtw+K7J%
zPn^UYLDkv1wOAS}_Be^_j-te&#s<t$ZuaxjVQf&2gwWHilaT6^IH-RLlTpfKw1xB4
zuJLIxXJ#PhLJ>NbC0B?O0#ds_2VaOvjq&vEcV;sKc+XpI;?y+KR(mRy8dN~AsYcxC
zx-Wq$GwEYW{F|0vk(Q==FeF^Cs(|OgGM$98Kik>yf8M;?osBK_N=qjfdtzFjQK{{o
zle!HeDUPpBT@0ueW-=)93YM|lT(C;NS}$=QM7M4Jr>r5qSR*+*J29r?#oqG6APBw#
z^*GEc1SBgc>tYCQVM2vAWYC_nRJxINgWbNJ)K-*|asrgvUi7r}&*6NTz%$($R=w*K
zN?$iw@pc&_6KPJIeVqNMyg1Bf8V2dRKzAJ=F(*9{5KGvK-3a3cjidD>vDaE(Q~HRq
zbyZ1dK5RyyvL<l~YT*oc=T%vY?x(yF2%ZX`H%UT1Qn_tkP{&*#O$JfOyhTvr`oM3x
zroWlw0C{R?Flj_T$+E}|6AC(h&4%flrwLg>{2=W^bhd0thAI*tre}7P+w-V<Y($gf
zd_Wq;%9ubfKi>-1Wt9n{QS0j5ZnX~#YlmX|N=e+nT5d)=3FM8f7g-Nxaxo`12eax$
zpMYQyidK5QNABf$S_!0yBmgM_8~fMaTq=7d+P0FlQ*oZ6?@6MLM?fM??I5h#7NREA
zlJpRJ24~6Mj?A!2?lO#@Y1l?kp5nu_;(`eO4hInGbE{wx%qXkIjTQr2W2SRSgN<b6
z&X$|#kro>>C6IHpoismy{*qEVk6eZqoz?S9{E_4=co#hso}25bNf%TWYSsnPTd=}`
zi2gBiE<3=DXE$XZ#Q3P^Kx{~?)R6>vMKebCIbO5e$s2Hl_RarjaP?T$OzIiUyR@?h
zQ;8`i#&I%6dNr9&E9%i^8g=45Up15R+B2N6{MllaG5<)3Uy@pV>-JVKJy#tlg{w<<
zJVz%aqKPxue28~P`(b~_95Q7+ql+J|6CvkdxT5jEUJ|J6F~~MY7XUFmysR)u#Yxe4
zB)NH8j#XTRvucdu2$uNWx$`iid!sbqOum}4rYT8d7Ls>XpwwB?{}Lvi&~vcM=%G$!
z{eG|50{jB+&v^|HB_ndyl(ZkvFs+xwRo_`2+{?R+wSR{K53c3Yt%3?`dGbL5WG^=E
z{a+Ds<M}twKLyO<#|G<w>-Q7q@$l9sKKNq+gzO9F(&|w24+BDVrkT7X)T84*6ZrCW
zp&-=bD6vrFIt~Z^6UtjzQ137mR$8W&0;gX;f7$=6$!du|Zum~ItSH)Ejw?rz+WXe5
z4SePguMfs<KRGTm_xoKX&ApGSXx6f=X}9+JW1@rIdc`|;lG-W+-QYR6tQS~{hd_)*
z+66SqX1#KYBxU@_r+IIQO!7cF7s<|rhy(UhCOo4_l?MMf;pjH)Gk2cI#~XF|Qg!=i
zJ%0Tp2>n#tY^z1QH}o8n6@ve8e;!Q2!_)Av=M1pm5w4y<oaHor>o12vM9tfwrVA!H
z0G4yzw`cqEEOQoul>v#qy+HS~`@`gh4Jyc$($iTp$Lek$>hqyq9xlpu#d5y$HCAaD
z*uaLUdX_i`h&w}2a^_B-CJMz?P&)tIpr*9`mu++e9Y3w2>)UoL@qMS3m6$^>h+Ctn
zSe1Zw08c=$zwE(4?}z{M`F^J;DYu2HH_)Ue^o=V_F@ob)O>rG`xK_2Dz|xK*jgS+B
zp9nMZ@MBqB-1f2tNUCOkkVCQ1Cq+lwKoRNj&7$zs(;LX+9gI*2M3Jp0fPKt(;>Qif
zwRr@~E@d2Co*(aQ#SBOMl$A~JEsws;L_(@Ma-hkX<m%AHB_smOw$vWYjmT|l@XH|{
z7`g#_u(1j``Uckk8iDn^IeGN^oD<(4YU{3pWw=fM&@GDFWAbKW6+cGe<X`^7Bt(M3
zm9twvs{HhaKPoqL^W{fkWj`{1ZL9HmNmI+Y)h86R?{@{RO4*>;tvg_`8K=X9P@EP8
zt@f}DR>en(TsT%}TDYY5<WYD)cXqy!kQ@93i1*UMA4@rueCL)g&nsZz7`Teo_BydJ
z#R!e1AB<pG;s684imjQ}16@fT_oT5psI>4zV_ZcQ{%=(IG;jmw6V&GL%&TKmNldLP
z6`hk>dB<w$atepS7LeUK#TD_yBk=+twF0u_&K*dTvl>=6w)EbBIh--?D8{rbHBTH{
z=TauD-+-ClA6Ux%oPo!-JlD2Ymm)ful&QUe<3g5aT6pEIFRo5rXnZukzACT1CIHFU
zzzp`Lb>l!zEM3kEqNLd5yug05v$+M7k%-U^Q9)qka}uweUu)-F`tga49-H*+EM$!%
z7;(YG2mbY6(i*k2%Yh^_e^OnWJ-Pv2Z5h&8;MUy+8Az2^o4g0!RbSS@rqZWTIJ=4Q
zYqKy%a)jLMM38y+<CjmgsG80Pt-xSJ(n^t8Y~?*Pqym`RMORXaS(uh)-godSZ|hRN
ztwlLXF`ngk2^2t%_e`i|y&}*~c|{ac+ixZ5?%{U)$a`OE`fRwvGHLny;|*{F8EZPB
zeT(}&?9ta-bY#0_e+P|WPQNtPSlqf7o^npvzqfhA{p^POoXN8@1fkNr|5Q-jYSPP`
zLA;y;T>-&8RS@5S9etA6$>M0brKU6AfS&?QZKNmSP#7iF&A~=WqSGAH5gDbSuH>3%
zRKT<dyO*Jh5xrU5$~-qcY)&s-lYBhM*>uOAWIf>2B{~^wzbt;xlUXRQsh2UlW%_Nq
zUixFAJh9ZUgR7kq?9PsFLk?lxfrmx`P8Ueqnk}M+V8g|~39v1vR1+9cMm<(=#$MKY
zsa^G}^K&gQm1Y=YhNBW6{08igRu{I&en>EUHJ3$Z9+bE#E8|nBY)zb2#;+dkEK@v*
zP^3X(K_}SK@Wn<(<{1mydJ3V#e+d*mv>SohFr{~gI2qN-Yl4W{eY@3S;Qysz!0l`j
zTw`7wF$2GNbANERcv1%=xV;h5-JcB$dHUhZX$w-S<geys?@NPxZP#bsz-3T8rL@;R
ztmb=}SIC}176I`-R;^a~c+#st##Y_LIB5)NEASArAasTOqItEc3ch8PmGupI_t4Y6
zxZvAIQb>zUffctS1CskH;&R>uD%YlE=!4=*N?|J)-9(W@Ww~S?o?REoJA2YoGuX=Y
z{B=(`;ka4TCPR)>6VtgxR(}f49G-h$`3~-xHWwE+4E$NJrow^@fdSPS8TxNEr-@v`
zqnS68`#@m3TYNN7=sd6z8CEhglL>z|WCEtYIH>WlTg3;jMv(k{d9s@HSqIe@t)j1Y
zho4Qd^}{Lcp9LMNZ>gz#adzH*phNCd0`XFwzUjpHkV>R|T3u2E&!l-p%?ZRJ-WV|z
zlJw0_00e`c|HEJhwI>V9uFI)5G1p+XoU0%}=an?>apnC3nL)}1q>tzA?hq;Wtz&<&
zhz_7oMN$@5x6X&j#m=h2dUAX5tP~9k@=>hV$X2@550)p-<aHU-lPdUk0OKY`NB7H6
z3(3|J#7pj|y~XZOa@k82KS|FCRHI!;`a{g;28~^mf3XBf$D%+Oz|-+D#&8#WNoTP|
zgJBRT#$9t%<y7@aBx{;N^P%RL|G3>Q+cKm`f?Fwv&p@3aT9a$<i7l_<?z0BJZPE`#
zq6ze8h0S!tw*TEz;Xg}Hg~0%rORuOO;-Du5QcMa}`0SpgI+qy|x1||sYGJ19dYYvZ
z_<M9!=1fSL!m2opMJ!~J8z!Yec56bc>WakZmOyLbp8PaVCKKj1KU1-vtl~<6)*Tev
zQd~ML&|AX_{(Hg@72N_`AgMm+PT=((!`L{^z?+7}EKD*?t``x%@cr|^%r6Z2JHb_#
z#7f~ro518B1W2AR-t6K3IL_<k6y#md6KnKsT_$NZPC{*`y!_R1`-yn5QFV?IZwgIV
z46IWah}!}$4~ERmp0B{B(ds!HSgbA?QD0(Mt(xGEYrRN|uYlwD73ZRae`?eu%>%+m
z9x&bUqoN{2#FW5FQie7tZdzc4vi!l>1k8g*MRP>=PeI2`YRKZ_s|<8G8Z)ihG9*Pf
zk*K=L0Q+7H=7nZj6D`bcQnwB`rKw43{~HFxgoxZh+dwMspg5XKnTe;y)k(YDzYFk$
zd1l%|Ahg2wo?dmo{^L<K21y4T6dg&eqI#hcPw~gT;i??#+V}5CTgi`j$!;3z_DT#X
zvd_vU^!_YaG&W?Q0`?=T1CpHb_t9MxQ!&BE0&hvP*O|DijpMBiq*UTaxnXx9MGl&x
zyl33w#%k}xpUU#tRm1{k*7Cvo3%>!wIU0>*4R`p)g_#>O$pIt)IL6!A`7iuW*x6!s
zJ!Brn5Wnor+KVty5&j26q}AT}?l)C<VXydWxbi*dBYU!~0A<^KG#heoKIf(IBqreR
z4FBGX_ooBxzFZ<Pp`3@;g)iFi)K!)k+PaIT5go1{djOI2sD{**rMr^!Rav-y^pfd%
z@qx0Q>oUD>l>%3`I7hTJ**K)sYVXA59t9d=owX!rJN~)kgNr+Y4mR<#6J12S_x#m-
z0dX*UEx<ohAcl)3@&9=XmoOjHg|hhfqtAuu6;K>EPRCKa$SA~K^a5%iDtFZp3!I;w
z%yh;Q)Ug%voeQXzf<)=Jd$1CK4pyNOBXGnJ5a965c0`-YXM54xaDS%(65E+xZ11N-
z^}PPPFdrAR8WgMgJJQn3J^lJ+>gnAlV#4E;y^*!Ke=5HAO<h`@Vy+hkT6|w@?SCV!
z|0h6Nw^Q)Hq1Jy4sP(U!9CC@}%Cy&Nc4p@(0)Xp^9gi(QzBLFS>BhF(y>5I`vUB8g
zo}L>RXXfDVScN@Hv?xtAQ`+i8qr-R5x)-ZyOm!!Z13~{!<K1Ep6}x{YqjR_S!NNiH
z!M^E(iMDqOc3l5KpO!+uWX|M<*w|P@3XjHsf)dQEJ=hoEvv+?zxPNzW|H1x-SM_~u
z$J}>J$DZ7KgO@dJJ=V9mA-BuuqxgBkZ+~9Akld}}i{e*<yT5Le-l`w;(7nOE2kpi_
z-{098o`lI*d}Ww&H0=wkm<Y{61<t*D|JN@aiu<mhypWwM9n_K@hMg|w7g8GZu$+$9
z0wTj`)^fbUwZK940t>$!l;O|4dVk+sKQh!{^U3_N8=qqFjD_6=MO<^=!lVO5U8+J<
zPA0A7!f04q?ivK$?1(2asGo920XzvQfKc28t_j!x@Q&MPaE|jCSJQF<-z}aU{A0HI
z{@?-j`XzEm=`#+TzCOP`q+@^qdC^4@2ACj}2GOnMx!Refv?maWNDCi#uBrqcEz2}S
z#)ewita?=WuL%c!>n56(8};JG*@>wSfqB7j(@1{z1GEi{CUd+a^M(#CPX>&?3oA_@
z>}^fE3d<uJ7Akws*HhMmMu0=ZXgVwy-6WUnrLPGuMaVAG$KkG${6mC*#edatc<z0)
zGA&3C2mgHeh5T!SGk(dRC8NhB7HXC>YA5(zpAy(h5W_?<OS%x9f)vIMs-UFyF^zxr
z)n(ktPID}yxKSy{Wm{D<L(bwmYVSWO2(EB<XbppaI5mPd=s?O~e!fbEVclsm(uLOa
zY!vMeAb4_UTpQzp>T_g9#imLRGTZakkPxz2dWly1n%$9-TJJ}2+G`sLNp^_&Xxs8_
zh~JG|FQ{lo$CC4f18+Sbg0W83KkaTQE{z~T@j-6rn1Za(R8p^-^z=*9`Fn*slD)wk
zUN1JS@L(o<QE$~x%-gqe2;vyIO;Jc(ns8+62v2lVN1M}|TiPT=Dj(L}=0Ch`%!UE+
z5q)D~N|9a7bg1{Vk}>ru>m}29Rx@w9iH_R8)m&)Y7XwOA6En@hF|-4->MWs}-`O$=
z`zqljT#KalNA3-96o>@d1|8t!U9GaKQ-eW@ap0SZkxg7m7{qJJGvosS!$6|Xg+QSQ
zE{48DGkzr@IQNW)e-c7fc^APtmWvrZ2GWWU?FF0jb8lcB!MhABOmR|`4wd-`OySHT
zaO$m)MkoCke`Gm#0#!f`^Y`c-&qYsbwbP}4XT|nK!(8X<2E?^7d+U{xC^QN`cx{CV
zQmsO$6FeZk=t(fQnMyZVLU9zoM9{J4tk|#`+F+<ecYU|&RkUrQu&ONSePr*zX~lLb
z2I(LT8JVLW=t4<??FB&((qRy<npa~@`}fI#^eRawpHsGT6OTH}EQfq^wZlI(rjgi3
z@nP)WF}uxb%c#hf%vBFCW&vVorZ;5dt5XOEg(Beb%O@&x5@k2T8;`n!3=o9!Z9(=3
z0_9K5GQot~+2jTi*t%GYMWBF3sosFyjT&vH6J%eItE_%n6xj#$iV0=#K%rfO9z1mo
zrP;XVc1#K+1ZnJ3>LZr=WG87lFO`ttH+xg==!LM0f<Bksks*t;8fjN}uDHsL;Fg4Y
z9D9X)SP**Vty*&BbjErgLg*XN3SKvpMjc45&fzx(NvmWp2+Hy_9nL4)cVV<rc~!3r
zHYu3I(uV>k+j4|~vKSUA#@2q8<`%RG7U>FwjX0|30)ypxR0=7SYExM*f&t0BC*Mi-
zvXkW`&)(ivD4_SFa(A;xK({uj5lDJg<+;JiJ`>~<mvS8%V1gU@k7l34mS|8S7Ebh;
zpq3mxKlYGsy`1zBUcb(?#14v4#))go5>YrEOL>tPK!j^V%A@d0P5sEr2L5-c!2ckn
z0$<ha!LSuU=I>B5u=C^83@Cz*oH6Syfn7-(Y_Zi@MTh8$K=QMNc%l@rS5GJ_aenMF
zgu}zbdVX%4KjHIC;RxD$wIXV^VXjNlt40zyrMX%d!XcXM<aTVWN%I$Q_zkQ<bPOn0
z5t=w|k1nMYI_p&*5-TBfj@JCgkfgWtlTQ!a6mH|e##b9EF4JOwtE9Y?`TBjI#s(<m
z?uisU(i<Vmu}gP7ka^+YpNM><T4p`Ev@;$U12<EbJYBt;HdOfdFk_M2*ezp(&9#mB
zgG#TkuA*Nj@(|OEo1RI{l{Hv8PXda^bMpmzn6M{lCU)9dh1^Z}f1)s3FMzaVK;AN~
zBl=?%WY|!hDJ5-Su2EX+Q92Y~`4h)eO7PTNiFqfw>B+x7NtBjtcm2Kcc7M!_R?)Di
zUi~kT3_RHJc!oFRO5oW|?^c<N0PU$6$f_}}JfEVpCS8L+p%UDZfAb{5Uko+QvM~wC
zic4O;Nld5a4S;bT6m^LO6B|d{<@kGkIh5;p`GjOeK*V85Y+&la)55zvwpkAdFmEj`
zalthxI`S!j9_%VIV}Jxr1jV)0Mq*R2U-wKL?nq2PI<@E|iO!H2;vb)N+GE2KCQ*D~
z6_I*C^9)JFYE6w9g5)mi3(+k)@UI<=*TDNU|E7aa3YhOo>kF>X7cdMv?<;Iy(1@u+
z^isAu|J8i3b0osSGhV+UN+tq!y5i@E1WC>8Koeb!@tNjeMBG6``sgl6Y=%^z8PdCZ
zB)z*klPvj5O~UDKv3BSiWxNm3ciP6f8G>WH(nC0ro(W;2(I!Q+xf!Y<xc5#t<nAJp
zc3+B*DCokHDUk@dy=rhVC>DWph`qX4uQW8kRAd+?T&jQn@BcpnV1>(uy8LJhe%Q{=
zqpDpX(N%jB#o5R?%9J0}jb&*=W1^X}9Z|Gl1#LR*9JkIu)i<-m5;pMg$+2cedqZiq
z#b%!(%PAJ6?;!l=NqGil;h6qVt1VYY%(;(qPyG=86K8s=`F-pyj1}cz2Y*;s2RfS1
zVu>rmH|uKH^2)|!jA8%J=leHwQ#~>h@plp`g-s%?pK;RnM`d9+!Sy(5K;FGleNS%y
zZju0kzsrH(*2$(T!7ss=u(i57$31^v*|ytn@?~XI_r)N4zxl<0W3Z?((+Xg@@RGOM
z7kT+wIQ{OCD)_rw4GjT|SE5Rp(j<v#o3R|t)P%2<;^X?z6^`2S#tO$vvc%8kY@s5p
z9wzI`jQ0d$N4hqP79LLX&)m!HD9a}NXR*Y)tx}zxg*t0l*Q)if+iF?cZ@nFhtg>N+
zH#JwMroWQihvL9>nyR>^dBrIlXH&KtKTn>Ep@7fmoX&#o!&a0@RO-n^eQc=9ufcA(
zv4odK1Czc6L+hc~9_&1A<n{g&(S9YP4QDHDvjrd@-}g62D0~xCl}VOgscxyTQPgCo
z?5*PX(`F@Eg{=A<V(V<=bLKr8CEIPIkz>uA2O5u9_Csgz(0*AHY-tQ1UO!G&{n4t}
z&Z#mob((K`-!H?zr_=JR*?`!)s8{{O;0?pI;ZUND_VhYNna#zj_Ts6#88?CC7Seh&
z*iO`1c1}@pALWsOH+M<x0jQ~OxAobZM%AYafeu?;dolF;iBm4>GoI-vX#uC6sPQRj
z93UHMYca{Is;|mxNgS8>43vb#-IE4qw5dVf=|-HWDSzc!^A$My3ezGj&8(_VoAYiJ
z2DO)riQ~2lMfE1SEks!YPWB{do6^EYIGxWA?v}86Nvz~yie~oVA(LdW5iRMA@{H}X
z>B&N$b@Tt58{CZ{7fOG3-03``VIGr`g_|ihMW-$yO%1Vo`0F>CmHab@uh7->Vzj=u
zV#^*Bm&mq@FiRCB5Ul4UH^*ITr*@!TmR4ZJ-WhP0Pl9Fi0WZxe1@l+RrSy$Am3r$N
z)7?ql_~nO3XL}#29t%B4Dhz-4aO6#(T*@;t_u|Al&t&A4fA~#QCSU#}jmx{yxi_sY
z%JH=Z@3+M6+4+t4NGKc_hr;UE(-2<YYW`yw9fJLr?0R<iw(tJ7`KC+quG6XlIVRWq
ztb;g{li|<enn40TH?u?9D0oM>$ij}8HmliopTxorN(?ddAvVU${uKNILF5UuJxPLB
zNf)~m!B;<Mux+4aHEULtHiA(kOOagK1+k2Uo)qAI446+U#>xCTYsekO2M`$*P;~l;
zr5<|F%rz2raXt4OLF>P5PU$x)RQOt^Bt|AWU8Bi7gL^?S5QTUKLm??d>{(RKzSlnp
z>Xm3CUiqXcIrZFD#8N5Ig`~PfNy2%sFRp^&U_BF1`V99^HQD?`IDDX~G73(+gnj$k
z)<4L!pFy5BdwQ0@48Iq}6?F<5TPl!5G@I@frw^sYPw{GAuTr9*`I|gTmt#Upj~^F%
z^*Q}LZV_v{AQ6Cf2cH+|;21y-*1H}ZY^UbW5Z7k_;e4|PaOAwfa6^FvQxjqcM@*;D
z(`Sz!e<8z;$hF{{AzjKPe(eZV;+-c;+ajYp=|pe&jo2ma^2e}*butTt^v%nc&pS_P
zc#Cm%JXx%lQ~MAj+Z}0p*j}0qhGk+p|5r?nBmvq2NvnWn-iKEcraN>mot`A>>KqSr
zc*(cUj#l?bNwmwd*o?5#&WAtFmxeET<%guLS9J8pmuNkizs65Uy7clnn2x}E`AxCS
zsj5*(R)96`sWM*6&Xdo_>F7fj0(10%afE4VzeH^b+^ky!{gX6moF++XobvVM+gf^C
zW>fWVW0y2OhLg|We_Xpo(C5S2?0oCcw)r9U=ARM=k!o^fDjJFiqdckS>$jp<T0+**
z0!fC_{>F0SxEsr+ZTr}6b`Ih((tg4*_OMz>2U?UeAV>pujPR$gv`0{QYDv#}TP0EQ
zFk5aSIyld-tzD<d0+~!!?w3I|E%~mp_|tlZ7Te$eu+UFVzUgV;q!Smamd#o<veJ$U
zSXRs|IUU_<+slz2>Ocy{OCuQg=fiNv&>2mtE#$HnZz%OsTnU2YT1fEvvJz-uZ+dFZ
zVbMDN)dOKWJ6|_OlHcjr&?$<&1AW!LHqBlmHpJel62}iC6uUn!zJ)%POl_ArffMWa
z7QXQysBFVjl|bA%D11lfU<w>aTBRXN2aw0o1bR`;nMs^}x7J8t&@BUgWrZ2y`16b&
zN2`5PPS=&-)yk+}qtM_`5S*<CFGT~YopG&m0=$%{nJ4X#WyN~pqtIsGbCjt}V|(Fw
zqjRUHe$8s>$@RRPDWr<~=;eicIqI5TmKSZDVCf#MRe6yl&SV0U%QvM)A7;Wls6eE*
z*&P)PiZ8nDoUQF+;NZ=qa_#nCzIz#-4<-egA+!+!TI+O~`M`G}8NAe6r9RRtrZ`QC
z(#eEnhn6leN3kP|ns7L;a!D#eK!cjwHZmOBSYaY{|2t8Z?i_vn_}iDmm(PCx_}edb
ze=8F!&%y!z-R{npM<<Vm$KSqu{NmfAC&O1So`gHdBVA?$aS`rgHGbf};JnB_!Wuxd
z9DjTKa(MFa#qsl(*)-xb$28tnCUP|Ek7cBa_6?pyM51I5q@G#~tyAu|sP-Ke@hbq}
zXrI!dG0ZN?4$~Ttq_Uh@lwsquiy7MzG)r_qN7}PFMX(k+^+a&`4tYgsI(JbRS{Py!
z$dH_@j$Jiu+^C&K!|AA{ecTi*R3d95SR}z9nO*lCp2}V_czgYq(Y}!|GtVuU7e?ea
z;Zrmv)XHkSS6O{7u1xne1ugRpLV~K&C-gY0-&$K_6gJA~Wl$hx0MZ28;R8th)&*U(
z0E2snYdzxua#-b9x-P-vF@mRH#Fvd?CHkn?3p>ec{hvB^*2Znwwc0dC|E+N6#-utg
zQEZG??)!WlaVsf-51NU_Ce4#T3D8vqZi{TqA8gsx)odBZ(LzE$v_jN-2hoE4O7Cgc
zXM9%o3965je3jU}di9fHlWovgN%_~xBiw@7ujef4SwvPXFD}w-PZ{8L%Vn{st*~X;
z9JbBNt=^XzUo(|WY8C{?p>dSA16klzirvAQQd<IrhE-7@J*k;b^12e+Q5t|UDV5UO
zRsu%EB%P@zXsC8cKn9RkxZ3|I{&^by&$r?1{BdO673H=_E%iiiPlyVnD#}us9IZ^^
z$g8c#@5T&ne3@`NexWocI8DEZyzj=Ez*~B2KisOml%piE3|ed|fjdQI1P^g%epHl`
z0C28v`Qy|P0GW|9Iv-UOY(+h&-Y$swx2RFBdf5ck-43KkeL^3DK1K)OrrhCjpog7T
zt`2_dEBCwZeegHnJ@yXROlG`@hUn}V=c8PsY<Z>N7wYnLX>V!OJbPEBVT=-)I?4rK
z%~PV;8&PSH&c1Ru{^jJ^x5anWS@DvW#Ni<VzU_$iL~Kz}d)Ymu-QP$UJII0Hq0!Q1
zowlisrq)CA@|Fl6!y1Ysi+qbjtUGWgR*EXNm~^lcFHZ-CYEV2QpmnNH=UJ%v(UNwX
zih_N^L%Fu*Ur;X3YE?-230SsZiz-!4j5>{Kd?iHX>F9{cPBR!bPKsFqv2jX%EX0)u
zfM}|fV^uD+Hj{YIQg<omC9=J6E^Fz9L_bui`6gYz64__V<qcC26IgOv7VLFGk&*EM
zFkTC1@@a;y$%D*YXKTLAUY>UiW)tOGxXHl97SFjUPJHXVyLaz)z9mI@F)p%^Xc%r@
zUMH<woO319qWdBB1lRJWPxS)VLwo!d>TK<g@K5r{*03Czx~pXao>L#6NE0E<+ZeGX
zV;|Oc#ZaUQ(IE)tNhybP(ZL$X39zb>@P57D@C|~IGi^639n3?3B~40`Rh{p-yV=Ua
z_u}N!ezWfgIw^b$seBT|Kr7kct%&{RJahhP({uyvVi+w62aB%qT)zx1QrZ2ToreN6
zON;VU^E<;}={j(t@90e@OSE6aj<P6wIXdnYM}GlN%l|?TJcLEy0zI1J{4MHnuXqYr
zNWfq{s;Wg0^sjrx*G&WJ4iD^oT?HmqhZPAn_@8?m@dZ36%U%!?YGvaU;p9jcF+AlV
z(t)-7i|GOB(wuNLXhu3)4UaD!=O7b6Ty-$UaPtI$v7ENrKSW-a4?l>239^vy538pq
zL&SolOsaTTR$w>D2IVuMn@sxH!;cmz;#Pr1rPD2&FU`7C_2+J82I$)8gP$&s3wS4A
zAGo<AtqCcpnhzc&mHm>w;`3EBqb-}^J5{#Q)1f*)XUoQ~XsB{<Zih8DBEac{?#_D7
zoXfrOC460yogG;F3g@U8EjvSw3KVw{r>0yi(6-S$88*!WSqbEFg3egok@P;w*HWxb
zNjnLG1}$$;G7#^S_dBSZ<Z(%r2FRzqqDTF&2X~6+)4-rE8>EvS!Z4_U33%DKhrl@G
z_IXBmzT5rc-T1{pmX}<$8^5RLeck+Gznqi{I;EK!>yS3ZZgYOVtIothap&NB)5QFJ
zz>~VfKd1xH-&5)v1!{^EB_Z2%mmR82HamV%P1J$K6qpjb#D_Mjlu;d<VDnL3jDgNE
zq6EqX|2TZCiR%rTkD_4^7#4^<aiqr+G%K&^@6s__kVIhMBbe~LVl)dpe?1!spC6&p
zUjL0K7C^&vEk<B|K`p^EZ}m2q`?K=x2;XruFGgVxM&{6ky6K-4Q7<CD2n;Te&^nmc
z$VIPP-snrTxew;#Zq-{HJ_0F?d-g#Or{#K5DL%dV4wA`C#mEj5s_4t)Y&Tz{Z#cX5
zG5if80Pxi!O^T-9R&@U#6zK8%xtwz0aQd{b$Lk6jN4f;JrO^};z7QA<3R9zqPZ6pz
zTT+xXBK142SDP$Y*n=+1Vq-rZ8{@2p;!n-a6xd+3YI7o!0R~8--5fKD=#BPjF0cp1
zcb5ucrHIygx~(pxUO56XaK_LqPJ&NLs4Vt`A5$24Ywya1gt*2{gco~C1>r~Cqdngw
zyo}qV`;D7Y<skgIA?=I%gU|Wkg8}=N9DR3Ed|3saGJf5Cm*@iF4^tk1@g)jHx{9bQ
zStD_&^n`S=f{-6VlY+G?HEC1|NF@ku4K0J_ihd1ZIjvi|TyOEeeW8<by3fU*8-ga;
zal(A)A*25s_7PfLkBO)zz3lMsKK`voiHilJ(u5lbU=@a&SxzuQa#KKvF_(Y$rQWz3
zjLNq*?Xkn;Q1zA8$@V=&n_`Kh?c=6My((KTU!ce8;$kW$A4I3{zHs;s?12%%HS4z?
z;1y1fb|;p0?}Db~>7?=sG#K^p@oD+kI=o`ifs_}$m=_$Ft#edV77vnyF{v0&O%e40
z!}-C%xLa*<vjLN@s@QBLEy+<3kX5)tJLV!97PaJHf^Znn)khlu(J>KbOamUS8rU8J
zY!;7W89QT&{ro2P=(}mj3}ES&Cm|$M2dFlxZL5#x>~5@cymP1M7vB+TUDM6vaktK*
z7nTIiA-;<a<z$psZ57Kd9A)11N?#uLTyZSGN~WVcsT7wK1+&uZB>SLbox`IFY?*AS
zL^9Nox}Mj6ULzzttI`i~6-&BDXeBwd$~heesDwb6P6~{Km$KDZ3u9Q&1Y%yqM5{5O
zI;j$;MZX3I7kePe+hwek)>_O>3D?YQ@|TQCC1FPNXt3?<BiQOT5Q;UnkoJXF>7cng
z7^$+iTXW0E$MCqedYVy(ypW=8I+R%Ham{7a#?fuNCI~ezk!*Ri=-Dfm7wcI}KF7R?
z`_QB-!^$ZF;LXaUOjfOGnFv>Ddd;*MS&osK7OV9Vrn0<GFdL1-Q-qQcPM8Ck^Qh7%
zErBjNyxNx4niBR@Fel1{kzQ*@RsdL?wG}*lg+QRZhtrf%3AxIir2otg@_Nx<HGLwF
zCTBWnl~SD*6G@5oT!29`m9Em@=6E!|DV{g1?Wj;Fg#%cenGT5>rI0R|guc%i<aMzp
z?}BSMUgrlIjPwg#<`yP(GN;W)be5c2xT@1VksAc#iaCu1(h2IMl?>mf)={*fj^Y9T
z_y7L?BHoxN1vzkc-I{;gpm4t>+(hE6+LNPJ3Y;a<73T3JX-QTju$on_;iDS$UL;fM
ziK0LpuR5?h_>NKFiG)$`{Bla{sCIqUw+XQ0jX=iss1-EJupZ^gBU0KQ1KF{ws<q4$
zU0~kgs>?(rx{+cz?@n*Qd=C3@w<z1V)Np7R(-e-RB`;hv^<uIU8_LhFqF<mVhp=aO
z^#c6Y6CM{XRx<(%(?C+h8~SbG92PtP>?9@8nz853Rdj;MY$G<B-k4h~Lsot&rauc_
zv1AwM%aSk10O|VBjINrfLUUB>OX(-@P@=TOzyII=Ph`>fW1iC#zj}m7Lid8EDk*%F
zNhU)9%ARk3gN&#utfBxJv7*7IMY8^rm>lKGaK6n|^ziw1b;-P@fh<mO)1H`I=s6E1
z==ri)H9;lar*iZ8z2R)U$eTQ=hrG3IbxKci;^x;X*ev)Eq)T`ilfS~5JaeBnG}mJ}
z)0m7p!lfvsEuI~%SC_Hil=Zs~7nEd{@xJ2KizkEP85Z%XMy}*_5<B(fz)YgWB?WAB
zXb0`--k^Bs4n#cRKCU$D7o^YT4$y88U`2oTWBTvT(O3Rl1EA>uc6*p2?tYnnt~(yX
zWxJDKL^~yDO?z&f92Q40oF|G0OqukZGN_I7O)%WUGIs}wtdbF&OS#L(iQ$Evo%_O(
zyPxDK#5pf^{<yRAKx0tH&NC2=%j^IkPcqX^#nUF$biQgQEP1oylJmfF_F_@d2NG{>
z^J6<u;2E$K_y=Yv>1)kfDZ-(9;TAQip(zl1FlLZ?=HRr#q3n8CJK=Z<$QN;)=I)0A
zZmBq(hzB)hNQ3%_W)#p8>3OK%l8f>JbWO4_WK%1qofI;`Hbz7Q^>%$07{)5XoQ4k*
z4n5TQW?z;u@6E1E)CK@6+jGZD1ZxVD*H42s+!hyWh{)6uUb?>EExW5$AR}0ml6Z5(
z5pJP)#k0CaP%fq2js22}e7fX|J@T`^iAlG=b0W5uA%^1))@rU6Yq!x<<+otaVK87u
z7-bZW($^Lt;;`{E_S9Lm4=2)yFUxKhi&CKi;14rRE)chAa@ztWSf1z_38MXlwObBE
zb9(ZiXwJa<3oYW2(8RBX@~f5h4C}c!rR%gx$R%VFKo`T0QgDzjt7!AZ9?(wu^2h$p
zBhrTH>Uv9R_$G&67_Ya0b`@QeVx=6T3F{chbi5_HcL-jHEv45{KrJs@G-lP9o-8iN
z9v0Ail^huRBGE;H+85YSpb_bgvcK~*0TpJGV%8M~Hmmm=f3(jcg<y=)VUoj~u{e`u
zJOru%fq6jaLj<iC?xa=<og^I>rpPWcD+Mo;nTFS~0b*7zZ+s{$B04yv0a(uqA)Axs
zmX!#af<C6dQiBxHD(|vypAjsA=7YV7rnqh@<*>L7XW58{NUj9Q?EEzdrCqR&-NRy6
zSk7(_zbTuGKZh-u2Nh7R63GgS*@hcV5AFoUzAUBw+^o~KxO4EwUU6_xn2^gJ9M+S~
zv9r6sw|-1mkyrBd^4a92R;;{}F3(8r7||BeJJc=&RmplWihyM@K402%VN#<a&}Vpu
z^D)POblV*qIelOzQLHe`gZusQWeL_8o_qD`_>r6lafx8pO(oev&N;7Eu*U4XGAm7}
zbc3*zGutO~1JHuRx_s&HL7U;;?^yZ)zHBq=Qxl%#qVb;tWStxYm3DYl)~lho01nRO
zE*$57_BHw9^Uv>AzxwR%-Rl0Y&px|1`K<iqy<dFx*)M+a`RAX7U+><HTdSG^ql~T%
zaZjmwBV5ZHEYyGukG31P8(2S6+;~+hR4>+vC{T;?dfJpo{n9uDnbEwuf>%z{a{L};
zU)B&c>ZOP&OQy4)oPXNIZ=hmoe8V73SLH5Ao(hIk^&{6%=bCi$WECYJ3&U)jwQ$Ik
z`nSJL&rtF%PiBtZA-Z}A$%R*Rj~vf&IFR0k1fHgMTy_uBN6#{OG|smqsFgXbVgXKI
zkL(igA2((9_uRO;NYDMDi~GJ=$mx3D6r@h;hwZSwY2){HP1`YC2tvQ&M6T>mrql2_
z6#4}5O6>!QCq=}g*lNkcB-u$V=c%_S@W`O`jjm=xIn|>yyI)?Y=e?7WD`n^>kDVK&
zfEU{!E^Y<oq%Sx3?JBV{pwme%9n?Kh=6*c{;~e6b4!B16f|Kj{xWKDtf+ba4C?cv&
z^!R*>D_nuh2>b%gf<Ia&lJuHP(kh$81Ej!T;+pLwZv9%}zvN<4bDhN8>X<bjXQ{)%
zI-{IJ>5y!l?}Y3Pk_hMgTvVj3%#k6|$ueb}t0J+HdDoq<X%|x|5M_YmEW7{^pR^-=
zpW`6Q%0qP`#x<ECRscY;lUBchh@k!sQnOJ?*@WjL(&i`wmS>%bAm4)wo<I7^TO3HS
zpZLIX>rv9w!)VvRXzH2P%c?3ZrBT`LfhXSl7g_o^FE=kWpNEAZ<#<fb<Hhv)Kg#Af
zaT_U_tBOQMxVT>M0qA$pEi0{@<2Q+tQbrt+WheFM4Kwm&i3c1wTYik6`Q4L9d8^Li
zk=;G=_ewLK{hr6r{a(IkcwSF~f#`Q__1yQ=D<9EE*{Zq>b0z5_XHl{vi>Jp=AB#1s
zI7Q+P%uEpXq~qPO@3bNC@q~3k#B)ZdM<iq+&(UubGC#WA(5i}|H^phLG-dU*BhDc}
z1E9my@fXaMYDo`xnR+B<<=bJsazM&Gv4MI;JULIxxAkm2OROWvg+9JfQi}ZHSR`lK
ztzsu@+%;{19CXY<A>H$AfTT`}?o3qoFh0>oG&@Pik<&<Kq=|Tq#dztvjjhCxqbm+u
zmbdnjDFQUH&Ej6Ljjdm%Si1uTUsuv@t2iSn#h76{Np2Tr*DMtvnmjW6T%vKe1{g^C
z5EAWbJ$_A_FkL<3Nv3<D91*fyQY>ss_IDmynw%7WZ|=%#1L;@x<Jq+exM+rd<||TA
zReV<N9E!e{paprr8Ze3ABGYPqVPFpa0dR@ojbQwn(_V(ro7vpzgW=DK5r3NWcL#Uj
z#CfE+Ux;~+d){xxCxlz?%dJM7(#h$K0aM3UF}X#OqNFetr&bRr8|le0y*s#vO}sa_
zD@nkXT(aZ1p5bF-+$zDTMZ&$^ZNbtccp_34SgcEFHj-qNcqU3T5y43@+N)#TB<dM;
zo3yr<>REt}om=Xy_jo7;lpYh!V4xDHbWh1|<`<1-_xS6R5}Rmu(fRk-!VTlNG%p)X
z%!xmWjO2$N!m<Bt`KG>*V0SE3Q+Urjo%lX-K9C?IxskpDmLX|Tc7QuAQHlUZ_jjf-
z%ec%A>Uou#raEc~exA*fAV}m}B#cULlW+gZv0@;t9_HKS_gaL3Q(-SU@;l}xF$nhR
zcw-}2%xQimWkxiPlGDdg&V%_pt;?m}%<d)PIKq^knl6^@B_{OBUlrX7c5|#V%bXNQ
zZYd{eouKyMvow`-0n9mpcafXt?mK;F>oH5cJ*f-uW=w6+928*51)2Na6JK1=7aU8;
zv@X0paS^Se_huBmJX`WRmeow!bji|N%e#%&dP-RGbr!^kxB#8}c!Es_+MU^<<^hQy
zwH<J!K&oTGXX_@?th`fZYBR`DWf9cK9V}YSX5YSt{6sJr^Nj6VDxHNw(kX)nKc0J%
z=Cn`8hP#WS7e@}c7C=X~GnS+;2jK;KHUik@2ir)x_g&r*e_+L0rWOhJwtPq>nN%g2
z-yxYh5qi6fOly&-IsxFr@L+KtR<{KKm5xay>lJSN($Vz78^hXe0Yb8*F{4op_aZ<-
zr9srYJUr*AHFMMDh0k6!#p~+2J<J^bl$c($*C}*&Lt9<=remhA@t0Uz8H*89MkIMW
z=8c73G-6P<(f^G@^g<`<rm8t1y+B7KoC?5FV_#}Zi-%Y(M8VExWNeVn0;}-BvxxBs
zdq^{%l2#}NXPCr72Hf=+1G0rkhmMw&E-qDWZFyIxngS~{!^yinC0aPx!PYp3xNs6I
z84cXYu1UFqWE)C9T#Je*+0!OA-AKPy^ons#5^6P%w{YTKtS163FkX=bOmQBLjQ-{P
zBB35aT4OvQq3GhDmEqWFNSGPNyq2_Jmkzl?_A#|fiNQl9%q@ZKr#Vgz5Gj#O&qK8W
zG3Ht0P0SPS&|RVcO{%l?#RaYKX`}xj{*k2uG8;%EB`i-8q?=ka5bc8&T?h<0Ctm7!
z7-RNwo>0~aPKgc@?D@5HTc4yhacXMCx~~{e3FhTjFbq9m&g@sw?or8L!B+oa)vU^C
z{2L30gr4(ed6NmQLFREOt>JO^2!B*Vi2h;rMiD4-l^wzJ%Y&Uf&cyZEJuLnz9>(<E
z@aw(%4?a`hWA+*0(&xYUrCv$D2haTK?!9o~dviCw;tm8Ad+e#*Tipe{H1mCXu-AMA
zSvK8%UVm2{h&Axg4YRfzB_04ks*H6a8&x#aM?`!Mg|ym%?(dKbmT4(BL^LI_u}y2u
zy>zv9UgF-=jEI%7#1zaZ%iqOc-1~}=qaP+GA5nDTRjo`($omgf*qpZ%iFViijh{)w
zC48omoaUnkf-2m5UM&KL59esQTYNwAFm5OL%>-DIel2psN}RQhLvBjFNG1(3`Pa-P
z){}+^=~$So371Ib5RGVqYHL*A?nCNyOf3P_AU}9h8Lz7hBP}kdD5~c89t-<IPgkI+
z2y2m8VDS*wf*|mk@N+GVQT6px54kw2JR~<#nl&fMx6RF&pJXn^Xlm^p4bd3U{V87+
zN~=r`a9^^k{aDpRBi59nN5=MvUS-Ob|4Q&GEvX*5h>%`Pn|Dj|TScm+J5=48>MYwy
z#38ZP#jvar*!d>0Lob%)g4I`E69sIuHb<1*$fu3f1_JvfBerR{PliFWKBQy{AS59M
zOcp0{DbWMe;O?1x7vhgkp_#fj)6g+hmRdV0{j(sd_SSUZBwtWbY{5pB)g`>1Z+ryk
zBuAcQ8Z(JH@K+{G-=&JAU#NZ;rm>;nYpe<@y#hs60eWFj3Ia*3wHe~3E+g7GH5P=w
z6nRrCA4QjwLT6FJB@Ih?W+!TI4U}zNxpR4!TZppQkH=Lat6lHU%GX`RC>)jg{95yU
zyp%!kgs@aJMwdyciI%J_j2+Mc!;D}di5$ovy5&9@%pe`&@6qEtwun<Poj}Mlw-wqt
zcwnh1&w<D!AsF3Hr5Glb+^2Qgoj&l|2)l>2A>mY>>H|q9Hw(*UAof7kD{BDQ%T!Zu
zS+W|v;=+*ucaz_D0VbV5>RMfpqSMQ?CaAkizy~OK|F~zs0w}q&w9yYLp&tl_cyvKC
zxFKbmlcc<~m*IQpN5Rpac#Br-VDppH#~Ysv)-2Bq!vc{bZ{DQs$dg~Fg}H70P`r6J
zbqp_Kci6djAnA@`%$ABUa#b1W<DLVYn?3{g3s8H`Z3xMgHTROY{!QGpX@6@1R>wo2
z&=&;M$oV2^okukGs99<6!I#9{%;(RzBBv=}15AsiTkJ^8OR6WLU=YB>hJ|7Mbwvlw
zw49geEe3ksa~ypU5ogdb7j*B8waM@13KZT96^Krfoo!BEX=P}hQ432jJC)2Y;d$}v
z&7s=k+8A~SA(@j>+Bj!B6g{^YTQ|Wqz^E&4VZ%}pT;{J^_Z+&>u5FB!UuP0kC6hXr
zi5jdt+}qc*R-S19M)^C%Vr4x6S{7Lq^qo6jRe;0;K1TA!&cb<VlZfxI0Yt3UH{)5u
zF}J!n%q}a6Lsl`M>dE>SN(0NZoF6m1)?O-fzv=v9<8<$vu5tvkJXv7r){BT3#~aS1
z>d#09Qaw}l7tMk;vbfz<%ft*eTC~SfJ9i$2OP;h>FQrekOjfZ>bWn{`&c%~to^eyQ
z>{L2or8g$(2s|uO{dZ2})HQj;jIQDCx<rap*$wzH14a;z<KdjRSk_3F45fSQkx`K}
zjuJRG=Hf8An>9e!6@q?4DqyL)YS~F6DyR6GZavBSQL$;nnV)oNfcM&5!0eCXJab%G
zIbG79+R83<5fcV|`m_pEUQc3!shRvR_)|M*mKO(T6jla#I_rind$BruS&_H}*CJ25
zO>He?RLrF{qK?^GDeJgdTtl3#q}7sWimPVPXN(D2)Lc>&c_VG_@~Y6eYYA{KsdTbB
zC-Q$uH!%D8`LV^#^his`?o4jY{kE*3x23IUAU&LgK&VL{Nkfd;EC!D2V$3#Q7&``=
z$bBggtT&M4@j{X)j?mL)j?(KM1{habX}GPBTE$H4syRtg$}k#-^>XFI;z^*Wp27<C
z*z>_aofxc66*WFe7C}~yGzflz$4T161jx)(dDK-RevynHS1&e1&{_+v&yi;x9T(4j
zBZ*1zSuL(vMi5>7Ol|9ghrIBK+8cCwyPPbHVwdrLDxne0cC~KPh0zNF<48hl6^+ie
zP`EvaF0%Yo44-bVODp!CK74*daavM~W}Tlln>=^Q(9~!VjBAF}8B^K-<<bwESs*&o
z2oph}M=aG6l_^_;ljMjwY}&++q1d%)4@lLqth+IJA-hCG^h)C3xW<@eT#V^e(_C=L
zNf2lT6nF=fMcY!>Gd8xP=;~3S&(sAa`evD8lCtyQDq$fqcTvoO?3+z~{seVrPs=fL
z9K%nm<y3xCy!Zpc$6MVhn2WSaW4BH<oMRY07un{Q&Y)NLq#0{w0lVxBlmC5n?HU_g
z0I5*W#b{*|0ncuuI{_Xef>onx4Iz4$)DWWXl+sbSYHIWmnJ}XIL0m3Y5`JOSN201L
z0C<v9LwV?`1$lKd&jhkQy}*j5dVDwcR-kucUjPQA+MdGGR@U&E0r>E<CK3roqiV5N
zT_^}lTQJFrBQ5x};NV+$Dd%hG0EY9PT~z6YFvT_1>Ct}~ZHh}Vs5B=}B@}xjCM_36
zQuaK|fNQ1J`Mf6YH!XNWeKX?lN3|PdF}kQ$L&HF}CMR*+pp7kbuj-}63%%}bF8P*T
z!I-PE>Ks*73W7@J)zh3?we4eYzO`?cBjr59;Rf2vU}=xn%B~Q(_vSH_{^5*cfzQ?g
z$jj(|{TJ))sER<x$bKiclD<c4@L=^XQ7v%KNet5`G^lnh^AiU<4<)4yEiY-1=rJ_4
zxeY8|Ab&V9{wvYR<kFz5(O>|69=&D1=jgj*;(o34_(tbJY?!K>mz3b2es%n`*!xNf
zQu<HpNf4d;@wM<N4U%`K;4z#-il}(&T!#s->CZS+-{jrCOFlKHv$eFPuyQs<8M>G@
zXUgkt@V^XFA7V`BSqbO}vzR318ANb?9yLq%H01m3;|hhGtY<SI$_AaYo;HB-bN7@8
z7Bi-{3m?P94m81Wbkrwo@I}Gt2~96EMUQOFa<IwzC5z1L!m+iO(|&$+hIwPq47uaX
z0#grjhll{q7N_Ibwa)x#+}}-9pS=@3ykGI~9)+<35xTE@baX6X48|`c9ET{Cpvatw
zlUP$}Y<Z;abkaypul|~rOeTFnXJTweQ&X6mw^(EGwBSF?1Xy6Mh=9^Mnc1Ffa9TsU
ziMWnc-EhT0LX3m)AXheuqg6G>ok4Uz4O#(exO-yOc^)7V_W$(>2=8lzA;Le6>1_}V
zzjTFEeaS=|6Spfvygjf%phPP74GJldbX54?xkE?ab1t{HQfPtCmTjdtg~j0~H^a$y
zczC#~7tk|{@ZZ*Kqd3WK?xTB~<hzZc!l=)$SC@?#xG%#ZDR|Z1m+QHS*!}3;4GM6U
zedT_w7J<L{#hPhfd`0Z)64(6N+HxSZS6e(=@Sv7%LZYTzC-9gc#~WynyC4{~y4yXu
zwf0*ihp3kW%B6a?U|=hSB@Z%T1(h6u5qy<kB=>A;lWK;L(xhsnfd^IwAg0=)WrM9y
z1f9cS<wcIOSuLtqsa?#&ba5V7xTv8WreP*=ZrOsXU}021_n-qT=3{RTERcN3xZ#`i
zWwLwCc-6eFSEGSA+#}mjmIa>En&KAt1**kI^g$)jtC&)br!;P&=v!n~sdAZ6pOpJG
z^GcXW=ai{&C*L%wV!2232$4QAZYkQt&d#d^qR)!pU0EiYO(-Eo)-)1=5W@mz=BxVc
zF0uo*&8eGSP)>Y)J$EmX2(MV3wrtoyXg+cCr9|XLw7<8OgRo(tNe-UbXJFomkw!%7
z4*$Oim-@qOIOzZaa7gaxhJBq@Q?PM+5XN@k2Rr`)M~;e&%G16a(id^;>P;212h1BR
z&1F3TtWMOPWdETmUeIo|#R?2P=R~Kh0qA`EeffGR4?q`WX)_uQ_Z+9LbN2(e+pfw3
zqN}U>eA)3!e0Y!dbJ|NCy*~VwkiHVWvP%WFZ`h>5vL*24IlU3TbG^ti!V@2h;hh6F
z#yz;HFzot+g|~6RBzB>T;c|~JY}fTl!&R6)!Jif=H};GS!8~9EufM{5Nw>wUGc`@v
z;Y^L+oVsHOQZX6{JwMNNCO3=3An^!#kn{{^+iiSB485p|sWz?Jf(*MQqH|nHC0i<O
zRNX{QMv{F7))2d%gE-A}q*1fQkQKvKmy027H(sZWHmpM$#GJlRTJQ&IbUWBHo>mWX
z1~bx8e#OfJTKEJtScft;l!8$dC#=kzOGc^c**T6E=$Z$Z#;<JAb|uRFIYP%7ETAWo
z^X0c)P3S~X1~COisdy`iGElAC)1B|>xt@UcGL!dw#kLoJ$Ty|mVCOF$sLk&Xnb&T7
zhdlcsOzzzu@{U)RsleToSy`WB6IEGLW^(*03auO4Apa;*i`|j`enN}gqHmB{KRNyC
zBR-sM2p5ZC;I`|9DEnI<*8sn)w@2xAHuZmY_ShDDMDdkG;Br2lg#(M2b%7W{Ot#R`
zoH3+{75V`6Crs`uncS{KORhZK015Eo%>E%!M8=f#TRtsd2z~K|X1+7Bke;p^mejc<
zpFH(Pxvlqx`gf-Qe#^;WxS&mvdg#y<yzE1Vv_>k5WTix1!!sx}RVL{Al1pTLG4`5!
zR*#9&*qBdSO}aSP+s0=Ib1<vn1Z>V%9KV|P*X==xCxbl-l<hajY|w0-15aQwwC#WD
z7hgj1q5qx2>PRa+yx^}yMKKe;kCNQ)?PK@~zEXY|`GjL1k58QRxjY>wt3UK*tUe4>
zh~#|%g+5z00GYFwhRt6E8GT`SDtW7sZYvT?=3Pt!uYWQvXJy)G#CwlCzpOn{@d;~Y
z+c3Ck;SzMyjTNJ-u(UgL!Gw?)b?lD`d9GV}5OmMJ6IlFQ!9_0~41QUhKmny@wu$J?
z5~>K2j`_UXX}YS$m-8m9_w~W82;pu^xb1t&McwB&Ax)$WH}R9GC=Cfm;$6HQ{2jw6
z_WQ<Y_27c{P@C5^xRCsJJil!IyloNyhHJt@7vcKG!OXzpw>^!WTS{hpSc3Re(sJg;
zowVk!c#<y_SV068`w0eq%<SK~hF5_kX60X+IVXQ6cOKwLZ*y}fO*lcN?4JDm7^PSO
zd2yY!iIJ9LtsRMQXA;TWK~WJbk7rXHj|62E2}@J&gCyRvV%OiltLn4J4f1#$Lg6Vf
zGdAz+dG}5ZiGIh2_wIf6;Io4__eO>2e0Y^UZuvW!`0k!?H%TU<)+>&+H5AdWM8`>Y
z3rXFyw<DP{DxczeN>{I>M}orJ$Hm*@yG9p_RsXZ5fB)|N&-!;i@85gC?ua8foBap<
zU-nxbJKXX4-TU``J=&)VBG986w~Dp@gg>a$wjrX(3#fwHCB)`HfR8O=(ne0+TVkW7
z5xR#YjjSYM*u|`|z7F;BBNHqg_ug8-cBs$1KM8s7>{#yxnM}(yXUr2A^koi9${?00
z>F!)Mcwfy900^-*1gw|ZMb&7Wz&^GD69H$vbLUC0>H4S>D~^wz08v1$ze-L6$`%RL
z5m@CYoHq$d{=T|Co@g~e`0=C)n(WFijd~(T7{t~EmD{M9vu)uhme7?;w|OhL&}kGV
zEt{mXEp-ws*vZS2{Q=6z@7%E^I}6gZTH5N`bkns7++!3tE+(gl&8J6X9NscRAMOgA
z?HmTVZ0+g*E5uj|xjB|<aJiaI_cd8`#aylhO1&qnH*U0xIF}b(Xi?Vc>tlT{12R?6
zxE|o^j%H`<>4%#E>xb_Odc&J4eu`=O>K?!h3cwj(50bWy#W|DeQ#5xw@>tKf)P=N$
z+B<%6a#S1?kAHtsJZ~lnzPq}{PY>_M)_Z|^h<I{PjKVm>JEN=tyeGr#a}%a-2q2Bx
zqm@Oi4XI|dtS$mwj5Ks-f9feui%d`>51c7f3lDtjyg{PX&X7zV{XW94YbkprDC%uv
z`i@r5NIAFx;)X5J$Ls~xpu?IhCu)c>w$BsB_SwC=_wV=L+&{cK+V`Vwk4S3Oy{GPb
zxniycHdpNtdaX5c`rd4)_l?XOB<`hHHk2X;x7vpznPUH}T9t?Pw*I{tS#SUDuljd?
zIZ|X|@#Ac(ds@$#+Qu>OJ?&fhQ#y0;&3VR;YFM(s14T+GSrb%W%p2^Y<DYH$2<$dg
ziiu|{X+fVCm)VNy@2U_TB!h(s`Q3r9Hk#-*5)CQnn##EBfl-qFWld&_k=ZRqhmufE
zj~&y$S65Xv?{-acd<n3V1boQn!_+z-`_La4MWkEj<H@*-_1QFhSr~PYKQG@je8cgF
z_%=MvB}_Wi>QcrvEKb1BA)AKl<#gocr{3X^*|JcJdiXkWPQroTj|n4&kX_oxKAbk|
zNuk=lhZ{ZNa1`qVQMEiGa~n{>(#=$${?wijp74FYtlgf}?OfC?dGnilL1S*<du$K>
zs{i_)s+3e}*boO?%k~n@eq{(%T}PaP&~Lw)_iZiyQIm0c^!e;0I|SLW^sqhs5|@pf
zC+j|Cv}cn_dU_;<)ZADDponK?X^Zbi5oxKKFiJG&W%JfGm)J#eZzKw6Aie#pyDX?B
znSVw}JuOqTCzF?&_7j#{P}4_NypN7XEb<nf1>I1J<cRlUZJP~iovTEAGl`N3cVju1
z)YP)bOo@^y#+Kykiv|cfaVoDDT5O9&U|b({4}^argg#;?f+L6qz@^3xvVv(_2^6-v
z0eRimaRy3dN<4zhtE)vk$JhPAU?4y17slf2|Jr{U#KnBoKPF`43h;-Y-8b;Z|JtVo
zhb!o+xSQ5kTkB0NhKx(j)zcEr@_eOgi;4dJ6>OQ&(eV(Vio<UnA3b{f;>0^yTi=Ll
z33sOo5QWEiU}an@YD^{|(^~Ak5&Z*0^$qNc^4#&O_+9E40sWELN5$S74>M-M=b08g
z=P5jtNv0jV6E3AHoy$lGSxX=AGNtUU8XjBO(g&(gU3huFU0qLORd*1Xm!j9!z&9t@
zb^6($K>}~ZddbstnSN9sn4_)HZ8Z3?{9%LmRklqkW82Jab=uwCzmKoX-D27nL02+O
zSsqK*B}V~(&^^rXw?EofHuzCJWr0$j*91>8qc~PI+R=~{R4U?UZdW72;wFn)HCuj9
z|G^+w>UY2FAFFd4=o9vd{TKJ}XZXDSXZVMHaQ{iUyr}v?_q{h_I<h)KV03EcuIe`)
zt2BRu8tum!a|!F5w$4Bo;+5rdY;v6qtHWiY_*g8}Rw1ZFE|}-UB!&x#z%B(cEs+*`
zTiQaAWP1^MqFRjy!S?$mkw8dnDf^C9Etu1RbzJUrKI4nPr=Kk^4ub#$*5H5bKc2ri
zWE<SwVsK!wdIREB+!}Blman{?H)onN(iL;M*lx8E;XLe^*h46cS;FRCRU+US@>kim
zGMp!b>Cfx8f_!;-V4_YJ&U%07_K7HwKs;kDL>#S_W%z=*H_1`l+q92%FE$ewkJ*eV
z2y;<IvX78=uu~iCVfpBo`B2Y;LM2H(vmBca{rhwb4+Tl9p*wfPfMP1vdNB~;IF)+w
zW;sb(&mg47FOZ&9$j1&V)$7)RTHlT=Th?4Hu?JwXQeh5m8^y0-cJ}-_=}#L?XEhbD
zlT%h#2TD=rh<|AQ0&PVFp8!1qH@tA(Bw{qa&_GS?>7;IkrgS-pP*o$@@ll!!-b(kP
z_*iaz*IVW+6wBN!49gk`=9I<>n^!AlPWV7J(_UVDnvTCf5d-=!x9ne4PWo(PxO*h&
zhsm6FJ=1_$uk*0V&r~f};s}%QX@$kslzbMBz5$vU)66ECn-V`jDvTdO(%Bcpi*X+?
z$Wq%3CSTud|Ky^cDc}=w!VN;El<y7e9yZ}JtmU`C)ZtDQf|1v{*VjVVj@nVx^mw=9
zMgVa)3Gq6EagH?wakfcfVww(}pc1rUanG8!pA1Rh&ok`oe`$DB|HhF#ldd~gO{5FY
z^X(U>dZ(a_NVe<b4dy*LVB7h6bv>*Di;(Q}1cY3k>$49TFN*$p`X;cGnTB3J|HV-M
zO#Q}vlFE86EJo5K1c{V-sX;^dTZL0bm_+*H6exNSMAdcL+)nBU#cy0{ECCNFqK+oV
zUoE9^Ea51-Jy~rbE@b0|ikp9Mcc>X-Lk6%UewB4<t%?3{Se&YV=pj4$en4<fJ#1s?
z`pYof+xXx`SeEr!q8%|68MSHzaLC`1+}yS+KA^+Wd!gz;L_-aeL@Ro<h+EFBXQ9!L
zCKiBKf`Z~^w<fJt%|hh;s@(zfzY=2jr|kTpysD4#zN#1q4hjW)P?_~^VBZpBl*<2~
znltXe{kuap@W`@HnDKf#Z~s)*(~l!qd8QxfJ*<e{XK7=Y8}aR&TvSH0AyCp?_Egj?
zPT<!=`C}+`iYWpGKG9a;x6ny{SNs;{(C_fUGx&>`L>wtw56?T!j`k`{K|jk$QYpZ>
z8$Mc4uitp#5U^jk$a}3sC|Ge>#g>YeL=lEtuIlr0jC@Yj_P*k<^xR)ljG^=24*+tv
z!f+)!;hYLde_fnfHqfV@#4LVi$6M2e1=3slCJHyG=Wm+VijIzogGawd_soY+ko<9`
z+uu`ENb2kGd-m1lmV-hZ8*W#ANC+w_4b&C)($M=HUayUH%PNm_P(f-Hhu5^3XVr71
zrIaeLEmM!%_az<6flr`FI{>sYCm{$nTFwy0*-%Sq=lGG}YivPmY?j{Xid3Vzxvvhf
zui1fJD)(#Tik+`mTBHWeobA!pa{)j&QgTeR&d%guK@ho2-nfUf`sJ$aX=Wv%?zIFx
zBjKEaMc>J=BVf6yQw+RF=5tb>R}p53QxWEZ4_hs3>yd2yBq|7opD)~{7rt`^%GW$}
zVL7ff_6&tx`(m>GR{For%4t1j%HpJ)CDp0IiIlA;H8dL>T~iw!(?8~|Q*%Ee7>{R+
za&}_rhTS+WPGl_9$^<3+q0|_Z-a}B$>^pZ7DR}43{=k|!`hD!A+*Z=1p-u9MPf_Ob
z3BvfE1gWK!`VFi>`nZ_?%Owy!w?d<%><FX9cxD=8E0?7rXWc(#`FNSjWY}ZM+H^q)
zI50IwhcB70a9k|avio#9;HyL&g*TK|Yf@^9%~2G@`e9KV=N~8C*--wCq9;s4p98MZ
zf>}E9H<KTC(>r$e@eD9{Y>IdW^{@7~Jd@tBD|wO$UHGLW=`O+5@LE-02As+tq+TWV
z)9L8H#0Vm^D!EM+mdWc;92{Etd@=iz1U`a}|2o`t@b1U=*)<*YNZ=u*bu71&_;X{4
zE(Af9#$a75AUxQ+^ecI7p;6i$T%yml|GS8DOr}$%{(oz`E<l-dt37;j^y<;$a7>gR
zy$+kv?yxTik@1exEYL3q7QUSPR#1_9ijMrdot*-yzxEx+lW^yGJD_FTqT!IKA5baw
z>Ae4E+yFfWKXq^E6}#)zdH+|t`-AX;*`7RdNFX5MB>x6)4B!0SQYtxR8Nyd29|8WT
z>vIt91`X{YD=cVSSefS~!W+6+e}s^JM!_%$f1><M8ha13EZBek=i;y5@9%4LLIy*=
z3C0Saj2#&Ksj26C_JaN2@Xqk5v)7Y)$?xP{;ScDBd-inDOaF>mzV#B2TGGv`_&z>P
zMbDSYp7Qzg#_zExGO4<KL2(-<^^>3YuGp%X=5bjrC*ww|$+Wr;VKlZDT6q_tfjqTI
z4rw!`GE$QDIcW;(kb1VBIwonhpe3*lgO=tK*I9&V+b1Zs?0%=75OMLe$Wkeuot(s6
z;%a^oNaLS(l~&||Nj)i$IQ*LVIA>L$f^ds1#EF%#NbSzDqJh6P*CX&?&AgehvMh+=
z)%041N%eC?$}cN{22=}T?*fV2VQZ(VT1y3$*S*Z}`FeYxzBhxTZ(n}%;@R`#hr^(A
z4uAjn-@<xC9w!+xzp*pt7>-{QySu;9AA=Y=v0XnbynSVIe&jxexF0fz{Y7#2H@*#R
zRfQ*U;33dXs+FGj-|g-5#Z=nSV9}1$tYtYhyHf7S@lYIF{#${%EUs6GKQwGovskwp
z&MSC+UN*w#!R8-R-NN#RI}g_F^5CqVE60rwq0tII6^Y#8#<Ob>@N@q;j!!6}M*!zo
zvRTo|>w1ygr#<BK=D}dF=f~)uc{*FN-pJ&>4`dejfjsd&{u7x)eO~N^MH!Hje(^=v
z98vXli=X`rt2GE#M!W`0-`#y*opk%c9`JVgdst6|CwzayTRcZT8P2!JM^k{4fsH03
z{Y1BY5KR9)-o76PDU2uvLF3S?zwv7cA^kjm#adpJfbj+)xOqbcrX9z%G~Q`*u{ZkZ
zU*l`O*KR>0p9I+-{^uv6GZW>NKK3AR=^%sm_Ri1`?0UcW;&;VavXsaK+TD-0&&oyj
z-f%~916lv>?ta`M&IwDK?x?Nl23yZ0VD^Nw_rPr)RYZP3wwPExQfs5`=}oDX%RZA#
ziNHgw`u)-_%ytb${dE*#xu}bi)beLN2<^~Ljvc3-@&~EF8b;Di4_A0Qy6wunsL4rh
zOBbiN!EGF74HNo}Wd!_9o4Egtwe{gYkJM;@=JmIozxDfl|Nr6UG>Izw_2T8=XfvxS
zT#1P$a1f-~oifVCy2@}{^{7z-c^>Y1TC&F?U7uL+Ry!+d8;d|YE24D(SLn40w~m{^
zqMt6DM?F!Ggm(7DH9r^RLrI5lBX<zKU?;QP)E^+>NAn55)*qRor9b!U$zX-dzB-nx
zi|RTko@JdUFv+y3nYjt_8a)|RY}{w`)Qj_2k!Q+8p*HmORby%J;`S`Qfl@+Oz-yc!
z6r@XLiZ(BCVB8OM#KKqf9wi<3nG=+M?Cc;zU<us{Z8!~KgLoTzLc%7l<=lnQI32qD
z+5_^7R-AZPcNz7-<+ipj{eqjwgF50JMZX^`;~?;NfBIK>&G);366A!^R}5fl)4F^5
z^BZ8+2RWGNCcWa>^T*#F9h+tno<a7GNx$F3(=Su`P0}FSQmd@5dtgEWc)?X%$UkrS
zLf+~)ldYS$G`iUlOcJ(E?iEd-grM4NtmD2kP0^OmJV=4D%by48yc%E#(HgB!^%op=
zfPS8P*z>()fWQy~LvPvvS)iCW+4Z8D2HA7^$8^L2A`kP)-e0|oITEaQdua!A-Isk4
zV_~(x;c27Ef<dY76*5qiallDcoNjq6Y=?}%1@6v1yzwe%20`yWKXk#xkDaV%i#_+}
zo$o6r<zDK~r~P|>wB0P8FDvE@wV+5i6;ET}_tTxkw>+HIm)rY#`+gdd+e<srE19%(
zy>k-5ijGJ;X$b9Rx4o>E#~8MpeNCv8JN6To;a=L60(<7!iZRCYs2L+&T^eF;gfQ+6
z;g}wxEGC%}zvn9r%y09a97?jk$)C;Ir`#{H|FKxwvdyIwp`?P%3Q#?oxnV}7=r!n0
z%d@?oSyPgrwuJvH7+nb8=S?&s23lL3ZZ*kl9o6-xAUzW68YWK+{fR7~lzf6gU{i!3
z1A1JlS6*Y3ECEXQAdu+QeAChsVH>C>n7-{Ll89jTjnoef<XLNZ=!=Oey=`CDqb+La
z3hHu<Um}uk(^XbZAt|n<gNvZ0S#C$Bs05|YLwFx=dy)yjjlc|sNt5*0BVHpUZ&G~`
z#XAdr5k^!zqdRv7q;VC+J%b*i55kdnBomwHJ8eR1n}IQ`y5yx0yDmKR{6*{E*)g-f
zK7RSlt1pKypZ)&vx8W=0tcwNmo9?aOY`+ci*)nA?lZ#8y3MjY(CoTfX%;BhI1XM-g
z@mvpt=sjR%Z_24Oojputp^CUnxM}7rrCTqXOe*jiP8&pZy1TKXyMM%<$~YT$r;EZH
z(^o_hlYbaLOK`Auj*z&I-m+6ok6X`z%~YQ!J2hiw7m@)=Jwi+-n`<S4(nvx;J<DDK
zN?NinBXXBfoIh&rL=C35JPYy;y6zr^*P_!0bp(#Pq`HcBPZ3}*#)1AI?pr1sB3mT9
z0tGH$7o(phsFIl1Ps`;+dm2{jkE2dNjE@5wlCkJY6*^$5CmBUh5qgqUl64v}Hj`+Y
z@y+6i)|mTfe~@?AR8ff;GZY>ByXX}OfTe9U$JNr!2rL-EO!8o|{jB}oJd(Wc*!A$~
znL80LUsmW9S-A%?CdG+AJU!$IVh&nBBJVm0!l12CNocc}XhY<-PfW7WXX7aHUul|?
zfa|h*mmtwcv_NaQBZxD^>*;mmnsnM0EI+Lhj9okFT}(QLAk#%&uR&|?)6Jqf1uMrc
zun-jZ6x!TfLPO4GeVk5N7+3q%i(_r&B#I0Rd1BM{_D9m+0)KiCc0vC>fcku}Y7U^4
z4#w>pywj5Q+YhTn1sxHGL5H&2G1MR4n~`*Ar{~}R$5D40Jryd(g;9sX9vngcSk#LO
z7i7F&JQ(^98NOpVU0jy?hlT*<v3trXq?>8DLK<LHT|lW|_g!4zeUkN=V%14QTLP5*
z<W%=E!uC7*n9?uyCew<vZPfPX0AzARggToa^oE{HQ4>Hsx5BiE2)XH4gF-hV+CD0R
zdw(bbZ+r9>gZ@iU2bFstB+BKF94E$`9<9f(AAR{z1Ajhj|2*9~;;l&-ZF07sv=ESe
z#{rF~RPIfZY?E;E#8hL;*2NU!OasAJ3TaxEOUai|Ra{2pY0eW5PW>eUL%#fwlXc4;
z>gz*l3&;Uc4hFM5<BhA>sO_p@L!?84soLaETOal23!dR`DZJNR#+8CUC)^S`@e3qJ
zNocT&9e3y9(WN;_HFH@|*K+-{EJhEXJ^!~NEYo1Wc=?Q5F%n5P6CKSGl1F^SDCiYU
zkWaOFtv263X7pW>j$|4HuC#ujZRN${2F7C{ddtAD?uf+;McR&=kO&Ba^zj9a0wCWO
z$<vPArX~N$-BHYL$yVhm-aEPy`58!rp_#pXDm%ObTnd0Y#z&$I(NqXz)|Tjh;ifS`
zhnJGBjpabbjnXjdX=_4}lUGXH4{3%KNQ3487dyOOR@?hYXreejaiJD$nUvz;QRK!2
z1&vts{9>0r3EXFTlUCks5$Br9q9h%qZiKw|`t8ZY-xG)=ERZ<i^?-Zgl)~Jdl}m*!
zMrjxOh82fm`Ym#-Sm8?tV3f+-tt~;?!ZV0^WJ0aVw?$@Y$et3%Tqn18d%J8U>Q!-D
zrTA@&$Woyt#%WuH$xe_-uJ`;V+@DtFCs@>)f+b}DQr^#z&^Jl-Aw`L3r)97dTAe5y
zbHnxlJz9IW->FuF`QG@<wwr0nfcBLOx8|Hr^-x;9wxuJEHR9Sz4OHL=Y=9{{fL3?Z
zmhTOI`Pr`qcfn)M1fY5;kjj7;xxF!$QL!xRR#4XjIu%g_())SQ)>8qMS}*WnY(qbn
zT0T-}KPGktD^GGeYH8`3k*q2r1NwQ2(a8fL$G!H!7n?JZlin^WcK8Z&zF`%?62qRI
zKFc%hl4fTgrBbqRq3mP$KG=7^eb8@~9sRN|Ig#N$A^&}CR7Eg;;qhsb9g$%rrefs-
zBO&;a0*8Z4IR*+2yo!z(lc_Y6hL%9f7LeFu{Z~(2x55(y(+^po2(u`wkY^n*&25RI
zD%)%6k!j|{p{srJkgIw_{+XzEavi7CWZ^+B3D?@Avh|!);jWsB2a7A3a&y7_Cm;3R
zH!?|PNgHdOZ;q05-w=Hzd&7B5L97!%#>!fc@`Jx}Y)M^5d^XctC7dijDnwuRUWMm-
z2pxZ}rCZi=Sx$II*UOq8isA-@Mk#RM=1|@VyxhHE%-}ZiJ-|)FRpM!snIzJV6KGBH
zb80G8OyZqg7ijOjf$qols@PIMqX$+51RFWYtqv5`BhusO<nfco4`0FudHn6k;}<Wr
zvG(ZI^G8Q7A15kJtNFQzNVYCwISU<`KqVq*HR?D(TXDITG)a<Xi_%#3kZnpu3H=y|
z<kG+AtejkEO-FiMK)A7Csx6`{8uC2FRMM$RLyY58_m=+WlVy1Y_X^Qoqd!=rDCf(3
zI$4=;h_3t)$?1P--MhUL*)lblaLO|Mn4wc|W9(Y_8o=1CSvGucRDTDqKA<6ON%SfT
z+3D2Y#nZgenFLfMb)JUXD0e3vIq}Is3Sl3u<BH~COK;?M#O{I#=VBtO&S0}U3awNV
zi6T=HQ*|L>ATv+#XJ(S(2gB2pU&Qb!V|$V0&e%KzI80gqZ3~n14Wkc6Rk~(*QO?=8
z<BSM`)kU+s)^1>r{BV2gF6nij9Q*cT&izK$4YABN%sFJEYcHgkJ@lhlZ2Ypo#-_k(
z>U@{|{yyF(AEh8VI(K1JGX6~=zvO+3W$kr^r%^c!>XqI5QAH$a7_hs{13-;Ul~fY~
zD$sNZ4h{JpP|EHT;#{T2XjdyGf$1<`nLtCOBoLycpE47Mv}T3Z7tF#GmLmVA<BiwC
zq0(00UzKkf>FJ?PML*Z8a(QrWSL>v!b6oiFl?fSgeBah+2gfp{ABlcow$oy^_lgwP
zHMcpp(zq$<r6|-<I9DnCUebD-^FMuE(&JBEWvi}Jca2^K==1%Fj$J%Il;`u&Hk&z@
zew81lrSoQ6$_|gML68*6ft~iHu}5nSojAa_T(Ch8zM8Oe8o95n+5{K!v8_Lu;jKhS
zUghRYQ42(zn7eS`l^QWHcth6uLUK?z0RAxfu=Si>?%eSJbembtk>XA2br!N0*7=AY
zf1n$Qp>`w-vG-6r9llyj_+QCV>lKp2St<O#f5|hSI+dE!7syotDT%{&IFrVVK~l6U
z672aJ%ZN5xd2t{PgrHSgE2J%5CsmPdC2J02isV{L8>zJ-w+D53B>*bLq6zeSEqWq?
z^L+&8t4Z49S1Ntmv}^o|g<iyu_oXg0pPbA5x>~F@bO2PK2?B~gv-FAVP0H(be=}v^
zS3{e@&}xm7<IK1B!$^G}sn3Cm({73KM-GjRj7?khQ&!EQ$hwWHe!so#R2QY7%p1Xy
zY*A|1Mr;KUzP}hEdqx;oO#4m0J3eA{7z)f0#(VIK&kL*p^qkYjz<vs%DJ=hE0d@N0
zp2O0TIPQJscQXN_na$R7NCLfokT4N`0>ZOMg%`o}JkZO<vPxUj+wqlrPboER`TW3;
zO~r+GYDr@81sip1f84tzcZCV}eY@L!F#S7$mtIb7^a7AZ75a$lJy|a)8qp(`SOzIk
zXU|8{oS{wN6cLhQ?>u@7!SRDShQ;e?SQXQMU7-yD3jq2+QI7|N+MB?5?L(`dR=in+
zhj%)gI)bNVX_?x47Nj9u7=AXTq<=yV)S5CN;fs{DLt^HO8usDYJZ+gZPVwG)$(-XV
zypd)_XkR=n=hP@8t?;KVp#)A^!U4lpeT3c$cNKel*Zv`xkWdlU^p{*m+?h~pe*f>m
zQ*iGu?&_jbSK;fT)sfL7Q7ZXq0s$uNA+9R`TnS_}iGjw6_dfxHd~785PTJ%uzWa#v
z(g9S=z#(7H*G$ciJ7)NOk#YTi>@tV>>INr;hKjwD2MT^ud^v5-h#i+A|DEXlgRmV6
z$sg+qPjR(MKP;^KmdSnuALst1$2%OJ?$o;sU2tV?Sgjn}BA51{O-m{UPD*u!2xmW>
zBSq@^my>7T7JJ`5!hiRLW+vL6Vp5DShNxKwz;s57gr0!@WA8<K2=uAhIB5QnJTX~)
z@o(XO{ijd+j~=PA_S?Y5hxO!l;UDE&{9`bm5Ot0|TJ&QL8e8D^XsO6^_tH<ggnY)*
zL!lHr9i~I8z=BT?Ie_5J=bD=0XZx}-y&jFN37$-z2}|>mJ*FCkMRO3!a+Ne~@fBsz
zqbyD@gJ?`s+BT@*{{12D8R{K$GNxKi5)lj9VA$iS<3DLb?Uc<C-ms7WM8Ej9i40Sq
za?!V;nj8w_PmiJ25kyoxqp0wpb(RE?*x4Ll@VIW$>MV}nJ(X*TXe03)034Xrhwy5t
zZrH-6Q<Q(kowf+4FbZ3PT4;&~R7)o!`)?m$0qbTW;hc}OM3Ffkn5X2~OKqk8Bug7J
z(HTaXN90h<Kob1uaoKWo94*1nu&mD?n(v}BNz5M!`+tRW)0`y-x;r_3{4{2TR`Xya
zg&hEJ4%^e?uY(hZ&xn3JDp;&SAI9d@`-;<UQrK`eJfwRl_?yD5@oFY#)#9I&vgdsR
z5D9#spRxwwDLHn4iS;iv8#DeUT}m$-Lm*V;r5BY2&trBqraZ60mWZ~J=`;Tjts5c|
zB;lQH2qI+W-&T!C1nwWgzd+^;i@HJR#(tUDvF20o_Vu^{gm?TXK465%71UG#*hF^C
zUeW7x*UICdXlaIKhY^!1`hc@nDddLZj;cN){u4En+Ae5z+y*(DvJzjazjeLHzWQY&
z@Zal2XF+-fy^qU!)s-OMeb&`m*^J3-Xq^DzNAtNil~?hL#*`%M_R#$iiMP$QBxHrv
zyKE+{hmF<?mb)aHP-;siCgf@LL5kIfEB%QxBOZ@<c=gj9UaSLGa)ZL}+Yy~If-icm
z=>4DSn(2-bN48%!oiyju>MiZXP6GigH6`ZZyj>G_e!O-Q(}cIf8`GDe`4cHzsv%3C
zh`2qeFXsKQmwP8C&$L>gbm$Kxq%`cA+br!GsV|U6e+G~cbT6HNcY9_BdP775*ZdFN
z@yeUl!8#OmKmXL{ee%rsS1^>v2lu6+)vzJZVcHT2CP3@mc`MF0Om>;zA8q+m&6!t6
zi@MiKUwdtmm#likj!pWo)l2(Q@wnJ_+&mRI<>8zy>CM-tH@2@0h7~+q2$381LwH$O
zl{EW)Kn9}d^vn0Ge$TyR1O`QZMh^M7eQGMsh%KIX>mUuNiglX{SxtuWRC_x%G-z4r
zqQ5f}_prE~9;(~cM-c%-h#9e24xSpYEZ7O2RnmO>_U(U3pSLC62e%rhytwyX%GmzR
z*2~rMnIP2a`NmEd{+~ADvZH|{86gAeF-|z<I#O?EJU%J5fb<21j3t0(r!}M>KftD}
z?Hw6_q79-1o<oe+f%|j6bX_hRg9YT<I^@OhZL`$xR7f8^4$;})!aw98$jyUB8r__@
z;B7vUmA&aBv}nRtO2B)p<2Y5dwfb@;qK_-58$P;^brKTx2TkW#j?gb2gLDqXKuf8}
zHV$(b$gN03xoVcdJ~?830sifp67CalC1kJb6W?O;d(W(JR$gNXNuALjB9CK!y>a_k
ze@E&=!pfrC{;Xo4I4tyF=d(evd!*YSTPZ8C%aG?L88h-ZnG7$c%~?4ea`z<sxq0tx
z>2h>>^7Q5N+*to;-@$CP*q0<yF1ek_wwk*ul3!pBjBqHeqk-nlXgDIN38&^JzS=N<
zM_Jq1`SRMFt;RE~vVuoO964Cww7@}P5X@JSyBJG3tJs@;)hAXh)C_5>nX&{M1g<7f
zIc2LfafnP{?UG&FQOZXm5)xyE#W#WNvLpJLe}bf(a=|=tbNfdO5|JF;Sf<Gm9d*`p
z*bvrm9!!HzaB$O-(2t4Eb!V%G#lshmk6u0=e)sIf?@yi|J$yWT@%Ud~9lv-yJbCr}
z@r$EJPmjMfEc;p`Y_}5Ds|{+&N;Z7=-fev(JMpu?kg+Q52+_J87e?4IR$`N3^{hvx
zbP6F=js$-^X9`F>h`{i^zJBWa$Wf@4`mFP>y);hds{=zis(4|4v<W*FTEkGl<9dVy
zA$XI(0*=Tki89I)k|x*scgfC9wx4+_JT?V8{}^kyYKD<|awbqFJjL&^R4zTLDp!r(
z^C$~!cBq>3W@FXJOVq)04YOL#%~(-a{aP+@_2J$|I)hFl;^rCI?4C%*aspz!%fKGj
zY4al1Mv|Pn%d&Ydmcp!DZb$5Nuk1rke3B=r9eJ5xVKHWbUZkQ#Gu&F4){)%@^-D=o
zY-MEzqER#=B~#kt$H{5XFs#!FK2T;ibl^39-}c+_jlUxqCGt+@qT6jbI5McY`?Uw|
zvI%x3xWlPryoLKBBl%D!lWo=9d0)0?$Q70g`EG5wT|VjMrE$?M<fBW!s|-b4W`ffj
zsi>8Vcb(nJgU~`ktD$d(P6)JP_sAT`+!US4b~=r6)ys58e^fEN+WdS9;=kXK^{x2S
z<9bUh{H7lcQF8F|GVMU9a|z!?RXQ??vNh;!CDXYdRn66tI{v{A5<K4RSSK52v^yxi
z_1QI@egT5hs!)`kfKnzn=Z+ih_@u0*AVUz7X0V+jSrTQbGpfwk5UOr9b)#9*M3|WD
zfj#<&N`GIBWP85Y6OXcRGq*ijlbo|sdUqwcB4Ru+LqeYQ&4-u3$%S#PEHD?(hp!ZB
z<55D|U$GmHV7P4eWR>*kUnM$VvIfiQqFhd<s`$&)-N^Z!6Prx<Vp$R%yt^5f^&%+p
z^-4<Ip`Y>2#I%AUq8W-k%f?1)Z|P=ac~D8fIDFq<s%6s;dTzT)^uR+W00G}L5>D7=
z!B|6J$=H}v@!g9y_bWx2kn|O~knjclWuFbcFT@##jDWEK4<obsV%~j|7>I$j<AZgC
z9-E+y&8ZY6p6e22amuNDz_bi8S5X9r0ZuwgCNe<N-Sr~f4^^#{H&|im>B+<6r<oJ#
z-e<$MoK5-ec3jW=#R=L34ZbCiD>d=_$6~@=2GC24_{~m9q|O7kK*h5j<wP`1jc?J%
z!u(W(Rg2xPf+5LBqTKk;yOK~Vd2}reO374=L$Mp5&N3OUaQ%<1U|XF+t~6^7cNHi}
zx;<zy>uYootHp%AS6l|#4~i}0b7M=<6Rlz{og}VZAPSnT%}#14Eb7xUUj=g@FT6>I
zHJfPHavBwTt#k5?Jx0}EaCCaoh@PP*yD(qRVwPJ@A6s}^$C){@*^hKRnL4)zrU6$C
z@7z!OU$q5^ZPj!vxen<FwLamH>hhW+0y0&<fwud6^6cy5Z-<YbJv}=9_J(dgdUEhJ
zd1Ied<3s8qwN@aB6b&}6<2MC9b}0rk(KE_<=Xx3na9hcHX3UGxe;MgFB!vncDNoR$
zHr)Ex^pn14-$Z!P(?p$&ECa2D(RBLW-j89pF(sT<w<+xHbrSVduN%Xho}Y|}FE+Ne
z&aJV92pQL`yp~p>_NAFM0Nm8B8&kFtoa*4@=;@PfE_U)UQVH((K!)a|C{qOIlv0^V
z$E~dU$9H5*u2%@BPMTnCeD;=-L?DY@20EiZ7T`H9#$~t<5l)^bBX<R@fJq?p*f+rg
zm}0od*hLH%=TV|2X*95|KRJar*v>xAkmIO^8b^P1oTl{VD`R)HvM=oacwVA9U@tr-
zJGNQb&<R(>GQa^bPZ0Y|&dp*Wz46%DiwHT)i!|>6-&v{BlxCWpf;Rh7BfVHeQ2+4j
z5Wf!bYd37eHxZplkktaA08MPdDCUa_@cF1@4B91OI)ve#hOhD$b*gf@_3ppqYi~eR
z-<t-eKEBpUyJdON4~y1E?=$RztPUN6%n<mCQBG1vss35=Pb)r7m{8m=FB~)VR%6Zj
zNu6RTtE6B~!AVezXQi0F4~EDe3I`QGi2)o$F)Ehxg=GzAEZUON=J~`dfmg@=<`aK2
z3(!;<C_58XD`C>0H@*2Bk`nf?7}zT}<dca*5p2eFRH`=L%1l>J6CnVgF07-0=-;|d
z@7V!Q5%d=4;e*F19*&|<>Edl4#Eed>H;nmFb6Y^y(UWtx*1~JAdJBhBB>{4RsnE#J
ztLB1QM5m(c7efZOQ5lEsf{LW}^0MmI#fC|+U|C3}m9DAWKq)*VT4+A_1FcjWLfAEP
z<U)upk0T|pLi^Igi}crBw#aeb1zi^ScHnKAYkloW9l&kQ5-k+WeLbCksuFO4Ekz-5
z$9quCF4;<i6nZTPGNM-mU8_|ai7_ZCPi`fDI$VUh9~+mDr@>sitfmWW&?Ew?O8gx)
zc~olYvoT1eN)edgw~3!DzrlB-bzrL6r_J_+Ms9Z~EgpM8AF?c!%->sfhf_orGHupv
zsDg)C+%8Txh((ZJhMPht<sCRV$>9y3P1Mm^inujD8huls`ZtB3al=0Q(NR;xO{j(S
zVe446$8AoV$&J2FzHnrYpU2oYTSv74Q^Xfr!b8@8A^e7NuT>}NW&=p27%&R#E~{Tj
z?>Y?UE$DcN!+c9Z>lG&oj{9ZPAg!)f94(h+uso!!oLu8*eyxRWk@V~>2{mq?lERU`
ztXES`%{Z2qu$mwV=QvR!rJoBdHSrS?;tFV1msF$PIg*g5Jnd<T@+Xoc0e}#=`8mBB
zROnOS1a^Zi_WX3iW;pNkB#~|xDeo2QaS<n|Rl1VSDQQ1R^`~}(4?EOTNhqN8{LHU-
zF}7Sh+;XfoMof3xn1Ph(sm$`S){U`PRRChNG5Gu;u$+nE9RByW$S59WxfTBb{{!H2
zU;bD4zy9O@$9d`L0;+T^68>rVc2GQAFPF5t{9n>OuNwS=)=Lh1@t<m5@0qgjC7Uub
z*@F>Q7R#U^42nl`vZ8^HSW&eMr@D>atvw#lu{8}kwVR~{Uc@UEv$6^|u5z$iuntM%
zW}mk7R2~Am2Q@T%FkF7|*?#e}TlemN_M74{q=5eWEA7=xTew%ijVtAR>t!AO&$<Re
z(c;Z#K>-QYZO|G1JY`3%s!s>Fj`Ca~xA$HI(hAeswphx%!(t&<+>UCV2IUP#am)w*
zm`zk{l9YdB1!;~&$4Pw{Al=}TW<se(PSy{Kd^Iz?0Fl+Y)SDM1FHeR0#$5`#RP0Hu
z#>RD3<~A>!UBlkuyyn+3$NvO7_cu`q1z^Y02s)`3xvkHLZVH`i2EEB(7EOpI6vhQ0
z3WB>V7_BuKsyYvMt&$Lr2AZfjTDfU-&U7I=yyP)cnALM*CVQ4$12buDiC|$?QByou
zLzMG&$QTx<l#7)YNqO|gyW$W`)x2spXEb4i3r>o1PLtlj!h!A&%X%0a?`74WlFRKr
zMOZ@1D)1xpEh1vFHXs>$3T>lZfIQ_^05nj34|Rq1l275g3JL3vv5KdEI1#XAmZW(A
z8>rsXdPs3FgsbS@@J)+>`hH(tuDanMax_iTqzpxaR@)Ej2m3QYJGtrcUl8!*riaB2
zBpsX*p1`5)WM3X=kYhDew44pN?l0jHDvlP5NVL)LPO7y|%f;gTJ|@_3Qop^8!rxJ$
z!XE3u7$V2oaH&aj$YY=%nwOBIItY-2dMLtPsv80?G}|UQ_oq2#_y<T>gcmDudZQfV
zY`scCwpWc>+%dg1m<BHKH_h)?#|KBxk9!iV&{~$6fjh*xwi16~mWf9*_tn{gy>Z1p
zu8+7T&#KFEdTv_wDYLK+BrW&D7uQ3EEYx6JbRv2A0wqXgz7_+|n}j656R6?;$nt$|
zPAox`xqdc`U=8Wbuufaa{!sW*pF|2D;7*lrl`n)(VQ^KQEsEPHr-?HL0yQ3z<dFQ@
zr+kf?&qv{7!ks;ljB5J>(o0Xp1;GsIeTDo?PF4n}BOxgBk9bIRbv;e1_HklA!@(V9
zk~s!J<zg$3C9D3>U05GJ);+zbPY$Q`*|J<-C;W#{gz7;!g;Marj@MhV1pVl$LRkwQ
z>&s*NsmGjN3DlM$nKRhu%W8p;;Cz+(Ta&De3Te%hjsRD2jqXR9n0J}w$nj6Q6q9bm
zTzNU(QW-m5Ps=4w@0+?=Mt_3_rNW&PbxGNpN-3yD!0!$x%ko@kQZ8g&Pjh`lI{v+>
zeA(J$cuT-33wuH5@t)<#33ht;j<IEt(~*R^s;#yX*XbxhIchBx-`{5Yqt10_ia=-T
z08*)6&#KmLqm?n=a2uZQ+Z*SLvQ-%^TPku+I&%wrV#Ng?i!pU}d~MmnQjGv<)8O57
zKS*Gj?<`qa(=}jTNq5TICy<Jh+fkTFz*=W?DxCjg5`s5FAi^b+{Uu+--?^VP4binh
zpQ2X%sj)d9pfg_b$42(ppVqB5P8N%V*#XkRB?jIc+>CN|QlV8qJIDtHo9(6(o^~)3
zk~F75_p@`uM(NWld&&Y;KeM$oho6;i`R_Po?G4|)uQ_~SaR|KC@_A(yZd!zDbycaO
zaN8Wx=ww_YVw_E7#f>x!ZrJQ1;)PD>|F7rg%QDaoa>%r@$)W_mUxx|JD<+yges}@`
z`!?+0WPnl%I)fW&WWlsIRZlL<`4nm(;>B+&$xCt`XeTg>B1dq^KQ(8YTbqM^(Iu!$
zUT9|1hj;psu@o+KH+j)618FPbYUK{^j5Y*|Gd{*J25<1-1#p_Dkb{3Ko_p5@Gi9^B
zbD!W^O#FJqr+Nb)Yc+oyA4v$FvY4#A)%{z*GhKBK1s~WgP^@-dLVvx4RyQdc;sDgo
zKI{0)Kk#Y!cI!|Z$8BRMfiOv(1-HcGX~+3*>7Uyg0DhvM_Xlo<Z^)zNHPz8%LueqU
zyWwhrognoBl;agLFvgeYY%0DR4Q=Sj=Wwsu1PIJp3p6;Y6QD`xJ8Wh1kHx{ySD^To
zN1Im?@IZ8#bgr;}qt6!%Wb1Hp<s$~faFIoIhfA)cW4_PPbSqy!O+!?ubaULuHAZM}
zGv`&p+~(dX1wWJ&s?AIi+pNu!=|2u+fY0}1eTyKgS*#vX)uwp5DlgtGk#3>PD%?et
zR#Hy;=0ocLd0nk5O^Z=eD>JRlF!g||>%EGfo~tI|!ePcfdS2VARM!L4YAc1dlR~lp
z#j*I6qF+neruK*uoK?&z6;jt7#PuX>$$1F=Oc0xwJL#f)vHR0|yE{4|U9L9#cz<_C
zCKdkuV0TAQF)*p{_h-91OfkbYe6c&b_CI!acB=7Z6Qs*xArkhd@j)=KpLSk^rTS?)
zo#Jd<{8V1N3xz5#O>Y#BAZ&A3Oy+B&gdmV$HQ9L`7Gu1c8k0?$DX0YQ>r4Cj8~c59
z<q2<Szu1^we_s65zb-a(jO)I$lbkgX`?(}Zj^C!UmYEBQc<C#B_$$TWND6DOQbcNX
zq?GA-*Tu0a^<*kkQUr|y5Z_8nV7_9BOZufA*Vn)Dp`-zUKP<~@3zYhD5CgZ@3xc5F
z6nVx%Ib{Z|<A6xHysDZnzC3!U)oIL24gWf;8Bmqn_9?-)lkcI+B6<I!nMmV}U_fGy
zeWri{8#-{oNu0B?wYWo8q!M?EeJe@>=Fzje0K$bhBSu=~A5_`FYhU|8-5i9Q`ULd>
z2Fkc;SEC3-li#Vvgz9ak!SW{^x;-$$tX2oNHb&krs6K1oFQ%3npVH?Ft%%WfaWCXo
z6bQwaI0O-wh~Ic#FWXfb`Cq7A`Ua^nv!I)Yg_{IY*fS{V^>k89E3xl&wPy9C4<r=8
zZdm@LVBEzQ1-=%z_B5QCeU?TZ`xUy13VbEre-}~s=lETX+Ua$!ICt(J-Md@-9L>+v
zF^JmNpqIBRe~K6_bM>aSqabaO>Pv6mJ%IG=bJ2{*14R%*BzanbMuEPyrvMsy30fS_
zoo7{N>0~2B{6~UDzCh*5s9Wd2kKY4!DK`v9A{c%3IpMaLId8U<P$<z!N-2vv3pe#8
zbR%pdup2>{I%ndqQ@q2cdV9Kb7WCiLQs>ORJl8AY-LSjs1xin@mJQNV!d92dxvI<4
z=Hf!_{EPspn@LMSHn(e)UVE821d{0E+xtR$3x{;y_}cKU%Vyqa2q$5D_XhXx|2!$;
z83lrQr03-!4x&eaF4#mks`#<)WuW}y6~F$QYC2<(hWwFPDD41oVK_?;Ar0`yPUXfn
zivA_I9p{x8OfSIPj^>jum8~5XtK~XM6?^SsO%IyxI@}W0WheS&3XFAt|D%Hy((v-E
zo&-^WFCy(QrR`7JIqlkDJfw$RWC1-YFt;IGuF0Gwb@!^2dU<xatW&TC>_J!?R^$Zc
zG}!UAC>Qk~r0d6Fu{<ls1B1vA_hgVNV0~}y?EoYCkYBN5&`Vf72)@HacK5|!pjRjo
z4~yTrK=&Viw}ZZmOw0;XV3|%>-qT(9sdoR!=FA$v#;<XFxfssK887fqqC0WmC%b=S
zGvei1T&Io06BF@>j|Bb1;1mu6|5Jxf;^r_plE{t?Hjd8EO(vkUITYCPM453T@(MDo
z`-z*MhnMBwh0h6J1@?pg%4hyj-C&=vXG(M*vUPnG;vcYu?OKBO*hP8QiNMAkNol9Q
z<hKeZrzM}i`w;R7vwl&r_j5ve?;<!`<aaE}PV5J3`V78SIAAl43Tv}OWUTW!5gqJ|
zfQ;eh+wicmY!|qCnpTJtd7%Z^;t@2DQk?dF47P_&ug|Y_@Xi~3Jo>}WT#6>Pfoahf
z^a-cS3}yJYm_WL&T!1Im-<NX+_?u?#ZF#-1*gtTZTO5#DqoqIM2C_0Sc&eJd8o?VY
z%CqK86)m63dR6Q`WXR*2s+_JacZq>5>p?Jckz~1FO?1@hHQihC+;ygBX7hv7>r!qS
z1|k?{4lsx+xu}sBOME!%Y69d3snlItP0;BEgGi)b`^UXo#s~VU+x96um32srOHfU@
z6XzvhKwVIu$EI>B;}5fMg+|u0T<AK{+S$^E%I36b^;2#Z*(tNqfQO*}qOcNSz~(1n
z9n9FTwpjqQP{Z@-T%_wLjpK8v3&VSFXD*7{Rva(1V8z?&QrPN;{NXt{pX@*TAN7CR
z{C+<|cIJPcOwoT}KI+3Jm?CsVitVA8u`Kk7xV?6M4xk~wmmXi%(pCAYL}JuU<B@;T
zx1=UxX$~UmB=A2HJ>ImAQtK#AiVs-4_pW1iy#F~?Fv~+0dlnyUos*;=?{=bm@1lBc
zGXfSmDBmD{y6gpjFks)8PuZ~lan|vZi1H)W(T+EP{@%JBvG>T~9Ll#tcQ$t>^F{LS
ze1QG`fOUK}9<LWA^4^)d_kXYtW{V0A(H#swAYEPKmc`x#8EwHN-S5b2U55Lg{~ua)
zOhYZGgm4n6$EwNSTmnO~E$)3DR_t?$JwLcRlTx-faK)a7(;wjsm<*^h6^CLgtuC&l
z|J}x1)y)s2w8>g~er`ni)QyWmv(^CuJcWbkh}W6zIJjXQvsJ9#j;qc=yy>Lx@n^1R
zvW~y}G1pOM(|+_CMsB>4ay;sj+ZImoa95XFlcvo%#$~W!6dzN=foU?qz|VCz>}rDf
z?AogI<I;WPxsD@;FE~)pJcT>BQGll>doMZKMIYhkp`YG^;`9CgH1b;1cEsHHwdN!#
zK3RwUTajWfZbUkOLVxX@qxjlx7{6{6ZbohQ^(yv|3N*b;yj{!x=mMOi8X!$8nqHvA
z*yU_zC(W?QE=l`?BwHqOnM`28`ZPk)kP0KAZrST1YDR2#C8tEP@W9L-@75$RTg|!H
zr`c>e>>}x)<aOHRDtnv7U(*jn<un7HfQNm|#$^xgw!Nf}SvKDr?Rx>2Jzj|c-<pHm
zlIb>6G4@9EZHx#wl|-Wy);N3=9N>GF&NNC6s73;k13cQdD#)JHIBcYeu_R&@UxZi#
z-avfY<8$S4wC@Go9UXH<Ox)vf8)D0cy5*zd*^B)Bg2=Yg0^P~JP)KZPYtrC`q%BED
z*%&cSia<Df)RnK0omR(Z4SI=&JUrLcpQRz-@&W~+f;N09P+jV;E{ol$%Rn9g_N-Z1
zp$dQ{I*NNlXH{oobkV6fAz1HdHZrafXGx{ba7!Cm)6d>6>em%9e?gF5m_2Qp*R5ra
zPs>g^i^#0K5iUr#i4n6I5%me{QRB-X+mZPp3fb$*4Gaya>{*I6;>hrubU&bHTL>YQ
z?!VnP^w<}U$TlN~si33n_X|Rg-nUO=;EecG!e;y><0*TQJV#-vw-M+52a}zIHaJeW
z7)ft$@}W{PlGMD|-Kq%z<M{LZD^UzV1uXqcPTC0oRZM4VbhS>HNb2TKO46MXjtcRq
z3v#o(@%pyXEqNJ-+!NJv6m(u)J|AHSRyyi=1$EGSC7q?z80_9Czjqkav*KqzD>}ah
zeQoncXm7tQ;-+=pnrz#<G+WYTcgF@BpPYQ|51jJviW?UyTbqxex-B2DlW~GI+@-mM
zYbgzjNqtU#sX{BtscpA@C0bc;eC3uO!&eF?A;$<`OYkK&qiffi8vy7G&6i`<qe<d6
z2pZ|Wwpz0KCyXdaWq>qpcpAb^kl{(A&*FiGM2n}dPF_OF3q4{b&kXuGGdns8d?9Tk
z!r2-~Muw*Kr5Bwg^$hqBhmNl3KdomA<KC8ZNmwQ(O-jGTAW-<A?WCek+8^6?Q0wk%
z6a{;LCd>jA3k;*Cx{KzUd4+^!!A%r1{|1NNhx4UCPrn=#qR)^{Sf4d!1tPL%L>g?R
zPh~_GYFHULC^W|IhD6%Unl+d6(f}k76|PrO)4`9v6orG7e$kYKk)&u0o6fCK?w=Sp
ziFuWBLFR1lc@2w7D@uqV)vBNop&GRw*Ub9pZI&@?v4IKr6fU3}WBzV1>dg#zkz#r7
zwMszMUr}-h1TUseZz#VC8h@ClN9zy>7|FjP#LJgf#|yxm3iY^Qna|`$QjX`0zpt5~
z-xw4W*tl(M#F}c+tc;$ctDUvN2$Y8EMj(iy6sK1F4VXVjAiQ@s%kV1hfBmHZDIVOr
z8~!xlqh^k7amFtt$mgkGWotQRm*ph(Z_}kSqk@_T2hyUJY2Yx_gEa3VR_U^jONK)C
z%ONPW9qJC``JL+pak)^n6+X3(#+2=TFHKKrb8ADl^NQ(ATAUz)L7{YJ{6IXz9&@pZ
zgpCuGy?rXk8^##MF>KVw)E2)E)>HC=to}O;F;`9Y^v<2`Q+Mvf1hi>YF6V=pbw?S5
zr8%hP{k6Vb=(K+ko;tAZ@?x+V=SH|#x?=C;II{}Pkm%Uxp7@59)-(r|Q?8mtJq8w&
z_;u`0?eRiro8*JP^)yJi5%m!_Es6jFqSJbW=Z%LaZE~w=Konx4-8(9bvh~w0II!0E
z=_<^c2@*e#jH0vc58LrZ@Y0r*ufnxF(<=n=J-o?!AK$s7$NJ8lV(-hct;d1y`*+Lg
z1La4C!A;NC?Pa*<c{n!^_7@jP>o}>SCQi&#6p;VTm<FA9Iu%KY=YIWd=Wi04`kM!-
z;=i(gh7pk;P>+X;@ct2;FP!Y(3eM+mg1V<ZXhwwD=k8h;M+svaDV%1s@JYlfBlKm2
z{bKLL+9f)c#Zzgw-Yd{O^AF-N(&U8V%XOH=ar3hHW_@N^QGM{0N)UkdS(C3M`bqPX
zf9eSP;#VAb5{0j5BzIp`{D;MHq{zpziuVS0KWQ55<JOlStb#M$nA3M0y-$0gGPi#G
zE#{7djiMs_&C8e1w=BtYy168Q;mLmz32ks7H_zSL0*_w@3VF@;f3FWDEw1?Y|Nj4K
z8Xz>Ja?+nxfOav!(lf$~6a1qM>ZYKU{w*ARf>Pjs^IXH30DgE@#oER@cRE`Z&aNza
z(D6BUJCFjIc38yw<(EI)8{QpBA}UW_nidX{;SAHCm=VM=(S1`e2wWO3%4=#{DD$<(
zQ{PA+B?x@2{>VCd$;q`-@;ofcxL%agAl?91K&ZdG<$(i$o7~yBJAAd}rg>#)r3lN-
zT+=)K4oBCZqL`$;yTGGCCH<@ra?piW=she5J8~~XsQ@Gx11v;`R*I1(ETq+!M0G!&
zjQp2}Qz)97znl;$VI(@Qd}{h?w3@61lfBH*to_qKY5o<}+ZBK>TRQoel}zQ{i|~(L
zJe4vU)lY<u;dk-vhF-;X9EwsGLxIi0lymF4y0G0SX3%M<sH={?1!rA6ZZc4@$5$t$
zM;UDx`>Tel`2;{_TSa?Lqb+)bD+SCan&OzA+-y6;&Bzk!a)m=F<)q8xP`4Jw@L@RC
z^X4ju@eBM-*Xp4hb8)B$PY)kHVZT=Y-g(Y0Wa)q~yF!?bd3-@iW0IWXLr94FEGYWR
zK-@0vt6X%%B<uD!+2fDU$Ml4tss}G*_MLI!e3Dt?n}gl`B29%l-B5;--n3n`<xdl=
zI$l4^e%ufHKW6Dujz$|>*4NrM{Z^s8Ldu~)P<9|>nMGj{s2Y|(WQV48T=1NVSxCcb
zagyJiJEDtJrb!*@$;ea<x)T!GOaSabzIz?IT{7NrVfYgxy}m!%A2|A>HXrJ~cDpd@
zNfp1&Or{Xj0mPVUtd=yVyK^UOF?=S0Ce(VO9pXKzxA6jYD<fbfydwg%uf0=r7gAn@
z=TZ}bBe!f?OgsW65#Dqvt)71zte1(UIZ)hfyd!*pz#hiFbTcVfDIWa$fB*k}eixnu
zut7R2MDW5Es4r^R6@-kqUI1Z<g-5hcr`7pN;37Mi?fr<E+|0cYo~T(P&j<di7Y}~l
z|En_0A^7a~qrm6_7am(*8J!$aZGTrBZ7u<U+UND3*L2;1Jd!(xf+<IWcj&Ysu;qLL
z;jjG>g~IBpiAKzrxt_&%TGq2DyR)}9Nwt+Rd+aeaMq_Tp9yJ8fPOy6Wl5&~p@MMu4
zH8fe)Wp#m&o^qvh4k#6<&MuMl`|8D$Ab})*c;~Nhjty-N-yf8VT6xOV!C%u)|NbCf
zen}&KEI6@;AaZjRu8Pt6pbST&IzS}C4CE1ZICe-GO{!Tl3X~OCQ1v0R!Tkr@29}v5
zXe;m?wUYCn90~j$6f9KCXBB<qN9?OOMPzwgjM8KA2Q;K0&*V^}I1E7x!|m}E`#MlZ
zi!4UZp1(YP_U%d7zO!&x`&xno%1B1bHN~*`q>e;8RQP<at(<uKUX}s&MZcPe7D>Uf
ztWs=nHjmaW6eN$!^8V+)01LYOje(va#p5jzx~=u12rO6ymgA6-wy>gu^#X{C#h&U}
z@}`=gzN5MoRZMDUMs^z9&MsFXoP{Zdze@H8s#lK7?6(qjvl#u?zI{|*wLIi-vlD$G
zN)&!9Skx8K)S9`5m5K0TYMRiH9>~XD#|sD<9;7`>01rE2J&!Z(4PiiovWs=VcyKO^
z20pxf@(rm@7G&j-cf1{_?K}8#+MJ25H5oCG7jJptoq+6L-vuFGok;7F(V%$3Qa-ZT
zj{dy7)@eoejuks68>tKMP`lI#;uNhcHy*Yi&gGck32+6>?-W~30ndpjr?+pwwsqZ6
z`VAAE+9Odt4Ou`-LLqHcDRmaqOB^d<pIJ>B$R-#($nDp=H!Xr7{KPk7t658*lO}Km
zz=CRH_M4<^piPb$&eD20=fmgcc=~l!EfVWY)Q7pi9E<IvG|`hK08jAh^-PRtuN4a{
z>*uPg>li~s4Nu2RJ&#HNA{@BTK`KOM6<BgmUPlJ2td%Q920Y4Ykp_`tW%Js>JIG;%
z7_{}ySv^PSDP@FvQs&2Z3<d6WBzz{TTa`Hk6WZTpn0@k$;lGP9GH$GpE*9_KZWWgW
zL?c?JVIu@V!LuoUN_+b7UDxw*4FADO+S7L*qLgyK`0Gwl92{)U=%%Hkir{^&N<mo{
zlvC-1CgTPEyQos=KHru?4bTtsipglX=B#e8K~UyX&j6g*(&ahG3ms8B94+Fw@R<bL
zX)tXr_HN6EF|2*NXTFI2->`Cx6#iGK5d|FxYcIb4&Cd6+;{KI_P%IEE;*B`98nH<6
zicZrz$T2>9Fid~TvHvXJOD%F)bSqMo{EwwX1iOtM6kj|UIcY-`<cef=_*R);i1ChO
zv#YuEz$;4jSvC+<rw^-_y2<gaFQ8Myo;kdcn)cT1dXtd$y+=xZqV#y2Z#{%~VV%FL
z<uAA(<j}pSzv2cQo$h7+#y;<Z_er#UzC==ZHr}E?^ELHs^ELR5&j(5SMk*iSK)|Pu
z*+*u@ndnbK(qRxU-bzPveWQ)I_Im8J9(0CRnbI-T?;h<!FWVK#ybHg^E~g}#M;q>d
zTa;zwC|lQ`Q>}jgHxl)RQ>R=|2AI<e1Hs)nq`NbWg+B`MeOgzN#0N^s)^=rkK8RWk
zSi?k94})cXDN|dJS70JGS%WQB$cM1a^ib^u9>Kv5$vUlk^ENg4+dcl2a#;DL4u1&s
z%HOR<<kH_Tjm}*{Ise?bFVIWpr-X7kS2{$r<*LwA_d-e^;p?z&w~N2wAJeIRr4m7S
z@<j#f`?orP4)i;@D{g%EGm>r0E`7fvQmH-<XAdhqz!Dcf`Qi&(<$Yax2<R)iZXYj~
zVQWT@-!3GaRc0YDK7Y}KE&J(T<A~pn$nd}4Nw_|T<t;Dy;c_>-Fr+(T7xd4#n07%a
zfS&`o(Um_ZI?nB$4avD=_dHVRgmL#1;X^<wZ@@M#7l<B;`^r98)kCciM`GfgI}hc?
zpa>cqBo2vW$%@<zyv$PQJg>nZCQ_w2F}uuJBW>r(dCk<FM6GMr=jZiX_geL@W__J;
z;H(>74E1xRo{tB=7SD&5I4!KLg{Y7i-VjBu1;Hc9dj0%vA5W{aLhH1Zno&B7i5=E9
zqF|o!Ez?>WAa&3?9c76!YO|@5svH)fZPtk81jA#+1Pk^kaTj+uX7gIZyijZoqM1CE
zK!){D+4MQ0QIeu!B(ll<x(9a-kiO~$X|8L>?yH)?97H%0N^kZnOa5#9rksM0N~1>l
z1;zXLjhp)C>@WzXxrWp5(CVF;){r=9tW)mj!<;l-56wuSJ<8Qahg|AMvAZ(2UNraI
z3(@Q7x$TGfGUzj$66!1Qe1%n9X%Cu>upvBXB8+035GzA9aXGtTgRR}qhO<8L(lZ#)
z4IA|GrO9?)AnJm?C4D}NJ*f+iN;Je@IaQzXh6`0%n5qp1mW$7jgUe;%rWT{qqyGO{
z_WyFX|LguA|N5Z!`Q7hDZ4@>wPAowr%@S3t(W7)2kr$}P%i2nM8ASB8b#7xnGjmzk
z$k9|dt+FZPkpsbcy*uPRL%S!*;?eQ?yrFOJ+_&bLNkazB01^N-wN{f1ori%$KN;h7
zY!4^n=s&byr$AZ3)s!@&Yo*Pa;pHiqu(fw%p5y|G8`H832V3%ubU}e6>S=wNf8CS(
zV_-KRyLO{3C4QYxz+5EpNn%in8&>sG`64c4%q3|p3Q8bU?jUiBL<39LqPO7*Oq%c!
zl1x^^LPHbVCyb^I*esb^545=k$Wi*b^J()x-X_?>Y59W<olHra1pp<g3IkPdETUX8
zn(xzeM?rX@td=yF=(deuW8nH?&c22mx1J$XT^V>18%7cO;5>&l|CzPnt`vhCxC%Hi
z(#g+o1Cy=dEduqc2uxzsLku)Yi(8M8#m06=&yOX+HE=C3c};bE$eqv`Map%2T+}wS
zwy|CMm7b1rqtNEKS|U@}*FA2d;yt#-J2%g}`Qm3utczP1GsmePZfx3SPZFEA9vqoN
z(qb~5+KG22L3g^_k}PQ+fJqbHF6BRg6DO^{zOp!>q3=`K>q#UJzwg@JyF|i=^&ei?
zOo<w_%jHM)z<mrX0JO$OF#OA=^C>;`9AdlW>1<QHH`t;H>WH8|V_A2}`}AyCBRHZ=
zPSUP5wq7>eUW7p#?0XAG$>4TZV%}ksEF)P~LqFD?VxH))?s{SV-e;O^+DdiPXnhd)
z%CbIa;lDMbZ#bmeVR-M}=%ZPHmAoWS%isdDS=g$eBnlt6iJts~@T8{agS`6vr-Qe>
z=WJN7&6~a{Ht6}g9uK~zdpJ5xdp_xCuyLpzjElyC0-Gme5|7P@%RVXsvl{$QcsRJM
zTaLyr{AA>(LC2G*Mr@NaoHxUET8>};M;;52R~u)8-}(XK1Gl|Tc;KG@SkZwQYzPkg
zm}#0HazG?Kjt}2_O4=kd#ui8lPB5y0?`<fRA0<fU<(v8<LCzf+GSVoXN1cbB#$c?=
z`I30mk8x^#a{4g4!A_0?K(}y}YE+NkJ0!UcF6#4-Idr3PwC%k8>KC8gO@xuad&<!(
z|G{VK@bGX|FNzZ$n?^8I4~pl=GUF{fJEu2Z%Y&bvbBTs}W3ZL>rQjH-6vXVUSC!E#
zwfNFc7@nynNtN67xyx<Zd)2&Cs_IJ2>^fCjt?Rk7jZNDoVIT9&%l|W}q1!$$a+dIF
z^%wp?p({P&HiYh~SrljG@_#8|d$T6`xhbD=<d0=jRF%K`4`u-FjtDzP3r(`j*Gw|{
zMCXJJ#a=l+RQise#W#dAI&W50IEtHBu@qlctFjkC!nOJfzWI~bRZcp4oxZcWCW1yF
zv6+49j75m!yp*g-f)l0)EdD(px@gh2$dl`zH|&Dk*KqLZvYHCyda%cvWzx~hdkTCu
zH1l~}hc&9_!x()^%f+OB9=rgvX5ODR7xlQ0Z|~bH`ud7KJSqLKh<%oB_jU1@d?L3*
zUyk>v1}V7*4ZgldMDAofyMBY5r^WhgT91ox{dIYvbfLqsJ(N|$+1RJCa9p3!l=$T*
zuYpdbKVQuHlKZ#3?)TGQZFWc!`KGx-K2T3<ilt7no(H;o11CG-O)JUK^VrE0ndNbZ
zt#hN&=1T$G-g;{<g7;X$iUcXoQ=oqhLr&|e&78%v3JE23J7avI4ir@`%>%3jhfm7c
z*`#EN0vyyHi)@jND0@sC6{LlWzf`*WkPkmO);j*vs>L0Xm~5>-1YKrzxjqAs?!Km*
zXt%LIHb&*<cGA}&jEI7v!qVNb8uqYnXMzR>DF3WW#k090P_U<_1}rUh>t`!WUy7uI
zNJN@h-l8BpFuD>)A7ZqUIVw`_+S{qn3?>|wVew0cWXkRs6{By~{%BK#3c8B<8Uk$p
zaqkxYz`r#kDP9b;XD}179NE{w%SK1>i3EdR_W?QYo)$bU&)WEx(Oh3;&cWHVIXgh=
zhu?D$hu%Mo;Md^pPO(55?ia>A7(_WN(85)3kTA6_&Ebv!{Pc_4ckbMlpr|g?VR8D$
zPEsmzz@XifXhSEPiM&hux4og$w_#b45+(gf3A*z@<DE_s46!6ENeHumkLI(ql9XY^
z5+Xnx_5Rf2LxG1*y3a^U>0b@y*P;Fjw&d#@nUW7AclY(~{aBkH5#RNz!URx5B=g>A
zrK@Lb3-`$BJ`sN;&L5*EuN_itVoLz#pzvJG>%TY(h!fDL6X8I@vy)xa8)AbO=XvMs
z0hoFDjSWduNV7(lRZ!fZJznqZ9C?yo^0P*~w<#;e@y`ie9bSC;b-ns#efC36+J2@X
zO~cKNfkJ<pW|R%l88dCF33cd(OUx<^f_N(77)wz^&)a705dv8n>pk6CDLnv8RL4ic
zXEq@<V^&o;i?#4XQWoq9I)4)S%O8#+grpm8zNj{}pZgDnVVjzHE!1hZ4_O?a^@d~j
zZ3DcxDyOeo|I}`a<HfSM2w&WK58Tp{#AA#Q1$sf_tz)+)JT_}QIk<R){+(Knldv{R
zuq`IZb%~f{_2v?DWozI)=H{P<U;ExL+M2rFW#87#jAAx|B|cR8$c^nS(Q3+&Uin=M
zI!LU*%Tgs|g`w%n=Sg<OojYiA*=MQ7<jx(f=+2o9J5(}dSj;62;6O;i9K;6%*)V6>
zBhgZ&Q?fP0P`*2{ke$y_8f;RlO7)>I^;u6$H}*Z&(0468(zx^yPad#TSC@_S|ER@w
z&3Fq&<5!WV$vCEK?1hn$Xvie)bIe1o%l1nDpD@}w);`vTab*yWUK3hM8Em4>rB=h-
za7Ao>=Cc474XU-Ydeyiw|4u82rd3ewxz<4@nuggbl}lGs(=!Aaj5-FPy>OMeDdEYs
znN?7sT)UG(S6dCiUZQ&sGD~L~mwK!T^P1+(cgRYG;aR<#sB``f9bL}V*9z#77Ir4*
ztD51VR)BZAH`;MyCaSO=7+l%`O29FaVF$nwSh^%gkrbufnjBIY!f(TSSG0-C$-x!s
z4r0r1eU6JcpVVR7LF^=AB?g_Lm25+Q?1vGlMr!?~WVVB1W0|0I4s9mzM|iRV=oYLR
z|A{S=&noqZN&`=0ZCDI{GEP(GCLAqDp_9Oek-_kM*(B@`8{q%Wgp0ac(0usKL8}ih
z?BP6G<JRO=btdSk=P)KC@kn89TLFz|mDro&sEK$}A}mDtVeT<xLX0BkKgyhBCo!?L
z=RVi1yBz5UYOhm?6h^lL!-?ZmWb#1|*`P?4#(D_S{ASKoGmY}j7b_U1VH!*(3ygZ%
zFg;sK!kJ^@pIXh|)XQeh{4py^0UB-J^Ouq-@41NDPf{OPEPa)2UmV|tX*;DCr7c`c
zl%l-i68djJtc>&7_zb{kxn$xSky*ZHMG2;<Yl_*YI9~*BvUnf041W}}Jqw2tf?rC&
zn0dsWCGDb_r&XS0^>ypjs1_xm*DeluyQLC2D2|HfFN(TTBj-=28pgxpgNKg>#lvLI
zq9nsrEy-VsBqt-zs^x{I8jrJQ&J|$A3{j`q)B&@DGF!^bnI(q>^;Ilft5HQQNnm*4
zK`I!L1T_0m(!B^$#~bi4;Y4*hrn=Qk{#yt~iOO|N3+3?eu%4ec2~th*m8g`R6qN8!
z!2n@HXL#+BM^1ow^9?a?Qdb<SW}{!;4;lq=%9P{>l;Enyp!9&6BjzwgI*X0mX)uf-
zUl-TW2)j;s5o8~^tN^pU_Py#A6k+ge^%7lHTwR9gR%Ruh+<#(Y!X2V+B|X#K58={Z
z=!R~7=Xx#)@!T8MV=S7LAWewV${tOcgn1Z+N=!Tgo2Mr~I94khZ=X*xilrGZl)Mzm
zH1o{1K4Hi%77p*+(a3<}DPUUk;cHuU{ZyKiSjkbcltFkj_9arzJ-V9p@n=8mSYO{e
zk}$y|c{|32xaT&u{spnl`gLXi^nWKwzwbJlx@`7taj~QmFoy=t3@}#xW1qjkbl%Ne
z%r|!|-0~f733HVt0*WaZ1NGRS35(&H!bTHr6u(?`e%$29`{Bdnqkt58=gtX8=nP&O
zeF%f49Ij&oT*GL)f&AgPYy`cp%LIA2pNh&~UTZcwlN7i7nD>j1hE=>ik7>F$avAoj
zHuD>3$*KtiOF6u<oL8`ow^*!oi`leN$JMe~5F%9|$2UzqNp$th0544&GjB4+n@kdO
zEc?WB&m9*VQDbEEIbKzmamHG!`K8Ek<m2}lujovDMm#-G!K^|$<`3fBm{huy??m|P
z^6;+-W|{Q&j%k>Z%i9+B`%oIBphmEfuB`;nG~_+;&Gf+N!guzx&tsuxPj>Tu5DUcj
z=eonO`tZr|hNt1da6GNM7Irv$VxuZxDE#D*4y-Xsg^Kyp_aJQ4*{yP8PTyu~q%b~v
z&PIkwr1ngd190(Wq8G_TScN1>&USqDlmT#mRmJID3OXj$Ys98ncJE_~EBV$yT;baH
zv}E3KHBO975g_&!X|q-l+tfM-+Q%jt?K+E{9aloc``8AO17h}6J#kkZLDrYIZ52wn
z7*bw)BeyiKdG!7DMDpR`KqY;FJypM@JG#VP5a=uC>)ly)J9Pb9)~K4;p%Ui)GO)^^
zaV@J07^c%}?RFP+Z&--T&JB`D<&rO_I6V2pd0-|qEKkQVLjEc4TBn`uRI>x2<dxFz
zwBkfR8sEtKaU={XF<0ybelai(BwlclDZF`xv^+5A*`y^#Yg9{4uXEcMOjw?5giX>w
zRD%8#m1SX;YJ5>!3RL=Rf$qK6(~b|lRToFQ60eH-%tWaaq%k*PUmdevAFeI+?P+cc
zoo@r=4VlmV@ms2A(dQoi-&rsc5ANT+|Db>GUjP2xzU<?H{AcLf3DDI+c-^A7z2U*X
zy`TD<)qym=ma?T!4#)dALmOxN=wvw?zq{B_i3$^x1|VD=#dyp88@^GA9p_~Qn!#Y+
z=@o44dWMSL1i;t&%Sb~O^YI-$KQ5l&U0(D_3JDYwt^_WDd1!y<tPnxaprn^jxkQ+t
z)kB)1twNM;tO5ykQ))h6HXm;FY!0dpDA;xGOR>Bfro*X@Pc-*f^u4j>z1S8YKg7f>
zo+vN}U?|A-R=O;2SBc_<T4I#$w$o;%*+-r%0TOGj1~*WM0*i%{dogX!T#{&)9WtBc
zdd^J_MDV7WO7R1*3SWm=J5+Tm3dPg%ZBk?6)6QC1B(su9DaQ8p2d(kN_5nOiYwNRF
zE1<a8(yqJx)CJbsz&MGd^)~=XR>|MJ?u7N|wN~nZ<`DX6q6Mtpw;;8ziKf*Gv_eW(
zVP{lpj8Nk60BObfAR~itvxpEOfTaIvDHSO*ka?6K?zW6EL4>ckOrxLreWU0~q$70A
z2(s5-2E$u&0cDiYPs4@w6z1cwIUj~U{)n2hf5F+Y&>%r?OsX-6^&(Ivj~W^I=fj{_
zLpBc=XoZ3NrSmnI-w+g>3gS5PbRm9UT@SW1Z)~V0Ed7jGx2*$Qc283*(c0NLedqP<
zI5is#UuL|G*_;};**=nI19AXiNY9bKxBEiyA$P64I<oOLB*CsaQYa|Ol!SZi>9&<N
zoAW$<PLFK4%8me4)rD6lIXXy(gekK(Ce}&w74dx2+8IRpjavl<x3iOHR67&5>}D>W
z7U+EBN|o<jE6wZwJFFDmkm4NWiP6bg;TJ5`mXEVBcHgy(TeN~7RoYxNU0GA?KHXrE
zc+g3@*nJKhiDW7Flq2sCcHbw>Ee}=dDveCc9_b{#_h@yMXUVbZXA8M|!|t5qtM=9A
zPQ8=1-??jB#@@}f)0JR~l*{quCu^oF3I59%TSn!7lf<qVZBMEV8FbIeRL2GsW2tpP
zmy~P}9eQx1OXMTm*e{z{&QOkp0FxjF!qlhw1!tw0dk;R>uN{V85_yv5nFK?Tu_g%t
zf8x^WAVV8u%eY@xE4Jibv4~VEy4jK(Bww0_BNe*ddv?4m+ij~C^&F+~clU`H5GhHT
zvlDLAvZshQ0XM~Tr7f-Cg|SFrurh<zg2;2LjT7``VX|D``*+!~DV5abj0psT1Qu=S
z?K*Pm*INOq-+Q|7Q-y!37m8~@Pt0<y0MAU-#Iz>tn^Dg#Ux%DWqS|9u)Ak<Ry(@{i
zh-{c18MuDUMeS^ns8kN{7khn3Upeg*Cu=LXv#0-Z^E%wPm*KG|^*9)y)W<)tn}wtr
zhspG(@@zjm+xJ!n`&>oEJ(yQle9L#+EB4=8bMI#=ue#qCqzMfDZOX#u(V}am@>>!G
z((b5fL3`{7w8yj)M%=x=+?`0LsgcMz|5`ia48?9t7h4|R&*yg9Z9Ycp;oU>s;ywKt
zs>a8Cp$qP%R3Vhf?9Z)%Jv$_&U)XIE(x(Y6@Jlk3G}^7+F5s)&Q=b1z6ehJyl)=Kt
zRd&a*q{`hROi0j6Fc@#S-rY?2{?*VT%0p8slW*i_^_#h%;rC^feccHScVWFeDs5v}
z8;tmJIesZqOOs7hyKm$7w_0%qUqJShgJ-E--B}~93ClpZC<C2Cb2SIm89pUKlCwah
zIhU1nwRlaOwx*C>FwSDE&38$F9VdEvWsM*<ipLvoP=DU^3a@EB^ZoSX>C5LIyEpA@
zwIIR869M6SQ7$KJov1qK4U}LzH6YIVCU>KYFwT(Y?C(odT^dRws$r5RnqkHCjzzFs
z1M{6asc^fP1+6yZO*E&z5`AuEf{}4ho2wYL;p|>9G8Gsbw6#e(=2<zp&}<nUiWe=J
zER6WzE{RD=Coq>K+22_?pIb|#?GFkO4z{Qqbi~f9X)BI#f_=}mJM(G8-S~83k`uQ=
z)6-(S_0`2*`MT7jQ%)vG?%a1iyuk%Nc@_tfe8*lz^way$_|y~BICHX&uEfCWN59X$
zQP_9imRA<yT;M^l6#DJ(V2HxMeOt6C#)r+KqX-Ud5LNr%`3C6wnF9u<4gZas6Byo%
zyZJ$$f4oo@zoR^;&9^oc%d9olIIhLbGE~JT7xg=D?n)-aP2T!=zH(CW&Q-g;ZHU|Z
z+mv_A`PFeEfK<g4c{A?ZoU`yW7wOe;5~b4KP~wvO(GJB79m#S^MH*OtUGHxp#x_g|
zedN02wXU}j7Vb9l{||LrpViZPb&Y~boiuAQ{F$SUe0Wn!EvJNQmT3({yM{LafmhKY
ze=!6gmQ)@liJ|G?_b0TAQuU@;v>*Dk+`UiOtyUn#x^B&}esfPJYphdpl<;Df*wxeO
zqEgIbYbR~FU~USEt0txfY8Lh<+Jqb}5<wj8U2i(J@~M`|mknhIE?cXJvN-wICow_X
zGQTZOWQ^W#2znHsOA<CT2Pt-qt5@n^Egc$oaN``+nQbq$h@PLhMX*OuACM)nmoUj%
zLLYh=5XEI4;f?Jb;e&9fBYu>~_%@vg`?P~(a|`0^x`<@gCT-r<Dadqr))MhI+Lfn7
zdwa>u;$S>)+0*zDR<(3Myj*G=qPm|xT902(kt6ltL+BIxy&W;jEe*CU&(q}SNcx(E
z;;RKm0#uHsHFDv?Ck>QD^EkmmYHn*%mr@osX?#Ikg<iUjS_|Nq6}!excGcmzl^Qn4
z#}b&378TfXEK*$77ndGloGhCKnodh><4T%8YBQ@<xmvp-d=r(%SVpr@0cm5(F;R#P
zR$?{lHc5rJX-L6H2AV&JlX-opU+6Zp(lZP_*MZn8oqb?Dw%NlVc*<#W5o_jz%8Mrz
z<nWlyV8WuF$brUzEtg9K_(eY4Fv(OPZL**<sr(t<6UqACL5h2~_kZ}??tkdp?&EDQ
z-?6KTHaTHV^hHzrq<CoSBv9sRGENn{J3e^$Lq0<btKah(dY64eI%jQIbGBZ2tWN1h
zIER!c$QMYT3z9wikZM!j>*9Hrv5G*nqbo-x*f)3xo}g8;*65^9#cBz9c!i(&s|YMh
za0;A}S+y!Dc4UIWKE4A1UlI@&O5|m&uKRXe%~|B&aDjFxZazz~%M2Wl4_`b!dil6`
zboBD*%cGOWo{r=X`o~Lq68UuRc7=A%Y;?WqNQhFKrVA5=SI+~9v5~<RcA0o{!c=Tp
z!&fh!40gP)bkZcIW#beryr9_$ZzmFKyX1t6BTE%thJ9~lf%inWBU&K@Mn6fKPsi*t
ziNUx&Ip_|)xEMz4KfGzUxSFUgYm`A*A$&UQroGNdW01F1ipdS<)yg`lKrT(M#q^M>
z>z$n&J~T|<3Vu|ONynJH&Mg)cgq6He@j&<2DFogHJ=gL<a2=l^`j5d&q^(_N>19<h
z(uP{awi)^Yj0~mOOB%p;+c2+cF2+{^Iqa*Z9lEMHTOU`;PS3UQ`RzKxA*FC#)Qbw)
zIiDD9pvsYqajSUz@`;2rIl3UHGXYouhrUGZuPAtvbOQfeoa9xec7f&5)18-{(od~M
zkvj6uSly!8dC(D0pW7^{@&DpMoOa^AJtQl7^kqzQbDJzs=xO+?T82Ye|D}4zD7WHm
z+M|w%a@NL(YT1*(?ZouBH++X4rls0se9%aj-5>@u%u|N^B#q(zP~(4zOB&Nd(}JLV
z@|dkIwd|k;&gx7G4hq)4fp66_V9*4cC1~g4X1bou`$)T;+Bkwr&Z>!4Ge?8{NZ|)f
z>b&->=0!=|3~$ZCIL7qa6vKWb4{U9{U}g)d4h51F5sN^${n&NAIC+5hURBOm2&Q|b
z<^!t+l^yjwmU|Ws#O16+@~4Ukqm0|FHcjp`66NJvePwsR0Vii+3<zhdS%U4Xq@)dW
z>YML<f!g;q1{z5IbWqG71?B?T%u}=XSo(hSikC)wz2XUalh`@ZT(n2zk4SnOUt`@-
zXt}sda6abY+`bM|o7Cl?Sza9AuLFB(Sjtnw3p}-7>^(aAdLKHh#3+~?$_O?BRM2ol
z%J&R#tIfcCwIFJ}B8(Lk&%n~zG)s5@h%qIH^JctmBPL3h4qzZ2^0k8bWGi8<aX_U;
zKkRDZv;kEDMDGB#=Y+5_Ogr@|#2sXXvWEv)Nz&n2#4qa+#6_z8;Jpmb!a4|Zx+<3w
zXF=Nh@v&2C90rvZLbQq`<8x=}q56|gKOLB2-zp--Iz!SGsZ)=KS!O8ORS@#!^-2(<
z$(O1b@D=vVs<ER;goX6<1WHzLa7}m?OAk%l0v+QsW9Eb4GO;fsGCMV?$K)Y-jTT-J
zPkv2d=QWl+6MfTiez6AGoZ;4XU9Xbt;EYAf#J;pvsT%Lm<yYiyfvzV*x^@`w_XQ#M
zeTIRCi9{ic0qVVUUBmb0aS;%nq>gq74t}s_{*#xk3!<g;@Y!IAmxeGC#|q!uFE8dn
z5v|9GmZXRU$a!G^NNU>WDYT;=SlbAuB`s778waYCVDbma%3`maE-uUcLuQ+gr_eZS
z)SpuVX_h{Pw{n&AbXwX^EhPg|*^O$6A0*;>h7vN9EO<1qQ~}NyX)c$0?AI_^Q?{Z*
ze61|)Pfe}i!AW%%v?<R#uiFg>3i-fug}ROs!8M5lUi&{*e<+Yk|6v0EMp5qq9#rzx
zhsZlnhp4O5{$jmcK)k=H(fKLZGGA*!#Gv>R=ljZxHX@F~cn-{Tl^4^W!m<hW%(QN2
zop(QwmrH#~h1|tk^6!3lV86!@Rww-~AK@3n?HQCktyz%{H|rKed>~Z}rMfUrHOa&n
zN}ScNhFHF#q`PBx_0B%nejn7)cleHev+T>O_LG9Ca7$nv-&Qphk!8gOdu^<-{*6@^
z8|PrDi9}ZFHo?-*nN$RL6|4u1T=F1{QS}0I79|y#YAtE~Z-PvZRa)$^gIqT~wvA@@
z%X!h_WU|mib$|xYk%y+UC7_D%8>A26dnA%l7JFVQ8<+%#+PAUfwR1_}79a&$u8O;1
z9irDOvMUq(aKYj&7C$BQDB&#(0zc?!EuCoe=?8@gE&y$~0aiBU{iquoJ5-!^dbUN-
z&zMg8z@j8hg}$y1|F>*k4~nPwZiP=Rr}RCq*v$>54EuNNB&BdN(ZE9I#j__z&r?#U
z<`-ZtX|9u&>{(g(sqm?&K7w~l&Zsz|8Qa`jib4h>FvNbcVVu5d4qa1E-`TTX(C6^v
zM5nyd7qsgN?o>lDk$5AqI}FtbNdkdePCSArB18)>O{z&s9%6_brYwkA4azSm&|YX5
zvMfd?kDok#__BET?A5m~_wIxbJbCqWPq^OjUikCq4`17#_xFphUOanR%&x_&UVQ!H
z*{kQnFaHhMQtCJv{^IW4r$f~Gv6XG0fsx%livHB8C}!d7hW9`F`fP|5)x{GpknF+M
znck5}aL8d<{L8cBZ}pF};@OKwk6#ozAr*cjy%QaM*>q<3fKyyrIgZ|NHY$d{{M;_2
z3ZqZEJ6Q{RNOVIq>N6=B4>FnsnJ=F|?0*yJddco<u0DPY6j#(a4}#WQNtLvV$$exY
z(TNhqzkm1sFWhGDA**Uh>+*TI4F6swPR1n@qki4zEhHvl*ifXD#l5?Ci?6?Q=COxO
z?W4cgIZy?-Ud%%H|J;x0&1jdwAHsvWmy4>T1GrSfQc@hzHS??zZLiEs&XaH!UbFuv
zS!=m6jWRH6u;ZhND!UMx5*xQ(IP>D@yOSaV`mh6ZAz%?mWVrv?%d>>m(y58_GVV(m
zq*FO7{}ME5>`gVkf8cm`gy=lD40ewm`GfsI@ojTeN&*U7)i&^cG2&Tzxzz-?o$N?B
zDPm6(B*E6GRAv94#toNJ#X-zj!+u~H<`ZpHqD@2XOTi4o%AtpSguu;#UEnb|3*=FW
zp#e2lyxLk>thpdsX=p7|QiGK0TdaP~<AP^RJ*}1tz#ysk<Oa%z%*sDCCPX1PEKl6K
zi*oS(6%u9PyNEO+2Q{)xgPqzFZoDrcaN0!FKie#K^T9AVLWz=$HEc5DV;)ovpbAZV
zgQ|hz*{%$kP>On%@&z9LLTy4=pf`ET8Er))cs=ShKVOy(lCxtexmDTL((_kC4QiAu
zqoT2St6GiV2LL1ODUuQmJ&g)<g&fmTBx(_3xLw%D$9cYf$CcQ|RxXO^3YSP}%p&no
zKs8CxiHH+svACpf9srBswlyGhRd*QuZj%-}B)yI{`HNwCd`vrCuXfI=aVc)*rj4-J
zB~ky><Z#P*Gv0tnzpfTM8AROD(5R+@i}KVHqG--6OnJpaFF?7L`(q7_k|iPs3a_)u
zl_d*5+0Q%(T2t!~3e}>qj)x?PzH7K%>+C8~JH_iDThx!S3PQrrgBR?_#Rplmus-#~
zD`rPvA3`pwor)zzRjzs~b<07vNY`q}_cOF>=qEW5)+ph4F1n=Zg<)JS5fq@l`ZfIP
zww`@Z%?4Tf%Fr?T@sOr5!MclSs!N;zBf#gQOio~%yibPL1Y?e2CRU+gw3|%3J!l_j
zR(j&2X9}a}ef3He_WbR(HXC*Q(c>#w^3SrvUF@Aa*k`~sOl$KY1X=ypVf!G4vlw69
z`V4}qtoefU$y$9m;=A}<?7R_0*(DI5I2osVQwdO6Osc4p`n&`!z|A5$WY^wbj^(S7
zH_?Mxwh9v;^vCvr?CGedZ4&W2_>@CEFwH^IP)npER`drc#va<HNm{@e4y>?XLj@!a
zOsg%3aPp~xofEbaQY$JNbO|Q30+Sj>J^EDplnroNbf#0QPPq5$;WC`=p@O#zm*AAk
zyk?+%u#bU81$#;=9*%yVCN5FX$VA=Ks8d{&NW>I?Z`;q(yQVfVg+sSgBm7((accxd
z>+2JaOQ0eAE63UcTV{4G=cs@L8M{%t00IFudc{#oTR5rrMqgs!)+oSGDbTPLAua_7
z`cG{$-}&p#Kkc>;b`OhP1bz-y%>kyfYb|AeavJ4Q22c^ssj-lxluXXWk^8n{ttLB-
z>Glb&S@uD9rKXj_TMAvJtEqKiir{Ih$*r?X?#-^my0PgWdLm6w%lHIav#z*=o<a}?
z?inJ$On`4^B{KF(144!?YU=J=91bt{J^4eCC<f$y(lZ*Oku~4Ci{AjF-yMpKq>DWw
zl%U7pll^#(b{a#Z(XZGJl-qTd9a}0t4ecjqa-Cb9!^ttAMJ*KtR@JRtHkizr=30fZ
z##4qrruEqpj(^jr1LLSgCx`yzp&b5l@?fyT&?H+kgios{F}7FEQ+Upd-vnaT6^&^L
zCl7kL{A@4lg_^gQ)pVg}jR0^7NKZHNqqwf)R`mIC6O`tfh%sNm*98ZUcllf$zDM`e
zPucVl%lU9vWQ%E=L8Q5sIs8;1o}lQq*&<@qgM&^ydP4VHPFztx^tejh>h$(mH>;wH
zYb4P13F_UaBd5PZ&B#3cY38$kHHbMZ$=mCXdS&~d&xiI2ktlK|BRpr!7Sa<LhLl$B
z+Pq1#aC%vknI)zS`lbe8j#)5)3&i&xLqER`tZN>OI6=6wJ=l*q4<p&RkslxTh|{ue
z*Gqzzn2%S|xTFCvi2{>PdJch4T!KHf680ZZEVO?{dw}An`1*Uro-u8f_`?50Hwv6t
ze%M$Qg9S_Z7&A{KO(ub6*vY+CSo5JiwI^@f{|#UCY-x$U^XTbkZURF>8=Bv?fg#}b
zZnqB(4-O6{)vRGU$^gIK*0<zE4B7>#R3A>Mo}l->XWYKg*Z6~xL;HKfUH01VgtcXw
zPbuyx(MBR{Yqq3FvV5@f@Y(Z!EB1DZqT{Q)c}aKni<i%ebR{GrKUn<vcCq)>vlmZ~
zUKY3YAxx68Km4BsNpgo>9(H$k2O<ymv;~CxkHUPoUe;guzj_++=dbaf{@DJG{9pbD
z2WK#z2DY;&zpKJ`@<4R;K!G*}zGh!0r<is-J4Z&`xy~WJ{dv>rOdtX#7=R}a4i)I)
z2XPNARc#G^M_GWv^U(8k(>bp#IZq{{w_P_>SJC{fz+q)*nQ2?(pz<@<_ml-VZK17s
zZnT1a9IhNe{?I|qq|?nQR*95DPQ?nVZytoqb|=7Z9=F%NS=S3gAJZ%ofnj^To=&~&
zK=|_m_6##WIZ)2KQ6=*r41kGtqJ;~|VI&MD^$s^ssJ&TCTI|oT4TfRAbf^3_QcM#_
z!xm59Y*33!(@lFemUairYT~j=ScPOe<-+MO<>CHf^T;<U4~V!oUTq4kT;RToTPrt7
zt%gCuK|YdAX2U3_<T+O(@cpMqd+3OS9L5iGn|*J8q^u=Tk<$feRFb}_qyoL~ia?rf
z8z^FQ^7v&iW`={oU{stjQ%<_bpLV<p$szcW^dWD*v8F|4lka<C`m&<n7<+a<-C#sn
z^pl#~C^u=4IX_K&n|jVt&t@+wPVL4~$`28bb0e80>qSPcKNSJuVU}F=NDNU`LM<2b
z#?zA#a}R^GP2%h@*{Z4f-NO_(NmtY&7&sNgzDYF!W<?c9d<usH(`xsNqmzQrbZc}?
z+9Hs%PlUYt?wiLi9)}@dh#)Pl_}v%C;(lD*zW3{2f7ZWyFZ@4gvvl<Bqx8Pt#@jyM
zyv=4*eEIn0caI-`TihMo{hZgrKYp3q_~&&QC_C6`zb)>6mMID%bPx1%{BYl_Fu+=o
zhkR)piLf9cMkzy<UTs__3CkguL?OxD*39!!*ftzb&WT4Z=Iw|w=-%6RI&Yh$(ys(~
ztjj2;Bg3SCMmOeXieuU$7J`^2*;L9?Bt3D<De0+Y5#@_SC5{x>TPNM4-x}#-^U03o
zHA}`FksTn-V52eVM?z_<XzQEje1;^LmPdA4BM*#``r7dI#EIR9_(fU+7C;zkGG8tA
zaMuCr3pA7}j*V1Q_BA(4s@$$Se)`lQE}~nrSr6%=lr*b}F?H)hx}Gg`T}3kjI0HX>
ztMhk|s;swsMZ!Nhq`YHCI~CITrT?bn*x`l=X0HBj8tBf>q&jC@X>VWJpAmerExwRa
zgCQOr3Of37ST1T+WY3z(b+~8uzs+|C$Qj$iO9%X_J>}(GR2fa45h+GOfx{W{a4*$_
zcj4|iSe91@@)XUPT?Bc;%Ld5qp9DQRQ>6d8E4S_*7Sn3Jr*BgSU(l62o%m48>mt`b
zXPh5aX7xt(5KN!F%)%5`mEa+yiEHi0Wv;CZCH4oVuk`}!n5<zZO6XGcJi?9>;fr4K
za3VaZ67V#c#p?u<GMsJ8jT_Q)VbclsGZ{gtBfRws{&QGQ@QBo3;!p<mHJszjZ@;{r
z*MWJ)i>6H34?X=C;_l(Rwugr=kDoq1d3p5oIpoi(-PvvfZ~GQ!-a!{eGWnsm6uOBL
z6j=34x=bePFww4wg6$2f`r-m9WdiwMprBFnoPz{!*E0bpzj6JyuWB&(UcNkf_)T%U
zbNx0xeKHLOwpM7pd>oeJ<<XZ<9uq1$oadvHd?jW5C?;V(hv(-avM1Al?jcipkU<ll
zz#FI*bX8ouBbA@B-2A!K*$>aIIR;f+7o_2jUh&Q2BP8nt!BW|lJn~Kx#<gQsEVy~n
z@hGc^A@H@tZAQl6|NZ~|e~M(=`FG^>@v81De-IuYucfme^`sn5@tGk&yS+FqSw$Ex
zDX8Z;)=LJ-?W`B=yj+ACBb~mvk}dHQn>BG32-Ae-nBPU27lXJgC3qJfD(C$mUHhws
z|FNEaK#sU-y&@Kh{AIcDCKQ1M^{oQ|yYE(zNmoH#xoqI!?iZ;~AE`mqi;I(okM3(l
zSB2(AGl6tQrowpHs4uTZ)YsByDNHqsM0y7>nKI4qrh{)_7`MVYW$QF&Ky$R>8Yg9X
zARa5KP6HF08uVTa^LfyEF<rNw2O%CghRr0~P7D>sRDE~1M^?SQIFG8n<0-|`IKC;h
zFikeu+4(Zho^!{lu(z0>xRDOIZ(kH)2x3O4tiF|&cC)#HULyd>^i#v0oYA6SWW;;j
zW!Xr94fbN3wwAgkjo5Kqg*CBb-br^w&1jNHH3+Mtsj6c|0!b>YHWQC-$VwMY*|hks
zVU!k>K&`JNaig2WQ8dD*X6&9`<)sB0&)2N3rJ=XH4?j&QHOZQ%>w6{*POzVY;+bT>
zdBR)s_s@5uXQs?E+QKnWaO7~lrQ3Sm`!Hs}I40h?00PUf9_4BmHNbF?NKqsG7u^Re
z{OiY3%_Vab2YW^v!ik?gjQ0+Wikm>Qlq#nJ`<_*+D-@M#Wyn><JV~touQZi2E*Q!|
zSBo+8g2R6=4}#8I27>>5P_~PG4;pZ0_wL^P`piE*eD7y>1M$q)@E$O4^8T;Gb)-uU
zybpZwr6sKun&4RwFhx3i?(95U16g%BMKaiBpk6R{{MQpB37;0EiDXr>tKqCF+qD=i
zg~(DQyMdzz#)nkh&jxR~G9#(-DeX2tCDV!};<z|(m>R_te6|lNtj%M>l?KIkm4@g0
zi6fUe7j}E>)Ru+^?+xDaHO?M8x^!%z98?atf!j+H&QQm+Ws@~$$x!mQLI^JiNCrP$
ztb+sELnB5nNRJ4FNok-;m)hD)NXXUe;bTGj=+$%jE>3=b{JePb?BVYpKN?vdZizD@
zTL4+E;C5l{AlVoi`TVtYib!Wz?7et?vM;nX$4XB(Aqav#Ne5@leN1begM~k4O`>w-
zPb_z~VTL};ma&V2;+vXLOhz*UGl!~YH#vsX(h;rN_cBHB!IJ&AY#8ah;koplRP!?8
z7ETp|0$VOfA;=(-f(*%brT9?6G)qbjn98OLZ69ShcW)O23=LEv;rem8uvgJFVDHmB
z<=6r~&aCBo{{QU#TXS1kmM)4tCw|2$s@x*j0H{l5Ru(HWt0{?@Vx?{+QmL-Z&HxsP
zMRJt@EEE<Xij`7CJHkE>j^o(jefERx*gK9L;RyT5;m7S)|CIUz=llfE?;B&x%K|`A
z%B;TZ?uzazabd2x=4H$=$MqZd-`Lkddo9Z?T2|O>R8>=Pa<T}i=JOV(3LUM%86NF`
zWGY#SO6EPOxQ6lb0*E1Bjy1I*6pxCx2GZ`N8l!krbP>`>x|l@s5`ISH+(7?gy`3(^
z!XlSZfHRXTZY)U)v`)<>cn877(Ga9&jyQ;-Is=yA6WMi9-Ovju(XKUZzqVIMQPf07
zy*lrFZnrx#P$2(}tI7OalM18)h5G?<W=u{5WxL&WoF0Ws&CiNp-H`^cH&~C&?A(ba
ze@1lINJ|M-w9kP#QbL11!?=7fcdU`QhQi{|C?mV=<IX_Z!mlLpQ0xQcEE{<1Q{OG(
z0Q{nmvep_}Ih0a<Wq`Yagn`&_Tg4eLSc}(`w&{_>CGOONVd?rBg<6>4nTiSImUKgj
zd!rLkP)RH;D9O^?(YqSg7t?BD=01T0MWF9%F_o5+rDDu^wjuDrZUSyl8%}DdG>pJK
zN0{?s4y&w}EAc7P730R3w*(f0PB06DcGfU5AC)h)UqJBmtuhz-QZ+acuwaT@vC$w|
zYKXzvjV<eC5338Pjvb9JDkb!P&a^y}NCLr0c93Z=sQSmiIk|G-_HbA9q^rP0$UPVh
zwP1PDS18i4DgHe>idwa~UWhmLwXzW~9TJyWU`O#pR8enhUZ{;;QWqp_nUNY00jocw
z<`xc@uj>(Nb|GAJwm3n#N8RHvP}Hq0W(b1>Zk$N;7~4)jGi+iZZo_BJ#QyTcmm6xw
z*N<l~F>)G;NU7ynrz(nwUrMH56k0P;Cm-E4*6Du__f+<w_Y})ab#Yat+1nz;bTm1z
zHZ%h1JC>oGF1HW{_tS2=YX~ATuV(qy)g=I9+<V1)U-=P<|7R+p<JHAMQlR8aH2c0H
zuy5b$EA{l5qQ}SEw`q0K3MA3<IM@8%LL}e^#iT+muXqwZ=recv;yYOV2^I3iHyS3A
zZOS8nZ+pT=4yirvM8s}O0&9`uvQE)JnY8b}P-KH5Iw7W#51Ak4eP!BEjvXMw1^U9B
zaj9m;bE$fS#)G>NxHeAS|1(-HF;Xw__p;xsjs`u`!yOsIz6#U_zkk%p9$)f*?v-bF
z<&q&N$A*dT)NQj<4l63P^#Xh`WGn~9Az2gWtgh*UM|pshy1|G9MlDXO(gZTc@YDik
zA5@k}^u(l&*h&`XmN{k=uo;Z<@$oQ!pVZGZswjynzo`52rg-!o;wV>U;#l5)GCiy0
z!%$i;g}vB!vW5woFk_0hYy*`Nl#g#nxY!55&P!2pOjSO6Gb%{oPWTb*c<(Rua|6xV
zpoW2bX$KDmy(=!9ctm}99A7+#;og=vRfCmlWz((TVr-0cS`F)M`$;mF6l_=@#Rlkh
z(1($T0c?Fu5_IhIPEXU{dB4MwC#!r|ot^0++E~)aJb0v-q4T*n*(uVl{`mowlf+88
zr23VUxRYhAQthNyy$4Gv^VW_W2l&7WRu`oupyXMytMmL!X<9Ds(%ptf%@*%fRz<Q1
z$3x2wC6)G=?WJd$5I6!C5NRt^cs!a;BoxIp@73_AhLqR2WdB+z7!Sz4Y7Y+cvsG)~
zcQahK{O%PsP(L<9@AA>dr5sNc0gNebwMu;fB$k68ukErEidQyG#v;ik!d6XKfRSHa
ztv_5_oup906qaPhR#DK@;Ur&4m_R3>*ewz4z#Z3Fei_FlHduwmXG%CwYpDZx-MiUF
z$i*s$JEz;?|FQ#?Z(O6%u{NR)pzoXREVdC_X{}B+!~w?>gxr025;T5AA``R0m+^PL
z-uV)X@by4EQ93~$B;+FH&_|t~QjwQYI8!?|Q9_&;g*!d$6U514mT0PY>!ufSHCo$1
zXCh+p3U9K=K0Hi!;KhDqjaVj95#_6yX(B!)r?#?7LkZwoKBNAUk728U=PR~onVA7_
zHoqJ@IK3p0PUKuA)Np%QLhOmyw?F$VY-`{DRu)Uwp~cr*&Q#*QRKzJy>agr~M+7aX
z7snoNEgTRpdV5_yU;-(?W}emYBJ?B{7BbC>$<QB2&2-HoA$h6xAgKCPq!Bx2k$k7_
zgveD1;?oGhbcvgbnQa!mvtBm1VQvc+&E3hymv9iMLEMhK=scD*!s<lWE~^1d^(icy
zpbP7{aK|b>5EhxLlk`Ub6D8Hls<H-qZ4ee?5S#)3MAj5>HcP6t$J4+FecnXsms?AZ
zSkOeji}wjxe940UbErHLhx4;*Jz|99D#dGoBPf#<!RfxC=>EiWN#~UiUY-qN!t0fj
z0b_67`>zn}g(!vr(}b7(#2Pm3WVrB|4T%fCCh?PvdAhKvTSiKN4ZHe~P)gC5HjI6H
zJJaDaE+=glD5cHF^gStKy;2aJBuVWJ0kpop0NQJP+RFeV0ux;n-@cmphAZP}{hjf{
z<_%l7u5Z=VR$V9l=)b${v)x;v1EeV%?yk~&Uh^@nrbJ0>Ob#ORRQaT@Pc)}7X{AEj
zvVwSO!qF=2(Wec;Ru~DzQqYlZc=EXuItW+Yvx=5M-31&{Z+%}Pl7%59UYgp*Vk(hU
zPLtXE>+zL;Lfc6@Ey?{}(`>KxRO;=~`R~j3Eqqo-OtP?*#Wn+0Syo@Ea5b$HZ-tv9
z5LMq--Y8mb`E=LO4!M1yZd_EYj3?+cE(e=N9pBZn+GnWmgzS%5M`>}hXGrnpm@!15
zj#ld^ek>h-dbdA~A10Cz^k{ikF52ajO<+Gqo3ee8br<1(1x$oq42;gfaOH6tNtH%5
zLL~*9lOeM4!^6X8*?d->ol%OpD2~so>Xl*23aEzs%3=qJLwA;+&K05&L3AJK&qXg(
zm93XmJ@bj6m3E>ZmI{;70f7KiK&!usq_G}LHCn;Cfgj78mZ0T5pX8QVARu#phw=M@
zR~P3Sa|_XYT&Sy|`HmJKO*>t#3Uo&&-Je%|v`D1_1`_OrOGsu(OQ4&hV9<#ie^Jrt
zh2SE(r3PHpLAFULDT?9H7z=5`PooYlVwc1%b55@-{DX5v5)~XBCcuc1P#d><vQ4$s
zQkiw@lWM9Fs;Q)p6(2TH-mR_y&LQi5h;+aqbs8HR_SHC&mL=-&b%O>5j1)LL|31Fd
z8bC)rw^z_MqT)i=tUM$|n3_~c4=Lh6X~ZBI56k>)mXCY&>odo{*0o19CWT^83FM!b
z((Fj<Y5Vw%^|9=X%|jfG_s*(+O%X?fS=mV2?XkwM<`+WbL#Y{=tD5gb6od$EZSA^&
z@Fcs5fC*N!tu4L88I^15$IO46P<aY(@R|`~U;d)o&7M8ly}$SH>7xgG&v%^cN@Pz_
zEClW!A+r|6lP`TVoswIMYIK}Cr9MWj*f^jH)$8@7zBT?Xh8uchvu^imM_tSF0a@7x
z`~Inv_*!ngp_bk-#F{V&qfvQAXl@UrD<Tw>JBdsj(I!RL#*~Rja|r@4U#z*&7-Arn
zH8qI1h6{nA3jS=92M{u-$S+QHq;pNn*yO^21<<AEsZEV?Gu61j>Mhm98(egiH&^k)
zIEVkxy=)~Mgv@w8-GaCat(0V$m=D<gmH-JA*pYlb&k?oYCLpDL7?=RS`RFyq+{^G?
z4|rQOZ)$V!%Ul+aw2FymZHhqss5r~r?JO_1TF-ppp^kOP=(&)ksAq6f?GE{v5Ml0A
z2$O53BP*lF#eWXW1-Hv5F?yGyk}kKw9jL-nvBC@?bEuRwj->(E=!l^+ofi2FjC^Zr
zBc9QQJBy98Zs93PHZoKqywjSMjiT4F-bk(ky1PVPoH}})`EpRYly(*M8nx}`{HVdz
zGof2sno-Paow9i5KaU|zA(~=C1Joh-?8Uj0X-87VM?VHXwtf!AdfwOQ_GWEFS1X@1
z`xPthm_6B>RJ=h0rw3Ps;p|gDrznQlKw)Md!@TtH7-tgUPHXzDoxDc8It8&1XSs14
zWp3q6&OUB$VPwnOz&c9)X<wget-__&ap6m5Sy-}+E~*JDj_QE3MC&@1P6lJY&MQ@O
z5;BuEwuT~JyDJMN>n|rK=d)^Jk)Db^Q;!K*Q(Ibj#)9IZ@V8tuo}8vdHC5NZ(pvWX
zrBC?d*@Dp>qx`rM(00D1sxVtHKq-V@Bg?SMAh-0jnAUyH<S_ImF~tU#t_Fsv9QZf*
zmsO|p0z<GPVR2FK{lkmQ2LOX=a_U$=P@LzIOdVI{oUo>^ZN$k^TM=q_F#)fESlao>
zACaQg!VeKCk+b;@P<~)vL6H3QXo=Jf+2xq3tPq?BUCWO%2H!|^V(6QCpba${>Q*hE
zjcU}vYJqB$Qrs9N8&baI=URsmN||H7rE()FiyV4^5|9fpXOI;MJ2aq6>zjujQ7`Bq
zz&rbK4%2};nQ%N+|CJ)lS=kl$gaI)Tli-v+t0s)Eq&_g0Xa#@%U}m*~44iO{92w8Q
zrdk$AhnEhgIflTT8r>>$;?ur=>X}ocwG~p`-S^~RSNKtQwx-x)UiP(W6!S8px^D~}
zK=gs$uBS<9Q;{p=oKSpiD!o%=4yeS8e<{j|`zIj0wQ>=KDpm9qI|Tt5VIt#dh#F_L
zk)2&&E2=Jfky-=*IBk59HofrGb0#L4+I^=B%LQe+p_DG+ZQ|LK7O3zEB@0V;+THhP
zVfI-ORxjY%NO46d2YE)>Q=4N-30jY@NgryGO0?hjFy&se)X>zRtBSw~X)mdmdwjW~
zM(59<jFLxz37KQ+h|*jr8prCuz3tEYc;5HV`-`$pjgV&T5ert|{!AJHs88MH;$kB+
zYG~z~kp(X}DlIgVQm9z5$dW`91)XSxk3<0&=Mq@$1tURgYVKFECBX`LdWwUpc{|4i
zoL7oWY?MH<(>gM(*1?i@Rfmxehx8{#FO5-C?yT^xfuNZO@%9whbS7<D+^>^4hRfaP
zHM;Ro#<Jmlm@Il8j)es{taP!36!@ME#}m?ptwKitEh!C^Q5m-Zu6SS3t_t-}nJ>)G
zqQ8Mmb<oS6;gay5GQ~_Iup|HXK!-k%KKQ|n=LKPg)UNw#0~F*QstrU3mHYlTbX*oB
z;+IML_NELeIFmYB!m9RlM=fxq*$o^JUuVnDg^uV>5N=VPo>J^AX06uu9{<ufj~UGc
zn9sxw67Ub3H~7D8AMJg#<~~GAebhB;8d*L|jjT{@dl>tD9m0vEhv}Z+{a}Kz`nA!`
zo4~J`FB#!G?j4E5s-#o{gXoKsR{{IhCXFS6t6uPI)M*?qM6wQk`om>$hv~F#m&50A
z{qpmDj7fJd{H%VX1B4UhQqf~)iKBCb%6(d`T`(k!;Tw&bA6;sxkjaWMF?9r0D<-1d
zlOI)zH08vp=-hgNGhJ$_^6UA?OiPjH5UT_ayumDl<a8ZH0FXO(JYI+?^E|KhkVtSH
zjcLb)AHlp(s|JT0cSj>kEe2kv1u!d7MQ9PwVsgZ1#NU!j*-``wj1*9QoKHl#b%a^4
z#;V@uHBqiawlwtMQxOyWFaW`gggAa6=EST3y2x1rRLFK#09ha~GsyYqSeBnFQPyG1
z8d@&cs}iBJL?6!tp$#`vq-XG=QeJkX*?Yi+W#ducGp^b87kzo$$6ty`vp<jTFbyp7
zw}n-dRn!|tMow6rNE;*?PcHEn%m?S1|5O)l@8=nd$a<g3-sE-Zv`~_Xm)$<ju~LMt
z`cYSFzp?UhR46^b{3%|rZD}}sqMN|TP2tnqIA|ujoaAHd3NPB?4Mn67Q>dYFA+9hQ
zejTwfyM^N4qv5Ki6oVr3qPh?0;x~x#ABZ}qD(v_ACU^f%SSN~KvO|gJH5Ck;Kcq!v
z#}dbM;EA7xPSuq*{#HMpxsPo~<!L_}KlCdHa3bx)uW@)UGfiu9m16bIzRjNCxV&|Y
zlj*`)<3IR8Rt!7wuk=4}v)yT#9WcdwTO7vQyYAS(b<^*z`%kv+x9p0S{?+_v-6Xgs
zaTV+4O0HdE+&Rlxzl+(Z_pgag9967%?$+ex)92sqJ?{%3P2;WMy0fzsS`$TvA_5+<
zQd(uyu+Y=so9QCxRsURTq7mjR*5vWi2Yc(@itf4PH5oHOR?C*L1ZfYnBf9bHe6)bK
zI`m+vr5%NdaMuU?R{xU8<?-I(^Zok={oMx-o;Tlm(p(h#VY4VGleV?`id3Z-4rdT;
zB=(A#c*LK3=4b*&xCQa^X8=Q2*<;)OmVnIzNz>SXS$QMspk#t5F^0alb?f$De@$SL
z?|<|7aMfF<In0$Set0T?hCV~q-KGRk(m3!a1law2I-dV4V=JrKth@z@&IxohiJUvm
zy5qL#mK`DEu0DTJb~OmCWGqs=L`yvhtc8<SYibKKSj!D6(0+|V)uGv4_Wo*XBG>V%
zHTe%uAK%;G>;LZQy*_}|p1wE?Z{59h#q|Tjo>+R2X{BYttw<6;&)ke>BCk5R{Lj_+
zxb$pDx$>|aO3qxt7<(*4evCe&+)>MC-&BMxnTROJ5NEYxhE+?GySM80Pg|4cz?XY|
z*bi%S;NPOZXjOOnr}Eoe&~C!G1aeg)3bV~}(v1x6UWZyN%At2D@btAiSS~rMXqNVP
znwPk&{>kX%;L+aRv;Oa2?7i4qdh4^R=p-b=k0sS<R0t5SSuVUj95xjiCwEj8QlM}$
zH`5CK<*fHvgsgdR`Kh7|0xdck?Kn<E>iw*D@{`@e{qOhsE3W1%m@F;+n$8D`=`>?`
zrul`_ZojY?(t2?mM<;@mX61>-PK4wq+E>7X00=K{atSwmIAbTu)19jD_@_}P8(+%*
z)chZ2%;O*Rq`EjA5lrp4Jo}R+zvd^7?v9zMJE`I@a(u1r?YACOqvsehF=H(#R8_tW
z8O%mAw{w*Wo#fZukQW=F)c|K_ZCe52wX7WLw|C_}eg|p+3w*Hu{M!5Yoh7H^M0(sQ
z<%dzhxFJj4y{L=Rg%-yyju&TVT$+FO%X0mi>^%XTWdFsJgNM7%_xjKFA2iowll;yd
z(IJGVSy#b&+pdAe^W&w7<8JCcvy%229S2vQk3=?P80PM-(4Kovxt=WEkjxc;{Gd2l
z5C{S<J=1>n?ITN`^je$u{W#hmxFiqu54a{z4t}@0|0sQH?Y*FlYd6T_>W!4q1T0F=
zTLA`mcc4ZsZC)ajXIR!eGFw|-upDsd2LhSQHI^5Cz9qS80gM>-51u}9tPc|Aqup;0
zIL~gE0Y2UCIG=WBRW-N2r|x3wcIgapKLQj4^(0Q*EBBcV3$y-WBKZx0L>%Wi)2NOW
zln5uGTeQC>A$$;J*w_yDpX~Ra?H)diDWjZ}E4zCJqcJW4G!V^9l4#rnZ)b=u&qo29
z$elA=C4Z!9WX^~k*mB99K7EXU<T;J}_0PCKS55!X{{6itPPYDT?+@AL-k$1J?@_=W
zl_x|c0bnt&ez7W3P;%P40ia$T-4cUV{mbR02ak5|f7d_Q|MtoLlW+S6d-tF39llpV
zrCREUK)_CDqqYiS2P0sS!y%>n%fH<wvhI*>sz-O6mc1Gc2<`~KIwDIYBYfLQOXVpt
z#k&?=+J*h2%NN>zO@Z?M)2H7#;rhYT$GiJauB)^&VxXd<!pEmnugZc26h)PoccSM$
ztOjC%YF`#jlw=$erL3Bj?ppq<)5-cZd9e57Y05srTic6zw(YpYwv)E1=9)~6mC)Vi
zem6tUzZP5I`m^)w4~GxkMZ;Cu#1{Jyx?<S2b)nkM)sfV!yDQd3e(@{g2!{TYBT43C
z2&lC1-r*&iz};K7ZV9h!CW@^{6O-O<NcUa&E4Y~ztwT!&Q}I*ZjW6~rpiCAi=n>ka
zr`}&}!M|NYf(a3xRm%r6UhK1fZ6x@<HF@@Y|9ilAF28l9kv_cWq*^b{TAfIDi@iqJ
znOm)K1zf)RU)h>G{rf+xeCxeyf)`h<$iH$rd9ru-{QjD^u3VEzF`u3I!mhd)c}yU)
z;tYVxm;buf<X`*U)4%`p$^944pYJ_6bfU`3Cy$=)J`jE9&aJiAyV_>P`I~aQ7)KVc
za?(8=G2AeO;oGf)5HLi{))sIQSJL(nkCNXjaWV|8{HI@&)px`D<u+aqt8{yy=}2CZ
zrUm`ncFn)~nml~^c<-au<Q&G{U^~)t57p;e@l@VJ+|9q(1-jB$Vt#FRf}ZT%hqd4!
zG8k`)6x`mvn{7%bZSz;=Z=xd;>b})W$gfdByJ=O8{-vzRdI!|Oi)VY!cON|7f08JH
zSJTO^Ba2ssA}m}~i_s7mMWW;&Fn0#fOo?}LXN$os^};cX-0_b|^v}PG1C{=%*JQoU
zqh6=}%iaCM{`0+q7mp78TX(MKSWqlk93Nue9T$j|^ByWy@ovr*lRkd$ON{zW6dhyH
z`G0X|hmMQ>qy5MG&2@PXKZ%?z?i9r?6vcy<m6;WPwCL;zx>>^aX$8Pr>({H79p<l4
zdB*WA6pK75Y>lN>XFfYqg<Q(8DF|ILG?-%=u}}?Wj7+_2@)PLByDttO_79(aw`aWM
zJ!eNOjLYxB0G-!DG2VlsV0}`17HeqI*FURlejS6fBadfKVSsz|^xK1LI4=-sCbne*
zR#%7r&uq@n;eF%A_wdQy!GR;@!}|{(JpI-WEsn#mAqiv%s$NWBr(}A`usXY{#*uH`
zwbtFDXd4Dtm(`n`Rz8XfN13|qCqSbV%W3rye{}F{_dZtk_b>LJ@AU)cHe0{<_;$qg
z78q?EXB5Ge8E^*Euf2TSf6Rgq{oQB#{crXk?Lo!1@~~rgRfZ_BCsnK>gE6CeXfQ>U
zKmtk0wZmwb-M@FY%fSK6^WX12+JCTr_y=4!PoFr+^=)=H+sf{I>i+BVTk>DJiIRI{
z#)oq9Iv<rorm>hu3mGJ1!8#8-mr^Y%@Vth7dDEh^?z&t0vTkRetpCr|w6p(&W5;eh
zee}R4ba1sx&Sy*4S4^io<)&B@L@RKs_)FxM4U^&b*3aer2O*lw?xRP3GJUs0?!+SI
zVrf#cpO(kAaw2Z<?$EMiz)u<Y2S-P|c+!`eCjI-n{rh{*5BI;>zt6cH_8B-4oo;_d
zcm(h762)BrNgbP&;;t~~F@q@>|Mi}->Q&`Ds{Iluef>zNq^P;7hP_HY)ji3((E#ek
znYwa#+g2R7A~XU$Q`cAu^;AWpe!BnQzT89oy}y69|D1;tC-c)UqEo51Zr#Y@&9sDm
zfUIK(b$a-qD4;u$5Vahtz2m;@dOWWdNHYwdcl>NG-k~@gK|PUxZ@WF{_?*E%ElT%0
z;|LX$Y%xW$Iba7JksKqy4Pa+*c<Xh_+hmi)DWoPtC$k6`^JsPGAh)^=?F7K^lyV57
z3UCcOm8Tk(C)tKO+(1m$S`u+Z5v!>uA3jDgjyH+Zojns2ygGBTM_CsN$D^P+QGftF
zT2H@qLb^I9RKN&p)lr~*lmHD?-GPHY$&f}d;t&Y7%tX<_-~AYO_-<f<P;AUh1Sbv+
z{%$~r4<aV&O5meTh)a&N5a~CW6Em>EcGWg)RR`)q;TGs9jKlWm=CGcUyXfKm1G)G1
zo*(qTdHTHn#4#sccn4P!OD8)oheaHWB2eBEM(ZTNuIM4eH)wqG<^B`*0ml##cHvIz
zd_3Luc8@6XE-1*})klb0x(Ex@uZ8PWsEMHh>RG3JH%Pi2H1}C#Y&VdnFAv<Q?BBls
z;yv>{ag@e^Fj+RBoZrq~-+%UkM0qFs_MTBD26=4NNTTv~C+Fp87$c}A<9dE@|M~v2
z!-SE6k3Cl|v}|#=Um{2H^8iz-uxCh_9bKjn0s~u{E~sOWJzzA4(+u*n#;{rfA<#^j
zs9UX7PbGtXbuvpD@Fc#uP{7BqWVK2JK|jTHEvB-QQArdgDTjfqPLz-+Ps({Ku3itg
zG5C(59{XUs=_sGWl-7&VG4`Y;CJqSWp&N-9Za*Ym|Lt-JfBHy;IxjvlTzy>W8fp~G
z(7P@TBtf@SUgpi<-uTn)y*qz8d35>o)~(AoWi=Z8s+ykv>hmYRzW=)if5I(zNUK0G
zJuk*gNi|T}v{xxv^e600$YQp({}4aZQQ>mid?AuJjS9zw+sK(*G3^Z-=H6q3smT0N
z%Ys`^ay9LbQ6OYX-l4UA@-Ghdo<G@rjD?#mjtfllh4QhF>d!~~zRiL=e43_gx!-(z
zFTYXNAwpOCL2TIm1K0A_?OzqQ^5JLQ(@%f>>+Y}a9)I5b?9(s4=>Gan{`u{b&u;(v
z^Wo4n`yE2R-m}r@Q;&Cw$jwu&l8L1k%bSYPspwh6ZD!!Gb@|Psr!RlvSly-T_}gM6
zz%u-r-c=gTmPc5f`q}4CpC0}k-$vBXH9yI(rK`v4^()ryV`g-4|KZ+)7mxNDpHSEa
zIDXfC&6fa<zF|M%0{}ct2E?b30RBPnsq`C;tfelh_U8|t(?cKcQ-6Toc)-EATWVIi
ze|@t6Km9#&rD1N#HW%9nk+}fWs+}P@H37s41GHHmMzV8rRku(2_L&3VrFnD<xrMZj
zcbt3*j!ld&#jRZWO8?2;%fHH(HU-40olwic;odVL&J(kiF*9bUCH6oAo1^kok=@L1
zcCwqtH<|W*^Yo_g=jpxQ?cMj6@}iG%2TIspdT_FR`&UQ3UhfB^_k;8tbMHg$rOphm
zvciDLc}S3#I!Yc}1NG%h?$kujEV_Ms@>Ix|(%Y^&T}I50&Vm(pl53BL`^6K9zvI%~
z{?+X}Uwr!6uRr_M7q{<x?*8lU9ryGhyc7wm@^WepYlx#^hIyS5#Ny<<@Bo3ZW*-OS
z1YfVB=kJ*(4|pqF|H3ih_q~_Ik}xC{-~IVhcz=nrdaDRZVo*F;DFv~*&G%l)ndeUH
zITDl5wJ}8^)6vQLZ$(MzYW$C#=^`0JX^>*2QXD8x$`rf=Ka%=04MZv;O|ljq((|p$
z>m}yih+ppd#sZZB#TEW8(P;!tT(V`x0`@Gy<b?HzXVdP;r7YE@k>s77Rn;(aA{r`|
zpTpuuI0Hpy*FB14(raZG%c}Qf)%#)9eRCxHN}jKNVNIIvK5HqUj@Y@>5sTV&f(oP6
z1hwoOgy54ay5*K~wNg-Gtwx5ks~qD(5>S*i0<w&#2CI6NT6*53h_JfT#Y8-6p~9x)
ztZp(=>B|J8j^?RYJ$G#Gw-t(D@wuDLVrs63n=s(q3_VLp1nzaMo4q35o3PdSkaY~#
zuS;?bBxtNG;UNs>v{K7{S!*iWPB!@RyS+br{neM>?>>65hgv2t>6wtn14AK-1<#eA
z$IUaaPV6nl;=-&><zG~aD>~_|M;xG+LXxO(l$FJNSUs!&oQTy#@VRFH8xp{3dJ7ze
zI1R}-uKwbUsKdYmy3z$oRZFIb6q_7MSY}x_(ls7jF*way^`k@B#ENn-IDKm-C%{#@
z7HgVBk)vXOhyYLla42J7ZLJtMVm7O0-p2Kjh!N<cANpAC_0YS~JmevBY(foB_L0DE
z3z^Mlm)j>=qX#K^QE|4X6ZUdtCm?YGI{Wh0zQaLwJgQD!h3n?P7m*}*x>MbUhR<c!
zJiZkeBCH}&QM*#ocnF!DkH=EcPwg3Ll>lJmimvXnj#{mUR!|kZOcZ?A<6p0sfYfuE
z*RAbs7@*)|TIQ-^Kh>&Z@fz!j+G4g^pL~KO%DF%Tf0gC*Y@4@^9-+<lZ_vzr?zv;P
zvq^-%2JM5HaB~8)omC*{Vl;BiXVMnk{-*WGyG)2-lf!6dKT3xWld*BJ<@T*kPJlSL
z@D*aD{%|!_G(8=*lX7}|dGqG(M7ohzom{o!<ZAg^WB7s5OZ#IusUa&XP*)iIkJ4l(
zTkc(tHiv~VVxGO5**na&^-fA%{o?3wcA4GB!~uKc7QN3^XrOr<=B)oE#c*-65)zsE
zqLUcirHguI4b5DkQDi#vYT6wEV=o(AjQjf1AaknO2mr$K88aA&y@PUdW_^i2Auv3^
zR69Gj2J`}0?(8gwDLdC?P$=)YR)0s$W4V%Kk#r$D9vTXto70ys3MxPVW<&pRXd*kl
zAx?2VdnMpHnty8eEzjZJf!+7R>hE>pa$ZGXax9_Xm~I#;vCM{^yd62uU|;8020vyS
ze0gKXk;VotZTGK@$Ar87M&`27$u@NQ?zb<)etez1>ts$x%if{3qnu!*ccaK6z-YtS
z#Yx`85y@<e@y{#^eYuamm`X`&dS<1W8{}uVZf$hf__V5AtK)oz;%uHG1)gs@9cf8Y
zE&K}z$uqYhBly8ls2sKncPr<0q^4{NtT(o(<IM$~pkVr95^X3v*^wda0y9g0@sS<t
z5eRQYueogldIZfWpyg0F6?87?ZGGe)4LW?HVXfq#1KCnMMp1Jum}kn!x$A$%vI7w7
z46nTFPRCgh$kM~8;coU^gB3Ki<Tzo|==IU)2K|=YfdnMG*`POpquh(1iE+qK#8|~7
zEnae4bbUqIr2ZCa*bpW_mCp-B`HXl~q?ak`-TrB&no}n_vo;pq891w0=W=2=4SFDA
z6O-t@cp20oH;%znN}nc}%U|5Xn{5SWOht{%s>;SPhc8FsE<u(*sn)&4q6kvb;6N#}
zURrn7Wb(`0V5m_wY}YANM}@)jGZ6?tU)f$X?Y{o)1`})7Y3GECQ*&LIfbRR`eVJ#W
z4z!_Au}mNqR`Ri?v!V+M^(Mh|LzxLoF@ZCvE(AY4aup=)>10vZFYiBzn;5`XK#G^U
zM=x>FxBW7SyG#xg3UjOF%$|54PZ4$jPnm8TGOh)lm@@J4q8!b;B`T25eZ5f+4IHML
z-0*(btRUWtXLzxC5foT#Ybz|0l@-dq);$#2g;gl>W4#bBYoafkym*QQr#wfCXz~Sx
z%9br`?7#uc6Y?ycCl7(V0I0@E0q^Q_DUue~9u_E!BMn;>b&9VUSAo0gOa!TVTXOca
zFbGk#quQZcTdl5US#N8a@TwszdZTMgWWLkObeN7i=r-Q~wVsx5+OFxYH;B0{Ov<B!
zbH@eJ|0cWgh{#GlE&(Z5ozAmEBB_7Cnl@kk;ML`8D_57O?jN$cD+V8}E|a{}V(6DI
z9W;?%5#|5$FR|D^ue-3X%UlBwV0W_EOc(;oX{j)OD_6v5NL~h3lEi>ef;}k+g1`Jd
z_hQ4&T1}EEnoX&e{Jx|emj*=XH~iqSyXF(%uEa9iScE;jJCyG%R|2k=7z|9OnhCv*
zPpw{^hHYQc3XxA(dJ7e92sf-Q>JV}(-G!IW&K6QtXt^A+I+0G!9iyEzuSVSI0B3fp
zHSW=_qqi~K+l3gABL<8SKl3dkqteNWMXNEL7Q%(1YSk-wv2D7P3O0~QI#a{ASQKCo
z7Z4uoc&s+>5*N_%AoZ9!hj-mg72f(|;xSY$#Jf<?oE4gP5?Iz1F4R~^!dqocS<b!q
z(%|;}U_^~lNK3TB3u-Os=W}^y5)TNY)COqF1EXUqmYm}NBc0`w>x|N_?|w8%FJ5rA
zn+!&kQXq35X0$wwL=b3`q*u@a!)riNqzP}{xPK*K_?Mh|Z^i(3ayFg*K4=IxJJ~OP
zM3_15;&<-fn8G_Mo5z>#Pp;KFThyfd=`VkbN$TC8^-23T>E{M;F8}gJp`Ld>{LC%r
zFMkZ1_ijKlgj=Z1WO2n5lJs|w%1&+_G5q8$_V&p;*P&Y_$h8W~yjJMRK=*8|K`6lD
z1LLOLs}4R@rWrG*zM*m=^*2yBc@CC@E}m3wqev6^3H=`OMXO=P0-~O|&Yd!6Mg`1A
z9Ukl`vcv_naj{UDweBWM8AHphC8D+%IudOK3yqq0cQpPp-YrJ{x&MV#MipS1Prr!`
zxM`K!4pJc1PqC3GX&c0m6~J3w!d&txv5=Rn3KaV2D++{|^aguS7;0pQEu`Sr%{A}c
zY%gg~?rVWBL7qsNC!?cGKU8RfG%m`*lEq0oINMH!GjLs6F_m<VGrKB-F<Vq&D@Fl7
z0MT-FL6^FgPcDyHty2LUSgIC@FURT@xfPZY_QEAPB64<C2~dvM2g#Qc$L@f=tdMQ^
z8Xotrdbt~m{#v&NnlmC!=WrTSQ`)j2bA-T-RpLOpyi&p2EuW*e*F<tg9TJlm8j{J@
z*1@ZC+UP;t;I8>dnF+64#Y~cttCbk{7L&EF>YKh6YgC+PmC6*&kj4nkf(`^<6wXE@
zYUrVAgiURob+zJBq}e7dFOFj7Ag-6ba_M*Z>8spr|L+g@^nehX9gkbv0eqVK>GAIm
z4?Een_n&oSuf+#Wq<AZ=p@k}vl?YN2bB%HvQ`h?zil!~cTUW~9*`lYx*Ri#EMIo~(
zKT7)SIYo5!GD%7Zp&g=%98M*rgsVk4LQN*jL(KoH*PP;o2z5AQvrw4GUI|XV6dYWj
z+*7-QD&={-R<hfXI!>|7Y$6FNB$-fcc8jYnIQAq;XQY3jm+LFj?4zj*en4-j9>(5;
zt0XNOy|7}`HIyYO5>~{gB3aDH{YsOi=uoo4>22W^0gPm&f?$|PtHgGd{5=0T4l!ug
zQ6JhI(DMQa0|^hqV4nE2LJ<cHi4cwJIf~kxU0TjYIeA^ZGVf4B8w0(s)I-)0{+iQu
zO~s?Dw~I;Mi8SQB#X)5MC(<6W&0G)>4a|+(suiKI4+H%pmhx?dIH=M?@(#YVwr<Ub
zUvGaIzxwq+tbUzr0QYlWf7>2kcGbWS1N|$o>G-#K<<!(c`=_dH?^k+)4}(3#O56wP
zeAiaST7>-()~Tmx&8f}90n~;|in`J-Sj4iuJ~>2YTUS5y%1?^N`X*csra*}?Vs-P_
z-MsRcT&0F3FZ@-NF#Qs~5tHV-4r71!AM6Abt%Gn+?9$G%hL&`Cb1y#0sXtluF5NQG
zv7+;}QaWHrg=sE){+rY>mqcovc+|qiedh~tOrv7$;*N&v&<&QMmBdD_iSy#l|L7Pu
zo#r7gneF3v23n<83zKni=%wmk@KP@+R5mBEZmwk4*~(gC*@7OD!D8Dn7ksx(mSmOe
z6y&uNg^t97vpCN>;9q%B@+vvYGD0-O&DTwqL@x4Hx9BxbYh2aNV&xi+74_+_bgg7*
zo?ohx1<@H`rz3aIMDYQ{=Sb%fMlNw-3)*r~4pmjJqcv0hVe>{H2>#O5U)qG;6|!31
zGp1PrJ~McB&X?xvTSc)AI-gPsfURAs4|R>L^5`_W{9vCBFtk@rs}_T+SoBxQ8O=}A
zto32HKD(f?<0lyQ@UD1n_2q^eH|&dwB`fa3^>Rm&*Kmz%eEkiYT%AsiZ!Gu<>)`TT
zqc2_Wma${?*R=Mfcgb_EJT4KGOz27MjFZqeWlP%etrA=F5>k4<Jx|L-bS$fQnAhjW
zRX!Wm9Z^FrGgfA^Q~2?ww8Qh2r}hJFP1=Ju3H7|O=_AcdC^*K@PSztXC#O|*pQ!-T
zSvAei#9nf+bfT3J<P7^@GBK{D&u>`{bT8W_JOP*0?y*GnqPjmuTqA-fknT`L?+2ZV
zMfNyWv@2M^vS+oEvwh15YshTo`&a*Ve0{_ij_GPgkql`VgU>tLMD%{Zjc8jL*MorU
zv$w{)fep4>e%?qDT{Acf5KqIZM<Xq_pwWpt+2GqpPw(wM>hC>&{`7hO;qH?MkM^ER
zD$l-U3y18-K~IP=XlPD?4uQ3i_Sd||=rfYwvky?jP~4ep<R>~>*pCRtOKKy2lM@%S
zVmwt=d@T(S?c-CtLbFPhou#-HAKaSi3M8U6B1Nn)d^@U+ov5_^F)o}HA(zN8y$*N(
zK%Q<={c6#CsoWqu8W%}uP>5~b6LFMQ#XN)`s}`-H12cfi&MbuJ*L}yZ&-+e7b}Mn&
zmmiaOq8l1C3l3Jy<XlJ5*0S23i?0e%{Pgx0X<*{U{>?ErHJ?^<{N(t-$t(P@Cls0d
zp1q6RCx~oA{=21sBlPv-0??U8-<NLs(#;K#!6fEyq!ys$L;G>|1@2N4d!1M~wq~~C
z-t0On)K@8CWAZaK=6j*@jt?;8w>t_T<xXr~NAc>t5KFFz2yOrum03L9mfY^SX^;e*
z07sOMAtOr(Sb#+R@Xej<;BF_|{WE0Odn3eR5|yt)sa6TtIFJ{kubxZjZaG6WlMw)>
zA}ggFlY_h2@dAeMI_{j_H>V#uUc2@?_Fk`bhnF!g@#E@sVL|n|`TG@S3#J4yG;tSL
z@~a#HF9MP<YXgUxU|3uj&_4eZ`Ki^A3o|p#Gt!+jEL&GiID7=jY#9X7f3%*YhRWT)
zEDK-q(4{ME6J5UoBUWENW13pzh`d-cIG*FXU-ac^U!V5NN#71Y6dQ;DOuKzS+v_?d
z?FA1Qxw>Y~xxMw`&+3q_yAp<|k)KQT<F$-;N7DpK0-?xo789bS!Q1iDN0*+A+?QV$
zUYQJ9S*(pkmDNMuMogG7hQ1N0g|H$D_m8~8Ca;T0Nw7D^4h1nyOHhaxkWoOn6fu(W
zyj&aCmj#)@Jc7?_Ep08BWw-?axgm&%p=|8Um1k)+`CtSq>4$rYY!D{%c>jpSn5)_f
zNeWwY3|R{4J>tm0eKL}}Mv-=Ca5qw5ffHFa7>XuZR#%<U?raWn47GpkhB^o-&EPuG
z9BA(woSk6UMzD?6t7oP_C1j(T(rW~(+VaaKr@E|jt99=ZDClYz$|5TE!m&RLA9AE3
z3x+iBYV#;1O$cEkj64to<rv|2!BDS4kVadh4zOi7*fjv*Vc|B^O+hay4VCUhRA~k`
z*C?M{iUm886%Z6`ug8f`IQA^-&Omu3cn164H4Y)C3r@>d#idhBBrcxZ_>%AY%g$%_
zm$V1twiNLUc|ENkTc2#ycX8<(7957NVS>-gB*9ZkKGm{ugn|o`Mi~$>Rr?G!;lIe-
zn3-S5FR(6n@y4~86*I<3Sf~2lOk|_mNMBYfrV#-L*_U>jD$CckSC(CH>vKg1(z0(Y
zwUczZ6-yLG(@kcn7|Jp|Rt7IF+#i1S(S|yP@?t;RWI-ko@yN?$;|T-6TEQxC+&}o9
z>g_b2{b^C?<94z__VFJ!>$`ofg^bmvu_T(D7b7eJ1_hcqc<@~v6EP@O@TojOyOW!b
zkqk1r>`928d9xf#Tz5qa?Vn35{SjF72OVO((9OH}yp{&J+pT7e6Wx^?&9#$l5;U(P
z9=H$sn%E&e;(M}hdaNbc4gc%K1g8!<em<mOsd0@waAf!3p5%uAisJ4{j7blZ6m`IH
zbln!c8Xlv>Q5SD_{o8G+_XX+4KkFE=o>q&=(3tbl(^SZa2=#-c7%PnJM7DdYq`BI0
zdwH&Z2hX$yLr5WdpSg(Ztvp$boYYwQlIsZjU(pSOQ1TjrFfOF7yW)TWF3lSEochWf
zauY<H%u>v~ERyu!7(V5mlKM63sx?B7#Pox6+i5|XXCR~_r8gq=pj+$51411QzT^g(
zZ-2J)^&k|_QD=f<hU4nbZmIKLH9OlbCfyeYqBy-Qj<*s2vhBuOp49#7w9h{u??2v?
zlu?l^$yEVSWh11Nr)E}aO9&(!hjHj)=c--0_4l_&t&7vO#i72!`=f>YGA5ca4oj!2
znP-yuE>gZ+B>?FyaOvhK?icR5)HVpw53vxXcUz<x?keRo7^s{qH)#2^-8@*SjPPaJ
zax2{J<NoW*BSFc?XLXvx)5Bs45Lgn(qoWKKrNQy#yr>5nqr^Bab-xbW7=*evc~O#E
zyM;mf_RgT~WQ$1_@`R%cocHx*a*yYAAZtQDjE~E+1(NIPa=y?YludH)a#FP;m$?#x
zBjiF9IK3I1>R9BkUkoiYrPC@YjQhRPXfL2I$2uGd*;Dp_WFgx<$c{)XOo=U=ZaQmJ
ziTY?le*k{@;`t+^bE>7&sfuZx2I_~A{7ki0T`s4Tc09JbrlPQ{=TuzqJ<qn9`~bV6
z+2XVsej^Kw^f=ZdoG=W!IjkMMFT6BF`?9AXjc$?LP3rXbR;$L{?1A3;;F|MlBH6Mk
zJ&Rc>5=zF9ABo~>9m=8XB?GU`_h`;ndkvJ#`%Be5u#M{<9Qb%7hS(_Kn}j0_vP~&P
zv13Q4L*%_3Bx}N0BtsswBea8WPo_R{<>O3EXD2=`1)-FP1I(T+j<*jM$5GFoGiihy
zGJGh`Y;7g#kiNOK6$qQERPT(fSOIOiIIdkYjs>NeAtQ>sVy@`mrQS?c^tRBin(Ku4
zSOS_i9fL5Z?rik_!Mg=QG@hRV^k%uiwzg2Rc55qi$jj1=&Vvt9=-k?}fT!sKUy9#A
z@Cn#;_pF#82cK{=n#}7qYSrrabrt>oD2A$8Z9xeBT-*4EB2K!Kmqsxb+`v$np%s#&
zh{K@x%tvTtT4va*^TlyWFxEtF((T)yeY!2WaocT;!d^KAh@jMw0ijLpMk3{NqCKMq
zYpeCOgakKUB>UhQqc-YD9&zyzJ`<(5c>l!NKh7t((`;3}>8GcOQgVInw7z!VMR1)p
z{2odPeA$}=!a*rT_Nc7P2JIbc0W5}$06vlwCX~_z*Rta@m73DpxYzi~fwVqe^`+YX
zreDkF^IQtvrypS=fa)Vga?KCzk)tkuL^v%zAjtuomF!71GdF1RInDO3JlltPrC^kW
zc*R3oFK3Xjc`Dh`%v*U~S0^QpgOBNrJV7T+UA5%py6SP0#KWn%0}`B4p{MeUA7dSE
z*yC_ByNjA()4`OXvVqeKCL%wFCEA6<&aDvEr@2gY=7FhV1R?4ZJ(n_`i(E=V>Edl|
zMKv5*gT6k;<Vz`#9xv$Dmd1ZHD4xVlp`R4LwRNBkcC`UOH=`Xb^Kno6&=zPgXh(-c
zD^c!7Lvts?jqD&E&^6g|Ji#vJ*G;A+YSkD9X784h@TizVh(X2YH;e`GEJ?0N)UqYf
z&XUcXOCvXV@?sjIz^t5X2KB3#8E1Dyf}#Ubz8r_pXTeY`D3G6HS~s%57gL4rioPs)
z67Jj0W05D#5Q6(MsRxztw&YwyeMJ10>`%V+qE3Hme&|s-d9}8|nnjUSzL6zy>f7EW
zpEo8QrIO|#zW4+C4?whT7ET6c27puCr{c0mt~r@f*OJiXy!lgr>%vV&r~Hh!Y_x{8
zmFP<5MnTV7CqMOkNA>xKbcEJR9igjlD!KimlZ$Cz-S5p>&blvK17KUXE@LA2%o~n!
zWqVE*5$JyL#MAj!);soe@FRr3zIFKy)nXx&ZC`As?%C}$d~=`^(I}T4<F09#a*a4a
zCrQq?PxIr2JMp#2dV`K(HOf>}i@VOa#+QCz+v|GQ(JkdoL?kK8-`JnE@O)m5+tC4b
zy`Mkf$2>$dQdqV7S!QLt-7$I2n+1aFO2Mp~J%&ty0e%eI4A=THhlHzeG0&0{Ql|%3
z<D%Cb{hc+UT%Dd?EXTOgTR0UatQtTt=(9IU24uN7&ncfv4H0fC<l@WcV(I9o)qO=u
zXhdXp&54@I6@-LXI-5~i+u`!(lM~6y^~y7uV(T5#4hXRFdCz~Kcr%ryX&%{+Kd@iB
zSusP@%?6hk#|a^aGJwaCOZSW)QKy~vm)SHh+t{$up|?HlV4ly;L@fJ>N80C01%_{W
zT11(056Ji3JjrGyZ7EJOp}c5^F45*x(Hcgo&OWB*>uTFvVMwKKQ1UqC8Bd)L2#i%(
z|B*CA<m*)t3+F}iHQXqaYBd7^0jrm=DL9=ySM|M{+9ulGjb^K)>qqmAkBdQ!ipRBU
zISNBckHA_9{2c5G4+Mga@sY4A6r00>-)jHHx3rj@jpw?8V$`GwYNO-3(KoiYeHnT;
z+{MY9Xa|fV$+Cb+*N%p={DJ8RCOnwX@P%|p(FbPv1sf4>E5h#bwHGw7vYCyH#d@Ks
zB2!rW*t(k0YD%F$3K~C(TL_5O-G2ORH6o`Q7RwVTjFuIygSl}gDP>Ir!M{GyNXSkY
zxn2^hEHmn9VhDA7><2qpL#Sg`6Z498vO`MY@=V7namg<P|JuecE!4i!2kM<`^GyC^
zDV%!lj$O9-{G0pP-Me>xZM>2O(7}H|0UJqv+PHJ;&Zpg5?*D#uc>B)I-A{Ku`}{v_
zNQRTseBF(S)K%B{cg1B_;9AG-)+9N0VJ((hK=8|UTz|M6Hl$9@2242a-<#y`Ff~`F
z{@&mhs+q)%^<Nd2?(L`gCjqfHP1B{aXA`$KA~}LR8DQFuV4dloWICx5n1Vpq?`^=L
zhy^^}-<=g)z)pWy9e4hjT-=Kuy?vYg`0h7Ra|L>X=^T)izU9$P{iTb~-24G=#=qXz
zUk~|f++$h)4z<s|O1u8*tL!Gx@<ig=26wsn8yPriW0FY?AIoy?5KZqZV-N?VbomBQ
zALI+hX<`P5|0F%F<bl$kvYnWD&1UVWBMDA~y2e1h&B4A@@)9<wClfL9?mb4SYj-XA
zZ~jk$I+z)`?A8zBk?f=s?P%j@{p?XPH+vYiMZWwSW1CA8*fSC3EEs_^WFcl})toaS
zz2FHa6vERr*m(fPHVF8Nkr5?M@Khd2BfTczts>dvj)(~gmqRprE^X5I8P_2*a&gU*
zm05ma*RK&8hZSo#FOckTRxMyib~4MHS!UECL(LWUKZ}C-zTdkOe|ovnT7#%U4Ym)e
zLS&xw(SUTix!WW*UD9iX@Qa1SB?-<V*gkWSoPsui`cloxKNmw`X;Dp>Aws^~W69={
zNP6PHs&h(#cvYFfK*jhl3<FLE`pjwdQn+`HYcJ@#g3Jck#|y!CEGMrWe=pC(k};$i
zuBM|z6zjn3EY%6C=(9Ult0%>zw#4{lO`0ORUZsBYdZlcBwAd}41%%$o<(4Chy>4WQ
zaaM9IHtf6<&>1O!={;}SoM4MCOw&NTb{*qq1&j1bXlh*O-W6awumWm9J<;%$%wW`7
zkIjd{dt_(rSqy{pS2gk_ozA-Oa<%xeZuL{_>nQxf5;&7&I5h<(nqAO%k;|`=xyke1
zaYf8>No%Y|!;g1gu^&OWwSHFjzWj`5(_p*RnUEY^)Iyk@<rCzZmh)mPl|Rz#LUl}Q
zob~H+Q~)Ve(Y6DU_fgdGwQEtNx{8y#^QocGHd%~Tqz7^>hiaZPah!ELDR!c&?}nU|
zd}s$DRr0BQ^z-bx<Bs_Zka{*&cd{Ya&fnO!=sz^^34?>{o~s?A&YOX{agq~^$p&rO
z0V1GSg^XvNO|l~l_?nA;gTHr6L>9?{w7X);(BMe0PS+;c0JrRCfx3csLW}NUMRl5h
zH@e$Z`V&AS{RIF<wia48!ACimomZ!O5e0nf9C4gij!5j~+Mxt{0!4aq8G&QlaqzLT
zY!^bT?d#DNXUr##%>MqE{UHe~)o<0l0Umju$}x+BYb0=UJO<MKIz5yKI+FXz?Q$v6
zsZy%~MWe%qM8{*msD%QvubbO9&384*Yl^Bq?ehp%#&rorK*|IQ7v$QJphZrOt39k>
z{>mlNfhb75i1m4fRGn)4HsQf6e4p715J)VxTgbX2W>JHht<Uqu6>p*KjV$OF>?Qh*
zb|g7-n{-5Zye_)j+(0n@cC-oS)z}S!sMU!`Aze#M-KY{vl{aSTv2aqQdy-EI_clW(
ze{m$U$9cHjRZ`_~kmooJ2c<iH`Aps1*ir3G<M)K}X=K#$9`FrDG)ihxK*?|~ma-9D
zbp!7(XueA_lp{_nC;}(-w<vTuG@wUu&F>wL-?rvbfe<fciF#`;L%-oG?=6PIdrk*`
zt=&@1FEyB!5<r@z*0b;Hx|WlZ(PF4+WkfpB1BK&iLvU?1+Hg`Za6udER<>IEPEsuZ
zs49sJsV7w`y)%t!tow_iLcGJmP30ZC>WC7oZVo_}Si?Aw=SpMExG<O;G8A-9Ql`sU
z3E$qYW?I}v4uR(XnEU$T9G+quUU*L;_8o1<H7n1ScW5D*m9~f9#5P(?3upZZn9W0t
z`3K(8aW(&8bNkq-INK^-b%{aT)e6Y9$g*5S2?fNuxnIiZf*FX6^NPYC{t(rjQJgt;
zIIxrN(_B_3BVVYhNKjujwFxp*)d-JWkDYAmH!SK>3kYy{?T8CBC=E>Ejxq%cG)}I}
zm2ZJ%EF}w{DX(ojP+n`0=VmstYHSGmoHaAF<t)o-2Nu6MQY3G<Sqa#~J02a}-+ydt
z<j&^F_U%vmj{A<J_SH!__IJt+{MF7j4+Js~eCs}xmF}>j33A^)LMIhX;%$ncwV#(o
zFcv<HNbgi00SsN{IQBjG<RDSGK#p3^fPI0L5VKC!I;mxI1NJ)PZPPq3gTi-0sM}o+
zk8VW^w01aE#8q3diu^29f7sD@z;Okuvv(}5Uih0PN_xAtVt^FL-<q)MI4esPngFS@
zU0RoPwp&{f;zk4dj7mVr4Dde}TKqM7ak*eLg@&iEkYgDT)+8Zm_hb$m%mb^wEbAcP
z|DY=H1t*1+tlLML5#(rFVRv?hg-B``=8FlxH7m{*xK@J}DI3uV$?v)|QdFkM^0@|z
z>(4?_&1ylaSciH@K6yU5c0wT|?T$l6Zfo7GPEVs9z?h%ndzdSjR6rc;NMHMha*dY6
zK&w;?(Mwl1lvhH1?l^XwgtD4;^x`HELA}ZW>VzbExt31?;_;g6hZSJT>(&;humtP&
zhm{MGPL<asQ;cLCl2dsF145GO*4DRj6qZk+ve2tI*z&<twwKh5s+-ep-R((~%S<IS
z+e`Ivdr^0&F=@J5SL}*}e<wpZ%U1=uFK>FZQ>{;X4db7v5E%O^#?%xuVe2s^W)d#4
zT9l0BY=slWFPKz8p?g_C-4sc*qf%!_gi8gq^@mwb9kr6>`>Z)u_vhADx%?_(%IW}N
zL0pB`)fCkvkj<nEXA+dGX7dP`W!SL=bQvI)V%+pe$}*%UiAc<bvz*fv;gsylha}iN
zCRsF^ddAC3w2L}XFP2Um_-#;J{m)!AiFi3L&(2|`V<@1MUeZ8*!hS@H^R=#x`v-Bh
zdf8)xYAxJ~ij}pJC}pXjjyNm-dUFXZ>9g&V!U1!_0+66~SodTaUB8R$y(i*h5=-J}
zhvN?;XQ7wu=y_$(0M9<y-gG0Sm#$bsUYB{-{~*h3kpTCKNpV^Nb4Z{oktsKfIWp)3
z^Ma#{FqW0q#RKZCM$!SICt}=*qh8_z4Yuv%GGbt}f}&C2a0Z7V*r=ix<r*g9S&Nqq
z1Rb?FSzr&)?S0o`mXFxal1N}OonStjg?pLxvQu|la!L0mWNTiRA!K=kpp0y?@TX1L
zqRD5q-KI;kh$6t}^C>}pKf25zF)4iyH?jyuIEwi9MO*mubN-x#0$6oiA!s>p-&cB&
z(0$+sXsK~l6sp~Ml%o^XQ<iZ!akQv4aac1<wdU09wJ#khStKaBQykZhdDe#06P0Ck
zTars1XD_#@Knql)*{}-}(4~2OkRPb%`W{GGUzK9dB4}wEk%C%_lLzH1%bde+MCv0=
z3gVEM$2?R~TsTV>grka#6>3M`{C4lKlRbNSfd77h|Jpsg|FDxi*n6~hxaZEJ2MqJ;
z3T_QSDTK}Y{fZ;MmVj*tFD<<o%I2(^OJk1COtfjxof|3Srm}|FcIE^qFP><MHOjHQ
zD#X_A%X>V0yn8<bvy;uDLpHZCT2|hZNdFj35{b7_fE$TZ0G`$jCxCG{^4Z$*D}q>Q
zM16`Dyg)p9p8f9Sp&Q~WHKxbW)Jl=+*AP#Zx0Z?_C;?QEMT{!_NfeOR%6%lQ0OlKf
zq90xuNm~At&3PpTbS^2mtyX~={H*ZyEO{Y1+)>4>6s%fCEXhv-kbDq|&W*^&UZM)7
zp%Mf%E04w)GPk1YXyRYnt(%?sx|4q-6lqqD$4*3WOES9rP5c4ECF*?&^Z@Y4$*|`~
zm>nGKCH);85I3uPfHS$rGx~v<c8*-PwG$ldz8rLvmqT$uUtQg2kop4ZGI`1CVOz;-
zzSRe6Ws=s7mFY?w1Tgd@fn2W>5w<LoavRW2v=^}XAUICl-Erh*ujBGO>xwdhb)g?M
z3}W8rUc`WH-^P>{bf$oDV82P7$uIi8aSG*P-0!{x|2kp|B)IB&LFl46<5Vb!Xm&@0
z43WTmeH}Tyg&suDS7Dm(DDUhTP?BNZ<WWE#$<iAu^gv1ou@#?xIxQyPUB;3X(vD$4
z0(uSiuMNmzwGOM0A|R*A1RhT0N&Z?q>$<@n>phyW8-qx}-R%Cz3fpaMJt;1v0b*>K
z@~Fv+BRe6=yc3tK#JBmb+_7;?OJXv0oc>J}?!GndB%`@{JsJsup0h>MX)v*<r#rn{
zf17rPnJ_HJ5#=9tA3yS0nxWF4+PTOiny)7Q0FV@T*|WUHWbzA(MRCtw2o{pKXwXJ`
z%_XVu1YrqbL(kF``KcSpVk_}#CL8(;4b9r^8E(iiG*0dlFciKJdABMwD1L=sr}$gF
zh!nnEv0I1*mx<pqP-S#S2qZD_a{8?MAOY3_pCABSgL*Lr;+U4&U9R^4m+s;eImR}#
zIB!9sur;P8^o1hR#jwuqeD+x|I@U?&Oa+LPRVU_8n4~47ep(u^!kcou7>gUi4QEtL
z&hS}&bW%m%jEh!y61QETYeAw)<jip;k`bWKZyTG2V0kGoqMnurTt(3k!LA&0VFs9%
zye2|!8=|rsP|izLV%1sO8;%w)pCs}Jm&Ph08#Etk7>^=ONEZN85G8v`kD2A~98kiM
z!AEzrHyw{Fr*mJbm17Lrk@t|9$lyO2ibmIhmIxVI6OM{Gaz4#3jHzRYpkZyb))KN_
zR2m=ra#oxGS3s!04#as`NC`WMIkhLuJ6X)@m|3(buWxO!5V{GFHfkT45BttYLg2<a
zba-W?6$|QlonZO%gB#mE`@P=o^?C#OsQ+BV%OJQ7c33xIkn(V$r{Knu97vS;W$St%
zF0n@JvzK$6Ec0F+FbR=vGr0LL|GWS1|MK7dqg$V+RzpS1#Nx4ZG)cixZVh8YUyG&I
zTkdm-jRtN;DMdc*9^BfJV)2|NISyv2y}BbzS}GNvX>zH+p-?=wwqhr%CKQBQ>+9@M
zkvk%%6eGztM>M3>4fHJcf2M$J-~OU+#*My7(~+<wQ||irBgy7Qqdui-PLVEmF0ig{
z!V*Hv5u;wE*v<@vW>m6_ww<LUi`H_;vIm;NWT(*GF;fYc6EV#Z8~%}~D0=7zpWga(
zpeKG-bUi@4_x&wmQMPbIJ98S|h;Y4@j})ZMQ()+*-vsnO$!UCY+P|cDy{4sZeo?s2
z6!%UP=xJ_cA5_awe7kX33vR#a<XD4I<$=7KRUBA~Lsk(y%ZJ)|1ETb<mPS*)VmX9y
zd%Te46fb;eMB>CZ>avT8L@x}9b(}T540ebjriy?9B`6xL*3$^YjOk`_JmN7eo7&~&
zfEJxXh<i5EjD6IY$DSBLL`hW_d@zefo|y<a*&C<>?}5@K06*?E#%(-BT5mur2+D!^
z>Z8o@BGl7zN4K#o$on&lWH>m^QR6O*!Ad!p4Y>Jw6qyg<?(qtz)74Y+v<3omf)I67
zZi%;(7^Yd_q{PeM;99wkCFKU|i$_uD5JtlKs##caB60@ewQXZw&!epfGR_&ngF(6!
zKHO49L9I|8XGP>)>t?(0yhGr|te`ALJ}XYeFuuivCGQ3GM(|Vx2w*6_P|Z5s+CnZ)
zcx_j2fI2#ggKe*cp1Cz&982oy#P2|JRe;ByH3t;kIm;dPoce(+Z7y%%b@2#8DBK__
zHJC5;+CU+_x9-j372^@vc@J>9CqAZRY4>A4?b6xuRe3v+S3#(<V86xcUQfkzHoJ`P
zA}f)zwG|s1m(OI=Taj&QxsmM~VGv!rDS^}!R~-?R2*FK^{8jsS#N%kY9a;$!#&FM;
z;<wrU9fZ2Gd^RK<sz1sNpldcNTme0;F&Lf)#7kWbyDKKkmqUE`sNCeotm=o7#InGi
z`!<)wK5VN*&WFncAVGp!1YdSeFQxDXnl}Q&VC3E^#`GH@{fm+zQ76@CL~pNQYS$hY
z$t>ODQlPbY`2VyhU*{txo8{AK-+ypOJAX0oBW6(C)FM_b=sutbtCAr%J-BO^cl~@d
ziN+V8r6@NmZkSS=Sjz;VDb%65SYyY=g1^wL)4%-Ve^I;!x%3q&{V)IcUsZpmQ`wZ-
zJUgzOc0Uu0_6Q@w=VHk?cN8wXc*8LK9LCC!8UtZxb9+kw^n<J+;+Ffu@G{%lmUN@-
zZ7ow#0e=G3C=51KZ2M{Imlo}ibRgjE*HL<uDDvquk^Eunbb|cwOM{e>|NUCpxKYh6
zuWq8bYgaXT*OCb#Nh_ohN%9wTjGOHwQT4|Rpz2PxaT3xypRI<a`OT{2DTrM}-j{YV
ztzJ2_JScW%IZ>7#b)9S|pBi~8$xt#@iC(nq;+5G^S8cr?t*sM=7ye?Fo4E5l5j?0E
zkB7*YGbI6^{P6F#wP0IYVOsmQU|CyhSo?Ro+P~Y?{@t$j6YOeBTy`C26>gd6;mocP
zVSbg5$~;6;z7jsq5;BqXez$jf)fdumku~27`Fc@6VG=eVcm;Ar;e60awt8Y>T#-{C
zmiqU7l?bVG%3wh4CF_y$(rvGYT2B5>ILIAj=Lgt<j$EGGyg^NeCpd^i*npxfC1b7Y
zo@vFrRkVN{%91F;zmdTXj39<SAMLLck_$y>G5FmSopGQwl`!@|O9KlsUQi<t?o=v6
zZr)N7puy12Zz~+K)t3`OFzqUEuctQ>!X!7Js<ou;uSYcS>)guZydRcxhVEg6TU%;Y
z0~0eT-3?)|5#k!2?Qe+oI@q|~yVbkp{&GTG<*pbQ7Od9?MT9%naStpj7=<73L_X&x
zP)urm9#$%b;Mmq7q!M-6wzh<N)GBNI*N3qv;YpkhPnXUuiYWsAug}g9uEZTNE(M+-
zFIk0izCjt!xVhv{vm&45N}!+CXFa>h1rXjNF>h@_0y3ByNJVa6KJP8x-?nv@F^h70
zb|gW&6oLfpULhN&qBz<MF;H!ZzwV<&&ajco?%2uVju@RpG{`j9gPvKK2_xYIhr^A+
z)GRwvPK{##*Wvl{KrLdqmY@){M-d+u1T&v{v<C*+_Lu+izt09qoXjBm%m4777?N^a
zI69aKS~kEG<!^(sbu9+%(1(ECgbw&Ed5BZ5y@d7{`*+2qG}e$Ih@GOYWSbIDkNP3@
z2!gnN@W1|#*;AU0L`?IShMr9WlRohAMi^H+R6>n&pVVM5uw_$`OIFMX(3Wdg0y?o1
z65Tim3pHr6x791A#RLSJ+wYYukJwK9(A0VocvsKbA4qexKgA`?Juhw<_FclMI*~L{
z7iUsrnGwx{9aVh>s}eP0$nSM5xb~mC@XO}3v5Fp@Jc<eO3@&}<oexZ0wrIQNMv)<R
zv&YIhedcfwImr*>%ZjmqKG%(r#^z4Il{I%S<g+0oK?f=W-g5#OAkEpAgq_#?dsZ}Y
z)#JOx3Zr__WH%)Vt&g=z;;311Y2+hgB(^KHRJ(Kh7Bh!x68`fxix_<Nv;XI9>uq=G
zKPw*nod0p(B!=1qw^5iUC{I$~FQJ}7Sr=;@wqmxZ1(W%8=}2lUQCuH3&*hlGw=hOQ
zO|j=)jo4122P3o#r5_58XNAWUNn!?hBogbGxv#t%P`qF0-XO_U4fVN@N`1QuDI)Zx
ztkQk*o-pshm+a;10bO&1uy%*JdQ}$Wr$b;xx!(sXf)!avRK~C-8c}V+5@IUKi${_V
zj-p7IlHO1$LaS5@fE2@%J&j|r1}h^hQ{zYCvrC+Z0+7q0@{1BA_t~%e<Z$vRMqfBx
z5p}Nvl*T<J4!yLDCf_<~qd0j5@~~@5rPepyd|Gw^L)F%-WPu>UCC7Sg3U=?yKdmRo
zaIx~UN|4d@+F&uZ$38>j%5SXxW_oeD@4gk(oRUW&gz<`_m$ALHLWCG=5xm^R3~Z#S
zQ$@cm=MNXhqJOrRJ{pY5ha?dJ9Z+Z5(xC)Dx434>^$4d?^KpYnr9pW(MJM@e#sKt{
z6vuCRb4t*eo!~3M$wst+u=thO*X@+C!T54pP4E+1TO_;{eXscJj&F_7%+$4=2KG%^
zU}&|4aK*`DtiDxWgEIkL?ikltUQ)fdvXiDn%$`k25Ex|nm{!T76trSuU-FBzx_r$W
zSVKm@+gJ!x)(=VFr-e9F6y(5{)u2ZJQ3fZu#yorX3pwg$*(=;>)9<!rqFxn={9l^E
zNQ==}<F7Rm61Y&T<W{SV5b}}uBqb|Sq7leZUR;x-+~5P*3B}D}V)+91y-^v!j*RUy
zQUReeKFUE7fm3%&awxM+96LcQaY7|rCM(XZ+ZzqFFGB1{oOMx0XSiF>FX1JzPWbiA
zqjeLaWNs`jJ=anOAVO&*X<`$=8;G#4#z6^zx6DI^;>R)n6wgl(T%z^~ezXp^iAHV&
zMf|`JNa3S$R1w*Q?!jB5E*P4zO!|5d*D?~Ua6p)|khTfZ9s(_(CHztR4lE0j0De*~
zd)k!0-e$W72>Hw|?|%Y$?c?OOzp_A=3U)7N`INpixk=w<1N<>qo&qSw`}R}7;tTX4
zF55IFN}P0#8t8<W_>zH>p=KoM$5=VA8Qrh&fFW;;2JA~GD+yxQV)AO@)O!;Mp63@~
z9&Q@5{Gu<eqCqkZmTq-zHy0C+h1zZmxDFzo_yFS0JhbShRGZQYGw{pn6liG+2{yd0
zErwl-7U|?_xrK4<GIl||qrwPeae}u}4d3G3^Yx&Y-ipS$^lpUY7@933_}zc{{J^}G
ztyaXnz53<NO_tU8x=7xNZ2Q2s)5KL8r1T7nkGUa8vI-)E$Wf_~hi|ioBG2KdN`C@Y
zid}c(&Gf(BUxQr=s@?knywcr;!KM4uT}eP(biZ#6u4pH^T+N2f%r8m#@)=+c_jVt2
zvZv1u_n$sFxT?>Gid~96V=&N8mdCmRx@Zl2e~6+O5pXbs7S0L<H5)d}0U9h3>!yZH
zCkRa*!H&1-sm8PF-WX61x28kP#O3^M6{stpT|^QHwW8b*5*8d4+&vmxjQfV*x;{Tf
zuAQ!R-PJeRA)_qYL?8wXB-I2{bT=ss4HjwZztPqJLnA|vD?$$mtQ{ko|2$4?*_ajD
zo|YudauVbpzg{dp-2qKs`kELxMkjE1fzoJkHD{a+gP2qyV#bLIW$jDTH%}kyk^seV
zO}b@#BI`zurkWQIqF0fmW&YQ4<O>w{;)d2WvvF0*n6Ln+A@HOeAF(LnOcGu$!51P0
zh#6U#k?isLd^{QmD?N2f!(y~$RD~}V6u^b2@P{HVw51^^TU$xYw1`vWV;wJ5QLUcO
z@<|Pm&U4rZUs}LdH`{{<SeiEEQ&u!s64_20npBLoBa~$TlIGblSh&@aS<la=DKIt6
zm6WS_5l&IxNo-t|l_%0N@Ta5V4fFV=b`xERa{jiq0&|Bnb{dK^H*|TuGq1R@GK04S
zIE^l8?@Fv!D=;8l;If|FoQGf|vE5Qvx4N3jywuHafTX&DV8Yq!I&&PkE#6ASjBTtK
zkq~Bjl{hvgZTG|&1kR_#X&KTI%2H?)SH-fl?vNiZ&OEeg&+N7<b7ifSOy~hup?jk9
zf<f2mSaTW~h+X8n5RQ-xk2kgmLQxG3w`<YoBqF%>OjtKAPWp={xMcs{)!=*8PgV)-
zpaJSd23*Ft@<vCPOf)RgC?K`w-E!hx07juknDpxdXsizOM@9viO^FKbQel=I38hLs
zQITEyfJ<9P#+xI9*Q`G<5yQVHd7jd7yBVd%m06oLZQ*1Rkae(k|M}iw|GT|E^uOPI
zzQ23#(O%z44G*)gvW>+yBRRKGrne6sI4b9T8^VSnd1F@z-mL*#{vcc6lanPTZkP0D
zF(st2YX8C_+B&O4+J3PV($)+wyXnKrazZRf)Y{Fqk4Hm~zmP5?X?9(2k4sTKLsQ)F
z%|2xt!$w<7ozC>==9{knQ83*bzem6R#>VKMy?1co!{x*)CE9myX_%oNz=~n|A6E`D
z`qhT%AEhyd{_*#eyT6iqcYiVuFLbiox7rCN{$hq`{X^Hlz3>>OyVFtSCi(!G8%}N8
zY-ii<rCaH1ho~R?a{tMLr!V{NBt3od;K059S+<pZeoN1Xpw~aipKPY%YDZx9&BZm;
z`LJ9Xe|J;A{x0;*vF6A1W;}&%V-ecf*Q>^Q#SotBR)!(KJRimK2;3B}Z*Z;ZA{tz>
z=VkppC-YU7UjP??m-VHWT{b-hb+YEs=!DO=J#A`#Ybnzf&-WXX;j&t}bQ~Gw*$D4k
zJLVAGDSU8g+`qMF?HyQhoa$M8d0bVaBA<NC8OS2R9eG%(sPI*^>c7nfzx)w>zx(Bn
z{^`3xwv$=VtTF)J1%TSKb(V6lXT|(`<=C6+czru`V-<}KB7Sl*yPVD|E_P20u@A@j
z$>z=aJiqhV=Qlgy+ihtih<uyzob;DrdFE!YdGow@gH1^)+342D*Lri{@SPpxr^Vi%
z7WrsX>Ga+Lc{M$#1Yr}}ofW?>%|wPEq!5*VsAkRjHHFYoSOOyG&C1#W?04Lp<;^5$
z*=Y)OA(SQxlFyQi3U@7uG2(=XM5@Y{xJnggm9ti(#K#KO&kho=!LI+JAmRynb~?+0
zu`RC|P5*HyM`hAiKd<}J*ZQw4d*R1c70xGuq`5)q<g}w+97Jjwx(07`Rj@@sC8CBb
z`poH-K+$SICDIISNnWuh+pOC#rq~!*eF6DDj6C<4RoLAZ`;tL96Wan(QihC5JejL+
zE$&D~%GO&)(C|*Yb;O<%d6t&=+C9)J#ENRA^Nvi+Z?9)g7OSbpv}@oby6=3;j5qIL
zmV~Y%;OredK77{6o<dg!3^xPTpzxSUQzG4^U$H!F4sZ>0<<WqSitiT3#cWbAP>ntw
z_iR(@DnHJhAfiU<c+=;M1<T&*kq-d%NUcd=>b-d1Nzm#o`togd6mmo#?Jwmi-|e4_
zN`_U6Z+cTof)n?Qr8Krt25Epnii!ijpgVUbbfqwKf7Rmls8n7wrzBV}<Ogmr@)7j}
z{;+u?<XD*<5vHlGYu<H(Y#Ur?F;Ry0RBL=ksD<fyQF4li7N_MDlDU|4BHAz#pl65Q
z@$2?tUn;31v!Fo*j*UZcguk?MKa@pEGXajZ!(fub0tM&hQ2b&-(_t&VH$nqqV^k;w
z=8jc>pNh_hm^(da)37)h<${u@urOO&2~~m;EFRF!_b>nWpXuO)=}Iy;N<?#OJaxht
zJh??7)E$ppTu0DM9-i6V=vX{MArc_6$)%>hij(0%b%MpXkH{vNyS{(ydJV^>Eq1&W
z=SW9?p$3&a^T*06T)QP%5EqJBXp<8f8smZaLaRNe;B{phlIHkX=Hv-pkEkXsB`T#?
zsm3#OQVQ~0?jgP=+L%QhCE#&E8E%(*|0{nW1&$bmkIY}U%I+eN${%7IvwUCyZbfYl
zRo=Cpq5ddYBdkY^u5qNwIvAtmsN8RW_KeIYEYY1O%ReKI2m}|ZC+I;{o9<;k9<?N4
z*aIBEPP7Cp>dA6*=?pdaD`PcUEjbx|JrmOB%lNcJA=FNx%g>01TFyf;4+ufE6J#h>
zORwIM)Zq9MAE{OPu&$P8-m{beaRJTGqXQNr&dU+(UAZQ#FtnJBcCrmGV3=^BLJCU0
zZiuoW3<Xe{WkrKcy_4Pf?ALdkA_>XyMt1j>Bi>7t@%m$R+*hkT%jh|wYbX1)w3Gkb
z$ZmTwX7^Ol`gQr|qR)tm{`hz&`|Otc4JiO_oZwF-zKPO_?y-}8Je0+b2&^sc$)mss
zv&{fv4VhW@7lrZMoFQ{`^$~)UHspQmy$Fr!90%g&2&1gW^J%hx`Un<z*B}1fTsLh2
zsme{~i(iFDknG({w%~ua`o;OE?gLNI@$k9L(*KC43(3p#-NfI_>)O%mP)F9azjc~&
z5o~7%2T#Lw;C`uKb=28O*<Y(bjC8;adDImrVYeJ^=#Rn!mKw-oYlPT_iJqVxU#Sis
zY>=T=BCF%V!__v2c4zzb9oB2#2&L{2XVU0F+UooHw5-_&TZR|0fC&C?zU!{Ua_ELR
zL9Ovd7q4$`+iRgC5hi!CqYZg?qmym8MFq#gKS@CwKj^~87cLfjUW{Zh@UOmPyf{Wv
z%|}yT|4T=Q!MR3Vq)8Jaedp7=w|^z$K+!r>eYD(kJ18_l;^?gS#cfFRI66eC*{L)D
zW(K{Q5BvCQM+;t`O&9tv;0$-i#aQ153Utufa;F!~nTItgc$7}`ch#-z7weV_=H^^Y
z>-1o-^Jh+KswUf$=@>clfZi?1MW*GnPvxw!pVP}}86V7Tf#}4txjvL0``XoI^rHJU
zJ<y(Azg!_EA)tov8wkn;tnMY;j@eNxQc=+Tbzkoi5$9tdL0+@W0jMKHY8>*2l`r2!
z%4}u%^yjcmSkYlIsr(;PF5q4N_wi!l|9uvkx%=Tfyi;8OV!RlQ#9rrawmurT<#HlM
zmEF`Op^NvXkff8)U}UfR;!d^EJf_jcy~t<+X?lX3K_~PV`D`cq74~^TN%4v)Ndt+o
zaCCS@OZRJcp4YGVU|2{c!J+Pg8^`IkYth$xdfR7T$;hHx+j?9+NEt3O?a=XoTlO%2
z6CQqQ<g;4yiqHt!zT~e+qe13(Vo-Rw6M6f6KP#{ew8WB1<?A$~{rS%$ud2@;vcBO3
zL1?E4>vi?_3b76IiHfv4J3A+CKag5L{H^B9eUOv@xllTis9!{1%oYq|om>WyNm4_H
zNv#C29Qa(|S)n-}8t&o0r~bf6@n-H9rBn^?@&r0}W2!jbSfp2l)m*TWA7VJOojI5m
zCj(y};9)TuOWX}35z?J;>nbGDvsy4WvfnQdap1a|IWc-KfD-wE$LZXf>}}en`?6rH
zfv`r1)y3EOyHmF#5&MP?sV5xC7t_o9XLeevk4ijCJ5VcxQ~A#ah^Q)JL?T`*$eZ4-
z`@A@fpJxheaN+YBM3+gLP+W`zMgQZ~Qn5B$=GO9`gl8vB$-JB_0iI1sLfAF_={Pn2
z$1z?fPlP!HR=Kh#W0me5@*wwLWbX0q`Ze(X@JpR_C*jv_S1jjUtelupx~B;>XxUxn
zyn{CDg#0=lGbv^>0mD8aMpfdWT`s12+%#|{dwy^Cezu7U02J48@qoYhK4J5a-PAfK
z2F)t~$sznmYQ*~K7~KEvbULzR^d{Hz@U~*)QIn(`Dh<AQ&sh$!yun%$tp}O|dL}w@
zP6Yj4tf@QM>)S1Oa(BWTtvHLeLDV)F{e`m(Key~HEcj0Lwspmc{J`_L@-(hHi|;*&
zYtG@dPT>mO?Rxs#8XfNXdfc)?_OtS(M7PtQV;yc;k9)5!7wL1!_tp>gTEo==>sL8O
zZ5K6Lts?#`YT{2)6@ONB@dH%G^*6}U{c-Kv<E-*`2!8j1y}wbK_sKPHlUGhMbwU)J
z0Zx)~m%<VQitYz+*vHib$YgZ;StnGGMNWZs>N~|B$vqSdwVnla?T+!1c51;@$5O)=
zB4F^1mZ5jYsh8bh4a=luEIF~UWVz5&4XpO2)6~%IR%lk`0!La+8NkJW$08rAU(@V(
z4gVRwQqGo(>?l%b`jvWdY}xgR9X;|3MdtK@)7GA+ASl-~p|1k)xZMj%i+-H&1hZQ8
z25->^YJ~rGWbxF2Y1P41#(tLGqMcacMS?CutwX@$ash1+V>Uw-$I}JG`Aw7kLsbdn
z@=a?>`)=yT3{p;hRZPgXKrBevG^U9=iZ6?yAr&|xYqjnh9)9YE^Rz0Dc_IewouA84
zyL98q%DOjSKJGu-zrXk7U=Lvv?>FkUKE%%O@%(0;n!ke2?6Q7oHF3J+IUsl7Q_wo5
zQWlmn)?mn!%wmD=B=;`IiQ-~qZ}3GQ!mcJD^e7`K$Amch<&SRF_8;$lyZ27RBdAun
z)to3h*8_&(dK;{pWONSk=eGQFd)4ME*Nq4~7%m>{9`4@TbvyRr`J=CX`D6U&JKreX
z*snO|=s{=*%Xa_S?!m#!r_Ud_cFEt;>~%F-jEl&0(px#^ovS9aGpp3l!noOfHSt&0
zakx`Xkl{d&yHz4WBEe{We%Xq5M!;*X+>{$xuh(1i#q~S9W(-!?#T|wP<7JuiD)i?L
zwx!95!;6~opy#%3pvPPC_Qrxd6Y*~g?A3$r-e@Iz>nL@8hLGm%ZU0Z<Pvhe6hR1%L
zTQ>Et&dyI}y|M~BFmenl{8bb?2)J)Gh@<KA=n}9oB@DJn#Y%r;KM!^s!QN6shFm|5
z6Uj0*6{APyVvkr%4Jy?MZ7_z+impft(i@OUP2<7^u@mG1In|k-YV_?i(b;(A4$F9-
zas*ODM>4-+E6@G??fVa+{=Hlg9o;q5A1}vrl=B*POhBr^rdKe-5w^Bw(r#;ufKZGv
z_Q<4-Y#4us0l!i2pa4AJZ%tffTU&Y`0UAkB=0owSP{GRz@mXP5kCI(9Z%oSoV4g0%
zqRG=eZ;+Jqh{VarGJwa(UvesN2wCx<bfeK~7v-y>nA)uUyu>g3(BiR7k8o#iQkN{S
zr>3yYB;bKgJ0n+%a<HKC%v~2iGFHr+5WMa-1*`Oii{Fs6kO#mVo=A{MYWHZGftQwI
zSNm`&vo^?+JwwyKGJ3&D3Mvz6+JG04P_BwV8k&sfg-^}VNkpYwuSs}eE!2TlNvR^V
z6yXpXm%o3^0tr{hB_ASetaF|=wPN2z!jv|eo=E~vr=CeZTI-qgOy7Ut+x^3bFYfi9
z?!GvD*q4CP4YOS(feb5UPmf4K!k;8NASsvNeknKD3|3=rjGb1@H_@Ce+hm{ow!&3l
z_NnNnCM|+|Vr|_MQSxw!lp3(A@fXCBrqKr>LI0|8ejx3vvMyX{RajvTx-OBewq(4=
zhOxrj;;F@Nr&p&W_$k_ve923ILkX{f!Dlqq(UNU;pY7|8Gd+++xU}MgrxyY=C7X*l
z#<!ut+veU&(4zl;*Setrzs>$oAW-i~#Yn(tVD=0D+x_&tq#BpQ;v}Ed@r#5e@{Ej)
zpHmqmfxSf-`4Y==pZX%1yuOBN?XF*1eW5H{3mKsfCS{eUJYTc9)+O~74MK?59EC|C
zi>x>ucw0_HH2JP5C3fNzVAUg-^3qjc)75+fC>kCKQq^6FHfbE;ooo=D5ui6Z_SVm*
zr6x<^Nqtg|1$Tpg#nj(R2p>NS|LlEf(H>v-d`Bc7b?^K7Fw?WXi3fF$2p`jn;Xs47
z8Kpodc-6fVi^vjy=RDHV*BDXUeJoNyFs4XAxg!C|FNJ~p(Y`=ORdZC_of`DG*RaJP
zpg|NvwRdRNdo{hp(VfTszFf;iHVpQgtN3m}_gEQI3p>#(spBF6p?O^*@5J1%<=M=G
zxaV$mT@jxGth`j~i^3$uUZscM!{QJUk>WPP7{V7EB^yjDN>kR8d`d;RI<+L>6<Z}D
zaO>N>!;JL_qN+ej2de7DuAL}pyIfg@WA)y4BsxG*@D0Ivh3`|Yqg5VIE_^jpY>4D`
zO=ZYv!CvgcOS3wvw&QCQRY4FXt|h_eiU3*DaF-L%60pSTW`=r0ah}+HIMGX_*%+3i
z<w*S)OGQJg?_JDI2kBPXdL=}>Y>V-<PL9}F8cpb<_dP~f?T?#P%CK7o<|}#0v!ay|
zidJIL@#b&vFTi_TGHO1Cby*6Hf4dY2KQQYSE-9a9>9@+FGX?4)=7^#BHpc4y4AFjZ
zIJCUE(%6MQO5QoYtB&KSX*K}?*0{2Vwe_(gOfmHFIDeCZnV_A#xgsJmyl3DV`U8mv
z)l*StonM!ma}b9-;%y{f@w2m6*iNnUI!<^jUra+NqgORL0NGrHBZ5V3v10OGa-rZg
z1(A6x`j!&t=D>T={4E6b>;JGg#qeu%D|siH|09lhRG~rdu4D*Hk?d}(4J}D=mGDu0
ze_o8zx8o?hFq11n@G!ncj2#{|g6r@oj;gZ>B(Z4;rE932YryJLZvwI79jBbm@-=Vn
z;kQ*Uu83+|^~orJP7g^G;fEIp$n|zbFrc<x9mE&CxtqlOWt;SBIc<HEpS<d1hj4f3
z`fvtr$yZX_H;(^ysi)UPK7-ptTHC&{hlX^t%pD#sjww#6q$Ly{1gPZ~4({(iR)n@V
zkQid-H!6?#%hs^Vgeyh~CA_>)W?-H@-`jogcrWD1i^fVf;TkI*;xoE@xxV3*u5Lq{
z>dH4wEnE?r=y~;bC`b;6MUv*hm;gb20Fxmz0v(H}i+`O>7bvp!(|LVl;g87V5F|y|
zx@26EP*)rCOT+dOf_`8>S_g_AKwS5gug9PF)zpT~Zln^K5~v0|CLg}%9z<2Uq224N
z4E>j55<(jT&%cj{86S$$;N%-+)@jgW%60`ZX0<^geVZ^im|$`o1sZ2%=8RB*XFN=~
z>{~Uw6T$%djvg@|6Pzb*ATI~-xW2f82!0s9EqqI&c;h8@$EyOYvnLNfZ$}`R{b~T<
z`n3?9nY^(Zo(Jw8v+WSB$v;D&CjN}jW+cZfDRii5V8Qr7Np4ND*XG%kxqNLc%Oy#P
z)D4!>)0`Y|?Q}bfF{EL3xhG9o?D%A$>!jgD7_ov>+sMUJ^F#7<G%{3f2}e{nW$fqQ
z*SIrVL0m@`i`G4hgx*n!>{app`6;Qy9G7byX5-6HyEMDXRl1#ZyTaMOq`O1lf$^DV
zi=<auIHwIr5;ASVt;SsOB8!w*3^Dgf-WXkK{XZ;~`AafjkhB`>=*D#E`t~{&a}hl-
zwz^&F56Ha4wnPOgeIlki3f->S=ezzXG}urcBWhs}(Lkz)#=r6jeiDLCev?P|G0h(i
z$yf0}LY2K>KOnr82k%UMARb=|i^uTnhB_6m><D}}THug+jbjVPNg+v_AD45@PWrx+
zrGB%&$>sux&BBK$XX~Vel1@b7HQ>uE)aO>^NO#!|q}J|{-=p)`$&N?{){cK{-|pjo
zwY9YaCLXhuK`{QHyMJ%r>Z5et%DxxWIU6tGDRavEd_BC;j=(8-{nSb>s!B7@koF2i
zpSq+h0t};}<Qq1Dtz}SxreT}i@T4p)v{Tw7J6YdWdj&!L#`)|FMZFT3EG>`dnDBJO
z0$&JTIb_V|bTRkE7~xL!Fd9})7~^M9i=ZuQ$j5|915phYB%<GuP8r7}AvrZs?X>$*
zPRxqpWFg>a8rtH7A~(3p(25I4--2oGy3eiFFOGJbpY1Gt&+Q`O;;Q~xA3yb`ZsBiU
z<Gq`0eBh9nI5H;mgwgc%Z|N#-fp>5Pe1DML2NgL99&S9?2O&TUakxA3XsLnGn&bUm
z5_#<i`*jV%>-u&Hy<WyVBaj2hV{{pjpWWNO<i}3-d@-?Cd`%KAsSORKq9*fbXzu@x
z-6Cz@xpn7m_xA1Xom*WQ-M0Ks-w#q2W@(PHI;-gS8`SQKsrNKIU<RyJNifte#vb!^
zL4Xy?@>552n4<B|tvA>*opJ`EuIGj0+XzKFbwi^Gqnrsvv-m6hRjecvzEmx0eXm}e
z0SQHHc~Uk`0Hg&z8jUnDfutd|F<+k3yBxXu@jPsyIqomc8QzTn)8dEybF-0xHI8xy
zzR!Vrx0$wqkV=?RXZeLyQ>U<lhBtMT4W@ZlIbc7kGXjhc{MwZlq{L21{Ih(%fGPjQ
z6i6y|Y9qA&Sw1}vrLDQKo1B3#Il=*60%cs9w&f&SM|Rvf@xO^;?`roKPo`^7Ab=3d
zOFAXZ$hdGYc?0M$Nq*7qAUtn{bc}S-I64XxcLZBGS&hJa_s0^h3G>aIsBNbULX4nE
zEF}I-c2wuDY1od}IlVGJ?+X_)rqf@PF)S%NuyyAI_eol#@_3dD@8OSqeIS!e+F+Wy
zb28R2!BbvN9@JWm@oKe`g+vQJ*QZ=gM3~@V-<ryzHrpD<BUvJ2q2dm?frytUqE{Ky
zg%kpuhXnjUf7vECO%|b}o7d4ZrjwLB@{Yu1c#>hSLQRD)(gzekIqW_-W7vy^>sF_n
z7v{h@`i2p>)wC&G+!5)5Ke?@vLvbVrdPVy?clsCj&A;FXL>)47VH*O2>mhpl7<v|C
zL)*G6vyR@HfQz|hn4FxqTGlRCb|Do5WzrD0H0>Yf1t=h0jE7^F4!XIP6JW|0yTT!z
zuN>O8ywihQ!7sX<b16~q#|5FRv^H=Uz=YxyiwJBWnkvlg?>DTTFSifHmGYUPi?|Lt
zl4|BiYQs~}h5!vix;l^IZ^ixuVfiT7G;mvGh%WnKQ*N$NzQDvUisDuG_O?!%7A9^T
zj@=95ksRG0Rf{3QWhNpM9H1!jLn(?J8Qlxf{9XU<Z)hvfD8Q6Yi`-Deg~Rv&0&M<~
zm7FK#-0C~FeJTt_en^UxU}Qb1h@m5v$`ih9eR`4j9SCLYxmg<R)6rzO<VNFt!B8lH
z0xqW6{)0M72&CuA3#o!VjPi|(2|0*SVlpIf5go7`pgY1sRyI!9h}3f+7a61v2wIw(
z`;W4X&)nm%qici-o>D(>AyDZMSP7aM$~RZD<kF8s)Wm_f?&7Z%$aLm!ehW+w9G4RF
z%#oM?J^NMUc(s?!QpO$LTGU}Qd?nqoj%X7}ZCLh!K!yuMIw`La9ilDOk&Q;QJ}5Dj
zEw5{>Zm~O^CZbuaSN#+bjmSi)!WCJOU+in&Ym~6h-SxSw!l{ztk$Oh(Dcf9ZQ=b<(
z0kpFN$DYJL4U@-^K6l1%h%$}&IU!u)BE%K~=klxogsk!E#l){*RDxA2*i>;@*0A$O
z{?Rm_6r)5py^HB}twEO!8q&W19%ROH9*rc2Vdm+?_-A&U&+J6FUPBLBN-F6Hw}E}O
z*1$%8hoZqLZ~V#0rGD_4ss12}BU@yIdp4Bqc~y<vNGRoKvo4yoqp@kV-KBAuy(173
zh&BR}gBx>L99Ih(i$2bnA->Ac$8xXf-@=55|DfP&kWXND8e2gw<Np#ER{-)&9M)1p
zoYJgFD?{;oT09Ngnu?H*k?p04mQp<eSMt~@aQW<ScEK{aYTFVaBZ$`$ZR~G$1cVe$
z_wTU~wJI*Ilb|_JGSexGQ#qf_h^mYxrB<L7^w5r$=sAJQi(!Ep3yK~U_72g&HQIG0
z&bL`*#fjjH@nV#VqM%Vr@^x9Ep8Eb%v^}l&PIOlfj1DcN=4VVIq_BAV7CY*Q9ud`t
z$=yLg9=}^>*N?66H^qf43fK}>BkXl=HAO5*4bNs(EG<MrL?kg7tq22td45SA6jR@W
z@Es#1tSms)&Kb=JB`t+IJgHF0fpRGAI8b}>J_9>gKQYXo$Yi%~b>bx~UhCb3Jr{89
zySFSh00F{6tzncq)&uv74H~}+kw(jYo9(&U+!BJyV{0%u-Y6PD?<cyc<V`#&^(w&b
zX7x^-jEAhXb}zeU!VHV{ocgWI3PdqXn2jw}>$LBlkMcpfj}L4GH<EB>teIe@IZl|L
z#7Zm1>yKK!0_bZcxug=|HSM3GdtA!|+Vf*z2`zv7_;42}!ivB594gZ|$*v<UIvz8u
ziaH*;<ITSnYnH*=V@P8D-`Y|(hAIPDTt%VNn0<lhrd$;c8m#$!V8}%!6tJ++wVlv<
zhO$`mhL98$3xnGL8EHKkTRa{P<|rPG6bHH6PwG6xt1MdAx*>0Ek)5J21Y@8>Co4u9
z|9rDnvyzxPlQ+vbvfuHc2?VLY{dN>U#Me7wi96+NV5uFCXD8Ilb1udYNUijKgINPZ
zDW4*OZDI+Hp2Ly>8jB^4fm64o5FGZz(a#8>r!4INyt)wrecYWrjPUV%<%LiVW7GHv
zqk~>M#_(N!`YIRp!oL|H(Uu`Gly8h8jOY2ZhzY^zbPL4C7`E(5Su4&iDl4;6pOZZR
z0xU9$psZNF#TdW=U~;iwu5~cW2@7TGJ?DPpo8dM>2FrqmYPfQJ8NHReir_ldnhSLk
zY()gA+J+F_b@ULIwbV7x%un#Z<np^&N3?=7gJJUEz?<j}4r|1~PR9Tr91SfC?L7}E
zu@#c9CBwC``Y{49W>QVM@i-Y!VKZAfd&xCr`7PK|QN_d<q!njM<cUql`o~U~zG(NN
z3UTp~VC6NY7k5GQ-Piey_!JsN%=*Q779qpuN?+CKsbgiGVCZuCtPiR6b5-ZL3Ir#)
z6`UE-jW|hkXe+KUsbaPu^=V+ZnDnwek*YWIwou-Rm1?f4u3Rlx>?-$AeBo#}kJ}=K
zGpv~LVF83XUQDo}Vmw8szFLsxPg^xe(TsHE#;mr!8j?~1XCUGGV?kL_E=aOz5&N9h
z>ca)wI5mVW*Hf$aA*Cxv!M*H(02fQpi;0cK(!2<~M)nlpa*b?hg`_aFS<e^WtD|!U
z-8hs+WnIU4s9dYLAff6BNl{2d>(bXdQo-oFqU8c^vuyKr_cK3#6f>gGVWN{3gQEQ8
z*6B|S3OHWOoLnX-s*l}Wy%>kiZgqo%#qRD4=ACs&AxtY$os3ZQm<uYAo7(523SLF+
z@$*}MoAkGPb~Y={B<szc@WMc0;OR$JfLsC$*muVfoPlR3y#<G5EhS^Dx+OMOlQov<
zvenWWWwp|uS5zWSvElxgMPEi6l7bLEI9<#T$m#Bhd%nb5C%L+WJgV_=IVreFA!=p+
z0jj<PReOF8-WFNIHN-kmERg6Hs4<-X)Sfe!nx+}e9w=`zH^6WdAo61)U!ii<vr;%(
z8VI9iJsY1N7(QjC+=<NnOz5u}dB*gO6GRHf<sRRz!{TP-&@X*B!hrF{lC5|Vtrr5W
zY&!8S6fuM}E>uVv-MLdg1up<m5b_D!Oh;N!{)hN8-lXgo|83we(?TmugFa^nfujXN
z)Y7o>62OQEc=?V*fbcVqXsI4$e;fDzEraS%9FPU$1s5&-gw=hts26@h0+_lQa&2Av
z5IB&KH<prC{D#k~vx0+8zY<TOb>CBf(2|BrDf2f6ttRNidxlbd<r^N6XgBI=6gv+P
zk{xXwc%m@wasH+pgWvc#t%Q4%Tal@XT21GFIf>*DCd@kaN=t$i38&=IWXfJLP1gWb
zKFAL9k=Ny6)=?&;Si%ME^>7DiRJWK}yzR*;9ggZ8$Eztbq-tt{+9yKu9UsrGy4z=6
zc@XxD?6TwajSI<~r3`N712fL#eieBQG9X@0wpLB|*REI;7!Qw(DUI{!x-LGyWkYbC
z*?sE97DjK=GT1QX%UDHPAY4bE-wG3RR}yU(pz>uZKq4N^Nbb^e<8_=~5}B9CL`=kj
zFVrwq1%~#zS(KolN-?y2TdSwaZWNCMI{SJuF<Ow4U7CKDR0Ru5xx<QF^a$O)b!*4(
zkLJ>I$6>*dVRjl6C}l}p7vC-%i*x6_P=U4P(GQ;yt3ImXl_w&Z1*=6vGFny`f(|uT
zWK$8H(Ph(Q7`p9c2V{^eQ|`z)zhv#sR9g{6FDZ_=gV3G5H-?Q3yMn#p75?NxzSHw^
zg(Vo#BTRgu*xrVC9CvxclV(M;$EK#K$A#kzHFV=$jkRz+d8s*o1V#<a5BLN0tZWku
z>t-$L4Om7uv}9yepl#FJYg5aey73s0l&puhtaV65nA!>@$+mjYSaoexs^o@Jq1p+*
z(5uuCyDZXElV;-MoW{asap{Lmt4?Z9aS649Y#%Y0m2!RVE8bAbjSPnu5$M0DIA@Fe
zEL5D4M3Qj(Jan?i%~~`MsZS>f^p1LqqG4&37+D(f01K0E{J@Z6`}-JxFeiM-uv!1Z
z&^-(DCv5>qI5DR!cMfD7>Cyccy3pFD?zo76)M`l`D=qEwV=$iYsBL#tOwL@d?|dy{
z_g@ma-E#L34W^s=Md;^8?&|-cy`$JG4bx^vEtp@e9Gt!rG0eL`VhlDzHan#ih^I{Y
z42jx0gFYT}WbL?k(T^K`h8u3gg$};Gc5>NKG&`-M_w^4frS#$RyVmS}DV@9(k@&~#
zE&hI+%uCvE=aMbk^zX{HwOONyb4gz3oMaNy8Dd}gp6xJ%HtENA-Dyyp)o4Hriq=f<
z#5rNzp#6!j6py3mUQOF^xqM_1!?yuh67?a)WOFg$zR!ZI$K6SI5)2$xltN{YsU^n4
z?j85-qu_N|?P-wcl~ognzgUZ;kJIntq%D*bI=aS_DyQ!-C?T3`+Lhz6qBJc{Bl6#?
zb17F3KIMr#{FLx@t6dri8G&tx4Ku$ihQERGZ$7TbBi3|h72YhNh8uCWmt>IzB3?-#
zhn0SrmRBEb;SH{GK}d?Nw=8OH+=;}}nUOtPRr160alguWy>g?ppv(izGD_Tprk~vU
zk;O)g1gq^wn-(|U-Z7Pg!b_!z8zQ7waDJkgkgJPIhAX{ao%Y=yKMW+#XKD(HrG4(i
zZ<F}9za;5HMgO|{<+y?e(<zW&4`je*(OI(0#$(RO%o<YD1>+%9&{5nvfe2snF~$xY
znr9%KSMz+-l#?6ZHI2Z;akYQB|4MpY)2Wxv*Yvt9gJ1E5)-%U>ooqK!%m3!7MtwO^
zSmL+D#ED=ZJJ<5OK&U6Jb`m8gLSZ~{gfLa*P%Uu+Ra73!|1OTZ>Y;Vq(+m@8LwpF4
zS3uUh)DTP4h%#2tCV{DA6%uPIk~r@Su})_x_^^q4Y+>Cq>eOFDZe*JApPDmwGH<+V
zT_Mizs4~%7rBb0_%PqNIUfO_Tqa!4mNO_a+$j`ij0><eF!R&|$9E-2Z`K5;2Qwx<C
zrqgm(&*ABy4H2#HL=Ia}g|z!r6&b%HPFpd|D~<c1Ipidt;x5og6+z=UdZtipp52S5
z?DM{1wDs+W*jpy3Iww4zDCnsvKWmo#_O0u!yXz@gbvu7Mk@72Rzwfll*X3}5h_vwe
zbvq$zIC_<pV<L69mHbRx*Z3k(E6(Qz{OQ>0XScdgDZ`@1;*P#ph5<y&zF!@Jn8lNU
zz%hD)A2#e6(tumSD+$v?qQlYS-ya?}_Tkt4@t@}NReP{zt?yoUtp!Sa&3fOx)mZQY
z8MM76+(O1%O_5A5tL3d>IK;B#6M&6s9Bb~5{iV~sdma@BR+c)~!{B?LYHUih?oMz^
zV}R<9j{K=L-Uk(^#Nk{hKpoh~l(E!?SjT`h##d~hy2b_`Y~U)}P=pU3)8llhyrqRu
z-dh6Y8|jn8Wk?9{rO?&ISYeBGn5n;em~A-vSro$-8gGbV#j05|v8ik62HyRM)1i_m
zA%jITOsKUv@PGH+-vc)!EQq-<3N=Ixy&dehz|bT#EY~GzH9FyoNB)_V7VU=sjwHra
zeF^J^tKWB9ek94>^?TOTNxJ^HdOHYLtRqn+k$(z?4Yz<!B$D)nmim**nW5@V!s`r1
zMtGWgbAzSFi(GnVl7a->H2QAMB^K}`WY5EGHLhN(RV5u^fbNIC0A|yT@S2+uBB1wZ
z>asYQJX=gk_ipy$#r^{~lR2ef47HRRBY927kz)Tyxa;fE-QPrsYSGHJG95z%e9>tr
zJ{=2ij5~^`(A#(kOVDYlPm>iC6`|ilJ^IjWD-X*mmLZI$=VST+_Fu=fOg|INmCx~p
z1ZI&$dHZuxdGrZ)=h=6Um_CMYeOO|LirAW6hc809W~8O*K7=6w>a{;}=g5#x6YglO
za(bz3lV)a><M9GUqD$?djx{<%Q56M=y|g=;J?U20^%Z;yo8ahe9|SUR{Bn#6?~X|h
z`*}SO*NVyU=+cSBW33o-R*86r9#4qt2lvzHlwW3CncD%ycM2o}8W4p_bn1G6)WAAq
z<)S<HcF5HSjiVHe3<mn~*4C4~@AsZN!M8x(I(0;G3b;#fR4`{4VU?57C4rc`p&8uF
zmzhNKi;GzonzF4%w|f04tOr1VTwmwqn6WmJhT)MsU9X$ROrWs%%lJ+1gsdQm4(XEU
zY+R^>j_d(Yi^j!za;byWy$*!LxkWb`s78aj6;Bp_02r7FVTf5^m~;sHM)1AUAfe#o
zAzmut+Oj@T$T{!=;|x%D^P)0{Sa8`p!kp|1BV(Cb^<r=UMm6NDyM{xHqVDrLQ9wi?
zjQ|pC5wv`6b}>WX2|Y^+hhX_oP~fVQSA@I5fKXrD5@wkjwQaY67&?68fbN=Wq(qa6
zIU>NW<6KIj$>;(O@}xYd9=O^fvqT_qJ?Qu>SO7qd_GO>kq2h_fa9IQf29wt%;dcYS
zbOg2F0ZDo;qHb~WE?KhMwL0?ad6_*X$^lOO5^%xieGzBt=Dmt4wula8mC>+EOtiAy
z*%k8zXCa2~4Y2MFK9Q>9Gl<UfnFda#R|RTT@<K8@)T*1r$D)-JR1(Gse60k+OpVer
zQjn>fnbD<K%fh*79vhKFA`YAj1WNQ;hjbeCpEmR9BI)TpP1k1{KW4D6Um88GwT~_O
zV_i)II$o=zCdrM_;K%N68^vQO=e87R9tzV+g;6giMF|b!VJV}eEX~NE>E+ZNRJl@d
zXNi0nF?cPZuykKUFuQikS<aC1H5=l%g0qH%mrv#`m8%KOH_L0PyPO4bK8E6~K{c@8
z=DtZN*9Bot_z^#r7E%O8k%O+2c;r~8AwMm8E5^SBFaq8;Q1;P3zSJ3NmOVt;vvXU+
z*GK^!=YJIBl}OHrvTe{Em<Bg1QWtoNX{Cd8BDy>1n3M4OC`}QUmAeuhF|~r*(*hVf
zIvTq_Hzk2Ff{1PhPA~bZ<*`TgYx&sRSz(!y%nUkLNi!7*AVfx&J3^^NxCg^Kie@5G
z{OA3dyOU}PPSKCCPUD@;qf1Y=M+~xfGl!aN6BE7mSN#Z}r|%~nWygkBy8-zn8@znn
zKYaS#-jji-3@v{a!Fs2T%P?|75v}3}2^@m)s<wd~oD0TbOT-70M;ZiL8xmr5F(LfX
zG9{81wvP0s6QJfL&V8pZKh)cb9wdJ<)3jueR6JP2i5p!C)H-Q^H=N8;^w2Z<w};W#
zQFO41$|_DZv6HysuLv*C1OZBQo_s(d8Y$;RJHUPx`9!X*e7@ujm?5D9krzIqsYTp_
zPRQ}`zo;lY&M%q8HUa3JJ9&Q=?ZpikQKThvlvq@C)QSe4$k@UCK`v8h{*b#!;pBnr
zbuRfaGO;1V-d61~)}wC0RRky1bS4e0mg#GKHi6;|3m~3H$Il`4(7h0gkA<)E$V9u{
zAO-Vq&SH%sdCPrW#aR_v#c8Ee=jm+)aTEb6CXNPGN^=Z3ZbJ#1xec46{&7n*{hX1s
zzdLyP#1N%Cwt*Z8P17mH)A=RVI-l#$kl6D&LN>LKDjnmqrw4~V3Rl+4TuIDE@Vi%}
z(Y9T=g{FBKoK7+{O{q*i8eR=^TZdx;9f8TpIitqS72fsAmlJa)wHKIZETa^a58X8A
zhKH}&ZVW+G_T6+KzlEB80GT7C=jWep!w*Iihhy;7P!d(X7vF>~??jR|qkZ7?R9KP-
zor|c}sT=C0n&*AUu_988Xh#7GQzch}gmuO{<hdnd(fn<K$WIfMP%|JbsLr^tpvm1>
zo=s3}K#!w>;y@Z^nl0e%+&7NPIaB#LPfHf)n0Z1nR4ci!KzlO0N(Z$(CMi)8ODbkg
zR9iR7rp>V6mgf4L=3OOzu^iOC*b`4X9qX$I2#$)9`46fhLEO{L>SZqr2Ki{!Sly$_
z`m4uqz<4UI)1}ig4b94|X1$k$Sw`y4tPg=TJ9;Wd_P}*uHjcYr^rcO|mZyE-zgeBj
z<fgvi7sTWpp@q}jT^&PDHDXL7oF%gECG!2XuaSitm!+?jf0)c$fdnYFAgM#`)IYX9
z*<kC9oy`6FlMVO{-M=^X@bC%#=-}}fr|2yFlGy|P>ZHn(SNM%tZSq&^lXvFw-=ApR
zXEBZV_z*4fmB=SaOpNC6Yd!;W>O^ZGHtC6KY*n4;Rl$m<fa!azPg3gV_oB6l&e|+5
z>tH&94xVm^7#Qg(+xIFn`U4!L+NCy+7w!~V?WhhbU(;BGw2>;vg=(w>5L;Z_Okrl;
z*vGO>M28P{5or6ZsHoM<f<y+mhY^i48%UthoW0Au+R~Ty`}BGAQT87t^q7C8W=7(r
z9uSy#HS}B_m~O1S*wN^K36_Y1LN=rmHDD#R1Ip_c9O2->cRQNP-IESvQ8(p}_8{9l
zJZMKye%h)(Yc`X02et!+l5#HCj3!6QST%!Chst}M!E9y~wh+0pPAtkAQG1ckhN5R=
zO3kua>eY+Z3^g_K;V|5N5|_4dG49Jt8-fH-82p4lklVh*SaTwGSSH1pWSSft?D<KY
z#vcx~w~wMW=71DQzHfiV$Tl@lKhU^qzqZBylN~)gJbZ?r*12-6U-#j@>ElVmM*x&F
zpxfcoV}DL?P>fLWCYdzj!nU_LYd8%=3fSJ(vnq)szJPeEl@m$NNNP)ae(5wwx313%
zD7>5Poow|X0ZSw2fO6<sKB9H^tL(@zt(*Vr|NKAwAG7<4E1?}`(&Il&Zi27fe547j
zJK2F7?l<tzm-R{2$?os|!^9f>umAJ^`2YA{{@Z^<jHW~+)jQcUCoMa&V;b^h)bRg~
zhKEje!#EeSVki66o&Vqe=bLQvj{Bec?a=Z+{lBOp>||eL<LP;J@G|=8|Cv2pj7#^e
z%bo1=&;B>zm;clM7TtgE^+&pR$AByJqup?`{y$`g)iA$wOv&A2#fj6icm82QMt<`E
zY(SI0am5{U^L1K?JKdju;YMd4;PIGLSPq@v3Fp_ze)U<@43<pxai0*g^{Wz${8zW4
zCQsnnMP5xc5+@5<y06_~n=qmO{Qq`CbrRpKy3ipBx!`6;dZz3CSMdm+N%>266mswG
zbOb!CK;+`kcZ2yw_Lu+jKf0B2Z?!)8;Ww?;Cup}Rgfc2cs*eb!&71L(hZ{ft#{K0e
z_+SJ<&+4Jvxpk}i*{xe+36z*%ck_|23{BY3Pd>?+m<1jQ+;ex~Y;J1RmUi~l*N8_t
z6d-nc+(EzD-)4{9e0q-jhShkpoo&Gp+;0CyuGr<!$(B0QnR6hw;U#fv^?7<&B!W*l
zuC82vW+zL-8}V0v<d2VqLvCDoh&DQ*;d_o!-1Hg;s?q$t$0}{V;&3$@EFH1*_p1+D
z+IH=6^KI4~y12=Ek6zsP$^#fTeBUulCvyG67{B+SM^b8M{m}A(xIB>MB%#3&j~h;<
ze{@4n=B?hHIw{XSE%KAljCm3@T5h_Q?N$glZfD)E8)pQ8$DQnn)A)bbi35JuoEl%I
z58y1-o6A^qQrRmNt7fVOEnSo5vw}Q#T)i$Fv+~i@r&YC+eR^kQ^z@AtZ+_4O*UMo`
zvrR*wof1%08yMI-UkmwpC~r}X%9Bfjcu1dy>J#)5n`atk#$r`rJJc+`39vw?FGRt$
z^cCNC62xKx8!CQv%pJ$Y$qBz(>Rt-|vTmg0hJ1d@>8h6uK17*-pVUEwIg)nsV#1sy
z#vi1mKkyn#L}U_1gY4|lX%{6fuJ?5dSiF11DB>=!8i|)rB~wCECYOqpL>Z{*=){_|
z)ZSM`vOHiP9<WqhddWz8`-@N}Dk>OcBCh{dSH9IPCrI*wtyI6Uao-)k4Fn|+F%4Nv
zfjpn_B><+mzWY((780nyrmcEI0aan-a|a&rd3AOm=Ur<imGrMzMD(l}6|a%AS)L|^
zDa{j#Vi8UV@m69OlYvz%gkN2l4V!^bikfBByXO+I1LKPfgbs7JH%P;Ba&dt?=y^>s
zgn=TaRw#oq4aC$Wde#{B;<G@?c^#|`L+b2kX;CH!Yqybm1TZKWP#LVKNhn64)nkfT
zZ(RM^y_5H<+1Yk6>ApCSP_dWA@wQu$?E_Zi?ZU^?m%z>K7f^+?RB!x)rom$^3_8mk
zcQ$XSsbv!rQpLL40I^R;s7vKu+;$7HeX;!yKl*U#e|X23wf+J>EvB$2_MLv^nv}zT
zco!y@Pp4_{8vtTmuf6m6cywc)pGDn=-q&>Q`hMpqZGTQXF%4Hvb)8)@lu)5=L4$tl
zvEaY=EyUzw4hA3P%#u7sKIwRPh|_#j7mhbvsA5YpQ1#Vb|E=RvG0v9q02npY)&}dr
z1&W?YI2jTDD21NJD!BFMo?aB$s|m3rZw7T)pk?Z!<@T&Ea1znb31ME$!q9JF*m4l+
zfNl-^NqrYzn0PynoFbY>JQ^mAwcg(2>7}LD-#^C~BIREmwj5#f{Wf1Q7TZcKL`#?B
zRPsQ))%nO{TKq909(Sek^m*31ef!saYw5ooSq54#we-Dl<hnz;P{-(r#I+%;F*b@J
z^ogcyvYEoY+L}}Z5Vvm}Uq!;<BTf#UMoY>q_2rZk&MklwR%fnJbuPd+Ma)cGKEYTM
z`wbM;M3XNm-wiy93uEMLhY?c8R9=a&XZ(wq4QaIHb+55-FSv_aTac6wqg@pgYA&dT
zFM)vVSH~_-ia?W2-UIZE{u~V8g<MT@AN1$j)ZT^H5f|k}sdttM9wDUK2awvUbo>>v
zTs}#7j4<s?)+eT*uVfFiP2E!JqHe=9s^dpWof}wASf1q*s(JXp(4A~PLwrHwKTfbV
z^6VJt;K&v}UM*!#(y0&rblq}josa9(_aoi9?IAg17Gk&B=&b8je%}dqnCvI_QdS`J
zDa&Z4$fWbNeWsFtpf#-iLg2=(>)UtkcCJ`q<p4V##Wk=(=`7)_&>cSeymRf&(lN)~
zj*D^MDShxv{OXHeUrhzRTf6}0ElM9O;Np<JjNfe_)nuuwHGQq*tJx+K8ANN^h|tpE
zg6Z{o@77KoTxCbWxRX$(O+-84SM3yX1Ut@aL27M&;L2|8Z7bQc)IDOKSB&+FF~`y&
zlY(1MlPK(f`XG#vj3^4fv^tnk^fjr|;KZf&sTWG&orUzlkX3R^FIn|V)~pwzclQHX
zrvz;a`i&ca$7&7e9+q>h&=h$skjv;=Iz+_x`?_OXHC{nlxD!>~-}Y)Ji*nA;$^HX-
zOB#y+Po8WcOu5ev(onhpA1a>-fmX{?M%cr}dF3+-lJVJ#IkVx+TduEql&=(U0K@U=
z0q8`5%p097O>|9n27|5~Sh_UGl>WFzpL));Baf#Nfk6^;ZZs+lFH;7#V3ZbmP&Vy)
zc-i37f!4G+-DBE;U_v5}H7xAX#8!l#&rK){dCpOP2tK@`zc^0v>i!_>GmTME)fydz
zfOQSs&`wEVbR0(Fi}Wbx>WV&R-fexYo*Y*iEyfd$Qot*!Q@x1lrM|Uo>ICCi$fv|2
zWK0D*$CY@+3i8GbwPsZQ_EbMCxZzjR1tQXpVer@1dSIB0`M!5~M6_l4UUEd2#vKl;
zHV=!uViA0w?l3x0>56`(!OG#WXVu+xtN>?*go+M}$zrUXn9zzISje&ClT{=aon<17
z&?O1!TBPoej=YnEEH#&4q9?Nv_qW9M!ta>|GAiz>Pjr&Zvs`(5bUR-`{L44;I_h6@
zF<-my=GDCJJ7wM1p%>G2G^y8!YAyoMsp<Z5m^2E*_Ivp_X@h1_tArQ1kwEd9u0I>m
zb*3%lO#+fG?I54p7q7m>7)a}gZC>>m8G7~MEH&~r6y)Yh(v?Y)(XF#gv`xVgH<GD#
zeo*uLY-vvJncK&@Iw^f}UqfEd0+d&N-ilN<g^f{u?6l@JB)02Az@*u_ajYUVwQ72(
z>tO2R?KvyX5!LxxqU2^nu|p;@TvL2A5i!P(P*bv5DYdqsFN3r~Z4{L+wsb)693wMo
z1dkU%08NpE8o5e|{41!Ce-#DtudV9+RdlnBXv0jCc#j6*s|?xoPuX5wOdxZ{b%{A7
zH4=Q{w^st)I(&9(DU^*ElCo}!TjcwGQq8}q7P$JZ>fVXpr)ahGx;pi*ep^ehFTMPX
zkR?~VIBkxY<1OkPd{1yT70jeyAe@<?n2}&cx+wU&5=df3&q|dIaaEXwH$hMy2%!wr
zX68+bD#EjB)Cwnq6~9r9ILV6Aj=5P&{pN=LSj1cBU$QM=#dIxpuV7bG*6H;)h3>j4
z&)m!vG;302p?Yut@FQwQV6Bp+zWj{+r8$3=lkH0jTQ-jcjNIn1Zr{44Io@g?gf|_)
z-PXOlWQIBEb&6sONJP_u0Dp|$N15fN*UKQ}NvIp=_J~-scu2u`>~q?Pt)o>mC^csq
zx@w6R+%4wDct6jGMQ4yJdT>|kw46m<S{U-w?K!NW<8s2@YpyjhF&GIAnH+by-JAYb
z4UR+r3vR391;WhvArIzpi^b0K6AL-#tfr<A69+G>l-5FgU0AIG#}o?${`nb2&`qqc
zo0gZ-5|YPGn>aO4|JqSDF%D(Pyz#zrYoZHaIg)lJVpv2V9(EM7jseKU>8bmeWM^2$
zKQ{aV#o5J%eZn9k&4{ooS%bYL2YNCjHVoDS``tzEt|iG6fCf9EG|!bT$I~2Ag5uHP
zWd_~*(P#ogE=3beB&~Ic1;JR1lS(z4ctMMtN|+}LlMBXhi35GiL|2Wfl|(NKKu5CD
z1Q8^3eR>Bm^9qj_C$Eb6hlE+*unxM?x~r|*QBk0u?1WzT4RJW%-QNB4LSTbz#!`~~
zZ}dbys`$z6`ffi*%RX0&&gYHmy}i*^O0eoT&{`df1M!UVX;hXnfHZ5gc>Up_>o>fa
zY{i8CkmeDnkNe<mCzE;H8#(@?@$&B3%Y*Fc{)7AQ&3;=|fbNn~F4{su@99tRB@9nX
zmbB9Xc2<qd*Ll`Di{c_yfBD!Wd1#RL!CgQ+Bi!A~Aa5Dj?f-~DpMUy)fNmTkL}&4z
zS^C>g{tv%)k4ME%M{iO2gY&kcT#kLqvFiPVxjiq=!a_B^w(mGmaXOa_rjEbboEBc9
zawlqYLKKh+rrfMwI<n|L-}`p|=@Sg<lTSXe@9avwP~fBOKloWcw|oEo-oZityS+d3
zVV#{;L(oofatBfivcowN8^;0D&^V5ta}Wo6_n+?_Vi4~g!Jc^{SAPE~q-R`k8YDDv
zn}f6FHe0o}nO1Rleg|K9Tu%0@r2k#qDTMU#Ur-gr4v65<Lu{1zbVfjk+^*p>p+6qF
zzyOvG-#_v3`=>a7j#LT7Jdt@eHt0}Mc>OVy#W^s!OI~K4v&Sy+4u<-QR}5BBexx_O
zPU<Wp(^F9YH4}OTWA1SV_eBUVW-`(%W<YC@CGj1PXim3xbv%+P)|}qGq^-!+3pG(!
zv$K2xffOC06j*@su-e8Ip%2s^(Q9&uZ1u7`iEa#$l7PT)6X1_Lyk>gO(qMVRqD5Kz
zK_;uIIu4GPb?BO`Ti!!K@i#u!7-_&HT;pTf{1zT4jy9r(-4mu&Jn+l2xx4!SIL7!^
z&+%y`1b=GRyvEe5FgFHFktQT~<>wl-+Om1fop21i0Syn-aXnZyW<@L{+U!X=g*uxI
zl`w9hgZHz`#<)Ex`*05oc$NHuID28@BnW!62mqnUYN~5ay3xxG28>?-zmGU+K}sby
z96@5fS@&53oOSm|H#j(?Ob+seq`IVB06pcuH&#kmV8!3i2iqug;j3FTYFh-^Vg(ml
z^#v6#^xl-6Gv@f6J5AD!?WwUbJBjb@*3k;Blwwi9Ts=A+oE>l{jB`1f`K<o<QkAZ=
zzH}z=3)a~U`TVNytWcK0SlIqR+K1#?4H;M4s$e(~!Ix)aF;Z}RzAQG=e0VOEXw-gv
z6n9ME52tKqn}%q0=hmHD-P?ECAyyG{>dL?wg2`&g+uCkhevreevkS;7n&cjTP!EmP
z-P=umG@vbwQ=I~fkm;TXeiws{WPGAxqDHXBwr8m*OhA%)Il(p5F=wpQ;FmJoff&kP
zJbxr+8Xo1^R%`9pVO$cEnOf^1m*_X+JbiV3nUURGTLK(Q2iPD?bpR|IV5or2%r0d>
zt5;>!w{jvPm>O52RF6NZb;z>iNA0rbCt2mpXHz?hAa@TRW7V->2vhyBUfK~W7RvO;
z<rVCBAhL*Ptr(wU><e7n#Tx*&D5#flJB=}y(_1f-l{?;cjF^dQe{_~M(Qak;22uzB
zA+0{YIt))JSdC4Ru%B$cQhTGmqWU1DP(+N$VawjSS9pA)nn)om^@=wlVwQmtUn)Cd
zfQcZ_*P40iTCYEx?OrfdsZT(2fP;3gN7pd5KJcU)1QM>0X7}{g0CUJ}B7syci+SQ-
z`D8=SAB@!>G619`dMmdOJ|6{YwWM`i3VqF7$AeEcqVs^a{lx_EgTnC%sQ(Cut(f;1
zK4T7mPd<6q2|br5udeD{YUZ&l5NrEddqG9K3CLhVpIq^=7QeS)XVv|B^n-afUi#Rh
zn1N`dRAd>C*hyUKNbTRA4H#sUu>yqErtHAKs+rXK)k`j6O))}B*I24Sh$tBrC!;*V
zJ#8RVl#&o`l`IB+;}p9*S#Ck?(d6lDRE4tX!%EHFVUE$w5m=7kboc_4b3_Br=DZYk
zle)*X)qD}|K2S#%+z7(I@h{mf{7W@o{8Q)>|6&}Aq~+(6OBp<^#5X;Fi>m!PKuBo5
zJ}F`w+^3oSGbuPIt7aeguE3mNgl>6Jn=EAI3q-BmfH^EMdv7opt()hIF6s>;@I-0#
zf}`ig#-MwP39#?2%M^3C%n52mb19DtmI95)3887jp`ozaZ4nV9C=r0-3ged7>b?z<
z?2CO32}BNoG^6id*3~<ny<Qtpu$D6RNc0$^hbRs5Elt!GJ5G05$0}<}1$yK+svjjD
z7d~)MjSY%MdN!VzRPnu`5IZquid&25CUBCd-ZarICtd19!<z|&UUKtFsG^kCw)QIl
zV`5BGK}AA{`%o~c(>kNcbw$0`$yZ&cYybl(yh@i;0s}d3SOxqx#CQsE1LHMvlzGKK
zK^Jf+5BIYge?zx5jE7mD$=hB%z^louv@B*5imYQXn6~hW?&@SN84XMns}6KS9^$Gb
zP+hX66xs_fg*ut2AjpXbKt0Mhid$xG2n7P`Yl!6bt-cB<eb%<*<Lx_r1u=`BC3w1T
zZ4s|9lO^)hH7#kY%wO5HEM#D?gDcH;o(ErP*&8?+EuRmr>_@r!)%|F}L0@j?hr!zM
zh)>b=TDyB)oBMto=YHS3?83QnJh*lSSNCH#)0O=|P<T&2daYf(KH%H$>BrrKM?Va*
z_pP&*b{f2A-`95~>vK7WVDx_a>3HC;Z+Ogh6c}uv>!Y#CgDd;#=o#IC`t6uu@&fzm
z58h*j7D?fKmg=Jimy-jQx9Oi&)eoCDhL?_GmM2}QdDBKe?veb}{Sw^t>%me#WF!xY
zN!7{jEk2Bw-0p{@^ws>N<79`ugToK%^>c_8^ZwZ^pZ@9mPopasRm9>yj#2#_T*|Yk
ztNG7+ny?ecAhLgW3l=eWUneX13Ojl434Ko!&rz;q7w>5zos?%+a=7<#Kz8z8hWwr;
z(e7NqCEnA7ooo`oKsG3!ZM2(hT@!4`+OP1)I=SfSsXMCff2-5>$L-EfKKJg>KddfT
zy2gn;(J9irK0s#IkX@+(0FIRsjgMgpIE(?Xv<Hn)z`*lbHIAC6)C;U1AU?eBkba;i
zPBu`WEAA;rkB?K}`@j69asI)vZx|7Q^s$Fv<3ZNw!`S|y@IS94B<bVePu65*AN8L`
zS5fqrrjlXzz8*w$6ZK&#TK7l$7a8_DTxWtT-Ry?N=`KYg7SvM4SNUSfNk66pglwoy
z1_T)d1x;7i(H3veUDFK!w(VYqP{kk<-*+@Tx{oL%RR`qzwA?u|o(E%NJ;`4oGNyJa
z^T76+HU!-?fn%PF=R@^+C#L6OHV-?&cWilNWm=8KPGhuHr&cfIKV1+soNdo(6g5v_
z06)lQHDgS;3EXOROCWH1#pzP~v*{>5G2IC5M*`btxpDLJmfNdplAlzDGR}MA;P;O#
zYRi3dXJ-d-mGW^Y#!gEiWJI*G1FJKIp#{B4EJQ7DPuPi}WyY8Nlsvwo<tf6Kd9#x>
z8!>se*XxNz%MDG26*GuP8@*XaCZ#AaUqZ*k#^8=IZK@$|Yw&HPmk&sgpZDPs>wAU0
zzbF%2e)oliD(BxYX0D;=CCd3X2J!xps(G(riO`KW8n6VwKDrsCl_>9O5z2n>Xz(22
z*RG%mw>_-L2Wjv>U8S|`2En?IN>5yOUz;1L1C3Wh_DB4I-l%WH;5UA-_lB@$+r-Vm
z>jPU9S{w;oeL|N50btm-j?RE!_9w)d@^IS*=>In`{YZrhR1#gFl9mx!;<r1OL!F|6
zdo!qEv;<7i$X&2ZX^r1wl9P)!&C!V7Wl^=n8<BXGQitM_i_O1iZnjna6h~V|98FJ^
zT3;8%>i!Z^QuasOp=h|`@!4%!&|0m>vFU0RA!)>Q^Uc_bcY5k;fAH|!%#Io^^B4Qq
z;u}rtkrTAcP#x+tyEA$2NIAkw{wr8=#EhTIhn-j&B~nH>p($%LwwJP_b3-u=K*73%
zia3D?Eh}oe(x$g*oG-REexqBaDS!|_tdrQ2dd*ID9B0t{rzcbgI>1??N`KEFKz3n>
z?_^Ic+i8~VT7F;@(GbeB1|x7|EJ>BtLwBe-av!`W0nK5gFZSb_A^{K<Yb9Mh!@Yi9
zjfO}@yP_vW4wviRvZ9rp*9QHr_`GhDIyw=tUQ5XTrbn*^;Ed;$-r74X+Wz}E)_N&~
z0c!CMDeaqpuZ6*215FN<L{BMc!yk=$Fw^BzxzuA!4D3Djq9*>TrM`S=QtN~7d((jm
z-=3%3PYV71Tm4V0ZvET=kN@ib!_`qv1KN39inHNy{-&pJr-)~@e@P-n(fhYVJHmdm
ze_x%It8-xCgt9tN-<;%@v$Ac^$4XlToowoEcBd$2`*rrrNp}}Wm)#VPr`4Z4N-Fi-
z3B`G+X=@#nSTNwlaay8CDN36rJb5SUx+m_#n_~TFXMc0!_MK0ElkGu-(0`kSgl3LT
z2E0g#YH)(T`>#a_lz{2$PdnLVK1O!wpWJ_WTe$V|O#IK;=5u$L+^`rhXp!TNjH<xU
z8x`0q%?_tn_-}}Iy!8Jz^2pDx?UDcQe08+M2D2LEpK$;oD@g(gn$@N^LkYU0K@_n$
z@H)q}%vMpbQf$0xRGrI{z)v596~)&53tdsl%OWFnvwfBkl_W&bBJ><D{~(D}s&*{3
zvI-lU1ddw%U99;lx~CWKU(o7IF3o)V@4Tw%Q*^32Jsqvqfd4D@)5xx@y15w+XfX50
z9k}&;KJ@&eimI~ASPJmtv~vVTGRMT7`r!2V**%_RIy-;hBmMc(v4%HdJe}7qwF~s=
z6WYms6v&O8Y~!hDpSMvye6HEBI~LUS&Jo^H(>oiAzSv*!g4kGhwF>dl5^D7~)Yq8p
zAS0DKm-$uNc7OM)Q(YFpJdT?H>lld$8VPF~pF{-Hn{cFMHk~f};bzTV7#S>j(YT0E
z6O9T#-)wu7&IpD|gYU#aCg8=sZlpeSWAzoIYy-`HL)di5GEri!Gh2VkyTwGzrxvtK
z&D$4N5|~8n+eWf+@<U_y(1aDpf-i($<tK{ahDUg}V@3-B)|_6v<3c4pA;Y8lkM@_6
zmhYmTVJslJJv@4E(U^8e)N5T6b}yc-LFT?9vvoq`d5aHy?ZL$)TWn(r+q{Fj!|djd
z8_5aS*!j_xCt972Xi2VIk$3NIdVKi@;uzIEZMD+Bg(saCBVYme;5YGdCS}pQtgY__
ze@mvWR|U*aqaq8{Oi@7;QuL7Jj-(bhcSkIth@ytM^0gD9B|*}ilM0)pe8)CQxs4o+
zrm>M{sZNj4ZNYew7j&;!myQGWb@*VCCI*A0RWU}=;(Ko_EguG`Lz9E9e@IIH81?!J
zF}QOYQT(a6&FX9r9M|TRwwmaE`O!>&^b8X9Og?evZSzg`)mL9-H;?n#O)0*j#RZOj
z)HBB4@N>sFqdvg1?A;G6jpE;O9fTKeNAG-7RX4N0&EB~Gzswl$9opTA+TCNX>F;;b
ze&oZfC-W{8X?SzFqBcX~*3Z7e>WTBr{R!V0V~Z|#kT}+%=1AumpdaA`bPKcb>79+F
z48_rp8ypt6$fvj)0^cFv-=qd8h<Z*JlM?v=#m2iIq}w;_6R{3!JC&79I`-=={rI&;
z4?kx9Rj#*xD_(Io&CSa;mbLlHo#Yi;{AR1W&5m^oSUn{6MJDU{#{DDN0JpfGAaQWM
z`R1}6ZCt>HUOpZ?e~hToOK`ZvaG3WT4*jWKn3iLLBHX>~4|br`L4asle?q)fGkQ<W
zuIg-Z*IeVnB7Ppm2aT3`J+(Ov!Xa)yw&FLx0@u79bo0Vne09%G?Dn=d%{QkQY~MpE
z3DPL#6;V6Q_ikS%YS9Os+Ydbd;0a3njxBt8XDwIwG(NTKNk6cN|1P+V+XYQQkqBtT
zfo&2cw?#Ju`N?P1>~d*W?1#-^0lz7(iKVRwKgr4!lQT!X%sp(ZAktmJB+LsM&&3|e
zgg=RwoP`9Eb&)5S_$Q4;5ATVnJBr@>R-bUER#eKlJ_Y|flm1zm^o^fDw%Cewv}#+C
z&}p_2k!fQQwJ21ymPV?{Y8tU_yz4B#q4b)(pcK3DPK#PKcObm2RGYl5bh{y|<*%cM
zjzAl0#K<hIdMQs#P7NZezQS;*mEvlg^<}6%UUu|(ndN9MNyf~8RD7sWb>;>WBRd#B
z(X<|~RMn<csT<J=Kv6+xSgZ$c28dPyG8@UA2~{{$;W1ASbD1pRbyn!e#LQ5`@6H>T
zHM*xhL-}f9_r{gCz57k~(`<Yp(X7?FcWDmTj)$$4pb0o>4G11p8IZyxks&^&Qc#U#
zg>)Gd=vK>Vic$p_1Jl^9QrJo<1|C(M1<*4CSXNei_JM1SoWTHvCSXaTfBd>HfAv}P
zJasvsF)Mn{k<(lm7HsT#*7Q-yY+>{%g7{3k06wQyLsGyx*9&SLTh$mF@~|poX~o=P
z9&knuXkIB-6;`>9Rv90P4l>ZR{jhz|Ph4NQX(ogz9cxt<I;X3t$26#;Lg@l?rlnO1
zH+f9LjdY1X=)}%h{)Rqw1xquv+ELkG&s4P&Noz|}Z{gPcgr(%<mPd8Vj92Vi$#(t3
z?$PhzadK;N=jLzt+?`I7+3Y3W{%L`_JgQHJAeoL<`nh0ItC6NxA**bV58^nA+>3=w
zW^|1Q8z7rG165HEW@EtDj+5608{^9j$;RA(fqG-W4uJn?q{NacY<o5c^c2GA2s$(I
z0`gN@n_kNz)S+U5fRH&7HTb=YJP89zL$9HrAFpF0v{ZPV0knw2=gVP#5M3k;Aqj%R
zX+L7DXntA<Jjt{gNvxkSfDiiAXZ?Cj{>BY_q8opr>puY#UmX2g){T|GZsb~)I(DrP
z{<h4mL=G8hC|EBUbi5M89)X3%PIp3js3mxU=v-UoSM->7D^z6)7UOFqpw_*0SqSip
z#|JFyIAZ#&cw@=7tbDC*k{*zzfdb=5Y;io-a^T0ns57iO$FB+PIP+*hq0Ad6*9#yf
z-{q&Ta=RVskHao`g+BVBkL6xH=O=WZ0x-Ja9<gD-5nxZfd`f^qq7r1svkF&*0`6&W
zsdP*%WcsYLO>b1<?W*4D++*=l**qzLj@D}-Kdg`<VYOSuNfi63UvXQ>YT!7<lbcc=
z4ZxrXa@V`7*GeZTR>31*3ejzF0Q`)BJ{8!22I;g57^Ty-6uWfVN^1kkLm%sy_>U0j
z#HyethJBi+TOzlkCEg>V3zO3}M<3$MZ1=K<V3B&UnSU9P&p;A78NnyBu{#W5nHzG1
zL>wA$zJs1Ox65qwWYs&2|GFn6fWWUu8nh);;bREuAOJEPeqcZB;H(YU%YhRe1oV6-
z+fDJD#Q1(PyA-o=2ohzMwZ3Q4VN3A&<QWQ<uSGUm3vl%8(eD0}!@a*hR3~6M8eA)W
zFum+Wtp&{pZz{D71p=3WA-e~U`f-1*`3y7Po?75XqkBVsjlXdqOsSTUb+Uu|&vzep
z4<7Dz?*N`V{Q24KJMK)Koad9W29M(q4juty>Cr*FhJvGRaL`(l?gWnOQw1|yf&RtG
zNO#woM&qMVC*K|%p!VY1?7L#-F8j)H2zk`L&T_<K`M|E$4+(ue-F<QR@ZR3;^S$SY
zHvk!CcY3!FY7Ugrfvi*C9b00WIqhU{&5w{&-#0=P5(5r#F?n4&B~;>`CA`=A==dWV
zEvN`Ujiq69d^iq0=7Jl<N8@Y+w6)}zyj^!-uzIg_M195Z>MLBJpKZWtiw%&%%#=|W
z{FfDf+cD15mLr&aC-i54bnb>-@ij$g8o-bAchC2BA3g5ffBKkR{=u;%>GN`)AG1D*
zd-_bnN8~9~OynypCUeoA!v(}aZN)uET$Ot+xk+6np1IewD<Tn1=Kj6b)?P_nd=QO5
zb}#90Ag0{oA}Y?(+S+0n)b!I}n|u7INE7iK#EYjx>|Qu}#^<)@)wZ-6C~jG;s++h~
z75Sm84WF81gd8ZezL)_vej?E}0jQhb%jpng#qFihN-3C~>@i{9SOzf~X}Zb*MKXp~
zoNL9HFg~}zPHYsJVpvQ^)ujjD`)=W=Vp6acqQuN$ksnluzsp{u(h%{Rc6N3ya;eY#
zq?&YR6(g-V2z*+H7|O}iElPP-%rwaYv-coxOsq5dGL;|~C4t~?VI=N<Z?`*3>tMT%
zny6F`jxPfYN)Nbs*0eU!S8Y938ilh*#x+D<z+ps#&o)25b*m!<PrA6f+C4MP)rC`-
zUjgN92epo^dX8gvC7@df!;cb|q+VSAxc-_n8|!5WeRsnufqpbgMJMhfDr5oOndSiN
z^K$CGvp<RUvO}3@pv>a2Bl?}}*5{wPPg}8YMd+0smP4%dBoVym{-t{_hQTg5(~gcr
zjeSBdq4vD|{X`mqIdzlfS++DBt<b>1E6LqQ2m}Cc1U6;e0f2nO3=K~J@%Cv=dCm$*
zgUqkf{J+2mQ<1YF4Z~rt-`d)e1xLx4f$0+6d^#Nfgt*<&(t2L776nIcqhx!R$(YHO
z+r|83`_=6DvmQniINEB?>OLu7l+WSs^plO-Eg;7;GQya|{oPoak(>eC%I*^p(jOO&
zX23nw-u*afL~-Y!bu=oEb!Y1zTG2kE;MQoIeU<I~{qEyukM?l6$nTT7KdP!%i>YtI
z@-NLFUky)^pO7dfhA6{r_6)H6GwK7x(m<C-bv|=Sregx<j>lkej*&s(zvEV=nt(63
z*ZU@N`%kuxI69qFGzr(@M^Dr;NcZ18HE_7q8T(&zM=TSq$GxW6JNKbs1?Q}+hI}q=
zwqgm_|7v#e8;uiXuW;XZ##N@^5jV2dp~|5y$4&>@$<EGCX1%i7_M|_`kL&PPQS88y
zQA?50gl&Lv^a5$`q?EohtD@09EJow)=r;1hy>C${lBe=GpK|L%H-19-wESL>{dTg~
zw_B*hwiDiJSv4h$P1%|2qbqEnWxs@eofv{CEYtUOX#9F4#{Od}yNc4@Pi<;eJX8Y<
z89mljLvO-L+2&!wj*;!G-n!*QvJaiuqV7baTislGr8IM`uF3TvXzpYwxrBRWaV)=w
zpDc^oWR%0kvEMk56DS7q#e|t<{vxna9~&*b<RP4b_i7L;FZE8Qij<ZGl4Q}vi7(A^
zF{@T$FAo>A>ppmLkVV9xTBG)<HDqv|(ap)$!Ub#N|EdY>Ka&i~Iqo~f#r1UMvALV0
za3b9I;Ov(csTDrsQG~+>#A02i2weUn-p0qb{3;$id(v>+lvYCF*%L^iqOqurEFxb~
zJ>+(ri0LEyQU=p4r(X}up`dp3!BPhUah_ap8EgtK>_j3`TY=%?rNGweS7@W9>TkVn
zqvC)WYm&6ar6uZ!Z>3UABjHqQuFUtc3O(8In-rr_ZIq)0L=q~<gKQ%?l=1d5ZP1Jc
z@#L3?)8GDCtoCn0(_gKao2gU5dq>6DvY~|f(1hiNxV!>>KEL#^-`VE=@L9W|y*F$R
zg9z)@A07H6yhUQADdKDfe@&cq?Y?yr@BpuhNkB6vu5C4Q%w$+c`ku%SPMetN3u-fz
zY5(kI1D!xQ^p=(r4=x{J!F#R1O(jy?^=*;Kn?2~$_xHki_HAMMiy2G`-vEpksL@LP
zc%`v|W?3-1I2_`W_{eU{r6<f_+wJ|lI;lq6ZuKVRu&WmKZT6bjBkB{^#QlB1@;WsF
z8mP@#GOSFKt%&*nLo8eh-asz%Q;Uffy@JYsat`Bh9(4)P{VQIaPR`Fun(!w~EeA<%
z$7dqxNBcg>VKCWy>@6Ls#7(wKVf)f95Ivxwhp2Vh)e3VYx*IP5??N#?G74R;e%W0O
zukoTZ2(A0xVEH!W-r2pf{4Tk?n({#2(vw%VXciRWfMcU|$baT1?ljZ{)pknU)NOkG
z(aIKk6eXW^p@xbXbLtN5`BE*J<4eHw9nXehJu^*l4iFp1#!L8PYxQxflLnHxWi$b1
zygOoz8r=U*u$h@VD7MAUimp>d7sOr<{0GAZzr74)`j+%736>8>-~Z>UY<$@jty+F<
zr6*h)eJOu_-CA*Szsi1&<JgiTnEdA}(f60dFh_||m}DzHGv02Om!1Kk{pM<p-v%tW
zB*@1+xR#24Iid(kDPSD$2jvC?ZORonHY&S_H+nG%^sDY{LYL4YN&7!)MS$!WLO%4{
z#?T|VfFm^p#YByE^m7f{!jyXtpHkj*gLyu@<RIEiTtaOhLGEqW0bKV$(VI0=qdch-
zf>v>AL@%OiKnSyp(JSscwz?Tn{UynyK;(~cQLASfAh2vW_7O2ahH7W|1YXQJt7sM|
z{gTfvdo2K}yG<1n1Ut4<CBt!x8!Ay-*U;hVNTxJ&mg7<{45uv)Xz&wui%{!)1s56=
z<2t60I=2KMx>p5bL(XT7A7NDTrArX0oWsu)I-@k9{=a3Y5W%PMAq-MnTlk#eFE~zT
zkVT2*-$t+b3?hl`qr5~uveL2q>do}wP5U@S*I9*<o*psXudmJn<}=!Y4OOGD0a_>z
zRu`#)D&NR9%U;n_Y>F9VDP%auYYvPuwX_0`E10L`fJpEA58A|1c|`kxcW$(ItU%XA
z*b2v#h6`jG=BIOA!?3@ci)AzE6o!IzJ#%cbp6{^kYw^Zy8w)u44W5KkveZGK_hTn1
z(UNU3Ee&uf?wAuK2RJ!BS)-n7P|OFZnUOUFbWsa|->F!>arM&YODnH*u!}4<`AvVQ
z)0n#uvA{;PwF;j@tPZ|$jBLYt!Fo&*Tryqo=2Y=kDx~_OtQaVgN2eojEzcZLjPuDt
zH6}-P!kM}A_HAC$Hlbcid<1bv5ylE^=Z|fha>DE3;?;=8DDsRUMDZ84wj8r|rz$L6
z!p}e!`zeEf8-OIF;s7nCe7ob0Y<}`;QeC(qow=?&<ruNJyWWosUHcq{6DuTe@ZdY2
zZ3Tjg$3C~SWiwDtax|S4j^eQ=)l6a=@Al(oNt~e+1-4K?sUhx$IMDf-^?AUcCkya%
z60Ur6VD*s6Kv}sVuRQ{{4le|-9_o}hKYG4|bt`Ak6BP>8PKMr|P>$WH0#KLRg=~+a
z&}Uj?OasVt#5e138YI!s9SHTZ`K=~mmk>AAUsMW)7BDFy1RNafZ9i{H8~(sb+C~UQ
zYf%-C7cB$<;ul@u^r0%f_VDNjdCU)|EqSb+P}l5K#};A-@mOXVKa*&}Obk!ixIS}Y
z7s9}LL{;3(=hgA1)S}jLw%fmHg%E48Bht!=mpkz&<u(4%X%5P|)CZkpbn>J8)mgE6
z+Hv#@6Je5u*ec!s3j|oJ95c0sS(EmM_{;1s)=y!edwdXN&O5|hY>R<W)&|XcSch6c
zJ$lEVe>yCn1j#!`8@f;%KeXGeH~>D_TsN>_8_|mKAy;Zcr+1`({tz|r%M}`hM{z@6
zMqXR#-*J<8^`dXaPqq2GD9<a}ZLCbEL6l3|jJ%CxYyE?z^U!JOI^W227h<7Fe*w0o
z{?jgrz$4@e4|k6B179895u{jouP+g0dg?dh(R5@&oiLA%exV)G1D@j+whto&TO|Su
zI97?kgmVq~GM)V9y4P=7fn9%hBv-hX<MmC-0^VR`(uBtzm1&&hDk3??>hBpTOyX`C
zU8BN-CTj3t!;ksY?)QdfAwg@AR7#*U%aenV%lhLrpi08AXUPWM2m_=%>1oWHge7Jg
zdas8zGjoI8N_Jo3ZVAGL|7acsJx8@ksCf*ukAdO}-b~_&<tE)}@^VepYov4WY&7_|
zu+{Btl+g*1)P4tzt|J@)F>DJ8=7(L?ofLJBdKeasr4F&UJ1g&`#)vx@?do;D{+)zA
zlES1S1V>Y5<hI{m$SyzUJ%-FVxgX%D%YK2BB%bw+wlZMAUR+QM*n<aV6TqfoXwSvq
zAk1*kmTqMe9eFLrc6_7o*`#3JM_i+z4~4Cqods;;q=HQIw$;z~HM)t{NKgOx`7dC9
zwO&E`OCvIZN@%0AyqlfIPG0ZO__!{b2k;3yMnD*5hLY1;8s-s=F!z0g94i`Z^0|bQ
zdJgIRQ2|2r1i>@2GAPk8uj$#BHS;(22iP}B48-jKZ6H*h=m94Tx@M8YX%|&1N3em`
zV(-?fh;0#(<Kro?jtC4xJ=aj(#&~1k34}7RGgoJS`N#jP(@!E&Y?P|5h~lJ-z;I0E
zHKBYr#%+PYr2I>BfP^N0S4cc@Iw4;XQNPoe-glTXt`M#tt?w)h<0gm!`%-97^%+P`
z{i5R?Rc>($EnzBU%O(bht5}_k+`yVFrf^TqVSOtkc0*xPiG+cXAIAPSc|F(qVd#I;
zU|1UUCqrFI*n$A~)K+zL3{Ma46<c>vTFsr-A&@keR<iu$26erRpp;N^bk|^A2-dBE
zqdQsV7`a%o>bp-Kz`h;K9r0pQdDI0&CXEgQB(sW`+2PaY2H$GE_|w$9W$Q|Ex=Q^>
zA<*|xVvl}NHBo=M-0ty?wmp&BW8CoQyU`XH1TpqOG-7e3>a?hGdJBuLsS-dQmE4qu
zWlH%ptHIbNV1BXJ`AYJ`SWwR<*HR+#y}^$gPKcW?P(X1bXE@--yFuv5{jPeziiRD?
zy6@f%oJQLeCcQ&I@^F~)m{N~{)Vfb8Ss)Wmw_IsA_2sTJ5CX|4037Q_)UX(=H}Fe)
z3QyUBCOPKW`C^<;x*@P`R=h3?!p<U(GzMajk0^IgX4Vr7e0P~wv!N5z)e5*VXh#_Q
zHbdhGHRB2_E+6E1^s+cUs93>R=P9DqEu?tX{K03L#HJ8`YB3emeZvH4h7`Y2w?_1v
zGEM*u8+ofqEExAGb7XEr!x5_$ueqfN<|!c}(%5^zVgH)pYr#t1XvSiyUi`A08P-1~
z5`K{k!Ckc{3lChw<+y#T&o+H)6Q!DIe_b}{+Be%4Hy5F`S>Xz%k!W6Wlw$P=`Hml%
zS~b#lLof2blA=5-iY}b@**rgs%ugiL`CRNb<WBB>8D~T=3u}pN#Mzl6m_NHiPnlE*
zSg8{3o?aGxP3u#D{*YrM+(p^fCBzu!*NIKm<M*=xi)Nw`unThrHMoyEVyUA@ZU`qf
z`1y=35t>+$+-Uc`tOjmz$PlWSsWPBg3%z88Lb9Ec#9%4cf{5;4tiFJ1lfdKO6q_Ft
z@A8Xnm~p!dbq891+qLp}P43^{8&WF!bNBZ`{(Weqy-CZZT{g&<+Q}Xs9zM(5A~U$y
zvaI<pIgA})N}cS<?%_cvd;I&u!%lYad-u<8??3BgR#&5~aP}Ok5r<d;m5tG?$Fwg{
zrkf2D^3|f5J1!~9<L*x_B1+$eUwI;4&oowFK9EpBpgDtW#17l*C$STcZ&T^LoQmA1
zVfJFF$Og=hlRR2N_mRu%6(BGB>kSrY=4lpy9&ltdbevRg*yJ}Rs$UdQ$=HD&qHQTJ
zXD;22ddAGQiak^MQYbHQ@Jkuda><(fWLDL+`lETg3@e9OoUg?BRX80&!YC3>Et7lg
zINvccXfLg|G>Ng}jSqUYEM1FMvK1c~7sO8{C=Zz8Xrz@w?dk%3B&X;!S#Zt)^F|#X
zoJX!b&Y2Px_F4RpdbaY{ap21YzGF#_*sh7caS{r-KN3>Nhj`i1CBseN#s%sTkvg?%
z&}%<D1+mvcBKi>W*BCo>j9WMKC)?nA%{C8gCBKoC#3}EDQ``xMxD(EB#~<O2_s5<C
zQ2>3mwcH9n%A33nt0^cgDA-)Su|>(jm9z2$RyFi?j{8hfdtVm_XUMa`BT0q-d&o)^
zqzdoUnaGB~!NlT7fiwZa41z>~5lGX6zkM>$Q888kE>hs{KeX?$K^X81_{)>PKhzv{
zA7(pA1(9V1Py(-lR_nf*^gtZ)sd;sFHZrHNtN~3>dV8p%Wqxk%45Xl*d`EOfC0ycn
z%$rBY5&LV_5OX)hVmwuJ*bJNlN$_rQkoK%&Q7kwdVGU#|NmccE9*U%Ll)XrGW-!F1
zJa4sj?QP=_a-j!Obrg+D8B5Mr25{}6+Pzi2QK-gm_YSk|d|GZ_Z2#yP#yiF16E^f)
zcJP(>WNG>E_SVOcF1yP9Y?xZ{Y4vAyT;}b}SA=yLBR>qHEh9ACwNS%pkFzZ+=GB$0
zEw|b3mQbZ;6s`c_n9#+pnyz39uAFQK<^?ztW!C#v?jo`sdl`F_aE_UQZ!R@iR)y@A
zV6o+iL?ZfX(b^_owP+OSt%{Sho6`R5A#w5<83D<BHBSNMc)p_Kvx$e_uowo)EG=fI
ztje{uC3Dnocty0L#y1{=UFzcNmBf}4e<?w0fNmp*$5L53mx{`getnuu0`jq~VXhDT
z8kOG2?vHLniEdGzNhhJGpAAa1IUAF`ZR<RPe{nd3r(El;EgYk*1#ZWwgqIoP&E#|*
zuD`V-C;<ses;!QamjHYarABJY^)5HWkeA(w%}PgU#g&?u{M7^=jV}r=4neSIPF_1>
zV2*8{T=KZSyuh%8T+pG&nOyy^16kGKsxo1qop^{9>&swgY7u^=AUc*+B{>oOO1n7q
zhF9-Ptx@}a9V-#3C=5ihm)oglD$r|SGDLd2z#4KnEo_3`1DOAL9dnd%F+1b>EA6>{
zZiWVPuV+#)k%>qX;fOVYL`I7-?R$gQclz$fK>$(@Yf_z32{=rIpr-NgxZowdm_Rvj
z_ub%P+_%pd>oeKXmmy0Fq0<0&^gAdx@+Otd&-(5x6Q>x`HNg~47l4B3yN@OK@a{#q
z0qS;J>1tf$ZYsf)OYO-nFS~A^yM9CfqPIwlFKl^n4wD+gr$(2dF1gJ3Jcrprj7{vX
zlj7RQM!G#KMyGBsh5|tapJcQ)vMpf*G2bvfj8PxM6UK#a4z>nuAA}I|-|?y&kZ>8U
z_YYW5{FjbSa5Tc;Jh+#wAV4)tUw?cu{WxWPj2CZ&(4oiopGEx2uK`UHTU$uu93j1m
zvg0$28O=7`TkWl_fQf>f`q7Crv&d4Ula+`P(i^qip%Hir{yKN-;8s|}`4k_;-C5%i
zJk89@5YgO2r9XP~SaDS<M7z<K7V5LM2xR>jTBuj^6v0KH+49#F+y&CjCf`1~KgylL
z876VUzk7MP4dy|&P{*}e%;@ur7x{$G;Jj{&aoHWgBlmT}^f*pKk1a!Y-@ioCj-?es
zP0WrMJ~aU+whKprMY0}Jvo8c4S=_i=S+_2`-pD$->|lW`2SX%92?4UNIv#;^lOS8d
zjC7pW#DFfukW|x30edughZJVH1#T9b=$uT}%^nNkbClzJ0-8Q@?bf^!>@jsG3#Ja3
zS<F*k5-bQN23|gHNs8AB#i!y7#CJkudE1Vpb<{FqF9%%<HHMRrklzl2C_C9=I^<vY
z7Ls2aMR_Ee>vd{n6K2CM{BM_8eOcq84H3;s+!kCVyX^Kw=imjnYu3b(t&rsprU74B
zr`DhWzINR*JG5yM2qB7nXY3a3_LF9*2-$s@HDwN7>J$TKUqyz*wyDdnafU}GRSY9K
zx$14vZ|^^U`lQR{wD3TMJY70LGO(A|!u(69TX6z2@fj>n{ylxgw5~l#8x@%>vSS1r
zw4`A{5mx3VlO*3#UBDC!d1wu*S)Dy#alC4Fsnv1axkf16MSdv}iqfOM3fwd8qYT9<
zcr9Gf^%65h-oc4)h)Ceuz3kh{1o)$m=|m}(3J&&iYs&_`wbi;~+WXd)_U(3yI&yWE
zi8@a<8H$UZFb}kK*K`i~J&k%-cb~?o^9Gt%D&4m}b#Ed(NL@2)IJB=#NLC&1*=|%$
z0axFd0c8ClPU?qO#}8VfaN%rT{cgO@x?Nwp>1kxp*V)m2Xj`wk0WFGXJL<G<ht(xo
zRz8Wpxq&4FG6WQ~4I8Q<X^B}68D;ZIbr$=oQzlZe1$vB=Q?{X*IPw(D<r`6~J#d*J
z((x)FzNG&GPlbn*^U!q+RmJb>%<?z7eLGH;X^erMtxpw$!LdAUri3_!JG)*_Kjz+3
zVbxuyt<M6b?oM$l7miXTR#=oo4K~wjA;^AlM#_yQGhlL@+5m`TyL`l1PdJyBz3g`}
zOlU}Mke!mbP_m&|p*!~_mJ<0!U$5S)#sa@@gIOUw5cmC2wHQ*aTHZqp>olbV(>}Ch
z=GK<>ineY=#cU+|;f>M=_V#BrY}Nh)cf%6~xtBdy%*<sd35Phw6fbXTkefTl)48G3
zy?^Ip=CPzudzq^p7z;9<B?!&z7Z~>Pm>cLHX2svy@{PLQ0m(I4zl#^!U!wbNc(WXS
zO`YL`_Vr?Wd>Q({qk-F{dnlcegVb{gNk}q~#Ch4wBo2fs9DsIaL}+!-P{i4-{-P#`
zpDlssjNZ-T^LSS<ae9xr*gjfO<!7qL7LCGVX61y#nUJ2b%Whf8ai8R`OY<GF+18fc
zFHvdOxVCkVEH(B>ZEdkz*DOvXk_^a@M%0M`3b(fW*f1>aF?G@8F}nqPBjA(zK9h`E
z=W;_Rn+!8m-+m`dTUabC(JP`FKZvS+%TIkJzw+N-|5QTLF7xA)+js7Q>b@46z3f#~
z&pRTtBI0mzWuGN`jbIphlF`hYoZK?Fi(iU+xqh)K1`gKC4zX(BJ0g5es93!!E*&>=
z$|3@B#Q!2XnD~=L!OK+%u#|p3yWp)4ET1i$P8;7tt=40hWub4*s5fWsfY`*ST8m8=
zyu<<=Ffob})6wFr>l$|H*NSd;F`dL_0|P5!%+S^royYau&3g>p0aBNxB<7P^!YJ}f
zL}jsTYP8@X3^|H|@t6lWiyex(oU!6K9eZ$jd3^Om;I5^5lZrhLiux6htnpD%<>8SH
zm!U||{9y+npk0%i_$ZZ{Fz7?@4YrfZ+wmxog)*&~9ad(8&32cr)>JoAgDx@|h!+*r
z(%NwJETATcMbhe8K404X=%2dh?!+Nr=_ek)4NWq@{~OXwbFsLvG*Ye?Fk|^L+dP8*
z{`z7jf*BgC+mJNf@50RU%wwYPEJUqT%nOnzx<zLRBh%&IaR1(rAhLBcc85-<{X%cp
z=sD_wk*nx#uQ(`C*)Umv%xwW*=yt;y!5Vp_rtC|P+2nS#kHPd~Hu+oy-@)2;gGd;5
zoMoX*jAE3jiVXg$7BwsM^o;Gx0(iy`K4RhhxgzW%S{0_RrWJkCP_beb7SiB%%#)qq
z{U_Sdf#X50tH1o?|K+v6h(c4#9H<>j?q9&THZJ-s+&i#Y_^no6#jH+0F*i`%LP-W(
zXnFS?+!}xR$Nz$4bjBZ`PvuCnzl&kH0$krhf?IFClyThj&iUiY32ye70Zj`J_4$jN
z(u1wkU;gpG!ja7(T@bnnK|tliF#MM%>J8s^TP&?Ph`xTs8RC?9JaDNwD7o6juoxnM
zXfcV6>4G9I5@!UFlFeAKz=`ArL<w7Cy0gy}6EYWy5EZ%*LmtDTXe?=HxE_pwwsjEW
zHA}#;e-nF;7v*T)EhmX7GwAGUji;lP`@CVZzBzOYdfA8Ft&gbsn=<xL)Ykj5fvF-8
z%;@pvqV5)XJ@4MWxgm;|KP#u@WT+8$p(cdr5yU|<p;hZSET%G|mu@|8)>>tbRwZ=-
zu{H#5MAmk2Jma?;3B5$JKa8{P4o(&TqovG-tb23cA`X2LMZ<N}ffU6{>L@zdP%o{H
z8K;1dn(jO;jS@j(DBET{5;CC-rEby4@cdzb-jPKSVn({n5hQ^K)`DM8i2N`r#|Ln+
z=4Kt2r6+bbbF(fjo()w4!fTQ2zQH#V;r(EQNWcJiE*$D+J}PGOx{Ju9NiotxZ@E<9
z#db3?;;vVt7g`|<zHj^R)~)S(?*HGsd9!xQy>+{}?<9QqS39~QRIbIAoldQxTbjB&
zDl~{o4|^0iy6bTdf^>vv35)Lbno#I<**3N*I$5lZA$ol>EMJ$y1p{ncznWOJN(S{#
zja1UQf)`j2lL=!sJ$6d;lTELCVzoqnP`yCBS$2B878cS9B!EKfIfg&0is$m|8`D-A
zrq<%~4HVym2_}+Fh;4PcM)5iq_jewmj6o78Fyr@+m{{b;-seM1Gxu;-G_L0x7Jr)k
zjmDq0-f~~pLC7yd#}7bj+RMPb<`0$4eJN6rZwYP6dw4B5S$Ze2;aQ=*-@AN9NZq$i
zIiCl?;P{f4i~w5W09Zh$zXfsC*gFrM2sYqsXl9FFJ9j@JGhtj#xYq4e@7p(<?<3em
zJ=Fa4az9RBYIcI#Cmul<v~T=Og7bGL!<TtEe@?Eu^r}Vh6P7wJ=RSE&FKxds+|y)N
zgbHnC@q2S!CFY>Hs<K~bzqDI?fsKUASfdxhbK;oJ&{S4A{k~sg8$z-^X<J#3MnlUF
zRvz~^QDpST(Y5uJEMZ`xwv2HzSww#;M2i=<N)|9}EQ=U7Ua^qrE3%mJD}E`{hVh(`
zk{agaIlF&BqJjKtwv@?I1jnK+Mcho5!rH`35w}W~B5f>75jS436zMCn6!9y5DWZlX
z6o$k6O%yTz;WXkV{5yp9$XqS$f<>J?gJ#aaCCtsyE03zP+FoOgErBpv_YyV$!%Y_7
zd<R2`sPPSd4}6!TB@thm&HTI@T-#y<1NW6DG3S*hDJKuD8oWGiEIS%EUa_O;E5?t*
zD-kdD4aK>J)QP{z)Uo>!`zdqT1vp(}8u@e@&p?~37`$(YHP(^%6;_Zt(-%wcN!AHG
z1<3qIjGF<t58`YheDe1U%T2_n-TgG_2-(#o+%5BLb8pXIUtZ#C;O@5QIe)@h0foh1
zTO2X3mfvn|(Gs>NXz!8D(oHDV$O9bB4DL0vRP^|^x<XFQ73VG6u%I3(JiMWmTm+5C
z7Zr+)Jsn1FXLazyHKYH0DM#yCQZFB0a=@Yfo~h(E(l}C03?u2BSAR`15fshvbt#n#
zSJ-`NZ4`UgSyj0&mval;7zS#fSO*LuehuTjYM3%HsT{%xet;Pkels*>!%M`9*T|tf
z_KVo?4(et$Ot{xF4SN$WzYxP1r`EdK&&7k$nPH!W)Z&!3BA-p@Fan7(JgYi&j1-|N
z2#ou{=r!wODa5P3evB9T@aOIs05(scW{%2}%QV0&adu3lVSmbo>_lrJImQM=)5WBm
zM;#1Hr@+jHR3OXAYe&Z0-~Z~_<2!$NSU<bhrbG0P6$Deaun(jysFIO+FtmaYV0k_I
zwwym)9EXn2oI0^MX1}X(;<tr};y6V$w;=dYR2~LD;)Hx;w&7Lbl!$EP6)t};7bYkf
z0=70R1dDJeaiEUvEi9Rea<InRx#Q>*Pt+g66}W2nEb|(i|IC(!MHJcibzPm5p#({O
zRp6VZKS>!-8p4jXLSdnS4%zMkc~KAwByDxq;<hE?O{`8~I*6H0ryhd-ByY-{XFwEC
zV@Q+h%sw_O34}RO*uQ#I0k=#*BoU9f323~6@$`r+bmzV8P8H$ROqHJJ^(zg+Ckzm*
zjLr8@LlWuT!4w!$J7su)RKtymVRSU5C)+?^R}f4#2$!y)bwno9#4IOvaqB|(*p)G3
zlJ4oYdE?m#rkY`fst2>Hy7xU_9gQ~C{vgw_Px@yM!(PBKd%Fv|>S7PYEgSuQldjC&
zHMD33!YKA&R`@H$Tl(2^OLsA!o^!#0Vk5a4oW6u<J2B*ed8j;w0l0*dK<~Sw$fSf5
zw}FWHwhb591&rmyn#_F)t*ORZ5$P944I)O*C!yybHhpr!upd3=!fagq?grQDTg(u_
z1<OrjRARY&pc492YBffQWYr`()DypeWRy5bcrJnL$qC}u6p`Vkn7RQ$N^`rq?FAHT
z8^q5YEb`jj-&~c(a6lG!x}rsN-7`>#&_<)7(8u@qHgyeB2^u$y>>S-Sj{_;o6Az|~
z`CC$|=P6OPwFUY6f~Vqcx4WA8mmXQF6-FDPJKa}yuns2N+alcU`Zl%(y^G>_s>cF$
zuCw!~pVekII}x79kHU2@&yTNKjZU%%6trqzEy_<W44|46y%Yi`;4?_MXk>U0jioyE
zdLj%LN`Bxl9&g7W4>U!5YwLlsL?@F`Le;t_$jmx|K}4qVd4E<}9B))SDazx3nWUX<
zXGbVzc-@!a2dnv(q>AyqFEqGSE@iQR#?<6mi|+HjirU)@3$??Hs0q0_Z^wL~KPrI=
z>EF8{L6F_32})D3w?~?ektD4MG>&_n*f@@_Zp#h2ovFPI|9ns&<qViWg+vG+P&W&&
z9LQ02|N2G_v$T3uPN#(up6<}D9SQwg?0ERAWp$Sv9oRmXfYL2^5|n;$2tMr^ZVOp}
z{vt=8p%E-F?Gr~L@V#)9cNb@%zB{+>+)c8};Ys~*1JMId$i_EzvfH=c4Lno{NK>|~
z;}er+0_tE<BvInbRvYb^*}?Q)3Rh`^fv<;Zd3)|oNSk5Ke6#N#$;=z=WCivF|0aCI
zX9q(7<CvQ?kn+Y;KT(fPmqzV+YwNb?a7U)Wkw9<thqL@tgi=j1k0k&Cg8Ti9zk+GX
zxBJJJeR~@3aok#K>qePd0ZwA13MirqaPc5>!--FqlY9*H5h8F@6h_x&ZV0=XT8)bh
zpFFjpeicbb!jb_|2{da(pBdlq$NDO0GC>qe@YA9%IM%fRhckQ^_N<d_<WA*wH>^C_
z_#uu>;UXx6&QiXV_cKI-esBPLyPAgEyNRe!(8%FhnWLpY>t5_n>|znc<E0>NJ54}s
z5=>Pj<Z;IkltUVW2ybQGv=HFJDt*rye&AZOW+s#DnKf8zk!kU*C%H4grbPL`&AP1)
zB@Y`eYo_ou$a%f+W44e2fg|$)l>z5MLCsB^bPI4#z?e?7_^|iCqTMKC*g=<_nTHI<
zO!A~$z_EkR)_*U+R*o$gcy*^x&?sg4yzn%$w>B(CrUJt!W6nS6U}Cw7u}g2R0)mD~
z$YJ8Rs+lQuzsq0eTH@Z(JRw66C>KL?b6h&k5G=w1K6W4UME!GTNdr{rGvpiQfA``_
z<z%N4k%+oSucZ`ProJAj(MHije0Q7-orVEfuAEsreY@w=+YN4$ajyV=dEby4J*BCt
zz3gS--P3;L$5e!N4F^tYpqs0qLmVF8<RTY)n}9M>6{cKa-;)~XZkVTTXJQZ@jxem1
z$z;$YIVz1e$tSfy6X`i(EE%|)VAtf?;O_>Cm_fcEWUecrw>CJ$F`jp41=Tl;4<f5r
z^#+*6<LDsN+<fASpjFVkZI&h@V^K}|_OFEInCCdJd)a*pweh9Ggj(p`oH)L1FdKrT
zBYQ?dx8Btj!W}N9NLrP~0+|_3vb5RJkiwE`PSIzL%%XrWCf+3B-#+4&kVZbJ7`tKR
zknMii-p+33H)+m^tQ2%jy=Mq5;E@6VOdj{SAYXm;Rd%x&=BIZ*|Mc@;eNnjox|83;
zP4x+ya)P}))2|Y1@wjpVaz1Ij%iJAMWNUl9Jv_br`S5mrJRIJ-bNc!5)xC=PY*(AN
zp#5p?b*7IsnYk|dp^F<tZi@O0bp)ckS*hWL9AMWt$@O);^{Uw!|KT$WsQzuYt)@u?
z1>}(lm(m{EIM7mJL3m6k1hH^(qZKF!ke^cMq?eALY@N7X-eIYmf5c3ZA2wk@1*)e+
z@~_ID(G(5#Yu-*EXUP>5`*MzwHepp@7)|!UnrQ6Oojad#!DvKDAgCO-cAt8tHCr1s
zVFZoJiBlT8+DMOxD-SWqE-v?)hpId{Mp1z{jq{M%+4h8>+7;dkCZ$LW8#(qkuG*07
zmZZNej?uxf-?QdQ3l6b16ZZwyTZ`Hds8W+Xthh}TI(2_=bLNsw;&vCS`TOcX_35-S
zfEHi+J<Pdt3akfKXx+WimUrkGe8jh#W!*%W6JJKC?6$V7oBH3jwr*{0W%%FSxdhtb
zG%_FQf3lhvQMn6N?5L!8rP!i<@D4pHW?y-0dt|k0AY;A)G)a}@hI>~OI!pk*H_Ou|
zZ1Ttrk8~MYQDzXqOlEUC%w~jW$9Ov5F0?++&}MYWdmML^yKMlu;srn0Eb0%RMluBf
zW>PIgQ=>eDwMP{8bzP)%pU&fs&SMW4WID$yrcp%A8l%Qdh|t;hkJm4zAXdJv$|1d^
z!v)|%aaJ+9klz#=)beA{0GW=X){eI}9oeJoL5dg|UkvAN65~J7VRJmHlw$*5URVY*
z(7T^^`S?$AKDyOuSECLEE4bd)1Sq>U<m9p}D(oGt@YE`_)u`GxLG8EKg%(<*Vwz{?
zrMu*3Ct{ZMeS}hi)wtNktJQ3KUW|!3;C@H)C2LPY)SMC-;zTgjqHi~s=1@lTQ&;CR
zSsnRC7bEEU5!lLPR^~~@Qz<`NU8_gaW!Tch=FhgafQ5Deq?-uA!pq*`MonJ13)rjK
zijG9h@Y-$UiqdiQ#DFO8-L<F43WVzwK4B-?I37uDCW0{DaTL8M+D=Iip4D_g-D<w!
zau$=YqMvo$CD%PIxRc!zblzn(1*RF*@|iB{@?CZ*YdXc?hPKmR%Zcp5-R|w~?Y1AM
zR?4K!bJdu5FP-#;=S8nP9!o%NbvnOrRJuL9*aohp#n)cc{DRQH>$|htz4Q5a)Q*?x
zv$acw+5B@YRP3YfqR3Ks&lXCz(y1SKm8m&+b?vhKl}EUyosE{~HrpMQPJDTszbVIy
z@!F9>*6me!UDjPVWxP}>|MmK_-mUGb);)E9bgP=%dZT|>o!tHPt=qRg`v7YC=^y*G
zT8p3rhHx9pVsreWFtZPpAfMhgEXFKEEfFo}a>Ho8ENL??b(W^ysK6b}D@953krj3E
zZ+b%~5qJgkCCGqM1tTtaA;n0mSz->7o7ZC*ixQwpcCK(f1ZDQdFJ++jqVG}7qtNV&
zV>m788Nm9byn_>9h_Qb{sTIX*F4dMO^&XH)_aL9=Y0(G7WIWSq55MuPogUY7<h{A^
z+~fy-f<<*UI=(A?1LM$z^UYw6bSn!rf3vWv7Ovq#&1bHqY$ee*ulOthmh7|3V~xJ-
zTUtR3GpA<0dW>+Oj_t@!wh@y_XqS|P+mOl<9^_FiTWSvuJMXj7Ke{wZN=IfO_5~5r
z8VyoC0X6K>S}0aWMpCro;*}gMZ)XdM00J<-6U#ALB!mop!0UZrwFV+Nhw)@qoN`sk
z6p5o6%;3M9u!nnM9I&F7G|MiD+|u5^K7CaV`SP=zaOhGo+l_igc^zWj*V!$ti!k_8
zRkQI5m4+glHhcXUTiNZUHhsi>Y|2gMm~JB4C5?1tbOZWwg!?+FYR0bjeO*tTp)XHY
zXD<%F>3-pN3({LTVLi~W;Qbt2o;~eCk_XE-la(w#RA9ftVkhW_z1r1QA=Le(oRW<b
zl7T??k$FKoqUCBtcEn^ac6C2I<k|AMa!%mewm!52=Ff+P(xDiPDSqvm!7{YccVmsW
zA9h(fIf#CYNTBuuXPp%q6g;h3@s-$=XDI#eS1FPmZ%WYa$7g|N)(Fx+^;W!n>(}jG
zljUzC(r`-=7e<yR3dd~VLK&O<<^TGB`(OUse-z(F;3RM?+}r!+>GQqi`aL~;bARsn
zU=2WZZ?59@t41Oa=ZIe<(0SYLFBG^^xNt{m1MzJQ&@}_{V1GjJ(+(aG#L5Zib3FmJ
zJz~=!7u&{dB5n8H0Pzfkam1l7Pt^-(x3xTEW;xX9xswxM^P9*W!|6%cE_LiGV;mxT
zaqI}Q_CpR?jW*c9kNHk^yOSO7WOv>TvcLQf|4AF??pb?ajdT)83oE8H&@ucSJJ-sU
z9(!IEn4oYv$K};-^K}CZedg~ge>83UuHE*^vVM9lkkMcjlwN=K+g^Nztp1)aytQz$
z=ofnLHh$c#54cm39xt`1cq_x1fNE5U)hyIc^WM_<0yZmq3Cv6WDn%d^XiLj)sGm<4
z4fV6?o_urvwDB>Pu^y_mRGsn3>$O4GiBVnZk^~`A^Mo`mFZm`uxxPl%I5JMNd3IJg
z{pXiIhN55Z25r=<(j)yCNAVjws9lwk>PRH<6;IGZogVZ1l25t&&EekjY>-rlY!5ne
z@t3T4Oj@9asqUrJXjfD>d+rW>dL);d*}l8x4~j(aSbilUIYdb-3r!d_E^}|DZj*Sg
zQ^W2B2y++y_D*wPp`2Ir`QOH6@1km4&2lHH9sS=<wG;Ke0gmJ&Jt}brjs7S>h6kDI
z%Z>Qr6DOOxi<mAi5m*aHLQ)`srY#F#t4n+=pA^-iMqy(Fx`cS4`9+n!nKtJ}sXNR(
zh!6|nV3v+#lWSz{AR79hlS%xzG86j-V;G5ecL9)ekJL;3Gfd2F#4i+^%hsT*wMLqE
z)o6&uQ4H<Inj6y@g0J@^i#YP(_+Y{iNq-`49svnBlL&`C2UrZZZ{6xUjoC?!eJ7dq
zL!`Q=Dj&+uZrYJo+{oog9<#-dbiz&8N#cfE>bLPg<9Xbr4%hU^P$MWfpnkXV$e_DN
zC_sq^?nw8?)<_+d0-+EG|KO$TVJ`Ht7ZZWe4es@++xq5<x8zL=`V=K_(wL_zQwW3|
zbs2BY=}oG+cP&PNsLk~tNLVOWQ>zauxE;-N6;(#lm8(up7Kl8%??Ki>H6B}S23#IJ
zabHzByD_nUcLTtAm*71eP5qWQU&lrZ;2dj761&n|Z{Jqc8A1ncobew?Kf{@s&DXr2
z00A1b-7@h&JwIapx^2n0tWUP@0Qze&?N@Lm#(Uqy#PVu%bG^05NGPm+=2Rb&tH(4z
zj0{a83VC22*=AQJ3DpGlPxm_}W;$GwJ&S-!`I~I9uh45bNDVh;m=k4Eh?5o%uet^o
zM=b|6*(-oZY5~;rn4%(o$sD$}ga8A+fx#ec3VJ~5vn7b8>&U~?$uh#6zl=!ViE2qi
zpG=Si86(V9)CF=2$HfnXa)3#RRp+H2W&$;OPxKm}HrF_zo#5??fFxHQ#$^-<4>cEo
zl5TCiT>9ND!PoAG7&=NHHAs6M%&WzG=twZ+3q?o3Vc7I%7|Sb1uno{s^S$#{`G6A>
zd*3%t%z!MLBYz2YavR8@_hVSkKp54m{IkLmyZt68s3BW@AS4PC-X#?wMGp12O#o<K
zQ9=TdO)JR)p-sM3KL&$i62|flGDK(v`NW-yj2N~8t0jA}(UzkaV|YoVME&8bu}p?q
zuae8exP1vW5MVpm5T8ppD_H8I7^YE5cDXpYb#im=&%><fCY;kk7=zVaqTtxErqbK^
zOmcGF{K@C$8U+KkB#j!3Nsg%%TI3-lRea-VJ6UzHyc&kqhc2eXs6vAoocR?U#7jra
z6ifGz%Cm!5Jd%qppO&@2>*6T!rt86f520{yomcEi{K&V2Lk_$Nn>!d4BGp+4a@++g
z1_)$IyTh1JcQrT`tyLhxX8JuE7Ii7t4*CK9zSL3`BoIcHp2NR$WPrBfV>fnVu9WTD
zU-Yd-Kf=iK8=@P$;?A-1$r0V-+jSD#rLQ+nX%cY~FmX!3;FWzA#wMA7N%WBhVMS=F
z%^@&^a^H}A&z1)de&eSdeiv@DpRCxb*VXfl1s*12Q`JT=t3+7NUOe9izxgKSMI8m(
zb!%uxdm3F09zVJ|m9ra|n2p-%lr=7QMWahI^kO!bBu?)n_oV-bIs9ewfGw0CXPZ=~
zLR!;F5u!6;v}P>i(Zy=+ej`GJ4A0x?Xxi~z`=q!C0!sv$zB*#eX3yI%0l?M(6K^R{
z&$^)Q)>a2W;CFE+D$HsT7BorR(0IBgJ+DdL&=KB57{;L&DX^Te&gb_wsAu1lGl|6|
z0(+DMZ@hs5#0M^RavQn<gbyzrPfFBi|6Wz27GW~hT8u|}<%R6A9iX*ig>k7e(y{<9
zl>Tg1FvhS3SOOHKF#NlBGfQ^WdPYHGk7+-jPQ&O>SgMx}5szYgP_M)5*hi9Wx9&(n
z-EyOx&j|=#H#`^Vrv&C;TY}oR$+h}&nQ!Z-B+OMKJL6~K)tK@_-NkI=R5{J~xN2-k
zRHTaHFBANVe3=qET8Xr|N1N)X_sWH6%!QLX-CtW<ZABgQXIoPV_pq(3X%SK`R6*jE
zui$Y7&C<OH@lEMLE4NBe%zYz7`Ekd54<1Gur4)xK4VFW`Vi7TlrOfdV>K#fDLYTNw
zH^1<WBmQlnegBaO;wAhiv={b>OWX||SI^QyE*0tshr=5zc=xP$)2i3<&WRRF^|flU
z(U#ri>UwK&bi8XT_$NgngGL&nXf=)EF!roknOv<n>!nU2V1gS2pHQd}s-25fbZ13`
zMP@VG$(|qf{2=M*fGY%j8`$uo9GZPuf)g|y9<?9hANV2$v!kKy_?siyLHJ`!f+e=M
zb#zHBw6ILc(6h~y^?_uJ;DpfH&G>nhby6-q|EsWZ`IO^~>*OoXz>Q0n6SD<n4<HOj
z+=;TW2(!wmQEWyV+bN4Ml}*G=Uio==`mQY^<LMz2rEwM>hEQM@h3jn|aYlF+%?h#`
zT*`GkPR<o@)vUK=`+1EQZPNNKf()wpIT2DsTD{Y|6)lkl-Uz>sx`DE=9SMvdpxMW^
zCchqWRJv#a*JAW3rT*Mp-n_5y50Tkxc&Qaw+uGuOX|){JyRNOKE59V|q8=O~9c60;
z8mifo1xFs3aEBwyFADwp`nY(`X$ddqJRV=lLFi-$BFA%4$AVa@k4P@Heg$dRdYa;I
zgr`>0k{mTYYv3jB^5HQ+;4MS4IVQ-z;kp_!_k;rw+_9nLj)w)xHa*eWlITsE2lf;y
zwCNzMFoc=wByHif7H^xd?({E?QlePCv4o7%>#F%qa#zJQ-xVzq9|v?%dU>&22PkcY
zEgl9>(?Mf9ZyniX)BLWPTV&)TYC8+0aHNVL`>ERrx##$A8Lm6+Wi`|sFJ^+N-msJ1
z`80Eys`?w1V1DH;&r5k?+tFKj1?#|9OpD5t-a{ceLE>c;`*s5NJrv#M#Vr?<n?#kJ
zX|*E-TsIG}M(0>3mKk{zn^aP)#p_vT%&0R|TkuK^GqEq}3OEkC6naClkl&SKXh1~v
z6|ZaEz<w$N_++Owj|qa}f5Dx<0e|;K_BPvKYE{jDx^?YGe@e*0M%<B`V*CLOsOXD)
z5&vT24D__>R~r11acM0ru>?XMNa5tD!qd2(nV6ZpPFn1Oj&@cTy4IouN)w$Z`YM9j
zaL4c6Z(7$14Oq2RUa+!41(C5N(AR2$5d9K#trTtYl=XGAQn>LKkX~0;B*qywU>MZ)
z9rvHx%F4RZvAM*$)^S(f>xS3b*``!R^9qS~5x&@O?3*{mw6*9kyu%FR03@{O{gK1B
z{^{=CI(7E$9v)mH=kf^cB5mDu0|dFYLh#ks&8(EX>NMokB32(!n`8W14O4csaQYP*
zy308c4`Jz^LrjM8b7CMMb+47oNK#nWxbb86y@mqN7?|`x{VQHI$)HZ!DBi+y2B*79
z(6H4?5ISw0)G?F}SO7Vsb_;)5Hs>n3xFutvAh7-WXa{HW2aP(i3u1r?xNWnn@er-h
zOx%p`@m|XkAEQzdb!_jl8ab+mySZ-$m=o5+F}HQQ*Lo`HW}zrWSx0VdhG^(=^&-P$
zx&&IZPwcAvKr!#c_5mY3#dq^1e3G~~x;(sVLP8QX-rYRKji_!@bIoOiK+6CO>OZPy
zSR%j;tHtVpXdi&C0VvMRS`v6AW=775sK5|~CCdF;tTu#Hk+}{lRw0_7dyu9m#@o2&
zE^03Q#Bg~lcOn$9qUKgK59;H(@5#l)j!Ysq!dMs7PJY0yoE&vFKQ{$l)cx}!2e#91
zce3XNz$3r32sHWMqaVJOc7kL3+w|oKu=KZyu|UlM$fXa#gV`^>`pSs~?oe%5YQ_3s
zMAQPBYiP%y{ToY<aFb_*rd{6=OUxyWLsJ1Pe`H*rrKuzNygJrFS%|CaUa5eQ-XOvd
zyPm`wOEaf8+^j89^rA@o((#~7Ry4MuJJkfuF}X*Z?_kUp+uBKKK*k;VVUovH^uE-$
z-`<q0u6GcU8QCbJER)|A^8+HowvPNin>Jd#1M$CIf5HB-m<yyV{S_1h0+VChpI(hH
z8jx+CkZ)WR&`oM(rHXUw)02()_FB)P*I*^84L2AS%cIKko<q;8Y22%zcVC>-URBP8
zqgkL+v_Lg}gy09JsM*kzPU6m(@ht8{&e`)vll{Y$<-rm>e1OfV!(u;`bs>Vbz3J9a
zk}dX6d3RV|wX{N<PQe&J`=Gn=SpP?AtMFf^5gIC@aOI8*RilQvmCIBkW@Etq;zRB@
zRWVuOOI|>fjongg;*h%UiLPUpVB4;jI_O#H=SRiqJahVXwLrXDuLUeOu7m$9U6`~4
zsGgsyu)QpH8UqnjFvqJ=yu@fgToyE-4CSK%0QI(;9ifQMvFe{7XRw6XhmriYy#_(=
zBPe0*E*qUHG?W_8)!VDzl<w@zEv#w@q@M?pHh&<W8BmH07S<9ha4{*J+R<AXj-1M8
z|8~NWpUQ1)_0!9VFXQ!bx`*6neeJJb2A3HWk>#&>U1am%ZW~}wkw-8rZI!-<(-Po!
zs6a^l>!X9ap&o`sHpHPQ+x6W5HCOsbXI~4KDSgvv9i>T}&I%dMVnW<U9N^aOylJV|
zV2a2_FN5ytpxfv&r$Ai1aV)4V<)E^g|37<wx825-rHP`~$)|{-vx)!{0aB9fw5gwL
zN}_D0^_L=LrIY0W1b`qJ7KlJ10MWGNGx};jK#x7fzB$)@eeTZvK4bKQ)RUa`eRIyW
zRs;Zwa=N;E*QngR%Typ@#ftSa*Zlpy)#i#-){{BZREXHI5{W(8d+zh+`Vwb<Wk1Mj
za3@B=vqX}@fu|y>tbn>Pizt(WOY%-QqOL77FV2;MsTA>2XYz^s)fgC`&_al1#0`9u
zw;s&!X(&tMgjS<G>;UjZU!1S`Rcj8r6>e7`63)(Gt7q=hK)D_hbpfxwfb!r3JV7=T
zT=UAQ?gVb5QMi76!a`iXw#8gr|1@mJH|tjODscutv3w$!%_r~5u@eolo<IA%r~j<!
z>NQy0pmxl~scdheNYbio?*4Usa<**D^195X=;MTLl?)cB8|@_fKS9zy9Fw$-&CqfE
z)uSW5<==DV2~-YFKxh0yF1S9rc1k^8E#(cCUT2-37}ak?4bR=GlX5SGA`=ohZq<FK
zEonCUXSaJ9{}p>gt=!<0pdoXV&P|J{JDes80bHPNwp&kpY_5pOX?Z3P(sB~q>V+w_
z_2)!cFS=1(7B^{A_?3l5)FAw=+5s@<^DLg}Xql?~!}#CY{i=9K0O*h_1t+=`S~yJ)
zfYGw}il1_Ma*wM~(pV-}F~=J3QC!Hy6jqLGg>eZ5w9-D2ZW{{fRTU9b|9#<pbn`EC
z9GZXzbJdAiYD;zxkBwRWgEDYJ)5GdBG7BhFu_88bhyPpLSP_j32YxE;gt3t<piBDx
zaZD_xi4KKk^=qHu>ykkAiX7PB?2wOg%l63jkD@)gzRtyw?zDJDZVEDXjTIS8=o<Nq
zgfeu)4FI=?IpShxa#<<)d9prvS7l)bv?RD!0QkJUE7QdUDr&v%^V|v=>4x;1=;ZpE
z8NA3Joy+S=bKsX2qRtt=menYJFNdj*lkIhtLSxf>F4uz#6xgw_q;lhiu*{V^dHmo0
z%(2IjYl&quom*WZyl|tWZ!*`MYd!(?=E9joCkS_6PGmcP#X;&dv27TV!t7pL_<Bm=
z3|t<X<;_Wu`+z5|(+~0scDLhmGi?x6z4o@0pUsi15sMFAItwS-W*Zy#{wYm?&yeSn
z>fGH(7T|M+QTLKZ2fjzL@P)Lrn5<gu4{9sj(ziGN3i)trH-UV?C~x9eI|IV0I~8Yf
z<X`%zdxPnFo`Uw}tK^d}zxd;)IPSEkC~!$11ajW3nAdj#)iFN8Iw4PAQxCMKNiBVO
zoqAcs^c-iUomd|jg<4Ky%^x~s5+qU)d2+Z%Y@Ao7vaUNaLPotWjBuw$TdVTG%8nDD
zj+Hscn=DCy#*_tyu3;$MZ9Jdzth$O0>0%zd`vNP&A};S?QY79Gz&s3Kqshsfo)407
zP8V~xZ*d{bc&emXmGW{MNU7DG(yTrfUJ!jI_XU1}6H2sI^~MX0u$QX<)K|hLk9>8m
zNdomm&bgPZ-Hjt-|Bk2*8z8i5wX6Tkt+LS7Sm<WSi6PD3`m*N)=Xp<$i{1>vU{*K&
zsyl5o)ED`n;yBa%0da^3;G!yKIt<#yX@;UG%ADXIiB1@D@r3V0RDA4Y(=1}9`6-N#
zTaIoq%DEn!b2vv?+sQtvvWJJfQl>TyM56onZn7_md?&bFJUfV1vZKHhjxxAM4Ux5+
zZ2Y|OyUpqj2<TB?u`@3LXr6CIwa0;jF$#2UZ0zmrK`VmMq9%pwTyzIJ(Wn^(H_^4{
z9kLKaclCx!)MSSznP|V<F|T&saQ4X9Jl5pd302^xkQbGOqvP}r2x&%j0aDFx(X1Zf
z6StJ-Y*jmk@}|o8s*VbPy;~`glrSsDdW=cmsrbk~m&<+y#5?4eWeEf(bNig-kiY^N
zsw*=zC4(&O`Ig)m6hddJY8^jabi0N%5Uo5dLs3^pM=;9!ZqXvcA?kLm!z|3{FLrp_
z&i3}sc3;2)c~cdo1D(rp)<4@JcKa>8xj1!qQO^T%AH+ake(zHV;J0%IIkHh2e=HC@
zBnRnMUkO^ouPc?db{9m7-#6Ku{q49XH5c_3SA2I^y@TKDT=zBKgUziF?liS*-%28h
z7+pTQ$ZbYZ$EsZCi~PVcXX+xBF41EJ3&|hHQAIS9)R1g|kvjJI9eB^nE4Mc$k}u~4
zYS1Lzl)s#nKT=7%lTPtxJ87A&_1G<|#}CbdZ3}C|>a9!m2K^}}66yXh1%<=vhqfY8
z2Fb-J<RtLJaV|KCJo82jg^9Wy28)9Xtniu7kC!2z2{<}E{!CjM<wH`~=#e4g%GEL{
zwL#w4iGCL5zDbdf2qkWAN@9ploK|{9<NL}TEI%f#{`R(84t@TgKjHuUoOK4j^pkG4
z8+|CEK$OtaaxA1qo<x<QzW&dKPX0^ZR9QPVoPdV*=PSX6-ss6^Ta|}3ce0%yq&#Cx
zQ8H*Y(J6ck#EnoTZX>^eC78i&?8a4g6~~o--ZpL=;0K)T{LG8L=&ocx-TB2?a69c}
ztF~>oI*DDlEf>D;(}m@WmejV>!N=5J&DB}7ucZVtWgZAS!Mj8Rpx7;9;zz3!A>y4^
zCl9Cc%m83x(Rg`YYPsJE??*@(;2pJ%4gtbKZUS`Si1kU#+Q{4dN(1f4CB;A8rgUbS
zi5sVef*?>}EG0uP5J`x#EhREto;^;O<jK?g%ssPV(GcUIr&V8x`)80_lK@vItr-=d
zRVPri)(HPj;?2mx>%U1~Az!Atf<I-A;KCn+n_81))C0)4%qq9gYVXz+UYt!>w@T3`
z4cerynsDSM`hzHWUe0womEa;8mO_EXhaJxVQ0e}NW>P1M)^B4T1Jy>D(JGo!XYQak
zh>ivUYdrK-S2YHL?cGrg84o+f1%JLiRBa+Kj1TGHcNbLO^O`wBH#!GiTlQWYW}G{X
zdeT&&y<%w=4I9<xX4e=oxUVPosrACgW0!{;mTMZ2J9~DgHd6mw8Hea|YhUSX`0#m3
ze-5v51Y{ZQ^Vf$->y*5P)afN%tnd<+po;u=CwX-AEka=z@I`czmye%lOu}gue_!N!
zTe~)5)*1QWFM7PCC*VQ^nS-N{V<z9EpL;+;ymRl^bh5_sqM4Z`jS4YF?2)Ec5$Z>j
z&p`{E-4qiJigC)2l%OM|JTRc`t31J~5w8@}1#|e!L4oz|l-LOr6u1Y&S!z8AN{-rB
z7GH6;D&pG!{PV{g!{)}FSV59!<HTDoCY)nxq2N8%qLs?S8FBCpbWd8S&%#<G&P@eh
zAkNygtw0lT`|~oJO&FbgWerHuh^nRT5T(E{r+FcaB|a4aETL}YXCpt(%y06htu8Dm
z0CP!eic(UvWR(MJKcCEmvkP|QO|8{-ENWiS+b?goUYE0`t6F1oSpa1{y7NM<W=6K8
zGz_!tO~fh~z$+X5-``Hfsd@DH8=nzl+X^vkcn-oCNaiW!vHBF4_V@bLp{B=(QYxs6
z%)oP3kvt=J-qRs@uyfCS&;x39a0c}K4}JAYO1Pa2Fu{RpBf8p=idBP10Wu!)i|PEz
z3js3(mp#BvJ>=B&<8kp6ZT4IghX@W+b7RVv?bI6R*a;2Kd^JYRpAv;lX@zWD@|Y&X
zsEWwe)^a;r?IihReec(|a&hHPoaOeGhLdAGO18pNTe2>W3OFp)s<K$<t?nN`{i3_u
z5fzWwF`AO-WI~l!5wM?%05^+5k1GoY(t%`y#Omr0cNwXc(uipO_31#8UgiEGR8g$?
zLufAMWok4!BkU9J^)5!(uBE6Z7nBotPR?%?txgdmgLY)(Zq<ft56XgO+D(#Gs~D?)
zLlWFq%^_DIbl!TqYt|U+-E6<Lsyp}jini|4Qai7Kh?SoYH_mi110I31buWr}L#Ft|
z(H62ylm2sO`1F&Vq>na<-`a1xsSI>$hWeTLEq*Ar^^pRpF$pHf2*G5fr(uLxL(=c-
zCi(r((!wv{uRebDS@h!q3hr1Ev7=QX2Ck*;WMm_UE0&;Hw%GXM5xu<{*&%j_?oSao
zNQ)VdH3!@WQW#2IA6KQvOG7(YO6m+i9RXp5`{-5=g0_e0SiO_`ZGIFJl&ufk(PG<)
z9F&8vD#!0~e;NpF8ahSai)u3J?kR>&b(wKjXffiYR>2vaeZZ(gn!Uw?#Z&+Jou0q2
zOwBDU$-m;%j8aDWSgl8Qo^TuE>!J&ih}Mrz9j~UJgyp5;X9+9hc2DW$cjlG;8Nl55
z>SgJuU0D91S6$N=aU6ZPA0paAU)q`(U}%8=B{pSK(7DGxPn0;88tLTV^$`i`dzBRF
z3#X^Wun-xj0HzA#>5*mg2{X>HJKQTI+;4?|QPL9L%i1U9#E2(J0G4A|VFm3)k=kTl
z%<@{lWm#S17bT*dRj6`A)G*3qa$602tjq$rK*IV=6{0{Q&HTdR!kt8{APpV|n4kh#
z*66G*pye({yziRzsh+O-kY|RIuHcl$4!~p{udq3bmdSBQ)3DqS^ud;RJSx#>L?7?E
zlF7IGlskC^z6!!7QE&^@5uon>Zf7TXYASQ|ik?p_#@7Xe)Q#Us7I*EQ`$=}0A-T~n
zcp12sdbqguk<+aYkBId;bI&2s{MZ?Xg8n*dxtmtJ0NcjhtdDi&zpeNVd(M#mn@{uQ
z?o(gP8V15R`>7b~lEPNl_}y4-&`0t#lYQ2GpsbAMXV!Wm4>lU?!XR!T&0RI)|D28g
z&1OUOXJ_S*dYRds6xEl4up-w@8QIuyDvfgRI(_eVaTi>7V?C>`ojD`;cc0u~$_H1H
zxq~@J{Xt{GS19PUQQ$LEr{T<Nb76D0wV0o#Uu?D8QsDB*2PS4g2|wbYozM384DFB=
z2cFzh?+u!Xe%w<m@LCV$C*qK~nK7RPjcYY>KkN(=7D(|0J<4Y+I}V3Z2mjHuxSH>&
zV?MAG@9YwzU$nR=UGm1>0XPPZY30`aiq7;=waLPEuy_4>@%IIJeNANv@8p;7`4-5C
z>2_K@bAOaK<j!y3>aX5EE8hp-3PRlVw|Sq!Ny9pMeJE-t)#RSP-dhw6E^eIo>M+ad
z&e^>+9^2)`MITq~Htgz%QTY_FVffXPFKf-32B)_Gl^zTyw!CE>z;C)54kby1eVApJ
zJx$iF_oR70I>VH2(Q}#^53VO3t*{<l{KRLOr_uGcq9zw}>)=Ca@jzSD{;31nJHV}b
zjk~u9N|~{Gi=@Hl^$fAgjIhfmunil~$8L5(bvMsRawjwD{a?0mgajg=R%Scg5PmtH
zeQBr=2+^e_fE;Q3P+tnQXSUjFn@eu3ZLoLinkJK5*EM>3eWSOpYxMS3yMeIxv2IKs
zTmE$o#1<U`_h!<0ne^{ry75iHc3bhTUvHWP)o!Jxw)M3$(L<u?KW*KmV6EMyr;$>N
z`NCW`m^cn0K}7Mn7xcmh8^4QHq-ZEx^+-u4Y3gn253k?0q^JHz`IujQOj(nV>nz!9
ziyBjZRYUiSA5vYbF@%H7#u#owKfGoHMKNUlfaztgs5-4z6Kl);`XP*|U+OoSM#h|U
zNZA`}Wwj7pjX?<>#dD86V3K??N>+t6gih(?YqNC2-I2FqeQ%c3v!kZB8X>9W!i~&}
zE~`R9Jc_x9tV_0E0jDFV14?A1ZrI2_S|yv_MQ#r9%@A_8z(nCGC03``O7deiVB&yg
z*={Q9gyht^Vci4}!;(YZ-FAi=Ed;;#K8?f*GL}~hL=M8+>R#cV*$g?v_}8iwV&3)U
zD0y-C_|Ybor#^$)4O$k5ENhuxZ3YzQiU}Y{37TBhP=hsb9lv?d@u+eF*Uq%;7ZVgb
zP*QRW6;Xw`QF54SR>i;&OW_KsOqkS&?;@Hv=BKu(*r^LutsD6Mv<-KI&Ev{<gaaZ-
zR6qeC0FZ1+>f6paL_&A|<9w@Q&$%D1M(frViq5$mzt-B62#`Tvd?F{h)9U18wj5)O
zN?P4X%UPpFEtQkm-6vz#7T7adVAKt>(XVKup${}qe?b^t6E@oPAH2EOJcv*tx7O{U
zgGtxkuzI(45F?ie^A%S3L(E`y@AG$?YXQ$hXU<LES|f#AiQvjn(O3X;EZ~Oq{`8HF
zgX5=~#h6tv(hDO%l|r0|8rg!p>snV-X_Z0Q06u?liE@+HVcCN*vp!pB&sq*uNS9K?
z<Xw_-bO<WZSQ54(5477Jfh<;`!h$e8d0ZO`O8eV?q<~);a4_s+75R^^+{!A3u}sz!
z#EGSFp-@&%Dfj4N20yp^l!|H2qvqoQrdu;eVcZQoOEuvrqjtR>2?X9Rdh$z;5WQla
zhJ-BFE{5JMGl6gIB1Fg1Z^}G*)Ti7Q%xH;g>8s*w68BS<LY$|!D8}=&kU9af)d5u4
zYuJ0HDx)E<(X^d(6E}PtalPd`D&At5kHGa4MY`4;G?DTH4TgJ~O=>D{lu@uEnV^cY
zzoJ5gaED3y=+puK8D5=_`X=<R>IDt>RSF@g3J8h?mZdJH6|;gA4Yt`_Gyz*f^Gr_;
zFPMN3Es;;LHhQ(v_Xxcnw`(!h$*V>V%Z*x~A4?vJ*ova2&^45^6r*3&Xm4=UbC36m
zkv2b_GJ;f2@`)Ae`r7zrt?p~ap|3AX=mfCshLyRtteVxj=X}IXFtbUlG9NY8nT58r
z6yDnZXhH$ujn#;19hlzJ9RzE0U4iR$rT3z^Sv<-eN{he-@{bpdubG!d6>ne{SSlm;
zw~71V2JMMwsPL(;Q6Xd)DL>)0!myjq%rzDI6bW^l34_r;W$Hw|lx~$0%n|_8g4Lz8
zBM+VWLV=yHN)C0N{EJ5G+!Xoms3T9@-o*~8m|}-!dVJ74IyY?Ed^}Hi1sfVyqea2|
z4}9wd%bMMS@g<m(QM^y0GP*I-4WXpNR>PXBtutNvMD7K-)rFIxXkGLGGC$BNfbfg4
zApNflJRp6;b;N0g1Dd*0cRR%{{%m)57l@J2Lo_9tUxn&z_la6DgTYfs@gJRiOMD8P
zspQl_I%ns`CBJem5AsQVY9)YGo?S4xT!su@3@uzcx}yUifpgwb0h|3Sn~nI0>#t^j
z&ODJ&9Ei7oFkxfd8O@djy2ZO`ySibN32}ZNam8ai>QX=lf-{kg!$>>r(T!opP9$G2
z?RyhRN99PN7gdKitTVrAS}J7VW^XH<!cda;YO+V2Y?!2Ap`8q4lm@@wSq&&Urf7Y-
zGs4c6&vh45bS4dJv8{6vktV8quXCV?EsT<;Ny%{^XVa(_XpM~SYL@l7qo_vy5hH3!
zdeipyvvR@$QVwAWtqtTELb1~7U&yaL{My4od#B$v{jw59lXBu7__zQ1e=-R<R`c9k
zBZH~({6~BRK2n8%+dzxS+kib0`l(R^+1Qh_6hy~0so>WBY<M1QdHDU^a>3G-5(qjO
zH0&`Yeg$6hHqWR2OWloccbu(&lrD41)GDn9R|;k=Q6G(R*gaD8Sxm@r);Jd2h<IfG
z4B*+T+a=c=lDLhK<p}O5-UJwG^259m?yBwWwlOytp}JD%NIAMxJ=GVjj-suhVy2)E
zvhyp^|F~}H37Az*ZoVqZxi+jGF4#e5XOJCaC7@!|Z_V6&nmXSPsasjZk0eET^RgUU
z2CKB7^}>CPf%a(&j3OXWjJ2UKKo6F~@SGy~&Td5xf>O0>C^Xrrl;|ubiR8$P7UEAg
zECwvjLNUnl2|%w%LRNYlH9<zDC3UfwGmtRxRY_PE&uDwfnjO1k4*I=^`B*DxWLCKz
zIzSS~9XKZh2z$f@hfQTrSb_da+EN1N3642}Yr8M8@~@dls16rw?xf0yrqW}@*05J>
zZ%3QVy^A#jEsZ<4iO;I492SCGT%LuxSnL5ANbGzT*$+@5C(G%!JLS47-=;g*-W0+p
z{4SQFNf8$;o1<?IUnWmqJo@I~ao=qb_Yw1ASjD(JC>TR7t4JG#ytj_1g>P^oEjfX2
z;RH652FGq+da0Hmpts%fs^)F2cKd(ffgj<4%SWyS2v`EDcrtaiuFFsMHcF(h=zxM&
zLrh>{Q#w7z`9;J8V(ik1N^Hz}t%KpubtI#+3S}4LteU5oZO`%1O<tCgLrK<qrckPf
z%91F7h0#FSDXb>mCs9o4PdsPr-!HR5JPrCG-NYly+6~N%bloBJ1#?hanY~?yGcgwT
z{-<vIEprt}uCCL4xEFP=Sesh!XS1iSxQ+*1>_2<){P6h2tKQQWUmf*cJny}D_~(O1
z$GszW?SNVHL(k^w>?+UM=L;?8is3TOiVLRzyIFy~Yh$lY^r_}$H<5a|yVqF<v9b_U
z2vHk4$*V;*haSGMK?6!4k5?$sU-krIxyP!=I@CKGrF5+-@ki0j@K#ZgFIyO&_asVG
zYl&MuhpHQ(y~I~jG1pxelDIu<uqoy6Eq$a4i{s(-tQ{7PW-P8XQ>`t~Ct9i@&_2@z
z(RwGE9xvFv^Gir1<MD)KkfG=T@)?f>G#=$P7%#v*+X-*2qFijG(2tArvW!yiE0A5V
zLPVPOwGmPt%tg#x#|$a_CJ}Yy&)wqTN<ea%+=3PCJBM|4kzGltD7XcNtU3ke3*s+u
z3OUteg80CRvH+<eT%*9MA^f#vXJZOZoxo#0T$t_T5-xT2Zo~vpp7jMHC3#d`c9~0`
zoc=VLp)AaehXQ%)aD#vW`f;4kewiy24WV5*(;2~2C({cqifZAN?nyp3vT=+V?r_@Y
zTZxNUfzLdf#U(Y9k`9)I1n8W}1M4W7YYl6!rS|S=PIvF`3#Sh8^3Ls^#<-(vLFrbX
zfndgJy`7bAl!{Ztn$L3<@A_p}T^6VFiMn2gg#07{y2eaUzFTFBp`r?-1RN5LYlfwA
zv>ct4wakb95wI4fz<7~V!@U3Z^EIgDbn<ZVaZ_=t7l<XUpAHj_^yqz6e$-p;^v=o;
zwNAA`qOOAlGsfw+;ifUACiual73j8{7xpi%F_bzAQ6Q~XftoPT?y6LajF!gf(PG7q
zQ>r@ZClfF3@}Z)M?3scA5{w_`(kIDRvhdVUZTQM^QB@*2m&Lcx)mN8|{QklRk#)dm
z)uUd?!oAo%G_UH|BLd$Gba*==`UsTWzpp1n-<OdI<K<!Wu8tiFS{meg$>l!1nii__
zjbLY2lWa;LEEcTVVG^F|K=3e#4F3>#UqlITDp%_=CvdzJp=ZhF)UB^<w&@oA?a-x;
zloMX@)RH22y-zV+DY-Q8!|JN2D-8Zyw+(OX0(hCH84fQgE?RZ7TRp=}Ai}e`R+sWY
zcXm`_pn8&HMa7-SgG@8<4+liRn6i+0X9@@a7Kl!$n#6GVkE)4z$>kSVs35+5ib7<!
zd)N5M)6z%;JOTC59pSe5yr*Ue9R@Yd;ZrG!zk!!R%}Mco1|KuMLf#J)I|FK^2()Ks
z>UVN$W?Wuf2q)T1i!y>o0j7|X^~ekm=eTHA87V~m=_LOCmERZtL%pKWBg$?8Kop>^
zL?j`hj$`8S0~Cs!e7n_hO{9=CsVU^1pO-_y4;n*_@kJW}BO)gArC&)sbE|M65Z{Kr
z;?$L&;gstwX5(MLqqcLo^Rw^D;pi85g84DvT%O0ZW_2K$Caw(>ejqJ16nCt4P>fhS
z3}-5QA;76`hTNlWB=@bPrJGOQoou~%)_e2f)i*~k_a7Z>eIG^D!TR%(*z3zr9KZPH
z;Q7|~-D)~6=B=&nR$H>i{`}@xDG{`oTNo_ZVliJR<9h`8aroHYCl|lTuh_-@?|%**
zINAOFmu~ICt?z&7hc|}Uo|Xv*5D{x#uI$@8+#90SZu7I}?m+x`<9GJJ9T`eZEI87C
zws6PqX89ROl(rUCn!^mewbcRo|NaCKXZ(h{Y;o@4Ynm(L_iL6$2Tw-pZ!h^d9-7Y5
zm;B-$kZcI;xsyS1Is>N>vmjsavT<3y<e^6Xw|aWs_vA}Lg4Hs%qvXiU68{Jqa$Rw)
zF!?2QkBmo>0>gKdBm5@0a{TR|<Oi+lfR^okM@q(yJ1>gKR`?{z60ynX0_UOC{6MTd
zOXSch%Vs~^9lyA}1DK;0{Rm{;Y)A9WtIx=G!9Tmd7t-h||5JD1J|OwipY#XiDu`bC
zGYarAAA9Z;8>7Nj-{Bkm1s#YB>p9uj$yFV33d>pew&-}N5#@B1seKkpe&eEtkl?W`
zE$b0&6yJ)Cp<W1J6?(_<e72xiwAI?Bej8yY2kck1o8Z$qJD*?X1bd*nN)J)R^M))Y
z%r}Gw0dn|W|H`OwFN`7JyonXE%Hft_QXY<&xx}51e6&X57e{}2s`OnFyS6lyR%Ae^
zk<kW-{6$WWQAYuz-P1m!iL?})(|K8ndLgJ{Jn03%SH|+zZUP?~9eDC`VyIe{Q~=$n
zWBPbF$R_DYbtgF;XJ?WE&+0_>F8;27su<(t7o*{?M8@Znt_7zV9zISCV7rC*XInVV
zqMQ?4wWF8HR?N2>=j(CwhenRd+vN}y({lgiAvAP0C&_Oo2M68;gqJzSE{u--mEE-P
zSws<BEp-kUlK$OE%h1{P-yC(4uO7W*;Fk@+rQ_~tuR!~zwg#A)s+f~uk$TXW1VJ^x
z`R{7@<W*EKWR)%OjLzoztotHvcSDyVLYL=x%AkA#o(yDk&CkM^ZeoamAVoiQp=p}k
zs99rhG@2s;Z-uuH;d=mbQ2X_~5M_iHDl7!l{nP~V#j(P?KFQOwSq5|fJJSuDQIHS(
z?SXA6nj?7vA$N^6khr7}HZspYQCXI;A3s03`ibV2@^aIClt_xN<Pr1$%Voz)*GgBQ
zwctiQ6eI!0Wib(>5T4_iGS`mkqa$)IJO+m$C@*E$B@ZI}N+m7YPe+fxscN8uuMUom
zInP$drfW&Q>H;34K^})9d>YhZBy0*=TFgaoTIk7A5dVnvf5T#0MBJNfSddwK6LNlF
z(~cyHk8~HoOr}zL76vqG;!qI-qgINE6E^scjv4yGm!cxpGj3@MttXOvp=Vg!k~=rL
z*+uqKIms?7P!x-6F5a-!a*l93F1F#Zd%AdzrSOw0HrCcdmD9XXNQ<ai#rv!SHAk$6
z*A8!><-`kBR+scwBoMtCoM|K}LQ9e6lrzp+<Q+~=^lL$3Nrp~=OwuYz|C+pf;ciL4
zPBy{qT+WK0l-KiNo}p6g_ok$8CY!&1xPNreJA8h8@ap;g)86Y>PfZ7nb$^}*JM8k#
zv+sKQuOA;CJb!es8FUuQjAS6|O1;BX^63}CKO5zS+awr+XzhuK21Tm%ODe7`lCW9T
zD<*wC4gH$z`U)nYyi%&!RsA%__EPf@12R&*gTKB!eDz)L=-|;&->F0Iidi{f-jyLx
zs%8I`pI>VbNjR&weI!d(NdQ?J9$GS9Jg%i6qI9$S72Vtul&3<d=AMH{bwW5_Cbw5*
zcUZFw_5fBuslWN)EB649g5Tr=OZSg01^m1}gUyq<|Lb16S7aA^d%My9_V7-i47p!>
z_?udO)ZVc$%<_vm+U8MCEBd*c(LDhhk_*lTh;zJ$HDm1f$gHtsg(=45@D+vR!^nov
z5oi?k|K~{EaHLjMV(C8yPNBckD6tm?L^u-oYggKDZGzlb%9do6ThWtKd3wc27>RjT
zeYJ0DIachZxi6c76T~6yVaxO`bL6nfptgMJx=zvk&705AX2(C>oTvLbO>yhdWZmBk
zbEU0l|D}RH`iizk2xr6If8r@*>S{|6Gf}1clCDnuMe>*lr{{*m8fZC%sA`K2U@D`)
zstN<?;7Ud1tE1bWeJ;5}(vn6V1H*&+mUj?agrxK2<twExo$HdH<j)QsF#5CQ{=nNg
z0^I}kRmpPiI~myDb4HbFHC`mvUSUaNMLr(c>og~XxV=1hPV+fKB9cvJU#~7vW`>gi
zU2vCwQjkp7AaXkTMOF3p_?_;rg(NNb*Q;e|E+4+Wn0U^g;^ZF<PNC)0wTvYFzSHcr
zE2iVCeqSX7F|!3Cd_y(EtXq4ms8o5Li}u(5Id?mF{L9|n&l<Nv`4s-i;$-`WcM$#3
zm*dR)sWmfCxjRF*Htmj0dEn?T5!GFtXibu->JIN!E%xsPDv4tBpufpka%)hBCQzTt
zimd6toX~8pxAOO}S^+c1IhKjf#%Fq;`^)KF^YaUF<67ZHz1g?LNN*Q!=h}Ot4M1ha
z?*dh!WDf-GJlgRvI#^%H$UTBG2I8p?)#?@2$%&3{qA!p2{A19D1OncvGyQwEt{+g1
zq}td8lW6*O;uP{7@HG^pw3aK<kHLpob3<VEx|6`r!{s-0flyR^sY7tX_-EEL;1brJ
zT-d4vt)UeeX1pMYO9AOUOPoSCM{-U4Gon6*kT3LF+*5vmL)M&1Aw|`=vEyxPkJxX3
zQtnr@A~`Fr3G&YKAF&?}fDXP<+;8~g`h@+n@eC7C<fSO2jHqn5<gsP70sd{B@(tiF
z|A@OY-Z-8Gg{*-2a3N)BY<M#2p+~*7Z-Bclh}Vcug=rOo{5%_<%J7AvPu?%i0)%Lo
zbN&v&D7tlEH!+71Qsn}rPUVE_sjcDL(i{v{K^gX}eQ(49>JN+ll1kB!Xy0YYfPDd(
zm^<0U0Lcf7N(1g52(*7%mV<284<i_XtL9gKJ|BEFEM63UK6?Gr;jQPzVRd*hpZ@L9
z;pc~w(R6U}YM#CMu{xaWcHO<x;hkr=w;X-_>T>u~`R?iMTc3S*`^)+8t0#;6=(8UN
zw|9%DkN$i<dh?g!#keYlcV7MU^y10<yT4A~4GQ`FuSb`~-~M`jdH6&5<MW^PZ$1Cv
zyUQ2HuWz~Mrr-V5J@>=GooA0<@4k3^_T%&8*Y4fVZ+%y|{#-nHJ9sl*{N?M=ucsHU
z#-ks~&qqgJp8xHuThl@D<@w;vpQod*#_vXdeSSK;{roEX>%-j_KTH>cTVGxbzWVZx
z`}<;W`^)0HzaFBm<H4IJ)4`)_+UJ;jJOA#@xccjzzm10%<BROgw{H)BnC=cI-;P}y
ze;?fb^J#`}E)FlB9iP8_c09a%{%H5|*;mhge0scp>${7?`SZsIpFX>~HGY2lxAPZY
zef#!rZw^0w_QNyu;qtq`zAD{#6d(GI!@`Z-#gFesx4zV8ri&5!`RLD+;l-D?hF?G9
zxPON^8}GWY`}U{5{q@g_@7~-Rqy6vR;JZG(`FBr7?}iuipWOWZ@V6t}`?q)QThE8Z
zpTF!rdHQ1iS#|u!%j3nPXV3n4KKk3kuU>z)cs9xIyi4yq`S!1aa`BhX9{u&tpWpg+
z`p1LIFK%Cc`OWRaC!@h<vxD@<^t;EiEPXaQ{^H4<cefrrAHI8d>)l^I{o$xOd-?Rq
zMep?SVmI5reR|k?`1zOLOv>BeJe-a`%TE9L?fJ9Umq$-N{pspeF<bm?ba-^@{OK1j
zf5@L#&t4p!UZum{lgX3b!{NDG_kXP}r{(9p*FXGF{rT+9XLrW8AANTD;_s8IFJ2sf
zdiwmU$){IW?~b2+_VV$|tf+o`F?+Z;`pe^QcE37bJiPVO(ceCOvH#Vh^U3J5^qb3a
z`uFj77Z<zF$Ipw`uaCdWKAXRIHGh6Oc=!0pv-EuSms?-G_~y|!lUrX*E{?wa>@VN^
z@YCdr{lypKmtXw-`9=A+mwz4o_58=#r&lk3{Nm!rH(#ISe;mHufB3i4hj)JbYPvZ6
z>eD-)pKWY_q<hmH=D<8QSNX+N<PHia8a4GzCo$Z;C)Czg*dgxv_q@-k7w*1Wf871-
z^Urs`{OmJcbSi~j{Pc@2Zs|p*w&3j)E&nBU(eLf86F6WqARf%#o=6<&8)fh6wxSz)
z@A4U$kKLUJ_3#%tQSt2VtuIEdho7dqyTe=Q?q`ER`suAN?xgu=pJ!h<yJYai?K{#M
z4mdoqu9tF`KR7o*bw3{Sq8xo;Al(5UhR#ko|0U8;phs}m^|K=er6Z#&8x_?M>Bv!r
zfN3_K(u`U7KDErC;r-d+n@C>2da9nbU!&wm=l*>8w)sYnOqR{BY5oWIp#MHZU-%I`
zy!PK5)uDbS-q#=OJiC*s4W4Bp(UBx0nR(PV%N4vfqIdO)M^X5UEcgN}hsiy4xc`jl
zKft80cWvD9%y9Lv%*Ll(-*EDJHr`vUE`nM}&*HsRhj9bf2==#RMeRRJ(g!rKEBv8%
z;NR$?Gt50y1-keWbs>IyJh$GUL;&ad4t%OlQ?>KC9?7&E7ej(vIV%Ynw#Gk)E(Qmv
z0V*jx#;jD7E0nE)8?qGs??GM}35f+rx*MN$1%nK4KAs5@JYK3Rha&7-NgBh}xV?Mp
zc6w_!z4b@gH%F+zfY;J*w<P)5yC&QX2Tt`G;@8c6Y=FqG;eOm_*#UlZW3so_-Bo|+
z<;)o?#WaI3ieJSapSUlkkAnL<cDH=_$Io~F_~oacx&Q6%VOgX$RXeNJ%x2W`FSYl(
zwI}JJtKNS^$fAS4JH@|R@jLHX^}0O~{VRli=f+KV39Z`cf6@Q0ZKm7pHm?4%vHUmw
z`@PA+U{;-A?+Y7-7*dSJ$;ec`a0vdBjyMe@#Z)Z@wYWm+H6q4ce6xH#Pe-@^b^ys;
z&3BxDntio!v$f-$Q#~%!0>1j}BK7Z1K?Ku1pI?kWsb5Pki_>=4Gzfn5WxAdgZ}YzI
zGWx2fK8v_63af7Ks3BI)nmYK#W@t&Lef1padAz;17d!|LWGj8>{>UlvU~kV|*}l<p
zc+?-0c+j6~%gz&DklbJ{Z<d<>R&~@Lbk&?(@0wX%#Bt|~-g>I?s9)Dm)e~6iFK&Ii
z!SueO<=+0wcz!pwXaD7Fes|M{ZRQ-#$lv;(UjP4$kNjtR<o|K;5j!!!4}7LU-+X$W
zUywv8WS4fLL{KHOl-F3Q2wXmePs8$gw2%_}FAuvKbgzwK^skf6N8ulv-*0SSEadGy
z_eM9a_iK0Whcr%iH*S{hMbFe9II5?5`iJ-pGW*R3_!CFn-M!kF_&Tf33n!qb$+rlT
z%SXOr#2gtChI9MFrTa-P3!)x=bVka2M~t52U)>xHP<h&u5Xk+N2j3>|!=F8GXW^DL
zcdvP+t~RG2@?40@l+%0n4qiMFwV2BqLJB9XdrXdF>7%LpG($Jz1c&dVyF>|s!f?HP
z{fjqU<q>L%?t~XhS=AuEX;r87mGe29zqNY-4FF%Uk;vDpnIVI)`m+=HZlSP}YVpWU
zDUk`w)w4qY#qi|L_7;8B8yoakZ?3y*lRDEdn+mK>LCm%jH^%ODn^ZsXdXI&63{$3X
zD@GtDGuwIKh7GMcJ6_Z?H}&T_({JA)V>wALPzrosAFDs(l%MiGlX<;>WdjO?{q6qi
zr^mhh$B$p#-_k_<Tett%-F5%pt-UX9@9u7G)NlRso8$YxZ~d=GrfJtZ!bV+J;x(T#
z$ar5vLAC)<<UXMxd4J`4aQEE*z5lxQMi^WO$m<68CTG_9yKK1P$hz)Os(-Z{M|Sd}
zxvrkO`kN(NL&D18%4{w7S@{2Z{QPh}aU51}t#Hg>NTQP`hSlHF+<y50$@tAjd&xgn
zTggBBzMO2K4_n`#Y)O~o)3&~kTk@I!DK5Kj-w_1g1iKb@5q9$aR(;&J3@CrKVikiV
zGE&`Iy|#DW-P)<IlC2KY+Anf9o$i~qu(+u|4VZ_I9DuF>`4*>FPVaFKb|hU0TGR57
zLJJZVDy|H1ol|AV^|XtSN2}eINsC7-=v~Nab$fVp<F8sHnJ{$ng;Hq33W=@1raa72
z9(`M?8KO2qR6kAXwmxWoy~bwA)Gs|ZXQ<fvHL2Ch9G^(EUT!`47Z2s*Y>^ee)3%mu
zS*MrCloEc({q8BRm3R<alYnKJrujy=hAe;1PUnK+eC1w3dudu;k|=@D0N@8;X({b#
z@SDx##6%w7%*k6Ls8zC@9~lb`2*0$(q!`Xg&AnuMTPntcr3hG#tkIWDYLc%J<;O!u
zMWmaxKsCTz4vwF8<R<skuAfCYQ4F<QOOxDnz2l-Vz&2`pAW3j5t=mriMB+zc7au=;
z{K}nG5q!NSx@>RDkdknkSU%d}SuQmWioPW3q`P}Dd^^TB$M;@j1SIgVnca>3@f==m
z8G?{OT7yeMGOGu6B4}Bt(-X2wEl-nbx}JxU>bb5+b#WaiS#qg`3DT!iGiEHf97@mt
zA0wQSQhZmLHk={D9pqCnlRb$ukA;<t`S8M9`nH%z8U1v52}i{cQrapwpfbYWw?4rq
zr}8gB8z~p_v^-7SvPcKzkIjLPpqp-^EgOHdq<^;q@GAa!UgC4YV|UzRM;FE)1=dKo
zOsh07D5TZ7`?^soe*1EE)%N(&o>2{0FZuiuMZzMvNl&0bb6b3x4r-&qy61ozJ4f}N
z>(HmJLydZBUyEsd6o4#_Rdpww-A(}oR;C1&O9$g}ke(6KE@e_h02;L1XO`Q4=3ex$
zAl%u4JPadNzxZLWt7-N3vAk<qR&(HMq}5`|g_%xr?ET?+7?L5F%z$lX6}WySNn*ZH
zehN(5kK71jVy7UEfet*5Ry`NT8#nx%HrMITU8kRyxQ)nUwv273xQ<Us^f$GiQZG`S
z+A}#TM+0~p(|6f;k#k_M&}>|u;f}`-*|syW+$rMjlFlOg<d5#<-<D&b#<&-~lfPtr
zMN6F!AbzhhFrZ03mNE`0B$pbsyS9dqB_TBn(e4PAu9G5*X%dO15L0Rt99<)^tf~c3
z2rX+d0YnfmnHfK_T~f*$zc)iy=$>w}jSc%Ns=-+nff+SV$_5qRb^0CwP190brgtj>
zJ55zqb%GZeHCk8hWc#rj3W5|TlqLLb*@L#ycPWPL^nGg3s}ak(AtmDC5sbY-^sw%2
zNlI_{+JS3tt0iq^Q8rf8%Wx(rF0{>zxF;eJ>}vqESlY+82qq}~utcR3+-QP6dYex;
zjIZtN_Tqm6u+Hl_0#!@cl58}R4%Fcu>!;JQ3;4sw)pZ{xDP!_+*2!j3O?0eU;P3=K
zK3~<1cmAs01sHa_EyW$gl!MYVa6^1<iqS++s|77bv87P#*GW!ztZ0tWxzpFM`0>SG
zF9y~xXTT44ZuNL4X5f4=@cn4Ft^N_`RVQFcIyF*Gti+#KQQ@5Ai|OVT6_SU%3NYCM
zCWrj_#Vrez#y!_>zVIe$hn}ShN9=FCk;W30+3|E{VJXctm@IDiG!v5N>_>D-9!v39
zYTd)DI2po{DHtN6z=D1#%JH+}vgQDD1R--ojCoyv&nu$WD)1)5z|Kg?IdOV9Khbkw
z;tUL5t_k23%VQ0%Jf>XY-jh7=ajFEr;b=mX1|_+BI$oYiR+bGK1ny+~dKv4rUyZy#
z?`dU)qEdU-wI2x<37SM=IFwTHC})wPO0GJ0R&u3#2wdE?$7<(Sw>!zRVsiN6!`QwX
z8!rHsp1mt_RSXT`>|YXh@CJ1#)-c_Q+oxBZ039BYsvZ%o?(DRa){!8E7*M6+SSUsj
zK*NLjUnM8(+UXdh|LS&V8HVN1|HRfu2(guf%X4Qr4yT>j?H%1+{Pys;QwY07xkJ7_
zB&y)QC(C8r(U<&0CawaDzdW7uh5001RAy~gJ4P1{1=BY5s__kt@&me}i^>3b$m<!f
zHqOpr0vZkpH9Ey^YA8m*961*sBF+NA_0J*t#;nMal{$1<YU*vwni8G4Gr~RRHWZP?
zRfU3t;FCD>QJ7uDmBy~yd1Vz2Co*lzEDTLdX*9QbY`Qz#2*PwAjIMH?USw~z{@`MX
zOKsT_uqDeH!j%L%#9dj3b(<X4;lHapG19jpu-xQfAhWE}43CzrioN8e8W3)es0GnU
zo;wqwOB+H$-u@o1xF;>9#!xD)-kin`Fe{unHts}>!B7B%vfNHtxmA?m>b#f+Y0V&2
z;SL0X8#H|Z)?)}H-{<b?k5?mMV<VUgAP)b$r#3@;&e>vKXF&*lf|!mgtO+Jcqdq65
zAa?>+n3J6`HqR#_n&sWtVN%wr>DXeri$wxJwiRZHo)a~&t_eIo?(vR9h*;K*Qw0>x
z9#~pdr-F^S74Et@4gwV$@(kZAY{(+l#kl*I<Z;uqbIahF7;v4)HaijvZe!ycGwRe_
zlcc+3T29G?GCVH}tqY=~iLl}2ByB9HI=<NHIRCLQ$rRv{6qk^Vp%@fcm}@0Ta-EYb
zt{pbpbARrP7k8dHt4!fdUr*i0R_8$@Qg@lU$5wqu>|<NCM$N@pGcSJ|-zHtOJ!`Y^
zicruW6;OzpFM2YN{;v0o3RyuQ0%e&yBZ<Zo{*SsCyUC;ToY{UjYfS7CGs|cM%1P7x
z<j;%kZGQ2w`3%8=%%X1J4MXv$d$M?pY;RBUY?l6%&q}fKT>~P1!Zwhv7&UNf>lHu%
z6g9zO&}ALMJ9k2ERH`@zO4MmQ0F>7SndSqAnrvtD84y|vy^6su;+d|Y{IST1(e)G5
zBc&p(A{HH7?cr)qSxKTL6wft89XdzcNXR6oSj+1$tO4%PdytOii&0VDobtp5*{x+f
zxPt72OJM+<7lZQz^{98gzbh&dE4c*`j|OBBXI=Ch0WycQ7`ge?bBW!LAx0Hw0Pj#l
zFr}*O#NI^qg@DMeANk0nkJ<wMFx4cfM2%lRk-(evv&k|efRYQyPGr6+)uT9r394uk
z<SQAwM56^88()>Ut-nlm*GG<SKiV99Ro4`(&UH8Zn2@42`gc?u$!X%q_DG#mMHlQg
zV_;p;0yLH*53OE#0qnH9M`Ba@#Jb>CTqXO&lnl9bcDJa;h_vdUsQXH{bXT)5Xo(mw
z8>B?__puM3`Y&o3;W|a9&I1kjX=z}E^o1FIJ8!nSRhW)26vVw$#t<IGPq~UBWok!!
zC&c4iXZlA6PY)g)C)>%BS1+E~4R5|acy*8zxbycvGv}cg{nGC;e)nR+{-OtH((QyN
ze5k55d-(k5;MH+*`26^VHTv!T)7J+_No(uR<vBu@w{Nwz$yOY(le<5ZS`|Xm+P#?M
z^OIyWSTV|5B&zHA3tJM_U3sskTKBulbTKR=>?M`!PEi-o8X@$w0Uiyy9QW4N2L~8P
za{3W%8IN9xG1d;a0q&jp5x&0Nt+oy5MobMVKl<@>^W(O5@_T)$Q@snPE6v;3@X7x1
z@&2Q)g&2=R;gp2txF!2X$!LCeW9eT1%j=^9{&(YpU$31|hQwNY4oWJrT<Bv3?mDfz
z)BLjL76+ES7epO{FlGRVLYJPea(3qQfS>Z<$Luy`kKFtr(Ia;)%N@B6v11N=pCs-3
z;Ry?Td17CF>ay{^ZgMKkO=J_T&R_<QJ`PzRQlX{C$PUjIBXjhSkgH|R*51XHynd^F
z7XX0nt<4=0ZrNCt6&F|1Z9W{r*7itOe-9Z$f1ysK{>Y7u0~X-)`;-^mZny9LMxOfL
z$GXJbwRRuf>ibnMmxx$v!1|fkB(x)9CeTyNbO_GrYXwq3H%XsV7i<igk5?|hGZ3}f
z(n)ChM=1mQ;J}OatF$Kg!ZUzqO%V7+_fZzbyPvxo`*0EG7t{Gw+}sf?k6E+PUga-`
zwui9sCcg66-Y3=XEa0{KNtJM}YDvtlr<mr-?@L_v@VU6V5Yl3Kz2urH(q2b=pqU}m
zx!#Obfq>~py@37i`}G%21<bNasGqfgNB()F2Rm8kJ5u%VPt1&D<u;CkAPHToUhpZG
zUFg;QwT)^r&b}|&LjSA1q>t$jPxuG=VIg#uZsIiHwti=A13H`iYo3m7S<~$mKh@s7
z=CSn+FTEQM>wtzOI7?Pu675d+R|n-QR5q$MX&h+~c*iG8r7}=rrl1C+9cv=)B8#9n
zRDA8fJX~Hg|G+V-nu?b{M<R#oYP&%YMCbhSsiF5$y(0OHJNQ}R$YR4llPiw#a60)?
z7m6LJU4tu=HU4yk&dRBO<LP=5=}2p?lGld-nt0{U7ww%tRgB!}y5q&&JUm}}!uXzO
z0w1E7Q^1L1#`^wL=xc(JH@5jAL5pqmKcs#|=Z{GF>rSY?uV=LWh8MOm9IvATUsj^d
zo*Cdw_a(e-BPecUr8TVr;<M%;1QnL8*T7n{RuR$IO6FaQev)~(lT$J<s$jpRLpUT<
zUoXUw5+TjO^aGt9OgF;hR6&=K9&A;y`%`RBX|(b(9gx|hLh$dMS$f)FyjV6zRqGYl
zm;y+Ts9R+Aki4rUU*FMV3A{egLD~YGK0D2Z0(s7b$!`D<nltbL=rbM{NBN{uwXK*C
zy~bK%Tns?B7e#fU+(t060h$Wm$RIy0eQ=esik7bCRY);d8muTF7MWdCDFB5kA0J@@
zxkn_hp*%fH))(oumJP51Lj)Qad=Mu^tZ%xs2Bi@*!z;riAs>$$6x?;5<A4%)mR-t*
z@EphP!P8lGCYA`1T<yjdJ*I90%>gk3%4Modl1ykRCG5KOK-2}>CegRZlJ)FmZcyL}
zj{6}3z+F%!1zW!I?rnrJ;m#m=RaQmwu~(;AUuz|=vs-`vvwf{dgkN;};Octdes%x-
zB{DXh!upaCFP!)FmV`L6_Vlg2y@!WiIa5|u5I+M={u0jPk{D}?55%r(!b%G~a7QE?
z!nliDn=qPVqN}=vF>vF3(NR)Lq=iVBN`$lK@Ck7;tp0apF;chQ51vMwT!&dKoORm{
z&k-L}7A}=7vpfwu9F#{`u%q&FqVU9K0T)gpj(|uC$EzX;A??EUEtf9c<hF(~Wg~}~
z0CqkVd;689<@i9`vP*4yJL6rX2#m5~_+`T4W#?e+J0sruh&8nCPj&0h;J7uq0@{qZ
zp=VzNv`La}49Pl3SZd|Hn2t>X)!&RO-a&aFx6PUsC%@|h_9pLHvNm}Ywr1_SeAkQ9
zW|x4DLx-X38>&Z=mM(gyzj4{Ov1g@_gIav+^~=Zm#|NF{vAgg10Qb35R_BXZ6v7v(
zK1f`5M#YFak|6o`Sf?ATJgew^7SAaZD)y~L<Wx_stX2*dTfWJN5j$h`u(1u}*ljqG
zuV0B-E%8j9tTEI5Z|9B<u4uLLPLRrCK6Tx%wRi0D9r8ns=xm&yWy7nsM{kHj7j92w
zw*2*l?r`oyBj_u^jN#LI0(x0cQ@0ZY6nuDIA^~MtcipNnsWx@1Ng1-VE(;z;fNug_
zBKVfHH4X4u#UGK*nsXM?){~Yv%4yAa?6AX_bTmP1ht^4ADvQcO-N&;w<DO0-H)hbN
z)1BqGNYj%Z6%FcPin$_Nr=-LfT9%&WR9WjDd_N=<p*45DGgRXpZArF)UTak|t-K%z
zF{gNq-&?$DAz);or=`}~7LJh6!{kaLajV`-EHTv+Np%a}HbkxmfJD)}E4h`4S0~LF
z2G{ndpZ6>qxn~97aRQ+zB4daoIS5b&K`o~O4}miWrz4*OWrT|5#Fn9bD90`qmL3XT
z>>d0~E7kf~Lw~m*$tQtwSYvL>5+q=XBR1rRe0#f_AbNX|!>p)m&j(wAfi|geMQ%~F
zEW630n7D>%xbjt&|5pzidU$gLA$?qkA*v|uLt|O#?!wFVl0F>n1`S=e_h4|y&p4=M
zhCN$I%_2UE0P_7u`9W78X*oD5HtjleASfDpvHyqrM_#mr7jM<h;0xn7-dOhR*9w5V
zIHAT8=LC5gP4E4fUzR>DIjTKJB{;It_hb-nx%pYM?KZ?_t&~<e)Ce?hbgRSN`nP;m
zrVK5C+7?Ow9_a@4W~APQPk<t{0>7<~e#zW=S&aMk$4ZP?BXQ4vEKriJXi2>~E=8}S
z^kj4fMukT6GOScp^)(r%wyVfAqVYx0dZg|^%743PoR8jX3WToW+udd9gpuDDET7so
zT)tCAuC7a==Z9p^x-<=x#2!4Gj0=Hmxqe*FOOi7SrIY*9-B=^0k5H_FXh{MidIKO8
zQbeehqarq=rrOweWa~Ckdr8;qwtP8vpOk|IA{uJr#SV=?tBHjSM{E)k1Bs|oDslRp
zUGp4*N3UK#b}#Wn)D;Gdn_|Zu%PZam!q9>G7GRN$M0JP7J~LL;IQK%#p-K}2O@s`t
z0%eyU`1nW;^04bG<l*XIa*{I0Iq`C1<BiWSm8I5%u-$*r<3(k%t>rgB$f<xIls|T4
z1<-Jeov!Yc;*04f50%HR_8QNcqaJ=t$7mFZ{fLkxpOMQkxbvEH$YM9B>(JsQF&aKI
zFW}B%?wD8gRKX%wurvSYIpo>qdX>6oQYrdGns9c8Qbl<OgmviN{>wu;Mm$Xj1PH!2
z))=MKF(KI;go&@A$<LVi#Z#>|J{FCq&aB36v|~a|%Wsts<r|C}|Bssr^=nIkjM+}a
zpm>^KAsWLXeNnY4ps|~~g}n6SX`am{(zR@Won+mJK&<pix1znX(_Wpy^3v)1I4mn?
z@=8!}e+BPZFkpCtKOo%rJi9{Yg2o#tMX)b<`a+%RCP((?zeg5I_k+1OjWWa5(Vg~+
zoE)1?$;h#P)$(!lqPMv1-*%Il+s$W{)$uh=rl?xWHhfr0qQ81~&Pegwi<xMFrsWyo
zpXsL-4zQ+ibI10H7%b&QL4<Rj*!BWZF}v5K=XhcNpV>LTadys%LAL0S{@ZeMR!xVc
z<}^4ov9rV!S(lS@^I&2zazjvz?%zBwXZ$}aFGq(Vq~+L%G52O1W#u$~U{cQbqmpv)
zX5bA9_IEi$huo&Kk(XuPU+SBg?Rz1;uqPX5t1rr^gaTG8!I2lPTZex#Z<LoK?kJg;
zlX`r~X(>W$?~AR5ULahmiIppPx$7Lb9cNb|-9v0SC(OH`w7nxq-IMvXGElmql(zm6
z6@5BbiUcY0&iz~En1;&bB+Msg(5Prk+BufIpbIB1)J$5-K|6S8sSY-G#bl%op!2dE
zbtCjhq3o`;t6HUyyJvLjqk=%>rdGIFLP?QpRIv6!R?IIZrW<N#e7Ph}Gv*D%eUP*C
z?lQOR5-VX<>P=PXB<~Jbu9JK*hlb!rYLcJH7y|X6z!WN}9NV}cWhEjfvd*$PxtFdB
zi;qh6DAd^~9IrJ#&#sb(h~<*P&S|Y10xvcZdPpH;nj}x3K1<XW?`)h&u18p{Z+ZAE
zEf1aOq70{mU*dDAdQv{hNYN9QW~K8K*H}v}gOo_PlO{9eiza~kdt9D%YZAwIrv;dl
zlkZXQvn+4q{A~)8N3Ra{j}MaL{fAEvlEWv-^B2d-!Cw!Lj*r4u0>?);MRIif>hSqj
zyzTkxr%wUZlM#by)i3bht-9`qQ-9oOM?E=s_ENj!2Bzmbv47+q6wyZ^Ebssi9&Fim
z#i!}to%$WpLEa#LHhxDpWn_@xQUA?%l{ff*xtl0`G2p#Cb7zB}1$;|<LfduUeUser
z=iQC4-)x(DLs%?<8Mhrh+e>O%N1|Ky<faC#Hci4(Z~_8*Wy1l|)#<v>c9>KLS3u+l
za8J&>)9LjgAzX_n@ck;Ejv4mRcYBrYTG2Zi^sEyUzs-k@RU9Q%i*Y`pTH>ZSBeznx
z%+ZK`^HimQQT9NPY$LW(V=+bfO&HTNW)m(ZjC1EB@xZE{y2m611A0^VRwgk{vT1c*
z&O2J?04@uHj<{`(_2Oh5YO|BpX`qiwPAcm^{SLQ!`ft~_8kxKy=+JUGxqxe>Kp-xH
z2Kf9=Z(2-qNbPE;aR*yz!_~65ka8q~TuX{e4cws{414ClE+$E}YUE*2V$sX6JAsGv
z8VzwfBZlQm$&n6;5=-s*F>;?VmQzhavk@shOn3MjW=a5rs)?%9Ov$mhTd$&+v04bT
zoS=Tf`145mz?8&n^n<ghV45#~tX5Oc&P-}s_49=BA_{DLS4h7(%__P+U(BYi>!_H4
zv>uN0Y_gc{1$>NJU7*;MET~3$OVd6wiC$kB<NOo~mOFfTpN>U5f=)-u3QP-^VkKEE
z5+xa__w-Q>>we=|eRo9BJ)}NyCjFTi-&;>uT_Jkh(ezRFYu!qXm(`6d*64wT(YmTB
z2#|EO{Mb|E%&PXFB&tFGp!(KW#g;fkk{l{l4WT1Vav}Oh!}@NG+{5iXGUQ@KL^F!{
zdz(+^mKZh2g(inH-%TEi0Ag_Rj|rOLTF*ujIvvgcN%H#mk!yUZTg<7dwJ^#GvKu73
zch2!tC-B3G;^TC$Vu*#2%E%TIIEl;CQ^erij>K*ft3PsOYUqKgB96)WZlq*fvvnv;
z{8?k$dS0HLjk!BV#k*o;Wm`}AUUqo3bRzdI%MK)g>B5Z?*00+f$X4nkBWDOP!pL;I
zp%kOK-ko1f&+~}}Nm~7r{q%2H`qOUuWiS2y5B>ICSr|2*HV$^BwA1Hd-RT~THxdp2
zcV;c$8|i`;|MN$~wI_oPI1s~T@0cNn45rhSdu8Vyt~}^>YklH6_QefyMj4DdS{V)c
z0wK=0`x$%lr8>rYLK6~oNGFmO1j?Qz#H8(=yjtjC^;z$toWR!WO_4|q43N_W4&olV
zQ>(mY6|yDMp<Oot#I@iTR~C&1SS*?Ch1}{Af;V0fqe9B=Fk9W^z&aU<5D=6@)_=9Q
zxPU#GNvu}#(f5qhcGUCx6{*;I+PTYE%{m<X0qa^X^Fpc1Uas_1PHS*N+~aO)qt=yQ
z&Q<}b{uc1|M`7=k;&@NveCNezWQfUB(X^#X$28>gDb0p2PeeYT^v@?4cFZ5<x>~-o
zRo{?&qoShdOElA0JcX4%l#;`_Kps`d`XE`JR)mJbL%>#LGe*eur}%3LH2?N)FF?oh
zmO4HW_TMWndbx<4P)gk@aRwNo(#=Datm36w@Mk5!I8UNSZlq{^qA@RIuOf&NJ>N!-
zgEKc<{r%&l_3go{qr(@^llu>nNxR?H`VJ?HMp2)FzVKnCX^_)QMya_kWJTW4e2tDZ
zck&RGGH$8!DAKKD8w~z%<XGdlV0%dHfzalBq9IWtun}p%n*s#Hy{yXDC@vV|>G@UV
zgIBWBj2k`w(Tx>%qdVf<3Y(o36RLojK+>2S!wR%B#Q^})RoZ-;0a4N0J6lY-$}!I6
zs#7SDlnTo<k&khsK)sE_j-}zc#r_zI5MFN>4opRX*I#0|biOcgBs;}S7*GnAwD^x^
za@KqORpTNEy<cf|ei%CWylyQ52IZ@<PiQ7)&F%AXyQd?9+`k2Zk}>3MFoo1%QdE+i
z-QioTUR?kVLJV?G)l`IoG(xOd^m%Y`MCtDX_hJGc=cmPw46`8ZQB_d)oW%+)Rn4-z
zxXDGQ6UwOBTf%8!71%6Y<#P>HWKl)BHfl!h%!71~h<ikzk~qxJ=vK8XdBF+qwpB84
zk~P<$X3(H)oP<Z7Xq8y=slIo3UQD}^Q}G0yZVq7Oy^2r8q`vuNe!__%I%M2n>Mo}q
zfzz$3pLe#C;}?%#?7_E|J2eP92#4u%Ig8Wm;{}*;Ogh0IaJuRf;(=KnmYsE@;zoUY
z=NC(qAl@H!ci(|`mD9A#%TtNjK0~e=x-2kU;y=BW96vNgl`<_TS_16g;VVP4Whe<s
zksIqB!Q$i<#c7g_uLMgoD$xK?fU3N@Vu5#rzkNRyKhdgELb{?+4g-$x=#K6K+466o
z)cEev4X+lW)KKITBtR*^p(Qs9hp?KM=Jyd)lS@f2P&3sxY^+-q4inu==2A}t3eE3W
zE5c&f7~n(zW8`5=F%~{cbuY<-hiz2~2{l8?61IHQ=;XCFpng$rG!PT8`7o@$RU;u$
z<$SavSX>(t-aHS$72*X}?;^EMv5K=<r{PrKx7;x9P~GY2ZL4ArmhA9NewD<qIlo!b
z11K-paL*e4_1HfDaZ@G!6Se3X)FN28aq}A+C$)dq!SWQ{S9m+|^G?VBEUJc3W^P+n
zrCI9nMHN!7hA>Arug^a*pqx?eHvLsc8&svwP4NY)7p#YtkKx90A8+?~#3e$iSUa*C
zg4py=3SwVcEod=ezI^(cV81Df7-nS&uMn0{<!i1ii+vK*mX(lcXbM=5DFM5zuj&UG
z71$<u0AH&WZ~(%#(Auu4Ut!lRSD2sW^6IJMw<<dLQE@g&o%-yC{R4AOtU;Z5(5Ww`
zZAAt5%#lI*uWQ8pT0pu9!fTvL1Dx<f!<ud2@UFzqwPr6yZHNi5IGStbqy|E3X{n)C
z=ZisI<l6m;W_tVfPFvvD=fyNcz)uSn9?{8L86ZC0Qy6Csv_*a)FugaPfU|4g{ikd?
zy{{kBHqdt(ziz9$Ey@3e=V$n*Ku=1P1c9Mcx({z|DqwHP+q&ed!Q2U86r%JVIZh&3
zKs$Py&v;4JZ#Je8?3Ja8o&cYfol(@~^DCcc78bEb{g&(lx2O>mM(Iax7)wsOKgVhh
z;#GtzIB>4m!&Oo&-eDnAw<{xtQ6Xt8ABP(VFqjq_qq_sop{567ax%O!R9a*stl4<c
zIpJn&>~uysaHMR8{mu;AH|%*?A;y;wcBS<51G{nMv||g+XIJT|Q}K6hu>CxuX*WDC
zd+%3mIcenIX~RVn!QKyTMrBo(WST`R2cX*``d4`0LN4%o^>mU{+%e}kAD!i?ohYNF
zt>VrlHxIf+;)SC5&hv7m)KwQ5tF@wPCOxu=pUyN$_g3g0@ru-J9IckAZ6gnoAVx<v
z;x-9iQzMO9Rrm)DCBokEy9cIJ6&9tb6CYTXOG9mReYGLK!O8^RY5WY=)~{NX*2@1D
z>(cc80G}+T#c!tfH^FV8_y0p!&Hr(g|Nlgx{!bL@|79rD-JA08{`(+P$2F0SVcyty
z6cZu&AqZX-qn7bLtoW;I_`<6`o||1*EhY7SUW&VxekA7J&~XbQ5?}85PRr96_zmYQ
zZRA?X=L<2ML2<j7KugrjppLs8i8{-^A!Z|9(AIM;-rD`Dc-X*;X-T;=0}k|V3P3c>
zO+MKUh#=zHmRjeTxSZ&ohR>AHrM!W$mAS+PMM^OQaeLP?b=(Y8WZPIw-2yXy7(W#s
z%6uXijeXS87hexdUetieyF0gT^;R4+ABR_7)bYx(_(Dx(V-Kk(){{p0fZWE$!SPe^
z&?qYlCG3S*^Ksphp!yVb_=;NVS{SKL?QB4Ak7#MI=0@dYYwiPNf{!6cEIFLNQEr^=
zfIVwjqJVxWSApTiwd8I$+A%??2&Fakq)#k^TS=?BBLgXE=C2kL?}_&4Fv{C>r=Dbr
zOkKr)nD~_YMs7K&5%sB-yiwlsVx}X=ke%XHG5dhwfTi`cs$Ek0ZB=)i_;)APMM-B6
ziT=d<>5~!#!%QlRg{ZVtD5#sfW>~$`xA+G`*_VH<yG!3HFdCXxfjAdS+$G+~)ZS5X
z%9!lDKAt@AHy*us`CTHsm)e&{FJ3=CZf&=(8PRrf{33}*!U?qLV&0wpeJg1_dGYGm
z{&BLU4{a?&>3yQm3-kx=NyYSo`?tEcZ-3d{-S|Y(IPTxy?S9$4B?Szdo10y6)(47C
z{Eu)ny~V7!@Biu~(ivV2fBMJTG5<5_1)z*nR%fA=5=VC=56rDrYXhIIwcN__x02p3
z%CT=`#@D!*L|<H3L3WUWSoO2=$1BRI^=IiP)t!|0wSDO!%p}Dgt6_g|&m+O>jR0&|
zVH5-s&LqiC@7Uh==7WK|o5&dCK0!uLDI9e?5>E&p>dukH!0jwc{a%j4eT<IqNq~ru
z+dbu+IgFl|I!wYv_o0t#vNaZ;9R^8G>NiO3>>tIj2ssjslnhqxdIfo{p|MUa@=|SM
zBWk3k8uM8;$t*Roy@KJj|MD=7G>0I(=ncsU7GO;K*Px@isp0o2Jb<y%v-Xqt;%baa
z2gIAbcyT?g<kaUGGLO!q00^O4yWcGZG8jgMgx6|auaZ`z*x&p^Zr%Cgj?*wdpuvC8
z4*vX$b`;bSO00<5XqgY|H?nqxNGYP6k~j6DH{Fz>>p!lYyZrrY38hx>VCksStAsr3
zPJ;@}7kncjCMGPCLN90{9-hC>%jJ2!lrZ5RVbq#i15E}k<Lvrh&!TlwE~QJacf~w9
zYOkd#ih1Yi9AYq7Yy6Y-VByKpucVH9^>Ng3oHPyA=@O3?4O>pqTEqdw!DPmjDG%gl
zhIqr?*iz<1FEk6ygA-_>f*1{9pT?Y?ma?HvIu@B}uBGHPE38w?r)I*Eawm6N%HqPX
z{;Hvr%|*jbzSBP^h4+3D*E1-o^aSHO8%S)%tqo`2vS#h7f%~ROxqjN*u9z$|Bbs^O
zc80jdSRW&Eq5-3@Ol<@DqejQC?l$f7>AuRlqS8GWks2zc--vQ#IB)P8HfE%&>aUe8
zv)rbdR~wQ}DpsTX1UNaqyaOCE`7<hTZtrdUj`#uzFpiObjvdBk2qW&hL3Nh6&+(1-
zL!+Uv`AKfzyz#AW%e{2dp@oT;^ZBe>OjJo0`g+%zeMr|e+uBs7b-j0okN-*Z_WS=l
z-_#ePjI7=#Yp{#N08+<KTbuv)|K|ywa9@j*P)kvaALLfV@Ss&cZmmZ9{xg}`Kg*W~
z1@fTr5FaT{m+!sTymQZ67HT_e9ybP3=rIw4a@)JR$@`tIxuWq0zpn97-fX<O;ggcd
zosax_buG}uiG&h!)7824gy0+SGyou1_N;)NV7U->4MgyB`CV{`-J`Rjgfiz5=0v=C
zsvb1Db8D9<iiW%<HDHp!=<IZyJ>1Kc>c;}2@k#=Zc>_k@iMS4C55fV^P{^XKDlnBv
zHdg?$4<})>HCu2hMy!5V4?$(PHw+H@+)hHAUw5k;eyb@KkD&VdQ0ojCL}#NrB1+3X
zzsP<pE*2Nb;bYRAmz9Lnzs`t!_#D}ste+VVCD(;&m8#yu08z8tb<+_zJcieUnpXU(
zpmtG12-9N5eR|oY3O+cA7E>81OVUOqu)d{Q@oHAWX<M4jsKH?!qI|41@VJBIzxulr
zB)yWQTmMvq|8x*W0tQqrDkz@O%UBv3-UQ$i_cqTlM_o<aV*Et7mBEvtUwY!!^|&mj
zjRksJ7ASs^h%jNdh)m?xLKTB3x|bpM8ry|_SKJVQjPoBe`nl%O+UC)35MMKSlJLAb
zQiMr$3uE(*?JV1P3Q9D-+SD412!|j!T}+0))}F;c8KlZaFI4pRNKxVB_mP|mcIatP
zKaUSksJD|VIU-vT<e%|@xsJZ_@QutYrH{>5r&GJ}?|SKe>vzH#yO<R2G>N?nsN?py
zc)C~B$zpH>_*+J6Vl4@2ynpUYyboy0byobUDZ~RlCH4D*J=LT8NKb7yFqI7q!{vK;
z$PbbDK;wPjrr<&HlJx{w?i4sPL&-alBi{98DIfatp8Qs)D~1zALN$VmKQ0C{_z`&`
zKh7uR&cg-3%6j6%@iS=${Qs1xl$Z6U{|}i=9UGm^{r_ENQ&Bav5O#@&8aR8+Yns?u
zGfHB%X|YJ@-#$?!<5--DG!qOH1voVaHr#npE?>@^CnSrUInxmBz0I}Ttjl)q!B`9O
z8biS%R>3an@ybPu4EP+p`^;H}ERuAxF|$*{o>gr<zF!aH7_xp*QIqisw^OWgN#Cl%
zb0<HPLV$jIw}+C!TD3Y`gE0g&VkF95<}(1z=hZNqLQjIKL(zOvv;5r)#5cS{=W}Ct
zKktFxq5#w#<IjAR6n2~<)?;yDafF??b#2>irwV`H$QUEm59+sY)TJ2cR0bNks9gN%
z;40;da7)Tnn93?l-Cei_6<mBcsUe`X{lFGZdE)8gOgJ1@wrzulSE^(pH_Pk4D%6!{
zhzg)i0t_WEOYXa|;a@xXAYyjw$%_|=8C;L}^a<;(di6lUC;aU`A_-sqvAY{tO+Utf
zQ1W7f?d}nLNQA=XY3bJEY_pSmdZ!i-@O@qTNIUSpyb7)hZ&KF`=1hY_ATWUVbp!jc
zO!jeTP~C9nYPuGcw_d#@ESeaMkqV`?63Kuya7HL^&H_H(68Rcp!s=(hkId_4?FADI
zIsu||UV2(Fwvx>Tg`2clA(6rz@k7)CRQv#Xko6NZYaB;_uLFsZnflRQ(dyK*_=?wm
zy2-xC2XE)s(520ow~m+xhTs_3&;%uo-xlcu9e&@R_B87gDXGPrRhId22}SGh^m#cy
z0Nky=somd;kDbUL!LwEbt&Fd#jZl}}YIm>AWpKS}(x<1Tfs9BI?#KK}rvO<b=Oss7
zmY(8uL+FcaJ>}$~{PhIYUHdN&<J`(g*+oU%&W}4jV&gQ^?!5X_bw3&$Qsl%l(ZcKF
zZ$JCcSAXo=&uVX%Vq`fcb)u_0_sCtri{w4wr%{YzI@Pq84eur-T<VRau_k(Fsoj?1
zjyB$4i#p_4f9tkG1lX;4lJhchY!4QO4Ip$bRmZ~(2r*5D4G$N<ybn#zV-d<0QSaMi
zIJ=t8LmhSy-R>-Jd-hjW5Q-|HDa>JiSH*lG`G>L(fuyVcVJt=al>QDT-v6uiF<pt=
zxfT%t881+H9Is<;;QE%Xd+&t=CwSoyefPGnXI3(P9`BM<_wrJJ1m17UmpeFq>aEYp
zsvg(4`K5-C7-D|ag!&G9(PQt9H{2fC%eqsgDbMCbMFl(eJTpaZAakMFt-MPTbyaY)
zz}oGces@PA0J^k>nYaKw?slU?g$KV3QHf?;MD|XtcYx#uULFr(mGBe8cN0)kl%w&p
z#N|t<=5VM4NH%~pTU@BF=Piw$f?(2OuEjLGb{Bk}(rPGs)9B0815T)*KdBZK$UvGt
zC{>D`0C1C;jn(y!a6vT&vQFdn&w9KJXMmH=T-wJz5p31RNOJKD!?o%kdF&Z@vuy}!
ziA1EdLTa%9ugYVMX8R__kV$+@5E2{nsD5VYG2F9dOJ}Q(6e=2D&HKE4Lp~P$cn*}O
zMsCI^kv!GC%m>pp($@f#ATTo>T^_<%T2GJ@yd?cZzoKoKW77kxueKY>n&bT{h;SA|
zafU=}QCyi{*UFt{Q3?|bkIQl~9uXG&V#-q3p)4^$2b8TU$tIQNx>Q(eId+1eIZFJ?
z$#~A05*9_J5XNT-=b6eCtH^H(mWhZWO-P7C(6#(shG&1nsIxWRiyHqVd03n!QR1+b
zm+b{`;?~h(s^w<Sb7#Uji|715bb%!f4gd8~x#=LUG)j9-@s2N*>F6hzMyn(SQKrW%
z7r5UFMdf~-AT1Pi5A9B!Fi`ABn+u#@em3OvJ5b<!&-eEv#z76LwPL6;OAroyOu5fe
zZs~`+iygtFcK<m__+PhFNV(eyW#ernuByGclPFD$R08_I-3i}Rj}551r>8*LJG(u-
zq32ZL;agtbabo!I<M=|HXiWFIU?hmLYvwH?65@6FsF&UDi9NdReJ8=Q`cduP>IGAI
zb=!$E^SkXR&y2^^bVf-d&ZL4F-Z+IVdy5A%!_B%fV3g{gLA9>*N>n{mtFmj-tUhsa
zUbcK(C9GT}*A>CCB&gClGl{*H<(Qak2oH;(v;w?pF_7^PofA-)Sp7rIq4P=Ef?N?+
zW-6wvZOtwZ-Ke0)zTfFG_p;>Nsj&AqeYL=J+O3U7CC_bQJKo=%loEd0Odd#H(f)LL
zZzp@eWQe1De42jky0K<pDT&V(P!f0Gb4rz|qb<PTwelhOApK@`gAAYT4Vu-Zmg-W|
z;v$5L0Rr#QkyW|BL4!7kI|i)`A5xhb;_@e_!WWq$YLN!`<y0-bE`zUWO?mM;Pi4G;
zyyX!oX8J~u)7Q&SP=U&rNYwp9Wc*>;qie#z*;TbA34IYguoOOr<g-uj+;+YCw3{^K
zUpCVB_+cM5$4fE?JbTpNL$2LNWT)NwbZ6=tQ0=lIo3Ck2B}df6&aK;De!8PFR*;kk
z<Rq@ERP~NDdZ*Kvis_!%aD*$i6i;*4^s8!&fD?_kO~uJVc&V1*T=<GLKVm07hudT>
zGS+Fuuc%`4i|%6diQb>uwKSU+A6Jm<JMn7^lI_)a?K2iIEMO~v%>~O#f2B5g^0nA%
zM>u%{^Wr;N9b8wwH?>keR2ZH4J(V(6UWv!nf4JLS);BP~dy(MO!jy+S<S|5TiA?*v
zM$7j{q2=@U(K4yEaY$G0@l3+X`{wEJ-E|7+t<R9YwV>ZpI;<`Yx`BZWhG*e8zV%ru
zK#SE!z9mI!$vnBOkq%Uye21;)?!5M$&?D2^d>PVmeS7=0qalg2VGRu|dG+)Nf^;r;
zDiKhO59(tG?e$?D)|!@`HLg<MQYtN_?zb>)R?+@RP{Q1~>;DcbablNNp1Q0u3ki2?
z@FeOud*K+2bW@H#i^4S^Bh}^s&4d45Iw;ZMRfnV%z=q!Al<XCgUwKLnt+FX<alYfW
zdy0RjgFN-erBk0iyA>Un$V70R&FqX6Wnd(uwrZStxXEDc=rh%gkI6<edO+-m&=nvk
zCty<vszm{{a)8Px0UU0gDLx-AdhcV^-Y$y~$SBp8$8<PpQ=JdWYzB@Cq1bea*DRY1
z&pYs^mg5M2(yyG@Cm-qeqBt#g$s%xMM}{pE!UWeJoqmP?$2~j4k+d&$>56Hy>T8#o
zDt+{r&IKT#a3wzpP|6+g)nFYZp4Vc>of(rNAMf3RN8+-ajUN1$e2V_fQ4pWb+(FP?
zR4MQg)7xDX?}nv{zeWQxtVXU5Avc8obmQlZ-)&-VZSEzTH*IyZ;~s)S<sO1cg?}O}
zhBl<Hykj%~qAe~;FL+V43tZLlkk<6ma6NqIrbPnZ_%N3~5BxfH+xT|4B)Cs}ZH>YI
zMS>Ci?j(KmyC1=i_=8-yaT^x06NLXTE$(sv>!k70-;Bw(#(x~SL_8{jdM!@Exco*&
z_b2fd-APX9Citz|zPR$u((Uk@wOgguu=ig4R&7_o9paidH_30+`k*+Y;A*!$iS?@W
zB);3)veKo}(?pb=(ZJRcN?$h{Ep4_Xs@Aw1ExB3*a?dGgk0pCMz<y1%I?+>G9uNk3
z<<ErfG;;!5$_v|k?2g73Lsd-6u#3#C8wq|5Balu)t0_GzFLB{9u~K<XUaoSKc!tYR
zp!=)*tKsolTOl-)?2o7C*@pj(CMul2xGY((ZZr_K1&?WEVEM%W*}HIc5_vr$cSIJD
zz@=Q`PU0y@ghWD5PUZG=8gYr7TSbf@`933tI2YI=VQ9s$hbIUmWE99#64cKWf|0PA
z@YRdgO)nCj*i@Wz#1ZLdb(4$!c<PW@IUNDPi20dLc5QF}ftg_73@7i+Sey^;2OG4c
z#nEbm&lm$nfan@Q8ZiQLWZn`Z8vANs;VAP?Gww=u!2De~ekV1;BL+7m!;%#9MEf?R
zV9-wFdXSFGcPdj)oe@pK%2Y#m1r@gww+R4}9L2Ha0$nY|<Xth(cfS4O%V)R009Qb$
zzx%p+`LInL`Kw}HGg!}@YPk?NF<X17)7mTlueL^3_x)5E1Q1t9s6h>ZxD%Ny3WzTh
z3tXVhdA*Ulro<4J#4DbcPH4fGs=;JIn-HdpIHrTxu}8v%1iBcECAf%KhjOTXM24Ci
zpCf<|GmYld?QHRX&!gG*l){QeL}cJ9Fr7x>H98~fM5L_gmlb<Lp(zOPw|go<qfx;y
zyCtLq2AQXLk|KGyN$^NVDOmJZ4y9Do%c$ZWq3&bqFoKkEs*V#=bt#cC7Z_>LhWd&Y
zBA=&QLBn&W!&$AdP5QK$6<iG`qrtq6$Ks~bT~qHbwd%*&nVY3qv})x7u~+tV9%MsF
z2V&e&9hk)Rz^9j73TW6otKRylmwme;`J6d;n!4?5eJNM2lWvX%-EwvYRGOgNjO132
zIJ_F?!Bck1(x&;|_Q3oG`WBO;c~(VRUwmVo)uz)}Tau%QryJ7|m=P4z<zl)(wGU9{
zWuY+GD9(V{NFYuEy>7gU780NG0KCdZt68KBg=dp;!f2*b8-{N^q{AOPG_(6Nd`j*l
z$mGh0NF+<7Mx;d15%0CsEy(`PP7=-!D=3c$hTSMU1k%>>9*9sSWV==C_ZuY|>o!s+
z0W`z4n>>^<GfRX87#WWJZA;|buE|8dm{vF>bzLF1zd7aXaztfBxZhR0MMkLh53Wer
zVwWD<L3~(TP7@YiYtp4(7;gS$1*_zhgjy;3R4l*6WLys4R#xujbq7-s+<1$3^O^J=
zl#~c@Q!#6N>-C@S7griOC>5{sJnCiAn&nPGbY0sKVk7ror<&%IQ5#84Q^8aWWK~*X
zk@=4(A^#VXId{)22iiW1g6ERrg5%%a40yE41KUIRc*llT{+xX4Nf4U63u`{~TG|A#
zO$FL5vFL$c=!QcMNY!vNEf}7%a>+At%}V9I?y!iIH05^JY#|*!di40VQ6H@9Vl^Dy
zPW7I&a%buIDy2??PLDtfM@saz>lVvQrO*0dJUMw`rfJ=yDA=9~nM_ut?zSJCj>_t!
zlSc%ZR@QYr1=jU$7~Pxdy=^&@mkz;*7Q~tFDd8@HwkH4=o^ep%5QdEWr3(5mN0H*X
zo)BuDcevA}FNF&rL2)nWO%~%Z{sul1^5+DAnj9&$_<X<ZWpa&u+)aCR?#4Zm9HVIa
zf)mSA#kgKOO?904Re2=I0J;;5Mj0Dm{l`cGLF(_r?0S+Lzo)1kVGV9onsQ(eV-wWL
z%|Ze!^6!u%fhp1N0#N82974jHq&WJQ*=$0veW8IcL}OHw8&hiK3|J&5RqA<WPqRzO
z@gr#$W*sLY%rp+ci%Fi6D$wubbsx^`AB{aac~)^-+Cy5bl?8;f6MsL4(*FxFL<+LN
zv|y(PRl}|b$l<IEF?Z<_Qp@B~wE#d-LnR`uBf`k7EMN(x5j7>TiJ*drRQ;1XHe$MS
zI;w<Y6{~*2mtbt=wW%eY-;FCya5P5;H4dG#Jfg+2W6Vo*JCcG*(619F_mlH{JQX#h
zuDKHULm{Z=rBsThqnXr{C<<sQBPKNlffhk>WkPD9JMDyLE5~WU(x8s*A<;ph4-JKF
zOfv*#-cL&#P<Rr}e6ivmR3@q2*E+gmz;m6rtUY29=ooHxTaXl3>V%5)@s(wcrnMZf
zVL@DzfdB2@;ZCAFyI|tDE|A!r>{;su?o-Y$GPfey3TJ~fF^`@aUUL&%n_6}j<<x@6
zF{X$!F2)t<SAQgM4V|1wMxF>qm;m`?rU}U1WIr~`W{hDK6K}M!XU3R#<(;DTv(l+p
zJ-sYZQ%=$LmHp<{W1j2%OsdoRNfX;P)%3Z~?)o>C6NQPUZfWl|QVaj8jg9xoOX<w}
z<f%^}dhaf$X`1N&b^mgjaNqqi+EF{npR;$F{-gD9;f4&Adu_S>6WnbIGgRbG@)Bz6
zk=sLKg@LCH<?c-VsMR{qPg694gRv#+r<1J6(pr(7WvN@}3tfA`zo;WfC%P`m7GBiu
zC<mmO6@GbGr|znHX)CF+Bn%F-f*bkr4GdSrF5R{%Kh@1drLh>si_e1p-Q;L7sGQJV
zsEVwQ-e5Xwt8y%`mr^6G{7m-b019)%onYLa9WEYHQM&Kn<I)o6MmhB^2&ppX0HJ)!
z8SY9BrEdTeEUnDNjMGdXn7x7ZV&r(5E60g~-}&B4X5U}@v~6rWRO@GcS*A23Ki>Wb
z*3!hg^pr`6UsEUGjue~96x+MX76|w{bJtW<8`ys)(l(4}b(oyFReQ!F!1G)_9Whg>
zbk;;)f;iXtqT&S0EcxgUj+jMTam2`<d3b9EwyQp>$@*;xls~F_J?n(1AT`V{O65t*
zM%J+~aC*m%u;upmVz5M?{OkUX#wcm9WA8`;$wmW4u=VZ!)7J-}pKjgiBwJLUwwyhF
z`0U{5c>meUWb5|s?a$NQTkiiQw|4h-cemPLk#5~~cY`>}-F(g6pXuFqKHT;#w!P5?
z74^JTIECn~JBFMLsXQuR{R{g5hIMNpHfw{uNUlKRp6st44AdZtKY@D|42#&6eHo&@
z*r&z36Y<y8OiU$S^rofc8Av2SSM=(6gw?i~_G9NpF<(2YNGo1FnKzp9-r%Z-q5Lp$
zx~&ZvczzPV9o?^!4X&2axT|me>eY+aFO!Gg@m`&uJ5jlU6`Xi~d|f@p%85V~prZ6;
zaVP)wfBd&KAHttx=&rfTKDXZ`VyHIT7v*CUm;OM}DXP@wo-@vLHclCBuN#vH(<FUe
zE(G_9j5Apn)L<qWWWE$`&6*b?ULVJL;&7dwmu~mNLp$CB9pGDUNwKf}Xc@SbYOZW4
zEeN-ilRi^xY58lalK(N@E)B2aWnso0{W~Ay#qK5#^I?XAIc5y6vD|oh7+e)*FGP+a
z?}mw7A|JF?%uWlgk``6m`LYl5`_?BYSoT*_UQNY!mwJY{G&Z>nNyaN9qTaBUK)+Y?
zSyAJ&gxRknXVZ?~nyDkqW3Eqr!3T9|T`c$3u2;ZU=X5U{b{KN$OE#8HGuX-%C0^kx
zU!m>SR;#hDY7SZV&ria?+Ce}?#Wx@Hy{5^Bts&Tw#v_z!sOVY~>n?I+R+*vHT-Z;7
z!YsLp1!B^4q`FhsPtQeuF@WZ>bi}kQKS~W_+JYyekMR?A0J|Bl=#TSqF~lMkdc$|n
zAeJH&puh}`M#ivV;U)}{3W+Mxdo;R^bky0^oLDik+*7=B_EwVhD=ks@L@x!bfUJ@{
z%ktD+v(dyCtCXTqB1KT{ak)rmi(X7+_23DOY2iNoQ{EJ}O7Ee&0sqCXzQL>Xo%_#t
zjGIRJzzJLAihW{#;_`=lIH_>gNWRs;SyF1RmNSpT-kdaQ)cdHj86g!n59!8YBL&B~
zS<p0+sL|7Hm4x)$D4G<^XeDY^URZ5=F9FkM6sGlBrBg3*YmYfx5RRU0ySk2UTMmbb
zp?zBj&W)_NQ&JUu;D!k%v-iMy2bjk9f(>3Z<Ge^bp@9(k+Hjk3eoPdKBaQg#*FQyw
zYdh|Hpc<aJ6Wg1)o=x3}I6wJ}f)?W|C+TYDg_7a242=!Zb|dvSRKg{7a+Y1%8+FwL
zhp@Bi%}<O!o6g~n6ehkt7H;8g^uea0w9G@`KiFAm3kEfeVhujF(c)qnW=(+DG;=x@
zo`s?Z5Wd@wJib@8En=Fha;45aJ_`Ov$lShQ>CDeU2W3Xus&0AXjUt@gLS$F?Y-Lq4
z+>_QOh$YUeW+Hym+g!mQMStrRqdrnwzzpQJy6h<7>2l}yV#)xyXe8|PsJQ42nRC8o
zC0QEwZyR9ofA8s*n->DOIz$?_`WuNuUa2bs87mfv5qDco-ghK3xs@DpeCwaoQ>3Im
z#ZfjX7*lZ1WMh`jJMDBNub|r_thm$Riv6{6Q&C>)p?<Yh*=F+m0kYyoiR$+(>EAzk
z@g({4i^J!AgNc*=hJg{709a$v2*yX;h<59FHVWxpe5q5<s)X^w5#T)<0hyp;N&urW
zrxc($w0MO{@EX-<tPNQ%_~zc*X;CRQ!3<xu$YGD5i~Y!BK??~Wd2?ZGfvrKyb2^*@
zii^)@<vaZCH)-Fg(bJxs|9w>n3>c~zRiJO;fBZKwOVnXSDcP2Ym;&S&+`H>O@z|^L
z9&iR{^Jtse9zhe|ygbx!B;(ePj=oJ4rJOx>GOswja{GP)Y^#R1E^K#o@2N&+)YU29
z0Lu+xcbsRZqO~x#&HO3mx4~O>G|nWM43Ly#ccQ$~6SCoY^9RH*tKi?SrzeQ{#ZlRl
z^<%~5;(@BHsL*MKRmWVyvc?m!RidRlTd1^>O&i&RvU?b3vdoc7#KTaKnPE8yZ%gjM
zu_Vbzd_znqbGA;}STnd#3M==yBEZL)7EH9P>WZC{nN&YWZT~Kha1`pM&d2y6!oj!Z
zh9HmE+)&#|d}C9Ne8|fY#1SO^eg5fWJsx9NgWKAU<7D;Eia@ve$9i$Kb=KVmuJCKW
zryJdT1NRHaM<$Z0Fs00g;4=4iSbI*EB3d{ra1ezR=%pW|4cd|%{>($-trv+&i$_=p
z(R=tNv@==2IO58z%WJ-1UM|=V-)>jkNCd?yyEdjB{dY7Zb}74HVut=pwu--9+}XWM
ze;<~aQ)P#FYt+Sec9N~d1W0ROB-|3`p}XvEmo?F2)LEZ|KP&H=G9Wjj_mVif?ye_?
zPmd2?C9OAKAG|t9>=!~J-A}f7UO3}G-fjP~HE&+Cuuqb5gD2e6gD1y4=J0cE(Ig{w
z<i+#)V7Zr#YX9DU{<t<i$phTs)XHMi!=bTJdqvoYNshL2KQXT1FiRWqm2ta!dyn^z
z5Adx&`!)E>R`3AsKYe=F5Y3Wj4Wkhf&k!B52&h7wqysp#>KS2_*INI(I>b^7@sU=t
zoYqVZ^V?Qx7j4BR6(b36HN-HT=Gn}oU^8}4NV;kx>fMIbm%Oa|4ImiEZ8<BmktH!U
zl)$|(BvRcDM*=5H*a>)c7UCEgx(|2Kcrg_~8{$mqs{pzsIG3=+b1|&OB+)Bk&nq#^
z<aMJm7c4=R?$$?JxLN?zIgDaPOfyw)fvBFE>fv$P<?XYOgb6XCYI)R)c;rR3!~q$x
zK}$ZW#`VnuAjgnc*N01fgrucDgE)hEtD<GfgHMwr<gSjODB?oRvSsqx3vE#{=4}j?
zlZhA+L_n@f1|{W&Qm+z9>H0#A)a`ajcSOSnBVo!h{e-@-%ezaV#GXx<=EE8=9rBU%
zy_*2m?1SDm5_G#0Lq32^U(CcLfv}Vw<FucF^AD4IF(}R!U|)w_zN0pI>Ia%bK~J+D
zEm$zF(R+OJgT7NKpep%$WU)k>PaJTATqpw>!gGJp+8QxDzOO03vncdS=ilpBhpMn>
zt5gO<b*?1y#aMiFen<!VQK%3o)%7JUYe!}i6S;>d{eF1Kd%WDD!tav<)xH>=m)N!K
zhDIE}5!3gMPj^kM=Dz=H2ViwO^Ku8vqpOrxPDx&hO}0DwgeUdlqwZFTES?0Gu<GLp
z6+iJ$dzPd&`WPASM|YlJ1^XP6#`0D+FZa)_KEK)n-??Ufj~c|j|Lb&To@W=nj1oUw
z$`;yLOr7YHv%+r;wD#D0iO~wwFv)V&v5YS;#2Py9e_~hry3yFCs$6U!s9*iYzp25Q
zY5U%LR<XkBk(8x8rtqq7>D5NV;@`H{_<vy%aYZipCpVrIYNoqIgw<G`XVZKyN)4#;
zGbvwS(wr?X4JLWs;_M=>>ecY{O4>)-85dJ$*Ww{$qLqp8@yaMu(nPKvzhsw5yF#P7
z)~|cMV>&C`lhv3c=Usj9+V?ihz?d#C{`^tseqX{OM~}a;Ofz>L%r3-`P%VSGYpj)T
zEpLL>&xz}o)7jVeYb*K1tu^ml_s7~zhN5i=O<syw{zn$_D=!e&urwGDUX1gU!zR5Z
zMdO^%O|QI2U-r(j7L}!QKhE75+St^6i6v+fat7~3AoJ57ajD&PCd$|Zv|FYk$f?LA
z@D$&TB(mjuEhf=Phoz0qolOAc*L7P{7~^vU1}6fi77vD<N$JRL9Cbafp5*lqSj6>b
zF*Ptx!S*suM(g6{0#aN`t(rSTPKBE%auZA}XA$}%bf}L{i7CW=EQzS7p_kMTw`cmx
zEO&jFko^}+%t&rQ)zVAGnp&bsC0sRiK{f|g9pb{^Q3DKJ$#Ng}dG>5bU6D<362fuU
zeH_hTYHad-l^^jzeh!h<5Ybvo=9UibSpq*3?UzehPy;NTMr2%5v~0<fik#uc?XFu>
zPA?W!xYO*yQVh^AQ4u=UyelAVstE1)Q;S}#NNj5~gNid1cF7lApjNs`X!TK~#>q}N
z^LFecs1<Kpt@*MMBKp_|Wy{9K?_%)m>tq`3jb*9U36(7^`LP|qw%?d9!D~j@0QHSJ
z;x{@51gzP_97~ky^=!%Eso4~S)?VHAs_rw}p<YPmlgs)mM{s2;(kT?0%9&b`Jkn?0
z4bR<n)DkMd{FEyUij561Gt@w#t)q#NbV`PlR@)SCfT;OlESi><C`QO*uj<o2#N84;
ztO_-FX4oDV;$Syx2Ztb9Rj1{+m=hh<=y4lnkhzuIayP!|E2tyuk4Wf)JPLPKMuJ)~
zQR=3<d9&RX%wCyR@v!!h!`*l1iPN<v-b!%Wx$9G@fHoUC%q-negc+M%xpSOnn|lXO
zHfz6erm@-1l5*!IY3Q01hzl$>O2(*t*buieQYDQAS&w6iwUV5s2Jx*hA1L{DH%+*`
z+j2lhEUCeMOLcijm3sBIm`=q>zb_7x&|XDoT_2<^qI^&;`EgmkRVH+Q8shwI^*3ep
z<80vGj9fda05h_;*>A6~rlcV|-GfCLEtH^wN<9bY667$>CaCwZvTzo(&OHY@g6$e5
zJ~ker`K9|2@oO0O14%Yj)y)`j2uQ4Q$Y5G|j>mxU!VIl(+!p@u-`wGK%*|xp-t(ze
zfgJ={U_4AQdVb(j#Tg9_rFf+9X{qFOX*#P}{*y>a<ao$vNj0J(8~~#`59AsACNA(W
z?NUL6MX0WV*mWLL*RHBqQLi$C3mR;Q)T&1!n^*)lzmmz2{;JfHRWY5Pr$czrMw+R7
zH5Ago3|-5x7f-VZl0BeXK`?<42`@*K1o*>J1QiYuOSK3oAavw~guQy|tiTv>*U^-O
zNSwDj0><0#Q4IC4gT!&t14kfqWoK5+7P+@%*a?$^5z5Q)l3UP8^N&bz6rj93gx|ny
z7Dab>WPacJ#EntNAxZVuw$CRNn4dVg!>Qq#{)9kN)hJle-4Svzn#J}!bFMstOCFYj
zm17IW{upt*y}<CGFY`I>tfNWkG8f%R0>4g7@vJL-no384t5P<`T&Qr1Yzm%^9j#HR
z5K#CZ|4olf_1@LWsPr3);G3)zY6{0bqi^<ovcj~yRbp&2ONsIUI|-3R%M9?$^B~1e
z_EF1-7%(^NHFL(tHR^{~hsa;%H;-HHP>L&t{*F9eMJ64W_&t}s0*>IFZW<I{6-nYz
ztnXAlM`@8*Dab3eGD3w8aBT)D;g)1E`gJ98$Z3=MK&#FBP>rG7t?6w4Kt5bId7~+9
z95%jR+}yr)Ks=c>Igv&A34OoSr8bJ*W+XsK9t2R*yh=m^TfzjD@`qwI9AhyL7V|k)
zc<Dumx+Y=zT!8zEBd=!WI9p7H7KimQeG4_zi{IiDMd6Fnte=31qF@+R4(1>YUwhFb
za)T>Qm%RYQv^0hg7i?0BjVxr+j?r}kl1qqKi0RCxN3-m7uH3~Q=+k|^YDm~wBi8Tv
zuRYm6gvu-_u(xmbvZAMz-fmhV>&T;I_%G6;&{jDUk8)a}ehoOSb_d!0@=LM5r@4~U
z<829(HUvD_D;hx}`;)iBw;*Bl0)`9@NKA7WRa6w-^;~+$7QA9vwgE3VQz0WAG6tsV
zh~5=bQb{GN@J;Z841PgHz`Gb+q=gkF*osi@+8Y}W^DC4TSUTXZmT7gtxV?=W$&r;B
zZ*N<GO@-B7B2``)Nn#?TA^9AnTX1o3#0ZB@));0*%7Fowk<fw_BW;Xw?%)3F|4G3m
zhf6vuOIBOXEK(D{3-=O~XnPwe{Lx2oi2m)r{&&}LxOM=kFJMC#te{dq%()z1t*RYy
zAW=LEFdV<5<tF-!`nVi)K*1z+eFv5ul3ZupXeBe~iVMw}l&#$jkqR1(4d%x48ttYI
zsj0}5QN=HeKs~fj9oT=C+kYMpZKVmDGRds>Cj<(bDVY0Pj>|K8)2PoA16#7*%1Pu@
zMpZfKMh=nRI`ymy6W~0!hd1lXa5F)+;ezl!qN$ArAo_slbgGzuare_yq;ns8?82$Q
z%=%oh%J&j3K3UFoIx@GYv50U+RQ7x?P_Z&G^x^6@!qZ!dM@9wOmOIlqt0wIn(KVkQ
zisxnEG?5J<;`3qvkKGg9??IBf^FO(VS3EfB$ba2Z{60BJiPW3i<3vB;h0*K^xrO{2
zw$=B(s%c*KwfeL&`2at5C1g>R#1DhRwMF9Cr9jAzd)HY$>bLJ=0`U62`49c9`mii8
zS>qkaXS9cKW)~9;sXN1V0(-(NK1{huAmUL%O%BR>Eygb^nY%#*x)k9;3-PgDWLxnN
znF+oYtUV+D#pzq^nYk&>pH?KA+8WL$k`1*UgPph5B}0V<eVjBPQdi=C{@z;4oc@hC
z^qDSZ#e<Mte*fM`J#`OkBA4z~_fZra_1UiQiceL7)v=%g(vzFxT4PetVd6Q2NPXyE
zkwRcph>O>XL!#O?-+v!D;<;W-B=8^<Fj7#nDv{nTE=@nkGpqsSO)>paR4=p`s8(um
zC}$DU?R+Zi(3*}HRt<daItQs4Yr0pdUsx5Mm1NXvj8KqgAYK9o7zSB72sfa%s(2L8
zl_u)fIC<@-L|a^&l5Op#{?4|#HfVw}X`h-}&D0WP9?~SrNZBEwd4W8TvP<Er`A2-e
za$g*Q73Xqb9(>N7lG;|YP1LgE7?dG{^Rj%~N#16sZ?ld&S^j%{TVU-ykQN{2mGD_b
zTeV{fiBXVw(6RxjV|A-q-N(AJs4tA=yO#9O3R-FwDjcpWaA?P}psHmMaiNBUmhJ7g
z`4#YFrPv1t>RjAw2p+0K2$+SX=ZFjDm;nq9gzG?4bM(Zu!A63gf_}BIR{BciAyNJi
zuA+Zjep6KgK0$*qkjAzuPd|g6vR4L6^i!#zWI@a7#DEby$XLQx??7KDhVH*^^(+vQ
za8}+N>tUxsr2+IMO`bOw5<v&#?V&zCo5vlzoYaFG+!-=Z{dh5H_>+ZP)q-?ZRc++T
zRjFErF=2sl@-Mjq@3aV@*^K5*R3(-GI@671rqzQdx$a2o%EmZ*kQj+To9m)?fo$Hx
z5I@+|V3G8mJ0v;XIW5b+XA+asm1kI+s1V;ET4ry2Z>OgFE5H?V`gZ(`ay(aNoB+(h
z`h;YH8}0&kXH3}%#SL%#Ls%|sS+~A4>_qe&OF}QYYbS5yPsvL9w5Pw+b|~9nel}Z~
zNUpY@NY}`*FZlYHozHeT-qO2oIP_7owF}zATRlFpzCkC9DrxWe{_#=VT>Nis?Xw<k
zU*Fip-{*7v=x2X9K8{<9|E;Zk*~9(oTZ>a?BAD=~(dIR6`177Uy1w!1@0Ip+{|)dx
zYM&ncQ=9yv=N?$!+Sza_z5MFY%jD%^uyeE+#0}zdt-;TBd+wR_4Knz=m`Y3t4Zl95
z8$Xq6H4E{*KS8nO+{(79PZ)zt+}b!i^~nid;Hcb3X23)fDOgFMy}rtoYP=zG)Wsr+
zkLThEu6Z4s@qg^CR#O%m{z#zrvSd1J%l36DfVQy_2_XGjccV{MeR$>7FFiiYTeubJ
z;o?DNd_{wQFJA45zB$QFls45_#6>jrpe32A*j!tqDNY!Iu(L<13l)O@x*`fOE-nf{
zS1d;%ctU$U(OXYZ;f5P@vVlieOh8N3aiIvmT0zyOCESQ^?9m_v8j&Kl@Bl%s)Q_%(
zkRN}JAM25j8^u9h-aK5v$O@uq-bXoK8${7rYX(r1?ywO%X-9F7L)H}15;%D3ls=`f
z84E+3QlL<eH!vIlaCAm{=_$uZyX{nPLFuAnQRuhbv%|%#Dp6IV9Co8waVq{0;*v(R
zJ!xF8qQ`&416S{<umI{6MW_)>CihWK0IxU6tI8{}r*<U?#+>Y#$L37VjL%Mi3MIS4
z9m{*sKG>>!<UjBXAj<`uc>U0JKXHPh8#-dpLz)0_w#a7SQ_dxZ9|XmoCabeL86{-1
z5l9!X;v@iR(u(m?*G9ZYTcI6!pI;^lc_s)vu)76b!sDcQrr%*nx3Ak8KtU(II<ym3
zA7wI%a6Z7Jkk8!I%vbAacZqR*01w@CR)7RaTKc}V<NiG)yBV;0u;NGMnUf)Yf>OJf
z=CJz50m3tp7kig>0}olbV@>ZYRAv{Re4|>p@dGXLo!tv$0^L5x|GfqHkT>TrV}!GQ
zNn>RCHf7l8uBbOiq-0TVoZg1a>QlFd-Z9srA1}H%y^XB16Fq9gF$b}GNwCbD+JUPw
zSnA9C_PIY5KCvC4Gsk!w>d;n9TmzO`0{_jAiD0*e*-SuHrByBzlL|<NQdfB9mx}@$
zN1+10u^`&CY?fIp2juj1iaB51ZfryDIA{2iC3L}b1c*AgmL)=?h4&+4D-K;^f&~S6
zizA{<b4$fdiPunxX3w*@31yJ<TaQWw-90qyeIw!>$r+NE7gJRxu$#su%#*Wn?W_F<
z@LiiuWog{t6qZeV%JY0N$C7KgTXdL_*?`bQjj>*Ou5KqioCcOwL$~eAy5=LUajt=|
zuq2whm*hG-zS8X4Z&;p$4zfvbf}NA*HlsDO<KNSh_lVb*t2b%sE87~5z*=sxk@iym
zw#YC%zVhp#YTyN`Q7!@Pd3l*>iLnmgT~EEu!73+nMwZmg5i?iQN#F}_E{L=dUc-LL
z60jXmR4X<Cdq_YJ(Ui(d<K7du5=e9^f7<_04kTYp2)p3&408|bR{|(9i!(6FIblV3
zEZN<6b~T^6QrtP&yr<(rq5?9uib-MHm@#}UyFiX!B_D?+J)>hwHKqCz=tlB~^JC)O
zo#F?aq-6P+fIrFKmplD%X5N9Lr!OQViTE@$v^|tbHTH&yfclJwwdiINB{K0^EIdL{
z{7553@l9~)UIh<N<C%ExcVamRxgYTG!}qztzN#9e9sW4;cWJS@;O9n3KVgRt*aXv;
z65-$LI)gFf39Zf!iUY)0z_ohepeq}lYMf=6jS*kHqU@utDlR2SJ{h^gu_a3JM9565
zWSm3ubApd$NN?=ZID(e+j^w&(9=<ceosOOBkV#ma@Hbheu+-N;R%d4(?z@BBz_y^k
z`ubUE9p@DG)fO>7E((U3s{jj|&0PzFMU-YUt@6dFOz}|C4;sro$bbi$1aIqt#YW+#
zen|dQC#m?|f~tG+YB5n;xp(1a$en{d1p9=2gH$6u3{`A8i^`iyWd4SkP<!#_!m!M8
z_A;*;dhX@K>$<1~l%;>_vBV-f<3x?LwSYdV9L3v&t6qh8oWC(pyfJ|*!<HlrdByN0
zR#FEO10AfQ5CC~Fkqah*;XuM~EOQ*MqFc#sP#u>kY?{|(yPq;JWW=KwP=hE=+=4dV
zi;&4XAe2x@+J?)mKg=w|1FXobAB4L3=jWcJ6GL)j%&LzMkM<uvJ?K4ob#V0c^Mj+K
z-kbg7M_)gF@l`)L$tUlMSvg@r5VK`1jsMd>_M+c<_FJ8!rA+!_Q4%(IMw)aiXJlE|
z<PgTOV8Wp@fi9hZ6kF=$s!YQepG@M+9?VN&%$a402=QPse4CT&0U3^|uYid%7-NmH
z6IH)U#4ErGTjFq(!HT-pw}u|$;o>T1Xif;Q^Z}dl<;~M5gLT<}X2V#lLc^}2kF8}L
zYoJ`U7}QRjQBcL$GM(hzTJC{P6i>8}R6J~!h8B&8x4tzw%aHf#nEU}YS|IpRbrr1}
zy=ONhe~5>!p4w;7BdBLukWaXQhAxQd3I9<wO3^;lxog4LL!bU!b7zSo>|F&VOiLfK
zrM$D)$n*86nqaO1urHYWNJLW9jw^Gz(YT3j#T)xcOFefrJ10ccz1|_UuK`V^n|xK4
zk_hM_!)0kPWk{TIlF`&{zIQyvX)qza0GxP8I(LJmxV~{0N`wE-k~3CthvgO+*AyDu
zrxOnHZ01LnYQg|nF|}+(2`!<n+#W;S@FaZZa&vr_<V<R1GIemTq_2??TF$nnd!hju
z>V@JHVqE-?90oMba$$L~u3flY0<d)%qZgS-v=eq@A>#;!zU@^n15c1cf^TIi)_A-p
z>t|H*KDSVaoKQmw$$;Y;!`yf5cAVI}nKLYzSibbFloCYd6N#6wxj<N$AY4>cae+iQ
zD^o~NgD75=@ck4YQNFs*?_0AfOe?Q^7rQYi&0}O42Lu!)!Qqz#tSJS%2<jcLYTh7`
zW?De`i;tX+l;C7%C`>JVV@@uN7Y0TpNGdhNnlQDk#U#$b_X7Y`CtU%j(<s7_F4t-?
z8s40hkJ&fX9<+<=A9dZ{@!zqdUl!jUP57?@=CKJPuuTm-gzLs5vXA1Waksh0f?Je>
zU7xe&c9ry05g)ObpzOlq^$ChFSNt3nhFDmoMP*nvN#5Od$7NSX71%Y&kN`9S@e)@S
zwYFAI>sIpqePbAKp;>p=PVx<cwp`n$pYwICHs{~9TP3fL4xfL;006LF+8=n&wF|_x
zH?;O5R2q-fZ7$2-Vz0Vpev`fG+PTqQ-Pu{|Z2gG6y7IA`?bW46uivY6;k;4Tqjj%x
zE>@Ir-MywlX;tY~cY_5;$-(nihmXEKc-%up)cqu0H?Bc9GB)M4FU3LNSJ2&!4FQ*P
z?O#oX$?0Muc`1+{E&tS>y6W4>&l|sUU*YA!Xz#|-Aj<yV_?>)!uDSb3TqTRBa;>Vd
z-<<H@ub=UL@{3#k+Pux_&0pY`#_z9N8?~1N`SpRfY~5f(#|^_OyI-5*uF|iWgxKmN
zTU+gLHI_h;-GL^rFGI$we(6vmXq9ot4_+sHVN`m29912A4=&<YYZroN&~_h^`T{zw
z9$e!Bv-%=~kzQ3CyIP}s#qx6&jf)Qw1UEB{7%oE__;kRy21=>`M}kQpg@HVkm=K(d
zt|m^Uw;0zO=}lp}ubRw?vl7tjxe<hN;j{GCXZ_%y=HVNZ`zyEETc!kFH?A7CvZ9>6
z&D)B1A@YW>okw<U+B234>5Yo`@c_KE=4(Fhd)QOM9_Z9!nbo+QV``{#TQI7A1oR`c
z*GPA@L88jcMEd|GEirSYGo#VyzR7h&7HO=-(Bm*;PU=l<Bgxc2Xn_WA6^9q1<*Lck
zlAY+C(+Q2^^vsFMg<BJX9h-yJGnfYgK`bO$(+mKJB55T6a8dk-zO*Wws+q6tlk&5q
zFHSInU6R@;teGWKfnUIsK97;2FQ$nnM(ofH-LM!%b;DE<DkmrCdb7LKE`T#l(K@B(
zuQ8QA#y!^!n0cyHHB@SZvzjR3U#k($%NfFP#2KB=uVQWTn>?S^ZLQ|kz~oKV3`RXt
z<UKTS#^g~J#$!#ouBGrWx!JpVV#HE5>C;>~ni^140#`A%yyJP!>IdVxwtBiKADt_y
zsIJKFJ<B7C6k&9wGH}6gM{$uW1UUmf>N{=wEU41Z_%wl>5%;p`DGttrB5**57j(@v
zVp-@(oKhk2laOI9aTR(cLb9y)U&nds=J^QdX32`|{=SD#tEaMiA4NG)`R)37V5FDU
z4|qHw)=8~AMPz!U9s##s<V0|{q;@LA>G|9wog^Puaqv)`bMbKW^`;4P%qD)Y^Sv5B
z$0;xc%Y`Nx_>{28NFk(cMIaIAu_a8XTatKbPf!f`K6xgY|1nJ3x(wBO7{2#{T0j(K
zHyZaX$_P-bFL(Ry!k4?1zn}St(H(botG@s7f~Z_{-1EoJF2Zl;_zgmdzuZ0#zc6=j
zgvi2sW_BPI@TD?v6%s;7QRu$MqFK%SMGnp+ot9O>>2%{$LoxChC4g}mzZ2(wH1vdp
zxSE!J)NAs_i?!;KVO`6uYj^#okJ$*M2*h&UaxI)5U)|LtdY{F=GPlu^QKVdFWiE;D
z^{tDKEHP-@2MyC7opx*3Rc<nU0*e38qEe)G?3EzEWM$S-8X!8HJ`yk;!bwb|WESgL
z9EZY+-X=Rd#^Y>SDSU(nM%NsK%yul%Eu%CN**wg|afgnUCi=i3*$jb8<wWJG5@W1`
zKr9MjJjo~{m|THKirf7>6hh^v#x<M{;lA}kpsYf<_k1zQ6Un^t<yD<Jy``igUTUR|
zue;Ew`x_q*^@(uq@8ljz&NTh)MNQ(Jga|4lOkeioLho!=x<jKDSX%NBTO2K}qV<K+
z1xw3V?-!i(`ZhL>;rr_4>ttG%0LfrQW_ppkLAjE+a)&tgb3BuRZo}D}bE#HS8XupL
zHP7Idbssix19@>5$K#E%ySzdoX<2<4uKu;TSs2f=>7tfw^(vpwuKb825Pg;0W2VW2
z<mBEcA7@uqN%l%fseL(vI=9)a1!`c`6|Ev+dmB78&043R8;nrdjcPJ^onmx(*`|_N
zJa4{atgn62yS>0`abNjxRkfy044VZKbb{1Ir;a)S`cpnDHMb@PfIF^@EeA$NS1NNN
zLAbgyOoX92v7-%YI3!x28)w!?63oIl6uhH@z)o%%?cg!5BK?DvSTfgll3S7Va|_~W
ziQ?Q5j`MN~Ss_Nl$)l%-RuYko-XZWh+PTvkj*EDsRg0;>@@L7I?cfv0il&9|LY9V)
z*G%IO%4{UG138M3-sD7Zo6x8JQWrk$@kPC;!%Y}kDe4PV?jDju`)KIcKBvV;?do6+
zf^R8(p=SsLCdMZkC?_k08VDG@Xb?#Tb2tT&{2%!gP1~+?tG_;!`Ny*1!Hw(>ExTS{
z{mY!!sQgzx4FCJY&9euHXjBWZhjJ@>^?{n=&?s6}+g#`hV#3W8HQw)v%of1XOWedI
zC-Rc-liL42k$8U-)dtl^sV%3lYt%V7n7PT$XG?D>hgJBN##<<nULL+YczXE!z^xnC
zC!Y3Ze1&o@U)-!Q>Pp?p%iq+O&g)K&x<6g`^p#mID@EGpdBf5w{RV;5D9s)Rio;%5
zGxCtYS6B7f6}h2!rb783HR?F`tQ5uVH$WDkOHKB{jvr@9;a7~AuB5z8EDg-i-yogp
zNEoi)NNM0EZ{G#+7ZJyDeH^J)`9!0?b}$onR|iJE&7zkGS;BSLP5LWlweMYFNk5uH
zAQ%%TdjG3~=f_95veSR`bpQ2Z`IXf<aNrr4tyFEI<B2cDjBvc&$Sj7!VP6?uDf3WQ
zEN9tqwt8gSG`1cFw?-)Cp6ii*l1Zdb>(8K3Tk-XEj@;4y^0w_$uZXN;E4|;5y8fNG
zte(gN1ZFv@ma!1r@#(Lo{wkhK7gOL25eB3q0S>DWoR>AYnHq2h&E_->9)^2VhTMq`
znTG|plyYN<e~cXm%{KCUyisaN4t8Id8#O1#OiIm*v-r#F<44fri!w?JJ{@PYy|MxP
zhj*RbD;~|hsa;j={p`2Cd+EBmKFb9WLK($4&oilzI5FM(*TEc-EHR9qcpE=Y@9g%O
zyykv%dVX?GM(x4gJx;}g`?Yaq0-hBec(XvG?4Gb7p17nnbGm#M(Ia~$R?!aKM}o^s
z#?$F>1Q9e>0rgw~|B<+fc2#TUthe{?;V9Bh>Tg+eNJ**?@)Zj|rQVGaaL)beQ^-D|
zhykZeICIU5+M+XN8W5|%W^{>C3+xOaxI&T(h8Sdx;^>O~5zvuZPC06?(T+TXz{M!e
z<O%%Up*uu>57*x(M{wG@|Gv;3?wE`6y)(#VRliSOE@mLrxefw8CU=i$7T()LzgH&>
zJtAVBqb3(m9<ri6uk%=}VX+X=X76c&PP|v2?EA=_6#KK}eK?E!epI(uU}I_-5XRj)
z2*sYEuikT}(u0-g^+{>q<oEQ_1HIb=?KTm6J9RMQP8~Zv`b>3fypO6%Wk6*tS+Q>e
z`UL)ZaSu0eLDoS5;9KPldr@_DC)7iCtfaYPHOL(;_w8s6aVIL+?MQuXM+##*^>S9R
zdwjV*w+9_Wwc76$zyUTKtBTh!GDlDM6Y+bURR8+^;$PpN|LgnF_crTGB|r9xP@#2j
zaI-3`)dg5BG38*twZl$`T=O!*$q5Sf*)8Q}c(133#2H+-8DIF<_m_G87XQ6)s=zt^
zu%qIx)cp77Ki$XRLe<LV{FAA^{0oFo$fA=+$aCOscPCPxke{jMWAo8ITz>j6`t>YI
zZHZG^Yd)#f-y3JeoQOsGJ*G+Nh6PDxc>wxyE3m(jawe<UJ`*|0laYOtGv&wJP?{Rr
z7YZk1pXBrRMXoYna-WQWu%Y_pq$fIcPoT{1BYgF*@5LVf*Y|LT{_A^~T@eKWGUplS
z<+w;<tECE1ovstg3JR6ydG7d>R2D8-K3zO?-5SAe7)K$yyNUb+^N@BV5Uxv3gBMZP
zlIGo|u+<b(;V&TwZ@`8U^Pv6)>ncLb_guq0P5Y0!TzjcqW_F_PNmR0=#f0Z+*0{aJ
z#6I<L{y|Xg-7Mk=6)@-XVl>K$M53!aIr_^}cis+%i;D#cC&IE+*u{Hp!97UsrSYlJ
z<$^jP$_p2zW&ggH!#uU9>d0UyrLl^qP0TZZx4%ywNhYz=TI*PkcURnvZ}Chy>UrET
z3|{;wg3*|)t8VfvpJ&V|<Z4;@t%1Hx1&;eL9vryz-cz!6BBs{PGCOOh$rR}>+>6j!
z{Ao%=NFhdw@>rSmewPsjk4`|A%~IOz`pvYI55E4(Y6-&cC1B}(;XnTse~bya(bwOt
zj9+wuC{$QqzqKgkhg*$8+j|ljXZ)@%8zsvV7Sjh32*Rwbitt5SY1OeN5<%<h+mXiR
z8;fFsYlDHy+SHn8V5D8G=#2KX7M_FZ=*}8>%y-I@GWi+sPWaj<2j{!cw8(mUY1EBm
zKQC3v>3uuqJYRJ-t?@k9-Wj`wozU?<VebT16_QQ)Zm{xqwS%_N6Iu!@a%Uu39g6WR
z?+iIFtzzPnXB7R^pcShCj&F$V#sj6{xltW0`}O4Qgs@*xTm=s-^t!^JMfnlxt**0j
zFmeTM(^@Wp772xtGO<G*IWg*l&YX1wp}KKnLm00D2?;jRR4IE*I|~nMG2~v8^0O1^
z@gJ<b>fj{2S(%1Jx!{P6ic&s~v%2#S0seOM)NU4Qe3;U`vs3^q=)>ct<K2xDucgs7
z1~5+Z%VgVGhO+9j@it0jG8Whtx-dR~X8<v-ys(NK>R#-0?U6=yiLf3`uf-f{OUmsg
z!5|hY2Y0$!FRpmhHr56r^Glst8>ByZ_>Z|roW&tEB|+}Xmj7UAv>uJ=m}}GhKWF84
zw200P5%w(J^J0>x0;{vVJtGaa^#Y)^2=Vq$(5Bl8<@XVBauduz&`fXb?(W9%V~)iW
z-Mk-O-@46ZiKoh*oR+h6R*uIUp42II?<$%~GD*ce1(X^eQC=^7om9t34fq8N@R543
z*(!Brv()KTCMbAIkXL=$hI`BQHqzwsG+Vf#v`%er?<sbyFk6$wKGZr((FcfLvY{1?
z0Gh#clms7CMfbA4Qc<m?zl`xBJyAG#Ej0>$RM0|LwXTe?ZOPcMMBjmdgCi$~6FK3w
zwL5t&<)wDbY=u4|&eW6bZL?9gx7VAlwEu4aAR=A%whi)<NfI%<DIL@&o-96%9>(WB
zXAP=oe|rH#=M3IvcMd5??HH)i^kg!l%J9hv!!w1}<!k+T1QNXf%izdf8~54mk}37*
zw*YlE%uF_P)v?AsiTrHpM33t?eSw4)S@4L@JT0DwmC*xzg%m3c00Yj*#Q+&L?z_`$
z?oJ~q1ogFu89k+b1yE`mI)d;9)OQf2uO*F=0CO<cwR;W;g=I@PX~c$bc3FxOSh0h6
z6wm?+XE9|bwgj;4Af3~}Rca@`KMUkcCoa;tVmC;NX6gI!I6HF-V-|zE56aoh*t%(Y
zp`&JL0k3*2OY_9F@qO!jKA%>5J3E(`m))~`?yhy+dv+8<Uz-oNjpRbNDBUg7a>}&N
zpYRnZ)P@t$mnaGry5+&ZH$8_Bgb{=7ZTBL8X&d*GFmQ<?0CSD`5W>Z&U6(glwuwGQ
zOP<I@h^f{{!D@4&@KwcJ7MEXC3N2vIT)N>sFPX@#cvpmVpEqH*#a-sRZndNx1kVCf
zqBI{>)3!dE=uHtht-p%l5P*mC3-vl8M;pVc6Na<Of4@PdR`IA_sCDay)tR7$pon5^
zA@t|NfzWvan@jZJGJIjw=r9n3k!Z*a0yvrw1<sdSla_yz*cVkhWa#?0Da4ml)(?%m
z2Z0=?L9@!@BAX`kKw(KVb<cHYZ2MOzn(I`>e@p?jI%yQ|I)PJti0s1d<Fh`}HzSn8
z&4PUYXyA$>;&k;{3vHf^c(ehXAVj@RM=L#}$?qfqLsS}^|0>ANz{wo)FjV5OS@nwe
zl~znnXPFNJGjkRW4D<hh`ldb|nh;1r43MVE%cvgh#VN&ETp+;{m8T;DbAv0M8XXUh
z8p`5nJ2s|3!k)T&tREdcrxeZ&X#|R^2+a%ah{(d0rZm;M0Rzl_(IC{Tm=Axl<go3p
zTNBM2+sQ@Y4jhy>QdKl`?>=4(SC&|{^qy-}gMMEEL};bDrW(rOgdw7+Qx=RwdDaQI
z!Z)KL+Rl_=9#M##mC5O17TGidrvrZw4-RU<X;UXpPDCZ8BI@<h-$YSwT`ud-?RW_}
zJ?NcT_h=a!7KaAmnkeVKuA6(2xooScX0gNpgGE1fDwt%$NYOUxa)@mZ^Lxxel%Oa2
zsNB;xBZ!(-P}c*)3h8bXJHx;*+^)JJ{HYLRDr$NV-4docE3>hb1vo__2Qx&Ty6v0l
z-!P-7_QAhZdZafdEQy{2=1<A&Bz{)QA03_eFcg-kPV5NvkQZ$&GZ4xXlOLU$;IQ+J
zy4frEZKe1)t%F)_Y#h;ry_duqma%kpNBO%Q4ByVs?TwzgV=5nBt^&fOYjz1L^BGcy
zHNWkoh91&D=)uS=E|eKn%A*81DT3703`pM2iLYX0&6F{FNQu2b&0@%`rtKICC#qVU
zYDs0>Bx!P5Sp1U%5{`DZd{*W$M8B#1H+CIW5Dt>#6JkMXM8@8vV8ht!>l9Vph;3AZ
z52)jDr;6+V4afw5eOblypHG0plhF}r4745140Iz>XK<yo(FNwoCZ%YIb*46y%-O;K
zrGYz5+?zG*QX!V=BD@ptS0-t++>{oRO!;mih;?^i|K%ZYU$X27l$}+_D8<0~I~^DE
z808%4@RF>!aT3per*>j~50+sG+voG~4q#jX3m)-2j&a9{el)%f$%OUtem1h2D_wH)
z1e>h33Y}&B)^m@Pi#fdxZj{EOn4OnyjqK9Nb0#4&J5Rc36XZVhWGT_$;|O;pF1mu3
zw8>X0#i@M-(9*$>9O!!F?@}|NLLP9p+tnPF`q1_FVko%)+~O=F`)Yh}rR;#-dmG7&
zHI7_S^tjpm78?R#?rLgEn+AxviLO{aVXltoSc`IztZdY~By2Z1#l0VY)Y^UT#wrTt
z8b?w<K)N77kII#pn%yJk2UgUWC=;o>T27$5^rhQVB@?}mucmp#h^SQYn$)Z5nHFeA
z0gXvnAz+i4)-^|mhaPs2xkx74Q|mU9IQSJ~!dSD!%r|=BazV&ql~Jeen+v)zH2pUV
z$8M!Df%SOF8ymNLOkA^9kOkcdIXgiVl9eiisdbsQ`uoSn`;WdBqG!vs0ZVURL3<21
zo>~wjdyNr1T6`YEdz32pTPkL2yUD7%Bmaa<>A{a8ucE*ub-Yk(G1DR*Z(cw`2HYdE
z5aH{V!@%I}E5MT?3x@U8@7$s+g<_BMJDq6-2@`*jW82-h4JW>2-ks*$W=Mu_MT^CC
zP8LyH1of+fqhm^7$^9(nbEgG4?cH>J_mijYm<i=Cu*o}eMpv#oU|^Pl6v7s|?bsGP
zXW39@!yLyb>Zk-eU*KJu*f%!>*jNnSrR9bZV(aJ32=U}UHR0XexYKphIgY$Y?jPri
zfqIZy`q8?aU<zHLBp&*Jt}C~kt1BlUF7}c>M&;4CaI#(T45#D8*%?=y9%L{w=yF&9
z7Z$z-)>3O@N?`?Et~f114uLE~9(8VDwXAle#g)1r3{C2;w=^b5*MSJy;hqY~y9-1c
z=v28p&nz4-N{fnd)3H$0-SH<<%*6O)2{P-^<455$R1=>%+rh&y!M&0tCyg94$xgY6
z5O+J(CzDwcnI?_}@&}BFCi|z5LB_}8dgq<t@!6|1G~{=I>34c6WLIvdv)WM7c|1}|
z#WELa$xA5hmiP=OWRLXQt(fJz@>k!v%jz~0zQ2WJ1Q-(e32zhc!JQsLvm8}oS%Ne=
z@)~?1x3*cuB_s(_zTE7cXg^af=MA6@_li++KUwN97T|7Nj36qTJCXM!XH~TN4f@~j
zI}?*5PM-orM-Lmka_tnS$?Rma7;S!^JV^9~-)}gvy3rhti|ogi-Rc`d`|Y-AOosI+
z-y)JARHNDUSCtvyk-10bRqIo5BvaiiQ6hRkwSLLGR~qqd?UoZ~_0@8C-1;k+SSFPL
zqh2=et2m4=1<-z+isNh=<JeX#y+rSE*n?@ylJ72njcNODl)FvZk%XR0nEb<W>4a<b
zHosIgVQxVsXBf?#u*P@=U95adgI!;$Eb;1Ko|M83@AoAXF6cM0v0N@_3ltGL^>e8W
zCY2ofI=Dg|V4c8>Go$_!7E{3lR*{QsN8CcB5Beq77uG1BiNGlTtQ<JGcz3<cz>*{u
z>K+r~URI@?>uwuCSL`qvGcz7ZIBCU$Hq2{UZdizjHMRSc!7LLie8#!qt}0k=+xz2|
z#mO6NLpyWIiRd#@bQ&_X)vUW(>mb$NsY<{R(%!4D6Bu^cX&&+orE~|Y9^M5>f{Z17
z;Jst`fLqy*8@CFVQMgUf^_^65gQZ1Jx;g=iDxEQhx;a#V971!O+tFwc{kGFea<{ay
zDH5U-qL!c+p?yvO4vT-(xyuC@rPOLBvk35`m{CLLNgVPu1=le8y;C4kDTRsv%vVii
z4qQ5w8ZIh479P)H;zlEp`k~rlVeGoGQfwhGo#9CT!5F``&eA0i@p{JaMgoKTm#&dc
z1N_5-W->)7MTO8ipY+DTkwi{6MR#?aYIKC%dgF1^?`?S9hWrW1ZS!!B+)Z@Ufv!QL
zPU7?$weKo*RkYZVj=iFp4>qE^;MYFRKDYxbspk&2LxTh0ja0?i<gTx$%?*S|s-n@-
z#=iH>Dl0<lJXfc<Vyj>S(SvmrV0+<!nT>=w2L`KCZHl=wGpDnXR=;JBjDt^1_GzoH
zsC<CoLsA^^ypw>$=T~eCINyD`qOhnMsjG2f*TR`)V=BUeS#p>7mdnof`}C0C+yh@u
z8WIMFqmRG!_n#ggyy{2d$>?{{TgEbK2?=-I(nUU7^ngY#VD6!<<QSOI;ys)v`;Q+d
zk6t`|{p>kLsNa^o2pnhWmW<<F*=;hzEt9;=yp<|9O0I?+wS(U8e3nd?<s4gkTK|Z)
zh^9AnZXZY`6zUqPPh6qQ5JEm{7{%Sl#WW~KkY7qg4TXdL`k`C77bWd9gH~s>7-)`n
zfwv)Dd;RKZCl-0(n<8~g1<$DkT;*P2!SR)Hr!l(0S?Nz!=wMon+UlRe@zxh2Z@BtB
zV_V6Y>QJ9B6E0SAVe>caX6+o0cFi17y~u;kphA!$2Du9WSQCCj0AE0$zjrL5y{ev?
zU&eYIk1T-l&dKGDl@igM_~86mHti<zRRK}1hfnG6#YnA9yi;Q>`v7uiy-8?e_X~H3
zt@3B!{;g#HD4Cw!-7vJyZ9(Ono^=EG<D0J!UL7PspWWL#K78iv+WluQogzOeFI(;S
zQkon-ciZXP{in$vlgIntDXyjY2W;jHDk``am|f!5r;UzNW)TAKWz(V`yB^wmH(+<W
z4j|F+5Fg2UP{WI~1*z3D5n)~n_`EJ-Ab-$)4@Y~(Uv@uf#YlZlqc{@Nsh#}kPsy&w
z282e=l=74BVJLm?e!vcCjp?Lw$J+hm*4^YT|Ng@t*h_md4?u++uvXu^6Oh;umtL3W
zfm`wPSJ)W-iALCc;3J;pzx+#&zL)#Ac6a-L8T_5I%v%5C-q9`Jwt1FcQUV<y1lsEB
zM#tREa%BBDN%Z@lal7bPzepp}(}7SU*hfm2aWDGW@^9m9-LVr+ZV}wSe?Qr6JCi%l
z-r@#YF7QR+5RyBE-J#W*wUhe~l3CZ8st<G;fN%J_UpCk*pRBhkT~2;hGZi^wyB#xu
zwTa{xw*%IqExH~lbYqBQ#nFIxp-N0(t7Bhrkxi}Ba8Grmu(UY6au?fOLN{*x>tw6F
z@w*tClFRZw>Zs1Uu!Y?)G+V<Ew3`@_m90E!0za?#{AiGDATR)muklpQ+ZCIzCv1`-
zF$f228j+O89{Fp9*+&iL2Sr}=gerJJoUK%CK6W<S*NQNB-Gaxhn;hZ%;^E!#H*8gP
zS73<ssuz%9P>!cSWmc@jcJjz|@U5REhAhM%Rn4!)maV_qV<1d#_=oCi{^)85S_wt<
zTsQmPy;*Y(eG(?{le&;CE+}L%O#UBSiW`zhGM;zURn^r{MHg5@s5(YOQ=bSUv$5eU
z5EasU8*n#$$T79SyR^OgQBy5MEPIRD`2OZiMCE3i4Ve?`d;UwzMTvRHE4mhbY;Eqq
z#aL~2q>#J1|MMn=?B-r_tCMVsh;{$C{n;=2Db{`$M39qFD{_>{OIG;D+VXuQWzqvA
zw53~n)3){|Mcbw<md!nD;}>aTMFg+q+uFQtON0d?8)CB)p8MCyrid~8(j6@>rWGVq
z-D}s)Cm82eTOO35_F`_mw=e2<@X4rb+gLXQPO|YFXvae#f2<U7;p-X#?$?U2=5T#T
zfQ9?LzV_?ISM%jwc-6>B&q^n#vkH#X*Oe6MR<1Q#q%`r#tGiUP?hY@w+A6oO&TCcR
zA;fI?z8X}%yQZLB0~jztM?Q-{V>^(az{Zw39=8?{>14@fC#qwr*B_|?aP*g_K`*E8
zS0E(gQgAa>#KVb*W=7xzlDl_>M@w{ed}hu>xNF}hU-%Z)(uC5G2irA(!%&aqWOd)T
zA!Kyl_G`EH*%ae2_;3yVYHnMbpC>F#RV5V=n2dmnh(w1#$gYK>VF*KS8I%ot?HF<T
zFteh{={SCfQv)`TV%zc*ndLtSlCuJ-q2ZRuMr5pCn$dHs`^Qf|@9s)-rt4qiRRu{$
z(^DCx2<<Eb(f5n+uF^zW!~XLG13;ngB;h>OJS~7mW9bN>Zr@TF6gHsRfoFby=@ERN
zV%AZB;JZpxlGp()5yXyW<GWuoLFM$|wlX@hb~Wol5{dgqcV6({t?JJGO|JV*3I8ax
zI4^A_zx0V#6y=VYF9Yb|ZXzB_=u8&0XG}Gxq-oqliDMWzivKCAuFA<g1N&A>V&+N{
zJSy99SRrz`SlR`)s(b&rh4q$vo4KS)D)bFIhtq|;pyF_o7Awu%LRr=i^gav(fJz}9
z<Uk0l6-*CM_jPcmr4bjQ_Eg@iA<9%&NX=;*`Mq&A+{KA1B?;*Hg&Tcs_;i-%NWGX!
z=qFaJx*;QuY)I8VnhtlNtz1XsbR>*TC?8-D)6?B$2;ws!;}%PhzuVgv^|rRRi76m%
zAWMi)@zsCy>R|u)AbGa`=+%pU5*N(JRdfK7O2ElBCf{`fO)grtZdQ<IuL<PIeiKtb
zgs3mt7Kj3sLs9Ae9s|~ca>T7^oqX}iX?HK5?mzPVr9L23-mS_>w~Qrl{rw|x<@M{3
zPw)u|e=(2%Y7c9^2O@cg&ySAxpFZvH^q;=ie~c?f2gmr2_Tu>9*-L94n6t)wh-5>_
zdiCiS3W&fw<`1GF7@4b|ND0~s-hQZvwGf}=2Fa*F>d9;T)2S5c*SLRlwXGRV29J89
z;#~{X6CJm{#$$TM_Gm@#A31&N(f-jv^5*M<=gGjSZM(@a{`5B<JUs&b$&UN+;Q3=`
zP_KK_)Ja5y22gD{&&FunZAvG$Teo(1ozCNX65rHGZnv*#v!XQXVQ;sp+0cn=Hp_`}
zJ+JFi%ysP14~CoD$<xDUhsVi8HKoJJYOFe3-2B6)XD@Wp24y(H*SWnN@8K)dsz}Zh
zfl`>~<d*0u{F;!Ixvd=p`-=c8XW$i<m@|Y-7Wuj-p;Vdkc&l=a%c73xZaaQgk?v)X
zE78@+DiG~w<u9gpb8f_>JV_xIg~Zey$|F0)CkiSdJ>62^55@)0Gg8~y(k66ZiaY>y
zziIAPCW@wZU}NKXsg@wUv@v<%gxU0`#hD;6)VEC3ab%aBq2_3o+peHLmK%cc63>7t
zsJ~h<E5v+)<Sp2bZuknM5AO>tFsl`8V=@dc*12RGQY8(#8&b2S`rjr=fQ5$?>3z5E
z`-!@dLHVG|ysw2p0%PK#(*5)joz>ENXXU$sr&<{PC2__F&NV+#-0%L!?n;|Rw};<&
zGeEHdBA7hM+)3GNy6|S7>|n%@!VVTPPb8d+3pw7ABvI)KzUx+p1;o2%mpltn5;+Vh
z>o+?IW`T!^6K8KTQe?Zil`Ru*6dM_eR3A-oA1*@H*OYj~S~xbt@OGk@bfB@-+7vzs
z<)mb2%i};23SMdBd<wlxc^x#ByGYP=rF6b=;AZ1XBv4!yYE|Ia<1+<VJ&0<iXfLuj
zpwS`Sd4|$Bg~1I=2btQ@x^b4C0Ll@14V5}b#g?2@+_2|+C0&PNfhFxX(@cd;$CxYp
zYnC36cF07$AzVpH2sX}tMEp%NZ+N$d-4UP))t@;`F_vwN$s-t~lA=N3-P-!M|N7sz
z+5*9+8K+ea3YjNHE-+-m`YM2-(+D+)C`T-}SP2^>1s?zoa>MPlGkmzA?C1*^h`gwB
z3Idr*^y|Eo7-<j<&@C&0QB_ILDii}xVjvNpY&O@>gk@dq2J%eR4Mfl=2@K1e>+8Rm
zxTmqcm?9JO7Qd*aAK`Oo-P_oD>3NlFHm@<a#CjsMe;if(!n0zYBKD%yD^yEt=(vlu
zIE@Yq$?Gwb*1nPForK|QASAB>GOOJxoW^3->)OSqOBrfC5-bMAs)b==4sW0BehMbh
z8>t3kXo*S`lQK#OTq9(1$UQD9M(xo})AJ=4%W|LO1VYyWX``}EcqLGU3cUr0up`&6
zLnvhvQ^+;Qq}oqZ;2jCbQtgm~4Mzsih2Zb^0*d)QVXec4I!A{sWlR+s*bi>J=5j|(
zFQU^D<x>MF-pU~qR8T}fnTg<b0Ak?TB@%q(3+20rwIe3C&ZG7(`Y2ifdN`xhetMNs
zifErW9gGcilS54i9y6F1j43D}bSG4vT?K|BNwg;`aW2BT5}aHGN0t0|ab^6E|Cap!
z{;%hX1Sq)6WF!@i31^bAFy5AtJI}H~K8^{nJSCQBFsM!5<RRr=y(vJSx)+`7Ig-j(
zD=siVv~!|{hvDK1o`Omn2t+<3nIORX4R|zuOtI?w10DQQ!*P`+ztq<Y_pp!LH(|F5
zKydSgQoS2e2<tBeO7K6O9M?=B6^e~D6kcgR^yCM5?M<4%%Oduv;~8{CRwJrD60M%P
zT{Xw8%&cPVSP+c%l}LQFV^UxOC?9K@Yqf0cY4%`*x-R34?m0bli@|BiM~_%U4TIVe
z^&nCW1bwNSJkl~$C)i`LTSwE=7b?1W{1WCGf1ykjOf=R_6x9Y9<x)eV*Rl?y{}M7m
zrFGGK_OJ@;hf8}|-b)W<01-!fl+6jd&**gDY3c;TZhd`x{IYGe_V{21OrQmOTil-w
zd$2bIU&mA#>_J1Do8=8Xj;EUVzU+KdpI6AV0?+bncwW3y_;A8U)(<I3%d29vL|@$P
zkF8elPY-c6Hg}v_3vR}U*dL4BC3xT4yFLG74-eF<%g5y;uOFH`xx?9~%M?#aqT0oU
zJGR^*$IlJUum*wqKk5~0G`HdnP0v!Sk#X_4ncdzt)--p7MMan&3s<2TPNID_zy|B7
z&aM~85r?`<9-OJO!)NZCb;{Be^GK-OH7Q+MD1|(!Jr9Fz__k32ah|9ChLks?=;vsV
zrXC+PjXH-4fWuIz7FVaq7a8tNN2*u^&dB{LrJ$C?woQnoZ7w>Wedmj0`IOao#mP|t
z0-%aPPOW0K6JR@#61neYOWw0B@YQ*QQMQ_9GE{S^15IfXo5<`GICCmAqUiJE-FpHx
z%w%g$L!wrsr{Sl(p!~)Rww6HOi^#Vqc9`c9y2}dJ6Q7_fAbAB4)0R`YrQo&QT^De?
zN%W9x!SGh|La!LDW}XhIVD)yG2{sysOfYN4&C~_ZE;{1yVg{I4_@i-Gt5_vNEd0K=
z2Td5{wlTSB;2;fCw!Q3(l@4~2ql4p45_?^p$%nwQxVIRmnGi}v5@|KFwZ9#Kv|KvP
zLdg;>?{yNz1~KRCbbVixlaLhLsWC=kxwN=$noB{YGGz8-7+?$qo(%6{`lyKXDh8_<
z1w5%j6m~>#h%ds_dDn-DZ;hEHhImH&yMfp_g#2I*$y{rGxEBP0!qV5|<dy1|RH|R*
zW^HKIO12_9KKc+rDPqNA5#w3)dzTlz2&hieKP4GQf^}hdTSe#~u71r5O<%W;fSg8m
zj0H`q&ei;2cyD|q93NJF?wX<_MrT=Kb()N6NzwK4cqv6xz@4Q<q!A&*;3s&Kg6|nu
ztm*QoSpGeoHZ53Z?S7q-hd&RUk#~BUw6H7MeOU|r=B7#R*^T}7UCF;Ci9oCh(JMx)
zd0DIUJ%qm#z9W86bw^^7{pbVejUdJY<IN1d_7QB<LWr+~qRLZltr0&0xw><Y)A}Ge
zk?H<EIq@*t4Yr&*r;RNhUvzNuSNRuMB0d0ifZKg<c&p>YgnRKx4Zi#P_=QN>w+C<j
zPS<R*5&&HBzX|_M^l$q>%#*#7AYn#6r+NMY1OqP-!C^+tzG%dAeV1<dzfY0?ik{@v
z5V`T^2)tS?9ZdbkTxitLOHvD%N2h)bc>J!9V{pN$t<lPAzIt^g`66_`?MygVA-zD&
zY$@2HvaRVMPEpYF)AiA9MUw4dU}<oBIc1U<lvGLLzHy=_xg6NrWck|O)|7oidX&cn
z!aNWw`<htor)9xPha#;)UL1QXm*Q1UJV3?9+?!Z8p|e%_`ien5zsz&R0}YW35EaET
zEdES=;bYg<v3tuO7|J|&b=>dr`y=do{dC5(@!`(C%V)8ecTM;8R%TKu*-S82bR6ij
z&rcb=<S@4NU5dD`FDfQzpUVWVgLHI;#6m`lK>>uetJ-nbh}ToXFDk7jWbP1OA#2)F
z44sB%Z>CFKkWD3mU!02n8+|@=C(fkXZj4JP>XB~8VgmgpJg2y?442b~8E|IDpb+k&
z>D$0|=1zwf2O442ER@0F=yt0AOe?3_jIUB#9qGu){0Xgb8`&iZbZ?~ydVn+dVn9qJ
zjoMxL$}w}}z&oG?-@^7si{0zhGRe`R9JygbeyLvuq92fXie7H%Sx0U#=Ssv@91Kej
zq!oce6FVy#lryi6p-(LV*lH`<OG%${U0-V{_LdHCbBNp^FBKOFuAs3-sIX&NOe7xn
zG<X)!J=AtbxaaZXrwx+`D={c|S-hbxv#JhnkAhdP_o=DGXlH~)5)xtDm%Vc9_OACf
zz))zy-WOFw2LO#lDFnB-S7Ci@Z!@?j@<%c(?VRa*RFPI+L_?(7b!>CjuffmKZ!3t`
zS)pZCl?0KM2V)7zNEl{jgJMqa2s3e|5VL7CxzCNiwG*Kt)57!Ho-P`<qx<fNVGZZ@
zHgH>FI{WNLI0QspuN!<G1#^f{$RzBS(yBc52XsjhKYdrRfVSN+1Xsg~L#XT4nD6C|
z2_@l=mr#?cw@dR%M?uSpOQ9lXSP)>ZrXv~v*@cozTRd~gRl)wgo)lv1Ze!oaon;SK
z7`OpRv=bY<o&pN$Jazd|C>A~W2q2yq3zVE&LRQ99gfNn<YO|i*^&i=|YhFK&O}oD=
zO&YRj)>o+3>Rsalvc<EJS8dL&p|08hZg6wx+-QdP)J>1~cH%05a`RU$QdOfV`h_p5
zJ26-}-?T*=Z;lm|_wi|8|Dpcc+HY{U@j@yWnwXA-Dk)2g*YJau78X;|x@TQDt?iK0
zx0wP(eGVuSzs4(K)oVT1I?V-tp;ivJ#s{MMP4tXa%gzfY3e5WvO60s}Bd`j2=}{P*
z92}h_AP@sM9?$^yBnwr24c_P2+>~BT_PVyX;)}^?xdaQ4fh?=4X!6VKcT^9T1;`&j
zJ)t^R3Cl0q4PJ^>0@>_t2a%oXfQrn?^BTJ1_I3k~PqYMRPz(g%(_G^cSkaJahgliC
zD#{|$mnI{<akchI&2uqPU<yS$@eUZjFzIKnH0_6Jw6g0UQBn-Dk5hP>bFX~L`?n=k
zVLKQu(t~btc)DyBL_i{NWy~)rn<k+km};n~)kLe5@0B`R$<39S^Zf#JfUvAP8?5c~
z+x4x??y?~tz(0b_zetBirdb+3NoPfzyiG`~Arp8Z(b;)Ys57(=H+`p;pCN1WFR%BX
z9zOXF-_w(7$W}Xf@$JE@r1f(D)$!r+;fv?V!|xK&uwT4-?0#|o48^3$<Ab9|ZB#z?
z#Xr^m>eY+aFWpUji!MPUh?Hh$Kv7K&MpUFGyS+UU$A{mDgvE1T!@QLS7OkHz_kvqG
z?k&^a^Ps!8jjanVp7eIIwg-ErxC*-`vl7<Z41jxJ;hcHZ)Nv*+HM;2;a8T`WfMvj=
zF|tHGAU+7EGeYo$UN05YvX~=3jDdc8+{RGoak&Vjep~D;#dFIAuERLp`!G`ahT=9X
z&n8r2-8g2Ic*SE;jGJS549AJowe;6}xPj*y9s#lT6~Nwhs`*(jh}rc*KRn^4!at$!
z^<OPcB1&=ya<muNu8hqpS#v`8S1h^88^?qHpKCs*a}BW%$^w*|OBcO6z4o<tqf^D)
zlCg-fW`Q?B>uWALTD@&2<IIgg=V70V+zEy6%7yw#Wv$bH11wrK_wLqKvM2|N^+S!G
zpdYztRF4#Aga!r}<y044$DGpV%X*~yg_7lq$MG+fNkyQ)8014nVNXvL4?JoE^#?0k
z!13vpXSIMS18VZSN&orlr%(G%)<|j`_KP%CR6QL{Humtvi>C+s&-wR!w#Wmj4XGvL
zoeUiXqwG|q7dKGkg;_Y(Gz}J{oycNgzC||P88{`M5QscP=skn^0uZ<=Y;QZ=v`Z}8
z=?7Qn@HV}n?lq>l+iT3Gm#i;!MOqFIWQw-fHBPWSR!L3D2~iRB@vhVek>`$SH(ue>
zbgx#wvE`Khx6Z9t?_L%@+0*w#fpTv)!@Un{-1dP@i-<?xaY4L2ol8I-NgJY0@Mve<
zjW&QNq>5JG0XWGCo2b385h5nMy|Lr5t+TL;fb+1iaiBUZan`GP|6|Qbh|C2ZKxbpL
zbSR*2)rupb6>WtopLgQ*>=yf}v(ECq;+;k_>;%PK{gW{l`N@yx-5OST2CKKxAw+xy
z1Lm&$ZXNfZs6LZjRd;Y;Nos;%j@fOk;2Kc#kI^M+OI)lnEBd|20SO=Mwof(=nY~N*
zP{!~~v^^pP8Kv7lXA6+*pj&RXQdIuLQ%0lKVD70!gQ{dgdNZ(`_tgy_L<btpM0uw-
zh+-g?E#8%>TmcuZtxdX1G|L?8t@2BGlS!-rq)igt_CEFujZZ}D%gqkBdf9|KpjI_y
z#qsccE{{pe06bBSEf!uo0Qq|OOgp2NPp>7hn|kZtExOw9%J@)?ByNop&?qy5D3H{U
zLU>IlN<`?*tNO?}k-5|Sjt(D0UY(ym<`z*WVzfAQuW*u>1*I0htYx@G7TQxKu2EZ?
zL*rFQIr1eF4?B*m0m}m`sZD+<MJuzTaPn$CAZ54C&4eU4u}Mct1?EA817kTm6|`vI
zJ#YZd3#HouI)S9T2{ox3rqQTIG=J^z_Ql?*e?Mq8%E_6>7wtE`xi}5WCMt84kBK`k
zrZtizCm~NKc&;RNzy#8AcA3paDTi?m0Oh@aE9^^-MP(kAGXniH&zgk?Zp1-9!dEVj
zheW1nSYc>D>Qi27uE2$)Y04?XJQW-yxuOixfnzq%F+D+7h$7P)c>=90b=`ZHkH2qy
z68LzSR1*CNW(K2H5F==C<;lmeJWSC@gL);japt$M%c(~9{JwHKkp^K#u(ToJ3Dl$S
zT{^aDxmqs6=^~ZCpa&@tlm3Tf+K221O;Wju@o+kv+wC7CAj@vZmMOcIFQZp!=K9i^
zQI|G?dmjIFzsUP~81tGPAl*pHjs2q+Pm({sIDFm|z{$up>dfo18#$`nfj<H|4rpfM
z4kQooLpT#vYCmG~2oAZ5y6KySQ)+M7{q%=ODy(rurH#`!I<M(=kA=1rl~?&J0xXn@
z##UxN4o%^ZgEe1H5sj#omIY<CI6W<XR7z8Mjj8i>xoMg28lNw!Rak{2jEIAeW?TA<
zQvsi=>nw8W*P^~Yyrv)LzrIqfQ@_%Em(hUL5e1!ScxVN7HMXai*hx#H=|9nQ9t?Oj
zET@wFVf&F9S}UFz@iZyjbBnd=?Y_D+NH_<Dw`zW95{Q@0)f8~_fn*oLjcUxoxol|?
z(PensE=ZrcKr+ge578<2@Z4umb<FuFX;XIkGAa-jhEGB4o8IYmOTSiKCyveS?N@o_
z3<r?@Ws`gyY5<g~2B(nBz1Ahz8*3px#TayoPR4MCC0H%(rzp$H+H)s`)RZcTiA4Z*
zWPf_^|GYdq8%N)$L$y^!qha8ZjFGf_TWud<y_}WvJc8bcxO;sHa#n?*cda*xOvLx#
zR^IjStBTDF-MW@%rV&<I-T)|IWWZZ|QYpik0a>`sOPh2gW6kaK?YW<wjXWOJ^H-|H
z?3Aih(Nu=4(xNse^>qD?X4exUzZjwp6i@NrsI#fa-4x~Zesm1XiqVR>VJ6CM`8M$E
zagM{eZtTalbHs^L)RJu@j?sv)k8&-Sti&tt1hU$ENzVX8l-WUX(qhO}jJKaC7zjYt
zD{PX?&>;=&5vb9@?CaOlNHvFb|2S!Vd+_QAp5yxul2329A&S5`MOD=jE%o)*DluA3
z$zx8#k^|<9@ks)eN_wDMn{ie&S3d&h8yiP~Sce!WQ_hPafEe=>{QoD_D#FlzkmMBQ
zpA(GS$fKYV>oV~DNVx`G^YDQ<nF)swnBxVFQYb#BbPO`AlugJS;S_6pgIX_Q05t}D
z(iVFelniR<G#XbW+fF`NL~@+aqbzIp^;FY7e6O41N(<Y|82!?1^lY2tOr8zuBes%v
zsVlH<#HS87A{hr529v(YVFJYzE5UtdC&&!V%cy%>monLrwrie1?XR38$_Q3}71b8&
zljL+V{*45hN~t{2#1G{_M6$%@P*$b&cKA9g{0b-0_V)5{o1omQS=EhCZ}so-j|a(r
zN$y1_<Ac6}XVhcRK49dVabtWE$<CF@`t6R-=PRdIR=bDZ2&t<Z6HuerAvzSq`5^3^
zl95UFm-5w*i|L?rCL1f;mcLvNZsMBj+DW5@;Kmf)v`^^y=X!ij>d1agtEelZ404k2
z5-P(cB@vagQ8Du2Q>P?pI!Be~f7;}>jMxkO*iw2{lHwtV-mt%Qflrh-z==YD=t;^V
z+#>Ek2S^Lu+Y}D)qjA6Yn_==<c4>yje@X6qn*87Y-)OFH@814A-Th;_`)OZ<uEY!l
zn1pmd>a@u`OtzDumsrJ4NJ1)yTKXxtOLP{MEw};a5KO=&uT#{^hOD~tsS-jwFXxgX
z?s<Y}&KzpB^2n*oXJ<m+0dZpi@M#eub{Z8Bj-1FDCxo(=-9KYwOapWQ7HLp&Jd~9b
zmc$Ee%QZ5<;ILwSG5Ce)Ywm*QI<4JdtyJ|4b16=?EN;p61~4Sl{I`W`Y-C_Dv>piN
zG)Z*<OVShM33-IL{M8JClSsapE_6d1GVuf#tBT-=nO?!SmbaFiDN*XbQB@U_NM;IM
zQVmmD{8GvwMAjWShk?!!QrcC&L*HN7fl}2Dn`$B0T%I84ZN3#9oO|#q{kt6Iatza+
z@c}?Wv@OfGrBfO^uCS8wmwso8a?JrU<=UOCzDBsQvf^FeH}h#_;jf%4=v<^wt13@I
zLCusDh0ot11027TCRs6y56MojNjhGc74wVY&sSU;i|bZpJCG7n;W4~z3rpK6VHJ;n
zm#aFf7=yL3;MdpAsGdC0BVQsV|Hm~3ng2vh6(n(PZ$H#2af4+LYIW-{^JFOQ2$#s)
zX*8O5^`fua;eql2zE@)xO<Izpk_I^*>WXWQ*{EK}Z{JytrJH2$oW7Ci?t~4V%loRf
zrqtOddT0QRD@n)IMv`;gaCMAyWl@C`h$xlaNw5=Ge1MeszMrH92GKFPo^n<n{M7vL
zdgG4XSLNR3^#h3Hd4wks;uD)WX_b>ml_yxElV*m$L&s9-0Vxdh!8IRG6EXFmvz?xj
zTU`+3LiXHD(!QT&2#qP(LtOmD8YW{h8wzZHq-xz{#=uPLgoG1eVmTxGNj23bSGchi
zdJR_VS_u${&=s=(RQ()kjkQ>i?Yll1uUY0PNhr;+3Bd;^D5q*fVEA9oN}%^w#>{DQ
zXjJfZ<dF__nd)2W*j*yJq=aAbk%RApn{<{lGD~uJ>2v54VX58veO2FF`2;EHQrZHE
zbP|=K!M0ze&_;d^-qV(NU#m|G77ovIr>4qZmwEnH{<?5ueD3~q+Awfo7RpImP4giR
zQ&NG$K{`AKD10Pc6|k$Ad!9$%>5;lVhbVOP`Dy;++y(^LQnYHj?l=%+oqjC9)q6R}
zqo&17woRReRsnUxr9@X=sL}t>Vx_3|qN64&R7?;prLplvcZqg>=r-oYdevilJ#9!N
z`RaEGwpvrj>w}`g8@fU)Km?N8>Eji=M&_J)^z=}*U6mAJ2*N_5r32rwq}qpL7dz^n
z;3_;w(zL02f1cji?Q4O!KrD@%;2f7zjAq>$=Fe&LbGuz*HBw`CV`HCYMyTD4V<NN^
zR@=W67F(5}+NqDcRdd*LD}s%#-7so1C=}{~vU4-Ja8@l&^X=^z-{c0mi&?+h+wyI2
zgk}TgpAf&8z$;dM?(<mo<NN?i&R567ILd_7FT#twm1gRGEAyqTqY(rXm|dt~J3aD>
ze~=GG!!99L6a6cE4#CjIF9jzJEe7vQiSd+TvmO2|S(*ORbPgo>p2)+BQxh13;H6wu
zf0Jr;dYy5oVm%T&<}Wo?kzJOqoHY6pJug4Bm1I@))Ozpsj5WaHTZFRkDtjkKzF~vJ
z%kn%2m6m7__4N@dc8Tl(=9XHPji{5&0i@RkqO4-}441CCi=8mK5R6(`#9Gya5fs0v
z;DBHaN2pYu;7bQS(&@o*QLUa74{{tuw(c^P?>$#YVk!m{&!Ke-IVsjJspjD?Y9N4N
zOcl<cQ$x5*>1*?gMuCn&FIahm8%dSM*H_#x-Q;W5vKq$5Y&%X9k28m?V9F%My5caV
z*NP4%RbZCKVcvS9d}=qVQmhNnca&pW;y0@X3nHJZOGV5=h{8#=B&45K_2Y&zm2*$m
zgOfpNGJ{7({WzJhPF5B0KV%F$wbg{$$)cKDDZP!zyv(Y39aaR)u;r|n3v@3#*b#>X
zqM7>H@jCZ_I-=FhrS#`O0LQAoFA8YD(q*Y?!Y7L}778k}ZB!AY6KSwGJ;kDt()+^W
z5jed!7mQ_H@Yv~sxhEI2dPyTJKGjw)s~5z++&YGhW>{y^a}hpic1fpk1enH8C}VW?
zL|L$u#=8$%ah;ETJqIP076E{*9)LER)LF7#XvhJlAbw<tokT6k<`G<c90(plhw)=e
z>G*kPJ2`&w_yr_h?kp!~A@3!&CUqb7Y&@vSq{~ur5(URN@-^Ax6E0@Cfb5&NsKduC
z55C&j#DepH?ZXfyX-ZE!Q9}%J_D(>MES$Z)^UDoCIi6en>}Ta98<sXhRHn))kZ#3W
z8m3u*L1YY~nU3a$j$7a{*y3y~n~ql@{5RH?L$n&W2;{@wXk|Nh5lTB5P+V49DlPJn
zF&apDkfLu@H63mF6m3)PJks%ut5U^VNts&CEZ?%m{w_z`ETAh2o+uJ$>odu;jcDth
zSYlPgec-w#Kc{18nyKE>);!`mIc_-hSol-f3qs2MEFVj|=f$*&HYC$v{l7-FHC<G}
zLJ;c{lfeXAoo6eapKI+ObCp8EbFN6J6_Eo3om&T@CBAe+EedU#zZmB#oGfWAIo=&W
z1AKKpBQG@8M$r85oj?;2?=tKJoHvi42hNI$exNZqG|e0C9oY5NN6nF)tpHwH<q@E0
zKZ4mo!OPoReR72Dn+D8h@ZEt%*f#4209@#+B}8pDMD?0LHLc1;^m<p=2zDZ2sj=$)
zBdXn_1imf5P$gNA2@>a7RA%Kt6Y5wvO7|cEK21xvmW1foD{*z#Wq&0OM_-Za;5?69
zD9qhRO$T9`uIU6CLpKpSEar7C)mU;`$GD!fbfGbjwOqn^4y#o3XL|vnor~NQsch^Q
zb`zvk>>96)P{aRZ3EX63V+n0QYk=wsmvTE_TfZ!bybZ{KIO(SjJ<tFK@fZZO$`pp6
zYT^+1<x)c<AS~!bA!vOkqXE)aq{rX444)2gbRd>;zmheN@N~?v+KCt?QvyU*pP=_?
zahej4O_p9-o~9R9>C(-q=Q2HQfI^2-&s7KwEUNjIEb#A>hxvK-4*CAeG`@nOP%C3T
z_UKk_mWGlzrkkClqCU6Hgx=lN#t1XT>}2xh;3@;ruRmD<?sOy!H_Q!X&6O$vl+%zK
z%`I*1IBc6q8F#?iO4U8CK1w-VeBXl=1WFi?BoGH8W6a8UKa>>~H4EM|<JKj4AhIiv
zgtWDPM3~UAW2^z@$9g1;HLGxW*{R6ZO`kI}O`F)JP~Wzo*wCzknp;7f38KE~O6%yD
z5k<%SkWPXGG{*zJR+D}MEV5vS<#YRHLT0#cZW8KNOFN2=a8HV)!P!<OWtK#~MQ<a8
zPrN^>i%5!zK+&M`^ZEX>gTBH{veQCj9CQUm?Gnj^x~kWcw-XqUnwLfxmIyY)uteG*
zdtE2H)t0fEV7Kd>ed%<FVeUh?wJi}5ZUCAlwo)>I9xI8Wtr+08z^P#_uR$%c(qoD%
za@BJDRfX<|jSH~874R=X#7OUMT=m{09aFwBBN&sH?QD}?Y^xp8h(&JHoGFs6BBDfH
z)2M%#U1W+Q;RZjCfpfsXs_P=0qF^Y~J!-e=$yZ0xQvZh!Ie0HCN#ztln)%1F_``7{
zt6iTLeJrYqjv#RAse>tJ5wy}=K%QNVF={QXs;k8M3W6m_oIg~_8^~xG(;XSjb<5O0
z=0m9r76$fNgC1P`!rB)fn6}$fr@m13`6Or-gzo6#(G#f1&GGjrQunRYVq@b4!edh=
z^<kb-{~!~tcSP<wE_b-j)NpXO%3scSHw(jnYp7FsB-lNTGdH-$CDTgW&_PcXu6kih
zkW||S<nmlSD!`+X;*4e@sK*!h%hM+O*=06<TZOv$khN|4+ePLJz3W|5TdeU7(24UO
zrwD~HLJKQSkpW;KXx2kzYJzJoN)K=KrNSWjgIhH}V)tqZ0k}B&K3|iq>8+Y~?{0@R
zYJgd7B$>okFaX+e)XLhb)EYI|9O@+VzNM9^1DT)a3h?N_jwe8RIcZSxSv~!7JpHb?
z9uxsXu-pwap2v)OXlsb*viK|t-CSu1FS=e{_-LcRlr!ChF)3T*x*UC<qm<szbp{0W
za*rS1vvOF)J@*DlXeT@_K<AH|U9@*Mx~d`1sKa=@Jk!%>dLiKTp=R-NrjKzCi0{iI
zWe+7MNzQU%Et!_%tFtjG_y8FR$!!d=JI6;m55YW$^V*%>fXLiGI&ODr#2u~v?|*g&
z8Zx**V%+`(!B0t~D5}(NM6L+DaTE&m0<w0f(^J>Po=2wCue|5>T#pD7_tHf28PmnA
zc+h2)^+{*>8sHqim$QpT8t0gs7(thtZDEx;mCBrb&u%7A!1`@A0|G9AP)@D&h>;=M
zh`{<Fso<mfG?HZuz8sC63IEAF#$J-`C}jk!9eF3wBQ@Lxn(A-aV?-X--P`B{r(1Rb
zQ_NI9fUw3a74s`nOHRo(I23{kt*O&oavFNIrM6|G24mi88-@!|x7o^*goHt!td`Rs
zjgkznu{%_&+@O;4$*e%C)`oWl#sU;e=$fZ}b=P(GI61pg-SRgs6_7Q+mRE}Qq=CB3
z)oUfChm*(!69on~Hrzf;-Oh~WA*Ss10*+^>1>1spZYxh#2ocrnHYeRLazMUR^t8A}
z8MPbDvQrDv#{R^ZLX{z;0PphHS1(C1Q1eWv;k&yI_}dZsJ=btq906e#$oQ(BKPe?J
z*c98_2K8SH#e=jBrC_CaCAqoWmYKSi^`r^Oh?YOuK;$K&yLt(^(XJBH+SU^$?mW)U
zz+IMv4`Y_EI&E^ft_kWwL3*kV63JVIhtBdT1?kSiP-y0sg~Oicb9~93Q5MqBv;qrf
z<7?|uLze1IX*o-A6YF`>VV=IL(mdDgxKZ=#Dh3fHZT%Myva;eg^D*|+(i1^_Kgl|S
z&TwPB<5+J@A1sUc`cwBr7Zkdm0Dh|_Zh&mt!9T5!h6`!<3!zj};Ull@aEvOcEx-*-
z0jWR%TE5I6pfsTk-}LkB9qNBY5*QS#{0zd`xOUjGz(ffXhh^Lb|GL$6Nk6p{wb8OS
zWeSRB+BL^jV-c+;fTla^S;<v*`k(G_S(!8zf!C{?YSUL-%SNEER#O-tg=3je;Zp%0
zBD%P78q3r0PjJJefK0zh9iAsH)Lesl$z&*}6J%a19MMv8=4!Iw($~p;jOW|BQP#>%
zR+MLUBe9t%j7)IoH{GzUxyd45uv@Nom#p)2D+aSUfdB3P_-`Vgslb^DfF7k%d`Jzr
z6Bk%&+O8?~(7m`SG#Cu)hnbwvl2Foc*V4e0su59Yfj7_TpA;=d{Hw*xgf}Fk>kKO6
z?E;vQQ@OqRpTe}T8eA%VW=UYK{;?@$G-2(2LJG#Igy1`FJ0m`Sb9BR?b4Y_;_o%BG
z$;Xg8Adc`z1jHyh)8Ck<<rJaIRl7@)8gaUIgdMz@F_1<4i=<JHyhfQJmF=xKi&hBz
z<GS>V2t-uVt>fy8`_AZyVdAPU%foVs4iaH=)t8~BDTHJ$uVOH@6<RX2bV=i3i08a?
z@088PufV=o250u~bOxA**pa$%&*<H$<9}t1;opm*n)0M=R88TVemtaWwBZ#gU3w?D
z>OL%rLgL!?RL;=rcJ038!qC~QX=HMUzcQw$m8zeY?LmRVIZ5v;W1n(E-@Ny3#=P$*
zo6j>k=Y!n$bzFJ?z>A5fM${5@=nxl;+>G@byLBiOaRV9$s3fi7gw4+`@=)4dPcL}=
z>JSLgngJ5K@6k;#*Hn2OyHiW!B|)2kLgsmsK@{7TNj1ym2AY+vmFlTHq^^xY&TzoO
z-HAXtl}-MV@|r1;AE{in1*dLQvad$d9e<;d7-^1E1S7OW>e12VxSYO3=tDQ>M{AkE
zG4k8oQ`;;Zs#X(&Bd@4UJrCT?IT-fpaa-mh#EU_V7Nhr+`Ip$2pti~t?$x`|g0Mb%
zcITSdNx9z?rj#S|w|u5D;y#5*henHDz?9(onO<rb3iZ8P)C3!Rf~2T%Z684~N-VD}
zR-dXp{gQRM*2;ZQG;2=(9kr~mpkqY~C}8RyNrT2qIo!WSdzEA0bethzWXz_f*g%<@
zmP!w8K7{BH^4{lutY-ARsui4IH`1hQv7~Qnr_o-b2fLhWdgvR8E)y^TZJ~YbqJe#&
z!cON`ro2h1|Ga)Ub=NsF1lA^+>i7$lJ4$<T?|!m-H>eWdt~eb`oe<?h&a94=n4ojM
z_Jr$3t79`+uX~18<W)-1D1E9sPj|0V!cE^i%4^#hVorh-a=;-SFv_V6+|o53CmpB3
z6)_09#zKk%MS@gIoy>onqI$)n&<Z|}bWpo1*m7JYkB+`&OdW9^`nR7*Q$Zz@`zR$t
z^Tt?N`)ZLS`VPJq8h~GeJ%1yazRd%^-1iSQ4%hUN%rG@VGFz%MbpVSZKXuz)j{E(&
z5bSMl-;S^aKimE0AzV18@PFCK&u@m#HP5B~%VyUw{Rwm6=ARBQjk_Dic1PW(b2l|Z
z;r2~K6Rg(c?;3#2Os!GdWiK*k=w1U^O|;eP%8v+M6hr2g*=8ww`a&*f+j{`eqVY|u
ziw~P$4KPlAO^(GIZAk!AVW|<`%{k~kCrEl6dRnfeW>Phlzvv8}KA8Cg$m&xMifvJG
zS{dZ@$V19F&F5$S-H{Ief*Pd4iJ~|`iFL<(mxlsCc``E=O;ic_I(RgQIZZ!W^L3IC
zu*_#x-7xd5PQb2Trcp2<1l`v3*ljUFbkPTwoJ>lpwPFAE|Ng(!&TAE;HoYl#>ciWr
z+KRd)s1IU)cp`GAs39#y(DD5u@+rF6jC`szGO+4Bqz`9=N!_*#m?FoFN0pg6+4==P
zl!J~{a`Q{Oe!o|Jcwh+i>YnNUjBB0n6&-!wpML2}`rV0)lrUV)q>_5K$BR8)L`p%#
zNh(JuGX$ytqA88omr7C#N5cp&bg1u&NR!m(iOzIg%?sc(tYYIZuK37M=Wat(Fw&kQ
z&eCN7d|5y4_{e`Wtx_`y-8R=Mm{86q8g!-VGD9&Rs~~q)?9yiDEu2X*FGMdpIH)aE
zANoP^g%rr(@CtCgHQB;*`37F(r1j_^c~`lYwKYfjoGAuAJNbH__G&LSh5rk=^vI1J
zh*++|=&zuqkP$|%-XxW^N-KCYnD0dqX@4W62UGPslDc9lP9^w4`@WAs_gG^utGO)s
zS`mYynTt%V70`YiKGrlpJS3yKf#s&><&dkD^+9>=cPWc!FoFvO<IFYdE)<=xVvNJJ
zYNa;EiqzvP47Q~8X8&b-FUqzJP8+IDIizhSbu1pUQ^{lzG|q<d!XLy=;nJ7EhJd(=
zEDBA#(*#g^a(TP>+-g60@$O3fc==2*mUaT_H_o_qdt?QcPi2m-2r<+bAi*d;xXV1^
za&lUnEoRd3au$b81FxUtQgo5b`C<|+aIc3Y?-RF6TFpg@JWjVsTPvocy%tmbiTFMI
zmXh`MK6z=YYcE>kI;OSdtsaYO*4q2zRT${K8;mphwLHl0ljlf`^7L0S;7O|nh(VBE
zltvqRux1ouY@V0PPjd(iq*2b}!3+prNWu~)_50*lY-xE!;Ny%qZ^g&D*UaMwENdLE
z`m;Y6I`z}3<0FG^v|LX_Mg(vRld(ZFWJw^@^?D|*wjvVceR4?jca#9*^(QMWqqUAR
z_xzLCiyj>4*Za@0K7;UAq#P~*9z!2EY>>S9QtP4_avtPFGAis-#^i`$o{|Aftc(?e
zBZ?BpkD(vAh^1Myo~RmxaBw#br4}KM$^s+60$0rQ8+Cm3svs`Ffo2Ua+lg9zq1E!U
zJd8?r6=yo#z{b>0zV!-O-S604cYuDC&*z%NTvVk{x4NHGeoa1kSIo)@y+Pt{iG%u-
zyPhqcV)Iw=#eaf-r$Uzu_{fwH?plPIkj7cY9`^ytXB3r>^e-<`J}(TW>g;s#LXlaS
zC^Cj_?%l34XGG;5@<lP|{l_zX8r@W9GixaEhUJsZ`vb@nWWFWR(Al?cDdZ3c4Ll}@
zSmAK?VI7v^cT!m;uSqo===%X3PRGJ0=U9O@ELbN6^SOSpImiXwYp!FanN;(7{==0b
zwo+yFO22-9`LhEK+z1{edJ(Fcqryo}_N|nv@<}<$Bku%j9k4vCNKnIk^%TF0jD+YI
z6))7I@)}fF=8~~PUJG$YYfrh3SqO?x6^`V$H6MN39h}9qnUQFf_lyzoIE_@1B{#TI
z8_PRkJA{y~uF7byn2`-}!dce*a4|sMCbraNT{5`|KrO_bA0bvV%cHp<TG3md%<Oi#
zJDBURO>Q_gHjbD@wwGA#$>rr`_fpq<*KKJjJ{h{x8D)_O{8c{Nu&M!(xW+@<Q9@?5
zvGEM<NB{3yP!qF{$-uPHErNn0U7ampoRWtu0e%VR%YgV>&{!tfL<slX$D?|}65u7!
zu!5{Cxd(id2g!-$CQBl!F;9-UEXS+r*SMp(xDdFjJodrFefy9(^AUb5l5RZoX$ag2
zz<Bt0N$yjQ+tU~+RnB?ES<vdfz9dmA@?2lu;vPGhhxEC6G%TB>fQ6oy{Eyz!z7E^m
zAj8&1kUy0Auc=_T^(Dj0oL(}htCu&_r<|8lV5oJIel2pVDBi41X5`r`D-tXUj(Bz5
zFsEZn5K2BvZ+*VyJ-^%H>cyLS*|gB!wb~oYG33XHnKWX^>iL!Y3=X%L@={5HPdmCp
zGWZ5k5<hVj%W20ah{#5z&vTf|N$%u@<n(|@AfoP|Qj8_o)p&^B0-#H{%!XDUItgfE
zVGTG{C6xrvDs?YT?TL2Mg8VcJ3bS1%b%bME@d9sbst}k_eX^+{Hw=MX$DOJ5yfJEo
zEV(I1#7POi=ssDo$chU($O%jXk@9%OC*BoQt+~{JRy+qc`30NxL}djKB+uJX4<md(
z*<|_14puIftVSz#qKUV(NmP_<Zfv+ygz$R-0%;E}tM=Z8u$jluLM-Odd={t8nf9QI
zbTcf{O+L(H`F?Vm&xhx_I-%!8u-Lp!2yyv=z3NU6ORg2ZsjHi%wHbZGW+#j-lAx)#
z1p==X0#1B{CIWpnn50|s#Px=*oWC&?c$%F}O89NNaE9BwN7|FuSmNc<*vh&Ys6Ki8
zX?p3UN|i#Ct92!sQv)(wBWV+QA_4bF%{-u?xud)gBUAFyOrDb3H3megN$jBYTMyh(
z@YO5>(D~j6j+^_N?AT_~?RLNKcYW9ZZ(IsVPCc~3T|hx<Mi~_k)M@0(HX=X{pcij~
zG7<?4w*EKn4`(?U|CD$$VbW_%QATSmH<||i++Y9vUHZ=#=|7M7kFb=5jMgB=;v0|u
z`Rm5L$GczZ?TSOj+rLWR{PVX?2|GM`k>GlIm1naZ{MGi4zq!4uPa1BSe^dMpy~mRN
zkruUikGVFRxNWkNB`x`20jP~sSgFAz$?ot1<)Kb$-3UNUQff)CDCp|}(oFN<xMs-%
zEx4@)=_)-5g~L95#kwPtYE*7cqTmg5;7paBcYit^7h(#8IsO3UU6|bYPi}Y)_n+@4
z^Pgmd!gpXKULQZg#aFU@HJVQ4tWZ)s-2anXvR&AabMg|*C0LfZU03ZTySsaLb`#f-
zL?~&4YJPxs&?uM~%;kNkTIA>OO*b5y2HiYHxth4jwQiOx+kKFe&Zl^I#TP-l#^283
z6Hr%hC}GlHxcxOVf1yw;P?ei`pFXSD@mailDo_jj=7}Yi{_}S`|9r9Ic8FEA0z>cq
z=6CLY>9c3)<HyS#n&1Q92LwyO+k<bH->RjWT5=TuR8}E2?!9M4B_sf`eMlHxe{R_r
zYRFCe?&1`Vuy9$=OLBVw?6tBEU&0;g0$0LzwrU^%<I*i^1s?;4yhnBP_ZNnv4aGwF
zlo0RqH`<tlwPEmtH(VMb2XLS#K^TN>8qps58F@oLiKWLZ?aXNZ7H-QwbIRHUOo!ih
zv+khl+8mX0nKEj5a96pha7R&gMgI368J@ayhVGC~9j7P?UsxbLJ@v^nu-!8hrL<&0
zb`lFT&fH!r#|Uou=&bwJj%Il1Q)sIrNXx$aHyJp{p0Bm`)Ss!kxJGILEuZDlJrR!@
zxliV*%}S}J9l?VuS-YB}<Zg8e<1J42_3*G|NK|MAIvTi+Gmn+1^<C0^AL7s|3X7(i
zpP}7Vi0(z@DUhS8r98C{Yj8UVwp&BDpsFqa&E1XL-Q-0`fn=?#mjZi{b#q$iS<(@q
zDCvSFB()tLDw@Q;6`9wUHKSOaMS%5yF&ElYcU(Y~wm4B8<z3c#{DgXc<$)HVrsNX^
zNCSys1g9Gj1YT81_3Z>Tw7YR<X%ze(+>2HjiOz=eI5%O%25beqZ$TM{=uq9L6B15C
zK+Mp&+gOM^j=Pq8tIO3da<9bSSpDQU8YK59(kmk;x~Z66iBvw5+*?xK7cE_J{Uejh
z^@K1Ib6wdfN%Mfo*(h5JwB3JssxfHuQ1^cywIqn~TJ%^i1$R0`xYM1dZr0j;eVur!
zS~2`+{DWu#&{{QvpQlaeY1DnAVud8eaACn$ij_beVw}xc8R!qaV0-e65EW{T)w8kj
zy5ai~W2k<sMiL|cj}}K46Hmt%eO{GBIWDnTUq#29+0U?I6(9u-Yw_mc{08=zc&)E7
z#-#oPssaGMiaB+N;7+Np`hYm9p&p10DW$V-6m5hjnmQ<|=15gBmr^=#$BAGOpu*Ih
zvg7<6c@oRy1gWQ0-C2Q4h!qL!ewt0LkXGQ9E5TzAeImSDvz_1<X?~y`*@!>GKehr{
z7O!pi<t5)EFf1v~l!2rI0xtRcqMWmghjSw2$qnCCD;xrT>Z;J!wkDmsaf>}x02n6~
z1$CjJ2jg-_L;q&Jsy=BFN@nAb@$%@7OjI_5F3!APoYfh;rl1|}Hvu)4JR)1k`}g&i
z@Ivez*=qL%!(2V2f`2|5jn$#4fjAq9RzH4K>~Z;VOK>!q^BK)06p{&{Eqqj0US`TT
z($lPcV~SWO38~xGCC!c4wi=Rh0P~?HBpXGS{+*V7Lvsl4a55itl|=+#hL~i{WLIKj
z4L^oRt(Cqzfs%SBpxPheV4GJcHSylHhA%?gYq+}FrS@^|!0rb7kQ{t_@ch_ZYdX8?
z&#$<c;#n4~mae<<_eDP6y1TLQyX-P6=COn8=*|<kw|-7sTl6RX;x;31qL=J|O+2aj
z$l7-|ei7f+2M0mS_(bh8*@3s*|J&Tq?{Rx;zy38#Yn91t(Komgjw!uBaY;@W6G;<U
z;V~pH!p|GOi~F?X7(Cwna`Uc70jkB`)XodN-uRt#8pCwocisB~^#is#$<|goT#a{h
z>?OSWQL{lo^Xn!-D%Rk7*uQXJH_UdP=a;?j%Guk^#B6x8r2mnL`JeSUv9Ia(T?tF|
ziqQ3=*Uz5qzxwV2y;rit_ygRFjzz__b360eFJ;cp$!2)nUa|?t)n*6&#pD+}9ZSO4
zDIhm~+z3hk+(K;mS4N}cRIJE_F*2r+jg5zj6<x2Ph;2mg^_5(ksuu9+_>gfR5m0dQ
zdfW|GWSrElMrN(j-7`AgjD4g=YZUH448iu`t=-K&RamESdgEcqT7(H&ihs%J_mM^5
z&lbt>R-=k!f{1J6l{cV;yu|yQ;U3E8v#VOBFU<?A3z|J~E32YsagH;gm;~-Q*_@P@
zn_UTeEkhr$wm~dk1tnK-QnwY-p&QJ%$%)O>8ZGMstekb4hZ+-2(z>2>rX7d5od$eH
zushj7)vt_oYcsvj%*wVSmI5076XkZwk`uc-06gNw*6`m^*m}0pW{8F`qp}sm2FHq)
zw2YQlM@|9H+NM2}S5xHw;6?uNC|A)vB}jLj<n>Evjh*E2!PA4|0AfI$zXS5{BAcx^
zEsPr$iVhP*D!NRfRcTFkH=fd+Vc?!ny%uyi*(Yw%+sBQG;|BTfV(wwF({`VgfK*06
zY~t1r`4LV}-RzkK?Y=EVO3h?=71{jVjin*?Wx9bJNZmmvkH+O<6fKL0>9<(f!9Ruh
zb6?PWm8UW)EZN<?=mTFIzEjF^GQrff^bszMFk>Zrd@@L4zqr4~;(tM&meYsb+zYVD
z)739~NAO@2A*5%(gix?`0MBzf1>Qdmu4`!mGR_RAnogh!BB9iR21x}TMn<jg3p*wY
zXlS3M+1T(Ht{M}jH^HyBz5Oz3cYAveaSMW4(VJxC7SN13$+`us&~*byb=c;96$rYX
ze{DB;S^Efr=@HMpRM4*Q9hw0JRC?J7Ob!QN936P5>Wvoln4Fe-$pKcfruk<igpd!Q
z?<$MOP&23IGC@97`br7mELEC$Qz(#_MF0<e5!k>)h<36g+Uk^qkKLWmsIldYJFC0M
z2E`b;>2y-f6rhp6j>`%Y=UZdq^{VM}9r0V0Dl}bMei27YTb&$|lAL>CRz;isLfz%I
z)zPo>f~jM^vvvkS=T*e9j!y*kQq_r}A&=|KV1HM1{#wy1QeWyVcl6;jUP0&c3y?+s
zR-IWP4sYH+dm_E2qmXv5B%ncmCzLQ+4s~H2L@CvwkgLG?^Al?^2>8tNnV`kk%wn&t
z_(DVFC`gn(3tbT~sJX|<d&7+KeGnNzvLU(uX*&^cM>xH=v~jpMC|i#7;r?Yd?(x1p
zZ`AvoB8vKKru719UCn3`%UiESf6-oalZWu**?k6El93-Qo6&*9;qZf2(DEKq0M3!C
z<u-*ABGNw#)h4(0lGhw;qR#m!upd-yzRftttA(Lam?);Jp>+E8WF&HGzVyXmXq@q%
zB%0EdBnc5ZlcVpBjt`zCM+e7=e-OrpJ#|-}*??RV3MOR>^%SXmd&dvNno%&+&S?9u
zAC=pCqO|Ed`q4ti^z<c}>O;fzw8Yt^ZjxL>hpXGtP+F-QkM;og#_<|d#lOS)l-eFe
zjAmo}y0MgjbU8#%%kr)N)_5xXIyyx4>y~)1LYPT|5!>6@Xhd+Zc$Ni<ywp67ac&do
zWFsaro;RH~n>6?9;i<tm&s86@w|e5o#T3zC_u67!+a&Ij?sSu*OauBH4YAq&;i(2g
zd~r%h;uUg1b|*CCcf3u`%vB;XVjOSSbz%4jeHzj9e*NN27_+;U>{L{yDhPmp=Aw;B
ziTdMwBRm4r!Tz`5N8A^G9|}{JTSEuv8G2yK*sJ&x{jVzz(S<M;=@|lNa!Dd!Qxx&x
zRi)Tj81ZT`g?q_9zoGX*V{kGoPlSv{%5Ww76-1qg&1PzRYe_pwQ{$QgU4JVjaTmFZ
z7B4b8+}X@fnzH29?my${JMKUJMV5Vc{k!&`cIvy1p+8i*(%=*4BTSfg&{-@yAebTE
z$lD)@4d}+|QLO|DBe!yPo~%Bx&^73%{*>#~Xyn7;k%c#Ue{SWwc#RZd;KV;*$~g<=
ze9iER$yFLVDx23Sxje>H82lFJSpOpXv4^cuG2UER;$ZW#7eH3Mo&W#Y`?vKrvMXH_
zyf&U9Ou0)03kMxC)0uQ;dNC;~MO!C}RI1!u`hXx2Bw+yv7y*b$XXf{<t9`Tks`tL=
zeu@3{GxVd>ll1)mF~&Ru0u&|NwQBFKT&pZ14m0Lq%rVFDAC}Mj<9NE7MuS7KvWdKg
zO7M|wA{X#9c<e&GP}KC=tGy&vBdEM%n}kY<XtOk7=^Bw5b+g=J`4--ubN`-1$oS-i
zu&tmH=9Pe#aem_^1ocz`?FE*8r#5$vt>3?g08)27nkPTtXpXiuiO-*m{y_AofySO@
zW-=7rgebaaMENjvcHAtLUa9m?%!!7jawkUFfs1{e21K61Bx9<W_~AyDepWJ_PYVsL
zSOzCJ^jw~w681v~HcaefJcZW^SJ^k)j0sm;?~E)PH0(3NMKdCba(k^q38_ajG2mv4
z34Z-%6WIe5U<xnL&dy?8Pqg9te9kppl3E~VhxG==g2_l^9TKeM|1{|nLfLa8;Yi4)
z%Zn3P)p(6x7Qg>O=Qi$-l$O_~WdlX8&BiCubGEMuFraIbBLu#Zy@nZ*(;qBEl_tB1
z+Pya2#!W%lp0FF%IwfyUkBH0CdKA_J&-UD?-As5&GwLP@lNN(cd<*(+=#zzqP$?46
z0X`~AEi<^6k~^mDI3a=h1~vXBS&_N{MFLyfW`0Q2P1ZKy?O1`yb(Nd5i93yoa#b;@
zAKkZQKZ}<AxS52l<GKtDU0<KU^#L@@a<t@iYKxYaQV$T3gJg0idpw4Wz!0!ep>ZJ!
z6=c$co?Dfd;)yZxjy3B%2U}?t<?_a*6Y;%H;R>FQ*LgVQ^XRD4;j1|3zQ$!wcMza5
z#3~b-Hn~iu1zOY^;R@9M8c`7Qf5U3{P{R@|u=TXa7c+8HRew=pkHrT}5L>rmxK#)?
zv4E^sNm>e=BW9u8x9wVQq=g8I;sQa5v;6%S5rQVPu77VX#pp(1_anDkZv)mf)a}5x
z71}(Ehf5MA00t8WM;pEfHxfJ-)ShgzCB=9bb@<}Xuf4=-&@>P`0z=A5*UfXaM4~95
zEf>p9P_yMCY{2ptt%Z420n4(-SNAkE*IP^~<ghwMdvx?Ph@Xy^8rDG9opTf_W|EGb
z7@(|=I`Y^GY=+m?3k&pG9~ogX%oY`Pseo0c&DdGL2il;Om#4dlMC89jJ{Hv>@u7g`
z{cFBvLr_LEk75_dR>x9ICp;b{=CLCKcW<D{y#%M)^ak*!*ySU$PODA&Q#%eLp8@XB
z?(K_1Rf2p$>Xm0%_em+=SGw|JKVQ)u!f#W+IMupV^&rD|a*nO=l~{gg6!$D)@vZ=6
z7~W+S&1F>^{`!pC6Iy1d8u<1G@|k#|>&@+E{%Ik1zOg>}A0Qf@3{4Bb>8?52dR}}H
zus5Su=>NVdQ%MK!xOi`oc{YDFZ$&)Ehcj>7L{&x3^r<^g7S}^fDb*DmGQMmWl`zxw
z6Gg`Z9Sy+;bd?-Upgznn6dw|22Ky+uZnY`iv<3Wv$pZuFV&f{w6T9M<V&XcV#rl{H
z;3<y!$VH`}tIYVLRdLGIa^kg9HL56_+iDhmOA$OP3veE$J%Lzp2lZt!VR;B}o&0?{
z9$9f3PQIJcYNfh+A^st<`(Sd1v4LA^iQ{o(<})TYB;WEjGp*0JON>iaP*Ov=bx|Ed
zesjs{5)mz><M4__^@j2_Ry$_n*1Ziu2|QSxXAb9!@q2evDM6*(ls(@t{+NE4`!SH)
zLN7PGpqn^5)Rd9NS%tawgA+^tNVQ=Kr3$Pdm_#M{CPH_O^Vl>s$z=GT{9DbobkBHt
zD9hBadE1=j#u-U-$k%83#+Tv^85!kNN@yJ?hFjZ`z)?Xdrz*CpnP8z#ZHn-E^dJ4{
z=>~VZdFZ(oUI>)Z1G$y`Gq5mb*?3?S@qI~*Z8?)}C_wlIjvFKmN!U@W%}C60vRJJ}
z_w7Fx*Q_sB?OK>BpBbWf4J9NA5g_k%3K3$CLP;)GVmMp|iluQt#JSgwH+Bty(Bcmf
z#4(57Q7)wXc%fJ}jy$xOgGh8o*X{tDhLVj|@>uRZFK6BHbh;Aq^HAOXD+tSG!gfAe
zVqAZ=nmZ<@>M~m1ufcs8Y@<e)q*Ea!5tOnzF|s-=!*u`2^m1WxI<~*b?w&15$8}vt
z?hX~+tMTKz*>K}~oaOU`RY%&tR7xC5Bmy^9AK}9ikuXe-em#8C74|A*T<Kkpd#j2)
zS7WUQ-~RXi@&EP_8=4*h*Lddi1a&^YI(Yf?aDOj5e01>q`0)78sS~={wY=_FuKqgd
z<{)Q&m9FGFEY$;d;_=>hPY=5Kp{{*MYWBr0@uvCHf_oge7T&z&T!m?ZQfkFO8vO8l
z&=j@cjMqIV4c=l>ZW#|iC@b0eGEGlkeD9{^sm;&v;fv?pS1;alA0J}w+~uR=SBLw!
ze8fD4$z;X4hC~p2;)cjI&OI|FV>FymH>!lqn6){f=^IGepBd>%V#w{uNy5WH@*YFe
z(XqgI_JO}O;LC~lR%5RE?ryqML+{#=!Q{w`AR(?uc1P>B{Mf01E7cYS@Ti#i$|Xx5
zNb5ti;aL><RoqZ2^qz&f_GDvj$)1!~i0On=b$s4{2uL|VH6Skvct){_Nf5kw<EYiu
zuoS@UxZKaKDknHmQUjCZGw3Gk_#SAP(WXA^im{b%z(F0WFSJL`a{7hjAP#nUEf;}y
z1Nbzfsls06&b-JMqX{rNz`g_UnZ!KlT#Z5vpgN!H@+|n^RCd-@PJ6Sn<KtKAob~QH
zU)|a11;=_#p0aquxSjg@oy0aE8lsf;D$R`&s&<-9B0(cn@=Ap)CL~h&`n@pNJaXpT
zmfE0TQl`KQk)&@%_>ng=HjgT=s?zOYE6TtDavWipnuE0PXaNiqt^m?=-4K=o@rB`l
zuNkNiZ_{)FVETPljwE6rJhKd?cjDD=JWHESP=@q9Dwx_O22{1=F=#x5?MZ|p9}}!4
zwPPibeTi{WY;hj^H}XWO8>Rp$z-AxRtsBD2KIMdOI?O)hjE`*EcMLK_3M_-|+*(P|
z+A(~9CABXXg<mo!l8r~;SJYTKsmju81q{4SqzXu+BER(L;PKw;r^mwv$`z}MfRvAy
zCX6hj@U(Y@t->}6F_il9xmKgVrjS4y(dI`a1n<&We9BH_=n|!5RAE@_hoUta12VO~
zNu9&iEbBqvf$f~e$ro$i5r2BT`Mt3t4(PpuO}crGTd~i)elwB&HqN>T{OhFDX?R70
ze#0r#@iu5BB57j4AB4h{tURl|TU6tVS?&)siFsC^(|)-?y7L<MAqtadZMNJRR3tjV
zhWWLXTklt~JnI2b3ki~zjdC5U!HvwB^hSxar#(s)rE`8N)Wq=}>Lh$qyH1Ep6mL<z
z#=Y9}17!eK#Tpc3VX@Y;>3jj%F^ahuSwl_IZD~iG&2?%q$+q1|vznT{DW2A`tZ|!x
za#@D5#T(j)gjW5|z~4;EBY&s~%BT>LW@k4O$Kko^I88RwctZyuwVO%CC&bpJB$G6~
zly%$1kuzGC7<$EzJfmd<;@%m3JS~@tP%>;Yqrt3<+BIqXZdD&lFZ5-?f>`i#A{<M2
zFg`X4M{)fG_9ysw8M4S4*Uea)lL3aWj}D)IpB+AbbntHt?ClM4Hlk+)zGa|iRg-WL
zA2YU*nW&|8^(5o{qgf6mS=p>%?|w+|Nk8dHwc*^pWFA-ie6;94s+z}P5B&M#zOBX4
zo5;SA?Z^Ojc5Da?i{%-1RR)q)L?Z7bk+)(_Uey`D_d2fe%3E*XWHyyBPg9{&Yk#p8
zh<04JWju5Lz&+{HONzQlr8b9AEpU~<ZX|4MCG%X*5E`&3-Ok0&8kKUNJaqfy@$08g
zH=O?)?qNfg3k5qXC%*Cu!vUEqBRxiJpK5^R)yHoPP>JpfiUr<<gAaLX$*U~-q=2^R
z8Vi<A^B5YBS}!S?$Qsf7?YMiwMB7^OfiM%OSWa{R0Vs2=U6nI;h+;R0EB#vCOSh%$
zV}Y_FHag!_=IH$qL1h<bqa=zfZ&=t^vRu1KrjX8dw7i+OrpRZeQi8$ruvw%YA-sg8
z*L~_y#KY#rg6ZN4t4=WVGorCE5+AfTozlC8V~1vort?$IByu2QprHe%6I)n^Zimm@
zc6k2c_=($Jn|8#;+kR7EHD;3VuJtCgHV1Z!o2e)!d}(pm5+KOPS25gsFYvAQOcXNV
zO$!&r4ConDN0t^Nq=9Xc4=AoGW}MrZp&a^Lo)39yO#-}kn3MnGBT?vF&8WUfXG$bf
zQRm$BHNGZ(58<%<B7Lo19MIm7AIwS(P&c(gmL{@=c<YxI;=ApByJ`KeBv073Ph`%Z
z(smvjyf&U5K8S!getK$nf36i7+#sHmv`wglAcv~?-L}1^*GUf$3VOm0+O`e$ONgd$
zP;p`&Z|r$k6Bs><C}Xl|L&jE}f1W5R`R!*0h7|JUHrb5o5~LRyHfq0yBo`*Ny*~Qp
zPJTe>XLumP4zyaX0iHKae=wsa>lwuwe!Osz2nlIGOQWo2b%#W-w8nh3P#qlt+k(7f
z+l+-e#z08C-PQ;z)3hS$%@a}%&I1%<pIj$$glZ&C7vW6HadpGS9-k*!BkTUcrVWv#
zvq*Fu4-g+}XYO*J=6&JDx&p3alH$FVtGyNv+F|W6O6%v7;>WS(1fLeyrF%TefH!&$
zrG^AUOQIC-uwID!oy79RpHD1yp>S~=8m6LWRZoy+350sjO`sRy#A4eSB<aH~y-=a_
zS)V??&|09`M@?!u)tbFmqhsgZwFquaodPJ*(Zij!=;LJo&GYbutnLi73_HgxC?rI0
z#?wF!l?@G?Vi4UMxYa)cXztL&1KqGU1eHj*jRoI$lm`Qci@n=4VW_Sh%$>FErMk(l
zPb4J2W(tpOFC1LbeZ8y3m(7c?n>CK!{f2FbUp3Rrz68+4A*S`!3?T%-m5s8_jMU=+
zSQbPA;J)VNYW4$g#nS|8B_6ModQq}LuONX(PRY8FqnRXT?*CBl$8AsOAAt}e9VgOD
zqV|+_#xp19EzQW%*|hSQ5uGqEhRZa%6YQdp2<J|6Tv<m5h=`9Qo>Ro7cu}hklrS1s
z^GSY<Tp2rFye&I^lwdUFB52H!J1KtfR1B<Gd*o?NOPS%&L5na={J9h=rgT1eXrbB&
zBBRx#X4@1@6TU2!FT-ZL=v7#6bYp6~b;G8zn9I%E>Xk)~`sRvTY^{iju(P~BD%MdV
z<dcNsZ;ZiM14M}5`uoB#qLw`JfsZCwKcLo*!`9&kP70A`bpF<|``AV=9B)^f&bXTn
zwA1LIOj8VjXn3Yp%!b^hO5^FO4aZsi6+P30_SViUf3U4})E{MfrrhEnTWh0!n#JiK
z`KUyJrlvC`PLMl7I|pkAOFfaK;dHsFr5g^AruqBx<|ANzf!EIg!W)fe?=&4hu`1N&
zvS|a?v%mS7Fsb){`|!74-TUhPXJ0)0;>*Eje_Or3`24};!}*0f@z;-@Cf;+?e0!dA
z^Nio3HJfwuyKkb@209v72^UopO(14HvBt|d{U@f_R=QdBfDxIeF|kti8qY4xxYAvJ
z>lm~({<qft?U~?JzL<6idwP1U&imt62Yb()GLpoe9X)+<d=z7$`HhepjI{`+$r&BZ
zPNA4%3X_yFH8B@0i_qAzm;!}a6S8a3{~9If0hNMPJrdq&)v+L62EQU-LLDep_lzEt
zP)y0b?hQM^Xy*$`OIjOhJ!|20VA$17`WhGfa#7F-P@%dLXml;%Xg5yEI<c#)TKI5a
zKdXWJ-hg63Tu9m!-3UC#Km+1>iPV3^G!{)sPioAI$A>k;BwR1iHjOK-KNn>|)iVKV
z>$97#1QEMJZp+O}ivl2KPvE$ME0tyzzno(t0!oXrgi2E0Ef;430`Wyt;u;nt!QT2%
zidcv;)1_hxp8&iZDHK=~ey^z~dN>%OesWioQbn|uDbAjk%NU5m=F*paq&1ST`d&`|
zoyAAsL(`%NC_M3GMd=8dee4sM3Fxv<^hGz_TY41BCfCimwW~NkA>vT<pNioH>tb*x
zJF^B^-#TjZ*fzWqS(ZNMoZTWKPj0znaUHXUy({OC*h~Fx7Tgl82a7cL5U?q;%32F~
z!1E{4C4qKqP_e`s$AIcrrMn3-boPg%7tgJXKva)Dk+X)wAwaKNKe=9SMM?m7JK$GE
z!`aGy&bCC8;-7LXZFTUL%q^X$ctJpc<rY_<@lH7z4Ho6q@7?vEcyRZ6kQjd9O?RVy
zT`^fDV9PC3@P#?1IvJ6<)w{oIj6t_4H8Xh6BvF4`E7}fah_JiL2-PesV;nNqC>o<?
zZ0A#NY}PH5hRkkD4~8;mX(dd@dLx>R@WD28;<9ZkBGBH2$y$KxlLAD7vS4;!_exZe
zTBo2q<2h`lKRA`tJh64HBo_^oIy37rUrt7tu&$Xeby3CNoG)PGR9clrFba38)@`0;
z(Tn5Rd%>9vwqpCRLYfc*MVFK~659P)HgpXP>-Fu$^m(_6Ueu;T8nhrM(5$RPA$F#w
z(JN@I->4P^d6oI-I`a){lS)vxXhohJspmKjQ&c(;l8a&%bG<QycdPOd@}f^BNmc8p
zY|OKfJQ9yQweN(m<AaO=l=PTY**5p%c$6I-ygJ-_n!S8=2nguxj|YG5@D|DWhrL((
zPxfAI-@kXSojreXoIQX2^r_sR<dUO((=*Tt4xb-q`%ez`|Cnv#=eOCtw%kN15|I2L
zW`^K$-^u+@P#`-#e0Fejy!Y&7re2C{|Mja^2hWcO;ZFKxU9yjTxz!d}E{XPo>5+5Y
z3C4ba`;0Vwz}6*Z&Elw=0F90ANC}llICCZ&=BL)Lel;Hbepf*gI_@Xt^Y@0tjte%)
z$wfDf@k>qfxSOqJ?`BS4#sgs@T{DkhK64kt1ci$+U-rph;Kj#vdy;UxVVy@0!>+B*
zivnt>SMLK{x&eGkd0f2H6YYSB{BB9W543mW8`7b(P0Xp5GwFpzO+||Ufnqy@NRO(h
zlpY6(IKbWPg*eBx7s}#?fggLvnU`BPGvu?z!(g2=N2h_sp{1vRIQq_4;=R=Z9wCsH
zai}YWKBO_xOkf83P}8Ie3$*s|2mY4#*e_#4j#wzwv;YxOW>FxhvhN5zF>VUO^ljC(
zxlYJ6%C%N}Jb@iwWm~yu68xR;Qh^O3W%Cm^RZMUjcwIF4uwa$Q9JZIUM2HAiO`iHs
z$t2Lh|FjGY<tv1VnQ7q(v}?k6|HyF7Nw9Z0ZDuLh=pm#i($UiAsFeFQ)YXa9Rm~i$
z<=<yh78*N^wf^8c=Kfone=|Y1ZNT>qYIc?&1_XcWYCO`?<=EYqHstqikAq*-M;v_f
z3JIWi@Dguhfm>#&eqOkP>#z>b=i3}tHbL&~lbszrzOxgIMl<)jw=B*s+sRzTNnrxi
zpmF3^bp)dHyFqgfXgZF6L}qGqKyoj3cIIU{5vXw;A0qiA4q<+QsyAoF!uu&Lfy!2A
zQmieFUy+eOxB(UnMJ{7BjiFl5h5=78WKuave635G3gL&)!U!0Y-ta6sX$7Oy-ycSj
zPDFGgN#4#Qkdf6XysM7Y65ebzk1!zR4BXjiFgzkgM&>Mq<qk+=0Y1z_sBM^=D2Pm;
zX<bKUw|P&VQeTEzLeu%u9F~|Sw<g0br^yWxbm$|DQkPgf7s*cTG%jzF7-!WIETk}Q
z>q?48Q^wi6_#r`wff|zB#+^4GFVEeOt6h%|ikl?ig!Yt46*J9VP15+(#v96qY!5LN
z5U+5K;os4z#e)wGFbRKG)nwo%iq{uqxg5AbE#>ep2J>PXGC`X2<D!wpz|tZSFnOp>
z!Ca(P3sChT`jMtKT2;>w(7LnJiUV3WujwMk;0u_np5Ro&XIj*ruU6-XKJ$?dc%S|Z
z4|_oq&(6*ZxA??FlgZ1rxd3YeXj>RvHvAf~Wo|*bnA&gki#^ZqhSu_HRUqSrL87;B
zJ8l%#Kvo%1Tj5mgR}p$^UaifLAEqY-k5?BNE{vr7!=6~|X}b`7HtX+z=KS*zq_$U;
z5a#gn&mKM)w*8}?{`k0$Ass5y@H5y<oOtPlm0yf*D)8zVj#}V;Mf_7ichVSBF(ccm
z$hTwR*zo}4HPO~LG%;oFcU(8WFUwIq=CV~!f#T-&XLqW>>rO_}vk=SfEvT#;wzqqH
zdOffe;Vr*{a?k(dJ*?EOt_m*r_1KNpptT=C(>LLq#YRZ37Q2qsxq*zcY_NU9hV8Wn
ztu=D353Ww2^#R7j=m%LRyD-q3Dea|#b&Su0uoBqM8Y2Xjym(3)PI32MIG-Y-0%HWd
z<mU1hYt7YVX^~#S64#pq(>xC6BE^S>lkrA5QxOy430j2^m5oQI#}p<-$9T=TM;2^8
z51CZ0F!?us0`Szz6!$L+6mRmQ+mK`INlbi`22eouO2z<bnH?ooq$=*>$iAJ(AP$)%
zD||S<n4v6_N>PKri#?yvQ6PgYOo|1i-|#vB+(N+IP4gt)iuhQARtpIEEZg{j>>Cs8
zVr)<W(6h8+%$h{YCYppmB`w~M&(^@q%mZYmQ^eti+|iA#cwF!eN)<Y?MzuXJ9{LI*
zQSBmaTKmuJ4U($>pAo*47&=5ltA}rfjWM4PICN)+7MZgM#7UvqoL)hnS%vz_Ag^BQ
z4KhpN%lF~^>aX?*+zew=GEVJLNw{~EHI`_Okq7;FQLf-1yL8;kbzZ0B?t&OiPGodL
zl`0HjoM+~AFBcx@wt*#hfa0p07G7*!l<sR&F;XcCOh8pArUqptB?RF7CCIy>m{OJv
z7!g|PU7rfLtzmsaHUKqF3}QFre!tm!nkgi?B+(G0yBNuL*r-s2Ppw%00t`<mE06eZ
zYB}zOSt&6T?nsz&_M;EQtXI@>THJJQ^I09#Ty+-?6IjxxZeL$YN{~s$7J<GFOe>?h
zWauB`FF8CfcpNXTrMj!lPy}UGPF4|)%A;|mmB@lK$!b?bFw7Q6G+KY$t4KjMCrJ7_
zW-4{jQaaH|{MxEs0bqeK(qRrdq1u=36^p2x6<0oBZ4@FSG~MMUymd}qJgO8PU*^`1
zGCvIP4T+bL!%UOFqD60tKfHaIO|6@^53*UHEZ4N?3Ts>|uXN}8*ZbXPd;ivTwAwv7
zc>d_%6+&$?H&1Z<V;+v6X<gei*ec3A5H48~po$qoloaq~69TooX2px^lxdEx18l8;
z{~6L0V>K4^-B`Z?)9Fs!<Et{Qu4e^hjD)v=OT~cOEnlP|d$8rp1fvs9mDT!U$`UTe
zi%`yxTB0$GUL7l@qoBr3`=Y*$GP070Fm0H3t4%aYh*FuU?0L+3CdK)(#(xm=HY*2s
zW`Jj+<^~)m;@#SHE}R-?6zn_1UPbWGO)PQ)_pR3nsPSNf@m}Y&@M(L1%3INxwyAzr
zX~lqv%sLYy;>W1TS|K^aiTX&19VaF#f`B(f@kxqD9NR1`J)Ry*OIXc49@7UqU;KEc
z!L8<7Ui-9W%SBZfK7qv>UeN7gMe8u)Cl+n|cKeQLA#E?$MRE6tcAwETR&PEIw=pJP
z&2z2Lls6826DQv^p^`KaJ-r?l`7w;WA#VEbXYXr$|Hm`=rl?9x<TDA$ZH^U960yv$
zDF*}8qL0ppS|j6)Sx~_pcv0FUuBDMFL-k>?Qf<USjNNiO`V+a>?49Q0^cc6w(jxS_
zjtAyw+7J!%lAGAQi4qL_%6EH~o!p#t)|~Vf@3T)oH<dGHV@^xGv{6HWlW<h#lg6N8
zju+xr?flfq_C-3^LttY*S*0Xp@UQ{K%$rggxX7l{R~XO+?(^Z3cN0&koxe8}WYN=i
zt)YQ`A~}Sqq<Ja=Ft_0wBuZP2yLcL!louS-Ce>34Y98omD89c|LqTGFoaF{5{`5rf
zu~pg88sHjOOO{=GEDf{u<zqb7YmxM#Zlme-`uFe2)C}yI5QKb3+w1ayu6?tuif?T0
zFpo!!rykeV_O->!Pp+$-HnG;`i9|$T`%2J2H-4kdo}I7~wtE8q*6yn!qG6=*Jq^{J
zRbV!Frko1T`m2+>mQ@t%ajjrFRTc0JtRQ!<B_&Ryb}beV{M;O^@hbweZz!bi$2p3F
zUlpg0Jl}EcJ{#z-IC30r!tCV9@$pM1tge<CZvNE(lRdzdWR3N4I4yi(V7}r0zp=so
z{ofAwfUjwuzMq}EDNc{dvv<WZY2vec=wHPf8(;lne*P{`U%Nkehl?9udA@gil)mx#
zV3sedjW5)<p1kzMV69gB+Pob7srIEW2i0F2pBLmfcjWx(_&9y#tHJcI%f<=lsg;gc
zI=T2<qo|-jEK~<H{1_s_IdP7clk4@sEMxRh1d<kN4M%yP$-|}SiB$m$q@hiEc7fx=
ze-@yW3#pw~t|PN55yxp7m=f>idwpn*Wmb#=&xP#qt|%anD1NzyQtC$2_X5nQ@Amp$
zazaxvelKy}L!N{UE^QyZ#YlP<9mH1*sEG+5lU0H)@7~XGL$<F5&*hV={JOH{5YqI{
zEvki-Nqw|9P|N~pefr7^&RsOMi#YVHOyL#W%e_zt^?W=VC7DDK3`}TH<RYKJ8}eHa
z?5ES?OT^iiFbJLY@q&dD3$dA{(ll})D#~wCpvc1iGz<)UKjF;*#@y*qR@u|NbP~e*
zjpJO1j4Ebv$9V1ygqK$XCzPDM<K_PSL5K{CuSa`v`@7Yw|EQRi+?FRVua}p4+}-vg
z4+e9-)ck=o2rnkY7G%Sd%FZJBqV~0LR8=k#9uw!|SdiN+roUm__|V6`=@yU*wFvbQ
z!W2+{jZQS`xA4SpE)5wu*B(lVa&r`Qv^l!Ke#%aFv-^$-?q(0NUqZ-pyyp~_#{G{p
z_@I;BZzG@F;23$C@RC+-KrBk`+1y8*;Y0E#I&@ISI`N}`(~(F8+G>Dec~@Kqyr^_W
z0L7iy%RQAw=|qZzl1Lc;WCEo$@((9V32Y9%wye!8J1s}oyD(UE{G~;HHINuUiv`Sn
zb_+3?gh!-ca`uWCM_+5epg#QV@BCw^pXv^_4?Xw`|NU80Pw*cY&Th5^$z&@ur|f7j
z&zG0hwcq`nBcUX;-dOV|9KBtZqo$`FEmj|%kN==)qeyn^d2^k2yI<tEhWXR$A?7vt
zw0+Wxb6dY_{#-V#F2ax1!Z*2j7?kxsVi?zxGH+O%(?$7?vne-D-bO8!^YPjG8yAi!
z=7VwbLNB%Shj6BFt2{riie>%!#=$`>{rkrzCbGt{RV(tj^>>uIe!qddPToe82*dBH
z`u+N7M}@Bw`}_4zOp4hB#&OHJaDwx#ry?SwgdMGlK}1yXmaQr$mJAsGT)#=#(6M4s
zU>hFDm+r#p3Z-^FxNGf8;hiwW{-JEG@0r^~a&5rlIP`*Yr^c-(dj<b}m<vF+_*4q(
zd}xa-3RVqrOt+jA`7CPa9rjI~T>e^C>lfdD{`=ji+rAS6kx>Wg-z^sn^rsyg<dbn;
zHQv|q-o=0qHmq$Xc|uach`~zkp}oZ-zy4ZU`!;?S;XMN>>AoCuY30$AlpfwDFU94Q
z2O3K-mc6&}L(mW0gIxE9UjOpJb-y^9|NYAzwoL=miAJ@47odlvW+!~zxTAjm;Vp$&
z`S*b2)8vi$s=8#p#@wCZTeoIuQH!+lR+j_V?ALlHSqWLz?|bXFR57od80bVwrgmC#
zy@3Ik%AF`n6%tA0rEMxzJzQ<;VxdwQk4#u-whV1Z1k`9fT{rZas&Mp)oo=!twGsl6
zZ%}~x=X}7uEJ?zdg@4<30GV+`+cGVk+r!sURm6CfcC+976lUj_Vf%NQb9_@;Pk%?0
zb9Q&9AFmi}kE4QdFq&I}{}ExjCH97ER$3gh&=|AGM~}v5%TD$b+41?L<D*nN+3Oj=
zC|hR}HyPO*S*!!}cH6(#mLbbnw22eHuy0#IEOnf0*{X}A_AT%bc~}KRJdKMaV7cRE
z!rDFU-xIgcx9S`zLYiD-4Ikg%AU(Gdskv2?mRqru+%URN9`^yH(_0N(gyNe<o(jUr
z3<M!KA_x(9Z%Yy?9^cdflWin1c9DLN=FnSxOyuU9M;h3EE0K{A!x)w~9R95}xwuu6
zhsQISE|Y`tTf6?;$-1}dIfden>bMtx(~if&Z%Rg<h66qMSKsQ(6ndja-B8}PYEp00
zZZNSo8u~LiNB8X1TbqGc^lNG}l>x2Uqrcv6LLph-n&MI^x>Xkg8g_poJ~urP%g+s)
zdtGF1T%h_SzV+MxnUisU`23|8%eEtyzATsd<eSI&q$+fBHp!PwOC5=qO}A6&vT5jb
z;WB!L1c#>N$(m?ce{i{)Pl_;cZ#{)Kik6!{6APC04oA~@E4rd?@lhMK#!6!Sp%wH7
zV<OZS?8p1hqwdyM-1q(av)dhj5RX5q=QUBd)hGhD>Z0$5c0&W1b9Gw{a<A_@<=>8q
zzi&Ut*g}J`*t@p&oVM&65qM7cd@SyWQs4y)`5DgLj=c~ahjJ~PSn}H+1M<^&nEdjj
zCqHd9J1y5iCtoHuSP`jrGd`iKeCHn_vS(^LX8Z0Sb(go^?s|E-S#IATT-$$lK1Ifk
zRlE(-{C~t}?|2d4cVbZcem-^=f57P_!v6WzW@%r9{gb=+b@%NrTWwid@j2|eujN)W
zC?q{FBJoG~n}WwMajW>nkEMUg{scV8*F5VQuqQ4Stt5jGp#U{y9s?$Z&+}O^G5@GI
zY7`_)5_L8D*=_1&lOu$Yi;8)mfdNwB9?w_nZX(vUclXrBKZx&XUHc7hT9NX{69NFm
zo+mhSEW|;43jEQ(Kfu50ep1I1Bf3UK&cMm>bPRNGi+8V2Wu6g35VgnPN-X9wGeUVj
zhk2u?>bMNJrb*KheRxg?-~>91PFR5ogLl(1(hg_y)pE!lu<$HWch2k6fSGj!CPQAI
z*2Z@*r_Js(N1W5!c+{9RI02y0KggqI4Qg_H?ilw2#Y;MMf8USYZ2no+NxVXl5I0ek
zx#Wkrz1ZMi<D=?ZQ|f0^xAm?GPzX|65L^leaxx&Hmc-{qn*6_%d(FF~%)+$MA!QHT
z%0qN3|4`jN*yK{X$vF7&eQ$K7H8tJrM!TI8?VmnDsq^fn8Cr9k#WR(-&1xU~CpgU-
zU1m3TzR{($(OK5$2iW8&+vp~1a*}NrO5z~<gpq7?jcss@-QF#>!6|l=ORUKuwqe|{
zGwh~e$E4BvfE(-vC)fvEV7GUG-OBw{cQbr~>+9y-n>f8bfodAbe1o&A$<@{1=&HH7
zKEla$vy1D44zAm~w?4tS_3^H)8y#D}+_<W-OY0LBb+a?;CRf&tj;xPxW8Kb)bz2wK
z4GydglV`E4x0=CEK}_RBHlwDo$wuTf&ag*MtBu*6rQdeERB_dKzx7`pyZ=NUyZ>^w
z{g<=tznpFV<!t*eXWM@{+y2Yh_FvAn|8ll%aJI?(S>D;LCeaJ<H_ha_;O^g70lwqq
z_l_6emAq@hd#gcgZ$$!o<M^FS{`PGEO;2z9XLmB<SF$Gm<#+tQwBM2HO2|QGIn(TN
zb^56p$ZTN1210vJ@bkpyfV-aoR>D1+Hrr-S@1@{&t!6}<cH};mS|Xv^7(u?S<CH%Z
z+PTcFR+45rcjyOn|Lo1@l70QkFrDZm5%&@5++HWpzzfM|Jf)Lybvhka6%i3Gilt<u
zz7JKe{CmemKIJ#?6yP8(1P8ue^3OFO$%XhVe1-%g!^Q!;(d1h4`U9%Gn=+q?Rju5L
z61^IAeBfIWw<X+qZZ-%0KHYg+AK40g(cfkt`4U{r*$EL|9SOKm97uNF+ij2pVBFN<
z^ybp7<0L;VCP<!*ZU>kRBKG>?i4h6)nBX}o&Y11bY}Lw^_*|Aaw<TVrOHAY?TQh>?
zAlVJ1GV&;Qi?E93oRk&|DLc@xgo0vl<hJ=-JkF26lotex+@~v8AXmZ|fY4A@n6m4z
z1uk3<-0&Q|_iZP1-5gc^m%H073N6mr?g7g2vGh~CzP)1hen>pUXf#%Z%42RA%BXm@
zU%z^a)omU)=ZLr52Mc#<!o}G`L9AD+SvDMTm|Xz-p}N*;o^?mV2r}=IEJToZ^y|IW
zXT7+HEbg;c=tok5<HUEu&}!F{?Y|t@Lj!v#!eme`)Wx*n8(pVdv^}cM`e0qh=jAw*
zw2Ifubx**&1=Uo*H`6`u+o7!|k4`s?jqr_l9^{bLO&jjLd^vE>472T`chU1OHQn=^
z$cK3SebvjXb}5owT`K^kcie?<@9pm&9335g_w+y-vPvH@No*sAywc3lm#@EjdbmGm
zc(*NOjWFmdWr2d=f^KLHW!VFS$f*>Rf5TL;IETA8TN((E#1GVHr*}P_sOx<{AC0cj
z;i1nO7qo51Zn{X{HqZ=VoH#Yn5ui96d7Kp@K==ylPmAT<Dm$2+Ew1Ow7;RawNu;W4
z0>V5NP!5)pS)IBmFIZ3JO=0NA*@*@=xb9)1pA?fRK$jQGkJ!)MOZQfnZ&m%%NqO2w
z<WFBO*i(Hi-gKQ$CjuxU;2Rdt5R)lW>_d+;g)nwQ+1=f}${AnL+DjJ1B1!mqh1y0?
zP!&a^aaH9&e4;yhom&bFuOO})#v-7Jvr)-J1)_GZQwFgT%Ei0h8tim4ZH*&Tn~cD%
zDm_@)R5$S*KQt>6sj#{FPVOUm+|l0E{#7efRH(q4;<kA1Aa;W=5TP`rFuMI0FaCIV
zFnILh+1}yv>?AHciCPv4z0>P|_S->pZ(#RQe2h&)-WG#X+e?l0SrrBnb-LY)@Kgit
z<;i~#z215H`8^4tTF8QBr>pT~*#*}-bF%xmcvMP`I$u)!im}^!00Og;mrGQpy~wcn
zS?JgOeVU)WBeiSY#bv1L$Yym`04?n(zZK)`l81Wf#gVD6)KL>OJaq1f!56LE83Yw<
zS?=nk{}#)v26nJ79A$qm;WaH^iDZ3YS%M-5=GS?*8ecGOXc4%5+EO5D1%%svUXF_1
zU#hm$BoY*!6~piHrF&Vbd{RVs{^HTW;NahmU+oR{-Tyy$b$m3;nuyid!liy@tkS>~
zP>4eDduu$CWq_UFA@Wa0!WYZ6cE+<t{x3m8ARDJMtl!W6{eS##aWk!`+t7u&S;OGI
z>7$QMKgoOZV%mC-;(LIA#N)l>-fsG9QHoCV#%k4t9n;~NI4pi#F7g9+ymqpowyQ^&
z{Cb9&a+j>OitD<Pc@>S+T}5xKv0W`!EoO#>0hte7EVk+B+~qL7(8^if#bZ7U<jg6g
zyHUn8en01v)9Y?{I3C4K4U!^W()LpCjvA}vW^xtir!Quc>s?T)hNn_;E>4|pK@_mA
zfzXd|O`yb_o@IM|_~_uf*WVAGzWDwdG~uHJV`8r1^4)?4v+Yu(hoNwPU1DoI5CPE&
zkF`;etgwTnufTmlwcuf&zlX9BwI;S{wJ|6dRaP4QqrTz`%C~sh5XweX`i^S2gulhi
z7=BIE0mm;9vFNKUdbYE4+NtO)&sLM=7z*C{Dc)-B0Rr!0l1dm-q}{O{ccN~5x0k(`
z6@k0i*$Y+VVn#(cms!}^;n`(R?(Dct{=bX3soH;#&XwnpRW{0%T`#ycRD_mV+xCK6
zoeN+NEd#cZmu}cfatY{r$@wn(JU)FB&~tIroMM;^$*q>eq@2&8(075OZ<sX=!V@Og
z%Jx`oU7}P+ix6!CK_EJb^{9W0p0q&;0=(e)YC$PGrQvZE5E04qpc4j?Aice^qEkTW
zQXQ&Pl+)NqbR6na-SAweR-{|cxV@K$gQJ7}R|m(NkG6VKk#Gy^0yUpTId2%hl+VY?
zKZpNJ<<)(rE1&s*`s#^=$3ssmFXgjzP6PnBv$niaWLnXuA~{*auM3fvMBx*tKacAd
z@2pW^IKzL7x;|8Afe^yu@dEa=WihW3fT+BBC%g=PRjGQT_Pbb50p}|h7x`@bH*B(n
zJAqK{s|s!G?DVp|EL=$No-WFKB6y!xwfZo?kfAb^d)2kJnojct(PghJ23#9t!Euqb
zxBOSg<13c>&9fs%yR7&5zI3O}7Eg=4nQPUIfh@3ts`uyR#LY?{Q+H7=uEotQsEL!P
zcBFleMVMKy)UAPhrCWPa3X)#35YSLl2iPjcESK$3r|hHT)v%g5VS50(@=!HQ-%E*j
zcdK@gdrKQ<6e095X6)>ElbSA?XX7BF<%-2HMjA<9*V>fT6)*~}F~ffdCo=>x*lw4a
z)S|^Q!Dk?&=6(&En2aP`?Ckt2IJX-cXx;s6Xb@BvTjZ34NYK%gcBBaaylEM1$nRP@
zy%D*XfZq`TV*c4E0PMJxbn0m^Zs=La6{6K$EW}9u&>cV%@rT~q(uA5lS#LjWt=97z
z6gLg!%c$}xE5dRf<=EFI+-z#{3XzhX!iVq2^nnbIKqC#J2Gd(=9g28`AFDi)jQ57u
zY^X3`N8@}ktFHniEn%g)0&XPb<TPJI5Q?A{G!%^%TVYZxC0j}h%mzw0&~ml`xEd?s
zKY*9LJ;R%`A<#hZItv#AUc0>u+~54Hs8!{~Hdcwu9xQ3R92p?CVo@uTi%27Hun%Pi
z2H$?W94kv7ladHlHp3=aOIzlyL!<$)7J@NaSHXz#Y&9FZ(<nQ9B*h<XY?Es#f^6rB
zR-Fq()>COicB3Z+JTjBYJCl5NvEnjY*Zk&>$|;A%4S85~lE4hPF$N(wU10sRzU6Cs
zniyi9Lt9;AY(>7nV=^FC*Kx8t?IQAI#P4A;=F?8Pa^ic%G6_o>S_t_!o^lI|Tbw81
z&W;!w@D>g%lol$p``IN%zFkb6lnYCwRYHX>wZbal{^VLQ-PeVc^#(_-C-wHuizT7K
zM{a0ns|B#;lf)CHg9n(hfA{V79h?CAOjn-ix@WrK8L^}qFenIK0Hjr>uGCKC1Su6=
zpAvc+_$yX(%l`KAj#g%-1RI%(^Xz2*>0yeXKbuegQqj~l&(GdD;_Cmm)aHf(IEG0%
zoS-jj5^Her2r4#>{MEIiuqgq^jac2cJ6?PZwHKNsV+cR@os9A1^>_3INFBu3MHEZv
z58RW-FaCJ&+&#Ak#k5%DZUiDDx_-YaX04W0)PxN`hio*w5>uiZ0Rl<XWD;MjE=35z
zZJTRcRh)6dT7@!oEaTH`KuetzQ;P^zUSOW+`eA-F4ONo|V_`>Lf>|F`enb7%t6cm-
z3_0Y{jQqS6{s^lx4}SACqHru$Cimq^KWik+j-i~o&*qgkE~)I&)DdRqYTD(j#f2*7
z^%kM)+VCO0jbujXF!VJxt{caVv5r`!Zt2IYR=oQ9(+~L4txNseYm~Y+3a+s@B~X|E
zlT3_J@F0NS%bGzIzPps+`N?tT(wOzt{3JKbj$@q#6=~aoTtZ1b{@ZviTSW~m(QNA&
zdXgwj<IkB-jOJ8JS~Q;3>Afu>WserQQ1WO|&Q&=M&)BTRl-u(_#*`K@XE>x;k96ad
z(%6mK;UD6W;)c^(wnt(D#^alnO?ZmRt3nG&zIQv4bxYA&uk}OxGgMKIn0suHGhkU?
z$l9MFuI06ENq`1U7tT+kB8=&hqodN9jz29)@HlQTL@EA!SxmL^D!ZJx_H7j+DJ^PF
zIvcEbwcAedU5tzOIm^j7`NW+V0{2f29sJ<_m83y?=Q=R(MuW!i;MsQvj~*R9|Ndz3
z>frIKgQF*d!{^5buYTBj3bp@e=$A6M4SLxdxJf8nEv%w(WLI)aEKV8d|Kja-v+(eX
zd-q`TC><|HVl@PI%+6`3k=DgNaAg19Nlb;7Lj->-AxbSSxQ<nCZ3_HgK^<W}{0x3*
z4sd8i^YHTZ)2Hr_P4f^cQE)Q0D~K20LCsRfu2vDzp(Yg?%B9+s7b`b0PKy83C@E`b
z5E@F_f8{SLr_9!4Yg!G@OQ6dKLvhaCdAV8?$~79srFDivNe!OwQV0+QWzJwrc@G~I
zHr2dD5$vK0u<na;!V-&CjaUg~nvWzxh3;zKIxVkNAzv5Vdx+{90^nZxtK)o5y6yOn
zL&h%vP{4S^q6(rvNFzTxV`wt4>9KcxF`F?D2Cb|bQ<I8%dtL$MglfGoD?s>&!4K{r
zolnYZyyXj=<F-}!!XQGW8L^u25cBavBQ}r-=Ni6LE+m3UmFZ}L4n=|JXoFA!Q927k
z)=5~UbNsbtJ9%(#;2#<Ak=W<#zU9cYn7G4<Yz*OUwrntkSEWRgyRWJ4<4a6mE?8~v
z<a>AV$O%L1R-5~Si}7**K`H(udczUx2xvH!X+?J&J&vUA$^$?Vz$t_{^^tGF6EFoc
zH@A*{tyfwuf~$bD3S!&Y%CR5O2SeQmPX>N&Dvc?m<w3`&s3<7?q@&Gi#Aj6`P75i9
zjZyd_Xr6Z7_%(X${-T@fV`#@0y!$&BTaRBY*%c8O$$vkT)m!H+lwo6YkJIjaUyjry
z=XBw3-His$w6g;tbYCrMfEd9Y7}X-^lbK9w%#9#x9?=S+;j)uL*$|^<KkNAjY*@{F
z(eKl1M7trV#m8+XWq`ajoA%MF^|||s#jWtOtzVzG4&vbPg`!~bfmKPF<iKud#iV0>
zRU|j4)}rBlaZdzu=q_%UGS%Nn|6YdvshzbpeB+#vLyMB<`uL(Uq?<;GZuoLZHc~P4
z%nHzQzChsVYpLJe{FzuBK0|fu)AC1}C*(<MRqauH!pu=xfpV1PR#6<nM-f|OxF<ri
z3N$>|`@NTkZoNm0(F@hzI{HoNtkiDK)or1{OlFC;>S*J0)W?-k=W-lOJoSSU?dKI(
z2r1b3!$Bl;1j2Uo+)_97*2V*3D=TLkSPe;-K`t@7iTI3U<`}av){L1^hBNY?ar>&A
zp0aoZSIziwr*3Onl&7#B?jQE|A7%6Lyl`qZM!&POFNZc(=aHNS9Pb<D)EF)1XKN!r
z+Y&nRDzly`8YIYa(#4O6N}~erM~SYUE*$HE$nG>KU+}ud=Tz-QDI6(HGm3i2t%W#o
z=xy)BT}4^X%y1@>sF6elJe^O*6klFNE?f+>NgfiRqyRezFDAZUG0p-5YFSvVAPqqn
zt&lRrkVCGsn&+H&;sqFSJ~weKJ?T=6Enk3}=5-w%ignJV&@V>#v^;w!%p4RLP3Sxy
zdp?4|h4<kehX2Oa5zoPfl{~S2;CwM~4}?P}IdAkEX$LwQyZ|sO>92;qFC!^%#fsH9
zY$>OYWY?-uBl+L}Ee(6w)^}`D*aPFzt1bH8G54Nu_4X**qnN|3mnu7+8#%ANnNlR4
zkwr66BOi^#0giby^Od6x8tHxEvSc!)?8{OM#7ZX8NW?&=jgH0CYwCw(EojIG;@Uq=
z{V;W{8n}iA+EBgyG=RR<itfVR3zb~}uE<9JaP;DNgas#|;97mU7VYA=5z_|6zIr%|
zir<EBAl1k%{A?MQuNJX*ycl&M)m`guu6kM8x7=}2kXwE&vMt=dS>B3@mW!E8w9cjZ
z3D#To@t}E#Vh0<VIl4WMCq&@iw0xBR@+~Gn)RquaKGkB*W{wh(z^AK-zhh^|UqHH?
z6QQ<W9gB2xSuU3CtSbT1n!$1M?E2_WPjAS#v6U7|a5DS-{`9)~>!jUjojfaN7v-bx
zZvXa!2mLAD8J)H}*~yD}G21)5{o7yM@4F*omXF=b#qzA@h9Ut}kq=+%pLujPPpFh_
z5j^CYYI(N_i>ApTdBiuXa0&0XPDs0Q&r42P`_cOSm#Um~<-@Fd>#Nea{|_}c)Cv_M
z6M=7b-9S{k?%XAcpSMFkxOeYg*YZ_jPpHK0-k39$&SRS_<U~o|B3$2Y-w{cmn|Hm%
z2G5H}#B~>X`9+j!u%L<Pnup$dnEc4_v{aN6q#VN>m5VOUZ?HZcJSszV)1_f?Hy_vK
zZKZVKzADc0d5!sit}BY#xH)KGSb|iz@m-)5zPTJvLLaKz>_@BGX&lFq@Lq-UpQqmE
z4+c4ZCF(Oo4ylVLsC|rK8N*gP{+rZs#Vfr`8mhVZfu4A_45AZ@sTPnePL3WLgO%!(
zUk>Ew0OMd{@ND2CuR|n+KU=!;cvl~9XWPT-p`#uB-AB@Fe_8e!zI#@^AF>Wyn6B-i
z``bNl&)FUKT$~Bz;YK@gRd$(xz{b5OB$-L9B52~LNOlmgM7-h2Pc%*LEk2AxG#DJ%
zh&LigJcOj8Td_wmw>n9Ac~!Wn4H-FXO@}Cch~;?RYVAW$VLk`b*U{4eR6wi0h)%th
z9bfC;8^k{cWmpa^uvacRQ0BX|dZin@%@XWj0&eJ(_2A+X(<{u}4C6E(<)s{`C#oiY
zct6X)f=XYA9K|PE3D&6ZmFQe?0d}<1iE3VdooAPhJipm8CIlmSBNK9B*P@twvo$Nl
z>A3Z6*r8wd^KUgu)(3`c!5UyMZ}kkeH1y8!O6@l`fA6X|oeNfJco5tE572NXW2b&k
zORQuNQknz}CadH`kXbuw#*0=giFc{>p17HJ<as%s%S&#7&&NNCx$2976T_8DMQ^4>
z5qYGCGu$2D8;<o(+98IbG1gFYjh0_Ki#PFx63~_Rn~|P5*`)FK2rW4xG~CjLS({h3
zY%iAi;3QyxphZQh%pwtfm2i%(lcQQEKbT9IbMhc0x^P<bg`~jad7SlQNs5&!{w=zb
zD>}9%ec#QMeM1~*xnEBS)Y#cMln3q85Rn*`_?ux1fyf%KAt|X6;u19~Qa!V37%J#L
zMkB+dEZ>p5TEpMC_IJO2zW3~4@Z#~{hrL(dIxXalB+A7Csbb7()Qm(miVkE=w*ucc
zONPel&=-baFAMDSM55jbE07ILTZvlXdza#2>{vDOQKsV3v^2>lZ2oa&0T+z?82$#F
z|La!=M=xH#+CLb)+&g~q?NGvR;GL;_fQ)tKuJtc_ij5~TGwi@c#Nc4<f_IH`MizH#
z_Nz)Ug3*=ioUBiCz~p(W#Exho9e~bSU>`m9|IM?(j&wMe9G>DwMk9V?Le`z|YS-U(
zj6D{w`7sHG=*W*hy!dW#_{e^}dGYFxM=$sG4~Fe%F{0#u@Y=tWr+1}RuKQY4<a&L9
zplm>#6w-9>^|BYMB|Odkif>0|e^Q(;-I*$uhf(moXUM`(l{+SxkSaAV8C?n`t&(t-
zl=wOlGwfGe=tko@bPbqiy*hPA$`YPkCk8pGn8f4u&#)`p6VZYKZHXldNscF)p&3<n
zZ;D;H^=h)UZuD5Zs_xS*605>D=T&#CvPI=siX%M7M&fztW!swX)z~W;IuZa{<Jn&%
zf{pCT!kW=EM&{=HccDf!t2|$;Z&s;ALJ4ZKU-jC0%tvfmjKz+HN-9|%Lq{>#S=j~R
zzZUOC?krOoTw9JF7x7!wintk-yw~5j+YSQNArfy@6Q3iRVtl4fg9-HK5O=G%*SP1$
zfwPayAYZBp+YPKGzz76ZP=IP-C}XGE{W(G&v5}cGKkA`XpJr%FE6>oE<ouERtm&wA
zV*6YBsjN%6nFu9Xv$%q6@_QS|H*&FWzbQW}%*IBcOmx;(q(%a3+-(j(0@*kjBqIlL
z4Z))0Efr>`P$+~>cJ%D{rRvf)M>zAzXAxc_((Wv~EjUL_(F~y~3|2(IknY(U#)dn^
zDC~_Hewzqwd}7NK-9XHc5=ospUCHxxk&ylIa$!4!pYdag+jPAZ1szNHw<m}-ebrA`
zON;{aE;%-pkF|KXOd{Xk&Q)BV<{aVJEWzah5ghV91?-mMO>#}zVNp1JwDd;;8o))$
zi;Ic5L$>xRTH3bMZn~T7T`Jl7CR$21Fm4WD#)#+W_%hayWudetM35hyEKb+|W()8K
zV)G?*pzGgn$KV_J*`ln(q8}{C7T<a)p{4Qo+}bh9(&mk}Z-QIdBHkWm2FX;Hg6%<_
zDv`e_aE_dWTy~UHlH1-c6X;cQ4sXAC%mBoYx{!TD2L4WjgmYX#ie@J}jAG2TC9rZK
zaBw^;eR`w7&Vc2L4^O0AwQupo*x;pINX7;&<%ePcV7E1_oLVl9w*-jsTbIC8=wQWK
zZ-s%}@b@-^2wzjA^U|Ws&#zA!=m9kD8cEpz(1+9~OEN;3=Ar@e$G$9KyAZk}3&sgk
zvM)=di?37s0Cxwt8{2|HO$$pow_tkBBSW*0;#Mkxx_0EJ`(`aBV^Lga)B?jyu|aBM
z;0`^B25}Ry$6=#IRNulP7=1QD6L5}SMzi;Xfd3b>$oM%aS0fYpM^Hk;AnG_t%tX!h
zs(0?lhLrE~`GO5LJ4v@b$NN#IlZDNLHWhy4<h#}EA6-d9MTFwV;%t?$P6>*Ry*(md
zAg)V+g8v-jS5dwQ87a41Ta!W}u%P}|_rCb555l>0a_RVQk{Fd3i5x?Ad!TD8*^S=5
zW5nRi+?E;vnWQ{*q;Tz%HY}{}AAd|(kRd$v0e5P&BE$BC6!xib!R2ax%kA3Bo(Kd)
zJnc>+^FykSNJAfDc0xd)h7-)2Izx6TQ_kL(<B`|;L`qn}5X`vc5Q}*d*uu?xBJR2E
zH3g+w3iO2h%Y95Y7Y@A;u?>H^nq%QAuYlC)t){M@K46#0rTQh^%e-Xpa@)q&V77tG
z-mW|Ms?ZS#Qcj^+h&mgYoSWQ=jt;cwk|;=wA{fQnEW{$9WED;LZX(7@NfWr%gNiBm
zmZ2QWnQq2c9q(^;Eo(NbYplmycyyc&-kB9WqAOt}j=$9ZRF_wVe0!)t&M@{CmQWxQ
zZW7RlX4f-gBeXcK&wY>lV}9LIC~-@~6`1iWIY;FdB9!>?4pb)jGpRDx`qiE6`$AMO
zCoeF{fXz(uD(Z$n47*E%_`z>NqucG4;y*qvtRPbSs9VREZaMV8x>_z5z40tTvvsZ6
zKzgp(ZJL<j%$8^SeEs(VpZm@KZMmf%#KE8T$r|jz{?TK??Dp3G_y6-4Z~TftZ9eoZ
zeo=tSmW4t)+qi1&`(Yw<1T?iaDG;=3FYy(3zO6m`b^XcRRt-^d>$o<Nmke2gjN&$O
zZ;Q_tlcvVM{j|nMMZNLrmTyXKT`}_X>RRCW7O@{1uqA9y5E&U5M6}Oy9~#4LPs6>0
zWAMI&%DPt<<I-`76Jt8c$ZA=J_ax0wA0nevXfvmZ!?nr1Txmv>q<z1VSaXHd$eE#z
zT@M$In_w^pSm8%nQLIoQM>N1iyj^<r){NkkjVM;hkLqL9NCT4>ZMaT7M9w$-)0r2i
z#T25rMUX<kgLujSR4`MGbejJ-p01|Z;Ul~Q#9YeTPY@Zk$etHhjKJT|Cy0vG2z>L8
zofV$>uXo*&95_AZByI_Axq0!ThQ{i$@F_Gts|a{XbD1fFCt?z$e5Gpmv>AgWNr}cW
zi@ud9Dkd6*g(v<350FJxjdVc_h&A+(#ouHSlC07AW1317;xov(q{lxhjDaZe;v5*i
zLvWjo^u*Eiq%7w(0(~F^iaQmfnc-X)-#Fq~WTJ(7-NztDOCdw|&{%T(H1weOF{kpi
zjA)yOy!n$C^5)oz)3pHFBc|f5H@35E<9PvMOJ!wuOuIce=4x80LJ0OEcI4nHtwAXD
zHlXjo@$Vx!73|Q{JdPqhK%pEWJOW4Lw$TzxB+~wgj@kj;hUY>(biUXi<rx1hzzhvL
z;f&RcVAV#kZCrawQSKwUSJkKz`(tFbX4Vq-cz93s1+*m|9rt7x>;XgR`u)M4>d}3q
zr?#7z$|gn;oZL%(iWnJ??1LUaSYHYX*$m<B<7LRFI*}vZq{CR${bC^Z(ijEg5~zwc
z#;%%-PZxkE;EDXGn3a8}7P(Ijq-cp>Nju>GLzYrLMlkRHGc2agjjrb2f0osh6*LQ)
zoW2-Daulol$}F4{+`Xm$`VNiR9?v6Pnv*K2Q>iMmWcw%n-pHgbJpeoWAXES%nr>q}
zk)vMD4X)k^gDiP`e+1;Az#QKH>hsTjTYPoz?29k&k52D@{>2xcfBx0k!~6N?_r5Gn
z?|t>q{m<uLeeq=<u!K%?3yq1PzF#fQ`rakfTU2+R-v9ib+Xre109c>a@X)i4^zTI3
zfG3VyCh>d&3bk3_qrGu8fM;O4U4tOUPJt7<w=A`ijuX^9z&K^Q+8bMVWvlu5-?jYT
z5I9|zj_^^bAWNe7Ci6dfXTUyQ>yZfXzusO$O5gg)zxqr6r(Xs?>2QD9>a0DBBX=+!
z*(Z9d+0`PS56Z;=BijD?=WJ^Rquo3iNIPj~Z64wwS+!vu)D7d|nuVurar}iIAb|!T
z^X;wvR=WWr-gOmA)I8@K*GUQ$_|K#-{H}4zw|<IVaC7V@_yZ*2-(U5AGJ^W0znsp6
z`^B%f^z#(^>p-sF-zRZKY6}=wDy|qOAfmW&7bA1c9+4eQF^kDHnk|HhN3E2h!YO%5
z>PI8)CtGI7@W`n~10o)!03P9R)wdz`qd(bT{i3$Lepx?*U&9m>lw+&ZDzkn~Lzk1-
zVH#%CK0r}3yFI^*{e4S~=vJ*H*Yw_t@q2)T0oq%GQ{2(VYQ*lqW7h;}D7YoOAy`y-
zSvFq}`NDBb9R1+H`7&Ox)A-2o&#OkXgmF#}+*Kt7n$7CrwA+H%BzlqWo&2RdmEfX#
z1NUcgI7(|h?|^2mI+Fg1>MWl_S%tny`S=8(M$FmcG*=3n*k`%t+Vp-gU_d^CHIX+f
zpQ@;coWn1TIgzAt#w|GE!epL)75;v^eTQKj?wKyMi7uwGE7RD`6}F^%dfjC+c%&<N
z{&LWF-BY+0kTAN2P}BC)=FaRD1^lzg3L1e)Mo}s+F{!+8zsz3$8}mgDDQZA<frzrZ
zvy(k40mC4)C<)wJ%*Uhu6YxV7K<s(qXLs}!Don6rA3gk-5LOM#vL<AUH+)b`>E1Zs
zYW=F;r$MXsVCz?ExyY|_5Hk(uZiOHpBGpZ#^1F{;ytv!`T~xqN%3PbJjjy%t5F26;
zC;sfV?(p6>-`wv#`0BU4dy$dtM;46n^-+!*I)^*bCCHTA#VpJu(&g59>GsrOtCM~9
z(A%HB-_VQ>(+_ZCYi&Qq)4aNDsTt5<r4d4O_$cGq?*3@EUcGp6tWizh{ASyU(37lN
zW!)#)768S|#rSWz6eRkta7=8G`G}~k?7zE?ZT;rEy`uw3$A7-}6!<dzd_L}9^^^Fh
zKDP2;1+UBi{lM0C2Yo+;RH54DU;dhP7a2ldny1tE?%%SPFOH7cfm`<!5AF+vcaK>)
zh)F<_4ZtJ-eQuQ9-I`uY^|Y<KA3aKPm3~;5s{fm4j{B}<$C9^Nt>&fvVejedgMaoy
z+^&mm8H%&ZGTSnX*U0dRf5TpG8NP4!x)MkSHM%zhEm0CU(c(C{cWbbEBXmW8J1NKZ
zo~){ySKaVLcUgMur#XWI-H{`jgLhPG9Nj;Y73;Z3L^lxuUg}A+h;xQQzj@*t*kkB;
z!zAhSM0oDVC+J=jvqI|3ygnqWb?244KJeEEt8pz1`K18l(0~{q`<+;LxlHm8O%YDr
z8jKP*t5TfVXGSxP4{mZ<r=SOt0R_;5FsR6*%mWGw=qrN-9d3F(zwW^c>E1z_TW?(U
z3#W3iURNJq91T!>t9Q9X0R{LWOgVmRz9Yg*h}d+uGPpKFel!5@e`Q$2(8Ig|YQhi=
zWyWfeLy7nsqNUlGh>O@kR?Y0Mli`{dY3OcV_`7N7$rWZCs02QYU#4`oej;+IUiz;%
z1x3!^-?iLH`QnvSB!Tmpa8{C})AZI)tzW@+8Y(3J3P)n7!~H9aD7rg3jcXjc3sp6N
z-7#)J!@Q$QWcm@X`~Ya|{x&pFplu`mn=V+hNXkiTbGaM!92ys70)&Fu45FIW+7W+K
zjb5u$7Zz)+NS&V>sd>k#u_A(gW~9L0X<9`to)@hG7)^_oklQdTk(ePN?2g*QEQIcg
zqpv;(oPj;r+XnNPMgom};j)#O);*^BED$~;&@}5H%GPkQUQ^OmU%s=R#}NgNCINBS
zm}#%1WY#Q&j9{n<_o4R*@4IPjsXC;AmwU___ppB&+ct`sGE%pE{4Rhg0(UTl0GG_D
zg#g5m-r(C2Ar|3_yTbk->q!%(czTsL_|yacORRfi9}BK0jfbUdwZ4m@D&3GAqq2z_
zk`<$93F2kpZU)1Oyw&W5PoxT(K?I^8f%xO)nzk4Fq9b<W1yAe5_FZLmPVR(kUE6j+
zP_<sc&R{P@QtCyi&wd}Z-TWv8+JBm4<d+yyYCq}#TgifaN+~Fe7fNV#SvUpaH&3K+
zrsJyr4W^c~e_QVImUR(DA$&I-(>k2JFW(hiAgMoNiEB4LZOpgYeZ3gF(csmMBhq$n
zF{=84#Y>fi=j5?ppNRWEPTC>`HE#DiNkY4$D-`E*dzAItoZ@%lqp3;=K9~9AobF61
zC`xHiZRPF_$8Fp{T`Q&NB*IxS5qmX|sjfw%JiWGJ@0LiS$1;LtnT-;5FyS8)u}38@
zNq?2N5A$>q6ddgl%|z3DAT=X~&2ui{eMz@JL$?P>Mrw$R^0934qA(R!teAl<Y>ThK
z%qv%{t2eHep(bHXGSsO^q4ODDTtI%erC|59)*1Zc#mL-&_Uw_2Y>^I3azXmpjV+lN
zdrsVT#@!<f)D|wI=_Ta9oJ0qT&Dn#2<>$^W27WqH8xY-7CxDK-9hKlo!oaz+?2`xQ
zKP4%`{Ng<>u$~s-K*Y<`%QcPp(?5E*Ey#2eK&3J1=R8SzW(*dj2bQ<;Ar#^aQ#h=e
zxe>IThqgL~;UT7ApJ_1cK_5oePw(vfVyHO=L2`%Tk*&_tzEx?|lsWo5+NEiNc*=_&
z1UHB<?y0XRz@X278;6nF32E5*Cwnv6=sqs;)2*Jo)*Scgi#~;*;b^QO-xd;$1c}(L
zQ{iPp$^o~u)HAg`2OI;b8m=YzxXLW66)hC4KV#5MF#awDWNcYjy23<)Pi6s7oZnNd
z0RN1vHgM<UgO(0+r50VM^#fjWIG&A%mPIcD8Px{{FdKx2PQGgkAwBM}Q}A}526K!t
zJRVPKap*Wfq}c&RIY7tO6F!jZ!Pq_Gik79vQmcax{KY2*GykmeafOyN!Tl!5xI;B`
zT6GTrhV!$dcVlO2FRJc>cuv7w=9cl%B+A~DWv{df@Mw(4M5_%X?W%n0Hasq9$x=wf
zSAqyD_{cs&9ynQ_v<T13E3dLQQROKk`-QmuMai0_LEKU&oD}Yh7Sv+McR#SyH?FcS
z@Lm<dh}=OtHVh%-NfI$mPf|3u<QmtrW&UG!>9m6hGz3l?_k<$t6PZ_nLwzhTArT~#
z*QPopDP0}{Y+ol^7HPO-bGzB_Yfr1t`o8V?L9u<mb2dMRI$`ETdhNA?D3ia|sZHd|
zY&tl1j4yJ%PmnA(Uf!Ut1;76)HM_NIxHZuSxxo}qL=%$jwZ2#%$W$6QwZ>+^NXMc4
zbC`A~!mSlko2fhA2*xeGhQJb`ta~_r!bCXwkZA78@82k|t9lnDJp>R3$-9*UQSsa)
zE>Ob=ee7?Dsi=>?Ve~rmJDm6Ktekbny4|n4_*S%n5+%-5AZ34z##wZOam+aF2lC`l
zL7o(gOpbXVcyYQ;qBccJzyEL$y)Drt`J!5jW%pnQ>hD!RB~{BO<53<k*+^m<ffNj>
z8t`r9V{@xxHnfgwx}VjfNye|#*%B;T9YBCM_NnG@v}tl@CA`EWc&g!oy243|EWGN!
zQk>amC1L7-Ye*7kwT{M93CF}WOW>jb)==WTg+O~vdi2wuIC!HR<Os=2zx~L{K~M8p
zju1l%_s`^qnK&iW0l*`xs7`q(CB3Lwi2}j62X-C9_g}GwzhlE-_SVQiJ1~%MDyz4R
zQ~Wre*udn$fE~kzmoh?+!@mFO^`oq0R5Bs({1&uB5sY3i@Z(oadc+{H4FM1FuDGtO
ze5wd-pvr{-?FB2hRa!Xu)6=kMZUJ5$ynJeW<Fs_6n^NGZPfF8l=rnlHHwediKDk+k
zphNK3Pr`k3Z4I=oLDbgfuXxVoaSA01Sv=*AXU7J87DfP#w>cN?+`N!bI|1n>9RH&6
zLlJbT@)SuT27r<Rhw=qI?k%@QOPTa&2lIKgnkmO3Cu!yfIfCpRm2RIn9qK*mm2y;a
zH54?tn2o84B#2GhC!DNf1^i^&Z@2GYU|rHxS3iiO=86zhB5nrVcX7r*`3TEMivPG#
zOwb)79)~nIP-7rDn~U)jr)I}I?n2U??8))7ryUNmqg7iMMPki>`6JF{>BB=}I-asi
z1cYo0nk4rHkf59<=A$wNT<u{y^h*0()Jlyk#-ZYjlLLPi|3&=Y&)K6WJ^y3>`#C#M
zz2raizn|Smy8b`km+q(k_xHX1cYM~3<V48!teiMH_J6OYvv!!~SA|!xBzA~mraacY
z8XG(AZCItDh9>-!ZTSyu?cyiQjJw&%XAe5rmv1}S7Qz$U?}uM@vilF-X1`>=4F8^0
z(y=WNFLlTN{lS5`XFfQp=7G64(SP^<I5Ztm=7x5XVUQ2Ml)pK??5+EMA3wl!V2bk=
zk54bPZ#h2d!J^@cIZjdrJd5aU7^r@R<Mm64LFy{HvHsEtcfRyD+{k~Ckvrz{!KP2@
zGx>?%;<Qx{-9%Ln+iNSS6Ls`3wo(B`1P~k&^ETEXFVr%3^4rp6lto9xz>vva5p_sQ
z*Ab!0wW~o-{}?pC-ffs;G_%!1Hy2w7r5Y?t>eyQe;c;@{Cr1e_y2~4<C!r&pHND%h
z>8K}Y9ewHbdRu?T?!Iwz7zB(PjQ!dEz+j#k9?nM%##+aKP<+QpJtgu{C!_y9d#;c-
zM2&U_<(3kB{QBtDFW!3WSX)H5xPLY*A~yEifN+h(iG{M6*CnGS`H+39!s~uG-N*?s
z+x%=t9${#+8y`g6-tx!g*2lARj%YqQN9@n&yq(>GD)a2+qsJZ~yLaoQbnUy&LKOev
zvzMcD*HeBQSs8aAli%{&&%YPZtap1Na;?{AQ@U}8hGf!Gx{)`MhlaPB%D>DDj0gX;
zZ#AAjygazgfRgc`^^Y8ozVb06;&?8`APx7ww_Kj@4<CQ@^0?MNay0VBCoE6(9;@U2
z_jbdXWk)}J^y;|Qu_?cH|9<Ou@Yj9(@z3DIGNfX$K=8yJ{@cFQp!lfcepPkTz>-1n
z6<H<YI-lMD5<-JEgDZ!3r*xR)^Kyw>)iOVOhZ_fYdpAq&XTN;fjBwDRFF`HjAMFiX
z*p~sIdzw~|N`cUjW9%kjA9-L}<8N8aYm%6>juDs{K;1ORYr+W6`1%bGSPx$66g55O
zWv6LA=YcxkM4fr&ZkjGB*#)p(3HaPco~v`N<|JP_G4Ec-wKLnz+`oS-%c+z0Iz)MM
zTD21pf8s-*-|Ky$k3H<&cM9=%IVs$To;c0kjdYQZ#w+*q=N)J*SnaLrg5b1>R$r9w
ziZ|oY@{&!<?|psjy9ub|m$$#H%S&Rw803=)ml{91?nirVUKC`<3>LRlZj+_9Pno#Q
zaAZ<^4lx&esPhR5)-QDx<Y(HQXy1@pfr|GHqasQMU**@8xUI~JqqdeRwyQ;OyS?nz
zCX<@2MFw5PpU7v4p^dN8C2W=msSlQ`W<x|ZvGc{|lr@XUG`FIGrW2{HX}cKHhcWci
z3YWLnQzVsWSl3&I;%4x9GYy#Eg*f$2f_aJu)KcI{8z+Z>Z;FUYU%h6a%mf){<(Vn$
zH`=G2VJ}|9hdR3IGM`($Hi77*6%+ul-COFG+XhRZcrESlW|JwwKQ0&I$JexT|EvIA
zTDTC1XsJa!I3<c;w{|^5<Y=Nsj4Fl6A@rs$j#l8Jq3fiED6uJrl@ZCet8g8Ixdz)?
zzF6ef(d6}NfsaDP>7bOa(m1zyqC1;rwR5|5l`xn`VojxiTK-hn&$W##5hy5_E=Pu2
zlf`uemw6&F*B|A?doYlIvt}3Gu3_LbgzY|cgwx3+ZZ|;PWZiFh=L9!S9D65^fBSZ~
zr4hUDimCe=_tZDpiO*^LY3rrj%1o$uIewR)U9NC+!jwtj0kJxc2662f!)%t0Z(S@e
zar0<i6r-(QIyW@A4+z4)<%?0==wnB;{l^oyq#N7aTT*tpvElDl6DNY^t3}-K_lvx$
z`Y+2dPLHOR-O3lUs<^r7BkU@7zQ!%T$sJq%^d|o>zPOlN&sXQ?aih<{g(v;T`FL^N
z*!Gi`*6iC>oCFoGsl_KYokBhFif|j4Z-k`2wf^*$k^19OVArwX94i>XiKZb62C(XJ
zUc@}j%J3bH@gV>6<?W@;7wbxoq{hadlcOyDjO?ou>D8<9DtobUANOiWxO~&Tt)Kdj
z+es(sdfN)Gt?1iM>%Vs2|G(_M?1hkF^DZ3Ne%P=Z?QQJJ5PEgpsY!zI_Azg<caSI8
z&j@1S_80=?M{yc&NI4PV#4=P)-b#Z1gw=9no4FmZC4b-F>gZn&{9g~Z-nRUVo#;EA
z%<1IP@>@$(c>?K;;R;i!`v=Ih1h5)_l9}KW+s8w{*p2%3OPA8t{4HS~n!2Pb3J>;M
zpCtS1lYJd27+D!sQ{No8%jq&UJdgDY4K*~<*g*919aC3y=pq$H0=tNOQa?||W}#F!
z`m%1TBP61JlQ{oLf;&3iv&D@}uOCq7WMRt1`kNo^cuO{}386C4vI<xv-)gi?o1RS<
z%AHfmDnXOF)hg8-bN_Rf2)$lkqL1?ZeQ3Ep!JT-+vb`c~MBg{Pan0O=YYV2TN`2i-
z<Nbu?`;gx;+b%<C-vG6T$E?snq)7?8OG=c-yubZFpIB_FTu+{+%CI%yLE||!<E2d~
zfaK0}KF13g5PUosr7C`1KgxuXKFKqCGYP5CncYul$sCmTg{an_20^V6`aj0Id%ONV
zXzcHU4gGx}8z4J+s1#p46dE_9)c<Kb#p}E!ID@SK+?MeT20i<%M2qvvZM1RptPL4C
zS_=VCEUtji994(2f!?jM*N0L#N7u(sR3#z9Awi^*?H~Q%{?{U$UOsxv*s^)P`0J|B
zhcsJ9dgZ$!;ig~Gzg-PZ$FqEKO(C>jJ(R$58Ii1c{cWuH!F!r(7@EaY%*)ail%VEe
zl|`FV+%Jh(t^oL?KpIz7C{gLd_$6@4YDeglDV`&MfvXgG(y@c_T*5*P6qymn=i}KJ
zsF>rw6&;_TZ#^OBVs{J=M5A5f65l?`@_i9P$|?qNO#)^6lJ^mt4P^<}u*|t0X1bFW
zqJ_Z{uoXY~&5vRgo)-CHCem)cl$t3BHqf1j2!h+3H;hkMr+y1S_<A&cFCH-bv9;mk
zL?h@u-fB26aa%csMG$B&Ei~XZJ$)96@zi_!kr4))1&Uk88Z=JBGapgW>-*9{>(gP6
z>69SRL#G3aykRPCj7Mk?f&Y%^gT}EvX2e8KDq*gV3Ac4Tjuq)}=A-l5i9GHV&7VYA
z!W213G&-Zd3`rF?al<$zAfdtU%;<!hmU=Cep>f!*KNz)pxM9%lrj7ae_crF)#VyC|
zgCOM1`B(z^KWg+J42rm6{OjQn%`@=)d(Ob@qG<-6f3Guu7zmvL#3|fv4x+$`PoIQa
zL{e;?g{GK_#%VxTF%Nj5VIpu_XX5)qqyLNXE$QFAq7&d=`KZBvIPPNe*c&1+JQUH<
z54M`s``ayM9B0uWO>GFMXq;=;5YNK*O*8Fo>O?alL3_#AhFkVC4V_r;>pvw<qH&-H
z68F*T^OFsO<pVlg33$-)YOwjnv*N^p7HYmXb-vl%03~;;$cpv3`j3jPXq>)R8bQL;
zbs5k46v{(h{Fr;mW4>wjZV1q55<UJC24QfvYLmsllwO+O;;uE!7=~mdXQ3IM>@31!
z)8s{oC6;;XlyUD^)})dqLi%UMZZu7Z4sH*DDJTMG-*2QLdvq&KJ1Q-EEW!f&#H^zx
zNNFY=HGd<{IYQ2m*o_(<wPZ}IV};eS^dU*qvJBNIhb(?y<5ZG5J-#ZZR-(%u`O@Li
z31*3gdg4fYnNTgWY}m2}aAuVl(XiyhqEh*CTqHHAdsICa*Qe#^+Dbfx7W0NGY2zxX
zqXUGe1?vN!<pgj=@}6|ru!d&oDDxQkXAvb_j<l{I8amWBWD=jD{x7jt`o5IYRIXWB
z(2XzMZPz--TGM_xAPlhj!FKcX`7FjxNN?<Tj9~XCPz&1uSILhp9t_CkWuO2Gf8l2`
zgxaGDw1G*kSX@#I<q8Bkj2%*d9!cnigR4L+jz^$6%7nn=*Am~MWycjj-SC5jttiqH
z4Vf^DhE?)4kaW)7OiGm{K<SeRPsft34iiHtk#)eTwF?+t55!UScDwI>!=%_|=_%R^
z&dSvcpg4@IBFso98~2KyLXKQrTE9W|C;~DmFD?|*S0Lb#6bm+J?r)X~d3Y}yA!f{x
zbGaavfIgkC0Pp1*aog<V1v58G!aSDxcRSmzeIJAOPcoq|ExXk)Lv1ZN<;EsfT*DH|
zt>Oj143+}gcj61P{Nc^<dL6MZ26i9#ikHOp9{lAhsRoA|AO$&AJ7JYwivr`xoh#iz
zO^<C4A5Ag=QJ1JCYCEi*Emv?)64Rh*V!Ht^nJwt)bX7)tifsyb3iRyco_(n5NWUbO
z&pl#2cI(5c^$i07!9~-Wb1vN;&Zj1l`o-*JPaVB5!~h_2l00l<0K~{ltZuB?7qPax
zd!)#_lD_PVeJR7FM^p0j7laBH3q4qDVu4g-gox$AiGL|p*D=$+Stf<W#iS?@hwlEp
zSd^<d{!q^3{tCJB-N26cgz_WzHyBbl&hA$1l)~&V3wSK0ytyF-wke`y;_QS9$Q@Qp
ztXe!p78jCDTIJ^j_idL_obZow<&LUx^$sNNw&^=j1W<OHYnCE?z?pCrl_*ryi(H@O
zbIG)Id=(CH)wHC>A^b0^gjb=XmjW~~p1p^;Qqy4FbpNGvudp1Y|8698M2lveRxQpV
zu{IsP5f@j?y`vTA4xJPEuJXTmDtf$ZAcGW@wiTV@gi{e4tmU=p`mG(sJt?IgzEH&w
zs8WL3ipt%U2kypGzK0XxG)iHPTM~{NB!QIQfu`j-;za<GCl+23I40Ru1S$}!Ulh|)
zAun>bkFjBJZU8nS?m+-73ajg}3U{;pR|k8?2LVoQ@ao`CuMb}x431vEJb1PD=-J_O
z6iD~mq!*kFVM!RU$vLAPFg?KoS0`wj@^&}kj@;oC&B}0$jt$u;%<(a4J*sv&!m2FB
z?}?_X?+IAckX;%|<}?5PZ@?MLXV*~JhMiDe-R$EhKEOA$C8cCT;Nxw}V2be2<)&}9
zeTf7xDUmR)tq>J~x~Ii5rwej>sOUR`(`$q%$CA|`uMm-Z5)NE(lzcYel>x3K6<S7%
z{Cvri%pJ3r<GFV-ygu{}2NP>ps$nStdx0v%Qs>^v0Lh%X-qw3G;M+qSM-<(pZp-UK
z!cJ7#-LQc>^>vrXQop))-L5EOIHa8DaG?T<>`(V09vJ0h<aYZ-es&#BK6OLiu#R;9
zj4O#1meOy22JB>>jEj{4xA>0>J9<>SFXs|Z@8}MH3mXCx#r9{B2JseoA)PF#m+gxt
zrFBAs|BY_uYFU=*o8AHxG6lIXbz43Cawr}L|93tTywplckC}&PRq-Pt4Za@>U=%=W
zB6fiMB>$@&D$k!BX#wh|MqUrU7-&)II)O2KdVeuyM7(2v#X>`_AO3c5rk9<%TGR?3
z37P^*mJ-Ej!9&FZeu$prI)&<YoV6vZBB`)hMdT!4PUR$mZscvZjD=wqmEJRX5*=zb
z1u}YFTT^$sa)!vO@5gyqNtGa4VPO=G#1ldlV!v7c+c=Dy{8}rVs4oZdgL<`8K8cx#
z=X3H@+m7{FtxF;lMOV=kfzSv7wD3}SzMh|PRxk?#58%~MnvR0anHGOmpg{><J=#Bf
zW=zrXgEO!pCoWDnl<I6e_2amMU+wJQ|HuCxhv|U<Wn1If`6Blk>y~!UYx5%&0M&*d
zVo%!niv>zu=n|v{ETEiBtwm)F$R*%zj(rpGlL$n+J3CIuJ3KdG>9hb7VjEL;ijU`$
zqD}xZ1EbWU&`HD)Qsotn-R<aj{MP#Ut<~1;0z-zowF}l!IMNg7HPTZ2E?n+>*{LQI
zN!~&EoM<@Y0qkMd6CT@fqDg#6Td`uy>a<j((R?NwCVI|b+888I$deK+6CJ_2Vq`U3
zib}hQu^pHCqD}4<MH}Oo7%@LxYb_E^&Cwt-PE;&dKD(_hc>cOur5nJ%ER_*QTFRJ+
zq@hT?9^D^#zPFVTPZ(Y;tEI!K6HCt8xh6QO(RS;o>ESJ>5IXu(ezYf2@17hdCs9T2
z5GB%<)1{NeVrDD}f{aD<jdEwaJekV*s-GJ`^qS;#?Ze{nG(o+w&2DWci=d}tvANcB
zqAUk#wS!WZPF(85$WOk>nt0z}7EHeurc=1>ZMd*r2~$1GytV{9RovC;x%sH02O2GN
zfL2@+`>BFhozpSZV}sjaK+<+Sd+AoWHnG^3rZm-G|APLN%`ap5Hof~>xMeoK>ecDn
zfDz&auV>#>39#Ly#3i*Y++r7QW~oK7bhB=UAhbEAK1X_o|FcqbGNMxpG#zpb*J#<Q
zTC5u+ds);NHU$@PMTOFd&F8sPf$)2cgQ!U}-Ub${K(*}~;hu5JZK%7EbSKD%w1W#p
zdMY#}m^+By)o&Oi?<pz=pOBpwqv*v`g@U||@M2Px4YAb<20wmeGM<j3=9?zi^Bf*8
zw_hxa*wP852rTnSOP<AfiK6Y3Cj-M6FASJj3x_U@U)*lwk!@4U9N)08tYHTZ=hvhs
z`H%%_Pr|J;^5x_%Y2a6!HjG1PfQL#M?5S0%(njdvesh1YvdkOP!YbDf%$S7soEAh!
zJZE3bb**8BOoa7jG%4*C6;_~Nh|=UWm~TjLbB5fx_O}r+8-{Yl(q&OG1I83tn;}Ng
z%LT6w`+F~)cFP4;T)&2*2USEKp1#|0MVW9k+UXxsQoQ|zPg-wdI<t2u@uuY&h?^SZ
z>ZsNZNUjg%l(3v(65Oys?=)tfyjsm<YCj)L%NY_>2XoYoCn>HVMGqFMxY#Q*bdPSs
zXxaQnv2eWc!$&SS-Z_@Kl^f5QFRko*{l&f8nLhC7_qSHFRJ+1Uk8i!py;y+PV9mDI
zz8YNdm%bhMs`aY4$i466<fXW75+_br^;@|+oU}0VY~Kln{s&G?fR4id82MAmk8`@j
zoXiY&G;vgkiKD9~ju#4*sopDyHl6H#<~t=_c01yM?@0e2;Hr_LYDK=R%=cBfuZlM)
zc6h{Jl9#q)2Ttn0$^KQGE$&|%X2+ar4c?o!DE-0l68TYhkV)>>tn}#dUVj|p6gVxG
zS2%UUY9_RR!@u79%233en3;Q6>B;yEiDgzfTCF*7+M#EyR{e?`eLm`(V-8@MFqn-Z
zSt0jDH{6cHJQxQyuPCf<qMn|Vjjliuj0*}$Jlnt__YeE~kFxoAUO2*u9l|3T73uFX
zMBNK-C_-;In`_;#>j7}4VB_QyS$Eg@F+yb;Cj+rb!POe=PSglx-Oy~`dtR&#(AsIC
z=_8`WQf`IBPhT>M0oZbFSr_)C3tM{7s<AVVtl^cxAdIqYM@OVm99et8SFy7*o`QDD
znd{!p4(Tr$p;R%`4Ge3cSy(7k6$^+VFq_2g^oD6tsRrIX#9`$|bub_1$YU0}w<)r-
za&|oh=!g?Pv`h<%#57&@>hk;XXyvvP-Nlg`#tVNzt~T);i!9=anQ~T~?{_mnF_lsz
zJdd*1ubw6~MeYr>W*k|&lSd}ybvp@3u|B$%l-6U>4k+mcMb9h>*Z)azA?2q`a9tDJ
z#8zGtS)oeU8?nF=#62&uLW(d$HTp-{Np0kz*pA&5KY)JI&%JpQF_a)-U#Gz3@z-k~
zWxZW0v3iZw5i0%K_-|1m8`lS)ilB9D0)}^L)bj#scvpOjFKaaol`J$;C<;3o!^kK~
zc23;qu45c19*>=dSN1iyh&f!_d;3q@iSw=wWvr0qF=qkiGB}+kBZmYwb<`W}+7b!w
z;!^~Z^G_2@{ytLzT3CFvK=}R>1j6dJ@+ppk4Mn3<fSh?*iQ_|zbG}FsqLa7|J3C~Y
zj!SO8xN_vy-o1qp$D6AliOtv;HqYIqS*DzHx|&VYVXWt2<k?MZQRu@Pd}y(=bGwh5
zLVS1WZ_V7m#K0*G4hkzvtfKC{ZAsTn`P>iWvhnA-WEiP&K%Q?!LyZnN@;h&+jyRoJ
zX=-){nx%<5zr3_+C+h`Ao!YbT!m-<ol}4N6Pr?7@{__k$^zwLkTA_7$88LzNu&yfm
z`^{?~OW^-B%UIUcD&Wd6-C;PHmX4i8)7=eD{;@>X$O(YIWM+Mwn~KTN0>Nf|fjm|>
z)2YSCSEQjjTRBz_o*4@NNMxd^oe4ezXvEt?7-59Ibo?0(?RtWGudNoPcac!;R-gqX
zgNi~*iES%oY_xKWX6>Z}7|SwQ3^A`pph6pxEv@p9ZI4C++8Bz3O^3R1ks9j6L>MDz
zrcqPBn7}`t=SK#4w-$<C7WQkosP_&9NQ2qu6OM~s_9irh(^E%du~hQGFqvQwTGYL=
z4yrj@<uBnE!&U!l{QS26HJ<*KD4YI4HJ=a9`(MkS{;@!&e$ne<J^8qV%<hIDE1&co
zRSJ}lqYoJ9wbBEb`nKz~)2<fdem>3r7S&|^>tsm3U7m@pU^l$uapHW<8Re(mX`hAz
z2dls0`Y2I12Sm9powLlu03l?}-SP>cYEk4Sw*py6PR*~gQ#T9mlrF{a2ED}F9vMHm
z$+8-iNunDlyUHb~Ufo)j3Yt6BmZ{LzETeb9oDry=Pigh&^@(G>&<hf_n>?eSWZA)w
z%SE1smp_ira|<?>{?Y^0iAvK2m>A=#QON_9>x%j(l8UUXjr8yT>;Ey##%CoX4;(cO
zkFd`H18}hZavbT#hz3$7>M5Cz(}%f;q~guO7vhR9rka5~p=2!wHx*$K8JIXNAFhQ$
zll{nSuHC;&loob8dsfU={`r9ul~-EE(BBR7FPu9i$OM^6D{9jDf-)+h{&1yAnao8T
z49_VUnu0r&8G(+qd5@BgQ0*6cUNeDw`7zY-WvP3fa#p1jq2St=XgTmchWEq@!hKA~
zjcNJaI7BUG?U}HJroPE*ALy98j;^^j?Mr5O5#rdB@E4&2P=pYNc2RUrVL9ce96h~w
zj@j5_^OgE3uA)&qHV^1~tDm)rhhbERlI$=*JJ~XT7RIG+L||>lUaBxRuU4m62P^d2
zya9|>nX-nP1IyBC-VpY@CI-A(%@XCg)jC>JfSZFbSFpasuZsD_T<(}O4d1DXWhb0g
zchh5y$q0x;8%Z6iP)Q8&Gvo+XWz{>zq6pRI^a}P}-OJ&aq=+NoV{QOwUdj_r@Ch}A
zEtiY&=}JK@!mBDC-Zm0ZLF{&RaE9#cbU0gyje_xWG#e_8=Pu0!e)Rsfm1>IT%uE%9
z_HNq(;M8*9rkJK$!Sif07RWn9Bo0!&4Q|b#lVn<S%;^w0t#>m$=e<iQ8=^6Z(v**?
zN!*K)Ng24r&005Puo|#aGGMI8Ct5<<nBf8egBrrlI^pH?bnJ6R*XD6rKo=ZWQ;kvb
z0m~YFZl|8Nj-;lM`OTf`F-A@+=7A1Lp+VPR{Gt{g@=;4F4Xf?2V{T7jP-?G*Z_{=P
zY_o_bbRx`ZVggBkN$X~N*-$+U-P3Y8G?@<qh{<tMt;(KS6qBT$WfgA-X%L*eYxZYt
zGW3m+xmr6*(sE=kg%H}js>-u5zY_8YpulpwugOzUzEezo#z^YsyQ)YjfdO6ObG21S
zUP<RCRLQ0mtRa8-DDpgqnK5G?*tjOJ#4t(v)w5C_DJJJurLQ7N4y~UE2aJnhtI5&x
z3K1a1Uot5eTF4r8Qk5zmX$FK8nN|vWenYuEw9lPjdKTHyR(<lev<5SR=Y*e%X_t0E
zVObBL_#>TV;1+lkf)-s<PSxs4Q{D2st?{N#wtyc-s_%{va=0j~D2ln-6}OChNL_uT
zp3zF8;v=hvcl|P6FA``iwF*hY^94ObwRusztHlMv250VOIb)#=pWo(&e|}nuMMY!v
z8ATTi<l*~{9Ha*tpo9QFX7Qo#8X0H;?59LdReE^b&a455<4<uA%VvuBkrO~9&{)<7
zN``v)cXr;ad2Af>|JL20)PqBc3V^%tim`|8ZfO}cLeOsS<P!~Zzw+jLcK~$cCr{DR
z0!oCCq>FOfN>NskZN_cwm-uRKOKY=kdLlR0V!Ad|D0ijA?7MIJWcXj7yih7&OOT3;
zEGWl`RFph(w_O9V#*v3v5E60o0ODNav+BH9$a%-y0-v;GMCOAyAzE1MFvw8vtE0*X
z5W>4x+Hs+z)03=ErA{Gz5T@iq%Vm-IdD&7w*Ph3q6gEyLHlKh8ilIknUE}t>MM^_@
zeP}v0f{B#;bSK$(!tDdrIZ<PlS+1()i1K7Zo*Zoo#uvfPmPFMgWi$1>p`~QtoeNDL
z)}vbMB&}+C6uPWaMNvR!2EOn(V)EA~-_t_q`-I6Cqv60VZJc;-UA!Bmr62iS|7p4C
zRrJ1Zt!PX-_bZBH7$8;R!ljFT{}swB61`C7MOmvw@A-(m(lwaR95-<SP(4Ro?FT`g
zgsC%D8Xk+M?*;R<{mIWf6ftRc;*(X5#xy+N9co6Kz)gb}*zpaz+{ZH}2#%Kq9FkYp
z-DQcqBmb#|mt<XcG3FGVOoGZHW2J}~u<m*DEz>xwrTPMn6jg4)v2`dbIMQLECP*~$
zk>W>Kh(mpPoyn?JAlVN`;_?(JQeZ`R=~Z!7GU4Zm`!!K1X#`h3`+S~{5hf4<27=HH
zAz>l=HkYtsupsqxS8jf3p(`iSKT$j^!v+VRtO7Vj^{#?7G0>eFXi8fgFTIj_-otT?
z(Dd<?0xWi?ttrZBIyMQKQQ!lh5Ib3d8y5`Fi51Eo$4)vs)8wQ@0R&^@_F_oDe9)8+
zAV3teDmPzOrij4#R4ZDCqOWuoOu0AYIz^KAmN6K|o@n35k=)8#l&YROPCdx0Ada?L
zz5;7*;LNk@Fy)x!j`|@?zzjK!3(+>LlCK#Mbi+D*W-=*e=3ttaONPuKU#(hUcAXpu
zL}WJ_Hv?efK@|6rA+`hBA~lFTTYZ2Cr^}v<fwFiFw;1E)$5wY5F_;T#J3-u*ejxnC
zU=_{kj^;(CV&;L*vv6N57jE?=WF%jTiX#p=q4P_SwwoRFz#!*Q@LNO7g~Z*rJCJA3
zyJyJjD@M{z5*Q+hpYU{@X_U<N5inOeLPb?uzA8y4uy$1Vq;44shMXg&Bx?6Nv4daK
z0@-REa#=wBx#I-Ej7#qVoIt&RqhzL>!)<W*N=7S^cv!?pa`mSYOI)Lu&&%xfA^JDV
z-;Xb3?^yR3<!ZEH7HA3cIV%ukJz?m<<?6JPCNW`#COGJjnBd+l3JGIHTDImr#l$#s
zTZEZ{6+y!9_guf8=xU{g8#i<=CJx<vT595A<pZ}Zj_U!MKtv7f?~c&HBrr%{VWg6K
zmu0myF$(M9_^Iov2#od~k|P)cDws;J-V}?a%7eNiaE|n%qcI<i7HTG>W+_9{>N@@u
z^A^X`;CkgFj;S+MDbesatLxz{t=8`D?s#@yI(_wYOln5dg;Sk&QL{Pl01D$yCbA1A
z_K$I7Xqd2}5X`!2G!0>e9<M^Yq34U7>i=py5qp;9v62x*`?W-TqGdk5KCC=yj2QZm
z-H%XloS!gp+W@x#vVNo<2dRtF$-Xb$-%nn4vhVWhvXkxK>Cl|a6U=b~Se;ldoPm+e
zA^iAMnwn$hew_RRz3GcVBOFf?j%?e4Gu4}~S^R<5>$w{R8>ivVS3al$6j?+QBx;bL
zIRj?`<Pr?`OjghVh6IhN%|X=dPHZSEmS=WubDJ}2bw=hh#i3$#t4u`<-T5e8F~OAB
zmi>BiRh(Xy<vVHVvw{7r<;SEE^^R<A6HxD7^u^HSB}ueFw$5rY>C&PSr{3V|09ToE
zleUB-&rNX`#;PE%t_9CN95@v=eUpd5X$j*;-{~?J{Yw$5x)pA8&!l0ev11w9+`p9A
zxgOQEI~RY9!z;i=PA-cd^9%TvDspEq)*$*h-b=mH#QO`!LsqBA!0+pOeR-+7;4Tpk
zJQ<%dO-AckiOl$VHvUogzjP!fD_Uce5nJHaIqh4FqQ>_9F%sV(-A*ESU}>-rYEx;M
zV!2X2>&m-xRg(_<ImKe=k42?uEd3VxT)(5Ecat`h2^jiOH`F4$q4@XDpKzz?VK)+-
zOGx&pvd80MGI9r5=<oA#X`<689m%0xRTH={gmbhIpx@iR+}_U4BY_}(Qxxyq%Z@tr
zLqBIntJ%oi{3g5Sne-7RS1x|>;V0-IJ$n5-+}u0XuRe1p4_wO{x59G^A9h1?n#;lo
zQj8=)Bn!c4s&J<hUlt*lA-Rj3a%nU)1{0F!Ga}0|8O|hR0`y&}c|u(Zk7*0_dmX*e
zQ5_VPPL=0$otDKs`+@aEqE*U5LkJQEWJ4z#?(`oF+wq+!A`#MnmR#}ML@k_}Hb4CA
z&VwP@0ZIx!@l?CE)uR;7^V0TU)I3eiW55iyvaFj8em~en=#aLPXHE;O@F>6tX)S|j
z`4<S%j;?k(nm*~I21;-O{D7BRzw#Xx%pthXdh(5@?i)CxCIz0z?moTiQ5PZ<rcv(0
zU8f`xp<T+a;y+<g93S#ue_s818=AZVnM;e~85?q2>@QY=#;YiIAkCs4BD5&xL^*z=
z1`K}HtC(m|+V|bkZX}hWhM(VgIt+1IQA>{(<Fz5keBIIciaJw^t=e)AZ)N4#*=n(n
ztaE56LBht!*)5;X*VH%gb=GA<FCPqRvleEIEy1D`I-u!jO=D2$-Q2UWdqB1mo8vCG
z-G(-}tEGb>)8pBT=iSGz4(~j0^2KU0k}4DYmg6HfMq@H*XS9bLMZ+Aw(K!w?eD}@W
z7$8O_T)dZOld=MyfUP-w35uVjow$*RYx92p^EYB)3d7Ma$eM+(;MV=mLyV=)u-Z_K
zCPw`1x!aeOSjW*qF_U%M_KX=knS8t5vEWVmP@22qyK!2a<M=KYvTo-~i-Z`#i&|SS
zbx^U-H2B!pn?}tB?|<eV-Ilde-@$q#>~<(65;}YT3%o7F0O9^;;q-AaUDe5d1}Z0$
zNu?lE7G2>)g7+FRRD2UWu*&|U{=<<Hivn5rnWc9cuiW<LKjlAm-lP_t`4?tH{5iYV
z{rsy`TG`1uZWs2m-#3YC|Iz=U^Uub!)zV85*`LFo|0n4D6Q_z-p$kdpA3Xd|-g%Wn
zMKDY{f4}?i{-(}9&EEW{ARG3&Y3A>D?>_*`{lnh#?xTbK|HLy-4WLdozf}>w3(-C4
z{2e#<wa(weS@i{VG}R2;Z{z%Tnod>BT3vjx1LtSBqozS&)N`{6b(Jms0MUY?G*Sih
zj*=r*uW}uGR^&9k*LiEgBzbpu&y8ZI|IiI^C)*jiy8?*mgo^?;7i=*9oLgD<Q1<&_
z=AT2ykqB8Ld*0oD`K-P6yh<~naU1bXFW&!LzGUx+SfSCdJR)y?`^^onH^?=&Y87+z
z`JIRHER7e9(%^@ic^X>TBo=?55x2uSe|Y`0v-kS@c;)^8%lX1d4S!fo6t`w?bwN$$
z#^xR$e1{F&e-Jk&J~<WX;7EF0oGw<1A@Zm=6EM9SSE76WbF>*RMmbW^&EO91SIfHC
zS47LU-aep6uOJ#x9%Q}%1wvX~H7&#2bF;le$(4C9$j4?Qb7yn{3rBR<VlwyW-#*D!
zEGR+M6vMK`o<AEiB^VYTj3!bI&0_VOU?FDOR)EFC0(hn7EWf#<*QMedIwh%3KaRyP
zA6i_6?CZ6Uhaj6N`&oF`Vai9qS%Tgyrg;Q$z{YgHmwjK_D?{&U9%cyI7KMgkPU=Wj
zUc^xSTylP4jP11^I28%W#}>jUaij>2bE_Yj_=c^Az3frBVwCA+arQ2*b4C4oHFrEx
zqyJ`0gJypRe7*&f;H)Yiu`l4dI1`IY)kE9+46U)i07gK$zxpFLtwSyEz_hQihKQ}^
zqugh~>Zl~PxpAFfqbi~l1;sA2OpFBx+Ecl%lwaaspFFemDb*-}IEVYc9q76ZmgPXM
zOR&S*<9FNMTncor;OpNML`-thq^pzpVmzhEGek(;(Q93wwjlFtuyiL1*%rOQEB<+(
zf&H@9xMo&GxGm^a=oI4B(l-)^P!#&?8A#=W0@##Ap!6&&(?=_xiamer1H^|&8j0ap
z^v+2guT8EG#KG40UlnurQi$DA$X$OzYkcutVNj14rN_qZ4G5P?pNa(U#oQ_MfwWSe
zP-e5pHH&G}i1YfBmQ(Q}T{|6W3Ki2a&!^8M3IV-0v4J5Np4}gYO5_aZ8fh$^+6`*`
zfc1igDGEk@#9<9ji$H)i`iquO%KG^mQ%yDbB9La+5>7OWAbl9Kbf4&-5zvk&l@K!`
zoHt>&8_px9-T?7%uHil(b2z!-INo_Avzvzye8Xyc>yt_)LedfMTSZ}O%ND6&0JXpc
z9}D`lM0#5Mi~{dzDjB6$D>N8DIW(fyzmppj5whe|fDtQEZAWE#lJQ(%pP~=bdOEsB
z?$w#bF(5s_A0ptpx%eXE5xT*A*7HjDZidtmVrYcW29`Os<?FJPP*-nYZa-gp9Y92B
z*iYQRLhr?GfcMMXNldduGt{_}%xzxDSyry9$#oPt<PVM2tQ+FAmL4^^%EzO6i+o4J
zj)^xaR&EI~!afqS)k%mu{xGviHV;EVt9Lw$9{6r`^DeG7>>qs|8%R#sL}svKmSb`&
zd>8q@fF4HTS@~;{l^?p#XH3G;?j9%y^}+-_`{yv80gVO5_o)A)(EW$L`=hS1iS_=E
zeD~d9>e!5~zuSCT)iMdR!{CnKig}|%sYTj!d23M$%D)x`l3U3|Ju73VmT!^~gGT4J
z{tGcjT6xV#pv-4JZDgJ=5R)?Lsqa(`rYU#ZQ07M9yJBa!4?L=cCPYwV6weUk02DAe
z%B2~GD#b~RLxlSb)k@B_Wtfh3f?)=XhEitD<28-Dyfx&Qk2F0WPnN9yK*_OGTwmj#
z65Shpvw#0y7fsa<2mg%a#Ys?tO#-4;N5v8WPWXmYp<c~)wRyY858THGx_Tx3ggvLZ
zVBzoyOHE!*q7aEgixPlbrp5BI93}YABM3TPLOO}w`y_DA-UcCIZrj{bY%KbFafFe)
zR3khG$Aomz!EQL3!jz;BV^$ip5S2bO0g}P%o)y`uMtrNbu<Os`GYlUYC&C5x)(Ot}
z5K4ew%lx$GmT1+Mq;dq`jL$3=K5q=Cb?d_D^@%BgXh-97$IH7FS1oKX<T<;CW~ggy
zwI6*&;F?}42wztob6pi2gBHRBNe6-1L762IA0Kv4ajzSTk2*`uFJY!)5ki1>ywn@B
zolJSQ#@BWn#lF{?!+Ho1$hTPjnygz8jYdiLKI=;RU1?rZh3il1)(MBvd~T7efRQ37
z1PZ9Sv7oxBsg#6XxXw--nfXYV8a|Wz$E5s7EZ-J2t_=f4?nNF?@XzAX!{LOPJ3YG+
z_yX^@gm80)axN0e=CcD`0|r-^)sRE9VBtL}Sg1ipwo|2Y3g&0Lv=YvkWR=dKyGnq(
zlVGJbhFGB(P+Ub)2|L?~(krS`Li~s<rGaf0s?;;iB|+=8_(Td`l_JA=g(w!&5{)Ya
ze}^-)Lx|nnJFe;iRzSNN&tyIoR)ggu6Tzk?A2NN^K04s@1HI|DLOaPh*NiMZ)xEIC
z-6=J^eJRa2CYI4-41@~21TjfT)`2c{pK(!6^7`_#KH{gIjgf~@o-eaw1dK*;iXNA)
zFQKGz3_=@tgmgG$O?>cUBYDz&?yCp=7|y|Scy=4D);i+DGONaA1%})Dv|I6?4^$TO
zuy-}WF)93?OFPIkwGZ(qJy1&eJLaa|^OP>vH4jIcp9j*kx0|SwaMPkeWz{<;y}r*U
z;}J(6mOw~Ww5f34lP|IxPzesfeNN8dF_=dT0UV;bWK@FAm#Bl<6ro{Q(4k7!Vnnw&
z<Xnk7B1>Y{raPVrO(i%JL#llivD(NUpiIx2C-K;H{OV;vpugjtyRB|^<nFS#ho!)2
zSb$?=mnAxREs%~rqy;@gChk6@SxI|W#s<gkScG8>2MDPn8sG$ANQGP>h(<^9b<Z8A
zymb07fzS>u-<jqD24cq991=)>T3jP=0}%xyq+ZodcVV1&7`Z%FZ2X#)B9E0PNwsR4
zFj;As6uy%&rRyZo-dtHXPu@(y$z+j<w3&yp{C3qZ{?NBLI7j8-?ZcxN*_U73yB`Rl
zqPwasiQ7<Jrl35i^QyOmMul32%f+e~c5dh}0Li8hw4l{*XodKKBrrxqbbO3Eib8;P
z5WU8tv<xb&Rska1jY=LEI;N3dv|C@SeFafDSHk;$gx*5VBfW~bA`Jv{rwJB5k(+%$
zwuLRV0iSpdhnlbe>ynvoF_udr!d{%yoB53dr#QL(_3{3r{Cd0nJ3Q9!b5q27A=|#^
zp0)s!FYveeE!*w|r%Z20t$u@m$De=B(o0{ov!58sqVmPLQ#^{_xhucuH@TnC76sef
zcAwihnolqKW3uDic53^9jjJd6$~Relm7{7AUeJr~(QOR3jc;lne(hiRT}x{sfACmP
zvnBPKb%v<o?N-cJx6DpS)}3(Nq;2qS-GT$$6|r^m^J;fM&Vtw7qaLL@PjdJG`^Q{*
zMXDM3NTnjl_EWc0x_3lD0m)^OG0bhLyo1T{X)W-WNw2d4nzmrTIxihr^?dmD9mi)>
z1S&LZIFo}QwtkuNh>TcP0MIQx5}_+RX`oPYm}_nX0#e0-=s%R7maAng-Os~{#*JBF
z766IqjyrUOMs)rX;CWJ?2s;{COt+AvF7O=WsQVDxkm70j98<x_dlH#Yw0A2N^&cc1
zezIsta`Q}7UBqI4kitn*Bw5JF=zexb<Qb#%LfuFY^JCM>HN=MbZPzVrm)E+?BM+MB
z+ViwCCRTbWl8eT}bzQbz|I4oT9mxlxwrh_QEC@y~hTL&jxO`gvs7c{gv?^-;tFF>Y
zXq=UR(<f=kpsEPe3AJMDKVry>5^)&&H+AxnTINgB*1V08r0+M49#&2olAV6wr%Lv^
zsfpgcd64Q~v4MVB>UDAm3K*2!Y&+P(8*4BpT~+ArT(`o<n(J>xaZOdN>8OqGdK*(@
zHy4wkY$bpy<6y~s*Dl>*S|H#Ss<@*~MIi7j=-GOSp7Xfaf>>|ESz$QZFbZ{Ih*N>s
zVI*vfMX_eBye&AzwwAC0QdK#Jmo*ekqIJTunJCc`FiHHyYXbrae%_T=yZU6H@Ac>J
zw#{743|*WO<ju-c!L}^$R6^g?RvVnM%uMES!F?r#z|dbp9JtMYaRFG>Wn_Ux_<{IK
zv|MyftE{HWrNHZMg0UX;w7fOQ)O&+VSU^fZF$|1<#daDDg;voBfCw2Cu!v}gfRCyW
zdv_O-pO<}o!1f1I?-)Jyr>E}ylN_n3Bg-D+R~%6~H9+BzEC&h#|8m*IzH$6+HM(w_
zBS7owhDo^ze^~Y7$GRUFanKDO_rvq#xb>oD?ZFUhYzc08T)MDW+s^mz#XC4bQVCgr
z>pr(wlh-_USVT>Wue;6wQwHkY7U4#a@zkqTj6UqsiVzpK8o#@h5_TdqL{aZvJ_=~>
zjvuZT&|^B0mnNh%D<C?ZuHTFCdOco2hi9NK7MZfAsdVNx>%gHg2_g5I>L{tWPGC`q
zW$T68#tUY-vlNI{t6Sz5Thx2!0`cP2-;=A_V>cHPx#M_a*F6PWtd{!gT3g+}u8LJr
zX*|0h4SYYt)XWi2K20271QUnb$?o2O_tetc^jZuR6DnW@?~}pA{e#^~YT&;6asp(w
zk@h8oIh>DGowHK9nlcbltTBSC#L7w}3O#xtEuDaYQm>tj=H(b}Ta(d%MW4uMNJ`G<
z<KE?RI=SQ4rSIPBe}8b?zv}<wci=C$S`AiUp8cQ3qhH#YTaT}Q-R*juNXPWL-?myR
ziR@+{?;>jXID}1a-;8eElBCp4FW*r9EdqBbpa^BB`Qj77UHJZh@29P4=xT&S&J+#*
z1ZXn^%xG@TSYuKAQ-nPA-yn5wg}Yk-3i5$Y%7QJ6h*^M+tz^Uf<pLFA{y5D3B^&<x
z|KtDljs=jP<!9XAeAwC)e>;f_C<^$dAc7<=OjUtB4T__t3i)9u*1%$6r?74mQI%xJ
z*{`y9#dVbol%I{qD&cj>aCr$MX04GJk*H(o;{OtrmAh^3Iq!GJv#u?58wE?2p_Wj)
zUJjkAUobQ40$h}Wha&!V@aGEF#V6&o`1DFxpHi;s<BMY5uHF`LAl-pA{*mj~lA>$D
zKtA{PVt*vp&dr@uH8CB?2A_)&VzCk|DLz8v!xd0ew<B;K*Y(w8320S(ivQ!9&xYR)
zd(sx5Xi&lBO#bRhW9=vuVGXt*v~p*dZQJ2|vr~acX83>&h$0WqY8xSQ^6%dZpM7YS
zhllcAbl_pYE+n?eiPWu*<^YI;?Wm8x9>)7b=CRVL>-BN$$-Bu`i63(t=G&~{dTlnf
z{*rcsPXyc2W7LTR5QdGG*=D)}A^`C?M)}|X=5xi_nfY+1@iM7t9)X@4l8l;EMu09`
zFuB3WDTv<DU`VN28TZC9ECMxZ_OX(elwtxQS`Dje?!Ez$h3;oZ*DS=vVnLnk1m-Kz
zv6p39D*DR-;SKOfo$W-9rq1~1l;8tsM@;QRWg_b|i<s6aEDcMAFN+Qd=6S7~N-Mi8
z0{OwV{H@SNSRF_J@<hZ+F%O^)w}Jn(0wzmk)p#mdfMcgmjNhYV!3iF?epv%Sz^T`B
z%IH#_>q`W-|M^$E)0e8)y{G{S7!ZPplj$a*iWE13oH`MCa_!Ssw1fa0Gk=wS*3v<Z
zrz{t?>!e5xthV3kz9X3S?y3)sNhbg_Lm?#Fd;Z7_9=kL?i@_JcWW~}f>WIQxxLrCg
zXIA=-k#vOi*Ah!kGZd5~H~&vbHbia+7DUd8rQBpEI>T8sJD~6CA2i2m{y*}=m26rG
z5W|o}Z`X^y9+PZ=k-8J|)ad9B?BVo!z&CdRE5S`L^wFz=C_%g@LJU}<6ZGDuWFpHZ
z;=S?cS4no%@xi|d`hg=&$7(^i>-S7ZKD}PQH&V0sVCoaJ4xb-O4wrdlqVIk8;>A<B
zC!});eZ1agL{@9}+(A{<GQ9jfIk}qeky&kc&n)y!{XBzqH;HaG-18F?&zao=ej>m<
zqI+(V2k)SPH1x$QST_22jl3)cjipNNjVm$L(TrH@r&EG1R#43wzUSUEf7;sk#D?2E
zXBxl+Jy5J|(R<Tk>g2xsU5o%?G~tw=Y|}bK%9!1Iw0C?U^CAjH!#$p&`-!MP9PE&C
z1EE8BdZ)JE<lF=oP8$%(?~8#-AnPZP#?mL}&Zd$WYX?1O(VKBCRpr+v%aJu;FN=v(
z%oaXlMXh#vhEe#{PPmy77N`fCmkLg-INwu4VSnfpdAU}@VZY;kdU*~(X}wr$lUAhn
zpQg8kZ;Iv?w}=u2vQ4StFxu<tR#j6OC_qTGD%AUptE@%eiL)29+@GBPfa;aW`Fs$R
zzqOd_s3|$`!;nlI3{OCDS_d4JF4n5Nuy4h5ywns@#mpwsVuF`zf|bV(blQkJxZlUM
zCLf6$SDNF;H|BBB49LzPEhCUP9a5;6h%f4??Bq3dllWn!$kHZ~(UcrI#F@Tb30$?Z
zjpGW)hQwIplkPFhd(V7#fs6O%5;&bAj?y<IvxrfTXDi0=8&ng8==<F%GwNv;LXOC(
zkFmJMj)hOvM@%YomK8@MrsemGe11t>L>sST@?${CFLDhvnyr|1>8Q+$$r4*9)y~8o
z2w=`hel0<!DEs1?C9=K$tRUg+?6|G#c-(5X#77^+uTk?K&&FN8O&lWT2STVO9Gc*%
zWAFizjPcJh2|fLSc!8R~v4B(ha(r<)fyaWe05X=UKuE~4P}D@4eS9S~@texT9m#{N
z4}MKi1s{28OI9u}@|mv$>Fx$o9ju1J6-se83HYdPcY*VxS^++*<%K83`BEi%<M(lz
zRJ=u#UCsWuHhkTiXm|VaH=>kdLF};kFO}`1RkqpzS5wB+QYXh5`Yeu8pbM%jEy<(m
z%a-RX7X=%@Yj>msATtNyTB_V)W3pmc(wx^LLPl?8DP8z_?I0Gb8$xmmK#H!l7<X@b
zGM<jLOv?Rx_wE^xUF6X-1m-JK46ZbUZ|)6$$|Uj`>h>;I^Vm?KhMOAU+F_=5|1YnV
z#^=heZ5o6c@~+z+T!)z2G=o74=}8WyycRoMdLLHkV&E`w54y#rpbyiSnu8X_ngVCK
zTlPr9#=s_Pnw(eSvKq7v$Z}1XmT*6J2OsEUMeo83yImb?_qS)K=U@Hy?5nRn>rUp&
zzy1Y{F)gC8u_=*Ihw}2!{UscjrTT`-C5C7sp8wE<dbz&m)d+ui8vz1yCR?4tukIRP
zp4HN=bS&ljy+Y@le?o;gKrNp`2JlcGON*H#$1`+S$N^J@-B31r7k6j**@~IkuD#V<
zoQZlmqDN?YV7j&+(sNwU4)EjAumG_AP!moZ6Mx5M5*5@pWBoVYQA{1jc@L5w;)UI>
zxvRb%vWB8NVBhDHLIOXAyfYLPNDd@7Y$rW637zg7a$AczCsjFFc}U(#cui~lDLYov
zm*X)ieH~fQ>k%%ZDDLg-xNXQV{-o#10GC=)ZAzP;$F^T|H=4jkoNUJKhs0*|8E+X!
z8A||nlyk28Smoe-IUGI5q`0%zWgAg;;)^7dr+)$G)%g+a;LCwr9q84;c-9claK~WB
zy7F{apO)FcU<LZwpGxcf$+iy;9MdG#C}+{hbE7+Y$e7LMjxv_ePllc|sxf+kp!KYB
zt3YAF-lRNLL4?aE5fFA44;FE096GVMLX&cK(M2>m*Trcgkp3joNkTYstvMq!>K}-x
zbWuosAdYobX1=7|jHtnghpmD{I4aIqf9PBYCVWu~hSOGPal5g4rPEh(bDGwUyMDos
z0w#g$?hj+Dy4Y&%85njRGZq7IyeucdoDf0I(OXel>61{%<F@Xyxb#QKRN?pK{MODk
zdAhA-u7f9jED;T{ivQOMx#vSI5Af;bH~u<-WvF^Mh#I=%SSC(-2H*Vq|MI^(B5t*!
zOCCJ?rBp0+*E-p=Bl+i=|9m&Tpj^?(j%MZ6`6Pc=NHLVt63$nCOQUjB-eGuXa0nkg
z{FL3?wn87(YRWdi?+IG%BjQmw7<~}Om!j=Qo@m=(5&#?RPMLU{rMTOep4V1P&K>sE
zLy2gYAcfq-Udo8n^RK`?PGNOtrZ16t?qyEa%;5hW&$`oMic-y#fJ9t!3)N!NYJK_!
zi4mAqY<?%hesfm6Zyg;xJ=i~XOraB-=pMg%@l4Ck(WHN@n^AK{XunkHUN>RTKQVtD
zN<VQdG~@e6ECv);gC1^Kr~3EqfAz)Lm&F&|`{$$2y7xx+KJShm-aqS}{kF)9uk!m3
zPVeVE*X6At3ZMZ4Uui-RM_?QE2|=jCK8Mun%PbM|dE)0ftgYy%hChG<WGK@$+*Q`w
zg;P%rc$Olb4!7r|J4%(iPKp9~4g9DuRsChjppfxsh~{PXUGu}gROM`#ZL3J?4uqi_
z-;l1Vq3fX|f+gQj0vqm%P?;c&=1EXQM2c?tq^M<)^W1MH?N;kiaW-MK$5}Sqt{%#m
z+d~fx;nO2jV#dr*%6wFL>8Jy?U5;3nJKH8gI&zp;0@#~~JVv)0cTWc1*S{w6r;V6D
zFcBKYbUH@9gciBU{&4i-d6%lM9|VsNiThh#YN6*!0_l`5kH$GPJtq*#>#9Tx3U4nF
zK&$KN6jrx0^-z^YGrL3((Wu`*bK5ZQz!al~_;v(@4@d}gTyW3(sboI!EMkvn36xtY
z>6)pN(4vo|_W%yHH5qZy#OU&~3`$s-N&*V8D%j!v|6E&v|GM`uvftd7)Zqc;+?W8|
zedP{2!Vs`lr;H9`VH78FZU5%}?k+F4v%RD2$8ER851${)_NNrw{@qXj3y;Dl|J%#k
zfAhu5gXb9DwtK0ay*WI7lIcgXyT9p;M|bsG&wto^wf|)A)%JtWKX2m}uHN-uzYbsD
zz3r#**}?JNcTW$tqjx&4@spjmceDK$PhUTKe&oCJa?kZG=~L1ryDj~a>C)cW$!F8^
z!49%#KkPkyeXzYi2`2d}+XN$TxGi7B1MC^c_xkzsgQMeZKK-ZH2e1A-*n9PA@6X%O
z_obh%5$&lznYF9G|L{7#?=j13cRYe6ZE1b9%jnMTuAU`H_hjZDKixY%K6t*(?_}S6
z>*n#*(ZPTu@%y&x-+OkA`ui|+CSqSwqR;KAaftqtav{3mz3%hSWNqw32I(`Rm+U$d
zjz-y*sgUG&3*EGOB!>7cX~!KLccbbAa=HXQhr>|XL40<e?Ku{X07Qgzx%Xbmb7W@<
zsmD~-#aPSRP?yC_APOwM?y+?+&h?hH$^D}rthsFg>WB0|&DzbzCGWr>hnOamQYjWr
zjA={5<k=n1vhmk!q!(vp7$raMgcPdlB8dNvy?m+|1w3&Vg&XWU$1g{Lt;;Z^T%;Bc
z#I~hNZ#Kr7q1<srK@HLE^7Lgs_sPj_T0{a;7rhAY^ZXhI7AyE6H7co8i!b<-q=Sz;
z4qT0w-e4rh-d%*SQo<@N$iDP(z&UEgWTS;+=XmgRb<X055IbmKA#vb*DOf^9%n+Oz
zH=xg*4EOB2-&y{tj~vh>Ulg$P-%<5YNC6{SCc2LAiqtl`tF^dGS@7Zhi<f`q-ooO2
z_xkA{9p5@Scy&As!Z#m=uog+-+3@A-<6)n#yGI|b&fY!xE*qi)1EuBdyVXOdKJ<FM
zyX~Qc!pnnBz>pWD)S`4L5i}TLA~FKIt>-s4lN+oZg&iXdl|xt@pjw?)%kh$_r@0f9
zv=_td^{Ycbc8P?2qFt!@2eI@anssA(LsQJ`=L4ugO`))NM($gqQ=deT#q-qX54T0-
z59}Uaa3RsvDqj`&Q<b!85L$38{^=-cF;rheK3F-M5k0bG#*llmW)#k^-2YAUzd1<>
zg<JOC933%3<xhw;SNDpUi{0BkV)Xl!Q|0?t#RL_##7>+sK0U5_?9qUnZkRgR+v1%<
z;E=@CYo=3WDNs(oiiag08CFQsQbm#7B}A9n96u4v0ZPd*8cE^RS>}cZ`5XVdIDEA4
z0}P9u9eUFY25uITR!;D+J=d7_hbf$n?zn%t_MB+@YoGbh>*aWKmbRflsX0MK%9%R-
zz;@zpiLs4=w{Z>@t6aEQ%Fk3<b~CD0w4(qj>Jje(NQ2JCzGgkd4{fK(6>Wv&5O#K2
z_{37vbuEL<@pERbE8iulXkT86Wec;8B^N4s{pzXqf(y-;c6R<0?uC7Buf#nu0*w1E
zbGMdB;M=smVP++viz3Fpn@SusE23&}3enDED?y~lQXQWrfn650`lvjktfEQF|G?en
z_<-bubaj@y=D~$ogDDH)k=0_-)(O{jjSBeqRa&}<I|akF4WZE5Vy|6)ELwSALC6YN
z`v7|a$$HAIlK07^9C2JD$u-9r7s|E)=!I2VMX4rpUjSXST%fKci=S1uT8(Gg@xAcj
zf9|r_g4m$KYS^7H2b!{_fCR19cLkB@Slwz=1f=qj6H#WY*J)t_A&C@&^el9&PJobN
zC%iXUVikeQk`w)#J_v_l4Fs)<vZ(~tWRAKse2=xOb>6KqnWvEe#K7|aHKqM3*5N)>
zruZ)YUSZQQ91cTfV5|61k_)Tr*_l`JS=V!WT3zgV*o&V8C1F&uz?T%#4ha|1M*}gq
z!?NmvDjAP13H8c>;~VZt9l3{t_*$CJq>04QTv=~DjE8bOn=;?O02VD?%Uumxl`<rw
z;B2g9Ll3#d2X2cG5uJhK0i36qL)rlw&xFK!4E5JwJYqY0hF~1nik7n%{X~LMwDYIe
zfj6E!i?-t5vA6bK9=<XgAASrp-&?n{2K2J)92MhIu^+Vi%krHSZzA*#0w>~Os|iz=
zh{fank=_3kj;+H9+<`-RrfekPyiR+RNe>)zc;s3;HZSW?hr{p|6d$8ITdV*2hW;n;
zKIucu0#o{{jUF}5yH=?*nt>R%+Fi~i5~NHC8#6Ezt}vigVkjF#trCl*Xq;^s{}Dm4
z(N-`RrUYpdToDGuti5Ih+P0)>#1@pYt>+9alfS<k&+^6f7WAn#lFJBMQ9o+`=bllw
z<HIq(+jaxv$-k>eHVCNL&9>YJwmQ5JF>JZu*;slxu%+LpH_}aCyBRvaOWd!;=xYng
zm4ClYTMy6we(ePr04tV7lvMj5{_`Yaw|M85ZwcHZrxM_QL?U8@$*;fpM&`r-e~58J
zd7qJe+rtBf5rOo{%K7fF9b*B}Y+`Yy9y7vQUPKv>5RDw!e#2Wmh7f6Y+;Rw_k;47h
zpf#3ymoN78mkrs7XE&Oo43gV&&%GfHhnejq{HYVYp}jsF*-K&3^{HPlU;q!@Bm?-q
z+R8=!^Sui9{5O>w{Ne?Nmns^0$t4nP(4NkwQw(~O@?v}V(w`yzvETgUcb5OsFYE+x
zG@`rGuU}+M<5sscxP5oa=hU@-7o?UftuWq7HD<+Ckcf>GT)^;7ER}r&27!cb`c!sn
zIWoP}Ft<jjO#J}_18pzGFQ~+}l7c%MUt}<@io>x*WvO+C7v<;^Eh^H&Kw7wyN$mi|
z$Qwl&39k<&vlD6wj?qUxu!6S~Um?urI7XYf_HhtwJ(nh=w)ceQGYRC;it4o4NE~>8
z@b&Jj94@96vS+WPvduWg!P5ct(S3c#!ddaIk7&hQpX^V{)d&&hiY0mkGs}}TGfM+}
zB*G-3QsC*d3APl57M*L4qDT~*-ei)Xx1FR7tyMq1|3FbF;IG0HX|z8BRuzKh5pXLw
zDtSXp$0zm6w<r@qJWW{+n@ZV5um@v37-M}^5LZ75)k;<-x3%Hd(fO5@3ss;TNOR+*
zUmYYd6N>1pnBmVV2Hr{W3Tx3xj5|?O8y}}D_M!-3TDA4z8@n|0_&gm=(-w%fn9{d0
z*FhP8;9UfYN1wNRW6V7m&)&Izx0wA6SlqM#y}*n}d?nMX6CmES2uPZV{WvZSu86&g
zd&I~8jwJ6-NhMb(;g2g;9wMs+Pd!6io&lYUSP2sxeKu9;;i(Z8FuS{qXOI!aPi3y-
z6+u|B|A7sI^>F_R_(#JF23>U3u!z#rD8}QopyMm|OgMRq)rYEjg&aQr5<9<MioV7n
z*WMJXBFyX864ndYmKbSDiP}J3{{4UbKNQ3qMXxZWx5u@)V^4Oq-b1?vETib`TY*`{
zTz4z2SxdZlNrv@#H6KToQq|^T36rB|(4V*MoHv00Wy43pq=yz;w$}U8BqEN1TTJ~*
zIgFn*ekLriA#H7XT*F7LhRUB)O3?2UbYGJ6e9&1acwIz=k2H&nHtJ61XGy(lI?uiA
z#lj$GrV@C}Qby8STUd93Z3z}-<3baM(w|1LB%z3ujc?s;8#kn(4}~R0+(}!{#uOvB
zSahRYX4g*7R~<EkxhvC*X3V|$ytvx3I=2)pEVIJOqJ@wd&&>HE%HG%Bgco(fjTXKZ
zDy#U=)Pf;ncwekE%pZf@-5n2CH58O0dM*m9^kFx;&19<GlfK3PUh`QzZbI#zo5SeI
z2g#!kYR^8f;!H=EZo+xG&KYsNhh<qZBIqIp^As)zikg><Q_UyQv@zsImlK?<wqF8f
zvRlGgS5D&X^Eefv42UTpjY~#pNhd_?arY<J-8gkvw;!#(mNsZ8`wJ=llrAk&O#E=c
z!I@%WS9lO81XS`Ars`W%6P($Gzbr|nAV(QX3=6f10V-=2GT@nI1w9ysivz`i-I6t_
z^?NQcpHaX0P_5s%CjCCP_*jV-(|RnmSY9%ry0c7qO{lO$6o0YKKPwg&5dX#E?S2q#
zn#hGxRswr7k%HcZRAELT&gx>4gvw_Usv#C?*9k#itb8_^?cq7%vV5F8^M{vOaT@>t
zF{jmJ3j}~KLp}>DnY=#iWqa-v>L9Pcz2U*d!T@9aAY>(C7>;&%fEbssf>sRox8g|P
zoD-3J_>xYlM+ua|e}b~8pTz27N{hj2tOfY=4pwvxGvdUipOfrkB%;<*ZQ;SaL6Cp=
zPISogyP-r%B_&hb2)nCsS8lGx$~wGM8)nTPB^<XuW+Jdl<S=0U|HZT;Nt5-JBl891
zXYa{XiJvs>7V>KSla(6Yqx@aQk%RyYu~}w&O>dLC6O32AbzU3+>&(FD7KO%Rprl$U
zu<CF`&5-LzqX7dTh05ko;G>@Cx8E2X8^1?qI*)us>???u)uA%vbV(4Eu-z^n*xDDj
zx7$+x{cEaR|NYyoEEhe=u^p6uaDAFz$EUx_K5d`=Y&{iSD|qx}V+2i_iGa$n6`mP^
z`iTTxqo^;OwD>+yRV@vA>`}#XQE+3y20^=0Q|z?3%qOUV&}wnIWT(W%%{nS)=JPq@
zhP_w2!7|WM7x~tr*80}Yj^;ulE5vg66wy%px{St3r3Ne4kb9TC@{<NrM0DC|y{n19
zjvL5hQmjN!l_Hu6g(M|K1GSMABTX}y{%B!R^*%5F&(KAM>A2A%M$L~#lgSGLIWd6@
z+sg4RQZq+hs~WeSj<k8`and1G{lFGYd}0SBDN5XINDY907SSyA-ujwzxz<<3er6{(
zbtR5(5dl4H>H5R^HJ=&lxdLCK&mzg!GW>=7jJdZV?1_C<xX2vqcjSSZa%oJclk&8U
z)sibJ*I`N#t~;g-;7o;cq`DmYSk9fD;nh^tGIwX_9+%|AjZ<MppC87HCDQ%n&_}1?
zJ3^v8T}Tl*iqWKIg^@i?lPlPiM&Z!F>8Iv>@`=hZqqr8ioD2wVk~}14!oq5L^3s2s
zS+n_KNrUNR{5LUml5Hf7-!@w)T<tcs+(pY>ZMn;q<1jY&$`q!@k%g@FWNP-G9%lV)
z|FFORNEsBfGD|71*Nu`BkfRq>uj65#WcTr`5NKxGGqh>UimOSaWyltyYOT5KBCH8o
zO<M3vs2L@8L(_bYbYve{=id(pu8ZXitqg*|JdiQO`CCi4!9ME}HN7_Ct{#st3@AlH
zBPg=Ze7+*>biqpf_hn|q`B+g~>p05(Nh_A(xB;=ckld<>i&y!zqsUi2JP#|TZXbEw
zDc0a8!#y}zzL$iUa-j|}B(=^Gyyl@>wFR#lax-D<v%SO2O$h?Em&IIDKGt(weW^xt
zOUouQ5Lf}N-R%9LJhg0#IK@qk0RFrDK<Jq0DUwNa3WN{K(qfRXU@Y)%&wRpoQpJ@k
zqLW1ROY{Kg_)HHXH5l08DfW;`McPvjD31mVxj_|*XlDFylGzF#oUou0&@d_{%beBV
z%86qCvq$(D4N&s=d5+NysFBj4keE6RbNzq{xl(Q{J32b>*8`nUOAYDL5>@D*v|42z
zSyzw3I2sRA5sDNM<Q4hoU3dnmb9xHasGuju$1i;gaj$s89S9aimR7GuFg5&xcteT?
zmbdt3z!8>Uav%2?^5cBxY-1lU^6K(*Jo~hLz4UL#Em0s8^@%|%jS^wN6*rZk;}wZS
zUQ8S;{`{us`#ywBSWlP+ivV<|oeK;%j+T7prirLUd`U&13&t@~$8`$kd9l1^Hm$^_
zxxO%+--!<lb0Nz%%r?`lkCQJ~imt?bcXF<soj36rBZULL^;6}90-+`qEyO$#osgQR
zDO*XuEB16r8f1UC#F5vIM-ZGJQT)Aik}~OS-4u?Cx^JjuOSUO3&I;fGv!0{G(e2$C
zvBr}$J422h+u57XtJ_sr3{8QPu{>jckzWz~>?5#lKfzxj#_Yw%`em?SC!U+&{zo}m
zvTg8;4tU%V5C+_K`eT0nF7IT|_l}P`mOtlM>$5){A9p0S>id271`+kzKDIpg+}1Yg
zOerj)oY#j8I)8Z>Rs8aqK9%2)PMP6>B7t74R#q+~@6w0V>ONV@X4iyBY)C#9Qk2}-
z$Ef(k2jy^M2Q|N6a{OY8uqZ;8CAN-+J7{_AJivA+M}Eb94YJ`zv1-)7`C^w5oGp2i
zzQb<!FRry5f@3emVj1`l?OavpGg3x+QEjwB=K(t@I(s-x+qMTfy01DkEEb~}I~Y~O
zY+Vwqtje_5D{W)=ZpV&qGOkd;i6&VFrbOH<vW4i(yfjAXXFE*JBNB+tP0$l$W;D8X
zXXju#Uxs;ePcO>`_RG28L!OgL7Q5I;LLNI0L=C&uKJJ+W4Sb^ULJJrk$BoIIdUbFK
zmfYESh*D+M&Q32o;A8euE+W3~s&V?$YsM0vy@U29K5wviJwYNA2)8B5krdiph6oTT
zCXJ52JgglTK=V(+86-x3=-A%4hS1M<`a?qa9H?}X{fxj$R90F;@Ci^oKd=2Ezg#=R
zK7uNd5BdE85MiED(N89FTfDmLoSO%T$x}jz4m&UeqL7p0{+YC9<pV;C-vcx<X;OA9
z_6vDMlrYHsAPp(~`o><qI6`Z$>^#=J5bOjtq4K&coPYb#!P5gm`Mg|P+>mL<2Ichv
zBpiLV>9sof#`$=12LBuctk*P8LG=B^gefq$fi+NTFZw|WwrF8T`<Eb0sQV-|Y^kD>
zuoYuYy-W%hSelL3;1i@pds_sQZ1`Q_KIF6|eig`X{J25IcvAva5ysI7aB_p)S$BOW
z3LF>DnmgdBR{=Dw0JMa=^xkPT7rLePExm|c30_x2K(LANl(Mt4C$=Cji#ZlW*BnX!
zfUbyvX{G6D!outew1LK;AmmIy{&;|?IclrkvN&D$;|wTv2kru~7R#E7%V7OEI1ldk
zG=C^}U3Wa9m<UVNu<L6r;tj28o41iDJ3)#*jf$&rb!l^;6pAh1?xDcv3r(LPu04~+
zc6I_wWmyu(BvHfDj)3RZHR;4zGW$X}+|{z+6yX&UaA)VKpr7%{NW7JnJgJ1?#MDBX
z(!im!d?g&;)>?u2i|E~w7&ugg1kX@?qP^@HQbsGSfh61n8MP?WQ&=dNC`D{YK1@_!
zHO6$pbY42%wG4W6Y$R5{pchKaCrf)k=33*l7@gldIq>cWvsBnrVV*bxjNjJNGYJyF
z0D-Wmh?5wRx2MxDi7NxUVkLFrr$C5eAcakpQ(|bPC@q(d;6u!9@#X;nM4QYG;O`lg
zh;Yre|3KWwBTJ`zEa4Ev@~qc39^$Alr!7xRDQbQj0xSf<=WiggC=v;Z2PNuKX2>-n
z&T+0F8DTQD;K|ak_;MLdBWIGAd|_!kCJ8{W+HeYlS!u!x?kEu8PcqV9c7Kxf_~m5x
zCu^1H+P}P&2v}IY<ymA2sNg0a2iLwpLbn*ThZ-${(NnX+AFzqxU%%2rNkfpYqDiJf
z<B_Xq#uk{dZ9|KfSCZ}lkIbjm?cT`7IY%8U*fANM0jfaFKCPB!gjEz;WC|Oh1~dI%
zoW45HUG|)3em;u6oQG_%^m&eO_q-oW;r$)FPg;q)9xQH*uu9$-W@>|F)0m!JH(R^*
zja8r8d4GDXS=a2~DiMb@d?#%{mdqY@dIckv_>5mXj@XJB?D(OFZ4A3Gh0&otL}-aU
zTU;gOROHp1#!4x{=E2P7R2y_(#yrC$Z7-Kf+w!E@9pr~M^4S+$Gu9(zN20#%>|o<N
z+OqGBBpg@HAG7@qqxsgx!UVc*J<_j|;)q;e<Vn}6G_%{hUtksBe#x%}{%^l`+z+qx
z6K2v(2W&$MGWuO7`^WW6O~QFp6Hj6tw}%k$yb{k%Se#bW+LNpApui_roJ?IM7p8w*
zrticF^!R;omVRljc7SlPU7I`jm+RB#rj2eDwn%jBp#pD;Ly2>^a;rA<c%0H3m3IuB
z(}0WdTevs>EFqDyjWPchhT=igjOf3d?fiX7trR~5mP2QL0O3ZT*V1PEN<N33SU-r8
zdqCG7gh3!NogY1$XrqD~>i%TWTMl`=9KcyH3|4}05O^R2D>%#(Kr*&<1B{nVr}Spg
zSD0rMo4@(MGC29<RECK`IIaR*nu(C?_N9R=Igtkt!&MWrZDeQ%h?0>(Q?N*$BxBkW
ztA_F=)miNc!QvUNbK>-^5A)ycQsC6vo8DDM;+Wtw^S{WHdSm+Zl>SmJLOPx1)oyyi
z)DDc!xn)wgE;pF(%}*hk7fom2vl^gr5<e;y!LJ770x<HYHb?1G(6Cl!x)Gr+;31@J
zWH({s-tH}oN9;}sUU44Ov3F@_gYyBB8|uFB$52GYrqAyBXL>ev70u!%tuq|o&Q3DI
zot>~lyoSb<<!;i=G}1R7VwzUNI684l$KpDVx5&A2^HSX5H>CsWQPy-1B>;GkS+*96
zg5wWj!|?;d?QH?p<Lzv|sxF89;oRv2!?t&|oqRuDK3Sb+dva1)W9z9Q_Xoy^5_5B`
z&1-1R%4`1W{bQbnBb>9#5>XFK_;72mn#HpV>5lpeUymf`c7PtA6Pd6^JslaI(#QH~
zkDz}V6Leovp;>|T2(%Q>7A0VGZ9-?M+7(7Vj0E#3KEa{Wobu_IEz>N%nk&psh+UE3
zLt%{WQ>=mD==mI`ik{#Z`jdO3OaNE$D3S{hNsMXW2K4@fL|R~X*C&CW+#p75c%@@5
zyHYV;VLY_TIBpt+w0hV1bi(HMB2mL+u>YyTM*cUHGrU>+a2M%;sDFC=K6<l#^9&7D
zn6)$&r!g&7I^{xJ_P9zfyQcl<Po-0Qga;d21x<s0NgPb6nCs@)3qpa?*ab}Hvr1!Z
zmtAg&ot;Mh<aS!{BX3(#55>))$tA=B1-s$v!#3+N_|3piNVGM*A4|j{iTO)?-61;C
zj;0g6BfRgkf%>%*Us98u%%jUEJXsA4zUFgX+0hh?o}!~Hy*&`aa7@X~Yzad#H`O@<
zE3P%b%8#p)P4jmu2~FvW4PoW;)#+q>M)QnEy71Oe;BL?!8S_XQhz^BbqGQ#B4je{K
z!j!<Gp+d`v_I{dImn|njPO|QkY%6(i*FN<1@ryqmJpXnp`|qvH+i_tk^i@T>hQ!R=
zcCqGv?brBQ*4srr$Ns$kbyRfh+kodGfM*{24LTR0<fURkhZuIz$QTdu*Yq7VNBl!O
z_<Mft8=ZmBU4{!QgOysLajg-LorN&gxm#ey@JP>17Zs^}X|XE7C!*ot!#B?c{OT}E
z<8_7E_OehK*G%ANRLkm?>;Tyo=YhG$&kIz}IC=lEu3)5~ew-&*&g+v9=d&K+H8`7$
z5!cao>{<R)Se6qB6uRM!IUfjbsg8Q`$_bS>ytZ(+<4<MscQzTHE^^lF5S+qgYGdG$
zjE(IEsaA&(Q~Ru{iz57tmp+hEGZFw%6>nu9a$Yy2*Fw&jFoLC}bzZrRc`e33j)xt*
zqtakUv#t}nc2)OUEQ<H#JEC)l-xsx>PSxGxxsn%0VMA93gk#VuTQkNoHcT^uP;KPe
z%b@I?!~*2nsyxI((8`1Li#U_WnH1eL;9NW(Voy|m(+^3um{RPgd7c`HA3mrJ-=JP#
zLF<0oW96o~J8^T#JX#cR7W=komjuh7Tnk^*=G>#LHRz|2CXsT%eJ>(^JD?m_G2%+d
zYEUqB#LXc*)!%Sy8I1=(Cf743d7eo&fF6rd7n((MBQL(_VAHq^i`7LNp+=>xcL*jg
z&k?}oPfpms75_W*fi<ZGL(;MWSYT{+wz!@zLv(%=zUt3p4-t)?!esis93!PAe`k4-
z7OMV0ZB?#E;nNY{-c9GRHhXd6Vgo}qSg_a4OVLWMN1v}Ur`k%s8hrK`MVHH<?ixwQ
z5=}$)K|X6i((9-fYot<xuAN&sNrplhYaAvh8=;5FwNFF~jzth1QMY8Ou4Up!n$fNj
z#Op&f`&A{gdF9@@7IG6IzIDW<i)a)g37v<GwYANGY!boJw~CAb0aG~e8V;g+sI_XG
zzaCkIoB%DUf{~GDw1jo^E}TYStFXPLmgMuY+-mCs)usnJGNWzbHST|~-(7R|?d`ka
z;k)hMwW<xbtexNegByD8YnVk9_pG=T4t^Z>8fK+TOaA`Y^m@rTp~(#z_jN?Q9vMIj
zAM!9^@TyRwNcP;=xdH6>io9r%XII$YzH5vLzD@V;=&_J{9L_GDXlwn4<mhgV#$c~g
ziQ+KYCPaQzLI7yg^0NB%B)3z5qcrED<%P~Pu$r&nx#9d`*N3P5bwUdOwTg>UM1U4y
zC<G(bfN<X%0A}!kXmfMl(uQ6;Ey}Yx8XHiVCDUUK&72@>R%Y~rQ_4r<JXcxFmZk!E
zz(3{i8nSuN#1vbt#>+|MM(}ttj<;|;YFsX&D)&mgQZ2J18KRm`=ua+z9MHl`;qcKe
zTO#wap2uVrZEFXl(<qxRi+1_jLDWbPmt&gr?{>rSkjYHi3|!FwVoX~?zwCo*=&VmP
z#c1KTsoP7T<wBH;r8`}!zxKomB2*s*tQ>34A~jn&@K{h%#%E5<bvtk*2Uyj}x_vEF
z4ej;vnMysilb%)zUqC2~NwIoX#A+f=JWUN9FN~p`cOZ9a)7&SED2aW^Yz5lp?8`o!
z;?!KG;&E(DK0b+Thquh}fhGcwARbyycRsz=xf9d%Vekt2QA8mDoZZQ_>_KIbX0~yS
zso^Hu(^qLcTlMn^faK)TP$DAJA&xD!jZY2%>b06pU|(PRX07q_zEn6$TVHF~odKoQ
zfn22SY~KXUSkW@zm^f85f)OxPC^rNa(96Pcr<UL|$`I8Ohkb@RF^(99WT?{N^GM<e
zJs2-jJPn!{&kPF87Qq;66<If(%0L<&*yts^lwB%N6ouBURz{NfI?o*Ooqw}s%11t*
zr^*LCi}V|Ap)}(+TeDIEEVjPg!!6dm`nsQgOHCie^s2OwJsXfze<5A3N4RB+oz3YB
znsCzbB}!e7mC-P3m_`CAlqpvitC_}gju2ezvz=KB8sCe-KS1dblk*y65E;aY@pSx7
zq6!7;4q|vKq&$Rg_}s9u-$%NO#ADY*Bvk7pJSWae)(5)nCQY>=oSdrqNKMB`G_cV~
z<T0c8^J#jTwUpFqb6{kQ00uug-RjePROnQaCoBb+q5{~{vXUc0wwm81ve%+*63Dsr
z>k}-LeFPCtj>-6A3h_?8tKxLtj+n9QLPcYw+vTuFNu6*nmZygeo;6al^DBC9L+G{X
zW0Gl}^KlxWiYn|`KQr4%&8<|C8UDtf4!fb0NM(?{lYGpBGd@dM9$GR-yOzL&erv_Z
z<;YE4-~Cf876xwYt6IZ+I|i1Tx&3l`Rab(1C#_x`O6Q7$<{_Xaa0psWE1pZ@Ydc+C
zT;x*i&U?$?KbJUvH=HvKd)dK%LkkkMz--4_yENB0Vqk4$w<px{IlUh6oz{tQnzzY1
zF>zYQaxU9<MPzQrr7OmxLL;+MVhIGa;B82$YN;1axrkz+*G4J;g1x|Dqf6lk^UHW9
zJoq#KDA<oq(Adx2)}y35UNT7uK7&h5r=wMD0-iD4f)`{<%As!EfAH|LEuJMWEG95~
zdS|CbR+T0nDI<5Yuz|D^8iM}>pfL5u5ZVuw2hPQ7+mq<ZGu=#=pb<t+T0OW>{ydNy
zj7Lj}YmBRg2%v+fZ9A9*(_tdjxFtk{p(psRI5QW<x5aT8EnDsvPKP4O410rE<Ij?%
zI=6_+_KjpQ4jR6GH|(bi0dE~!RwdoAQm>ipOkJX<Mhvlh=!>Tz5dp_*8k8DL?UHK}
z<VTw+dSnG(!&hQiDQI{TN=Ix)>Y+CI&Ba!M`e(HwMQF1uJlIfK0KG~FA|*XgnFkee
z?e3I?3l<$hf|&8_Y&>_G92cIz80V>(B&sYU=pQ{3ru}T0MiH_rwMyz0R!bB0)~a!4
z|Ng)HKeMzYq>bz=Y|awF#D$Zl&*0{o7NfCLq_+Soa4}GrjzS6-Z^|J?fcG)I_fqmi
z9EchKG@q;-U5v$bK{+Oyj?I%8C99Uqh>S5MWbsdn<yGM}m7k97;Uk+gjPVChQU8y{
zwfrUSS3C@1U}xuXKAv>XCS_$6;enyP>$<0qThYYo7YM5{TL9=qad>1FrFsrpR}2<r
zC%J)mw1sLskyMLw4OU^^bB!BVY)<ZEoc(e!mu}m~Yc*uVZs<9N75yF~Vkd1NKvcsv
z{vMay`amG-jmv&JGT;C4hwS|W-=>rXa-G^w;!`YVf;!eQr9S3=lMaY*??oosaBDTG
zDT?ctrgVr<m=go2AE6*_P_3|8^>Qy8_`{oHx<*-swU%Mb4n?+eAQM+4#y`CI<B_K<
zh6weYm^7Jmf$ucy|K;jkrG*kHgv-cQmB7BbGiN-?6|0_yR(C?ke%F^Oe9eiTD>>Ly
zz!n<uK4HNIIeO>B*rTJTNEaQSU)Q3O9W$qdbo}%vJ99h&%nM)U!|Dq5K1S(f*kBA6
zH|Up<AdFAzRuNI$Sh`0`2Sne21p5LkBh2fr25BIVg9YUY7&Xe)&db_qCu`weKCs<u
z)ZRUnleeZ43kQgkAa{12$+gIXBJJX&7pt0E^@gg$LZ1**7gZ7QmhHwSjd$$qw1aic
zJ8W4#42rPpwM7ymMkMq6Wy3~gJLzu4Cat|3HYp=ddebp%TIKnYuIysgT~!v;SM|kv
zfcmAqta)?FcJ@89U1`uUnuFvRZfw@sc54P-*5RX$8R_vSJ&jVDB)98E)Qju{iQx31
z9<m`PXg+pLE);G04u?a04m_ll6_(fCbN^7g9oE{BFhIH8wi$l!wD11#i2o~Dn!_|3
zWu}rK35<a)VTEZZjQD%yq&Ngo2z^Q?&VmgtS-+mv^^g_1X?S#fSW>>6c_MnSh_^6@
zWWs{G*J(=cEu&*!9+4y2(KO48WK7r-hs;`-+{uUg76@trsJ2FeLY8aZkJhGt<2pqE
zVrG7E%OLTroj5hvD%I*S6EKUqidjVV?G<g7vIH~U`@g?_buf5*@aW*x-toaBiHsOL
zK74vGRDZW&`&p&gXErJ%lr3^cuNsOIj6o9QSE68I=(U(0m24oQDB-K_;Mas#R5J5l
z(9=u^4cmIjQwD-$a5$`sT{MnnNtmS`nn~7xO7uy=nMPNn1R&ltXWJHs=#CUCt(&fk
zPLHJHz%S157z+pC-tCK*Uw#C-;8lrJlP>JNK7R7z)#34<2Txuc9S_s<%z%Yp9rScr
zI{6~dWjTYA3+f#HE`Z=ugT=4Hol<Tym8+4QPM(9VPMxR?1eZ+fYh>Gde>`g6hW=%I
z`Maut?(t0+DkJ8!_E3bZf)#O_;DaRGF#W=kW_l?#!+5Nkc{#dU)uF#67<N`Jd0-Ob
zQ9W&#HtTL?-PM3vq{lE-hYFH`0!ZXqG@EBmI*03P`{0kjTlnKaC$99TCFY1=KT^w?
zTU@_KPy!WI_Bye1I$s+)(N5e*wEH(sUr-0eOFMzz9C`b)6o*@QS$+GvVwtyZl$v=C
zuQw5$#c4SgeXpzPTz}*7s|b0oiVIPA;*GfUWdbkg5|F*Os=7!8?%p4Yd??mxMmvxP
z^;sT}>?`-TYEq*@=A!ZFSSQee=h87WUiu*H0s{6zBj@(v-ZKi<oo4Q%$&HG1M^kLA
zJ5l|1WxQfX9nYH9t&=hdvu*WtK0G>rlo^b_bLQyOog`kYr(9f!u*tpq6ty;vmLj<Q
z1LOp}v_bYWU>nrsWvTHHN2H~ATdh|f3`lJ$2BdDqdcD+0o5|vx6zr{hn-Svtc##@J
zB_THt!A48~S3s!0<vBHQJDL>5)U}Mmg~bs^sl{!1!+3g`SC!)tqki;hu@6ZBv{q}+
zF^>3>plB@W0}Ot2!!?)M(kk+wPx1?`O6*8UKk6vn&mwekOBT9xE0ihp4*8jUc)_ZK
z3L)l=!1%}w0RR-PoSt^=mfER0g2QQW&cq+5!H-s4nhcndgJa6(7o>P}^n`&nkj@Z}
z)5%^QJWJH6j^gt1O*u~6wd^JpgbF&l@`Zt+366ujIJcRRaj9e&JBS^%)6~w&0Xhk=
zF9D8OR(k3OU;t@!xh#bzZ@W+6U%SWM10X>6f*XY7>;oRD5@VCu1ljM7pyUcMDxQl5
zjDS9@nRW<z6X5-Fp+}tWDS^Sfbjay|fyN?RpuEk((~I&7%kXV>znMrh*V&V>&@L#I
z_Fgr33iQ+qDI%_qz=<FP{Q6M2i~&O4V$1IA97dZK7Pc2N*^A3guwe&blnWk564%`&
zlFO>D1EcE2h1C_whQER7!actGHKUq`*}}^7^|C#QLH1Dwk-TmW8tGH?F@*SZS&OQQ
zI$R}T3nKga+KCCwk(Oi!zezYL;uVI!K}UxwgYb-ymC%jVAvQH-`Niqj2^EX$HN3nq
z;Ap6dhQ}yX06fG2Zgdi1#uN|#yjGfp2dff{&%V=TP?|uDknuN57&9EwnDZq_(mOjI
zOHrDEno*?&dRA^2=JWBu@eoTAF3w$xmjb9U^hg~L;Cwye$j&7}Qk5V%*N6xGuF^d~
zA?5Hqpv4ILfk-A4Y&xrdz_%6w@+(3@lK+`)uV$jDjeMj}Tb&oRnNTlL@;w4+Ur<2v
z*xCAFuG4VvHD4Y;o^WJN56mb)<|Tcx8UWM$o#>5D%o5Biip`ERMq{V9uWGgsvvxDt
z%j~0+ku~;Oz`doog`Zd1A#}luXWP3c)Vc0s5F!_Q5~-kat$(g5u($q(75*BAXr>`+
zJt)C^I84Dey%weLgC`&-q#;njn;ormrJ?23%6VM*nmFEXeok&|++X8Dr&85cBkN+A
z8rS=+f7Kx&v|wwO$TRB`a$`z^PGGnj`^H~2^nD>GZ6GIdjjCA+u4Se&Cc2gi!ny}+
z52ZkTzDKXV(#_G`^|g-UoavaPbFCrdPD`y=Ua;D<AYBopFuYI&@hrxYh{GjRP7A|`
z-Y{4c1;UJrvUOoi9Ys9IEo|YWw$~8VW`zfKi`h!}hJ}*a7a+0i>bdc?y)w{~E;$=D
zbVRc7$)F(iqSjCxt{yuxujLT5u3IpM>iv!Y?p7%r%TXYW07s{OqqWBkRVNNEVQm?f
z2VwaRVy>hK&>;sXhBYVipBCV*<7(>nRdn*;+~mH)1{?kc+UPI_57m>`asl-m=6RzJ
z*UnNjJ$X;?zO&V$(p0SwC$EBFzF2@1>HH}uMq1R*HV~s($iq$OgO157_wU`i*Cj%k
z;MUNZhBn&ud~dxG=@AkoaI(eTYxFd?+x@Lhwtn@&)?1BZW6+OOYLM!0VR+#rK!|=6
zkxBXyoFM_l`XLItk;vW+kvGU8iwH}TZFFnq5&4B}a}~$PtK0(Aa`<-M!-p>+o^+JQ
ztaA9TzFR|zA9r0djN>e=99(+hFp40p1ce~K(>QI+;^?%;VasqfIJ9Ik_*Uawgy?Ar
zW1+w;Jk5vjZwi%X=!qnV?Z%k^AB_Fyi{F>>(nYB+d>?(O;rZ|K>T)e>vbrI0@;AoQ
zC3SM^H{b0Y9SjbiA0NDWzV~$S`qfiSMZ|+|UcCC_(aXL4gK*{&VKC|kTgkGYv%mZ`
z>n^e$xsgsn>BQEf%VILoiNNm)zgxd~!hFvv`zHHusFs>`cFSGfvi=^--tYQ8w|;3I
z&X6Y71x|+|FLtdl-)i^uV(f;7S2qq%+r7mQHJWIZEN8rsS$J5UHPj_+39Jk0HB1L9
z;vkwXgFBZRhM~bKlm}?{vMimZeYi|i9+U5Vp5DvDXgjVm^B6<6e%42)*Q`-sh-3=Q
z7cA)nWhTd%G3iHRCn6iXVFY1VNzGUU`Cj`N7pg?`pLpaqh4E&x*2WTRQCgiqwSF=J
z{`=_tT5Aaynpn-|PG%+x)*AL6Ecq(bT0ul|D8HyS^C};Y>}j9O$Yj@dSZO4|lu=N{
zI4)dfjR};3rO*1(1}P47C?;kVgQLJp0s1D2{(N2+Rw;r%8DkZ$gR*88Fs+~!73|bU
zeVU{r9aI!ZFsq|72$%ABT)r-DM#^lhUzhHmOFkY!-`Jt|O$(JQLWgsvL9$xTN=KtO
zjbo9upy6D)Es3z!QGpkIM#rLFpJ)khlh+DNDydedC@i3{kM6jH6-+AzGA+rGoK)@@
zdGQE=2u2T<!V`DWpwL%NW^kLRVA1Ha!eTNZ4Kh4K0|;0wOxMgZ8Db#^>k(ytGF+QR
zhC(s;!-OKz*#D4(tqaF^vN<>MnI6AzMO{f!1j1|zin=mdc8o<8bGP%xx#G?MUBwJ*
zh*yczL*Lgv$Q&+Np$qesF0V?vF7=F1pFFAP^VD@DN35tJ_rYSvEuh)#^bokIvkDIZ
z+S*b9W{7_~BcyF#*FzU9enggdT*(I(SvO?2xx1%s#YAROkD0%tHO9mx@Z1T`Nc#{q
z16`ICji|!wm1>9-i-H8yc`K*jv}*#JueoKxWs0}WI?xPMQ!)!;IgMAACv&ZgHXn5r
zvzt!fDt}ja)J66PI|l6j2jf1`v{H#9gCsa_91uTV=$mnx&<ufktEHAiu%eHaB}i*9
zr~qJ5?w_M4d%f_fC=xydyidVlJztdcumq9YM|c}Ys6q`_rknGr57%!-@VmEL2}&%6
zC;pANcE{F}gS|&vVW*=D$8nuXeE`(IaKr<F9-5HYCw<otwCctcg1$rlD>n(FjzX)(
zfsausUw>$p6UVPUHT&FNj@r>bEO3%(NQ_U1KMTjZ#+ORA!~H?HJ<vOG8dqG(IbSYw
zp!I+ZPO7v%!pEkE!Kusi5p_C?F8p}ROt%p8<unZr$1=qw4}evv;PbeiooPrV`=nOl
zcz_ST9LQB0++aK#c#mMMUV*}DkBocIU@meW>jXGjraH2aoL2MJF!QsVY^Fnx!^FBE
zRdOyw1VBW0FRYJlw<u~jF1)T4$Z6@<DuYwEj~!DuumrI8QA1RFWn~`R^LOS&T`l|k
zUiR!eUI!_dhjF=@hkhBdJa{~dR#uwbnnp&ZI^QmlnD?@i@VQT4j5{IRS|0D}<Lzww
z=wU}4rr%A<QxtDF;v`ezy>?_g73}6c$JLc|^krWqZyW#vuhuJ%h={+lbEHw&-|Ef^
z&7^got6~{qVa8K97c78VfqbHQt5D)|6g@+adfHFJ$FCGnILJU!I!qppwoPO<5_5>t
z7ZwW|NVV%kjt}0Upv4T8QX*)Z!Fcp-|7*D}R`LGO{O_i>d#Ga_1j*=8apsN)S_JE?
zh=>uq9fJ+Zff<I80whP72^ws2?ap1-hf0%IzScGd(z$Q-v%A^X>~;1vqd{WWpf@=F
z5q&!RTFw1x3DY_Cvgo3hJ;Mp^miNKG|BwIe!RMbxnGPLwBQlC?Hu7_xPv)2T%(a7@
z0RMQ$qe4*LfuDSscmD>|t-bF59sk_xeuaN}_@9A75O*aSDjtIGY!u@h_1$My`Y2Q7
zm{BtD8^-(1s=t6#D%Y>m@<;c`8n}w3`3%NYIpN|Y$LunqevJFnJq4IVan~5Kr!b>o
ze>t7^F|_`4wv<20x&CqKj%4`@1nS8Qsn6It@E<T1-4_fIKT7C%M<z6Ru7>q#_|QE^
zeX9|{&-gL2X@gYrT0~@@)Fy+HeOHRLGVYkt8#E#uV>xm`SZbNYrbAsaiAfiW<$ceU
zd)cFv1pWENlVBDmJ6RNal^Dt(D_Mkxm1&k7FO>u%M1g+x2S)@)YUCI6h<@Mij_EbI
z0sg1e%ChsS$B=lOyeOx&y~XK~q)!I0Z*^!I=!ps43H;kXW#u~om&<->w}03ACBR&X
zX)QLz+-dx>lSJur*lzFALd8u4z}m*|Z(VJ*VF@{xhw<OJbbI^mPg~`?E$PiKciW*S
zBz7g0Y&#*+s;x3xgf=wPM~4wh`lyX@M;qvd_uIjD3j@0EL$u1f(F$n;4U5H1w0Xt+
z?N44d@1gdr+YBAj*J<s3;y+fx+%`gQ@22Z-;|i3pTu3BGw>G+nR<J$0SA|p$<rA`F
z*C^*sc%R5df_bGM5MqlSlSaaWBCY9n_#o_VHZj>FgE@-!sXtX^*Lrkgig8L7>RkSf
zKUK{uf{=leUa$9dn9;*@Dd?M>z<F{?oG?iVOmTQh3cTPcN@P;R=4UHa6MyUHY+u3R
zf`D`QNN|Ux3v_?H#gjkKLFEoy;>s}`Xvn+6wdZ@{jNxm~#V;f7Ep;r?f+$V=EHKdO
zciC-b2%*beh|eNK7tsS)y{>ein7w~nV;$}i0u>iZ2w~wo?yyN4L-*)6TdY|>Ov|_r
z^Rp=q1(JE?$(xs@Q@V2O3R)0vYpqC_lYMt~zLPvgf8c5{-jEf2W))&)Qk}b^7p8!z
z*)kCLeJz_ZDz9dYPl;}!gxJ{oa#Imo%C_cW+l|gBGw>p}Ssj^AU%i&e4!bt{{=2p*
zV3G^SvgR}vRO7#i`ta=0=c-hfgka4=a0a_Y(R*j-QBCyFnK%yOO6c7fd3&=_*J5|K
zY49M2Ys-kj`Kz+a#|bRPe*{ELPHL(!kxxE!hjvRVBz?6eaj@FU&dweyW!1-bc%Dd;
zqR2{ipUslEG_Q0K8+6!oNu8{qHMYVFTAwi(%y41p9#yt9Eta{IPQ$WwMCaG?&WOmB
zY%7teh4`39&Oaee9LW^<OkJ;nCj||6gU}R}sFG+w>j1wDsW&Clx~6S(uA<CAvNdQ`
zeqlxBS!UIaQ_c3b-YvC|UGH`~Zu^UST~Wuf<Kw3t3F>q_lXxOx{d1c_o`66)6IZW(
zO>>s5>!6JF<u?nfOsycDgre@y4ZPz&XTdKEhhYar>5dkLF&-Dj)!nHP6f9iObe=qZ
zLc&?T93-^_5}eJX!5S2gaYJ)c8HBlGgFjx=r=)DFo`hmh)f5ld|Bjz3LCI#up6Euw
zA%+xiATuE+#;WMPj7xdjaP7?9RP@{T*gA%M2LJ%E`pTtfsXY3Fdq^ykdC;dIKE~zK
zBk*HGM-$^Lbr8l)7~=}ze=sh;0M<xU2fnH3k$o0876SA{ybEGO*kfbl=sn4`Fx=YL
zJi?-uU<<AGG=o6<8g(V!Pf;&m?X>hLkGOpkpVHESLDvjlWEUGg$sk3h<%;y+b8{_b
zCF=U~GFn}23#q`?Ux;(@@*B=!I5{}ycnp^RT*D|>nX$7TeG?h!%*#-3eOprMhQ*Ig
z)Fey{bjf^?KpSZ}o*-?IjG!e72!O&F&}1H!1+(`|Uu?CaO%O0(km?Yf0@mZvBEKp;
z&dA9gU4i5SpFbF=V=y`#;Z2P6AlU_yR9{1(4Yp>hE7xf2vDy+wv@;qKJ(89?JL5oe
zUCgV1@uCquYi2GS%9USL6C=u^0+cTE`Lk<8d?xkG>Va1zgIr1lErhn*_*PL*{=xIP
zg^F;}*{yh5am>vp<-$BuhNByS{MI_4nj|Oj2LSxqF}oX`@IXfac#fR>9A!taIs|Pf
z)Oqb{2MU!e#<2hz4dCdZG=GZNc$u>!@5AwnG*Ws@>oRv$dPy0abSjFKmTe#26r(w}
zNLvLU^v25Il5xaX2SMPlN<$k(WY~qZBbIZfu-cR4nD!E&ax2AA(t@XM1;74vx0@Zm
zc=Tcy8JAFji(*z?mL7Yfwt68XgcKuWf<O~Z^3?#?_c7ZM7o8tmxBG4EFp@LK3#Lu7
z0B1@cfn@zj;&WS_nzL?bDGL495WyIK!2>c1ke=;(8f4V?xUFrqKSnc%PdxRmnoT+S
zdW<h4AF;~0W`6m5OqAv)N(_#e@t)Jo*Q}5m&51e<>-NNL>CGuh&_NvhZZ+!%+g?XI
zJ1S<S+<)Z$(yMYo3~=nFgqUkuof%K%%R22Z66<Mfd`xVp4S50H<{2nE)uWPA{BBiO
zO5;!(sY0|y`~M`H9D1fTH=z()?nz`*mdJ^5RC-0roe;476RdcYz75hz4bd$iiNK4%
z>J{fskLDpKmaPm?cdmh>^&O{$-GWP3+Y3``c0F@2TcwLn^Dtlex8s)VFOhg~x~~Iy
zdYX~L#LM5V#cWxeUCv5~`&PAdIi9-?&QR55Dd83%?TGfx%qXo<<`$%y$lOh;vnm`d
z%c!>0K-Q*qGZ>KNpR7*bsw4X?G~bd(UqLLr%4!2zi&4mq&)L#L=HzJN#NxNx{Zluj
zzTo*g(!#|q%W8=VxyViqP~^os&7*QBRUdbpTsoZ(@caU6G99&}imQIo86~1U`4{O&
ztHlzc^(@dx3iE?zHVm}gkilq+EJgwQg=mFBrc7aBuQfH4^8wFfoSiX-2DDr)W>Ffc
zX|1CXGyN)rt-bMy?uyEUXkY#2z+XgcTH6y^CKieMN`gx~Vl65;P!WlRX*degfPleH
z`m8LURmnkiOOM7%BF&9w9;?i4b;mJVCr6(U>2QA#qLP~<AX*>?hBIzz_=^FTw)ypr
zMCT}<ZGEo^jruO^7FrRWbYWWo8W6<s*RP%$u)4?GjX)hNLUG)4D>&@W`>X!fFqaP?
zwSB99>)^zbYFsmhY4i0Si5G`7>Q*hvPG+|Mm>CNy*=yMw>zYD=!{{je!J*v$8o%9F
zTbBZpGB1}N5kI6*C2L91ko^h~fP$<|QLx@Mn*!ics&`7`4%IRd;$6G*@oX0DqHLS%
z=BQVrRbxmF0g$qQsM@PBQW<wuzPMn4cyEZ{uC}gfz@+({?egKHI7cJQeiV?Z5nrbE
z56|ECzt-2k9SSK_#l_S@+Q{X-V_8*&cmw&w8rQuj;QfvqZ>^i^=ft0ev*-iQ4`3=A
zh@Y$e?$OZ!`~gKiy|D$Rbn&sY0iK$#XAI|w;%y^(^Xt>`qwStvcWvSUjl?JmNqZF}
zaU=p_+J)=HF{D&Lq7#65fW8Ew)WpDPnyfjw@D-i^;(^I85R7P)Dt4GCpjETbP#~(h
zgebSqY@te{*+is?>yt<3IAk`iW`3w1%m{0AxhQAl$}w~ltu@B%PX;F9MUT<g)*&dd
zj7<f2qx*4HKUKuAjpIae%rw85_OsR4Q??}3DeM>|JIYD2ehhP&TubVslek(^eM^p#
zMv~ro{rd1xpX1w-b3sOY6c6}V0{vk)Ce%KJmE<(_=n>lAot<bVoaC*8mM|hOrT7Y(
zNimd8Eia$;rn6<$G{C!6D?WfNdVjTGtg4lX64pnAz=IgI*(2KpyhL56xMP-Exmrdx
zYxi%9_NySJs(swApr(lVmM`-<E>T<|oXlf05VmH(SZ>I`tyv>`_|4J&tHYPagO_{9
zPh@vX*i3vqiK<DCrL`EbIEGuoy%-cVT=fN9_Pjs54UN5$&K*TW<|I6vRaQDzL+C@5
zj<^`~CUT1L<p_FyMgbnl{NEoO52?&Jj-jEhlKC!WRFiZ}bWzHrxw8kJU_PjrSu>Cs
zH@7B>EUKkCD_P2e9FSo8u*-b$84+oA;eN%7uU{SRms3Z4?pWDAU6%QFJwPGf%^v*H
zZnuXTVz)*vbSMykPJTyonZ0~*bd0LLmy~WyZg&53mJ3bp3%Co6V5I^AQ2FwQZmabj
zWPd!pvI^RfU_nfi$S_2sS$#FY=pyBomgwwcn*Vsich_s2emOAw)qw>jMp~_Ft*fnd
zU2Ckd*!8Wo%{t;CTqgi-42ndJg=g=Pgc@_W!{yy7VC|wzGFU5pZgrlHg&1ovl7>`h
zz9B0#mgExNv1PnR!{7zSIl{YKYWz50S^;Ft0x=OBC2qvua5Cql@aF(Dc3GVs-17yo
zWI5Xe*i2SV7{M3=g_BVXywWsA1>f7GJbRZR5`%TrG7-dV1WNTLK-H(Ew-#WO&<USG
zvETR%G*+z>1tg#}wb<(Nc~7I^?dyvc_n9Iyd28IblFDK{AsknDaPQub;moT_2JKY=
zwjz1c+~;CL4X&~i12B=nlTpVlz1_YePjqd%y13ki9R&hMKuVA2C%^3kxxPaL5T0ZK
zR`XJGu}-j1ZjB@4t@;6?h0%ML%jx7!-=nEAwa|$(ZMrt4Hlk&(DtZh?sP1dROA%8|
zJq{%zU6$TcyRRuB3I`J`CgjT&80;U33Lgz4P{2MRWFxf1({gle5yDs;nIhES<sHp)
zPwGQTj3TS|%IyGL-ivXusk*t{KAj727U5dLM;$$o8WzPxz8JCoN9oaxqj4m##1}}E
z62NopM3|8i=#^~y-=00~2yQuXc(`My-PK~Er;P^(<E*~+C7s<-yV2qVqEP;2MHZRC
zE?KKX!^%s_p+-!*Ui1|`CvO0Lh{wz0db9|y#tR;t(M{|sz)XSqvKMnn|2e&G`7}Sa
z2!$FNv=69*?HUazgOO0{Y^z@Jam#i0Da$xg%Ah&S$|DH^fMHLOzajNRFmqQ<4Is2s
zQsB|>h7z~giCetc3TZ!5C{mnWU(pCKP$b7VQ>4tyupT)wz2+KfR8gZmvqDhefDQ}5
z;Z#LjnHD=uvkJ+zwWq!888F5x7K5_1)$y`Lt8g*7{<WTZ+&?Er&yHVy>|t9?m-Du4
za0}z_Sf5x#q$Z&&ei6AbOnNN4;DMHZn~mgDrFd+L7mIINB~B`IR`a?D$RFx_@~(FG
zio!5jZDJEM>E-kZ4FVc`iSzlaoH%hogt(~S=V?B=(5mp-6mMDtlxy+fJ@#9`6lf>Y
z67U@^lUA3Hnv4gnRpWj;I78V>H%o)uX`r#&R7=c<_q)maZKk{KOQBHcw$e-34dt&I
zQi54Zv$e9%8*b>9vB(g;XjPSc7}z=T3qy4RQ<~#~NtTzrsT6eo+-zMRQTmyM5toJ{
zO_7P`t`piP)IV{;iz!R1sbWhzUVA;oSt?F%1czw-cNUb2AxN~UJ+_`H{3=^mMOtM?
z@o}8aq0ECEB8pKGcxK`i4kqBLz7CNkxKa+&bDDv!>an-OE2OwDL7)3h89KF=d{RtW
z;;2)4qYh+7(}3Qtg2dI>fG&h_FUt7>nR{Mps$%u|n8oLagCJ9|u1y)%^{iG>yIv`K
z*pd?4;`*kDqd;A2C96H=?bpV&zU_a#aO7FkYEKVS-uh@I9CEFMi-<3m<BLn-Ud*ad
z2&`HWZ9Vg(uOu7tVvzE@l%N+S6s&`!4qCQsXvOg&6vR38Ad{^;D(SO*ZY)OOmYi_F
zcsQZnlNWFHj$Xp}-Mjx*$~K2958irzi3fQQ5%UZkLd(OKL=;v^sA6N~9j8tTeen1b
zxC#aB_%~561x}+YaqD+~`sHqR!+-kllWa?6!7jX6yIEbl+e#m9CKMJAkts4%kFB0#
zt5^L|F)f?zAF$h>mdid+ElNcHO^`M_Gt7)=;Pqna$)Iok@1H#-pFB$44e`X)@IPv#
z5$hk{9~|GFMw~Ea6NdNx)2{pPRqFocYd7S<(ca^O0RULO_-t_SeE-FxgGU3%=HKcx
zCAb+3pp`=KkptHIbm6Ow>Y$4-+uG=8O;9_fYDKUKLzRcU=M*XP!J<sH%N<Uv^fh}A
zP~HnU>aJT*6;_6s&YBtR4k0zbGJJ~9D+G{1wtjnpShBY!b3;PMsl@wp$yLRiu89@j
zIW<Vw{<^=$)Vf$>1~Ug;nB9y(u@b0MdA+J*1)Jfg14eTVpn`~1qOGO&fPQR~e_r}9
zYqRb3*}Rh+EYDpotL~WF^Bn=em+Zl-1pp97YR%IIy<Gsk8=}#GKOWVZJ1yex^hHr!
zvYb85fReR&a=-JS^YCr<&9~W4TX<$`H`8kxx1fjdBF?09CovTYnz55?5}yr%wsy0p
zPRluQ3-Z>ILQv$9_d;rzlMgXW>Zn`*I_w#U<?%sv6g5%}0JAom5~STYZA#A3q@7Cj
zb|c8h%!&pEc<39XXAJ`&#7fGqcx|Aziuga)o8hNLqY2WC7L%8F1fKJ=G_6*ar2!7B
zHmiHHYd4?2TAR#c@8e!W;)=4%9M8<J*2wZmASEUOps7q%Bnt>7=jjwxK7|%`44EYr
zHB#%i-zz>Lb~Hk^LSp_fB$!AvQ6LZSW#82pIdI#Q0LbUCj37&YZJm}8JA*QRF=G~g
zz?zVT&qHcdwv8IofMWJ}_mQ8Z+SnrfE-C=FjSD<6LJpi}o6(!AIjt@2jogc>g|M)p
zB>N%UfTkEUGwj$1&o$THnoRu(L9}xctkV^zD1<ZgoaXQ3bdT-Zg7?~K;6NVVFM^9c
zsU8}B;76elFy1il;)`8``E;v?U8g>$kOW=Pkll0A*LHJ6h0K=E<FRPse>PeIa-Tcd
z(L+$k6F2vFtN0{W28$)VT&Elj#10egqugw72Y%rcSp>5Y6t5)_f!AcPdIM~^6}Zau
z8iKtviVfDurq}q6ULg|~fW4!Kf}?HxTotkCap{Va`LA+%8e9K-5DL@tB4CH5-#%di
z1H803UcB(Ae2!{8kV;i~;!@B*0kVN%tHv0~lC0<?EO<cutjdllnxao%8+}FWlLiBA
zgaudSKt-t>jdL5w?IBD$&;-04aM&5fC%F1w{q$^>K?%DzE3PzD==bS|zWKNAkz;2a
zkIN?r+RFdld%QWvyAPl5KYjh^U;td6gI7nxu*akV30=p&mO;+!7?ItDuUv=x4j<GP
z=0i=(fAW*Hwk)Oz$MYG$_x{1lz^6B_f*6S$Q*+wN+wD7%($c2s!YF1tz@g_XDP-=!
zf7mjzqu=D6)6Uty<lneu{Fl>jPV>dToZ)Zxhpejk^zz+o3wVuAFn52s+wQM3xh6j%
zz{ACbEsFYVz2i^<IUehv=thN7z&+!K=*5TVH9hKck;ks41M%hz(BM#%iltPSfxTuj
z2Eej0h2+_`F~-?ydRl0if{svLdKRrBmwMzKt0B^k10<j?X`!AjSt*Dlt)E)I+Dbd^
z<mLzW?swdESt|G2J@l)sCs6v_kF7V*`?gxY`o-9F-BIbyUs@p%->iMI-k7$eGY~ru
zhpsb7jSf}Ubq(T&AS=yS`_PeRZ_!&irR?$kSNHGV3*I{Xdv(z(7Z-hOBS(_wXLv%q
zbyiBLSDyEz<sMqD+FIPXX-qL7PBTpf_f<_UrFwYkKHBjc>F=RA{SsqCKS*@R!#X^-
zMar{r9y0HnXe}O(G8>bpy!G<$puxCbAPpSl{j=)*RzizHI=@Tl=Jpim+H0jv1j0*Z
zS;n_px3&0AZCG=E03QWpyMORv>nA?A&i0%xv7HWy{t}fV_`BCnKLCD_ZT(wUW=2tZ
zx0Fd|zx;z33v)cV38SzEzlutn!&)zP-Taqs-o`<*W1`N@=ConEr=crp%*y)4L;9)}
zg<JPu>n?J-9)K)t8K|qAEya&Lg`3<%@8rnfs#bJ)LPa7v9Vh|0q)s}FP=Rc5=xMP?
zjAc2O5FK_^UmE)Q*`*Zz;QZBE&bGz-_MsjK)Ze`Ux!}NL{n-DOUqFNLEg)E?n^(|&
zq=mMEhDm6Mwa}JAG)XX1XYF+DtS^ChI+I-zsvkOqLW<a6!_Xlf&kGAMq9l=|ZFZMZ
z@X2N*nOQC8#iaH494Z&dn%8!d4_aK`JNgyug4c72A!e|Myix#P?;iQ!+FAYiy$2t&
zrL;<U^P)!yDK&h#XnBzO<;`@-5@lZLmL&K16nEXUauTm(77Lz*=SsPava!I5LL_2D
zm?7<2+;DmpHwD1;w771yj04H#JuK9Cwn}5qSi$^tWE-oHy5j@zE$BnPiJ;kHTCikx
zCBdr+NGk)1w{;Yfb6+isIcEJthA$0S=m008fB&liZw}<9CQCAZUyXIek8{Dv(|-6=
zIWxdm`m*)c*SzQOPYa3cojN{L1au5H^IDWX_&jlrv8)cYZNX>Im~3#C1yjWt9?k57
z@UBX7x=~z9KwcJvTA+y|SYV1*I&nIeBg}orn6G{Er{FdiB-|*UYgsf+K?Gk`6id7Y
z)xDz`enP55xElr;@C=U$mIR9>N?w}1+t(`Z?~AG*y?;mk?&5Eu{FC9LV8+HLHLdU7
z(SO^Szh@(b(52ecPlD9%Ch!+*ZRD+HKmBI!(W6%fM@PT3TEB`qn)RpGHveD)`hjdG
zQ=RNnJbJ(Sl_L%xKQs6FCQ=ME_2J6m`C!XfY!(6;`Pc_(S9MBd)>-1I^0ffIeslQz
z(X+#+PY2&0JdbN`eoMyI`c<#jYyC<qXb*%&`#X#tL@uJ&wYWCBU*5ZS&zRwH1RFt<
zZ<1;N64q7t&*rxD>-=$^HwvsMPs^MRw-@jC?uFu`z#;U(gyX3PXPr9Q8vDXl++Nbi
zfo~+*2Dl@w_r_(v?ISTH7A})ueb#%A^6O0)Vr1aR@TT}`Y<eHQIr#3$ix+<!44xev
z?>*W(-Wv>tN!FszpNzvnqC9?WDb5VEo0=Ht^i09<KthBSI_69m{CbT2G9H<f><wzB
zEcuD>B7su5xy91(uG2z~*AXKD7a@nNsLx>(;cDAm%C1W?MQ*iv#!)SAjrUX0)pyVc
zLCO&(@`^0CK;m+xv+tc?%lcN~XBJUHcC<Q`b&z!GKHDB#xW@+k*g!5+(PKL4aXg7X
z4{(SHLX4vFoEpAL()H`YaL$nhq!ZxHbe?7t<yEnDhj-(R7Ljh3pZZs9y}QFkl|PQx
zp%wNiDmY7g3DY|zeKpxAkVH@5so1<-^e|R<3yH{c3#OJSpFF5YJSXma6xYN3&jzgM
zHo%o6o6}o$llWraaxXD)OBp&J;rHVC(?1((l3;TONvUok45_|{=VCR8YZWQDt7<D|
z=MKEqpyV30z4$;G6%{k*i}Q1YjtdXRpf`;)%I69ymqb((H(gQCAVGP`YlyyXh1@Z!
znm&-gBy{bH;H{JltQ;@oPy+Le(yc=_VHT3$4^x%&Yyy8SkPYmS4s#Gf0kz0tLmEe`
zN7AZA!Syt0C=TRJoW9m#6ag<C>t!cv^sEDy2e4W~$-n`-H=s}vd${my*FWp@ITQe-
zH}K@hu1ehRmjnM;9Q7+9i<#Nwm<`83K>NJNB2}D%&H-O1`N7QNlck$QdpN8?ErG1k
z%(37EaEt@{lexZC<HA5%HLgnB7z$&<&4%zOQPe3#YjtGSmy%&`ACs3JkhnLergN@5
zZ)IsuCUjAQPNUg+42rh^MkQVW{NoOz?@!{u1J;roMn?=KIupCeR18)~i;zYJRaNwN
zk$SP6`a`ne@1a_WUtT>F2-L+#meM1tUdYlQ2U&`q)mEo2M1hVcYtI3^T0OQrW>d|i
zGKqpd$VpP$8bUA8CblP{0G;UEk$C2U@Nn}uZSUlU{o{TD6Z8V$23;NxKI5e=m;%u{
zgxp~tY6@ql+wZnuAsJH7O!iJtbeM|mJ0%YA$Uf2U>pIJ;zT9%k4g^3IwhS}g%1bm^
zz{4X?E79Y=7@@X0KqHaAcQ-Vvfzbjs#a3OLa(_^spS#1#wfEWQU!WysJ;TnY;7hgU
z<nhSMym^S0D1}dJ4wyd*HjL9J>L_Y7$97tl6DOAJg6YzQ7bTVX7u?I>&jWA7aWX#N
zK1!-f+Vg%mizFz_N-Wbvga?LNEti%KOORe`<~A!7^uA8mFNoyu@f6Zjq*sZ#LuQmR
z1%fYTMP@;`gbWK_EDp#>-s9srf}m&~=SHVZ`m?Myr=2)ZV?FatFo^}DAewreG5MZ1
zDyzNR45zh*8&)M>UzesQtpjTdCR}NeV14G=9|6xh5Re~l?}3SFEa#zPi^vMvdwCei
z(#qy5OF<G7pFNm8?A=e53<D9MLsp^DXzgS`xK_`tC7Aa@8bmlvwFzGg9A6=B*B)ys
zFIo0Qq`&j=gw<NX#l&WYYRu|ZA6Ba=YG4>@a^Y2oA@wigVA^u3TTLa3PL-dXoj<%e
zwlLT<S1V*!p`T5OTaaSCx$R^>vIEP^yxndBJA$}BzyofacdW5)KI>}6U^kh32@1kH
zU1`)kIqI6c(Y8Wuh&S}{D0;Wm+LxqOiO2Kn9|Bh-9?EIA$PW`>)v;Wr=@d|;#ZuF3
zh)QL#X@c9?Qy{_h0w*0*w^N06%S2EnqKj5el~)4zMLOAHEI%>_W}`T+VoP*){{d}_
zI=e3>Vps>PG`IHbT@6U99ek2Aso27y>ep3$7737k;NQr8c2bn5H^oP{|Kh(DF<lah
zL?(li;x*5R@LROI=HJLO2MoGObd#}DbFR-Og`M2d2O#N%=Iz&>RF<-z(l&p&Rtbo6
zQ=5D9d1z99NE7(sT5$i|*uX2z#tW^)SEMO_MS<s82mLmU9*c{o*05bo8|T&d16;|Q
zz7mzD)i1<Xq;-FV0QXui^TtIY!hW<&{<p4-{Knb{7JqYN%!517<hi2~T+gk=j6Nct
z$X8FU)11Is1I1|VT`04XDmc;_yT#0_#y^wO9BN3YmmrPbJdWZ;)!V3#Y)gLFh`F{e
zVB2Mw>1r+@oru_AX(@)L5otLOTd~~<?kC~3<K`ZGY}%#ot6F-rnYM6s{}FpLMB-Z5
zROD@`^9}Lx3q~U3?;ux~Nj)wrwH4LnGU(4&KAV-WoRUxgfw2GiU|P;laC6{PBq>#Q
zzCy_E0MCRGwoX{3-3IVB!1Ar-tKUhUY*`{jc;j+)n!cfSR&Q1B-+%bv^S(*|UAt<N
z${5zJpy_p)@7~2>XOFd#oU8CvClln$>ar-7K!7i*UU`*Qb4Kn&xB9ORj*bUMhSIo?
zJA)(Kl87D;*VT>Sy4>G-u<Ci!O0v8{A1++a-QeNL;RAiP&*qQVDM0d__V0c9@XN36
zjqZPWmVb8d^z8iXv(wRe{^h;m-e;rHz5Kz0&ptnU_*s$19hX{zeLbqe2)<v9-JWwB
z;s3|pzje29Woe@5v+*k;p&Uhk34o#`JDqgO)wC|QvLs6>O6l&+Rs%sGNJa`kAQ6Bl
zrmQ`B>@m)MIp=AQdfewPoF7%c<jikg)+HhUlCqp#ySrSKHW3l)zSdmx`pt6a8>1Dy
z#nEi;{)hQo;&#dii?M`V&7<mkGAg6gGxYUv?MKzxJ#r^QZ3@!?9ijW!YdN9egu;J0
zm=%AgGAXZRHt)Yal1@;WJt9YYu53A^pIwE0S9E68>UcF+$06DXE}Ee|TT)y`+T@^V
z;^?0;tfgWYuqxl3V{L^U0P>YHp0c0pdcn+(;@A&b^{McQlfu*P%_L#+y~oQ;$ipiZ
zcc$sQ^jSZIJtYoKLv1A@Sx0Sv`1R(68$43aP<+J7qSMOvYMNw1t_W`8XqS&sz*`C=
ztXr$AdH;Chw<^_n-C^HtHHDTqbW`(mO{?$-)j(8Z$|_X{%1YKAJ68-5%FNuOgSBW~
zD+At9#yVUtr^+<?sd2LazOhzM8R|(Pf@v5RKWeJ4xfJStZXw=`X9QGnv&)17WZ5eW
zW;HE2r&slmW+tY}77y0i4uChSm1W@TW$lDvD9*;F>1{@{@@%xlxnER79z}H<>?~Dv
zpzSyWTJ~$E1wS`_MZlh=<EBSAoI8kINz8G)SZ3<lTrBzKzjt>SJ}WB;<y<Vnm}he;
zke_cwkh|s>!umVZduALCcpypgmfAZ=+Kz6vd;B;UvOJ(|5<d9Yl9`~<b-2C(DoTEH
z|9)6kR~tdri3=tNk6?T1j2@W-2s>OT<>z`v-EX*hnPpC&Y>JA2EJg|n`jieEohj;c
za$k~ru_0D_MvtjdT{iW|fy=ppFJX<{Y{_TDIbzeGbudRRV$8JU)|D{5F+0pGr!5zY
zA!FB1&CTloy&UL|U}~kSQvM@SkZs+N)jD-y!d1H7PK`!@)&mWg!)joHY6_Sjq|6vx
zp@W4>bIr(rSwOx_6-6^xCFmT6i35@u?I7v9sW3_6#o3uT$W&`KN)d|1)ux1A=)l>X
z5q@;0!c+a5a~Di11~UsRT*FNB6h{#Ihb@ZElp-hEWcvs#B``HQCt1Fb%-()Ohbm+6
zg$hgJ@PbA!u4YZM5{&0Y-elih8f2Dcl??qU%^YhQ31Axyl1H_*l>RUhXQ38oTTnsf
zks#6w#7sN;G*`W0F?$l#Vo9EoMMeuOK8~p{a_SXWYNAUbf{Iw;ZQ!T4v%Bh$Fv&~w
zdeY;PM4Q;PSsfFQ>ZDk&&I(SDBU?yq-A|ynq|=~JgA{?D39&Q=dF5NDKH9WpnF)z;
z-aN<0GBbm!3WRBugJE-1%&frGByeAF9Z_qVrS27mLI??`_wh_?U{neTiK@86f~E{E
zJuafeBeC+;wx)s{LRY8YKbVj(Zxk1GK&PoAc6nukTOcZnwid|zw{@}7;d!DF`NC>v
zt7`8ExOsa=xpKFp?kuP#wpgkuQ<H*;rj!ltzd5dM9<XM*NrrB1m_4h0xudc7k45VY
z3%p~D74`=9X1~({qq0pz;9jF!)pXb)W|hpt)`|uVn)(WgDOY^JDHkxyySoR;tN2n^
z=cy{Zo+DgRg<uzy9u`3#kKSgNBeCL^l_>lm;2bCBZ|jr;k_GxNH6#g76tzMwJQ^hb
zl3mKGn!10Q16&P?dBqqG55i6v_^pdM(o*e8z{)q`xeo9=h)AU*v7_&Lj=eyBLE1p*
zun{bs3mK5q$MF;zge=cTAKK!y4EtBgE}89*qpo@p`zw<f?lR&73<Nj5sBzTBN;8#o
z2~TaONJ>PH0G8VPiSMh(2Q<}FpzHH?qq`A-CLwaZrn;EO{y6;c;qET`9pl#N9z-2w
z=}D(gGTPXNZQhuiXzV4nTUbkk-5UxNWg&hNxi-SKBFV8AZ4b!3kIZGj)#hX2p^u!B
z)VzwP!@wu0yE;zI;ce5DmwL&b1H3>K0xQnIBj!h~4aWr;2j?p$BT587J*<07H1xUA
zibL-$rW^E}7>m^j$?KZr!Cydh@vVw+F@>69jma*P<A)lN|2@g~7wKi7Adwg1IBd$2
zQgkDtr`$V}GQ|BHy?Xxa1p_*%clF_mCuKJZ^H&&CyB(>ryqM7R0SLUGPB|%yqqh!~
z%Ep$+*g~+>KqA+S-*s{Y4v$rR#wTbbj!aO@?b>k=u65E2GyNfeAoZWK$Zw}?#pmO_
z_=wUa4oajc`QrOO>?~jF=dc0#WbiL>3}l?#*S}}Wf_Ydt9KlhO^VksA;yg=T23B=J
zcO!GK{SU$sN^YVj*2|71e8fqDwx>8<WpmHJL{sH>0?s2QKdJ;@OM38Bhq?dZ1Bh7m
z@ne(<Sn{ZdF*Q|sr=Z{F|3<HiS-_x`(t)EDYrR2YK~~HcfauC$K&lnE85|4818~h!
zuOz*!)~>$5t_#v7u$d{;-{CNH12#+$o!uXrcNosHD<G$N!<UlpC_b8c;$dhPOs7^$
zCV~!;s}-}Mhw<5;U%euhI%f?DpGUSKKIZwbT*%&V_;X+`bX(--WVC-<k|XPy<IxA_
zY65<Yt|R^+SQGkaSF#3ncVVp21p@;c^|UfVbnsz}5Q1Y@o8yWnfb;%vYNryKbm+A-
zZn-lm)sNxR=HT9b!yFU~nt}aZ(uQ-5+Zm0Mf#!b>^wSZtz3W@!&b0XuV=?DJBW8b<
zuh{2-ac)$As83VmaUkxFES6fGCnWryLBnqz0yBEC$4^S5|3msnJs-WZ$VEDRt29o1
zKcY~%R+CEFy!s?LRvf$~3+mz&y%DSO8N1ax7)A5(@B@n@_7K*??2b>SwKXnKEk^u7
z-^Z1mN(5bSI46PsqN*S{|EU>1B=5AOPyIxj2Ujt)Dy&X*a*6AAuhhq6UN91->Ia>8
zx1KYzVOf(bgKz*#t*}7j#agl)N)9jY#v=P{rukI3xs^GX=InEM9K<1{F#50PzO$H2
z#E4*j(HeyB+zND6L2arVmGJZkQ|*?xS0!2w%Yok$C&Hmk1+Se2co3xD)r3w0-=;AW
zA*_+zsRK<KBy$>sQaFTANg96Vs{~K6{H#PslNq&r9^w4pt_C401yA#RPKOVi$Nufx
zGj>JN0W1*qc8qG8eJ#7*4n%a!Wvnk_@l$x$eAyZyQev{E@egUQj^Lh_@zMtBF!3DE
z4Ok1g5e_|PoZ9%&v$Dm>Nm&?A0ewE!R6}r`S_$|$-}P-pnQ!+bUnycc#A&S57;pgr
znYRMxbvT7Vv!PjKawr{Dm4r>lWh6Y7<6=(*BQ(_Nk(95#&%#40ApanFYGs3vFs+7q
zdvv#=_!2^^1J8q;3k=u~>M!m^EOU5}eer_hW|&=a;W(0-#X;HxaJV+PMKRTcFGb`@
zkeA^n657Mj1<nO)Dp{BLq4$v`aiP!N0c;*2X^RmF8KZ^IJnjD;RNXWfRe34T%-}t=
zf7%f#X@_WqG8jz(4b_{Zcd}$_a7?x!B*%glb3bO@xEky#px@Z8kP_vM$cWPORSKtu
zh-|WYEmP$fO7S=5gk?5H^S`3sL$*0O*DL!1Ow$uHeHOFXdJa6;y01geRzPyQ&eWfi
zjj~E1(=#QdN`K(}EHRSM8U%THj81hzG2l3a`FYd1MY3RjRrIA?Uy2~UyX2?#fG4Ay
zjFA83(aYhh!|#tYEvLx<-lN<gfy@mAUGTH$7KZnyu1+vF92CUX-{ha@LY<!We<)aw
zvDHPSS0&0o)Ma7UayFlEo>?^&^KiV1AfNX<rF;E^F7jZ%dqtKj6{c=4;%l&H`{tB`
zlA+zQ;+n0Oqe5j3sd+asJzct)3a9MbeKz$;(bS@3bb|Je&sr09KEPU~tsXH9&gGPt
z&;0@CRmS1+2ia&wm14-45Z08f{N|7?W8d~=ExWM9p5^cKGN0*zxkJqzafWc|da?A9
zx4PDJZs}&zVRdC2Nrc&YZkIe~+cSlUEksZq(<sqmG1!wMO^z^i2d%r*orf8|78LNM
zjWi~hv4Nj@IMFf_Js4%b4-n_Rp0LGQc~m@1{6k?*b-GnEQQ@ApyyO+BCBY2SOER|M
zDfO6D8$Kgc5iag5MTDUFj}r;tBvz4kEeEr(8*e6vhhE{Ywq~<dVnI0m-<^NxyT5<&
z+M3}FdyPUoeahl#Q8j+3--m&X%Z$Jq&i~^13A{qW#}0V&IF70xT+XImyA=2`IS(!3
zG6OFz_GN;yXRlt5l0b;Immaq}>P1@Cz||ZX{r=_i*Dvn>5!ceNI30$}_O~O=^2Iwc
z^4R7n0ACa5R18}kM3KuH9+RKsQ(QV~ZRBH~Ud$t^!qBk-F;IXCBkkQ()j%$a$^4>=
zC3Ki1L9W>JBZ|C#SreB$C)S9_(xV4Qz2rygIy*8x<mpQu7`OpL#uEqpBz?dD2z<Zx
z0vC75+U(eFs6S{5=sr^@QH4IB$?4bFZuM|jIuBP#(J@w*QSS1KK$u|(I9!)e2q`~*
z2keUl7z>b}UZsMDm}Ooif&Gv70}imIx5<}P0^RZH&O#F3RbfX{eU^n?94r(vduRyI
zadUNT4)UchGX%zqZ_p1u;hDLyu>Vt3O&kD0BdZ*$&vu~1@8mL_O<N9~K+gpz1rZ8h
zQj$P(Mw0B=`FM%Y;O2(<S$2SC=zEA0!$m>c=kh?4)X-DO5os8gvbheDJNjFFP33h$
z^F7N~?pFfols?|s-*Hcbh#e&NZvWw{XY8uMd*vWm&ylzXP?iX_fS1htUA`>%s+S7;
z2?F*F&Eo!VKZHL&>L<^hKYVmw=0cxDWJIS&y@TX7u~GH>L11^5Wh$savhh<mq~vPq
z*Ja<bqvM@nM?#&WVd@6m@Vr*Y1)JdKE-sQ!e`E5f7$;0spK^2)hm4xXnm|#kOE#H;
zbV=xpb3XpdiwC7oca?Nvc};hDvLazoH255XsEx=0v#_F4fN{_G+Jw^sD}3_RT2HCS
z+82Ss!xEhd8ugk4opmXBDcw>J%zI^}{GSumD#FUYf9dCylRfWLSd|ke*d7p#kiVF3
z;=d~51mnesU4*_-U+Cx)Gao!u+g5z<zcN;uMm5wXh81$V%s8ZK1jLq+m<c8gm5Ij<
zL+Y2mO6qCY3lzEc?v?!zbns8=$(^AzvZWViS5L(EpEeD5hiAo>hLO(U%BH`gk3OmK
zdqdQ}ZT5=`I<A26xq1QIr@u~DL@Aif$CuQVpZGK#`)9Sdjjx7+=^W|iMExhUhbsk1
zxN2l78vvpEG|Ypp-e8>ld`LnLv2@Z3k-s&|lIs=2!o}$knE-L)bm`xqZRDotY>cGn
z+N8^_S<kQDH0$|iKCe+17Uzqrx6BVOZq$XZhg9n|+Qvn4W#cf}-l+9I3{mejnosA9
z(Q#!D4&}R>t-|f0R)39-jFBnq>ScIv>t<cpA4<j7=)qspcj=Yw|A{`jSr6_GQSmj}
zpRccM{m1p^rdPM->#pv@lgn%D!;{OKjsD&c6<=fYllA!R<mBoroIZQ_-HrP2<*@wQ
zw0ZE-Xn#NM3M1@MPdJyiLSjvcJL(h)W00ygb1QGdtc&Ate&jDI3{Lb=h`kp%IgSy{
z45jvAMFqf$994y|OHV(>&iA~XlvnLvDuI3A_S_BQcuR>+_V8mfm%~=;DAy;}L&=tb
z<aiul5h}wpZKnv`KOVk%@|Q<L7H<U0<T&7(16?&7pnpFM-VN<tbT2{^<-(GT4U8li
z79Psv>xNFNZsDw;x5UeS-8H}@_E(JbJ8<*kNJhy)5Kdy}1a4pW-P7lgwn)fb0mI>M
zQ{-Nd|CIcnvt_zC#~<aqxHz4rZ>ii#e#YTHP^6_}V$e^_?Zz_-+*;Sm17=MYhQBRM
zw-cwetW1hzYZWi?TysmS*U=z(vWl{libM4zR5drvbR`XUtihSb+nFZt_8|F_INiB~
zqR{zrE?JR%xCSX_Qj?srNbVRU&++gg*DTSRa9TXAOmGpQb`JAdC@>8wf<)74@^XYN
z=hdVzyWy4m6@WH?370PZcD{iiRoD`@p{~Ku@~20Ce)^e6W84$o&R2Hg+2ya+etE6-
zkCI=j1A2n57OdpEU!@O@cwE_wBm44K>4#CStGRal@K@=DQOzrR@ti;WY&=8I3yVKW
zx7&77$)0T_jc$qxIb=)WxZpS=BuEFPQqcUu$ez+UrF$Fb+;{8Miiq}zXp^8k29(ud
zIU3zIf_Q8caT6aCO(`4D&T>TKRPKdZ<2IHpEt^tjy9(*o?qD*@=WFxeh4<1g>hd*v
z^P6MW53c-#d&hp*-0YA!HFh*;{E%^83fW4!^JL?AKr?@phX6I6TWG89R*-4}^MW|V
zu}&75)$LVV)XrS_D{8B)eL3*{63O>G?8=AUe?qKZ!*xEqQ^^DgaCD6tF-9OVQ*)mh
zq0(Kn3ELhw7Y<y|d~iv5IbWsk73=tHvF^Cff9L+XqpA6xgB{#)k9T;6{O>zE9xzM0
z<{Xo$=8<Vv|75%in>yJQ2p(PHf~8h3*)kmUn-_pc*npPD=2iQqFYMw;wz>d{$v*dQ
z|2CK~$1bI8k%bG87OEsYk%kv=ah<ShE0d+a2IZ&FomGqH9*K;{5!-l`KpJCh+VP4s
z^x6_tP4d;ACfyd1hKSw!2(rkXFIIYort;TM!rd4e$&CIFEFON3%}lWq<WRm19ekon
zaO!q<k&p*Y>4v~wb@=JkI~w@=5N9o}WRh9DYTVV9)a?@$&XLVhI?42OkQ}P!&<y#d
zv(Fw^g#q>b`*P@BsKG6c7grL}B$?5Lbqr(WUd5xMth;pdSQ3M^mc#5Y0=H3k+0Fd(
zsg6M2=br@^vB{%i0g`7ADK>S6$<E|(2fj`BsmOkh{&mNLgU4GnZMx0Xdn9ri5fmT*
zPe8E0b9fMwqc@J}x1w;35DzvR_c0y^#b$8Cr3Q4=_BMUY2oGGdax%k{b&j})kiv$&
z%;(d5?s4f@w5)V7cQJ^fAhw)9SG3PbC4*LpL7Ep8w~aD#V)MYxK}@FqU>j%0zMtv*
zY%Sps6{A{OU%I)u9`lHU(eHTRXCC2Wc@|!2Z#t|xzc{NVFn)MRGzf0u=^2kV4FTuU
zvp6Fv`_yxY+~~LNvr#m5jRH}`i|{_qCzV|j<;&Cf-Aq+C9`ZPZkmk!qH>KOF$Ts4<
zh~n$t3eME8yYitTA6meZzg1Iz|I-}k0h}X*ciQ&@_nD6T1>b}5<Q+i5h)ACyvn>6I
zNNS%SIbyI6NMx6KwV3`2O6wD@L__9+X}HMGjl*-F25aN}(~9|32RCvBudJQ8dHN~W
z6*K690vNf=EP`HMEsH5r$jrekhuXnlE#`FN(;LSLu@RdwD(J39%wMTMOSD=~({klt
z1ekQXEWp17w#701>qqLrn-P22(fpnkMPFV?Ucoorkzh*Ov~AkDy49mdS^yh!^r<#u
z%er>1ok-SlnM~wZu`&^%Bs_CGPqMHaT`#c~cZT{52{0yspFhWm!PS8CztFX7Fg}x7
zZE{l;6TvE<0~Wv`EB1XTNP6Z&BV=Ju@s~#QUDQjspv_c$#$D9kaixx$QIMEDkNL=-
zG$vAY{+aBz3A9Z9wp-DO!a-#EPMxFRn52Qio}1;1G!Za`w}JJsV9l_h2VieHeRUax
z91no2XCCp%h<h<2f_HkFzqh5;!GrYH(B_zvM_WPryi^r-hD&llg+rA;oMy{a8EYn)
zL!ieZAaJ~vB73Tn)4M!P9?eKr>Lo|CYu~a%<FkCcEXv|^#VA#!hu96=)YKEicLx%l
zTuL<4@Ls_#GpSDsLfyI(%4YdSU#`gcoQF_K2XW03$>Iea@{3`K=dm+-SOUzd;%V$K
zmWG>@hH*(~tW)kc3}tmrn+Oq=JHpvzVAOol&LDC|%K3~{(Zq+q3wmuEOqLH;IDVib
z)egf4Zk|mw+4S#+@kB)Sfei~@HcV{j*Dp_+CQ||;6ZJxESTY}R^I5#pH%k@fYChiB
z6)!dDF&BGJU0z@$sQ=l8g;whY)EDg^vx}z5YIB>MvP`l?tpYcy&}-c5Y&O)iQMLrU
z_(u71LuJ@+M#@$S;-bd_5Pc@-#6bbSuE_fzAqW3XLk|Aq=KGJE?^nP1)LoI*pTj*J
zXm0C)>$QC1`CiA>MS)_v+>DyQo!U?{dZ%uV`pUr>OE))^Lw^|s#skgimq<%fLS-kp
z&4h>+OHJ;SPIwVU<t5e6DC82!jLO+sV`)LPHglTGHL4-1Ph9zU@10zRCac}u7f)Vj
zT)MOIQwelynVn_t(Mw>{i|j^B`CCCvvS_=&h0yr<WgP<=m$$Ecn9tQ?G%{fc!e;q4
zC#iMKQX2K^Ez&i*GzowY5tVFS=};UG8iyqanFNVBKAV!XIE7y|5=ctfT6ez&hNV_E
zG;$gUI#NkLs-!E3TgruK+zH=o-7q?lxSx?M#wcNIVT4)kIH&+xOwKY(^SGALJ_!6F
zKuIwQ*51>)4WB-LaQJli@X?D$KR$f)<AW!Ujz*0PP|^YSm-fwVebQCvf+l7ufG5R8
z*=o_wH6%0;8kK^ZIj!I_i-1n~%C&@ghMO93GEQmLH~^N{eX?wXl7x;SS`+R2)rNi%
z`I|aGw+){-QrN)J(86gSn4B`DxX$!(;=LyKp`m;?Tor6T5gKxx8kGPZdOo$)Iu3q`
z)6$(`z{rNjEEd7j30Tdta{IWO!$btfJ7D68P>>8U0SOP9WhH9$Mh!vM!79g$u*Zu~
zisZsFOe?%t7VqEz47|@mLe0S=odo{c=$;e)R{@s?HA+^-ER=`yx7Z6-a9tFdio%WE
zYCniVqCz-{v1CBjufeSWNk0wYoob~RYVd50JoJW_BxJ0ZD-<JwWU@KP5Q4v4*04{H
zQRY-J8wTe^L+7LCPE=sLYGjYx-KTmc*+?^&SaC)N)P>$i!DpelsTVP}eDuom^-Az7
zI81LDBvzJi6OC?i%Dj9jV0Z8GlIF0ZM3?@2`!zc`{#0iQL-#UYoe@=}U~p*;Ip><B
z>UDVwv`8dA?R^M;eH?kcH#I8PjjOYRD9AuhHZB&~r0a8JGV0GHdsi$<Y@=CD!Uvco
zmp2<iLC!c7K~~)4;diu#oTD@~Sk3fZkxzIw!7v2ap8l*Ihd*z83F2IM8O9E3sz-H`
zP{N3v*~%e@Rs^>Y^U~N*Vr&daokO$uQq@UjtP#ME6gc&zWVg^1fjLaYgJ{gLW2qsy
zWM{bw5yppyr@HLX@|D7mNHSOAx#k)0WzywkG_cBG1UVB~(hOlUsGGf70co#*eC%Hc
ztBK}6^zqcEF$rQQ6GmSM2`!(4lum4*@$Jdx_!l5q-zTxm&;?~TaZ*GVn&sM)ZjaEU
zS?+9qLkscIvc|ut5V=;X`h+WrDD`$a=;?Tm(~7dOZ3A&6al16oOxq`6Jlc}DP4GET
z+S}6E)bEsh3kV<Wfbn*BY3}mbdghVraO#C+R_BEZVGk!wa=3qWTeG4O|J<~YwVUA|
zvzXRw<AM%9aO$^JI$P-CUUez|f^`)XEnETBXk(R6B_30%itkpy8s|JmK_THN;U3jD
zp^NRm*c_})RQkh+Sb+o*o>mV5<#?}N^`gX(|3Q0F&)2_XmyVYK{+=QNhV)wi4gC|y
zY%h&B*+k2TNT&kcAalhIRZ+k;4}&X@*WIdDXl=&R#xgks;9$)=c9{H$=!R{F)5dsP
zl1fLgX3)IkMrV~Z8yUw$`I~nl(jMkx>^W~<rX~(#evU4QNt%W2VHgjP1CkrdAd7*H
zL(D|Xa<LNc7s+8P3OC?9ONQNaO6N=vd%5}tboXR|AB|PMl$7O?!fDJO(ObJGE>fwF
z`4Qk5a9u7lmY)o+u9(7&L690@Ni8L3qnof&hUlWlW!!39mFd)_;~{$*WS<ZNKj%t0
zd8VK(=&SffvsDRqi{QX1z4<&W>*r@u845B7Sz^>pe`NkWbFa1AqcSi5KJSi)HQVT3
z@<Xg9ZngYJKQ)9I3754Dy+T=E?N7SSL5Rku9t%osnWy5U#H@Eomy&unOnFY14N?_b
z?38#}gpwrR3GV??%eEJ};m7I1n&PX<+7l2*hcT%5^O6``QX*>x8l(Gcv=$I$7Eg%A
zOp9V6*{gvIti0(wJI&b+00d<@n+iQ3c>dYaFWDfR*^SdLlF6qYPqWss0;Il<Pv)lu
z$0ZP*+Ge+NUy0shdqt}8`13l?1RH^)xkL^2=hsh=B>R_zZ$Zy0VPJIpM*E{sr@#tq
z29TrGO5SD5lcI#zN)iGl^KJ7Neuvx*%Ra*)0+X-9z$=n|p_dp1u%M|PZ&Jer?25>+
zUMx84?gR>2$5pq>m70hccQAyhEa&N>1jdR(5X@%z3hnIQexCpcgh(dC!mc<4MkTL8
zKG(DmOlX41GSG=&K<*k-b8q$@f{<wUX~PVX!=&xk$)=|rCA(o6O_W*EV{imS1r;o4
z;Ne(qRRDYpEvAaoa`0;boT#gezT&;c@q*@}N#{mzi7<{<>o0kBp+mwI6=W(CxmU8M
zIo)CqPgw@_m}8}jd(VIwiV01{LJ>A9CYY~=TEP&{_QD@>z``PWoEYR+Q1z3eqaTu&
zk6t_#2sy7z4RCuM<Zzn6m2=f+hnc8~KC|4ep3H-bnz$}5#&8)3Xf?|cte^(exSJi-
z;VVE_L_DQZX9dB1POLc_m$1dD<uVs5=OjB>(<uXby$RsV=`qjL(^Mb{$J8hzrTE#_
zpV(=f6T<bA?_J=6G0DVYHKNVn2tUqaC&3V&EXdTCoAa9D{6F9@2WjMi^oAOd=mz_^
z{gkI3pb>4VYr38>EW=?kS*8~Tse`1(F7ZORWFo|&FbW~@mSt(%v?kU^sHWz;8^2Ae
z;B9qpPizKWh_kBH*8@S#PcOxJt_jhzXH1R@lVCl*Uq4<u5gK`a#635K5(F}JPgO^|
z)Lqr;Jb$peOS1s$(r7#xNu<)d960}xDGdR!j98Ctz9fbaO7qfd$XV3X?-8iGEXp$2
zO?~Gq&O|;LJy<QLzk9$pk40uct{_Qe>X)0n0*eK*j_WX4Rn$+!nOUpnuv)BMfOVVP
z;YcFJMq9Z&@ZeNt>7~o5NcI2k`(K)<rcQ`UHR%7DgFsaH@OFKo*z0tf|J}XPbrvKh
z$DP1|4}FtR5`JyZsrsmHg#<gkE(7vRi!qz!Ob?pPI;z>Cf|>xL1{y@e?mef429_{G
z$F9bfeV2zttouv|33c?Yn=qYlMq=N;CwYFwk19^L&KwQXaOs|o07fF7pP}|wh<5ai
zCA|p8r6%!K>xwBuUfI$)W6*k64EonG<XaNWs8fnWdy6~Y*Uoo)2F&HsmN$4fL>q-!
zVA&ygX=!_tF*Kxk;OZc{12_L^C={l%Vm%j+8E8=?8hu<)DU!+BK|;$(CgjU9#;B%Z
zViK)s`(PCUav3w%=#ThvsF!kJEK4OE#(AfnPKlLTizJ;A*R9k)L_)9uU1KZAQZ#G`
zakMda2thoj*(;`AFgH0qxW<hiah5epfP>XovXN*}tBaNS#meQeC;oj&TYb4^6mwyA
z76n67Gu<aiigq55*lE2$_n}FcWRax8_6XO)EQ3!;Ue3Z)wmzB31v-$=ps2|k%0$@2
z>ypo#sryy}AH6C_1U%<xk^KR?Jv?N$I(3D&N|BktJc2#081`oj9M~mx@P$l?gPV7#
z@$*Tug&FQ)bk`jH>F~)@5&-9ulj1#Vd4en+QZJUKj5rl_r|%gygs6&Kzhyof&Bvij
zj6?i(E9+sJ%dENAoHfEFSO3}JqTw%}dCe!12y#h;e_3vc(W4&^zk5nd_>V_F9KL)s
zq=i5N^wDWLElB|DfW2;-@1HFV--eabNXn;l*}bPbKtdO|!G}+dxJ8+GZcKzdS7mKU
zkROJbGV2!DRsOasbz1MA96f(}`0B~?ABT^h0-zd|_xqerz2Bdui~h1GR`z?5Pw3z5
zN=`39t`Gn+Mxh7nH-gL5y6y*dI>pWOvxfHQ?2qH*HlTI|qw&I#Cz?9#c)4-n0{py<
zNSOa139G(0Slmi(=}Lu%Qe?1AgCg!q^3pR|7IBR8JTj}9Du(>^&TY@ApXgsSk2yr(
ziI6-sHjKjYLm&2-%?z42B+AIah>50Ub-nI!YzSYoPJxSF8FhE`(vp@qYpvBabaizl
zy-8@%DOKA)TR`lBA2$()N8(J#RA5623t+eAS!~G(K0Q`GBjh;pz<DHU5E_E;K@hvd
ze5Zjs_RmiGoMmE=JZ2m>7W{iYgpLK8JKukY8%r0E@lxsNu4tIZyeVIHk!+Y1yJfN;
zwT-@nwcU$q^QG=ohwvPWH$Cm2i^7bRXuS}ZhO4t}#oP>fy0ONjv;P&n*TNe=>kg7I
zVMm;#<A1;N)icj^^VB6Bx)nJA2S1~irdRgdOWY5Z7v<&*edyTh$3oq>4bM*q?t^G_
zfC`wzIYqpVv}CCRN*|Yir6<Q(KzDp(I)_HNJ1%nI8Mv)HE+oo2aQGqe8EiYl#w}-X
zK<Mm$|6P|AaI!Z#clbBw-GF*H>3oYds!TD&+4n0*c^HR7I}a7jqS!+{771amnv<va
z)meB%Az~_7TY?#qEGm*W#i!ojlOmJ^21H&W2fsWQ;ag`4&Ggj5pbO1@dp_6OA+$IM
zDC>!;nWk};D=u$^yN&k;_+cU{;9>Ks(^#NGj0?qq3)D3@!LS6tne}GotR-1c1-?X5
zfS9V=0<%gVYF%cokbjLcv-4vy=eWup=Y;m88rM~KQ2lynl{l~75RXo)?Au40gEAhc
z;@ZMOv8u+`gcPb&513yK(3)ZJ=K(BwjfPf8q$j2|+80yIp88RydT7Gp-!_)7QM%&O
zXs2kuH`jZ_r#wWh<8K8^{r2F?nDEmPn3hG)<xD@m!X(L5X_;}NO=7TU^Rfnok1<fp
zGF9iDXVZnG|Aw=ui@K0JIjm=g>W!WI!i-r8v0Sp0^yyi%xSC;F4yBsLx;c*gY6w<L
zAS3pJuLKdlNI5oDVv;5~!e~#}t%1(P*)la5%xK?)ar?&-Ycr^K1o=}#*nN-d&j~Lj
zxoDtuJcf4iNF!)IFX*ZVKmLrM$2}ECPE%U6JY70a00l!|LvCcI@pL_x;AnWq%q>Ph
zfzn|TEbY*_J6F73N^wMB$3iBZAePf9v1;W^N?UH$X|`04(%&5abofAV6*$}?9rxu|
ze;+Cags9*i8o_O#(;YERw`92DR9TK9BZJqb1YUfAneboC)sMnCCn)|q-Tm->XKT`>
z&{EsLB=whaxj97)`_*)a358yt_5G!UDr>00A0mIus4wNTSSiB7^wI$<5+80dK`@D$
zot)-cwNiHBs`Ub=y!1(ODqNU5fTn7{4DUu=8Xb#ir6*ZBL5zcBMW`PV%Nytn#x59x
zzIY|RE7M-`WR6@6M4Z{COXA`(^CwPb{4ihg<U)I0**42;C5rZF|4cO1YdHmjfMPr>
zOi3zlpxVjM9dnW4E4CA;|K($04YdQ7GY<2RXzn%!C$KcH=@gU|lRCLbm!~AOt&rc^
zJ3?UZbc2kyV9{t>P;<xbUP%K~V1LIC@qUQ+(LpWG^F<ljN7f?V9Y;VZR-KX(c^LWC
z0~Jhk;u6!ZfG1ax+MecIQ|p?utsS#(EBhe=@cK>XmObeA&(}2B^iiKSMjtdnnh&y6
zqI9hX$Vh>GHKdo(Dd{upST0!-=|)~*IU9GR>e!CUOAg)TStD+xKH2-jGkB2FXVpm(
z=b)!gww4)BbN)k$F`@Ksvd(bxstRW#j4r3BG;^G#*xlWA6lRjAxUzP4<<4@34B==W
z9)6#A-KH_Gpqo4cIZ|BEB6uycR)?LaaY~}6KmvHPT5(ahng4Wn^i0VR>=dP(gwQw9
zAH?JYbo<<>ronIU7z9!%wC0&@K|Ce&N}@HS$1;TYj<tJ7)^KE#1EMcka^{63J4FB7
zC8b~M^&t8pf5Wy~DHhGw&CU-G(^cA8FQ*3zzR^uSw7%eLkkbSu_mdPlbom$`cE4$T
zK~!nIobv~Rzm~<kLk~aJ>ZifXOKjE-l4=}ak8tf;`hzfm2b^+aFwN#?$XZF{ADU!+
zT26@{>)h@oUv`s^O>M9d<Fcb347EYf?K+@Kt}{APoRu)l@gVu_2QBz<6bx$z;g&nx
z+829!iA<;5vn&U?#^YPp5k0z|Yzi?5H-%i0oAj<trkiZ=1JSo`0=qne^f7mcsXq0{
z-NmcuhGs{GK4bISRR(JY8$9%0Y<(fENKIdI#X-9=sol;<Ra<moe)~Z>IN&w=NVj}O
zTqT_#x>bJrL3y#mRWy%Mg65H)u{x0cC2U!XuXmRYRATPjZ+Uwm7l^z<w|Y!#dv2sX
z>ApXat=50Sce+K0ca=>$oP=AvE80=57fk$nejtVT0P(}YAs#&7-0&UF04sUoeZrsU
zc*x5EF{iw&!AI4TQtxH;oB)TrYgvfosI+<7+w?A*%U<XuZ9OV&IV;BpU%vTRue{-a
zXx$`0(a=uY%}2wXjCMEdNgHRQP0iRU1WiHWt<Li;UNo9OVnfQjWWM_BoLEQvTXDs7
zqaZJ(IV=)UeezJ4?$i8CdZ3$ZnEF$~b+`SCc8^&3*~uh5aGPl`2iY9tWx-q!ttG91
z^z4%kHi|~4I^JV8S@B_x7TC4_8O|~9+~_E`f@iw+r)__Z^%x)T@P^uX6QAS{ekv>L
zF2&>+Z;?~(sGOosIl0DDH8CsDC*tDw4DTMpL0!_#5BIdGrHU;Xe&p}j(&55gz%^8C
zg|ToV+y*ZwVzH;_z&UGw+^xtsVVHLQOIBdSzA7Wk+2dk)sGOXWuq3H_iAZ4f2%jXE
z*$U>uki&VOTmCF>Ax+=0M^+%jbW+xn2p>4%{cF3wTg^ZPfQa4QR}L@9k5d4zY}@Sa
zLQMEn@#`doACt6<B)@~?$0AU$o+JIcNVsZBAGGd?#>(*-p;X4Y9rivHoiwt4rR-y=
zx?A~H(lW<pV8M>}t|CsS%s$|lHxylFb2ov#08NTr6Dj~!0tYf_eW@MRg+Jh85$$1w
zSfNnRp3Y{ppE*T#F9MMh7(n36^cTd$X@Wsj^8#_S+WXd5*0k=lgUTVdqi?z{fsb(7
z;CL~L@p!#}$3_sM!WDnxuvDdUGH&nK0YbRckcYDMd+k$wzi;XtRtkQwtlsX3>fGuj
zy43aOP&z8x5ujy(UBb!sqO#&uO;}ixNWpg!f3eK|3cG#lYqsPFN$BzV!)lmIWJ`R6
zN~2PmK~WB=-72CMUfEiDVO3*gOxqx`FHwwXb_x~vsruro2}BeOtA^v~T{7sr3d*)3
zgz&iuP6uuKo-H0PoJ6ri=Swn+>zW``4T%?c%5?dItmwf$I9cYnf(vmCHtmcjJ*C;x
z1kw&9O?trX-ML41%X+B+FhVh@g11p;SUbim7!qUV;9N&I2_`BKv^DsWC;wZObhlp5
zS!kqt(ZO!Gu8|y|?mwwqcrZtuFEhy*YI7Y<uufbriTr5fwuwlkn-<AZl?1d^&kpfZ
zZ$&GuMZ9;I%RVUXQ?PJhZ?S9iG^=0@Bfn(AQ1(W@bQ{>lg|40RreF>B+ziV>J;gCq
z#kOl!H0Db|g&Z$A*oEU{i<uBSoELYna9otHb7XVLOb)Nzq{yPZEaOQsV$OIpjNU;M
z4l!tF#MXsMHg=~E_7d~V`?qgb^=Nd#v!%?1#?W=+2_1hU0Ts9Pm8@nU2+z;rmUy!4
zi0t!@l~yWkOv1Q9#&6}4m2Nj2x5nCplR#xctjr)z)rA2vVu2{!4s}7pHZW&qbIl{?
zC_@td=J?2MHz+e0AXlDvhUx)a>)>d`8ZeFb3RMHG)-&3^CBs*SjBIeUR?EwT$-y9b
zDG}}BwkP`VD|n=a3qwfi$X1@73~E}3P2yi9;5l((vt;oea1X0qa>@U7@<o$z0+c-D
zUf(CbOD;WfvyD^qFVTb<8Vnzmihg}}*NFs<rh`7Sv5_B;_*Yhx>#;Vy=kk^+Kx|qA
z$gNKxiTvLYb2p|{ViAs&J{R0`G002bdxHHYhVJQ9AcCPcU7oRPOIg*OOo}y~^$rPp
zq6-g|GxKCOxznU@Nhgy|Y9;9WHWf~3x=*+;u^d=kQE^}uNhWeTR%#{z=>E4}=~Pjd
zNFTe<Q6w}Ewis^yd%DD+G*-n)a}{^5tl}#_0$-d4-0h?^(yM#$mEY?OaV&m=Wla%B
z)%+w0w2_UM8saEF><lf@+N=}WIo+FG4o?f{j`z;9^xdV}zjk`Mpgl~ca%Km~SGRBX
z=x2I%knEf-);sir`J>@#MS}WWd2J|)2Q-U4p2qQdiP+}LAsfXHk}oTd-)8jj&W!)q
zsk~$OEto`$i(!c#(6n^!-GP?LMy}%&zNRxTG|rJ&rzOd|-Dv!GnwFCWnYc0Dr9mVz
zL`{0UlUS2iQXWw)dHQoJK5YL<Rlwtd)0)@xEB+99q7<H?x<*D%5Yw`ghGKkrw$MTS
z+8-3{!k67dDB|`*f^SZ$W$#|2>{n4Ixik+2N8_qyzuI&vbXj<gI--`Mop8UsX_vQq
z{E;sGecrzOAU(U^rv0t&-4?%p*L`A}{QkZ^sBQE6U)EpH{=VOqecrCWjkY@Vrq}8Q
z%OxFG--eCKJz}X<FXS&My?%kCsqR^6q&Rcrcz0LiShy*>z>?5^vTLYEqJ3MPJCV1d
zZivJ!wu*=trRh3M#!|Zyv{58zx(u!Z$;M$FXQl#<Ip)s~kApFSoeY14Z`s+JPr1o%
zVn$W;Z;8#34iOazRf9_!5*_0}LkQk>BEl4u2-NX(p-v@=q{xzqj+~o4VZbpC=eoj9
zqBHq?Nt=<lcKY{|iCG$Gs>;n)2i3c=4He~*-+s{YAH9}jMNd~{q&feP=x3;&{o+=f
zTz+ACydAZM=#A$lC)SMaxaV{^$UQsHE|Q1TZl^m~6;F<yA92q+T{Z#KFTZf;-Hz{+
z)!Y5%dhDHO?kl8L->ujA<O+j8jfQH!hJ{~~VJ?f}R-~fluC2ufD;BK<mLgVterVf=
z?SsVr>?Q40Nx!i?ZCM}s)piTi{&+P7zXi^*bntoN7R9t;q7Y{DiJijuIB;?6N<|y)
zI_q`eG#MSt@&Nz3M~mHcM6_YowB7TYsMDjp)4V+4zL70M!p|ySh=i;zrjCNVD+4|q
zs2TPPco|Gt!vl^eQaE3b3<sPrFu>xtCfQh-+GxDKs(S=7AdN!yNho)WJN~jzR_A>2
zcaAcU?r2BRoscv~6t53b(?7}jLTW++$QlrX&ZM3&H3J#r{sz=eDcrOu-g08gAB(up
z=A9wJbU@%Eon~3s=FyEd=NI#p$)KTN#FK9eA&w%n;&a5Bg#Y~P3vB=AXJ6aa&#3+&
zASH=@ZTaV#A9DSVoca&lI;shDvIX4bY5jj9+G2PK#^DLo{y#Tg87}sCEoLJRZMb26
z9@}NZqTBD-*W=-L>d_b0|HAtLQL+C5MG~%=8RGlt#VFZJMoez<VsMsnUSfpj{8%7-
zfl&t7M-qH@<NUu?JRj-S55YOh;xkr8{eN|h>zV6+iWquV?718_P^c`OZP`CB6mVN-
ze;U*h_y3j2+wuCwVtBp&AB$B;3mU(YD4*n^JK!^e1%!CrYJHcDQ_Hy`+DAEYLT>_9
ztngP&iVNdRc6TE(0vcn$(#j>}b6S$J7c1<!xY(>%1(yc}<kAC%1d>#1*IZH=F|x5e
zia6aWjR<cdQ>)KXX9nOXk?~5^s;$;hdg{I5SY7xX`^s3N8%R{n=4*d&>JaXffe85-
z1I2v`Z%auor$DjLBvMtxV=ifKCd|n~$43mH%qCNP?~N};CYd-*9v}vVs7I~V3-jZX
zTZ4Ay+kmRik`8n)8kC1DI7Zqu&q!DD0)xwv+mg>@e1VSGX^-!_h+iumqvng#{YTY3
zqq97alchDvkKkEjmHEU~DPO*R{p6um`ciM3X2e~G!lt}>ddbk@XC89TxRE|l)#~LN
zaojZBr>EE<p_f#U{7O@5i4z;QQC1sKoaj^$0=TcUeA0L3oNl21$7)$}ZVgm92l4<>
z$r-GX>f_aCk(KuvvHtwRfpY@tAPY^m?2jbjyr$<4ptW#&z7{3w71X%ZdL?eAw22nx
zrRVNZWuq2SN4dvKsc~*}g<BL0w1=G8KrSTd4%g&@2O4~uujdg)H^8z3X1cD}`;dT(
zLqy*}GQxKxx)A?7YWB^_=F42GLyTpE1K40Nz?+_ano*-1QTWk0Up?X%(J)s<VRFxL
zwohg6(EskfaZGG5|DEI37hmwy`o46zGyC1%rdM}1zq;FPeeos~mBJ1*ib5*M=pML+
z`l;E4X>Ds#(-wVbvs}Uw2^NO_K5g^TU}f439zilFsZ!Qul8>vk?(WLMv~6Xm-dD6V
z*Ai<E*=Yjy5W!a}of|-;AA;8jBHYt?##UV}&5P6H|J;%P+;uA(pQMg+vI^!1>)P=6
zPV?it`q;VTY}jsi=~w#7{#0i;>{RvLoh|Pw-D}u$=8$8(<va-bx3e5M$`qJs#635B
zk`N^W!jpjylrHnDg6@E{pL!FlNKa5_F$ykw5nXuwo|ubGQD%hy;F`LYCsbVrbv98U
zJa^^^5Q!JgC_L4UgbUcQ_-TI6NN{74;Ud4w(yghR5w3`?PW+dz&rl(P{&nS*d1d}2
z9{BYkdz&?Ix2VaxKE~3SEW}6V(|gflcUsr@0X6b5Bvc=4pgq^t$7||tghE-5w$UmR
z`*Xi~HF{->cQqZ6mAs!E({`ubez%w0>m^_IlCOHn?|aGDz2pzQWdHUXJG!5=3B0r3
z<{cm^kVM8)8=`k7{Im_g>iA8o?<j+G#r?dZOa8;4JNNH45t9#X9e(@3?~t~3h@R<R
zA3dfTThd$3EWE*c5w=q2zqq?AR`w{*55p!3LQlnwPrZl4k{X!eYi>_;KZqkq>X3~`
z%wxOGvFlZ~dL`xpJP{=03(jV8g76;aO>?ClxTIme%n*x9^f^O5q|KUN`;JrhfUErN
z2QI;CUL{*<^AEiluII1~n?}`VJM3IndKbF1Pl|cAbE5;VGrak<qs8H}J|7jmYi%ZU
zBHG<8B%oHC4!_={JAOBr&8pihPiX6^hC(-J%x7Ds@>PISBmr3tttdx`u59u_@)xh>
zW!xd3BXgdmz@O!Sku%<iNFicADSJsRqKMY7!CAHWBy#pqcIlEcC{8SpbHwS+``p1}
zpb5P<0_d$oK7q)dHUzC|D3yK84yRQwLGjHpU%{#~7kgr4f?CHuOAd2@Ewdppa9t8h
z9L?X8m9st4V2cwTp2Ep9Uz%sriGb%k#-Gq&0b#EOo0B;8qWv2HGpw;^I2jUY@LyVq
znYe|Q>l20dbm;Z2d!77Lz+`9egEK~JqNp{x9?OxaOEEh930_`O3@(AuJ!jCarNIe6
z!7Ju1ThGa!tS0p!taifHo)iVpwF8(PbV<MHIY1qH=qf41#gG1=lk_vRBZ}1})8~GM
zQ@8<xs6Lr~O4XvvJ(CN9g=abv{AmB{+qdz@v-CY5G&U0<<e6RYLl>@mzTsNQ8Dwpo
zF@m9`GnQ7xyeaxE?hV$6+m)>&8k~GAeOZe)ET)tm|45X;Z2{R=3<vDs>|D<n&yFSx
zh_CWpn1i0xZldHEfm=&U4#VK|FbA+PEg4z%V?tL*&j1NEQ}LgUp8uE}QTJ!5ZFbDb
zNY#^*(cXyFe<K&P+IjSdHDbE=5PWH*gh$2En5labZk;{(JJ>_?<dtGJ{dCSiUOaFH
zR>IEI{8?GWk$UVse-q%n9Mw>rET3oSCB?P6?xPg)oaLni#3IPlx_vcCx~1j%Q8~=X
z6|8_Lp*q?8-DVa*GEgh7C0+mXcae>E6sA+x*TNdm-t7Fwb<<8KH{c3C^ja`?Qco_a
zo@%)zYW?D4qjgt$(8Vx9LoPG2N~eN}-nwz2dz=HPS$3;z!uCkDTmrJdNX+rPs?V35
z5MzL=ms{x2^!q#PvV`6p=#<1qWk(idhZB_;`Ju<|LX`qL$w%mULfou|Dl(!)2g&h{
zqM6W>9S^0l^CtO-xy8&8KljQVcJ|?g5>yrNJe7^)0Oj10iRXi6S6A(&yG~B+ilI&s
zkvKp}Pbb<>zkl_t-HTwr*c`20CBo4PcW2z@K&t6}BT@s^EcI<G60{_qabat+kqi!o
zb2@D&SBfmdSVf*}G5@ZVOVpT16;b|zZREF&uC%ld7q&0xE8427JS*jkjXO(r&S%&<
zUvNb>Tzss1^9`Q!z=MZWLD1yR8{2x<b#bHFKw5Z50k<*t6#`e`=_As{q$_rrIBkc-
zO+MJh?Z>S&u4B}5FBqF6n0NEyP{Hu_y8jsWNsnFBHr*$l9S&vWoWmzwe~#Nmi`#Dw
zsu7+xDK(PpDDv@+5r>^On2ws)grD>7KZX$NhPm#1+gu9;W>qTn?EVKg6>Zt5Z8{BY
zwBPo8OOHe*PmS@SLXO)X{qnVgZN8y094>lt+}6{DX94|rqqTj6L*A`Vqs+I0g=do2
zesgWwe2Wz;IvGZrE5i!=`>`cQtJdPNRrAJt5pEf6-dG}R<_)`M{-a6r4L4SG8`*N}
z<_$K6C(+m!t<X5XW%C7F>+^0e-C{u(WOlfyEnM)P=PP_!*%WVrUF&oUUXrH+oG#18
z=%ix~uv^c|O}IZIeEevj>8g1^DMjR<C#QymuV+OiNrmTDdCGZGa10UXBaAz6b8y~P
zBFR^SCN1Cw6e`z{HV8_khZPJm>Tu4kSSu*8XXz=Y(l%y99hc6s)l2^1^>SLWeS_Um
ztB=KYzmR!LV|P_`)+p1{Y<0=exWx%0T)%$#v~-qNXoiC8f|dioAz3v$IwK5)sk}8S
zcijL2P2ie(H?SeSfOZ3uM6>KdbDcWIovGJPd{LPj-DN1s*)d&W%Rt$qfM704*4H7j
z@wPg2H`J;SWo8!b9i^f&2F#E^t%Wlp;K@$2$=(VQvF<z;Fxfn(&jgI1Q=2F;zchwR
z)VMz%F!1$P_io>21Icx<DjK|5xA0RvL;?+ERfg#E)z%JtRq?|_9e5nLVOFZ`s3+$w
zE^hpZ%naRD*V;s3d8wL8e#%Y?E0WE$y`qiVN%gs(x}gFsE>ENEsn8u3%H0y%YB&q_
zRdxEjXKQU+#dnzTMZBvvq9zcPdYMVaK*>L+9y2ao9(32xR4C~JLoS$lhWf*g9xDtG
za%GrNoe@tN)9=i$@o^=0>~?Id(`x|_GHw!3dX}kbc>o2*q2a2EwWL|NAqI`K4p|Br
zhgCZ)a9mRH7BCzh_s;1axUAtSOJ{r8YC2rx3%-nYx^%o*|N1eq$67p<)+=tqVYNEL
zh^m_IF%L6j@QIzC2#GGlNCKsTKq`{HtkE)46r*OFYfsy~iNRIFUBqX8sNif@$4ELC
zjOr{aOoh#J4aFpAv(t`d`TYtQR_v5ew!0k(l-YOol3Uvsv<VHxMpS7iSkATp9^H@N
zQlbULqxx#v2t3DCUDtq_Y!)3Wfke^~THvrR72ByZof0?4eQK+NdSErx#CF6%PO|_G
zrJt640TWazVEWnJU3R;kb1DTcB?$+1cadvm=@^(HhP4L<2BA_6(09g=F_N7L%5ayB
zk9e>t0#w1u5XYu-7QlxQVGexDxjp6O-fG}A`<yM*7uUI#ddRnn0;wvXQTI_^yStC4
z=}Mm?j}OmE7~s|Vw}1V=|LtG@JN<t`4{dJ`RuvcDTj7AH%)i#l$aL@``8stAH`T{8
ztDjqS4y~tBz<th(N~4k~-#)JE_ED#>+QoRx$bR7>xV!&|Q9hFmYsi8^pv<<l%m8Np
zPLfoX>QkvXaV2ege2F#1!B*D06O6Xo+HxHj-5%_P1BtJJZM@yaUdZbB$!u*xySrvh
zVfR`=F{S>uq8V6RR%YOe%i$U~LIsa&GtnQoK`$=b3{H1{Bc4@U&JU4G29$dPE3{$w
z@zgIaTbl+^18>td1h~yG*bHy&>L$Yh_(pFA#>O5x3dQy@K0KT^GJxa+-F)!$NeC_K
z<aj;k?5(WMcF@{E&?It-Kudv9(mMg?lF`@=bRfp66qMreTj>Ml73e0&7%Al$bXYGX
zxDM){9&-Y&%I?l>9co|!tGW?*;_)J)gWii+)h_4uSgcgvhAe{|2;eS=pOfbcjmT+?
z{a~}Q{23aQKi5B%sG}{xMb{2Uy3s!s`*&mXlv%{R0X)Xs4XoauI0Lj|XQOT5Tjq~&
ztSOi2`>O!PAmkO2fLEbP!Cy#5^09-1w+^_N?a}rbIOe?GqUX9d9CHTBGuLc4jDQoc
z8OHUQUv8Tq?tle|kFHpP;}`m2EHB-;J+vCQA9|vpVw2=)9dV~6GU~y@%A%OVyH#eO
z8jwEPxCgvv-zv-s?FP)Ved9e)349-I+5`WRU2;>r<T%X7q2HtAQIG}NAJzs{25Ysg
z15s@KD4qd0^r^Q`xb+QOsMee7%>XFgqvet+u@u0Tfn1%|g<nqdsRmwU{Bh2%Jd5<q
zvSBxXg!$YUV;0%DWLXK>Al`0IUSk~e0||T=t1F$RmwEa2^0|eU>cthfCBUITF8=%X
zlbw@vveV_<Viz0^&Li&ZJej{sr@2H??Sy^`E~XiHxqQ8inxZ{U)9Dmof*l@O)V|eZ
zp9IGfb#ei7e)y;p)XBu*A#$mBW%Dnc$p#U8Z-a+}wb<>rZ@b^z)NX2=mH%KMaIf|q
zy2Z0tx1;jX42$~O7%OwCEZKc{-A>wpT`}c+7rX;dvK=l^)!Z7akt|WWA(EuNKrv%;
z+HPDRU7u|R-0G-k@74^YvMNpUA!Cuf?&lI_j?C9$rsrr2d~oozwT9ei5&WKYl?{9{
zPb8a!C|2wk%3P0J+vX<hfZy3rz$B4)8>R&?unhBwAz;abjgoYwxi>7~>WaJS^5klE
zMb4ScSn!rKyY++mI;Lg{;pd3GJrVVqO9tsNz^)h2^+GkAzXHU!?z;!)>-k&pm**(2
z<2TiKjdCzc7aa`>;5e}R-zFW70LwXrVz7fH1gzWGATU*5il4egj)pD9nBVEU0J*wU
zi1Cl+=N<!YpyG-1f!A+ilnsY+T|wFKpt;wB*&s3TamK+=Q&DP1p$gWTyr_o+eDTHM
za+zKZK#gburK1P@`2$X}`jI*@>?JvOBu{>qNUU22U-%Fbw==q((QiKh0Os{_`thIf
z(f!|kSO`%?xk_Bgm+)J$VOY!sqotwDPATN9X*>>txHcvpD)k!wWoYzjpbPJ>u7BUN
zt09PYfj(Bd1!%i0bO<`hP63`rYm7Vni|e`zC6W49bPCsS&iepEEMQU`Zj1SY(Ec#H
z;XzXK)WdH3!eRp;)LGh#iWb)fa5`luY&Wq3Jm`2xd4E=71g+o<bvr0y^Y$HMh)Nb{
zow6}}KG%yTz<3)i2F~N9Kim<)4?5evDLk;*`tGt}^fdHs5tP?JiK$=U>bG(o@c2f1
zUZCh`bvMOkE<*D9?+{+z;)BK^k*=#Xjz8?~3MmdyY&7VT?=p_u%9WhIX^01*wH_|3
zv^i+V0nRgB{s8TXVP89<T!r3YvaG5W_wg1^1cYp8i_v46G}JT`A!y_a!A0RX>KWb9
z3?0A?ujh409eH>)pw4GUsNZ%?2v%D29pU1{XpEgD;^{m4;bico(5=OjEg11G*wv@)
z4>qBCHOS4--VkE;WhI>UTK9u&jg6Os=K%SZXzKG&_|JHwyBF6Ahr4yvrEyKi#L%eJ
zy|EMF2is}~x)CFADZ54BHDpw?eNeA?*+wD=wW8x5F=Pw&wUSHYm`^i~b-6y_Al`f)
ztU`F+^@BIE#r+}odptb&e4kkBTP~DMnG4*l;+?80Q{vwQ$Lb(BeEy5w-JowlL0f|1
z$>oL#R7Wglz<VU@xT5Ypdi69hTcz1TNaneU8&}o#W4fmf7kS5=A+E=l+t-c>VWMBW
zt&8%bA6~tBA$;#*Als*!m*rY%dtL(cazbPm|7k{Vkas;_#`yPup+BSnZsLcVfg_O7
z_B&_+wC&9-{?kGbOfXpfGGOxgcg*CYV&U?`j{~@gS2hkNy82lYH%mWW>f8GyK3;$=
zt@2;Nq}0ipub`LcFg@E_S%R*8(7^ZJxg9XRm<}-vYZ^Qb-)##0a8umv1l{c3EJC!x
zQEkq{V@?F9iD+eI>;L*ZlRG=nmjf32nSRSD>3m||p5Zb+DFL3wc8)bh+_1yc4pu}t
zu#hPea<`d#Xn_2{Y7bB16V<?&*=bVNj6dwUqf}+h<S;qjOuydh<}a%dHxAm$yF=#6
zX*n2TtjZ_QNgGBcOn07K<-OW&>qYnezV}?Y`n2;loKA;Jch--Wd^z%Da=JO|5xbD$
z3BP)yda&&j!0PSQ_EOyEJHF2wj(AP~6)bspz&*xn5UwC{rZG2AV_&IpUe8|<vs88@
z3Eq}C`1M?T!|*lF(QiLUnF`?PA{FJ&y*oXp-n-p=JxH9ytKvv}v#;!fk5+MQvmr`~
z$K7DjVPv^|^^<`r<B;=tw7pL+oRj#ccFVh&Z|hk@kC-dKJgaO!kZDZ5O>S4z6HYH7
zU+nZ`c@C1Gbf}Dwo(6LkXv8?j_x*ZQp<AA=PK4c2-)8}j&92o@po){G)mwLl-LWF<
z_v-X)75{EbSlykN{mWbt%mk9?!M&7yi}%=hTMj|Zzqo3FIP~7HmQP*A3wuPZwCr*3
zl8ByZ;(1HB62&gVPd3c0Qj2uQ*gi#n6*xR!OM!Jm%~j9sgvMRtCo50}+VnN<9e<31
z?bFab3p3m4`6TteZrA5#jnlOqGOwXVYET|kUBDYS2uL)mDjlujXVfUDQH$z@EF`oo
zG_);en||H?xGB7ExGIKaorrD>_G_S?)jrTjA*ya6pzW>QSv1nmYxO9I&)MFoYG*d;
zl4>0gXIEYc*%I{Eu!<j4T~wzA2){nI^?3vO+@J{XV!wU}z7Vyx52A{kq+ch}s*;K*
z^rnS({KZ!Cydh8_qRm%FE7YCynL-BzZK0Lg9wba!k9R`aiXh4WeChL$)*EVh0+0Wj
zsd+w0sUylDK6MASuno%}P+L{4RY~oZ<5pF_x_%m^Z8!BIj*dGB+WhDl&Lc@E&JeQj
zV&w}LCR$Flww>QZWQbvmLUpo8FTvn?rNl<H$&Q_R5(Gjrv?tM<>gPYpi1br+JBU)@
zVDOV-LU#tjAqT?1A(N&y+m$>0Dm4rM^VHUUePzsbGUkM%@6ku^UrLsE1Iwc#ca7J<
zA?QqTs8_3Owt&`d{~Pz?kN1P(?(y$_C+q-LNdw`l`h&`Xbludz52NbC!4u`$zaO?~
z)0Uwe1Afx@=ZaFTn*#}6NJRPy|JuKETVk987$E@q=s{*hvn2ca;tR{c%<4y)lH18{
z!Z5lEno7DNtw;T2pSvB|xVV&z<`exzlsEV!w-HS5&_aY*W8&64P%ivR8k0p)t~%}Q
z=Z44tHtl_PB7Tu#Wz!8D4VriQaA{i|QDoTX2Npu?){~`jwRr?Z*y!O$9{H%$#OI9*
z;73w*Scz)`u9DmFQO{dd$1|R-R_uiT*^WV2ZFCYkcM>Fx2@gRx`nrA^oHiWZ%UG!`
zfh?N%GhbTJizLa@bc_p)BRIK~=w%nRMm3vPWjc9>D8dPld(P+vMuU5_MfneQFctTg
zle9c<-AZ1pOMoRHHL*HT^ErTHw1wTsVb!+_d>=+@1a9Fiu8+R;wIMbk7zlv*SCX|t
ze8@Edr|eoQ*vLo&$#nr}oGyl_d(%Sl)JFBjDQwL<yj$tIR=275E_590#9rTJ;PlPT
z<zh@6akYK8hz~B)*;L{TIWl{hX>JPoQe4P!#H_1~2rfw76NRgz%g#lA$b}ETZ4G?t
zj4pJA`$A+!f=nAGFg%?HDGcXHHSgRtGZ{jYC#e@P)!tQVOJ2fTKJ^9q05~iC(K9dg
z;Hd;aMjzUv;Pd9xf=yWk>p2A*GXQD=3ce>cXNQ|zS|W*VCtaQq0i=I7WnQ~h9Z{0C
zuY8g<gg+v|8d?bJcKPgVpCSTqYbrb4ye@-Xwf|x5H%pSYx#sGqf|2lccxk|a4l~6q
zp<uNS^Kyu0#L}g)x%^~^K8_NPQZWd3m&QlPZqY&fGq%bDPCtYe#Yvvi7Fgo!l7p`2
zn<IR$4Di)h%=)&H2~>4C&0ri53$3<A<Lt!w_RJef8LUttuLU})uypMAU@+K88jc(X
ziG02(0d=@;81tqHahBctQRH#9n(n!H;|kugOOqH(OJ!qPQJNV}K@mg@2UEgQG2kAB
z!~_Z8MyK<UB`x2O(k)8iX84!2RBnyw+c@t_bJ8|VPvsM~xy)&mtW=xkb5&lMmMqA2
zVbfRj!r2k?zbi6cUM^O}AWCWxPbG6M8XAD9JZi*84RDG#W?^s6ZeGJ99wg5c2iBp!
z)&<)djxVs&1hBSO*HDB5s_J*c^Kx_z?AI{YdOF=WstAV_x2x=<(FfTHDs_5ouqDDX
zg~vgnP?5<;WCM25U7sHxG{yxLEYNB+R5P4sjN%!CcXk$A@U;Zo<r7giyW3$m8}V6x
zMm7b`*q#}VCiYwfwd}g!nNIZ`cBJ{#UWKO8s(~Yfqd7>pBcBA+_|y3%^TLQzmk!fc
z|E#EcK2@!&Mz(`T+*7>x7@Sclq-|0bp4ibm0>I@?hw!(14*RxV$<i|JC_Zl;kry=t
z<%Iq!9?C}aun^Vp_3{kMcACF$_mUt>ulGy>VW=Y32b?Gq2X(_^MD;2#{*@^kJOwaC
zcdkj4B&F0~>;7r<U{^HzFPgI&SVn_ZgX=kHrF9nDrjF^~iZ6lKKxhlcvtq+yCAY@f
zIwYC^rPfgVi2#QB=bj=`^%PZDs9ob!G?+85uwn)yfPO(JXgR8d;QGkgGTWGL8nEKa
z({!9AL0v(T=zli7Azwu^qNJ7JQg?}RBI$oNlFy%CxM<KIv2<J`KQ?+2)MfiQ{#s%s
z?OhNwsiBe$>8a}jXpD}mWw4G%67GE$*hpV(Np4*kXHdZ^2vGDx4z%GCh6KSFjH?%i
zoi6NGmxVW~F|UCt@IH2@Zb)Sp+7aG|`<YdpEIa=vCp_QpIW!iQG3nnVFMJLudaJJ1
zC;R>-`MoR1G{LCa6*08kixO9RteIb&G+Gb!0qz2lKzp8F>PcjGFO0A51+mV(rm*8)
zJruaNEjTw4a}60ngu30`KqvB#6m+ixuLN^TDEw9skWBgw)=m7n8zo*KX0!uwx81GE
zx`KN28RzBZ((d+IkyBrhe;rm+C;+#6P3hCStxZBNGYt3RH0S>iahEt_VZKWeOAu_0
zbA}4##DR=(dcDEbkbkXKRg!H?mCRn5_!sQmnn5uxB@f%;A|gK+rd7$jqOyYamcLA(
z{l${&=J}8`Ks9L=!??CE+iX;aNY@igSmajdRnVN_4*QRicokFk0Jl+WpKs%U`$y)d
zyT@45D);^xsWBSzVO&S<h5an~uSjz%$toJNR(z7+%Qb(3*jrC7!GFB^B%$~5rwP5A
zIiTw1Y_+aLfowHn$~8fe|6=UyW(hfh(6$Rcs!*8K5a8Hk<rptp1{?aYu*mwVCNDqU
zA}`mfS!y*`O3c2b;cj0oGY4?nk<c7Y#Qv31bLe!9Bk~WDo;PkpADt@v>Sm$3k|nMw
zLtK~~E{fV?7XAvUx*}9ZeqFY{Zpv;hTF2O{MsO96)_y9gEdMlVd*jqqI@!}Jyup3#
zYOl45I4&3wU{(~ILrnO%NE*Rn2Fc+&`Y)@@Pa|j-MUXMLnGHkQ>^I_^7%JpRU^c|1
zmU*r%=o;c|=kZaT4}$b9AU)CNhKSL%&x2ga^w<u!I-&FAhs8q>4dxo4!mku^vRqVB
zhT2Uk{WQoDOJK%@W##B5Wg9h|6^N-GXAw*qu@anD>>x4b{o>+cVD{?4Bzw0vDaPd<
zNr)Mv8PP<Rdly#MFs^HJE6vYw%IGM7lGF7?><YUjh98U};IlhGx^m2pRK$r{2Z@Le
zNqL?^@^^(V6~a?3HyT%C?hKqp+6?wRm^^UBGR(Oq>E=5#s0|6&rlJ-Co0ZLJL!(TP
zCq4kPFU>l{K+Uet3^})9D$pPt8vsS;3iQKIJTl#%*ZKIZ1bwzz`va1vbQY?^-`xet
z^>bEcE3kQGvgWLW2*YsIk6L$7li@UHF2}Y`8r8Ly#JBT#u}Vde#u+F_F1ZMg{UDiL
zqIGeXd01T$xPD09@Tckol5*Da%4ZB5C}^+R*}ZTwARkp`S9E`^=(7l3bvg*UImqXs
z)6tJ9?rzmgMVr^x0CzBI=`GR;z<(=tTap?A$BzxQTx2J3CR-H53RJ6c{rKU<rs5mN
zAW`Qw0O7Se;n(nB$-1oyZ0d$dsaM5cyE+U@b<=!klvy|%T#q5h(m1i1mTTUo2d%!2
zoL8T2#Xo{e`gZU~_@T{#|M=}lGQ{<gQGF#xU8>;qe9l#9OI%A>9E`dQIebh7AMlpu
zR3IZQJQCF!dV@;oqvs@yuj3ZLz4=`8oh)a4qk}Yi{?gjxBnvY+ypoT)w%`3h6CLTx
z>cU|G)Wsy+8C2;*N#s^0$9hTTb3MZ~ce1aB@<|9)$eG3fTR^10OU+3k0EKQHV(`$)
zDJRLmv1&A8)<!NS_G~Gb0yLZ|Lbv4+eeIg9FKBxM#;k6);a}NCL>Jzi7IM-GwaZV~
zag1|u1f*8BgyPG)MP3ze#gR?D&1x%r^)%SNwuWg;F$t=S>{<h}O4<3TvDWb1d8lpY
zTxh#evGwV8STAuA|C~Iv{rYoqbU9y<4E?i2p@PMd{RPo_zD}nNPuw1~LjFPPXOHXo
zbM23f53chBlCzQ{Mq|9C)M(g^)&j!wzx{vzKlu0m{r{qW6G!fI4bbVI0*?de4x(E7
z+5X@?h&Dp6z3<lZF503cu*RY_x>jTQ3A#@d-M}P+D(xcpq&mMZlBPP(3V3CPl~w<Z
z{uCG4^5{IHyEmH9MLF5uTD0|Ju_Atv+BUp)(9TPE*&Cxj(7my&)3DJkX(wJc5@c87
zL6^}ar^po}Hk{KncCE{aEzXul!owio<zfT3skE~UK1hk7or7M_@)C3(l@aGeqgWM9
z4AQ^-pZ`}9az|i}l*vMrL&Ul<jS$+ypES{TTzR^K)u9{?$c;DI0TYM!tCmpJZ}0C9
zz8u_c&DXQVC4Su5r(fkbf19uRG%?HheR@cbTO?sFrp0QSpL~1&E|<}}HrUo-<5hM>
zn`Vjv<xD#qrOP?hPT%JRhsFH2+k-p5AKcMw0qto)y*=j__Xhj)V&C3W{9pMK>hitc
z5AL>GKpOdIJ;f;ryIA9uYJJq{^W8gJ|NZaN4C2h5{K?JzesIrvGb`rBv^d+-|MKfQ
zgRi5W+zK{Y(=GDgyr3?*TjC@;Pv7N*gvXnZVZLSozswl{>NmSqLu^oD){xQGI|NM2
z(dK5DlVK=a>^&xLRNzU4IY=}CEPJBch0{7XIFJiGov*|;!zrmw8>WGpX6OJ3k7737
z*=d%zNSP^NtX%dfvpeZGXha;Rl`l~hIc6Q!JRoGRIn9Ef@r@U7%Vn6z&*nvZ>V5GB
zMg{!oGxh0nqzimlAjoZIUVbb#ke_xGDIf!r{Ulb-3S9`D_@Q&6|M_~y%-*b&JBjE@
z?tS_rZ+m$52aSlIdgW7U&h7H=)zh6F-K$+vif6A>0Ng-!r3v$#?;ErjAm=s1!{XAn
z`>ZbQ2Ms?3DwAK7+N@2>q^f%OOCHi?`Oqe?HBMu$dCxe<K_ega7Y8}d?9;@-MYQM~
zJ!}$H6{H@V7er!X<@?D~n^wix@EG9LzG@XH^m;LAzDCR<P`YEsAQpU5<jYkkMgVGc
z2B=a*x-92<NxjO_S^q?AVU_9MEIl_)n2C9h^<{!sR#X}atO((0E(nw?dD&PHyJw?x
z3ecgblnJDw32H3o=A$-jLALVeUZ!XJj3Cf+v+(SqK>KutCYOG7gYjkWHfbcFH+h#$
ziv=%lMHArCn2>n2u>*i8VK!-%PxDnY&c`ARTxX11bS5~$fS-pZj+hVxUB{Y|jYC7Y
z4E(ar#Aha)lJ!Of3kl9o5@rPu8Wv8&)!RgE0O+Ef@K;OrZ7Jy<UoqA>)1<sCYecr6
zJb-dHxL-j=Np3o*E51x!fcu$fNPenEo3F((*2PuySybZDyac=J2p1<?HOrz2h<b((
zeQ#hyClQRP4WwIDLsUCAVtvG|q?!K)4-X#!s-s?TmA=h@^PbUF&74DiDh>tosAQ^m
zORqbcX`0oU&@fux31{1!f~8p{VW68IZjCcn@MuT)L@&(L*Vdv+ItBhIVT|y6b*Xv)
zx$*_(nu<2?U8Xpx>P_hD!^tF>>3*=O=frc>tBCpp9WYdsCGldMkwLQ3nYzrf$X=xL
zkp22ye38<^KIVa+tj{E_+^$khmck&~{+d2;*JTtRSHFMNWk>>&(pC6-fZF6tfbW~1
z7MnEn>}sNENjU_sSeL|nrx(#)X=@%rSf{h(c$VuCPtMjfL7Zj99*KVr&CHtj2`5i8
z^F=Y8SVh7rni1ofmHwP|3*RTO5zpd2BbJc(X#P7PX?Y<j#H2{(yL|PW#DZp|*yq{e
zSWpgnZ~n^9Vc_+}QnHY9#amY?*$)HOCnXyDu*jCh^j#JZjn)&{ot#Q1t*O~9xmwly
zvLwO@&m%Tw=PU1D;$PS5;wUzDK4CwdiHkXbNNo$Q`US}_W)_CM(@Is)<?gNb%$#0%
z3yzEtDNaw>GOw9(Nrrz00HeBa&X2)+vq>SkOh^*%MOyA&5^L|3F)Jz)R2{rHl@u^q
zg2-0e7_rKsBKD~gyg~XKMS}a5ve9=a7>m<eO2!`sGOyZ1X~yuOEm4CigIB4hWzfaA
zI}kS4Gs`W|+)#`Ko{LJkY{#S9dOe-6blZGJuF_XuNA*hm^=Jp@ixxXKhe|paa6B`0
zPdss)Ox!VNg08tXHtUpmaM{Waq<;YtW10lnB-@n$N#mVnf;`hLme5bKFgM+aNa{AR
z>p3eGO^rJRj0(*$yG~!^Wj3&Nhc1#mPeP-|;2*0nxRreAb`6+_R={L%2G%;GVT`x#
zAoGXZK#8T1uLjIMw_0`KSYrFp2vZ83#UL1elN21@!qJ5d81C@pMh>-~?CzS<2TlU4
zE@E~_d}gbnqOy>R?^xv`Q5&X5*dx@X{Fu87f(Z@gkqf?X+*(lnr_IV%-~Kk<Zg;nd
z0Y}xFn6ZXcbR_+8n1aOaNU%6y6*&~Tv|IQ37w(|Rp`y&j%MA8^4$J%u+=)~;3@f~%
zy+igC=jWPyYWOZ)=6s-rDN;VmJ3o|L`lO4anueNknkKE<lJ?Q=y`0Se;W1|Smi0XU
z+gcA@8jvtew2Du_GwB&n*P!@zr1xW{juYW-%OJHYzQmb<d}_bL$q^MjErq3(nz3z)
zNY`3O1E;5Qvtu4P!617H+!!5g>{rHXEC~uKmWOBX@X!}!uGnFDpisfdpM|N~S!R{a
znddQTVV@TUxt~j<ik}|5X5P|XIg&<lz$#_0m01c!(^^>_s!X)LS+aBV=)ucJuZBm5
zPhagM$ALOCu}#5y<lgUx!8^ZULI$%~_EdbqSVaGqufoP96Yg{+W67NB3k!(WTddZr
z`l{%KPBZz{J*X-XOTbKDp_(_g%o!n@W-ETnpls~TS#CIwvO|9PF|>M`Yp*}!!y``Z
z8b58JF<$Mr(jcDT#L;*($t+^p7=)fSl>gwE2`aDI{#V0gVTU@Pu))FRkGm!`^7IpJ
zSR?J!O{(!Fy3E{{!7z2*SZN>wUYB-wj-Obg_IVxD=If#L%uRAkWFN&dq_bl)i%fIp
zbUmJ(SMq9>l4h!8?&<h7(so~SxLsnVR3+`3on^eqdf`=u=+cbCrIL4fnV&$rb}5Ol
zj*HXNlOkP0n7!^SLxAZA<>1G1{5?@8SPQnI0YzPZU^A1TEZ)=n%=5p?9>k>^`%0me
z00jB901xfoF=Rvr#|v^5QVVM$(6jvSa^M5qvx~4qoiCOoyh*UyOL+F!b@b&|s8L@H
zm-;Fm!z0|yH0x(@g`4vZS`=VP*-Iqc4QkV%_87$0rYY1Z?v;2WRqrLoP<fY)-$8|3
zS{J~{uNMN1%S+1TLS>~#gv`gPy`*mZl${WpCLOsqypUhvG6!6~yo?u3A0`gSTdp0|
z^`ixGT>SyQve{A=>-La&uc0~6Ha5qf^v|Un8hyxt{}ta`CwA~)?5a7GU2*5mFwKX0
zo70Fl?YzS${j_9f$iU%*>U%Em07rCW*iGu_ZkOx5`}I(e1BRu%BBC%f>fAUO`Mj^6
zhYNPM&ne?qIjlwcUiP?%T!)K=J4}lOLd8@jL3l#E&)s-rpG$fAYN`t!5PO_?5f3=J
z6e=wEdn0Ga7)8pc&98^@22JvgyTuZMmF1KF$lZ@JMYo4rxWY#272mMZNq1%SlMU{t
za!9`%ZqSg$D=t2{L<%O&tbAw%XL80{XZogdOE%F|9O3k_Fb4V~xMDJwW$#@M_oovM
zR*h_<^=r1`VH?~)4fi@6YLj;T>$U_W2X{WZ0HT`+OazXcg>Y2-dxihC+e#q9pgKba
zUJg>?5G^m0Pgy%<ml<r{*mRDf4yyfl^00Mi+;<LRAAI$e4fI`m0=62;35j?M=FY@)
zWj*vFpA{2!{;Rb+E~Z2qR1uISW4;UI>E^~oTS}Ltu)h-#^w)WLPHn9&GN8=3I3-uO
zG>+fTLh@vVk+4FK4)^8Mr_kp0KFTnU(bk}jVa-c^6YOe!qYK|$42vIbAy-$WlIrGh
zh1rt$-UXA(b^EZmm;*tP2JpW<c@dd-*vK4N{o!j4zLj_lXZSzx9v}1<V43h=B5PvV
z&;l?!85hr?_mJ>JqI<87frx!@(vH9zbyZoEv*XC=da79-#&3zVF4jxvzRCf@<y7xo
z*-T<%7kT=)3B>U3a6HXp22Zjua28NMOLW4PB7m+g3dcEfa*1rlabBSicc5V@hs*If
zl##xk)^msr73Z%q=7>FeD+e~!TGD7AXV7fXjLQBM+^3*o37%YtKHC-&0hl@`1MA!*
z*x(1=<G8}{FSE1tG+lC#7}oL`Z4alyVJ#A$*O2g)QW<Jm&r@scq+#^z_gEi192yEf
zTaq1ZRa~UV_7MbHaN=s6?An^~RBxQsiF_VSDwIbljJS-nI4e}u6w5;#e^r*nIA<M!
zn@`@TDPIloJg(;xlDxf{uWag6$jGxN2YOeA`p{m&vE+>CR0>;PmCfDp^s?t+F2$}Z
zaZ0>8aaCIC7MLfmFVUw?`^djVA3)dPjJi1xm5-WyaK+Tvwpgm&!o&skHQue@(ux1M
z;aH-QaZTbwgYBEWmrIe85nG3QA)p5*0p=K6Is-Yl3_f&%9;7$J@pEE29$WZ7iDPpV
zt(e7TY_UpL7NJwJ3drIQA&nD(q@9iPMk4vK5?8MBOc;Tord8X!tqx4(@NbB`;m1L9
zUD+pT0%u~Xu7u}1HXgOe*0-JnwX+g_DQVJEhs-)iSlGpfQD4Q3f52|4K~N4AHGel}
zd_4YPee$Mb%XGdziI<7!?VU|^SQL%dfi`TOYsj&#I5l>6popE5pp|3qgnIos-XD5P
zP4nC*orl@HpcOb4@7n9veP<|kqUL(3!taagS9W)JR&1>3yR<z2OjRBI`RVm*`f^zQ
zZMtFF=r%Y8++kUd7~lrn-TnI^o$|NYGP=I+4QM?@IyJ%x7KubsM&MAvRa%m4;*9T`
zyv;#RPo3{7A5grSWhvi1pya3dvXt;t(b|>{JO42wi;K>g6{lbgoPT`wE;GrQP9a?`
z+521=>c>o3IJ{EwjL!>J)k=v$>q{CAxSMHFEO;DuWE}WivRue*5<L@4U=9wXyJMDB
zMRid<I|L~qInW|aCQ8?(&p7c~fmqHZ4J9tk>3BWmTVQfYQig&drwoO3EX2#@v?7U$
zpY+`mTAQzEFyC=L10Kp<8H!{$$S|5)@^>Hc%4RszIbWZg3iJSt_M8KtR?GG3{1PnA
z1oAJUkU)#MgZaGAaop7C?_Hw`*)pA8(K>z6wFXP&Yo^SQdyo^MgP1ER1et*0U{cNk
z-ujwaHPF31#l#Sb%Z)1@jDx@kwqvOu^Vk_X17Qr*1t6A@SOqRlJr&k7VW{-TB>||$
zp1e-V{ERl>p!Ek3zBvRk42oqF-g@EXD5tAr^_N_o(#hZxh!%s3>|~Mb)Qaz@gz*D*
zl1$ywc3d`5#i>6#cBk40x{>G@<|I`kpy&9n#Yq#ta2xT-k>tN1Is#Yi1)GrN#!y{U
zT=ow`c{OAtu}HI<9P!=A(C)lYZ2p94IXwkfh?+Zk%2^*fumRga*V$E=5k^v@&5$GZ
zm$=PhT~04UO}o$c3h(zw4rLp|N(~#dybNlS943D)a&f0gI_&a*@IVkAjlNFL&WM3$
z?y9ReEV7k|%q%Z$3*%TpR|U><Vu@j8vq_%^iYGm1{kHbUCzy0I!Bl9PE}VsGRjjBp
zyyAx5n$T<$>mjDx0!q`B^#hO+Y&XIv*E8NOQ(wDy5j~0NO{?{jna5@sIJvy!f)%oa
zlzuG0FT{x-+7DrGWa`<)YrP8II^&vTm^x=RMW*esafP(~g%l>o580K5rtffkIfkz7
z`(?T~CsyF_`>yAMvN^FqZ}SCFu5?f=&-U<Z&&m!{DNCD_%61c)FtGVV`sUa*94)SV
z9I<F-X=E18h^DT4I6^a!mC2KbFk|o#_|3VUylAR4J{>r3;O5wF;cqN_OAoB}9Rt!3
zcTKj9MW)H<BWT`CG0<>G?+%?D!)zThTES7>JN`>(E38n5tE|fq@pYE`*;*JTP$^gk
zd0-Vo*I_nYC6mI!_BGr*`BVBXb>T}8w!J@x*kVL!1ZPW*76Wt)W2vY@4>v4*8&t!Z
z4yoLKj@t;@GR0wVVZ76v4#o1aB|QEq@eSOLq4JdhhZ9+&#D#|`6|dyzK<8t;+Ed8f
zKn1jYs$@sB0CNIRoq>3eNvgvS`Q)S4?RTV%fc72R<iwo@TT;sLx-%GCS4-MX0pSzG
zH2TsOIr`GJh5xc8A<g0Z&SiOLh~-=Mgy-S2;0D%{YiR}NCECZQQ{vXR*7>Bxun?uU
zc?)0YKV~tOHjT=I##LH^2FXKa&OG7n5!QtX<NS;Slvaxmn%`Ar(y0?OrI?NfDtSPC
zaEHnh7Ryqu9nTy!ZC-AZcH>2%e{0?gi*q>;Cm)7)_|p+PzR>PFJ6~O7_;<Z7S>3Pu
z`(M3JPSbKF(dWw*l7Ru8O*HXB&4NL)MwNrUr|I7>!)d{-;5SHD@%`OCpa<YbrQ1t!
zC54ebnPfA384^)yt<PzwfR!Xi1UmvpCp$fbSx+qm;p~eiQ!(F>XnfWJxhNn<um(I$
z5d4zPU%u{QqQFBlKG$Eq*3gy>lXbF0>fU8y_9C|54xlpR;E?qkz^jiYxwr`FQlRId
zImoSKp+4WNEyX@Xr+Tb($M>VxM~{XNAN}}z`1twD;p3;ze;Pje%i+^e(&UpNoj863
zz4v07)9|$$Z#sMQdkh;<j~js6jDrJ$K5=IXK6}&+?RTXoe}4Vs!N2_J=$f5jpZ<al
z@K{V+jIXzHj_S;pGhkYe88}>Ue6x%33Eo-DT%B=(wQ$&K#ZrA%TKIycRM0~-mz=Cu
zE2<+`L>x4NOOo56LWM16s_%s0wL)UstGop4r(BboJ&?UqgS#8_;<0H|1VgeXkTB3=
zTCYh8;8S|EVmK#mivvI2J9WC4T&#f7D5k|iS_EVcdsw6cntnI!%-`Ns2+N@lcVQh1
z=Nh7~`|j)R0WV9Rv2Y}BS~@qmTDh&j^%Iw*aVpXmp;9t$RP*33hcBNTe)sgz@W;bv
zkHml1-W|82m+dzr4B?>&sWuUGL-n;%W&tOm64&`wDIiiGNw>yt*_tD>w3x2X0HJG+
zWgz~@--cy?_@VL)x0NuoR>1j`J5Fruh%~X%7$`0UN=RRI1HUobZhk__N)jR&%BSmA
zg^d>92|Gc!L0YZD<e2}wIcs)Hs^DmO8icYE>ORLp`|<MA`93=?_7#I|1FV$V90hdT
z6gG-YYF=Mr<r}YB9(vlbBao$p3V8G61=cxJ&tEocG39XD9rg9V)}28(KW3dxpFd!a
zpD`6)=EX++6Rkjf`c)luk!sFRTuNeJkx__f$~+}XdHx?qn=d-fXU66tQB4bnm4=Rc
zmrf3M=$wJqp}*Dy>x|BZk_!I%Y+9UP2P*H%-F9VTS4lrE<qlOMq+?+;nWui5({;>7
z=+c+FzW8sPC-LYz*klU;NWfT_mE&{)`j0hZS5IJRvKuc?X{o~Ao{${1<ep|}X$+qo
zGr@xAZMRqYzdzxKFyldW_5otm#|-ynhWlw>6qfyy%RV=YPx==DJVBqn!ZW1l!`=5T
z>zi)0>t-}B%QY+b$I~^u5?v<M$cjZLp_tRgU|#3-f39KVYuwo`CP|#ac{5Z26aLfw
z;Laa@Ke*j?DKaad=!Q$~)2&+yJHgPS$;8=$LmV!ytkZt{{CT^V+`EIccTw^`DR9<U
zpzCmUe3XTuhN4)j3EZP~i{AmHf(H?V)V~k&3%j1m8HNp%GbmEqrv)7bKzH7|8|7$q
zecf2Zr|mmZfH;f7X|=v{s0V8F!!6_}Jt%}Ql5mqS$qG&=Y+0xEJt^L0UFd~W&f@F@
zZ~1ts3=u0b<I9Q)@+r;L)S9qc7D!&m@!M_0o(|x;fRGNCk4LXGJ2B{tDpN#BEyt@|
z=PQS~2zy%3;?~Yr5{MW$43Bhj9@^wEoGb@Y%NaI*4ej|6lSg@<1`%ST!Jb54Gdi2x
z6;%JFkWQwu)_-TsX53wdnp1tjoc55Z1CWrJB?dEeDxYxtLT()ncUQl%e{w$Kzy=UW
z4b`7DTD10u3s;5tpT+mK=x$4gENFAnXn*-iEV-evMIK1$p)2ilyIpT}eE`Vro0(h3
zQbfvfbcp_;P8@7wl-v`QU1*UgvgdoAtxqIlv|%Dyd=TeS2ynqP%Pvftg0|cfvkJQ}
zOx9x~g!4?JJ@9ls!HyGL|J0Nw8PsY0rKNbcYszaa#KUO}94eeAT9cnpNMRb)OK&XW
z?)j6;8!g02my29x!y*oyh7`5Q=;*F}5^yROkR)b+zVZ|i8_S`OeAM0bO&?p;y{gl`
zI6MgB5P`M3ZqnFO7Fei3nJrN#4%9=(!dUn`<!5vDLgjji3@^=-f_63=z|{mD1}f1h
zQU3<M+;V1ePn9(e>~X<TiSriA_spp;1E>i`Gg9+g;I&k)p${t&=+A7rJD3B%-_6Ov
z_O03~z*m;GsMWp8-E&4XTGDLE?lC@DnJ%E2JvJ>`C`JTu@Nw!hA0(pJO>M;jQ9@W)
z*Kz5e=;AAqpyJf43u5vEb&vR|bHzbrVY8r?4;0x`QHVGU%892UH>!+!Rv77Q+sAF1
z$N5_5Yt8{;MC5te5zK!w5U9^b(q~-()}j=ZfzaVD&dwM^C}}^a(GzFOToBis3w#bH
zwJmO^a;#KKQF8p3J9o_7>ufo(&11L^y6hu@qI}UBDpaqc=VWT(rqvi^T_v>f)ooWL
zcE@PFM>J%a?`eI)Ie4-?oEJlO9UtBJ+|#kki%D?mF9eZ!1_Q(@lf%DhA4SK))GU>=
z!DGGpfbeHm91xLsHy@B+|7>s%8nq;mf7^8q2wRP%#?7ZhTtR&+=!I}74w|9q%A{dj
z|E$c3w>jegG&zqW!?zmw^QisM(+I5{pRb&W>E}2#zd3#oePAc2Zg`fYIKtDN<)=3}
zaiet9blATB>fUX4-jdEfQU1%WoV)ZNe4q{v4p#YsSyf^oMa#68yvXNf9%~(Md<R{^
zmpm~;ea%iFYL-w%yJ-G-i~c0g=XR)221;)`A{%-vpH&i*>fJ4l2AAPIEMrnsC%6T3
zG;YZE1v2@nD5hQu2$d{{?l?bfk#}-0?+lXfE}N)|SAk~m1D$I;dj{Kix{Nv~;>dVR
z8=Sos<Ho4_KTz-9vE>IE1Q_4N5kMsoYyGclV%~E$*dM4LKrZ7rgWEbBd*<iN+?X9<
zeA#1bxK}*NIWCsYAj{ixJ$GV}@k50=Yp8YC*hN~33Cj<TxT5q0{7&Y0Jj+NdxfFCa
zlH{fr>18S2dy`BdEre5Z{1^6yS?XE%K?VbtU4gmb2_1aFtv%1gj#4EtLAc|CAm0Le
z=-yC(s3tICVWL`Rsj1X!&mAYKXF?&|C97zZ3&OtlAt5Ghi-IH)HuUt%hDn~RN>1E{
zeRftr3}EFT<Y-B5HzpawRve&GPtlgC8|gMbV;>88({sDGCZ32d#(UnV>9SaZaCw+J
zS_E-off}(oDmin<52nR>!nma}rWea135+;&Kb`h}C=eDE7;@Np-&m=t?V)LO4xYx>
z@in6K2KqT9%M=;AKIc6Vy;(+&blU0~Bc?a=R8xN!7QVe|k_iV~b*9BiIRKtopWtt>
zVTX9jylFC(Jg|P1*%`Lca%{)^9Sn&OKbD!qK70E&yu6Q*>BkG6foeHWn+Ba~QfTfE
zYg^tc3~$ZS_kC%gU!3-R1Ew{EJ`fG`r2&rBdKIKO^jGlB+Yai5>d_@kq$VC%ppBnh
znw^_BAptx6;FCVGS2Pn6(^v=QFy^G9P1qB`q8*fOD^?<tfHcYii5Ig?Ygn9y47{#q
zx~l9lVrw>aw1Kk;=7JUY2-exzSi#PgnP?zQpLNS$6x9u%v}wC@J~BUDDA;!QNBadX
zho&r>gZ5P<#U!?>kKnwCW9_lREj@|XdBbWP#WVG|vNGdhl3Cuu+FsqdN(~k7gz7Un
zB$|HehSwmM9lEmB+MI4Auz82BY??+}w>uSZ5>}8#meKRr{Z3sY9J%s@I(8Zkymy4h
z=3uzxdLdX=Pfo32DLan)Y=u}47$}v*DNlo9!U4MGIy_ulSm%6U_1pjz;9@hFL`;va
z11&Ln_2k*3=dWLl1Yf|s*Q{ecERos1aPE$)qljJBx5EqEQl)=i%Z8XPkJxWqc=VfX
zB=$HTTFGin62Rz`B%V`BlQ}?}VCyz*d7#NK!;GxbG247xh<MYiH-(-X7yvQUI?-@>
zt5Dr3dk@e|tuwJLX$j_0UQ19Q^QdJpbK&Zxa8aCjjyoE-bEPGFaj-4ouK-y_W9xN3
zNjf_8z|9{qiNSnvbb`Z-$=)x-*;5;FOpyi6!(k8(L)Mv<xdQRnPBKZ;!zpDa3@zbX
zlDHf}i7R1{r=2!4^oDqDzx;aWUWdU`(ov60(bLm}Ptj~v`W}aal#z!HQ-Ze?gg)5%
zXprkFDqp|!U^)x8Vc<qyEe!JcQ+C2@sFds!tgqQuc;;X_;RI;OvA{imfvwHU?crpZ
zp03ymE1y-(C^F%;XX^cyK3_<8f=<WfLW(bMh~_Om<&a9buoe>jzoYef8&g(gi4i7%
za9HuwPSr(O{cbfVB5+GJ;_E#D`LvI7!2$IeV1ZEK=DA;k%Fs4mJ;BcCad?R@65mSh
zwAXz?RdWL$I15N~_DNRv3)OELp#;0>P{4JtkDB;|=w0TC3inE#aZEP}dYim3wKR7q
zRKfWo{GnuM@O%lkFi%E)qV{<0M*Q_FudNPdlBSQpL9cy}sk?11^po>b^Dk>X!oZz9
zc;&Av(-S679Jz86WvUZSEM#71m}`#t)vH@FwMVsy*Ja?$=5A@`R@J`jy;6L1Av?}*
z@`_StFa4?Ml)N8tiagi$<7Ct|uT98(rR#G*U$wLBm?zN#KCr<&>iWs^g;|jzW5Uz)
zBvTSi<iB0M%@>Po(#8^DzVY`UIg+PAqzm6ADbY!k)@b#W#4jtH+suWDf@yA|<ilAp
zXaBkdQClWll4xXz0#U?^ARIn94UQ>mG1qfrMq&P5!V}o5`?!lIyx+thTwR5+s0^&f
z$rtfp6~>kEA@a-`PlEF*IWMN}E~rxp6-tV*o9-M&n>H|f`RyrAP2q`Y`#Y;*u6lCn
zV>@u-)x8viLTQFOLseRUHKLgd*)5g^LR9aYk@KpTB&d3z^p7fjWn%1i>zw@+%#+8X
zN6pf|Muq6^k)Dh90Z~l)P@tt=6~*)<UB2nuTFGDC1C7DqUlp~OI_-F>J&r(TqABiq
zgh_w@1L?>?ncT8Zsm(1Fc?Z)+^LHK=g334gks4R#-AUbBJ^Q(HRx{r=-vkE=xw>U{
zP^Cy{$b=!-cU<UjERN0cy~OjQfS92zl;Q+S#qdPH-z>ej$~W7k`%cRTPNOG2CeCw`
zW)<d5=sKaBh591Z^yPPLa^<aXG-4U?{n-%Irxp}V-1u!Wj0$Q7`;B4SQqkS7_agOO
ze^D$rK(s$zvPNe`9qX%qjCi_<!+#$>;?r)V<R1#MsBBUfp6E7n;~;cP>mXkJdYk+Q
z2mTR-!Waxll%gd#YZ^3hw4Omx49gs`R?F3R&388zGw^mS<trQ_`Kv3j1TXZ;-20Ja
z7}Nnc3ENll$?*%~)jusbp2KHQs~$3S(s1ag5wDN7M*sHz{{M*v2B{I@DUEOk2f6k`
z4j&gDE1xjF?K~vg4Y~ANzGVMgYVIcbN8B~(h=AKfjoUTOzzsx0|I6XCr|xsC04*7w
zp-{Xc`a*{NiZ(hxAJqRJUki1X_13p#j{(G2a@m7PCN6=0Xj}+wov3%%OU{KYWV%eB
z#!}a@0^HtI#;LE~;S;-L(2ZlJVqU!|KID7*zaJX@hl)zPi|LfVy~I@s#49%o>0|=w
z)W1UwckT`4(U2cWXE;8Z5wx>PuYTk@g#$yK=a5J+d$6oC0!r9+VOG`oyHpQ=7~0|A
z{sNe*1;Z{|Z59S&j)L~BrhQ|uYc_nlT)a?xlo}eQWDy2<fy`FwD8?6_E^*Wl+U%nt
z#5mLKsw<&3hdR|3&m^1o7KjbXptryb38(@HQIk^ruIiCiLuRS72xFw2=A6UaRgR#m
z;@7DCkT!nFjN_c8v0|xI?xNJAkKK9WealtCU3N`;-9vm>Hdu@B6^9jo%wzg3_zKnW
z{+60=+<c(j2q3e(eqFMpi$EKqS4A|2C0xCE#MZ8PJl*sg0C%r)`IvyBcc3)SgCMdz
zrv1jAo5Ny0q>Fh^ns8d`FgjmKT3mie?E()NJax`4=-XvFo0|Edta<<IHfM(nlF(@_
zfD7d~cE0ksrD%u)d#d3J5@ZxSF;vFNV`%1e6^sHa!@P<Ka^=RqA#LUwjr6(#MrlI6
zohDv_tR!+#Fe$VEvz&_6QEmY12tE~13Pg-u3k{=Q@|s8%VaZ1xTa)n-_I|I#%foeY
za7s{0@X+X<YAMVhZmgy`zsaS>{MF~V)`G;FrGiZGsz8Wx5ckzkFPJu5qV(M0U7X1z
zfHIR{7U~0s6Eo15@^d5+${#^u1+lv`m)A?q*Rxb|Y>8ioeyzQ?aHA()E>H+Zi<MgC
zD+Hm4k<NR=kepl0^3}=|y04!|1<qw2Jl!bBoM`<9m&lnc>Ay(7Ub@}AQ#L?1)*z~w
zpsSjvxR^HrY+Q%s^iTWrRbNE7zNWWV#41)}@eEO8fV3R&?&D@1>6L6!DTC7W*hyS&
zWptK->XOc}ga9=3^lQZc5iN_PbP2<B<Vm+XaPV@PTm-I7K1M9lyaen7l)n=*)^a^|
zX+oqUbXvg7z#y?!T&u?{Ej|e{KhXAgJE0+Z+W$;9@CE_M?v0_Nvuvk~itco4wI$EA
zq3c#VbUmxr?<%u<#`K}CS$nVvUq)ZY;HNuL(H)iV>|2Mysw4>PSuE29PzRi`Lh*`Q
zkDW^u;69wgpM%0@EJAi(u~^{>ij!X)Lsr@(o$BjgIQ9s`;WSj*FN*|i#(4YMRaMQe
z6b7IOC3L(b&6i6BV)WPYja1zlglxE?Bc<;e3dzI;j3a0gJBvzy^E^2QKNf%kzHSOZ
z{c4D>hVHB3I<E$GMxBg(Y(1mGn&g$^W&;;u*3%QY3qy8MKvuBxzH1Z(a6URtspCCV
z^M@;zvKk_)nLk#$3iN68s}J|jzD4WaGNoP^CvC_L;WOr5|3}6{d#zMeW5#R$+fkB_
zS<4&hFZ@=o1%g{s65i-FFw#bV)oOv~5~`$^nUl1F*p3*uA6#uI7h$9rw)l-0V%bk8
zOO4#r7<ym!;w%ld-$tMSVvLk5&?y*&X=^x8k?zMn9Op10a6FS?Aij(btBwlmMl1xw
zD+H-p!kM}`K1~p$j&;$q$bEx=!99~JhPe}qWEJ6qBd%2{wjfn5;r3Qp>8uNm`ILxk
z2egs00-fQgHtzqLnryLzU()JQ@Vk~F29`RAGz09IgC>r}NzTDP<%YeAIx5XX+t=O=
z<(+P1JJ+)7)cHJj$lpRL6apY!x~n~%RCvc&xg3HBvpXTX=4!d%OWlYrtpTlH#XvIP
ze3}w}Az8bLG_mBJ@pgXk{OA=YHexkq;iKfdlZNYWP_Jy82gTx2PCx*^=V1s2c8ALR
z>v5li8j{a+GlZ5!1O13nJ)DMX^s4Zec!Pe|2nb&id=Ic;VB{Ha){Ug9-l%YPn<^am
z>uEA!@Q)MD@-#K9Ek|Q~yT9X{Q4F;)66op>uVh1u5pvV+?vGS0)?3`U1@OJvGuHml
zfwk`#Eur?^LGlDCB)~xb$Uc2NrE$IFJGuq3ly>_eFb#W&WJ_R1`*40~$`;2JTRRi~
zXj8Y;lkF7*92BbyKuRHAKdE|&32=%?1gsuMmZS5+RGJ%W3II+5vkU(O+S6>Yk|0Yl
z*Q&RGf$B&gM8`1(kq5LUOM|MS8#%a%3TWXwh?ZPtdkIwx5JsdkSf!q#1e1)q8p|*r
z^UE@bxC>Zeb$+eY7_B%epi{(YJS{pOXbH=+wSa{x<yE+dTJ7F~B~D3!v32M3oOe!I
z!PnT)_&l4XP2%NUPINdd`2!I$(`6YuKG7(@%Ph>&08G^lz~4dj5jqD{n-gOTeok<X
zIBoOKP9$;ZID`fHkAHZ2Xs-JDPvZalkALd_@LVbF#lCu$OPJEL^!<SDIdL=ge<9Cf
zI?V?E>+UPLo|6BVt82`aiYYc%5MhW>OOqu>FFn+J5l$Xb<~Mm#CNI*mB;jC^bj0=6
z8NJ^963k7xa={p7lP)nm(QS4>;>lyg(skev^wqs?@=v$+@7(()c{E?o?C-~XBOWB|
zI?zkt1P&&km#mk0kKK2BNxpb@ugCTa5)}VN|3aV~J5yUNFH#`l%#+SbI(F18%$2e^
zn5!QPe=WokrtqS;Q0OKY{4cw&92V!#9>JBT<P(I)!T;oQrOCyxuk=q9Hgg!4SzC=H
zE>ngs=ltU=sU4334ri2nI$qi>)YF%G`tHka*D3Z_4Af{jE%-aH4)lE;{6Av0Sw;~K
ztxqCdHWQtLz)qER{_8K)YmDS#Piy>Fs!vHen4@m}z2^F?zc{&stHQt6xtd?<kN==}
z+vkdv4zC>^Gb>cY>7A#>;SiWRrrF@U=cYmU<A5Ik<Ab%xFbeI>Bm!_0D7iQ2Z{jMQ
z3P*uP7wIJ@@M_TLh(vB5L?K&?Wu_qjjEpv3)g*Os?zbU|R`S8?mrsL~;^Xyln)Ls(
zblBVl)5Rio7fcuV-o>6njwAUC2oDQ(Y+mm*OiA)zfu+{}fkW<qgVl!sb`a(|+yiyn
z(GMrd&IjPCwGWbecRub2vf8U?I3C@Q^IbSP=cm<Eyo!>ADvp#X%CxKgBhV1w<-I!w
zPs>`gW*r)9tH$(2^XouM#aiIU)epQ@*r_VjA+Xgtbe50OA&Rrx<)s7I@^Ea<gnFzd
zrj5B$=D4t+*wX|P8`D^{N{6G#Dfv``#U9K6Ft%t9iJXkJq8EkJiF#dPG@1h+6_Kx+
z0gTK;g{}bs0L%kr%@6C74R3rJFwHN(;r~(Nf!B=8o8yj=vZXTX;tKPbbN?K8#1WT$
zlE?*@NbU~y_d~>F_9XswavKHxV6bk6epat_-=a4O^gmb5BChIYS&QxsL8`V?_v8BW
zRfen8AUQeAV{UjUlB>x0E_F%RmdnT`lD4Vd;Y_3F<}VN(9feF|!1*!=4wuACEG*M)
zvb?P1Qu?LIns|@DAX)58GU`6Nq}K4?qeTArE<gJ-+J(#1ytp`>rf;*B=6|@sj{FL&
z?urv){Ox>GXLy&<7dJ^nb?u5@0KcX@&)DbcGi(-KJf)8gZ-yvYaC%lI9dKUu5}6(a
zw;U^(Yc?Z?U}tV}-lL#OJ0mLSX_-qL5@d_oQufM>ZXEl?)_M*pVg`i6iy6;eyz`cC
zL3=xV1?DT4`X@kK=>|@Tg`|JIWQ&UBgTBdlgZ!JHIO-rt<dIL!7pFK0je}ys(F@*g
z-69yJ1Rcl=#-Okf2DzEWF57b5yM%6>p~ig#xSepn2}4Ja7AL+hfGwS!m^-6`!Vi%c
zEvs$KUK=}rzVai}+Te>p44Nj{fQ1ttqMGvlhb(1BtXt>&M>lY{uXx583TTK~)-0q*
z_)*vggii>FvWt~*&4@E8O4P92_FhTAM_!t<2maHKzNxr>2y1;(tYFE)I5|feBD6TD
z?KGYN1RO}a%)wa${G%I1U%1>v7Rf2m3dgk`*85{YD-w%4=i|ceWL$xF!@6a&**(}e
zv69M*mkJv)+EvN9u4S`77k_Gr0_4+hk7D1*)5?t1!)3Pb5cU1nkead@U$bdsNwPn{
z{R6a9anrpw6zo&>(X9qo1xP3Ik;lr)kZ;=@UD<MkPcG5K9crQm7lOvVs-xj3M+Ku|
z13cBI!AhYIchLu+jiKFpLk1qxwl?AKdVEF?t1BE_k|48UHME(7J%&DbT_!N!5UTF?
z^sf@7{>x%=5n(G~waLG)sM;h!5=hM<xKZr7{;WrEq?&CIS%ECKAl<qd$5jXTxvYsO
z)lJ$m4>I869H4p=pEZF~Aq4(k>?aRtgl}l=vHE?TtXGl0k7imD*k8$QtU10ph0Iyz
zfy-x9WC@>s4q$g^>o57$YkGr(K(t(*onn=%|8gj`4A=f!5u-5SNK|<=%`%DaA^sPC
z-)wIOKm#bOr>X`~ZQu=>Nz`M&y<Y)FE$QT(1_o)>fGG$qa$dnnwJ0%!3D6lpYl^za
z$qwFWl4Im9lU&+!o<7JVLE54uL88oOB!o0WOe&hlKLARSUF^d<9oGWuf!Ggkd7xUZ
zv4131EM>_2<?t8xv1Pa0{H<9ttahJdq~XhKb>M?Z0`?B{I-lp7Lz3o#MZyvu^y!?-
zh@y@PJw1AXs04X~&&<H(5=6T;EsMHxsT?uS5mKE8uU<a=-4P3(GGiKANL)Ds)i@`=
zz(>Vq_$nSq8NAwOTiKk}Cv!QiU&P|HZphzQB!}xN<JbfpZ}yAFnGoe@z|TC<oIf7G
zz6!y$1w#0h<se|plQ87Oy9g>@q{bqNB~d5U1Ng4io@*4!N)eL1gRx1Js{gE>AjkO!
z&{`KH8M|vqtK`C?-+s^>Y#+^y%~ZwoN~<1F)gMRFpN4)$QSr-+U8NkLmynFYp}E9|
z9hu)o>VqbUo-iAKI;!Pitn(9ruc`&<SqXzgsm)B_aT?54JnCS~I%Lh0ys=N8JY>o7
zCF@^GzAq^oRlimb>b%y~u*}G|%QdQzb8{=H@5Mdok_PA1ms$cFgC^XjpPdLI(6%j<
zG<5h^*iSxC0E{?omU%ThSTKNi5+#AoU(43ko_}LWUpS&jc1Npq(_L##9q;#&JH6y?
zFS++-z$q@WPA46YduXkj-2WEN{>ks~tC!sFMvXt2m)UZ~LCIAWeC}Tv?Kxb4OXU5=
ze>Ggcy~yw+_U&bmx>ExIOXNl?N`_%kcVo_UhPrjdqL@LMYfkHYlNMX82VpdbIes!f
zrq{NHi6?CtT$}FMO3t^o_N{FJkIm)nD~lAX-lM;%U2M(qLQq8FBfe*<67wpmq9Oii
zqx2tT2=jL@=L%cTBjzRm<-+S}aVBDv_omgEnP#V}{yCrNoLLHoo8tpaIrqzrKy!Q$
zDwnO+mKgqWxM5Ej%3F;_62O{pMG=O$lsiEBxea1}FFDS_;Mj6obgaZE9(#DRy^~GS
z@Sr*^(5GOYqen`DRf+FYDwv@zMvQ?0ic1$`oTxxF6;Jsp2xl~~?dhN*Fg9+T3uo{L
zW5_Lp&R}Oroyytl$S*!*J33@lu+SD@Sug6N4|u{ilMPvXBu^{{=s<`!rsQ-f$*<Y!
zH%?2ztkEeM0L-Qaf+NE@%ipp2TzY<*EUD_kLD}9<ZfpL${%Xml+b^XDRah&B$j7T#
zQHX3uA5WWA9+FxX5W6$Zyz4;LH|jdJApi~<plAPmg2gt_i^r9yMi89%8=xg{td>$7
zQI)G=;bsIU(xQOgsFEf5r{vHy6?*_ppDk9^(9x>mq(Lbn0izwwzpQE%Rh6`CpWIAk
z!p4Ea@Db7G^lX{V>X(X@9O@SmhuT;e@u=_{h~6<tnnN0$nq1=;A!un!VF@g&uA~Eq
zgdKzzRK4uOpi-T~`o7Uq>r_%8Iww%FN)MqERNH8v4|4FciN+1N;V@k2iC|ur#S|I}
z<q2s~@<q<!54K&|cQtwa@@Xk)E%NzkVH+dJcoSSMt=4lsu67G8Qce)<5=<EKhlt1j
zu2rZkzyCi{@g+9p6(_-~T<xZ`(*L+!B@npfnge3#@ToP4`y))KcZ#V6q6~e<E78nO
z3!w0amK}u-n5glEg79ugm00kfNJ|bL&CiwF!Nv#7GBx{G&Z@=K;K(YH1MOfR(V}TD
zC%%}56K~L*cCONuerCTGg@29*CCMkJ`CBzwGNke>L*CuIoF#p~-7M*Nl_<***P%B|
zt3>oi<T-hlr^yemUcHF4-Yd4%2k}iH4+#eq$CYX3<FEot3oa+6<drFV9#wm;1g!LT
zN00^A(M7p05jyB+sp6Fc4(qLLK}kNWag0dm;bTA-S+SUAF0afi^DQT7OK>S(0b}l*
z6A6nKC=^u}5~A&(wRy_0bBSLD{z?9KnH!!&;BmK{4Ph)9?8h3gO=~!();hepSzny`
zkDeVRl31CfPh{~q!@-u+is?kDuW+V?(qT>ZFtTfHB&@j@wbd^xo-R(#E#7q+0q=5X
zU+LN4uP*2LB|DWTIY=>|Yi<J5Nw#UXw)GNeGea-8rQGK_v~crpzRvq59nxLiP!L!7
z>+Lp?U&$vd`3KXCz$HZz6iY_p*sto&P@a~1RJHu+(CF+qSMK~<%2X;;gPst)OgbRZ
zHr-`6PShKI$f}gw;H%xi<E10M0qRq%>Ql6EK-UbES{=VET@UBLow)x>zK{v*dKVKn
zgs^don+AaPd}Ztk8ycC+((Y(S18D~uXyIa+S-NDPrln)k)B!clRXOlrIO_n6KLn{Z
zI_N2-*i{3k62W`6C(hlq8`)5+=x?jMJY}cWuzwod0CLK`7iVQ+-}m+cV_=IBBiMvU
zf?p-QbZ}tW%5X0C+dW>UZbJ3ArK7TVSWP^AOHGL_t-twDSk?EVMk<T0S)w(K+i7iE
za^gC<xq30v%bFsV+|$6dTMA3kn-!;}bHUJ>REiz~&{p!}%Dn{f8(<{slafX6RW#))
zZ&Fioc7Ckgv*n&%wC*l;wVR8)Fg2mCMTKE;g4fs}044+3d6xT*jmP3+CfN+fYj!x6
z#Dtp4Ok?`he^*-x8j)}i1PZTd1($rG>2(Qx3$9WAgf5Q(u(ZUHm^M1+U96<Y;8<(V
zlkml4aMPS%&1Z#hsigzXC3_FA{4H~0{7bM2SZ+VfF0y4XC>GXz>44h_Sau?>mmvoQ
zLVF5hCd8%AdOiily3-Gc70~Qel1<@dZOxiBok2P)_oZBD^%`)U0UlKI|Hl3Ux+6F$
zAe(r)6xrBHsJWKe8DI*vTxYZQPw#pH8a6}Zk`ahXUGq$IS$_axUd@CfnFpFutDIDE
zE}cFh2RuP^!rih*dVyDA>X{}UqO=S%6`g<<G$gMFmUpF?Gj4%?w&!vZ!BGZS34t5S
zDRFWx?qRA4wocY30=2hZc!gxo=XI$a0+|<KH&cOfB)J;XmK+PV;bz#xZnBgF^^)7c
zX@yS;m^_&flo^s*VQ2GsVfXC%_&i4+9~ULP)u@`%`-LKx<fSSaedb1EGdVSeM3$L5
zxVo>7xX8%CR9FsJGfP5@&r2{)>%8=kw*I8Er$>DxrRBxiww#T*%D4caMuP$_8P>Mi
zG;tZc8d?!Z3jVV^$yZDG^J&x}d>+)fNZnK?Hk8=z5UF$q$!o#Zqf=;GF4p<T24WfO
z1OnJ;rYS{E8OOpwUxafUuq6NoGqJ<Em^P}(G}GcgT{F9)X^96euWdCSuXD$XlV}UY
z*|P)NW+?+RrO7z8s!7n{+N=b@L-^8%J%vf~s8qg8e&h)20OO^{JQN;D*wbIwI)`$H
zHASC_Hg1|5$kAjnw6_6vZCFTv|I8rD9=F+5+kzda!v(IljPG32VP>DGoYBG8?5D3E
zSJW>&%?>amzy&)osI@>R8Zc0bS$8}Z<Dq1B0(@q=B(ZyyF}fFr@v@1gPv>P`qOooW
zWy8t|WoAY~myX-kn;`<^+iym(N9Wk}mObJ$G)xO~4w&MEVfDmJE?HBI*zw$k)3HVE
z+_17?Nm*Hu98%~`*?|feps-^rc&g^NWOquR99S{7G#`$Uem3;R41z<fV)#?j;~!$r
z&*I3q>ZuOBW;pAdX`Wd#GAURo(u**iy<4JlDP=b}aFBXcgkIguEx!KG3aJxa_~|6o
zr~pPl*Kq9F!o`A0I!8-IW>H3tY$YU3Ik_j7P`6#MK_VwJ1KW1tm?9OoTP+2v<|Jzl
zA}9e9+vz4B5NIhtdpgqBHxQm^tx;V40;Mi_fUggN8jpA6@0~Y2_mzs+*iq#{^5J6-
zLYQIhx~~wy&97^3Kej%K81*=3YXjC@bwP8l{Ykc~e^fu=!dUlyzklbp*UHEO_3dqU
zaMk?J7qf%P8vLjKwm;ba^6SB!|0Nc~%gZ`N7h+7I26UVUTwtpZ-EAI9TfS)@aOq?F
z84RNxj-xFDxm6!Wn+L-0tFQeq&WhF|9lr&~krOpvwroV5))%tm?K7g$w4;cgR^p)D
zud~9PL|P!MxUF_)mM)IP!|4qhP*2lwhW;|Qh~4mo_(Id~<iKX?`_0S$1ql-P_BZ#F
zImwz-{tKPKIn=Q9s`bUkmOX239fkZXC$>-nX|sp7l^LF;Z?g?U>BgIg%G$KcKQ|~!
z(?Wx=J*M0hILbnjB!#)9GR2M-ZLWoo#Wsk@Z9&L=n1}ub1Rs0@d^g0go!jjk8zuiV
zC~YfElThZ!ua=j>U$*~}LkG}y3CBJW20Ox9r&c&fA`<Or7R&I4swnB`{+e&Nr4(6S
zIZ131x|++tRAR>(Nr?H0IzRPXicBX)jl#V)svw+%NPeE@w}FNHTYPiw?QxUD-LMvn
z!P1$jCZ1amWYz7^V-ijhh9OW?SyrW;6z}cTNxCG;{sryV(#+lg_13%HnWULJqdh8o
zi}(0Cp<~=~rxWL}LXzpp7u1V`WQYE}gQNHbk`alj@(Y~okKg=SH{$-D<*;=#4JIx!
zUX;--8F)gLa&7#AZNTNXt-qyg`ZZVo*H~h^Pu<!c?~Koje4Op?^b-B^&d!@(dwK8d
zsY`R&=N{G8Hd<N;Ztwv~76_hZ+d#@|hzMSqIp-dYswz;=gXFMO@{w;L;%po6j@AbC
zC=*gj9)$p3BS_QsCq!+T17t|fBFspw2(mKtSRt$=mq9WW4PL5%!pKGf7+FiB7Y~wl
zyTuYB7@JuEH-l1moPLr|4w6*a4)=}x!zh%=GQCiHuRR|NHp)TrZNJqDacj0Sh7ZIF
zwwXQrCa#V4^2=;S?~=({;8#>tP+C$oQEfsMlQIeuF3joTJUz+y9-v*0DAIZlOU|70
zz?Hr)C{6<~$Q_t&kFr(ARo?9mP@q%oUyb>@2{#*atF0;mP}_Ho^F-k^0cEDr^Gdmo
z)%vRh`ZG1t+Vso+ZEz0<$;o=|p7IeJI+X%5>i%VE$S()UX*w;lmfvos4P?$Ueyx^+
zgFu`RW&TjC6bH$^-_fEYq(@)hzU`hO?blG0-Eq~nm_u~-AQ-2p4-cYw2w{BU`D&Wv
zgW6i;!0@U+wqqznzt#Mbw}0(j0Eo;aAl{`iNkq`!L@)TvRJ+k{9D`c`r80*#4mP5+
z0l_(`7JaSwRgw`cn*?gFPa{n~_k$taN@7VbIv^tLyzd^=&M_bF_YGTG#K*gvw{=j}
z`?y}|_+Qg^X{F~(4&E=8MmUa}&*q!0#|2iXq1aRHq2H>%)jyq!YJk%>D3)h?ocd_*
z&h0z5`}=qH<V7pm*m7Jedq;*OoREw3h||_YdiV$cXh4_0s2lDO@Z}i;(7uwxhO;vW
z=1dTrOtXB(EZXrBW(w8GQm06EST-lB-~Yo9-wyTLq5C!zI67X)vaB;#D^osAkz#k=
zKijbu&B`@>1FSSu5Fx*}_MBe6WRGXIr+Qb@mK4ZOtLz~xvy3F+7~gV1eaU+2ePz}`
zhs(kCh)Z?9DvhlYwX-y09Ors277-RqU{Dh~$Vuj1YR#QyN$r7T%Y!*Qa*=f@$^~je
zo_Z6m2R9EPL(EY?`R-Q3bv+miSbecs!&KKQg&zmR)hd;ZHKc*k*>InR_pWU%BFMLr
zpEBVi0UNwBL$de;y<@3C{ho_;nJT=}5Bs-odrBVkCvIdxeS#m#LDIi_y9eiay7TA{
zG*44Xz57skOaJA(U(~TDV4kra?T>FhHnr7e9`<d{HY)4Qn^w#LV4W<%6z4nU_+s^R
zXg<0w%ZjAyHLT2DSSMol8RW-ivPbj`z`OYj=u*9e1M^A@b-}6kY()grelQ3t+wQC%
z6Om>L(h3xdzc~(wUfn<u>=?0R249=S=Lfh-t4E~9eudTr93^)CayjIf^Dh=Yxp-XI
zxqVz|y;6LnaVB99Vt{!M_((WXmg=|5*PCoh5uVtc#B5EpWoc40;zJB^;efn`%O&ov
z&QZXM4P&$K)`}$8SmP%c+x6NRvJr1{V|dL03sZJ2UD35Qz3iETXfXFs%&`Di4Q*Oj
zL<(<U*+b41TbHb-mT0Tfn_M*cRpBm9E$1yezq0vd{TX%r>kV>|vElMwe%X6>&|p;a
zddXJHva>LnW}HO2YMA?FM)O-7Ul#gqDSLJTB2K&*j=`1#%GF6?KKD6_JI%=0DT1>=
zfgAeRJe6`!=36{<rS5({uejN`vPNzUkUhFk#n8-pV&b@hTy?R#kW!W4Qn!xhEA?0g
z#2w9~p*Li6CNLB6h-oB3U=xaY=wQ#PZa@xMm`%@Mi5$wUvI)GuPc9jJB=k;Jc2%^m
z^bCPVPE*X2+c*sk1YADrN1rJvZ>qs&dDD)WWdh>N$|2T<U$u4orjbpA^#Su1)Wo~S
z1vMU9w&<Ix-#2c=>knqj2Gu2zT-A{a-ZkpQv_{GKRLB&?zs4F%KF$+P$)tV`ns3z%
zAxO53gre(}fDQ*|ObTnYTZX~k_4T{TS&Qnho$$T(E?7MuSe6A2sp4uea+5LA_zux?
z=`wGrWxz<k23%xHMJ~`2+$e{UC?QJXvsMd*2>^A%&b-YoBisZIYfIm%B}+PQ9wymj
zgM&%egoJ9%5dsVxsZO$hDNIXu$8EW}FyvuzI&@XbRi@*qy|tT#UF4<zwQt-A%jWEG
z;W#us@H8F2jb~KG=IDJGn$QqCpkW9uen4{-RpKbF4m!}sLU>hmeV$F}uJqFuI?T@{
zU>1ma?}9BsU-6Iz$>D}C_<ogPYamVJ(c<<g`zQWYR6P!FlL@#KHozv8ETJVJYJfMo
zXWR_Fexm!u18M_>NR0>~%-2CH>8peML2|6g>ljqqh9PYqx(nb+6Ge#vd;9zMZr|P0
z$?FI6(&zWyP|=a~?8@^l`V+vee(o;axlWg~C-A6+X~V^fAA{3(84K<6TjB^-y}E-S
zOjxQm=0b}%2D8YsVnTOlM18pq?pK}kB0IQe*!d$?&W5NJ-!XS#L2tGZBwwI$)t=$v
zlTkek2cegUaJo8|!(cA8ed|t#nN)dZa3Dj#@856lt@l8CVXFhweEdyYxLXZP8|IVy
z?UXt<FLkZ-g?^^9cfb8&ngN5rU($JL2UtIC2=usfSKo!Y4o+=$|3jN-?|z%)f7Z1k
zCInCJ2)2E%^@ZMLLl*q3jDX)Cx78?!LTVIjzv+qP8Lx$lImB!E^SkyNs<Z1{S)k|*
z1q&TXa1?m+*e2<)M8Wf80BSEd(ZO}5S|{|$gg)Oq(>l@g&6P84(~J75Gp!SSNb~%s
zl66J6<MzX8#w=r!RmGz7j3h*^h?rhC%rYC<o9CFT{AdU~KXDw&akP;2GhU?-91j)3
zC9axTuE502NlhXfw^;6u!);e@IWXau*J?7#lgKT{jS41-%laGmt1p89-N@4&Vthms
z-1Q`8+W91wEG$xYlCzgL!mMQ%l?T^zHT#12gr-_q!jCL)HzP#&XD2ue@k!Y6BKMAK
zMIRCk-PS2NGQVn%qzTuZfJl5swZ@If&6V`#Dq`a%8amUD-G5jg8YrIjz$;Xq<w%iT
zoUW2rSqiU+ZCvXoGN77WyR2TfWyE|&{AQ(F;=R0?^_0GUBI_xIZ^C+NWS=IWm>2VY
zW7nJk#bg-C-R;5)I0JB98KPWM*j_#t#Pky+)XSDPVtpI=OBwSG_{$Xv?CszE!`(0U
zLcVfl3)SZ@{Qbc{yHN+eOUr!xOPc;_@2ckhF$`_I-L^8c+^?$`TK?!);bkL>^LDDk
zgQ`%Sg!_-M9HJoBVB09Rk{5mbJ;#Row>My<uHdCUiJkg2I4aLl$*m;%@o~DG3{R#7
zk&64FPdE(Z;Hz~a+JPZ0U9HmbIrA#*&}3M(=;`O`-tbB*4AWA*n@<MrPz=zO0f%$Y
zg0_1bYic)n1x1}c)Jh&ujSUs?x9VAd&s{DqEryPigS=38g3`U{a~B~+Y^oKC6dD<7
z-5-3l>8q1sa#@?Y@Snk808<~DOYm{yhi~e&SDdN5VKa2*r)fktc?mF=?R-N25hzag
zf<(HHqmO38sGL7OZAaPi9qqjV*vn_KOI{TZf-3YF>S6hghJig?X{5*bR<ULt0?Hv+
z#o^$96QMq+NzW0!-_TYMcJW7H68=MW_=n35NrwZ<m9Y@LiRoI|OIN`TU(xlk%+u+C
zQ@h3bTNkb7j3pMers0J1@*;C7Wg;i_v|@LT=F}4BEF|ScLr@&ukXu6OsP{i)f<l)f
zxfEj+%kV6vp#brT>#Ko%pe)^I`-9}AB@2L+m9Dyp;~!-eS=T*i-GMvr+tO(+86c=0
zY{4=9P7Mmc!9nY;LPN<6aYy|y>8oQK>c((zX7HwnPj~6=q^~{wt7IQl_K3=`U2;0k
z<qElH1b6A+;D9zC6zy*{UC?D<Cpbh_Jc)Y9d@3QOngAoWcYS@=*LPj#&VH(H#on{$
z27cPYz})-8Ue}Pu9xDJ$36Rgia2$QA%2_(ef`*kD)@+i;v{}}G91F0|s%Sl5o6B3A
z&-WFB2XnH;Y^fY?(ngTBq-~bCi1u^1HY%<K5js|etBZ+Gek5MtS21ceFm}Y)@EAFz
z^`ySXl*Obe<<0XyPS>kAKr&7SgKO7h%C_b2l;prHavV$dqP)Op>`dV<q&F@hUE7pt
z2Rbf;-eN$7lPPcnlp*S|b%z&%OUf-adKsVVlgniI+YfxoxbMf|0>Ak<#0<0ZY7&1H
zt@@jfgOL#v^~BIXSGIQtMr<c0sz+SZm(O6b_>Ioz_4b?0Z3O;b4c|9km>3xmw|hN&
ze*o7rNl3aW7pYJGx}3@BV72^4&z-oxC^fttcK8!2*it;XbFCiSiI1o)I@9D@dfU1u
z0?&FP&flRx*X&aiw{OlwegL1%z#-^EG2jG-<v_UrrcP2&j4y$maJpXdMa0f92R?FN
zvTPw_pA#$CV`W9@`M?M2YZOWhM#5(*OuJfZJ}nzDLj~|j2+UO%DsRK@jKOHE?WzfN
z)p=}y?G?gu|E*9=Z93VE0CP+J?gJRK7eI>1V_53T4ali9sUtyS<CRp{ZB_56tj5eS
zkRP?WoR9i6U#;Nws(4W2EJ&cO%pv1#1Lzq<pp-hqtxRBwz*%Gr%*?i3yTt>BO!#Qp
zRX=$B63JYwB7Ot{e2vTM4BzeT-}%G-URUn?<L{+t^&;Ufy|tTLd1flTB6%Pe$@TBY
zJ73>(O&+;pxAE>Gp(h0Lc093*w&HGc--LwQgkXEhyXz5k8D~TzZhR-)iL)@?N)9)1
zgz7ZI4izS?96zHTjL&KFB+qC(OU|d{=cPVRGy8rx)9;1Tb#7t-dnf#yU>*Y|oo5D!
zMhj(c9ZPSb#c6>{788q1o#LqaN!)0R(OojK=chn)mqRI8tttGKz@wyOe|QZeWbDOI
zHix)piC-8|Pf<8~A>68H##5=&1)7HtR~-Sqhr_7~AzeiaPUT5DHH;SAF#q=7|5aUt
zSn^b6s|*_DsA_nG!E2JoAt<H--MgMU_b9=lg1f4d{ag+y&Ys~=6_GtiuLFTt@v<%R
zO1rzqhficS=^S%r!u{V5(|jmmAx_}#Zqi};!%4XMB_|Jct+7xA@mj8zlXX7T#Cycq
zM(e^N+wQK;Jk_dxoCoX(#)~E-dQQBkX759afoyu}7Ln>9F+md&%qM-BPvfzfrYN4g
zIqh-Ng+=bSTF*_lZ|L2AXhM05v$H9H%^%3R(`*CV+?Sz6;7m^el6l-12t+c%pThDE
zb$1!QXXsC<(0bTCoiO49z2wP*>!8EFwP|$QRc55G`H1r63IZD(>7or1Hi!hrEJFZF
zfx)ji(1#~97$GATO0|Na=`dC+$AJjZxupRRtSJ%Gb(J~w9GF+St4NAirU6`$>r*jT
zpfqd(mVnIRbw|KE%T<I0oOIGM?CjXBl)D{}s`)S(&9Ygsyd37lj?=EC9-Uq~-*C+<
z6Ve5>-l!0Mio9FYPb1D@ZS<IN9m3KHoiN%(mpzWd$vM=RI?w1zm<IKCq~k_oQ0OON
zw^*sw7my8Z!=N;M<z=h&i04SRm}66Lq{3e8?hfLD5=|sMVpy&vy^~Yik=P7Hm<?-D
z#<TW(s7o*c(nO);Oz@-GXtqdotxAW3>oAcoIa>_S*MzEx&CF&k*kMuc(b1C>mNiD%
zmO%f>guzH*zF6_zGGc1`Dy-wc$&)*!L#NOfEl0<8N}-#8bt-_0j(x@})DzeW4ngm6
z+9NtIpt%!A<bCT*ZP^~B9YKFJ4~pf0*C2DdyA;xu53=P>uq}u=_0}yQXJpI34wjcb
zxfL#>bbW@+pAiQjiIU>83hKzm>(HGf_C&?d+_4BZG_CMyy5s_!a7oYDD#&=uFLjN$
zHkMj>7lg~$^C=@zpa0u|XCua&m~;*gVyHP9%p?Qg7*I1U--30TwNIrMvy0O=5Saf&
zEhKuw>Pm;<`|e`xLGO{Jn!sa0vZ$s!18G@8!KqOP55gD`EMg8#uxw9UwDbPy6zG#Z
zOOqivGBgY*TsU4SWO6GO?t>r&6`n_E@M}=@DbumPt+O@Nz-bboNFDvDI5E?O6!|lM
zL61jWtY*q-TlxmUB3Dq6mGd1EirB<Z-2(#~setg)PGmJ5X2xf8!;Ep9CNhQD1O+i5
z(Mglp*L|-SzEjGb+OD+|u)8}iZ~+sEIX24K;6DH5J@732HdICS>MP9oP#rbYi^O+M
zH_spm5xs+8R|WB8>2$Ta>@Su$UtH0jj-LPM55BOX2tn55olj1~^h!**X$Jrpm^E!Z
zjjwfy8wK+sE&H5q?-eWcSIc55aKN;GFYL}{RT=PiJQ7MWGDey?=AmfK*`3=HT0ikj
z6&i~iB<(*+pT2F6n1v1UKjx*gJ~YnaH=4Ycl@AUYNz#hJ*l;#4mY%%%$zp!<lD{E>
zf}HgMYa}cKuO%xsH*|Zxo=&C1fXc1*ED?>37~lc{ortx@zUQR_FqiZl0`@WmfxqOu
z0;|mBR@-|2Fg0`N+Ppq4;YxZ*#B-WS=GTA0m`_UZ1~$=V6g$bF#uUro6xzVf=^FDA
zZ$j+Ao@KqUHBtt;zWX%P*~L^>V{)74RsJi+)4e?wvw}rdtm}N<aPT-%beT!gZ3A@S
zJ5U@6PS$5IqRI{3lbl;ClKT&mhsdBiFD^P=F@b*L{iJRsPY`FSZIo;ytT*i-fH){M
znWU>U>F~cL2ggZTW?$W->lcY}CoXiAX7cE+M$&WiR53MOvV5WhhR?dN+ok0apTf;W
z=b?$qzy_N_QgGz1wCVThMd;lUtP~xKESuA$t)y3nPx}5N>59{LV?~73uH?HHFlx`;
zsP|07foQ%Zu<XY%qk4U!Yi?e^X{FYHN5`BSTF&S1im^){9QyBs^A#~6saX1^({xeh
zFo`)5&0}#V4_nF!58N1736d4&lOXpSo{4av`F?<J4)q_+YUd2IENER~Z=e-e7G>ED
zY6Xr_WCzzH)ydv3=qLC$Qwh&FQ5vxh#HI@Tycby+LL&1tTxNQbo3xfM`OHt1S3YHi
z=v_92o=|MmI4>$WNXQV^02M-2;o?oqH`ciLqPLRo+}}<`>ma#l9rIOl-Z!ywr=<v@
zfzftQ%{R)4MNrII)uf|d&kJyU<~>z`Yx%7#D<V-jP-Jfx22m%WyC*d2B3Dt)k=5pU
z24S-_M$UI?u){X?dLc}>?<??SPu#CKu_H#xIj|hWY@8-g>x3;{b<3xbxm$<jn2P8P
z<BasKHO_>A+uy-G%nyv0gD1^v%rSyU6D~QAyyn~GoD6fPqEy(l^Q+W{qIU6#NnIiV
ze58wiB#<;%f-`k6;B&1Pt<=<ua*k9-6f$$RK$<ZZ_ycI=MS~H*Hrv%HdHFbM)<(N&
zb%=V?$CK_6g~j47riQ%{uiVH(Dj?`TUFIdGQp3*a<{t^gDF<V~h(hn1+`oT6*<pq5
z&ZwtiyU0G8HR9X*$(<1cE_A)ohSz6HB3c>35GgJKrS>pT#=AWO6S~6dtK$oa32!=k
zBvhR3X~Izp>X1H{-66o#^i(+`OzFc&8#1BORFN1R?5mL+p^m1wIVs+22C<+*>}S7L
zT8~(!9h<2c?WC-1d2bgIZKKv8EFP^_^JyYxGcYJs%UthNhJ++Vc!DD&AVQx;NUGE;
zhpvVW$uyf@?<@z2gn(qp>wsFV#!=%Dr<OJ!a+j4(zO5g40gmCHcALnjn*982zTi9)
zR2e?cPsN$6&;!+Lx+_X5w6Lp!OXI$b;+K67!vw5uK>kQW?GR4nuS)&?ag)Iq>2-Q2
z+R;tsQq<lYhWkGU(G1$pR^}t6+C=gF_Li~3Ck@>4ojc%`m2HQIu;-YoS!`uzd;+^>
z1uOMf$B1_go>xdkV7am3Ax94+B6-K*4L^DC{beTB1mw|qc=)}y1!i;VCG9L~Mu5!l
zYwscZ=wy>&I=&p!F&T2<u8IpJ7SRfUx<H#{DGEe+IA{e9wAuVDH+Bj+P?q@#vwr0z
z(ZHD+GMMoW60b6h#S*7?CD}1^b(7?*2Dza62u>Ts{#-OY3&kl&X9Z3)C_(8csaWqh
z{WN=<FVkEdHJPN*C<e;jX7BTo)s<&ZcXHPHY{h3d&SWs-+*-xy>LOL9cv3)`?z@By
zl}V6d?jb%aIbSMPG?hHiR-Kf9_82c|-=2`9avA6|kXuQ(JP{-5`Bb!b`Kqgq4`&4&
zB-s_!&nD7gEt}RSxPHw4sgxu!W`VRB*B!tUE<bp0&~|mRoI@VRaM_X)<@01Y-V#>_
zS%=FVHQeipLUnQ}>S>|ZNFK@z<AP*7h?bIu#i!@->9IM>)x`NmvXaBau+iT>0IR1V
z?Y-ptg8u&DMGxUM=PXaA7f{(Q)td|bhFqjUR34ltb=uE*K6XxY%Uv?kNW8D)<dVGg
zu;6|jW~zr5AB*J|Y3YH<HR~?YS4o~LdBgVKKWLIGc_f9QkmQ`RhYHuhZV#z23^W)^
zw5fP5mdgB;w<$VK2ck5yOTKJaSkBJlH%z*+x>Q+0|NnL_D$(%Z$ifUf@e~{t^$Cz4
z$-BH1*N5?RU9LFc+mtUMOAitl{`FQqRKyTd>zEpXHI^sBKBh}{kWi5m8YZNdg%aF0
z$~nwIOZMScqZbr;21tx+V+xIaE{WN3GeNJ=BN6AFx*ba~;xzh;KxxA{=N@>p`U&?N
zf6Isuc6Y%*95H;Scbb>JbtcR7tPd_u;60iCE$P<HPgjW79KRL4*4!ItWG<ZM_ypso
z*0>UN)JD1@up-P%%J=8unt+%g;L7QTuoST=iY=F{*U9!od$PORQ-kJIv$JMPd)BsZ
z*<_+TbbEJKE%q``)Y|Uudd|(mYA_Z>LqB;~tN|6oqYD6ObbUCAcESf+K<q*|!EbCA
z8TRG(`Ra%DN&j@3zT@5S%nETfLq^go#;hSq?QT&tvUh1ID;KD<q6K^4`bTV0j_ig3
z?40j5-(4~rxXRQ!Lbns!|2shzGGxX)Vc>qXD<$b!DnM5<?E}?snbF?Ov@Q!D6l?_e
z9xTqY8H?AQ1!Ov5@>mo93JZZfNQ?Dg!(xfuL+vkf=R}c|={rxoJ)*Yh!DZN*PLW~S
z{BCd=<GAmuz=97Gy=Zg3mleboA^N34VT3Afxer%skP9SD=ta0#5prhiHUj)BD!~?U
z0VoHxkv?N=68Bi<XM91i>4>fHnsZZ1<3m;69U&nFSlQ#F6|L5#beYo+-W!(uXvmK=
z{Vg0xmsv&|vJiUUcCn1Ly8n=y6MKXhj(oA6s_R3*BnE`gV@8@*#j@KIX;?D$YtQ3>
zE3p!ka3(ef*zONOZ|F^bvMfMRnR-%3WzRFg;3j$J3a0+<F6y8SBg%ts63{GV+q43W
z@r5_i{8GFOqMU7X=&8(^W{Z{+kaTFaIQFHd!UiKzx>SN)-W2G-6cGSt=SAraPq4UH
zJ>o}$?OBe~sfaUJMkWw{FA8z@DvKz~NMyOA7dwCoE8eM}{a=XTB5np#^!H+}d-Oa%
zJ7+_(oDR`Yr^2+mD;OpRwXoBZ_jK}!zZ@fq>TK<i3sE!LfzE}h=XmQ3`N1ctg&6TH
z1JTTed5Q=TcY9WbBY6q!zN1=s*@+yp(2S;DKn6@kk7$k-B%@8%OIZzGOplldAEfzI
zE;Zhn>|y(U#diue$xF<D5^r$H;^H*tJ<3*RPFJ>2gIriz<>+U!nXo2skPtIXGR@9X
z@b9R%zbg9N|Cx}_Al&O57g%5E@JxceQ0YV4_FD6JS{S#Z+mbPMF|+8F&iR;_(a93g
zDRhELPzB7%lZVO%<#VD9t5Sp4z>!B;ELnAxpTTmgonSW!?SY)UpbH&G<IGc#*v>ip
zLgi}Iks#9^XoXfIQLvd92^|G;**S&ZqDd9wgYXzqU#UlW&iSGpcfoV&xQA7-=*yr&
z69HW`nX(;@KZ&^#F`6`RG<JV&VoN*`n}uCA8q=e{CVnkt9q5tGY%aPS&rH0a?I0_x
z91U*`Vyv?1G^cBwmQo5M0<>K15nb<@DN>l4p5DCfX4b<#nPB*GOv1jZH;yOcnx>ae
z4!R@`DDWnTCcQ_Sm!$g9gVl06+8aHXiSHUo$}}G&h|-~^ZUpsyqrwuawXR)<PUzhE
ze<Y8^w^PF!L#@NPIq$hZ5A_2rm7rM20!<Ca`#`;E5-@IHaqJFV!g&L2P-3gsJT%xG
zIxvh19!tq9yqNEPy%(i3>MshuH;JEI&ic&yk5_#OkSzPy=Y3I9^;x~t4U@hOhE-(`
zXNOfC`KRc7yr`G4>gQ2h;Va9tYmZ_LvNw&c%)8XAX%~{GN=p~x@p@TS(xN^&HOaf@
z6Z*P_Bv&UKP0bgpL8A3-b78o$$v!w|zpGN~)OL5|7kiQJKreB`5}d>UBYX42C(gbU
z8!!4sMSMQ(SxQ&rdKP8W=EToViy$5$aL1up5^pUKM96R}-KC6u+AwBl3ZPw>1X^Vg
zj^pnPJ0cg4*ARHH8fAHVs2>miwkGPqkN55j6^t-=<~53_u>uNnty=eoY=q?(n`{2Q
zxPFayhiAoxnp)3Y3}#O~g!yQS7A>4Dbz;?&z%pSPgdKi%{ScHd?|iujFZ@22$K4+x
zj%jG-0ek9~f$JelQ*r!c(<uQ(28!*N7}XnhaU$i=$-B}?#A~~b>TCP&rcPSx+q;Q4
z;e38tScHwl3?s$?oSC}5vi4UPH>c)<!7onnW;Bt$dhqg@hKsA?xP_be(bvctTM9Q*
z*=`TaKU7!~qFWPTxS@%ssw0BO&)I1V5<Q<!4s=l=2wj8Q5pYl3E>p3P<V8ab5Ry)!
z5Ete^x40FZull7Ek>l|8G5aY;W=A&w#F0;N&d_q4T-z#fe{QxDmQ9Ajd?lfZV0Bsg
z5xIwx;Plw?KG(P*`I50_&BWu})xEosOY~4PB95$!qbLv?`i}lAUC25|_OfaTRnZ0B
zBlluoCu{sbJ;drgmTU32(O~5_sq?rQ%!<ELm&BTp&HJy9WHElqPWF5qd*73^mF+$9
z(Ta@b{M@Wi-7TiDDl{-pe05>Gtx(hhis<XDQQ5n^SeJUiZie{{vf??hURT;CKi&@_
z#6Zj(gqARBu#XJt5G^8FfP~hcYz-5VA#rFT$>}<VCQfEO8VsBQYr*JCmY3ed7WQC=
zjfj()sKwF3K==jfR{J~q>xaf&YOronP2Eg!tb(m<-7d^|r@h$$nGGTNvBt5=j5tGc
zr5XkHU?1S~^%>jGS(Q;*Jh+U0i$@2QV5$)&IuDB(F80yi)@ga(G{;*;tOuDTXR+)I
zU{0|(35k7INsM-krEh}y@Yi8gBwY3LGFIK5SF}nz2FL1YhAo+lAPpc4Z!5s4i^_=>
zpXi(@>Bfb407EQ2$yOIxHV<ZY(E2HJkw-kGbUz|zyF?5fKU6FH#EfW7XY9-2#6Ht3
zRIzjXi8AE!&L@p^rP@)PmJe8Bb&?~tr|#r|ALp&Z10=>nauTdHAIZ3wo$&Ar4cBm%
zxW9WJ)#Q~yUfX1NMjBL-gf<A(P2;^g6wYNeRF!N)0^8ugYyVGF0~Fp-wLXk2GK0JL
z#Hiz3CdI@M%@XWp%!2J%k&LIlRqh$@PzF4T;oEs~8ZO#obliRc=LSHaJx!5@XrA%k
zpu+7pBROQ%R@(c~_hwm?hCw?p9{HL4la#3w5L7zkZ-z3fo`%$mgOI3OaSVIKgks5R
z5r|W!PNa2P7`BITjveP`i<C%b8c{Y~m0f3L_XCX)K*VH_F3#1Vt5`CLQwXDlMLv}p
zcj&7T13=GR5$K=dvs>Dy$V%?PMK~OgeZOf(S3Phw82b}=JXey=g+_EM%_0^iexQzQ
zYG+_r7r-{bI_{Y8_nazcnh0i$YU?Fr#NF{6Rwew0B$IY_XVznR2LWWI)X}?&X+xYB
z#apCpbs^{))RC7y37X`Ru;3A3(IE-ygyV`78NePkQMUb|zOCepV}j47s-{wR9So~5
zW_*7HS+u2KH|ekq&)oj$JWE_fV721;WZmp~9^|lKMUUDh%n>Q8cttBgb-WsD7U9<*
ziJN3!+X`@aIYVVKdF3(5=Geb8^fCa0ai}k_a>Vn(FJrHgDaJc~4MbpwGECXHEocQt
zV4krF5UBv!8I#TD68p&eD+r2rslwQEa+xw+?XizcKH+@l>?`#U#U%W+X?^#Hezu2*
z52Yi!ho**7Mm-ut6C-K?l}^h=I?nne`@*m7=+94`n}x6+K;Te|Ib1Q=9|T_vIMs`b
z_|ha&soTRmaRyaqTN8`9|0P71^(qUbX%c!QhG4xEjb-9)R2H0%+~&RM-qs^;!F%Nm
zP`Om{1a}u5x6*LUIBH@3)`5}XU>38C$=!J&VG*S&(DEr%>_R;!>1D9_at+LEO*3RF
z3sV+`9Jy_Gk~jJy=?N`LC-R6*Awiw<qJ{k&S6U!$al*L|aqpg~n-YTDIASbUQCGug
zrEuwjkSqXGAU?v8(Rk)9?+3KIn>y;N;-YD>;jOj;x(}3?*zN4sCHby>E;brXOCNGL
zqXTGT5#0O=-LkCCm&N)_I0n8yUO&-u1KrB=A4877TxVL0F(#~Kv`4Xw%v;I`B?8J&
z{32y|g<fBzt1&ZjoPn8jUW)>kriz=Q6u5wriOH1wHhq&tSPSQ<F}wnGBa$Teu1wKc
z1Ui6eTwS^EMq>Sv<|CrG<p@~uz6N4)TA-UWAj$0P&|JGY){t{!R#dQyHlVD8&??tK
zR{3&&j~7T4m%K8473yIEOZ&VYeXI}L-dU4Kw|t+L6NpG<AO0I+pzu3E;L0kDg=AtC
zpJXFJ2H60gi_~9OY<Q)y{E))T^<#E{FsK!*Iu@=EdIGL4(zI+;hMsdhR6T&EZ}0CJ
zbRxHo#%Z7!5E}2JaT;3R7wU84{dCpm#xd@`HXeM%O6?yDz(Zj87>xM%z%8|4A+5X)
zq7v<!^$A_gx4+(-b8Y?NlzS&{`lzkXwdoUXSndimx?YIKN^+V{#c$*LqJX6N5TWPS
z>A?ga?(N_E^7q)I+&0(Mmp9!iK6#MtW~{Iw%qF_i;X{BVPraNNVQLY&skZ{o3Pxa#
zPo*5{XT|)ic=#PV>zJe2oWVBF)^JX;!vcECmrjcnvlp3M&OvpeIm2ZjK4}v*h^O8*
zh~3aL(g?wrrnr^*I8u=X+)s9CT(QB)K?eZG1|tl7VW9j5!b(f{N{^BM3m8m6{B5ll
z6AMW(gdaw`dcZE%nP97GY%VKsc{(R2FCm-)(fSL^!Do4kziEAuF7hE=fd0wHZ(6M{
z1Q6R#=Y0jn9T<1iu|K*4zgQjrXZIVc1d@Pk+504-F>*3(wId9z)9ofd|D4=LH~2+q
zFM<f(y=4FP?c2V-d_omHXQuPXWFV{inE2~gv``(_7```2g{yXB8JyAtcRnOTBr^Yy
z{Pv7ygX;XqnBW>GYz&U+5l}>!9Cpd6UhW00_BCOy?Bva4Y3S&Eb%&20fVJi%koLu)
zBb)SHkNf&@x7Pym4Tl!yz@7Q)7+lYmMjbO}Lgv%_G{eTenSeQUrF;#vJmOKJ=Zi!%
zp&259H-)~IF??;L3R4gJY<j645t?4w&2C`=rupny2|lefG3+NoHHGd5?{aaSq=Umb
zAK<VM)}i<o14U+puH540*)~?Od4rb|)$c)I(2bI6a;UJnh`(YTg~km)s9hre<<egN
z=6K6oZqUoxN-)3B-cr78vBl~$A@+KBHRtSlWw}&|wN)g+Adza2Up2_78t5usAX#v}
zy1dyoTDVfa1{JngHKxzt%NkC-`A|B^n9)oGi8a$ebgO#9wApK!wpuAnR+zuDZM|#v
z#2wvp+^RL=D}e#1BapDbCjzp=G$rCJnhUt+x%PzTg}cK7ryt(!YCvJPEq0sdc6I3d
zw~gA(oaIL;RguG8+h<Yp_HFg@qrd1IWA)LAj3X9xI@raJYd>WvK4%|6m%LQusg=Qq
zNvMc5=LU0oaMf13$<}%)9u_y-SxYMvmJb!JX~ak`v%YwMR1LfuK@bc?!-Y+9(|T5-
z4+sKROb?jKzL*v4)y+i68H++6nDwGC6ML|m%t)dRDk@(P4M}CsG+BX==X=IlJ@1wx
zQX6D##ma`kO}zi#Q^VkEp^@Qw^D_3#(T}xJS2@Re=RP1r1D;)F5EN*PKNc<y7K1BI
zDSGU<ukt)yWKHUfKMb2QwFi6=*NNTonDvxqU%{I6^k&he<I6ixlrzHy4VA;T+TBHR
zVng#sBqX+uEf;4lhK-VDM@@rzuUslJ8ckfu`3JzzuAot3ma$knZLw4Mh_c-;9<AD!
zZfc1WotNUs$JvqBrYn<O@J^uSkqnE3{ka-Ij1$dCW`hPpI+c&b#c_A{MS6)1Xqp9f
zp*|q)<x)NRb&!mtqYjxg+O@jj`=RO>9pAgqde4aWx<EqPrP@j)KNi^Fbk4}ji9{dV
z4YrU0R7&UoP^6?eKuu*!-Ekct1isavFu%Q^dnry&yU^`V)?=e+)BJ5V&CiR1Rf<zM
zVVCLDX5sidmMHxsSfDxEepY>)eG;?QlgqBGzxLIp=cH0xNM+MJ89N_`_$@12MYhG=
z+gtX<S55oE+%V|QKu!dSQ<trRP$gxAKw=JQt+FWt2hTj>j^h_QNK`Oq6uruZ>dBtN
zG_L_=2VqdfOo5e2IYL2WT*ZmQP`Z@hJ~o3&fNc(^+8(>I0v4V>9EIqaqo|royJ<!P
zU)>UM1C|VG8~J1UD7q!yN{ku+6ND<r9JzybmK_>^h5=Uw3I5Z|L297)Zjq>pC9mcr
zy%ZCAb?|kzW2|2c^@|woH+fXw+BWu2oX9OT{?gg3-x=<nxs)s*8FrRUC|kbO?>f(x
zPQm9}VH_K2$t6NtQi)V~73W1XlIHG*)$K}y|1Ig%y4@YAox<g=pn93ubCLVWUHUVq
z>V9&E9=I{zPrlUbCT5M{=DpROsh54O`bR%C5BcK;M=$@)P&Q_;7k*BX<W};t6yB5x
z>1Wt{d47_gsYJhjK#vakoBs)3bBTob!k?2v77o6$b*i?}cYkt;JM?J(Yxl8gQItU5
z+DC~y$$#BV?*6wsTH-D}`tshU5_f_UceTVlwDHxQO-1hd68E&km-Oh~*I#WaanF~a
zFO5)%F~Kohe4D95pKx9~7VxUZ=sL{vW>29Y4f|Ok)LNAC765KO!w9%0n%oWCij46S
zKm}nwrR_4beRx?@%zP(T;n_>9mw9JaOjc2_vU=^b89ma?klGm+=~?Rhk=Kj1(Z0%j
zHv19TWDSeCxSsEe^wnIx-EFSB*<rs{_nl33<9pO?;>FQ4Lsrb22p6Rk(Xyoo+o=E*
z@)yvFt8BVK;P5%T<iZyM$AWxhREtCpNxD-=P=(gFyPLClR6PFx;rpEdW-<Pt<Fa9h
zEyZnOMug>p5x9$lIyr@WEqsB+Q>dS`GgdOjqEF^?J+q@)NJKBTbfI;}n#06KAl~(<
z+klqdlXvp|Fv<<)a?%_#YtEnCb2lpI8BlS{qI_6st8L_L*HiR165_ZbiD4&hb+Px|
zGE3ibu%w2u<EiF<GJ)O;bnH;nglS?bwny$*`N({8e-w^Uh(v^YW?Lbh6>CWpp@a>h
zx$-U{tHLBh;kMZuhDgVFrOw9AMUxqp9<wVw5=G}LKyO^qAOW?`yI4Uvfsw!oPicJs
z@5<6XSQp?igMV~t>dz%}Jy1!(c?PiLr89#W6pYgRjE>TJp%F#kWl%9JLNq87K_Mxc
z=`jW03j}gC6*Bc?COLtjeK}JXG(?zl+7kiIkvMIHu4O9~lEnXA`>{Tm<qXLopMY0f
zEejGrz&_o*-4`B_Q}VHMu1sc9aJ>lE7X{a%SSgbLjLkj+M9LmuEeZ=e2oFuoO-90+
zw0BuLlm0%qBz}kX!Ww!PKW}jJb;%<X-b7K%bB@h3*b0H2#wcbB&iRsjX(JFuODC2j
zsHL|LYkS;}o;p$Jl+*DS7k?5L&=a`(Fw72`%vS<~%stmkC<qf<D*X6?oD01pCBrBk
z08D&eCZ3}pwIu5a<NaL#9z=QqW3pyY5r;l;)z5JBA)lp_ztYCD^niy3qQcsA^kK~K
z8hk_iAS0T<qZ+}^O3shnO;ok%ekCaon%zK^XLs>SySuVxtZUodmE)nrS#JqGDQ5*c
z(>eiw9!Y2;eEawa<B>~=SaGrBiKX`{9GDyX2~=KV)*iq~<y<pp@df7zvbYDZIElO_
ztoBlu0d<d!?qV)Il$I(|&c9@m$&fvfLEENugP69L{pw#Lkp*O%Ce+X&kuEs!4*?U-
zcCyno2+a`T@8Q*>jy)2zTArU2NEwRM1yY_lG1Sp>PMr*u$(2bgePX!Wbv-Ua$$)<M
zqL^mh6iN%R;ds?TzfrLQ27#;kK8UPfGo>NxSd02uJ|}7>o~974Z6$<V1SMWZQ`fL0
z^uds^HiAWQY>+4^+2`tp+z^!<x{`5C#2UTe2x3@!L<8$y@jT`NCvN5-jVw7$8EVBl
zSBjy=MH5Mekwo1@ZJ*9Wf5h+~bJkwEkc8O`h*E4!Qd1yLyzoYuI?_7-#6`Bm1tFaj
zb;^1bxEVjw5xgrgx;c+K#v?VP1Ka8W?2hDd-XCyiIoAWicf{O;Xw9sP(y1u$L*1dB
z%bdZn+cx4fnY+8%D^&ct%)<B%&-}0hqCsjKUXX8BMtV3lMHi1imni_f6Chm0pt8gV
zZaHDC(AhY^kRO_>ZG+=97nIBZ0L=FpR`>ui1qU%_nyT$e7O|j6ed9}oLw+j~LHIr7
z0GcqTUQx+Ue7K!3Hd25ZYAk-ykk*Ob5AlA;tHBM%W!l|JkTZfNe$Ye~#6wOC^<3{O
znz&DMp)dlX2L+l?u&lwXGa!Urcp6^K^nr6L#2bJ=elpXz3J)k|?mNqjBYgyT2^&WH
zVsR<)@olwm*cpqgahov!$C`m>cs4z0sLv!F;i0^fS@hpx25tW_ii4bXRaagzN4FG)
zWD#I(rJOpV<0v)<`mJPbWaTAc*l&)XO9e;(+HkvR_1Tc#O4q{g+ZqP*%;;ehcE#Og
zXF(xVa>C64U7MFfVyH~@4#?+2eJ@>z%b*joRdtu{?SDPwt?5%URpv#|*TeL&tdo#X
z3z=WHy)2pS0|YjQ=32hM$MI8>1<;FoLw>1FsZkK2l=30o3MwL(TM;<x04B?6`2s13
zsPD;TYzko4V_^U%YlbQbNqK1yI{k=<B3?#KZwRDdrg?1HxT?+*A;`{6FHMidBbR1W
zQ}9cXvUQ#~FovCpJlbLe8PyA*zy!PSEH#xr55tQ-F7Tm<<4yqell;hSv%qHc`w(6Z
zC}LOV<kj<s&jnc?L@AX}9rgw<Gc_ZzsVto#K@p@CNlD=<<v5lq$Xd#bEF9{93&9x8
z!fz|)74PX`09?t&K>Y5@2VJ`*HNe#H&dO+>WsoM5i%+jZ1d6bacppj3;ndAATL8kz
z7i^P^xQI!zf50g7fGiWj4SbXRL4ea00;E`Wm$|{5Fk(Cv#{C2^B9X|K#iG(Lh_x(P
z>0{Iu^y1C|t2;wP9HiWiL2(+!i)Ix9t__Hnps(#H-;%4EInr?7y6iy>>}at2hweLd
zd2OsC>Dz?Jo^O~tZ~Kr~MC3tC&+3Z~^8834?^Kp-wIYx=!3h%B8YbBe8fd<<lW`@Y
zTj%>9o~hbZj@(Mz%&Qr0BrOzVI@K6)%Zh&&;NJPIp$Ir68_lz&x5RqaOdrE6l6HuQ
zcfd(E&t#(rDq+%bAUEtBFcs7w?6-8uTXmMPqwDVOQzZI<z=(>TTGk(%E7PwKcgBR1
zj*4Lma;V6=3@0VP9&#rGrdEM~vg&-Q8P2^I?X6&1w(hN=d^bcAFy32-F^pgmf(0T{
zZ2VS;<|OQ0X`!tz^qjF{yX+-CnX*-ZqXt-10e0McLT8%RYzEUbv>YVQ)2@0d9KqZu
zlDdy!QVf@5Jr@hPY9&<X0&Y#SaA~KEZ&X>oMq2usOf3dbV#P8ml9!?gfQ%fT91o@$
zBIdgopHvWqgi{YIm*`WA2~w<H)oPXSd4fhy?ghJ7nRii5`b}<C&*N~^TP8Wh^Z_74
ziiJUHSuWIUqM!f>CRVnWH<gA5%gacAb8PW5^(zQ(9rQ7sY&HJTAA7f<#BQ!`J)Krc
z;L#9|hFmrZB6bdt%0We0K_mlkxpL`21f<?c&h=nN>5;}QnjSSH`GWmAG-y?g+Zr2-
zy%eEDzltGHnR=OOZpIf8^K**;uh2<|Tr)Gjwq8C}(=r)nOTiitv{h8IVy;aQe6eX$
zr5l>a$F*dF5s3BKS!P+gTwYa+y|X-4x5AxgiP?;RS*N_thXeRrdN0e&m-6%*o;xe&
zT%995LLQ@n@$4=_Dt@f#hg{;|y}P<;hG4ANZd`h9M?O=(@Kvc%sMP#xb|*89gYPxR
zwi@n=E@wy3-4tazQIu`@w7VrW%Rfa7`#-UxuM4mhbp+4_JUr(0BCq*O=|Grl2Q`2e
zJ8@lHATC1*OBE8w3k^Cge~}vTpORxk7j<cz<GQ{YLeV~SDV2unJaXGdX<H<Tm*(9!
z%}?MZblpgFq=MBVG9ytfn3F^CuJ^NX$`r!+TuT_QIk(BW;0sY4%F}DE4)S`T*w8AI
zHLBKTw<hm?as9%UV2>mmzTjB&)F#A<?^j+9^BX?tJeHihn8==swa&w75Lcw001?Dy
zdh^LNQ=^#J(4C$|C>eG~1B8IX$0)Z&(Mpu15RK}`ckT>XgXzAey`@rzgtNyo?%20(
zh$0!A5oCh3-%dG7Ma9zJYT0*|DO7TLsd1SuzbRm8<Y>Z!gfT!gqbjGn$DQw7V%40%
zwKQ~X&vHmS3B*SuDTrO|B`~p=3Mvgc;4v<f_RFjvjO{<SjbGt~vz)0b<6U}+*ITGw
zjjj12QR4bL=e*An&D-NAuz?@@7+N^{aV(-a{!P<027ZxcZ~OauI%p_B`kINFNGYQR
zNAB_ew81%E1Pd5NoF{X|B<i9HoT7z6IpoG=qj&WT-X78&aVm65K8p}<SfhjUY-?{-
zc~6Ne&$JF(cC>g->@-#v9cri3Y_)0{Q;y|@KPU_T<;t5z%pmTd069MgXNvZ&)sje!
z9T=D~5{sz2=>r{+eB&%E&9}W!oYVEvUH7HBnFUcP%LtX|G}H-OEggma@ui@cu-=H0
zHR3$N7-pxwM;!&nsx9657sgA0Rg8v@MN(s-VV2HWMG|ny0j;?in;g(0@X1j<!H*!9
zSP7cWF$t#{?Kju_<B)kgJ|f%5E#<6`G)$lR6nR$*{#R^X<;SU7deFWF4>h4Of%lSD
zr7`u)QVYyoXMd?xdH|$!feyAAWgO|)2gC*NM(><bGs@%Zs&T4bg(hZtXm4YAR>@=T
z;IM>kG2qNFd_>)DvWc&XLA$j!v6rH{U&83<EfWlNFX4%hHK<RI60=x`>%2%C6a8pf
z2Tj{kMhTL5uzd_n{84$)`##qx{bGk4y9hE?Y&z!z<25T|@XPhs(nVE?Pmg0(eGy%b
zD5qBg=4cqBmZ})yjcilz4%;*ny#S#gPQN$HR#gW>*}w|moUZ&x|Dlj(|AFfDAE;jc
zf$Fsd)yuqcEGb2~nV=#?!*P02AS(YBlb$|4==V?X-bk_fNbVh~<Kx~7&KFk2{cv8S
zav6eDX##q?7bPyFQ+5^Tc$|?iFsX;Nu{u&2Fm@G&5oe~FI&;6&6+c<Ki_2|o(WETa
zOZbs-=o!LJY&7C9`-_}n&8k}QA_*N#K8O3rl};m(>Gql)BVm~J|B#62090(vw}C1f
zugy0``bY+jjg*$OFQeZ8%we`bQp2fV3-y*!ywq+<5=%N>`CxS*Wv?VkowG|Fk*K%|
zg4s*{tsfW?DWjMYQF4=Tj98aU5+BVCC5ni+J|4QqwTof$8Gxk*$?G{n(1bY)Rl%wo
zy@o=Vl_8A#&B6_gNr5H=U1dS&bglO~`_fsg@ard{+^Or7tC!s$hViO~_gnOaE{$2C
zTArv{wX^*Y2;Imy8tJnw-5zv{aAI+a&e33*vSas%&i(0W{yynsgR?<0nqA_lz1<si
zEv9fZ9BwV*UZad;2~!fz^LUH^H%Fj}_@1)ep)XZ+RSuPG?`k@GtQ(dOj0Oab*_mDT
zX1FdVYj|8w)a!<G^w33O+fvd(S9d0=^hh~OI*#iM5p~r)>^m;WvL6bg<+i_G>*izY
zk&W3qI2q{_4KCB!bR<E2BFQ0bM7Bz?p?g60%Ey;#1Ef<S@`=X6m_{HlMabYwndsAS
z*8F@hVpov7OtO+Ox`JeDWQ^jlI0xI-j<XM^5ijQ;pZ(~9$=0eIDdtR1L)c-lU(YqG
zFK@vBr^PF`H3Q+hJWYPePL4q7)dJ!-{<|`XEIh5&Q-&Kh%4g=5RiM-V6grS}B*#p*
zr`K0(CaShm*_k4`G_>2`=_AQRbb|>K$bdWoVa-k&xQ~kQS_4bsp4c2;FnhtS5fg{%
zgAWD>YWulzW6*=A;WQ$ei|#1*KPs}j`})c5E`2EGav9=Y{p9_e#95-;E2kNj+T3Yo
z&Y5fG+wgQr>@<gKyL2KQMxyKq$`9Z}>5_*s51o-aM>uxZhu_iponr6Uah4|a#B*Cm
z{-BR^Q}2xuAwoSq`*ybJ<Cku?!!|qZS@oJPlc5SLZ5^#Hr|k4e#s7<491o6;ddVwV
zY24{OR*~}<wBvoz$Nnxkn-(X;-_hr`Po&bP#h7C}-*L5azIZp$qmk^q^MdWz05Sa;
z$EJV60Z3X63lKUPtgtPX;hMgFQudt35PN%Q@Oe*?pUN~(GR}5M#s19hpU$US0;Yje
z`QYX2hu&SJ)KI_gEk~T(d7=prmal&T#v4E`Yalx!NY*DSFvbZ(6+N=p=He~vFU%WX
zur=Mwi)p&TP}G>Z>8z_f;t20Ti}hke%Q8tF;badub#e0=RnfjXT8od|`1vblB>n^i
z{yEX@o!=!SitL0wr2#X5R}u<H=cW{LqltgPe2w`jlQ~NV%-lr%>m7j^n@fyD8XV0|
zg}|}g%}}5*et$=tU(#t;hd76<jN$R9aP=k6^^@sk;K9$z?p&$q@lBEEdGtRD!2^%6
zX17bCfIMn`AY+ccF?BkhGN=%F?IFFuf-l;0mq@e5R!L9YR(SAK`kbmPx_5U-Vr-l%
zdNd-^Q=Yf{IR@S)16{E|SdP<EP^41wvHsPi2#}2fwe|d}MJXlLt9ozueAu@O!ikoS
zuPj>#iM93@kiaGcBN)@3-4o)u7jujpKMjAQm?>;Uv@03NsE_Pu)9g9_Ml9Wzn7pAq
ziDFAq0niUJ`(Z6PVV(-A$g6>#DVrKb+e#{tr$FTdxNE^7P4XG;9nTdDEUz$Bz~Pf9
zE;fV|j7fCP=bUQb*F9FujpoJtA=mjLU7eQ)32W(a<#0vH9|`Y=;Lj3jo4M~PcfqsS
z-iwlPfgEZ?E|7bbWTmE^vXRy~d`@h*J|VKcf?XkG=oK;BfQ4ureVv>IMxtuSy0Wm<
zI{xkx1U_@$gZk1RAq`e_m0w>;SfS_13+bCl-L)=$n&7=x8xutFhRSP?Bx|Yi3)=(-
zp_&}K>Fr=5KSg{!PtDz-Jqza+>@&-2Rc>5?**HI@x}()NA!pNz$el9bIol5vOIqC}
zZHR&sU5W-p{0$J?m?<J=y*($B3RP*@o7TVm>;L_4|N7tQ|Dj$SvU?Q`B7{b`B|wWT
zJ$1|%soPi(XDu!WlBY%8UDa3=-hN?G_P3ORvD_0DM~oLEU=9{%gYs`vUmS?mZn8R#
z*W?8T2>YC~@lsX)TB`~@v0EbZl{|SUSW&<S4J@YUB5vJ-WE4)|DEYVl^Z$wp``07O
z12oC{%rW|nD`SP>XuMJoQUMD0SEMsMxymK8ID2$6H)o3#@!l#U*+lSAR^kE`jm6K7
zyTYP|3{{jpb|W#Mva_1D6Xqm<Qtf=Vo_FI)dNfrBN!t}}yZTOvoj)Hk2KnMLs81{$
zjkWk9zM7`(!qpVz>TH=|-!xUl#oDqhek_RE2Py@?#ATUja>w;$9T?~h3ID`&amHrh
z1|nQ}R&Mn?4-_?$0w#*F55$tDi)^WzB6*A#0%eI_)|Z1{z<P9`BW-b(!1AD#cyS9T
zp)Jgfd?=`B{D5`AG$X`uxUbv(ycj&Lk{|?Lvlg09a(qO3;gMNfjznT}G6LO%DqRJ%
z{$+NWE!jBF_`51Jc_~r7TA5&P@oQz3t8*Fgeoi$P*Mp|HRA7=Jr!WZTQ<`hx5<ei0
zZNahf%sfX$WVY({7IT*K;5r{v$_|=VrSub1HuPU_st-`sL&?k*)OSuiN!U-pVwMzo
zXUjY+CKUtVSt4+}CH{J_uU+q}2#W`cQbIiHimr;!0K2K%E@JVFZ7YJ#CmYsV#>|x^
zAXVbSqTv%<h&OI&>0#ad4&Vpi<Fj8k=x8dCGqZzFKSnTguC||_{oA+0^LE8y^E*k8
z+GDiE-$Q--GgDQ@QIe$v`4%0Ms+jygP*04ci4jnd5^%z5;^`SU7-opc6n{Nly_ZkL
z4&+t};)O-UuyVR5J~5ijmCND*3ct{#lnfjf&Oa<0j1>e}yq`C707pQ$zrJ-Y?*?q`
z%{g11)u&!Z^~ha|ZeFW%i}4;;ueTdDe+{cXP3hodJ!cjJj-~uZt>uT=y!cg`o>0ZU
z$-ukd^EeoA8*~*&_1}@~d!x$l4IwUXsk%JZsx>w1FVD`()t(hv?aN0;uWnTFSBU#v
z4dH$MxAVVEx3mGzfp=Lj_l{w?QG;I&%dO1_XQXXByZqeM&n|=Nzst}548H2Kws7*d
zpoQnlbd0<J3flfz8!9FzK}$#T;^K6gzWuyyl&9fp9I;q)#M+_HyDDYS%=d_dxZ$#2
ze;c2<c3u=0+4AT-n@&IP8DEt9*1``jZdCQx!^QbxTg~SSJLl_ib)%~PFkDiREp;#L
zTp!LEtmtOM`}Q!EV%vH@O)pQ1;_cvaW=rtk*3FvPACAlObh&Mg#x{<JFeu(^oBn<{
z;X<3Mmr5Z_Xe&RiKkw$5ueD;NtG(Ie+#UXv%513{uWfSH<F^mL`>bb}_`|mmMS8hD
zxfx{zxEz()wn<M=ck2a*z6<Li3MZ%UEfQjS28`wrFbj~2!IFS^V-F|&Ah^@;32sl5
zVFm6)dA^XDb812NP;3pgZ`EPLDU#TDZGS`g3`NhV%eWchKtXclWx^>6;I$=S3c`6a
zd>ET;%0cqIs-iT&RnXmHV}og{`sQU2m>opEFIm9nE{Je^YHqtuhH*(3T<;i1)AM;f
zResQae|XU~ErTW~KMXZ3ah*_R<cb$17o#RnaU5W4Z!c+5<N&lo@``9)6m?4KbibiD
zlBh)8)9%L~vI3>kK6>=@(SujXZu0o$^Jf~(`Si)NC$Ey<BKhVqOHOaNwx~FDMA}g2
zG(}5Ul2q!lmpn-0U<MO0YJ+P@N2PV^rw(`EhTHj|a$IufHYZ8pMoh{5V46D<$|vf#
zLz@d!+o4rPlqufN%j{j-OkUm|3de*Lu4jk}P%Br@OiUW|4Y!u6=~diy&4Hga)8fLO
zP6KEOOJoH*({>|U=B?cC;6M0xAd@ZFxwBMoV#bC#T2p_QjOkaN7aWJ<<yb>Zrq%@S
zDP5hje-E_<4Tg!Hql$@a)NS1zuqT9C@Vrmc{vUew*VloA)0eG#C{Q=FqNJ&>`OK`m
zFUgpQKq^+T+5x|wCm6)I*f_MwvgN?LL)(_>s9GB=gnJuIgrVv`^pgr6FX%`RB^~^=
zEat&u*>S7#eemp%O2<#+t8rO|Uw!}R$5%(RS%YT}o*uq__$Yq%@bDG=-*-<RRlW_Z
z7XJtIw(do0U6;rI>K?DkK*x^@bX8!a)5|^9ulRQ_A00k?#@*n(D`3%fb~rUBdsib<
zY(R~Fk&Sk~m|3OLs3^F+L0ApJ8U(D+x2AZhSad#zo!EMDOPvNv=s=#UHmO;+)TmwR
z_gOFVN5L-ocEp8kGzq`!D93P++(VYDM9ZDSG5e2_lB-&d-}!P=xDnu)D@@djPFh&{
z5kKM7U#fw2#Yb)ziyp;(j$C!~qK~k3?geMiWZMi!vSSTSaQ9?OQCZyzJ9_Hi&fu5$
zL*a755jO!N4UEX3DBi@#p>L%*7CD#zF7JHvZ1<yRU43fdYfV;8CO+nJUBZMj(|n%X
z0_zUFqX+6&`Z8hG44I-b?{_FjQm$d?ya37yEzIYtqeo4S^FXx2EaTW7+{A2l<u5I>
z99+w3qViKtF2mYKVcWQB5`1U**)jml#mA{d%?i6_Ua-yzI*N|`NZq8AeIwE~U&Utq
zAl`n{8S^K`F?n23DW}J3=ZHYbTxSlpBS-#57yy=exmMUH^#1S(tS9V~#TDu;cw&eQ
z=A+_`!dz=aEV*Xy+illVWsu=4OauP7dGI|q(uiX%J<D3%jyGjpHESzd7DgL5=+OrL
zr}iPorz;0^UB>(q$=qeeR;)f0mJ*}JY=dEr38!Q9WU{;j`Wk<V&}{}Sx!|Bb#Fl81
zL;G0hRG)UiA5Yfv|N1jzDW!-aYQ@~WY0ovYa`KejX>A%LYnFvGt>*$Qr!O^T`vR+F
zIom_$M>l0y`qE%Mw6NsJg8wXXc}djydZmDaY~2{Re98}n=M<aF<$PR=qevYZ3xa$~
zkM&6nfpcW1_S!bs-yfdkt0CSoON~DibwJr*HIlwqm*-*hM0Ibl%lv{q^6V>qSsnsm
zR*7vSzPjpJj+<3Clt8_*OF8(}r$`~Q$=v15^I%mUNEXR5a8wjgmD7naVHg2SU?|rK
zZ@o!guJB)1ks49K$$qDP>amNuq<<(`m~DMYlDK5Kk?cGxK@%@s3KMW6igA&2up5x$
zJ^3B|N8RA*Z}`#555taH8$8ApQ*DfoOf@__!>N7@^L<u&f+RuMI9X1{JACm3v;62i
zl1kU7PIr7n&M?(KA>yRAj65}tFx(5OZSc!4LiZZMPo&F-<S%5fQqz6UyPrmsQzHE?
z7Yw%OMLwIOTM3}^s-jjbVbMo-27*;o;Yn}K1zv|irS@pv9;ygA6(7#3PjrQyq%!vg
zO*c&py#x#PChAO8d^s@65uV+~BWuF>Lm%AqiL!YR>V!T-6;`NL01fQr^=f$4Cq`Jo
zT6%E~;DOx1Ma`J8iFU5iWP}iESW11v%Km2yg7(&c_8r#fD)3hMDQZ<m4sgVjhz_n}
zgS<pF;%^ysDX^ZGBHbS(?Pr(Xo4ws?p&l5%okR_{k~E*U>6tVsX7PT~R%amn#a<Nt
zr&`DPfiOH&5%pxh?IoJW>N4=N{FQ7snfEuF&Y8t<J;seJ0tae@*ygkY;*0GRDM2KI
zMr9?wJ{hgA?D!2rM)Fc3@m+PE76zNn*CJz&x}+>Q_eH}{S5YrJd09-EUtMVkM#hfg
zUA4t~hZ_NQY_<GZpi{3eO9f=qXiol;E$EN=&l|B-e{`K=e#dtp?s&dJGKr*GWbcnn
zMZ@&hT)JLNChyyW4du1bd03S)*FRU#!&ku#e{vmnRV=0?@^)w4okrz@=-3Y2{^E3A
zs(Dp31s~vK0b}uOStgTfD|(T(3%(UhVGTYx!RhR%R#cIR?<e~tzkk@I{)IUJHi=mA
zi^DmHw7(y?){mo_j@PMopDS>jH+;)rsCFX!(I|vIs4ctI(6oHe`ss&9FCQtu7WMeI
z`>p3MA3l1SeD_~0efp3#@54t&4_eyIJKuO!O{DqbV8O8=@48#N#!b_6#jAk2cg)#R
zEI`A%{&@^1-D6=)$Bv!VK@y3@dbcvRkHGuZC1BMR#+op%NAp@RuNk|2`}R;eHk8f`
zc?vPJJQWWmOJf+o(5b{ub$b<+7K3h<PKIAe;^|8#z{ldg+(@xfka@<@Mqzy91e7x;
zkkic-%gP!Ns<N?(8^KXhZ*uX2&6m0u1`cY@pOz1^Cch)-0PzMaz{v73Uw||)(;!U!
zp+lhjRBk1xAg-=~S2+oUEc0G>_Jz%nAQ}U5{Q5~4)cMtLo!8wfb%Ho}WQ=I-GC<ih
z#9p4)I4C9*6VWy5Rjb8fo9+FO2Ryij0Ea`iY!KOcTcUV-mie=Ri}JP;cNYUYx*k)r
zZ7QR98Wu4nU07xGub%`OnS9<ijiZ5>jvctRT628Pgfi8%R*UrsT_=A2G++Zy#~RW5
z44Jsy{Q4B`PAQkJsSQSkH^dO-V3HA6KMo>quE7Lq;{hWW)*?%H9Q4o${MhMV59MRt
z_X=mQ3=_{QYEmwvdHwRK8-|1~2z7RhI-+AG7%Pa3)_`zat8vJ6x(fHPSh9KX7uWCZ
zsX2U4kZxkC#7!eaIs6BF_AH;5nrtV?m4e~0$x8rT(Oxjc^3hPddfT(helW%EK**gW
zxfugAE}OcM(Vah9`owQ#BvScaSnJ3v&hflSJD)h43QMporX}MWo;1exSh65yF`t3D
zUElRpPlR}-zO3obQ_o`;7XUcwIH<Ra^TJb3{iw^X3`<s>nG>-}S_@cCOYtSpNLIcL
zrmWvKHwT9^9R!mNggs5?#r$$stjp$}`mEGpLt-oi{7<&zzDZO<ut6O<wM)K574&(8
zDpBYPpc`_{DlVG}DXh*29}VB#8L3Y;afpkm8$-chy?#T)F{~DXwI~+rsq72M=BBv4
z6JakvCiR|^ZTA=P)8M=#92*tvC2xTR8>Su|fgxEAygeTy`5-%+Q#s9bFxPC=qLv*b
zFAV9>xrYeC5CAk32cwE^7c%09FP`W*f3o-Bp~K@Ai$i=xbF66<wc+@TSm`UZpEZmZ
zr#69vTrYY@AvVDZ;)}2XySG#qS5^GT-900gU4?%SVNx+@Gd_v4gL9U^6;yWY0aUrS
z`3iaPM8ce`?}%WR)CNw3h6)cDQ4WgVyyI0`av%1I;CR71WRo03kly^C$a$T*;$c;l
zB{fI&Z5TkjU|T_e9H5XwhghVIVX*`NEFmt-b`TQ260X1%@qQ(c8z)X0l%!wjCK#ft
z!csNN(ZyHmEU73JnBK3HraXiwhuA~#R+F2#d+hEed;aIwySrjkRJRW#3VC%sE;y7X
z#F=gx$Bs+R$f-rv>EH}`S(v84tpfV`z(_4o{2Em55H}PV4p?=%G`cdO6cjF4{jQx{
zLrAl{$GX;R<IX2%nFHvHS!H}3kSOz?!WAyc1GBrBo_qw9OFHUA7v~_Q40$7NTOovl
zyExDQbO;`GPc#B`f3Cf~L~6lDLGWM@kMAo|xC_wU8~TCm2Yz7Tzz#7gj4o{$-jRSD
zZWy1aI`I0h#R<oldLXvOacXs8TxQSJqIDR@i}B!olws1#CzI+hx$6VO77i6QW4KDo
zw=`yspi*0MJZhBxQ*nX;b5(+0N7d8Ob+a5HggS6-ru66~rwbI=kxlM-Tl#C!bm$y)
zl>;G@wq&gum+#u#VVbOmg+le=3=Rf^R-=ka$J5~kqmj}c(18j@GkPxCA{hF08N!U0
z>k!^fvU*XOEhBWDkfs{?ApRQK4f(+ZB>@EX7ao-{FmviaQ0UVhZ$-s=p}#Pd-gYk>
z&L=E_5trdI!)d2=U>zncgelx)9kixXcoDvgXWorX#@$Og(wlB_|65im=BM^(0C*7@
z<4}r;(oxio#WbT$eAa2pY%q|{`Fj5LpxsM0mWQhGV=LI(!DVFV4>B#~d+a9jadWE9
zV`vH3H;kmTr}Fn38XS=g1S)172(*}i1dkq_p2AbM;|7;(qcvZG*0dx(c>r0hLv66A
z;hyr0PA|1a--Qn6AnwZeddcw{=>q0bJKQxD>mMiiyKl7^osU26;WvM+A9T1e)ro7v
zf28iD6Z?hV%Wvt~w?ES4{c(@}z>i0W0hC{R^xlf@MP>iEIw>ZXzNQbNekK{B(^>PV
zIxP<hK<y-Nv&;J*)`NWVky@F2OMk+&@saAC*aMC})F(mHNz(0p^xg0c(+?Y6*D0In
zU*{{5ssH$!exDa!Sh1wv|F-qVAjI%~dsVi-#e@L_(r%L9a`xNKu{bj0jZVCO=eNdh
zvtPI|Iv|5m*!2L9z6m~z_sWN$KfGDK;gg#1zyGLF(=@6Nw`kMor<l9O?b7;ikWm%<
zKG-LJtgQ4k_eiuu;{EaAmP?V&n5+2XV`Ud&2hii%uE4Vm8{@+ss{PoiYz((8KJ4YE
zx+@x?CS!?U3v?tK9Lw}HTU|D3&3iS(u}F0tdgQU@S=deH$dNE!!Q3|bWN{7*qia2d
zn;kXTenz#+;AY041D4J5GW#Rw)$tqbH`*=9N3VtQjHx&SD(Y+f7W(*25IN!O+sxg1
z*s{4)BbPMGe{77=ORwT{6EU%Y68=TayYAB@LX`%FK|PI?SD{0vJUBKm{vrU;n<6Qh
z@MM5S4Zx$8gLyLmX{Zz4h{_Z?ts@P62(omN!FqfpsFLc)-TX{b>i%lG|N90%_ZZ^l
zaIvUjt2II0grZwqfx}yjTyYwl=9BoJpkyEj);;T!q*m~mB_I|2N5v=8DeX47;@7GG
zjAGPHPi3l~9>xM?;C|@+vKoE;lPhXEe4?JXp+oGZV1R8E1#YjgziT~!pgx&(T&Ze|
zK@*_OEvJ`db<CDBe#=E=7#}HuM%q+?2T1bHyA$tIRf~PN5iXK*#NG^$6q$_UO%xex
z;bZ@fkuZBmrRX%~-Acg4?c4iiR^~PH24y<oQ9z0)IU2BhRck(za}XY07g1M15@hX!
zASjgq0&vY(;jn-;(8n^cZ+B@z3vG~l!(2S58E!f$OglV1-K_?jsFqp!)(3uwDjzyn
zXSs0}G-l@FvbABvQ?=O%D_Y}+kz14Z&q|v9Ay&sZNji^~t30`4$E_Nn5;uq@7beeD
z)RwUmXx-dPxX&V)$91e4-D{bxWV;ku$s68)WKKfYy1L8W6>e!SE$QR+J=B_TUSyv}
zE@A(Lv1O08#MvdCS^6FbHMbGnK@z9J!1(PNRrq5OK-@NM^u!z97<1-?SP^7T)uKNI
z$#E3zvtf@XS9#xYUB_;t{vx+a_LsZDJ&)UK^wA4;{dVs>uHs4;J@qe(ccJ<b)3z_O
z!13qUf1yA-SL?Jjt1bc&G-U}q41y#~7QYgRAP6&QW&xbCwh5p7rXtJBtKyDKv0V|J
z22BAsPp%BO={%UGYdC;BC>Hs&SgAApm4P^-w|9O+hcBK4VdA_JTRfEpo5FY=Mu4MG
zCb|{^_u?k^r0X|rNRzP7N@_@90YX#Rt0><#b{V#brIOT4$7@M@6T9d1<A8;|5uPAq
zLH-(ydAbp_FdCfY`ZU;OJ!dT8;1jW!;G38k=(yMmA|13X*c?`7h&Y2D9of7qZg9+`
z2uh#lT==_q8K?t(58<_U`R`O+5;#;qZNcI|ROtnuVhdU}Z(4g0c+dtBFCO|j<qY0)
z<hP-|svF-Q*FT^AeERL)A91OIfc$*6EY^#kMG&Irkkjz|TSX1?8h``DOFMqULZ)fF
z>piC2cmk1;QTp~IS3riNwpT35A>*`<0_pj6?(!pllGN<H$iTcf7qd<NYhy#9oKK8a
zxm?eA1vLC3JMmEIJ!cyUBF<`{(i=(T;Fqd^p1;eM@XfH`_=-=Lv%XnM4zRJSWyX<|
z^YmSQma4vkNVDRZ2H`H62V-J+u2Bkq#Wp*mvOXH9yd)y?J~_|N&ZqQ0wi&VYG{)se
zbu#lksWx=r%QnS0!T1bF`z2QyIFHvN?ER$~k~bIX^ZE(b@IsPXp#UR?JI^&+Sszs5
z5DUci5lI5-TF0fMfLVp(gVVzU?_jqq789fxKo(|~m3728@gsOM9R2^<`?Kvfu54Wx
zyf&U91UZv{5{*dOPA6<Blagqe+iIAkWbgcWe1ISjB*Ov`NCZHNDeE8qMUDTaE^3S#
zXN-D-x~%J}>w1&@0`&?tzuBy{A^@;a<7Ov(_DK;DD^|ben(a3QCcd|GDw;B|F{45f
z2MO^K3$^N?%-Fz@q8$1gf?Db=BR*D|n7g#zLYi%pn3oY}yjKTX3B(G%u~EhPT_(A?
zQwRIk_xpz(4RGdoJ8D1@O!3NZFqA&0v!~a441=o<lB}1rJ&Dd=zT4#f^g2BYQhkbD
zj`s`P=tFQ`-JmuB6I2@w86O!lF!yyU;>G72nis(k5#KW6l<$S~7MiVQK3NS9+hPP3
zppjYyNMZ?J8qA_QFA7Vk8QMh-Xhz>7p|H`l5bt@AltP<Ia$LpNEZGs}Vvs)T27GSF
z0J<aOqe|oeJhx!?!F=ukp7CJo#{tK>AnJvq?%V+{Mq}iNwexuj)aNnxe6cEMCEGId
zI|)y<C7u_iOkR5@*dlpI3t{`>`C{K7L#W10sWZ)dS|5$K$U_##yFIwX6Fhz=Yg#N7
zXQX!OO?ST`zYhC2LkghtGf6WR{WP(RgacnD;7NuMRL1=Z$p^;#bI=ruTRsNKtlg)T
zq<!);J4x3{UNs`LJ=A0+ZaO4H5~raM**#x}c$A=y7qD3OiMfdnvq_Nt5H4-<-Jfpm
z-}bX-J+_M3Nv_L)lp(Q7NlU<olxl|gRFe2KB28CR4!E|Ack`Ku(p<k0JB+0ZY7{dG
zm6EPFbmAhj6uRjxOoz08y&Nvr%h|#{d&$(CI9e46=>8!YB9XO45f;)!1r6N_LIK#y
zqb!bipPG5YXUTXq%FgKk9&^Q#P*05+lYAQbuBokrnCPhh=@ZjBo4SB0xwXSgNq#X}
zoZFSEU7IB0i%kq-7NJ{N9=emk=L0MS10h-F9KB?=Ty-7TGQfKrp9BoM`B5E|)JHFO
z6qZS@2EIgbH!Rjye9^_{UH5r+mgaN$^O!64Qw2VSIo^@LWB3`P{*c%$>M1S?T@~Gi
z+o^cTT$#h`%5;9ntaIU$>wK8~Oq<O)HipCD%nht}O8@0&)*z>(E?i0y`bOeC$pQ^G
zH4VAdbfG3W3;T6V+rU8u(J@#a1K#I6gh<sfP5LJz4&4@0bg@C{Q1dh%B;JV@J8mS{
zRt*7uz`B{H5MIY@J|zk{<4rCC0QW>V#1SX<j;Brfu9+uEGtHas_c4RR<Y^97f=kS;
z=^_PLLELpMffu!T5KN3MOW>A_B@Tafvr*U4P!WZiKC_k+%o2KV&I!CjZ&U?ke^)4G
z@s0I|<O@b=U!IYK$kR0CMA$4)b2<+RwqSvr6+qY7&GRSS2XBDpE6j%x#1}4oQITNj
z8D;$%XL<t22H(Kkvr7Tgxqo%#v}qrt(^m8?XAM73K)jAKRl3OWx6@y~;~SD&6;@hF
zsm<)~*Ku?*NsjJSt#xQr3awWW*MF}%%0xF&y>CnUbvwRq0Z24UDhNr|BjVqQFA8pq
zTcYZIk!3@Oft3dm{QuMJbd27oBbgypK@NyBgk$rOk56#pi=hjDg$%=N+IgBCa%u$F
zbvSvK>yWCFiR@2Orn+fAlN{ZWrkPGEaXvgn+p@CMhB2715Ad}HtBa=0WuG}tt}ADE
zZQ@hxvQ|Jx2Y||{{0TKcizv=mQ8D~!5iTLvR?H>KAurxpa;hU21;&z1lX1Wxi3Up$
z2bN%;NGo+o)DGx`p2fxJr1h>mRN8%-o$(j2{vfVFJqE1>75G)SOQ(gr(Y;6V*ma_3
z>FW=(DGUQ@UFhv=@OuxezY{Rwy+}0NQnvX#qZd3O$9AJ@G12i&Y;4j*Q^Y>HKSznb
z;+1UAPLl~c<@&nu@{~U@I=nUNpCC&+*c$2YsU!USV>Y5WVh*1=CZ46fLTd7%;}{@z
zQWd4)(3BiZjU6g1#b-={3KCY=Z~|zZ<fYcr)l82rF0*!+fC;L5C0GHX--P+^Myy`M
zjh1N4IV~WJEQ9jxz#N^l(x8J1U&jfn=rJ~yWUTk6Y2GJ_Y$W|88II@k{cX#&5H=#J
z0Lxc`^Kh6Dt8;-_a~H=}fq$MVo}{xhQ&D51{^;*o^DTC(@_e*lBl?N)Jk(LD8E+1p
zg?<6=vx(JcnylAkIas4!cU)F(ROybPs>^V9h}w>Iyd~WL&G+b)?89K1YEB1N7wXEP
z7SQs}MO$3ezuW#x_cpKFWf0JhkgyvHO)0^SVCFf=UmYTKD7~o0`_Jn^=mp(ua*rwT
zJkBy)47U!j#wA6g8%|C~AYX7tV}N>*v$j=JB^^9xpXlOrY;?s_S}l9D{JfDpwN%#S
zh^MrmLNhW;3^MP1B?&MI=Xutbn}s)WNPTOTLDN4<2ckO0Sj&C9Y>d|P;3hfPk<2Eh
z2^TI;_6@{x`J^-heV4}7Q<0GE?v!tkU<1gfVjp+Iw)`qkA8H>-2%2&aU=eQ!(Tqtf
z%w9$DG{i2@0hFh(v?{s~9tfeg#Y!A}%Xfz^n58=Vum9`+t0&r7J>Yf=>%8asEiP!5
zb>(OIl1BDewO?}AEkPS=jJKwGmHM2!aNoQ>A(xlA<gVp2*)Jxig#<NPa8Wh_J-Zl)
zE{4g1y<F>OLr^r_l8tB>A0nHs*f0~3@yd3R!|b(U6|&f@W_&<;)wCy$Z;7l+Q8Uu~
zyXc#2?T03Z1=Nevq1to5^TIi|DP<4H_nl11>)X^vfp84RQQC|r@#Hicv8*T)XkxGn
zEu(R_BE2tqk0nj84prBItJ2VI%%Ph<`Wx724QKy8KgonSmAEQge?#OJqE!ncyM!ue
zpNlgF#<sjaQ&qVnIY-K+!=#kT)=L~Ta5xl}$z8y;5%*6V)rsm%TRx%E0AZK*mW>E=
zgL2A(VkOFC+bI+Vll217=W=wKi|@5hc^3ApwJ~Rt)mP;?cnT0$v4f@@bdwEdhC)@;
z_X=yryvrd^*@0?%OQN6A32Y!O(S!t0kC4Jimq%YD10^3__dtw&g)*@9LB}`F)N|!<
zcAPT;%0xo*z%A1=RyzwVV<i9!ALBTmiauJ@7rN7&k3@0n_<GQ>0e&HlYo4q@0}a{b
zue`<+^Rp?2S_3sg14a*s?LL|=)=Ay%^2;u5YYiawSIKRDRYxV9;dB6r^#_eMU*nMJ
zctAYmf#6)cO9Sdp*wjeudLanQV!CNU*=Y_!i^p@xRAZxeHsnKSU0`jo<a{tUNCH^m
zic^LBHh^BebaMnlN}LzkOWZAV@F+bxViQg>xn!FSs8pR9(>{7gcOuVxL;mI&(!Snu
z0um=t>+K47L61uEnM&A+U!UTeZ)b-+8&D=Wo|Q16I5N3m1JR0OKKQW{732zqRQ5}%
zPFx%|^T6+~#xJXeI52yzZZ-boApo$br&B;53}*erSoni)LhbCbJb^st0IXP~wWjk*
zBfTFTKy`D8vPUZaY_lzHha>aVkU&C71S;wABtLoqC4gG^HkMqory|G1y!Q6K5$&7G
zd6GEc9Qp-RFH?j;fLCfoFS00~og%d?gBZY>*9%y&S});x+dpAn+5=?D;Q15^@@VUE
zdCtD*#*;oQfb23QvsM#Vet3cRFK{zOoP8*-J25B^GWll5>?p{+8z%8&BpXV!rdq0@
zYI{D8>YY|Hdt8;%n9m$<265*U(?m)HQZxae)lFGsCdn%OD9ICThMM|L7XkoglOU7g
z<@!I6i5JL39!x*CFdN}SHHk@u5s4)A5o4v+#_?nl50l|A{TFB+l0WA#)Nya}WQZUW
zzy%M1X-CWin>Uc?q@Sc`U<*J}024l=k<pOo5;-A8m{}awsGSidQYE>OL%rAs5kqDi
zF<vb2%SG+X%W<SOFSwSoU4r((X|CW6?3G+QcbW;B`RWVt#I5S=$~+{6$XY%Lsu%Fj
znRUk{%6dCPifPcGhiK*?nM}MuFI)4=E<fzDT1lD7Is+n06eQHyqO(NW(Cv7F<gWat
zw8j6@P4KcSFQpnu+MwMB78b(WR3Sech+)wJ>}5Nl-#GugtvBwT!br##eR_CsL_=d=
z*;t$sL<^Nou=-OquZp+UkG1yUFgtD!;~DLZCN=P?x!&gQ^J&wzQ&S2PvwU~~c`cqC
z<5*7si?l?iZJ&mUZN8pvtlj2mySaLs7yfGfwsY)~Q-8Nh^cg;YbT*wWqhP!W_1PeZ
zmngJvVq;i(XXqt~rmkaP0Op_yKf={Lbtt*w2ZY5D1ZOZ?09Hv{ki>y~TI|)Pb|}yb
zFpFYRR$Ub!rh&%V7?p#Y23H*b5H0b#{-Qg{;8G8cE+}2#806^M=ISu6QdENmSfatW
zVbg+r!+uALTl=!hUXaq7Iw*xL)fl#PqFZaC$FU7PJYb<C`MS;_YI#<YB8e{c(-BM1
zafE1A>QJQlYZSgC^w&2DlL6i$q2zph!j~v_fda;UmfQi91>uG*(W-d=z0&I?26Y)8
zHBmu4ia98bo|)(&4vTzin2#(31!0mLV17wh*jIYan$vhB6o!T03vXLgWkifiR*ElK
z`mSCNa2+i=6=<+UI6>dI3yvn`Kno-SUG!yFe-{=LR13aY+6j@fQaX)xaV_rFXI*<g
zk8wy}zuaLM`zdZY_7dispZ@}V8&6VRZzs|+CniLizd@Ef)zrW#4&J+p^u;PF!0kKd
zGdo6$D}A{4{Fx%ZYEYzm&(Qm$aE)`n6uQRtWNwYo!9f6uUU`B$6SAltM2AvrJr*h=
z-?<3Pn?zYK%b0f!ik3RZm33Vwg!1sirhABU_#hwx!UKhAPGWXG#bIJC=7I78%-jB0
zyG>NTiER#(dGcCBxj|E}+$JszI_uGvTp<FD$A-V$DLEZ~!K||3n(zn23T-iSmF8;2
zLu?t7advJzPgo6MayAol=mv-hAaQ>ZZNGRTY`53lD(5c2MENXLmpb}L^h@4uWyVn#
zx?5hI9($VbUSwYf<1@79`}jxS$Lh+-Ab_p5tOAGa2HTpc{uI}f_1|Yau(a7`K4K?X
zy^bFz(*ow9GfM8dT@vXoiT>yyj`KkK8yd{6v)9T#+j2Zgn?5)u<(*hME<bQ49l044
zpo%uydGK^`=l;@_GI}G0v?k3p5OH9_7_&931Z@aS<K+p`K5>C_&2uhu7*C_H7k~mf
zjwb_Vb?qRdnzcePju9Vag=ayB8oo6L#;6hcj-j^jBBM%$s@CxBnnkAQK;~)?rAZ3m
z1OA|rBQETv*GI;~^Z0^zuuKf`yv2-|Qb!7wXs<ZeT?TdJFgap{i9TXiWt|@$r)|io
zGvi-_Nz%fKWcDr6plA?^qcg=LM`wQ_^<wufz%#N=X_gDB6CXL|xmfmqMkhDROH0fs
z{DoRz1Vu3&GgG0GGTe^bJFx(;XVE_U9(Tgr?~+@tY#tC{BydrVY7)Ih7p-7E&>upV
z*v!CJmGU?Yk`uE<8T)jQF-6n3EhqArt1LS&9SAQxI-@>K(t>UC@}*Ew=B(+yt9N*1
z#jX<cC5R}L_yj#^Y5?g8mp(dceZRH0gFv9}v#qDwJr#Kk%Fj&#>(H1bb@$q0Qm`3Z
zd|*r&<)T2RX!wsVXlJT6*4u-b1G|Pgr6VlEfvEcq5k0VsA>ZsGmdXKogDsCId5K4h
z4OL1OFqZhFOkn?w&g-QGiF{=8R}}bl1VsbkU5g^{xEXkCrh_@VpzT5~86I@znTE4t
zVEATA3K`Nj5$`&dMny*;XMp2t!n=FTUF)@&^Zlt?xsrqlmol6}FQhq-0=5z>6$yL^
zAbGJX0UQY9@d>*MvT{G5IH5@8`08*)JzFevlz9>XUZIgXO@X`KOo9YWw2RFS3(Ii9
zl_t_FP)Q>CH?Mq`(EfMrVWy5_v6D$;vnWVyMGk0^`mZi<n#;#?<Fl^3?D9*GcziTT
zk|vdrSR9dW)cf_t^GDBf5$mLS9<yASSBTJZ>{VWi*o8Nr36lPB#(I)TBABvr1%;zg
z{JGao;*6X}f%^0D(twa1VP<IC4MLZbPIR!fK+M0CK*{>SmE%D5TcrWsl@Y3-qiP9Q
zpjhu#Dy-9CTDibiavSO_^O7ol^=F+!ukhk_>fRMAXZ2lQ1x)C)%@L1yU6*iTT98Os
z0Sb!NQZQb9WL^qEX5Jq{HRx5^PcL$^f=PV?5n#=dx@N<HV+x-GjlOb{y!Sh8r~Il*
zgXUMJ0uE2bKiq+HF!_jaaN9mG2w959t5iG<1-4<4A8uu*@lVW!Xquhd91Orp+)CxZ
z{avbdL+a&MoZU_sb`GLJ_5>gXU}N$g_oUi+A*EAEzy$3hbbK1K&MH_#f?_#ZOLCMb
z)cLsxEXF^F{cF>y)*h94Wj0Fdn1UZ3V%u*qwuQsnbEFaENIop;X$QOAM<B>h6wq>0
zv&5X4CYD(Kafu448WwMOzVL@l_ybmzbMVl?167-s=6h4-+mz~Dg=ioT?PCUx?+2ci
zK~QFyu;gAkr3+a0kf_j=zD&<Eb1q`;O#6jxa%InM%im2ZOZR_q-Tj11Avo2>z7Kqi
zC$pp#G#L+v*KU%^E^ks0=DlGe9dQOwq63g_a&$#v{<UYhD)jw*=H~jxTCoSE{kE4(
zk<FZaN!+#A2pH@_2M?Tkg$M$ITSl`#k!nh#|E#OeWfNSeO4^)swlqwM?WRuR3KGEy
znPGX$30Jc*bo5N3S&H$Bhr>j>;oQmwbbpy%@icy&p3Y8#J|p%8xwL~b>W87Ct@XdG
z01~rM+wK-t1{CMe)84_rUqVsIng6oOh^_E^Cg^UR5#2T5a26_s9(lHdMzN=<2A!qJ
zo80Nfrs-!4zecn_Br%YsWY%}L#KFP!x8T(P9`7`?pNZ>fLI-#1&0ER<n%_7Nl(i)4
z0^%Q$j1&`JcUtn`lX<X@yIRP(hs=M!R`>F)u#0+TxTZCC$9OsUAV>>zJrjc>N2}g6
z<Y{uaE+G3L<mx~f8=ID)Xj)zu9pow8Z#2IF6rpJlpUr_zVVskN))az4-YLw9J!_Te
zK(iNSpoM|Mb>PTz!7T))Zoy=p4&w>ya#{ZrL<=FRC(TWL7P=gVA!G+z#Q>;3UlJ(S
z;uu$`e9vLLJJU3{-WN+|ST><Fap3gUH`Jbo6|05St;61InH}cyF8trXox;sX>?1R5
zGIkmY8-TtIo^XldGBgTmmOFzl2XC0W^&!-rsrn?C=6(sSSit4B5CVL#t+$6vksFcW
zGR!Ccy~3anLOxDmb|T)bg`}s(e*1l+x&SeDxEwx<Y!0{eQ4^mu#e~_ae1VJxyrefC
zd)Re0F_f-p<WW9^uH+PU<UdpIf4I4ALw%U}W;OVX)CJ1Gx+&gZ0p5;Q5=sWja-${Q
zerAGa|0Q3L-I5N98{Xg<hR_@%#TQ7p*{D?zY36v?w7k9bTb@FC=RR8z?mnKvTTjfR
zFI*u>sEUszF^hR_z)r?KBXrb5saXtW>5yhT;W!Npkw{2^rQp^UMF64ZSCFCI%{DTh
z4`h646}`B)n%P)#TlA9&Vr`rOJJfJ+G`@gQs$|DWd!Xce;p=z}9G1|<4q2QVmi^=A
z9(Hv<gN?x0G^Hv7Ue|?~rPFteTs8N#1ItmBPSu005L>b?%6SAJl6>fDsJDJG<GX2p
z=omg^7=~}07Zenlaw#Dhu24u3J%MsGNe@}kP4^%!e3i|NMILaVexEVc*^DH#hdGE?
zSYlUOY;~wARS^u)G`<cnpu({HhTk*RD1UBsDcV>Z9Y`|v<=#;n-7%L~5}*l5-lKsn
zuV%gLv3-|RWel^WMM6CIh#ir<`&rIHqn8x)!4kdex<m5GyK&B8$L;gD-;_mfu4@2^
zb3{Z^wndTb@9dGdEXJN)6PE?(8|3i}3Xk)6_(~-hO)6CM`4-oYVzBj<vDV;KpsI99
zCnfCK9qa;%(#xHOqn#4HB<WcaOPLpQYG68iSpYHQGgOFnZ^BVnClYQSGfHEA5}<83
ze5EK187~fj=+$ZFA(o;7#8PQG*>OUgloTs^Ui2V7by3hc`&<o!8IUW=1AaKeMWc{_
z%O?mt6({YVqo2#G{B!iAfR-R2AMXFtCwK0=+_`hd!zzYALScB=&(Whoyl4=aBGG%1
z)aEdTS#7~Je<MlS4TH!@8#TW48)E0Be`&u>Ib{IQKrD<X?8BeRa5>VX0_t*G`yNOq
zKu{Bdv)DQv67A3BV6cW&pG_7Z>quKqkd+FMBivdUM!l4z9Eg+2VN-N6O8J?7Yrk=`
z9sxWnK(*X~U#Y5fEZiT<-SBuTSWdB88!U@MSIapl1iH3|doLe(G_qWw9U*#0>m5T_
zQl3opgLV|h!+45XLg1<!dbs)dGha6i+}3<i0%7GhD_-%D++|ZriMq65U@;JIIgs<^
za42_1=1?+Y;g|NHzzgjv5S816wbCJsKCk<D8gqs|XQ~A`#Iid<*i&S!SOAiWX+_zm
zF!)aLNjbP8NSABkZef_;f*p*rY4N`Syir5s9MRXzM6)Lr(|DnXejB`9^K+!wYsTV=
z!u2%a!0UV$`ib*_^S1ztl$`R%aq4TvNN??|k%Tsp5SN5A*fE=MIu^6AxR&zf-`Z(}
zv6q8PT~vyVMV-1^Y?)fOGJd%^Wtm^>Qn@vY#4Kisoxg?_=Z$47G8di^+%bxU)+(I|
z#!d=imYl<t7l!A+{Vo$C=Q7GF8j^<?K2QGzTt=B@k9Eq8_D{03pX92H;{2JzVG$?E
zuS+o>a?o&}Hs4|-`^sp1YSmT>G%m=IkXyPb&eUh=mdhm2GJO&g!{tu0eA@Z!?%lfz
z3Ca{{qZ4f}zVaP39j3&AF;ZVnIDIB}L!nVS?+MN?keLqPb1rA_mEipE3eA5z+71%4
z)g}pNaz=0JSEBPPHoqJWcU4}A$RFVG|F05Yy@IFP_wj-h2Kz!D=hBSHbd}K8;{^!+
z%PSZpmjC3Dn*4O!5_QIpy7W^BL#fP~k3n-5LzhbFMR8;G^hJ-OZxIvEj;?9mafz5J
zV#$lvT5UIrYnEgRd*xmfX4272P3+>rd78e*Uxh49vypSe$~`u-ds+|cxhmt6q+Y7<
zC#7^LG@n~FOIn5hf{aa^4amK~wtG_v7svWtE9R&}^0U{S=(COJZQXzVmdGLCO=?NK
zRE?#|V&g+CXz}f$PU%?WJ^vGAjgko3dvD$lZ5c3r{rcUzf2c-p-v)`HPS)?ABqXDQ
z@fZ%iZqx6If2#qbt|Ey#c#(~%vW@X;)I~QdBmCWagV}p~pLoM)EnfS&E#HQ<75Y@D
z>MqsQux_qxd``dDP&bF;!iD?Z+UW)VSi4`Ct~Zt?>95h6P6`s)tVJDhnTq~OF9d-w
zNWGmT`WCwOwID%}WJ?PEq*>K4z2IEPNrS$d_jw+qPvl#z*J?BEM>@Ev3dw5o2vEi}
z5u}Oxm#6O(UUG2`&-ttSimaX*z~S^*Yz36r;f#oGJhXf3J@qc-fLFapL4zFa>BT)4
z;$M~=TJv<JJO(8&<w~uln9<48+(*|1nC3Q5b4iKXZC#t_4l5@3Cg!!N8q?jR;S<HL
zRxV4OL?>6MjT}=wT(7Y$cn=t3V<?p-u5z-Sp$cMaMrCd9c_dfC!+{WGxNL4w))eb#
z&B}V5NS`%>h6}AT%2`q&aF5<NLM&B7;A59C6R2HaH5KL<V!tGzaG98YaF#m<<tf{R
z+3Xw%Z#foS41?-PX6ww-cAArHbYXtl8n7jvU9IrWDsPVP^0GZyxWLLE*i8mc&s1Dq
z6}#pYoTEkK)Co7ZC(k_{iUh^O(wBvK=+*BvR1oIneH!Kq_3m_<4cH-cj$qjH2daSf
z?7Tah=>KuXD#S?vxNt4Z)Ge`Lv;$&@%=;NtHML;0(<BzqRE~@yneLeH#j-9W@vcbh
zS*N~W0h_tm5rkmYDh~$BuzmwBfuU-%(?lf&NHadC4N(jtLQgnmOHw~ZLFG<GC4mzK
zX(E6fe;5LZfd;wy?Q9j56s_oSD&Sd6#55eJ`jplu9S<+6x^}cr`-w+cM(-C<mvGsG
zT#P-*p4o{$ee?Ql^#A>TL>ova_~tc{p^djam%8xQfi+v$>8JWow)k8T?CodJrG}H_
zMy*#3Cp)1T2=&F+#q+yDg&aiBo~EyzJ}3`UVz87&i!a)PorNn=z<_Q9M5Xtqo)VS-
zwD`^)8Oa@{<Ptin(9R@ygEzpM_B5vcc+naowgK}(BRWO)pIZm2im;j((}N#%?UAfO
zsT@{d7txtA*L|^S(UQu%Rc^a|ao8GPR3uFUZEsl=xsdF4r9y;FZW*y;@KsaqF!uo%
zuzRj(i+<LG%S(?mEkSheUQ|u<tlDwhi|#=x+@cp!Og~G8#Si%sNEUxfy*NUvwdx=G
zRr@?o=E_pJ8kMixmM+Y4VP7LdmU|-;ySOmscPkH~7sbVX0YK|J8MKtx3_?&_bv>4F
zgIZ7Ks8`p(2CReFCC{^98`EY7Kt#fL7VaE$m<-iCe^QSI*-X+;s7FwPH)>6GbUjEd
zE$wQGv_w2PJixUj&OS9Q8#0@4GMZQ~3ZyoI5!G<=V3W~X!0B!I!Z}P%3_>mMCxMeA
z_Npi(6u5qC$Z_C^`7msOLhONO_ShqiFNo50=;qldo0<aPdEw#ed*Pu8K9X4qKN09=
zmk~|#J`Iwo<#IPSlavv@HANaNtEA+li_I?%5}KenJhk<(Xc$LSk?k8XH<R?NT)%FZ
zxW{W+4{poPI?)4mMVtnUD5QHB-g#b<HZGqnF98HThFjYDJ(Vm}dMNr)LI0Pt%~|(0
zcAK~G<e9+=a%)8{pOb6ZlS4ca=9I+Q3wHYoZ^jYFgJnm-7=oMf{Zs&3UI(xh3hrOe
z%l-Fji&X$z&jVl2gLkY)h0Co_m$0=+nK1v&gYcUNSA4@H=$TRo`fSJlE`0gf#*OtB
zTh~@xY%SJY1bura6~>x)x?8gIxU<%Xu25@iEzoPskNClo5kI*0h#!<je27H#dKa(B
z6}k2y#(a2<F+aH8n2A7KbD?iCA-WAkTG?u-*uuM3W=OLIw}@=i4l3njf|u@?#?s=2
z=_Zb4%_qZ_|9-45*{Isl`jS=E?!W)K(QMyzyI#Gjg|zKXFXlB}RghO=3zJE;sOy5R
zu3)B)U}qPVU7_4KtSz4%PSYtdd-oq|w&jg^`R(iWI8f9r>J%@kA$pcN#^o8waQ->|
zlQ>A>fI16He9hG_e8oGKZtZ(jsi3;F6jS|sZ-VXjc4^sc^pJxb@4dmEpnIrDb!+-h
z(wYKoW!mDpeRlfdf9(a+(Oxhgs#Cmlo<;u27tOFk?+f*<(5+wz2lq@By7hMPD!BL1
zmF~$FS5>K(HD!+1-YyuB>2t5suLleI_27zrJy_7Mf|&6By`uBHXu_hOe~w%y!^Kd%
zhw9>vL(>fsam`*`XZ1DManb58EZOWM6Yb*eeSNZd->qvXl@P_)T=L1{MtJitX=QF_
zDdh{5@LPcvJ}&9urHQr02P@FWUp15OK1VN{7;19aN1LDrOD5>S$C;o@9tA(^ml-*>
zqNC(o5R2FtG0I5RNJQY{*r3pC5C>B6oQbkl6gL1)9ZDN@OJ~PN>dqZ7y?N9N7>{LQ
zQW&>H!mwbVk5t@cq)f~3=ykb2WrvcyBQlAft2j-j0$E=agcuDz&lPwRF~G+hpQ^a)
zYys`P?iD`7Ad!ty6q9*qwO|O82Q*UAC^t+>%T3~K79__x*`D@uB0~F15hNYlaPH-_
zo)f!z4xh;UQ;;zriHX5r6RrqtRIt)=oQHBrr}68i8s)yYdw2Z$D}4&fT_?KB(x*Hd
zBl2=|+=(_^u_LOic@)!pUv#1-vce?I{34$wr;X?VBIlpR{eAxZO@_H#+fR-&sCbFv
z+RJE-Gm?ekQBF+9Bt3%ev~sfUI)*MZ1uwo6eQs?swsI%By}7x`AGD17adM`-|Kf`;
z!m%``Fhkz`YEj)ApP_QpRbYV@cSJ@%UznKz{X~r+z&=Q{+wm|x9yK}GvlI2%QAl1K
z$JDR&;*<(r4GsG4-9=4_I_phwRlXd*j@CD<nnO<MO%>Bq;(pUXbbBxugzuUYqER#I
z%ol~GfmuzTxre$p*6+GuEBms1sO1sSi{|+R5Ana3uYeMp(%4X0wEpG$49>&uYl=(V
zO|wak?ZW;gwj|+1d}b9)C$v#H6ojKKqr0t*Jm_-g1kS7-BA&I5u^%Rhgl*qG`W*kS
z&{^BE{eC~J(W=o}vT@u`r!>=dTVE7APmMM?zA_mE-?t3PYC$J955L?v`l4{4f=MZL
z%L>oceC;uBeE!8|awyx!z#dB5=XjD1!tL{gZMWctx2ortKlwcQGa6X11Kh6hyJ_L3
zxP27k|IIggvRNPmAc}WoN8Y_;yUdXxz{WLs6X81QM6>ZYne^ja=X}V?Lz?gl<xbvh
zeO{UYac6k5{HPWv;~aTjdzy{nenymc?P)R^;*Zm8l(8eK9(9_y=HVoXUv(n>2b;<n
zv@DyQ*}+TZ?TN$SP=hu7GPkT+Hc=DMB^K|3;T(o<t%$AW5?r^`zI{|Qhu5vL&_4TO
z5?J1ofU)s$!q9<poJQ4{l&aO_xQ{TY<gJ63YHbJ{vD5(J9kEJf*4Vvs2Uj<M?im#U
zKe}{1%Lne=T9DaLTyZU(PM;wR%{`ah5dok`bI#swjRNQ$bo`RC4GL#PXISdb!ilq8
z<!i*Ceaet=sy_ZSA@&cMC^*$78l%aZUWC~Wjj5SfQr0CdESp^`8X9npyx+0<8XFXd
z8U39xojFo)Se42)gWj4+|8hQ5TurF&!veSHmsWD7+b6GIzpl~A&+G8@F)rBgyc|*y
zr-2u$;_K9)**l>DW;4lYuJvu<d9hOGEn2A6TaM5<m?=(A>8x-X^QgwycG>8-X_~BQ
zoWGKW(4GIt4r}z;&VU>69RzF3Do50*=*|eq@TQH=8S_&;ts@V67r00x1}8d-Cmi$T
znRL{J=q3fSQWNme5Xm;@6NqyVp22<^l1LV$t1BnYy(Z>dkX=_cRFmbclqhIAa`<+1
z=Q!7;{e*+~Vh4FwseFS_o`xWN=7O+kFC(@JEAr;R`PMk6{#Nuj!$9ub@fa(H;z%;j
zeM`Ung1ZQlH+%h;x?m|~*tW%aLG*NKECf3sBmUDqSQ2Wy*_B}Hu6@w84+<!FM;@PF
z6NzXLgxPn+y;$Z|?dCxVbII9aw}q*}{QI0O<|PoH7g9cDmf2Y5geJpS+%N->coeYD
z@d7`BAl_ASt1#kJn1fgPQ{w=~zJvXCaeg^R&bjz2*woB3-v&TaBCafjQe1DCqa2;m
zdySV^2UGBL2=aIH_jm3Td>rHqNsg6acAWPRk^PA6R%(|U&Q3=;t61r%r$oR1>;L#)
zQSZUd<NfWuovkN58mRJpuaXOn2$Rr%mHX@VC1eQwc<0%Ro<0`hrO#h%|EGJQ{^i}+
zz1(@az5inC>29y#bP7H8V(1~ZTV}+K*T!1fS~i~Y7VB=zZ!#-u(GBvD5jxL()_RQ^
zaVzI`hcGSE+%j6T(;8OEnS8@FYlRzn|L;!%U&d!Hb{mAHtOH@+v474Ipna&jjz+gE
zbd>QSK!xz1J9l=8y*ZvF)bzYpOt4?zcftEa5lt;kIMWb=x@*Xpa6ExMw|cSNFC%GD
zK(HJwYq3rt|L3sMY&xG9>rQKY+`_B<?I+t0UqpAJZ}y%)ja=Mdd6!4e_a1HUMGyWF
z`E3?G+TMQ{J=uA>^MbhTuR<3T{-o@EBF&oPNudbGBs#;s@*EA}7E)F2cocX0YR)H2
zOlVxQ8O@AGunyGfU->ANV)pVS?i-1ap}@5*FL*Ghz6eYa?Ltu-l^g^tCQ_iN6~4rL
zM_eXW4$~>SfC!`5)8*;~4i$8oh|zJk@sxdIf|PlpcJsTG_dMP7&v`s}fEY7Q)$WkC
zCz2s8gSW=%g|vvn`t*Xz!&&3-pZ?*4^!V?n(m`4}2J^$XNPG6wac(SifQYm_)H_(B
zFFKJV%DKu_QLi#COUKp;7==`5qE+?Lsk-NLy;UrCPLT6V{bv<Ope>)8lPvxgnc|V=
z<gv&=%hBT_1H%$_XBWe`9;+7$Hpwg5Bc7gm+QnGIv;1T(RLi_rnieah&za}M7jirp
zH(xUY$-T^34h&IURG1zj)S*^n$H-F)@5r8f)?w@{)_?ZG(50UA41ZSCNw5=D=S{2C
zN?4C7#A(Zq0wxvAS*)Nn(aXIj3?v@ZuN)RXjjE>?O{v(?0nPHnl4UR`i~d3k``5;v
z-Is(uQe|7~(r~c7Vl0t`UKulfo~)f|BqWB|<Zwv8WHnY~$Kp6u@a>|r^^IXJXk>Py
zfI1b^(d0?hmZgpu;)g>;?rXZ<@g!*;NeUmpeFoEXJMgIG2OzB-jVrDQt}XbQ*J3}G
zw>d-PR-EmZHIYG}oi!&H88q}>$)9JJE7=(=JDrwrK|EP-45YsZ%Q>_aL}5V)<s{6N
zeHj8qAiF~dl3dIjYVCbb0B1m$zf1E6A9g@{rbn8DJ)BRytYkMHwa1)C35Db{#&#)u
zY$q~$W?12Q$ulzM8DPip!U3|Rn?ZDZ(W4Qcs9)fGM4M$)4zX8R@&?oOp@@7sDh9Tz
z{jU-6jq^Cu+odA86qETxgbhwciHH)0KBT&2oEq7W4@Gu6c(~Jk_(;AxM$80Jytz<U
z5?Se87w^hC584E$9$tg$g%s`sXSbI4!)|PJ<J8<?vC2g-CZoq9cQdQ2QL`Rv<6FTK
zhKOmAGw+JBu^{pt_!^I;m}PD$;+j<|ZjgdM7(?{Fb7w9wI?WugNr`!Ey9gf=S#$TR
zdLII1Q<z&MN2fd3;mT?hg&;$mB|}a+XW{%Be9kn$xy1Su%&(GMbZfZ7Y46PF+e6%t
zz~BCocGFfm5u~17kPj%}zT-qd0<D`s<rWViC*|q!NT|=9I|612UU-t6fbBYy%*vdZ
z2`xc8P@}EQ#)&-0{nY>#g5a?!W5u58LOT|)kFwKuzuj#_59qFLL=SKC3E=MS&2mX&
zht2&6(Iu0J1ju9Hg*XyV9hjv&DMJIz;O-N%BA1i8(ewFXi~)rqwWaM3v)Q0h`MV~&
z4)XYD_y~gE9-<Hwr5=qI7kU|ucEos}a7JbYy}<<#i%7GJvnbl&$LaLj*<l0!K0)4;
z$60nflqjsHX@8RC+0iuG-+ykg{oIfB#@)Mjp&6f^P&Yj;Iy4gK<HPLqbT$Hp;w}*t
z3FuGa9C^uR<Ksy@NF0DsD>?`&F3!Yd18fB+f(zqZK;7-Z!d~t(#$5(ee2||(ODiv7
zn1#{yOYW0S?>4sBc#=YAMAt*w=h!zP;<lVniVcsNXf!yd;1Z4m?WK(0l8%lhu?shE
zNIIOt=ej7o&L_$66cF?i+@#k&-c5Ygl+T1_em6U$(~?Xj_v?W7ZqpLhp@75_>W-uf
z=imt^tkV>M^PQY0*j*IrqEI=ZI>`h~Mwo}sIMI-1gxb;c=tu$*l-VAgrF1*;-?g1b
z+jYOp?i3G#^3D@qgKwa`IB=Rws=(g}bQ{j`ASByy8fDdpu#~|>*i!Tb<m6x&Lg8F1
zw<JSc7x;nvO0c6SIU=qj<+OCV&m3rs4ZE@{X!RGCXN=eGuhBD3Qb+eY5o>>8*i7e9
zewt-`X8E*<jGOow&w*gmAI_La#?is|`wS!IC0;j~!?ep^cX1fkyJtCb)2>{34wz8O
z`65E2fHr}2C&~4c2b<qt8;bmfYZK)PLA(cs{4gxfl5M!T3P1Cmx3cAp3$R{IZYpj6
z6&Zcc6t9D5$FYLx`F_(P5Qj;Ui_LEks2Gfuak2o%Gs<TZhl`~+6`C5u)!F0}t1U}H
z`#uxpd70gGoG|nJ{)k~?t*V3-W-Sz9!aAK!KbCOKt>O42uJ~dxL)p<?N{=PpBMBfa
zIQE2?N#@dMcBivG@=YKlL$R;U6I*x@X9Ob3p~}&}#LY{}LE<Z?@oRo_m=Nopf-185
z>d@{Ehh`?}Lve_bvuwy<kb<6lVaY+*4$DapCdn`Xs1jc~=bUPAn4MX21QMq>A52q|
z7^Uq0bnqyplQRi!x`8}k3ZK%+oF?t>|GfKj;~(GVyAMQUk}LZLcS7Bz32*~rz9cU|
zve{BD2`Ss`T7i&Qb=a+J8YCMKa3Rgmbj}DxmgA)qrDJJ%*o1|QB}GFQvoNRe2-wtx
zq>;?hv0I#25;X-KHFWTZHpZg|HUcAjoWGCG%&Wm6V`KkG3O<Qn-6&BLY8cWt20J@F
zX=rXVk3&tPOD1VNO#j8YDz&N@_yGfQLVqJ&=V8)|0eIgjJJP9QOVe2ZepAd%81j@q
zlw6xf;4)9s5rVJjWZQ5o7ngB+P+cNsx)q#A#<mL=YoX{D^2e=Kt8S}B!T_Rb1xb2|
zJ&mL-0h%tr04EnN*ASh8{Y^{z(r~JF`ZKU+Vy~aUnn8ayg9Izk+4h=EIzFu2RjU{8
z6`OnACQybRXhxMF`_N4`_-*-|Ve9nsrVLI6Qbw(yt?*SyHu4jIKe|OZOo;5|;<h0x
z&*0SK>^zwe8(@~9mUm>J>z$V{rwvkhpq~c~@b0(zMGwUa8_o2k230lVYO2Tg-tpf0
zQOxpJ*nG4)gQ$ma-riSpJ%%2swxxS$e^dDYn|2;TE(m3;!=4+;64=ZyyRwz6-`#Yy
z08{R^tF9@<n_9fysykIS%#>!fvVOTFIwu+Xia_XdMp<AP4#0tN5;+xy@7$5BtX{oc
zG+Wt#Ykc3;@7xK^$-ZH4b(88`V}T{mUBH$&$Jqm~QBR2L&U!sJEO!(H|A|M<%2;>f
z_c~%0%BQ(k0*(VJBj+`pxCATN%<||A0paWtABBcxg-h{J8!W+!b&<*meRo-0g6xAA
ziFdH_BX6)TcFr&lpu{KOCM3^EU~S<1Rk<cOqG!AsFP6-L;LGWxi&N6r#mO)Ghy&)`
z^Pwm)a9WSvCpqj9XFn0dnBGyFwcz!y09DMnIeCsShfq&*ZWU!-Ca+|9dhNFBZ4Xq6
zfhr1aYU~|l+lW&{iC72BdRBT1H|j9ND;2l<ifg6)qy8V$r6xJbn2h@la2xEkod?h`
zGH_y{gEfVZ6@409w!H<mIGjp%&GK$FBND5@jkpm91#;DvY~nrh=CLC~Oh?K(+Md{H
z4cr7=8avgG;&BeVI)2P~2xp9@>J7h+kQDnIE$%_3WDu@>zxCwh_I@RbYU_<?jZNWe
zbU~YILA17UcjJrZ-F5oEX#H;I?%g#GHmq$>Y4#&*M3<EQTuX0WUH3ZIU8zS~`_Z(P
z5_f@2Q^aHBX3?dcv1vO4mSDQPue~!S*>E@;2Rnnv=CU;k*!e-yAI1}1RCRZlGArql
zk=xEj)}Rsn$<B>~W7-n}04V*CIEey>O5B}b)by-jWODQ?IAFf4!1F=>z%bCq$H;GK
zei=*m!_q-sZ?kj{FS=NSN@eTCi>-&>Mr);VYgnwo@GG~gWXX7w*6#39jw-y*2E&%N
z{CMyA%Uw7cpsZin&sx#*^8Fw*fo@29VX0aDeOD+h2u=S8lVXVWc$5&Cgds->MD$<(
z=l^~A8ReI{VJ<6a(<1};yv4C<>D1lmuC);(Lksqac((p2!VO6>2MP7nmM>XYZQB=t
zpb6%XF4VjaEoX5%k)VZdwBHV$XhDUp-)aa)_mr#T%L5j_8MHOifX!S?iOhcmo(YVm
zo=^`x-nw~WivO7UEi026Y;?DaU+A67g!LpFCc=Yv<XSPYLavvPx;N~gT8cwgg!p*r
zO`xzk0)AyImMv+E_nD@?;3?KE!_<b!bNNE3vDeO6)1bLoVy8y20OP)|JGqP*AjAg=
zYvQFcnj$!m!Ve@pP2ir+d2iMCk~YP4B#N?d0)|xZby0z83ZWr5TAq34s`_wqbMQq|
z_6JKXR%cyie1yajFuH&nZq1oALApy-M=W<I$MDsv5j|&{$9T-%LHiFMZ4gtHbN1^-
z<T{Wy!Zhbw&mOg(??pdl>BxzA7`57&NTB5m7UG^9kam{Y#+Luf=XPw!P|WkWVUCbG
zQ<4$JtGf)+`~9_D^H@<(b}g!ZUTGaj+&8p6v6;jVXKN(9?8g{RJC@2ZtVQkYsCFzs
zVrKEK0R<dWbn#L4Y9(o-jrf(rEK|nwK<oB8EOc1gW<^%LrRu6FQBZ6~T3qNx%qrmo
z1_eX3&N|7U2o;A6F)#*r2dQGdZcevm3Pf8e))5a~T9O+nkZn)Iib#wM?|q*NLF}T~
z3odb$B<<B4Vh5nse23~O8dxtDrTM7~8Z4EEEt2oCI30zGH$P*Ndo38#@~k5h3q0~U
z-k>7@Ipr&XQyw~mc=Q1&s9fEb=bv&j1U6B#JZ>-n$tAJiLr#-%o9zm=dypuZx@C*)
zFhwJ`z1ZmndvMCQ))9O@IBB4z+6KnC{z<jjpV1!!+-6p=VbL^BHJ>5dps;qL^;2i5
zhU$&Sl3PKN8Sk^_Y%sy^lFpb@UgmaH*7!o481fSP=cdOaR&m!YqYfuQ7>HQO#->R!
z&T=fL1ndxBqw}j;Z7yyh!Ni?Fy8jyEyWg_uY+amcu#3IXoG0w)#OdaADT19GC@1tp
zE5@E?FOgsZo_5smEIHQ`7t9&FhS;g8%|`aze25&z7>nCg|7}$e(?Z$xAa_gdD=oMp
zIWJwFb0|<6s>+px2Sm8v7Num*$TF0`mxdh*SoOnsSQVZ*0RNU%8PM`Wct&{lzU&`(
zE*OJSS8Uf4x-1&e$?P;1+YbvghTx|o+qX=O9^2oaRCYO)Sl<}-`#c~qJ4X>oKhvow
zh7(CBqL~Jm9mXQ}0!R23cXv1DNOa};q;<e|jnaS4kO-ToUwV`pCa50h+^>UuK>W1V
zb<CfPFS^7TYs&Eeo3mi8jU8s2)(M59h>Tpj5l{_th?z)<<A&sEj%p>H%MH~oxAjTA
zE_3t9QvjKw^Fo?z!C@SU(O-~^^=i5t&+o>Ne&U-nVHXU&BXNhYfhX86jvWEJ4gp6-
z@kGxR4Z#N};v3nnavUI#+_}@S%*wSOUSd8=^i2~*U!I<`u_RISmARtXV75!7aFW5N
zG+VyxpAmN*lq&*7Gb<9ac~;CiZ2G0kW@>4$#uLy6$2<6}4ne9%Yx|3?q<C6(HF9ep
zM<SDe3<U|D-JJ#d;T|#&pC;ELaknQ@7_<4fu;*^OZPlEmDvMYq&g)feObNQru^%BS
zEni12eT|P<g42{bMxjJ)*RFYHG&w?9^0L1244z$05=lo_gt<N!lRyPd4a!IH7G_zs
zp_*Q(exT78c_>Jv1~HhpJPVc;K3C6$<1~cUDYXF;1Z|L+YPfL9QubWW!@E+*@AP7<
z8Uo-@6fy}cy<v-2YZo&q*DE|>Plqfmq$4O3hyj4JaMPLDy5a+CHMmk0$*th9yxBGw
zxz}RcaQd>27PneE(X0&$)CS4v+EW%J{NA<7IKhYo(=qp|@e+zCl2`nO?*<>qK&rHe
ztXpG0QP1bJ;emvMt37U|qqNGY%fJ;nE2FzK13pnSAwzL#{2x6*yZRqJmH~K69453q
z5~|CEk_MZh!Z85FS$6Yr6d%rp*(~q=l#YIiyGVmf?IhyA&Fyre2-FDNf_vTiX#+hE
zqT1Zt*jDs1rYKl>A9v4)n?z4Ij{%VwV%Bjt7yZR2oK!qaGJ^NV@i2aU(XlxBp+tG*
z236MN%eI4qC*FN6AsfS`@6S%pfzc90f(tAaHKU(SlN_7|Z&LeeyML0=dtSm$w7&7@
z)?NC4>y;>o^6ZFAR)L@UMEiAm(G?Yzbu;cn8~W#=Ml2}CT_>u3iyRMCKqhf0uq>H$
zV0QxJ&>%US9TV}*b08}-`U0L<<)`_v)zXOGyeUoc+qW|9x2i$CKd?kh9Zq?(yZ-VO
zEphjd2(&HT*wakMiuuq58DCg06nK<+f&>z-!k?*1mM)^VZw(%fBorzawqqd|K}Pp~
zY(0JA^eZfu<{X=+A@Z6jFR^W3rf3S&%ksXaT4p0IE7^jC%9dM?wk%9`hfoKrB$v5L
z&wUQa@-br$MzMMF0AoqR5p&BpDSAex?F*zj<7_HFB-WSn=oqvun}9JB;G`p!nXGP$
zb##ZY#>cJ6@#&$y$HZDBg2lyk;Lh#)$%Ha_X>czNJZ->E)6|*>#WM=wNrv&G&X2%C
zII(oO$}OV0bL0_yNCuLW-j>2eF2J5>+2sI?Y!XN`xS-CYeUn{X+9{iLi`2L&wThxq
z0`Fe6^@k<oiQtz^;Ickdf+pmk62d12^$CS2y%pd;dWh}QjVFb!(9c+|N%dW^uM0J6
z5azBdVe}8AKVnRFjX$7g%;>lM6c9JB*Ea|4Qf<MC;5^ZWAG0qNud&3<W-zvxDf<8x
zn62F%4MXK!AS$8IyDUGCnF&ub(Fk(JY>RPWRDdS4NV)vYo2gCw@3YJjvf|((e9|Rh
zZ0nXQ1TYHWIOHV6l4@2XImLM3105xEET<WUN8HSreSc7eor}!0lV>tVUh%n};UQq&
zD1rdv!<*d^IJ{8r>Nx6Y;Z85&kSfXCr~2fMu~5YwN@P~ncj4ZQto=^3_D!7k(~&In
zzF;iVdHezP;x*nJ;*3|y=6>M#lcjWG)3H?|oXYYP)qt`X#p9mnM&UzT+*_Sx2U2bo
z;bejVn^M^`cmm~G;4H@y@Cs|Eodtao?O9Z{oB%87_y5b$Ky#g+WEm|?kyGYqG$G7(
zq2>XsO|RJ$s*F+4+73ld)2oGnzinoc*JCqI#(miGSuLynpyuAsDyV>Q#Nl)80%I<G
zap2x8UBHd5E5i#&M0hgiCkIp11OdyF0R*Rkq+emvN`FQ-oAakJr=39UWci1}SqLb-
zs7nu>KUs1i$2O%Ijwb+47kIx=N3m#5wV63SKt)%xs4?9aZ(E-uZTa!Cxmmd1?4?FI
zYDwd<gRkFp?}l}`0=#`?OZM!cVC7hIJ)fmv>I}W`ClbyjhG3eRp_RXH+o!Eab36<(
zap5!0C{=v<mpcZLkNtIGQKSx;Kp^hoTpbHRVWkrR)nv9uo~oauSO@8+-^rf5fA3C}
zZ7Jp!K*TXdX6p_UYerKo(QEPH$F2$*aFsQTSBdF03E4wOmemX#Qd3bl9|iH_5-L0O
zDReCC+xHfs|8kfD9Hc!#m=>rV)+x-fX|tRmtt^Cd5`1CydFFq-{Z90}W?_N*w`BSj
zV>Q@Q6I`iU%kU!nxwxjm#7^QMeC^Di`J2F~;T0S%y10LmCJI|=&=j2WiM!3$%P29H
zkHs3mn;<@f=H@~{F_bmuAeZb!gLmm0MVf1~<}9zfB<^fTQE$#bdI-`|u(d<@pu#4Q
zISeiqNO>x4(TO`~wOT(`e#7#S9D08wXfvdPh(9|;ba<dR(38z`1qNcM*DY|P_%I*E
z>5z^&QR#-V-6tFvaHyGW)v4M-#n{awZ4qT~*dm+>0ls@{xn|A@&YJkKEu52{Mn(~H
z-m-uzr$$kek+MUh{4fnSo)RPOsGSeCN3vwk+BCI@^;C!C40KUwIf|NTRM5q!Z`V0z
zK(o;DKqC}LfuW8pW!?=$z)2yFozcrJ*ljmedWksf?4x=YdLoPO8WQl%R$><-CSJ@y
zER5cpb-T@#H5vX8yQ%3)*A*?~Jk1j~-@g03U`GWCwIdGgzZfBGu{e}KHI1N=N@a`7
z3hbj=R0|w<a5ceOOYk>(#dY=Me4LHx&hlshjOU<^U}XTQxxu)evIDMvJWB-tP=9-7
zQLi65N^4W0KLI6F0kmMxz%<D_t;=ILu(~rcfhd@?tnmGX7P%0!pIC$yxCo$UvBdXk
zpA1DozbRbbyay0{0soGxH*m<GEZfB=$*5r0gRrJ)w$Ue(#r@14&ZeOSkOtskkEZHK
zjH6#P3b7s0ZA#f5`H8|}yRjm!WWhX7lGDsCGsQ8BhvukIsXTB-rADc*rk2o4skj3h
zJe2gv0&VRh2`LCNqdTQhkQOOv9k&9##aSZssP0+2VEH)Tk=tU{4qpMK6u{RYNByog
z+g+@UmmBhgLzY2O4SU727!4hC5wOGINd)9omVg0H9D+98JLza9tHEiSS;HZByu_BW
z8P(58L!<^?i`djeA~R%~fv|KX^z7DXg(w}5SV<=&XObkrx|A-2xdxoh{Tk;4@g)mq
z6fdxEu4@<hKntg6X$!0&r8o@JVaAJ1C(M`Fc{pW9)60x04jL#RT^gDp<W}vQ!sv<_
z8Tv&TA>aQ>!oyCmqBgXK%&GV;v*E}DRkzjl=H6Bn#<^s9xUR`(U2Hx#{cPjiKHHSf
zjQCzGl*t3R5R&|m*&n~HAwe)*4lHZen!zhN2@i@Gx!k)YdsvCR<%U_VD|pfelpB;4
zq(cH>jdq+WGL_$XbT_Kog^DE-#1S*n3;Gu^Mkn4J92G2bKh|zDp=m;RbS+=T3B_hD
zFfN-UBfXO0_B<Tm_B{e1P4PldURVIw3av%OE^%IK=zuxx3XKRJuX^&h$~m*HSku@n
z&!z|F3^fCvhDSlQ<IRkrav(INq`BFZ<06U`*M^WLGZHqWB_Yz>l=TlatW6ChDVqfM
zHTIbzK0q&<B;!(c2vk($Xc}QC`$53?mY4B^bH6qdGra+nffN;>Ag`ICNjNul=$xLY
zy>_9sR-_PBOc@m|h!w#J{5Y0fNt`~iG?whb%BdY2MGa5Sx0Eev$})mu>~u#gTNxR#
zbO|Wd^F8XBcNb5d+oGl2sm@JK=C#RFKuR(1xgzc>QDSf|?R2URBF0*YzCj=mtUM9M
z*{Q6W5h&jrA0}ILPAE&vSO_?N8wcDpLol2`Z>G6COZqC)ti(?26X0%hcXdh$_8${%
zZKI%E_g~6>TD)@>=_~X6r28tlC~uZ@(4FM5@_Fj)7UY@4PuHumA48yy2vo7uAcBm~
zEuzu}&mN#Y0$;=*9%5(>X$V*AH3EZ7(8u?`1$J(36K>=XTY%oNNS)8H=m0uV1zTZP
zP$`+qQ%1+Pd&S$dAd;kGFw^UG)e^D)p|lM1BNXFzq|bNUw1}bf&K-|Sor)_bwEiO&
zb4mIHUA%LrQIcb%D>x-643(I$Gtgl*n-8`h?>vj1?`}UsA9nY4zTbMW9eua`4}M#D
z`t9+<t-o(?@BIDI55w=;d#^T5KKtSEcMo6h<s19w<KZ{ozu3R{XEr;3@%Qg`{&Vsl
z?I#=k;Xk*&dvJXG&y!a_J+JKk{po`TUwpH@b$4g$!S>|o+2f6G;`N_?di>`{KW+bg
zcE0!c;r64^_kZuNKfaqDzHEQHv;N?xS34I+pAG($pH%*`{`lnlyGLi=K0e%yxBvdl
z56O!MfB(~WhyOVLX_}orIXeB{o{I8~ySx4D(ek0l{@bVv{-kOHi>BOw300H4oK#(&
zmVC<dk98WzR_?*P*ooHeesTBi8f((a(=L};F!%3qn8L?l!!o?hIxe}Az$jNNJzRs$
z$>@aio;C?vFCaM3L{<*i)roT~z>M)@#bg0Iy60ZH$LQ_7pR$utbejn>rV7to0rYn~
zNzcI4QNO$B%sm~1esko|PMBE>>8%|My)uuGvZGa~8<JQy>cVH?-dZzb>tuiWE%ouc
z<l-UHN6_iGH_FzyF)#|R=m4@$4%d8!3`A-zrek)NrOruC7Az_yOAY}t#io}}%^E!7
z$pH|K`s!+cW@<qrLUo}zc4*5^_`~!&k?K+4#{{ZbR-|V~ppL?yfjv{W;Bnl4#d+HU
z?fYYPfr=h_?<eMjoGx;KMu5F1d<UEjE_~SYx{ff=O}zhbPLRurK~!k!awnmkUdqP!
z)A7qWazzpQXqRg`PLc_<v&XZGR!sAHa*5NIgM3vEO!!g0Ljh20`U6GI6Kl}6-R~hj
z7;T-C?409sV^I?`sM`?PfHZa|unn{2WSaC(M%geszQA^447zwEP)-NBE5f;46#BFN
zc{eNqtO*%t2~kt4b3kIJNz6;=0`Pp2vD7g02LS|#?Z~s-{%nG&t~{JgCX5YM^a12J
z33IGKJNCVcpkz=wo8F!p1E+q%QF|{)6yOcy#72(Alo0MF)6Ps1H|>G#?Xk&xgTmo_
zKASQ>Mq6DrY2iI&8|*Ju6}y(SI~*ib5GMt~NzEb>`T)y>h66yP?Gx8w@v5;6hQ4%a
zK^C&a!n2@Zd^*kPO*U;sOdr*4U+30b=3+tPau`loKQBbH>ECTI+xfH|Ok$VA=L%1B
zHjx_fWO_Qht-qV5(`yEWn_yI%aZ~Yr_*Ae6Rd)c3p<{DEGD>8@9prTSrv<oD+2ojZ
zuf&4}oo!K(z`$<56vPNI!Rg2uSQ5cy<~||aS$dcb0THQZxS>|;ah5xuK&J-tYp&+k
zp<pCUy~<t>ec-HHWH(cWy7&8gpx(?(2UznJ@a|5dB6BmF40&{a^Hb7c|1j_HY+v{(
zQ8uL2wpZ&)k55lidLD0n7WY3piY3R^gow*YhtV`R^im=@u^s8&M*E>49CT{IT9rD+
z{M2>2r&6iQrQ~&mv35EDIj8d8`chE)i@?IgWv$TThFYQ7(M#VFOMc=+7$3bBaF_^^
z6x-@30MHZuKIYik!<;t0X!9KgX<*NYtugQX!e-ZLCg^)i4H&>gH>2}tFll6FnI+TQ
zb2F?yfwgL&pnR^&LjOuqCT~`@{4;0AlQ+*AVV$i6cr6yY@~l(XlVIW`-fF69Z{>mI
z1v8KDuz8K=T(U!8L3fc^0pSRg+DZ_=hvCLe0Ly%$q;YOdMCdV5;uvgn^i1qMb7qW~
z|3S(%r3RA=7CZoN8S2RtTh>hK*i4RFvI<zo<^4ZYmS<~rK`UNR%c(r9+tN7`y97K(
zMYc4cAUve5weDmU<Hn1xRUag?hFKD}#aVH<v>ys<CwQu(okz||dpctT{d@>viXC#*
zq#`uWCRROhq~BJf=DCoAl{<mwl!JQTMOQmF6RA=y&H%dpH*1+i99%u?{_V#6+YSGA
zbN=n-rQ)G4o=v*ad})6#>C821+PJEwjqBF5c~woD{<K+~ln2z^#c5e!dV{xKG32nP
z-}EE~y+m<shX>0Sm||!kXJ`EH5untNW`KV|3zyBP+ne(HXgGtgsbT<^?k5(Nm&;P7
zd<mW>M8PNE7dp2FhwCj>I)O%MLPh5(3_MU4Zz?|notZ@SpO=j|`kBf!o6Si7mwxrm
z&U#TB|G0nYkJ>s;#256lm)B8W6A!67hp?qw)b&&Q-HG_CpGB64b5Yq!A)S%0)6w*P
zkE?3(qn^BWQxq1^hgu|<HLCzmn)XCn31-r_(@&bgLzL7B{#sKTT9f=3*eIe4j^z$z
z)gnvd7%~fIJuNBj)Brs7IUnM(g;Blu-n_vRHjux4+k@Lu%-(V8U!mNyHqEMlm|>SN
z56gC(jsuQd@*!&t*nz9)KpMPV;GrGp3Wf^H#2B+aN>B(Ws}voxS=-(YvP*7no7X#?
zw~4uyKshZ>0}X?riz91vf|GV=5QgSeXht`0J_D?#haHc$#qt-xkE?WL46K3`O)d9|
z^;)ceE*4vYWn$4?Oo|Qxnv{YsccK1XX%ZKZ{uA@#cR|H*0dYeS`v!qoKh3@8kZM!|
zbN0&}>7j!HOccf0WHf^=;2RoNu9IXqR?9U06yDQ^zyt$pRmx1hH%*p$SW2bmZunBJ
z)}mE5@VIk~HTK+`fyiE#9EzV$0=)!rtt<vvwtJ^lb%T^#eSTMlu1U&Yw`5zKhXz`S
z$8sK5MI&)g2_u+t@&xax?217Viba`RDBLx*7B;5-UCK{rjBh?3Dt_O2rs$*J0=<R3
z=CU#Plo6w^*c|v>=J<Hl*9!3Sl-9^FM`ciK_EFhG(#M%#5A-U=9R`nwIQZC2Y)0}#
zEWCE{s3<RauBikx{{@rX(EO4+b}yJ88f5WwtBAxRMzEtbNfcb~6sX?8^Ek$@5Hmf^
z#!X2ZOcYcd4(ZWs9Qfm@O)a);!b8m<!YXy>wG8UUMH1<bw($o6d8WhXqlP^x>M<Z%
z<0~w?6P-icNpnLDJwxnJd2W;M8HI+^mK^eVAtso*^H0rwA!;2rdlKTtMxTPSNlDle
zTDZux?u*GLgH(Fq=>*+YPUQL!Cq42~fv2h}ZUs)Vj`cS%o7qSmM})5zA7EJ{3vuFO
z==7Qroyj4bHt{?V@w7Ml+>W<!nE$6LQCOC*>@v{05%qXl4E<&ipvH(ma4H7cmy&PB
zOH(6jsZu#2A9FSVkIa)8g}bP0dZ14Dv^_}9*yYRVpLvt8%VW{n9a2fw{Ozz}N|J;w
zcXOk*O#cMe=q8*JeQuc08#3ka3bo%XX2AWjnKCd6b$skzy?7ya=805(0xOOoQ})Ug
z^%{I?da7vbhVO&aaV*UT7=2t=(HlAK3bPT4eB-sm;){$f(jXcORdY~L|6<!@*%<x4
z&?6@yOQ3a&W~}rqmWRQ>+Y3HoBqg4v`M2iMfGuZqI#^hbhUm7QD$rSPZOhSAgGsqi
zpwteF(ob>nJ&mVOoYUqR@dY?h`=Kfq0Bx`4z%g?hrcQ&+L-hBq(*?s<OWMCe+LW|f
z;EUOsbCgbV9|0jbqi7kBYu?VqOGp1OIh>VB)$K>e-UNsXpYKO1Tuuq7mfmS0a-GK<
z#itnnCAXgK?>u<2-F^7{**80nd!8PnX-5cY)&KW)D`;L9pq)(nPVpbUZa8;LfGI-F
z?@v{6fdi@5jyfVsf~Ljzi_j=dC7@^ALkjhZO|wiECMfK~s=;Jvp89c287>jr#>b;f
z(nlrUX4K{3vdo0fnscsg<|N3%7Q5Dn5h+{;&F%LK5rClQox-N!<1a{RPz<^yQP#M;
z8|1jg>S&dh=WfmC0FG)x7%?ZDV8<@i@o;v`h?p={0;ZGx>_L8I+kaop@mRF{#5?n9
zGCrUV4KEbj^+J7fGPSOG#INTDrtf;A7zrk+s`$-bs&eibAQk%ASh>+`+;A$SP-1rR
zgACY*1a1<i2oBQrD1(N&x%>9{(`}GR`~Bqk!>uRX7u%d4+dbXee){~ywmhzD1{mF(
z$@qjw=7i+O!a)E`mFPp=Ft4~@quN2QsDnihOjX(Yv3A=IAwR3v#Zht^^WhhKAPJ#6
z({N=b(z3JB9ZrxCOoE)$^7WZV0TEwtcXBQuA*Y`85M8`LwK1s)t%veB96b|K=@_5?
zlCy$Y%mbW`sCJgdOXxVR!$p^9PZK?zKqmo)W9;Xirv}uUPw?<eywil3!FM-D41;qj
zL<Ul}D2d5e>zLy!K{bVp7N}9dRn?P0C3%uUC0M>VSB|6=Jpt2v?9J9pgM>h7MZ<>0
z$ndyx<rH$~o*`<mM?3pl*vHTI|6^<C$vtME?B05$Q6>yK;3895;pV74^AWIG;jcw}
zt#J|sDlEBSStbOidPx_@u=*zgUFVH4Q2tHR>1>(=0k;lXFMv+)OdC%QEH6W!rKZfw
zsX)!D9n}Cj?VlBFsLhjac25%*Dg-~!eNgom0?m&7=;|EdeyA=LB&wk#L0=Oc#5Wo>
zU^ZQ7DcMYS5--qD7Ft}0B0;q-e6Dpa(`z!3mj?|6Fp(WXtql|C-Aqp_8_vvT!SaiC
zg|BVhNRxykd*eeou~b5?FWGmk7W|oxWp7A2<1;qG=KXkVd|7Z{1>=oH8H5N5#(4Bc
zhW%h5sweFAJGIy~D`C;oP=j#(hI2ZuVv*Gl1Y%l!tY5`}q6*HtpiI;C^Kd#L{`yZ*
zkJYO^21{gDwhQ5Yp^wo7#_F9+TNmUbbJ<N1KMgLp!#}Gbd|uUEIx^1iU8UkOha2Xp
z;*2h+W*Q%Qb*QLj0sO!COezVb*-Aq?=T5Oh>4XnPbTk`jiaMJjAJ*X#SbOCxAUu)x
z0_%%=OCr>rNAP(fF%~`s`JwBr0`Oe)I+_)Gk{l<mal5d3OQO}I-maJ>dX7nCYrKRW
zX$HKrRMQah0oB-lusq0_GeTwwqN7N38TY3!AVt0Zd9c;|-{R)K?l%AO<DWk55lQD|
zl(-d+Zqn1iPI@j>(}6|7J1jaxoH5M;5qSFcRXUJW{lW4;;>rLn2acW7ii;QfAjKg(
zWOB+-`|+s~Th%ymiIkQCS6{B+H<-j?8tltZnMJLC!m2ulNFc$J2<BDyS%##H#mwNk
z7h9){2R!0zG%8l)M$6Ml*(Xb$kK8CkWvq3%1f0fdm_fiqME3P$L-Kif4wnavtan}E
zZk%(T%pykSEe5i-ioC<!&8j?)`%RhM=DI)%FRqp0g;@hPWqu`|b}ZZcEdYr@M-K0U
zTal+8LnUeqg`(K3g;-?K>1D0xVW{}kOpi;)ako2|#79&1#Ss6K(D6`|-IY+;ZR_z5
z@oBb{8;afy1QGa$iBGXatR?YenDTz|VPYYm`GLz)w|urg>uR9_irH=HOw+%shoSzw
z*D4_dvlbM^DBy;%(F|}{d`Q@li2C}C@YVi4Fl;B@yC-ygAg@PN)Yuv|FA?pqY2m_Y
zVByab5R1IRdwG}<RgbnDV2CD(flC^@Nrc8bUOZ}Hc^K5^-BTJfZ8iuUvVxL35^32B
zC_oJUigi?|)K)1z)Z6|TDL&X#?gDuDWM`54>SmYdaM+Z?^PpR|$+4slC0@7r1e*ID
zhwlz4Rnb}zH-mdyGB!ABaS=FIvvUr>>)ClL&0mG6($P1w3Fs7al^VZncL`ErIw~qg
zm{RsP`oGgO?*le3-xPy+0Vgl@v9W%EV2|P63V}3e4F_&_BsY9Kffbky99&w;=@mfd
z0EpAX)%{g9U^?j>gmp^HAfRnbL*%Z@LjfM-`-IqGVr<w4k~3};U}QB?ha+(&Njz*a
zDjv@aE-MzZ+0(;AO=+SXM!tCu*eTf0GiTR_{Q6KpH)V^xH!>MR@GGLQ47mvTzBsD^
zO~fhm=7^Y;K1tH*AeF|o(-|yF-+WaDXW&OKPT+i54rlb%4(x#>d=2i#d~PRqxlA`3
zbx&r8uAbm<I#+x~eRhI+ArCB^`@*Cj2$&tQ3`C560Q>Ht6eONQ=qT*1#6xBiC+>0D
zEM~!iQv@jmCj;72u}`W!^9OIw4DX7R`Yl<xl#LMJWttcE{}dY|(fc4lGQ%VRIDO>q
zuCPYQ$OXNN#l1;FHl#>UBXu0Wb$BaJP$2L|m4=ZG2>mgw9;13lGWXy*f`7Vj+yG-=
zz;y#9h(SD~V#<bqKnEPSn3?(LJ9eKw5ZYMG>A~<q#JaK#igmRUc#*u^3E}Smsvc?F
z#5J>U?0BaPo0pe64Tg>p%RT>faGo5VKyY4;p5C=01w2Apu3(nt*E&dRgS<CUJK9B3
z)cq4&!tLnU?Bis)Ii$9Lu6&I)3mI>s8>GAeb&^~@LG?5P&t^AFZL>;g^UI~Qc?qU?
z=NCw6Q(q;eQC;!1lhWiT%Tv)%dk;9PtAxYL!7&#VzEA8zpzZ38W}8oDj+5DbHj@ou
zn^)A2Oek(gT!alW^5;E$J_pIplGK0RtA4su6*Y!JD060-m{t?#{6D!gz@Jo!H=7LU
zlQ-*~W&y<ZZM9O7L~hJu-21fFM<7TukD6HocZT)|AzjV$sQQODpov`UZ8iFoijlxd
zjP=1m^l4B<bnjlYaVPrm$LQyu7rooWyRTSa!aYw?MpR`j)7}%gLWz3gF27Z+0PAj1
z8Oc7b<yzIskvd$^|BT&iS9msR=x1~fKqkScA!--<71ee|XW6Ty`9pHJhj<S<TFsY}
zl*bu0pAtRD2GQeWT5s+1cMn-TL&L8XDr&M@Om*W<l_qc!Eqb?kr&^ERu$q+v&YOsh
zT{;JE1@Z6F^5yw>>!*VSr3wvRbaV$)4aaK8u9%;g%8%R>T%X@)@`Y#44G;MqEoQxx
zb}~I;iv^~Qtu6d5_6xgZViNhurOO>fZ;6mY-TG#6;qo}?0~_n5S142x{>BR;%a11s
zbfJ>OQ8-g)XJHfxr&;~hr{xwGy566JNcKX{J`S^0&pdDRXU_)2-72OogZn|@fACaE
z@AdMZ7@@AWRtc_F39eQNu2u=IRtc_F39gC>u7WHfV&0OJ<e6Y}>F2Q4WD~AA*xI>J
z094v!51%w=-LQT{%y%+8k}|B6kwOQBbk6T{_CWRus1+3}yTIb;!~lebx%;=6?Zqq*
zMno(7-bx|iLTUr%rlFG1DO1(H7_x<29<UxK(67;YO90Nasns-_YHO~G3W^O#+cJ4j
zOF$anj2!$3xREEgfLkPEkLwaR^ni5+TQCr?Hv@d@@T}+I`<%wNyv`cI!c`n*DIHzG
z-BJVPR6uryE`s!z5j#%vWBO#hS{WP-rw~9k76>4>z5QFD<dk|&2b`?KLN7dQdPP`6
zPLULSN^Mjf7bxnGVqzM}2wv8e`S;>$BZlDr@#%Vl{$~UKv)Mv!Ebgl>Y<>+65g>4r
z7qAhI*y}{S<wNeNWqoeQG+x?y4K|2Jy}42L8jEJbC3$C6X`tgTSONv5OXXxHsMpkH
z91v-~jy~GMZS#~08oh$01^TJ-{`PNfu*-w$uCv$YrNXEAF%fXtqz6C#_~|o5e$bQM
zeQ`5*&Y1H*eoFr~qE8>uO3uqlR6HF~nP-ReZWBj1+TnPT=F<$yr|9X0{P8Y3TtvO+
zydT^icpC0>KL^*_?>zF5jbdH~_o8s!BCHf#8C#XD^1iq8-P1%0>^?T_wR?y{pnqsU
zfPSGr=zN^UL;6cRqfxRryS=EUM1=bYB@*4LJ-FWBhQ$YPE)tE5fCjsiS#11iRc>@V
z14MVh(TjSY+K1wyMN7Oh&5LP%u6tOQF4*t)&_0_XF$rre^crH_Sa4!#iJr}R-dVBe
z2xJ%<es$C&9;A}-{#2Eav&Q<8d}V?iS2ZXvc5AVY0}1pR(O}7$9UWQ%E}Ys3`i@VS
z(0;0mRs*T6FVLbuz@rljAvT#zE0`alDYv672Ak)D0YRUi7L+bgG|IXzeUtjpITUB~
z^I6)@Xp2P;h{rgLU!_%fP4Wanj4+hXHslcwNH;s`9;TD&$zMB>9hin?4MVO8q#L4d
z-c;q!yvqKC{o#ygX!WfW9d<aZ=4<KBeJXxX%_cNQRXombRex+KVgSs#)Dr(8&je|w
z`wF>kVAi9zIIL6$d{G;!M}q$7MWWd=ZWoLyBbmHbe$s}+Vq2Lf#v`hH@`+3`Ee6aC
z_b~W+MYFGAHf*teVC%KSf1bzeVlwP=!d1m96-4CPr<mq?HK?J=sqR26Y2GiW^;WAI
zaciH_6h@y8!`7ynjfrP1nHpxty+BbGLDS`o;L%ZA@36crg}G2s!4*Yo&oZm)BH>W=
zx$mM|Yx3z=#qqxgQ99|v|IwTK^ndg^P*3vTI`-SqQGyO|yy@$}zupaveRl3epC+TT
z)(=m+FZZ|io^3tdu6S+WI2|XTgZfP#{jBnO4(Gi4(fX@H;1}Q`6q~OQ;-78ehk1u)
zIvoX7vR|aAgdC7D6h^)TEoV$ca7i>c5U~;M|NTh{eB$lb{Y3LVveN^uR3*`e+3S|p
zu>;N^iF4i$hZAeTAU=a}VKf3s&k0dRicJZ_EWS8ouwqt*z&y6KyVG%#H=1=xW=lpn
zj<i#M+P06!X)6FxVmn1!&w>3*(}Yj7mWrm2;(Ozb1U-}N)X@!%Y34X+1Q+CVd1CQ8
z(Wj!X@tvVZ{>NLJ5Kbt}QFSTedgBS}Ju!uUy~cShnLy>-ny+xc;Y<+cl(Qg8&-l79
zs5AlNV*MK8kfsnZ96Az*0@8BKUON|f7Q|qTg?pbqoO5&db5~1rwM6KGq7>U{7@QA}
zij16xV#IL-w+di6X<@Q>6h7HRY(9+#+0jwTD9KAu+pas2_1~2@vqy`FN5_e1&ZJ+Q
z>@Hz!1b%6(7~hLQ;|14Wb=DHsUc0^x7`BIf?~}oJ6)fjMVYR6w_hUe31VF?tm||d=
zP+DFBE--*<A)Dg?-&P$jz#m<QZCq}HiLUWA_>$<Y;pnfN#aGVa1!wVF2V3e>;We3|
zj>#?70yWdhp?Kv`{7X3$-$LDyu<Gg%f$d3O&TY(J-uIY!y>x-^F}t&fFkBY>g%y)U
zET0O^@Svu3P4^dR4&GR@`>BYn@yHF;AsCv1zC-$iLOw(hRXn#+FujW+tvMT;y_9c2
zQO&v>idwhP2rlY9Q;Z){Z$#pSMH%Eq%bYS#eUW-wk7l_UO|{=fXrf11|CI-10W=$Q
zS4`bN?*dcbL}0j`E`bq2iM+p#6g;dDRGKlQF+1Vl`Y{~|X9jh6Zf5BYU^S<5;8+mm
z)G{u7P|Wlb#tkA;KZ}P!8h3~3XbK8*6M*mVpfpBjo`iVG)2*NR&Dgsg<+KJQpG04?
zb^bn9d6Z3KmoZ)8mih1o;3q$2hhhbeM)^;Yl!ohR&>|&tR7sYjt7nwi%;)%ran9vI
zGaWVU71i12JcPm?`BlrrJ^U1u6p-%>F<;q&Kc1s<%&)qL)R=~Z81k=O5-awg3Q|PM
zNL;p3uA6bz#Fy;QA1a3eH;8%w9TnKMUYL}YkB?nV=4kI`S8%wYLJDKr^$djA%XA8W
zF2f`<s$C9^Mu+w2C@|~SS04K-kNuU${>o#2<+1<qJoX>n{y5(GeH^VZ40ELx-pd#N
z;Nfk5@K~ePI!&S9%7`0=$}br;XE}9pI!de$?J3pN%#ND+6I&R3eZA~IfV!RcfD{%7
zzJ1sJ!`pD-TRHy!yF31Obi??}AjIi%VsS}P3rJLmG;wt2&Uki6lKh=JnnN;r3I_jF
z{GFBUBu;z?2BTKaO)HPVhZ9j7CbZboRnS30P1M&8Isl&XvY>-N^e9Swg1wpJ6keW7
z=8LX?To(4fB8V!YE`%dR!W^cDlX#*jhL|~VyC`(VfZ0CRaccF^Yz%dtWaSKQHoh+k
zT{qefzIUiwxqt%%zXSn&9mnTTU4-Gk0QA9SZl1*2i`|Re9iMGUkDn!XXh<rCAl;wJ
z2&SpY%2szxp=v0eCDB4Z%WdZrdjC818gEPb-NMbXat&X(hOb=1SFYhJ*YK5V_{uf>
z<GF?}73~UT^bQVuXCL0azR&En9A*1?<@O}1j%J)8=3Cs7B)SlR-)OCW)>^MtDxz1|
zzaaMH^sB<J){}JfPkZD({i;$CDM4nqBA!nobePETh`RIw0HKgQYUY$HDGYyrXG_D3
zD(B+WR_%)~AKZyfXu~~YBkGHjNs<G9kV<@hx6Tcjqg4deWlq;$i~TeKJ5v)EvWEDO
z-Ky5r!D>n2e=x))!ih)XZX;&l;cTMf9Tv7zsKt$Bl$>K6TkOMnFBn*h8X~E>Mg<OF
z@#pcqt+!reT(%b02JIV|r`j1ZL4)N9tF60oe#nbQ@@bXI<gH!nd9D5yy|xeD`WDg9
zgtj=HuzT#_xW_+gL20aj6nSPomGZOoj7C{oZ$#^N*Ds&hPpeX`n!-ELo3O&S3uaW}
zHYI+w(D?m@yWy`<^;>$Z_1~&Sov8Z6nci<z{b*dhf1*7W)#5%}Cj;f+)Ya)?9_qp8
z^JB9LgBgq3ZFf4DljNMGqr#-yLmD5>#XkMnf>7}^9g#GW*Zy+1{?(;3`a&z9$+Ws!
z)~K#`Wl?{;H-cOQgS@cP&Tn>oWApM3JhQcwPiRB)eqYeG+lQt0bg4m2X2{!0D*`y;
zq`IW*oI}s@k@b_peDb?{j?T1RPWyC;wzdX?M<nIdnwwWlCqAUHpqlbD+Gpycha&PY
z3{Cc~0>-~s0u|B6l&q>gKg(g!+opm9RTqp_%(v}C(3Hh|Byu>Xs5lW6W=@)z1S*yu
z2yBmqq!)7$18l>^ZK8Lpz=E!~BH^>-;)7T1`)gbLeN8QFSPOKOBMHjj{rCh(2Jn#J
zT=Zd1W971$!3<RBw5b?N8NS=z0vk*TO{3#BRH%dRiCq4iKnI=$oZpp-FuE)BNYJeS
zY8XN5a5spZZs>yR2BqQzk1*me__F6doZi0@S(9+ljKK|yfv^ViA*xoNJMTXNBik*o
ziMyr@QIXBVFq??<Z1y;zjr1Q-3|flFf|1=NOH`f7G#k5cFjlK93a*e$u-D`#g11|=
zwohp_@cN6^dh2f0B@2aX_bBk|$qaFv-H@$!45o%Ix}!tv%}5=5iImS^S<vLczZ>7m
zmH*zqlmDIw0^WNslm(W3QC)fUt-Shv1+PA~H<~wJxKZ89>Tk=fuLLQ2n2uQIi=JK&
zO7wIECAxA<S~(`I9Fta#N&ohaN$NuTQJj;+pBT<b3tD-12c-$pYGQd~y0y6CVqlsy
z%YI6A@5~%}KaV)`77~G&nM;tk8!SHW>!y30HKN^bcN^mROtZNE_b07i#p~PqP7FCE
zK<Kpn=rX761C3N@(N2NS^WqI@)1abLAj)&j2DRs^e>U{>3!J_!6O9H#dLQnnb`u}&
zy3gG=b*|&r@){?$Oq$N)BNqcnotn&YNoq6@S_mrQ2y20=KOAPWL6}3DoyHCpdjBut
z?f%@AomX~HVYLF#C!Iey^Pak!*DtLq&bvyCgAkLIW84Z6cjcURGelfDPag~wS8jj4
z7?jk+^OTr}b|a8nBdhUnOf__bSEA=2%hfrmTMZPwMl-#1wDWAA4tPLD8PBQVTcNo^
z?m8i)V)Z`E1{YG3V}bcwqPcC7Gus+*b?)w?$#G5<(kmhxSQ=K7Nv=fzPyv6c)uOo-
z{44||vv38pta<D!B0mwQ0?l%y$K-t4KSw8skZG=K&e@C=3@pjH1T$`T`+@0o)Zo%g
z!Uyk2!dtAlg#khWhbA2K<hPSs0P#EH-J?4&LMpcYg<ghD04}(m3BMb#3#ZWQ();37
zsW(>21_fp2>`J4PJ{#w(`)fts#m%A9K!9CvRm*@@(5ox|x|M(3%D-;qU$^qFbN+QJ
z2fN<~_Ua;WehD0F(b4XavMs+j4C{)qy@IjrQ9(wO`iZ?5G?~0e7-mM`o5LF|1`hPl
zJHY6cE##F{I9F5Suvk19s8(x~XcP(^h9Y*4q^ot9xU4_BR@8q(gWvOM$vVsPf9H;<
zbLff_@T^l-arvdA>r7Uz6D;v0%ce&hqBWke?}srUeqsA3C?rfC@qyR@;WGDhodIJx
zqO+AwO@AvoCFT-Gtd4613OAqEdC^wreYy_p$WJ%ufB)<M_<v%33d*mBX1f>d`<x;S
zHh!@EJQ{l2Qz3=MqYeNFj#ARR$_c!36Z!86^R(zXTaNq`x`yn-?XZwZ_xI#paof4O
z{P%Kk`L_gvTC|B*_)x!De5jRU$;z>0<yf+EELl00d?d$`$JxhmDml*JP*SS>z0htR
zXR9o;E1SB4&CtfW5^Sa*60S_~H#Nl{XCE>-EiKrBWVA#j6hwu}jNpW(z%aGSCslw}
zfeuwG#E)Ygc|~i;kSa`VJ*puIL_<=9BFpI~#1D=6chnI?{MO@Sicji@-pdot-0*n&
zg-ai*)Yqv~U+z7re3Bk<6}Rq1qjZRBKhb!*BN7J^sh_Ho<SFiE<z6(Ru&C32@w>_=
zZ!4b+a3O*L9=9H3gNxR~A+1V{yXQ3oIHSW%)eb0|0pp*QXdGxJzDla>kOuQg<rCMZ
zND{%y9!SAjOwSYgZsYD<?$X9z{?gDaJ;#aUK*)L6+%KPUHoAY0zxm@I=iYpM54D7o
z!<jfRV;JWpok1Mg<sBMii4^0WRZ6pu7FKy!SIz({XMmM6z{(k5<qWU_+gbSn{C0f-
zBp*uvxO1E>H~c@&Zea9(oL$T0e<_cBbULllKa;%QO0)JqXW2BVGV6BE4OWBvQKklH
z4&%ez|2oc^v|;HQV>X?>bP0D@C{xz0<`mm+-WtCiGWD-5NnJFOv`0eq!CrooWv0aL
zL2Bw$kFu=VtGul*tQDWos9L+o{xuvGVRwktDZG@%TGT}81<yq5`FL8Z*Lgn98c`QA
z1<wnFitkmoTdU3`LPIM$?$>2@^-64x9_FL>OQ3U{7SK6($yN{@|BWF!n$gaPqov#l
zb(`#}qZ;NUb<nLN55|fb9hDMtU>QeK+2N*$R2_j}WDvJd@kW*RFr*NxQu!eEl1eZ|
zg-|eMp3{j(W5t@8pZcJf$yRp)HCu2i;iHaefO#ckOR$2_sSusU)Zo4e5>C>_Nn{rc
z6Z&6b#AhSP(<(~=aWB!V6Mpq8yu`Q=aU*E=a4|a0UoH&hlT3tnDbE_TLoSHooJ-5}
zU4<_t*>WV<pC>B%qz1NTCW()fI+mSplE9s+oJ00ncU|GuVV4W1OR^g%)Fz4Efi8x9
z&L(-J*Gcq;9JyU%W(WfUzw-ZC`TzX)0AWC$zw`gubu6rR_bGC*D?pePAj~iA*>l2#
zSbR08O}|Ou&Qsi;zhP9E8PqM<@Q<_Wp~4)kP+?ZiJ1gg%mGjQZdFS8WdFMZ9mwg=f
zou8;?IPlE1@O}xaP+buP1`P=YOj&U%Wn0{pE;6H((@&wmDgo8XC&+w)c(1-g3aZmZ
zDX2Iv6+_AYxAz?SedZ5hvfw^lxiqX?8dfe1E0>0qOT)^gVdc{BkzE>=aOR~F^ZA4D
z^aE!QVmYPVR)8ip8Fc732^6j4EIS@1E$p_|G5iMje>PfQw*F!z#JORDV|O?q>euPh
zIgBql>&ORiy+ReuEhJfom}^8voMOfydAZBXu_nwR0&#{7u`iwtxVOG4yg&jJBEgz|
zq}}FBA$)ISlQ5}~)LIMbY1p^*AUO|ayu~JldqHFF4P=~q(w<}!(ab!>aXdf#3HmLz
zomsbbCn@m|bgxw`ZA;wXKZ&T(W;|?ILHSrRu0Se)S_`};Klp|V59Eh7qp!k|SzS-q
zVcEYu_%S-NchBg&OyZOoF{psz{1(5e%Va#p8el7Ek|F$diI3>>#|bRqs+g;|6gk9h
zV}^cU&WWU^JuL$F4`{)-K;Gtmx_2#Ai>9g~iJ&z$f0P#}(uu0kpQP5H?T03<>Q>2k
zBKWO75dllPu1g<@9rND3s9LQf{m>RIS%SPnvKwl=xb(?vIK=zSyYvd%!#BL2Kz24W
zT%mQ)A4n$QTKpt^z$~_=*?*uD(y>d1?V1>Hbus}z$v4)Gm(bes=_;-*U_Nxr_Uuiy
zc~osg)xjh_&PMbX_v!6dVK>z{e2<O}>TJ>fuc0dKrCN8T)K?YBq2nBNSekShNhFm`
zR5<LQrp5D7^4)1w_SCEnR}#=^<wK!mA4NUc=RGhby|XMGkeIbKx&Q@`6BU8F`H$y9
zZRtijOD1Y1w%UkTuX6RQ9D&|5SI@yiqHcK_Vm1@eYxeaioCWJ2HI>hji=Ab$ok53~
z<n)L*@DBa0hS3jo?SlY>qS3+A_$(Ruc{s(-Ry>9ct(8rV+puak)4VA!PNt_r<(YTR
zF8pV7`ofRWvx|1!hi6G9XCO`N>iy5H!mWT!dvq05o)d%5t{p@mh)`~e2oNA4H=La5
zbPbN3u<Cq!!iye=ze+!e7U)NuK6CxcZmQ*+&Lt3neJ|@#^M17Fe&Uz3+;j55Yl$D*
zRSwm`F8BF}t0`mAN4#?a&>z+_E9Mkl8K=yY`vkhIUh8zDU94k3yQwed&Dk++udCE7
z%yFQuA<i3ntP!225Ga+A_MvqM8q1Zc5L+<hoaChx<0?i=U)a(+Oz5nu=4HV^#r|@d
zoh5M1*jB%}QbC<FIWqL5^0mFcPxRqy?f8AZ?)2AvW&FNQ2lr1enz}!l7|qvhdS<U7
zZ-9TeFP4WUet+F|Ppud{v5-j*b%~9%In7=rqp#cUjkMnO&D-D7Nn-jjUhAd)47;g)
zEOam2$@d*E>mOg-5Asr8F;*GxWO%=L#8p0F>x9CA<un6S&bQZ|Z!mb~`bM+ihvk0A
z_=$?qUB6qLg~CHW0ma8$SNZd=+kOlD-h9$lZe{;YZe^xMn5A8|0$!4K%=8H>KeLse
z*{_gz%yud~%luXiUj8mpkAZ1%TnRhHFsHQ2MYi%fTX~(Wyv|l$XDhF>Yk8gRe!Kf|
zoX*B4WB8nv>whnoGpch18?|x~Qx`GX4J+KJo8v|$H^GgfIbIGN6<GC)whY10&T)ji
z-fYpi`J$^qr{(-@bZtYip0F!`k5WCH#H@)-)kVN>fza?wv&gDMjMRc!XJd%`@tG0r
zAhfgCcO#r&8i%?OOX|O=h(!4~K8G|D^5H*ahl=ek4rSVl-HY9wXl#mlJv=z`qCZbY
zB=bwpV#}&@nmFODDE8tS9D+BCV6C4yr?v8Dx$T`o@0EOB8|n))ya4N~^7UVtz_;6~
z*9^P|>6uvvoHYQ_4O^;USc1aHO~y1ci-lgPePK5zsGF;2qd`Z1k_4EMRN2;l|F+rs
zg01_E2u7rEoV4YiCil+=MYEY3!T-BiK0PMB`Jcn+Q?_o?vv@LzFQQKm^`{z3KkYXv
zpTG$I=^(lnt#547PX#ad6!zn40lU9SZ^cah=@Gr$Y<-T}fN2(edQ1-(QL7S$qJBE~
z%3@7dAXO`m&Xq^!%A<4T(Yf;ITzPb^JUZVCr0QfGAXGtSE_-y+vw4S3X7#U)R|W3s
zIzF8!x8fB)D6hBzo?7{v{U-g*if2+i%4i32M|8XB5$)+IXZc%w&fGCKf3sGROuMrW
zPg~OxET%G^3@oJqzfS`2yYm8ZTTk{AGrQ8S!vwS{XMYI1wDZIyBxt<gZ=qI8@u#pE
zl}pROt{nOCQd2fso4V{Z=3|x&S^Uz?0wM4M2EvxxP{r+V$y(NBRaPKOD{q-=ddnz_
z<`I}2m$tP0%425bG4m^V%;;`~!;IUf{?%{HU1sGjvT_$$xr?maMON-2AH`jSf%!g?
z#|YQWP9yWJyqDjI)c1RI9pU8_-$?<rVV3TIb>`*3lmc+#eALh9-LP;srOTWPuN+lA
zwxfz}=asL@NA^{@_?WIL*Ev5oaa}2Fie=s_(`?)vf-rmxKNeh@?winwMfGg4Y>=W3
zjwR_pm9nsxzi%IzO636e#B!F+F0b|<Ha6)0XlrcVrCY9<Cv34BO`Ei-h8IK~nrO8-
z8cts|rELBBo;SKd7C7IGFDkcnUvUNt!$n6s6+UeEtL3_5n{eMAfcDV}PA|65&wnM8
z3V#3#GlckB^^8QVNq3mMPHCwj;E|v%YOpEERUIf#p$7XQBMJ7|lNa9!>n16qk@=Ze
z?pxJ*CydNr-gvFv8fQZ~9n%XUFm%9kZl%7;3b%5&SvlOS9Bx()H!Fvme^-YaIntuu
zXCbVdPUhCiBj<ORHclQaPaP-kZ{m(4x|3^p<VaEF3A4OXU?nTJ-5lw2=ypTiyj8i)
zst+dQ=%9p?j*hacbU;p)S}aJRZMzuw%DosT0}tQD_iiSZJ%&*tX+CC`ltJ2`R&I~I
zss5fk@?0x3qNA*<1eqCF!5_OlIP66JQ+bG6^Ir8CF~37<;Q_UO7{5xZ@{*?D-e()~
zcXs$whufki-&9Ei8dW<{6%X?2TPZT^i1>9cI;dt7pj_c+eyjSUBCFAgbvraTh-&xb
z-`d@JqeASnVaSc9wWDfq=tbO%&SSQs4g1&u342R13r<t=219sTtp_z!@eyR5n1+Q`
zS}p1gGrly8Ml_`VOGY*BPrWW}-v;+iVk_O!&N$KVOVW^RRiSqCJjfcxRZJ%r9S5-?
zHjT(K?;R&oXY^Q{dJi8ZuR%r@R8oDG*^dkQ|8$b)s)%k?3zG;EW-YSrVD5`vCwe1)
zVfu6yfFq}-d=MojD&DXpGA1s4+M-UxRGQByE3y+{f|Clu3E(F+8R{rGcO~9%YQ#?T
z*~VMAJp^A<%g>-~PLPz`KQGpBz@PsZ{pnt`&Tpi}+_mURx=|h_@Bm>Ln%7gm;QW@2
zxA%x#w35+TIw9gkeXmu2c-norzrFWt>*;ni+%u5)n22&jdI)Xi;ODf|n<}y9%yd@;
z<F3WOYjh1)(I`C?Cbi0)MIr0>${%j!5BD2L#OSVMk21D<F`!)n5Wxp=o;)S)Y}oVq
zBwU8Au@>R$QJKo#-ylmfAmMy*<`{rBw%HbK;ziq)CSop7W%>)V4;3ki=a4&L=T)6#
z96X1_%6F_P+gz_<WgM~|-5LlO4_506&&R4`*@d1_6Ff!sgb>4bsEHIwPlbN-1ZhRj
zBu^~2OKtU@tJvS8zX1>0lU>kzlmcRr$0Pb+nQ=zdV!SmQ0mEZh=dGCcQ<$;7aej>=
zudNT)V!?Eps&`V-+LzR&tj!Ikg%u!T$P1@t+04kwh-;L(tjS`AoE*=*Z71W}+?eDw
zeZ`6xd1=$zVC>aOMf$ci7|_k0*W9P7z@wfeiSSJPyPr-k{I7qdV>YgLT&)N6>PNaO
za7S6)FuBZC3~KKyB2J_OqpAFmz9e~vyLg~|L$wD#28<o9h7Q+W)HWKs^aceOD)%k(
zI{JYAdRvv-<B>l@A{x01{5-zs%*}If<ZL$Gqe{i^86EdSR&q(#PKe9&!^NjOUK-Mu
zcfY*L4+qKN?6@O-p!cG0NWM*i!HUMLqm`BitiB*>JAWgETWIuc$9|zv8~BwuU=K=3
zU>8|MHoEdISL?0*gl^$?nlpBlw)H*JwvI3Sj&&!TH>=7a-}+pCt?2m)?4fJoyZYws
zU!%t$Hejx9Ra=4~%C*$NAnOd__sS9a7jlGNw3?8;sC8I)R-Vr*&*%3|KRd4tgC8fI
z8>U&<n|;=AJ|FR=%t}o5^%(@1Wi<R_;?UGrQ_a3yBBh0d(V0;X6cv`K<F&j=#AtKE
zXHjKK^G=~*ZjHn_hn3v1+;*;ev2{u+5#yKKt=t`-hCEb=IV;Y{jY6E=v@QX?g;(+@
z)Jm!rp8oIEC_5jqSIc>M4wqky>s?p48|O^@3o8DXwr~Gt<$Ba>sw7smHFqVOkT8IA
zz$eEYA?DrxHjVRFJ*K|&hkHqa$u=gAABwXx3kvGu!QKLDQDhStdq~R^rKgGLwjr`J
zyD^kbS{Lbv<d|4EOHR*|M4Be4P7q+lG?^>fT$B&9sU)t0tC3CFLa(Z8Ox}6iZ^}Mu
zu8TQ#ajk5cg<F0yjng5G3;@6@NB@<h|8FV<^E`?E4Y~a9(`hCWuY$WF$on3Own_G8
z;4h@*ai5*@k`2>WiCqv!Y!lZ(EW)=BbXXmdzBkwJHu#@)`DcTz>iBE3AVl7lx0MQ;
zFuut$;-w%GdM=BYs!xuxtfMch^iS1A0n!WOd~cTqtl`phy7JQMU_5N3u~}d6N#Gv^
zAB(=8-FO-XViP;l_Xnp4=U*CQC%S)cvxR|%0}BLJ6$5yG=s-~ZPb!_3YrDs_weDQ2
zJ~3IjI<3b`s^*TaH@>F-{p^O_UB~RuznfmB&XYy6%RI;K_HOjqXLr43Z=8$^nmzj6
zyh|n8b@+Bq<JXdwL`{>tgmfzUDQ8xpOD`L;hkbb?gbM=_s|Qki&VqgGS%$!Pq~R^+
z=D=v;9{b;Mh{Kq^CYBFj4!mh}n0@QUQNrwU&Tb`0g`ylun&&fdfb0{y3x>+P@W4pH
zSAh8J^o;1R&wY@?t`i*(vqR#sZG49p&Uwhr<<7JH7hBIBZg+S8@#5R(&${1l@9pnA
ze-<66wSwK?Oo_1E$>Go4puAT)lsrk;(_ijel;i6v@F<+neS&_A*ArI0`b44__BqC)
z%AQ6TAu%Cm#8NHkd@o8)$27?XtecLA)5Kj<tj$_BeT(pt?Eer%dq5f)CFjEnA4=i;
zkueY>k^}VL(nGizcfh_mq#@Z5e1SOkOtwf;A-Q$DNleZ2@qkS!{8>D8C&Nvf_Rw+I
zC?t0wyu5-=voQd(Hp=GC8Q)vJOW`rK0kF!(d*(DCsgEE`%hg^QHf&cct`8($Wsn{n
z(J&DGGJ<^kNH-u>gRk#w5`<0U4Xs#hNTMkUC%&jF&WSl<#e;Z2VK!x#or*UNW_T1V
zRB7D{LyU8EQylqo!`qIgZLS84^C+8*)a`BQ>WjXM-qMojf?b}&B&uz1*Htd(oEr!G
zn*uI<Jy2<4*C%xFhu+77sAN21Cw>X36Cr_@v`7ROVrLftv-N{(L1rJVAhTC7kgFKT
zRSe`R2J+uN26FG?gg;K;|F-wxf*ud{{DDKKCQT9~09C`H2B!2)`%bhwBw6}|owhr$
z0Mn39iL;_MGM<J#N5fbm@CWQp`z<P{RQRt|+~7xu8{8|f=oewo;G9E~i>%1yRrGb!
zy`=uN>b+kqpb(@b|8EdaIQeklgx4nmx5E#cQXS}zk1edY*g~*dE?~~A0ej`Z<(_&A
z)#{R*RJ8;6i9Y9z%Hr6=LTK@|!ww~99)02DVP36=dt1*MmESPV_1>aDyGh07jtJ?b
z?tWqK4pa7=oI7i?30ya-j@6-m4^vU^(E3*!bi(pnGBk%eC2ROrRT4eZJkpfYGEm)*
zw_l*z2HgYT^zX4lan0AGe~HsBzf->*IvY9b7x4$Pe>JPOF5bt7*#H%4>OuFG)z#EN
z-VlST77lv8N1F&d3DiNugoWA}yK{iiynxSbJ%B6x{RQw@{N8*(-d^NsXsbPGI!m^|
z;<&fJuaLX<ieaPG{sp4gsFhzYj_remB+@88Qcz+gDuyLq9<=rw3Ct65{yjqTe*NG(
z7QEjr{B9LFw~CxwMb6Dd&h16pwyo)cRS`|ES9vp!UcGmNV7a|(#mRZ*uRn<|vXN*1
z2IJvHzzzN@%dW>760v&?PKv#=Jc=mCl?h+9!7#9VyDOKs-iS6D(I#_XN5dG{urKyr
zZdZg$yv=?&ZkULYfL|BCIg2M~y&Pk8dV!xDT7^iR+{&0*RLj^;iRu{~q1ZG%L?zmN
z{L|2WGxznH{&+2Jn(PotU(k1dxc`R;inVD{J66|DDhDrxL|s9NCsq$n=i*tLW{54Q
zNlguwF}kzSVfI?bU#~Aj!}i*W_mh=Bc6^X)uCodhS`sMqD1_K8h6%AEz)hBggM{G}
zLHtlF+85+rJ#D$k8w%(v+J#1B?vdqU;{NE0;ZU~EIP3ge(eS?J&=~tDnf60Hd(lz#
zoj|y+?WNATI8W{V-JR1X^HkZWF;AdM-{PshfJil>>Mif0E_du6$?SC{>qeD`v)E#J
z7+b7p19SGLO2v~a_SNAJJT?C?ff0NWzrS5fmG`VKX{IB+YP=WcyDLoWCVR}T9yXqe
zi}PJ@ht0<c2Q}C@;N^)uYXDen0cyue4Gy~^3NO0+T;&!OZq>_z&d0~fE(jb)DjF_J
zmG58V2$ZFl<yhHBA_K<IB+nQ8;rZTo`@35YHL5mH>R9lz{2_`N8V}-p5ch5)`xFlv
zVdyT4$Px+c8ouZM4plb)wqX?&HSq^|O0FGS!GTiqp%s-NwBk}4v_g?z#ZoMbrFdLc
zwXA>Eoy-m|LP_5(8Hw5=Efv;x1s}iiD*r{j%6~%+;*Ua8mba;a0V`O!c%BO8tN~rg
zeMi|sQyQBF%eJ(+m>kE<IlGt|>=xL^uFFC#Q9~Rb)7hGCEMl>sQ0SHnQ%X)-{p^%+
z1X}(4tQu++&^+II-@bUU%U2lP&-nt=l+~_m(k_R*v;1Qvb5m-dQ#4$b?U&h{z+6@9
zS{XXR<K&)j9khPwcqZtiMP&ot{^9-~3|5EsLG4zWw?=V|g~)o{y%qI*nkThWl9RfE
zR02a<JhHMCSGRFRMQ_c*KIyQ(+ay=#sjK&ibFa?hv+$0kdiG?eEZ87Xjraa$a}Zxd
zFJ3%hr$crL%qGt7HLp`0JDMpe%$x>OMLcn?iV{YaO)lWBCQrhnfGXi>m`uDcuS6Yu
zpG*!jjwpcU^g-ZDJ0b3sB+@BJSt_Ut9K=6}24eQLy&nS1wxSoAn5}roT(#E0OOA+m
z@NNyg(0jMFR4;I4H+FQIu{kd|f_A9vtIB&wDE~mUtaAoe5-`gpH`6^g&=6GjI&P+?
zD>u`Xo9W8U^xx6V^uMi_X})qZeK$8#tVTO}Jc-9Ae}D3kd`_v2?lD^UCqqA8(&l^m
zqEf~FV4_(f74bN2jgo1*9{n*o&^CP`?UwUa{oUp6SY^}rz+SPdlo&Lc>_#rEbkLT2
zvBHj&KrMBBFG<jc1&)#=7bdR-EtctHF?A-VF=eG58=UV&@p()<DZ@?H*6h548j#2k
z(-{$|^lZJY;a(E1y4FBFpPVE}PLOx_$0u7env#hY=|sH;2~El*`WoCt*Q)DIvscOJ
zey@Qq)*g!B*#s2fS|?hg{W$~?pbFYp(lsjew(`l_`d2ROn!4S>t6Kf5fbC!5^sjLG
zS2+DEoc<L~|G&MrVQb|~_|cpR%V_#eQgCqkCMw`IU3(ZT6N>)*$y!}Bm*8IJ{05mr
zy0+`!bsPtY8EUr$%7Xp~ZJbos>kA`ZDyO#F@)T@Pjab=sn{h$~ueRNeq#}1B!SWr>
zM)ODsE=VRD**BuA%R{jmOyY2uFz1fi*`z7B-yCm42O763G;{_9Dxw{BYYbrs>W^IE
zl?_}bsKwoEEQd@0s&j~OC`{%Zwpj7R@|LQa*xD4}&}!u}Mp9R&%e$jvu37h@P0`TO
zc&eLKyWk5s+OYu(U$a(JCk3M91oywNM10PH;^FiNFL$W+WejZ37+5ffV;@f00_HC2
zVrF)l4YIub>6=0)-u4>Y@hI|4ZBz~UQ=}6p^QYB_QwxAUb?`Jr230szX4b=f14}#r
zd=4Ja214!oo?%@V6{V2Ig%n+ei{r>5s_kN!88Am9pal&*S>Q9T4}Dv_vv|84<kJD|
z4KME}qt<!)Dm{eGgoS?mYCr7m3ho^gZ*BRebyAQ1BR-4wO$nuYPIjP#3o(;I@>YL1
zV^MqVo#aUypL!dKsLh6Qc69gCMNsfP;AUoU&XP^MwYzgUEbcV-khrhwW)@)_kVf<q
zoK$D5$QHV><dm$n+D^SQ&DT7BZ_g2ko^Bz5@jW+h;AlylqC)aJT)Z`@g(~N1SR)d%
z=JpOmsDWL1FzF;f2eBjw+Afg-N9rVOk4FbO8?Jwi_MTkLgQO2iua=tx$tlF}an263
zf)6~D>nByIQ@go_q9hdaMZ^0s+S}fLq0R&%$zGtR#M%H-FM8l8rl~M`Mxt%vpxu-W
z?yc5`;w0fAS>R4G8^)7xM1l5340O)bx7<Ws2rFbIHQIUgQ+QY_hji^8rN)27hGCx^
z9i@HjrAS$z77jU+9BJ_D5(&EBi(c+M@k(>rt(a)`UUqh}{z;bhMH^l8`caw`iQgQS
zBby9VVa#93nF`US&><{@+c`3jfRFreqC!6=;T|wlsn8l2Mm!Y1^8MHv-m6-Lg0esO
z5@&0;T6^CNI9eAa*G2_%wjqVgSNc7Co<CS>gb$b);oUuyUHC2gofvK_d*lmCc*H)g
zAHXveve5@|l?`RuxqT{pw^}>OZZwt%#&P#S=*y+Js~ekLjfm+gFC27;u7&&2j<jHE
zx%iN{71&*5iM+RKiU8>TkS+YYy?nv~!zwE#DhSjrasEndUe3?z(y8EW#~U-mq7CMu
z=5j-^(pyw=tb=0{%aKuhAw;QMy>K(x_fNqFG6SXq1!f#j=Gckd-}XF&BU+AD^l+|V
zZXDipGUEgjo~7$O+J5%D`*3^jMGvmKJ}FQQ=l0-HGRkP)KyPFCy!Dxa#DZ^CNX$WO
zW5yhw(&RRswOKrzx4sagHtw=oGH?~X9sJ#N8?>$hi%L3WnMEIec(H}!%WI!P8MWTg
zxQRx@zc)J2@#~MxPIMq|e`MV*Fhd-3jsji!T&ihAh36ake53SyQ=c;@|H&uCx*Fvt
z8*@)KE1$eI%`DETM9PcA%uH8Gvl8>s#695+TvQCiDzkJ=qB*tq&dfPd@`lC+P#LFd
z?({hC-pE4^m^sUx&r7liTM?yf>+2h4`>H!dte(vv;fgHUPkBWIi0V|O1-Y#?S6TH_
zDU27Pn9`KT%x1H9W_#oA#@!~htmXA{8ybCo;PP)(S*1Rk3?;Re<}s_P>n+{J)s9Lv
z#nR!^LYE~HN85C71%4FoXOp!2(n9Cx?ffgJ%H-GX?b}AsDW*wc7r1H1-nVTbXkBHm
zmbYG5$)!z{UKdy4ZRu^eo<I7|Rpfv5{J>cIzIQSh3^vHiAlSyqn^*J|><kTHSs1UJ
zg&}re;dC{#I-Zz^qD2($asvs)83_BMPHiQp3pRBsL@Jk>PLlYPWh1#wEn^$qjm5)m
zuI+PNqmYyW7UD0)FN)AI`he{7e<OCYUI<3`E%0U^iu$LyEC?^Z0mK6U7qJ77?64pq
zdj;2TVz)W+hF9`~TW6SSp9be6>J77FNqM)5KKXab<WW!{2H89UWqgp%V-<L^3OxBW
z(-{OtBjht!ut|SI@hU6F>Xl>l%CUNd-@C%^{V0yrGg_>V<4#RAvm14}h4*xxrs_&q
zzVxICFGA-Xz4A2v2>82L#v%kSrptUCiNR8Up^|3ZS~6o`ser7v&+Wzu%u*=KQ&=-s
zD7`mB={@{4V0vk1+!U#o-UcYWertK4UMhht(6iH8vt&C%6#)-t>=8(_&#a^52&#Wr
z0N*fM_hac$3*Gr;(R-g}k}U@A$+&_9kAp7ifrh#QgXS=%Yc}Dz)|04di4fcPdJ5UN
zkfp}#R&XbvW5eEaKCQWTKDaq}FjjLBelYF>)wxD%cBSa@tyL<z;3V3DbrL(C^M}XB
z*fSvUYxJJ}mY1{vFWduhSf_ajlVVSXoogTvca{MVhcVvw*e-`A0Z$Xa5W`i;Rb<G(
zZ-XqoZvqhFj;pYR^X{>SJFFFM@xFDD;4Qo<Vh(q%13CPb=i$F4=rA@|0e2V-KnZ#{
zEVDu%UZD@K(1%y(!z=XR75eZBefVbR!?;HS0Ajvrv72$-2UqPfBw~DU6EI@%h}Xg+
zM#0<B12CP?SEi#hGL|wDAL9kQCW@_H#)IDGtUo+WU?>Yh0~2M@`WUM!GROOHu8nBz
zf4?8yZEdU<nOJ$g(fUH!+1qZ>)hikbS`-)1O={yY+Nj*-U~cDeCJ-v4qwFeuj?>tO
zL++-du4r)_Hyr>rKTG@BkjT~p8t`HKDh-gEKik0H+2K$0_nWASw35~6-hE=j<D8^1
z_1Omk(?OMXO(Uw3@IvCzt?G{z+(RrpR|5heq8Z5}Y;hX)u~&jLt#nv!zd^s=R^8Y5
z0-{t*y}Y2E-D*)8>fT%WhkAy8hE!aUpNY05kf}^z-|)z!Ww1|T`cAR|P@E2v<8)N{
z<dfUcj%Bmt<!~F3x25jJ0$%0S7@jP3^Z~?lKT3)pSD$6};{qU`(`c@OTbKuI9GeYL
zJ?GU2g~8k>y$;QY{Atr7PK9$2pB0Cqx&7?>gS7z3bL~erpAdQ^*d)!(!Ct&6Amfw;
zqbjjq%vkX@VIGs8s5cdw<2N3*v#PR??5jX@!&$gBF93O4VTdw2ue~a}LthX3T5^dN
z6<h3s$_#%a)N6%S+(RF!w8GE+H^k2dIcziO`!(USUpQf0?-nt|YQ!5paJMzz^+M1r
z)2?UJ1Q8gbZi!S%{&+)xu6!^k=gJ2$k*?sw-xWR_tbyYUO32}*TU@W_dAM++);cE)
z8}8`#3VQjYLNCv)-wJhk<@a_?)a4bz^2*U|g|K{6gyk74LrWmbQo`b~;<D*e_7}+b
zOoElKVFnd7m+2*>8cqTvG2j9YH#(+w$HVLp3P<t!_}GTJ1?mpEj#8jmt=+#Deb&0`
zo)b+=X?G`xv&HK_x9$dS$H!|8yUsfN)7}g+<c$d59?_O4Fcr6>-AQ@|&Kh611SGbD
zIFoEpz}e$drwkaRM<g{sUXb}#K@!drckVprzoYd|w3|$tz6lnuBp8oX{lAb=REL6&
z(5&b}`%1Wi0RMW;&y*X=Mkf-tAl*tb=np=E1qJ4MC-uw^t;suT!SjtZRfV`=;U*_h
z^8{2<)<RB_t+{T9hOU<cn`y@^f*cZf5SKFtb^Z-oB0w9)K-OmcD2Ge7>35&$I$wDL
z<g9_E)+5}Y)DBTECK!eNmyQH58lVG?>x!PmXX!D^s#$dB&W;su9M}D5FF9u9<b;2q
z+C5Zz=Z>h>1_L?!6$d~^%Q)(+Z*2apyaa8TMb!=4N#agMb1gfiF=}aA&leeMuc!zN
z#U+^I0aqWa6chVkT|6<LpKUJd>@FPK!`7klR>=`MMUw3Bq9wHCSu$m7L?LiXOt~+f
z?6>##pRhHo&|9f`Py&%*cAuso2-;;cu*U0Z*kgV{zfQ$e46q#3&VPhicfvGFb2$Fi
zx&o0qj}TK0!6gdkC`2X~GlE)|pkX-%$-F)aeDN;21o7RtNbhmOEr;GW0j7K5GKDw{
zRwx_ts)k93ZUpOIhA=Of0xq17%L>GN<!it4wO{$#uRzRKzV_GjwWrniNWS&}^IOou
z`}*34K;`0VpHGXv_60OT`M^ODqO`Dh9v%usz|5@>%vW&*wq<-=0Wmf~vf^npOu)31
zg9=vA=QoWD$Uj_M!2G%SqN~Qj0zjhr{YTF4-&q%tWJvjS_5XKUAoL6h-S^EJ`A(ku
zL*0o5uX;E#vgR`%$LE|EHDK|7$`1LKHMd^v#qP!Kj)zFp(_`WjJbr(<n1GM$eSKi=
z*Vl6mw6j)kt+3!%Snw+>_!SoX3JZSa`@O<~|1G<AUq@^!m09H9eIvwpmQ%0i-%SPE
z?OW`RT~_ik|B{(n6FdP#$cORdIBO9PIOMFTM~T$HwNQ<HyyhQ8ewH7_qYDt#dr@`0
zb+`597gc^b!SvFzyRARBHssN5MWUvs|C5SV;qCfE(eFIkfAk&C2mprJJRHl_U_EiY
z^4<fq6?j*RSE47po+a$jrNrpTM~V0gaSgUz#KB{dD2q+(imII1hbtg1`ZX9xFa<L1
zPDlRzil1TBolc(ov(wq9Q=aV6@9b3GaX;yK0->G6#jogeA4tz??qMT(ggmA7A1iV#
zMtjLr{d`aJV+W<l55ya#6Qy4^0M&k^*!JfqSr;b~&SD;WQ(ad&(f3LJ>-5X}^{9E@
z4PlR+)4ry*?rUR2vPaY5=vK|64eqj}%b0Fb^_#bJN}W&4)I101Mdz<?131C3L#`wI
zmVxJ^==rOfAEq0sz&75hRlVEWo42>BjY55O-;7Piov;P_uO)q}{qdA2fUFWR8^l9)
zC!^z9y<RMwz3OI@n#>M$K)j39t>aMLedfl^<g8k+|5dv5wr((p3q7dKLGZm?r{CG_
zxwZ0kUgGWi!N3fo=mWwTR-$)zQQkF~TiJiLOgg6-Cho21KcGl3gL>iCaI{dbk4r8M
zo{OSkQ=7w=r>58_-BTazhQV>0^Hbq&!jVvI_?61@(G~s$4JV^GIn{YMl&cdi=3uAn
zSg=Uhv;Jk*%=ld^7l=>3Ql`#<+X4M5x7&i@n%Np*BRSQFSVyF2Px{Ua)MH4H=)eAt
z{}rqbbl16x=e-uMK)djbt~V4qF3GnUzMavx^}BL4UU}I5J0VL>lsEU7lAb+Z{>94w
zcIAKjYXD8ABe!9JEa|su@Ur^b!j~*L`-nd+b~~FTuI1!&^t*EM`6gzk0B7T*h7$8y
zb2lsW)}S`IOhZ^aaGP>pM*WNaFv->0qotX&LZK_ysL2hTifUF#NMxT3v7qMS$R;<d
zeI^@v#sE&PI9#Apb4!ybv{dvi>@_z+4i4?0Mxzb*CL)4Am~lk!$c9HR(h*yuL=!6b
z>GFx=7g#CE(QiQxF>!f`*=+?V)WuKWeoSp))cAu~=Fv3lHxH0R9b7@ozhZw_N~8V-
zcV;hv^)rz%dxrw_Mht`j$#Xs)h}Ys_%Ir86UD_4~coJ5O)#TZrJ9*4o`4neMwUn&;
zjKeTLNn#=fwL{v3f+|bwoou~uqsX2xZmVQt3U@|BuU@w(K}XPGKcZkB@|DZl2XI+?
zY2=DGx7T1@p2!VkypYO`18GIoRmA?H*@Yg=d*TKO{PLC0+{$Neg-^TknY+Yi?(eRL
z(QcMck0;6g-=8$1rx)_ie#HMiNRR&x9KJ@hKg!OJh9vEMK<~QzpF=p;-K_maw3iI>
zlk|wT$8(~KxN{!O`mY{6cu%i9YLG+IxflclbDGn;Ar4?1O`*e?o&W<$@-SV7`$+JT
zOwKITq4>cd0SnL!p{&tGhi3%m*O1-hD&BY5VQzV<^T$OqWHZC<xXFQhK(oqj9=}sx
zK%ZUFOzsDM_(iA5u{@^%i`OJwIy^hYQl}RvfB+jVkixkmJDT!h?bBl6@D|Ej3I2w@
zZRT7GU)!wvFZ#o5HfSAZ*|A3P9Hz$%U8&~aU}?fea(gTtYaz=E?p|;{ETL%Rm*Q54
zGR4ol@gFo_TSG)mA#bQSq)c)bY`5U_aHr&Sxuy1qJltb<_ci@R<ot(tNduBo^9ec{
z(e4Fxg_z^V8SPJycVKGJw6W^P&J3gkM9_y?)?_}4i-|SnR@8IjxSw1)FeU~=I(LsA
zgkx0Gz4{;c3A6#Js48c{CSs9A9bDM4rS)Y#fq5k#un4-Z{3#QF+;bDaouFIx1Ejoa
zMSFg+K3w)IlF@NdSl!||5p~^fEOIxhEj)-<=NkH~?GNgLGkSFe>uo;6{4Fo*4L;u7
zXrJa?`nr4BDZa9ryI=Z)-B@_4udd?HZFlPH^$M?&Xx?&VSeTP>K8`NwrsY6JJ#1{@
zYlNvbU+U^foBK!X`Ve~A7DHrxr^{*jK!7`)&NLl+RTA}Z5IB2UDsIbLIlS=6ru_~Q
zxSwoPxhC^mnl0_ed}qcgE?P5u|L$9oMb--rRQ23zHvK*8suxc^$<dY-V@qEY^RE^C
zUQPYvnzm@w6Lp%+Tv%&5HML-oZB@;yYRYVcY>sm0inByQF{L`Gz86g6>tBSPL8%?=
z&&E6j0nG_%Sv%MF5P)cBKTEPv3(E9m<wq#MWtF-M)UnyDWk*wI_ri%1OM~xzFDlR$
z;l*f1zD?qR@kk#cLtyB>OPjF@uNV8IYO6FQ&P8M^svW+NLdA!PB6}D5jV72q+m{0V
zU2#Yu?~~`Ee+XuA48CH$>AD~02x5h{+2ln>Z&L`!L3lo>+cR(9pa*W*F@ov~0kY-|
zghY<eq+*#8F^lX%lgE)G*6;7x`{_D8-)P#FYfh$N-|f6Yk~8(>cs79^A@`P3J50I2
zoiCb0=ifv!u&7#beApMWkbh5@2{Ap>B!&2UNEq8SB9jx_3+5{C1qUxYc^!6%iX%HO
zj&>~cucIaTS3Kdpn#6fJyikkTjgFfqPsWP*?pU-!!2XSr^Khzc?=+&Hpkk_)y8q}w
zHS|*-;$*3xdQgg4cy_(5I8#1Uoj5SOyNI5|BO0qDop^yRWkCi^E*QIkG$eJOq!P5j
z0q2UCxPgj9tX5>8b6x=`%9tB9jdB(UR9m}F;@$^C%$jtn`#^qqDwy-{R+`ltrYbc~
z*wu=2E_dl<&}1wJ&#Mhn;*IxX+BS5+`Yiv`eYHQ%rq(>9LrxfADH7wUQg7yGE+^cV
zizV*d-h`NPmA@}Ks$DLVP<}i|J=^kSSLW&6$)nW%p(tY;`+L4mKf~dIZRgR?vJw&f
z5%{>X@7T`{FY)JSPa(tT&mUMzN2~P>IIR!%-_O*mrv4Y%pOJr7eigo(FZO}{<6fN*
z5z`4#e8-<XFonMS*^fhjX5`O*U`bJgFBT!kzyh>1yyJM33~_oLa0qk#R6_PaQ4V6q
z7n>{g@RU{*PBQ3~zWh1b+`Rk6FWD<*8cTD9P(pUBa5Lopnoef=u}ZaUnUZE|N$a@P
zh|bbD8lQ}xUTgu21l^L?Kaik(n2h=-tcG_NF!9tE;rP%iN85v5J+f!owO_th?xHEp
z)mk3D`el11Hv~(qS6mVAu9$kK`=cNg|Gw^#QrB;IpXBd(pNL}V179fl@(bm%8ztDx
zzvR`j@Q%6clKGWxn<dxIW%o{W1yOwuQZE~439S!j)ZIjvT}2B!`eE**Yj@OLPM6(I
zS9LTbz0z_(dp#|To;tw4Xn#5z5UYPF=`D10aA-Zc<id(>aG!pxj=Fp5vODazFry~a
zCIdL!pHQoZ8SN_WEQ^QPdCqVLQV2L*A=;Pq*Z;dcvU}0A1L9jn1OG0W&>6_`5;7do
zRJxsrF3)twwf!wmJ&a?zfRL}ADi;+w{qY?AkTmwu)}yO8=bo8i<ik9H`&VFo4<|&O
zw|O@OtM`n45Bz;`S!>XmjJSBPO5SjytJr(GPp|j4_rBlW>(#k&;zTAFW8qMF9U?!Y
zFP`k%d%ZUNt}e8`pD-^XPuOO2Bzf@SVZr?f4Nk>Vg)XR|!50&D<dSZOU~5Yn+&SXs
z;!wTdGZ*8cKyAo(ftxjD9S|ZLVBI%&P%DM)m`&ijfsXcL?q%`hKin#`bM=8LmiJ!d
zi#y&TZq5>fIQGGv#h_sB8N6W<PevscFBvswIT*e6FdfZa2P|KcA2bJ9pH4^<BpnbY
z6MEa9Vd#H_v){d-JpKRmFK+8LXnIa1Z%(u3T)nQsysj+l?eYP(Y#kLHm2OsNv_%Bf
z9LAr1)Tva~ThX06c2l%>_1r4t9!D<paH<tu!_IY2Tzm6YWdq-D{R@ugbc}1;bf?92
zd~SYMJ$L-|BjM`!7`G~$`21=rRWr)NRqJ``l}KODG+9^Hrw%TG-P0rKnVM^h;aQ_c
z-r+G>(yWn6M;(iktuCYTwc-{yit3yc`u%J+Dnf3$pr*?xYzru+N*uZSojZ3lY)l#n
z;btNZeDWQgBFJ?bUP`@J=_sA{1aII~azPh!eQ9+rAA(ifYbVow`_<&|^A?zvUg*a)
z!922m;b{p;QmQY{gl{K+QZOI=X*@Zmj(g4UojZ^C2)4hQ(a=T-f@b)Rz;vubVTd|y
zNWw&^IHluqM-5y0p^GS5JS4u3Wh@q%fUW%8XIp`vw@s#CN=WU_b(v-uo2K{O-h<D(
z-@QO~nchNxOO{qcq}IT}kZ*tWSVo{^lW&WO<jz#=RhZwl{3kp7#l1Z${hSK-Y#Pi5
z6FPa&%cy*)MGda-z!^uxgu4~HhYLnE{jzj`>QSiJwjj2=PtsM?GwN$A$~H+l!!26M
zcDtqi=&rNgm?`W)88OxbWA-xSebCKtDsRW=T9f~-x4hlY4AGZs25#hZ@-C_XYvA{#
z1@OHtD*&8t)G{4_P1iDsdx4;P4H<lih#bh{l}iQP>&VYnN!23hVxM(Q=Ig%x{O(_v
z3F^)!!;lT)J#59I|7=mY0-y78?@6mL63-HWvtl>pQti>4IQURppRcTaaU&X8*(Czn
zO$X(oUW$KYF;*6eNgw!V<?_wAcq9oCm*ISWTqE23zKmxyoxem{SBxaOq><h0^#79S
z${^^>O;xFp$4ohBY2aU_-_RVkmTqA$1%vkoS4FFxMwd1sByyv5SH-QDdpoU5&&i@S
zSu~IZyNlM}O_pzWe%eZn@HtsLki{cW*+R^r%SKdcWGaLsx}p)LFS>~rvdyjKjSz*_
zcngGCG&z@KG8WfY@Gj@324r6zbqa<Rv!$H){yaaZVEP@P$45=tGVTT_>>grS@@yFR
zLG|T9YwnJ!x1^?hPs2k5Alrt{fg2Y9;^FkOod5u5B(Ut58>q1wnop;?v-LFkW5lZZ
zYIHxUmWGvAwXQ<oW%W<d!@cdT7uyj;>Yaz%(bmI<&tE=!QPrqQ{m29p4Qj=8WFTZA
zyrD}ZR3-{x(^XN?P=8dC$sx%`jN|3!eCr6IR?Y)pL8a_cu_jV7P2lNR1Efh#pjG7R
zB*A^lroC#HV^v=pXrp^!^GCz*&!8)_WTb%Sl(;?SN7*B-G&*8CNsy$=oVDYRvJw61
zeU2B-j>u#VrJU%Wp9o$1`SnCFkOXA$&PJh8a*k{sssbys_sU$rnQhTt5UF*LP4hww
zddPcJMQer*=2Z<cWe(=M<ihPQ4ZJ)NI?faTQw)#1s=Bt8w!vpD!JP*O0!Q&j;$>iS
zfXEVF>$A|sUmFnN4ya@Z{-x*a`NzVBWv!YrmWR6TS-L6<_!i(pbFq_HJDS7Gts3B8
zgP?$=4D2;MpaWP17qzNjbfR=S5Gst*6}r0@0(&;P0n;5s9}DA+9W6no=}0_kyj%31
zcc|VuD!h?q{VYKBG$w8}(bFe=HfMVH=s2#E8apA@S=|Fa0O#B&1mg3q+q(hZjPH7G
z-er~mX6ZqqATu7Yvnk&l<@x<fmmlZek(I-^zz21qA`l?LFzlOMv6@t<$t%MFZLI2&
zs6fG<(TD_b)S=l#Tn+P9<y8ngsbrxr{{zOcp%3yCQ;BeCFJat#rbNPU&5MX(3XxFM
znBPHVS;O!1tAvermoeU1_IP)Z<JzK#5Z-Qpb{Q}|L0p0nXkX4Dl0k<W^}fy~$GCa#
zH@~(@`Dd?HW>6Qf+V9R`N7rMD$FoD)Z3XT=Y?I%<Z<FOV&*MpQlFjmDAw%is)|V5o
zRo4ZLN@_*d=gVjF*1bixzXF*CoI-lN5iT63^EO%7ChRK?Fv>OQT`R-esCDf&)f;~a
zv#wtC8jHEO<<@n^S(sZ;&*cKbUN*D^BpGxDD-okM`>W}id+0+74qJ1_);Ja@R~H;=
zBBbh3FGz!VaK<~A9`Zswg7>ixws~^s-Rq5Ye3BhUl0jB*FUtf+IkqLe<y_WB2zot4
zCubuEbcNJLIK)$TmCS8H4~h{pBah2!DBY=*Xq(FpH6E83Bb|?SI2-LA;v=Zvp0|n~
zWqk%0a@HnWnH@J8&wn96v(!#9YU5}(dFdrfRa4t+`U$D4ykh4(Tx>@f4DZ<Wjokz=
zdJmdhU=hQJNLgntXsS!cTuA_h-TI?7Rn(JoQ4$oE?1@H@ceUz-JZiTnnN~46k}aGh
zx=7|MNDoCZ5?R|#b}aNC%ps3K5zgI=f$<0|D=Y~GR|dcKx0ajqf<Pq~P`Ru+-52IF
zM5;S=*%7C(;<6j`^KmlT-+y9rik}RrHK9EL#0OT9>-b@A)AEI?<0bu}VWtxawMkwB
z)SxdgGQhgJfbHR;Bwd0_67g5^b7{K;Osj<rQ)5I==<`vY52HyQM@@PIcC*RI7mh_}
zjcFE|c;WAGJnIz%FWG7;aOEKg-1wq^vZiZk)62o*8aOmg#5N&DOy_u0FiTy1uu0C0
zc4-#N#>zkXH+zauc!Lv9qiSMpnk*`*Jo<w%4h_8z8-b@k!vN5o6wm;6_Mgy>o*EXI
z#hoo6z@gCzbqOpM1N<2ncj*gfZb|b1B;NLE&#^hZ4sWp0LdL)|Lwqn85VOD{Xl*j!
zORG{IA*_e$wF+#eF0I0`DVKK!^Q`qSlTd1M5kJYZQn)iE*MfyFe9-H&+zyYHanIaz
z=eCD(zln0ci*gU)Ww)k?>juwhL4NP7tk^n@{{{3ZMGs(=MQCUnl}i+CX>%4tHZAAG
zfDHtUNc9K7*ZEvd*#Nv{K_HKY4_nHXJW~^%;24CVjXn}6{Qj4SO?#Y7iz*~R%=UNX
z)(`uUs(>{%>*14^`!BZl_M`inmBc2fKZL{1L@@g3Gxy@5yZ{<Pl8mnC?L@z7#^-s{
zl+OZx@Qv+8?xcEFtr2};h}<<Wk%|Y$x(~kmp#0F3oof9BF3~GaZP5Dc&!2z!m(7jO
z?*949zqDp~6G?QM>n+y>aiT#M%T~;LiTVUu+xh&n&A+q<$r;ycu#!Q#g8@LT67O!;
z5HC;che7D2$e>6l(1|`=@2E<&)``$d`XSDeXyHsi=`Y;rW(6X&bGqyW48J3RYRo+h
zdx5cWit)jras_bXm_N4+nw+@&%!n3KkSX3NA>3bS7hZR#*v@XE$3!1wxA09LHm5!0
zRGR3p;{x&-Tu>x!bj%Pj#f|NK!y#EMIO(^9A_;uSWyb$ebRdP?HYh4lGk(d}xfL)~
zYT58V(&j?!h~K7RU-~(3*4O?oQ?%(^$YNg8e}0*Q>{{_s&60BB(pZ>+a^YHj(`5zI
zbv%O$-@LbQZ=-<oTbYF^ZOdi+i$tI*>XH+n`M8v8DEgbr<qvvJL=J=HZ(Ly(Pyqx9
z2(8w<R9cis*(@y0sVeFN2$|*nFBUUZmQ*{HNsaF&5e8n8FHXX^+668N+B>W8-B>2W
zRg!-lyw8L&N1La~DL|h|a%yHrO=`4xn7u9ls%Y}z%CqD(U1<W3>v4w+aLCZ?&F{Nt
z!E=_GXhCMKO225y6(kyGxE0-?hg5E8ULm;Txzuz4`Qbe_7U;47B&JbBUbyYy7Mkk;
zpvi3x3)M%8Q*!$>Z@P!xk?Xd3Ajylspmo~`Y4l2{UkTsQXBfNUzC(-@&1F|z>;f*X
zfD+47avDZ97lAPv4&>IMA?t3wUV<<$D@$|4K_14q-ZNQyfvg8)&FCVM<OTDn7+Wq4
zfgRXGIRGAdULfpLlgJz#@WqHqf4a_;YdyN>(tpI0V}7&2Z#F7B&-S<XUPL?3UObNg
z8xVcJ_2lLDepLH(z0-NI{hu!yRJPNh_w{IR`^C$>XFJaxM|T8JzRI;%8xjApLAx(8
zbG;LT*xSLzAbYMFbfzkhD&Czy-Y{E3v+<}5V`3Cl#p@9F?&Xf;qSQmKD(Wy#do1uL
zm*ArW)Pn8X0-9#0W6W5t$TOEHs9X>Q|2_-Vk!7k)iCom@SBqb7KzBN=FJCdKq@ktj
zt0j^px<yoqrrAFO=fni7>x%^>A`Dx7pEdp4uARQxSv&#c`+}AI+pZqOs}`4PYoPRM
zSub7I{L*FhUdQjXu)3<ki!NGJzoN-8Ob7OC(>^-*vAEPdto7iqg@1Z}&GkS_efsa_
zk{zIbY+h$8Tz4Bt42pEQ*U&%=7n@>3>4|Uyk?40qu><d&_t^-4z50Cr^?IlKuZ`%h
z?|!mxww&78Ui3#^(BIeU-3sgjg_H07a+aR{IW_2h3RT68)s~*E6GN^~uv<vm8B6Yr
zfPwa?%tc1J6+LyyM1ZCiu;fcLD}g3skH(5P>2n_}5_7PFe(1rHE_@aUnP!P0@}RQV
z9&jiMu$V$~ljtY{Ca?$i-f8^W#UvUU9;<NC986nIHukxgY*(5flyN2#$w>oU<VR#;
z<&ZroJ7OJhw-nM63TbEvN=76o4Mly(Y9~{wwFTd~JveUnyIv<d8hE5IKpdP*PlxqZ
zQT_Ek#K#?|qc(O*8^`IUtfc+kydi7(RpsUGBN%+S(Ej!dIyl1(YD{bU;oI%K?ZUH-
zuipRGx*-FzK#Y%XI^V%AynI?ey%w4ORHyONfJ6WIoSZ|DL`s2Jykm(D?r$<J@rmxZ
zCFl$DO^F&0QPlF;VLnZ#vuPq(L`q?XYxyP}6OxBpYXV0XPYr>#RiyBOGs&Ko+!K!~
zE+FKS0SDG~`#GR7V@{Gs-%RBPU^`u2s5~mH5LZ{T&etpZ+fTM1zKHHb-|Rhq8ijS$
zxUA9w&IHZwwxgJh)S%RZG#)avY^{Jmy}t;EI>6$sYnGfo)W%WIccvGv9}-0znuP{E
zQE&=LHi$K1H)dy0_Q<HLF%x}yJP2@hwYyXgzHAB(zDu7~>pkDyeug(-;xL7WNEM0X
zdXqt(Oz{+NyDzpLJlUpSw2XCuy*_y6=j6Zs&;Lc6W_hlkb;hQlit|mngsF$8#Y{*O
z@d$3_n=n5RS&Z|hH=5T4(HTlRv^c!**DR~0K$dy3oP)Z9NA^63Y$o1|ktHisbp7!p
z<&5b5D@~r`_RuB!MYlJ0c6*uuxh84pyEWZLXd|Z?#TLG}dEH;TZ@c>K{Y#tUlW9Yg
zUB@GnJ#jqD4si}Ko%sz0czVGz+`cp4TvD1=`hzvN;_~FeLl20o>`t=R4g$TnN#r=#
z5WDHf!BpO+Z864&^+GoJqQ;I!1Z6!DZaJ}YTqPY?e=Gyei-ECmZ0n44Zwgm~@|DO0
zm-<4l3xF|>Bn;YvZJuP=z|)<r7caIRejBZQN*(CT7<jV{9wDKrbu8Xmw6zc0U+u*|
zcDEyYPPb@rK}h}+Kb+RlBuz$xT<^^H=gA8x*gld}6-l~W-1<XNlKLt%u;JXuSeOoO
zl1yjBi}{$`3D?v0_4IT+phF!PxE{J!5!*qMW5kUVT|J-Arbvi(Lm;PX_;z0laA}Ba
zXKsGF@o?Ckz~i%~`?`)8)X9XnW4d#d4qpIZK%c+b!%~H;2}hMhkN187Bj+X+S`WK<
zKOV*tsnGRM9==--eT{G)w#u*3Lv+d2m-{&khwOS7Uon{rDqJ{+H(Hb>JzPA8@fDMK
zSr5ZGyxF28$8rAx+m22x<Nw#^oT48j0P=>_QL^!*K*_S?Sjv17bHk8++lnw;kVNJV
z?7b_-VRUcZQNRuN*XCEq)S|?s6CDt@ywQj@e-u)9S))sKbb%W`z32*WWE}Zgyw-@;
z4)H(zHKNFu7hXrX4gAmM+8p_|;$Ic|j~`L=CaO|T*Q=eV8iUn`XoMe!`ePG6`qk)d
zW3K#qSbifcPeRjM6#tR_#}fP^DitEijP5j-49pW^+<OQ81x1$U+xc@ha98vR#sa?1
z*VlBf>(1EiA}wAZAygoDoloNNSOl-$AO6rQJ0S%O%i16Q@Wa#Y56}0$+uz-Kxc!Ge
zthwRt#pl+7s`la|HAs)MA)8Sh<IV0Sk{yC2|D$2@Iz3E>xbca@);nnadLxeACozPE
zKv*8S$8-02hG485ZL5cZ?}DI)6efe4d&TC)16TwT_I_iRO3jpAv@za1k@#(`R#O}_
zeYJI!>SBpOP+;tt%XSv}v2r3MNvt3x&ozPWjN=%f^YQLG4Hr-=rzV4c?{IcH5;>L=
zy%0&26pHa#mJSq7@+Spkg5xUy&l~EmS#qdl*C?!~lPoRM5a(iMX5t7q1?dqRRE2bb
zvzf7zrRb<cWyij=P4y)(DT}lFjj~ZQIUNHbn-{XB#eB+MO@=zOAWhEfdzf&#gs8T)
z|8QrAF~sVPNb~(RI9_5TOk|G5B$2G!gWfNR*~N2|A?xHc5y1qK#Kq}hHjHeY;FqAN
zJ+i$9S)w{Oc9B%BP9PIebmz#Dk_UqWCerMblk70q&mlW^7>&1FxO|3Pu4XrX?9)t*
zldzwR7_wawLrz`jIwt)U#9F{6jgr@J`sVZflZ7fn@Es;21}^ZGh-VplHqb~XNR4Qz
z5Od3hY$2MQbBgbvqWyG03xCn&)Qq#!F0Dky=gg_O{_qFhlpI9zhd)q%XDOYev*b9L
z3OVa1Ko=q!p)>~t8<DGsDSW9C)pA*p`_bY~2(7XNU7;@3DPDTM-X2!UmLe7xCP^k2
zB#_jd*Q?4nsu19-elS&rlj>D<On7Z4g%t?Jq|A=TcU(GB>rBll&!rbp*9IAeb-iUf
zZ9&CT%ljo&#6ij+uD!9~>?#j(8ov@nb`X86enpQS*l1?C?LT%|%%*~jgtROW+gM(J
zc!Pjhkvp*c-TvksO(I`v=?WDsO<e4AAj7!3iW7p*z=G*&Fa`pkpQcWGq{n1D9$vi9
z-u!4g@Vg{o0LRl*lM%>Do)QVl!))C?-6`)3Q`YGs9>=gm2>pAVN_u;-8xY;J2eJ(v
zVX*)wxuIW<^5Pw>(H(KLx4r+uc}{J~B~43lrW8Y{N6t<-FqMeHlY_1@>I^+ZCM(Yn
z7*z}tbv+`ogTo;SyA*3Bh_K5%>LlOji!O6Z{yr@^25R=nfan@>vW%${^@<$hr*HU^
zx4l;Mtz3OF)t~^dl}xf3k`QycJx}`a*5vylqr>Y;uMzsAzz9gJ3?o$WruBx6WYjuO
zU!}x{rIH5;zuHu~>q^r#g;*z^%s$_Jw)de~Fn~(WBev!ejPPjy|J7~-teG<qg$acW
zCBo@5D*R;EDNv$&(VI%7?%y&E4f-v<+j8mQH#Twj-rTwUlRO_H{b->Q^(73SO|ncN
zJ{7U4J5EmRedR5W19ve)vN<iQcjvRc80(?o%^i%!qv%C^zA&~ZqDmhwjtu12@p+tD
zI^C9%#Tp4A_U*PdI<;I*`~sAWZGbd|g&Md>O`y|!B@c&&-r))FeCxzlhAr=j2FEq5
zvKhZt?G8O@K^Xgr9=@erG^HD+mP{tuq^_g4_yvAgTXQ-usS$Sr@oXe{$wyxWZJ$ik
z1k104q2Pq;)ZuJ4&DrO7BJrow5O`-OQzRAe$J{+yV5XPfBWt))!t3Y4wQQe3=C}5r
z*YAGb)=kljCx_{D5>GCg;syyrq0CZK<}GgqN#k1X>|A{$zA7DwuS!SatGOfb)%=n8
zYQd5Cs`B=$3h{Fsn8A5k-KNJ8s0|J~LC+epW}RrCds!_hIg``utE#LzG3vEjir)7o
zSc`4m169G_VNO*g4Q9++)w-;c?d~@b>xJIBEj~ULa4hOrT{il2Ry(`x?)N3{NjlLw
zIybJMiVhfC>EI9$n1>rW_Yv$QgTn^@iG|SMk;4`TvhZU&!u(h!UtUayc}Hu(e+pLG
zkq~t$^0uMF)Xu_X+VyIq{^9rO`o>>AbNlrAyK~HUX+?C<7h}GoPI)?U^9~-7$Uqk_
z|L@l5qN4A{`9(h)A8#NJZg43qh#6UMKlF#NW%{1fTub$iTMpj7{7X&+U6%aIoe5bX
ze<JvIcpl{A@H7ZfTXsEE5IH4hLeBs_Y)}(jaq;g2U9LyX`#dWLT!v=mN9p?Q@-+}l
zN#RBSiKeY+6X`Amx2Z4*_gv!#Rs630*l_PLE#Z6o4&P&<!uR-H_+DqGP=`JX%gGdn
zrQ}IiMyEY2q>oCaF!`AKu;iizvCrxin^kkaC+0Dy3qed#GLyuk-Q)Re$;+DiYRR=a
zo3!+xC{eNU-z2!(z#cPE@{#m0Q7Zi;&@JhHI>-HtN{{e4eeF9CT*=aJF;x|AXMEX5
zIr_|YhI`;Q)fwQxne$@wi7d!%IY_y-*hDsFaG@sv4-QKq1LI2F(CMJR2f%(ixceh>
znD`qEA-WP^!u_aR0Go#J3AI!ES30g~H4XHoUKc!FBK@h*<R2>~?g9M7hrgA-Sb8fL
ziQK}(pgc7iqF|Z#sH?(@(-a2B_6FHN|4IzXy}8zvrM7%)=5L0Oo_=%;UC@yw=xHtC
zw#8faDxO<P$^Ax$t-}!aBq285h5dGS-*RsIUAgJvXevt>Xvv2&M>I7e$>=4qe$l=A
z?lJ~fLXYaf?L0|-(t^r)`ps#--&XXGMXb2bEWsKbCm`x4L7xJ)yrCR&L-&7P4|}<k
zU028z-?q%3k&04#AuAsYJ}V4AoPaExg11ouK%HVqV&l(}n)Nv-Y%`_L<X`;nhhb#c
zr5~sI%cZAUk|{4gAy;r6zs?D{{D|mK^YZa1Z2XGsmN51%*f3+@pLjPcw^xhv;n;01
zeov#+cs6$FN$pL*ckw*C@HNj3%lM0L@vO`%7fU$cjS@RnEM?Cd0moM=LC+dSDJ)w;
zJorg87{GBU!sIK%(ZT-+KD~Sm8RMI5^3bP}=twq?5`lS=o~G1^^}F(dmS>jeGk)||
z4qib60F;4(*3&T%JngvqlS>5s1HL@HAVlAkB>nJOy;LBl&HxW`q+)f}2m8@b2`!zf
zVpK$J&O^dvh*%dTYf=zfO~kq0H!Q=4x;o{NKYhbZyzL1=!0pOfT-T4S;dy+KM}0@_
zWG)<?Q=}Zx1;T}!<g`#}!qcFXP6Yf9OK|>tErN3mG09{j%aF>u04!fFkGk$rNora^
zx>QEu@8-lKN4S;>OGm>jUMMbwBx`|u<Ru{OvCmkb=TY?oU!gb)LG<qu$)`xh7SX7n
z`qJs6Lr|KtB?8i1Kj#G{7K9d*TPhGOD7#QF(vdAHZ|~*=HWFiNi|S|LtzM9ox`Q-l
zy}~^xP!@bdWo{@Z;mN%M7j<2MiAr56Gr<&D&>X7Fpr5j2L}hL)8R6ryaAbWiib#PX
zb6$l>yHuGP5_#$$mVo@_Y67wa7lABNl<jhq^^zFtI#0>sAnUrutJCe5ou>avLQ4fT
zXSjW9h>p%iNr)+X@F*D%vx}t;3U|AM2~lVEOc-#{04k%}Pz$5DmB$j5Zh_a%JJ;J}
z)X!8*8!B&^KgGc}aAF8La)jUQ^)CL^m~0KjJ|Mv=EI1p2Gz=KWw*ciK^j4hFhZ*qh
zD&Hi@kZ$5cP)Zif*cuFJ(-?;~svW?Ea=H7)7XlV6jvGGJPT;(O@8Lec7QjH7rqgY%
z4>h>)(C&s`^aY9W#8%`>qtb(-T`p>KqN#WoMdw;E?YHHNCV$bK#>dp9gMQpUNtTXx
z<FhUbgzhP5ny5GHY6hAQXt@j0#^+sExT}SO1=CILvB6*NET0HlyY4LIk2$2wp8-Bo
zt)Q4DCymw$W!5;NEc!t*x{s3A)4xJ0&zuvD7?;@&3*10O)iEuBI6^QE5`&Z+CF+p`
zXoI|9>8Fhke+WRBbNVBI9<c|G_(!l83(zs51Lu0Bunt7$r<csB_vGSzsO5uc1!tN$
zunPE;1ef!{<h>ztP~*XiNqT&20S?lVRrqChDlZF%6ZUKPnSddbJ`u+hOgp{52~D6U
zO%MT?g$f`_pb2*w;#+r4kw6@Pd@THOIb8wrDM|j*v=2uDYTVhla!x@>#M$orX0Ayo
zk#8@Bw-q)X*7Z~%_zRFQJZiMYb82MsAU}yG1sau?LCx2@T&A0ix^zeR(;0^Mm`nWi
zueW-Op(7z4&kl*!n0v*A%WB9e1XGb3py6dGo7{Xq4ijpXeJsvMVo)~}stxw>3uY1+
zLP=fQtxt52_k*LCQoq$6FP<-xMEtu>;#{Eg74-+VlLbG;8vUhPJ_;)wv3WkD|A8w!
zaB&&Gj{#E@=H3Cj99~EaRGJqHh#nZhg4!@m0rw|XFc^HL;VRrcgCU9G*Pn8pyUf!$
zCmO;VP`n4zkpj55ciJT+*@%gcQS?fsE{@L82eXNIvxQe5wt8}Um@v{8<9SYSbHCil
z177?9p!JMk51?JyUVrA@-~H!|SO)e`D;#_{Ljln*bnAJ!(}>u#i0+Az@!&i;Jjt?G
zmpG?(tw?y#uw20`&9Aj^KBePV5p=pB;<rE@BB2A<r4cppye>n)Slr3{*)LZ68CP3S
zM|ABPc6eu9`BoZ)*h?!Wp|;nd89`uM)K*EWZJ9dT0p4ZXXB9KgM;GWT_va;p5pbTu
zn6#h7h#Z2^Z4VA@Ah>9&rOK*x(RY^~2jeX`vUZ39K1%cPFfL-#^66%R02+yOE=yi>
z@R7OKU|nsS_mkm}W{n+RIM&)8;$Wg6zGeyx>^D)eO@J0m9ZH~(zzvSyl`Tel6~G}5
z>V?~~#mf<am>d@!DcB&hzsYF<Eq~@w!l#)gXCIN%#1RTIuS5qfh_9JuS#%2jTxL;)
z15aM}k->&XvVJ$Zd-twbhNN+36z9lnWR8q|hQf6a%ONH!)16HT8kn*Z6^+e1K-;*4
zW^!;FeEyp}5#CuV^3(&P1SipnLI}WuOoa&T_OTq1E`O8^OwbDH5VIjF<ScE?#>mgq
z#g@V27!Os(%K=dslA=;M!Nk|u@_yqSD0lE+7620;&PJ{L1fYcn&xpwU1XzF(|DhZ$
zeAR*wbo$jA(u;PTeXOCobQfeW4iyl@eHXrQbZ1Nu;?~FIm0QXY4@Q=<KWg<`+R9n<
z1K7*z!qKos4=%fIP{7UId9>XK(!p5>FRpc*D%KCO!!pAglLV3qzY^42dy@5Eaq#Xq
znfRu|n@sd#xdx?*x3Y;3fI|~kdQH{rm_bh9JPhU3cyI>Sz5x*<e%TGOI~T4HxVZ6s
zsEK<qmV;{yW>H(~pLN3z5cKGGVew)NIS!1HC|=r^%N6Y&Qm0=PutznlLhthf;M2t#
zOfZ-YlfmWObm6jZz{j24j=^N`;Qc<iHd8I(hfIJClrP4*<_Jw^P6N1roGDl{1mw&?
z<kw^!Y=+oHS8UfC%vR?t3mrVnki6$MuI+k<FaKbtIfUUfOm_<;HXz1QM+*iPmQeQf
z)`jXs|D<{y9^4<j*e^g59&*oxLy%<7oL$2s?*%eF9e<AYmc$zG74%WZY@{p&jb~H#
zFfJUTY3}(z%q8cSMJTRB;lS=Nfa;4Rs#G#C3*@a%u!aC|@f<-i>_ZoEh8m3TeruX5
zG?4yQM*1Q?9U`Li00ik8da-;M_g}TwH@^I=og;>Ys98>j90|JtA~H&bO)gRwmR>2C
zdDin?Zk#xsoH7|J0K0UG{&oAPmW_L#aO%c_2VCWoz-~kxnYLi3e=40*Lg5*2sp^O1
zP!lyWunTzGNQYDTM644;MO)?CYSe*GbgZ37|7g%N1X^``4T1Ia(mM-a+6&<)i2+Qe
zd0<6>ABN(Nr(l#9Ku@YBu&0=ly$~j13XV}@io~VfAR8rQu>k1Ui4LCX>A9Zr$<CVU
zF70fB2Yu!=u|ZX+4bkfTc6y3i!s<47%UoDa|1G%9t(>>Jd38JN$LnD}a^l8DD850&
z3#dd1u{51(o^zRTHLJM*5YcEW-aj@n-6Sj{Hj%qh$jO~M#Fi@fhaHI%*gB(=8S(y2
zbKf!Y<FNRZN!gh?$=p+Jc2t<AQ%KPLNtWj!3wRV|fnX2ev;bq;;}G&f7=M#dT&E}0
zS4)y&dehk`C9bfLDd$8Ic!R*_ejV(C?0l3=-b1}w_u(+EPDYAl8#~ut3bYY;S_$J4
zWocA9ILbnacdj2_cDbPRL&}CKUVT!p%iIL;%rZsi1(b9FZw=9<j2YvpfnK1wL;+gt
z)fZiq?YgqvSz6!-goB^tmWKi&|4fzb!G2Kz5V=bxuaJIGM)5??6%C;f3M6lp{vt#S
zK)zcFPU5!-SYg!&&T|@fh1F0t#uRv4aOXaYhx6r?HHo!=eZa<OHCxZO@@M5|P^hbg
zSR=+jUUV}~vOdw?Z27W(w%HvA<q8^44ZQ3d%F9&bBVv6S2R29vYaFb*O%Bknk`Cev
z?(A|_>4k*%jAo*H02wl^3yA}cg@I;oPlSf+QDK!ZFq@AHd+xT|R?S(eLX58G^{D4<
zV^Yz5;O`eej+r}=uj~=$CxVB+8ndVbu{9>2sFj!_A4zV9v0Oi&3R;TGwWD06Pykfg
z<gkG>uW(?2d_??HGCYzptb>$72ejU2X`=bO-skLr?0Mme{-@%S`*^m(D3;^oqNZH@
zPP>}ssmAVEV4e}tiXCAG2_;>ZrlEq<DH9G-lM4vBJYc<LpiZXsmQbl_Q>$q<QHC)w
zS>r0oApl^#*oRpKzW?2+T)J!ed`<K_P%J^_InOk#OFSA)m@Tq!%;}RX9o1C6m=~Z~
z{&b+;b#U?`PTz(cEw?<0^5c|4ihH3nN)^|8nzF$MYz8sl&iR02R)bFuGZJDaW2ks7
zZguK2j4G??^$)~NPTj~)0rn2|6+O=_-AbHu9#uGCwA-WXaHaw%{SaIx`eS^`?=Wsu
z`2jT~x4AFueWs2nZ>VEGFfPVh*^*UpZUbu$=Z5@m>(xrYk@^%FM$rraKqRlI2Z^h<
z$nEnmDcsN%;tnPk0+Jp14I{=g=^bmJPMD@mIWuY!$Yjz`%c8zn(DQI`sLJJr)I$f~
zyC_<3MM8k(M8FyF{be+Nkg0_YYk?*d+Q`BC5fDasOcK#i8Y>@2r5aQ0RQyQ1he=^?
z$C05s1yfSWn+9$V@OVNMPLkmmRKx%VVD=H|vlabt0-X+fo}e|8C=<~mpAZEdUNFwe
z=_!;W15cKmU7`|MleAm{mo7Ha8Z4-&IzW|_6~gwtC17I6$5PDj%f)0XI~RP$LQ<<M
z;|y?raHrAUX<-+K0i*|^D(8K)J;sBk6WGIYH|LtN+9MLG6d|*%v7lnj8f9{vI0x3~
zqHw!omRhVipVtlITcUF2h(W*B@812x9QY}SYU?Knqs1{o6MP2~S&%>rbh=dl7XdX=
zWnCDhTGUrbFodoHU(5DM2qjjLXv2nP!^xGFi$NzyfCsR>Jg*#Fjb(DR(VO_Z%7?IR
z17qx*Q)nD#6-|UkgV0OyfhGaKU0Tq)@^^dykSRJMF=IC3Gg#iUc_Y~P6((j=-R!z+
zW|AL8<Qln)m<ybEAEzGU4Kx7K3OJU;7O}$jo}4ziLeG;q_Zu||#KM+dQ!99F2OJJ3
z*K2|?E1|ejlL5o|6|d3CCpxA#5{>=VsYDPlAvYMuBNLT!7pR1++s}Y!1UDzeu>NhC
z<zaT*_RsN8Q}45S$Pt0U1QumJYGNma=0B3JCvz46zL@o;2??~|#AQIM#F<8BtYTu#
z?l|G}w-WJcuKm(hG2EQxbPw7h@H$zfE`f@`nW$0NSt&Kgo4}-?>q-tw`Ch}Yc2l8+
z9EvT#?MMJ57jor}9@z<JCzv5v>+^(-{Gjqq*5ufK?Xh^d2$+w`sDTSeJYUl(RA`!Q
zMhFu_a2mI8_GJrMMI{XLgH4AFT>uor?C%Y}p^<k=v{he#o=m&PlX(2klYb5uOLSg)
z?XId4Dj_zRr}hs2pl3blDKn`+4507-vA=j_IGK_ZaQA{h9f2p*O)Ah4j_Y8kPE!^z
z76c~DRWe8lH%aLd5g1lM)X=0yK9N_ZAP<U+y?|X;i&zK@q>n@ciCd-tI#$@N%ro=y
z+)@#O9g5swA+$)TZebEcf?4#1h%-DltPWP#oxC59;Vch7SKMEU(>*fe5cTPkxvGnQ
zSjtBt2l~%M@TnNQ0z<<>3ob+|0N)ca661MsPna4&j}6<ZUnBh>ga_En9uBkFAR?J%
zBu8qWMBL`L8HYp!_U1%53!;ehyAKi1HqrPLK<c!A;z@|viYueX+yG?6;jqVlAnO_(
zm);@gQPLOG4gI@dSTjnPn-g5TcrF<ysE9uf)gv_#t~GVj<EEy18GhKQ!17!sSmOOJ
zCRsk5PKND=PaplM#a29cXco<uh?Y>U>jakJmWD%(GBH+HY05fP&Iy&i<~0%?gvCBA
z>;lU)5!qQh{M*@jYx9fNCLbNleAhy#CV4#&ChuTH&w1b~OHzv_vNnbL``dc!^Nr72
zcdOhxO~WVw4y=wfmGhtW3SnDQ$+i^puO{Qoco1QBJ8)r5kizGn71ZZ_CCRQN*_9;w
zn~`KWwsdBJUWiHnp<m=D!}%FhO}!FOR|4v9S3unn6}r>J|1nY>dZqFtIO;?<tc03A
z*aFevWDG<IXXAn44xBP)<j6?H846m_9^8YtfvDC4htP}u6!n<5>4~#BJhLyv)mr#)
z4#;VRP~N<%CyKd5{W=7GFp(W3EyYWt(!A(F<KKkGLeq@0j@u=yur$fC?(S0aMrPiy
z2F_<WB!Jl$=RPAc(GSR2bIZU%i6QzCz=^06RSo8Xy-5;v`Xr`I2S9;3l4discU7GU
zO^i?ByTEV4oD|eCU_mw0_z(??3#*SVD%hvp1+S8l_=7L-1$XwLVyt-J|Bd@5ly3uC
z%R$5w`fw@<a7v4Y6Q}^NYUuY-F=I_S-0SF~PLku~HE#;o@G#xfjoz;0B<MMe5l(s}
zHY(g1!U1cpcN`X$VOcI@oK;0s4d7TiQSW~qY&HM4xcRTU&A<Hkr%!uEPUskMT5jkF
z#7x1;fxac}Wp^ep+S7y%49Rap%tFdRIj_=zWM|jQ(3?w(E@j1Np=n;sIR&cuib)Q3
zXrHZ<&*?Tfj~Oypd`JgK=9?ZeE({I-coLuHh1h;BLDJq7Sedzs!i?m6bX})B@u)b7
zQ?Dj5CqIrY6giYF(6MNQUH4+^lvE;~DY-#+=E3D3G7HYdVid%yBf>%J3a{RR&dTJo
zSEKBF#Lj`|<vCn_>#cWP;clEW@h)C^lXxu6WfS6TIe9=DB$Sce*0V}#b#Z4?W)cXG
z`KuuNjFiShD%py*IW+}}5bL2Pe)E%4m{WH6VGkByx9H>%lOnch$OWvFSA1CO2OW|e
zQ;QIp>3IU*b83ZH$4LUmMe!WUHI5D%gQ@uC!)MbbZO%=#E$$IAOU^30{1a$47J07I
zopP&E`601D(OZ!xq{ggr;)l=>UGPvJWG&#Dc|-qu#g}RZ<O*%zVHSsOKFpQF6E0UD
zVo7+-yf)+j&^L3uBJPHmy9v7?*xn7Da}Si$O_s|zo1b;HP!XA1I@9#;>LLHh2d5Ic
zk7+?xgs`g=PK`NBv8qF&n&7O5=~Vto$A#;$AqVk<c!er0S5?FlO$CR^U`=cU?xMjm
zIieckyuv31`?M8d<#T65G7M~FWN|*|mMfWBSk9P!-aVx;6I~*CGM5!Rn&DpRqS|m7
z*>MHys2&--qrt$OFh44BkaL@wYAI3SLjD+qIOYh(SwSdq7wE$$JBx&&%`V+zVgH=Z
zJ7mVwn2yUs61RYtCjx_WaE1@Mx~E7OY^Ab&#+b^i^2er!-i|{m;I@qiMDbsR{&Uec
z5}qXq8iaT9u|&ZIB8nbOuQM0#w~5qDT%_O)mwH7-7;`6Vp!&fJacRhP3W{?itWi9f
zk`%xq50{p5t%dQi9$A>36qkg@uA*aq6Vb6O5nbOge-(IodEn`26?wXfJe`JtZhC&-
zHMVW)z7OkiC&l3q(4d5S)|uDuL@Ng}2as_g7$loC2gxaKT&+=pYPQP$#WFFAh|uk#
zFLHC1=Inj<O(|ghwu_)|a_Bn8?)XiCg?7YXK^(3Nutlto`wXo$@mZ5TYuaaMpedg<
z^{bG&@`hDO${bLec-Z8JT=s`~8RWJTHIT=U<Bg)4%{u4*;P4?0#6tLx{wYIU%q!H0
z``{rB(`G*?(sV`UyS}x%Q|@>?PUp)#dGb^Nyme}yKHM#TI2@j;;YH{1v=1K2_Lo$I
zw0IM!3y3g{Ebi(DcVcea$pB|D>JMiu&hwWC92652X<F+#ancJ3?m?~Fr;s)1gM|MG
zc1iT@ix<1mBm?%H+XGD;p{6{nYp?dR{;Oo_HncRJ^TVcdH%3`A0EI<e2H!%-@8Y9Z
zaaimX9u&(w+j_Ad79ko~s%8K0g#!6MOYfil{l$y0!0A7yr5-<ixEmHY?vIP_xBdm?
z$~IOhdOS%7Vc{6>n!JL|V|rKWy?B=v`%h1Nsi^jh_CX&e(?;|-%Z};Bdo-aU?$^V3
zm>?Lma1I91I2-bcx)8-CKWXZ3BnU0<iaKMU(hZaOi;-v)b26dqR5{oW_>H^W1<tMO
zfeB-Yn+2<d5|Xnx4>Tg`ig6b(t`LnoHHAQqyK2n5`Kf_L_B|#Y2~S0yYbnDu*RWI7
zgvubcbTK-Uxesv83I-J&4wGRkdXT~G1BNNFUDHbkt3*^@;bfzEVy|h^=ZJl9t?0;8
z4y<)|U2dYZ5~)0@(Px6{JAV-&jDMiAemV)#Ji+on(kzjdi+>fg$R3v6m1U_#LfV+S
z@<vVPRbmop5MHT?odeIusiaL8)%hfG&J!<pIPJv*b|yB@nZln38TW%6$YK4a*J3%^
zU&e?~1m~F>dL1l6-i1lDiY|dOv0QeiSq9s(6NjQnFryjj(gMcIhdMCd7Y9MzGO-Z4
z1X(zGmzy`-73fXiJ)~&|fB47#&JX{1yr>qAA}XdJV@6K3bLS%oDuc5YNwN$>KbT}=
z5Bs3Hv&`V!JiG-v3e9agNqmEgL6q8nX8_~DT5V^#od@<Q^C{-WQqD|!u=r#w&VqZD
z`8y86+c9SWW@e}?m9;B!R>H%h(`<j8WJ4Am<U6psGR;c>jF#KHcrEr4Y<#MJ|123!
z1*46*3%2&NrUS=Y657FHFCsV7FX&scQ4rrEKwb?<KIZUsgwu@|#HXDBaxKWvCu-4G
zNy5mP0ZfZ?f^0-VxF0Y5Fgrfx9BxpCh6Cm_6g=p^bc<sSFNMOJE<RBu>0DI;2<8~^
zfTyJO5WaDu(fpdA>Yd2^K|tqA*U6^bCx??50vV#IZp+_IDh<g;x<NIa=E)HDx;c4(
zJ1uQ-rCu4&u&%gBM(!P^bjSaO?u}n_Hzce!cwN=`Szr(G(*r6yH7~&TF_E;QU%{f`
zP0o^AYB>+G(G@7zCHx20xdbTjuB^;bqsp93WzJr(m~bt$u$;$z6R*~>^19Z>@)hoh
zkl-5!=njB-MKUwdlpNTW<4T|+BpRBD+Bil;e01kdF20AXck55G0AK~brtx9xcs7}}
z>v!(3UXkgTr2kY;;?TG)A@bHSwrLAXaUnf3tWVk24K}+t)2!@}IC{88{6O-0Om*j~
zXRuxuowkoALIy4n0-n!&nm;Di!do(;N8xHwj{v%9Q<36ndd}z$((8aEND?C#ikAwd
z)MKB!9+xbxNRhX3%VrtTa@Bw_p^!d;;1bKyT0s6tE?w+fj5Kdh+fo5#r!VOQH#650
zJ9TbWM70yb>lJ~a54?xCDargsf#X;~;erHeBty4Orl-T(ZO_WXydcN&!3Cn(>yoSy
zDlTCTm6#S3avuHzz9PogdUu7uvcJQoej+fOmL6i8l0n`D1yhCH3I$f+N_jt25Sd#&
zYtj%WF|_2t(e5OhW_{YPHTtIRCki^#p{DyCYnfJ>wZoLr^>7~M`LJ@=#I)qRy+u_@
ztwt~Rp3Jd#{yV%1G_Zj_ZJ~}rZy(h<lpH!u86ifkqN3AOc>CUU?HfM%-ci9Y0-!lO
zA(8`q8fS3zKmC#Ch)VAs2unpFTwEqE9_1`eiXBh2(%MbhMHg(?v~=C@0EbB@FNC5f
ziE>F?{UG}w<-S_cqks_QOv22*Bj#Fgp2W4lE#Da<a5G+_XDrS?)pC~hm6SpZ;_RI2
z;j#OC|An<}>ew(0o)+W889HtJ*cdfEKDj$nbnh}^%i?=$k-FBDP)!pWn_NN8ut*OQ
z+6>HdY2M4pF^A@`z&e|-RYiCTcK;2;E*w?%SmlN3C+S%zpgJI)5C=s1K}+>A4;DIC
zXL`2MvWziDT>_3x*TIr6+E(w(9Yy|z^>E^gV#YFXqHdGW&<-5xR4m00v(mlrW37FN
z$SB205Vf7DEjfh02!AGsIG0if+9b3UfQFK@_n9>;Wdt{d9y=|IHP(tATsUBF`>xnq
zkl%^;O4!zyQdWmt-w-@V;tXXB&n-3ljY3<S#K6;BlcdUkB=^8;cVR;ganiY;c%{~&
z+ziY|%T@K57nC;SALKwCDS)1v3@H&024FlI;YbelpT5}jWE=(t*4!P@O_{K>EXO9n
zPk}3Ga)wosy4vvEXr_5HKb?--bOLq@#LAmt)faM-tKF+W!lYw{wdm;9T5g&U8R25`
z<<%3R%6BPKDcrp3Pr@&lmWM`3Ki}7;$IFPO1BR3Ms=Q%oe*$$CT4UQ>kk(wMf^C#c
z#4nkHc~y2W2h6;B1GFy-^2@$;Ud<N><~0{mCZ-M{Tn?d1%!o|F28))yxXMng?mlO2
zOkug>T(`>dan7mXmk%@cO8esG_W83or)}M*khtbNq?~kYOy^f(Chc<`ajdG~+Rn56
z?Y$R`=;iLCtry#k=+X9*?HAj1s5xBHAkBr`h$NIE=cpCQMLkU?bIFm5riJB0mvV=b
z>{WSnoe4@sZ&_1EH)77`CTkjWw2w%}v~Mzhq7%bT6&#zUOV56sN6J+Nf`IfV>1X*x
zK21)q-YxRM;+=8@L&ITbp?PKbG;y&-XW(6DDW7p<&^yl)cjyMw#O2?4mO>NLCC6wK
zZJoydqG6&urzv{p$tul@*p~(qc5Vo!#!txB4>y_*^zfahqhL|HbUwJGoGzd?9-_KK
zCIzMQ(s<X23Q*scOw!ep!M%Lv*$AzN%O}H(c^n(LJ3DOe&kjHEl#FN0?|qm#(JsFG
zv@A86mgcB11@j;2RLH(|KL;7?S#r99($9z?VDp?7yv7VFWx@QBOit4@!QtCCp`MdJ
z(UOd3`AI`oZ(F`tZ{5|WXe4|yo-yncu_%C<6=^5}yL#oMb7$Uxh!?HQl}hP>`tHxm
zl8j}r)c%Zdm2A+=ozkFf+8k3Js1X|0E=w5YNoS70i2PX^ds&H!oO8&H!gQJ<u4M9#
zYWvQ@9sS9vYP^YiD^Oo~sZ30$rjKOT<I<-kL%;%@yq5FeD5NKmz^&1>&C^hBPLhJY
zi?<A~yDFuE#gcGb@m1sSCj@w_`!}p_DIJVl!`NM{&4giT6ed6-+tr25RcsUAindB;
z1pI2srYPy1i6-zYD=dcW@&h-oi<JiJUGI}n4*xpfNVg>)Ug6w%TfVJFHTG$fSYzH{
zuq3k;3&@u^QX=4w7}!9rCYJV@LCq!ug=hu<fdWPch#;AHC!ev47aNpD1800@al_Uj
z(qOp^{@&TRv==sHGvEyjOLayT@z7-)ys7IcdRGowFsIA>RXQFg1NAOs)w{{bHgp^z
z5H+U;6o(7OJmrkKB5?CY3t$8k_&1l>j7iL4Mhzbzrr0Zw*eG0xyeuvBde_f+SDmLh
z%|cf`Qxhor3>ZRQ?42r_c|RK?g=Cnljt?%N*A;DsB|-)drxIp!P!Ie9uAZy~PoWwB
zOT@xyol>)^T1o;egG^HHomf>p$|^QTX-(kupni_%ruvk#pbO5fgr6h=>#n%bPD+te
zXE7>TNZd0>;!j62g|idAqiQd6o0FLs-OTA5dNnq}Nvz+T^<xecLUK<Z&e+f^BQd#-
zB`xivWJ)%|A{aQPinlT%k+ChoLBY%oYnmM&Yj{po=Y?Z?+`+4=ABXu_I1;4+WF1)A
zwii_n8>+P0buYRMx8jXzPm#-mFDUmZrpqs=28l|Rj<84}6i>RJB&9M{4W8jXJ|8Ee
z(tGp}wvnKJc-)n*w41y@D3!aM8u^Lnl+i0*bM2A^eCix=v-`zfa|LL()THF{kQO!8
zGS$)!gapYz_L6)C#Iw;LrDHoIDk9ZpVII{}$r{o}<^p+bA@n0e5sk2Z65Q=;#8|{!
zjG*6s5>zqwikI#sLUeiZowhK{Hd|4&CdS3N2&ZK&FBXkzhAdx*x3z7Le9_1$Ya5O=
z4oL`mD_0m&?@4ayQ=4o_7y=L(XQ#5j;zAF2q4pB6n9K>x?~;joS=uYQWSvguTr`e4
z?n#slz0U~sbij6c&v!N)<A9q?gO`{L;y2Qp)G#VAh#WE%*BdTRhC{~?_b)pCM@OuG
zGfy<4o(l9FHVHBVD=s^3v)i0GZ*Qd&-fGu%-Ue54Y(~V`ee5fWf)bU=fjus&wd_OI
z*ecRDbHKDZL!$MW?hoL^FmKLYWs~E0l>W=Ep;IFudJPq^R~_Fnhf{7n3fv2w2~)#S
ztqAQ`n0AlCbV{wlwBa(yW}_*SEkxv*bKQ^=Z;ZmKzK)}lNpf_r>a4ZlEQrOvEtZ=q
zn1y@QQ6_L*)%%Ymy9X`o$?Wj!c6?ttCD__NpCx+xD!Hhtj+WQ}++JBB#^YxgMLEJb
z`dJ`GBKjkM?UtmgcqGB>{=c7zWav!&9R0v;GwL%ncG-VFQ=3iwFS0))|7`Bv;%AFq
zFZ++%jK}GB$p!aY<K%z#3#U^>kLZ8@v+y51W7IGivj0MsI=au_-gja0{1XlRT-+LZ
zG!R6pt{48DaA3@0nJ$-~Gs>MNAS$>IbOb2hC6C&9bmxv)Esm&L=7!2fMU_pE<3K>p
zr=0bIw|_Mrk7a*o9Ih$uIl3*XwyUiuX&tv<zU*K8d3-eZ*YSVsoJ=!;K7Ya8L_oU-
zz~}IGZ4+)PFku-If?$8C+f`M*UauCn;idcV^8em(M;5l^rF-(KZT3#PQ?@78ac2+}
z_vg#G90H6a<5g2`3-LCfne#h!7iuD`|25`~+UIJZunF6LrfbP|UdL(ZrWMC9W+}M!
zsM!9_C?KxSikm`W!<<a<GZV~-PxKuc;11Nf66b-5i3OgUNvCR2Z@N;5Z}Bw(>e-?-
z#u8+fC_uh9bs|@@hDP74asCpmgDaD05ShPbtgSW=FPhAraE#A+fECuHQg{Z-4eY>Y
zNz)R2)NK_GLZwL&h(3&n4UiRXls)v)oPhCYvES`dr&~Jj_oMAFt<C;yEIYyNfWt(c
zH3VhpJX7Wd+5^G7RP#gV{~g?G#MVsHF+#^j3Ok2*W{9LlNIlenJ46<ze|ehgztV8-
z*==2)OQS5lcFy11RqkV`eBdX~Q#k_e?%nPQG+kMjhTpZOi}P3H+Qwt{0DU*E&3)`E
zDsyf6xZqjFPv9g~H!#T20A~n-qq$0pg^Fnwa;h<(mL0<189PGcQEMvktrwJ+Az)^1
zJ}DlzG#Mre5C^W&MJV6=h}IPsW#Id<7gnYzAB%H07{Gg;XCesA4==OeI=lIOHg~-_
zChT2ry5-kicxT=C=DXHK`0llGPiaFjxM1Omq`zj9p@XWmeQ7)II&*4!y2$78eY91q
zj=1(K?^E=Y1TE<QqH<4n9?f?&EPGW?gFi!#)T(+E=O>351oivU{avm5z6Wc%k52fW
zzG8+rn(L{t!|&GJ_vxu}&v|)Hk)oulVmUEOSvE|F=KRb88s0_vu208KBBcZiR5ya;
zHx;Ft%Zykr_Vg$o=6X(R4o<bCqR2G29eny7qiy4=uNavXBlFQ1nM;`rN2op?lX0HE
z8-H=mq5SZNC~*}(><0|RdEScIS!0nB=yW_|4Wm;4Wtc%cu|WT#3DtekFvu8QTbCqy
zj`N_-m7FRKNzP@d^EuPZ27TuazO#iU0a)Wa7#0)cGuO;&g7N~_!$d!NzVql|@TJ9V
zQoS=|1=`tq8ga5Ww#Y(ZO;lTfSe)mxstRF=iq9;w-Fq@XE*u#U(Fn6O^(|1afO^GF
zE<7mp;LojOm=hSKXqXBI@9?Ih!jANKtX(GVsN}N!N7H5uS((LhB>X0d1J6w@W~RQm
z88dYyd-YE0g@ruX`?6>As<HEYi+3&EyrP3BD9LE%<u&WIXe&CGQ`L6{_h|9Lr!U#E
zBQU<SgLB%|U_xkv-`6<g`_Td4nfUc1^D5$_8$F~2f!>3zW$WcW0~WcymU}6$!_M+v
z)lU90y__V+<xN-W<(`yqljxPxCGM%fk}U1zi)<Y2as1N5Y=X$d8WeVosQRoGeV<N_
z(@`2%>xF$;I8;oF7M`qkSHxZafB~AFJ)7V6Kbm{LtAC#R<3|7eyx^~Qtm<0LVcXDR
zZcRqT&9e8*bY^xVu*I2g2_>_<dJB2)o9yvDzHDrd;}`Zg+P|8_xeb4_ZGMT=@SgjA
zmN(CneA?V7?E1N$6YKV0|Cj&I|L_0(e~Y$9jMiG5=gAC7T7!6Oo@w=xm<ZT69B^hX
zrY(%pHVd%hOTbTv509Fa0?4G7ob*^E2MjlxL~~4nN)iG}v-@ib5*~(t@sC83m<wF|
zZ!TIWto9Z1!7m^l@E*F6vJ)HZ271o(yi2$0)oM<v_M-|PQNH=E@<$V&-geI5n`J@7
zo-Y+g^39?|VnT(UZVuAb0AA1q=Rl>7U|tA;o1t4?URI&v)F)3Kb-Na0H#7)akUb3K
zg%<<QXQN?yO7h>p`w^Whc>lp55r1AyR{+~TV`$!H?Iq2PJO7-ML87n^{1_OrV$pH_
zvMa+g&oU%Zm|x4=-knT}H??@Z;rdv}SHsQwyfi^RngV33^W+E?6NfBFG)udkCf2eT
zkQ^5Ol(BotSu#pFQ3G;<v#+6gMY-Tm<QA8;WU*Re+%}z~)k%D&?wgV&MHo))eBX0~
zm{12p4)mNOLA%h+5_J7NCfKT*pI`JQ$nay+mx-5%31B|=nEBrf<H<3+|KcH}zGHE&
zko%YA=m56DK}lRNMysHbEQ*fTbm&e%<uo9dP#-I&*TiQV?Yc{&!EPAN1fYp?aPMG^
zBp~UxDa?YDF^YU};Ax8(0WuGhY-pe+B-@`RIwVOHb%Ae#l$P|toI1l1x?jzbve2G?
zl^n59U~uo=K`{S0@~4mL7J%>H*?)_D6Ry$$TvqU%)CV6@=kRO&Cw>+)j^!*FJm{?G
z3wB>wE}1x)%5Sm70?Ot4GW3V=ZM&p8zmt9GbsYuc5o<-A@K+q-N0>_$G{yU^*c#I5
zWQ;e~iXIxIne&n2%r1%d9Cj8)Soy5$Qd0}=EJ80Qr%^ANiHNz``(SfPtjGTT6B&^=
zZ@r{z8;_5KabX+)u=1rD3?$~O=8`JXu=D-RX7L`uIoN;Fe(_{qBBYf9qiuhs{2ult
zE#$74ic4oav>|_hGk*D8Zim~6U69XWz~f)o>A;%G=lH->3$jz)Cbjef=mJSM?C`4`
zqe~4&LQktCvIy48ur27=?c)gvF^v0Dw;E+9(^I#Z^?TGrRrFe-b)8qX>V$Yh$5nF~
z?4YG{S=-rqT3>#T`?gg7tUX}OE(xH^<_!v+TuzPA+a(>41f$ib7YlW})fRnYd3{`x
zjT6hy%6h1AHcUAOCF1*(>J%LV;_1o$^kSIIopHP&#vQK|=z=FYJlP*?UmBB@!n`z@
z&f;NH5LLAUv|aPx{u!6t1&j8jy!mDJrCJ<<qwss%n=6-vmCM4f=zB?*@(r|+`R0|1
zNY(&+Xg#Dtd@fSz0d1<!?XR6B+8d~js3Q%HpMNmS4q0Vf03Fy@rJ$SkLbjwZ-*jMv
z5V-P!&P%6pzOje<4MjtS-@SnIxm2!BC&{s~(D%5gRd%5`N-e3(VLAfaqH#614wg*>
zamYuo0gO-5{(@7wI2bkG?56%RN!C?e)<RW*9+&D@Z=g!lY}XtRp()>|8e9D<DGFWE
z%mrKQCDZ?4DAD#@w(f>Ukt|KiQhgtf=R|-f1?b)Bu%Y~m6{1*?Ii23Jr1AQ)YcIMM
zn-`KO)*qW*I@q_!nq*nzTymAAyGs*OEL0?0{I{qYEthWYxAuFeGH)I1Z?@%Rp*q39
zZ9lfu<A2n%gKT08HvPt34i3aN=fnh(q)K-Awd=*UH$%vS^q2##-^mnm=sxC({?1rl
zMO%nH4$x*ntXjuRxmdEWT0)CRQz8yIM*BRTB((SQ&|zzdPT1jMvr1AhK77wYcP)T2
z`>kW?0$ouoWl<lyz+2lo-W4=6!MwKgR&h8ZdW;G#VSvKkMOs2lx$fu-qT?USzK`@`
zF|Ka$rLze1`15Z5&*9SSKDPRtO%QYYZm$0Q;B&3)Tl^~R0skW01@>v+pEu%g=%(?F
zbnZ?^%?$X))5Lq*g-1@|kV^XMpeMhw>wnObYdQZ1)3VtA|AsC!AKfSIJ>oHc4ezvN
zN?f+llw7M|l#$rONwl*I-ZofGbpv1G9kVMW$)h!*ex_gM?g6}<P;?8b77tNon4(%w
zezjho4tw>2a&Iy!#n!#FXQ2PZ`c%!g)F<YfC0!A&q}U;Tru{)emn(-Vii$iZx;zN`
zyKB#WbNyWjuqy%fR})}^?R*14)?XY~3bY{=`)Cd}4;^f7G}(AZ=E7=dqJ~11W&Xmw
z*xR@iy>~3=>v?;!QFOp52{`J9Bk?`Nc5qs`5lewI*+b2nl&}1BR(?7wKb=6h^(XP&
zJx><9w3PUJci?|T{yylR`W{`v*yo!eL;tO2yFHM7ENDAL6PzKk<YgL0q$?h$a3RD$
z^~hVQHD0%nHAAz|cRr*C%?FYnKB6<t2lR3IK+?xY6k<N87YZ%&Mi5T>?rZze98x}{
zpUBVA0S$MV75v&q@Mk2vu%@Ag^gzFuPLNJkPEG}V(4}Ya?jXO2C&vdH?J}p10weZo
z`&xXk(ayVF944X9192HWtM@>bvzZQlY)v*=dLv64rIvah!W$x3+h^I-m{VM)@3tOg
z#|T<sM5Y&3`Q4WGL-;Fv_|bm9)L(&f91W50+sS=58TbeADERQBop&zyK<m3wnXFVM
zE1Uny=D)J}uWbG+oBwa!<`0z5L3aF3TG@ep>#8X!WA$lK4Xa<B{4)e&In73Cfcwtr
z?59ZTQGn$YcL14tI^~ntLEf8UG*rhH)I`?7U)ct1-ME$kSZC_@YyJHlT7WM_^tIJ9
z1T&8B({!7%@0QA+_GySt7I>ZHf=-q%0V%uYJktUA|Fie6>un=f+A#b(JPJge#FB=j
zcHSznC-SD<O1z6@rzfwbFA^jn32l;K08+Bj>Gzt0c>cU6@EzD3$+zycsVab=M9FeH
z&y4fTlgI>6C{(Rl`*p7i=KRLZ+4&??d@Qgut}thR@~$#>UFXLP@EXjSe+cVj!iB%s
zItuSB+56F|;soz{3mxr>OYEo%Jx6>uEf0fBL-lk<Us2e;nm1q6yfON|f{mjTeyO2j
zLw~+NFnT>?`QUoWhCS<ssVW=tYv9+DA3`<bG)wzQGlE{1Y0EVrk;90Yjg5f?d4**a
zLSOqYQTMzQAlVm?`HNs*7mMvLAmw?M+7hb+h}S^&z#g=n4!dVBlIwcwf#iTavOhvl
z)UwF5F4Oeq6FGtU3-~vzF!%3&mKydJ)~9z6QqmQX4z@OL+qvlUvT3ITKq?pr_C@F*
z-H!IqolLkNouFfGE!aDcz%ve?mgH;joFz0Er^G=6(BR(wts;8<<{g`_$#CM*a=9zC
zwZ{H1&d!F(fUGP$+|uc`Xxz1EI)jxEd#>q2{f@b~Ur?lkw&Bd&banx1G%o4MpPqB~
z;X?L^+h&K&L10b%DNDz}!9L_9ieWnbP|tAE@hO?_8-Km`=H>R^zAN55cFgdr_V87E
z_+r|Fo`S1r5Aw+6+Jhai&!;`i`X2_p>nRWVs0{M-aaDETAA^I;w`&{hxny+s#ah-8
z5DEIPU+lfPAS2y3e+1V#LdQn)Z^T1wdJb0<w|EPS847DmS`d32;%#$oTA6uMntp0C
zH|!2gBAv`opB;3XJlKg=`^9M!+=X5{ZAL#9#P#VMcu%i+k<pK8l=kzi$d0Bh_BFML
zJNMAau<6Pfn$~%omO=EXm*?~+eS}-*X#R6tb2?4yM`DUqs<OX5vwqRmpiLHut{^lR
zbRspc=vhvrs!??A%h-h*wWHs;y4H>U`@jAVFTV-1?!mJc&z`))47SkyaJU_P`}XzA
z=vJ{q1h4^bbz2|5B~QniPJ<n%E2x6y0B}0yf{ha`-ALFYDj&ujuesME`l$})X4TYR
zXjAxKc!m6ejlr~~yTj3Jtf!dO0F#<?tH&7y%t<U1!t1rL#6>r0sR9>06I|Ew799rd
zX=O@t^(?L}a7b1*cSj(`E<!?)mVEKR`lFgJoap+Bl-iEC?PBmy>ifbuSYz-0cfR54
z=Hb!V&=0d%i_dn`6%Z1pZ~42cE|SmFPMy&kJDpDs{>p(DbU4-Qg0{8_<SEOVyBCzp
z@$njBK%||0Y-&SUHUOBL1q)JCqec?52o_1x8{8^MXyHvdNl5+Cn9eAs4Ip)>m&bXU
z6#o1x$qE9>F|b&}^vuJFjZ(AZcXvAOa<Ia?j_{_*L>em}(#j-I3)6ojmks1^Wx^K0
zE<BrrJBEG{e@K>&H{n<e=>Zu>I-kmV7bkJ9{Y|BjrmA|bb2q5Zlip!v2`~Q+ki5JW
zpqRoa<iMPl&!!l%B!8`htSQhmQ8t^-mzf<@%gjWcR>gNsomuhs;Wxr2T3cad*|U%R
zWOyyPoye2lL@(`t%V1^s?Z|16B?UU5N@z^Q1pDvi1ZQPHX{AcGmy7yLva=*dvs6y|
zphLl>g#4^bK?0i7lRTRppGbkpY~tIrhW*z~j7clW((|kBkHdmaDE?>75}MB-z|qlm
zLZfg)@ZIPT%EjH=bc&#84%A>JGWkX>wDdwtFNiT$jL;4(*Ox)Xcj7e&gcUoL2v{o!
z?6zo}76*^=77w%L<6wCh)+GX=AA-0akwEyVRTdAxS@d~(&#Q)bnTmC^dmCR_IbR(n
z$8rDM7V(gGBppv??BAJWWB6hGFt>S_lKtzWjd-@h&&t^7F;q&(=Pzc%;#PDBeWrD+
zE&2x0`~BL(+re!ecUxzcmMsM=1w>jh2<ayoIPCw!g<<N|gPpZckXiEXH_&MY*6&ia
zNB{OoHsL1gjzLLSpKMmrZ3?eD%fH)`bB^ze3cY$L;mGAnR<}D7exkl=Rg6^}oN{P!
zJQ@91NO4Ep{{Z%kd+>g^$`1H7%g<p;Y+Eq^Q9!Q0G3)1{D`#5;vhAU*J*}ECh9wM9
zK2M|Bkj%KDCQ8V_e@%-S3$=k9i8<mk%0N$aI<pAs)4%J4*Mko3>5w%y8OG-wcW-!t
z;1l`eb0;EDd?+W}3sQa$j-$rOF_GYCMyq?r&+~K;y_1H#?~;$C10~abTa?Miwfs*S
zq#K(nan?UXTbnN*ua#3@7P8U#CA;6@fjW|}(g8h(hsG7zumZ+i)r+ZP*}SLpE|UBF
z<$*Y8G`iickavR~gC;MBh8;fx`z_5HjX`q6l3<ku;cnDBpF+JL?ID?VkjA}>4~QN{
zuV@X|b{p_XuB@!^|GtF=?SfeRi0B7?kwlzH+aXv9cx*36yKVDz>U&|u1dqjq%*5Rm
zPU!VS)A;3;oNR8fw?YaNa#|?9y4KLCPG|Wzc&$HC@>Z;U>En1_o!$(N68ii!Yd^+>
z_Fv0N>A2t2E&_~jKLx&Va72Sl25q*zc!bsP4dIGE^nYTcP4_Bu^Z1?K6`gA~8X@1Q
zfS<HLQUgC=KR=9qa-Y4D)0tk`jfTm1b#S!S^cU2gbl2MY!~8uwGu-HJYELuLILY7)
zZpMmsCerv^ZU%6{>el8O-A!zwKV6k#`-iun3*>|1R`~dMHX`=X@90;^2v%ga>c?1%
z(j#0dk|E^KfH~@FI_?i=gXG~Y8m5=zx7OOEEKicdEi?w$j1ok1LDBrapJjn_rV(2<
z93ehOo<+-T8ygV|vVdIqcRJRz<B*^|xYi#=|MBABKX|`au@uedC-$W8Mz`WTkI!#K
zKd=4Xjrcs7mZ&)(AABFOW|hX0!CLUTDRiXi0pIsf?w2O0|8z5HAK0(O;pPv&ugta3
zN6U8?hrz%<_-Q^tep$|0XD}IqvEWWXc+b9jHcf{`TPT^fioFf)efHtH;y;y7IjN#G
zbN8enJDm*p+HSZ6{vMF|uA5YwNcwns;xA)Eg3HA)?I)|7O=9Q7%(1~jwt9-UHhDZh
z0ilrHVB+}CG@Hi5gT-GkHw*kHK8;hhtS)%aJ@B)T>+c&s3w6FkXC|$=f@A9>JF~9e
z^+Kp##P{m}8^41kVPbVIt@7&9%&a|0O`Wq5qSY|dv#S2Di4dMQ0C-;Eoy}_c>0+Js
zM#>`BmKC-fg=k2lb2d=)_k*3+{F<sL=EdA~mzNaDD%L_#YK~c}4p}IKD{qXr3`J8x
zrzdm#ZV9P;sqAHk6uUB%>4x9(P4pszi!S&G{+&%H+9!BPz`5AEhk@5AcK92D1uTnc
z{Q`{TwTl|b9KK;G$!yE+v<PQg@i8ciV3tH8&-l+;A$*B!Wuc@pk^lDcFu1K?eSxPC
zNZ>om31DspLl(?wJe=9P(qcRt4oUjbeuXl)PHvMjQd}&xRnfRia+@M@spKv%`b`RO
z-1Eff;W9Zc0x8h_{wIiP7K%dT;_BrU&yxZ=cfBxI7spXn6_iU!`SK|$E|B$3_I7He
zzL%b5`ER=EB0a#}tXi*pNo8=R$$yW8W46&Wan<gi9bAicqr)GXmnja(Xfi#oPM%he
zWZf$L8a;euFOai{AJ^ImZSVOi{etWKKMx;9w{C%+<X;ia>e^bZ+9B(uC+n(TWq0jH
zo7YiI=4Jo#TFL9V2c5(36J1n+eqvtbZ{yiGzGgi5$ez_<su5xLBjQ7nGJ^PP)1{Qw
zAd#^Xht#=zd|@Iw5B;Un&}9-!C86_D-AoGl=LBuO;Y_zr$Xfrbd22VDDz~u3o_0O3
z4&9E%S7&qvl3CN*)ULG`<;B?v3UkMw+AuCT?!sc(@|0}Apj@^t{r>Y2*wUZrP_!Q@
z+O|*We-ynUyOpbezb1lxO$7ULiC`iCu8;<%67$kDFd6vsC4qfA8-F-EiHFw%DLwK}
z2SZh|!QAhDP26+scs5A0T8Pro49<SyS4ljwIyU40RG@0h%7B}~msSYeM3z$u+<N@t
ziouOa`d>)Q->BRch#%q{@AF}O)s%_tkifN&_Xb4X9!Xr%e*Yow!a0~m8?pQGf|Z_T
zAChskXSEeD;}RnRO@*w7+3|5QAVDAvCss3aU_t5=kMVLpk=&-Fm=<dbK|<Y9JPK3u
zgSs^n&S5FrS0VjXNPkHo?TGd&g4!OsTvWT^KcBdM-jA=B`E|?>e&Y}>Xqw2Ot%&N%
z)c{gle+jYW*CMg!r|BqZRm%1OML3voM1`bTXu!7xBI1I1VAMf2PF%{zYp_Vk`ucHJ
zOuZ;ikH;VfrVri*9o4n-8OzT-c$?7J2XEFIT?3nP$<x4+WbI&JApjpsxe3MKHBPVf
zEM;;R8B#3MleFm<h*cq36E=kSLo^u`El;PjiC)D<92~sn@keRV-`GY*)@;(r!0pSk
z`^uNU^5vW4%fzc*2^0=#CZu`f1=E<%8yc6d*6it>?T*~kv75rLhHg_jy7|oeRgsdy
zZdJhqG$xarikhE09H3@2n+)U+z!8%rz<9rvsRNfM!4LG%umye>O=iUj5*3gKqxw#f
z3Adq%j3sF+`Iz))Q)VAUM$Cx*SErEm`?LIt;;YIsuOP(0{V$bY)$u>46q{UAh)qHn
z#wbm14A7(^$)3Eqpe+gwq!rA?45b2e2n4Gd>2ovb4k9qs0#ehPrNe<4p@U>H%+C2=
z7x<-V0$<t)tzW053{qO4&=kGF?%cF4H`1NET)aJRYkiu*{H4%cs`cIrE#GTeyI%?d
zMy%|q0wdS2xGx#UZ8(x1e#>HL%URcfp;|fv)}c{xR({9D<$TB=g)JI=CAneMn?eaM
z`6H<xVuv}BH5hv{&p7Co4lew#`U9yC0}}MpKkPfmkViNh7mc|*sA!&^(n56TYv(>L
zY&Rmeg)Lt>i?_0T|57{VKJ20$3qNeRulmv-COT^;8O7=Ff)9Jf*A)(yWKNOwQ+ECM
z8o2q-{8#v}x+4~T*b}~Oc`E$!I|gH{Gt1LUxZ++pGWY)N{t{pKML&$4kPE&nWcTc=
zT<&}Rg?7w(8g)M2*?iFHlO|GyK4Bx=wLbcfHr*HDz7iBy^_~9;XRQ213(we+U-ad7
z?5lU<t9Rq`c%7HAr_0*jXSAvZq^w*oj(e<+I@|hbUO_ST&SAb3V0+-7p>54SY>duZ
z{0E!aVcStxwjYFWy+3&Fy<eTdU!B2U+2vPf@QpcxUFH5!HXLwA%M;o^POc4k(7(11
zSlHxM9KgbimvjNk@SjmqrD%&W$qG>K_1a?}r_)Y2gbZ2{Sn1TS3q3%GdlaHqhS=iP
z#tn5ac{ZGbnqq)>Mw{SFbe!{Jp?R*A#&!IzsNm|-(M=;xp+Er15s?Z2>(AR2Ts@i%
z9cIbC@L+`Rt_DW9bEmQ{YjSA0K_1qpI3M>b5@xG|M{uFUoFGx@x1jT%lYcmDw0)y&
zngqKjEdg2nl#e2V-;74-bZSTpGe&DEw_<di7(s3c3ce4;&tAg|HamknKAJLbmz&D8
zhHU&@1@>WR(x^DWD>N$~CyT^lTp>gAUzcHd=pH&=$YPOxlqjqsE-AijWYy6B3{&U{
z0JGtQnz)*R6QtJYDV9O6u`OZgJ<h(L-bHWH+WJ`f1uCSOQMxp~bn5^l3YGZsAwfG|
z4-CVr&e48b30mTO+QL%sH(^$^oub$bhoZ~zk_4(Fo$5AyCg>W+G8v0(vmRb8xz^$z
z!^C8|gs&rU?eD1GK>9>@xfM<XL=vnVmc|NGqnUJaaGzS+oq|IwegwKwVos-wGtse-
z&W22bC3ZNCFv9W;WMndBP#o3Y_*vDC{baQ_gomFh?~Kb#;~h2_UZn;H)Xn8;C0^3S
z16gkhm>hlE{MHo}kOmZVxz1sp(@gopr}_C+`cQo1p2F(xYs#HYCCiWFu_8?2MMZSD
z|3>IJLb+gZAyI`-7aJdv1kiRZjNb|`k;o;1Or{G`S#U?8iRUewEkpOrJ?9_b2_eaD
z(o)ZAvfvp#%FHg!f}w**YmgR#A%*W#?=10~?t&eYB}k{z>4cN^>h?_}l`SR?_enfF
za*2&|)YFD1W{TWF#h3eI_-4EeHGkY9WtOuV=%?Fu;X>iS<9Vv4DUe{`=xO4bt=J@5
z1|H^#z8wiYFx!jOa+<#l$V<VM;PlIK*Bz7Kj8t$CO9bc_W`8V_u1^|r6Lp;z(`lJZ
zo53d6Pv}+=?tCf|r!DH!9vhxD5;>+H#%1W9dG)C*Ly7aNbwqNDi(lz%e8U3;Vn#_R
z6g9Dk8V9daI$Tnqo{m2VaO5<re5IQ*agx_k(9Q!w1L^@mQC}zrA`r&&Qxclb=skI`
z64I>|_nugYoxdr<_X=g6#rc>HD;pqu{+Jjc?s}3pZnAa$99>;vx2-+ZH_<*<z(ZJW
zkiBJpPqPg^oBAPDa-dBQ7aj{>)2%F39R+4gvEL;s4_uTd^6O|{=Qnh24n-+-A^9i>
z(^y#_HTu){?{taOC~+;b^ql$D(kt@uD?o^w!XSc57#CAnbPS~Bj|1RGkJSqlh&6>0
zsBTetci-t)GO1vuMw5$l6z+O7CRK<VlGEHkn~X-99-mB$kkP8rqx#=GxsbHP&8PIY
zeOoyVgcwi#0rO6*(tb)Ua;tm<=m)>CsRD<_^V=AZ;z2$CtkG~UVa)zmqUx;xT!ptK
zz0Sf@Kd<sqMuDXR%apH*Y9B`-_v9Qj)KVb$)#u+mJ6H=CG7A|1sSBOL(cyI4>{Ov-
z`S66;bh?(K>@+Eq+FWxfx>_f1o3Pzgo+5=T`6#Xf547iiU>67*yt7uSsIg+Y9lBRv
z*h)+VsPw)K@mGUmF}61IP~RamXT<4MQq04d-0jp#gg`&@&#y_Yle421h+`tQtu~iF
zGGW9-_GcBUs9TI^)oX8{1-XYd-QBU)*k(EGVNYFOHmgOrlIE#;LgH3jRfgjX=WBg^
z&-$`Gsv%4IlJ#{l?xpkG%7W7stwMV6hoJS=teAS0j4rROG<Mq2w?Z$DX064zFGg8S
z+Q)6L$@{hHmKO`nb(;L%{ipK32gBKM)5pgJRn-z4P(!);=Gn`&#_hJWxhr!ewJ_&-
z(t=&ou8W>Fn;ILeUz^a!d}Se9En3y}WAg;*Xv)Cr^h%_kX<(wnzXgwg^YX@pw&HUK
zzvyQZ9~hv6#IUH91!%&H2S=Ysc}SsQ5(7jrVx-x^%h%AFEK^ogczWJAKEe4U8`6FZ
z?Z?2iM)Yu9ml{9%jsKL2H?8Do3~Vg*r_oe&ElXYIs;;%Ub`b57k$XeI9~GuwgFn{@
z{zN0_I)XHf>`vZB^`0G8w=*;?H}J=cxL5v=2kNEk9G`TKhhIZY|BFLSSBiBwcg50C
z4rWQ0M>%BR&l=w#?si=!%#VJfCuyDu^YL;W_j=iE+LnjvSus7)3Y^>`1O<LMda}Rq
z<S8Axi8PW;SrjQNuDtuxSTP3s%8IYdiZzX2)^EAIeW8RvG5E@0zcSdx43>!HiVT*X
zScbu3;Lpflk-dC9{wh!E5LNDq-~1ZjUtwkw{%s7FKV6cnEeBCEJvm$^fpp`h)mME@
zYWkYg^pz3*FG3y=4saDliw7>}v%-HqADb0sBc+j=xOqLU%LBEv-@FY}spLGEM=A~=
z3Bp@0sO;3inM=!~w~F!y7{6|E@Cj}n%RbAZgB>5e^zKDizYJ{ax&`_4H4b*g3)5t3
zKd?9Je@Fx;0kNiZD#>9?mGt8V^5_Ls)dI9017Eu|SqHn}dDAs*gNwbFrNbnL`vt=1
z0A-dJd`1nM*}m5ixX_wTQ3}cEp)QSH%7w3WpZqV;<JT31URD)aTm9*-U84x}pAjkY
zsRHgiRh-cO%l=cUOs%aWUAo}(Q|eB?IB4We6~ihQ2rFx<<uDb7!ARVTp`_d|3rcEi
zv`5in9<NwHs*KZ2oQJ*tPY!~K-Y6|88{QL57V(GZpI$oC-&*?<=^X;|c%2X5-+LMT
zj!q!*03KC`E#|)et+kyL7T!H(@zD+D=0C%WN`ZO4o^-Tloj??<>v~Bj*UH%*p#bE|
z;u!L{dSmeNsF(oXTadLELh{VN`>VO~)m-^%uKaH@S4y1VDrSptpJnR|^aY>MfN>n-
zdW<=E-0|k`9TTc$&+c--p<POO2|X>eQ08E0g77FUU^dj&$6Y_AKp-)$hU>JcyvDN7
zMUKnlL<T<P<BMnj*cB`Fn!(E0kVP{(CO$tYfQfXBB&DgfU^OIW7lAHGj@p&^A1XZF
zamtVw39{gv6~GAsAV8m?;pKBYNu`@2b9+vuX%B2K+Pvo7>pY1~yY_=^+th1~Km-E%
z=zf)^U#02)_KL<!__MX{o)uw;;6`d6&(I^48M$O67S(D-Uc?H%oAz=KvImVrgIiW+
z6>!ghw@Xf!`%L5_3ap-}5q?RPH?DT2S{zmgG8ntfsOykLYk!nd$u2s9r$g@L%Nehz
z#AF=sxeCndX*ynVT}9b(YqG4q<6ranR34gmG0CRa(sxemSsvzq{;cRY`fJ(v)Te^<
z1IY0ncd{A9`G*7_)Fff-TDeQ|W0L#O*#bOwo5dFf(z9tS6@s_r_(UZ4&x=5JEui+#
z3m&%|q&f3*1@Gbv*#)pNwq+%F^8H}11Y<@4V-!s$99LfV6+7mu>hJ{(aiiiZNF`-I
zmx?4C`twPm(rKgN?U8GVrtlw~%=a{dtg61~dv~pL1*zLO?!g_J8h)-dde)bTG!@<p
zL~DK*B_HL_HMN0D*&aEY*tT=D1n)UY=cQFzor0ZUsmSsI%32KuI%9Dip%pzt^}LBH
z1s8Z5A__#SZ{M-D$mL6GQH%ePDA~U}KlsawX7n-}A7@V=H=~1L-2Whr<LOSWeI&yd
zp+U*AC%!X^<@b^{2oYUqy_Se%U>?vZ975AOmjb<z^xZ10W_e{D)<o0fy2(<tHVP1k
zpf5QXWt@byXmxvY^WWxQaX2gO9WQ>0Bxm6!t0Q35&L-f;z>K!U_BByz^!rI~mEZ~H
znNQRHP>}?_L;mzhnh(I*;X`4B2`=9mb4OfXU7yj~aue*6bV6?#53;<~%VTa9thZ-*
z(T?`U=Z-oJv7+Uun6@sC4<O~5(cfpuED>Uqn=J-z)w#4x{BQ9;IncTmmOBR?1KS6_
zsDgbQdjV9%l%XoFEPjM7k*u-XTDW7aL}Co*rgXLn&p|VUhHXaD%A{CR1iE;tYtfG0
zr2P*OoKG6gs@eA?d25A)6fPWdbS$;aE8<2!$%cc%RazpP#FN16_){csA03{?c`8sb
z>SD{2X>DY_<L=~@)H_3YmvWd#DrkZg!o&`g&8Jd|cc^vU3HnKk#I9%h9hDCq(m?wk
z_~-DA28vTU`OI;!P6MwOiQaETMM|r3-p*)E0IH(sgLKM?*7I|$@RJw&eBLKSkffYR
zR>K}?J7-*f&1NaBA;!f>*=)*mxxW6YMApUndbC>5a?`>Sy^xhVWjE&$sZVG0ERha4
zGaIMsfXtKQ*)RY>_vMgDKa=UhZ97Hp>wLg2TDoC3I@}u<X>WLi)!ZWOMV?u(#;a<J
zBl9EFC4>mya4&9MG?dd9Gh+X=1+Vtr?7eu|1ggX+{gB~aB7%4_Otpem6c{p*bO@Q-
z@)O_gNFVU}X}8IKVL=(9I1dHgjb5ttZ>6)?=B;~2(lLfHNSg-XHO`_13($_<&c>QP
z6Em%--gWpmE>5oeJ-0i=HBT070xCw?34+{tvB8KIv`4%vUuV7vnE*tglqN#*&8l_z
z-n8luz2EV-bnKSWi*vtP`u=nzoy{RpF47+O{&2x|VbH!!`tigm1oGUwD=8Z}MyR_2
zn>Sin_<|M2If+C=3MIZMYOMN#A8-NlxD-SfC3Hp{){MPcfaIlm*T9oVbp+R$a;Y;%
z8IGU^LkLu&658_n-=!v6O+fV8cFA3bsx-&ZXA*O5S`7Js75Ev<OW<nbp(4`nF>$J7
z=pq^ALlfC-VS}Yd=hF8&k5l+S43kx!Ulq38Bs+x>`%|`9NMFeE^QJv7ORTXC*8A4{
zJJ^GXKGLD?*8}4J@$t}A`0o`gvsY9yx3w5l`vvr~5lw5#`kO<WMs0A(vv`Jx&5R~Z
z);5<ON9+<J(@jA)XdGNVL{C6YqRZH*@!^224qt+`K;qnOhSj*akWukLl<_0{faI5E
zXi-F~uE>+@s_`J`4H2c@W)p)=OoRhfRh;gkKd2H?(#0{Gzb1J~8#M4&N}37RF+x0<
zu}>u7!&<Bp!&G%T@%$)^r-c=sFG)u!ZHW4fB7AU(gA=h;u0!@4^r}utVZsK0IVjN4
zULhrgeAxbkAmAbEm=NHCz~OiCZpWDSNiv+2d<JL9E!n~oQV_W71QtU;w^%6?6NHuX
zfmYrdc0*<LLT)7L`iq(?GJ6-BDsD9D<%hkYn3vC>dSmMR1>G*L*;VqAeib*AxyP@m
zb|;HgxvdSCM$;cS+SdEyN*&26UsJ-lrFRH&BELnV7y6!mN}kyQSlde%&5BLhQj+3k
zKfgEME>mi<_%)?ei&e|e;1|o^{OW&3uP@9IyYy?cI=pRl;jFyWe9iaQEE0FGk@8|K
zlw9I9S1W*&*Stu_Boy|6l(8}7zteHe4zXYVC}F6Kcxbk?^$F?|2Tfolo+iU=!i4Cl
zgI~k06}+Rs9}B((uMvC;lGgMtNz|BMpIXY}*St&tIFKDpqjyO>Vl06v{;0n2pM1SC
zth~rTvKGDQpNe3YjYB^6JFlKzg&o}pWBS~kc>eXWlV!8_Qc<n2%d!5wkhuhWY!NlF
zoEE?jqdS)^#MK0!y2gillgU}0PG!dW_a!raHXgtW2VYx{PEMkJ*(B%bGJnTBvmWsO
z8CCQqsp4?&`vacrS#jY!>(<!Xi@Ej95Ievx@a|-@!Z#iprXLdjMAL~F?m^}})l1Jf
zI@r-kw~C#Gyrw$iO3}<OcJdA%r^kPpC5$1t(Mym2j=wLQby*%WX`T@WKFP#tTuLy1
z(u|*wto-mDy^bllkALCi$pxbQb<ppe&fjb_ZUKRHJWc!-M}Z=vezTjKF)i595Ssqm
zZJD(F(8{-KR@<mTyKz;C!zzqg&}+v9C!T~Ip+9}bPigc)c8s|W<j+e^;6D+_U|d^e
zUbL9Q^J&^I$}CPx)B4ig`zVjegr4;ojZ2Y<ul^Y_W75*Ie84l7KQEo}Uo&>aGjy@U
z7N*I^=^`nN*&mbDnin@j6;EgV4^JQSgz2wA?@}IDqGK2}Ev;9J4*v2Ydi`SW&F3R#
zp7FQwY#hs!kMQTEbN;8I$)SX<3763fGpadzQt?K*%J{}8S!Qg#qIu5tj|*m9<`pC2
zX?<i!kiKSw4QI#aVRWW>2VmK%fd^3IbKC-HD~u6-JP)&dIr4gO12eAezp{$npJFpk
zD(g*DaZ}wuuQy|tUe&f#tV`*5|9Xj5H$@d>C?)6<&Snz*wFIxQ)`S5kK=ecc(qyEZ
zv9BvIn%Gu}Zg9pQuz6<M;qObd&4a+f)623CSZilTetu2pC0YLclXNt}lt=cD3wg!f
zaERO-IK3TVlqH6AE$BfvVwmdBGvnwbQDH8zbU*dZNPi7nHcu18hVt{0E-}sHaUlsY
zWL~oiM00CM#V2->6xSEd)fv-48DwLbr~G{hRg`4jAn6mS=J7E72b@7bV|D(3&qWo)
zK|jiT@z;`4+J`Ke4~Nrk2CYrXy2cI7*tsG0{sFz}@i1dg&d7dm#rVC|qu<ph<sP|O
z5&w<Jyjtvmb}gKN$iIJH3v}QHslu)Cvyc6Rk6nU47FkZ^CBC}v?*?Wpc}7eK_;U%}
z?NtW7@&c{xGxOsE=(RlIqWJspau)z`x6f+JT|VP;oACKk6Rv2Rc_OH&#L@<z|3i4j
zuM*+K<Kz-PT&K}TZ%9@j1GM$?Q$#T1k5fMKGHw0Gg;F}uHaVMCU06;D(lj0`iW+GA
zo10of9VscM*O+l8sM0iD{%bkijch_<Tqpv>jOfXvHI-=c;;_n1tucslZyz(x=&v|k
zV#a$p7l%L`Bd9wZrpH{`UrpouOjMzisK;-jbouw;l0G5vv$TGp1IROe8=v<{0m5{1
z`STKA;XeUX>^6N!_ILk8^Sve^xm0y~%~Ko2{nrPdHsgfMNuDqMSc<#tk6R-$PD$Nl
zKcV;aKwN8fzcl4?xs-k6K#El*QJ4gUs2{FMIX2_sBt4qyr1|fQSNWgOw=-0<Duy)~
zdHq<T{Ut}Ir)$@^3~S6y$<(=}AM9Pp<`5&|@-Rc~>WmNA<DD1Fd%V9Vc5uXHI>>p{
z-cwv(Jg>AP&qb;{W|IN8VnJ1#>G;>83eu`zzS9e^N(e`Bpl#=ZC|l@1Uf|&j`@spV
zNZJ)?;0c%65nCKdweryw!Xq-{WITADrz}7U`umvvzAO&HQDM}vh%2IELw#<UckuGv
z8=mcGI$2UmbD|d+MrAuB8Pa0s85tZAe-Rsg+JoR`XFSf%j)w6ER^to%#|3Bai$@g>
z{ywAk@pSpGWu$a`?$REP(s4Xy@#i#!&nNP9#&j4aGGqSh3NsFH&OYnPR%fh5K0Igr
zdwJ_W`ZmoImdT-E_qk`B!&n!)sgQqMXgL`js~byAs9!`q))}9Qx1u;rKVBMr^djUW
z%RXo+=Pww7<Qcysu5_HoBgvPLzn6)mhy5hxayCv8+mXIB`)_XWlVrxo!sO}VkEJvr
zq)LI^_F08@I@&L_#_uPzNW}@}Jd;1K5V?_VW7$~?aEEBz!<t|#5c^KqxsgbY*wTM_
z_l`~JzfY%2%Dflorf`;UPX$j6#OtP6-yGlUjz#0CO!Xs8UeE%DYp=1Z#uHEdwQBE%
z`lt<3DGIk3fQ_h;0QBTku;j_LT>jN!aDDj~t_9awEL94wE5TXuHP5bGvo!n)`~O*s
z$S*r9S1vHWPM+20C`G?C%PO9v3|LsIQwRQsm6TiFz3w>u+`eq5qNwHoxo%bTM!PYn
za{pSN{<S{+OV+0=d0(MCU1<B#>U16W^A)FC82GvZQ6KgL%?m{hGuQOXD#)_!<+G&!
zA<5lfDl3Z%g3UD&QQrOKWunYuS*a*d_fJGfxgqg(O-Xel5@<2z3CR)HKwe9}t!4$+
zYH@J?={MpL3d`~k`{a2-Cm%%Phh`LF;vMhv;hZ4rS-(LoT5<(LQM3qh<xNnOzz5mQ
z#)1{0=i#g5`YO3Tm*lzx_oS%eo&-5THzZn6Fmi3tA`ja@`{NqXBE>1;xUNhk=mIvm
zUUiDXTh_h)6VN=}a9_cozrt63<&^(7>G*PPucqZQGg?N^m%%@urtgvwuf>l?{^?+-
z3P%nyG{fFulBXHMBF0zF%MAL_2yTLAL4pYiHm6&<-$hKdY$H^!aVUr*u%w*n5E8+1
zb8iYVm9f{FB+jrb{(^)~{tWF;6E0M3w;2DHFKom3i7aKr`2GE4E9RGR-rcZ6?q(fu
z=2Yu^kTxLB6!E)ap0#DyuGU2H!##3sMZj#Qc^m*j79J6DPr8n1yArlsDuxn=82a2h
zo++PMn}3ffJKVOtNoQ_rdu`F|zU55*RMjH;V1050kFMbA%GUNy-0QdahqbSk)K~rB
zi|PlS)~}!-IQDs|hTw<)1yqE{1lgzQ3LQU8IJlFe3$%xzTB2T!NX8pSv^q1|=Z#Wr
zL@Nn<lMZgCmZBZtXNHPG@EvSqW@kwbY6UDH2=Y*s4-P0-^^e*OyI%`z4o!vSY@h?Z
zd-3!w8>d8%1xE^JsO`iTeIz}KtTyXYk7T%#a$zcw!@wz>`sJY7gfj_)sK*JD<Gk=o
z?=r_&gr;XkHL|~0GmLXN!cybqRX_I)3^I16X%aP@^>)WDmdXDW3iCKI&kZ%Eb(7o`
zSlR*)SVV`3CS(QZ^xhi2*Wt_cxb*rlND^zyd84D|QaaKQr}gmrD}F-wID;d_Tt`UL
zA4*DIa)hj3=6A{TBpc`%m?KR3RrO*?`x|>eO~IaTN6+Le37^#aOF;Lj@I9x;<5-mZ
z7Lc8sH3;{<pf%C;WA(@mBKyE*bas;VPfUOx@vbXZU6HndD?}8>4$o31#nOm2^+`7B
zG5(_<sHvCNW*V#*qp8yQu=m;vjk((pGwnF3nR-a@o+ka1aW>43Q`8tLju^ypm~E-=
z@8wxMh;no!z=SJEr9}v*Tfl|VAI=5~I1MKWg49~Nhcw0HW73})V$-jUgaE)g$pC(K
zF)isI9e2CpQ#}&=+{$(X;qR>af_C&cA==Azp-1q4(JFe4E1`AZROkpEAL3L0V8*&@
z&;4#V{r$Vwe}4ArcgNG;M<+=<NOA^s6a-Bkm4Oeu?&bv&9yTu(p64GJ+7kczcYgX|
z=?ww;-o>2J(FMx~VLOe+o`QF3^G_qpKtQKZVCXO^FBYOZWGGzY(~Cr#C57i@!M1Tc
zLr){b!CSLQOF5y4yOz%u+z4BrLp<=Nov99N!FWSBt|AEg7O59&E~50^-r8^q#CI^o
zVg-Yg&a42EV>^{DZ?(;ih)vqusIY;0jY(ZY)RbT}U&bE*vL`Tl3>XdH?PNAB<vWL1
zuPT{H2$OwUM5`fybZiC^m>=D=V%ktgIO+<PZ@V2G9>7ODV-md7gMw+ykWjR0yUHE`
zRvKCUlPEh%^MZlTciPeO%sDb#FN$P510T9r-;!TQ4dU18vl#St8%<oHUJ+-f<%5@F
z)@#YX+GM=>73kUlYU@=Rs!K!Mks<ih{0G)E%LO8vwcV$$4t#`+a|PpJ%0Sc1U->NB
zjA^jD^v>`nU^fHqn2%_lO$N}OQHW#<(R~NtJG{lhf?dU#1db*$u%qr<@Q<Ras1xW9
zqgQwUO#W4J7V%yBY`2Y0o6<st76&MU%!J_1r#&%8{#1SY69^YRzN^Jr$b5JS%3QY{
zy%{F3YsOAn5xFI5VH6K?sa+mq442J_;xr^|mE>b8D1UgjN<dO5-QLpz-qQv2Qt{Xk
zO;?-rb{*B!&Ts#SUmTCmn~}o`WzMVE)3K8ptKIkS_n&U;0dTQPL|Jf+EgIfL&R||r
z`}qcAkajiBX2lvv^FGaF><Hmj5v`!^2;cJl?TeMDmwjwPDhVaI8L8UBDvN9U1;Q^e
zy>=TlD#f&u9d+n-o6d#`7#1#|?FU2$j{X*t8k=}03Eh{X;#4D2tdX7>K&YfbPJi8K
zyo}F#YzvZY!AXO}km#&Cv`T?2P5a&<sEQF&7_AD!#REu*mRb1L`4CEpL+oWELeh(w
zY0*(I%vJC>O|JN{06sF{hkeuT!g0U25N;{x5J$6|r9O)T`miW^17=ycchh)(qVaHU
z1~An{R&=}FA4$mmj6Z+{PhYt5aV2`l`1VXD!jZe|a^Sz)6~@|a3kn<iv-+^rv9}Vp
zWA5QxF?>P?dX50UtMrZE@yYpYD6Q;RU&WTi6RwXk6NF28Dww2v82R)1Nj?ROq-*IU
z<$YlZVd_eg3uSaHG2=4sZv019BFE=om}^aFj0OrUxVOXP6m&56VagU{z!bRLd5m;h
zy6ucKS0)6G7h<nOJSPK&3J*MW+LvG=yTw$*>qBJf`klAf=U0(_vQA1zWBO+v6F(qI
z6m8yV7tDtWL1R^d71Em!e`ADf0H9)%e<zzA7`~V%onvOb$ULI+u8@$TOgC%xj#~&2
zRr3Z-Q*AjBfvAUuD5?9_W{5%h{-*ZBK*sctm?%`FQG&K&X))4`KSuicm<{cC93WE?
z(bIi{A@?7n9mH(3RxYrw4Cky5oHr8PjOZSIUSh>!+EGD<ZVjO!`hmSMJQpSwqSWAl
zaR}06Xn8d0+f8NyaPlKoRe9Yw2n|mfFXD*%s@X&Zkj>GwEuAU?oZyV?HYYo+E|Zj6
zkSl$Uy3GusUHvph-d0w~n>3OIX+}!I0@p0Y!DKQ#*FxZ_cAlFR5;K7zH&aOIfV6d{
zWE6`FbSTxkEHJsNg|24L(Y8C-;I)9|rBjKp)rYY}V5S^}U<Z(YPpAvoS>I)LUODRw
zQS(Qy9Pw;^%#!dY)*Kjbx|g^IO*H+{%P9YZ(gNxkfx^KRsPZ)=`MtLQKK3J8d^&&w
z&r?dE%1_?DRF}m&=s@R|-QY9~r)a4y<U|y`X+`t3Bq<PbVa3D}(4gBqCl(KEw?0p%
zZWwQGEet++C!@Gt<PBjI>QU5rEuy`bO&MgLD-TGo7{k1DUtD^r6Pmh;_(Cya7m2pc
zCBjAtcR4W=+8G8OR+Tk=Kpy`}LdHK!8&o4{pn1RtmN4Cb7*h3=vec(psVur&5YZ7$
zk5lhtWj88O8?n|a2^%O((h9~p92nykr)YGLmHPGwO!*i_IJ_h9Au`OZ*S~Ro&rY&n
zG5mX*EG>lH@`FmT{$tD)dw|MZHeN;}0B?fy6{o%&q*Z+>3Xa1H6O&Nx3ZCk!3~l!h
zH-Bi4isLq*?#TY=YYf9-sPjq*>Fq+PDn&pF?lENd(74BmY>wZRfE;D{s@j({vuH?f
z4EnxCgCqm^@OU+t_1Z4I8-sQx@f7|n($I45=sZb>$!dNJCdF>l{<r84tL=YVdvt4!
z?pN`!=#c}tyc^*OegIbAqPw5cwcyriw&=!p*={%q;H%LoS#<Y*j{kGK+FoD#&+#qr
zi1yRh@Ah82SZmnlN(TXcs7T_xf3g~`LNf~2$i86ynefBrp0Q<`f2^{Ab5GJD%s=E;
zX6}Ali}{Btt5kWC9?cU{gvZfO4GG}h!YbU_4c15+Ij?T5LCOS6mmtpjiq2ru9>rqN
zqkgGMj|M9^|EMkqJzZL~(g5Y<oF8MF(c`vqr6=8T&OfB<Lr<30&^_Mfn%`9(ro75-
zEE?+PhL|~@ApP__-+=s69bpltxG{l9vpJbF!8kBBFDds(myFTq3fy%RpNn^%Io)(7
zV@emA&^E3WQEqVoT!<O?w=rfwy-C=PUM8gSkB`|%qP^Vncd{;KQiE+8-f6tqxrXTh
zd#?I*vKWsqc=U0gc8SJyMk-@A6lcHqRn_(7a+kzG%y;sakTRfZc%IM<NE^T<*nkr5
z;ftlXxM~X44>{JJVzjPe)QH{2ZKv3tJdxgk5l6$O8k7;C)gPjG1@b%f9<WK4<-uqt
zGqT>%gJv3k@V!2SR83!prVJ4~&DwC7R=icv^AFJ$4qdIntb`p&OR!6vlqF>ZqSeUR
zNN8zOb}k&bd|C}81-{It?10M?U~P<1!bDk6!^hk%>X;Ku4C0eeTTbKQECDT~y4#4-
zu6%noSZV4tre>JRv7aQV9P$COfP-X0E76{p{H1BhE4d&dl^OAT-eq)p{kxC3%@@DA
z-U;(7WAg4964C0^{`vO};$9pnJ3{jDYq8jWYW!;M-dz;%5Gjm*Z*HCM)M!G>Gb{(I
zcW0n=(Tw2lnOBJ<FjTZvPv}OgRqe=Z3SJEDQz_GZC@Z}SB~+RcVvn2pQe47(p!;#O
zv8kI>NNY=wZ!DMN`GahBuJ#JD{gSvGPRVP?fLYG=XzHSj0!qq2iKRv@L7T)3u2^NR
z|K2DC{KFtlB#~KB{%{;{I(OyUoM!^TCxn!a5^K7t1fZvkKiTy;k0o@Z^dvEGrK54k
zqa1Akz>m8(a6c~ev1<n1iH<XIR*qouk22|gM6><qSrK#CH^W#=?Z{5;@<-cQ@@{)|
z<~UbD-cK?}V?9UQEbqun1_<f$2{uQUtYF{zFv0mcRqtz7ak>a_5BjjZeJMF>oCs8u
z+J#@-vbGr=9>6g`gof<Piytc7op{c7J-GNO>xclidCN85GM|TTFMXRXzJ?7o&g{Yf
zF6MT@u5iOR$IbAz@32P>!|dXD3clGI@z>EP&grbw?v-uT{ur<lR@tG6jm&_|;<kih
z3*teGVJHfAU-6H~hCn(=B7)t#Ny1r54%R@`sI`PSkEo6~cq*}*p0E8^+<3-afm5~&
z*}gX<Q$P5eTilrn-@${3mrWgGhC>$PnPoqS8JT5Fo5RrS3eH=IMMqGUMGsz33j2lU
zzWn(<G!z#fM2}kliO>{*A3J9t-^>gqf)jR}4A}<=hrgS$mx6RC$!r<PpU4IrYP>cr
zidn@?Dn&2TY=W-|_!Dzy;sOI^sfENIZ1Irn@_`;`hskpSmwU~WIeXX-G?yM{(7ZlK
zs{p-%v+J_!vt<!^+jB|i`sOd5gRb*fG6h|i;j?9+e}$9yW#A+h72yW;x544iLR`xW
zpF0)Gj^Nu_SzA;oJXfsiUNBdzo8>ic$JC_Iqo!ug?^$ha^Vq8VT!k}42_K_jMjUO>
zN;!&=Uo*#F=lX~~GGXNhQ+kAcw64_gQN$_pdm$3gBhGCI!7PKS>C%k9X54?xxc{OV
z_e$YcO1PJ2mdLl)!9QoZJpk*ksV~T*HprZ=AfWi3Co(jCmLHdtgzJFd&+82Q{x7aE
z@GO?p7kDu~ySDI)YYCr8Irznuf@O4p*tT2~F6OlW-sJ1*06cWP2B61nDf$1oME^pO
z&y#x;;+-6j(Vhc$`gio5>1o_QmzqDk{2jmi5mDzU(#cA{&H?CsmGoaF{g;#UOxRbF
z^LSzjDKAXq^T~MEh=iNEL}==AJ&9k_9fsw9O*fgUHc;De#$~$Vx3(Le)4dh2zSvOQ
z?+v`IVAbK8t!RQ2K9_-HZ4#qNI!TZ+R!B#B@D?B^5asw%42N<8UO5gw)`7TdiLp;j
z1xHe9r5`sCcLD<Z)HyH%oMow6uzLOBc{9xTih5Z(Omb8<B}n}sVmiFwGiun+_Pq}7
z>9~8s^C_6DdE)ac>ktC!Hd>qUd^z<iP@TN)beZy0s~LH;<Etx3|3p23h08Q$J^H`w
zKczm)wK~_*%GsyrXkW5(^UY$D3Ojg3+CxeE0<rJ`GT;NdBdXUAJ&EyCZ?b$!ME1xX
zJ!3lydNg5h^<CK$dlx+MDb%BZ*CdxO3com<hP#avT<PC9HT;H8T7X9=fRT}l`3?<S
zOjvmWj9zkYi5H~MHQd~acJ$;V%L>WXLpJ1ac5L;`DaU2Ka44+;-EeU5B6zh1pXo2e
zxp0je3TZYTbPWHob)QZAh?845)TA|!kc3hd`rW&CZw{b@;t#xI%y=&vo-q>wEE)Pn
zD6pEAj95f!IAkW*kSfeU2N@loMQ?t?Z?<Vw$+;vC+&t?|g-DGlcN-E_FbWCvl1!!L
zT=YG;{~&uSt%A0L$g_`J7#qgBhshDLOD5BEJD)W0pAE`n!3U{LBDXF0mSxG)k5%}G
z{P;>-645<DAwu79A`vJmLKN|r(xUBpnw&kW!#sUl)z_>QTsWvTg$rQqF6;ls_;qwA
z*N#SUI+9G96R9vVfB+Yi^Cu!et8=yK&f*pQ%M~%(C+tm!aS`+h;-WcK!|0I_N-I&r
zn}%3U{$u6&9}e|1TQUEWlNP|T!k!I`3NQVCT+`g_sG$R)a>0G``ubTmzJ*K<x^aD7
z^Lo9d?jLvG!9m+$ku}H|rFCT*j;Fj}maHt9K;z0MbBWMw()K#+QOfxBc~XuF_n=fN
zpf$=qODoVgg!WTehZY0k{a|Y0uMYzNDmq!yGgNSeA5gMk>il4vElH+vUa;ua6Gc~z
zD_d$2S~kRN;9F~a4794(v_#ZvDN9zLNeTE$Q$V0kds7jXXQ=|-SG5uKG=QUFUOgfY
zoF?xd_@OOw#cq(AUD|c`1Z$-0>k25)(B8_Lvvm?n2s@n;(MZh%%6!U5vvF`pEusD_
zxkV?!RBS1np&Q*a+!u6p8=*%}yZ#2&letVcFoa8FgDRUsAQH6PJUf#9Z61|^UhhU^
z)tm%Kqg=#&NY-(<Uanp{b~PS;ttJ|1$FIIjWHPaeS{j|<`)#}xyBWdrFu7Fs(-+K^
zmjQES&+UQSQd*XUB)jFmBlO+U_w?hLaL#wW7{^}Ol>>d@P9TUM9fmht;9amus4;Z+
z&PMp)nuu*M2ND~QDtP@f6|=!>mVd+cw!Ogy*W841ie|JL7Ystd=4g-D*05-*chtII
zqsWWv>xwl=Zkz@QWrgs5rEc54_4V?~5fkNn&s4EVnXeOzPvRn#l7ryvlo&~1)Fxv-
zXwC&HqQ=V(u~i-3GMdt{o|Y1M^Q+^Wg!9nYWGkMeKWLd#Vcwnfbp;N?jOo()x+y#K
z0}bS>{=bK$;woGqx*D;s91xdZVKRNgqozI`A^IzFCX0ony4{j_<<pQ-zj3G&b^8~9
z3}v2~8+Z)6y>uhI3vSBi<vN6<Dj8?D^v;!An<?O31>X5;1-$xCmnj<B|6x0wWgG$C
z4IuwoB1m#QL%(ENU)9DgUtB5#ay=WGr%Bs8zf4{;b`5mL&S;&F3CsmJ$^!jqT%7bW
zME%Nkp;KhST>9WNhpRcAU-qh@_3p*NoS`*mVU@xce>0<E;_?+-uOmTkz>^Yf>CZTa
zv^4bmrYrj^Pm}ACwJB;YP+b~Cl4gg+wO3P&+;A*t+sK1cyEf`V@f4ZVg$VERH1T7!
zN`~Mxu|`Varc0+Mmks~PoBkcWZX9fURl!+wggBSBI!$JLG`oMY<rR%*quzYf>Yvf}
zz0IwAwK1!O(=_H_ckt_p`FDA&?qWBH6LZ1)bvv->-ne5R??5%b)@nYnbowshby(MK
zlQx&+!daFN@Hc58^xv*}yzBfFe0Q*-wI|)(_i3B{w@}3Lptp*evFA5kKjgA$y8AxE
zH0Q^jn<nwiGG$gg3gt}?8~$Bun(sn>>A;oZ@>^=A>4?D3_JV2pyO|9<dAs+rb@1I@
zYin7)X-6ntG%k+QN-*#W7*b%_iR^AP(AB#c4HJ&~n8V;8s5xO}&?@f7$(hUc^)^a7
zVzYzOOB)i$%SNQbosCF=n~+IP{}3C5l~px41oZ9S<XtO@o<d3+E2$iT1`GuB4V{jb
zBUu18bT&AnhV|&D$vCsSgXeQ3Wsee5S6M=`_f{@<N9P^Wh-G!?aHEid<4u~Ve%_2$
z{=$G|cv1tY=Aqy-LrUXHschMQ^9mMQG*5k}G(U%51|}nisut>=I~J|Bhe8$9X|iQC
zkE6mgiWr0vKb9&W553iBaK^VfzTN`Y<{_$mOsn2iGX8zzR|;V4fBE_M4K52Rrp{Yc
z(9;q;Z`(OqwLjL{eVUpG_ErDq+V5RKQhXMt!B}mW%&P(evF3`5_QzZYBd(iVDMd8t
zLe_jB8)0UI{My2=KZGtJKK{*y*2ZfcSXb_5t0*QN9=J1}CD2@kh91aw<Z=r;8rWuv
z8-i%Ze8Xqk`{7u{6CZJ$AJ0m#K1vs7tXmAT>_dYwIZC@)M62uTv;d4g!d1M*`uZAI
z*{rXFA&?!^3axbSzDPo_M70r58LR}PM~1*^cna7qT;pLm#3`fj=-nqnGIf%Cv+FKn
zdE{En0`gsc$K}4c8)T#9;!n{E)@fyzjtxl&TEV9Y@>ct4QmjNj6B+CsF(fr@h;6?V
zuA=br9H)J3zw4@!J;Vo*3-tluv;xOA%w%RY-6zw0*p2=z>OMoBLRXr8sGe6O46nzz
zC<t5x+bN{$*Hnsf8=>EX&-~ljIGD}CbAH>-`IKG}o^h!SK~V&~i)joW(i2wH?WBWl
z#D&OOQ_HVsnjU8)AgoV0j#oMu-<me;$c@jD$8s!qX18Dg_G9($GSX0%YqR)q^qQ5e
z{ilZGDGj|q;_*<}Na{>nJ`r*hXpVR$#GnuhgtT8FQQ3K|mSjhC!``LtG@|0k5NQJJ
z1YpMIym6l4nL`>ZTU~xOg~tBVe@)hx9!0CSX!~w)I~n11n8mN;??b-!1C0&nIb9WF
zih2>l{CqVg3OKR_=OjLcMdLBZASfNDYQo|25orVlJK3;fYgC~}hGaNSF-;JM_)gN>
z8Qi^lzqhkBNbU^o+`oTxd;7so4`(?%X$_n-_u2~A9Mm!cJAjK^uI#DTZ&Rs^I<aA_
z5K1Nv>Yc324V{Da^;k#{F|*LCL^50)OSTBCH*u1N#7UTJU9yXOG0m_6RN|QxkRG^v
zD!%>jTh191=eXpLp%f5VUh*3!d<mXvLsEW+G$)$tAAa3xaqp2LYPB9U8m5bRkFk$z
z%^~8sn;In*Zt)Y1iZ|Ndd5P<)5v=e94@u&eM%SvLg55|$apeq`n*0`hauQEZ7Cn>=
z^?^x}k5X<dReXa78sQ$;!_^$JDjaDe*rY|z;9}{Ka-6Ije+)x~e0{^%OQSZfwD@Uy
zChfb3r9Na3wvE91x_Aiw9GL~($TPtc8;u&JYpGF!2R4F$?BA!;>qTSvK^ovM@7`78
zu-xL>WfY^)wPet*zSOEj((z~Ditjk53ViY%O040j&=~FT;-1$I?`f&#*V%+D6RzXK
z?MMRc(OqZhV0zMwPUs!h0i0_iXJcYsDa$vl_k$PL2X+KpPGO7GsN+?zBJid->Nz`Z
z)^l#$LgDjFW#wmjdG-Ol%h;J7lx@07TUR)$L-m-cPSSo;Yv-{L%xXQjsFj{_Xf<}#
z>E0ePObIQuAIw#DKH^|7B9RjKcCh#otc9`?esUQO*t?pM4v1OGKy+~iWW}i=R)vMp
z9*#Vc?oSqHGnLw2b+&M&6nP@d2y8|Zfq<>_Cc@lJf?GeLY8D>|*CErdg%zts@%L+X
zc#tP)h=T|@2$gfgKUUHgO8KSqbW8lC!JjQ4^#U2Ru>K8ZO$EilQsvyPi!{g45yBH7
z8s1?ElG+q)Fi^F?k+bHaIjXoLfWo)1OW+p3iOb`&ActW=7+zktR21G;nPmyDDfdVZ
zL-Dr0>Y1$z!p}L4fb(AjE99COxHPM{_7VO@eWUoC)mnV7Zo-W>>WEuk-;EBecF5me
z8JC~cT)U^y>N6A<t>IB_{MV9l^2$^&1%AX*G~B-NX!s_aVq1B-q5Sz6{?AF?ONiPo
zcmpTtM^CwIAS1S&j8D@%8?)*vr%w(Z1IVFQVHk%DG5Rl^P&vw1Z7znjd#<S<D(fu}
zyF5broeoh>Ex!3TBa-odAC?aN`Lz%IxgGlRnlpbsf8=q0sqI@(m@bO7#PM$EoS*-q
z$NYThQ_kzq@%c8T^L>8t@qSas^*=Mwgw*mXxh9~&I1w-d4A4fij0(ND-#yKY?WbCL
zky-;sDz3>0dn+7mprYm6WrqR%`#4WZbRlaDWyzW!q(hWPamos*4f=1O@q*NJh*FxD
zG!wF_ux9X$;$bKhdF*&LjB`JNQ~FAPTw%`<WgzTCIgbv5>6eo9Z(x77+7Y@Aw500*
zKHydn{UMG{Xi^Vd5gq&%Wb3s3&Ok})q+=M<!-p&5Og?xedh~?1hiuM2Y{ZYaChGus
zb_g~49o9lpT3tWlbb}V4g@3ntDF1QEc^h{C!Z)=Z397HTbTm%u83;wx(GZiQ5W<E&
zQ&>*~Xp_<56QA!W-kOEOXq<V2eMDRq)|x<X5l{J=v(lri$5CFvjw%oCarJ`tS_T8D
z@LZN68Zx%SN1JxdM;j|9Qj`9I3F-lsFN@qu3e^0ROnqkm6r`J47Bq}BdZ-|+VZGVo
z;3<B7P^l_0s{i{ipxtFNRkpTnZ%o_(TEF&8bbRB?7mTK-AsAv~Yx}|N4Yd+lvW+xo
zOI$)NMH*`b?+lzoFay-{wcu;r5qFt6+Ub~0B>~!DN-m+~V5PgDqsZP%A2W!@X)@gX
zgM~aF{V`#8%oJJJt(+K7dsehaC`?=1?f9$+P7?m&P_qQ&)VXG8Zp3weYW!*iXA6F|
zWk+3U(nFB1^w6E#JKOjtqOur6=E`>rdgg_fS@4fVF&t$B{#DmQM$=Ej@BTYi9OS>G
z{=kfq=L1Kf8;41P&j5lzeZR@faDxqfE#R7%cQfi@-rZ_p9)fHvQ?4oA+|$8Ob23hU
z4;hR86y|XkvvkVI7+OuL86*xBinD0g<W(RjiDVtYHDC$(mOWc7&-Zit!WH^{B1;wN
z`-S?fb^144qyHHy@Nc;KzMOhesjYXvb5OExrI8|&JdMv~2`#9r|C@*kd(c(=_%zhZ
zvrZ~AbidR80?Nv@Xp<<V*70AIGILWiT!c@+ayS4is#&-yR)MGWrQix&dt5<Xm87s<
zoV%*l`n~#E!vD2||AtHWAx5>vTiuI3q{gVc<MP#-J-xHtk(=s!XI9ZQ^VxX5WhHx3
zAr0lXY{;0cNO3x5Ox*>CqFtT5>+I&CZzi+igahM84j!w}ARQv2aIP2TeU@r-RQMFy
zGc(Hi{aJoRtOGyME5IE%7IG=#fgk?!fgZfdL<72xVx^DTAXSwr6E8<NqCC<rGSjCN
zy&yd`yB>YhT2txKiRPW<=DuZpN#1&~vP3Eo<F@#DxVDXjO$Yj&OUK)gT_8Th&pD0~
z+xu=t#geg>)2}ki4U1N4o?Thvbt(69Yl2ktM&Bat@a1{9NyVbg8J)Mn+txVMFK8Es
zw1u!(jEz>4@&X|4<@_WGqvVao(@e3O8Qy_rw(`W8zbirKDOMqfE0jUe5tG8tg+MV#
zWZv1*{^?AUzpQShT_;kx@bRl${VG>~8E70mk5`cu{KVygLI(bPQsOmZJ6}smWcsKK
zvbSH65>;$zxxEyM*vna_qeuYm{b72{Y138bZU9@ex3BRex<;=Wq5GO;+uh2wX>_6h
zV6}H^!$+SyggNqQBr;RdjMI+x!v@<7m#rkG^t1mZU|%XVUpEJ{`!4{qS5rCm8DMw+
z1#tKTl0mW;=PS?t8EG*k%SR=?&$_3zmao3p7h*iJGFu?sX~_cg2+WiwdYaPT+yNIK
z@j-DP@TH_D#A9tk-bqVthS$LP#yL`FIGhOu_X|VKqb849AUzyMQg+P!4*LfYf#8NH
zQyh_a?7Wo=ko@YtRGkw6w%_a0+sprs_Md(=`M;_rUs5$uBEEuZqU|0oQ%!W>&!?LB
z=+(8<lS%OSH(@}ctfu%2Wt+)AK8M(A(QqkeY~6SgMP0=FGiOo+uUsmff+MdN;+K>b
z{9iS*Vt?;tZD!K<2hrQ72h#6jmS=hFHBhcMndE7aD6r2F9gCSFUPvy(Fe#me;F0K=
zBs2c7x<UU&law`XX<?+VeUHI6W(tT1ubcC@2aR=0@JO_DHfKzqr(B<SA;TWx!yU1f
zS0M1G(3#>uWIT%hq281|{*zv`fh^Zzx`DK`=fL^dU|0q83a6`Wdco7jNWyBLOh?1D
zb{Rwx4DQ&_?28j3`qq%sQ!AUn9*?5ze&nX;<1ENRv2X-8Zqg2US_-2MdgHtX#w6{x
znH-ViVHu;AOoz1$3YaxBkMr;j_un4uUA#oehr$*IY72uPZKUz2#VPA8BCwWPI4zBJ
z6tYOsDz@b<?qV`LP&-JKjsoRfhtK|eKs!5#_IY;G^J~myk_}p^JPw|~@8+SOY;)&r
zKC5I}us8SO@oB>Igpdw8lARAmU(hP|Px#wgNq@Uz%z*R|d4ay4kvR^K=EsRK>+8=1
zpQPr9nl~Bb?)=E>>(Rb!Ht(J!%{0|THg~&0KZ&}S_*X4B6p{e5zW&4<Wu@xq0BeZO
zXovQ?%gG_T>+2l&hYWi1_SxRMXVLqEXK$m?IY0IN{=4s@7q6f1zxsXS`P;o$?;?FV
zdiPrI`MreWcku4#Tv~%k1{Dvbaus65v<wJ<@m-`#_tOaxa6FyH(CysKmBSdVqBRjH
zyIG<w&S0-n#G0Km{oK}|x2q``UF|B~b_x*BBO9ju^HK^#6s`PKP`{9Wu)Vpp-P+o0
zZQWZzYtNMfVtOn)>Ea>x`m_e8E6=!TI3C*LoF{7qy0XVF<}8QOl>8met4jC8`FNKo
zc~|fKL!KPd(~oxlpa+tU$D`dr4?D2?he0oOdNnR=&@U}qY9YM&XoX+!GyV4umOXL1
zL@G5IWI`}T+Dd-|Y#vgqfMEbK=-^_PI}^kH62uDBP(}{KqA7p}T}eagN(M-m8^;Im
z2U2SY36&m?nJ;p*#=V~|*c2+eWSJ_XbJT!H9ce4>^|!WnT(Zhmo0d_T0@wrMro4}(
zj1~H~rK|{P%RN441+S3bYExF^dABTd5o^M~%kJTJHzk+I!V4ic1j~?3RAJM`j9uax
zowv`P@4tT44bzaL(>Ryn4OCb9<S;#KjAO}*$GzXGowmTkvBm*HN}zkZjnDfu*K6sv
zxjpNKsc5zOYgwh$r%Eokuua)8o}p!&AcvLWH!cgtLM&pHkK+F81Nx-HU*m;OD$`gl
z<K8C4L6DkJR@N4OL_(va84z#Wm?TJSMO-FA938UYyV^hzw;w9isd&Em?BkRa6Ae-!
z9_kykd4n1joK7a(cQP`I>+QNcsY6tE9KZQ5<a^s`<~Ew_>`^j8nmvQeN~$6BR@Rin
z7>&b%k0z;^L=D1OtUyL9jA)U03Sp`(*MJ7Od7?F8Opm46wkkGsC2Up@uLdEkQj?*J
zOiCMuS_l*~2d7qp{^47b7~tFDXq=VOhq+E@k$S7(UU|Kt)dAUjB?1N&ir+l9DIwN@
zm92g{YS^xu6@&iqycFmFke0j#<LLc_gmw{ThAw~!yE01HrT*P(!hqMpgIyUN>{6%f
zHC?p}V8KG<B?rR8mS*L)%{u?0ZIX8|;@5qCTul<Y<+9}BdN{Bvqk&zDXmdRjumvz+
zS4IIV`JwAq?>gvT3*f)5jQ+L6^s1;|cGpFyUkhNrmPY-$yL0cslC)=sTzHwo`oaj^
zi&4+#;J&Vm_O-<7d6X}&+AhUd=JB(x44<{c^!UKoC85D(aI-?qpg2j7rq@*t^x<zJ
zaniW)%9?^+JhZDp6OyuRZzEbpPpPbjgg3GF-uX0Xp<qX$>!BmkX$uN;)Bz*OPLrU=
zlTPFNq-TDPB3dOie68KsXR32m*}hHv5RF5^_c<(kXad^HS};U{rXsF22+e$WUZllU
ze6c0}a651+b6@44po!B}fM-%j<;iG5>kZ+|re0-77;lCBlBy(#gTn8Za)Zpf{i7er
z_zFQ;S>KX|DY5E4buPd57xJ>!^;2<#UR+ZFE=2u3IH)SW2M2-bTNGhpKXT2E5`)yy
zf_sT4a&}YLb(33wabA%$iRNEufFhmFXZ2$mUpSv1Q&=j~3~O?w9R5!X=r56j|A~=w
z$)V4Ob3yWNu>;8cUd+D3UULk(Ma#$};;^@P$G?VdzlLtVWat)Td4;$w-F|7%7DIl%
zi0#47wb**G1Fn9sgFKRw1q~^&BV1gXPe?YG>GkE7XC;L}oEo5jJOKzB_lh`=;t^+W
z(B48kwk6=kl9sbZTzj+18`$&ZwwbqA#5T>&oi8JKUEZeT#WzjJ6afw!?+(|Hjfd%o
zIL$yCW*{`hz;6Ye?!*vUScgibHNX$6-+-Uf>D+M~1N*Qi*ldUX8-{Sz)v<*89r?VD
zeqJXX*KF=LZlspRx%Kw7rki8(5iVhEFUPO<q0TVGX&pXXza9Yq^qvyh5Fe5N>C?ha
z^(8T#s~^Q^Jx#_bo1w$_TvQp2+=w`bD-O|9-pd>eoVSX`vMzEb@u?!um2-#<8^&Bo
zZ7DeQxHC{@4xL(7b#h*Bfn6kQZhaZA)CY}ygOnrIS_Y?hY+#Y+f|OOFE0RN@emu;M
z!z=`>3E6aX7J7`)Ge{;0&1Bp^XEz@(1?#oq**GPQ+N&#9^jzKE-dIzo)H&yg1^9m_
zJQ$qi*rS3(*eI5Q7U(u{c)G;t#RpO1xvG(<Zpr;vg4=bH7brx<&H{aCNsm~)esuNj
zaSOB{)V9s~ACl>uBVxxcR3W45bsZW=q8~K_=>>%bbT3>ukZ<a>Oh2!vwxd_Mi&kYq
zzF}6h)R+10RVDo9?+@%`hk29>JNB}FV0v;eJs&1>Uxq7mGI2?rKcZ#Y<K-_S1B&EL
z-Gt=Ik`v+*bq-l@mr6+LGgG`7C6N!j(mt-n41PRzfE*5~DyR^_EDm;H#FCv4`e!8x
ze2rlvj)pi~Z?|zn-~G_ax8**r%xHhrhrjB>Urrw;4siu_xY)T=8)m6<)5<W3ukRNq
zk^v;?smG#=F_C7_Z;#V1o@d!HExSOvSQ|aJ?7<@XlrZ?+Ty|YyNrH2|zv^E0<e&-X
z74|Zns)z+p40HtFT$lk5p<_7rJR@F9)hEcSmyTnNFtU$g(LzM~<0DjLOh_ZHIi*`$
z0QD?LT_G|uEsD&9PU;^kBx1bG8@P^6qxQA;UO|;jL@R7Z;-nlU8jC^SvM-~kB8}1c
z3oGRIp0+O!KcyxCu^G4<%geG*-{kK(;YVnn*qLuORDj;ZV3Al!8(&zIj<&IN-{pdJ
zEY2IUE4E+EE(&OvGch0!Y}xo7i|BytrG<u!<vEC|TV%tTFdIkapP))Z9o>*qhT-0v
z)4q;3o@WwNkAA1;h=#6hRK3~xG3&uH?r>-D4nHLnzx22uduN%`43G2ldN?bEdsqf~
zPJdS%u=cZO%Jxtx+k_PSbjW4^FJgkEPvRG9!B-uu?p<Hl%j)K_l&jT!_!a%Fbzat^
zPbr(azC-r&R8>ik8X3JcWli>b$xpl0F2PurNXoGct(PjI?Y5=dja{YGPCI&%P0mH+
z<A<*<-LER_msDYmm0U%URkFWaowdO~qlb4G_di@uh{%&VL{)s?w?KB_pC!Q|nnH-)
zEg|0_DI1w824?)Wtp_Q4i)cH~;&Ukrn5Dx(c~h+ZMJ5%NzU*>ZACp-ah3%b#hWKvi
z$9O`@6S=#BTmbVaX90RR>wWd*vUP85KDje8dXb!fr1K1-Tva>CYc5SebVXTCsI|vg
zJdCXA>a^5CHyxj5XmjHqwz?oUMiZYT{hPWj`LSys2a-cekFwZhWfyIoP3MZ~sqy+c
z=N*q-UXoTUh3zxn??>uwI(+hCzpN1MbchKBw6`mtNB5!Um4Kw%(6Z2`Egxs%PxSBU
z<-~I6-3)Tfp7`j$|Lgx?pNLhMtBMhU6Yyr<X2uvUn$eSeQ3~O6rE#08*J9lmK%Eml
zxCzVtRMTXWAO-U2W3Jjstg97$GQWS-EtgYwB_Ww!**zAT??%V;4HNo-|Jfmu=qi>D
zaNzs-InSYcwBfFA(EsnS^z8a<WeI%v=z#8_ZyF}#KAAvAKO_m-_D4>bs+YUfYirS}
zQam#rSJ|75=~bZb^>tbG-$ieHodP<J0J&0|?$CN>=#}i~GWj@RgL1X2lvg0Py?+u<
zciBQJ|EoQj^@eF*e<YF^7P~(Z5#R^5M*Tw&Bv1%3iCtJ-_%R*r(jf%swEl}PtZBn^
z=@PQO&SsTBjyUrI{mZk6@l8(9+Wawn%X?30@30Yc&uaH$_OaLc@BjM$b%kw{OqNXZ
zX%dgP{|_gi@xM4{pF1AK(jTddEY>!vYPwQ3K?3Wf(MPnqRYa}-h~B(Dco)rcOSE)w
zk4FF5h@#ea(F!J(<yw)v8$C{lFXj=??{BZ)ziqvH{pV+|R$RKgKflw^W)3ED=1NE8
z^y~dCo`}4*MSCnTJMyA-yR8@S#VwLi?>4u#cW&=JeiHu9KJ67&(B9F%xihMtnd7*S
z3E(&_)Xwoj5;Gl5GPn!)oWpUcy>b?`#*xU<IBR7SIpC%H<3I(##ArY!C^^wRB3ky8
zu*?C5)jQ}6g{>P3qVfyY%ik(XW*<mX>JMpm3OoK~T9MzZz$1&u{D&W5l&KAbV<k&&
ze82@`HiU<4D0d;lE14z=rkX?9%jAp1lf%M+5BD%baHcpP_mvCTQbk?)D82-IuC9+k
zuCF_X0^9I>^pQ}7(h+PM>)a#w`EmR4FzeAv{Ong<D@WqFTuVWpO12Ymo+72U#`*Ak
zZgt%&e-UD|V$jEeTogLsbYXsS+ugLO{al`#(zNgmQNO|c_z&LnjmZ8b!GkV+|1{O6
zT;hZQ?*$pom$eaT91%C^VG$6+C>%~P$s@yMvQCa<86^`YP!?-XOf<q5h{~{%7stQj
z{r=TFI<%w2<k*7-CO3C)`#c^EySIq^GjOp2r8sEk5+2WPWxI{`)b;9`d#ezE;-spQ
zxn3m&OkHZC*BAsdiYB18`F<fHDBTyA6o2V{>13)gC&^XJou(zCm-a&&cS?InR~@D%
z#WZVZl4D7^T#=BAo8dS<O^@Sng4!xetg7faJeYiRb=;WagbhZ!G!~*`cXXzZd$CmE
zTIWnb$Bb6Wimu+jB3Rq_c*XhRe(+0RLG$Z3wr+3U*-((pR(90#{0D|{ET^NTFO`3-
z5f>gozfb1c!ja;DiO0gEW@9ZriPQ0_3`~X%2~KMUM<PD?=$gfG?>1=+_c3~?&Dhw0
zE<N1j7H?9}vK!rk^u5)jUwYZ#d^h^j!RuFT881CLU;Rnn(0%**`LnmtZ+^l*f9^&<
zuQh)4Gn&82`y4!~y%wEN+sXK}O^dpE>-(1-l#0IEd-?2^Jp>f^VRpRAC4cnXZ+@~t
ze(w5aanforpbgHYoeZ;cWbGOOMa&t5h#HMK(D}JOWAn=Ezfa@dL*AV#5dEXZugd49
z0X+J~lanmd-n1*$NmdH+BtbwBzUL1TtKWjY&XiqlY%3$NuTHs|v<u-EFLcxijqSAh
z_DJZhqj7NKOkf>~Uo*ASx#A357qy9M4@Wyfv%WweaFg8{%gQy5Q&Yxi2V7hs-HH4r
zlE9}^nNAxpcUVR7L(=MHq9UC89+)_pyv0g}xQEySX$>bDc_4j~G+=bH3W>!kgjvRL
zf)sCz;W2i@W6^B}jh5KU<D_8OC+l5bO^EQxklRdJjN>F3!B&!npmP9&Aa6PJ4OR6?
zI5t4|tP06r^ouTQL)Q*J!7~W;pZ?^N@$19)IyGl@=u?-_$(=G!3TefQoIjeCF}G;+
zFqdM9Nb>PI+vajfwmENTg=|R6mhoPQjKw~3YIISs6)<8roF`JuiuT%mYD{L4)c#A2
zD)w}qILXMs3(wtNvhr*PQbmiipgk>nDlXO6!yoF0@zl^}pm~1Q&C#i{3eepBqx<TU
zga``n7@DodH`;?~1t@}f{Df;&EldPfOk$LkHgWr@$JfZd{D~~K)2Tty7Qz9#;XG)e
z+;Vcbjt)U^G)uQiHvp^=eRy?G#=DJH^oGq^+f%ZJxlY?YlmlU>X(0XeMxZym$<tHt
z^-G_{%}+}N5*#|Zl`dOnJs~L?Do-XtE1)>51;x%*cTFR$X2f^>W;+$85S^iGk9L{+
z`+*Dxc=fa>ktP?Ll}-}$7Gp7`-J7yG2Kt+&biX<Im;%l+6nzV{7;F{?+2YBvenQHG
zn1uX)Ha7ff;R>&0NR>u}0r#>8pU5wo+hfam1_Wbz*f?A8CJ_}Z{r8_T8d{O46{Sxb
z8w?*(ELQuVmD1-G4Ms`!@1ZB&OUfT#Q0hKPle{r47rup`o{rG`bu?)R$#m>iy5}AL
z;%|voY5f^?SMFVNCKV8ZgL5JE<{Tm<iiaJ--%mR9GXZwqd$VszwTQzPWg-~itg3El
zv5Ot#VbQ;fcJwVbZyeLkI#&VYO{~quq!ykg`D4~o4FvhRzA8jrXiz&(@@$;Vis5;X
z-ReBSZD*RGz{^?M%y$ER3u6CcH}W!s86$rSCmQo`z9*!D+OR0LN^5ah6dI2fmz>bN
zsS~6%(^S^i@$KQ!DjzF!Z!<wzmiNJFUgg3X(&#>*)?!Vn<j2~X#?8!>OrCz*z1kmr
z`=aoj@~tQggCjj;P3j;(I~P=II`&oOhVA;!(K75q#uDLi%Kf1)up{t5U^D=8qSmya
z-~Ayk{VFSKKQ-2P5@H9~NbkTs9!6d6t{mfevm9u05qQ?Bo$ZGYA4a!q4R5U}Itm@N
zZ^MJV%fh>~n0%kSw$RlO+k=g27#<ek{sTYvX!TaDrx_NB9|{Fl((syI^MpMXtKyRs
zoNc*RUzGIPaN{z(nsSd-LwC`|+YMIH&|75v!?hCB6(0QOC_(CEX&Jl-HnNuW2sbX6
zSG~<A@2=W?^6Q1RUujdx@C)W@X4+R0{Ys+$`XoBx{GtXc(6Y+KfRxn{6QWzohW@~N
zWdA^pK1uw-{>`95jX`oG6zj;fIZvt0Dv>rz^tranvvrS6g)Wa)JYfo5t~B^YB1})0
zfg-fqFjeN8<>(UsF{*U*=+ZG(S86G7Wz9XSUfzcR74j|OMmb!O`+ulDz~tBo$*~dY
zVY*fi=Sk8N=EKrrxy$k<kY;r)mL^Ww3E65sGUdsY=(ThONum!y6z#!mG$~epTEWy-
zcFX(v^IG{SL7Xfe{sbR3;yo>-Q!%EOFXY|8uq!_YpUL$6O_-Y7;@CtG2`#mVZ8RRA
z8$58+o3({Ah+Xl{qG6=Ev~1dQ^dsf2)o|8+mz~kWc`&}*QAiuZiIpGuG4bkDlRexU
zwSFTFn=we*q~$hh2VtKhnHJg5b?Rlv3_k_#<(49Qr1X{w*bWbPV0oDQUtG$@n%v%L
zhAfnmm=nB$i&2aQ)J3qMJPsgFB!_YuBwAvm@9S1ZZkbz)QcB6YELgSJzp&*xrn^tu
ztz-x5mP%j-nHf2)VKih10PsV~;R+7(pJf`#m#VcK&7oQ_{Mc+M$I75^Z_LNf#Jt3i
z4Phc21L?SU5K%Z{RCn&)yZ>Ob?f+b<yIlfCI264;QSqj`UE^1<2|3+_H0RTJIMeiP
zZnOi~><O8e)89)pQXF)vLCjE#QgSxsZJ6%LN_VX^N)Vc?uB}^DMzlkWJ#a@aJX`IW
zm5hg+-IFkNnSrl+vDzK;J?sdX5l5M>u}3G^9y%nw^hZf`<H+$;!_4UvZkE68y?mkd
zr;IKEw9;`rDNZtYoV};reGj`?Br4o=yyD4=eWc@O<Ce=kI(30cCz^b{XWXOlnwBW@
z9uL>h@5%vZhSQVPXx^&W#IeTxld$Ttx)VY$n&-s^c->j>Y=FHu5_X@cPl!99%>uuh
zb^cwHrs6X1T%gx;AGO|v9t(Rd@i8R3vt$z7*rB*V+-k_Jd<YaZwppU3C_K~wN||}3
zFcme`Io?KE>om-y;xv5EXRwK4nlguXX~x&c7S*gqi`mzvgLm9j9zl+GX$*C0#;#53
z$hM}dnMH>j{I41PeuuBf(Au~w$S0MHYueB>t~yyQ9zw#-%Q-$69E}j<yxKrVkkdx;
ziU!RA9|U~=vo;jB?*x30PMvprIsbyzTx03n+DLzn<5ZcBM@cmpScd^xtVr{rmA~4v
zD{Jt*%$gdXrMYzvNPck&(Q~YTL|7)cs4FU2{wJ}dY6}7SHC`M|*xHnEf-HL&On5y`
zBtDYDUmBkW&^ICEtEBlcVAX<^kea|l+03hNx&E@|YOp6js!_<QPo<;z)pKcU$awct
zzF-BnTJ{WbSLK;-A#G$$T0zFvG8?nqk_Ry8+~z=g{7yE*b)GQYxY77N(JW5(Y#tV~
zUIC>T<svy9l_83Vdc*8^Lm6B-qD0H0P?M_L%)KG{U34;|zbr$0m}L`1|MBTMJSO~P
zit;V3s*_R{_Ku`s+a&>FjKz7)O_C+xdT3l%UJ{O=iQIOB<q2bbUS?zDA+T#YkH=1$
zA~5Hg5*A5Px}h#OO58+~I+u=6=Op24BGGT@XRcnAAat4Oz>7NL+-#8o{**CZkk2O#
z5;P@UNyr0~MlWDQvrCBUF5Jv5+!zv-tqJFHjdb;x(YTo)0L5FZK5QRyWto;sIy9e5
zK-|$j&S-viK5EYC?R%X7;?|3n;H>(A+(E<14U!VNDi2c20y#-UlQcHrV-@9=+mTOB
z(Oiz=|H2#&j%z4m-2Ln+9cN;PyW1nX-EQtS{mUh;S>6I%&?9<K(y8QhHyVd~S32$-
zn~6<C6|(}?8%rFz^}?DD(!;0e(Ccj+WLhm`M2)i!nhw#z>3-0L`%vVDnw7yhNMXLg
zD3F%^F`wuzWdUAEIh5MDathnFT2RG?c)s+X4EDxs(f8I^^x(Ac57GDP&tfM@F(;zJ
zNNsSG&c+hEP^8wu8wqZoERU@n?Jc;2%@o<)k&EBb5!C`Gxi8^zg*^FD@?^?Y3gx7F
zUxG@?Q)r&K6@0(1Yw9ySPG&uqzz|ecacr9xbQi#b@~Qj5S7^9Qzh(JUvaQ>jI~%%o
zp>?I=)fT6<D%-iH>0~q=zmYdTrR`;=q%+axb#OM3SuI*yKDy)peuI0~EWTGd%uUU`
z$wyAA4bozQLS)wtqf8}SC^^ao@lYxrZ8RREkjfk{+GJ8wQrF##I-<^U?M)!t9)sdV
z8Wf46ikQKs=Q3K<HCj0tyP*?WJg&O3onU44{WcwOK+10pjRrZe4_7v38^#VdM(3UK
zJ=!Y3yHOvmh||e*HMyX->FPaPQFKK;UsBzplhj-FQvPto{@U8!(QE2s?8NzT(Sh6Y
z;ZG|clJhNiG+CZ*tu!P2vQ59--u_viI;T%a`y|I_Blp-*mZ4$7O8+EF`|_OpxxMlO
z{oRXmzAS#lJzSPQAFupC!>;+TRM7}SF8VFO(O~j1GSScoFOiv7Z)mY;{#RJ-efYO7
zUv0W+`Q;X$aQ%Ak(Q^N(06Y2#WuaT)YGbjn)=_z}pJA=-8CvVbOHC`iXrVDC6bN2x
zDf2xnZRTYMUvDm2eD_+Zd=+Uga#_-!R4tR27dVP|NY1q{gkZ52lHsLOkb7IWcc}?j
zn?3b3(mcvjXfqRZCXW~1q7z72bQ$JCFl9rQ;Y68B)^Kdm!V{7gWOW^`a46(4r9hSs
zR%ygZ%HQV(=2}cnrbP2~+;}xsh5y_N&Pw^9-0}gCTkb9T<67ggdC8gjtdo*gxETd(
zL|1biBIeB3F0PpP)T-l^3q#uyJid93bSXP>i;WI193lMzlaR&L8K^n%Z3S7Ey*(xU
z-HJWZ+<|s9wec-fJHdl0KQYMqd>TEf-DT!}P@5_WMXA(PG($<ZGD89I$Tg+5-lGc7
zmRjAWFKC94WpRdmz{`17C_R+kp4ur5hGw-kR%$;g)vzS*`dY%M<5`EPUUCu-kLYV(
zpa9k7&g;9E@JV=oW5qGyJdy01fNMf}qH~x{N<<h0ui;9#=o?pjCuHwB;Osgkhq#B$
z^&_jcSK8U=5UcUSAqun|KEV%GK=bQEtxJ(*$S=dY5K(>41096=-+|=phdyYVn_ytL
zwA>YO%LD#%B^suMV631Z5-Wjp6j!mdT)~dEaq_L}2Z6I*YlGX-6J2NC5p^|t3`E7;
zsdHVoBQ7R_d36gXXPhjWR>KS@k6$9$o+ixLWDnlqRtPJ=5uS7!1ZNtr0l<(9k6Lj5
zvPLiQjiOSD)xk|2+*CqkaJ$D9^pRV4nYzl_=#cxc=~bS{!D}9Wloow5b-7YnB91j!
z0bDT`gjfKR6c3VLmntJlB@V7?zFaI{@*9y|lb=hak@AM+O|tF#w;7M7rD`PVjFic`
z`XbF=jJ@%kA?&wgO5v|+(zSkdVLs8Xer1{a^d~1}uxIIKD^++00bT^2hK0xPfx&vv
zDI^_g-e-N9_*6+QoGwndkUazo6HeD?ymzLVM@X@X7YR$6mw-u~9U5hB8LiG3bxO)e
zh`iSX*XQI4^YF3LG9z+xQPy^NAv^-Ga`}3T{?F+gjEJJUu7LMJgZb~}Opj?p{=Km`
zEV3p_(}!TM%wx5%sf6+CAb!hjKbL{_;A!|2;pkbOXD)>q@W&Ey6!4^@qqNT|uZmOD
z17@6?%^gD%JgcD}H;H^U2FuBYCHS-4_f3pyKwrltz%2x56F;v|P}0J^tSBOf&q}w}
zp}TE%c({(;6UH$i1l3ddq+I=Li%~H+)MpqSR*Hq|0<rfxc2h@gD)lQU19dF!?P|1l
zA*vdELuLMK%~;b@KtB(Z{dw;hbfr`>(9n<bPg(B*Y_MSJYyu;`ppjSNTRBRjX^a<S
zlp+(Gj9SmZ?{y}_cwBUJ+XBbGhXoqSgDrZn<pj<e3A+TT42V3AlQX=*r|2Xh@m_7?
z1CTbprKO|LwqS<zo>$V{hUnZ?>T4rej<|6=hEquj2_d7TRh-Nc%1H`31cTB*hgio5
zOj@h?Nu!_DMNA%a<Xsxz45rObkXRwM-)~u!I;aJ_QcE28#l9T|cb*R?=RwI)Bf-2<
z!{!x|cA50M+#=PNX&)ZEeD~%mwb<Vjqv>SLD0!~38@*1glQXk%cZVx{utPBS?3Jcr
zA1F&_GPzho!_xy^pz}Zq^h@<Jx+Yrh$c07YX(ghj>!@8$dG~w*jbBvbA;L|q8HlT&
z8s7-%DN9lIRW6=$(Cs!$y?!NHRPqb7MZ<+8;WtR;s0sXtGkE}Yqv3bKr*t(Jhm6|5
zHfY^>zN>wH5%3QZ6hb<4&nv!Ja+*zw>y0JPu5o8w%>}ASi;|CP>X#T|kpx~Ce1bUi
zX*x`fC2LE=m`<}7QT&Hrw_4GQbo`-+TCGQo#vzGs(HVa5pjQ`&bbUayw+o&q>#28d
zKiGiv!_8&Y589|$YP*qOYn4~8Cc!Ac?4q-NJ;*M8kOm;`QU&Z{hGSzTV;bs1Iw7+s
zZfE)N2L82ifJ~O8^O6{N=Uq<n=7^~FO`c7&euie(ay`QJ$gW5Jdg>IBe4I>ub8c2g
zU|HtbnD(0yC8u~?NrveERW{Y&7f*fu$SE>uB{>Wl|BOrnDU?(S;xtFNNIy}(AcmHR
zWd)9OJ%%lcbS&Wb__9xdx4agr=B~rU#Os&C!=#yC4GXgbkbVQOm`h+^-ZTuRZz)*8
zy5x1^3#DFy3)>TkYXA>fn-h>f6Fo-Z5@xwQ_k99o7!_OP?tnqt$WlMRPkARNBh-DT
z%Sot(x&O59w61#9ch>dryODQ(#SQ(68~WvNLqVli!3<S#aWP&flm6$!3LR%>N5l9-
zay{k4KOGEJRYUCea%*q*tTgu?TPwh@iBzdyB_DMUAL?8p0-=vkrnG}Bf|=;T?N&gm
zuP`Ux*?Aa$h0Q!PWGSMKYTEjx&e(6<>zF@;()~DARL)Sohb>t-fGVEnn*`Bz3%8us
z;FfDao1Xa&))zLgzFsfu>mqE|XcNoo5}()>@j`_}!y+Az=};1%Zig&<65MxLM_m8#
z6UkGI9z}aPjQ<Nw8Nz=C^MFhj2$N3GB&T+IdSA7f&h@8vfF9Q9Snw!%d$1Rwf6tpZ
z&8tm>8Js1Y-Gb=}h)dn<KIim&@7;^1=kKd_kh;?JzPDkD<&MU@E?7T3cOPSdl^aK2
zVS4XfgV$j7<j30Sxd!W(OwZjnzj#-f-c#2&c)8V+=4h3-)l5(CtC`$2r}rp2WWCpZ
z`2qCEFDZiQ!6h^IwwmejeY~*}Tt%Ka{dU#q)o$)vxP@x_YkyVT|5qvQSJJB;bzMcd
zcDmJ^%KP^jvBm4@yZWdNQq^?%$BIhHzlq;6Xm~w|&t0FIqjVgP`>3lctjW5Wv~%57
z<hB0-y;hEw@3q2n{@3cX@@4<?FVN@Z%l_wDU1pwhd8nPO0ldK=B0XWVi37inwzY)=
ze8xwpm_zPQUyx0ocz6Ufo>4gLX*RK%C<M3N-EX*afaE!Xx3O5%ega~LS<^4fnJymC
z!Rcim!@KRL@YeQMk@wYC_1Sz?7y6S#f_z4g5-=OCDPHwa8>A{;`NyCG4gb4Ns?q`N
zYZutC;Y>-A${W74B$Zh#Cr9OTO^!<LX=Q+wUr@UKVp8nt(n43|X<VFeBbcZ~=8_4F
z0{_z9WBm7lZ~Oa|D}Uw6UowIqbbA#uho87SiXa1jMy{{xc0IoD9`*xOdB6S~aDV-!
z)Pju8_qe4S_bnY39w{CoJ%OVHTqO|aV?%OqU33&$+P$452zMwg*E1YgO6j*QrF4%d
zirM+T&X+l?YguOFg{2gWQ-yo2&6a?tc{YE`lDy*i*_DD5x7LEf15RU_8eR*%Y&J?1
z_)6Mqpd#ViYMre};?}|<33&WAhS_mCzE!P~u=jI)giGp|QuB+qZOuM}^mQ$;1*A`t
zlby5z#;yH)?Mn*3l<Qi;ce@p;++9mFAjCB%`B0XD+`phj^gAtcd6N~><6O*gPJHnh
zY{|!@KckcO_gRvsg6ZPs5Mop0$?<F$=kr6gIZf~&Js!7a6HeXJ$8Qz&wJW7hDCD_n
z<x2EOT2d2n@~%L393VgRJ9_;EtFgfy@6b$Eb4eMxfr}f+raE-}Pyo_dCB`L&RW8#~
zE(0b)CfK*(5o<c;_x4lJngA2zQG%pO$FcO4cJzjeN+!A)e;=+e!RmeP%bq@7(S$(G
zq#vS)2UN;c2mbpR5FA<*3d2Gjl7WbX2j|D}Si5^^1HLdFo^Onu-@1t&PeVD~&X?_S
zCZuePGvIk=0z!3j0vIOeXFu2SPSba|?*WY>SteZT75MLyL8%Ut3zOWO&ZV6Ue;j`l
zUIL}bH7$Dk0zy<e&W#6?4Bew7)88lpEwL1d1VaWLLmEm(&AAG$?i=NH2byu!^;K9p
zK$oV{^`%PK{dPm!-|*qK>EW4eQT(uBqKDJcT;7YM*V>~0=U@c`Z`NL+1+-qlF5+{A
zHdCWt5%t8w(ACCxtZ`a7l6u*PC`Xcf+DSG<DS`A<<a{#ykgm3x3Z6gb?hU}`lXr|9
z@<yYGkCLHp646y3qhxaGK&27Wu#;xekMU$Wm96I%n293VYbI*Lv{F|Rpj^Vvn`BG-
zX~@g0(pb49*zbIp-K?+?&8pGO6FKwUcJzIsg~!ZRF)&cytt^Ji)1c28o`#3u>d|{r
zCep@PJf2qTD5PRTGYKk)Y4)8>GAg;gy_oez=~Vb3W~Yh=xKZ~iWhM>)f%(`PW3a#a
z{B?}$>p(^-UAu_>w~791YY5lZpZH=($7I*nBR{$x)GWXF1>3Db9-ozA!hm2J=lv7*
zrge>zbi?Ccs)WKCmcDGsckj^Q#(T=|=K7J4gO<2miMfSkp(qMmxy~$ZyCt4)V3U+S
zG%PM<bEGfVx#(?yEyJns*37Kr+c=BQ9nuqUlYIM3H1tB1n>!Mvl`fjNU8<H9<JO)a
zUct~<%Jtk?0N@fHn#BDN%*UsJQ+J%T$)p@?d~|qY8>4K{rddfbpM4V7^968Izi<4C
zHfL!lcF4S4HyWc;0r1=I=?iReVU>Pn!`X_nOyNQiEqqjH);vKGrJrS;y|q-ynN7@U
zw@i~SDVU5He5eSF3@%^+U~9hdZHYbuUzY*hnRIV4#8aVlclrPv5jHoV@f`Zr?avq#
zFJb$bwlPE1TjCA$dt#uwn*hyJ9$=p=k^~v$eUww|F=*-ZB((mbtvk`nbWF;1VY3yh
zww2=9)>NK_Ph#s%Yb1AG@hz?B4L}pOqbIJ-7Q27w&I{iOM6uR3zYNFHt6k+(h)~6&
z#fOb>9=&~Wz{<Z?L<<xo=gWU&Gj*tb3wgcUi*lAl3tji}Asj?HQcFe(t0>pzZ1kKy
zW;p0w(@1wuyP=*wo-@<+_s|;9=R!xVB>8E1^sDUPFE5;;Ip?T#ulmxyS~rp9+_mnz
z7bM4BIVbK0QteCmZ&yxxy8(|b&j6V(QjHimb6>e1O^$>_rZph*nJ4a^lC#$hc4;P2
zFoUP1w4n=TvCIrEN*<DAp=^@OCE@Uo2F_Uj`Ae_CfpqV_FxhJ^4d{KC*>%w@N(uW5
zX0RZY%O~r_zO=&4;Emb2zr+mCt$ThA#E!je4=yNL@Q<BY>pb<ymMWUQMjO6H8@@;k
z*pcUF3<#X2AFrop@PjfyRlA^{D%n-^i|Q4bG*%PO36Xp+9U|ut9k}Bn1?HH#P!zq{
zV~lE#w7SD}yJHv2pNbEZ6+)q4rCTYx>$5y4Q80MV!9WglEMI5MaA6cW6NnbXf0i4p
z5Iw|=7(BVioTM>4poSX=+Q^z9LkSGM8`8ei`_Z5<qb@BTYOA~0e;xEVdTG-?rXQ)R
z9YD^zronI<KQqUmx8LV*CIt+yjR+1bPc=jXw(Rb-;%Roajn(>QH`fy%+4<ffS8MMD
z1+3>*3+X=~DkjMPnUy*e!v^+#FnJKh7d8$HGvS4~c=@fDd|*iF`v3ay*=RC7*Y{sM
zN`gCEa;HB2dK}E&Wh(`!)3ia{>sS0)4xg*3%MPcNwFcCLB=&RD|7q(6+CpF^VgDw%
z=2CQ@D>8<A)>U+C*N8_^_Z4mOJNcJ5L^6j~Be8mM@%Z}n?tgS$6GYkuq-^m%@F3As
zzWd?@5&~<<huHec<9y^UewrU^@s0Yh^bFxr<a{KPkEcLE&d(urj<HO{CvtXI`|~5{
zOxo8MCOJq&)N^z=<rCpreCPt2pS<lk=er~x71v^&Q+e_mvYXMuCp((TU==o6x$1cj
zKi?kN<&wchmQ~!#)JtkfHQIZ?Y&DHyzh-Yhv~%~4Ko95QtA#M*J}{ukSvnk)1K<`i
zt<F7+obCeLA!2bG+ScGPbI%z{J)H#geK)GNz@=A4SN6~{oIr@<fY24V+%4wq>;MO5
zF1wavM(3~K?3F=|+&gt!0k~HMybD^Gq~p^JF_~)2xiXl1Koeii%2T5TpC35^V4!7N
z8SjeL*DKwu*4H&E6?P}*e9P-}ou6|+d-xfP;gFh7GFU>!Wk>Fc;D~I<C$7Ll0w_0J
z%M)w;u@bQN%Ay4Ld(nXhVUv}=;9y`cnB!U4mh1WW)&J^XZXQa(;wF~Y;P6^Km-21W
zG_t_`zGXRxvhl%m8n6)a&j@HsAG*<8SBOLFg7L$uA{5yV@JTUiSu@oY?O(?F&K3O6
zN;~Y*?)qtDW8;R5<;PzqUuH2#KQ#`@%8>Z)xl&CfF^<_w-{~4zsnGNbI$m(Qr+yd&
zR|#nlh(f?F0A`+cKW@mGtQAySyBTR9(88Y{Em1~MTP1o95S(-0pdpe<q6W8OkGlMd
zj=rL!2u)pXA42Ckha;aZ<>%76T~^;SOTB+(jpK*6tZzgnn0`xu`SI%+U;V*``o>$?
zQ7d;%m7xp8Ehl4yFpN};Os1srAd0YCh4i}-uv&n`!k#4a;Nk|W_zB~8u)yJum}ccs
zS$7A49gokoJ?qAX_>_A%6dViAj?;eFw>5egtxV(MgX>>5Kx+lWjbTcj|C&2w(lD#m
zZE#Jz{nF?fyQ7<^&`Sa_s)K0+=Etm8!N%oh4kQ@d26~FZ9=^+nw<31KTv2d_t%a#3
z2R!C>96$LEn85?QEWz@63}XGJU3OjhpS6j{cWE>F%};K%e-65d{^lqB^Ji{H6RwTd
zBE9QZ5Ek(m{q=KKUnGqt@!t-j*SCh#BbIVs?qPNgMcJhx1Z@?TX>l_z4*#7*m_QEI
zw7!w8bD&<_|K^ET=T~HED{2!-NrBl@l~Wr^QUP{M&H_tJMhZ=wWN>-ngPl)(AarKa
zD7bB=%|3q3EQ6TSk7(-d04bwd4%03Hjgo@aSkz@GRp3e)ro`_{_@wrA`>gb*7R?Vy
zF))zW4^%=b_XOmfV@>Jwbq*eHtu~O15JPjA%%%Yf*M$B0%!-9;ks6NQ_n(^4YBMn`
zF<TdZb{fHC8~VI0gX`?(Y`KPO+9Y?f+g9JjzFqWh^2p3#n<sb7>Wl^aH%+^tOwNYS
zXrvV3sY!f3%;JG}6R7Th&=`$fVuS{iYQgL8D-CNeB|Fh%E6ted8~=HY?*FF7fBd2U
z0*(Kw$15wj6-$l&<ko+gMt`z`<wk#^XkFY-PDo71^?zxXzqzHmLYF^TzMF0FCu3f_
zzn@RaokBmV7zlIPxM)Zpy}3bu;CwP;6CyV#<aTt({;?(d1d^tGR(wjgKrS5oa-9Oj
zb64``#)EjGMhP#?|AJ<M%9^j<Oi;);;1gBO;z~_T(TFtIXC}GRM_C7S;(EnD0>EfA
z5Y~H^7yg`ss|9jo807*qBwDC>a}6rmiFjuKSNprHl*D~7KS5*vF+PpebOUg<kA0OM
zGnJwNlVT+ups&)_y`2YlZa=uQbLal{J?^=|%dld0hu*gRV0Y`zb}JtIee2HF_Pe*w
z2Y(rTeE0Xk@%ZT7p0?^(;icO}69F<w8PfR;g8_5L4jx*&+OPZ}p1OL5@3?2p<7`S~
zG=0>L9MMKepB9%c4>R;W9}a#k^P6guds__tahQ=L=AV;s>-~ZJh(w-gN^)*DIxHDj
zOH5>?>F#y!8-wor1^poztb|sYt=RqD&7>DUxP5QCb$@5D)w;d?AZhjD?S5;kzy09B
z&R`JVzdcy-7MfeXxe2Y5jjLwmTXcS6lLJ=BPqA)U_yU)Y<mb2&{%js+{QffT2aAx7
zl7G;*^8Stz+SPdDRdUw(8}a=WXY>8Q%bpW?PuM?DrJ^gX$;IoT1Vz&-rbO;M{O0zZ
z*5-C=>-M{?ySrQ4M6&JsckbQYdGP-TJ!nq$`+SJoUFOuN7q_Q*40pN+k-R-lrW^G3
zeB;jM{iDs>gFCI><{)X^zI%6z{@S5`KG^K_?mpPs>L>R$Wb}ACjr%8@4mD43n(D|j
zH+l325|wCXnvAe{5C4<rf~hc?OuP7St_8O*g~a}Ig>U9$7P?#inGWdh&Hr4fqhP$?
z;=}ZZjme|x&Z%nyNi}}&z(WEGH^%W`_x8bu^x*c}KTWreU;q8@XK&vpe;fSyPp6MJ
z|0DY_{Oh;>al7~8L2GpK=0&gA`XjKP<3XF2=yZD}q+=R?90#=G-muKlmq)TbY0FLa
zKdv`fVyKYJ`!_PMP;qFSR?p0*yy5rCB8gCl&)>Uq_s;#>_io?6&u?!0EcP?&7a9Zl
zU)2e<Vvx`EM7?HvQ}oElkdRjC-&mAdoBA)93&pYe6a@3wRQ6>SF}G>kYDeqq`!&5!
z*VlKWy|P+;)!wISqh6u+DazK?*B_G#+pkQd5Mb+JI{pxJNk;u>xm_oh8mY%77}&X`
zv{BI&daTwqGSz_O@{LT@(Z2Iw=gvmhz_jXFcdbmtwI04-mgN)Pe0Srrw|$Amsbvzo
zuyN{C;@=lHPL-(m=jfRl1U4@2TF0MM=~{<rz2dlp(?iOw>GY!HZ2XVz(OF(fiL3PE
ze9$2yU3))O6lSlWFVK%d9jUA-z0*NxNrsw@zi~=tRggA;JRP=|Y3l+#x}tBDhc8WV
zPal3lBUJ|A`+g((Sg0)8`|$Fjoo1@C74AZdr-e4Obt7uA4h#17-MTx_gT1so;eXog
zHX>AbMT8sYZu+4-;?Mq{Vmtg`no>pM5M`r_5Kt+`^m7*k&}dvEq9yBI4rNtCSk}FM
zWse<594t7Ak))E0O@T-xoiO#?Y1nO}r<82MkOoPsS^L^h_Ft``>`h0OUBq``t5<OC
zXz$WCrI#>#4$<u07`vCorOV9x@r}&<@eR-XU$*6{s3Mh?t1xT6&(kn+zg$z+`Fyxf
zY0BzS;69}(Yvh}<%6N56S#N#zuB_FDtkIWg$SO;4X+u^~l}n}6l}@aqLbOiHK3~|B
z)d!tiM^@=PqYrja;Iaz;yUdNh!0Y%!VBu5}K9g~4R(Qo;w0(2GZCJK97a;oV^o^73
ztToNJ@GTun9HpiABK@IwILM~sWV*&OGB}@x!(%B^`pjC}Zxv^D&nnf=VJUNyKK_F;
z2KAgDWwY_1RMl{C)veh!qe88lJNLJx8)+Q&Bei&;YfO5Y#`c*leO5ztD`2EWxmD@Q
zgG#0jJ#JsTGAEH5%#9OmSH`-<*y@c%(=yq}byVqC8=k&oH&F4tW*Ce18_+|!NZRKi
zP3czG4HY-D4z;TDhbl_?HWVk~n>avIG(uHvTc_3GX~`Q`{%G3lOFx1*B>%`tusFJ%
zvr{~bXiUZ7JC2+1?V7L#;h`z&h;J1xlZ|hJM<scZ4Kr9Po16FUKb4@tG@TBU`A7L@
z8C{w+6jjHlrDD9(0UYPkb#*GT-FPtT*~_*!w|82bcUs$bqOE(ocj*7_%-y~}f^_pf
zc3TI3rUuC<Ysdc}Aw~O9ki00^`<vpyV&mn(ldbK}>w;Fiv$?t5{&8~b-l4i{^_#Kc
zP46@$mHTHgpz4~M&SlE}i?lc0u>3Fji*!F2rRSxdr}N&kU$Fb>ToU@%KB!;&p#HDz
zgIYNaU$i6YeCGcz*&DSi_P_Q<{n{J#^Y%tX<cyXV323COfNDixt-!QIN>M6|G0Y|l
zU0^gv(q{7&VUr3cDJ(PV_h-2hm$xYy{1Cx4iL3=mZ(Je%o*LSZ>Gj_tSp;*}h)<z9
zJ{$Kq%%c&|cmP4>VoOhS93ZT#c975LI}z5|KdL!x@Y_waRUnZvxSyPl)&BfY$rxf2
zNmNr^sSznUSSp05Ao~>BFXIWa>mbOVv=NO}utg>XD6H$XqNi!Wf_eVkavk<-DS&`E
zsMTz+W<na3*)%lPMYm(R%(Va~XU7x93D&3-OLXDYXoRHgUQ+*@axB;z44P&e?bGA_
zn&igoFdF@TGA)a6j9Ud6=aUK9^Qv+S`lHNv|7k=AW)x5RC+q7lSY5r<+AbfI+6t^D
zZC5eNH4k+Us&cgVl&f>!Cdaf`x~b|j#7po7&=Rk8xgrdY(JdC(li@Hqbt(I2y0j<z
zgKi}?omVj)r$-4kgOlTQd6a%YfP-X6j2hY74JB6WuPv7-)V{<CXT{bS>`v02OXHaT
ziqpolLnbPvb6Nn!nslz%@OoM}fDKKXDcm#rN8xu#8U!9-Y2kgTa(mNxe7o<S?Y%tc
z96Wpb*Zn8YI`oz<ZP00&XJbZXw_H(OeS7V0)Lkm$r5mm4hpfo}&t5*;TjF6d4C9Ti
zzVprAlV#pVtkfQPe-J$fqm^%1eg5RhT6KhUe3ZxS<9@$gS3%od(5hO3kC(NomYUux
zwyM5~Dy$o5YW*%5!h#!JvzXZ)_5)Q4neFGWf?0lHKSE7INnss!sH7%y5S?b+R~FKA
z-}RZT;!wFcd|?<WH;<)IsN8~-+Xl=Hva)2;=l|J_dH(18XQ_7D|FfG6{V!;j1ntB(
z!KgM&dTq%}?zBTiu?P)uUG1iAzI9>`4z$yw>?FN*nX9(ZUn#(3<uq`b$+z6Ic16sK
zu_`2dS1-=nXts0!Fd=Yc$+uD)%{|(VZnq`=7#6;*Y>bmL8gr!-CqVHvSF7KFA;qz&
z(pUh;CSIS<e2Uw#E1YJPOH$_X2J2?oj_#uRT?@_G;wsgeS}~PsZO!r<B_T;2n4&5N
zU+A~#YwM@4uwP%a$%x|yS7<Y09N^MMBX01|hb;CkJ<ii>0_5nUHb_;U<R8ljWAX^_
zB1?@%4tAg|Pv}V)^I4Ap>I)(jcs<O{V%JQiAd?|uq_KG{W>YdaP8cRh6D`EnP7yX2
z^!Q}Zj{ct{&!Pm)3gGD1BEwj>0X2%NccSNy*SP*!9h$f!h_{rd2;Z3}F(xfZUOd<d
zg35Z_3Tu19r${iQK;%IU5>JGg>3EoqQdEjNM5!|^T|5+s{GRz1Qo|ho2AV2yh8@SP
z@FCio@6dk(qv+SMqx&8CypDceCmq*NQsB3j+gp13TGP!j`Pd)QLY%rxg&=YgL`<BV
zOp74tGmKc#K@X6j06M(mYB*y$(?4dpc-+P*Lw6&El`AC01EoG5_U*=!Xm-XqBLX?T
zQ<DWPE<$TEC^FPHJH&!&Sv&}_$)ekPzk{iN!UEfH^XrS*1TiR&4bGr_=5BXcIWD7q
z80W{t$WSZ<;0!IMbgfedaPp+R8Rv>8oRv53%PFH(feFXQ_m*HiiCtEB)En)@4C8Ek
zj#UlLG%{lhCl5S(r`*pVFbsv2d_l7?m>VbMUyMt<Q^Ig?SlLQB3~@gNnh!T}0B}H$
zzgGSSe(L$+{54Vv|BR*@U@K53(vS4*O!nPrI_PwxRX@Cl(C)NI`nXWI?rZp%T7cxs
z5R!3OJY4nW>9<!lPyZSD!$N~g==i4XvcTxN#Qdtg@smup&t~uO7xrfT545MDu>y?V
z9lNl6Uv`zr)>r&O8k`&PRZtYGZ)QXgro>O%L-Bo9zi{vS1H0nTi`_^6GwMPY=vKb)
z)yCenClb9>uf2@iHeQrx0K=c_<ugvuih3#<M_Dhag@-;kcp<OpWwg}sSn#1E{Cp(h
zYpmHb)txILBY)Bt(#tm9y*P+8>64E(UanvIDSJrL;tfNQR;koAFRGc(g;ctr>sXB*
z$-3zpKa3^qPIuZWEJ4a$MjGoL4bR=Lp3WI9^IN)<W|w`Tkoup|*s?;U0k{AB=Wx%z
zZ2xJqUO-%P4@p{|98AxL$sCp93MnACL}Je%OiQ$Rb5!ciArI&eA_AAuX_`-G@leB8
zI;Zz<UldDyp~%O&J@k_E7uZ8>lIrPZeji1kUv&?^`a-_?LcUzX)txIfTiv<5(dy1;
z@O+?PV1Xg;kuib1=0Mjlk*0;Phgpy1$@45bre&AbkO%4r2otL3`>(+@?D~r$jh~BE
zLpxWOasFjb4w@)i;A}N((Z&6MxN^$;5D?{T<LP%5lFNORT2G~3ItE%L3r<ErU*ypM
zz64Eba+3Dz(sQ<ulv9woNMvMI>_)NEN&RD-i65;jdILgah^8;}sa(N*kce^7j`rCh
zFiJG5g3)=uh;x8w%z2KgB=(-uKQGQ9ZTf7x%Cao9@%ejB_z~J0lovR^6%77Z5&YFn
z=6n@bNzhvppON{Z%4oku0vRw3$|)97*AJ_Uok!aGOB0t#kj{j`IMV(E_XTYG4LMmD
z?#(&v>v-dNCVs@|cY1bc=;DIxTOxDLBk%B2Lgh=33$k~v*X;Oscs<XnJgGxe{jT^e
z2;$?PA^12_O(X8T#i+g6(ey0N=L7US@|TXz^CXrF&GTp0H-}mff4{lt`x5ctn~M%F
zj9>cLWi%JPe9j<&jwZ1CZBH3=-XJ3oiex#zf}t4lf90!A`BkU<B5if#?0>$%*ZT=Q
zTAW;q|IX}LH%x^G>#v>*>k}a#MqDe&htMIgOW0VTbVFplrHw4YkQhg}AR-g3CLk4p
z%W(}f0ZNBWWzI40T}z}Jk!<4gdiXLMA7|(-*xnf7&p}V{4n_D{6lM^%acf3!9+_g$
z)K6gezI?><kZ@L@3`wb7sokPu?=R)G7xDFuO)cQ;-w~zVVoAp8o0PKHd<8ieaB%$Q
zn(YZfOtuD9hyRkjg*UdhZRyr_%ieZx>M!MWzq-%;dOr1%!~BYl^Q*hfuP5lFrC@J<
ziFgl*+=AYMe7u+O*6@kq++!NRie_R}1NM0ob#2R?j_kuM?Y?i5Awqa=$*XQN9G4pB
z?gH2D-;DQ7d=uipWh9yFc<_jGxcg8z=iJ8g9xr@zQJQ3&=kd7^5&uP>u1DGI#%r$R
zGg5fVLs>-*id16~16}y-1aP<u<cBU#k}-c*#|h`CM{}VL8BiUMpS<1Q(aS=FPr13S
zC1J%o3ZRP0Bt1={wU^Zf%~8eOoqG@Fw)?_K8b6Sm_|^2kT@2K{=yZG5>))<Bf$c80
z)D0N-wN~<pY%0xbqJ1X2OZu6$E2Ue_aJ${<cDH@fcJrx{JA^WC6*VKzIZ{ne*dI^x
z><U@}ZvKWiw<IT+&hqa;|2mfbM=^Q{t*_5vHyo4FIFt6i4lRYO_rm>a<q>ezS|W%5
z*s#9tVRe%6F++pF9EPpVF#3i!00+q}PPmDO+#Puu_*UR4VqlrK$&`3l6MA2gGu{qK
z`tf}d?R#mCmo!Pv5r0Cvu0Nv!DCXC_OMv+j(}QHVr^jQl6W7<JITdu7JUKxny1Kl$
zIWyi=phm@lM96~CZ=pZm?-y(A)zN<G0F@qS#iqyYYpTWFBrAvh{_af^U~DJN=*c(q
z6@PirjNZ<$*l%Y&fwp<eJ~bpMJk7Y5HCKU?>M|r@ULfI+W-?28b)3G<-@#oB#N|TM
z;FjTgq?slki5YA0)EM?Pl&VFVzHo1L$qebGq2A~4Z~TBUiV8q5S`T<MOp<9^-<##g
ze?nmnw=P@^yvRxzX;`D4DN1y_JY*q#Zsx1eD|3>q5T!}G|HO04f(8BC-pdy}vx>#R
zGh1YDxB*y9a^rB=4uJI<aE;8{1c)qj@qoyA8rJhn!<K^5FM&%k87W>T5}Hfe^as<q
z&}Ld4CdYCATvpBXnS(~q>eKS%fONLDxa#>H<nb|scnnAbWMa?83d`iC=xCTbp1t4K
zA_|;PEinavMT#~UNpJt@GiMc4$PbW82|5pu4*%rEK7Wq+?{<Jx8Geg&U=hE}q1t56
zQ&byGvH~A|UV46Ot3&*!12CqNZ5j{hM02UD>jUBJaAP#=hvRS@eYGSf>y6ouqBRX-
zZ83wNYgpeLY)uudCVC|9_PxnO8Q<!dEl1iz0r7x;N?ijPBbSt3Buv_Ut?MyH1G|zq
z`brsF+_+EW<CtFqnDX0<h!o~1?+WLjkpP90Vpl%b)zy|;6g9;nW<!n+?6~lfcba*I
z2*(R@2w+@c3E7+GKoQZ(>@P3GpWhDaMRmMFPd1-tV=<8wCP@~hf;NHeI={A{oX;4c
zC_X(WNpLh3hw0;t-js9mDEVGE<&lv%mcU36%pr#O=yMhEkp?Ix$yAsq7p2nAOvE4~
zV(iW6&;d;d&;=-QdE|&De;}UL^<`HFyM(2rPaVK1L;U+qzuOUTvZ6GW##UtcV)o?}
zQnXL(HHk;`qGTWx@r12#b-Onj>+5?Vl7|Wa)P@QZ*Ofa|MsD6Ap46NZqoZ5hArp|~
zE`APAGanvWeUev0uCO|>h=rA63DLAMt%DJcVBiRs`zEt#;5f%T%egCtQxQS(`^b?z
zh=oz#ju3l>c8**(swfs36heBcd$HyxUcL_!t>8u>TrGbnZw;_Tssysr0S047QV*qC
zJkE<UrSNJz6;M4c%UH-<u^Q@!3Y>O}B{}bh3&n64iUUMAUD7CmmbT@QKZxw-zu|5N
zcXixdompC@P0^s7dvLLom+4f55wn(~7+rmBpsG9Y0_n^{RzxssPom__`y-bWt;Ty4
zo#-@C&5rlVhsIh6$(>_cd^=+afaO^aSt5rX9H5>+E(H>RQ&n?6{IQrH=<>cqO=&nO
zj0miQRM{N0$m}Hr+>igP<2<G%b9y;GdOz@dNlv&POZqn!fOjJ7uDwiiZA^yLM3gR(
zWbuxzIZ2CK;z`;*nU02Qnv;$*aFPsW0_jp+*p6PTa%JDJ6{<`D-bq4mcrHRokwlL2
zSjvfJIqTgTLSkSdM-hGjNUlsIfSD%3++LvLL8y6PiS(Z(dC7+*;syyrZSN|RIEqg*
z4)cN=c!-O?9uR}4y>YNv{OQBA!$WkiR$HCZ0wmvZ_sn_RFVoAk!#0Cn%Em$|E2oWL
zrj_w(S?V|3D@5pO_?gb<Z7CC7BVvyUU{ew95tzawgN-QUY(<ka>5D1IdHile0RTjn
zAi8vthTDUknX*Y1ns$bpgbWe>GVqotuvj&2t{vsu@Nx1q`Z70G>nrB0rZJd>$seh<
zC|J?^eaFD%MzdhO>OGYPs58+BnJ|4!ycyX6(P|7v$P{FVcExTVho92)KnkpAl^Z#e
z_!S%vL`jFqNBv?9%nZ}f90^sy`*OV0g}s}Sqrib$JxSrQ00xcMve5OiV35c-7c9WA
zK^zvBvjk+<Nh=@BT!zS@ESVg0*@w<F+sOG><C5e1<LV7G^St078ePOax-A@30N&J2
zr$;Kl39ZG4f}g}>0dW}1jb%QpeucTW$j^3{I321tec)e%Gic;;`CO)YXIW=32hbiF
z*~BN9S1s!Y;`ha+2de`Gi9q3v7G4#NW}5y(^lU~FVsy;#W{#Z5{}o7+?Qaaym}^Um
z)8io1;IaGeD}6vOc&t2#TO07!c+?xj*Bp2wJ}Wvl!Z)0V`GWryofahw*A#1@PX*+B
zQqFb(w3i<vkaxrZ<5B#NY|M@|dEv%d8U9tI4?AACA*ePr=xO`cnIs~!908{me#fn5
zTd>*s+`3aEOFKJcjDDN;=>C2`HNUWk9{{QX^@nBL@EB6)1UkU?z_F25rKo_xz`caw
zdUgTU!@j#GZ{D|h49A&Eoh)OD?Qgu6U&AD^I6BU<fuI$FQN(BZ8Kos_1L)?R<df-~
z__IA)t0=_8G2sFL9@e<B9?lYJ1A>O9sY{oPr2|;z$Bfc}IG|-2#TjCZ)4FpoT&`3B
zjfffJSa4WTwjBt0PXMgO#!jS;DmZ+;kBRwu-x&<CHs7pfN&j3}CV)Gz&S)znH_#ff
z*<om3#J@SusI3hOocVl~<R!Q+`qFe5=coab-4$PCwA0?&!oi(Nk2IbNuQNwvJ!Lq;
zF_!|`PFmkwPU=EP#Y>jVP<r4(PEBm41&3AXL~`qMg+;DFAfqR`HaJT@LZj!Y#2&il
zP(*`2osni!cvcy3$mn~6VzjS%_GCL6-EK*?QyNxIx)1Vd{22NDAKal(lwkUS<KA=(
z+UKKTm^g5Y^%F9)i8e@E`fk=^FIKeb1u1{e03CBj?8i*owCG#rIt98}lbg;&Fg}j0
z;9fGzX(!-0fzE_@)tJGmJ|qD~j}%gVA0&p>q&Mi%kaIrA0O&@c55cFM@ZXJBop1La
zzm6Uf*WlQ}{>!H?_g}ow(RZWn%yUd6D{dUoxaunCHU`O2gdbMNyWmS}0)v_!MdRoX
z52G!QimF(%42=~f!y=ixB*PFp+ggkM&HrngL<!y^sO-Cq>Ju`5MdX(v*0Y4&ShPqE
zlb%nT?zVb485h^lQMX8w<D?t#d1xQi*2Ik5c-f$`yglS-@SssEzq7d+wfb98>ojV8
z7p**@yHb)?oG|t9H{ZYPynFrUXRlTwYtn_EzI%P}j%=lL<17?eoCQc{x&!>kjx@;L
zm~6~`yZx=d3;RSr1Ut3j`!IPC#q^}Ogt3V}!xao!Nlj~RWwJ^oAwenpK3pS>GIjlO
z#3C}bqiCM1-0P_sDORx~BCH)vtwct_JA7A<TTpOj1#GihyV3UMrtf)i3q3OEM|^I3
zFdI#ZRT+3q`<_Xs2ofunw5aR6y?Oio%f}E2ql66h^CruBI<Hwi@Xa$hZ<GI!yP|P|
zFk|wu&%Wm9&gRR<K)S%LHltIL(A-%z&#(s~Aax*pzR2Wwj1iKVjhN{iGl<3@=`*w!
zjUk*ynoNPy_#+^=^dKQPi=PuG0(vmpy70@vwgn?L{@V=BVmb}DEpyBIGk5v%`Piak
z0fgAy=r=T#4o#)==VyOg@zBfs^NYQgkDu<zIa0VWVO~NV?nofVldcuqaNJGqG=bwp
z*1js5__NRgwR>btc6DoWts7yY!WCA#trkg$;vxOi#W?n{)-^+GXZ-*>J2b$S4WP=1
z(2`32(h208pY`=s6!mk1fnsfaJ;G1lKr|Klk3gwKeXiYO65|y#v0?3{r^x^s3FM}T
zFn1HZc(<H3vm0jH?AE8=>|U0Uv%7rC&Mr?PqS^A{rM0Jd1rd7e!#}HW^_{!zJ9p=Q
z_W!war@eFG4gNpdciZ>3%9Eh|D^FspZW0f6+7Iqr@Q$s`2kp%zC$Y78yL|`g0^hUP
z11gRL*oj3TU4LMC2#CXz;D82zolTWs0ul;;Ui(E!$8G)Y(m!9}hIx{iBbriXM|5we
zF5yF#n<U|)>b#JOZZFC_iROu=G{}S7n~Pt*`C#kvmlH+Ysn00+Yl<KnbWmblC-VvP
zTsTwgs;6$uwJ#9hK<qS?AdXH_;{G0kcu4=8o+bEiaR3q9D|5uPrimMLu9%iwddN;5
zI7$&cIdCdeT;O*)?p}o*F2xE)8X@GbLbw#5uHmc3LaugS0mRkZY+MK@ZYCX*lHiOx
zw#i`u;oI806iCu=>oNby;NhVgy7FGJM#^98W)u%cumq8Sc}m9Lc<Ls{h+bq}wn$Io
z0tyK<*L>ADIi@|~tliM1$@b06!<mS)E_8SRS-0TrB+Iy$Af{aMZHTb~|G)=igW4F<
zuY(_P>&P(V0^tm3cmV+Oky+I%Ic}<fZSf-nIojsodE$+~>$-UQ;Six8iL}L+oR6H*
zRL(6gJmL-mswfKe$3E4S)EX>Np`B*D-ZJtdH6zYVU}q<3Lx<=t&#1oEX?_^b=&{yW
zl6+`wZ78j_%<J3|ud~Y--&c4Y|E^*>8^|$sTU?|cnZNs#905RP|MhO*7<Dcw`JoMT
z)RRQO;6fK@xW?uHO*6j7dp12%r~G1fn2Xe|t8-MZe#f}I!8?MSvlF@2!fxu{8V?Hc
z?=i{|5+SrpM5*9R;@kz4Wb}O^jW*8HO!}QhaXMlT2mBc5Wrk2IOl{cg?4n|~SJ{Q5
zYB><x2T1}!D$Cm9YBX++bef`3hQZwU$dn7r_i4L$Xf(LQXPMim>5!e^ikPOu^dFX_
z?)`C@^PE*JdaZU+Q;gr>+OQ^Zk@C6ZL+A`RK)@$an7T!4^E?%|1U+hzjT0XED9zD-
zafqfgnn4s4nK2Er@vLW>6TOJ*?NndD4OK0@jJQ_+MCwG30*3`=H~)dyF7695j%kv+
zWrwo!oD{rX(wTIi-v}NH_ofDuEU4p1!a&GhRAt!u`flS_2k8ioF|^pFE3G5O-{2i9
zPG}WcfNU<MPYKkQW<a{^2q2CRGD%r!E3Eg647Em~2;nzA4H6fN83)bHcQ;p4sju<$
zr40g@#%4iTr1zQ{ME6TLFIq}+ZZUWUV0ISsLdTl1a1yk@h1d_?hB-XXj3mq&q9Iz*
zZBlyY)B;?9HawjB^v17#^^VhC*uV*kDD@~iXN$`GCO0Tbc?8sGk!eYa>j-IswBEgV
zNQ*?*G>Tkc1=#cJ9JO5h$O{E>Nu_4yo%3u;0!W`Da|mxC9asZ(7;&6&aF)}h!Ym(u
z7NoNw-rNt|+Mcq@ePh*U@{4#z*xYT2$tmV4P8Uy_3tX$a*3_I1Z%~w3BhJ<TyR|uD
zFLqbe+Krw2I&i^V&}{Izoo}MtMP2bzi5nQ(KADXN5Nn}P($+W(H|c{;=2F251;o)e
zx$POIy*$o&Z+ulzELFttX`ge@KTU>`!~`1WB`{{hN=qfa!_I&@AuDwCLi4M5Ks&qv
zZhAvFt>!)}*EGgTe9`AP%O$rz>W7%*DcWRJgCv&LCGlm@G%^64rX&3+N-Wu4if?r%
zOeZX~oP3<bT;31uMEp^lar~$FG?vWgXjOQg4wVehk(#)I3vwf}%uY8t1i7U1x=xLp
z0fk22;LW7kl4h$XRFtmgSxfsj*b4KkSPq-)R`;$kvwoO*FGBv~WXM@`nyY8R+G^y(
zL=Xv4a1$KF>*IWo{zEkHVE>w84unft4w-mgaEOpl6I$T6HJv3vn<)17=ytmt!64SG
zCGWnWma@5I;4}ly`Vj}8mD8Samc@K_9N4$8)-doz>+vQabzNdD+RM{^!QLoGQ+#w>
z#}8QoFTTWaDA6?*pK|8Zdx)euS98c0RGdL8h>2t5G*3V{G#Y@)(f3DLj|(UUOoh)%
zjA&O>n^e4+k_>8LrP5yU+$1lOpMV(17&Ec(J%L4N$d|;H4WH#m>GtBJ`r0CRZLF%8
zU_jK5rmvm)*IHah@s_#66TR~t(reSpKh@Q+md$$M)2uhhtN`#yETSMK6){UWIxIV#
z@P%-KLLnhuwsBcH!;4PLIuz2(Z%@)5P(mZ^hs`NToH9u}_?makVzopVBobn6HAe40
zU}dT#7j{d8$UqzumvWCL@tI`+_s%Q4*wn6aAet^`T(!Y=ca}>Z<*EWj%U;&>!t|w9
zG_SPnMlS*Gp-DBo&O!gD35bL%D1a9ghOC<l5@`jw0$Wr;mQeQQbs0IX&pu8S07u`?
zeY5zO>OXYX<i5n3*ElD>gksgjKS}4s8@K<<vCOW{ot7p)pR3NTds2iBdo=X2sh0Bu
zN}O&qK`xiBo|`h$NcXL)N90vros#OZ8))?GtKlAIbh93#PCTW1csa>_7vkX~g|35|
zSU7MGX$o}sP;hKz19<QZg13C9J57zZWI<}ifYdxV|B-w;scNmj7XKp}L2eXze*+8Y
zOmYO0*7#1dqboP6IqmOrR(s_}Gu-{1-gd9t>P&cluQ#|W_d1`8zt`FHm0Q(@*E<`M
zf}r`4)<{t|+fkI|AW7fXLuH4q8ZF2V2+K&8E?^4=kSu~hD)IJ#)`p3<%-|;AR|CH&
zi+!*7N&ln-s=6^|re@1zS3@kwO}Cn=;n1B35mmWBIWx?axZ;A~e-Y+{sg3Tw<OY0W
zMt+<JRUN;O<PPc4+Gs52P7+TGmJ*)Ug7sT`w71KZ6S8qx&&UOjC(Ck6n}PbQxJRsA
zgf@%l6je5@6?~Gn%{-P}xPfIjNXQnjIs;!zp-N*YOJ<}@rIKxlqaD}=EmwF`NqV)l
z6zwvIx7!8Fq1|rZYwv{U09B<i9t|&CaH%fhf43~Zkq6zV8EGwYMc#wJ@CcGz4i^Am
zF8O9jN<}Z}X;ztldhL<y?a@!lx3qYU8UlT~_uSD^82$9t^ZvVMZzD33C3^Br<nd5Q
zWZm9uAhO?i#YqVB*S9ts4W>hS&ng?!gZQ|U4j!&B{da!)d8IAoQmc5+nuPvMhCF<g
zjT8L|LZm}1EP06k0xMWW``~7@MgOPI^}!KmlZW4;5?g+n#>d6O!xeYhR(@zU)?o3`
zJjA+ZiwfIBy5Mml)9`lxA3^7<_%F=*Xodg!DgAk6&D{d`0{=Y9FzMCc>8j^I*2+K1
z0dp2~56eR|+%3fW(&$mNSss+657}C?LLPqf$dA;hzvW?Yhqx+~->G!DS$?OY3H)wu
z{3^ejb6J~QBThq%PWb>LI*G)5>bxDE*98T;I9v{a#iuex-x15Ce>A~$V4@x$Ya73k
z#T#-z=gJG;#4W&?u?<|h5*ccfRMRlIGEyDWPWRU=O3w)eLxK&>mK5nB2}vB|aJxVf
z!}BT`mg5R9mxjZzFxsWvoa2ag!8qb(`|fso^CFfw8hX4p$G8^oEf7RI+_$jivcjQ^
z^LQ=QadpwDT@z@HZ+XfgzVs@aYNV6Va%%mp?94!?&4I`<`N;0u+4%8n_~BLdJ#Ac9
z1}P>(_!E$##l%H=N;-f|;i8Ueqs0LXo}VulwMnI4)P1w}cJIZDXD=QCzCg#9u;*}o
zJoG132dlIT#2klyY@xFW;5_&q6}N#(1;r>#-1X{=S-G0t5-2xX)PJLAT{LDK_3G%=
zlYT+y%J*p`+iftAHhe(en!t?}`U(I0zy1$Ohhr5mh1VGB_ySIm2BSF)8cdv7NpQxo
z@;FFXW%llHji}-=@xwt0M7yTSK|*Q1(4lQMLa7phc!qQk=1|81x2Lz93wSRO%MWTE
z+I3|OVepUc(8E}|0ibFnq^)`^El($NTtt62CUUyj-rl}gu?o0IntML-w4RT6icriA
z?y<@@&2bT&g;6|Eo!;jLv;LY+J(#B@a%-M+HFPiOXQ6p*42qB8Mf}L6L<EY{_vXl#
zq&)Tx3GVaw;m%IC8Ff>Xlt0|s6sVli4fdnnb9=Mfjy%UZOI!=l(C^EAWH7-k#z$pG
z{7^WC^xDG23wFG~cTI-|M!?vDKJDn+S&lW3!p5;0jghE-r8o>Ns5y#!``dxIK*ix<
zvX{vkZc4?N&{!-lChbV~O`f4ttShs`p_QP1e43@2AR++;h4D~~AqA6gX(RrP0h7}c
zc(Ytik22WY-1t>KHy7v+gZwB}^E%CCECotQR!mFTk*r^*R%Nk}>rJus-hYUe=lz74
zWxaV;W<eIwBX#A!|Lgw)DlHKZW560nok>FGnX0dlSjr}Fko`mBMHR1~{z5Z%!p}vS
z+ojE$V?B1kn{->Z+qanuoaHzohOngp`+*S-vkQn<oU=syVCWCbXrOT^lz>BlJbroA
ztxBH)ewRxdz`Wnk)}YnY--nVbU_LuW@{nYmDxPyDAaQKrN}ZnI)+M$Eq@2S(Yv_0G
zMz?m__ir^CR;B_wV50BUKqeq=cKwfAw=Dx3$7mOwrs${vh8GpfeC;$F(svbRQ?#N%
z54KgjyKx%l8^g4>F>#;9&L)Y7vOm*5bm#WYwp{Q*9J~7F^})O6Z=W4>-s~M5eE<6G
z(_QZ54bN-!j;D`zBRgKWKw9u{dcxhBZ8U_*cB8{vPhLK49enrf#fw|b=+=Y`$%3oM
zqt<)(`L}-1XSh24G#>7f5n9+dq@>gN+l}tnFL}Z(+36RUTsn=Gph=aNS1z6W-A?oF
zHUsGtGHLC?=ocsaBK%v1^#8=(@V^)-!9RC<dvkLa|0UKkbKjzah_;$_rM;I|k0pm{
z*J_yzb)tT+fAiCu@1OqcK4T-#vgt;<I$ynu`S-5;&%(Wa`|R6iPu_8+_|v_2dyn@H
zo^_tQe)Woe+<*NF4X!<T{(bmwG0L4M$6$>1F-9AIbiaVOHp-K-_q=%h{Q3T?=iEU1
z+1t*GXMcT0FW7(e?dzHe@yoUFgA2W3mGA<i{G$=9j-7#MJR1(hNcL&~2jL_G#%nv?
zgs~i*l<Ug8^MrLD{fbCyHzWwnmiVVTSALnQ5B7q%cd-|tu3E_48;w8W8&`qEx5&}6
z#-lm0#)ua-<i#GDU<Qo_eQ2kH_jEeZ!-vsIr-MqSPG?2#FOT2mGkD3gO3o2iyYT4>
zL~cWs(j-Yw3XD#5S%)c_K3Dk0rhqmkZqzX0%l}@?y?xI+*10omppUGtm$aCAMaKK+
z5#)6FPnyzmmLS$T4Gq2Z^(K@AQd(wQglV1{2UQi?Zl-C3YVn*sM^<Ah`VUmmbbuoi
z4@e**kpf<TQn5DU{gHgGl*a}Mhzz#`C6u`>sVL5|t{?#jA9IkDo$N>HG(h-mmK@wg
z!eQvsz_);OvXU`bYfrAP2M#h*%UqK2rMhD1GjW-iWSE|D+UxO{3A9!*l$<y&q#ZE&
z0u-7VLUr@I<9C8HZW+)*F%rvWZM|g+N}xMK>$cXw)%zTV0N*ASW#umH9Nk&6h3m~>
zTHg}omXvpkGGI7UPpeo^+NGiFJ|rcJ<GcW%8Xr$j3YGJktTH|EnzdF(2gx_>Xb;H5
z0%+9?>OyF)q~m3S5*S7ZPoYCutSt1ZSYC^jZHqU`JZqc)Q*yOIJI8i@%P4HanxxC7
zCT-5g=v|UQQJKB>0R?piq-#&%kK@kO>|@m>wlrCvGu718$tIVx!d~P&VX|gPv!Kme
z>>qad0=0oM_1VJz+(L{>Z5v;(&kZd2ShUD4o<GaB7T)VSD}n^wB<Lioh;wZ9AyFBp
zY>>pB?X9m@b7pIgnjD5;aWAO{xpq~EoFzNP^deg8{McvJN!i8Gk!UR*|D+v&z7X3@
zPT9#a3G<j}%FnX}K3?|7ePCaYIOFHiyq)7eVA;;9^{p?sXk1tpy9vV)2D3z*Nd*o|
zOH+I@t?9?-GbXB0t;t%!yy9dA%PcCwvAl__4NN2wYZkG~W9Jt@4k+uBLxp4NvTiuB
z-jQ_EcsHHl=`b0S1y#(&H39{GKAfQ^jQbOlFp<S@^s-ER0}xKaf{7OB;Ki&nt4Dg2
z4qDuWS$7$n3JzUNTcG{=RnAl|wwV8v+`HwYi@Htruk!7x2J8c&Q?nFVqh}BA1Q?Tj
zaU-*vH^3iqXt;P0L-hE)<9j_cuI>?gS%YGm_q6gOmdTa#h=fCzcI6HVtbY0eQ&PZj
zTsoow0DDbrK)b~#RRvqfbPpC&5S&!LWXu7L<!RPvJcuVurEWDyUpV7Dxl9vwkv1A=
zH=0!HR47aOoG`l@v$hiOfHQW7aIbDnTpK_eDd}@^y35qaC{<x`$23es*9Jm<yFxHq
zmwp<a7a{^jep-H|a9Tsjo(<z}p0{AP&op0ZoUq~sJC5u(*|a%Y8yEy(py`kT{q2lZ
zN&L#LtO@O;X5|3UmP?Pg;K<I0Hz*}3OjG%|l;R+0^`vRTC@df==b7e{qLu*2T60;n
zdY%g7$-c(W&NVA?h0oB@B=JJCW7&;-k_;zk$pEOmv1acMV`P(>auKo}%j;39l|W@q
zk_>!^R+dg@`VV+@hek|R!tu^afPTX59}4}@mz@7)*7qp>n2u&64X906ErBnj^j_pU
z2~dIYPDyn&++R+y!`vl*tw0L3mi01dweQXzs?u!8#~QsY=ky6fJ@4h|Aab45`VvSQ
z7SU?bK5jRor;o|RCRSS@v7BFBtXUBW8J+1+`kBe9jp=Y^VxNhl$JS$CZ4?$EbhI?M
z;_9D%OvMTi@xsk@hu|G<o6Cf3??Kj;R_KH~R>t;=7&MVl2ujDAG@GNDATH@Dz+pc)
zPFj5i_;sq|ZG7u9*(IYYJLHAch3JRA<ysMD4A|SCG_Z^o5}*p%^i-Jjq0I5|2sGe;
zP;M1vsZ;3Mb9Cqot=t^CQDi4vYHP-HnrXtxq~H=bn!*IyCknh~#AX1xCksX=!qvkm
zBL<^cUl+hjq+W^E7690JYbDqS;lg@72z)%xZqiF|%xL%O0omoj-vy<8bqvM?HdJtg
z;6)~R%Wdhzk#Z^I<&T-wSX0k<>9e*vYYxLJpb!KfvZJs*)K$3E7i01J>#MPvVp>5p
znX|68HtP#5Se+s<>B|$wAVdI<(Bk%z0m-;B4+^p;!(9o~PuOc`=Cq*aOZkB7>ntce
z*m2VZ6<I+sacczwmQYH1fTgY1@)n&Ey+0WqX@IpFc?~LlES-9ga;(OxcrY%lhAYV#
zTN(h^szs*(2E~Bu5<6tXa2&iC{*9qxY58mmKz{?dhm+9X>W00O;`6Od*}654UQ*h+
z(q=6##qt*Hz*W#7)n(VT#@%RVvwd&t4&7{IzZ-4eZ|`jF6eT1(`t@G>?(O>^jJ+Ux
zU!)GHF;K39s9dF{%%}G&c-d|+@`IiB{q5g|GkCDozQ6Tbo`9R^{rl~^4}PolV#VzE
zSQ@9F$m(i&sO_RiUTm40lUMCH5ZzDg+~mHTqg^cq(aa#tbv+7H>}Yknef#cj*Gi2l
z@Z;Uh->#{7<C3DR1RwSe4&F4n-F|TAx9w^jh`x@!VVrd)MFRsJ&%HZ7M&FwuogHQz
z%G-C^_jZ2E5pdpjfvPLv%`n**nCOBS?)+jpBbvT|9TupeT9DdnOt>^%_x;|BWx5m}
zMYa|Fq{YGMS0*g-q~j8BK0Pg9h<04Qt*?2kmhkov8U?z%X80Olp{x_k!tjjTY2UwH
zJ|jC1+M8Q<t7l~ELHpk3HqHndiZ$nR6Rb$Hg6go!1((2|&ngQ$N)Vw!rIa0^64GKV
z9<4YPIHCH4wa}ravHKN<k}QnQkuI&9elP$EN$OjE^dLK<<LVDacyzb!x9{wfj_&QP
z_V(?{(Y<@Weg9sG+QTvK-fM5&D~)l7PSJK{jP1Madvs!ip4o2@PzWsv>~|}cbc;e(
z^pIiqA%3{v9L~M46^huF#?1xDZ$5R>4sy9EO&YqCQ5z%}-Aco}ULH?`y?udqP;_s$
z4bb0enscwoBG@Qn*{HYT3fd5UxKD>4S}%COTt?ZPD@#$_i%|G9jft{|t@T5i%;n;A
zXBev^guQ@bJ<+KQ3()19k_b~HZ`bK1WsDV)By+r`l65P(Fx#tDA)`#j3pPfb<Ti!7
z0WEE9wYTnU7tN4pNxD3EP?YIw>mJe94r|wTB9L@cMNg@5_pLs--M$Y=5GHteG4Wu#
zz4gF}1b<%D^E4+LPLI7uELy$OzJ2dL(JtA8cZlO`qr9bDCdme<P7Cgju@Hv08q{xN
zE4<3Ifhg`4a~w|uEEQahw7G~~Kmday7iU<m7HpSshXF7?<<>_hmhC)D*}|8w0M1|F
z7+u|LZ*Jc%)|}HcIMsd9``ihE6Cm+NsO0l3>6_{(jOSL?tt!~FNoH|d&U;{2@9wlW
z@2Gg!0erf3)9McK33-P8LI`_^o2DjVnmdXFqSm=wy>`L}HB7qunr6IwnsJri)WcPn
zD!sVAd=X-TV+pQeMPfuv=Wf^BN2iHkj;xg3Zg1b)G%UY%hzt!@g>c0*y4T*`zHRrI
zyU3BKUjy*__!u#cUUHI-2gcXS@&dwr=U)5%=7Y$iEbL7c_T_jez7wxYPA0@L3aokD
zL%2K0TK2MzgS3W~Gt9CN;>$T(P-)D^mCb}<th+Tue~MOibX3e&6G)jkJPKC3{NA6%
zkelz2(!KTD3Nt6YpcyD@?XA1NMOim7Qk;b79T!;pCum1@Dh5w`i%lRe3?8(%?%yMd
zd8*vRHUq9+oZm%J2(kwOgUmTJ0b`ct3;|y+Rd4u;ULP(jahRZ58z)10C5Ku$)Y_r+
z1t9`v)nXuF2gCR%gUC4i9h^k4;GNB4O*VPzaa-`NVIl(z%#bf{T;O>9%Db+|yGku6
zeDgUDhHFBEL{r?Hg0Nf9)P2rH4+=|nOO^q0@<ORA->EQdtHKyGEyIeaX@MY`?>M@^
znTHUQd}%4q_R#js6#Y1>TkX4dcc8487hB0km?swo2cUsX$?EXK@iHS9J+^Lw?(>@x
z6i{3Q+MHRh#kaczZTFmIZ~F;`8?AFQEP7KIO15m7+Uqm;4J#((mgk{mpz9x49fAp%
zj!4f<C2xk8du#K4*-&t*NlnRD;D7zoO(u$M{8*IyuRhH|z;G`1R()UI$9V^X0xKG(
z;xf4~)yV$(x}|7@zF>7IvY8Y}W!`u6i*ctnMG@MAojYDAFOv-91vW<)ZOb0qy;~LB
z?%;X6R6aaTAJtPt&u_Ii@7)XLaY+hM#pEpO0yNxq`@z-&KOHefA;+g@X`f;F3r-s{
zD|6z^t=y1_J&{gM5TTlL+zCjD!WSA_=e%?06AUX0%Uvx(1&C-e!`=7E*uTeatCUM<
zoR7l6x=4aSNexnsTt3dZk;2ptxX^-Q6xSx<VA1a0g`#hpCp&<46DM#CqTSg<4*Xr(
z?EAkJKT*IUG+B>vOM?0am!s$HnZjo!2qQ7CgE248aV*93Y@M~b{@mcQ@`T$g_Y-Tq
z-~d>>{54*!u3!h%fu08rog^NF!B=!VJ<g@+2YW_be-DFt2|NpeQZvbuKDtAPz9^W1
z7BBXj;Cu|hDv^16@4gyYf#J7GO5Gh8U*Z$x=Eik+FDdsL3bQfG-ivb-8I?(*>|bbF
z*9PvC#TlG|$uGScz0~w+S@TC6-&}Sbvy$Z<zT4~uaLB6anUZ7)&Em}2ZA}`oSiYir
z+;r|#$=+#3=UUfQoD)YKY4MH&L~$8`UhM%!{g82NmD?&VjY6f>IcLklp*WFVprDQU
zD3<Dj9?TAjCGuidd&RMTjy!V`97&%LQjVWs*b&K%D75}#fF_2nCnageb3ANeEhJ!Y
zN0NBp72c-fqYM(n&_J$LsC-OzG-YY1sQ#6kOUlzI><Z=u2dWbENiX$;N4h|naQ?0B
zJAoi7xtelb-;$WPx8tRbJ0Rt4H(9yU-n_e0m2n#JLM~v6GxLCWsIziu13bD$h!p}B
z34M+GiXvfvln`1jWGjuiXPC4`s3u+Yxw7fRu=1-S3g?VNZ!uU5g2J({Z!N9WZq;>$
zz6^9pWft4(58C&(e_Qe*H={eGE|h=sThxs1bF2ziy#fe^c4rGGo-fF9xyZe5<WLF8
zRHGCwVRbIoQd70P6(1T8o_++Zje}v;>>;0kR|4Er8!!O0)-FHB9?ef+tj%*hH*Flj
z`?n!h%h9N2t&5ac=k5FL%}tW6W^UtPHtW8pjz5*PJMMBjJa>#%?G9%=Rr2W7TN=b-
zrsa?vv|F-+e!CW!YIX`jf4*iAmYHHRsDqqp+=5TAe}`MN)jM|(2U#<RCqQQB;@crS
zmV|;_o)0>}tLugj&52G-6QJTrI%pB4B|$b1WAX7p=9|21<oF_kJQgz!)$ME|`060h
z(s5PS*}6|0=(nt}xNk!&F>_TDtd6vxv9&z*TN#<z`SR5?b5UN6RdGzqV+Oe-GA?eQ
zFC#{m4l0<;R*hFU5M>zXAChDO&w@JyL9J*A^&B*II!g>Cf+bX%wY6w`GMs^lK@7L0
zpt$X-jKhv<G@&yE+#e@rzOuL-?Ty8fl%tiD+yy#sr<a;)Y?gY}@-`2pk(yX30Rz9h
z485?bZxG8+%T6V^kMD)U=zdY*k@VZ`Vj+(t+qNjN$gmrtB-G!e39ChLp&4s0x!i=^
zgQs(ZsEMG;Hmku?#qI_NS|G6m11e@Wmlga-6sCfvw?qLGHnfMpWgg1XrlITJx!t~d
z_rBj=XQt9Km)VnSf<gtqTQsA~Yku_h+xH)6R_;=Ev-r1f-^15lT1r#RqFU?|@U3%H
zE1I`S1s=WR8|U=Ud+mD<G`;11dxvILs&3@=u|e}StUrJZK2se719Kovk+?3)0cU=c
zocl8E%`NckvJykG)(S*p*S#{$96o|blfZ=>o7Y(U$P?jJLNPi?j9D`LOKOxeRvm_K
zkfM6z^9Z8V2Y1`sTM%hJLFNJ4_54=z<$@^bPW%4OZv%g!lM%-XW1n2mF>@SSqNDki
z#7<WoWv=u_1&cbnEi&qi`Af=jc<L-cOaPTiwR*DxhI&nrR@E`cW<c4o;S&h5P{xL`
z`1WRd=Z<7Ykg|F&(6MxXniYDMB^ARtaXnI;gj7x05T-3*#&2nW;LuBsGCg-;e!OO@
z3tX;7CaT(;16W`cE^y7%)Lw)#%Aseg9A=f4Rxll!NfYAbl=*AeX?Yx|v?FQ9ZK~N^
z48CH?uikFo--J5?VjQ0t_GeiowQc9O<w$xgRxTGY&LhDFxp7&bZ6JU$20Sm+oMxyV
zS5#6uouZ)+Sw)lr3IQyYLOu=m2=*a%)p<gZGfa;&PfH*_S(RrpWpCu|-!^NS1Ryh}
zoc>|jWtf{%MuSBmYQ}9Q)LS|f<kgaC3Z#o_<D9S<mZplLX?naa1Bb4<l2HNLDbY|F
zcY0R}F@p7OhWWPDjd6ai<^^?n<1FQN-j_Q*q#hvo*dNY_WQ;X9m@|XS<4I2y!~>fY
zWXp}vi6jipE>hmOZ67+RSV?EiO}palt@>Y_@KlTtcAP@<fRD=HaKOAcAQR@H1v#Nj
z_k9(sBJ{sF{bg&5WW@HCDKK-&)$PreQ>lchOWwPwL89U`1DlYhc9$smwsTe(=LtjZ
zbfWKVmtr<vl@0QOSj_n^DD!Hob*|(g(V^dNKe&63-haEjbALybr7il*?W(F_uc@y<
z4OVzQrlIZ`c3SY*^*Z1M43J$xn-78qOS!D#DY|<v$RgMuFGMGlI@1b1lH~n3Ki#Nk
zE)uDhk10KSp?aXmh0ZSutGvQfcG#%brx@`riASaEaUd2U3*>z<e#gmVz5m-#VbS&?
z(Fosi2MS5qpqX1jA;_T1v$NMih-?=%f#5h(vER?QBWMudZ<egZh2Fttr9qhK5hcx`
z!p>IjY_{**uB50{qnGo6S~LN5A1_{{qJ%s^%d5Q+xHuJOe+89%Esc4usI)Lsw_rvQ
zYxKJr&`UaI)>ud&TXhjj#)3QCA@<H^6^Bf*PEI(}pv3ODm7GK5lrRfBiVF!w`(1bX
ze{GXD?@6w>*5}X}=oU+#)&NT-nL^J1@1zsBbNPOVNim;f3Y}|-^CP;|;`04F&{|j-
zOh&z-F%A)f!z`Q749`(gsYrjNL<FA-JeQ(gHMF85fpPP_R;t-O0p4{rhus4QFc*dH
zqNhfE#)0l5m|;Y7eD3eH@7!aDlXdp+W#MGi$tAa8?LcYx|B71wTM({Uy|dHax>I(=
zaaA5yvW&G8jizQ7Bi|(qLV&AOr&7YEU4MfF;sEC&4l|Fd8O<Phn#b+-gDpP~R^#dI
zs%460#D(3iSj=)o0@-X{=h`9w+m6=2J8MeZ&{Ku#{pGOnT<S45-w3zgWP@8bb#hyB
zvGZ|<#qpNKneu#%p;UoV%53n2?&EYJ&K%~PWyGqAvQx5xIo|dF8uWm{PoiAU0nb%x
z%-H^5&@@SkLwN}Nl7TWQE>{EFV36E7GsYT5aU!`s4HT6i1<zi_x_~bd=JT#ed;I1S
ze7T{#7%oH|!i#sk9Y_W2P5Ryn8`6y)_)^4PmYQUzRS95YfNoirt}czOT^A<+lWTxk
z9T?KZU8<+Ks+j0fz5A|D-hBPB>+z$yGSON8L$n$o5=Dm~U-tC)Ujr|W0D=PX69r?$
zO-MmZw8om}?1A?#_x3I0hHEb2*IUv#rwL@qt<%IHb=+Q|D``f%fZYAlG-ogsTQ$1C
zA9@bo^}qpx%Gx*`D4kk)H+{r(dhRwv@mqL_B#l<4;5Ngx>#l$)BFlsZKp6lRZ*Z^E
z?&x;=Bez%Ty8cRJeR0e4X0&zpdC#|F*HnYdzKFd@$N<xRtaAinQ*%w=y06~9?0o<F
z?Vq2$J?Mrg0#f+f3lo4yTZJDm%#0LpM$QpL10<*~L2Fnn_<(D=P<2a0l@HFC?`EDj
zWzV2e4!J|0=ukmfx}FVgkvLY@j`eM~LQqsav!#O8^1jVfbFPa#@*1LJ$Y^fS_7Rv8
zT$AGKC`D_M2E+r&`1p`mN6sG6zpNWg51!Gnq6>6!wM)dc*~K(HqUA1jnHC+MN?8lm
zhhlT|_>O`2aAghxSkAU1zrnS~4J+->w4WRc@nF+!;r!+Y^Tf=Kr;4>XRQ8FFM`u>;
z7k?Hu>@0>!GQqTQgZl@LKYi?|2xPe}tnce>cgFm1&_*mCSAl{()SsgJan~DQ+rhO4
zM7v*ctpm?sb+f&t2y@@2V`~@<y3X07g;&%>Tfg^OZiu4`)rGx-q@mIY7&z5vr8gUX
zXh}ll3NJ15WOW+GWAiUd=V+GbliAQT(~<Xwa0avV8gfiR5lix90)>{LQBRX*NOoF)
zuP*Sg!Jqp!l@;1EkXy3(UFXTJf+RPC%&Q_<b04q4Wj>v$a0D%xvEE%w_F|~O#Db#Q
z0W?!S?f3<OmWwu5<D}FVOv-l{55YyF1rmj5MY6qB{4sZ^e50O=O2wyXZ6Q)Ldb+==
zGCJ+`9$;XsVy+u#@gDWeQM|SJXZ{3j`d-_TJzDU4Yr)+#&URGWTpfA%527XigK_RI
z80XG|_Wi4jv$a`2&VvW-yH^=!dvnouEj=9`XJ^4U+gBXt_JVPCs$J+W8RyP|ac)1j
zd!=#iZZ6udtIg-$f^qIX*tya;_ZN(F@BY=k>%oF??%%%`U5ySm>*?_RRo18B8cmvK
z-uqBQKU+pqUX4)=0^hG_hM1dP6BU^C2H3X}FA8{LP>x#oi~@E|1Jw#8ILE$OwX#V~
zFlC{syx;Kco6##bt$?FD{u&l=(5y%;KhDtH{S@lk`W93UzRyGV6qR^n>U36~ZeTGv
zd-z6C-c2`$)inQxD$e^Q&DzW1$Vw5(d|P!%Ya~^(7AI>Sg3)(h-=DhNviVHT5N^R>
z?y6XC?DYscq(^(vG1LbKS~^YQQNe1Pn9>e+t0`$a0c};h4nY8u{dpJEUdC#uw97j@
z2L<o0cr5sx+t+Aj^E{n?H|t&2>CW~v&1xFi7&-cap_?Q}yBp*<|As0#2B0@<wJ3}Z
zNe+ANk>*MoExf2DcMj4bB-fY&HZ_$bwH-Hkpjt;Q4>@Ar7MID9vN(wgv+F9_)TM1t
z#Kyk3^GUUwv{^%Z@Oq(sYXogrVHumD&&%OHs;9RKp~s(9K{<B8q--Lvhc(CE`a)~v
zHFW6niFHHp0-|~b+!Z?mTkYHTciLN@=@8Vnd;FYDSU77S=%s?YYR-W3&aDX5uJAgp
zT#_PmrTm~3i!o)sHMooY@dSeUIZFbxhQqP8<P@{?T$5*Pi+tmH5%dTMLs{@vrNF{}
zzyI>-%l#KGbg<p1JM%n)Ou>AEQPJgUw_#oBK0h$LGj#bGc~!Gf0}VeGyH`K%$M`gs
z$?`878&~_n&a{xB%zJC^h<<9gu6e8Sq5ikZr$*7w{JHbjWw2K8wXJRI+4plp{+o?>
zb-Imxmmmqq@P=#2Dmx=MO04H_0KOK(sBXRB=ug<0r(DUY-CQNS`KN=|uS#aOwb`*C
zbO61v>-&flA|G}GTJvaT+>~^X$a}cP`&$fU{GIHtRru-KWU*KkkRJy1?K^hE*5+CR
z&~QvW(#23)PPC$Qup7m?e(oM^$U(er7yKE4FrJNFDUD%GDKJv6)CjRMp7zLyrzgA7
zY$K*qISvV@+Cib_md=zDnd`0`XO;KJ>;ppf|4GMm%sU+KVCc>26meJ@^Hze6i0$py
zT$ZoJvd_1IaBt?a+bj=<Pd-la-Doe*<8y{Rnr}2wokHb=%BqUc+(iR3IyaR;P|~fT
z536_dO{Ux+#fNm#If~Qa3{5`xp$2k+Mlt4l>o@ZEEw449yKzf?m42vsd^FwI-rU}7
zZEbJJ1@7FEk#L=IE0>>eNUbJjH#$T|82PHK_aoYg@Zsh3QjwN*Gj5vm6Q-0Gs$E-!
zF0aQ3z?FcDlDd&{*|VKaI_Vte<#bAG4d!j5cJyB1b&}{L%LYNk1(#TJ!g^R?U5?AZ
zMw_p>ZkL)!NbLgMbUaH3$(2;ozCEqMq?*z87?zOMpEgQ5J5NYe0@*i145(q?3LhY&
z8#~60b7o`2koY6UCs2+=g<$9aLH=t;e?!{|Y)w;?n0_`;@7@`(!%+G`b8h->>Iwr>
zaK8$hkmgtL#1ZZu3QQd>>UlO})A=|7>psnfr;MrdU8!^Q8JcC;oo;0WkRf;rcUE6t
zKj7L`o;X~%>+3{|?<cI|o#RI-=cYM-D<JWElZhI@Zxs(-bV1f#wmMu2+sVcqQp%iq
zvQ|PlB2BK1VFad_Ei)hmVReamXg?*C##noOw%09Q>9=79I~&t~f;hh0ZiStVp2-f0
zhUsyz=w3MZucAD{_sX*pa0s}d`P6c$$?BW8#TuwZ^wW0qcy`Q6YOaKFlt{9%dm?7g
z*WnDYpa1@^|1%kKVBtuxwCU^>l2D@!?Il#EMi7pRe6cOUv+;3!%w&jf{!<1F0@|^|
zr*tH;eBhTW=z%Ji_=|~v(5n5f_ujnR{@ZuOo5#FOjBf4nQ)xY$oG^k6C9a!h>~IV-
zD+-|yKz*tya6pVB$JEerfc}T}_?Y-lqp`cY+m9tLMUACAl^%bH#5Z2g*tt^oEW1}?
zR$L@QkK<UUXt0i#ixi^8i-+e0l4cUpNC(+4J3hBuvKKF23gU)j6Q3nRq|QXAvmyGk
zYw@w$wW*uPA46s%k+cz#Zb?z0+t1>BAp2R&7|$&LkWb>VU`Nqsvw;u`Mi!_@+cfg?
znsPrySOV^mK6|OoPBMY9o^dgUfO8$4TNRqjl#7AGmM^w?;b*0ZV6#5s2!Zdf@m6LJ
z+~V&O-EsROk_Y0m`^|Rq&gP~#R=^BFIgA5So&?=rAT28KQ#cyNXI4VRA@)f&b;=`g
zJc0C(ERSP6(Ud%sf!xGDAh2~x64>?!+0jfS(qOKwfeXwzibtRr&POxgZ%$`q?G$sf
z@78y#$SV;5uhU!iRa%sV6?&KH*OD|VJwg_`9N!}0Oh9@$O_-C^ovzx{WHqVXP9)h1
z`mxjwq^Qlw>M5?xrvg4Lk+6(<%~BP-9ns&SND6D-Clf?5K3NsSVbX!*=Wu*gvbpg=
zpxvYNqteB5NEntbN(u}@fPKR&uvC@+(?b*xk!X;CIAyCVNW8H(O#4G_pvV?;nh(TF
zn7Fu}gtRdO&1!=$7XVE_vcH7x9LBfr6HAy$-atGU<o1co8#!PVk3aDI7`>a$2^TIF
zQe+YMB4|m~N%!pIB$mE4K`yxvpQPdLTJ#vTcCYtlK<p7LW8|LzP+H|l@Vte6PaSdj
z0XeL0C$K5ifWmb8p`=nk+QFdiy{ZIow@O3?dpU{ZWUTwmQFK0favlP(N5~PRPhtC*
zTwKqjQ0s{MQ!M~eb$~v}ry1Ed!KUS0?VO?BnP|QP@LuL+F8n61-2C6@{6SC$EH~-$
z8%WK!A_GaoAE;_E|J4<QHTAn30&9ZK*hWSo<irvK+EBW$Aj&s-!>qRfKfuP~@zz8Z
zyU>R3bs!Dc#Ad~vjg>!eOSkN(V~ue-P=q>kV<(`6M=QH#ysz-<X8DkQTKR+h<Ize}
zFHbX?mAmf#<!>MkOqv#5{R1aGrjj;1NRHy!5N>H)WqzV1OTBZu_{fIfwz(a)3JO0n
zzVwF=$@wFGHSrJkQZiG1ZaQOxj&L^|qRSTjI3kW0Pgsm0!6f5uK(dOJ4Q7&ui@w3S
zs&w%^N|WKh0ypYsm2zOE0IU^SF$h__fBS+c@o%c(iZvm7hTKrGsU&JoY*c)CntTn|
z3Qe@(S@YYa+bLs((KL3Wt`bB?h_MTP)+L1^9s6I7Sm~9Id%`~oWi<Hc9mW09HC<-g
z@m<d686V3EyL~SIjH3tO7F_xF@+H}5_v7IYP3?T@_k}LL<&4rl=!1IiqxoAqsIkC_
zxa1jH*G?}RoOkdUbZ;-qh7I*G%`F*P6BL?x@A^gw$FD3U?l?Gjt;n$PgxR^ab(U-u
zV!_(ElB0%X)Va!#=#Z9(l^3?7#UisdD0tLm&jD(*pA0s(;70Y$qUoe|<YlGy;+pCm
zWMIWZHmituW=w5>`9OaxO{l@lV7YL}z_X8FUTw$`g&KF+B3uZSbGHAXjx>rVpT^W^
zSBoTw%e3T&*5tgUi?UJVeR_tMx{ZjeJ4>c^a=y8sZ3BnH3&&*4ooIF1d>bt$YfNux
z3tuEi0^`EISdbs%sks-Ek1_riB4n!_eVcNdoQ&)s-c4P|_4S%;C0d0>DO)Lu+U>Sb
z-u_gyBY0~R`z6nTuj)z|6%U|$46r~g>F-H5v!V3K(QD$&3vQ9uvxU9BzTJ-AFfJ{o
z_#U0neERtzt)z4xVC&;rRQHXJ(F$*D(F(Uh;uaH)NHd3TAh=S$Y|%Fn4Z92b)N0xn
ztmFFnPMak&c9>ITkBPDvc4dMueifgl$FX=34wZI_Uz$)gs5Nk;cy0osd+^=sx9>Xp
zFW=Dr9CTjpz3K9b<g;ShAjQ<|#JSs0>`z=LdKgVkjym+NUn{f5%CK0ZPg{u|K8jY{
zB9dtQ`S-SLx7*Qc+AyMjEE9C-32?3e)dxt3{Jf;|g^rM4<M9ItJWG-|MmQj`sLj~I
zruMqk*4SPt(_vY%z0+-X7aT!Hs~Hn+bQu4Gv}1JJMmAv!dlNK*KcA%R#iZj2Pvpk@
z&4}IFah{_)zP+utw{g3X;ru`vqVWDIpkXq5ge{mm{_1izdkEz*%o-!ISgV>Y58ZWe
zJ}FnDWT<pSX%IgozB_CQEk~2-$ljE@=2l;fw%d)zjHZ(+YzL+%vB~bY?_azqlXeYd
zS8uwUu;=$l=zM;c0)jVx?K9{(lRRa5;*5~1mIfqlgibiZ!lA!c6ABE-Sv$eK&jhIE
zhgG866kzjfB|oZbP6PY`L6kDEB2n!P;=jk$lrW#zumaI2yRkR*Y3Vb?LHt%PLtP^U
z2V^`F;H6mdT;Zw(FvBb_C6{slc2_zgDe$cILuZ8QCsqb0t=$3INz$!<B9>FXa#eJm
zuC27>OFP<25>c}RCze~hi--?W^pi2CqX+A$zDxVaLuph)6O;6M$-ifzG%xNtXrR+U
z6Z1g8`4wy>vR7-OH231-1p6)=C7RC&XlQ%;<CA`ltfl&6NZ+}u&F&?88MFTLte52D
zWSU%Kmi`l4&@5V{9gWt)4@X=PZawk-VTqx%qc%IZX-x|T;hq8?E-SE{ZUm~)4G73A
z9m{5aN3YdlZw{>$ZNyB2=&64OB3%X=XxNHZLRz8plQE4-MjqQvNH%f5U~=p<;*Z$5
z6Af6|g|wyFk_JK~PScO!vyBUB&k(Eo7Z`2k?qX|@V{IG@VU9jiXA#$Egzwbc64xEg
zDi3H`#XsgsBahh{(QphF6<JL$5gQ(7<CecU7=kMhXiWq$7kDiDR_>ud&ou;bzheV*
z?4~e7ha+f7>HtgW(~ygw7RVa3TH|TPKFRr|8K$EYVRDcq>{2(^rW1bbr8!Q<V$jCn
z7nfGfCCD5;QC1YaL9f5z53Ao8b82z-KgLc99rM4F+HmeV7b0F1(ZTB{(RTC>X6^pI
zyKCw<61`m{_lMprcdOs=D)W(cN*7U1gB_oT?;zo#J`;D4yog^*B1N=9nUDXrNP6jE
zQu8u`J!;|-2%;%^ZH8(+D?^=f(1>I8g&uHSNOt*&ZOE^3E@udcMEV@M_Gl<!BgTLj
z;6IXuzIsz{&F49S&>Bsqm@BBJfN26r!K+8R5tbA+E$Pb326w-4k|+BcPo9!0Hesi)
z_CkQ0LfU^|wvEOUb-~eYl3mV+WV^$nvcvwe;6!X39_+n*A(6k^9XjB{4t+wW=%=F~
z_J?I-N1`;Saxidl>BV7tA_=F4tbs!V5)=~mXy8|Wo@K}AocS^ZL&=V4DPDh=#!ZdN
z@&CSvd*Xc%a*QzVz}HIB6+gJbasb;-qT+nqKcVGyrR9NFm)+APPA*?3Uphe)LgSc-
zIC9CL1<T4`BJUD^JW9WI*Vp|@yvehOYtcuk299D^fy5OSqIZblYhDy=DbX@<>Ej|e
z;!Xj=A<2^yg+n@w-Oa`j%ZX>SvwTYjw^S1r#lk_1JOGMBacWC|eF|>m)c+vM68ANt
zc$5y2k^uiCak?g7g*UaSx3G7uY5oP@+GrdeW;CjWPsz=n!)$q?P(eJE+1S?3bx4X{
z*sV};C2D6CW%|YdHA=HFB2|Zd`#c1iq{f&8XKDBL$`fMmk%Y3OcYV0K!kzcaO-q00
zKe~_&eO;Oa|Mm@s>x&6ojalXL;S;TFJGXoUxsT}QV5feUckXv&l#Y%9AH_VD+Ba^n
zmfUW30%<vWup6Ssu=ft+M-Jo3@r<5uV^zHnXq-a892HZvETl?EOuTSTT?t(vVNrvG
zni>#d1e8wW6jWDmO`oPfYWBCtsXa0RrV9xE&UPo}%OzqLZMdy#@05w^(g)nrXLla#
z*bSey_@**c*IuX+6>2T5X3mbQ+&1XK<UI@LzPY<^*lopOimO?Iv2pn-+=E-o@`8L}
zWJ{2yDj=t&m*8;8I~-AhQD#~B@H|~SO~D)&IZG>Qj@b*3);H19S^vWectie;|9twG
z7wg%(7j#VU!;r2mV0>F0hnebjW@DhwXks^4d0Ir4844|Y!JJjX(i~A|GNk#@w6%>h
zJPy-R-GiiW=^UAPF;X3o`oUjbxNf2zdqp~|>c@obH2Gzm5CJSJ;i4gN@O57b!*DV5
zHd_p*j&g#~0e=!dGUOT?`3mv0I-D<}hS_Kw=NcuW=l;T<$j`a3Bddw@aQLNk>*HBU
zv?Q}q)uiw!@6I?kDfgEb^vu2n*pfMnFo$|u#uc$X1H<GauNP{1gh0MmBbXDp93Fwc
zQjSTYgh3vtCz=PEo81wyUg}ICX?5(3Lq1&0jsXP;g_U$9$weA135lZ}Jqrq$`wsFa
z(Oiw~y8>%YAL@#gMx+OxARB;l?(jljp=*&;yTqw<T$%Efze`dPh)wuHU!H_(`J_AN
zb!xj$_jUC-ito9;$4bkSX}`VJCbMPA_&%0oEKR~0vXb6nKl0v+Ubm<}@k?+3uJ{eP
zk2ru1#cEJ#v(R$mb-CAJt)nBk9>Fqv!(*|(-r8BftSHt@Vvw4hIr0kDKK8%Yul()p
zPH<0k;Y&hKN*fl`<T*XmScNPv*Tl?5+Db-LOIJ1@<~8V1^A43}^z6w2i+El9c|1j=
zfcm*NT}Q-;VO(h)_Q2KWVBr`^m#8rwqq+>rax3WA##m#|g^h1*Y;8^*Dy2}o^h0nS
zhnOhd-fOu`e9-uA6%uc9(&89}=a}V>GN8}{uiI#MjwiBYZ_eNBbK81x(gho<i{giz
z^Ece>m@l}ZRZsLK;rnH`>M$e<+f-GgW{eu|rx|<{jm;Bwg*0hmE%El!ymc&|_24Ci
zxY5F2oK7YnJ#cTbD#m#(YGfe5EKae&ZBcLo>~=HSZpluu$BDLgO?RL68^EM+HnB?m
z>?3;@4yOs~S*ED^`NsXtM~xjYE!Oqm@MZJ^d@tw*1Wy#UN~VNaXn5<8UdMvylN~~S
zE^E=F=$-w8{$6=%t`eT$iVAJb`V#yH2Ds#M3C=iK_3m2#i9f+Q`nmNJ?q>D#XHHV-
zuK6S_N%!FlcgwMwarUmYRLGWg6tO?Vy($`#23)G(N{`MJKzxWyk3##)aTnatB(YNr
z=)WUH1@{Q_+{GtL<e^cLsBIF)Hk;zQpbwded7Vp|6FbHj4@%ub`_d=F(l+{O-k*(}
zGmTBSv7!reb}@TR6^^n$EgW!(q}#^K4v=AZG-Rx)z|kfN^TbI9Xd4%cCVlus-GA?i
z!DAsy{2pEc#FV(@4vOW}&#Q+9z!q+U+tF)%DIX6GZ>R<BGdrCv$Xz!WY&EsS^Aa?P
zwG*%p5F|WtTKabaP#>qt?TyqrOS>V<CiG5iF^1dtXxkh5<YPGu@Q6=X4p~C**-66D
zcBI<-Ph;nvcgXV2@b-H*xiR9<mI!J{Lr0}FfK-ROG^GeD7FCT)RA)LYm)2cXTPteR
zHPK&Lh?F65yz&N2=RU(AIrJ%E=7sYFVNBIXIhj->w$QJ4Ryggn)b-J8-t3b+p$&EQ
zuF$>2t?)E(AKP}zGXGWUG5JhnnmF+sde-^4Pb#kcInNQdI>#v)Lv*cF-|Ebuio3zP
z&=RW%!Pvf#lRx0JG94r~TG_#olpQFLS%5tm<X;GQFwrcZdrh`aT>5>XRU5SdJPEep
zQB?;W^_v6cdqc|OvGt-;F}3C<2$-n|cR`6D7DOi1Ry$f>hi7%e`A!$PSIHc1MNbf(
z<`}l7W0u{fs<)Y`-`M8i7rBN$lkbNoN`@VMci;pH6Jni%LOn8Y?lg9It_xf#pT|?e
zGktoAE2LsCmz^n%+dS(lo)CU-_0;j%T|noJJ8mPdZJEi(R%(oeJiRUET6S|4Pvb7X
zcJJCo3BPmCtP*EvDY&1rK?Wpl#vJO79;ZVwiqPO))BF!LgdYU+87U490hDATEVa+M
zd2YnA(NmJq#k`P)>NG3V#aww*!ce4c$NVJZzCM8}anCaR_%!#bR&Xs_F<O1{el2<!
zZR@(Vo<DAxnF3dgVwdWouEGj3sJe$_<ve*$cfH_K=73lpm2cXno1)dew*Ljo8y>Yz
zxN+DTJ-ii(lI31;-+my2*Z^GYU5)kimuftQ8UueETzNZm6U|`TgRWLAICf0@TlJ-D
z*NlXeb|lCTR-<^{tS42B#rbI(FCDy;ZoYY@IafluN)k*kAO-v(m~G6kQP1O|n?|a>
z)^E=lEPQugoQAOoI1FXb<n%3vq6}sW)S0cj9pWoV!BMy%1{IK=4M4PpdG%unhB|-J
zB7U?MOzb2cqBtCLlfdL5%ss|y{nPjF<~icsj$P;6;SLtD^W#~$mrF^iHL-T%l;k)@
zl!am7Q;D&|y|rpFqYY@T!=_|KH(gkr)Y92xs3q^3+yw_1@Ub|%q2+x9Jc4HJo@Jq<
ziZiX*$ANt-T?^v(era%v&A3nvwB|!VID&f;tYx%n4htz%m3`9CZxU;Y0sB$R@*AZe
z-JONP*!rE&*ve6!Kxbs*n+}`Z&nIv0c0SygjlgCwZSZ@Iel^i4ZIgnn!N(KD&mcj0
ztc#tMh`e_F0neUWd8{P)TimQ2z11V(BY?UHh1SvuAp}v2AbW(%^`L;QaqWxaA^u|u
z$wF`hfDie7-P(mOn=s6-yhV?^H~OVohC^HGjo@%)z+Xdx@r`ZGB=!Xpun>*!u(s4L
zHH>hEoE(VZ(D%_j^p>BcLD*sBjJvG|o!X?kfITQjQ)hsGmqTu(mv)hHSd?-wx^ux<
z&8BDuWB9~sF}TTQ<V+>rBv3PFWlJXsU(3GoQbBv%Kr2Kr$Hx-zxk)DusT4;}%<CLu
z?-eV%Dh~UhJ?w95g|4!-3)~peIcik>IIh2!46ddSY`F{x5jh%~V>4zpWk;G@pr1*X
z9JVb3n!bOFm<iWiNZpE1>Z<=mc^Gs6^U=yJ4rf4q_2{rb%tha5Q7z~><{tW#)a%HY
zO@DyhJBk^80(OP+Ud?(T1+-PldUD?Znwu30h)}y~Mo!K772~`rcUE@k9WcIa5j3*a
zthE1fOCp(ONM6-cv@p%Ah*n-{4%*7i5TvEFwY($~9}eKpU8b4knUzw}0<A}!sep7#
z9B2CMZqEbvE<rfzpCtVc3|t_vQ$(;+Z6RIK)~=R7wtDLY<cQ>+-O>O{nBN#$Yw$(N
z*Gp^Nx}-%0IA$mf;>Z9bJUW*GSSe9qhqmQJa#boTltFtdyptw5DS~uKhVuWLag*r@
z31M}nsTbf0VjJ|P^r%e7>DY>lV9f6Y+ADtttmgL<va1I*S#)Zfl-CfhC<Z-0loc#-
z?jY@d{v!AnbDEdg7~UFPNvuoR{%O&a;Hxf8rl{AJF`T4I0l|WEta+hhc9B>K4c+CO
z=wYrQ{jN)LAlg99T%Itjm5YI}n|Bc&1NT1ytI*U=<uk45c@F2REQ&@rSW!Ve_9$T-
zEVdkOnPZe0S#e9ZfU{l7)vO^^LZ_2^o;~yKD6iO^rpcKW+Vf0ZyAhfK?|M0ATYl4(
zeVye9ef>GSh)n1R{<`d{n48c>A75LZg4O`GC&W^3UGVs=HNhz^FXtp4qeU-qmqMXT
zj1JhC7Fq=`1}8foaz|qHTVN7CB^`4<#(QnEUE*3Rx1$ZVMBlHh@q|j><fh^ysL=(R
z2x0O!Bqh3(iuHBodj@=u@!p|OXv$a^fhRPVCVAfPsIg0}z=i}Xze<UVD`rO7K>1&O
z(e#9eLCfR!@=WLE&t2XI;2dCOPe?uez=$(++F(bKeb0GcOzcwEpcC2gcfTzi0C_|J
zS>TC#a+0AKfwSnrnkSRtIb%v;x%LkB-e8rU=-FXJnF&JuY<d+Lw@oaA_VM|S1)Qd^
zfey5PF0c6;%qsvj2jAOptu7g}#h=xn$00Q2eqvxUrl*u&ENfBt*cdk++B-tBq)ZAe
zK>ES=_%;YxSqWtBLBHJMoRWUR8A&4D%ykU*#m{ix2yWPITCH&5X!T&oT?7<Sh7Don
zb5*I!B2*K%hv9FYam<wh@%1&?6_>;%Io35sQ#*Qm9+(9|luo#2d<+RYwP+Vw7C^f^
zl71}#@H#jC1o|N`gka-x{b(TeNg%@p3uAEMiZhaA_@0Y{V`*Sh$noR8Z@HI2d2*~+
zFyV*E(2AbQ`OuQPk8E{I)qYkJ(vX59C$ECm>^cg*WsFug*nZw$%tm*(9XZeumoL11
zd*hyaT7x);JFOE&hkCJR7$LH}k_^7x(fcJId^p!|MDsbNy^nU$be8o#>h};~hPKNA
zW=(BBN24JVktP`f*<5NxU;Q-uaO<lY3q-zPkC-|4$Fgn&QYRIt?&8|wjBURccJOTV
zu;hWWDUNR6mvt<yVLNczFZznQ++v&^yr1Ql9#AVT12OW-))OQ5y6~Hz0@Y7L--=KD
zn{W)#trksB<gw^saaj{9CE`}p42-{w3GgV|XQhr`^9&1$C+oI}?|95*un{8hxNkPe
z9Qnw1X8qa7@G5Z!>6ST~7|ilYwmixgd7Zhauuv7vI+h_;2sl12j^`9-pK?~rgicHO
zinP;g(w!tlI@RiGY0~1loVjgklJ=Smdd!b$0##Mk(p@<?&ULUT0m+!|pr&vNlYrpW
zunj&|j3lVxbvFX{P6UOLCO(QM%rPaQf<MdV1plZ7KsldZDw>;SL?IZer(SaT1$S;P
z2}JSq9Qv3SQVThm0FtQ&E1lt#hXwe8-_BUZq8ljh?UhPZ;S1{E;f_5#KVW3JmjaPo
zD!pKYtwK}JLW~_S=!{)Wt-7IB&A*u+(@J8{rZwwmqK;R1sbT<$=ajQ!=pZJH!DPG<
zA@kCko26bq(MSwhhpEa99epQDV%>?u-U^!1Owf8Pz}kXWhZ~aGhiLmYWb{v^aUjaK
zn$h7qAf%nv!#H!}6xzoYefq{!Zd~I{ROlgeSd{6PCT39>1o1^tD0hTn7iFk(p`-9T
z`m{sj;4E7yNhO`(MBXhq0^!?zy_GL&II0jwQ>xTQE(;aiholt}nYCyLsy>iS?v~JI
zz`V0K$7U$fnchYA4iMFPg0YP^evFy$xwKSE;sF(^-b3jdLo=1K3QHaabdXPIVR-%c
zR5}N1$(3nEN^nk{w^r*0DXt)Qs6`zO8^D2n7c34_ND)vtXVS<CaccvX^vqXSM2_@2
zI*h_XOA+vIe)|4pXaD8i^JfBc3`oY#B%|dy-&L3v#g>L<Yyh*ifV<HaO;OiwtFmQ_
zrl|NgT<)-onj$(>NGX8BSMhW}KK8CwbboVmOD=eCu)m5L{fF)r{PJ|~-QMH9gJ+%h
zZ(lt8%}?P!e|9&$eEsy<LtPR3LSz(mGKbPT=y^b0w5mu2FIf*r=Ol@T)01<)<rFFV
z9=f<yS@hkF>1g5+4s;#3nmF8F_E&Lnvfz<v&oH`Zh%t^Ql1_4#aJq~#2UJ0DV(VkY
z(qS7mEt-upMYOdJT*PBUU(_d^>MSsGMOY6{EDeQ3Y7c9dfHMyZhwArs!;*;3w9guV
zG7w#+^C=2DWT7yTC-Go#E)>pxB6p?n({J4V1Q=R9fZF`@o4uz`-#$Ay_&I>=hO0j5
zpefpUv~gB!th3l5zBeo;yE~o~A_gq3+})v_a1ZDKjnC;=(1Y8HUJ_4IKunzYC+AMp
z{qVh&$LF7trNcv;!DOeTiEg0Ywc!75Pm+=Sn@ltO(=ejm>LyCZI^956o&W=c2ys*9
zMvV~gn4m^Q1zDspHZ;$-*XG&(i7T8hw69H(^j)#B04f6F7(k<_B{Lvm&EQ@rV)osS
z;u{Z+gvGJU72;#h&h37nPlcWS#BvcBH>vSAM$eNJz-lpBMX!Rx&8BhS{rDR?U+1=m
zZ*2`-y!56B5%Y^00J&-KpWZ*Vu!Gk{ExpR!y?BiMP!?&{WN$Wr(YpHb@mkPkYI8Gs
z`51pe>T^STy`7a4FU)4#50riJ2C^&(sUOhZgY#oG7n*Z^rGU-zDBl#O%@cgWFs;Zf
z(N1Osau@6Ra&2<+H=7__1_QMt3T+#RV&cded>f8*I`uh>xWHM3!{jv9Y)(nBhJ!+i
zBy^%k6p;)%(Z0_Fui9j@ww1;37M<tL@VRe>=#xfmOaZmE_HSp>v?4GlRfCX7d1}+Q
zs5rNnN4sQRx3|d=4W!IpYjo)BuFdxk+uSVVuTYTi%dN7916N1MRGU=_sE3y%QXt9&
z@@n;qcY#)jQ(>h58}A1aZ{ftyhO5b~`kPp)$a*zBUZyP!EpNH4<WVl|5M(9-xws?b
z^OERBzG)yeS5P8AK_PWB`7m|kuRqCc$O<8|M|+dAShF3OlEy2hkHM%qqWEXPk|I~G
z2u}6x#8APJlyauQD~AW0mY<;G$3prvOJUKv<AKx)S@@|Id#fI#DFR{U7h1rlh1Zhf
zx$0@_eZ4n||B<1P&?n%jk~&|>+jDiFJmi2CK4d&-tRlCXNM*eP?U<-65KkQ*>}*J4
zDyQZem>^0@U9#r|74XX@ol4RutyT+TwS2q>z9LCiWV#}eC79-}WYjMJH{=lAjFx;F
za|5D~%0r7owxGs_VOd>hDp9Qw1Aa&=vq}rmtyA^73LNs@=en1y=NI(9V;--1&Gtch
zjW7h)Kx^#4E|{7Ytn(eUuRFasFU4KB&R%*tDGJ<SX!R}_?rz5v-!gQ;H}ubz47%n$
z1Z7Xz6}$uL@9oHg3f)9Rzfl>|<2=n65FrF4{&#b$F(9HXp|ucIq{1@rwqR3oLpE?n
z96sr3tGUg;M*r4aAYx;*{b9!`D-}Ohq2iYXh}X6T(xhD+;IY)fC1}Z~J$`-j1<%4x
z;>ko{1>r_xhdrZV0$mD28dk?qk_<Uxje!mUtcSEm_V!%`kxgR0YwRftJ@E8WH2;AI
zI|L=Z%FtjxT-LcqXSojX%RBIh3u$`GwAMMP&{`v5>A;)fGFdLA5tpAI3qYFazgQZ8
zTa#&U3g3jnDo&eTNVYvPbm&E+Y%K&i<|g!kw@ga1W5aIPd-~^ySlL+m1&yP<eVWU7
z(91qv?VzyFbR!;o=<sMbELV6_0OocU4?k$ty*iW4b480_L-8<S4a}eE$gI*E)`IQk
zd)vC}X@<$Qc*biwkFeXZwr=K*CZZY(2bMd*oM3-qf*@Ky_a9be70Uc6PCI&?==A^3
z-oGxlkzMPe;P1jyq#+*@paD>#R2Q>K<wa2}6>VK;l5#C??g}7DB+0Y@B#Z>aqRX{o
zMgQmr=w1;WCt`QR{&jx$Gn{^t^&~yNZ;UbL%mhGDs>}91z4pZ=A~WZ8%rVFH8$d62
zU(cbVaPt|7kjZ^;Di^})W>k^a!oy;Tz&OuGPWVA7ZD4&46y;EY_<V5?-0nQlt`8|T
zFFi2$m;c)r|81K`#vN-&DE5{yJ_WAZ(#Lx2Kv}O3a8BHwQsDxWQddOV3sj}?y3HAg
zfbwX@;usR-%Gl44#E;FzI+qsu&w8NDi(&BNvkYNjVQW(-*DQv4(bGM~k#1`hhhaAA
zrk4{Zedp&sMUHx=mSAG4iyD*3)B^Aj4AQ619b<g{{KZ`eNd~>ePRlKZcgf3L`N<M5
zspYyWKbuXc{asJQj}UPGX<Wfb6%M&|I?$F}XM<Y+Ji}XC?Y5V=0QDu+UC`3M$V*$*
zrf`}k)A3(RE}!N(Z$<CA_L#z~r2sW86;5YvD#GEfvs7{d)x9*=^8(G6j;5#Cg<w9|
z*$P}hc3=|h=8nMvF{GOu)lS=_{Hx=%Mw&jB&9JumzBJ-Jd9$l$kGUoKZ=(e1TOl%N
z<KoAW(5ayj7|5ZB(Ba@ZHpR>~<|rKh38WHg%LmM%J0I(k0S{V%O}Gp+lW`W^!*Q7y
zrwd--*1y2$P6*nOCIf*I8;B_`QNl^{L2_zIi>t@sQyS^YWs*>v(Gylc&S}o(2SZ`H
zGOQp<3IKoAdpCth4rduXJ|%P~?Eh|5OV_L<-1yV$wRvo-hPqxzU!S@bTWVTXj!Tjf
zbpx=90rO*3zm=dSy;lc9WrIl7Y^g<nyYF*i{L~d+Qvf~L>#n~Q50Yc@vSj!0fYFBk
z@o)c5M?bCp^W=0DvrDJBd-ZmPDDP-*5mDH#vpkP^gtT+vSF0$9p~Rs>aKefxP$`s9
zZf$RGZ&@qu3|{3^UwSJp7WKK-sbp%uc2sDFIir~+e9&pJ;wWUoF=9*yZgze5*FeK4
z=GioPuw&tYp>|=T;XTzb6)0tgR^@;VqrBx9jYsrr#<nY-iA9?fQ&GRK)RJP8>iXCr
zI9W?>CUxsM^AB0?5#F_tySl*(dojrJJueX5QxZk>k~duu7kciWZnCjQb*FJJ@c)Jf
zX-0x#Uf7>S*&u5J(BUXQGuY)r_oqAniUO1l`5jls@M(^qCO%b)avk*Ky0aH4ge|=T
zVT~Am^3oCiTzX6SY1u3PHgc?@uYa3TXI~%l>9IUKRy%FnmK#Ev+uM@m*f<}#+bA*O
zYx((TQBWluR#@N<;N8APgSefnj2eF-thzgpeZA~jNcrZYcGCUQ$@J&y|7kXxM^eC(
zRHZ?Qc141~Qmt=(E>(%}(eCUrs?8`(GawQ^WLk6`wG-=mG3{A5;vzz}?c>Nr(R3u2
zv+_q1g^K&<?w=1n>m*I@F2cj+vD=cH<`13l-Mn~nQ&hj(-d_5SF|E}PCk*bJy{YxN
z{Oyq=cmJt4Pk_zrhR-Y*x4K-_-UvR$R=aJrV)>FgFE1T4Tq+CueN!TO(E%$1G+n=A
zR6@GU+;11nmxW(_NlkWJ@ICtZq1XJOv8E*r=0IC`)%|o%r~2k52J=IsF)NC>C^>HU
zJOo;N)@|0~rgkVVXrUDfgO8h+lw!Nvy^p&Wjz+KaX=I9j+}!noloSx6W37w=deXCE
zF<(VsJ#7xx>`c<rAGg9*AzYp2Q77l**<^@#in{RDOPb+>Jtz?9Cn9}HXd01urFfVu
z!7Zb*k;Kg$AO()Zte|ch;ejAYt7RkU{yUB(Ir{A+Cm_cT3lIIp5m!%IYg<W`VpKjp
zjRy5?r_pw@=;2}i<?f4pw<k^S*Md3<g}B*xeY}6vKX_Vsis3gK$0xfd`~9Z}NA4MT
zVyg)b)oeG8_m7VcUcKypb?_XmhWEA{kqArb=EL6nyLq$m^vP|nmA&Cvv(X@5W?kgI
z<B~0r+Ey_V-$rlzW|+@fk``S)KAA1Dj(GU{#T)+FZfJ#O5k|X~(yM&5b+o_xybH!S
zl=8U<C@wpC|D<^#{MYFz?k?IWwJpLFyDRLeO14!7OhDm3J>MOn^yy7kva~6Bx(-mI
zU0azd@aER|#`W?!u78!7)nCK99t_tKiPy<i`sn~X-U;Sfm<d5L3&|kRU>3J#1L21C
zo8$4yOQYpJXz3=kb<N83Z8q%ZLwpi#bq`>bj0kGAdjJ!dwixMId53#Yx(B?_!JXp4
zxEB3S?n~<^FtG4mdYuAopgIZgL%R}Nl`6dHblNAMF>)7tRoD1qrSOh#%>8CP`!;my
zdD+)Rf9%Ji$1@%{{`Rllee@#Iedq+DvD&{XOHaRy?2q=)%ZEBI5kB0&MC=G%lN&z{
zoIBiM%LA&<)8_TK_P4yKJ-eH*uUC)jo{~rp#$tavaCpVY-4J9u9gz<opUSI_^UZr8
zdYKsh=dtjI_P232K9<z+F=30sR1~jQY-_R#ki`0Y8U}DHt@y?4#It!E{aZ#72mt_u
z=(Kk(GxgSD|4WavtQMN4p9bKfh~a+M%i0Z|^sp+cYF0<f^4rJZ)kfup4>yvhXm_>y
ze@8-1Sd->X60J%kXK`oTQ~5{q#0KJ?**{I@3DtQ-4%qP`YA1=V0_-eIEgPb2+r<kY
zW899vZ`SULds@ZUYwH?1oK4;WMNTvj#zeuVntg{*sT{DA_H~ve&BK&%p%Dge*>r5y
zNn`R_QT8<2>9qOm)vIUE_xny^?Ei89FU@b=fMr6bO%<)1-x>pv2Nds`CRDo#Ja%)G
z$@h^qn0?nz^JduD6}>&%f4O_mcVyfD^ZwDv{=e=Xu;V7`AT(F?W<q_l{f>5D9K1Z}
zTfk3cHol2(V?t8p3a6_TUE}Ujk!op!0Z+6jpIcjAqjUdUr_!nVvI*16g$4_5Oq|TP
zb5U+oo<fC-pX2Whr||$f4075xN-dA6?0%(owG$^YwQvBy=XR2fNOsx)bw&cHd-^P!
z-=e=zO6OO;`gpmM{JkfpmzEqe(PIAIlNxjG8kHW-vergLwdrk8sQZEct0)ya%F$Zi
z%X>dK)gtj47l`zSHcHuOPn<b~`=tVR-zTDw>?r=r=OJpY3~hZGX;4(3cA^iVJjEYv
zP<7f!yb46cDgFX#Q{@X$nxaoOOlR7t^i=<j3X}irhiI~q-gL^{m>18XHSIZaZMFT;
zYyAo@wmtvT>_^u$RizE2cay2_B!g9Y(yvuf8YERsDYT=Cl50s6q+YMbvEh9;?jPDl
zn7DR#RbRsFpO40(Hbpd9QJY9#RGLVwRjp|S$^HnXiLFH{lW>cTyJ<@s$#3QLAEPVz
zMt%ZKiL;@Gw3D0$e(-I)8<C>4v7{(%=u1Ie+Nh{Y_B>XaHo(RFgR0U52GxU0y5+y<
zILfJLPaAFhHYicIeg<s{X`>2ur~;7r5O~A7Rj^C;=%n||?pbiHaMR-azw5GXw8<SD
z^9IxYYe^*gGSO>8@4%!5DE#=M(g$t1eB=9B8>?N?os~EAUG8ReWZ+`!)kbAESx>L!
z`r9i8yy_e968+I*zC3m}_(uH(-)Ji*UE521e}iyvdv7#^y+z&F#d~Xem3upk+rDM1
z?td;y(V>qa2S>#8J))ZyGbH{<HKpVSir7MlWmVx7wzXOtZVg0*-r3sv_4i7_KMdlw
zpo1Mi%XDKAy-@}eofJ`ZevdamU|;2<Z0Q|$02cF$?q?hAo}=AyOTIzK`j9@hA-Wu8
z^GH3@uC?)svUVIaO`T8c`&cJ>Nw&PK6M+dF40nt{EGbKPrrp}JA6AZ3FSGK<^w3}Z
zN}Et(us@9o)@Yr_6{WL2m$frlIS(DF+XX6_YqlZQI+e=wo-^$e)S?=wRtH`^3|@9S
z;ePDI6Fm-ErjRD~Hq!q#aB?V=aXDHt22lcwi%1FFr4IOgW9_u#t*fa!ZYD2GOpq0R
z?OHI!Rz+VKqU{rgq=T`FjTJ5L_oC({zyE!5`fb|_U)XZ5y0zD6bS4XN(JPu=FjIJ%
zs!R^%m!;Xo>RYU?{a|tJ=2_a_!G0#FRcpEHC+<4l+_YRzX-Sd{2De`+1Iyl?1*aRt
z4GjuMkxZ1&7Jm^MjOvnOt`+_D!rcZOa#d?>e*EC<vj?Aj_F4DiPd?4Mk1ig4(*50o
z-`(#HFD@Qr56&ND*~O6d;-JgkK5D)jX}8Uj6|d1U2oc$q1>!C6fe@YvB)`v`;D%i8
zGTF;UWxgnTO<U@h#Wj<^P*naB#z}FtHg^eyERv2}JPoLjD^)IIiSKwzctT+jPH^$g
zd{MeOYGjPS<72ma2vrrkzDbZ31WH!<N<eeB?FjCYpJ+p>Q(xWz{7$4W>KH^`-2OlR
zKYL+KHLWh!m=_5r9(XU~AlXU=K}AIs_!$7MF<Hbn`yh!Q8G;c9Qb8b+jG-GuKKL$B
zI3m5CD2_a$K3?n{YDy0y;jS`>*iN)np(<mBZWO%%*x8$sRp0?nB!FZRV;6!tHkc<e
z1N=F1UrD_lRGDkDT1mI1TJyBgc%d+Xan!XB^-Tu7Eoo(zjl@8&VZW|#t!u)ZMkdh|
z01y94N+fA=rQ|J^3wI+R&`~l+87;!K#Iqah2MehFxNwSg<%F?d9(>?ZvPtt@bQKWa
zF~GdGssjChJH*o@xPplJ31`y>Wla!Rj5B}h+3eMOf&4FBEQjDoTsBjV=+H<8tEIL<
zrxN|ZIOkf7PtT{+Gx!slAaWq8Y{RLjnMM)lZtE>qQYk?GN*dux>O0VR4P|590426g
z0w>Ch@b3tW*7!krsk}>!nys4sW6SOE;9&BC2{*M)lMw?9g|ao&0k~g9RA~ka@8-p%
z6s1HT(E*a|t(}tH3c6{K+cn55T0c0*CHynWc#tpuo&hMfQctZX`B|V)DJwWEs904B
zlbY8FQR)E-KwuCg+|FI(I;~`|%6&9IfRBa6+$Dfv0K`Gurs*2T91Rr=7%L;k9Bh08
zxa>qoxGb_z+ic*ybpxLg-(fvIw?-^AEuE=fF8OV6@6jL89XmzyDjf+}^Wsv6u$Wz>
z=Tc`xT|yYco&0ZP6y_^jyXiS2#WX#m;u2)Qriwj^9?8T4s|Dpo-s2{PXhz+r^%NFj
zJJTd+W?#Ud@a2FchZxTn`I}ks>gWaX^a#D5#$e${P0fZDz>S>DF0D8IFGrJL3Cx5k
z6`eMwVWfja;cYX~{Y7es4Z*(-p=&jpFt2Z@|EI$n$1U9YMy#W}HLCEQe$kb`yZoYE
zt&an1gFDkspFhvQ2LoLG3TuNK$dZS_f~2BCHOljE_<VEIZK&I<YPyeDYy_ccb+wy_
zAE*F9&$LQ<2%)wpIWOQ<>!cP@>{n^YFu|r$KlQCR%C@cD45}`U!3rX5RbpzxhZPIV
z09!v;WoJRu+Ai>{0+Z74VA1HDaHRPbp(tXIPC-!2Lo7z6qPy@OWlkZsf!;vP3>v&T
ztn}PT1}D3JK6w6@=ofYw3taQ!O*T>9Y9VvTZgLF+nbJy$NWk7k>C0*+12Yi`0~?q*
zX5e^0HW~_=+aSbOExUo-n<LzL*mWn({Fx7E42~1O25ap~k0F3N-lQK+hzn`2?>&F@
z`f300=+z(g_fB+(l}FEC?d_g8RevByWD<#vywI;1LTW5I9g4vo_2%Ov!kEiw?!bMG
zNPn=}h&AxlbW5M|aF$)=4C<BCZEO^jBOpAmKDK4_8isE#d7-()u8~oOv=~N~%jzdi
z9b@3xJyc{z6(<vbEN6pRVO5!hc6cA@UyZNtB~Q@0T)hU}@{<P8CoMUv?L>?GIc9=@
zTRwL3F@Sl2g&$5QfqBd8RFFKF{W7}2JT1)M-CF@?L}0ls8)SEat(`h{yEjUa;0w)`
z{db5mkt(qCKq9)Fyp&H=Ki3e>dZ43BqemHGG#Xo|B9~}1{_tQjZJ^amZOB{a9CG(z
z_v3Df8nN^4_WkWg5AJVoH#K&u*XuRf9_V4BM41eBU!Ht@^y=_nFL17wUKc)n+1E5i
zOmSE`q^6}SSf=4Erz5b&8_Ur0lH$OR`-7s?JA}WPlDkXhPIUe%8{)n0zQY}Q&zGF;
zZgI?696O4a)`mV}-x!_VfAl`@yE%!i$OPaGJt&JD1r__PO7^J;96}(X-j?rkuEN*I
zdV=3c!84E%fvZ9+vQWkKHPI-g=A)%yBfW=s?m&93tS*c>bJ{$Gc7<&9*JfvZ<YOgF
zk!#<n210T>8gB2I%emA=c<`fp=~zsm`{Ud8yN+bE67L_~c~r3M6s5^3(1|-~Of+Qp
zcsg==kHvGkt&!0n>QNS!)-0VqqaQtXi<+Pr(eA{_8`sxFz=($2ZV(qzGe@dzyL)VI
zb#dsggrMfj1`dZ53b;H%n9MA5Y7g}UC#9UeARned*eUaevtnMH7ZIc^7w23aPxUD%
zwQZsX#PNaa1wjh#&K(5Em`DgTGfx@WjIsz)w@fck2Ej2vH`_>%sR@*08eDGW*PLr_
zd_L_n8Oi=ZK~h+E7;7gvo)7clm|Y$EaEL}jBr|hVgbyUbONQ1mm;OX>OZtqbC?BtE
zvV}x^w-k??lj(PkU;!HT__X;it5$bQ+V2K~7($tQO-I^FD2Hi2GY|qQN@a%5=U#s?
zT_G&wDkBx+v*#*dMP@ImF})y61i{r(x)P~Y_SA7u8HeZIU^XDD+Y=TOXuOI-4pVVH
zkJI`59W$K)_?PwsO2q`7(ADy(k!Cuw-lED@<(BEIe;c_Q=iHq95<!T6PN>nEG^{9(
zMRH2$#FZ_Uc%n8oU2RDZjWeqh3<U>G*HjHHEb2!i3uU+ycYL8XT{(`$sua*u2KT&q
zHzcl5)fUU_QgLn7sbf@NCMtyj76x}B4fIq*ygkiHU{J@!TO|NL6w#*stm<qrH_~wv
z(2)qVyst93DoIQVWcchZN_oj?z6^g~vsW)+-=h?Y)jV~3syejQ%>k5}9R{l%z?^%_
zW_0XC=5r^D2^2>YC%wI;ZL2TFkF}-^6a2+6Vn}^g#B6yVyH77Uc85ifnARA(csAb0
z+Lg4(U?;hg#^+jf(j>p37_o8%cZe*eC^Nro+12$lJ>S+(<<B8645^j502@ly#9r|C
zsydG4kM#tzQvcytAgI<T@mp(j_ztOeS@K0KUs1Yf@tV2q%tw;&V>$S{mzT5L-MBb@
zACzX#@B8{a+I!~PlQjB<he1nOEcYDDHPkIECWaT{h^}!Oe_u@yPA|LYN;9nI#ii5$
zts$KrKnkY~zu{&&7x<G&k-V7{*Q0ERx&jP(l70v&uU)=+3lhq%4dz4sAFdFm(d6Sx
znXyf{(6<47)w|BlrtOfL?4}w|L*${#%mgfQ;!b7M8wy};J?bM2yn=Bas$;~9Ehxt=
zTm_C4wQ(L7cxc+P-sKoKh3ck`699rCNgEeVX-J_pJFW3-ma=LNo6$kuvhZAC586zh
z1d=7vWK;+Si1IfN)5;G}bGDRpWTI|JdT@jg+nT2Nux+(wdaTmtD_t_gh{il~<I{YI
zhN9v$en)q9cAOp)wQk-M0s5n%&Ud`j05Vcg?6y&<y(2sHNk2wmiO{AMp7Nfj|F>mw
zQr&3$^fcsWBSn@dssWnaBPl(s6G^$laJv$IgRoa8az@^Regffi8h)$sWkgqgR*HaA
z8}obhXA(_cQ-Wow<T#xCh;tAffV`~W))BUjBsZ6o^a(2?-LT{%?`?WEh7GFc9WAJ(
zDhQao5|`fbiratX*s+vtWX3IfC#M;eMPunONNA)2uB7KC^vn_d2@Ol|D>$@sU$#_K
zplkPC!{;Fnom4smLW6u=jRC;R%vfwRe)2t1<ihMsQ>toCO-d6~N@NkNDz75q0X9<d
zFRX5ZC1p@vvBu=2GEVmd6*nQTWV4E=Q-F)*(kKOxNQwi5hMkZ!vHf9=s<*~#;JYbi
zv>J;SH0sU+tiZ$JzG|EfW0datN<PF&vIa6}pv&SQQmrU7*=}3}v>g$`$kL2M?8%sE
z?#KmUUzvvJFYq9W@wS6aW*9UTjQV#{tibH9+6H8t219nQq}q(NA)!5nbt<{xHyTZX
z(piA+_TE+L%OeOjh63;_VCt3n8%B*{GH~aBSL)In2^)Ebd$lV)cf*%mw;7B0mbKbb
z(t=i>n%_PXt6zK*zv5VJ!>b;><aq{#2be$Zh<fOFOq}3LDKX;6XAlZCx>1pZegqn|
zla_??wgGcXkyw6~_X1(srvAg}-F0$Xcklky4OB?Ai*Na0OV=t)Y3rUxiPwcJyBq@w
z#mFH+@LxPo_cAlPmktw%#0P(gI;)U@NWPMp@zbAo8Zw%07(5HRQIrMP#hK$mSvqNV
z&3hY71geg`sMz5&cm2ErMwead*9M!kTr2;80WJ`Shfn7V(YSx1@nLLEy2}4vUCCt4
zQifN5-tk@M!}(R$_r_5c*H4|Qy>5)$R3M5f*x?ZG{$lIt2KT>h-$$R9#153PwhbB6
z@y|Ym<Gx%8p^=UloZSB-YI^`=y>MCu?xTjW(L?{uj~=*OPO>-xm6*W7OBcL<%ZfaR
z_nsW~yn<JJzTyf~6W&;?P!KJm0;D5^xq*#tZhE1HFoHwae3+S1z4RL*Jee}#WRr`F
zPJ~3{?hNq(&iuVZXhO6E*<9)+pTrn1c<!N23tek3YXSW8QuHIc-YpVy(lFbo;30ZM
zJGTs2gAcv&&Jpf#(bdM|EAHz|idOKRv)X{PiecfFR$mNMwj5l8H2K5vtCtWQ8x(xh
zZiWcWv@ESooo1?F!=F&c5~Y!V=^zO;qm*g^!{T9aIW*t`DI{A@D}Np8NNX6=j3aQL
z>WviP;GC{l^*f7P;amR{rBJV|D)#ADGm4$V<PYv_h^6JujbG@uU5($U;22uXPZet|
z23K>3WSUR2i{x=~>R6A)qT|BcNj7k0ZiqW2+-dH27W&{r$yuv^=frOP%<dKqxn_{~
zx1U>1m9D*zV_+PbTNu7YY(nD)_nG<${iu86blPg2Bf9nRm&kqW^?GX>WuhGp!4K{B
z=VH+J2Lbc<Yp#r_@7j65I(%)V7*7d^;&b|zC^~uou0<Ob2-DOA+&!;Qs~$W^FOT{4
zUN#!-(=0CmVNSd|6~n1=-b|A|lJkt@XxjCAa#gecb<s>$90Bf1kSWAJwi}GX2b=H3
zRR4<;rta}+<D>5zAAM9K#g9H(M~ELeI;?ylMEKE1=YFN>7%F!{(pyWMN64o5=%bH(
zs;01lo#gaEN78l69+eVS#C>r8{<n#v#gEuw)H=JYZ!SlG1rCIaUz`;16_u@dHdFHc
zhzEmonF=~EIc<_JE%$amu=su;jJTed`bL+SZ!I{N<!~6mVb$F9dQu9v>#yUr3Ue@q
zZX5JlmC0a|U29cA35^;^BiZn%xE`qOlIGiBW#XrIRkp-GR<U44XHu;WEveoV`e^@8
zrDeg?dNQAYB90I!IdkHlqqfKr-*V*lL*patP=y|O66FV`cH$qO+wa*kCsRE3==z$*
zwJ(9Xtqoa?jdtbzUJfVs*C#KK_qTDlC{aG(R~!DFGdE0R>14yN>FP%8!0HD*RP|`l
zIZ^E)9S--AwDg?*w`|thILC(@oiz>Nb2oQ)J-e@4GVhsTfoY@i3c__~#Z4<(8}=x^
zvJdF=hemB%dh`Ut^|Nv%0@L6SB-M^22_$V9R`?s&>9;cS@MCZ4*1W|zI>Fm<6jrg6
zL$gB}NK^mwi<?%o{p3Dv*O(i5bPIw*R<G)WJg{;NC&m^le3MnF%_t|B>u!*qUD}fD
z)JgXj<5INcSS%(otS3agb$mwsFJ2b51D~<>gPt(oA8X3HyVYIKQ%z-;RQ<@lA^vj~
zq~lfv#{_P5tEVAW1wH(Yz&T^{CQPu`8BH!x-Eluu^*V&b5LXzTrjR?MIna0rTMYi7
z$GCxsi;K5#g0fn~rCwK17NwmJ6&9jxYR7K3=~QZ_3vzcko=-o>`!=2S(M+Gs^raaO
zcRgV@5?qfGPH|Dl;}<7~!2tU_yG+k-D&W`NDn8;fx6;>L2J^T+wcKtm`HDpyukjm8
zn}<RT$tg=+*%xI*%dB&U2Ypg?M7<o@QARSDCC6{G(Ok{Mjm9^r6za%<jXcZ>a~v9~
za~#rl>gHWPJojk?mw{JK43=jhVAiKtl_bOf`WC8z6K<91A7PCHW{~O1o<@pdOfm0$
zj9aHqc-_30C0}kRY2Y`>=?P*>Xh?oP-wFy4@-wy+6Ya5-vKIY0lpS<r_RVqfBAva-
z<_t{zAWB97s<?^w>F%`lON2&yUG`Fz0pSside~}vZ8xOBRDBs`Jb<#em|v$_pT)AC
zbTqvPTDYuKwyBTRG6HFwwB~6dM!i^EkQN7RJ|BTsXt4T<<65JUR^^RFwMnx7$7A>T
z0;OeGfKZZpUEh$3ijfntC+XY#Qj340eSBea=b&P6T5YOV@8;;~u?J7SV?X$0Z9mqQ
zvUaJ<0(%96bmKdTkhz-TDW$?IJC;w*#J4S_C{ef_R@ILmJ=~5wLW{Er^DQs@3fM%G
zuNE`hMpD!8#>P?`Mx|h-cZ!8_(H5kYXpmeo*gM+aJ=yn__x#tNLwrZ#w$+W$a7Nzz
zR%F;Z-~_nR(U3tfaUsoEVrJ(eF}nt?8gCY7NYY}c`4s6+-7X`e9{T}zyR&i9&6Doj
z{WIZ54SDk_`C>LKyS7tZCy%0x*_TQ8b(n8==w}w<ij`jd*>D8IN*gRXO~me0>^`f<
zuXRRjMe6g9rsocMlD#RD#S~T2yPPeVo0|(=6kq5!{Oe0hHoL^l{)PPaOBwTPelFQl
zR9Aa9>3GC^Q@NS6Kx~<74fDW0JHAjmt)-RSi}IJmD{2W668he`eFgH`B1Y3@;W>Nm
z$<kL4@xRC-NbFklqtJACCX28~aVWnCm0OkLIQ6!)^1|*0{}A$n$#7aYIix$Ok;?&#
z$LJXvN@AC`9ztt<nc2vw`}*KR1_IvD)eNGfe0v^>uo$QM?EYu>ckn;UW0g%~(HIiM
znG;n@t$-FYzk$_WEF4jw&OF;2EI};P<`e7*a92u&nXm>HkSG<2jFWNAK42Z#Ml`{s
zJA$zG*#CV`odp3(yil(nneUaxM{ty~IxlK|?-=l^>Nvg#-RgzN3NdCcISq9HOhB{0
z6<LnxJ&Naa@o85|GPalN&9L5!RT4id)S&-Oc6N-Q(YXa^lpi9-XknwiYqlzg-?7JA
ztItHDZrm8RLOG?6;kOr_IckLG1F?!xMdGEtJ3-)g6o4YObiR*J*anvB+5F703ttbM
zHQsU-2(!J_=<$wLX+R9}P>R6`Y)ctkl&6~1Bv@?6PyZN|hH^{V^GPk-<!rJQr;=!P
z5&!Cz!#8F&Lejv3aV7f!<~}Z$<4>7|Te@A5aBvVHbw(dqErIh`{gAS$DJmTm0R_AP
ztjcozS+vC`3B5<9i`E2r^;%ZPS7O^e(DG;&nkXJEmMNQO%sPj>$*?fQAv{2B!p+U4
zy_KT%o;;K^92FRGv<BBDPnP`Mv+`V*mxFd=TSCM)Hv<*ONp{VKfbl>8j*}z3oGFr$
z)@KD5BRcXl5vpOh55mYSg`nMdD3iKUt5IoruRiwzzO7=+k_K;?Hbgvz1>9hBmU7qf
zWrc=&30Q@t)kOthB)Q~Kj1e+)Y!6;D@z@JZKr8{3RHCtTJ~8o^5@Lc?nA5#T@`%so
z(f;uXvWV|qucTFGql+#s6H89t-|wtoBp%kSqKgm#GWlwjWm_kxsOB`1N!eys6@G%0
zTc?7m&>MyR*jrle%5BFX97?0rh24hs7VQ+qQpz@aj58d4BDK41WLr>D2FZ>8;u%3V
z&6f`TAkk7mNvkr?$#mRaRg0s-HhEm06?WE6f10`Bv=}ZEun>2{!_Cc(l%>m=GMkQ-
zT6CH7IY>PWXmj%k^VXdd$yC6uZ}%ueyweGG33=@d4V&I5*TU8jl_q6R9jlW>?gnuq
zpR?AgH2Ip@3Y(jUv;3_SbHT%mCmaZP2u7{7%QrU_fGbhdEq!Nm6Ne@q`Kw)b{I)BD
zx1Qt?;SZj{vW)CC^r7w%rnI`<83>d?^;@?fsDtG0TZZU|&vx8H+Fx~me1wHc{ZGl)
zf~6u){_L1(0xR((8@ZQteQgylWngYGFiaK*gS3|uC%Pi@Q9ysIbz=4K$QzQZRKe|1
zDhv=Mb`yAi3PS(<ufDSo!C)yUj@NH)E*)7U6#%lRlMF7l+^=33;nP98jupk90pIkO
zSFexyPY;gwUL8H{KY4Z1KY8`X{g)oQX>)Vws4jICa%ekArA|+rUb{2`O<1)dEGM|u
z(a#=M>grVQgj#)_CyU8eRC`SGx>hfcHZ*8!#G}4!>51U>b$Lqfns;9)65W#84S@@L
zmYrvg5vW8Sfiwe=;|N}vTy)+v2;S#HtVzoQ9N?5|T9c2kP>MDf)7|IKUwyOxw7>WD
z?#q|^@KMP^>)-u@r_ImVDa(So6#-04;8;K}le*|C=QGj@kY)wn_WginqOun31HbJa
z9zH)17=zH)E1kfO*lv=iFG@>+^Rs0~EmFTNy!Kt6+S3>8*>`JXti#bhrS_X$;C0Cl
zz6jjS0P$k96!pxIa;RP6Ye|Q6y(!4!@Xd?!sr(pW2shp0blF)mhQak!LktGL36NgJ
z0qz4cqiLX!%{un=P%Lm#JHx;By$5qvsA>(`2vvO4dzzen&*SLE1_LiLjR9eAXrfuG
z-J2H&$FGhRCp-D!+Zt%5Choh%L^7@qMv^6^XNLu*0Gal;1u8g)NbioSt<ZxG58Qn+
zKkr#%CwCFUEpCHlnC;8sNC0O-B}<<999yabRiGtq@->w=x9~^GrdnZUrODli$m4`|
zo2A#r_6XG$*>f-!A{u`V6i8IQl$96g%g5q>oTjrfYmLiG_m*2tH#aykzK@giCyUYO
z^D2U8F?HVyT4gb1^E^7qgZn$l*O@ywdj6?q3A;Jqur8z|U?l%4iYZ!r{Ma?nju6X>
z5&fvGfwXCysTV}`K71duw>YoA{$2(&{C#iv@ekv2z!};ML>77MWHaU-FRy!Z#Vyrr
zgAm<6K9AR@=EpViE~Y!lwvp*@C#tN#CITXCF0#x{^6=A#pMKiGQa*cq@cij<@>}^w
z|Hc0C@$R#I{Gk8r@4b3?vj6hL{qpqSXn*g-zvG(?5t9H=FWmn&NBLxdv}hF&c0!FG
z=KI686#u4(<_4?&L)%k<?)C%hwkb`!dw=Av=a&;$Sz1Aza+iu+Rzr()R!yK?+x!RZ
zD$V(x99cO|J0)$(-B$gwLN#u4J$24MZ+M{hIbUra?e9MQOEUnfRtRlR6h*<Gi6{#E
zUH%t5^arD*r8A=IQ|Zue8LjQLo*nP>gB|K%IqL&iM#xX5jz$Qu!ye91;l|`%SY9=4
zLxLH2hiMWxZ)vaIdhnXjO=U=V`Sb;lhMkTLqfS2`ejfFWr|pQGu|;5uiZtSHOj>Jj
ziDr5~wtSv5vXaGCSlDM2V_uZ)xM)f=&3u^r$}MK?Vr?(4KbRPc4OIqsF!AEYjxcd!
zPO3cGKy8h%UX+dg1q|A;=WJLTnZDVtjZCGNl_RtD^-Ut8r>B3FzwaTXq177iz_`l0
za*TO{h$0!L{dr{|zw(W(UW`U%XLZmA(sP)?=he4VgW@~#Z{KH6@qJnZZ_Y0FzniuO
zU;N9je*f$5qe1@gr4zNAm(8~O-)7iTMdYsbW~YkX*?!xPpEp(=)6;vu{@zdJhi~0U
z^+yvIfsUESG@J(H8!x77H2VO)aQyU-mEm~};V27O6>IMc|8~>QGKOVeQX*oE9M@J)
zl#Y1VN9urCXA+VZYoOQ7ruDvre9Z=4l$Wq^Qx=K@GK2aVL<{Pa^_wzY)&DyAuahG^
zJun>RCGw5jIWl3moZld23Frru#3D_@V3K-+aQ}(UP{uc;uWHd0gr;UEdIXHZlR}nb
z&%L(Kf+!Mi+1y%`v#qmyqUM<Dhh94e8VdyBn`v5>k<wmyoh;!gVzp+)q8!~EzsaZ3
zy8*)3kJ*H6DUKp?btIQZ6(N5J@@vdWaiDE~dQ?z(gZNS!&30vx^tMAN#bdv(J!S7p
zCzl8CA|E-4sMR_POy(@=iQ;#=`Uyj>tM3DPy!sN0P&AtnbJ9Doic<cVqYW?pP-jzQ
zX}(snu#2_#n?$u`NIQn`T(?|0_0VaH^JG*^F8!s~t{m>4LJSPNbuoDZ7QtTCveT-~
zrIT#mzkk0SpUzhFIm5-+PQ23!o9|lk42U{KTrzI3$`I(d$=2Hk_qXis+ltxdmMzI3
zCgSfa`-&91!U?a<!&k>AmD6Dv0=081B{7Bay0CD-eiCWzTd=Rx8cLE~a{c`8f;gKD
zU`zY;_gv#22Gy5;sQ!6Y3~!b~DZdYzrL5`??f9!7Lg~EPU5X{{6>pYLnZJ2Fj|1tU
zFk?0ZZ{&wk@#hEkr|c1blmdy7#K=)Q{rt@>r=Zg1kt6UNrMaaW64NM~T+Xk4pa-&S
z+X(om9HH9AeFm<Fe(Ti$<S4mce3)y6YDNFH5>eyyyXV=&3PiQ-!RfbLCp+dksN{>s
z`hh>Ur+EDB=Z)$~iJFn%S-ZvHyOW|b#w@O{5a!VGkF2XNgXE7<EIp5g;)QPZEs?qY
zeZM);#>l3yPzY9L7d$rVAT8$y2#I@j(Q5wJNz)cdTf%7UvoG{fvXyMNqsHV{RZ3Tl
zDr}{G)NY&N8J4L2w!KPzbBq+Img;SO@1?WP&3x(Pjf62D<qjcbsK+NQ>fG(k%^gJ4
zMwdHdH6f6QQcl&S6XmpPFGM%+O8+#y85QZUuKb%}+UIgd{wVV+GXlZ;kj@nJtSP+T
zlHmXmG@3VwAj)5cJwKNRm`kLka!#UN4ZX89(pKkiW35+OH_D{$YxHq8lVTpNgbbmo
z{-N&(Emp2$MTs!AY>i3+sL5cCoK$qHw!&<!wf0(gN>TG4i}C7%yo#)IRobu>{8!!F
zoF+eo0n999#IReoO%8&-Sogg5%mi06zOC|qBV3BHXS6~{{Kuq-X1)?ixudzQ1_CE2
zzq7M^PUsmYe8RDzcz?H=^_ER~rObGRQE$*$Z_cZj@Vb#>i$`1Vzjpk2ydtb8gbK!#
zq~}<H5dhr?ukBsGWg&7<&HYOODFr&+H85He1}dgA%d-{7#-oa3W67ag^KC3WUz0c!
z4$e-a@einH3{Cz=@@K@iCI4vrqig@i{^fpi>+$;N`R1m3Z*5$_*6-gwesKRc+2p){
zi~liXjzJ<HduZx^tn;(jiz^rmKid}uqpuwxg&_?_6~40BnmCQT?fxmjhF`B{7y*3B
z0A5(aXGIKz#vvd>Hm7UHM|a;6zd$KSFA4@_rIaGYi0VFf+8^BZa;sPI-Hf`<rO-h=
zh5~6U$$xwF0C6S=r0Koi2FePC0dvj%;`*^A6{9Tz3fO#Gw(HRY+Z#O*^7Hr2V(O&K
z2c4ve5;EU^&#aCge)z%fB=O>zBqLvxc+&XQ>6&dJH`WzEvYH<!vqLxT@RjY`Mq9Ud
z?(WK{{=>Z3frEb^i2CMNc7tlw_N1*y7G#fL5;q~7#Co!l!`rSoz7ck%BP3E^pf5lN
zee3E=w@fRqS_$U~L?u^?4E6|^01|x_Do&v21%St(7ew$m-(21JQWJUYuyD;xNcerj
z=H#iJbVrH@!7J%HnitUn)?YXb#G!GPT@(_~!mu7Mdf=_?wqxBn7ItX_J_sfskF#O!
z_RU=-#Uv*8mNt!$$I5pA!fSVyyG*6zPPMD#nn9HpM21B4vHQ5Q!c**S%ee$YRb?y<
z-Vxaf&z6KMi{M!!8)<Z0!1^I?|JYsBjP#b6lVjpfGZ0u1D}vy|=n)^`X}n#O9=mfb
zaum5Q?(Ss?RfS5PSd|+Ev^{u=kdk9zV&4C(Q3am=nC$Z}K88U<($nEk@zT@)s<Kqu
zVx-OrKb(pq%A})i2&AA1A>?nl(HZ(s#ff3au1JQ!I#?nNfGUP8kK`dLqX=5tT|Vas
zh%T?&!XxE4X;;o{Vh*d4P?4o1nF}Svjuv(BlQHO8X*6Cv6hOU8a+;S&hGCV1st0Od
zn3)2Kn9s*)`34g`<5j}TT4HMgt4|IWGs1L7O#dIX{|fgXh;M5EKKvm0;)~?|z-ciL
z+@D8!yy<h;3eJjos(?iHvG;X_Mt+AzK7OzrHDe^DOXVnw4SPR;G+6VVg%%%dqsd42
zfA>k$=F=C}96zo(<D!p0#>Wr0KmFu0_uH;Wpz*DY#cNGNTodTV5Ij|Z@nLPXkgqoG
zE=byQcs(B^zvaAtD?|OQcKTSha&xoMuxov3w8DG_IvlM$fnIAXXRstfwiQi<^e2gu
zETs^Hh^2+?_yc@hOg6k65|&iRcXvou>ZD?WwC0gfyxDL@v&j`>4t=9|D*{(G_~Nr0
z4eUMDCT^_><E{zB52U^%SpWu}#}!j{RunL|Vm0HNE&?pHg`U`<EjXVrD7RNYlMl8A
ziYMctyXS<7aNiV@RP>cjrO1}m<DvpHa@+zM*VID+DNKrXYCy?SOq}NIRpCC*!6SU1
z*lZbTgJu!xONUa?5fLuF7Bpa3kcAOSKsP^cz$8+w?Ao-s9_}9<zk0db8xNam4zIOc
zulKs@ODEm1?kjB2Au#JDhyXCy616%Uu3R(51G|4PCfgC_WM0w6L$C<eR+pel2gj*u
z@T<w{Iy);VO!Y1H^`5@pHZ6KtTS9I!G+qC9BqHGS`8XsI3%F$s1PDqtk}s5i7%1LV
zP|g^bAIh+-2+HLN3gt{_d@VzI!gC~wBpO*d_I8EcgAYkWVAe_BJ?f*8ewrg4;g%jE
zsB(p~^mYkj1fz9dC!z!fVl1Wns73k1g><I?e+}?OZZNB?obD~$!I)K3uFv@!zH9G@
zMdSGaF4){LSWBG3CaUnEyv~EI=iVZ5`sZT~4Q037MpWS*olM;KYq<5G|F*=ay8hKD
zTh}R(f7yNU92HpRN<c(McQQsktQGY<4N+xrXBCqE_(6Ys9;3^$NddbT>BT@rv-x$F
zO_Jx&HT=K>r!z{lw>qx;)Ni$0xHvV~kjWqR-Q?r$H4O{~^1);pa?ZM!K82_2J{d?T
zc>qc;#U0FL9BCz1G1Wvbxg#Uxk52Uw1KFmF(P*%KaCnDfb3Ix-A!^Xsj(T%QnCy?-
z<gf@Dy}nHKNh_lFP9n4`(QXos4nhT;8ksg4N1CvuQx_s8JJc$gVVy2m9L>ijmsN@;
zi6D;7AHgWy>)h$EH@>At=qtK2#b!wR^uS3IFHer$1(3U`50Y-8QFC3(bBVjwvLa_@
z0`UvZhrT?b#;H%<YA8n3&sYgyu=jlT_0xUr6Vgt%xSm)+RYmqv{C{dCI-2@;(H2U{
zg&;-8(*Wn&^?W@l#)6R?zp(+A3gGXBgc6U+EgfM`Q;__xUEJN>ImCA`Uh+xZ3L_6K
zrn7346nCP&MdM|4PcZ_EMFI(;ExaFWo%Wi>6Cm{N*7Zcovc*G&|4X(at)eg}Xm!_K
zl@OVU9SH6;3a1tv1vSrD(hD!CE?wPK9K5Ad{3skdyG+7ayJy?QMF~n|_w1%Cbcm)E
zNV-(ZvXNnS8xeMh7;&nIBhkR*mlfy`WK1mk5d&DT49J6iR0u@hMsexcWje|Ko((&7
zT$KnBdE8Mdy_QTm5ONgxFSn=34N=bqKd!)gTc3HUXKBzSEa!_+R<6Bg9`yAc*J6xi
z4&t>)=~QYFB=cyctCbWl8K|5Ge#9sgQ{?kdx6baQ*dUvIH<egG?$dmhWjo|a|MBnt
z{XhQw-`xL8^u)Pe{%=W={KvolyZ$aGu<GN!myB~Uhg45*+?*;4uDSp7fBc{SW2r&^
zAYpIznLD&yW!mdrnWfj=bUI!4)aQDve(rZ`&2yh2y81EBZ`Nfko7-McbQ)d?cX=<r
zWcbpZ-d#-Y_?ncTz01qz<yAVH-sR0<HYx7(-s1et@a!&cUf!v_%UL?T`rGI(uL2$D
zF7J)Y@@@^XaP3`Qlm(xccX@Yub*J?X)rju)HcHr|Z2FzvW?7ntcX@TTDCf2J{(aSZ
z<)pa27^QErh!a$<;|dQEv10kv_%(So$SBd<{?@(I+p~FZ*qhfF8Q!jDQ5~Hm0jMEj
z3#Ht^J#m1-3%70({#AQvc~~70k`a8c+-}sAT*B@Ke?x?fMzrdDoj*$5;9{H^=2)p9
z!w^@z&1E5FswCrGoV5@^o8MsjLNP^NMB)uDBeb#cO>(@LirK){s~LYzR3^tealKL}
zQ!r7=@8SYy)1&kZ_DZ5Su|R}dXm>|TowXFv7f#su>tgaobH9~a!yZ4E3Z5dV4N>`E
zp8PHy_c#t%LmnkxpPU>9D}a{>tY&*hflJsl(U_%ZD(r+e$%|rgSv-9b%@3-?pYw8&
zLRrs{7hX}VoJ{3bKKjE#7DRtXa&~u?(Kc;0cIBEUE?QN5a-SztCfIWI$nH9}Dc1Sx
z11=97>+S*+ZIz<8bV#A0mjJwzz&yj;3ClVFf>*fqKc{5m<1*N#K>NC7n`*R5kqj^j
zl9x!h`Gg*ImFKKVut)~M_i%Po*RMo}aI&;cVW3ht7h*VLoi@req%w^@h?Kj;Cn_gT
zv+~Wnm^z_}9^3Lfy?~}BC=FaR1UpQpow#Z;EI_i-Z>#&rNP}YH7#B*^&`oL9HK|92
zQ#qq|5-F+DhTkNs#m<rh2a{xTGa55eHYu7()!6fCzb{Ywhthe!zc~m+7RAnJS=H@$
z_)cTTFbAgl?<8MvdHY)0+`TiqF>9`<M>9x?UZ;}ch&_oJpza{WD5ZphtVHZEm5ReS
zioM#zboJfbDz&N&U`WfCgerMD10INQLV%D{bg`fVi%p_*4rxyTI5MOH``*pWu%${q
zFwB2)i$f=riu5~dhcwD_^Pg_GpD$3RQS3fT#;w>$Rf9(VsVre;@`A@JI;x^J<cLj2
z_3+#cakbS@kWA<RJ$SnB=-H|}m%J<@O(fXXDjra$nK(IpMoSr(^w?biX#9=z&+`};
zP^lU}aALD;NNzJKkX@$XL&BW&JaZW_CD|ag`Z22yRY6tPbQ9HqMPBb<2h@10i~Kt&
zZF{Xw9d~boABc}qOeM<J!ah<huOijq29mUMEjLdiDBm#aTc}bm3agl$pTFo{%yLIn
zKsSj|FKZN1MZ|PVHeH;#t4e~i5<&Z+4xV4qVx!h5>TYC5r-QY&>(OXj_U7Ns2UR=o
z%6Hm3#3vQTermsl5Alopq35)40Q`Y64J4^Dg^qcu!EAYnMAdN_)`j!dOAZmWDNC!&
zZ?2dAMXp;ZrEhpVFO&=UWm8=nj6*_4VCI&0D?ov%#H9hAPzpZX;LgyXhXE}(fEsX1
z?ATC8vTScz(G`A@pz5QwTUPpA-@-m1<(bt3FAgw0m&IFkrw|hv6J><mJ9fVdNYJ~G
zfPYa<|2QGD+SY0nZmEh%yF%-~ZTB7~FP@-y9Ra76LeCbXH$o%4P-n@}?z3c?PcsmN
zBFW-Ch$^ApEHiOf9oAP#RnrGfDy%tgvI@lzHByKWxzH)ypCidfmlxIG<ywktcpdhw
z!t+kj1lDSuu-qV}mh3wZj&KA92Ue@83w62SyeWH4El|bTe40#0i_3iC@yHCQ{M23u
zo23izDZMiK9T-E^AnyM6yI>cu+}PG+S5`|Rk^<}*gQpXTqZE;6$mr&%;wy~nJY90=
zHTF}s01=#vY1ds2l(XgL58fj0!HrI&h?ZhRZ>*Z;I_xo+iZG7Iww|-jHr%xo!1B5I
zrH~T<wb-+5$dw0y1oc9MuO)JhILffUG#q>}3BOrk-hp@?qOfDRLd#+V#E4OPDYrzq
zI5W$ZzlFH$#q_2-O<4^$Tpo1ZCA-LPW|b&UE3)e6IR74jZV}-Y*3KxrQDlL<%K{&q
zJ62I$<?M`}E5E>yLI$fTZ}rO>wG+WPG$J6h4|B-r?HdfGg?G#aE}=KfGJFfm=9P;n
zBwBi0Bzy(ywtBg6eMlGq!YqC+^EEu&>d01=l>Zt@MdVJXnJYegGgh}g+|=AjPJNX4
z+Hbe}{vAT5DezjQ8S$}olb6L@p$Wk|VFR*~^22O8DsJ$XE?-CFBbk=RufB4ZIRo7d
z#yViufx)B<@b<EPFbs)2$V(+d1&ZJe;u*Vf8~I%%w8~AP{?TfEb7?(doUtQMes#pi
zTcq1%*+C-R;yeUEMGt>GomQ^{q^p6JueZLy&C~TX+0BPv;>qtBmGD@e^52S%8pbOF
zR4$HjRO8O=Qp1$$G3XWapODPiv<x?ojL>xtn<4M5xtNWR=Ju1$s~M$jX*i2kffTN=
zt`g*3y!BD=fhOo83sQ<MfpKSZw~(<HQl0gSxmB5xBn&BX+-U5=3<!^l<2hZ?nB3*J
zA|k`h8+0vbfJkhvyOygl0_Ikp2S?vhv;?A3iQHT9<e;r3cl)yL%hfPk(zV)&;pRD&
z9qOUzSmC%JjMai~1aVpzuNfJ9x6v_*VkY7-`{)S-u`+opz-q4J3=#To>|$?xTv=h7
z+K@q{a0_1i*eJ!~!>}V;$Ex8+vE(z=G-0Fbm}SI_U{+5i+{I=UF!LBJYmHBw(t<i9
z4D8lV?1jo&g;j~IhZ=oRUJXKE(urF#tj})%7>g=*@&#z(BttUJe0K98F-neEj}Vp=
zg7)v!(P`!Hr1k1#|9Lw|1X$v^J?-U%0=-YT_FXlq7iS<7Er*`aY{DcYiQuyksFW-Z
zrJ)ZG%8nMxX5lN*Y&&X&#4!%C4O6+MKIj3Uo+$9>2Tc2Qxo}cDV71(o(I6h>=h`AG
zn?Oj&Bc0kc%i?PRdeETh2%=Xemnntr68dN<I*MB0sGr+qbe3JEZ}Y;+8RxSY@~hMt
zxfStVb3=hgbfmAoB`^Nj9bczKrPvlGr*Sq&o;u1LX_sPP&q5F+p#`K4FrtzW7Vj1T
z8ucv2O+cAfEPuH5i$&?N_91q1wGuj;#{!k=n)2azj+!T$&~=P|S|*@B;Aikzl+rz$
z0$81nQ!KWsHp-$B^*RTRti9h$_EA(89a-v68RDmHPs7)O@<?yJVSm&9<$f7Yjl;~{
z&Y!^mYPo2n1PuO93&&>iIsJE9SLTYzM`^jR<c)ZHIWbGJv(fAwzIIX!Gt|b}7@?R*
z5nha^Vg~_x)}1&<+^h`ZxuZbYMufUcIbDfW<_L=O^TjNzjddvp$5(Aqt#jzshi(-j
zLHor~G;|utq|<}yL9*>LKsHvF*VdU0SS4J-#g7C<vU1jXRR$7{_wmy|${=vO6{Ccv
zEe6`lnD(Se*m!pw0fs_b>NH`9b=e7Uw4LbCm-SQc#%N>>o(x}`)X>(t<Y|J)SQrnl
z7H2Y|>QtQW!bI&*4nuqiyx0(SY5?Yh_9l6aG7Lm=G;=6fmc$Z)j&~AY;lwR(b-5Ir
z`^<?47x_8TZ7?ozQC(jZjtX$w6gG0e6kT4<vP<)5X>^M)x`@4r<yAgHybN~JX_X*a
z(XMFzkl0h5hNQ|DlUxFc_58SL-;`)8oeD!Ihh~gFW+NkY17zzsN*JP4F;IMUWu)$8
zx`8ND6q=@7<}X0rMt?{%W@MhqKdKh1zw$S|$K>*n*H+v??z+~KKlC@B^r|K8ZJv6H
z&K7bfj&nqod#?CumS5(KfAm)aeO|B6fa;AbU3Y89Mf1jvdTG(=)=Wp1@$X1sgyYFc
zWVvOsoE7u=$nCykovH+iT|Q%`6&O)ZQrux6I!_gnnJ%_4Xt(%75p_MLeKf&{iFH&o
z%Ky&wP;z$a8|-$I^W09DZdbHuvuu>>jqdJ>(iYwnZPNS_Cm_l+mr3b-p#a>Tmk8Zb
z>ar7~iMyJO=_Glh3AL0B3)&8^B-1NlKtA3yQcyVOPLz7U8^Z3CEQrkd2`TUF#u(sg
zjcYJO!1=7Jmt*h7oG*zSSYdCc%Wu60w*D4^w6*|<uw{PzEzzwh&UKZLyK)fP(!E$@
zF-LB;R=;o>7b69dL|)zzTn7{;*-0t~X-i)KZI%MJqqY-K54%b8!6%=5_Q?+aSM)l;
zQV(xDdidZ|QS!J7*P^8`qe|AeL@@~~9K(jZx2DDr?Mm=(qwSvAPO0!#Y&lv0-V@1W
znf+dR^yKD&Qb%b7RyH}1Cgj{LBy2Q+t1L>CsCN8NDaFc*#C3|KWP?-`xxCbzLt|<J
z4&~FGmEPT-(qL4NViwoB(e6COcGMuRy<19?Rl(35#7ar!O8tIcKR_0+ywmpuQl^tj
z37q!Yr+)PMK-^RQPoylysOa=@*Xi8*A|Z*q&HNB6=Evo#9VCT8PcS;{So+A6V&-*j
zt?HoL8dVXBYLi>R4_)QFHZ7IDokTI$IwDuu*se;?pI}L@6tY__2>Nlc(G}d>y7!c*
zsxtz6X@HM6>cokyFiJ-oHP@eHqx_p+jU2TxR3v)$!v9!%n<_)xDE{t8Zwjkr(F0hb
z<MbR^MYT=gjV;Oj5l39@y^232TAofd7>T7?(N-u=xwK1;5lcs!t2&1<9jfBlO?*e3
zRJk-Q?z4CYqtVvpM4##4uf<tE9}YweK6q-LO!qUM&Wd8*cmG~`jt9&YXVebtqJwEl
zjNw&p%cI)+v<)NdWL5tRM^WM5Y(k7ZbswrJ8fu<?XBuC~?Tg;KN=v-=b@m;cH2yug
zQ2?PJrwpng^Td52d3yOrL>*8e#O&>UC8ZHg$J;u>bjT95yO0~9?>ahMF>iT-cSh;t
za^dbNeZ~G<o~GM$eaFdNiwr~%w`Qw`jeg?@$G!Upw+{^YL%feJ6TCZk75{}n%Kw<=
zG(_N^7Rscr`gaJnjFCwEnRWBE`T?=+*R(_Mu_nq6%%o4hQg(J#6mRg)H|fQj6#oF1
z#DB}bmCJo##+q5DY$wP4K(DndkA}~YGzJ%2*=W9XJ{$LQSgWKQq4keuHF2STcH>%p
zT?&U%p--w?N;tfqP;0Q*O5G`>TP&K&fBf73(YCCCpmuB81r%M$x^OH~uMnIU$)&&!
zA?j82JU7yT*c*uZVjP5)2B)c&S7${Ez1f|RW5z>meeKl78>Dz|p-k<txRjw24lAM4
zKNv~QLTaMft7b~h{wSEQ4zPeK1Xg(Y(<d?a76uxzS>bWf73+ixHLsZN?#7OcdZ?W4
z=JPMmKJ7uEI<d`n>Y+@kEx~#K#SVLuma9>M;+Q7)-bRVL7B>tRnCP}<KBh-_R!md5
zA}d|N4C)rsX;!FkV(JYu>h~va(OvQngpK)Fk5w2dQ7-+-(eB><;qH+ppMUdkPi`#p
zd@4qtRE*n62KVoGzn3d4AO6t&9wfql-B)Cl0oJk4R{IA}(WK*jUE=7d8c2@QLcv;K
z$arfn*6#J|gQxANnd8IVmn&MKdFq{w=s5@*AUGZ3Iy+<#b|-n_NV$Vr3LUp-lcJM6
zbN@f&0d<H|(n<F2;a_J?YkaxruoSo`X@_4Ql7^({ncKI@CCooqgRQ#Es1CN6OF>7*
z&Jr3*T>1#mT;5;Hv2ilONak;eT$M9{>EmH<4NW_ZTz~;uBHZs4<MCnw3-P|>^-54)
z2|1Uv6bkLQh4UJKm4GE4g+z*2eagDdpXo?a&e39V=@>_}o4^%`IJfkv#r0xVW;9Kc
zQ)Sm{9afL}`bH&Z2+=P9^<*q_5aM~Go`UKJ>{En=dYH~b##@~nZSkG1p2e-U9*#~W
zZe`-3R|KC!S4tRIIyXb>iIOY!t5bKp$_~3_fwzP*E)&o-I9m#SEY6fycckV9Bzmk}
zpbJ^@jZ*v2kdf=FVia4ffwY3~5pXWs4Ii0_>h<%Y>lG*OVKb^yGaq$+gfC(%OWDnH
zkA&{71`9>>z&sV&M19x*TS0lA=A_eo*!`xn+>xY`=(nvc_cy+32Rs^zqDF(2o%BH%
zwc2CKs<FPO)zi6(dw<)y=e2*o|J{7j#SxG&1kbS9g@nudo#WygdpH06YR(|mIoy|?
zM+kdBEwbqDSxnAm;&c^DSJ>L~E2psb;8VTGuFX0vG1GG~DQ6zWFFp=BGDB1MW^(~Z
zU8NaverGq7b2=*E&g=&7sFlnVYIxq<DW1SMJaDb`fpFTFGcu5s28Ks+N|q=g(`yg;
z!{7CBLi>2F8gn7WGX`BrV$gEYuxajScBmw8R3odZK_5Lyf_9oJe6*O<I2}Rz%<AN&
z*CV2!1P^k@la~~aV^#nPiLm{(H<mx1rW7Sxkp_ft-8UHTq#}Jm9AicKd@kgnX^9#U
z6zq@ceXAOH&B9T&3wk#>9o6mv$}<C(ls1$-sFlc=H4WalIpWWjOpfEJff3cTdAEQ0
z+k6O@v2Z%?d#PyodN>?~xg*i2d;Z{G=Z@om@+x5=PKIpeQsw6w(P-Fp546RtFBXsx
zuAo;&7V~scxNR38Lk$n1ZEZ2_n6f;{GARNn;40PXTDD?t9x!YD={apRjwsKVv|G#w
z$*68Dyn$edMcIq(tV2TGELmE^+iR_@sB5<ZHqjXP?Z(uJ#0SkSKfyXPgPRpG{pD?~
zb(;=qr&f%uVYC&4D}LUJo<+9Sx+(Q{_kVYve<-F;c+!hn=xPcXy4~4wDq{33`X|;z
z3yWx(T5r?sS`(Pq<J+5Pifwnrh7MK_Nj7sQtjy)8I7>(9-ZAiWnni_g9(;@<02yR_
zIvZ<`8v22>&gJNWarLDdly`>>^?p>k=R^VSmY>I;;$z8}LCvTQHJpC-*=N7o_*SbW
zyF)wEs2$j>BKnIMn9w^8pjOhRVcMIq%-(B<(ES}9vE(cBhF+_ol%PuDqCm>OBy1Ne
zO~G<ciiJI3+*wEB8tr*I`0^3aXu6f5Wl?{6)^`4<coOUn?8~~dAbl;L1NnW+ey`Dg
za_R{mh)b)#Xeud~@i!v(<zAOa-LG5{0<}PFW*ZRJ+tH=#GYR}#unr4MmRXvq((3fk
z7Y?}k(_%iFep@ZhQSiYT(q!z3P=b6>?YeJ|I+V?obmTkzV=H>FY6wf;Rr?EP22Z`0
zeMiy1Mb5Eyb-j9Wo@J=<Say7gkhdtQAtI$OXQRI6o#cLx{}*TZGl4!YF6-Yu-GB1>
zS)&nci>GSYhaF`bTqpZjcOpS~8(YJMuP?wM$}{~ddZ)VZ(xAmA`1wc8?leN>0z{MS
z#N|2C@A@{B2lw%RqE+gzY_&F^ol2pU_?pr!R9RfY%-kg!z2>ha`9BkgK8P&nQ$LVm
zA}gN{EkIRXX{cfbip6aZ(^(^sn0o{=m(iIg*$?(|Ha!mm55sO65rB&{8;$66G_dgQ
zc<f;NjZ&9($RCa94Eoip6F_|tSBwJ;tm*HSik~BLVNIaORNYwq;;6~N%kHhFO4{^W
z##TuUb&AZA+Gwy#?sK*kcdB)aIF?r@&ks3pLtf(@Q4KYT%@33j>9aMx!^b0~qxddF
zY6=>UMN;qh?I}XFmb>*4TjpNPCmPK}(YsVPZt`W~UAXRD0#a&+D)rmo81GWJPiPRW
z&c?$e!u$|i(cWolc0Fra;8VS<dKyW_gDrh&;6Gml*7M-AzRA#in@bg~M;mN=hxljr
z?>`VlFY3;lm88OIs&Oimwxd`O3nr6_6m-AC6cR5L;!}gEA}oS9hE&jz94`ySX*9kX
z<<qGt+vW%NsxLAd(i=tGLi|N0T7qhwAO#E|n_2jnR}2+|7$Ho(h-8C)1KYEZNb(Qb
zP61dNybof4_WvKoT^}|}rx9yb^ckE7OYa{3k->}&3R?BPzzV$27l2!PpZEU`sM@Tr
zi}V3szW)&YtIyKKC6<uBwUw``DW-p?Ph`J)>Oy+gSoG}$f{(IF)AD3Z>)x8UYR0#W
zDtu>m6m9*0)V!Rf<GX$=Rdnv$>)E2bx%=EmJ8OrhpTcFBmSU@^wlX~HO^agGlhC}l
z+vU}_ck|)sj&C}N<n|Y@U=z7=@AozE?XIscCR*p=ouk%o1jf6vu2Z)r8Ikf|RFtFl
zweB)PVx(RN#nqyW;N=pr0B>%_7f`-*K_RTjym%?g!pqn0<>9QD(n~2e&|oE%O1(2D
z5Fkz+`TamkO<ES%E;q2U!uF2Di9<R9AjL4dNEahy^DeyS(A@;*$>q`Ep5fA`2y8Fs
zRbIbQ3Qy*X{$^=umdr@tB9Z~)joK2*3yE=y3v#x&KsYb^bn7fWraN@T7jNzCGhag-
zF4Dg(^0(<ovGsM8)pfW3uZORWPWF%bXt;lP^y=i*-mB-2D`P~U6cBI+)n6rxl-H)!
zP9YSZ-Gaj+E5#=zk&m)Qt%~Cfa-s)NtR_R4m@W{x8X{MjdD&i$iap7k`c5I`*(|+q
z4L2I6{4KI~$pad^m<uw;b4|~<EgIH*VzKu{dx8Dr{LQLd30;qlSRTb4DTS%yh|aiI
zi}=;Ka8#w+UkMFEQ1=A_ps}5$Q}%sD3LR}6{+?3onq^lR`9nfT6N|UGB_Bi5#_y1h
z5eJ_-3SJkWh_5*tA*5f<B&mCSi%oK6P$=_D(pix0ys2ltAcPL<S0Q(fJ}V6~Mnlhw
zH+kS_6@#;c!Ux-S8l{h~Tex7sdPhibWnRAjwBqU&h!595I3yS@Okk30ZO&dXV;lWN
zjcvIhRc6=`m;t1L&<ZF3Qn$sbRx7C>9G*<fVu!uuoZWc3@g2hIey64*Gt-aNm19+T
zjiyW$*ok7r!o3euY(;ZMpX8k*H>tV?>;paBqlXXf-`~R9(qI^xo4ymGW|_Ah;3Z*P
zYub}%-bT2-t=J0pGaA;yfWKX`IsN#S{px;OF(C-;R7vhS+gNQ7w#jS6^1SlU+(0qG
z*7QmvQ3m~24B#Qsn<*vkAmekn1tRB@-X&0-m&YBOO&N63hr>*~tLl)~4VCCwtSujo
zSb3n2_1Z}uZqpX#7Qe5CK2+{$G&q*N<0Ql-p}C2HS+YYWRrkwLLGmVXNT|njG4G$<
zI0aH3KIq;5^x>zE9(=a_DEsaG-<jQwiD`VppRbjTzE8tqayq-|=fgF_Y<S*Ra6KxF
zAZ7(Cm_eN#RE$>Pa5WnZi58R<hvkvkeUUNm<1tKm?mju!Vdx*+RGK;Y!7Q5#(2|?$
zRij}BNp(}&1W@?SjGZvfBH5}huz|szDG9I~q}9S4EjUD<n%}6|ZV?)=lWe_BXDSZ)
zez&gEk=3GfcWa-BmchNSn2pvMLA5CD7QgTd32#r|>4fgmPG`X!D!itD*Fjmxb@V=e
zsu+%UB(Ix4U5ig`WwSOzzP<J>$=Yl*aPDSE+{2ryIq2fA+_WW5rVLk5TT5{*bbaD2
z2ho+zjNO^9x-X#;{VP*#U2}*M^+hluaSRt|qanAoz%E_}XZDW}Xhon2Vl2g)^+IeI
zz+Gfm&A0vqW!UGapOTC@Cnkn^!NXv)y~i@2C#R^?a*HZ~D`-ocdRuMrUWP;rxp^$Q
zKgXUk57u_YVzlD>hYF9daMAAEh#(~-XNHd>DZpWf>Wr;aomtg`B<0I87Md3<@i<-&
zM_J7*8`7Z2Wm$J4q0(!(g)W>>ta8QLd&o_JTyZQ+aK>^|DxHXl7w#%Ad-2hmx1>GK
z=lF;FK$em0(eHNuLfCEcpdm-O4}7rvJ9nbzV-XeLF9$TAI=zK6N1k)g^iHyUfBSy-
z{>R-1A2*^-=jHHB?vOJeX7%;wP+U}AX8SwI+XoMIZo}-mz!GFU{ITEgh3j)v;og39
z<#}5)zR<qjcm$S!_bW_mON#zB8Y~T3Mqg9-=zHQH_U&R;CcJ`)1o5WPh(#To=UQTD
zReN{LeU77fCmu7YBDd%7<T)lZRlrp#G_5+((ZKI`uA`WaypWUaE`Fanx`itMd}s?6
zh^YD6`M`qS63&7D^W#D~Ho`zR)`oFZ138k7kWz+AdL#L^-YBoTySFF85F|^qwStJe
zCC2vsCnldIa<R<a6(rMH@?)*Nx>it<_57jNgZ^;G8$z@I98k@^Fe{G^Uv4V9+rxXV
z)x`{)d`ydz_rQst$S=+?(m6u)w3<>A^=>g9w;sMI_cU9|JgwRtezpwMb@l;oF}37M
znu`2$NeYeAQ+)!CnHXj0m!&4FmUJT1Eg0vIqS@QBM{Uh5eKh?2bLNjeynp}xKrvJV
zAEmLoB2bHgiJEx0oDX={l*3=0+N7i_EDQOB#%1_bxySWvd?m6U3)zZo%gvnhT_eET
zl3972l?M3j>x0Tr&=UrNTe45^hcF6td~hJ1RYYT1e<W@jQKa108sX4RZaqzOF;lgJ
zA6_EEO-l-~AQDy5pQA|R>KD|ZbnC<Z*@BgTZ+(Y8!`oje7vt40ln8K<K}I_g1zsp?
ztVLcJ^wSe2v^gb#5Gf?u<3BxDmURpV$K*qhpGy7m9xMEzMPxWwU#4G6r`5jbTaj`B
zxShlo&%Ha9SHdkIoj5_FEk!f6jZTc96q5F66rIXdm(PY>Tzoen!H6Y!j#DQFy3;8M
zd0#Kij;AcU%mM!Cc@F?`=)y8{0-%||YAKM7fJ`lrv=C|;R3}aJCTdcLT57`=NbDuM
zlN$}#*0e<r^riIfn&=pqHkA#S&8482H5*!c?q+tK1DRF_Pf3Vr1j%?YR~-(gjV5QQ
z5?yF=W38<?fkJKGIv&TpW~DD74Fx2ho4aznJgQKJ6!(`7%+rX!xQNd7j-6XnfHgNt
zTTxKmsYUv&Po(I3q)Vbt(z{uymLw%dGbALz7g~Yg)~jF3YcU)2Prz?}i$5q--TcSD
z{qI`mnh?XD9!>+XRkN*1|2yRyrfwP1rGX5cDsA5WrO(PkQbj%)D8!xHEVdI+?>xGY
zz$xug<3CTaHPufDQ*f@R;6}L}jnzk>zJ()S7c(a!h;YYj3Q?LcmuU((8%4<!ffoKA
zBLdKIqwz%O=w_KnmO&UG+W9bOt;H3$maIK$J17Ip8r}~G|HKjxr;vA5!p2QqXFI^A
z46MhGK!XY+TDFtHi!4<qu^Z10IJLg!WV*7T!}dzTdlA6qq%#9wk7}q}HAwxExK{aW
zF6mi4<%azSVDQPtPul!O+pp6$)+q?0dKd`Aj{>ljAceW6ow6|CXfakU6E8*2H~di1
zz$Trr(Ne7x^=lOd-`4mx-Z>&E3k*~h`T++oLkiNk2ww)5BG{>R4Y{riV|x^cgYAv-
z^EXM8Sh`uWI^MJFQmM{EgDS39ZC1F}RK!tvG}?<8I5d=7Suxu`N={rZp&bC9>OgUc
z4~1B+&X;tDTdDB2@eq<y%A3RVBvBpi+%cmFW!EpnWoTKl=Fq8+J|f!f+lls<7!7Eg
zGAh`PA=)83H1fm8Or-;Jvm!20T&Wen^&G-#`gJt|?VhlxZrVjN3SPZuY%6l1%dNDk
za<9j7!vc_g#t3H(m4|t4M)*MbmcI?lA8{QLAo0kGS6xv}_J1<^u@x@hPV(YL{&Orh
z<CFaIPcR#}Q)4x|+M4x^vK<;Dq#Q-kg|9;GCzSz80nqTdXSqedhGQn7Kgp@z=R?$(
zS-VH{q?Gq6W~R1B{l4%Zsyv6%Mb`u_ayiLoW+w?TOmrLu6bj$)41l8I$uA?c?JN?$
z>JpbSPY6?WflG4okV7L~1;IxrD;5k-J+?=IC&Jq)p!*`rUIOSdG~zc^fGy{iR2>eY
z9TSyG{Reexc6`S^D?IlOSm>6~sTK#ABCN5pX=T1g*~L6T#PnG@>m_?+!usex{_Ve`
z5|@4RAOH6Mh8cg3Dkt&1B{6idd<Z(K-9cXwb#XD*w42#DaA>%6Q3wU1OY#gp6D(c;
z-vXMx=%+-B5Z;5kq!Tt&5JUZ+z`c;4B(+t4b}g0H5d3`%N`G%P1MCauzlcdQENHLs
zIvAgpHrBmqd(ddS1X7Y|2xavO^YY(3+?*6HHxSQ)NS%=D9^0mTmk8w#WD4qZ2gW@0
zJkcUvPHL3F!djPw2RMEw-8f44x)_53YIOINE#wzzay82?9<Rq5Zvsr<adT2g(pB?I
zw8)F*i>>s_j^6)Ddd=S^0+rEJlIvAz?j?u=FB+i6rKcOG(~r}cVq>dGgcEd=2s8>}
zb_diTh-%cTmOfUMb41`zP1VL?+Yp^yx0tdaH8E#TtYI<`?vJoGWyxL`S;YjaHE;5Z
zNLq4J+W&4k!sRM0g)^!Jb^>fe<*bC^eazvpH7@*#6J%}CZ8xANN^|ofil7RUQO&*d
zm1$l3U%N|lqm=Yw0S`05*ApnAU>ze@9Z-{k;kA&mjgcV=KbCG^fTjy4Bpd3eh!QHr
z7zWgTf0AChwU7*6)Z6TKlV3lOr;ii&u(7qdTb4*YROBrB#f8J*IUSa&hl({I;u`K!
zT=X`#8pr$3_xDb0%=AadOR3JZXOD6}@Nd4}Kiao}{QAMp&dL72o><ir9lyjer?bn2
zpwkPUNOg>EzJ8h&?`k@_PH#%`I>v{Z^dg`6IpmY+0!a1QXsCO8mRXe>*D%N+5K}Lb
zY9B@t=0ixBz3c33DmLS9RH2TM(;b(Cv=teW!bnRcr&Dh+d50{~CeN!~<`Sa_$K0Ky
z0e?no#|%^?<`yx=3}dk%IS{*ptZTs7C$i1WMljB-G8R#$-~{A>^kQ?C<Ir&=|5nip
zi=+wWxblt`*~On%w^ha}E8F#xaIn94hrMtwm^?(}8t54YN=Gqu5{|@Z%LP3UiZ#gQ
zh|+@bD~fawuab|kRtBd*ok3J!GbI_rFd1+OdE$^HF-pT9#2sTv(m_W>tC{2+NLjGz
z1g=?(3pf~JtHiCj<GF^sD`v%t8E7&`&6-viMJMrN=tx1-c0<LLmYwoW^6PE?uZQxl
z_UCf;4^?;dhh9GpyKOgPg+b>l7_=m?Skwk5AU95Qh#y6V_)+Z;?-N^G5tgdrMFOlW
zrosqg$D2;zy-^hqn`)V9M%+5W#Z<AU)W~X5z32Z4Avqy+c&cRc!P<6SwU4;Yw0gsI
zl&ZLs3gZOmHA4B}2{Mz|^UNKP|J_Mo=}lk-X&5JlA6u&TbdQDk2GADnZ7+WFS`<sn
z!!=PavAA~pu{5@FB1E7D<fSaLyQ)f&RCeQAHA>SIt?_tq2E9fJ#D>4QSxmkX$j8l1
zq6)b+x(S1`-u<p>cg6#WB$vlHjSPIe4s;M(K0c1f>*JWbp4@oVzq!j&eL`+cNkCo1
z)4A5g$<&c6<C29I-$k?uI?Q?DPGM#1<6(Ug4eOH{)xWfgvE`cE>UJBtm368)JUU+J
z5yqqjW{T+}@2>A?^-co)<KjR;HrMv4FTnt<YPo=w+Cchh1KGOY*LV7E=;v?v^VY|G
z$I0R!YM@3e4;lpxoFY=d%xXaRTze(M%3>ZbZ+9R$lj=w^vjU}XKE&5$4fb7weKgod
zgMDq#d~7)GuEW%q0t*A-Ab>O$4`gR&2l{66JiAQKZz_&4pG!63Gj}OmcUdw49caNX
zUR9IqI+VT&HLp%lqsV_zDIF$xqC?K5f*;2*9%W!Ou!+CTMsu8SH_FP;uG7&QtEnr9
zb)GV00qiafSX(Hn5G@83L8<Gj7m2M5x#EnLLGk&#+FkIv4G!|;$qj)PW+_4Ghd1t;
z%g_0d)(Wne1|eelp4q%L=?!dLy7X<~7^=kVR9X<z2vr4%{g>g(w372hIWNYH2w`#-
zEN7TV74RAEto$6dm(h)32jlf(c9~A{zsF`i#L}PwUDU_47$M$MhT<!w1VTbGnH$#W
z3<y%yPwL0T7J|;BY_i3|@!ZxePA;F{bX_xDMr^e`oaADv9``xI!E;u()wCUfvYPwK
zVqurL&YkF{2_qK%qmG={2caZK8E>^gK)aiIL<~Ugali(~5<$m9@!NAyYA78iiV<|B
zyc~lih5#KSwGAOO`U>D6fUwMU6c4$dMhx&}#bHl5x2`7VWy4^-jD~M#ZoAKPr+$G*
z&nW4hf44n2*0X%>7;+~$9yxu5HC>(+1tMv_@ihknhx@bJvBK|$n6*<YNQDDxN7GH+
zpH8{VVQ#rbK8V~=wxLwG7$<T6{?7gT$*H$jzjPd?wyT2Rd*mIjF(-A5VZJyM3S&RN
zfBX1%vj?B{cb^<S`qwwVnLoZ?wxyegpC+eI+-xsdA`6AMCKd%E0`ac5G@NLG!T0NF
z`+;<|y>tIja{5%o3brNSuao)vHu>2@Yx0pBJ>*|e%cj%!ZRx?IPfNM(4`&%MBU$*8
zRo^x@k5?Winz=#+*wgyHsGH(;!t-3f-I?1x7Ra$9D*IY!t#99YWQK~mJQpWU&23s?
zF{tY}kqkE+%ZO(MYod{=%s^Bv;bI2hXmxJY4lj4SV!*rWkh7FCKoa-D=yj$%2Gx2e
z6*7)Fuh}#P-yFPr`r_dE^MTivJNWtV^^@lZdjqv<X#w!-BASh+L|@G)7R06G$zleF
zM+bjCc)tH^|LK4)D&tu5Hb7jD4)#v)Ho301F8F#?HB2q8%Z^md+I_xzbg+L+bdvvP
zTr-Hdz`CUIh}f%Cj5>I6;Ck(^Zv){Q2<%e<27|jSa2=EurzpD!6+$j%=2p)Tn3TQE
zR(kGYro6(9haGnJ^p#+eO_Y-_U(_0&C+6Ut;BK3&U|+Ix-u>ndoVb3^wRWn0hOU?F
z)gEZx%0O>!R=A-%DAUE<EuFvAc*;PX&59GP(^QwsAc&Vds)HViB`Q44=H~u)Q`R|>
zp)-`iwT}2fL|WRlCQ+3=L>WWH&@2S3?~2hu^$-D8f9}(up@CzMdUn{|)hx1RC$jQP
zN3f%u1Iqumbf96(*aW2G#y+$lg`b}b@*ECM<}>rn%wxE@p)i+LkFxDo(h5WpQ4maU
z=_FKzd~16gnUP}ham?h#>NX1vg)+F}pByH6txjf4TH8BGbY;z!uB>1jms9Da5~s{{
zLe$FU=87wixI@)rQg5g#FneJ+tTN7IkHlP|09HV$zx{Rn!A1@HZqv8WYp$T46(56o
z&iv1PTLXzparCnd;ss%+(dg97UWgU2J~_ugUDs;pa{p3e_Q~#(=llJayD#>WuZ~{5
zNDf|p_3G%w?#aQcm;K|tulHZ<_V~)NTC(MRd6GO%HiUC;e6Ec*;v%Gi`?Pj1<ncRB
zwyGCoIXIC#B(-n`IV!>bV~+(DSdHH5Fj&)Jk7qK%tI`<j%}p<Nav)MBjfW>2$~2sc
zGnq&CDFuF1ijRcWvX{h?GZCy!oE6(WgJ|hM_Epv=fLWS25}Y%5w{k_;xt%T~2nhv<
zeiUVGD`kD$i@Zado9;7kLNP9(U*j!$6kW^AcniyoTjG=GfI!Z|rc^dn9P+w(^FR!1
z&e38HlQNT=X?&I~@?b0U&m=EW0k#fr4;Y@Tr737&9hhA@E%kB_=i;x-@jbij-|xvx
zdgFB3>L-uCOj_St<$``M9GH%TKUaTDerUJ-S@10F;Z9<rvAD#}MKo52vE6b<@NP-x
zmF0r&cclVp<@+kf66!Y(M~zXfZJl?g-bPJS-AKfG(=^jv$6WpztmR&2BD#5OBgbpt
zbWPtTEhKWs>1{0WZZ*E8O4?49OLe=+?`1mTZfm_o?0-6IJKkdsvUGOYVCF7|uqg+X
zJJR~S-;3=!TdJ%E`Fzuaz^1Z{58+Y0Wd^vSr!b?XzE+$Tldz#L@Ph39Uy)fw%LFDh
zbAKwXdk~sVNKdvdVlj5=HKIujVn`VTg`^NCyz+SX<N0VO@oJ_UsGiDe7_(UKD@*M3
zsogx2D3hpkbaV`nC7cbr5<eB}ZF(Lf=6Wc_h$;-WbOS%XvQ_i)nAR;y#_lljz#34^
zlBkGeD@2}Rf2OniZ9dB2%w{Vs6c_5mYE-+*!i}xyWjQc4W#HG0`}SwN?|S(9i0xv#
zT#IN$x9TA>t1oHbuHV^ieEeBvJke@2m8o<D<uS}eZx`C_mgZ8`^fX-Cu}e7m0LY2$
z6U7WOsw-e?W_GNgP&Pg5B$}hI`;G5E#N<7f4}A*;h=mBAkj)9I(qulLd8b!^orBnR
z3-^aS-#t8taVp)ZotIlQNI#;D-GASgirqI`8pBZWlk8qTo8^u|%B5c2Pfty2F6WD3
zUeFC4BA00DgMIU%zqHH-xkFs}5+R2-Qeb2#?ROfd(j$isOz?cz=hxo4A|!iS>pPxm
zJjW=8F2HgcqwmYN5|b&q_R`vF*@B`ZF|cqeueKZ&>p25(4*IPj$+!y*R^&!Ho4L#0
zog+!XE~Q9>yEw$S;hhg}vKu>X@}|+dmV}UJ4I|RyjCp^K<@qR1M_1xPHckJ0F=GVC
zb0iC-mI-)=bq%xjL9#x!8d;oDVn+c_4OowD|J0iy$G}mc`Ww7?M!?tvrxnPB%%u@k
zR-@a4XLCrYqt4gTI8Ngpfk*|R%R7sJ$wn$TcIWP#G1hjd0sB=s)STXf-^tPG`UUKk
z`e{4qCdZm?XT_>h(YRTXO<$9MDCt#`HyP(5g*Yfe$<|BE4k87oH(L@ZdEx%Imwa7J
z;qwrGyzo!j`OxthDHPWrElaM|(GVfX<xSL1NAK{^qj!ZeTq2!|o60zzT!1Yp=}z9)
zrmGqpd&J{nF<v1QMDN$&WaSXEoVJ637z+lS#=u)H2QbnPkbgd~3;@UQ`JTHqyAnnK
z3&UT_Vj>ANVqoBlz8Su2`i7FTDu<wmi2_UbiZtOM$dPK$d12=iHdr)|VX<YDzX8*x
zRE%FWtBkgg3qc6r_r4Fhjs5U?4SwXSHcC)fD1~JAXD@kD3H(CD=v9G89a=WnQ`*oj
zxZjkty^)1eGkrjZD{qSra-L5^5D=gdd44KOrSG%Oj7IKQCJMx^S&Z9(4QqJG$W}S7
z4IjBvHF~5{1tm2noyLp6S86nP1krP*M$D?5H`5~$n`rQx1<%-hJ<gCGSWTzVRh$P3
zkH2z<rgvGNx0ur#KF&%I0mO$!a|}I}GXiUg2Uiw?$D-=QbT7g<H4Fth2JX9_s;*RH
z@i#g4z@j>&vdmvB&zAwb7J}*Ba<{Z2T<}2fnPr(HRwyO0qG!Aj-BLG<C(hG}Kpnsv
zAy>-V&qUe*!V)qg<mY?Zjx>W9M$i~a@bDL5cOARF948w{!qcB~r%4ca0kL25+bdM|
z2!9^t#4_gG8v5HY%bv4zmrrdVV+g5ps=CHCaj|vY=cs%C44MBn-nqC^aP>B{dIX3m
z47;O}54`#A-6=Kb83oaiSW9tw1kaI|)OS<CE)b_Gzie=2CO00O)ZH5mqkXqqUn5FD
z)4>>JW4dr`AqWoNGGwkX$By5HV4$nGwH38t%A3hN{mus&4nQl89FDPTYEh{i6RUob
z4u=w3H!r_yeD4J8W_?4OJIVJ%?P%u1ra|*0$q$VmBuq}c#hHvy!Dd|pNj}ue`zVtd
zFCVfNmQJTbmxcu0#f_YSoelDPh;m`I99wZe7?YE)LNzOlZp9MHid2^{|1oRG1K^hI
zRF;pXgpT~%2}t%&x2o<R-`aA1t;@M;3XY*;p-pCx7HvivCo7Rz6YB!a>poPD;ZHbC
zZ86XZVq^WZZQ}gnTb(llBjZ<O5fUQFfU+9iHWxFBpK#F9V2!pP-0wtNwUd1M@%?DO
zfTwdmru^p_cEV@ShzO<Cyucigw$<?k=c(V8Qy<-4=CjPhjdfI4nNurMZVl}kxEWF^
zR69ZPveU-S8Q?2wgD)!%i3hs89VL~&CaB}3s(=s5U)G`IS`?W`x@$x*9+*bOgc9Gp
zz8xLGEEtBnEAL`=F9LjSEbdDbaVthzzs;8|=W!PHVoA?J`UX#?Qj{uVHBgQ7$iAmO
zsHU{rq(Y|#4T*%VRJ#Ts(<q~+q*}qL=^x*=?ipBco2wGb;(E-e(v@(9KN0&0Mk5x(
zt*2%VXRS&m1?UPQRM}3lD%%3^SV|~l0KtybI&^ZB0T_e3d3NKSV(!5+z1ZA8?J8?M
z2^kbaX!q`m6j&RRk|hsk(G{u<wL^T~NqEoKt+P!XB6F#9d#PP9awk&lI4@O~Lrz9i
zVZ55Y9Cc-zVk%nW)RgH|VC1W6>_e!rU8BFQySB3t!#$!|wi_3g{~9N{>E(TJA(-Mq
z6Qw^nrAjGof|ztA&M+8$Oox~BqDiKONLFj}!9Yc0E~_Jo%i%pNRTDsJ78iZ{bh)uz
z3KW7fg1sH5u=f8AK~g*^LJ&?R&uORHPT<16EKmnWLpt_~p$hwMtq^LCP?#&n#JiHh
z!qzn`!{^eSL9B%hn`}%{0R?1JHbSEgJtPBi?+8UBYOblK!UQev&)y~k?c}m+#Y%nt
zuW86E9Ul<vCFEl9ogH<KyDKt8ap77M?C6OTJ2OHP!F;=*y;>B-!sE2e3n+gIvZ(di
zLrxcF26W{M51qmD|EK2yz1K-l3w)$9jK)p7_Ai;Dia5SWnK8QoSg`r|tmsyzc7<?!
zrhMgGZ4JE)s|b@zDP;nl6t2e^fY2DaWD5!_Ejm97kDb=aRK3>+l3=JPzH%oR?w`jd
zu!bbA76?+Euz8a1po6iYcO+6AK#s2ck%-%L^GjWY{M@IpaUa;Sp?w181`+3g2a1eK
zxS973w)UQO<VT?br%@u^2ti821-^CampdjbK-P(4G)Q~d{2V00Iob|K%i^&?+|u+f
zvTRiL#Vl~+&DXwWClyo4DI*_95RaOTI&!NKpN{{yl#;zKs5y8{9>VW3@!4r0Z!=n!
zHa8~)W0&Dxo%z`3j$U{-R*tO!ev(N*zEkbp-2ti55unDRCtycP_VMJjma*ixG^!A(
z9zCz>B}!SeYJ3Ktm6q}b7;-I;%<-58c?{y>Mzo#U!75<|yGGn{Cvg+Jrn$_5J#Law
zs*V?!$&#silS|jQ7-iq7IznTMEQ+mz8mFj$Kz?DJs5wzFSpD1$K?pe4<jY3nsK6{C
zL<Q*kGGyqH{l!mE%LL#P-FnRDJL?U!16WhEx`ro9aRk{a#xz=SX?m++kCOF=UmsdA
zd(^52V@c_XFXwH^it@!RI)M@Lo!1AYdVHDX3G>IiQ=eWMU_~&fqYMnCgW${yTE1O7
zlg}nSsWA<Zv1<@RnT_-AJUhRdz{#gxO%RNDF(X5-@lq&YPILwUe#S^7M-%SEjK-2j
zBJu~Ws57Sr<=ULvlG#nta*N$b4xa9JJUVk!%A5IgWCIbiD0$Y~I&6)y(qd>5aGp(^
z7{2BB`33I(i}^KVc2BnQ5^g-76eUiFsdoYaj2Q;mY@P_YDo(M*#;3k7nu-I#;XDoH
zrcK3H2FnxV!5Qv~v4uq~Cd#8GZo;R5K1>9<Q|ieB0lMIW)fp(@tEWP7@73~lf69+;
zY4ut0UM)WCUlzBthC}dP?LF!{8TD#?-VI??o$7q*4%K@#d`mtLAa|L54Aas@*9z63
z7&uFOb#VFPrbD2vB!=BY_g%*^QyvY-&K(`(*a=zVltv<zK$LW*>8z|2t#!P`Qq8SN
z%b>8VMil$=!Z;~2K}A6~Sia_qgab{S5{xn}s7>G?C9z)#+;D2|*y8!Zd!O`0aE=pg
z`f+@ts&c{#qzp?|m2;flbv{=QF)9WMxNJt<P3zFZ2^CKhz*=uv-_!;ehHXQvg2Fs_
z*oT**udvR*g~6Iu>(2L+mgKmDVV=)LNKBJI9KU+0!O`@MEtOeM1>jvb5298jECSqw
zzMqh!5fog@#T-Fv1MgZW9zJ|k@;IBymHd@kRMG=kGjeQj&z^x_3L}xM=VQHSgy<G1
zUBGM8n_R`9m`EO+=#ii?pMu4N3Kea9>2_h5($AS@gAJ8+p?NfTiV>FU4%jDsURY~R
zsaZEl(=sqXk$_`yn`;hjRDUb4Sc<10=k$#C>&4l6w;_;qNuEwUatCi*;EsZv;jWTl
zAu!6PD#O}bIP$FrkNWyMJ+@rni~Kv)7*Ka)B4NAC$uBN0q%Fy%H2JvN<Y#?8?b}mh
zE$%bHJuRm7L2Pp!`+UT4Q2b=rsn&{=_+KY$VdJK>s}gnGHG1ZBwDYT_VYuVLM&+^2
z&+Rk=1r}#)2&f+u#<gf^B9bUVbQWh_Hp4EQ!g*RQN}kqXtry2mM_D!vs|P$i@kk&B
z9H8(+lOLFVu^5Y?{w9iIo=f2hwxljy_i=ZK%9mrtH>Xkv9Fj30C}GV>bBnn@qXia`
z)P|^<PAVlc;Q79S)AjlaT<XTu-(;HJjEZz9(>zV55V7f)$(Hu$fh?!JBP1SW^$9!l
z%VfEsepI+R3f8QJyu;xwW=@ZIGhsbg2)-&xNf(ZI^%S4_W9;~lp5%2W@>8Zru0D{_
zN!PL@?u-XzR8lficc`!~lS~r{J)DhUT2>sLw24LHuWNXv0PGcOCcKlRBm5cZNsh28
zKi<h|i%`i9tuMpc3{hN|@X`v~@wzhZ%}G6RG*0j-f~aj(6wFRldQc>@RdyvqJo9xE
zRlGFS!RN~mVjw8FRIP;`YPvEVUDDA-fr*xq&<WP=xZ=^1-Mv^@UUNZyBH6xjHHNqA
zvYBNuMa*nX9+ucqFPwCKrQSA{VYqN7nLk8X4m4_<>bYApz(;+1zPw{NSU3Js#X3l&
z26Yf4p={`n_(&pDQkGUGaIkWQEG=_X6olYDqz_W@MR*%YWKXqBh*6x`C1z`ux34c$
zB@T_nR~nD#+x7RA*tzyljdo(F-@+`l`a{Qz`cVNmNqv+;ir%0G;n%g>O)3QzquWA+
z3t=n@JP=Gh=6LqXvx&a+Url5<*-*kHi$yuQu|?T?ey}7lKJ1^5^6C;Wr0kiS3ov4q
zK5)#`sfB$!i-}7Tb0RTIG3IFeSU4u4Jf}lqFw^5yl6h0T%~0j9L~t|!J6?H!0kwmb
znTJMotdlylWZ;~luf-&v$8dak3CLj@3Ua5k&a<sQe|q?0`!8RYhfgGIj=>ySkJXI+
zjX8iiFeJe53S_wDWc{^(74b&h4+uJCxKg8GUJH!%+M->~L~@%~;bkq8S?#?_VxT)F
zuM;U!h4SihlJs96F!5gQLvMZ%F;WShDv#PFcP%;oZ5AvPt}n|0R)XQUiDN!XM?`Jl
zc|{m<CV^!u8&X?O6@|JL<3BjL&#mvgW2wc*S6MbM+f`F^S;483EX;KD#s`Z~7G$(@
zK2sB>VN>ZXD0&i?HK~dL=Ae>FxDW(Q-jW4Es9qQLcSJ)Z`zOy!v3Akp!k}43kPv*g
z7?pnEbcs62)AX{Ot8A{8n_lwDoxw?=VKaJ2C0-m<6fRsJ(11*_H=Oy?Y*O@+7X^J(
zsJO#H=~&J(kD(WwEJF{YCkV`rgq*mBg>3o!gBT?9C>uI{e=(OM;FGm+@@7C&7AKuV
zvVo6y#~G`~*ZL4(XBr9@voZw9*=`85MnpWaD{K*=T9};d#G&a>9%wYkF7fH`loN5(
z?uAxU6&XjZlxec0L6x~Xg6S-n+t3Ovpdw8mpt(%842uFLJZ<cp$+<FUj&KO3HO}eg
zFv&!zQ(QfxQB}Dt{Y6-6Euhg&1T#fCo1*Zqm~oAx2yK_s+`w7IDcm@{U8fRzEa~m^
zi5u3pE!0H2Y%A~jhH&x}qLqVSX~&M5@)Y)57?cru<+kSJO0eu;Bu~=I84TcyDYBT;
zn_w@~Iriv`Rg$8KCuref##5mnM}yP`yjp?0vu;9jy_0o_|HLxZP{m~-uhW}A2r$C9
ztA9aMNDdd(p<^cm<>b*QJu3`%BVE8WYQ-zmgCYDD!W*rYN9O0!T`NS#su>^EmaOq@
z=kC0AeVH_PTt+zq>k`pKMT*fXI+}*a&}fSz-rOwTFn<FsPOOS}dKtaJd^~@BaHgeF
zq8pZLY^;~*m~DpacbmZ(yr-~;4&BZ+6b?kZSCT^lV=o+9PM61Yc9K3FL;+?+FCr9v
zOEvVx%}HP;8x;1=is4Nq1qE8&G@IvQ-cHLmdP@ninNAy1?JG%sT}*Us#!_3cM2JId
zGdFKJr6RZd<4g)!FEmtab5p$P>hZHTArU#z(;P5!OZ^Q#7&UHL;D%I{0k@SH;>Zn=
zNLX5fybz=BCC7AOlSxqOC4<VOFs>h@#(acbgqftIrC^j!8D>U-pl`QupQGsOJ=6E$
z>^1vOM+{lf2)U&<I3W<W@$f23-{zFZhKg9z5l7mjSmKZ&L*9fmwqqA<fL)=RZAx>S
zA`KQ6z$gKyoS`Q{Jppt~inR(Z5=>b5uuL!zT%^ZJ^91_mB1dzjztlTXK({BZt-ogT
ze#b4H<I-awC$Ss1kWQhSWc{S|AOH40<nHSq!vP@G8~d^(bXLq1d}m%pR8b0T!3~CP
zXT0Gnqygpz%QMh<#hc0|S*0LbvfRnq(u0>soPcmgcw)u<CQfMCCsT`-gInw1;^6pF
zb`e%6<`y#ASy7*PB#W6{>WyHdJCDj}M=u8TNgns-#nzPmMN0isL1nYZm0h4{xnp}8
zKxx(nRzTAbPndiE16_TptU%w3mws7i>En4H&#S7A6g~vpkNJQ^VKKkqIki2z$;D5q
ze$f!w2yf%LdQ9y^^^$KgaWqz{dr*q6SZ(~y6s6D|B_t4@+U#-Pt>CF4^dblm@jBdn
z4Lk{GNVb)+^3a!y>7YYWx-7z^H#a{3_IPhpEQZh~0DH`fjgdeWoO77Y<`dY?-X|<)
z>OZ;{rV@ViKkXqr`~uLX)(uZ!C;*dZLBOX}GC~;#DNLh6M{p$q2TEl+KouHussL>H
zNb69VYhg+wvl-__*ZrsF6PF^Y5Q7xNp3dwtNFh$a0LY|>IhrLPOx5SNxNVbA0)rGT
z3uz6zC_ZDNGD=ne(W{_xD7vnw06F6GzR7&#!s&FD7eMSXwS^S+V7qVWfUs1RqqJre
zpa{C}t!qvYb^nF9-d4jNV-*-ZWa^Ly`(oUnEush@(LD_eBRAO+6=*p!!lIomE@_;W
zO0{}@R5L5cDE&?VuGu0bt~0yH&QnyIv5?c{K}f_}*iPy{6wR268Qo=J^WFJCU8yV7
zgS(b&Km+qApe2fpnexIFcYLlpdMSawJ~qpfi&`W)D)V6Ae(ObqEDJIXSh3a0CN&ey
zuFx|eBTUDUL&-I(#@vzmU2hSiV3>eJH~ejp&$5V|{h}D@jt%4>`|c`rTTY2^rU7j3
zHe|VtijCylA5}ZY#80txJf*OV7*Y90TR?_s@v&Raz<;fQPU358oZ`{~9qJ=3nDMm;
zE-Edj%Y$e%P(`Z}fRht`nICuv*vS06QTqO`@~Oq*_Sg{pi|!2C@$w-`poR(?@!Y3c
zmP!PY6-#yI<oJtRlb#sv2HDi78Hjv4TUZ)gIE4`(5{F2doXv`KXk3JJLD54J%dB%N
z+6)P1X>YW2nGNn-F&nW?3Vuu@&xNWq@|A{N>3f~<xmE82^ak=*_NpTwLsy^DB)f)*
znL_y|P`>6@nBo&z9bU0E%k_6eFxNT7mT$8*vX9L^UA|Rf%F<dgdS~WQjYgSg&o^5V
z+rYNMTL{dp6cULu5KuSSP0rHcB>@1*VV{b*Qw5s$GJ|@&GpPTIaRjiD&V5jQv;*{<
z$HXGa?4%HruU<=&K+$o@J*>R7MHy*KzY1V1WHu6%Mh5S5c;ijhA-mm8M^TL1g`u%&
z(KwjhJF@$8x;Kn+P_U`zH)|ta^N>ssCzwZ<SF$gL#P|}^kO+`dI6Vu7Ejz8ZM*XRz
zG>eo$*17<ogzR=S6h>eL#<-BP#p_NkH6JQ%m!NcXiTidAwDb^Z??h`!eapJ!%62m;
z=l5gNV3zVK+(&>n4tzaeUusN$J_|#x-5DXY;#6e5+ZQojJeZak^%3M0RXU|hcwDVp
zw`Yi33A$1$I=c`5iOlYCQ7!?5&?D}vf>yBrdm;8-7sX!<`eg?OJ4s&<?-lW}SxnDX
z^<QG4_1hMn&x@UvPX%J&n0%ow5!TqS<{l}cKw3(%rXY-nX<r|68F|!{z@<(F*~W_7
zgP}lT)7I$YaRI+V8E=v*!|ue7(it;5;reErqw?;dH6wSk03}X_9iLYf*NjVjApGBB
z0SolBki1q;=Df11f=D>c+^G;(psX4!auTH(grIxbc02G|H9}CG{BDOO@_@URofvK?
zgR9L-iIZU2Fa`-RhFi0&C7{<P7ir$OwcvIdE;v~se}7f@V;^eQmT%nUrva8z0?(Kr
zDQj!i<4_V<ohf2wR1Pmfn)E3tI&-O&Zg?VTaIpZI@WS5)oVPCY=@TD*6k_GWXAlL*
za=Pw~uD#LKH@bMEZD#2`ae2&9Q_r0hi0ddDa-o4O{#upQK9AmZSDP3{h3ITXV;hVn
zJjQ$mWWi)Vt7SKoL|b2q!pav$MbMPObq7tkqV0-FIk8f4B49xjkNvg8yZ$0|1IW`^
zP^JYD3N_l*GbBHl4zE$9@?#tUAR%70w>9QPLS7WRTi@RGXx`pDfRKy(grr!}JUzi*
zt%UYo8@16h2tw6KGVs$>!1!?gE=~Si%DakZzRG221vD&c$Y7_t3wIlZ0?e-u)`TZ~
z(udKc@89e%@_3MF>glRvhvYY!dQ{#iwi4|Ke(i6P!=E6g1MR&KKLIG^XtA!XkNfIQ
z=mW5VEsE3x6uWwh$Lbp{-zyjbUw-rcF(6zL9~~yrnwm%%5xu&pcU1{QtABQPO$g#q
z2hQr|w)=1GWwA@h%W;F`IPc(HdWz)+bm#n>j@4okYk2Q@sN_styyuxBuQwj2YKsBn
zatiUNwKSv0D8<!b%q%d&%3!zq0SPyNA(d5LbG8gbT5V-*PGI=bKP{ELXmr<UIlqa+
zG2ac9BM<d6U8Ra;kC-4<lxrpT37K!|202}`Jhu+y!D<Alu-oj*8-%J`uaa^-noV|a
zDSB-Up=|f{O%GvNW5{3SjIxRpX~hIX6h%4}sGW<D-gWv@#HVo*6wU?b#%!yI<GeB;
zGb`MqVmI<lP8VgU&v{1z6Xct&ebp6si7p&~UH@y@h4e@axw5NBfNiEO3IBJ~1}NWo
z<xH~Q&-(I&%WaGL4*nq_xYV)KnRcCdb6G5ISNFhULR;7)-2hUO)oL-&N6<+uI#{${
z1|VzxUzGi)-prazzXV*hBW(MfQPy~E&k+HG?@%a&N!ZmdJ|UUt8-2dvdH9~p3Z51i
zSLyU}v#B=lyS_}mudi9hhh~Ac&uSfS-|w4|+CF)nUl7?Q*-D<W7+R7NdV5i3wQnD|
zk;=P%p6QCv>_>f;EB6!HXOWE(k!oAX6SsM9YVGzjywS%S*06jd)qHA;{X2bK9)=rS
zLX(}8v1<WNTc{#6p3d(Q>&zw)pk2y3Xg>T!oFA|p6V9)Y?l3L{ve0#zPXa7u^qKq0
zz1Y_mCFPo4eNoEcv2jNfyk!egvta0R8_j;A*aUL7SHf%)8Z$xRuo2aqEHLQ#tI(X&
z{!(GqT5N}266zlH`A$E2CuU($x?4wWfnqW|y>x>zAKX%_zw1j>N&oVye>tk;Rp>p;
zJd;a<y@?}CB8V!v1!^m_?AUwQ*H`-bN`?9V#R|$r_8Y51B{tWE7A=yJARLhU=kxST
zU5kivH`qlomh30GAk@L(Z8MhP!r6BbpFisO8&qwB@w%@VUnu`_dc6DMc_%sEJ9r_U
zsz?1Y9gjpDJkQ593`KF^omLZ<oyzW(Xt-{QANTEbvrg8-tx2*~iq)Irh20lv6wMz;
zGRvM|s%~6SOgV1HP>D-(+K}g*dsKk;Z!&f)_(p^FD!0c?fc6Q>+UYlJ4hoR`OYkt(
zEZOh+(tBTeugaHCb0iC&Eg-HP(@PaqV96%E>-<eVMTlC@E$9~h+KN8uOSTs5i5<}s
zF$wbT+uMj<U2|Lvd_;0nofJDmnQ#RA>fE<hEUFi#SY_Kshm9<L_$fJr#Fu$HO>Mu_
zaz0C1&-M;G$?iAD?tlL7p7eUXcJTWPv#FR+@6zU}hUJQd_E2LU!g8JC_ueI6vhpgY
zyW{llP=K<t<X8;+Q9+jLvX}C?fBglJ6_DmD<Bs0tG{*K=D?~Zrtljox4!*w_`4!tg
zI*jXR3Fq{&X^q;}&2!>AgfC(e=T4$M@rIU_w%m(&v;=OUZfS^0Pm%1z6nCZzs&h7O
zuywracI=f?zz_-)mf@+?DUm$s9`4xvh|p|UmAGgE9gDMQSABRP>rX>NA}kI`n$hTC
z*OuFGDT#&#{^)q+C>siHfqNS2TUkLaACThoB#cR!08?0dYlbV~!Z%JDb(f_XamCLV
zW02tU*Q*xIBbfNHN^~+~8K}daXJz%=)T?#{Y9G4Ge|BR<s+JyfLW$Mrh<l4>Tx^^U
zl;zM3azR9XYKu{!EO&?|rNv{tUl<F%?E5dRso$7idNF0>Y2+F3xU^{^_+@Z+i$^74
zYa!E>C)u#+B|b=Ucs24>B0<YczmqhCGQXUN;*5eSj+}-}JaHT6x?LFffYa;7sX8V#
z+9JxO;vHVS|2pDak~lvfm><IIW}#efHn|clh58XFKeu9TQ%8|-R$9!+S$0!stxS0M
zoPvR*fnEBleQ+H8QHQof8U>&}C<y`(R>)NlIG<pp4^NWTp5>c#k`p)YPUPNd3u!T)
zMz71r_Z4u0Pb@xlm?K#9yk_ASGYh_+EX-@5>m7cO8_$+CL^ngVkRVz}(s?oL_;n%;
zz^^fJf+!<X)s`k_Kf*D7-?h6JD#wBFv}LzzOngH&PY5>TGFJ<ERbvC)&2e3AZAt8P
z%AS9v&sQp<<t#2~V+dk=*<!lWe3-PbeXsz;8;DJIw8MUrVUd+lL=Ynft|v&c6{|eT
ztkTpyaq?p>?k~2Ww;1dSq9jXD72V%3G`D6&F>hDuJ87V+6fyPz4P#`|TJoD<x)$^B
z-A1XsFvbh6w^@1}!G0lBd5T;I;p+?Hh+PxiNZYa&6kqy`WiL-Eq^BDi=_a(K-2~ub
z0=G`5k}Uf%)0}06JsL|JaC81pR436(zH+Cwi&GnKlxv+!FL7!dgy54Q8~aVg5^FT|
z9#nFVe|L*X*N2z#l#A%Dv~RF~fo&>xh&{AqIT{l^Nh}f@0B7O5PVF>DyKJX^G0|vY
zS^kJ`2tf&qLnv6mgKYIZEh508CU9TX{9VusW{5AJhtM@e!w8Tv6@Fm1pW}H>q&EJt
zMjd+8CkyK1m8xVPIKyv(wx<y9nmoD2E$~@iUhC^?{e055-KzHSo(YQ`(_Bnuk9<I{
z58hXMF~t1CSs{B>DV;|*<f>ahUAU*&cTTiKF2X3P==E)Dn$E8P;^$bT@!EUt*6*SR
z23Lm5IK&aVn>JH};YD_Bb;usv2Zj(53stuI_4dd2-y}5Wyv-&Hsb@Ory5<=j^&3Zw
zgq-4?Ta76b*Zd`Xa?3OdjO<VD|8EkFx0q-UsiXrS<iI2p!1P%lLm*z93;3zo);n$;
zix%QlOF>gPEAoUa3{sBoH&;O7Aoy1-<3)#<G6`(cl^1JrhXL3sJ{!}LE6_t()wA!z
z$cgCX#HpxU9gMd_3(N56V2L^pLi1AjWS+;-$MD7%Q7~EL;qF$FJDG4`*>B1hq6~as
zhFV57Z?(9ZGOo<*3^hVk|H(9iUT1G(j$C1J45PryjdG6anlZ2A$V3s=z<o#8JB+p>
zwATS6wK#WeZz_;aGUBO9LS>fi#4(*JJNqaIP?sk0@`*+=P!`bWBzK(gm&kj}Gg4z!
z%|6v*j$EY+Rwcp5nKac2AqBQB5emJ~@CU@wS0z&f)O&h^o+Y()3e7)&=twxwxIUFk
z9#xlo_V`pyRNcg<nJ}1ABGfWpnkg{!d3x5-iqMw*d2U@>50zEHk~YypR9F^w!fc^3
zuqL3;SkH@08&Tb`qwz65N<7p*Cn&|-No8=bP_fYj6{azoEE<IDN`iGd{Of}Edj)*A
zCVg*7(i1XhjNdNi6}w)AqL!oH6tkSdN{w_BcGKe2in{KwZ{(y=XETYMl|Zb8l%_0^
zeO(DF>-gBvy9R}Jq&9<u48YVq&a!#Mj<%%6o)yKLE-G8MW4v$LN3i&>Fd<S0ZpCvH
zj|s8F#z&&+Dq8s5_7EkxXgWaJss7jrVSB^^@G=pc4T6WWD*8`%RV-Ur|6OJvMXQW$
z?yQRmRG~04!M?(zn5p}=5C(W<$oN^L_V}<xV%v_sZQTokr#|Y+qjv2`Ev8hyc`ZuU
zG+2>jYjg@ByEL{G2Su)+r6|;<623{-xj6|I)1Agga0MN|+Ja5}-5?{ZNfpUcYFw*W
z%6ro0!(>Y=gUORoac06`Z07q>g5kZuuI2Tvz8<{OD@yH(!;~&zG2ly0jhxk>G3<k%
zL596&M7lImUsod{ZMSf?R^HFh6{|f;h1C{+7+KaMjMwv2u@Eq)4*>k&sKTlR17Kz+
z8I1-|k5vx8o^nL5VTm9e>(?uIA>aO5Y%CX2se(A$cJ3V4TERpD2h*#d#>KWCU0y%B
zT73NAFJ~A3<^Id<`}hCaHnhOxL6<oMYF<JS`$`#v{{>jFm`W$rifUy>znp~Wazm^4
zkk;U%hyWekvyPS5TSu^kB?&!>p})L3pY`%$O&(`Ad!MY&t?3)5U#fzY&Ei&^PB0es
z!AJ*5y<|p&`&@lB{=>2sUuf7e77rX%?+F(PnrE!UQ|3tCEz9zrBviI{(BY~4(beqA
z-px45lAWd3Jy`(oP_5K;+gd=T-db)^!_0cw<n51b9BmL8;q>clG`{16BNK42GIv3c
zT|m#emGF@NXqEXN6;5%qzx(vX{(Ddb+wHO)W^_?lP%d)DNEm;oyL&Fn$xlz6q)Hs{
zH`$H5jp+yNx>0rY_pbZB>uoq~A0@7uXSfF}7;JfYKI_|23K3&rouYo)V)Q}D1dfv3
z>b);nOhZ(1n<v{z+8ZZ(`zO%y2#%rJUWI2mj`-H;oWrCg;es&6wPDpn2mT>A!o!cz
zvgQ#ZbIvbG1<c9`K{KaRhbSbQSJ_Mc05PO;@|pVV_>sHbEzrTgkMVA(v0=FJ(=Fyi
zo9x<4ZJ+n5*(yO?HvvvzCEU;_q6=&Bc$gWT9EGrgjBw(NQC>_mp#bY<-Bl+>jb)Pm
zZQ*exwDPR1UK&ZGQK?kP98sKcEt&*WRnb=|PZ7342B5eWtQ7CK_Ifd}Qx_mr8N}4B
zPI62%OjmQu^+6(QuL8A<L+{8F@qO1Bqx??i8Iow{GdXH7I1}=;Tmc?7p8=p;f`=6%
zDYJ23Ad#Zbg4>*?)lHdIX46adfk4AMu4cV;D{NzNdsY_bd8*3oP5lTkh+oTrM5&#U
zH5}DvDSfe+Y={ej<g-)PACuOD08h@_eLL|gWt*Xq^jrw8S&O$WO6bb@QM4V&1)iz@
zPLqr|>$dHxw>-sFPafXqLGO^pXQrd_?4=)Q+m#f~Q;z}mhi^`nPwgjtd(L>7KCXfO
zU$3jE(6xdAsU0HM;u8JCxzI9`#um>`M>5?yNjUpXJsBzQTCobSloi24A_q_;rt2cg
z`Czl90^HZ0`Gee%p$P+Uuh^hVRF=d6uFWO9{a|Zb+#)RwBP|sLkrd&U_ekxm0dU3i
zD{F(~vVym?C~<;8wVACIMTZa#hF=$w5~quRc0W(z%{1l}aX$jsYA-}=;$hrj!sF%T
zEW0#Ff#CH@Ma?&nGe}^)<Qp%QjVZQ83-8njcYwsZ+<Nc~(y&3oC#`M%ja3m1t@UMs
zpQ4oF(>+0NPF_#)`D$Cb;yZWY%0)ann5EMfz)s{3nii73EedzS-8{B6%%^*KCdvTh
z3<b?t;=C$vN_?>}EKA0wMV|GNve~%wY5n#4+xuij!Je%UM;CGVE9L*oZTNHU8fZZ$
zk%UZR>4)!R>Fr>qK{Bgae&@XCiBm#b-E1cHpYl?brH5un+(DIZpj8BRD*-KTkuh?q
zj=q>FdT}(T5L*Kv3Mr;Q9t)3^8o<Q*0)2~d4yen@e7jrXEoO_eY|?#rf1FQHI2`($
ziTksxYlYy<WE%U=#GP08&PRwf6$IdrDb2Q0b-GJ|U~G+)=)Gdynez;>V=8mGU4a;;
z*fD8*@hEkp7>cT#MPxopXdQw&=TQVJs-{-3qjwhYBp94pG_a066eZtXM>ZcqDa7kM
z&p5%7s9JJcBhdehS#;T4EXa)K)Fe>Z!Hh7Qo#ngtTEHMuDe4Ldq07wgq=f>~bMeie
zg(8PuOm3^oVuZqRmBP(oYy1{yl_J@OXzREOzFZEaE1%02_O<jjcBEaqRh?V0dS3y~
z9rCF9#|kT)$omK(x7%IuM$bw!kG%E<?s$P(K{uf!C@z}%Yn_S`&$52Dj{{YhRSp<L
zy7VCE(u^UJdU3P25fVK)_*d5GPpb`eMAKTDO7jFkVeX&J04QfovEVy!Su1KC`XBc7
zr@s3MRo#<~+It(4fBkAg%t?lw<0c84<x}0oNd+=o^|WS54OK7eSOP`p>2l#nM}m}p
z*AI>M!z(qz8}21V4Y&A&xuUYgw_Y5jz|6JE!=$zMT4e9BJ7OOBj*_=e*;8Y)2pFWw
z{r&hZ4@zL8u`Bsg=wNZjI~QYUL%;^y{6wQ?A~h`?MM(4Tzn+_*o?6JQ*P$>ay=W!p
zg!**+OX5N4RbhsuQs6qLsUdiolMnKF(8JJpW%b;AtE)*F$*Ta6<Yey|FS=`^B^z?W
zOm$q3ll#4olfBnVZ*DKY`C!$1kCxxtcJGyRzO2%J02mNAFxD#56LuMNtRSgw*Qv*H
z#49uV#C^T?o3;!m3Z<(D#Z<eXJsV2ogh??vQW==<9#hvLJg#@xNj{68K3X2mZZZk5
z##PBYiHVt^8c3~8KC>^}o#|yfaY<el?y0+vKI<hf<5q<@?B7u`L$z;4mFUgIe`|Vw
z*C#cQ@(F7|T~I&AJ>i71OSdO~1IVuvi6@r}cWz7GgGlk<D=f6cs3TuUPvc|VF&leG
zyQS%o6Xp{{VG-3_Z0v4nf&m<+j_OWMste#odtWfUPj|mLPWJbX?`TO(ugmV``LxS;
z@$MumCcuw2d<a#{t7M}_ookcIBnLFuLIky;a$HVRE1;>W39CayhFJva_G<C%5(@98
zvV|k>M(s6wGW0FLp7sfq#A_ZEZc+yGmA$L^cy!OSnZECJ>Fu)Z;Zd)X75qkZGL3<b
zgt$iIN$kcB^0)EupeUBa<#-Qf7O_=}*HH>qT`$5%i24DNi7ALfsn4fYtIJVwmX0dt
zO_VOgF)WQMTmz7c;klRF$w&?G)m1Gr+z}AaOP#{JK;iCnya#q4x=n_Jo+(rSOj*?N
z`l=Wiv3II)D-(E8Mzz+Y8d|J)M}u9zVgi~bP}&U75G-o1K1+?nMczq9<+LM~Sp<jO
zU{pvi2q_|p79iVSovB>$UN(GBsh^1%f;S>reWgWp<+Hjl@+3pRhp-_<C}Fqir-2A_
zt9RtxuAwtWN$Y(g@Zhc+oeA1cq`EE#(|U+I)Cq=rp$_zpw*r*O|M&mJ+gOgkZ{5GE
z{G8l$#dYCsA~wu&**EEU)Ud!QR6BAqD7V=MQ?-U?9hJO0ZZC(!8_gYo%X4F1iRmq+
z-6XLUv4}-YsHHT<`ZZ!a+|jz=j*}wrtHkWw2-Zx|gbMpc1v6_TQIk*jJ5fI2n!W$%
zvlndIUC1KD(2^wmtQxT_+wFsWfEM3l*(p1H=;);?QAh~27rV(fua5q>f7E|=^y>BD
zW9ipFd%1gZ@aO&hi&szgAJ1ot%okk0m%I?XHKn!BR?*tSpMcgrTTg4XHNSnaA7Zf|
zuA_{HKaMhD!l+OK?SFR~-y@9gQANy(C2f<j%O6e45AJV2!iXPm#45S3pkS@3@IUdq
zRaW(G<g0`J|IZWooVH{=kUlMP;y!xti5^eX{N7Rj-*v~XJS5`?&Rr~7;ii*>>ESyN
z9bGpoWBSz4>q8QJc5}Egdw0E_9>otHhLiAK%tY4VPTZt#^6md37Y-c>@5N%O>*zZ9
z;L(2a;L#(F_7jd)TD^U^cj7J&cp7zEZE1hxsawyhe>OhRaw6;o-31bqGi?8JvyM1j
zsH<er{-ATZ{h{Y{`#;a=nsqdZ=*J#Y!Y})jx9$Htvj3!4yWH5vrcP03hDsGgOx3M|
z5^Xv(%}`YFX(V>4*J_<>S&?+V$yE*ee$5ufHAC2&coM|L9)dY)^%(GCr{09GfaVQ@
zXDBc<%r9=t*DxTOf7!$FABgI!R>x46*N5I|C7>AKY$>Kz97G&|Kzs}ksILwzbr21*
z@8+{~fASVRW+QkfzLxq?OZY6c8Cj9N%CL6=1B*MBqQKN;lcu!OY}AO=YRGalfqL|#
zh)|lI1lhBD2+C>Jzc_xrzkk^O)9d}$E56vif4?brfp=8LOUc?kgX(w(jwB_2OPvub
zY{B9)774OUs<vI4bkS@yXSA8A6J?Dh)-O@gn%_({xZnXS;bH4`lKpV-5)Y*4GfS&G
zCz~;dR@61HTZ!f>r|I=-%emo0&S$wo2irJn=I!4~E}P++NuSZ4VCt+uJT&q(q$O5=
zPo{<B{^Tf0=Kkp@x0nnWB}3ma*v|d7FNP2@kj%GS*-)SqT*x4+86HtEYedH%7{(e|
zv-AgV=ZYG?_x!=9+Yy3pY%Nt#6GgWX>a>s(%Z9?P-tL?R2vr*6>8!*8-R?*4R1$4{
z>*{9|W)RA{MLv>3>JuAaaz4RiE@$ZkK~TsLOcawF(HRf!S6M2qILzk3)`R==E3>IG
zP={!=5>6nT+d`gFuVY=M2;Bh79eE=3)v!<_&?0_z!%3jHhqgELUI~r~Ib;=oq8@4~
z=BPnCV!78^-jzDp;@E|=<VEVfp1V8gJgWhNdw>H=m94$L7Mf=q-q|X%(Fi78Wd4q_
z-{-@}_RDvpzkM>vhu4#bqoU1RRjpYifY?B?FA!!_21pf)xHc#4G(CUA(zsEcjd%Ad
zAJOttmL5q5cm7s0!YZLP$a#m`dpT%jrxF(t_9w{U@LT)AL<wD%QR6cneAxk0==HMz
z2rt<<lbaZkU&DedL}yh{j-(=cyn?Ekz0p`xC5M6hhqGd3<s1v@iI<}6h)KT_FG(fj
z)#4>YuJL7er0U`=jsPPjvHsT}J4A$#N18ykm|djjdc6s1U^tZJoN@S$-fKblQMkR9
zc|b6e`R-6p771;R@C6rM-eApi0!97m)JEI0aWdRPe%(-9!re;F=u~%LS3yYQlV#G6
z6at0&>nrcF_^BgaR6c9&InLTdW^M8x|Mu^-OhB%zL_x_I)~%joy;?eymY6^m6a&0h
zY~efhw<F;$wq_DA%jjBv+A6`<yDWz~kuIem<3!4w%rz*VO(<}Jyeo~Wa2sXwYEZsD
zXBN|qMaxGp|5BICjv!w~@mMQ`Q5~L?;2Eb{58cVn*?0akMgM1+2&HJ$B-HpuUI!5j
zNA>VkPn|&=>>eKUkdcYYY|b(R>3D3RvT_xjOM0`LmpZ6yhAL)MC&t)Q!7M14^OsBH
zUMh2PD?%_s6jgxvk%clGfygN*7{8(}bgj5TJ83!b=E?$8QP3h<5w_Znvu)|m)Uhe^
z@CgK~NJ!qfoy_E&HV?95#gc$LSISo$Ic=$rH~n#wV}G|cz!ttt?)I)qTF3FGTaX@-
zETo!Gs^VA81NxUxAbF;xL-1x%_sRP1WoDn7cX*~(71NA0JOmXRpa4pslBQW-<g>9C
zmQ>al=fm##4e{u#kb~6SQ2<hDT%`~@)DcEkh{OV0ifY#jpwf*5>BOg@L-6Mi1M4I<
zDa1rzzLGMi>yk{$eY(B%VB1b>I+-jO6Hr#hk_9;VQnFv1^1C=+w~!rwXiit%$i5=W
zs)ucJ343M6UpGV`)5KB~HIn@Z+pF=G=^Z~z1a70axFCKCO8@0!rWtN-E_Lo0n%)Yi
zlXB5n&f+--y^ehSxF{4=K$+(n<*Jppmxfd6fn}3z2*d0wpZg?w1mdG6Fii`nS;Y#L
z!%j$pXAM|wT+=jaD{z*&!zL(!lH;Mc-0|9X4IzPh%pf9CQH|K5Y$uI_O)DR3wg-|e
z<Tk0M9NCeiLLe~_7Ol<02QVukvZ!Q=EF?GQ!qMebFL_z$QBo5MAypjJVnro{<T@Th
zI0P0F=G1UoKwE?pWE)rK>J$NDs-#O<184{Dht*L2E)0E+qQ}^^8BzD&`%r*Tg}@}R
zh(n90)^A)@6RD5B!ai*YDyRudstiNHBE_XGoZ36q^d@3pn_xMj38tBY0bm1Iznr9J
z$abb8cfG9Xw33D9qi~G~x@xIrbq1sU2nA|m8DHbv+Id-wP$imjOji>3bkZ$5CY=>5
zp|gT{%!^B>n_Achqu2~|#6v<jTAyBNh_Y1tsj%a4rC7mV$WK06--5CtVqdz%R0g`r
zfj>aRFzGX4@kK0q?e$7NOj4YmFQ$%uZY+C8Llt|dpVAFr0@|pFPgc)Si-Kv~TUv%}
zx)__KC6QB0c}zL$e%8?e$>>B!(MotBRng;;JNolKcI`)LNx02Wt|JSyGJp`cbVocH
z9R<c|9%qIO*o@+ze!Mc_$L9pOq1N0&ZfQ!i9Bn+0RM-*;6Y0px0Fr}6B%;K1va}Y6
z<nnNvr)D8ro8H-BPMjnAE>jpm#3iL%IfQm_nHf|8ACTBY<0uj4ko5#Em>Ihtc4{Aj
zJ4Y17_Ia`SpJ0-8r1{t4Oylx|C^h{uO0(0bTsP>l*6JA`|A)o(#Ea>tvh_m1ek~wy
z%THdeI2@&>^H{83pxE-xvs_HBQkGGxBoQ-SzHkHrY#kX<AZo0_Na0;T4VH}WChmb<
zS0A!UB4Q=0xwdmHC#o$3O$_c@a$lpE<&*j081k(+FR_{vn*3JFAO1GV3N15cdauZe
zjmmVo?PNLNfXzwRF}(+v5o$GybrpGss036d+mDhfR0P&y6Ow_Clz2v=>bZIz>4`yf
zbdBHW;8;#h^7Jdlt*UMiU%ryeB(=sgd0C-+n60Ww50{h0REULu0A+?y<2h7kWR68$
zX@z#QP{mTMSN4@U3x4x=LW((B!~`Q8)fj@bBD{!8P-_bU$u#?J3fw!-pQF5!H~w*{
zhNtSYmamaWt;mMacK@4A<wj)|H7?}*BL3RV;l>B)SMXcO8kl1niMO~a)rPUw_GLSL
z@RU$#s$xg^<+$IO-07*(D-82_HlEJad=|_Je*Vm;%y_=ei%|hr;7vwgHJ!o(&37i`
zC_fNxKa}KOSwv;B$$_Zxl6hDyvt5}ZEKD-D)7pE2gN0^Xx8)TRnBG|_{9erzL2k)L
zy1o&CmU?$7@o<pT(@5_d6{)H*q*Og86-$u#9BNPu{;;7^qI|{1)!wqg_|bCr!Eoz(
z2CPE;9YoeaVE7u7QCk$T=T4f<hE|1xY*9z3?FbAmbuN8LV#yS>Orzs#pmxIm+UJ*2
z`rGG3#hP!mb?xr3rSW%(7W)?9l=z!c(HWuF<biqwZ^DcvyN3rl`9|X~vZqzb(Bmbt
z3UL#ci*cq(tD2$lg4WOuGpw5;+{YK$oS+$GL0SsDvf#3-smW@z*zlo1!f`HoHc=;Y
z5&$>AY^6d|G5K70HL#z@D4p!)0D-)l9A$5dH<A^OR-`;~c5wj%Z1k$|lgUk`rh)kU
zb3%$uORGEquam7#%CnXZMVV+l+dm1_QSp-+;%TGANAy$@;~wUsg|E4~#z==mm)lKr
zc%!YyJjQLvh9M4s22HW)D!`Osqf|u8<5zphwx;o{b$|qChaFLs&+0~x1Y+0-m2x9Y
z(zuJDE7tDNp2pmVlEcQ$4D<HG%tuIlKRscs^>bR!!^*M(d#|cmV@+keQT+v}X}=l^
zk{d4j?IG#?GiH2-Oc<7&Lq?{!FDvC9a=V(}W*SSPrE)9f)x{$zx~7Qs??8MB0_V>J
z@N!Z~ZF0i!w8+J%GJqamR@Qg0^R8On)yQ2fd?8*(2-?wfa?e%sYRbCzZP-{sB0jX^
ziyH%LkEM(y3m%>Hy;$=SAoR0Lp&ZTDra@>EMQL4}o8Q$j*L-YgeJ#lM%lc)~4Ly9g
zuG#ixX6lqOzBHe8FC{iEt{>7thOl86+%e(#UTCWu1%xSTkRmqFF-D~VoI!DfPoq(+
z+V~&YeV`WZxNea|aIYf2PT-95cw@15P70GuMph=*${T+;e)UqUtHOeQrVUJ5&8NmV
z#VVl{c&7L%h!5|T7{;TCd5Ca0LRgaL6?zgxR~ZRNgpfA`eRq$O3*m4CftN4pYPor7
zRZn$#h=N6saY(XMm+b_Ewe}d+PKOrX6|oU5L7&<jA`QD9qtcLBY#|%nU`RnuVe<Ou
zx%*8nI+U!{)7=WcC^QfvtkeRguUL+`{%Y-ZlDB(@uiZ%z9*FN~htRLYr6+B60wR#_
z!`(#gC&*THbAWpot8KxrMT6&Uixv#~OAAI_$LSp-ZU>eQwiH_gwe58@)pF>gr*ydg
z38D3$5L*8Uq4m!Tp%o`&e+W8Oa{6)!Bk?Byb<`lV7>{ut!MkhuvntY~%qnJp@nw#~
za#}Nfx$7;8&T*WjZg<Pen%E&&K~gHPf(hx7BF8D5+H~9eCvMn(;)eYvZrFd~hW)I#
zVaa}VSsB3^vI9!Rs-jU(*jrGhqu2+}Zk7~PFbnt)CF-j-0joV{tbj^1Baf2nbT(1p
zNdhaAa|C!(DM)E`xuzymOtLP*VlbMih9RL|5gqaKVl4}cu$1X6m+g1g1;Pv2Q&i?A
zI&6%nVm*o>qSYrF=P{%4EcJV@yG^*@xnNJ3Dq?Zw>bnqvWA|mCv#4U^QO0oL;hXoW
z76~nL-se|QNU^ka{Pd4vt6%;AS3s!0J+2v9E?}a@Rux55K1%BdvAC3&C98#pM&9n*
zlGQF*=LRx?R3Ej!P-jT~?F-w9w2iYool=2zy>M(=dCrXvl@Cg@C~QD;EX0-?DxRtc
zGlJ1xW`?dDkDK@sHGaTn>G>N_9nJ?`b1V*&oWe@cr9})w@wLp|uYLTA>gg3PBd+r-
z6-N*1y{XTm7K1;M$n#SvH}xDY!-}=xvp#DW_32EkrAdf!jVk_Vqy=qvhr^o6WeCN(
zQj#C_*RrwU87wKI>nLMmC)t3~ytDkM`>(x!{a5$@d-Kb`Z%E$K&d$y}pC)Dq@YQsT
zmOwmeC9Gr}ygYm%XALiqSDt0z2=NRL(2ZoE_1KYA+KlsQm{bvGHejpg(%!KX+2&aU
z-)<ML#>wgnBwp9WtiDD*L<V#Evs?b#)^&gi3_Woj_5NB8`~u4=?M}R(A?6g`tgMpg
zV0p<05x9M?jE8icogu*>`8a94bb5p9RVzE&JaeImWKeRVU0P*k1FZnFb|wfUTQw87
zR^|*dlPyRdC*L<d(oyWdpN?PK$>T5a`$yWsxIhVt-fV#yDAPrG)xyJ%;G*71w*G6c
zC4+1KdaHxqoe;E>oZ?>}@x6~el2JRFtjuDgBTr54OZ4rJGN<_LmF@>5<LOHuT@~}A
z3?ItR^6L)`|G(e5|M{W)dBgo@mJxwoM*n%kJ^#V|uCowp8*)^`GJI~i++yHXzg0!0
z_OyVwYt1L^(b9v(P>;crV(2uv??oHlN&fQc^-+KS#qPm#0km||{ZM~B+&w=2=GD>D
z#Eq@p_^5}jS}niuTU*K3%=|+|H{9Z=^2pxYZ1Da$0<v4JY&LUh?($a}QIDr(gUiAR
z9%T}b7Y0T`s*cF}aVVsh?ouE}(5y3E8^?4t`dAm{yGG+;A(d>C7dP&?n+z9*Tk(ba
z;ZWWWffbLxXUE9tJwDvs+y4Rl_%NMc>4V+FLpQ3EuYX9kzWluL!-^^RPs23qqjyfj
z?%?BxEQOQ3*A-ko?CVF$wwLPxRqF2WW!?{mH}fkPXpWrJ(Mg^ajfR$@EZ?{6q&7;U
zL8<j4H6}}o{NyV%?oaypm<ON|N5cRlX#J7#lcnn&mpZo+6msQLI=4!=qvHGxjk8v~
z%c>GuI~Qh72$hH0zE~}Fc~)4ME*JwkDQ3p;!2YiDP_>H&7FmiO0P!+rZELq@`Q;_W
zNEC5{FyaFsIb;p3$lqk6{HhR1U9HB@GMqAyE+zdjjD}$~AvW0JN_6F~Al!jDxXI}&
zZ7B^PgA@JfMzj{V&FP?lhzlMqfNk?^!k9zJH!F+LLIj3&r2yN4Ln)byOr(l;+ubKK
z9i2q0P=IInAp~dlCqryale%&W^9*vnTMv&(HxZdvY$hi+)9hH+@H$gHn<+B}9SIA^
zbWEZs7Z+~pQS{LYOk1f&yrGG7Vhod-73oafCo~RB3U70QX7C*&ccZ;Nm7`-6eJSRm
zzCz({-S4YN+Gjo(f8N^ePx(>&TQDza39Por_k!yuFni_PT#yv=uk!3|Walfd^NTr4
z*5|looLnl2i4tP&NWn3IbaAeFg8>|pW+;==$$I?o9RlUM9G2?4MGYfUx_;T(Waepm
zvUtBudC-S%L>}C}F~%mD2KlUbuU;PZFN=4zE|$Xyl=HI%FHV|^czh7QmX~iLQ$a+F
z?(q4gepO}rQU1SrP2BcL>t#sdJInY%0O^d-9BTJSi^;{u58E9TI>mOle7!_wYy;><
zCe`u7Eh(}WuAi-Eg?{rJwg0YnU2Na)!=`{Mk1(uq@iD=wdFQ5^0<ir|j)J^dFGiP%
zvJr9KG=7C1x+=HkKIC&B!5|yQctiwUMakD?md+RmEnB{Dhj1?W+OUP$rA3s6$B*^y
z8ffAogUB9GE%kkMykJfbRv0A>Dbt&2-jSTgA^h>>B%PK{eq|AOf4zmTI$(upocS?M
zzQ(^D<8h)%iv~INLuS&PIyz5hO?UXV!;qX}>uz;ed>1+-d(T3PnFYa0^@+$&VJI}4
z+pw)F^%#YOFVfOmo>#q$M9Eajyt!p`qqPs+ZB|Cgn8yJ|L;Mh<3LmS9W#ZMHRD&@y
zg0G%s#3Jd?IWBQt=`2jDa`6ZjvqW8m3#Eq)zs*g6!EA2sh|leI=GxldZ^yXqCMBY4
zN5UgTESO!U6GjzEw2H*ilD#X9D=qmd$^wDF^{QOlX>@NhF2<d0$7+VlzD7^2)gI`m
zi^bY>tmWL#^YQ!1w(d)b(&U$}sofXP-Dy7FJ9yz5@`XX=cZMywCsv?d&HZs`m^#5E
zx=mc_TJzbo=-I7Tp`caYzG1zpO+mQDd|m9s`}(1<5?B`DVwkt^DxJl_Q$`*6x(bcP
z?%r|odPZx;;0xdKVmA8HNpv}vcq=_G2MsQrny-r4+V@@mgT`)Dpxf7UmKwDDkTIPD
zu>9p<5mdEbnjx5YTVZRmWYtGeAqMXDi)^0K8T0z+dD1EbkJzn3+nkbSI~vzt{8#t2
zz1%aCQylru>=Iw`Tvm1Av-Ah(zQ6nW>B0WXz5PM#!1EwAddNcEIw;NR^}0?c^SCG_
z<+vp><UO`r<BoXqTF{OT;b6+Tm%Ms2Pf-rQppEc%Tz%7QGk#TD8u&&we174MArIkq
zH-C>R#7n$!dk4G87UPWP!u^1~>%nl-{$FFmbsBMdHkIvoF2u&oA;}aMbND@GY0{#Q
z5e6<Yhd7Zs0N!^S+l<&lbWlpU0X51vWppoW#}JqiveSf<`VtrN?54?KO5;%z-?jvP
zK8h8KP2swxw|pp_#~<l8uPk~XdPMnAV!b^kMD%z=Bh7Wv$AVacSgUR^X__!O%G}zy
zv$0U{GONi>$pHJ>ghzPJY!n-~RCksUgFki4ve0pY-ByIu)QZ3w^#8s;vhK&Iz>Eh#
zaQx75Gd{hIAKo?|FCo`feEp04ZGH7#9h41Ydg)kz8}Ruk%@vGIF0_i-4<m;7VjgQN
zL_xyrtiflMbd`Jzy@I_ArTDdYy7IBQrrlob&Q*pl-37acXO3VESj}Ag99A7u%n77>
z@wTq&hk7*jE}uhMJl4$$JV}gU1V}?tz{|iC*@)aNkeK%4a58&cWC~=d$Q<zE02fow
zUqo_#<CU&XBsyEOw2KQ3Fa=zrH9Hpyb{mV0IZt$^mRC(wGlllbC$@(^=?X^8ud-pL
zZ&z5KkN;q^dp<Opd3fi#Cox6(Vd)h66szn<o!ub>Y!U6zNgbkZ6@%`50K31Cpl^f-
z!Aw<H>6Hr44pGLCBtrtZU!I7eYa%}epZnZ0V*W+WGVTP?u~4TeYLTgJbC3Jtgk>@)
zNy(Di9(A4u%A?G=d{(%>#;RB8i^ExZ?Fg0clMA~3Z)GCf1q{H`m&&!j#8vKO2K9YY
zdK?7VE`*HRp}+PHG282jxa12987@O~F1)p~NhV+!95sp+Ly=Ugu}I)vAFH?B6LCiG
zXe`LLE!@mq3~swBYOH$Y!Otd*oL?0vVUs2^x75Wr(ZcR9eMs$N8H=0R8`?KDrba^!
zJZ<_xo2)I>&)Jb9&}P-wle~a)xcg=D^~uR$@^uDhRkOEl@^_YA_EZR&RPKAvS=LK1
zxXCq+KW2qwGo-Uxm*2MTjqMj@tvmt<*Z=V{$03AesGM#Lcau1tg^FdX1P?B!o>8}+
zT_>Zh5SI3Y66D&nbdsis?m8MKJou>bi8tn-h>_iKIZSUV8K#mBbxz)Aht6|et##+m
z{&bdI<ln_7w)X+-e(x?f%_`RVQ(XkNoir2WqT^H(@zu0Vp`m`%5Pc8o;EF_fm;!nL
z_T0o|qTH-iqd*Ics<If^%F<$aw)V7geNY{_)fIx{ZLk*(y51vk<Fa$Ac}^ILSX45{
zunNYM!+fMKr9>zG-b~IzHh~~=VgCfF7S*LCnPaYi3=vf`#4{aPzP-SA;47fW%yoTL
zc|8xL&(Jpn*f6)8>HF?-H6>`x!CgL)uWOy!vGkGNcAS&5bOxrOQ>+g*Q7}gdEhH(x
zvVAi-U#ghB_P9p_?#HLOswCy5VG>88Nj#@xc(ke#1A^l)lb&w3M35BM9N^Wgfaz{|
zN^U%};=6n-d79$-d~{#&NX-F$5NKJ4sBoYxX{Bq!T(2u4e(F(D4Kx-RUxvTyH%nJ3
zqH@8I%wRl>mP!*iR@>GXdgm|7!`+j;uYHCi8Qeh9C3cdFbW~;og(bzhL=lJ{-oVJf
z7TL=uESi?YAacXZiQ39NoYM2u^47TI%*@^sp;I%e(Qj-wB%<8})!OD)#Sq!KtRBUh
zSVOruo%Vi~q2^YXLDVCf(Mn&WRA4$l$Ou_uI<J!%njF7nwlv#J+vWC1PG9^bLnW_r
zt!$Ogv#|g~;5S(*<aMNH`N*xg?nCM`E~whbq%j%pK+CT;;#daah63Q92cQHdav|AF
zyEPUVr#aTJ8QgvhkPsX+YWqsIbcry0VmEX27#k~sg_Rb$7X>#6De43{4+(;r0&l6}
z@lxs!;5N$?X^f(p78;$(Y9OE6vdzuBI+D#zhMtuIOKaX}?HltVeeEtK#Y;dlP4sI9
z*P0X>tM9YDDSKx_5Xv!FevM~T$t3PhNZgbv^U!$<qbD?<4O-7QJCspH)n>bL&a`9B
zhE`BCfLweXdX+uYwh=rogUe}BlY8_r^$9>&RN^|2#g$1~pTheM&DiR1x(KL++4#k1
z7$JQtf*`&B^lHvDJ;$y-@sc3(WkTIr0;m;cRA;t4bAq8k$uen$`R{RNJ*N>}?_rpZ
z>YS`K_H12U-O9`WK(oAh^+~%w1ARuHZf-iJ6LRt-2c?+C=_FOE)|lB|@{Qo7!u3t)
zYzf#_FTcE6C2I@hmJ?lgV|djoqtX1ep&BxU0<f()7B#Gej!qxTEwhRcF5H4N^U1}`
ziLtZAIXpT|9X0F_VMU@ZlBVU{bp;(lzi=CKgt!dDS_8{TnIlzQ0N}((v0dZ69{!>L
z@cp=WYj;LiL*vO>6p}w~lwnh_kW`MO@J##~r4ih3?&rn}P3=jDAvPzfC2_7s*N7Nr
zc*_)9G$a-SVLdJwhV7Ta&1+oD8Jx`tShkSzQ$K$RX&+`|5fX8)!gNWBkGf#2rp7xT
z$ynSGJPfDvLqV7BRf(s|*Sl^ZeU6q&Erv=Tkh_?RAyk8NyZ&6&7&ddb)eakR%isy+
zHid?bk4%ee$Hf*S?^UcEhJXxHg-l7jtt9m44zl48-6Vf4a^mCGj&4Ltu2l}EIzqJ4
zB3`SLtD+=U?tj|{`-T?n*jrs0j)l#?kaN7`sq%MY^&45PkQ&JKs+dMgHhV%`29jSf
z%P;eZYX~suc?l_Qk(XD#u!51Np0aQu&RKF;e#MgHbpe7~gH6>e;wbP%m5<Xf@Vdjc
zR(9Y~-@m%TZQEAQF}0oKg}*SGRa9*;rXN#w)cAqgpiPKR*VBr{n#dk)J7E{ad_`yD
za#w-)jMLZ_YX{23k!ba2gvw$;m1k$)$u87SQMn{@dcL<zqxm`=p(CU%Nqd!9UZzz(
zO}Ku)WA!7clB`{fBzw2EFpB~oxFg3XB*iKRt@C9i1d5p=G;~A-Trt3KAut~gd|pCV
z1?LCXr*M!k){X>XU^NjC&yw06*g6s{R9xedX{d)-q{Lk`7H~1e5+x9l7P?uKOJ}ko
z;9)3|Fq2M(6=B5gOJ&_=NI+7bh*GOh!e<&DOunseuHxB&HTyUb7A-5FcfDVf2)^s<
zch<}+*ij`U<oH#D52M+JWupGdWB4myiGl9)Sy8y(zHQyR<UhLf3OKFk)LS)UdnO*h
z3hRD@o{T>Q4+{;jz>5C#Jk_6^c7&h)uozDnW$S+ZtNj}f{+Qjkf2VKU?{D;<_}NUt
z_}#S9@L-gu_PhHhn{nhZ9HSBb13&#2rx*@VNc`U4<zM&_c^)>7iTxW74pFpte(==&
zKIK32p#*t~1Ho6y5dvIZ+tcHbW8WwPfd8&onC^oWOCvu%$>$Oj=YBu4fAekbNpgIZ
zW%DxZQOUof7oN@>-wMx%__KS-|L`q%1o4=_gW<Eibd(_@J$!ktzjQC%zoIwYfg48y
zfS_1*FZrLiJzZF941c<oY>D+PFOq~eJ#*+@`hRj^(lR@D0x#A@|B0UkuI*sLJaPO}
zDE3bXH+@nRZ!l8Eo+87T1N?JdjzKbS@n8IKJSna(Mou!sj@iF8f!EOQd7j*J2}JAi
zv`N-%avGO6xh28AkN5g`uTqvrPHNRXDuCVI=zN<0$gn9*Ya=W8)v0g@_Xom0gnNVt
zgKwCMT8zhnjw=zaPThqtolMfV`K5Z}(=*<-=0Ox=n%a+}k~BWOfUZX<`-*UDwrp`d
ziggq+_XOYJG|Qc?va8aIB;GVOH`RlqKg${dA7FFS-3W+VtwjV_)Jf%oy-`l287Fc*
zqt({9tpP>{z}22mC#&|P)4berE%NG4Eosww(0n(a<ev{263a0EVnUz^2^VPU9QHy>
z%}#7XZ^olc4xToR9)|9s?E+<u_B6CehgH=#Dh0vfNHwGo>?Gf0XYsFm>m_TVc{3_M
z3^<KPnU*biee}HCNd~q`Uog$*;N|hj?#sRXFX`Ic;tus85Fo&QOO|cmCoOa4BA5%t
zZKlo8Nx4`{|I0D`9PZcPnv2(@2{#i_?0$S;ArXCes*??OG=xGn+(O_l{P%>2$w^Zv
zsHt(LbL<sUmVst8yEF?waX&cvUd<PY#3{d?2k*I@{_-6(p5w`#J|6^!Cy%Kt;dbx7
zk(MK?aK&ph*An<3{RE`{duJneg>LyT`n$VN`$yR&q&G*)yGYuN-KNjogD3a|Y{<vk
zRQ$XwvlBdDvuK4Fsq|#`c)t&))9s7WF^&QW5PJFq`1nO5e2*R8k{1T5eAqKc?7q%b
zBw44>jH35?ja>orox53_EBp)<(VL2F3L_n7fdrP;u6tVdM<Yl}9HQOE3uut?SKDOK
zl8uC~QtJ&-kWQF?Ltv|aJuALzH{&`3BAs9@8VYM2r^eO_TXHwF+(Tc%RhxE<e%_<C
ze7O8pzW4c(h>=hfYFBJI#J!Soz$@mh<#?GgFUseja#E1d9vLr@y_+OSDu$jWWBpLc
zkWP`NIz1eVI(WM0=JaanIJw(mb$=pk!F_zDAIDCA#6O15YYZCSZF{X4T9g_eLllga
zGJp{OjD?LDQR&`m>IsLRLxOt5M<WOsI805MQ(*Wqq`hL8$?r!BNPhxHwET1cRLt{y
zp0uuR&Sp+H))t6&>}JeYMGejE)k{CF_+>5i^^Omqg=5hwL+SVhJ1XX)bfOV)$BM7e
z&Cjjgqh9h_tPjs$Jv(^W3~VO4D`im4W8Ko20lCu<m~16#XQQ;x1xR%hg}thpQKAx&
zt64g9r>#NUKbY6gGXU#`cZYkJ&vVU^a9to20`6sd=|CT=gyshFb1cN*7v?Zn?)PRc
zqQ3p8n_CpW_q?`$(Up-Ae#qK5E%wK*jnjYMb8V#GjU`J)>}+C2(o``$o$3+Lpq|oL
zlnoUKOQ3jtK8>`k7<M8qVeyu{rXG4i1@pz!$w&0V6z7Yvl-87}7fYv@g{qj`mfl}W
zEl^Ze*wHV&^KSj$d*{6!r_n$MU0=El7ht1NQz{ywV&P3E>+Sp~g7H?P_Z5R>7PS~d
z(Tgf7NAe^s^Yexe3Qt~$nY@!68*tw-;S}9>fMAxe>;P#Z?)cyY_c|T4U<qPULo<wv
z<fUE-l3G8N(G*cps?z<EY5dbN?ud|B(=Sl-m!_rA^D;RtQ<4~2n(Oza$w0>yd((s^
zBeEp+0#Ve%K+UYkl)1%JmK*he2r6n%{c!ycP>X*4r9-!2gfZgG^6uK&v7Cx~!>pwG
zU<Z}xP`SBpDE~2f${Q9&S^+0Txy!#*;d;R<A%oB)YBEg`n7t{cVytjW=NsJI)U*a+
z03x0H-n?lmDvOYaO@g*2&U14!)+g0UAP36#kLa!Ft<6ns=U^#{HY&WkLK4(^^P8J7
ze_}$#`*0|4ryhg`51nk(eJ;xB2Q(hFBtkyUM~RP@Mfc7sv3-}KvEx9d{#1e>eFSNI
zuW8W99ZWQ$rEG342a`rBXN?r1Fc5LQ`)|ZuxWW*ln`+#~FSDjs!weQ}VIVW7w^x^W
z_w~uw`!7!p{@DNe)$s|EpZr>E6<fY!>sGYt(HiU|r&5*9yC#-ivxQmxYFDBp1u?H$
z($u^f?>??0MCJX2r`5H$_OOm(5AyA2mHMwV?aykgRSUDyPj5|y`l$}08~o354n+pQ
zcTo0GS4iZ5rQ=pTURr1VpZr+4MZ4uxfgV;Ls^<s0Fq26>VUZ8d{b>>-%DWE~TzYpq
zPxj_5$4R__w;m>W<)=DI(wg6s1NAg(Cjnsoe6>yX+&5G!7W9i87jc>X#D`_Y)g!Zv
zj)jHI{S%)GS)0{oLU(uRMEr60<-yYzavm1$IN&I3-+lztef`b@5WRN``K#yqR{Ga>
zeyRhY&H43z?yGchfYw_`d0V<e#4S{l`7AVl={`{p>Mwb#XcWOueomOb;1j@XrFcMe
zL;jf$h_1@&6JnEDIwJq&;AHpd{&P7aJRn<dw}S+B`(d%bj(47x_{Cd}i;oGp^}zVI
zeyStm8(bxSh2FdXCf#zI06v9U3aizo@J6iopsw8i{r>?0M$1q6AL{o|>Gh~RRkvW`
zkY^H;xO^11W5wbZI*>koCn6UZpxDqi9tELA7~~sPoRvxntjpH^nQkezS`Sd`_&Tp4
z0?8JxVmAyfSOk0Z{1oYgmAuHUhYz+$1$_wv-KxZq^z|jVb$VCxF_GT?CvXNo_SL*0
ztb-rcQ+gt~eK-Ws?8Qgv_R{h!Y?a!#a*7b`^-f+<ef1V@VS!?eMiet<!x4KrH%p?(
zy7@5tOQ8-0MvJ~IA45d_$>T946+V>Ds~Hq4`AQHWZB(n+iam?Ciuz0^*~kw4x_kDv
zWc;7%Ok3>T;8uO=e*wYKCbF9N{XXc;cybl0TKRnF<;{{9fI*1TP{QhIS_lYlpcTMK
zQI@b)Capnqy>>L0nwlDYsMVjaGbr>hXltA>A_;2|*uCgTi3>n@uj98`E}*@W>>_-9
zI!cxMnj1u+Co~uRwiE1+*gFq!<;`2pZyekg(wJE~M5-akb8N6)hanQ_7cvb8u`ig>
z9Z_!Z8m<p-L*o2&KHmsDM`i&7a(*pXKycZrh6!db#&^0;n>e+cu{8jueV<dtz-PjW
zRuGay0(+Wlkjysf@$K0p^Pqi98otVB!!A%&V|cm~4LSr!qi_VP{XG$vn!mL}Ciam}
zcw;8@S{y2Ls*w{CY96(hwDMlo!{|?ivj<KOHeU(O{=E}`9%~HrhEKP%kU$unwQ?}G
zL_oQsxa|;^DLz6Ez>_erxE9XE-x#Wbywd<zoc9=htRaij^7o47@c6-?(Kuv)A;V<^
z1q0Fc`32AcGzRf6yDy&0z}UWa>2xxV4!`vSoEAYyH|lS02!#Hu(!M#qP*Fls52f^w
zfVW^H2fQ2-yBxp=zZ`%;KN7^uatXjim?hFVOXB88Fak0|=m$aNC1j+nYFHQ@wGN$B
zF?K^84%{iES9p|`EWw2z%eywh;wYuH@h=eR80a%2Joc^4umSs$>7QCdkJ<1}YAyvL
zW-u5amZG6dwJ*hZ6qG6<kFA7s4l`etWhbc?8$yp~g<uH@$wy9f_bF~;xH8?rW^wbK
zWaHk$v(L6KKG|?jN5$l_UunHk^@M~e>0X+Tp^K?C09hvo*BZE7oM?QV$$#a7C#VR@
z_eh-Zyw*i;xzlNy&zNjas;s48rIAKwPl&i`BoxqL$?@Y7v3C74hH6DK4b5_+Amm2U
zzbf2b@Y2G+`t$Uxues=2K>?3+a^+nfqwsVeXctQ_x^3*^#+L4kHkODX(S%4el20=K
zIjP-_fC_S5+pwKv>pE^C0g&8I@*amuKdTapoC#T4!L`@Wcb}kB%|PS95Jsq@z{2$1
z_RM#*PSST;ugm+h(lWwml3w&<;YNKoqI7D&3k?pvFS-;K!J@H%ljm1u#k{eC5*E;q
zfq6j>tB6#1R;2eoQJ#!nK)`Alz2vs@)&{~)J>hxFjUh?W|B4C$WxWmKZGKdaWR+u;
zJ0LaxBp>fMUX6g(_$R&+3;*PP{YtHOnT3K~^zTeJ!bfc>^v|7DBlW-OLFwgV_fz1X
z`TRz{%gYs~>rMkJmF9{W_#J8}g_eYF-1bxQ>;wL2`60!g{;Ux7zW$s=HSD^5p|@qY
zZ0-JxuUdNx7wrjgmVEr{j}}kc9Z-uJylx3jiDZPY-1}j`_&Odeo?@W8a)M!o(a<XI
zj%TU1Qh*x;)Wk}DRZE9>iHg!%wcI_G3+3@mu6WY};)&oMa=kw|^*S`sj_;2Xf|!eZ
zbCzj=3V_asB6m_uiGo>JxLtz|39IMPMB*j%?_nKZ7T21;8G7^re1KAtFAY+FE4~wn
zb@E~))5#ANflhuxpIV;^P_40OviJNTuE43as`xSF3PWgLjZ@R&UQZyrKn=J;j_9QH
zY2FG$&lMLy0*U-6ljdG+md$nr)*lc>EczJ@)pcO?5iw{hD>%!#<D6AY2j3Onopt}?
z-~NvQhfV_8Ne0(d1VCM-F4rvScHOI8i9hc3dhYLemX4h+9{)wUbbk+eKm-^4H{`l;
zDSSWS(yMl)pPTtmRyYoL92VzB)6vhR?5!xBbfR?K|MS(cz%-<TcBr}n6a$3C_keQ5
z)O~>*mWbYNT1wqEswt(yn}gYB!wTR@gwGrS5GdS**Ibwuk`A?=Vw8WcFIKFYooIOk
zpu*6@0_bZ#V^N%-8gZk;a(lftO5-xD0;|mzddbUTq+J`be8T^c!oU*52Ie3z^7ANj
zxko>OaQgaohv7-3)vvtQKsZ@dYodCXo)vGa8hTj6ZGzb@%S#<g+w-oquq^6RLx6oq
zAzQIbxA1?*(8I|`VtI7FIutIPralnnqH+~K@8?57C0_MRq5}t&x&<84M(N%+BM$T*
zX#;wMo*g2=0ddovlqZGTbuxdaMnHe*It^^<nc+a+rDp)8&gPQtGnnuv$&jCv%)iwV
z+cF=#2mM&<QUokpy_R50m_c(_BTTIfNkthE;5lE%DeR5nx0+$14iy8P=XOpIdlGKt
z2{pPDUH~+>Zsp(!cc|pr7n3ETu4S?U{)?PkbMcq*;gS=_9ZR2r$>|74+~K<t(b~(F
zoTl6IM2o^T1Gc!f=pNpd*Cs86#I_#4av!yuJ&&3fb%0w_FeV|KYBG`BoJ;R+0J7>?
zZiYyz+g44zdBs|BO{7I?o{z%pD#)y%i%Wi3vjXkbd=ZteViRV^Wcggprz?GBqBu#{
z%IP%fo@X(goz@f9kRl?9ezTf~YI!k%uTskqJlK7)waaVxsU^m}$R-Qs25$Ygt!fHk
zTLW?{%K`HlF{^Z>GV(g^siw~g&PWr1>CN54gBTG@e*A3$D{2}&kl(|!pUu+gm9`KC
zkS?{fC)!r;$Q@XQC--(o>IZLvzH1Mv)P%8B@qi+#a*9VRgVw35_AROGP76{2&i;*t
zWBYY^>BIE&iLSwL*j$~v>oavzqI7Inflw)*1BHGujf~L2Bsz(ZDUlV18r|oi`FPb^
zGNN|u-+3A`EG>Cbo>qrJ7?QgWB;FmFAT|YJTnTHZySnQ8P+11<!m(grd!9x%$9KP)
zx!avk_H_<7%-;6cOV1}ldh_iHX6F_Mi}sa>rjp4?B6EU(HwHE<finva+#4+{Qp>$x
zgT*9^Maj4YG;bNZPXPQ(q+xBa<CYR-K;?Qu&b$;uJwL}%&{9}x15Lr%6|-0~r0%)p
zkW-@gKv*6(n$G)=Gu|?3C2Sea(Rn%*XvjQUIz;k5ckTIId8S&)6^Z$&<;}*`U==N7
z3DP(OK4I@Bf-R=?x0_m<vk9!U<{@l4rDH%Et?lKZ3I<LDQ=3{XP)H_(!<`ml|5oQi
z^;0v<o~kFw#11R`R0h&?m&t5WBg<^kU6djHnv1<9vTv6pYZau$AYWc-k@(u(uWnU}
zLWD^`?gNe89v?d@>wO-fI2zHPDh!uYk@hYSG`sRVO$+3hX4SzimwTuo4MjeOr!@aq
zQAHW7`k>Zrlb{yEz>x}0qOU#SSOIRdw9Gm-LB6+OL)(uMr{3cvQIYEY1eP7}^57D4
zf8ZJve%R!4h1{JG1p~)pt9lxfEj>DGP9@-0R;2rA&O6!*?EBzpyLKyzr%6t*C<if!
zcI6TjS5us+Y2u_J?<7wR$-`TlRt9SL#R|wD?Fg~srH_JeT{iCwys-ja<LhFa5%c8r
z(ew3T5rf8x%xn#hxcy7DqAsPM`l*<(RZBJhP+X2Uy+)OT-p@{}^^DajvA!!|wGs@Y
zU`){dSw**8MJ1zD!+GSTIA>&uOzO+JmQYp@#~m{xm$#T%w2XN0$%#_50Ssz7V>Y)q
zD8%zRaMC5BJ?Kw@Ez$jv&CjE$Fm&P;5~(r-PbdF81X4+Cy&Hje2(E~Y_}?~4YC(I3
zM?7UwSKA_w*wu5ae@pQ?0#|`bZRN+yt@bh&5Sl*J7j7pTN31Xy{seU6$E>8IKod(O
z^S>B#@Y8y4{tyGL5gL6Zc$97~Z2OmmR)zd!@uT*|s_0ZeX+kXxWmET&g;txD>ELB~
ztREB0(f#<|s8kVr(81I4pB<X2&ME~p@8^c4`q|kVr*Wr5YjMd)&1@nb;7s1IESV4j
z&3YuI*5)Qb0yj51NHryLApVVup$&^4FH9vX1wg9l)&XF=qE^Spi!g;r>ly#s#xaY`
z-&hd9Zw6GG3K4Vq9l|PTIbm@q4s9}S*l{mzT5hwHLSZpcQysaGrR;NUege|sdJWL>
zYt>=ZRu%gi>UNKxnNB#S_vV8FY4B5T4C~kZqC3JGc>i1*f+2n2y<|Y0?(DdK{%j}5
zck_#GmHXE}*-p6;ec(nBC)Mo||JxQ>GJ1fe9H#`Ss_;a*nnD6mQs-nkvUsC^j-4Q$
z>p$6Ea7-V1Y?xl+&I}P~f3{P@UT}^6f@g+lPyb}6riuXbUON@a6ttfCe}DLnNu_tn
z(tfuD9Ps$*AAecy=3S-#WV_|Z_1>DY0x`#mvi{`s<Y05F`#F3*Q}5xYEMwyoLTW}8
z0H9bu_U0<almGI@6@#1}{4b^i>#*N<V+~b1+F1K3Y-?m313bOKZ*wPu<}1#tm8On&
zT2Ox;?av1KzI*xeZ<meieYY#1oktrMehgbyaW%?MJ$D!vx%V@M2U~wTE2PZ8Wj60>
z)zB3inNB`<FXIio`~C$u_kX?}3}buWJtQoBw0->h79JWlkU;hl5VO2H|8s279MV7E
z?r>P|yD`2zfI%3>1p`95)wJhp2SmY1#Wb^0le}dip15}RQ48Jz*Q!~xe_H^$HVW~Z
zc!}Q!Z%O)3`L|JH?`VJbWIuUzlpO6JKHuHjPmcHZ+*Y0ZB{_I`vj6O8_vGN!%j63t
zonjzy>g7_qUp7wua=4#7c28cPeBI#x_V=D2?7uv5KkmIgK6&+`@@rq;-`IQg@~eZV
z0My!jzM-!i?LR#@+TT0r1I63D<7r2+Vi&W~dgu5ON%_?kXP|ZR`gp(Zru^#V)7_)L
z^p9RW-#>PJ9lSVvez13N(%65w`{eolQ}@%!(d+%j-m4ccWHK9mNuq2NKb%r=5h{zb
z!4UnUY(C2~bxm(>`d~&+)s+y&SOTc+@s90b*B!i9C;L0Te)$(m8^eA3GDNy_8!Ks@
z@ykR4SE-T_qrJvA2Pa=kZdaexD|e5RmOJ0a`_J75C5O95ZW;e@{OV=v_%FvN`!9Zd
z{PnAE`jwq_i+r?ya@^WjH@b~>8_h~5fHiHj8`3^gEW+<Qm39xF?(Aq0ard=f&d#kL
z$zWD|sMgM}jvS$e1~BE%CBedPpSb-zRe5{9RAjoyE0-nk7pliQn=muFd%18QNT@+q
zo9Kon?p@@Jnd!QX>c-IkT}LbaeJmg9sJI{Px2P~-oCdx;TvVL%Ngwv3ca-~BK*q$+
zV$xlnFN<?5CR$}WFKc9~wBoqS5w_sf(X-u`2mgiqrT=pG#eS=u{No?VMt1}MvA1^j
z_Flbq|J4^jAG6E8_T85tB}b;ZIX^G=uW^v-Jz(cH!Ab6fKm9S5!@ay}1Qj@uxDMvD
zrt{>K%SY0%39wYt@A~|$jF=h1$#AUcewDnFIM0Ns{0zlq062@&F%(A(_LW*!XN!C^
zRB<e@3V&HGGYSJ7WFUnmjmJK5d9b_tlr7Gpz|ZpMkNm7ey2X9>fa5AYO5uamsu4r?
z05{9LsEaGfHwQ1DzBqXPoTVI+2yZB$1v2iEKMpLkrvlT@Xs>Uwvu0FB+h;K?rXhCI
zXKou3EkH$}*H<Gig#<PBas^7Fm3rrj1X)UvaQ_Sp9f@|dy4;aWqn~OVBvxsZ;>uHN
zhre=V{65C5MXHf+0XR|8|ERTzp#Vs#nMUj_1=iy7u_&%6dN=kbS4z`rqL+D9W0=;f
zv<gcg+1xv*|FbV37s-p`<39m4!-<X-Q@9k<i(;XS0)Oh>Kpw=f8NV*I(Es#2dFpNn
zD9jS;%JZ0ywG0Pk=V;5BC0(0)ZSz-!?pBClEr^-VR9ljYs(jHi#U+jyV@t4PoiyU6
zO>bpXQmC3(r@^YtHDR}O^U4Y|U%iE;43Ub&R6srMTJy&mIlQuqn1ba7TcTPo!#IBD
zp3SWJ6Nw+IM1!szj^D0>r%RiY533vESg7RhXq^lxKN*uF&JnVUW;Z$wSnl1A5rl?E
zZY~qI!L!ueISid>CglRHm4PD-mDmUzQCtJwX}-19)96yE6Mp*Qn1p#u7$<J|rEG9t
z)$uJ6UCTc8PX4&%?&^Evvg`iSj+m5@Qhgmf5<m?!y9$jW1vF0geeLUHUy`-HZEd-~
z0o%|H6=+hPKud~2QSzuUUmjaHiXegzhJdxsna9uK?l|pkYPis3F%3&bGI|_$*W@@&
z)E+<<8YqU4{h|pV?0HY~xhZRe!rIZZ<a^1D$HFibSmaBQMJ0Q8>1V^o!IR%tAIawX
zA5XuPpE;X8^2o+`c$B#VGW<e6)OWvJe$@jbz2h6VuKlxOc+<x;+`DH*F>3rE0@l)!
zIquF#+6$IuR=G*SG;2%Ato!3vta*2y1vdXS9pytFQwj~b)!4yKa*g0tO--e}7m0)#
z*mBMXsvjR7Nix%^+XsQ%FJ>FD1oa5xkSA`YUP4+<Ns0?<UIDPko!l!#guYKjO?=od
zCVhSwHRSm*V@yxuKfgV_9(REX6Xk@B7Zd1^?o^d-JwS{BEh4Uan?OrwP!wQKT*zZN
z*`4GoglKmlf{D0r6emAxwO6Tk6ID1OQVx=4m^-*Q^Y`s#Hn-qv547XILpV13xFiCD
z8tI3PxO|jFWU~S}x<!^P3%-IMW@(uN52~TVw{UGh4$LzqMBpx#r=8?k(Mb+(96ylk
zgeNIt#GN>chC7YYs@2-15#xJwqK0hEedR(ow^2H|TmT3F6*^TGcKbx4O!ILiiE=($
z5P40Dg>Y`Zpm0fHCPzXhZ&K!ZmeX7%VZKs~-V!z42`Xc)c{t36s1FXvg5-^p!NcH%
z^3PG?`B#7(k-^U-!kvoR*onm)#E8Xyv-7J7K$60kus;{6Yb{S_RY15fNGW(;prVq6
z(&w{e=nlyZZBZh~VNIm?Gq^P~2F3hD4dAIe4vx`~xQF_0rQJZ^RyrB5*2#D=U!=Yk
zYVw=p&0<*KR6fbzyYp8ihbY<*kEp0H{*e1zRc;v)-QMt9EXrAiO9Qx2W&-hJ`IQ`e
zp}j_9Z!treZ8zaHXVsT%jcBR$G@BGcjtkThRr-7gYQ+@;BGqJPH?O}$cix^G2GU~o
zXEXPnB=yaBatYkSHVy7X8*oRk;ll?pl`m39#iPf~Ng?K<W^&~y<8gB>)|58ngu!9+
zOIUkl8eeRsUotqAH)`W}F&<-M4H1PnDfxWltw?qv4<fUU;tE_@N{m{a8pZ<hh)F0T
zYULLJw!v`*Eu;E0vav;I1r7Iaw~I9kT!aMEMIU~XUZk@(h%Gb~#MtLh71nWjnV(C_
zDG*N7WFjq@&C`<#K@gxTuyQG1qHHuA_5qY7zj&!g)Qa#bXx33uv#r<Rtt_<@t#H6v
zGb{%Ttr2rl@KMik<6B1{G9efq11|Dw!bRS(&}^to%M59&?cnA>A(41sDQ?PWEv7ku
zC~ynbmxDs0+)Pe5^!4;k0fUcUZBV%0fg%tOga!kh_c(PVhiPLQiG_L7@M<pXkwL;o
zvx(F2=Nfu3O-sSUl;SvzQ_#Njz4olI(l@raEd^(>*pk8~d5X$#-c4W8J&iV(sf&wB
z=Z7r`r-N0^zQYRi39b;W=db((G^V__1v;$1Ce$YH<>kBRE)Vn;-QoUTcmFI@b_gly
z?gYwDUg?Yk7ttuJQxZT-qC7$RltV9TBm*g?LNU009N(Nejsu#|MG}feA<_H&xszYd
z(i!bxsGWW8-|oUN+$Ij!L_`AS1`B0)3NqWNCT3M{g7vf_%F{kKi}o)z<{IE<I>OQ^
zE#l#J#}1}E9jt9KS`92@bz@C#{xM`Ud3M)6DAvsleoy;YYA3KLF%14#qDel8Xx!FU
z<yI#?SAY0GU`dvi7RGVPMLj;h%EsxM<{mtxGr_Slyd(fW>8y-Z3fHFS{$4sf5xZX_
z*p=P7A;jP5X8FV@SxSB(y_7b20iE#HEk9TA6I`gh81keeA|v6Nlle6SKmhSBX49g~
zDhG@ifM4Z6+(;_psc8kqkOHXY>jO!!9*LyIOFe~<h`$6q8k)LHIy7zfu^@qDLH%&L
zCKo1DQw5x7+@I&&PV9{L=0|Kz&n|7JGCoTpOj6$4_IH1JS-ZF^uj53V6l$gL>!!P0
zJrI;WJ&vf{F_kZFVIY1qLbLwX@lKhBui+;AX?97(4$4i~QlgU1d@8gPEz|SDuE4qc
zi!i7F$in)1J*~$|bYfarIl<G46ueR-k@MWB=#;pt&w1&-i;JMr^95eKL^z(kN;+?N
z;GxT_uEG%soSF<o|DAg?sMxw@Rc=!iih9WtDh2Yb8<PqJ%b$+3)U3|=Dq#%PyBLAV
z8x&3|ItX`+HY8%v(pXJfmWQjcqJ5Ajs2PZ|<QC59bQ0%hY8GD)4x9uGUWZ8Y%*A5V
zabnYTHiP|y3f{sHRow8t_*J(XJH5JJI_9c-8|)o*`fS8HU3g7@p(iJwymeyq)}KE;
ze6jtPugk+H+E=V%nVwHR%-V<}&@HYjnSvSsXdciYiz~<71Zjse#<HD_3P5@}E~^}f
zHXTt)zY{rw`O<D^+02ULrIA36V``>l9h*<*o-7?|0&!9Vj6g>0?u?sl_PoeddQ*eh
zrK2cKpSdjt5Yp6eDAwRg$4=i<IHpMHv!(-TL*fU=tSeurTM+^5Zf_`VHd%@hv!PY0
zEn3V!^H_Od<28F$ud%NI5u%heRb_0ddUl2}T-$x74Gjx-K!}$wu;we(#Ch$bMX8Q2
z*~3`-qfT<Mm=OyhT8>`B10@)`0^!H(n)3^&3mWMOq3$MDLxBhyQcg40=BjHEBr;+o
zi#(<hS64m~+_Y8p^BN#lSv7?TU3kgLF3HB-1=HkYnf~h_Uk#6?`eP1(0v0#IVfYm#
zc0FQP6Nu!?+TnlF(kfbtmaRfcH6^KPBXU<y&1OVitN*^fLV~x7iZmq_L^Mkn=5wI{
z-)>Psk)wvn0t`LN=8G92Ksb6>>`Ny~6PVFyPzVK~?dXR6iC_m2(U3Q&-Zcbvgaf+D
zh6?~DQxBMBmkV#ZbsTBIX6M=DTz^RgxDj0otZOd;R$3#B1+B^;MaW2v96igo8+;yN
z2*<cB7-EAW3nD1dDiKL0MVN8Nzv%gA`6i!Efh}d6zuN7OxB(h+10>5gK)s81-2{#L
zO_03jO;GKyvHC{%DY@XhM#Mi8H>@qBamB{!b^c)P*jVmMxMS_C8i&+ZSDbe+yiSt6
z2fwV%A@I${65mXg_-5_n_58E3mVYL<^Uozx)(h!fd^9mWT5I4Is$8?!N}$y>k1SCl
zB6~NXx+=KMqxAheh4L-6Rel?q`%QBEe76zwCyy)Y=$*ko!QCVT#=IlN#7!?}StiP0
z%QaKBB~x3Vk@GQp>S<Z#R<}p?Zw6-(V3qT-Tx2SKBgHVK$9}j73JM|9jXtK1FJpJb
zOmpJBO*%Zs2Hh8MVL9f0nNdr!kprEFx}evewjXVMDj^UUp89(b*yF|(99j8<zJIuy
z=d;4?f943knA4f<XoO(gbgtohOo1ko<eQ9_LIB|e^>AIu7G+^1*2L%<TKH(;J$1T<
zDH8d{^sZ&!xw|3HCRQ1sYP34QQo26!VwTS}c2gi-FD^1e6c$g9mTS>BGu;LH8?oJ&
zOj;2nI-ZGP?wWvm%09Z0%`aK~$5hyS1_vH4OTwhhE^&h@RITK*K}A%xwKyj<tycxz
zAc1p5516DY25{|j43m2y)M9m%^6}UaC@o*`*vg4NkatqXzoh4H2&pF^s&4RaS(!>+
zVX;zK`m@EQzCA<HGmU^zKqjXoQngMF?<cK8TY&p*#5T|lCNT-r3k_$Bv!7SUTf@?#
zQHKqOz3cEn)cOP0`q%m8Ro5?g+!PYg7?;Q8(nWWQ_PIoz;B_}3M=a!oir;p)9ksvh
z+JE7Ou^6xJL2YgThnHer(udpVN;hoxVbtzJ*Y5M;`j$pf<!_9=T-~CWkp%zlMhIKM
zLXzj?H@n7f$Zpzl<lVo3cIR|;@vh^fP?oS0#uF#DMkmf))#!Lfc9$C}uWJ#FhX!bd
z?OA>t0MD?z%g-Nu7CnEs{QT2xdmeLl;j3Y&qm;>Qo15M=gYr>=o@m^y!q`GgfC>x2
zrh~?MVH~n5;976p9o~ug0_{Ii{uwq{M~m)$nj`iaZE#APn~cKvO>#IZFr?RUpW%^w
z;7_fm6`L>ka4*3&UKTv$B6TwiufCGiLQ~;hp)f|%q!wy&qsS(gjv%s`jx|JtVXP7~
z7L7Lw7{hqo*MBX<TFAMVwlD4`(nVL5<JNf@Z2QA5hF>K|;XF=Rxp49UClK!2yH8C{
zh~$7ocX&F4Ynw}X{Aw@R7Mtq9ff%ZCGKFNf^sxyHh~j0%vo#mPekg>+G?Q=v%U$6%
zXmLI_1<Em;NoMssQTPg=>d7u{c?&^z8rNb3?ac5kl~0R`!nIn=$3+=kG_Aw??O1FO
z)b{ao4yle`Am_O|bToXCe+RZs^D6!6H1f^x0gSijaxF*qo&aWQ{){ey9309ya{?Lo
zi<@_Gdf~Xs<ZV7HCR`{LCG*PmAh;4+L)KJT{aLnrTo;ZctgMFwQwCa$f)+JiO*S1Z
zI{}{f!W5;0-oXf=iWDg8Cj$xF@BaB#Mey6BC5g@{(T;(U=xZXC2l;^F^)#Jd39t2w
zOW1h{&t|vY7LOuJKFVAWB0$jya0c&SO)R9%INi$;+nB8ibO9NRFvqX_kEj0EO1P&Z
zR=v?q*R|~4haI9n^^f|gKI%huY|9;1EaoGB&CqZWKJawrgXLxNW2a{WO;)CcxIw&z
zGL$B^D)y*}2*%YJnuB4xGvo!$5WG6${eS>fwa!;$U6XpM`CPu(4z84afV=ES#k=$Q
zzr-{Ho~a>KJCP$=e+q;UWggvTj%T{(Q_tQ61^(OCJ;86+ad&laZ3d25Kv(OYw!HkB
z{v#nrtgvr%SHo`I@x?tV`m@)moa)&^x!cn^=Bush*(@I-+Tor@Xl1#K(vM4CXgdz%
z7Q3_V7~?c?IgZr~1vx9rKoD-FpD-`SeyFCcS2R0h?skXSxM;@(PMPXJv|d3l_IyPS
zAT$KZxgZ616v`_K!AmJJm7YX|YbUK}jS1MR#lzalkLsFMMfagR@0B_yVdKnH)ff>!
zu0?TTU{=I>X&nfcB8~t<*weXs^MMuS11SDlz!YclBP$Nr=#*v}jdyWbJz~0i(cN4r
zHREYeE8^BORw^ZTGXFMsp}V$*$-ui9zre_mdH1E{^Kc?uOVq_GS*)VkwVW~($CMje
zqMGF}C)rqIj1eOLwRqB5tqjm-EX8|JPu;MoOWf1wR;qAJl>yO^N~J?xV9h^^@@Y0V
zIc(J6PS1KM{=pFT*%-$>*k$5jtC}O>cV69->Gn_p#7cZ?>bR_nF7D>$(pvj!0k&i`
z1M9Mpi?Uw@{f+l;$$UT~V6CL=qaM)ZvgtgkSyJ7kDDyF&oE6{oq>6zg4q#x$)Ae-=
zw}9u>^*m<SVrU~ci6cMy(wM!J$aG!Ua@7iuYw-@?aVuL(D93~<rtY4-cAP=#;^0D7
z#{Xf*NOL-u&ywGx+OhH7F`s1J*~z|}FCCk(hR8<E%V3wMK%%~HG9G`z{y9#G&N)6O
zRVuedc_*FUz7RY>k|-efME<4Ps<3qceJBUA(ge5cl<GUe-I-J}^qk4eFX7hKvt!dd
z$}A>F2Nm#+h->7Q#Zoea_q!93l~*<cjP!kvfsXz?4#Mry!HVu@3%7I>wUx*4=xMOA
zb${$A>YZ}G2!md%RB2IcuVk2jGzU||c7e*xm!>Sq&CGTy1dUj|pc^YqHIaPP`aEsd
zy#FH(7w~2XDFoDu)N6NPbEVlzXT_%23pzAe7^@*F?yfTwM`Dsdjq$EOwqN@~+A(l{
zECHU@MZj>9$LZ`%HYdWt$~pp0D1qX;Ri<gVb)9bCzkmP11NT2|NjI@L;IM=*LWACg
zk%v3G##DLszw*_)e-!5t*0PFJ-QkMMZJg^Nd}c?G2Os(z_{?50)LWBDROF=(K87)G
z;d6so_@~Q2pNF1rR*6UQF|0(+by|kvwFnz3g%y6%9p;z0Dw7NuvvRtm^3BbE=~~gx
zB{?1$@d6nBFH0i+gYAcpKK^7Ne9gBZtWi>it#;NK(}*c{h^A+yI;G@2pE@<#QVCLD
z;4d3C-8ph68hlN+5C;?0>=Q&!LY1@GC~vdHxy$4*Smj9ODP7C&VCR!TdWy71pwld!
zRk*9{l+zk<faPR;!^*T^IYPF>0(nC2uLf)PjBdg?t?sNFWi*kDh$FKsjJ%f|ju1C$
zQ%7;wx!xYoXB{UB`vV41`rE_KjNIGZMC%#()E<f(^EqTXmXM{~yn-0E@O0482-<>$
z98=i(yR^-zy-Q>6r@CFKJ3Ga73A2g2qDc(;22YEd_S)ltaZzisiXesB<!KsPHNdNE
zG#w-@*A!#L2VdudWXt_0bGrPXU8f#;tuS)3LV@RYD|U{1g4d)QG$<3c@sXPKt~GE^
zltb)o*ddGzyD66<Jh!yo=+$1UJJoSbD+nuWA{||Nx0S4wjgaf_ke-bCdb04kZY7;)
z(V@_rOeihTfD)F{C9eveH&i%jyt*@^%YURW$5b#?SLC?c`gbZ!Gz<{T^D8exI9e{I
zWpDwhvn#M1$sVfgE7qNr%d=V3t$3hOJ(|?&=73nnh<D^#&=HA-{HWt2ti9mmS$s83
z<xDE{1=e6=k*szl2}W+rvMw93gA2J#V?~@~QoObJov!J5NCA+HoV5mup_wJtDi>m-
z71Nl|BROGED=yyMct<J<X^@JP+|q~%?8r<?(ZaB+jg+C4vIn!FDrm4nFQ!9kXvkp<
z{>O^2BI+iX5yikn%gQs50l1REvJi=Bw(#N%DsQ~;hM@)G@r|rFy)8dIgb-MMd|c+x
zt?99^2wZ+>RbjOOw>wD0$WNFD7K{9qtQ8XiJs_Ox>C-;FL4D1EjsRr5A;ivPSI%I2
zxn^o)&-4?Himv+#Km2}&-XFn)G?y+32yP(Oyo9F2rHnKv262s+KI&LRd1Y&T^pqHd
zZ420O1Oh2lw#witlZ0p?2lZ~Ca93HJ=fNS8E;S%gZnKnCfWyMC=$r;#@NI8j4;^6`
z`?bD#Y{l9Ve^e@Z4@1$EzTxB+s#m7`8tj`a$I<}qbP5B0bg6*<I~3q|bzbqL2w3!P
zQ{|n^nG~|07nfjkk{EKMPBvTZ%EpM*DTYCjnIONW684O|i%Ot@)JKbduC0p&#FZZZ
zL>yRiCH2|Z7biQ*MgbAb)2zE*HRdr<ygDE5e-ndhg~A>3mQ|c$Lo16+`7=36&r1JS
zSVAY{{uw3Q0yVgcKBwo;M_EJ*Bp3PESKtW5`Z0u6A-rsfX0>JrnB$glM&r1*6DG3a
z1bs(X>&vKBNpR%TzSQ-N`xO593H+B~p{W-#8-NA7SuM6+@SPE@M)CM2n_WWSC0Ga>
z@`=sq<)yUNoMj`&-m{%VVO^SyPt8K8pi+G9t~~fRQQ%}TkHB2c?6|7wXTGj4?<ueb
z-#RuVKvfoF_RSS-DX7^qqIC5hF=p5JwjX_4X%4I7!%J60n}Oe+%`~SU()>_$mU%v_
z0xIA{g}T_q*sVQ{AYC82Ln$xH!?lY}(rO<t;j=G~<UZ4gz*G0TlnX~U)o(S)6M2pD
zAifV<z-v0cX}d9~O2||{*^}1?5=SMK_O2%tupSgw7ubzjtQ594@_^U^Y?L1PI~e^5
zNK{I-zKZ8wO8BB4ru$C(@bikXxPa@H&^4z(84oF|AsFt$s(^AO9(>$qNOZp(z6t0i
z9h)y9hfpFqMqNyyEkHS%vErUZ5g<{<r`;gIhWSb7?nZFOT0fPbfKqw%5qjP_ew&Tv
zB3d%98Ar|yzQ^M1Fx%zl2uSEqZsI2u7ce3#>3+O3$Lo@^Jz;mb09|cIJ;NHGO00JN
za4iTL+zQ67N0dq##qWXp%PrQ#@j-a9CvYAT<lT`V*lQ-Cs3hknNJGL81mJ+KeiK3o
zgv-d$fpLZ49FQA(jlHW3q9u_soM0X~7Hx`dJG;sc6&2RqD<Nev=%;ReXA)QkA<4<}
zF*g87hQ*4BwmN(_pJ;kit+`P=ccE7WnbNCE*PT(q*%(xWq%x_*dwQt1Ym|^&OVHi!
z>kW)#=L+CJJ$mZ8!nH`HT7Ogz<&`%t;y7a@j+~<ko9W2n0>tg`|7-7Cm)kh9G=CdU
zQB654f&+lM`7*R6Hzm<BZC%(TWk(0p0Th7(Sr&kTQ2;5n?TC4ZeSm$JeUp8X&F?$s
zWM<()QL@}Ivu(#ri>Ru+XP!LQ?-)YPKoD|LL&%v{V`0m=Bh#g^e)(9%r5`K1&$Lyb
zn52TPF-J`@_!SxT$G(Kl;;(D=vrMF0a`Va%mH>Jg-V0`qa|aKGI49hf759Kf%^l5P
zqQ9OG0A>9$SiRf7%gSxwGKwz-sA9eAqnJy#@7jZRxCX>|C|Z8m<!*DiKFqRePbc!Q
zH6Cu)iO~@QKll=@ZT)T;z%04Bq6G4T`pZ}l*Ql;{RQla6V=3G5Wmi<U@W9ee=q3l^
zbI>kYL=SjW9)(5V4?G*Cy)(MUEJLR~F5q5^E%4*fQ*Q{s8-cB90K}%@WJO01j?Oap
z13bDRYL(}6$5v)NKyAr+5)+PZRbC1oW6z%JCpt3H%L*DvvRb#G%(*DAGo-(9+o^pb
zTzSQ*NQ@@LSar1aHnAZ92lR5ByZdH7rq4E}5^Z~uCN4}p{T6ql+h~qOw5fxQ+QRx%
z5u~D4?o?WV=w+xrX1Q5hQezQ3UoPuF2?rga+Z13}n(D!D;Ql$CW<c{Z<UcM#*a>2j
zRmgFXx{*$;;`0D=7gq%viUJ*=K$&(e<p&hr4Ph0qm<cf4y@cgo$yFIZ$SzW`+8Z4C
zLaU7=Yn`?lN%zstD+<}Kc8A%US9V6auG@Fem&cB7Q*rCdhwl2`_>a&~@YKk%mixF%
zC1(h}b9}l-CFn2qpS-0q-Q_|i&bP~3RuG;xcWow5=l~r1B7(gl>*xn?l+70OCGC|3
zR$rL+KJP?dcl_5CzSoezH9Vu2ofWv@%gC7QS@m;3XqI($E=juGE+fTD9CmqhgC+~D
z4&sS5xvI8aMX$y3AG`kUJbUqY@BW5thmGj@<K5$3!0C2g9zMOlF_CR9S_1tO>bBEt
zl>PPg=XYAS@3d~UZtr}0@9rJH5?`0)5I*tu-9?9f#nm5uzkkqqwy!w$_cvzKxxELV
zA^&)WQ1O*3Aihs>aJ(i<Ib&XUNgGGt9d^yvZZF>lgE-2X#d#B(^+wcm(>IM>bq~Ah
za1M66vdMKPEiKi-QL_4gJxE%w7V4;l8Tc^*zViUyL9!!9qu&0Oz0uS7Xx4<7cFUds
zX+A$Xde)`OaxoUfiB)ugd;&oz9M5oB0=Ls~7n<l>va9>3Onk}A>%^xRSg4vDIii2A
zQd|X}eM9sM-a1%Tac45`aiO0I*=E<9Qp$a`Q_s)WEkO8{H23WKJ7AZShnGmqn>2gL
z2E43%;s>C>3|r;d_WXQX?XIm!c{}+v$+I^bwoDZq_MV6h8d%37B9@IZ*Y7^lKh4j(
zj>{?-z~fj^$AJ(WM3pQRVERfI6d=~}wQR@r6Vr%!o91gL$Gw6MGfK7P`_Nv~iIe#l
zjgv`=n-g$O-D)klA)ZQz5;_on>S^mYL@wmL#BU;7b_7qqp4PD_&WDqH#|w1AbF%Z9
zyX>PnV7Z$iev(hBN3iAUd3BPz|97L*b0>9%OXKS6!m@~k>tZ#n`fo_|AHICvIoLh^
z_Ws7zlM+#69zV}*hFw<KWYGto|3|V}l0m3bcOJ5}dDuZnq$NcXu+gSua|~ou&B<jn
zzvK(vc65lMzuFPSPo;t@3I-9oZvWzlh3}fhxT%tXJ7U5lkle)sB}sHVUOu=qENLUw
zmCvBt1%V(n{`lbN2hk=TWAxqi3%>BBJoL|!&s+CepGKQEK8=;;-*zmkAHV<koLrP=
z{Nn}`$k5VGvvVr4RDG(*#G!`j@q5Q3eK0Lfr|AgTSy}li4C2-2udFBkR!95b#gBW3
zN8j!}eHu>qHRdQf>0$=GvF;*iJ>NS{{<C!ps;%foi2?!Q9FEsHm;GV}kaV!q{y5sH
zQ-0$$!aQR7;d|k?sh&?S;qflcna6#o!ki_Tlx^+$U#?#a=~U8eqA+wnWtgG(jB!=i
zo3|Y>`RM%*mh|Xfu$jYdlPwE3Qn)H){Xcs1K7MiRCaH7y;>GcbjVlwdvHbm-jV|Bo
zKdUx*q$$x&{(QdbvI;BaO1%4x1hvz6E~L)!Q_#{?_^H;}Y&5)~O30=#*VFYEPW8GG
zXcFQ>JeM}suhDqE=Av-JdfV>BC-1*^$Mb(XLj3$?*q5yq{!b=hfv5T|Jx|w>TD-e@
zKjMp!3~F9V^c(Bc+g6h0!s+X~$KN;a+z|)P0H;nJxM<N&E+deHYwbPu#`II&pIoyN
zR=_`dS1>hr?`W&`G5O>ZKIw%=iyPIZ<PqYUnVm^@2;JEhdN{~tPONPGlup<8K*rX5
zn9s`NX*w<k?f^AKVVtbc8uYZ??O{3}ySrstZco#T?Ge1drv7cxe9TB*k^1cE|Nq;*
zWfeTD+|*`_-P(fDachgQu78Qn$fFl850Ccu4i`^~&D<ivKAgKfy5_Lpo$w=5`EDtD
z3wLXG>fTW!*+{xh%mI{p>m;4&#y!nOt=_2Lg{a;|ue#Oa)kf9YWE@9~TJ2a)TgCKr
zyROmBdHFtvDd<<P;8D<M^%UuVst?_mRvs+Q=-TPTTzZvmD#;P#O{AptSKp(<-REYR
z53|y9C#yAWx_$6d)|+u!oOEf-9g{Bu=;^TpJH}T~!!S(_LmZibDvCM^i}Nls8x-k>
zm6p~|@1cR!zl|szq^~uD$N1cz;lufLs?L%PuUrxapxo?j-khYbZ#EJqN{-KO*5RXn
za{uVEY@KE^_hj?tVdv@o!z1L#Jj82w!j|`a9!^0{txWsPdi5xwcY;+=s#83)hN?}J
z5OEFL5C8>Fd`kHA!Kq^A9-I=DC)_1!Xjs<$uWH5nZ!p@ss)aObFqK_P{(}n|NmW4-
zn_`gWLswnHa<JmA8-j@W6elpopH878UJ?By9{pJqqCa9N2ha}S1}ggnzJg*Y<7-FP
zHoH`#i|VplcQ-Z<l`HvEaT57h{yfj-8OuxRr-kxjD?<6hxkQlp)b;8G;7(ZLGaQM>
z<f(Nt)RW>Fs?j(L_4pNw>7r?h{zKAT_E!B9VKgQrL`CV$>EIVPl4uHQ(ceDx&_cao
z7JO}-j+VDNno%wen!@+%Y;1HMW7VOl7Lv#vT7b&RTXSb?%gtP6#qc{ecyxE-M$LPk
z(G^p1)w-cjJ2nB)-?Hy21HEb$^&GII08W+kfBE+K_`rKpH>9{!`*J^4!^<-_4LY6g
zHUYZj-fsfJ-m8T_&G#cRsoKI`wF}|v%^_=49M0V0M)0}SWXe2<vShhZie~L1fUPWs
zv@bgOk1>37AF~V)w2cA}WSS0X;AN7UVkqH<YKDM^E8M`;&ymTjc=O4Ct+55kZ<T%U
z&KDh?OLH-Z?Sd<kUA@a9%6Z36t{)OaA3ooGstc)kW~+hPGU=OY{>9DVE)E6<2Nx%P
zv-8ERTerG(RKEL!nW0~NzxUi#``wSnk~)pOkLSrEh6ON28Y)ic*u`v?Au@ZRKR0dH
z=+@?lVg9X4N+XU_8_mW&l4dlbg+SIPnw{IC4eZ@4JuRak27q5RPp5)cU0ruN69`rD
zO;X181ZKgKZxdU&LG6JLpY=D4?bC?E!~JMpisF^Fe1$r`3C^C?tI%y1l6UTD-pkV~
z?sW~OM0`|9r^A!XaYlI|`GpyBV_~9hfIx`2y<<KGww4^+OLbYd`e|DP8=zqt-gVkv
z^)Qyk{8{Nl9AKL<_iHg_>Q68o(LI6<Ugez19(4&?yX_q<0>!bLqXQ>l+)p-En_Cxc
zts5*w?%_UXmcJk8rIUg#pQoeD)#SJ6k7^>Xaq-s(WFBi+r|RQrc8V?~uBLClfBJ0a
zmE_@mr5UUq$<}ifzEa?}@>O+U8#PEuKctSx+)w_xNiJ?9y1O<cIp9XcUjJdt^$jHY
z&SuSh$7>x(77QnDa5#QkO-xg=u@`1zBWX(VPv7q*gZ7@yhqL@ht`Bmdvf|OjdEFJ)
zB7gXbOFRF<6}JZ0t+-IhKXAqW6$>6Xh3l@jl=#D!o6Y<SS6ka#x7fUSY^|5>_4{wT
zvaMuvY2W|pVx~L@ighIMDRi`d@WSux?9B2>jR{-EmoZ$+8nu?hr2qKh@cX^P&XdCz
zFAus6uc#2jH1~VfYt@Z4>{=h3usNNk2pneGMfDD%FJTKEiLbXiJ3idcFDV6DW=N?$
zszlM*dx2Y|#-Vx{2k}!<(MJ0^Xx0{PtqP=*(zRl`u=CS0&a!QXMB7@d(e*8JoBfN=
z?%leTNEVjzzV&$fGq*EtZC~+A7L4q*4<anrj-S3hpWQ;la53&v0vD7ug=x>H1Sx<>
zt=%mv{KefJ)!kIsi$8wur2EzSYNiv@zTMkNeh?K>Jo?<TSj+vCr~&)ZwK1EQ)}oWm
zqC~FRqASCIFpm*koKkMtBQA+}`@3(RhYS!qm3PSl&w@Qg(FaMC-`f>@3V1Y4`Qzg#
z)P;Uyk<IWb!DryT&A8<kWozqbR!rh&YsojlwpUIrWSVkuz2B*tx31sT)=Q17TPHLv
zuG-?TWY=ER30LT<M*gQWeXM!GKa=j6`YI;N_eYmaid`Gf{)50%lI`QzMBbXE+K>OR
zYliE%NJy@+SsrJ|WPbH_e9tYiT(uSG%bPXiCyDYaAoLk05k8w9_i{4L2Fxk&<mG--
zAjL`INO-4W?VvKjGKczZM^d#q?nn5Tv~HlGWb=73ZXV6WQ_1k8pNUzz9+dmzvK+N~
zJw|ifu6T*Z)&kV%ru2@v%(4a7bIkK9-8gFXg%_qs_183_h09qLyP;01MWdKOCuF-f
z<m$jW;09ZgudUo;QNYAy`ob<s>IDM3M9CDiShQWO=&t2|Tf^fZCKlOCh74nnEDSqI
z_xruS-~VCv>C3%t-74STeqoiq2#Spm<L|Bw@vbLh<h%3+-n%_T$d}?_((DR16@WT5
zAFZO!YnN%|$%?H@$JHDFyhZE?$ut*IiD<Lr0<GL|o9iz)QJZDV$!vHit`fbpv3=I~
zjtg5Tk;qUl0^8L9^jE1~xM^SyRPm!Lc%3XQIu%CWBMcN+qR^*!8K+@(s1>R?F~z%M
zOaDijA7d4p2gt#+Ju=V1Dtp0FU>o8ItbVcs^~_oxgg)WKzOt(b2T6FVuGdM8%3fE@
z9^OxUN@PfKEHmPnBZg!)ngm%4?_PD`RiJT+HO8#4i_`-~Q6ET&uDiI5a$7EDAT&aX
zih`+mp)$tqls>r6W&_dSl0G^D=^zHlOjm7dtDN<V`E1+$<F*x3ffn8g5#|-{)%ip=
zorxe4ekvb%*yeNs^4gC^FG@P^jL)sb95?#yLUTJDBs6WLn2}c83JZqL8Y*B^QE3M}
z1%jQfNz9}6nv3Qin>W(%rpX>Rao+2O3{=OCe4>(7q?FZNxEno5MnGdai4&HtRsa5x
z+I3N^XZ?zEqU-DPYIe01`sWA@soH7Fh+At`p)O)Awbz43LddeZ8p>%!kn$S!k$_Eg
zgUtR_IUfx2HxD{rIjTNShaJ4)_Yb;J5M*3=G>m!vZt;+;ro(DFp_&e=sWwu^t-Rc?
z)ha=RPC_0RBZjeyP1h&*n2(tVRSn@tHYVsyA)FabBQ+l*8M2>Ll6q3G59!P_8xmqq
zBo;A>ZB3^=gsS#%+9WvtRwsTI;`3WJ3LB!v7RgBa6|``_A71Wz9KR*x_rPYUZmY5f
z<PZzVV)9pkQo^<Xc9L>&#<B@wUpwG8>6Tw}Fh1@0FIOCnhJt#nzAMGf*v{QhwvkQ8
zG4{PEDN{8+{TCg_nJVYjp}8WDqu*|z7R%XG_vr0yfufhJ7oQ}nLryJXJBlccf;nXp
z!|5$0%rKr}HxgY*4Os7;`4wqL;Y^tF)${nDo%l#p=nI2R;U>)NAC069=<U<7rG`iq
z>`^D~J(tNKH*{2(%n!2?jbNBZD(Tu^+Pd|ha9X(^WrJRCVk(qlp2sQC7|`dq+(511
zy@#mo>(VB0Dop-Y3uTj|N!AlwJN_g@pYSw3r-fVr13~%NVA|P@mZrG}*|2nawNn7}
z0UM?5Gwh|kOJMRO@+!zb+1PdPbv^+&9bKF7Yx}Vl>u9kKi&0N`0=ysK1T;g`vcR#A
z={Ar}pu8K;%3A6H+9mW^jnBxF%iuCM$NkcyYq^p2hUrv7xWROaL7eG$!F5}nw8-Bj
z7o8p^si_JfN|j8P1!$7Y-?yv_G1?&^R|-1s^BU_cIzoZmFEDlXQX$Vi47~-|Sq!xy
z0|w!DUAV}Gy@DW&HK~fpJq%Q?aN|19hEBM~t@?7`vaTckd*)Z4Cqs#<`>qz+tktAv
zO1lAOt^Te~9=YggF0N}QBxD%BWF-`Y&m;>73htNR%E<7psV$-$<4iqBuN8nErULK*
z`+KeZa>6Vq7sO0sx~c>rlM=x|8Rrd&OOLXy>2@06XwQH{SY8McaG&V!z<UA^j(#TK
zA^DV+X1I|E*tOtBX`W8B`?is9-?_V8uQw#Od4$Bx{O{l}6-g6zWpff$-_YtoXHpr>
z5F@j;d$7NKbdfUSpBz%zclj_%-s-Bf4X>g10{X!$tqRRWKRCp+Ue*}@+j^I<@snY3
zvJEgGPh?v7Bc0@}%XBoXv*#C@G2Ja7bWoD_HNjPO4oFX*pj3xd8IGV5GV3h@jWuhR
z@e+n$7Sf#Nf$?os$s2*%OlHJ{Pn~?76em9sLci4HUIfb$58_fR5`;~WyrB3qP|*9y
zFSU=hw}o!1X$Ih~&`khvnMo`8tM-xp`g%uwfxfJ<s4o|5M?Q*vEEXVFOhy)>i=(e`
zZr6|Kth~chLgimnC?7-6!iI>85NAxsO*q1zO1LYzLo`ZVr}?kzLOQ<uvi94TqHWus
z8RAgsQ*>gGHsVG#b7q6d!cmbDZ>6F*0<|M~Au0F@2pNb}3m*`{+KH^xh7xUlGM{-N
z)sK_VHm>4YfC#S4j=$kJb94dWnAI)C*RyiHLo0s4-I@J)PSWBUaCgUiC?MyOWmJYK
zsTny>z(GMdY-YKNd>L}3Dc&@PMM2cDlvrB5v)V`cl`QBp{%HRrT2s;Di2EBo5@Av!
zyp@K8LP0rJ)12HbC{g=J%}O0<;On>nt=@I0r#b@e6T67%&C^%FG%??K2v^}@^hosO
z>R^JuIZ-4Bbh0OvMd<ihmY!eIIn8Y}S6msQ9r&jXvveFb+^%0gf)uZrea%PUPn22u
z<bwd0RXg!XS<S&+@>Tj0kgCR)2B;l&5FO~ouaoX<db#b$bPqZ$M@kLBWg>A@BV6_t
zonMN0UcL9U&w+Q5q%Ns2OEu>9ArLNfS$R2!r(J3|;>0j(=F3@nBb=X>M+%ZfWiD84
zRah%9m<kP~pWLj6!yu2`%!dow=J6c}WvGcKr<No<J6e%47+`8JC7AKoZYXrx%p||j
zl82wGLP^}d!ptSVCWq;T-YCB&P&E1<-xO1vDfa%?<RK5$3)h_ez3V3JOY2s&bCiye
zsKF6pnRK&AY4!~vq%&DBvY`2ZiR*G(vk@Z@QJ_QXZzmtP>V5%Y_0(6(Oxx~F2j4mV
z*q?;tH{awibG6fRka|i`ICuMBj?<C*b36w;IkN|fWf^Uv#Md+!yRRi?2QXs4GTcd4
z%RjYN<|Qy9!`R&Ub!?BY5pKiIM;ggSG)-Y`kzft3ilGl`JynkaQB%0<niI<UIRl1@
z-;vM1-Vsbc@Vr{UKMB(i8j<9ZG_KD8>Zm@!*k9T(XpO)H8cSKBnyx|?{Ti7w-M=6@
zvU|g}!sbon>gmjEu1XXD+xV3%U*mdH{NPJhRgX}7v#_BOPcL?o4Y#w44Oe<&LfnqK
z8+Z@(WV8c)FQX0r!MlkzS2P(PD`|7hJ(VD*ym%@)A<T8lSC4nx?dIR`b(QQ(L*c|q
zGpZ6^Zbt4)bYK@=EMNUXlk4)i#nZ}><CC?$|Lwt2XFxJOU}xevh-TpWy;@vM>6_9>
z<J#oY6|1bDSEnQ#03NAdWWPcuFvE#u=a5NZ<b-2?Hgz~cb}CPQ`%+pUC}o}w-&V&6
z_GzS)m|m~)-+~D^x^K>fo1;@O{|1s)HtgGV-VNV&g?X%AM-s~SncPUsW7sud)9#LB
z>p&(E;*qitr7X~ztW;!DGODH8C0ejasLwq&&&mAslo;!-=4pB%3*)L5V9iwUMuV`l
zEf_xAPm1k_PJZ1+e8G`rlrJ@TovT>bl+c#xDTNyrPv+)X;nk6B-#4B{>I|yjv<XM+
zF(z8{HuG_BI9G*+8HQC-cO3|N=q>;-yR^IKZ<vg*I}pl&JH@pIU3TDnElY-wj7-xR
zf#p{k;uxZo`a<wriASSu3TG#tS7M})+bP4kryjxJC%^r<-!odWTvf0bb*&A}+k!i8
z805*o`ON&w(sq&*rClT;tgNcPO6@HNE;PYy6CE}cTI8NHr5D8FRz9c^Ql2BjhAKD_
zwRd1YME|BkB=^{KG+qN`f)g3)*Sz;L&?Mw%khmt-3sktTvcec&`j28%RPCO4a9uq;
zuD;pAYd<_;zf-9tOo@|MbV|qo8tqhEV9BDCdvU1+EBEv=>JzavL130<0@&7as{2`w
z2c#gm^;|y0qX@`XE9D5u6kLA`_+GDEev&3$e@VEN9lz}P3yq--H+k0!2!`z2UA)zO
zQW*%fwNW~mV4t64vkM@1lhl>&sJ60}QX=iDR7|~UmQxb-j3mWv(#l4S45lMXyfls$
zPfbe+>r$s|elAi5AN7SWOmcRP`f@C?NWg|~QzNWd!&^_NnG9AdWS#XSS;kWO6r6IN
zRj_e_Rt~$Os&_?467_#G9Re=&^o(Q<w;fk1e9=&?A;q+YhQqsEJ<LbBW*AjCG2BJd
zOs(Ys<IXf~+@phG_6EKUP(qC}kCspPb|xYkt6~=0OM}01Ro0q~WowIY&cw<^r{3r#
zUDhnd3#q8eLJAQ1Eg!)PQ3@0x<$x$IPm2B}rWdz|xHXVm*Q8eI<D^jZHELap$$Tg@
zG@r?#^teQN2!tef%=JCNnH^DQ<H~R@B&`TH1YnfI9WfDiHsp_jf;XEI;ucPB`dgrF
zo!BHlMQV-S-!%J(3W#DS(TpVCUz(B{1uyR0X$G_AQ1ftgD`HtUQsq%IxLUNWlo7p9
zm5cgloiK-2UjFf{jMuF}i$IltFddb4T4(}1f)YEokyoBi)A+y6Vshn(TC78(p@4)j
zk91^)AE=`36x%m3eu8dCm`Q$1YM*NU0R>FGzzt$%l<}#6;IJOvSL4E-w^od9VaD7*
zEg*I<OixL-GYwBh<d^$;lF9)~0G`eJM<W|8Z&g9mE6@uuY6$dl(Ef0D76UOsF85xh
z42Nr!pPtP;E^K}}E>z8^QLAnq7%tDm3G5n`ix{IUb~ov4+RmzXz-qZGw>i#E#r|X>
zt|X?)pi=S~z`eA~dyYc&rbyx5fvc{bqKf4Y3x-eE!VFHLl^6$A7A6h;>JZW@0ilka
z%mgx-b`_<#eZd-__-sg!a)XLBNpm7#!iY_dkF}G`djLP#@S+EU>#(k+U0)8X!--Sp
z*18^BasdW@`(pbmc-0;q>^|Ciu#MouZE14*tM6Vs?Cd{&z!>_27e~kF!;`(^nnea9
z6^LeBqN@!Tk2l~Xy@WSr!{3i~h9uhtN$4ghVXgZ}#CZDE?!@^PwxLDuLc{485%Hv9
zCqi6u;VV8D{dGZ$Ojld)DtUJ7Njk!A5QbuF3yk4s_vTZ;f=Dc9Kf1VUo87OqhWj7?
z;=k?ammPHLx2|-^&4%v};olh@%KLG;Vl^~nPrniN6oRJ}Lx4Af6A@}Fc!I#1iCfP_
z0beg_ql0&0K9)?bLiMBrjsP4JW}X8I_I65M=+Ahz(A8EbT)NV`A}&BPD|M(Zf6DAB
z)iLVX5GI<g2^Wq+kP(!DJ3%9ESUqN-CR5%-xxL6eY)DfGrb&g%I47H&0W-VU_EN_O
zx5d+G%~dWsXxCV`)sh`9<+fX`uKLYD@^LHO2t@osPy%3mHczUW6w|BSrZkQ32Z^!w
zkm^qMXF8n_B0iW;c_PTL)zrdR)v{ZjCa4bbj9e}%>cVr>+JaI+aBsbtQlwVW@NoS~
zCMSu^VTcUFi!`e{sMQouAy{!!Pjpp>mvl|H&{YMYIc8FW(1k0x<4`3Ihmkj~5cf``
zr@;Q1NNP(-`xm_<97Zu1AnPAOakEn&Y(JHeCrzlu+_e~zOrS|imE)Bh{kRwIDhZ?0
zAuugdO7G#gdP;w9&eC}~vopD1?`Y!c1-sp(Y^-2^wLQm@75VW0{O^#hM0iUaQ0Ba3
z!ij;``$uVeBzeZUBUhy+N105noi9N0xwyg|Dcq65TI==?^USAQ;ftM}oqRkf1hc@r
z3E_>3jDLNRKvov@sju*Hc3uq6DHXc)5kMuMdZ%RG#LAOkWB0Q{tJc7b5p=k~nyOyK
zvZ|1P$ozo6W^WpCD#a*~F%z38Hg&+|h9NAG!1h*6LhdT_{=4Q`p8DBl0+f6NgZSGg
z+Lz!M1CTcPxeH3r*e_dK?dt5(?+K4OcqH8ju2~;)?vc*GbW&w69l+2?Rrj#y(X>u~
z7<dFUG!kJlEH2eUpfc04aKCS=ORd9dd#A~c_wk3F?ZuI*&_HqRx&syosAGkeYS|Ax
zZs<E9RTbw_T)(6AC%2;BH*<4lo~Se?6X+ansPv)X&{Xp77?Ag8%&Ss%+%?yGEs>b9
z-(OqPD&juHT!yqrtc}xi7qir~Q`nrONQ*7SDR{V5X)m4CRr7qOqn~yBXO+x9<D|M)
z;(R46L7Q68Qhn}*u8%8+`$b2EmbhkkbMD$2XnpY2hd2YpW;=4W*?jDnyW|tVh}T!P
zaI2##;dn}KcY@%%W~ys#QB7aJ(mNe7Y^|;ENpbzk?siU#wG}~Ce*LQMxn(TRR#)a$
ztkypI+tcgU_Gzd5dAPbVusUT8j4(M$p$&x93CX+cEQqk)CXX-9GVH=aGS$0e?K|RT
zBPmtWX(>S6)@rTdU*;9XZEj1oNNU|~V=rZ&b9+tm2%zMXBAjn1QUoh*T!ZI&GXyQP
z9R+?3k2E=T=4ty`N5;J151h^nzE1u&LDMT*>1CoDIvrl5mu1cJfQpMKKOnz2FeJ~6
z^d1o$<6cgnm?9bEvp9QGkZ9=!+ECp=KNHzdTGAob;Opkj^SCFzO<oHN0|`)(E`?=h
z*ot?TF~v(icQ+jLk`lUs>^*_Yr_z;P8$x8(<&RPZj|=EdXFo`Z0Yc1OGMZ09w&u;!
zBzd}~FD%o`{S}+)vkt!M_^&$iJYKIQy;xdaj(dJ)m>_VIJ-cmMv4-^Y4($G8f~VS>
z<hMFhXsuSu?0E>C<94g{v%ykjp{9P0#Cxuw>k!LZ>C?io%;=32e&hQfEhl0s`X%|M
zD6A8&x;RBU8-t?Qc-2LpHa*_hFTXX!aiC7~C7VhT?d&%p{hEjxV<%fqp(Gtri$jlO
zx1Bcs<96fLty^{S-XTdz=_CP<x1gpvGOXMT<<+~vHQhcsOE~~k=%$`ER8O3vM)FNZ
zzUlCr>hWIW3jFmf%y#u%u9^SLm(WA5TA>{uS0kCc(vou^+Hf@xNMKnXct-gN4~n`_
zl`#d7FC2?E6M(6lsx1cI4&FXL;#vr&Zofpc!cp)urkC0si#5WB0!!u6vDCU_YPo^e
z$+06!Li1^b!Zhr;KmStP>hkbx78)hp3g~RF$4uW@O4LGS_EsFzySF?3vrbx)Evei!
z2!`w0C!2M(HqFxVHGWVHJfOt@j?<(>8XjFtVbq#gj!bHCMOt=cy&e|ccsPuLSLiiC
z%vp$7Mn4^anOBu)>Frghu=GI`?=|9!wAYknZ{8Lw!BSP?;FdhXNnG0D-^A>whwD|L
zz8#gh;)+z~^N7oS<oZnXf*!odM)~Z$IPL9TsHUUUtf*Vh>GE?g5m)m|+Pbg!ekq-#
z2B(XgZ$#;E7veox8YG{l<J@VH4)r9#Tm*et_NJF*eWP)3@_vf8jDARXg4=ZNjU%+^
z$2i#T8Juq^?O+DO`lo~=wWO_;uqAG#rFjsFSV9$5S-_>))x7pg6-d}fCG-l@axg98
zpsOerE6({>jENGrT&V?GIIhL3IFBqlm%AV4Ey*BHk~5V9c(!8MG+Cg<4+exC0$ldh
zxM`e@>MyCt4UvIRzKy`142xNEnxAK)6=j5>zz?_9Y%)c9MI7?5I1$8I#&|O+FONMa
zhG_Z5)XEra?CUI2bnCtGEPWHZ5(Z9CH{C+7q*J5xO+K2BRu|;n4@plKhXplT#n=*;
zmCaj<vNcRL37&iMo)aur?s4b@wczTx3B-@+cVn@`mD@;y3~gw_lFr^XA-SIu>Bu9|
zs>J)st&E}?1w%xnqHR^Sf%{m*7TEwHcGEH!jVPZ2P;>%ZB2Q$4IoRw0N%v#_U4$e~
zNkh>3T|=jg@wi#41w})|KXxz5Hb5sj#h~MU`~&G2zr)$FOm{gn^jTz3XcIRWM{UJz
z^JzyjzB!SqoKdzK%t1{d>{kSsFphXyzRxZr73!la!bacoZeWe8lPL0<xU$9lF)#3t
znKSyX5viXl7YAV=q}nS|J-&OMM;xGtBPx|8vfC@zDJfi~76d)!*-XbP$A~+rnA$~N
z5#H=DNG@?V2QA_mSb)05b4b4UTueky)Q3T&%(*wI-bA?4%}}%Qi^Am;t9yo9%E_XL
zKTEF)Csvz~Ir~K#HY|r4?0urZybPcyUwyy#_XqdCA}-2<F0T<cjq=$0>JXnrZ{d~A
zlU=k*tQ2uP%1I$W*Kz`{sATB`<p0dxA+~<ij(0U^SpAboj;+<6#Y@cabs-e~{L8f#
zq5SAo8}g~AgMr2AiO_uWgGkIGdVc^-4q`Noc6sr>Z9D^9W^7Q(mNIy9Bc7)Xm>OI?
z-)3^K;`kItu_fR~8AQkOd{`Bqm}OHvv+jOE#DX|B#r~slf4jm7)oObwL#t#>sX4ET
zpEhz@2Di2Viv^gK#hvbJ*tB34J;|gH-{|(C*Xq_5)TmYoy?@@V5;(tWNW*hp#PGov
zUBpB232KO|cq4g1mm}(jcgL5~`r{BvXPt<m>lXVWWt8Y2=QCy+_I5`FWePogxgTSs
zh~p^Sq%l`g)j`OQa%D}TsFc#A&!IBpD;P~?mt?Yl^Wqk%>SQVeWYder6=qmTA6WLf
zZy$;-aXpI?xG*?L5ZO%YM;mtB87!ayM+p=ShxrX(+U~(fmnp<jjqzq+?QVlU%rsWb
zd;)0lSgOmXakV;F-tF37>GjR56Tb!&i$`(ZnB>p@I6ZEzn)+W7{`~X5<^MQWN`<hm
zp5>y(cVd=f;+0hme~IBVYyJD~D<Ra$pL2DMxsuDw&lNl_ofw!VQ|g5t3q6h)a`EI%
z_RHizQ5fJ*=g7JTz;D~fD>$S(L3SW}q^{U8d%^3+iFxi8s5_p%LfLnipU-t;Q{3a~
z$tO2%-?{f?vIj;)|NcffXnIXIh@5~6v60NDx%;1a-ftxN<oupv!PAlZp#0hW51>t(
zl+d-719kJ>Jaos-bqjN)7e40dc@eIKN?I_V0gHD->)&=?9cmE3pL6y0xe~^aXHfqP
zuJz(=njAYG40&CWO^e!c2dx`P8(klEu}bOQ@i7@Zb~OA&;7F*aDfKk{m-V_wb}+aI
zia!PiVK8r@udV+PvrTSYIJ9O0SYGv5RvAXm|MCkBff1o+=_`phD3eXhQGNNnXz^B5
ze{u=E>wnj|8ei&<KTq-1bLCYej~N}By`NjwcHfuw_T2C&@_J~Ou|XGFgNn}*9O~ej
z81N>n7OvKZRtZoy@^J2M%iy&1K^>KXQgMHl4B?JU^;w1p$1D}YC$J|FC}BW_Jwnks
z!ZiU!jqv@>fj>_@7@XN$Q@z(>=k%dDAsUB@LwbK8Qnbf#4+Sk%qdR&k@wA*`*C`ex
zJ~R`xrir@VxQUN_y5P(eX$B)<*<e8KI7W4t6FN4dF2U8mwT0xiGXdwM80(mllXRMF
z(pX`R%=59OctTR;yCQ6>-ISS=OYQDRXUTvS6@FH+loy&5|4S6J%3*uYQVl?h`y;dS
zFsx3k7RGWq2XmEd4zmHGTc@Y_xSm-5Q^6xrvj+xLoSqWmC9HKT*-c;t=od5Xfxz18
zFlb|t#fr=PXqpWlN^JHXTIS@y`0q6+d|qY&SXT@KikJjgE}*|5y2$J>k1MkSe~Dfu
zmGlMgGp^s<pKJ;Jq|OS}fFVdFAJ38J@c;hT|FXD;&~L%^@TRIzdBSz3UPwI@Bn2ZO
z_RgUVVuiuSVPR~{wO5>Hl{lngoJG~Z$;GN+F77m_(0Q^{&l1-g_k!@k9MwD?h<)zs
zastA9IxekfG0|cYW@U-GDu++j;)h@<Ip&uBAtW76=rC%EFv&hB4#ya|7{RI$E^*%&
z?b1qqkW}$=NsN$l8x6(Ir;%q%1W7zPMCCM`S%{X{Wq`{n*87mYI9MB?efRXrM#Lva
zc;bfypue)x+pt}f)(vwBWu*$s&+}kP7$|cAAru{<w!>*OdX(zNz|yOL3A-(hSv2tA
znI}3e^QZvj^u3p#zUu~LTg;&UG>e1~t*Q}g9i?7cB-m4jb^=?Xouj(khg&jImLYd^
z1BfyGB(x?h8K8@&Q&F!^GwyL8P#bk5vX?xQP?7ZVeffb=T){$pn8fJ88b=X?wWlWq
zeSCyx&(cvc%7h&)f@4*gqcOJ-ZaDOIi0h7>CqB7`!-V!Fnu-HgB4b#$Hu!!MGO=np
zzM7EP*TCB~*m=3drB3*y0EFRG1@U|g-%cOoC42W<S@&!#dXVM1_s7?_=>&+(Lr^{(
zrBt9Ywf>FJQ{fjj8se4Ke$4oX6++&vPJfyX#K<i{5(|L6{w9cqqYC#`<9Wp4i^4oh
z+CLR1s}wr7It*-!4Z)O?mTIISK|&OxcJo>A5a<J!UW#u>;~UC&h)WP3E!7)41}&Hx
zSwQ^B))a<US;ax2NBZWr!p0F4gRV~(j4u9XHZ3-c!fa?#8#=|9G43zz<r3@r2E5p;
zgKs;tqJwXxpUZWq<J&O+Uh{NFv-8m16=O|!a)OAz#oZF+I62QtIQSqqOsj~DgaYfi
zv{YcF3=lV@w5-Im3=z>MIg{GE6L3$-_vzqu8sJA?<7X@7JIM~e9Kk|_p7$dJ`b%r5
z)EKSlY(|q~$i8ORT{_H(Trdm1@Q(H6%?rRj%bzB$y#7LtyB!;H*PnHXvn~~*g1hHg
zHcJsO#+?(S88z5eEuwLQ;#{?>IQ}*LqY|Ri3vpH_@ZJyE`^3>twvq&+gp+<uyd>0P
zp)&!5#$wM|z9BIW;)RSvvjlok=}52|g!}F*Y^Z=Yu7VaIJdR^3wH%Y1H#EJ&Xo9{3
z%s0DaVOvbk>HZB!9rgNBcml1s;fncio6Z8ftW1Mr>;bJ(&QAo2a%MX~re~L-?v;B=
zA@$NKpx#Z*vvv;7Vs{)0>Y`mp#sm=@gTAbiAzLiw1Xfu{SL`Se9Ul}PFVD^;yDSvu
z+OBH~iH@1~T|(!D<RuoB;N<0JVZq#hGT@>YT!_VCs>`PbOSYvM7qbv|VhfIDML8&L
z85X&q0*XXPp(iqBGO>Fxbf25nZw0zj5{s};3aibaT8Z=4fLV<Qj$j&m{4BSDTl9XB
zNgfiB7i0{$q{xfXMW|7MlZ6<c_YFtX4PryFR<r(whEuyPNZ?4KvAvpKrj;B)*woXI
zmX=d0l#o?B1G9*ZaO5+Mw8@zqgy8v#HKgbmVX6)QF3Q{y1!k)9GaOX$(A76STex8-
zipwiM)O%}CjR-cH^`7+CmyT<qhlk!GXH4;|CUbWS7QH+m3BU`JyiS03Jjnt$X`JST
z{dXMA>`bp&)?NmRON4#_LfQs|PUia>fL!%<trXR()#$O~c=azoalwzK!rDOx-w24w
z6})6?l4Ahfw(QyRHK>UIlm<i*;jW3r+(^#mqjcO9wCtgWWj69~q~QkpvlY%9+)FdK
zjhO4MQ4=1LVua{I4LE1QBL((W@Csyk3b}h)f)y?2+ikO^*yI-6lZAc-Jo(*Ku2pyL
zbkf{BtAMak2}Hu=06xoYb0(cCqk+1)o{w`!q!R(~8{`JF!qZy@7_YWp9LGCl(^cMC
zpLM2%86Km2NRb^RdfIefH6_VaQ}r_S5DnoQ6IUBZVr<st%foX4hDA*{lCr~f7thLM
zvn`OyD|-5c=9LhCRelxsQlHf8y0ao5BX#)AOO5z2Ch$~XYC;+yW&T70RAvx*7<zC<
zo6M(hcbo7v*ivotsqXSx&HnOXep)yrI?^h3YRx1HYW<+<VJK6bT#7K+I-2>g`fb$s
zVZvHb6XIH3Uk`k4IrroF{KG`LqW%vR=$dRENInHuVIz5VDgPWL{P$sg`Zs{wG?Jrn
zaWNRCuQN7|WT$RCPk>VWF8%ln7RnjXt$#jS*CRCWxKL!VYgYWZ6S7cZO^ses=v5LQ
z`+Gx(4Q^b>QRY!Aabtp1D0&#nxttp6NU<sghtcc`jiNe6D7=LXPknqu8adjZ0RC?r
z<v!%C;K+14b;oO5z8|4u*}6sAgnA#VOP?L;@(SrXD%V`NXRof)u*(1C5?ivVGE>83
zpoV9I8&&qSQDMO}z*2QJwVEky0(V0PZm)5(t#l?2r?Cn|ql#lzW-8TP$;s$9oZpRV
zxsAF9&AVPq+3yJ{duuG2-AN~fTQ?@a{H{2GdR~89P#IKj{rR|$(0PR7M8Pd52C&4>
zRVl{^Dq$VT3P4xyWIo7N*%S)xUMapq$nH{%4To%gB3w^6Te>yC-Blu^ZY*Y!o29Pv
zw$=1vmo!%}foljwC3J1YVZ0)T7QILZZj<I!Exr4{em)?SFRWvl3ywoSPX*Yif(AfM
zM6^O8BNr=7ij6pnO*IPOVqxSaGqfvw_G%G8O|$}t5~tJhwOwOkq-RRPJ5*x`WTa)%
z;ueQ8393m<%4vwKpq2uNO;{*-7el=Y=Dwla_tkO1hmD2P8Nda-xK31pWgtBXM6jwF
zg0Lwf>wKz)2z0h@Rs_ust2p|#-8gbY!SaJAMHyk5rVDMg2s9~rVoE4s=a@*KAdD(W
zTkx4{L3^>N2LC;Zah&yqtbD2q7vx>VHVbp?@g`3)&4{=zvEMsnqton)QA_TL0J-6?
zKuz!{RXcC;;P$7tZcPDN#OzDerU5;S_{R|SHx~P**gG=K3js1nXh4DaZ;<!o(}zG>
z{>CSZ@mHhFgB^HBTp7a$L63=8Ch1f*T|dkFmAODJJ*IQXE}<i*5B?;*7#q;IT@AJx
z1YeS+cWgzircc@k=w8Jx-0P%sH!7eCRP*nJ=o?cp;V}7{1(oO`oigKEO;M5bMtt%7
z>EB~+s11OLvuQDgvCN(5v!ZytGSsYNFC%s(Dof0Siv>fziR+%m6I<X)XaOF6RgM_2
z2O$5V<LC3Z2CAUyx+ETqhX67Cjs|%kF$R{~Q8i@}HKKmytg7@RQTTF-4M>X_j|Ah5
z#t|=B6-<w&@aYP=WfH2w0zwBveVNcDp4sCw&Bw0!P4X#j<Y}pZ$3&W{8bv%q0~AYF
z6YgJZSw^mIZN*V29wpH?v11M#vzSjNat1Cj04OfyK4~Sp++~Dcl%a`o<%${f#836k
zmH|-*8fal)0Ep`sup7decOz>W9f5t={lo@p;+|<G?O^|05hRX7_-%fACc%rya$`jH
zJ7Zyl55dKP0Wt!4A;2wZTj}c<-EP1SrD-Lacv<)O47WLi+qZ7D65j#W0E!UFTRSOH
zJT{5ajS28F`;x5bT$aO^NAU4dab+6(s0>jOA-WWxnEy=yOL^4Vq6PaMvAZ|&vC3wE
z11sxdXyonK05Cl+wRYexe^->SA<Em{fST1>k5noo{O(ec*&r0J;c!Cl836CdVNr9m
zS=Qf6l&iOrnDF{c7;d?ydB2~HjaY_WOEv(V8b@4wtd{rhM7UnE8IHpWdfOHgGpzpa
zW{Fl=sv7q>`nQPt{2v#u8H|MxCH1eWu&e6eY#CiT4h9c7G2qg~TT^5}!h$H)dl}2b
zX2QEtD7KF(Qn5WWvG_;jC)7A`6v#R)K@zvpuNb$PX9FV(d&jsE@uak08dd0*(E}kG
z#~>=>3&|A#rIE@9=i)k+PK`t!>8%B8jQt7QFz4B8W&>{<E-_jdU45KPBIY)5VevE!
zn2rJBJQo^BJ^0G!wWhH{{MS7CuM-o{izWT72`k?oA0H%BenkVVT9dsj1}vUokf^hh
z5(>CkRHN$K#yqbDJ~`qi3aqB?mRfHBTHUN_)ar&LpfJ#aH!OJ1Cg*5E*!6AWxamj1
za{=Zr%O(5sP<$6SRoKPX?Ht_!Azqif8GLb~Yp1G(-`szGw0C&iNM0U1-aX!PQpDcV
zz2m(){j!3dLLHZdzLY*Ow&Zd2RqLSXhOvIce4U(3i`R=YZD&;%P}M0bfyAT!0cUBF
z_YChL)A@iaqy$u{7LATXKCv9{9Bygpk7N792S5k$eE0Zh{TT4}gASpbOZdk74uTz8
z9K+Gyjyy41KbGB5`cKytd`y<<y$7_=clNQ_pDH8gyB|8e`(xbas?C|b^g!@pk#jw?
zqqbmYHuve6Mpencv%ei5Ut==dFMcU&+n|qztL{V+097|!<9#P8GCZ%Dq_<B7d->;V
ze304LL!f5Rv{JJYXE6`rHxh#}7mgo^=9vg;-JX7t_WSV1ZN!dhN6(HABL9aU1X=F)
z`J<i-gx!KSYH+F<CqEn!wNB)2ztsAael}xqM6M{~7q0x${FHt0ilnA9aZ;;W0NwGv
zWmb?iLapR;1q`$F+$S391*AOkVoRMgZtTPf;!X^`bGLc>cJt1y=6OjRKl!KQKNoAz
SQY|;@wf_eub5Z(+l_dZo!m1Mh

literal 625113
zcmV(oK=HpHiwFP!000021Jqn?j~mC4{?1>~X93ZY=8)E|5?t1H4y%>yEFwjMR*n!X
z46-@XB*#0Po|~Roih&NePxk{3_Y3n&?y0Koc_F!ytdl>S5O~R%eyOh4r>cv2px&l=
zvPrXSF!)pRS*1?tT-n0pk+XFf8+=WaGubj)TUY5tX4KY}x690KmC09WE+Z0iXEIDH
zRgvjxY0HhOtXkA*mW-7x<F#>BsVg()(Honml`U18SEkH$rkq_?TU}zUO1W5PW}=?Z
z+-5H~ZU<M^X83+_rS!_=mE$FKUD=JUQk%Pp`k}^AmYI2%F48QmcFHbQY!i^4R%><o
z&DSc^`KrcrtW(sBERA`QqD=2Vq{`Aosmq;8H-#-LCq!$NS&$Zvy1~}Uyu*=GlY>vT
zsM1aP50faIo`^fS%yf-CFR}4hUDl<uCH_9YQomDwyXME3Uzyy2=;1^?qw|3RXQEZ9
z@sbXVPkbh!{1rs7Dv9Xp+-{edzQxLa(aT#sR!{5r_URL*^!GTRGv!?x8+T+~XX3gf
zuJD@I*DtZ$#f#_o@8#7C&&(vPaNLy>IaHuUy{=s~-aDqqYA|?f7A~#Kxms6M;m)Vi
z?RGoadZn6xV}qwQu8C!QocqU36C1n1k7@PideM$rfzWy}iS1?@21l7*xaQm7GP8Bk
zPS8cs-@dmTt<`(`68e7e>gxXaQ?dwMq?2{Efx*04!%mhdY$3KdQVRK0Ye+M%Qs{7F
zOiB05N<&eVOY;?`g*Ov*p&$(C9F)(LQ2~_%uM_i5gky6PWn^QCadDXzq6=iCcRJ13
z8euW_GBe9IZc@FgAfX2j)RPi+1Pg6VWiYsABmamzraHOP(D7utkR@i_C5|uLFku5F
z1<9}#?RMl8a8C9Qi-TFJ((V?@?do_<?5f~2z%Td@wKWSUTL}^5E1c&1{5;K<cJNmV
ze^G<y+co&0*<E1CRcY%2Z2C9#cUvpBwsl6vZ5QC!PTiD7L&q1ku86K>TDt1zlgVU?
z|HZa6GYB;{MdhY{oXLVSUeHZhGLud6Za5(l27@O%NM@<)43@FCd#*PS>bx}ULgsy;
zZPzJ|xF!CqVQ_fzi(PmlCrz5i>(Xx0dNT)4aNxJRGFEUdUFBF8e5^<bWiMU`T3BiP
z4O5{!3Qx*Pon%IrIlL}8SU&bm3J0u2rQEMP`vaOA`ME=If_S{vcZP^^rs4ziSOM<~
z>3|4Vkw%A?7~ZgF0-G`*FJ&Xqn<8t5c@x7Yu$uNJO@ZIZh`m8q1F<c;b73U(7tbTO
zj>0-K*=@49Sgwd*2ijvqygJ7ScIlw%-|IBKg`x=e8o4&oDbv-u>K$=HKEbrCU!*z3
z50=ZqbOdjiEEf*vh%xhN?aC>pOdF{SQ+axBMBGX0cm*QBL1z~B9X&4VoRk>CPdUDM
ztMkjtI&{FqE6if23eqB&74s*GavS;ez?n>Y^NL}XWXP}UJg33U(TEGALR~sUY9Xv3
z)Z9+g3)sEbCh@o`5j{jRBvkNIiuiXazOq%bMZJ+Du{n^_Y&MPz#8MO{@n;+J3a#E{
zCa#XyPEZ6WChg)#8TmWwFS!<mGOjWZ;>~k5lr<iZHvW32KyLQgJ62yuUmmDenci(h
zVNRaZ`EW3p&*#;y@cw)-P^94C4ZHsDmELNI)BDCrZnm%R{ABno#>p!hH(A-ro_y7W
zM{5yOC_H|Jfz66lT4n8$JdYop$e{jCaR&1^8Pbc=R5iH3V+a31^!lUJV1H$x^Zy@C
z^6manz71!IqKE}`sdL~^fpkS?cWnO96A1NJ2gW$8HEY+Jg|)Di&0znw^hkgKbGv0l
zK-8lOW}Za*1>z>DqIausr16KAfuc7-m$3!{9)U%Im!$PeoXGDrR!f)&zz8cU`@9XH
zr3%LZXw-0yJeZ9;0Uk{6zz*Uw0dwa)88$I@sjVG5cE*lLB41)%Xo25w2DEx*^v1Cv
z3T%<(Pss-5<C*&BfBujE{FwH&IlM4AK(hL^$=T%DA(Fc(Gyx|%W>Uw@5tHAgrOlZg
z?5&vz8_O?4Dgi5fudaEM_v$U-26jbBg0BFc&>1+I($Lo*FvZa*`detgY4v{aK9Yao
z?}xwk9%Hh)k*y#7eDZ)#8a;|4w}vN7qHWk_h&`|QnQESm)x4h0)j$91ztwz+5AW4q
zZTQb4)mizpS@|@IaI9!aOGJ=O1c5~xQ{q*f4#WAziXW+;uExZz$_OvZ8meI`7xwr&
z9lpQQS+mob?6e|au*+jw`$-xlU?VRE6I&79z^n0*EGjI1WQ)hm7LR3%4X{?)aw=-%
zOMAZPzf>n=s5Bj(e@c2X+}rE)Yit(Kq<WSJxbPZ4w81PRH5z%DjYc95j!gMZ8JRHY
zj5)=a(qyUOK{qWeECr4zr{Bz)$1{H1i6Lx5H%H`fJQ)4{53_dcER5~OB(KDrTz6pz
zLB%Gohobqj03jf_$F^oDgq%EKGhbx@&zU;wFgHUUNO%s;ZL_I!iu}(G`Edq*uuHfJ
z8o&p6^k|0fGy2{kcHAfNhO;{6NSnl}Ya;s3O!UtukZKx3x<kp)k5R*k>bA9Db_}Bt
z+$r4Nsj3k(+-TIL`7z6ob-*=>%j?4@d7`l9M`>dJC2)!Zj@Kgga{J~z7(BZ(<&GSu
z_pIbDy}AVqgOsA3F;P!L(S`CW!_H7frlqo5@Q==>c<^!UdGv=_X`wPRoNb16HYrDo
zF4!-0wH~Sy_@3`*wLeYgtfFH@Yf!BSJ8y_DlvHtk2fQo(435PDouwRKw122>mNrXF
zd7Pks^`MFgl7T(rIDzZ?PM#Ab6U8wzmGrv_XF&QcB^}}b%z|rSJA-;cw1rKf<D?uq
z<LGBd0L=D@0G^97UZ-SRK(XWpUgjP4s}q`P1njB#1}VyXh(R5pkPHIjC>;dJqD5X<
z6@g4l@wz~qbTBLMtj3W`)jRB16j#1S8SMf;(aP*|B|Jn1qjTm6a4M+MF|5Q%hH1!`
z8GwRH@*EJ0U;vXCtK5o9<4;HYm9X%dBrq5}ny5=C2(8}XAoBttTe5-Dv;MRh%f?Vj
z-s;uHeU9Ed@K1&~k){9-(BdfY@UEc!7tkK6e4Jr>R<sNY?2v6_9bZ=<DI0=Iexb?W
zjPz1h54r3?#-6k~LAjXZm5igLoI#vw^ritS%(jb8X*FiHaIVFWdn~yNX>d^loq@iw
z2Z+4JP1F_Z6+A=h4mccyYNs4+L#d%JX0Q;D(C!*lU6#gVyD^t!gi&nHDk=4{3WW=Z
zZ^H!MrJA{Q!>{2!;TSi^CHKvY$FSf8%=Qv0u<|VdKU%HlX~y(u*LWDlvmGZD<ORl*
z76+v>^vsDc=^ZJ3<HB<GQZfMfs?Ocg8!`T@(?XWil^+7>cI;^~csx-r$)JIzHVd98
ziDoleY9S>5oNDI@84*(5alr9L;#WASR|`44m4i|yASi>}(Y4(eG7%&`w;fmPW5r&4
z;azrIRB&tJ*jguW)mS`rHlqS0ML@1PkhN<?xZZ5lia570OR~Xut#f1#B!GB*beBor
z0rFD5NMOXJkbkBE!LC^?6cqGwNiKv%!g0`K&P+Oi^OSArB1y#YG=4q6S0rtfEd<E;
z^2Pxd1d<{ut1BdyP^59sID?Pc!)>1c+c+2yTjW^dy@<@q_{$F_ccJ6k)=t6^KDyBZ
zf$uGxiAeJq*w<-`?I-Hy)fa=1NUK0aY`B1Q?pf$F&n8YB>Khbhkx}&x*zz51C9zhy
z4METOcH`~cl=DszO~SdWIEz&U)sKF<YOkC~1M)TkU0zKupYkWVNoj9~CSGOEq=rVx
zU4!G;nHM69rH5B?(L#VhZ*YE>`O6W^Y4XmMlr~Evh%N`qI@sD4lIRTDM;O5gs9`M0
zMXzO>>rOb?WQy9Hf^N^CFzz7tb5^BGNmMgIT5MZ%D6p)u04{W%gWPJ|R5;x&xv(`e
zmk6NYEAl6$W?Te0-nfsXbqGg^6+wbv@)~6zi?j0JN;)<#H)kDZG6`__IKDd2qZ3BG
zI*|QnIA;GD3c!@r%_#&50>dg_QuA4X_cZ=noac!4!l6=im5Qs~z|ePy-oboET1XXO
zSw}6g1~^7bUwR+f@hR0B)U4LOjb9lI{^bVd$aR@O`E+m5S)I-}@hOl3^-$mg`rJZ6
zF4i70l3@?s$Tb%U!l|Z$>ope~8I68qJVxo;X$NA4Q0wmqx?A`X6|c>y9}L_|cAUY%
z_*y#;Z-RwKSS5vEW`&#h!<^FfDyOSQ5ikz&qbKz3!8wp*QZZ*V>gelhKh+<IVx8vo
z1bG<V%VEw_e;d$KO)_|zc_uUO;cxKRURN`?kKlP(-JK*t9D&7e)9A2>UxV@1#wO`<
zN3oVGQj)*45w@fE8>;@3*@ESwIG=-he{EELK;I*t&jlhT`e?8Ufw+AFUe*UNxQl<i
zjtDSTBe{SXHL;!}RfUvu#kV{@9K^Oru`v{hufO!2O%nij^5q;RO<YS0Lj!!fVAlqt
z;0@M*e_Spet2j$x`J>TmakIYzTbVfT9!4V}*?VCYXS!SlX!7OJ2Z7-W4}=K^@0p;O
zl54>mbGZS8ndF7{0L%}d;<G^?!iLC5-5-8!08PFqYbxa@-0LuA-&q3{AY0Dp^RNep
zu?4}(aAPXif!b0e;z9w^T(Zflr_cDln$W`y_ot*W^`0;yC1?^t5duU!{o`y^gB&;I
zWx%7m8O@yOwCnq`6!^Z=P0}Ncbzy;Yg?en%CM`?L#e`fCk5#W;OV+tCUI9!ZIELu)
zOFg7?5PZ*tO!kl;FR`EaQawVl+@>BB&ARaYtby<0?O<?e^E}+!b&Q)YC-|m9Jz`#;
zN(pJj<@v(8l;v9UHRh)j7U8D3xZ{l$u8yvI)2b4G&v26V32IW*ZXIsfO?OK&WLg_9
zCED6nmB@)OAoXRbRZ2?Em`yFIBT3q72ykWN7O;Xat}xI&H?&U(xj8^`e7eW8Mp44^
zuA&fwX*MS!tQajT!9#Muq1!^Vc0~pLw31TQiZ9Vfkr;1wQ!9zNcu&fN<yhZ2Sn$2+
zpn<ZzE{ET?gxf3N-czxAb6+M*XBHIO<<OY=09XYQOupFHH-Dw%dw7IZ_mu%}e*Cyr
zlE|0oswVR69^5$>A$o;neWVa5YRkm2s<oMsl%%jh&~4XfXm8=Mpa`;@MgNM1O_ElI
zyQW*too<>Xyf?m=7tq6U*Tj=~E2{H3pZ{!z5H;=ij>r`zPM2vMF=`NY+?pNs|Dos5
zNM9v{)2*K)+W10i`W<`|EhHoVM5P@BdoFs-38uDyOER*rRmV^4W7bc?s(o#M^YU;L
zPH|IE-$TnCNK<;)#`O2OUhpMn3byKUk9DFl{=gkvc^P!0pSgBL`KbVtRPh=M1eom6
z!q@DKV{ySy0lKLnAJ`N@=A^UjspcVcbsH0>{V^g)gaBzC<r+JebbPV3>q>q3W{&{?
zKG*sVkl-gciqYtb8h&(^{=@jo*)Si}QZtz?>MRIoUp?trT$d$Z2RG~?KijsAhLUGb
z=^=(|BWtqb-s<c&<W*4eCgR8i!~GWifZs<^lR*n!3Vj5_Anp!e?_0I&xK>WOydxOV
zI-@r9j4C@4|J~Mb)f>yrcTG_9kbu1fy9O?K?l}jF{Gz(*BKEDPff#i{t_~soPG{gC
zl>_)C3Ai*%Knl7O^0zTJO{XRw+<VBMPd>S)vo~+p5$;4a%~6Da&dJf=%!xCR%>{*u
z7(YQUaT+Hg6cSOphs4sd&Yf2bkpXQomy%F$vY8KBqQ;X$S|T_waWemRq8J*?xjnlm
zX$Q%0n3OMc=38TmJy1y%sc-|zIS8SE9+03G;7(r{Pw%vDOQe;e9zCXb$%(a=#XIF)
zxxH+m2)6%)lE<yhACmdUhVI82@I<Jbf`6}Fjy2*!-8AOG7ax_qHTm&E(Bs+GEY{Zc
zavho!@uZ=0@JNYt)y&_%xO)D4_U7eZp8a(mOvM>^&1&Kihad9x<?Fv(zq+`5CRGRj
z^rzR)=ju+EsigAM*^{<@of(Gna0h#0DnKdMcRAu9KGpHuE9>BTkg2^$^K_%Lo(CKZ
zE_{IM-1zr!K}PJ7)P(E8+zv*s2HpX^ap!7L=YuqlGh{9pp;V-n)6r;P-uXxB=H~$w
zCjS=raZa6rhM&FmL8SZan)w`_3_3Uii<1G;Uj^^x%ui+Zfqrlr1&%yn9Xsc#(i}#9
zzpXPgFhz<RzXHn;Ds1A1gC1}6hf5yaDxsyIS#xIF6ij+RwY?SFwei|tG2k#2P%u?x
z0#>5qO}`Ut)Uhqjg95bbn{z09gzGAuIiCVI_U$v@b79v3IB8OCWZ%IMKP89Z$ldq3
zSvDWb=1qG8((JK>nS-BFG$x*<?M~B2vpYvW0g0M%y}lEw@a0Dn_AijHGo|^FKtfTN
z5l=5WZ3|xF*n@xQ<4-QKyg-0qcqJkUWvnJ`8`*NiPc@`iZhRlstJi8_!R2kJQxyaV
zIfbXvUwau(mlu2qO4=;NgUR6cAUC+*5Cl(HIS)I#Fb$hY&2-4gGY*jH9TzC}!3Tkt
zLkRT2iqGRv@%hB2Ku(hAw;MIrY{GQ~Q=jM^g=+li9-&ujdG$IX*V0tdyv~oBCbSVZ
z5|6po_e<z_Zcu>FL?vf#>MkO6mSS95N5#^tN-3Lcf0ae8{dw%`&c2@VxT&Y?^~AM3
zkAuM#)fB*qelvyib8^zx$*TLAtZ$q1v5T)+U?+0LDJg>#NDiw9@MT9?sn&4Ausudg
z&GJ&j5f^uI3>TaYy|)WER@8{@z=+^h(!NS6tqsJ1AlY^^`pJRZ7zH@bfwf^68~Y!9
zt#Y<n&sJH_O-Px`@+mZ_w$}i^Xp_XfX`i)Xf!^h8U*yU_Tjwsi^1ZG;ZE6aZ(pk?6
zlzd>jqot3nWxP%TA9lp-WoYvwlEXA^{B3EbORX?&KOJn-yiif$Rv0b?_-2%DA%G;>
zgBZR@@~X%D<8X$+OCzKxxQ2-BB?{INwYMM<YgMEf^@QO=srxl0m-}?1e`UvUryWJk
z^yX79?M?!+Ep$a5lL|v#cGT)E_dZlg+<nQGPhUpMcD_M7G(d}A<sXAcpkeE!Zs@jl
zAT7`y9=!Lmk=Bj2^ZBr^Ioj`X_WT0M>VC!-I=%A$Xkh!j_wGGAxAxzAD(UQN3)dc+
z^HB{)J*0}E3ju<5B>=@Y30@Sv+~na$i#}~3D(}<~<!<lF*Zli|dE6qhR&6{-rR1<@
zzTKP4c1FKmsgJmmw%`AwWh2wG>H#$=>^&PdSE`>>Na|OL?)MDc0uYyDY>9V;%^6<_
z2RL0jc5v=>-(R{HJQ}xkz@2;Nc6r~HUs|^HZKl$2y|9s&-tit%dCscv6Z^Y>(wOaS
zVXeKOqiDUq`2OYfXcSNk*nB@{WpeX7uI{naN#*-!2!}MC!>zlP3JoEG+WBAd2C|23
z1+M!$Fb*eSfe?b_cM=lqnq&7x?}FePem!(RrCT7SKx@O(p<Dy*^Jj0Nk>^@FU$BW!
zSoo%SAs3v6D}VR0kV4@dHNY(eI7maV?s2R|+fCaF=gjw(>qr$3D^cvt_(w6e*r|~F
z`39H$a>4h3A>)He!uJ7(`I}{l9fGepfE__?bl!p#5g~0yxU*Y7YJ+OGh$Q6pP);x~
z0%F0n79l!l4_77!$KNY{30WViU-8z>ElfA*J(I>CWN}4%HFv}yeew2-S4^6ezPWOt
ztC6M^1ZmO!&rkXVmCr1X>=iluc|Wtx;b-&XP_^LpU|CPKwh<l>QC}^m0-HeGSN?g3
z4WSgHIC_63Sv2*_)5P_hJv^J3IMb!+gIXb@>6E697?T7D+aqb-OOnRwSQQ9~WTlA(
z6dx0+C+N&4ztoN(zx40cNpkva?=76}Z(4c^KXQ6y%E&i4x2?@yCpk3}aJc{5_S|f<
zP@$k4w$p$<rjCv=@03uh5^XQ;NebxNb!rP-iuKp)uz9+i<Nr^LsW;Q6tyCK5xf`09
zSnc4}*J)cw^%Yny8t)2!q22p=0rV~B$_`ddFo2UTfxc1^_CNl6c*iNRc$IFiiX)wn
z{zlIKrNc=Sqiq$JUo8JGdw<s7#&zwBqR$JTq5|cF1cOGDY$t{#tx&BQt6@aSO2VZL
z6o3L*7J!0L04dng`R$jppYGE+_wn4<{lV5Jx${4o*;EzS$VzKxuWb=kvt~cX9PNKF
zyo0Wpz;7U!f<mcM_BOT_dJ5>q4Mm&5S5Z(1q`CF_GWlNAMl$NfW(yL_ucDxILR3U@
zWBSaAlARldwhYbXm>Ig<d)MLb+S6ni6M>?3ol``(MIrPA=b)Carqg(_?nYZ%HM4u6
z)9FFK*o|BpHQrxD#gcc+MNC66zkmEt+b}pLf`~clA>zzbk3ev9#JA{(7fVMgZ%DoT
zY=}ZPu;eG+3sLTwV~|ct^<PkRHqV)ckXIgi`7TDdbid-M2XKVB@3b~U92UtW#zm{w
zldR4n%a#&+LdsbZC)i!zkj31v6Z83m9K#^BnNmAD!doxXX(HS<y*t-n2y$**aB!~O
z=G7ioIUkbbUCMA8yo)g$voo_5jxD=h%*=&s{ruQDl5I9}Xqa!D=E>v?z%qx}r4m|W
z7P*eQtF*7`Z~7Z3X+a&Jj>L4(9QVeXy+koBi-y@Z)a{X~rn!6?91iO_iV)Xqp=wnM
zda*v9=uWZoedb6(pI8C@4j>ZL9U{2o$hUw(SmMY?E!DDAl4lyHM|HnMHs6D4zBfek
zz0%D0N-#}VTmDvTnK{3MG2V;r&<4H-<Md-5m!;a|zB)Qf^9)CleFe!ymz9U&z{z%Q
zyMrtd#w=tB3k&L9K8zP+qQ{Vp>;e@?HtQJz98bo*Y}_a7GF-t^(#m3n=BgAOi<*o_
zZ!s_^yn`9mfP&2oZJ^FHneKrvyKfpgOS45cI@>Mnlz<oiq8*9<tZHv+;*t9)H7cRr
z&Fw@oR?IT>rDfk(F=NVsWnU>ViaXin;N{glV4>V5_Fj~NxuI)ISa?L{Ilf|y3W-lU
z!UJk7Gs_@YdkT;)hkkhhEXDYhK;kGG9}2;lqJFW=^L(<(LxI_ID+&1iFbYiOz|P4@
zMj?};{MB<5UrVvOQ57hjtVRR^8i5g8oTpZ(#34FCCKEmddE{HGs4IetMg|nM+n^#-
zx%Cs~iYw$toi<fLv!j>lvNJhIz%ii^3)Tn&%|WmwT7-$_nLI8=O%N-QRTRKgkSZqC
zXb@6=1*-)}JEJ(D0x+O~Hx4OYc-cw2`qNopG_z-VKngswXk+5`$JVFxzyIg|b6aDK
z%+0%Iv&w_hEX&!NMg?m%AGU&nJp~eIDd&hW0qpHe#wp-2S>x<DNw^#HIQ7UKe{0r)
zFH(niVW{r}8;$1!f14ZTl<=x3=8`&r!#YR;s;)F=8h@891o4hLj=SMJp<w^T8Ixa`
z214F2r>lT)AonmK>u9tVs-iF};3!Q}tZIOgpa^-^9nkG4LQ0z@MT`XhwwL%a->k;5
z*mBl6^1c{a)Fh;W5&4CX`EQd)Z4r*ZZ`uo>az5Y{QB>-z#$jHVT|OdZdtf%VJ1x3Z
zL>2IZr9J|}<b+}nGP2NGrtB(4!$WnZhFbI%{r5Kg_cPibhJmrLVz{ai<i$SZ#PIS=
z2Z3a~g}T88sdnAPCnsvJ<qjy?%QjU-*AxXfL39b=7Rm-?4Hm@=s@*VH13t<x6W%NV
z0-uNclTskZN5K4~J^9d7vd_`15))9XakNe!54+HGnPVzIJ<OWQ)&OvbpihBt1D}ZQ
z3i5E5O1=9IKLMM-pC|)!!Ypl%=#lBz&7O3lN8n}jIACBFhD$K_$ENSU=#l<%!`J2v
zD^J_Bof6@`;06X${elB<V}E|c&cgITwdx^&RHs89bmfcAszahpXS(h=h$(Y|jFgpw
z=KbpK-RQGhjp#=b;9$@_r#tWwLLj#LkKWCh;r#3tj2p}7*FXO8@Wu0XZf@JzNjhFj
zJ&g~20;T%k0Y>qguYB~YXL`W6^ZBOU<B!4s_-8NP{Az$#SOI^~%nL&1z?DOXV!WC$
znSe*nHV<7ICO{Xu0{vdUPA4P7%a5=<?S?eB*=kO;LTpvzWDci)OTxXSqa!?|n57ue
za+AbG$tMY0Z+7}tvW1!(5{n^kC+b1b-|-6I0GRDWa@*B*z>a$(lLUGLRVfYh$O_{!
z6x$SEBQgvt>RF@&u3e<OJTdphsPHMVs(_Z%KD&>p3+7up#TsQ}?#Mw3YD)B*oiju+
z6MJg_ct*Vdfbpp@46KbL+)JSV%pH=K?P^BCO|7QXhk)|bEt0$wdq<BBj~+ejy?pij
z`QH7fkNUx#qMnBet4MxgKfX1G{X^$REZc{^A{S_5thjI%2TK4#U1)#Pv9&lY6GWR-
z?=ae3)4~y>J3!1l0Ptexiy198s}HZffi6Es0yW3v_AYK+;Gne4<h9F_`m3*S?vl0<
z!RnjFUH1_2%tp8?b+^d{YM5+y{s)))uTG~K)$2rrg#Iw19m~9C84ju3HmYexKYnNg
zgy~>yuEZJ5#GL=UaTy(DTw|`k23?%Y11s2tyxw)~%Xi!L@))T<^qCQWlf}}04caW#
zc_fv)y+4y)H#co?Tsf?5;i!*{76QBYxL#h3`kTHu-FUa|DwhyLMfNl+zl`5uca!N`
zA)uq}ey7tX1<sM#Nr$4@?%&{N+R<b=Y&WD8-L(=~%AkFuAwpy$>4R7kGzH$W9#un|
zAq0xD$hAe=oSTsgl%n%^!g5F`NxU!(d&~wT0YjIfb%LN}!(vJshQ%DjqZ2E%OGjbR
zkf2p~6f=UNHEMeg_2|nf2thK%bBM;0S~H2@Bv4q`(unli(1bLjF$KA0WCEBG7?xmY
zr!yOqWM~&&w+*`{Lq)L9A{m>ZpW?U+l@NO~SJbBMbNvYVCf32u=|a{E=%Z%4bv0Ow
z9pB9^f-de9F%O1bv923)BhaZlJo<y;Y6T-z`pOJBL-Dc|lO<C^IAEt$h*5?R=dyP`
zRp4#Yhagea9&6`wW-e)WsI<luSVo8C<X-z+tqr6}7lika>jB4YW!dRTdVNkB-`pU1
z0my^|a!m;DW70=Gc)H)<vu5QP^Qb9$z&;1-b8scRnDAjd6p5)q0m0B;q~(FfPHhPl
zs}U6?asU@MZ3j3Dr3_SpixRk&Wq4|~*uso@jLXFQ0be8vcNO~^sl=n-)Q%-Qz*>>h
zBoE5c2_Z*O-9uOajH(oAtY+<fhIx+F2P*Y`n>yM2C+vMB>^+l}SF>~sBSRlc-H$p^
z-xQ;N4cFW^8(}cy)yM^mjyDjlS7jJ;r+A017J{z(N`pqB3>H>sm221p86)=&_TdU6
zXr=jSVpZa~_#p$|I|7>y_wo6PM5O+A-}jmR5^|?)5FnGHCni@i=YbZvAM~bw2ZOlB
zbnv*<`pz7@H-ON5N}HaKXY`sp&-txskUL-`>loZv(gH=NtBItDpkA<cqNVq1KQLF{
za^0FQ*nfpBJ{#MyCR@xBJ4xk9*bbx{ZKvICQzQ4YYzYvTd2TZl=taY^n`#c`#`^;;
z566%xVb{mhxp<PsxuE(J-$35i@Vuidk2e6=Kd@V%pj~D8;HZMa_}AQ4_(yH_{@*Qp
zi3iGq_K9g^3kcOg2dB^EsV`hXpKZkUXOoC9<_}D3#52>6wuu+(gZiK<piBdMi2C*x
z84}DNX39v<!24ayuzUzeW9Rr!(ITUTT#(LUH8mLyW)SD6HQ%DcJBydptjTxZM_cXV
zH*I{eB?Yxktl_wWes(12D3YPznH088RM=VL&S=1@R=<JvSv*-KZJ>85FQ`@~P+Ad-
z{3nr~o80gdB;zbkH)boav@)`^GTL8~*^$44vMjNc85v_F{!^SsW5xm2)0oW3?#>8j
z5B-Yne7`cp#vL8U+6t6*<yUoZK%*?$_X1$d9{kUGP>AyaES&RO{-5=58sk}ho-DY{
zAW4Oej8mc<d*SP%+VYV;1(Qeoyl~f+6k&QBH7!%>O%-gnc`n%>;Hm&R_~;R<gxSwd
zh`5Dr2brb&Zf{@XRluE~5ojmGZ(+0`bF`GFRSol!nE$?W=}8!&O9GWEDt35MCt5GX
z%tWg>d;BjGdq?XKU1;cFO`!)efa3><#C^B?oeK&b$`gczHeez;Ng3zb`jMvAL(gXn
zc(plkhIxJ5_bb{IUutfm79EW0_AmRaAs#zVE0vUH@;)MRC~)0jV!pTU8GkJ6p$8lJ
z5c<5MN`X*LYyIrO0jvKP9@n-vpMMP324^mCZsv2s_@q0O_6R-jhz_m-CXBih%x)%*
zV3~<X!liPDF93hSz?CmN`Dj~--N7n96#z%-QuvzzLrSb5sWRE|)w<5wswFB*dRx^v
zm5A=(UhUC6>}b{A;$$U=(eLdKc4dF)lD9<F{|ng{pMTl-KV}SUPrwS0_bgNm4*Zf?
z00hdLj?-m+BS=xO+opN6#j)oo9B>)++Ys~Nx<`!4=IIE^+2w(~u|-LjP|$If>QG@N
zWiJ@Xa*|`xSNk;>zM1zTp7!t*P38@OlC$2^biMi?R(0DHQbhy{4xnY{=?{c<ogu5y
z7`%wEt!@-_uwNP(%h16?bKaNa?Dp+SEv|=T9b}pMOio;__E=%3Pz5U?;ipm6G5AJu
z7%FPYD|1e9wcMA}4D#3{6Z_!nWN=7akKWDzQX_3+7Yq{^IPgO)!u;mHC|rmCoMkPT
zxcf4gC&`Q*00;w*d|hib`>@}}V}=Le^-_jFRX8F$GP0>5|A0hyr|wve-HBA#g3}E=
zC;JrGQG800jckw7%#})uS~z2?>}pQel5Fp{)Z-=y(d8AHV+b3SX1md!?CVX9`189?
za-PZ2V%;*+AV1hd+oCKt)(!J%auN^MI;7gc0#b~e+m#4v^0LXWjpwnDE<ZvRgR;FQ
zK%TxRTRoZ!x9Jf;kNIrFnCD{ga}SWwt}fr{1?$;0_Oa~}XK3T8(%KF4zW3zO^P@wv
zsNxa+aPP?czxz)g@iWPwrpyO*My_VH@6km;#E!X4>cw|??au1`$@}p=2fF>9oO0eP
z@UM{p!Ym*U%`z`pr~VO_;mCdMRTbWYwoKm<xJkkWRbqYFttOs<{X3>@$F*#L^xlQn
zB=|APF=E!hd`BJW@n@b(i|~Dnm;tVhuU(7KWV@CV7IAd=r>E4V6b~4y6gu;n)v$n2
zN)|el%{jeDJ75Gx-ZVVbYu-K7%f5unQkD+%8xh>u_?~+Lf}B2Fxi9p7z3zQ`^~+X7
zcJsjtR!*1`NxBL$goyIOoZ;`jZxn9Yi$^AugzDtuRQs*p`fm%pDg8E`dk&q9#?C2p
z0x6mO-v>A_@2_7w^aQr{xnv>ye!{;=KD8w<Q)Vkq*2~ne<eQ2^S)6n6Yj#HY3r$QF
z^BJnu9uayXcmUnS=3t#b!2v8lH{+xSXQk+7xzv`%sjwR_x?@IhDbIJw2E4}J<85c!
z?DN!tsJOualu*VjA(ESpgx|W^0}HcPme5dM<)~bNU9B9=RgTpKN6kntEkg6^yPo&m
z@Ar<_Ql>pl+lE=$mixA=U~HwH_ggtC&r^UH^|kU~j^upXAlfk$AZpqQPQ6SYbO4py
z_5C<chupR9#k;J2_~_}Q2S?FP^!VkAXX1bTbpP4@QM7xr&YSL5JNgrE>?jB~p;|7f
zzcusDr8f59#jEE>+dB;miX#=Mam2+fb7>UufHYSCd`+TY)R(pCS`w$M?M7V{Wb$Oo
z9_d3(%@O-|j1d&xtt~TsC^`AO0_TPmK_J^Q8)g$J&S-e}CNEq+!XAkM0d{@Os!B-$
z4X;Dian@3A&&}a$Mi1{N@frM}<|liwe~LAbTyh1$5>$mZASunf_BPKD_3x_J+TZN(
ze#%qJB8DDU|HlCg&La0GGw8_NL1o_!$CZ5k+3nk{&p*F;vmv#TxT3ZCKklat=ZrLG
z{>k6H^}F^>^Z#}W$KNLcE$ERA^D*jEU%ej>Y~*gFkG;wlW~s9&foC#5J8Jm!S4|SI
zDDHy}&;`MszTuvY?4I3*ZJ|ZfMz}8`Jq^WU@GdVh2ImrOr0yd&;!Ig9I{>7KP}7YO
z0OkTfVm_K$47|DSDN5@r9YE956`QN|fJh<_;ZCD%!nx_sPkP#ZUo==*MzTB|CdvSJ
zMP`T&L<Ki=h-j*Sv&06ni`>PAA>U!!(_nsUwY>_C7tRhi-qDuhP{8z~Pu+NTaBFyb
z^jY%x_=`V;4H2ue^|2pY61-J2LLav6gXLoK+XoC;kj+IpQD9tl0riNKQYI%!yTy*!
zwT%qd!jt<74(hLP?2eH7<dvN+;}t^{1WbQ_PHc#LUW9<TfXGp+*PwC#zI=*zTbMtu
z!l!uT)Ky-hs;V^RmHa5O>T2IeT{pE-qO~RJ>UI575!nMTsfG&Myg}u7C=7sD#|0B`
zXXj};TfN)a>B3OCv?-I_8E*0SeJVVShc6DP@L-Xg+tQPCF#o<^!Rz^lO%I9%B2`cQ
ztFUVrie>m7xIJ@Cu8)qM&-OV^i=94j_#Rke`oU@ehpUe`T-QEByh+#(LCo+Qv;@x2
zr*Jr+U!z^+<UVmMbQ030Zug1YVHXzI$y~NKJ2ooF8EuK&e#{#U-L9mRKAA1F?37N)
zna0a~oZ2ZlYuWF)y5HbX@Pi}I2?Jbs8MWTY#YK~g^{{uaWQdb&3dR#h01)3AQ`}Wc
z)Xz|OlLr|`xe^S0&b%<Iuo*1D#)KL1X1tovM022-IJ|m=o6%W3Nk{w&I(TAnWH6+j
z(ggA3rQ2acgO^oGDobbNT_l!zN?Jh{R?4&Bo6VCmz%;lYtp0LZcz?X!g{eRp&XOL?
z#RBT@!d#FsPh;reBp08f_w9(`iv$utRr?%2bdr3<aHo1SsELIU+D0vN@6Q9cZ*Llr
zG!dR06iC(#XCr5i4SlCRjs=2ZhI0&pZf5ijJ!0F}8+wZKLibd32mj@#VoH$fo?;o&
z*;)2h5j`Ybc^vh3dgSL$4ww^)HSrgK90ErPLNl3#KA*B1MpUlT5B*2LwGGbfbKk{G
zY8OY{`#jvd6uIKbhA+Uic9zJF&5I;qo*YUgj_@54*Cj=x_zkd+9eH+`by$+^^#&`h
zNRXD)vJXj-zO!R5zXqaeoFzv#8aWm4tr%gR*=OAjW<t3JvT8FbgEjFr;!xpfi{QHF
zbR@1toJq<;$=ffC<0KWpCj;J$((!`QJ4u$PlNJ09B$GGf49qJBQ5|5TVVe3Co32lj
zwt&xmt}F^nm>{W!qS~Q$xj6Cz;%MH!dCQz<Hf7{d-=z(d8MM<&>*}LqugJ>!HW4Gc
zZZR{tZz*s}Z0{>G=M%Folo;^qqoV_}Q`|%^7x5T(dDy6z;I%aI$DZ%T_1z1Qvd|1)
z4is@-61X;x84F5d5H4ZPuWHu*3IE%`y8jf8{kp1*BE4gFgECWjjMyexZXrL!rMgIF
z+R+7?iPHXNwf+huPqsJhhfI-Sfn$Y|Uun8@9Aa;?Y~{gPw>LJeM&ROFQ<$YqKqM#h
zD|TO^N3UK!RR>VPreK#m!!PXZvkk97+{3AG5@y$%E3q9_=uP$hx#1xb@~pWl34G5V
zSJS!6V5b>85jN#+E?LO2MpWgUWH})R7I(L3dU-HQ;r+xoPekNv!%?9YzPh5{{3Z%|
zb>P<L;#CNH>DK(Sn>TN6=(iQ0U%Go=5?(S0hM)mUURdFItS!(HG~~B+cLBH!4&-vI
z0{fn!AS>(?eMIsnM26j65#|nqb&!Aie!yH9THT(Lb3uDamhtvrHPb&&GWsV!RlbAV
z^xh_nDZ$BuOn+dp;xLK6b0jl0o9SIy9|H;j>PB1K?pEJICYq1CMl8)&i!*gsa|{#e
zf1JJ}zdh!ZWZ6mM?-t$+<K?5hhtD3tHf{P${s`i{+ecVRFapXgj7aOYFh2HfND1w|
zDNLN1b-ot3X^vwie;T<CIJH-vS&utH=GS}+2ymG#B+ONNUy&tT#t<;NvMXdO_DK;%
zn^GBF-8S$YQc<D$hO){<0+iMZ+!r{Gm2<DQX5YTu(*m5m*=&)K8I8{**zLp-V3b*u
zN{uu#tp=HFa?jOMr_R&YRY!e_%dYxH`xKX%(C!gbQRF^w2mig-e{aqsxt5c*m~2+8
zAvF8;4_I8%Q_-c>|3j-U*-1y~tbM7$%*+x9f;#CJO=R0M@Ruj-W}|YRGnKV{T}~C*
ze;I6~>a{GzqP59EhbCa_$NIZ^H~Rd;76+LGvSYMe*gaBXqq-dc&GGjX`+ZS+zvK3b
z)-v`C*i^gh?hc|MGOBZg`eya+?GIaa+R12Ebo6E*m5s-kgI6y+zeh^yjPL<pQgT%0
z=rwn1aBclI`S>GVgfBi7*#y+gWpt*9oZuoL!kAJn;MKgWVkjM3e_&TRw1=R1-U$%5
zqHy2J_Y_Z9Ac5@*4HQ9dDp>%x4d7~4@78bKy!A!v=C1j_`Uf#^BA<~j+uFp!lC6+L
zu2=h_G_bc+F876hRewc+N>!VnRBJX%S~<B1u4Xp#l=80gcuf+XQ%pVbLWM*0m5<U>
zZN_P-`OICb*wm&s)^CcC6g`+Qu_XiLrFLw6{Wn}WJzIco913XhBL!>6Ha|;s4Yzu>
z0M)?hU&3fZ#q?=vJQ#_DwTgVU1vpsnXdR2O+7VbL3q;15>9fT&=ldCl1EE(n&Jep9
zz8%D#o+`hfsVh0q65ItT+9nBNw?Hnr>U35M-0eLC>Sdlx#_ZI%G>m8w|CAtAb3wjj
zh#L`xhS_8i4>CdhA<-2FgdN*`%y<_<KbJIfFph2$#y|+1D6x+=9MufD=7D=QJm~41
zfv$54%fh{?9f#d=Szh@#5abDmY8s{`o@KL?Wo<3e;{p4ivXn;qGftyjNYmi3cN;aD
z0f8YXX5GPBGo)VtrZ2Aax%HV?)?EJX>-Vvg>RUk8NChDg>w*Twn0oUGfZ~(od6M`j
zstGVsd88b<&w;;vZ>92nZCgeuMcUDQu#cQ2_uR{k7YzArvKDkqvsBO06Hyv7c304W
zPN6+N=JLi=zqBa7it!F_X!jMTNQ%BT9ZJPZQ8@aTPoBlIu&@)F1UA4m3=poGHWbHP
z%83M2dPISInQUqlr^ThSs5UI8+a=?aTHir~+e+G0rR&~;juc)~b>)K{)*5~iZ5Iec
zqlB^R6CH(Ol5<b8iD3+}DQ!p=0qM`ld;;B?p7vS=4j2=zRnCIvFe6OMitLmU4S2!K
z)M!^;G&vE;f`H31|8j0L%B}~fB)(=rg}iJ^P%!2-ORW5q8wjh)Nkd8Ov6+pjAi&xD
z0#xH>@?G<R=CFTAAP1i&k)t#-HuY0=>O<1JoXoO?9%TriVgz~MZ_^8IV8)9g6y=ep
z#}7^_1r->AoRWYW+;6o?Fi>_j=JYrcKhO9puJ7_4JgBqTVeoa^q1=XG*=E@{AW~yP
zln|*cnx_Iyms5^i6QtV6D3jz}8L8T`4^^cN5$f5J%0^Tbq_|dBRH0Zyl<c6kPm0>@
zIR(rAZg}feN6mF-nD7ot9beY3Fy-TTlK%td{G%rFhM<QpHR7~_e96|{d-~K*B@#sy
zo7zILgd^NIzS8JiNhNaH`@-;wgR4SO=V%7oWxk8mFcHt`=XM`rO;bQAn}%Ti?}kA4
zF}MO<0ITsheJ7WnWC5$u1xM_u14H*%H)bGg>-(d=b*7+u(#*HA2Ao7G5o}+O)EdDs
zvY?=`BfwqUNF=QV*d?En4ivMuQP#9jwNEz@ph5wg$C*L;EsvMe9DIz&EXcZg2AYyn
z5s9r&HK($<a?Icem33$5fppfLC8TB%=tp+<;jhk5;mDB?<Suz{d9x{O3)Z^NnQP8k
z^B8tB!vYQl__;{N(btdm9`*@(^?AnMa7)>|H9<6*<d#vHdSSsHT4_#Dkrn&j$}VbV
z3NO&`qPU2y@RN<{h3K1!byYR(PLT8*VpvRo+q!|}(xkcbbP;I9Ox5r$logaBvamC1
zh{sOyGS%BIkjX|(Llg;F+&{n<upqUt2Oz<hcfgdYU!k=UM^u4y=jDdWirh}Ewl@i~
z$C3KNN9OiY9zkNar$sU91qH)aQI0UR!;JhhglYJg@m*LcWuW-DH7d}BpjyqhL38^&
z;{&G)+UJaLWUeC>nm?gMo>zI@@(g=Hg+-x=1RB+aiLlkLxj*#{mm)EpBKU?-b1>Ag
zq%xAQHG~c_18AcOh5W3=6d2c_aRO|8bRI7_LWeK_2<+A~P{iwS^$CN#9lerZO$(9<
zVhZFU0NvFjA!_)c7+P%{WAs=BCP#3DtHt&{(q}A))M`6B2WC6KwV*=B0lZQY!x~+f
zqY77QQDmU3Q^hjXf|nMft0HeRFDKkyMQu`y>Z&M9raQXD6`Q$)WzW@B7NS~RNlM2h
zT!8<reMaRatqo=`$33*o(ke=p=dpVB%3@jd3|=;QsOO3kc%8XJwO5+I4O55jtENw8
z?#SbZasg)#H367aJST2z77AGn5}R3>L9xQ1R3t_&l3K`>kWwM}-U!WBgQL_LubM73
z1k;+p&}efpsr!<~5=un4P18&^O37vfz>sX1ddA7^p<(#g@eTqpcUS%V#Ckf(%<PB(
zHeJ;IviIz%XO|%7!GzKw6X=~KCE+0_CCPngCs29UuD{p5+fOLco+neRTUp|*{y5mQ
zt^!pJS?C_>KC!kb1oOpPhQcaS_$K3ExEWgnQw)Mz3ptpjByIMosX`D~oF+zofNq=B
zMmEPbsdskTDlvGfAiI`Qq;NKskb8aG_Dj)Z?DQK{*O3UWQdPydYvMVC&5Fkszp3Kg
zEMDdnkJX90;??x~WmQG__f>^YhVv4A*x5N0oGKlU;#PS@I4cJiC{tgaFK|8PB#Yrp
zgXlTl#x!CRE_O>4c)P-KfI1rthT;R?k~7GGMfDY|UjU$tfN(*ezYK<10`C<w9+YwL
zS(Wa_0ibUcp0D?f2)X_jc?I$Bc{P;YF?qmx6yK~C>ZoeTw$<2nf?iG3|5Y?cg|cub
zF=9eaY4Jn@1}VH`_VUDf!QUTTB;3a#TP#3$R$~Se68ET9smtna(q(Pb5nMy^uTGqH
zfs!Gfr#*A|<enNu)dl{n^Sh#|YNMixs>ngarnp3RK3*?@ogbu=C@tQYvZZ*bD@jFQ
z^~NCVP-FSZTDo$4<Dvz~4h2-t!H=V{uD760^H!<cx=>w(Z{2)es0VYo1-wPPNUKP7
zUrDt{C3!P#){9vk?Da<pFV?FK(!<BO;wVw~l?I7|7mkrO;@4)Ui0VtL?Yp!toIoWh
zWI|Qu&t=!NvJ`uR=`O8_W{q`d3%C)^GEO3~%!svMeHXoKN0hZhY_B9ORc%X{*oMp~
z2FYP_FPR><UrE<kl}4Zwc|1-K;rTk?H*+6gTu+&QO8`<aU~2LheBKY@yGo>+!%evX
zF@C+8;ip#<-Ibl_zoKrm6a8mYkM2bGqW4i-IU2HDVq>5nbQY^(4T29y1qIKz-xJ#y
zi?H}q)l3>T05jOa%D9{tl}EtV<7|lA#i=x;s;=O>GgDp{+&~c8*4eH0Ze6D>_hz6~
z?(%lUh#O?n0!)ybO0z$-jUKnr+pUXZ`7}nJFYFN5y;Js|py9J)qQC%}r9odu)>I`S
zst4qbiBf^C2*OJ4l)+vuTh3ieacpN<I`UfO-E<%5!fFT1ZCaWIR8Cnu!XmudxSg?Q
z&W-FaS+`cX$3rt?b>H0#w3e)bO5Oo8n7tf~6m`leA!nqJHKV3hE%B#%o=}1>F<?&C
zsO!bz#LV^&iMu5RYsr`61q@(E3+6mWeefM)zezC9sP0jY__s7a_3C3UHA=C<8UAts
z=CMJ*Q)am_f#TJHy1q>o>3Chms|*x3m)@~!1f@ohwm283mynAV=*Wy7wE8s5*x~qw
zC|hz#NklQ)>QP-O>yS!(XXgP_V0MHw?pY2$T+XK+WTjx;v)VXixoGJO-$rV28K)C?
zXk8S$gYjwwtvnteMH8vIR8WG7duK-(XbCCP&4y5ReEb#(g-y3|#PPga|KK1a{ihw;
z-Gq`&1F?I@n<;^eRxjUk!$zI>T5oTD_}VGXPKBv8O6?j3Goos6!OlWW&*HZjJ6E=~
zuqxX`v!!_Y_-x^YnKOiTsCgSt;uD^}z<LaCv>{U8vMT`rkD8LXwR9A+e$m3|tx7xX
zNkvXLk+6^T-R4}*4W19l=ss#jn=*>gi&}0DmRXq`u27(UG|NxOGGZMH=sIl!znx6<
zs^Dt5tQhD*(?`awadcW9g0({VYB=&1<QP@IdNWG4t1Pf#Sm?^oeJmY0(}&7DOVW?{
z9-rmSlCr0GkehlNEQr{D`_XShW1ArNdj=EdNoB1j#JbD?NVHtU;qumGhgqc{R6LS(
z>>>jYwoWkFK@RziS>3@|bHaFv260?Gx8Xoh11B9G1jo3?zRLtMLDr(s962--fT1Jd
z5x7JOPSXTlp%+cDmlnqs$kTZ7=RWa&1OcF?73Mu3IB(kiMfzsR;|Z_U3suhC(}zAz
z?MHQ$oL4_tPb)lgXlGo>2nGG9VFfbvBkK~ETHY@?55{z`7M08=9DQE!yb+y2*%uKz
z3O5Aujrym=RJ^S_i)#0M55KZBAWtUNNXZmccAolLR}k1Jz}p5`0;E(U44Cr<f8p%p
zgq4h%WAUO4XwflsgXyQ2w4h~f28p|I`3G~29Q96f%TZuUvk9^@UE*2Gs;z9bGxlT^
zOVWnAE~4hp=knm6aHceOC8*!>W6G8F5gy8%WQ!{Z@r)Vd(+6^7r}s+{jXA{rs*uLi
zffA-MKdyzpuZ?NUuHhGg8rvd1s&RCOyM1Mh<4+JFQwopy$&oQ7gyg6KBbnp80+8g(
zdfE3TM`4#29v~^1U|i+OatNrrRUtApyabb(YVbjs(L!gLahz|*i`EN+h^Zs}afbsH
zz>)SZSo#f>M*jD9kCKg?Hzk2B(?&g_*nC^7O)^n+P=*0kvks8c2UhgZ)pguzX||d>
z@(05WjJ&OP$NOR4-nrryzT*Dfm}lhjji`Gt*oER3tEU^;<Jh*-u7(qQP?|ft$mXud
zPdPNDf5}8vd{Tj{$txTFhHwif9P0eVbcX<1l<Y)LvlER3fZmrp*OPf`ux{aBf$N9|
z3Bt0F@0Ntz)9jo$Ox(>J@M$=|{fC?jmp1@q2Wd^RY_2#W>W*YaI^<ydQF@k+*kzbA
z8m~EzZL+K;#}q3Qkie?oqn|_!KZ4qAq&*up5@pu96cqH6;A~wz<nfb0Z(TJGk|};)
z|HKaoh!mQv$%(wsNX~#k7Xoi<8z>oRbfms$MeWF0zp*E+HrwJ)5w|vyFY3QGoNl+>
zZr4#){nw^A|9b55C>D=UwCWhCcae4^KS*zx_3{Z~!8lBi{;qeqYAs9u<zj>toz<Il
zSn+4c#1v&nt%-RCrGR-rk%!R;`b;R9>L0fHRdJv1i;w`M^~qL*ggjd>IcKG)(F7=f
zqe3}Mv<;0)DHybE!I6GNtZA&rN<*(OgUg(lH6V-F_w6~RH29?6u(3${Gpw;g2jXP4
zW3$cm?1O*wV)BrTj`BE}KYHot9^I&U0su!qxW8I^nwt4q3{NR)fyfmSp9<IuXT76X
zAz^FT-`}eik+2o@o}4U_6S~-`0E5^}xP@Gji~KPg5O-}pw#mIXU!TKmSDz^wXCd%X
z0q<+I$HJBRSV+ef51%IciykM241%vUlNYryvO!~iUnGAY&>r{^q)1b29)YxCB?U3w
zHh>7nuN@T<0VvDyDKY_2(i7_ACkFPXPJSw6f0AxOM${#~8>b?+dLh96ZNl2Q<zh7?
zq=aK|w|X`K2tx2pZo_<XfPQwX_&DKCK6RD&@*SJ|LJ5yEkX=E>lN^6nmh!lLU(Ty&
zIF!}=hKWtLaork%=L;4j8%jS&V4!F-(YUf3=Gr-WNkI*p-OyhZ4Cx2)99_O8LkUqI
z{(S_+zlEr1g+({gs)RcJ^tZ3t(~T@!D6#39`Qjrl!Z{YCC@@BQoJeb$Qbtm@n_p`H
zxQJOHndDG3kV)$mb4O2J-v;K#1r@Jfs@k)uSrH#W{gxOo*h!;p0&K`B8$A-J0w!YC
z;)hLheUc3R^66p2jFt_P-u$S`R3_FY+RE*!LqxH*JS|?%J45O;s4N_Gz8ctMCamvb
zCvd3xB+R7BoeT3gTf1-{T?j+SH=QQ0V@7ISUx+?(rDNg_!j(>dFm-F@ix18Hr2xX?
zRJ<qQl`@?#9aB~bi*O@)NNLq$j%S_eUZZFV-H`0NC>)n-VdIp5Og}gK!N=0v7Wk0V
zf><^-Pibq-6I$Mh#Qa&!tb;!*#f6y7aB@Ofd@tBiWb4-pz+3vZg4j<igJqkty()7_
z=GIOpBi?S3DrwCOrg&ZyPcV)zn=y|4s0f#4sT#E4^UuBf!hZ1(wg7`On_wQF&>;Zi
zt?4p3fMmq+nf-pUi07y3MUdcNrDGj(|3P1YK$?LYe}7L5UibT&QQmx+F3ABel9c55
zdfR2W1Ex2D9APsEbIR7(ej9)(b6nP7w#{fce6+JN{7>FzEGB2y_N~%1Bync7@WO46
zazgCdv|Q1+Gf4-13k@0V>==p(lh)1-2n$~F@MJ`cC&n~FyrV~!Z7>Z{Ofiv}HoG?%
z&eB|`!)1%NSZe?%kQjD55*-X#rq{Lt0^o)*bAGzcWh?tYRt}>jd8f@gm&S8aN0QWb
zj@*`~v6<-sV*0(w5nwBvOt$N@FN@7d{1FmBkm-<>E5u!SSR^(Zl@$g)h6gN*6t&8#
zy?dnMjOsOVVslv84Y5tkIX1*;GL3T{TI@0#7X=i`qZ%M85O@o6O<O>J8*sB7LUxsV
z*1SkyXkL&etfBct<CEla>F1cY(VMa&?9#hy(<P;dgUFhu*HOh)q{TF+8j2$I>$%&#
zo_MMp%rvIp1w|y1Ixuodv(TrcNIFcG4qci%EzT>t@dH^CS@&og0%2ZQ?1rt&6CUkw
z%?O7HUtUU1{NhwqRbg(!FN(IRN)oH51viovLGu#%n5lzDLY%ft0r4a!ZEo*JVexgi
zDfC7{?Q+t=lON1I27WhtyQN#*IarZigjym<n&GJ|2BArDR0&s}pmL#QpP+K7NfTWg
zcKtL4)8I0jo23Pndr2?eY~SD#;8M*xGz26uamp5is=^(ENWbA|2+LVv6D^Nzu11?O
z(ZeLHT`{lJ<}^~iC_`&Im-Lz{)QRxHsKkzt$?oRLYk}qAMin_`l=Rs$^@H87sL>G+
ze?rvqA-id2=JUy#7{beSGC~zR$rGraLPm%R^QO+PQkkJduA(QwSs!y^WE+zy>V(Vc
zWU#P6_6LVZ_qVKuJBQb*F4}yaJ+Z<&)mGtkm6@=FvbruIc~?@JIU4Hf+L!a}0g<Vr
z+@&?9>UpkC?ai^WemiwPb@<0O0l!?bc~a%0g%M(Mukwfq!Df~|Vgg|=&AuZM{0Ysk
z2$Di8SOlG{D~SfN3|8_b4`E>dg@QEQTgSHPog&6QCpLIxsaq~oEhj!PT`IZ^ROPFs
zuqjRy;6Aq*(+=QBhI1DG?9D6`y8sG^jB??`gHoRIbOe`orUh-oOG`8k=>hUCV1#+!
zlPBFG6KT_uT<e^p?p`z|!;LRsE`}%LEa$j5S{gVhH={`spQ#HQJGYtM5Ok&K#6mnz
ziP7*K@+h@}OibI|7mGv$xg~=yNS(Bvw3zI^Zx{_|;8%0@(_?V+zc|#W!rq8RE5Jl>
z%H2*MSs%vfJ2MQaA1+V~cGT{SJL4?-ZBO7Sd)%#A@{U{z`&Dln8dEt$kPLNo9_P!=
z(oegi_X@llC5r+%X6fSiQ(|Nd?S0N63P#$&mLuLw(aBg1qyuZv+SqAvR%;;c$Fwvp
zU=0L_9Q_ujPaToZrkNA=geR9TY;4jX*u7$xhLcaIC}euT3GDri)wI`=p)fWj2I-N=
z;MKmG0_QR&_#e+6{)@6~n-OH`G>XPASo*a)leLQ}IDxqivw0%Pci5;T_xUBnf7}_E
z_oCP08^a+Q;5NMEdw-G3)+T$z$Otrp2Mk$g%)#h_BF`{x)9V%a1(Qc}wHnDB0Z0Am
zo?)bKzOFzwid2d5CJbGsjeWFO<;$i7ES-_tx$7JQNl4Infe(&zj{@i!BWMh4Oejn|
zH)fm8oN?$^eC==&ywxCIrpwhb5hhJRs5jq41cj=~9t&fx<U*3p$lXN3az|x6g1MO!
z3@bvxBf0+^I69o_5nwO@GTU0^Sqaq+#t*}vUVe<#YDm_1a2w#jF8^|q+;BwP810cq
zPj{$T`O2t8Z1VQBoaVxV%c<EI0W4oyqJ$P|gnA6CBB_PwW(*Dz!7*m6%;B&xYP$t3
zVvCGN5Da(^(=AWSr;%&yAn&dVL&Iq)*s+~*zcB622^I_&fLJXw6SFwbTipOT#fB<m
zAB$X2auscTx?0k`TCu|cgOi?Ud;-YDB(Up>*^r?KI6skSY!t-OnPt1U6&^Y(?a*f2
z@}kqO1P{*C^b(Cw^nUa8y@{yw{hF&ZNmr<}!ZIFITcLxxeyw`v@$?tgge^|+8nd%c
z1~t)E(niMdOJ{6q!rnA%4ey&F_Om(oh?(=$@XS>(ye#PeKDEN#S9h`lwHFBUG1|_8
z7d9z7i|*RBnsv%nyw^fRj^es{Ije$j3C;{4eghS#IjY#8C`053igVv(gx8!B(?8J;
zSWpAs`y5FB$!QuyY(&K|`l=c=2$sv}sguONphh68rqJmkqX0h9hv+9wR+I!2BLWmh
z4!B?<i(=?>7!188<K;WXn;*RdwyQ5?&BIlm9Je70-j^HZMy`V2T=3pdUee=NPk%6c
zPEkv|wHb;REmhte)?tK+xz4^jp|k)v!*tb*trm#Z$lN-(Qv!9cgeIzXh~x>i+F+EF
z*MQ_y1}G6sol-Ka4O?D!v%r(3`GuRG_rW>0O+Na?wl{rUZl|)BLFd}yG-Bp%?_fW)
zRa7r{r3=YqqV1fNHkQVCttFH^yKwl#D0*in7;ZSPHUVbE3fNeYl2WE>R3DK=wlbgW
z-!qNXKk9!Mq|dt8Vc>6^T<ah8KaoREA&0_l+^^ap&p}Qro|C-^Un$&W``=`T7}nX3
z_$v*(f5*MP=Oywz6tUb3kfpnlG*QiH)q!tc2XBE=HYQ!8H6k_n5+L@T!{OjPKsO8K
z->Z|v5W@cxQy@7G(<dN`f0OwTTYNvd&IWl+T2xD{;MiqhQl-M&&j+`We`x<R?vDwD
zB3@@cM6Pk}hIVSUi{crQ<d{wJ!pwlxIq1~6TgTlL|LFP9rMeaY*&B_jV$f|k{H9qE
zI8styvl$EWJd55e372EM^S{aI*nD2n@wmU~%Ds@Fs;YiiVfs^Uux*Wmp}C)v__8C-
zCeEY%57{5kOSCxNp?~H1c)@A3%wQ-Ig&n4=!zGwe6OGQ_eUR6m53FoU#6eFQ)B6R}
zb+2EXk5`<;^(=+65(nof0r99P<@lx?3L<T8&ll-5UZi5L)$Gu7&TF1G+W!ReLEbLc
zJ}*$)2RX*+K4h*P%20JwRa}=)=pu!G0^L;L@2H0kmo?XZ25bJ`Yg4&gr<?_+A5}3R
zd{u^9#BLD&@P(DWZ4|xpSP^6iZ`-JT_@C|4)dS<A|EuQ1zV@cXF=Rfzb|H<h(@{vQ
z2W=Ry)ITc)86|@i;YYPvW(WgwlKWS^Ven-~KB6G2e{IHHCWP`%_cxG`{vCRKub9AB
zcL>t)9_(}OYS|gYj$2-YTy~LNZKQ?%=_kYi>Qs{u2DS;NBs?;d%m@jLCGN@05Xmi2
zoix2EFXQzvbR0Rujp+4E603`*rQ@_78peT2+kdkO(deS9D2gtMHR3^BMNf1E^;Jn*
zbcsI5(=3)1P*+hF!TIJFWzjFXp<h%%zi56wx!@X#q5^7lxdcnWQ6#sj+tf0YX<;Z+
zRKQJy^cOkx7qRpgDfAbi^A{QO7m@N83Gx?#@ngip5UbaDlw9gM!$or^uN6FI%4m@`
zKOpB+7*%IT4!ns<PDGm6CUk)rac_&DFpPk^!NtSSX87lGG?(i@kR6&H<7q=YP#7mn
zL3bJw=5Rp3CNz9TpjXdnP!)A_=D(MVcwb*eEpq)?WRt+9nQ+n8aN?q!MTysltq#D)
zkJj_VZ}UM=6T@87RbwHkY_(lNf9+FpRdF(J@=t;V(jR;9+0z#s;EpcaoIgvi2d+k&
zSV%v$pjgER7=e8#SzggVJQ}4EqgHN0X4WR)!T0h^a}0Tp%q1QCCd77XB-1cBdPA@$
zVFS9~-N)Y~YkVnr2<$X?70}i!9H?xRh<hk`tylyK1{}}57!{7bp%2)X2>W%C0w9(o
zAlYncPDMe)dw6EqM)%65QwCgCBJI^>O`4`MwK!g2t+b#wm3Bu(x2K!mYeenprj6Iu
zx4dj6r_c8bmQYk71<dCM!gUhE2sp{p40o}*EXvGu>~&N%u`cvkao1!i@5g!S1K|20
z1>}EK)>RSz=cv|F>A72ii=3KjHPP1<KdNYH=_OUYNcV+0Ut0$~yMRu<zR=6c*9@pY
zKV8$q3l(k`eYYv*)1Tg=Y|TX^aHnY8y<`M9Vzr7ooxFb4x%4U{iH}9*P}aRdXQDvj
zcJon5I{YXWKKWkO-A$epjmsBxLh-pbuI-L+S=IU>?K>iA2#`>}7bOgrOcEETMUx<<
zDLKYg36_`C6~yu0FZ$Y4p6x)ktD<>y$|>WyK%ZaS1zQ*A4c0^M9$))V2bH?`R~{%i
z!Fn*PfrN{|%cdaxcwV@a8mKJK_N&C!e&$|ZB=44)JCP6^>@isxaC`{*`#{?#7y2)I
z9AeiyIqjWH0u;h*HsgIH$zmRQ-Xqi_KT++aoNSsq^t6fSWv1#A9}t=*sW3~P+Z5CB
zm=o(jW+*ph9#Ui?WDcu)eqW)F_THL0kxrHLLgvzY&*14k#~m`Xc7qt{#5b>8-QS!u
zZ*s#F=|;^KsFH?ckf!#%OO)xenzNCIond%YQV>vO0jpoW)cpFYz2RLeTsNinePNF=
zPZT=@<zZ_MweY=iHXU`ODkQR0?0W|VCX+(Rrz&Pe{nces9>j`*)fpuuF`QRS(|e9K
znPv+sQD_2|pyP#Q)?sK6%4MR97ge$kkod_&Fdsi6q9hF}C{}osMN%LP?C=0JXY;8o
z(>jT?xt6J1^J0%I5+MWUp3p=}Hm0*%H`~ZIo@Y(APR=MDkm2i3PC2>X%&>lvt#%Tx
zfyzY?Q4c2BYBWaL#pq}S?As;<9ZV_h0>z-w*F)2yp&tS|-Hs4+?8V`6#%T=h>qmPJ
zAH6(`lG&L>`sH!fl6QplBqi>0UC5l+l|Rqo$tr2O=eL3vw|F8XYtK>x&i$$9yk4sz
zB6p!|AFL7IH&cpV3PdX*nv$w3w>QTA__8K=wuEqF-=Vx0ILOu70DhV>sZNtnyqcdZ
zVAY_av{_d2gzkxRm&QQ5pg@Z;B~g;rnv8RGrC~|~4z1pS{nj*H4uajq#*850Wech4
zY&njG!~zo}6Tp#kj`R$BfPOFd66T=f88$?zB2ENFxzZ?25bA4NVdIo$MLxwa{O_9(
zj0>$2cz{M{{GXjRzF7>tX%MP*XPf84?+)HK9B1^`u=O9V-}nz#Z~KR!>Bni<_Bg$M
z<C4V`pGrp4HvTSmr=mC1-uq~tuLg|}ZT64Z;G@XocleGz4-sX}^S%pEH0{%2LC{kZ
zI|vxn981J%ElP9mSS$*W!;L{PnRwTX`hry5x2Xs>;8T<GQSqny4sSZI#G4MValfNs
zP+}aU@-mzQ^-Bc*%`msr8os)|_eB6i|H*wVHuyY5pB_lI0^EUPm4mTvu&f#aOj71H
zD91dVOZuhnzQ2x<(4v=N@>+h{2`>i){eH~)+re5=AxccK?l+WfU$a$7U(p(<SAlt|
zNYDLZt5le>%yEJC$13#YD(qh{!=wseSR1)Fv8CHT#f$(9+ho*_uGA_Q{t1m*5W94m
zE<@8qf3`weNIT=t=_f8}I<|xwY52#PRij0>Z#E6Zc^B>8yxC}9rPX*cDH?=|W3{MG
zt3iv}-RAr^ATOqo`xfYuC&cMAs4yw3&1|u`NbR)of>ICoV@<;ucQb6;HRJZNx`cGL
zuROzPPI2axnWTT|y6PA|dTFcjy!fQo+d18h1Xp(>)7x881K%bE>@w5gi|X;{Mid}z
zCCf?A(4+(xF*kEtnh9rK^DSJ|2rq1ObN9>9XP^CU(AwSoY}|@(?*6`YbMU)ctuK?$
zKieG-e)qfK&0Ch0d%_|kRU^Vvt!5rtNh%&Nc(olWt$N}5B)p4Jn$L}>aKYtSoqL9}
zJv2E}P19z4XbN^P%|f*Qu<~A{<Pz!V-c|3$D_nq^F#xY{A6@Cv*@OTc4(sa6_?XkH
z$a1h&DpRi_fd`7+GKhG!|FA0~zEVptGw}zM!sw6|4G%=PsUgRJd2Hws3}gTO|NcKw
z+;xC|v_;MTwryj#;@jhv`KS>^yX{-Kd@~?h1S%Bll;E4&gU^QY&F%JQIi*U(S2jyg
zbW_IUzWHqU`N+1jTlLLu>6_0-UnF7Qir?HSee*@~yK&eKz8H3+J>?Oj(l@^w|Nf?Y
zbF=;Xyz*2olAMe<bSl{|I462PCP;ZUr4l96O?QFwnA?e*Q%0HS%EKiM;e1v03>+_a
zi+Nw#h8xMl#jJ8=vZ~E_sOVA)vQSmC&6Fg@>%VvE!c)`T`1#e(A^vlh{#V}m{Jf@c
zpk@Yd^9HA5BVUy^|F*ZW8(N14HHK1Vw_UM{-Hlb;@~a58tbCx0$7wETL)x4okHf1F
z%h|O09Y?=;!L6Wmg$Y**;q(p=4GENjH(IU6PXJIQ{HN*5_p4;Z2cmLM4EdAm+!|NU
z=ygFVy9@3T=RF+DEz;LNIr0~Ov+D%UfVh9YcX?>Yhl(`q3Jz7P?OFUNeI}`nv}mks
zPz85!!|W>~Rfq$L9+QvcY#b+L>NR|nB$5&YOl1!whZDPA&|~?iaNiRjX@0eEuuX-x
zIj@t_65d5IIAUx4am1kb@n`Mmg_#q=!k;lBoxhW}m|B&pp+tLHO`z;}n!@YnBeWe8
z`cNzI)E#)?%q$9}mOG3f4{CH<wEVexc1Uh!aq4LJ2yp2_L1#IbgtB?Wp0*yV0*%TT
zyPlXfG-9TN9ZDF4KaXrOx9xu0CC_X|{kHbPJ;8kRq&NDM>?KV}9>DG#ntsB1b+Ma~
zp)0euGmw5{Q%DxeG-0^CbVkz>k>)qQ0EHcM86Ddpmax~!z22Jwb8)G6ax(xd4T`Wg
zneRJ=L@zcev2$eVI6o$b$w(7fHu7x%g8zF5&s<T<^S28ssZ#X_mpwIm(vTMr&JpQ6
ziRbogt?W$?{s?LL+8?EjXl1h&;Lb#9ee@1ckmlJB$pSgh926R3#wx1bj1z3wlXqRE
z523lW^Z@ip$%Fhp>DbEv!h7FOKgV#p>=VxL`)MBJ(YZuwejau^+O~h469g|)3_)rm
zL!0@rHpkx(%zmCM&e9>lwT;sgNf@FNB51-gU7Fk;(jRCoR|`Jz%#4y1*qqK{+AaX6
zgFp%fsik}#bVKQccB_a0A9t#%gh5WED4Cjd){u<o0i1I)upX7QF^agM6yM=m<1H)P
z5!Q^{TM0TfSUm!f28MKD4ZRghy?le!Ef;r+<(A5O$b4VkR|F4AQuu6ybTkEvaUuC3
zO!wwUG4f#X6%oGpoZe}mhP<R325~$od#O$0*~yB`@OHz>e(gs6!D@!fV!mFUX0zM$
z=jj~(oMia#D4Ef}KuPU$t9@j>F?*&jSaopEphSG}B&Wo!Y!ewpCzEU-*<1o@%X3SP
zWi&xAWq!KmB&-t8AtX<hRe8C>Y)FLJs!8MoW6eUEfu<0mFhHSsKX95)x9q&*&7KSL
zvO9k6NxJ-cHHh}aPzGki8$c_<ZQPB%RnXN6M!|@u;P=dl$GN}AoQ(IucJpcChTV4%
zr;Ct#p~L?%Ic>~d*<K_Ki@%Q3qld%7@9P|+EuKE*#?(vpqd2mK{n%9$=Cfb8ryj$m
zPp^>k(77>OHS3}6R5`!B>u*J8u9yc=i+_BY!=ORKaBHskFu&p7G_m2QN@jSaZ1;iF
z%chL?*UNEltK68`{-rGuCLn#Cs84h>$V{DdfnmLUK<cAYKl!NUB}MO3N+ZDb;oKuB
z#8-EtJM{0pnwJi~8zzUZY1ey8QW)L|e&4I5c`u7s%Tx14|Ga0lC+KYLN1`}&YN_6h
z>e6Pt$<MvU=&j$lmI>OVQeiK&oc4f<*zVM8A4H;Kal&Ti88y0a9yN7gv-%*U>Iz0a
z4){doRGS6zzSq%cTm9xujeD9To8=5TZq9Wd>2DRRlk_ZpH5IJ{0}Xn<7ls^|vN~ed
zou-GdY(60`Ly@#d&hgUXl5(DRC!F~-q=u81Q3~UrIZC)(1?YRbXGvhs)JgpgawUta
ztEd+h*;F<;B`5Hk@kl=hWqcIj&*f9CBqaK|KJ%z7Kf40KSM24hl6&b&nb>O|kF1NB
zaF0ZGFC+6REd)>#VBeF)l_|gOKd!5gNI8TA7Do))G#)yzkD;%b8C@htGCNC6K~79w
zNLZ~zt_{Ak{T==@Uz`7&WYkDImoT6W^C@@Jl`f*6Bx7IGnsnJ!wD}eamX&WJCkZaI
ziYp|rjglv|TTITJi(|fw`W>{>S!Qx9%xw2Bn$>b~r@)180&m}0a=v*B+x#R|`&ja#
z`c>Er>T;?KktD5=N*SAWfotcu)yh|<DI-(fkw5Oe!Bd~!2A9nn**?)7ZRH9q&A%|%
z$pxzIe?_bk--XAXrGTKxsS)R!_CM>I^mY3wOR2wgH13$Nn%A<Fko8R&D?1yx7Dt5s
zO-~4Nf&OM`e29c#b6@@*t%h$$11FbL2HWpR&--0`Mrkys>zp4<bNPeSVjL?uTj9Ui
zA|4vieBjCX^DJMUn2Vi1nP=zb#(|G#K`XFW4c49_pr6mOb0hh`P5PBI?txD@xEh;a
zcihp$UZ-?(B_qk{)W4K;Z2VN(xNY4>f(~F7E1Hj2xsmbVCaWD##hKD4x?O!f@X{VS
z+P3usU62x6QApmlII2XlEN7&fNplGzj!p3kdP&2vbbk9~(rP?$woc_%yflaDM8wpO
zQ3_Pt3Qz$@>M}1$jc@_F+`EZks)cbiJ9P*Pxy!ysKr(*ksGQBr5)Td63WjL17K6w_
zy~KlzrCuNpKem~9T%KF~kQ66v&H>0@Pz@ThO|K1ES}gS-hyAmW?3|^QLgix(@PpU6
zV&AZ(U*fdMi9e7b7P_&Tlyy#OeQTKWBF_bV8o6f;I7za2)RV@GozA4A<)mxo1$(C}
zpW8%Q8JDJ+>dNL}H7@kAeZ>rz2s5x+zmv+`nl|H<ED#;8jR{luiZ2_hE0Xzo2_A`Y
z@RBr|-(1lf4bE74S^Ci7<Q-DFrN~vNdAPPowNHOHJOwrFY`9lQu5`YnmWJrf#DHnG
z>dNf6!J3b+tX@;e$Z-iK;LWy*Mkl7oYS1>HbgT|=5)X3sivqGFytgx$WP=W3@j9-`
z#y>v!OSjvF*c?3#GTGD)7HPInc6l}9C_6hlG*>t_l>fuu6&sTR6(k<Y8s_IHqTDz}
za?&g=l2qy^OBx>`Q*4wTLXJnN6{n-9x<mKIa5MIZW>~@Id(?<$eT1F0?6HJt!=rg>
z>BzfR$=SNO6?+LCinrkfqB12-sklt&IR|&rgsA(g*xY7ip?Q;pK{fq5$(cIpiv&$^
zIj-72hdQ$ra;95V1S<6}n$fVROCl>?KyJy4Pe2y2(`ZOxwx4BDn-fv`GnWLZvOBm4
z1HE>YQ_)Y<aDS9Kd!x#EqoiYoVi#?*-@#Q~p?>+_<(?GLzlliw4+9(>0dSNv^idpx
z{>h;e^VKr<BI+r%B|{9d#+^Mt$$Nk(z#pt96S(4~;rI1LD{4CnV8m`%0?@<JwNS6c
zIj#@>qW)_mzINN~b{%!qe{G8MFYrdfKb5IXwCbEDvqjpOCON#9ddsYrPvYU*s5OeV
zeyr2q^)6SgW$C|MtT#7@GOIW15Cdk(#1!Srb7G#s1I9dn91SFi7^sQywEkgBG77eG
zOlFQLSoXv440FsgQuAjka&A|PHH#KVOeta)Ocv~VUhRb3{#hLJ+OLig5*sVkS8f&?
z#9UdhFqr?}v+vt;GnZSzCtD3MUpw<48-nN>`Yx~CS-n4bKfc$wqj6sEPk_qwp5=mj
z9qTu1%^`+!|2Sg^eP}DN>U;8G5Gmw003mP!n>cyI&hvo03uc_f&1NsGRc0?l3$(c|
z%UQ@!5T!hYm`95XbzFhTLXOc;E_en8`?kei*<^Ym#)cS7&nn?tKNcHEg6X*jRj_U5
zHR`~_hP-Y&gfs#{<!jEAUNudgm4rCb3np4DEoOVv*a$F!5S`75$IzI5vdDdV7(D<k
zfFT6QELVUKh*@Sg(ziWqf!*F&J~ZW8wp=J*=>k<IOZ0N({-*3F6MhZ!i=>r}$8N1z
z@)EzWgn(X_F;MPEcUi_nB=>b%r<7v|!~&25ccV+(D!kdqb&Z#Ek*JkG05=&haH&t#
z{efi?Zc<DRP}_MKeWfZfKSJ2kYN+CNZGXw5?2Vw5SwLInM%ompVzAWMz;KotW$dMA
zzL9O#5@<W}(q`v0X4c3<j`UupB#~rtfn&Re;%LxG8<4{cGz9QAnkDf3j~8n<p@yMO
z$nJNg9Fll{)jX0%F59?W6goJh#t6U=2*r6V_z4=c1UEcQaK0Tc7V#P%6E!pq8`%*a
z&Ay7P41uV^<0z2n(^<MS^80Il@+VnFa2I^$xx+Sr=ceibWdYAaa-Wlg)JiE7r_p*e
zwhev4MvTSH!-Z}pBK6kf(NW$t8){b5sbH+Zac5_zrW4YQj^EU9Oo495zXISu@mveA
z11p{pe4zJS5Cr8(5ht)4jpIpfpDR|NKBfx?4gdidi#ZViyh;eF;*?=<e_<zUOG!PT
z8t99tYa5;0X<o_3E*_^&zsLwA(6otylo~YeWrao9U%+iUn~nJTQDmfRXG5({N6N&R
z5Ao%xPK#e$F~=z%IsiSyrFR^aBPYP??Pw%kl+b*bQ!+gD-;%=TRBoyfP`amPLeu$V
zQ+-m!9dSf)8oP9Kug}g$4&;#5glthZmTj{3&X8V+Wkdee8mtv=rHvo+v|jYFX_-R=
zmfC3xyERB#>}||WJM;nHiuPuI^oXYTSQAIn)w{dfGuL?!zr!o`hNPwi5MD(Vdd~Qp
zPLVQ%z|pYlSv7185aI?sS=Wvk<UjEM>cIUt&d4ccP5U>rv_sf!u;T{chijCfM6OEp
zwB{WeBpjq3;yRRE1Eh1!QRo>iq8yHAhWgjM>zIz;P-}}A=EczYH7GLx>tOxSsi8Ad
zoErEyhEoHN7x<v^L1L>=_Q|KG$qWLElr>V0Dov3y2sf;=cp{!GoAM5OD||_=;owqs
znPbEaqB=K>fMI%2$dW|3M87~cv-8;`i>(h(MZ3W`L)z)hcUf<ygZ#K`GQ~79Kf7GR
ze_ME!e~FATMLhX`?`*<Vc_qp-Km<keK0q07Q5P4QE##j+ec`6e5)&f=wsOU`zGw!d
z5OjU?mBf7=>SM5_LfX6pGs$eYSX+B|HW;t+;Xg-;l}#aVl`{Z5wPFMu{JweVy>UB)
z^f2vA`NMyn<T4fMHHvvP3?1MMNY&{yo{`81f&6VE0YE<3_O_K?VIcC+Svyf*)kFIb
z|NG1k8JTC2Q=k(oyZF{KCyOLQ(j%u7PRhxJSz^sU8jq<e!Nvwk_-~q|5&8*2e$M-s
z-35dX?K{tttd)!IX&YQ6X*+T#xRxCKZ3{Qr|Ex1mm1LxtUF7GNm$H~&<li<CC7*(~
z>AYn%B>hdN0D#}R-<@W9n>9C_Kc4QyM*Cln4qygCcHpuZU@$ZK#LdRPZk|D!0jnCj
z(jKs-|HWBj#gk(VWXtLT`&Bbw;qzn?Z0YvD&kU?6JIkh1P@DlO{jV+^6=vW>^3hyv
z2DtRU*C|jHc>hW>;J_WeJ~}#x%zP}NOMjgV4zuA~1h^lF1Aa65CLX_yo6+;Vqr+x&
z_$Tw9Cl3yctTpHyt_IEM*`JP%{xLU5kq&tICNG}>PyZ|5wg2V!z}v(no!vYGZseZO
zYd&rN3!ehI4LM&%OW=`G#?f-KAh#i`=aN~&m5f9qG9{o2&u_&Dd-H68z=^S>rQmNh
zxL}mcwj8GYAQ1xz(vMhsSNrcV1Kh2CNiOh{Zoa1^Qr0;c_$y?;30PiH0JL{@q8Ek4
zlS@{TdoxHf75IvY_%Vb6HHp3LzuPWIW@i<8vi=?O{GQ_yuQvzZB$_9gf(B%sK{U)2
z!h3+#^YDb882Q1ESv6DecRN@-2Pw3r7HrC!1I3!UM_keaC;<({oX2b#w@6e=XRr5D
z>A_?|?gM^&!FD{&-~mJ>V7oI%X)qD9f||V=ZEqU|)^qJ;J37$TVO5jIQGW*t84^#)
zRnN4TPNJ>O7OP(RJK=jmRmBV>m;r~e^$BO-`HQ3SENmQ}cHtk8hnTV>7Iwiucn=6k
zMb#7zK{XY&gI6tCwT4S}*fc_0HnaVsI!r71xawfNw=wdYY-<-mph!xzYSS7^{F`iR
zB@>!8t`)6r1B9IUmbG%L7Z}#0oeM2%W+cB@)_%5zw4a~d?0N=*fA56b|DN`MpPl;u
zXQ%D|*(vw0Y1=n<`o*^Wf0Z+QRa1U`y2+IPFGjR}s^$J)QyKHKFi-vLtWiHZ<I~U1
z*7UP8E&c2)Nk2Qo(a+9K^s_Sy{p_qjKSQI>&(Oy6&uh~8L>8Os0sq}CIR9|M_46^<
z$bbdiqF+44@?6wBdNsw7JePoJQN~yz>!B)BLX8|5HFCwpLq18ir2xyi0-619yuvU@
zxp}L?e#<4VpK6*Bk$WiUNDAf2k<gzUBku1933r2X2RcAVnBO=Fm@{-CXN(Q$qX=yq
zy^Vdvc#RybjfD+5O(Wr)Fl@;%xAJf$B_&S@BR?9JokN3hJ)8hsFxnHii>QN-k-6T6
zZZB*&I^oCI)>{-dBFI(*W~j?KO7kI9uDoWPik&Qos=$+2T7ZIQ*;{_Mnz!x9C3%iv
zMN%M-#SW?;VCNJU3$$~p7_ema6WePwKBfx>MQ`ffl7MLs|B>wPrd+B>h^n!oyrqlm
zWD!p(JP2*%tEu4Ej~$9lQ!+WuqP_jd?A4j%AOhTGXcSjyz&JWxP2-u%+H@XI-YQUq
z84)jIu)MOSxXY=VZam3&j67R9FnjHrTRErlx#H0W721iUP*2*&c+s-YH4-;8vC2ey
z|GQBfjIAO3gy&U0AyuC(*d!!g4iW)!2oIJ`w|iXn(4|KLv?aD-x)j{B<33PYcyNrT
z*QO=B#u@gGZDm~z+74JzEZ=IGX{>hSWu%jg1l5VmZh#4Ijk2X&U8hEd?9Z~<Lwa(6
z2mMB^=JHuLgP`59BoxIu8{!_M8j_5lY}nv5P)hg^gEQir^z>e@N9mSeG1CX;>yBm+
z(r2btejaTLunB+I@AT;d`d118eP%pP-<cj7D#chxAOSo~3!efdCfQ@+vn(BP!n}N)
z1G*#`og}Rx5F8K!j~f_RE(8uhhnRCt3EoI<4j_?2&a>BdEto5kllKvFqs!Y7+&$rR
zGr|LHN4<G4%fLAC!}A&ax&)qK_OoG%Tk>UJksp>(zt{>PL-Yy52Bb>Er6vr{DI@9h
z+dQ>xJF^l7jwQ@x3*C=%CPd~ytu!l=4mCv1z_7fFbOCM@Igz%^yDi*}TL3KH0<O_x
zL~Aj^QaUj#3j)i_xErWYITFiyZ6lqO#LhL$R31Z*--_xxJ9UgvSz{t-gqZavfbWO^
zju=*1BW7@a78Kg^^MMq~n*lr!5D<)eG_kfJJ4GQ#2#}m010zM28NvA}LGN0Yf`~b;
z^hOa*gdsi(cp~M80x05M1c)L`|NL;wGFS%-W697kZp$@S!R(!1>to7L<2~3jlprX;
zG(aEK-13!1Zuu(ZrLK#6B9C9?<!4VwM_71xD9WV5<8P9+*WD*oN(vg<eR}$>eJCH%
z%wlOhf=q<7ptW#LL9gvWuhpIb)uSao5hDCfU>RqUYH^c2alh{ZDLrx@Jwm2Xjd=ul
zuJIK)UZjcHpleUrL_w0(NMX%Lv(n&FY<ZeExH(xTjb;tR(iYtW_vO(<PhDY7x1e%$
zDI<{BnH@ZuybU1IYP^SSHTxsWj$kNt`KBIigY7Ug)Q~UCHOwn_rSf)!+_fkw?@5B_
zF>hVg-3`Mq1hqT_Zvb7YqII4tPorm|D^M&Ru88R%eQrn7C6um!C32tB1~8-a6i9Ux
zuUC&Tpci}+@EBUT4CAxvsjh8{lM04lI(%KVTJ}4ydZrUJb?%{16Z<p>_w9!K-li=U
zZG+VuB&Mo{RBg>(IzHSc^;IXHB=0C!a&M<DZ>$-xs%SDhL&+LlLLmTIMQ<dL&fe3f
z-c4@41=pC(4uhf9D!b`g=9|Raf85VfFI`E%vtZ-tkc0>G3XXLgG{cqzx&(`c{&|Ug
zyU4(`vxA3s3nT+-yZz->Zbb=8TFl-sH~lyT#1i0Vuw&icYg3JVZ|C=evnc!9)DFo(
zth7rKjuhk4(ka)YbW}bi)Jty79+Ydh<sBL#l+udSE2q3~YM5s%DlWq=Dk=Sn9s?JV
z^|r`1xb$My&4L_D*!l&?H;rgpnv8xMP(KQ6Z;%kI`2b9fp?Hqs1Z;=&jhwX?^7I7S
zDAF2HC6WeBQ_)Q_bIU?}ml3;=d^6_2t!bIfTbw(9Z-=>a`eI;rw^(@qU4)FdTzQ$s
zpcVE24rmLlT~Mb=&bEra)ES}%nCeE!a6&qT@DPje65ewe=@Q-&S-}eZ1SCt<z%V=l
ztL<%d4mES0BIShSwZql#O`A+)wlIgfOHkgvLOr^J4SKInds(T!U81I9A8dqP;M{Iy
z`~=z>kQ*R2m{Htnn`wO@Yv+!K93sY`UF1vQJ~(4BYX~qL|0rsY`i!S})|$r)Fz>B+
zFu+eEokw3k+Iwi0@-`ZM>UYj-Pi9JcjU#-P#+y*lNT}4yYL->mPPAuOvpx0d7MFDh
z%|)oFifpv@kr^9l=d96FlC9U`Au=iyJ>q<icXuFdiLFaeF;q%R*;n1$VxcX}YPvkH
zc=Ju40cUtZq3I*hlN6b(%gw8eO^)dDr?p@ok-xrJ^)#b&;Wladgw~~IWW9iq=SQ4O
z##~at#nFi@3D)c?V+Jj|0ILoI-JmPJ;g7#dhfxR7lzws_t1I<Sqe9K1Qlu&mDuyx4
zF`aR4xw>MttJ%hiZz!^=%s|J#5A1r-@<?`1U#m+xESoWz8lhCvAr=vdF6P2IjU=zO
zssSGO(k)+UEBbSe3?GmgYbs!gmnU6%qmYP2+o$P?IcH1z8PkpiQ#V6q3`HbS(VX^D
z*#?uM1Eu(ml||`v99{>Uk6PkQ8ca}LJ3{Y&YA4V3deiwEAX`SG_8BTWa`&H%9CeXW
zAkYOgcm|)PC!&a_<{Vv=bM0F=&Enl>bXQI%LxCzy%Tb)hu#7GekUlm|In`@WZ?jM>
z9j_XS^ai$VtKg-L;juolO^rA~HwbC$g3}mJ&STT8di1tyuV(3((0rWsMMT+<hVVvK
zQ~nB9mk8C+%9_SlJ&P5rZ3hHXC<OVCL-T97JF~l|ncPA^XdW4!me_`KBm$k0KFcPj
z!Rq9uon%fcO(5wnX5L-45P#6v>dZXO$}I%vWk*C(jhVY}m??CG(@gS*S=#~tn4uZ7
zs&nF-;>C>m;W-)5Vu=Ahn-y*)=3#Ka`C?IpVO&)$E%KbS-{A$s*rik2n~BRwtb7p6
zGBb-{*4?0*m(OcAqW}JX|1a6-raN2SR@}nuY`NLlLe<{&bOY4*wdW8+tH@$*Q%N9`
zHE>ScBGaFQvccqH!k}A$PlDbQ&2ZZ`{S)1+RWYH>;x&t0d}T?l-;NGb7=~n%&>=ie
ztlFnWiqxi(7ASiH|0X(R=I|KWY&{)<1Besn@lRmSlku_!q)lS>w$o*meA8%0$FHk7
zSJs1Hfqkvf>9D!RSm*9>e9%g%_}RuPwQWjd7C+3Inb{z<m=Vy2@ruyElUg7a@CFu>
z0cuf(X8%G%<<-n})~uzX362L0WY*jPOC8fh&papAxw2_aWGH8LlB^5=NP|_?Ipoh}
zPyYA+`oDdRgjGXY1$IHTZ|$<xifx(*r{wSaF+Ph$->)2lm%`j>!AYmTNG6ntl2YSz
zqpfylx^7L<!B)-FwLxRPwX@UNX)p7wH}uBS-^&}r7P!}(;=w6BaKD<`CG*3U)$J@Z
z^As5O=}?{yS4Ik)-p5FdgcWTi`Cye!MqAP<wEgh}txmF$S>LT@v}KlXxRi#?J~I13
z8-D)c;iKN8=ii!ooN`cyhM7S{?an-#tj+P6<n8Y;0Jb<z0wLNmwSGne!9N~nE9hQ@
zt2(}><3Pdam@kHu?u}GVW<ndhcF36&Me8L0&n_}rPLg=`RgIN)0DKIej^lI!?$A)A
zW#Iz~AraML_y*hDe_|eWI&2lP1|gjcY1vvu%AK;dk<G8jLQ;NR**VYpQGP*M%kpDr
zI4cUXKCV1cHH)|*7B$UbWd$2Z<x8@JRK8(*NaZVK+ACjvldQ{QDjGt{gM$&0?k@Eq
za-)<d<{S1%^BT+T!{ax292n(F?<yZ#bL4-j(eb_59KRw}tPmsfR;eGp<4(U0Bs-F0
z^s*Bpj7wig#FlmPj<lLue`KOkW)$o@Pn%old!Q4pc(-&*Uwk#TyR7&ouUy?I`oRA<
z_15zkhFbpoO_$QaNbq{}8{2g=OApJ;MzkF=G!0g?Wb7;<pIRm+SowlQr1VZ0xYBdW
zzL_@%@nV_AlRI9Q?`gR*XLrd5`G!Tic-byqxC@u=qQ%?1e0BlppAWi)3l6x<TY=?h
zIzeSrkWxG$rRFUYjbt@@JIl_gO<#%(-}thm|EA_mzqf!NY~DagQAl}p*!ryg|Gr-&
zx@VfG)n1dn?~IktHk;SQA5-Gb=)ol8bc8djoUhgPHOGP8t3y*tMJU@i<whbe64oQA
zce+g(<m3=?{ae`F7OT0WoZhCyL+%SJX%kx=@>bBiVr*&7xc1PK`)LWnAsh)jy{(#J
zftnH_({zbcD37qnyxVuN_J)7tQolWXc688i+9SU%=XxT~NcGuv8GmsbkR^cPfT8vk
z=N*X)`17Ct>=!2ul+B#r`MdZzjY%#Ztl?>D^FzA03V+{b!mMjX9WtM@&lGIoaR~*)
zi*t<C)1{D9ffGuYv(Qjk8Zxtyd#ns4bkEKS>3c?+o|L3E!?$gn!H{&8%!=h3VKRk^
z1<fhzr}uorQXsJt#tskD+|8eLqRcgWieHx|R<Y|;F|nK>h^CZQjFNf7q1eGZyKeC8
zNE~=!!gH=Do-Hlf%l6byM6tzK*qj>FOKO2hdbqO5zUfQCPS10%bAv=w%uLfpW`Ph>
zbDFSESQZ^Gl9mM4T$EdaewnsfE(izlJ9$I05wX{d3^A}2c_1`)f(>WKI|`yzHm;x)
zl=3^xT@oZof6LQbpJi4*oO>QS@dSi?t&u`Xsr(!sh>5VmGc_ve$wQ<mbQULCRhz8M
z5Qdou+Eh+YqwP4?L0(s8bqBETBD~)vVlkXDsgF&?iK($s)P7IaCB2cYTv~5&!o~lB
zl-M#&FoHmI=Uw)0(E9KH`M>YUD<n^BrK9N1QSl+2y!svdO{ef)UEJeVF!05OoO2%a
zcJ!K)r4VJ|LG^5$8Fix{Eua^d)IV;*l?8}?Ywvqap-XunO}{%*q4~2XAP7QX`qYKI
z@9iMEqe;zU7?QD>EAG^*{jEHzKj4XRGiA02txp|E&z7Y4f{cks*F*KT<pspl>#a1(
zhMI5Adz^ERq35{~lbG5v|7Rse+y=ZN4QsuDBRClhnvo-;dVA?feX+MPd(sG&ILq68
z{-c+U`W^k7w{*YZ+v^HM&1Fx7K=V=A6Ib*hSCD(@&#BhEkz4^>%7d$-1PsW`RE1W>
z>78(+Q?Wv3=IVUZT48i2F(UV*%S_O{=oo2B%|;l>6V6?aol3ieeo~-_xm)kZANn!9
zq}@*DU;Fs-#K+ghmI`5<t_{`1ktZ~A35&yA({D_QIYXAL>Xd4TN!x|$=v28(%KUrt
zr!Ukm?QfY@`IF`qw$YS!3zTxfTKttPqC1qh4c(0HyS5kNBpXNOzVChpwP_@b?l+lM
zt=q;AVY7LWVeaR3Yb)m`f54d@z0+myHr_3DVfX(a|3bl4XVZCLy|iiWW4led8_#4#
zoqUFF{iGggSlCB)A)2oByWLy2xkI-L9dgTk^}aQsB)3_awFx$+#lEYvMP&L3-H!aN
z964H6-y0gbwLcrS>yZ$#`X95?S@bYV>Mo%?jDr`EXto|!QfaY}^Ouol*S(ZX%a<Xg
zzKp0|lcf4Y<C^3&B&Js*r97lj^`U#ISz42;Z=#DPZsT!+1g@FdV&)xrNxeGQ?L@df
zT~^7lOSw@qO$Q4(a)spAOEDP>H##P7CZ;hYuuENqq=ETrkSE`-uy$TGWHmBRbEnt>
zs@Fx^CFrrak$Kh%_k62mZ>u|nD_<|{BP8JD<fP|WMCNpFusjNK%9N{Xw`<9*EdR_M
zXP$*%dSIM*#g?~7dnx9yWtb>-<8EpPRk-`NvX-jr85Q_>ut<DM-r206R<kq0z{!~u
z7ExYOo?*K?-MVn_S(?u$F*oh9&N9-PH*2@L(VhrU*1r)mvrnN@fq-S-H*ItwlEg2A
z{&P?v_nO=tN=s2WW=Qg6)v+p`!d~`=U)l!2fYYU9-VPeLU^<!-sC?}c(T-gBEFm~j
zU(5-EtFJgwY7Rs??QCrb$TlgP`p$QOS#nSREb1tm8{5>{Gtve88uHHXd;GR%zU_&=
z)Jxr|qFTCuB6C2_x`iW4-&1zw-~pm8*oiWDEYr?!m^C;3UKn0n{xFBvFF#5sEU%&_
zbD9XxC%Qww??pCqd{~ZY=*FV<7IG9^$9E%oik#80Rwdd#pIyji$;HzkrD4q{VLEan
zu0J#njSPH}&Jr@p)gf0s<K>gtK27J<gLW0hlXRGD9I-1m$OiV(*fTQbl5jJFtrX+2
zx0T3K$6oYqLmkKZef6f={j5hNdT7DlP20zhpu3naQgd1#F=zB<yJLPs!Q3dvr%FRu
z28RLczoKo1)V5ax2L1^cz?HzeKLKM`nSb4i7MAKU8EFYvSzfiT1;1c3viD0By0rA$
zNgMu9f-}(OZQ3t@SV)DU#&}CUtzm`yD#9x$CAgMm)Mp1*{KW^Dyye~{!xcB8fG^~S
z=b`z$OqQ#~%=(!PJU=}suk)ojqU{TYPRX5pFx5hZoc#F;^_AH=M-*NrL!#(Vz`@HB
z)4<$xY0tXV<zpI27o%G@Z++3axoiH91Nq1y$Hk;2$WmF_=Z5?L%pTz*TovK*6|GqD
zCa@r?&R<w{^2|XL&KzGt9wifYk13fU*^_vX7=DcYVVz0xZk`&}21o;U7%n5Xbez9d
zI?hn9C93Ps?}PAWW-ljZSRU+0-(>@G`m$A;$>BLQgQ*?8_~y~`yT9J9=(zTKm_|W|
zZ+~&~W~0__x2yVF|25Sp0+cGx)Lr7E6liDmV^>j5)jk!*<;*?xR#%_)d23Y&XcN7y
z9R6fF+muy3Tyxtgdqb!u&vmz=FQG;+6e^rj&z24qdzbfy^?O{L{hA#2Z??rMxqFBH
zamv4z09Vqk^!(25-tm3}>OO%ExqC<c=+0KSdHH1qw(Sb)zmL3GN>|FqTqjKXyh(D}
zyydBi3U)>}ZHUVidNjs)fT;gTG4-!_zkWhgd%ZPi5A_4&9(v><a2?ScnrFocZGRL(
zlBnu8!Pw!+wyIhiB9!9(vKF{tNd=_H)Y!fNT-`2HU&iP?A}D#U#XTQV<+?+*Tmzja
zAMr{aS)^~T#Ul!L5%i@z&xUCn7~(E&Tsa>c*Ueb!*PB-HywAn*5=xUry$`5knmbB3
zf)ja2{OnNZT-K-Sp1!JYB#hp^gF|mZ*4{e!fY0j)LR-9L7$04K(K#08Pv?~>TeRCQ
ztgoW5SWSVl33k#iB+%YSEM2B9M!M0XkQUdUmB50bvs6mFYcC;d$-m?l3e%v3*AQ8_
z)nUPY0e)-KtT)vMN;8^Rje?XkZwUou^R!T-ci=x7UR#xS*>M3y{9od}v1997`bhg)
z=G4vvIkU?$v`a_!?{sVZqw~IeYSHl%-+u)R`^$)=oT&|P_WNT?N1C<_DbS$P8u&*4
zi&xb$$JRkeyyz+LS7Q=twXdP%O>^IKje?8LDnGYQ*l<5&=286TnsArR#fom70-NOe
z>R3mwFgeloj6@AYg=_#XbUao*Qpl}TOIK4+t9i&$$jCl+9(<u-glGlR;X3uV-i_+x
zbT%Q4WtOn6&<LX|GSd;QsyAzOJCwQrPnc)kKu`-i-yv{CHIDp&Dd~;Pl>G67c_ibi
zV_=gBw?L!v8gOIMhdLw`on8~6L;!;qr|~gjR29Y<M5=03G>vXiu*ckse6i6N<RLFt
zU+AW|za;1w>rS`GvSp2SnFMAu$+J249kk3jDFGJ<(3fd<xyU9sQ}MEPTnd4POBH^R
z6A7NQ;(5xt*yB=gbfIv5N`-5q%tIg&yUiTxfKi$wk|Ye@ad-;xNKhY03*PN^m+3q*
z98lJBN^gpDD#XB^v+GY8*3gW60fB+0_aa!s8p9g4qfLQG79y}Z@`wYDH2$bo00y*?
z=0P}6Ula?a@FTh78{n1b_z7ZNHEx`6Q9g`a?e76&$16k!i{d*Jt8p#9h&GloNk;yb
zCsdAj@)oF~PQhF9)FePh#0Fy2VU%XR%;s}qkQ^on9ES6hKEwf`uwlbLH6lJ!H4i2Z
z@9C~EpN;9{*vL0?E5z!vXnR7Aeb6Q&3ZKI+X@ND(oa(31BiH>U834%_Ec1dpC9-xk
zvqP`RG3I_Rl9PCWAbB#?ol_;I(3-;!)7e?}76G|6)BRZ%DYyp(4>dVZ*0x1^x7L5|
z!v%0j!laG1+!3NEPID0~%?%UJar_v;AV8TzUlB${pq@555sDu~l>w@U?L@L$PtA6Q
zm49zEVy!1XAONFexnUz0AQ0ihPQkxaIInGgdq^Q3&FHVV;{TYyt=$kf_B+EuAkj<o
zRH0rE$)ecxG5m;XD;8{vO^)5@*SxdumbST-2M&dlBziaQ;n0(RWQh2hIeafK*k2a;
zCjeGJslRn4MCB{s>ea^tEaXGtl@a4AVGC=Z;P(?isb;4Av)x(&)(b@7I$&5A;CVT?
zs*Mm{Ttuf`qg4Rz5}i!gq1tlV?<r)FxNJtdL%O5I94_m^_eK@}HE)jlb}|i7ydgi}
z<Z8Imx|!X2^k46zI%16K;7a@EQD2%1VGwD-`)x3<V$hHVEC#iyU;n1+H6DcOJ?3?z
zA5Q>)=tEH}Kw&B|;#_eMK!w`r!39mwKaWtT1bG-ulf{Ynxo30RfM55;)t35P!akHr
zgHS)zj0aX(Ow|h~O0^5p<;LVju2LH$sFm8Fohw#q%U4uN;f2MD2?zL^l{0v-*Mgi&
zty?oR6>G%-Emc~~cH~#fd(c+PKd;!?a0A<@NUe-OW3N~hmGvq@9HrI+oY^Z@Ly)vy
zci2h5c8GsowMznI>#DP{fe({89QI8)x7wD5jl7qaH09{M|4~Q~Y$T{p81&iZ`fWB9
zEgIIU5u{$F8lHA}onb1PAP0?Pp84<p`M(=sgXDwlwMIcompA1h;^b~If_PT1Qg(f~
zPOaiB5ze?GHhB{+kFHa-jk^je|0Y>`^#Y{f^65U^oFhgmhpl5WNg$5h(7&l-^7e<F
z`F*sSK`Fc4-|aWV;~Ax#ojq5$eo~omy@0vNUka`ZDyIhu^s>3@kKqSJ^)O#8q#{Bv
zLCz}9x7vj1BGqjE-CW_z70kS|rP|rOKKjw+G=BWvL?7MxgU6Cp`j{KjDTbt8&6HrO
zls~;o%}uCdCRn7h(awb8?sd~55}}X!V?&kqHQx(ZlPY8qvRV>em?KZch-{@y9G2<W
z<V%Q>;j=Uk%YXl`|F5_6EGii{SwIjsjhQD5zfB<Ho0{2{ODYKcNSCxLA!l3-^IL}P
zv7$6w^Lrq_gQ?x_pYguOzviD8=QDO$Y7xj7My21WJS|PwaB<Xce^6DdNDKHI#*i4f
zAoD0cjVa411A~TFrWbB!DtEuU+NtgzKj5E=&~$P&43P_M5+QEFhk-I}n4cP@+j5Bg
zh4vtYhM9Z>bdN(2z2Hk>0DWvJFoE9hPuEI-R>ec<efqIDNFdXM{m~L1>J62%6SdZC
zzA?gQMEGd&NHoL`KyDNOfwZQcNC6jBu#R07Caf%BUI=;VvQSa0y%a&hff>dkP(Zxj
z%3bD?VLTH>b~+oIUL_+{moW}LoPBEB{hhX{m@438L2Wcmzb(!u1ajz?V0xo=2WzJb
zWYTWc0j%YthlE^;N(XBq`JHL9jN#^|Ua8_a47|M>DJ#>H)1_mE){4ZoXm19aH=-fr
zP;}a<q@6hB&8?M3f?2g9Rjn3ECzI5Wa|$LWk6Aw_!W^-BL&KUbt+dsSo(ZhwAX}c+
zpbC}b#<&DvLLf{fC<bPucrl6yzutVgjNb{6vKbLFIVn6Qw1v<x)yU42Cnq>iP0r?I
zK|O`6@JpEa<c=`Y0ar3}O)G{f$50n?S}D+8L@L)jCuNb&bd|=y1DY;kyOCO~!wP2~
zotVG6LBK`e;>;E`G%Ke-6GFx!BviL_p}>0i`eEffnEs-y$^cGo$lF+-Xu8UmJd2`&
zQS09zsUh8p+4bOXY&xct9tFUfj#hL95s=hg*upa1`Ot7zq>;qfL(p1yjxQ3ZqBU%i
zV3@p)LRDsVRm$XqKrqV*t8@X|cJi(@Z{d#5#x8+XNic6(xNr7hb3JWWZo0u*wp<~r
zSkU9>wPXT73obSpzrZIBnMqqx2sPpMdZ`Mw<uYxC=}D}7-mHbvbkj+|&B)4v0%4y6
z#Y>I33&2fo3v<}4SsAKnMW5y-l!a!2L2s~Q1Tknk{Tk;#kXRWWk=1GIxJ*@y8m%+D
z)0eynrk`GvR!y=frQ|%P8z5Aic)LJZv0xK0Pgbje^UDhkc|K6Wtei8sfg6s_5`#Gi
zrEAw78R@`qn^21DT6Zh5Q~MouN}20**voBvVXH1<a#gFWwfVS~X=^b8SSm@KuGEtj
zZONcJD#KjX5n`XUA3KO<-zlqjwh?__ddgTZq-I;qU^S=}_KS6}F`LkAT_5L1*mim+
z)lOEh>Ea@YOgGPx+6I*N)eLgzjJGX<?+@8MNJRodV5dt8o-ja~sL_>@FSBf<7zmV-
zBx20N_$pJaUIJg$f*iEsI*@tUHrZjxfwGD%Dp(v*lwEI^sL%Q(9hJKM_E?j4z1D~f
zUeXqo30fjm+w~ec2Bp<_3jE!<3GuAQb{8*-qPjCR?F>E*M=c7wYj#J7`NxF~ZBxup
z&9bH-WP1;u=8el{Qu^xmzgk0hz0m~f9z_;rA<|=vr|~QuBQDD@@TTBf!|$`rwh31y
z($6qQxO}(li$YE~cOSR$z;JMYl$CvYG3|D}^3|1g0!j+YtBzZFz3AB9v>SqTdQ!lg
zRDTJ@JBN4(;<+|2T{)k8q5D=ddhOoh_B>VwK?iWcbfw3x1tYT?wM4K7p-8QLf}GxN
z*tN=G+nnQtQL}pX+CvW2vtA@ve)$S;g8M>0M5TNEo%0g|2Wvs#;ME2o3G0j7U$w^{
zKbZwM@n~B)L&*I<7*V20c5u^?Gs8kQS>aG)wEP91^(!0z?PsC?P*7jH>ldl00jWKK
zByUCq5GcCmhYH5#<-(w(DDXqJNH8G97CcIIwG8rv20S^+Lv7kj#Qe1E;(Gv2NELrF
z4_24%&4Q}Y{aFxwI$`Nc=xj=UZ6t7F^O27VK*M*DU-3D+G#e2^Jwa5Sg7#U}@tzL8
z9ev9jR{zf3=w_e7lZTUdI!{KJD^qJb;tR87FE3j)g))=#h_({+k>Sm^4Ks(UuEx1m
zp#z6@kyY$0op@PKPm^gw;+d?FBm$E*YbK+n*+kiYT!u9_+i3Hiw8ies?%Dkq+8(aD
zCCQhFS=EZ{9E4H}Pa?zSnNEbpiET-ADLHFv{J6m(&$-!XlM$n!vHe1wX{KqOD@<Q>
zu%LK2C}xI~4+*nf)ATjq$rlMDHW6(7rTigHLQ4%UZf;;Sx$2a>#156Ipbvc`3VAk>
z=QyhwIB5eg!Qe4tao6GjP{KAJEvlCxsE(hSzo7%fGiU&{(}AJpTI(qgc1?~m&x_KI
zN+K!fN)j*FierAU$__q0HAy<J8&)Z*^Y8`WNjrM&WgCLDpTzK4qH4I&nzV&T27w9)
znx!!L0Mt#D%_QWIE0iJb*__<t4bdTTSOxLMA(6zek-spbQ0v%fCW`x}=1x@LC#@@>
zCascgs7%;uwa~0(R`_jVZCmkj8H0f$MG<*8@=k6FHkhQdp`%l?$Is@H(PSWoT$tOz
z>5j}$U5fJPjzk^U?mH9Ol?L#ffDn1TcUbD)@s)5euGNmKtZM~hjJ36i+lvxC@j-Mq
zSU|jw#NErRJ+#yFNw#LNH0aY4@`5w<^(ChPS@h5sbI4WaR}<Jv+e4e`$*OH7tWsRd
zB#+sg5G~I#L6hM0xHU?To6fBFqA$0UOovxJo)6QUH4BV9IZlj-ZZ-x~p`e;JFv*`U
zFXIovSV0FH&uWZmU(8R{j=nZyT#K{wB0G=GrB+I-x%nWF;KIdP&ID?=RKbXOwP8aw
zxb##agLPoYw7Gm03Ey1)57dqN)Z8zW3mJKi7x6h{VCx2&%FWG*5G45q0hmZjK=JQS
z*JL2|aw?lA5Wh92GJcE2)XS-iTBQGeHSIzz?Q$h;R|jcmXD*#IsHUb?Mn2`}iush8
zveq=2a;*82U0P*86FDMUoKm}aeFJcrDp0m`v%}1jv*(5h^Vjlh*L?7;*m~d2IGHf>
z3VC9P?=l^leMR<SP9?8d5v}c5la2`TFJBxxJ6)!8g1KrVvM721*)$Ny01)&(Viv$W
z0CBh%LnnorBk!upVWnFV_pFuzPB6pRqK0Q$Xnwv~4}9!o+{?y2!H2>mP=4QxuTXT2
zpj*sw$O)XW9y8=8WU)HuOrdZOQR<=1C8O8MP9#5KQc=6?H*j*696nj~)R+oKOejXg
zZ}9P{#n#krmR1vZYpse*>e^8b1?XxkBgI1bp?F~PlSMqDG&X9yDtW0|6sls%X4y*4
z(C_UdYvM1PP6%)XYs9*li<4n+V`30onY$pyu8xs|5q71T`UN0;5%R;#9dk%fJ?Rva
z!P?1KpydrSX9(M39c2B5IAU4wz9h2HEPtHmLi)03gu;g5-D<~&W-xq9aSPc=%E+Og
z_i}#K<5xX;Rg|KSA6UN!GW$|P8>I5vw|jQVNivtxUY%q*gFiV$?HNpy0Q5j&AJ3E5
zg-ulY@N(>)mvE%-`-SXmTW6*n@``eCf!aCGNq<`_V)S(9#?8)dp6#yS{kqxA#)B4E
zw|Ce6T&;8*=t#7VzOE0y%h@M6$*1I!{DP9yMAHmfFUgy(%`$6QYW9Hjikxi-Dd}_%
zJ8x#HfHSPHr;21<5uA6*wZeZ#AGp#(O1vT?7-n-8fMw48*$9%d^g}->U8mxfwxXO7
zVI~yXBqzWwkoBqY2l_Z=01CX+?l4;`iFT0Vm22Q!FH{5Wr^QIP)MljIs(JMwo6b#@
zoZSo7<Yhb)r=R{Hp3P)Dn=3ei0Aon#+~PuWjv<*gm{zg<xBK65PO3cbdrp^qA}^P<
zAu|(kVb2~iSQoBhxUgI;l~23F)UcSyr!I+n>ZL?Jbw80$y$Rs!QPSgGnv-9KWHjb$
z-0bFJQl9$!1mDH)(oE~G&IHu%aMGV35m37`0(wk2jnCe}e(%-Gr`>3)?xGjcwvU5Y
zNa|Dflls`P@_K8n-<dJjJ3IC|7(iVl_OhK0hdS_r=oj_&e0G8mNa%M~i;0Fq6mk}|
zJG7eZrOoXWWSFNL&hvIEU2)+B_u~gs;#oY`3+H2!$kT;Tkv=|%WMu2OrWPD!D-tFI
z_*{haT9EE}J4oWj3Mnhj`^iMTjA@cBPy@SWUM4fMv1&ghz3;~4_D0O#5Cmi1l!IWd
zl8#-{&3}?a^EcS7f^-rT+IIb9^H;Cps=4ON>5sg;@D+*ZH>Z}*%bC{wT<hkrhMC~s
zlv2UFBAhw>P3>xF+}(FBfBTytD|>Wo)3LwVn2-HPvg%ak8|1tJ6amKiB~B$k(bYaU
z1f>O}tk+0PY13YdE_1LU`8AlX9lHK@0^p+?l(8Z#O1XDGmMya>e1p5aOh^nFRuH&N
zo4qf7Hjoq4H;z<H@d>=am!iWv4kGMq4#bUF*S)mr5)@pOOx<FI7P5Q@cwCSxwR)&N
zg=?3xD+zg&>byjdL1j-08SBf**U4za2_{G=ysRZJ;jQ^ql`sh}_BQ2!x8NjD?QO^h
z&#57#y(&NV3mUeitcl}-r1Mq*NTKjyhG3R|9vg8wx6!Nq;0<*nm7;VrObHr#1k<z2
zbINo4YePXnZj>q|Pu!}bU#s1R%N4O%URuu6cuwiI(K<&BkkhCh1-Kuw)-v~k`A(8$
zt(=k@+c#M({SED0U&UqEX8bH9`$WKidkNZFEFrUChW>apfiv%tEHdU^*_5jEins8`
zks#-eR+I@Wqz6r;oimXq)t#*PmAaHwePwO$#gD}0pz0fSGAT(coVTdr3v1UcgkKy%
z<K|w=a>RLIm%gVk{TWbB`p!o}+hC|gx|}Gp3k(wdV1sgk@ZMjjb`ny^os4r6Qx<uz
zR%Cdt4UAaB_m?P$4L^aK3_jMXYNs5i5-2VzZ+rhyuJRQDtgLc2!BKi+H{GN>q;PXV
zAn<r&KZiNxCMQ&MKR2>fx|47JJ4v~Vi$+OAn-h{hDCxH)Ai(95W^s}aXkwTpqJ9BM
zhc^<K0{<D^vQ2>|u*|YjrG}nz{mcyM3?|i_FgynX{4{eCef?<fVZY58(4W$YmOIev
zrXRj0_rzHmqh@vY_ez|nrrrKU7pSOdZA$pcgz;o^vs$l7yao@+!dNk(6?6NN5WZ!T
z$CG!pAzPe2-X@Q?spA{8LY4PRDWMa|`Ydy^Im%rWG<W{R;M|1^>Ehc+4et`eYc?)2
zZaA$`yY_iIx?h4w*fv)KcN$Whm(345Ujk7m$F%d8W-JsU)m{o}x@71pm!O=?_!Y_j
zYMlJ986|)PVb_d{6O<z)uV0mS7^bWmE3A_MD??L&i1JAo*XqpO+b(T)?Si!3(bdv+
z*DCK)Ynk?gq@tZ|FPLb@W{al{s)2Fl47Q_hY?|+rko6+(TPSOjgzO{EKuB*JuxWX@
z+CYGrFwiv)n(QwQD4OnbGsIdLZe^2$yVxjD26vpi{Q#DMW_z}@;Q~Qj8-_0E6f#1y
zk780nhSNqKzG|v*7E26-d`@c_=aA=G+R<Uf(5<UbJi;J?EedTy*dm5Q{^#+)A5u6M
z#UUNe;<rhQ(z4OrKU<cD(loO*U(z@XD+#k4Xr*LMY)4P&bk;2KiOs$`DV{y;j7Kb>
zYUUs^(~Z}-cnx7rvsFG>6M(Q13()pcbG?&h-pr3oyR8X^u~-mqVTntob3;Y_mdsrz
z#uCO4sr~o=@Bc&6(UvW=CC7}U#t3Ez&L6~%AIMrDX$ySRDFMVm^{YH^SmW%6p=Jkl
z92o8c8gxb|=1kTOT!!eGp&~_OnMEQv$m!BSQ98oWW(oP3<}I;)a+Y7Uk*d76I6NsZ
zD;xUaMeo!YF>8l|e0G8;AF86svbAPDm~%Efq0q#4vh+Po;u-H8pU#&UCMU@FJQAR`
zAgqd1O`?c67PYeR*xhS}0betj8!gs`3=_eVq}=#BNX3l@>KKfF*$zOTEX^E`S43eK
z@i|0jxu``@C|p-0N+rY7nYbFvvpgp+CU9^B=VX@tgf$X10wH2dt3iS&g~W47*pc~E
z^Vn8S>MVxT+Mh{y-D(mq$mB}B<E?rgsQbj^>O_CW--2zm)iNJdeB-6_&>$SKKAV{(
z(g{HijoRr^^KaB|(`<BLS;h8TE_j8wecW<#5aJ0fHJCfomu-@X)pQ4boLwZ~xyV-@
zF4;yg8Kjtj#ZfWgP2!=`d2!h;vE9d@(^c?pK&Pv2zz3TPl8AslU^HRsPmUgw=N4KH
zev1ooh2UE?08IcM!x#d=jP%Ns5Mr23CU8NEgF6LLSCaBDEWmhb@VFr_E4bK*74p{Y
zp6PT(Te#<n^tfH$oO!ZJ0UVY3yD>VZs-n-XRo4yrsP&m)#z&)8VZ@HT6ly|d<#SJU
zuX%GVWO~4_V$YlaQ_IW0g0&!8s|qR*(NZ2S$CX%xqZ7a^_wNTSa<<hwW*P4hNyT{`
z-Ra=B+;>ky^jUuxCGi2{=||tM5^{T4RyQAH>|)dZDZEPf+_=i{d6>6`9MVr?^27u@
zn%PWXI7@(O1QbfCf&-mVc~(mqpxG;eK<tXyZil2`1>!JApBBdsEc*7w1z{<>1aI#a
z%*&gFV+heXo-5*@1vF5QIqJd`3QL|%<Z^fYZP&<qz|fsRI*S!VTju>Y8z)6vdQN!$
zBug@BhjbHCa^cOpj%LT{V|)1ajsGAWy+Q6?^h02V?McW^QkzmajH<P%7z}-3yFHwp
zL4*bivu`Mn{7ATo!qyIR2%3$4%mQvQ0<Z-A*$TY^+m|9A|5HHvUKj57ACLBXITCQV
zZxoPu=6QU27`;eb)wQRWx2cyZaIAS&yaQNGNC{n4E<M&tEX3$VS*x+lsCXe8bg|3n
z$RSbhKP-2cKWDDO^~scEKPsg5a*)KlGkutrWVUL5l8qsl*FH-9k;bXRCL<jW4K|aB
zm$j$4(K?B#(|4FNmv-1%PYg+Fw6D|S%ki~0XNUM_KB<+M+!vnKf7&A~INn3ZAFY-o
zVTvwDgFp`@%}z+}#pbNA(&T5^{=2V>9filzDM{+z3CR>$tq#2`iJ{@eP?wV#8IGX)
zaI>R`*EVgdD1yDKRI|ck4)U^D&nF`7tBj?P=!?c;^U(E6*@%hgW#==S1<cd-0brRb
z_0^+)labab&uqOq&*_07&M-iXOI4!3O*1h~t6yCbd23(Dy4W1Sdz?R`z=kaKHmW~c
zTS2OhW}><+x_j$(om;&cNwtnhz7x{L-Hg2EBfsIOqAniOt}wcqqk<Rbs$;y>tTX2q
zCiJu$qyAlXI%}I#+pb^SaorWsh6Co0>{e9TxskTx5P1t1W$v@lMXSb!3?1?kf~nc4
zr#|CPyn&5(kX)!b56gG~5MytIm`{SBX3&~g*+xP1f~G5%BLwj!UaWnjzMw1Q)8X|)
zvkZ{dLm<lqHeNUXg=4;eXP1ISx^|^3AlJHKe;QwUZ5}b0&}ss5=*@SLe2l_l?j6ZZ
zQ|%RZ8?+>IUqdRliCm!}a63iLva8Yjs1)FpVjoY$t=*jy0%y#ZzVOp7X6P<-xg_uw
zb9INu%BJh~Jc~jcj!hd<({=xCH{?&)jUTlYc~qAs?7r$I+%RdSJt!Fzo)}7XnoQ=k
z+TN1<oY?(Y^`>$DmR`F{Ko_;&I_(QMR2-e8XUGq1?k}W2(G=05uhUJYhSA?x7<$uf
z8E!;i_TK@gi!YSE^^`U37$WtnV<<n+6_}uhleCAw;V#=gPX_abOE_?Tn#I$!n%?uf
z4I9%>r0k9%J1wz>N&HIn+2%xn#TMPM2Pi682Tm4V+L#B~%#ePBF=n$C*$%h~N?1X!
z<V&GQ#SX}%LC2o7rfkz5WJ^(xZ1>+~?*^^^{-6K5--xmS><;YMe+(z*92HZt2L^ia
z9iYQ^4dSdut6}09G#}m<1-V!`U+qg`GAM1k{%LT|Ds1yGQo%`wTIe&f7R(g**)v`5
ziwC83=Jld?-N<ZE@NXSP6C7X09a~Yy{Qn+jAiZFjWR_d>S@d6UcW;>wCD;2MoxgkX
z3VP~RI*RTb6(2I+bB7e!M4be#eh=(w3;wf)cNitpc?OK6F3=1XtJ%z|?(DoOlb~vh
ztd-5bGJiM~L|=N*mw+)@6~PO&A^uQ;aask6Fts1iA+~+)J0dKp!=V)6UAL7-edt@s
zbHDF#4Ca)W^O;AjKSu{I4v#FG>2I5~V?X72`Z}s(e`JgF2hMyH-B03$IbAf#e|hoh
zWy{ZP3gf{P0qn4tAyQ(SKwt8v)wqZ$m9hXO3n=iLC3p?ql4=EPc*ca%i3A&^K}_D`
zTt)>Qza$<u|7R5$m_6P->S*u~>S8(8o3`D^mf>%C$PW-;p6g-267}qY@iSgA$&XW_
zM$tpa$<JRLDe<RmQ93joJu)3WY8}qf4aK?GaF^t}<WyY}8&4K4_DNH#ZW(+5l#1fy
z;es+U@?v$jE?y|kk&-NR+?3a;XQ)3+FPM`~<r__73D1{$y-&8yqA#39umf49<mPNc
z_R&ntCA<fmA5DN)8QONsW*OwjHYx0zgcP5e+)+Kb!0hT{OV&07&fV<!6ciQpTqk`S
zmT1KD^>hk&_aXTftY+!=tE5VBAXbrF%ks!&P_p2mfhj;`dhx~+k5^$L)dN(2mkGWc
zh({rqxx^z{y{Q9*+=zcp030XWQwpbaG}GVxTrr()LLxANDa5K$LMl_L70;{=vccwJ
zWwPg_L}0z~C;`BSpK8vb&?sabVLFr;ye!Bi=bXj&XA;(%6IW<wfyYPQZ|o=OTZxIO
zf>eOWsk+{{Rd^Eavh*0Y1xzI5@_o^Qgb_UAv3HEWPZ!xN{UIn5Osd4^6u@^hAC?P5
zP;GoN%U9yqTwZAMl8|~vKIoS&r!&!+AB=TFG7;idz~bm0uxNs`dx@Zvd)3&RB*ub6
ztab#-1aG?Kc|riE&Sk1C$y8-Lb5Sx0_elOQiz$>`6$5gEmtaLwcP$d;#Q-P#7BN)7
zZq629?}w)u^0KpwK{g9g!HyCbUiq@}I_MM<jI4xq5#-KI<N8cztHe{-*l2a#5|M`D
zh!;dh0=WY@FAvMey;OK7A9_jOX?I4ZgXXpcssl(;c7mkxvHOhtawGV^DB2TH2DQJm
zgY$XD{0(JuB5y;vgk~%^6fU9?(^u$!bO(Ob_iEJx(6<-mg+GXa_+sW9V8DiB|1KNo
zS&Df#nwDlHz5^veP?d;)a1znwrpCt|M(4>pQg<&|PBsjqx@?f+Q1JiwlKdF=5uAd~
zoNDQ5Ev0I)Rf0zvx=yFlDmz76$iTldBR*15*%>MVIqK!Uo5V|UwB&uvEvXih+w-ax
zIN|YXHk4dZ2+3cj6SJ#0s9HP*Z2d0dkEfj@o+(@9zOp44sr~%$;WuhDq;zT!M>d(o
z%v918v)k3_ayp@9+V|AJ#JgjAEjP_7Us_0{#}h~2G99LR;m%Ky-IRl2p3Xh~-Tbm&
zP+=>lz5*yu)mqxQRX-m$wZvhl;(+>mrG;c2=2kILDjbHEZtT*$B#4WhxJTTnR?1`J
z9a<9@1s)iX<moVOH@Xs3`y{A{qk;!Lac{mWzKf={o)+2OT6LfY=-6UgjapEdO$SYZ
z$@8=a8thl41#DGP$W;VS>sUkEW4(6CbCgOL>S8!wTdARYJuciEtSK<NM;~o(jRluK
z@5qJO!!5Vfgk+iD{c$Uu%~#8<ZnQ-pS6d&ddk}Phjs)i4%m`w2B^VOkd7Jy=_r!<~
z@U2=Vt{d-67j|zpqph|1<JL{n4eJYYu<s{Ig&@cgL}shwU8wH%@T=k9ac0U9T{O(_
zX$ED3H3H{q{8_FRGerxx@}O*Yoa3MYUompoF;)?f@<7-FA`0HZIbwi%3W2wRtdPTD
zQXpJ$)YqNf2RdNRCN3q>=CGJk+m$G@XMUYtCt6WI*wk2~Mn7s5&O>;x^eel63txrk
zY~)c{EZyXH^wHslk1BQ#e~QgQUtX{|2WtwED%W#rXx%pc)4Os-C|%tlIbIiaE55K_
z1m|=?C4@>?IQVYO%vsxJ5@2UvqEg65cFce=NSSH&gDI$=l8$aW_=bDCm9zd%*Nh8>
zOI1;t_n0N-v>Ew~hP%<Z;IfEg*mN=Om$tIHa0Nu1cA>b8Gd;IkvL;9Au6?v^gXMdx
z#pLc5POLewq_#NC@@4n;H*enDYStJJ;%zd!y9K=ls|V$|6>a35{k>IdfZIXVB57Di
zOU;r%eqMcN=z}ds;0|wxnqZGSD4YgqyeZ5+TZBG-hqqf;X!9vyOB#`!&;Ew{uRM>3
zw_i{sD+cv6i$@B|MI{e!*YexFZ19~Kl@{F2Z{OYOV9$1zS%*;NmhYBkJfxYMxjO)u
z7CrMhifnT=G<B~jNXTX1Fpc2Pp8I~V^>s3txCGU|+G1|EP5RA3oz2Mq+D$7wz=+P3
zxtGxGkK!75D?aOy&aofJQ<grBIT@`woTizCIIGYh`9eHm=`SVwIV?{p(ggx4IR(q5
zOsN&)aUy7x%+yi|{(xcv<Qw-%Q&cj<;o@RjdOJrn33HMbQHL@B*0e%XY7b2Va3DCj
zN;txsR}@QT<H&wz#@M?}KkeP=<dv5&2mM58Wnt>@WR;*wERy%&ZzHD|iizpu^T$bk
zNS8_tQ!KkpaBzPe>@r`y<?T=#3v0J0mX48;h>+!u=8~lI1Fw!hQYZJQV51B|ERs=1
zRtCbX(IK_LAl`{1v!}*)t$WH4n=fytnf%2|SqE6q-TEvWXRxu=@7?Ld_o_a}s<jvT
z6&Jfu2&!1HPy~ucqd@$jZs7$@d;fvCZnL(TEc41owrA3b=e1-1`5Te9??(0ivD>~W
zR*4r2IZQ)T=bJ?Eo1MX{1S<b83^Ik<3M-_0(v-)RMRYUQ(CzB{e`P*8HY=QF-7X}V
zH?^2m@iP%@qSigcq#IIkXS>mi?q~1rjMg)AH;lSn3K8peAK{;S_o5%^uIqFtyi7wn
zX^$ELh)t0*IuZO>rrr(P?Mi6PcH=+4s%a%J9HNv3V-cL*P1Vej^KFaGbeK((?K<ya
zzKrW;g?bzVzujmw3niy(cP(FBvXTP`KcO$|XkNVC#<LGj<74xsxWzF;e&RzCZxh%C
zMPZK`HH_9uh+Tv;jFKLrvASKt_@;X@lm>w!0|TLxEbEPSd>*Gu^h=sUjFS~GC;XsC
zCb3e50P{qp#Cf1d4?+HgIuE@em`&aeIQF_(pdKw@Fk8(?Yc*?N3fG&A=;La(^Jdfh
zl;+Kf7~2rO%#7VICvK6RnTs8B)$Kk6iQ|LOcvEAig6QFZ;Rd1~BU;JmP+-o$&2*#H
z?ibOA8qJH&y#2z?kLAj|3Ewc&RxhA4jTJ1{)Qe~93u-&`hO2XIJ5jUy)ZZic@2|Fh
ztYeUX0<(J;z-Jh%dHDHfw{LyW-R`$8Pv(+I;`>RxR<Sga-zHcX2p_)uLgV(74ZdX0
z(u+2(+ksz77id>B1@WjnIAR|#I^JR*WGFNlyEhvkDpnV5Zp_`AP~&Ga!)%B1>-E}p
z+S5q*o&H<*+52_d{K61!-^?l8FI%y$1c*<~NQmaQ$zqTR78YJa`eH8!B#RCMyd(Ui
ztJd+4*&tlR*QNlmFVH~?JBJIjI4!8CXUc5<hF7@B{r&>|=1$_j<%5B0A^)v%s*?Y7
zhXR%HGp*QG5%FSyUGAWl`1gSdsx^-?ppPmEmip}p!Nmr=-A(Q&ejH<g{t(p>Ird7V
zhtCVw`=dG<bffh4EhRZrSvM$XJ1nAiC6(b$D2d4{J|qGYe*B7%)#Y0uD%{9MVj_Ju
zyZ18?j*3}3SY)6Wxeas;rtMG`e=eo8S^d5JyU&}nO@jr01p!Nu!14M1L(60Yd&*Xe
znb03@B5W%(K3@3X4zC!`1Llaqdp`i!6SMmeO)N*x+sum@WIsuA<i&S}2PAK}Jo3|A
zm=+*D_TqVJ{uH68DS1N~GAxx`dCZ?tAftdG;w~0eQ>S*1Gqe#`_=)+uE3$87e3Z$+
zxXJTJH0>aiwk~plqgBxv*cKku{F$5o;u^x^ZWqgj;*QDt4L)Q448EY7!7GPkXCK%1
zjBu1N2Bt2t^qOM7CuVEck<3W+!g)9PvHPDN>YT5!@m0vs(KdEd?Pm4zxoWRw=Zkp0
z-S`)nv-{aVXY5*Y^&zws9_2q(@?Pei-0c9f1L?c;IF!9Z|IDi!1-)v4HFkgHX&{jP
zI6v(e79%=-n9MTwhB6^f%xN_*1@ibGXIJ!w@Nu@qWlqZ?;JR0^E|%6J6ssv24kirh
z1~a2-IAr$(lC2psgz^+k1c)IBY4QAnJ>1Z2Y@|gvZ_sjVQXIL(F&FzPp8Vl#w|)DI
z_HHTXn%`mreZ}%`s#P`v%~bFqaw|jkg)Vhyw7DCwr_*LtDyti;I$L13!;oZ@p#d&W
z)5QqF;&QDeIn;WwW?uzi%)`G!n{4^q{43aHF_;g*(BzjmLuo7VAUjLMm&nwrf@I&0
zN#gP)q}MP32?Z3`w(Xz@GOw>Hcz8{2d5*3XLp~x~3JimUM<Dg-p<6A;2S?PY?88I-
zh;uq8?5IR%!PD%u9aZ%+MUsOqYwE8{VtxHo&)gnbO}T*sd9&}iC;-=jvyz+bmmuIn
z5?r-_K*SPJOOwd6V=M3Tyro|n?qgJFNtC~vQX$?HQ7i9}3lKf-?Doj|%JP}_+)p&H
zNEqY*URrvfM32g8{4{fddJJ(K6>km}0-TQA%c)6tu<hDo-3)S+5ha7HjP?o&EC$?@
z+yTL@ECk6gW)vdv02HA#m?h`(HjZ<S{-W&TIaxoFcgc{e+g^%eTd+_Kz8MzmH)@U{
zW$jR%yi#cED!s@imN18U&X%Dh=&6T~8z?+0{ZK#u-19^Ai~Ea(%X<h6C6b?tDNIEi
zQ)DGC03Rl5!0<dJ+C`4IpJJ0@{Kw}B#EwVE@{|l(aQ>!CL4y9xV?)6jZ8s?gj}BVD
zyLDUg!s$9{&OK9pp3G68#Rar0T7V}(yHK13RgNlMcxL7pno}Znva%d%2oK)3W+Qqw
zK1<bj%`+flm|ZpHT+5(Bpqp6V%FG`8{Yy=1vCp#wxC<`a;=(N|+(O}&0{-jN(mWj>
zq-^yH_BMM|xKy;5C@vS|k8PQ9Ex(*pX+&_G&x5sLrC%l#E14~@I&*&0ny=?6(&@<?
z`HbyNnx8`bjqw@1X~`R#|595^T8?{}YvK#|N1aTv0bJZuG$}8r7v2~4Maz8A;xAgk
z7Y&ZNfE)jePo!BILz-}R2D3(25ihvmZBACPrgIdM$F{ZOhn45(H$t;qa%R0BzUavt
zKRYu64rwmKxyzrSr-*waUq;)9dW?eG!-Leasy9b_k%0%!nwIj$Q87QUrQ*(i7nCzO
zlk9f^y@g8MhSgfoJnbUyIlysh8Gmvacgoi1A48wj^JqPJeiOt!k>wG)+vXKbw`opz
z`!zT9Zjn@sM!>Upp2E9=J$y7;POI_V^Z&*}+Vd-fT886_O?T(<`An>9d7cf$ha+Cv
z-qOLfCrLsPlw@1w2qmR74+)4`(m|;oH{XoHt=cFk%^5|GEkXWj_7O+Y(;DBLzOTFg
zEji_<%e=5T_Ll-y%=yd+YSs*HlGF%R$?aqICigAv{+8D4dauc?9i>u<XIw4dT|La1
z-5!hYwmM^i7w!6t$0Ey?93(o0g>#UUinpWJ0v_mfN*5q`hkKd@NQF+Cl2dtf@KVj9
zAv3VnXu@(G(J`(gCnueliCqmSqRU1+P2xdre{}|i40h134v-8@10CA!3s;2gV+%vc
z^*ZU~i=p{uJ_oGcB3G}u*L-73<U#DMH{-5hBYOHcDei50JukVRyw#64@ORj8u*JBo
z4WT%n^`vZ&k^F{m0PbDG?ak<ld-J%&fmPD*h$8uTbin}wu;DD8tOfK}4|UW3L3`qu
zcc~8AO#PK_YVb`dQo`A<MGT|ntuqbWJI#KQGHtsoMv^3s)6170&hM8!ek}>SeZ~^Z
zb#fsyEee%b9af5x0B&$SOhG*@b3x~%g*J8Kz%YR5?#-K15T#LTnY9v1N494(VKotl
zse4hWH?Oyyh9dbYQ6Q?2u;`8*o?!LN-0Y1O@pwt$Wn9*qoTj4o+a$%|twRAsbJ~OB
zP}s?BSdF`Y{I?|94mcqC*k(gZKZ<b_gjsaN;?D66;&psPn89nFUGE|)=rG3V%tizq
zBjND|k)>yP1#Yo7H#>y$!4q_R4|((a?KL;MLS1&B?nCt>0)n5vmm2x3N6&lS^I$1x
zJ!LviC@ocs9fwH7qj7HcMc{>UqCH;|I;;1DQC$5eCz*MYEQf7LPi?VdHFI6aNHnQU
zn<c!WQAuN0uFQT^QK4O^ur55VtSdNWL49q9?#E%th%&t`>CPZN`LhV`S<VP8kisD@
zjfV0chk-wnNuSp1HgwP~Kn;Kc5>VvdD{-#ZcAVRYBOF*+INiM?s|rFPI#5Z%iJqx%
zbPdTV5^0Wcb3MH<Qic=noGvZ$oS~}N+a$pIp?ZGyXx}lBKu0aWi;P1B2s1{N?-exC
zn+l((7N$-w7Awp8Q&@Tl#Q&z<6uC}}3nk^`mm~f=7k!Hb?~U`fd8mYA*iV`xOixGw
zn)m>Nvc<vD6zCiQ^J88uowH8Mv~~#aL(l`SkyAi(wmsUS*oh!G*1^)Jt%ha`OX3qP
z0a<tXJv~S8C7J(GwTDnE6xGZEkdZ5RZVX>(vDWUlNOU<s41PgLpKC8X)q#)K+r3C5
z@Y4u;^Hb{s=*y2$2t)|gju*)VDwEuTREx4iQ&wDgawsV-MG42O_2%3>m+M)Yj5;Zc
zLKj^U=cz)cR^6{xO2n$BW|56BdCoWhF_j3MMel|z!tzFFonReAAYkPH=x2gQ#Bp64
zJG%}k)+e!<i6slA>UP|$^)-EMmT}$V_8mqGAUuq=Tpk2rU=~d^mg0J>HULUz5xBG8
zh(wL=PX)(ynWi|bi%gx{TMxYD_?0@`?=jP$SYA9s8(LsbMDA&gedkwgylVT6M{cCW
z_%aDDqK=7;L!$4+dtcN2@{P%c1Ihm*<SBEiZNC&eLl-R$zBXJz8=23mXPEQf0-k==
zc7T4tTkj?&!E%(9cD&7yD{dTeg$Ik?4rkF^XW=yE-fcVclB_X?1RGIgOgz~er}+l&
z)blh?^wzX~zv9MmYAfF2f48L0HvimMH!ais<UCdxQTa{IddLNJNo)bSw9nGyJX#>`
zmh;6qx^K1mV%L?f@zEix;)wmdCyrQUv&4gIaL*|xfTS&lgO2t^*$8YKFBX-uJVSX%
zOauiQgdbdiqZI;qB@)jeK`;F$`{O{Mpmg^c87t>-v{9LLr2210dL)ZuK16zy)0lDC
zYSzD)t;(XYRNWO(Dr^Kcgutg6<-|nlyy*Sza%?*L9DuH|tP_f8STSpeK(y?!SA&JF
zTzIHSrjX(3=P?}OlNplGGSZ3!Q*^xVTkiV~8@gOh4)VuSVwi_i${$3xcEj-xyT=So
zU{;e2%WwR*x9;7&+5YUN|LFD~PSWLXE0jFbHE!09SF&y1)-<HZYqI?4R{7Cwk36>9
zZK9CoU+b)eu=?d9)D@Ek9ZIW&UWL-c0*Z^s(;`xC_G}tT9aIHlolEi<yLl+E#eC!J
zd;sQ5NHCCla-PnD+Q?Ie5@;{tUa*nE<tY~k7U?cl!Or9ydn+%`*rgM8kn&}3c%yVy
zb<LyuF14QcDP$gel%2T+%OrX+`kg2RlWpp6bOQ}`qvANF;4I0ptHl{b3-i;KJiTbh
z`>GE&d{>T-XQW3Tl4{vV9I%9f7^_zTT`%$lB?aZ|G6L*EpI7omM9kHLVx9{4re7JO
z#)&*TwRI{`NxSy77-rLuPqg$4UsKIilP<bJ=T74LY8aAbO80~NRn-Y_K<b#At203E
zl&h{u^fibX<Oy6BSR_nyb+tcSvD)4C&9GYYU}LpdVq5Rn+{#(o450Ynhsu^|Hp*?&
zDZn)AruME+#mSV*kGrK1hzN^tX->?Ntfp#%&`ZlQ%E-k>4kzwpH*0E#_mc9mB2dwN
z+8{z~&SMdPZ#v*~THIeADDsRkm&#j5e7vIhYA`Wpn3q3L-=mxM)`M0;5*Bi2;pD7a
zDPIkyq$4&B=PL>sJ0>rIbg)_`sy~~i`Oq)~_JyzKz9EYGmY7zZNm%nN8lrTe?cB>J
zBNtsB?d-@mJ3AY`YKm)<=xlt$x&+|~{BEVo1<tETHM%td>rK(6g#Flr#bx^>ZeT7P
zc&kaRtWzfDO8JB_amH0+De%diPDe`AZdmXhnP0@4-Mf3cy?d)}UIt^j8y%ZR<m`!$
z3=z%iO?|=y`W{Y&dpKK7=X6qTQ3TtK=nc1SuOY1`B=eLobYy8bDj`p&c^OTEad~n$
zuWMcK+}^JHXp$cKbO+N>=h&;!*nBk~wI7;Cj}cY6t+ln`zOEr!B2taU@cbU7!=*}A
z6y_^CPqGaLj-$}QDtNi+!f<)vj^G?Fh1EcWEamD67J`auC9toWi=W)Zg*WN@rIEsJ
z5wFS7#A7PqZxVg>*-ejwOy+r;n{8){6Z~%7G$jm=sBJmMu~suDC>%|GYF5k096LK4
zkAJ~neLp9Nf7P+BT49@fM=6MT?4d}FSLSn_|I);1KGVSe5I3~wTW5x3TD)qrbRjP_
zUw0!u1yx&)_CuW`#!1AJp`!e6>$*AMM<pX5urSlVvv?v-iym}$fAb0K>xzckOoby~
zSLHNPwc4YKSaPcZf(J2R!${SD2+;oOtiOf5W9V%Qz?z_4#7wrrXTxN%WG5nAE@7G?
z&d138v0Y(n(>@fJBXd6+Q5)(Of_5b1A@M0Ti4jXfm=W@Y;|1aGP`swsmRReQPm6pF
zHLnmq2BeHe`hd`$rsiLqC1~)l!>LRwI`~WP=;f=!qel;WU%xm!x*NQ{K}cr8&N7~c
zn>~L<TxI*uA3pkX@4=&&M|VY`(?Yqt150~r7`KND&by>+z^iZd3g^u&84$h7bCwV#
zx14f#X@2T?#7>(GSZR9jeD7%g+eh35#8dV8s_dg7tY~CbRN&LhBbIag7YkaTiD&P&
z$Mw}dWh*=0x9Ex1_sQJjyT9+LYQ};vdIoE8H%^h*h^?K+j|e(-0ksMlNZ`oXF~6Z_
zfD+(Wn>DiSj%>Id$-ZXdwl<Un$k7dlLsoR#68I1SlNMVsBLiR8VC?7(cC@s2Y#UUu
zD44XXSHID_%$%6Fl+Zwt{w<TRJQZGK{~%J!VqgnqLUJv?G>@MWyE@A+an!GJO6v==
zlP%VYO6hg49UW+Ut_#kL<?xh<yJ3z1BIsmN&>BZR_f4LS<{XQe%T|mb9U}#(enl(r
z``&z!NTD7Qlq~}P(i`|d{4LoVAyxwLkjRti7u&xy7=LvZ`4DHVmK<qeZ(1!$)zDc^
z=gyUdoDCG_?sji?w^KEpj`tv9WGIK+ur_6VH|k$d@ttY>UADMq{!M4*-^w=n0u0G+
zE171N@Rm+*b&qeQyMX9DjhgXEfP`DUDM+~qPa#TDAs!OEz_i}+(hr6ST&Tt3wqPkZ
zUy@mFv1TEOjd5&IQ&CDTX+snUK1FPWbk$fB8(dtFESD~5bGbDwpo8xVMZBq@V}@2r
zwtB0mHVjeaAu|#NT|4SH@Kfjud|5U+pMDxzLMh;LMeR02>OFn&VDD+~;iH2`=4N~T
zVE@tK2DqASvh23hUv1P7QO4Z6liW{YPDr*$ChL;uTB;)mme%g5i$$938#aSQVIz9>
z1m^6LqLxm|JD!7Rrre(-tE<%HSWL$y=3IQfz75Pc{Ikpd+@kryU$@1t+6KC94!>~G
z2R}Ik!>_8`kTc2sT|zNjbN_PT7-kV&?|rxU<#}e$nr4!)w^DagkRKV7H-`DOYxkiQ
zW@Vn)eo}wV@}rA8B;8&(&35pC3l*F0eroVYp8QkBjr<ZgQXM#gtw%{%&9edi44N9O
z(uw)+x`pDt+dXLy$O(kzer^_K0TB+%%eNP0i})J_iTn+tL|VAqTZUq{h=R9xP7KFJ
zm%fv)?(_2?0Ax0w+Gxn=H&&Fz;~*S^eL&3PmX>a{{HMP}ViY4WinR8l<1nrhec@A;
zPzUtMX-HfA#qHiwcznGy#=+GBy6t8%)EO@<gEXoL;?=eCrh#uheRA%)ahz8iv8#FZ
zFt_b>SjT~(X|TlZ&71#+J^gSp<jXjEZb)DIJGUEHwM8oQ*_xf<40W`TXt@nM?sTHn
zOzdks9>Pr!{>^(x($8UPrY~Mh*3IJVI#C3TQrvU69L=(isGCXa9ZyDan;`O{JGXGD
zB2xtId)mxsU$!}uMO6@wZRTj&l;-*crSX^6LpWu4MP1~|ne{|}#%owDTr$4OOYI|P
z{+Bq3zj2&IDNKTM9J?_87H^0@?6!A5`(68X|CjKHU&13k){Ax%$Mo}!n)oGb;+L?A
zU&1CnLD&Q{U`a}n&8HXKx5?L+Ih|z0O8JVY4D_KKlwmL5f46W9mTY~=j<f)1iYTSe
ziCPEaLE<h=I~m8DwqcWW6dyxwSt7>LGAWqAs9-Ir=CA@kKW{oeC3Os(3d!{5j>wm}
z&4^Zcp54=AXyoQJp9+nDlt4Q*1ppSQaG%E0!6+u|>Pfa5IlQ8-Sunl;(Kt_>o_M!b
zDqtl!N{pO(Pad?zn>Ecu3+Q;_%ty4QrI6+<9o7sw95pl>g+y79e&oOf^x2+D+D+^e
zM%QzAD6*=AiKP3USvMw{+A)v|_0qP64$2oN`2pBTK!1RT8dIQv@+Azcj+<)(vu-w)
zt~p)y!h3jpJ5_-iaNK8hVkqYyd3Q8|Af%)7tU3hgZ=+NS!i7G)`Y0j|@!vYEsHhr~
z(S3BZQL(;b(Y0N!q5NCNDcu)hN+P)&Kf=mNoTsMEGr%}t3`<~sk#z6oY?RRmiIR=k
zp;0z6dvjlP$Ze!uRzM5wCn=hf0T`By)13NY7|qb&Dm|Gch(Iy(U}h_T&Eqt1mc+Fq
zj*D1hez(}lv1T(nIiQZjos(93B<qYWpb_MpAS<6nX?dYVa3M*i<Ykk<uXHBf?~<|t
z1Ndp-Ak+&LC}dv{2@9sf&eX=+>$-tyWzAACI4!zfaN3U)p7w#;sJA;_P@0h>>Mk(t
zj8U4a;?jJRA1P&C7EiUAnq~Zslu@f8@{lH?-{n-3=jyuQ-Q~RD@~f<c%JB+I7igT=
z;meyhbMTx7cC^UmG*xD>*fq(FT?exbBV$V~b#<9#B8W`mHM<RxuB31}%N6|x;4!xy
z(&*#NVbQqY-I<?hm?xuYS#3Cg^e>+pL*O$ctZ5OK*s{De4m?%VLPh2_Lu}l+pmQ3T
z1b$pO&!Q2{oOVnVCCMn9V{j^5pXwU>`hA=4UHGr|nXpXbc^>sU<BoWIbyl6e%}ODO
zm3gIX7~p)ef@;oH>QzUJHo`XIElw&{88>Y%Pq}Bf4PKQVT+IERou>;=OV}sVD8EsD
zmLv}+om3A{87E$JJgfa!`;R(qOtS)u7i_MrcO&!kKkDQSB|rY7Zf0c1{5Up;5P!XC
z^3#=liof2NhaYO@|77ntdd<!^o=F|sn~5%|fGMJjpqOO|n`W2Wb3g^zJB!^Aa2@r>
znh-l*4dgEi6>pUdV*e=K<Mv3y3)!^JCd%mRgo0IqLr=cQleL%fotS9a3kBEGEATb7
z+JW`^l!BoOnmGAOJpH1vk+O^==cyWSxaZ|=sKUOgEA|vuknO^ikGRd^jStcelR~Oq
z#t-bh{u{m3_0ICd6i6vz^0E?XXyq9s!&v=~H%S=WqC1q6wdazj@k`r`XC+Y#Kuou4
z|6m?AO;G4j`TXFSU9*BpTRkf+Ky2V%>3=A`l{dsh-*21t7Q=qD?d6Ydu#WD+9ng$U
zkeK%qc$N}ax!o(~m-eZRtxAsO&VSqs5^_NvZWIKv#ReSabY^ty#P@`l%55`l)7#y)
z`G3DR!ytmVeX9*oS*3SNBxo@f*}JtaC1F#k0*?H9-7%t=uN65QzcpO7mCdzxq#hIY
z!1h=M#1zq7H?>a3ylKzhp0vF<%We-9A5kj0lhb+co%g@mAExVUanjX(+*Jv;q8=*A
zr17<8aJOBNb)rP>R#hWv@#G{PuA~0*`BaktX>)Q-nW@E7b)huWe-5uflKaF!o{mNd
zTey&Qnv`tf(W<-APUWkYPor&a)NIDR3FKK>$)<I73rhPozfZC!E63W6`WMXZi`UN|
zy`-Z=sk@`TJfOWtq~b}s{CYKrG{~NkST9cES^5LhUOdD$dB8#R7_ER^C+u;qq@<FZ
zIvXSB_lmX$tLjg@v9{?{sJjmuYLhq_%QjB6UhD+~i($3>{dk8)MuqS7)wz-u(9T0x
z#7&2}*H-a_U(m2g3b8<r=UE9sTL)psOsC8Yi5XB`97_kyo9}W8kMX-~p7sXc{B^$j
z_Qf|pyw0B=ygGY#>*;*`>WBS5exKf2#pkzfC*Pmjm{Qj06>d$$h`fW#Iwbc}d_msq
zKYaB31v&N05ux8lPY-(!_Iig$FJ3<CYZ9$6;zN<5NjBRScM>1*JOn&PVl-mNum#1k
zCgA5KcRo6FJ<3<<DZFoZf46LR*xQPP8)Tbjy&Xgx@v3XIe|p46E3%VxN$`d5n>oqW
zkzqqmCLiOCX+G|qoc8eX4V*_LG?`{B_?m80R@Lp{!pNH~n<CMvbQ%;5O7kHdA){zE
z@;L|zP?${AwG?yr&}u{Ts&Aa%kXI>_ty^NO>@727I2ncVF@=hR<6sWX=2vBN#>Bb4
zSw?c142k1C#`nm1!42;A3{j&zNJZZ}?ugaW$DX+e92zTtn-V8ZljsGK>vV#^JWZh3
zKaVGGtyJN`$CFwEN=&vQ(>)IfMv`@Uo}RXS!;YI`7@nLq%v8TAgJ+e-RYuA5D_u~e
zqPbDPwEF>4wi&_{^4j9xZLb^Tv|xk?iQp2ae6O%XVac+=zip4xfT){208&7$zm(%A
zNx{5aA9q;c(}}0?4|KXYITgye^|1YD)1<+zdy$@;kO_#$nKT=KuG(y&gN0eCQ@W2v
zQT=?X_HwDTv#}4N-FM+_!GNvCheww4m=9i-&F$P1Cv(QpgZ<8fhqy9iu8wRqd`AIW
zg%#QWcz{BZTAL;?TL|U~!W+EqVDaev2o+Ky2mZ-ikM0-QL}p8#CuU>w)+(;N2TU9G
zYYg}I#G2IQYr9Zwk1|+zBVTeYcDS$s<<i(DP?zx%2XB!y+!;ry2z&tVKQYd_Q^_lB
zj@H*|#xXDBlSMrBj-lBbD@3h|Wz7;wSx>kUV~R*z322d#7%12#2Wm*q?RAn*f|3wS
z?hz7Ao^bMp<3pNu%lo6awhWs9-nPu!7T&h>O~V>)Z4!81zI>U?tz2nGpuwE1heQ+k
zWpt25Up+VC5*ZyoAoG;rcqGfqVKN!FzRmz$5nU)swaBdJBx*y^m+8EKxFm-cBsUqH
zX4zX78drI6o_wQ~D&lE*oEcagvh>0P?;2c~B7nPSq}|=mc0a@NwJ;McG}+RZ4axB<
zcuHo6t@wsBm&*661VYi`#2Tiw=Q0*>Ib-ZDR4Ed<(hj}YbS@s8CIE~OZ=_@ETt!{d
zYh&R>8(tZaIH;n5j)U9O{ce3}$YM<CJhW>R+7fI~-Bf&fyOFxtZ`zC!#&XP3L1mvC
z-k=DJn#i;o4F(7zjOXMk0mFu==xOX#L_W-rP|S#>I!GL(1vXD9KPCn9NL~|+?ar@S
zhPJ+V_@W!_jSzu1O0uZcx@Xsd6n!g5<-?3T3P=z?Vb{hHGd4^OB0=Wi@JiKum`&z0
zgiTe<Ti|i6jR#1Q0AHQr<$?;_J!jk8R9vfb6xSkA$O4|osjt<p#3Cr}Hm_tRhM>|M
zIM$>c=}{h<{m+VQvW5^eOaQjyvl<ksBxk~sa=BDN&;jyMAmeE3DfzG;Oa2}1<mJN>
za@uOygH9n2?x16Xg&snAA?i@$U&!|5UDmwM2Puo_ya~u<$gV-ik;wXKG)jI-MunLf
z&!EWkH7mJ3*5jChIw|hX<R|a|qgz#evi90l<#rdXwKUCB8HQH|)fD(Sw%#!bfb2d*
zbOGtj0DZ12tCy|#&@QvNBRK4CbVPW2^n`V8%MG1v-HTq^ABUphz*Aj*>JlVs3#<m-
z)Y~6QsVDFS1&v|>T$X@51Myl9jMcAL%^BW!+tg-8Vja9BNeo9|XHPhh=+%tV55$sL
zj7Xkso25@hs*g+CMxDtDDs2a!XTEgv;WjWS8kGHof{KT7LH~oLmx+t#nA%0ExC(Gj
zwWM#d_67vnoxf!|E@VL%OyH30>^$JUkk2MF<MU+Uyi>9PEI2zm(YELz8}!u^`1}@2
z5gY*<D0X(b(Srh$k9q}ePz*E_Vy2%a0_aCI;%cLSw=Do*tpKHntB*EPOYXvOV&c5=
zbXzX1Vk5VsJwzV}OGCZ|N(PIxT<$~DC*qO@?DUW>mz+PtjxigLaje3wv2@cvpSDE0
zu?C%VnN0h@F%g^IJ3bADgDJ>KPw1+S_LyU(U1H^!q1kOJ$mBM^0?Q+0&=dkFO2IuL
zmPBSq18-@8($ixlsMtmE#MC@m3t5sd+(2vz4#5SapZSfJRNnCN`C;lg8fs`yU4@v&
zgFCkxWjCWceMf}JC56R0(j386sK)s%>VYWGRox0H89a6Xt5>g?0)TKeOd~6kw1KW9
zw`@gDUftQL8D67XJKB5s<k3;@{>#1R55DeFMYS3{2D>$eyz0TJwWpXw-5Q*jTj<Ja
zu$nDbEq2GRnX@uYa|$)+)<k!ocO$Gs4K=iE4bk}`g&;>+qQULC?!mdetCwSE2-eo{
zX@5BT%$DF;k%NkQ6)nl;?==1EM(^#<2nw<Jf&oT<{o{|3@Q_CQBxi-_!-wd<ywbn<
zjeM|3%uO)6$|vvN%O|qtt^4$qncj9VyZEm4^;K$YwU&l8O`^IfD@7@uzYSo{9v|fP
z6s|HS__kj7c#xUhUpE_1bp?jX$$6CRy5)7kN_-zaY}IW&v^iX*Pxg<#es#Zh^x~UG
z&$~1PBaAMRW#0DRm?~%kOMJ~yLR>TpYz$p`9`V@(*+LYDFEl%D(A?^vS?g|Xw{5Ai
zbwQMCsDOuCB!EqVL7{jRwsE^4YYtvA^Kv{+VL{0+AOZNaCB+);+AY%`lDN{boNYtK
zb(+n@3dyqM%pJJn*Dqdvb9k`#;8E}S-m^z<I>(0(UhW?p^$zxqzJ9|96LKGnIK`*c
zK-@Ohu@XnLN%70ni^2!qMR7#r+0K$MDg#~vGWoWxa~v7*3Dz#RW(9(wV7OfdGs5M2
zl#w!)<{NaB{Ch(X;ZZVJoisgu4D^B+HcsQrm<M=K2Pv*cJh$ygH4GehA^n9}C0=NM
zTQc`T%fEK}nHpJg?^1CMJ0~7lZ(<TlpTWxnyJTwkf|L}hNj%L3E}EQ1#Qukwr0qnS
zvaocZoOT}fih4<$PE3Ryu$64ZN}Px=rocIth8U#-(&B`{0j>Uza)+`umn45{gEn7b
z&_fC+$0=jykZ89X9fFj22fztI)+44`psHCEtYTw27%_R66AMU2G;L1iH;K9V$<<fq
z#Ra?BZd7~Ce)gH?8(+3LHb{<(&3$q*<ERWY5lV!|GN|eXelJm89Dl<lz53}OGhy+v
zQhC~J8xDeoaRT?HBaVqjz**n92lp?aBGv=Ag}kvR%y<}nLXj68=C<bV!f;RF&vHI9
z4^Pv1h#A*c|7EcxcOB!PZ$Q3VP>Q3jU6})O@7Dnac7*zOw{mIKFM6x0=q*>Y@4><m
zhvg?8qrjs_cEM~mcQzfE!I({!O^8~G$^nO(`B`FW-1_pSI){U&o)FS*(_`y<<iKiY
zMwp<m(NW@B^o$iUziq#RNNgdktL(8{ApO=T?6jwA3J%>ZbLe#YIN`fwm{+1YEbKVX
zNE7Tg@zl`6N0WM>(1I4}pJ$RT3Q@q*l#%IxqjPx*)rr;(#|uEP6bYX_i`T06W$u>p
zq$M-5^<fQ8DMF(a?OVJ&=547Rx&np{sLm~Az;6@!w5R7%@GeW7bwyZ@>sY)z2v9Go
z)6LoYvgeyIz0*z;_`qp`-KJT35X3|<Xyw7pM`&e&`xXO!=!|vdlROZ1>~bEwq*?q+
z0jcqrD)ywwizSYhl?bisz7?8XTW<ZtnLj4&l+*M(T>!VOQ)<Osbx#CUF%K~)r(ma9
zR;L&9wY~pJ6tZwyn?dArnOyqRlH&s<;%s6wyC!*o81k*F3;{bPN}>V{Ntb&R_zOc)
zXBaXNMCW@pSbOXd;LrNbf&pE`sgE_Gi!E9}jDiXS&LS%UQP7qm&>)Uwnq(Oj#5^+~
za)xzUu=0ZyOJJdW&+%qNXPF(g4Eb=8IOnIBZUME3Z7(dS>5B3bFyH6^EY;!!Tx1tu
zX&2pk9a?ZZ-;vZg?|Uq&9DKo}aXdW@&ThfzfmyCuDhOmstJpJ2+19N^I7e{Fhc;<R
zE~-Ybgtsy&C!mxk?{#)1xS(!2nYV8DhFYZOiuAZh(el4MT_hpT<kgCZuSp&mKK{h|
z2E5v5yB4e4TJXyp`DEA{QIxT3M-LI5?ax*#I%Mi(ZxAFOl~_`~m0|NHJDhV(Q16Oq
z0#lrO&LoY_EG^gocZqB@l4^vrd$msiQs|87r|-AnFS`q{nXFky<pLK22GwI{j*BDw
zh&Xjmj-=XHufmB@;B+@qKSWPUlgDT5QiKBtXZa@QYqfepy52}+ZTo9txJRc@9ut#e
zZcmU&Z+HdI(c=JYlCOQ<Z#O+&m?{gQ3CN6%=h)bE=kOVZcxMK-R#lj1`dNB<Sz0}d
zKFIZWWu<;^xtl~+$g6F}NdnxJOvo-~Hk#rO5NPbpy<oO^Jn?0a<>|`bYD*DIeOL<T
z!r|x_?0<%Qai2Y_I^Wde*vw-ZFPN^c$)({mBYv4N1yr+^&U|=jg63LgnK_a9iXD7T
zQqhY8)FL}s+v%2&5Ws1gDTB9=kt?rc1yjDbTSy{oc3w$6Xgg}zKba5O22JaSL2MEC
zOvYjH<0i|s^#wUem%%o@-QM8H)eV-!eq6PQZGch8gEXAX82cHh-jU>XmXM8O!f=XW
zA0pTVcD73LD?1&HJdGzUbcJJ8FaZ%=v;L0t73GIzJ&_F_gXUCHA*p&?VXHwl$!y^{
z!)TQhnr7AMVfm)}={k;(X9-X*`~4K$Fbprv)QSCgTx6|`k97G5FU`&v6T>c>#Zgka
z)iqc1sTduIX)!ZlM!%X#;D%zNDK;P!8%>OnqcPZN&515H_k!oV_LF>E+_wF!UGyPz
zH-))_=wd1D)LQLv(eo~?!uqm0L?$^M%yLJ~Sse=js(DI^uqytp^9<*;i#lx9^W&Xh
zd=NY9Hc5guU_<tq2h`LY&NXJaWMMM*GHwyEjE+O-A&JW2NHPEH!Eb^+int(A=FV;p
z|4MN#m}h*1D9pbYrcFf6aYW_<Q=rsEa$=^PZvol8Tn&BVSjM);p_5DP^*M9->_+s`
zbWxy=H6`4_hk;fwI0pHW0*s1W2&;^v<NI-bdM$X+&w2n=-T(}m7gKHBFx<&(G|1jX
zcc=sR`W}oc9cjeI#|aoMh(p`6OvjevpCzF&@DoF}Tl&sONW*x+4oa*yB}g7ZEha}3
zdhlH~*dpyybUe$yGn<Y^YUF{{B3-U~R`(DLf%{7VVjQ}k$Kyof{8#4QTG4(dd9p=%
zg{6ZCNPRg1UTzKx0B0wJQ@4>3NUC)p-cLLTn<|WHqnk&6{s@}i$30tyoCwd%&JNGW
z&W>iZF%5JbJhrL&G?`3T7f*lQ)#tKw3{Kod5`<PhNvGx&xQ%*gaqE8PWLYqQ+?)O9
zhx-p7d4uH0Zr6}Ng7Z=_M?+R1s>$vt`qnIKXOPZ1`Kd%@TfY4yHx&-xPe3xenC8JI
z{d%_<{rXmu+|$W2dAI)S-Fl5jcROkgqq?T|TjyVC7D-G<w$;S5wyFK>c=t`C9@T%1
z3M9KktI$;p!tZHcyV@G|n?h-13OH|1%=1o4ubEk}WIA82&3d^igX$hVKYIC>gBSbH
zkNVMXqyB?u56KPK6JFF&Z`&M`35AdM-_dAI`~Uqv|97K2LF#ks8kwDm*Uf7dvmd4l
z&PKpddm|T6WoI9-C<_Q9F6v>s|N0r*)!>$MfA8>7&-DAz%jbJfd#_$T)&9g3hwvTy
z(wZ3(opiq%d<PBh9qdO#0><Fbf5OUiN8b`Y0v0vr=Pa9;N$GDux%r~U?*pl2nyqFI
z+mQsnmf(dmraOB{_f;K*iCJ&xM6H?>!pCKR!3QTCmt+dF<8axnDqyz+4yv^wE^~7o
z3o;v@p{8g|s@j%1lpv5ci6M>r8kkCbZFo3w&&|nbva@rrnoK&BtO9;2T{Fc)!#rYs
zEBqW!vdqZ&=AV|G5e>9yP?*hP8E*0M1Sls!FhQgU!yhqdKk>EZ+KIL&@tXV-ar}`@
zBwH<Ww>OC&l<*a4qA%Bl5&d#viC!4aL*kfe@1t6QRYqJG=>T8@8)+P0D;|w--Lo}X
zZ&bq@F6mgWX3Wrz<RSdSRe#Fhe8PajI@pe6#w0N+t3q-R&tXJq57uA#w;EK_h~e5X
z3%A4SPIFt*B2ipdgSs%wyemI}!UiTZx?f2irRhvH3Ytv8J3EG<z!FMjAPr(eGlj>w
z`uNy-iK6wJdOVgvcFa6kjk1<oFi?OFd~5qogMwzZkic)mDE=(Lm}Q;L$2lJ@5Q~ms
zg8F7eBN`k<&acvu*;k|Jrafg$Ojk1maG6F=L@khTHd*)-qg*p&6lAAcXEK?uoiyLE
z9c&{Dtcw&T&@r=eE3x-G)<UMObU%5U7Fi0+TsFgbG-EIfcuLp{E(V+{rY*<{M$-H5
z>^!#BVXavC=B<&?DE?Xr7mzDb5`5dy^NbvVdFjkHVeTKsZ%qh7PN^aG746!lA5@Lq
z(W3e_IqNcOQwM34(Km02F+YW6mg`RziIg+i6Y4Q6W!h<~*Q_~e)g#g}zj=XhS4tlM
z<Zd_Wrp>_BJx`W+W;;p~Hsgm)8-WkrnTV@-&onT|XiIm>#}YicR1K}^YdDSck#nlx
zu+Kf>8f{k-2VN>U*}S_X>ywP!woLHkecq;pHZ{y)2U~wfZaKOr$eC2OHVD)pC&4GK
zyi2f)%m_0>j>!!caME!6?LXW<+`IquQSbTTANTg3-W?nHJ?S$lDRIcs0Ea=6G>JXR
z%9I|ivmSnXce23P+wkl{?i-mun3{8?uT25X3FQh*)+VvSCy-eBeXi6T5mGh~M#v1(
z3W2nz)0Fbm5{L=wjWxWQqVLj=2v=@cKZMmhS;S_Dv(OutLHw5h$jai8=wJ{)5$jAq
z95B*Zo2kcZ^6<dE0>;Hz!Y8VHt?@O5B%Q$xJO=EmS>3nEy6WzmLp{lP2v}z`A{%6I
z+fj}jGuyORcx$`LDU@oOo%zZnI(aQ&H4LvhNr&KxxBIgFdejH@?Blonrrj6)S#q8%
z`i-u4`KDg~y;~caKL#(4PlRpgvOi!S3fWwT8R_K?kX)L`Ku^%tHamSrx$UE%%Yb96
zA<Y10VH+Af)3F$dS7zxLFUQGpc-r_X>XRQL{AP)Tpm0HEMWhys@Sd`T(+`>d3SBY0
zf~57aXuDKH+oti3wXW@cIz9P=VP<cA{zccY<9*Wqrqk(aY1K%~d?5T^$npVB4j&A7
z1{pG3u{hKCT@SB&(}A}**?4RghP7%k#n8LT795#N1Dl%b1?*Qc(*Dmyc`t&3Xj}+k
z1>7J5?eXUv^|!P0fY$zkKGLjEPb)e(F!R$&#$!l@$yqvdAw%Yr7^a_miD+H?W5R(?
zF_;GECYR|X+=gUtScxM%^^5!ZumCzy(Oc=B#R9<=H#0Y9s~r;P%)Vd66NXAJ=n}w-
z#glmort`o5*Z&>$?`SReI`Z6XJ@WW&xk|jx$rd$RW-E+Xwm~s)9&z|Vzx548=%c%u
zf3P#pMpM8N;e}ub4JLpqg>x-p9f{djqA@fC6<+@44iQ*hf}-r-{Nm<Kvu;)N!v(PM
z+>ocC8J=9Wg`j^;!4^FQNoS)w-!=-mAL^=vr3Ci1IE;`R3$TXZ@<n``;kr}^0SDO{
z^%ZUtJERZ1a}W$tbecaV8A3Y7%%SOrgk%YZSn@SOhj1P*rgY&O@-bPSlJbW9HcW%@
zVvrj8is0OqVW5fYBYB_MLQ@gL95SEKr{87^;uhc^BkXiEgZlBcW#1wJ_#^ijKEEVF
zGLjfpYlbXV5Hi4~0oL;rJmAvrm3fmZ|4!~UF%lD_{K5~27S6yiePVDP#p{M@D^$;w
z<Ty4dr!2KgA<o5L;ea9fQbA>*pUIaa^Q%J>4gj!rhb!TI=&5TTP0<gHuD-U~Ho@mT
z_jyHyqS+?@P4ajWBbf`NG<%Bb(GkIf!BCK~OJm3-<SK9ahycfj&yEfppNbw6+Ugjp
zA>vmlGYTTVsgjmzNIU0daa(EL%BRbDhY)Up&ino!(eVQ#Rjp>oK2c!+0O=rBiBID0
z&70ieoC9BCF-<@4ovcdD6}77rns+>8&FT&MSD-+1<t3951rys}jlkAJsO9*KF_EMu
zm#ugnF0J=*GpgvD#B4YQ(0PLsrpS_I;Qq+akbYo!`PFfuIw~mrX%}`;kDikSs=o2F
zdc!7Y)3MiTkJAOXo~aA$)9enU_q_GF#XT|0ByiE12FmiWl8Jo(fRis;Ynpk$VkmS<
zIFu|{T4yz<pPW-*r8If#^EMIL2WIQ8iLiU~=n&BrR&!mEQv+IN&Kma3YLG09G=~KW
zqsugmxZuWz&w(hQS&tVM!q}<qPm{?M+~0yUIv*2-j2c>8Lqn4AO5B*&P4zw>y4Wy`
z4H?gpVYV1KM74*{4{d)%To-RF_M?($eZ{sZFRhQ#jAbjJiQA>-Y!}C2zTj&Nyo39^
z1KV;ZtfRdKkT55|!n!xu(bq`y&;BgKm9v8V-M(XcG|EsLLlO1Mk1rgxLz{5kUuN_?
zNVjubU-mi=5aysAst6OrAsBC%JQ|&LL;J8zP7;a}M#q}5+bhP{Xn(|{sPp?`WKp2W
z&SE&Si(7+lh;y1lH5xYW;Q&f3BRFopZ}{sbV(0SJ35gSIHr~|7c8#15Y{-Uo5)EQs
ztC;JM!2E`6>WYt%s&DY^#x*rO2E6{jh!J(eyAOyIR{@N5O7$}REtO@uODc0tXX)qN
z!(o1#5|)PyODT8PA<ikZuiTHMk!A#{@DsVe9#(&6E>ABJgfbW8JQ3Tr6n7%v9r)4;
z<8rIH3{BW6i(+q~c|1!dIg|Cm2ZVhi&Ov4)-$7_n$8_rS-f!>N3-P!1>2DdP4E}|;
zZ$(B5F)aV+-XHGxdxB0q-Q-oX6i{3C#i^VxFIhC4OoRxBb@7q5`G&n&Z~z`M;pUW+
z8z0R91G}1Qa_NBn<#LM<#I-;?3cO^N6yGviO$YP`<0HXTC2mxsY{@qAk(nFKP>Iy8
zHGpOM&T~*1<-Wgu<rX3@b~81aQ9*l&?fEWc_y}_k<w5~$u!3{V2AXmD&O4_%DOL{i
zTv<kynd;-SEFCdI`fO}C3k5E>B%%yKQ4AHch}2{{vtD5~q=50}EZka%!gZkwG&GLl
zayX4i#OVL%939iqht`jbL5z9(@CV$#yen}l60u_jv+2*9m+*?V;7B$wGjp5*-WqWo
z@g*b{4{O8Oc@;s}rF}s$CgW4R6$%0Zk4O@XFq{h*xoNUw+Oo6rm@vUAPs`4Z&B#0z
zb%)p^y>m)?sc9KR&L|l5f7|bp-TdRu{%@1n*<Gy6ZzxLd?sBn8egg?Uo84XIt#fk&
z33=!Vd0-<w52x}J1cPy2JW>A-{U~2g2iauvAmRxC?XJ?PaBJAa;e;w4EO;T+dK%>Q
z#$xq(c=TBh9uM3XL0pcay6H{58`UYGx`_wWD?CES_!0LG&!mHOfmQyC*Vs8*^@m9+
z2j4LWw!4U_>@VW;9`&lv8dvjM_ZvgVKx=@41hG1jvVzmTAZcS7Skb(OmgeKZYN^3s
zeZ=pWRqGQU$B-k7wfmAQl0urV4Q_Q%ZX6*SRR3^A@CW$wp;^;@gDYN|8STO6qAwvE
z@0RR>AuJx(47_l>V(r-JaysEcl=W?vNL_gD)#Zwn>cT6o%QYC*#p)rN>^^5N2SBcS
zc=@bdW!_wcI(hn`8-`Z~X^gO-<-KS|HD?Od2%GZoCyHC%+J*xnh3s!j9V96q=VI;<
zlIEo{VnhqI(il>IyRjkH$?tnywkKtgxZ4UWUbv%H-QwacDc-OK7(qa#FuTIW22R~=
zi?XrZ|Iz%!i3Dw1W}Uamx*mN1gTEJT9D;|<%J-zV;tYo*S!o5{Z7cUt7Wo9TpO>F_
zJi_MMF0NW5`jJ)}FiqJcX-~3~?fN4R*t6b@ir=&inQ44g{_G)$4MmMqenqq>x_kGo
zP$R1113K2}aL_y=a%|kP-4u%YzBe0byf&w2Jcj<8(Yvz6hDhDpJ-<+1$_yy<ZpgXl
z0b^#7;H#!kySv9hTy{5a+{ipdVIs1-5#u2gXXrmMu>fSKJ65Oum92v2?-^9zn=2^J
z@mJE{MY3Ei5K|)=0X3rxW4w8u;F_ewd?w%U{>WixSoCCAUFm?o_uE1|j_aVg^*6^i
z-?WwIpenexpedD~TOur_JuESLKtt;Z-_&)pL91fcg?)X@wSzEx9R>|*yH@T$Ureak
z@0Rz}I|AP0LMH~9+5GXW#;3?X4E+P%b42rKN6-fO^^ajkK7fS$`bV#|4}Q~qIwLr@
zLBo}Y)}20OF69i;&EifZe#z0h;N;1XfmsgpUXymP^KdBYXok*Y^f7Tyb26=mDm&3q
znIW;m_-~>k;n?bk^d@eZr1lE&gC$cE=j9`oN+HS%-`ArDEXD_ARCW4@=C3nKb7I7t
zL|G|l+U$lr>k&nk=KQy%3Rd9ej6&r+-J^uUqS;Z+rMsK9qla3VZIJDtKxWIPc7x@L
zy_7B-uRo37vY#>1^$2hYTwOU!(L82Cs-0t=Nic`J=xOzzYl-&;k}$@Ed$C#iTxKV5
zU7-b%iGdqSBI<sg$fKu+KDu_Tc7LschmdEd#ExLhkbH+h?qVtf!<#8ns1Q4eydeNv
z_?ThbRE8XR5rC=z0I0ed5V74bU-?y$|5CgZO2UIQT~Po8=@{b7qr;=Umq(^6;<Mt{
z5}@#tLCU`wocpXQYPnYDPZ}Y=8V<Q+$7U4xWF*dF4>_Cl!J}vD;{k^cDAf9xKE^43
z^zx`@N{E-Qeg4g(zw{2id2sl9ekr#CL123I*`POnRDPxl!{W59;~HmI+1v-hkGZfT
zQiAR(Bx<ShvXzZXW==hHPOYn8KhE<<e1dazD)PE+VIU1%MjvkcUgYIAOjKqqmdtC3
zjs#!eEPHPC0A9-TNi=^u%zq!Xmf8HR`Dd057i&W^Tc%#j(A-FzEl>dSqen&Y$jjj{
zwzH>^prT4B>?Z37BmfloTU@S&>E68+84_bQs&3pxG9xHuAI_d5$5O(K5I}8CYfh)e
zqKdQX7@lEhjFdxW65~laify4XSbj8S{hHN~lhGB^2bVEcO_C$GABO3lX0I*{EfYLl
zjGVM-VbH~eu}DmLo>)}SYGTd~=>$ST{QZ@{gI%^!_Gx5f99!r1*GGnQEwUAvr(P$6
zLkV&DCLX_yB}=h{{$UPwc8;uu!UHQboG4i}^qxV0h{bGl_NivokX&?N0mmC^g`IX_
zXY?Qr9FB!X%UY->FO<;+N5^XcHL!ty62RJ&2*9Rl@}^l)$;t+Sl&y2(LFPe>xR|s>
za<W1~QO^LqDOqoa=EsIsvt6GyA4yOI?^Q6QYF-UVLFNiubQ_TP1=iZlK%p4f7FBU>
zwf2O9O~PvubirkSuvj1^9%}byk3Q<@N1nVY4Ya60OFO~w{h`U!2H-ifXzqJFyqizV
zQ9(M6?1aVe>pDG14Lw%_A;ET@B(7GmRfBa8?t8nQ?C$|28|!4gSc-$b_3@xoL6qZI
ziIyZT*DTcFUKUfsZxPs@v<=`+@C@wp(G>T*d=4+N5hcU`tru0TIdBpR=s7Ul{6DBC
zyEn}rt~)rq=_Ikhu=#3i);?wQD#4!0i~b(!giE?^%_WAo{!{WgdzTDXtZh%HE+a49
z`a?ql7HLNM@<rlmCMCEKPYGPZC7I4v*(#?ji3>>`2PLgxUb0cnW@!p3A9Ctnj(!_1
zR>L$d0AcU~nuP*U&KANEof2FR-2s%~#_KzHzExhN-b}*C7_boNv!(EuaK}1x3swkR
zWcJo(6C+ok#BDbx_r;7M<VBBy<}H>|gZ+TClx8M|2}Km+Qd?Qb*61d6>dP<TMZff&
zCiHVIj@g=+<0M{aWED#pI3sBiU<K1INeZWJKz6$6K{q9u_4}qkpxCl($o=xms=}ss
zgt{>^J!IBl&a{^8CbU>*=?EEl=(u?6IEWV#-OosMtk3@(3{wWbda?%TN^YkTVpuuf
zk_ejuZ_}w9JK1pp4MNBuA#CpE`uK9^MKsqj``?=(aOinnnAM6k@e^xP1u=0@Kx`f*
z@>4D=9|A0_3KJv-8#oyfWj{x_i}Q>HdJmF^aoQY?DXh_6m86vtS(x}l(a=2BOaR>J
zKW-p0F(MZoXkgC_@r(1fwg2$H*}nC8!xlZH_1RqZ^P8@$8R6oBqQCR1eVhR|VsqIq
zzidcC&_Zs{3sf&qRn-2Y)7d=4gK&gWw0ejK;RvN{<q!|T5o!-Ahj`$Rkc+Cu!`+R9
zi8kR>aHJ;r?tJ+X7bI6hKCwMi)1zuC8~EevBhY3Gb>&zfPGFo;#QG^CU^CT|Ty^Fa
zl+<H36}xBWR^i#nxuzveE@m}AxJVX!O(-_5LyK2WEw6n@5V;2CY3_(=m~WlYAz}rU
z6HpV<O8U)E6I>ZxJ!Nf)ry%ix5-OyG<1674KsRtaFg2KmK{~`ZTFuh$S7fW>^}$?G
zh#86UEOEk>aa+^BvD03YljSw7TTmlfuArYMj29n}{q{|`K}w_q@zKl|Q$b#ib00dA
zlkky~E|`Pho#&=FlvuEwifFG*Gvpp3qq2i>rBCAtSgYehGlv_P(Jy*t*(71Sw{9L!
zN=-GQR*>Bk`9}dz56<DEYt{;ky!1l;RED;&Kq||b#~i_-R@K~$j0cR}#JYpsNGpzh
zYkrhh`>uJ4DQU=V!3$FV$l2q|Y)ll+S^HJR&ZDnV^-wG`;<QbLy+?mO>K(kg|8)NW
zlptazWv@$U8laPS^h{k6wqG9J`uvNAazR8dD_gcz|MB%VhZKCx;c|<K>T=8rT!SNq
zTq0&k_^_}C!n-ru${!v%@X0B_F`ScO|7|)FfX{YqUpG7@9s;Au6XrS1d3l(@zuSl;
zzj;w@d>%~=PrFRi)u?J-HI+LtwTvA@wlfzMKp8DbwIR{O6hM`WQpnOo4}O@PUi4V@
z4e5sUrAO*1BM3MV<}Cvi6F(t1Lo>IjxLPknL6b=B`Lw$)=2+%Y2ZljQB->)!c5oiA
zDP%^5r@lp@Ntm;BlDS@KlvwLs#>%n%&7O)-)ikV`SBf)T+FUj@2NxRPJ_WC{ZA66y
z63e_VHJhC&E}!ZFy!zMn$ZjJX1Eid~;k)Tb&jVj1j`^lFaOj!wY$?u&o_^N9lr%6;
zkRC_A8+V~m*upWm#UduVzu$T;dLD7(6{X(C^oF)?xi`5aIEa_tF$?E}cZ4P|QCl+&
zL!c`Q1E4>0-;RHq+3cLB*WW{2L$i7fjl3$5SF(`cM+j2i>YD{pfe{j}P=nw;6V!0n
zhiDtMb8>cl<jo=N6~<XE443VF!FVYP3Y8^LDN6vU3lQbt7#ev9uQ;8F&(k?Jtr_j?
zSX5QJqU6%fxS@<Tzhs#7WCTDEFCraHZsozZ><aE=<!t6pgJ05Z7}?LJpS19j+PBN+
z$~u}|JR|&(PZ2sypa8Z`N)x}w2<DoI;@t1kVC`wkVt4>^4j8K4F{CWl_0w^WGCVN!
zdJi9T&3|^A=0CUK5z3kvFqk8PUoN=U+f^%Jm<pZu%6a-n4`sd5?ZQiTPM|<^0G*j?
z8Qds#OxDjs2{{E)P#L~!x+P(YodN#x;?>LE!OQ(`_l_QcS1|lZzlHzZfAnPkdGzuS
z`4{PJWZu#nBmdC9kDfoQd~c+kf&{1CHywu!-Q4HCEnF{;k}=(XpjX1(h+@FykrHn2
zsZXH()2|^QtoF_E8@!VR=|;y=UMYtC<IV9KGc{bA&#$Y&zTj<Kc;OlK4bKgo8kj)d
z9EbFCo2~F>TG&G&o}8G=dwDwTMq9+2ZSix%xpYelCSDHj=15bxKQo`~o^HV^->BJE
zc_ZA7;`2DwK1icF`JQV9|EUvhf9YKF1I5y(A3P!aw?ED0CsK$f%Jxz`MC!^1)eY}V
zeOBq2Tw4d&-ps=hs4vq;D|;$!R7RR}<Umb+Nv3*MQ(A;aLeXWY#Dv;B_8L`j1AljZ
z-{Utu0_n8CLJqTqz9%ymB9=%XCwv?;=Wt3T>PBu8P4+}G7u0wmLe46Orp@_L*gg=y
z4Q@PN4ErKPDEI3nAg3(O`kW$cxQfm=%R2Gz#=pNk`u#2Q&tNdP9pAovYxuj{H^2D&
z%kgK!@$E1BO#-k?{V*d*?yZ0+3l2#(OU6r8@^IbiY(baxN&3@C)_*)5JQ=1h(mx))
z`eA?fdAe^l`^(RV5B9&<e>?y4w-3zk>2m&8{7(P)Wjk5#4sU(C9!wuE|9WViP5*i}
zSfk9h%fGyy<on-c>0hT`p8e_T(R?s{xr|@G%b!kPPDZGAI{D$xw;sP8yq>J~znkA2
z&c2;IeelQmaQDlz;gfIIfBEyvvthdb#b2k7^Wm*mIo18-<zzT}mcE!QN2cs-IQ?>W
z__h6gdvN=Yi{b72r+>Ni?Kpn@CyZk{xb^!K_5S70=J$7xZa@3(+07S6!<#Q2zC}Mj
z!`Pl34cE_pcy<2lXz#NZf4<qC%})28d}j#2VD<Is(;vQl@NjYT*XhfbufF`@Pov(+
z+}yUm9~`dE_FqrF`Qj*!-<@RN&04=-{^{-R{=@a#^WN*PN3*8~C$ASTmS3)(9PAxD
zet7dRfBOA5y@OW#Z1+#U|K?Te&#iBh+uuL?Q|oZC`h0)>sCED3!EEsP>}D^&HGTO-
z>(OBHMe^?8FMoRd$H$MKzy4Ei_}v$ihmUWK|8n@d-P5yM`^lfaKhN{8Uw!tMhr6rq
zUQKQ;rn`#=KfL_r$?BU{`t9P&>FDwL{Qj+PzWhABKRf;7&DNiv&er*N>t~<6TCSE)
zzJL1tw|_m^|2iH_Z+(4w^7#4lr{k}e^YO{^zbqGTZ%=Md-aYtBzWDOH>BG<edV4Z^
zI(+^7^!~%w@9s}#$$EeOyY=#Sw@;rge|PrzpT7Av`{swoC$D<@Z^ymI-@dzf^x$`+
z>8rCx-#kD4e*E3|o9BC)$br~q3T>2JZAh%b77eS?r5oRonq*}8#+lsJ1m>R4N%1X*
z1&2f~=C+@JHDNp;0Ekd{IPvn}WhnN*nzSr94>b;~CZ8Q~VAXQ~OK271^O-IcywtbQ
zIpg&;^^R(^*6ir~x6N8Z=GqE`XFsKc85aT6a{37jJDzb0f;6{~)6D{G@X)0{qNKL5
zByzLXe#?#)5~6CBZ6)tb^^8(X>ZVJB8D^!V#iYgsER_Mm5jA4F1~y$GsHr<Nge8GX
zG}$^uOPRKc*)2~OW|dh!cX;o19%1<-GtzDAC1a%Uc#w$!mJ+PiYLB!5o70VK`5vrw
zxEFVJq*fydNWI5l#SSr-@!(PXdU)_R=$qE<7T^GEy3hu9xm`+F@u_k>q!!OEB{@Qe
z`Wc`k7;4kc3b;IVDF+*2HsR>o5G$K+*qHVKo4w7uLYWX`mx6=}B`o8hCu#R~Pkb7B
zQp9sO&>j_)(4m(Kqv>MFJPyZ$)D0ET><?LrvFFSR?xfP(a3a%NqUlvgW7?XMkkp|X
zW6Foto5jHz`=tfhnDgnj+&(8QpiZ0&ms1L}E!btLMVBa_qVIFU36lLVcz9jzLUBQ9
zaDdqoeqtlo{S=LUm1u35EySi#CS_d&0trI%p3T8Wc$<DT+b=!T`<<Oy&E{{DvV~?f
z^7;vTO>kiLHmCP$Mx3}={CgZy(`;??{g97MyFfJO*?cu2_pW6Dk~l47u55dwy5B_-
z8Ze&^p6)Yc!~h<X`@zCOuRAl4tWLonXi9YudXUX;;IM2rINESVtylR~%93V!rHMW4
z*(QIR$=Y+IWBV!XH<V|ILUAHwq01?(xH;O=LGG#sd(@T8TdYQKAX^d!<|QwGLb&w5
zIzG^3;Pad_gLMdk%57shLben=!vS*1x=OotTNYH52u+uSuMsAK*ZtyO5#)~P%@<sq
zP_D))Zpp(6iWE+45LLwPTZ<LCgg=l}oIb~QZTd?t$ksI4+P6un@Mw!(Qx97!Z3H%7
zUMR#a&M5BqY~!KiYfqBlm9kXbY761<h&1i9Cz<7q7@J1d4%kNaN?pbSntCIvyfxR#
zZz=D&nY9_;=jLqOwhIG)Eza#1N5>$EKH39c0AA`dMuhkJOWWG|>5&md_KqbEK6~RL
zYR|Kx1y}IvDRzr8|4J6w`5aEPuQVx>dwj+I*=(@$IeUgtx)o-<DvZd<?3Av%ND*NQ
z{Ru8Ea#8kr7z+#wYhFju^*if--YWL|$=8n#BNx&swOh+)wC#0{Z35Ew19K@7BPY>2
zN05KLPLn)b336c}1=vU~02VKkc+@hp)nWy<nY#J|agwgnDlei}FQ0nmBP&!Nzd8gG
z^0P;8y2pf({N@i{YsW8MK6#H4Z#u^>A052ll$$u4{n}^nLzWb3%Th*c%XI24=d_h(
zuLZmS9V-wpz5SUREbstS3It3NZ4L>rP47^Il7*LNqiK_d)i++`burphr5)x(XHNSX
zB-|>1zgSvMC#*okk#J5aCpPvXDHBeWK#F{ZposV$vPD#yxSR^ix-u~#vZ=ts+k48s
z`kLQrlCmUdlWW=zx{=ZiAAlp-R<Ls&M^?DTVnKcMV^FSrS!x8bPrL}kqp-;cEB_3l
zlkyhqrsdtLlK7hdLj1{7_hRR2E?+2?x)X&+B3mt&G%4Y3wqPClIiW+A_cK?GD|$;&
zlG2kILlEFj6E^zE!4uu}Jb2a9=aG7*bMX>0WxljLVF?(f&9|3&-^5fJcKvyrF8Cs^
zoy<?7RtrHFE!DoaOcB0Q&2_fN;p+66cfW8pS@LNJDvB3|_cQ;Bht?fL8>AzNjOTl_
zq6)VPcke~@!^5v>nWVRQo%gSF1W%oX-VE`!>!cr7p)HkW<%0gU$mSn*S{w-~n2EYx
z{dEsZ#)4ebrTcX;ep*J52H?f6*h@ByD~t0y8>V5}8;pzd0*l|EDKtM_0MkPPRn6C&
zZ=JU+cL5vKyy%%B_b3*Gwkf~EzBD4_FlMLAZ%hmO4_Q{ESlHS#2jK-J^om?aB(ZS3
zyhg`G@>b^@)rDzzEqN38sv1rp^q5miL854GXr3w`T~t3MI-XT7iziTd8xn5YlZkgo
zftqEQ%R!<CQoO_2O<VDxp>~^U#+ED1OpW%i<gmLD?frm>ewduSm<wqDx04Q$6e*nz
z(>b(4xF%^|K1-qf$i_>sM~m1joRe2)Oz?d_J&8+-wn@<ikC7RAUT&d9nl{3~T&^WY
z*xIj;v*R#R!(CQp6d_Jdgzd+8*>|k!MpEUW1Gr{@|8DLJXpd6HrQ{zx4vFI8#3(30
z7%2V>TCj~^E@XSjBumC=e&u&!k(onEuKdn&Om0P%zFVS|jW>*{DWFrL`}6L2YRNEb
zLX4D8+xzRQmydc6AAS4c;E<D9Y!i41Kw?b4dNiLsoz8oWKa7&IHa#Rp?v6j2d!0LG
z5D477*MZulbH}xR&zj3r)xtVWy1Gva9LiC~j?u&n57MHBvMJxXjBDyY0v!n^isE>N
zE}^W$=bNorvFoWtr}0P?G*5^{HQcixr0z1Mx55ZNuVkP_7nXNKOWUybK~XRY;inw<
zpQ?8i2h8HmVMr~t!hak}pI=3z9SH3GHh<o+IWGGaH-BBhAO&}$?}9Z+RH*ACLa;So
zw6a+XnetjZ*~}1iC3&)N?*aeFv?S-0X{5t;sh@;0#<H#q5qchEc`Rpr1d}MqQQ09R
zwmDNNI-xBchLDfmQsTJF`$@58E_VbaiFaIe2^Df4=9d%Yycr^PALVH@cQW&nBo(}V
zw*T~L@AZq9-y9z7J$Tf2E`L(9dLz-&gtg0vScowvX5G}AS`iV%^`x9=kCIg~SCgEj
z*(!H;6s3}~N$-eth8Y$&l(Ghw_c|TfBu>S~tszNjAs5c#_pnTpytxsV(2Ueed3+kr
z?4>-G&}eg@2?I@OgBQ3C4@ZJ}x9v&x$8NMG9p0+kFMvs=?G|htSi=JTplXxRERIEs
zf9!VeWBhe__EFE0V<Va8KwYzLVoa6V;92)o^VW=xnY_kDdIpnP+oLAQ%>19K8d~g0
z`iI-?-J2ah)pTbnsli*=k1a<k@|NCMq(rbJQaf#*VET$5yINH}!o78M;-lF6;)W!e
zuJ{JmOiOdKw(#AYl-cG7<fxXWFmHHnR3gJJ5SSF?Id7AWLh0u*F=3)vsYGb$ohO6S
zEPGpYA8*k|jW9c}XfsGNp0lC}yvK!WB%`$H-)LsS8F25&+?99OSS5kuu=9rHZ`jGw
zBE{Km5EUBfiRDCC_P!{oJe_a~fs6S<4E9?&<aIok3${)PP*yX^3(QVJ%575;Wy)EQ
z87A^8rEUth&7Wj5n@#%ZKDBe=2RWCsWPRDgiu73f<*k!p0BP?!bD>~RIL9`28EUgv
zPd3NV3+AL5-IAbb2Y#R?@&V}s^vVy&Z4{7O(j1jYY}q%}<=brew6uFg0?MHRn^B^P
zc?9LEv0q&M#T@2+?{tJ#JHCeNwQL5~00fXRyDVv?Um&UHQ=*|ASag!vS+{ny_wvc3
zqu%|Od(R(y-DSOdjr<~O`D!pl2ri5hdMLX!<UlgywHvJlMxa`?IMYSV<EFbcg?Q*v
zuB=*c_Pgw+TVp@4Wit1A2akxZ(#sBsgV}2NhqKRY37!w33jTyhi3qW(-RQmj8AT^B
z^+uF7_SZlD7|EGlB;y{f=!Xx{e|e>U^BehKk$}Cr$|vvN%O^t7TKDNIGrjF#cJW>7
z>#Nk*Y8eU5+{krPR*Evv5ghq@!sZE-yZN?W_?Qsj>W1+dN_6L7tvt7E`Yo>$_5ghN
zuvNG9(B^QJKG{F|`qh0tYF!$F5UjTU##BLDw_n`9q(voMC|^vl`&W0acBO|<YRKD{
zZRa}b<WApEzy9;GMkmc}h8bl~R|9csrbC(vF1Lr_T4KGy(*bDIH|d3*AQV`QWKhca
zNXH0$qboo76uJW#MV5YaH<JWg%u=PUtY08>z>{L6=Qkos+%2MDb#1R}a$fj6*MkFH
zuR5P{`s7^N?Xl_D-mYyp*`(@dAu*df+mYa(xIKsWE%A})Mz?NiZ8xIVPFIw8+9iid
zZ+@$r6bJp2Tz>re*&A`WS2;(3j{-jgXZjmu?f<fkl0rXTZfPnR35l2yay4$GrJtnT
za24l?69#DG0Pq3CkMzWrHAXNur<Q1CV_HqyBt^yeY&WI;PDE!XUP-fvQt84^ZOEB~
z8&wOY^CV=$&NF<mX)=4oHzi8?;Kj3N`$xTJj}8y_o;<o+_lU@a<jJc7>En+LT??zK
zM|c0v=zsi|S)c!U6TNvuX$xoGS7!ejJ_J@Ve+ay^qEFkx;v&oH+jKsszyLDbc+{qH
z8DtVAjin!ME+ON~dPP6b$X)!$uv7P<UkeF*@#^T{)sa_xoVqQ$P5oiFj1_4n7UY;M
z?qVKvF+1vr_=_V0R}9%M#g!$xD(~Eij=Owt+rhfFIeAImM#rOH-8JHt`D1JIa?j>d
z-h8IJtrJT%T83Hs!*2VF-`{HA^hyU_7O>^F)@FORT4<!@STcE_P)hRCsu|4#N4E7A
zEl@tXN13Y+ZX%Bx<RW0iT5wbjD*|iw;RD}Ol@}E&H7akakkh*MeN|$=u0;ElA0ujB
zP02S>ai-v9+WmK?+1mai$w}x<C`d2Q6qN}GljE~D?o#Hh$h3X;*FVZpeEI0{4Z~dJ
z9Z;ma^T8``x6$2SZ}VyXwO2(wdLKbAzLme%wbDOY@3-8`&imH;ldVRrNEvL0@BZ30
zR7E6yxypXI%6_@ZeqL7@55%dEbr7!9r@7eVW`m{W1t~;81b}@>d&yi3i2Kj2I}W1)
zYCcC*>z-76)8tr)I2VUhI8Qw=1b>h$PFQlH?8d5fVW;{$HM0r$8)tVR)fE|+D1=(T
zs08!L>=sHP3|DKC*7D_IHFUX_SjS_B0aU_L0wi@G(%5KK`5+U87*^&nWjwd$BYY~^
z`yP`EOwKcSU}QIOipgu7Btx*Env!fy6qpY21h7!}%36#m5t9Wy(%P(Z4>p>E)C>HG
zQVN}b1%+bG^-I<(_jklpx?}!8ZYX3#Mb-}n6)+EN58x_nOK8#$ECmBYx(t)-5j;WS
z;_ZG%5}s27eqD_5%jkyqi#~vI&cU!T!h#mG5y{)sx5Wy%i^hfx>Ng70;HL^wi=$wY
z?lYRAg91HRq|=zPP5=x-_6LE$sD+XgZB1>8YI*doSc`s*fIoT309FFu$ajkD2ZZPP
z`$2V)OS?S0_{Rjb^=A79ezoL-hSM)--JHrLSuorJDmRr0j=N|sd3!iNlh6xv)12q!
z36=h3Gnr6H9JsS%i15Bc_mch1*sIv$RN%F;10K9071=X;pGxd`#`t2P$GrYjj{lDM
zT$|;k0xy+pQW5>-yfLYeYO!69m~L8{Tw@1K-6=vqsq_n*aV8DkdLQ$goF=1{Hle>p
zoaekSsFyyXrul##zRGo+uksL#l3qWdP+59Uf0hb(h@GwI(G~GO4-BO~p(H<o1p0jM
z=&%_b{>l93$%6xPxehvqFiAc8)6o&1gV!auXYSM_8x;M+y@ZN%f@TCki`jgetP4w#
z1TU$)XK=Hb;nO7FU?TY3GsOADJ$oE4jUi{r$j>z|F%S>Lq|!9EilJC%^d}{v0mNcp
z4)yDIv+Tt`!45qj{78@%HE!@VQ8a>kzQ|rgT(#vrbVfwIDl1Y$#|3%waucOMMu58D
zRbaCx%3<+cEvCD(`CE4Y5yLF0F`OCQ|4bp_aLFRkoq3F_y2a)1b?%US1U~K_UrBEh
z!|FuRB!{~BBn-tv;FFpF=rL!7IO549LB!RWx&7v}7S?e>z$z)I3%(jsNU^k0j_|rQ
ztz=;`o18$KIs>^0?ow_AI8cgg$5ycMVTF0*K4fbuFe0295M^HN6RdF>7Y&-VUlond
z><}qJnv1C_EHpg(ID%@A!^s(?33p$J*=zQ(Bll2YUr;bG=`FK%^hYpnCz*t*guYPC
zh_Y)(eGY%9sJ5@j7861&5`%oezQq<=Uh%ESpV2vRu)l{#dz^2PYcUvu4;ieYvRx`+
z56DXC)|@#stokwT=HeC2>0d$7%^UpV-pC)!iz%zj<^{%o6$dH;I)SoA5NN%=c$QiL
z2+pnBvX0g|Yi+_w-bPA}3XiRZ!X1{TNi#6X42L=bI7bjtjNnkl8xfkDi~)}M<B*>D
z8j|apxO&<N6-nDrz1fbyp&1Bj-IAc^fp||LQAd(pjSNKK-5F|&qD!jB6I-T`Vka1%
z)ASkg1}DD(X9p_8;7~T>8Fjg6#3hr^j0KBAbfHv=*tZn0$dbBxXXgO0=1U3H4r)Wo
z7zEOed$k=4+tEop22{6HX%i{~>jX08pqD;OpFb&_n7~GWS?-y{kBWI*6WZW1iKlWp
zxN((4z(t#PTe*e$z~VD*8eT*v2}$^7_h%EbG8Ww+mAJAS;XIuuW}9n@^p{@jqXu$l
z%1O`Fu<E?zl$d(reJ6Y2h#VHY$gD2nbg|8RzdCkrB|l%65MENz6W*;JL=p~?1?8DE
zqVZzg0uD0KqJ+haa}CI0R+}pkWsPeR^&BR%QFZJ{!7G!im`IwJuo8e@mxx3dyXre8
zNJT-I$N!(bzuj#k%hE={-^Htlmg`N6Y6fY^c4n3;?Jil8ZB@y#T9PxXTAhask|8P5
zB!k5uEvqsU=s)KG0}L?0nHLz$U<NoCVD4f5pF8Orm|K|jtdG5S1cS2dbX8ZMx9fd7
zEyl-={jv7i>+@OZTzHaCov0+lm<2|}XqS9b9StWbAojJ=1zvc^S-gmkB@ez?FDtpg
zTOV?YOw*ATxcE$|ClRX4JH%cVIFx=6!~!U8>Q_G-Wpf+r+#surDm9RV&UrRm=qr{<
z^x@Q1QD($S9tWc=Ed@R<rSwX3!?@kZQ08uMj-@Laz$0Zq^pb=hJ5(%#oM&R#^GKi^
z&6@%iHD{Qw@UVeFYxFM6|1orKFExQd_5ypC>e`ykthxQJ7a>KS;$kwYsmUFP;ZF3c
z=o7w4#%2iSI`ERXhhlz6HHdKd>aXB{Z*RT>hw#R}(xk|dMe~7OJT#C9Hh#K_9!sfR
zMIc%F)${@BBduU>1_}>l2JO<7DKBS@k8ZrYm)5^HEuCsDqX7p-S5^2-%Hhr&a`l2h
z3~xyF<;xJMg1LcYu2tAUA6f7!rqRnda~K(vm7GxkPe8E0wQXL%M_nn08eA{wIc~H_
z$SIrRTHY4NC;CkZ&{Oa{MCiUm{@uKipvPQ*cih3=K4?K=-&$U%xkFO=dasgh-ita>
zuVPW|F}yjq`0Xj1Pz6oD2<tYCGCvcY&F;Gb8#{K-mCz#M=zQmrQ*W{TB{(G?ITd@H
z6@$)ix*C({S{2;rq||@2@a~Qh&=UIAigp*XBA>AqjahxQdmIN$PqH`KHcD7CdSPKD
zQXF?)>>r(-(icQaDBenN{>Z#Wms%ba`LmZ&pU{H7-}5rvINPq|$l5}X(uraR%QX>*
ze0TMz6fchDOZoyP%sZ_L<IOE~N%|tgiyULTh$O60?w}1uc|P@ZVI01Rdm1roA)raf
z-OTtNmKeb{bJc#GeLKi^a*jR6O6EX_5WrrEJumlUo)F`)bI(9i-&u0@oB<qYB}Ob<
zS<tpYkN9w11?UNiZn7iK*Ko;Al&0x8Oq1Cp0P$E%%bnWxh(x=i?3W=D@rE&IB1W#@
zzl~ii?u;oRdQ53RRko%D>X&x<7t1@n9Ux~Yehi1qZp(E|)0Z5)B~+Qbf+|z{Qn?y+
z-8(kNFSE-lgOFkQ=A$S3idyKFTc~MPD>7vx95r6Q2hJrdayTbJRAVmXezo*ANsS3z
zoNJAQZI0RxGrhR}TQtg0NC8mRV*EV)=fk#w2$W!$Rbs*k3&H>2|LwmELs21<J+H8b
z!SOxCAG}-;c&vH{Di;noLcb`1uZ*)x%a@;Nr>N_b;)01E)|zm*m<*^Ffx!dlj3h27
z@aZfSS&}vsS49?kv<zrtgFDW-0lYJJjwRsw%|Xi#&WU~g4XL}4!hT&;pY#)F%|os%
z1Q3{qvktTOpBL!@s(<CIb&?WpsnMKH;04ZQL2_=KW|Ki$2aQcUffT1nuGNwFW33ue
zASrh-5Q`2M*TA;(y#^b@JEihnlH$Vk_4u<L`y|$T#)>W*9XMxuayd$4zr4}Q9ob>a
zJ<)nBNmTGl0Zj;I&Bn$FDTmG`srB}7v=G%6jJ$i5akeJIvy#Y#9W_G;{*9~7M?I9X
zOH5vBH{?9BO7qvY#*&ML;jyU^t1MiZIw}ToUOir23%cMJqDxrHhNPdj#HCtTg&$Y5
zlWiRj+v3xp1`UQISb#!uOaUhbB&L@;<(pvm>Vgxnsv|zFk6-vaivcdnAs$aJ+gaXe
zw&0S3&6u~M=roLUWxz=H3)dGc1H9ot%sR?N^d*7{cUYiSWRen)hA4a!S1rlx3zbDI
z6Rw#TB>vZ#AFUrkSg#mwETAjT3_)G?%c_&X_T|n9&ucVyI6#uJ9ATz6^M3j_pw%D{
zEKtB@1TE`+%VmI>K{DJ;4qku>&YKczzL113DwRj;1<DDr%Rny)yxLNKme{iz(E(s+
z2!PSL!@qIWbfn9B&scmGFb(yQP8Yz6(EQTpHor{BL$*J-nt0QtX>(f2V&d4ywwq+B
zFo!pnM@)3j$F8(!!0t8kW>d-mT<hF<G2S+Bof~bRRVJMT*j&OP2+=*PLVuwy*%;v8
zvvFuCV?JOLFA+S5x1w#zY+`7~gm&fH^~=s2*=G2#KmA&jvrkS?fe_=W8JsP~wV2BJ
zFl@63ij<3Co$XVBThFZPI@k~|L~xdM)xQJNzhacyLfpLZ#Rzf)4@yqcfA*sUE+A~u
zH|gADfM&(G5-fOPYJNW~bJ@RflX>gni!m+i4x<ug!`PR_x~>xFHFN_o=%(Qm%&kyd
z$}@FSuDMk(Uy-`O$i5z;EU4F)X=}0h5|wTwyusK|yX5$GvlG%0=34JZIj8jpo0pnp
zD|o0?*OMu!siA}0)YD5*VY<2uov*EcWKq(rEx%9w+F{MhN@qi%!*`IRL)zvp5mjT!
zaF*PJnPRTYyYntf3{N?W^=8Vr?eln)CdEAFZ(c4EF1VmJ?t7fcPUl*}|3vFtMkEv_
zwPQ`MreKLmQO8PKORp9gj;UmlazVZp%WSI{W*v_gJ@ArcXgXq5+I&u92`EFw!aLA7
z&$9s>IfAfFBY~@4tPnXRLGV^SF_aCr!Am%o3g;&@`XbGV=S;6MI7YDf`wOv@ayPkA
zmFoQxLQ9vlW9C|B-4hk=+=L;H%BYV>_)S+H>dHf<a;-Q_lS?gq$ksVNp<CYZ=SIZ=
zX6VKR*FNDoxVN5*P8<uTvm8zU7+YqBB6jQrEE2rcc~wA*yH&PX)<bZQyB83P8Qpt(
zJ7+u3c24&tVZ5$NjyRu;ZY0dfLDM-bIw>uEbjksY!+^}T^^mK43Gu`cJukVJS_y%=
zDX36Gt1#~5DU~&oWqHxpBtjz=5*uuiX4^t~e2_Jm81;i4dI4@grH>3JEN@lU)9D_<
zaMcv<%FnV4p{!zAxDe-vPaZ9n91Tzs>fa+WA1%zn@-eb^wC?L&t8ERY{BxDa{kv1S
z(8i9Z(Qvx7G(bv#^v+1ttq)q-`R+72**jGcdFNlEPPDU_<+FtDy~uN@Rsw5_5s^9;
z8}f_MHcZFCp!ri!+uTHP2tZJehNsCCgWyePN#%mxWksQ%-k=H=c;ygf8Uqu9EY~4v
zJ(GelikNwaRfI?WUdaIaRd-5CU(r=FP{>Fa?>P@#OO9=TytKZ~Tw&glDDb36v3O`m
z3$Sj+yuP->!&iT=;n<-iL%n{&MuLjx>P>dB!lmO0uu}d}UWgK*ZTsw+d*wUUTY1UU
z2d=1Q9o^e)B-89$%Osg<fZLx(?ZHH7_1$LUEp=s^n&!qDW13ft5BVq(Q|{uthy4cT
z40l{a;db;8**dOaNn=6G5H-Z=mqde)llNUObJA;TTMr%}l)j(mbJ(h;@+9ou!@j*`
z3s}jvjHJF$a8)X`dlT8qbTsBz-MO7*P9v(31GGj{{Svn%0>X?CV5bi>*4J}tC?ifT
z9H=h5N|FfFTtkb!7sQ<G?QUBd0<Y`?|Lt|&OZ}T>;|c?`V0@oItA98!9nNWv0Yeda
zgQR}`&202!%~lRpOMPG)z-dJI!{2F#Y2mjYKYF<3o>;4ER?E^`U!Odvdq`M$@DNO&
zd*uUYo229fr5UG<x3n_`^O0T%eVGm{NcL_VyC%2p@RkZJ!CQ|U=933;g!?orM3{q+
zfT)c|<4z^$_0TLTfiv)saI!SrpUYOzm_rv($Y#T;LvA`P407K&R*5ISTXueDlO;oY
zn*(6w&OAriUdI<lFq~NZY8O^5YWu0dg-a2@6`*8--Q_8IOAz~(Ecg=4A)w$GA{(Su
zIvy=9!$KPM&BFWUx%&d^!@6KZkBMhCFr&(@WDqS@u7lbQ2aNvt@io;md+#1x2Buw$
zA&qJ5i^x3^@FUoCCYLl{qfE^03=gGNQLPPb-nZrYs#-K{So&ag!3Y-Y{&S_q)~Ctf
zEpmH)C}2|1!<+p~?fLt;DtdwcYH)?Zk^*5@hK)*Q&M!C5r!ibwRzJCLv^aWa&xBFH
zBFB2sCA32b%Tkj^+1w&g{3>;;BXjA~ZM8xrI$vSE3l~3%*@aEtwI4WAp$xs{s1~z_
z2c^W>45`~nirV|HXz6M71q6Y(;Y;j=z~{^JK_~wtcMWGj<+qkq;>2nO4=jq%z<R&%
z8Vy(CEC*e?fn1=3?Nq|8+$IGvi8(<;AFgmBbW(07j>dExhzdAI?&M;EmDqgnV9dfl
zz@zA&wl50h5tlfWpjs3v=stJ5xCIAKA|hpU%35#$BS!7?VI@Gz>8%QW%P*-NxN6=H
zHDu*hC9@dEQkElX!7<e3s9oU5>tXGNSIP;n^FgkP=yUy<gZ4T4`2&mxfTq5yUH=F}
zo34G}?X{+btjH!o;EU~n$wfMwSqzi0g7s6C@0+Z@my7tBHRfY@TbZSOEU&sNhvHUA
zM!hmXItOh=>c!=PZCYV1>u7c92KI`7?v>{5e31H#8;T+3*@B&@dnxf6wFlYxht`6k
zh^0y^B_5C{UMUBwxpT!utr;l<vn(6eu3Y=>oWpr$aL%*=NBLzYQq$wE-s;M&F5fCe
zD8YywblAp$AquZ6z?c48In+=X#}UZ~bO1VHlT*-T@F7r$1E&qIRVzq>#yB7~vzSy4
zsKLz9SGDwG(dcxDEl#rugEaD>8@Q&dJGcmeQlj}u*S?{yXd6@hyCIK7Im;3_mPG>H
z*f=85aGS|Z-tuBnpfm<2Wl?iJU)<&VZEtLt9E9ueBUrIXu2?>Ca%&%FrWQG8AJZgd
z6d<iQ>MZN5XG!5Ei$1guGfgcNM4deiX&)hCcR9}4-yx5G>Y09CbEwyE&WDezq!3X|
zSdod}iT%Ci#|s7LOT6LBt}a=b_;WY9U~pVyF#%5IUo^5v-))sRpRuIGi4#Pvik8+3
zleUR}{BE<o`RJ?mLy4u!s!|HhM*b>SSz8uVN&<?Sfj`~={C6SI>^L3+)2AarrAl39
zHw{%eaY^Fi202dR+$*5<GxMN3oFy0YF7XO2306YQl)yM8Z&2Kl@p?RE(sMjIb9*{u
z+2*shyM|oNa@;H(NeG~qAxO7<R63lx*`(`B--bIwczG<mJZ4@VW0_)WHr8fioDMN@
z3avlZUm#ASP<AgP32J8`k}eqe5P=t56*J%~vb1>g#wF-ZoCWawWHDKF2zRNokSM!T
zA~Bx*i^ZG~q!*JCeNLfJsr~=(fQ8>r3cJ+|5nT`1;MuU8xI_jX=z32c=pvV;J-q?6
zcX(x9RIgm-J@epc?L;k&A>p4xpEu7hwfLK6=d1fDhg;V*=3c64(5+OtEnKc`tF%u`
z?FGr!mkij8N+%ChF2u1CPGkSZrG8Z^cQ7jkO>!>UQk-E;-UGyIF6hRQq=DvFD3mAu
zO7#Iji{XVc@<o=r=r?$Xw`7`*JTNt%U%C$!uR$s*LU=K@2U`t9W)1+;QY9CGE6A#F
z4CbZ8&d{GEF+--)=r~NQr7^xyx83bgoYkpw6)=nn!YN$3No^3p8&NpL&z_SoVsk;k
z?Jjx8m`H{}E#4NDI0yCaskNlc0$M6^Y6#5dm&Vs=4ZPCIr)8B9o32rjmFZ-3$25zB
zc3Y53g!Dn-5;YRkJ9m@UHW?}8hDar4{nI6`IFe07g+<eW_0s~d4-Z-b4iZivN02Ng
zL1dG(9)6Ke3<!{EGHi!dG!VF#)f<h|6r+RqH-wDM1=TO5+Tvcg>r1bF%#qVv`n-tB
zAN6T@MLzp@>9ZoG-}cEDxtIuE<gI0f<`p9+1173FI(&CjxCjpCt5l2mh$=!$#Ny3`
z<_iR7WWm5`G)SZqmEtltbz;5otF>7%fNST^3sNKmtw=WT+J~|CFLM<P*BVV<ISzXl
zGUTu_gD-MdmoR598=dS)sW1S8sFs+!>oDm|$JI8c$OpCBikEqNoDZEXh{N|Z%7_67
zaDA=QQ5)ylcEkN0g)<Pn+iX8>Z#w&aNHl;SKfOvvTAtMZZg~xN#_8%HeHUEhPX^mE
z)X~LAwdZP)NLIM8;ujJ!%~`@Z{O1cVsIUwyOWIa75uGWxbJFGb6@Mg(k05-$x{;sd
zRT8tJZ1g}p<+EGf=9n&V8}-AolD+su1IW}}*z;bzPw7`wZ7<qvKWIN_I8>!$t@0BV
zU=%Mk7Wg7TB*g`7fF{@2kRvUz5+>zG#I$E+gZwI%GPZ)G`g3Vym=6}9sYL9S<^dQX
z-=aOX@-YfrP7-T}Yl(E|)XhnOab4)l7swq>Mny-v5c@fbM_GR+kr5b%&nFHmG6hpm
zDS<0$j&yg&jhSoL6YbQN&~u{ifjMdlUy_Sh-Pf*ueAgAy^RoOby=2=e*Q((pHGk?Y
zm6K)|IU;LUN-f+5*<{ri*U@+E0D6S!zUhOUj5gVmYDeWP^&a^P1ru@j1XAs)l-Mr1
zZa@bwumb@DpOyB4h6M0NTw?D>3t<Z9M~hV<b`QF0n&~p)9$zLM03O}&il5!dqUo`V
zgkcx+A(2RVhsjw69iHyiF|HHs+Q~=tj83^3q`=y~HEZmEWlrWTJ6M*U683si@w1fo
z;y0cT>*%UIvG8XhH?e!Nb0jI`;v4Y7qVoKQ@i4iG&dv@?(=%(>r)kH|n(h}|UL;4S
z{>pGVx}gUe42kef?5tbs&FIGlK=}S-?!*X0*7(`YbxBqr-c^&q$s(CygL9Qmk@+ha
zChKk%cBa!0s`E}fMrps#r)B<^lKEds=HFV$<S=0_Bj;wmOb(2$g90~xC^XMV-66d(
zdn>&t7Gr^*xv)CX{2{42iniIe%4PC=aA9@TgJ6S}<qV@zoup-I(>-vBp1Oo8`;_|B
zDGwA;2IHg*m<V7NQE1yhq#foOK&P1}bU~KXhN++}AveGa<5WRn{k&Kia6SeRaqP5c
zYU;Zxe11Sw#-BjXwd^U>!i^G~4SS{HZxr8-UeY1U5l~W}jLxi!1w*TfaNroekBz%S
z{;2Jz)!)}h^<)^Sun^`!GYR*RbEsqHnkqBet|&Tm6H-c<BJrGG^8xJuM6Dxkn!SbA
zEw00sO-5S%FK8|#7$cEvG93Y(D|!YYC{Bt(WGT*ll>82BAy@B;jD`1r(LWjtiQm#F
z-lojTo*Tom4cPLEWWumcu#&4tW{SbGi&Y|OeWny%r0rqVjcQd~E?7-+*IW$9`U+>@
zExlr~&~FafjYFZf<r5K@ZY*dpwXczGTC8!X_wwFWH=H%AoIQGJnzU?9+u*C|nBh)W
zEMtj8K)^6DNKZl&Ls50HvVblQJXGrnlejfKu{0FNh9`O!IXCpSLj9C2^sG*p50R<H
zeC#Y+m5(WnMmYU+e{A?UO^wuw-xiH!HH`FU5q%M<d4GkUjkdi#%hq>&y8KlauT@oM
zK0b1*s`bF{TGQ;(B@u-MOIs_vaRszufrK#n+$s;l=9k@BKGM+zrF}xziEE>|x=^Oy
zpMu$k(@w)Cd>>(1)Cy%536q4F`voLQ4+W}evH*QhAgJI;jk?PUZ>(INm6Fc|OV8<7
zz*6@?+{$S_qWWWJmLeC3)K8fV4|eVneK-cj^~Zgp?N`{mlN|3-eR9n(0I_gYG@9yF
zo&#uFpM9}$d`OvG6<1w|4DbHwVm8esjmHPctg54Ga3kl4RF=fi5K|RloRYbduGosM
zXsUFd-wHd9;yCt5%y-4VXRAhQ>cCizkne$HAt|0pT93*(=RSCqoA{)@G@VG}NONh;
zIR8-cw(EC7fbJ-UlWgvrLtRDeMgKfT#<!O?0h40&`%+LE*SudrNU{2)lA@x;qNp43
zAN|D$xC$$dzgCq&(<DYSDpso~L&_*uu2kiL9+X<mj5QKIwC<+jdI{YYEcv;!%DC-s
z@~L8`Xq7>6H#;i5WE5H0@U-wVC-Pgcd0R(pfD$Q-z_`|e=^iGxPu_T9v11B7b$gKL
zF<*H&ecW#LF{v2&ed1KPh%y)j9M%&67b@*={6qa$zt-RgaYhSZVDLq2LSlVl?qCzq
z3TvnGo$@!<=r>C!a3FAcYaz(wRzf`I!|d`BiD%A$JO^<trX()2N6D5lVKfH>!s9Ks
z-ePH!aBX}uc4Q@U&e5HIqFNlXJxncuE05N&!fO_&4B>B_yNEshxDRV6jSd0osh?Jj
zf8se|d9eKSr!RBeq{s9D2SOCf2bvo2#92uphk=GG(fvV07DmSDcv89&+AN028>5h|
zfZGAQz40?)XyLK`T_CgDMpaOLsc$h{NJ<-Y6>As)Di+Sj!l3F1*ucVY<mBPl#?#Z+
zo!2`HhIwUaAOC5FYR96md_|K6_A!)Jgtww~qZdvFu^o@?$hSr11}VdX(2D+m0FHHR
zdO;-qCHr1l;H`iDniKf*Pj4^R2AV2}(NOJ@g#j~FSP-xxM7d{>f>An&yhCW5j{Cyq
zn_|5=!9H8(gA{%DeCu;CtY(!!g$+Q2yMK}nq=1AbTtia1&$=m>ZGZ|R1VVy}NRS$x
z1@Z*+RU(+gRwYrD&Jiv@d_Ypj4U3|j*$WA0;SRb%zL;ojK?pkM#}Y>#M3h&PWjHxO
zwiZT#0#YLm$1|EFUM$q)hzYZ4gwRBW#Kp*vNZ4J=Y)(SXbPjbbYeflJKopl?cE<8R
zcz{C|5NtrM*;<Gk5I&(Yz-|tFjej`DzoElMmf6W0{CepbdH-JY3<)ud*+^t9S3Omg
zdi9d@^&yicJXlHN;G$f1RgF>Duxbf}u3o^XCy^L2#~gS|6uqQ23q=s%3&y{)iMGO3
z>eZ2r7SEZnFv$~}DKQvluTRu+>EcW|EfbiJ=}ZA1?|C49H_Aps$`vFd2ifWDm2RA2
z7@WhR1hu1Xsc$pLU9|J_@bnlyll}r&28wttxd)u(rKmoI(d>9SziF*#@q*p4fmh4G
zK{;MCzlMREkBMHi&Y_1WDq|tuus$@|E-{zvd1nXg&+_X+Ad$opiEZI~U_EpRuGN;=
zZ$hF20|Q)yxX4oPez_&BVV|>Ij6*Gxz)n&u`oo+XwP@6W75Ad84MQ>PX*A%wWVG;M
zC+gu%FS7S8P~R<A{iLo}7ARPpCLe!mC8*<f+5Bb=^2t1(2s{thiMUFWk<zFC%v6xZ
zQ>$sfe2AgP+)Qv;7zN;$Tm;1_$Ig+5c%zKiqX$f9rDHxgBbld0V=uRYugcueuwi(J
zYAVvSfqjUR_p2^nt%m?19**dCu0<oR;#YrU5n?v<nmVj0oZ5adqD5tmoo!eMiXPIr
zLjM=bJM#DVz5eVpn{C5fk}Asuu#ZO>Ds@rkUp;FyUM26d@nS4@h!;sk4n_EvhuWIK
zj#Ee5+tUIqh;2gky+-9iB-PPe36^t2RMj7sTMxRpS#o^O1z;zh=EN#*=xlJQ)F#h~
z16lycuF}y|L}Pk_xXYYRwifN51rVa>l$H7-YzdZDJOY2g2tf0+YD582!@1hk!a;G#
z7>@d};c&)e=Qmw>xT_B%=uRh#rnuCEmaPx~hr%yGGRCRP2LeLI*2i>y8$7diRvl}o
z?;bXC_X_eFDKGVsG=8t2UgT1kPfRR>tPk-*-~%1{4ua(V8k3J1`UBFsxgrhQ!6kG+
zgm_{ZFnBVM0=>rx;J>dtDQFZPdWdGI*O`x}-jwx?M7%%kd_!O9X2YkwI@|+x0r?A#
z<ISDgaK7)e?Dm(k?7Z%FnTp`mzwuF0oW9G5JITnaQs??IpB+J4nD_pT*rY@#T5!U<
zUie*TUe&Oi)QsAuGnUPEbYr>qVk+j2ywSI6pSv6I!@VLMUBo!Inh_&t5Nqe7?5*Nc
znv>CG`c1IQ0rTl#476^CFBmCMtBRI>RDHfja*8$L6hX#4<)RWr?z2zAp!Nk<DOAZS
zkaqd3&e*@aY+vEtI}{i>pV+0}J4unvNTcj+OL{ea&MV}!p1`*NN+`U4H^J$e@qz4I
zN=-&lBsEaPY9+;LkSl$H`pg9k5SvkMd{$}@uk&XB3e$THc}lnyKwRi7Oh)K;jmHUU
zsMzIr`ghAO-H|AKqKm#B%j?a+h_0q9XIc$=-!{08<w1#J^bylUGiwjdZ>IW?tN_UI
z;bYN?ggGn`8ylC{!-K-2a(0JV(kfc8cF(b{T8rK7!K82$&*x5+_(hy{5@1q9mHQyk
z6lDUbX>&4&DMxgs^Ccn=dCKkd9-UHyh1>-LS9h}bT%5)gY*bp6(v={F(d~M?ecuLp
zUsej7Q6A-#pj}CuiQY`IxmQ!HlQaj%GF>~saW{BNZ{pw*C`l<eBHVSpPhR>}(b6;F
z&rI0rCMrQs_|B^vLCkivf)lAJXp=~H9bt@-KdC+-XHP2BW#KTz5K?{n!DLdP3RVz(
zv)lv=5<y<l!J&$?9I==c&gWr&>w2nqLka?R?on}9*gzh2`4M<8L+PWrga@=fCh16x
z5j+qSl3h%YLApGS=3heq`An0$V^b12`88TcSDH1`>*kNE2xts<I4^AzvA3g#UkX!-
z*7x^G6yAKKzjpU=PPm28NKd9R&BT_1KB83Ph`5kq7%qP=hJuK=VE?c*Gn|R+SK+0J
zRt8HZQhW~eY-nVClpwiwT-wP>rvfqJdkAZiRD#r^Ms#*Fnn=tKAzclK^07P=>q8o;
z*I%%{2cTsQC|k@FQEze?gDD2UBe|F4lM94oLEzPT6Qa$U746!@eiz{{)|eQ|wx{!t
zBl8Hj*dZn_SE7<R)8Y~D^`Ho*N6_a>6Qs1|yj|tHjmEj6;FU$a74E#RyYhNhUq^0*
zlaOo7?3HB@-^1xcTM7DkE+{f1K=I$g4VG0rej}!fvgSUEUdxqf5f4d6^;z3eT`n)N
z=go)R;$fGctVBs*u?_J5icelPK8=!TSOLR1)~clWOXkp-C99JdmV+hLjA2#SvVZ!p
zrNQOTXzbCcJl|q`xz`7KyAh|igm`jFA(6BE-&8oGo^lX{S@*Ya0mIXFSZjJg5usrF
zJbl=a&iJ|SyvTJuzPR&()536|zATTJOz+&Znp5x5)HE7DMb8mq82v<i(My0oHGYca
zfA+8bqUWCpmHxyQEOzi%REH;FJa>{_a#N6IM(M@e%!4L}kZ6~^TjGU0WxuAy>7MMr
zICy=;O=;{uq>h8VPj7K&cX$8vwEKtsKXniGS|pN4(BNPT0tE*{;bW&#?G+#U<S(7>
z@1E?R;Y%w&vu{9?KZ&P6@WxGdWAdc=G-OIOJD+T!saM(LAeV{Zd=J>Ouz*>?d^@{P
z*^KR6T34M7KJ<>Pyx$O?LIJcKY*69Fub~5JU3Vr28RBWYxvRNhvk$!6$5tJ<hbuJj
zlLWQbe<lf@qu0*p(4?zOHtS|9Z-x!b{S)XRr-t43{J=j^UdG_@+7<OosIscKgIYCi
zb(A&zO?D@T1knd)a=~eiGkZFdz&)I){34uoJ10l>D*dINmV=#F=5R;o1^gq1vpSn>
zC)dSxmW;QzH@6->di>>AU;pO8=GHcz?|_RoG5XIVG2W}?=bv{n>%I_9@2Q%<ZL9o&
z$@c8ZS<fB4f>1B4e8Fwal92cNQ(}lLWzLmYq7Tc08n~ejMG*tCdbx+h#+5=!R+Q4D
zK3P*y0BA%EI8hBj8`tm;#3ahWh)x%Itm{X6_*X?FuV?nSQEtD})4G#R>t0By>l!(I
zJ$!FCfAS~#U;OG-ytmgemyC2OV%x$%VC53^ZY+YF&t&ixF%c6)-d<>kuxTDw`J8KZ
zGKLrk*e{ODrD4OWz;QZicPlgt#MpHbu0;ICA;TZ0BV?o=^t%Ycn(k2}1FwvU)-q3d
zq?L8TA@E9^pC0VL@{W{r(!S2#W~A9<NjslicJQl12Pyd44T*9>v$PiMyGLrqyc^1<
z*Z^MLDD*`Ef+?~>17T!HZ1OGj=Pm-~3Ua*X+6+~tdA>yc<;a)Mq}p13=*vYv@aR4Z
zJlHoDC1B635TCcYnuOTBTJ%d^2^X8@KxJmsO|A_+N{TBDT;z1ievaUF6>-FA3=~;*
zgz~X!1|RxHP0Ug$^Pl6I)H&OR0t+YR!ouG;jL+LY!+CHTgzJ*GNT~uWc#Ry*@dHfS
zh)uZG3<)rJHEbtA{aZ9<I%w%@9L>uH&oKDeMo>iS;nTrG)L`@T69OhSnP%7lB!e~@
zrH{Mo8e3x3Fd*>RWai5hqxlAN`XaG|kE5S^_9AZ({suM&z7bm@Fal#g-%OYgORbg<
zu2xtr7GZbe<gMYIsaqAp?;-X&^x^cljLI+FN1{GovC+|X0GIdh)efZAUoxGlNla2C
zke-vz3eRgZ_UEfy$TbIsog|yZmkC>jJeY-r!qcAZ^GV~^*m{taO3}1~;x$*c?xg+k
zeD)b64n|QrXi%V95w*gBnEO3}F$?v^7*JRo;&f!E26vyRlaQp>$=e{NBOriv#n2Ee
zGA{VSQZs*=o=!;OYelFt$(+bXo^wmGx7Pw%SknLl)LWCdUFnvVPg~5dBziA^cXwr)
z!q~pRzOmKiW3J1AI8{_aW?#6$wK4@t&Q}x_HWWrw*M&{rbCtvBpUVldUDv5AO^c)r
z1Ibi`Mpvy0!d*IhuPE}SM&Y(BW=$D*qPz@wE^MrDGo!gg8Qbk<!x)m%jR~ZZ2E&F8
z>P&0dd!>aZHFy%d*3v0UnHqC}F_o`#l~oRqx&$6oq#-|S5kW*$yF&v}GsfxbwV=+4
zL|bdT0A@$kFQluo79}2Fy_$(TqsUt|=acJR^*9l7yRTplI*s!@NV20|1SyK8$;1R;
zb(srD-XYW4eQZZPa&PB+GRKnzq9Z{F7^RC(HF20ev-v=Y$|xOF6cW#!Y5blBpILoK
zBOqt!3dl#ndV*R4F3I6jvl~ROmxa4O2cX0KRXO4owiXhqY0qs(sK5+liQ3o?B2qC#
zr3>OTx$(^tm!Uxfy|D7`GDJ9+g9$~?oe&nbN9?Ul;xqOBT(W(<C|o^$Iza{VLUV(f
z_kH$?rX)jNd6CU=T=Oal3a%|^hd(a+gRfac<mv9gtIp}ptHXM}M|UOake(>pb{}<%
zWIW>aDF)ftEl<Gxc$yUlQnbc0KU^VaKknLN20mKF_H~`+eNSKKzUc0^dm#@fTUq%C
zQWNZb3va_w)ghVezR0shCAIBS4GBDhOrhY4ZyEMg^GW<%q&}?6p9jNZ*9MKoWmq;E
ze++)HSo-?J;})od%CA@xY^o8w65?&cVE{K`*Cj~q&9_0-m78hCniz4H^Jj}7J*~f(
zw2LdgKADco!Ekiphl1naaQkR+na(Q@;F4?CqmTTxk!9#(uZS5>I=`ny{5U|6hut6O
zoqDVi`{EdF#{n*kh;Zk-$?P)koY3L(QQ!PccSf(&Ly&wn`uvA;PZ!uozW1_|{9R)f
zZ@!JVAEIT}P?9<_*>%u%@1*ZZd|UOV-28AmN7J#IkK9A$hK`P3xjXs}ku9D#xEulE
zEx*OrhSi-wFScMY@OiUJ^qeiL?S&I2-|K<?XM-NpE<RyItY1joE8d`jtZT)7&g~6P
z{v4d;w-J*5-)%nVnB@#=6y5FcYfU!IsAeGe+^)tbGdTc3uNPbzce73Z?`xt<2EJb3
zYQJy#5}n=(M6*n6`~6L{E{ZLqdKpZJ1d_Tn(kfwB!rwgWvO!rULTL5l$gA`+8Qes@
znk7}3oZ5x!8Bhl3ofN4dz6sMfow+Qe6fUY0$Q?Z=NWUMCKDZ=x@96A$=m^-@3(Xqp
z{rLNxZ+E&cU%%S_xziqRb;_?6d9;f#hfIs@!jY(TIUK0JE15dZRG+dKXvKh%<N!>e
z2TnZytPHGK0es&D_jQp%Dhr9yR5%0)gLwsS3wBO<ic7OAkM?BjZIaV;az%ypr0url
z`DbOBB%hU!J6cp)%XvDHl|<wzDWtTH1LoJIern}6#K5{ZR^v%H%(VX`Kd}pjWI#UR
zl&}qNn^Qzs2eDHsGAw3StVRUMA%uctWW?;e;IR{*-3GLT4dnR;3b2G;8HO5S>3xo>
zdqp^`cEPpih*)?^BE{>x6)a5Z5%0LaS0hzO27~|lj(|hk=i(&HX@Dth6z0=Dt32Hg
zpGJfY!<$rkPKyLNQtWgRnqW{K4CC@n4<eM)BDvZXXV-}VQ$f&@PfCW%(ZkUdhK`N)
z*L;XVa9F~|77)oEvLR-reX{FU*`?O>h(;%APqw?^DA|;HM`kv5FdF9t%3S5|R{*wt
z-A%HtJ`(PQVv<Y?co_PNjG=*S*CygINoF%aC+YoYliPABku8^)_;XLK=BP~Mvt9&!
z3@Brb^F|c?7_C_&YunM<<<(%;&hoWZv}P^h^7tmkPh7U<<>_hn{rmT8(a){rrrc2<
z&_uP}K~`<D-ELEJjql5~(2TP?M5kh!OD$GiJmXv#7guSj1hEhKv7Sb<kr?0Gd%gRI
z{gdwQ>!arfFLYJ2$-A5_j<VM3VCivCl&!RsC6z^1%5;S$%>K@~L!4X_(2?PomsZz-
zy;N<hg7HJICj$*Ph1)`HVX)H`oV3q>ajHK51-Vc~!Cjg$_9ux|56DH6bOhSgzl7;Q
z1|F0iU4>}yRo9;D%5x#j&hs`Yqp!}65tcTdPn*$L%=Y1NYPyf4`e=_3ReU;vfzk7o
z;N6LU^;OdFy&A=Dx~9%wnN|{=rOEhi1~#Y3#B;pkyY75so>y0<%1Vx>0(C`FO8NV)
zXJu=bEAC^fLXFI?VTICsV;+`B8<iGWE!eH}!kXbs%km<1?H;QP_gB4npQz^fVum0^
zPN%-{fmRY{HAa+il~RnR-yD1j&G_izwO44prtvoiYnI#pS=<lRsWYaCiQ~nu^tW!(
z?4A3%(N_1p(bzZhqs-sR>9aUkZlB}MAg^<T=}p+mXWFm#xc!*hXZsC`8Td*vP2q++
z#|P38#SZGTYcbcrSJFR-+tCQV;+R@ax?yXo#>FnPG`P{>r57y)_<_s^N}m>cGX~GK
zG4;z*wt{yVohqc4jo>A*3<3Q_D@@}k^P*B<gPHBI#fTef-lSn7hABVE5@Ql`a#6Dc
z_v}i{S7O^(%_SC5W?78}r|ggxIdCOf?^|RlJ<m_yH)EI-;&BMT=<IA^*|*T{`0>x@
zs>3XDN-np9UnE>{6&(_8v>LjgJw%IXE=3~g5){5gv9gHD?FK~S^?^t{TlPY`&)<C|
zlnMK4D}lPnb1Fb@900J5SRzJ(j-sC;21JW0QAHp4A3}sA%qWsSBKv)}|8WB^k>i06
zpK_UQ{DC#l@Y5@~ds`2V5$S>kj>Pv+ZeS{RZ)?CXJXZIDEy=g^z;H5FHZb*1)HT3~
zWIMy*40}FoL)b^6cZ@qKIr46h1`fsm4$0^MJv>DN&+?p<XavT+VNou)yFRqcfeRAZ
z(k2>UqLF;Fi2)mG2m)KJSqzckIKN;7*r=F<2fh*5UDC-rRjlb#(^)DYM@@;)0BG2|
zqykWCRn?glitye*tKH`(uU|be0rz*3X$=`$?!J6|diDg|uYHLL@i&fNpPW5;{PkDz
z>&@x@$<fZM{U<zaORXI5oSuI7`eg4(GM#p9okTP@yizunvtN^?rLZD2g8_m_jSV;y
zyUi}L9lN+!%7CO692!^5MR>G@rb9GkM1$&Nvh(qV*5kdo<Gm{vI&g17YX>agciFhd
z;Hh|AR#TqGVD1Z!%mosWtgw1e-56~|_^3?4&UBipb<VR7<y|R9jme1;^z*N`eE5<i
z%m1$Wf-NCGvb>J3!emht5(dZZ)wS0XlO+#|v=Zc|zu+yHmNp{W2bVt9^HD#@4sm-P
z)BY|5;NZ=|?b6i$ct5)TbEEMzl6rC*8{3MLdw*tWa4$q+#<c*%_S_d9n*hAcu_15A
zRVP~ek^?f?maG2pqLWOD>vY!H{QB|N4<G*1)#yn&X_`HSq>El@W_v+#M>-y}KQB^0
zKF*+(X>uuT7XoEfs5Yul3;g7@g60mq1fcV6p8HebL_<W77IJz$7t)F`H!>+k?^9lp
z-tO7SVf2sD>z?!Ft6h2G?)|YRq8+LghYiVw(RTKWL9Zq6vE#J2ef?+AsqF#C6vz)h
zN!i3#!TO^?kMzLj{+_boTS;Jy1ZoA?wS5%qouwt7edrTTNemkWwWk*sfN=3UTdV_|
z<cv8TlI&T%MyxH?9dm>rpn4EPOKe@}%9PFp8>rI3&>dMBvHQ8&7ZnC0FM-i1<W<p*
zg57G(tHiR@x?m9r`n4>#=5h-)T5xh{Ga=Q-5Dr+z<~Yq%sFh|jtb0`2RwgfMwe7_`
zk9AZb#Jt1<1bD6`sBQ^WkkTIS*iu^x7~nKycHIX!FUmJ*112a@gd~2!74_2u%!diT
zC^K0#C9oB>$jf)Vb&)MD-zgYGC8dm`Tnhs-X*7Vu!<0Elk*j)4OgwNL=Ye*iZyMyK
z#3G>sEeQ_bfRn{k?0PyM+__-#%!~g+&ZT(5E_;ipMKEn_EMuQOjb2IZIIPQ4H^_|*
z#YFR&Sb`m;onAK#@*o_}1v`u~+FLh+5y?&t9U;J(mrvXsb0f$G)0<7n+Crewm<#9_
zij2^=AjLQsQdXFxEW1=P)~7!L^+RoL2jQ%G^zWS&rjM;HSa)^5R1_SS8`9z=<&pZ8
z=<*nS&RNHqm#I`%pvYw#gwU=N5@L}2janmZ(plbRmkPsOzvep!yuc@}k|`0=P~>>F
zbMG90Va{6u((gymQlQtNph1jMW#gM|`jEG?)9d!JjSUat<U7nfX5wRfN~-x*JM4A2
zEroM(rBhb4J;{UQo08gp7QQ`8*()+&|Al#YyreFknqCQfI@d^4d)j6!tLd*85$QY?
z4FR=Zc7l$2+m|<KTF(GZ2T=mR@Ug(vmCFYxq+R$~b!M@{cS2M6x{MT-1z3wTlVVNy
zZ8Qj-iOVi1{lc6L(eKRO={~EvlKH`Q4!Qt9>b~6H+1o!kH6$;Z%gUV|^c(0kj+2WX
z$klVS+BqyG^EomzH7@XqCPQz?4#*etORhvfqqpGTb-;7%9JHdH2?F(|*+3IRThX(0
zILl#E{g%d&zSklk09luI6UC5B;vxm&6|viGFCbJ#@MP_e@$1>;Hmw9aE`N;oC-1fy
zZelHJJEwz43vXByFg!Er?0lA7z)8piav`Q12`WT&lNrgR?0aM%KaO1b#c(2EZ|Qqr
z%A?HSdr3{a>d>ovuIdD}QBKLB97jF9+_Smv$$TbRuMDp&hBgRKLGB7?tjJQa1c6f(
zN-LZi13rjBcOwZNN1Bs5C>SN>jI>!&+Gwf1fCmfuTe@Jc#Vxlv5^kQ3x>I*4@M+*h
z|K9rRv;D(nXdWGq9>!9$dxk@>M9hYuB__BDgJ}AeyiNe+(!Gq@YfWnt*i(j2{re=n
z1fFLYHuVEvqqT+kOx}bC@GK?qvHav5m*ffFocc;-aNKb-8j9P?`oX9vkSM?oP!FPL
zv2#cxn(%%$D7!v>(?uM1TJYS~rp7p}TVH2z*nB>k2FOf!Pht_~93jgwwNhXPWk^QR
z`k4%-6&-SaUP)UHxgx6xp$1dt;Bhua(X!8T8fppgs7Oaa$)<!M79gW<6QjGFO$Wr$
z%y82Zo7SU;n_uw)Y;0iaJKSu4ae*i8fv;QY2?QB+_x}jZdjF*R`s|QYyOY;vuXkS`
zJ}JG8co}TxUiqr*Y>geUMdGlRIYZKf)|_FUDk7z5pV8&X@h&79wdvB1JLjdk%knj~
zs-k%$#9^iEn8E0jxEhV{7tQTd5cYAkga4d*F_qP@zEsn6QWVizA6z=o0`+uGOe9QG
zSC#?DR1tY|K=L@#rC^vNeQ~J5!;EVwhZV-T?5U<DFszN*c}SLSAr5Q4C|KywSg33)
zh%YYP%!7VbH}$>JZjLc`O+>RX%15wNJ}<AO`^hIT`W?vlVfKn}lw=GYiK|^m0I(KP
z;!~fK9xzQNcqp2JM1f)2u5%Xu7zJx%V@Gr*81!8=KO$GG@R2~@_^KS+5_bU)@|@nO
zu#QS28p;}IQo8<8?}84&E0j93)o*iGULBmhk^@LPAcitm$|G8rxQ&*C;UQkF#q~p<
z(OKDw5E;~pcJH;KqXmBTZ<^cwxHd}UGZ6VJ`64XnlQ=4s6ObpKp;=h2)&ML9Yz%ts
zD@QV`(3~&pu$4qFOg$HsQ@^8Yk8<_I&_o&voF{5#C`>eAFQVH{uqq_TH0ppSbmdZ)
zF6pWD*^<ZH`MJ-yq)2q~XQm4Y_J<~)FUre#4NbB#n-jw{PlR25{ouhSG>(qGpj8CH
zXVRI}so+1QJO%$5oXWsxl#m_9UX;WS56u`{M9z?U3!ODW+oKZ<N}Lz$`MSn+l`Lfv
z2w@mMED?UCc+67YD47<L)hNwp2*03lP8Xw~D7$`G6fZ_}B65U0Oj<Vs#adZSnx)au
zpnF(OmZ4aw0_nf-H%{w)$4Pi5Z!uIo=^8{vB+EiEZii+g2RXzWx<||npiW(Gl;JSD
z^0_Xsrdl2zsVjZv%gvrZ^|`J|rZB>+(xJu7xFC%4Sp~_87-fJO%9j8n#4RH$cW$uK
z9{uM57`8YiIEf-yVOF?NII#o-T>U1OdtUPChi5(ls%AM?oVB`0y|bO8vx9H{)P1${
z$L_(=-u@rEX9utLyWi2@ufOYdy<*{@f3U(FIy3_`IU+Xui{T~GF2Ryv>5^n~y-Djg
zNdh1vp>$H*`eId(2|#7DLd;`mTh0D7BX5P8^0|ck(5h;+0Y}Tq<)(mr<sco>I5Ge>
zzNhJ$vmo^st>J=e9@W%S<2q*yVpB9Z4sO6rfP1k4Z44~hn(tX@v%V%#DpHwL>_ayh
zFfW(X*PtL;fL^9?u0i7|(9=g@bqxB521WTAYKqk;(7Cykj~YXh=AEsNUu(Fhg;4cV
zEAf<Z4XqvhTauU9zUOe(JU?ZKSkh?+S1lHk=h=M0A)jjubIdRvYb;fyUMAJyxZ<sS
zW-*s8Qs6{)uP_WDU|A!%!Y|QDG`nHPH+RWcidb;bGRK~BJ=i?>a3xBD1yW{>C6u`U
z?$t3{qFM-DKqC;M`MvxyFtfpEF|=yWHbzA|w2BIz3o?T7<xG57oVbz6qFY_FOP_Q|
zvc+Ujf;dPN92wmG56_xxh2fk!&P{dm_zA=w68OPH=yiYqyiNCzoT}VM@deIOt@<u0
ztt08Z1_^H}sGUg8KH&{M#{ZOiNH8aU(H;__sog_Ta7AFtF~I=v5J9}Zw5!5nRpqx!
zc!fS~7lnsCKmGYPlQ%&$8atDGazg}IDEcU?-yAkH8o3BWz$GGHV1^83JH*>jMQP78
zQi&(6q+D?u=6xg{RFu*P)$R*XhGon^lR<Er86`OL$K6}g&;kCk@2tdp`>?_#U`R0)
z+$wr*`(0alRn-~i@(y&d(u_f^35vIuqO0hZvjtcU1G)x=CiA}@RDjF@&jQ3ku|l)k
zs!304)-#M(_L932JSKv#JtDtacGd5?ce}@LV321?0PnGHMc<O*kOuGSDxtV<gaE4E
z$id1hO_!q&-KP@Ut0L6!wlwA-MA9<l9VG;jkqo%Mw3fi8`EXvcR~ritH^I^Ch6Kyj
z{wxGXlmye?bW_)MH=p$LgbR%Z<|RePZCb@H$jeLP_x2?N1$ae5`<T|eG*rYwFSH(J
z$vEbrC;`#y0lAjD?~3d)H<exlxC}aaK6zR|17@`FXi<FZuzj0xVEd6!Km_kkF4GFE
zt>HS1t0ONPC(8Ry_{=A4v%jN_<6$AnQ6y>cp<T6lzKpPHCXBU<5{LR2mgB4pYo`Kr
zLl3W&eD#I9E;JgV2ykT;@wb+6B|blZa;YZL+FpJ=8RbdX-%Ezh(Gq8j0d48<6~lR9
zIVUVxAr5dT#a#Hy-nRB5sxtl@|LDq5|16mpJ~Bo{85X<zmJ5)Z*}x_&f@d-4iWd0Y
zcKL0_Na=N{v1@f0MB-u2P>1B;^C^AZ>=C2{kDEb~!o>~NM_h?>5oG7dnCMi^mLfc8
zDu2LUcc#<OM+^=%x=?)9p*@eF2~2|g<g6<9D{Smkd}2ZQ1bT+cUr1?`&F*D3@8Wl8
z4>rkfmX6q%s?yPS&bYta8EDtNWoe{W6GVK$7&VezwXw0I!F<uv`nlNHfWYN^xu+p=
z$fsGtJ^|g&>LUp-pDUN-F#e?Dj=5+-pXEBQy~yGBz1%-V8%=?%q#0x&Ni<J?Si_S1
z#3U2UwY_mVT3i}dApWd$#~uxVD)Fp`rCjlXfgb^iaQ%4yRa0NI+$8`J29b7dNMS1+
z`5~DvVR*UKUalu;<5^WCjIPg>^))W^^;l*XV9^?5vG)w_*b#tF&};XTI6!haAq|Zb
zwP8|R@saDp>GDZDOr@mxg!c6nCstVCoZHzR9bAgfd(tz4E(OE5kAHxS%b;Q*%8{1*
z+2zRojg6DVB-(T1Ks*D-+aX_7cm=DzBlQ0|#eZ8t008tNuGVsiBD)&%=0|j*6_^-*
zTwE!VGlrusnM(Hxt0=`j3R2C|N#`cT;n?9^XK}T-Vw+;<cGCbQWZ3UY9VtnR3D(CJ
z#d2bTfi?thSGH>O9m{ERjdAc>x4L;{`)+LP8P@$N>EtwLM9*?I+jTZPNbU1!wE0--
z=oMT%26v<tm_{6cKezIFG!$474rEbV3Xbh}Va!O>t2MaxOhPEXE)km13(PD)U(A}E
z6_HgmMnqRI=k$;mu%tBiV$3FLdaj?|<a$zh)2UimWk`pN^(+J9#n;K9Nq8VY&@{ZB
zl;-M1)8qysKoPAYk#&j!>7&JX(#0J0nlQbvr$b977C47xP_*x-BUH~pb?r;5^~H1R
zAnJtno<^I|AD;10P<vRRWH&Z;T`jZdIL}Ai&C`EAd{5F&KH`R2QHDD5LD91o8-z+1
z*t{-rFULe!M84EWx%wOgDvS-3+)cC=TF(|l5Cp$|@ZX}vJR4<yQPECTL+}3P@qfdv
z;|h@U_dn_o&X`TSN*LD-T)@wDNN_`dp%LF4rMky(p)*34nI*QQdL(>t?~=g+RjUM_
zA!iWGzlb5dfUHqqPpk3HH!ICJ!~R1Wi*)c5o&RUy5g{EI+n~<DXdRS!Vv~J&#@H&#
zib{_aB|#Xa5f`f2i?@RTA0S*O)Mmk=Zh_Kt@Ex<LqIFyS{*@Wxei<8$)hRr5w`InV
z3NNwuZeLTwB;s4W1c_O79Ust)7Ci@)3$c(*WEOUlVsiK@X8wpNnmS?u1R7}#M}xPh
z$u=nOZS`d9zAy)Y;H}#R@JOa-0Tu_%+vbDTg9i`V(Mxd#uoIy`9qH7SuH`Seme@!O
z>m0J#QVx@nPZ`(KZ&;+RXq5O8KEya;_=CUNXb>;u)AbO!6roPlXq<BVkH=6!cuEP`
ziqTYD)&^%|bW1JNHtWt@$k6AAO~hO~C;70X*aaH0kE9%?T}jIbgj+FQ--No2wqw}6
zE?$8<3gfkan}V{=U3o19$gE94QA-75Gy7saQX>qBLN^Xb43r6g+ND5K|8eW8=`R67
znN<ar*&88PLB|s7>&*b9V0(Leo=ul$nsgzPb*QUE0uN1(<8!~CizLPvjA^5>{JuHe
z@yhPufkJu*6}EtV_Ccj1I4^UJg9*SH#3$==_6rG2)&A06G-SJSmoc3lCsT$ec9<;`
zteB9fCbVdeNN#tjo*LeXAI5PqWLYytznd}{W(lHwoF-$Z>)oVMDwYmy8+c2K&}j@O
zuLYQksFtqIlS9>Wl~595SN(;6nn@D5>T%2C#QvvW8d}5DY6cx+PIEdd6-oY*oqZL=
zMv|dtIRdd<xMxuJ+Q;TT$6qpw54vuRx)=DXx(Qg{JiUGC+iW=J;1FXH9z2pYdc-?T
z?$5a+KEU)sVqgFTLb57HuVZ?*MGMfap&P+lU54cwIMu{H>Z7rVh`GB&BcrU6Q#u%N
z4nWY2TQ+f~gnW^_%h}m*u(wa6eF@(y=lOUTn+RG+z70^yk&A)Sb%j=<;+<1B&RN!=
z9gj~l=<Z|~TY5ySU2$x{Css%y!)YZ}SAfw`M3g57&v=-?rD5^Gxim10h{L|pqzI-p
zoK*zMB6vx`qru4n-oa>1M1ccM%f?hou7?Nka6NYX(WivyI#}v(P4GTD))&Q<n#0E$
zT@WH;h4~Ncp~z;~e)Dvyn?VU+;^VVwddJ)}kxuI5wiypbbIG_$h~5YSgvW1*%SYoI
z*HB|HEd7*}!Qrs7d@?SCg3OB&DwDVTpMx{^@KDc4Dxh)fNG9>1GuM?dG312rOOTM!
z&4%A2B4nJ;)9>{?u8xY&NuLF}j5TO8Bv#O)$|LfscWDkIS9=V01e(a+MMqM{lBl=v
z2>;@7WM4Is5jmAhCqkb9TtK705Ss)nY}IcIdmbbU@qV25Dg)}(&6{+J*MI}d=S*YH
zI=f6FEp@JIa9Ds1<x+K9oGPPG-bFjeS%furq7ftDiD0rx$OoA@w6M_}f7kLZia4a3
zqoq5VXK*@&edcX8o!VR>YK<)&YAGFp^l`K-k%^m~D2~xY>=Talf)2xex-koV@PW9`
zLBIlsZE*t54=+g)iHE@C^yglCdV`GI_PpSKF7uv3odt$VGs!nq3-z#?(uh9IXJ)Uh
zSUNY!c+|5xf?_Tfbf$t=2u@ztjDlLg5T{8^e8?s)<w67zXKfTAl!eclT>xYR{-856
z4~SPKc3US%kY&qOXnF!1poeU>p2oleolp7g00rwyDBOsmCC>C*%PQ0QV}<$PUAX|V
zfm&sB-X7kOIg`l}8@l2Na`>E&nbV9f(A-cgwAkTNeS(v+5FlVA>Lgc<@hB~w&P>S=
zcMc(71!Tm-E*uJ7d5uAB0eo2UyERQbV|S>YCl35K*gIadfLzZD&1MLWtV%Su(g~UF
zV1o<?X(7N9t~7Xed1T!L1>Wx=^S-Bfko4iW3|p+^<4*=04C~<rH=jq-_O`sy&+|FZ
z)TYrzXMEFTF4obQaYgD=D9?w`=y;F;y&92Q>n#`d#%x~Rl*BNN2<Pi0Sk$%V$Y4Dz
zZXijU5J867+@=49(1(Ts!iD7h#?h^!12*G!?7?_T^C|H@f;Wx&E%qVpo5Gi@oF!se
zt3Gu5OVkTUFPbD!&T(EoValADXo4ASyWLj&7v1uIC8A*-QcE&Y4yRAe10=1B2TLo=
zZw5@m6AY)SS`WTG-36^U+tO#5o!1kM4XBF7U@<t}V6qb8(!n#iNv~k`fgHT<Pj;5P
zzCDe~U3JW9ly#joq_f$5SAhIu_gq+3q8(;HYoIVX5(K>q2voH0vr4DaW~+RpER|<=
zjvN?bRoDuY`<7<r$ogN>0S<Tf(kU$WyIjmj4&?BPoXz2tOTY?n?wsXB=+P?2;V>;9
zb}jy9<<u@UD5rHzWA3Gz2HmWb+rs7Aw#tkoY%j<ixa53A1lK<d&a`kA`(6wyn>j=R
zQRzIoo8SomEIXv^0}@KerX~iOFs+EmRu)c_e@Vj?LRMnBn58M_qB!>J+}(PtNoXR>
z3|VTKloK|bait|8tL&njm2VIND{OXZ-!PM?j>F_O14w^WA^`NtRuD$WacaQ9x-?~a
z3B$s5th5lsCWb1l@rTPPvVq8^ZM)!~#dMg=(^|5SI_WA1+K56Kjl<AG8LhP>_jSrM
zp>mEl4hbBXbYjR7-Y{q5lb830x!TZmm^6!b5Gf!d7FNB*NO0+#3Q2M4CRYbADi%DF
zj3Hc;AxF|${Dp>V_~IG5EO_k_DKHXS70mQ_B>^xH1xHZ9U8>eX=>eN1vWa9z48!J1
zg0_j06UMG-N6#So#;|2Fpf#AgoJ6jLJTf3BjD=}vg}m>C>9-_?(t+E3VYo7GMB3Z!
zF8rnLwoyF%rZ&%AH_z-pU3wPY)9#L{4&!{7U1V0=O<I3t*MRuKxw7_Dm!Fb$%TJ+E
zVCTq^xw<It1@#KJ8t*w&oNFj)*m%<iM#~gI<lxiP5HI1Ln5eNtfke2BhhM!`g%kr7
z!zV2H01KBj9g{9l_+Ma`u?kcj)C}!_Bs#vyuq-fhiOZ!G(pYb))8n*MsEn(Gxo>cs
zJng9^DLjL*Q{hXS>qIE!o2X;a1*PgHUWPHm0?+PED#&LmgaXDy7H;8qv`d~`xyx-8
zf+%!}UH2j79J?KztEpMc!e4gj=*cTMohp$jC<vd2L8#o7Gl_DRdLErmHM7Eu*v|i<
z+JOvS%*v0tArD4HXs#v0PlPqEbp?>0q$bihn_Q%HG!0|eYGUnoY{>o1)uj)w1wEO=
zPz3TX09bDvnt8G+ea%u0Hsdv3BML3n7%E};D4`jc1c^(A@%u70A(c-8J5N@x9$Sf4
zaJ>>o#p1Y*mkmQ<4lZEQOe`*&PVkOG`?u+>o{g4E6|l&0W6YsqGvIgVmC%F`zU*V}
zOsX17JOgskxcJ{)P2pY~E7=*)_Kk^qN~G}M&XN&n^+UfhH<7PLX>c%3fD6}e1zz{#
zz-1CXUba9yTg){YS;P&8=vAYYv6Zm^_Wj`MpNOjNYlJH7@GU8P=w9QAbsOKLGVh=V
z`-UjjTcP?3ON+j-t^2g6<t5ay$?x7yijK1`o#^dS`CJ#K$%nX_M<hRB5?XTgY-QtC
zz!h0Brzc&81@IJcmIb4oI*cF3iy9INQNGAg2OAsv?=?>JqSOrTHfmuxZwKp?vePad
z8`hjj-eiPJwrAc3hbh*Q^7V*~p|`vheyhKjH0>=EJ*oemMn7IHU5B0Y>b7sa$ZM{v
zfp+y<C;O*ob#HNsd2JsBp45f%lxO3zUHo~pYFw{wN-wy##y7XU^(?#mXHGAwyw(5n
zZEu}U^6QHcf-x#{cyVhFPZ8r}LA*f^i`(9MLHqQoGBTd|`d8c>T8XC092T3mymhpw
zU**YS^(r?`Gun^I%$cBkjDw4|_WbJhW9C*HH1GKEqGfTb4$Oux+-a!Tz8&4a-w4EZ
z{>_0l+td;X$qUHP(fRicQ5JCZ*ZOC4-=tAkm}9xh1+a#*<YM00da(5%-rVZQjr;T_
zM3ikUu0TH-K8qWVU@Iop1pRtD`tfJFU`9^9e_eFBI%XGI-6)-PfeJoUuvvxU%sG4W
zBL5uL@aHTEn7u2XNimRYfWRbY%@*5TKP6dcBC&^q1g<GMp^H#uy+~;Bvt;HEA;3;N
zFWdY~KQKfdm#G*12?fvetk6_CiJIWXlDVfP{y1v6eh%}S51)bI^O+roL68y$zTnhl
zV6v#^j!b{{t#cd^sJ?W%s_^5@roE;jPx$=J;i|J=k3u3^wt+jW3f)>#JVgX1SFf>*
z;t|*rYpnI|B|G5PULw>HHmlKaZPn*n!2lTNGq6>tcjYiC<`C;dpRjb-Fq*mQ6=91f
zOifb+yR-X#E?8<vEMydA@wt-x01>Ml`CXunz;lF8TYHxJD>B8@3W7iCE(NG{NUG`T
zYaYz+UUZl-QfB%tORr0+ATl3_yZ9fGqJLOO0Kz%rS;~I!0JjWKGesEhfP_x;Ow{ff
zgvD7=@{2S742(^)<Qf8dn_X9o&B2fY`YrKTT&BNOBet#|e}c{O@tj&JfiCEGn1t2?
zZrZB&=~{vOZn$WnYr)44Nflv+$1qSuYl1`YWCR5=$rn@6ef1dVa8_8u%`0sFzh8`}
zT;&JR?iP5#P6hWE31KV^vJ-+o*-7Ukyv%Sp!*niUoupMSw8R<G09a39hlEDR42G3f
zy8LJK#TSw9l}0=$xTtM^saE*;TmqyTfYja2J>MNAP^{2!J?@ihxC>(KCRrIyQs{V!
zk~Qm`&qLD&^c+qJgPdP*NQPRtb#xq<YzAfk%gr*@PiZdMIL6!=_*II!rIp@Wkxqfa
zXbbwF)aWgMOO`N9F?QL~T*=(JJ+gG)%30ylI7fmCIhEin(SaDM+Zk@HIqKH#Vpik^
z?cLJ4Re;c(iOTP~@a90Q{EX!Og|?rHYnu}wR<1Yw|Nbbygm~~U-rS5yNRTD($Uj~8
zhFIm68j@TIVs*5qhFolew<=3n$OB0E8bib+8sfeb`4(p9aTF-{ra&a2lGVF3gpcRT
z8oS|Qq(%<27-5|GY;4>kOz@^IT+sd(hod*pG~68>#m+Q~ek7sCeRMlIVXUTain+w}
z$iGj2%aW1yW$7V08R&_hL;OVTYTuO+6Vu6euez^L$7!!ibJcx*aJb)#&g;<gSKz&V
z)eRo*x^CB0qhK~<l;$Q~uxLw_wdO@bY*7&-ma1@oEwtuSHaU^&cbn};j~}!j#C=kw
z+godmhQRUBYj7N0EG7eWqh^!!_uD#mO`hT8I-!&E8L59PVXd#VI~RG*NtbJ_=>CsC
z6Lm!vxd0ID^R?x<TKhhF5`}NNhQ+)}Q~j+@$@&^Sgj!wnPd}NhHJ2Z?s>|y?(nwL=
z>(SQF@&Z2%IF_7djP}fW_~vEsraata;y@ky=)F<F!9}#(f0jQa#HAIT_bz>Rdn-VB
z{Sr%EWQlAFQ@16Z3#KR+2qgx_MD0;cI?MQ5*6ZFU)yTfbiZMO}c}PAX_EGnxxR0u9
z`bc~oP!8~!aLwD<Vjn5Rf*;Vd5G*P|kjyYi3=x$DmMIVC#KDk7n=5O&>7z0Bf+g))
z<R0g4DV(jPh}7&htv1fFQj^?_F8Gd#jkqgNoDxtuc3e<X0XeW+ive(&VTb-XO!^|N
zoz9t$caCQO5kZtP8*<Ii?4tJ|+rt_UQCUK_5Y-QNR(?^5iLjSN4{<zk+=rx;&4bzp
zy9b@!J*y<gaOW-ncDRrfC4}|4Kxp-YXrK8-^gAro=mM@k5Ni)SF4N>RfXD|<Q=`1R
zBJq_x5Gv3@N$dH*Nd8&xOms>RgxaY#tOHr{=ZN1=zlXKOIXhw<&pFuy$4{|SymY!O
ze~|pk9`|&vM-YeoX~wCDkuhpR(d<u0*?e2rh|5WpufgW6plgzqAeh0B5DllT-jQRn
zLhu>iqVv@-?t!4J!2zJSJ60W5aiuj{NxB7P+9&249vrJef=|yGS!$3?F5t)?rkoUn
zd!Wc+u5t7ZZh1-U65a3p+$k`;z!-I56kuOgtnr@ddw%t_jUWPI=fHnLy`^P|wNx27
zG3aHj3obcC1Aab+U?jk}BB7O$aR+>jYlm`qh~CbN{iCzfHqj<gWiMLS*=$C!`e^%#
zK<DH+5olb5Fs2iUU4af>iTSU(OWMJA@lDq7cMo^o?Cnb*JY}F8^{cI+DZeZCzp33B
z4TX;&DN47NFC81^TytOAGIgEeEsd|}I48{|GWGn`Saat{W8`bjEp!snTBzz)Nx_q6
znE?4kb!KR&0xUEYs!$zUXfrTZYjqvV5lSR9`-Aj3FXRnJpbXQ%)21zI(ai|e5eq#r
z;ZR~!doJsgTW!3@-QtR4%Dd3$a##c|vw*GMgZVzrXK{al67eI3WN{uv+5)k@AItkO
zzu%-4?p)Bp-$sm7XTg6d;ad0G!YZXIX-K|fa8|s&p$kgyZ}g&a=)8G}#Pi-RHLOjR
zsgZRHg?tQY@wc1;;D`<hM|5?jL4$IJsORh)Xs#buy*hB&)>e1EC*BbybuQ2C*-cNT
zxl0qWVzRE;KxJO>9vahU^ek^XY_U4>c9i6B$U@Zfz;dZ!dSQYPu-;%>X_XF8u@;u8
zR@#iYP3J^|Ka3l4RE%J-q8dAPUIJn-K1rNxdR#Q>)ok7#vd;yva=~UCro>D%^Gt;@
zEmX^!T!0Xen{jg1i(KzTLB_~PI-UF6C@r+bvPWQ^tK@&eSatq6@;}=VT&o;rK6fQ4
z0>BAbeJ`AuS#i3U0Wr7G7~>mXKnT)+^CGHhE%josz@~X?OqCnddQeQcCBRgwYr7R{
za)<!S%xuvxgNDb6_8}oGQ*rIGsufhi(>c5@S&r{43Et?E2f4ArE5nqr9B8!5sh?AU
zXM+E|DPKCT$)LTnUA3A5IcKSV6j^qKNfq84A>m~#WpgmrHDF)*tmgw1jqwX_%7?qc
zI2&+DklS1$zh9cw91aeq#?`d_*>aozQ_*(g?~At2>xtW8Rh!-aEU(WIUn1P|+bQ?^
z^?S}J$AuH-SH60Ji&gn7<jqhjbl#EP^K3B*h)+*xCwSvb93l9$8GR9*)3g2_LIjE{
zx?uyiqUE4!$nq1QH@aj|_Rc|Cur<qPjbYkfTwV&6C<F0x8Y8s$Nj9CPzDk|1aR@8e
zMYJx5dmFJLZJ4oOy!utAgL0mhel1`5A}W7GMH03CIDkML&=5X@K;6<HO7z=cS%C){
z??iEY&7iZ$W{`L+9FU!;M-wE^)IFdvGVHxlUnV16h>M|ZWiam#H4-_G=GSQ=nW+lb
z<SPP+1J=w8G!8dc&WI+EPwU^Dz5c`g(bHD+4Q#;Ac24&JIrX$@xehAcN|2h!Ao?{f
zFj2DKx{vtg8@~emz$^&!+xq?QUUm6{_nXl_{Zn**l6ScV^Zi!!LG+}1aCC;MlZRdE
zlD+|ABU*FiI=8=m@ZiDyM)SAQ;pOkca(S1}m!A8?uZ!r#6?ksSiIv`#jHv(ms;la3
zICt<#mcIRACZHnq*qoV$l1l%dcl8(8)fJROl^#8(%VsE?&2Y?cd~UDa`x1lkyLX%I
zhhMfgtHL``axG)PVd%;XaBxz<XEa*r1FWO`)JhI=ckVI00r%*3A%b?h(UT|9{cach
zquafY(2Xd%cV`xYr%{cwhLd0%0VmmxdYa1?kE4sWCN4X6(E9)<ShdtTJ1dsCac(DC
zxXMM@Fe2TOn3R0bX<B^-M}U=MJj`!2GOd5)KS*xld{9)c7Cr{s6^EN7v$WAOb^x`S
z{{HUu$sbOScXszxQ(oc%(Ckoatmck+Z#?GTa?Q?GBRDiX_8(m0B|yX$Odpjnda(hz
zz}N<y*_<BK>-1a(iE?J1<O{9tslZhnH#uQrryn*O#v9B6TTz;^Gghrv0_`!;*l;TW
z8J%B?aHO{ET9a-=3%bf_!5FR5Xv|;gwWA$Z6Sh3-74Vjd_L>dbjc1IW#ev3%<<z+>
z45%E{5pvge%fSwzaSi1H5L8UHRzMYw7QU*BU$~#<9xDP8mZYWJ&FAUa&e?wVc<1b8
zk27sN=a<O{#RzuraRjT@8I&pkxZH{^YP@_SSg1*#e={3JPohxLS<FVi<=c4qly2%{
z?PAdvC*JzkEq8I0PA=)warCg+W|Q{%{my+lySRRVbnA(<)GmN&ye@zH*IH3{rP)S3
zP;JAV-i4mCen#%gYvm*QKf{<zB>3Qv*b<q}#@QqpvC#D9=-`h)V3>nH7j6@4eAF;+
zEOU@2tJpzg+w}?33=WE&Gwh-$lsHR*WWz<xxhn4*-(=-_TRt%3+R|N_?Bw`p^8mhM
z1i-=}{J<7#0a!KLfHo11m$^SoQ15Zl9%nF`<`;7{(Z>r(xS^(FiD~LEhGhm15En1C
zy9Q~~p;o(_O~D^1ZH&Qq2thAeyZcnG$qTg;>hC#*^dv+tS(Bw^wiN`jm*&~RcpTno
zIXltfMmW5U*Q6$HWyz!kt>4G3(EqoW7<zn3BmKg}6iqz%e4&jshkWfZCr(ipyTg^t
zX(ot^Ua>h<T#IFA2}4Sd_;xNt=;;W3YQM_>gH_BI!z^b?V!MjSDjg?_v1PJx2ch*h
z?X4w)vumZx1?BPCdom+Uks>B6PL|9C?6(Sl^XcZAfvGv$Wyv2=!Hw}XwlR_BE97)3
zcWB6N=a@ABa`7UF#aa&)#Z2LPCpYY0Oo~hZon`95!?duu;%P{E%0`<S%q~f^=Iko1
zE6-?mSPs@cY~`Pa)*29AP$G_ZBNn!Sc#$<t##-Bs)*iIC+7H%RxLTTqf^MF(y!>NB
zLcZ5<9^w_O9>2j?VGG99>2(rMXf6C5Ep&mKLR$XT;ChJ5zy8r}-{&k~{~Ww6a^gOR
zkwV(U3&YZ<^^u*~CHEG;5tS0h3I!hbXK(q!4*vV=A2Go{uYK>{XJWA7MKxRspIphP
zTK+}jR(QU|u*%Oku7&5yj7uK+IqVveT<{=hLmof~`S)f9`HTztY%%!{TF-v?<rT~M
zf3S6P0i`{<-=njjr|<Nf2hJCql)9i2w&Bix98<qf=g(%0XmGH%Uo;x~zN(Oy6PzJ<
z%ARQ-CK$d<tX_`Fi7yu30NZM?4?t+BQr<S5_xXKh^oZ=}kkpdER30;vj!TpmtHydY
zACK;BHXFv_Q1cR@$BJFjSXxFB3s<dT!<LSo30JOB5)Ptpu^d9xFXQdZYt7YgjOtAc
zf*bWovIM^FN4p%Ru8pp5V@1;p-$;AC-Yxi>uGHh`a>#YbAsA%Pv6wquZe4R^HR{#^
z^DT^@enYj_XSsUPqOT!^k`rFd>_xyhDOwys!<wM@%Y7SSHJXm;%!4#J%39IeMIUX*
zDM*Ah*1Z7Gfg20&Go9D6dr36`AgIq7VTe1f0CA&Ua6A7QC7d6J1t7>N)U=R;i4O*m
z6BR*eY>Q#7U6Pt>CeIaHa0$KhT(b6WDj!yvFZ>eQ4}nQ4Kb<V+HE9`cI+f5Ar&9C!
z%u|gV_ur5WHAEQQjBz!dpS*q*U0w}lC<R)dT)z#I8nA<A(H)+S)0AIOWjLH;Ul7M)
zryGrvH%C!2oyV6PBgZ++UwnZph9MoDx7+RS8;#vpd&K$eD{J4I@)qr@ULmN_0=sg&
zfXOf=&c=c6L`uz17`P3^^-_E2ep(l){V2ZS%YyJ2Poqvc9}shzciyHq(0dEMJs<@+
ziZ6=O!^jJ{{WgwMahx&ZyqsRrTOEHjMuCJjU2dZ`!%tB}e?~E})MQ5F9L4$a=YqHK
zB7Z#{T;&jz`q8;mb&2~oPd@bK_qX*FKf7BG+V6=$4xtF<9EZF{eWdC4y|Q?6V7|A9
z;TLeFjtX=>OVdnm{Q&OJpA^Nz80s~CB=fhM?FaD#{hMUFY<QV&*`)z7ye;?ea5m<@
z>Cg9X`x>ZY7ZCA+Iuxn9GEA^*+|L<pvKfB;YlB<6?7P;cq%Gz#b%ei}kfLFCl7bU&
zI8Q|e1$wbT#c<CWwbK0+g#I)FI>$CAP@55w-SScrwtjm>>%D-M5m{C^e$ZaMc}B_2
z^^CJ^c=s&c{qoJTc*o$xZq!rv4ZiJv+7l}-(=1Ml|Cl*4w0@q2NJu3WIA6zh<!fPD
zpJ|fkI(@Oe*uEJ9@9EA6CjqF*azjndco5J!cc5`rj2h-Sz>jfnRHBL^Ygi=%@t4RM
z5&il{5|$2L?Y!7m(eyjBN>$v2tJ>j@Z>#95eb|oL9oXGE^Sl#~l01`;Xus`5Yx{al
zPnI!i;I&!dl=C>oy*A6#9L;2S8~CQK7^9~Y7R0Da*4uNv>@A&}J0~w(H)T77U2Vvr
zWk*z5cnE))VNcM{uJWNu5%H23A?0?$6z4#LyStEKvYa7-=TZTZ1S78THF=j#B)+=b
zO)gn20^e{s7uW&TXw^4KhHTNQ6jD!BLP{nGJb_pU1f_6bmBFxwKw{>#U{}yKN1p*#
zsNe<#q3MUb-)=1TIIJ5*;wOqnIedSID80lHf@)G+`dq6b4Mq!;YAP7b{HF9BjzV{Z
z+C&nMUO5zz=*>a7HsEGS9PfI(k?tZZl`_zo)}iy$oS!y=8|J2(%d64B!gYEFM+ax!
z)7_JU<FlSi^ZmdYGHi-|Er3mS-<E|nsKR6j>=7x!i)mn}M013H##!*)&?M*LYB6V=
zX<ts=kUJzwAGpSesmJ0S=bB6JGUWTM%f<%fz5TjS6Jb#GghpN>C3Z-$-AJ-lRLSr)
z2?Nk)i7ovDb)WRlospzI0E1U5Y-xI!MiST;W%_#9+v*GG{-|>UOU%zb&N0*(eZeci
z!Re-g-$mss&GjNfwqg4^?N6J|pzW>K938@5gMbrFNejvyj;qt@bT$J03DAT$v{lA#
zkGEVtO*WUanB)QGx$o2*Drc^?ZCFzw&}PsR0e%(}IxPWv(P_{cyjALQGI-04i+zJe
z5V$`KaR+>V@eW<2=Vx=k9wg$CJ+DYD)f5K!Jw^zQSiI}FdFL7ooqPOGEVG1ymmX=0
zE6nl7gcjUK3a8HMoWfaE-iDT<JCkZNE_q)w>tU903lnJMT8u|@bL?=g9qd4mUyx{l
z&@KqRZps2<(U12o`H8sn#Lt1d!**wY{Z#i#FLD!N8T<MPN#8c$rsEPF2(NP;V=-nZ
zbHrslt;I6O=O{_Zu*^7PxEiHGlQnS|;>ldcpv*w~V-^o&5GHffVO6=OGapaAY&Jms
za&>8RzZoY#<g=&rZ#JQSJ9QHwl0nHU7F+)wwl_E18{1LumTx@lZf@2#+$*)Sb%%Dg
zR<y$zwLKzE?0Y4lUH~Z<$8!`LniGQ?C6^M~S=n`L8!InT07hJH8nE%gG``XIpGNkH
z=u>7QC`-VrXFFS9BDKgUPrG%O$99z_?_lxd{Jaucn-+bX!nDMAx0A(qdSf`U4#O+p
zKXM!;@A7QOX*a0;X2V57*cGx8s0XK434?27{h91oZc%d4^oY;P@|C0=O11ZaqK>!2
zvG^W9+C9&1u_>_t#>HVHJr~7lW}vL6RxltyNaL&;IV_nAm&WYY|Hpf@z!K&bhg118
zL^a3C6MI4EWd-9Hv&5IVP#|n^AZCbXK$13%9o;XY^J-^lG9_X1@e-7vx*|*UQ6Xf^
ztqcXzyL`9Dc4-kih#!ona|wTzBqPZHm%*?+czknwAd;14dzf}+7=0SyOjCTfIkmXB
z)Ft3=Y#bjPJ6EzF*~SJJ*mLq&D93%Qkr)%IT*ZR4EL`;?o4O~H9cweOHDfr8^Awpc
zTAG4aO-z|`tc(*$hV~@Jv+Mv5ZIam;!ug>9_~UBNbA!P_p6JHLEWJ$M8&BWZ;B(cs
zwtNN&GJdbiUr(NFwjV3_Nx6Ko3q+#D=pMe_-8t;;?H}(S?d>1!9_*j?>hqu1Sty`M
zm?oSRz{ZDi$!`~$cEB>=FIoj<nfh|qUKZeq6)gjPqU1l;6u(f+audg~SHc!=+ss15
z43?y$t0!S0V0gRq$Y#E%J2A440&Yn!>8Gzb2X;QoE>RXQkzH8XULt{8m&&ev@BQIo
z*K!82L|~K=NG=9n8U%?ke5wPI4zmdW)36xLGgzj|@2iY#@W~~X$TE>WM_chjqE$O6
zZ&7F7<9Yk=IV|)0IS%1_A8BZ`ZmqHy)>sQySqeQ^S~3s3bEiaV)Ps-q$QAaUYr;g|
zKp18PC$Y2o&x>>cTN5!Zpb&wot{Dv1WM(d^!{WRm=oBIj=!@*tah|p@Yd$cha3**=
zdc%lO@OR14;w4osoL0asmL(%SQh+));+nT5aC$B(&-LS?ahht~;69Wlh!%=X=OZuy
z7VNvPWlt~yngqSdviM@2Px3K>IK4ZNxA4-CWvp~mF-V^3JW$$+$N<VW)Y0yH`vhmu
zO3VO<kfu_b*JeglK1N*FJ$|EDxMSKL5R(>m%1jWo%rBDCngd!$OB5_-vsA*3UE$4w
z-rP+j9$aemZG9PG#j*W)G{7+!=M!QS>(r6W2M@+_jczto7A+A1{l3a)*<S#1IFgFG
zth{V{N2N_O%h!mv;)8~hT&D{z{yc^OGkA<>XE8vp8L#8afR`tTCT0Y64LMf<l=R2>
zHNe@miAvD;J3!kr&`>@zl%1^b*YHJ&@Iob4#D&SaN@+h2QSGUD;V9PP@5JnP1za-i
z3$MrwhPM%_+0wCtE5n85ym1z*5U!L{*1%xbt1%o*ppcD?XW-czqzLU8(Xq*H(H{ej
zfh}Qz)SzRM3P478{l(}lVB6F-$t~{EdS#OZ5jL9ry)-$)R5AInrQ=5X9W+WZ2b&hq
zaW1pWjh)a~@^MW=BqiK9TqT-_qSV-8LMQMrQ<KzumcSJ)vw*VhV<hAabO!cO+*|h$
zJ|wlVeQjSsf58mXVsZ&wC3zf%u@uHeEa!k{kw_PBI~pVn<O;ceLw;0^RQX`ApaW!Z
zgIA8z8IYFMx6a=U4UNT=lktQ_U~KE}3a<4m$XBQJ%u4ihVfl3K_l0fPJ`gdYaFs?K
za6*ZhMYNJg%a~~p!$pDvw9v!z_W{YNq0v*M0%H*|CyX&TDid;Mp(`g=y~uj@@BgR&
z54RjP7X9!4w`fO8XNQEoWF}|@wZM%|HXmSVPzRjP3QVk+$G0N6&J|r=k<K?>j9oY2
zBmk!9<^z0uD|!-bJqXV-m_O3%)TX>>1r{gS%Zq6{;^#s>)slb?GfZI>b#J~(-g5__
zuTF((r5(@%C&=*!#z3=%>5;LY#$x;@ru#=5jJX8Z!0R1ROY{6BT0cgLU3H$rRc%K9
zxZ)}5ZO}bUr~^PWFM|*@y~d9}=AL5_TAp4WYISlR#uhKZca^DMe~d3Z<WBIPTTSZq
z=41Lzt3nI%*e?j59qdk_h2`X;p?FrN=mxk6@=lm|@WmpSIY$P%5HA5L%ff;%4Q`^a
z6h+UTIEFc7GW=Y$P7L}j_7>bb43NYpo+3ihYHYTN4Lr}@!=IFpAehaW37q155R<Lz
zvCx9lb$2^g#+6@O#CWo?h2{X`sInK@+O<-`bo@>_Jk9?6E5o0Pk3vJTaG)`qkos$_
z9(W2%X&!BEM|@aB`)7v%Kf=PFc(%cduR@Ph(jF!mSGZ>&ke1tm7{<c~Hv27Kz+1zh
zw&=KA%$P?DM-EsZsBT-E2a!AgK|kbL-PRzzw&Sdw^1QZ4kABtKDm_`*{@d18N1uEW
zJ!)@7|Ng)HuQb_?>^3%(6Fm0YJF!F5jRw|LcoW}q{dJlMl6$Z&kjvVY8QubjA1MiZ
z23)88E8vgaI@3(8DYvQ57aeKbD8<RCJofVRKlZZ^Dgj&~EJB-pYA}nz-UmZ`(D@P*
zvf2LfE4Q=h*}7TeXJ~yM)AL`qAG-Y-GvMFmgQE0Vh+DHfA8*qnZ$1cTxim=+x1;Z5
zkGU;cOtZHj*QMz>lGIAxuUi2h(oL#+mQIPUgPXj5TseMI=Yb~;a}l%$a-yMaf)ly@
zHI^BG3~k$Zo7&drzOH!=U3Nt^&}GPwiQms+cBSW^Jmf`sviYFV@EbgQ5-D5sCypL5
zstJdtvz{vfh;&?Nu^&9gE<%3N$s-Z1z*MtyiNpT4wz7r{WsYy8MKuM77Bh|c8#7yT
z0-S1ceB?RFQaG;|w@A8x2rXPus{@<0r)-k@_`pqxM#(N1S!zz}d0Bv2?i2{^impg7
zil;U#S@Ar8LoiBx*p3cUU_a1VUwNMOP$(D*z;4_;I0(z0ds<zFH7b3(SDMFd+A2$(
zXhi~ajxslyaA+||Q<q32<KrNdz<a~=B3X>))u#QP@+}6%dQ+gM)7v!GmA!ko+ybzY
zrKBNIRx-Movs_&|kX^SO5lF^oe<XN?{hO*D(N<8`2@pOk6oE*VMH*^-27qRhcD;|2
z)xaTC`U}w(r51Jy8ISkcKl6@I=^wjIKLM1k<c7N9^i-l3{;2FB7E?g9qLjRL+lAqm
zm=V*WlGaqrr2w(tQ0q^>di>v-bnEhxGo7_Mre}ptDd6#OV=qz`@+4S+H>fd=%N$2P
zjO;u^!NFez2g80G-b|7)@kh5KTkfeP)=?)Hl$6MAlm<CY06sz*SM*a9FfJ!<DjcTP
z1Bvv%sO6CPLHrcCN+RqRXZGAFiT3hNAi4bHIcoJ$aM$)@sWSn-7IUPJnm2!nX!?WY
z$jvvL2xQ_@@Yb&TifaRY0oTMKyO3B~EHwss?eRa_Y0hu&lJ3QP^{41d6g+qk2<D=^
z+nhs8o#Q1|mBQ6XMwi%qS7QmO*IgP2OIG`Vl`|HekDQ8E8eOJ`fD^BS&I@uFmtNX@
zOqB6>EQW)J55``phE2yt1Z>G%vX=pt&0O_rmT)<FrbhjQ*pbwV=51bFpeCCHJei(g
z22u#Rq`o)G#+jOCRDZ>DODZc!Ak<cwJhcb>0@05&h(#GsArb*7zo-(YBhk|_q_>}<
z%@@z;zYmC{cHhVii<kc?+TwegcIObbU%K#Au5aP`x{IL_5q~O16uvi0FR7go$cdIJ
z5nF+by9r8wptDO-oXfkD2?%FKvh=S@Q|+cuJYHkfCG{@i!02Gi-etpuFkuf>0N)N5
z1?NNBNnpY)Po;t;z*E2#ik6cxQ8JQOMhy4hS(`ED0IsB)sWOpbVF>`-+#c#2d1<!A
zdIZRo8L`1GJ$mu%AIl}oxjxdne6$#+&Qi(&4$fe?u^|h=Uas&9uMQ(FaE6dQ)r`cT
z@io4J?JI4>Ab7g<E)9=T=zIy!SNeW{QzURQ-!Dq5(h_i6t#T+J4hrC)4Z>{3o`beK
zbkMRkvM4w-2$i19j9Fe{^((>O`ug>&XdOHb%B9i{7eq0ALh1fpQR3f_mWRX~FD~S8
zm<Is;ygT}f;bj_B5E+0FQ{!7o6YMM~c&9i4o%F&KHg$v%z#luxim^;CNUykp?}_c-
zXy7@UO-8(4%PrI{iHK)hjy8eos-OBV{Use%EDw)pqdAZjcih3X2}b#Kx%1IFc00s-
zAU|H_xg<EVh$bXwq^<*a<g;g76I($O{ba<xkjil!)BZ1wIa+^I_u-|n(;i{ox(l2S
z<hhNrzvv0C%&wn_yC@4-sgRSXk*Ysng)e8x1U6QZ?07l7M93fC>})=;0K8N!^=v2i
zw33igZ&YQ~YT1dvPg9ds^#wi?C_CWDp&^407Tt{JOCs+I;Bf>e=#zG2ha$gQxxo4=
z^(tdmM^==`0y%86x25EA){7Kf+S0wbknq|OQt@WF)O$I1so*8=^5)lFyWu>?Vc&{e
zD(ndWv2Mux8g!(o)UpZn^b34(>0rT1M^@w`UHOl7%V`tcpoySiF3zDAo8SrOu+tdq
z!uw_+E6?}{TY68VgB&g#85r^3S>myT*`hwp=i+x8p_(8{sKN`D!>M+8c_X+(F8WhL
z9~f$J0C7dg(SLEAqP8aSoFa&C3o(nG$O{jls1~o^A=)*)4$<JQKQTqn{Ev(xYe*C_
zhybX?;1UGc$)+fXTC%A$&ks9-M(X1T=dcyP5`gJRgt1#3KQRnEkzQt;D9U!n<Ac5E
z$RUy**pnL@#DmOe=cI<==Pm-FgXXM~VOHQipOUJtwoINY%FMGVM$V(t-|rk8MyJ%V
ze*T_Koz!ct&dcX2u*Bz>%T}pKM=&4jk|&&un$YVvHqLhd{~X<#8oKp$mqDUy_zi#m
zI~RB@83qz&z%mQ#HWGiv*3B`Ap97HuEXRUGtHvYlN*KNT(Im({IRu<C;#9?eqLJFp
z@~g*ZSWpX|TDuQ&G0TgE@>gvrI=>w^wK6!7{jYAqEy+H1^^{;*#JBFBXbE=GxeL0J
z0c&*k60#>4CNgGVj+B5t>MAFemiLa*uB3M|lm`h@L*X@AA3!lBKC!e#lX`Fhx9}|)
zHQF`j)TdY2Uwpw~4VY5N$~cEev7#Rjx@?aOW}p<0YZx~?dOs;zW_mH_%1sg@z^byv
zzQ9Ne!{%aw6o6UAI=C*Yp=qfV38yn8?!|<UB<T1O_~I~3IVgxuFz(iYgCKL~%27Vg
z1}UU7IF&qcaKP)*?k5@!tCdF25dWlmo{K#Y>+)dA0ja@G(NBZgiB9Ab2OP*Rpt}%-
zPlH39AyQNgm#R`vT#^-2v-)ie^|=I+3<Z21ip(g#VGdm?i9uqBhG>pbc$5)H5uRws
zb)p$rFOQnqmKkY&;FuK{8Y%e}SZQ`kiA3M8-wO&lm!SuWrUQE^VWq$rT)z;adVI$P
zDvDJP{ZpfXJL`7V9PBk~7gdmR5GLf9lC44+P@BCOAaRLjIV3svJ;E`2iwWCjgB(I4
zkgpj0Z-j^NGloo2;IGY&KHuJCw1rYWg4D+mYmJM_VO~U&Ea8?lyhw8WdsBqqE#@TK
zDdz}Ys1O#{9P8j>=hxG0*rCfkx3`1W>RC_qZGEb?1=f?T&?o7QOD|sxd$yi8yp}6i
zd-<NEBC%lxu<kT`!+7$G#+IvO0vEQ$4%bd!%jTR7Viv?*tAO9OAvv}VdyNC?R#7eq
zWV#_&JR*BnGY3tWI@LOGb>F7FYlbQpj}=9cMeos{`$s#^4)?onj!s|hoa}e$!%t}U
zrutMvWS)KL6>{uo$xw&@kvqaF&zBQjMHA`50M&&7Dm*{dt%j=8+m!JlS78i&1hVTu
z@)erf+7B)d8?8uV4f?eml{&w%;m!m02bU;__S443$`e4UF2GK>G(4>!>Y#wRnhf)=
zxnO2CCG41w1a}@RCi;v<vAEagZq>87i{_uFQ&fxsW`y1ybE(_|%X+QJQ*P0QQlZ^q
zcA#AhETF6W{Q$XzXSZf*Yx0Z%*4l2jRdjG;pi2$D_onid03!yst1DG5N_;Q+CN8y*
z74%j>*RtMmw6}A%!)P-=qWkra;m@D-kyo$x1YC{;6S)Fdnf;UQi<8%Hj-TjSEBtJ{
zY8$NT6;s#F#hf!;^^S{j`Kak!nvr`Xuw3h!5C0a!Up@G8S6q;A;M~^GH9qe+dzV#!
zBXCs*eUy8sL$<{YUZ3(yq*ae%J_Id}+VnqB^Epu8&QD*xcTvcGDrH_Yxy9op{uD<p
z;)u4gCeGY}@o;l*pc*(XTyS%*RLs*!L95i{BqgT6P7=*5B^h-vAL*?&q5!RDT__xr
zqB|Iotko0r=zf+=I&b>ag+)`1?`0?2J;9Eb?s^V}p3(|D3sl!Ki!(q41kK^uAg{|7
z`{4BT;m+B?>!a@T!<`qWPuAj?RU(>`WE#)%d~Uz#K&Jm*KtvBGY^_npY6Ui^SKnAq
zr>}^@nGsdY&v(l**s6=ei6N??_p1A+=NEcoL&YY<)w+!KdG53MCpuRsMuzr9a}o16
zvZs;X1<8)Tiga7?oUa;Htic0CWhfHXj3Pl6u*~<N`qIl*;WnE~+kT$I7F|cnqJb8(
z#^So_<kavbSAA_tgW>!U1>;w-df@JaE~@9fpV=nX8yF89rz)!?9p;(Jg1%e}%0HtO
z^VoXrXjk&sDtH2XTv}?XZx9KtD|D`T9;wDSlWbZ$KJ^2-KP&}Eq7`5PE*tKuTjQQo
ztTxpYks%!EZ3=2&$&u`{RTI|ye7lT((C61+Fg=?sSeytc-^@OxSJo%_(h^EkW3zEj
zL0AsG)zr~Ktf6B-({<T(kmJfa1wZ_YM##h2@mW;coW)q(JnNq{y&vLMP9L?Hn8<3=
z+OZ&;O8EIQmjPY&QD@k!+U@A|M6y=#L}i6^|6G_;3wlRdD^%A7-`gj|b(UXTxUA2!
zY?5(T5KV+CjT$wo&=0FN4hO}^0mk1zD_LN+4otgzgq-7vS{R(SGtLs~-~rBy!zVY5
zrE%_teZMWeb?Ge@xuadDQNRts{!%IOpm96Qb6>xH6{|nf6QS0XP2V%f0)21u;aAc6
z=GNEIKSrkqFaB_Fc-RbUgeK!Y@f(IKXFnyi`!A>ong(q`n0H+y-aF-p`BUzriTX3E
zOe$R#E9T$|NIu@$);QByRhBk1t-_TCaC2Nv=;d0h`Y!0CZdESe2Y2=1%_e7DfTm+z
z%X^w#Ea|iPGjMoNw`3sf$aQnbKpXWOlRJe3yBaa#?BM8tVY{Dn<Ru3pgtxrx_?*T9
z7f3(7O5SBiR-w`MRtTUy&KFh@5Yw@k1XwXM#@{C~VPhjudD!_qO(xj@RxOSPT1-iF
z)A^7>tF#zQ0i?PYg~QuxEO#TUeQW*T>f#sNO1rU-X149#cJ$iZ_5#cSz;dLoG@kPr
z6MZb(hmTFtA!!@@`@j9aqg@s<vx};*B=9P-r?;c~ca%TxbDOXg3JGqTxLic{t1Rz+
zw4@9(=P4aIEIV79e^~VKeVVV%%XBpUVB^N-cCBdX%GS?Fj`RKiVbri4tvC;$L%}41
zqlELY%B`aALNG&3{zU0m!qK2MU}Y!#%$^tz=-46>si9%orA2B7ju)4Rra(UNMZ&s-
zYy`zV8lY^d2u&+@1#<|ZIQl4W0{Td_9-LeyEFJ{|(&{dX?pd-$Te%p8(l^bG!|d!@
z^?yG_r%u27iA9Mb`ndmT^i%EsqTp7v`mtO7Cs9$XTdtRBw#mK!_y6br9Q{f9{F5h3
zvDK92(pnc`Gi<-l;l#vOMol+6_3bZfytht|9t(SE@phh1qjmmXP5<GuV~I>U1e_^E
zf12a0DqyT^U$yim+W&w2Z~wpl@Bf7sR>#BP6qnvSy5wlwduG<rTZh2fzYd}D2`>7w
zY7_M|j)&fMJ<v~hE)#Vk@R{fXtFUBosbM{C2pruS4jiyzV*GO8Y>4&^MJv&E&P((4
z(O%tl`Liqp?McC21{A4x@Up|qJiMvLfpLO^RD=*_6MBC+XO^W6Sw+`w=(q%z;-PD&
z?(<^}XR|R4DQ57qP{V>N%e%MAP9jUWwdq`e0|TDOv+yUwaH+VCX&H&9&lVi;7}lfF
zci3zmJiO#kj{d@BiyUPyO|AQ~U=(NK#g{M?$d^t|@259;eKbpHQGIk67p5P|daV-L
zo!5=`0&yamPnf`B&a9Al5`Ca>!3kw|nB4xSM&n%msuk%k^Zas@b|%FSbVxN>FQ|>L
z$w#uTFZg*)8CT<-M(O#e2>&LV(SC0VCKIChRhAvanpi(YYz`!DKDHTXWqu`bd`G%=
zPFp8Yi9hjLgDjTSc1?HD-~owr;#YQ$-?Y@5(<+4{$ul)ZK|dI-(OF~A(mcQ*dS1Lz
z^ep5*Tc32|*M|cmXpv0fSm~!|bFy?0g`=QCVnSi%ix*Kq#%>rsWs*k<HLo~ufw89Q
zsFDtZeyJt;YO#2{%Ka253VR2q%-W@evS`G^pI1Jzjf|^c=U&v%l5MoomMN+{LMg)$
zf|45(uZB~)uguD1VYmR%dO#aZdEx#nb()uFJOk6=xw+~tl?m2atYk{)RVNT;9Dg*Q
z<rc+TmP;ha!a1K^861argSfJiL8EMM<1K1PHKkjhhIb2PG@T6ngF@}fM^IZpE8jhA
zYt?fE4&<0jt|#+1>H`<6S?a(uBGJE52N+g=sRP)^wuIV|;$ylnpQY(ty1)Pz@CQ_k
zuS#iE`fmxxji!0Vp(9JYRQRNM1NHcGkVR}8*3pQDI_{@Kv4yA?-ElABQBc~oqP>8L
zFn`b!S$D{~N#V*OnE$d+#38@|qtKl$rO-=0dsd%WJueE4G;(JW&>cBjLAF?+OW9rJ
z7~Vp9yW8GHk7#udJytpzI1t7o!qm!<F6sz6Q3j)o{MyB_RXpA$Cy+jTo0FuU4icCu
zv$+d$S#rOK6^{AXVlqw&<j6^MM$aGFjLX69ICty?3W&-BZD7$Ld&o!i<Gid4s;-+i
z8l%Nbw%oyXkZ8Li@<IuuS9kdIqJRIl|85H>Jt;l<=5+r=tx$MS58$eCnkSFhchDE4
zVD_^S$%g<W<hXMVh*XL-7jZ@DfOnURcQ`lZJ|oSbc^B6ZHZAU8WXf(6135hWo_~{I
zY7pIVbo!^$?#|w;gCpl*myvQTL`U{^XhfQr4}fo#nmO4&ef{QScVC)OuXdE@<8Hx9
zO)~r;j0Usdd>pbcFtYJ>=3Cr9JKo(n4qX4%vFU6uAFUssbm<ZLzuh+{`_B%}P9?0~
z4PP>Z0eDDF(nNx1kQO3UXVD<aAZ@eTp19A1J?W%j?4S_C?a#4H@<tq1rP=10m5J^N
zoZPi2-WRS)n6STTPU7l~6=LC_4n*lxZ1_wH;E%k0Jg>k88Ns+l=l>hxC&=s-WJi$U
z3U`Ft^Xz40uc8aT%(<CO;0Od}c|6^c%;?0t9CfsB&w9gqNq&vi(fEUAu)|%MGo<Vw
zLc&JONq#gd+jTo#EOUjcQ_Bn_>LZ~S#{yK)8TjWq^LX|~SxhtXXoe{QUFb)ZQ!(I%
z5(xiIlgZ^cnk)_{Jh&*Ooi<IQ%M4wpenA0LYNrP~#sX7AYH3wk=0%=CQmc;9_^f1b
z7baUHY*d9z%%3D5(*j~vRH{_PbG<|*vQLs|3<P0R`j{Yhl!$?~eg-qFPOeoT_F<1S
zSHwb5oviUw^qe>xO!iAAKs}E2S2?C1M!`w?L0ezhx>vRJm40(8bqb|3^*qPAspaSY
z^?x?Y(((l~bhPBlwFkv4<+R5;wDoG~7+<zOE&Z%($ih+IWksf3&cFFGBf)91{L>ox
zHsi{n+|Yh-7zW+?_#RcX<XY3(9p;-w8BbqV8S#PH;Oa)*lr=dc5_(*z4^VYWS{(?%
z(=${A2B)*&NTE@LFcX_DX~UHyoq8Fe83rU_Tg=ic&4}~ngsr8N7X998zm_<8#h>K*
zQTo`j?TB+lu&Zn|T20zKx!Cq$Q%8Adc&fzb+##YJecRZ8O^_2c7}bnkPxD2AI4|}>
zcoRi=HnmTjjw&!$G;;%35;Yp;7SFVOQMl6c9OPFuXdP&dn_3!G;fU6Iq^tY%vYu!=
zQRQk>O`S74Tp{)AdqO8&|Iyx(bt34IFkFXPhibf<8fG=gEBV$OY@E(iF{@HuJqT?(
zNH_}J_iR_%*bq`6!dMz=aoeaiHgbMxwR~(uhNFAt!tz+(Yli?ZnU>Z#Klr4yM4Caf
zMpFx=OueLFn@YU_{qa}bvN5@v6kJ#~Z2V6<uMU@L#4_XgxY_D!<rXv42pg$-=@HVG
zxIzGqF3R}zLH&3j`Hq5(<k6%pIa-Mn_MoeTj&qU>Z2QVb<*4Aw1lP$8^Nzk``-eWj
z#k4|)Rl;janIvb1kc2|S<*$pGs1=l??L1r1Zy0V`(F^)NSWsG|t`?+!?%r!fzo)*n
zqMeDBvp#-#jJy4tCQJ-d$vKqiR<vyap-duR5Y8B<l9+N<1S`;0qF-<J1d+l#m$a8G
zu~r_A*q0$3<;Qz^G4>aK_8|@>1u)#zyo}hUnjH4Q+^~L9WMQr1o;KDCdZPh}qB!{4
z4dKK_>(3SfWQfUaih+ggQ<^f=7IU!{Q`A!9@~Y-L6dK%E9+ViO>EI|zoWzGB4I=>u
z<~X`D->Roo4WbyJ^0-D&_+zzhBY4|MJBY8-4m284>5iwQegtJ^yXGqAiY2jeFLF(h
zOw956>yk5Iu|aE2oYtxKZOn^Cr{fz4%DV>CLp>YimzM%bZjFf_bzLoLoQ^H%3|5+k
zUMX}A>!_gK?{lu$68^arUc<*<cID9$3srBJ<&}x+7iiSQ+~wL7M6!ZcEfZ{`m!mdJ
z(JGq<b)T&`v)6<4EwgWF;#u=fNi7VPuN704^BQgss;|lYsEL?gmF40b5I5FIa3#eK
zgxKt{D*`_#pLG4yrv!<8UhyG>k=;34&xI%_9-zvZ5-wEtx>%Xc*Dkpff~~!7@GI6>
z)6ZjNhT>?ocjiOVZ{&;rTzoJG+Mx=BfC3yvITh4L#LaC68AqX~hw()HB(Ur4;11b5
z;t|n=N0*MH%dO&#PM^jaFMU<!TX7_O7ew+$Y()7jI(QXXk2|>oxM97}`jDwuEHSq#
z4$IaP(G47sMc^hbJEpihVK9@&zGuG`6SjXv6KpXpD_wAsH|{=N3VM*tcrJ-&uK&<4
z&&k)nG)_XKDuJ`OB``vvs(fg~QUt_fjN=TnD2c2kfAzQN3|MX@Jq3MXWXl_0a$1=M
z_`j4k3P2EOCl?lQSTw#g()nfhg50}POHTDm=fMwicv?Oev<XwEW^9+z==0fUOXL3v
zGxLWuooc3cp|xg*Jl1^<3bv#h)}wt?6;xKieCGndU$@!O&yLWl!$+_Rz>i3W$|c%W
zksqy|oTl1&|GKF*8sIa_M`|+<+O410%`dzBG-vY%Plp-(V2Wq7zBm=G@_g>2H`J7l
zXjewpgfuU+x%Q#J(={A#yKwbri2G8|sN<O$o~$vWY_rzbQ$~#R*%5b%L2cYI0u>nm
z#_KP9Uwq6zjLc1IEx!I>gHJZmB%=#p5|Rl>ZCxb{E_5tyu?x1T66l8;U5lPRU3%Sz
zHSbxuS+%Wh2P<QC9tjz~<4T>aNPYTnZccUOqWa|Bs5Z6rZy;+0fwkz}K`AE!2STNz
zu6ROqIt(5`!hhFC0--=cMcTZ57$4DRxw|UO<POo?z8vnhLxCs{M1g+C$&LDwgGzz7
zB;Kgpw-jR?Qd{whNa`a9X_^l?s%ZOG=jIamNER*du09w;WMZp`tKd1?HH*gU#n7MI
z(S439_t^X#8d}1^07gK$zp$@z<RNtq%%5KlbF%Bwb5?a#*Tk}29i|zyW8>SUC0R;H
z=Lp^yvdPly-yuG>^5M2CkWd8b`<exMj!?>Jo~njYW<LiL51QzaRw^QmFOF9|D}Xdp
z3m@nL=}x5li7yF(qf(P2H71KI8&(t(F9fqQFrQSW5HlyE-udn{+W*6;jQLqUpO4ZR
z*xfwZd38`4YxO4RqKJCf%5Bo2_#o)|Q|`%wUI{Epymt<nV?}&GRDwOIs0%b48DD88
z3!X}Wc%V^8pm7oiP}Enr0s`&3DX9uO<K!>7g@bQB*m?-@tb8#{iz-b3y2oM<CT{|Y
z7n!rIP!O8)P#%J#Pd&ij2opNa!lYc@fV#id#nKc>ZCJI0$NZ&c+tr8X&_vKl;Wgqg
zZNao2wLzE0p#tL6fPxDLYHno|N6BJ>NlnMokqegQ<zx7ru#``)h7Nj$O+jrjHpRIM
zds1;iBn6JjSX)I+YtfTv?aRlHAAY%Js1@`NP;<_Wf~)<cQ+vV1Ov+(uQtbAc{*M=$
zgT>OfMF;N`^A5gyxgZ^_Bkjf3UZF@c5>$-rsKU%ak`!9{9tREnB9O2EBFv#w7*ZHV
z!u=vJv^ztgN!Xz&Mc@4rrO1CWVN`d?2XwV;tfD-9@Dz}|FQu&cZ6GOewC4`0B?Qm&
z(7XGs*^xdS4lm{?Vh7P0#+V9Foy-->iu{$Yx*|B18`(A4Hx~F$XAQ;M&MS2KF<zm#
z>gQXUiW8@T9e)NDEOH2D8V<?yxIhhWBH2~#KI$fTqzk3L+89Z>8uKIe0kuL*M;S(C
zdr6LpQwDh>DQhshnabX-``*I`U029lf#GP4?VWN5v`K%Pi?ODtwBm6+6(#x;;5?Ob
z1;taFaq2PvqN~>&7!kmjDo|k}r3or75d$#|wGSEP-4m*7if=>|u3b$;WM_?FtU5Kl
z%?&cz?aZS2&45Y`#{-n1kZ+(%=X^d5=-isqx31_%%s-k^kpbHgpYZ~ByHTnw3iHSL
zQmJhZeqyUhbT{a1e$~B}%d4y`;9O3j`-k(>0L<GyLM{450Bf?f;!2@)Z=g)*Q!Dbw
z8PQQu^O(1EQ1{Qd;wPT)OVAGRN=crhCL+e^cdEogrt*BEi0HHxqGM{|68DS|o9LuU
zbD?52;=I^e#vQcJv;sS`p?fi;JnAW*g>l3_zR7~~Ilqh3p2Tk>;v;fOnD-l8Z^@fV
zQpmwvUMsW)>J{5ZfrvbGTENcn0Y5kqSnk}w3k@U8A3A{4Mq;NV;-v3EwnUPPK6PVs
zBg)=Pixb;txM{$Su%$p@ze-lj5)@hCs><JOQcN_jn-pqT^7Exo3Rj(TXvWREkJ<IU
zrq{A4>L`P!pZ@P*WZ<Y(3UXsPJUtFUT!2wM8f67X#Hq{i{1vq@$bl0d?X#oS^U`6u
z?7MA;?VrDra3loR)wAHQx?}%{Yo-~kpYM+H#W4DUm^g`?q&gNUb4J}?&`!QzC-pr;
zwUlNv90m!RTI_F-kBAC$i&VhgfpRfp(@6gQCR!gP!{H6r;RN4uwkKwVev>w%YKXl|
zc#CI{A!+<5d{s{dEoG+aI4W1|)y6EWl!#|ER3B$GD;%!IbB<yUxVF?=MK7}V!P;t-
zNKAmLF%HBcIy*civ6oJ2D~74xwip`2INs&?P_VPMNUyRI`p7JH(iqFYS|`ZEYl~gm
zo*9(hEvoe$VwTNY(Tm;VR<!dMI=pC@Bzeb|gK3=LcRWeq`=kfo^fPXao>=IgeEm6X
z(k!Q|7o(d@Qb1m&^S^LB=yN)<xGLpdcA25#*y}->Oj=Og*dE4}L9UaVR`e|`AiePV
z+m|gsu<^OYjl>tyMm&@z;v7xDN=_}rg*Fhs!~1dm?ka9tWjS%8O!E3#j4d`vEgi{i
zr*nt1(u$5!M(_?7*T+ZP@xUD?lLXe6bAR%BrRS|bjkCN%eCgR@u6QUAvbb;!3llB5
za^p&XS7??KFRC=#EXfsuo9~WBc0KSe;lsmQGL(xJ4ri<k#;1E`wiqcP(~CF~HiJS!
z(dIj=hPxSWMK7M=$&;N|?Fw0I+KWvQSEW(pfA>97w)YR8VO{Xwox^8Mg`<*p9JgLS
z*`w8y_D}!$kRDykhzYg)!A+CF>q^sHT2h~(!4uneu!GBh5s9M!gx<VoOYq3|p??zu
z1i|_fAlvoKL2=$DmFD|%m*0e6!gKf}H|9|b8vf~OQc2_yZ#Xd}SVAOt1KPUGn5WK)
zHa;7Y^vsWRnyu)ZHj1Ba{}S_vwj|;5YsH^Ocw8BcYa2h?;|$@3`Ndq+{YktiWO>iA
z_59P|N9}n!xau_Z6c~kB-fgQHyo#1^P$31(g=vHmBJ*M#5srNfP_}&%93{GR17*|$
zg9WeKiQc#tef?mG*7CZ8fy;6gMLx&`*IXk>7{Ak0j@p3%v}s@rfgguyMndf{1ThjD
z3Bq*1wV5v&KPT#e5_^c?5UDPkTkyS4`9b|vM(P#>9<!Z%Vl}x^83C5ekhDU*2_Rmj
zem(Ai*^72ualJZ=u8x05XK{-oV7WX&E*+1~PfuUNmz_;Y%F9-lZ+G)#F~3^!4l|ub
zJ9{ll4EGu?&CQE!{&LZWuWy!;PM>g5=<V%ol0(E~yL-wZLxB^-I5zLF<AcHqbB0PK
zy%waMwL}}aMhS0{48_WSks}|6D_+$C7gLLEb};n5dwFoSe|T_u*4;n)_7ny>`gC{y
zkNdlC*!e?OTe!0O`si%u;AsD(yL+;~w|{hYuycq!Dfo!K1;HHfV|)A0citSH(Tx}M
zHeZrI*LntKeJ?UOfi|N4<?CIb_DP&NbG#990DQp)5M|SU9&y^`jfBn<p{1HqIm^e8
zM>Xa{kgOQL%wjVT-zqLBOP#(<IdlbLV$8PS;G2O|$wa;*Dv^9QpAs)pxBfiO5j>Zu
z#&2*5U=LI907)LL$XqH>h?r!sqe$ZfqtgnxzgS)hSh_@HDqcojq`?szNGw%1Z&9&I
zRHRIv3b@B+IaWsPs?vy76XkstQnJ&wYwai0*vJ)uOSGQOw&klixh%BcNdNeJ(4&FH
z<>0`<PdOCisUXcl0~JLYOYQ7_D3L(hjrH?79OB??F5ms0j<Ftp9q)(F4ea9g(#NF!
zl+OZj%#hI=4IR)qH}XB#{^E-Dq0S_+*8<k424Sn(N_5T&z8my9A7)=ac<`X<6n&^n
z>spQonk6i~I05HPC+)~<4<9_(Y%Xb6OV4bPKyffv%aQh|h|WkPux{lOIaIeEqlcBw
zZ9U$4EGGMNq>YWNNTAwPNu0seu3at3F;1Sl%16TwSzTl%3qIbE7k48MjX3en9*Z$M
zj$Mg%UDC_jsB`pIj~7F`E5sq1N<EEN$zVI`fp0{eovGL%*gUI7uw**zsg|B!7xbt^
z!3crj4m-AReKE{6atI+K<;NPlo;TC9awI4*SvmN@Vm5MS&{=ZbmIQqGPzG$8nctR+
z&uREIu;FoD6LIl5zU8(QKH+|Rj+U_r(J20HG=?Qh10t<r&6j<VgGkTuG5S_uF|1x`
zMs%dS%d^q{{=e}tHE{{y=PYRWYF^o_kXolulJSGfQOEq0DV*%jt5GDh3~)JMG&K5N
z-=dPnH7aQ-y>&@sWi7Fv`FdSU+}?riYS6hJv{}dzDXVS(C7^$nK|@u@#A#j~UUw&-
zvmCh8Tqy*Wd5*<Cc(rxd_nIp;_rS|#uT<br#zERj)L{$3f>c#@m|6jzgNd5%wd8Wi
z`sB1ce#No{!d88Q>;B9Zd2-KQX7{;!h0P5mrImz4Qe-=(ymGmFnN7wQ))>E1$0Ux=
zMFwlkuO~ugA??zk$QDi4)Yy#RmWzlr-WC<s#UCZ~&!op6WBr2P9!9<I4$fXi&;E40
zb9#Dmc-m7y4TePuCM1YYOroBDoZD+#6jcHET*<4Mr_+{Zp=F3#Ct2arkYhNI5VDT4
zJMPn3xu<L1beq1XqfYku$ztLf_30s;6tb}qgvy}BjSV?<IWGy7tHpXPgOE92XL2=B
z>prRy)2C&Q7@eVg*^YYM*|6W`sn9v3F?jkAr4<pTo!(TBww}-!J;z23&<JK#tQSEn
z<7eQIn2C7UkCP&HtJNkU99(nNy~Y#|d~<wq@a@6j{)_#+Zn(RjM)Ae!S9uxyVahYi
zW!f;{Md9N(OAKS06k2S{QSnuxauOzciA*`p++AdNbD1~v;l;_$(OFb}B|3W@eN*a$
z?e{KC^3&f|U*bnU^o|5?k(N*UvQ@WfnM3y8obJ5X@0ls0Cr*_f(I;)qL_lcR`Ug3N
zXofYLMKUAlElnL<0bLv^Q(VEaHa6I8IrnxGB5{yuz*O8D*9?HKt`SKe;<Xa?)+3E^
z=WO3ClAD*`_L``Oe8qS*$wat1jwjcrWX^bOsg(GG3p=#pQ4b~kAyJgV5`P%xYO=ij
zc_;PS&SYXi*f&=ZF4a!ZxkpJ)Ai?<AU*}T3rmUJrmv{6aok4$co7i=S9vJ4lB8p*J
zrOQr*CY217BRk-pxlcsqlGT4+;J-_J&qo2!cqW<p0)=eUH76u^FtNgQIGSaw`k0hB
zbwG<;53Rxos~d->EP8zuo$kKef3>4u!e%H9u2tD#x*eR!00CDuR_BV1sw}GLP^uD4
zt41EE1kS1%sdTL?VZ0@|fjK(61|6E5bA{~-WFpHxX4N@gz8|>A0yzjQjNhP7v9IrK
zdgDyOpHd9<o;DOyLx9_qwF_Gh>lCsK=Wq&~<7i#NrrrgY#-2G7Eh7n08Pk0$;OZW}
zFA=ydl=;)fG0|pYd#D*=c+VkZFE6iKGb^(jXsg~^Oe5H|Nv`NF@&&6k?R;@bX$G%N
z!k;c?BuVR<r+&#(S#p>LMN><l$|j>Ws-63v!4w?}X#_+fHCc1*_W(RrV8r;>@4^rk
zZ`6`zgT9K4tmB!a7naekaLBFb^l(RP6Z8c4B!B?bJiQ|9l}_yPV4)35RvAazQD5DT
z)*#1$rc+t=<ykFkd_@bfnkuU@%e-A((K%N<h?vrq324ol8gwfDuPj0L!5m0Y*MjM^
zXipCpwhDYfhq83NTuLZ}gj-RQ6+2`F4uT5?Z)(+rN}RR1PD4P*$|J4Y055`|?~jl2
zc5c4aIS&?UbobncApi4uE($-%MnNHpQcS2ig-eB;U1dcZDD8|7Rf9II-XeN2kLs0?
zRSOJye1@o#*lh?6QE)OsJC#T$2=P5_s#WICSoXDNU`%gjqqU&6gPkm&f@g6LvP?`O
zY{-XM@S5CI?2-xc%i#_!#CXo=pRh6(=)@>{Tdqms*lb|BVxL+mGE&8x?XMq1KQ;`L
zr;pljKmK}WZ|`LP^z>(UUHj9O{&cR3&PHTbn_{{Rd*-TV-Gh$c#EiTR+i93kZ{4p8
z6cG<$5%>r7E3tgV?4UH5q@TY_TR~-2@HAc}Z$DoDOs2FZYBh0z6nwND`7m=A4dy=T
z<mI~Y5s~363FM+kV`lsgQfxbp>ItEA&S6DaZK>xC<$BSyqA+iYrPvr3UdByns3nI;
z44BQ<*uz4zRGDTAK#LK<ve|`W)o}RAuMvBl5N!GJ?&9?@tzsL#-$uik-DDhMyOI;R
zh+dwZ9iK)bglaY~w6pX1sJQE-b;R@z+_w(B){NZmcJ#``Jq?2{gHg4$ON?UOXMF~G
z4ctFcGj=g2hQs;%9Cl(h#+}_)`wYsJ5Asn<u(frmc9>!~nU=9ST&e;FO00XxlUh+|
zMRm0>G8bJdec^CBEC+-!J_S8KFwEpRb`WQT>5>PBu)<NOFeu&6wWOmWqYA&>H4dag
zBMV7Gfvk&qG^>#-27_L;r*sUvE0DbCLeEcpxmkRv9lZ*9w#F1VI_hmddi1atX0-H(
zdc=kyjj&V)94Z?4%*Btvuc2YbCeta0v68U9swda5{D?3HSD<N@kSO`KiuD{tFH<RL
zlla6Aj>oOA5I@}Tl+#u#^8%4R(P)O=TpsB;$X-@a5r2yP<gU6sn9YOI-e7k_1)|-S
zBMkY8W{*yW$yD)s=m;jdRJ@!lh#<3pyGCa&5~B>oBzZo(u}Q-Ns)=ue$cN;PLgUvV
zwvFCF>j$@FC?r>5%5j=t4@UNab<Et_rhE3T)4pVk0(5Im-{Ae_1u1YnMqj=Eu>IBj
zM#IZmQ8er;{wfP02DwTrt~Qoht3Jeyl9gTD##Q^i?ttY0DcCEk#{Y($&C=|4B<HnO
z8#R;Y_U0qS#bG@QiK1}g#l&A=)RD|dL6!0FvBQ2BpWg0}sNNZ6{m#?{8FaYx10ECl
z^e;Vr^l*!RD2)Z}*;&gMn1`2N+jj3R$*ECv{QC6l1<5X5*uKAeeX_T$L@-XPPwYM0
zE`RGPO-A!8hH0?okQKEZo!{SmwHKeh+&?_L--_-}FG(DQ8R;g9-?+KE|GmBgpXTgc
zGNL(tP*^+JIL#N-)Z@af1SyvQjD3uaUX_i)#VMD9r72m^a{?c`tzcd?G*(^d+m^Jt
zI4qg1nBY4UmUX3NWiWSHW?WEaWMd(YQFI}u%6;2O_#g2GIe@lJvFXa%-S8uH@}{HU
zOWJT-^fRBc9o~Z=(6*i1t}I6z;b1NrOs|15pSYQ#O^qh%+nq78>Qb{^zUg^N@q}2-
zC$xYl(I-e4TlY#0*qrDxtk*O@p;?`cCzYFyhl!N<(d`!15eswul!pE~11~->@{ekY
z1e;q3?t|~PaZ=d{^`z#QD>09--uY)@9uM6W4F>ePP|~#hZ`zmB1-){A^L}tm%sSiA
z)`Lf1ziN0SZzwY_o=Ij^aYIt!`{@4Gi|qb~nbj}jNkO^mTMJ%)fMNY226Yc-x8SM=
zq2HvfYih+X?Jq7{(I58rkGsEr{j9rpAV|^@F~sk6=HqFn)T7F|d@uNbhGZ0y^bFYy
zb^!x}8&>1h#9pTXltJc@n+ZPY=~aziX`|uox{H49#Kt7EMkIXG9RTHeyEKdrU*i(-
z_dEomMgd7V8U}m>>8y!Dx5fs>c61~@h99iRPR7P=hv`HLz9?o4c+DXnqwMl(ex2gK
z;zSeA7Q+feD|{H+x_Z!^FRunOq!ZNJ3F0)}W}B2ns-)@X+?89Ouqz+5Yxm{mmTt@c
zpgkuu>+T&%SS-Kh_~u`0FW!mLXx7<|z)rte!XW!XbO#c);L^Einb-8`wI~Ga(j3Ms
z3vl&e5fb|#V6F%!NBHeR?9b{~nj@iPE><jWA6T<T-G}DMWgFvJrd{pQw%lDogZEaG
z;k_~?-m8-@@72)by=9WTSEb6e&9(C7>Tz-JcGA38L!I~TNTB!XY4lz#nd&6k{g5K>
z)ez;qWxBi<lIFcTofP-}N{7Y0%6W0`uX$wL`;=4T-X|U$Fh+-r_5)lRj|=q0t!(%<
z*7%W%O;y!$mh&aGn)+sA1!`2MEra~b3J!f`wRRJj^*=_tLC=4IYU5tNi+CS>@kMl;
z%&(4T)Z+W~9$XW57W&<nmIQvf^GSM+wfM`F9N)^{Yzm6o=HTv)e5ATldht%WP7s0c
zF&jO6E!gm@<f{jfM9y$zgNOMFT4`zYWr$;46U6chxknAR*lIKaR$;ccXtLl}R<TRF
z@0p5RX@niHPs{fNJ}u~uE@gPP%-O^a8N#+P>Y)RvX*4*G%o%PavRQ(W1CPH1%h*fh
zVqm3!{DubP2eFz<!RO{)Oy>8IdiM{}OSb;Mle05S0mN~6;{%}kz_dzP@^W!o99G^S
z(Jf68pK&m8h{Uau>DYR@lnG>JS(M*{WC*ivE<RlWr!B64MFiK33yK+Lg$4+=QQMad
z>aIt<I7WcT;EK)Ny?EI3U{(=l7ju27+h)jx=UccKUD84>SP4rPWNCthvqs}N4*MD)
zZogJARtJqBRAn)qnkVGk!OMP1`NZY)h<k^RHJ#>My7(Cz-ueJeWUVw^FGz&krfOkX
z(&VaoTqrNsiOLd!IG57WTnibnEVstZu~_#m&j7<TNK*%!f}~jv`I3rdi@qo;z6$&s
zhT4?~J^oWb=O*bjQI@(x${9j%ow<Dvp*81{vWv-T$^@IN>N3@5Fwa%n`7IRg@&nXs
znH2%}Jy-hT;kYDqd)(E)Es_gPRSe?%T}IO-u>zj=^u4C|vNa;}c*oR!ruk(EL}fq0
zY(ZLJh-s*&gwK*3NpUW=QJ7SYskusKLoS$S&V^|G;RE;^Nuwy>6&GR%GE9^+_39?5
z7bTbAf>x)_=U*iwadnuFPWTPV_K-F@NZpWlEtpI4`5N`u0Mc{xpfOb(uve;WR<s*O
zug~@cdlZ3VS-vQ&PI1B+%5#Nx9hM#Dt&m|md?g!Sf040{G^L9Ypd}?KNOQ7IS@`Km
z3Wik*LI~16Q4m34Nr<Sy(<BFurYp!xVelTo?U^vRzf=|0m`X=WrK=u=>Sf9`fb@LO
zoFDNsyEp2ArdzjsHRzrS4Q&())zF^`9q_Re$NHe%)vYocBjLbpHI+MLTWMg+ie^hE
zOyuD_81jP`&B78A(8N2$SQD|9fIp0zBiX85TuFEaZGsF@8hE7WG#l7*KJ{1u=0fBu
znw5Alr6u3vn95W_Y-f`A<?5_o@Ud)>T_^iHd$0DtKj$<rY=m*DI1=(i<J^T@!bDIY
ztMNu2|K6Pb+(VZs6$S!cBs7~@GLr+HN6Zn_Do6Z4XJ#~G6D4BO>~PhHwm&bj!Q0VI
z!-thm5PClsk9=54MQUe+ISc3?cevsH;)kx?1C|^d9-0~|Rg$xP{#((ZFR3j{#;k|}
z8rLPLp7KF^%;)y%^Li+|enkIj!f)&XBcJ%Y!T<b&l4;?eSLR>4=(^5s5zm)au^mLy
z2gj+GQ2pXb99wwkrpt$Ja4rhmkw;wchmFWv7Q@u22_kMI^*gO%<OD<*g{1qvgr)}p
z#gbe|hYju4Xn$X#4h+p+mZ}YzM>n+(P~L9*O5xi>N#BJ<8|_*tTnWIjfB+xI<f!(_
zcRmSFp2H*`C#r)(S+a<4RKs(Cup_8NA%b(X{*)vnJA<36vpN-Q_Vi)I3Q`$~?_sxi
zD2h{<CGCU3Ip~FBynaB|xRubU0>I!y^Z^U(QV7*W08?S8ei~lqadljRSEI38mq~=?
zC44ZSNH&;c5g~a0dcw61HNRw4R#Ei&yQBRRyzjpy;M+x*W!MTcnaY`3rR)!%rRVjP
z1~9bwNY>mJhE|ja?Z1z7yN}GVlML40s)tZ4u5r#P+vkWoUG<r!z(q}f^CEK5lCE4y
zUcW6tFC>7K8F}T06t!Q(xG?X~ayajjI;hcHS~I)`CQxdaA)$)PBKzWO`Z1d2zL!($
zhmZZ>6J{m<E+}~HbD>XyI63)fgG0z%>YCqia+`%W<bLrvtr>KVwda#h$?(#Yu8+zH
z^BG_yH>U>JCjHTLwA`l-+HhKuI@LRV(Us<(d?OD(?I|uxT~Y?y#yEMdSJA?HUcPVJ
z`3c+0h$hWqREt2ywgB&5N8BI1ayV<D=hp;Bn_=YUGZadm`w&6HheYrxchR8uHa2>l
zWSUvqnvuDf0GkM~77S<E62?D_)*r{BMnz|5hfR<I6123arBtW3N<Hg6_14e?_J-*t
zidYYO9Gu%*Ozd8hYiR4Fhk9ip)t;qnt&zA-ze+}MY8z00bh^kSXAyHzLZ~XV#54)d
z*gRa?v1s$ao!BFt(V>?H9<BSlX_OL_`j8iN>RkE3yG}#Bn+$FgrI-y<8HeBJGAlGG
zMfMk{B}0sAoV>^ILvN_1H1Q5HO{^tItvI^r>beGuc5F98HEvp=FjTtcLLR&bij^nh
zvxT9lbxR|*w3Rb2$CjD7Kth<va6P4g@Da`km4H<nfa3UYR+btRn8|rEsPD&O;(F5N
zN@}QToN^T?lu)uR6}iKM<z~XWP9D=CcV!Z~QzX-YGWD{PsdNpy<D%{^dQ?nvuHja9
zA4}cE8n3*GrB{%G`Ui+AdMv?;u-7|1INU$l-S58K-#I*c**$#y;#A8xtYSNmjRBWr
z>u#I^Mp|HiP8U$Q48=Hrr1Ip$+a$2=xjV;lBVsY+MXE6m2u9zI0zTpbRJSc+QehPK
z(ou4ADwY@oct$WYW%<xu+I%2P+PYT(sxAehy6#oNQ#CYoZTHpQS}R(E*o1%M3;ef=
zsKUuMLD$#5Z-jxW4>?fP1*uBhs*6y4=(P9e4sS(m;h$pBXR@d{>%BqaCde7J^%me4
zCq<i58CG2EF$XK9a`vK5)UyEKUbJr2P4R_u>Fw(s;)QpDu4^*Lc6AN_u+0!4U0mz(
zH3rvSt3J8bR52|apW!-5(EKN7lSzK7&)ZNY9t6PKJIufZFTCzUou!Y+V3wXOjmB*L
zuv)<m%n9ZaOJI;%RvfyteCPh;`BXsud%@vlpAG6|f^mwJ9`uvC34p=Vo5{dJ{Vngn
z!RANjuC6_>pjN;zKI}TnJ$I2G4VOg<UOPF5J{y>`7X31IeluDx<u|cxHB4@l^aKb_
z$0)$=pi>((uT$w6tkDj!#H5%9yXsOrn+_=k>*a>cA5sm|UBtKKabH$IK39Emt?3H}
zXk1j7@D!L~82wJlPZlNY3V~T((LgoZ4d8X7i-d;2+7pZdf!lYG#9ZqT6MLSJxR}9)
ztS5HRNZN1f-F7~^#P815gRMso9&J6^eDsL^?0oF^SS36B?cT|@nB&BL^osYy?oN3~
z0Zb*A^3m#r<;OtGI6uF9gh~xLXVEhsEu!{dHfQ(iq+lP-Ry*3YwH4+9a}Z{_^5r&)
z<Gjj;s9ISAMHa*zWkt{uYUC}7nVc>iF5=Unkypor<CGJYwNTijHU~}~937mIj&X8u
zd={00g*4^I+!W$jifbD7k2?oKBPbX*3Npf763@w-qwbqy((d=WyF1<8{gbnU=Lfs^
zxkJ4<+c`N?d7~B)_|xmAz%f?J@x#z6D=Q;qI0CJ~9`bSGUy|TQ0+-7-<K)SNOA%r3
z+%ml5owJucF2J4ANjWsUjRKlPR$OuY@PGfe|9cTJ;fhFBD|7AbAHD9L9iHL?r)RHE
z_Md1O-*NsIqTHmuR-j8p4+~yYQn*vCx-A7ANvtWNFIe=V`8z|ewxwGq`~UoA|MZM|
z@a)ae-r@ceDYjUQIA^e^QXy}QFQU`aL!OfEbCNPEC@gI0EYl&+MtvFPYQIsx{(j*)
z2{GwydNYSA6lY`3JB&%2Kvi%YF2pisQ}B(oC}tl*DdQ2H1<VM$oBS<-07D9D2VK{Z
z@@nyu?H}G2QOtj`3V(ld>*1rvUw-xV{V1N~0Cb(s%O-)wGY_5|a9y!SNAfzG186>m
zf|hRkN#%)*50HXY6$Z;4m2tU$zw@mU3DU5F{B}SFu%N(CoSnQmJ(K5{PD=>V-gfc>
z&2khB*cs$uI-Qhpj|#SbB4933W2wRjt$^zfgEQugD2xqSZHAQZ=Mu<Wq-^6UmN|?a
z0tzd(PRCp4G8>XG4Tw-JeM=L^)|4By!IZv&8N{?ZWOFSY>03@_mz)pox)YsWms~m(
zf7u74A4=|<`7BMv(5M&esitSB4q&H8!`Ug`6q;!%KacXs35~{~u=l2{^n^7Yq4s_A
z4>5}SS;4?Ke%fd#Fsm;tR87flc$nAAtKhj0j<NJ&Y-LkEriEZ;?DcY^i0AqAHudes
zN<`d`Y4)~omPQ?x?x!{G0YuB_yPwt?BZrEk>LVHmiMLVm(0*bgL65|FMrXJ$f)xTV
z?|gUq>7}p$`QJ_7(*F&Lx|UJUudxzcnL{bK=HL4HJ|z2W5SlkmC5&@reF0SaYc{Rk
zHgR`Ir(!j|GUp(C<@0n}cp#)87J`VC)jU|@g#8NEfHzxe$sP&Fy0wz{Y7qMt_~dme
zEIqUiL@+#|#E1*in=iDOo^ufr*E9fCIw`J`86Of$B|I5|Cah4&u6dEDmL6Uzd3g(5
zPaQH+uNjo^^g%$JU+-1EcKO2}E;3pvEXqt*tNZqxq{up`6d9$VRSI%*InmcsS4=d%
zb9GQmi{UAh3XC@5Kt@_wO0!fubJZ9D+Wc`vL#xF=o8l-hBM(_}SoSf<Lv=oMmPDK<
zD&s>vu!4aaK`^@A_}eFYr{w}MRfM7y)o<ECA-7T`99E%a{|dfJJ{t=my1BNHkb742
z$UP$=3w-VQ(t95hN9oTq1ym|JGB9wUnAlD{D1EqDQH<o_qK+9V7>>6fN}0D*tHzb5
znB{wi9s$jTixRM5Mj{NrK;%6vMGzx34Do|Y_?~#2`f>=T%QLHYvMco;N1Tom6qTX>
zW6QLHv^N-IY#QKcl<Q}5hrd1EZ6VZ>9?@!74n|9OBbWFRaCMzG4P~LpOXih;OGdeo
zh!m{&v8!(@t`bKUFu)QYW(@~HcfJrV8;G3RDY3q8{tZu!=GDxCXEeQB{(E=J6E|b1
zV`{j@vS{s6Ze)G_uq{;_q3u6zZ@uTjNln)-myJE8Z==y8ceGR+;^$9>g>_?>4n!{E
zTiRp;Ty?3Kbql^e?6;{)Tq%c@kAAz_tG#E(suFQgZvFeVR{1q4<#M9ozU9$W^kNqj
zEVIDIj61!q2%B}S_*kT%IJ>W67lbN#bi&)^88(p<`AmwgvcY?cDI8@)_VGNAeWXyV
z(N9fL?78M+fTh^v2&A!?pD=|%7*nOf?99a(2h`i5kzPm~e>sH98(Zt*qCQbOYKqP^
z^igD<%}UjtBnr+zJp>pkR+VD<392md7U6M<jkm=4c28k=4Wz|;8rqh`vtbb%oi$7B
zJ<PY*Y)5aV>?wAK!!nb1q7%NUhGW<epKC1<K|#{O<eo#ob|~KxYYGHI*!Z+KZp~@N
z7}FO2r47GkPhC;PNs`tYI~U;Sb;%$}<tt!#T!MoJ>lidXNOB^Vk*%8n5oX0%Soi?V
zvs(^Q24lL+^P%E>X)Py?#WW0fS1qc<o?$}e3QE^^sC2jTtcOjO1K=vrz%mp;9xd{4
zyM)<&=In4XSy;~sFQ1+smQ0gL5eTOa%*h?Yg09A?P(I3|hKxU`&FqHSj4KlTVP$6U
zKa?^<?D8^W#H;=+OE1`^_AX1WnWk8!kXi)JvqMsa(8R=5K1-{Th5E|y=ygy9RuY&T
zCRNyLk`walbY_IhWwm4ld=SfWQQ1OEd01CnCq2x#BJs1zB9Uy>540O@a|Ks5mjuh_
zr-F!<J}W0iQoJqXLZ%>n+Rf6eXl`tDl%rplG6{;D&+egl%2lXcYD|TYI1q}LSu?*e
zB4R%l?TtfILepdy+UsV`14!Qj@lDC7wLDFgk1?Y}e#ccZO}9xKs}yi0s@jUyq$<~R
zF@p(cZOITX#UnkKhFor!%jn{npxUi;i@8j&kv;c(UW#cyOJ^hn6CeGjNF-1Fso;Pm
zutf3gh3>HXh1G(?`Tc2GUA5ZCpom>pysalJD$0}V=HXQ4TsRdEjEl!5BsE>T*usDC
zf#SPMJFv3r_-vMfIN*`?Sji_#rv)G#fQrG{md?Z+znczva%cA{mnyuw2YV+`pQE{r
zJO@`fN{L3_rJ%mcJRrT^=7To>zs}~Dy$I8e+H5!K4!JfG(HeOk3>TElWg*_BmT+=#
z?4sz=2kF+q@w+drdW*>pa;K)wD{Zk+O01s<Hmt545trvOJeck+3wOjUZE*lGCQ3D?
zhGB<DV3*1&ta+4b{z=8^QsfB-!B88O5|YkZLVdvS5TX_B{EK`@#c0NO-8(up=ua$Z
zB_h1C>OhEmYmpwpbVDj|CJNSmBI?MZmMZFrqPSF=IHZrLiw3I#+Ok42oKhrD?PyMj
zkCDwLea?MB(m6G}1MN)fj6FYj{Yv>wX+ZkLgEDmD>FG<%YpH;@me=8A7JJUpQYs(D
z>uj=mb#rjsA+qH7jh+wc2&sw-5=yfqCrvHoq`$blM2fH*Y9hsSdn~Y&hLzX{)B$7>
zN5t;~1|YTJFI?s;M?B0m^wbPMGdXkI95Fv50g7l26TDSb>ZP~rBL|%&wi00{rD!4t
z?b!B{$Yg%a&#<d2R3W(#jb5uLF6AS$Q47g=vusc&A=DrNGm$fQ;0=|B!<G*-SCIt>
z;hjm`_NyIMPpFXG+3U!7)Pr7yt3r?RWxPt9ly2byG3?0@8InTz5>|1E#gWarEgkb(
zyHW~cZx7h(>+@Ix-QKZAS{9KEIKB&|FlgvlyKCmQ!r3;zY;VRVoA~;fY7iy19jdbx
zwjHe>`=Vsuo|3Bdu5*^6Hd+ZywTu|eso`8b{c^%0{De`;$5RwMKp{`&Q9B`%WdkG(
zW&CqBj}{Ri-uahk@0pih!D7qB)5JYW3m^p;!-sXPRe!qBELp@chCW;tmL;W;6JgW$
z)09I|d0931O!^r%o^cr9MV8J&o;d6qPfS6jLG34%#9?lR_9If~z)n-z2>@J|l2L&#
z{10h5<<4=9Nn``_UJQb(nD5IIW$wyK2*%(d>B?}wA3PnCs0S<6qsz9KrNr+_m&T8W
zcFAuyufYUC+JT-yNBTsVv<uaP>>~w}(`7BC&ASWXM(4<Yg=T^c>}4_-huRhWOdJL%
zwI)fy9r%l1An>cR`*P>Fd&o)d?W_5C)HI;|Fg&ns5Gel>?toHHB_}=*V4dOV@q<#d
zy4FO%;*t&#Jq|IgE6<rwe44kIU{#=WmcK2hBXU!ZoNz6iK;%hu77USjr^p7juA5sA
zK*_-fg@JJjnLqTnejxQHR)rAJU>R++--8EZTU{qs>Z_W$JjyRc)c+xeBwf(dI@a$q
zUiPZ9Do-PnU8f?;hoy5~4kce}I*{DM<DL(Qu&y*O31{ai*A<Sy<`XUu!Z9E;=0^`6
zyvX`d2Xpk`L3Hr?_*4asxk!56-WHV6fqfi#fY9bKmAg8#?;L~MW3UaKah60TY`KQ7
ze4&`o@a?t(TZCGsLbcQMWosp~yglrYHz#(c%#kqvVSx<0mgoQ#_0T)1XQV=}luj&5
zcUMa%ZcU>&DFu+f%zf2*rFis-rY<>9yIQ$D8NSPkG_WCshN8v%DxbLtJ~P;L{pu*a
zaKpFyGEome&ONM<17-;FQan#|)NGLcEO<K$eEA)w^MjpNmCHCf5L!()hV>u&e*IpS
zjGa+6F5guftA?^m{t6#>SZ@0qQ`;+-q*OZU9jH1NI&zk4O=(gOi-|Niq)Ys$dQKc@
zy+$_{w%~d8UPy?q4@wHRjjZD^05<X-CB&jEriJM_jK73g)pbO>%koFCqgxVICmBkY
zoU)>cy->!9mk8Vei*vUuMvxg6xF{R}-0~)Wn$1WlAXFwE&chW-<@h@Hx*hICyONg;
z!HjtD?1n!#&*{L_@_cNyC`WasoGxW{5I6^-W#38z4Pi%Cy3E|YgeDbMuD>0`#o1lq
z=bNRx6h+3N)<i{c0C9uMJHoAA=qlUTF#6)l#Qh2`v-!XLuh4OV5*@grk;C{?zp{4A
z!mKsmRM^;f!G-Z8glt%JY0qiBQ)Le(qOoWu{n4~Z`b#n)^*yKv_VjP{IsC&XChAHT
zJO~kS(&;>0M>gBnaR^8`rLrrZEa7mu_3uc*qq}YT^xiXMnzZR35x7+DA&Pm3d4ZCO
z4hn3LFd8?L%>UhF{7?uV(7HWq`*gGp=4;#0+76`6wU%DrVQ~W2*<IA%*0ahzU@>@j
zB$-XNX>i;6=r^<Ul3sqg{f)|paW;IqJ>-1l?Qe$tEVe@uHyq|a!xQ~nS`1p~rRRHG
zD%_AZs-(7C^8Vq9OT{?Yi`H3AP~Dm2-?-<B+U%AKXt?yUFsoZLcY8!YG*qVu7#rA@
zqK^(-fY#krN03*3_YJ1V^39(5I71Gyb>AdH>YnVsICy<jpTxH961(Uw)X`W$)%=SB
z3<;AQtxvj$uZh6o%{2$tbx(_zfy04rgJdXVW?}dL;dEm|K(-|~1@S%S@S-1+5OBax
z&u?xgaYT$Mabxj0Z-eG!7>mj^&r*}%!yq6gVA!jqs3&~r=LaXJJD>0^9Lt;p6jPhA
z+Uet@w2Pv3=B=D;jxVd{D6+lQv<cbe2}wjIqeBg^G5hhDYURz+i-HQE=9qy;A#f=8
zLN56Nf#P)J<Jf65ev0;IGwRMyq&<ulOwK<wev0LP_AmaVCws@sJo<tiSUq}w7kPhW
zs$yG@9Ii&a3<UH(;o@YD!qNCqZofGjgEc*vdU||J|71BQ>Z#DIf&k6Bryy8p>kKS3
zx=bf&saEt)(YK@`(1Czuc4f<l%kvp<xt~ggor-+T$P-19IcIT(cpJ4fv{t)i#6jYG
zFc(W@wfL}gn&FhW377ntq*XVHSJQB_<W4cguwsD10Jx}7XtcEvK^sx!p+>5!T6Fa-
zK}#611;a|&NXVh3F^E~=VwMQ9jUtW4(VGdUi*mo7C$mc{^rTlMoG%R7QIR$5IvrYh
ztm>2+re9Cuy%a8wl7uT^fyz!1?<As^WQnxvOdA?6XWIVy`>((3e))(4+ICJ}efg-g
zywt+Z$<e{li|yz;1U))oT8uWOl6_1^)j%XJAf{q`h6=3n!IjB|uTM+gD*IL@HH|I3
zEd}7XU{h!T46PZJ@X6Pw3_0f<eP(;=ArL7YW{a^i=TLWRmVsYGgn*hMmOX&3W~-xF
ztiFZ|Rh@w?=j{t{PG!T4llR$pF(xg5$PW6Z*EHPz_>#L)MC*?|=shvAnM5F{r;!2G
z^U+A+VL0unsamqx$zc6g_soYKNU)d>gwDJ@1xABs*!PNE2J;nm$dQKMxlCAb5c#Do
zZc*5mL-JPX@Kt*!TL>Kwt9Y)wE!|vFS1D@P&e*q>lwlq!R`7B(B06}+VDUm8K-VZc
z{?v{1P%-7z2hnoNRiU3&o%c6jcBPNq;-}K*ux+-ZgJW3Q5FTl>eHL^^C7>k^7)y`h
zxw*KG6+vlRTqPY6XSn*KRO7k3&BfZm(IrK^(B7u9<2)#429Qkge_#wUgN1^#P4a8m
zC*b`SM<A;TDVo_m*0o4S@2W-r*!+?EgfuJ$&AasAl(l+}UP0Or`py0>mQ_~G)u@<a
zqO`yw&<T0~^6u4rDO}l4|Dy1VnvZUgoO(p;c2FW&Bj@c>#8rvXv1x7!2OuO>?+S4#
zFtRr3Xt{*l!nfsNWDGB+UG+&;3*<2bFxQ4`c~4q-M;#uVp6vq?%Lqr#4$u1}8;%KN
z#F!skhtx=lU5%$eAdmutTz}B85`9KpDYsLFj?l7JsY!?M6!qgJ1G64DXJ|fg%`gon
z0g&jed`J$4eC|L-B;D7=b#1mQQo)piOt}N4S-Vw|iIY*^o1(^Qxi%L($&mwRHuH?a
zagKM7v~lI*<7A3z9H^WyVhe2DK3Ch*G~fj;mY@_pa9U#S+el%zMnBB=4|)0Fd)m{(
zexz5z(zG2oQm^5a)SiSa^bTBaca%vK%C2*2x^SqS!)Krb?OThuzF4FSDSWOx3@)3(
zc+3)S*LiT`wowTwyK<QW>&7dIL}W+qQ}(i-(4T6(gqs$4?`4jrgh4#27y9OdG8jEz
z*<&bNWw<o*qxAi}+{y6lSjh?Hl^2;5utY7@j7`;C1a$Mk>dBS9N$a)TQb!ZWOLrMn
zcRc-t0}DR*!2xcq8emoPs_3*VKa^t7zN`tPgHMao0lLV}J~-Lm>(Zy5hcV6)I#KsX
zSv0N6qj=->@foSQJBRkh3emOh(J+SX*83&t#+7al1R>^rOVKt0bB0@olGt>{Y)VwX
zP^QE#J*B<BLkh;WNdFztbfR?*=baC(R;Vo4Z57p|8A`HH<*8H2b%BVmFaqFRHk&Wl
zG_9tNGURe77Fh`Z5n&KSrLHdA3=fyNhMziqUB>ST@fZ;B0CGYG$9A;&Zuj^Nym;-$
zkj!7Pla>aro=pj%Hm4eW{L4@W!Zt)DS<k<Le9g{Iai!$%GKg--JG0Ni4zx`N<wWHE
zT(0r~$bs>jfn!f2K_)BKmv1V_d++ut6WiY$?wswPo)MiN?(dxLKkY^9aM6FbRM_&1
zteWgMWla=OdzM1M@c<@e#NrAt%7;TFwK-%qFpxWgomDW~s~bLuagbmsQR0Rg=d({@
zJ=-5WF>FVF+CQ~mo7vnS+7Q->CeC&tzN6Rl4~`l2TbjYwG(0fT&B)PF1VYk!1nR4*
zF|kIy-=Drd>OOy^=pL=87ZfH{6v|SWC}-;p%)a03J#*z`pZ*TNUcNp(JKA}*|CDRd
zx+(pqq8MRIKG9^wUKvIb`mu|&cNRNmcSN+K1eoDh7~-UHK{e{8dc0x78z2*H;9Ov|
zv^RBeaOI#B1y2)Dv8d<D+_t!|J@8LgBZ(Om{`8YT-f#BUab%ccbg~w>a%QMvy~q6f
z#9+mGk4v#RR&3kMB@Ol-l+UCH%PBc*ehe2`IvN&Y-&3lDS#+FCm;us<%DW3x5Ui;F
zv?W!dAWg1&wsZQ2?*1S5ci-UT=$^bj-0$w39Q6cRo1HK}Hh#6{NPW+ri)-7_dE-~V
zqT9dv)f(0u9+nDkS!?lK<}JAW@oYj{7)%#y0BzfPB)?@_;L_uVU&<v&ps!@-S>LpG
zLI1GS(&Vp#QDN7v$#%7Spo5yrrum?)`M@_t-#rd)@n`tf&-m~6(!<nP$C@Pe>Q%q1
zS9aUBxceS^Ot=%&j((|C`)auLmtX&^yx`V;fGI71U&&-?su+~%nAKcNie6RRe$-|O
zt`cV`ImPIfd>nW7NC%`3!1;GwAV^62u%-dc?%`kA12Idac!P6qYAHH+T6~Cjd{M+O
z&c$0x&lGdwYvXvz)vNF*H5`mtW^7Fu6+1!v5H#?9O<@p)br~4qM>4Oq?{(~kipX0^
zuPHJjU3#on6dVy(8roI*KeVyNp#C>C8$Jfh!1&kF_oPu`iXo`%%y@>rxrOEMPG3_&
z?G;g#t{F*vd`H*b)_u)MI`FE_XGusZYv%aaRd8|ye#%hJ*GL5AiBO)h2ByMaa6DxV
zOocDahze<5j!8N}8ig(k-rNb~RlM>?mUemN*PLVEl>GwF-DDje9KHD?E&R`op92S{
z6UFOXFSUZX-1@r`%q!yXmWsm<{}YMBHmm=!;_$~ynMb);U-Uv)(&`pLb1QNy^veWI
zoi_SeS7`dLFMx*Dh-dVWxkRwM0AQ~#7uVzI5*fc&Q)#oeN}OCfMP(w-Eqh-+ctk9h
z7JiV=1XNgLw693Ey(yY7My~k~OMOv-NIqJ+wLsZy-U^(h|AUB>vXY-oq(p_OGq;Sg
zilMNHnqw7V^WlT9w(5n=Uo7GMy@+YQK++7i|MKffpPwKj>bn1DkP$-?{me4r?b4V3
z@LyB#THc%W%vE<7#8E%dat6Uh%=5O)a@VTk{A?l~wsJ+p!&d$e5b;VdCbhDiJn>&5
z-hYXBfrvNxyA<(+RR5Dpc>g7V-CY7J@utsg+xstZ>$8em3U~2;Xlbj496z7XrJX9$
z!7QD>c3nIF{tnXEQpf&FDEoUB%HTb(6U8`!<L_4h`_Jfd_CYaslfLl6w)lp7A1^i`
zCh%|WfBk^8LIbLkPk@l#Y5yGwCb!8Ye^nuaCg>wY3r{0|OK%~FtHxUxUjBRb7XE!7
z?T!fkrdAaF>fiLVcKqNj=X1a%{(1-V-<d-!2+FS>(50Zn|2n8Y=Rv(3?|H`qJ9zOI
z9o$=g>x27$>{B;bwvRl0mlynRd<t*XpTb-JbqfE|Q+SCe{-&pK<?H_yQF6xvGz@sR
zEE%MRr^>}}$d&n#&(NFrOr|dbxY*bIcL2`^(3+$i6>l@vT~HrOfp(HnwOI+{Y-!}Q
zImbC+R#Vp{&j?UJNHvn+Peo37Jx#-!fiH5#ZLu@38pIrr`kJ_rPj5ISWbf#-EsYqK
z8FG5&ze@UoWvD4mKqW6F1|D(|R*sOmKnchauwPh;6({fq%drAi5DeZyc+DiWTcDbA
zmjx-e1@I;a%}0LuaKSLdQUxU}tC|rL(weG@h0QUvQbjf$C)ubJh1*_H=I1X+2L1(w
ze(-)532R9=8#Zo*!RBvi*6{hxA5MKJH=UiciPR=2@{73uB~0Q)A?<e(l=O+#rGe#A
zKurlTrZ1k$BYR<)ivZj3`6zv#0mel#Htya5kCxH7&^DCxI!#SVkZPaT$>?oST31xG
zkhR>lL<B~09y;V{hD8q{;1dQ7;Sw7RSH<acgPalA+-?JC&MX03h%GUL2`)iC@!G`M
za24)TY%NOlmjH@K>cTY|B7thrg-FmQxR2ky5_oS18iBzf%aNqk!th8r)nYO3w@hA3
zNmx^y@sEWWXS6yNr#adB-~a9Zx)r_PMCcPBE_f(Art=C|5Z6Ny`Y0CtVlc~i;DGIr
ztGkB>ccF;EC{wCX^!u29#dN)CfcWVU&Auf{9n43*(YKCtAyM(3;{1aS3MzucORs}2
zf>OHlt6f~lTZ|K7-!Hw_2=k{6kj4<1>5L!>xN0PSDJA+vam-Qs-^?zb(%&XkM~0B&
zs$*NjG>?A>KrDi0X{TDF{|dwxZ8+iLIQ;liz2U%eq$m7seT5F|SP&Z@hL_%rW00Fe
zKJD&3D!T97BeJ*R>1Y8C$ZMjv6v%_NY;nc)CuKk{(lSdotYkomx|{{=_4d*zFVlG(
zzFj-i+F`m{l}HTMBwiq=8}6Ln*{gxv?!K#A27$&n4hMV4cq$f}PXC>5SO=7Y9LkuM
z9+ChuD&OVVFi=mS+Mw77<03B4i5^6syz<i1n7%oPwU?zE#$ODW=Z2@!$}%{zU(NAF
zxKOBLLBIx#QZNh$&Q;;_byPjQ)SDk38A*$?=mpc^=vYI1<xcT-A<fm3bs;F3Lit;d
zztqbtd6bK1mhQOZoBQ7g(yP1j^u9i50pgoqdfD+b`wLEIoMjA_!WDK7LX=b#*;&RO
z<>QXz!x9E*Q3FC6!j1MSBkp<lJDNPAzONturqo<mI9voGWb5JUNGZy})2`dxWyKaP
zb@rp6LRSKIVhLbi5Q)R%aOy6@(Klq!=sqX183f&V32L<d+}nE4rKig09fJtTm|kYU
z%LtH-F}mj^cw)EL&w(r-qfi`8Fm?Rp&S#NztgG=A^(7Abq9Rx?UcMFm3-#s1y3&)u
zJQEZ~3}L4V&B(H~PG?x0W&JDSb~k<&n{3A_Q0><0>|r51plcbsxxJ(wU55qG1Zn#&
zoM6~5GXvE@KAI;u*3EC0LDtYyvo0z&Dvk=ygRfNE3%H#jI?Y_cXU4(!mRb^sv~vSR
z(8Sht+~QO3QcMZW&r2s>;Enamv}mt^?Qoqz^ey$tL0kN_`w*i@0fR6x9=%P5%S^-!
zI}mqNe?aY}3u1KF$QWgW0jX7!u$!-RNA0=AG#vonf?nUg8&z2=v7pBPqSFRV$Xh(X
z7-zE`C&bX=Y#JN%1Ru~gSi0el;^D22c`|j%7UP((rb9Xdi(i$~myv%NgF}mCMO^i|
zR9cRXfON*SGFkO54CVg32L(AE_T!|8{X?|!Jx?yP<hm_s!MHi#LdNskGK9H)%BqH&
zf|A<%?%?cY^z2Uv|2a84wTh$)-Q*EXO~Z9?%uCjaULep3^a~%>Qm<4iG*$8q66jv8
z*qYWN6^a62XdKt_GsY5Rj*PNxuIr86ll`5u{Rk#9_b}HZ{cZg%?%r=3f=OC>0m!7)
z$Iu(WJ}m}U={PaQC9l6Z-FdMey*`RgcVF(m+A)NZns)B|y!70E*1&YULMqk}DOYY_
z_+X7;09X?Z@HradEpJDaQOi;VpZ~4BXX5%cLyoR|&zm+)dR<!pS3s!0np*epH|T!M
z-DfH9>B?28dD8R?qR$kdkXrA-my#37kJ$gyC(&m6(dMJ}1JV<GjrkJtudt#*X_Y0C
zEETkNdX~s4wzGPUe*{)3x}ckEvb%=yq8DtR>c(Lgl{h*KG|?n;el{f?Yp5VS3}CB;
zumX$>C3GkG7oLrvzMvDR?$N8U4+oalVzx-dNo=gybAj4|xUK?WxdU2_)L1<it4B>I
zJ|uh%do!?w{789L$;%QJ?G73f4NF$o={r5C4BQ6RYEPI0!>+m@X5#4JI(u9TFEFyV
z73m)=a!nudz+>za;Z!AKTW@A`xr7|+<D{!<#_xgyt8MSJorKNjH@>?fd{R}5MhH|(
zJyBBI27MJe4+moW*se^z+C==^JFZ{Rm^|8K<%ZUx^!NGlMHEc8^Z;Dob`a|pyYqU!
zbZFa+#1(mFj#XMqIRmA>XL(Z!es{?f?jcNh%lS_+WU6T=yn}+Wp%o<PaI=I}84ZUl
zIPS!qBpYJCj6D_<jIMx^X~hp`sVyOEeVjp<4FLwH7Mq~ZjMfhYV3SKuhA3VyXfdxz
zfjH3W#lE`nM|{|~7hg(y9W~X)1J_<`bqis%esQqdiVnZh@~R5RRw|JxB}oM2@$B$4
z(u#amWm#Y<Mc87<?Wk^4{GldEUi6RgSZ5Y26=2`@_8_(Pn3fu-7R$yRwZYIUI66Mr
z#-s1sq|t<4UfV7FUDk$b?hB?_JjjN#Xzd$Eka1`0QA}qbABXSgiKhx9&DME$h)rrI
z&sQrCcbV)Kp(D(y&X$!h{AE;Qt;99tBOfBo<+>TvV{l@i-+E`E?<&~U$%w`~ym4j3
z83$U)$r**cjT7EEl2@ld@S^o%LR{|wo(yRQ3h2du_C)Enawt;ZNJy@Zfdz+=4zt9>
z!TRVoSFe`no;9(h*Gw4Bp=3f-%~!b{x&Vr3o3Es7UZ;};77#}Hb8hz!y@X>2802%q
zbXj}&<%0)!Z$8p*#sUK?KjcE)d8)T1f?NjYh??3m+5{SR`I|lXGw@Zs%jv|^S^5sO
zWNJy5wbsEXXU6bd+CR+)Z_|0nZnj<nd)thX3q|d829}2pV)>-yDHDZpNP-sckW#v;
z)ztLmeqmDj!LhnyjZzY3Y$597dfL8hvu1sc%dr&w4Onq_6-z^Bs2&=BNN=KV(c@pX
z1K*}M@jEmV<5LB-&#JqMqUf(IUQ_G3TJ5IuXVBnCb6_*x=GR^09$mxT4GvK@@GNGd
zW~t(ZFFd7h$T3>+dLJe4vdgf3wXOh{9tp8T4~}p5YKt0F&|uQZ=X7ZcJG##PqKJ=v
zy>G%=8Y&}vz^f6hJD<e|ilZnQEIBVePJUQ&CIqMUMW7DWxK%OM)lLQ`>R0w{H*Tqm
zMr>KJUctx)?kj=%mG=?jgu=Hp+IW<`BgQWy-r2irl@_!AK?TDRJo!M~7HR*3OZ0i_
zxR?a8?0w4Fv)C}N*f3MbR(YO|8x4mr`==?2e=n}6GJLf#uVG}5$ccMFJ8s7IZom0_
z_ucERT^f*UVA(9VWK>u^GU{FQLV1{Pag@O}Kx+<$4FNFp5u(JGRyaD?+dn!xIQvs~
z_wa!J>K^Pp`Sp6(H`JkD-K+Y!j$=CdX4Z>?VHDHhQoL*0N2xzu^rw4pdirMnM81gS
z4L^1Vm#h2G8W!|`2S<u7N;J1+sHEDixvw`$Zi3nc3rFrA2pqz<EtPLj?m7nau`6ot
z%VMqlx-wmBX7pY3e}H@^g$lMc{7TD<Y&#Xc>PTD+X;Bzsd72SVWfrls$F(u`-^+mz
zNHOj+oajs}3CyBb|H*HhO8s>En@YJ8o`k2W`dXxzRdD19La>c`^jWdN8hP25gb;+>
z@RP3c=z6J|f#O1PYfX<}$VJygdbL0|DFf##`*~9UVE%(<+9k#&d=$JB94#opdM8gn
z4eR;{+rK;XVu=ypUP!-&fumRXfc6xJK8lf`tg6&hsIo3KSO?E%h>}EQHw9CzoPzDU
z4R)!!Y-RjB{<W-ttb6;e%9&>AYV`TI8J&2OK{icBo}pP70I~@*YVFvbstw)TcZ;XT
zFA&Q^PfMd=ZU$#lDGLc<!2-oYm+u9KrLx)M7na+s99Fj*VqC<CA4`+LxOpf!-I)#h
z<HC(y9+v_-#!jcjpGOhLXFs{4Q7{_zG4oGKrP7`(uS3OJs2aa_j!Z9;WQa-Z%0zVC
zBsgq#_*|Ul&wbB%girSm_jk{t4XLEPy1n)LOTD|_5-X+t)BLUDmXqj`9Tt`HXIg?|
z&fyQC{4P$71UR*bTkCuI?tHlHefxg>o^vhZYRp%g&}PE8TrGiA<CbtG!@T>%yPW=Y
z;9b??lGr&sgrCNID&C5^%IQ(^PxMyLX-|YrVi<*w(FiIW2jLo{YgAJRDwPJ0_0tPj
z@F5{f>C!+F^|lN**%yIJXJv)8^SXj(^<f>4zUl@KckSU)oQDKYFbB+rOBLH9PC}TZ
zx^o+~7I-(o+uF=$GQjg<eRmZordnF7Sl!_kMD>COHMkOIT$wY)5*t&gPH10QQVO!d
zE0#l55jd<IHQ#EMp{P-evdIrz4NM9`PxE16lEZj0PqeIg|0>VlM*seA|6P=ioOKUZ
zR8t6H>~nHZ{Onu(X7p3Em%5nJpafdE3Yrx{+xeF_C;Q#A{i7Y0q*4Bit55oQLLE^S
z%Y)~g<jv*MoZznK@6wSSy!m{8Z~tWHY=5tN_WBR|N8RTKhx=%RG5f77<t*1Zs!CnL
z`-A3o-kiOBeF9|wC>UtSb=;N7b>SQ+fd<QW0rfhCfH4^53t9k;=YE0f6N!A*KwOg4
zlBQ%1*s2sL;j!ZLI)G$KLm=i6#*$PFy0Yn6SX4o;yxac+JZFEcecNC|r&uXTRZmCG
zVks@SSZ(`0>Jd6SDLu;UNizgLtpy46lk!PsJC#gB%Z`)gG_<_fj<)nl`Ez&sVA#Gu
za4a>y`3stF=&sOui`%v4=oRgVdP^&foTX(&`YE;U-F3?r@;mrISp~bpFnTg}C;d#R
zRj?7_StvJm1J)?UB|S@B@dGDltP@$aj5;J)A#sH&wB%OPb{Z<t&H0{`>xF?q84aQY
zLK9a#*I|CmSxe{{ENd(oEgcfdC)y~%yEB)-&Be5}d}#4u?hY<HS%csY#NnjLu&6La
z=?+VZw=vZ=YTf#3O{yms6+?nH277ZLw!3N*xLFKxgNHDyCP~{YY{w)pd4>QEkY5+=
zNjmSe4R^KOcqAHhsm+W9>7gChfeF)t_2UetFLQ)N;6!LQ9wRE&+Y=?-%M6avpz0mq
z!|yZ1bV7P#vf6qSUC{wov`iY4$xS)2Oy47A1i{4gnE}J(g)R)7=(Dt<578P<NE?S{
z&b-|coKCM2u@dIvu_W_mgOAT~l194HNLL$K)wt9h*K4$9R?iBpq@`zR0_N9gs@^gY
z84ArIvZN_g;zTqnJNhN2btKS%*;q{ABn-2;;{5oA&RZ8yd@1gPE|WhE;z3tG(4|9R
z@Rl!kwz^Y(DZCcQqSyfENTNUGS3j!h%`VhJxl!MI8}-syBTeRR6nfC7L#`B$4mjWB
zIcMe2_aAnVc;g#tl_t<jYan-8A(}dq+^&$Aop5>f=wdOEVBkoiX;Efva(~|PMZ{<$
zEXJ<-2e02ySI#PkApnVmK3hFre`az-#B<b%AAuvWqX&!MXYW227r~nC(ViIP4CQCt
zX8`xn4UhCumw$DK@)#te>iSr1H6@bbW-=&Ghnqi|KFx;WHD9JAFrnfWnx?a-V6zU=
zWB46cIZe2slxoxF9X%uA6g@2HozYF>!aI%F%REYM;9umB2y+v)8a@5MMV?FB7wvE8
zP2!qt6l^PD;RlcrBr=OSO@bI?J`u^Jh@GfPLg=(>7hG+*Q{K$PEb*!JCQemoo%8kk
zyTKIv!~Le5t~*l2JDJE>Wn--P0$01!z0qj!C>CuFDGfg!`H@OLK%LT&8ENaYiF8Z@
zoQ$}5RZn$^Ef=1<CbLw?am-6v^Hc-fh}nKgPp0k5?Wk8j!&svpY@EGC`y0Hqe7Eg`
zd`Jw*u>qH8%jzaAW^6r`*UO9EF3)0i5tXNjr38Mj6w)qzMi2d%WU^OI^F5)|YmSH#
z^R6p?=_-?2!}sOi``Tt(ey(hrm+4u`xE##cY=g1^Lm#vyaSt$Kg2Pd&Y)VY!oSpAb
z>RiTq+kr)(YqE71c48=J;iyz%N7@evM%jRn1#t?%S5){8lTGebe2o+PMU2WqB_}zS
z>Dl6=c+Y7@-AHDrTABMp?w-&|Yz@WQkd#fAhGJ=mBVq?lwnW^Wi}_=36(@^6j+6b!
zyzFQB##-m16YjQ7z|Y$AV$Jh3l9~F5o2y}I{(x<$ZHCVjn%~cSQn%C!g8Y1E1mUy>
zF`V?M%e@FLG#q;Agp<kEWxB)q<3m?|_Z-CVd3$+}wm{yD6j!0SVv0_xgh$(8p1kKG
z*$b!^B*vz*nMlUaSFG|L_QW|8c_hL~ahDU?;*l>FGp4FiA#~-N<K#y8CcBvWMLt3$
zN$ubAFn&dhV6@)+tpPnemnkinpkb3AaoIYHdiNb}Md!V1jXBBYy$^T)o~k@CR<>}t
zv%|Q56JLwLf*NWH4Dz+60kRSh%?lZ6ujw3g!c--OyF3ru#Mq@hGhFrT{Wf231J9->
z+-#goi>OE2M{#aDi%u^H^2c!XkZ=bfCmbe0qd{{_uR|=g>|171PA$#mLHB9n>t60s
zCrUlLmYRW@>)!(<>K)C~5Dm=xD(eTRC$uhl0OB*A(hAI8mtb4gz;hgi3mD1<gOIfO
zFU5zU*|Dqm>w5uOaUdaH{yyi{>dn@hUv}B;(4`6QP7$G6aMD0XDfD(Zt_gfn#BG$H
zpCIUTiabdR<L7$tb~f^Z+=FP8y+xPcF}~=?5_XD3U;i54bW3uHsOXg~?e{DqW9ZW(
zP&W$JgCUo9HL+FZ{7#%m3PF7$LQ=~G@zWu3HqKxb%IYt&(HvG|I!iUGbez&gANqqn
z1iWxQrCT%@&s~D8c(<eVESI712|q$HRV}nk^fXLi7${h&nX$jzBv)7nAzFB}2_XcU
zP0i_WQ!-9ry2y$#CZ~|&*q2@A1v^Z}{b7RBoh`afxhk-?`!a#_ahW)iG}P=4fkdG|
z(gIHmee{-I2+|@%>v3~SJKsqvx)l03+e}j1kz-qjsl6<KxEQE1B=Am6xl-9Qh&-bn
zn)JX5dD)>rQ>EOGm9Ocdxaz4v=f)_8rxuAY&Ur=ji^`$})*y(@Md@|>p~WbDXv4WM
z3)rRWcj`kTEL(HltuhzkPUR-h0`YC_ioGJpV=ApZONfn&bgSZ&m-1&Rjw-l~oiNx(
z?28YqAPHxdT(5~6Q(}y9RoEa3mSsFXk)V{{HKdZ+%V=#!JO_W#)8Sc4!t^ZqhF!@|
z*P?F@j!w^Zj&}E-a(T1s&NnRLauA6MQUwwKJJZfLU=yURTsh#1vsp5DTWd(MZ6EGH
zz$Ja!#$1_1HAe@ET00ITW6tAM4SK;ags_fi42pz<BqkwyWM_U&Zv*s58}-Z%C=RnU
zo|AfUiS$dq>)FUdBYBHco(J}2S6>e$85}|jF>!O$qHd~^CL{g9MABy=|6S7>YsRer
z@W{aWBoV=Sg7JzGuxUQOVa~4T(ta9^dg=j^JSplc?*Tuu@(lY@tu2AAkma_)<Cl%M
zG%U+(VR5G=eB2c)<pJ_JC3ak8>!YNYb3fY^#3PpIc&%j}gJsSpBihw&>S#7EunW}M
zg>f%tmzLclYbr?~{F-&W5N{uJ19?5Wu#l!QVM%{OqbTiLr%`^qHMF?u25;YsP8JhC
z76kH~p1!P123Tvt(b88RCG<b)g2}9~PAY4Krc8q#LzF>aiL4Zpi})ejnLK0XfpxJZ
z>%u9DKP<*mwjj&}rvM-`V&)-6m5*3t)8uhF_%5+;+R=Bjj5p&1F>a%f9kw(bymyZ#
z3)nfr0$FBx+EaBCOT>L2k$h-sFE%7rS*$m~Acz5?z<l8s&P*!d&?TxAFjLb6p4V*#
zEgeGV%@iz(<O2{Pjh-RM*pV*S7f5t(Mex8xg4ZY3PTC0rto&${2(X0pOh3#eCHZW<
zKw2c<`XTSzY0PGuT^0(yK*jfq7(Jz?Zx0c+aAews7Z+j9l8;^9)4+9DZ7wl!RtSX_
zH<%^`R%PWQnazM}hqLaQ1)`F1M(9JSfl0t<#f{nM9M&B`pT*9o#%5$|j_G}Z@UNWB
zNqW#~rTZXKL2wU{1Q!lr1t`eZU4BS0u}a+8(!o_qA)<mA={m)K-9At!3XvM8<MQAf
zxB;@!cp4ORY#zN$(`gZ&F`}JGx6ccDs-M57*0{F?O*bg6EBl2ezH}C1^rsIa1}qli
zx$r1St0>gS#2zPwKDwq|{QdepT#Dy8@|j~?^0DI*$!LL`7QNnJxG_%K<@iDRv;w)Z
zp`ygRy6QgdMd#Hlj639Wko<H|&E1INr_nASX8>z+m^cYS46<REh&dwJc~Zz+z)Dgj
za!4wmH|noajd77i<C!^1JR>psgb8%S=g170@@y0Jf_%?6M`L!`U*Hid<jJl*B;q97
zAwul~!z`|{sUvX@JdiTe0l+bl7xm=4rzWfd=5g#n93`<^jaa+f>3vLLcVbkjU^m>Y
z_2zF`Ko_~_Lyn~&Jkrb?VaOvlbjLyYnQxaGVa-2?1{^qCwbEj_wE`<+Q-@<xY`$+p
zTPChJOFFpG#f=_^B|T>};iZ_Qh=hSi|BGlIFl9vVytKOQIdX|Cpa?7w?RLTgvMp~y
z$iSO;h7FzTmQmE(+Cq{bKLx_Hr+h4-H6dUu-M8rtha&C2iizRm(8~-FhHkY4w`nLx
zws4NN?|pZ==xYO-e8WegrlHXtK3I7Idv8f-oG@%<(Tk=Tg9z9>^7;+89zWjvO|(P*
z+kJTSmv+0|Yjehg(M`_)<iPG@;_3RvH)s?w>)bDR6Q=X-V&Xr@AyRBN4*0Q$EkI{r
zA1aLq>fel1dSiAN4CK{pRv_j#<$NMAU?QAL=)Cjj)xp`TR;aSb5$D&2BSvI-8ZMi-
z#8gOzTPflA&2tA~CfG(S5G_$E36cMkmvGqlV|ufw<;uQ!L4Dw>XvOq$RL3V_{8|1|
zLqo2gto?d(Epq?6S1%~F=mO~<EdMzx4u=WTj35qZ9>wV*r&XJ#kbWBJ;3|*S1}NQ)
zS@^Yn4FmY~`jzgjCXv$`e^lhGLWC}r=Kv2zJES4`5`#H(<v5WkUb6<*Ab5-JF&~0*
zn6~@KBTt<OW^&!S{L8E+>gd%r(;Ji&(#Wu_n%emv|8-4mJO8@29sR5O<iD=9=$CW^
zcYeKI*Fyw<XEZIor_mQ*MBFmt`=ACnen=ej&l;u;6#^N=HpOoaTF@7u*Vw_tI!<S^
zi+{Uf(3VqJWjk1r*c1i1OH5ov;G7MZxRMqxqtXX2Sl7ai1dl7a|KpmC0d=&9XT4wh
z`MwXbQn3mVG6j3vG^duB|B(5dk6N*{RT5=N;9acS9l=bcEf16kK32WZDdAO2l+<;$
zO^XCRV$LXpB-GHMf701ZBBlbGVmfOXoPA*s^^Bq?meg_nE-gao9(gm^;}#`h*R@X&
z{sAyBiT^^|x8*)2s(><yWbT!OcJ$m9847MXyU*Bw@Ft1UD)K8bTZxY(Bt0<Kp*DZ(
z6>=}!JAhIRu4=<z!%j@G>^gp=s@Q@^sr}Oh|M%D8G`+~u+0$N$VMS^wu$f@S^jk>t
z1+1YH2}A;h_IrejY9gitCP|E#nvVBwXus3xBkL~sB%1b#;tez*oUg&A?^cDK;$RWr
zE}l_pVd1T`NPuNKZ9r9s)MK+uHb$ZW@>VlpLymVY@h}YHA`uWBFofLB%|f8EvD;`L
za++~It?b1u*^IbT&|Yj-`TVb$?V`0tL;6_Zy2Jt9Blio(e7A`&aS%VyiZ~!JVUi$H
zM54!>jgiBPD8BNW(M^wqGp>}N*i|cyMC(kUsG+F`Fe?eaMw!1}Bxv;{Fsk9D)SM&>
zl^2~|8o`2qkZmCBmK&Dfpb<O7^zXaoeJirtb&mupDk!mR1CZ6aW<!t{=@G*urdo48
z8I{;X(Z(eOR@LKcqDHZTFYoc?$%kz(7!=1((*ym~g-QlOn_#5zvP=*GsA_ib9c(=e
z7qk3ZHeVVgpm%RmxZtH@!q<Dh-fXvjJ?SB|6Ry+j5=BoCYY7KaG%RhpV5*5p<T=oC
zME7?-0hvyi{P+fom%2S660mDOotJqrTd2XlIf;Zf`-z;kzE}te8|qO?)Uq5%P}@Lz
zaL00wrt~8Gz%@iKFnLj)C+=y$Lg*#V%Yh8Q<Vie5xW5ayE#{C=X(*H7i0$|8l8U?n
z2Sm$1pmDDEPHAxmb3F8i^k!FOm?t-B(Q9%rD6gKL8BAtGyJbNYf*XYL9ix}>ZQ4+R
zRwPp0VluK=8%Mb5dqikwaLGxWe~k#OKuJbg;#RSu0M}`PQ<>#uAg8d94D$gEP}%~R
zN>AKKf&d#4^<z5P(Xnc=m?I#Zl@UXuV>YTqY%rmtNjOhve^Z84B9(qVyit=%v1EwD
zrk3sLGrS~#!GL?*<|KmQq@#nQv;C8!okPw(YAN!QU<zsmw;bi1H$a-icdxn|y-G&R
zV&c>G10e#a*Rgin^=Ie!fZ0%=-4@pz1Om|qN(bzmnP%O`0B_UDs5KgGFPSTuDHuQv
z+twvS7#Qf`6oP2l@`3Y7@dFAPsQKx`wx{i|Ar_o8<QWp0q9&V^f}ff+%sea`rI0D2
zQv_f;!eCbmUYx_aHoDQCoj&aJMPgwq7p@+svlwT0MHs{(dj-BskG$JtzbNsAm}x=E
zGF0qfj94F<IGr9x!^{5T%#LjSaoGX485Mcb#GuGaJijW#_UW)h(WJ+L=8R!siq5|a
z@(E}#m&L~x3)q%ecAF;2@lIr&Rf^ZC3X{m#jHbcca_%}PSLgN0nf=F6$>h8(LoR)j
zC^M~?m`lc#515)Wj{TCP(2~_zmG_F(Z+((G3!}weH6=cb)xJrMDYEtVVxbeQRMa15
zux%F_?cuLXZ+hG8iWUSB2kx!&CNpo4jBGP=^2Sh4Wff<fOe8{AkLL1nK}1idGInMw
zl3>G@+S_J}K5@(G)wBhPZKPm9v*cQe2224vJu|6>HVI1sSXvFF7!;xbhDWhFUc}!5
zZ7JqnB8@G%RL4u8lEvb@B<*Ihm^RTd-hS}DswUK8FDoWtl&cL`gX-ysO=p?J!id$w
z#;<9|RmV^vCsbh3J=x#cd$sQn1BIa)@!457Oc_G}slCjK1iCEnLw>8U^9pzN(Vj>J
zFYUVbYnpt;$4}&PZ*m_OPaB^VnHJJi3OhB$+N}X8SVIiu3$gWb&^)h!n~N+}z@`_O
z_<<V@r{KD%1m_=Ud42#<JUXZC)AjRed@VrXE;{8$#OC3|B_tBC5LEu&bq#ha4@C+A
zEqvfcEATz@G&mK&EjALuz_rdLXrP|?KIjf-$;F(#1oB)ZNC`$g06pi7r%*&!QdUB9
z+!LO^;G=?_?MJkZ`=>O&Xw2psN9Vct7Ev`rM!`PDm*Qi*-NmQ}?yCUQm6T|$AaQu0
z%V|L`3{W111l76>cueS;?>hXGbfAU9TlG~XUlz@SSh_a{v^Q+Mp1bwh!FsXSw3uXn
zCKc@5;Cxqja~^fyxet`0R5|iOL#hNn3?shC>?lgIp+N<+fZ<FGZ(*>ZrMe8Oa$%+A
z;o5P!;!|#hE+i@NBe%bs;jX@4(`4m>qP%lCBStAxfTf8EtPp3WnZ#BE<fqjXxcoyh
zgHB!w2lBkcg~y==1x-zVMt!}~$Sxw=my5piq-|wi5Ow-iPx(1m)s{J3phzbDT=;+#
zl|lt3K%>EBP#Kx8tHvYS*wEHCHmtq#a)UmMj)%aH3*l@LQ703k5{YiIN4g9i5yq17
zJMk7HdB)t0m|BhLWAQj8nKNEwP3gGvj*H`*xgqv_xl6L?=V>x-i9jxuw4f7mBp-N&
zjP?SoY?KpA&E%Avt8C4X{3-Uyr80?@$2*Muq|qzH$c04Bp^OyO>a^nbG8vhd&SxBP
zxw-tp7r#=vk<h*%Z9*BY96Bw3;<UVqCOu|64+YX*5tqA(Xxt(z=Da#m=%j<!y7HO|
z>HFZ`yji7uARot$;#D}e6A~MrYx=;5#;YiKF_C0fhI~zJSzHKgD)qf23>MT4WJYz$
z7u#Aq#_zIV^Pup@E7I9r51cdX;zHeH5-(Z)JU96wE0wGWYKT-2%ga><OFMJnJYPmJ
zZaecg&WIe#bjm$eTfdD23<XnXsRBg`Mlm;nA+|s-B$JejCvv-cZh83`>IB;LR|_rP
z!O@@&<pqy|w%>7~8Mm+yQu6B{TFL0q^0oPsIMjGa@g-6kEY8laDc|LIdj89;2^)?R
z`BqqdacNZ=|8VX%i?TLheSCV;@yo!}MU{KEr*tAKfV3pKDDl+tSxz9Q@yIqr16l#+
zt>Rx~lk!gHnvXRtB1fE-LM|*(Vld}4rGAhPgO4Ad*kp<-1bK}}B{*FY4q=QG+ZEZ^
z8yhDnCwqP2mxIY{#+M7%0nL!cLrkQ(3{7YkY1kVZm{nO4eF=^2>if&+C!lX{==F1i
zIw<~n_!X=POVKr_j#wI(s_TVeUOtcP^&~<{CCMtJ^Qt)3a;KN%`Cl`9DE8tg?<b?^
zVH|dm1lZqxC~nOAu-G3mWeb7{j1tzf*@aAv-{k;T2Q1^@M_WE~iB)<~61}UaHSW}J
z;v2gMon0jEi*ty-^cy`ryO&qp%TaJ}3aP~Uu%R-!UB}Dmd^MNO(-%g&Qzw@)tCkp8
z(UcY9o#Bg|adGwM-r1@()jh;)nKroAs2W1BT#T%+JIV%c%`yL7z(6JompqUmu6)Kg
z2=4Ko^hNVP-A4qbz+*5;xZYR;q=se{nJ`R+OHYu-d?V0#=T_e-7$WCsY_>%oP&_Nx
z<GGMRKjq_DHinC9_`vYtv0mbyxZBgbTb~+8olsj552!35Xu3a}#RW9m-70!Mt}L^!
z379q-1BwN};#1WCO9}@wYNjApe2g(*c}qJ%3^Vmml=}<GAd!NyT7cJq!Fx<}iB=PX
zt)#_Y3v)zMk7Qazb`_TnbUhC$ujuxpfH^Lg1lB%^C4v#mhkPB@3t!HK__;gYnfTxS
zL!<G{Kg4l#_ImF%i2*~ro=%aghJO|EnEEp>>|DGEcZD;W#_>~i-linkiGTK@UJA6r
zwvYfV93@jITIAc&mh9iK!sHi+qY~S7d+_(Lh6{PitXz^_mX0dB$&7#uZgyqG7la^K
z5-k(25bTQW@H`8GjGbJpaq;1rEU^ThIxjg@cS6qyfcFZC{_NI-l?#E<nE@3pZ6Lba
z14SMoTcK`;$rxGJh`!Ojb_FI>&!VaeRV$`F4_C~{Mi+;T`AQSP#yk<IJ=cia9$~JS
ziU|2EyJX4^-rwOO7hI|LV#Pz;p&#-<&ajj<(Xe%A<GW)BCeV7O(-c(TGr4?gLMcRn
z;KF6IR468Eszp`RVaHHmJn;PT!)InItb4PfT9Dd4bXSLIWr4LPDH?UsWXrh?G?RiR
zGC<Kmfvx@b$f5$suD9?7oKCXvfuSSpJ(OLmVx1*W1mIzf@}aKE>tYIFW}wU~5Ve>u
zB68{Y<p0m!ziqd1Tzli_wfPhsDqlz{0H}kVmBqx)peV^^mSky(RQ%<`@&KAZgKP^x
zBi#TGu{_5Ae(%eDv7cf;)b}KN9;;?`H%=5JD~dGMiiz&(I@hdu{7v0z=p7^h(`80Y
z`%$xZ=F%F!KJKo^i=QkRm!a;{t~i}RK673yrX5w#Wh=-iDWzjWo%W3Yx^w<%To_o@
z87Vf%Vb)H|ZCD*=Ns+s%P{8`Lge}O=ZRf-es@D82DlpNu%Swi6#<~Z&8e^N{k@y1~
zgzN|O3_wfxQzzW>Bp*K(W|{pp*!6=c1kfO=zbQb(aZzNwl<9}7G%?N|bsz8lSy%ZH
zee=zJSG*9q<u_zSH(QtkzzW;0$9T}KBV{$-O57D&933up7jg&w!3>$ag4rDu(HH1W
z@uPyX#!0J6?fOZ3%hOw`@{yc8|C#b50Tf~t4sq>&Z&!R~@fMwbI{tghg3fLKL2a@%
zM6$eZp0UZxzrgaM2IozP=k!w2lcojPc?Hj{@MM)Fz9~$nQ&&tgzXD!Y0>@YGY0M>5
zO3FfN0<J*VO=|B(m_ASc`bFuius#Tn-<gYh<9h|g&Wk)7OOPh(*jP-}{J|u}GuP(5
zg;~i=!aVXkL`Frg;BxcyHQ2T!x)MbqMu&2)k@2<AOGC$}%4;cvcPWUaqmsfxh8O~W
zFe8S?wl@^dIkA}V*&vqXv1=T)pQuPjFA<;(&oI#hV|K)6>Pyys>@}>fkLRfI9(1It
z4p!x8ry}P)Cz;SJy6x;PzkPkY=Pea;RX4$Hr&pnwL&Im)O^j|fmO1TZBHK!Gd6H$7
zmOporD92!tk1B_XdN2{Xyv{>S9*4E_K)CM*wL)q|HS>V<4D9eY!sR|kE&>Ki4qzNz
ziE3mNf!N=2FyQT3HxDYecAdUPmR}Ss#H`A@fEmz?H#tup4Me!`W7v(T*||XGTMI%f
zQ_kxvVdex;m<Rx4kueOAb{G-pd!*GIQJCTYJzd>ORrv{p$n_dlW@K49gF9n~yR*}Z
z9<j!WPY-kKRF-<H->Z+MMA>>j<AGkcj*XZms0C`VOACfm(&#VZ!Z31@zl8ALVswmQ
zDnxDi2xe4A$F$mHy4P9rQL`wF!V&aZET21;IDG0gF@w2ZF<O5%h4j#rAZAG<TO4#N
zv_pYaSTf_LiHM8ear7D}`OxDMWVxFis1ki%8ooZ>hSLS3VlWaSCWsGCoR=FhZw{rp
zXUUY58pt5C$sPe@NVlfOX7+pZ`lUe7DU2fjJoP$O2VKH$Zu}+noWK?b2?t9%wqdD#
z13T;8(A;*VJu^q0tdi@g`ePF@hI_D&W}YgSEYN?f{3dTj{g6zYtm%<UMralVh!+t$
zh%#Q_jd$cBA8(v?^#&LYQ-;7qTM;j+Gw9QDs#ZgrRn3PRWK!^PCI=`VOFI%O&J&y`
zqg0^%SOTO7bYjuZ5*H-aXRlZTF{XIb?uJAl254d*6UU{6=K3SAZ?7#F$vxvlMOGQP
z+nkQ>xiPtiGD4%I8b}FKNtgp=8ndw@V2+bfj3VSR{Y-dSl-+<TRk4JNgiC88H#BCN
z#~$8`>h^F>!Pa&sfhbp&v+w&r$fV`9SX44lH6|dRZ84dmDHyZCqU{_J1Qp(UVjbhz
zcU!sXWuy4KP!vBhX5;wUSJi?V)O8ErxI3_hP5chUsF<>TxOy><!z?NGXf-sm?=C|T
zgn_R@#3vKNQY!5SqQ~smiO!JFn1<T1Th+tn=*DY~_8OH-y{M$N5?Y+eX1IH|JkvV`
zwsZHc9P&|u-XU}dp$j6cqf4K=D@Y?@fr~wmeTg+fP<V%?GtL|!8Zkd4fIHitx-}9L
zP7@&NI3txcRP9h{h?3?oW7rkXG#Wv-EOm6nuQf#8^uah#hr1!&oV%KLkz%^XmAdzo
z20w;7vFEg{-V@cNY7-lO=rrkP-K`fMUYY9&y87aj4h(1>v88Ou^o=3Nv$-~8x)h?H
zAW(fa)4O-KL(>3G!h!72i1mlXYyfil_T9VC-1#{tFss|#g#<8jy(%%E!kK|jC6k6Q
zIC4lDrL6{SpIfoLy3~CKQr2W60(VYQBbFD9%j^+diaAfk8*y1d$Jwzqz>vcRE=E@n
zs_~MNm{oN5#^Es-l6!#&m)*Nz7nnqm`iL->v@<+(hFyrK(jDXZhsf!9e;xD@U?%W?
zIstH;kIIjIg{F4uJhLz1GxFPjJ8A4i?*7atu|zdvocHPa&(W)gRt}mLUkmRdDIg)P
z`38F!Dc+6v>2mz-K*CpC+i-C`axwo6;yEb}3mLylHaz%#vVwJjxRXYI7!$yX=_=`r
z5s#SI5!V?81hc|=a*a0wF*(>%@gS2_2ou}QR=8vla_C7;0-EN*<VUmvgUN6n*Kt9c
zo6B{DgP4+s0)w&)9Cut$X-}Ewty~Lz4dPO-^!CFVrm}6m?C{2s?>fU2F8KV$@0kvN
zi!KPQtK@95M`L3M7ry}H1cP(!hn1wfpw705Vb~ZA&uf6ijHO1Mw%IV`c(#n-8#uL%
z_?$|MsE7bgb|2<rs_AOBo@`>5uz0PTBGC+<Ozi~S$!}BI{;63`bcO7~TIDU`Bg8SA
z9?%9tMBrvvLik!>jFU@+GlCb<cs4rYokRNodl~KCYee@O(Ss<N_F8+UE~>mmp+wdC
zI0{WGLf2|VPt$Zkw7a^FWN&Rf3pP|C94F@%Rh3#gp3J5c)`S-Wiiiwk_Nvl$;Tm@h
z(zjj4Rnt8lHtMoB!Ci@k*#WO3zt}TDtT_VwD<@i0IH_ypyki2KkPlnX6tiBs)X&8*
zb2ynev``9)mef-2<|rqLZ|&cs<Ha9Ye+r4q_BBTB|8_V|^H8Av11l@)0iVP%m#rIx
zX7hFvskS}MolW}pHt-8$MEF$kRGfC9m8N31Hz)Bp84@$Br6mXoSYK!3M3^lHYKWS2
zOyo>TVEOkFc)k(Z<O{DKwxAnEZLBU%@|)2(7?9(jUUhvCX_@d}`7u@2rhM|Sf0D(c
zb;b6e8q7!{;Sg_ObITh`Tw3tLeX_d~@9h0az$0GpZZ)%l(}D=f^Jk%~OLvptXJOu;
zD|4{*R-q1PIZ)?|f1SGUc0GHg8${Yg&XUJ{2HYr!3i7Q!$NapB_saFt0pALFsI)83
zs~?&1GGxLr(ZRP$3H5V)C|?V-g1fI;QS&}Z4dcu|BXv2Kdt1Y2p-W-0ab~N-wN~2+
zIWBx=DIUeUi7XcbBOScuK;|wz{V(VmnZveSW!rS^hjriX(#J1b=jmW?Wx^Vc<1=CX
z_am&Z&ag2T4;A-9d=`>aNs@Hn&ba0hR6jWQ0?8}akF>RMe{Vi<H6s=(yEc)v13g%m
z*s9JK`nsHYIR$YKorwg0iX45>`YDoQ&NM@PoJthqB6b-W<d7!zTM9nzW@G3M+hw{3
zsxij6JWbJZr7`nl4Y1jmaP|$+Jg4lzn<JO5KCC;^A4DVdrx`5CY#hFbwocAmi}x@V
zG(J~t_py)0<ln9Mym_9deTvH5i-h#CymYRgtU)s6n?OEVOfsv(`lP7ksThIWVw1@(
zMcbzu!>%%Nnkf#V|J{tQQ%)nxT0D@D^E@Wm7atace@HPJ@-w=~hJEL`@6ap%&K0Sm
zJnVoLnhdjPw2NV#g!6+F2vU?_Iv?3jkf6XnM^oN1DR~=7GGWPOdCG~i<yYi9MpowR
z)^)1bvb6eu$<skp^RV{Us&s74f7C6zl5ZnI)1oOPV5>;4EJC*8Uu~3P8_~l?^yQC)
zt(T|&L?r--=va|Tjk#nY^rq06=s##R-A14^mYf=f&zFL?J?4EQdS$bdjCsnW>)70`
zib@(^2K>hag7MI3y?yUZhbSj3e)QLq7vB>cJ=tpWL>Z0(KStbbJtXc5d^>mdh|Dq1
zUuWUgb~}5~zLxEIFrTAX^l#ODyl@j!9~RGp2y%1hA>5|nFWF4deYwmT4N@Z8WGz_s
zdCUi4=TV&RG@_kn={VVm;E$6YVcXN+hj|jiA3Lw`wvDi4wEN`A-jY5<T&a_$IK%ir
zcfDJSt;ZBmM*1+py09gU1w05W@HdwzB2$b}<75wU-Vg-lf``$-6B&E<>uqF2+toJI
z{2is#&Mf}Qv~K<;p=wzlrkq*($0bwVe(+TT{_m@MKgyhYofcVb<6NlCoye^vEoC?}
z?gTEoN8CSip+rj<{Mz|i>vmXO0GKn2%jXd%GJ<JrMCPxr?lq$S`0B^SbL-i&W{y(~
z&u_!0xsNTw=E3Ml?Dl~+hv(k{s~Cp4JLnM%Lv@+dFOrdHCp~hh??zDyg4c_NZXvH*
z&Y|hyY&6DY$LvAuWg*ms`x5Hh`=-~{v$1SNH7A|CpXoA7hQpKT4ZcQ<w~K_-^(iu=
z$P40L)TDEz%zG~PUfX2`{&~x8#BI{)A~0my-)@v%4U=nlbHDW1^#*hHY|}N0-=D!&
z*lxgoT|U*Odq*hVRNxn1nfdc)-wh<wSd9*B8)cvwjNEmn{=4{`J}VXa(dU+0b%yJw
zH~LPY))=j}$E$x4JCJf5UUX)BVG8tM?UTz$8Y~paW=AYoJbA)fmN*Wzz9X!QKy54f
z4cY+&Ny&T*gsT!nxK{!`Ah`sA=JSzQ&B&|M*3w3HWuf%-Q+yfoY1-!=p~L82AZ%h;
zj`-c2z=?Hsq|Q5ftmHS#o&L#k(Q{0)CVt_^8j6^@LIP><EnyXyh<}W}g&L(6mFdXo
z29ACE7&nw4t#Qo1(!Ehy^!ER=L(js2SvOe<;9n+^){Xd6)8WA=)4Y!=)uE`MMal~}
z<Hc9A-pAEDI26rRzj<q}Scb<wL^=4+F9=HWo9+@}%JT+{W{JJU3#P?>^@&K;Dm>sK
z^rBsd<4AMvpdr=c5w<qUDvLFGSfbc-T1tj{QUl3uJ4olUu%<mc`KqHNyhiFIEtJXm
z*53Mp61=5-zD3|qqV7Pg|C(LE)tLdw#-~WT526QOZG8b`+kEpN{05pYfAjDjW`Pqb
zZ+fJo3c9ql^@ZGqn3Eg3XwnaUJeuQX)P@to2Yqp!P>e~*9!KtzvDSUt^(&1iE~2Rw
zg6F-1$lXQ=Uz1eBC!*;jo#;{}vFb(X4BL*BYYO`#4h1pV@fo9+kAftS|2Fb;PSQxw
zYl**t6}6PGE1?o-CwEb9oHSPa#pDuTD>|tbuw7wX<%&NX%eS0*#ISE1gRcQ3=<0y(
z#D@-h(%RnhgxBy9g>b|4?MpB>9vpmeN?uy{g8jAJ3!W`}!IQ%;&`iWbwQ*`I^U`$F
z$d|}SgD4x+wzH=c*WN27{aQs~U#GiYE-Jlmo!e4{+(ONmq4KLrVedytw_JnQ_QD5j
zhda!SHevq*S*flMV?0Mo?xkbkXK<Yx2+=9GQ{M?U2FwYXLL@nMfuuyg8(W{Jz`f7k
zXWpv4Sm$B}sYxm<GdRuDGja)V$5(>3M;ROs1;3Br2nr@(W<`ZG_nFCx^q&$Wqj<Ol
zYm_i#`iU_7?=lYe6Mp|7a*5MZvU3wJ2V)p`X=Ov};n0DYGzG)C?KmhR*3B}xB^JK+
z7!!Q-HngSOI9>s*r?JSbLkQa(5_Ri+g=hde3O@jGoa9&18hc%0Ypr)2$4m5Cjq6F~
z#`YD)n)!&2&21<%4&F}DQxc_daUR_metkpZ@WOh|p%Q1th-;Emy~8-3P~HSqLfw|`
z;=k_CzjVFrAM32QU)Wo^wZZi`0>%OOfia>(RL3FPc=<RazmCXeWSC|UPMH4-&f&Jp
zWg5gXL6h_c43CDi_payThdiD{hr<7D>U?0G>b`{aIyCAH9}IgBW*Nr9z4JY2$8mBY
zKt2PmJmh`f&p3`af3vR0ckEv6_LW$7R+E>V%+Ga-tG1pD<#6A}I9B#v*&J89$iroW
zTxZ~NSWCGoS~gZy+-5xLhFH6k=lUtmQSmKkM`=9XE4AZsmq4y1ZZ#g$PRV<yt{wIz
zddGGO-EXWTs%fXV{dn-+FYW7aJnH0CDY#xc<K#+l{p!~T<E1bmoWvd9W|eqfBf3{K
zf4|MyS`HX&#dg$ncJBERCwS*pAFKN99JA32ev>F3`jQ??9BcGbY-f-Tt@B{D9W4-3
zPNlw2)>R{gEEtcdN?^Mk5t?CTANW`Y+HhXAl8skw@U1A^NQy<dl~tczBiD9$V#~^W
z*6~<TG`z@8&6_w+T<`>E|M3&cd5<Jjjs)-UY~~4qm$5QOs^V(pebtLEu)cqo3*v)a
z5pqdz=tsyFy6fAzS1{L&g}vzo?u#$rU*!Jd2EeztnXuYwjS&aa3n_Gj!HUq<sbys&
zxhZTWDa+!P6sX|f_mtYTMemDW^C=}HhA$Sa$S58EkoG~|n@2>UKsuTsb^?|Pv?}v!
zu4`#f)|J?ntc@HGP>;}q^8_u!bj32x+CT^F&=nCqglgs~Xwf2}L2@1;t(iR_pzujQ
zS#v<t;!`qHGV@#B3s!y1=FBi)%5-7(i0-OhihvD|Vekz^)a#*53xQN#V}b`tpG~1z
z3s<zjAgV<>Kg;``o!0i_qQ?>SMQ?BUG<fp9!Yq5I3u#QYDOZs67jICsbiYFM>O9HC
zQ8FBk^E^r@GL1{B?RgjRbsG_3A2$T0v}O+9TAgw_CM9B0W4H}ptzy9y)2n>IfHztR
z5LQIC7@xN|MGQmuw@?228Nwe-<Lh|_$$K3!%2=D^SDoS?!+Im7@gY!bz<<mr;S(AP
z1~4Cpy1?#<N}=!<o-)qYrD@pwh&jI$yMPlyaQ7fOVVkaacbBeRGcV*xiPoecBL$IJ
zHsg-?9u%BSI31Hq!g&_$;?>u1^S9Tc0L21ts7m9(Ca3msi>uEXZ*=~})ntP~k*qR?
z;!QeHd}x|yhyTTvI*RgaqBSYbdlyjQVZ?t%1R~lu>HbVeE%pF={OG3A1*Ld5CgTV#
zl|k;ya?X9(?RH@kY{4D)+xv{$On+l)0~{XxcqskZI(hQ!$<b+aH+uT&#dFQMRzyF1
z_vF=+Xqrx8agLuI|JRdf=YQ>B{#f`D{uh2cJAQtA3N0KQ9Djcry?FZc<O%$IKtKP)
z)=6gr3Qx=}OhH;fU<(Rs-4V3qfImh@l?v1R<jF11tmMk0fHobPcV($}&k$Fbra)xx
z?>XcVSgGS_kPLu#y~5A!6id*yTfu;jbv8<4HqSRks+_mbMrXr$<qUx>-IzNLSLSLZ
zUj_Vgg`kfSLJ|>9P4uPV-wJfODh@Ehc#w4)aLQ){QHy^{GQ%!ARCSX)&+;xu%~7L=
zFOS#S{`k=vp&#MEJ~;;)8QuzZ-c{|p^Zji$Y_VO_QoBJ>h<Y@wam_F3GUw`Kw{f3u
zmpQGe9;8-u#H`%n^8lMbj|2CJ?v~s2D2leXjW-h26n5!0tJbgC0k`Xst?9P?qBw&L
z%|Hl%(_decE`P($7Vt5xsh8#BBwt_aOsfWMqm$tVR!wSpmvtja2O%_WxsP@VOnAAY
z8cD3FerI#4aVp)Voy>o>>V*|dS2JN8wA-)R6OX6F_Z8a$P35hX=ja&SA;gKBK8Ibf
zevdS4)^;bY*4$d&BY)LTCe~vur0g4F0D_CP)WjV!BG$G}F@bg7beg9GdV)cRg!!j%
zhRjG%CawNYGX;*3V6z6IYQ~o-yxmRcVy1~huRIh`8BNAGGOq6G?_Tan_9|pi;47*|
zd5hZF;g?ce(*@4s5JK~=Du$itt)0M#1Kzl8f_$*=&<||?em%FN&EK)BLL4YdI<y@y
zr(L;DAK^fVTIi|~+izGAY98on#_9wr>m&0mNw>zL$X0g7qgljJJe^{m;l2xSCLZsx
zZ=%-Wjg{`4But92L}NcxLFR<JX1l$w+zX|8suoz#CJ(fUg_|-fhOIP_T!SEzYZ^|R
zz^Ian+dC-=W6Z2&8Ch>mO#-l&GjmX_6*JLYPx+w;I!A7Gg8eXOZQG^Ayoo}PpXFyu
z+?2^jxmd+XdG$pJ7-#8;??xCp1S9w8))E7zQT4$@{J>);9Hp7~v)VoDV(}^b!=4Z9
zcwL=~_Apy0{AA48S+)JwU0mruhp<LM9NpgGt$~VRTuu476&<?2+4r^nGq#mnB`(0q
z!QfUm?3L?+7K*y4K1WS`*Wrl4#%$OMQwJpF`ZG-5B&5j$G4Z<uu7&8gKli5BEv@XA
zU%CP+)jfskx+T1Y*w+-CKF;oo#-5>o2Rmo`a6RoN;T0o*NV5rW#*~OLx|*lop^}e|
zq)ZFOlBm=v>(MPW)RoK76=UQzx*h#NcNQ>1K#xs+k}H(J%j!n{vJrfz)diskYmjn|
zm!2^)qi!u;8cVvQm1<5m5PBHn)~hU8EnC`M?DGNha(W^q*ux)JM!flJ+w|a}Y%%Y8
zU6kn5yG%y}2yVjo+Fc*gRjsni``OpbbeQPC9ENBCDbSVZ@b6OK<EjkSg@fSsEQZ7P
zT)d$wd`U^KdaF^n@0-CFOK2Og+I-l2Ms!BBE4<$&u1DeM69Opvy`|U#VaT-g)E|4E
zqi7+`bPa^&U0!KwtAQu!3N0h<MA`gOY+k04q{+vuo7a>XR5J+#cd-_r$ZRgf`CTax
zr(E)T(w%cL(W9HUk5~lZ*Q9hh%dT6Rp)=v<1o=Ekdv6p_zAw<UBhJmzef+rf{CVr|
z@UN@g<8yrXF8$;fC$5a}4*0-uS@!Cbmhx=UM|@o5Tlw`7MuSTK@Xw$l{KWL+&Z}47
ze*5T=bmO>3dw5R$qFn8f0~i7K;GdjUfM`kk*{ny=cq#x5={Jc!d)&e^gsw<@>h!tI
zI3)PiJmE{2@b@Ejxymg)a1Y&Cu_-K)GLx_IEG`ohN}#iJ$f?tXWXE<)g*Jg}!{%h?
z?vbNoXY+y}?a@-4x%5-II}q1gbisvtS2~HI<~TUCBk5691fpCk8AUQ-l8^J853GQr
zu^|bam??eP4klnm?WK4MN?hjvbJG!%!FRH`t<@d`pATlkMg-><EqLvm-9=_oHj4&9
zo`2}5HufSJPQv8zh!hoJ?ve8g593!E&=~PTkiJNk7&0)D<oM?}y2z8k*W1n@FqwoK
zY8!(SzTO^ZOue?haT}tC>E-{tAAi$`6!hD6fmWp^p6MXGc?#p}vbAL%*9rB69)zi+
zgcdS!#)B0y8tr-xV^!%Q%Qf7uFEMqoWrd=sDKPD)5-Jv6lw+mu=1|OMdFHmHN$%2G
zKcm)`kU(?7aU$Ao!cdxj*jb=r;lVn@;bKO~sTg>H?eK)Y(-7`i?~aK0TSQ_?811ID
zbVf>CfNPRredeE2W0*a_=nA~?i6ZdxMsz|J=<pflG|uE#S!0o@(=E=O^2RuAlt?Dj
zD7B{*q_o8`tc;^ZOe?k3>&<ew-)9A<p5V8Pv4#nK^0;RcKp7;=Dm<r^3^1L!$L{Tw
z#-`6PyuZtpbctLtgfD)}OWYOb*zP<OPrK1M^srl+q3IkbIf_gnb2r`aSGwJcnwciq
zMKOMzZyje0^~Gwye^=Ob)^C?T6*dsDr~^c4Bt42%9ak}kD>pIW@KZHLz@$4U9$&_s
zcf)B*0+B@Hy1bJCN0ivuv25xc7o6lW%_h+>8BE1Qz&ra{497++r$hR?6glc{WA+XG
zXN702_MO!L?IQ){MmpjUx+Q|ty%fEwp56=6|CPYpIT#n2$LP5S=9UU11BD`XJE_5Z
zjHg?Bg&5J;Az}i#FQ--L=y!vz|74-+Vg4Qy7GECyZ=6I1=F2<RGL!Blt86YjDjSLq
ztVK27uWTvz?SulF@6O+CcWz4E`8#*#5)W;!t}}nXO=oVZoyp@X-tK++%j_?HAk3j`
zTv4&0tF>m==H#d3%4L&)^V<fAY<+TxaXSGs)<P-1>D33!d0~~ensoGUIulR~Gn2v%
zM7n#Op$<Lo&~q8Yi7y#CrrV>))xl}C==1!IRz1AYP8iI-QaAj*c@G`&mHVzd&-#Q^
zu|L8;%(Bt%cV9KG=AD-8WSXFdD23wlpQfAg#NJ=P=`%}2l>%93F`g23bN(<QU&u*H
zmKlckk?20-*D8<Mppr}+d5`l9?uH@p>qO$^f$3KOSwN=0P-e54K_YGLQzo`y<^h~!
zk5ukw`Evr6cfZw=9;fJ;<_XC?eR<Hq2X3y@BGeO<MGtko?c3@~AT2Rv@oSQJ@8()i
zYR6gM<w~MYgTN10E8%_0`8BDBirE?As8HrhSh*qQdqmD{oJ4B$g)&6~vjN{@V}*CK
z7iThyCSC9)S(=;GFG~5aNpo1fEWeL08HI0uOn;dT%@52p58_@51f3!V6!?IX5K`7V
zSb`+qDWcb}o}r}I;EfM^;{X$zQe>AxJ3Ax2Q3=7KjDWSB%n(CC%CYlwoS)A|P9Fp^
zfeVj-rdpH{b;22(D9w!IOUG^yi6U$+1i*f13-U>ES`g@g3hKtgfVL9Bal`FJ9>qA-
zV(xNC+hfVuib+qWSD3$0kzEz{&o<-k5|e{sNY|drJ<)*&W+8%tbGLmSlyV>yUNB%2
zWU0}Ww^7(Rw5V?fb#3d8It2kowiL)Z;g*tjW(-dI7n5Xk#+Ncp8ZU{;)wo4YW}^{G
zZEAH1Cq~!+#RMv}Kb$~epVA>nR|53)Rb?MtRH}$61+su4&tt?cKE3jRNMHJ_V|r6A
zDjC(z3|z8}q(ghyfSVMwdCLDcRdu;i4Ys2hjguiL(NS2;o98eH0R7`z5;(|^hT0N!
zNDFhmJB-ejTt$>b4qb7C1d=9ooSE+{pR!VF7-P~<p_?jiON2?^v0er`pZG8SZD$g@
zd{U3Ff18{fQWa<9C^f(Gxe2;S**MBfg$}5cxucG=s1E95NH4+zIv!(wJ@TiM0j2t+
zJfN`XJFb$eY`Z~92)#R~YQY^Rh{kLhX|tl2qNqKbk4oQHo{!QPbv`22v?&d$hx`(l
zeFrAyasbcO!~I5TTGz*2S}kAxC$qB=2xw?rqZ36xJNVN|HNMbtmdh4KhdXtAaB6qd
zsEJmOi;9YxD9Z{n-~~n3Z4&Fsy&kzD%R61^E&C22w}wojX5WpYliH~`o7HfE+<pe^
z2Ij@2#2h?0bl!ZYIbgz!T}X=%y-p-t<zvKTA$`DHdsu@&iO2rB{7oBUD<hs%w^LW%
zTiBH*HQcOhv!LoV_pGnCs^Q75#;Ep|F_5Gnk2;kD)(;EMk4e#TF$PSEgO9ozP_s{E
z!(q?Z5yLd|boH%<><gkU#^d6OvgfL9*wG_tX|1`E9>H8WPR!YQi2s3Km0lZj(7e7=
zPu1DG+Ew4kx(keLH(jTL1;$Fz^+EfMf0ufVk8aUtuW(7OC$JFg0IseUZbVf3EyhEY
zm`m{$1rlQQZ1E;GAD(q+HN*;TIQ>%b>Hswd1&7_{AY)-{FnuC4i0uarQh#L=j(s0;
z77o;yW-LxtT3U0kZV+~~M=UtYhC@`^%7*K?BDYvPXIrIO)Wd{ak6f*5jst6&vk70q
z_gBE|;8-T|cV#^KVx=*;!qsE+GOTCKQE0_;M)G77r$fIm80<f+j3n`e77t@AMXQ4_
z?W{Wjs<Nt`AgwWJC+M$Ar>(owlF65%)n0#Z>sYhfT<M%?7pQ?7It=o6^+3prmBw(D
zr_(8#pGO410%v;!g>U%sM|U1qTXmR6VMFVl6ZyKzLk`ovD8%V6%Q@16+b#=Nyly|G
z6BUjDuiwIT6&2~7+x3?n<FL2Dpb?NAr@2ZB4Nq_tt=V<ksdE1*BMDs|_{X|^cKzhZ
zuH!g3<;l920ClEruH7V;w>wSWDqG#pbI?zk-{aftV61Q+yOE9<b{YO#=`p^X*JF1v
zA*cfCEf}vFzF<zmeYzGO;d?=9Hebtju$_MwX}@u3wS70`)*Av_no!NAW2scN_SP<s
zt5Rb)yuyKA^TDvl*KTZrK)KGSKoFXU9E4A98c0KlCG1BxNo=;6>%p2wn0xBS$Pe7;
zo~A>?B_VTGS+{{Jq5~pFMG{kTVCtBo<3xN$x$A3QTiEiws1W#v+@0A3r6VEr5AjjC
z*X5FPPdFElQLrN&e0w$n`IcSDxqdFT7WFsZRZn>>ygCaM^k4}^(pb(K8Hhh$S6<*=
zROY)L?A_z}-BwZ)Y~6J)RJWVM3rU=v%`sK~=ju@{6`nf)l5BXV;}J!F+ES!nFUu43
zeniV+vH!5+3UuK3cF4cpdVta-gccZJlix7N75RR#|DJ+yOq26G_BOZbAlERLgp*O8
zKLVXLlV@O|&BWPK3zyvkPSfhw-S9zOYi<JDyZZf#ic`O5Q5k9pgDb+0k0^H!(H@FV
zO4$_1G?*0XcwHX5D&tVo>oYQvuNi8GNujM_-25Oege0N{%o}vjn(bpe{PCDd`r}m(
zaeUTUJTd64VP=M$H!4#@4j~`?+{jQ?ryWqfc6K;thw9ZVau69pOco?-23a$wQvkEm
z@~j1;Z57j5Kh1=_phq2kWZevwyBLJk`6y`fkafo}_9k2T-D^hn8gU-DY$)!%^`q&N
zy2FP@jwRq!E2EF$tQUUR{&SClsS(uS6s*qQoarPfcVlbvCg6B{GK~@4hSqAgkNy+A
z6cyupVu}r~-_@4XX5kuVF#nHzy<1zBdgFX~J0hiJQA7A(#-1K8Ib=hFc$aTNJQb^M
zpOWM2G>QA%ZQ>SawCgep)Q?iWL!KC;GgW<QS;M<*YUvxN&Ao-*vqJnZE{kk{y+9dH
z;aX7t{8Nh`D0w2LU0t;?n6IZdvsAyjnXXr3{yIjmLh2;`VS9<cSJ;ohq|j!<9({NE
z{MlMP!ZzStT4fDlx-Ukty(i$|Dl|_S8cafh6=2Us@mfS1KPz`h2Dg7P9a+Z|e7v+*
zQiy2Qt!9cEtxi(@1}!!`Q~Y-@UHoWi?@U48!|K=TO`vp#Xk@i6M<!oBeoDIK{=oDc
z9<H$Su#{M-euMR_tuXEnYWE(Q1vuQqnJV~a*-9aSElVj&2_WH>#qtPSThI0&y($mj
zS$2-h%ugAxnxwfOX6GG68#aLkP)xhH$`GKIu>Yh+pioN1pZO~_N#ioLuQM*&Rb$3`
ziq1(G+%qe}p`mfQ!!N8M(iC51Xi}6$hczx7nW=m&^@8cC8JXQk!N|-Ccg}7)@S+19
zsNaF^!&~pgg(IHV$J^{yGZuEBtE=0Q2ZA{%5O)IoZ`tKso^<d@;CXI~mOX?hw9QKe
zo{BI)GNq}?vvcT(^G$rL;myFE&N!5UA9V16)xz0=VZ*LLa-L-W*Mak*b3QS5*e<_U
zj{7yMHWKxnZOb`lBT^PIYy>Cfd-ku2KpAbjO11^wfzs~kr7_H=Loz8%=r4P9(1TTO
z4=G5==G9n*KmN*oiumVGmZr$d6{^;fE{CPm-1@2TLG~E#u8m|lLX;{zm5YoyN5+rs
z2$%4qgFj4%T!9t3WXj5bf8!ficdf89&7r{L1~-r9O=jUiQYBmIm78B>5~-k_Lih2)
zT+DVFeX8}_WLPf=8sFyGY*HK6jrqJM=;4%3FVeAhgVpeGPRV2AGac}mdXN)50I5Cl
zzJ?EwI*#;q$#u#QZv_gJjITYSgi%*QUD6Rkb8zW^&myPYR|#;#B|rv&V%sDPgR2rT
z#k6+*L*tM<?14@m%m4i-o|d9h3HD$zX%2x_4$HC6^w8HXb-8R7rMje!=;-7mgm8mz
z5J#I`-rDEG><mNlurQEh{@IjKAwt1XSRvJiK5Uab&GK}5;{yR~RdSwR=1CJ#v0=hT
zK~N|us3!bYBB0puUeWSUpK?=!A>h=T-J>c*U6(bDV=Z7-t?Te^h;f#d31g)8p#0Hd
z_w7SZaoIauzDxmhMeueC&kBxOymJaus1-exVPLQ-X}tN?iISB3&l#cwraB~@R}Tvi
zkh5Vyryj*4`kzh@?(evmu%_ZPPKUUcquvk)WGKf}-n0nWV_)9yv7*m(Z~1)4f0-vB
zj>dkEx7QO5LqL_~L39RZ_?$3O1=nRa9rs{&78fyG><!ogaSt}rUL!hVTzP$u)6$6Y
zxS!4ncssqB0KXDXE^f5MAj3O5{U@S8#c+Oa5Iqd(M1xXV;4UVN1A%WFmiH6FNCjX?
zFdd>IB2^RnW>QM#5|5x0?04zt438p$JeuVt`h=&(U|V1`ruv+gPN3^s6Q~3M4>W-)
zG!d1IJWQK%YU~-sO(^+2JdM*nL~d=L)7svV5=~sHJqgxHqHWC5tXafqWZTp~3JcTC
zd#mi?610&sqQ3xXVAwszMwP=YI8T97LPxs-_|+g0r4R_qZ+XuASjA%w)0A*@C0!SA
zr=s(>UKlWkiI7PhPzl{?T-^%<jtHyA6r8X0wzTh`(?t9y9z^TgM~=Elk)8{+J*O10
z(zHy=h~a7StSIE-8&A`mO}h-urNN-_kjO3WL5e(qg1}G1&hIn+j;4j=6usl~2H!LE
zms~8v8*B}`ozDoP?-+5+8O(-{!nl~_GBG|P(RVnAjmnc*p*XsuL{Wk&bHlQTV9{f6
z;1C!b_GD}yAqEWsl8l-6KS_pz=66|vr(-cbfAn2;g%U+W?1pmL0`(ou#yC;(4IMiP
zStLGQLKG)So{k&{DuKtLE*=hf4%?Hk=cqy%15FMGu}}!$ET3crp??iMd{2?M07_Cq
zOLlPB`I3&!fHeq|oQK~O)D%7S3`VA>-rbc&4U=KrVfm64QsX}FYd~iSn?a)K2o#Xc
zyuV*bM17*3mVcdLIFLqH<JEd8IK}5~xx0KepUx1`kVx>>)}f7C^EiSqknP7w@do`=
z2fq9^4tgJEdi!~Hh7JYx9j0)(pb$H1*Su;3GXVDjiSjwY0Fy!#Cz>$W8h9M3Rboc5
zjX?bLXpEfKSyGgqvy*r<gQLlFn84!5<W1sSpzkC?9TQTGvxdNN>=_=ECErc4pJ!5=
zuXoL`5{%Lcz-frDi*wiwm^F?<w19#p0tZ&Xatc}tk%_1)u3lfKO~57?Pz>sd$TBjU
zT$E`i^R~+x6Cfo9XsWHL9=>U#fi;V>M?5OUAbe`+BaT?8D=PL=&%&D^>^6`Y)VlW-
z&vP*&p{1Krde4i<g--$&q}p>?Vqf~b=iuUN(@|iaWr7o}<eCW5NCf}pWs)dArpnqb
zl6LWEU9ml=ChZ@nW6xU~_G*p)Z+!^x?oPb3_b17=<@VfaIX%LEr!`3}mgM_z2|wN~
z<HxcjAB+C2mH^~kQ-E;tT8uDUGK-oip{CT_?8Yxq9UF}j&E;UB+*<3+B8ys;WYGl2
z4n!Po!#ID_01=HY(epe>#`qs#o0lb<z&d=o2^U~BL}<qiWSG!@*Ki3HBVc6v5p)yy
z*y~|fYEiE1ViZ-nh|R5=DC8-DCA#aqcA?cpux20&x~M<GY<}8RPCiCXtm^&2k><4t
zTJa3_7wyIO*G0mq=MJ>y&f+5$|Hu#E7RP077hjK+OL*&mUaeA963KD2`TQe<T|68h
zw-EI3gLE;bc9->#x_ByxeaNuD4Nl&)A7Y_7F4nKNi)khKLwbU_hqg`xC*JdX2lg_;
z%GjR598)DWQ{rRGwKzcZ7vtze3^F1g2aKM=<xSm0`5d&4Ig1^?Kw!uj3ThYdLRm-Y
zR6hejPF|TsvRIDEb<&$rW<adz+f3NY*RP(H>Vl~v!7}tvC*jKhzaVhQD$QuF7*uwW
zJu?iKFST4~X306lS8DRHcg4!$qTED)<$;h6%c>-q*Ur{_CS}!RW07G$Zoz;Uren=)
zVz*@|s7V}pO;V+~%mE7}z@G09vP{Sc)<N1W-eGowwd(R-fh-I=VD%hDwm&8EfK7X%
zAOYtA_71b6ccLYGcH#QJGh@2>M0BfcpLgd|H<`1$ZujA$@K!iPteEbffA-==gOX=n
zA8_Q@FW+>RZj<(pCIK0t*dU6pz|&w#Q6@vF)0~v)kbwJ8yIPtJIw))EPAZY26)49t
z!r|%0iW{V6wO6MVt1c?F@?3lr-g+T$5qaQjD5PxH<l<6+VK)@u3};VfHF}}A%JqbI
z>8#8npDPVg9ARiQm`g}EQ9Xom%eN>9$N?!MBwcwP03$0{B!2i)c6QvaN!%^|MDtq2
znR;@`T*|mVO!5UhOvrI0_A5^5oQ;)_IWTOUhl=wy5JnO44WWL8Rd_yEti_k+Y6r8S
zQ9UXY<ffF5Jy+kI5N7f-^5i=LBA#ZL!#d~>rx1dseVTDG6nm9CgJO53OIS>zL;~57
z(ABjLbdP613~{wE&^G8zG$DKe$+L&a3N|rmJVKo#MTr;xgfR1g_?B=YymXZK(WCQz
zHw7NEMR$W_=b;BQt6hRF4@wAB865XSVq^H8@%XfC`a?Im-FuDbej|FodF)MHRC()7
za#L3yJJo4Lh~Hk)Ut=AkBJ@P?U0lnD9KPysXV|MU#Lq4SES{6sph3eWts!R#!Q|#l
z8qurDAPP4M*K^K36@i>Gbo8+V+AU?<VJbKa`L6zZi&f=wXvb%b`Dcy!`_`D3x85?v
z`P;=(L9M8A8^Ps0N-mpD$GwvHvjG+Udz6jdS*|)pI={v~VWiF_`(zQ{|1e6qNoHfi
zZOpHLI%9gS)~~fsPE+!9d7267LEf7gl-+Gi2oUGnjc6PFuJpgnbnO0wTf{u3pL<K@
zL~G^b$_PAvMX0FbbmX$wkn20;Q^{QlrhYjGZ||muK4_SCS9#_>dRb%y0-ya87=f6)
znUitz^$D}jKO|@SM<*xyuC?Zr#@}?v?wgUj-a+(QPx=b);?`{hFiU^oTVY2k?S>gF
zgC@%vu8-K2d}A_=R(D6e**~}w{1VQn+>uX;CpxWUn<Sh|#IEZL<jGZr+Wu*A5dH6F
ze2uR$F)KN@8N6eBh&;4lHOtQkGhX>j$paa}-?<_cq{9wqA&j_)cG-i7teliL%jMH9
zu?g_caSCtwFt4tHdOue^9=OUix`uxH{oJ<HExVF$qo0awyo9i~Q8a5r4;#^!Kcddd
z=P{v*RD#JB1K5FSt8Iu@(`^Jo^Do4Yjt;BP=EuBm*t;|_JITwTeE4oQysI=1;gv;m
zkX*Xrh=}O;zW1g>ATy)1oN+GBQP$@K?RnyT?>G$09TIo<ytORrCO52XzF<pjbnmfU
zL&xAuv`ZA$vcA!MclBWAUI*PT6J*qlkIfd{g=t^LfwUid1v?e~|EqgHN(*ssI+MwF
z4F#L7N=&?Xwu(0U{hB&F897)_@%^5-b?T63mxQ5Qyed&NNfU3Vko?UYd9_RFE6!$T
zl)kZ#JmDB2Rgsm%Kn?t#Y#8T<c@k4p0v0de@&svlucb5eVxk-_@0Fz;`uP{xFnYmD
zM9h4if%qBB!dpz?njPbb-j|PB7!tB4X(n3%yX3%9H^wnJq*u;9>+Ap5fqY%Ua@CCC
zvnJ}_PZI^}{5NDQ77rFm5&IG9p&HDS9FUmvHhQie{uKL0p#{B?2DzlH>T2t|Sm{o@
z<7&MBAA4PQbC{jFP;s@gOU3QfPZh1u+71=#-4@i~OP|xW>P|7A2f%q~wOV=`7>Z?*
z<hJTYsB^<>wyOVzT?9gm3TkmOulAy48)O%|=wx<&4rE_$80YMDJO3^-VDaM+Prj(|
z&9s8{p8@Anmiaf^^pIQNX1_y21+<w&-wTHA<{Q4iHt>#DoZR_lal?kyABigInY){*
z>?>BY7z2N4BeIz%yvLoL=Uf7`H+7wB#T~6!V!%Vo+*$$Q8pWpZUt$3s#e~Gl?L@@G
zz;z1ui&(4JLN_i&2M#c9P(ujCfsU$R%M{0~NTeY}xnfl=LLBarILz&MtcEa5FthEQ
ze7RfOUa*2X*=28=UbU{b+2=~0IyXbC$8<<Ca=>5{jxoc#cY+Cy#!j{79S(f^=@fX`
z0d(-bj}>-Y1O*Jo6iDha{I(p|GiPOO{@;?*jYfbT`R0qjv`Yipri5!p0)U5+X6Su`
z12^NPTx(C&W!by{o{2fqhMKNjpc{rPa@;BXyiJU0YwOEa^nG>}&f-o{6MN=U%deVE
zzGj<=PF=g&<vl_F+o2L26eU}l+Ot#4&e-;APL6JUmCNHx)=oH_Qi*|gX{cR-X$Bz=
zAWbPdT^z33jM8#p*S8tRVLL*G^E}IMq-s=(aJw<Z%Q2#A!+hDrJ;fdE0_R89VLc@4
zAEg-Kv2sB>i?Efs6D1peDR!EDKiU%Ih=>|r+Q4(SAdK3RM5GAmmBA(sEUgT4tZj}|
zhAG`x{wcThIm6qs3~$S%uhRT|mcjnLWw28L>0Km&!A2>|U)GhC?SXt#P;QH<I4Vb6
zKRN_7?(cbhTzLo1m#yBetUz5`O&1DPC0S{c`ZsFH&=ALMw|`v5Z_D3r%hZZUi=KT)
zj~2L|*4V!Nw619ro$sEoj*--irW8zPCZ{xP0~b(=c}o}$z|Hb8d7{BEWruoGC_dL9
zefi4J+_@g9y>QpA@0tqdfb#Yxt2?KX($0DQvFmm#xQLl6+u#kX6$Z7tKUYofiU9xD
zt?0RTX;d~Cf$R$B>sW<PU^lu&KAYa}@?9M_-@$Kl=^ZP>{iH8f9b!Pe56xnS*jQw5
zj)mzDSyq^1O>n(}%(V5qG-WmN^g&1nPXkdfJiEYiIqU*=w1Nar8#`Y?;wn01rFQ<s
zvsf)T7IOyn$(@bzIBx?Ma9i)k_Y}PKE(ih}_ETI(mCd2tfkt?Z`F6a+3iG{0MZLdF
zK^^QFapwZsl$^(ew?k(?>95r9`e^0({a%6nMA6iBg-A`|wJ1GQS4f~badtYEx%-=i
zh=b_$$>T=!<n^mY^zEaUjp*nQejdJt|M~07zr)Y(;eU?5hqsR;rgP=cYp8hr`9{dE
zVNz~L`%12ei0#(=_7VN(_z7YkH6O!&26^)-bn}e=^HbdXD~x6`ZJs`(cSncx!O`Ke
zep4ITZ%jlRJC!ESdX3%WmP+;Y^y($g#<!6Z{AzA2vETUHw3O*#Q`c!JTLj*xm6rZx
zQ;)PI_eg#Ij9(`q30}!XN(u>bw~;RBJq%nF-^Hhz_`~$ruYugUiw78lZ!P31O8xxQ
zn2D!s<S9^!d~B9H*gmrUO+uHO^BS3Khs3ABdQ>zS!i4OSuGER1_>cewpdfy|hqWJ)
zK!$PXd3JRWBu|fL(+u6R+2FwbGdO>IRx(8!8_q^!K~p4&zTy1&0xB))*q}}q_e@P<
zV0@ua=J6GBv@ky)<<WU|-RtucALVIv!yM*GaC91;iW%x_zoXeP8REHo_mIS4F5N{H
z`UC{e8wwd^Og-cYuxo1M(J1~QP`?)wnQUGk*)@2yDacKxt00J0v>{CLbcESk-Xu3g
zqcUL(C7Gn>V<|AjwbYf6ph-fD5G>zUPYzF?M5l+3o;~SCC;$D7R(Oag6IKwGzP`d~
zYB~{H_Y}GJ5$ZGx*xOtIy(DwqDC?s)C+WH2fQ{l-^mk|fqp#g4S<#_`Md2Ug8!6+E
zFNAH)CY;dJjFwkTX0W(G+8g7T6cbVxxO@2Q^vNq7H2KmqrmkSx@C;!jVRRS?G<~>j
z2o6+8j_Bd~gm&U$1E+aBE@HtKjUGRK7VWAI2ZpTxmZEr$dvCnYv#6`PE|RKyP|-_A
z7s+rU7NeE5(@p-U*kcQ;25^N4fJ9SAIKeQ);Ox~pWrxU!Raj{O0kx!C&PSRsPD~d$
z6ddBqteBqX39Q#VI(e@nBeA6Nt4{HcVJ+>vGvONH{azz#Kfl>v)uS7&^(5M4wMA3v
zJsD?LgJJw8*;LhqR*1DfO3(j$mgF~^s{AZH{|DB$*KkR_BEA1>Y?}A)cW@(e7&<hX
z<-j`;C&#ycA*M~(9hxz+dtm*1T^`GKNn=S2^%)WtElp&H`2;@%q&Gt7&_MtQ+YrN^
zj6%`X=Iq8hg*^nsCdt5P$K#(eAg&lwxFX;8Vk{nOu19o<u!6eb1BO)Unq-sNkgiyF
z(6}9A)t2yK$6Ri0Q7iGBHk>~7dNNdiFDBXt$d*#ec<;J9*OX8KYuX}`QM&L2aMoXX
zl|fc{1POx=nSq;e?*fP%hP%7*%O#;*QKtCR*Lo`|b@C>iFpxg4xxa#7AuR#|1?Ed1
zVuDua4QG8HtX}y(!jqE{Xml8!K#0zLj<BVUyL~pd4im6IrZ`0LQg%f75WRZow!%@x
zmZ#vLd~yz>=2F(8FCL=?fH*#bIypNV0UwHt+B!q?U#&El<AL2UDdCENTsq{vkJogT
z6yu$#1bc)GQ=|OASki&cu_Ya*LsexY+5Vf)#S@VQxDZT+bphlLjl=+*Dkzf$NOo}K
z&u$#Y?1~tUIU5IO_USCgno(qHD1bZ-4QNwVh&7Bcwu3kzF~xysNq+xTYSOAxNR(By
zb<+QA^;R2%h2ERGsH6&QxoK7Oz^i%?udcf-t8CZw8D2rnN=^Jgp-@M|7!gEP1XYTj
zj3%(?s8}3Fp8IQ%i4TR$zO%I=Xbo`G6i_B^W87koT4c@L(;*pq11Hw`jq@8nm9R;o
z!H@y6?nk>Am8>aDQ4i%qMr?whpWvG1`ETM@p%?qS-I_)EPfY2tx5vH1E$`0G%Dr^D
zS0iImiU34>(R$&92)*mqtEV@2wX>+pzKeZs<GCio=CsAP9Kv&S)^vHb36ZGq^`Vk;
z+>@nz1-*IhQ)EX!;01j|a_8C$%oAi1ZVL_)*47fZHhTP&JhxtP!aje()@<&?8=2V^
zEawW9wjy%mR07k`wFkDf2vzVgyK*jTs{8XVT^iZ=rbL5C5*7Ytg6clTW#=6mAwIuk
zFLEB>Y$d<NYJMj`H^LzVFktlVB#Cn%+3!$u!8M%4d8?#I-f*}TvQXX}YwMRwV6|{7
zR!CGVtW@9eZLF(U;ktoUrnS#beV+rXKH|WtV5hDYShZ1$_S|@?&03(Tol!cb;fD6a
z6@!`taT1u<(QL$2#tYg$qKVpxuiv?y_<DIe{rV`ab=s-5$l8WJSg2558!BYTel=8x
zCYjlZjb1`pWvK;94C^0M?;#6*P003a6v0n07cWp!_QC6;p>6~O?t-)jH*mxHJBlk`
z_kxl>JA0wlv%T6?RUXmjyXw8%Rd??yNxpkmlC7<KLpX>fn~HeFD}l%EMtqr!Q-L<@
zkqPCBr8x;1%AEFs!n5KcO@NV}5FEf51Clg<V2ax%1`e?gw^tIAttq{B>Gnbr!xkzY
zGn70h!3TDKcv)3%z`bty$bb6x)e{a~d(7}@EA#M93bINec3_5&CB6=5kn<9fcAgVO
z+H^xi=UTR%zXQG7cr!#qOVP`JTk~E_SQWDHZmcDjJiHfqsx)p@xDEsF6NME(b7W+o
zpim6Q+uinsxAC-Z{|!~+J@~cP!sefS%sx|iM}0tMqOV6L9Z&s&;z1HF!qm$bak(rX
z23s1--ssj1%F>1oDy}doL!gZLW|<VJveW|hhyPw#PL89T%>4{5MyW297vYL-Auvn#
z)|8mb9skURd={BMQjyth)n5~g<l}-WSxo{DU57<ZUVO34N-3u5gm9rZ>&*^G*_-H2
zjjVpF?v(kK+jXawZCSTJq>-N{6FWQVgTFkZ&V8d{D6p2G7btMR1zoH;JId~qf)m%k
zNx|-9A&+&dwX%pY{den5fFZknM|^jfsZy?MWr(0schsBDaBdQi6`dsfx;fxP4_IWN
zH*q@VCn*~r=5cv~7Fwln<!hvt@Puk2IvX;HyshdLM3`G)^M(qnwPdXL9il)7HjB#R
zwNysrjtif9cFb0_HbdrnY?MT{#uZgX_2c=>seM)$eY^^z(w_aq)kYedfVp<jN%D5e
zBduj3wa~6{R&~87qJ+f(M4^Cd|0+q|$e$!u6Xvg2E1tt+S`Au@P1#_SN(NSU^<!*V
zO@!oJJ3e_4{qYa??#ttYX!{2KHJ?9k_WP&beRnV#9TdgE$;rw8*>2boM%xeWJ-FYz
zf4_O}52p_v9z6WdgNOH8_wL=pauh58HJ{LEcK1}UW(JN%53J^9MsK;zf0fY-ck;Bv
zovbtNEMRb~HqK3gp<KwVv`g%Y_a4$0f>2-2#=Mg%vEOe!f8N5mjc8U^GP${dd_=al
z-<ckH4(l!cnZkX06HpebpbbZaPMP#c$e#hnP>{<^o+KM%&!o~0S6XR>E;Y>RyF3=r
zeptHl<7fciG>7S%#HVl*O#U(B8?qZEewrslMJaccua(fv*$)bzD(|CsQaE>bqG4|P
z4uwxPDwHXbf6TD&*jV9%yL`f31DmzA^$pX48Nz(bfJ?&k!>M&p7tXBxgUmNND4)*o
z-oJ?9799S#8!QV<)fC>6|J_wQ?Opuk^6TfP-~OM|7xxeQv*&xvwA%Swi(!=yoA{yC
zAz~CBI+96_<E<@?U~=JfFr`TztA80efZ+!|XT`ik$r4cqvx)hCeS94)rnoy|RgyB8
zT>Y@5IQ@mM`EwY|xOWj&$Is?f7<^QE<ei%6D~to+Xg8+p)K5wlfl>s5&t0U$ex8V*
z?f3Xv&&bx6-=|f~94#dib21yDUpn@Pgf0H5gbVB75gb3(BFB%bZ$0RemMUW?8SY}7
zT=T}R#fA$&-$+Ew1<_AH|MUo~g#~BQYuERL!X>T}_S>c)#B6N(rZE!++%6toVcuw}
zUV|%{Hn?~0uI6pS&;mF^N=o6xBS(G3DGtsv-8rUX#{<568vaEPWywCIeiyjIvuG34
z9ggMu*{^r)0pZsH%B$~9iC*|3x27CT&k&UC5T5jt_@_iT&oaC3+)w46cq`Epy|-<b
z=}byd+8|6jaK8z<%_Po6uqxGF+72fA*JmIsDD#j57F+~-6|Ua*uqALMzOCCmuZtwy
zxkU)fFm)8L{#YFQJ!X1sKb5h&Z*Wi7mlW|)5jN0PRnuh}(@Tsd&1OY7u8BOAzI~e|
z&Q+b)ju${$V~%+MH(tx){rJw9DC6>KP<NzineFn<?k8un^R2Dd?&_fjlqS+glKeCq
zO*m8hO~5ylHWo20Orqctr-o6urjqGkkWjbzEG9+$=A_;+3Ls&6o!y{wa<w4rvU8Ba
zkzl!7wIGwB-_E*F{h#8V;DMDFGt6g7yoIVFZW}S%RSd)HoksKq1boIHE+aeyeMW$|
z-8XxR+-yOtupVGkXlf~FkOTn^C31LJa(XX~(>x(1?qYuLMg>8!5uK#4%yBNij>nfU
zvuE;EgLLW>L`(~4ox~lBX$^s!Il9OR*GT^Bxl+`fpi4i@b2dK9;=C`xEtn-)wly-l
zb<Ey(v$KP(_6z@+wC4q-i`iMoffMn4aIZvXn@#vjYiUX?GN{A;CG1K(&BAwXZB-sc
zAc@iikg^7da0Sj_A1djG|HGfq@`H!X`wyBA{@4_4Q4`DV%a0Dlc5%|!e^K3|6OAY}
zSRP$(Of2FGJJ%!<N$vl8Ys>w~s45rUBLy+znUB{ZYu&`!-Womtt}CCcUfB+@Rt>qL
z`th9&#!f}Bo+9%0Heog?VwAAOELvtsd|(tOKoWaz#z5A5+QxCxS~A8XOg&ao+{|t9
z&OQ3~hkFk16hAht;q80@^bN`1h(h9q%%FSISNQ<nZ2AD-*aQ4`e}Mna2l!IWq?P0Q
z_uCxboAr<H-#`81`}fbs_ftQ<+0_`uEfJ+Rc8I0gj#gXK66s#Uhx4<uYPlHA$BMB)
zSQmmTp_=kig`-(P=r;^_7QKG;jNu~^m4(}n;v)IOmr*jtbS-^ZfjLkjf9zoEMdu6{
zxcsJrRaVoVE}$IqM*GRpkIFz71CqX733l{X@GaYXa`lz)OMeZ=wT(Ew$ziNpS0Qb%
z#h#|2|Mq&>w!-s{=P@7<yYK&;OOQPl8HafTs)(a&!?p%v)m)}^BW-=iJxp16=bzWx
zj1|rH=&GS(6;eShwSLX>%D1IW4?u_|IpPKN<NOU~5<S0|Hlp)9Nyhk}_+}}Oa3(;&
z!C0xKUv;bnaXK~YdR;W4V$_I6{RqZ;-iWS;D?{PJhf!s$*i!3PrNflb%0sfhT?xbZ
zcG>B4%$%8Skh-h`n!xLQkF_6oZGOP9o+aKC^MTg&5d$e6_xQ43gEq|_>+6!Qaf)>t
z1YE&x<lIOfie3=_%K*VHb*LX?tT8qDVTT$>C<OerF~LM?^YxM-!QgV_0qIjocpnJG
z8zC?|()TMYsXqaTX~lU6<1+z}n@lib3QDm8|Hc{dd1lLbOx{xtl7ua?h@*$H0S%R$
znchz-5}wyjShmsettrwhNT#qvu<?@3W@VdO3McD{D4Uj2sMp_T(Mv?^5?c3mjf@0K
znHTrV+;bK}56@>pNJ^Zw@hq8MB^4{S`azsYwmx#Q<DGMwPKQZ-uj}de(q2o&Q>s|B
zQ1o{tC8;NB{7q~54tchi^<UcS1;UOO0X8ZFc!k<}Onf66qpQnub)Pcx8|CJ`;<0|N
z7jfjP>}#wc+Bjdn0%N`L)A;Tjb~Ui+*XZ@Syz<+RF}U`v4XUk;d9tCj6@C8P`ymQb
zC1S`daxja#k0th^AXXOf1{C$auQcy1aYL9Sa*zAe?hUhINvsJK*(+CmginLo-$qoD
zYp==fR|Gug%31viP3wolF&X`0m&eb08+m?~xxN;ENqt@UQyK-j3^_zbpD<AN8r+5K
zzeIqkL3dl0gU=>?PTf78ZH|%WN;_O>r4<THvyVa-GZ!M1jLyiTm@dl#hL9uV_ai!}
zm?%V8|1d>JA#Ou1ImSp6Lzo6JGkM*rme8ILd*0;}9hWr~a{5osp;0mw5UMvNe#SKr
za9y{I(5-#sd))$)M3M{!=+U+-P}-xc9}gQ2*ck;D4q(~is(HFNdpR3hr4u&#LOThQ
zN6z6SVi2L@!o>=LLhb5&YVyK!p3G#Vo~ZaYPpfP*KlajwYgLcWhm<=uXHfYdlE%A>
z8Sk6lMR;sw3S!*oCN~W2Jt7+)h{Ijb&rn(2FYUiIxZL;6(*}y>u%B!3weOjWtyi3u
z`di^-9be~p+7;BDx0fO}sPtSxRr&t<xrV}WZt`jiXtI>{8S1uHB&%4~(8HN80s@^T
ziNpdM&=~tF%P+e#BvChT9b7Z#5$P)$J^=++bgWNCaHnn-Js`m<J#;|O0%cC}4;CXh
zjiqQ6>)6z}E_M@Dxw^~Ole*4+YK%%a$X^rh=R+g<P=haraWA>ZhJDH1zACZ^Pn#Z8
zyR9d_#?}HDoD!_<(%X4{gF(n`Yl)$3)e+wETBu$Dn`&?lecudNjlH0!82iFATc@$P
zeInF#(x7sRg4)1kyYy9181k~&C`m^T6i?A@{io`m!krN+j)a=xl91D(_XVe9pK`DU
z5piG5x-{H(#}e|V)XZ$cF=QlF6Ql<cL6X|@M6$!j#Ru^UERT|FzTH4OXY}#v7nf=G
zlfAcsF|L;Qe6`D~^3T}eDs^sLLcZO_x0*P;0WtYda&YtX<AkF67tR}cL#<+sh_=%a
zX5#ywyW7#9qHS2^A?_%czx_#nupK(WQBpl*ftiXRf5=I|k-VH~_Nr-}BHib$aeB-(
zZ->f1uime0gX4jQbv8WcmCIW$>GwqQHsX7eLfV9WVrNhB+KK7`Zdb4bp0jS!liW<5
z1cKPsk<Ki(R>@K8iTM&K@0c^rMb8oa!X2ykG_#T?h-Y?0cre(ab&%Al)=YQ-1n!CM
z64|sk^wk-?;NOY5Rt(Z%4TY(hS<<k_GPA{^9b0RkdXIay0?@b8>Ms?d-!9Jw{~;Z)
zg-HIoF4G|l4HHYutt5ZK{Bu^OLK%@Rx&U|SNOzI3=u+OqNPkEaKC=Z)<yIsWw~Ih=
z+z>A8Zn4*@GfNpRZe^R4nxybJ9Z|+%V_mX9F5YtF3{6BCxo3qB>u}sF5^UU*vtncH
zD^%IhDoZWk(9MJSaVRDqx)dcaIRan7<QI8%nfBRJs)*Wu&Ccq1#s~L0KV@e@n%GpM
z^V`%B=8*JjtRFbd4vm3d@mDahXwUJ4&l8+o>eP82Pc9l5?2fut>T&~ZIK5=pKqfp#
z=dW}SwfXOONJyrocBNr0!cCLKNaOe&JMSlPEf&|W4Z}8?dX@t=)~?(q$L0ouT)^i#
z{Ly#E^(%3u9<=nGq5P<7I3Ce4iusFlAK}$ihD&S1F@mGB@+s3B4kr`Ojycn^{Whc&
zeh0m9>7I}=du=(7T;9rnl)!3k2qdelDexQvex=WY`@WRmp>A2;-&{M2k6;L!)mK1`
zMqdHHgwSJ4OHt7XoB{7$)<PFosLZG;p{cTUH5aa90^+cQyaoOJ<os!U5GQJHl3|~H
zA;eWt^Vc>Q_$qKb0p<h&t|$$>ptG_&O4+lTdiS8C2(HjS|IVsvykiC7OCrNQW}6(h
z_Scga-?u&k=YBH4xp(gpSYte;>7$&nu|Hh{+>FBCF>!*w{w5zV1;uu>il80f()CB!
z(BW|C+X9wtz&n2BR^a=^4W(l{repVO!N{O`|JA(O8&Q(yS#BFss=b0w%7!yd|2iSN
zn*}j`j}oSW8rLgiR!ED>U{NSiSc!+UE$U)sav!PA2sf1l47-&dH~Zk^=SlQ!Jc-sr
zb*||@htmwH!gHw5y6ba~lVLI<$GXk!pTM+N_*~0NZF@ieq70r(i(Tj~@8}+p38`9W
zBBg)fO9Iu2)Y<`_UhymBrGZlk!XFY$`8pQEozz^EGm9nT*{Fy%)qm<YR=K&(liGx+
zCsQS6Dap+aR-70cb3YN0Ldh5_!?a+I$TVngH^Qq0T2lnCiSu#ZGhCmvP~499>u3*4
z$gee$M<Dow-hAuR%8<a#u^rrkh*8Dfxz+c$<mbckX)yh)veu;K19m5N(-R0Zb}C8^
zSqmf_(#0Ca#Y_d=d!;$9RD2sEAlp>b_qdYCuLfK5tpIMjA(NO<<Ev8_7-^E~0f|nL
zlNu)*)0TOFv<}tYk=hru>wkp4)+T&Wz5pKQTG4f2?EH;yad@*J6!N03`P+v@&Z+Lb
zg-6!U-X|*Fxve@K4L7zisV=DV^!YQMZ2W7f##RcEVw^}gK3IovW4o&x-ork9(lYz1
zSYWIEn{Q>GM{E~efk=rDHfup&@89B^lu<b5W?L}7x_`d74`dCt>et)xS&<EAC@yD{
z=9keh8BCiG=#py!nVTlt-+Y(A&WwKhb8mXx!g~Zco?rgFe{uhtuH2LMK;S{ilQFu!
zz5SfQam5Udd4kgdtFU;qu2>~>?3KPLr)PAZPz>3hHm8w(SG9DVZaUNv<F0D0!X2%p
zpbn|2s_2h^(qqx5y8E1!(I-skk&dNYfc3a=L*$jJPZ41WXj>K6*%131puN|yKfB#7
zT}OYG0I6(De8<<@c&%kuEx|#bWX1G(QWWtytSFsKSk>)sPVid7Uw;+{?r*R{-}iBL
z1^=D)E+jUDDnQ<eI$jwR_vfc#OBx66i445YfNe>D_uAe1Vn-_3X>5J5OP1Wd=<9Ey
zpSQmFA{|8hq(v@qUw{2|v~$5-rT1UNLtvwJ_1T~B(f&TB&wvZJ$Z8T&ARIHVB546l
zmL2%^m#r^;fliR{xCOP*z?EG<kI_xB3u%wx2f0p4+kpP0hcA!kFbXj7<Z;@&$ckjl
z>Nw#6C`)yZW7~ey#(LIaAn?o883^j-C(A&{=oYCBS7s~LK*uQS_M-K9gQb*`-J*J?
z{ngVcos86*h>0Pbrx|9j=~1Glg%MyYHX_jViZ@z;4-J~Cgm0|@i5fllGVm|LYU<jM
z6s&pnCW(GX`#?L^Y9tW-ujqTz3eE{s9M~C;(d%$y)P*Z^wGw^7Kj+FL?C}!B4<p6F
zZ^-<Va}ufPRTgCvjtm~iA*4c5!GWu&5bqz3WJa?Xmm?-(giKwZYA8mOF$dpq__9=h
z)}DtAfhYoAulyaUPILVb9>7h3V+oT5@N1@v;rQ1gk@zXROC6nzwoBD5_Xa6_@X3)*
z8Qxsl`F3&a?*~Ou4G8XHA?w3po-)~SXr*tfafyxS<lzfZd#@JYyFbj%vsQ7b@fmWc
z-w6<gd-z|l2@H*g!=Dcua_$>&e3$hMin|d=m2aTRhT<MTO+Y|)f0~>(;NUf22zw1~
z0}01N`hJ&khY;jZ0h<|yw#Qc;?Z>C-)O1hueQ<=bO9UIEsMaOqT)x4-zXQhC6Ff5G
z4AN;SEcPtBUKW80+n5x;b<4XRcFule>>5<3MR-dGrn|to?-1m)`dnhNmGKSG)wmGw
z?ccOtqIQzYlPFS|+jXcWMtF9xnvSccBh|1o-O|>OsD9%FX4J^S7h;bw-w`RC+ttt?
z=;0qbY{}8CbkcE0FIZ31?zrljT)gQv*V(N1CYiQ2D*L{(@Y`HpcrD#WAu|%>&Dj`N
zqP2Fo)@nP%rv%SJl|2vyvCGBLY54XE<)WxdPmwN>6Y{pJY`Z~TB$^9~swO)y8|={g
zLz}f`4q_a}@&fB#i){$T+d5ANd&_u)Ib;8v-}~QBkH^`zmby#9MhP`|m;f4P`@l&n
zC&@HO4+dYLHczv8#XF7rd-HX9b%O7jUZ%Bj?aI*YVikkF9^<&I97fy>JrtVeOlUq4
z<lK;gf^&hbfpjHN1<;fFpn}2Tpn@KKR4Dy1Q3a?9+Z2%<Qe9dn4ix_~qg3~Y{>(+T
zVb^<c-X}RKN2!psWvEgjCEe8L*ln=fD1H;l9g)=-qeRNkvC*R&HJ~?$f(X|BD7&P4
z+!Ao%To7qWXDZ`-aJFj=v6vQ9DzBY!;8f0TpIqaO?<CdPIQ_>gQR{cG@C&TEIGeXH
z;)bAq?_{=pvWZFK5jt!vIV-$lXz@LQm}KfByFccR4i(Pb6li0M&YVR5&;y#)Zi^0x
zEkWJO6QE0Ql9(B#<LYhf)DHGF+P&9^?l+<b9Kb<0udiyYYu9~c)tXJ))z+KjrmlCF
zf!hNViZte5;z_!MnAO#b8+sX@u7b7B#cVRka>`st3yFR;<ZuLkG8pqkGHOMyDs308
zan~Sy+x5PY)9R6yvTaV%u5QKhi!X9Pep}3bgw=j#I^L6Sw6mk3C#)ub?YgI3@B2*l
z&pK-y+!n^z^HZ_qZF8Oz*kkjB=V`EX3Y;;&-U<<X0?OyALkh%<PEAu}2INNM7F!<b
zzGj$v$?E<Q<<R+;`B%e<y;J=D$CTaYU*;dJ0$m>AS+Kwa%ku9$3@Z@X9#0)TZ++hC
zE1d-bx+FK=S`dRptI*vZWZCvXbiW(5S}n5*RGnpKJ}<_SRbZpq`cM*z(s2ZnyluW#
zgd{#99vDdq!rE*<MV!l5+12*v#nDxG4y+@u#LMfzlDfp}%l&(J?_L?RVU&*3(QG7U
zPiSD0UMIr>)0Cj%4gpnEHr}STw+VP6A;tq&>)&n_zDp1iRhHm3tMK5Dl~uUlI?eQd
z{<nA)UdHF?IQER?suXGac|4BKS!z(pU^@!x6A5D^1w}Nt%0MieUS$2^0QDpR6MjH|
zTm*dM0^}&*<D8uq8YP~c69%(#iFpcwG*jg837NsQ73Z2Ijuu)8P|d4?v<E~*8__Uf
z0hU!(#T)jDcf*o+Dj(#1YSfI>RoTbrZGQ>UBJuWVIVp(>s=5mJZZ@9Qo`n^#W$sr{
zWUNa+%|n$EnNeZDsbA4@6#Ku;Sx9UazV%n(;eu7*I~sLx6Ea1wu^iQ4nNN5XG+vUk
z^%QI4EV-+q#3NalOsP7~;mGwRRr6<wVi}0kuL`<>X8U@$jbWg`+XU!_s4gq*%Jb?+
zX1sI*l!(Wi8=^HQnCw}0u3L3u29oT&<EkvRK;{zvU?sdIgfQZm^;hb~y#d6f-?U9X
z*3o{O;jM(?Q9ImEP4ycN@-s-$I|1jEFmrJKe?}+TG&<3|Nmj!6Jf3WdAdavqsS$e&
ze=H?@=zt}W6)F1L#tgFt|6PYx;b$vH9t7R`<g)S5;1>DLzAvPbdRN%ZLy9nfMm9cA
zrwGitP{k3jviHBTLG=2)9>N57q5i`Cq(~i8F1JQQU)?he>GuoTp@#lXmW@_W+Jwyc
zL*LLp@%ymaIhwjSf5UD`tHWLdS~=KZ7(&%r3UZRc`KZG;nJ;cQd=vUshJxf`lCuX5
z`M)@V;k<Gdxf|We>1Z8iq+7WpE!^FBi1XyU+`$q&zLa1LDndDN(3m)DAnpz`qDnQP
zHPdYJEE!C3dq%&b(@>6oaU1`4)x!c`Q%o*UntWW@&D_FSHl1dpSEM^Mt*qDre;wuY
zc}*+91(v_TG((%a#k4+KH{WOcYw4wC3i^2b>euVtaQrnpJXh=5Ug6p+fAi_xefb+4
z;E_!&^(nCE1V<oo4XZ}e-(g>Vf+x91;(n6<&p5hcpBA$-ec>M>5D-D?w*F^)*AzyD
z06zJFqF=AFNc@+W6qPr;kGF66AUk!zTzK0AQ+|@5uXH-ZLmX}|f5@luzE>12*x7u>
zr#F*~Msd@e3}@%*INHTDY>(A}kW;ZWq6gQ*z0ZgMpAiAx1reY^>^Fi4P^H$b%0@Mw
zUI&#O35R|-N%HmfWs^UG{TVonm8>jyr;N~N6C;0Sa8JXL><OxoyOl8q>&C8RuFTa+
zY$*OoX?$yvziUQUv<URrpVs->`aIPQ%@rF2I}uBTv7+j(s<(Q@Cwb|OOLc#`*R2e1
zwUjiKf45B9Y8?62W#yOUpxIoi)?0`H)H~XZr|EQ<ES$SrCYIy{n^N_X!h`-+#u{I@
z7R()=nlOLt2GhsB1PY4~y-v~;(2*5THhu5Htg&k+ja_63)2y*!?^ehc>w6dGirr|c
zSg0VX_HKnNvA%bhA@=CKB#5=YYz8{*WhFOkkP((km2=;H=-vgn@dB&fN5(q7wJc*D
zjSLt?M-(mjs-<302&;(<Atqd3+<h#u7nS+I7ZZtR>gVwl8SUOiSdzFu?o+!r%!(z9
zCKahLnMe3EsQqn3CAs#RIIhC76sw1EX?7SKjS1m0>FQnF7WV|%6&xn)ApVlNy7H$q
z2(;<BL|;BaEWnKi=8gPEgYK4@GeO4QAcxlB8pHbi#12+ZOE65wZ+INBva^WR4j;6l
zW5L{PbG9q`0CNO$!YS$lvppsrYBtq;L!N))PVsWcZ1XDM`99{=k0p(jk^(|+mtsX_
zwR)W1n7x-6>)fV5C!{56RnbUf(WDRPlrogKbn?~`9+v0OHP!Z5z1|koPn7R-Z#(ID
z0D}Skm!~5p9+QHQXye|!dxE@U@9y0L+Gp-V>U9{c)T`I1w5Xcbtdj*vVPRD!8d`F1
z(brEd<6-T0Va5XlP9|w^)l>&tTjUJno8$QGU^%94oyLX(a`?x*jX59nx)8`ss;enW
z=xtL$)wf8i!S$|T?5a6>pX0GU=c@RetKt*QRk4Cp{&po%d=qkbtzP^?$k=Q~qp3I*
zd3O~db+Lq6lAo>YT=L-<8X0*LEfc>y$tJVOBH0*Q?iu-aCFys$?H9jXBKH!$f{|_C
zt|Znjw>lT2Wistsy#NE=Qg}B!V&t>##34};c3+I6lUc8q6oo{e!-FSyq`JaxS!_CA
z7+DBno*rjNJ1;Q!wHbYz35PPvhwxKjGT^B2v2KSLEXb@9jtkykSeLrOKrJy4VW=1h
z10UTcuRT;k7e9W>9DrV^@P;J>d?f;pRLp|VEk3QA0h%2*{*wz#;Yg1V0SkQ|KgD_2
zfDPidwud#GbxTnNYug%BS3Vcvq*i`gF?FgQvz7Cv$|)y#m*gorpmv;`UYM#K%!XF3
zMY))bj2jbdZI#kOq`%4hW1h^FZZXB4gOZd?E;YIKg1Xie4opYakPd1)|5-lxw*-k=
zOHv7eqC6*$Y*IX)5wzNhg3H?|6b}$cN^89TAA4P)OQpTKnT%}FTJXvnL{7LBaKifo
zOsGQ@ST&q|`)QVKM}La8AI15$!XfiAZ2+f0Sids(hXO%{aWA>ZhM34<jUJwu-UQj}
zNy4pWmOgV>Q>}G-NXjr$X37p*J<!Vfz#I?gR$zf%bfb*x(|XrAJjBa@xHd{$`wl&v
zW*J7*-Dr>}JMLZkx-nwKo9EMUF->9;bp_5yoxjJJEU1Shc&_8e693IAL7a0|!UXk!
zKc&NblU-|k48M;r&*FSjJjGaQ^Yv0xBmHe|r$O9Hhbb~@g<erKwK#2<d*Do<x->SZ
zi@8w#F-!8BZiB(u5UY0Uek(fCVzfdD&b~)Pm#SbP)5#3om8Bfj<WhMtq&Dz;4uAah
zt7omP2QA{uWijDM@nXU|)}4%#D~70hXbZ9@#Sb!Z*aOvw3)@79aJcJ<tyJ7^oLA%S
zN~&F$we*~(NE07wq;fXkJQB8<<vts{BA*<lHtuL1I<wa$y97;Cc>_wCVxLwJ7=Ae#
zY=fC(g<y;d=v`sR0siVIMM~zB=UExi$>5VAii(eG=S>K$wN3WK)s_Anhi)3;yd18f
zG~mR_uHo;CRhXj(dyjX&1TR=M)Jpjiw!hC<skH3^7_bh_IRI1GFk2^Zr)p7?>G(~_
z)6?D>VPoIR;T5$3QX=X?<?%KijLHj3Znj$-ZBF?W>`3Rg-lfv2z>`o?Xsj#OTU|dI
zs3N~myn-T5i7HXs|4sCgSbBm>{0?d5inHE*GMY?ps9~<gsH~tWBD>g$$pqyRX&nhL
z(Im+_(}=o%d6V3H%@~UKUH1-t*=<P(xO1O)Yn&zCYPW3o#eAO#Iz;sz5d=Vz0;L{r
zwv7v_Q(G{ZM^;{FnO)w{tk;sPBi3tQHZuh_nEg((cNB*X6z|k9@J*-+ux*p}LkLuK
zfww%&DKH?%0}BRPzaytXQVlZp(5?UXaw<r($B|)3hJ%CX$XJ{?@EguAal{wt`30$q
z&B+)0j^i7|ZpxNfYc+!F04x26-^{d;q0h9Jhsl(6BYnm$ou%+lFYtakAj7p29}W=-
zbL{F4Ds^0m+#rg=**A#p<d}P12WNQ)<y?8acVIav)(YcqK0?Up1QV)U4Ad}Z7CmdC
z<idRmQ-}Tt&=cse>g3o0jxZL-T#ND)smLhkCs1OmmTZuKLN)^Tf^f0N=DVP)RHW4A
zZ`#ZyF<Y^Yl8RXjURDZZu@zwmOIS7D$8eM1vISwks|`uD+k1w$FKZMYB{$i)PkgnJ
zZYn%FA0yg)lrIL$i!Zq0bz1*EEQfVoUGefetvIAsiL#406T-|3!N#^nggnC8qE>A3
z&R1W3RhJ!Vh9N7k<&z2yINby$wDCM!oy*BE>N<1W75q*7%r+vn%CGuSdL^03l@bJo
z(+J=COSPP$g&OwLsh6ltyRuSPj-*(D5x{@9qy1<bPgOET&m)tgiQfD)N#?!6j#b}i
zE|XJK$*eKFcTQEplkp-?RW@67GE9==D69Zhj<8c4IMMF5FU-sSH_RUnV$Jqm>#d=9
zx21J;WG*0Z>nc-L)uph#nR$vb<9$kZnP;y{=SVC~R<NI=1mU2x>?+9zGv=H^<pAjf
z#z}#7Tf}j?oY5&J9=~xHaD0Xel^gs?_nNuG<-%k($0O~-qn~D@2{RLDxFT>V0lQbh
z*=LNQO1REl25w>2>xOTKc1%XAdI*R6f9T}EFBcu)JUWvkAEh8&!{uSs13C_7y?|3G
zup@gd(#F+I-!RKy_?KzH8hPl?nD$;UAk%GPHcF!X2;F0dAGwBZrRY%z>lu%ruXwXP
z%~T`hCWd@1oxN*-qD;ZeBWIgLOFH&(m|RC!=zy=GHhD5&R4FnQ2L@tQjkG1*0=azh
zpCxxsV-WmaP~*`5Z)4g!s<R_?mfJA+Wb|aANif!;Ra2m?bzM^+SK4GJ%av_`-`Do~
zvn}wmE%4*B1(x>eLR;X9y!P6NCl#CCdMx(p%yo_BYmNe<!db((5neigP2@>4^|it=
zg&v(@veFeHLc%JPWjD<;<338qfys9Dw5Sz`;AJhv*YDg?e7#CbcqQGYrTe}ms$xMi
z3(y3Yqnxa4D681Yf@Dd-UXq>Suick$O94~V-|WRZky`!LTW*KBPWx=h_3H{(FW|85
zb+2Hpc->3*<(%GsYS(aOoQvI+SM%k#U24~PKFaSWUn_&+8e+aGIJBEFCtU?ISWnM+
zbdQn&ZW7X*uiD(}vBvEPOlL`1e#Ui9)k0)^4-W?z!NYp`O*I!&o#ob|s$pYQX9oQd
zS{_K9z!O?$<G4N9U6b<aMtN21s8CvZPDB;Z-~M1@L>H@q8XrGp(glAk$MmC8gLIfM
zC50dBlF$Ai$dbLBZrW~ra>SAbS5G0=Cyr}w($zJ_%eS-BU<RjjE{4&5e>NK3v|uyH
z#&_GQ(q}=>TO;4WeaSar(erpiU@Mnta@E=_3e7u$(5&y)9h`}fJ`A(zaAP>g6RFMD
zOKU}cuR<%N;00{`rS3W9T0g0yUiDp}_+i!}QWgd@@J`^n;vo9pO%O;5LSiJ%8mizZ
zT?4E>K13qhik_e@RDMRt9&kuGel(CF{GBUOC;O`N4A~`N-lN?q?D+;;Od6P7aj)gJ
zQw<z4{BvyFN?2>}-xn9pP=$J}VG?^k4!G1UyPj{OpNed}MC5K`j>|^$un~RvV`!3~
ziZlykuGy*CE}xT#Lp~(5rfxe-vJ_puDDa%mqL9DGyn9&Do0$FN)wX;DZ#KNQBC%~>
zNgOPx(9x)U$-yWXZ<61b-kT0xrPCg{%>4D_#rGJ$!Z}6qMD={?CFqWdBkyl*MC2wn
ztZcr@ow>2SM=iK9xH!Wltgx&vX&^+n$12o)QYOgo_m9mM-Gyo2TeeXjd<8od{{O3c
zKS~R6Z#t97cMS!b?x;dc9KW+M(8hNsA_p4;dVDA1@j_ztRw5ix^z$#WGDkS)e=RiD
z@5f!s3DAQ4RJ5}EoEZW1%PgjFtBvvK?8`^3i|J^%Cs4uxoAC<s2ycqZ$hk6CD{0Dx
zX+KE3U8m!r4{?_<YgiX|MOCgVqfou8ODNpNXS>R0yUIswSJ6$n$e{8bA>>yzwY*1k
z`Ni;j>9|I>zg)S0Z;8QzNy%#S5STJn@57f5mY6cu>4PpU#`vt!hx_-cCL*k2?S9xk
zpquI%eRxpQ2dZM-PLQS(ncEYw_^dw<CzBlGq15k{cx$Pnn4O=qa|gQyJ9>vg9!wdg
zi4|yNYj9d)Pu^dn53S|t#XL0M`e6TT^fH=@Rrli3<XWp}W-W19K{IQOV)x2sG3GS{
zyx!?$UHSX<<<ad=3WrIn3|#VXV_>=t*0)2IR$9S+1&`+PS9wq>873SkCQjiP7eUOG
zEwvVdWjo65Z9!ejA@Ao5<CEgON@G;%b{Z~Fl9G)Bea#{#Ie&#^9^S)g%f|hpWj9{I
zs@lzhDdbXZ#{()<TH@^&Je<1$Nh82<vJ*siZfgT`T<jipTmka3L!Cq5Uq_-r7&RC;
z_i5%4_Hb+C&vWtd))wtE*a-G#2j;>}n#8N&`3MHP-U$ija}8l+-UNSYVo7zN>)>Lo
zh*-TkYS!j>;@co=Z31^|1H3ecaglSh0@g14Hy2NO4Q%P{GsGq+>9>g45iSQdtDdH%
ziH(j8P6E{JsLm~k&RVWjjxMd#+nRj5f$Ks0GR{-nn{%?tb@V-V9mq(Y1QEAuxln0k
zw}D;2zCWG87o22%*`Aq;1-%9?w5-Tm2V}*0=!HjBcq~R`gS+AWy?g&Fba&?uS~Xq@
z@4fE}c<YcNwr<H<-!7llnm!P>LT_*b+yzFo`&;;V&?W4uc)DlQ%MwU#5U2ztmiQ()
zuv=S)7+-)^lXh~Q^k!2IdPWR|;ehgh&(4NvaiL(mbG15?Y?$_L_Q(|C_c`)wh{4Hm
z0c3Sf5PaZW85s@?43-<6MxgT?D@xeKiNFKHEuAnFD6jzu^FT3e8ejtEvtql9*r3N4
zeoYe$eeqDgm>Z<Y+G2bvQ@~c5al%HZX?A`N6k%K25%nxHb;Ru@{cSM|YgxuEF7ISm
zm*GvcA1$m&8RP*asdmr+9$Ab$Y8)0>+Yt8U@B<XAGKQUU84nll1}sr9`*-`n)NzUd
zd*$~Ce%zstNsijNeWN>j^FZSAxjSW5q&WI+b)Yzk(BZ~-Kg)$^#2DP5OfEJi!a$WB
zt+Lbti7x)ZN=ctRlAlle%wmDBXf2Vz_iqhxpsv%OoG1_s@?G=7-Nsqr9kRr&<$h3;
zGj1M_Z1{=p&)b76+dhcCeDI4x7Lb8fj<wmiJc~u^bLzBD$oBKmrQBX6+4e0FPwU;{
zEQNrL%K5h6!^P1#yTNST9jttAtL4kYy}I?af>m%(sv?H9|C*hxoKHOMm+vLtr(51o
zej-G@TUYn?TGv<2G=0h!nH}yYk?It7WOUpQQ2=UgEswTPr55dQPcGfqo~$gm<32j-
z=(S?YXym(5$ND9CKl2<AVv5D!bF)zzjP-W3-nzCN<uy;ML|4rZ@Lv){IIp|lQBbNO
z7+p4-Hi)of6C6JJu9Hh9y7Xp+r>C~1b={D3Os(^Duo|hX9oJ`vq|Z$0N9d4L-LJnw
zu=fWF^{y!BZyD%qqS)q#c|R_Nd9Q?<v_hD-Z@jf(<?(HdW4BW?uc?r(kJ77bT@$U>
zKqrasPM<$(4%0VDRNMfeyjJ`goJF93!y!!Yke%sAaVV*rJjAPHqtVrctrA<H+bWt(
z2s=rx#q!g+vIrND3y-07;M=oV?@cnLYmb}bV(VOY_Pf;;T=V<=`P%#UyY_m(0OwC}
zYc5MK3gu`E*W?&QurX3<Gfzk9yHd3v(Ea9{(HqWPYscb8g0r>sWMv44S=OMZrUp`=
zQ$rlzGZDBmO#OB-Gx%5j2nzI_Hj#`_9iYQu<SwB^?i;8#8w+fcLY<Ksp3fq5;ne+d
zyDbKBU|7v<iQnxU(aRl|=CX;<^in}lsi8;_Pzu&2n-#!j%&!n@2`Z(~aqTxkhWS<+
ze9CzZrA0S=bxpkH;XQ}1Y#Xojo1i8j-^p}NMUUy7uY-4m-jj6>CqZ1&iu}#G_vX7^
z$6<Wk2gsT}_oUzMCZ~VSkfoCXN5Gju7xPEQQ)P<Wne+Z*P>riPMR>p{xlRibeIp?O
z?mbJD<|fs%*_!W++(XG5wi{9c+9(D0kHbQj`V4FnX5#+;+@)L|2F?wm@wXT38Dcr9
zIVa*G7Z6i_a0uv-NNIGZCUthu_eio*xWvZNKko{$xbIdSwAOw<9;ji{p#G^zI~D*u
zF=&n$@B%Z@j)hRZHD?t$J$qKIf@V?QALsEoxdrs|Y~ob}L@`Y3(7RF1ykn~sJa&5#
zEj+7qFC(5gQ;%fbzW?@rex^-{9##MI%Nq0U@F88xYwdV9?_pB-53^?~E;TDn_i|_T
z+kgse5@BGW#_^De2#^_#Gnd3J9=UpYQG`5!-iNLARgm-9p_ZG%xryr5_B=p}NjXxI
zHN6j%S&0?x#0h8{^_%wY(kI4CdWD>Gv7Y2=%;U+evdpdPXngWHwcKYd<43P$JXtNN
z+<Ogutfq*2uVIdL3Eu)bzq%T5wOnrm7R`yw%=hbtimjd(tqNrsEe0N1Pt94m?n!qG
z7bZ`}AkB;E?Z(F(1%6)2gEG<DiHmj)(d?Cc`}s8f%F@<U0iOr1{@dzu*TNECAuZd2
zB(=Ye+aW`SS8jd+@!ah7-{C4tEs)^oA5d!CDGV?k;xI7vvY!xgyQlPTFdkAo$CX*r
z++L%^qOOot_#!KC3ZP1s>EuByp3|h}@VUca2HoUYh68)K7RLeQJGW#zXhuHs9-n!S
zkCgY|4xYwmOS=cBuG~4=4hJrrSc6nF$rGmPp>!5l|1LIue=lTr<aBJpp8D?4UGHdO
zeFybnC8TThTzT^o-!d)c1R$J24>dgA_J^=kd#%6_`?uQ|VwdtM)Db}db6sfNI<RMx
z_c?Ygv}%f`D?Z!s%}F(e^_zPWZ?up8+MLE`>)e`9{I-{7F!;}R=I1-}^PL&crq5UA
z`?)eP)6Yk7Wl~2rc4e-3W3F;x^7b_MW!g_L-4k|rV>c$(+2K0NZP2Z0o`i|I&f<d8
zHN&Ak4c}hjr5APSDQ2DPV)<>UYMU=QQ}0>=qUkaFz%IGwYWx5BqWibJ=sx&8QU_91
zb93AxobWdOj-0Ya=nM4q7{^rxsiMJF68RxyP|7(I=W68YDaDF<Ip|KsCKvli?NA@r
zqmqTvZ>x_ZjL?mdN2$%%yD|>x+*EH|)7q9e`f3gCzSPIh1n)Cv{}Ec^beFEiV!xk^
zKx?ww?<rHzsyL+UfIdd|mgP<pva&uD={ntDFw#Y6r0aBJPRg|vX5)TT%DT2@>$L$D
ze+%>GE$POrl=!G#iMPgVXm;T>ErKQ?5_TgCQyQ-~DHTZ2TX!Sy30ikmDhRD>!K3O)
z*#JoEhmsltu1$E7YH}#Tekl<Cr5EQL3vVy9)(+QNZAaJBKdYp9#w*CHP<@IRJ`5;}
zPx9<M=e)y9*qu2oeQIn^Wt{Ua&i9oDbrVrq?=N@iJ6^P>=~SJOSJN@c2jZMdKfHIY
z#CHX*jPEpie-po!mAfY&1W7pfa0MuQK@d3MsA1Bfv^N{Zco3MOR*9y;@y;y!_HHnD
zOKVTuVfe7Fkwn&@bL&wj<=_8mMc?K~e~HjevI0cU%cKFcug{Oh$$5;ATC2_;9G*MT
zb2y4|tt?)Px3|K-RWL$V!wTI9^IE4Pn5Q$?;J**S5!2Xc0pDre_~0Bw#~A(4khGQW
zguTdB`F)(iIm_pPUbg11+wSo|#`kr!O?7VXDWcOldvYcG)YWiQ_lMbe)+#QYYMOha
zK5^K`1ELS`NybE?pIwbL9u42OmW~be!;YdIM6-O@h!7qIs7r>`#H49X{_tfZ`e~BX
zKF1zb9xtap&=mhoU4T((G!8Buuqc>0Yk5|HaBQ%jU}(X%`ta)(0RbKkJ#FRms_SgX
z5SSi0>d6MRYFeGCS!J?Gpjf*|h7;DSA!nG)rV&O3rcILGuo=0HFi3~UC0}r9Us8^V
zrUuzdc}&)P^h6-Y%yCv*922v#nAUJ!6%!vR#F@#;dd@4t+Vm<)pO;L93Ho4{I^2Dk
zCzok9E4swzcE3-qr(KB-gh2tj*iUn~Duy@8n_?djLh`V-#|8)<>$}RvJEE2p2U^ri
zW*Ve6#xNq9!>fyQm;?|qaK{4u8k4VM0&-2h0`FZ~woi@eUZTXG&kd}6lP}WkucHT?
zb8U*D0vAeE{{ElJ$fnod^CRn1w9i(KO0P9$sD46Fc~~{WF2i>#ff&_QT?I{E5M3le
zx3=oIm>%}50PgOe?TMVs?MAeX2Sx4H_)Wwi*b!`ZglX{XGimof<0F35wz$A#Rm{C|
z7MrUIwO2U;zKXdDgF79;(+y?<%Ar2G0oJaID7gzNck#5|k6op=exCuDNud>t$QsWm
zY?ly7Hg?xjl^w3K)B-Jle=ygeCV?MuP<WV*-|&!PLqd*u0bNm^8s>ebJheq-ZfQ!B
zzFc(fU3=oriw8aHCwlL=x1Dq>(As<p#dOCJ`#_uJ?p?-TzI*pTLMP=z!)GY`f*}@m
zK3i1HYg~WwB3xLNAxRRqLSH`tzM=NJwg6qrY>tu7g0EIY!G>9TfjH8>IfkY18U`5}
zuG(^5qHa5Uwq3rL3*zowHPPL@%j>eX#n5uhPLaE!iIB(cMhqk=CDkx8vjs=s<n(5o
zxHiU;!Z?YGG=b}Q5>H_h!`1$MHdVO|w@VB%AZ)yT5@Ux(>2=h<8OI~oKcT?|d1W0l
z;>{<RHVHOqXuPaiMEANleJWDm^gWN+QCRosAWepS!HL1moMNKozo`sD><PA`RRrz4
zNpAE<*wEo{=-UEOgc>PUZw0<z+)z5UV>%vNp=r*@pnCt+yxJQqO4!EW96aSyUaP`>
zyOO5u_R4L?(yXKodj~zW@SEu1_;w|Uf3avU1X6fXx!$OH*0fMYZ8X4<A7zdbY(LK5
zG~m8GznC_nb5yJ1f8v{EN(B5aDz!w_b4x|~&tRRdL2fNZjcC-5pfy<X>*31kieeO%
zTf*uo?on=xfIpBs9=9Y&{QjPf&>s=VX7|MyW{R?Gh=2_bp5PYj$`z#fTrekuFN`-A
z-Pw;bq%{|?Jn-Y&OfJS*K7^mja-wrE9fNkL2>{}`Pu_`0@v$yv*qUZ2LqNrNka)v4
zqZbnl4~W_XW`N()AMOHzH~l=mN^*R~e`&=>L-ew|#iw;MK(ph<e{zvs@tKXX%Or>H
zf0FaC0c4KbqHt6&epyytK|)>|T|?zx{P3sj?6_}DNb;e;O3!O?p37e?_r7W*t{l*n
zLve*NAltwkJ00ynd4+*JT<u^sG?L9JzTK2eGv&&#)-ka5$YE0ByZr=YJ0MBG2Eyh#
zI5-$1Tk_aHg;~>2s7EwaXQ&%ApRxu|6t#IWf&=K8=ouOpTG2~b^CDpg9c0`N&%e#n
zKKBE6d3=5jzdQ8Xor5+ei9qEzto^K?W^^3nQHLLKSred?jzL65yf++<<mI8BFN39z
zxg5DX@>tjOc;wHG!y|M6q}%A*8Sr(eyd~7B9A)4uY?vA;l;=lXF(!6wA0sc_pD_!0
zj^Ao0MrqO8|IZFRlSOr`I*2uHyz`}%({Ls}H96(f=SXrWb%qVQE%Q}Hjk`5_MRj!v
z#Ny8{&VGWveA8VE?16iWhk&$qu;w7lXIl)HIGl~fEX-nRt5H0aa0j2`ij!x-NyX_$
z{~wnwjymI$<6;kGOMN^7V3P#C6LIk-&G1sePaVQ(uk0N}uZ042%QbZa>x%^a#1T45
zk(9zSkGJzUI{Y^B<f~=&-cpE`WwzgW_W4z9@gKr5=KZ_dyqg!m%JF3%!cXTtdjAwj
zocAu~?X4YkaolM{JCAN$nicu!FM%cg0=^y>??ui2V}?1J;iwGKA*B{j>eTu;_ts-E
z^eb1k<Rs3`a=EI9DE#>0g7h;Xm(dUV@sZBf@i?8LsLFi#Qo6<0$1QwOO4nN&H0uK%
zhvL{D&{x)<$rU8|BgJ4mje!mHjIQDRic%Z9%3A9uEhsF^)#V?RzfLKA2tU3f70~zW
zNhZ;^PYD+372Ftbz&t<kUiTI<l~<(5bhu1-WeKdQMnf%1UHgIe*47Er56?Q#idwz9
zvaeV1O(7NuB|>NrFhmHg2=a!F28Php6h(PWS~-KI2ByP(<+jM;&y-oQm%ana?$Ylr
z4ULT(`fgrI;Z!`famnm%ZxN2AQzOSw`w>wKlz@b8go2Md3#f5EL!`;eL^`=rNZ&eq
z!$RZ#I(O<kgZvAjCRLVqVV`R3?<*)9$`rze9O6-~?UT>ut0m?IfB2e8!Hab@aVX=w
zno75QStAnM%PTlZoo+BJTf?!r&M>%Ia<i(ueUSl)%7}IaVmtKz5~P$Nc^$Q)CwMFb
z`Xp8`SG09d<pN)lC+;vIwrV2AZY<J0@WJw-dG8|2(|=-pAR3V^TOzLKe{m@>D^mWj
z2bVz~#y|fHlo;>;OF{bVczl@_DG3o{N~PRA(EZJy<Iy$V*s4W>X~#*R<jZ|R#=oKB
zlnu9HwTzuiEfy>G3mnXbWLZK>47;RF&<Rvr(#Uc}govKflyjKsX@;hFYY1ZtcBnb!
zoXJS`l9X4L(4k?RFzNzkuPcsQSj^)E=-^E~S?;Pr5=Ks4h(eD0+;;&nX=b$b5T=|0
zFXBRf%0z@Uw^mS%6rZ$aq*x@JzFjVcZYC}xxI321bQ_Ad;9v;_cZm4!hC(egB6p%2
zQRS2_W6G#n2iReVk;Ut1Z7#h29m49DhSQh)=*qwzpMAytHGIXK+WUi}8oaAR7iKBg
z7*9fVX`L<`!P4}!n5&SC09blm8vuU1GUmZ)(4Ws<L!S{3K0d^QQ<pD~Oe(8Ehb>1A
zb2gPVz`*8D?bf0IL-Xsq1dd|#LzWNwzp)ug{PAzuVK2#9yk>yi<^o%5a~y9v`fVja
zUZ(!WACYK>!b(xgT+Ghg-)C9>2LDT*KRb<`UQ7dAs(hyJf^0I>+PtJIN7>{?6}+_z
zG*|VuT>Iug$!pcRJ>N1rE}TM3X#SnMSKeD!rrdJtJ*0Da*Ay-#Cz4QsL6_$$%IUS7
zNy1CN<ucq2Q9Y+QmH#d>rwd}j7yfh2kj9q7m&v%xA!=Dw=GK}h!myvsNV%la@YE0-
zY9XDLn4f5)Ni!*zw9A=k>o4VDy=9UXU*l~Ur6xOjug5Nx`umw_`ph(a%uLg-3>EdE
zL7^6<h+e8lktETpW{Ivs8<lcJuMD`lV!CMG;G<-K)J3AER~_N&5|$E2Is2RYjBA}z
z>>fEtdz>Ij5~@+!n`$r~sNvqWw;_Ba$C`v|>GQ=n!`<!kaIcX_dqE~_)4M7h5gz3@
zPvT8p$y}eUTf2e3ZgCm=sPg1`f-v!v84`zu6}qdMYQM!rO_dOI?Fu(^IE2sl^XL2d
z<Gi0`pKj!Kz7;CfyWY(o>}J-B`2*j}Yv0PZy|c9Zr*dPZqh!NkB-CicNK-#{#{aI~
zT+UR$eu6`BrG+o}QgWZJbtSp(pzIiJ`&zb_-%vH3{d`A#4%hwo!gYg_yrHBXYu;1u
zn89P!3yP7_U}0#yYvt<*?+Qf>MgkEyhx)vfl2DRLO!Dk9CEzb!c?t?{pbH5(>J?&r
zWpsgPn_j2Wn{6Uy*avdPp<pt?-#Uo4zx(cBG}@N*m(SztcOR0V4}T;>dZ)}Li!OAx
z(^+}`;L8h&wvMN3B}LVjZz;?JE8&r}q91VhY_E3U4zUYZl=+Zfj))vYG<fn_yTCu<
z(f(xg;V%FBd@B^+Ub_6>M!J;2d<7g0O>w~mLxv$cKi^=mq15K<C60yuULx9R$7>YL
z{Q0`FD}A+wg1OYm&y2xm;q@aFUUirLI-=``6I%@uMV-&{!pq<pe<tD*&sd=3T$+x1
zgUPss4!ygmTDAN7(cMZ+U9{{qXKT^gg*R4cm<<iGG8^+j&MKG1su*W$N9c=eip_Bg
zf`F-U`n-%lE4#S<U4cI16Zp=pSkrGdIg9hnUBO%%)f>^DB&hQbGp}L@Aa`$h3A^A1
z<Itgc(JHHj`(!p6!L91%=2e0f&87_P<1pQpU9qJ;d{TF8{Vb;x-Y|$Mp16Iap$tFn
z-f>|Kd!oRPNKX%MP{XrFQw`68nTD6S{%*o=i+<2@*F4p_wdGsG+k4-KQ84h^N^u#;
zmtD7_=O9_Yf|^(i63Gkn)29~_RUTq7fG~o{wJuh#NE%W~D-o(towjNGMvlwXMTWko
zX&<IYdGvUE8FT(asfzYU3at*4!L%}yCd2^0k)k<b46QT6!i;iP%}TDrlj7Oz_?2K4
zR=LXUJ>w5cx)UBwi(O1h!CwnKS*w#D`kgYShYJvd&xk)z;@AD{&%Nn&tKifB3q^7O
zg(P{>wS*nSA#ooOhL1%m!qT~eOq9Ici`qg*<Zz<15{%rHlXmuWq2XCD>8IMndh@N0
zxqhm#BAMl2^<}zCJEFDkwnPUWEM9;-po}1>kMu105j}Df?!|KfM1~q(AULBPcDXz2
zj^A|&J6}5wdKLXGIgg`ZI^CE+cnKADxWb@zoM!iP1$Y)y_5vs`O^<)Jrf7(rYT}2h
zONTXm{nP|R#M=>2`IWtWR}vuBboX5>BT#J;alQ_3UfMt+L46KvSy?uAL}c-3U9nI)
zj^0`-77D)Z6O3xv`;)ARJ#qEI?t3-Ru57=3uZG)|@Y0zZT3?P-G#sfQhdr9)go{fk
zS}qdo@|<Lxfl{^<wsVg0>6b|~8D?;~ebj!&VeodD4%CL0ukB}CuJx_GQYGgdTxIE$
z@`x3iyIr~N4%OX}y63j(f0VPEd5)aF0B+@4BLiWG{Edx-o*Nr{S#A3E0m8MFtsW(u
zO>XvmY;bG&9bcWbPxQLi&54!vle5|RIf93-yDQC?z&_v)RDcwSu`S9TV(%Nqf8LkE
z?UGGIN#Y(yf_Uk@@_`yn2#pJP<TidtLq<dvJQckJZq)s+I-_iiQ`5oa?tqZjVeG*U
zeqe@9`MP|*FrbAgUh1&G1@CDZl2d|2=^#4Gvo{Dri+gTFBIB8mz@(UR=zaS%Ctv^K
zBFlK+kkIh3Gd0iYbPhu-@^Be|mfql&xWzj7PjMmquOH+iiuEVpfZnW_W~1gP?mN(R
z7|I~-CC19G6rL3m!ncs@JV5rGPZA={p~vb~Mp!NQU7LGSvqJYeu&@JO8ZKnFIEGA2
zCW7|z3htifAtT(rN?-@)9{B~=L}N;+1T4Vs6f2*(vv_=ix7F1}MzU?2GGub$ntt8?
zLkAeUq@a#Xl6;gF1#)AycLFO!q8oPbC9G*$TtxKW-tcBo=NS5Tif)-h>=u@(c9H|G
zdpXE|uU|dGyg9mDA(meeUviyon$2R(iM~Ux_OJrn%}7le>UeyXAW7se1U%+W^el<<
zG10ehuaXorN=Q;zbFU^%|LL9R6o!|l@$ew>&!eMP&vBk$_a-bFk2x_AO_SZx(b+5|
zcQyn(!as4YQ{sZ3`05bsCmR6S<|V|e3v}m6NokGMB%$~@ipPkELDXQvxSR;tNhgR>
zGoUgl@8h3j&M{+vA~`9)$c5~Ry-qM$Xr3n18!SFZVx&-l4n%8x3DihXEa#53fsnBm
zu!IbWsCY*O6P$XceDA=WVYEbvbC$H4TqnKRl!zcKKMa{*k=jR2lZQ2{Bwfpe+^-k2
zrR7PUG_mhf1o)njae~K!`|WI)VSW(mOfv4p6JXj14Bp|li+B{njhrUb|9(=W=VPZ?
zX(`sK2ycRz;wMvX<o0*7vmYJc*Tw8C+@-WZ?|-?^dRIBdm{SeE#|`l3IJ(G_!Pnbb
z1#YIGiftI+@ayey#w^D6H;<DM1)RPqCO}{RydQt#mFlpcFqO;6Y{DS7NOI3Le+FZ3
z{=ksAZ7t(_U&s@JE8AltBbZjircY%e{ANGLtR%3#(W8lSQR4o73Z#`9$04Uwa)78h
z@M=~h<&Ur88@1L8m%*cPi>bG!kAoxHOYBj6h8VYQv~9dT=8OmF#a_#AeuhtP*Uc2s
zKl8irHI4dvE3W)r-O)!Uu;Gn*h<SzpUTH^InXIiRtjL4;aMR!km=Z6;d&+rq-VV@5
zKG9DTv_YX*!Y`|<Um1Z^<_5oi|Ev2C_6Jx|6Dw-!i#<NtnxO`<h*9{?iHo^qLl0pA
zkcqEr>GeeNF}!mtU+&MSu1YIzj*DqN(`1%>&&GvJIMd3PLctHVqNo`?OAGS(QM!H*
z34j~DrDP8prx|OZsOwbpU91I5Qc_*~7&9WtGb8Di-W+ol$}as^AHK}fUb%|@o&hVC
zPH#$&PZ0Wwt!?mzVd1(6M^Cp<FfhKDw432mGuE29pv!E`MT1#61TuUBya;^%GEI(9
z(&ZN?7wLr6+@p9Bb)Ux*?9`E7ltI7z^=Ydv^^d(Hq@*j@6t4;{6?{jmY+Z%AzO~D%
zxth=|G@lZCqq_t#P0Z#ZiBRY^%@Lsk!Qsz{0Y;IcFecM>D7h}ZLhA&177|$JfL1MR
z!<h<D+Yk=0;qm23N+}f|*d1+fWynKCL~f~ynLjfX*c9e+)Ug|jJX14H?IQep3fwx(
zG1<Py=|9kf-iL<ZI`;-Ysfo%HOo01@^HSFo>-$6H3Y%wjpHNQM&MY6g4}iNa739RP
zRD6Qx&=sX$b+!IOj;1TA56XqN7!vdfLEjnv#^GIZ@4doZZtbKD(hk?4?7)di(Ds7Z
zb%byuw}aeDjVdP!w^K{_D=tHOV5ERQ<dE1v!i1wGY&sn>b8<HZZE=jcLEWn$-@u7M
z2^;GF9{n;=&Iyx?VN)mqOfT~6YV1;dvd~qUFl1Pg>j~!oBe@d6%&BMR*_6l{sRKPe
z-dWO%^?sJInWUm(X>bRdrd=kbi$A)&`Dvk$<(W}(57^atJT55hVh$UHA|S4bFGCOT
zZuh5Ri(3&zWee;26TTs$gEgJQH?y1+W;k2gM^iDI8%YT!$(0ysG(ptTohh$@N5n(4
za@1EPY$<49LFUq^3L26-GBPd@H&T!+%XLnJYN@6x@<0N@h8?!HVXCr}S8d)5{G|mK
z$nLJ3puOnpZ=#>KzJOx`=ji7My_tzVH0;T5@KJ5}bNEa2wI0GhZG9oFtnvAuwtm@@
zwID+H1Zk!_)!)Nbl$k>fsE$h21WbL=_rWR9k*52Tj0;IdcxE3d2c7Yo@Yj-=uNPw=
zE7?_&Bb1{^j##~8l2fM0@mV^=Auz2W*43rRqw95?gbG_)ps~D-$0ZjKIVHjx&k9@b
zw9es;^mSMp>w>KxT!3{Nz}>njRhq$yWt$C=FX32rse>NNEWKrAEH#Bdm(T==v$%8k
zvgJ*R^<3qss7Edx$%&kKlzEt2wN=tiMU%!9tr$)O`5Jd691^u|!7elT!(jXTY0K@q
z_$r3o(;H#{N((vq-5tHMclKJ`=I+n68&h|rY|-eKy;ky%-JKLs-P1m7(O-Czl3F{(
zbkbt=5O=^~mc4<?`%OZGN74f`gGJm8C0263d2$T6Dls*5sfXOzmf-}qO3a^}n9>K-
z(lBK4U|&sOieR&jP@%!=hBpK6<T85`o*!4*uO3}!o<=*tN^{0Ew&Z$pmBc`%29ykQ
zI)|z<to9tr3Y+5@&uwCuu*x<r)m(GQuhAgW&8;s=L@k>F>nLOlT7_MJ^2~34mcM^#
zM8EyH2OEk1$Y$dyIrG3a{o)tDje?bPe6tY-_@HXXF7!Bt3)`q&K6l|eGC-x>9b_+z
zVNDmRpSIjZ*|YNODPKsGm59zcktD+V@q0xQeAtzn+lUZ=FMjbyng`m}qI9G<AxTTB
z>!kgHuQE8Na*N3|rhKQnqKdz?;PCe0)}xY>R@#rg{`zY^;qX~Hh<1PDZbYoetv)Uw
zb<ACnbMLqCQnWj0g)8wOx?kQb<XA?`mS-m7qL^u<QkgMkfMMmii|D@Nn9>mjE-{TF
z-FUyxzJ|D*oWD`dji*(*#HeN!Uy22-js4du+js(oD%vaco*v^&p+6+<?II&aRb^gQ
zVflVkDUu4s;nB8R+n7{!-xV1&jjBNH-?56`(~Jk67XI#1+Ty8Q<+PM4jOHt$!gE1t
zHY<~m5MCXVITJDwK;00rdv`Z0?e(8Qavh%o>x`Q(vxnnPR0ar9TT0-LzaRZ2+JQE9
zqJzjhet?fb%Ere#s7>7Y@%O)%-RRjns1Q4UfWC-OZ!1GvG5-nQ>Yw=ej}0hG@c=+2
z+dKDxolQoFPxpZSD)7(e48{W6Qy=~a4Thw$bn&^g>m+$=aGAeeNtKHF5jr1e6_A@Q
z<E(<=C)IU(4xi55SWvInx5Hv6JB4{OP&)&~^Ec2)H&A^te}}i0yw-Dvl`q&vsChom
zVS4*jN^4kIsg&t9C#x`WF={}}ewJy=jG{v>v!u9fU;3F5z+nG^oS5af?{CK5&;Z>`
z$Gf6DLpxpjM<Tib=@&7De$bYOyOvLz-nfxIpljFv(z|yr`paLU_K%i@8wbn@4(r=2
z!%zrVumW8i%QNLBgkK<t^%y35WAjs*m>ePci{#rR!^Gmdj?d8Wr+AY7mr2p<1-E33
zAM_9T1E2)_;PtCxXJpda;6%$u@C#lMugx4ZQM_F^xn0$Cz#0^-bDAS)yCCBMKBJT^
z=iJTxpNee!7peX0-~Jr-<(J<9+YV2;>%Vljz95o9H?DS|mA&Cxm(&k*DN**(-7Y5~
zrGAm^)UlnVbvuCNceSD0(5yiD4>rM{n62Ou)Au@BS04Mn>v~1rN?b+s8z7B4FaB$1
zPVdT_M|38?{n^w}?t&vlU$b8nixWlr-j6Mq&rt$fx20vQWIc?h2kzq*{A$3jv3-Oa
zWXh^?Squ`hJ^g+O6PLnxffk|okAD}Q+YnX(wLn(>3`2K8oVZN0Sz)$xm2Qf75mLcY
z`g)X;tftvZOQX`$KxVS%Ol2p!C{z(H%q4j-{tyTv!jJ~!-7u-D3HLm&@V2Yb-jr3i
z-tW{+)$oS*FOXrUmtTcGqPo3~JkoO}jx!>RyFcq)O9IKPMTEbDI>29|2p`~;$-ldJ
zFH6Yd47gyt;Y-qqsHEplB&!%pmt$3yROO$OBP(2#N;zZ#77lV^Yy++6(QH~H?U|%N
zCH+L<JEwZ1vgTdC=&_5t+4V}v#m|Er2tqI9R`j&wmQ3b-{kv-K*IY<IHwxhsRe@P{
zaIX3UDdSSg)<xFeZ_~?U?4<yosCTMaZ@Y2UJ<x52bd8h0<FIKr`JX_E+Hux0nRHqx
z@wQqmUj}c{C_$&z<)8W+_Xk;E%H5LT!626=<kDCG3H!cqsiMkC5&TF#UA7Z-5oE!c
zTHtr=dcsazsMbQC+<1&K*)Ty@#6aeiO=pzE^LYIAy2I-uN83#7U(Am{%Kb@h3=wFr
z>EX2zX!n4HN3O@It-5p+GHS7_=LU}yGoL;QK{9}<FG_i`WZH#sLE%vdLuL7<)|%1v
zuIQxjEZ+cbH&b_7(Mb}-1o1bE9BxbqSvGD0m1MNrCMz!YyeqYMjq+J1)L<efv7sQM
z8S+MGr`Za&UUlV5hq#WzTX^(ZsJHF`qc>@l6InH)`<^g6C0N~B1`08AqitkmczSqa
zSaq^Y3C*XFWz@GjU4lIVq&o|ZeLSxkx}5fmg4|ZbiIOy4j=A0i%TX%1YCm+TPVqgm
zZ?GJ4$npgCL$bRY_j<Di*>mZ<;m_#z^t(m%?ccw5uMyqb`z1R1?x_+#q;=hR($!nA
zv>+|3RW7E<gnd2b>blBAJ1@c4N9f@U%viT1^0C$s3Ot6DpC+<1une&5xf|rx7QNR~
zOEku-hf#r#HWfHDS8?8dw;dl|4@!xSr~dF2^}Ff=(HfzOenQ0x;(At|-FKUg+t@XP
z4juOkuTg{_Elvfy`-r0@yd?K?BvLQzQ8H#Y0l-N+=gCxg<XyIucsI-AzOTwCy6v}g
zHpq*{eeL_TH^&wOyr!6ASf=0E!zb*^L|p3^+Jg>;G5PKwm->ZKWgVEt=$#Ii{>BmG
zA2MkA+YAHsx709ird=YdWy!lbJqK>hj%2_-)N0R~Oi_$$u<U2%yF3Gq_usL7*{NSQ
zE)yD}SUTlq-oA}~L((Iw@T_>sqA3;oOKSvmp=B7#caKm3i*^oV9K7QXv6{z^qwU}R
zoc4d&cG9XWC$<8z>6|I6?25WcbNUOBW1Nnj1kebXmQayD&yc5cMyt9L8tMYAhFgR=
z67LtoL^e8<yoXbZ+`=wCP3Z~z=g(M?%rE@@{qOezrE7W7p>R9>@lRq)Sg=a#Et4`N
z!75=(vQn^Ave%>Ef31tfS5ml+RL1cWfup&kXjs?DTt2%KJ<G0|sPQpr8bniDeZe<+
zKabCWW$QQlc@}t>3+3g_iNSMubnIg%1i}H~0D+=krUmK=Y#K}gE9fU|rFK5E6qiBY
zzDiKIf_EpE2@ui-TrcSCGaC+FKY{1ufezql2cJ@u4|+i!576&)Cr@06UKSx3Tvqt#
zD~>}#BL>>Or{a2FjaU*ai*RCSDC7=3i2guI0F9qQ9^if}YM*kn&w^N{I}#AIxAg$Z
zA5qvL0%6b}ds|x_iQ)_*xr)v~^bm?mbRm=%bb-C-%a(C~*SMQI4uggHaj5sJmhoqg
z#64Z{8OZ^U;5ei}Qwq=~&;ol~e}GDGj!vdGAW@ye7X|;dhq35>_UZ!BgXtik1DQIC
z#^3QD?+Ee(&yxb;U=Tk@r^5-mC#N2zg+4>RQ~U5d8PDo^z&`pi|I`J=UYO7b?v%ql
zND#$!;Z7*zhUlXb-1y46_)WsFn%GBi(&srAc7-y$4x`t{t%&3PNO<)N-H6l%J_2qN
zby^rQP^AClXB7E2Mr2MZfmogn-=sBX1a<p~2Lx1~ElkFXW~V4^`Z+E&s0hEAUN9HW
zxSqrZo8vA41h7Ben9O&?0oE3Dxo7+rHtb3TVH`PpZ?t}uTzgK@gVA&*-?fy_DAdZ!
z(_=;|a*jLVTLX<$lt4Bpf}>;735RRYo}i17DkmnJ44JhvOLIl8j4rjH9-YeJg+}3S
z$j%+w3;RzN4sk|12f{)j5U-+$8m6p#*2Y9xtYpGb5mbT{MxD$q4^=>$*i3~vg02~g
zm@1JY7YccnP4U*ChvB*L^jQyzYGwS=TJ0KcUjHV}lVBRE@jZS+*^>t4^0;Pym=wdh
z&J(!e(7#Qyne%=LT`noWGa*+LF-;2(GVMu?lzdoc)kTnFeI=|Hq+%7Kz5+=t?VR~^
z%>=5;;)r|o8cSn#id~q(@1Z==9XVADv?BVQIB3}q8RrQjGoi>irl%&|EKVd{(;%R!
zXY~=o=xDs5pz1^j!j4;#VNH?yl@KwHKbF9SJ#5h5sA_LSR~nVnkeuNYhcv;S6(fpY
z!&XnQ@7gA7d$~m!0BR#8M=8B+2uP5S3r{8}Jd;G!5@l)0=yXHL97>yJQhQm>hB5CF
z5-tRgn-tidkoV&1A9)(+wpX=<aM?<=*O6VfXB~gC!d_K;Bm+OAAyazVLQ&qGJ=MKS
z4YV;%IQKh>3C`IQ$NWTH{rM5B)A8dLl_xb^DRiF$8gQ`EIgSE!PNd$iQ`-=*r=GiH
zeGFg`#yQvD&5IZ^be<ohFL*=wQ;lj^a7tNt7p1rX{qk=2cFgDr?SdiPQ_3*tSJj6>
zM$fpLt1PgYhz>~2p3AFNx3gE%)REN?t=nK|%&coVsD5V-_a}TV$X@(MHQ${%;UFOP
z9dqbytw`BmyAOe38cK8whJzx`RnSYix7a#)baDb@vV98l3I#kL*D#eQy@D<M^Y+yX
za$&|1YlLkmQaYYPF6i|{%aXDmMa)+r6Z1jX%k~2P5)Bi}Pvv4Rv|V9Cfn#D*l7}&>
zVNBa~BoaRLkNrKpw{ecOom|F4Y>xiBw>HBX@@nRaE)yD3e@qP{<}yH@Rv)rjp-n=(
z5fMpzucCcehb*UbXh^I+nvFOny_V;zWA&n4GvT;m3oo%c#%oPMwp7KAK&vs~#`qzP
z)9jZ6H1FQ^-y)-hx3h8o65i2wIyzDu8Iz>ko0-ySE2vZ^A8R#IYb82CO1H>J5>$<y
zmtu{&)yD#2(jjR6X-RJ)gZwUu`$?`0)dl_1ZdCTu@zg<F!si&fh_||nqiWG3Wz1$p
zr5=O2bC$S_0Au<C(H?*cGqnBL$xH8fL{+zsfUYDpI1>-P?DS%Cd~&;Y&*8w*mo7Ht
z@VM^#2c0<WoF^c?(-mOPfUV{bdP%k;`|t@RIwQo96Si%bgT=?9=4gf0N)iAKrsaeK
zh1_61c*pGrSPCTIXeRP_BSeV^wn$xo{Qlu)kfv!HuL$-gC^T<}o-(NBN+hG)Q&u6N
z+z?2S7PRFnmMeny9DaUm{RL{M{y}t7_9)RjgB1p$VJMQte1mozD#AVnz8j*kD-AW6
zrtQ^N!Lf$gu-q9=rcubGWr6?1;yzmA#<CrC!^cz`3p!bQsZq;MD=>mptiaNAuXm$~
z=pE94+OFb^ot6B_%+99`##({eA`Sl@XT!M|&BjAC^o=YQK3Z32V~>w5z0LU|%M-*`
zW8vdTaGM`Q^gB>ZD92>H))`l-jARTodjZ$zI4D#V>z~B}fl`VsQwfk}pZxsJ66m;#
zXzsJc_C}Mh7;rq{>I@vjZ`##Ux%7(dsE|xIY_$U6-=py0qV~=HuJ;9-dvaS_Zs)+Z
zkj)cMr!lz-R`(A2vEVDg4Jz+!kml-q)BYM?#wT<A)3VS%P3F0WK^Y`TlwmkYLr#u4
zm1ESDS9`u0hr3Bk(fKetLsJMv`_kg$7ou%1`@QjEKCM%a65xsM8LYV7n_e?RJ{J>N
z$#+srEze2K4ScxnfkuDr?^m0FR<_Xkm%(uzX6L&I+Dtkhw9Uc?j7Nn~E<8|H;}A#@
zIRX8K>BS(+j1v(2ViV*qTmHfCzmD#6odY_qcB>-+W+vG=MHXxZFe$N+K#a0J#)NYi
zF(nej3X|6PLF8I$O=iW#?)^Q5fSOYEL{fKb|Ju$M5PmnJ`#<i`7cH!jFxwD67;o*L
zW@LcXE)~$pYf)LDpIun1`+H|gD{?MH<M=W?$NAem&!*X4!$LmmUflIKsKmAxl;Z|H
zhIir5)A(!;t34jO6;xj!L$r$7gdA{HCxTle&1EW8RNHb{Lnvd&&Z9Wrkwrh{i>g$O
z)Z!RkVkD?nC-R6~ynw0%j(;!}J|sG-yEM19>YlFXgj%P7E>i-a0+&gNG<jC6EGFje
zib?ZOQZ!BAwhGAF_{L&La=cfXYh0}~+Ac0)l3zv{%;zZhs8~(>1_FX!g|#zQQjNfr
zIV)%Q&e%(u!3)ui@Qt~(RlPXdbvNf~JzwE|HMoQD6#XdZ62yC!K?KXB(>taYS3UlQ
zt0#0uq%3j4=q1-vqQyAnu+kX2t5?2iEsve}>^gxm;S9D323e5E179JS7*epRE}FGU
zuaf2*zQE3>LC$|SE`k9BXVXkuMK!+eaY`P7668QZII@XmEwngiz{}8{-?q-GW16hs
z00cP>>Ks(J2}WbgiDZy(nLitg`4^D*+;^R9+~Mz-m6=~BvNYeYkG@qX@e0l3&36hJ
zWLG>^x(@v&FSSGmR?@*`VNNE0_`7G_Xjd{xxHP4UQGD<|m)xXyQk;hJR71d-b1H4Q
ztu4}H7%|+V#3HlapsnR}blX0lTsW~ZBUC3xY~N1BgDrQaSx4)07K^#M9@Olk&Wb~L
zb$P7pStR5L;6OvguO^g3j~p^nJMdtyQA3hHbV<B)CJwod(KJE=rT3mzy^^x7p{IOd
zOk`C6RJzhZxU>c=hpJYm1D&^NRm(*Dg&T4yE_XiL9SCCz-oqFIIr&KlET7}Y`Wfk+
zVbU+MOdLjsa1dswQ&d$Lhm*WVapg2Lt<mKmgKZlLcg6b%XfWSLMjz@+9w2a42<T4)
z*f1z&ei5hTaak*7%w#Z}Q1w@YoJu^km=fv8nQl#T1yt`GdJP>}?MfHwPN5tJlE9e&
z$=Y_Igt@v`<T+5A*p|K)$}o}at)?1fpO~}2yMbPlD->Bj`1KxpvH75sw3Iwkoa3Et
z!1mjZ%noc?9Tlr@gB)S18uNNm9gWi`aB?u*<;oha*4Z{|>6Q|C(IPUM^mK7w#Ch90
zNbr#UhT2!=?r=aa#sYcOKA9$y30rU$_MzZ%<wP_X?0xC$ZY`TC^6S@A&s91enRDaR
zvYmW@^V)a#t00FO(RZJE_!HFTw+$Q$=4bN1_IMeb2d@}HDECD**3)aAvH@I7j<FT3
zuK$2ENs_9K-TcHB+?4%M>@grD^4NGLZg(D}ig#nXu&>{t5=n&^RU8u%g<-deg2km`
zVb<%5v=7`R!Qi9YC-c`Bw~$?9Gc0)?gd14EsF0$;tqW8Pg&cQb^4mHL?S~zVQU=O@
zk&I$S(gqgZng+a<nl9nY(R(j7NYGqxC_QDi%V-^=$k&Cjz3<3^8c!fxFMhpu;7pYj
z;l(Cxx*eOOEmm#s%b2A*_JH73W#NKShM=1;0CFXs!wb<P;004)9)OO-gQ=v33^Er;
zh$z`G%8p$_^sKl_$iKohFT!UzNED^39xZzqa?R7n4h4?H13BvQpWRkDj4>UQ2$$p4
z=->+kpHq7Myd~%!=%$XAuY+jkui3?T2LmbyQ}w|;^eGn~@^Bt|3h$yLS25C|MX}=V
zU@0`;cN!u(R<)djg_+i<5zXkgviL&WT>$pp?q^qH)P^HfOow#I-@o6{ryYD&klAfE
z$wFgzv`gG}9qbyCVCG1d2{WYoH*$<~8*y5fLS^LzloKwCtE|S_WKt_}r2tkyslR=-
z3@qYH*haOE$tDCdH|;C)vAzbxT7l*<=Ms$T*c*Eo0~UuIzfebc6+2WHHe?gnX6ECl
zYs3oNiX`?284%h=`@qDG#M|Zf582Ivnk;8J(_AHs2`$^>T}IH~EV);gi4#&#R0a#G
za(+y~C42~%Fx_?05sh(c>(!DS=)Oia2}RY4r-_FTfE6Y{M$&}ycbX>CaPqoXwQeh|
zH4n%l4&xI%9ikx*CdO-#C7lrWNHw^QQ_R^Rh}1rzQ;>}-*Na~qLCGwpP8=?XlQ$2}
zIUS|0#=fZhzP)hMS#=sEe01(sk_cLn66hQ8mLshnNuh%QY4ql6;O<xj7oJ6V*_>vg
z_*vM!C5Lc)!#b^!@@_$e?kFx|*tWLXkJgsB&@~V}HI_?Av$Ih;?GSuwC?$zqu5vLi
zc2ir8d5i*hT?b(rZn?GZ-%=Yt%#|)1A<72Z(nW*2n0H>Z0i@@szLoN#+gVVfGPfrj
zKo9hpA?3t1i|(v_pww!!Cn1BtV_12g^i2+&wlxHuB^U8<K%f<zhKI$vNd{AJBOY#E
zDGxJGCLT6_qKk8q?@&@8Pt(fc%)^d*OR@}+=FoI=>`b;itVvACeptm>uw=%ziKw3?
z1(})1a4ot@!4+t~3g>0%p3nw6T)r&-@0#qqXL#SFAQGg7@w_JsgE(CwmI=>VXtR|B
z?Awc0XS)?7Yu~>8I&Uj69MD-LgEzXehC->=S+v*DcnPac*MPeL=s4WI!^;dFx^?i&
z4&x!wak+hqdYA-~%9^l%h_2#ABp|Y^Hc+Mk_?YjY`pd*Pwt7z;fo-o?EAWOk9jNd^
z&Ld9wS!*0GOR)1eqMDJi^HIN#NL9vM(mm|=eYqQlmtd0kFn|gjfnLeb(!K6lPPL}l
z#jDNJ)d?nq7Q3b<HI5)d#7T-u4m;#(Ns*<iIa_klw34xav$9KJB~m`(2!SWLAVrHr
zy(CB9(x|U03-R^RQdW)X9bgDCOO!?MrM7fVxKCP@&upzx-V{bk?4StNKI$b=Z&mKM
zgtAnJ=N!~AP({3MeKJOr&S8IENM3t^>qw^@pnUi4iIha8>r+*09eF3q24e1uMQ|z^
zvT-B1+zVY=y)NN@VGQ%#yHB{|vUH@L&Pt<cD3ydwx6R9M*Tqr1Nmdl8SHo>{Jd8=7
zfHAeW4m!j1sZN<zx66Uq*|=Y{_5`Mv(l1>mo-^_7<F+6*uvv7yKV-46m9L^vI-U`>
zBy5nb_?C(9?Y%B@8_k7Vg`TB?8azqzGy{IcndqratH)ZfX=)tI)c1?9e-O8hz~BZ5
zApA~#UV34#Vqz673A$preJzZ~l)ZU5T#p-H;uPjO(S`cD+HXuBCoaCMsG8^VMart9
zpg|{47U+7Qsj)a}4af$CjfXwb5lM8!sdv_#CXzOm98Q~*?0}rfYQ0qX4S`M6&Ws?)
zl`?H~>G5hqr=mJ+ZNb3#a|@1moZWcOStVZDoTLZQR;*9h4$y-g;{=7?Ut3$6MY)SV
zyT*QD9K}fdbvf-g#pB7%cp6_jl_P$=JBg<k9#D0hT%E>ee>u<u#CzQITb~siQxYS9
zPncZ!?bch94f$>GAAJb5bg{KAXK8jxx=$rZPT2bvWkl|Bhq}?Os-*XV?8qRPkaT1d
zyJB7G*yGeu41b1czqhuYlpGsr3U&mq0G-(Q!Q8;CodzX;H>o-z_N_CE!Vkh_3Eh!d
zVq(=O6b*2$iMJs?0KSrj0i=ib=5dK|pe7)}ZK$VMMZhb>jEHfT2;@L&{^=?o_xuMP
zThR#|MZC6Fs-)n;K?R3B%+y9RwMrGS77r>p9$%(>m#tJus>Q>h+`<?NpFM_CR#5-*
zBw6d@z3Qpt?X&B_l^X0X>9CeId?eF;S2B=?N793fncOV=1$L)f^98wedPFh~jH*9)
zGD>nFy|2fKA>!a!6(KHE<lT1#<}}Gi)5!tmbh>BZ0ktB7J&vWtamCE~{E7=wQq$DT
zv+poWt0h}}$GxhVq0*bV^E9l04VlQyG`FFC-)B>~rzvoWQ^k0z14{l2)a={J&1%Ln
z8+jLBW-u|mH0SKvu75?%eHRXFR~D{vC)5|CNlT`O=ilaO-%gi43n%Ja2z`9sJcpOg
z3@OGt;Va5L)ViwMORgI7yB5Sg{b?FbO-AkD&Ox`+40Qm3>tS5UyW}kZAXue>Zo;XA
z8EL28s{^=MT{nVyDe{?#i!`Ck1yf8A+cJcKeakHY6olq@d?T~rH&jX?av(SL(YH0G
zfv49||7IMIfbj{_MM=0nHQ)lBTW)d#Z}jj+4_<{UU8v(9nmdW{n0ha(=<wSJ7j)i=
zm#eO$`<%gpM~*#3PRH~Pe}+9GRw%}h2LcZF3GPdcW4T|Ikd=BE5;p8zEls0tm&jRf
z2=bSi6#5;`3O&+ksZIvH{&;7Dx>q|L-0{+Uh)-66imf+^6$KbcmJUC;V$hBi_b?G#
z++oyOf?a9gISp-+0AE32(!Uop>>BZ3&TFQjnFM~Vm7$3$vq8|oZrx|_+<m9;zkZDJ
zF%77Ohhn5e1wizGy|nUnVGoBxU0b+_C4tv^s|r;tS=fK2DYg?VBq53OrzwRA9Xaq{
za$%8)N>%gaC4BeIuSyAg&%!C;i|Qh~I?ZCtk9(4g`{ebCKk;hCgQgiJ<bu)CyRxY&
zhw43v`Yt4*G|KwD9Uh4q0iX1vI7)GaqI1GejC_ytgGi@;%`lTP<!~XT^H13sCqx~m
z#f6(2DY*-8kNs-5psn%luI826-$#uux<it0`_?aeTN|D!YQDQ@KS=klWI!}j&jL*e
z(*c!{K8>v6$qI857jM2#uGHeQwRKp$VU#Xsmb`^klHG3F2urFpJHL)w*%jTwgx$4A
z@gPEe|JN0PX-3s24vEFq*5lA`PIb7meAqy{f06v*OU+3nO?Z%iK004yq!GyenGT0>
zE6dOKlX3I)2?GKBkeuxwzC7MX&2@J5h-%yC|8%HQWVmsG`U(F)odoJWU+2R$n|b}}
zc>e@_YGI+V2J+8ppFH#$<jN-bV~5{$Q0I!7eA979b!G;K)rGb+xp-5G`$e}ix=Y0G
zz%R$oQSs1$f=BZ0U;L9_8Z`0W!*=+~d)_SAvzpUNYhAn4jYt-Qpmra+bkJ0t_PV6v
z463H|)%I$juo|8%*^tpova6#TD!UwnaoxZoh(|*yl*E(@JRQi>R=piq$adDfw0I*9
zQQoxd-K#mVA&Pm3?%+ZNHR_Ez*Fuxk`3x3hJVls8&R-1u%Ng}syaW`?M&n#Cx`nJq
z@g;jH`4N&A0vWc+f^ETy_8F;&{3FDr%_DZ=FS0ughb3o^R`irpVI#~}L;WX=^SB1{
zBFHRAc#K=|T|%zLY)q$lr%vHi$Sf#mKH)GHWCI%ay}N{;bTmsKax%>~USn`2z7e~d
z81Auon=Oc80$^@uW5k!AqP&ZyNlGt?(JbcMl#HE)fIh#AbHW{-o2Gu;<d2*9ann65
zn)q##zHQ34c=#14O`(6+07vV|Cn0VyPOM-Di<Xd}qhYz?D!>-GmkS@_;3dm?EeY;L
z-4!E%s82Ew%9b<!aL$x*Ujc+ml?*es=u$)`I<X7l<A~?<EWxE^w*m6)EC`holap3b
zWV>+|0i*`*psOr`kz^ET(S4qs0k!B-^If2IZ>HI#%ON^ks2uL=0xuM)IeNyGQ9DS?
z*|}h9ogIv~Xp!LgKx1mF1h{CjXL;w(<!bu-od9XDBe;#?g`~zsaW}7eTZ|;9ik9#a
zwHll+fb>u>f_I=tK+kia3X&X^eBUnckeB>y$=ePUNnFxZ>0LP)QM$xH7<(ilJIFzE
z<{YzY>byrzF46(qJ}3au5|rMXudPFj@K|zD6lBFApv9vK9^XV>^L!#Q{W*;r@gnkU
zGLc(g<XWVY){25b(NS1D5-K7gcKQsqXOl5EfyWs8JIqcVd0WHTnA3f8Zd~8R^#IT0
z?HYV0N7qeGNq363E*|e-he3yS=nh=%OcU%H!v0QW8`XWL;JRiL5m~X0&NXvQWyDKq
zjgcQ59KfF3dY)aDc0O-)rgxYIZ(JTc`DLQN%oRv?SPxC3K&S;1S6#t`O4U10@w>H$
zf^$n<p5`|ki!+JK=aLu{Ql}K09sVlqPYKc3ImuAx5lIGQ&ifDG)8TByVA2;9$<)9K
zH~|_OCVG_1gyRA$;1$8)q1pL9DJrP(C#4`fnIc4_r%Ru_Aj*|jT!Opo^xQ4QBv&em
zG24c~+jq-n;N&99r#*tOe(Qdy)MWYSPyHWq?SWJfm41KP|5$1{nu0X*`{+n~IgYZ)
zP0cM^e5&iO<NuqC|7BcYnwD&me)7W)#{a){{b$pEm*uDN?;Pf6>_ZuR2giRr08uOq
zB=)eaCIum5WEeb+LBK;DGgl!b_!jjEA(yPJTutl!jej=T;q^Z*A=(B#cejh{QZNRP
z80d~B5bdk9fGdkr^*NED^|7u$CUKzkKk>sMgg3AD@H4@(RmK_zhI=Nl5EDV5V+C>$
ztpzj50n0pFEUGw}p_rYaj{(b>BJ&POGd}j29W`G9mtAFBGFTm#Z`F;T`n(g4--Tz-
zodX#>g?(@;3g+J60ZzsS=YYqx;v~?7Rp!7a_||z~b=yg`bCNItgaPXrQ<tebc1f%h
zR~Y_4Ap`#N+{;DW5SmXB#7t{HsRL#x!cv+AoPeYZx6SDp@S$@|Es1eYB)(B$u1V;8
zi4F#74_WRUh~A7A)t102T`pncS4e9SIOYZH?c?NZb}kr&HQavei0mzdml8_9(=yek
zXIe+;ROjSEI;dYQ^V4Ez{yV<M9D7|fH5<q+Ao*MKQxLBM&%dCW4~5)6s6;U>>eMaq
z{of@aRg<5*|AbVU_-a#WshS#n;I)4>IqyRFNL8{9G~s|tayz#9aBMG%=qiEE#hit}
zDW?2x4H1Pf7gDBan2yJs%hsN>uzm_ALi8F+|3+4VK@97d#<`CeP%{{I&mm^kEg=N}
zzmOa@rFn0KdAwXwkM(myysE+SFDb8o{p1eo<afADCI^?u;qbjAayVTnk;4-tz+w?|
z0B~*D%ftqi)i#UCPYs5Y=(bG&l>{)!DKDxAyb>w{r?;X$3KEu;a>{*9TlP6^+2^!n
z?>B9kv6_`I@QA2Xl(@$J<`;E%BM#l>T8;aNM@|arX~7=R4YGHGgp)_Ri3kxKt)^G1
zVr1><KC<>N+?brIt5xQ%h13OCE<M>L>Q@V#xo3uC;Z<(jOfwRNpGT8v*vccq=9KPs
zw=U_FX{W(`VFKzAdL@2;IY-#qDn&Oi5u|-1>UHUS!$n0h9n0ezJQLq3NUcI57PjBD
z+lk?7?SQQc2uoYzpPPa#-1I>OlOafAB;wgnI-O{EjNzIT#XDx~!lXt}#4Sh_ISGPP
z2=yDsML2Vhs8YoA*2jKGt~O_$&U^@|vvHy7V5=#CNcfh54X(nyWH-kJ(5LeYawfba
zhwwv0ejLMDyG$?%AUTXwI`4a9Dp+~9G%({pE9%BA4^qcOF`G{m9}rQL0#^Q{epB$j
zIe6MFe2D-6PVy~^+vGOy6@|%dj;ZqW*AZtW7Xm<dLj~RksE6Rt#q@kE<}jSsA$b)D
zWhR;7EGGrQ2pCX2+34BSHaW4;VGUbkKm_c}LSF%Xsq~1Mrl77p)*lTC1)9*%P5ir$
z3qLd*HjdX>wa>h(1;+>tZw~Y>!Ext?OX=lV!2%k)X%G)EV(cv>%UE&B3qt&*I1G9i
zZa>ov0!<iCbC^)%c!pWe$Kq3mh!CpK)X?y$;f*FY%x8T4{=j!4v@3ZEJ^4(=1$wjy
zl&WT>RLj5MM7Q%~=3=%+1o6dx>~UW_3~>^VfZk2=j0j#s1ml8|^CG<z2sxmcoU!OC
zku+CX_6GWslg6%}ar;qneG%i$g_^N6$?*;+|L=Bhi06dFO8l$o(CuB`l`0?PL<l%?
zl$G9!d<3Jwsup0?aDSuM0Ny|`-j1pk9El6gw;U+$*Gd3od3K@Sz2U6DZsUz|G|Xmw
zxDcP<ahT*O@KV5E44U6%1)+uQ!?PYaAbXG$_Oucb2YkV3Hb(W(6V|X9hXKvD0^>}s
z5$a&%RHU@vc=QaE#n|SfBRB}30$?)B5zGL&+aY?Oof97gy;b}#mmP)tEe0;BhvU;p
zX_{OKPk<{EnU!H!&Y1Y-=p0A@1@0k>o@c;$yLb^<T$8+ju~<~S6@;!)|H>_K254aI
zDA<f?d7NWpo(E>Y_&ChJTF(&cL3SCHB6nSjft^@h>1xACC<1{bbJG5fy|W*opG4he
z^~r)nsX;e<_iEI1Hj}PAz?$vfaK*r>r<I%YxXH@XLSJ)qQTR*B)IO~CAuKGVuJRbe
znoCd3x3!zWqi7t{`lcGK#g{H-O_G$VDq2*|9Ak^vDW<H53Fh4KDS?WqKyC;TVB!W8
ziqOTFS1w3Aa5{t_IYXi8wh9mfkw;N9iOg%rDucuAfE`sN3A_l3te3{l-K@NmNnul<
zhboW`Y%I31nA^vcZg^Yu;SR_pohG9O^ZJUv4;`b9(s8FG#lDYO?z+SRH0^J??6SUO
z^ZSndM%7(a0u0V@ehJ&g$WjLSKGFz0o=d{BF+FjbD$h@0U)j45$fEkAc(LL^EBYJC
zTlJIcCKe&hfs3c`;)>ALFgZO@^r?^-7USXm;wcH2tm4<#+Ik2JC3Bk5lpRFh3#ZEq
zN}aVGq)qC8d`s&n+9(H@O)ZAVyk-e=7~duG_PFT0d@h5ercwi@5*LCOtpX_ZpB>ND
z?ZX0hxE!;R{yTw>I;AU~F1(Q@SBfu_ekGr>q*XX~2UN2jkw>=dN#>yRsz}fUT!NzI
z6e;A8IeFrkiSXWPd15zb&0oR%NCP+H8|Pa`&!Sxq&BuhIE5Ev2V2`izG2az50Nx3`
z*kkyJup{s;VFS4TwHuy&qj$zlPp(AX9{eGVYUd@t*onj=ZLE1R&}_*?4w0AJX|Z9^
zrwC!zE5x$nEOid!55pX86WG(Gy1N*GjNq5Uev;Qz^T!UVcqUxOfJ)WWQm~A3LR&`p
z#zh;F%lIw|mYw-tHs<s6JdZ<rn+Oe@QJuo@-DY&aREznr1=oy2tfO|51+5Y^8CM|C
zs%Qa>M?>P(#js2_5AFOOaJ82_4#$4;{Z-~a)WjkemNJ?~$uqUczVmyC>P8+$pP|aW
zH^4z5fxf!H?I@p;Vj(RqIL@9bXj${WWQl^eJ7md*Kl~K#sKS#2BW#rV6~#8ePI-W&
z)rUhjq(vx?n&oP4W+&eS%58R@tyu|+xvPu-4{PVrTl)nxL5@9#5c*5Qro&<08P&pp
z>i{_^0PQB$76>~6qCWIa(n<|zqKm=~KyMpe9p?@qcgheGG2Q_8Nwzv+XZ$YL{2;@`
z)r4er-1pN#pVDr_8cX#%>`*G@0rgNRM^p|+@@324wtO8-(*kpf8N(RM3Jp;Z;iDZs
zugOlBJi_}DoAsz!ISH-Mk|VDTD(!M%U(kg@1z=q}keviQ8ObQVbsa7r^bz?NU?A5F
z=>%Lp)0x}|41_@mGNikVbxH2S3CO@b%0qy1SZ~US)&yDOg4O~ivlk;@1skQ*JJ|^s
zO~o~HSO{&#VUcjlRr4<14HO5Qz)WC(1oUn=V@O1$TFS_Ef0JUNDR2;7pfa%R0_}&)
z3u^&5JCdvf4hr^bFF{br5O0_v2w($mwH(JE{k#=PL_{->`{@i=voG&Wt|Q+pX7{8o
z&>^I$)-wdc!fyu|!Mptvc&e|e-!TS8^f-o#9tZ?m*!%j+p!<O=fiu#@cU{@sva9-8
zZ${#Ao?+PVY34HN#-agq0s`tVfML1z3^I2&%Y`fHwzvUV6TgdEer~9HeukP9G(ywl
z9UXev5M!~=bCh#yrfT`8$TL;v%BlYz3lIwInzi(Q!Yy^^yE{IKwnJ8-7smr*hH&9;
z7a4;oW7KJkbEewOQZko6bU^YKUIdDc(gM-6LgW}harEqu&$P#C4JB|XyIF+nGdY0_
zGmZxlmf6<Usvnr7X=086nEx@b4VG8%EQC?t=&jrme1<|o#mW_HN>Ao)<vLq3Rm)f|
zVqSu2I!guwk~qu9PQFmKfe6P5(3aUGM4vQy=tR4EKs+25HRHelE-2D5yM)-a?P}3&
zVA@{j=y>%=vjaB_aRThnRku(k&H91a&>C_*V2Fox_H>ZX1h;iqnZ`!4##B9AJZYh@
zNq<R@p@p}+3C!iHh~H2H&s8S;kz_$~Mfr3$R0goQU7&_XAa0-=T{gT-LKI0dV7-3z
z472TcnIeuJ)rBFq!fE3+S&!K+^<-&Wo|{1nly6)i1D}&pQkkmlO<3+y*P;<-Po@;{
zI?mEC+mGra>#G#zkG#~Kvvdr%V+ZTA`6F1)HIt4JU18p^1*V-3kx|SEk|ZL!8Fdli
zbZo__LV1%sXOo9nmdJh3rS(26irEOal4ec90Z=`2=Dc>wDfjbJgS8ZNkZK~&UF_<X
zn;b2Ki3$%33j3Epc^}NbN4Fi+?z3~oV~~)62N_ZhZFq}P(^MaS?XLG0GptXzoB$+o
zWhVm8b^({W;|gTFP=c#!(c7;zc)$Fu-_=u?gR_|zom7KC3xiH1zDoDe*KUMb?;)}2
zOow?WQr%ew{Qhp9{A0$o!kee?*C4yzgD>4^u~>_F{iBO?*x%(^+?Y?jU#1~Ez$vC9
zB`0xc&gBYx=jr9HtMHZM#kIqZBgei}`o_F_sc*l~);ZGa&+QFwBy{_bV+Z}D)@&c%
z!;NSM3$(DP1I0qy%)p{h!#<bv?B^t<{q^L<_Xqx9eBRBUck{=xn^i;tHu(x}9Ji<I
zQ^RRZJO>tz<`(%z8AxpH{4pqyjwL$@b&xftK?1wFM0IO>h4VDpTzDblUo#mWAa$Mc
zsL$em-iVmG275Y$uR8oyP=)(5v@#2iVL2|W0SFs{fCPGUQof~RMo}jX^iJSN8cI=a
z3*)3vu(KkaIQy}S=*VnH`fu8<hZPO){RbU4EI&Y2?Ygft>&O!{(&k>iPh$PqD8tUG
z6gZf%l_W*?6LgbkP*z@-#O1~fLi#Sgb|=XwZ4Uh$AEWb@eblIHjf$AYxEaoWitKGX
z)qoBafJSOp3s#g=QA4||E@hXsK}*khL7}zTc$yB)sFI`~sF_f6OcsnW8T&`5-r)T$
zK9g#5QMEEmmUsR`&YOTkp!1h$k32`b;*u35`d{OB)-N1H89Up_?8FL~ppvM6sbLx|
z^olx&y6x?FyAf@lZU5M9U_hm&2g0LT=TVA{n$z||Jq_15YtB1SKab95X+H@QhOg|Q
zEH)bFglkPR#!szzL7tNoyk7;RF#;pp*$JtSjVCob|A|90dthRuNi(W=1;ewt#C+Z(
zlReM+aFYe@XY+l}kThfQI=5Wf%Zrl5+YFLEnzhDxIH+P?8p<GPo&n)e&||hPxXgSt
z;bj*|-1o6#B51K<JE$e>rPv~-u{6PFk(8{2FPmCnt*G%gCfDwp3F|jXrgF0X^UuU7
z_vJGJ0pozWK$PSh7H^W90$mn+v%DbxMK-!|&8sagw<|xz=oWmh>4YkKkI32~;U>{5
zgTo|c#SNq=IcwW3-338(1j2cjbtCet9Jxt{3<{H*z7(au%LVyPf|9H-lcH_@bqiyr
z3lP9mG6+(h4XFByxVVtY@lOj7COx9u8&DESyp$wrujf8>Q333kwJUB}`vR6m88f>S
zdmx{e;}A?s@HIJ@{w3{yegDD3?p~t~mk8Mhly_X}5okao9;6NZId@*2PEJ1XI>Wjp
zbE)|@l+`5)E2)p5s76nOpj3_!mK^KRO_comug2c<++GNkjGZy1e(=79Ts(ZnXm-P4
zJn?WcD`4Jqe{Qu}zqq7f&e6oDW2^?>Fk-m5G|Fzq+L4;va#f1Ye>dGHOdD!zLlP07
z&(NVe4a30K$wPS&FQOTGjl9aP4yycn%(={Ii$h@%0}ccdiDd#w1T^qzETJS{><6Ws
zRkj4v$^%Qj9jJa-&UNsZ!Q3moOc`vx>IJ@VQ93m@aCwL7u~FwM;CyGquZFSkb_VpU
zMh*z5CgL3H-gb_Ck~NHCF!)(rNZDx^yQyEx;qjOk8ZDpZZYY)1xW4q9-M!A9R+J1g
zk1+hjeA8iVRP!yQ*VN>om#9n0ML!!CHPOw6Wa#2*6qLq2x%g<77?>6cxp;j%Crrl$
z=X`YWH%r5BqR-JcpQCS9+bgRD-)t`O23a1s414PGRhM?f<c_1{6lGKb@4`8Mbmg>w
z&YS!oYHPNWg%v;{>YKz&y#FLJwK-%y>g+IPnT`5^i6*5*5@*Hra!4;&lh4_uKWCSo
zn_XH+=C6=b`duc5Su2WNQf!a@TymIbNOq-6osfjUOh-l+NmWpvlqVe~)2T)cuy|xu
zhcEF^_QdI94fP=%=3a-tD^(Nti!g2hMU*v1abI-_=sz@walRbI4U@uZoHTZuKshw5
z8=e2el^5MZ+VHMPApqDKZl+*8%?=_Y5>%H5#asLMsDqDaG$DC-WPIq`{bVxCZfFPX
z|A89eCuAGrCL9T5IwiJ(I>(F^T)zlnmc46`q@N|jj05!O^bBt6o$jFHV@fYhL&ChH
ztT*fBaNo&tzJB$ra$3IXn58${K)s(z-{amtjJEl~wsS3Gup+DKpiH^AM8x02PL~Kk
zxMvvI50$4qU=gF;w3W0l@N!5n)vSNjfi$%4&>F`0X$ALg;(AwFVFyD`FSTd9lysX3
zLI9A;q~A=(4(%TIA-X3wx$N!My9|)66#4rMTZGoscFb}o-1;t3f@SN{;JhESW(@Rc
zfLYxA4P0APW%MjNA4kXI)m9sN!>e8TTIk#>6sw2nh^QT9Cd-*KqGu&FjdXW69%tj5
zQ8p{~*d#z41j%(6e8mZ|=})NblJY3vhJgQrC4d8Lq2=Q<aWS5FqQqN`y_IDec~a%}
zlY1E}<lBq#2-LU(M&Cq-{Yx|>_3=-ry5(F6E`@)J?nRum0MmevCX8yPNgs1NJAN23
z4z9_A<JS%1HDc!qj?YAj<@j@Sa@Z0VO^Vg2^~s#M>8DNQV|z=Ro%JAT?tp510*xS@
z1x#aC?}yQiyB*+?+K>1DEQB7j9e;yT#tW2>v4ePa8lrxo-eVC`DU+MA=WG0wlPik~
zDm^#mC3}>3E-Kua<t(afhZSraY=Bn@UO2Y|#LMyH5*FSu`5|j-)$0A-DDey~xDtW(
zfhS6@r#GeilDAJ3fIJxLb7>PaB6BIZ$TD(EK*aba?4c$i-Lt1V1u08xvRXXG{W$Nd
zVbi;IxVQ=^(tA^J5XGyVXN5|mZrRE{W1c03T}Ol>nYG_Jzf<DUF;ImLZAR=5ho)S`
zc(zC{@o1I~6=EG&o<wTF#4{jQPjx#(pWPCmekrkvE=dXUbS)mCscU|9kx`xzY?f(G
z=Gu~)U+GJk5vrTF(d7(e0qSYTZ!TzpTY#g@p;wl-8oE$D@)xGco0y2FuK)zntow-D
zKY9FL)G*vZz5V-Nb+`jX|BV~h9<K&WJav<zN$ie33S?L3D3062c!@W?mw599oc|hE
zaikD%)Oj{oXz^1v=MYuywUBWXac&xFcD-%+A!kK71JP-avh8(NNbGQVcXEW-tAq>W
z<&H@3lpf`)Je{I9t5F1F&hG*p2_CdavkZrcVsqGQqpU*1$Y(|KlRT)b(;oM|ep}4}
z1Aj<y$6uFm3UyWpQ4V9Up1_^kr}|ykR_Qav1dB^CwIn3Rs8PTxshABgW=BJqNoGNh
zllB=MK{t)G&E<5jve5~Z53laEm~;{ZmYsd4TMD#t^9ex^2rk5{vJK&tM@*rO0;fPC
zeA^h1MCh1u5`8+dbJ(P_GrBPKUTMPBTKHdbiTda+t!%HwQG!5cUCc1&rGe!r*t;3_
z+r`#+GUB|;Ks-q?1j~Oy8K(IoN{BXMfJ)>zN}nRaC=}vPG3E^wvw@E_0R}4G-K83f
zVA{UYh7u#~c8k2X?`TGAT3{k!N$16huW1F{A+&I|e`qmC+0l#VFJFBB<onak_lM7)
z;Ku4+rqiUw*CN!}Wv$(`cTuW@83|2=u@yyPML@O@XBBt&f3)NR!R{U(KYhY9p=MsF
zr#v%%Y(=jp&ONpZ9Nu)l*K4KeAZh)?{qf`)rEjz<mvXwJy_KXB!uh}w{kpLcA0#B$
ze=WvFjhHzDj&}dSy$27Q_wP6Hf17l+nns}_oRNGeirhKXS_~yjjn|*i^@fLGJwB<B
zk2~&TQz3)aYNZKzHNJfO6c6vq@4s~cqo@f%FdCHXh$~Ks<Y?7(5?4oF!aCXuJ9^@v
zZfr;pn_)DboeWa!VyR6yz*iqT#U@{}(hiwckV%`BpP?$Q5E<cz7q9;7$*az{uU@=<
z8MTw~WeTK;PND)P)C^_+%m3(@q8$g(P>O&Oz;Ehh8@rk0b+YJxcKDs>2};CtTUKM6
z{FwR@mlFdU-MhflnzPY18EZ^iTwTP~X{sV+9CZFf&~md`(43%tJZC@;IJ+$aT@CBZ
z;VDE<Fr-R&UqZ=9U^IQ)F_o7^Ny3z(&PPwY@p|zD)}6g$T~x9Q1Xb5kCQnems-rw6
zkFGP`k4}rBFj;Cn2n04%9ddB0m-GemAXa9_m*Jpx20DfIiVF<c)L=#!<^2cu?nT$6
z=V(QTW05pj2BppH^6kw;PtWyARvT9-x!I8xg?JWk!V8*~%?(pO=?}<Y1~a!SR1|wE
zb6D(2QXi9&mlX|kiQ?m_vaMBL*?XNbt=PA@eZA2?+NrA$DHcDs9;;(xbTdE|Kxttw
z0|_Tdzn+7&Pze|XSr`_!VP>cBS}fBVOi2^>xb7X8!jmDe8qsc6CM5`vif98s(zr;F
zoi-KrpA<#~zGsK)M$~=`Jbae-tHt{K!ZB7)$X9H)ee(SDWlg1{=>&`J1?ec1y(8nO
z+oEEh^Qje?<Hl+C@W;G5FizXSWowO+EdSln?mLg0N{#k<I_0c=Yu!py{l<KL>T+Y!
z13YE~Iwx5;8G(OJF2zJ_W8#U<n4|2eC9=Ako#)ATR-F(M<fUbD)zDmo3<oWqhT<M*
zoXNyr&;dXohD#E--3A`FF2mumaDN=UNr|k^k^pizt?@y@cW8+MhN+}E)sCbV_E(fR
z(0Mp#+5W4fpK;e`_%nx};>!g$aoock0OVtgZ^_DmS>X6jb|0j;rJm0^!FB(DDa)+)
z>D1(Q*pZB8q9}NViZqHohKGz;Jc_TS4ARy6fB56%I`Vna#)1kM-w+yM!g#Yl9%9B!
zi4}pJq`GK=sNz%`O773KYHrE3V)l?kXVJ&}UeKDnkB&I63^R=la3ckgx2K5g`r1|w
zOWQ@vfNmq|K0}>Mm#9JaP}Sqzn%tMCa%)flu9CqjJa=8(zyyqT3Tc)@B_+_7^KC}^
z5vSo?&}CU4_6p5>-cIbHrtQ>>ops%GaRcty1!nsob0K@4|1+rp)JJsy+LEvzD*NGy
z*~ffuSGqy{5H2*=5LvAY0pCijxteWQlAJ_$ICVkO$q_Z6X5{q}ihzwu)UhA~*^kxj
z;ydk{2Q26FW&q6PfC?(V1E}AB;C$;!<_H>ZYEcz6ElKXi6LtUZ|NH+N{XTlsg=y;^
zoxXZTKR7zZwY_AF*vSsN0&swg`>--TNe-}hgbu~tjd5-Yk6RA+nH}yk9_}O4wIu`Q
zQP?5dk1K=bh~~v(_SRrg1;3jLnXINqH3==2RQj+~X;6%-=272n-e22!f6ep$%FoV{
zX{UL#vu-|Bj4gEX>i*yV*Z;4}GfjW8>z7m6dnCk?r|!fgBLaG;Mq(HtdUD@5L@xGj
zQ#Q*XBelI<dA_Y#>I(7;lv6qjYFpnW5Eq@1RMha!{Rmm&jlo=>hh?|~K~jR5yh>G;
zjV{%{Y1f^A?ogxTTf7WkCG5x^6JDKtg4$VHL!PX}&eoE(?E5d8@`Vu-YU*>rcGt*J
zZf&`~xBq_l{26XGiV$$IPqbs}6buhLKNYy;@$QS+up8$^sBQ?SjM+bKcm)P9p@N<V
z<_{fJn4Qrj2K_@4hn?Qq!iPuU!vnuMG_d`M#u<(;U`WQiLJY;gesQKDr)Bqc1!&bP
zI8nP9@Z5XsS};39^DmBrx&fz#K3g~oJOdr9lH+n}E5RALWdj9$<Qy0lG@zkA>NtGr
zW{dRlL>b)StHQPUY(8b=(?hlNm%u}~F7`UG+3VS<*8w(5adaGHuOG?LPHY-b(Y)Wp
zupL{6gk^a<l+Az+!)>thmczQ@Z7ZJAN0yMUu!$w}R!INdmaeN*XS+t}_yP2TLbTJt
z07-)e4k!flSu(v!R2$ybP=bCQ52iJ3-0RRAq76)^d`oxe)t;lVZPY~<Q%{A3aIRgg
zeBYGs`Sjs<hz``CqL%0>l<cs7B`=ftR9EISr(Ae&DQ5vYQhm<$K|UNFBNXqNvl(L@
zRUw9|;llqW0pJnm1;iK#PhZI3fDi(qpo6Cq@nl6Brnm_V9}uA68xVY^l9K@HB!2BH
z;Ui?`#m<XPfO3d<vQGou22Z=@pd&)ncc-BHgvxYj6L+PWuE<d&MovuCrKM5>l3qDR
zo=52vp>~Z^ap=$0W*}blV8fG8EO5!=_HZy>uq_CGYfSqQT_na<utZ+-st7}cDAgp~
zlrtF?C)gyeiiAH+bxB+knuWzeU1%0T0~C5?5;qdpR?-Dah(pYb8TmQf*4gilJlRvp
z9Ove}IcQodJ3@X@x(VEqye13Qi0&fIW`=%rhs;@vgIQlwOHpKP$t&-7ns||Yh}13a
zA|taJx#dOg;+CgJT>^0L-hIh_?Be7&yjj#ab~_}`8L|!2fv$AYxbLx3qSI^E(AjlV
zoaXb6eEtE5xBBq})Qr#j1)IsJg6a-((O({(f&5o|MYM$Vbd3B}&=(X@X>E*gDp@co
zBSuf-{&w*WxPl9Wio-4`FrJj*$jC(<HE_fNqMxi&D<K_8P^F&aIl}o-Kx{H)p8^x5
zM)npWQI>9*rTtsMJ{H%|U_nNb)fTolOgpHP9(M52CDqb2wLr}$z)po#<MO&ys=P1J
zW%j11E{+RA91TblFUCKu4yN;HmKVr43YzQ{CAL9m+MKgmx-Psv7R+X3cz!4KC!7O;
zuG2~%)y7>hbKh(79LQ93+!uVqRw~+&cu_z4Qd&TRUo0^m$bJ?n3ERcZ7_FdV!ahMQ
zzaJC%Tc9%&Q#^99aI>gmq?H@qxMWA-O1l50UsH9>uq23Q@=cOVT(VE>3HPC5ly+UR
z;oQfMpK!_oG;w1sZJYfS{*Qmo^_$1;Yf<_EY$N_xJ`jIH6(Z`~)S_K+1w}VUw6R@C
z{+H5R+{c)hK?mQOZU|hx-9x2)OMw$6OfK=PbZHqHo*z8N>5$y3c)yKl3314r>|&B<
z(~MCoFlds~)8IBCrV-xuXB?>L9E3S}s(NOPIJ8j}C?=;d&DFOl!%5H`6QdESk12u3
z${a^W&yI<CfTc!fM-PCH8;>@Oj2E}2$`R=p8&g14ns=Uu$`@3Pt97px`7}xHbeKd*
z>h&d5u(G!+@sgy{0m6@NGg?><fcitu#%mo3sHr36y|AVZQDSR;%DK-;@^0`<h9^Xi
zj#MP>`)*&sq*wa#umfZ_6cT~ur|ERnE~ijD9)D6z<n=dE`-wn=A+=e@TMS3j6j^;w
za9ePL3gv@UrQnL_fh-g5ll!tB4d=X4Xe@Bb&U?Z*HdtGM@xh`NLPr;l-cD$P2@EG+
z4k_NGlrIXM!iFF+&nU&&iS?e~a-(D#Qy4T=8&swVyV_T@Ahi7_v*B>gvfz7;9GsDJ
zrBJNk<Kkk;$9q1A+LL(RI0$$*O_m)$rYPh+k<Erqdgt8*#~c-N`}oJR_)Ifz+&B&D
z{m`wiZSFniY#--ulIdiKJBI-cis`JMX0$gjBTDfX{9nW({5sewj)~agECWyJRs-rK
zhJ2iILavUw-#GGmfEiGo^rlz8h(n1;eR$<h^WpEwOM-nTF4DnNeq#~}iBFUud{^JD
zsL=aN^?VLy*cORo;%*P1Afdv~0nc7R{dxyWG`U1G9XH)fxL6wG#(yyLgD6(O&&BDm
zP`53?i1zExXM>%S4%xw0vNg-_en%vaOs4pi=-Y1W7}aF#)Z}_tv}YsEIZeLG3a8i*
zb)6=lCWw6Y8FWfn&#2S6^lZ*<YXW4qb)Hc!x;^&tH_6N&&7gkgqDUYAPaA*#&yTIM
z*|>#D$L$vSg>k#a*!egaXRR_@#c)w@`-|T{d&^MARkaz535bE?Sma>WCCN7v$o%Zt
zp7{)J@XI0E2jTc2rcqFs`k*?fiCvPWiH0FblW<v8L`b2wF5~Ot`ke<tEOe~nf^R#s
zG!PiQf}DbMK^Bq-ViEd1e$nlBHiZS021(;W-F`SMdaPO`<r3&&oA_@(OyTSP*um!=
z7V0%l+A_vs*gD0pWd}9P?ZST%riA$SV|V;bToo<!D&7^{2U2p?Nyk+J>@p8Y5vUM7
z6ZSl_LIWc{Ipj+8Qse===4}RqiC*H=ZEe{wT{4t#rb#uD=oLuZKGw^7wGb~T0V+Jt
z<H<$P2vtSRygm*aq52%>44p|w=$i%~4R6$)r>N_W04?aMqwinZ7cL0TVpY&{$<^SJ
zo5t7X3!+ijlh#c<8Zv}Crq+DJS(8m7!D5mD2}=vik0D8-O!5rRO8|+7I~^yUEJ+l)
zE<lJ0hYL{_Pp1iz{Gg^wl*GBnBI9Lvc#NS5wB0GST}+PnNIihjCUqssIWT$WV-O$G
z9tJ%X3>Zlva3Mr0$?d!i(`$cxM7Ebra*W3pcjz0Ui4vorSD`+)IYwDaY7k;ruV-?~
zIp)Vz3p{$BUh0N!Uzwx~-owA1TzvJF=P5h3cp$_L@JeoXnJZG#)zpr3=deeWg5)G<
z-JgiM<xVWEf~N3kCyx1)?Oe}f(5MjPx$5XVu+UyAM<RQM0hP`*_zXRQ^dk`_m>)Od
z!kSXH14#qX4qb~6UASz)qFhXF#Nynkc}a2iyo@QxKH5cYX#Z%`|2^|TFA-q>tt+<H
zzqjZ|MN@}I;a~ONTNr-x7XPB#efE+4qv7AZ>v?K&ClfQt-Mb4{pYdd5=L}=u052#h
zrZIS$%ao<4F`D^7y!e<_-wxl16bnZW!+$j!mrO7`PJ(c9{x@zmt~g!E)ZThNV4{>X
zZkTZFp8MMA2dEw*ElGT7!jXJ1+`A0_$l2zZqiJ}SMqF*OH^~@g<}F2Bv5<|y2UqDo
z<Ge4RTGqT@9izYDRUf5c1j0qVe)X)<?u<ja-XMlE8l%YNKqFWBk}@b8Gv{^1sTx6C
zaT8?2Se&zSb@Q|1r&F}JPL%h;+vqSf6!M2^boAM_T@6L+<0O4{_=o+zRTs}4Jr18!
zc;Rslv<|Wxts})pO!+CyM0P`2I1CxF83ANfu@-!87pt8MX8_%&9Xf#=0!JVUOg)L0
zxCwS}`-pCEs18p+l~q<sfX6`dqPxTAdRQbV%uN|~I2@wuMCco6@=Cqc>G@cgfE8}*
z4}39Gm%7dh#x$&3b6JZ2yeD!doEkM~OkZ=@C$tE|7{S+V1Oox4ZL6{kjlF^GZMzlB
zlJAn+w#WT$xl4Xar+s1nTkmb*e3yulcca=_YSYVlLE_8KRdNQh${XuJfOkWaKH75<
zOor$80=-L6(`3W$Y4&ldO@g_17>VXZkB2TxUD1`1I0rjdM%pjjR5M^y$?1d?dLvl#
z6t(UC3ZaYA-z^fiE%%u3lJFz0Ki%5(COw)5w<g=-E>J3Mcdx}L1ZXX#xV=)=glxQU
z;!0g2y2ROvyJo##T%u$quH&9?ivE%jSTN~UqVX7WNN{UKdjFd?Lgb@VcQtA{KEPNx
zoTH0|*?Pu9Rm|3Kh$_k<Bf};na^^F^dKGP7`v=*ts0S==x2YwF7ZXOamBMSZg8q~g
zn|Kb42DJTX<_^_4kGw;nqabx+pc~cLA(J9K-oMXagluy)&#lN_Xs$H$GqP?%gcX~*
zG`$3i#C<2+EV3?!%HJ*!v2jLG@|h+oXV7&C7N(7as-I;>7AlDa_jJhyX)^4)?Bb^s
ztgc=TN1k<F*};LV`0`1qhSM<JJDwU{pdEk7qh8oR90W}AaoJ%IK|7>U%=zv20Zqh)
z*0K?`U)}&eF<!mW2b~FhF}K2Rv(+nm*g4PUR`e(q>)1+Fec3@cgt?WS{P(lf>-wrw
z{9`z;D$XxGCQuGi_>D2CQSS{ob}A0GYGceUz~My2Y$EZfHCu)>a7cYU<N?xthe2VC
zBBowBVd~s+hETs#tE23fK4_C>mdi7S$vn3S?{tGY^M)QQ4{hjiM%cZy0$Ulnt6|iB
zIv%2Xs3T@3fkp{m1y#<rmm$*1A3C$Nz7=u;aL6iTkP;k~9;?`o?6hNKvvD|?=WW92
zR(Yz`B<5XI2!eAz9pOW*!j%#S{?fOoJS=zQsdHwTw<OdJ^H~s_XDF2Yn<_D(C#6=Y
zsk+`AD#p#CWxZ90B&wmlKiDjG$Lv^pPOA9_)Ku9NJqn624k=8Z;nl3fv;=;2Vh_;5
zO<*n%l$ssfg+&`)`!azWt?!XDI;JXa#fL}WR`zX@;AaC^or+t+zy9Wm;)f+5SXL8T
zFeL)VaBX{!*#}IM$Z6K}MbjCGhD*+~Sm0iw6@-wfT=~MLM?r>Hh}rIhkc{)B4{QEX
z&F{`IXQB(e7p$`uI?!9Z=os(K`2!kVk{Uc@VuG&<XR0fk3yB6X*Aj4CoEnAP#qd_{
zKTa)-(&%P_xd`Jve1l8fO0)fBj3fe<Vjo-Vclz)}>tZUr3g5uU@9Dyr{k~JE`*$M*
zm+$_bctcG?5@N{nj0NKi^29evu$$f4KC+(B`OYLOrsweGKZadjff$Ip@bcWfb<on-
z5A+UW2NTCc^OQ1Fk!M7<XsKShR-&&Z55S)=Q{#(Q1mJ>;B~WBoI<5Qa=dCZ$6;Dye
z|Frc5-mC|LumV4EMCNV(422)_peTmu{ckIPZ429`ZysSr`c5y&1?(f~Op=j*{mY-W
zwm1|FHaL3pxCE1UW_EQh4@}Q7<LDPK($_`eX0X+2X?A${ALg&N_?SvwDu()U+ih#B
zH-x@MezA7lyFE-u5Jhfo=oe2-O8HEq$juD>G803;?Y!{Ec3SAk+*#S$0(P4R?{Z}N
zS@7M3PJVHxG6ysRhkUljHa5X+H3fUf&u8q2Qb;}qO}T&@Us9vf*8yJ1Dk$vSs(WR{
z#Djwa5Ryx1xDFQE^-&o_cMwotio2RmWk7zn9Qh?Tak87E*z4?;oc*0?Y+RA1h|XD}
zlxpUQinALb3R{$JARyZ1u8R#hPbi{7fK}Z2_X<xhinFJW13P4CJ)H(U4(zO6gsIR3
z7W1HS?a}UzP^3YYx$LS;C=cu*aUZ$`+uinGZcF-sZ!`YrJd+Q;H7(VYM^@cHto3I3
zFlrW2^SfyKa0cz>f;D;&Jxbsr%%k7_@Vs;S;=i7Jza9M#9FXnbJ~}*k(mDSA^vSF5
z51(~jzj_8tRJwn)j|CBG>*VF((Gw5qj$+Ba=?B$<s*<1n5jFFuMd(S~x8Jm%!pb6i
z{kl7wR;YGk`y6t!c<5OSMDeY8T+`rk9I!h*S5woy-Xk``vou!-HN;R+68__xmuMH>
zKwA!nnZllKY9g^vp=NyOJfiW1C~nX>j5aZED>*?09|3X&MGV@s2bT|=<UYr&74^8D
zh=PdjBrOaDWu~R;r>={}Po+?Qjwvnl*Yj1nZa%g#UC`It<BWOT?QfK$BP^Fc@5kRb
zBbq85F>*Rbca6({`MVNt#v9MK4T$R4Tqi_th|HWgGGhtG_U|>(AoOEf82`%lsM#G4
z410^)kwc0oeG7i=-`YL-s%9j)%Yz}i;iv2jIm<e@x}wbRpb=z(XfQeLCerN{S|3!>
z)ic}`Tp-lNDQ=oM6ZM>N*vsXdu_-@?Gv3<r47`Mb_|8^S4XWd`zZgJ#X4k|^w{22X
zQwX%!7;dMFh5&?1fnY*nVRN(v+~5aM_qR~`;LrL=hat6Tm*ok00SA!T=-M}RFc0q7
zhP|fLfacnBXmN79V3~IcD*&{j6TbmS?>RseF+nV<6o*|6i<SoA<VYo;bN!6r%t@ac
z;%4X&J?WqxqXvDHpt3V9M(!**a?BbSI&0**{9ELFy4Ev^XRzD);McwGr+L@C+Xf%(
zy4N19f8A?eSH154wxIlny6*k8xcYTZ7Nxjw;HMHeh#ghfrYlV31o9UKR-p%|_#a5B
z0Lp`!Wx%{2PkGgnAh6RNh{Ko1W}8*dkaaLC6H-q!>PWGn)>ea(s=MDhQHEA;l6Gtb
zcf5ptcx-~roV{Daeo3!zcua}BNHw6=2JzqofewfTI!2fL?tzfCO&fJL-Gffht58wq
zM($ihZ#8W5wU{C7BNO*0RtM3a8OKzDWoINeuUMl@6`Vv|iAd8$0Ti?IbM%gdjnDvQ
zW6Y@r#e<gq#?6Qtx0X`~x?vKlwNNkU`sUSw+ckAaB9HGVja@h--10`L9t_qP?=b1B
zx5m&s;Ld!WjpJSxI#jujBv6#xHV~9L$OD;-gQSmetDq<P)M=@7O0`4mFe7FlOnDSZ
zBF@oltnrA}5yY;LYQ3~w*Bv-^q+h};W_@#rpK0vI3Fq&4i9v(CY#8l6J9)V$$rg7w
zDJ#5J|2^f9>*knag6`g3Ts4NCyZM6)AE8Q$g<Wd6cy!F<z?lNLLJAJ8ogXtdJlQT*
zMP`QMiYlEguzOE64Vai@xJlR;BZRnjRW*#Ib%Z|Qg^6S-w?`K-tUMucF!(I4K4;Yn
zH-YW0KW3^viihd+Mi3pGp1abT<1~$&<I|gIaageklS$$MI$)^>mWZFp6&t;p4F-+q
z(U8()yu2Yr1(%?^5pEf{UEt>Ez2T>D!@~blJqY1`_wEnL*$LXfC<TLGDup1Zbloqg
zVe=}u_j=_3K`5wpi!YQXAW9NrnOuwMnccpLD6MjiYPQRlIGCgIAwKcc4@Y!Zm;+og
z)P}ZsvB}jnhI_;5U-9ckEfHx1R0QO~<Pxc&p~tjMio`x5c|klbIU%29AfQ++iLtnV
zMIPcp6ZsaJE+Gb%v@2>{K;j?Wc-J*1HbsSA*rPMPz+GQdVE&P$pvK*-tC`x+3{LhO
z6YblG9HtBb90-hpj(}A7eG=9PBN~%eQr-#dhdXhEP}RGrJ^MBtoyuF0i<-L4-R;D-
zj;Ur&?Pl@{vS7K8L?irpaX2(!G(;d%^9v)S66<z7VNeJGQlrB__5qS|ykrA=4dZ(*
z(BpWBa9>fIU?)x}`s=p1bC%A#l*ue*OU7SK&d$~@7j#1rmw3Xd6BP0R+!?z|@Fodj
zxG08)YV`)4lHJEL28KK|A~Q_M<b|RS2snL_aDczlti;@3$?=gV7wFe=>BA=j3_CaV
zoN&@Fqs)Ey5sIbc@XX`jv%@`Cur^l%$(*E)cHC~?J7^Y~NR`soMT{ziJx62#4O1fB
zG@>G447}u9;n-ob-SEai$N!kn3{4sa=T5u+nJC=1fm4mC(>|5kx+po@qQBi_0@9hg
zTrt1vWlBmet*L^7Q<JyyJVAKvp0_9<VlXT2VYeHEB&WC!%-^op^Vr?w8m7HtozR5S
zEqyPnE&@(9JuQYEj}M-D;#`9}7N|k_TYt;2n|#4h1a$Lu07*c$zcDx{`h9f5$fct`
z{mnYCzojDq-@;&hp8BW_Prbbp7x*$AwX*zte@|eZ$K@H)dgjdvRN&Fawzag*!7=yT
z-(erMboXBgo~+eR!U)b+((g>O{WtO@4B4mN#xZe~#M<eF2?P!$`DyMl8MwZ4>2Ruj
zBie-yx5myXrEk&wqOH|v|D}AI`JA^1ZQ9QX(J<(a(}xF0c;Uq^xsf=#ksB74>J8C#
zowANo8V+{a`9aV}rkq5cZ~QT$oFM1UoD&`XGg#XT1SKG!4<3ag#*%*XoN}HIiKa^6
z0&q&ASA024P@6J#39BvEdRn+#T88ER6P&*U81Fn`j2-d<gF9hX_-tl>=&0iv?n~>i
zq%rsyUY`_vb8&F3=9a*)@iwJ8QiIPOMAK;UuRVP01ROo16wMw)Xx{PC2AAQydZrB3
zbO`I1V)&_E!GXu3J3CNcY)VR9u4L1fq*|Y<7Y^^lv_Ox;JL;R$^iQeuOTU^>%B(HF
z<vbVoMlxRD(<8Tt@WQVsQxG$Gz`ABO*B(J~l()J8H{o61O!aiK$%=gwGGDEQ*fJPG
zVx1xo_Y6I_>D<J{jb_1;<KjdCmUr5Z$)7MJvg~6>odPb3NH-?(m}C=_6_Akv!k;6q
zA|E8Ag-8QA(I#qo#pkhAM?N((n`n%jhRB`dIBH8)PLbWFH_PC41+bDkP+W+(iXqb~
z(<I|szSZUsYz4H90ZW$Bw)2Y;UE}X|2+_tqG#Fa6Q<fg2tt}zOZsyuTr{#+pg2|L#
z2FfR%1@A`msu6vU^zA1Y`Cn(l6e!iJ*%`24Cn$0AY`n~_lAM0)WVO&SOoI!C<t`(2
zc4<*{OFb@ms6rh-5O^2I(Ba-JU<s1z^bC_-a86XQa}}6Z{tfJ7jY43&U(yrVxuL?G
zd!<jHiN~J)x^fus&IS+O1W8kl0_@;+NU|1B<i30dRfS~CMF^e|vkFt=^B$>b3il)e
zRX8$G%F2vmC`^9@>|1@$|IiV@lOPkkJ<?1MXrK+B8!@~B2U%}MmlR$qswA?#a?I{$
z_wSFy{oCn45Ej{b0k2fCsb?%4&iimHMxJ@KYg}$aCGtw8DgSPYNQ3s0_gQA*oN`ge
z5wI+?L{htQ<`vdI&gTp%F-`Ht!m~z#UKfxY(zy@os7_gh6fpF6*p<adh8pzc(Pl`F
zV!A|B>NQ4rBECkG(Q`w|(lXr&!R&xyC}dhXN9HfWCy90${FwOHDM9h!TVN`iq9zm!
zTXye{3%FEW7a0eUIU#|WWi=0xOy~Eex=r%TcT}FDYmWC{z_;jVfQl|or0hSO=Puzc
zHo;FJV$>uB1YE~?2DA*WjB+n26%!{H)l6m#D1(?8(Gyfs;BvE=%2s_@LdFB)<5YOm
zPTm|oNg9W-%DfUoZm7GNdyV<Q&g~|x^Oke#QJ84*Anm4EORf`??ON1aORrV_1XB{#
z7GuiSQY4OL<@jiJ8I(^&I10Tm=`m}#81nhI(pk;7)<K>&@k@_AfUrSUQtVaE1HtC$
zW#(e)pq3ZR2gDHrxk;$VljWfz@U6tgvlqJCv8b4--?Z?_iQaF-Aiq8qN)k(`hWxA?
z4MKhLPW-XJ0Lo^+@s1PZM4_bd|NcM!ACT&Z^B^U5<lL<XJ|4#Vii`It^6M^*xZu*&
zct?mE7Ud{_zbVBUYb7oAr)*MVfeb8;PaLEn;aYMK-5F5{gzHA_m!gZu{%H8IRsdHG
z<Gk|5TdW@_??Hw}f{m96I=KKTi|?y*m=SC$)nwobd(S+~4wEIE#JNZ5=H1?O;Tx#n
zBz`GzQI;VgGS>jv_FNTSA0Y7_^TkWev7lTUx!wmhb<(S*=VK;8ZXsPjzruEg`RB13
zPC~De4=EsvhDpc8R(9s#p+j`2tI$DS%2*vg2rH_fh|Yx&#nLDkp*wq6^8Wn}2*w?J
zQC46msAP{*iDMo0NXa2e^!-j5Cpzp1raqoF)4<Xzu&9T}#+tgGu8vhMGqf&CT5csc
zfkVpS5P=rpN|QY+G7|ZHd+i+7Me-4=g$omLwA=n$I4urybFOG3^VpORn!U8wM{NYL
zuxv1=1)L`tQIRH0GUnh+&9P$tHX67=pCBut2cVd<b0za!jSk204E8)LNH8UHS3VNG
zabbqs+$i{2-0$aV1SLX&w>z+eCAO4xC%D4?Hb@ZY#Z31weUrGvDx@G<HMI&%uEt{5
z`8L-CYVR@U(k5FYi;Htwyw{;J9W4_^lhts(sLj9fqhf}W=8DW_kxMy97N8726teXL
za!0ZtwD1lz01*s{4^D<dAlg6g-;GY<8}AT&o@Ij6N#Jjjbdr#I^e@rf{a+|ICEVdQ
zcd=wP5Ob7MTTO;DSd&`GU0xA+c@z^q+HmeZcGGtzCHF8ba!i^D)WHDfplq!XPk5^Q
z<qsVbFh;sCflF=D<;wPE;%t#~bs^n4g>ED3iFdjd6xUEk%E|($7+5V&GHRB886xMv
zL7fJ8_GlfX=ye>bBx!bvxLv+NSoKLYv>8%6%Ws!S;*Ng4$N94{>Pps^Iz&T85dipi
zX5B0+D7;`S1zZ&FB%T#6W4ZVHMbLm@q^0?eGr`19RtzR)?DrsCxGqT8e6jlqbI$Ld
zzzsP~_QJsG*T)4(TeE_6W^E@FHN;D@Si`HmLL{6Oe&tAw`b$vUsoTTsoW<u+0_)UU
zE0g*ime}P>n3X3_XvJA;U^t^7{x&#fV$H$ucZz>coRF7=Xv~9Q!c?F8vbF1>s1@_F
zSpX|girnDEy&zy(@y;%0ME{BG^)iY_k1>e;xX7%!O*0612Q8y@v_fwhc)%9%tS82v
z5y`$f@-5;r<AOk2{T3GB3v+nkuD^e8RG7Z)StUD;7L8mF{_tFt9|#MIHUaYThCUCS
zw|p<-oA;~VwgO^~^Pp}(jP^u~FzV=I_D^&jBLd-<lI)yC)`)`q3vtwjy2k}_|1c$o
zFAZB!2}waqM?6U>X7vu5ACOz{t4VR6sHVaTnK1!z2=_;L|C4nhn-#2lg?5ZF&s*@?
zo=x{wvxgo3v=rn&N@4<cMQ+7f|Kjr)^{`^t8%>faxd$>*@EA)C$+m1}0|iHPgc?q7
zc(qZMi@oZalU!g#yx&;7Sanq4tBxxrhcM`Rwe5%3(yHdXBFbLMmJvsGv4r|ZlWdsw
zZbXXcAr7hNgK%ro4LQ<0iXdGQL#D0*_yQi|<#?7|l3O_$FsUjpThGSCDEiWwW?={R
z_Q?~Ic7CrFVdxVg#hc{xPx$H#!te>$<)sb*Hm<3q6$)Fxt;G`#ArVU9&1^36g8Cg#
z1<5=nn?^i-!=YMeP&H<{F?EAIhk!DD4?`!O=KdcW(Sv&rzHC&^9434pVptkhWk#lJ
zuuBP+LF~F>ECgpB5-VlBsLc#dM@j{19(lIo;_}3l>6mS0OJGdH6sKS|?pJk{CA}-H
zD-J<KtxF7ALzYbRwv>+H3|+o1g%;X%h*{?i!on<NV^=nuxhB0;<G?3w#R(kmcy--2
z!Q^gBIP3sjiU`>f1$)ukR6Qx3ZHrmeA;#6;L~q8(z<D?4Hc2TU%e#(Hih8)-9EYo)
z4q_Nm8jBRUD?(~R?1K%3pnqJpYSr0?SW$%=-l0;lf4Rt2GF7jS8?=!~8Re9tJjbkF
zC63>ihE$c4<>&EOVo%uYY<sU5G8b7&UJu^a6?2@8VoDu|SLoH4;ju-@KoZsg#!6uj
z5W<dvY(vmY1VTTVSs^RjM5M={nJe$2!W|rTBtzZpOkFjNhM!yIO%c0fG%SUOP9qL5
z6vNnrQETWrgjYKo`8aW~*s*2q>+J*$i*|`u*O{d5MzG{uX4FQiczK_QisKJ%;o~z&
zV1-LAKBY>35JB(?|Ci{kKQ0A}<|GAjCY$KQYad23`^C&9HwaceIOO(xQ~p2Pi|$;T
zXppHO{#y6Ok~q&-B<El7z7gV~0yFtyHf6C<?=ZZzNL)+V2d9`31_aifVnanCLH#^_
z%*uc#1NY8Iobiy+>E&4=>WS~gxS}KANX>#F@Azb*_}fI{G1iDA7R-i`cs3B@DSQbq
z$UvHyb^#Yn=382lG2?c+2*<#%6p8B91tnAFLOfY_@4CcC7&eu}qvGye$peJ<IE8Lt
z{xNdp#ABI`(y3TB5>|pR!h1}b!wGr?P>v&Kvv1+n5tdo@98PYL3}uhu7HJ`31?g{r
z2z34raCIOipl-SI9GKsZLq{ts-&x&4i4%CcOvrHpCOqvc#0ukoI8^!bO!S)|e^Lry
zSF2kjagf2RxbrSFH?>Z^?LB&t=NThzqQgUO1v-_&><6Ay0bLdP;M7p?>h4{pMArt6
zkrXbR0qE}CR>W*HeG$ZsqSe#_bV<(Rl8D)go&lfN(7S9Hh&2UUYKHwL$q&rKXHWxj
z&q(A*yAc=RwLB!R$FpJlPda%}eYm{s(**q#;vukDvLp7V@@TKqfC7hUj?-!0$NYp}
zzeE!o!rRnPGJZwn9>?d%!O|z+p{sdP{|OSmI~QDFuY-Xp&ofR`h%T7Gm2ulNdhNO<
zfP(Eb?33|`y~hg^`cJGaYOxy8Sv;K%lcsSKWS$TYzq(_Qx@ziDV3YbQKEvxva2!LU
zFR5lY<;Pi?_dy^|ZW5F_H0rj2=r_z}3>_}q<HK(YXYOvmKFswrXK>!LbL1spi}Z1;
zqA6zxhlC=ZSdRs#i{psYMe>X|g;1vE+@^Tk%niX>L{1>*@q6Hoo}|X6J!47(9Y4!C
zO$*(|z<mPOGg0n_o@JACjAV-@RBXXev$8M(*Hd<8(Zc|3UZ_ZQmcVx4*2;QZx}GH!
z?s<k&GYGG!OghRp^*9-%Qwe^@@t5fovs;{$f!w`Q#!cwGVRn+U$3q=-jLBX{tSst3
zxeB~**y@x=7dOy$pQ$#JbZD5$7R2Eo?i2{c6Y*awvcZ&YZ(kD=LJfQ{NPcW{-v9rz
z_pj@1Tvxg<`nz!z6)Il@C;+IV?J%*sX^OTP>lBi*J0F)fPy~u(MF0vx0iqb&&$E8*
z3)uVnvv04jWY6~<W6VPVlqlKGp;zZwt1Y6cX3d(1F~{+JLxRutm(})*uU>2;|7H8o
zb!>a@mXwQ`qs%yS4E%wlE>P}^$(d1Mg5M9&nr^gnA-z=GXj)0`;DlDdRPES$rf<=0
z0?C!SEE>7Fv30y`EW56*m6@q;*~z`{I$f_Lbh!`3hkLb+;u8J0Wb0q?+^=5S3=4~D
ze2Z6*BTdfFKZA&ddFZ!JC@nehAJNNej^ZX~+`WOnZIIXWBPQ-VD{)7l;u1Vjb*2Im
zvfhMO+jc;1RYfu+aUI8Bs#A|*RxXk(I?GiCg%W*Ex?Hubjsb<`ZaFeujId%;7%d7Z
z*<oS#-oayKy@B@}W2SIaM}K-EKwuZt2+@dJ$%U0rP+iMIL86sD*dPIX5}dVEE4eE;
zI)qI*yHYZo)pTwOB}y;cu3YwzW4-JVxWBP)yDI&3q>DG08TGw8NrEl)nyCcHD}a^d
z7GNkD8ZA&3-<~q>&h_MCwS@WO>@Q~>!Pq427p=SwhlzP6i$a6WDXW*q(FD($r&{);
zq2nk>9DFS(Nt=@4d~{``tro<Q)<#$yBjtLJXg7;VEmLPf;1D}kmko51_Q?XS+ahtn
zKOE?fAi?P-QK=$M+xS@1HbOwESm-15s>TZ3uHE@EkK2AU;7@v6{$61K_rM5ZMROvf
z+wTvGd@;Ei)b1?Qrpp<MYyAG(m{j-4Km!x8M_YgD;e_t-S>a?QLqrZ>kVO=-?0R!o
zbNfSjo;W(>+{EsVsNe(qb_Kz+Ov<{HY?VrXW(rl*Zsb>$YyI4vLl*^0W|R~gfA{pV
z#|qSZ?(H+^!}R1$YH`7;ir2G9T`!Ptb>h$9`^8gO!VZ5vD+EB(Sc@+8Aar}lI&N(m
zE0$PwhU1`#9m=LG7KQ3z5WT7v`>OYJIE7x@NY!YnFNKG(vIE7(9tBrgN<OR%6mRP)
zH<$k5Wu<3UBYb{5;c=ax1s_hN!3O*5`(#xx&nM8iX|@gnjHg%fUp<~l0AL9)^jBRL
zr^asgUhzUKYtxEl(vBW~ohqwcc*bXHF8Se;Aem%s%87#qsZ?+o$ZxR<YzL~hUq$zE
zOMZiL!}IA9b;(i`$z%s{H@iEO^mq;X$NJ3m<6ggpj79iNGglBCM&DjD1iS`~WrT~|
znS{o|I;UoD_K>_chmIKyBI^6xk{w;d(8*>Ah7;Q9#naq<(57trFDt2tzHZS$MHWX>
zlouu#M6+tf!$497xng|Ib|{Si#3a3)d_K<-@=ej7q?*d<r03pu+E5q!Wb?iE-A<xb
zd+j%0KZ+w5={$O!WS=cwLw{_4k>^L9<~i)oJBxhfi__9At;JQW`9><QD#28FRsB`X
zw@+j`KI+!ilYDwQ&M{11?!Cx_w%a;Z^Yl~!BwlB3KE0|62uo(f3K&~)hj4MjV34h!
z?LI%2B(l)OHLVKDwU4-Q0|cCq*Ppn7Luj%HP_^ZBx}se7^$&4M1MLYQ;q$dt9b$~z
zUcEp7W+g<(k^d7R<jHGM%$K6mR58VZX2QNM7es0!zk&~#lI~zu{&iLO8{$x@*cdoU
ze3F_h&hRcppVCFAyn$YX#qeKRb{b%!w$CgrX;H{AYObv8OD2zN2_8-c!){r)DU884
zWZviQgqc-|F@u;TVtR(yhv%fhkyfcXUCoVy2NR<Qlx{cirhq_M1_06RAiv7m+c*?#
zqLHeO-v}Jg7l+fmfr_SXpeUI+l)-EQOj8o{+`9!sGLE_e6lS7)<<3t4J_#u(-wj$!
z!o<+G;<WZk_HpHb*th-WC&@a^4z>Pi?N!XHv@S3ksOgI6ChwYIan(f>%ipw^bESOn
zdm_LOa5xo%pc3|LTRZX|%Q`xGU}u#?Q+(-DsiDU8aAX{Cl#ePon}o0Hn%x`f6r%ip
z+<ceY>jH3YNZ4D|-sj_Wb`L`UsIG<3R89g_2JvA{UbtadjCrEMQ!y!`h@Bbi5tmF#
zv!z(%Q<@s?sI5)f*R9r<O5()u<syzT;KZe}rEYc2*mHw6Bav|)HOSL>p#-VsZ*!u)
zlA3vVtP|&i+56@Lr-M{EEmn0J-qS=_A0MJOO2ZR(?(l7Zq=|jpsY}?-X+J@C?s$(F
z6WgeLG8ib1nUVlZXjuGJ>Y7%WZlNZU&@9YV%h918R4%<nOXrx_Wv2gU<{76Z2>U7u
zG(}BEWtIeO^Y}M@4~o}PQ0cwYky9Co3=%`TRAdwNw<iEVNo(G+1`ym_^+6}%jR09>
z*)l}#+>_cPWw^sh7TisZQKIu+wi+O1xU47QarCLBbrhdOXLa2P#~%h*&O>@-$tx)D
zpI$RD4JY?uff?T9a9;3AXP~x5nhTJ}5xBvzyYVl@5-w~o5I7-wG01+C4NyCLies&o
z*vPj@$VY;C?&sMjvsTOfAF7@1Ac}g-ch~yXUXV{vHwp3)h04&5M&hhC;*ai$qmU!0
zI$N_AOJl`8PU3Y(QQ}Zz1K}t)`~A}pY*3D5p~q7vA=L?SQ2*jOqbrlq7WP+};p1Y?
z#6V6DMd)0XTp>;foZ7t^<U&wtOr|%#GwB(?d){yoC#I3s%A1sHPyxZF5^<-io&>7Q
zqz@_auWNoqT$=8KA?|`z1-x*U>DcZ4X{+V`dHrlRCN^v5mQF7A#H2i>Qrp}oW$lin
z(7rl#(V$wGQKQH!ScGzO!7BY?wZMHix^415WDN1e8p&z3LQKaOd&>`fckpei$6;0=
zAXz|J7ejD^5XzL0L3v}TbR+Esvwb_Nt;i+i1SqxL;A!if!TB<VXS&g>de?a<eOV>N
z+j)pg#5r;HarUFiV%MLEYozB7bgu(M=A=&q#1PhEH^TS<IkfI1@~QPSrH?3EmxYAp
z-DJ2`Rz*%hEu4Yuyv$3{{Zuvr!BgS$#!<*eD!1(m%8(1B$sh`uH+M>05BN=2^fz-k
z;5;=nm^h*zWm%+#2@g7c&6??(rU_X=d_U$II$cybLluz^(`R<%oAao<@UzA_A2<y|
zWsF-ezugGeWt9n{QS0d3u9XLdwL>9(rAyqvTCPVsamyQ1FK0c3$@z@f9L%a0eF6uI
ztY}@&_b9!5o>l~DA_+i>z($Vx>q})XMcdY8?N@P{qVJPLJstrUX>12!%r-1)u39cV
z#GWBplD8u>?1Hll<7eWg5i3veVQO(fxPQA12=%#Eun1<96{AXvfsK6WOwwS(vhvQB
z>((PJHfBm7=V<fNyutd5O6`2)(!J=koF&H}mz)Lff``KA=K9p6b1DlZ>jLR5SYks2
z|Cl+KJ;066Zc09g@ll@xv36p`jwGB{G-Gt0!!^sDyaq?8WBx~jtH-b=r=G2Of7;oD
z@rfxW#zE9Zd^PG$E$Y#F8g=A7UsmJ%%4axX_>;lPL;jI2eo1QeQ`cU?^jtQe6fQ5k
z<2g7X5lx)J=0m(Y*bkkSIb`y3N*6y|C$gNK;R@n`b`+@WGRQUq3xJp&zN|1x#fi~)
zB)NH0j#U_i(_)0;2$uNWxwDt7ds}J1nS428O;eP{EKA;t0$rUs{V%TL(Ry}v89mhT
zS>Neq8-QQn{W&WEqGXGlH6`^8NYT1cT=lKx!QF^6F24z_*!vfFa4es0Jg6|1M>je^
z+JT(+|3t`*7hk>j5HO3M8>|Da-w*7^-mMRO@aF;u>4@ag>QM6!144DGnY>)6y9Yfc
z@THWXSf~f##6pql$Zhx!C~sv!y@#o=(lV_SIQjC$aqnT3)Dpj6^NnIzQM7$Iu53kW
z?;Eo=@R>ioJ{Yt8<RH`B@3)mSci*p~S<AL2&D!hti4HdF74O`MYO4@*gXiF)oMR~V
zfEbOm3uu(pYUwSKSnwmC=A9)n(F1W`Bs&*J9I&5~!!wvvaqy2F4sO#PbLWYCyjGVl
zRkx2<qgPMdp&uVNn`#m74SbHt62X7CKexy3;fZ_L=M1pm5w0G$IP*#P){h77h?>;{
zO&5%E04(RaXV3QJS>`M_D+4F`<^tV^_Xp7pYpWntN>8TM45PcbsYe67JecS8lI477
zD~!^>iGj7F>UrcGAnpu7$(cKS5-AiLLFxSGIyI&Cf7wI_(D9QZxV~-1BHwpxS&2Dx
zNZcAt#VQ1}qYVSS=l;*5PNOI(wS|h;(4@xnjVnwsg5#G}cI9-qTD2V~(hkBJp(JoW
z5oToXeMMcE_Phj0s%C#sLb1>%Mn_vi5$W>HqVSZHYnI1b1feVtMYbLT_A!x(@7EZ|
z<}ob0Sa5K7e!jgGG92+!QZ~W2JpMd65@OYn4UJDFSBEYxSt7t}i|x_Wh}<*=9}n=r
zz#FjJYom~&Z*UBt5g6yq(c`aENqm2x)Lq*Pcbop9QxvAh&YQJSe4i61{qmo7LPRKB
zskrr9m7l)%vr0p6zWhw0>}Qs*bun5kXli+B^#KL#o#uh7r>s-#Rt>P&MAD%{C{7Cp
zt#a5ptKvP6TsT%}TKJRRCy&Ad+G>3zAvgF75bvdhKaz4N`OXbro>suZF>o2I?Nwx9
ziV+%0KN!KX!~q776<af|2fCCz?r~*xP;udj#<;S={okPSY2XIVC#cQtnU@Esl9(7P
z6`hk>dB<w$d;*8U29Vt{#uf32N8$xQY6Z@cJ9luJoR+Y<F{StV%;5}qM<J$Vsd?hq
zI+HSC{RZ^>e&15|XAC^n`I*vQUC7bNq)g=o4g;B=YT=c4eQ|WsLgU@p)n$I=YXXpr
z4a{IqS~qgbiKWYFL6j7moMo7AvX@&x8Hot>02KsQJ}2?o*_ATq(vMGU^gz<nn#&jm
zFyf4f5B%#t;u^J><v@~|Kd7$F9$f>kwhZYcaO>R$2}qT%HhBlUtG=v(O{GtxaCRNz
z*Lq=&<N&$Zh#>Rs{o^NER88lDR$wq9X{E?4w(=YrQUT2AqAMxJER0Jt?|bknPwSGu
zDMdMoF`i|62^2tz_e`i|y&}*~X+;!M+iykb?(TN{$a{}9eb(J!nY8?Ue+}F~+M0}M
z-{O8B_UP#?+Opl!X@MB#<Z}~^*{yr-DK9B|_ttN?pWJYtJ$ZhLAXJ?9A0Je=s`xT{
z5H6=cS3q!&6~wn-M;}FYvN)P<sp-r&;3v1H*3uKPDQqQ{)%IFSqF-}NM`V<Sx{}vK
zg94^S*xdwOjOfkcR_4CxVsg6in56AV&Zc+lN!9~)U8Ix2_DkXiUFn6&nsO1sTc+RE
ztA&3|lqZ%NHgL7$1>0)*X-FZg8}QI5z-a<$8`&ai2-aNu>j2xbOErNJWz-`DXY3~2
zOZBo>oSkWbsgPle7><g3@N2L?T3uKp`ys;c)m#?oxl`gMtc;JLvNds91;2W@lT7g_
zLJ<dv1)X36;fuA5%rh3YbrnK~{}L#CXg310VM=d{I2py#*8~x@`*y9x!2d_XfZN_A
zxW+8oWd?rs`hNdz_M~)1aD6SLyMNXV<jKv2(*~qe$zM&&-WLY>TCYw$flEJo%F|wX
zSk3n`E08^fECS+vENiXu@ky@&8Cx_H<AfN}Mqm%UAasTOqItEk3cg{KRrC#b_rRxp
zalkjXq>vWt2UeJl1W4|SfXjIus9YVFq4%@Tc?w&>=sJodD$6DF@boH+-q{sSO=l~Y
zvsYb}grjOjn+!QlRY>QSv-(4D=J4FR%6D+jq&h#prs0RqnsNg&00vZ}W$3@fj3#mp
zk7i0HcSB&iTYS{5(3uk@(yU}=Mjd`QU;?Ipu~Xv%Tg8n>!=3y+d9oPySO?V;t)i!Q
zyPxf3>$zRpJ9Ro#&r(zQ;$*-5M2Fmo1mdMUecg$1lS-rxtu85oXVSc)=D5Wo-WV|z
zqV&xV00e`c|I=Uxm6L^K*ZD+A%r)38`^p`lvqFe_yz+iSVGxS};qkoPY$BGvW#AVJ
z=l}{;BxP}B?d33~*lCd&C$}%2m7-xmJ_;2Z$w=4w!Sdv(ye<)XQU(7OVBE;)Xnq-L
zAxSMkyyS-3n{5pwmp#|xC*qtyHQKqPKZJa4tg-X_Z<ZkGu_zD*@agzyW3UCeq`lan
z!7vCE;;t#Ga;*A9Cu^KSb5nE7|G3#M+t8$(1h--dpMW~!XpOGDBeuK@v(Fm*x{5y(
zi6+pW6*ki&w*3#M!aobALcb5prI*wXvC*RfDJF#~e0JATo$~~V+tLg*wJ_0jeVV0T
z;P22?nKL0}3d`&y6tPf9u9=hu*{un&sw)zsTLP_-d-B6PnM{~l|4hYxvWhDOTKAyX
zmg3S7fu0&x@ZTeWsOT1$0!j4&JAtqF7zE-t18*8+Q`bq?xo$xG!uQXdFh4is?+902
z5-UX#tpk(a2#`Dyyvf7=ILYhFDJZ+3CzjxCT|{X%ehJl$^75Al^#|g`2Gu#7coS&C
zVql%XK-?5~c`#sZ_G}3;4XWp)VX?ZTMSY23wQ7Ptu64s&d<h)KFW47d_$RiSggn4~
z<TleC-zzFYL`(^+L}h6G?79I~D9fLmO~5>8R5S;4{}^=KP7N7+e3gMN2V<sITZT&!
zP9&<X(m=--gZV-;t%(+4H!f=rIHjpcYX2Js#F&WOPTN2#Z$I0eNtuaHjVmL%++PHE
z!aOr|CJ<WgdrvN#U;qB78vTd?2SrCxtEgV6$W#2jZ@A1yI`+MLLM!<mFWHJi-M$h-
zitLlJ3B5l_77c_9RKR{_bwH9+ei_|GF%=_xEXbBPd!32PN*r%AkWz^w<%Z3HlylG&
z<+e$WYpcB@e=5somjMf$S<Bn+F8l@z=WsZbF>LXTb2B%lk^@KpaJ1KI{RjW!W;UB%
z4VZ^9z%T7-eeN2{-2Z@xv}~VkeO0&@cC+u@l^?M_k|*l|P`1rSlP3FTGhT8}q67Y&
z?%(Zjf85a4@dAkn`OLk}eNoG&uCm0?#$7ax;BbB44Tz*iHKaBS-KC_j%E0}-hfK$d
z59H-chv{9T<fO92IfA80;*eacy(5=<IM5L5EG0qP<DW}DxVR(eU=u$((M802&tJ_K
z5E`@B0{k-uVmPlN|DUIDas5GED2spJdtaDd0mX4`ckG6Xj6$@77f=IHsjH4y;QZ{U
zr&E@oj;xUHOhC01Buc;C2P*;SU==DM0!Iu10S;fMBU&Fmn~Uz6`#TPh*vxbTy`MJK
z_4VhO`M99fpjg$vBQDKs>(?)0Pj82a3Hz~lqiFN~sqos@Wo~tfsb1*T;=5vN|AVyt
zPk^*;yWoGI)_)GD^)IRva*5^2wAV^9vvU^#z;#K+V+)XP3<5~HvCVe38K0Ew9NC>G
zX9mWZIQSb@Vb>BZa#PK8Z8f6N?mKARi`6uux|7C%p#R75Zn1~5tzXFK-0I%=a8P})
zXZm2I?cIVM*L%>TrO?ZnGr4wbtc@WLkII08BFwBd><h@*yT9w-zuUk6ptI&xeHZPR
z_Z`!*C-+|CWsRxFde%4OcG>#KejCZ#-)4uByOn*KebT@CyE@`lz0pJW`u85xYx8`+
z)fybR&RBe95KA=Wg;h+1YOV*)y?g(!k3AIkT|s%FIM;PhN_rS(I-i|OY0zFi8Lb3F
zhS99WXo+i1g0!6ozv$=g&vx1AnCnNH>aRbUK6dR>ES|BjyP$|`?wjkhTTvIP5ar`>
zEx9ln)|R{aPB+`-j&$m$+>rrKLJA-hcY$L9F#x>dIvAXzw8zCHpTl>HXZwGjslMNT
zfVn<K4k>-cPSTfWS37hJFd#3wNF)Fwgi?2OYk96Rv*h*!A`x-nW9zbr;L(yyLu72I
zmCdS0J^wY~z~8!#rsa)#apSZ?>Vp$rFx)hf-~0fjfzf1+w`AVX!R3<y!|x(W;|IGN
z)2`g`h=zsA-m}$&^`HUZ&@h^IGDbHkCA;x!+)EL%OZ0KLt0eyrAz<-eH5{Jp_g1C_
z>0$fdFFuujtx3ku`Lks7_!A2?OB%Hk{H_lP>_v!SqL@W2L?>7ZBM+*eOYMD#e>&<i
zZe*u<ETb?{G00_I6jMXa;yX&uKPd>VaCc}8gMc_yf;Z@alp*~5C>e%zgJh%$t?9E-
zlpjFw<Um{-;)3dPWJblhN{?mM_SBF#WRvs~t@bs$BVKCVpTTLbG!l~R5c1JB<=YUy
z8@XOk(RL3c=L;L&I3S#{PSrnVw-lF#J3;Y5-q0}xS)r+<UN_?Oi_`hLnRg_6f;qfi
zY+8}QO!%VSs-KwBx3UT17<ro_lejeD$W{TK=sHH5lj|vMq9T=>vD^H^X=Bz5i1*-)
z2`NQ(HPNBoK_z4AQ^F<FcvdrSnu(6e-)b&2&WiyhsEHZp;27G0S#_3B&F`$4gnb#w
z5{^a0{gHYDJPJgFZ36~4c~`CC>cn7>LLB(IVq`lmB@E(g$`j-R0mDF|&$&RM2rh=c
zL^FORAvpDnyMGcwRb>~!Iu`ROJqAKW2ztTl?93Bb2k<Tf3sam_U56@s1g3Cm5jgc$
z2+>I|#2;DC9YGaP!u%54@f`HHRy!X0w^nSQSIl+3s<61$dT(4gkwT;JgI89VAk`{_
zI>7_tiyk|3o2hi;1r$f|OE?{S#)=KAp>>8zaMw4hUPap`3ag$a-S^}UoD`%}F-Qj?
zWMq!MTNk<{NH2)>APj?e)vOq4+Q07{mR=$0<TIY_oW$M6Fv})iA8q$fjcG*oQFs{h
zcR;pTrHl$<$z1gSV-_HWYI03RzB+}lQFsLGA3xDECsKA3yz!trNCWOrzAeZe?m+oV
zwTLj`TI<q40$b-Ru?Q6KDApS=yFsH(bb{myQkB*37De_!y<)U7xS>GTpc_wJLvc2)
zxgDbd2|*hBkot&)KG{f`PD>@E`E_o}mR@kPDCl#^9SO2Xt&w(x=L(}-32uqI$78Qh
z4hurhtX4}dpG;ZrLkN8XTEXk4Lezoe>J)yXA5kUyf}kW%)5G~B^Dcr`DzD0=!6rGA
zSa>L~vn@v$D2r~8LTv3fac)5!VUaFT*oduqCNNlDkBT9MVr?qPMKB<_cjP<CTsE?t
z<k{Ps3I+6jRPL@93Fy>DH3AW5Rhk>D;xj@%@uys44KTrt@<+4JVM|mf5pz5GR8UKH
zUmW<5Z@C!v5MIAZw8RFAQ6h;;%MwvI9ZPwU7(jq)M9QPcOHKVq%Le|ZRN!BvRN#w}
z91I%~WPX8~f!5DcGoT1Mvd4^D0<#hmY?11$phI*?Ao=NBJW&eRt2>mHI6rq8!p_c4
zIXg4SAIW*9a5(L~SQ0hcFxQ3js*(gwAy;!vc!(z3xeZ%uT>T9aehq67i~;#FKof`Q
z(V>(=XT9p1#7Ib;qmlm@lJo{X`FO)k;5P2BeYK(DGA#zUN-9g4uix|CSOcZpI+B7%
zdLv{ww&<=0GA|tbV>utGmKjHvGUGuoa58ns<I%frLPd@b5)sLX-Oz@cT$`A0^z?G$
zD*APF9-^CJ(vwqjX#`7WQ9$uvX1-t_ChSU@iS4#pA$KGBA1Tbn1rSpPq?Bomqd!zZ
zx(U^u@}zabHJsMEm3G8e{>0-cMR;mniFqr!>CvB_L`uu1yMC#>-Jdg~RWvNBSN}&O
z1NU1#p5Y0(B6xPwyY);)fcC@;WYrj#KA$2tlCJ(=Pzi3yziATTM+1$staU=N;-Z(Y
zFQyao2EaIXin_#tiH)OlIsQE#59E4UJ|S5VIN~rQ)-d(pN#<D|>x2UW!dr_={K3`F
z8s}34J=j!aMgR#K3yN#4L}C+&U+<aNX-P~#m|C=xL}y40@%PU<?UJyBNfbA%B2o`%
znjxuJt+6pfklaOiF1ken{<VSe>SUkh-!$+^0rOpGeZeJo0bR4Rp2GGyjhH$_Hx{e2
zPiFnrt{e_N<Mj)oWFlavBYuWRkkrifHPO`spJ@)Zh#P1~@6D1#GNcS-NN?vzdOJIl
z4EeDp;q*3GJM@h*-iPQrZDXAb!7*OyCL9ZAf}3d2q-ZubLp22VZn;hFT|`3nrTB<~
zE-aZ6(IM9^`se*@?j(oUtMk=TLjz1jhGD{?`mg`}|04jFyKJb-k2m0lwOWshdX7X_
z<t7Tfk$sdXKd2i^(uPJvGbbHUuweylI%bYrC7|l-Sz?hG*n4uInbDq5nzY#DDYBem
zQTn#sf1c#05EdTOA8NJb>WDe_e(tHC;(uaKPc*-e+`<@9Hn#oEs@T@nd@mNbGI+fz
z1~sp&b;bnte?Q;9p_}TK8H>M@P$?vdFh1jm_eak{w}Z=3(11L9rTU&;1KcD61b>?Y
z!CNQmt^|JxzJ!g{-6`(*yUMn`{U%?Q2X$WzvUi(b3^+QA8a*ulmJ2U=t-Q#KS0d@R
zc2&XO+GuD9V7xA>SSXF7n6??q!Ay<hS}s1Wn~reMme)o&T#_MvJ|l&SP(6%Sg&FS=
z#E!5wix%#7^KZPD+oLSo;Xe%}-gOb{>@3t-$+#A^54$ZFrTx}zS!9)j6`s^wotplY
zWFHC*mvO4%2J(s%IL;=d8$XMl3!#9AbWSHh_dzYnBr5gfqCPgz;n!d{+*l$@gMmq3
zgQ4~C*zUKUR`PoP6VZMpqYZm2rr83JkDvF~NGN>mRF!d(U#V^>H&N7NC*)S~_|s-3
zS%s|n90GMV@;Ot^M#*+tBXTU6^FZSf!@lDMJhWfd1X~)z&FjZ0s^41`Yn`YdQ>Xc+
z_kHaCJ(=XE)f&X!dAaOG2Cr+bcAFA3+LNmgWi}V9+KVUN&A1LEHy7$rXFE}AX`P_t
zKAcAe-rQVj53rhgc3Y3!G^#$G3v}4>$`?bwdvVG|ea2@xN?O2)Pt^F3G!85qp|u#N
zRn?dIl_ZW!d<IHF<nD=sGfHZZGTn$1HI}a&YrX<oUtwB=(#)#*l$>|tVNm*#F>%~B
zp{QO5w}mK6z{wsvZBr<0MAG^G!QJ9UFN&4y#b{<X51B-Rjc7@umFJ|-rY8$L>*oJA
zH@G*3{Gs%V<4&g$4fB}fEZmH-DH?SNacYR&!(YGBtmNN#_zE3OUyRoCRBXwE;u6_(
z5oW2P1VZ#2rRKQT+Nm9=m!%e1v9|`?<&$6;-QcB3rC|C>xfH+gx>9d_V>~<28$Z8!
zbhdj_^;p(}q{8rrn<H-m<x-xJzGp|qJd-T1^uw=PW%A`u;<)^^L!GSn%|pH+z@PNv
zZCgZ7!I07Nn+D8F+M(YB>lnx03)A(5yTH@11-Y@yTvbhR`yjcooui3?Z(^;@<WB(&
z5EvZS+oLFA6j8^;u(|p{{Y?!mifOehlzm0vBjvbI>cKozSMt>KYmZ5sViC-)5*BRN
zKG46Y^?_a^)K}>0Hh+Yh#nsFw<{9a=d4gZ7B<E|H2N)#RWCdn-M%3JCEL!Lk+Idv{
z*R@cXeXsu@=rp1N_;Mr7gDGb=B9^}h>W|_AbpU5hslRmEx)Bwi-WWcYV!Zx|@UlQX
zWayd30Lk*|+JBI#9Q`y`_2e|d_I)RGDvATvrc`i%Xsg`IPWFUXCwn<7m+_*Y%^5vQ
zKVP(#_V=@Pc}6FTH$#=9M^2r){YP2cI2w?R^|nX*n^*Hg1k>rYKU*i>4dTvOOQ=d<
zK0t_@h`lm=`uy?!r_$_@XqNDZa9zqJe(eyY*^MW2n<86zLjP__g_tF!)?+Nd=)>GX
z`s(=jMdK-rDKWT>C$rUJVjp75wk2GH^@SNe7$)Y>f5Ci2E<hU~!RN1LJ-8BKFGJzc
z?n!p6_HkRAmn7$8Yc;o&gqSRK%ocV`H~8~>sr#arev{PYlHT?35-sBLukkx19(ws4
zbVo3?{7r#dRCO0*2*3pP`6<4DoI9V7)4K-ffAg+EaJX(NNul!aR;wD3_9%B5yGb$$
zCwzVWrW8WSq^thhNKMAau=5#l4`VlXO0*lB)-#VMn{HyyxGBL0DdAS3qW*u^%9C=o
zdL!DLWkK!Ek=ZAlGnSCX*;rI{-NST~u7}%5NqmFDf4LOeSJV$6G6Eln$fqxqn8!V}
zpgX%RqR_PKEhiDQ$+Iit$h5OSI+N7cCHP1SzAMlEvYLX|8WI3z@zK#&U5!>Wf-%LS
zTB#b8+g5?d3h5jt!&`NIG1N`%mV(LBfWZA|;O-cBK@)2W>Dh}n<oYQn6q!zuWH}~5
z1`FK^!Q=Hzqvnwnt>aHV`qXNDS=o~OR@;V7k+rw=RUKujULhbuLQ@HzyB4yo-)7H>
z%Ve2sF%fTUG;8h~w`axWAXX(1?Cm&tdj_GvhJ>FCsWHGA7Ut!7F=P5}{M}lZfJQeo
z_=QzNh_}tB(Rhg1*ZE{s2uQ57`X#dacLX-sh;Ml`pu`y08au$(?^LshgIGqaD~<tW
z*q)&_WD+=iXO;Gy?(r2%l*d=Ie5yDm-Z3sO<jYY^bex~pp@X@1BQ5juC|e~tFgbh^
zs?n||Og?gp^foC;!3uod<WM%QMJK_lapASwKYn}co_BgY7zpZsyR5~rOgG@Wkb#}+
ztx}Ze%aqtn9;M?kYyB)oVTKArRuW-zUZy9h90D3i+%%DH+lI0ZDYkEgv$VDQ<^Hqd
z!SVC2_n&>b^#|!#e(E;xXIrh$caQc52hWc851;Km8N57v;_je~^k;@UF5G=Afp^ju
zk{2mI7y}$F2hR?U2S<B{2QQA3ZiH@*XfZAA$k9|g)@~}qHe?cEfTB5&B4)8}PB`D9
z+BZbRCqSK1a?pVZ%qFxAa|w_cvY47{f9<ogDY*cu1!%{SYiynfjD>bRIyn6d`7+M9
z@1ii&F!^{O<K$#X>arqRqSAZ1-BAi>+XNz1!dXLDB+ek2UiCaCl)a??=IU?5jxAxP
zds_s}wa9P6r)VCg)v|bku<}g&hu*>Cw9MCt!>LLit;cEk#<+-4O(?sUp7>Y*2=lbB
z+2`sv>T%Hm3}YSs>_i4Aw>`I|*Cn_;hA_{EeAzIRe-E>^n@L{l{n`Uot=*PfD@}9s
zzXiJaadDQT!WXaX`2KpBtEleWX(k#FH1nM&KvNaCEoW=`U`;Ajvt>MZ6|(4|6{5)6
z9W9uz_?~)o%4c<+p!!IiRgT#!m%qx^#RiR)Sbi;iSXqGbb)N-2i*Tm-`FWgTDGl7N
zIV=_`6|pRnL$12i>OD^6nyGA3C?Mbom4{Z_mH}SIfEg_0v>{MDRy_)Y2%1S8uL`jp
zg>{pepgg^8Bw$30<DUAg2-Pl$f`H}auJ(S7f1bGi^UUp??}kQcD7S^xQjYcZXi;IQ
zin5ePTPrzn<kd#3yViqiUnbIyUnq<KC-E0i_FY?ucS~>Wxm(qjvKwV{L5qz~;6^1E
z5j(sGJt)di)HT(&{NvOSfK!nQI^U`&*a|gJyqObdZ(gEC^rCXAyKP80^@%r(^)cLb
zH>D1jZQbm=a=HBnKXRWn?=v2Hdk1VLGhReP^x_!%BVVCbc&UgJ>Sy(*z2!1<?_HXP
zF^taCVS4bD+$EYa5tIg@)0NHf$D`-ZvTuvi?3kCt;UNcn-8kB#V~dK~adVe8f8)Yv
zA@P8lM(c&O+om>}S`W?3^ANm`XvlUg+$<+z*}xdF`cJXNgf>pRJPqt8(Ay(g7Aw?g
z>SwyOgyT}7r>}V^)z<tM<crf%6;gfzhRxZcx+=%EI&IbXkr0)qp(Cm|O|Z|{DTd|)
zTS>Yt#FYnBW~!AVRW7t3k|4`c>?r#sh&{J2OCcblA1c=*kEUOV;<M)Px~_-`ED0rZ
z5{&T3NaO$nuf-7gG~>mTLFTTrG2dh_&zc6a9pxLON#7q^+~=k^@vZmn-o4xSmKa*a
zq{v!!pSyW+74fHd$rW{r?uXbDT*{k1)C*h=?D1PDZnZz$KPe+?15jkXtmf+bME3AR
zoPA*4#sKgb$WPxExRBC6U-v(Y>L-M{24f&Qz)CgT`}KYU6>vt*q+TyCFb@HSG^z(y
zb-wG}%~q4$4xNulUf&YwQOp#s^07MxYDvMa<=C&z66dcnl^aqPV^>iOR&<pY`eksD
z%IvpVdxGvti}FO1DqUmoIIyE{A%v45>STe&6}2Y22i<J<Z;)yJuNijRyc~72r$Al=
z($wRkn7d>BRX6*xs<4*bi`!ooPGptt`<=!8*Djwwgui6bbw`5Q)M(J{6CvutQ$7mW
zH&(q6fsY5`h~G}5(F;-c_`*X8B*zWM7-G=fJjOAYPim#;kk_Tn_X8$@4BNXS*YQ4(
zLqM_;^)Ofz5H8Vlq&=ZiOsL}FH4F29D+3qkWW!VoAC@ZmoV&!_T-j>ir_1AlkIC0N
z+3ms1Wa3q+heVR%dC3s*{Z+uA4U^H2La0(h70U@V(4d*j=XTcC(ai?cxhw+wc$}oF
zWwA?lhjPflRTY-7lMieL$Ig52&Y(4bFE%Hb3dOrZeS{&-16PzBZm&~w+sl3C#0Y<k
z_;-*mr;A6491mvX`_n$&xs&y>ZwWrC0a$t5i_Tyoab>WHZ-ccLweqqqLL#EaUG>Yr
z506(X*%pA7;#Qs%iqwS?5`q6tJ}4Sz_ozZWMN=wn2DNflv(o7W*$no3^dWXaD4w#`
zR>8eV1!Kb8K={xk<yM3!$v0}8R8n6Tf)-<~Pk^&sy%$;rV*n|E6-eGLZ7ntXaAtc(
zbCtfm@HJBU?GnwBWe?v_@)0C|a|^|wo`uloGHx`r)sQ@LyEdIkK8AZ#RAVOoG1Gaz
zD5>o+_wkCus8otVxSq=;E?aIbs@={6TTMec7W&Of$SNKg<`NSUW|~KZBYNaXM>tB8
zE5@{BIEE?-oCb_@Ox`CbMqSnD0QR-w0X=3`fR7MSO69)O;)S9%TGy;!5TB&N8&G>3
z>a}`kDe=W=T|f=bq$v0uk|r1Y`krg*GI^59t!?Dhytk}+#NvwfbOavm%$Ttx33*3-
zKk5p<*bZIy;D)mj-?n}@hT~aRIG{EehOi5$Ba|Q#I-&3L0`e+r%e!E=h3ou416DlL
zVXkokMtxd;M0?4uxvSdUBe_9PADD2E!Pj3#;OcxIa@3_NOZUcZ*x>*5zyBXN19P9Z
z-GH(zYcpOA9PSwlFe6Q}En6)YfG5NfX5l4ql5$vJCF?%iM^&n9L|p<dg**O;Y*9LK
z2g42}56I?#%+Du8Q>a&`J?j85-~~jj%P3m4aO06Ly}L*eqbJ3=pm9l9NC%j=xUr*X
z(ek?7FU5S;?B1Ng7W;84%j+=I&_7IQibT>RP>z|J8002FLiS}i#=Ei!yN2K@P&i$Y
zaqeO<CDa}bJ*@$!Q3cCQD&#PeJc(9x3^%R<8=YPN(=JH8xYoB&n4|JkN*!4Of+0Hx
zQh7QceI&5K^t`O3l7b;av}#OEeh2P|3pM+%|M&kVh-myVOV<>?dI&SWc|qfd3aDTw
zlhws1&)2_4xUz7gD5d?(@w0AmS^q^;uY769m!{e6z1XZSnMvc8#R+a|iw+1DRwzME
z|6f)kw*{!&Ji0fSj^-)tfts(iO{-t&QNVh3r3agN2Hff5UdG6*+mol>AcZ1&AbT2}
zQ7cu_H0$j7?rM1vN-$W_;tS}burKe+ULHQ_XU{Q+mn9Mzt|G^#9}e^+_=Y5<o7Se&
zp6>OtJ+JTM39pjIDLGjBggb_I1MepoPY<YWpMh!hOudtF19rRXBJMs;KiAs{?y}v<
zFQWU!X-#d3!se6CPPQ9-ZK8O<LleJK8nt%55}w;;BSBQsy>cOU`F4Ws-)h|#iQN1o
zpWl<pVlN+Ctq1BLI`A?BuCjz|0a#27gX{6MzG@m@)pA2#Eji@eu<Si3U-K!=jc{w7
zZri?=Vnd`L^?QmW_u9-rIUJf7Zc&pOm;%uT69D4E9<EI!lwGeDD)A!N3nCqe(PT(o
z*lvoDFrvSK`iQ#wX^C{bAKoH=X-SqwKn&~4%1aP3SdbjoyDJ0-ZguJe#xekZxepTw
zJ<$FpUzP~(b)Euh0{~iMx>)Xdv<UD8uJih7(1z>me1#*@t7lY7O<(XNmPIW^luXm~
zjhfwResV>4xJ8%>UAt@ZB{gcaptCmR*$-mUby`PaYZ-<n?qK!8a=!95nyUQfso8M`
z%n+>%-B$Y2+&64Cd`4U2U>yY4hkRLbyI7Q3Jm*H*YjSRJn<lr(uYutSUJZA&9~uFn
zTQny}50qj!)3jFcBz!WEUoF{nP|iF}O9MPOJs~6Switdq1^el+iZ-9MQUBYMKRT_)
zTpOmV>n*Y28*P3Oyq*-%tLUN>>&me;VH`S)l`nv2Efusjls?H3YI$CRs!SbjGPqdw
zuz+UEXv5eSi7w*QJ|~Xc8WFtkPU~p|vq#!KX4*S3tM{9Hw9n!SK^w!JD8VQZadwt*
z6Q~9R;ekURN6>0+!a=<OuJ-|hc!JQcSt)p#^whnMlt4)VnaLqHh`=<Cy`w&8Lop}A
zEhFJH1$|6^r3NWStGvs;eaiAlnh*9Sn&LXCJcqfS{bgx!2bm98GOh33p|l0jv9*(J
ziOAXN;x`p@;b%7`Gp7Q|Rbo3}Fl%?i$@U#5*cZ7}WSMnZXLq*0>t@^AnH_S;gM)Is
z-ga{LkH%1d5qT+JFP}|WYUMkvczA|#$B?#=-l29OR+Wqwln@S+$@$!#bDbJyZhg9U
zcsb@#k-Y5=i5x$`wh(g59^CJZE^>%Q(7V4pcq}_YTq2ltQ%N=~=TufJd{MGr88Vht
zy0)-XGTSF}0szWwychbr(`GpLEsG7{%hppeG#V)vP5x{nB(&{R+QDUBE(hWQ*gliH
zu$}+ikIAQx9^EZId3XRyK()X3ZgKy2rw{LqALbw5`{?1rk3M?z=%M@d?%go8swoiV
z(Q8ATQ>xzZuJQ(}T}1e$j%-d2P2U*4aN}jE;B^=$;v&rRt4Wn3E~_LG6h^b+lB~`$
zq5d8fUq%rY^isHhB@Ib;&cAKpH>_f6d;@oyF7quec`6uE=Y~W8?Q6tug|~~M=$cvE
zYi^V2>fih}-9yp4e5O(G4wZGLAQgB;bIWlbyAA1qx#4Mg%VqCjdhcFFkB0u{gn2Nh
zRmhHY;*q$y|F|xDf6uj}i`<!?I=JuZh3u|(bwQG-f7%S|o7R4>SF|171$XEd?8v2U
z%D5Z851Bqe1TXtQA}kOCAdn9j1!cNZ^I7aIax&6seZ$M?Kz8*oPQ8;C>V9ve%Sd6?
z(Y}`kaS7-~7GI~F^yKEAU1jwsbUF!iL){Z)?so$S&H;XDl$*LQI0BI{UOg3bh3s50
z!mOhQXB%AM3hlvCXlNGv(ZYnnz7*v=RFMZrp)kZX+lZ?EP609GVg!9)gAadjNNEeb
z)aGEF@ti|muS}hv37H#2_-FiFvH_bTLry0PY<a1QtOF)RHNK{vPo#Q-0g_Yq0)Sr8
zj`Z^!8d+E`p@8BT*ChUso(IKF$nV@Dg8JK!%|^*H7nu{CHoFPbDw9A33l_`Z#p5qL
z=&xkriw`Wd9wmp&wRYu<rmktdOnKHkS3TQ(;E6Z?P06=?zr1;=;WuV&=A#ikkLQ!C
zf0WH}<ZYy=uX-dh!o~4|4?w?*ZdoBW4BsS5N**d}tuRVWFgzfY{%(l-Y&aQyw4eCh
zy>A;3(c&x~+TBC{UV*3YbWIr!_wq%9vvT4LM1R*t&wW?D@&S*F<c+!OE0-=33M6$Q
zdwTG6U#wZJ+!uFXVuE;2I^G?a7!8w#JM1#Ay@O#Qp&%y`xsYXf4u7v8vcc^J@&<<9
z6uGd_e3Dllg9QN^K>x&!KWDBK3wprw*dsB`-wev7hiGbx4b;uT&Uu=@DW|JxWF6sL
z=;0d$Kh8fKGT2SKRWw13yT+t|PRCTXSl>XD#7uW4Qg0cb=mFXx0%n)pNMWRL^U7kp
z^xXz>4J6Qr!<Mxt-KdLz5vr587i?o=kP>T`B)pO&hHb=>(GkOVl6fY=u39K$B4woe
zIR}-c1{k>XaY)q5)#w#%!g%zEuoTaQN<^IHR2}`4bXt3YSD;qshFN)Ku(c|FeCmrr
z5Sihh_=*%}44;)chk~!gX+b_<4d5V1kx4N-w@OR@0dR@ojS&3n-CnrXtLe;&ci_(n
z5r3NWcl&qY#Cfbp7>Id~x*mbucL=xMms@Rd3b(;)gK7+~YN0vFn3k#$>{{KRq?VCw
zdbfWMlX$OxS2A=+U_<s&L%Jg0vCV3P+=gs8yW4`LQSd}gU7(XK1b#cpbYl8co|uS`
zq-gEsfld<jjIxf%UZu1JFdS!=DdSO(bAf3^M-yO#2t3s1%T=@UN^n@h>!bYFV0Y2^
zw{PKwQ5c%zN}>=&_)*SCe&`My`_DZ8aTT)274Ry}{<)8wkMr}1?A$Fs16x)LRhe!)
z&lboNgroag)0m}Qa>I3f3i-Hnst2|r>*G8PgpR#0(oCmF1eM;Vtn9v!8>iJ?I$i!=
zi!iV&WM`qg!+U!Sg1tOgn+R4~n4d|75sjm0_py~TXFgBLe4#fJ&s!Wv=+aZu#ge&1
zhXRRsa4Xo&AqhNjQXsh{AIC}j%1UEtD)9iAa{}+8G*8`k`p(+NEcNy%Y0uLW)J}6y
z$N_(ldEa~Fi*x#dM;9=y3$Kq{M9bj483r%UhWw62F%{wp8G0juS$nPd^5U<vAVw(K
zYoxOge$lPnscq`1Ffto#8*7Mt(I4QYMuJ$<Or%+Q?x@&ikgduL<)L@5XsWq=dmELj
z5HjW&>*$UhTPP&%GGy?+;yeKPyhq1|cNYgQj%;$RP6}dYBuQT$mJZ_C7QiMy*jkR9
zpXHYL0}Cb^*T|2v;X^9PxX3B|b|~D5S=SU~nkY=w3DviTkcRs(x-}M1?g0a2yxfhS
zdwd!9MmM$_Pzo$*%+{!edl4X^(je+x8lLm1H8a!YMb2JU*{kBJ-boz(JTZMneWMD^
z8`|o^Hytx}jUQudr7a<mWpWv|$E>o@i$)B}I{3e_i4L`+-c&Uwq|cs}6HX7nTw`Bq
zON)nCEkr?+WMr(L_5!1D<6eY#ggvC0PZ2n{0sKU<kUnQU#DHud;--UTrGrbATS;Kb
zSW{s6gxh(yC&bT$IM^8H5Eo8V=&gY}nKh>rpe$A>fyfYNQ4wACw24hO(ytZ0Vw5fk
zwVFp8Byl$+`(iCHUXcV$u^)DA{mcG!Mh7#}G{%D^6kPn%+-*Az3GW`*wTP5dIOAm5
zhtw`z3_euC+!EM+n&adllO(cP<aNa*W7*p*UcsAIHH&hSbr&f><KlF6eoiZVQt3Yk
zPGG5k%m&g(3A2f%480T$M43T?3xOf$$V(kIBSZdjLy}O|2u_I(;_UgA@Q;pTn>aSL
zLQ-}Js5tZT3mAqzVb1JV(e8)cY-qt&|HHCc=9BO@1`Y{5XVv056I_GLqg=>RarY2^
z6ayUngXE2JpvYBnWTuz<tu)TW@!8tRz84Q;e6RcU-u(v;)%TcuhP(9WqmT7U{5^Q)
zle_oag&)n`_>wc=RBT00t*>zxbhF)WkFw8;v0G5rB(a;XAjzidq{;Ewwpasu-Y~11
zQQ|((9rBP??K!V(ys3}K@i~yCRrhs%2OO|OOSvYZDT$4BTnOgtN=h$Fyf-yj#41=q
z3T8OV-zHzY_Z2M%KTNuOM9~RXHT67N-rp2%a^CPrw7WXjekKhU_nErn6r|5BsLXrM
zi@B5VZXZpyvLA;&jN3?lvjZ$jzm{{N3}m_Crr3*Qr$KW5RWph8#34dD7RD=L8BsU{
zBie9OD%H1pICUDPmQ=e^9=tA0))fX|5(ZQhRdalgM0|ne45iK@S|k>j?ctg`2z<fT
znU)Bs`ud@pT%1)tBsbJGYfh49)%BU56fP!cN@Y{T(HQV<dA=&nMILS7o@7`1ZB-JV
zPg9B>o7g9`gehD8S0YPjz0<%S5yDQeez(xUDRvv(q3YIDXIU#c4v9W0hGh`}u~v~C
zdcMf#7lb7@LVEy@)G5Z=T0U*4HV{k>X|ayOebNl*YmkyDXicpDv$Hrlmm)nt4eqX;
z@3Q#AQ=k|1@Y33*o~1^xpnqn>ncSET9OVltt{cS2qPT$9^R;gQI?1ljG7XtT4QvWK
zOy8!8#9yd>7pAd+0xeX><h}w$Mge-EQwrRYS}8ryx-KKyIW-o9zZ4cr3syy!le#2P
z!X*t$Wo9F4Z<K;IuAI4)_YFr`K&baBkrkHprunO;VkBI=n(yOF8Kl@BLq%hB5tW)K
zNABFj0Ua>R2$m(0Rv8Aj+y_@0#!dVZte=52MUUwSRF%1{(AFUXb4_`6i%b%N!3QSA
zFrgkUE~{!VqbfCI7eLx>SDxqt5x0qj<q}v|($<%Nbd|2g-m+*ky4ksh?b(Wc-vYd1
zgm-6kL5kOEywgAq584k;-tXF0^>@1t(5*MBc<T$QW^h3>xKY-07+~LN&RsVtzSWO{
zqdoE#Es5#=tCRh;PljlgX9jM7D3RB1y1m90OD)XX)_da3yN*LM4}57e@j%iY#h5J>
zVdSbZ(#JUmTqS)5-Y-DyIkh1qSJvE1o(wN?)5eUCM3W4gK<iRj?V8F(uJwcfSX0zB
zPSor_<BII2)CMvwnr^XOF)yi}h=RfDVrv$L^_K-5G?RRm$F~?FW!EFi$`Nr29dl0i
z&PZwR)<+=o^k9HnknC)8`U<&^c}6WP!R%BDzewhVuQ!Kkmt$jvy~In5$|FOcZBul;
z%~*RATmy_c@)kDCwY+-vs`j2kZ?r41pUUgxMAef?oy&yuQyK07-4!*o_UHoXJH=vU
zJpn-cXC%`=7r!WgSA%la=#7nm^QBF4e7gxCoTR=P&l<?6)y1KANl_fKiUHnA(LdKU
zfO=M6If@=$DY`h_Z`!{=CF+?(^&CMjkLDP<)jYtt@P<>V`m-g2Q$11k=hd7xvbfz<
z%R~>>NJ~Shop&C(OFn6@TnKZbbXH4`wNZ^z&cu^so^eyQY*+e)72g=CBk-_D^&iRF
zxosHXDQ9cr5>}+1-M|JJ=d3$aiQ~gLVX%x^jsm5*?U7LtQ7H)43UhH7-AyP#b%dbb
za1|79@{wuT5jBHf@ug6a^PtpY(-vpC(}fb|mAQb481H4~sIYRnh_TUZ#}@|{Gt%WO
z{Edmsp84AndPhsy&>*r~2X2xgRv{~HUN3|V+PMju*Z>Rq_By0Yj8Nw3gt)YjAc^Jk
zRESl(Xkb)mmEEQyVimE0V`&_vQ=v6B>q~WavL|jdyIKL?B^a@x4KPp}D=B=G+k;{Z
zDFA`rJm@c4fE}A?@~Bq__(jrw7`=eht91rin<CG8*fu=-l_ceaXSJ|o5zyWAGZo|?
z5BZ`WYA(=c?Q%3Q3aY{TselETwdJag2SzUlz7Q8$tuQH`tD2Gyi!O+}_y{`LT$7cx
zpYFZ5rZ6k2!!jO#b;`d+36?7C0=~#_GUF+0Xc78hej6p)P$VREi^UpJ!V;crF^}gl
z_S;Zwx|k72^$X*=qZ}Z7ae!4KZ=ctel5B$!JxZDfE%A7`Dx|pC9oI@ySWZcELb2VY
zGMgNgy6CG#43<S6nq?$Hr0=4XIJrL^|Mm%LuAb&2=J&aumWzq}ra-3K#5J{=O$Zku
z&meb`8jT@@oE}%^lNCT2H8A<487gM|`E$c{{_En(Yb!8+eb5@EFESXlv?8dEbugvj
zEg^~`Dz*@w_NNpM5bu!DRyb;E@DMU5z|G*Om@g&tz=(%L6qi7jqSFfpXY)u*D|@*o
zkn!k?i)f~XcXMt>bbJKBS_Wg>6~Rp_jQ)_pXZN!v(Fk~uYH*iL7zA`%nag*z*wF%G
zZ{VSutw`{z0Hn!9XQ(WZJFs9d2h{`rF<h(A(9{6UN7ECEOgRx2@K8#A2MMB@)cKy3
zl>MdwuBk4zIQ*l^4U`Sfi{-$;`3!wKwCgmHxz1I&uvnR|`I<?tp|9Rc)i`wwsv3cV
zO8V8+d{eb+LtwhLZ<j6QWri=cuP>aHIa;Z>Le$!$nlrt@?Qsn7=}M5|82K*$W=ub-
z2s8}Lw@NDk<X=Gst8ayBf%h7O5OuT$)uv-^Uca>`>0BT{qB5@A&{RfeAS>JrJH~$n
z3aF`E>gOepZ{g$6TRL423pawRn`jKF;T-6*bn>F|^OG+Qo@VVYq!^?3v>dymvlCtm
ze@Z`kcMP1uKEzNzx6ZT~_nO|6P4(=&>-dvTP03^|Z78giOVR?e^GS88vhEt+LqGPP
zg;bWM0B$gYN78+<2+q#5p)#_v)A{!8$_hDJO{ai58&&giQn~Z&3-6kdgT)Mq&4-Tx
zHo7&zcC^(e#d$uu;=$>Yd5#lBk7CX8k16^kgUW28kr9q4yGxniy%;P(>NK*T%wFmY
z5G1thWE40|%!kDJT}QNOAL-`(f}3~Owe1$6_Y)6y55$E}-@SyQ5TOwSl~Zw$Y8r_R
zkJMa_E6HcoU*mGYh$U(&hGsCcM7SA`MVp1gf_*TRqIxMu=w?Es$4p1kU6nZ9<hTwM
z&2U5EgcwbPl6bLR7_6!}?sP}@Q>PVFB<Q6{<8$DUtp2AbSa@H;1@Hc8LT_!+@Jp9S
zQ<p5f5m^lqD7I~D1WKezU#E}~MMe+*J9p^hdcooL7{A7p9HvqnqT=k5o0aT(S<azn
zX70bW*+!w0&Ah)r#LiyWigK+At1hP{&;e)d&sQ@$VmraJ=@j53^T_*jVwzfcMSvR*
zV}50L(MW4m!asAImjZJyYKj*kx*V@rgPa8cPt)1%%B`ipMe=95DL_`NXA3x^uCVAq
zCTpOI;Y#Rmt@^ENT^kougj2>vCCJhk8Q^UxcKDiD;SqEOXN@oL166%3Xo$jT>AH*k
zz@j}3YcK^dit)-6TsjM*0I~(0KOq-+y<u>A&Ej_5H|xt}_Nvj+8RpBO=Rc1*k{BjC
z5D6t9pa-aw9@763MQ%bmHJ;L#fg(>)SjEa^wECpft(p}gOd7jPjXU|KaS=)#f;WWg
zBaxP(O|)7s=ZL&2v}9pfSk|FvF|wZTtPtK?Vyt{ozS%-#d{dvAq4j+1``7iZH7>$S
zR%R_KBHM$$+jFcV%bVKY8;ifMS!j}fX7(9`cVwiU2%B#r|E~i~yqOIr(A3~&;Eb->
z*Ks8QX*}IwY#YAc`Xg#w^~flE%9BT*LkzcgU4+QFc|wJ1%tt@ff!LMIH&lcR(u-n$
z!_f1R=!E(2jgP-CUoWZgWb!5Hl-t}h?7GI?59DsUDi4URuCC)n!!L1j#?Ld_OAWo=
z{T3~KUHB?46>+s9da`8-;LFqXR+Bzso@7HuJ{AMw1ZIl&UdD%E(-$hTP1u_0x7We&
z=N?~Jugax{YS4QEAI(u}>$4H0-k;U0{uSPrbX&|iQ`1BoPSyBLS9b`%VdRy_gbO#)
znY>vf28oXzyOW-wT)U002w?|RG1aD3TaY2A=;$03QpFXYHmYtSA0f)Tf@laFm{^=<
zI?|}wV91K$s>8)_t~XvMl`^Ry1z<++E-m<NHM&Pu3W2B9dzwIOG?ZWQ@?b4|fEuh#
znHY+J7_uW)CC((9QuXW<!wTz~8<@tgOwnc~%KLL<9Vd`@DV_CguO>7i2>p<Lp{sb~
z5@nE9r>EK9lQZ1`?-VBQ_=-(0zR5Sm-(dSMY^e3`kTb7d`wn^bCPMD*AM%!0=kbBN
zer6?Pk9Jfg6n)BL?mKxc6Zg+@YLT|@mpin`9eB-|^{bOF-s8i`j{_Q2r^L-g+28oM
z2DfFreT1sDuKyEqdQ;#Hg+~&7O67DC3d=&q0b&Rt(Lh`Cf+0>S&<ChLp>tnI=e8tT
za_K|uNd8u0_@59#V=kk9%ZCNapf4V3);A*y@$R~2NWGNglMUwK>$rwD>>P#*>L{Uw
z4qawr(9!Er98V-8Bj_4FdqC4fz_ZOf8Ut)@SNE(I5oMtvm$VpnkU<qCsBUVX;k*8{
zgcGnjTeAIP)?3xvIi7U(Xb&k6i0W&m%C=A5(Jr+9t(Sd{lMlo!3MnHTFL=TCL<BJt
zzK3$uAMIoK3cgZ)7^1@wK;>F*>G8_#4(+Ur2ZLw5(Ij_LM0>XFRH&XGr*M?-@uuuS
z|KsckdK485fgoloemQ$(`K}m3b^M_}Z}<Hzi_yibnpEdk+m>0wx)VXi-t;~ByzKFt
z5b3YoP5dOD_X8qIc$P%hkmMz!8A(gd)><q3=e&nXsgA+9q%h<8MfKNBodC91<sLeB
z*VopUE>1~b-t;tPZXwCdZV19t5y<zoGil^nc#<y_WH`jedZDE#IeX(6Ub-bQ&Hq--
z*!fera~n^3VDTLxIl=-ZJKc)|RMQA*!BqmxEtC$mWqY|hqkvosbs<oopHC*ade{Xh
z6FDank25b$pKQy&e@nGM5q}g_+JqtuqGu#W>Uwr0HVHntoqP8lK6tqO`ra@T)djE8
z$1MdzbC<nC*K5{e(M}bLIM<43{Yo(Uc<+XkzPiDik5PX&VQ@KyXcX22;*rM~X;C_R
zo9`N)&zHT2Rqy`Y`wx3}ANB4%Ap6Wv_Ga%v@8e$0ZHGG^-MxSBcf$@(QbCW@@JlG)
zW(B);Q+^SBRO;eYy(YW@;#4HHjDhk4#c~rwzM2*>QGf)#ny@3aYIEh{J#*wdbh%M%
zHCCTFF{0(&YUw|;Gd0JYp*z5c=P9xzV=<;{dLOAFv}%wWII>E(QZAIG%GNlsS!@Kx
zg0Fe!&J$;v^ib-P9qc}p&^#*7h_>KF<<RXniLHHITpf%xA>93VR5*of=`Rht*?h8+
zLN<c~l-sCak``tds-W_PH{A+&f@#}CAo;=^#-kMjc65By>7x?(&K(=FQ+JXT3maYQ
zZag+ldJLV!MduWB_hgrX!^YnpZXP(BB@EJ$>g6^@h#>(=a|~7gVmY03G~aK@beuV=
zb;m3jt(2va!wV@i&r5Y#u|$(`g~BNg5Ab!n(^GP$;ASAR;k(?K{kjOBVhXETx#&R#
zMB1x<M4OYHF)um><hCu3@eD%^ecNre_QB!NZnmB6e|?m_sK$z)>TF;4)873+ZQ@oB
zK`XYip=)PwXP6Ld`kamqCt>oM7{DkWSz7Sbz($6P;@qu^p+=zWPu=BlodC+50TqOT
z&%U2JPe5bk4_qdXzYYl6T8&%?5O!Tz{fQPpNJXz<nz|{`$Ls|vdd5a#7pWm8*d9fK
z?cu$<_wV;!-`}}A?D(y2k4T2ly{F!VaLJSdOs=ZcbiQix>%Hkf?;Dy^L%bxR@*@U)
zt(8h4>SFJ-SmrzSw%)xdMQ`u!C%wBL4;5Ti+!32fS5`BEp|H(+PkUCu68BtOOg?c%
zH7pt6z81UZEbA!GXBB4ALs)J22+X!}t7_7X)@1qmARAHrT@|A3s4>?ef47sXmF8;=
zMMHABrV1{5U>IdF8HramH1*roq2vV9@x%<?<z-R$$b})cdx!vtlL$Y?_lFr`zU>|V
zz%YQ7dO04oJ71kn+?Tml`|0!YO@r5Le}Hep(;UKx2~3AFjA3>Jd5*Jbuv$!p-ip#Y
zJnFFw)Vv(L3X+qE&i6y!gMl39_OZeWueO7an)$rBVJP)N;pvdVtxp9@CsVQ3V^cz8
z!jHYY^k$Jx=e(>bn_u5^8gm5~TD|?f{_DqW&!Fy`*ydQ)7a&uUCRBADvJ0|)d)2IG
zWAXRuj9-twKdoqnaCR(w^qJ=MMJ4-5^#H&2tWyy!LsSdPi8Ty?uxA!F_<k!QyE0<e
zc3<(vYc7Ger#%z})GfVE!rq0|67@e>NnNcpvnQjMn)c&{TY#^JR)0Os=Tr|>W<fWU
zIwwN57%iT`Wpk8bI%!HbR^&)oB<qB9QRYkEgJ{rzA|}4k)m-Z(F$fG#BXyk!K14xB
z2tc6VK(Lmp3p}ZLwUIz=qBkI~dfHB3SD7vz0aw-0A|&6dUccX$pY;nv{p^4Cj@@xF
zTlNl!`nLpv-NXBa-}j$AT5!1HdOzNZ%Vdr0NbA|ckaP633NI&hGfUs~=<i*^mKp9I
z41kL__-cRm@&4hFX9_gv|0{{w#tIM*k25FAI9Ak{L}fonns(C^W1oZd$(RW@ymL+G
z@H;{*EXx;D3=vrsW;fY-@k_)FmSEmQYo)z`*MshrZm1nDmZQGY{Jx6TAEL8)&x4H$
zXebE9TaC~7)XmcK#rcj~{s4>m&))v*^-jj=%KF<Da55xC1s;HU3yhoW)vP+zz-M!j
ztL@}<HbT@c7rAIdfE8Lm<6aiBy&1RCmAy2e4#b+y$~OXCcCl>>T?fv<+jaV6AxSie
z4nso5DUG3LIZ)ujn5C>6sM^F{o-&R$6G4=GguH`PJJ5#Zqa&)(nG>fHnVzQLLLgw$
zHoQMmxFYV{5%r1r1R&$))|g1aU$q!V+yU@Q3%U17(X8R7?ly~g40t_B`7%Q*kT^vn
z<@%8DM9U3KF`QjR{9!?HRz(3bIbnI6TPbQ9`43HBpj;xb2xt#n^TJsbS;ygphDv8o
zN6Fs{Vd4!~BSV?-VVuxd3;jfREY-cs4Skjs%LD^7%S2x$MuiTWO&h|0z9H*rH?1Cu
z+XwMB5<!rW#ZTywhiYqAa%iGHZTWB+Q@3Vrl%MONtc#<J7;oKRYhEcUe_jKQhPe`B
z4X}m}kP@*y_+#x0!o@HTXk?*0QPI~|n?E@#r;6Bt#74sa$mM(8xVuTX=z}<S))R_R
z0XeF@&&T2~zU*2lf9p{th=%J6@hZXL42iL!w=p$ll+zcLmDX->PpdZ{TvO_wXY9oP
zr9OWB8(Z>JXcI20ur7SES}!}%JEcrKrDZ40pEHODr4tcNHbs4|M<N+s>_|evYbQ>o
z8b5gS(Ln!<y+%FbU8RVTSf4=2QBAShUjJ5+lmX|8*0>^l_T5o+6|)mbF-)P%qvA=#
z0}6?t8J?GmoD^Eb6Kj&{*+87j#0?bqc>C@^(;fzNUyJuTq1r21zPpp1sC5Wu`i)%s
zYF|T)cDmw(e-j=&cf+zejiLz5r$fO7D{#}dL^sczT{3@l&WE&V+ApdS1V}sA(FKy7
zk-j!F;wf808X<$c#3~9CUfYSatmbm&FY6ZYn{_d|f6DCd$g6t7nBJFSb{_K1#?!k2
zU`U`i7N7j3Iu$z4y91)ICt*~kZk^2PzvSiQ{T8h}(+g|fjfmc7`48wDL5lp6(Q}%t
z4iQD*iKtp{C-fFZ4jY9(K$rh4`-2<ki_h@EQ&^15h6}4(H_%)5j}lJB$Zh#JN_l19
z4dlidr>}hmJPP<Z$n9EultN-3c(E)R=$czB%d>oh#3a@DzF@QT-Cgl01AWs^K;yOQ
zK3#SqJr!5@Dm$^T_J{7q#Di~JT=U-qmsQEHL?V>4*UrKhh+Cx2KK>dMXnRi(#XQyN
z?<%wxb#{0@dYW(}8--v5oUU|}5E)L`M-{xxAecNxQXLBL^i0x51#VAF-bpn}%0P0<
zjZ$>N8`2GP!$){>4HQA?lPn0bWhOAOWJS@nbMRP-q&L8BRSQp7!d0XCxgQ+@m||UP
z`DKZuhqEPf<khH|k>h4HlPcC-U5=6F+2|as2*S_E8{5baT`cRarU((QIM9KIC7iBc
z(Rq>rV8n{lEQTzS{v73JMZn5nS46nr!<LKEh%QZ@1SP>hkVU$5-FGgr@-?ASM2^=S
zy9TAJ<Yp`+6B55^?#xT(-i-5URAwcTNX2@T48A7OHAlw-Glv9BYVW&5RPd=!?41Pt
z+-w|VN75FOzMUejoV~dxf>IaqojcJ<c;`;1Z;V|2KGI><g+OiBQDWQ)^0hzUK)xqo
zD&fPuMl=W*zxnC>2}IwGtkGezg~1b>m<P$oB{_8og_{f?FLRg-Kt@HI4k#;US-yaa
ze#ra?hrv=!yGIg7e3cwW?hUymP3Ov!HVg-`epon;(~lF19n>)*dmr7<=KxMIXPjRC
zW){y@e8*M?&j3ilx`<~`$Yp=aGw~f;lJFC)3x6rf9*NK^e9@I32JFh8q+&%j)XDHa
zLJR?#mE5KZ%lOqWG!D&tHlO}QT%S(Qf93Ale*5DcQr{x69x^01+F9F)zcrEQ4?(g=
ztAO=d0Wn_QreDcxGmX=<a0yCA*841gRZ{2_u?KJihxp!;-ItH|-8NBq^vX>}-6FU<
z;f)UBbf!;<__`SXL7*+W3UT>atCb;#&A#Jc?Cw0P`?PLrutu2r0hOXd_uaqa2Iw*P
zsd-B`+gdHpdY^1{`tAkOwmh;!GzWrR{vL01-wcvzro(d>+*d>&0r{xov+eH28fqgi
z#A#d@nHM=6oH|(F;gEjLgQ4&KL>+~&vksDUu7Cgc?E4=(9raI2V~9ATE%(Wof&O2r
za@MvNbbik}-KS1pjmrhUlXtm4pc}UBX{VQdkD`>-0=OtbNs|2-9;c$`hsvJv{pXE8
zVo;=0Wqruw)^+Mvzw)zUqh^}NMZOr1DlLo9G8H(|$q%vgR1kf6YJEAxj2L-XNd{J5
zWkz#%x|(=kxnw|d09H9I&39aT;ks>~psQu;TlI#Bo2N#cI(vR}6q4eK*|}R9|GuSb
zMIIQJ;|v*auNaX(E!-+_x7a`&SuVCDp)U#=`5U9XP6li2eaaFEcN8xtSJF(ZpCeXw
zQ3$@1S`h7XWFWe!ov3Opr2syGdy3E3+uiDW-QRt7{MF&}7YBO-r*jUz-v6^3k09eD
zM*e%-a~_E6(`;+&_xhtdhK_93cQVgG7VRIok3p_IhOs`)?*86SLtPZ^No;r=Xh+3T
zcl>AV4qr^A9V}V4rKUCO0!b~_mhGWng#5Rnt(a#&6Q8J?q-wsZ)uEqp{~T8$=OO0z
zscvET-JRR3da-?4&Q#)thk%yPPen$eyYci23;2cqIkZnqjmM}mUyyO)=v6t7?o%Ql
zy}94-xBWKycka%bqBjV+AKfx@@<5*W5&sFop*+jlZczG^q@RB3CP!4gt?W0y!D#iJ
zl@YE1m~pG)M<<>>HwV03{vMQLkqJLu^A?}%88zpp$hW4I`h9CnTKbhvd*7M<ZQkAq
zjbyec`cC7}tH1ZxqJ{L^^c5?4QG}@I4#D*s5=7L{t|jtKs`K{n*WZWN{HT-<L*EIC
zKm5<{h(=FTR{FO4PD;BoxZOSlsmoO-`}DKyG#X0e0&I1{?bCeTyw}|k-9XX5wbcnT
z#6DqY;~BLvT@&lc379<L#k-R>j|-MCBVR-;A4wWl7xnt7m7aZeGDQa-qE+uc?ObnH
zP}E<ALo7Y&LMOG3Pd7q6u$^PusjKoqN(lyGX~&z(y&aT^axaq0<J;oF>8?o|TL9dV
zzqgp+56Z;*1B*o6e;%vR0L|-%)(^d2&;NgSbDT!u{yIGF@2=-nxGN#l3<p7+-zBZA
zjjJ@bQI8r%xV7%Cr#XqT=>Eij*GiA2SmbW)ELnCAfQ(mqxHa4imf7PE=V4dWBUw8g
zanH{LzDfe3-pK8{FK8vUoB9JJ1Zh42*!n|LwDjj*Iqol!+f#<ROHp0>+4BTG9G#4r
zY0OQK7Mn<`V&jr+TOG&>p^!%kwL$1ACAequ$i9M7LRY{m>>yNDN^DvY=smjO4V|&@
z6}>}A$9?7m<sYpU@^BW=t-z&brQ$3cZ_5(4<68EeYmMEZ%dg(1yr{*AhjEuyxBa=T
z9CV*@61h=_yd&%NoMr3|{H<SqFR%G=%dG_2q4X64oz%4MuKxTQz{BnwjC7N3_WZ^E
zv)u#JOx!bw-`nZ;`>^|^E5DCePA$2@$a$R*lFDt4;#~fD%MawOhBMhHVTG-rCB^mR
zzwBm}TM16JSsTZWAm1x*CpVH4?DFTfI<NX@LbOIB8~v2c_Cd<l#+<jK2An{20==sH
z6oF#mB-gWI;?ACv@8TBwh(655?e9GmEmADEx-ku{&Pzv*F*jO}@U+onz@SujGifNC
zaR9qhuvK}?O^39=0dDr*z46j%22Srj+wlh%KX$yD&fDIfch*r!%DL2^PkQ&hv)RmE
zEDEMC)>x5nDxQSk?}s~yZ~2f~Pj2t&?VUI**N$n0b(z$3y|WX}iVlzxaTx7-x4n#(
zk1=f6`<hZEcXT3`VLOHv$DH|mr4VO&T#b;hDy(K}A&h$iIHm_kjE}m+@A*Q5^P9XU
zJCg2e=g)feL+Tglye}ZCOmi-2=<&g3l~g{Wxn@SiFbtp=<lgQi))d34xcAN-XLKQi
zpCX|LFrPX**=Um4II8PU(IzC;HHe-V_$QKpQuGOiW6C20Igq1Vz498TWD!6-2X2X8
z&eknGIc(jkai(v50e%9QeM9v_13u7rtNdW1PG{5Cb!m%QnXtMX!<Wd(x9%#-Cpamt
z1cqN=e=NTvQB<7L=R<h!Z+lV*{Ml%x$5lj>MBp);yixvjINn*ghA^T6bKJSp=Ni|e
zxN8_1^g(z?3CYDIj6@x+we`RlMqP4K2*TtZdU06$?`)XaUmhHP_44z<@$;|upSiD;
zy)G8W@0+)NwfQ!j&z3ENo}6EZR=|VXN#e{cnHe0ljDYG<creoqA$ku)+3S2F%z-=c
zS*S-`a=2;k98b4y(wX?ctJrNUs*|m?8QuC0b1Lnu-5n1KZ;W3Nj+per_*nwz(%MDp
zE(iiA$}zo~I-99Hi)L!d>@Fk(<hq5JP&U(CWL+cC0_s`@6X1TLc^Oi=3`74>bt7sp
zz2!-ex8HR4FuWF=KFB2Y03xcZC<MMB)G!Y8jks@Fz=Mnt_X?!ALtG4h9l@iaU%$>5
z=k<vjt?!17fEXVK$QfhNg(`Fa#*MOypdxf7vm}9wH!%}wn&HjjiPo6=u+vW|()6fA
zj~R*%ApLqp0$?#W+NfA~GXev~s{AyVY(Fb$kB=mGJOD9#dge~V%NGR*zY6bx42f~#
z505u_1pPpQ_*X?7gaJ21PK=(AY(og54@|VtXG1IUUtvCoP$EgeB5=Y1_R4q@1UiAh
z6WzwSCUmI+N~Lu|fqISJ#R&Et*)H;W4O)A$RhHE#;w)x?rC=zuR)$^)4S6x^+i4Vr
zaI{|@9w;A&C^Agt56rvu&!oRO`Sifeg8sb?^?7?)Z9^;VkLuTWr={)IH>*a&I$}Yw
zHf6V?sc+tym9%5KXL}plkyIKoNCDK?<J0KEz(*(QhLUP*eh#JXyTmZM)HnqW<ZhOS
zxd=%Mc1#CQHjhRn6C!8Edxb{t59B1-92P~Re{_15ipA|nYx|i4uz1ts)#%mZ&)=)z
zM}zvWlZ`Fj8oSoUryT{5SPI5bA>6wGx5T??B#px@X|aJwXg8nWoX`mCrGnlS`9cyA
zRL7N8xlPiD{)vBy0M#yTvSe@BLp^;+m29pb6AiG36QQ#VG&YwN=^}Ov$Yg!vZ+z54
zQv-&SYNqAKUNt2`3=bNKAt;-N$U2gkTM_sOXYSF3c^@?`SjoT>#V*f=d(U6|Idj9*
z?_|f%Ga;qs5i<3($;|d0@)bjOU{_A?m*x&yfB%SKZOP`5ZV=kc*wX64*I^o5gT=lr
zwZXWfvO~pU4U-T_UITpyT-RQ*rqd!x(1D9n5{tZ_hiN0ps9c77hnI3Nxh2AwN4rBU
zf_Fft2PA{ZkszEk#{g-oIrx*j%}H3wh2%nGIFQPsYnY{KCBbU3?i3VVs6v)x<<4cW
z-RotvJ>s}#Ve=E`Y8vKIl?xt4(wWnIh-S<$_F_E(go|&|qLvNkq~?g|k`BjN07dqt
zk>jy{k6R>efW*748{B6kDG<_WzEEJx+3R9PR+Vf=Y^r&RCMa@g8-h}Wy8&0v03Q;O
zoFP=^&QhcrE%P^7qRPwM67g0$*}lE`@N$QS+zjv2pngENP5bs+&rV{hWY64I2zd@s
zPXy94q}w5l+Cu;k{;BI8rv^}`13#0o-`u0?J7Yc~k!wQS1Y}GBggelGb=A8ivn%*L
zNR)#oS|?qe_24L8-O7r*z7j4d)3|p00WJ^uLwmqKqk~$mW6VsdZKpDArCdz4Pur7y
zqS;DNN`tmL6MSFp2#<3won#`ZZIan~D-qJRoIJ@J&SK8!;14g1Vv8UAg~yT7al~gc
z15hGv@}t7>H1Aa?o;|2RGp%qjYC$2kYn<8%$&VbtKx2|Ta83>-mq5wf8-yfRQyRB%
z(_k4nW27gM++qi6li}=|$_JBO&ejHv<r<O?X~Zz4fI)Ru1IqkmHP_luIOw<@he!KQ
z_V<qAra5?aw10T41d_v-FCOn6??;D|r>CwK<Jt?$BKKXCYHksk8kp&WK2xqmga|?^
zBm`<Zq~j8G;(g!{bN@Z3`S@H@-{b9qg&T;$Y!GG8gpn5<*V<J9zdneyDB<}WFY-%R
zphR{HE;Esb>@QP}WMteXy7Ze!w3=gMsq~B+i&*u=E=x2WMwdKYpVzNe0Ku$HN9B8i
zBGdN=0f^UfLVOSdWiqjMaW}7_kYg1|Ih<iM$=wn26h7IV6PQOsSJzZk;Q*|MWYLKv
z7jylz2kS`abZ*#r#m@C3qhl_fax*mWXJTC72gA;iUqpq?1C)4lX8;NZSjB6UECZ`i
z1}5SNp_!_ObG10nX9Vd+?U!5m=hfm$nLi%;&FyJAgwr+J_VxSh`!$4Z(XrPQb0q94
z@4?g_`q^}Eewh<v698H?zRP}pm+X^|QltUxyND`j|GKD1^uGC`^yOD4wG%Q3A6!9)
zv3uVu&pwWnG>5qlJeG+r)o1}_AXtEDD&K>Zvh{>uAn`WZ(t<J+zRs3*prN1)FdD)e
z$eapI>*w`36V*hd$iL~E;5E0Yl+yBx{B<Sx-RgJo``TH4+h=yQjMxjqz`L)EmLc2s
z(;6(AP|5K#tsfX*w0-Qoa*FGiTc2woX^1$3WOZa-s^tD&uJt;VfBL$J&!<xE!=~SB
z1>9orS$?4J3(pVa`Lwll(!$(d<%em7u~`W+!y_XDkXj;$)1H8M*GAsJ21fauVEp)M
zV)JNlv$TYKTu9qCE)pwB5Ab^`&6&mH7I9>_z!j6LQ`In_SQ3eogNFk!qM{F5&B$ou
zO-MihOiQ*DZc@jbEPD~1kLeTz1O)s_-E3C|qP?fAMla`M{#O!tx|yW86$<t1zvQ{^
zI+dD}L!@(HDTz;OFclIecT&_#F4(gbh7pt+Y5f#7gg|;3?ZF0yDOIFvNi0H}a&oPN
zGGe7Dt)P&HPaet2m0Q18q9-DL*+cxY7{^?8QV?0k?5IoD!VoLg4|S#~w;bkI#eBJ@
z1E5HUJJ*jqLetuj_So6po%N{dCj;xjz)CWs?aa6LTuVLQQjZN~C(TOE_iVb;jmgRM
zQ<l|StJ>YBn-vSw?>AFSG>f_Ol<<tp7S&jFC_$IQ_oD$43`Bs1%*gn=!y}fePIMMJ
zwjO-+D8m>)&pFu#K!!V--0<%U^2K*;kKM<`aqpqOn=$HYI$h0h66pQ?NQm$g5WzyW
zupCS;+<G}*6fqU6ZC^==lWM%$D0&6{O`I_&mPZp_uvXghUHg{Y<vQH+(_QzLRns@!
zO;=mVLUF87#fRW{k5>yGjiYLQ#ggxMQ76xbr8xy9&;)FpS^F&beIW6{VeAI4tC1&k
z|5X9VVdhBpfS4LK2(>rCI_W^GpA@`V4iC?2GVw5HmdIji@2NWtow^zJrc^$UDS>KJ
z2E-8^i*}rt>7e$(rykQ|jABrnZq(;63a^Ej05pA*d`68jtQG#$TqsVG=5RugmWTKx
z?yjuOcXf6kgk%+AOh4v0;?8KrruTmhnSy&ix~qduU4^d;R!6cP3FXC46Py%*g1#z%
z0wTDYTnsc$Jk~h`<i0Jrx2{c&;@h`aH*P?W8Ms!<*^1fAVa5#PC<v~fkbvW{P@3@@
zSwmU-=z(H{WS>u}Qv&S7@JL5`e?Qyz+_=8<>I7Gd_`}?|Z|LlM$Z^hJyuID#X?DFS
z&;@?un$b!j0MgSQYt!;B0Vh#hqI9k2_E9-4F%^G2dj2eHKYNV-c4W<r6^eSC4bg_E
zS=#`<1RQc#0Ddv|N;8~WVg`V|qbJ78Pyg)x*L(W3_xQ0YYkzQJd{B-*bN|TS;2-_j
zn9w}*z=3<sX>3m3gFcD-?%3~iao&#vFF6<35oV0)fdwZa(xf1p&op}P_x43)dOb)i
zi7-i-2}|>Wd=izy6ndntd>H|>`w^x4I?qln+|d|k{j9Bm`}YU9XP|e`YZ+@fQEbC$
zgKmx|9wtZ0Gh;DF45&<8$-V4Z6$GZ>2?C?J81IPSkGG+wS_kMLTT$*oW0ArlvAx+x
z<6+!{)+Dsx`4jOt`dYs#fm489-9%PP0{8|oozlY>vrUJSYlSpm7G&TC)$H;h{_6)A
zz_J>PWBxrYQ6v{T;VG%eQhugC$<T&mT?PbZ0bUI~kQ^v_TsCYSUr=tKLB{C=qCKFH
zhY-7)|4U@#r6Sp_yQ72sry+5!m^mZK%>eL4`qkom8-Hydd4z%B$D@M9Lft_is_ZD3
zt)0RKP2hubI|5QB(i*R3{z@tSNvRC&7{-E=1HD)@h)hY#tL<3-Tocy9Z^B4+Q333g
zt%>r|4a$N~_4H~?epa|C5p5;WXZ|i)H;%{|d3qJao>(hp{%zEV<iP#L{R_*S0WNP4
zdSgG2>{#<Dc&b|5fQ5JPI6Pnrkt3)<U)V%;&0f)MFlnR_Ezp;M*eF2v1RrqnDn%vm
z;B2aoi2p<lrMihM8m2+^ri{er>Tg}mldnFm1S54dZwyG+@QHC*uX-iO&pu0!t+K$*
zY-pW8DhAQa>%td0i^de?Gj_rBgxtjHN^(}*=v`Ff5QkdLSrHIvLa{9wnUE*NjTEb!
zEB%o(BW#bbdG*sg3R45o;TnbCPe*Xd2*B}~LL7gnYo^&sXxV;Qcha0qiZ`?u8z{@h
zeGX{2S-m1S?`Y*sOgp?i1|)qM8VL_A1^VD4Ic|^2^I6Z$W&7ypxh7QS9vuOx1r_=6
zs)b$S>T}DZHwBIYn99bG-9APS0PSGln*X8MUVhy;7#l(J^G|%gkDi<Sa)$C~`@WD@
z3@YNm#q<Z&LdhP*&CC9}&MqQ|m<^w*X~pVjQTKZ8$6g6>qEYu<k2zP$g?*`bTx>e7
z?~3elx6c;z=IhgI(`TH`ZlrzK*uBh+N}QnFrvOn1-^Dvdzw5nZq!2))Jw?Xb+%-MU
z2*8>`nsW`PiglX<S&RqrRDC<3KG!S;(BGM?xRc$EH`VQ!2N=hU*eu&mjU@u&1kdWy
zeDmhbf5gw*5O*N0MzJjJzH?=4{$}HCv&<A6YUONgCJZJ`NjGe3Al*Th0reQaaLje2
z-p;Un;__?Z0QBt74H_uF{eUd7vUemnbJmD1@Dzu&bkd*mrQ>o@8G0Ju)>vK)-&PC#
zPDMS@?GT*(HT*+91i8M^xJK7IF0h18WMr@V2+b?^BPIAI#x6=#ZKb|kiRk0X$(oPu
zeVv3vMghSLGq!u#K9<go7-;b-vWY_<`f@93GA^ryvrl%JUx0smO$ql2{tOa)^@(Tb
zeEYf87Rqb*MeD8aAu(ijwRZbRe@E&=B+7!@{<L7A*bQ{Q^{}69?dmirn=?mZiy_bT
zWz5LucsvjW-T`M%!k_E+-WDo|lcT4{FH&Ruy?qDM<-8;5fE;q$lXWrku1J1?IWXL&
zG}vb)tk!TuR5nY^O?<Vk{~m~{)%yI(oUJA^Ecu*UM%m|QS4j@I#2}Cx)swpzOF1pb
z!@BGd(i3WiP-w*>!5V?9X;kRhDoEEs2m}garJj<HL?k4{470DC*d_bvss98?9^`=e
z6uiwJ(T|Sg;KnjdmLQVTsv(9jhBIdxe1L<SmV|yxaISl?x|8i4?(ZJ&559eV`1R3?
z-M#(6;r^dq9vtouj$XdlKiqx%^x&BR{+1eHyA_FEC8MJ#S@Yd{X4Rq0#BZEH#;AbT
zJU{JnU_=~aB-RC1*Z8mmPMxcAxFa@yA{3B#P>k1Pn&0(3<R}yieb&pbb{r@3qXR=a
zsCaIElyDUTtzjrY7ClCS5WGnc0lO5H1Y_h5iPI$gcgf6-H}82WJk|x<|7dHltOC(|
zLkQ%NO!4<vDwl3mJy&hLr%@Kz>`*ml)!L|0mZ*d03TCzJn~{Q3`fKTls}FbA(iyZH
z0b0zK&DN3Ro<>-&TMX=RoYpU5Y$RQ^IV|h<VkpeY<#YsATNNL&;~@c<u5@PXdrYvf
z7_*?$QBk59ZnR}(5cf{~(j_UjvI+yyC@MK6<F&_+lii?USies2fzrEy$EM=<ZN44f
z_!*Z`blyo{bh<4EM;bMEzw+HJDraXxI-E$xo4YRvlA8*dWU6Lf_9b(MY)`q6&en$8
z<&%ytOp0z;K05SUDp15_CUB-<71ffvti4<MAhax@<-kvdb_i?7?vXxFxG8{-&2${)
zDi`sL{;bFFa{cpp5dU&p)=$NUZr594;a5GkiK2~{R<gQ<I+O5SP^BYM-r5j~b(zlm
zR@GcRDRu7uq=UyZ8)|1mkGA^RGvB+a0jn-hmWtNr6HxL94%)*jdk9Bn#Zw@NNz>mf
zkt~Ta*B%vSY{;svHFcv}&_o#9*#mp@F_r$F7|Hg0))tSlNHcGH)OK=Cb0Ij1az(^=
zV1|S|>n9&x0>4}s*Gd9&VSo6MLisSN?0QR576{D6W=~d5pZ;Z}14d)8D9-c6c%q8G
zbln>{pZUcm9R|_va>Ha?lyj%ZmrJPvhJMC7Bhw0sh$o`fY;4eY3gv_4K}7*$_kDjW
z7FEybxlXnQJ#fb_0Kq4;B^-&(jIjn~Qa=&jy=ZfvXd%9&ugHZ+F6b{El6jtsGY%O6
zBf(}xX7%~3`6e+Cm9|=2=#qhLWKN}U;(1*n&raBt8+6M+MYYhHFv(nJQAhe<CS1+q
z`B2qLWrNk;ogD2QJWZTX_Z|-Fd^+K~>rpxNFOCZGY49xo?x%_8KbH`03V?28#3#O^
z;O*G<7N~gE!#NR5Q<Gctu`oXsVbyHw3uj0&k|;O+`<5isN*-NJgHkdTLsO(I(q2Z*
zWnTXyUtX<UNR?*I;V#@t5>R~fm2Z5VPf9VN?`0Qm?K{Pm@wt(u=!sS_6Ttl|e;^9r
zr}a)Mo-FFqHD3jDAkRIQfnoC3E7^?-Pu1A@CLV+8FHj?0A)RID$u7)R(~#wsu8$3}
zt>MfZTJMKCo=lx<LukNN!#g`VbUcabjEikqH7vQt(vj8rgiWf;YlaBOMEwTJiT33A
zmj}-VkDou?J$QBv>51+fd`-%KvaEcQI!LvZx*<h_>^}S^C&w<tU?#voK5JZ$Ljm4a
z^3(#eZ1^8T{f4Mep>fI+m!)>Mejk6*k0h5O({YrjlPpWO)?91aeb0f!Fx-eIoYpBR
zGU!zl^;EAL!<;@p*;v?1qqhr83lv<_{7U%L>`N1C0ML?6H>OM_B-QrO?$almT<nx%
zTqU^Uh62qmMd>0Wr<BT!8*XKtKfWUoa@|ZMwTKw{>efDcLvb0vmoD5oqdyk-BK{bc
z=5BI0`8*l9%V`Bn0+|J9c^|+O!$sQ8Lby1M5>*iv`>Ool6kcaL`*sFwM>W*Y`pbhj
zr8gZJyQ`LYAxYL*j_QE6drW3*y|SSZt_T(TeZoQ@_8IM)zy+=$S;2!a?*ZRgsL~W?
znw_|J37z<^Ya*?cY1R{eOj7b|;Gl_du*lDQ?hATghsBUk^GT`R>vwa!GmMFkAx4hi
zTe-CeOs6perH2JT%-vl_PJvw(G9dH?GAZD1wpb#R19iz#WLo8DBzM9T`C2j4Xf?d7
zp5R7(lod}fjo`@X!qZ%=-3J4t43YVJnv2crPTwX2IHT8*Lb#N=)Y;gS|Ca~;%}4&t
ztU1&3KW}tY4TEt7&R%mfMD@pRFfexBc8@v^-LD#zL62I0E0bG&W(Z-?bYMM3g8r@J
z^o|+uS%IGV)qU_NMhQ_&9v!^RjhLNjC59m-YGwoI)$(Yot+Z;^7rMFqsKOs<z|>*n
zXXBr46p?*2U_2YeaNs9be5vCLwLN0tK%bB<nOfN7IDt}YNDRfa@dsL*Ho*B-&5-^e
z>O1zUfUR_d-H7Y2Ic!15ybaLFiE1a#G`;%D=WzhdHp#6}i0jp4j8zp?hHt0?2{Yb>
zHg-XR1+LI5!PO8|!l_rannesd5u1U9J5WGY)bInH1H~9Dw2NXg#{`W7%%p_eQHDo7
zmTnpYnkf{Q2Cka$$?_ZAHCp<m+I&nyCTrw&W2J>{FPJQrn3A}7^Ja50eo~XlQVrGV
z(2LvI$=YJ!l)1&VcJ9Qo13M?$yzaA!#mK@0pAro=326IOCK$yq$$oao3-Js}nJwm(
zg?gOkm}YDEW%PwZ^Y!dw-fSGz?2F+#YzTK)_JxQWD!i7BK$|rn#bGEgx4W!lCBAFN
z?Kh{^A@uT$3$2?SDP-v9RfSBtZnnEv<j&ZTa(7CN-Px7awuPl<Z;4jp<}N8n<8iqZ
zW@eLEzG~GD61R^dy-`>$V4R6-kib8{__?6w^wySQ?sK1s=t+{5_xa$AjtuJXG1W6!
zGPAbd-7pi*8cYqs0T9bxF&O8egIbs?8Jv>o6BT?aQ?8q#uAYPf<;~Chf&ex^$-fr^
z8Qso?ZMD{7JliG=q%u#>EMLjG))os1uo$fkKEDHmTO!-K|NRgI#a@z5@elYPU~qf#
zzs&#ZAOAo0OLrHrc1t<opXP7++1_fgpsD5mCB$My|L-(jve~nLs(!tr%OaPo%Sc{#
zc2}M)oQBZP9?Q-OHa)^a#lr3CIyki2+@K?)QaQ1kg%~WLIEp1%xEq%#geOFYWNwqa
zD&Cbl0A4}aOdGb!M-MyMZ*JYY|M2(OK28Ds_ZQsRJ7WHJGk9*Lf^W4b-TzsYfR~xS
ze&`esXV5yG;ja_&3>7{4ytS1V3PjvKbW6*1Ytvw<@OFcR^l;m%Y37rsUc@%<|9vJ=
zF;imsk<_4hgf4dKW-wj-59$d|HA=FcQ{;=OK?KNItwX(jK~nMba9_JiF>|uElxM76
zS7mPf!s!+4E%s}6C4KxSn7JQBB|H%Sl4cGxvMo~co<ZCgP}FRAJA+v#A)1hD7Z@mr
z=dwn$)cmL7%-yw&qB<H|qULB7rokW6MCtHVj)}so&KfhJlY|<WNh{0!a=i+g;+Yzv
znXrN@N(}2!^7+!&Mfre_=L#Xjq&d>8&!DD**G=khP9j!SkwEtcc{vDlWJ$rNq;GpS
zA}par;p7q6T!<s9v<xGkHCrh+iqEnY%nVfALtUZ0<h$@~fgJUHx+uOm5(rvWq4}6K
zu#P9?fXBfA-l2Pg*EJgI`TNoe)is}x#~3tC%78Oywf!`v%-;yW$#su^M2wT`9u_;0
z>)?cl1Rj@6=H-FLHI@Sf$XNq1{u~|}c#XoM4Tg7ApmmbZ=RR%%PtRRAe9RC{Q;Y;A
zzu2_M-%^)C0%{-&QE06>(j+G2BcC_TMu-v|1U^EY6mB}z6M+|+c@u5@lN3z(28S$y
ziiNnkQ3P_jT1J7|%Sw&zkksm|1ApkRTi`Dbws&6~bR|Tg6)aPObO?Q|CF;W55+B3t
zsJ{gh<#qcoKH`u(EiUrOnJL;Q%)Q!{WZat%t`8KlJcH5Dv1H>56dd*WQfxfWo)E!J
zpmP5`i}pD=q3}@p`fv~+8seK_pw^P}q41Nw6ESFj_p7+8d?DNl{mbHXp4~<fP3SS8
zdGU~>grwI#<ZIM|-gO`2?(E9psOCR_ymVKb6O4`yVjQ8-&Prf(B=BS|5+6uiUQOa!
zeQe){+`h@-973ORv6jc8QQz}ktedxWPcQ0|gGqV1$QM_U2qKi6IuTBw7u?wQdP|0&
z7ra#{X2D}Ud8`xr$?2FtMHx~!or%6E<_HANma)q<%Ec&<%*+E4kSboO`<XiC={MPO
z_>*46h^94=-se&eJ6cWh1$Xc3vRVX}gNCBqon!S%*_cWJsK&kT4#tc8OxC1aNa!F_
zl|-n}z=^KIR!7ZS+D)F>3mT7iEi+C)rQLUoEO(r~B=l9ywWWAZhY_|>Z3+1PZ8ksZ
zU-v>0m`n{ADs}Byt=esHyz&jV;rzb6w!e71s-Pv;9Q&j_w{Ry$Tu`wXNhcL%O>RH6
z0|dX`(~REq%rp;LG`Oa5z{nEjzS~DQ7{|B6c_xu+?bL|~|M$rRUJrzbpp2%Nq7i?m
z-qtuaS39kWy7h+!<$ME;_M$)5(#HO>s+Ck$>=LF02)#v!xOr4F9<}2FFzR(bZ5Wca
znMZii085DSoBGYqPR$!#qQ0aj&rt3&T?ujaG=IZ?hb}8`cKt5m?98GOc&jDy$|zhn
z2*vWUP<P>`KEz?kFh&G7o5+aU(lEqWvyMQNx0o;rP|nU4xm!C(9@CO0ixqsmavho#
z%rM>GJHi5c=4No*M-2sC!j*vhGv7@$l#6^efhLGR@#{holDrtSO_+p_1FGa-s?+tU
zP0_yS7}O!pG^Oe0EGW{Je7+<L>Wj7*PFoUCD|LG(YePUd!($9)@CF~k0MzaTN8u0I
z3y)}T25rL0^#KmX$h(()s84WT%lJe4$UgA7iqXhh!M}w)<56c*@PysMid9w`aF0c6
zb$vzSM8N7N2Q~ikANVwXv$3hQ?Y7pGV3))$gInVFwC(&u{O2Zev=8+5{=~`f6Y_X*
zMU6C?5Sq#HY<Nw<c98l4^3f8h7o!WXK8goN101^Z+1$%ILIBeXAXak11TYf%4jb9@
zW3lnm5y+l#Yx7Ek8VCkHFBLl1dVV25HZ~_$-lIV@7erLEx#&vV=DXZYx6<*`{6j^%
zHusHOW1RLjlU*g)ZBCwCfJ3=LmFOWd&*~(L{{7Ge_<S!Ewg{w}MeK2^S{F~2`T5&V
zq+6)3a(7Xym0Z)Fd6Ig6T@|ZB^I_E5N~~+MO?}watG)_>ovJ48!cHPSy1uAYS6vqv
ztF=_vjx$OB6Zhg5)Q>G+Q~7fQU=@9e52>pLXm%95WIqIW#vPj%t$0vA-TL*tt(JC3
zhpTo!-rs6Tr`*3EY_$Xq1D$ezKiq0Dw+z$p>DKhh|FP9-6{CyFoi6jaoUp$R4?=+b
zy73|m)vx33WT&I-*Ye^mC{$@pdZj=FZkpX-GEp0~18xZx<JK!T7^CIHglvR|uP1O%
zU)oFG*z19@#J!>Zbgg^6S@vuHb%E?IjC-pU?KL^}(~~6He(Nq<<}XCYOHbE_f2G(Q
zQAO=#3`MQJlsw+=IyhFI9(9FEiokHVm)T;1@D*cR@-B6|zWT&BB^dJlVHsW<pxB**
zNVvUTpaTV<$mcEOgd-0CAW|o<s^;P6yL(!e#)MS&uhWuYRY_`}5Oq8H9(paJ_s^@b
za3?q$5`FA3_Y<JdP701gpH-}d8M5k>FjJ%+@ciz&cjth%5P!r_%ln-w+kfT9zF$_`
z?xr5md;oqjs_JD#IiKFC#)Rr^ror+jZMxpJg;^}OZ>_c5$*4XnClYf?O-|`^nU=yR
zmDZvBiprqy5|2H^A>ucll?%{}hxq?oP1Dy%keNE&+zs5=ErqsWP_HKAY*L7cucI|B
z$2~xx0B^$*Ck5OtyvWHlC$%ST&vaN5dEl?mTa@7|@&3Dr#lOJsYS&J#QpLG(|M1@3
z?6)9>Qr{qoUY%ZEFa1*lXPK!(wH~_D7CF9j_}v3KPltnMi`=aUVuwUeOX$e0Zw1r`
z*^$7+ao_oL>LjUbh`9eyV94hvSs6A99Qg5VfR=K?uqB+)SDq1Piz)MFOUVi)EJ-f)
zP^a#uo&<12Y&dZv@KR^Y`1LE^<EDD*uDBO;;gnL~Olp;@C4p|pe0h$VlgmYgBo#N+
z`C_K(@}xRHS35shfYi-|ZjHoWwXWB0Vh&+R^ziLHS$lJj<-Yc{?p+tvtkOVEB>3+2
z@8ADzRJ}8F3+A!zmpyDm9}7As!D>+PL%~a5<;P2Y{a3|g%1{mEBXd#eKBB|$m+as)
zz#px`8{4S%mk@X8S7b09Lb&bD#-FQL6Han}s@QAiD>~71*5Q^gqLkp8$<Wp|{*N}6
z2^rvNId(?{zKCmwiEV#TR;eq)?+|{kAOgBnU~c1ZxuS5EoZZV@3gyWFSjH#~m;*O9
zEX8rcso(Nrk<ZI-01%F~wK&a3eZ$5O52ZU*Ao^b4YXKa3hhNb$%q5H-4!)h}?Cy!b
zK(Fvf+{ymn4|M<IXDx8jF+Iz5f%Q3Vcu%(AwA%WP#I+j6#;>7$x#;%DDKBtSg1Obn
zldbPa)Vf%S_q6i3#DqHHBThdt9EBYx|J0!qxjF0{iO!BSF%DMTDmkE(-v?rOtirgG
z^9pBL^Ap!U4=+o<3!me@3gQR<mCyW6-C!RuXS(QaGIc#Y#BVT#^-4ncm_>Qlk>JJc
zN=>JK$sZI)PHR0syUFr!y*@0+iyJMyw=Fmu<hKk;D{y6+K7+3n30O^n!dfj59BX_|
zfCW1x5~I8MHj>d<uM0puO)kWaJlD!=@d%nnDRjFNLhf$T%d;zOyzxfg9$n(6{uGUD
z1Jk0<=@yQM8Orb<(1CbdIRH<L`;>hK>YL{8ZFs$j*l*a)4Gu^x&e9)o14Wq_JVi-g
zjR1{h`DyjK2$s)9xy-iq81?w7$S2E-ErMUmco4;0PO{XmCOYcmita6W?kdqUlm5Z!
zbs;wm+#(nx4lo>5a#4dXmi}<s)C4FG;!}5J#Xu)(0wOy7>hIdOOb+x^x9#!pRM8<}
zE`c-UOq}Jw|MUm-S>OfJGkz!eR%m23>x8Z%t({ypR5mA7t)FuJksS*wjd=*{FDfb#
z39No4*1?oqp4A*^g&L%f`yz~tG>*@tAPn!lowz7&TUETQ1*_Utm%>Ir<WJAc`C$Lq
zzv}-s`Tc%|9L;~8e9^ySR_b2mOcA;w#r9CJSeE+)z+T%w+t85TxgL*8VVu3pksftj
zdz7E_Evd<vn}f(G1pbxQ<8|XGMULX6xWVAPa~zxP{r4EbBpX@mS$wonCN0YI^XnGn
zI|tQgI3r-8jq(lRr%PS{>;e+Le8`0T>x|<EEz0*8N88>+_<Q5+i1uTT<B-1@cxQ8?
zGoMEPP8;a_1IF?BXtbK=$bM%A-~WY_%A!Uchv*Il91xGLNz1G~MpBzINjr`6T8H8O
zqyJ0GjcKSkl@LxM^;lKun{$9i*4e#BZp0o*?D@gnsT8!mhAZ~W?f!scz<faMsW=pC
z;kdXI;=8rJs+%7WY2%gfL$62r)QyXBv)UsA_$&^>B3>o7WB;0QOh&PIGb$Pz@w%Pf
z=Fc3_XdFNOImc0YQ@{5Z25G#MqCD!8n+8sSaF-WanWn59qukjr3XG}Yz&M$p@Aq{x
z>}m(|>6Mk|hoO7VeH~hMU$Cucd5Uvz?ExO|>~^%ZvmV0F1HXH>vqznOn)6!JcEsHH
zwdN$rK3IqTA&Ws5*CHK&pTF{yQG9JPj9=D@Go!ZqY8l9*+?rlQ-mb+zx(p|(35e5*
zCg<Q5yO_3GafVHDNq7&UY?&Zsk^>9Yr!6E6sW1}iEqfhAO^R)f<b)6wJ}}ef-I@eu
zqd61%H0e!4Ttw7KzFHeqtI^vm{u+NE>Zcj-1TO488Ot8rt-BF{S<>HY?R!C$Jy?nX
zUz>y6^6A!7G1^1=Hikr+ilR}9XY4)-4)C_6GYz8+s*!+b0}ne^3)z)QhqW{@7Dg<?
zix6wT8whNBaHcYj_PxNmgDPi8j00}B0j7MQQ$Ea|AExgYD7K}R>5e<HLIRhqod(w=
zZAm)HT8p7mM8IiNSH47cS{a@-%q1G~@LU&v6(+#NIm$u>X81xdy3}8tXInv+!Fd3@
zvubJODu8=vDDDB4Rh^B&MW^P3fV_icWK=}Xl0u!~mNv4YpS_-!uL^?wVnO=y>`7I<
zsx5hZk~h*><jiUhaY1M%hRkL})W?lSi7&(1j?52H$X*rRz|eq7+p???M~2^|`2k&<
zLL5@@{M&s4AN#@<*<|D}8+5q&eu3uE`#OXKP8Oe@u!($0WJ)_M&!HRYO^dU0<7FqI
z4YuPhhNagY-}ICWOKO&FZPbJSZu}_yO4LJ80gFGAo%Ra=wM?fg&{;=9BzE&hh3Q@p
z4m0to3uLpr@#?m&Tgoyv*%sAv=yYBkKHtIsqIB5xb<|Gpm2{R|W3cUEdhfugXW4Il
zlQn*I`r7)B(BA%#g-L6?HJY}!X|`OK%^B;jeRA}<Ke5Z7W!DZ=GB)qC>Nb2pE0F{%
zxJ%O$uI6c&jmtCoOBGX5c5S`!E5TvC_LUocbYCfwgc8GjEm4=qLRYUeHvj+{nlH!N
zM>~mYchCs!+H%1HAlITmlmW}Q;%;y=L4hX>pV<QqiDpk<9v$P9m-UE|JT=Vc#O!D&
z@R{&MxV_bvj0{cdi!XYS)HTFIY&yE4|FW9SO?q3>CGnV;G$}-j?m*##Hj@fBX@6{*
zL9M<oQ5x(6G_DsYT3{G8)?GB;%oj;m7Tj3D@~?5|-CQoY_4IK+6Mcs3ge6)d)*&K$
zMoxo`>r(~Mxf)is926j9YwbkZN?4lnS#B^AhzgfWDeK@zUx>oNm4063#E<0B=q8<0
zqtZVzZX)w4mV(ULZu>G8J*{{`45(H)jR-ZV<)~!VM|ZuFVS^2fNyY`xFsAQ@pkB{_
zms2dwz19;@^;Z-g0=kQ-(`(AFqQ&o|>CxH*0!H$$0QB;?Rr3Nir$AM%8|G8_kt@gN
zjK7OT(BJ436xg_RU|@~4Xx2y1Kxbzh7;dGZz!A`)sKzN3g#+df5(w|zO)|W)`(J)8
z2#VYH?z%q>{-~OPCeGxg1o?a_SYBI>*+o7M#BDlsW>iq~U_)BhGI0`ydXVN_gj!t^
zxFqm%9}lon>w(Tdn%}va69Wu|TkcbPV5F=&-8em^POS}{&P%2<X>o!a3<{_-<p<&!
zlFNlE5;7*Lc>7RvH?%PbZCI=O)E2*V)>HI?qzc?MF;h+U<j$SuQ+Mu!1hh$!FJ}Fz
z(W3O-&}<j8-b&vt>$G?7p4v8Ac`?{bawA+UblB|_U{(PdA{`sFiLY62O><Bs<+7TW
zBOo$~U&sDbau)*JL?8Ujr$Ne%sE@dAPy`7O6zc((H*B7m-B#0pc!-I1@3CQ2te-Sd
zfwjy}M`2oxk@&f5D>|8eHyy79HEmJ&QMi(4x|u+|yEhr>@tr%mt?%5)+MnljIdXE}
zf47W2uzsW&-1K5qU$}c-xP61e{`@@RjFZAFqQyK#8Tk(;H0Zq3u1HEe=j(^o4-%UC
z!3U|rzmk8t7LgxNjs|o0{vn(%?CcL2`}2cf;i(Ur5n&SCUFqQH!q~JFPLj3oL5o#d
z=t&EmtbJrWi5}77sqn0KGtg#!BOW77PRKrAxn3Mp$Jtk_Q_G6#L9P^n1Jq$<zAn)Z
z>Yw~mTj+>iap;pM{D_9-?nf2>VR0N+<i3pJz5d+~>IMnidh&x6amEvK@|LalVJ}qS
z)(gLd+z~fXRD{1eK7O%bNG6l@A#nmv{u7<h1`2Y0-;ED=^vbP}SLFSBwJm9J*?;}-
z|3}jRp&{kt-lPD)iy@Vs5?7oMAhlCB1+Mf5xAh54fep@m4QB%6;b{?S8}Hm{Oqtue
zGU!gnXWwl@3UJy^7Vei{zPUHJJCsCJ?z}iH97~2hjDKQA5ZeUproa&R(|Dd=QQJbL
zuQ5)2C4m%o;A{0qLgghp*LKMZHz=cWo=@EI=D7|$^0%EkYj?Y^w%jydTv{l!ay8TR
zPJf5T*r1{qrM>$Dj|P<xSs~=01Fryl7!Xo%&qb*KFc<?YgoV}>BkU_&tH*?MKNt`F
zFMAUxn(MzD5iDUSI<I_c{AzGamIB6}r!dz3)3DO~R}^oSfWNHi<YQJcm3v=@zkB#p
z%4k$Sk#!8ei=S@jRpjANthx{itmdYi8{O*MW+R(Ir=g;*I{F5Hb@8}KLs^@zj+P$J
zXam<@RvgVIfHT{8w5Myd206H{fZ1469OIpvOsBgUSwc;zup_0MbeZhv)WR6vaoc)U
zUAklZ9Dmcbx+B|M94aEy-G`4!)at)?mWm4*I^e!85vF4vpF5?|N%nCMCq#Mb6#a!;
z-2SvL(xW3JS=YZ$9)Ao1(<4HwZXZhT8|{StM7_p0JG=WZPK7#IQ-&f^+9u5MhaIfi
zUN6ah?6~<KvGgg$qzzp4r4pv!%2ZZJITRL@Z3r1=QCI}9hUE{*rl~z3c)E&NNW*Gz
zF26f>L>DPcliJapk*FGUCq!#ALaxX1Z8z5Kg7J=XgP<7d_0F)<_ZX1MI@Ema=EJBf
zh5Xtx>4H-S5MwGaTEa?q=Z>3V_)OfIQ0s|yh$pAsBnwDWM%YStM+9MCNmFzdVp)af
zViSTb*JLXuBmt8MuiKSY&p&e3%h=K!c-*bM!+n8(9|l6YsT8ba5B}?a|9>Cdg(m@G
zkj@G@cwq~a=Oye4qDEZJfwRQIBig5v;%q6Pkqxl+UO-N+X1)-f*jYoL5B$9^9{jQQ
zy$Z|$<m`__C+M6M9vPvGc8=J#pJlu2LqLS~S^3u$U3XX>(H#Rpmg9o=0BQpu%=r$u
zzdA!63d_qX7%?N}dS;_ZUQWZ=oxHt@s;x}eV~(jYnsCe7)DT2F!RU1)<ucLXDIyzc
zXf&*g;v6A8l}d3RP%2QIULfoD<>3=|0!jXG>w7rI2G)lkxAS?aGUamn`}os;+)jsI
z(uns3Ep`Ws++2mrY`EIa-PS0!5s5GZd59Sf)F{JoF|CGfWjPU4+@v?Se|uBI(vt{q
z1-_$Na{i+&f#02ig^Ky4qL1>3go+bHmPgqz-WK10iGnhdO$|dcgf4WqhgWp8p@tTj
z4WGX_K6w7@$W7m=+pIk;LBh(2T1z!WH~Cy0k#?xK`M$Pt?0I`x2G|q*YAjkL50*s{
zBZQMRTInaaJTCJ4k3ND3y7;|8pCQHL4RN}Sb5RZ~SOu2jkSuKxMcb=6a2K<->RIxp
zlF+`xvKCcLYG;PF8@!#JFXeC+q3Hg~NeomjJvy_$mEfD%@IQO@Q9af2ki$(1`b?B4
z{Ft$*D`2WsGYu;f<i*r9Swp%Z_kA5NP-M7~+Li$BX2i&j6YULQKm)W3b-;LVCV~b&
zybk4tR3{6*^3YS=_SN?7e?F;BMb{b+8ORH_9C`{M``5SbkS~sevt-!Mp0JdUVz!|_
zFRrv(!M$U}&e25b0PHC}oq$f!%JRm;2Hd$689V~6Aa;L*FsHER#Ff+A*O1$q?kN3+
zv3BjTsGf!_pe3O=ZB;4tBB&cVR@^+Zn$#^DXYe4mU+-SG2;AW(z8M?MQV32eCm8?^
zs*LQ{ow9CivQ4*_R*M-QK0CwHuZm(GS!bd?%mnOMY#&_{T^Rz%1Yf<L93x7yVu5A-
zTy=FFpoyU2X`8X<Q5S$54jgEADg<HWM6y#}hX$^!l`FOkxRuo+bw`es%`0`cJBJx!
zP|lsxa)!`TEC}0D=Ervo1oU+%awe%;l|DEV+P}+S`{Wrzffr+BR9PWiDBizaD=rHb
zjcA#Mjo=On?oIhqc<J4DUCl-z{0A$kt?%AJDP<@7zLjO$+v`2LZs@2Yc!H~3u+|0Z
zR4CA-Jtu$XMU39(rzKMZ^k!Z$X)V>9)eY8n%6#k@fD>Ejo!xn%EsBSuMjRJD6K6a1
zC)IiTwtN`F+PAyri|G8Gm1|t#-%E`s)`5uj?8o1?ehd}&FBODhj$jdQ#IDtdMT}Q;
z65m0I@$kVQ{w;<7vwSbL$Ys#2NLBJb77`I`(mg23c+_&lKjqF9$?Wh`Wqu*XJEF-h
zW<q|K<s?`(C{({btX}Fm$G5(KP7Qlz=i1fOUe&Ahh18)@&(|h9O1H<^#!ZM9mg&1{
z{(=j#9GVyPSKNTD)4a^zNbuf&*NN8QOC*J7?JfE<UsF!kUxVNHygO-MOXVXR2>A37
z*<F_GiT)%@+BM>fx8l~kzEKBsd);<g4?4xGOz9ZtcMrFqmu<<(yam6;7P};xNA2!_
zTa;zwC|lQ`W39gPdx?6(sguun2AI<e4Z+<xpu5wxg+DU!eHu4O<OAi(R-Ur9Z$zyI
zjA5jyyT%f~l&LMqE3hLr8iNg1$W6p%ys6qwMzFCRicTxvyiHC1c9%cJ5>|dG-5;`g
z<?mV}a`A8IM&mA7Ise|c&#jlnPtnS0Txl$#4OeA7H7~^L!+jmb?RNG9{xO;8SLz~g
zPaYPqzW<;NXhWaLU18#zpAk)Ca_PsGoJ!@H+j|)4K885^)u*4@D0g(|aX??vb-TY<
zxTzWLznM!oD^EgTeEz(0Q}*lcLyJESDe!-6MN*&5@|I(MxZF)HhImHog8mr>(=O-=
z;OF4nXr4bu+Rp8+HOamt_dM3q3GH^G!-s%Wo_TGQ&k;Qo_mzFHs)t%3j>N<}clP8)
zrwAG%BsPg;$;!FuWSOPV`Md^$n243;$m}v_jquIovy!Phky=-;&d$m=-fPvnoc6TG
zPO`3fG1Si$dp;igPCOsJ#A$Bi7NSC;c|#Pr5(JMZ>-Evy9-h|I3Y=+6HKVi_W818C
z0Kz=wTPCH@AT<CyJ<1Z#sC8;3RXHp|TdfewafZi|2^M53@h)z+&1R*Bd7;>B2Qzsh
zfed3(S@$`DE=f@_qO-~Sb+_+qBYo8yq^YhQXje6Z*&X3XD81gVEcvhH>wE$^Dh!SE
z3ySygD{tzbky;Q!a|Ng2j@3Iets!#K7)9>zW=@)>hi0hI9{F;O8khP}pjGD7i{_qs
zA-WAcx4xM#gFeFvp}r!|mm9^UGSRGs4dFqP!zjcFF)~yW7t?Dd*hqiYob{2Hp22`-
z*r1yZO)~QWQRnn6A^6PNQWqYSXdHj}M19I@E>z(zRT~T<7oQ;;m&3wI&4wqtz5hG!
z{q1h=cfIevf6#q&_eW71MNEqmOAtwuL=|Ir6rK@zfqJ}*Ptun`1YcX@HnN(T%fea?
zrou^)bRmr#2-fS}0q+^uJy8~qw%6kgJ$q-zSTiG92F(Bx05!E%qYRxrw?sb}<8@>Y
zNA2i8l&Djntl(;jDCue;TQj^o#S=D?H|9ysp|~+E%b>6&-$(}(NTNQiPxG(4l79^B
z24vT+@loQ}*%-n_5}zanrMO{5FFs$yg^a#LoT69>gv#wlPLW_>=~#5vJb@7vA0f$P
zG%PeUws}HpO2cN!)ViU~H9(2d)0vMc0C}5W3&-UT)^yY*r3?T{RN)#bURy*tXEfh;
z(>n^>3uUx~VxmbNK}O*6d`5Odwp&gSsxAyXiL_CKJ~&H}&3|M3+l9h#16Kh%M)>>;
zH!zwi-Xc)HiohgBJ&u7Y;<oiMvOsUQ`{F<nT%FW{kk?elJ<f#oD6CwMkBi!d+9tNS
zeuddlZj`k-Di+8T_TwI=QSlz@?5&gMX?*dsB-Vu~44LE957#Dboteb?ts6)B5D`tr
zT|4spB;csKEy<GR0T@^A?Na{ZBymLe^@YU=4S=7@URNS{_<hUn-Xa)2tbg~yYC_bY
zEe=1b2kxU`0iZQGg65B_#;0`EbBO7dr;|zX3}N%isUw2=jA7lP?9;tvbZ|tO9LL->
zHeS|TJHVjzJD$i<GPu1fG3D8$$cTp3(2sSdm?!$lU0;~reyG`|wNy6^SKCgmEXwT~
z{#!Hp1_Qbs2KVj_-&+J&$x8&a3@I?3x~XzXqR4^k)|1~M+^O;YpsarP?%-|j*c-;U
zdEGY!nx0>Dd+;^Q&C#Il`Jk;q`cT^#=amHo)_2A@Y?~p6eV936)&Fm}IXJ8vw#G+(
zXQaD9+mon9Aj=udszE);N3Z^o+d|H(wY|Y_y}|K;+un6};GTc%(SaVU9US;E(KK(e
zK_oqn4`07a>L@eD21p7{(5iv&ttpl7b&$;R*X4PHoI5mRq+!^P+7I20&RCcICGo1C
zW7quZWG}hFc8&*tuHh=xs2;y}z~$CIFVEg*(+%_Crv3KGM-T5thmpX0%GS&O&U<QS
zXJ=W?vm<VsN-$NovlqxR<1MY$$+g$g;O8R_(Lir>wo*q5j)6)+%-(WY*m|WFpZgt#
zXNqxD<+i!+a+@-+ns-W7U5S}p#cHc@pL?;fZreoSW43<zzmpoe>GOhQaj#Z?;ZHnt
zg(+_B&|OyZ>@;8eA9dJXuZcb~<x{r&flP|3@^}Bv0>HZ?+|1EJlPvQUlZ-ylIblta
zE5|n#zvDOI4Q`Lls%7D};`&t##plH`?*@=?t^R^<{wNU33AxwFTdQjVXao|QNmXYe
zLLBG0WK9yBFh*eU--AULEczOGa=o*PT*y5Q2cIm8i9oJ9d%Rjiq+Xs=;Nif`=TYg#
zsGJQ#^eHYE6AC?e0jAZgH>u9cQ4inVvsd)=6+L)TdTtPVEZy$u;4%3`ZVA2|&s2@2
z<UMHc^*ttXC*#@WYver5SErM5l)3A#@^f7m+8i08tQyYRJ_&{6`i!Q;FFtq-v@5;Y
zeA<)Tzr|Ir7yoL#Lz2i>)g|(Qx>{2#b&}=Gt;^SNvJ>94kQ_Z9JDDJ}Jj}51H|p9v
z7QpR|w{`<~k0q=~kn$`B`qwbzq%7*hSv)O}P*T=Y#urMrqVk1#fVJT8Nj^Ot=PXfx
zgWAU;Yh)wJ91}+cY2o586?PxW;U@=L$A41PxMLiWt@Q_|%PcQervTFJXu63Kj=5!H
ztK8g9`Z|OWQ81KQx;sY09`@52p@9L)KVhkOK2rn=GHYtU(qgxMZ@KPEk+eG!k!F@s
z6u1Y5m*VI{j8-y7<&?YfbSgB135R7^{KAvWvpYn^=$o}a>KLJdu42B10NdZSZ}AWO
zTQicvMYr}0W+Id$`*HAPqr>n-gu$=#fSh-q7CgyM>+qMYxt^Xm+ozN2bQ`H3{+{j7
zbY~}kUqib46$_-{US`sRL6n^gM6P;+gsF9Cc3J}P)5~t(xpP~BqB>AJ*~xc}q*Ua9
zLA%MpL?@Gpyi5DHy`jO|uqe0^CH+YkbmM`_lbs?MVo6w%5M}`%&1b14DZ`2-<N)!g
z_a_z~ax!$>d`5_+KN-lc1N{|Z$&YUkO1>evyQg<|LT!FPeAlmX9Y76{^m~m^SNGTk
z>5;Dc==kH}{5hC;ZIddMEdiLF!gD?=|K?FZ`~n&_A{<C~_RB8l4T0dr%e*tv04833
z6GIXe(yY-%;S@J$k5{eMu21rde%6ThCS}DW{u!aG-HT7YESF!cPJhZy>m(Y|#NAvO
zDD;PEMoANmHe+5*s6*FWVpgF$h$j+`u@ptn-c~CgA&{Xl2I|^M=>cG(IzAFUlMbmF
zvn=vysD&qzvS3fp`4g?b^x<%XaOt|6&x>{K=l+9%o2F`3%IdV+2P}?HxZ%jbZGab-
z`Q%mYKefqnJYQ7j?u%<rgPU8Dc!&|AK+kEsWngQ<W7Enf2WO8#;i>gFk!Z67+iV<N
zmxxJHZ!R%cvIDo7n}6bd?RnbhcTqf(3zqm$@gqb@!Vd#J9PS6zlp($HyXJI|Sb>+N
zO2`O9)0NMY?20>gKy%q+smA!u9j)k2g$)@hnKCTqk_K>aNWvV%2e`9g#<EAEr3zWH
z5n`y^9b3rG_fZHosa3`Lkn8%iE2bN%k2UmN3P&1;KH$j%mg@4N68?`;Y}Z7#pf!FK
zWty~Ox<=czj6_2wai5_da$TlZ_<vk$t5Ew`8pf4DIQp8<T*_c0Z7#MNW`-+b{WG5h
zq^MJ^h3!@2#{4_3Aet0TwdYv7Gto56T35NSnwp*=$Y9hl2<?Td%uR7m*44Ct3gxvs
zDRi~b5bPzo_i$!uPs31;G+|!Ty!j3pDc3x!cO!Mqze8J>ef6aRdc=jD(f%r?c&HZO
z-R6z9-I$3gq6Y?-GC&D9M$~K{I06fQ62wS~LboQHRGRR&;k`@R#QAvp5_JcG^;@6g
zV9v&+n|3UAE@E8_+CwYZhW^-dEmDot`b)`d$BGSQg2EhHjp2{*$qHDv5Y_lkU`;+P
z)FUbco+jEb82-u7P3fCRG<OOeIXR3Bh8K$}5{H-o|L^2*QFjaYhhJ~k`taNyPNOy6
zn!GGd1wHi)#$;GLQdnCTKqFd4_NF*$0^XDy7NYzx_ZVkFh$5#yN}psV(Xo}!eJ*S7
za-<)qzKTyI*Sc*Ob{xARIUjVB^|NSbj6;y-H*>D4NjUHPU^&Cob%V)dPEao@re|wO
zICD(=rxvr<<)WG~f6R(ffJWQ%`Abok+y02^M5zxfmcC4;FSKvX)Q!@M+y*WrO7Xnn
z5c=QTu`)_~<9h%>%OMlri1hLuBT6t$9aHo^#`z+6lg0a}W%x(Y+f%nGaqvqC7&DK^
zSyIodSzP5wQD4@+8r7mC^xB0cZ`V{J``K>x;xH>4HFEyxSi{&m*xq~G&-S7|i;@gi
zwIqKjlAN?SEf(jRYCKAwIa7cYGerHGjU6y8l-cskoLX|2Q(wixwHj5_k~o3q9;AX1
zmVjnIO1c+8>UaYlCY-2t$5gkH$$xW^C_%X{X`$@w?3A;!DnhEsz7UnNk%Hp>DHtFm
zbcWY1dgKV0H(wF+CU(WKYBu=g{YK+K91A7+0VTMqG3a_g%@K2$!a56F?lc%iIA7;i
z!3evGWf9IkN?8GBd*$b<oAC&PXR90Ovf}D8Ot(BK@#Opy8x!sjbt~zfZhi=d{#++?
z{X17PNr>m%upVPxEd^;poL2T|L=xu1C{$v?7Fgds>Bg~I;c)wGoUB-y@v@Q^vNFv)
zv#E~+vOgAf?%dJHfZ{2jTlC>8t-5|HO-hX9Fd9mCcvSW!QqDcRoc8c%&&^m*-#e5r
z!DD$l+QxCuX{`MhggWb2i2>02Op<=zwl#Iw?A_vGi928p4eS|Utoo0Aaft4`UAUNU
z?m(pFTi)XODnkSmQwRp?vA+=!!!d=8CekQ;x$6A5$s_N(50j4qQs|vKM_59q@Y3i*
zXe^d+4I|(RM%y*ZACAjP(EFM~kemCdsQmerW}`Dnal?-(UwkmE!u455)4f*8kgM9v
zZ=fZsCg3b(_sV=$z&74sv6eM@Q%fCJO|l?Fs<0eiSLHa;)e{3eH*L(k$!Kppj?A&-
z6VH6^xY&pqBcsppvOtd$(OS$d<P1kXevk2rM%Smr)59v57D&hZNs=3#iih&82!Bl(
z{w2XIBYy9YhAFwcb#}i8r9ld61RLqfN&rnmZi{cG3qj|;v#UIhnVLPx%^i0v5Z|BU
z4#(==lY=!+!-K(SQZ_AYxA(+GRlrdA$#FWc#wb2i%%9%IVWZA&JvV0bZN^3l<FjWZ
zGK?a%r=lD{iZ3F)NIJqQBuR3%?W?;CfcwiLbnimYF{xf7HdT|ok14K{TYYhbEAMH}
zyyIdN8JTi`*jt2Vtsu6kF$dbmMj7qei&o1kA>w_k-I4=h_C!5#myLt0CvV$$D5b}c
z%GztCrFqSR@2@K-A0BqAq$jYa>bLZcF0mH``pV1oW-przU4Kr9s)-#cVeZeJsB{|F
zqBw_PI=ND|yP$i+LS%NXJDK!c^1~?(Pd;(xgb5AHlTnC}e~7!*ubs`SriDYvS4zLt
ziWB{4bgk^imN2NqRIwNMMJG6rc)>yD;mtjy<$+Gm=2~L3Mz!SlI;VZkgyr#C*dz`_
zMd(jKSr%cb#uv3Ew@RPS!QOi{Y534<b#c^7@v5lLOq5DN8uKRX%LCTy!?mTpJ<V;Q
z^R17(A@jNKzoB{-eD3c5ojN0N`~Kbg4|@0R_3q#8$vke$e+GU!0lM0EubXGL*F5;Q
zJF&l69Y~`qDO>vBaJ+A4VC`&fog!!LcYkc?i3$^x1|VD=*=WQ4Yrav59j9dln!#Y+
z=_PFKa*B%H2*B6)WrUE$e0;kv4zeeBmoNI{3UMpOU2#$Z{ZM}Aq!2;SpoB{(Um#3S
z>n4rSR&kWBjRF_!`l<P1QQh3?S#MMwP_XN~FU9g|m=32pKGEDm(f8VzcLOazx`~Nf
zJXT;1z)(=?Ep=GlEF;AWwZtghttZt|vyXhT1eREJ*}rCmD6p8@x#yGW)So2EvO{6B
zSj{-eZV|k$CQ|$Wtio5W*B+|67KP$z{wAt1@!d|SETUdXrxas*^MgiwvAF@CrnT|e
zgbFAOw$OFgA3DHV8yGqfQGWxFWEuV4ZFX3<UTviwAcxRT6D?r*t^q0im}pw9Kr6)S
z%FT>wjR8s=9w4na?<dQ^-7H6lEP#mrG?$8$DVBLSLA={C!~_w(;xG+=?e7}~S0Wvu
zD@Krg{iQR!B^OXy8UET`s83)%4yv<(`{O&*oc$4d$3lYyy|Gh`L99c!GP%_#$R7=y
zVvVzTFb5R|@|Vt55Pk!!;P@a8J&y<C>*A`vS$JbYHDT#D%(|^Tz-4ncg%Yh+>*TH1
zH{;Z-34H1CCSh}8(q?l@J{yn?h(LOQ{JpJ1!H3*3dUa&ut(^p0>PX>1k;hB8OHQ|q
zYqL5_)8}-{=F4OYP*t7#>Lia2(pbVgv)4M-Nb{BB`MR+)i1cfx3IeXxN;9gx5V!1R
z4xSe1yyr;e?;I=5>;DBt3U7#Uj?%>FXsqxHhHAsdSsPn#8^#S<!OwcyTvpAqCfj<t
zCL-~mU((su3*bmZL)lh|-05$<>om7KRH>`9Wn%V7Bk8?Mt1CZ^wpA|~$gOK;=O`Vu
zFV<)3t!w+Ov$mn_tyDW*3Z_WD7+rj@X1bK%zqGNTRsJ_h><ZELsM?T0_oPg9WI!>N
zTIY00$p+D;``5Ze-ouT3T!nImd?X7n3SuBkeWG7*nv1#j;E{gq!2J@PCvl#MGZYzX
zk`V9*4y`sautqkt`(?2tCHIm=q*BpMN^&gu+%z1i(DmH2qeWhC8oi+B=o)`JPeh+c
zNkYy}xKYcVBHjet6qBV=TEPorkw9l<I;{nf=URyq^kuHI9N+tQ$=DR1)aHzF3kC@+
zO6l!&<k+vb1XRE0bm6Cp{8TR#$AF%g#YzF5nW~9yjmeu)&MaStl1HN2Bd?~lAKbkw
ziMfbum>%h*e#t>?Op&Nm9^fx<eF(3dGR4W*3hwO5AFm&WYv<BE_M{v+1C;vs4cROt
z)!22WH<4$1?%AHFI_Pi|7589PT=Fg7Zm!sWXU)CeQ)$(GN027a^s`um&w@o)OXasD
z3dHQFaY1`v1Zp$wgb{aNU+$eqC$W*pKL1XcaRy>H#)B=7chbI{G|9(kJ-ofCTfC<?
zMb-GIC+mW9DOCu0)cZ3duqQ)O{Dn=LkRDBFfnSoQglM;TGl#FTtup^(6eiV7l)=Er
zRkGt)QsvezIwa^NXpFa9ZLKGKe=@L$^1zhJ=o|T2y=o?C_&sT*qcfr5E{vCtN?RL7
zgAraX+b<Ssak7bO_jUOGS}V@r3rL>w;8|){H^zu#!ZHvJN?-d>UCyxT44)Dq$*EhU
zsg#v*wRlbFwx*DsGtOe7&CikmJC1et${69;$oALXp#HqcC0<ke%=eR{r^heecW&zG
za?S-8b_5RJ^L#NTb)xE^*Q^AasXlSm*QFa>grSGrXTR*CYObL;qUt(%q#0IB@0dHw
z)d}B;Un-m~W<jeBdEJ^*Ux_}qw1bgxQ0uE0wQlcTGBV`^8??1?+~#RMKG$p+ZHgBy
znas8L;4T-FE*&Ra78HM{`D|vCMw=g$McCh<a?lYwD<-u##tHU4Q+DQ)fV=VGi%E9e
z5~QcuXydE1cK#~Yt&@+(Nbc--IlLwXKDZa#l6*(5BKqll)A-aQ)Ht)V9$krn*Y|#(
zeWQr)o(-=I#F@Z@U?}w4;lU7vfAh2`DaOru(NF{j)`+V8Z+!#w{lozS(}w@X%@GW5
zBHjE(p1uE}EPh9MP|3H}70ZMgYZS)f`ZH9IO%Cd}p4^o}h?BhW@pR;*;+>;*ds7p)
zJDZeu^!epMbO5P}Dd)|oadRrd<6NYd2T_ztxuL`*`Lk_`DHzGpm5Ma5-m2_uSd6vn
z5_sgA%WG9`T3EQ-%>Qr7x;!l><?;#zmD*|6WcX)x8|TC8QffIRT(gL4AnFyo0SLT`
z7WvTtfLKy_7$t_ro8Ld7EK0@eYF^*;X}P;Y*sWS1#hPx-k$!VmJ8Pm-a+L65me`e(
z;=EAIW22L{Trh76imN8125J`e2ik;eEi8i2+S}fAVC7RalP@ctA-HT*5qWm>rzasn
z+%mr{PGo}K-{ABpJ{KiyXbw_fjVqVxV9h-=aR1sqsx#YOXc0ZX=jP5HL481y#Gb<>
zs|kJR%Yb-XrV-vi?+71+hdSa%$r)eA9U)IUmTYQ4oL*&N+0_xv+bRZ`&QEJ1{sz19
zglKQa%q(`s^M*MMA7NEX+r-PI#v!Wv$>Y`N)dV?GH*Z3p=yY3RmRlNZou9?Y(P8Op
z7K$G&I1-?8RJAP^4tzwQB$~$&22yidqq>wlvrgj+!YFj(anxD>k6E#0;$%x5o*P%g
z+VZgkCZt6<u^fsN7v=ed4>67x)f}YL65F^G@<%1JTIS1@SA?%yr6HD4&Gmq^Hf5VA
zL<cLes#P7OLR{CRU?c<0AB&TDeW+h(5?bjVhMwzz*bD8w6FfHA19$M`lj=Ow%*iUx
zo)kETM<j!BgL)(z8XGoWED+$A^WmCK#s|{62s)L@pTRvjS>M@6cJFrQr@!s~P2YAO
zZ##a=tSZ{%m^snsRrafF&&Elh%++L^D0X*vaObCdh89-8<1_Rw`-ZsBN?3EcTKZU>
zt{agYQl21RAUqdb_T(W|Qr@fVMN_cKfoNM-wu-ZF@DMyf%W9?3N#7N#CFtT6e$QV9
zU|E7wV2@0TWzJ(qIw<1fTP)xU0>VOxyeQRmUyq6ziyS;$plyol_flY)fdg{yaDVrB
zKYP4;y!-j?(Y{Yd@(=ot7kU!;bkBALI%g7HFB>OBuB7QAMB&x*fy6*$ut8i#-W=Bz
z>(=1q;gf#L^GZh~F*S)(wD5vvC%m0VtZgnQTpU`e@WRb|HFdHlxE(=--~|0RBA*V~
zXA*<)`eeV^`22hju>bI;!TfTpx~#1Xo)sde-E7+H{L<*Bv`Qhl;jCC1lM2qI$(5KM
zQgz*GUGt%?`&RIy2bnO&q;+ngpummfwTcJWUne;5&gr?94}$CX6w!Y)o+EATDoHOZ
zvY`@cWt)2F2ViI@&Ay}oa<_K<DrRDQMUcaO)RdvCn34LpSTs1-+~?P;1c#J|>%5#7
z$j<q|XaiM_sEzej-3f%{J`-%(Z2$O4*4`I_gKl<g$z<K^2}l@>ctMkH9&;feyJvKT
zQwSAh^NR@3VCFjb%Drn`=KX4MzKy@O?WsX7PdT&BJ=MwDk9WW9;II~FEVJMks)HvU
zqFlsT*N}zk1hrHvKUPcP_3(ssYnSXmW5H4{Sl1I_kuH!j>GL(XtQ7NLoD5RH-h_PM
zq6Bi1A}voOI|2e*OmR1M&`(?!FZ0D%3m2shNh#<wAJMG=fTAx-j6U+ct#7xPDOsM+
z+<Qi_$QV`SQoAhAAoOde)ggsXyGqKN`dyqiQDv&(iuO*gdIDy~FP7O=A9xP)P7sO9
z*>Y7b#cyh-55Ia!Z<Zhu?`g&`ZrN8J_R$r->tJccx`NU}BQs*=Jb^THGH_DX)5b?U
zkgt%O)B^bqx8&c>5T0}_xGWH<>b;^XtP#dfTm5KoO(q7(4v6bQR;hIWRapwt{7T}<
z&d%bfxaVLmvh33Q&)om=b{U^9CdC^yura**mMuV>CMM&><$fBoKJme^#=v|sKv~Q{
zvh-j8>y15lKRKs8Uv=E87CjlYPRR2nq<2>{+C4su?r*oSZ22cOC6Wwrx;kfyx3iw6
z`76P}l>o;Xzi}e#q|imMRK)5~8vj(h{fZ^^x$$Qz0JQ8YvRqzyH0XE5qB^10*H__R
zSy+K(iEg$G#fx*O6@XGXn{N10S=`(gXe}1kR=Ts*lML$Wa)c~oOl(tlXqx3~XIqA>
zd2${g_drk0O0zA6-$#qZi2e{sIB2edbYs%Y=R-swSJ30)hv0}3&sLtbed&_h(rl_@
zZOLnAl29jwt<)s64%!$ySIdI>ph^pv#CVJOvk3*qa$|!ecE?FgqlR0;$#tk?3V;p~
zGvWO?*SkUYc;-zT1pSQ3q$g5Q)B2<)%XR-%KYNPrRyezS!d<&0yUq+KiojEEMWqSS
z(XqQLd;VniMJ)FwrQ0YhxXZrPURw=?mG+*zsNCR1EY~=Q=kB-uqE^HnTK11W54XUS
z8=vwF>~I9DS>X-SQ@3;B&?66^dtJ}j>_F6L$mEvqn@zkshstHN0HJ6VZY;wYXZ7de
zDQ4BR;ZY#GQ~pgWu^^iTDM(9Z3~Ex6Dd7EOGkHd|QQ&{)Jj@Q&ft+W<qx~oQd&k+{
z^Ow(#+jrb&9=&|p9#xaobT+u>{@nfMOZ)SFC;Q^?`O|EACH|1?%fsg{UkpC~GveH;
z@(w<_d-v%8RT}(cw_1jF`!HC-jC3)qI=KJv%hLhIREJOWcbSQeJ-s8HV3UJ9`{VP2
zXZpu!_Wbbi{$Zva>MBEq-U%*7(gh42u!{>zq}CfwhuPrcM|OdaN-sjUo1Jy)>R8k2
zQPnSgcEi=5WxL-VWl7PnP3gH5o+2o6|Kagz^z{`3&90Y|LJgs?8gqAK<kS3b)l3L|
zNB6fqb`IgbwlAEV(`C5b>1WTX%Upt4q`j-4Nz;3p`_%0*Fu=%eG|mD(IudG1RK1W(
zpz`NSuA(f&zp>b%wa><?oG1aAeJM7w6R6<B4RCsCk$86Wz^P%QSB0EYQ0m1()+!~9
zD{0k&!LLV~U(|?DNt5~*PpfiLEarezP|?o=N<L(o|E01607B2sZ_iXF>eeNaZh)R3
z6Emv}>niv}4Z?ynj@4O5-06@Jlv$HH$pd*XICV<Q#WZ&#5g&#a!)gJQX}OSu`<c@N
zfKV{@6IApS8*gbSN0K1CkT3AAG~_wD0eYRn*DI{O)c&glezwSc!F|ipdz`^t3V)!g
zd-z@%dOIZ7ZzbA8mz9kGHtQ-X15b1HFa*D$uW>UENYLDx5L5@V*tgv{t8vO$iH>&w
z<ToRflpZFjg;c1bwk<ihpFN*>9#AAddSsx;^B!pg701QN>k}B02G6R8K7I0a1pLoM
z-01B`gLorKUYk?9maWrbl#B6O)d8$CCl=AdDGEFwBG|deH|xIkRWaxOA_j;$Yc)Ad
z)Q7Gtt?JYqr<W8R0^MiPNTXP&bv|m@oOqq((k@tvLWWg$fS6(f=d7l&2c1YHL5K%v
z06{bV3sJmenhg5RtqH0js)9Hv!oJ`r?bXii;pWw5;;jmiw1zlyRV+m=xM4k8O%VTU
zEKlDz_o5GhISWZwO`J3R$f#Hns=Ep+fpYNJ*}hH)@SLtEX5!e&iMm~H*AFyPEizD;
z)*u>%Fy?AmWymE9;&`pv&%34IYjyXnU%9q?>tRo*?sa4Jf|RQk+krT`eh_?LbjEIc
z3p}t)5XW35ydWMPR$^aP^hU@<f5ZT{i%z}Qg`k>*2uv9z^GBtHUT3FMW97+cSnJ|B
zDVD+(T`Q)nQ(5W<GTFmMm_tWa?jwbH6~{<&b5&gwlet<u9y*ANVp42?jge36w~oj+
zpsIbaG9uteMK3cTTaa1$t{N((N>NK;y!X4oq8wcew8DF^fZ$rBiG}rp4jLMYm8wPa
zxpY^fn><0Jqg@*Y?czK~wuYd9+C2J^fURzE9-T@J1MuJxpNErsetg^-b!!LzN-cCq
zNv7bik6N|JLa_&S?8pfM`HV#VY`3O?78Qkoyb#6hib9Z!<ysI2OVA?!QdhIq_pN{1
zsvm6aWLv<7++J4O=+2h$&i(2nxDD2;Sl@34xqYKjD9TXR?1~L9!3JVrC9)fIpgHmr
zu;%y$#z|}pdI-OrLd+NO#AqJ69IZ$|3A4kcVAoAeb8n+!9-*XCyfj|<VIw1r41B*$
zsx%sJj!0!^J@%XoP2CmLIwVXB=q47V?guka?b~#}1=*#WGXh<c0OjmT28EP&ORhQ}
znqisenc;6t^QGhs0>HRyQcP4m#hY{+JI2(Wm((1(sTFcr5Vi0^e2RJYB47M<g(8b`
zQba)s9)}Uwuj?SKNF<O5XIaq@FnKtft$b&p2B@S?TKSs7iF=2lIr81Kj3#`U7|mB+
z-FL#T6oUaSWx--(0l53+=t18dmHARIsGV|AIt@mwecq^690omtBum7n+nXvXLMX;{
zCeaz{i*l}ZA;hvu4r1O!xCBj)th%>GemvdEELkM~1>8wFdA60<Y`OCe6?y%m&Z?#t
ztksGQ0A@g$zZq3QWBoW5hC$NZ;9VFa@7PXZpPhC|q&b>{nT5wki~}}o&!s^eii5f!
zC$mpL@*C4;a9dx_^mlhUi-$;yl<4mE{z^b;^|M1a#m4vz(tFF7Ff|ivOvZ*#$iZyv
zQ*h6(+?JoU6quV>5G@|C0t=zPA3b<3oXq<7TnDSp<`es^esJa{!>Mb+5ze!IfJL_B
zAMXe%u!^Ej75&wTfr06D?X5q&*ggJgaQu95^k8tffAsw2;okmdTb+|Fd1~vs7TdTb
zLw+g5?Ps|f8L1446h`4*RgJaM;tT76e9l0XC{Q<<=GE@>8xO6$-8Qp${c=G9j9z-{
zLtcB`Fs$`PUm=<m4T5<p-Wa{5AQ;${5-!@mUD1~AYXiFcO=tu-SjuX6TUd~!cbkg_
zU(j3B5f-?7)AszTr~kTGPAA)og79*qV!N#R_(idzu|!sj(v65y99(<f|LFeTR$qjF
zJE%>zlun>ueAkJd9-p~~=aYW?fo<P#w>kEoHvaDPF%s>LjiY&fh)5(ug3WY>vOl4K
zv|p={VqD+yLWy_n{Di^rji`?4M@rtoN&8t|gqAkGNFtLmsy4uVU<bJc+Lmz#zv!~<
zZ}dZVtnLuOhl);03Zb}lt|>R=^5?d4N$BKl#dp4YZA49W(l6+<H-1fo7T>)n<df7`
zFyYm%AAFj;jY{p$BSLQ^Hg6>Igbx+O@|m*Cr_#t+a@{~oZYckpTpzGBek*?13F4nk
zr2dag{bgiox@F?o+ay%~N2>mdN!9he?(G1Hk;3e9yEhBF;U|gVw=Jjtk;ADR{<5kN
zI+2?2|B=N1BZ>b<68|@r#G7{e|H$H*JhQds`>CWr@;|?dKaJLN=+dX*pZ+oV9PJB6
zvOk(sb)hr&%N`Vx9P=|C5l!zzEGd@@FGuCQ*U0Y;zv5vTj;dOcrRio(<<KSu8Vo_A
zwR<w!5Wcm}ha3_(wQkalYfpyjK2+QH`T6EP^R)^y%U#ja%89rQ=}t^a&gbQ}tc~sQ
zsr$pvitD-FtKA3!)r!t=JsY1!!4>s#^*(ed^aZG?Xs7EUIUP0%13y#Oc}{*FnG?Mx
z*=0H~hb!V!Fe}RYo+~Q`42L*x$BhWFQJ#J(pI`rV66A%GA^zWKUQ}{0-v0i_+nuJ+
z@k3?Oqxr@@Vgq4HpFKa`-^n6BEPS~NM$98X1AQAz?VNc4f6Q4|fB)|NN804K;=6A|
z57-BZHU$EPcx;$dwe}WmQ+(NS#{9hA&17um6L;57I5vKgq;_kd)$3)y#;^CXw#96T
zBX#WxlN76D9FdVCwHOipUrQI#|Jt;Y<dvP@^G(kemSsaUiAgzPLZg$c^vFj6d!3<8
zEh9wQzD-xw_SlIeYD0bedRt$U*2*i{Y_2$thz{NCMWgz)zQ;cqDl`3y-Cg$HpRhWQ
z9<=tJzxZ?3ZY6n@|LacY`Y~;Fvg7AjJQ6bZ{rO*SXYDVZA3ohZ&Ti{N?BkH@LGj63
zt@TiiMOxCbS;>=!x{Iue0NxoAPc=K>STh|cq^&JqVWsjs0t}OwVNo(oI!;HHXRO$K
zY0L$NU!WNkQg@lQnly7lpaf@;3We&mc_}|nLQVi<2h+8Zt2J}Zq9EGk_Ij`k6)SE#
zxDV0<t0c9Fj4U4VS%PjxYCSV-I}X0H#SA}MlK2Ei`^9Q9@pa==)er=|-}mXVps8x6
zp<BXLAE4GpT6rF=a?#@%A+zKWLarK?pv;AvJ0l@m_}pAwc5-L;x&kx7nTl0@w3!x&
z`<$(vSl|&I&14(r-oIg9MnGN{RmHWckSc^2x+u^B!O{iB-QF#bcCEJ^pRy<8?2Uf3
z4>vsdHd&K2qvA$(vS#C4<`QNnE~^eEv)l98`HB{lAK0VEUt5;^92p8xMA}zTcrsaB
zloTRW&UCqIZK;HI6G3pfo(;yZF6U~6WRC3M@qRZdVl^otCLz|(AWGL8?8Jt~bt+_{
z<+Wlp=V<@f&F!=p$hqd!*H3Tvw{QQR7Z08t9q&GQlHG<LdsgeOPoD2SZv2E+>Ibk1
z2Shgi^fsm>y$D+5YWC^vRoyG{dfB^|UN*z>Q?~4;d0NiOYUg)%@7}%rd#{8%EoTQ6
z>q@H;pj8CxA3Io64k$v-qR_a2S@<-xT$0EA;QuP=e_agfdh+Srq-XN*;8k%oD94}P
z{=@Fx-u}_i;OqTAf0llNTbNGWi0*ecAMNiQ?jPID81+u;mcRj8CbzIvMi~6*E+!iN
z-qAPpwx*M8BN=MD-|uT;g-WTG*JZcfvhlcsY>y9Q43h2F*;1t_$qcr>GQVqF$)dY<
zxpB7jwAmbc_gmI}+G;G)ciL~!J31#@*BEVdasABWf{c6x>%@X{`%yN1vJuq^{a*GO
zj=HU#><g!E6<zr$ajWiRTWgDcOK)_`2-o9PXP0EX@oKcp?5Zy2#(PIjbQHQ5>*h6P
z2n}9cqWA9F_rWNV2L?cH!2A3j)|dU*ZT;wG-F-1UPyM3@U$~JwV%bvr&K)$@X$cMB
zgFbS*+FS1&@2xKVs-JExPPaNZ>(9jD;k|Ynyp?A<MW>)#O|uh|+4->bdF}VT)A)(k
z>fd!Bc3C7Kr6w4XUu9IDSj*R_urQS+s_Ni5Cwctqim+82avND%klC!3`Q^l{r4<Dk
zlIAA)R8nSf&5-!-p^_;L8#*-56Gozg%|@jr-k((?0@M)Hi#+yhV@f9VdM8dB3%Z&C
z2Dz<B(ig9gdR<hK!)J{o=t)(*q8bP_|6K5I;Cb2E;PSgReaT#XZkT~|nYsvDW`07r
zmZN3U6R25NJDE3AcYOS!T(V4oy6H|+FIjU3$$Ar`{)0A!Jh^dWyq5^~J`r0^K>>F=
zBu(auo{N&TqDY1e&yDka^!^Qwt7}>^D^fRT+Nv~=Z1S~kHMewfL)SmI-izjg=^Z<*
z#N&N!JV$TWF;^d}8BOsf@z>=&uE7nC^}di5wB5T#l{;mh4354!c=34mc;EH$vrqjR
z@7q7x_kQ=ghu!R+`+uEI(jNY2&8=Oahj_y~Hs1J$x4$;~ZMcsAGcG2}yp58+Pak~r
zXuZknyBU4<<AWnQCAK>KvL2ik%ge$|;@$q;kFs9o{^Q=vKYq(UI&b;*(B_|B?mjy{
zIR3L6%0FcHA8vR=(w*BU(L?+HdA$GZ@&4l%hX;F@gge=$PImfEP~>%c>u~>@{bw)T
zjo)o*el=}x_&JSaMX?fDP2PEVQP|oEMsQ<QZT9)4YxI^n@~q95hX<AjuFXRc6Qi0%
zi&1T5xr{x5CNkTRcEeJF_01-#jUJ`PbTtUO<O;AWB2r_zdY-i8m;%mRjHM!Hrl1)4
z0+`FvN@YA9xGxsmX-M*}my4?Hcasg<^#dM8S*ijLuB)DoYZqIs&#w|MZ`b!YVYh2G
z5el%i1|=8_p+ep=pZT%CKT1k*QSsT&_JzcU@H7~=DT{SDHlB|?F`<hEYX&^`2JuS_
zK7BQ_+7Z4&Q8=y8DCt$D7&uY2E(+amzm{g`><I;>3Xx^SLUHvc@erKypw;EH+}*7>
zds)6qSa^@dCvQMi)65F%Ud@0V<=>V0GoIzH$9pe&U!@iH%lU`_CHLQpZH@Ol>gV;`
zgBXxmLiy=4qHBV^8v91_`4hlWG8dqb1YaW8&+-x`j<3m~Cdcx_La4>1LeK^*05SPF
zQ+jo$f!+J^w3|J`|G9Vf%TvDOzWXz4tFb<3NF93A?3Gbz7QnR8YDZa7r{(!M$!~?H
zNCW`eF`9VdNs%!tyZ7ksQ$E`vc7e>blmui(xf^zzhtKoqkK*_;-`J%s3faZSFZOz0
zAyI^rH+K4`6#<+nu9KA+dIWrKoH1T?2`#=7UL&FgJhn7?EuUoZle_|`PR{rj*89~Q
zkSY>ih#lm$c*ub(B2PtSm|8v>)LZ=`1$Wd%j1v1|flQUZII|R+>--$p*@`7Zq}kpn
zD&C9bsGohJ!!?zDv6y8M@zVxB{@4kzVkDR^$E^7YBf8LC2C6;7;Xrx1D*B*TsTMt_
zZ_hm`NeaZtfTyQ0@$eD0hd88$K+;Z^pnOP2T=IqyaMtkJ6DNSv1^ku8Sdh2(gZmBF
zpmp_pb%d=UkB$-%rlql>TAqtM_6&sZ*9}f&`ma4u+J^8*YZr27E*oQ3Ed$YRXhp~u
zf`HR1tRUein}^ef{Wq-RAJSW<<Iw&jd%gGKrCS3J?td9!D|8e9nP_oYJ<a{lbps3(
zVfBiI6S4-j($Bsw#J-xAV(c{_91OwX>2(MW1_jZ+Lad~;K8!Akd@ir%Z&DLADSp*)
z-);$7bPy<(oX_H7;iTvHK-o5ev9%BROog_X-3e$uI-Y(Mv3+4-&u}<MVQ`cuhT)eX
zaR>Ou2{>|-`>HG0uhH2+!Mt$$pNyT%e9$Z;VEQvCR8wYCI_Nix++>Sz@T`Ccv&9vS
zbC91V^=08W4$%j6Qo@|g6=CogeIFw$<(MJn3?OWl5$Z*>{$yGJ0Jg#e)DvtGnCj8U
z623&b+;-FO{Q1*>a06){hRdxyd;Kh)#S14{x%`;P2cE!<GpE>~Gp{Q0E&)}u0{J&{
z@{K@(Mv8;5Q#=QP4rCFhd)-HJT2O_dXM;dA@u{Yrk)fD-p69i<P(V3}70ESCov951
zlgn84%tv<(C_s-*x@8IxwrBZ5q)~u!WT8K)YEYb?Ol@{lb#)uKLsCEwTa>syRe=i6
zg%eeOLysntE8BIlb{HYW=L%q40t(VVn9|BIh0r%>A%jIJW`bPky9USBr8&{5G$`){
zSP$U>x~-EL$}Im~a84zxrpx`bD9*0DFj+7_Sjc%9i?RCOqnNPHZ3N)fsJWyHP7DfD
zCG=ZNRy$?$l?Q8}iYaSB>0+^j0b~@%HP}J}3d7(y0Af;DQ8AX3TApGFQTK_f6n#x~
zM6SC`@erV7$fvmvEoZG<lVDAS4myn(Te_X~IM$k5IbMpOZhWh&Fh5Oi_{3`j8cMx)
z7b;?OjIS6`0e|ilb=oC7a1XK4XRD<G#%Ld$TKT)~J!qIq)zR};5eIle#=4QIZcg3{
zL>L1$B0z;JVUNPJkmx1?X4JCYMk%O=T@9OU_>wM*?C9%*7ul2NdtdKA9wNH~0c?I4
z!$I6sP7FAShyBep_2`um630Ev+J`TWI&v`TVY7yGn~eqJEgUg1q-HS&+-3m1`ao1o
zYi8h^+0b^joqbi3CV(j7PRhB><Ztp+1q)A{P```2$m3A@4oDVBKmdyqFN_{%qEN>S
zG|}!sMuy<b2^137u_}1e2uY0xlMb|f)cQFg#?vUD+pCC>Y41}AD-Rga3O%b8Mzc=R
zIOrIdROgbOLB4Wm#3E^5L4#7Iw>VRVLajgdx+0h9yoiWjVS;M^DdA#d@l!3(_m~06
z)FAI*R!w0j7?hKWcR{A}e3%sYBxnokpA6We`AWcx<opXps5qymg0ME1V}zm#xKmLV
zgqmG)Um`kNa*U0W1QK^n1jQzrwZx~-a_YGmls>GXD(FZ4I0djCw27%Z>Mj%kO^A+j
zh;zYx<jQul?L^qL4v+*|EG}C+6+QN4@hR%@8%m;bqTvD%v;@_3$}Me6%U=nDLzrQi
zZEtg6X^XrP7J3n}PDdQpPE8)KCT`QZK^%H_XgAoPRG!PgssNlOxH@bU7ohqoUen5C
zvJsSp=@jU;OB9kDO*&+zLeIM)-O|Oq)s0qANy-KQ(8}#@y{qoBa&xVqYRWtX<fhkB
zvtG_po1H52max>h4{)8@>Sv!<S_1EW2Lje=$@q~SW_T6X6}=pUV}yu7Blrqq5Y$7{
z1GWjpI2Jsi6Nq{XZI1A5Gj9j2Pc)V+HNs#cW6Jv3SEjTIx`U{$ZX|))YDaolZ~|p$
z(H!@RDWO-?n$NS*q{wGI#lHtE-DIqp21#3i3%ad|Wx5q5rO3`+IDWXWAauC6bV@MK
z;X~AN@2DnYy%$tF$-fZaOzw2ZzZEmtT%JB!j#5<xM~l^{%qKR-p`%d6iv<*5B#etf
ziN5Uw(wrvc&Nfsx!YY>|&uZU^j~_2!VuFr^6H%{=_*2D!=!cT7J^J5)i6tK&oi*0z
ze}{7_d*5@)P3EK!=S}1?HZ7*Bn5PhYmjVALQB+6ERj?^O{G_{qA|l^q#HwVH%zhJd
zszy|+F}<n+)opx<fVvSN)yeAODB;0Aml)_kv5dFx4s`Vlhy=r*x9<&DFeZ6k(eIH4
z)c$-WX5(XLB6Ygi$qR;`-|IE^2NJX1{0fo662;HLhh%N}2^^1p;R71ie(pw#-G&4%
zV<%-V^92<3Z$5F;UriLtTX%?AgyZbL{`dbAG9~p!*>+&2lsKi^<6LI4F9~41G$b+C
z17y=o%fCscUqg_3jlZA$$<iOI2vy&RTveey`qPtc_VkMX`Mf;GBUg-$oEr7&dF36K
zV{v!YE6BxwFdYO(t=WSR;b{a&S2qNauyw?Un~E*!1fDvV?S(2bS7taXF?GFhVdje>
z5fm``C;9YroWD!!C&FfgubE%g19?({O<!RvSB8SOKK~SYMi@^ZBd>+MJaD>(DVp>A
zypVL<EfDgm9N!X8)qAm<5-5x80`l715%00v;U~ywcsHZ`Emk98H4NoVJNRMPf6IXr
z_h=wL#|O`GIJf0VhOiW}JZrlVT=_u!yc*Zrc1fTpmD5gtic^8*lP?Wg2^6j#+&;VC
zSN=Ml?})|8C?8kn=emiu)+{p5Q6wI?d>JKF3$vO0dDH+ZynZ-4JgL`Bzj78gvTjuh
z!q{7%1K1ed^CwOMuqTfOijq2j3QNMYvlWE)05W2Yep%8*vt(A6`MIuXIk-!A8lE)o
zc&D){nnl<i%5ER80?9JgJ<YtPH5hyvJl=m9DMhnL4V$_VpjVB@&+B|a5H({Q_q?B*
z=HNI#-!%3E_l4IDzk5VE1)o~nZ++{}HCfj_714^69#OTvP*lOrPp@q<VsB`MdPS2>
zl&zX*=OKyA4WkTh-e5yVL|<5H#OEvBN#2qOfo>p6SzE9}w_O+cRa{ol5EUx{2Ge}n
zwFV@#v=vZ1%kj?H_L)0JiiK^keCq}`o$5`D;}86;JF9J!jo4kIEy;D@4g%2lm83dE
zFnPm2#P9iR=MNZ!&xYcq)(?~l#M0dad(_z}6=fNfGtEGA!e>!AH40~Xm?x-{#Uim(
z@ziav<l<#!kR?RF!Qf2>+0$d`47@yuyb<e*R8;wDVV1}Q@k3HW6|g$FCFg*9U*Dtt
zkdN6BK^rH|S@|;Kd1}5nj(B=aApMXF)lkFfWeCS3K@olQC`{|XUvp|r^EeDO52AG^
zg(Ps|lu?`wNXETM38T1Po%)QLut7pV(rkIP{peO9kCXRM%OLcnf(JUyhL0%`$)ja@
z%^)E@SbMH5eQRIxT9fwxXu;}hBqvm(W$6$%2QzCI{que{yk+3@utw^gY<dO9_ORoj
z)Pv2V1In|R(?u5o4XPp@HX*UoeNoiOhOjCc{YbwB7zV(qmr>1MSLL`iy!|P8OOz`n
z@}>x3$an>U77zZ99{P|;np$)1dc=Sx_FX(rz=2H${2yWR2))G5ZuN*0lA{!l1-77k
ztSC-<Rt)|V_a$Q{vheb37%#kjIUC}z8oK9SxhZ5B=a9(L>s5MMujO>O@R}{DUc2Gq
zrx^3=!am(fQk_wwl)rD^BvKW@;bq^qw=?ZNYg5zv!b<6|er}%>=bIJLS&UTPR6y&S
zE1><>!+r*ai9E_H*PXa7e8Z7(a{Za{UHg`eThHIs)4O_3{n3B-*k-4{!3IcF0-RNf
zfNL?P%_~tbeUps{4Nhd?Kz~ti-sCP-+SU!kGgFQ>S&zPKnE3`lDVEwwg(%IJ3Q@Z0
zoV9d4*e;Nedg}W$9>yhUuZXoF_3-rfwtqRf@^|!|xZev9Va;-lTD-$G+iyK*`lSS0
zFQYWaYF%G|uPpW%z<8T#7O6<JLN*v&?lHxcCUCH=To!?TaL8M|iFL^7W7Z+ph`h}w
zhLJmB%~ljzh6lP=2TV<wQT!47T<`9PO7#K>iR?2IE4eyat&{j?Y53uT!94yk(S%?}
z%d>LOuJ3H-+qktU(-(Pn5u-2QBJ^rtv=7D`w-ZwR7TyWv_mDcoLKk`SSI5UMvgHD~
zjtjCyonBPcD`WKIQqZe{C=~~E7x|g7lFcX8)d$9N(F#pvYh_c*{Kc)I0({%yLRdAN
zRk`H!{nU=78Lga<NS)<LOK!}*&$V!(i496FcY?1hG+Z&pGp7)@^C;T%41u?@leE!w
z^7;Gv(Sv0*z#XYpz(j&50Z_hD@}%c;q1F;T{<31wt8m96!%{<z>M(0lOJeY%LZrU#
zD0Kwy;j4@B&?mIEX)djnh!08zF5_lSxg(REI0^OUPG6>}Hp=cruO3xUNBM?C)5nO9
zn`EL!pNoA+dTG%P*rje`V#B<eM0#Cn${8NdmGuq`Ly+)73VEee^CupcT6h^E4*MGt
z+;_x*(O8v?kOHrrP7E&Nahabl@@c<*eeUGfb@y*|IJfTnZmhb0>`JpOt-I~RCl;DN
z>1&x@4`_8Coz?i75F2E{t!zu%&9Q9aMSdxZoVV68D59buNAS*_UDuIXDB>sttHqr=
zdWc_;`b*7^g?~9d$H3)ZGiUk_zv}g}7f*Kg_P=`m<njLDj?-P;8%CN%C9JZpIiJOo
zue~(=BxDOsPIG6}TeyfP*%3{se!suPZ^PfkcuTiz*6V%dR@eIXU|HD<2mV)TS6l0M
zZ>gs@bWz~oCzJBrtsR6;i_>a_)j$;r#+@X_P3V(iXafWUg>ZfpZ!8vTVKk-~h-Xb5
zBJReOa0`Waw&?>%Ojk%Dj}$L#>A6T?p=0R#)uv9lg<4z?^*k+OZWJBm_9l7Q3HbBF
zWB0Hz1<Nwy{&WN44zzMvTS<j&b(`N3+=r5em@k(oU&dg0WD|np#E%g}P`dA0z|(4Z
z)0#tE29!jnMKSZDtuK%yPm1&0ozC)btM$V3+jp%&=C1{K6WxPt^*iKK@;(Vn*`i)U
zQ&B;WgZ~0l3vQN2F(s2*B|T1q+fapH#liyOcIH0L77_zAJ7B#N*p7LTGX?n0ovrwb
zw%lH9>~%{|(Pa~;2gI9|O`^v!-fpvxK;bKy7iVt0E_~U94y7GMI;4BXE4$=NtxlL&
zHC7y=PBCwF%HUc2Jmz17YKjRBwZxFKmlsZ_od{dJz6^0}eI1<jJg?C#h=gU))hZ{=
ze??+<U#Vd(74Oi%?!i%EWmZye096dRfg;R4M0n}uG07y#oeaSBAFt`8&Oj_ASZ)$W
zg<H9hy^qsd1ljsDK#+OTUony)4k^gi?}i|=#e&n)O=9Tk?b<6VZq)&tg5Gruopi>o
zE-N*2l4U0M*cgg>E!1K4)ogUJsAg)t1VUTluGB;{nvhv|#K6J06z9ZcvYh5cHP_I<
z+F17ep-)y<WI3a-F+Z&qqV?k`HHCQx6O=qREDND}Oma&fi`TlZFdB!}h$oAZlIgUV
z8L{3;U<&&J|N5@2V1cGE1V0i6w}yEcS8&n13V90IzKlnduaMv`RkJfE`dJaBD50&0
zA7wOIp?pXtVzhRzC^bBo0IpJkX%D$ox<!gwnZ2W>M9JnGAPu%s(D>s~9$nL2SVN)<
zPNg9--!mrP)V}OXH?&c_!rZFmwGl@cycQFdD)p6mJe6DiTkFt6%Azo(aw4gS9D9Wl
ziQI5!P!x$cgh~(Qb!(fO9$7DFAaK$8evZ?QI-PJj*Z7rkl)0rX_Fp9lF_DlE-ewck
zq~2zFTh4ln4f6TDh1G^-fa<R5JjgEv1hnp@-D&nA2&YD~DxCQ1!2jxnQ{(Qfj;!e2
z1HT;X2tNtG`R$aNx_LR!x<%MeavG{r7pVitKG4$@dPVS=ie4f6gz9V4=yirs*EDAQ
zD`2_-5}I`znozHXem~<eh=h#rA=7FMhVa^!ogH8e);rFQsnntXAZP=rz-6HazDCZ(
zB~!ci^x(OmP8XA!doiWe0lqS8g&JSH%k|J0n(VcrtX?9t(J1*rFT9}atIsiA38E&i
ztq*lcCDw1enR0JgYHDh*RYhThwnuGMO;Z@4VGgH-unPYS#wcYJgpdWMPN>a=lGv9A
zZ0e%{ejoVX2dlD9osj135f9eD{!DIiE78K`5@Mq;YFOp%$b%OGm6n=GEmXW%6iK3r
zVx7p%<HP`%=8{<L6(a#_Y|d9QCBX|Rr146J#hR#6No#E-aM`(TElK@+v=&_r)j^CW
zMh{KhMqyF&%%X;NDX6z+C@(Z^)AD|u&M{tZMvu|0ucR+q?!s)<U&E1;z>uaC_?C?c
z65550LRTQOs12179oG;?yqQBDLvT?!nTh3t*P^|leCn{Dy}%*iUuA}wW?)D0@1b^m
zC~feCTZaX~5!J8zY6~mK{ir?=?NsjD-!fi4O%n0Lq-}dwMvV&FMxZ5(>Og1I5=WZN
zAOP`Mw*I@UBZd=1T9jvJR6C1BtM!d%JT%E;PIF4S6H_<1fWK?s;(t3n+xz62^ALCH
zPd)RdQRK5OeuHV-N8k6f3nNx?7CI+*KDc1!YDPvUZvwySA+7P1OU=XzjDXJGRS<Yq
zH`qsGh!Cn5oFWYx#{-d!ga7>Ty1Ij!RLpXCJ&s?#et<sd?1jr3H#$N(kz4)<^z5uj
zboNlCPph>HfrLJMp;`09tOS_AY(t+|I&xkD6N1(~<xwRmI8djeed`s@bf{gk{YZ|$
z*RQ=bg6D>?h)EVz0gy9yI$en?^8$IE+$4(K3TK*|ZtKCaP_G8N95+WNOf3#xX9ciK
zPgQ79(BkEY*I3o`gnzk5C(1QG&1YiVqN@9Ku~1p=v^271i*9NBvuC0v`fj+R5As)D
z5KCell;<la*`4Vi%XU!!Y$^ydQjL~pI{X}ovJQRL)N<ac89Hn0<Angs;$({K3?5V}
z%T9<v%eoCgqn!jf<8IsjWFS8e@Rw3{A1vcDOcRUzX<@Lsxp0KLW#p9AncM?_kl7Xf
zg8RTgG6YdCdwKXIimB|+UYE`a<udWQ+lK{KiqO;`YU<i|Z2Z}Lz+x9z3Y6x?>y(Dg
zC$<Tk+*CfjkArTqt64t9tni>M-cUsfIfa@U7xD_D?$?nRvr{O(9(7kOC6Co&C*U3k
zUEd(be<<dhny}yKlbrqgVVtOb$qXf`7qW$;-l#mCN*>dZU;LwpgLdn;`tr=ZY>Vlr
zp*OzkZ|%TH?hjYv^j=n))|4v6=9&E=dxq`ugA<&B)Zh3YE+|f|>+iql|9;4J=Vf-p
z8tQEc7;o>oZU2M&{N8o{%dWeYz2%{Qng3n)5ge1pyT`kq?;h<BoB(Q$<h4V5OoE+e
z)$eLC>HjOO6Spch{O-o&+vkU0?;j4nJbeE0Mf0igb$e$mwI<38MFu=_r3eN*_SDd6
z@(n<DO{@M#jfrNMZy1xO&mZq!_f&Mwt&a(z1(f&tw4CL@9C)EfA>f`~AzB?;u+q}5
zhjYmhxB6#ZE>HK54-fW^2D^_RA2y$Q)*KYO&@Kw<q#cQVR>YYE6a`cp$-N55UoRGf
z{w!9c6JLOUT6K?Y`&$w=kEBdv3vT7DsDY9NqJ;bW<nG;jzx<fMB|rG$>G7tg&Vc{B
z>B4h?)$<jy?leX2o~KI>DZuXX*>w3YCRR3!S$RsanCTL^aFTV$P19Z5LMB~({i4ij
zP+B802pVDmwB(?swXlG<92yCun|d`$RflDF)&IrDM2_Q4WAcALfBN~s{@{<#KOY<)
zJl%i(@;E&8;O<+FA2{~J(}PMY*)S{#*O)Z00T&)b>2KBawDe*~rSiBOOU+!t9D59e
z0J=1wd(mjSVEwehwupfYbygc@TD9Er;BMXdX=8G@e{{TicsvMWbL5|5yl7K%2WN(u
zLwvu`FN}wlZ6R)4&U%r<-P=&BRXO${1@6917sDlc6}P1=p5-MDtH0YiIeN0c|6=f`
zm-{dG*PeRxwsjJU;ippSG*JLB^IUj)I7})mPR^(rqyVL4ZKf6|XF0rZ=S8TRhm<F1
zzN~?`x6`-~ssFQ{$<KC=55CzSY&e?VB4p|D*K$6rm~JzdXP#d=>-H1NA+1-Zadsk>
z(gLxncqdsQH)N2reDp~UVcVxOcB4Aoxhju;opiJ5mHemXe^@b(f7G+;@@$g7a?hQX
z=YO^0*L>vG-6<<|XH}d=j<<EZ|JH+Q^qoMyL_V`6g{sN7C7s!7)^=_(p_BT$Tk>Ed
zwHn+q5Hv(SocXF8Yq$T_dHfoy1tReA!QqYP@oOti$Bqm@Od=2McLHb4+&S>FE&#Sg
z3%od8ou6}P{^5t^^<%RCZ1?jg?znt*^wsX+{@}&I<K~#ODev4C9g~-%r{HoOcZ25h
z;~~%oX!wlv+&++8A(R(T*c2ItwYwXv=e{$pXR9|{=0YWUa#V~~1cD$~y|!~;FIkJE
z*LwTF_oMTkL-P3Gh-32X=#RSxPtvEZJs0%m+I8}@dL#H*fJNzhFTfDb4%Mlpx0gue
z8J9J;%$+-4u^e*fhtw=(jOBr!Z%E!Y0Jazoj-Eepq7NG8lie?m_?^8T6MTBTX+H0P
zz0dxhyMwLQV=%;B1Sm)klkOhbV>K+?`m34LH-shPB+t2Kb!=FP3QzY-E`;}58P>Ps
zgJ%Z=a7@N4qnwo+n|lGLF%ALTAeNaF(YO!1myzpo60nKfKC@BsTdGFojQD}AmhAcS
zr$|U%(#c={j05zx&wp~TxBtxP)?e@cIcx9lt6lXD1MEpTA}YzNLIWP+Ri>iktarnH
ze0z3F3|jTiD@%`_?CyO%I6C<9*}=0f2g2L(P6L%@sapgBc0wO@rO7i#6Tl53Af@xm
zzYUOBC)Iq^`Mm7cxS{U^G!j`akXb4f;oDAID$h_U-m~n|9{e9YKG69k70SKm&%buc
z_2cJHcMqQ3)M#hMK*d0X&rhjdl?4&m#gtffqu+g64b%d)zAT$4sW>J|S+ywLvHXj#
zlk3Oi@&2>tsrU#_ZLjLZwv!UuPTQ)QV=^~U!f>CvZjPRR6<^@>d*{WUkH2yU4M(Mo
zDfTIJ#kgbRLbIKtBc)jnHjIm0@gw6F4C5&$Qq0E`P`SfLhu3@p5ANQ*E3&d#D7K+Y
zOj^4o&G+Q55N1}i4oSRGBzcM5*pgLHCd(A`2yN0*{}&tZFRxjG$s#<j);DH6*ysOh
zOYmJ|^5XE|8^Cz3KlN58eR$AmwO*SwT0(b<y++!Z8?9*tT)z5WY)qd2=btw|_0BQD
zgPTU=UwoZB+dn?syXL94j>)W8E|_z>EMnHmXn}x@tp+;BztougtDilCz30#NULGFq
zKRb4+%D2zJgDLjT{kzv5@9LYG=5NaBY8rXK%31G>;OALL!?#lhDPV@d%!HGee#}EW
zN`0^7$p}*T-+fFrpAGNU+ju-|vhBOVfjYUevY?;aulb9Q$yd*x?tjpjfQ2>k9qGP@
z>GP#TDnCcw%|Gn`z13M_ac#GQp6&0!TW}OPjN76GceWp7ZE2)q@yh&7v}FQ^T)l?;
z8gZu1t7`JkGA7ptppIU?*gxET{Pf^iVg$Z@o$R`0@v2aS1)&F?6iO+D#M}iyGbP{2
z?JXv=)GH@2awk7#(LetqPE`7PkID5mk4Bva-|ik94-WT_UOqYYPu;&+U_r5DNtg`m
zJ7Yl62$h<6w->9~0M`eSqkcOxKGuJ_y~Du8;K{+$gXXxrL!Lyz7PpJy5Q^eK%g8K>
zzgTv51l=s@`}6|fsq4q9pB?9~3V?wZqhidGvnt^J1Jw0g4e}X-GYUe76nzQU(1}%L
zz{6PfZz@k<8}Gh6{%Uai{Of&_CGXff;$d8W77plK$e}|7MZx+mm}rMFH0|pjs+-@$
zA?=pOi|25_J$e4+(G7wZ$TSn*vH`1W!2f4<@f_|u%V&UWo}(ALd+6t%ULG9o4}u&t
z&$*AEb|sJ%#8w^G=O8c`Q2WBmnKblt@RallgWVSggD(!A?89I+`qC+46ypJ$VN7X=
z+^@`$q5IK2D6mW-#F<;N`=3r$A05Hj{mt%^gU1KQe}?dW{><rtKV%QGJK6n*?*Dvr
zSN@L<iB$5KDPPWB=aX{Gq7aJ@p&nx@$l*bPQAc#*ynGFBZQF949%Nvt>}3CT{r}!R
z69>=Ocg)7~Cy(uej@};N^0mkHTRw->XP5pK#Qr%|yb?t@!^iM_*MG~qmsRvJyHB3@
zj~Tcba_b)%3~L`H^J!IK8$ZN#-faN_@c)#Kzjv;|%Vz^&2pR0{4)*pBj}N{$*yFby
z515AFzb4uvfHBSXc8Q5D@Sfm_8w-E)bjo_5;7V7iFU6E8$7Hn9ukQ&}es%uT@cziF
zdZWA-b)atSske4d9cD%e!#K|khQerxLa(16Jl+$jKG^@y7YB#joY<KUKZ$mwdX9A>
zi#PKU+BRx<p(5$#gW8SeMBl3W$usWFuEmRLg`&OidMD5J;~9#B`x@5+7}~vI*H_^E
zbyXHi$;wlRuho3M5D-7NNKTP12Iw$^kM(e(Y;Ke4K^P9YndOsMe5lKCv#}s_5;(v!
zp6ZCv<4|)3L^Uo)*_M!J8Z$%8&r#3vIg3E~;!{vtyh%dXY?%<-)ww&#5t|Wk8-=Ke
z!tIO?J^#|Fyz1)L<2sC0S7GbRzZJ-=0x?cLA*%c=Ls7znT_AKZ%Pxoi@qOIjk3&l<
z;?2zKcgn@^KZXpSApfAQ1dNH)l`OK5c9U;nJu}3vdRh&`zb+KKfMK^d364PnYbiO4
zzB+g;=idI|(cp{chl6KMIPt(cdh258W*1~|45=Lgj4es2PM_+DR!_8m#yh_~c;;U4
z<O!1)+-_Y?=bmFe&SMMarVpGE@Rb3#0+i$kM9OMn;9cX?)Ru-xv%}^*i^l3Y^8DK)
zw<`zt_Flf@dq-}iu_G)!4VdBgNINK;q1l(8+sZ^IPmS9nB6%HMl+G@S@JN$>9Uko+
z9=teC1R3Pmp-Q23|FvC-!m@_}^ix5^P=GqQN(=IbHa0!1j$!tgxe-p!&d(d&YDqzU
zvjCxPwKn}K_2`>RL(=piiF5@z97ASR&ILkfN+4JqPoqgmOd}zeK#e2_8Ol+)Y`LR+
zEF_(r6TsLkU~Kx-wfQ7p!ZFp4iW~NoFxhPoW*0Zg8r*zH_WKX(3GwMqs?>S)k;&iF
zO2<%hO2$4AXpjRsrSdRO2KU5Y@9p3J>*&eV^SgJi-jvm3@^Ll4`1qq|zuWuc<G<n*
zJf@9Z%rA;53p@>?HEmT0fc}b^2{plX@BfN_(_Z0lYrhm#n<n~c;U;n+M@(nSy1D-p
zNgwiksh#e|lTuCFV@?Idk`E7E|M4%6_79)!KE=Q-R;L9%^QFqM4{Fcn&;F2w;PN~z
zfO6M-wk+RK)*;_j+d-z)!DDyl-FqJwck}V1-r2+7{jT@%gVT?Cj~;&VN$+>}^N;S0
z9^L!hN8_=(?T<*LddEbgP2JupzBPBXY9>~!D^DuorD9PL1(|8M*5nsYo`3rj`|1u|
zC*M{RfoTyw+p{=1ERT>c^|go3pCA7m??w*J4PVK(rK5*?HjUkfe9_U~SNo4&KG|=)
zLO~D^M!oKB##a@;!!F?kfDcVN#9yHS{4YU!(su~Ca_-yn8_(IHPY-B6z-~NZ=iDi^
zDBZul0QX?_CsZE8d6BhO+ekRM1aPVCA=xzn5(yo&uRe}+=jNzxj|TRdBcP9YtOz-U
zR<rW2t0F1ogv2IdmZCtey=Cxh|Jz^WO>KdM>Ljb>=y?ByEY6Yno>*rxR>C^0f%c?)
zRb;pG+uiK;>1`HK-#)wT+j;)^ANTkCp}ZQP-(e+eul+FEzW4D-zu*7P*85Sqk2&|D
zl2N}5j}oun^t@VWmLsGJu(g@qsb!N{bo%&Gq)>gNr(Jcnjz1sm1*1xmV~?Br<ul1<
z<Ivsv_}=|b9zOcrqmMticmE^ze;(X-zkUUue<G^9o(c+IprJ8o>Wq*O_{-q-;2S;-
zI0T;kq3_R`XODR*-2A{X<@cS3#F{chn=b4>1<RMLr5_ZJNZfOyjam@7V!rWO&N6pa
z&xyE%Zj8_oxsFEHzbh*7R#$o)nikC%MuSj)3e`@Yfc}3Ac_eHu4SXl!Hj-Hm#qQSR
z&B|PF#Si!V%>q0E!xhmZv1tUGTWU|H0-Y?W*#yamzoyfbLwU+LBub{U^QszWPDRV-
zD0z2ACcyy|=UnF~(n)Vrt1F{EkWn9mQTMl_bXKZn^$ph)%^nB^`sA#4A*@`{ecfQf
zC^w&yxIqaXy`@=BDMu@X_*HH%>|K=@mr~B5q7eXK#0c2bsxZ@emm-qX&Q>#tPX)e8
zCt2Oc2yd1tMqRD?C{La3RSG`mmlY_b_`Ca>)!ZEUx8cCK9a<KG0nT-;lf5B(njp~m
zn5=-;k4th4B-o}T#1H`^M8L}X%fhgoZ1{(-_y7Far+@fn_sPqBFoS$cKfnAuG)$jZ
z@!a@&oIFEo#GYbiE1c9c{>7wtOC$a3>-XvNmy#rGWfd{+$1W9M2r-&S<<?qytE=C<
z-hzZ7>Os<vx4-dL)L@VSJ!zu1ta?&+A=HgyNpdXfM)AYrw{%WxKz;9!gs_2J1-tK>
zj}sUu9gAyjiSjVT0TIE80xnScK&Gk~hGDUA+r)faABewzHU^=M^;VC4P|5=cvSKAL
zVzP|{%vzS&a&fgiQpOt;yhT)J&u47qt&L!b6CT-<Mf(Pa+3BPjy$Z+8k*8!N6uC3q
z$A)%g$2{H@1ftU18%10xMKJ`R&Zkr1$5Vesin$NOS+Ui94Nt4}mC=(zmWhGyTKwgp
z`Gp;6S+};g;eZ0-&AL<-|EY3##bc}^YJ=Ho{oB8xBylM~yPsw`<HQ#GVnnFj`8{rP
zuRC<&b}@_4%wT=6u53w|v-1iIx|mGd?F+dV&HldiZ$D<T7~1ScC;MI+{3_`i2U||x
zYBU0V-^%l?2%B#;S8O`%w$pO@e7JpkcP7oqqfW2daeB49t<n7;=;i)XgnXeZE9_P1
z{P%LpPPX2<Zf$l8eZ+V6Z)ZQ^TU$R0an!F)ju%(i9zGl(LT=Cp9EAop#&J$IEl=w%
z0K>EwoyO=6U9f{SEOP}Kk<VFH^WFrAb=mN8I?#uPnKR8Mfa6^*SPwuX8<4k|_a%OX
zfZ70|?EJ!RU=+YAQ5QK}*|`pb0%I?gOC1ctawN$h=|FZp&=Se*85tJ?6(#kHv41%%
zksW^{c5%LVB~Ue5&1q;ThY0V$@B4micHNj9s|Z4lgal6LhMp1`Z0wh}Th0sk*V&ih
z_t_R7-r8|XV+)72``6Y}f=7QL-?G)sw)FGewLgUU_$>Ren>iaT`w>iuvV&194a!15
zyN11so!rJ2$!v=8&nydVxtG423qdp^vvQm3<fFTHx4OLftg75yr}+X@XMRNr*xh_S
zQG!pU(FGvmxtov)s$W3+4c~=3mGe3>Q`!QOjVbDScR@E8n4X%U1A`|!F}zwJQ0Wz)
zCviQV->v8|H*LUTpgRR?Ina<|olCLU0M$IhE`QM^QA*IEOeuZ_MYz(>nK5$V+FuaF
zA8MVUfA`$(I4{Do^q^!oo4wQ^AB7Tl6NHRWAI%lecgYz@c(2=y^(Nqs`|)q$95PHU
za)P8(Aos-9SKLb4Z-EhpMfYlaUMgm0B&#C3OflpR&N8)}y3wAszVOVzUd1?<GebSl
z4H3JT#O}qzSRHcW80e$4X^Of0#W}p)QK-XI)yRyaHP$&ixraLhNhVTV_Y^4xgdpHZ
zS7yC7?qoRf!`u+45x2B!6sDts%K0x5Kt0bBFP8Q||8|{;t?RULg0HE&E_{H_`|MqH
zT!B^DFr7%chk=#qrum}iVTF2^U^=0!tEHO2FQ_gBjXVk!B=<AOq99s6eiGkea9II&
zUCtgo#KqqB!zAG{*-)UlR?nIJ;$bmG*#+2RI&G+57O-FH#HXurvh0=M^Im%PP7kyj
zJ~cVveYeTS-H*TUa`PZ4OxK+|VUUcZC;Lq2P;?h^I^?H%AYRqPGB$nj3<FMmjvmqE
z4GKIhQ`ne+Be*BzxA;4`3FH9)AI=IyR}Y19EN1c*V2Kk=0u^(LkC{|KxawRKsd`%~
z;FM;A7}XII=bbyPp4KdHYtikdE-MzIyO%h3XIE)AopjJ?zJ=9#R=(-DTX(%f%uQiJ
zHV(-h(~bWod+QdFk$hSLpshMvX2--Oe~&S3KKkCH%f~j3E-}*IXLL7oJ{nz?OsU7v
z4`148;-(^J{^uWJ@qgZQU|*NHCLX}=WSNd|1eWtsLGw0_h^--c7|27C140dUR1i{r
z{eAAihM%>XC7)<MrCO@xlKVI`Sd{;N_WrFojx0+P#hx>Mg%?<AATSXDUXodvsLHGc
zNsx(3-iiQ|m4!}=a6~u&PsXjnBM2fhDQlTY=RtO4W12G$l5EC~WF|A|Nv6lqtA0xT
zfpdO>_V=x|_QfLt1esNHTGL(DT}60o-@Y$vuf49{@*95m#9i|V3|3;9tu4a7-W|$!
zmh0+POAH34Q_U-0$EQ}WPR+J2NqWf6E4_sZH-sBj8&&<dmF~jJXJ-qk(X(7!Se;1y
zbH`}M^{WwgI-ri7YK?oe?dWYZW&L@YG9w0z5kL1WBcoD(#iCW1P6OdWQSIlIyx2Bf
z3hx?ZBb}*XT!h%~#pQT=yB_(>yTk>;J4ijI&f#5mQ-!yFNIZtBg?JYVnzP>VZUS<;
z!i5?ONqDQQD9gDQUm1A4AB?C`3J{4_ctNcN-Fz<ZjN<`el-dAod0=!*#gcOz(4Mn=
ze4SC+_1%po>BS4qc8kHNQdnc|!;F@vkq81!lJp8%V0aBkiZtQP8~3jy4F8f-@68zC
zPR^Fo-+MLTW;grwPYBw^UHs1d8&h~kW%K0H{mHd@XN#H?6aDp1F-g7aH9l$nHvL==
z&gEbKB-HcHho89x{q;{_^WODnhHwkDl`O89LX!RtQ`yO_BZi;6#oj)7=Q?z&1i4m0
zj@Jr38R(v^H3$XBc3|9;d)2|G$~0r<)HhU)rJ4oG5YNGq(8be<+bGgR-lyL~zGxM}
zSdP;(*SS;X%&36*sKbLDMV7dL-7OX>v(|00Ffg>-N+N2Dfg{mIu+XS^cUR*-<K1H9
zpZi}}WmEyC`Sf9Iz)fq$wvbS$eu|AmN!uVQtH8(d66TUmi7dQiRiMyEUr`{$q&L`u
z!cZeaY$4^dHrKqj*<8||+}8qMf;^EjPew<XeyEB5X<U?rC5w}`ceaxZr{}t~(j@5|
zXLeNvW45TmR@wo60AkPTf-ZF}pIjcZTBickuG9b$UyfA)aw{wa;e|`IMC5F(5}+Kh
z_mVFsj@=%6Ss~l-H9YQK^>RBF{j~}VG-pJd&fzqeOlix8%n<@RR*3`Y@=85yw|tJ?
z-VhfVRXt2%s7WT<+lQ~qX{`rwgS+NKWhT6G6@f?!m`=pFw-~Q|Rp0cLO`}pbt5l|F
zhBQWS7IYx^5^FXhQA3YZBdlxdtWp&h_RO|ud2tjo2XVdfbwIz#PhaP5`~P^zr-uZr
zY<U#e7Qo2dPfz}Mbkxco-GAPay%rxhao4R(g_eCtRw77A%-qRsOl|L5DC)KxZ(S*a
zXN#T&UlrEo6@|>E{3z+O;}p@=%Ooiw1WJhNTR4@J60VlG2o;Vn4>A9*UUP~UBGloK
z%|e+UdnGveQmAbKMo;Yys+8x|TFGu#sv^ZQvxy|AH)KM!*)6WR;MkKWoss^9Uaqf9
zvyZwi_yN78dKh~Xu9CE@^}_l~*HD(E<W>=%iexb(_bW}7qC?3Fr?-Vy1Td173W6aF
ztrFW+^7H)XB*dUyM}25=Krag9>nA)6gL&$c^h6vmTt76f<|q+!c4;{q<@n9ywRwkX
z+8F44r5>`5@YkHKYbqXXy<JT5PNX64Ee<04e<kf9+sXxB(4f({ty*6R`_R)rVkzHN
zh=VFUz-{k$*4C~0;H#bA#jk$V6RTe<>%slp)!%kTmu)rh!$AKUY&!mJK5=SlulY;W
zw)ZPN!H2;fVkPbab-rsWV-14n2<y~SwC2?2;Q(sGB}HB77c64gUY{Hyv#qNidgUj@
zW4#HNgDFsAj9A?~b~mp)CReFp$qRp1B}~7BZ^WeeuEp5jg9p1oMQb746T7s#tf3{H
zZtlk?IrS&2-lbb6I#zVPR!Rp9sW8oj&wrab=8{OQzQ+Kp-FLpM#WX5?F79Z!4&7iG
zT1lkgil`~>{0~oX(`i=klG#3vXP{MjwJ;f%T3)K91uylILS=Ij>*h*!ovp0Ql`ZHY
z=`D5~bHR6;WJy*RP9alUQRqlKIE(YF0-BT;C9jgREF(li+<X;cN#r7Lb&Fo{w8k~!
zELN`OSW%z;O4mx3=J};6SrDB89XfRPOcWnLw2O2eVdN4QwxBH+#YI*1I$ks7@3(FQ
zg5WQ0{iR7DTOq6EJ!6_Bz$k-f=X`0tzEu?4pz|rEoYvZ<`cT){DvwUB%MbSH0Fip-
zv??*Uiba2=oKgQY%~~IJ>$3|QJAQ#-5ATZSR$s2Ual^i-ShC_iTrYPdc@5XN#@FAV
z$<^uP_}YT6unsQYHTu%^ZW%jPe@|;)dY8Q5%HtA20fLUi&NvBuOSYsL-zu>+FCnG(
z+w-*OLd&v>2YGdVGRbFyswHa3WyU&Zb_ze<ly-E!^3;Bytx0?ECZUcuHhrX-3FW&O
z+R5s^<@j`x-DfJmbT*mhXJRioTsqOp2y%vfFqs(F(q}g<2fCB(5uSj{YWG+odr{pV
zA+8a@6G(TMMDGWkiY4nfR<tWv4zgpFh_eIB2&>6#=KELwc6@!rh=}QGN0AI^7=zC{
z+d}kyz>R2HQPjhLle53Zynzk2TYg?k5?wPm3lLAks)s`@UZBy5yIJqi<7fBw9(VU&
zym<Da`}N+_2aoq(NGi{PWebPw$6iN>F=%K`f)0VTk@i==#^^JW;Ij`<#84`kY~&X@
zTG)>W#!G4=ev=ayvtm3|R(vfD5bfhryh5`|m7S%y6(8K1>Ix*HH6lf<FgzMgPMoN;
z^D!=*6(N_%F})6V|3IE@QvGVte5rUJJQ^2CXi$i4-WPF{R>eGoAFCFvp#w8Ow9YJq
z=!>pn*ymj*A-k2h?8=WxJkbpengs_dW^%5hXlq$*&&5}TD1LhD^E5DV<6v{dP0gp1
zIev2dp#K^_><dLEzi01a_X#4~kpFHe;0S&FxBzsf(RZbru5@!lWH5>O8>$5;`Ora}
zeSy2w#9k*Bj;xujxHr4b3iVY=*qHoGjrm^ayyXK7`R$g%F}V|)S5drrC&ZE~B7z&h
z#l$S0ZcA=;+%!l6PJkoI$AFQg1S~+Je)#5Yc6g_i?fnSZ_1+M%n8di7pzx^#Y#hpq
z(O1tUbhn(LHpmcgO_7ySj>+Mj>|_B$cola}@0-&P9j{&c9ec0SxXsI$m-xx#O<_Ux
zx%vAQv<jvKF*I=(SU{^B0xtrRFe~kb3R_rQ7|=fZ6#1!>0T*UwnrEatX;`+dnsE3C
z;Mg(<r2l9=NevTs|FXz>$wQZ}uuXLR3Jh7x_>5_4kt6bA&ER;B?|j~sr(J#8EyrCu
z08wlp0x<3N1#PeEl(ZK-VC3qWIp_A)i$AMFy6#9AqDFo$Rb$tp*ey*HC<%lj!&!`p
zJqB;bD<56jAG$99KtR90zbU*j8MLxk8;k0chrErLFk?h|BT@@tMHKE2yu-$Cig8Kk
zG{+7Fe@qKHh!>DiK)I9zl47@98`qZwnZZ1Q&ue9BEk9+r1p&Dsh=`#G>*mU{w3>V{
zf|c~cJw-MMlX<*<#A3`<ZG|L-tvP`#h4dbA<lsIT%3Y&KJ2bc(DX?6KEE^0(V=Ypv
zPHA^GdpU;MJ#j<rg_LG+ooEiU_w~;D7`72?t@Y}eDNqU7sHXH9!K$|WYRRcC>)dGE
zy9B1V+J&-+ioI~`55tEXsmOvM&D+{MN=Xw!7z-m01VK4Q_+2p6s}Q8o)~Kp$84h+0
zKzLZV4Ruq{OG-nfTM<>7!Ob<w$CqNkj${P{1>5U!;uDTNi=;D9UJ0JTzITj6$mxR9
z@^x|P6cdSyCpW(2`~I@?+5IK$!MH6&JVRbj<EO?a8`T|L`i2FE;cS@T^D0U3lmbeX
zY#gEB!lY4DLrm2^gH8A^GB;-C7xD|N3tqf+ZDz%caT3<4zBd!u=oZqK)rx6Ez(IDU
zou<n2b?uc!4BYx$(Sfw=T1)LDo$iDM|Dx$8vs6T4nI7wG7Z>giKl^Ay9Yc9}kZrNN
zk%)NYWwP;v0bu1_6*%r6eoOUsn$P~SDD-hNSt0xQ_gmGSF4scFYSUN}P0ouU76F3-
z%^W`XrizIe6f5{to}k^y%|}QE8D4fIM9;igjwP<UqJ{R)C6@jeEc$~EF<xlrZG2t}
zZQN;3X0;RDmK)8rlWh_-uVWs#5Bi$eAwJ@JvTu5<CD{%C>%|184my55pkb+YjXa+W
zb1hZ&z)|3Xdy*#p8%n<2X*n%WzCO-{@rX%LUmQ|<%D&pJueRH`*Mk$35o)8Ow(qDZ
zHMJlU`DZO7;nT@tJTR7h{45ncBJ%wp*~W@bJ3;Q=DjBbGcYr+Czk|P8LnNfwyU%CD
zrC0VBLnlj?zN|Tt0akPa(UcsB(2NVIov!F$08z8X9jDYXv)sfJC&?6ZFQFv;*M?7N
zsHE17+GVwXBryo#G`AX%@fjZJ2<)xMLg?1|@i0-xz29+z%;P`X{i+uV)ToQWvB=Tn
zN4L~@XEHn6DaP%WhoVlsDo%C~6|>{UTlTB&<h08_pBy~dmqb#LH_2-OTxBDq?5D<8
z>QD$T9EEY{V&|%Jy7l*WN~Md_w#A_q!&{|+tTU#cF*-}9tNCb>4==L6TrdE_EpQd*
zD4-W^z|>+0fe;ZArFUkedG9LwGeoEyFE?oTWZpd3u8i<y+HzOi>Ec%G$|J$faAz#d
z?CD@J1s*I3@6k~PJ5%rEa$ZzDja*`MmpWy8ZVW=*Tf9EW!`;H5eRH?hbP~rn3)#cb
zwa#1oGP&K|lss7z5Mp#vo-L4aSC#XHhNf(hr<dbNGjgOWAvi)VM6J{N!YPzR4y(q%
z0#;g$k|Mg_D~$mI!f~wGk&r_{dy<80cP~38u`p4#a2o5ZR*C7O3H<?B=gSw5jn1j8
zPNyoowQ5)(M)EV&Wp%lns@n4S>6)Oz(wS3n%y&H7s`CTvisq2hmiSN>8cB1k`8Q^8
zbbVO6dW(1&iB@M%K^pTS8J*Ph@2yst+t~w^1;91uld<H`s!T1$rbtv7L8>ISt92-c
zvXczFGLNLWWbHLjGH*3i0>L(}e{kUWk;r1Bgog=7=w(|{?qS!CPK$VayGY@L2}y?B
zYepCdkNQ&|&+>5wsI$J0RzZLzq64$%i<6zh#Yxn&=S&*+hP)pNIosQblB92LZwJDr
zg4H==D^?ksE>0@fjAKFhV@Qr7#h8OS_^!87#l0!?t42H_K9*VLO~=s8sXH5;fAY?P
z5Toa(0Bu@su<dP>h27o`9rChtqw|o26h*hUEevY9z?b4T5Rw9R-99VE$jm1Qji&gz
zjas!jeqBZDKaK%xR@)VVm)AD_YY{Tt$xCA!3vOU2e$WUhQ$%M_)aGNfGTk%m)%oHi
zB^YZWH|fr;yPxie#@uvUqhMH0Eh1EPWL9WW=aKmNoEXrkbJ}QpC4s`V7s)<&#;Bt@
zl1H?BgxW+YF5W*00T|_D+-bI|-XPS`^eMSMcN<^1?;_;R8h#5^1s?9L9zmj%B0E%J
zX1(SvbpsY0Mpz$73KL4{f@|4w`b$M=ZPclK<xpCmtol;rf77q!^LZ{s<<pNaJwUY-
zBf0vA_Q_F~KO&qKACQy*&Pw)VGBf9B@;Su-n0U4iqf5cq3-OhQwqDL4Ve?e7r5U~Q
zs+#mm9tR)k8~KO&OlY-~=4#U6CW+ruGYTYRWrCi{Gk%P<u3@Fa&Fn5}22%$Ehsp*{
zNf?X#9F}MgZalX_SfBbb(ZvU*iV=iZQ1o2NcrJ1&yQGV^y&cs_WS#fw9Fs4l2zk7q
z+uIryQloehJB5By{Py;tHrUe!fZ~jHw9H2x?L%9jL9ZDd60P>Q7Y)sw3^%gFctF==
z%kc!;m|r`YmZ()Dn4P_|PJ*Ul3L!ETpWiSR#IqzBBvH$T#6U}qb1seC<jIR^o&vLS
zvKiE`PG+3l5s5qTB5Cmu`rH_b1qHHpOczIP_+qM{UeT8&d%}IYek}5&83J=(B{i24
z-j<w;sE>%>lKsiIURLQ(^$$HR$FJ8mShFay$~UqkdVR+`>hs#9qXg3&#20_y-~ou%
z&BDpR%nNYp{8Stn$u%caYFlc$oHu_8a9y~`=#-!HmW|f1vNBl7+$iW->*S}7@2EQe
zkdDxLsUvjta3Z&VbaFB6tNY!o<gEMBFo3&t>oOv)&%EY7SGMP55driU|2$oCWwmQh
zdp|+=>spuZP>~ff+0MmI>a^WSgF1UU5siJ>HSU@QFIR{jbduzJ=QKZAxD#KQtk-K9
zf}>1DwYckyYjo)cwzIBx9o<qkMMRRa{I&gA3)<)9xLqA!+k5{Le#}EeBZXCzpJi4m
z+Z~e^yjdW)t`yAL*%QbV7~sdS&2X(Rb4WN47xOGRAys;CHClSj(cfJo%2ny<#d3@$
zdJCt*gw+TLW`6cY$$%^u=Q-tbsUgBmg<O33Tr3^^w1Tck3AH%wwz*bQxq?6uOJ_4m
zb~{@Bd~zarxn6lDQ^dU!+5rJ!KJWMs6mO@pH1#9<@dx%RH!J3iy4m0o<2WJYPzLbm
za_OG&BkIcYUNoBqW*Zw;TJ*uE9nACDnTTb-@JRbCs=)9~Pm3s1?g9C}n<v?<Bs0ay
zCzKcM&?VZODq4d`)j7b_eC=wRD-5ah7)o}hJmabJVS=$L>pzkPj(oK$j^VthzlIxy
zQmy7CAdK}AHU+1%=c>N9Q`<z-JJ)QLbp2?)@zFAfT=8gk4M$-}^bxQt0i}ao;ei0t
zF=`Tag<@+^@LSE_`j!^Sv++V#P>h;1L2a~rH~PlTjxY7@hP&v`iGjfAk}L~Ib<Jof
z%O98yVZwt64PQuy6n$WpU$7BTxFSR^Uy(t>E$cbTSge<tKr)5JkF6&&T1_eRN1^1$
zaSMUgy3>uHt;Xqe!(!0_1=q6Ta4<K{B+;ynEBN;(8VTeHBiBn}m1Rc#PYkS%k9}`9
zs|j_?bz-*BZgxZ|T%PGzC0hBVpkmwjrG?s8y1>G7ZJx`YERa*p-LcEIUOc>?-MMq;
z3*(hEfcE~3vNn<uwQ>9A?N8e`-T(dO=+^DsJD={}{p`;hlK12^Uw307q1AQ%O>x;4
z5Z95rHA#+bSc~Nr5LB~W*B>s24XK{90TYh<_ZIm(OwE&1e{b*$lbJ-5bzc{k?(Jv#
zCt<R;Ow*;ZXA`$KA~}LR8I0PlAfV}=WICx5m_kF??@fTDhy^^}-`y2lz)pWy9e4hj
za@>g?{rq$G)4ShB%@zI)rgH#U`j*F=`b!(1+58@F#=qXzUyt}}++$h&0Tt1{OuPQ_
z%WRVvdLnV{fV*t|RtApxlVnnZC$gNo#Mt}N7{nndUA_S<2>F6>nwSCNKS@t3d7$*C
zY$s-3vsp9hNJ18&t}(oCt9Kyvy@XBb$wcJ5dylc}+Fe8boBxww5oSg%d)0$@B)jQE
zTiQ5UKYNtS%^rqrkuU$&*yhp%_Dw`N3r64!xry1?WX_q8Uhsqy3PI}{0^I{+>jl)s
z$cPfBeJYQnkzUjCR*`ISN5lk$%ORRQmo{nqoa>Moxwz)Z$}GRI=hq00!-_TQ7f5zA
zn=D{Rb~4MHxo6ZOLnRjXKZ}A{z~8zPe|ovnT7y_a4Z#npLS&xwF@kiux!WW*UD9iX
zpp1n?D+&4{*gi9qoPsun`ZAf7KNbUFX;Gz^0Rq9?W6AN7_<Ewls&h)=c~zOgK*jhl
z2m?+A`rK*tQXF@VYcJ@#g4YHx$O}PzEXQvge=pC(k};qeuA-wv6zjn3ECC9u=yN_-
zt0%>{vUK@nO`0ORUZsBYdZlcAwAd}41q9^D<(4D2y{hGoaaM9I*6h3#&>1O!>Ak4i
zoM4MCOw&LVcNL>*1&j1bz-nCR-W6awumXTVJ<;%$%wW`7kJyL7d%S1uSqy{pSJkp8
zozA-Oa<%xeZgx{d>?jh$(mInAIW+|)nqAO%k>RhBxyke1aYZC^Np_qJ2OsagVn2d=
zYyGV5efb&Brh$2@Ga)&;sE{x_%g4w-E$78Z>Vc#=hw7Nt=<7G-umFClVsHn1@8hWB
zYged9brmOf=TpO`t+N=d`VKr>4%Iwo;y7!0Qfx())eTQ6`Oq!`t>jY&=;!%$#~t$-
z;P-5-?qov{pC8(`=sz?a3WI~|o~s>V(d*&6aq1I{$p(1Z0#2Y<g^XvNjk9A6_?nA;
zgTJ>+1R2SKG}~gz(2z;6PS+;c0JrRCfx3csLQC;sMRl40J-X9Y`V*KV{ROZ_wia4U
z!ACimomZ!O5ru*49C4gij!5j~+M$Gi0$X}~89`>-aqtnfY!?Er?d#DNXUsB=%>MqE
zeV2rr>bEN20FS&+<%9*eH9ojL9)oUwlO9S09m)N~YWFl|Nd*fOW)2?`9gkt879h;N
zHg`77cQwo_imE;t^cYvhbqPhF%LE}8<l2%@Mox~aJ($4!l}n@pv5`6v>+=k0a;j0?
z1P!yGe&#elAhC#VA?ucyMGb(qI?roYyal}1a-(0em*_Xzk>t#6(GlfQyy$Xs1Ht^8
z(I%WvMs5(qvQ9(_=~`myh7++=d1ICy3nx{&C;7N=Z!@6sSI07YoQGR&B~=~=d5+U?
zSi0kv&(zJ09o616eorW$Mn*0A0pDOmqogK<nGE-0DI3vNH}Eb)>DwejIpVZ}BAilx
zivpTM19}wK{ND1YZfh<T2=P*^sI%rW^c%kN-eQov=XCJb+AUT8QjKXT0i?NW9s9nn
zYdP)@7XwW;BmRjVC>&QCf@`bMhU0>P3))z>ve7tjl4=2%RY`A1J*iSnoyk=r-CvX%
z;vE)lD(~1;N0cCVa{#i$8peU_R~l<Zg@Nagp`de;GF{F}`1bx}rX_FW5NKAAxvwwI
z;VHJ^h4&<m-_dql$?|M@hZd4=X?yrEw$Wl*IP1qiavo?V08p4tCiCyNc21m%v!miw
zo5;j%t&3cVEXzfdP(ZAk`=y*Nn3u>nuP6-SyQmtCqR+9zo}GN3{IWVl`9f7iLj9_#
zP4J>7weZ;Wh|0EpgQ6<6tN@4CjJQCJ(!dmMD^sxW<K)U*`4(8lQVQ{z^4i)1<+TQc
zZe}B^(T1?kSv_xC&a#|#AoQCfMY4(O^?^O;<MHABgD18|?ripVZhhKy+;=DyvHIo6
z-zhinS2No>6d*nDt@}_`+JgyAkO%e=I;m(9Z&C!U{JboJvG8F;dZ+RTVCXW(k?+B$
z42jAGa?~mZ><g@fNOrQ;Nrjsmu-74*o92NT6uv$IaQ8fDx|K4}isDoeS8c^A^0Nf~
zK}+KSM-y0`y<=(h!f%==>FwHz3{oJgYs^~YtT$C?TBOc)X<gFUZf{3895p~RDghy1
z!2eumN!aMc<ucL~8lJsI=4HTLlQgBh{v0-#2Ue3=)<H@FfU3Y3oD@>BnjdLK@T6^p
z-PsuwBB^1RFUS1WtT<cXS`AvHY(y)h#OuyTshJ|n=Nc%kKMO_GYY3@g9jYYxl=|e_
z3FVEnI}RBcuT^_;dK&Ej#{3N5!(73n0uEtI`Z_q0YqTUX+C;?=y>xX$c_mcmj$_BE
zDXVEmFK)sURI41IPDrAcYxyJ~9<RQBSOF%&Zf|o6OJHx`tz3|Fs=O|lcqHqPoXRU0
z5K>pSw;#z-SU!cyLa*Xr%Lh~0UQ$V_s!zLdrz24=GnLS6FV)BGMcskMr0Hs1u`3e(
zoebqHUlr)Syy?+SH9qasjDMm+VC<_HQ(er2t;dv@ak$7TQ8JRV6;2etU{VEz?qvaW
zOC-^jN}VkcE*0k1A7(jq)Jm4`v-()wpWEBz@~em`s{*hE(H7oJrl>K294B2klb~cZ
z>qo#W!;USW%K*F-qp6QmmLWY!L}E6W<(#evr(|C~B*E@6$)eGOG+th!T~vvBv2^0V
zZ-e6Mf99%5#LIbkb`C2YLjk2AlLqn=3?y2duXJtPKZw57$(|U1YvEQ@tgI7>QkJ^v
zh_mvq*O$OjL7P5R9N;G`3khn6bx)?z_Pfa5J0d<Nu_TUmIQ}qlmVe2PUrY=z;Q0sJ
zn{K4^(iTg|n=)_vA7q&=65w7jE>24z5ec9r^5+IIM+Ti>UT~BV+;ZY|@qmS^k#qp=
zi5Pd{sF(Oa19R(NMht9LP&5i0&OkB*F;(=UT*E{>Yw@yyV5S!R1@-{l-ghl#`H=lA
zi3BFo2@<qfxR+TkJ9Wn;7Z3mfx#m?FLY9XJ%E-nGf7+BSntWE-ZMrmzC<1&wpAriA
zql+IBsnYjwBa6U=qlkZB%7s6_;Llkoi&e#SgO&sLef<Xs-3O|G79eMxp~{^{IXY35
zWf_MPM~h0+i8b$3D^bnf_=1v>MS@a1#YyFuXJzO;QL$FHCAn00_HvsFw7^Q54cagP
zU7FVi`GJbL@8Om8RVe{2f|jNcDb%$%c~I1{%sKp8q(0K5AP$Ln%mWz3<+Nl$II754
zp?2i0NBc*u?D?}p{P#=z*WS_nuUpxJ{m1)9`|dn?7%{)D;MNe7LfE|DuQ>8+3GRlV
z)6$D!Z_XxjY0S}?i8c+ob0dY^R8}zC&YS?{#S=}uMv=DHh1lAC(T}g6?A_16>}0d(
zkj*WOmi71~(m%$SL^^I1;6~yU*r#>F2@oBQe73j!iXc`RQJ<m(FA$HOXMcEg<c9cK
zjp=bTwNj+|HN=zUt)*fJN?;ab5u^Hl5(VV7avw=6F!~0n=!X|Zk`_f}b6$x7vr7tb
zt5u)^KP$XFOJ0Z$cT`6!g|L<pOY)PzCLe}UbVKs7SE!9?SOo#&%40N!%&n+qn)uiD
zs(NR>8s!fJD9y^z$cYGUNrsodjXyvTMZHgfDF7Zh9(4Q&v%|yvq`%`sqG`1caVGb9
zMn5pq&XMbmc7lW5m4l9=b0|6JYp(kYQeReGCNFtCY%3|wH@m>HOp?8^GHq#t0EUjF
zmFsmP!j@%H?f~$K_5wEV1;?qoJC5D#bzGijT~S=HD)gg<Ow9Y-ix{x&+nCZa&lE5Y
z?Ki1D`FYnjP61ww``x$TUq@_#1Xo=z2wgO1oC*aI&F+ejArhFcx+ABz(1YmtDopb&
z<((~qPckH&JPODoS$boI9!LoxwvzPEro|Y%%UH4k-7zdkps?ZowE<bI*3l%S2*{~2
zfrk@$n!gdxx^A#XfRASE#voE~JG(!$a(CO?Pm2p_fEZh*JZkdd&`yXl@5Ci5@ol~<
zcWfNfl9)^#r+-t0yGO>IWHeW=M=e3nbGB$YH6|AIbh~r&-=*DQCJf7QMETv`lgB<w
zGt~c6I~SQm{nf-D0FnYPd!ARAOnzapDDK%yK}Zr84cch0xg-_#5ta}(^ekPGU%HVj
z!4j`#vZ2q>(5&5_;f5ST<K#X8LqQFZcdJ5!qFVTMioex~Na4|n-9jw5O#GffEu%XE
zBZ-NZ(`PjZ39uIU1cBx1Rf`dD$g}|Oauo=;bQh<{F}9h-c?%MStuZyBFO;4x232<Z
z?%iN?tdh=|3J@u)PRt)ONlQrmv@~Fax8-Ot5;ue!&afDt;j{eccoKaxE@k0K+;)Mk
z1&Jz=Gsl%kMu0va)iw>m@=|m}JuMOBiee;!T{-5$3@|N(P2AijL}fRioR_M^s<YxZ
z94%fxN#qYMjnzpuz&=zq9!8vyE&!$=O7@f<Gt1vOq=X}bkM3x1Iv!1&&V8v?juB`_
z-a}?0ga2eG8eI!oB9LfBkSgZL`82;Urk3G^hPBlSOvrjsX}tIAS#jDE=Vc*<?Ih;Z
zo-prZF|T4~(WJb-z0LCICP3P#ePllDJ3|S98|l#Dm628~v*&e!<<IwS?D*{WYNylb
z^yH)da}h6t;MUt^HHBWv!-bxL8&7f|QT&&!tDd;TYO&8=&T+ELdv(AhM7qh~=D+@L
z|3ClJfBE-reV$om6)_Ww$I{Ux1xL9xj17GymRfJQ&m}e*xEZCC{<M2=ds|A#bDHEh
zn5FjWjxcGdRMe*NrNW6q@z~yuovfNr5N@rnvd2a4h@4W4B-<R*kXF?&wcP)i0<v@K
z^R5{;x+YCW!jeq6?ca|in;W&Nm8v;Ky4<;dy}AiY2r);DDwbk9GZdO($>Q2}mXa)5
z%OT4iXbO{^LU+eZC16g(G)HXsN1~$Wq3?Zq^V6Q5_*v2Ru<_paw}?gA!V&GvX?R0|
z_*y<vkTy?&p`(5i(Em86@yTiblH&D-mb&>x;W|?^JW-&hxfO#@EkjZ7Mr9>v{;HE>
z4TcjB?^Unuzyckzir`s3)Xp0arFXS7n(`IPA&lGOg)FCd;X@-5C%#daT}&i;VMwg*
ztm$R2LliMp1Z*fl(P%WDMbKtUH<RNLk7?P|E-wcR=@eMpvzdDAqsBaT#0Vlvs=DBV
zSv2y@M0m>HKpl7wlr91Iaj!9M;~CO=16n~)4$M~{WsVo2%9cC2wPiuxpCKp1!Euht
zcVP@x;K6Lb_1B}wd<b_>Rydumo|>mM5SSB$sH1XAyq(05&I%_bUIqu(%5^L$H&|ah
zib97l5>{8u!jcn_GZ3$B6Z3izZAFlA&Il<C(xvd>mNE)zh4MHnBJWx|+l%KN0yky_
zWij$uaVm!KEynO=W`cSnD60YlFc4p;W}R+tBNr#Uwx>5h6&=Oij@LrZ+?p>=B=vOc
zcc8v1KxxnF1B&jP<qkVe{lJ#impAabc!VJot``*`%$IttVUyll_vXop@rdla50Kry
zk11K&{n$^tbhdo0-d5yQ5UMQLZ?U@9Q!$;*F5|n%3g>KZ$HvCxGg<dmWLsK<Wama0
zMB8pkAT`CcNJJ$<a1$ec)jl5aINELpR@j6w+_R<lZMJ_0q3$f74M>OTk8%TOn~e%r
zKu0SNhUWnXQ&+?8it+O05Fb7&H~9%`{h?5?EU@Rk^<}XS+bWUs;W7b8kf0X9mz~o~
zDZGK^jleJ%xwncj{Z>f-qGU)^e=;1>+iOVMmB&RgOZTW0z-=D>zbwi(`H;zG`E=U#
z9~{umU-bNl85B3Qh*b-^57@%0WXMeq?%L*EKVMCv@daop%Jn)Nrqm|ZGC^nx)u}Gl
z*s-zTFE#7*umAj?6t6)peZ^1z>p%Zz)t~89Hl;StP9{#fp9yk%gc0F$v1FXP3L;*-
zWf*=AV`WH<fv~f+vn{atLDmp)%Y9*RnQiY#y3x*#7O$89e*!fs3`|sP`)TTzmhzBv
zAfWJ9QF@dp^64{?{9)^Kg8blj1}P=~`<1kDqnce_-9&TOu4?qIArnH9R!Ak1<S*zL
zo6RIq^`{I_>rS?D64E=Lt%jxf?W*J{h+V|vmv%C(PC2kVD0XH!QI;Ncoopzd8hI+o
zP%>7DUbO7umDy2OZM`3@trLb9{$iG!xbr*_JeV*Z50NitN&-Il;ood)!M3)-wDzyT
zvbNT+_HTBzf3vIon_cY}*wvP}>^jaW+%nO_nO!5o{3;)nd5EN_C48PGWFqVRPUqID
zFQnljYrYrq^`d~nBy2$N3gn8y`Jk0-^~A)uBBwws_3!&C5mM)r!GPLJ)+0ryn_dsK
zoc!HzkXy*k53mC*xjc7xgPIOca1e>G0YzI%##+}s(~5bkXjwTFD^c8kBZFNSK@5{V
z+FvOz7fRD&@OvpbV^1qBVeEmHdKP57phh6vsZ@qszojHVgQ1;|COBlPFDHax+Ew6Q
zPj4iINp3w;Ye~~zk7(f6xsl0vKPu-8-NOjCx7Dl$CT3E)8$xd*#5FuW*bwctw{fd;
zvvbq^<%GD2yJBEiuwEY&5$;&aJ+Q1`l!L$%`J9_TF|PP|Sg9C-V_S!iN>ppx-WKXn
ztE}-~AI74DCviGFT{^cYrU>}IK08CW5_iP76nKKXWOdK^24y_s=8`|nI(?EWfqoiy
zJ9d=|OuR>8-rj};WH2?5irl_@)>*#4ZR;#!7Df2%NP>1L1PKPdLN-oCakLj=pxP3D
z-A9X@VI!CAk(0$8F*=E;muapCJ+m+qM#2dWhZ}{dS$3qH8pi;xqx0o~TEucCK_O_5
z(mpH`W<K?34-B&Hum9<Pm-Ui3nO^qS|L#99B;}-VbTAXNY=9}s-v(vtTJ)Ns4*|Og
z9q?Q75T{;y3GFfVZ;DH4tRX`XJ4Ic|wj`h)RYmL(1abY~fBx^YXEYm$nC34HJ(~t5
zedyzjFs^2(j~eGbsllLU%cdfite6p?E!Um|bYdqYy0I4)s#j-kt5-}*3<xy0-z!-j
zv7Pv#sr4lAu8y@ol;&!GiVK^2UfeM3yM$A<B59&3&ZP7*Bbs}=s`~U+C2GWw-|JX#
z<v)4hm(6Ko6MA&=C??1=xb&HKJ}`0FqV4J%MTXqYo+#_|nZrTkBtMKVE5-);TsKA<
zn>ztl*4(|2&jySH?WqiS&k1CJG-qEDc3$!CSy9JTkM9;Mm+D26y_6)hYSt==qhcMV
zp^uD_*sj!4?auMfm^oCF@SmTvh{0!n^Z)$Z__@9GpB0b(mj7|zB!=1;w^5iUC{I$~
zFQJ}7Sr=;@wqmxZ1e5tq=}2lMQCuH3&*hlGpJ9xGnqtq}8nK;34@PJgN<S1F&kBzz
zlEe)1NF>%Vb6<Hkpm@K~y+M+z8tQW)mHPG+Qbg!WS*82rJz?Ix-?5jkdUVYZ!rC3?
z$?LKpKOF!o%KhG35v<7aqB4dx(THjjmJm}>UObX~a1=$tl=Oy55n8)i0Hhe6>}ec}
z)ms^1nHoP5pIzcS6o6a~m0y$~xw~I<$>HQtjJ|NXBI;fTD2+Qx9C~RPP5$hpjiUb=
z<YCvAO093(`Lt{UhN`Jq$pS%yOO93C6ztv?g<4OL;bP@yl^~<*wZ>v>k9~&5mETzX
z&Gh1Q-~Cxob4nhC5XLKxUdHy)3K3$gMeuSLGq91SP8EGr&c9xqi2m7J`e-mJACW`^
zbU>YHONSEt+~S%g*CU)p&BqNQl?LVE6!r7ji~;B?DURRt=9Hi_JHc0ilZ|KtVeu=m
zuiGhOz0u{4n&8K@wn%s@`d;zbUEdm^nW<|#4eXn;?9gfp;fj;RSbeL>24@1g+%>MT
zyrg<@W&OHD%$`k25Ex|nnAXmt6trSuzvCBab@_@nu!f9)x3N5^tRIrTPYZFVD9C{?
zt3i(dq73@E#yorX3pwgm*(uy<)9*HAqFxn={9l^ENQ==(<F7Rm61Y&T?^dae5b}}u
zBqb|Sq7leZUS5-<+~5P*3B}D}V)+91y-^v!j*RUyQUReeKFUE7fm3%&awxMc96LcQ
zaY7|rCM(XZ+ZzqFFGB1{oOMw}XSiL>FX1JzPWbiAqjeLaWNs`jJ=anOAVO&*X<`$=
z8;G#4#z6^zx6DI^;>R)n6wmtzE>ZggKU#&`L?btXB7SHHr0`KWs)+1D_u#Ej7Yxl<
zCVf4KYZ(bvI3UbfUfTp|4}liY5`GZB1IvOWfS;7hp4H{ApR+v!gnVw7_kRU>?c?OO
zzq3G>3U;q%`INpixk-P{dibNaJOxmU_wA>E#TV#9T()UUlsM@eHP8t$_Jst;1I<X%
zkFlO$J-T1v0Ylyx4cM1XRuaUp#rXBusrM!jyvQ%YJlr&9`9)V;MZIJiEa>XmZY{<h
z3$<Ara1}&6@d3o0d1%ossWzn*X5g3CDbUgu5^Q)~TMWAvEz-$Vatq_yW$c1_M}-l{
z;skG{8otH5=c`07y%mjh>D>s)F*I97@Vo!)#i4mC8;yv2d-cnkn=GsGO_976+4g~N
zr-`dHNa-0CA9GERWNkzUk;76U4}Z?S7I_XwRr(XKQtY}LZ>In4{_5>fP;K8A;Fb0s
z3@+_w?n(mUqWgWjcSSqV<tjF;XMRb_m(KwEdVlXhD|`0*=-}DY!>juITCq#fXAB0~
z%JNuOKo^ak?+;NFLjn$l(85`vpk{-bIY5IYV%^lR=>(z4BiQjaJ=J(t-5Uey;nuW>
znYf(atpfGLXBUwKLait_goFi0Wq6N!7o)BrxUSESk!z=IUAOg(X2>YZwh)K`1Ic8J
zDY}~!h6anY_1|b}fT5A0#}%Q61lEor&3_&zwyezxZBI**W;qV>k6$mAq;7$xFMUl6
z9HTxQUZ6BuT+JD0!yqPAh?sGrLRtBO_4U)ox+FkxT$64YpUA3~qp9Y_!{}8cX_^1E
z9Qv}wow%WO&1_tiGR7>+X$U+i$44xRIFp2zOYntA0b)j0W+Z!jJ|7Kx!b(rw(y&Br
z8CBtn1qE>7Dg2?x3vFl!%Jy~=GcDp2`B=+KRaC3zvwU1Zr1Km$!j~5C)vabP0+yx?
z`IHq6mPEGGnkE&a?FeNVfTVeL3>I#+WY+PssS8Xsb0y_!UW8NBcM==d#L5$Caro0=
z@s@e~QoD(+L^*%k+kv@58aoXon`^qf-kDe2See0F0-Q#dv~wlas}&d!FK}6nH|HVP
zNNl&%)vd0kGB0)W8z8B!AeeCWrpg>gZi=^3F=J~hMkIupUL}r=N!xuf27&V_aaxA7
zgt8PG#Wi8ET6f4#7H1w>wPSYMmASIkN+$GxtI+Q2ykO9EI@X*<24WZaE`%c_!{d!D
zf>2aL!|hu1If)3aJQLQ9i<AE12`<^c_cZuk^^;XXJ7|D<kpY)6uDsR}CKC;dGzv(q
zdAl5Y7l2Wy5hnfm02-?T{gF{YW>cbqyHuEEOG2qqPgG>rKIGC?k@4o(;5DlcOvLc-
zNuH;4+^k2bab?zKO<Opb1Y{lV-+!@x)ct1vyY9DpFAnzZJ>Ks+sp0GF%WPw@!${5@
z6z}bV2M)`5*M_j6NZ#00f_G~Gmp{lB_~c}XvD+p6SxgCOtlGb@h_=@1khWhfg|yYf
z%Qk&@Sx$%riCWui`gk<-_$%o$l4jTS_M{ZmGc?5wU++`4F>JKO)agu*H{Z7XkAmr5
z`#t*gw>C!q?7f2vA1=pUDbc<=OT!HH09Fjs|G09P(XTd4|0s<y^pC%#-2J88y9eWW
zc%hZuy4g%H@fR~h>mRuW?u92X-JK36ZlVv6x#85dt!B34Ub>mSc7*!DuMVC*c=oF6
zPSUfd4-VbyceCy6vzvN81ik)g{&XuHS2F^$uP?5l&WGjF_`6O0`n%9K$C{s1Tk#ay
zwMA%VU#%MJ6+?KTTN#D`^L!M`BXCo^zQMI77t!F7Juj<oIhilB`~tWDysR(1?6T!4
zsFl@^Mk{>2>1k8@TT7X?c)s75442i)rQ^sb&suor+A)XdPT_+~<Nm!pYwp65<5bV$
zcPEp{u*k<>aR#zTa7P|ZR8;sfTJ_&&y<h)?zTf@&C;#+aFWb#5XjT~j?*c&W**Z%(
z*t25(t#a(Gb-cbAy0MBzhY>&N&n~C)2^YH~hS;x1d4FrOI?r$4{cN)pzTK2Yg2=ZO
z&q;q7lxJ=RTbt*_TWm^F$ws$EzSfxohwtn#KP~qEvdD*9N~iZ0$gAl<B?z0)Y_0fp
zX(loRA%&>?!(>*kUsDJjg(V<@-mI)Fz<$@wS>8;7mYt?h6+&sEAo(oGsBqVk7$Z)I
zNTizh5?86>ta8?Bl=xV|`kRBqYq0CTD2RB1o}JF}U~J1PM$>;B%2Ap0)y=D}^tJvg
z%U<}ARfY43AZcz;IyvpA69<u+hOWU|Z53=0P>HA^i#~IDB~Y|#P>D1{Tas7o$u{dY
zj43t-R$oB=4<pY#W)*h#<$+{S&cwEWl#~IZ68m%Yt;HRwNZI(=5j4CLKRaU2i9Ab7
zeB~Z!6=FrT(s@TF=AW-;P8O@F$F!^AB)acBV#b^IFiS#L5pebnpBz1JWzV211BROc
zYfyO1q$!c^(yv$^wtBb*+VZGJN5wablVUb57^p@ck9)Qyb(NpwP7qNeb-d|w#)4%(
z>yZxt^+>HrVCubi-%8NxE&B53>^S6zK0a8=Q@+#f4@-tsif?*LN`e#jjHNVoPzI@o
zL5hk4zo0vJeY#Q@y1#01J5(w!>QfS|7xDu)82N~L0>9t75pt}|jtJ9K+cj^yK{gF8
zv=}Qxd!{wMBh<q5yeK(EM2pjM3dvkdIuUIc3DC2{@A!3lc_5Y4ky%iq0>{RoIKp2#
zaX*wrN;3hDwZ&kPqXGrz=1}}%LepU@zBfVxVq;V&1?G-bfS-!ahnPD(Xw#tR4|74u
zQ&^bo?Sv{p2^J6N=KI%w{*QEU!gM8>8zrK-HJ&<Q44&Mg5bBmkF0LYICJ)c-Zgec3
zp%4iW+4xe^U&YDrVA988+(%>+%w69;alM9P(-b@2igTo+zfglpp7~>C6|UWqEQkxm
zEVOZ-hQ@eczR+sNDR^y}hNL;(&73^J>k-wYr9`FlD%E%fPD(+3%RR)`L>sfHq69oH
zD8ub??|<bFq`)DA@R9lJR@q$yQu#w{W0nsrz^$mwp~}0~Gt?g?YlQWP(KU`#Sp{R1
z9F_Yu(4L|BgeAJOzx*@eh(K_mdV(HQwdr2wqhUi5hCRRm>_khzqMj_bmd;R(zcN;%
z(U6nT)iWV|zKTyv6hiG3y8MiIsO3Bq^MDXkIYEYEwe;#8Ni~iy@sV1k59?}q<{e8J
z5Esz=JUU=8;=CNe&XsGz3PX$8a5vlV0)`0}Dx{#~>xL*B!cYLESx#uMsdls5cfYvp
z6iG;qH?li79r0eGjMop7ldf9rSw_zZUAx&A(oX(!BfI6vnB7xF>sIBDMVAp3-O<Tz
zcK4?H4JiO_oZwF-zKPO_?y-}8Je0+*2&@h6$>YEXv#kJP4VhW@7lrZMoFQ|x^$~)U
zHspQmy$Fr!90%g&5TmR{^J%hx`Un<z*B|~}UpH+5sme{~^WTI=knG({w&4G``o;OM
z>H<&D@$k9L(*KC43(3p#-NfI_tIE;rKu6ZLzjc~&5$t4#htI-w;C`9F>Zr4mvcFb=
z80ml;@~ACN!ge{>&>w{dEH#kF)(Ei;V?9B;zET}NSR+HNL{`OxhbKE6+U=b;w^^@!
zBb2&BoJp+*X{+z&)3Rb8Y#Cm}0wVao{;s<c%Yhr_7`4W0UA(!qW3PpdM3~&ojyL4p
zjaIhd78M)||0D%%e6I^1U$|KCc`=m5z`weZ@!}ZGWImkw`d>Oa49+!bBTbqZ>ARoa
zx%C?v2a49A>Z9eR+d-ib5=UpnFK$Dk$I&5D%}%8OFf-`YeAvZbyIS!2Y`V~Y0cW^9
zDn|M~P@sd(mOH&@&OEGf!K2jI-&MD=U#wd$n49xtTBQeroj-R{(`39eo{o?+59r;J
zTx42KyHw6<`#HUwmhr*d5r|GKo9jdAv8!EOMlZTw(*y0<^{W+P5&~)nzk#4!!0KMY
z?U)_MA{7PQFS>e{h&Ueu3G$j{4nP$lQsa<EtbF+<Qf4d5r$2{n!io-x@x=cz<pSRE
zf1fPI{@-VznY$m(!#k4;K#Ui|q1fx(&DKQ&w_Hxdm}Hx}By{m^3Q0N%4Mz5=EACVq
z%@Z1J+>4ARkfwd)3_78|$Y;CRZ?Ml}N{UxZNg7Cug`>kOTDo7`^SpY^2ZKT?2@Z4@
z+&E5mT#K&W(>p%<N=6pl+ScRpLCSEMX@`yv+_Z=J+wkyHBcIipSA<5;^d)~q8VxeP
z6NAFbt;pN&`&of)pe2@6Dqp7=9nAkW@~ZmmA?q7n5QKJ$uwGYxuMk@^pQuQ?ySv+W
z`+?K~;&0Vw?t`QR$c568MExTAVzyuy>-aK=Op+QpNNOdB<-q3x&kD`?&~Oj`J@p5U
zi??&XD5Yw6mwo8mwW;EGW077LR&&8heu&}BcII$e^n1QOz}LlaByl&4L`ZkWt*eko
z$7;dc$o{xM#DVK-=EUgz07~Qs9;b6_vbSlQ?#qI)2ErO5Ru^CA?@ry0MC=<nq>gYT
zUraCapV@7!J}U7n?Le&%PUSxzAfl>>5s7$>Aa8oR?u+6yex50?!G+Ij5M3r|LUAz?
z6#b7^OU2r3nOn<$5}utjCG&E!1b8+j31Qdxr{mQ8AIEr|JQ3y)Smnx|j8(dK$b;N}
zk-5ja>({{l!!LE#9*1AsZLyrUv2tQYX`d$4pk;TN^A6gq67p+#%%qsj1PuFx7*&af
zcDb19anrz+?8Uvk``H#M08m`V#RLB0`-IIyc2nz|7&NZ{B!}=LsS)d^V{rd_)9KKX
z(d%5(!`q6HM@^D)s5JQIJ!d(@@&;>3v>s><=$YuqIT7?*v8L{3Z*Dc<$=wZaG~z7U
z8d2L|^cT)D{M@j&u;9Dd&y6ci<OiO|m8WstS$ywFTyqYubqZJLZr9V_*6488*W;EI
zvcD-`N_0E@Io9Ep^|<%ya*;lld~f|=uQgm9uzr<e)OJy`)hgoOL{0ofs^Z^NUHkx*
zas3Ulbbnm?_BfmPI|RRb!QS5}_50+Sx5;ZKnK~f~&HyJ#xl3V*0Y&!%IP8<j7|3LF
z`&lPckVQ^`cIrFDAIUuw47HvGwe61al6GprRmW1z7b0NrwU(iG$ElayVKvL7Wh^<d
zv1GZ>Qw^;4rqk5W?N(?u$pwydGGzc410IWfq<&4a<JJ6U_)0ljF0!LYq3Ktu#ffFt
zCwBD6FBF;6drn(>k%FLH(}cbXz~fdYC@uPN!V}CY)f>D;AE*)j+mXdn2c}gAR~h?R
zdW&{qi5CgF2(=CYkIMzLL5$f9RUAzh5a+i{_77Dhkjpo%DDAtcpD;){`BgC?n*y;Q
zWz(1@?kK)228LANh^*1LZ+Q5r8_v_JJm!h$HFy73hT5eYS60@&`RYmc@xlH5r-%Cp
zn|QxbxA7r%hL7hr>(u-ed}fdJODAKeOP&LA2R;R@V=84~DP#2pJjpB;=uUFya+D}8
zR`v#8^danO0z!{6l5#|dvtR$@R_)-)-lP3@8XiHl%B|*D*|{Dt4A<LW-6W%Ph(CAa
zpF68IU%75X;K6Y5VDD(}-k#gBmoFZF`RkwJKi~OA>BfG^F-H$VLs+)E&-V@wUp;&A
zz_m;MmS%4z!^NnGOedX{W8S@LLc6nx8d?}P+ntR4m30#Cls+;X=yA77L`WnU&d)C!
z@y-Z%&6S&SBkOcJYreRChu4h33cI+&uwc9_b6$o1+`+aqIdOPVQ|@)#*7fvwOWxi{
zkY^(PZGpXd(A^u2WN#g%&d(6iytCu~Dg0?v{Nv!nuXDqu{^i+uf7U4{VF!keVTHen
zViy7TjT&*(eI9KBHl~EZHmO+YZ|oPrjw9GxYRHi5r*<M)#%99kk-69-7E^;tbwV4A
zA+w?_(t`8`q*Bwka6#+_xj;^Jrl%TxJ56*pTDikA-e(+v6w#5)uh`0S|6u3-gQ$Nm
zS42m54fV&%F&*Z-h8+`-YOv`Q%y5M5?U}UO-X<UvV~jmAX)PPZ-(kRS)H^5u5BOUX
zSK0Qq-ba8&Qk3~nyed@ivO;`T7}ld?7xf#{G60yTi?3+%bjKScB|Rc>GO`Td3G$bm
z3LHXKJSg38xY|Yex+tbLYd<gX3x93#Sf)p~vp23v7T8l$*j5toK&PFNt3^3jP<iIA
z3m_RQ=1mA*cbkG$ddtPHNm|GQU=B|t$RxFUG|j+EOR=kcu#{OF<jIbq>0cSW;3Nf=
zi8O7%i%2L}MIa4L#`D6b=IA7%Qm)q|ys#GPK&zxw5n76Hh>gqNK4F1`E98<75jNI2
zPwQH-?;>GJ8+Felfu~c?Bp<EyOnRp8Kk(?_=<ApFy3h7r9(~=FfYJ@KT_u4GD`iiQ
zNJ7FNCp#c1m*9RWH`oeRV{eR|PMB|^Ia{{LKKX5htHA72(NA?+1o_0;x+kLK;Swp;
zU{&KUh$T&<4?=?eRpb0X+F4~?xYDYy!W?v6B3o_Ac#jQZg}KF3i{DPKPD$`nv?KYF
zmjH(nUIl~CsI8+V+w46*&>d%bAd7Hm#R*R@1ZYY&7jcX~hXy~__g;b){r|hxH4XUZ
z?7ISidQT^e1dIk|zwp1^Pv1(aaXBdZ`K*dxBs7s{WNiF`${-2sXM~Y2u`Ktg&y&gP
zYpB-l`lZzu%CfbP5$a%4R(Z<vHJfW)QeV*^gm}$Sm=v<eiqnC&<wQi2Z;Mi5Cr$xY
zJ%TAOT?IB>%{PFe;gKL!-IZvQ+7aH(deIpHdZS}+-F#YVvJ{?F{c<F@8~iJ#{!T*p
z_*wX8=XVzE@m0rnMDkJhzON56J?olyP<4p#F})b{G-#Vq3WS1J-8->}ECG1VBQ1T6
z5yjodA_W9viUgE95|I2-7|0(V2z1nBj*7cegC6%9wipC7h+?4j4$XR>OfPYC=dr&p
z*K(0HgZ<Vjz8lazR>suAPV`#pxJW=~UX{o@G52eEHuE6vxtm>E#HRo&FV*^@FiEjj
z>EZXVID|x`xXmzz@C8T72Gfetl+`$&Qc<3qT9WXJtr8Kq@o4`jV|{|CDv;8Fs(P_&
zCra8bSC-*ey|*oi4p0<)LvUW<`;_Zwl?RjyKba{uL~^^PGGw%1FAw0QSshi|@->Pk
zK@cUbCBf&409jLWmlMzuu*B+ShI&JBp4fdj(MzOR8<wNxNc|W|MMJCaUCd1fX-~5C
zN{D#b7NcpE9I>-Bn$Sn@dyKHkA2+L%VYdv-SMri)MJpo|t;C|^%@6S}z<XRWYCeW_
zSqhE+c_|RSXVxuTQa;bpZ<R%73e-c)5kvDGjMe=aqW$7<XnAv`u?u~aymS6AIf<jD
z*#rbw;mRIV*2ju4#n8u-{A~(mf_C!eiipVYo`GxV4<sH`Peq+|eqC<PUL5j>w~>6s
z&(2<BJGIX1DB-buF%6-NUe)LTWOEgc2o{yaiphJ)g@V@<MCNDFx0FD)dftoXZy~T>
z|A)mXhF_yw$ve^fA92j13JrR9B|}(>WOrL_Xi18zgpca`^J1939Y^7XnOqTqhw;^7
z?C_`-T!%+-RGm#AiA_r=T|@0$16H4U8;Bk6IOTMfuX%GHzpZ+4MO53WPeuWBdPt%O
zKfFLduAf%~18VElL447hdr911wneX&)7FQ1|8*-ng1bZ4hcj?XzLMG=I{w?Ho?aFC
z3~m!?ZTrR^YSPg%cldg7LUB?hEururKrO#;c>myuBDBSU#1JzdsyyN^Tf;6Bt{5eh
z@bW^LfqC{~fA7JQ{g5Xw8Y|s|Ypi&P&uH`I>V{Xk+BI#eE#EY?a7AdM=hfe!AUPZs
zNty>^0tEE|Ooq$|bS$DS{&hB8pvc-U=k<|=KO&POkQ8C-l5t5wU1iKK4ckiy`hopu
z9VmJLaotzG9)I3fQybK~kxFDrpc?R)eE6Pw5LNAlcCW88^k0ri2yF~J|2`gOd?-qT
zlW&w+r$Lh`+ZD)|)dq?5ZNlJSg2{0dXq=UqGeQNP@i67GYt``jgaP&)J!U>8I8WR_
zUJl@KU2z2w{4jo7_?ATR#!Kvu*95T6o;>`#9f4%_s{w%P*Ftn=^2T0x9=LnVwnMlk
z{|tee_%lMAksPz6(4nS*1>*-Lxi!gNTW441@-?+Amn0=pH&{wfb8^77)9ozAkcQdi
zo-}2#<&%M~lZF>z#0pYvEf-JC56RQv&``N098ukrv7i4y<IZdaaUEGKTKg;#dWR*l
zSH=71r=${dT&{JHjV?p&((Ec%=}y*e3upfw-5mlCjL$q@B)!_gIc-3akZBWc)aHs8
zS){~bh`CSl#_&?>|6!@jUy=cXq)}T(H>OM1x7V?li|B!|)$LM!K;|X3B`Q$q6EWRU
zXt&iq-}X<T!G`h}Q44#B22wpV{*_PglMr<Bn>@mgY5s6XzKRDDs_X^(0pYbgcxUPZ
z@%U0$Jcei2)Twx7hv2)>0*BOV99uX}3Q5}hxSVTt()FDz^_%@eHWxr_7CuBdTPH1)
zbRr6`0bgdJKDR2zy32MTwRVsE9-YTlc1$v`cKl=KRu})Pt*sp}@tCa)g7F94{d?zT
z7p3!7_PwCaS$hdjnN!~7>*0-N1Ww88r&4lJRhoH*v{xwl)FovRU>FS~->?pBErSv?
z4cqLRCuM1&ozf=R$@;e1D+ua0%4cUN>XpD`X?aA)gr`Fm_(Jf?5o125i@7hx2zRQ7
z(XevD7(atr1Z`PEKE_NMh-$DP5&gDw$~Yzo$*G8Hr`->8VpbIWg@B`JXp0ky+~6)l
zD=r{?3#Pg2J~tY_I^L^)wzc#<w~L62n{>~*_^C5>3%_}d_cojOz!5QVWK8G@qv`73
z(pB67@8Amf_At8-DsmD$+<34LLVy<HaChYKQUjwk$NRk`^2QPNn+k;2_U#gSy^MKA
zAP17i@G>GlySIJGkKOFWVr;MYnj~CO8yZSQjpxzO-2a`pMcTQ2^Y)$gty}HeH`_A0
z9r>TGAEYeI(i~-VR?+W6)b5I@_cT0U2CP*{Fw`%`9`kiUfECK}Q%7`|qVdnIH`p?r
zat5NV=7r<i2t_+}L!$|!oC!s<_$&QYtRxe@G+9*oUbQ#_5{lUJq->l3NDF*48fjtz
zNkeL5zB;FOIdb>odDud8++UnCyc+|i#Si=EW+Me_9Od+UpFQ<%Gi?JQl`y5w@(Zh`
zPGJWPH+7UXrg=v>U^l8W0*nv*+Ljlj#7;^4vwXgQDgWgZNGf(}BeefnK0Obmt+}yV
zoPjVo!U0|aWn7vz<s@52cHBAfe~4o5D)$#prfX0jfDp?|Iwj4>xNtCe1L!bGe$nqB
zJa2_`jC4^uItmnb3|l!_jlg_&M-r|H^Ua*7ZKn%DjG##@B>qEoT;*?Q*pAmZy)r-R
z3Kue_(_NG?EGav%b>{>RNLs`4WR?r>;g4N?Ad^hmV48b#GS)D`Q(jIU)LM=4YPFMv
zL<>IGr(8}%nBZa8n#!Wq+Zx9sSt4U$!X0u05id_fuQH|!DFiqV3HX8jvMp|!EJ8~+
zucc>9Cn<U4Es4wUB*R{XnhIZ}4=8|g*nM!upc4((txh>F%z<<KkP*0(X<fLuEz$*l
za$6;b;#dy!iuSi}cQ5dpf58!mI%MX;HUtLOL-hDDbS%b(wsl!%9lbRH7jw%n?w>ar
z)-G3eAr%8<(h#>a?H}g_C?IW&hhvux+PRh!V9FP}!Xcfn9NLb&(}7#TFS?y`DN*pl
zf>2gk8#oMLOmT`u1U3*&73TJ*4XfwN?L%>;d}in(0AN6$zpjIpq?$RB+VE7gAwa{B
zuFj+QTd_YuSUwIm4ct~4qRYPDlACLoFEH_oqIliDwWE`!g^62-WA~DHB**uMlf?kx
zGGmbm4p9{OYblBx8Qlxf{9XU<Z)hvfD8Q6Yi`-Deg~Rv&0&M=Vm7FK#-0V8GeJTt_
zen^UxU}PPsh@m5v$`ih9eR`4j9SCLYxmg<R)6!(P<VNFt!B8lH0xqW6!GkJF2&CuA
z3#o!VjPi|(F*%4)VlpIf5go7`pxeSiRyI!9h}3f+7wM%B2wIw(`;W4X&)nm%qici-
zo>D(>AyDZMSP7aM$~RAD$)z8OsEGq{-Nj!ikm=0d{1%uVI4&jTnIka)diJZx@oFzy
zrHnhgwWz{q_)5BEEzu^D+OX^cfeaUjbW&a;Iz&^dBO8rqeNbX5TVB^%-C}P#O+>R;
zulgk-8j*=og)6cmzdX>s*C=71x$ARTg;OQPBlQg7Q?|L-roJe00%&K4jy;Kg8YYhc
zeeR6k5M>(kb3(YpMTji~&gEGF2wCIRi?Lt9s06E4u$jbVS;NjB`$yA!TnrQ4^bV%i
zwgzoBs7d?&dypB+c{Gw7hM8w$<Dc0{KC=_ydJR2jDXF9*+y?g9N&_4H9f}60yz$5V
zOa0(;Q~f~{$F|4__pB+~^T}lBMnWk^o3+ub8I4V=?JkYO>>YuSK(rB%9Nd_L;$*U*
zvFPKB8RDx9eJuBy{w++1_zw!c2KfYbr;!!pGX5`taRngX#9=Kp#3{{+v@#ISr^VB-
zt*Hq42-#kmXerera3znd0+-MJW*01ztF|o>GJ<$5(Z>E}M?gs7bpH+uQLEzOItiKs
zB{Q9}IF<9+jHt?JQfdWSK@V+diJm@OUJMJ=SWxt+uy=?CuF$S6alZ8`D^3Joj26RO
z6a|f1lCR4Ob=3EtqU~wDccQy`V03696+dGVA%(?TH`!53^oXcFOzsW}^7!34yMAni
z9~Kv~C}2xijj-39)fBNLH9Vh9Vrd}~A|i>wXhj(CtMg0ppqTm|gzp$BVPyfTcFt%<
zC}}CwVSj>34wOS_$AQ|5_Zis1`iWuwL?*j+vlTC4@kZ}1?74t*-??eA0SFKlY7L{@
zwH~-vY*71Eh%{RETWrtO=9Umt9$SOS@kY@IdOy)EC2!(MsaFAZH>-EzWISZ8H9Ofo
z6J}Vn=hSayRv?OD%xr9_TBm(?e3TE;eSBamxRHc2W6cCJ&2hrKA1kdGuRm(l3ZSo*
z<dRB+*R+3%?r|*>XvdF%CA9qQ<HKE`2rK^H3#d$^B)g8Z=y=RvQdIHK9dG`<ShEb?
z9zzoI|Ms@BF;p4I;wlQQ+UyHNH|45u&|uB)14Aw<p@4;juI+@@GnB=e*My{~SQy*}
z$VltR*y8bUFvsy|q&Uc(Zc^tVUS-j`)(v@ko9q;YAs7Q4I$1H=_~*?^%}QeGOx`T#
z$bQF%#t@_e_uEwf5nu0!CGM27fu*)Qo}ExH&$$>sAhpu_4Q34trF@DAwy`BNdJanl
zXe^dE22S0ULU7m<M?XV^p0cz9@al#L^l^9gAi~G<l@~%ej4k6Qj1GF^7{fRD>FZqB
z3;$+-L{o;uP`(k0FrMerA|?c<(=8AmW7x9&vQnH~R90rCJ|}ws1XyGgL0PeUixGeW
zz~o}VT<c(#V;0KRd(QpHH^Xg&43-5A)o|tdGI}d_6~T3^H5ck8*op{JwGAP<>*yga
zE2(RsnV;Z+$>q0MMYMu5gJJUEz?<j}4r|1~PR9Tr91SfC?L7}Eu@#c9CBwC``Y{49
zW;_|U<8d;e!e+K|_L6JL@>{T_qKb(zNGr~i$P-(T^-r8IebMYh72@I}!OCk)FK&bA
z+i&t2@hLQlnDvYEEJB9QmA)pYr;e4if}zXlvp%HO&sCl0DiHK@D>yTx8*!ZI&{kYy
zJc-$Y)Te>rV%*90MXKJ)n?iXjR;s?Lx^k6Zv8&ue@r9$^I%$d+&ah&}hXoMocrn3>
ziqRCE`f5R%KW)_@MKjWs8?oB@YDh{6oPmVzj|F8#xgg1=MeK80s}C1!;?xkjTu-gu
zhm@`y1$VLs0$eOXFD5n`OY<V|8rf5X%Qdp46_UcxW*uLAuZqqYbmLGOm31BGp>nO}
zf`qCkBt;<+txI3+N(H0y2`v|Jn`K+K+IRi@QOt-!hlx&F42trTTc^J;DBxr<b8?xW
zs6KIb^<oq{yV(vB7Q4GIn0MA8g)ps1)gPkhF&9)KH?_~l6L=N1$Iov5yQIIpv$I)o
zCRuOpgck-115ZD)0^|~4z`i?<;0!!N=`A=YD=8Uc)h)5Pnyj%*myL$jD65qIyrL3u
ziVgR_Ec!CskQ9XQ!Rca#Ku&j0-18;gTFKQV<S`kYl;eV%6rxrR9-!(=P_^gh;BApL
zTtloA#R7?Lff~d4PwhE#scD+g?1Azoa{~-V0U|#(@)asq9V>;SrGYSN*0b^Xf#FkD
z%ALsE&xQW#k!MWb=p#}%F8BEJIxKER4*lAPBlH+=EZK?|(Rv}^%BB<VLJ>nq<3fd$
z(Vjc?Q}6;11tFin&2+2<<-d<V<4wwb@qZ5dWm;&3Y0&2kA#k)nh*}y}UIG{q0WaT?
z2oQeeF)h`@?BB)xKVncFiUYD>yx^jxpRl@*7WKkUNB~n?L$0lB9|8vw^2Soqir?`0
z<gDPJ)33x+Xx#S{Ahe|6Qp)_zL8}Qm@t&bnU-_0tB-)K?GK`%E2+5AN4m?p9_b7i`
zj=*nxoL0iU$*ss#MXjduzZ^$$2oq)<d!;2oiiA`0s550RnWk%iDj#Hr`Oxd~FzYB2
zQY_(u_IkL3G^$(7EZ+9ylnzIAj^kC78B#ShLG2Tv`L>T|SKaMyTONcxBfD&Qed9th
zXDNf5`M``bxnD(IgA9n*ldV<L{k1C=1;)c8V@l&Z+OCVwZrTuBXLg^uv4zpwv<x;(
z`7&0K76{kTXE(#d+?7Pz1*m+P3Xq6LGm^XX+;|<Qmqg|zG7%H8;0x7ERe_<ssTU<E
zs8S3p-`47>vKz%CfzH03OpF$!WS6F&B~`(~Qtq-M7d=9^Zr<GW`=hz^+;LcNWSFfQ
z1xi^G*TtiSV{z`h7b>t;Jo@1?V%0}Ays|HnS+H8vB%@`8A?Q$ZMK%@D8C}**hN0U|
zc1Q-vGUbk(^Gnw5OtlqJ^pfI;y9nLce{0y-uq)UbUg1wJ<l7xDS6G4(J;KBnitTNP
z$8nc8JZV-mdt_>wdR#cpP(wG~)mRJHlb4zUNMO{!{D40|&&syIur@1EZ@@Czp(P`$
z0&Sb#UYT0%)Qu;Aq+~t3WvxRh!c<l$Nw(FC#;R+pQYAN(3e`^dg<hqG*kzHPnluw1
z=QI{Bi%Z{cS#?r-ic6>&Wc!H0td#3>U-5=gZe%#Th(P~E#W`E#XQASZB$9;N=W8d6
zY*wOqNPRj<pm)?;6g5k$#K_W+2UwVV<9mh_+utVugz57k!)E;t1NSV<pR@%e;l!M_
z+&PeSq(}E(=t66oy5k}OQllYtthBVxPr-P;tG3-?F+Ov>zVo$+-G52wcEjC6G?;Gb
z7ondYyQ}~E=B{F|)J&T#wP1d^a&Y=i#4zs!i80s=+3b{7Af7VmGbC#347zyCku~Gu
zML%u$8E&`{7drUn+R0_d(d@L2-dEqVl+uUK?^?6_wRG~ch{Qi-KjZJ8lX*!S?p(5E
zTmD_ywkB&daW2X0oRdsqIz#L$-?JTt&?f!(u3I%~vl<PELD8BCo;b&>8+0)CmEv&}
z-K%LkE|-riV)!;7OQJrcm~1X4-1k{<^|(6;PlAENic+WyGPT5b*uCSveH^?Ft33@8
zy|QWo@fRzR^l|!qoV10KLPytlQswk51|>w3O}lbDR+OftX+-{ebuQ)V!KXZtho2I@
zZnaAzAtSI2v0>(y#o)J4{>{e~dBp1Otiqcm)Nmv2_L3~JK*TEv<Y=N_rsdT~TX=)3
zTo96C>n)2~8+R<RbY^7FR+aqleB7^cUaj0HEhzH<vy2iqq3I{Leq^x`Bf)C>(U!%{
zH+M}Xq3|-%#0?QrEI2<=Ovu$mCBv28ot$>vAK&*R&u3~1ilu$-#&47OcYa6Ghl>7H
z`*))WJeW>_{HiAdHjB=ZWi}pjPG(k<nl2a*p@NR$)(J%Tl8-TV;Ltn+;e0aBhjlr*
z_FdBmOdMDHm;0}z*EOAb>3mJE%QE;CUuZmcoY%>AL$&;GoodvV6NM#yOH7;y_OWv<
z&kKZl(rPDBav~JQ6GsTsq#URvPN0g)6Zzl8Nn1U%j(eJ6LT!j&L*x~ZH7_;9(lnxs
z6|_lU>R5%unu;XOJ439~SqeUE;vQRA_l!FA*N_{TX8fn-%-zfz?;2N#^Si1{G*+op
zDA;mS?w40K;MnL0i6&CsBs}u2S5Uw>{UDefF@|IDO*y~RaC>T@62o*_&Z;>)9kd~$
z_3g-E3#yQIpQ<9`cf@HchIyrNKQxE*^C|8EjZ_gdp5x~V#pc<)c*;KO8b({!eu%wg
zf~wQ!`9wiaP5D`~?6+=SZ{1x_$*SA=+l`c8S^ER0RlX?)3q+)a&#&7FS;OJ$tQ--k
z!>#09ab4q!K&?2R8}O%Nt9Ng<p;CrLjl~^(u?z!<mi=II1Y#CX1_H<E3I4if&yWV(
z5?)D|CK4TvpZxLYsJ0JZbVq-g&sXiinzg=j-L)1d@ipsx=Vooe4`tBymT(Ih?_`Q(
zdRZ-R4Z|UpB_9K9RO484ckC~n_TBNQIIyx*xgG}J`&467qIGwITN(pYeRSkcrSU$f
zKqU_6LILW)My8CVHpDsxtTDb~1JyM)@L&U1*@hx~_?RB2OXUqMg!0}JC=aDi5|<$%
zz?VW-7h{Dj)?udp?m@QU=x0$38fd&BiWRG7&BUgzr5kwnBTk1(qJ#_<^)R8vR?q+4
zb$|EVkgy=;!YI@bHSl(@lLAAN(6C&Wq*3dHFCP16Qd+bd0yvTwSM?>V8?JueZTYbz
zdspvSQzz;A<Ld1oT(Oo!l|=q27&hDjI*~}y7aHnMDrbhOI}Wci7#ZPd?#&IB9xrm~
zok<E3a8v8MF_&1te#oAO+iEm<qgIu4gaNuA{sNdyH^OUfMu>pkr>V>0Wb$k=F5SD?
z%a;ca+)U<_hB4GqYK-I+9Y>1&BjK)ZN_T$~C8|Ly+sbqd5%5K)q4;znz%lM9qC#)&
zB`iU!p*~GkP*j9|5B2Cnv#mTVt5}9GnvRd@1K58R*D}2;nk%2<4GGL5iSqX6r1Iz!
z?#{FC9y5Im-}<n`4i&LAyAEH3bj?Uh(|rg-0@Q1N=FX8JpC;VVTIKXo*(S}*Do3LQ
zj6|2(K^1FshN3D85_@U3G<(vmuInrK6t=+8n?4An=lJCa72X|_9CY)lC$1Hf<I$xP
zi$_{9=4>M39eV5&*AMQe;VHk&xH7i`itiLi1~ecFmFU#f0;z#j$jU``?(LAP4;n`)
z8W{}q<L&LI``_-raDs1vymjh`;uLU~;ILrMFv2Rw!%G4&w?i|ynJ+Vm<`);UE;MCZ
zjc)b&Q&<mx0J*--%MoL3Bn`tOdAeS=PMAPp@t5(N+zDAh5*^Yd(b=d_2_4x3pcajb
z_2g0ot9um)iF1o?G*FEObt|4M{s1sA6T%R)z%c0$_Ko0sr$Iu&$wRzU#I<F8qL6do
z1;!bm?&d{h5V7F0cZ50F6-LG~wd%#-0E}wLS$7SG7De6XRic21LK*=i*dl28-0Wh8
zz!Q3w6b`}ip`gG``mYIhg#n?yxFyUoH)_Xj0Woy=#sS?m*GP#v6LUm>UB|hUM3dnK
z9OOxPP(5&!MP`XW;(E~WS+D?r9PP_KxkJShi{Y{e3=Af(O2Y33e(4Bm!2^=?TtwaC
z<Xy64w`+Cm*Yh%aLX-oX`X%6k&$=ScR`q)oRcsL*$||E_mzZc}yR#?e3(i6e-y2}v
z8+;;F$7c|o=Q9nQOs@*mtmK7ccBoZ1iH}7q$EYNX6Zl36gqa$pXQUugIWxmcv6h8%
zQ$IE$i9{SY7YLN-wHE0#>OXDf(?!zLdz!A#G=9urU%xbZTq_@2^g}fn3v|3zM@^C&
zqrs2d-8PKJQqFBD&^#2Tl?tO?Oo|d3#KTfXNm-haLDS2rJE(G{;?5HJGGg#rLSgB?
zh+uZ@mb088<!d&?(FD#K5?(%@H&m`BG~X<*sP1wW$oUwEvj)|`f}4AjP_7HYobV%l
zEDfXx3?m0!EAhy&PD6fLbXJUi319@gucz#zdvd8W)GT|5v}fnGhHsDpI?8_#<dsOy
zh_Y?a9he3;D^eGDifN^Tbt1Yu=$Mo6`Y25imzBE`9Wgb6+tUIVTRIxMKer@-F@lJ0
z22L;etL2GD^=tUp+*x6nlFSS`S4lG!2_Qs9mpekKMYspUJC0@|Qv7G#nY)uJ3Qp0F
zu}<Ti&BIGiw#N*zcsqxhY!ef`_BY)Kpr`969c9OcSK9&kCF{L<(mi_i&HmG#s0<B%
z7QuR_j>|A|LlLdw2MHX4@v5eQ9GnZrVMD|RlSgU<S{V}J<YG+tqh(4YFKis^O(#Ij
zOPu?5SAM8=6g^1(WTt7!AgOq;h7&iu6sUF50B<;%rRbq&^luNMv7_kVBr2;o)x=KX
zioYhjJQD;c)p_y(g=nOl7wrK1S>$86w(|LsH(-W@4n$t~h^7W{4_YC|$N!?D@F>4z
z7TXx0ckbl<DB6n~Frr9H<|whK>aY<FJdv@3`-5Dj(EK5Hk;2IX+3Q^LV`O3jh`o)<
zW2{Hrf~yEls_9G`S}oJp`fLKl8x}x3kB*;1>Y;lf79R^==aGqadqE23;he=9Me>&W
zx{9+Zw2IS8r_R&c2;wLLR7@NVs+8s!a@>XzHgg*`NB!f5X!<!LY5#Ee?5QD2d29nY
z5}Kw{jHdHTtaU!upCPg5RfKG6AyqoY=g$t0d=##%m${Odjo^2$NTY4ratlrKGB}-N
zXqr-)d^Efo=C%&U1Udqfm2*aon=8ESl`kjej4LlN(O5<)Dj&FM&<zh?v)veisO-CG
zL4FH0`v5XWNYBqc-GLvBCJx8oCj&`T`Br=ry1Zja+Kl#r(^FwdB6KdITBmNPmujB(
zA;*eHF{B*@C`=Q%8YHYU-XYH|8H?s`6GVQRsDzpUVL^4qwFOP?#`0{8Vgq^{6%+^3
zFw<-SZ|A;oQqGym&v{z1K+DV%lA$`0`wFxt!<*=!md7L|N@7XH%!z92M%lC(7TnTY
zU(md(#4nbE$`^a$X{Td-6#>CfQ8NEQRV0Xex>=p<Rly)1ts1L)G_n4w5gag{imP<#
zv`j<2GOJndC1IA4x-;uTV9k!7$&o#D9hi;d&gWfe)2-xb7x-^h=Q6peZ}<f<c}HmB
zG<R3Wz*CJF(+FpYtb2)kf8%Rp;l^d@Yvms%^G-kl6kCwgp?2z@8lP;i^~P@I{{6`Y
z{D$t|8~b?p6o0hvc!X1Q7JkX>0e^K;W&bsPV^*8|)%fI{x%>~tTK8E@BR)Pvi+m;W
zNfHyIIsBT>z??eK8i-BWSB-5_C3;n`;wfPIKI@Z|`uY86ZKAU_%gZX5j-Z358zKfq
zddd#G%8dR1N2zwHt&@d2g;qPN#md(-79nk9668WPRsx7EE^ekUGjHu<*%qS1dwU49
zeIzRCWM)AkJ>0{H#+mgb&}h!yWnN9`OZ$EHBKj!%j}m&!zfv(H@lp>6OuQO;E)PsM
z)?Vyrw7>*Q#6ck&(uo?dlG*{~^$U)0_~4se&E@V$2ePPJ@<+3mZ5<spBPc&@)t%Lw
z$+`pEfkH_+7i>n8BW0|bL8wFJz0P1ZvkF^?Tv;U+WsRu4$Y%r5Gcu)S*(~+yMQetd
z8u?%l?mmf2+qf8Y<)sZl0w@fALLkU(Ut+8|kvlAt;!HA44iESJBu?WGhuYi6Q5$nW
ziX`8)KVxK@3aB4w+_qnv;{VBxzdky8j-b}La;-1AaNl(Cq~;?4${En@@ad61CpaiZ
zD0!Vs>TzK^JDfF~1|kLQ?C4pQL=s;>ywS*sq-P|xtv$bT8l+p-7X=jFt>$jF`jCL7
zk#j&fbS)p#y8C5z?3mW(|NKAx5C4bkzT!$~hne*FPvcGSwav$x(7Kx)y5T;AhrX=(
zlU8<r@1Mrj=zsnn|NH;@|MXw}Jz_K^BB|QVo;zvTksZ^JFQbP4H#9tQvKz*^m=(L(
zZ*Kp8|KAU@t=sN@?l(ir|M35$im;n~o{gsG+2O0`r~gOx^<q@IZ(Z(YpWXdmg<t-U
z{~L7wt=Avv;vE65(2sV*&H8_z9Zd%LrDIC&9xM7z&))r~F&X*hlL>dw&DUum?sR|l
zxf`8*fX8Dz!E)&Q`kY@Y`_0{`87!IX<31r~tJftM`EPDUO`gKFi@ci2P@F7i>ArTG
zZNh~9<NwPI)k%D_$%PI{$OSh$(lcH6zllfqT*_a%qmX-drz7CO1Vk<leK(k2Wq<uY
z{j*ys_g3SR?|<89e1djcLMX#hr22?pn!Fh=dARZOZ{1&xf)9rf^sFAr?VC5-cW>St
zNub0SyPFSvWoW{Ne)37q#4PYg;GVk+XKPEVwluRZzd}6HkpQvV;}-hO{$2LO&8OqY
zZ!j5cHM4Cvf}73X$`!jDI@wT%I&%)>HoPQmtv*i=i$w4#$JLeV&g^7qcq9Jm4*l`5
zaLA1-579;|G<?rdikn{JK-HSR_gJOvR~)WdgQX*u{(kjAOWUqJZobW$Ll-xB@6n4J
zUwHuIhVMIu=|rx77~}Uo^hiqWtnV8>5SItC949mw;&H>N^p9@n$-LRQT_xq&r$ycm
z&6p=qq2-oq*=&S><7U?Ws&+;Yc-+dKI*tGP-8kTP&8hKa`T)){d3za)PAYq)V%1F5
zprvcld{&U>P9|>($E<ub_331?n|*qFW%Tro6>omf1lP-9OS4Twpq&yhnQUNS?|d!f
z7oohxWLWku4dNkv8mdpwOKhHLm>G*zh3!zYcoSfOPG5+EYw0V#?<9!D7&cV=>X<u@
zi<1-nu++U2{AJxp$qo7Jrqfj~8GMK`0l%n&2y-Ou=H-|<ON>8AOMl=sl!(YAj0V}+
z!_ziOTwL$#7O;5dic!Q}UNsUgpGu~Lrc5psD~U2t)6t1FX{o)hie!1fK0IKly7ZEf
z_SWa2OjJ}b$V6QKt+srtU5=6D1zV|pW8=O%ej5l%AYvM_m;!k|=Su)gbA5NC!Yw3F
zflXWWh61X>$mb3`;`6HPP|my7Oe*PLv54qdF)ZF7XR|y_3R9XV6vZN(5aO-GFeU@5
zSO|Y|VK!_ALMdvNRqvil#14!vG7vh<-QFM#%gMzB@}TDx#SjLHm|CF>$}|vDljvDv
z*o)5sDd$zNHVmk<qoqZeAgtX+?h(MCWI$!Gq9&mjg;tL#W}VUGNB2(Nnas|1igEkp
zp@fRPDo%FXitHS+B5xZ$o~{IL?!1I5q@{Y}A2bafYhln?=D4$YOHD1Cn2;*g-3Ew#
zI!0Y8_u`IQke!R2fBMOXOaIe5#;kQ0_-QePMX~GjE7znP{L{NIxqLcJgWmuU>w4{+
z&qu=>^ZYF8KJ>n(bJzDfM`;Ih+KFkna;od>lA(kObqgBwTaN|*qi-Q5A9FDHC})=B
zDe`g4!$X|r!>Vw+;X)N#l7XtP_WJJ~mx^(=ln215p|&<y4=zyjOv1^C_(v)9G*-c_
zKlk*a$X<_$CAk^YWr3EdiiX>>uE0q|LnnlJF$+V#iDAn@r~<k*@F(?Md|~YEJaUR?
z9`R_HG}d~1kEfT0UVr~fj3H9~<zd4SM%Qoi6=Sij)Izj$IZh=H#9N(@J*LGE5%IVy
zm8Z|M-kn=tbgiZTc4Qf7z|_+9#*ym|=|UZ&eTi#BSYvDyL+BGt*<>??d$lp15J23%
zadH(2hmSZpcp5D!x73$YPB^y!PFS6}TGhD#-xM)3arp#eP3$*NR1;0Uq<q)&C@zeV
zvmHiA9aDKF!k+OjW;UeJme;+;!oB1!Zf`?UK8ki#P^h_}8omSqwqG5)>=%J1oxBI=
z8T~mJzzeyW=051px2e1fuO%+Zi&F0_6FfplwGSY*SLygGWVw8j@CaernXFGtL0`%q
zW?Q<Y)J5HfX;jBglsY%CoUlC0CsgzBfuXzEe1`af+JBs2ZRFW9(!r4}e7su9oTO79
z{OP*o&{`kYsqaU+b=yO7#w^5cwb5GFt^B?l?l9R;?xn0i=u?)_Op!_FYx_(k0YPh6
z{e{4dUDvm6-)UX3!pZ@5J&J2!h0<BVS)n`J{j7EE&eAc*-HwV;*C~DQO#J5aFRrEn
z-z{E%^A@EK7I1M$U&ik?kZQ8j)tbIm^3`mMi43AOZA574aKUssop)=e4z9ARVBAS4
z(-xwg@T+zTIf5PMl_0g&KX7HY_O_MmS?V6K&nw1y#h7F1kV(OfXGs)xKz$I#NJbQe
zUs@f^DEgYzX>j6F`_v1i@XkW|V8|-DrI)O_C2Q6T(YyPBtW$!v1^vbiz+<%rbPvn9
zR%nX663AtAEgd4_`+eOpt{Sf(E!>H!?r(dwl|?yc=;Yvmy(NuBfG1D35T@K`2Wco>
zfDe_=gg~q1DI@IR;(X#W3X<{Ji#fC5%v-LndX%peZ~(*c=>h0Ofy`^2EKPJxcLsy5
z99X(E$dvA=LZ5ohv?GtF5`jSyb8a{+4KGs$wqTSNdQdj)dU#di(}C8sIo)I0fnY)+
zjx{Xo(!^GTpU+Jw40+B`e+WLjqQ5v!^6LH|>obi}QPpZ4g@APp-Ox@+VRRfu;*0bs
z=jw_+XWngnt)3iL8ZJg-j#9uYCZ~E4RZD$q+tdlhvye}TMaY;6bdD?WiWTII8EVa_
z{OzfJP;kSqrVB)*oxtF)t@Xe#8S{Pb@`z~5^u6SWE{!`JR&5>@dBr05KHXt-qS6)p
zN`sZdW6!F)>sSHK3<(t-7URW8J29aZJ+P2t%O|TyE;`FZ7@<oN(zQt4A02ro30bNy
z!B|gbE$(lL?S<bn4P;c@RiEf2nP<83_ULxLg7}wj<aN})=3>5f-}S3`-FM2Wt3xlQ
z>u6H15!GA-pi|TR<uGX!hVA$Aanc6$qE-nnawCD_HC=x;qU%gs%9{ivUD`oDwJ%<M
zi!qSa5!-yyWn}2phqKhk+fb03FG*J>Nk+HMGSSurN8CuJ+WA4v^RuNnxo2)4t4Y7~
z$$d3>K?_h``FSf+Sr;~j`H9n-*O1tr4*`>A>&CH)(A28wp{|3ekGJQnI7d|H8;O#e
z4a5$a$Z&P>%|yf)KSE8(W~J2Hg1!vW3bj#GzSz<My>o=js3AOF1OYTf5^CfsCGzi}
zLjGM8$iKI$_jl3FHlhtPP2xQogs(DW*FR-@buod=8P_G|kkm-<iQircbZhb1&81K_
zVo1umDQ=PP`{`u<aI(PFcUAXJ{60mirPtM|fA!m1f_>@b=Y%Y|;>Brw#2jx??c#fa
zv#DSv1q0#C1jUR5Gtx!D-xGl(X7sF7*$`KSS$Go!<(?2qPi<!2q^Kf1t46JGGFb5&
z)rga<DD9Y=wbXBJ=#NFbb^ayW0#;1dV)qJmHD#S%k5lNbtMbgvTtTzOlPpvZ4gh{c
z%?PYjvecKKvA;Cu&vLSTX<^Iev4D|V9M-LyH#Nsw?St^91Gw9|mzT^iC%sNlYypXA
zS`gre=zWw~UV6O@LY{=Wac+-^HH(K7j7L7Fjo3O`MT1gvrlG5rc){IbZjATy3|Vvr
zxuS=6v`))e)TM<XPu-rw8agV+?7iYz6BC1x(2&V-m)pJRf7Ref1hC+?I$0phoFDRF
z9yeL+Jnvh`IcGIBg_t;aVWqSd;+w*16*#6?An?!6D1vTch26Bgl$MY@aoWVGf%;dD
zvWamhOXiLD6SpS10G1<ZXCj701ma;!G3ywBT%4Y|k4bihW&C5qFHoFaY}kDU8EHm@
zUCA2kEjiHR0kL7Q9@y_Ta(69Bo&Yr138i_ibUB*lkP;M+4lgt4-j7BT7;-6^U?ORy
zODqV+Vw_Z}*}@B2<W#~uS(scfhD#ji6DGQ9RIMa>SpYhcmBxr5q3hE-h?!S-vgp4q
z<{uJfeZx9vOY63_Zbn6cez6mJ-8aPHd}n9x$A!QK*^H$m`#<Q3d_3VNcd9$x94)(C
zEjph!uJ`svQz^l!-#}}1EDppo%%@RV$^g==(c;yIhpyl7X0jC%{w~cUP#^c<omM9E
zxHokCN8{z)vsZ`Nvx5is;hTLlnE<*=O1WqY3B9L3#g{NVEm_h|3)opTGGFIe>nw_k
zSpDTAkL002-iLPp@r-bHFN6Hd$Zr2f4Ep@b{{wX67$G`~|IE_ge(`_!wR=1&emZ)K
z${(D!73Fg5TaH!d7tHNNaTXS;_O%1YiHg&?WH7b-)#kMD5|ukqn-ijdR50ac{o0X5
z_r?CBgJ(}Ms82rm#J;m9^+JJ<cJSbD`nkRP_xBGEyWi}8*M)U<IvId=ivDd#Eyxb%
zNNgO3Ohe;1{+5F{+`s=~{|JM4?+EtI6S?yH&mcYHg3}<OvD+M+HMiNSwav7O!;9Pa
z%9C<@FiHB~!<|A%AO8haQS5*S9zDcHiBD$)gvjk0J`?)mp$iOP>G1tmK7Ri-4xl4d
zLNSkJp0y1+QWRc)3}tZ+P41GHndj`WOT2@jy5bdsRg@p;O|OzV%gFQ;)PK!{Ucs0<
zoWXq&!i$-V^okkK8e~a)CqtUk?Oh#@q>9z2cQ0uxa`i$@)RWm+K88Sw4p9m$z<F40
z;|ZY;)E?2PbBJv9vO9@x1d)<}z;F}bk376)de72edBdVbS@}UGtEoB;j+b@lnyg#i
zBSG;uK2{rPz$9GbW7>KI4-`imQNv!JX%!Fr@@(zxJphg|zSVJjS_#3Q+BL5+H7m@G
z0aK(2310bI4O(s4JmyX~2Ht>%2kN*UtQxZ-77}f?UrwRUCPO8RTj=2Z?6Nj)Ps%>r
z0|Q<qzaY+Dm^cZ79xVbuXtJ8>n&Wo#a*YAw7r^f$PFj#si48}Pn1|~=Yk;%v9%%;$
zhm^@dzK~RxlnbDv{P)I62@9<FA$_p5LKnWeMXk0)kS$hlu~lDC@j~xS**Rm5-?-Bx
z-PoQQ8?%%6-fkVO&`K#51<ci>)4|yRcfu%_qnXdDk1ti}I_pYj0>5CL-H^|(`pybv
z8H|PP52bxbuGNrnwXF(<6A^rQHWot#$LGspGtCF*Qi(?G*T-?k1paW!X0~OBR=027
zzS+KYyBT5?F{ic+oFSO3hP<QgcH{>+tU9}ZtfEQo@dx$LXx+WN<VOSA(m2&Aun3v%
ziQsoJ*ht1FDkf?KYixU#ioygWsg@I5LmhL*O7(s%!|jQo{N;<sVy59yu57i|jvdA&
zF`22g9&(9(GtSdj=a(7T&9x=Kv2=j-!c=>}vH^w)*v#xw2DExrR(&fcB7&)LB}(=9
zqgsV5TYl6odw!Bt&U`ktqX=^M@G({$3x+V&AFHJuv0|Z2e_UR{mIoq>h}MenImW)g
z#a+AwV2gr!8Mo6Ib2+`$GFiFfZO4e2xb{bDX%p>Mc5fhs01(pZ^Q*$}go4%BBnkV;
z<}0<=>MN=bLJCF1m>jn3jeCX1C#r}P!cwnzBO+!QDDkDTV+NQA@_eP4r>^z-!`bWv
zQ<eGzGzU0n_j+^<Q|kjyx<Me}3aNKbZw)Yq%q9{@<+7M3{*_NQ^!&kC{UHNDN}{)N
z3*qxopjJy-$EDEK%ym5YWFtBcc-vo006!=kpMd(0aM%g+9>ZtM0r1Hu?^>bfvj6(3
z-lb+9%L1{sueBFc#7#g36Z+(ek2Uzc4Lhsu*W>TayYb4$9>okqBc&qCc*IWPQb%h4
z_H4i)ql^_GtTtr_{#DJS)~{Z22`h>bQo6=c4MIf8py&_t2=}yxP*F-kxK*;~`HfTT
z@?^OMwMUbuv*9F^O&?6u+#Ti^-5i1C2u_DDKsiS=@NCXYVK1qBTv^Q*;qE<kWWkLf
z{2Tw0?ZUrQ^Tj`fF7YqMu}E5eKE9N}(@MPQ0bEq=*8xI8^Yuv)+u%OU?4NPLL0L8X
zz;^}a1S53Ii`rx%D_<aL?FP(Yf!TkH!D!t)UvyD#5P>I3s}~%<Fg6C=TTFmmZ(XLC
z!(~oTE9y&mQm_<gL{11z8w?DE)ozQ3AVG-$6jvCxyi)gVkYryTXh<M(2&5T(|FW*$
z@$B{5h=R40u}7lE7(GO3kZ)<Cw%BpH%UV`hTPn~azft`t@wo7T!^y~?XryQ3iAfdT
z8w#-#W2U&Zh;9NWiRw)g-Ez{UPBgrkK<FhmuY@W}X>Du25-=vlG!;}Ngt!j`lRB+4
znp{`Zd!2mMcFG1Ykix5UNhL6l^O{w_Z$pfy5H~PhBS)E63>0($hw^YgtMNB<Tf=ym
z^_jfw)dRem%u35*)}hE+7K3REujsB$=91CCM6v2X*W@9tN&?j-TS}q5@KUIgi3)<8
zhyc`~jH9?^=7vxpu&#zk?%eFEfYN1cOFrJY-Bl2?=vjiN`?D?L6=t$Tp1P(bZI$^e
zyOxCv47PWr+0OIeD=m9HC!^)_-j)3*SHHR+EjZ}Q?R?)`J09^Vx?U@HuWNJPkK^3$
zo0nZUSB?kQPVee|>}I;M9|#KX=|``%tJep7`#t@*oACJiUiQ9q*3wSB_w4)nu4H{K
z=MaqEPd_aW{PmE>Y*&H7db&OutK7S?pO&7{U8vuV8742VpKk9xW@wQV-e;*kesDQH
zWO<wJ>16W#){ViX<CtZ?Ej4eN=*K;hzuLb8H~p%&)DIcSgJL{sW%m{z#!GH>LsI%`
ze$sNX!~WsX2le_HM2mU%Y?e>|a{ia$6^trk@gK*i{uW%yv#6{2&wHA%6UQL3fBG3L
zqW8W|R`L~g^4=5ro+h57T*)rp(?mKc&#vTf@8f{%<h=~}Jx!wBxq?f)rwKdRB7lKx
zP(Ise*4w%!*pRhf;gNN6(X&%`RNenhPMaUMJHPncyF>r=<btJZoY)hcBF*aqWOfDF
zl^OuxSSiu?7^Z;37ywH<&<F(#Jg-#asCY`f!1@8=!}|{D2YTXU0|mO`o^tf~I0e4{
z>t7q^@16LD5fMlq`v^AfWwkzx?e_}*^GZUJJ`Vq4O;+|%{bhI+MgPuJGVI=0y@+n2
zK1@Yx|78Cn!+wYBOpvAP-LN>_rAWkrTFUq;Uraga$CQAO4YkF9AcLTw>FPS#;tjfM
z+5y0}*~t*97-Zu6j)sT#5rw4cfP9~pJ4eRzU~H_$`D;YRR8D2?*<RCzpqnOe%yaR4
zs9x{H^jys5VJG;GEsv~Bqt@7IjJE33>V^EL3xbBT?KzF2<|z!|2l=dGj0rb^Tdi&h
z1WvCwU5bA;9p-)0jnIB5uzi*rH$QK<y_$^k{=`tmc~2bv@v%j1xo__7?jo*IJ`Tm$
zX(@z^h*q{|b*3=1pjU~7sNwAiyD_xP=(3xV$CtD`Mffsrce8pUChvAS9kFP+p~<jf
z1`%nan^j~|iURW`bWCgv?ikai8sfHkk0QOiM}qvU3zt~eE9~7xnc(ufFDz6!f5@1*
znxdB|=MN3y{UcTLPR$ab8*$uY34jB1(@QH+-q9kI-QdySIl`}PK@)CzSdkCX;D5PF
zYuOEgbsv?UxbD8zH&O>0uZHZ8_yfIB--y9)d~g3PVa;}kn}gSTwkWhX61uuimjeM{
z*td?(fM5>B#F_GN+Xm?W4>0{mg$h&>U7(Vd5n1B5JC{S9qJn!fsA04OOwq_)uuN&S
z-(!-Ki#N^Dh~8yUwZt2dc$HFz;*yKazi4i@RsIx5TSgppPnB9<7scxS5>it3N8F)k
zxZ?5It6R_-jVH0`Y84@A#C846*ot?0>T7@S@N8zsHJACzgKP1Py7kBjT4tyYb(-Co
zJa?oV;U)haEIDGv&*j5TER7N=Bb?BbH5%JX+0nV7m<FI=T|z~iK!lbRHC<`b+cM4<
zTN@whmT3wg1Q6>a_M~33lU>IdH2>)-)qxgpmZ;L-GYF797~)&mGs||GWqXz%7)3OM
z@~puKTpLSLrS-@iYL46o?@2&&80pJ{xTZ(|gvDA(SI=>;pHGGZB%@u?lOl)9b#GbG
z%FZi;eph^6w@EFXh*+;B<bTVfR|9ay^Ga{+9TZLfeH?4O6v6<tc!!ksO~BW}V6cHE
zhf1QSl(gZGMm?D6@~K?vF(wA~9(z#}f7Mc7zBH-z!S}uCK!tD5Q|>2)e*d-pCsw!q
z)&Y<IfBzq@j&d5%&XZD{4Nvm79fdnZJgfan5;2O-zb4ud_M83N>a1LyLklOA)q(ov
zB)6QEZ96_z+A8Q|Q+KmFMKL?5vgb~^yFj|^mUuj^{^W5|spobm&O=RG>!8Gf0WXfz
z5=BZ;+BD(GyII>kaUb3i>qj&Dha0zUfBM^OA0mYQ+bkqBbF?zxMM_kI6a3wOElQvS
zOy7Lk$}aN}vP=Ks{>$6Kt(WKGf6lgExWnXz#ehMJ9Cu_i2@JhffqkOc;S>x17155D
z{(p`<^7CtZ<o_FA9WAlJtOogK96-oQl0brHwdt);g6_B%MQrxG&T%cXRTQig8?S0r
z=kg@*(+6Qiv337KSCsOy$Vlz%fMrA_2~o5NJ;%#GNFtT09ZRjO!p0VXqn3XcYyOJv
z>BajOv^wKUGvEFjud4eLovKbxN2Af>|BC%IvMZ}@ZiWLI%sg@jZatq5J-?VlRas^%
z1^98=IRYb@W8zMIaC-dBJ)UJcJAdFK{rS?dhPProomUOD3v}rd+Rc6v$c^1><C$om
zw@^NOuGz4=7S#355#CbM+Z&3$*j@30*jV?p3h~ksYV|kN*O=`hBb7Us`BmC+e|IOR
zx-5cu95(^hF%l6p64o|8i3p}Q;aJOTI$id|&6=GsGFbGYaS@>=8Wn!tY<iT=2!=|7
z@5DhS;Kjafq&{_H^%bLR1I>Oz*mTJ<QDUt!TYt*C#aPUz7PL&w+ZR?6m_+Q`MzV48
zLv8oagcZnwFN9y^CyK#_M|ihmMhgMfoL;<>LM1&R!{hsp50;Xa@1UMxEFii)JbrJ{
zm}X1VYh4p|FP^Pl=Ds4cbwcEMgAaY}!NoXR>|hEzyo1|=Z1bm$<OFQ&{$$G&t<FZY
zBv-D;yLX!&U;cqOMs-gcjr4EfN$157SO7lwO}v~*Su`(e>wCf9lBw%e0W;L7$U-$!
zR1k#}Jz%*bsm0CR5lbkds9~;r<Ai8QkaXu{f=yDsV;iO1Mvg|^*vPX~rN`)&U_8kS
zx>u}A#{v5~d@xB9gTd0O7$a%%y*HMY4+GSp$wAjYBqe`@dVPf$+&PUX{#4v%Rn`lR
zYx7E5O?1EfXr@1U28ntmpSbh3^)~zR%P+IdlYF)*#aFbr!0}Id#`qh4ZW(9P2Y8mf
z`<|sy{9CSr@ZzoLorjajX7=y0x9<NhGX{KzcDJK;_t<Ot`<=8O`7rCrybDDd-d?V#
z&5*eDvoEoF;yiPI!gt2lqRU+*j<u*c(s>5xM>ql9!fbqcdm|}Bas1N;hXpS3Dei{A
zcL?}5t^f+6p3}v+L_R>V@$P%+_AUEFti#$)Wo46&{d!A3ey!2NPnmy}>+Ro)SKLi=
z>#~Vut-o?RdBqmL-s(=hW8DH)4~cz|$$GwZ|425#E$$~s9Gq{xy=+Ds7qFq1j|a~m
zBdYWg94s*$<~@f)f2tRz<(QxdcPIPK4wO0w5KZe(h_`A+@2S~UolWkVt9@9+&!hOD
z(NeFcHm5;2#O=pc{Q6hmnzw^)UU-YI?%0Xl+3}|N`V@ohdmtr2YNfm)YNz?$?aNp#
z`k-_Bf#)AQL5bh7g->s<<qDt1r*=K*2Nv<)1h;X!peZO40j)T&b)w|9=!PIa`D`+~
zT-p`;VQWypZ;ESTX)D4{vU0`v%uz3M4{IxkbeAv*^Mb~6u}3oDPvRwKA%SFF<OwGJ
zNo~=?dm`!%qxT-^6YkWCN;%i3;D2M%e^VxX;}?)EwqhNv+EyfVnr%d6T3bXd3KgxT
zk!rG<Mywm}TFY-Jy(TXx#csUQqE_`C2yZLZCT}a<Zpdo+>*#AoptUt(WR_OFlqV*q
z1`$<XVK~%EaW&5RGSnU~JNmrLayXYHV`e}qKGbk><^~fZI~YIFv>vZiRi;&`8_@|s
zQ9)=}tb1>Jh*knJ8_AssRX9}PF;5S3nJnRTR_MsY%uvDa&KsCDx~D!v`D$VJ#+A3d
z`%U-LY<wZntkJl4X%5(yhpm;M2{>sD2p&}#kisO9AwH&3P>p1TbQu)rR?BIMQUw?T
z)7Y+3*h(n|9#xzL&@%&AR#trWforv#!2pFOU`e8Xe9@J^x-5F0x*X7$6}{)kX`UDs
zZ0vg0^ij!dVe~12_)NP1KBrbgQouUb3u+x()fgM{U{c7^in+x+;EWv5yi%?zta2@_
zGCmL;q^D{7Vf&z;xW01JObAmt(yA<UPEV#D)1Zn9r3=iNmR2d;<S_|1(j@|+6FX=5
z8~WH4EX~wvM`eFMQ`K%Htu0Nxfm`<zmXecO9@Q-~Ua>z*w(BQ$kA4e}lUtM9o4@6A
zcREdGvzK`Lrv>Wrs6HKnWLjG3=YmPCMw(uQoMgSc7spZLUMyrXqifvT0NKnLsET?p
z8$G^ulDyX27+r2iHs%Hl)Ehl^0Q^TIC6-iS+p}Jvrw~R*(3!Cpke|`o^hOq;3Ka_k
zgv^ns!S7w<Nf=NXdJP5rWE~r!rNZkBphX-$Uk>|&=ptbVNe~=P`!Qoh^V34$Nv4yb
z#QGTn_@GbS?N)2@H*Vk)?f4UI{|T7*;^^P9s;vZeBiFLjv1^6!w`Fc6a>!6a!FtJ{
z<CP%x2rM*qx)stxEx{8+=h`yAqQksfp(<0b7+)g+weGFULV#a9K44kJ5z}YITT8ZO
z<!g15bbvGs6c|Thi<7yQ13v*qonh5Eeobh{nMVr>W!^ZsP5?3aCO>_h+wD+&9CpcT
z^wAA{Ecfa;KcV{+fYA;2m<<Dt0DJ1>Qvwtcl^{ErO>k8x;GPDTO2@=Prq4Rt@<t`z
zuIjDMJr*yO&3*xNv`z#0VTBY4tK2G%qu5XVirY$71IH;IZ%TPI0D~gPUGJ_=Bb}sJ
z1&@6xM7O~K@G}PbRA2)dq|+{7lup-D?9yo~tqmv-eXL{RKSHDvtAh3o`!r9tL~ch*
zyhlVACZ}zVKg5~Y>||eqMe4<7{$)fy14*bqgimH;ZxF&VH{=M3IMm~OdmV3Xm)Ypa
zs&*Owbx%kDfnSd`XiKQV#}HIO0Ax6P&wkj&S?jTvLnk^2==pB8m*P2z@x4F06ti&%
z5@nXPzGu>5L-6_J848xKMK)RsaP<7~-oewO{XZS46EGbOt`$F+PWH0Wf@Xv_mD+{^
zfy=;<y~D@dxIfo?hMDh7E%2k(y&=EG-#8SeRLRI%+2Q>cdr#VjU+=YV1D-qldH2?B
zcc%L1`M9jW<2Z!F#{gM+d>F5x;HVoMwAQ5S!*PA8U}h`Ozc?A`?po8ReKhLi(cvL#
zFaDf;Q_S3DKXDvF9yPDC9PwB_u&eb$LSN7JULJjYZ-4K_{tLt#fDE(Sotp?X2TEyA
z)~V}`EiuiUcGA1%M@Xvg8=(q`0f)F4zbTy(Dsj&e-fMld{1J^7R0N>f(l9zc9ET2b
z!42Z0b~XaqT5?Q&UUy)ydardvUB&R~DqNtSZNO=Z4Uodjlu;P`mlc28HO|wNBba<A
z^k;x{?uK3QHAQIZ!H@KhFZTByKk3|m_Jm!2=U9^Tc{$HdSf9i_eXijn@)Rm2@)Z{2
zxoFSf0^*>y;~pfg$~~9dq&5@J+-uquk%-1~|6XHzzoahSi$);3mvq<@Q|?I-6=!K|
zZ?g<)`f0GueSTD=iFgj;#nU0SFC0DNb360Nj<o72Zds+Oo48dK`Jt=~pPFQZ94NHD
zm;p9^EYUUrsGHx*=@4Ya?WNI5DVW{t31Qw?1~D3Gy2=4XGKN;1YsHu_KDWV6Y!sPd
zP)vuDOAo&H&B9T|xL_?riJ8M9KbRo?E_;JYL&R^|-QB&&r9Su5$+$h6Fw&ZXz^8SH
zp`1+Bpp<9DOp`1ydk^x)*gB&xQwefW5(xe#M&kbWR<pIV4z}y4iAv?*<TAjZbby;@
zO)C?9)z)LBQ8;^KTtnmq97Z(wZ0oa|H(OHhq>a0)*)h{xRXBzDHBjDmQR~>M=Qws(
z0=k7T{3vlr>c#bs>#t6;v0j$YcRQ>S=tr|ubmBguLKe`SX%4VDFQ@K12jgfjTa<}<
z$}FBZqTkJKe)g&Rv=s|igkITUImB8|62Xh^U%K~V7;KX>?dnL>*eCQ7YR}8xPo*K4
zQ#)y%WlO`+3Jn~*lH7fSKmhPYU{lr|0LVwo(C`EhZ=cqb=d6G<$ox9Z{|k&T6*+6t
zFdX*!t?g}DaFmScnJ&@Jr_&xlh?^}ft>*=6QE=ooO15{IjG1h?Q_TB2uV*KBI~Y;m
zXsbD^`=oqPK8L^4Pu6a?fE>@r2xAiW_hM;Aat3fKyH7+&e_S}40rypV_v54y#hru3
z@vuD6ovpraMEi__Tf<TIWw!sPy(iBf@8fcj-^W#VIGMa&OnnoUf2sfYdeBdPLZX-$
zq71j$Gr;mk)CY*Afi{ooeCCu)#{|wDkHO-cAcMkx$F0g_48GuA@0!T%KiN3u=yX!i
zBwUN1JW<Oa-G6t~z~NSB<bTZ_v5d7I_nKz!+=m7eIA>)w<a2Se6-&7OSF?-XsGTT#
zh5N=ct}+FWxRJFERStDIayrm%c6Q#Mb;`+(C;ef5QiZ>YVi%T-N{WmoYy*s=6G(eE
zrS#p|BpU74#c;F}-9~=6_bm!V@>HJWQ*M3e#!o1pmfs4p-){EiRs)sTcEei@tEPmp
zDLZq0w1o{c?3d856GJeCW%|AjjbD$%*ndoAS5eygsZGs_M`~apqsO{x=uKED+dNFz
zF|ys&TerMO_MyHl>TWc;)y<_>N;B8$np_Wp=5CgfOSoqiC-Qsv$+D<TMmee-`;9|6
zfnp$EjG0;HF9Iv|vC+^=9>OVjuLiO5Qg3CdNNHIhNfur7eQB19*<>a5@?b%`?t`a?
zSwsw~HEN$)Lk8Cw-JEPKT(C0!ubRNYbIG8b<Gxc|Tu)aXo4Y;=C&GOT&VFf;TH!Mu
zML2vwEY?+uz~w*UZG3#ouj1kJr!~h-X(be%KZO)38jIS<BJvg0LvF{hm_D-K$za;$
z^sAmZ6x5F1Tk4=E&XX%HgDv5Otw=;_DllBU6xdq*3T?Dh{jJv>R2(p4O_J8Qv_viO
ztxQzYNI2D+EAzdqLQgjQCdF`A8RcjJk%S8JAlpa|WxTyi8#JRqJozQ!^tXQ&tNmNh
z^j9n9X6jV%-eGaJY$%~VG-kOWF0X)}&o4dfceZsfc;2jO?={;)FT#5DM~6NMZ;@DO
zia49WUlV6tyKij*9^iE`4ru1YwVliyGZ|Eoz9;g7(<Wy6g4zsa+JAGifli<tcuPy)
zgUd%)@Lnr$Q;8IJeOqMmdJp>a{k?FWU0ay$Vg{4KLxAxDHCo9Zuhdr1EDL5AheLcE
zAK4wb^n@AgxV@iG`jg>~TfK2PXsd;NhrK5Dh^p_JxByr{r@y}sSzf0?Km)ZoONNzc
zvK3JuV2FiF!5heBerhq%qE}EEP|jgA%A+nJx_`-w)5-aHNfZ8<spTNao%l>7{b=9)
z90rs9C*IPLO59|-6t*wz0?`8+dWc%5U9B)jqPx)o@GcbNBcsse>X+Ts@CGkRgV4I`
z4VFKL+&jBhmft0pS5qFyTYB=!7R`b}9B^zjj`+{K?@mKSP;IBgP2HwfAFXV$M^W-w
z7iyrGF{kd(o-fssIk^N(-^pws)-%%-=K!&BY`la&wo)IrI%y!8TSgOL#@j>IsKNd3
z1e=+;gJN6ktY|w`bV2O(z<)4o@Y~B!rf*5Vl3@98^!<On%tn`O(W>RwMtZ`v(eLEX
zuNo^(?w8r$;y5<s2qypeQuO_0G0ah76eih-&y2U*<)vppXuq|Z<2L~dE(!8653Z!*
zUydk(QVJNy`$4$@L7Q?#j*QAK;*DO61O2Kyo6se+NYeg~S`i>ShL8{ZwlVZbF5pN_
zK`~LI9sOL*wlL-1!>5$j-C&*%FFA;|5|>cZN058lbpY2rRP<(z)F}H^LeMHs4e3R6
z4G3YDF?z*a$5uBZs=p+e6o~vWE^75m0|b^0$37wk$WZMpAH$0|XBEu?rC;*dWv2l^
zb+@Tvf?&sXs$@8BaYH3)>l!*d9m$l2&T?Gph2gZt0S$h_ZV@V-ui!$1VqC`*Qs<Tc
zME9y-Y{>bn@FR>$zH|v9m2>!+LT8jF)c>~(6(aaFK7>JvYYU$<`~}D946-P({M+a?
zpFt$C1C*D@hgLe4U)@X}ZraBwy3Qsj>FE*E{rc)WU_PTQ*ibcU8=!^qV0DoysPc_$
ztLzjV#ip1+mO_Seyyn0tQ%fu0xPo~~4v6%A@SsU7mB+Lnc;`lQ*9vr9gspH)X|O=1
zVSYN-H4OX9xmY%nPGKNe*E7c^tNAYLz7}uYwy}Vt-{5gLB}*LydOvZJ5-r&l(^3PM
z;*L2%vWJt?ku~bL2F1LWni*L`Ko_+T_?-#MH?Cg#d}-yC4)&16Cco(qRT^^_A{N-F
zvR2`9h}FS2PLOR_Em)69f=i|g-kd7lN`+K^lobO-^5}E~uH~5{icvmZsK(^TPB=4n
z-oDLC+9uR#h>sxdD8g8Q?fi*tQ%-n2T)Z057)72jged;P_O@fz?o@@POZXYc;vi)Z
za08HpR2-nilyA4(k<I(B$CC>;q%+r*ryL^|ch~!op=+PR(6>SYhY!B-*;XK^c<ggK
zTQ&pbB*)WP;V2$^GMPzi<DG8&EQvFeqQDjkC^f|05PLd5vp)A2^ke~kPQsOM_N*Q<
z87M0^<dsL@*5QQ!)+3z~=SR<%ux{lHdZI$1+VQ~K6Uvc0RRHR8yO8Zu6uPTL#x#IT
zN4!~u(;$h4?m(!Q&2KdkyM(x@{-RPaw19CDA>iO(@A!FB+VBTf(l$acT7#;1yl5c^
z5WnaGrw>)>wTH*w%VT~xZOLQpgt~gCI<^oyh{rO^_?bi#W@32CM%9@UyATG}A*$k5
zKA)UyNiAv}XS4a+MhLMMJ0h)|c)1miQeNX9t@@y>OMTEvMkhbYU#%6ZryWPnFcBtc
zh^^B7zd(RB$`Mm*m^EpCh`-GKV*L~by2l4W=DbVH#ike-Wo^*BgLSAB)T49q*{6d7
zN|3yByrB!V@qM$|hy&n*&2<9{wh^ruA9AHObb817=l4+qzg(eFcoaAEW#qM${v9`o
zS1<Zz{8XF2i}Jjp-NwqaYDBrT&B)tGw$?vbIuEUeuJesdcOe#<^cP@T>Obw02s}cr
z@Nnl?Kk(Jz9YKnf_qq~Mrl)=@9!*Oo)C%)x=@*(IJ>UgyVf!#buvH?kfMb;iOgPt&
zFVo34*S)@J1$O=2kzC<kj@LIS3wVQ(NfRD>RHo6-RYY=()!#Exn8e*Ox<-WuP1NAQ
znjiC--S0KcLW0&JsgyuzmL~@zm-WYMK$V0O&yo$i5e7(k($SbV2}{g0^j;5bX66RF
zmF&L6-4cWg|Is`OdX8$7Q1j?%A3ent+)Uz$<tE*&^KwnqtEF@CY}EL;u+^O%l+g*1
z)P4tzt|J@)F>DJ8=7(L?trT^RdKeasr4F&UyDRUc+K5{i?do;D{+)zAlES1S1V>Y5
z<hI{m$S!}&dkmR#azDUPm;DMUNj&QtO=ZA<y||zjun!N+7JyB~(4LFIL6~8$Dc#B@
zI`UeK?D$6Evq{0ckGMub9|~JJI}6yxNd=kuZL6Q}YIGB?k&gcHx4(e>)p`Z#FOA3u
zDxr<m@@}?jJ9)iB<Kwz$9>6E;7y)6J8A?uXshLMK!rb=}a;#{u$>$PI>N%wMM+FGg
zK7wavWl*AHUemEJYvyn453p~N7>L^e+CZp0(F6Jnx@M8YX&Y55hp>TGV(-?fh)ofZ
z<Kro?jtC4xJ=aj(#&~1k34}7RGgoDQ{pbIv(@!E&Y?P|5h~lJ-z;I0EHKBYr#vOsd
zr2I>BfP^N0Q%F2<Iw4;XQNL50-Zz*st`M#tt?w)h<0gm!`%-97^%+P`{i5X^Rc>($
zEnzBU%f<$Xt5}_k+`yVFrf^TqVSOtkc0*xPiG+cXAI1JRc|F(qVd#I$U|4GPCqrFI
z*n$A~)KqnJ1Wym{6<c>vTFsr-B9JtfR<iu$26ep*p_EW_bk|^22-dBEqdQsV1i4tU
z>U&Qgz`h;K9r0pQdDI0&CXEgQB(sW`+2OMn2H$GE_|sIsWvhwgbd~y%LZI)X#2)>k
zYNGyhx!vO(ZF?fM$GG9qccU#Z2x9DmXvE@5)oD@X^cEIfQzd{rD!C~Q%arnIR)euk
z!2Dvb^OfX>v7nw!uBAled%d4FoDer(pn&2=&TznucfHV)`(5>b6%AXEb>F?~IgPe1
zOnQfa<l!*oF{K^@sdb-HvOp%BZn@HK>dRecAOw<8065l<s9`Z!Z{U~q6rQpLO>)e$
z^TjA1w?kmvtawuvgq=kmX$-_5A5re0%&a3A`0g^F%mz+SS1aH~uNh(R+YF5(RE#UI
zxO|Z3@vGwGaKZ}4I!_U;ZX(6A;txK{BsPWkQ;Vsf?i(gZGo<*H+7+VTlyL%R*vMN=
zV!^minIm%}8Vp&jc+D+EFi!~)k;dKw4*S;(Ukg_9S~C_?_2QT1%&`6`k?@OT2=1!w
zFFbG!m*dvWF57giO_XY;{k7SkZQpEK++2j#W`!%5MxuGiQHs@L<U4+3YSmER4ZX<!
zN{aHVDB5t|XY>3lGCz?}=X0^&kUP2iWt0)YEUYE65oc$PV19Imo-(Nruu>)5J)JE2
zn%1WP{UOIjxQnu{ONcSduM?ZB$M0tY7R^K>U>D{LYH%NS#8O3(+z?J|@bej6A~dlg
zxzX->Sq<FckRentQ)NK07COlag=9M?iNR8?1rgo9SbYK2CV|JlB{n}M-sKlNFypov
z>JGI2rfcQ%n%uv?HKbJb=kD)?{QJmAdyAG!yKImzwVQo?bo4xPi_G9+%d+Ob<S@2`
zDYdevdq;<@?8zUGj#}B_AKgD6-GAQ7tgc2=;p{n7BMz|yDjTC&k7-|^Og9@Q<f}z9
zcU)4I$K9V=M3lY_zw$)9o@uPUd?2BMKywD$h#j`q`>_*`Z&T^LoQmA1VfJFF$a>6=
zlRR2N_mRu%6(BGB>kSrY=4lpy9&ltdaGX?c*yJ}Rs$UdQ$=IGAq8%wOXD;2AddAGQ
ziak^MQYbHQ@Jkuda><&!KbusQ`lETg3@e9OoUg_CRX80&!YC3>Et7lWINu2}XfLg|
zG>Nh0jSqUYEM1FMvK1c~6~s>_C=Zz8aHy3+?dk%3B&X;!S#Zt)^F|#XoJX!b&Y2Px
z_F4RpdbaX6ap21szGF#_*r|xW(GP{(9}6ku1HA0$lHn$B;{x@FNS#_W=#3wqg4k;z
z5q${xYlNLT!L1wmlWp+5W?P50k`HAiamria6t}`5ZiO@4@<+Jk{jujj6hNO%Ew{pt
z@+PmsY6?mV3O1K-ZBcS?<*e+(s)pXqai2+Q@0$YQ40+ajEUEB+f~+)wRN<XEW7!Zm
zm{=SskS0KwL69gg0%^MU@1FK_RE!mXixl|#U)%TCAPjg0{N-`rA8HP}53`-5g2=K0
zD1lc&qjBF%dLRz@)O>PwHZ-TPtN~3>dV8p%Wqxk%45Xlrd`EOfC0ycn%<D(T5&Ij~
z5OX)hVl-8B*bJNlN$_rQkoK%&Q7kwdVGU#|NmbQ(9*U%Ll$}U*W-!F1Ja07i>}}%^
za-j!Obrg+D8B5MrdT{Nb+Pzi2QK-g8`$ySMJ}q}Hc7E~<<DKI12^;!7JNQz3vb217
zd+QTOmu+Q#HcYMfwED9;F7tNgE5f>rksk%omJu56TBzW($Jv$@^Xkg>w%crXOQ=#a
z3|D|~Oz2`)O;<1lS5CGC^8%cSGV22?cM;i+y^K9fILFMuH<y|$t3q~5u-NigA`yMH
zXl;|PS~QCER>eu$O=*AjkU05_jDTdmnx}wrJYP}r*}}tzEQWzHON-elt8#5`%N+F^
zUJ;#8;~R~@E_LzsN@B~gzm%XgK(`UZW2r2iOGRZ#zdlVS0r}Y0FxQ8EjY@B1_eVFP
zM7Jo<rIS$9&juyhoQ=uewsoGtzc?7cQ?B*a7LL(Y0=MH-!pn^DW^y`@*5BF@lz@aK
zRaQsIO8`EIQX{qHdY2nwz{{?0v(iyoai#hte>H(e<BNieLlEqllh@7|m}A=~mpra7
zFEA`27qlpHCRhKPKvq?_s!SMYCLUtN`ZCy=N`zl2h>m4dNlrw+(k@QD;nn+6Y1F=7
z$BBqk6b2&M%k9*273eiE86v%1U^Tg%7B)fe0nGoriaE-tn4NL`mG)deo1wwn>zNcx
zWFpc;IAVn$k>O%Q`(E$O?XLT=7l72mnoLfq1RNzoP~CWVQt*;qjG-L3`>uB}>e^?F
z^_gtx%aEmo&}o1>{sR;od6UZK-L5;!#3_b!O)!Pi1)w0h?qdl)yn9h@fU4P4x*8R^
zn@TX{QhTz?%dXoOt{)MA=q(cC3tL{C!=%RWso`a)OD;1$&tbL@V-x#prMNb-k#5h5
z;i=n;fk05fCmF4cY)cqH%r{IAW7Nl>&$#fd-gd9)gAii=J6d%E5-!8_{s9Y$|I*P3
zjz$=q2luiS1gM7T>reXAk5kr1c=1LE9eQ&AdBm^$8qhScy^S=^A=0ZTJ3iN#(QM1T
z)!g0=m?+4pANHl0MV2C+tVEQM-l)wMjlfgz*ST8<x566Er}!xD&KeEjX=YxAh~^$D
z{qf@`imNg~v>SbCp+0MaK-N#7g?cql5nKeCEq^nCyFj|x;@ijfhq+TY!zB9ryOWnY
zU><Y}wOp&kj6T13k^6iG=XFzz%kBssyRQ?b$8j2ZY#F-y{w0!jEUge~Vz$KasR=l-
zT{sFXlJ$_9eIe+`;>O*|x^>y}M%LkF3kzg97$PZ32#|f%@d%`w1lba1q?5cN26Q2Y
zq>5Gw*rUliq%g}(aI@G%=VY>W_CyGuqa5X9(Dboux8{{#kEvQ&Fm=GpVxIbvU_mf3
z@bYm>QoK<pJ{4ymz7rzL+jb<aqmmJOIp|ubF`R^i{I(cG*~%8v0sq3cko@8($|KQS
zuTv|VFdMYtf4j`8%L*55h-g;gw%{t+Ww$Rn2QR=~vnGygg)DzC4fx7Bl?Dy)wd<DI
zp-q!O2vO`iW4CCxAJ<Do$nL|eDRb~rrx-Z9Dl#OtO<jJCGdwn_Vi3{ERd0)ad;i6=
zr)@5$g$F9+>Cy?3fxWsG=3heHiW8WL&tQ4-@98V1b?r&osK{iI9YfflB@GLTurfE9
zB>9%=0;XWdLu)vhRoMd;$D7P9wK}dl*9fJ%$S);AQF`=OfqSNXl%Y5UuZ1hRUSg)m
zJLvm{hy=dX$sSEifIt42PLyJ);9xJew{6hd+l||%y>D-8-)^_4BTvpUQRm4fLvhhQ
z^FSMSOy`i_)2MfK_i3CuZ=m@^rTfOG?oEUTscU8phxWAz$*SW$+l$I6;OaXwfUNK0
zq<(mH{GcTY7tZF@@5bw_+x3;3o<;_Jl^q|1w$-W|(4vTTqE4%3SY4uJ<>UC98(2ah
zLqI{>u%Q}~mYDUBQ8u5b&SGD6%0w!*K#y^9$__LWN1md&JQT&+1D6>h9j^l7OZqSH
zRCqW!4_(JlRs62bEPtchx8r1)+8F5B`cyF(9LwWoN{Caqv#a&=W9~f_R^4^lxEm;S
zZ;D&FaFi;s!lEQ<u$f*9LH3I?Qf}0l0h8m@20$d+<s;5|!nw5UWPgZZLPK(c?3B!f
zk`2WQ-MQakDUomV)#|;fE%5s`m=(eUao-<K76Zyv%X^4nou-sv+J~0R+}_q+(blb~
zn2lsVyipp#-u|qHtvYz%Zg|2Vcd`eInYj!l;Sk4|;^n3Wxw&&Zof|sc`*%KO9!m<f
zm${mOu^{7Fg3!!<fnhI?xrY8>R{ZU4->B^!kX)1XyLhqlJ9OU;Z<d3vs55-fzFzE%
zE<+!9)N{LZ52Z75ka{j52}uT$I4|p&#DP$S1JKTl2(9)Ria5K~UsMF~vnBAH(Ytwk
z9`6b!PVX@n+ea&^{7m)OqEUFvtekK-6Vfww*)1zM?$i8DX}&`?+uqjuB`OUY*S7AE
zrN$nq?QM4Jn#GAkk^vdgh*~i~;r6y48-~R_rY@R1X19QE1bkB0XOdCtTy6+ulVPUn
z+i!(w3yXy%dPP*@2T|4U`Kd4ESN{8}UrK1&Wq#7Xb^8ve?klm`%U(tGydy#@A`T~4
z_F1ym2!^328O^-O$t{Ds_@%g)>ldqH;9#BX2&)FZBf{sHiq-4l(s3iFEFus`{4b(|
zi9cBsyj+z4OX>Hs3*P#`^4Y@awDCREXgq;g7W(FldUNIuh)s;Dwb*pQODw<v6Qd|G
z9WKt=u3?*gt>|_a(@AVLFt8%V3~g`Id0friyhqR-Aaz+vVm_`Uj3U28R2IvoMhhOo
zkfSIVk9m-@*rBM)87q#{u?Lrz$5&4T?n<gRso3+Ns9pof8Xpx^9v<0n8HxnWA9fJ}
z+BT_)k5Z`#gFXV^U^}_I9gh-ODAStRVP!VhY;WmmO?4wR=pvJWcu`R;tqn)d0&0R-
zB(1LH^QGO7{;7NJP8<T3e&O-k&?E!=zah=k7mEu^BjtJlGnOy2tz-D_uP<gIn4z}1
zHA&O`F3dd7JSGayLexsdyda69TXdE%GF|=+_wNk}B3n0Ocj$E5FZG6vo}(@pxr*-g
zih~lB4U+}P+!pYKb~~IAtdU1*%6{iDo7|3eF_>=5CSR!F+gsbN7YW0Tvn-T}QH(NG
zk-=Y+Ma2p|9b@~l0G{!Kk63trt_b^xR)y)SZbcv0RIHeVg*5nG^JFJ@|A}^V=y;Ip
z>aYL&e}3aHqR`Yb2P(&syB9F7jfyS{_x5ZSeyf#NF{{&0%nekxP?7-`THbvZx5i)p
z`9C2Uo$&|gQ#sP?A7faq0N1yW;MUDoGLB8}oIja3!Ob2splRWuK7X|-J=jY9^`HMU
z9N8Sw1)-Y|1XPX<!+&|A-tcX=#nPIC=&RS9Ax??M1DBeElB-<|iU9(M7US5ME-2z6
zaYhg+*^C7XoJej!l(03XJNrU0A#<S!QK1Vl<S{IY#*&(b>%kakTL&>-vjiObH?j9*
zQ4Z(ra-5hlgU+tjcsg3S&l@)D&4F9c%P#D0T}0Jy%Gg6uTkp#Triwr?qsPrf)h_aC
z-oCZDA&QqjE2rgnpb>YWCWPn_#6dElRqHt{rZS>eZap_EtujZelDdFc8v-{XYdbie
z@%xR0ULx5a##wg<CkuelQf5Qey}54@hdz#?;aciIisB`86s>HamsZP+Q$R>fcb=9;
zi6AkQZ8IJTnNWsOw`gQ|{xCrA$f5`_Bi-f*l0XD&!LKJoei)VG1GrdovyRKs6T6$a
zS(g^ihN=PKwMcf~;2VkXemF!VU;sQ94z-yNi`l$tBQj}R4E4}kE){sO-HeR5>s084
zRtSUd+c~;<bLXD>|F>`7uHABP-LCID2_OE|maYhuYq4dgQ>*EgrY;W)4dT+n9tDo>
zdEA2_9U)r6qPx8&6nb5@jctie7HeaOULOz2H|1c#02|k@CRVMILA_HWm9(zl1s23)
z!kA5uof7?I%j=$4EzuuTFA#5*onEhng|q?*pb&eG;m@k#xjg&Yw3UXbwfKAk#W!Js
ziDVOETb-^^yvfD=orfr6kOT_M`28a$7WuLF`4H30J)9M_>-mPopJxA{@u!WSxv%RW
z<d>o2d!RM#rRQGrhsx%@6sgF!gf`_pyq26Sy_4ARtkB-?T|OtI?$1s+p9jI<<dT<+
z09xY(an;y6Upo=3$Jx-#7Qc4xenMu#s2p>xo2%ZpZ`R*Ou!(x8`RV0;oWNA?1h-E-
zf-q>`__+k<?~Mnq@^b!yTzBbJi{K|LbzaVW@|s@SeqXq!$*u?$+REbh`npQYL48$a
zztDbZxA+1Z374@(FNNpCF`c2QtaAE&zs5F%WPQ@MvL3aDmLIG<?jNGa=#Qgo>nmBp
zz(j2s<7Tpm{#J+<FK(4AVA@y~F>btKA=6i6G2>VKQl<^#IUyxA%*%6j|AIsV`PXbI
zlcflbMO%uvnJk61iI*a7l`KWtSe7DgykaTRS7a&TSNu{$4M`{rhxvynV*bNv#7+1Q
z2<?%%TG|DRI(Y`ooPkT2o1<4APtGcPjWxCe!f4$~*Z>SSS$y*y3?!n)H~b^;U6PhW
ze5p6{^R97iixCXmSDwV2SDvJtJhZCu^0=|=Xxw<kj;5~|KMt=%yx2Ds=NeKc{vlJx
z?nmsW%w-SYbhT;Z(`h^dZL(tUz9H6FN8(plLGDanEWIaLC-4j)^B*y82H-x3vx)G@
zKQb&g5u^4F(xf9~SC??N%(JcieSdv<iLZvc+o0$CDQg837JqGV#JpO5zr9UM*uJ2>
zM>b10p;#jia5OWx*UVDU;oIs8>7OgkTee|AJyLjhLo2xm8j&w56dQY5jNHzu;D@V6
z|M^mm*0rQwKDp$8L;XEd$!(-@q?#B;(mAjGnq(p<n&F#LDi^M>`_kGd_O7$Z#C^G(
zTj0hZPy@v}U=Z<Z81GfXl!-~@5JvC=%&_pAp(z_)B38Uc4&{ko#F}?dH?wBKy_RX%
zn|S$!7{)lY)>VEk9*oWm`z)jur?eIMY)pp{NR;7OlT*h?5vqc~xDSk8vp$wWysGQR
zc%ct}?w$i+vkx_MSoSZ|0JFr|F_nhhDI2mAt%c+m8xTzw<8mH#Fese@GaFEWEXQvg
z8Si}io99n%fA@9u{9cm|(H|xdOx?mhkhY*oM&`lL3POP8_4rXa|9Wu}IzDsi#Nveg
zuEvSq5h9A?6xG~<;73t;82pG6@{!qwSA|m|vXNJ~{J~t9pkxTx+Mp0D!hytrI<~j4
zWGc$R8gJ*0qf<Ole+XCLs^PQDYjFNETNV~kWaC%Wq+f;-B>7c=Z<_ujWk6{NJJAY-
zg$6ogdkf@6K`4;4)jf;bmWVg8I)&*VW;&gE2>O$}DR-U$Q9z9$O|CQh*q|g3=2&6>
zs^J8<Wdb6Jc+4$8;}wjjM`WQp?@f2A2(M<U^gOR#YY;wRfM8{;zlR!<Nbe4&z>wN0
z!vmxmZd44Tr71nx1_HZ+V6s8DbOo&=GMOf3IkAgd7sAJ`j2V-3Pq)n*&xbJ83^G(b
zm|fMq@A>Lzw5j$7nT~zZKYJAR0*={RZO~O4dnj(%==V*!GWXWdq8SLI*n?T&uM}_T
zXU`4Y#e90s1qX_a<Z5vG5~l6MkO$_W@)!o-5>5iW?~Wpq68dff5%X;uF0cz2OW&Hz
zeG09q###~SSI0FXM$i4w^Y>dmIbqO^o^xR~u6}oeYxM{-L~y}!6B(6QE+43bK9yRH
zQ6kx793AShUqCWSoFqJ#K=$MW@oS36uqmc)K#<bhu5Nn)#o7V!a|esOa`!h^r8XRp
z#qG9e5pDMj6e6@yYbf;bExt`%gH(dXH6uGmcg^EK%JRg6>0<ttl<Ij(lx=N6{=VR;
zxZCZnX8xr|mTH92hUiZBm0hfZ3HP=LciO&<twHCaIGO6PfSv2?JnCn)naxgwC-UQP
z9nABSt5&0xECL0s%2$i>lM4fwjEhbRffMi<q+B#IJc!0JIrVxX3>Qj%;4mI<#~=?h
zMSOevfwDv=lTkv|x+loYI)*_+rt(>LHnBL~sCZJ8#{n}*Guz3IQOxkVFToF1@hwRe
z<9nZLaI0L(VgZe*$+Z^U=Y18mcNi9GhZ#{5a&z8_`9ODA0u|D~cSC|8+ffsgrebf8
zH60^KS`la*_d2n09ADj$8+0dAdmH}wpg_tQFo6n*5I&@C7G61&qwN0mP!6-SdR<PZ
zg%Y0b(4HL${afsK_^V-cmmD3~K9_*fEqD@?esBmrZ5wV2S%Cf`N1ve)EHLd8M<VdO
zaFq8JXP~~@H*eobvdiH~{b>Wy15e4uH+HjIx8C(UR0&8^wyfn7lV$?yU{NGd;>>mv
z?U~uZ^j->AX@j1xhiZ9y?oLRXVa|NB>mSL?YwctO_67eYe8gu5LjdEL>okz^##290
zk4~3H?RsnLj_7d5rooXwZ*~W>{8WTeO)`%q00M&h{fxhYY09^|CzoA&8t-x3T5Ib@
znOgx)VyFrzq6%>FAalcsPnY9-1oROia7-wSuFKpIb~Cja7aKl#YD4`hl8}TY1ELaW
z)`~tezTt=JDrho66ie{aqAxhswE>4Sd>8htm2Kos<#so$JlXg@j!oerD1^>ZzLfVf
zM1p>B0DHTdhTFS|s8CSL;aZuar9bOl9E|N^5yj(`AZ<HMKy4CCRV3tb%Mg@98iNRL
zWmUHj;KC|>&l-N<TC-**lkAx_SZR@I@vSGhGr*=q`M|BJsSYI%8!l_6@HNPJz3^kU
zkOF}t^8u9s=R!fvO`LQKa8JOP`dWP0`(M#+m@(|2&Cbk224g09QZC@w!Ds8g7ho$#
z77V<)Qz&SZGJRfnn%P?!mLpSv;gd1vpL8&`T*cU>H&+2c!zAP|aa@y`DRqCy-{e~2
z-qAcELl7tzLv(XoI?fO*!U8^aA9O_hb7x5dROvJ18|Hua;>yIyP9-7{b&uXiDYQ&|
zJyN5MqKEkII2k$(1F~E>vv&G+$EUX&+$Q5*0sQj5A=P?HQ&l_JtHQgd{m4(K2<;gT
zoYX)!S3`?9Jif_AF7`G7Wuz)hxx&6DHPGEKPu<SMAUqslSSypspht348gG)1D}g4`
zbHrFOa5urO$+O-+_7pLLd_l-uS3+-XaEKE;Z_f&<Zx$a!R<Y_0FpVeCL8!R-#1%oS
zpn2OYO-9C|n)K~o3C%IjQC@Yj`xa{BON9xw(7QQyeA{3)1W8BsjD&8zt1W~(TuPC&
zNg4}eW;n^xW=8`GOR70VpEWXz0>YShlZ1c!h+9G$`JiI#hLuCM`(<Y*+srp<&WWrP
zbWOcy2o2zo0su@Ncex;6e)(m#Sq$>iJD+{}*>65C+<)E9H*r&af~K5cC(rb&#9BO=
zH~~2yH{NCL4k)s<z1|v}-ui5CD?b?wZr(oq?BwcRMSZrb&0Em^GWR;u$C}Js7v0ds
z4I(#1eTF&$QQoZ7@Inr-Yn<fzy52gI*%|-gGYhEx?KG{XNdyJtkqMX59-27NQer`P
zOeh4gaB`y+C<u_BQs|_Uj-PCuxL)32shfYyOp@=nU_k|{r$q9v%Ae5`4fbo^P9SH=
z6%_k&j*~WFRbUuR_Q9HH?9%Pqce!9Rq9hPhj$6A=J=dD8wVE)3M&-mQja{v!N5qwf
z7-Schd(A^t9vq{nK%B;T$n0!;LQw4rZv~T5B!-O~dlXk~NOnuo-xeq6;Kc7)eWeA5
zSeuFa0_&|sZ3tAU$sShRW)eDee{gf=l1<`v7pwWl$)W1gX=MN{zVt_!bLSLT53SI;
zd!;Gw&@=d$Z`aGZi7+R=j8NHaZCN+<zin^d+}_Uczk72Dw8Lp+KGOeSH7}xa7p&MZ
zk>ZtNi}t}g^r)D9<!9R?t5pLT^EIGJCP{9%cSWJY1mJtCJgvhf58d!cm!TD91`*6;
zHn+lThKP2Ir}Jo`^?3$1qf6f7xTD-{1IQIG_`zmTefTtzDF`r=Y9X2$<sqy+qOh;)
zBBlFu9=CNK`@kU6IbJc1B5GC}HEu$L&c1)VelZ2H^39|i&`Ua404@|~6{8FJO|d~O
zKLHJp={Ra_d27?LJ<1-Wh>`KdaPB5C`U@R4C&P(yY~afa%U}k2`?EG5|3%J6dve;=
zs6)XDu68s5%B~GLxh#tcdq*QYwF+$&s`iah`|VAkg%+up=Gl4aF8Nts%(A|ZP)cwz
zDt7SdWVSOeM#LO&za#mQwI?BJPKgZB7fiM2+x4Y6k`evV)wwIHBj0Fa1Z_V8Tbazt
zJjr+_%FkBU>d|x=wluN%?)EmY&@O;<6Cqf5*<0MG$t!mNdo^3pk*FD7yNz5?I<Afw
z5aqo)_7quxaJ|AO>_i*KBdN_q5XQTXq8CNeDe1wpnl7kY&9_|6VjNcVZrfdQ?bCug
z+3utBHmfNx&8U*kv{{$$vQ1gjDF!#Ro&H*mWf$(WZ?$hV{W!H!CT*Up#>9K6-x-`2
zo$_QP0kxCU`Gup>ox#Npa4jvq_M+k!ga+Q+nceD~&qu>%yi|ABE){0;ztlp-KI%4#
zEQR-Mp>!*q`hi!OnuAx@F5BOEglpQ_XnAh4y<zFZmnZq#a<mw&9Vukp&LpqOstu=%
zmrCWo-rVin+?iCmr|ysTq~f;T=pIe_cfPoJ>*n1Lpr&8`u`kqG1SK$p+gKKx;}?aQ
zeW(Qa^tM4UVj*gYXgQY~M)PG!n{lbLH1$RW?qFUiN}7+XsEdEo8#;-=E1)ky29zoo
zals2IMmm`#<{-IwJ(jU30jgx@3g<&mW^epb26`|09@RVw&AvE>(~_P8tY6AII01$j
z`+Z8SC|+}^wnVA-fK<8%`8-dHJ|HIJxmJ7lt#9r0xQ-+5t&JBZKkySQs<YAZUFjPb
zhc29N26LoaS*ZD2g;lk14ZqfW=1R&|5`FWE&k|tCKD#{D=*zyP6~r)eYUZoQ2nTA}
zj_hU|F`0yRNlCa3sVw0^9@Vm?_TaGdJ}dpBOQWQ8WCmhi5FxG6Ak`C4!!E6bVs&IB
zMN2MT$-(k=wvY%Q0Q0-C9HT`-$l!at-g{PSAd+(!PiDm_SCveWII7+Z{<|@IxF^N|
zD|$(@?2^bW?fvW1*X4jOKhFt=E)}!gsArVdA?AIR-PF1Wy}wK<HeR99P-N3)Z|<^{
z-Ck<bN8HDj++>dFCZb)^NLNNTpeskXtCO0{*!6+0>!~yJ<>{*I<<Z0T=YF>!y_I9u
z0}Tt_&B5i_(;g&wuzWLF$?`)5_A4xQf^OKWJ#7_2-TUQ~Y@Cn`1iFvR3)&GaS3|NR
zCVR1~`{5zamd}-Q0^g4Hp&c-PJ}i_D#b8YFYugN#p_RTHYrNgC%hJhV^kYN<l^;0k
ztk9s~Y1N9a#HKt$>3_dUk?eR~f_6VX4>Yqzkp88&;;oxsG&^;czk^7_ZADxdTAnBz
zvw;g`Z1UIt%m4L%`Y-=pd>et2z_D;||KYP2`^)uvI{N0p-1ET-fa=~{#qC#(L?F%)
zzeu3-rrlpCaHVkJj?{YM+v=ff2IRs1gy5%LJRpdb6VT^+0&IK4ra>;YgWE*f?!N`%
z84BZwLtmb%7tn5NdC1IisMB*NC&1=6mOF;ild@gv*j2_jK=$Iu5oYCw9I_g1u)Ux1
z-RxE?JK4={zw2dx{qO#RHqPC%X3rYwB$5_ZOsS`1_(yiGl`B2=yeu$5;dGA6tKH=5
z1{nI>-&g)<+W1|&ot0(%^jsjL!73=dx%>N0e1@$4o-e$$aI)y<dhgbL+^Y_`Q<5Gp
zwWxS2!<m3;REgCr)KBx?()a>4D|-pdOa3ZFAQWgz%WtTkPZtgKv#O4K^We1hF_y6&
zsI^p`@yY9zLDz{<UFwnqAyV^%G%hdsCO)~oM%O4ZPP2J-HgWpTuYU?fzuxtls8^*&
z`U#HWLp!K#m6EDRB=Hqb&_k6T^ZSxdx%cpB|3%hIDnvGWExGthRy-yx(8E-9Qfjm-
zs-3-Xhdw=$%gt=xUGoP;B6uvn5|JFDq?Lsx3>ufYH&ZuByw|B=_Y#D;2Y-93KCn>E
zEBgHJ<Fa>AHLiNOlhls>ucz9Hdfxy?@{t~uxPw}Mlpw={O!ehjd~x5&rtTu9%S!~-
z!jX^^NT6xU0@$h&AIrzZWKp58F#=seywLn&lD?TX=SHbJ%shw?3*umwmSmG_WNj}R
zdasp9{J1g``vzkeiFkJbkaUmKOZ_uU%x%Q46r0P|psch;ns?P`h{kaY?Z%oL(;0%V
z_a%!s^5OVk!VpQ{7dMZ91e{5PLze?A20J%zcAduTq{gn3%(@{`-BXnhWoI|d$SZE-
z@-&ax;zv5+#_S|<!!7k&d!X?=?ox+qdT6K-6dX{$TX|&A-6IsB!~=J%`(taQj!J=0
zh=YId()BPGI@!yyz~~0|`qXWG{l%N|rUiY95;(5SQ<W(M!VcSvH|O-mleu>-MuDjH
z^&m)CC|6Ud4=T7F&2tr1M$?s>^!p1$p56B#>!BKttu_NLkDt1)DxKXJ+rQfZ;Ji)n
zo|dM5OPsG`qXlq|wIqpMX|A_NlgSxE2X374A4xxhnVHSkyq^F88noRq@jyL4X8yWu
z$*8RQJGTM-wU~A%a3#ijU&qAqYIJ?Qwa7>)tbXQHACjxbG(e0DO(F_;U>@0eS0)Kn
z1olt&J0@m2T#`MDfJ*tBY_YG<YdJ_YH)fa<Wm1Tf77wqw1{X&y2Nl^XfJiC<)byC5
zB7eyowzq`<1HOU5AZ-bHK<cw4h^Fhv!_&z!!koX1NZ*QTNkpGakOdhd%vIC{atp`B
z4}@}vNr_eGl^<pTHF{6<8lN^-JE5)M?TUaTS02V?6bTPC7lD#)Z@*gl-7Uda?uQsU
zN*~oodmYTH#eC>UFysqGN5Em&@@E*!D@U*i&{Ffg^H%wQ6BB#ixB6y4md%mB1UtD2
z<k0&utY;vM$*lZQVTs*-6BN{ttv(PEg$eJHijX3QdfX-eG_NQjfykznWP#8o->Msf
z!7&MAc?TIHw1Rx%PDMrxTY=S*z1V2VQH(LXBvPXK@YPr*L#<cIWn$dE1RDsjootBD
zC7cy3^-&DcC?&gGoZLFzocr@IE7}R?v=GK%b(bhOcC4xNHa?S_TsMF5xw%HcfGtU*
z24j+AYK0bg2uT$WJ#8neE|yor(E8BDlo(ZLFugOsqP=+Oh?!#P9#VO>7mG)7(dE;!
z5_nx4CEj!$`0pVU_OA1aU5Ow0mT<_PH(_%Jqe7%Q3qg*%V8sA|Olh_l6Y8!8$D*|g
zMA%HfM}wj&<=R0%z~7fzs)7W<$kKE8ca9CvR($NnZp@XkbL;c2wdh6|d45B5gIC-+
zRz5kRdwjb}V!QP9`YBB!P68%QDHy!6&%)Rw6EKNB(jcq|O|?D*hEN_DlJD8_;K6VF
zw8QVhZ4QzZTlKnnzOlfAWNfP12xgTC%h}5p2jDjkV_wu!uwA!?cC@F_)!^}?C#Q0D
z0~51RTb;7n<*sOSX@*|R=90we-Q=G1A2El&Y#y+M@{??f>QqQ;>K7q86Gm&sLLOhN
z=I%ElM9A>GnU1Cz-?dMRiy*K>km;)<#%%Vy{Sp9d4KVSR0`;s5>TYFq5Cnb~ccQ|q
z7GXh?#0`z7tJCwE<P9C+Cc-d|yhwrNjCDT0w?RF7Sk5FCmk8`p61?#S3J@Q-*vW0^
z1`s~HbUZ0hqy2kTjY@>cSZgsJ>6I6<$7X=mjupnG%1FxsxKR4@S-}{?3SbFPl)~`u
z+{rB2RqGiAjXkFQd^!!ILt&{-Iz&8*@j<-~uVWudw%xiT33bbjay};@cvbUUq@NO)
zgB=NK-yzrP%4NQzpOP?FjqHq{iC1IF549Jwp;P5F<KwEaB~g(oioZ(mEAnMZY-uIZ
z`W|hmquwhQqA?dv?sR``Z#NZn(4TEhCEUlhvZh5yxljd(SH6PB6*NnCBE&bP2d&&H
zK{5A@5aq{R^F4SNX_QhNpfp$x`HDrvD3&tEL#THkK?q^uM&10vLr45OLi_$BW5i4N
zPiQaf5tq0dI<B6jg<LAs5e|npSn%#y@upR;<((5Pmg;Mh@kUd2m#gco#nJJutl*y%
zg$x>Lh@#arilf-GYGrb@;;ffCiGT@i5PU+RLa25wR?*!R5f+)vY&Uyx)bWF)qXVuG
z^lf0ni*jK0WeHBuba>Q$h=1UV7|gDQw&QP(WEbI&4GEUm+0oG@wa~&cB}31)Qq~8O
zF@h69Yu4lERn|$l`26p}#^qCvGp>`bJOei_U5?Ebls$kj9C0Vg#v;rrr$(_EZEUA3
z!c;a9H+ki6!_)U{5gAVpnJA63@Gyh|vnX6|>zFgbvuIY3-QZHL;&F1WfU9P`E!)p)
zyl9iwcM)VTnV%COMWof+otx1TY2c0U`=}cz3p<g(_yL-IY-{rC5l5wqCU7lApHk}I
zn#-H_75*VIdkrtO0&Cmb+%K(`<9gS%)pX@oq+Qg5L!_f@tw2N7d$QojLlf?BWcfv*
ze_tOL&p9pO<($WpOF0Ow>`>%*F6u}SOZ5@SrP8k;4O>rB{EhI`N?MYm#%B$@#9cl-
z1_-=mNH)g=`8Qlw1LmG^0D?O<klgXGK-rcjT3ZsmN%O#-LWMRRgcXJ`bDg9uywT!q
zW7eJi)p1G`%Qu#gae7_V-%0MOxaPZ}MdIUtE=n&img@ket+2(z;AuK&Z0D^ayKI`@
zHFJxMd_-+$ffSBZ5oAAgJ0bTR|1HCHr@fpEG{=jXV5&FlX171hoTjS&MkScvxXbfW
zp4fJDR$jq6@D<adGNt!Wh)$4r8O6RG!+j4$w|;TU1?46&$<DOekpixp2Uw$XtP{(O
zJdRB&Dc0iktTSfR8K^CIrG}Z<mvjXjhg}N2Az8@p$}uz`BKwlpwQgWHl>vOR)0)Qw
zLGi!f&fkE)dn5Zf+hA%{#eceW?M8n}$ihb4k(*-t0S&0=ihL3OV&e?-wCYzH{E~5L
zEiJJGLLNxr<fy{axSpAqnY>O~Y=e$=R~Ne0q6A74ttk2`g4%G$@7-@3*9r|-wN+lQ
zvO)!su_VyfYJw2`5_GK;ZSs`$b-Yrz@fVO@S63v)88%=T)Xr`9pIgex+S0MP#M;(z
zTi$Dj*P7XuR7Ud(iFXmcJgDuPH^nry=rFv)4C4SKwCVkk!?*h7?%pbO_U;`WUL)u7
z80{i$-E{*5xu!z!RoBg|l)UOR<kTWoA5)uS{8|N5cC>K%6&kwBIS~(G>7GMOhVgT3
zARtwzk<3U^Sl77mWB0v=0?-(k^g#V9UNy;}PTDBm!g2<uyGqco(MS+FZJpFHlnz(`
zIiz+Ae_1x?D!RBOW1=9i{rh+qXY+fFI<gC*hY7fCv#jwDtx!+gjPLPI!xA5(QW8~c
z@3I;>s)xI|Zv~hW*26Kkb+glWCh2COC`DOCZf%BW=yG);!(_SyTC`8>s{BAPZ^iZj
zBR$1;^Cf(exHq~yylX;25;fl4JjJ!BZc}s3WraY?01WCss%KatzzwU#>Vaq<fUW^3
z&SoVEyb?1b=R{Osh{6)(el1oTLaNAI2NPBynxA`+rYOeSxaJ;eF8#uAc`J7!6tJS^
zRx}Ul<GSz3#l((GA~(WV7t~IEz^<Gebv8dY1zyzs^CAbf)9-h)7X`p0e`gVB^1sL5
ze<ke%$M*N>%MoDd?-OHzngftaAA$$7Uw!$d6ARp-+OX7$^}&d!1vJ;tj$ZS(mLB0I
z&j?Msz9W{HOB#o!0$BdYs5(niNAmgPL<eOduC9Bf0!Dg+2t(|85^pTcoZhfmS)}Mi
zk@%(KL7A**Y(sad4w_?fk2c@Mm@T%omC}HWJM_aOkE`f?sc*l%DOp|bAS5%gQAAlL
ze<<dMM22k~`+wGLw0Z~Pf7||o{h^o(q%8dv6a)g3W89x!jW8OJZT87GE(+)-m9kRB
zx%KJE#(X=C=h17h5><v9jEdz^<$2Gc=aXsNtDtvZoYP)a&V{2{pi{I!6@G-^2d1dm
z(3DQ%&Y1Bm?nKVn^GB2Y!<FU15<Gl>&8fv=KNIUh1Z{iMt)V1a9Gvp*u)Jz%g*csp
zF@W|#cjK}CkJMJ-zfL1GR7By*9T%!b4RR}&sYcA&fc?dX+;OU6vc#9XfG8WgrP#tD
zb>9<R$1cI9T`yJ8v(nEGi_>}L^zF$4@oJq0u-v!~{<Cyp(h{J0eyYNDve;=1L{PyT
zpA6$AMg!uqpaEql9}NJgx4rBbMRZP7{{%UMCComI<ag{f2znnu32S%R=v1Mh)OfDm
zUj3$YXJ>9<RZAfKJdm{cL-|aPQe?2OmSBO4ap}~K&dPA)R6hIH6OQ~$Zey#TUXFbk
zuaDC`<UZ?af88>;%%F%Yf6eP6TZea=0E3D=f?;VV>3cXW0e*)Hgw(%2KD-m^VOV5C
z9E!42-3d^0rH^#>wQ!lzH=R~dn#Ad>kl`%G#C^m8ZtTtLmU<1Qh-~yS=(Y~Ji7s;r
z#Kl|3f~ryuD!W;&u2^P0D~Fm05gS$_wkK!LO@FQ*ar#&OgHVIJF-qPg5)=+R6%l0x
z)QwR@xm;Wlcfu8QeVKZ3t|gcz!d}u!K9Ri|3*!S?2(b*mf%o#J&I})hvb0X<HHyOy
z0AIAl`J7+X=5ShJb_F8g><qek?xu#4>v5qj;MJE99vp)w$cBPzUOLg8z-?3t*V897
z#Pzf->f-vhp*y}>N6o9)834tKv0yeIznKgjYY=+A`&n22Ol0*07B`3;b1^F0m&lSd
zE1Rc(-I$y%8&`Q<uBPbygpNv17RVcIWqUt@)7~4hXdAns;rh}2Lv8Z+q&$Jj!42q?
zU+@JtM%T|o?^g?XgQnM7XD3GX8&SgxM|G0!rBGy2M2<&w&q+%f&3^ZGH|JlmMby#_
zP6-+^N9x?PoVv?ttPsE@@@6|};A5R4#;21rfsmG);8r(msnMTfW!<Qunk=r<C#lhv
zz;7VHYAyii$Xgg@X6&}igAFP(Ph&>}9|=H^w{Mcj<c3*HCA|<FTDhe{p}GdY%kJKM
za*qKyl%iZ~H===VupiO!)j1embBS_0$ozQxZLCoh&ds=h=NNZHOslOBkgGn%LtU{X
zPI28mQpPy^XA>jM6%k@zVX3w6BzP$?eDoRZgqS0eh<n90aAnNeI@$=KvvINQrl#MZ
z{4y#jrl5EyMZFvfFz|#nFf=Vc&x2Sv?JYWu<vf`21V4h=8eWxD$j#uXI0&eM+3}nz
z4y*1>7jt(t;6XbF;IR9js?EnuKq6LmCMMo7!kRD>h0o*>KtRGOs@YBIh2{|J=k5`Z
zv$ZmdhqyUcZ(tg+CFMLZ_fF%`%KSz(&1z_qDxRyN?5HdZH9j?Yc5IN+x4!5)iazgZ
z07G|%`)HO*dDWdJI_im~SkFnWjzZCV1X)cvur7lRahfChVa}**uL#*npcw457)SGj
z`)lY<^(-nu@ncvYM~;pd<sip$8%{ctxHv}T>Uha>Ulm@UmbuAyvOT%6TS33_WdJl~
z6`5qvh+zjY=*7vn@l)fIjp`06O(T$cXFdUPaj_948HQqOkw>G^*xlU)`-60%vV$93
z)PjSkC5NF1$(4)<?nb$!yhIXp*`gm<t~s8V7dx-Gdo0a5)F`<z@49fX?b<vMn=XWt
zF*q^ZH$bE1T-1Fpg@Y}&F<;e>!8z%zyK11qo*ku#_i;8EsxTpAXPl#)b9wA3AU+{S
zj6Ws<kvr$idqUEGUu_nlD_Lae&-dikpp?3Ws$6mE7qmInuKkGeG~QfwnwEeO_Z-o}
zl^G2?889R8dy5@5+u7dU+3pES7#mfQ-ya4C_fqd{hak<jv~hXrT2W>LL>JgVPk!%_
z3E;PLS~K%OJDx03^(ENgR!=K2hyh1Z>Z}!5ia$3fKkvrda&KzT*)39hr(eB+f_tv#
zn%{|QV?(C0b1NQWk*<6gfjf+ndsG#=Un~SFd#1J^84^`fh(cbsk5V5QjRLPCR_e$*
za`Bz#m+owgB{0S_)NsYSEq^|nymhS5F}d~>|7>PkmR0b;k=28HCaN|Co_+PvB}}{i
z6ju!B{4fPp`|6iABlLA~x|VVi_~kekKs4TY1KPYLL?A2{7a5?yGam>mOFk16WSaIE
zpD-x;tW}{`hO8^8WjxUi*{~J;EG4>}+BP6&u-PLB7CbKBW@nVLFWtrRHrwiLZ##16
z@xOkL|N1F!oxJO1olYm3D1;_*=;>rA)k}P}MB4OwKN$@1yPhc&c5Te0*t<{pFpz7!
zu~~WiV#nJ#AuTAxSOmjh5}CpqJKYLZq96JLELKY%W4Eqys<^KF=WQ#3fkff6ouByd
zot{dL)7@X(1$WYpH<M$#*~;v}ZF%s0kGiVQPRNHB2;k7g$JSrYRV&=nnBkd1jE9pD
zL}wzAIwB@etZEBUfoav|xRqyy^cb_oi}Q)*^{h~Hf^U#5l7kKg!i-HK@!*Q}(Tdv1
zYuvH)s3B+!f4W1t7!QrzI58BJzyz;OLU96OyadHdEPRJ|k7Fi9_P986?=;NpX$7YV
z>#mi_PYUZ2D9Wr~L;+~k4HVHDah_RWFS6wLIq4^4W-2TATh@^5{WZ9u$rpw(j?k*S
za)g$ATPeIe8#6(TtWP?$O<%R)2tx7~QTB8)*X>j!`)FB8MHKG0Jk)ok=Ofxl-7L(e
zzK;P@KkR4~ZE4lyXy6734Au%xR~?lYh^lo*C1kwp1Q-1C<$+2Qp_Fi+mOS@B<vlN%
z(?+X%;H72J_ylH&1ro<~0on_erqQrdeQ$P!5`%VKX{Xu?Uys#Qw=7q5AT7JrQaeef
zE9($VH<{(+VjQNYb&g>^iV*9fbN=!m+d5?dGs^T57gBl-OY}7U-OBDCehZuT2ws?0
z_WZ#^H9k72;xCIrn>CXav%$!OKku?hS5QQVCIyQC*G%T5)7@v~t8;I`aJ<F>AQ^%o
zoeBbeY<i+p5dy^(xLq?D-4+w~g${|}ebg1wf)A+ARryMaR$-x>E*Pw1rWw$?6Jo~@
zP%5W!guB#65`-Mpugs9@bX7RAfb8Y3Ir_(}NLmF>o)0sxxfpYfYls9hkw&Li9=C*x
zZ|GXmL%IuVl{mK*{D4?x*7gEP#GTKJd^V;V;)Qh}-eDC>-6cwfVb-xyN)vdWBgz3f
z%FhRWof*jBRa+%22mo`5Ux<9qnw!RjwV#h?Qk(~R<aM>xX3T0{(5xq4w^2`Kb(@qL
z;q!pLczEZTYRxoZOAZKj+pCCGP=Hr<`Y&HkHA<a*%o;_WfF3sa@D6fPM2U$Wh<~x?
z-RlvA#c>GPP!WD91@v}TtA_5(EB$A{=-{U>c<~XPPnnJmVflw{b;VdjO?dw}rfe6+
z(o}=5fxrN3&RC0pE)Ko>pYTL#aOC3kVE5~J1_Y}#i?a#}hvHHxI+F(sE2NsPm0+b6
z*W$Y)UlhK}kXD5{jyFkg^J26(#bQJ3@pu4MK&ii8&WdE*5I|6uU^H>#kf<XGUPsN<
z$U)^q3Y6KRaest3q?wX`s0~QBaXE5AI1>Ycd<lU=kSJ<{RRUTba#YS!o%yQQq)VO~
z{H0<J8R)ARY3+DA`Gr1DSl`X$k1-gD$Ey;pMl^Xhlw9WSJ*n~u%nG*oOmh~sMiiL)
zCp$aYV`GrfC%Qgf1hWgkSB+03I45cIWtLy$@L79;mxbF>eTKA;P#t}FKnSmydk^tL
zM@|$FP_NmRYqa76I5w`azSfcd-HKb-dj{xQf14k7Q++n8T?fPb$8xA7g`?2;WT+Cy
zeR-QcoOKfv%BW8>8Hv1D>#zgyXA99w$_M{#H~xj~hA`QNyVF=vk4}5C>I+GnmFIRv
zHyVTDR7<P5%kPtT2yVF6Y^%ES<z{>jLge}6#x=J5<dWzc+;fDL)i!+jrb$<U?@XPH
zGEerx_HJ`AKW%@$*=$PO;*Ixg%z_+#z)QQB?eZP!g)1&RX_Jly-9$g`D#T+lLivgC
z5^iTq0;MRWBF+0ne<|)GlK=f;#%z*sDYfuF>g`N4jh1OV$6mD&5l<wY$P0dLSrB62
z5dv`XREu=-nc|L^krqm)rx)KY@aroA2HBD`-}ODP(2+Z7X+YMXsPUb@eXk#VepY@D
zk~AC|>DTxzCbYwM-L}$I1E+g(b3W_hdDlPhF3MVoMcnwR9_6VjzPm<0UnVYUG)Xg@
z>ZnlOX~}BQ$e**CdK!wXu82(_U<T2fJ#X3o@S9S@fw%-YhFN~m)fkL)B=z<f3?q3&
z&Z+yi+(<kKO=?TN;e&_T(etK);gxe6;63SaUwhQ?sky<MJ8XEh)|<o{${Cc)T5uAZ
zK5^n1fmAPYqUjwY{=9~0=XMtrOy&h^m&lHKZO0CdVEY!+%5;ZoqUy!FFCCSF47Ef8
z2z|j1DJdlHY&O?+m)%<1VfWS*U1qng>h$*dPH$h;>Fv#C4LIdPl~(Ub__z*YjgD>_
zQ|UZU`g^Eu{8G@}R($K@RkI-4t(4R@zb@Qy@^{LwHh)XTnzYi}NGnG8d<(ajxDLTV
zMDY1tkPE+Rd=iUD(Nb=ucCl7gm)q3(kv3bBQ~z6;%tv2S)+P8lBk`Le#-yLB$$s%m
zDr?o2@MNR5h8vI%uUJ754CyU0x$Ff+r}biDLhe^DVT|aVHZ+Os6`iS$%U)Y5OAN9J
zFh0Tn&V5Q*6iKzph$Sfb$6uSK8(K%!iuI#e63-6Zt%F?U%MkbXVnsY&?pc=wm%{qU
z$P=cU*ssWvmSi%;r&p(YxaQpzwNcqe%}l=$94rj)rUS%~f>#GqNvKPHLN}4dRBb4j
zutZR~W!*r2T~(i=Yj%dvTbMfeJ+-?F;DHwlgb%{}=stl;&>><Bf2|4_W2;w(*|UQO
z_cuVE`VK<!s978^T5*245y1H>y8GY&9$zM4aMC3&b&n;95Z4L(K=SNNvpKLq!2%_j
z6c7=WnH$owuP+?u`_)%R%L|W_dL~iz4n`wwQLt0<scJW{{b?Vrf$ihUZ-fgXa8zV?
zyVJItZAzfS&N)~@Xa07+*|PWCj~04+YZJLdJdUhAUnY5W`r%`_(VbK$H?u{QVO84I
zo%Uo_3q5Yj&FtFAnl%N@f*KfQ!+h`&ebnTE`t2{kaZCGv6&$$3ViVrjtzSfld|qqz
z(8Z)_uV1}cyNHoVgx;wY_7GE;-S>QJGcDkq=+3$BSCd*lD}lMVD$ggwT(gcfB81L0
zSY$1v)-A{W(PQr!F7gU0dudg!B<D1$e`f~%YkUiFQF$MBULq1Jn7Od3{AA&pi{&&+
zoy*G*ok0Uy?@(^(0Cx1_NPY&3l7#f3xbR6f-c$`ep+gD6Y7xCsW4Jec$`$2(nMliZ
zVg_9QL~{?7#uR5Fu<YXp$tv?sx&0enBVGSA)+-e_PcN1SmyUkRe$4qbtYvIr0m!nD
zyU@M5n8BLv4p_y|xk3H)sL-xNB|(J@<(Y|P6!q(+Rlv7>-j!dv#CH=VI5_!Tzt}5B
z%!2*ZX&h<Z5IL*7>chB7dP(C%tg1X4$Kw<di(@|)<#66ECH9o1PJl?~<@j9_$kCCP
zo0^V?im|_$?W}51v57^~02D^V^`tw<JCpZx7~0gk)bOz2wP7MYLR*8A&a0e}4>4_F
z_epfOp?C&9T?~45wOpn_viMa3yD4x;3M4DJ3o)(O6}bJ_XPsz5Vy4C}9Us8yo{-3=
zpp9;lHx)sjqPeD79KWdfMX%KZt!4631a%*Eg`putx*U8|r`?mwu6w;(4z&B}lzu9A
z;K!Ef;S;Osi5@Ruyn9cmYbzi%)^ypmIXO)AIOi*FgINH|(z=kKlbZug^Qf%<4@RSv
zqGRHts-c>CtlXf}uFH<NDsM}~L-TsMt8WpYq<?wF(VBg!rGNxz+NB&M-%N}g*XU2|
zPo=*!BN(x;QhvjeWP|JP%oXWfWC>}KqG7ONP3!3yt3+*vm71)rhN~TU>C^|G?mU`s
zsf+9%)F<e+$j>89TfBV}C#YiB2D<6;MY9`Svum>?J?0Y}XgrOGqJhf=a~&bF9t7hv
z8pnh9oJ6S^Lx!+G6@W$vnoH<RNuRK9sEjajJQTfGlmZAFOx**_F9s6wztX({pc^+3
z*3QO>=7)erILYqbym=FFLl9gv%#O2iqs0_83LA^3c$9DFsK5M%^E)FTJ3@q7*Us;e
zd-<do7pIn1Vp5AP8Ehq*3~_iz7eL(eY*7K&^DLhY_=+2^MitFG3VrPEH@7o$j@=#2
zo+a<s8-qJ~V6=?R{5&c&iuFjjfGz}gA|Hm8c2cQZ!<OAhK8q?ybb&i6z&35Qy2OFb
zJk@L|lYue6saU-Ib0O52_oyikn-uiG<9?jt=g&JcOhhOZsZUQvIN35?_ppt@v;!?R
zbuXfdJIdcv0BzB@5hg#LaNURbG>R`@!=pPIxwq~rN|2*tI3@{e+unXM88az~OE`hl
z2IOVI=icg#<kv2K?c$=n(`%Z1SqU6AOH%*!pZ_BR+hQ@#?KSeSD-WK}PhgVD1l$2y
zj9-Vu#V}6wO~}C>pS4jXFX0M~_GkU`sEF=cl%Fj@x)N4PQ-(TMrc8dsXI>Y@)X&s4
ze7)ne3dGQv=|?}YsMK;JdbjwN)R$syB$22bvp`1eT5v1kVPSJ1FRt#Fg-Q?@XlUMt
zFnX~OFboMU{z3{LY;QLW_SdR$D(<@A8c8I5O0>F)Mnff*U=A}1PktrxAL*9%hFRtK
z=8MT>t{tl#4SLYo8F&XFZ7CS_wq~xKhGX_j&|vh72iKQGkNIRGm5<!7(u3xp_0-ea
zqb@LrP^hrhm?!xNE6(FGJSR)ObF(6V?L?((2sHVrgnciNNCTNfOI!N{O%P|P02aj<
zhzYD<G4UWA0;@$$YP6tYn~!~@JBzVWSrwW^DOuERk=oD_z3l0s<!g|;dqPkY2P8Ng
zD#K9-wIif2t^PO0HAiGdHxo-Km<fk!kzfnQRR&a*9x!30@}Jn=jt-go7UNR4)Vtv}
zJ}NqoN%&kVoB`9K5AQH>^8{HJLQc2cE!SE3H9f)hrQodLyqMk~i2=}T4!=2go;`kc
z|C{{>J$FRhB<5wmij%sLgn;ss!fg~U)dr#_fq@QUOK#v>xPeWj!L{3yQK}}`vs$rD
z&7k;S<At}d^A!Wv0~jn`Yx_!^>|M!E&NjmCL3Du70A0C50KaKIW3YUCdXD>xkf8)<
zqp6m_N@@J8ftR!d3!@65yu-Yjx3SwEAi4vK2X9c8Ol8W2+QC$t1mZ_kOVKVZ&(eo#
zOlh?|XM}+#vr;S#I+0H1Vacok<1gKC^0|UmI})<5>vCpR0<`z3TYp0<0SuTMbPq;M
zJuB9y=8)L#sll)15qo-1o;^J{diJ9G_}Qbw?z5-eXZQZFfB&d^=$`E};I;2dfjPa(
z7ku%_J9EkT=nwO9<OE>1E1|$@Wu|(DU{4lR9p;Uvd!2R=3kyMn5V4_^y;xLp$l;9!
z6)3^WTOmY$(G`5YE;DUXoKSX3?pjr1(W08+wW6|E)-XQniZ3eZiATMFs2gx0#8%@@
zX1_2(65}dZDa?JSA>w4Z*R;fnNg`mgSU*fg%9*fbs#;TOnrQg10Q5{3gnAoKW>F1*
z`2{$V6@db0kfrDVFA%S_?6W5dj5}PQa9JyS)$H^<F6HZDSe{QN1I+HEV4XuCB{S++
zy7oc$l5$2OW<+I<s=~$*b>+_;@sJV_!X`~X!G3U{vr&F2=|=#j?K6`JKsWI6z$oNI
zlQFyy#|j~@if~dtA%TZ!%E``Ip?fr8)Lq!^>;i^+j&8s(RNnO^{4qt8v2anyn4J7H
zm?71`t%ssO>T(0U7xHniskQLdV1juN7mPcd6M1Vq9g!%ig%`TV#oUa$STnS6(&uaO
zzF5%sJU8GUTEWH>8dw(M1}vm*a<td#JYQQEva6|$-M=iHIK;<0x4Y^|kDdjgTWtmc
zIHoxqQW+CxSnR{hBRXe7m?y*PqCB0C)%4mYUKFcms%Hi%VO759D<mD#3c=AxGfcmr
z=IFGn<zkv2kSc8gjAuy+VCvt`)}Wfx@x8@|ZN;r_KqbC<JB&HfqW5U>L0`GkJ)69*
zcZv<-+dWw@E}eE89vTyBf*m}fKzHOkvwwDlqSVr~SLwY9b!|e;HsxxO(o(xUwwT@I
zgsPU>$;67ge5q)-e6C0`L~_NwbR&Btgr|yX%~n>3s1otHJZ?f$U&<Rf|I)jvb-}3B
z1D42~$~Zk#uhM*W!F~g@s9g~~xZ}S3Qg4c$RLd@iZ-0xKy#8A)yA-r0mmej`eR?@9
zRpuK&&#uP#)X83RNrJM=B)ruE<Dsh>_91|VixA*MuC0rLsH5V0%Cn8Bqpy6n;fVfr
z7*b18R4#dINn)k8Q$R4O_%4ng=J-ZKVTgeZyMwCrNa_OE(rJ#%OYmP-HFng~&jqC=
zpKHbvUvzgzB?_vqkf)GpV|kIm4E|;H?T#l|T<?a_ZJJ~XuU0E$;$XS_q!KnS83O_}
z64<v7goyNZZyG;-JTU}XU%l|~jsT;7)>Sox27{zv-Kiv6Uc*YE>ZDjdgN>P1A#VqY
zjR8r*1NGUN+MOKD3@4W(DX1~i)Q@0MfGXs8J>n0<I4+V^PW<U#9mn%uIluT1wTecs
zC^RyX?2*YIp$mm<k+IK7RUAteYpa$~D+J+RRU!BOe9{+8iXp@ppBfVKj^j#jv@5A)
zZdI-^yy%cuoVfB6jB?$@Z1@gEICd^}e)2;(7`%fen3F-lzPYB^tN<sdV<kY~2YN?M
za0j&mpW6IkxKm*Z0my0Hu^$a1`_d9;I>q?S@#d>1-B-_Ed~^7G@BaSg_mS@&knzt6
z+`0V5(X(&%pKgBNsiwnnzO~ueY)XvUA6^|Po~|Yc3j8s9EawX?7aFCJA3U({$-{4o
zOAfL3>z~2^j&FYdu9G~t_5HhE_+s$wl~pW-xDQzG@?_7x;l2>{cAL|ly9@EB#wYf|
z9a%~ZUpUl1x6tAf)Ch)SbaPR)3#g&DHd}y>-5XzK@*7$iaqeO^b;|hl8q#Rt&4~VX
zv!CLnX)Vp<oqIuIE_CFM2g&VxAAtSifzIH0?Xk>6;)vZ$x_aMtWhNnvYw0j)MAa<w
zub?A06xRzwY})RX;Xndy_>IW`zez+MfBTjEpt&QEvfb|p{Md2#MLFIKQ<7K|+l&r!
zhqvkz1npV4$YyoNox`2_I9!W&?(6_MV~chKmTYQ9`^~3M2$jr#c781t2dm=uof9{K
z?DxOd9~9^|`shzc>coERx?60Bhz<RQ@AMr8U=b>`kzliNlB*QO1mrBm8fbV)P}VzI
z=5rQvek)`OCc$f4de$r2>O*S2wOS#7f8`Cw^Vx!I(WtdU`8ERH^Zqf@n_$y9JD*<^
zOdzJYN-t3bg9I-oMkJUAK^OR4|H-Ix&y2y~yowcK*I|}n=pU|_x%izAy|+gE7l(g*
zthFD+cWpr`Taf~xN=6e1q@#isqn4r#y0?AY6fuptr}N1~#0x>Hk%H83`%F#89B$pr
zU_+w;Pd-j;I*Y{$Kn}~HJp4=@F}u2xoeuLe3AASpBu5v|D<E~nV5{Yz|B<k&eAD&d
zB*TLTnV~ao!T;Hm0vS=v37*>3J6kHQ9z_Lm_4`&?i_PT{71eU@`2m6S(4B<X9q;dZ
z9S~OL7!NDD_E!$m+-LRL!^z-)OXk0wZ5g!Z-mAk__UQg|I)2#!OggSja|Ki+r8Pho
zROOuIc_;@Bi7ua@m426iTUJq8lI739GCG^<yKY82?uJ-G)E8eQAcyb?$Qx8LsZR@Q
zx`8DIDhch>r3Qm`qHeAHk748sARw%LaNo~HD*bv;;Yox+ClI!j{Zs|=DY#O$b6m8~
zX0G?b=fxP_m(+#v%>z__v`6v=T<+>?AnJ7~r7S#nab>a0e*OIF>J-f^<@u(YlyHhi
z@(M-(a@q0RwNeVS9^9&jv?o9VEXJY~jt3&FqwLurT^-?b;WZcxQ7=iBUE(0ZuN2av
z^K|&&n<@dada-|a#C^7GIi)3;)d&_NfV%`&gb#yS3<Qc-6PQT^r={L3B{4OaW!NvL
zWmLF{9Sa1N??Ubm9NK|+@e%Ig_+>E@q4X>)Xw=1lqEJP>lw;QH?W^(8gKaB|_2nA0
zhpmSae4%$(+>^UEI{7I7aWc*?SOZ&3bMb+#mLrklb+H4F)6>CwOt>Fkva_bu&c-&2
zCnk^VegStZ;5uI>RnQ}PbbFc*s!*4VS2z%@8r*3FDMCt-?zG^D^~e@ZPV}@O0)3<J
z1jwviW$iy@&!4#_?XR;96b78k${)2T)V(4{KH9HMNZ-gdetmE6aKC%-^l1OZ)4j*t
zmoFZh3>wS+ybpFb<eewqb@yIAIM{!Be}5y$EEX9_N7kiUhpX(<&!u=-6oGD=VCAQh
zH^%A|sn(NJoWCS)v#MK;dwLssn(U-ylPj%LwrZSa*k0-$Y(Q43yZ@)>2QR+s9`4^i
z>^X7hO*xy48Fyu<W~$jg^80HYA_!;ov5$DkDh?pD;o-_+;&D9%7Nv*XQ*`}Ike^C5
z4)-2ds$;^%a%EH%cKeBDu*Vl)xEFvv`Kmavq=Hyez|VU#=sdamZ}-{VG9T^k-i-dU
zi*N3XF1zm6F8)m^KkDyD%9C+ME$#ELpcXB~RyW<tl{|1dKpaWlPn5BvL(|5x6{;9R
z&{w3Z_ahxbSD*$R@NX-1&6Qe}@1=j7ID!67Es<Z!=fIG_UpvzO)&?r$Nph4>xusS)
zk*8Y@q?{dFrPRKmNnf#<=1Vyg+#oJ#7e}UhQ6Pp@7In)f$m<q;xpDm++GzQ=>-+Sj
zZd2TQv{_$nguT*Ubo`R1A6IJisI%<Y+fO|Hcq+C8HWTI3FUjhZUnGv15KV4Ltb;8l
z5LHc)0Ze2Rs6HuQb#ke!^2OopyPrwyko2UUN7qQJHM_aI0ox+Xk*|EYlKaxQF7ZkJ
z?%)NZKU?e%tet~=rt+#px%V6o?Cm<GN~Idl5|d9@&{$av2lhFQ2_Y6FFP_t4PM3&8
zliBRmB+AHemd_L{&mR?d&2@;Fj$T<+y<N`J{c9mX3;y$}S(?d*pD)KAFupwgrOqkz
zjH>Ji((gIRUWZ~bzRLHNySRqszz9UZ>J!DRle|_|Dm>3c`s@8vxDz~lx4Zk3`mK<p
zg+G}BZGU(J(Yu~pXWmY&k$GD9DGY1FT5QM*hkuOfq@-0kB$z5Sc(3ZQ_qza3UJkzM
zZE%+y4eHWFby!J}i44pQ&F9*bzXxhXAu;Z;Y<xaE({}D(PVSnYkHm~?i5qFRugifp
z7i;I*w$TBgFyl{wicoR}f^;68cou1`v<3`oT^cZ)zLexEtm6|c-$hSe>-yIq4GFBU
z6K8tAGrInYVkE`J4$4rqUyq$Yz5@*Ka?nm<MS3xyC39{F_L~|B43SoT!w?8~)ss8~
zw~T*aJ_8<s_T<54C72Lfkz&RN61Wu5gY(P@bSz*S{|v8>p)N~p2A(NT;NUf<l1Ne2
z8n(P{?NOi&w#xmAUL<D4b-|*g{3Eu*0XD*SiuQ(it8dt!wRaeRA|FM%<~W=dl01&A
zcEEqzpnL~t6)N=ZX7R!C$oecPQ}h>-?#7PCgDytYUHb)?>jHa?F!~u*aZ;S;!&6zl
zkXp+2Vl04*hB4=F;EbYK2YM4@7{OIWNOhWwr9i#9ZzpD8usqFhW^KN4A#=MddP^cj
zFRB?TBm+cmL}KpbqZ0%lEGl)l_iXihr<2J^KI?@Qi~#$J%Rii-JnEOv%0C>w{PEz{
z)AFD?7|o}DzJKu9!FVt|8NHb2uijP%<C`7VcG|!51Z^jSuU}mBf1JE|eEZhj?{0rF
z?>~CDC=T!baB}-*`S|`H&IhmlSUww8W&h5LA0Lk%&cFN9^vy{rzyIm*qWtrp&Myvr
zn7n=Z<KC^OKYVxb?C9k!_ulloKe_jQ*uV4S!ONS^9-O^>di2tL`{}LkN;jU-!`COT
zhKoOb9me%|^kO*pVe;AF@Qd?5Ke{zNDZe;BdG&|s;L-5S;7?Ca`?sH7=6||(^Vtv6
z#mTKNMkkNHxa0mkI=THt`Q4umFxKJ8tB2E*`&abOHTib_-K$~sr#pWh_D91}{_5M;
z2R}@2_Q&52T_1lrx&4RJ9CI!YE}k5nzkYJmzj%88=EajoPu@O0+Pn4L=wSZz!TzUD
zE^iH=9{u_J*`se?|M}Iyr%!%(f-zit_oo*Vw;tvD=5bKEwHv*CGr0AIzB646FwXmb
z823kC-0FY*gzNqt_H205t=+dj{`pUTSbX>D))4)F_X_j+^!oE258m`g^B>**{_y8R
zwEgoNH`nui`G+q$4<A3<dr}?!=Hh5^|H+fzoDcqd@6pS<iznm!&YSj~hu{9`WU~0<
z-TQy~!)Ld?o&IM3;`7@VUwm`>;Njrp?rgvPw*B3MS>Ap!IQsnIoj14cKkdJ{ck9g`
zKmFmbI(z>3;i!B1U~x0wyM21lz4zG{-;5`>zqvOZ+|5t_^zHeRmluZ*KmGCYMLApi
zd2n!e>-_QO&wnVMR!^QCoL;v3-G}3c-Fy9WNB4iKE~b;ux-WnDq58wwox692x9{J*
zc=ng^<>$|iK0ST<X#DBr<(s1?cb`9ao|o0zXR~{Y!#_Uw=H{dG#l2fU9{%~$XM2zC
zpN|K3+uvMFrhgfJHyYi1I(%Bbe0lU;es})t#r)~%$(sicpR~_sf4ueR**EvU8Q=PR
zJUaaL?jOJT;m7gkdyCJ9&p-dm)6wM5&;K;|)A`%kr<c#)em;8p>g%)OH~rUp_x^l(
z@6Ovt)5YndPw#wo)@Y!@<A%G;fum`r^3i2v4hlCKCG`!*F<jeYO6x215cm9hwsYcz
zYj^86H~)X^{o8gMSC%G>UMHR+lFBX;Yyi~3cG^tKS+qo1%+e`E%C6jO4<JYc$w+|+
z7y*c8Iz2{T?VEq!?Y`LiCI0b0!~ZDtBzt||oO2xl0g6&OtEy|KyDLQi5$iD5T64|g
zH$VOCv%6n>`YFG3B87hW$>*Qn(=VOag5Jqm{y8?$@9wT+I6%lI>dfx0a2y#Md2f4L
z(F4PG#hhjH+>>zi@E5sJ@$TJwpO4)LKk47SdwQ>b_tTS;{wMc7f6y;J{Vf07=_Mzh
z-+v&j;ex{(>qaS0`HOP{by6o2ekoU9Af&tC1L^FR^D~i#0_3*)UZ)*Z<v6qwIODQD
zML2R4Az+eCQt&r~mKofzzdL*r*_+qT)YA4bLXHgX4_9xSJ$n4Jd~rkbe|9hW`N8|b
zN$~R8`|dCW6q<Tlf6(*nNs2ajmw`lw5{zW((a1Dc)JhP!YedwG(nn;$7GN<<?yZBp
z=M4V=@`d%)dEl!JrEZzdCj;Mb_GUiWZ5J0&u0rqP-L}iPfu02YTcV=&o@f29s9@Ll
zL!ZEB4ACj(9uNaVe1*IaPaj{e>7;@K=jH)?qHj~Q^RXV;teTXkgwk?a5+ZD^rV)l1
z44?+vq#zvgO0l$%wuZ`}l@yOWDQW|@HwVd}^XWj4&d~GGT+oHlsqP%Iux}-33`gVs
z-Fx@@_wM%Z{Z`J+Au=#vwe-g=(;~a_-^RWZy-xA##vTqpWY=&%?lJ8EKRTN1t~Gb1
zFTI*OWu=_uU`BCQ{PBsKF>Mq)-?6#ni{E~B_qShs@~Qjp?k=`P-<E2pZO?2(E&rVK
z@AjUAhqm>9NMNM>ADrM{xBSj$+Pd2n*5AVPd$(@Fb7+-L|5^WC+st4vXngx~XZ3IV
z`@QkPpjI8@><hxWC{pys31w=ZI0XAiPmBf<VyYU0YFv%Nt(ddSp0}ere>(tLuNOOx
zLCwEey4Bk8#;GAUY6)9?e%beZ_fcG6aIv_Y+)2OdUzKOwaA@HC7|C)yE8i9)KV*zm
zRedIL!Obq&?LAe*)I%A`;GK=ok}iAu8tHw!y}KJM2w%xjdf)SrQRJ)LUH8rQt=_|{
z{+h&#{$5)(p7@01M%l||s`)RKNBv$?&GF5qnf4@(2cHku*SU<wbwiy~!dLy#?Qcg+
zZ!20I?LSQxzl-(Re>z|MZo|8679?k6Z~ceW{~!L5fA~lKxATwKje(kz=j!w=W*5aJ
z3v-0%(q0q@ss+-d8w(YI$*1&TSU!#xTw?Fl!9bnv2^FJH#~Y8rhmG$$9neC0AG#hL
zT^}Y-?}ac<_cR`s;YIJHFC3<!p8h4yK~}%{0)Haa-P7&L#M8XKC>?{IW#7V0E|Yvm
zk2xYF3{CgXSMDeIT5$XDqf=5AJ6ehUf4DU|LFVaDTp$lyFTM>vhd+m2&%z^Xo?g?X
z?lvbN@?MD2l>1+Px&QKsh{fF2U{bhg-D`3k%NR}Ery9Bu2RM8mJtaaA1csaS>z}>q
zDz8vdbT_<c$|?r2r?x?Bmx~3PzjyZ%5&&k=$z=AbW(X15r=7{Xr7VhMi${7&g-BTL
zo*lw8hBtS%H)*TxbZD{OSohQhWv0`7Ca^jsk>QRVja_#e6hG0uM_fCCDpR^0BS4n9
zojlYV46QmnUc@uE^cT9)Z{HzeIqP2{75JgPmcHYJpXwolc|C(=0}8kO?cSSbN5j3x
zk6%CB)Ij`u_kTOM>;B)p-Oumey}Q{-AN|93M-P9q^&b&T(@h7$M%_^2J>RF3@u9kc
z>;NFieM&|0Ve5Wy&piB%pIx^ThzkaJ6LD{IXI;F@Pg}06n=Ykv)^Z)$&5Py+dhhCQ
z7Hka;E0-&ywcNDue?v|`+)t!K`_T&53`i2)JTZ9xrpETm1SI0O81H8Pt=`Q3n;*;Z
zCdRP&{qd#@Nv5{>ecY0l1Xwn0@b(>{_KmS?au>lZA8w{}-!wS>cEKu!Vx*^ft9@_p
zyt}uP?vl+O!`d$kx14THo7mixpH3Kuj~IY~zy+6Q*G}$nFZLu{2vXB3Ng)M^2o-0B
zxWTC~<VHGx%VVqCl|_rG733~NwYoDrzV)oua3+vWW+;g!%#hgp*FG<^KCiw_l?;&^
zA)=oKb=w$pyk26nVCq+)$i2_l`k2t_)w*#Av|epJ`zH_O<8+ah->F+mw5*d$WJw7>
z<bL;MRJE8DjwS)iat-s1a1ELMoS!WOEBe}XLVamgU9lVkp#e~ZfT^X_ryZXv=5k{q
zj&JVxtrb1gk~}}s7aDMcsf}sf?YSe^_O@h<Ni8H`IWk9IBB?PxLHY5}QBfhc#8C|}
zm;Iw>J$cB@+KscUri!6fXlj!CUZ1!u4X}+8A4)N}oi^xZzxP#}v!iE^U%R_10?F4v
zm+fsKDT|mA%SQ)1FC@o7(U(M=bWbl&-%c>+_}R;xfCL^ibI{qFEMVmp5`+lS1TG1|
ztRC2jpk*OXPYS5T#p53gJ(SeY4MnnxQ#fXcrIzYqKAf69W5MOnG7zva!YC=pceP2w
zIU?Ly4?L=l%wlXuTvmn^X)V0B<y6w>XRBK{N`{csR>1)k3V*+K2UG6LCqWyjmWzIM
z)_2>Ye^UL}Bzy$jbRTUQ{n3*C-3^$o_;^uaI^nek?zO{9t5St(!7!QD{ZOZ&FGZXC
zVz;m6*IkcN?M73)%UMV(J1G`dND>y#%_0cuG`G#C;h;tp<~;{&+6A)r+<-oD18U?`
z`&>*LqX1-)R`rAa{C*!$U{#;Ma{ZG@b<#g4rd^*w6#;0_VxO6A|EcTf>ymJ1OICXr
zGyBDp!M^R+KTM>rSyeB9uhFlUGj7cOw7}Uvy$B>Z1w<^c%`5}g?<5J#m!}LS?MEJj
z39(aHtlSOYakT5XIlgn`=d!s$f93}LqQYZDCbMm9C&dkXT4B6>`>F3)suO#r=hgTG
z*2ez3e6lP^7;H47%X2*O_-nT9R4jLkxTj>Wh(7tP>-^hl0@N7S(L4D|_E)sk2?65I
zDjfqF<YOV@;6n0MBX`&K5TYa`XCXQrLDO|yWI4+s))ah7jfA5cIF@C#zzd;iEyjQd
z0wyctDLY`9VyhWT*A<4Rhpf}FzoHzRRTh|2@+5Ci_MH|963{eF#btQ6;=EH;WmYF@
zZ6ZgDm8l0IAxLpTnZob3z3b2qE`jazV`>y}BlK~DOT@_|puIu#Fz;=JOLu(kz>SY3
zL0fqgjTMbD+zE;|Z7U<@iHHUJ96(K$_Wmt`3CcJuQ0W*C8l#VT^8ttPcRP27@kapG
zc{xX*Y6)ACkH<2A6z(y-omNf2@4v2YnwW%)$>eO1&7_*>S~bVvF>HK3s~dfO)aU}(
zyFJ#&6U3B*&~)NRd|`soR8Xr0El07XknGpXj(M$UjM0UY*Rc69<EP6L8<$hyPj~JO
z`6O20VtL}n(d}CPBkrqSz>;)gq}*7Uzp<jkIf)n3!!05tFL`BPas-SI`TL7U7ATFo
zZrtqfHe!d~r3y#vAH9{t5~bPkc4lHJ)ikIqj(i#k$$Rz#h9s}`@mk-8hpxC7Qj1eC
zL_~l^k)tTa&yvfU1SSQ+bA*j~S%B{=qE{PulVM=zEc`ijayh5yD{bNq3^UgN@S5qd
zhF2aJcH-HSIPgh-wwwb1AzV%H(jX;wSLtOaXu56CAaEz+?uFKCXN|Z(Z)s(Qq81QM
zr5|w?37SM^IFyp{D0h*fO19lQt@U?31TLQ1Ww!I{`@QUWIX!s!er(@P=Ow_>^LJ&T
zf}tUt{Zr;H-XIRe5~ka6d$g((pu;0lr5@4x!A>{ZIuxW31FBRU3&kh`Xm}9+>+G0A
zJDY&|ukVMJp;(^!pV;~sF1CtrdG0R9<+L-uzoVy%a}TdOfpAb(JFE(bKo$IZyqd-x
z&Ezkv_f=x^S7!@$SWNrN+O+L@#}_?!4cMV>qi<-G6BvjrDg^S7*K=TPoL@i%G#nC2
zbc)^75R8I4av?TE+y#Q`Ux4*ZN+~Z+G22P0eXnCCLUiu#2=|^lP(&725egiFZ{p5J
zVs;&88oOZ^wPiRQ%d)LjcW7ctqq%n440d=Bq|$-Zjg|ZKGJmW22bU`q+g3FJ+p^3d
zY%SA6+?91$x7k4o|6M<bk-imy<u)$^nWarKJY3Z(cC%NiK)5ra8bmL9;Z%qLbqH~J
z`)9o1o^3HShFq!ra9VYMdFj-#NiV8P3;|$VAUD}=S$R~1;rgPS1#V3zRp~ASf*Uk#
z0XAYVBtPas`{Y$g=yZa*;I5`mKO3sf5Z`mQnb&C$f}bF&V~aMyKxyRXxQV&zK&Isw
zuGD9C%Gjcq3Tu|Wal$06Rl~7Gbr+2UfNU*liQW?lSl1L5ANP7sJVZ?E#;t-v(H>Y@
zcBg`kxgG9?ISC9E2l5>Am72@K*G0Mer|fZ4wR79xxhQbGNH;qa4X)Gq7gOp~U6Y`@
zY*x)!NaggRDm5>Nh9<&>SJQrDL#6m)XOrT`(l}FqOHy1yHil$SU}3K1B-u?yvN(6x
zbkDtoQ(oMC=Cm?}H+?g6l&vp<M5N|2HIKE;Bet=%?NKvvChFxcW80*Oc4%!jx(EsV
zQ38dC`64F+>F;LCs1z#*<wlw2PEVrMBmY}XjDzgaMZsu4+%?8_iJ4_(1gdG%{N(S8
z?QPEZ$ZUqFwalb$KMX_hNG(~sMz*)7MLzHUrI=Tu<+}!i{e)v6vlusUYtsxM0E!x8
zG3c@$;hlRSHma{U23ii(>Hv^mm#k+WFx2EYo6UgGS{PLfb`h_1g7U{CCwkY9k&o0D
zZWUG0!M8(vJJhNq(H4r=8mtb3BW@&kk`t_@JCHTNJ$eh$;bJ*1tJ{}6F(SLYj2Byq
zop39h0O!TvJW=4(8{glRH7hZ>4G~iVyojqVa*hC*gIkQ<`s%&J;l~i83N#QEjM9Rb
zz1W(_u@Dg1jiVSF_fcKIU#1!)m8tUU7ZP~0el?k91W<AT*@@IwEhs6*V1g<d2l+;5
zm#Md))A^>tW24oQdLzW>j-tacQgKbe>fCU{j~NT$MxUePNG=m8J7npcI{LyMvpTOW
zEkI&9^w8?HXTVOndn7ug53CDj#Wvn2s$__*v!_KghNo4DqUI|-(gTgcpeAC#Y~T|0
z4-@Y`^)uSCvhHM^x(-y}XO)2!(iUd;?R?nsR-rmVQ4sS|6+?KGe<_p|X+3!OcY;68
z4Q6z>|7`!!QMR2udHwRaJ@DPr{nz_hi6?*a6Js9A@z0|H{dX^?94|(ICf!MR!k6l#
z*@G8{`>&6(gBM3Ht<i7yp1s*W%(gcFP+h=fdH-Hlo7{>$cJlQ5LaTynT89^x61|g+
zPg<zF$#Qr@|HY=bbz7hH1>ODWGFc4U2xm$8x)am|v_{H?8iB_r1JZqK^SuNHlAKPW
zEA$vvps^0X5qNm!DSUIgn_VMlCoVuLKYDt)^>If#`;B($MDNncN{cQIe71LVwD;(#
zl;0yMoRH9@Tef$YjTgV`tUT*~d2_hWe>?A;y$(X_Fed&v2&ss2p^X)|>(uVfimSvd
z4lH}mh<XNLOa~B|E-hcx{M^X_e<^|;bI{~H^6>juk36-?cjSAp9W&tjAZb4iU$DTZ
zCywN&0UICbA*ayXL^jdv3`X$i>)-{#6}I#m+2P${B_ll~WINB<+`YV(?l-%?0|21w
zwRu9qBb`-Vad|Dn=F7otZLbXU_Yg7kN6JKMkL+~znSe7IkzWi3gOU3iaq2%zbc?(1
zx+4s0<afP%MZ{VI*3U&Jp&k*}8$H8H2j`r2E06+uNJcDm!Nwr@c;Nzd2BKECbP>A#
zRr0_QYT!lZRaz5#;W<FGrf~dX_(+T5(=XhEBbbPb%h}>OZtf78$Gq9-u=Zbvwojqs
zO?~FE^(WcyOyITWSt{W|#ge$Xo?@D76=CAChw0+!Qc5FB_Y!NSNP9i8f#!x#=SDM8
z0RpNY<pPd><o92=6|l<6p?=Z^9{KkX9_)CXA4omKN34uQ<u<N^zzJQep7CidyD+MU
zYa7*IoIRhkh4I(B*$B%Y-taGs!ba$=Jj7+dW24^M26Qz?H@qD^vS!#VKP7#yd2M~e
zD}BRY9ni1@XUWn_qSNXA>LGoF!baU?8AmDv-tfs(sT?IS`zQ@YJ=R#<WgbCsDEr!b
zb+Ec;{)TH*B^A$q4uub=V!J^QMECsat)b6SykhYgckwgDk;#Uk7_S({!|mi#UC4GM
zcMYaY=J?YTI<IEF$FudNsw1hn&fXjVXyUcMUvzZ-R<YtvH(f98;nRz?H;f;N2Jpd)
zIRl(HR&3;Ng^>mrd1ad&30myd=zZc>bpHsKzv+e=`FutjZ|JZKa=eKyeA$V*dZvIg
z+?VjS4X3yjD@~*du+PLmh*DU#UqjWJwStKHR&sAz^oz{Poi!yxMHQU4{wWL+DzBGf
zNQsc<p!%Vl9#l8N<kUfykr8axvH4SUPieIFJROkP<5KYNomzU<sCcoej;hovurVc&
z9+9`m=ppHAOJ?8GYYBCIAcJ%TIDLMWp9<tTHzwx*AT+1o1JGwODG!Tjtzug_C3=mu
zM86n-ZZFIFQfnJQ$p&aDY$GSdS>>Ip<W<ykHLgOE!TLdq0%DQrMYRG@sPORtI*@xs
z92;7vXGQyBd976itOSWr1_l%2qKNiQlh#RPm7HOfVUUpb$DNcsb-u;{Iq*Eck^|vu
z9J?3K=J~m3B1Cev2e)W3bq8nxh#8bzrpP40gcef5q1y;VT(Dyj%|*7XuU_Ve0!wf_
z4q*W93l&mu<ZEx<hAR{13>L4->u5c8(_-#xwd8er>u-Lt*$PMaS(gu{uCLs$?%$sy
zWzz|)ujui@eV?`@g(H)<@9pk>eejJ_WmN?6E6}W8!gX9>V_mU<*!LQ+vV}Tuhb%S(
zx{FzxFq#vhtGbPG;^=+Z)1s6J3lTS!FlUY7lfuc+`rlRMSj~EW_GPqL>oAX*vmV>i
z3;4&h3YYShdC?CioQ1>Ph8<T|Q-vos4Y+h1aSTLK7+w`Y2w@j?Zn<@7CbvD5Yx#1h
z38>DeY;UjDupIAbTQ#X|Z|8i9B?6<U7|u+pc-cLe%u_C8<!hdcruI~~{|t^>y(=i2
zu`u-P%YZh?VjHKdI!IV*t$Q(>7zavw#y8$Txi62+n;IwQ^&Wkb&#Y*h{1&=qGA}>$
z@~k-|pySYB=*EWZk!(vhy_4U#?YlU$lE^_Re(TMv$9qTnz3j1j?r0y+xm#A(i%}F(
zFH~)i_}(cMW6DT^<l}vvj#x!r)A}ryQwUTXTT;j=4XvzOiN%(0Los4!w3Cf(SdHC=
z5&7nwm?wc}YGjQo-T$4;(H?jq_By!ZklW7H=iI$I!eu_v+Asz!>ubl$UYNN}EO_3h
z7ZqYhR>jWEqzGzLESgp!!0M{xJp$w<R60bdByCN7vzDw!kg_JZL&SNuB{ps<;yt^k
zz?XU&+qFZ*A~R`2*_a-|d6zCrCrevV&uGxSRhLH72p;A8={<-QV4+QkW-*{Ey@n}m
zrp9+q5^}%967O`(_%K?0Y^aRY*34E>5<i$ryvAfL2C?AlF|W}|YhCjsh}U3xEl#wy
zehCAnA|9*MqU0K!&L==K(U2*5lrdAsP4@%0{wJReEs%I<x!ZB<pU4msa1-I-$Y7v=
zQlo@`)8uAjAHHO@5UZ(eLz^gR7xOuf;x4KR{-%OyV@!bC&A)LcR0~#j+3MjBaNuz3
zc#>~#4>CAjFAHb{wHalC8bBYJq^BY*DB6~T>``2Eh7q(fD+}FAJ$@dU9R5S^(xG=L
za@kPN)k<}tv)yb2Te+b+r>Yus1^F3wtgNsv^pPmDhY_~DpOh!MVn7Seui3O4(7pg*
z?8c@Wo*(IG6CH0R*XN~`Chn{n<&)eU&rT?8#Nj-?0;V@yEUqf=QXD7mQGSio>s=w@
zJ-0q<j$KF8%~~r$hw%R9gKl@YNB<wiyz0{{gsQZN*Y_YbNEKt%T&VM8p*2d=ddHQl
zt>?vfZf~MB4U_uo#g8Sj$rb2mm_kYnds<nHcDyJ@Xi<fos#3bf(IlseMMBgyh>9G2
zcOezOoFmOU-Zgqbck%tfDt7|q_XLI~IfkoG3guEU2qQmW;j1eX9$AxvcaxPdV4+)2
z*NcjEm8BY!`_ny`)Rd0^r~+%rLNW6Owkf!XR7sBV&#bCcr}N16Z6vX>(y}}9)xu4w
zKmmt{)K=0uGy;JnW-_GMG_L6*tV*kZ(_HMDCkY<Ce)HIM;%i9PAQ%tDj=Ppy`a-SG
z6EzD!nHr1K4P|?71ySR$3DIO~jp;KMa&jH2ZF$1SS90Ko1E1UuD+S|<wD_B2FSpja
z_zt5`k|v~3{pUk|sYPg$&;&3!W$-7}k3HD|)cIn2sq0eAD1+>4EkT!b;|t!XaURPt
z9!G3HswGm)S%xuK;+mC=MdVkjpSe0>AbSQ)z!Jr<FE8q;fW<PuPIIHtk9V6JRo}hS
zmwZh`_~z%xGL$~Rti$m3ULDY;;VXQAfndI|#3)&c8SBJ>nfUaV;+#QSywwu=m?NDk
znd+(0i3#Z_zf>%fZ!m8Bzit%M$7b<ZQ95CRVkClcXT=d|MoJQRCT{JP(&_QDBA-uX
zX!!|Fk_{umpVDszHT9jHZhP>_D<|*cvaFr9D*n8^mXc*bf#C!Gf^hVCevQEei8oXO
z!MWt^3vp_Y9onCNj{uUvd&6iN8G>7f54tVkG`5-&Ok<ytP#XQxE6euT9#T!Y`K}gZ
zd_$EfO0=>AAGVUnuig?fR_OI|E>fULc~+~><WsZcThn;BXXiu|mg=%3I5}@@>p(=z
z!3~i$p4tB+u;v#ItZ5;#Id=53h1Ikzheg#i%3tDSi7K)#oaXj^z;f(JP>vtoKBQ*y
z?-f#`WC#&8MlpuXOrn6A<`0agnS4+@4SEJtpul!la}3BGI-|U7`_anSOl{u{k%2=w
zIGZC8M#YNXE(Avgv_Xp8WY#FpN8DAisHUlF$Vn+uk>2M?oqC3Fr7BjTb;sS{P?m9i
z9U?VEmvhW~fNHc4Bp!RZxRD3SFti%2e??iJ5=%iGh2Oc)%E#2pEjM8?J%>a^Wzz1k
z>?KV&agJrSwd!w!ah2j=^Hfa7Y5=;Zs_`HKew1q4NxLdlN?rDx_IL#U3*Xe_G>Zi(
z3w7uv9WvQ{IW^f(z1pkUY#Qut`0FPHv*xY}3k<RBQ>~h*0-c1+0fu#2EEkXv9Hpkk
zxzG@R1tpeH>%p;&OIDkN(?j-Ip4R2kePOOmN&JL38+p<-J?Hs#_BGtFtUl+Y){Y>9
zO{KD<)KZ#e&z?Qc)Qs+QoN1v~STeREOiMF6r@AS_E#bHLLK2p=lw>66iAl58b&AuY
zB@IEc8{AEkoA5;y!2La`&Ibv{@x$2y!pZUXNYz>8H*)_rnaQKq`+G<G+0owD&-Sx}
zC)taaN7??r9vmJWhFJoFM-N4Ic=Y<<#W#HH#hYi(fU=VlKB?^&*zelD_vF+cJKbm`
z`_EtLa2#QVeh_<y?nPmJWWti!|J7HUc3d$v{kxYwAp_(C@@M0B3{xnB*o^cyKU6;8
zKe>m<eL?VHk-NLWuL9;0-_Z8GAHH$!czVB!VB74NdPP_?fjN&IE!!(%T2CBP_U4BA
zn>LKYl5qmPy0zhe#_D8UNIQ&&gDD^~1h_Zn-stq^fat4b<g<QV%qH~MXy0C>yOH&d
zPlh%Kvft**%7kCZxN;&l``N#%v%_h1btc-{^GZuzOYW?2&U@L>*TxqS>>+MQnph<p
z!(&c_W~&g#(}zRLUjf42S=z$2F}W51j3}-G(fzrqhG*)T5k~08sh|fIN)j9uRwoD;
z0`3x$;+SIW_zwKu504k{N#Pi?X6v51i@5fv1m=;H!au?;{EA1VXvJ$AH*8SZHMp&+
z?sl1GlE3WPkws2XVT@~vieeY0MdKG0U9mq-DybYrWl|KDM~y+=xM6fgZsW*?X}*jN
z(?$u=CyQ~5nwXG;4=+NtiSU2rD-0_V7k57IH83qWms?64^@E{4)+TkBnFEEs<6O62
z%-jK-N;W*ShCe<b@4v2*<R7VqH>4W6?U^*+=^Q7Y(+qco<dI?<_<1MT{t-cwFlAb`
z^SYn+Jt&Cg!6#|q4Dj=oC(CXdyKAVr?rDQETP*P<LJn+%W{GjM+(YjkM5ux?g}o!E
zA+SyVrli^T>m{?WuwLG9EeYG2`ioUr0U2;h2M3@AN}2y!bK3-nq9xB6O#z^x&n(+e
zA(_|jxWq9jLdJ9wbphO&QUkJPeuv$(T@m?Pt?r%_bVVV(4$Jdte>nr$-?Qcf2+);B
z4YcK~t59CP+(Y30>l$&tmf&sz%Mu&W0Pb~Q05J{loL0~qYxZ*71)D(W1(ThQ6XY0k
zNQF^dEKgFFYtJhL$^H8~UBOISl(V4wo|TLiqP|ocirr;C7CMvArt^VedILLAV%GNE
zHmR;5w%xfSN8TMx{u|nv<D=k4NHundhJBd^A}{)qshzz|Ibf2bF4>;Y(|y{v$g)UP
zbXp?6l6{;{`dU|8geI`CMexh!WO>En+FP2#X7-R>Vt;U(8)_kfKMG5byl{*RyFRd4
zVX^?Qz2*qpxLJJCg0F5M6a!UQ@rAF$lMM_Dla6We#e2Y(0lS=@UK^wg>=A1YV02&P
zGx)bvu9m<VjypGCo^bYMrx@5_IGr-i_ngYsWyeuk%&+@r^P<?f#WD17B!lq2oWYMe
zdeX?>>EK26eZ0}a0;21bqp2TJE<$%i^smt0Qoi7P^_CK6+=OdfjL(a{-7MpkqvGx-
zshLVBk7%Q)$8%A&a$g(_#04Q<D~e~*tDE3wbcDEGA%ny_QtfdXFOwW2pWz_NM?U5;
z3A0HMpWCALAgM%&bN=)|rK-cGG_m46+j51}hP9uN{1!VC#Y*CLxVJuPS6VCoDfXqw
z{{j0*RE%Ft{%<1FK>q)mfR_I2Dgpn1kopIN)PER+)Zn&7bpAfDQgKvdgUp@IqZq~5
zlOR}E3>Vhhvf^1M;6QDY=V6zU6ykheAmTU|+zWxsr-2_RqCVjBod&2eSv=gc)RmK<
zPd{8gIK|hPiy;WsLIwyC1%waOR`-|bVk!(zv-@`=>Mdttdc=-p!77Osl?T4eKE3<=
z>j7%!)daX)&fK;zNLD|h<9)iO=OwZRq-@srTkc?$@OXDEt(}?QXGPA-ox4hwRmXZW
zBv_e1f(>@=-5a*t5g&#WR;EZ{*f}92vT*=jRc^3#oMGmXn`h;$faeLR;YZJE(=`+w
zmCW)|6!bU<NwVw8G>v3kUs#a*6tWIP1FSM$7E^Y9Ld%XyVpAdWskfVstLdhik&)!i
zbQVdRDq!}F?BQY0%K&z?bJ}j5IAWmSn)8<BsUc&)3=Kn`K~9DR#xeQAbq<4}&}Ix&
zgu2KtA;{4*6M2TP_3mX`^#fTh@kPI0PQB6EXMZU!^MlkA1$Un2cTBxszTtpo=>vUh
zOL~-kUe0x87-p#Xs0=gXj8_b?ZS4}Wf3tqzZU}d&T~@Rk5y)Q*rQUNPIm!}#EQLra
zP4&D@H>dSG?Zv+sV#9p5?kVk6(qx3qG6kM-@Ztrg|1Z?KPUuOQp!4YEt3PE@*Fwkg
z=;fOiM_b$78z|b%j$URlB^=M2Ef<5?51ZN6lb5fb?;T~E`qJiVs{9?z&!FjOw=?6m
zeE9J0;J*9+ojdh|GxzEK-TMy)_wEnwcJ450<Ew}F2KVoO;XbDUB4oW+a=PXF!v_+n
zWY5j?+&O8`*Aqb>QEUm*)+m4O`qwqaM0s*tW5k5&t&J~V?HxTG9=#kMJ{Z2<KYaP-
z^`rf-HoC_f@)k-mNr(qeFZsDe8R=yZwuIa7KCW2GamgiX@}P}CrZbG=A=LA>)g3fm
zTIt=w9z-RiRGM^p=VQ8EM~0QrXcv+sNG&$rk#yQ)fbpKg`JCi`xn>^Nz=Pm$MFrNx
zUBqUl=Dwz21fz`2$izC#pg*q%=Z-ZxJ;}+LGN+x{bzlENjmS_=a;L0VHInVf7Fo_q
zN0AL~{hxkz|9@j3{-!NsvSBM7yT>-PR*QT)K65Y6CWGWq`G$K<+COZ3?hZhS5VfSX
z7)>c5Nx&P<<_vN}P`rKXG%<^qviprs?fwnK@r|hH=P7kZWxKyz|1uq+rPhvw>j+hi
zzypQa*otf9_y;}djw+Sh1b#9wPu^#CRf<gkcLw-H1WqOg^Z{zxxgQ3H4}g7n$f_n=
z+uOG}r|z|(yTs~lJQMC;w*X*3pTE82<Bkkzpc`c)e)9eMFltizphQqV7{I=|6`B!<
z%!eCSCmU3|^cUB%uVZw_BXu)$iw}gQ^$4Dhfkl`u<-))3$v+^?{m%DYrLk<rfSsuD
zFqy^8*GS`*U@?yI39gkd2KS_cjSWwxq{^*7f)As^7)bOm{OMoo#$^Jr#!!1}i|M=7
zOtchCYZaI%o~sdsl|c53WnyW`KS6Sb@HDS}yrxjSUTbrAZJ*C|eV988atcwAq=;(i
zXw7t%QR*qt7&8dZxQrz#s%O%tH(41Ps0po3U_{E1X8te-vPOCVio6nUs>)`|6DO)!
zz|m@8@`vc9>x;XZlj4b)U|6BYP5E)62gGtd?-wm3;~$WWjo*qf%YU2J7|?tXZ<JYU
z+*+rKdoj7wi5f}FF?^RzGI&PpeZknb_v#=<=3sIxp({jJ&5p4Z<2o^o`UST&Hhu!{
zQ><vOof12)Cy1{@5{Z{r-AHTEZK=hmBAi%sy`{*Xo6_BH#kf38gc~)NY(>VT+fU@)
zgWv9Sd+)Ovz1Q~o+2`FTph9XWL|FK%1r&ZE3#%aSM>Pthr(x97ZA&`**R`##&VOwM
zf|kMwN_BcN0JPI<)Q<3JMu>rpD_lr;F;rWR=b9FB@P!~0VfSw-!LYCfnk5&k$ishp
z*@fe3CCOyH`Tx;jcP+MkT&N^1IsubgQm`luR5?EU$XX+>KdjaW7fl02bc;uuhAn6P
z#LJCJb1bDMOCG9aSe`XUV_TUEO~?4jbx4V;811J9u5eD{B2X4CsE#3qHcS4Dd}Uw)
zTew5UOTpK{&E1t?>_FC!BBdNInk8kP{yj<e@|(E$@pQ5r7ZC_^un4*hCGh}mZ<LE`
zMoM2dfI<{h-Y=Uw71L!;V>R>W4sneE&s^6;gA~FxwFBs{8l_+AsvGg`k@CB;)-xDY
z!O<EpWAc&HMWYZ-V?_ok2%9|vqHs|!>K1bd@JHBr59k;2XIe`2S5lfDpm>O|#R+3G
z#GUlRpkPa&!1%$3q0yk2J}C^%Eq>G;xmRvEG#vhFv6v6aX|wjKO$3IPtqm>Bsn724
z_1}vG|M0&ptgI`7m(wv>g98MmvDWBpYvcd^zn<U?H`_xuTTRMOM#!TG@=(3=^J=v3
zr}?P5oYB7CBntRJ<0Y{IoUK0lW%J3Pcc~V!anvBB)Kfy-gFD^>(F>id+0yt|AJ_P}
zXf|Ho@=ZyvEyjMox)!MHL`>-lJWU-cPnhzF#D5^F$(fZDTWlACeV}saLVg$EI``_l
ztRT#JToYk$9@`y_?%cae*d4?BAlL0mp2;j<;O^mBu2nvk)Xmot>{2vvR~?J%VfDZq
z07x+IWm3pqBZ&j@X}AfSt=WcCHey*TdI@StRLlId>Gm=L!?{Nt`7M)0yin?6LWT`^
z5FK3Zil{OLCcMmlEH9Ur*}-Gh#jI)x=X#nGZ|6mE#eDil`Q%jMEGbs0=zSUzqgRJ+
zG6KnCS>ni~z^@9W5;X+VBUappHeV^@gPUSG6G|Nx3y<5Sz0@sT1F_E9(n$Kq2-d+)
z)yykA!D?~(J2Y1=2)1rIRTvVL2xCb>ua-3g&!{sdB!r%jZtHsUMM)^DN$LWp2v;V6
zm35}aZeLHTYS!4G_hp0P7l}e5*aP$7-Cn3;=pIzCpUQC|up=G_$alq$IUOg9Xm9iC
zH(-gmyh%Jar4(_s+{W1W&Q6vcJWYk4TyIFNusHiIJ6ldqeTEn9$|$wl=?p_2*^rpV
zj(;D@tzeg)29g!=1q$(YdM#JvRs=L-1ti=+UwhCXW;M`h<8z`Y-T1y<x!*>;aK|pE
zrMpdH>jJWeJQ|ChRW-L*5*+>(YE7*rsWR%{I~VH%tJ6;=;sES}Jzy$*e?B-;y}A$e
z)^>!cjW7(++QmzrMB-A5&w*Qlud-JYaARzDGMu?#vmDD6@5bT*zQ*qmfHmIvY$(5_
z_3dCpk?;TkQk|41b2z4WBR?*t)y~&TKx7QXhT~V#F8F_!rIgNwv;R#NQ)#2Cx%Z!C
zH8q!0RD(w=g$sf1()>=73KFFxE>9>LDIKQA3Vj!|GvQ{EIjgW*QT5n3j=W%;Edmr#
z3mWacEp*tRI{E>v1@D95N5WQ7j>-dEiWC{LLizN$(+r8s;&@|jw}!o|(t7;7UdA!T
z>9VFI;{|RfSQQd7T!;6L|6EDM%=>qTs8JcOi!ZBu01UibYMcX^w5U(>8RR60I%Lhq
ziRSOE?>jU@H^}?h5P--f09F|D#I7X$`3yk`7K<c?uw%Ec?YQmK;qO~1W6UrITrIA;
zJ_y|xLL(1?o4<c@-DgLvlFeP%mtEL*PvJX=;9|q+8}3He6Sj216K@}<!r{8IV;d~I
z5{wX;S>F7s0xbBF0s%@u;0U~f76<-~;}61SH=n$G2`BW;I0JXwH9pUWsY^jT&kx~K
z_~N(lJbSI_#~6k{IyRigAyeLkDQuioZa>a9df6ur63;+zCa-&?8-T)J2h)XDsS|}c
z*JuME-h%z2@a_keK8<5o)C_l_s%u$$?bUO_vWff?iBOuSm%*mv)ogDp;Okq$U%SEH
zBz6Y;$Y>Yl{V}Mm7l5%Am9Im=R`U5t=@xBXO7O~#*ddaL2Tp(%WSv4=EKQ6DFpAEK
z0ydq;-+1|FknIV7@OplNX=uv44a6)k1VF-pCKOiOTO<$kIKSWTYNi34$|d5(%D)sx
z6$Gt=vlrE3A0TV~q3&omzIGye1n*j5v_fAM8zC;c-R`<Agt%Tb8A-L*6px22+|&G8
zmjIEA7Zs^4TTf9U!Ssc<o^kP<{GA=cCB66RAdcssR)Y!F?#CVPv2l{=U{U|Rei#vl
znCkILY@z#j?&t5D^@sL;p7c&ZSg%Q4=(;F8UPQ1Wc}w_N<fE9)G!(Pr&4dK$x?TC;
zHMO5z54Nd8j?cI5I7Bd!8k@hUBE$BH1SmoRv0w?EkyJ;(J><56>vl1MB<B%u<cO&C
zZF)Mto-I7KPQ<$1UEcNO!ie#wMU^FOCY<lOTr4H#UCtr!+tfact!Psj?O@^kr(`k%
z@!Yu<;Q^T}0r3{^V;<o2NT=3&K}`=<ID~U~-Pc3$8=$*4$*FmH#X$n=x5a4hA3gKh
zr<5;okFPQFQ>c=9&wkg0+(PT<u{XzSyrrIHJ*m=^FaJP6C9N}kB5R=;6;gjbL;{^v
z#Fup^XEfLm4}fm1(_Bn|9__I)pwdGw1+PTYFCu3r86AKifzrZ@SULREP(=hv3#rhY
zmY94A5IAlrYYk{X^9!YN-U{s$dWjly;?wZbU9fpdt0CoDy)QJx&))?`e_StXphq`t
zP%0EV2H+MmpQz~{?t*$!6tm{zpAPvoi~){2b88>@;N!N*NJ7g?LsJ+Xdc-bRvyB8v
z{3~l9Ae}|vzT~w=vm;|;$X+?B&d()Ykl`O8cXQ=6JhN$AXLE$eUn*bC=e&MH0B@Z<
z3FT|)HGPzb`5jypC$lc{AWjP<%DAW7!^eU}LD`ITwki4@ZQI<+rzfY8Fzeo~0uN_-
zD#nngya0FR(<Ie)9!11L@wlp%lQF?4FK2{dIF&6Xm^5-!CG4cu;K>?$t-whT3?cD<
zIUdh7Q-u2{{mu#?!FZ;8rL7Qr$yi#lA`M80UC>F+2;H;4px4<NA4ZMe$-XYn<C4m^
zFVy^B*Z2ItV+m@vefAZu)fb3)5~FVg(OM(m7^e<{K9<~P#%$@t-IqN<LUjKeX8hM}
z71n6$1;~=FRys&}?qv#2E?MZ_ad*s~Qs01@dxi?%xN~=?4-B0seEODO?>IL6!zBJ9
zPHv%jUEpU#*fsSQ9tp9!d{AfihoX<J>+d*NRzIlSd&8hAx3`@+HGj~JBF=bC&F17Z
zVoWNTRn$^%{EpulP)haBAX?Y@O_Z^kWOg^}ay@Z;UXFZ>P@xFfHvup(4Yk(XX7RmN
z)r6S+a1RTkw50EPc_Q=>nG*m^*!`y(P3IGV2m+gho!J*v){f?Ymu{3qYV&up%$Ip~
z;Y8Sn8$LsAHX9_=sO7y49LI+n(@NY=8`)P9SF|^qeYul=#bAiTVsh4h>V~m~u;j$&
zO9+WOusQV=AG#}Wlu61eY>@siJ0inody8gutMzrOX+kU9#eg1dR_nb*gGR(13yg&g
zsp=cf-<>llFw}?Fq91~1`>N>;=zQ%b!i$%AYAZCuM;;N_d}OffBmMdb&=2SniH3iG
zh(9cQ^qrJ!8mQP3MgNK%SP6=7_UR`N?z>TaGRPYIFCS|^p6sjDjTt%MYZm+vV(mU4
zI_=&kJ2T&aN|z1Zd_!x>Iie<Z?%n_5lO5%;eI}9+gIP>heU&@<QJ+p?DrdW*!x1FU
zLOjh}Gpg$e98Of;HpXQQ*$wWcBxR=bS<;?j$37{@crH?_sKvKrPWw%FIliOM_wBoW
zJ}W;A48srNZw14!A)x!`OxIgNX9AWuwweA)sq*-#=xm3$fkVljcho+(zx=3@G;(CO
zp8K=ar_a0=%dIDXJ7qRTln(W*!HI``Ui#q6V7V3Yzlx-0%x_sUrtr^ELrK~=ph@>=
zF7D+$vv~O7IzjZ_rwHR((tareR?`N}!Tp823j^}KPy3hh<OlZBM~KNHyRRM(0PXw<
zN6<ZaW1o;G`}f%y!gGCld&w1%#Zj@2{*q+%`q?2E>OwHRBCs;=+?T@h(tX&ENz-z|
zCUxJp)R&g}?zgaPhNf~S2xIR4^?!#QIkm4^Z(n9Ohrqivm_|V1zs?#}Tw*LDO)w@P
zi8^Kk=_DXZ@$<@si2=7=mIl5MMvvQaSWZ9kw#0T_PBDVe;$p`g`#wJRPl~?3Hk}yt
z>AmRUL_~rcY;Jd@2nA!IS{t2t$qBJ`^qu<F*JYy_y(o5s`GUy(nPaqlajr#<wdw?U
zz*3B@dAInuxTxR9D#cxuW0XQtogT~KxJ`X=Qsr|XEK7kWCxFfK>FGrecGb!f)f3dl
z*ft-@`658A4#_-mEUO2dCb$c3zC!&D|F3(8hO22$Fi{j&t!=ieb&|XnnMMYnaB(L;
zAsgc5))Siz_EF|hm3Q2oF)fS9?w7DkTvhY&SN~khFunzHc>8mA5e$}fzsPIH9|r)A
z2wN3@jZawLD>8XVX&u;6J3n=PwSlv>v72q&w$+WEdkKP-dkLZyKEgeQHe{@PVtfM3
zYJ4f9;Fl_8;9I4Kw5C(T_hFtJ<`MkPySw!LtiCYwjc<org6G6%+gK)N#27K|UN*wG
zM-lXuzsRMiT0>LLj&YC4(M~SiyK?FBheRc8I<1Zy9sG^u-h2tSv`AiL2Jz@SYN<F5
zH28%S?K|;t+{un<8u+E!zP$F$($w&awOjYCVQ;bcrP{883B)yTrjcK&^^@|POsd=U
zl@8nXlh|vMZKYdfsKF;Y;}hFUKxx=$w6xI`Pg>*aXv-yD$6Y6oJ(h^=05dt&6n9@l
zX`dy8TYrXa&Z`hONuIG56L$@6(LKdb4EvJtbmKBqa(3KU)#rJ2g)bhn{u}Sat2X0^
zucg$eME9|_)n?&3SW#Qr4$v>D%`LhcQ=Fb~!Uom++{ualR*!220<2v`+AZBuJ#k<&
zX23^o1Mbq-F+&<duB!5u;7|9mw1g)sBx=-xmzu4PV%@VKRtU)RBC@<Zqji@KtXl9U
zEEQ2EvswF!=<~uO+htNR77s$cu1>3o7P7@x0q>%Tq^Cq6+T9Aty*DT+x=Vgc;WWZZ
ziLjH))&c%Lte=}fvnvm;62q~*XU1WkV&>L!WkH^T4B=O-lK3bPNjzsTnz1Z5)p)U+
zp`_p-d)D5Wsto0{=sU%i@q9@QGsXZ5x^(T|)tZSh9vSX>0Z*m*S~5Tto{(yVjfDfV
zu$NGm3Az!K=r)?rM-5eEd;3+??)LVsJJjrsqcj?^D0eSgw}FF{KyyJ9na1M9zS}|e
zDwzbcF@018CG8NtBS#H3e=X1sD;Jd10ko3s?bq?9o>U7CeqTy5Qw&2=kWE0#6ht&s
zFYQ7WXz5PZB>42}C2@*G?Hd<J+nS3Vhr*HH1V)&k3hRlmLYn8xe2$n8b!RBjRZtBP
zWKD|(f1Oly0)#{Xt8MwjIpeE4X&LBHqb+Q00UQrCV{L%Zp?A!nymTFSEJVO}LXnLI
zJBV_EmBsgbiRn;j)L?MEji6=lH?m&g`Vx}5qc8X49R$b&$3%Xq!L+c$+mFxQ=-)6<
z!Fvs%be+!El46`P>%dBroZen4UuKtx<3FL*dWIUg@yZIM<;n~-&tvYEcz&HlQGN9O
zYY8v9#^EaN?_I!k>^NJt_1)gHuGFbyNYth_zB#fiJAHX{l~0Czjz-OqKBpyS7+-@T
zpXT+8>t;&)nT}$ReT|ZR_M8q?BAFKI<s>;g(R`&Z987@ai^o#NcPD!(4*Gk$TD}2#
z$(C0SJyEs!E=@D9wfJ9vhQwR2o=_AJLvC}%fi$}?$}7}UmSua-j`m+?hkrUe+JBxM
z?jL3T#q43`-};@rLu<?4*@6{h;}CA`z2^zBh6-mYDn!SBJyq`S3X+-jF^V=imS-do
zGVdeTGZqd|Ja5aeXm3k4A}bB}QVgXc)ga#K9Wm}$d7Kr3wK2|aGSSLKAknj`dh6#J
zFNNPn2WJvaLy=^HV2JBXGe&!;TR&!P-ei?oS;rz@N|wdtqB!1&g^brtm(3Q<{d%BT
ziFzOyha|lcQUHBQ*<{r5T_lG@%wmVRrbhWnGrz!6XWu$`P0IeZ@P%Oaf5*q<&TM0m
zPy-~y1R_dYvM7*`D$}k<IXis%^1DDYg}steZz3v)^+#(DPx6wO`JM0zR0sR7<0<ar
zfDbNbxg=WbV`LbC31hG0Df(YqFHtuF2}0l<Qb6E6KWCJwPqjeAnv{-Z^nn2O+VmT8
zA0!5p7DW*D+}DFLyeUgl6!$WVIC=z2MCmMwsqMd3PCP)Eq=Xm;vxgJ}cP#SW-T#KS
zAGm*fM;h|<p1$^;_0m&^Zv`$N???a<RG4>=S*#vP<N!7$Z!f^5JWAkFK)Ke{dD4Dk
zS@mOo%gKDrlNQxj3_be#f3+Xt4O|F@{_uhc=gd!8vIei4c+29dSB%2uO+qfOF*7Xv
z0{7VHGXHUiqk+O$Zp2zGeC2D;fP5xVo#a1;$!%}D_vAIllEU<Sl0C|eLGQNYAjEj5
zFHv`)%3B%{YTZQZr3t}nP1LBH<rcFnN{)={^WI%aezy}49V@7W7HDrdpneGr6I)sO
zod)e3TfcV~nau9{h)#aO5skKl=LS2ozYwJcx}%e^r)hSiVjXo8R>u}lTT^GtcB#}O
z)aC6<<!+3MX}GI<K;$V98Kk0B$IUG5woW7T7ZIdE3BWWh)iXy4Eg>v{Q=>XXb{G?`
zwmKMDHfFdIN{6M#q||IWpk%8@lo;}`#T$P0$F^;M;S|eDWKeBy&sX(Co4(do8e}WF
zWWbCdrf5l!S&ieTLlcx~)hD9B8r1=9c=YU(kadIC_+^PfF0Am=y7Q6l<rT85+0iT1
z_^ADy(GTs~z`ph#xT!Co2j2|IA1p+*$U>@iuaMigDR#Es*ez?FZg0OIkq@WvSvCUC
z_S~!;CHzja-OVj5n898rzQz7-854K8DMiamDq5~nS!$u+Ub@{uwxeVVG!LlpH>yu|
z05vnTdCdHjsGF=D!rQR|lk4gdvHtnAVCwfkhHuM$8ZG-#`xf@Gj<O6bLtmxf>I7P-
z94&csw?)fKsi$%pLy%1FAkaxb+z6(UD+DLu+f16!d#jGC_g%7>pTc2)gDn*+XmR7x
ziTK{!;Q|_GKHj9-h@ZZSa|V{3o*?8?h*c&uZE{)28d=%6ClE$fHwDu{)~rTH4Tl12
z-H`&}7n(w$!2n6I>s2d8oJ1FuD6E+iqaXpAkZZ@a*$CqOPYNfG_p)jJt~@6)L!}U(
z&HiQ<1biAt`5E9v_9Oy+V=y>tqek=Lk`&W-<-D3oMNu<xNa(|go0-~^5nF<8;i5@`
z3|D>AC)XjW6B(2J3{e_VU0Xb+Ud@&-VFQ-GXf0Ha?SQZDX->4am{?Vw!^3Am{B*q3
z@Ct$YK%oMPgC?V_j8SJETY=5+D(MEv0)$%ab!3Z*BAzcQq{Jo7*j*2Ikyv?oyPHU)
zun}->$YG0pDA@D<HPdh+Wn^DG{H*%N*r@n%b^jywodX%7+_d~AK<ew>5b$*D2eVGA
zP5NU89+&X75{TO50EzRmdo_D)JocvNy71O;%iUfo+B}l$AYhynLS+bcab9Xn9L_UX
zerOc;EMfk(z|I(1PZ2Ha#`ISyYEKOHiJ@<ADBZ+_ZZ@}@`KM*O^Nm&Fzh~3%W@uXg
zU*bM;v<*_Ma=%|C9|AQcwaS5}>x+lf=-2R8#5A_#T6YkaGl5?iowy4HDMjLt)fF7g
zfaPT5*828XKT&iz8$Jg<psVEeggbfeB^#nTGdRZapk>9@9Ra^!^1x7r*t$yc#IE?I
zSeJs&#<ek@;i`{ZR2EHY#vjX1SuQ4CJ5{4fAqh*%Y543^29&-C$X`bGB!t6V)EC9X
z>b5#bvMTv1fICTi$+6b~iGN7yiF%Vej19Q}%1+5C#e9}e%5mD4x0%V%3b6b`u3KLX
z<u*ih4Ee()t4lX}x{t#vRx(34g3ObvyZ-3jW<xOoZG~r!X7lo0NDNJfDQCWA{_*~K
zho3c?M)u1MFX$o84yNzcQx)dg_YzjXo7a$#`jg~46jl?~=t-4nm5yzsNr>S?{cc5V
z8J_WUJDyu@hqp^Aw^Aggb2(k5^o=jY2Qo6s8T9;7Vz{*<Sv&cTC<C!o%>)Z|YEy&{
z@l9*o?dGB9TCCI?(aUdOg84)-FHq=3eP2)aU+-gPG7J&Z*Kyn+X`HbsX(tx5oGjL8
zQHsbiy|&)fyw(w)8387d5|V@nNXoWUgL1MtR!vf#`=|)#cPxzqBF+J9qp!$l0U@EM
z6}v0wn3`xV60|xtYLVy!H{JHF$9>mdUsTh6d3m|ia2`ZI^xY;5I1HW6f#nZlUN}{p
zfr+VBc1Z(-gc?11NumgoloSGE>H{ZXsf0;SEyHyG33<6NIUU;%v(3|a<+!dJ$mXc$
z(Z^Oh-_1sA-y@aJ5>_2)|J)GSNFotN26{1)h=fsc_3P!EuCP}jJ(a_C&)|W1;ZrM#
z{{f=^+yDIk`iPCJWa%Qf#xqtJp!50l{;OvPkM^>I$NMji4vzkmI-%QL%d3uM1UNG-
zOai;$O1^{SE4mYp_P&0$-`9@%)=@X4SE@_Ajeew>?(306bKH_vflN?Jg;cFU0fJhf
zidt~S>lu^=Z$Xq>#sl=-dGE{77cxD2`HdsXGo#PZ!OIu@*Dt^8KRE#H+}DRkuMZyK
z>qDZnP9|=13jf^gJatp#8t0ywk}+bNtNxp?nHbi^@97)1w7)abn?$!*dXw;SkbvCK
zbaX8+#dYX^8uH~td}}aQeRnrKsbO^8$Y65lMUW6zB&VZuTYl`+z~yO_CR}S2?IK9+
z5sRc}QRG)~LrpBqQO=|p?A($)t*)FzFo#pM)Uz2juv3312dD<*MFGz!)-j3g?Or5!
zHD|4^h6O9>S<pVL!u75yC%92k1Cs=q>mlp;5eVmR9mB2|TloeY)Uo<Pd-OD?U&x?F
z%(kXUo4I83Da@GUE%>v_lX;%c$E++0_I*((K#j&cDXlzO#44Zb^DcNVDSIm`r=!{4
z_VFuC&bqnESGTtZ!Li<ur#$*Z)K2sLUYegl4e=~5Cwde5dNFien@xg&i5K~7<`jiY
zw^u4;5jm35*YAbF=8-e!w!2MBz6x-2B<Y(Ge(cSR?X$}3x;icC9`F;C6f8eYEZ33X
z!%W_(dyI;Z9MNW24#XFR1HNIPLVQe90>Je9yc$cyKzK$>j+lP3`mJ|q+YQQ)K8q)&
z0aYz|#JCD!dlI3@#{@N2?N~`<Ut*jTTO8tJWiY`LWsro}3b5G+b?b)kvX8mp+b*+@
zx#J_7Hb4i+&sp<PY8T#CNfFnoJRmr9^TIEg6UoXk_!TvlUaGPTI$vL#Pqr7Qd-zlk
zx80xYy?N%uiq)MfRu#Z~v)rBvBa0|J?QLPJuvN3HqP*<(8m}-M3JIjqddl1g-la4D
zn3KrRB}&Oonpho&qDL76GPS-<ox{<rnnB-z?VJ>+xuvPB_9OoE`0#sUM;y?52ZwY$
zjXSZ=y!m4y{jH_C2>h#Csn_y~2K|Oxrsr+Yx{0KTAwQsg>r{Xubj}gtl457Uwxm9%
zN7dZ2%@giJ@IcYpJnFRs6^Tx;hQ79PtK%Z}gWKq+(4gRCZbC`*pBCoK{YHs&pd(5Z
zr89PAkl4|HdI{gup(FGPIbf#Ol;hFBPm}>zuv;lVjkTV2_Y1ZiqnL}aHPj~ER(8c1
zty7ChwncDnvp2<LEoF_nyMh7#>*Gi3+K7Z!?PutJ92(E1#QMG_D5F9|nx5XgIUGL_
z9jDD^8XxG8$a(XY@c^SuDaj;FFJ;|!apaEHC5B${BkyPfmzQjt58lg_q!$zhpWV)A
zK$UT~A&qa=&B+YHSOP`~!m)%0qqA|iikmmEzro9>25alO8EbPg!0654!HaLQgBOqY
z|Fwm^p<YSyOvc2mq25((!bN<|*g<Ail%gn0=GO<a97?isSi{+UpWu^r>9=ajy?w#t
z*7*5o(SKAmkJBFd`$zDbXp(8!_N{D3Ca}G2Q(#yu@35;XY-zY5%0+OJ$XhWdubYhD
zdmUGJ<*g5JLQUP6C#le>!1tHA6xpak&|^%wU+_%&^pc`!QfbgI4BaHK8#gwN(y51b
zh{1;%yOihTfjcKp-aLD@=Kf#v8v(86V>t=cWGrDTwS)sQS4KvR*gn+&nbr4!2LroA
z&jrN-@4_L-vF(<;&Y~`PP;8CKE7r`R^{Vxfl8LO*p1&P;Pnc*|eA#Gw!D7&-$UgK1
z?yst;yF_ss#Fc)n?xoxA>?4|Vc$+BrvoJ^Rj|eKeI2!{f)w+d^CCil`71S-JcC@^i
zx28xpRC*#FHjUIHgqHxvZ|YNzA|5s?=B!4ebuI{baO&<11-6XgFc%sH*LHu(okR{~
z3^WYDbYctZ(BtrlI}R^i9zAvEYu$-h`?Eh3SdFRF)8PenQY{z$q|5=(>0`nd7KbeX
zf{c6>!@c(c-|EanArs!TptZ}Wjw~!jNCVp>A5dIXD68S`4CT;g@_fisYZKtT!<_sd
zokXE?4Ws%xohgw_MV)ixYkf`p9>QVSW2jpgjfVVST4{i~sTHy`kuAhqzvhM-eY^8^
z)B0aYp0FLC$ecl??JPEUt-U>b5CI|R_15tITq<yloPkI@sc4%}2|+GZ^Sf<%O|O?;
zAQbe39dzv&Jo2!=B+QewBM)l=qh}FiOtu}!*sAmQ6GdTf$*ojY3_ZWjX4I4*y~wau
z`$gdloYz3q?&|E@2l*bMpW%TFJHVcyo+g)A8~KA7HCfLn*6_oHi$q9B16o>THLV_}
zf~7TP##x&k0^5STW5?{IK)EF?*LaJg5mu&cMbw)oTRAun>ii5>Z!AZsM&fi4Qd+L7
z8xD4PmSl~r`U~3*M3T-T(RI8)e5jqd%YB;nxtl9sanls<m0azWc+j5UH4>d@Qv6tI
zPVh-_UAf1j40zkmKA209M<hxS2md)fC$W5S_ld<W;IOA93n+Tl%>-#e7d1!jiyBZk
zvDkJ7N&0Y0FI4FMY?99}^sZi&7BzV)l~@|~UX6~OdDr5y))1cRY8pS>TZuki1k4K$
z0_CBf?H;qBkPy8YlYty68yPsoF#2uiR{s<=vV3(OJ+L<fl}Naa1>bm-2UhuLc(-Z7
zP+dEiI~&JKb(3EUG+fgZ9@}0xxn%hIs~TU{FT!rtI(zpSwjuUvrkO_)Ko^IYHdix*
z5X{{nkFw5etH%?tEQknMxVP%%YWD+h#nS|8-8^0?^`c~pUcn6>IVGD$j`l4vb^qu1
zBPvNi{|Fl)(s3faBx+ChPC0dQ-olJ5y>%;3JQpFD7sG{&?gl$AB*M9uTvs*_7L-9J
ziRY9>D@@dC0wwrjq2YS*w(R&(f`tPY+%)FMofJQKA_i8hJ@T|JE1_^0phcJ_{#*(b
zmvlbaf;49k8Lb|-+ooWes928IF%t`o_NVA|SZ|N=bi<*tn9KFY%2z&&K%?G&w4z;v
zla<tCHytHHK1n$K+8B%#K!o_Mzby<SYRMxX_-KOF3u@&$>>Rx3rVwc+2Hjd|V-VHt
zS$D_XbfKL@7iF4a=<W;TKT)V_$z4hdXRcmn%~$kJlfAccXZee5WuX2l(>vuB7uiZ1
z&D$(a|H#Lc7P?ruQ{n`<L$tHMa<McMNm_1~n_9Zz0%@b)pVnUis|&n(4-np{oW9j`
z{KTrzpk><uZf1Y8n?TfizkTrAFYbPE?~~6SeD?Y9lfNwAoqu}&;=$}3Ws_E}o;Kcd
z6TLmpxtZd(Xw7IIaJ<@gYRf(n1D5BaYNF{ynEPy!Rvw@J6YtngdRX;>5t*kou~N<&
z?=H=_(o=uy7_=4sx6=OYnc!7EzXTNcbbNBH&ikX+`+LuwGLpoe9X@+`bQp2N%pZi@
zYUzkzn%vP5bqd8CQ<$WbsfoFWOQ(&Y4DrOWRGZQN8YSrgm4a1065eUmu^?Uszan2k
z9VnXrCmxgl$8WuR!%i^T`HBsa);1kaG$0JgOe-dRjSGG?FK7g)OBQJCuO=Mr#z|Sn
z^AD)$*Y%2S1fFA{0Z|H==)YQTCXj?GsCj%UUshr_(Kd}Mtv(lJK{Yc08tb#0t^^Ug
zLT<~=OFM9PuGtf=r80=QQfX%K%UL2qFqal(33W?(w_KbFNbF)siECMq1bgd!DPkeY
z%!+Z%qy)(Qfkq!D;rE()qL+h}(Mx_!5O{^e*$XS7lq{iR1ci8WX^q6>gPi_5i;qA@
zmqig!cw%Bj=?IN#oC4?~i2IJ*8+sMXA=ksXv8y;gA>vT<pPJzXt732ug-xYF!Wc(w
z9@&9+BFn<(oO4)2<jF0U%mUSg_pF><D<^OiY7iQ33GIJ5)8IqErcl-GvRaDaos+eK
zr3%oFO)8dH;}}rwRm*nS>vSFb;qc`PtEC$id`aZ20IZv38<7&g(++rB(Qr1hzh)bv
zN%2p)mNt5LOK3YZ^jtv|mY=u+t-n;0@o-*U{oZ~56EE(;020H`{L%f;{9d7TC1A@f
zRPcp4raBpuxiyEsYm7mUsa3MnMExzT@iLMr!tN?FRI{+mal~AsXpWk(onLxmvmT)|
zWOhqNFp^12D}fxVjc7K)d)rXLWm{t0&L`bnn5?lQEks7@ja!}hGjme8#)+5~@Q$+T
zl=tx1ZYz+InkSB~Za^_mDrHt<zMPDJvnPEASE%(lo5RLwC6?I;X5oHn44ZdZ^kO-E
zhk(o2R%{&)LSZ&rQsPMH@Tb|xH84^%o;n1U!}PgXM=xsAAq`rP6KGb}O(Axsw%PZD
z7y5%53N!oYI`a){le(d9(TY4dR?l%9rl|Wwwp<jmXy~*fc(-aFAusx5l2o;d%Emk!
z$s_T|Q;(bwcC?={fRY}wI@{uTEXUd5{_BIiXW6UQ2haCj|0(;I{Xg~i6SwoXd#@io
z-Fv-t@9y1h_TuGH_TtU6XY%_bmmKYzo`F_y@Zu<Y^mPBxzhqnZ_*HhdD?g$r7`FT{
zW`^K$U(4@m<Qh7TdUWu7|L|z<`KwI56xpLUuV3%KI2wju(w=q6KJ?{IS75m$+7G5j
z(z+Ln{Q&nFYx;n#OU#<ZQ8xh^8{Lr-Dv@yJOb*OXonQT`9RGe-K@)oJBj_2*y1Fln
z$jO(EjPXltbllCB)3;NnFXMqgNY~6`n9tmofk5HQm@oTeF!17|raehG-l)l=N8!{q
z>7sxd>eYJ>mu>;yQXUtd^h7&gBEMS_DHg}kk#ER=PS-J~M$V)c7JI%zsR07Tb_S6i
zRZ*$tQQ18V<E1#qbrj0tM}Z%E$C;N~*E8hP*2`d(Ge@_9#i6CQfjIiKLLnnLq$r?a
z<w4wAD)b?ZiDm*b(1(U5Ral_4hd=N?d5`@fHspwfQcVjGA%%(pL6v<?=!vo|4AZyO
z)aH62*C+>2(`=GlEIkcd^;|Rw{!V!5O6l<8N7io2>+9)hknUL8+a2Il(d7MtRU&iP
zS<Vt6B7AG|)PG7QfdT%fWnf)5Dq&(~TJVK9eYqWP?_yn-xn*yO^E6*AwJ6U~Dfext
zs}rfKnmN|Uzt>7vC$ZKae8)V03-fO#=(a8R-gTp%@2bBQwbKMV0H^!Hru@#Gaqx@g
zjDv4pApxQ~A|Y_gEY&D$(K%?s^Z7Q*+6aUKSliope0#g4c1<^-Rh$$iKn)s4e$_-E
zO8X6(^E4`}8T)fX8IJAkSyfF0YTSymZEtHF!tDH{S|S|F`zbAf%2sDmtSpURk+DFy
z0Tv9kf@3s|ky_A30Z%bxQaMR{Wk{L|;iu5S3>cK&@+<~vHJ8-iA7+vgBKjdo-p(VC
zk>v@ztB%zY-fTIGFd*d)+}>_6JR(L$XqLiq2c)q89~Mf_w9_UEA`@s@H&8ik-jk=h
zFUuF;{R?wgYMH1}pJZ~A#6I*9MyX3IrbTj6d#%fxB*s~_1PdvQ+v0=sf-=tf#SaNe
z4AhY1HlDm$xj1uEu6I2?D1PJ?PWGNMsbZ?xt4SK4)t7MlVo4L|)(E74c!hfm|Bg>A
z9(-hgN%*_2Cqq`=>p@<s7DG3wg<Sr{a8_J~Opx~cxM*fEu(U`7Ode|PU@lUp1E~76
z7`RwfPZ7|%z1@ieT1eM)kz?=$7Jm|)YWPfx#`E>^4AEyk(gE+&pW$IIXyV!4e(4sU
zm}o-0Y>Nx9GJ&pz(Pg7A5nJXKqz}@5r9FmPMI&qZjVh3F!`Py?Z#!-j*1&!21GN=i
zs{JZLZ_Vo!3i)aJt>E$MBEyAkDgUtFEcUd05qvhQ?_kgQ=OIXKEo<4BQv0auANBi>
zkNX(XkunWW!S>CGmtM{+Au0T*z^kXYYJvL|@lOTaNn=dKjBKkSeaFIaC`lI|eM1vd
z=6=Tw^P8#~H)Ae4%@imeZhv>D8oZulBt6S!*}cUs>xbj*9>2Wy6}9=3UqSiJf8=ji
zsa;(aeBsw)H(G<vqX?S54d*O2LUOe@bga$|+c?XHTQ?loL3h|$*{;pWH8*H;g7Ieb
zlWcCgFwvWL+A9U?D9?hh64=iQBLtSbcuHDsara)hpQ23##)$oro6BFUHCGpvMS2NK
zTx}9e^C;Yl6dzh{#vA2KMNEVzXc<CO)?S?+Q<ytC#%s<!vS9mt$fRn8$-lV^z*8$z
zl+x+Pes*hej2pEQ4WNMRm5c$>G6zbmNLAd$k$pRnK^!tkR`{qqpQ0?2N>RhWi#?yv
zSs;Tg5XFMhZ+IO5ZXsaqCOV0?BEHt3)dE63%hq;~Jv6~C#s(DtJxePF)g)Rr(If;a
zNh-BBz|718WTsQZ;fLJOwXJwu@HI*m2C}ki2VOk%6-1)iMOGKQQecOCD%(|n&j?>i
z3>~7OHN!W<!I(`59J;+ti_B>R;-t`QPOqTP%<U#Q2ZPRc$Sj2~--q|BzuG5oGmK5Q
zacYlB!o8!cu|#u>Jm^RBY6%C~h2vgs@Jf=+IWd}0pmKUDRT#oNPtECG%{|a<3rp|-
z#dURAc(HX}x!x|tNTnz+0ac;6G$<=6ApqwuLEa6;l(KBVh&ZG4YEK2+*04Sy8-N-o
zCb1iGzrWjimMJ8;B+(G0yBJG9Y*coIPpw$(0fwjfyh57%m|Bi|VOmKHg}V|iN&Tp!
znDvTUPK%q;HlH>@%~f~dG=U|3;?DI&S_Rc2&{u(JWmXpq{bT$kr{@Kaqxm%h!aao|
zD6?v^jBr#QOKt5qyTaG5h+vp4kZ8R6xL1*aY)+8$Rm@cCqLmDym-w|+y#l}jW26HO
zdZF5vo)wFzoEBF;U~L>CBQ)LRCcJeLFP>Ejk1w>ftISUWd_&@8<TBGFuxQcS;ty{h
zX44qv?SpLQD9d$;TH9caE9I5$eDmf}|M}j(_T66XAMU?+y#E@ZHkqRn9RHxhAvCRP
zBZIA?(1CEtk^ogqrK0-TjX2-(8mqh1)ymE^N7p`%R>1!ZX^OELi~ZeNzX9ZQH}26@
zl~&iYf-<&+w}4B<fZGjUq#?V%VYesGw^L=czL>Ivi*g>y8B$9$hB0Vj#q<=^xb0jt
zk5NWe5^YSI=4QQaj}oF(D3!g4S<j?6TQv9&V&10J5YG(pOw`<v^F+K`x5<T5<BWoR
zhuEtK9=eT1uHnATIspwHY%t!doEAQ94^VllJ*I7{pH*5hU?Q{5got>z?2h0_4soJB
zQew-*L`4wrmMA_+@rYxag{8;jv9yHc%;Pb=cksoJryAU9zU7s!HCryK!tfC+-tdBM
z7c1I?5kIzQ<L|fbm=@CYa$OX6k7)NPU1QDW<8T{e^7Sm&3Qc+I)YozHbp(~9iRkIo
zu*eT#>@9KAe>;0$8T&8K<lCYuLCEJ4lG`3Dnj~VGUsEmys6`)~54Ez5*JeQlci?$t
zL|jQDQ-<opVx`)Mg&4c#cKc7{VzYOekJDq^Docyd>v|rTqwPSn&?Psqd)-bj@GC#;
zX?A>b)>(VfTYSzw{@zs1n3W_;v$Ro5fs=4m=9AW-V$K)hSL6OvV*4VUt0Ay4pRCg@
zW$>^8#>|^iTDZu%+gBLS8t(J{n|B>gY23dz6lBrcccr1Be<HbrsigT`1YmB%H%OGW
z26yp$Xi}YXQtMPtDX6)xx1sp{IxPi>^>LOPocP-l!N*o*2YH%v*tlpBCChF+mWJ8-
z@-ZIkwMa(Mw9yO(JNNDiX@>SpRAyY;>+^xW_1RU$H#T?pirNvLdZZ1%LI@UPGOCZR
ztDQEn(&n*5MBw;J&_F+aqsx&Uvl6y@0{=FCS4Bj_NaNo$RCii~+2EP#Qh3%6PVQRN
zQLM+cg6Y(Cz&Egh+=GskIE~u1SU~V|bF{{<2+Y2rkiIK(6bHX5PTcl<%eDJtsGs7<
zakvSy<EKYQubi;DTxhuY7ef$xh;NcL*2m$r@P&bW{di@AJNJG&<O9B@dHQ~K{9SQ!
zSe?Et7D*GI+{O56{;>Adf633@=ILwqhHvrZ+E-re9UZ1`d^()wi+b$~&7&tTeKuUF
z)xJWP!#_59`g~ab(E7X}$GI!#k4H!8D_;yRe^|5<V4zkyV(H}KbB&^c!e*g5py9_5
z5zdHnyqH|C24)$fk0Ow?P;0o#!=5}?h@My%us|Bxq-PhnK76+TrJPIcylNGhRX1^*
zrU8<8H{Y8Bb1buB6nHLVkGDkuc|`HcHIz~hn!XocM*Xl?&yo|Git?Srd5?G#wz#x?
z^cExOS#%J+7*G=vJ|@cqUEaN);|Dpu8a$UzuJY^JnnOs_TeqkdQYQ7$;y^JAr1j}5
zFG;(IwDUOhtxDk)+{=Sd2=%O-j+0EH2nHrJC~}d{;0^gL2=-I*_!4o}6DFZ#FXt?r
zScuImm8OvcQB!`C0!0@7r(s~=`w4FjFy>B=vdW(BrQ;CZZye`bWK=PWJH~T&D7?HL
zI-%tBEx+EmHw=+s@%PbL-1>Ss-FaM0D;~?^SJ#URz3y(?$^GGsFSU1&2I0jUu>;xg
zxVF1UdepHNZdX<FgvZ4BI2PnKjrZRuZhYip-}DGbg<6FA$i@^<e~nJG-EZNE;a(as
za;`g)66NM7>S=Ryf&G-7>}K~I6Wq=2XFrFK=lIMiERFjgY4Cn8yVpfNxxq2=Yr;!f
zwE?jxxo2}9afXiMPYh_kiFM*<0jDF83bfS##qzee4tP;1MF7Q}*vtJcjnat}2_=y*
z{>~ee(#S8qEhVryjM}m`v+SfAU+=<T(eq!;^Q)o609q_y_E)zMlSz0)3MOZ-iE;F$
z1`O)MU;WNMhWe@QVte0%Kl9(eYU&C81H;+PHXxa7gyxhT4QKh{!iM&{zi}p%gjO4C
z@51f3i)!5VwA+jI`|0uTL^g_Kx2BsLygU6O$F<N;zYj65N!Qk;7w0y9*WO)rS)Ydw
z%eilI{WK`+eZVxXCsp3EI4AS!EvYF#9Dg6RSk21Q)i=)FrkD-O_Jv+(=?~#d;iu~C
ztS%PK@7GQaV(H&LH!+d5&aGaO&#k_ryX*IBw%76Z(N2WncUk{_b++Te*NOf8Y8R7Y
zdX9PAk`_*IzBMVLZIrO1WigC4ReWUY+KDAY#y>ZIq-^L|u_&-D59AB?#mN$-cHVnx
zt*7u#AhCZaTN!)i4v~B}<aHcILAg`o)|0b>|K869pj&+G4(q+|h|CLC4RTDkniTmo
zYUnM_O>?{aP}QqnzWem|yV0=yAci8N4%NR~&0F@L4s4iD%Dis<UCVnHLq6EDwwdG!
zNeLqcE4hdE=JWjeOKI(^_*sPa45g&|qU6%bqsQrf_&#|lE~h-ySb|c{-rA0!AGim(
z?k%JK`Mv9YemeWxmpvSt7N!%;YV}uu9&$H3;p@f|_51f9Da6XZ10<g&Z_JkU1@kp#
z?hfC$HA{<Hq?Nb67{X@1GCIjh$g-UsZ~c}k=Cu<8ok+>lPD`#gFaT4z6J@DJB8j}T
zMWt$hZ@ao!s8q%)6Be2cLmLtSHCj(M4E;`3IQqm+*4dFd$p(==C_w#vI&d#bl5l3>
z-_{QxGp=Y`rloUh^d_o`7*lCC`^`^*IzNxPztf!Ko6>rAwnaJTaJP5j6@%?@Trdts
zb4&0)B20J0-f+!IizN$<F^hcsxIA6-vS-MS&nG<}rP|BhOaVsOIh{CSWZ%hR?PIiC
z{=KeDS>~cm9Q%d+z7xb!$H^9*rbudifrrS$Dj?!%e8~+gzj&Fj@tcnCsaxn<4URiP
znp|NGA3ok7J$DkRxzmuAJF%49GP{qS_dcZ4TTNVq;+tlk3c?8mf)E^S2oZR1yCqaS
zzG(m^+el*UJnfL?&|7sTa`VkI4Q#)Y$jFFc49goX|IUhB+-b<e<y6RJaxgyY&|f%N
z_f{jPQ2apy_X2P_@L2dww~^n&VL$m-zt@*3^hS@mseIpQNWE>R!NlHZ>d)mK-LqS7
zg#xkY*Vbk#16s3(KirO>kgRXL<5DTQ(-Z?*PJbdkw>=Td&n<_0Rb*~mpe7N&_s9Ra
zlX1WO^pzLOwj!3ks22I;;gft)7fPIU@@3mnN8)AM&#83THua`(89l=dho<DohG^M*
zaIu_Cia@yU{SI#xE!TGw3zp3RN94TKzM^jNK?k+LN@D$?6Z8gSBGeb`!@EzT;Wk&?
zkNum|+g*SVk3VSS4N<t$Dgt+!qVM}oL(4Yj>ULV>UO#rqzdaRyzke@d3k}9%@5<Vf
zY}rE*c#ipeEbfR>-~|l%81CJky%1f8@?E&G<g>p9<fHL0`Q*2re6-c<b=&}*e3{r_
zMWo)%_=K+VonJy^&(wCz_T5G5zTWtL*UQW8a{C(L+Wx!qF*0_n;;oV9|2?|B<3)Tw
zh+(7uymViFi`z?t{j-hr(!L1$$D8=H`TfruU0GW3IqbULaw{4Xk{%e5_#^yH!DE=X
zRs7<|(m!Q?0v_Zmo^=h_6BmnCl0k@2fSNLo0TaV#`Lvjre^eYb3KAxXx*GlL4)vnV
z5yHqt#XQi!04Z>f=j&BB5o_DK-_*uGjDOR*_G{j>BIQpe1OSRXPjKc~h=ceP_+jVX
z5dW(CNgYp&=o%L}11HPN66oL-@7^S3o)JS3wa4H}EM`I(*?B&Pd9A1Fs0z5INz)R2
zct!}|1UigPSb++IchfS`4yLo^V#E=!@GMey&YENZW!(moDX)^X^&QZ(-JRw(=jClY
zYRnp(08r=`@~ByZnjD`y#(iJ$l1|*;_hL7jf0lI;uTUh!5vn$q{3y2<Tl{N$RDEl@
z``OfOy=wv#g47lSm%@RZOh|T1;&bDk{4eER^DZf~Fs*e+*#o!o5Z%f@)U*$_xzuhl
z4u1I9TU}{wO}D$zZs$b%yAvpNp4~*D6~|djsl;v8=<x60G;4L4-8}eKm(p5iS*ssl
zouh26o2<=Awq`1cgX|+_veq@W#xZt#x7Zq|*iA06Hiy`ndB@JMo2DIajm~@AU^h6y
z-s1why#wr4?yshs;UipMH=o|b>Gcu2rgfXIadx%2x>_7v4L8>ZIJs_ialO~Ub$j>L
zM>w}W+_iP1W9#P|S2cENeZ-=!cV^w>%DT~!^#N|I+c~jr>%zLhfwhKs7R!1o3VsY?
z8VT8sn#Lwuk<&<FkDk_;v%5>b>UpW+s`dBIKRkB-i9B}yaJK!!+4c`-+drIb|8Tbb
z!`b!^XWKuVZU1n#t#P&q{Veb7Rz&my{7sZx72N&%D!})={ND58yKe7>@ZM<=+dGlK
z-a3CLlYjqx08LMS_|NWS#HVCU{^580FYR}vx)O4bS<W=OSe|@r1~MBMvVqXvQ+z!3
zIpFSNfR%8Mrp<Pl(|aMfUCSxarrmZgrItvjHb#)I>p10)g?27-tCghL&OQ18-9LM?
znPgwTHcTfvNyL4GI=9yeH1J&V8BgeBT%KH(bxlNs^I{>{sP976EC1e6kzcY8JOwz2
zbHRacmi%)KNOB>%h0l;+WH>m0H=0~aUVlK9cO>(fSoPAaDAB7?#|OS8aa+Qz=cqaK
zztf$!@qw+t7yVWCfiJ<uoE;P4)olSci+#z?`+f^s0x)jsaQg1Tt>Yv=DJDpsjeZU=
z8$|5&#S^0~G+=_~xHx6DKeJV9TjDcW;@p;ao-Q$wmu$@lmV;zBY?ZM`xtoVoH0PwW
zSV-A{mL(JvgF|=BXX0^w45mCMSmYzRf(3FV%mD}uRSl9|ha+(AM&PFB_WO>VgubIu
z?LWC+`$eI}IlBWuIX;nbir05gOy7-&rx?w~s!(~%4MQ0f&-R<w&#=1f6DN)Mlk2c>
zw<cVi0~Ex1y_{yFF{jxFupg>xEoWJOJc=OmF33Uzc}II6bUqoxMP%_iM}=`DB{+`#
zAPlW`HQE02p*=LThayY{<wAXs4Sn>Ta?$muI;)d)1D{o8C}|b1mm8jdc?+tkfN!Q}
z-nT<rPafTFm>c06@jSLeS~qR9_v+QqJu}L-ioyB7!_@T8av~q%^>_6kv)ZLdc6F@)
zl-_X{zP<P8(f;A#!Pn3Br6H^I5pRht#E{pTS^DbD*Ut_f4O`yrN?9XJ`bt@#Ah=){
zT0>dR03mW}1?68u3Kr*ZzfBhg0wnPRjlDCtzMQD*{ZT$1Ut_={pEWLM+m7Azk-lx9
z8NxVmYhoZkaX9oiD@1_s71o~>i_JRQpPtUIXNwqZS+Gf@s%rwmTnZ=$%gHQH9LWpT
zlliVN^yBPU0~_4%K<KB%<PxCE^Th|8=l+FztIxOUos&s*vV+K<9sR<d+R@@o*ZJi{
z07V3R!{Qm@ZORn;Fyc%hjNMdrcXzLH##eOqk_E9y624xewh<ImMbT(oRk;wK>d9W^
zmIA{oi0g*22x#JLTrp9BsNJhOgIEdG{Ow=`cDj9Ul@Y2<M&MSJ9;|GtBYe+K&5A@S
zY_7hO`-mQQwfA*=^%4~oYVfAGE#5nb-5?A^C=Dr$?$OJa|8lTDeEjnH-ocCPI4(Si
zS{4euGuZj$x5MbSq5YQPW2~F<mKdD6UTSPoRTxM#=<XoGQw_M6$Nx_I_0F?T?@9>O
zTox=lS(cMUA6)O$$?j$GxRL;8K$yQAb-twd6{S0S00Og;mkU&;J<o9XS?JgOeUhKP
z<!;xyi;Ga#k<BVq04?oyekaD+B@gw|i`%BYQb$A3@X)!(24A#vcMw#tMYXG6{c|j{
z8rZ=j;V6&x5?<5sl}J_>mL({1V1AwT>++m&L-WAx)0V=fRzSF|7uC2J{JHK*O(H?z
zSu*@CU$~d0$|psH7cU?05BLA|==I+4k^BGqua6E#S=(kcws4`{lqwBe0t!)f{N4)B
zWEo&5c!>PdlkmlArJZux%Ks&32;0W#46DCq|Moxs-*GdYXxPw&`dQ259`0a_PCv;9
zv*NPz4#oEX0g1;4$#1*qr+Fnh(RWs>E}WPi@5E8@<6@rgyX&==jkI08!sOF)P|AH}
zwN>2Eb(`1GOx?E_jWxEb<*LQZ&@v(Op^L>fot^tS%rCTZn)mUT4+A-M3h8c?F^$hJ
z_~hkvKRg`I;-&_<BVN(=(j1N&tK`SzTcDr5oKCKHu~RiXm6CID;&cn5fb|W8evIz~
zO3dk5cGgFa_rHGg&G6aFZyurvA0-%X<_0d`E%soxRf+U467H`{Y>kIaK(xXmZB!&H
zoM0I%a9>a@c(lXMBRPm#6Wg@f7!-^uD-HkASkZ&>E#5YSvQd@3ry4HdZ$TNuuZafW
z_$4A1eYHi;b{0-M6`keza<V9);H}=`oz5O0@XjZxgds)R9oum?>e_b)*~@7WxSQR*
zP({wCRD^S(!uB@rE_-r&+a2=%CE})P|3Nxeo<~;MDp&Ts;M!6VT54_E3vPAJfjP7Y
z*hXHuVJpd3K;KL5cRA<r?VEs}i=*ZQ(_~0)y&xv#YzBqC4;+2NtZ5ORKwvA|W3_dO
zQXMTqbPNQ6=s4D+ei=P!jS>WS!L#L@Qg*tB%Q_$;lIKAu3|oTx?X?x10!o+aP?e&b
z#zvx}P@n3C=X#AI-FnCEy*d~k?mv3Hf3*H;Yc>@Lx3Dfy^J$gyM)6DetW^Fv`g<y`
zuA9De^B(opZx&t;1FgK2Pg9x*0B~<*d8Np-qEAI~vWQ>jA}@);Cs2PL*DpR<<G^r6
z{~8T_q|O4_2v5p6>}iW)Rwn>adHq&+8T_hJ^+xS?v7Q3XSIy7!Y55l%vbno~Q0}V^
zZESB3vb`*Pk>EX@SNTNnKCNo?L4YAcWhnQmYi)UXna_zXdu1`;+8_&#i>$rjdm)dn
zS?V{>4&B~mz0Y@*yKOdjTkK6;t7Z&jfgM!6KdUB=Dmx(Ec{RTlH@BcBPNLe8)*p*7
zvtFrN1L>vTcv1?IUa%0*NK*&cD&{O-+oMj|N6D*EJ$1tN5O(E}YM6eM67lX<Z9n&x
zHc}KJ^e|>@Z+nxPE}CcK*hY&bi(!m4lD?_6DXS}B6kK73zX&HY1Txre7n;<f#WKNX
zAfx7f4cnNEBwTE7|95b1H#h8c_pzlx?7G+@r(1{{IwEOLngGC?mcfSnuBFpkk&6lV
z9c@6+pN#^*jz>vJPlIvG$U?3Vt?ptWM)HTA0Gf#3_uhsk)a=Q6d$M&pFB(wXG?Xu*
z%BQRdOFGK6uT3~=YVrz^lAXeb{^R|D43Dr!T0{+|w=@P6@d`gzc_f+d4X@c$VZe^&
z`EuG^1xQ-LN_7R?OsdIAK93+2v0KnkG+P{nNwJV@DJ?J?cEY}vvkk!2SP|a=UiS73
zZ_b851HtPwd>QcC?Oovh=BGuYDld+)N@Vt6MdRhz0I?N|TA5t5HS!kwP_}RI?YGOZ
zvh*=2iC|?jjL2HrGIs;w9sp}07^4jpj402R)6(5W*}-Ee{%CWXTuTvTyHB+0T-am-
zl{Vxw`mKORrc!xll26Z<TxJ`ZKm1WS<*>LR539K)Kp{8BAmpYCtX=C{zP6`{A?7)>
z)iuUe<a0bG6Jm88C%e-wB2PyA9wuWx?W8LwzSk_1u%MxZkbmVRkFdDKc@u7Li=hE;
z;le^`p(?wVU0~*0#if&SVTrU#sL-XBSS9>ExmHZ~Rbged!Lb`jv%RxoL1^%?n;P2c
z0Ic~q@kHt50jBKV{eJ5XZUB9zFVFPdGyU+4SW*ob6dPUuq*bP_)lTFDDHUCx5qcW<
zD^_#M{`T^YR%WII8<~pp?D)~MgA_r3I=lRHO;g(}KYi;q*UmquHaASbF-*$g1btbN
zSc8j4P_b#`udm$>yCeX)ZC2NJ&x^02_ClLv4B_XVlQEvY`I^1}se>51h+--IzI*cM
z<-hE|aL?^QF)ik~n}NuPZrpE+X{TcqHDSZgAsdaZ#FXe}fIt#8nZ#e#7b1k<XQMT~
zRh)6dT7@!oB=gg3KuetzQ;P^zUSOW+`hh;0hN{Vfv9KdA!K{xezoCBXRW5!Zh8*&0
zMt<HBe}vVU1;6>qrf@7)i2G`(-P#uBz)()zXY<M%7gTm>>Il@iy6lr`aiNM?vqk8-
zHhoBMW1$EghQ7web?dw_*D<TqE&QC-iq~9!`T<|Lb!qm!vQt-P!8I1A1PT*?$ix^0
z4+8kTtQl0{&4o<Q6UW_4CF`qsBDYY-vCe{uv>ib%p`;%FrJTu8QA0~aZJonF5~XSU
zIrWLrB(<bP<5?x|Z8uW(c%I8n9?z?pD#zg&qguRk2Oh|n(jsVvOPcja*OHXRZqyEc
zACD9_oc?5IB;LSye7&*>Pf>MMXd%gW?nJU~DOwwJzKuVID#{Uaj}3ALEb9wd`#Z$7
zyfQ2a(7^3N`m`#-AeUSnwNg6nT9V*#-C&AR{Q07|)XJ+Ia^l*zRfwdts5u#Iu;Mj-
zc8c%3EZ*fTC*$N3cVh_LKRI;pgZo#K2JM~ez`$D#8l(N^U++JDeDLC%!{O`wC$IMp
zpAHXR9PPjUcJCR~{=<=9%HTE_WZ%I}Lg8v|6^$dil3QYN%0T}YZ?~hugU{~Xh0UXK
zyc~(u5ZFPTlTahAk8|L*{W~Wy6<Q7v{H=m0H9zM%)`Jxi_{m~-1bTQ1zK;gDv?4mZ
zdh_g=`(qs)LL~|kW2=UE@io*eb?j;t5uIvMp`lu+U3tEAgmF^*$3{t6L&MNe(*A4z
zwQ|aAHMXYH^1KAPyf+l*%-xsEd7)gRWnNlmD3sLT{Vs(7QBdX-wv>19QQ=U{Dipyk
z>HzCLuO=+9Xw`^yqg>`=iBO@t+P6;2Yh6h1f_o29T|)reD?d2S=cL=7?;J9I0e}L=
zBNlZK{joLj(^G~f1DhUa*B7%Xc`;~Z)p$3lsJG`8P!d$@g;@c@#|(aO7wK$LUE?iZ
z;2b|&g)dAZRGJa1880y(KQv|oiEysrOVwN=m{ggL2y`F{L{A%p5{S}S5VDTLDxKl4
z72C=EyF>rTkdMSZXV;h8rp3fvPGn;Uce7=KDZH*En%woKx{oh0eKBXXz2k4(mxoRm
zTD98T8=jYoAq1tkON@py))~-nDrCiQ+<qKO-Ie=*B7jo}aq45=gx|mv%p7gq{<TqQ
zxd^TT?kb3Fr%T6vL>~-wBm6e-w5c_wkd_CXqoSgq^pnmuZ)`rRB5_hkF>K7j7eVuT
z=R3bfPuyR0bA8C(@dfYx#>Lj_S4(z98;slkQ7Ego%3CPI#^xTU-TAQ`s!7i2!e6-`
zS~%18HiXbeYEc8k2!4T4ErLFo3Rz=r1X=TtRtOE3ofOK37&ZIJz(-)iYUYc6pIjr_
z4M8nFZZjzZ<gMAXkJg<}T`v~5!frdiK6V4d#p4S_!Qum}k}}Dm{h$?-j`UTL+@M;E
zhWpuF5zL{xxM>Qhzn1a63gc5dYh(JxIU|P_CC}CQMP*3W%@V`#<&tcsV(6I`*vt7G
zfv0bzes_B}u{eB+>eeUKk2Funlh&%*qxgiGqqG9$ILob~IE0TPw#e{IglH9Lcy9E2
zuMXULj~SyEs=xKLPZ_M#ZqC(hp}|aMiMHx!<r(VZ%B*v_4kmv0gA+Z<Yp@XRVB-(_
zk<bw~w%gAgbyIJwy&yKSYPyEia0@fYC1y7fpOMTQV>ZT`K^bK@W8aNCSJmYSi$`$P
zj34)!wx)S?0_)+UgPli@vspPSoSKc<Z*M=6OB<{6SZ)K(_dDg(m@VkDv6i20$UgEa
zv)(BhB*=2o#gB+eqXO?|iJ_j%9qWR~?ldT0@Vde0RP9A694SpRjz-C&g*b8OZEwY0
zMOn|xa3+$dkwhkZIh&LeUtUKpTuii09ulFX06PdTCca-W&H@8!QCO`Y4M7+$kut=P
zL$0%$=bU)r1sHKYw{b1K=~9d>Ux1tDb)6lGb<U*FZxC87)?EVy5DootLaPb+_0Tmm
z)P|bvr(xHfPV_6Rgi!PZ7Kw-N4~H*bL<nLMK&&;38!-}Y4>Q?Jta1m_sAOvB0|_c_
zxu%P_=&=Y><$T<SEO4!RpdMuD*m8IFDtCVJYmtcHG|ci&RO(ucE266`%(}eVvX3GR
z1>L!Mr*GX>hzTN~VOn&^_k0Tih_D+XkuS9buo*GrBJoKMVkO_+_Fo{$%3Zu$uaD$T
zyr|}jZq}EuT8;ZZetv!U$7eTWY1m53PH>Xmy`9VJ`iDuk*ExP(P0y>xU*G=i`}cP)
z@y__9+slq$&Wh>Y!R_Dv?B0%JG}F9vFFWOb;HDyBH<9O8t7dsjFTYVK5h3KnHP!LP
zc9z-_)_TY{>+luc?;LaQ%5VO@)rx^O?mySnv@adATB@&Q=KepFqflW|HkpVC)9aQ^
zwd=SwvERJ)>i*rk|9vIPA@-k1wC9bPHvUL=sd^miuD6iL@3-#A)zQ!UUd2aGVnTN#
zg(7zz#iq|`Q@AFVd<Pp5*_zfCayPG&Ysb~R4~9Q3#x`%166&X`!fIeX5Xc+X=<|DB
zoaVCz-@%ryDVyQPVGFMkXuGxV0^aVsi*gdiP~YY#TA4><Hg5Os)wnPymw$SHnDbMj
zZ{d!TLTUo@#-N81#=Y_{Quq_E3^Hk`;THzn-svLTwXD8b;4(Tsd|<p)${Bt>l#fHq
zgPEk$p%2v!u5*9U_T}-uKHkl?M)d=?ZS?aFvMhHN)ehr5PwRIh77h#K+8VjP-ShUG
z{o<aBQ)fIrWiKw{Ed&T0+~1v&%EGd9Ca;JnfE!uv!zBxn1AdXmiVt5_?;;JAjd-n7
z9O#m}Y}En9KIcTM#Z}=*8&Wvfnody+*Nbx2={$m9%LD-CJ7c8LKJ{u@{N2voVf=Ae
zh2_wSY}K5F-upC@q-VR!n%y}6Zt4^c;1dyB9qgiv`!lE3h1{jbs#m@LJj=v_4p>mj
zl_xq0IHezz2<dUfZnV^kiX?xTXBTdJKHM<=1FLE~|Jgvy%fpRnC0?qHufhraawq>v
z!zz6w!3NYvdwFAEIG15`25@Pgarg&U#mP*-EyII2_J4p#JSm;Nc3EL1gM88^V=%iR
zC*;V=EmO`rvFO&Pnsn?a@3!YfIg^*%0-u#Xihbj=p_AK`OGR&{RrGk9hwIzj+-q+1
zUOFJgE-^Swgwu{+I}1?onl<*7ceHRnli1wj@$Ff0MrgRB4YQc59N9rE?!l_eh%yVK
zQ*lK?!fN3heJ4V7j=wb@Bx!O#WJZuI`a)6>@GMRfv8=XQHN_77k2O7^lJD(kWqpXp
zCHLzoo_!Q?=Y!TYq$9?${btlb<f=OOC5KUBBBDk`c4ry}W6OMJ)Ji8+^_JVKGy08d
zfA`B5d(ZcWFP{v*-FyAjXpns;nN_hYs-UDAW+7p4qC#8Koxt}^_0<3mI!_QCWRZY=
zlc;&yDk=j6Rl*$j-i5fNdRD%AoT;RAS((ri4u4sjhn}GVqu+q@fBAa<@a3D=kM@VJ
z_Ku!@HIjG@nDc8NQDKAGwDD!naPWjOqaJ(;j3(6~cwZ_hGT&?%JZc4%#Za;{vOY~3
zlIN{-H^NJF0!p>OJ_a2Bch860GT>a2K8hb1zV?9`Ja@vYegCs#?6G9c&cu7(lMjD*
z`StMNv3>gP<?DYre6{yzf7Fc@Bgz&Bul;j%vMI$?U2joU<kba&o&iZxwx)Y;kiA?k
z;F|Q`_;!T)lj3aQ?o?4#$H7^fA#7hmB;qX-a%*N4!x5pM)e`@ZZoZxbnfle1eWQT@
zx&}<lU7olrWdT>96N8*U%+2G@&!{il6X9iog@`2!S#igj(ifEiZwq#~^=h)Ue)L$p
zs;=t}H>=|P=5@bR*`jtV#ce#tMq;`QvMo&zY8{nK9TDT5a{6Zpc_O>AI9N1|nK_#O
zE)*4JS>S7R=IL$`-*bcd^`NWQe8i^3y69M_<R0ZQ))1p(m0ciUX#RHW?lP6ZwdLq>
z5x-S4i<?o&d-aXYZV;#rkg2Ik_zdp%@>H$N6R6H1P*Z`D@tdCq?mjYue4#c^H?fXn
z(lZlZ5sihRluoPrQv_9EGc)gRG(sy^%vgv{o?$G>{UZrIm*dW{oo^kdvM%LjB9v&6
z+ZwXT?`<Lv<;xxWO!--H8P*DAqONu#4HDqg?r;D@#^%YW3b}|IkOw_)q%aeO=Fa!B
z!{<k@RE;(o;m#+YMLdQ`yVLBpXbwTg3}FonY(sE~9@hpQgS)^e=amfAOyo5_v0>_M
z*vAkMxiOVe$@5KVkP4v}3A-UwiJd9N&-F$WpemulelM)3s-9LIF$K^Q;W$)YYN2VN
zAK%}~RZ_mpIm6PdhSeP2etDm=bw{xYxg6cF9wZ;F!jWtSAd2ezd}5~ajlG)oHAgIg
z3rdbH^=o|-EhT3cKMrBMh-q|m5v#_sP+C7Ah>lJSr<>UG-w%!B7B_R>zu%348uHV5
zRg3jE7}6~k@<PH8<N3L@V?>_OjdoH3A=x6{9+Cu!Hy45fL3Jt-y(w#sop4<BbgLvk
zduvSCubQ8Bt8-%(A4Xn<Bo(slw;~#x;R|H)^|FH~6lqK1@8*IU#v9US!3jDE7_GQ^
zM7C9f7GI1lTsnkgTF_0tE#|=gT7gt)q-=Qo-%%$BGp0BPv(;)VjQ53GuqBf8nu45{
z5rsa#K5p3x*xs&@lmh^yMqPK@L5Sv?w;;n<&l24UQ7f`r95ZwGqC!^j>SiC}*CBq5
zEkL34fn_FJ%(bQ)p;^doOBFm_JMz)>*>K&@i*t2uGa3<RqcH~_&f{njH|_H{y0D1K
zAXuQA4?1tdSMkeeR-O<S{&E^wJ15n0Y@+@cs%Mx)6HbQ-i`icN)?L()?S0x;FuG>P
z>8a;@Z+j<MU^TX-0#qD-y`28iwH8z+D1IzXmkGm^u-PE4mYN}q$RCB0{Zou^M1dmY
zEZlNgP3(x^WOlx|``H&e*fSSS5H0^AsWXXH$gyF!{rk3v{pjsGwhz2X+k)pIgj6SP
z7hL<Weha+%<u3;dLxV3jAQO$3WYc~Rg(E5qaIu`-@}v&3rvefXlijIceoD<5sdGH$
zB!rA<xwpJ+GvpsKDd}BRj=h>EvcVFTUq-fuXuadW5pHG?@yP9%DQwX~zzO7E9$~t)
zaMgvFUU*#9{t9Pm4J=1*CUxWVA)QP=)SmPh^D6@&+cK60I}L>NZqt!hhk-zRavIEB
z^w-G7+~z`b`#{U`h(<&|^Ef_c!CQ@@Mzq;GLX-;$B)`@>ib>j*!x~GMj^fLnn3<^|
zjWyrVH8x<jGzQKDx2cuIq3>WUPQKLF)Ra<2e0!u}u(0kH7IH2GH@Rm_JL{>j5t<lR
zX+I$Um|b@iY}!&a1&I1eu2A_2F)Zx72OUZNOzKc|esw4NrVyRWi3;>XvzbX=N5c>h
zTKCm3e(+&vbgSD@guo|-mCT7Bb?f-bEr;G!SBu4bP)-xPQ`eeJWZ;_JqD>i&Yk78u
zum4^ERv-Si#fEl>J3k$hH8_C5W5ATkt&RWt|9XNqenluR9~>3GD9~1mLcxD+UXAws
zG!a~YJ+(p<$XJb+_=>yQR-XN``Q&b=fjPKw)F9*qgIXY-xPv^{;Pb_#t?{ouuJLiv
zY`nhZo05H1jQxIfE%1Je*bgn%64)h}eGDBT9^{!1p5U>krCx$P`MU&Dx>x6A<+#ML
zF&$-OjXbowl8B}ckx?r6mD9c9%j8+EHD^W=gI`NDvH~yU%wfi<htI|l7|a1?_p#QT
zDpbA^y>A{LmqD{N+i=Q86wTsCb*gGqfr*MXU8fWxD;U1$%uCW@`%q*XNFm@syk!78
zm#H3lng3W`E-$l#$9M;rsuZ=KB6en;y(q32qx~qKAZ}7)w9O%QT6pHaI&=$zCwa^(
z+!17JbK6A?mFlDLNftiu1c*B`p_BpGFilQ+sav`>>yM<d&>Cj(nL?ssqH#KS;?HpT
zSnSPM7sQ}C!w6X(Oo))=6~>)uvPp==Am@@1|EP)XqPmMWpnQw)C!6W9+t-t-nl(1)
zec7P+rDnV<yy@Z$N9>9aT6VAN3?j6Yx^oYek_Dz=2E~s#^{z#<w|U8%19>iQmR7#3
z16UWa4R3sBC(90=7a%rNR(994JA)-x(~8+arWdgz2UqC~Lou)+odu46AIhy@m!3xY
z7x4uOy%3=gxFWY~FR_Ro4W1aNUC>>)D%2(C%h6Ge@qGb^X4DIJtmcfWB8p?<+S487
zI?=PLrj*zLBh;E&OFZM@J=GV`mbh@-lYOuUOr`J72S=(`_o3d}jxe<mMlpWeOP)jw
z1xU`p05F}e1gC0>0O)cNGH#CLiZ|&n7Ii-x%5P~<0;0`TJ1cRjCgsT-3GBR)9~aYV
z$EiiG%b}FD@GEH-{J+amN@s+7{@-CSl{UJXd;eKhQ&!OIW^(&t63JDp@+<Q+j`8a)
z9oBbfz4nL?>Czn6NhL#7nI#`QaqvbqbQuBI;d_(G5yEsEyNO)&a&K_;j&U!^_5A^$
zcmjlX?~6}A`EBvV-P6xLzc)U)_vvS!efsGarw{JspWgkvIJx`91NT3le(~AoI{>b8
znp<d0Eb}|{{B+0rfClsW&a-=;-gW0dEdhXY(<%>o*Kz+lQ8pk><0q4N9%6?Y75M0&
ztcP#~Y;_wT)i^2eS`QYL)>?6bx`&{qY}a^W1FvkfKmWUq{~H3Q8`2><l^Ubm6c021
zVQ>m`+?5fD0RQW)6)f$IpZu#o@BH-h@F$(_&l|m!XL02Y%dvGaSWd6z`D|FthnUgU
zU;mnIOkuB^B@^i;?X1uto|4t0)k)njAFf$=+7`!uF#u@H5ZiofV`rn=0wV5)iY02N
z`Py|7D0|;c`oiy8Nxtz@^n#<YC-8f=gnxgz^OJ3;pLZ6QGvR*m>mBW$Vt*6r(>wSi
zut;qIWv$|haROpa8+Wm7uK5LWqA6xE{X+9eKzLNs7%AY6-$^^sjCYbFGh#gCrH20@
z0Hpw8-DtUEQ{0LEWP{Bwwe8ifwHtgIrLd8lTdh`^)$cS+If)adVMgr(6g9Kk^UK)5
zx6tTq)k<<r06j0?0Y(bo&l-*5u0GbQbr&9oCRjAVBjIhpqRPv%`HH#cj$`8L2M5j<
z@q(SiSB`&PHKGNKb9&(}YboJtRu8A$7DTVmFZtf_pQ{szCb~Oxe<qisv^MY_XJ#`a
zEv%?d^BI&?=$n*}j}cqMtS*wdR$#py76fjP_p>1qh)YCgBC}Gus;P*a!4VCbNZK(2
z6`XKkGS5yO{{DXJ4&yf5Gks_ieUPy)WbEe(Y|%ft?z0&@(w9tdx#;`uDSQ{O68eT=
z()DC>clMG3{^?{1jld+MDA|*!MP9gHWN-eJITHsIHK4jcMA_Zm&K_4t)R(;|DZX0n
z#pA;h5<(R~oOvQF_w*GiOt51gKKPKBRgJ^4Cgg~>bSS2DZ=CORezmhhgI43g&ac#R
zkzeK5%ru<46@q+-WGIo!H=n$Gx!L_)RN_qvA)BR*uXXMaJzyB8hU|9k@VAE#?+xyM
z@!P@O$jJ61ON#gk8iy@|!!I%<$do+AEZrm0<;Gd%&eVLPmwocU+n>H!(~M5jPjGE(
zT|dW@yuRqD8PI@-5i@k~IOE;!{^)jIzkGS5VN4Hyv*kqSN!G8k{?lv&kki$?{7Wt+
zYrZZV6Psr~1ZpGuA8ue9zxjIaa9<L(U+g^t0?AH3D|fDTl7Ofk9OdB>UYQ}rfurp%
z`kfF%g?fyC{vqqnGsL>IlhcpxU$a*)505y2TaOeEK9U{YKVoeefIDjBKLh^txpB6+
zad|EEwKg_Cc$VZUJ7Hn!o!>+>-f=BEmb}sFv@i9yd(YnN|GgLDc0+W_P@G;=*@juX
z#)e?~8;)|r5MZ-6wIuzk(Y+-~iITvvmQTsOTf>)}2mFt6Z12gc`+40DPxKd+M+cfQ
z8qi%iqB(dUwFb`pJz25di^TjA5#W{HH1jw=D2$sozQF;8fwvGz$rB-dBY~iQUQ7$A
zMDpf<tk&IE?)#ztez+_famTL&LWKsz0P60<!iz<cp=OG3>egUbxLK9L-4e=tXh3kA
zw>nLWmux4b#fM2n&SYLtSU_JpD(G;R*R$&ZypZl4q_hpnYNv227b`mLpvUnL<(UQ-
z3qb6{4`Isj6Z0JrfI!5i&DsFH3>(lOp8q=|B1Rqv3}6I?c_$QW#0w?jZwQZOV<Il%
z1X;bSA10#}FVe{Uc<z5q15U0$apbN0xP2k%Zu3UuQoZuMI0Z%S-`{oIP5JV*)U1H>
znSe)<mDBdtPn}=EcN%Kw{t8!OsMP!`%qaSGd=gi|bzju=1a`-`0gda9z9Q3)pvQ;6
z>-IlG0|g#40>0^jHH)O&v_{L_XynkiAQK<}%qWO@ODk9WO;ud2l37@+l`>|YHc}Oh
zq_Hw{o-$H`?If);7Sl!R#6@J$B4cZ)5{VfSv+j0#ph6g~IQp72AO-g1Y#R_@8U$4O
z(pF0`t$Wn%Y1sITJJU3SC_Tf;dTm)+JJQc;;zkrHnuNjOV5XyzqDs>gRDe+?Jcr&V
z{K%2Dqw0`GTJABg*aO39MB6xK%E;C70lR=M2;9LG0(@mgErcD0d<Nf+2(buS+!gl!
zL~oiXozttl!KWVhUt--Week#5G#<FH)A>4zrF2trjLHZ#A}dB&3k1l*-3*2md8;`J
zpE(sYgDA~jBJaz^inbT~q9b<W1y38q)}}H$CwD@&ZXCNHsM@GtXRsF{DfPV4XTOQs
zZhw>l?cYr@@=FXUbtf7CTgifaN+~GJ7fNV-Q8)$SH&3OsqT{On3{y)wz76;Fh7A#A
z1N<-@(>j>GtKJrUU~NBV5o9+%ZOpgYe={%LZ1C#Z8ELz>m{oJZ;-$*MbMn})kH!5T
zXK8T<wI267N%FeeS18}+&L}H<ImPeTM^jZ0d@l0I8Qqyua+1=Z+REJ<j@!6@`c`bu
zNrcm4BKB%v7hQ`+d2(&#z%6q`uVsYDGW{f+U;+dtVvkB*lJ6>UALi*KY&6;<-i7A%
zKx#(#n&(`?`;uXQf?*Gn6x0wI<)azpMPVweX)py_*b-lZnOCk@d9AD$p=w=2GE`Ee
z;OY!2E+D_#QgHZM4GaG9Vr=d}d-hOfHcuxe$saq}jV+lNdq!k$2HGP6)D|wI=_Mq*
z97h+5(d_=v5^|^KLr;#>21NJNF~G%cw@dIOfx_Hf_R*8`T}e(bd%Vj9*4rXnh<KTL
zx#lf@e5adT!7iHsOp94QXGxYbW3V7SumF+|p%7=70wy)gjo90HXsc%ci((4)sRg3}
z^kJm=3{KC^N19X+BzG7d+3GAETb)KtnWN9+A(|$Lr@ZJvAcF`6o%)JG(D{_NGR)L&
zNJCdY-kZ`!_hFHrZuR7~_P9@97AV9EM{^AcwvcEfNW@N^3NLFC4S1xb;-#HAU=~PS
zX)W5uRc7I(XrXBRDY0*Y@pmCGRExrr6ebdUG7XT^>`%b~{4=uJKqiw8E&t_8ExJzY
z2LR)!oR%X?n-_tM>H}k!4X#6p@7h90kGt#?-rMKB9AOSm%1I*x9XE(HJH#x97}#o>
z2QoYuyGP{7s`6-CO|*eO`%GXaoYg+A&{8FM-X!~Wq=rtb{~*v|o;vz#>`Wa*^*<2L
zDX6?WGCrC_*_*QLrPhfZmxxTX>M_!;%BSwY;|ncn35obhFhd1F*9XS~N$H~&;YD@j
zRra=BdBUK6+1&n1Nt2~P+!7|76z*Z|8{y--?^)^_S6LT$uMS~E?xHPEi-f=$EKW~S
zL|bx=>**r@F}rZu!2}ut$;LCGSnR}ZmEcex3rq|IN!>M4r&~&whY-xy$&p3gE!o^|
zHu}=<RcL)*4g93ozCStZpF<@n^CG?R+Ch}M-x$=o?aTBzICqRMa=nj{9ak=HP}hRr
zf0>%yx($q)s6!qw1rX5;WP5E#tPf-=Eu30oGhn3SRQ^6pyB8swimA=i9d88V5nn-D
ziEy|*;5%_4-2RYg?%JQ<D4VN(8|6C$)CNhkl?zc3za%bD!w7xsZ-}XA&c9{$I`uoG
zdw*I@`=uWD>puGG$N72?9GC^9?61{0i(xR18MpmVo*XHllcH70HIMSfB-e4&rby}c
z9t@+mCAuV^*DJB?9^F9wy$YVBYWbub=K-~gTTCO6f+1A{zOBG$Zk4V^HgHYyvx+6j
z{B?JB1g%sj5I}H!ZaExnn$1}YFEI(8YPi6xkZ6&GSN&ItMEblUkQtEgxCJ_$!}3zX
zG4Y+{ZqWd1IO5(yprht~^yE(*yiw9|gxaNjKemFwm-#eDh#`gh=kmc!oRaAPq>*J*
z$vPApo;R#SVZ*owb{)g_y;#FvvtclMYh<Vc7)qbY>h0hZKh7pLF?le6#jxRp%+Mos
zKYIP<aaJ)ZnILKY2->9xMlUGo@vA01Vv;z9z=L>OT-R1$Q-n6`%DF+Y1uM5<@gM&2
zSy(i;0I&C7Ju|*>Qn}e(Qs8M4rHvX&1`qHC;aKk{M|B7~gctoNj5pWTP}>?tZLROc
zb1si$CuzsxDR(?OHs}*NAA7t@TDW`jTte*x#+88W^VW_ca7*PWk~$2;B!!mb3wqsK
zZjBbZ7|;&pvuQO+j%6^?%nxz|IXf!dK6N_OJ5;pftmNBJ^5T42QWHranzoKftRsbl
zWZU0w-ND5A+*f_=5Le9=F{eb_47%_9l!5XQc#)KcakH3UIK;#a8F1K*VapjU%1hju
zJ@dHBmhNRwkDfp4agsf)>p3qHYX;08aW2aaJS3*$DZ4~K$d=#@@>~G=$!TIfDpP>e
z9z<2$b=*ax7{$B{HA$Qt_*d~?#Q*&@dmQECf9QXI^_A@ZUH|*5n@QjQ=f~3j`2YU4
zxBrH2-As;U+n!bvw~zhb%gbpukok4tRV;}eqL?X<^{+}}$AdMiG}6$7pRx_#!Nx8=
z!pyjv9e;Aamwo<yFWW$Pg8Tg7^ImrE{`c9>+0UcDWtDVpbHq#C@qfQ}V(yvu&Z>Q4
z?oEu}{Xb4kXOy|A9cP&2gU{t}&M*7k{l5>NU^+1cc8lkyUv+OeKkC7v;fgs<QU*MW
z7_6D7cEkDlrNkt472RBa?uB1I_dmFq|12|i%;mjJA2%uak$sVD^#ez!`aySPC6!Qz
z4`M47a6^E(Au(^I26>^{wUgf#CZo)IA_j&e_L?w5THK6~RIXhOdirJH`v$jRjuB<+
z2aXmS2&Eb>D(cu9$;Kmb;3r3sCA!O7$&>6O+%<#SvFT_eXdPo23<ev2!|A^9a2V!`
zn~eS0ea~c`8vxD+O~zWsgixNvNj(+vQ77a7F@2#JH^dco7v+X-`1tkltzW$L+_AQZ
zZgKytSwtM{nStKg7AFGAdR~{zn%jr$TNPgS!Rba$h}mMdJ$Zzo&2D}WaR-YZ7aJeW
z&N-vm_zbZ><Fjsdi(Q##uO2_~5XysFFQseW4HlyKXP>+ppSh8;Z)9cMflPkOzF&MJ
zqS@f~o5;1^q^1nx01XMz(tRUuBoB>lMan<V3d{%pbZ<4EKfKz%&4iNqp!E-&kiPOE
zGva*COKc7IzqeeTZw{V(@bb9UKX5kk#z!nq{SK?+{`Yp%nP!LIe(>tJ)^RAmbpL+k
zc<`4y_~Y-viDgQ~e2(CWJN&nMt4Z-u$NlR1rimq!;w!RB#&tfq_c??HZ3f>QY+lk~
zlFzCIeySJw>0A7;kGFTT<oE37kD~}DE&3AFLjKWR!-YLiJl)f@g4Bw9h8$x@gh$8&
z(<*R_V%Ctvq;<@|%mC`9L0%JPc*@src)&*RN=elAn3tU{^BFJH*}C1CXYNPSB_+E6
z)+<4q`@nm3#?_qU3n%8??YVZQyP5m<FI9Evq`e+t-JDkK1jL{C(5H6?pXp-{2KSso
zTrMVso6%FJ*}Iv}^KrR!Pk-8j)`HdExGsoBi)i(E^|tt~94{`|w0wS~k9|GCF8TTU
zpI7B2F<=by$%IRd4}JHcyFwSm*D-^|ZI#<(sjVv$w;7Ji9iKzY1t02tgo5>RQw8}e
z?M}3BNHsYH_=ZstMP;w@>ss7aX2nrkOC8(QB7EIJc59PK!`32`uH!E9X<}&O>vRd5
zB|<7l<*L~bM@{T}u{mYMB668qSvk{*)Yi0Bl=NYYJXzuL_Iiq>5{;UA%ShY|K5wQ4
z<hu~3-f=Kb@q$_i9%(Ca82F|TsPxrq2Fg^Bah9H$!hWM;+8zz!MSP&Mt1t4IRrC@}
zPFg{M_}agvZn<T!1d7+v4R5xY68z)xMf~`RcJ7}QWJ?Pd!X}d8D@hc$Zsq$Bk)w$k
zF`yKPL#$0*9IeqrL)UQwQDR*VD<hI`R|7dlZw<D$d_K>wBjODjfse9_(@7~`rEzXO
zp?mA7+PmGlN*K&zv8K{MEq^M`=gL8r2o#jmmMg=p$^1IP$2^vp>ko3`-5*N8S-T5w
z*D!Ee!gimzjnm5{ZZ|;PWc{!B%Q1d9cI=%z{`>EDI~uY3wzzb?@k~9;j(tw!PaCh~
zr_6+kSLNIM^kRvt6Q)cG4~W%qdl26}XPC{x@vZa41%5o76~%bt=iUuXJ_7LIU-J1l
zZuE)Uv^!5Ga7nkeySJe1a%00^FDFg}&6o4I;cw=7UGKcAO57f8ExVO3rgd?1(}y@!
z?tYD1{w{ZH`Qw}XLwSBaxt=Z0&f-R2fD2D{p5*2Hy0z`6udLbcJ8=?JyrveP*mesI
z#4EyMV7?KlBES0dhHdpHmEf%7z&Tbhh7(Og6bw<-<GhG@nzh4w8skC!=L?`qB`8)N
z9!pV;KP6XL+>M;8V;R-!>MDD=_8boyNw|E|`qr-g{Z7(xy56?JD=Yeauk(-7_x~@a
zFMBE5u>BMc?L4eGjrKN9WeB~x?lmOA`1qK&*gMD*uxA9Z@OX@X@}oG7H>8}1aAFxM
z$KOkW|Aggn<e0e=upxin+vw?E_x)cFHoot8iXH1az0B$4((?C~sPYuj8^aYYr7|2K
z(-MSg07_<pN^G5nad8;U<CiX_t@-zad1xDwt|&a%-}@xlUmrixnSzm3VKw#5q5C>r
z#+K)?exae3Mp_$)UcO`MicVdm!bo5jkxweD$=ocI>PBDIZFPi1)Nd2#KT2@Nzz4Rt
zk?Hk4>YOZ0HD7)6gB@?l!8IXN2ra9CMe?mi$F%L)bfMfmm8=ppsavg5!!h?CyF?iE
z>JojB@9%xf^%3sG8<y=gVIy{Y(`(nvJ-D)9s;V^C%{1PRSibl99kZ<}6n_m+dw9$$
z8$_Cvu)Cy)b<F#_|M8o}NaaTIELDcB0S^^V(v%A$D1hWnm7e8XCIlZ3W~qu_-_J7H
zNgw5zy?G0%(3#y!_L4a$@5!cGeHt5TWuyNx-rd`c_kQbm@2?r}eK`Qx;RD_A^#j@C
zW|aEh##6k?TY@v#D!y$P-(b+Q&q}m7uiR!EN6*@nk)t&i0L9`82+dJBIGgBZoxM4b
zN;$edo=~-f42J}fUiRqlTlc>f;q>b96ULU!^7#+TLLbs>9T}A$iiDefPXBg2JSnI7
z{F*}OPW?av%VkEg=FPXU;`{Gtu3=~vQ!y_pTTtSehgBABPI12^Vz~z3lLBd6)u9}v
z5961>DXSQvBvU*`00Y-4@}y%2<xIjt4HTIX$7kiV1S)3vm!jtr^lc>MTpW(!foQaA
zTm;%jS-vYmNLkGwu1VP0z9@RcW<wpq6)bbEhneoAg=k^01Z>3<zx`3H!m}cuPet0z
z7g8hz!3KH~5kYX9`-bretGnL<5WXCj@5BR!KQ`9foM;52$6GD;C4N>;VG#s6N(&9R
z%}Aez>O0NReqe;bdV%8Bu?DSVc<v)A20Ol1&?-6XF(nBSJ(L_+<Ta$YF&?2s1pXVM
z4_fE;gb@=1DSf#*C;Y7QajZzEGaH}XPULZ~X#OO^5-yR0M58mt%aBxY6SvG$0uoyM
z&WujDX{lF28Cs|9#)DbAhg&A?ezZBi_{QcuJ-_9geGr7aIV&ZQ|AS`#-k^vZ=D!*q
z(N2LE-;e^+^EL{+_(my!7ziZ+;uLO2gD7y~<B4#KNQ(7TXp5<6B?E>EI^cyCLf~hm
z#5V`F|If=??tk}+62QIkL6d)f+{OC2w?trgD5Aq}Z8ht6w_D6O&Z0${S`$#wN^92;
z@4|O&ly*NVp&5~&qhxHuEytOLPOOgg?-D1`I?;WJ`xxx7%a+OV0iCV{Jm`Ei*nI6>
zacn^g4d0tO-|W`_C3maHid9<udqr2YlJB)fkT7*!=CevddB}?&GcS3})=}?<0F5@$
z<3C{#2C3B`76VfTX?~0Qu7zTll5IH)&G6gKA}rPsFG?)2%v-07d&jaSm9%Z7zh~@5
z8$on(dk9QH={M`Ybr0F28*$oEW!Ym97T8B-9koG9GwG<kk2vQDIYVMMYI)R>F|C9Z
zR?E_dBvH#URHGcS_<fC2N$T|YGMrj}E_>{2h07qAB^nBdBk^TIwal_%s|LWCm0m={
zk`Ig0<cqRMick-zdd{y;s`0gzcnB@#Ed|obI;o=rgr_+R0-xpta7FT-4B4=Trs*v6
z82M)&C0vfRnjjiF&^LsL&r$G~*eg4}l+&erXLUf=zO>nG435R6{c=DUVD*EocJlcw
z#$HHo?0Jk}_a{&by8&0p&n=z|w#%!q11S83kI57ok1Egxh+MOzq*lfi2y_@bq~bi1
z&<zJyfmj@mKy{P}fyu8WzC-JbD}cJ;2Mb$Kq$e6OVHORm<ZB=)%^fAB$`YXTxd~57
zNmqx7A(Y74XPMeL46pm*DEoeE$9;xLvCGm^v=^LK%PBx{7+FP_kzQ5~ih)9oTwU0>
zvF%X=WKx}<E2ghNz#}OZY|z}_EEV$LZZ<~DnA^_PoLB<-biM?<mutiwv*VY{+^h)m
zSn1#0Y^%{fChwnQLSI^TtA#>cEji`pCRSX-63VUO1;7jz0@`=%3$y&;yQ9@QVxJA|
zci<~t5ZinB=c}X|9Dcx7kZZLUR@t>EFrGZQG91+O*z)kv+$Px66)K3@3F~HyCESz5
zG-xAiKj0;^1-+fFs)$dqO#x4Vo}K(=9o0P<m&Ee9M{LAyeORWxWg^&c5m|H6(w*V_
z(nM0fn1k$@+b;|;0EnC<58E67F)|ga8*BDOtZj3TJ91OfmwmA>WtjA6N}m3lP{CrM
z2a8QCkcx~Du{=2OFU0CvGVPmXQdnF}iUM)!?%(rywVdG(<xK9ckSpI0?1)b&KXQMA
zA%*K~v*w@_W`|k8rPS``ffU%LXeSeACzL$yu~=f=;Vm*hmu%8HKPz}{`;_8@e^g6%
zRh9KyY;ku?--;rDI@?^c6zK!bgsZ4Tp`u>o`YfMI$ky{!IK)-cks62azbq48g@IlO
z&_p?X2Xm#S!8&sPxpJ?t5~c4qk~*SAGft}(XOURjF5ifYE9Tze68jE=6Zx+8pLr{K
zylfzY6t%V$-Q$E)5gV-Kwd(q<T*U*aogR9qV+d5KIc-JdHsyiMnB;r75l*5M=C~!{
zxIq#~`5pGOJV(3;K=Q=Gi!A0;3sEvEk^`f$jpu<YNoE+9jws^vN9D>#rO1oG@+$t*
zv<lZ&Iqk(4oyYYDzDHRs4a>q;q)1_+<g^n&K~CemxU3Y4BX|4-2O0Mn;4EUw1R$j_
zbdRC9n>~8Hzjw4BVD5&m_y73j;Pw9S@Xf3J*L#njAG|=Nc7J>oXXSD6u9`{Uvs)1S
zE&Bz#9qU9ieKG5MX^MMikUbKSR|`4@M+yCb^#ZleN%IY0*7C*;n{;EKJ%=h^a8%}F
z0k*8AMwFTImo+<)Yx`X($UZ<9iRgnw691_iYJwjhYLQ^ajU{~b!DmA)96ZEj+>CR5
zG%p#t?DlCf*Vxzxza5_H*G{h}8Wn0J?H#ox3AZ!n>G#MCBG9@)p-dU6wqW@hl?uY3
z4aljQL>PPg*=?@Ez-21$LOPDPkC8xTuWM^^X<rVzy!x)p!%8Zv?}UX>+z7uB>JX&M
z8qIZiK9y~I+-QY_`g|xKr~pZciWpbNmtU2qy5Y#Cjmhm5eT$(8)<KYT<hqdOn}PJF
z1;gd>0A39>#CQXpYJpxwgp(-4!$$|tO$2hx^>pXnCqs9yPdJtOw7m55xPwpK?BD+9
z|BB<Opz>rJ<@9Wxd(~n?hv(I<vEJ0G?8*I<4*q<OngqH8DJKNxj_DsLVSoz+ZZ#*Y
z5t)%tF}vH_?lwL+Gj4ZMOezf&xOD8coK1@61`rC2Q`N7R+!x%HSKvci(be*mjq@uj
zg4zez2TyAstfO#SPcX8$m*RKf8|BMRhMY*21?rqc(;*Mw2>X8Hu^o4Z#21`Zl?7EV
zD}{v2r*dGT=L}Da-rPc-l(2?!-rRs>HC&2Xhl#nNGCE&0;$HC%GLDHEv+G7{krZJT
zVPX1FRafbDOMRvMv{|PIz`rad?8aJime7%*khlVBeqcS~t}@~Y<6vdAbUMw=lC#LE
z-SBE%+c<1{c*9BVZvQDi+7t0)Pp*^WsC060=Xd3H>1DAz5MPbh#v-FcNe=#kO$9Pl
zqzuUy;D1335$Gh1U&hl!U&b-JwLv4o2#)2O#>feW8?NsjY7&-b*S#2`$2ZxK!&>Y&
zX>Wm?!fkKEh4q_2YLl2K7|E|%<}@Go^g^RN1Pr_t`HZrn6{IYw#~3aOBS*HHX(qQy
ziij(yrMV}~*FU2neErK<zIE^Z7WVV?uX?@bHmGrU!7D^Jm2B&_N!v*g0=L+Oqb$W;
z*4WkK5QH|z)Mtpp_kY$3BSjct!4N|-*vekE@&l`uqd^umhC{(cTvGC16!WuO;QIYp
z<0Kl=j5k*F#5U1(d?SD=9=SCI5|ZHr`H%)n*^z!1nzq6d#D298!%jUxiPvMY^I{ym
zc%qnnw-H`Us<J6|I>9o-PA27L88zQVV9#@Sz1)7WEVM=mN)cG-Nt25O<cLP(v)ls1
zDCdTts}&yS#xHI+^T-IL^=NNcSQZ-thx2PPki<2s_l{db>waC(603k(n1}2EUMf{E
ze1+JYW&sd?xZhg><U2zTt=%|4F^R!ADF|bC#<7@>QRBgwvFPm`QiCf(z^7n{8qy6s
zW=L-{#zwjJw-DMGrgFs^QxWPsgFmdz5KQLff;R^{d#?_9vcL+!)`Cu7N87{i?`~ZB
zBV3Jk`-j{CuaNRd8*RML>>WzHDULn?E`wYh6-B|8+ZmU&;3ozmxM^d*)9Q5mdN~!+
zemcCYrpP25&QRc+TX6{~dN^OkRXLeTd3YN}%jQ3bh2xEHKXAeE&XE)tTzk)aZuPmF
zFYbAxuuSBWA<e{1%@mJ*b89tAwJW^z<kqL$iv@TMW=DJNi{TYN>D%$BI<JfK+#9)%
zUx|%9v9^a*zm;9uNeg4o_MKqpKj78`IwTxLk>R`gFza~C$t)v{CXPBWarD*1@lr7j
z)y)9WrkCBz{GepW?nK=81KIfnZ0b_|s>m0$IVoz_tC;O$%XHk6ytEZt+EYV&_TR-S
z?*6rD_RRayVrK7((jP43k-?i6*<8(L9_HKYk0ovaE36(?GuaEc{F|e%4er^AnYqXR
zos_4@0J0LlYR!Rn1taTpn%~IP=fi_J=YVSHII=3?r6q)Gbp&_fKnLT%=DtEqrl_aK
zRjbcN1ml8267M!}$VUe|j~-{Ua#pyF6MOE)w3E{@VbG`N-cW?mkeVyQZ|VWCdgI_Y
z>T%uO;7i0bv=ReBB*7;ZolX>UWP!)*kvEZB!IqWVLgV~Ji>2HOiJwkCptjp`ZP*a@
zWC$C2(W=!rkIbmG<*SdgEw_)jOL1lG1*7uzc6o`tQ%&9Qwzs+ek{L?5DLufj7Mg{H
zLRB$`7y`3N?Dte{bXrZXF9Gr3WC$&afs!0;UwfVRT{&L5b3x}^Wc2nDTo8^;#>PsC
zjA8beC5iTSDwvT{_<@&7_U84oq=LiUp;qW3e|AE}q`K}V0RT2e*OG47SUv+LwE=%K
zX5Ec{Qk+Y%ACo>;q%Wx`-H<z>57-;A)DdJhFLpu{FdI0=M*(O`^KDex#D2|L5Jvm-
zv^U=krV_;D>l7wB?!D0|tD902)$fQ!Uu$pWU!t-hZVW!~TdRfy#N^a6=cUf@u6S}@
zH7dyIw$QkYD9D2);zd)=iL%>wr=L~f_vDpF8p^?pnXSD?&$@}LqzN3W0Mapg0Q)iU
zk~T|)gpu^r_vhLYG3@+fq>HnUlP>-?djMLPf3Q^d?jxkS`nEzQc>0<Wy(t{Ytg6L(
zAr>}Y5(cp#T!-y#azDrFwq9Pj?bhABg(b$@oanb=V>mpU3o|b{5py}6sC!N?waAZ_
z7?d!E@6geFd;4~sn^wEI@IOu6#KcM|3=Uc+3tFPexE)D1OzG}ha@n}MJ{d-;;mh-#
zXsWRj5B$zsn<GwVrj~~BfVO3#d@nAnw!~_AN2j~Yy@cxyW392h_*2l9dHy^@5al|a
zp4P)$TtrM@HHfCp{&pMLhi>q{n|UkiYt3b4nC>#1Tvm>qMda=W*JUYj3~~eDFQKfD
zDpFZDS|Avn&yh9gD4m*peEkpVq_t!9;F+P!io}7L?wDl5V~=>F2IDy}mY%=Ep(0OE
zU9;1n2rgpAW{tg|+n}bTQQ_E1(GacEp*d3N28;!gEC%#eOHQE;$&pr}#*Rm;6|97I
zVB}C=EE4gYtOtt%Z7piA7d!Tc^ZdxF?$$!FqQZHt=FQQe++(oae8hDz$i52=;r7(o
zSmcUy7>Ef5p(V6y8=%^xRsIrwF<S0?iH~3He2J&OBBr5#P;KC&vz;&HPyblhrhd_z
zvN`#<1Ssx?kQSd}8`Wi#0FU=r*%eoxOnu7@+o?$Nawosc{}NTe{9!Vp^DWOr;olAK
ztX8vEe(F8%Y4Bw*-7AWUZtC{%6E~zYg8B~;u+u&)pMIxiK^}4|M}$<s{5m^vRCufV
zQmkiCF1!Je(Q50=qft>B`f{?XTtb-DH)V-;xzkUXcxufuRuaq^VZr$&O&5b5q6W|P
z3ki};o>2&>Y#+7J(_r2w@qKQgoibj!k$O=fumH+oTr~oiSGlfec9GP-WF?w^`#=8A
zQC6N-5|c8`Mu#}(NV?u%eL0RRVpxL2!vM-q9hJVul1M7vwtFuA^x{(UJtvf`<>IC`
zD<T8aRHfra;3?UUP;=$?O=4nj;MwzHy7bQvov6IjqH+G$K!4%f>4r>jfV6%gJt!zz
z5vsk`s+0*W;?QG~WMo?ENGJjwYyBDJK0<9(oO#W=@Wq}`HI;?MdCOT%NCe*MSfb^?
z`<UKSE5G$212?ASPvZ!cZ*^qC7TU%puf1nr@;Zj*+O(d`dLo-+PhwbPA7Dqw=FlOE
z&M7RX`k1R{5Yw2AJu!!;CvhFk;)%I2-&p`hK)AoPqIEnBvqDT-kKwS%kpYk^zUoIC
ztn1iI9cc4<c~UUAOiTss2f+3!6NK>N&~jqh4}?9hVc4&i(?oghbPiV(;P%k6B}^#s
zt71bjzd4AeF*tRx=!M&AGriUr`i&5`u~hvDb(;_bLyllIExmUuiU({DX6M+|M;xw6
ziZ~Jj<|csVr5M}<U8p^4v6z=9ON9^!uc~->oZrr-u8?8d+qgrvw|k^kVxwRX9BqG!
znz&1IfuFtq*$U&tG&560p`+WfC^oemI1<y|D(Hz_2K0EZhNQWx%fPJ}bdpR<JUJaA
zrwMMV_q_KDWg|4^?%$K^k#wqdZ7)hDMYj@PY15Fw+N(~<fUzQ<Xu)1%hI2&yX}~b6
zGFO);rO(h?q2px%U9hY#HPFb1hia^^-Fn_SlA1<lHxFvSKsT*VhJDB#8gvZ?A!?}?
zA9|$Huv!s&=DQRIrAAjcDD9-cz>1(iC&DZzCXfVBs(!YYjnqxhKdBZYlldTkm>egy
zf$XVyF-fWi*71Rm2EobuW<=H|!`KMLqLqpy2|~`2A|$})Ti4ZT$zDR#HWXMM_Z4|6
z$}WkwpD~iA`K~U~oxrFpah%#JB(J3O2{nnS1#8@1K91bSfih;y0~^<Lff$rVdu91@
z_ee20vzll%F-d6sL`+{?dRR@4o>zzfDNc_`!T3N{1d|#-@k}$|Q3zQn?D+%b&d?*C
z1k<y~jy9Ua+t7-)h=3D*DyCi91%+kZhvJXqfuURAafm#0O*vJoFHQBUv#th>I@tow
z6sdJOM%>`Ms-uAOdRKfa(vkY>xO>J+36GAf9^QY;pu0$*wL})AXwK$z^EBw9=t6T;
zVK1ic$7;&51U{R{P5<nq5{rt$uP_uY7|28aZac^bG|C83dd!)^*fqS*1lW%Wf2#HJ
zxSd%8fU+Os<(0z}@gpaINVKr550ngb({FEox8inj%>OI*1En5ZQd9uk7q1yW=zgs%
ze?d01J3G15va2P2nmpcJ06qE0TePyM5ZOpFMEThY|J9Lg#vScf=ry;cHL9DQ$b&V%
zT$w7AJBB$j1;(cy|N8i)?gF+1smQhk<v5Xwl4mx%4ai_zd7y%95l07X&Urqq&x*O+
zclAX%3n?PD$$TUxL<<W5#x~U7)!XEw0O6vm?7GmcGmsoR-JP=au`wn4RK6COpI=*|
z-OBTrl!A0AVe<)ipcr~&uWRtVw@7JRu8%LLMlg{Ai|!^XCp<o2of9=?ndPc(4+~EY
z<niIUh<Xw1Y)Mp2Qa01f(pX5o)0yn)gJx)Ib4#n59>pIksVE94W#G_`!ybQq{0%LH
zeoP>~7!8N^)mp-P>*8jV1bpaE{l{hg*3tXEwW2k}*RLq9VL$?jAC`XhN3T)Lj#zO*
z7iFy$g6G5TD%T)ty1UbP(98%{`$3Q=Vd{*Ph9~0bd&%rrfAbUcNle<k_-2)>F^#cz
zmzwQOpj5$?>-Yx!=H-;>SmnZC8uI$Ozo`04Ei{U*=3bI@!^NCaEGUT#i;R^bV!*oR
z&9_XNs~74EI8+R;Ip@}+tl&$k!wSq!iXUMi4%NVwl69jTt)Gqr*C{TafH?50*TreY
ze7vXb(?q4DG5qly^I2ZP*B`w8LFk5%Fqd<iOKdP$kh-gDM_*d#s)>wG6c0<2!Nn)5
z0FF_=tzk_J`%Vosl`W2!Ub%bT!EufF^74`bEKaAbDT)_5Hi<o>Y39Iub+QBxE*PK_
zE0jH!PC7f))Tem?yjWyXVoJ!c*Srnn+ZWS1H(yt#_^bJ))(;LPHt8(5<k^t#DU!Ui
zJg7K;M8`&s<W}B7P4(7s>Oo!yakSI%^)7RR!ku0Rl7q-S^+T9|88WrzqHS2+R5Kvx
zfpz-KWKvAc!8EHDjC(;YSiJ;wog4`KSvMO;0kH8PihIcr#{q3|H;6r3eSnCG%bu3N
zw7Z5|j6v_ERry6A<(%415VvI<h+#1hJF~i@d6B7@KH!rjT#wb<t)9ev<O@-8#33j9
z`~q9sQ3oS1fNzvn);Mw5;;!!=<k_?S={!Hf{Mb$s-6830@N}JOsLR$N5H5PMi|VfQ
zDw!j&cGT!nj|>Gv(&*3Ci64G1cJPZ@AV;l7E(?G)cby<2ap7Hn6Q~z(luVU#xC0Jf
z$#}^v9u_f@T>Y)Yg2EW(iz<6_fbmW9cjdX99UC4)Rc&vW1zKWtP76dzPZ)Y|u{`Oe
znMk0}1Q#8$3*4JUA+e}Pg4N`ucr#Aj5rI_2&9<A}8@O>j)zwN3H*V@&OkBG8C8Fnq
zlUVe%1!LVu6A0ab{oQSJFbPc3*K?@lw~MM?m>7liaQxH_RRl(R4;c;&<g|kGOqo-8
zP)`KzkwJ7d=Hu~P&4kn}WolZ>#NT4x;&>8VuYANYb><r-8Xl>-8s5_B?C$QC)3eIy
zt0yIQGomh>>a>drxq$~z7<V#}ePLpMi7P{6eJ$sE+E=4#hz<1U0OAcjo99&jm*qt4
zS!Bw%Rlta%^I9Ru(9##*9Mm48LkxY$rAE9r?oXJwZGu~Xv_4digH)mDW#3fp@29VN
z+1Gh}(aRp)>Cv3b8_aP7Se;m$nbD2yaro#e&9AY0KhEHR-t^h975t<PwX<sxmg>#d
zoaw;p_1=vlhSM14D<4#W9a%&K5;aJ$bCK1L?Gg<4%s9{qhAfLqqd_$6UTi2U7N>S^
z^O!UAbV}xPiA%+*1euB$hVwzXVv@nXCFk|{syMl*s<+b8Cqw(#NODQT;@!5nO;o&l
z(U+c<mn2&TDL2c>q)&@VoIitahxnFxGigh>@*Ii#FjfV5btMA!!O*F&>6^R^PAV8b
zcAPGAzH=c$Rlmj${Znb!Y3x{rF3&F|cCJT#?e4`N<M0Y_k>iWv$NU_=rJCFsj5UaU
zj`vdUH1Yo2@sQ;S0IGKMy&ZX}Kj$eC4m>GOnCqg|gG6S0GcA7<{x1WGw-v21%7`s+
z>x}j-hC<``{uqgGkZvat7^^f`$Zk_<nPR!_d{*&x_o`+N_<M?_r=N&Q(OPILjJf%X
z&fXDiBm@}wS+`VvyP?$bUq9lPwujwJa4#Waqt2d`#boR*vM}Bk)xt!laXOO&`&Lch
z!Vu2TLIB$C`r>BW+m8kC^}C{Y>t1%dQ#<-=cDS65-H#8myPioOg1GYKXYYT44${Ln
zFT#&|N80Oick{rttZ^&6x6rYhn$uk7PLN_G2_jht{ZWTsdhypH1T(I7o>MN3rp91G
z@_a^QIVM9&LMFi2bvI9_OW`qXq4`@+f9R<W3QMQTbGlB8VwQc&Y7WsVWuYNN`WA!p
zK`$F^@7y1C<6okPL`VZ#;KCmhwQy?g`{<K9_eW$0DB$+g@7k549_3+%I_**OG&Pq1
zb?anVKO6pjxQoysZ70v17Fgp^K)=yi2GR1*5TxC{+U{u%q>~yb!4>EE=`~;O{K^kl
z5MJOu8%Q6|TpzfjCIz0zHlJ;J=!6LKW}N$Q*Gp~^*}Ifq#ec#QBtCAx`Mmn|)--vA
zZ7waAQ#Ry|*q^Q7hgVVVK$=DMIcQN#Y;ycY4H)dztC(m|+V{iKVI*~VMxWk!HVScC
zQA<ze<;oO<UU!sU(O?>}RU7W%jjTF7UC!r{It~pbNZ6P;hvk#<+QtUH&MG(<<^55E
zYJp;G2^OU=0L>|Dn}bU4=AMn+19F_$98bBOHnhQ0Edvbc8qZ(8=s$UVaOb|0FP4+B
zVEVH!$46|A#$?jL=m<HB78-x2G!7Kr{BF}Dn|M!{crQ;URSi%8TXXsn6s<-FapNX#
z(EZ-0--(4OOh<c=H4DAqr+c4<7)zzF+E8szjM?p(JD0Us$I(JDm37<lj2S$ce7oDT
z;7$5a+K1wYaZ;S&`mW}(Zf6UNgc!q%+E_4kP;tyO_*n04vu1<$K5>t3$=a#!V6_nr
zI}~mRgT40|-j>Y(;r_3}>EqI+s+0c}7>LXWmGV1T^bH9K-fNqo=9}Pwb@uP|AFh;G
z6v)EIEd8bRo7?{QclnQlH>pJ_|I&<zf6eapKm8(=R<^UAJB2&h@7u(+fA9Y=_~+$x
zx$sg%_NVaY{|1A9>QwPM3?Ui({RjWa2d{Fd2!_ev@AV(tTQ~S;*?0dbwhc$!M)`aF
zd-uU||FHL>|9Jn=e`3m0188oW->L}Thv=RR{*I%4WAJxzSA9kuO*I4e**O25wp$fc
zYl<&+;rtcusLP-*>b+TqDz=t>fM`Kc8mR($N68^;1-XGeFLD~+o4hq)lKgda*Ue&k
z=YgBxcD6lozY6@I6D|taTyVhrb8cnbL)q^~nSTxgM>b=H6nOXhtLNR7=T({sjoXZG
zdhy<;(v!U-VueP-@`}9q?eA`Qy+y9MRjZ)Ur*|I2R4V7K(%}1>c@|n(Cl<e_5qH9R
ze|Yn(xA*3oc;)^8%lX_%4S!fp6ntiHc}`8{#^#>ve~kmXb3blOd~zz%!IAW&IGHaM
z2;^~bDlmFCu0;Rdr)V=?jB2c+n_(8*s~1hNuZWgywS53TUO_aXJji?j3WT(}YFdW3
z=Vp5ck}Gq6n3rZFb9Z!t?M5ukVlwks%RW<9EGR+M6vMK`o<A>{*9(geW)rD~X0duf
z#1AuVOS|L50(hn7EPuG8*QLG}1|_LaKbB&c4=pZ33iV3oA;{*E<1D=EFy$lQEJ1G;
z(>#JWU}L&B$iAuUm63Nfk1_;pi$cRNCv_w%FJh>EE{VG^#tu67or;7EVhdrEI8p@1
zxz&$Me51~TLH4*>GRpL#IDH#e6{7yVoH-t;(SOs00b#!d$ljbua8?7202XjvoQlPz
z9-!?<46U)i`a?(7k%H+n?W@!fvE^)>`z%<UmBco;t`lrjMU<kT0A!YlF~^4XyIfbw
zFY&LBpWFIWYLq~n!@b`Qb=`)GYAD}Ju*1sZn_X`%1w>cy^{)#e=62GgtK-?cyrju9
zL`dDy@A^J%LFjDQa>t6h7QMl5{PVRT>AY$*u9;O4_zFf928DRF^o_(J6oo!}22%T=
z05)Y2D85L%k5)brd;UrX1bIjri7{35m*XbrT3Sfm_bTS@g=}`WLpJ>lt?|X1!k`{A
zN{@}*9gg8vrB6kI_hRl8#=yPOBq+04<U5OL(}?rtla^EQGF>~JYKr&LGtZ~bBnkn&
zH?e^c7@qw;3U!|u&NbFpJhdA%#sTXE4O0}1{EWjIo)lpNHuhh%gi=J!|8S|PCZC0^
z*|&rf%_2x229@p+!ZSk4@mnRtj0opV*zKD8h^aS#Eu3k%&xc%2ZaR*49tw5y5Q1-j
zYv22%Qi+gsoA-N#QtQeQX#n|jzy+TO)~`f*TKtTn=V>Y#rB^HK7LYYGqSn8Y8=erd
z<WztWD^cS_WqOnGUf`Ibj%hs|UnBSGRO1+s9^fw#@ZDT|k?{=OWIh>qrF%C+>Ii`_
zLTCevO4{=ES-7RIKY+HMuDlL3p)~9#ZeXsz#chE13+*JPS)v&lTuEq~*K(It%X)Gh
zMGpB(V>#`IIIV>*gjeU~xY;7#(XeBJhKiM2LW~H8OtaN-h&z5ivq=sQLqY4eyo>Jp
zVfFJqzHK=_`aBMh+_H(xVAm|?<W_hS`M<yqM&eoZYi=t)b)V0egrjZlD+l$$1U>s_
zFrEQY1;+Pi{NphE2Y&eDzOsqc@sIuR-DT?7jIO^sd|E>=3ADrH4&jRVPB*2N#M0$$
zL@6l$nioiJB^ULqjG<b-Nk$CXKDYIsi#gJY8AbwSKJ{rMvwV)2l*vGSr)n@wx!ane
zB7(scJHvh8Q6n@V!V{x-h9Cz(dC65S%`j9cPGTG(+-Ia#a;`1IbaW65Ghj57GHYJ1
zY24+lal?G1=~+2h5Nn^3W2NA{#y=&xH|lfe-rYW$YF-Zh8Ow{4padfVqE^Sn0s&6w
zLu&pmr@Pv`{l*UNp@Y7DlXhXxX)ai}e8N(bmvd8y#Gw%I*e;jF;-VTSAkJe5I$lCL
zj^6tygw4SkAz^06-0#>}^!MTjBYCMtcn%JN^fADGxS9e<(uYBn7A-`j4^4n%@VaM3
zwyF`|YAo#P^XP`*BV{67;A|b^o)4h}__WAR25yO#T}diO@J)GYx$t>wIIUY3Mz2py
z2}C;@pIa_AYpz;2V90ZJ4^2@;)++7!`l}7SRA9QUJaD=yI0h{Q0?7b@*+H2l5+5J*
zPw-nm79W*L?Jt2+u?Qi+J6`II*-oZBTjOhcZpXgU3a@$z5RJE3{F<y=5RJyk@IL8F
z`+aF%Q-zyP>d^_8(QIastANZRC<Mw?y1Ag1qp6gHUbrTJYy+0b{bRy?Tnc63-C)u7
zejb-~4fn~+Y1OrW6?iWtM43~R%8<Y{p9|<3FoeOZffJ&|;O<H>I1MSXb179RK#g)?
z<#9n$mBpZ`N;tfeSEb&L*qj(XTt_kp2iuF1De6iB`iLW?VQdzdG%!9TA?l52M2cCp
zg1LG1Cl<;Q{VIfdha0m;RNUOVshZ+cz_u!<LQe(JU}?TYjA=-NOcu3HhkSmhKl+W|
zO)|_i|H=xq+gNxOr9QGRQy53UGFFUXPl0nF0x8Kc(52pC6qJ**KL2C~(NfP#WL;Ee
zi|h#Dp;1(#hmzZoz)`vMAp1W?@*8p_-rLz&o^;)PaepTUZ}9w_!$zx(f%qWIx^-EB
zPPa;SE3ERKs!blLuCZ}U=KlNc9psf-N4z-qbtnA|v}uk!-IuF+hTEE-hOKFDx9v_M
zM2o(Z)o-1w`YxZ8W6nM-foxgPox<;a`y!VCRkjey=cF25dU?bUz#-}j#vmxYMETRE
z2n53#40W;=V>-zp)k>TZSrT(J-DOm0;=rkxO|4r*W+PXC5<JV4#B<a6t4{@C{f>9;
zcKX?&`<3-LEa6Rq02~{;s4&QDL1FX(EEpN`ZXZE*l_Ym%Y;fb2BKoTHKO~B1I1{iO
z6<~#s89m9)J#(D$!fC&RJv*@MW*P?=b{XexNZ9;Iag8ty#1D*-Xw|sOg>l|toN}pf
z_6?gv9;-@{Sk*=_S!oy$zLq(q>m;$=Tv<maZ<HW0Sr;O0=7B7~ed`y0<Xaq`p{ncF
z!Qsp7^Uv<y3mc)PbE+$8+E7$3vGbt3tCkWPmEAI0%$LQecf)`IKXwVR3Of9nR){9Z
z4aWF~o{wlp9S7_k#Hz92r_}-SsNQZ?^1#S3jr_dZ`D~>Z#Nb>B@Ba~63OSFAD&~qb
z2h5z_SNODTjsdw9w$ui5;yE1ZZ33E0DBoe^mc)O(JfrXOp@gD1DgMpTqsRI6R`+*!
zY-fjuB0dY*)?N3sg_C@Sztv0GbuT#8c`Iu5A;KH~`qwP|>a%Y469ZRNzBqGgM)5oM
z&Cl8=&lB3B7@OPab0<f$=S5pgPMkYVT|cq1eyXoL%<`)og@*8ge(4_F!gRanQ^)XY
z|H|(=T5tBf*Mb@;sl}`^L=|Q?V!pazR!Oq%gySY{gLmr@9O73IQrADPRt97!cuhST
zQF`(uV-FyI%$!$Tnz4^dDw5njbuy)AN7NB)xlHndc`TK8Fcm(nvm7(&RaQVl7R*&=
zmD^SWAFO@H@fj6?3e6GD<RXY|U8X7`|CONqdZfo9bcH7k0!l7(&4fVssn`pBNBK#$
zTr`sVJcwxAnAK7NY?z+71Gmu#s9ympPf7~mL?dVE7LwFCo`W294`Le<I!$|H;um>O
zA`^<PZq=RsoutE$77e-GJQG!iuvi<U*3l(WDr9DKHoGhGlredsCZ7lOF|u+EabSMi
zcT3yncYS7!2fcIUd0G_{o4gbtMdRUnUADo_=Y8)fk`AJ_8;=tj2qrED*l}9;`lR|%
zQ^2jxRMh+zecdaeaaLJPpQPP_sv<BZ)Ml;!h}kYmyJ4i?rIU};4qutJ<}Hfc`u@=9
zW#yzHIqCbJRC3l$P4w2x{Z#*o&GCy$zbA*FfI-R4j)N_{u?BO=)rFqURhxUPx&BrZ
z*HqQI9Cy*Lw<twcaxoCfQ38ZAE|%O6?ZREA1;T5gio3n3cmtjVJzuS=a~9V}5L<1y
zD-8M?CZJvnXexj@jC+ldCsu5ew}qnE(yCLyrK)D|sfId7v_)9%5+z!~BZ+r-WkT43
zpZ4X|zCIcD_v-VTT{BKI9~ZX-d9(6Vuq_KSl|Xm3%mx=M^N@L6@LWmlE{vCe2JY~m
zp94g75!qW2Y#`ndEybJD2CK<&DOS28FxI1)gtr2adUtpM3rGdvg`x4U*gS)&&;}a8
z4IzI577+~y@G%r(-R?v3^RllG&wg*B9b?7*_{_b3oFfr+Y`J3W#cfKb1}ONEWjsOP
zUo84KH;&&e$Jbpm`)ke8K$M%%hE+d)qUV9}1^wV(KR8RSTQ6!h9t@Gimd=*P)dq`|
z<9zRKe1a3)l#uhc>S2pDdCgjf{nNDgrlSm?WZ1o1BHRcLp8Bwg@%uek5x(L^Yrh-m
z#!iHWD8}8(M*-X2@x$dDdQ30!$%F)Eg+Hf@^&2r&uSO^6^bF#~;!yT9an77%J-9C>
zA;4Y}8zu492`nnHY`k>Gc+Q-5R`1XPbBp|ZgL>~w0A0NLdwkV+?B?1ZcN}l*yQg4z
z)#`kGYpegmvRD?iMz8zXz|%8I%^WfDY2x@Sm^j=?cE1hzo7#2TUW<WYLeZ+=Ycf!{
zU)YJH=IqT^6X39obu1yM;jC13PDSpaCJ2OtYRup&v9c0(La!c3OUGcK)N7~XSyjSG
zYcd*;=MxzXDaiS(99%3eCwJVs?6~)KzS%$8x!U>3pTM8-Z9QCqdG7pFj(_fEZau#I
zb-(XXAsy4}f7R)zB(j@*xI?JpqYl=+eKVGIM^aGNy?jH(wg}3lfFhKg<nxb&a^d?!
zzMr<HfvOSiI1@7b6WE&}JVrBdN{u}6PZ8kM_rcx05q{kOERYXtQWk7EL(KVeY$Y2#
zTFg<@<zGhGKV_qT`+xm^-j1+?p691L-+b8G6z@7W7cdjhr{I4i4og*m{T>vzOdYbp
zP?~}Dy-r}=D8di9<Lp=2+v2)TCdzK(xk@lyGF^U!8M8b{j6c+~<nVurD#6`0)11He
z%W2=1x{Deki%|Zj+blIr)i0Qtbpg&RK|c}iI{0%9>*CYuviSJoRUcDf>ci_;-L6Cy
zQ6JrfRsP8J>qwonU?89Q-(v40*Ur(-shS`Ma=&L{gqSY{If{=E=Wq$k)U61L#|?cs
zSpY~CUGaZh^V#UD(LmY)@Qh=2cTVN6zBJa20uNR|3PLM)M%k8K&Nn+1h+BpZY(f-y
zcvssDnSp=rZs_)bSsorpzZk%SfK*5%lVd409nk>zg57A0zaGWsMCe#6=>|Kv_T=5<
zsKk%C1M^kZ@_mDvS~5w8!6$-k=?O|Z0`|gY%iJ<O0TEny9Fe@g5A(UA>P&rbQz>?+
zvKD`C1aWS-F=|p71E_4yR0b!fAXZ01AEnS_JQ~Na2+OFs#=5<vdJ;CGm7S_*t`CST
zbT+$v&DvQk64c9%VZIU_dr_s;oj)HE%m7^~wG%m-I^&<x4Idyn;@wURCbCYmh-qoT
z%8*m|vgnXtp4WP)w2sR>Y(LnRzmmNXRtFM*JQ1-{&;h%{9pFDMfxuE*?VVZ{;K=C{
z<vSE8IK~6luNsgCxb+538C}S8I}&g0KmLGscBGK?AZmaD281A@Vmcz!k>W;3Qzs%%
zu6?qK77T!6<_8&PBl**K%3^M(PD;|iYWtO*J3?pgE_a|YDFLu&D1>BtFCLr0W0%Hf
zG58{MtXP;u9WhsPcS>i~)T-4nZjM0yT2RSphJtD2=>Lq{hBytuf=HTJf=za;6wV^*
zV1L)Y5RKLRf9R(xxw8@uhAD~Ou3!4<OL7Fp>Q2a0qocpDN0-+_zPSq!2_Axxk5v`?
z2%<X?P{7ifp!c?=4q5IHe=EnoN^+r&_WxC|4&2sstQH%0^*0lePp(&g8>?A-c<Ixz
z4qhBd#+G?yqW->q`SO|kCR^tM`gpU=Xj`rP<}Rwbk<aCSlbfskH!`a=@0o?ZZJejj
z?k3TXEx&of#5A+tfR+d-kLWi?<l$RrAT49@3YN`2UL!9{L1U?t-^yA{bu=S3#_5!x
z^CeXCmj2v(=1*IhpV)BQX{O;y&;!NV7QJ^_TspZge;ea{*q(68PquCyB4x~ed%SnF
zFLV(Fqvbc=qK^_$fvDFZ!3IKy@bq5eyve-@E}S+XlHX@Tl|WW+AdQ?)?wxf7Fjg*l
z>_u<JwZxQPn=D7xfU_(nQZZZj{1mm?=^aMlR|nxJBP>uaHZK(%Tg|^`hPnR0Df04N
z19kn5`{?C4grE&#txZ~y(SMxY7Wx#;Ep8D73FMek#bIpM)vXGhGEjg3Xmu#j8`o5e
z`iXNDw78$#{{ZF{;(R&`%HK+ab<~vH_hCvV4u&V7IIY5q$`BhhT{yPlvRr7ws3K$&
zS201yHNnaw1v+iSUEJ^D@{o^3j;qY^;~Vp+X9inm0G1IXoK7j!M?{Z$D?52j-6Vcm
zDUP&>WHcp*0g=+Tt6Hm8wlXeSY`BX>KItF9y!YG>7btk&T>zC+#8LW&go>DTIbAYh
z-+-AYMBnRQGJl?CA!LM{_!x_8oLKl&eSD+>WmzdSB3OPi&u14zLA3cgCSL+Tex7Tn
z(R9fiOSj9sm@Kh%Qrk@Ifq>zh<ku2XiXtzrS>o9HZUy&dd)pmd$K#gM1v-5kzedf!
zoR)pQP1GS~145`K_?e)mWAXujjM2_Qgn{-TUZD0q=5R`1l;;-{cq|wTAakh;goG>#
z#Ym*t$Jb30zo`)JP#$DS?`w)G=;WC#Sv5b;r@ro^`!$&AU^Nu3P>H)qphoq$3wR&Z
z3h-I22s|my7AnyjzmJom;v<@zYL3UX;j7$4r`s315v3dpVwcT7RJIRR*%}vILm5*`
zom^)avp7nDC8)Brq>8F9Tb{Gb6C41q-Ek)XhdBt>QkWJ8ll8%p=DZ#e@^@=X;6m?>
zi&(5~2+1t~AiC0GJiM(*d0A>vlzVsY-Zj{|$fIX?%U7ltTxkg3%p3lcN#s+M+FdMX
zv7tf@H;s*Jmzn<hUtTMX@0DFUGzc~1ukLto9pc@l`3hP#PckOuwb<!0c)vmy!-R=@
z&@C<neVE4795gRh6gbn}vd0=W1~%Ey<h&A>HGpieEmwqT3HNiqpo3mk49>l<+t<1F
ze|vgz_Qh{czxd*l{$#fJ;m>G{Nf51#T@v?nBrlKLU&4V|m~W(9VuU7Q`iCae%k>Sv
zjnJ025FjvPYSjt+>aGE1RV~~~$5OsOD|F8JCsc?7u<{vX01w=;u$W15Ji~H@9B`>1
z8_H%k@#{1{T{17*wYQv!Gf{6xj0jB+P1p8QdVw!=0PH-P7T~lWXnKib;&0hZqJsKn
zZ2ZPMic80F-eJp+@WSqwJXK$fSTWIEu<!CoA%Pzw{xT93NG>EdZ6`go37zg9az~39
zCUrGgdH~)@cugz&DLYovm*X)ieH~iR>mj~G3EbP+al4RV{7ui50SdJw)>KBHCw5-+
zG@8IhRBXoXhcsr48E+X!DJ6hA$}rb+ta9)pxg0&mq`0#(WSdcT>`Nk4Cw~U#Rr-i_
z@cB@_9qPBka@rElaK}K#`to#NpB8FhvI6w%Z>81oWLx|Dj%jk&C}&aPx!D~)V9aLw
zKp9KuiJ|w5YK(qE(0W$8RiLn7Z&IGBA;RU82==;<2aC864xLzBp-DA8?;{$W>*BN#
zNPm*oBq1ERR+y1J>K}-9>Aa9?K%DEe%6tL4DKUZ(4_gO`a9o_S+R&M7n9!q^2dAyj
z;&x;8O37F8aGKVRU;Tm~1_S~(+;2;(vDoSC8T54?GZuquyr?F@oDc!b(Oc12>Elqg
z<F@XyxX?$%#Nc<;?AFdUdAh4bt%E1Nl!%5{#s6VK?)gBA0epP1jUOhk4Al>YQA2ke
z%fwC3;G2K@fBrAGi94O>D-V_ZO6rrk?|RwuL;2^L|9oAZQ?BS`htulnY?8k%r1Z&2
z1?MaK(x@DjcNiWT9KweWKISxct*l4Aykr~T_k^hS5%DM!j4_DgOR@DMPqZB{34o1G
zrx4z#6b~EZd1IyH++|-skcf5(Qpip0rHn{D{|emW1Xg$E^%9roZsugo4F2D8+P^F=
zQJ9$$kcdlep*n0@txpe;7y+{4@H-jy;c5M@bGZL(|Iv|S3cc7w_vH1<=UQZrCjBEl
zjG8k-`=v_vdI*F53HtRY{lu}*jPD<_^iN#-d9-1J+PQo0i_cC!FFxzvI~#w}zdOGB
zX@C6S-f92zw?$rjk>9(2axWjaA#aRO?hJ_cx+er*1h!G15QM7hGf2I@s1gyLC!W?}
zZAC{lv;kZoBO%vlS6Oc#PCYf?SweU^-GP(tC{^w{DGJ+b=w}5|?JOz=g_PqFniuN3
z=0|_7tLZ4)QjyeM2qQPY5nWXyH$t}w7JNfD*l1UT$^=(5Pl6(%t>~6dN>~;-@BQ|z
z-RV3oPA9DGIL$^|^#hr6cjSQ}e0qdR%%J?F%Ez^rj(T9*)tFVdvn}GGBZr9vf4zyw
zBXYZW4`kvy`qxDMv>EdQ2%%w2CnfSFw4_b;hr^dI`c!@WBzS#D+~49t%R1K*NT+;x
zT;|a9oIohAs}e1kyMsgkt*<XHVRbuI4^?G*W|w#&8uc6Y+!o9`FvX}Lz8k^b0{}uD
z7d-Qxl*}HUM(hzSVdvJmb<NaCAkoJ%dccI*nvA(<Vs!bdOiEaoN&*U~DoEk}|6E&v
z|GM`uv)|m4MByRj+;{`H-<3OT3q!zKoiI9#Wl)^Rwe_2OySx0lo9!KDKW@1re(>T*
zjz6W~?(aqdPk0!*{O4D<@AKuW{TG<tmV2q2eRpv5G}BJ9&EE{l@uv3m;@iE~kDl(m
z-n#$kr(OJnZ#RAK*P-{_+jfm^hevx~Kil7m-s!o<kGH?y%pSdb_U8GELqD8Xdv0vW
zn35sc&oV9{myXVEJ|oY22gs3qyZ7wP{?;4?m!wy=2}a)Xv-FAwI5N)f&5IZNheum{
z`j2n+U;k;i_xknTpSGg@Wt^@N9jU*Wb*R68|2n=KFw1MV9K({furb=#7|!ml-X+QK
zgz`_G?HwKMzu00w*~70K9bX^r54k0N-*w}A$DvVwABDk0>`MyrxieLU=szhAq6gmV
zJ`YUR#z|z5J|lX`t~23ilx>*`Nsc$yL#tO}h~JWS+{LjO)gqAFCGa_1hSCn=v-51v
zv2X++BBaZ`_e!24J5vBXrn1gUEoMVq7L-5~SbjZV>tLL#Eo+mH4!^bLwgi?R(gQVX
zM~w^q0)rf4nou~Um^(41D-Dxp_dLtSU(>OEIjzDh*|`%^sIH43{yUEHnIaPK#+?^#
zvTq%~90#^8(~#njS}G97mM*<%i8VuU<C=mRqTA)^i+tvjlO0(^0#X;f2=BA}8W$Gp
z^&vGXsY{C<{7uqB=Z*u{<-!|`<l5Ur2rDJ5%7W}G9|xSHGE6p}J9dr-PnKsag$S{O
z1{Q7(+%E+SridAWlyMXK)X8wqzy6)&pZdrFP4Y##O5cyFhq4tgqeY_Y_@PK8qfM>6
zUCDxv9=&|^C!Q@V-q&xQ{fpyUhx@OOMnU-I!w}XYDLfm!dUG_|;p^_v$IH{VkH5}F
z7{E~X^44bkz^M;|!C<pHvQT(=&<Pmwf)rMiAtizaLrg?Q;IQ@n=3#P^wX3ja8$;y~
zmIA1kC-tISF!eNdf|8D6l)ZU<0Dvx$u#a^J4gVmPK18#wO>bz6nf-JKHK;8V_RiS#
zH9ql41X)a{9e!{}RQ|x}@#Pf~U9I*tfIn7AtB0Wl*Ww=!qZUK0HROX;(<!kcD`pJ2
zCmTlL{L1~`W&Rf@DWOcu-gk$G%ux9wV$IdPV&-D^wvQP7X6aP<ovUJk`dMNp&KRE_
z*EsgrKTbDHo$OulP9bne;_5ZiskRg-r(ea>5|0e)p=n{F$nFxNOO3`)1#^H>GK@x2
zW_6mm=|TR+KQ9j+Kk@;F#r8J6X$JZ>4M{7<c-Wq6P5T20FUNP>KYe>nwEdNC-uHS{
zj!)Az6c#lns7N(crytl(JS;J`G4M9d!D3AdN2UB!rDaD^wW1vc2vLu37eE@68jm#V
zA%18pO|IxFB!{rGlfoyKnyzaZY>uBZb6xo^w~CJCl~}ewbu78;qBpOf=_t6+d}(|8
zkKwm)&h3?WB(?$Lu?y{1G6{T}Ha1XJ61pg2JaVMOMYANT21$r^o>;*l#gXdyGzpxt
zsMW{SDP<K+TK)x3pW_3P6Vg{I_sxR~vj$TZ!XwN1q^ktib&bmP_*Ggs!kvKO+JR6Y
zZL!y`J{GOKuNP$Hs(pYxVPpNyt&{i3q}=AXMv`leJ1!Jy1JDa=w2D$q<~|3OXf;O_
zOO`sTZ?ziFb>MrU<G=5+*n-%k!fMzrfd-ngrGNyT&esKT=vd2YTm)S5u@h0Itj=j+
z0wIYMlk_aKR3|`4u@l}KEU}8WWyy*DO&^5Aum(a@McGsWYcfNX8NSC#)k=4(L+1BL
z0Ak>MfC|!n6`OD$DpPzN_g5G>Mx#;44D1v?N^)U+Jw5eGKC5_cUDoHj9`@oVK}i@_
zEaxR<vqQp#jL|?0?y!iuU`WQZOG3SJp!SB}q-xxQVf<a1&!maO5v^>r9>zmCo{`Lt
zFF-?!*K${bR;B33I5-<?InW~>@u557BSdH5dI0BX=a6>6#*~m)kCA>FmSeWFXL!Yd
zt!VLj(N828MF)R!9eCsM^XMr44QFfb)xm4C@!`Wz^S$*rYd|lD&RH=o73V>Rzo_0?
zsU|}2AaEj{wwf??iC8M`mmL1baBQ7U;0~P1b7dn5=XKhn5Iu0r(V=VY$h@p0oeslW
zP-=|sY_0X{8~P96eKLla1*ZG2F?&=r?^|8chypQ6wfj1kNRTSs*r32jxWbTDiIE%-
zwMxvB5^;89d?$ipqpe^vObOB^xFQUQS$WOMv293=hz%%Z8!s4ICVzijPV@Qo2K1?w
zEte6rqIuQ+$KFx5<HIq(+j0}*&A+QiHVCNL%{E*I8$EszF>Lw5v$6E+z?OcW{*WH}
z#*bm}yTtvPkH55_T>1B_wDs`(?^j-s39vp{w38Yg;y=Gd>?i*6^H&7!ky{DyKOzw^
z!sOQv9|}zj@P`;jl=m6gw>8>l7!kHUSvlVwbz>|bnoTUu)MG|?%Zn)E5u%aXwh#H!
zfFVRW9Jd^TXrypIHffEe-sOt}{bW<N&9fWPD1+p-*mG}4!-2Acgg^D7H+0koV|ytq
zx<2(YCJf-An`8h#R$IAfe125nH{YjngP*<N@JdA^FS$gb4cb#`I>lfxsm`}Xulyb2
zAN$Qu{$%-{e&!&6qY?co<N8_FG;Vc6gWGpEd`?~WcR^~&(t6^ZRAW|L1&P>5!37NO
z#8TPUU=T>?rcY(JmLt<k19NMf%GB>cFwpi={DN9+D=Cz-@kIvXsyG~5R2EugcwUV^
z(xM_Q45fuTnN$i;jJ$D_k?`g~GCQG`;2M4G11tEG;wuDtmNDAQwU2{f>$x-`mAof3
zpGhE()=#I+M&iH&V6S&)<!~`Akv)4Qb!^HQ2Tv!ogW>Bt7S4)yeMBp0ef(%rEysv3
zS1i#(m|32#m|0rjBM~MM75+}iCfHJ#T6C{Hjv`Tvya|z@w;iVqt<*ZccVAH`;IG0H
zX|z8BRuzKhF>ot5D|tgq$H&dDZ&4J2c$%^tMoKwFum@v37-M}^5Jf);)k;<-x3yvK
z82nO;gDOxCq`7k8R|iSVgd#dEruegtfp=28!bWrw<4zRS#>eT3y(q$yR&9OsoqaX(
z_&hyL(-w%fc&Be<Zh$fY!Mg}M9%J6{jWPG2oW6DcZZP{Bu()Ztd4U;`_)4Z%CqTSu
z$&WM>`$=2~ToHQ}_lS@G4N2Y~lS-~o!XH+eJVaItdU}SqJcBhCu@WXY`fTdTgHa<a
zV7j@8DaeT8XF}_EMG#i(Kj6S%J>0(n{?YP+K^I-METW7wit#up==jP#6HeY@t)aSE
z4~Ngc!pUzIo^No-l{dwz2=n^2g!KZpB}SUkO>H1A|Mq|Up9)!y5?3JU?Qw1H*pq#&
z?$B)j%P1E6MqpMk*WE}f)Dj(Dl3{&b&4+DEsbTY>8<VqV(4V*MoV9@fWuwQ!q(>H8
zwleyYBqEN1TTJ~*IgF<oy9o<yNL%Y3*YHuRnDVD|CuskK*q0<dA9NPVTNhE8Bh4bC
zjk=e4Dyer(={(3@&JA+rQUZ@zxJX883+ryM4Z)&pU1;J^`r9a$BovXd^{vgWaYGvV
zP)1_RleF=?q!_uu5*yVbyLNiM>Zl>iU72P?G56++;%dXH+ETQz%nB=l7D8q`Gv|va
za^H9pUepN>TIem*QSqUv1w+R0zF29PKL)$IyB@9@C@4krTohL6!*2AL38~$azM=qL
z^I1HOp!S=iVf5tv<k9<$XYX4nro#(IaNe#nMqKY<Sr&{4I*-9Th09?_%__#J=97qQ
z4EfRJ1Se~pmw=h<mT=man|SLiPKBrfVhXm#1*5cN5F+-t-zV4oICWT$AFaNYHfWgo
zb1C(dE-g|_{B*&=nPOt!@FGwMsN^Y->MPU^oZ5lEsJKnB9c3;tEYvy%sH|DG0q-m;
z-@!0kTqqXomaIu*+%t*!jK<A}8so-yGVUXbkCk{at-jKT<s}npI?I&TgnCLu@fYj-
z^J0Du@n0<7?gP=LiCic}ByctpDd=rT6=oFTv?(S@sC*`&8e*Y#gAnw^+Gms58J;07
z%g4zxe|VwwwE+MSb6QQdKmhn6<g>7D$(w^gw&!l49`Xv@8y;LNOfc3DLRKQC;r1>s
z5aSY7zKY@gRtgE6b0U%tUs9ralt3x-Cn$^BB~}+CEr!cd%kAkeSkV>Ch+`u^iR@z}
zqSjJv;r`uWkbn42bjh>dP!Oe-0x52W{bkvgAD5+M4!)McPbbAiJ^^@rr}G^)m`pIP
zK-E+6AfL?`?&+P8Eec&vJ)0ZzM(Z2f+nU0LV17%zQXo2U$1#W|W%h=$pL<WMZi5yL
zGGbC%lxQMo(T2^J)R+)3oG58HRQr?2dK9o#Xe&)T`4@|BX^w$$Qw9ntd&SKbp+$Z+
zngd)Ae}{QLdCmMfBwWhO8>PKgvq;uYJ<b)Qh8A|S-Fh6L<g$o&1QFeEt04%XIa*&B
zEY~8Kh=buE*9|2OOAxs#2!_pvwKt#8=+7))qp3Mbv$3@K{FEt^AzFoFRg}LR>v!n!
zb#iG;b|=Lko2$jd*KWXM{%$xX!+{mTrd?l@J_K)jdvtZF(zN?!<Q|utvbCfzUH#i~
zzCf0?@M;ViCV%8d)AAo}N6~c~%Cj6`TFQXNroj`mOL@|~OS-5}t65wy+L2UaQY3wZ
z35+my9l!E@GuhE8bhL9#%D;$(iWf`L_-&Is!ngglmiuVAuPyi4avXi+Ub%$DXl#*2
z10l_$X9w9%_UK^e(PL#$Os1=(23kLgDMxBmRAP)gI!Vd`-TQ*5YiEY4=(M<+M8csQ
zA!<aLf-HBefQ+P7nPfMk4r*wc&v74FC##J7!O#t{nxd6qkaLDIhdAwK0q?~peS%##
zX52?v$ZA1-PIn{(xgz_-r<u{b5{!#~TS85oMiaHQ3V-XLv>F$V8xUd%If)9Cca>ke
z9r@ZvRbj={S}(6VeF*$yv<KVxH<HIt&DD>AT*PStvpaIDHs`knxJ&f$Z0{g*Btd-b
zqL^u<{%UHXucwD$X>B{kZz>M4quw8?6AO}$Gm}(z^Zl}eFfb7>B?06FzzmjL!`Mzq
zjpwfebLHVla%@}@rJ~Gg*$KTsdOkp(3HF9jcY-sd^;C4E9tRu^Si-%^fe~f=bP{R>
z!+Tgz@k5V`$s%XTu4<x??Hmz4MiZ1YY~Ew^-e`bpsQ;wCo?JT+wdOmi5|teu?)&e<
zKB00EvRow?%s*)*raU03UWIWG6-W_k%MhCrX~cavbf_x$9jw6|PmhjX`4-|)@dtMy
zSoBX?Vi+;7aO>a=sq9wWqR#;TDlx!5TrH$E`N7%2KAPwC#Ys8+xO2VmZ^tcBAQY*W
zu?DRYVSs}+vqaCEBocWsv5WiryF?1;yWr`zkuZA^al=lj67*zTE&0@uiC{B)NkyP@
zhM!P1aeBd7vAAXuq=Xc?u`mnUi4TlUAj>wWEmMh(lAdb?#bKH<IoI~~ckvw~c<*0%
zQaPbOc9V)0qE$vWq^8%&QPO_J3@W)^91oW`a<=dag3US#o3=qxCcUk7*>O?VhZ-d0
zn9@+FxC^kxxScq@y%jn(Qzgw#ky^!e_GYvCR`u|rrohSih!WeG=U2q6`T&U1k1%tK
z4RZdW=5#FBvF9fE{ex`e*%o+44?OM=iQ(=z{Y!rKHt%IG_KpsFmiFXW>+?Sz9rYw6
z=9@?E4FaKceMoR{m8=}psqV07=Qv#$vBIwoqC!nRL8JBu(kU~%P$WKwMW(8`q|5n8
zNIfSDIqaIph6BmRLS~7Zdx=6ld{8bo4p7swB{eHH<cT75QQ_#Qms)EW=K*a&Ir3|s
zYit`H6e}4FcqR@RF}0HJ<_GLf|NL4}>>Yb4=8M3GXr8FUm=Wneh)P-&N(Y>z=<Xqz
zw(Jb_^j!654=Tnn<SU9l*}5cJS)FM`PMS2(Z_lo8GOkc~hn6(P6GYsMesAXR8N%Bu
zW0aoSfjE!3L6kN@PY}vzP~`UZ{^e{D=;oeYR4we6wBSRYlS=Y&ekzdAmVV3&QKKbw
zjC&?Q16HP-Yu&k{xH0*qS;ARj+_twLpu$wWy*<eG`Ix<wi-_-sYMlP$njxU4Z=t=3
zs}d|;Z;&W?-yMl+EY(mK!ErAYe=+b^2aW3jAnb`3T0*Nwj_s8VV0FH;Ga~ZJzDg(A
zUl9+7f;cO{D*<8UuPcAZC)dts2eEKSWBX<wKpxMi=qH5S5@#F-=jZ@2`I5+wqaI9)
zsK4X5e<rON>U(JM8({q<P0ESIc_FWe^1OH+q#@nEzOh#?57F9dyN~rO1UrEdR9=^b
z^KU=if3{BqmRBo_8xo}0puApS3rF3yz1G~maT=A}!G8?`)*G6qAo_k}o(q`U&>Cp8
z7k%IkwjfWp_b;$9q3&~|;Yby=L>m}$8f1buZ`l!EgHHhR>}?THveDOt>&R(K>=l4r
z?A#DOyeR>zI4={Nz}UK=<p9W{<<$40cwcddxC@?o6|k-fAOg6r-Z`!2T#wWv%L?I8
zg0svL*NrfKr)+QUi7m*>Vva@8qXOi1>?=YSTK#aEut0suNY~H-L<$Ku8!s?5M{P7)
z7GK$;IB|u;ft6Q$E3&3y>0NyeHs5;#P5a2*&>fE`Cc;uRTJ~BiEkmo?;?Kx$oFKEB
zM#W`WUl<K^hvLY02dK;VQnMZiN6uWI?d`x)Sxv$*Nt9l+E8v9<O$KqAP+v9<Pqi#K
zMR<jB+unXApjCV_5^tp?zg5C?;@!eMrSTr8`BFH(t+nE*7ty;Fp-ZR=2@IXOvIg06
zWct-wx<<GO5+PAtrLYJdQHt1*bWAW-HOBM;IWHXVS_C~hHWI5l#|tIqN~1j>bFGmq
zw$E=S4xF;VEENt_pc5&;uv@)76W=Z-2w*$~3dD@OJ)Q0(d^5CftP)E66gHw5NMTbY
zNepBX6~Xc`TtB%j-Yg(DXp`AKyociofr;7H9|+fXXjyPi#EV@lP6u7%A#NAuwB?B@
zMa^#`U_2mZ_&bO!3Lt@+FNwO88Q_SBbEFj{BM?*TR4fcaEtlD}awd7n*8|35lD7e?
z4M`x(O7j%(i{iKaBs2Ya_a|A8pO1HcvQ`O-{PXt`xCqO)Jd5CN72KqAaP4#C;fhgv
zq)vX!o|+Z@fK3el`js9@^tkkjCYim8N3J4@%|Wp(1NoL$lHmbH%4bCF-pIyDqn_1S
zn2b-6VXkJMPDc}YY6>kv!d8U1O#c_RuTFHABj=r;kE5RRki?Td&l&EX?F3W!&NklX
zUWtbuEN%>pN!}P`YJ+9dAkVI&)~@xj+@W^9b9t@FvK-(t5r;MEB5gpH%pP`n1p`g^
zj9)y?*f8j~{nW!ThFzG#=tv(TBEX(4u5RU2<keKPT6coc!OZ4V8}wYpJi{byFPBQ&
z@}$`v<byZzSr4um8<DajQQx+=aq!*Vvi`;rMJe}>*?vb6y|uAGKsT(%+ADV)6V7dW
zvY4tgv)g`NU=`qb$*+d~Z+~{&2e0%K9nee%Y(whk`BNw7$Bj%)!g*B6OhVMQMiB74
z63;_eoYd6XlW*Tbflt11GIgDNarwg{eJ9R)#^>|Xw5OTc0m7Hv2JPTJZj#TDjcygT
zNKoUE;w6ehi8NfgRU3I2MH!9CJBF!fc(eE{+?#(^kVx4^$^V6+co;P!`Y)-SzpJQ~
z;)9?mDCLI`ZuEJrNX1_A8SKQ`Au6Q-6nPjXfqY_idOFcY1@6)P$y%kHa=947SuhG#
zf^ZS|{B^4n%NsxvZS??@i?&;Oz33~<GYY9*e_<I4cycSl#2_43aS6>tNOt?muyLHo
z17z5`joG#`w0#6O$fPM)Bu|nt?TJ-G`I73a_JlyFj8-{u`qumT?^Y!!*xhySDkE`B
z@VWV4grwe>etANFsn(9Xyv*y}^oD6%7`-zKfOkV~G2fe?LNqU$&cJ6ShB-Tq9~Fz>
z7ejIZ82MA1ql_tNSW7eAh)@^O*i$yLo3L?j_ZG$@cBcepHV^99+jOwO`2fic<vRFb
zB%)$lx4ZtCfz4e-v$#nc4ClAKoy>51JDd=&p)u36pA0h%(2S>;W<xOiN!-%0xX$Y>
za<1IG6nEIC3_v}~8l|rr03Kvk8-=3a_=DJR{KW9{mf)fB=WMpDFGf3~nbQeIUGHi;
z{-#_!U7lona#LAjs}cS8hQ^2zb91cCYw7Hz*ZkG{$ME_Z<;yEXJupt+t-*2{Qy0=5
z^%cGzNzUDX7(FAPTx0k2WO}+kR&RU6YSWmY=aLG|60AoMfq1v*2FB1Pbe5`JVeG?5
zKu_@rj-2L{UzTi{X7S}r(NRL|io}cwV`SBK;mKz(RSX1%&fnZ?WdgX0$B|rs08o&D
z2hjTy5@~_MT_pm$Tq8!Td8KDAyGo%sVLY^gCXS4<wFcMu<%G@eMWTkuVE>`QM*bI6
zp}Sf9a9`2`(d@c>7roiNnL;BKW-YtGX-xB_l3ezdJ+9Kru4zB|QTHi2;l;*Qv8Tbm
zBo3xhsBClW1))Iq*f~t*(^^9#7kwUy?d?|n<W5@fBX3zP28BDJ$tA=B1-s#!gDzq8
z{b67i5+qCS#{#iPV*XNJcZglItLa#O5#IO7Q2pA8FR9H==0U*|o~#B2U#hpM>}cft
zKtU}Q-X4f)IHu$%TftDwLv@yxb+>u-vdjFfN<x=(#fE6$+45vkp3*$y0Sde|6mSW&
zN5(vo2BHJmFVVGXLI*A*Ct*rp(MS=&M0-EU>x+()ASYS>X||C(xN9AKdGzvM_FsIp
zk^PTO=IyvJ75ZY3eFM;CO0rn<zw~ST70aZe4ByUd=gX*8)K>w9L2#-(WEXTUB7h6f
ze2>s$(aabR@<aNLnj?PE0sfxdJyZ&W;WFP(8LX6ej7vm#$Ri+b%-jMqhDSzjx~NF)
z3yT0lK)k<I2|f{x;vIeWe8^r$aqOj!92jJwqN$m{PpOtQE!hESD^A~WkDnDNcyRpg
zLtVkh9Q-g(u-w<jA<kzt!fSXsDG}GP<JhzOsc0I<5-4=T8#6u--clX)__Y%%Z+LC)
zevZ4!<nL@!p3HNWS`c`-MQUT<mCTy$*E6*`jG2*T#W)n0rCj(xN)03jvQT`KpZMCu
z4MVyX)VYo;^Z26b%5BVRQ3CKAcJQ7`gFQ`_P3+or(`zv=-c@f2svv$}l;}B8caP^v
zUL1uDT^$gPL91-d7|Yl&%?LuZk?SafvUeN{kSnY501H7Y57sZ@Od@Aebd#3*;`tDJ
zqWYV@O_F?c$9|mWsde+i2eqaT>IJxHqcZoha+kTgadSx+nHO*t`?hJ91k0aX3t!Xb
z+@qZp#GbL{{&B(mC?bD55crlcP=@cPqZrtTn?rc2|G}+gG#}tkTu+_kc`Be6dM!#h
zU)Da2y!fJnUB=Zjten*tr3G!hLoj)Dh5#;qbHe_uu+3o%EF~<^e?p3`)P<U!&aY=a
za4k-w2zRna_QgnHGJRK-$VABBS~{DBs^3>zl^ap$I^x^ADIFWsi}TG|7_y-`y=h;H
zPV#-!eVsYgR?>{%v&Ss@Tn2U5NEVG~8gdTuX$O*CPrX=Ul^S&I+{#G~3#t#}G6CAZ
zUMkl<e<(N>vFQkwB&50)!jCl(StW=!2Ws}KD<)yeZ)aM6ON98&A(t-NqYz2xJY=k`
z9S)?-2n4zn(hI<a!hu)d>)b<~Wh?y#WEFA)bfkDeMxN0T)-gDD8o~dMy?<M8<I2(n
z(QD%=A|Zc8fQf@h$xbJ2xr)}oVx~?hQg*GyRs%sGNJa`kAQ6BlrmX(fP4~^-SH0I|
z?^oClRZp_V_{SLY5D1WzEN5r0Rrys}L`2N<oMVpTKWr6RP1Piy7DcnIAC#Lu=*Wz=
zh1Sr2_`Fkf)^=;lf4tTHwoz_)W%YdfnJaqcQcnem(kv$tU;KRCtDBV)E&2OnqoO6|
z1S&U{xG#g<>jJtpUmY$JIIqfX6wV$8J2hMsmq?Xs#NFl3x9b{wf^X8jTY4>|4nDEV
zU$hmrKf1ab<DALsRJ=HBZv)vpKz?TsVJWP3JqgJZydRCZXgH=bcC1Db{%$xw+jH(|
zf15x90IA}v5Eh^T^Z<djH2l)HhFj=uAX?qr)wH44Bt<z=2W0~%)JXJN<7$pM*imNm
z+9}1SVR)h}W<x`P98Q~3cy-x)SVt5ajoQbN=Z3d<!jCs28kHA|AUV12UP*G;k-$C;
z19LZ*M2c&^9Dn&}mo5HuS&d_|M5L7qk|fHy$0A++VGvZ}+2wFgy0Tq=JtQ)dHUk$>
zfEdvh*Dq^O6`j?I1{*E(Ha2@HBAEAbv2dqzwbvdSj(z!2c(|eTEL^iiapnSUk&lSY
zr4u-o3#_aq-7bZty7oH$Ou3%QO%E-F%lqQTq!24BK<ohC8>)tmW5&3iH@w{;P2-#_
zg4p9Fq7|T<vzDDZ#fh0r#o|~SGkP584sRIa!;%PNyWr9y+4<yB=T21D2i_{^MiICK
zV0I^$at4(|n%agcQ^ifPuSKCeTlLck<A2Gcp?E~bL(I*$4POo!i)l5Ruzr25%}V8`
zeMw9c*S=OU-2sKA?_0#?Y*z);Siv&zHF2Ur<YR`y0N>zAKrivvooa$d;33K-U-k*7
z_n^%%1VNP!p9UO{??JwdVGy8V92tU>ErJo&GSF_4$bdaMu+fWqDY}$#E(>V48VR<{
zcWFYK@AO{NgpYJSkA)9d7GXDRaz?#-%~>H17R~SX`4!R?eb-OFhosLr(8@UfI4Y0`
zZP~g`j-X`=jm>cZ4LIqz%#ze&B{V=Cg_1z>8_LtgYNr02V|FgK`H&R8++K*;z&kx4
za!!KuEQ1&^p5$-Dt56`ym<@0EkO$v}iw(=&Inq-k7P~HcLN$*4cVfImT9=z1(pVbe
zn^Q#}NyQhi1~wY;Jcbv4I*o6$hHkaW9N0Ey2L?AfJ?hhRoat18CM*R{pk$1mWhqyL
z95r`J<g5k9#Bb-u?~Zw)tP%EjA|m6iDfV~jU1TToc0i1&3ni41bjn#DCFz|VTOMCF
z{H<*@yT5{R8(gnV9!q`}cxe6{3aG5~XV%S3i$ilu6=a5Ay4zvTXMiXTX?2q3xH!YR
z6j^;Ga<pp!Ox$lx^tT+-)b;6~Y_Tv*T9=HN)welAV42x3wW7KbpgVEWVW06-3^aEb
zA%HJIOGSixNo;K=tFyCIl9V}X8Qagr&!2`fQn#0F{@>7?M9ndqNNX4B8rlp<iA!ff
zHJ{VV0m?Lvjncf1)(L^rI+jy8zAFGKOU8Q|0ZU|-0V+c76_^CcFf3`F!54uobka!4
zI8M*`veBiWjrmPD6Am+&aRbngj+fX^>F9ye&6fyLVw=IahSNbSHes4EY_b)kDOoI=
zJG*!8HgT6cH=jV?^!9dTTa_Aoq=cMiVZ+vn_7K}o7|Wwt8N2qg$iv3POFNU?m8W``
z&Uuf(bJEgy`K;A`yRq_UDSnM%vInRc{ob~VX@)5Hi6l`L7ZJFgaJyp6To~OJ!)35+
zsarT5iU>344f`73jh5=vJTBW;Zj0PY_}Z>NPiKO;nOjsP%&?MX7vxM$q9?W)LjKU@
zyy8FvzFuReRIh56SQF1b+DySBD|sng0*#eoJ^Ps8dNopyQ%YZ*Ba^|}EXAKNZ5D;c
zI#lGXF5`hnCI(KZ!ii1o?G$+Piw-h^nDT6t&q<QQ!UGlTG**)Y2|<>*`tj<l*=(6a
z;iD@xx#b0~mImsrB~eWN<Nx?Slei`h8@aD&CrfrF&WM{Hv6*X{jdMvPZVpyV#dwG5
zC?wzPrWj&&@IHd|UNTjP0Z|=*=93lei(E_>;A4_$ZkEI#ShYYzWQZvti+_?WFETn*
zZaP}S2R3Ou#-Df>_5Yk*%3orB<&T*e*xr7W=9BJdQk0g+o1w4wsC$Z(6ilqP09cLL
zf?<OcK1F6xlAdtw5_crgNi-0Lwov913AH#?XBEUfSEzyc=A^{q+%Fb$>9#dqN&O*u
zLq{<zS98uDJ8=abS(tU>Z}}0e4>M%Fyy&+B_5GiJO5X0eIwhkEb?ScPpJFi+kg<-y
z^&$Qn`vAb?j%9)lw~|U2thlx`g+T<&oG3uu2nBHiVuj7B<9kuTpME}qX%yKrD-p)%
zP@p?!K-m(T@lQYh`OxhwxCr%$O`1%)49hd?|MlWcsrl`|gv-cQrJ!}vos*AKg&4=B
z)tvxoo%&Mx)`<07$;GA&w(JpS6BcZc!#Bjn9v(j7aMAqqvf`br3FecdCx^+1Xao~4
zZW$k|DcIQ<rI-GI!CBm(U&aCqJ*{d*L~ujK6-9gx+F=g%Ig<=OuY2mG!EqeO0}h;@
zak6$_R&G043o883POt6u?up#I6_HpdKo|tMz5P_41r`*kmv4H}s?n;~B#V{($!zMP
z%mUids;$y!$M$yHYuB8?7FnNI5T;(6Co%hoB#yppIH;&6KCOI6D~0_bh383cnzK%;
zI9<Y&oz1$d(wzFrzE}@9?PM>hKb&%$UC-=P8gz`tAQ8b0)jBO&Gqz<NJm{E`p8tfU
zQ8G%T_S`o0B01(jaM(}}P!TbjkEqIpf&|~faDdOjA1NUI^0IsCK5Do9TGJM0EM+=2
z!yifd?hg;~Uy0Hj#?dG<<pi<8;Mn3<7>dGxzL&(su@i;tPwB+S>)@jG>uEX$S)r?j
z2h)cI<;$HXtOs&03vq}h%$s{jQhI9<9rxuExsqv5BP&FLfITtDthvb@U*9*sp(c#5
zRlA`$$~El=Ytz4Som8yT{H0L8&@zZWYbOj1wgjVk&3MeBu3{E}d^<r~va}O1-v6(!
zUOpT=didbs%l)H=55zNK@aW*l!=c){4U)|ggg&)VaX{H3rTwa|I9?efPJRXFx%0gi
z)uV13W>IwGtL)&`1W%MRb1mp?CL0a8({al%Bk2te>ueX4qe<jush4IHHJ}`QlqaOt
z6e$jfSIt?={1E9%v5ctky6E&sI1byz;T~h|AUL~yvGU6gzc27q{M4ii`>&23KYw{}
z^j`*#pC29#<NM5jg;+c2_GLl*h2NLOjD=j@ox^WEb~z+i{*}=!MTe<ajpcT76m)e$
ztTrRKB$^f>Y3={{uzi#LFXKz!lr{UF+hj#$K%CY-3XoNJMd%P*yM=3}Ur5qSAH`}I
zhgCB###?0-`b(T)XT=g1CZPG$(#F$f-A$~!>QKw!F$mRxfMlQm;<*;g=7_j+Hhr}o
z{+aO>{`{~LCTP>lU;rK;tLBUr*PRj0T*=ANI-zkoT^l;kPG}_B{VS)>ivzhOuIF4{
zreBtvUJJ*ow|>Z$Y5Pj98Tasd6~SE`XW`ItT@~m08?RqQ$a|TciNF&c#HGvbb_SDx
zoV``q<xt@6&QSP6(N@FT0W_$OtZpD*se4u78Wri3D-W)904+Ew9YW*9AF^IRz+Rx_
zY#r=B1#{i0r#>3os7QBE#a6l#q}^7+D|*y?R<~}Qm`J!}?>Zk29YC_fh3$-JpVCd@
z*n05AnJ}9;yH7Yp!r@XFx6i;QaG?#np8?x&I#pzd_I^Z~LAB9%>A-+gmty$WmSfd%
zjnJ7a-bkL+($yINh3AV{Au0j6sdqL)D9?$3+d-u$s;*_|E-Z#Pa4mG?4ddxWT9!m3
z#{Hma(GN-9szzg<2uJuxP&5|R0eU;S!BI;}U}gDFC+V3clclYsjna;Hv&b^J1q+?i
z3MC4?19~P6FOW=5A;g>#m>apm0RYSu$!V9g)FkQ%4yU2;0yY{7KWK5GGC)WUUsE=}
zycG`*AH&gxxifah=_D^6K8?hwj^gs6q+F-%N_3MlLK%!*>B7L!1jj)N&TVF7T*?`S
z24dRnP_+Z_T_=I{ON^o`D?N1sFn~0eTr}Z(i<;nn?Hx`J0|8P28id5`Gdxl$$|lnZ
zqTld$v(2b@F6uDC`@^bfd#5+SOD`6B#krmW7|d~pm=0FZm}d(MZ!`b(qPXB?_&(XG
z-y|CA?6$D%UEZnC_o~8Epr@Wo?q~gkjR>-VUmYlwF+j*09NF#dgW%AzhVA)G&f>D;
zb=aO6#e#>P#8q>N#ImaCz;^ZG%+f(5!!KENL7(q^2e0N~vasxGy<}f}ke!!7z^|Ku
zM*0*qhSc;(Ayft(E+e-E;eB1oy9nk;Gifuui6|-iD-6Hnjt-Rv!5twhp$Dr2NMZ2u
zi<6v~ipAv`UY;LtFjPgugO@4;JcJHzFcR^MDUA7PC8Gu|R^2cz`c9WY_XPV08GW;W
zF~cDZDWA!CycuXKI4nh}hQ*9BR?q`*f0)km0nrc(63$Mk#&ZGG7&@d5X5d^J*+9=F
zPEsX&@2Z=J`(4Io08GlksYi<u^202d>|m2w-3P9=07qRB5~BFeq_vufq&9Y*K5aE#
zRAxf0L{WQyWj_Ohrn-ICFxF`}_zr~!%umoZhXrQrA@icX7<BtIeIs%su~~w71-6;C
z#yBUreO1wgn6?|iUZx)fkF37etjRAmCxM$+IUz8?i)GuHC)Bv^d=LT?d*rF0e69Pg
z&at;z!tyl@y*JYk5dFGgu6I*#Rj+v|{Ny$eF=_0m;M9(manR86Dp?pVTq+Z1H$Me6
zHtMf_p;Jjls-ATrObzwE`FkA_yB0L}fIPE4Ay<Yp=mh$=p>6zSP2U%C)B5cMs!`T+
z!Ij8V_(WGiK>$~e`Z$B5i}&bNSGwN2ySmn)pEC@TFs{|O+-Zgkiwjnr7IRksDf9(O
z&z^-?5}~_<@@ak;K?#FJQ6S7PmsXdxspEhK(ZXiLwY_3iZI(G;w~(y(Hq4dOT40WC
zPw$QItjIuby6A3H*AdM%&)bmMUQQ7cx~qrA%uBfht?TBDp>jWMfUPoyV>$F&!^6?3
z-DvG|L)8hLOOO%-Ssjpd0hlXs0JM(*3SrGb{HGaH*Sws%a~0e?d~f31@c|ot$<pXB
z1P|4l*J1(n9>#s6A6M>Du6pto;C-XjqSR0=?<cQ}V7gfFR)p~<0~={xKP^U#M*anw
z(A|#lD?7Ju-|hmTOmJ(UP2)P+)p&1x5y%nZC2-tC@6~%6$8D$CN!Fk4HeahB8=QVX
zwKGZD<%j2Q0(Q|4JTkF=1ZPM<v3?5NZp5>9gXay$kOdn{gKhL^ror~}$L1pRkypNj
zQOnu3^OkM+;^GNIc}OaUzjxglg8kT{YT(CNSQfAN#(@_>oWO^j{7%BKG4rF-9{VGM
z*}%}E$v~;vx$xf8;>H4oTWFed;osyc57!e35ZenQ0j~A^N5LNpDRfq7fggjGYQFy=
zEzj4YCd(@VC%-hBE}@gnFMrrSd^k9GcJ%P&v;8N7S1+GvC?bFO^YfQ~K76r%|DnHg
zfiM{K1GOZ{FUep3mUI_M57bB}p&+*P@I0GLbRzh7$-f(4K1RG}ncPeMjgwr)oo&+N
zruFyX?CqZGbK^tfV8&r$UB>B9<i)O4=4$P}TI4h|F1m4eTJH^psNO`YXgR}$O#H|4
zt)VXQk>GW~e)ZFVL?-M_m#{e(5{99{DwGHB-SeU#N&8?Ki9E*NyEwfU2f=Y%C*~oB
zZ1t`WZm(G_!w~Qk8ZTJD2#QFK96srXIkCtFZx}!rmXhj|oqR8yj|)U1*iRhto5FY_
zSZiZutRSpTpjtl}0sn1KzEWERh9+9GIq}RO!J2y9fhAw~Tr2F6?6c;n&b&<Xv3>1=
z84>LIhF6+{V2Z%0A`kOTS!DvHVBxbawLy#n?Q=j`qSwIjQh>gJqCcNknN_ghk8@sy
zOE0XM222wl1$h?rQx_&lTZc0WM3~h<8iaHCJj^;4RwLPw)}KrFPbD4?pl|5V+q#8{
z7NLVVQzu!?LZqW{S<S&~v4nF@N0QxI#~BxN5gi;e246PA<Xy70$w>vqm6WR!PAs6l
zk91wK7EBYpAuNfuoMi48JNAej5o|wL2v68agF;^s&p?MLL$2RZW<HtB4Z=M`9SD%)
zN!QFG8A2w9*CUAjgu6DB44Go^`w3-FWA{S>w$6y~By$|(kzT)Sin@@X2zIl{!0O6q
z(J|!0OX=k0sp8Hsx{4{**k2_K4}Du{5HVb`LT6?xU0xLST=E%lTIndG&lBoM%D$q8
z+{YR_9084HhlPNq&N4iBXln}vn6dxc2#~gYT@PKb@Do|$yp#qON!LfW(c2SRG2xli
zV&>jxYA7)YJR`=L!#+gJ;4aIG2D`$^m8ysoje<DTIW4E)v}*txC<AAeGv_kJ+eZ3c
zII8J3^K3bkR~9F8sf0EicNMc6M&L4ilR4By^oUOkllz~H`UKMoAr1r*;Jl$je7?|<
zVVKa29radAO^IN+`YcKi+F;%V3>HQI96sLf`KAI-c<=B&WeV%)qJ)P<h}_P@+bBZm
zQ*R>N9A90Zc9)&so!&}NVtIIC-w1PeG#@|Qf6(+Nox5-prWe!?c=s=8^Dsltl91>p
zUDw!YmB!_rzJ32onuKvjp;bf2#~=f%yEKal(W_65KDWX_J^F_^P9h8m{^@Mb;_F@g
zOC{Q2XW(BC^i3GX6=vW~m&=sVdUzWgmvMfCj|~rFqb|Zn)aWd-@S_}&Zr<mMBn=G5
zBE=;R09mQn=5aY2sY@mLq*~%|fOozb$Wt5KAfFAKMX-{uKw-7VM!jdOE~3Ud9*!2F
zj_eU<Nto5me3XLBbYO9qSQjKq&Y7?P?9tux>!Zgl@EQ*DWozPSX!-$kLkEt|F%gA_
z76A4(s0d=Otjz9h_hz0|#j>w%Cr^LCbKVMOVO*}}zF&qc&omyn21|`@jXfh{nQsqB
z%=^i)Z|>6<<Cb@~me0HTc{^zx-sz~p^oL1t!pR#BG0EU~FKHW31-p5lsJd<)E$p)7
z<sLBbVm<SSu=v~Chw6p>y`C&zO`NW`%$D94CZDo#!5p|1$S0V$k~1@ogKuC_kNau(
z_@x30dmczqhsnpmu?f^hq7ET>VX=UMRJ#u3cyAr@Qp`|yN&sy$$j9IJzmw;p74Hwt
z{%&%+gF4nhU>iNiMs!6$BUmLxK#aia5NuE`Oh1emAUTLkP-l}%x_7A$r3SBjr*#aZ
zbKh&Td&zg`b@Cm&K|<J|pZWS{@6+LTs_s`!n9ix=MHju~Dc|6<yu1JL-~K<lUwsus
zI&{>G2rshP*v)x5nV+XKs)u6&+~*yK3ITqH?c~F>`*%j&+VB2X{^xf0kNi)M|1(es
z;;wi@g+p+i4Sbw~zPrdu=VhuCGYAI$8UB8=@~^yAO6u21@s2)O16Q#ypFv(06D&@2
z%`Su8&*MHp3VSox7_z4jqhWtJo%eZY{poBee-v~5<D9N!`HMHG+h!d4%twdq2k=FA
z2}8t=;(Oka35~w1V0{`sbdPr5Y7Fo*GzKzlkZMkf2=tR$r5CbEcIQI^zhiK3ED`ZF
zmU1izGUOshu+K{-KIx*d+;LR7mpoXB)1O;Bab`iVlX<b1k)n)wCG+sG?79-;rJP`Z
zD9}&-M4RAHmHdJp(eJy{F}(ye;QurlNpf2D;1bU_FQ?OLH8DLB^a%&{W(TT)o~Y1?
z;cvZ9iZ=o-mwafqzioW*Fjt~l3so_<YFj2w6gG!edk-2a93lp+t!=+~(QLCO<WxT9
z|D8&=TU+m&#ha$|=EGLo_XL|=w@T8AHfh;bo-IHd8tSLRfFym?!MLRrbba}@x81S=
z-Sr_@<-K5qw1S$&!XetcV(#@PFPpPaJJM~64(aQ(@;<U3>&9%^MsM%M>u=-oJ7KvH
zPmXS7birQX<JrB)Bzq{nkQ2MMb8h+aKsFN0D{VkFTkx4w;y)B_P20hTtar1CNgf!?
zQE*P(ttzM1p&NsZ(`})~<uBc>YE}_;8946sdas8GEKKKuzS;4VCk4mJDk*^}_FqYY
z7yb$ynIy6K#ZuLTZT*tmSFkwG;2b;<++pbg%pb4$%b#GNq6-(ea&QM4;_Yzl`<@tM
zQ0$r5WyHLthDB%)rHWq!23qYdd-Vjtce%^#voO(F@By!0S2~c*-oCDo4tm6niVNKc
ze&HPMuyGqh`t)8Csm6zK_U&Ohn)0Q9ZC<+VjmOd{T{(1xYY=N|B}o|ZzT4YBNF1ZP
za5WjPkBS~yh8T|OW1m=9VKP=VTLc2y*R(0);$jB>l;9Po5X+q{H)gRVZEGsJ-QbQg
z1uw@ot0D8r%U3el{?sNv{?Il7Okx2!#jGd`%KYylK0JN!l?v4bAXpRcoPlnE_1@lo
zP+>iECXPJ2;(M2K+}>>5HQ(J96ds^(Z5ffjf0cLnIEKaOkASGjO$`wyu*v)GKyPV@
zq%YPu4rF`T-rh&1tm^m<P9tto1X+phvsn_8=7la|jSL$vDe(%LW6KxN{ES{<#t)YC
zsgk8>woD~;8ZTQ%WPVNW%pSQCZ6!RlY(B)1<4<NM4rPj5q^=XeqlAWgo@okFREf8s
zbpS0h*Bfuss-$iETv?fi(b0fb8L`@|^h26eyG}LQ-+H&yM0UNKow(N5x4R;aB}Ye3
zI^xtxG!u9tqWz;oAzv^<Iulc`wx%)5)^*+)>&tH%R+(BsI`K)}SvGKn{}c(o%pC?D
z6rnp<82EUc8C9oS!wXpaK*M>`@C$Kg`DPI15{Pg%qY5ifJVp)8Ol1(}L<Zko!ltBT
zs~Uu2P}N`$(EpB`DnZFc#Gc4T-XO*y;Ec?~F)@}!_eGe>+lFg*?xv*QuE*9fj(1=H
zAY@-T7bz82zc&wwW-|5i6tj<E`t$(&*wE2LISUyCeiKHxy!#(3m!C7%NRS7<F6ogq
z%QzMS^aQ*MU_;nvImhTdPBk&yT5AqrQB$z_T6-EnpnVOx5}v1^7p(2H@F<74eHES3
z)PY{s^ev)`HBG`v5n;K)J-FCh^H~YH{;UXASL@<XVCyflbK&wE&Y{0KFz5UkYyMMp
zqd;cH&bs$aprkV^L$&sngwzeQcf@J}CWd9nbP+)tX*wRyZD1R*lqeto3TFV7d5{*&
z%9*^_XatAAW595zLvRaNkH?GjB6Bz+$NMk^f)0GOJ5a-5a5=IyF_44g6i85g1%=k@
znk}zft**y%OW3BJL6PW?wCL^(9nEzyFFeMJdi1QRx%g5p-KrWJQDh}U=^~y#xnz&e
zD4$u?@e11@l~h3s*;_QeRnU{qJfBU@2q&FwhSSQ|+<a0j%ra#-x&g><r2{HSViJF1
zfM2_2_ktUq(NP#YM{a(MvLjd>f;Qyyymqw%nQ|6+$bbd|IJ_g(pRjMd%-Nx{;kZQ_
z>wb*$GIy1Gi3yx^D)5z-WA96f(i}&mtqc(N#?s(|aD-R~p5d@eLmOFS)(dM#EapsM
zwI|Uv?KnWCR*Ivf2~TMSzx!Rcn;boV@O+OWE?ET5vRQdvIP8te>UozC>=@Z5>}aAv
zzUlz`HY7V@qH}}mcE1k|Msf!^#<Y$Xz)a~U%vpaD``lKe=B(>$3S9ryMKHu)aDa>g
zq-W<I3K>;CwzRJH$4Ca@ji=UC(<uk7hxjtmh-J<-^~<kOQJS47QaJLA_eeHh(?V`k
zC+ak;>l0hjn-fk!$L!z_t6AUc_Bz_xaW*UD{R8?-pUMMKz@eAoVy<CzraYCFb=sdt
z+S5?^80k=J;sTt`)9>t9j*4#at+FbVhORV{g=lT>|3*4F?wRJ?WP#XXPXe8?cuwR&
z>J?3Q0>Ji9(BgsnHb^H`L^l{ogslk3UU5otG%h*OY$fb<M-?2dpEynI=1sa<pPyRO
z>zRSsGF^O{h55pj4r{W%gyZ4ceI3Zt?HRdD9RE!<Cd+JeJ}a2rx2&bhd`=ylaaNb5
zxLfen4)(sO8KpMx+=5gSsJpT2EDJ}&BC0Jk5V@&o20gO;<JHM)HDteL$+y7OmjO$!
zwA_GJW8kvmVz%^>IX;{aTl~7!KcOM@1<#+h7C-DFt(J(8i{$trCwXy3^B~<x+2=RJ
zmrmyc{(ix0G99;rjH_<a;U%Iy`4{O&qk$Bn)hN(_3v+`;Gz?3-K7!E}S(F0yi@g;x
znKFfiz0}Z9%m-U0!|05hC7|VMF$=;-O==yF5$RX5+uF}A&|OiP*xOgz9Jq(<o7Q$4
zEfI}GbtRcfJU}igxlq{?i>KkxPXjv)cH(bk`7BEgN4NB#tOU|rK66-QbkvDrHjWQJ
z!P8-9;JuRTJs=vq9pKKmsp78(SlasH9r4alI@|bB0~)m~>n$`RJobeh1(txA9e?%m
zi2<uS%-sOg!8{c69<AW8Kku*l-?6%Uz+Bt+`nL{FEU88{Lzp&~?-6)$97f%!c-hI!
z_8%c)K{<O(dt+TwC~#IfN`LrL?tjO>sny20z@*HJr9;H`Aym;?f;B|Hya%8lYl9W6
zcFm@MaVgb0rGAI1nehIu-FZHn1*a%!Vclr=s<&zg$sqtz<`7jW8X}e9RHchEB#3v4
z2%Ku`sya-X&DkCwJP2bn{Okt~sp|1%V*l{;ZT~wh{{2w4LYbXS&7}=g-WirvR0t1{
z3#_5;1rG1G<a%pdl|LtJnvF%*d_Q1S*+A@E)v||&57{1&rPC{GKu8xpiz~pb`DzAt
zp1|KW*l%uqI&QSxlgqA6JVPVF%R<6l1xcI(0eRYm>V!U|5I}+(0C9jW1)=1`;M+7>
zb5P+682`lrlb*3NqU}`C!vqek8imFQqRMk-<?bU|s8nw@VQIqr<bgVlBO6yUH&h2^
z#A|fEC}zcq2s$UNHNxy}1_a^-pF!Ey0VuJIO&NIG_jy^pRYbAP*NMcKX?!#EXRF-p
zYze4S*fHkpz$eN2!OdlIDWQ+VaWy3SmRu#ZTe|t`)xm>4#@Cd4K}LKS4){nM{aJAg
zsC{NuqTAG=M`(Yyw}Y7=&RYj9ZbXhtaTzqDWGJ0VTt4(oqh(n)z^$?oUclzPzgoao
z)zU->=>tOG!w|LEA=`PpL|vz_V-{PvS_V36`nLi7mFH4bKkimgL&RLo=V=v}D9jKJ
z;;|VBTO(jBHe^6+R!bhfJiPz%;KkA4#s1M_Io;wm6F!f;YNBgt%||Ts;TCr<I7JOt
zeF2v}?GJCV$6iY34uefb93J0QmO58m=zW%sFd6iw?G)n60rY$X2A+fYe|&f}gfK%C
zLtR}Z@?FxXM&X#;MM;xJcMn^F@u6a7&3K#PaBHy0qFk!65~(~u0Rg7ZdYP~90+D8q
z&97YW)ysqX#gsN5T`R4VWs$b34hrdBviqUkZV%PPZf(23pa29q`5nw<^5Xg75oh&1
z2X|w9GyP|j%AUM0;4Z8LD-;j_!k4>r8;u{B_vf!ymO(pUEP!beD2AXktF8tUx<I&v
zCOSEurthw3cRk1HHv_|89hhTcAk|WBU9GK4wIRo1*VWcG?TCYLoiK2t7bGeqJbBAO
zs3C<rSZ<XbYnRg`Giim*txD5*A#!y_QkM#iH$;ZU0#w2owv6_u8@%8+2Y8oD^&e-L
zRt7Rgf|vk~l3#>v5YIWu+&#b&yR1%+&GQ+sWHH+S*o;<A2tm#RWh0{~c%^C{72Dn>
z#pq4Ko*2lZmIxzeBhX!M3{-VmdTS0w(LTX9oa{He1C3PcL@^Rj99nF7`JAQE@b<N!
z`F+O7Oimk@my%fwHw00I-P^Z^aA#hXGH53XpcaXn#yJ-qsyCG#8-R%n9)voq>2>Rt
ze9^V(>hj|@>rt5D@JQ+5{G>OXAnH4_078?@!D?P;EY>kE6s>W9yj8tGG%<Sbd^w%m
z>N_-5gccGz(}rnNawA&ws-nm62-SQIcqw42sl}mSPnV^$)ZW*S5QT&B8WYfEa}0K$
z1c{G^0VrS}5V8SU;z=>SG!J239GN1{!HYK<=N{#U6dy%o@0HgcxV#tQVncMJ(>|RG
za2DWNe514<up1WHS-Kb_|3~4_je~JSu*7E^C?$aBd=goW96_%nt$%;|q$9ZHz~RA(
zopx7?iQYC291OGi%B6Ist9GNti8qDPFH5qB2zH5D9U4|%lnyl@+SR15+;h+d#t(6L
zd03AI;MMTJfiu#?t~|^X@4n>uT*7}&E*mb)4>htt%@VY8sAJtVSD*w&T&<I4HREHG
zy88ra9KmHk9cJl~1OdRXr$FC0^h7XoS0n}iS}IELXm~@B+3c7WZ?@vFA4wD`Mz23Y
z2{2G3$1qZ)NKCOF7&4vY>T^^<q8wQwD1Slw1;B91EX+*HCrzUYLAAA~z2qrljF(6T
zWnruNvH`7dHo5$r-g-Dc$A?dkUVQ9jTTYkrwj6MC<L_9XkVK@yp(}n7s4=VbkaocV
zE&m}I%dHCb*aR;m-?U7e5a=xDb>@*j)cE8~?Nmfz7%exkv6--Px_|}&4L;}lc~ne@
zT@WTNNcee@j?XkJyjF#m<^e@D-nor_3z!1*WSRoLgJsg}@<Em1pfzjU9|j{%dr7l2
zNJ#<>&8C`S-k0x2<=Y5%y)TJES+<p4vffbssvsqprZibg`@G?W9vSlt(TA2**|~w8
za(toBPGCZFm@vuWvNxrI?w^{j>myP>BQfIAP^7^!;oc>teFFKDZ+KB<X*N|p(nM=7
zr+k-+(VLw^H2*siN`(+4n$@0<o(cTQTUbU~B}d_P9M7T5gIpqtQQ~Q4WEJ)*;Ig_7
zfhM?A3ezLWKv(t1>ERVp+@+vTU8fA4T2nqLCM|H(!M#BSGNq|UZ&ya*A~&E5A>4~%
zzTn6`$2FCq_<V%qbHG86DOi`L4C{JUNvU1Uls#-nifu7{gT+yxuC<ia4)gXqqgvnh
zzgy7u%qqF3hcRt^uo4Qnmcm8Ym-GDWT&NeKY7_#il0;kYJn1X84QMfM<#{1aFS=29
z9VB$nqGf$8M2k2f&WQt=Y@|U-pVq077=>FR<^cY1vU`u8|Ga<rf|cLBo!64K*+1ER
z?d&BE<Uv@>5qF4d9=-sgu<nF1R94<1aZ>gNu0MgRP|%Kl7x7ZyG`ixqzV-gYR&vGv
z^y9}#Q+dHITeJ3(Dtp(AKd#>>NFE|nWT+m^9+B0H{y3W!_4*Ii+n*H6KBHO`?EN?4
zu-TbmW&{JTCR2|Fef9r->nZu<QR-<3C$573QP~=y{PE+%qnqy$V#aL3xZFSOy8o+k
z-S@tuArB7sA3Yo}0L#~R2M?d!fBxX%g8}pA-|I9*xEXMul|=A?0oK`c*;X6mK^JDW
zvC+^Pp>|5v3a=ApQJ(cZCmb^GHOdgX=yF1)ui0A$<vo+D?y|w6!pbnyku#&+0i*_#
z3>V__k{!sHw|;%hzGSbB=VlI_Zza5+OROr-=^9({1BpRG_Sfw-Cf0=#GZS;(7p6A@
zP^>sAl}@heSi)wu(=kSK1)u_mRU)m$`hb3@lYdq?H*3@F^-(=>4i@Jwk5zU|?fZ@Z
z;7j!2#exA4$EwZK3Y}hndpG1tJ^px*Ywjcq+v$s-x<opAr~xHv^LVGT+qv^Px%YkY
zzRBM-_Y!@kehYdTFTzMVx``oBK#d(mlelOQu4^xOLQ>8#Ey!yN3gIM=c;`dIh(F|E
zLPo^`z+ewYEQb%Oqo{0E4=`)9DNfq8)27=wn6wkg-fkN*P_uFc1ODh9hi45vAjC@2
zuQ+L-vWoow$Tx$gMWXTCj3$#8e+1m~vpB3)mZb&`t1_$mvrC%KFV-gW$l18pkhp^A
zGNPI3#oD$!6iA7Q0B9;v70!a0lGAvKN*6-QdJLH*Wi?{$xH~H@Aa*?FXoX1qVMs6m
zYob6NOqX3(L*&4g2?5NXvu1>&^w-vD8IUs;=Fet`;`dk+Qt_z|jY?XaW169uUEF<O
zCn-192)m0ifNi4!k8LA+O4EY(=4uXYOM4^rf@mQmY$(Bg>}~*63|BMk*a%NG*50a&
z?FpW>BMz2i#VIGk89GYyD=FP0Yg_PMJ2e!@;rj(}(Z}T-!w>u@6ax4grd@8a%Wgj1
z@=lk;=NOWpD-tq&Cw*<#dsN75xi}v4CjPC_5;*p`lN{dR9rBpweya>`awV|5r0459
zM;)>KggY-cJKLUKkRZ#>Yyib;h)3Wh2&}$fvfS`gWqQesy;RBvtdmSHxgC81A}#=X
zhj#==+vvFpV!`Lq72^3XQdk-rzdZ<r$$0^=!_pleKY<=z+6*s_c~m+Fv7V7iRd~Wu
zz&^p-h80^C!U&RNNheu@$EcrW(J?_&<mpS>Ujg}q!ayrQ!d1CYIaQAOxees?kX1S?
z2{=9AurmyAaJ9d>>DkPK0(NhfU8t+jzs3#S`}gi4k+Y7&<r4&LrGIZ7-W<{HgJ<`j
zyn66(z_>gQUmgzq8IueoFde&G1}UOrgm)LZa_QqcoKv5l4^=Jy#ZA`QvX~?s&Zh_8
z`^?LLuQ#uPD2a%uk+kx<bt@2B+E88Cj%j%~^b{$D%slwnmJuDjmv&A%qkl>7(K7za
z$-R?w@h>C(oBohhHJe_#moyo#kr;FOi(b=TBY7r20>Hz?nJtRiY@Ojy96288pkPL2
zp#W#b4bia=K{37RQ{l%hrUS9&47kFf2o+1oF2nkoNzMSvMiioN+eR2?tLaImX$m^B
z^WwW`6`0fm>sSSmHusQ#E~SN9x@4u8C272Ge9??MO?>n2?VS!im!+cL^wAg1$1L>G
zkLJ%T_ca?|d@yodHB>tFmu5)hHY-h5E7O{E214WEkUGPm(LU?Cu0i+_^GY-1KBVp0
zTlAJBls&rt$DN(q-de~1UYzxc#aW+^5pBuS5q}}pI!mS0D^7b-bB}8-+nU_DZcHH{
zPW_(p=Bo-{3i0rS8tu4)^lSE<wglhMYd2l=u?~-pNHNM&A9-K5*TV5Au`zziX)k}p
z9t``%TZ6Ci{-}K0jP{~zop0lPbMqZY^)=!u{KkuBS;n_l)wQ@zZCG=60Uvr~yU)DX
z+QhZ%Y~Se;+wBm^FF`tjU%h_X0Mm=4`R`qs8Aa)BDv?e;d?vzz7*8C+z^%cpqHfM%
zr5AfN{{_uk?j<_}>Rhc(8@7Aux)S@WtRFlMU$vxg>-K9sMI`GnkcBM+WR=lU?ATK_
zlRN00lq0yx6-=HiA_1L_cLK+f5_cG&0@>og(qf(%%VI7rI_Rnv8oK=1g(UvK{8egB
zT4H^>t_K43cY6RTI51v6w7;ciEWx-M*jc8VmMr~94Q&Mt6W0){p)HAMB4?(~+U?p|
zUjngoMyJGQKO})dlGyNpfk8Z+7bIZhltdD?*<DJ)C!3LIW;LA`g4V-(s8~d6UO7$9
zX>tARXe)dQUd_da7|tS6Bx8KN+n|GMclB4dcR%JxX_oT(MGpc}D)@52@^I*vQ`1FD
zlsKVVg51MfoVsc0BworaX1EJab?4Ud#sVwKED=1y3~AT=hU2@q&H=8c$#u(R=twT*
zc%kyyD)v1?2J=^eZmi_c9p`{=P9NGPJI!X(3@NiqabAr;TH#RK(osmveYwo$JnP3Y
ze5uG>2QU%+oj(rnav(1?SQ7F3s;tZ2%>^e<`{6?6OaWuz%hq3)^B%)L$;7jFN^~gm
z=omEfnv~w#Joz3&S{+E+g3q8n*-Tj$2o;BWG@=iDS>@#PpioVWyetT{j3&;`0#h#1
z3B$Q)W8NpieCdKe1-HQ<;l}A))1qkzBGY9>vE*Vbx_30fPqr!$?uMQR9Pwv@C4pp#
z5|?IW`<mtbZC3V!^0(ygF8?h%|9H5_5V7$|RcqN>`fodN?`)*Zbg4A;UXc1}0zdH4
z=D5}5{g?X>9=v>bc=(~w_#)_N(w|=1{4*KQ29oVWWwKAP=zZ}8Z4T!@Gk5VOk_<Gq
z;mYDUXUmXnmJKp?z7JBb%9Kj1lgLu#ashnz^TD$RPY<3v8T|P0S(tP4dl0t97rkDu
z@r7p49>^Z;Z^L_#V-cOKg|*rH=JxH|MhuSv*a)b6qfi6h!nz9oY-UTh&L3xa1H;Pc
zX%W*wXK|-@+b17o975+zm`@!z>y-9Z?h;$!cu6G>T_wRW;5SlxFE9FS=ZPV{aEUnU
zBj0-vUvJD1JOjsuH-)01>V5e0!yg_$fBxse;OWDo{RjI;`-8zSiduB>lc76E5XY}I
zg^_{wQUe1?&J+v}4v4Ts$CwF&Uk|Zg^09HrPN8PPlA8#}66h{Bvsmojb&~1zI)*3U
z!pD$h)j142T<y3^+I0!0NG(@S9^~>?e?MhiT?cI=NIJrZUy<b&NL;LR@*^>}$ZzF;
zCc#cf4p%3#4iZk?N8N)n`fPy42J)Z`KGR7L{Yl(?z?YaH#3(AyiQ%h6UBAo>=bWQ}
zbOM~3&h6PqcvWoO;Z}Iig00&{Q@`h<w>7L4`9pslXknjl250dvL3pQxuSN%jIniUb
zRBS#jdKoLcg?QxAf~jW81rI6`&oSMPVtUxQJ3vOa0Y8bNIh|HF@-KEZ_aYUyq@i;j
ze$Ssh`7ef=B-q@ZQ>v;6eW>rjsb~$tTty1*s?v(-xjn5lD7ji`FT7C3S&7K`?DUjf
z$AyOTpf`;)i0ASmmv~eIH(gQCn1gaVug3ej;bX@jYC1;(<IuG$g11t@u`*xCrNqQD
z2)FjpgozJ=KZr%r(S+@}jBH?^bP$8!6Q~6m8|-ne^-yXxFSwot4TX-pk<r&`3_Rea
zW4+{fZ9nV4<pW+V*~yFpc6$J(BD8Svw_W!w$#a|l5Z1usLwhQIzuyepXQ9`xxGW~7
zmqRoh909F);YG?Y1RVpujN*e4$0tiS3(l}#gGvBdsgYye2tb5`&nIGi%i4uuZq=wN
zaAUxX4L2*ogFsOdiq`VTtS=?p-aaNS-6L^t4o$~gIogWUo(SlI1RZ;`_23k54ve~a
z1@I3i47NY<1NT@<G>ncYN^~anqNy0HI4nXc8I)z#-{a7WR%{PRhX2Z<mDuIgLcxx@
z+{jXT1ksD5G(bU?B4@SLsLQNC$8Bpz0i0N!TO6~AW|EmiK_BEMsT>X2FTo+UF9HXh
z;NB5`<_z#~^Du1h_=@vGKN%DBjKK}MxE@@@OIt7nf_3n*!_L)|jiGejZNYpnq~4k6
zouKF-6x(%54B&x&qTknbmZC1*a!d{cK$UeFro5FxP+72rN50lg&+kPE)$A}DiTu5{
zp;~o}7O*MQN_EQnL2-IYmlf4__p7hDCPY26o=?G-D%Hv7ft7jl5G_!Oo7NaGcNJ_H
zrwi0k)M$+Dq$noDmh3Ung$XYRDsu&>Fw^IOQ{oVhkJ5)xc1io*4QCNKg;|PasEGK3
zp=Qg4ro#fH*Q&Y63VFG&<If9wayWkqsVb1GMBO1X3Z8<UFJ@U{PPl*!^HwYj$hN%0
z$D<7a);x@jj;nNcS!GT;p`*rn<eOj;3r0aO^*UqHo>MBTzT6b2m5OUtC0$>ax-YE*
zYYQe+X%S(4rrI9?&wD5!KThAnDyCfSLn4bD6}122AmF8y%$F8|Bq~1pFuBv)iG>UU
z5r9Efq0yl2ghRMy&#eTQ_k0+HzfH9YmkgX+0dChmaw;#8_C>hA(|m$#txUy4XU5r>
z)vP`&S5wY`VW`QO6Cs9>zl?%u&9Q7X6)!p!ezv#&^z)Iq!N###KDvtgSr@p)T&z>K
z9p4Z1z%nzhTXkSZ%<d2P0~+TotE`*Ox*9RqjV525g1AgqDy1*SUE?>}mZ**W4V^!V
zzHKz_OHix$<GJ<sjw|91Mba(DhY7H1E{~x)Whl~YsbMxir83_%!R_oRkl=cPlMZLM
zQ-QT<EGPoeMJk8LD-Qg^oiyRg&yfSOap+gk6xrQ1pmjlJcgaKy>j0VN*1p|RhqTJY
zCoz+XE$p*?T~ucg0O=21iR2gJqTGH{e02L?__rdaOF)tEWNf5(g*(Fk7U{13H^-SX
z47zf3lbpny%h4pWn>%QLIXz#!{o0qzQub5o#xJTBfH+sxxj&!#D)om{!9S=5`sd0D
zUTQR+uO)mURk<e$JdZr+H>vbUOgxo}?P**&o`wxzC9i5FNKLCPgioY)_XGg<nlJOp
zMFPTpuuSf^u8jQVwGk}-`pOUo_fUi94hyDwv=%eih+H6FHMmY=0xK0{<F&FZ%u1->
zSaa-VGbbAV0!nkBE}@QtG<x$W@E28Uqkhto_^>fzZJ)Dl7jCAjxqx)C#|BbM!8Hv?
z%c(z#?T$A;39ZfRd+@Pgm#(j>>CtN1Le*U(R?>Uon%h)hZK=`?vGNN>BJ<y#uP&l|
zT$XAp$jfEWpD$fBD_}V#pnw^|{#S!(G2?`r0}_!WRo&@|U3LfjjUQp-7+KnF0IxkP
z-&(x-t?0{!1ycAD=c|*rgz8zHR=vM-XZNeVasXX>YLf~d)~=xGbrJ90<;%`KYeX?u
zzE$E0(q(y`WlKhY&&pnLk(P6K?gX#;FCQKr4Gs;Z@jky99P%si=y7me-2kqO{??0C
z@0&&x<>mWuMm?v&vn2-~^ie;mKSZY(lJBH{`<px8{PFg9=bKS__x8!?baeM*e42i9
zJG*^%JieXo?%w@sbmwlCh8>q&gMGcK{0M$r<#gugAd~~&7_I0nM6<d3pUvkIw^K$~
zj3wLEJgUwoqcTc8178nnKdjd7kvjpkDNG0J2;IkC%gGu}R`@S^)8g+`CdFE2v+k=y
z=>(PO6FKU;vgLq&wiWhW(V11N<JDj-hiD_XXomJ|NpXR+iJ)oX=$`=AQZWpm%6I2j
zTY&>WzI4V@_{py3V15+GzSmfv3ZFPBJni005+>h!w8(@!96{Wfq_fgz{Sfw)I5-Wp
zm55{=wE^O<H!s}ap?Ze$M^F}>R=!u$BnY`8xQU}(KH>u2QXpa7THTuWk2ij+QXT8g
z_T5HZXo*8NHBZ;H3Xf0?L^Y<YQgxuLg!b6EVu(;?<{llaMeAA_<{f3MgVkc9OrxI~
zHw(-+uGLe9dQuj_G>i+6>gua6#dSZo5O3faF{-%PWx@eM_6mbpO-qjSsvgqJ#8lbh
z!CKn^@Mg8L41B$;oiGf=+1NC_&2U<t4X<$S7Zs65QN0Rwma5v*b{qmN{F-UO&y8OZ
zuxIJG=@Is44kA|)a~#hXnYuO?3*7v7?+n6cWhJ4Ui$xe=HYWo4`9=h}8;&8YzeT+V
z<FJQ;B*`0UZ!c*&y4mdDaWG_gK-(mI@S!0yL8EJ-z8+VU{O;bpu&%Z?!dWLSKn@<V
z?Wr|<XbvE7xKPTEdWP+9QN7GE(kGjuA|Q*Af`UG!!$xO{I-T5;<X$kuYR~8~RjSLT
z9y#oCZs1G2#%{LcGvXY1({Ss|9Jz=w(~?_P!t};)m|093E*3+^uAiEl*B<w>r$2(J
zm99$p51fMR$_-hqQx_&&rJL>4XawAPpaFAO4IrqdfC)m%jKLK;ShzITKnBbL@@1+h
zn!zeTM;Im_kj!WYN#AvaNfIy4&dfokTC-7#P%N%CCG<iE4tGZOqcatr>ffBZU{W!d
zSzzIc%`{K=2=e}cMbVj3<V2fnAAzL=rbg!^iwnu@?H}n-WemPhVM!cb(CEe0tZr6<
z@qCmw*$<ZnnWb4JLw`y$$C^fhv5k7k!?m@P{s4)yPz$szs37x55a|WSOgsBDs@|}e
z9f@kOBu~jaqXiZp$5a?O^$ILC(IpW<MJ(|)@Ke6C+v<=o&P(p~xPy{Jo8a24jtQLV
zq*yJ_3M9ypEu^;Y16EwpY0#%Zia^hVSQ>-8@~u-JZQ8P6LSmdZ&+$QK2B@k)m{vI$
zn44l|g<VYo_XXDxwWe9>USTMNkRZK}XIcZJQb<Tt#T^zjWpL?n5hWf8%2(T(3UbK0
zItBmX2?_H?p{N5oO&zhzD;wMbQ6bt|AoJf=#ZrgoiALlLtDUW?y(8e}t2>Iy-IBVq
zpqkiXp{7ht3MQIT7~Fq%T-`j(n&~DPxU~U$R{e5IWA7h{)|oBvjxko)8@4z5ofa6C
zZ6X5q8r`a<!wxa4WFD@ps8^$@ub`Ns;yt8X;91_@-b;?+OI@9(s_=S_a7h({T~K;h
z1bsYwlU)wQid$Bq@PmMJJ~4k=r3gqC=)csEBs@{n3Q>62Oa7c)%Bq^Wf08q}8Y|`%
zV>mnrTV>$4F6Kx}wJQND--_otgXgh`R7w&%`mW>H3(hY{8;Cn>1WV^a1|;<%o<f6=
z<@xY^Q=FFB{*}Tdv-x4zRxe_IWrE=@BR;@DaMO!5j@nphP)V2Y)OL!bMDz$?sm-7G
zzKVQ6Q$1mHeQY<n8#&M<M9$Y#7h~BU`_CS1Z^Q4HZ=LpD)KN%JI(?GS#x`vI#zdmA
zm%QD=S|aS;P@pIa@sr545!i|($6mBOSnhpjE(5MM9}Ca=$O%c!%Xm5re3H7W<J279
zHcfe{m+U!%7l=Y&i3~hqe$?9dxNye7*%D+#i2zd%>mG=PJ~vvi@4dxzgPs#(u{<Gp
zU6VZc3y3bhWicuytfpA;WS7bD1C7Z4k>vY}^fFM8$O~~CHf2dEx)IS+_RpjYaX*Jg
z&!4^kpp$x6@4q-G+fkUm!kF6aNR{Qqn5K_`z`N-LNm(4db*NM}wnWAjf~5u$xn}%c
zCs)kjLDgq`f=1%V1jXF09S7lB$DJ_K9|sVm{&R@@cFLAGAMeCRlrC|mM4FN>zW>9{
z;#xmv8=y}H|B{b^j1ztRd$uUR!?ME>J8A%7K%T!Mj}37x&a>2IU{x1%H!=s?e?J_d
z<R&_>UbZaZBcCMJ_7tbfZ07lwXsR4ffIMRIqe}3#qz6xRnEUVFGZD)^e27v3OCA+5
zrlv~o6!hEt-{^HQ4H&diI&ipz)|*KzlNIv?AiA<2kZJ{PW{w5%0H|5&m86%|+SM1>
zbwRqsY-Y;p?{FBp0c$3R&hF#-9mZ$b6_C@s;Y-PP6dz4J@oZ=pOs7UeCV~!;tCeR%
z598Cn932r$okK%{^9UQ_Bg}{8LiUEkUjlQX+akXt!=2lb99h?#AH8?3Cd`k~b%YOs
zHKC8TC2L@Nn~gQPV9dZqJ*|w8JNO_*2;pP5HpdlD0O$ST)J`R9(pj&iam%e?seTNf
zHV1ciYUZGr(+uo%k|sOXxSdfu8QlCYfqptdws(E2-I+EYVk|};G-CFb`4T=4z`0QY
zVttw-j{|Xcgji~Io{;c+#u|R}5SY@7KAx0D{|EGudOmt*k&ATlMroY-eng>ijXIUI
zdG$$htT=c}7SzQldLvflGq}||7)A5(@B@n@_BgBu?2b>Sb!A+jT8!{P*T<EeN(5bS
zILCqiqN*T~|I`d0l6P9tr+%W%162&H3ae9{T;lrOEA=s%6+psN{h$-?Rx>agmNm&T
z2nVp#3JWxvuO!Q%<nZ!tEV9q0nokAIEzQ9+htK745QmVm(SJ$zoyBBwj0o>9T7&SN
zTY<JJs7-aF5}qDms@)Rzszi&h9QJ!cA{^RO?6osz9)#2HYC<Q0Z_}8G5Z1`<)Se~{
zk~s}RDI7wmBn{vFI^n0h{7@pK$&}hYk8pnYu4Y113ZCY>oDLsz9y_;hPvMHB1DJEz
z+c8&D?`zrib|9i-E@OQei=V=~=8MLVBPGTw8vlUy>X6;jGAwPN4inGu+<>(>H^RQ>
zj8hvw_pEFnIVptkl%dZ@nret$r<MYKj=R38DD%yZ<SXUa4sjYQH3nQjKxU1=d7YiY
zShJy7WpY+Jsw#;$9m+^}EaGBM1tT=n>XDSMzR$u#Dj<I^d17UQkT9)=dV6@MqWBU*
zs{_x2oC^T#XX-ERMUXi>$i8^Np&77CE*wWvvp7hb01nqCw<so>@TG`63Gy=hL_&KI
zUEo}>CX#g-5512pi3?qL2f#c+(iRX2fzg69Py4^as%{#Ls=SnE26zwcpJqf#nju=D
z3`SExv+7OKJ6W<dc1*S)B*%glGe2f*Tn%;=&~M(ZEG5btkrAcm%aolOBC-kfTBgb|
zE`@K*3CnDZ=6^-M2e3Ih*DL#inWh6XeHPQ{YQ}i5>%I;hTLH=KI#qv87-f}0re{h@
zmHx2zv&2ZU)*#5sV|1z&iUG$V%+KrAEs_Ph%c3jgx>AJWyGuN^2bhd@GUWU(4_^+B
z_J2Iow45dbc#m>}1Tr@e?t-61w=meBx;nw!ASejd-{fEDLY<s;9~aPLT<IdxsS;&I
z)P=BXIh#+AXI4$c7>-vF<g<>abgvHRA`kYvS7f<TVe0lGz6LwCZ%z@E%-St0uGxAK
z6)I~;&AW-|=+aG9IE8Qb*~BMBQ;U+(3EDqCYfaes0Be=Ddc-g|ms4UscY4UH%!kV#
zWTP2XiXmg-u%>M3H-~H)`?f1<*=9@ZS^icp^Qj(~U25(S8N#LO#llP8>RQvfrJGHM
z)s}4}5oW8IUGm7bX9^Qrh@d*qDA8g8?8%WPN0{2Z#vSU;gN(lx6!3+OG$xp_fuDLf
z)-q!~7-hH1AkJMqVe^&psQfVT4~03^=~m4|g?qZ<C01lD31*mH64-{P)MKbNd`74u
zT-<5O5rXDFP9y+HtRnAP1hc@6HxtA|ukcq}vso*7K@k7%&OhtBe|+)En!$#>K_N_^
zvUplljUVdwVPNAjBkT?5e_?(CuaNMu1KvE2qw0H?(}~wE1-?wqLyNe~z>5pMOswqb
zuh*j_kVV@|kJ}yfA}!az)f^f9@#XVZFYbNE*V3Rk9fZvG_e0I{g&i4rY-0+TuZeRi
zhOPFZ$Yl+W$xreLUpi`S#4%4VW)W2ZbgV!O6ikIV?cGGxKrV{O{Gy8m>o7@zT*CAt
zio8Fsh)bRkYeZz};r+u-@{GC;N5%)3zU01v8vrt%IN*cyJ^&DKzjgu_cgfo9*lt#T
z&=k;prcj~^eL$1bU1Ph|!(rh(TqQ-vNLfa?%P#_91`=?%F2fK~e)g8JFXqfxF!||J
zDyWHB#wrQyf4m>~09$&Sd{HIPEuZczB=Kz(b~M#zS=hw^p%Cn$Awb8?t!r~QU-}~B
zz<BWudh8RPnHvlIpQ38w00<gc<xqXL10{YZm+5rUaOebjE|^jfp<ql(5@^myl07>g
zEjTo|zM*cG?Qt{oJ&O~Ac|qIfa!-@g&{N3~X&9HXx%QG>{jI*H@;agUp5{yUD`DxB
zKHl2da!-Va?Im|_|MBamaMi$G*-KV4PTa##mK<uqUNW<{`J%v8FBNtZ4%jy|i+f+b
z4}X5pPo6%1@bI3@g+7VMh)$1s2gz+>qw4sB0C$!}DyTuS@l$q4$<@@a%YMa<j(3I~
z33ZNUQ#aEM&ufKTunB(d;v)I<cP5XDal%yfDWaPYGHM=c0!6VZVKQaXC80CU`S_<7
z_e-DdDrv>?n(p#sNy4IN@DYNjjmQDBu%c3canEpVveN?;KKXK`r&MI^i$LLFiOvL#
zdPRcHs+7ExZmE0by|PsP&xvXkVdbA+`Z;p4=Wc~nIdOvR9?=N-3w#s)s)!T7ixImB
zeWSk6(I;j;c%Zhe_})J<R+>gN&?W{Ia=XY7QZ;16mZ6vl#x<3R#|<F$%ikpRG}{Xl
zx%bYs{Sb8UPwL6;KpMHC7iZT`#E+jg4R;1-#T5;6I)`hU{((OFq{i<Kxc;kVzqp{|
z$}m3HFM#{>x9N%~1+&@clDhIUPSde}widVX^*}J4Bi)>+|Ah9SQYH!4jZ9?&M(92b
z^PsCY7_y%aNXQ|UPFf-Iw}LFWS^^d>PLBuzgvRO8|A@9ZH$`h>Bt_dMU3SfCcKxPV
z%|7#ajk+*DpI^Ua9>4ggE_^efT5r%cUnJKy&L-QBYW<G`uJ;Dbr!!!5T-$?v`R?OZ
z;r2kQzd=VvoGI-3Ww?Lq<GQdjkcw~6gTJP4(`(!R6Mgh?J-9RAif_>VY;|qx&sLwC
zUfr6l+PV)<E^n|8PcA=h^mhkb@eM{lUX9+2Pp-eh>9Yqvd{iI48kB#V)DK=7?e4@~
z0m2^j1i8Ew5^F--QL9iGgH*MdSMoMsT^xt=3|~|joamttdoOY#j**)gNbQ4)3IK{6
zRfWK%ryFDEd)`jUtM)IIz&_^o+zsP+ONmbQ@MBY#!&d7kS0~m($(F&%@ep7UD#J8w
zrwHB8_KyyJdN_c1BUmQK0oNSps@Vbh4};*{z}`joB5R^tSdy`Ukt74*p-jH1>9pz=
z&I)=<yzDn^15ARyVx-?;H$Ox&N)Cc>5?d$i_Qk(D`kbXL5^|S};qbQ!=U$M1O8j%S
zNayGLM>#7lPABObDtD5fA^e9GY3Ya<^b>Qt@r(jmYkPUXtjWUgH>K%j;<T2PNs(-=
z;w7GIZfW&8>LmxuC`+k0RF6YdbKOi=(s0KboLRh`X##Kel0S*lol7XnI$z|H71;+h
zNI8?5<dj8nM=yEK4=-}f60HfR#nZ|J7ZGY_Y(5JGrd~yms5?zwj<Dsto)l&uc_n|%
zKpTt+m(KrozJVZB*b=v)Zotsu)5E_!`AnoS?g_T@wVil+`J1(0-l+Y<<hSa8p5W^R
zEBWp>>4PI4*Y@JjzWh!4VU+87u3bO;O?qKe^V(iK$A_PdX9#*>@ki;^ww+Y6XB$bQ
zo1#JvVJRFHh%@2@=}f5<G`}#ir*ux~-Ud4N!)m!CqCF(qBq)yoWp!ANMz@V19vem6
z#K%Na3Ip0%&e1rPdtt3{8_N|fn^Na$71D3r!DO1xR_4LW-b=r#%Qx)J?~YwRQ27aZ
z2S02yI{>E!M}yiAf%8(xR??j(8^;5h`KvqxsPWuFQ+2n3R1=sN#3>FsS<b9(ubQHE
zM&(D;R#W@3=lvy;A2IC8hu(ietY3pwKG>~ff@E-XjT$jVATm><Pqk3#F4_dP$IXQU
z7c?JSQeMuM={v<bKAW#v?(^Tfzjie>-*aXMx7_0`%#i=RyX671v}?{WnQ9)IcJ)uj
zyTH^5S0MK25*IABddZeS)NfueM8XENJeXJQo35~nC)x6XQA~Ewzn$C6ggJI8g+-QK
zfV5C0>4`KvXBXEoTw6hw{u-2@u<oo{JoiXs7)Na5RRU>@wQ0vI($FhQR5i|*eNDP8
zA`KC{cM)WfJ6}+Gho<sZ2jOlEjbujudlnDhhnXpMf*i=Vp@UCU37@*{ZBEF;PU(ig
zUUm5Ctami<_aV+&T*)M}c-6S8EveflS2*KrmeNVk(_XT#nnN?>m(D(WTone?_wTEL
zd!YumI9^;yNS$Ox7uGQwEBh6Xj&j|lqXS8dt+fcV;}N)xf@L@J&!;*9d7pm>E@G4C
ziUmj>9#SxMhRM$4a0k9k_o&EDhyJtc!NKFLn%3Rs>OB%UjR*>mIXsBT(HqC~TT!@1
zhzFaE`#c^8#b$8Cr3Q4Y?QQxP2oI=PIhn!9D(AR|kiv$&%x9B)=5gsDT2{K4yBI`K
z5L-^5YuZOr$)HtYkY+{2ZKI5w*gUXv5R>UYxQerb?`JwYTS+)X#i*99FWt;sk1^t4
z^jjYI86$io&%!J1bqlKVi?eD1;|G^SgV;?xJ;Qj@5O6L%i!-9arye14!!O-u!)WXp
z1)_)-;eDKsE4wDjm#6W&nW}C)<Z%cgjmt(irQ55VZNzyI#n-<ToT^`U<wHe2w16jn
ztET?`r#a9AIO7oBN!JhDXFBp1e20xEZy6+vi1Zm}mZd*AlG^7-ju`Ac64|9*EvCPM
z()t9IXvkbJ4Hx;jad__2U~RmAS~0us;6|?Cm9-N$Pe0|lVg_AMFh=eoi=da6i(&!_
znK_u{P&*i`#f)xzdgC}D7_os-L3cgJ{FMr{M62~AEtd{P0Ho7p0sfM)Esp6w&!`8l
zhw!qa`8_R)uDp`Gg0I^{!IZXX+q89ct4EQv3~Y?(Q*FkUb>&<;Ia$kPGL~ZnWg>@?
zVCFDSvapD*mspG4fj;8|7~{atA8}&rYJmJNbnP09&v>mixv7e=V3p4p7Qi7Zc6}&F
zdgenTWMNPFFOBHCSTEs%HdFN(cTs=Gl{(gpg2e23%tw4un@H99XTooj(K7LEyP^|i
z2a(BJb&g`kBn=ey+$=8AM8Fi@1lGp_nqfl^;JxYe)nyQJ++$ol^N3G|=*5r--sx%n
z&X!gO&!l$^Z4R6~w-vOHrK+$qD2adyhbq56$rj5p)=Yv!pvNL0AYMz6J=MwSZJs6%
zrz9(Nl0(|HZ{X1QG#@RBvN&A=rK<E0yMddUdV=`wu!JX<63sMwukbE2sZR>Bx^*j*
z&GL=DT#@rRhEPfe`I;q?g#{hp#h~Qpu`_yDf|*st)7S!*hMSa{aY<;bQ|{LcWqD4U
zh$AYugtN<-QS(VVgUA^v=QCDC6CVOE=(TMySw2|d_`Z%*JIp?CvuvWtrvEUACnB;B
zY*_HJW@1CXetA+inGz70s26I@lKF_6&*GiFS*kEs^U=nxc&R~;x!8Nw<pm%?{f{mz
zG#W2hebIcDUDQoh6Kx`8nPiJv25wZL*SOc&Y^Z6YY{~HA8|BLlmGOQvQnpkO7d;jX
z(Px5A92D@|ioE|Ba_~<Ya`2xw-+$hGzxmCl?uxYj2={cLxsCg-*Yb(ydmUF71&Zl%
z12qAi+E6q1PTd^!m4h>uZf+>Y{RIk)2b$9_IW0}eDm%$-CPcJYXmY1?j71ohmsCGc
z$R(1QD~Gkl(t>Jj<}{aUR6|ssxbk7|om_?{tL^O<2QM@(-P!o51b1tZon`O1myAs>
zvKukwZv-{TqU{0~LgVKb>ln~{dHc!-`Aj`VBNLV&Y?g0wl3G`g(x_i=I9;PllfdvH
zqLR%k9g5>Y<FEuFlT2cc&n6@-PS~%S6G%$gweEhy7?xVuz{qJJ=tw2qsFJoIZYdX{
zaVNOh+F^7eaX&*@j9~(7VGgt0a!>)Zn8-3q^SF}H-VgjCn3D1+puMMc8$5Y_fB(tg
z!NV61pFMc^?Eb;S!(lB0l(d-pOS|T_K5i>?K^?Ocz?1St*=W$tH6%19G%5wxb6UY=
z76F~&%C&@ghMO93GEQk#I{?V*K3O)0l7x;SS`+R2<%WI{`I|UEw+){-Qdq;$(86gS
zKu$p^ZZdsHyjSNwG?4EG%L4Wjp&>V^Q3>F_=TjSv<KUM#E$t2hMm9WVu?U`ynbj;S
zw~xCyOhj<J15Z2=3X&nlOu~a^p+v3Ts3FKYv&u0e?C~O$BDt^((+bZQ#as3OX1vcr
zLd}^+Itl!>xqD9dUj|$rt5LEtW}!Tszr|ia!F5q+DhfAtt9>sDi3;H)Mv?(pzh-WY
zk@V9L-f68Apa#!YoQK}<l7x&EGlgR0Aen5&WQc>mT-LBpk5NXdm<@yTqM`HAb0;b=
zUe&Tk?(S1PlWe4^ORPAh1L{I=q~O!g+|-E}TO7Uee6<w(3WVt`g2c)aZlcjmPMMc4
z1nll@UeX-4l<3l*Z@z((<In3%Vd!4wt23g?DHvRuL*!hORJ|^5ffk9xr~do!*N36k
zdsCxw-MBhi90eKZ$wtLI8@GLqOrZXZv$w^(<ZU#~N%&x9$>q&vp&$niMUWLYdGG_R
zA##+a2CJFAE%GsDlNp8p+tZ)5<M8K4UxIutybNOpHPxfKNhkqgXSQ_6p%uX`#Jn^%
zlo%UBQb%YOE>)dmV2v>RNWrJRl<XFoA~0uDaW5Kk>{x0DF4<YGLWJ?*;i)b=w0x!T
zBa+OOc&=H-_%i9@G8$NAFoK-PS<(z)GpHM0tqf_efPC;TWUGnhKlJg`r!ffvlnKxm
zLPCpkkkW|_G`=0#9Dimc>w6@Y8M>hCCL~34p;@jy>GqJDG|QdsZ`MM5u&nVfDnzc)
zs6IhO5v9JG4thG?L0VB5+cpqK61PhO&9r?I#-lBW+hjh6mG-uDHuYO2ZUNz=9WdVZ
zHqBi=T}?fb9iMt(nbmorLfFGelN|0}-`1>X#6Q<9<l4>fk6BD>wst`W?~(d#nNH`r
zxYu3EzhYelMT@V1YP7M+rxK4TRmFEJ!y4z9qo9y*l<XeWHK7akU)~(hCMx{_B32-Q
zgs0U*Ksny4Q@tp8$p4@{spsp@*`?!U7=KR@0YmyNfQJ4F%WN-=H`zqXh)Aab-XL=Y
zhpH%G8^b{5@w!{}3at%1ZC)ma0357&%MO!25$&+;aN2;kC8=}-YlfSb+~`nQ!^k)y
z%3r?|IqhLS;yvfh%hbf4%+KK^F-g;~Js!q=&H;(WGM2@dj<cA_G0VkLyk8`Tu_)Xa
z=UFoBrV~16g4m1d@6+9r1%5PE`9e~bOA4nEKBBjFPh6x@ANUc*GeBJ~GnStWR98&c
zjX{ta*^*jH&PF$3r3}$UkIT5#xGK}BONSwQ8f2dk13yEhNS-NZ3;HU)(QH-1-6A+}
zN^d?7%li45R6s%IOqPJU>5t4mGxxf7dsOD-pY!f`ux1<WCy!$_aiifs`ne{|NVu#;
z=oJcmwLj@P2O%1tdMqfl1y6;f#L&B>3rW2jraY(1hEo+=?38#}gpwrggm(;53)_p_
z@S}8YP2sAt_5{SyVGJt%yd(yfl*pQa#^^qb)&imo@q}p1q$uW+y_#`>l{cMbr#b8Z
zjG!!MQ=tb0&p%uECF_MVyK(wOGWpcwY1TR@K-SmsV0Ky{E`jLORdze~mFPXLu1GZ=
ze_7?3U?U)!OVnV0d3C@^vVUFp7VB9h42+K7aAz3m6rjKcfE=w>@-|zX6eWADBq3lj
zZkwO*j&nCGx`0DuOuiO?S0w#HCou|OK~o)UQo{voi^#B=&yjU^%nDk^RX59}nuvfq
z7{XMRvvgiE#)?A_%%=I0+u6DOE@2=LBAI}NT_OcWC9gt0)3gvEG{IyU=tM9eca5pJ
zH+#o|kZAX5!}OB<r0Lhmrl%PtyMc@*$}H(Ia|A>M6)dRd;aF}}0DKHBri#<D_gev+
zsH=>=!d^qXpt)$$xe;6<9!I0`Q=VPukobxUGL?zkE7{YWZZU|bEQ5N?vC_r8XN(!j
z6Pk*JB5YJlFkcU}f&oA4hd<<ig+=r@0pwRu^^?QH$H~iwFP;d5oL8m>xV;W?I8E4<
zbJ>N%OjJb|EVrvC^WdT;u8WH?y9@-h8nOfw)C@K5W=D1S3eXi1PpQ;dLHIr=)*Qwq
z-s049nTwTkoSm%blreg}3E<%Lz%z9;6-a`Z8fByuKim2fJB=eDTsQgA1uhtqOe|I{
z+6*7zM|tcd7{ZeUnfh{bUQ?X^`v`N8M(#^*s1b>7u#cNhF!c-?(WJU2t0`a^_LK1<
zy)Z}}PHOBDFN8}bLL3+7LY#QZvb1el6YC?Zre@fU-zQb@wsmh$-V9iXv#QkBVS<{U
zUW)Tv9inH)m>d@-0X@E7KdhYyjo2S?&rPAk0-3s}s-s=%u4;9j-`n1%SzznZa5NrD
zq|)1*asDGy8VAGzv7Wd2f*3+pnwMTf4pCFT=Rn;>QI^4O>N;m}5cy<yf4P|a{yuIV
zi_BoTf+UrRUv78>7IV%zuET_?sGEp0vsRC=T3)>X>o(a%BoVODmM#xGb1KvH(&bd7
z`v13`uS`@^C&Yys^#6h&5EVYWU7slSDxKticdvAv1&PUVC+xt-eUnfUyte05eN?wX
zf*s$K0ePy$z-BqqgJ!diYPP7LI)JF22GPL1=d{qk5-@adHMZ=#7#6YaQz0bO(K~L!
zbi#qezH?Xd{E8n{oNgT)4QRM@Pe;H;BFxV~`zu5{`o@x8gyT|^c%yO6lyP3!(m7+$
zdRGkkH!<W}63wVnibQ)0o$qSr+Z_Yua%szJJRG8p0v1?yNM2gn-eklY(mZf=5Z!^B
z|1=Z|(`m7qiN_3UQ6w6DR8T3B$(lhz%W)>;%QD8OrebUot!ew%D#XZTV6M48;>)34
z%7L*gm2ep6oq9SUR%#`ZbV^*eQvVPM!3K1LtsqNLvmwOM#@rzU@tkI_n0Ue5<oMtk
zH-5xf)+_-Iuf_sKqWM}~Q05m)m&cy?_XTbB#R@3q!tBfoKvRS6lO#nukCE7Ey_oK^
zCSjaKk_zk*u7zpFJ|%fM4O7|rWF{Bffqcq}n!Kh=giX9Eao$Ybw-os3WkDj~Iif{&
zdT@Jq0Jl1Ig||vMGlO{qdt5QzpD}P?o7lk@G9?af-l4|N#`P9vb`PVw=I~GZ2Tw=<
zoQ+S4chK?#Sv;g(UYauERMefmW7rU)Dsugn`K&b`hb}P=@!PGehiNXe`d%YzgiEge
zi^E0ZzkKF3pGYFeB@zB*xg~}VpY8wfgqZMWhmZGPJ{-_Oa02w<X*wxM0BbROT{qvq
zSQ@?!E2oi^Pw29HM|XgPE}+2&2Zv};CLWE6u;;2=TN2I>1E$Qn#q27+ZA+cj`-8*h
zPxg-vo<AErdcpwJTzR*PeCplqG@W-BMX|Ks^L$MIg)2F|WOBs;AR{hxAATcznOfKV
zz)mN8GyS5WJv#fNIJpf|y8>vu?8p;Mop!w3IB@}f-bN(Me~^T=zBeFlCAV~?!b2%C
z*rq`dcO`l0L6$`vL!L*lnyF&Q-|XCWjQWZGMe~@m2s{>&r^be1IDXcLJ%X7*6Nf|@
zIe?gGT2|NV4q`)a%{m1x_sXcdqnDPn#93>tu7RtoE$K}{i%zN9{^^{>F81Rl;_y(M
z2|)!mq_AM@);x<XIl-sL%4dWeM;<tjL=CcrAbb$SE`jefaL4Z1Nf%irddVZ;xIysm
z_z*e>G`m0kz&DmIAn;P@=q_oPoOx5eY;&?<D0a(aCu*Df64rJ%s?C?$tq$QiFW%&|
zdoBtyDA770E)A-)Z3S+Id%Cg4q_y)kz1PAUKWq1rFkwfWq~m|v{rairx-oT0i*7|E
z;J`C_X?kVPy~O>1yeKzk=tBpu9}9Iu8=jvK+y~L<Fe+dY=M?ce(h^b!D}7u7mW~`}
z0p0PD=?IN-cU<Ja({o#SR7jL{;P6A_GuU>9jayFH0im_?;}2~p;AC&KcJUi|H&{KK
zw7%yxs!TD9v+tHH<?%Qi+IgsG7R4UdW04T{sy=y&U!A!}6e6Y)+7g~2$)X~8Q+(<T
zoD`uXY(T^kIr!z72;VwW+)PI;47$+p+w-~J_F0R=0c9OgHPbXsbH(MYaJTXPV1Ag0
z3iGge)oCoyA;yK`zy<0WJHbE#KxVzEIcrH4RDmy%6d<PRw!o~?hgz4JE977Enb~?)
z%n(<(<($wCs&QTG4yxY_tP<zd8{*Mvm0kNtb5O?PR9suOP%NwQH6ev6)dS`?1GEMV
z{w#n+U!$QF66uNQ8tscIW=H)fQ#~|c@$YNPuTi?<(`ct?zc<%=h*KV-*5O;hQor5%
zDkl7N1SVzCaXHhEuQ5r2DlIZ3+9U>xHZL?NIL3@(mZ>`LJe$lV{Wm*{x~L1ulLI|F
ztKQ(;7iP>-h~*Me(x+$5LN$Z597r{_bt8`adI(mYKp^%rU&%!LB1LSf#3YS#4x>GR
zTLYbovqfq$n9;s5aQjCRYtvir2<J}?VfQ_*KN4O_a?wERc+A?#Lye&Myr8Qd{P;71
z9(Pn6IZbKN@^s-q0Tc{<#d0H<#?#eIf}`0xW@a%03Y5+!!O{+$yK}|sr4&a5I2M9*
zGO?UYh*c}6QrdE}PO^o1l>YAc=l%PNtAKEebkvn!-5pjjaEJ=uLqm2OXtjsH>6Q#v
zNR{O%GH3AGl)wuI7=-^~rhXL8IYIH?>F#ImcUY4yg_ha|CaJ%a%grfb;8)WkCY1I1
z(D#=Ts;r>~e~kPwqrQ}rVyOrVlS>DzNPM`-1i>U~c5<3))k@igtJVuX<)u%OQ{lqg
z0W?+nWq3F0(&$)BD?QHAF~>MaR)qCKVtE6d!Po_3&=*JIyE5q{2Q$vaK*Sj~T@n`;
znLlwd<NNsnlgrxc%C=c#OHs5(`)91FUdstH2wV)q;weex4XbuC?vA<0;EHVp>VNrI
zSVQfA<&5KbNHljFzzHnPYdT@d%9A?2NEfFhv@JQmwReQzz0(dd-ZG0u+k%=qcK1pe
zpaT0le!%Ys{60FU<#|3YL;J`|#Jl4ND8;H%QX&r{zj{Um6P>uk^ef=Wb)>eVIoH&>
z=4@-n@NI=3A_HE(Zr!p6-R}8{CYwI$(#GgAjgaPpER|fk+5>u25-p>DYP!!WoWjh9
ztBtPZC9i4iwp2yiae0aOT}&OZEbBAAGdN>6Qu?eqQ{o}?<lxFOqe+fGq!_5B_my?l
zo1-eGjc~ijQ)xCi%d@+^?a0hHPx;>3-j<8YSu=#KeX##y;uW06!7}m04CI{Wf>y$-
znzcIKjvA~a$_mZ`Z>B30Wnc53_Ya>cEn;IuDaRpnQ1quUIbq^`Zlu#NI4}mm6$(vy
zW?&F^3B8wS4e7BAA--ts@{u(h+T<|hmsB~kLNXq5|J+TbU+WzqN+W;GHX11}ny(uk
z5D(I2+FC6pdy2r(PTn`Zz+H%3LCL)&WktGt%pbPDZG1tbX|<T)gWg}uV%DOEAJ*!p
z!OTkDtS!#0vB!G^wQK43!U^sn??!Ku&CWP=CEWq6PS&U8gqX6{?N0JlJNZ!81}qtu
zEp=m98w6dkJ-X>y!$SpI31c1ik}uzD!4Jb=SX&%(xrNrg==T$uPPuF$47$eStJhIJ
zx}$6gc@S<2QIVVUwoRs+Y-S3gZ`}m8F@y9mIt0>BJ#rWFGP<VW&CmrvzujkS(ty=N
zFUQ6g(u&md6)Fzel}T;4hN|D96Z7SJ>0l3Q_JOYYj95!LL3Fiz`Cb{a{be+dQiA4@
zo<S!_{}JA-fji#i1eL%$_gmgx$SoqTxLX|%+>RS*N4oD%WTWwK{GDzQVqj&{4#wdY
zZ;Ogl>t#;<9Ue#_93VXG?el~CND$vb8dymd@3a0y$3tHBh(pD)1|L;V%6c!W=Y+wy
z+m?z*j!F~L-lTWgO!h)2Y3fmF%2_$y`|9<F^~!4wh}KO~6b<dPS${O#$!NC2o;3Mv
zG^rU|g`g=Gd#m$&3yVe*NW4gymtd~X&WV5I|0=kcZWK;VX<my&R1Y2q=Y5)=Ne^_B
z4N`wfP<PY6Xm*I7pPr1<J-3;9GbWq8yez;9(OS|9NY6g$U~|#vRL6VFCM!P7(E_{n
zKf^i3&W(<8BY383f7<ltSda1X7B<w@>-Z$U_fuI}cPS>v_zGcVSA`Yz%*i#Vs*YJ<
zr6OPap6l%c6Y7#~e)dtDSiaa27$kqs77iTlg8f6qU>Hj%!fjwdIUsw&9XN*y$lZzn
z3*%|WU$O#2IIIkL&K?zueP!pIm?fFrOAZHyTlhG+%$9633^|;4xh2u^X43R6+_C~m
zrj<fjBFx|z``31VyPAfIQ6jdtj~r-{AE%&R*|yo<W?A7=Ww4W!otdO%&h*<$o)v+X
z^_+9Si<qnS^j_nxsI45I5sGF|@W2I86w{mnEQO<`Dsbgn$;}+wf(1a{`-?cmG91Bq
z-ni%@o4E<>1dvkjPpF_+2`0$6@s)O17k&@LBH9C(SfNm?LY+=&KO;|eCqj}FEI<aE
z>CTCX(=3Ck>t)!{YVR9gThqGJ_9}<mj=m|p1Vh59gyY31Mx)i7-8O<a6;%AK15}mH
z$+*3D2NS}D#yymcKWLxU_xq;a@k+5XEOgv0(VttrM3>tB97;!JJ2G-vV4QFQzUZy6
zstF_}2^V}TK^TkduWY<;d;@cikc1A_pG}9kgtx>;s5C02X%yv<+N~nG;iavmmsmAm
z##9a>029TSWT&hLKUIfZwS$P3VOet=y<Y~MSAp7Am=K(s;B?To@7UsD;UttLI$x4r
zT-Su-)j0bCrc9SVNR1xsgOf$hS8yTz!KR||q^C5an&8?oNs}I+z1_QXx2zT#1tS!b
zDtHrh1}ZYFU`UL?!MTng6DC(6kZbHvp8VG;>2AE5L1?6V(P3}6u8|y|K0v8lcx;n8
zUu2Rv)aE*zV4b*55;@bzZ4;47H!YH?DhX(-o*m++-iT^ii+C3?mx54ysMyTKdkg;2
zldJ+b%t<B_;Mp7f(rsWHmlf_vp2BO;cQY&p^^}jPYPVgpqBdU$G~{T3h!+IQ7E>X3
zd|uqa;^U%xog<qIFgaMeagjxPS;muO#GGL?fbbv+$AM^P#MXtHHu%&BdkH-A&h6V(
zWg1=ZFqgUb7`kpep~E*4RdHKi$!Z3I@a!yZ36o_<WCuG|TB)=#4ub~););@$Zr2>Q
z+S-JZ;L3zpnN^&s3!`Mj3{kip>LQ12V9wU&n&-r$z$N_M@uAyptjqvPt~~J!)qVD_
zV{a>{!8GVAR1Gv5Pigy>z_1J%+2Cj`7ncdhK`(hJVeR6(Cra^ac%+&OLrCh-R-T^p
z*0c_r#J@<ubK=Bi$>JSjJ}f)QCH{5tMV*C$DS61fzDs_eTzdFs8>i@Bq6srd7#x*~
zl6`yIi3E<OGku1|5f4cGD=QlISf$=^$x9U_HeEx>U7tV_`F|khZbYjD5e`b93-ny9
z^3wN?0Kkd0domH6U{;<k&fwotR&^)iVnt`YMZ%sa#6#uGEZI(W>l7~Oc-%^@1fAcy
z!YNJn2?`U-!K*7O4qio)iQJBrnn?h<_q|s-Rn#TY$2RLI5}F5F3^)HBU1Fv*R>etu
z6?d+!;%h$wUz`TqZlyHR>wECE-|N6R7U#ioO%X@c{480tIVCSOgit@;8Cs&TStqo0
z+MiwyP778b_s_HR?WG#QwmQ0?9iB|(%=VJ6Z{P0F&-83B**crAw&(}=qrq}Xg8ChK
zZBUAPG>aWf<7l<u0O!jAEaQ90SCz+aGWvLHia)k0?|{L@cG2QuP;w7wT3UB^S<7T2
z*KrD8)0!0;>`1KBg5=$HH2&SX<)lF-Zj5(m5Qz*?Gaqjy*5tL6M^sCm{@jWW+rOy_
zcvK*_`I>&kA0khb!ZWn4k<k+bT6R)X45#M`I;da!gQ8vds+|Z$y!w#vHz(DycWzMj
z>!_0`jiK<-xUSi+H=PPy7R*sg)Kat)?lm{<@@5Ag>C)fB_Qiwr>|T@hx4w5<{N5e+
ziEZ+GJNjU4o8S9t{RQpsdrjHr&Gom@R;S){8tq`Yq~q$~uu-{3EVb%|`~{`gFN0~S
zk5(Ef&Kx=3-WEBQeU)8wN$5n`Hs~YKzAew4$Xii2MB)~#A|gg<&JL5Y)UL$ZC=xVX
z8rPnr<gku|sbKFMbLwZegAqqO83+q*+35<W++;Vgr78rt1n5YIh>C=&!37P8j&YzN
zWZrfx!W1hJsN?BeJxdf$5t50H9L=5pbqq0G*VsvPCZ8{8GZNQM|2-I+rGciZ+-!AF
zy&DXvTrT<Yy_WyrwIoY=x-28j`TIma<LcoYw?u~dx#{t?)Ec5Uo|~LlGrHxT)8!!d
z>@2%T9#Ffjc5hi696mop&s%Mn0M;+RaOmxp@08Ws{`O|<ooMbWq*mXpR{8iEgTNXM
z)qV{Mzb1oR7R9YdMa{jo7VoWCv=+P+vFh`E(>`qOCH7}0X)a6p&CAo2^`T!)w?NGg
z*HiFY%sG}0Lr;98Kr6<IV>TPxDU6Q;id$DI+HluduM4NiXz?uf_&;}PvD=P_*6f<5
zd;T%%^l0zYFHg8{WXq87v&`orA*-LMqabg~fKO-W4Ex2P8KA7;0q0Os_P`(+j={p1
z0T%ByNy!Roqe1(s?h)L8G>Y3Nq1-X<{FlYEIuDG$Bh)~;qaEe$grqs5cwHtn-IJ^<
zq$VVQ(0~|zCiMi=jL8`K8&Er?aFe2VgY1^iin!0_q9MX`K;R>tW?9(g(Tz64i`mj-
z&`>bK<l91sw+OBHi~~->|NY_%T>Zaad~H{LM)e0#DM|F}ivQj4L)8D!ssFfJhid|z
zYyo$9TK^A3Tg<M4ag0K>|If`~2E`t&#BAj84L8isBfD%My8Rx$9uIy{x4y9c7v33&
ziv1T>B=I#f<sg50F--c&5acE=dS@w;6LXBtvw~w705t$dN#?t2=l_+0`bf7P2j?t{
z&sZ7t|L6wSGwOfBf%LA}b2)BIp|W&(#r}DrsM|XGlc1Kk|3@Zo$Lkx5;p_E3E0!TG
zsQpSpeUb<6fKLq@kj3jp<A-dNTH+PaKFWy`dK0K(g}<s(To`Avy&aJerZI*ttz1$*
zqa`UjvBDn3#byN+TpkpVOOJshI8(KD&1IGmBOB~d#OYRPM0gXKT78;2GXO$GMoU$z
zHX4WNsdtHky6^}1%2>7=mZ+S~*Zx5M5Om6rg#3&##eKpqmy%&l(PCMXNL3M!xuCfj
zgOg<)A2EP3o1psMC0~q8GI5$gKnw~|j~a~^=FBIz2JOr@0ac$SE!MqgWFDu&G18{V
zM%t1bn7J&uEpaB}3v>v-F5Gt!zg9X%%@?QpkE(l0XSpXQOKX%L!L!;b^RcT^zI^rS
z;DJ{9Qg54j*j)$3ro4K334HN0kGp5wNSCN;_4184Zkq1XQ{Ew=msF4eOY>@p6C2tn
ztBojFbgD1`=<75ecbz$>9q9jgwJbxoMys4N`~XqODO)4e$EypG6?=_Xf4p!Aos4&o
zg{E8hBS}oJ>A3@ZExtWpi4yf1YTRfXiLWVbqPcnLxqDREsJYZp_OX;2>_%6(g|e{r
z5a|u%LXz&FCKo|a<Jf#Nk1)Cc7A<C`*A;v36XxPLtZy$F@^>V<5dS=^_sz;?i(ISY
zK+75juwJjnZ#w#EMvWq@@Pl){dWaX%FqcJPa?f$LLuGgA|L?qZOl&a!t>eZQUtnr|
zU)t!*PP?<|)$Zn3ciN3FUWcMm*nwJ6NF^EF12<4V)w?jQY)#g*Mem!COCXW(!qDHR
zO)L$sOtZ!#NCqWU%DRm6QMK0XZCRM6tqj$BL`!ocv1T7m6KoF=kfqYO0Yv&C_B!D(
z_jH!Qs*BQCoDTlkm4EKIm5onQ%Q;yEbHwXf^LV%Z@g05aTyi#SH-70?`r7_fXE^Ls
z_1*3j?<(D^*>mQQW4%Q(1pV7tjvQqQ%rxSj8$L;hk}=GaArO=<{i`DHFlj&aCRmZ4
zSe*qZTzC;(c>SK3i%n5xgn#dbx|Rc~uEllMQ6YZr%o9u`UO1!hL^~2LV9SE2@g8t+
zBa-1Fzsu6Cshbg0L{}&Oi|aE~h;aYf^2)q2e-=0V^&xwkHG^+alXrZer88NGkIbj{
zq62qY*Z3Ya@*yNt?`@zR*Vcy{>TZNWS&y!wRVMc5e)ZPql`Y=&bVOG2UUE#^op$@3
zPI9-CeAP+5?j(QcB;RzBKX#Ix+pq2De$poJ&U%}7fT%zc8PD1fy*uHjZ2+j_H?6*-
z4AK?%^O`RC4}<R9yHiI@-Zypl%{{+En%W_Hrhk3#z-q9hH=J2`gZCoaN}d1W_O@8r
zqhvq8P867)iW{GL4~Zo;FvYLAJ<<IjjwGprHy(n=cAbOkRkl15a{)gQIO7YXG&$iI
zALmVTtsc0fVZO{bAeZQK#z~PjYkuuJ<nLjw^2_%q0X46ZEw%ZF-V8T$*k+qX)n_~G
zTw8h<y0njrS+@022VQ4*^J(W62aEOjsOVkSW<n>T*}j4VtktH&UvJVKzmJ*Cs@p6k
zv~gWSp&K;MXH%x~C;%&xs4NFrlyjV}Z1P_6lUMTse8?xtoMkD4&>~>u3>%U2h?q}G
zKUoVaqV=nBR;@pYNI?phE;)nZ#KLlpINf=lJN6i;gYb<|dMn{iOk_`MB3Ct@%07m}
zY1K<me6!3~u<FbOPmD~U>)^BGfCpfi4T*v4l33zs{tlMT_DF**PB1*hlm}m$XOpoY
z=se;-S%bwedu!M^iBm7ye;H*48hc>MkVwP-(n?IlExcTvD8{FQuy@^S<)?xuJ7qsO
zW3<K!U8C!<7>c@-N5_9MFE4op7Yx)r19I2GFa=n_E9Na*&v9Q?lX?(VJ4Ur9MZpl;
z0oD$8Nx$egR2_QgDk;RpkN%*O^b2c86tGLC&;1Oia03w0`egbkRf{fqCKm*RXF3vi
zwDZmF+x*AV^c@Zw%tRdb3>W;+g)5(JxK?r?t&K9k7+OwaX;sXdqTfPqc#Y7mY#q_y
z<Rj_JO1xotO6l=4q6BUW$i4z5u*0--Jp-s6O&G(z%6DNRdZ^t*$uVSZEiDm-fgCY=
zY-3sgUiL#mS4hWD2{m2upAMftOAe{~)6_OQ&&g2LljC832=(94MXt6UK7>Y0_Z~-J
z8Y#i35R#d?C*juV%iqBsq9;cR-1PG~(7Z5kpeymt)FfJ2#gTgCJ%1AheK}l%cCw_N
zp_deDb=~Juoa`(wB`TI9O|9G4lcZZ(t{au(Ik|=v5G7PAo4wu40!SKa1-GQ@fA%)A
z@eaeB>iSw(1KOLd-??tu=|lsr@B^;}b0_uWlIp3JTX3yke5keVN)OsRjL?t^Mpo%m
zFws|TT-H6#7_C`$t8BvNP_<lwv;a8fcwW`#%T9<fz}3qwbZGj+E?kzlcY8V|@ln~5
z1=&Kj5+gtK*j=bnU@Q5+dY%wGtEP&KXwhDByrqyP^kmE9scgMYKJeV~%n?6#<PJN0
zcv%Um3V2LqEji$FZpp;+K~t=&_R?J^r*_3qr-(@GaY;`nnooW_dfMznSYR+mYgdVI
zG{W5(x7m|w+TV)QKs8H!R}~3b63@7>HQ7jp34_E=SCcD+mjPgrCtKj(m2!z1lk-KC
zzhWEtZKEqK?XwHp7xWcv)n%TQ^2NrTB|GOcY@IJqkqwtW*1h?fpJU*`L#iNXa_hBi
zy_>qY(QI&Tct-)RV(u#huENttqz$Aic9}SBhQv)ixQg44Td7^gsOMfVHb*e;=7mtf
z@b<d*i0_jQT+}w*C!QS+W#k;;ldeC<O{2xl*L&3nPn(oAlI$q*@s<&Xt=BvqYhDw6
z&fEVOLaZC+rt@ucEfg54RO;Ei_iiehvQe9K8k*dG)AKDI5}7<T<`)%m-2C8|uNiFf
z4VCfXq9?~qJze}Ppg*s*wh!!(ck9zA^Q~avLGqffZ%mtSL9wEfVYIn2tgycy8gjJO
zT0FLDUYjq%Eu+mFON7n5hHK_Onlyjp#;R^3TW;OF!N%|;n)gK`G|peK`GT$WdAFBt
zv7iewJ1A-k7re)Og)b|c;&rfVoo>NP@^paHMOho2bc_JI)vVkE{v*Q2Geb^S%>$QG
zL=Jj#YJm89R#cKyjBb^uoF@fhh?qXIafjU;oVS%o^3|Y83%Fqlm1{^F3reNO77Wtr
zAaPf$6_nVs^c4BDjTuqLrL%1L5+A%;OiI`{;Eq~-EVlc(%v&0}tE#g`nVx3LOGM)q
zCxE$r_3}ySEU&B?3a$%U4h9a%swvU|GZg0Y*3{hV1`yT+uBdlC8`2BbZtx`0EW6NL
zr;c%F>eYcSDs!W|jEf>grps;_D0>tY%tguiIz%?Ust(-^YgLFcGmG|)Qc)QL&ye7)
zg)<@u%1*NhZv}~1cODBo*_hL(0!GkUn<z2A)P_r}aeqEw;G3`S-o6b3$xX2;YP?ym
z;HNqq2{e#Z8E~Jkw|4MX6+cX_gC7TOn3ZZ<>dAQv#f?9anW5Y2Mw=)sFI7{?PuWRf
zMY5T$u4v<SQhn~HZm2+ui)oZS6}rQ+a<}AdHJAqbsycn%vvqA-#dnzTMc7pvQ4@$t
zz04$Spd_JFj~SOUk9F6qsZi3z47mX78R`!nJyIATPMBdvb-<ni*ze4*@o^=A?9~8S
zr#C_$1a1<e^ej@<@-QA4Lc>)RYnik7hUnGOI!;vxFjnobU~);tSAgMQ+*_x8=CTIM
zES>hV<zz6==eUfv+H}03fBg{IV=bOa>lL@*uv(pAj;fmU!NUvyKC#siA<=~xNuX2^
zNJY|@HCkqhVpMN)?P$9nV{p}Q7x9@NC_>xyF_O*&qdLn9Q(^PGhGG)5*=k0!{BFq@
zR&Yuvo9&ha%Ir9M$*rpwv<?l$MpS7iSk9&Z9^H%JQlbUrN9(I;Bk&wobzK8yvR-to
z1QJO{Xo17NRBWftbV}SD`qWeh^}uSX+3kpfoMZtUN;fULf+(m|!1S}*+i<&{A)f+D
zN!EewZB96|a16|Vht+2WhC`)*(su^P7)jB@%5ayGk9e>N2dFYDLmZpVSpXkKggNjn
zM|;Z4z0tsH_?*qv7uUI#ddRnng7a0dM%_nwZEruCq)UCy$$T&?VSrcTKmPmw^&kKJ
zztR6C^w9QpZ&`8iy%i3K%KZ2BGBO=lBwwd);kx=Tv--JJ=g@j81>EOYR2r2``PJjP
zX&-e8t6hx8%qcKj1b6!%G0La1VGUVO2$b2j78xVjzm-gtrTSEAVqD4H9$#X0aj=#3
zZUv)lH?Fu2jBfY(;XvYR;40p3V=rWN{A4yZq21lErm%aBpqNtsThR>6FDo-}&E;@|
z8=->7wVCMm+@R-|O@Pzg+lXfsm-9nJ$$)ZiV1+geKc4#eWn<GI*1+4e4FPU53^v1C
zyS~YA0KU<W17m}SjzY10hz}2vM+T6bOgHa8ISBDZogA+R9p1|7Y{yzV7Bq>Ra-gNa
zDCwQR=Ms?Y209R9RSHz`=#BJ&=atb-IBleq2lB99O6)qQe|pRbc2#zFZew2q3!v)e
zz!Q%b5gqhS#HzND;A6g2eH*75L?D2>Abv@n&ov^aHueK%W%)BSD1Wa1Ricir2rjyD
zK+;G3uVVkMjh-@#xHo{uz`KFf`x9q?R_tteRrr?qBOGhqW%~X)fH4;G3dzE&P^HXY
zNLuod!-TgExR~wX)iZF6<lds^x;q#l4dt0@wjD;m3D^v9eP)+eO%OU@0pi1Jmf-k>
zei+M3ySE2c1NxySnpJF)L9He3v_wWdcvx8!Gxlzk8K?%N4>#@s@7cEuQ$xD}W41qf
z4^#r*hnx1mpR-Feg(c_1d>r~cN-_mmpq;_mpvqvauIfM(TR)6vfF1hO+b7)m1}?PL
zo14u5Q@n?Z1yy2sfGrKVI;{)8oaPe^yvp!#4p*LedS)rHYe2$$f{YPFc9bkDAsfWo
z_2o5>gMM%p-}&-dr|CsrzPWsEp{06p1#SuKP#_ooy?e>lNjlzYBf;1O!oe}(*4Dx7
zZ92&%ifSwLQ*bfOjF*e+ZCDrWahgsh3?|sZ(4zLOCi^5fo?IsinDfI2ouF1G4iAw_
z#gWawbSCRX@Vzx24%TA3<-Toy`>}RY<E;D#J%M|*@3>o-#dSL>mS#|_uZ^)Xr^=Gu
zW3StBGq5YBNP2-Cz$KgE0#(he!5YaDHESYC))y#dY)+fC3#99Fl>xUpD%!hi22xp-
zy7`c?$X@qz$!3ns*J7sUXbZe|@U&|UxzTd)d)8Jq@L-lmN(oV{*fEs39=f*8P1vEo
z!%zT{NW2Yb0UKBb`PdM!WWt6?y3_<5mUVTBuDWEonqm=&vjGTinX?;@)z>jKQwW}O
z?CpuD*IY(Oj{$bGfUXy+;rtCCzIET-KVQw>h`&6dypCU2<2B0OG@Z9JC;)L__r6bB
zhycrxM={vJ5(3t)ZICflUy7f)MUI9o#+cvf+W@(`REY5p=I0&*Zg9n8=L4_b#wZ&O
z<+_5h;X!k62D3q8;-d_~P!myVN1+PVn!H#K3HaiR{ly}^>@hW>36zfR;q&{*wEBTM
zG3X>YI+7>9PbAi@#b5Xk61Owjt>KsN835+hV)Ef%`J;PZzMl(G<#Ls{lCRir#fD)q
z7eGtnGFzpPv%2v(4C1vhVW`w={uj{b)j${QueN{Rv8y47cVT_3c8j6yvd|&uBs*pB
zJX&ME)4#Z>yHFCTe?_No1LwT=Y=~u;6o=bl{vfnJ%x<`sta<A3Zu`Pw16ZiD+!qxs
zt_|RH0w`=Zu|0m!@{scWti%Xf!5M0|xQxx)55N$WRM0wQBlh`R&FcW;ZL~aajF<j!
zM}&XS+4fEG1DmZME^9_lL%%A5@&+g|>le8Ct=t4WzSf=>C^{PLO|hBtki7mA!pmEH
z&?qF*>uQbT_uJb-iUSlI4f@1ghRCg4$@%M=co16a!J<l=gN7X7Jm~U!)}9#lwIj+^
z=pB${RkgT}ui!+OkPU1xI-p4dO*0XKM!pbS6vR<a>5c|;02*G+)**G|;q`zzpB<t8
zs%t{9((3OB7biwzY%MsRzO@rh1}=s6T0Geth<CxRK5f3Y3Dv7XZieQD5VNl;;j}lp
zA7pE6yc|3Sh+Cqr&jaB<<BjfK+$bFG)^(T04IL9hqf+~$oe1CCR@>8!7=cUKEy7+y
zMm3vz>oqT$oCrd#=zNbDvITst<kC3CY35^Hu1*ldo6mw(2+zBI@LIOGKjeOohX)_`
ziM4*kg|aDgfxA__Q&nY3{F~rd?FEO=f3dwC^erf8OE5UO+%SRah~*4;4}~39)ZK?i
zPZG0Lnk|H6p6j@ARc$|_duo54x6B#hW_-DQ?U)b{{o>8KC_j9Bbo4^_-g!^9Pc<*g
zjnekKWYEhokzM|$9=$={b$l7)-vfqzp9Z*z07O8$zaOp#j^MPmKd=@++uqFLKPd#k
zga?Z+112B8V<w*~7A`;hIDnftvT=au>SuM_Ed6+?Z|{-#c)@IGmH!GRWu2_~3Ob1n
z)3d#mC1~3RHGJ>x?SS#+=@7%P=E6hxZe8eyo8opW=w|!lB19`3)#f}r=0w0X5v{Cj
z{okHva%U&{vInsr^jl6z>l5?#3>NW83Gg(o=2&CI4LeNDU`3Pz3z;$@cbmC~8psb`
z?ZHWWqG}j3J59=(;ls8&N>$cO4wK`}^y@3#{ACs5#+kNacgS2hEe9aRs(b>Sv_WLT
zbmz%c-dWpio#@`*@t!N!pLT4+$z-r_XZ?7A%Mp`_baU1txRCM_yn3yAu&XJ6)!SLy
zOL3ofeV;cR@iqNdu;k$Z_ZYK5xPr);#@w(P`&y0jYIa1-QrVIucvr;1uV&&K#$RKO
zzI-obDuAc+RFpq=cRNnKcf0<2kT{8>;!u3EukC}6R&i~^5GBRqZa{PxT7qBwq^HU_
zPW(K)x=$~hllZ50%e$Fh)w7x&fh*v7R@uHM)0ljp+^(o6oL)k{*y_mg>?J|zP#GaT
z4dyJ+h#}GUz4fR<w>)i~2)m<x%mN-8uGOqS6(>!rcikCw%ZkA7)#=$P{@pxb>+Zzx
zFLOnBCOC;6yO+YZxDV%TIRtC|#Z?Q$zW08$r0OzWwnwa$mObuW61iuZeclqTM6t{4
zCmZHgS&MY%v3-jEDsXtdkpk-@HCG+C6KZ#jpR7O`Xwz4_cl<F5wogs>EX-`H<1^L!
zx?P{^HBL8n$h?6XsYZEJbpfy8AXuVVR_SOJKVyx88nvii$U;J!LPMK!w&~aH51YdK
z2Fqelt`pIX!G1N=v)Tt5DT}IC5YXn8-I>?Y&l~k9h|jsYQ`OFF)FrKTK%8B%60#-e
zuR#?*sJf_54G?~PZ0qxy>2r-Dz>EF*A@hY?YjZEE$VvL^L|Ro+5ry8g@Q%N@l00t+
zRETKv_0bCJ&iSCwK|xz+rM7zsNbB)dNLx9GG5}xtJf!s_wLF2x|Hr9$K1rz~${?J&
zJzLnC<qxQ>s@AHc_KM?HRlmA^8l`R4^&*ar+Y8$K;2F+C$tn&AS@vSZh07*dq*}Y0
z-{i;;!x&}N$vnMe2G=VkHmXgw?9`JW5R#$3L~p8}|1=}gPt|R4lnR2uPl_?!85|DT
z69$emX=<}=xzn#x!!Tf;+S+ffjJZk1oN)9V`sm$DNfmEkc~s<%@j846S`$9h%Vjp5
zv(|3sTleF;dqHvc`1ijTc7Rt&1L3RsgUW)m-PEujM%9M{6Xn{!7q)5BmT@@%e$x17
zic+ncgA=@vi1ao8XJ_}e#5e~qLJa7m2N{ZHN%r-{7nXw=>PMQA+sSqU7~MHdC0&u$
zqi(W;ZbvpQl#<bWqQ8jp2A||M!qYpj5Fuzx+?of<h2KbHGB3(yt9kXgAu_<5_MSTt
zze=&P=?0Dljh#MN*jDE#GT!HV7DDXS6H>X_Jc1%Hdiaq?J}PVC^Tq}6BdI#9#I-T5
zlH2i7&l^?8Gt5>acEbN`#~`dWIti`agp<aEhoBvOy?z>;Hk`eed8MuhWYNT*`ND!;
zBuSp8W1MRo!O5jWFT1EUs@c3M)A3u5A{;Yv&l%mo++d%!DE@$hskpzKq~&?zR`Oz1
zGFSqqCRQhEoC9`@wy+yHtonA&--po}fm?V3_0hM!HjYgQ2ExGnOUYUxKI9sKQ?{)Y
z-pHH=5_K`qI9&`;_a=qpsg3H5Q`nk!c)QYdt!`8AUFbNk6TH65!08*#<zh@6qS`LI
zi1#kj=|tiT5t+TnG&co(DK6xE#H_181Q(?4vBK5SW#^(l<icmaZ4G>C4KH+syFz4!
zf=nAGFg%?FDGX;xHSgRFGa0fbPf{=PRC`ycEAkTF@~JPl4-99eKRV{69z2x*$mm0R
z6ntKvTCgsw;CfEM+6;i2fCBf#=In6OOG_ltZl#MeB7pSYy3A`gsv}CW_O(y4#^H~g
zV2xV{>vs9<Y@c!j;FYQDbo06lcGdoewSQcayv;RNM-_|&+u@}F2Rh6Yw}gV#KFG@f
zHzSrVjm^cA0rzp3c$A7>xVtnyLUxM|;$L~I+(-H$Zc&`%k+#4RXO{@No^6isy*9vC
zV=>pal}w<j%V`GVfLPXQTQtsAoNv#(p_IW274ll3r3y>Oe)oF4t)%A2AxPx&O$k$n
zn}#uOnh<B%y%$9uXUj?7#T!@fmR*{}U|K30(~8o}AO%GbF&s<@q+*796cQ68fE%99
zhL*H^LrS+Og`44DuBCFTP2YyRFZD^=G(DA1*yb{)RkBiTn$Kl<ZCbJ*+l5VE)eC1!
z%>S;)XmL4T7QHB`MLd<@Tr@O*r}D5CA2q-!-k62GKD+rE9&s;usyMI?^>tmaUBmHZ
z>@)$a?W}7k!U0wFyWx2`yaD!Wm}@<qY#ddD!^*d-?4#j(*$FCjdTp>J!ZU@(UZPNu
z$p_8`?4r9qKR#%T3o2Nk)o7@CIL{cxGY0Q$&9A`M5^$GKMBQv(4ZB&3&-x2zQ$WV{
z%y2Y$&s9*%ZVI01RNrAo>QC);Xey00aD;F)dkH%7NkEN1pI?F(<~VifFn#r}in`}h
z)w*hAJ9xxB#fy)@8I?lXCWY_>NAm~(7o85_Z~G4WcD<5?W!zDG-gQJ?t|2HV^jGmv
zHll}xsE)4|XS{5u`MYK(39|Hh&m<-cRmA#$69sWlH#{J!SAp@bP1)cnfGN6jO`;?z
zrFvKHpIQ%gMYI2+KC6LcG-%Ygo-?hq&hoZd$MkQ+mq2VFw1va0*s!4F)>vDIL=&LY
z8j3#=z)=6(QADbaq6!POtDTA(bLKTx%wPnpUl0mf4%b3(ePnH!ZA>@Ku;Po;bd)7Q
zT|tuQe>J@!uA(VX(n@ftyF`&l`d^LY<MRs_4H_htj%&nYqbEUKwx8p#C05ej1woS<
zDp`}BdVK)3(UEHztmBb{d*1~%(pOg`x2}vcs9+fcDEc7>+HeU&V!@ahS1%4bUD$6f
z3vX0o-T+nLUF=R>lgci%BfJauGgO_Bo&U`V&-XeGjRi6${g>p0&ml!$sjKzLzJE=A
z?+P+aFsf!n3~hFz#MK^a=2s_;)<eC=cL7PD9nUXyB(l2`##eWOSm#b%*l}k)6u5I$
zaBd{#8Zv|kb=%v4PUIgc=-vcgiOnsc@LNGZGU+#1H}UJPm3SF3qZx?1&30AR71X28
zI4>VB?Or`Aa_TGcufu8z1>k0<E`55tu}SC!!*DN7bN&wzcZo9==DQ@ZgoCa5oN<M6
z;+Tvey<YEn$iGITD#_NSN`_Y^|A+0}nn5uxB@dh8A|gKk)2d`%QCXSxmcLG*{ne7|
z=J}8`Kx@)0597wdY`syPMY@h)!g6kfP6f@G-C_Sx60c(F?(uCD+vl5n!2Kih)9nLm
zTIJr~A~i-$K8%~ly=*^A{ufSjE6FNqvsQeP;ES3+LF`>mE`dLeK1t|(^l3uxW)7&j
zIU9{@Q6L-jm~wSc<i8p_yIw+$Ahhj*k17;qH3T>|SvkhbmcfQTED%|b*5u_!SIEn2
z)hx7{Yb9o1(r~x0mze{&?MP@2Ct~MXsX27I<|FbClAbqiL?4|h{OV?*x{@WXE<;?H
z94?C50}FqRR9z9OBfl<NUpHkRFIvagt444YkJf%Fsw{q*w7qfaDxK`;6<*`McD>hH
zMI0B52xe9koI_0be38_G#q^T>xAZSm=BE*~iz3Jv+{}g{ZT1^+P7D?DBrqG|QVX8z
z3Um!|w)6NX&IdvI7LcCkb3?>v+vh>9WO{6eTb<A``C;)8L<3v{tMDs@oGcfWl%ckh
zN<R&<#1fdHu&f;2q_9!5vjQ>Iqb!0+BUS==#r6_o-Y+gLdS<WgjkCA?aWN|UBq3%%
zGopzs`xjQ%Ag*h3EA`L$l+jUON>0}ou`6&(3_lpLfDd<obm^EKsR)T#dx?k-NqL^K
z<nIb!Dukz6ZZxjO+!>HY+6?v`HhJ(B3z&0F(v3SasEre_O++okY*sd-4b5eOJn;dT
zeQDMq05!Wl19EP|RB(gr*uYS9u0S{Z#3R%FWtETKNYH1avC|`YN@t-u{OxTfxqi;d
zY{_h1nXHhNki#%s^~1(4*JL=&nai=QlSXx|B=PNRRxDFdq#*<4&?Oha*!Pm@CATi_
zG7qXN!mb~ZH~fh@fuzV<Uil2bfr9p`o$ZH{!SYdMc18Esh(3$pRVTf$o4tG%IvqVr
z`R-QDRJ3`04eSm^ExqA%0_?vPyDdo#f#b)9S}w8^b|#w_#0pfaas7DwVpH*rW00tG
z8-VcIt?+C1V9DBz3T*0zNm;K7U%NUCOLfzHXp~tv8>q(+WNDndnHDQ-)4fJlM~>B}
zTk$*QlD_YK$9`xt#((^NC>i29$#8uohi$6h)og|;v?bIM7H39Xh8#Yog7>kdkqTs}
zg@>YA<KA$k^wDz?##eC*%)R+s^Q|n0zR^LNJ%4HKA<4p24zJ{+Ufb{fpoxz3Wp&|r
z0o27L+!<8q14-moCdYb7<}*FRYwl!U59E^&st}pROU+3k0EKQHV(`$)DJRLmv1&A8
zXd~xid$tfv0UAyfq1*C^zH-g3FKBZE#;k6)!Czq`q6=?E3ps9t+T{Z{jv*IEKx$=6
zD89T~<Yn<j9NE;{Y;A?Fp9b64)-a7JCP9^v-DqG|DV(2bYYoqxhuU_|g|;gdTc2)+
z)q*eLUy>)bUw=ssFK0`Vp?{GmRA#Ycf3aviTcwklCvFc~A^)K9i^ui+W$llR4{q{=
zC1)i^Kx4e6)M(I-)`ErS|M>s@zxlua*Z)rcC63(Z8lclZVLT2-cM#RuFZKuaAh!{E
z?ftNtwYe=?0&6T<qZ>7*pK$kyq8pfGP^Dc2pH%0MMN(JiS;1bJVP)0-a({}8Y;ky=
z(cK$O=)4^7Tv@d7tXLAiNNpQlJJZff_Odrdzo&a+u};H=x1^nT-AIsKj(TmNNlrLd
zjM#8aSG;RoPHb_uJQN;=170pRaGOdy%ix2Q7}^=r>uFvx-RH`PbD~i!i#i7BKmL#Z
zGYPpPW{#A};wXoRbpwqM+JjH(=sRC|x`WlBoE?yBZ?ZiQhj+_{P}T46?exCt-EPcQ
z)A=R;*xjLD<tTrXFS|4`i`hMTNRJyNVa_MTa+05XfA0>;=v^CZ>#*@EJEKj5qOfwN
z8IIEBoNA`;@&aKo|Lg7E?jL%)nk}F?DX6#ScyYJ4LoashO~wBepHP?Y{-JlL*<hrR
z57tvYC1DrWc%`*I>h$^Uovr@<_esX$Oke&)bARaFwcbpNSurWj`uZ<k@AkfldU7k+
zXmz*9{qusl<Zg+R>^yy&7ZM(CLWcR81^hBH0<7QcS`D#5iCII2SKcAav>a}32Am9_
zaCz^6yitLJ3UiQX0$6yW+lABE+uM^1Je@7YHiMK@r!~_+O#?bW!lS^(J3GySFH$fi
zz{-VBncYdh<3_}BTKN)Hk@KvxHIEUpS4gwqXME!Y+;ABt^0QeHpL$=shEZYu^r`yv
zInu>^SRlx4W?r5Z8^}*HiWHE6$$k<mXN4|=PW-HMqW|~xj=<h5l{<;(O74C7BX4{5
z><=0dKlRF|)STPpKdPrY9Nnv3Qi^A<Q~=yScBKjPobMX67(>o$hKKp3Z};iCv>!D5
zgi)FNqO8r@q)e)+hoAD0F3X2DfsIibbIpC@9DB8V)K3m_9_-WD!9_Ia96hKLRTZS3
zIWHE8jg{{vPi$HhW5Z*BSNp0}aG_W8as4%77J<?oJAhc=q{x@cP>f)x)hR=ja-_>*
zrkB)FmQK4TVhgKG|7PjAcEU`|d!#QDj%DRaLxGh;c<Ku>N|wB=Ey%lPqjbukLs2Oc
zNJSG=Th7hL+OP%L%Ab3go~vhs13fnj&n^nIOJ`_&=~p)xU-ovBMuPPwZ?j1;$MRM*
z0WOURiB}stzz`*1la~1;Uq<76B+|f5#(0I!gpV-8&$A|um=F%Sjx{A4hsNPD?3Z;W
zJ~QEztTrlGNN_$#zzT3^SU3&WZxgiva2M@_A1&b9Qqn!X1lBodQeKv8M7EpUXXS2i
zzcLvmxoK}*@nz})zMqMP<fnSHaV?gyF0P`_q7n~hC9}JZa3R^MSr$z|)HA&Ad&5R_
z62U-iSh`g;M7486=p$|=_53&U@a!W%b*vX$rf)LFdC%yo2Ir8UibDZCDnS)*>2*gl
zO|v=`8b<3oMz+lfvoy;j40Q9uUE|CZJlYXH(F=q6+FDder@%iYzzENmm#PPlD_>x)
zsb~$~Wr~xk-h{s1ACHr%?gyKCB%Z5YMbszO0kev-Bwh>|86+#6smm;j>_s{Y*{|Qn
z7bz|5BMkgxbtZA;c9m+f6o6>^YkJRJmr;D&`u(deLlTgbF2mnFu1(Ga^L?|^Vw0vG
zt|pq66d`!UswCz+y@>WoQ}YnAbvjFqr@0>S<ZML~ge)ueNc?kXW>(lINS<cqi()di
ziiA}(BgRuJ{W<LxzE8|XJdOLzv4q4&<L`u|<+-E~lOmb#^7V5P3!0H)AG3v6Pz1f#
zf92;e@cM$3EaY7A)>TUO!(i)^5{(_U$d<+AZ59xX#)0fkq|!;()a;gAt!jQ*5aDFc
zBN(&urS~uKuh;5A6dRmR;HNWoF()ii+k&fpK{AY)g`t01sfu;E{Z-%0>6N$4kpYq7
z^c0qP&6G<r{8I)nS{Kgon0arQ6r#(7B=Jt9<?bZ0_FfsYqB23%!HZK#!A46aveh<*
zP&rh@K2?I(NPojfaKEB#^c@$B#px?b#vcYUui8Xu#`r^9q8e2OR%uPkpo?**Cv2`~
zmK#iSLot@|TvW=19glA7)np9mw*HJ<r?0+=>XrKI(GJe%4LCQ4N;)>+cxLLZc;Yyj
zxMj`+ZF6m`*C}Ig+0qZBd%+~eGzqdvu2uphwRf5c@}OIg&`+{3H{FRy>Nc^f8I+2q
z#+@*X3e7QGr!Vp{>)E=qE)t$6q0yuFk5w4lO1^TthM9;)z+@l;>pG)hjJNI}^M~9(
ziKUURdtjd%jdkHzV*9xfPzs&JAQ*p>6dc~d(S^-0+~LcO9BMb&-ZrHVI|)Et1a?S#
zW~-v2vXF}JSmh$QHl7|~kGL-7$J|{IOlUBVDEPv0YeD&+H!E9x`&aRH+uL;vI9I)i
z8LL@EN75gKDM;*&WEO{6MTA0^cI)2!!tK>LRFv6hk+J<BVVR$SJCO<pVTISUw+~No
zJlEt?gSY7-$AKE8obp-T`Jvp>Cv85eX{afuY0|1KX&>$0%juLMJVtPDS<Ujlt@O~P
z0SVJYtNaP`OnL^?H7LFv>HP@QaV*?z8KidQFZs-{d}_bL$q^MjErq3(n!+|kq-!Ol
z0qLpS?3hPRFvw2AZj6pLb}QpGmV^r`mWOBX_@OTfuGnFDaG?UppM|N~T4a^ZnddRr
z0-qOv+|MLZ#ZM2v25)Jv97!WNV41>eWty_0X{D?VRVG^BEZI7Ic>m?Yqru_+lcTNV
zI8bLMwkfbj?*3sAyz?6-WH5_GN5vN&i|GIIW!Si6!ksK-ESYnCfq-be<<&Y`UlqO3
zX(qqE%c@F_B>>Y`sOAlpIU{6~Y>Br3WrH_ox#2v@4*B)R(CVqLef=2@k2tk!{IrF}
zc(vbBgLr}yN8`~XvmDa~5PI5B{)1x>RIJ&~*Mmi2hdQ9J!NJDIZ4(+X{X`p9oObGC
zs_`Y-VD8Icn7VFI8pwcGr5&E*18dYiUkA1MW?(&YlN=M-hw%*Q?AXk5rnz&v9?#Az
zc{NK(GgX3nI)24zyKgw$HZfDGlJ?C`Gi<U>c$IN<X@+pA<ZWK&C#+q&ltfs^#p&ru
zkuF%6z3D8o0MiZ1u^-Fvk3^l=T5u&AP}KGNHZuvA<@Yo{v;6O}2l>*CeWkdS00jA!
z01xf#8Zsil@q%21)WV7g^fdpw9QZ)@>>@0=&KC<3-XvJ<C42VRb@bKOT%*1kEc8`8
zhKGDN)2yGdE8Gk_XkIW=3NMjxH>gd6+5?EKO;e~-?3esTs_rMptnw~vzhf10X<cAW
zel-_pTr4Tdh002g2$_#mdr95+IXfXXO*(RSa3R0KWe&J}c^NO7K1>{tw_H1_>*p54
zarH6#%4Q2$tlI<dUITNWt!)mUbkC(6H~Ij9{}ta`Cw5>kcGc|5uGrljr1?N^a~koc
zowt9`O-ndK1`a1w-*bTnIHV&3H>txrZPa_`n}Hw)3`%)LL}6gmxppw}c~?IV7wk?K
zDdU$pTZ{C)>~Rsf_UChVnC5d16;qjn!xQ3t?#3hgT*}i|6J79t*z=he@c_}Ktiob{
zZ_XJq;v!|#<~IX*!%bqx-GYQ*WpVN!y8BV4==R_WuCSJR#W$>U(p_2IWP|&u9MZ1_
z8#H9`ii=M!k%DnOD<4|HLC&ysCa+t!WD`xq5l$ZqW1v5RD<*SU_TJ{~{&a$1)yOuw
ze$7@qY=ax9=3Zxq+N8PubyEV8gF7ECfZR<EOk^B63*o5v_X_`Ox0OJIvFeO7@FGYF
zAzEH0pFlfhml@l<dDA(H+N<{C;6Y>GxbK{eeeA2ZsG;xL6K1PfIUx~m!Q7dcuB?Y%
z<kMmd=fAafN5zC_gDL{jWQ4mwo^Ebjw54=O3i~@2L4TE(=hW8nB4d;p7pLS3m&Wn?
zSx63+JQ67M=x|?7d<t!>_hH8K7;O#e7_WJWH^HvP8(sMNV!Zg_7IJk}DyeQBR~VMW
zcP^M*uG<I2#f%XYX#oHA;6-HOfsr|~`m?V&^R2{dIK%&*_xPZ{7?z3uC9)=#4K2WC
zC*$G~de0J`NObSiF_2>)oU|kGMr~CV<!~H1T}?F0!{`l>*7<6|y05aw;c}|?u52c;
zv5P!?TnA!!XE2)NF@q;r7?1_j&k~)mg$SU_i^6fvNG_305$6>OaeEq;vcDLevog}x
z(|FEeL&f>4j5%V@-pYYZwU#v6#~Ew3XhvoK3hq--u>?=fMW1a8$pM%;Cq3)jIN0EO
z-s8B!@h`Ho)g)aYNQ~F=DQyp@!hseE=QSjJrBuc>t!Ak;c2YBX_&u%<o*fzroGr<Y
zwk$4E&h`-mS|D+?PWIZGVX8OI>R3LHCY6;(DI0Ntv^XtP)fCG^h`%b!Vw6Ki;N}w>
zHO18s&*N$~Cdu2I`O3OZg^WBrIk<Oas1NNVh$RQ2Qz>kHRW^6W)61UwxfHvp#3}LW
z#8qjjTg*IpeThDG+DH5reE?mDQ|e|<R6c6*;VWj1ZHuMaE10;zzJ}e(TsrYTA32t&
zWL%T@(D3%n-pQqiWW?6tP6+6MB*2KVr8AH-mw`hk=s|ij96u+f<B^5`lQ=fxq7}2)
z6c(#=X%RXlR6rJg$kI3wNZQ$a-bf@rR^o~(&x8>eXj--YZFOKO2Y=(p8$1r0Ys)@K
z6Lu!1>Pq%}=Z!}#!ur;cpmr$X7m_ADb;zu}1i~(V81+@m_<L|u4T5s0sQJ4&<Kyw;
z)yeCYEz|kxBwi+>x4WC_uqYa@1FhLSH;`jpacb;NPZ2xEK`Y1J3H9c4yfg5Yn)<m<
zS`V^WK`U@9-nBQcdv_pqqWXHN!XJy9S9WJ`R&1>3hqOHZOjRBJ<;l%!`f5=AZL(q7
z=r%ZJxWjTiVgL=eyZa9VI^}P&MRa}N?a_LQbZUf?StJrkfxw}HtF$E9#DVXdyvdoK
zo;u%E98i8W%~ISwOvz94MJeH_qO~m@cK#zEi;K<~ic@9{oPT`wHZ#eYP9a?`*}GgA
z>PMg~2(Oep<Ff*)S}D<Md_}`y?q*UHbBtqG#=*Z!$c1Q==$T*wBRG)mj%ijE)kXE}
z5Tu0Uuoh`NR=O^I<`b_Kh~-?;Q1YcY8LcL`1;&>oWhfYO3MiywAzm)06-iWh(sfU0
zZN8?#{D6E07|I<Piexy*cr>@<?=HtHo8e67e06dv&;vBua|A#w7pvv@C9^nVmVY@4
ziD@x9n9sV1<EBRc;2KrPmdWIr*6EA3HCQTNGXX>HK~97Y@?1$FmI(j{lOhXv;~Q$#
zK==BJi6ImhjVm6EgTM&3W2qlw?7+_8Fb3)ZBbJd^#ax_vDy*i$Q0b9N0#J><yiUse
zj5c7e@kb_nGZx5rP>@Zq^}@?hPFD%_mt39F$>0+fEqWK($voLwE54-?#$(<|GIa~v
zaoJcEr~d5NooXNGMxtYwlT^(CJ;#47PU`rD+Z>-9N&a)9BkZa@hY4A34An)&W&b#k
zR|6o4MVj5@5O*V>-LX(Gf3j&gJ!P;EHFtEBvp#lU1Ga;1va5JTfTTv7A?Mg%;x>y_
zIk^lq?LOZtd%s6=C~OQ%HEhuG0@NniPySlu;!cya;PSxXflPQb`Z_&3BL*JaRa<db
zWGfMwSzOu{=3~XWD&{=LmKatxoAkM-c+xZIx3xb$!K9lBP@zdWcNVH;v82vm#SOhR
zq1h(ZLrl2^D@~Wy4~CS0-H1oInqs?5eC^^zbP&^<M&oBQk4-b?<nj^)D`bgN`ayu7
zixWR<KZL!JsfUZ#Y8kwB#x=<>bq+Q~rtOh&g|z*J6eh<H;7UW&w?DcZv99gMMLItx
zR$%|fw&#Pg8L>fc@;Oniv{x+7`uwYJWe2I0rA<m@+X+n=v-w2&X1r?<Ev|eVv1n##
z1Pf<GQ`bElp&7`^<lq6DF)#$YIk%G+O_j!{GtL`xbFf?Z8;ifC2Uh!*0cnW4CTwGo
zX)^kVHE*UEs5zu}22PFvTL(rfII8{QpF&$<g*sekU1kwqXUU(fxnTm8f_0DwRx$26
zn@yL=xUjH&4L48zl)g<}_!0}--k(EkF`_hLXG=tjF?0;DR8*nIH!OV{R0B<iRPI0L
z+laMgio@W-cqcg>ip6C^c>Gi18_<rS@|6LH6Ir9gg$I-hD>>ZL`4}zx3Yi<IfUce@
z*%1wfIbl$po_LT+s>ApB_=DE%cchGf_8n|;;!eX`Qp#c70mjzWlD1Qr@CjlXeQApv
zeQDdmf7y_b=5T&zvb<A{<y&-w=fPQU1MA4Ov}ETc+Q+98;?_{>Y}^1WMConb!Wa6F
zA;!|CQF+j~N=windC1I}C)_>4x_~gw&PYIMG;q-Tt}2t(Ix$m<>3E<L1L`t&s61h@
zDCOGm%u(IuMVqu6FADuz^Ilk-%bqy-0N&wGhj4tM-FJ4ryvX>!>vhTMe$(Cg`dxCG
zmP?5~Uo1Hp7^Aa^CSIsnFi2=r5%fJt|9%-x3*QQUgR~Xj-|Yi>!2GCmdm*l*Y@|=d
z*_6Kwi72(!MH(u`N|GbOJA#i+c6!QYJ+%~svoD@Z#cWHW@u3BBQ9zDh^)O8=_$95M
zzG?GBF%J!VuAjcq(3TC8b+X{py^F-`MX=xYSY?RdkkyQVS09dZaS_s`;GT!(Ah(i*
z`g}uM%KMZ%)q&ETzaPFjd^mXU@Y(ahqvtONkDfgLdGPS3{U^hu&L=}Uar}_=-t$FH
z!`E)SZuRN+h;2k2G{9;z1P26tLT3t`J?e(`yV8@tygIo5=RY0Zuru)KFX#Y|#Iyx`
zy`^(h2VV}rv<?_JzTj}Pi}8uQvlh8J;{<Eru+@r%`m8kg3rML<54pMIWVKvU9l0Xn
za3g$4q8%z!*kY#oP6%EjB(|N(ONRZFYf`fZ!aFs%yO~}*GL4F0NOlAghV_`%Ymx$R
zN)MNSb3$7P{CMZo>0)xR0!pJmi-oiZ$Q<uskq&73-L!+hy`vD810U`J9Sd>|(brw~
zb$buX(ghZd<V{OwCRZ!B6}W!#C25?B^hKzY%p29*`)U8>!Tt|V9uA)EKYb|vyY}w5
z8NF=29`X<#h>&U%K{r%aD+LQU4wbmhw@Lw#x}0=t^aj=(nWgz;b;c07=2*tWpYylz
zGO+le@(kKa0Id~pKIN7Z8(ShxEHwrSrI-@ZSM9)W%(k1Kkg}45NQUz1x>aGL#dpF^
z5Z@q;#(r{)KR=!|yCqd1TAl`>tc1GHL1;f-d^+D}$Hl$^*fxWeQk%noj+??pu}RJA
zORRjOWy3>HJ9dO+DWL-1JbA(EoT=w8%vzuvPP?PN9=vs@ESw)hXVb+8@c0=~;YD6-
z)IZS*tWUqHqb^d-8OoQE*jHo}BASAy<Wiph=cA2_4*ASrE)vzWa9C;RxOeH~aEHzr
zcpds{O|Z`BY$&O~*JqRBgm<9wuIRQa8@o#SaVdAG5+NN6qsf^1Nlw=>jL@YocXRRI
zI8Wlyw|JAy89;)Kg;_aD=S=^3&EV?ESekI-#gvvR?Dd7@s3rF_OG{(;?3f7_JholG
z^nZWC5dq^tb#@uVs>?Inl^O1)T~SzePcFM?mOtrU1n>l1`ih@%nm)e!-ez6Xjkev4
z=4H8pf`2qwu~(wYq#9YV=p+;~+8E$<Uj6$TM!v?KZSy3FQ#dw56)@r7c6z&i{6p_{
z)1}C)fT9~NxlgxlDeMG8k0z7P7CXf8#g(<1kDfnoc9Ofhoc1nC{wD>_Y74X-&W?|=
zFw{^k)~EybXxzd(2C2Xxf{^-mVSZuPQ#r$I14RZ!YWuXH!@$s;cke_wT3uf^7V&BO
z4izBIqHr3G9~|m|8vXbda+IDagfNoqCSj5lJE6d`PV0M8yv^FI7g9M3*$Lj@c&Q8#
zD>CEDiVEVC=4xt9;FiTCFXZ^`HiD-Eb6t#(&MqGhk2E_m(-~E!h>}{4SGmfU4s((1
zX&sAOJ6}p5V&E`5)X8~ZlLI(e1X9ZxHh&H6`60-oyibD&v0<+-(bqs{le>cIzZB95
zDr^0B)@<PJ0%}h61vA=1rVikQ%#aw&(5ZaF@e8?i5bmyiW&h%Q#u*zxBsH%7tk$Bn
zGnl(7%>OLDw?%hbI%Gkcn_BzJ*J8;HjV<y(N)KFVr`v6NtLuG+?EW}&>qv@7Swx5E
zAL_&b8>8f&sO&<EM3Ft;@oaq}8KVso$>M{MOCi7o(=5Ae+7z_qj+j;8zA#>mj1bN;
zjrQQDvoY^D!Szo~X_B!zt-G)k?{-ajt%Z0vjTncD&l9c5&s<1h8r4g0B;)S*lZ%ZO
zVx`MPF0)|~hfYJvwaMt{u004i6$?lbGeB2)iinLx=p&B0yT0jTtGZKl+82ihVH_f`
zcGpcBdkTSt8kE@*bz)CFbS#Vo=P5s%!3!1j5*c2YCk5?n7{Jv89R@1VDN+9hTy8m-
z+*4(Z1AAPsRN}k^`5v75B7m9znvt5{0<WcV#rm+41O36KyMx*D``w%zY~QM_g89nQ
z7PY!}(LHBGqb1E2aF6lH%5(wE?6GOlLNOwMgO5|6`5+O!Zq`;T5G90#bsd-fi7vh(
z2`Wy#x*#Txse8mvohuG1gw29l-cw{xMIk~MloL-yZd4idtT58qw2zxKkF%A~*Bk+2
zMC38;9L#^x6R6LJ(q~-(Xi<vFK<IE6XJ^0=N}BiA=!vss&WUTz1wMx-wJC0=a;#KK
zQ6m1!ojWl1I$KU`^BC^EHhe_5C@xw<h3ZuFoS+tNT8%;0RpK_jzU`{y-7#GCiH0ol
zzSbw4gD2aASuud?`0%68JsrEe7zd~RLJ*m!Y=Bs1a`-pxqv%+enx%3!FxKl22tK>!
zfQZDq`GEZPX9GQ`)sjU1Z8td}uo_E^n@@?jg8Ejt7s8=9Xok8glZJ8gvoa&z<_rO7
zavq0<Z#DGiQTw5%k+pU>Upa{B=QuULJH8)%U?*qY@GMDjgr_^pPe10w4bx%WVf*Im
zySLqWOIkZb`7hgY?$Uqof!f>KTjq1Hs>DKymZ_h-$Y*9AYaDNU$GU{CFfjvt4JQya
zOQ@n<H2>J5KMVA^9V#xvN^d(N8+t6CRT7ix-7Ss=m*G7uV^UNnb_+%{ZpilqGWoJ7
zCSD83Dp`c?I6rNXcXBW9^pYPg>!^xXfoALnI@5UejBV%XBI=-sBcl;*aCj}ojZya>
zQ}5ow^1~VgHol7^fJ!3P`d?SXyyr03@2MX^F5@_3w{>>xnVo~VF+0NOvIA?lS3Jr&
zE*8!pi|x6ZIkCw2p+cQC)VgczA}z%j@`EF;T>66jPG<agnvqy?Dd=t_$xSZO%Tm1e
z#+gD|2&d-wFWwtwsfX~x84O%@1#rV-I{1QHd!C6MrAlIgaL4;Wz6E&bexv|VO<)9J
zqFQIEsnpk=J5E&3ghIGWR?#RIgnjQrLQL8g1xX}q=;@aYlN>BdByQt<c2=+$0OcUd
z(URP5L^6i0ID<+(;kHcONVoYJd@Sfq$L-!V@kD$v-eIGri(<uu%fsB!B8U?Us}ZZC
zk~4RFe^RW*z%7+Ay;u}UV8o&O>9qT};IOE`kOS*|ZKbNVXHBDX@HD;-*ND;^*3WUW
zOp&qI=e#4LH)Qlkr>(9rVtO-AHT8Fa@a<KTARO$fGbxtJ0bpu<g1_E|9pWwXrpZ+D
z0R1Z18Q5qM+cA5~hC~)W7Ma98d;2$gc^`A8A1`<Ys^vg!8g!~op}8|y+wxvvcx#%z
z>q-ON;<W1<Fs&i$1G#~&G=NyGqae+pzk)x$?Vw&(J-UR6)Wm%YwDGe`v-9yyNWe}v
z_@v9(E9wb}X{-Zt7&xhD6Lv(fXa=R5ij@cwkVaV``Nee88WyJ^1F!3uE-Sl?*qTip
zt>J8fxqt$ngLSqxR<L!&Ow^F3&${I=it2_>nzY@KkIYXO7i_xwqxpg_hq^4Az2<c!
z#U!?>kKnA1W9>lUmY&4xykRvC<C%I?S(#BW&Ma@?+FreKm1-*93e{(FNHqP_M_z*{
zJ8)&IwK?5LVDk=L*))x|Zg(o+B&;BfEYS1dey6Sxj$C;{9XkyN-aEo$BN%S6nhTcI
z!KpPYWk+$Jtq}Bpfl^7F@-!$W9H48ih2iprb&d<G;|8bz7n{K(VtRBFXo=y`!PAG&
zUmXnvU%<TAtYbbb5o}*LcgNLH#4hVs!wcL}rGHn;hL|o7;WsWk`p0b~c$^QcWVI#<
zV020n&nczJj6s{&)@|DIK$BsH8Cj)c*nC`wc-^emg`OK205Q}$(d_b8p}G@z5711l
zGO;ab3GgVdBq$I(YFSKOxOypE6f)1Dqk%hDTEdG1wurwn$TBy!TIJ)Ur9%(g{5d8u
zm@h;pILw&r-CUeKwGqb@S<pN?46?(Jb!KU<Kp5LeCTV(*Qg#ez3Ez^$<p@e#$p(4a
zX;VXQi0AgJZwBsl7(68%^~e+*Jx%;6H=C8d$KfDl<e|fq;4KBA54JuU<hqQ?uU~p>
zIt#a9;6`38%;fXu>;!A5l<bsQU$d`Z=Gb(C1Zc^zz&$VnyEZSk2jfM0x`Y*0KC7Bh
zWWsIFtoK{`d?DQlIvtk_DZacRnm7NHLn`IMT1fc+f!6CyOj(sB<}d*chZRrlR9%$S
z?^c5%0=HBnzTOiMr+t(Q4ye}v3xo=qN56WNp>4c+f}PPpc!@6(-%9SZult0m=7xRX
zEFjI<C!y{as$Vxk33k(=FxLSeHSr12yUY_6^h%v^OgG8&HhE!cX>=%5!TBQiP%<=l
zz634IlA)idKGtrCuaCU8I+#hCK77Ny_C2QVHc{wj=cndhuJwoq?(D%!e_ffLFgbAK
z%1xB1PLNp0yv}&85%a58w`6LMY7?)^z?se6(%@FrzU;kHd~_ik=Qnvpsk4{<)O1ST
zk2vK#*Y@LN*fy_CmitQA=YYOyXW^J9(E~oP!941^$@95cks@Qllk_B05>4d4S-#2V
z^K9JYCF1$!zkA7{JPjgUaF?V+C%Lpnt1l&fS>fEKE=-h}<~m9~m=-hm*UgFAf^bQq
zkpUNoB3=aH@ZdB!rqE)pX2y)N`Fp{hz+T;lE}me&i9fiy3iF}@SP#h;`N1-bE5jl3
z%o--ad6k?O6L%M^QwbGHim;pR97dZqFnsy#DNaq{iD~*ft75J?IQ6j|eB#x;lnI5>
z40ndAw1C%$W-es6APt15-XBNKt6q{!)dQt}RPm9Cu|KSG_$!zvk4KN1rhknJ(cL3G
z7w-e2nDn7QOC1%(<Ro3ZZrxhSU+q1O!NISJT1=gGJk=gWAT!YvcRa$RzyBHO$U&Lh
zvQMeaD=P91rVnRtJuC#3uk|A}uFSiWy0?1vbLXsPzHPn<1PZyjWp_}eoX`-2A=q~)
zv_BHZX8B&?`MH3Yp)Hi+gqI5NM2x>#dT|vu+ok(X%Lh)QCq5?5bCPBi#wK)~(9J@9
zk!rf~du?*%t#CAA8S(wu5Y(p@6iwXteKLp&Y6km_VcSyCop1V)`mQ@K<_Hk&juz19
zEU9B%^^XxxH*xsyvXA(r9Vz(-f-EYV)P*Oy&0ISO-O@UUqu*|mKX%|BQ7DYTfJ7-;
zg0rSU6NjrQD~j1NN37LiIa=ZF=EV%W9ZUI&50U)UmRN!pdS&*XkqpCiFr0+#EBWO3
z1@Y>i795Z88Lm|inL24WbkvB~=eCCb@&Ee&i3WyKBeJJ7hdVgPwZ}R8xL~X}VYux)
zB-=-F>9>5z?zz<5PV|qsYtj(`w}~3JYaGB0L_`0}{?jM!b6x>jGJeK|;uX;sGVCMT
z=nVRx{{Q^7P-j_heOq<_Aik8#o|$Cg67WOgLTKwmz2m*)T-ZXU%k*iGx{ej#_G4w7
z_0`)yuuF!!aSSTv)tll&-rxDd!0<m*RKhN%Q~u_XuS!O|a<h<*$1I)tcU;5n-GMwB
z;E{9&@zFrg&MLinhB}1<<2uh-BH`I%%Q_HH!nO;us?Oe~dH}@G&i?H$7<07%?6TEn
zVKC+>Xy0nuH-KHk@a=N(vf`uE&@d&7Y=9TYY^9E3e8F^yqlVCC9}OYKnRZ)U3AH({
zQ*H4e+1Oi5Y`6^fmN7#Ds=$P(PN{xJ^+?MBSn4do7%3+?a+tfyIq0hREo$GVjbDOs
zoIx5Z7E0wVN<I3#J3o5gqDpp`T@hdRfIlp2tVR44!U~wo^YmNr6<3G-Ej531^MQ6F
zfXwpxb;*)00&R$1710<-xO(%5tzGkYy6HCn?oQ?MF#$#IKxrO>AhJB7{RYp?K`|T9
z#oU)BoR&I_&X<xFmmgBQzypS#I%gN|+hsbPnE9bx^ZwUu4u=eq&}l6g7s_$$xbo0a
zG{l}g)$j!gG76p;Dr4m_Yvy$oi~=jeyo?EQ<;MR=+Kd{F^tu8@X+pl8CSHQ9Byv$O
zDYO7sPQ~gdH-L2np9&}iM~vMF4P(9J4UsIuk`Fz$Ch!sZe^BD(;W`nV5|k1=G`go6
z3Ny$zR^6O`%%ukY>hoM{LE_C)K_;*&EJQho`)a5cn>Jjc^xWWGoXI4BGLv8y>I1@w
z0W_xk97%-oN03-S?C#+5I?4HJno5o>@$1m9wf7cobl~Lzg>bZ3sb#+8AQUmud2bk!
zbBk%dT$)1n)qzytT;`dl8wQyZt>4TgB9kTk%jwrkx4XB>8tBF~h$;|tRr3@Vvs!?S
zo3NbzX_vn0iU`-$^!AEa1vM6Ch#F%^%N}+gnsuaCvPq=?rR%^+TyACVEP(2g*0F>D
z)b#Wl#Q+g4i==c3!*t|HyWMl}a++L(U7LK2Sf+Ui-~^Pv6*JaiHF9Y}q$6}%n3-XN
z#7c3k9zj|>2r@s=_INX<A$r>XR5$Pj0m$x+fupmqQ$|I%+H18XPqm?&Ry%M#Td&_$
zX7`NgLtV4>U=zNKzK+39x1yq3D&N_+4ue%m5VL2oOcy{MAY+B%6*nF^mnw$)a1MVC
z3LjX6a9*)k;R=eAUmQbL+9aLo>tHzch=+qTRN60#1g*z-`^HsO&94*&pa>;&yd=$+
zO9f)|*Yb^2-5P{!xS~U)?-~jT;=+t0(<C^HN`Uh$Ic9z=00(?k7lQirfWI2JuLi5U
z8q^teGWN0cj0!Z#OUKOyF2vB&6S)gRcDaD8VC!AmC<?>*=s2a0cdVM<UqZ^NiKqsD
ztacUFr_rx2yMJ~qTKASI^};x5Lv9G4fqVVGGalM&rK%b;to@h6Bp*S`8|p9oR$mJQ
zx27b#(Q9C&jR33F0?#E>NiQ=eX$7$zF>pU~wWVBykz&~5H)4ooKb?>o(bS0bzVPBK
z4Yl7!pa5b(N*3r89))RZ5U5D^W0xK0ctY6mOoqYnWjL%lDqc5YApoxsq-qIg>f`Zg
zf*^HX7d?yU8w(idnOrg8PArmDgbzeqt5j@3swm<1R$1w+3y%4eh-?S6kwSqEII4~N
ze@#s`U$9@&@>1}-79j?fI*8N*?3jZlAB&S5!9V4Oy~=e|nu)fry&K3o-N<&XW!I_m
zdG3(Eg;Xd6K)P^OdpfT0j<Iq%1QCWiAzX8{T=1oCM3>fp)~{k9=^>w{#9v6(ZX!*P
zyfbX)7tarmkk|-n%)&>>c_$6m-=JREHusD9rJR5Oe$T@Y^z06m`Pbt<4mBj7>1GHm
ziw61;rFu9G*XXG5mw1hS*9ZtM3ETrP3=BO34&6wq>WvC#x2eLOzn;cpfPb7I%hSZL
zwj7P|?fxD)qX4xr6zJ*@uVh1u5pvV^_A{!M*IV4V1@OJvGiZP4z}j~}OIZ7EFFD{8
z63jq9gHK;aX<R4yfo_2;rQN>In1-E1vL%4g-k)8Xvc+-5*3Q^J+SD!eWIJL3hl{NX
zKuRHA9aO!<1UN+`0;tD1%h7pZD$R{G1pp_3*#$ot?P)q+N|2?PYt>u8Ky@S#qU9Ka
z$OBrFrLn4_9XYs(3TW;-$St|d_7bWXAdE<7c$GSe5==7cawNligqLLyaTl<{>ioJ^
zW3=L20i7bG@wDiCMoU<ntpqGoDX+pstkv!<SmKlv7+beK&v{4E3S47{qw{Q<)`^#Q
zkmztw;sX&f(?uCOKG7(D$Slm#08G^lz~4dZBXka^HYdgw{F3lFLfYnEoJiu*aR>|Y
zpZ~-3&|G!(e~JI|KmWJ>Kg^ZVUfx$va|u&=n!fANJtuC){x8n+m`<|Z|GfK3uBYTb
z=jsM?rDBTB6^k&$sHMpQ(Mu0BUxbr~l=)2#%H%~_mLwdEla{#NI-}RyUxT?RS1vO~
z*|<$iPjs8@k$CcmW9eG#5cKukcJeQ`c6RT6n>?JYruO$E+=zP#Tn9P{JApG3&`DN{
zyaV^$PLj{x-tEACL4xAn=sz4N2WM)l<weSfIJ2bnl8zm9i|0z&9G<IZg})YJ2~&7c
zzEJ2U=>1Q-uN)TVFCM`aQ}PMIWAA_Pxzglfysz|66*hA=E<;<*Nn9p?E=T@xNNUH!
zfWsLkpN^Myi|gr1Jze)@yX_SFO8_-mP78eJ)q%dRz5hqdHe?jx(7GhjWmC~P2<%j8
z=YRc$dX14>>}ievO7$s8i|44l{$6u^uD>|BWLJfM*14Kp>W}}VcvsIAln$>P9y1gw
z;`ENGaX19#j%hYH@40CZ{(Qjq7~=z4WHt)*rxF1;43yj(^fz&pPKBdDqx19<3A}1F
zIwFzV2T{n@e35Ag0Fco}%QZ<|ocnEvqLsY=>gAIlrTA#Im?YhQmkyh|U^<`2?t<w&
z?_cyCavaHDjPNjrWAmzCGbPFY!dPnE#|XJ&9IP%2V0&S%!#-2DE&XtuY`te(wdP)O
zclX1VAgdik!|~{b$amrBoS#-t@hVCdsyI@nDATU`k3d7fFYoReJT0_n^*S_Yt48!i
z{p&zW1ugKS>IYsc>{ONN5ZGw!JIhDu5XIqkdFcSQJRF-dp&qM=X=ARG8DChe*wX|P
z8`D@cN{6F~lzghef(J7L7+bW5L{7$9(Tl?AM7=IC8qJ=MipZDs07mAaLf3!*0Oo<R
z=JD!e!yBIlO!EsM{6A_u@S2f%bKEhfY^lt;xWatq+&_CBal~bxByxcg$(`QLPKcNc
zPvYMuw^7g!fOP}<S-sYMi{2#A{aiVVP}Rp}ExJ2kQguaj&sLwWGQL_3k`rMbGs8=f
zTt&ursY}9Dxr|&QX`AXTWEwp;e}U-eC}bJ{=gS~CToN-uSf<-#aaqZw^lOtfVUNEc
zS?o+Q>OQ@s*7)DUME>|8Kl=-}%Pv#1;^K6YzR4Pz|KTHc<k!sVE|C!9Z|9pjgIz{n
zd`u#$8&~{-@oUQS3_e$%VY6WIls-DV8KPvt=~<d|fV}J_XL=Oea$d<?vl%%AJ9Crs
z9tBm}8Bsw`%Ut4+AY0TGWv|WXhS)Dy>k(1}1_a^7z_S<cyu}-)y)9gU`O>BS2@qG>
zfm323>0d8lQL%i`A2Z${|K=x-I!F?E=u`8>DNaJ;pqOy<g11|@2u3ME2l4_K6gI*j
zH`B;vTVD4rp&MtQaUTJ0C%fN-p(C6YC%!KjTRJ;2cSZ+=A0jbYR@*guZR`Mg<VU8p
zu`dQOXqse$Eu8EjswwXuXDJ-9Zk^+gcHnMb@r*MR&=9k%UPzJfqp%MgJ|Q5=E>^}h
zBhI8;Vhzi!e<T4Pd1=lb{7*OfrsDn~to2E;WJ?y06FJg2LJL7{r|}GMz=5<24$d0D
zk9HJ&;c^pMB&S3x9Iy3oy+0PTBC)tL92dBgp#txQb<1Y6y|-~<C6yPJiZ^7mtCDkF
z%X)t<d}@gT<kN7E^1hL$l^I(Pm$`a}sPDgq)RfiunoT21lARvkKa6%NZn}2|f_(}f
z-D+@EfOH}sd919A^KF}>D=bI+$t5?jOHHi7g>YkEucP58N5w|P8hENtgO%bw+~Gbj
z+8DQccL3lqZEF+$uE%Heu)4y*B?)I%tcErt*kj;>*JT3p4Wa6OPyZ%S>c1`~mm_Q?
ztTy@QimFW#P6DYp1UHIZH=p$gj#RS^a#kSAEl9U+hPdhgKNp&aQr)C2^B@2pXAG)0
z_E{5<3L)_Sf}cD~Be<cp$LjZWvRX#|KALGsV1FgIvF7+j3YoLa1D8*!$bx<P5y0-y
z)?eb)D|*8TfoQorI|Y@i|8gL;3|9VI5u<p*IZ@@|B+DeehxlLq`{VX@05rgb^;E4v
zR2z7MW)k%naPO83qn5OCq=DhIYK$q!TI9TflWI|7940_#fLl}4MI<|Tt4WSIcbVkU
zo?-e}CJE9OB?%|Wd`dz{J;bD<iTnegB;jHo-syZTKo0~zyv3esxkmnxSh18L^OwU<
z?qkbtxA|MMW?1b$$w<wY*>cYZlLYJ?)9ZYeYYs`83y6dzd(fvdlo3T86?$^`f};}T
z4S!|^E|(zMwP{(@l}km$JR+o8_m5sa`TZdTPnj_dEhMfSKsC<EFYr;Z8NQAOQU-7B
zvn$!0#wT+*jbFv$G(M8Qu}BWrRp8hJ9k2I`=QAP7(SV;h(40RWz`hE>bp?d*k>wx&
z=1CZG;#~xlFH&QX#FD6!>K^;9u07W%l%*mhdk15aC{_PiJwcB151_R!NHTWUl2(br
z!!O@!4z>^G#%8KwdZktOsOk?x=}%2Rqp0{r23IKu=p`hhaA+>^Vdu<mL-j$EL{B^$
ze>z;t!??~*1iq>kq-P}z5@l^>0*}*Rw&GC-W7Z*Sp5%>v`s5)?jxSmNQu2LC*{J%J
zdQj(UT@A|&ZM)o{8aX$&lJ&jVmo8~=-uhBYU}MmP+w{{DK?J&L3neuj{tfn%4-{ZV
zoHom>njI_{Ks<?(K<BSz<I0|YYe`=aQ6#&g(fHV1YfT;Rbdudpa;KBreceNfi>%d3
zM*ulM#=oNux7JSXeb3JR$?y4BC%N5@8b6qo*<y*H<f;lj_pglh?9Z7?#D2qHHP>$^
zGCYZWdl97W)Ih+JbE6d{U|7`M7@5wvZe6h`W>DrDX`Mf&#YW?P7!6{MpWw&z+SV}f
zq$z`I(mh+r`PS6FH7($=zPx>9kz&<*^ml6)TYbC`D<b(L+%r{)c^Oqv6aTbP`j0Y%
z`MVdn!dA10xd}kI`1PbX6EVtr)9TDjveRYv9A`QQOW|;He1Iu(zkC#Ejt@db*=lWx
z;V*|9_7qUwYBZ7n)&vzr7~)cHkJHa>5c@mHaTW&0mRCi`N{r&Mhd1k=Y?6k1)oEdU
z3eR)&NJ+3N@qJ1KGt|Y1F>HWB>0-nuDiBS@Q@#qq84c{}bWjl(8(K%<jQzm?xy7L~
zytAZE<!rX(7Y^B$4p|i}v;`pRMSb)EPyEezLlz&&6N>;H7UGR5IbBHdYgqk8X(^aB
zIwd^@vsnYdk>Q->Z(%-{o}VTQs=9Dcw)c|Tnm@0*T)=eumGqzrYvmC6u!<Fh$kpiM
zX}!urQp+;L?i87K9mx7dUB^`jfV~>%*?&&3*cy8As1nu41SkH6(Gn1=r4&b0<*Hct
zID!*tQJCJSk|p_<WZyIueFjaR&X?8D(W>I4Mkyizqb<$9tZEfil{9Rhe4NSz#)19t
z5z*%KY>`gaFBK~}&@UtowYD(Fqq5&X^bRCx#?t7-<Qm5av6i+JmcX*=N;-f@*x~Sk
zs+WBjRH}2hzHju@I+YX?ofB5FN)K5lsJ78SALQU?6O9{k!vS3AiC|ur#e_8!$`jI}
z<ntWi54K(5yPCXu`J|Mz7WwS7u#FL9ya_IsM&mh-tKCBL6bYhTf(b+Z5b^k*T7?Sv
z{r{1QFR>{vkp!=DwVTpP|8cuYAaKhS0%Ga#sWl1x5hm0-#jFLQ41C8c(acT@pzw#5
z9fb~<sPTn@U^k>nEbu3%C1)PZ&z0N3#s^F@HTzf2s>RgskyRuI+QB}eMblo6eK8Fu
z-k>>cU8gJk%ziBj{~QlWl21<ZH)^y5r1CW5yt{chO}c)&S<>+;QI;dFL$8@uiRh2W
zbMiJ%lgCF#FCwk?61MsvzKO|0f}rBKGR=G(R$ytt<)oBYnX=<iwP#AeN`H3*S#TX)
zl>3rH2mLHnypov1dShEqk`HSfBd7H6F`)CTm`^g7S7w^|mXow0xD-c>F?Wtc!r}$W
zimD3<(RR?<m@?kE#4j`cN&a`48%!eOaW|X|VI&#sM;fqAYdE9UT3FqzD^C4~PY)AG
ztW44;XYo1XgDt5Q)3H)t;Y<sq!<y`2XxG|MSaUIIt6x?;T}aL?-gO!Q?{a8g?b%@U
z2v)h>Va^3iwk&2l$Tgp9k^)msHfh^7^)_jOvzKdAE_NMbcnUV(>s=EQ=~AyL$angy
ztBoVSk#kt`4<;UgZ;E6pmej<tgVpXpo|b*8TK;sfbat*Qm;Wv0E)}yuj|#s`T1>0`
zhKMuvh95$wk{gb-JAqg_Vjx(L%B%W>TiB!fhP7KQzbtK!>wr$&JCZMC0^8o##0?>A
z+ybZ>Nqe?5z6BOX&|BIa&1fLaKou?QEV!miAT})=zowq3anj13N5xqMsQe*XwGl*5
zGR43ec$Wz9vpsQsukFZ~T7`jI=H)58Tf_colmpXM^j^G{iI4C11FK*I&=IgDk_1@E
zGaVe5rgEN(on{Bi)J~`#w{%pNA67F^-%^`mL+h_U6jt@UsFBK|Yr1I7=XScbEs?=a
zuCPwb{X%5~5k3ukyrr;YzgZ$bor{Xr>{9fQk!>YWu3S(ohchb4>ZF7WzKo_^1y5>9
z&d#&73%Bg+jq5IDSG)Pj3wIMbT~s(1CxML&3t-%noo7k#U_};ZGf8VWTEX*JG8Ae~
zGY#%nM_z3uXhh;dIAVB3E4aYTruQZ*Uid!6Cv=PS7*tC<ifN-G0b?as27<0VbAlVn
zaHo-J&8LTOIi>>^CVR*3`B%(|F*3m>fB=7*U1W=3P>|Yv>45DCcy}VNmmw>~g!YuJ
znk+Z9R<j9%tvf}5m;=plC2192uB}<U$}`Ao<-U{)ZM_D*&KM_D69LDL1iB*-9*~Va
zU5botCF{Eu*%{*%YPr^CH=xeVBsJa)k#9yIGque{(WU=kH1ldo97#b?mt*Cm3V7)h
z3pwKyL?_%Wd!!&Z3UkoZ@erk@nyDxUw4gzH-M0iR#S8!j`dQy4Ct{Bo22BY3Sx$+i
za{&+&&9rs0IuXph)!b_)J3hh7+98m65xz4OOh*#1dD@a=0Xf`^pV&?olBr&jJUI36
zNx`;H5P~w}>{h(9abDo3y*@tA+Q-L5NpCg0rt}V?oK*5sHI6=oqw$-_ks%>w<`=Gh
ztV0wTI=l)?25a_7mgn=58K+fVdTd*N(&6&4K9bTBWL>qKwMolRfH6md0xm1oRkdjb
zGj?xiL})4e&*CIsF4(b8!w=c{LA{LBUv+Fli472uZl{;L5|BMQg|_8l<&SJ22wNvC
ziJfMeTjUgg77ha=oa2BkVU#eFKdg&st-efCF8<36(=3|0xaShwRul6&zq~k`woshD
z9oQzM44x^?%BfY2gAT9FN)ScFU;6l`Fk2p#$`{Eqgjxq+FCFku{7B-Teu9~f%k8ge
z{8Y4Y(_BN2#^Zs#4M1$eLV^HjmQlFgX4h>Ccv6Q8yxuZ@=b8>v{6yu94!(lJzJ6TM
z!(f^na!3FWc4C-ofpRoppcK6BcqCRtN%6!un(2b%?_~y<FU0f0R@0^PGAp^Uc8F;M
zErl{OL!nE@P3z5oBjuZ~hp}tt$n_SkaT+70g^>)VI03$%*vln-iV-`^Z8#lQ=$~s=
zHY_PCE0ROXN>q4KF&HQtv=v2F6J5fu(q{=)uq{oDW27Gz-<Uyg&{e=eHHH2@@A+vQ
zB3C`tq5BNd&zTAuDw1&l?MNpAclQ2?&bJi)aLhsKRS~*(gIj#{?~1JxUHIuZ)$jm7
zp=(_Bbnb#eC9k99B(rcMN464@rkvc9OU&Cgvq2&!gMn?jxJ;3Xn~jE|RwLV*!wO26
ziEXu$_Z)F4h<iHHS05of(OPqHbr6)g<N<%Z7u0yXC4X<d?zpd1#O57U?j`R(bXW*8
z@Ll&6hjQcf+S?C}4<bfA%3*fkbyua(%&UQttMx#tpK$T4{XgvN-u7A<S)i`HZTGI5
z|Ji)HS6PF9`(Jl@J70a%+x?$nF}%F2Q*<F#6>31oxrYK*3eoNQp)}>2<{nBP+s|Ma
z&2St|8OW{maWpXyysy6Y!#FD%^K|rvIgXsD`J!PXYBj!)C2yV)jiwz%^t2KX?S7pV
z?j+Iz@rv7Ox2Ea*SX`Z6!;*TMjxz2qxJBL#Ux-sQ{Z965rheSK{9lkD!QcMwUNR$D
zlgfXgGdN>?EWK)c@u6YQ>RabRewGtksGhXh;kT6;o~CcI4MS<in~2KVw9EfKq9{!Z
z4Z`-Aa#zez7LqL~Ofr=zh_q;PEtV`cMnwJ#Lhi$a^dCX+nQvex4)JhDyRBoR<e!GA
zZKY`v%A6Ce<)!eK&7X4C0W@9au}{RqjzHI`6+}x!q8-g*8QxG8B^}*gvkkYDLd+{C
z$(w|(<}$FE*s<np#CW1!P#u>m(}_{TaIXz3P$wazpXd2)U?Kk&-<<tEnk4Q9S}>rd
zgQ+H-TcBjs|ImXIjuYS!D7-9GX(z=ydv%g7h_Zh{`?WOtcR;=MZg;k6aA&kfg>Uh$
zUng{o8}4-SIjoRmdh!MJVlUaE|8DV7{DQL*iK_AoKG`3>{jF}qoxUZrbu-OOTx7f`
zqgyg?i7e&X_!Zj#<*!<Q%iZ)_uKsVa#CD&$wLRV%ofr8i+u7<Q`seP}>)(2Lcl+ww
zTz1i;wY80wmIXI<21(`|MGf0PiZ$d=UYa@QC(Tt=FrRzLeyQXmzk-OvHsC$34f9bZ
zq?CjT0nkQ}ukBA9zGa?}Avue{Bef!ym06D!;!C0oXI0TCrV2WYY$Qe{YiJnbUeatf
zAR#hiGcDNPpcEdbo8;rYBvrP<eIx$^9A&adFVygB&qo51vX^|{Z8Smvo2wba`(g##
z%pQIl*G7B!Wj3XE$#^9=EUGFfExVeiHdz&u0*;9<%*p&bJ;`tn&@Sh2()AveNTGAz
zmA)r%PCaIjTWrHU%$6-zdAr@?0<CKQ)|kJK;bvoQwNZrvYWmJ0VHBSxhMTGMyi)E%
zwf-uB{!Gm@HvRH{8}7qia<ZDar#NB*r&0i;?q8M$0kfB!rjs&j`0ZxeKyaS%YqcEg
z1>%G#^9N$3*h_Z&jussuJ^JSMZTFP(e+@+09an9OIpEIj1>+R;;a)TkA)Ze>Uv-nb
zx3(5JgL$n#wqqznzfu1Z+kfp{fQ$?h5bsi%BqHdqqZc?c)oyfa$KVz~sm%Tw2OCk^
zfZ&`|i@s7ID@l!(jRUpUr;(;#y1@``C9$Lz9T1Ur-nIAE&M}VnyP7R6;^Upo+d8P~
zU0knp{IBWTw9<2sgLm_V5su^fv-$eU<HA;`f!I^+q2H=s>YvV6H301E6^pYzav=40
zZ|~mj?(FvEMI+kSa$GBWM}{PvkPG>U^VdXr_z1C^-67biXT-?%m1H(Z(;(n8L6kDh
z@)=mP;{}^3R3}TFBH3Y4pRs=Dj|2X8px+MMx1qq%@<NuSpSfO{@@a|`yYv3lj<sl3
zZs;3erC9|L@_Q@K>E#Q!KEs~seNG!vAV00LhisVzq=aL9%Q^KW>!=%+SqB|J2ka4-
z>W5VtTP12|X~a0r)l4iR5KP#hCU%gM%=^}wJI#XHW0EZoX6%~F>6fCUpf==*H{p7e
z^AJ1490io`Zq!`Yy<QLMi_IFQb*)nPaX?(HQrTDo8YrC&_i1?V+SVe1d@K1m6F!ph
zgO_GV7N4NEkQ&qhx>%K|;w(MhxqaJH@}NI)BXjB#`=RV5-8;8C>_ty^9{s`1)09&0
z-dEnzzeoT^9Xnv=nb)KF;q`~QwwmB!-{i1SS#Mr9Vh(`U$udnL@i798)zhK==(=<(
zlDF4DGdp3O9K;W_ADhVz(KANi&8G}A)kzScSMpHj$iZhTBIx$LURc@HUi&c-siz=~
zK(Y9{<ACU`8z_PuBbLnIYqR(~W}j(wjnp8p(7M1!3C>?GnH)I(V(zny$Az8S$F<fg
z1xgxa5)UB;n0JgL$sU!ZI`HCplWi%&6WmG6)<j#DCPhO(#1Iz_$ZNP<2Jh+|1+3U0
zHv3*#kt7|f{e;JMvvvkB;%#n>Un6p10w2>QU0ajOj(Lg(bI*!72!PcXr@4iuU<1n@
zaz5F*WF56cTb<tIqFJyCcX4VtZ`t{c%`dCZsOw*Ckc*5Bm-q6^-n)awMm4XOY&0xQ
z3t%<lY|>T3+^;j5-$I~S=)0xt*$ESI;>GwFTya2Aon+{9pL21i85uc6a26<VLm!(b
zQtn`Og{Q96-OXneHyc;h$c-VhM;EFXnxQ8qjw?u77rP57RS7P2>v+CYk7dTXqnR`q
zhinD{GZv4SS|Y@3LNN<H?V;*s>>-P{=@>qdgS%BW0sH&p5-230ce1jpqJ5=j9D(FC
z#hBdMX{aIK@>w_fOi6iN4K~Z0cFZ&rG-oJ>pbfun>-bG0n~2wknYW-O>>3x{cx-8-
zKUV#|aU<S*Fjs6)T@p!J9l7A$pkAKVC`+FTnWFgDpkqnQd4k+b>gS+|SIrQ@S+_Z}
z=xQnG!@(Jo!dmSW!@zf4{jPG>qB?9R{HVPPR?kP6Wr0JgxLOR|WDGUXL-bs_%vaRX
z1LUtE7@1NL1v&yC<-igpR!Mx;)?#7;WSy`xZ?ek>KmqY>=^M3VN$1VOBpYvVFln2R
zP^~$Ff?-FhlPq8g)6(5>SKM4Y<Uw&da8=7yrsG+AYc~sA<fZ>>-?$N$^=ab5acG|4
zNjiEH&!~*e(fcqop(b`f!w_8jfF>=f#8F%ybfAxg@T%(iJe$y6>8CApn4d}HEJN$P
z4YmY*g(3Bl{S9B>ewATsL`~$;;`S;06aOlz9tXS$0xpFOxk)8U))Ejk;5WKw+zh@t
z(EZ|(wHb~`jR+y$*Ipy(s)PJqa;#bGfUa%Bkhb^T1#qp2qT~Yoot?Y4@AP%@y1~43
z@!lIMTC$#PdEVy!1o*3;yGy$_>5}$@J!;vs;R45xnbUWv3+?k;;s{o~x`Sv;wp49Q
ziWYASu*lP5Om}EReNhMcwN83DO}J;+@e!1>A$-LT;4Uos%{GE04m7UXGh8?s)x)qC
zdWi_9t8+OB=2F|Y?zF(9$}__S888n2y=H&aXWGlQI>wxjziA40t1)VWe0;B&Qs-u+
zu9d#f&vf?gHD63J1|#s7bY9v4)=z5!J$CQtyHMAG9B235H;MM{G)ex4u9ag#_{pw-
z+;<vZ=v_8|;Adq71^>9IMnNv5M#1Lmj#!@gwQw=}{969}q4}EXY&%yLR`iB~g^naR
z3fMfhNm`I7Fh7Q*_5v9XZZg$6p$B97eDh4}MAJ9d&a_Q0*H@iso#=g<=RcLu74aRn
z6HYVFGEcIqSahB_8<8s_rq>O#3?qB}9HYt)2F3F;;!uvGg<L=5RSJQ4s1P@CS<i9>
zCT?UmiEP|rxjPQG-FnM`3BSBilTpG%v>Z1o;3O{nZ{V-K2qJYOPj?pMBbwl@Co$8`
z#<65!A-m%oUfvvUExV}PyP2!m7sMyj)d~qevcP>DA>#jS1&1L%30q#|-g2$zL!zNq
zbxMxRZ`vbi!gVJg5}#46@zLbwT6%LGv2hd4I@1sBe^?)CD4zDfD^#B5oGZIHT_#6a
z%3cvyajl=ofNGlUvU=T?5%U@Go0V>f_wr`eQ~Lgitfv(I7}irG`!o~9teACcyXFii
zCc{V)Zx>#GRKV-X5apV}_VSrPr=M_Uy=?JOtZyxUDP#T!{&L9$`a5_2c;~Br$X8Bn
zp}P3O-yitdjymu|TIQo))AZN<>zez=FtqV@yON<rzpi6w@zHO>%SIOGtEmnKRiQcw
z`p;oGL_w^<rcrDqFZ%jN#D@E~AHhgn!%KY<JM~*|RGy`hTS@feqjWJIoJ<NL7574)
za5j)LU#%0-3=C=Ma+!|K!K*YwlVR1Or=P2P!;w}P=BIi)8~5Cy=y6wi2<M;$ZFV-+
z)U5LgiaNcomE5NqYbwIG>RG^_yQExNj5|{H@<QDSO826RF0vG{sa95`(8##fo!-}*
zzB(z!mupiO{;${Tv8j)nOZem34_~j>UU8=KhRx8KpQe$!i6!8<Z02M7M=&|v3lix*
z3_q9+qjLUm+77eDTiSa)W-p)0E;%ah2UX}X)Wh-v4TJY^rI8L2ukxCCEGP$M6^DZ}
zoCx(nO?r;-{f@SJu!}zklklIi!#`YhNLmOeSH?p0CZ=nJm#(579?|u&$kWN5Q@h3b
zTNkb7j3pMers0IM@*;D&Wg;i_v|@LT=F~Fi%q90lO;8-&kXMA#QSTpT0!No}mMMT1
z%kV6>p&;^!>#Ko%a9O&~c6!N6%NoE|R=VoOj(?O@gs!{S*kyO#H>J~D0x4)c*a9*B
zP7TV)gT2Nb#fXv_LPz~D>8oQK>c((zFnAM=Pj`9mq^}+QtAvj#Jfbq*E;$|Na>+?(
z1b}I8Z;v(~E85>^-k{6CPO#7E@g(XY^Eri-YBDOhz3b|`uD)wKclJ|tEB2l}AK|Ah
z49wj>_S*(I_DBI>N=ExE4A9Z%temFfENEDnVNEM}Oq*rJ*kb_*S{1G58*_P!6Z;+k
zMHpEZvxRcJNt1)LC4aNTMKqtYYop>?5TS!ITwP3j79{Zkzm8E`LuKa}8;lXTt;g$o
zOj%5tQf!|8`*gjE10>@FDqM3-rfgawPstJtk>gmp7bOVh#?BP(LVDve(=|<*wx{DV
z3@!jFoJ<%;KpCPAtUFi;l$2X+_%c4%Czr|K%l9~C==*WFz^^|Hc!uG;n#5m4tN!{!
zZ)n6sJux)U7547Hi0#Bg^@xl5@)=APztj1=*?yC`jj{k#!}rY>CWc7l+kHKJzsIg;
zl9_Z<Qc|A>b}^OH0k!-_&z-oxTxxJT?C>X4a7FQC_eMR~jgP1;I%x7*p4)X#1k8FO
z&flRxSMO64w{OlwegL1%z#-^EG2jFb%Ykw+syazQF}?)vgwxdm7ZIFc_I%{Nq}$?<
zePmd$$I6P*^PUgX*C>=2j09&Y%)h$Ud|K9mhYH}65SZ&ORBXc^jKQd_?Yaqd)p=}y
zt1D#7{r5sKwdrIt0?aM>yUPfnod8ly9<!ys+yJ3UlR6YMHms!LZ>xGoWi>Fz3<0Ut
z<v8k-e7R(|SH*)GWkDuwWex$n&4|xT1WKtx+{y%|h&hW42+gqV+ASV1WWq<&u6peC
zOC)naMf{Kn@C`1jGybl>v-`)Lep~MR;~%AH^&-KS-r9{;o|;OpNbbu;a`XFf_nW(}
z$wPPSHr`z%^n{4sjwg1}R_HeRCM4V@gtw=>yBSfJaYi)aqwj>>I344yWPcM!s7^C*
zs4!{e_$l>ZbWWQmc}nA1AhD94m-Ts?+V_L0elMJ^a}x{LJK^U9{Fw35F*A&4G*|Z4
zvGgWdoECh^^2Bn=PH|NIByKbY>n;KD`6*c4<v>bSYYKlQ>`_v}A6~-<fxQ^Y<}B`6
z1{fgfDGFyN#9bB5cq(<eK=TmdswD{c>~N|=NLyipQ+bk345Ni_nE&{1|6N^#AbBdY
zRR)bBs+v8**lQBw5I9r8@LkQEdz4^NvAe31{ai9Bq|tDwikwDBuLFTt@v<#=rS0wG
z{R5dzI>$&+xbufWnh!)Q<P*5PowPuIkd3QbB8#YN4MG)**K)m_tn!Iw;3Lj9S{I0H
z+uJ(xRIB=N?!gfZizXy`M!cw|@#9<r+2qtMBGp4;f@UU|jk_|R#$$t~D6qUa?V;(y
zBKI4O=cd~?7;ir`p}fV}*@O|!@5{Q=Y%|EYFGGuflurSqdE6Kih-Aor3d=jt-DUWm
zp+BWU>+$Ysg%KazOH3ZS4muEAn?|=?Wk$N1m?&Q?Szu#Fx@d!h4RWSq$Pf&r02FKl
z`d~tX5dyJLsuc`Php}2Y4n&B~EgyhjO^KMUtBf3U%)HWFMN-5f4d9AgpNg3RrST?!
z1Y{1cTLRu$E+bIjq?MLoXGd<O-0i?QoA;C9G@BNS%Rx@;IPF^M(dni04c7!SAze`G
zjSAtXoPdk^X~a3KjUEHnAuOHH38P(f*+Cpmj!<LjJkXVR8r0vBjvI|Zp`V1^f>Nt1
zARB1Ipfr8uWux&BbEI3$u_=6{!d`4|_u_&QO(Z=6EZ2hG$tiA0Y=$DthP5c;x%PaZ
zOE6@li9*Sl07=7WHcxe}N{55%Fp)2jHipsHgsO?n%w{dvVNvh7qbDg_)&RFHf&Sw$
zz)0DAvBcgoVru&;tYgo~lUt=jr_dNJN5{5Gp_>frR4_a`?=!4WM_?-ug5E*?BRVfk
zbH|Rz`_@5iVUN;|aDO!+iY0^BAalFB6w(z3*^(&O7UVhg)-6WP$QFSeEH8bQE53}<
z)fsR8j5q+vm=vE?rj9sX`|c#c6P1VNjzzekX@yVI1qvYZlAf_;kop)eb&XIPq*m;L
za2Y#3cSPzFfjjVQj`1cY9pOQMnxnytGX@-E)J#jfV4a5csnlY2ary=V^Pi}NL~mGK
z=`eiXU926}dt|9*@|cq>s=3dYv@BS`sZj^_!x#}>#GEz3vOW2topnzqj6T`1d>N7~
zL&Jc=g~Lj5O1EO}J_vGA@$(24e#KOM0y_4$RkorUkS~E1slz`NCuX{kB7eab^my3j
z)l8AUrE3r@as?GxIol$k2quQ=9_ZOf1&yC}BGhy|Gd`^w&lut~Ic1nlP!IzWoiv$!
z-S>LoJEh#I?OHnl+uO5(FJK}u$3{78+~>c#%RCF-hN{TU`U)d4s-uQ_k@(K(=IJFN
zqIVGNsvw?_PM6Ee?tH=L3l;t8@cA=;@P!rS5M<5bd2kx$Spwyz9l*fA(6n_lzSd=M
z6wHgX>>}^p5tRDNMKKXLVA{VIc4tFX#`rrP2_+dCBMpvuAX;;{b9+MTCmvLxw#Z)6
z{7(AxeRBvFHb?}Sm(Kc7JB#0H7GEeI95j;T7h_|?*{oQ2^5!QC{N^RTA%eom>jTzE
zSO%;m6q_5mJzGsC(qV?mt@bPtjg1)K0s)<fwZ^{Zr2{aRJRSn}GGPLLi39`7%q3a7
z^8NuebLiSwAD4M0y(Ho}$s`5rpLxtDCG!S0(Pk7o$ykjkmca>Y16!vno|kwN@(%1+
z`Wss#WuVu0pN2ZSnCfawZvDK<zhXS?_aSBli>z4J`K;#PAyRaaN%n06bio}cjsz#G
zGd7~i4c(FCTT7Dr_mT&kN_SRVwAx|<{nq<Q-AWEP&Q#kdVIy2`+CcyzC^Z?U%QR`>
zzmkmOBrUVA@6z?l8FI%ibd_fE@Qy~(BYLWsm@Zj9Q38XrF6?$`NyR7Z=A!dZ$7S#a
zo3Nzd$X#jE@AHh%y9KjSbS$!LMw7ObUhN-r{YTOjr|;$!5mvjB_+G%MJ$IwtGZ6=(
ziI<pVKaLsIn-g7g^J1J<YK`&ez`1eD`Rr{ma(RS9|DABYA|@miOW$OY&dZ!lVva;(
zEbip-mU6-a8e>+1WQEx{NCL;tL^#mIKa6kA>OY#*))~*TpmmA8fmUEqlw~`pm2r$B
zJGdUHR`zaAKbe0smGBf9(};B-HdWx~y~qj(iOkb*ndxzE(ptX2nV%@Hd<ur>Z8l*&
zq1dSTyr|?LAw#HvRR~pui#IWUw8q63y_Njn{&p%_2gyzAm@n%Sz=@SREkzIwjJCaM
z;!z|P;bPXRW*_x>UIy0(@2Lu0OLS%F5sAt%MfP@KCh8<~cZ5b=<SNQJvRYqHFKm{^
zh{UG`J8WZLFT@k>`^xyTC+=6A;gLs*WLOSjHqIBQb+Rp9b<3xbxm$<jn2P8Pa7H>e
z8fOCF_P6XF<_Cu5z@&MNIgcRHgiG=xulaV#C&MJFTq<nZ`BmyeQM>pIr7n>Gf250l
zD3CO~1ZV1CfOD-Et<=<sa*k9-6f$$RK$<$2@dvn-7d1uz+ich8=EZT;^o@4Y>Jas&
zk0;$D3X8>EObz`ZR&MAa6*%ZWUF0QCrG}l;%|8^1Q}#v-Bg%T;<len|$rcp4Tf>fu
z?IQbV)`;)#CA&iaF0{ST2J3T0Mp_xdfKyxqO6@_QjCXs6P3Q`*uZ}MyCcJL-NvJsM
zYvxf4>X1H{?E!<S>8Wx?n9_%l)}%zIsUk5t*jGb2LM=^kb5gw1RANDeyr2DAX+2_@
zc5J4mwv)25<-J`<w2fMWuz0jy^{0uL&A^~kEpxL|84{9|!xJ1KVIuTtgrrKna@N(*
zA(>>8o1Nt#kq{$UVjZ|vt8rL+#Hppthuo#7lW*4#ya31Gr`;y<sb)cclh2W7f-2+B
z^HXsqEA&8h>h6k?3eD}RKxw`&qxfat!!Q%88<0QJtab<|@;9Y^|G3EjM*2EE6z%9H
zb1BzeABOus2GI=K&z9yRrP@UC{q~lz{ev2Ad3Tq&Wo6shL)df7)pWM9Gd_V`vx1d+
ztYgHx2G1*`BCy=p@Hj^gOGNSx;SE1~@cl(5)&$O@^I-o+Zwt(3)Jxh~)QkX`@vr^^
z_~>NgK{~n|(J>jIa9hO%5{qbsn7Xhw%Tg4G^03zk9B8xIS#InU=RjHHCt&@`OQL~O
zHDrMC4l=L;#$v&zcPVKyb9IwMR)btneFUeC#r|A0J#)n=NT&s#Xr=_EqoiWJM;>Z;
zn=jH_9W_DHXcRqVZ?kuK33cTet2>dtK3n1p$C(VK$gNeJE-zALipK>@(_NRap)v_l
z%su4KN+eF@6-^}}v{ff1SbNMbY2TiZq;eVPGdQ=BaCss|(({RE@A73^9UsmLc94WC
zs-I0xhqb6%pWym2|EE%t#Fz!rW?XjwCR~1CZ_svivz)U$&clTzB}(iGIo>i@2kD2)
zEj8Thin8kDQq<EzuQ`h-7{)otcr02<8Wx|P$LGmLmaDPzjf9fJ#jw%eJ^-tuA?=;y
z$AbQT{G!9*HRq5g(+gJFF4UWg`^|EZ22pu%qSR?W*AufN<1M;mq>*@E$;l-N?Ae0*
zO_;Ktz4#!OU!<i6CfD@4oW4r(T*({QfB&dSuH=yvW`!h@&+aQ+2izV~VHjvImT^<@
zTr8*gDYhwhoDM{3W|w?Xv#`j{<2OvYw7OJTLjU(>CMwbJ;K;)CJn<A974->_AIaOi
z6xWB*WK}Ma@NI%i$kKxZhJU@4_Z2b3)H<eyfX4Df*vE7M2MHB9S;NG6W?2bt8|9qM
zK@0fstI>-Uc?L+#*T#f3`nhCi=bMT33LO%0-m2TN6eCWfI}emL$T@f4qt%bmZ~j|G
zytlp048$SeJH6Aq^sO~sq-R~`;so9k^lw48ZhpGtc+Jrp(QD1Tfkx)SX^u~L+|(K>
zQAce~SH!Fcm`VBmTwD`4W{7d+^h353!4w6{CG<L3U$iIN+Z{D%PBcwxwy<YS`xYh>
z<)NF~+iJ0wd7{>~w^uVX&sKwxC>pxSgJQ){K^R>CNTch6DB3X&wt(1$aDw03E;8)P
zAM@qo)k*hslD@@mcxr`^%@9a>#RwXr)b18VBYT^cvT}hsD_XGou7AW9<(%CxfSvQ*
z#@!{e!B?4jN9cBf{l67tA>+)LCjjnOyHb*#r2=#%)8144mKp8cOzX1Xpzuau--G#i
zHidZInzKwNOdd4xN4yZc2WheHZ&)m`d#L?o=A0;!GJWf*w@1`AJ-7^8(<uU`&F==6
zF%ErS1{Qoa(Tg_cM_EDMB1FGbD2!0WE%)Ja#pHsMCUhcPtOz+Xb{k>*D=GntxB!$h
zwUIva*d*?;%+GK^!E^*Gyyo1L()^(+?+!U31+%iphf7+mOX)Jw58fS=cr?HxO@GUd
zq>C)04Os|1aJyK>THSw~o0InlF&z1PHBr}xfJqDpp~s9gt%{|&C(^J0_G`!Efh(~R
zlyDH6J>KpQnBLHv?s!o!MFsVwj>?_~!9bJPxq_*`z0Gydh7sk#w+YiMW!tm@jqzn~
zq}io-8ALhT=+IM{Gff*UCm?CjY$5igqrwJ|C|xSSHZ}!!V8RgqXXi!f4Nq)wv3kUh
zhPP)qN+%-D@G^ox{Jki|-K#93EF+QSj$UjrR9Nv={p^1thKslvo}#}OGu@--`Pn%P
z$#ObGL!AoK?yg`qIjDu5p1h-zPyFSGqo~eS9=VWf=5|=;Le(SQI^#s)<J3ZoFw2Z+
zX2U$?2oZOCR)!;a3GKe4TCwazjv+L2Q!iKsOok6>j^-qzjaLg<4J@WdOk^LV*+eci
z>`ZvrzFXo>;Z5?AXF!QJbIIc3G{YW+)fwr^=4y}&ORF6HR5lZ@2|GxLnI@TJXDRdV
zTyJ+-bkYB*kk268>zpsJuF~PD1bcC%4{Y0O&7(<S+>UNbVC?eDa<_EON5qVd7aW~J
zC#Ynqz;kl&K-r*tMzmpBYVaC!<WUw&sIKxew%lqb;3lCxkdqg5q2*|tc?uHSIb*+2
zxf*pOoN13~g;pa`u$dSM9R+gPIfdV%NfqOR@EB5GsYiN-e9?}(z??enVOh+(GN{l*
zKo?D>Y=`4dVy;AtCN&(5-Cvv75>LdYVV8}@bm*_KUrSjBdSo-3i!R4A6EA2x$O<b*
zgRMb~RW_OAbgk1;N@0!wEth?w>m4&i3RBb3o7dgUdf3Nf9=;rtu&?Tk<H@+D>BY(6
zE{OvQdlN*H-l5G)QvLA$axoe9hxe!AyGD{S%?Amhbf~EtLA~FqumrW%jqA_}ojL!H
z<dOJxYFJ~abvQTYJs0SqexRii6bo6PsX@FCt2a#o<{MZXyF-_7Y@iKFZ1tLF4K_jt
z22sIdDS3?-^PO+{Q97gUyuiIl{N!TV1?xXrb|pZv?D9VEijt}e^-?=b`q~>*l|9G~
zt2**e(fN2$FN5mmVO-&n<=M4Iu?E?jMwjMYYSy$1$y24Ji_vJcC@X1E4^B<;?)Zeh
zt|7_Q$&RMxi&Z1h`nFM+UD;$GoWt*`)H=1@E%^m6(k<3Y972MV7+}ucJobsRFU7{o
zeWM~ipY}ARD{?iBGHN67v(qAoM+m#)&@73!78694;g-5ffqhytX4Vw2c3~W7l|?v?
zzccKJTs&Sw;K6E?<?VrfJowv+s0SYRcLxea7(DYDMXs>|3Ui}ccLp%R;>G5ge=KfZ
z<DJ1-v7x5Ma~FfzQ4e7pP0^x-v!za~ni5zhOoOn)&u$)q^40EFefGldqCDUI5#pGJ
zX70gLzYJUtAx*{clXa(rDKewjj)+nH=q`?>9Cz}Lbduw>T}Sn`{ky4?*80`m<T&Ac
zc3N13jl>Ldj01CK>iP=puP|;-&Bq46IK`XMMEdIf%cmMHu8!jtZsJG3M%G{{+)QQL
z9cKPng*7I+H5P`OHStt+MDXw&PGc<5<9s5}MTH>l8oM1a?upxFDi)HwXs7`~(n%CT
zVFbFxt>}EMUpf&v4sRc`pCU3lx&c@m`4s02Er;aVR*Cy_vz@T4GZf}a2~}iP7t)W&
zJxGGnf#rRsaYOPYux8D~<J{G~yOB%uux3OYS{H{=AU5key3_Rk&)&anw~<}x!r-;>
z6d_190T~C8Ql`^LNiIraDp{!mO-j!4&&mx1fFKzu5CJ0qQM6J$_UMcMrtf;x82`<G
z-Ix6m{U-G!J->NaYefLyK~kojWq9vO5ph_t&TAgN`OS%pbHQI$enU-k0ea+K5$j|h
z?<hiSvBq*N9xioQ`AO;!H?7m`?^Gr6W+db0>jN2#?~{Jpm(hMo+E&uu@zILR=KRvU
zQ1uI3VP$Gy?)dV+cweEI2b9s*d!v%KX*SRGfL%@V8)U_EYQ2uMb$)R^h!O)evlV*6
z=z~pUP={(!*b9)*`lG#JvSmmdnrL!5j-iW_MUN#8PNB76_9e?pZ)yu8*x@7Mq$cWd
zv@j69fwI;A&UpRMxl12hbg9O!r#M!@Mt0FJ%z3B1+X0ykq4}}Ju`G-@M{}tdCH7zp
z@X7p`{pW1T$SodRT7LnegWlj>BTRH2zGl4G2Y;K#`N^_AzM#drkXdsU&rS>O6pNFP
z*mu>$XvSFjCb$oO9#KWYRX?v_Rd0AhtHfh)te$4rlFkUy0K)M$1C6?voM`ZApA#e9
zAQJ>I)Y5)3J4=#r(6g<|_lb)<;x4805joo>V(9RRdf|uWL|eATzUU6^G0j3%1jqMP
zAeVbSX{>vzT8Pu~0ZVL7a+~duTX~SjdFpTjN$`-I1ar+tGRRK*-26<#HJm5z?;fKX
zy)w#c>kKbQW0xeQ4NCR0_TKG^<TC53Np?vB+hD<K{rhSG3eTv8I`k|ugR8h}yW?0o
z#nceZ66|`+g6-LmjH~{uTr-}bOn6kJZ|BZga?nP-!|EQu4WK}K79$POIN`ss3s-;W
z$s#L%rMg*o-aL!)VeB1fkNk{&C+{q7ASkrU&vd0%{T{OTIyMr86&Go*c%zuISp@2o
znG<Q;CdTbyl4H%`Y>^V_SR=|tv%K!S?7pEz1`u%>#FG;RbY)ZC;*`Q@Vv$d|#vS@%
z!~xK7M+EAp{Op$Yso*8|<RTmn$k=b1(Pad#24jDOjOX5@b)ga6x@VCHQ@o%+HuW<w
ztqW+I;2n2D_&ZLOGm3;WMy>S{GUCp74yzLRLy}25zcbshJU{?hDYf;kV44soS@s5L
zTU`jc26d#lPl6`7BrJFYTy#i+I^?(_Wd^W|%XYTSuHG%>jN=WTT~*88y6b3IMKI&@
zBgmpHFV>?P`|u3*PwQFYDgv(+_b1zC=i?xU1si(QH(@}eq=bsr4b{nNY*_@ZK@vB~
zytWbG@N%Zg<n5K)B$H!vtLt?DCgV^nuu8<^%nxIulqtpozgnU&6f#U%yDex1OJJO^
z3lOOQ8H~y9bBTTA`4t4kyHsI}oSeqIuQnJXlMXrGIb)@s;57+9T{ga(UEkYX#D~(7
zZR1m2c}EcqVu=y6fNH1tBpxJ9(tUwzJNWZ62eT0I0}LGMF$WZb@gR7j#i?Fg#Fr+K
zirpOMjx(w{o0=HR%`c$3%x6iUO_S0iF$D9eSS%xVqO#(A;3n^N=e90+3*O7G!OEqY
zC#1W=a?6d^jH4FDZyXsJ7G`#u@OF2SNmxX#2DEep6T9r5!}vUye5nRzRz?Xjm4zt_
zLy6p`JLwxu(ez|5iidKET_Hi4<E(=DTr4z0+~SaPAL86SR+tik+&E$^RaIBRXyxVH
z1tD1grciu@Eu;2~D;@`Q`*!ShUsV^)iVd{d4D3EIVq&&4u1oS=`&?|)nu=cJa7IVa
z#wxhs3f-{GPNv!XSR@8MKVI+Zx`A!w<%>`vFz8H$ImSe^EX+|1Bg>Z3LWzJf7Qccq
zytH4R#j^nma-4ygZC;ZMho-8VViY)ok%_k{`EB+li?9~SQDb<8>P9q4$X$uDvj}wn
z?{SO9eb*AJmwdjkDPFJy?DeJwVscub>wG|x+1aAG^5@t>&L6W^g}Z14%SuSCausHk
zFE-meKx(+;k!h+@4;NV6<nd@?eAxHSmP9(`n>3tYM9Q1MZ-|4!&jg_>D+v~oiB&Mk
zwgnkw127k{Kd{*GN^SWzhMVg}a)vOd8N50cu8;i$QeDB)veFoO!sSr$Aez3j**5A#
z{yIKR4Ml_S@g_b_O>6p>n*8x*JZtjD(e9>xJa~$Y+AlKDL!kL+j9`2KOU+nG%df(y
zMDu3er=$7KSM4#E*36E$c5<hQ(wbbFUf~bRS%HtvCxTdsj?$6fHlAh~G|eXnJ-<o~
zhIp{OdGCuqV2<*)xvZw#sh9c5gLF3or43;*(X9?20wj6rWyOe4i_lFy6|h#&0s}tf
zvZ$YD<KyhfBL?dj&}__Po5yp2lWehIzvV-x!iL$iL=NYmII*1JFc3`IP#xm2_YGn;
zG;C{xVoY6JiG3WY=mPF1LmFr7aB|cE;ITmq11t=T-(Xm&h+OG8@;^bq6vp4md@{6<
z6l3^dwyVbsxlV*zRbzA6fXm%E?C(Q41*7$EEC-+EE&jUln|P9T=>YUsK73uN{6+||
zeRn=kV%(NVM>YGS-tvQ0^MBUAwnCr@$dr9RDjG8<(^NY^(`xm4^wUq#9aMvF<aQ&7
z;B7~nckbNr<)uR^=p_rCyTg`@?l&Y~zoLPvxsTy_(^R-<*Ot~1b#U!{)I}om_tC9m
z>J2LM19O6FoUjQvW=Fs)BIGb6r+m0)G}>3Bxw4gaDnmm{@5?P-dLY&slS0}QKu0oc
zx*9k2;d-M2;TwP!mcX6+>kv}U1s}D;#tC(%Y(7hm5=`*xDVihqmM?*ZNsuMF&PY|0
zy+btdWg)P6k;b-Q5>upoGCEgegr=Exy_}h%Y1ln`gI6te5aUItq!4!SHWdgZEg;VQ
z0N_GchVoprl%WwebBmv6A6d!w4Vg|%z@5OcTS%_SA;St4f5o;6jURw=J4GJMsolPD
zctKyTu+Q2^u-s6+;Qgw_7%O%{{PsXMrwqZeoT?<^Dx+YKP&LT28st_DY!-V+8l29~
zuQ!b*?k!(}DqU<M(`&%AhFx!1N~a++tBEkOCK`}#MX%^KyDi<e@D@5N%;Q<L+Ep6@
zOZSquT95c>U?S=QSy+ILfDSQ=X_FQU24H&bdm{S+_AtRN0F=8rQW(C)@Ol2OHl6>r
zR=b|FJSn*vbhv7pta9GDqi8?+i=Hu&AC*Wra#6d3p?+NY5o_})V+CCjQ_-ttMkgjA
zBlbDhm^-b@rrLF;*1jMut~ax$_EPwMXmE`S0`)X$3KFF3=+#JqpdlJIY#N-FGZVW&
z5Wr&gz*y$RX~yVo-h`afD8$0dCz-k0gV|)x5(TQLo<Vy^EOTa=HwgK@PuaTX;VGiM
zLFZP^Y&hN|3g8`m81gMFGhA+(7ZE!8uzu7P&N1Jq4-C=3XIB^$25RGr%*Df^ak&{s
z51ka2pTv`7nOWnH-Q^kE1Nn%{#BBM7?Um+d!I(7kWYMAHLp(5;v)~3xmE*X&eH%%N
zjny9!k(fF*T%5rezDnvHbrI^ha;^+%)NwiIA%I{zgJp?D$87Gb#?J5~Mt47WG-_YC
zt|f_doC~0jvn0>WW+t=Xtx(P*DHbXHV|9d>M4FQB21|xiDjf*a@%HV#_#6|^EDQ{#
z?vNC7uE>6EBs1zLFq2w4S2(_Js<zR|zY{I@m}IasB(|NZ&qVTMK^%_9%)lH;6vEwL
z3K>zQgb;vDN<Ih5sbs1%t_G&SHyRw~rx$E6+0juQHvZv!U_06<eUpsRlPqJ?;s{{u
zJRVsu96n;r(szOdoU;#T*2LN;b!$F6ugmyrU9EfirPpPvT-Hw}))zzlrlqMO)8g)(
z3+Ba_%jSi_G3d-dZUl)}m#Kn~B^89Q#cb19B_k#fKK0ByPHwCrVZoT$^hy(|A#)Dh
zJO`y6ltNWEg<dA+NCk~`6)=afb?JutjX72Vj&p!(8w_a$Jv=|y3t2RKg<{U_r0KPM
zaZ|((SW>8qwm;q<#m2-_iP;0-icmwD+wNecWncqXF#u_hAV57Fqy)O}28oK8@@Nj@
zb8)4Y8^0)a4D^YvK2c=-jdm8Nwzd5uJMw}OKeaa(&kT3YoJ%&41T)Jzls({zzfO~>
zGxYhdFrSTl$t6Ua(i^eLDh^H5lg~W}i@Pl!{9jRRq1yGH`YT)x3o4g4dw%6XbeH}N
zih2-j(FND$2hkUr<;1)){CV$v=iSR5S39KdnkW4562O;#rYjROm<vBeQFJr<NnT!+
z5$PxRez||5pXiNdvqP6U&DH-4Zu1)v$%Q{f+pHXXY2#G>M$`StZ*0+}&9B_UYE97%
z^5!Pq*oyx1c69fDZRs0#>CzYXR=u$mym43GxQB0ixwYz*yZ()P`o<S@>E2ggu6pC1
ze}kU1jY^yfPT=CxOo4qOd2LwWt2(6@>7G|3hJtkL$C>QbVw|@?aKjEG@S67IdH^pn
z!B2=4MEI0%=b;b8>zd;3>tDueFEL++(k!{I3PH<?-l;N+r0XH|H%{W?*x{1rldA1~
zrT$!wC$i4!W@CY%Z;JM{{QYWudD+W>`wL}nttuPOqij<z4n_&GV_rwO$mJD%Hy33)
z7Q#Y)0=9A0O;;!!K9`pq__D#VB42Q>6;uyNzLQCCg_d{wcFJy2K>&iv_mL52F%O}W
zvf+@;1wL^~8_O9pac2=#as>Ta<N}MUP`tErS~Az7PwI0u_oI4B#6C84A$EtF%fwnB
zDErt=Kuhz<GkLRH$Pwmp(;TvB&X3%4Co1O~P<6|qeb{)b-$>cNrz~!y#Bo6q%TChj
zr2S}`#BVrgQp4GCRr5fZLhlti1{N*jHZc?1j$2kfLf>GJA~DJ)QQ$wbsSuxLb4eJX
z8yi$}m0dzng|`f)-DXq_Z5@M|f{q<jlLeLriz^LMMaMHxaGX;kLAlPeSjjoTmB5Kl
zX?#HQ%Gy3e7w|Geest#Q&!uxcR!zYn1X%OZo<R=^S7~}oOKCpQ$RfxxC>Wk0YLuy<
z&=k!D8AI*`6S=w!dG}-?IfBD|da6(~M4EH@6Cux$cx{BRB{Nl$1P8D6nD<Xprsj}G
zAS=$M87UwTpYGmiij2sq`52@tof&0ZF2eT3z%|KcDkOkwv&lq}G6&d-!paW9L}P=?
zNO+UhE{RX2zK_pI-l4fLhuy{Z8{ob!iG<ReD4Ti8F?vQ{A@tK|#p#4|zeHbH3q;V;
zjwKCh>ixv}J+4PX!4%r%wEP9?PwE0{0@x4J?ckH?Oz4og=9&=&;bK#zA@9h#&@)mp
zjnV=@$2X<pIT}*mWIJJTerKQwk($7%teI2<*e8(v1WO<KSv>raCZ44U+%_^5wyL8J
z1E$&F6XIKG(GbXL1U>6^e&|l3vTyfGNrkW+4yrP{i(|TdTgHrSZMSdB^3cs$PYGTr
z#~FiaodQ6YB*YOIKVHJP<WeJ+pqAXRbYGPNgR}Qx@*1%90AQ69&7{Q#oZpZICcx?>
z@|&>POQ8b_lP#RZ{B~EqRMK+3OC+NqBa*SVjpzh1YcJ#L_mR*7y3I27&@OFV0P=T1
z7ta2&qd7L3F2dl$qelTg61<w9^fROmMG6CXpCvJr(Qx2Srp)BRB&I$xe(ps(E>p^2
z|85jwn|V^`UWf_DqZZ;v#Tys|u<HFF!h+qE#;{{w)W^~>?Ph{Fg>r2pA>tx-;%TAl
zmJA6!&}GhzU{IVGBt}ZcUR_ffqBpzl&0<L;8tri;F}yuufpxdIA5)<fH+PUmm>k7S
zx#B^V;;3;^MUrVGQn;wi(^Ih@F%8I=t(Pt|;q(;DQtV7pmmqh%$VQ0*Y8_5-l1y<x
zNF~LbGM@!-<LBCfw>erj=5`l(NsaNqrg}iXBl(;+TO4A}<zVAGU}-|EW>!V1R3QLF
zVbKmcXSD1#jW}KA?b})_6#P0*!Z;5v{4fyFsI`qZ$bVN_x;-#M7q>u%DImWSLR{sd
zvIGcjIN`0(-sqsoPYiOq1VGI%N`?Rs=le`6ya0Iz$7arZs(x3pi3P7LPJAh_%XdX1
z2%m=@Kpp1HE2{YkmfI;~JteB4j}>n$N$*7WySU%w(cljj->KG1!OjSt_*N5IkPJD>
z6v5t9R&k&1Lg@s=4hmMGU|54*XJQCD@HEVt_Xp0gP@Dk#@b0O`S9oGEgYirgj`$G*
zCQKNui^ZoDmv5zl#m<~$OQ#tVam<;3hI`X*4U0WVOSmidq!<0O=s}x*%;q4gUCou}
zEYVFxAejW5TQR4QsJR`R1O8?*HZt;(IPAvZODO<}K$o0uT71%_yHd6A`KpG)Jh%O@
z5PrqgWze8(RkFejh_0WPMPlqsixrT^yLw-$P<#iKkg2M(w7vONm#3yr(NyXeVPOx`
z$g)jBLN26#-So1gwvQ3u9J*`y03Q^unl6A^-0Sj91*aB*3FR#x>aFA=a=2vyXa{sz
z&dL{PLA3k!&x@`Ah9HXoIGi(ONw}5gMy1m%Y@&#pQP&#+Dp+V9SXQnwcp@a*x$dFq
zIeFyJER+=dQpRlUCk~KdP?2X{EKo-^0!lF9Fg%XUq|eRps*ekR$cphNp!|tm@V8lE
zv+{i?F9#Me<T-lv^2tkKn8&6ROUMqR!t+GkNbD+$Pm!ny+KQy6aD{R_OPOpfW<eIf
zI`Bg<SF_05%6-Lix*HH!vNI6BoAN;2PDu?kHQuwl(9hCH)5!(f>zIKG97sHmB=&IR
zdYC-`Vdo3SNkUS@Fxu=e+dQbtWa9?U$!06y>k5fdEX&K-=uVh9o?gcJ1X3c=$fwz)
zR4=HttXb)0lor%ttHb8bkQoQ5w~ORBOWKRiDivH6R4+kYtA)Hvu4tA>!+Gnn2rUsu
zgW2D8&nfhEX&F(|Iz;CDlD_l44~a=cKE(KVanP|n?<n=1>XMa8f$UBAf`q<?w`@ld
zG@jYYxRlwg_VnB5YIc<+HxsydIn#}#hk{P079;+$^56yhcYbOp6AtM{<7DbRu^yu7
zW0^(M4w>;foP6_GCW^2CTR^106Gk;hcEjL+k+270zQt3Xs;3D9UT@!ihJ-&*7*WtO
z%l>11W%d=4&UoXbrD7a|95V7Y!Ac1@h}_D6t5v9=tT>-?hI8;0=2p-x7tXD&Jl91s
zFrHi6MLNMKBn?Ew*x-$9n!~VmxrMmy={jS8yUZnCnKD(urv`ddA$VN9LQgfl*(qGp
zuyT+-PqXToNCacskrY0LPBDIx`B*&UYL!r%3#2v8#-)`qxlwifg{`HjN!5x(N^DqW
zL-JG%0nm}dmE%b@L*{%J>k|vJkVxub;Sz;vu|dk&t5&TXm?v2D<Xo_Gm1P&Tq+jP$
z^)e1eza^4eOfP^sB%2tumgPiEhDr{Apkft!c~WVZu-q)zZw@VvX7LEZT}OdTD_fm^
z^hf&+jM&SIn~z4NH*l$oOI?1q5KQa<kSakHvV%w_;C$xNga}!^)0`KB9;HSazi4*U
zg!Bu>b!hOaI=3}O7IUe<7X7M7h042^ndVOUAYyrL67Uu}4UtP`;n&8?r)-)=gJde4
z1H!tBVrDG0DU&ZIZLIr-CiHP%GQ|j+_3?3H*}GhRRg1y1d{#HZnP&;wYy-1Od7BRh
z^0_o$mZ2}^?l)d{HqN;+d%A=?R|WIhorSyjp{5~n3545sb<%VpSh3$Y_tK6$rugt#
zuF<IU`PU35GmC?-HOIIb|B4Q0O<3NPZ97u7ZF#hQL5h~&6$JL*G0@iq+KM>>ECZe<
z^J)>;yr#4vyln?1U@vy+x<DY#Lk&v}5{DBFKFvSLjQG3g&{#%YI_F|pUv^<=@4D1V
z-FaGo@8fM7B#E2m**8l2KnYznA{{AV^%d!nLMiBzZ9&=l-Z<hN!eOo@oY%l@GA?*R
z42N>{ilc-4UU;o*g~=F|OS4mxXTLzdFeMm~gvA#ui-!7ys01T5VLi-G_^9@c<laR`
zHeAeg8g_#~ks3lsP;}E9CevJv;$lN}8WyQ!93D%k1RPIBeo-{7L|e+HQGR%9tIHNl
z_cYBd)jA}sy{O|3{MU_HBw;s#bg<Uj8As_=@$^?J_MBx5mE2zHT&BZs1bP}-nm~{+
z7l>w7<+S%W^Bp8s-5FfUlB%^Wm&9(MKH8Ro7}iDv7mJyo;-CVa>oThDC(WR3|4}u0
zg$K@Zr_M}vX((@Rrgk;<=8Hy&<L`v?KTA|^gRj5`e&}Oq0rumVL<9bf;yD_AmLzYQ
zn{9103?NO-NKIQQvj-R8@xNOEju*uOP7#M>F1bWqRDm<JFgb^uxa{;UufaQAIwOu`
zpOVK4%r|V&!Fsl_x1u~!;?gy(&6XK0$cc@m#T6E{vuRc;3l>w3=>;B?mH&L^T_ffY
zca(sfr-L&_duX*JRAT@G3r6A*btipbBa&yFhh_O`FFVfBeCm$-Tw!KGRLZo#PIMI7
zgsqgCQULk4V3@Glh>^7*d4#dd&U}wDGLBiBy7e!DmlCYl9zGCFjg^Mec+4h}KuQkw
zn(K+l!CnM8xlm5<BgiS1V^8Opgd>gm8*3hN=scb$k$vQrdRDeHbf031Jk)~!Q*^KL
z<ybvE_`U@XEn{bb>?L27k0~-sJur8j|7D@j4j9vgLfCqg`J{^&5EsZ>xaW+Tg?zrQ
z7-#BLielam?QT(@)$K8Lv{)jx7=dOOKBBOjWax`x@@_3n{G}-FQv@A7WrC)*Bkl+p
zgT?OA&8%p{btuxM34b)bgQoAv3yG4ru}w5g@TffKO`r3WelZ}&4uXUYn+}{{vSz6b
zez?A|v{B{Fr@^tS{uLdLLT;}m+@oQPTC8e_ce0H<9ClexGy<lAVj8~FWL5?k$^=#-
z=XmB@`ioMVt=YZS>|SejuM60{43%TaDe~1DDpEBZ#{CS@`8Rp%Y2txqvyc0>6)Q%v
zy{*8<_8#XAEAxLi6sa7B*s3%Uy`75^7gEdXN_ad-NEsL|hPAOdQUx%E3d4zWs+Kx~
zU+ReW=kDNgQ(G)4llc@lG7ddM*on190JEP2iZ!ol2}KeDOg;yE<WkT`!F78@#7G!s
z{SS$V4#>skd>W{+@yc>z!5+y3vIV0h&C9}X5a+O1ASvP$*Fv>rHZS#ClExAbW<F>g
zjM+2(W}UN49gwOx3xe8n{;dxfBPp|)(x&7(;SjMdi6lT88(S1@;(EF3E-xGm!_Po4
z)rww^5rQVdS!fDY+vpVx!fXs-{%=-p;7kfEA*d=VLPv8w*BMJ^vBIx+#kjL*Q!XEN
zf9w`VH9X%6cj(YK&D6?MC|3P!-v&xIGLIJQ*_L(>wnczgoT0PVn#K(5?$NqGI!fO~
zwWM|2ih8H#xN3LXy}HE|_PX5*Uvanbj${kdEu8!D5CLv(gQm^*i2V*tDXOk|sAPRt
z*V#8ZVR^x5K;VGE>@qjQap}*2xE?C%hI94ML1NQV(nFVLCW`coIlOfoE(%0cRd=!J
zq$JCND1w%o{(7t%#?~_&GdeixX&1H5<I_=3g8D?0L;8qh7Gpv;!19$2&eaD<t3vb>
zjfF9bK;Vjy#^=(}M`5q|{$S>=Ac>h|Cu4R6$=b+V#o_B5Y`d_WeK?JvoP)gfy))jn
zW_eG!XBry94v+nOtl52e3I=>F-ngxq2;Zi0^nKDlz)r6o5I^zX=25}JQ>i>-+F{%I
z%-u2zZ2BL!56G!i^bVDaFHOi6;>Ug}ZO(MzSy*EPPSJ7T{*PX{ef#z9?c4OAc&4S;
z_TnV}DJmvra<`ljR!VaVhlNxwnGc?$DM_vz8SOH7)R_FSA;dah?4<J)b~98)ws#SZ
zT^)W;OJ#&%vXvvB)WyZ$I`C_%r}L-Xi)6hwc$wKUqKEh0#DW`i)Ue_;MJ2NXmcDf`
zJ0CH=l3xF-?a_}94jR!bQkrmlHrN`?ZP1E0#q|06=y;U%NtB|;&0QviKFbCiPWhIL
zm8r}VhA#DFv`;d28G|?UC(O`hpJRQr7?#zwGuSqoO~WyLy_+{2IER518t2`Re52CM
z!-Nw|(rbTaq@{yTOKdWzAs_F*e&UfCxklAJwX|$<yok~*(p9q$85f)>bC4+_9@Xau
zFc}3+6_c&F!HQGZpH0_3%NEQWd!u-Url{X?)%sG=-|cY|eXUU>k<6pm?NJOiQ#6@3
zUW%dHZEJYQwV$8jGyC6RD?gzva^v?AN&Ookd^0$AaZ94^Xx-$pqiC*O$T<VP$~%f>
z;N^pR@#zg=_8Ln#LL4m3T4_^Z6_?pJi<J2_!I{LPx;AkPwG_?cR^gP1Ug{&G^8hT*
zcI8xeu*2(;y>shd0N*-c%i^37j^l*SwJu+fHW!{T%QdeuSnGJ~p(wyvE{1BCyK+H-
zk(#=x@c5b3Iaal=eYZ;*V=+B*uSZ)?ep2!47!;SxEycQ5K8TO7Bju6;^+(6bFB1nA
z;_+pJl1o@s`G{=z2x}MbQW!cmY}r6aSTm<BIF<a0U?>P$FrYcxmd&$W6wWwQ8PJ}h
z{8cIJT~SL~ePBzQde1=#F?3&`^SXAW5XKP;XMK=N4`azW>QpC0Dht$1CBiVURkC+H
z0}&?pR5OkqlE-lFcmY(Ha7A_j^_>JvvCko6`kxbC=TrjUZm<okH_paSxXitHc9M4@
zHi+TK;eu2Y5itvKmN_gWV_#FQf|qDLV38?!96>`WEO({+pk@fNmM#j@oJ(-tr)_-(
z6MiT=D@nC+_)t5V+Bp-nL@j=ccDYLB@X<%;R)&;=rO+=SjSF>!U)>&8+RvjsshcUd
z3sw9$9k;#ECTP7&3SYP+i9%IgxJX8qU6aEky~{~dm4XP(U30f<*TTMqq{^yMS@2a3
zG)_sW$gc%S$hpr7+nvh0DZA>FzFCop)<mIZ&c#?Eu6@K2CQ3rN_&ulo$*xkdJC*<b
zumAhM|LcF#|A!^7%Sa|_M94yLQ@9OTQK=d1r@r(>thM5c*z)vMcUCQZ6~MaiRfaao
zi$xV9d>!FbOgh<`9Jlhnjr{8%k#?O`bFwB6FnG_$oB)@K`mcqeP!l^P5?{#f6QN}S
zC1>EAL=|!BcA{R`fxYOz|Ihz-;bnijXQ_9FNs}c;KXIk4@X-ur%KItY-2RAkJ|0)N
zB=ctQG)r?fSOwWzJSnatxG6J18x`8(d&eDNg%25#Cxc@PYCvgbEt^j0lYqUn_Gmt?
z7Yk`nS9PMQd%5b$J0fxZq|3D5lk=cFaV9J+#lPZ<SvFm`m@J<iPZP|WWkvC8Rhbqq
zGTQ9}?H!D4Nn%FR!Q!yCj9-TIY!bRSNwP=-1uA#8BQ?AXRQN~?Mkb~i5T}(6vSmvu
z=wmz(c$fCe#o^!^aMX0Pr4>%hmv<_WSGPdSSwY{(gF-;Y7uf7dJwg(Pd%Eh^i!svb
z7K9jQHu&;NE-sNqxMU{hJ<-^ljzA}&YFEKtzn>f>Q}%;1<*h1BUQ1K}DR0;pKuFoT
z>ChP-QnY|3?JVm{<pAk&)_|}-<#QDr;vJIMCLET|!gJvj>8-_bvoY&=K&c0XG8WQ`
zlzO7ey8h`^<$*oAE6LD;@=i!53F|5J$C9<~c$$W<Nx|S$mS7j}^u8L?YTd&E;ap%<
zN;Z#0n^MU=&xmlFMXa8&8$*cjWWstUl%Ym~txDh`8mYi9@x;w7Bda^#!La~JdWKMA
zAB~0G<+Sth%LqQj*~RN;^Uj@cy<M`{{7llN_6@$p&%;vs6Yr`_StLV??OSY2YGU&L
zgL$GSpXh;rD1s!c-js&%aG{5Io8qSjvv=~SxLn*wLA|g56t)951b(6kRQX+8z{`7@
z2a-A3!v2R7foXZbK=;#X$#+r8yM|bMeaV)4^_jO(?YLvn^=r9r(cZ)I@pi4xU%`P+
zUE1o;$1Gw1!^wXveECT-&VH6p52;}P$-t5Sd3^c&4LS;>_(!DsUaRnXU8u_!6rG=F
z(V7kQ(-Wd{vB#MfyT5br>RJVVi4faa7eMd7o&0Td!8hQff13n-?*x`>eejEJe&J_C
zGSY86KmXjtpPmQBKT41P47uvFexd)j;0rIO@c>l(%9H+CKa>so!Iuuk+1b%3e)D<1
zkspPlalmTL0b7SY@2KR#XPzSH;F`mJ^=W+UzO$E|CDVhGWHkD`YkZP#+84gvyH?R(
zbtfm2i%LG3*gBu*vuhRo$L^F~xuEQ+t?TVE^8#IO^S;xK<+Y1yKZ?)$S@x!NeriMT
z_~!LKv)LWwC-L;6J{nj%p1^l^y=nS~?vP(vUAz<uWkSF5V*Yt2&v>o{BSY-<I_GZp
zM|$UivT@rwXFhoI<k4qc!z3TRDeOr5^ZxaAR`9sdI~PsTKFY4_ag@1;9%68E_TDTa
zp{K>f8G*0>y%-`1gf|8g=>x%;hDUIEnhq<>A}aHR!kjY;x{Km#Sa?>k5zdgreq#F@
z#%CCMdUd9#5Uc{}mFE#>0{}oucnd`GW~MH7+vKh2shXlRmQ;w;ip~bJRyEC`AGjSv
zzt360=PHPDd}Ih&r^C4X2CjBYS?T4xh8jQU-*5NoW@XTv;M<|4rC2768L3h;$-$^O
zOPmB)X}6<gh8*x?NGcCaMWXnhTK#LfBe_8o3HG4)ARAC>)q|a9JC9#Qx1(?NUq08s
z$!ELIcV9)fkni%4HK!lAw8HCD5&4GVz?7I|N?NH)81gtS#toQ?vCz1RR8+oh_0;CJ
zTytyhRga6d?r>fb{)id5ACFS!LitGhcIb0~X*=}Fh%v=Os?6VYk;}{bLjkskf${<X
zU%gxnb1`XrH4r3a*Q+374J*%<X+ev}qkzT1a!0|>bg`2y@m}t?fa?7nBw!Q9QRd16
z%rr~~bE@x@>GSfFj6+_$9&6;p^fjSYif1PbrJ--Zf?=v>ujC@@)hl;fjD%1Ro`(-@
z{;^?yeHCDdzNp;83yY3cylLiZUNek0Q=T5$1Y+@uEiCY>fv%v&6`ez?JX?+@JM?X-
zjjFQ3L)c#7A`DIcAtWidJfS5)J8A33JR1j>Wya0&cfqx7db@Z<o*LwN_|(&#7q1Rz
zvIf^4Kihu&WT$xT$@VMye~+H+l%5T|7XMG!ZQYI7sxFuR%Uz!3fsG#r=qy7^N9S#}
zulRfWJKIm5b2WJG3NN#*9nOZyKxQOo4R+&C^3jebr&g$ZR193+A*_yIjki^nSu?zp
zJUXAlPi(cgsi1)zHjtNUO<HbST54TtHrXz7Uuc3J_V{IMO~m(VDlv4Tdq^x5>3b)@
zK;M@vSmpQlo_}uy7y+)imudH+l@`9e!&f-lmRg|Q>peG%#g1Y>d#<=~)<lFj*MgH)
zvTufi#xVwcoIS}@Ojb9;iXJ&;F+c#n&0HEbk|yA!ffE@!igz(`lv!@TA{UX*?>iWr
z&3?SPXg;+_v1MLP-h2$*oWq54swp)23v4^|Ko69!`^%6;GbCk7Jj72(o7{(`^1|IJ
zdto|O8$C*Lk_Q3{P7@BJ!AZ<+SANoxxdFvZ9hDw&9v8MgirB_Qlj3`t9!~>)T09(E
zfU1aV1~_$I&|YE5_Y@|j;u~#k<5|(IAB48AT4R32I3bS<%4PLf=^T6~$>I#l+H>1q
z4-LRDPv^?egxYWK!h6D)EG|$_!M>3n7)HfAg}KziX2~Uc7_}WwrACImFbd@3<&AH+
zmKG$|+>5N`>3ChyRTHJMXQ8)3g6^%5e-<9(P;ixit}2*+<TiJnuotTdgQbLnvDjer
zULxt(elnb%gXoMOMU*u2gPd`E9l|&?ub@3F`&5%=!TtVx{GUHTm(m?kRIQ?PZ`N~7
zW*j|Bj^n|(b%P|RvdE$NSXkWjriMqKVYDnwdI)}WU5260jX^_SmUL8S7-yO-65u_b
zDYqYcH(D-*@e`3b#V2z<9xQ|`#E$p`@ie)o)uazWa%BAY!Zg_2>>j7HF7B~NjXyNN
zU&UZ`lJ3p(lQ2-BJU1AfKB0%a_=;af`7gpMiH#&zmqFY(S#?4Qt16?nA+J6|ww6`y
zF7KX)sQOqEH|7CQQB+mV+{GJ14{`flIZk-$4byyve_cW9M1>^#NFm`xG`M71$XS`K
zd_kJHB$SavI5Q#c&Rw<;NFz!o5!EmokXAkVJ^iDIbNU-NTKQo#O><+SxTLF1@R6<t
z!ZYmZZ{WU9a=#%-yfapo)A6?VcG1f_?~uoNvFmik7q&BW_4f$wSQtj`8n-dr3yNI=
zfzLvCjZhWR;Y0ctl0~WOzTx4gg`HD^>dq(3Yv@%z>!X_ySnA5ER#C&EhqhWm3sjOx
zuP+5&ML?zRQNKM=6>=mP&N3#tBu>&h_gc$Nnj*^)JlLytXDZ^0mhBwj+FiP2O*sz|
z)qkXJ9z+$P4ut|syH>!$>-F_=B-2L*Gr?PWc7hoH)G;%ivS3q~xw<DKT2CWD7ALIC
zfA%0~ZH?33(R$7Tw95B|uWHM|Lm1PhgX7rPB~gsvEell&yyv-S_noNv{M@72tCb4M
zf#ch0)PR-5>9|VQ<dfnSZ$?!G1L-eDQTU(g9p?)o@K8Zilg+BvXueU%z)$j5bg|34
zx!QHkB8ICmPGnIyP$JYeXB`kMwlkyzkqjCD75Va{wZ5>!9}qH<<`VSoit~G6FzI|L
z()L1?R3zuRXvF8NP|I4HXCszZXBvW$FmSxCzIYF~5e~&l#jgcg^?EZ`?n4cn<R{sK
z{tf?mEwSpps~pQaz5>OHr!(Yjh{~_D?=O2b%s9<&FTN(7_pr0#ef{V-EJ}szpGrjC
zv*3j9Uj?p;!Ia$DZmql3sB#c3+m@SOoH<J^uS#6t$!sh(tJqtXG~~*LUS!Auwt{z9
zV=9iYI%{ebRTAI_(I)Bd?^l_B;SPXLqG<TV;%pVHzwf!!54{B&uQTtyRE{?9_?E^{
z>9p||S|R&``m!raJ}nPazW;V-e@D5jsK&Q8D=+t-?CeL6{%RS^yEJ*9>>NC<Xf?OK
z_NJPG<&Wd?21au0PVEJ0nyxD~1kAkyPE29}8Xo%R>5_Dgg)to)wpLqFK`qv^m1%T@
zNq12LR$F1w66Wn_-U{X|V|VV{=}N`AQkgDyA$pd(;)x_g3<DTyrP!%@qh!)ze#_kH
z@H5HreC`zZqPj09Qqd^LGGlM0GTw6v%CS?(>EtTv${KvBy0NJn!BSE*x!_>asSbwm
za2oj2Qco`E?+7|Tya6jPGJGr-Amhp?hzNh;$R0mdS_uj$7PmxJ=?6-dq1T;%VRa;k
z#(*5Y-VNg?zwFM_MR=ul5C@M85Ez{YgqB8*%l%pmiV4+3RE=s?sj%8+b3c>;J6BNP
zu*jxMRJO(i0kaKDvbjWx^1c&y7K5gFF{b9Ct}MjUu!<>}xk{~ny&G6$(s9!)j>Z={
za6H!P&GG38@>nxSP3C<%PJI7qzy_`kG<fzol3u(1_1V&$Q7)d-H<*Oo$T?JkiF#c8
zAc(xVf)J=54+O!m6dAh1poUK2$4vjKD-ZL$SLT3enB!duic)FK>-}f084|i6yR#G2
z5gjYRSV0i7#$MxCEk-xTvv3}ZCz}U<a`oyS8Q^<}%nl>n+%!Uz!+#)WpQhtn^V$Sy
zNzfd2c?owaz87?{Jk%9bZ}s%N8FaB*5OO9-8pMG3%DS#+`_6sKRQOO@B89iZQhVlc
zF7}&z=OcSl833l)C}%3c{?gbU%ge(e=5y?BSBJjpiV#%l{(}8H_A+*M1}>qRV^upl
z$^6c#57imUFlE!3frwSpn!t0K3zk45S@|>=v3=WM4vx|}2qtTZcp8th@%d>s&zINK
zCx8w=B+gPW?IcsKn?xl96VwqwyF6D^K$Baj8ikGksv*a$QlP1l!sd+dQupmvPchjf
zAx_FLhKzY}{e&pSuv!S#B%91fGA|@?no{HrMZCZ^spp(byT1rdgHwEPY*a9pyayIy
zm?Am?N3tw<yFNgkKL(rAdzw~Ytcjt;EZd6qj8xFULxju+Top<=Q6`cL1@Y~@U0vt9
z?Z;0X^|g2$ibpiZnwAL?4v$HczSR1;K&Rr&CeV-<U)@qRONfGaA}qkpEw#m!4L@>r
zpOVO~%D-m|DLJ&63dH%rIU(N+CObv|mCkKGLLTo*n3L5V5$uvhz^TwM;en3HvECax
zUbQ9nV3Rf+uXu-Il4Il1lm8<nuOs(*SX6094XAz*-3|}fg?u}XyGL0%EYikkPXex!
zkOJjmz7IYUE}`)7xDx1%L#GW&eyw;F<IiPbsT$_!;;XfnRFw)`@0V&*o~@HZ?4fw8
z%gx{(w{J&n|MRQcx5cTbun*+qcy%=?IMgNtOgAmYj!SyRkww;N<Ba53gr)#i0egMm
zq?Rat4Jvnx8%n|kS~wjV9hp!I3I}ZQtQ}rKNwXBgI@avtPKU>d<H9S7%6K~1q6|NU
zBV3FJ=65kWc@Kn=n&KW?DYMH6Y%8R2a0drI02_iQxD$)OBA%<=j-(Vk6a)_j@%X+V
zrMtl1drchJW`F|=8@7#Bp>^?+<{b#1;EMK%sROrv%=#Q->N(Grwo{7><1!nr6fMIf
zUbF}2qcoFl?heb%<f^w2Ti8|FjP5MX-%y)5f=YeK#a83}f6w}8Fc&3Maa24lUDwM6
zGET>1%{x76$(i|tc4QSi?}GYTG#x5ORpmg)s45Af2Kn16SC~5MNv5oLSc9!rtFqKY
zrR}Nl2MaBwIiL*{I%L#btVMA2>oA1LCFdcNoFveqcP?n5tAu=NNgV{Qq1BKd{G#Mq
z!2H6cyvTtZI}#Lnw82wRxnAfmbfx#*i-hwLgJ7FWcbZ_e(>SmVlLo>JZZZy9(h*RE
z`^BDjZIgC4qMFpE9zA%-CdKr~F10`}B5mx-YhrX1vtu?&Xc8aSs?r-wq;oPKzv)yP
z(aQH>YWz?M=5}xx8T*5DOa2bC$uMrt)OiRi0b|2ROM51N|3HnSZ3BUdNev1udLY83
zoueZlWoxc+(M5aB7uahm5}(|Hu2!ROu&Uv%a*vMAwM1Wq8mIfMOZytp;SW*;^rcp~
zZYI|I!}RS#eT~+~{WgB{)A~S-Kc+Tu{qTLNPCT?<_&t3{*B-v0&b!~HKk#D*F@W-`
zP5159cH!Oovwk)__a(g-^E2rXwc4CpRjYVX0Qye!COLobe%?xlALuK?hx8|08y~3L
zp<UqUL%kAwI*RJ`555}y!}P;iS9iu{`p?OXbn5#znoS;f5yhfr^I_$F5MubCI?JmM
z(P7|Qw3Fl(Cz`Dt3XmChwB!9fKQ(S8pExmU*aqcgR|8!7I(V=+SKbHp;mPtfuhfYD
zdtalbsa5Z9(xlNx(RWLyOXYnhp(6NxFi-B6M*50#q%cE@^W*(ZmyMk1P4UNv(k#Rb
zpvw!h0@qedjQ4F6`=L^r7;aj;Z>L8(E0(f47BzwkSQ^>kn8!!S?0lKkys^MIRxn+M
zh&;ADi@3=WIdZcrncGTC7N?uAeXXI)uDxZxpWeb@a6M;Ghjp_wPwr#CI{X3ijb=;q
z!CRrcU@BlhC0JcNg+6>8L{2#WHcPjjwrniL$RW-8A3J08&?{kX3PNmPgx_00*L|Eu
zsM<g`C}(NmWtPqnH;x^QpTyO9T_z<{o{Z3F3CE|UJ6_H88QO$bvNDCBb!2=GNtXHv
zyvLW4Dyfa!_0K4#>d!95zpuc#7b$MGCzCR_+A^w}P<1O7;P@5`P@E;8`Kb86;LSi0
zTtwDK(ZY+*E!U^;KPo?&c4>VX6n~)z&?pwF>35m(quWJ=GJqd?T-H*oe{@Mn+q;Uy
z4FR#Mf&nfnD1f~d@ve&j1dE-y$SYNjF<3@ubJN*n*&K7hJATR)-eG>E0yWaA0z5&I
z2k#C&rfMPf;aa>%4v4*)AgSOoE>5C?vlbZpx6FjuK-NNMF|U^bF7DjfG`BL3nRh7D
z3NHkth>>FnZLV6)Ph}m1i`PZem6!zCIw1^7c|f+i;H+@8yBg?Y$<8l^G~o+XZ1={w
z*jaGg)MB`HxO?gsI&2E1oW^f_;D?y<VS{y^8|Oh|VXpY@LNkh8wHky~7~>}eSd+(R
zMa%w2qK*SeIz-E5NUkDqYhj}j7{oFNlb0$MhOrh{-P}#UXOTDKDqfBHmE2Y`U9u$S
z32#I){SaEW2-&*?mbP#C6|as^TgLMu^Rxg7`zv$H9$XM-7u8PVcVMWwgXj*@IF$y*
zPuD_$FS3B*cG*OayyJ~IXZj?HAW^Bl`hAdxM%g}>%<<?l^c|OV=qBnX!7dpucL_X?
zzqb^l7tH#L(Rp0Nr4T*EmlbEB;)rS5=ScwkIrL8`(az;IZB1Z{Km^SW0)#=3@5tg;
z0u=;dCd)+tXRKXD1%6$XW&g6cBQtE5RHxRmfScV*18!=MNAVm0kjL319c42G(_b2h
zBX)a-8`|F64Z_5EBrZTIwN{1kJSh;4!kFm35WtI<!IQ53X=9p%e^#<EiU<(8%3c*x
zTVs}CnpoCGO)5N>3^PS|PO})W(C*<1LKft&)_}VkK?}XsajI8?S=MmQ5)M8Qj|rYB
z3IjD4dqG<VO$&C1<q0CrU`I#d>=F!)g%n}w^O6fcR~!bafS*IS?IHiQG9-aR1=JTT
z0HRVYcokdFvY~11LV%zRB3?Z8b<D}K$4DhZbyXPO{rOMFKOH@6-^Zbf4dkceX*Qqy
zB#IDShn|M(50y2{TL3zUmv-`og-la>=WX7(aRn+Pv-GuvmOsH#YiE<Z%RKG9Kzn|j
zx>Up;r8PSg8H5)HF<XUS8yE}acxZc-ORJogNW;&PzNboWINwMRakfAzy>hE;eX0rQ
z<=bQmY=#BLmoQz<`)1iMAjZz72}e?n<G1N?to9Dtnw8Hq2zSwx6GKZWjkoYu(PwA7
ztd9oD&uNo+7oDWXC!Bd6J|p&?7J2zmob-G{iVXpL$*LG9IG;gjKb5TWUK(A9u=j^%
zxV^bhpVzxw!k*-j!VAnC?vQIXvOcK9F&2pLqo4^Ww2t2{1k5TOA3zU}J-}|7O@>G@
zfP}{`0cwwV;(I_d90*N(Z}(IzWe{V=g(MCV;w2txwLzJ)fg?pZ^fx56)Kf+<R+<C5
zG~Ti`+axiR5hs^dfUN{#1@Bm^Vtp@@G}x)5{TulC!$1S9Ii8LhkOWt}${S3j&za-t
z_CC|#DnOF$ayBPX`HN?poS)vNXF;mZG0Sm(35-4@=hX>n9WX_)(TMqx(E|%_w;~>V
zPFHyzG!gMFW6rK#NN=HuVHWekaI-B&U<n(k6@Yw^z|x=>-Fi`4N==3?dO$P!3v&0`
zz83O550g@8Q%R4j_>v_%!a@wvy>1}qh612lLO!ZQ7Qjmjb{{V09^f7irhXhqtV^O^
zIO@(V@M1JZj#xXNr$8}}xtEL8Kr4xjS>BOE^_JsZgfhA9L9oT`AuWXM3-ZO@K{8H_
zn^G{%Vg?<Jx5z^g$HN|6;t6iQ(={!YijzM(^QJrBkjjQJ&d>sA{Y=x0RX-rBBn{h2
zvPn_!Btr-a<9dbL2ip8o@F_fQ`4}XL^?*i_=E+YClCG6dHKMdV)?_8FJ0wIBtDz9t
zy;z1IN>Iitc&rB`+{FEC8e|#-q)p!Y{q^x}KY7t(yO^Eissc!v604N71ae5JWVlZy
zi4Ps--zOuaOtv7pLPDb8of`oXo}C<e!fU>DweI^Q5pTxX8O^_AE?82xsV#q+&qC;y
zx(Y~!oC%LS$!znPix-kZD@+vR6CbrWizpSlF--)DO!83{p;}oUqNxCRz=_H{K$bX0
z_t<S$TnDCn9KFXUfxK!kqQjE)<n^wy63NcUX9%{&<?8yEUA*3PuXpEZzL2Sng+kv|
zIHp<P8w)#x?=h+mX`N!7;YVSrp~GM&6_CiK*`h8@7=^?#=RUVgDTj_Dn=Z<}A?k8@
zMk$Z$3!B4<3)t+E{@wSiF)m42*pnsli?mx3g&VGG8nUVDKuvSjb?ch7fHC#aF;0Br
zo#%{q$W$>)1}9^VTozAk@q<#K=4m`kJcblAZY<PJ4dFe&xS630pj-AH(grc-NiOm)
z*F*%QF{hA@XH9yqnI}mz&71D`F>|BjX%0==rGVDNghDJJXjRK!Mc+IOI>v@2K;>eH
z!=K%3+;v-sXaY^2Sjy=o30*kjRM8<AQ#r{$mWf!Pp?;Bk$t2~g6LNGqomt8$msy|W
zY!(u0!1^fLKdv&H7gxHET>!^~vRud)Ngi|Adx{&Du2D8GaiSw|Oz;83HM@{Moa<Lt
zL6hb|I%`GWa(?Qw1e@1!rZxvz{<iwdM_fa)c*033$(vdFyB|j<)8yzu)xHjcLgDLG
zgtb4Yjx$lss}F5R@3-TJ7Joy%q<VlP{UPy{!~)Do9p4*b>3v1YG_;_~BZ+<gaeg{M
z?bEUJkXqn|Bp3nLd*tEyu6;2~!EcbumOUHKvp#1AfLnueSGfwQC6%`QY0A59I>;m&
zv?K(kl}ZOcchQcFEPcb|E11XmScB6+le02pjMKQv+TED?WUj0fYwN(zIFmo21-EF&
znJ6iQUo9fL2h)m$L|Np;GfP%=<bt4Bux~OA78J2y2;#sI>hnmYE{E75t<bk|F*s+l
zD;IU|KF!|p8*qLA)~|p$`-1Abs@tTqLWbhr6S?dv(X&M9{cHxixEj}c2O9g`gXHV<
zD}eWC54VhEKBMJ1cgV4w==zwLxTe-N`9xE+9y&kAi9h0X+n%2$Q^utFvT^g2U$K37
zdptNnK5&RNQr}az@$--QnEHqXT&kD=D}90V$;VD&fYwDtl$t|bayT<_s4x`wcnc~h
z7+njKr*V>-T25CJ9lEf@T0emhRQEQZ0z<v&vfqu_x`q=i(U5BzK=>Gj<<o&BI{8Y2
z7Al~AQ?^i}Z7j%J?N8HuKs&N+=_ko(vY75}M~;Q?Bccggx(=*|enO(oIeN_<9KjM%
zS7&%8;ZYN#e&^3xgVwrHc{yG(5q-ya8R{t2gfEBALA^xwxr@<gnyS-eHBf^-cU}Hx
z6zP_sT8nUYh}DWsoF&zm`g{CF=3&rHHD`jV%kIjN1~76i1RGpdznlI|cQ>!wVG!&e
z;l^$xET#N1LK){2U&RAzQ+iR2=btwN&<#4-<Q&t@^Ek_JFx)uA7?<p9t~og^fqcms
zjRxvL&c;T~6m<BKA;HD&*y;*UICm-6c_RDWQbm^|?$Uw<$+lS%ka_OwmH>}vo@WC&
zS$HCcyKl`BNcv0ZP%NitYq^dWwb5!GoFs?4lGwux!6N0!yn$9KuatUV;If$dT_hB{
zJLMB3m;mysxQAV{Exib=XIe*6f@WL;ID{LrX~v`$W^bZ+7KZL?1Ik@k8WkM~&jZlg
zW*Y|H<+DQv%rbrb_y6nv+Y{rYE^s@Awcm4n7Y8(Jy7IGpNF#Zwy6?E^mY<9brrR?;
zN`1;%pck*ck;~0oQn&J&929f2LW3GFIVc-}nOXcJ=c8oFT&@kW5q313l8tB-_mNCi
zTzHA-cx5+1KYOQCeXKUC7aNRLHLZ!0TOzAc)QmL!Eb1mx`?2X^!S2P`K<&Dpd10Sh
zmofnGQ#(`A+BWr4pd14?Nt5v;o}Ol7))l1#O$~ODRn+cQq~}HNsbtC3rs_CwQ5w07
zK6L#@e}fvV;oQGxCz%MR5>|xcZ-mr3G-_dBlk5sw=VFgRur1HeR81~P&Vgd-C@E!f
z^%@5?9C*6&b{9x(B>j^_b)qK2md__NMAV_(WgGfJqnxpzScnSQwhBeSWV-;&nH-$u
z!dvZC?uC8(+Juv->aB7gJO>A=xB*j+Imt$IBVj6<J4Li(*`?22cBsbAlImys1SXI^
z(S!z2kC4GghevNDL)|{Q?t=Kb3eUjR1xMo~Q{YB_ew;G_$W$WJAT851wz|q*#zp{E
zJ|=NK6LYMXFLb6kh(K}b_;OIOA$}o@X>nVF0T#N;pLmR?1~Vx}8iO=J<0TJC>^_<;
zw@KaU^35(yYmJ}vN6AgTRYxJ5;ByF#^?MDr-r$Jgct|qkq0l^h%m)-s*VI7ddLahM
zLYk>V88Zf@#nYK&YO&EX8~P!vE^szjZaP@oCI2Z&#i=r08$Yccx;bJ2CCmxmOWY}R
z_#{0#Vh=_#y<nOR>8UykrUTTF&P49{hWyPvq;<XF6eP|e*4vZV{T@BZYbs$3yI#dR
z-_H9zYfvUBj&)<g<49zN2}C1~{@}|_RgfbTTG=mYI&ophECYYK6}xO2;<)66veoyI
zhy1r<o=y?@Kb#K|6X6fP39YlM(&TZUgRfzk)tc5Twe(?h2-D34#vUpB-rcsK?#2dH
zkT^QYgDKhJBt3W`NS?m%Z7iu)PeqT3dF<_e!=<EW+ome#urHu^=^``&vQjI0l|}jd
z6q!{yh96i~uVBUMyaV!daKcd1LnMme{*)c$$@bH7pMBYlrvo^^7%?QhRud#UK+uD8
zoJ<iX-^uGv4a$Q=w%IY`<hXXDB%Y3CLW$K>pK7Sto|mJ7vr3uUFH7mmYmO&_pc%zA
zk<tb!mH_P4O&Mg~l2!ZBEl;c&>ghUN%72$lgG7QC+yAglyh0-Gp!@j?^D$OblZ4a>
zwV5>aF;j)sCh>F{kCM?S{X6zN<UY>fr{db=$p|qPV9OnW(v5@(c5fih#~?}HLM*_R
z0+#GKwTzlXhsX&D!YtyjMeQx^L~10r?NAT)VZ@9PM@*Lr`ff2h^KfAG!?6rxHTxxK
z9-QXNUBIB++L^OVP|sIi2@tiay(|5Y6aq_mC8%A%UuV%BhbY_aj3}i+jUM4Mhskv6
z6?&PPUv>Fnm(5BlOxBqXSb_jy&K8>`vS#kYQ{*<~JEbZ9$8Lg~UAZa6NX`PSKB%A&
z-K7Tk(NO$q7GEyY3H8SM=V`rl=QMAqLz^xha=v)TVzKz-#R`>8G5Rz0E(%!bhg!Qo
z%8uKkcusSpNgsIA+-z&U`KC>$raVl-a{nCqT0A|*vYvt!XoXGNUJVV~d^}y-y3O5o
zee*UC{N?s-hij5mf2T|PGazuZHk~h{;Jga$+1L;-Flb-L$FTCu&_fcRx{8AVlzXcD
zh*bC7k;DoN27@C6#t^nRRlSQ5IJ8%bwYsYn3hV+bqL`LdR|AMypfNVK%K@dpMF;#l
zD?rCzcBdH-<&fxtrwbB;EM1#i9i|nEYOnxHFcg2-tYF_T>}L7bzUndvP`;-4obXFE
zX6>Bn)SBvYY{L!@R^&+Du5*M|o|Uvn+7}1um^J7)LNF&)DAM#T%3cw|)lI`>ezQn+
zay~u*rO6#m-o#H#eC)*ne=re*KWuqM1^o6#kCzy`%jl?y0^)JZF=2GgR1d-H@u^`D
zQ78%`BssqLlCp51`#D=q<FV{8to)vP-=Z2LVjQya_==(L>hS>NWH1QO*JO(iJLnsC
zz)`0h>H~=|_k7jW--W@%t_5h4Rzmcwlvbl1T+6F<uWR=gDgNl~*SpN(KEo-;AXz^7
z`7i8mlWEH1?NnNp#AK7^caS7bEj7S|0lcb2S8SpJ+q}bG*)m#Q=;QsDFO>LHV*=fM
zW}Y91W1Rb;&@r|v3uBB54g*f`$}^mq&_#72I+9+ivFsx9o(n*{PLKhMjCt3XSgCSc
zSl3lTb{@XibQiG>9|fC$$UtG1kC?HSSWIliJXBeLW!oQWH)+>zVw%Hcp1c!PZrIc#
zw}}IT)_SxpM~E=PvEwgyMouSRu&8Xb9{d7{Lfb4{rMY_XI5|DGamMzYC2WQ;J)1Xk
z*ak=lAa#El?Yw#>Vz;;5s^l)QH2FMLL>av#_9gGPGUup^TrH1IkC7%k7a8kda)#FY
z0RQOySdom(f!AuwC~(wjFs*slpW%42`g_8E%NlL&BgTm8ar`uy6)69lQ*zJEl1OJs
z^gGA!n+Mk4&|!9!xmJcO%kn5q`e2!qXJTo&e9wtw<YZ8OCYoqx!PVuJ`(sz0(Gw}$
zYtmff@P?+0u~@@K(1z@3JUl_xBYxma(|k)G#<M7_1(<M-<LQt^U0cW~W~1;Jhe(gJ
z!nL464gWRAMW_MlPN25v8rzi$MQz~S4GYZBhAfmIMw1lE2jGyBA}y??w@1dKv-q53
zuuL5BJjHA?rHT|h(cW;bvkd0QQF6ov6TQSpUF{!kr%lM2bK_q@NYaOu$m?5V0nr!?
zx6c%p9IgGOyBEW|z)r|ErFkx-M!e)$=3?Cg7M<KYFD-GS@EhuZ5fZ_4!a{{=%77iY
zd*T6LWRawi?}Vw(CAC`FJs`?RfY6O<61+tRtxz7&AF?m8n}Lrim2sFOCT5Q^=IJow
z9ZkcQoXTTJQ3fv^iYz>SOLdy21>feyL!qk7+opT3-r<oIze-S-AfQg*`MT270n!sG
zef+ldm+k#s#KCl5Y(L-Wsmg0icCHiHhQ=bPJJ*(P1$Tpk4}vL^JQVgRYW|aRnwe^i
z_5NU%z^-6U>4?a1DCWLC!1JpF^1EGx5;;C=h~@D#FUe@Jkt)dm#uA>B3G2P>^Ll7O
zBOjao6$QAC;L$*N*GCa|+YAt!>2Sd>XtR)?3>P}fOr!ZRC~Py`3YpP15p*4EqhceF
zHNfE|;n}_6j`dp1>FyL&ty{vBpE8<0ucSFd0egvc7YVQg(7YH*003b;Ibo<E8~1}9
zCse7NTpf<67mH;dWtl{HN2sOFQs9m^(;%@Y+QDXvg>|^#NE7W9q#P0bn^(R|X#TtJ
zp{I^x@smkluNX*eL=LHw25-)>n#;>`>t0uGcKN0!{5_f`Nt2$DP!!Q`6#e?@<&&4W
zsC802w^<I%OH^oC_NuQ%4B^e^LL@($vz=s`2&JkVL1Al@e(jypI3tHBP&^+G4K}hP
z^bAeAVF)?tM2Fi;)cgxKC>cLMIS$pnRchcJX`w1QYL<WpitTQthqXJ*Di>fScVNyk
zlvMGpKWHC%gBO3N?x9#Yo9_myV8W(tKs=IlUA~1`K_g)UD0Z}#a?$D~Ln#D_X}=H6
zpqE)cy~@c3CdCFKzL+(2O$GyC3a<kVK60A8$DOuQzSX5h^DQ$0hpXbRZoxU0ctHH!
zv=1CYmf`R+6Hh~VU0CG@tn4)Yk);sLGINtTiP(r+sT{h$OT}(UxqOS0yNSTgF(gPH
zfPi^SOrGO@t9B@)bSC+SV10y*PeZoZ1ZzY{tVipU93%;Iel7}&$<JZ^+O(>*MrB!<
zozmK-;D=|J_EU^~;Xr$iHGmqqcf~yISf>YwgBXbcT25-#m@~7)lE^<P?LumX#U1W1
z{9zsbh)v}jJ9GF*&E}>4zAOE0Ms+SiERcPBnR(L(0n##vNi1(Hxz|qV0G2r<CUo6j
zW@nj!i&#3-dSRMeTC<z-caxr_^S?OmzQg4qfNEo32VTb0dD03#8IML+{v<uS`jbMi
z?i~~9m=j>qJ^<||M^z-`U2B%BLEoQeuCITn6>CtMZ~Ms%$-Eg$;*P~eAYd0Nc<A62
zq6i3W7xn&BiYc}JURSTnBsf=-w1ITCHA;v5rcUDu@}S8!!}^v}uI3Zi=y{7~Eyf!j
z`iWM<!ODhoewkhIG=7(!&QF6nBlhLga>dIU_03S#*6Lq20Et_uZD$J`1B!j<_uk>q
zA3{+H%zx2g#9nw_6LhxDY2P*8Y*s2|Kk{M+wPIg0?Kw}Ace&GvP2JBFc8%y@L~0;w
z$!za#3BbYCw}5JZjCUIP&jfm!(88U0_m&EPh8yRGvXw+3ApR2RNHNKErzHfR^n<<J
z)rTBBWbyrty4P<-T+}tgC2hDf#_P$4K~|irxfql<S?#8wOp^n;faH77s{><fY*vP%
zYk5;_kf(s(D7`-np=l7F%z;i}oRfvt6oNrMD$I$IwJLPrv*+fZg@ePVyZ2IX3vrp-
zaG9s0c*?e1wm${YLWt@~b2FcXkmE3f>~Omn0QHA%DNL@Q!6C#GCf_qS@7`(_SdYb$
z9+pWcpEz`O>uXxi!-Cbr>c(MzzRC~tMHl!tNT+}qiGO5{Nyea|@B^^70ST8lDMO>6
z=DBnDa`1-1t@|*0riw{0%l(SIVu_U7LImvLj-DRUMXp6gOR$*x_7aCe$apw|+lgei
z7IJ=?`0eM7+5*Jc;ZoQv^EuqqOHI7e6c=Wz@+AoUc}TC__OR;gVkjNcNF&^bt>hGb
z<UdgDzrVh3Lov*JvKo6t>H=lp-4rxfKsTd>gqneh-1rhtKXbt|e#t+`u%yG{gg17A
z5iG~ZaD^@0eAKFlG;>^RTH4zB4ZlNraG#9`S07h_))V*WEBBD(6UEDtm&A}8@RKoS
zgqC`!HH*V69Z`=b9H)UM(iTz>Dfny4B7jix8|cvPWE&gi0|`%BMHCkoGoMImhe0w$
ztc`PEhZYVFMi(wd)$BND4UC+xd>QXRLlQ#lki@uQ$uF*tu&etXYy{4x85J4Gx-P^l
zoqc5Fs=?O|Ek#p0Qv_Qfwq#R`^9VpB{m_+AZ~bD<ceDP`GJMP|1m8Fm6bzbjC?OZD
z?2w{*g5+nK_Sw))=O7Mz)y+&q9&()efGNh=jU;;yOAxV$#ICg1%1~3P68PcMcsrm#
z3Zv2+e$LoO`E@Hx$+qI?P;!y4Mn`RRC;Y^U08MD}o(yYsF`HdaZM&i<6PPV45aPkd
z3`Fwqvz(PiuPNw-6?WH6M`V+C<DA2e+h_5hDTChJ)Bq9(L_|)qWs&S3jYup6JC~t}
zMS7niMiGp^a~M3%;?Wz`U^J&r5%Vq3k7BU(rLoqKRbZ-gITt1D+AZt?iO}oahTA(O
zdP%aAB$hEQ=FGUX__Bau$0ukI>)w>3uudf0K4y}_{3IZoaP&e^7&2aL0_|6)nP(V^
z3JgP~?quMEfRvOfc~SKsIdxgkIb*IyK@Z3g<@qk0<DyZ>Kjrh|oeD_%r|75hDE|~a
zE3hR9$A$Ypdgb=**SoiGdse}aM<)yq`zd--h!+haQzUvXlF}T-E}Jd5<ZmQLxl!;q
zZKKAAenb4c^e@e~88haC48y{R!aDrE%oZb`R6be$)`91d2?)f*;ViyRN5uM5IT);A
z#b?tc#4_@&XGqEf#tr^jnMJ&mqZ@>aNxvyJ8QuAL|JHirWIY0RR6y#u3tXw1bu8Q;
z!`<+7BN$HcS{o~gBNxj#C<L~)$NR6JcrvbBnGK<ON1GiZ7*d%`?Sr-yC!=_VQbOLQ
zYa-ly{~6Xz1GhC@k}x>=$%<RNB=^{rQrcbGaIhE$wk*iS=ddVu#|9{wv+_%GP}p_$
zl!wVp!dht&Mqku@JdJ^&&v@5@9%9LjpzJBJR4n{J#jKi)DGc6|bV`n`2ioO^z%7jO
zTBvieHZA@)VE1W=o+I{}xmfnZV;V12(QiVwYkq+YbIn+wC|phx0A7b(7$gn@=T8Av
zDLLbflhij%klx<iAPsFQAub6gaAPsybRuqHftK>*-`;J6v6sV4Au7d>MV-1EZ0TAz
zGJd!@W0xQ7(sLUYiCIjNx_AsNPn*hATrNB#IAfFwtW{bQOdS-&EIGiHSB4k3?JiOx
z7ZR!}8IWh#Jxl)%T0-e&PxZ+k9h_w8Aj#Dj#pxqQqasa^AD3b};NZgpntaQN+$-bB
zsTEr(>~TSgfZVbzaiTiQHeB8UEzu<jG5p*~md`r(?%cVfjF`M5ZFQoZ<ww3_W<!@a
zE<&oy31^SwYA7>k=M%Z<g)!3cTP~!`y_B2&W0~o1Mms@Xvf4D^M8>F1{ZevzrKXp~
z;f~5n3F!km`u{5NwJUeHy&o@O@IR34aUsi=bXSRdJYGU@zq){7V(CAgsLM~=Em3ED
zsY^d)V<<hd;bYL8$IxXGdR3fQJ-yN6=v&0ZGtf27J1!4VMLc=YMyu_5al>*fVXi!g
z!bCEfsE8phoTlh6_^XhlXg+p8tlU!*yQ}rEoXZj(N#>ynzf#H;LjAd2vz$%%Uy!hf
zli|1<n0D_g;ow-kYsD08$o=)M6W!a2KGgl|A80!Sy-6*pmx{4WQS5xE1z-HItWw$*
zxzGOuNs}ak_QCu2w6_eIzJ2q~o!?fY4<CZONGF>QPZHA6A$W|2_uKTl;_qs}s4GaK
z4qjywDr{@=4rS5F$^>^0-lO+EJS5pL+K4yqx8>civ_hQ<MctvY8dlAXtuN^J2Fm7e
zTtK)VY@D9+kBx_g?s{)Yg8me3Xr~~L%SO}@$W-(vx*-I7LFVZs(Yvs<Zv^>yBw0}K
zC-tg^=>_XTRvPTxJkRqWdmx``y;hs|eq=+NsgkTdkAP)N^B|hKe{uFoktLU>uv|R4
zFG*^t0UXYb#a=+^9Zm@7+C#Iq-cxib2fXS*iap5fJ-xW+Lj22`Lu+wgDYrp4m~x?3
zQq1JsY3`%z0!nY|r-ht6?Y53hbejzmd=m56R88n^QuArYuU0O~97HQub{koyy13q9
zTJRh&!Ny1$O<m<&Gb2^RHf)!*x#x*Yg%1Zxl<~5;LD^8QqYZo3(<J(&5!75*o$;LI
z)PeNqog*YtHH1BNg)o8Ag;i2nexdeD4hENq_<QHMb4->pU0BS{k?)mb(Zw;SNHQB|
z*0$4}bfa^_X=}iiAiG-OnN^+~;o)U-vT%TvU$B!5NY7LtugYEX2H<G1ICa7a?ziWj
zHbsKs;pxl5H0+9d4Gn~Od7g&pGCiD5li@mo$}t>!enAz;jvczQiTWRBY(ktChzmEu
zMAZ@-Ml&FW%6yPfQ8NohJ56HY4CTlu(&>)*TrAr{5)VaUWSwHc0x|P$M+kD+syrO7
zqPh*F1ZHZ@P7~Dtgg|@06rj!clrFSm&?fYZW40voVH6bZOjHs$QP3s=*6qh3kr?(M
zSH7*SqLHE%Jxzr?i#IV12dX}&@kuA6^Qw*=&C@~RNrqATWxGo_>_IBRo+OX#M7Q3*
z`w;#A{;y~Y+4SDOqityGL(gUIyK!irEzI;&y(m+B;StR37qF#<o#a}rM-AutpdJYA
z#aHF?yTpVXM9-e4@0>j-4>LlrmPLav)`Q)pBT=A0ZUmc3@Ap03SOU)8+qb19w{KhC
zd&g`{iZ^5fjA>6}>W`O=F=89gFVvz_B)_?FsHO-ji8(#^Qr9lY7?hsF2<#y`Q~G)!
zUM(6@>9@*FH!u3F$$3Sx6wvgRL6HN=epf2AvB@bTo(w)}>K&FoKm+!`J=&t5HIeet
zBW2}}9z2MuX`WR(PI}QfNDsH@hCHUPC8Oetd<Z1V-=$g{;j6XkZwFO-Jx>;%rRQq&
zeBGvWp_dEu8VRD@9qHKR52Js#^B{UrAofcLT0hF6rJKz#B(+uOv4k7cdeTR|x&}62
z9K<hqmIc$8COZfs66UjT>!8EiP|eFH^=O#QCHsORf*L$gYciwjL1tz7u4V{J1j*s~
zoh@(lsae^O*n@Mi#ClL5vk#o8#*+u1jGh9{Zp#NwKRGc9wS15SAV<tqF-RzH`}T<A
zz!CFd+yaHz1260`B90G;(sAhe*>*N{1ps;B+1h*Iq6uD-UJ75~Q^qF*)3is!WM-+%
z4Q7%u!L?=xqhXbdlytE9!9hL`d=6J_JS-Z<ZK_CijhLHh`nFuYPMEmIV_FYR%X^*Z
z5knDY!63@kJqph}uSuJf&z_fn0UpgQP5qu~7OFiIaa6GX<?M6TxsBQ8Jv@14w1WJ#
zqLk0MrR+){S421^b@rTLU*X9(=6JB|C}=})Qhu5VVB6aOwnN4J{-WOhu(sR;z~wyh
z<vjYxa#Xq84s8kB%Zv$&?>q|Md34D;yam0`9fDrl^}h>m-rKsi-D3O7hKudxmW!Zn
zA7#SW5Tv{1`i?srjp!1y#`Y4s#$t;ft!VM1E4TPjsl|QdY1gxOLypLe&(Y@o725ph
zYHg+s;)(-(oet4yDB8+)L)8|ZwbDbHEVo75M(wat&ZT$ZjA^WVywKewv26HU(DJ_@
z>MJIyR<yoiRJHn_K5o?8*PX7Hk7^-nxwDITOIH=!D~W~4v|6-v!B$srQ%CT#i^;C=
z+$1b5pZ90!jD)?1k2Trw)}sD)zdZ>Ib;~NngKCVPrHb+M%w)KD9siR!NRfa#OP{#U
z#V@_ZGnP*62URJcy7DRB^&h+srr(E^&t~Jt9OU@mJ?4a@rVn=An*NitW?);HwYY4b
zoW1zJ_LA;sFX<1pDPGvmqW|Q}df2h|h4xn1RxpIa2WAT0{;+%$+<n+e_hpK!snqM5
z(#IPgmNdxhxmT&zqb2ovbV<D)EvZ*QP5AU$(RyCiVbM=NMXr+JU?|^1b$P{M>Bbgu
z#adlu^flOV+2}8QvN=E^*5%c^e{%Ps8`n@Pp&jGyidU9@geU)suPn?g-T6Wz{B~f4
zk4tuV`NYQZg%#N2FYC#V@1s{v4K=;&XX~IxD>~@W&(lE{Tnc{HFLH8hM@Pw-Fcz^h
zVw{n#k%+>_u|c8RAP%(R1s7$lsBVCqI@C7mmd%Zq)a~04dh@6k2p+4{q%dxYlwsjO
zAFH~{OqrJ8(A#o<%=(hNBQlMji#SbYLRnu_gqRIJ&y{!+F~G+hpQ^m;>;dh)>lI!^
zBaw_z43l~2wO|UAN7PcWC^t+?%T42L7Bt5N-Ja%iB1-#fQ6wGRaPIZAo>RMej-SZz
zDaaU*#3W#_3s;mjda%-Rl7~u3r}4X{I_18+b7%7IYrP83T_?K3+NWHbAo6m2+=;f_
zV@Fh2^C+hNKJP?LWQ9qZ`FTD|P8-o9M9x2t2M7H7n+$!qagZEmF!7SawV%-#XQT_o
z<D7(!X?g_PY2{?oRSZ>V3SWFD`og}++{&Hk=H0t@`GuBAKTgk-`(J+fW!RSH3~tCf
zUoR_r>mCY6Sp^Yjc}1l4ix0Cfps%Pi1l$LSRy!W0$Kxgkdv>A$1BK+qaZL5vEOx2z
z)lj4F+*$T1F=xFmj>=b)chTmS71QU8)>JTECFwUEMmLAUVR)}Or9Em+mHD#pX>eB4
zYwn`Xjm<l**($!QZfdzjbfbAT#YO!0;t|lzrqnhR7Hxj@DUI{A`<mfVXVZL|W4bWD
z#D*m7h<jGRY)TWALqRy&GP={+%7ZF*P5@@@(B@g|nD}9uNcioWM_=Io6)I~}b}$%(
zC0a3BN;ZiH>5O{%PV38J<>{kMj;~CH!TT+vvRYD!yZx`Wj=n4`sGw6y)v|{dO1^TN
zx4!uDZqk?OV`LAd>2o|yhvD@3(xzK*!duac!=HSS`~e?WG6USK@v~{^q_}w$<Nqyw
z^yF?~BfzG3M`q-m3#QA$HU!$ZCQl+9N1bRsnIzLeoNJ$tIC)4DxKOU-oz@qn9uPRg
z`_)Ueurn@f&l}IPaXiRq=iPXoj7Rw6G#h6OMAfBE9oOtnllV<1;(suyoI~qC^C_4g
zyyV`VIt~tXSko_qW!18&x_~b5co!V!aC~b)>@}C*x|ROzqoO;!ZiR*Z*;muR^PU8P
zjgJ$C4V>dNswSjVtt2OXggF&&9KKd>Ljc552ZRS=m7dvPc;_yTZV=rwD*}FW>3EhG
z+`SDU2|*l;LUApf&VVTl4W7$zL=Y%apEKI6Q6Rm8jbBo>!Qiay3@h<0oHyDPzCi-o
zEvAf9^YN{O#6M)B;7pVF7<Jz49KJm1??WflOf4tr3JA;Hu00w$aE?6gSh2=N1!7Kr
z=S*jb6cSdYvcsge=F-1d4i%^g)qPZu7X8pl%5Zz--Me=+TKRb$SRa#uoy^N26>%D%
zP?cY&2Fu<FH87h?N^dQ18`q14I<#n^RPQ-L<>00`J*Bn6S-hhfbK7O(<EB}%W^w*T
zK7{K0d)BYfYr8}KfUh7#TQ)hOOl5aQNQQT9e8HTbinNYA?OgzoMhs4L6i+$k%M0l!
z3(-wVWTh_PqY+JxCHb>C2+wFgjY%X6($$so#$J(gE=Vpb6ROGjR!Tc)I(Gbabmlnd
z(m}#Oe6gdvt5m*0C{IHeK67E%w3`uog_U`8=&&^o)ZdDpW@yOm+n!^^SR6^`d1%?E
zUvU-T@@CY3sS1`-hJ9O{7erT=#zHUv8S$U?!irGiyIl#k?%E4od!fLBcjWo`HIax0
zL70D6;KkCf>NgLbFi6fe!xm;n^Y3%E7)l^ME2MnNEU~Zj33Y~vxM2n$K@>3NcnOXm
zh<BCTD$F<)rl6Jj)HuL#;Ap>HoL|n7b1wc0J~cz;TLY*|1j<r)ipvdCbfZ#wuJI6S
zV+u%zAbmBzfBSX;;~;BDa;%K9<GhE6>?iEEQor12emc(C#7av&rTzQA|M!1Iy+^xG
z4|eu<x1aT>p(^*iNzOSUOhW%v@2}gN&>{5Y-50NVdRaCvz5Z(FKimz)mv>`#bNBhq
z!K>}(d%cFUDfAe{&_isu^oVP(wY4<0tUcu^*4<j1WcI8@H^@b1=sfdD+cj#$jhveu
zBDBnMOX$p?HH?yT`G#ZG3McfzpPvO-#uqMj8yid62Ey2}zs(b{eJET<qg$2&Wqb%w
zA^hj|?L882j;9HIdJz>9%opG;c%CSusb$ILJ;bQ)8nPywOkmfoTuk?iwzMeNu-snO
zVw*z#w^60pbeI^cPHS@9!mWdyXFHEyMYp4G_Fq1aT-;!JmPar5pX}^MkNz6@X%;=%
zId~jB+kL+KilptYLkJ4LQbwQ1XAO8#c!XmTonv2Rj)q7JsTy}Yi@UwGfC&>98kcNN
zGm{al0=4?rK1!vSyn6+FBav+=fVSlY1cTa(AQaIo6thtYAYd_(LPf3gC59bwnOHeY
zrwjoRL9wU9)e8U>w3<lJai{T&u`xl)JTbfZS;}*sPWqSJ9$Y|-8D}bYOxsh*kd^_h
zae6La#A1DZPR|3Z(f^yj_$WR8Gm3PSmQKL@JP>Iwo;t~mwGM0|El>3hk?6}#B#Ck^
zgDUD##?R8SbqYoy6`EL8eRQhM`CLyG%bgSCJX8Fv5(%{BRRhW5Z_z29XigrB4740Q
zJ~A+T!p`hs7}rxpp<t4{kvZb`Q@?jH*YG?)SqRlK6id@$h4ebhoOnZ)2lM7@W*|A2
zIm>}Ds*4HJQ-nI!itHG9YJraI$!i_v&SLv#FAQDkNzL$QML~j{sJiG{tyaQv)F4h%
zejEs?5YA#Ht%+XmKVu^CpnR3E_-a%=J#R|EZXeJrPpnx6jk4%3#IWBt@$8`_^pPUl
zT9$@`?H6N-EcD8R@v~&(twutkiA@fN^g~u-Lv}2{sRFi(*48)1xuB8RjRNabOiPnH
zRlh7{#85vREAl|o^-iWq^GH(ofbKKsrkeqxmM>sy?Py$aMR;u?*Sr(|vE0p>BDdmv
zzif#N0`2T`a*)A7?~VL<cCnG2$+FW~i5J9g3r>La2Vpsfwvs3;389>Zxw0=}zzB4A
zC_$2onM18T_O#T0z_5ebGd<EI>|uZEVI{Nis6F94N_a?KV{Vti%eEq;7seHymynS$
z_W%RO3k%4SZU)iuMMNWBQC#3+M4M$)4!KuZ^M=s%xi<N9Tnubi|6e2G6X$8Br%Oe0
zDJF}F2pgP?5)ma#eMn_VJ2kQ&FN*GV_;|Pd_=&uCjF<`9@fJc|NoA#bUEC|%JZKV}
zdU_2i7h1RvoZVi5huzxh#;L(!G0H_UCfkoi?`Ba~qh>wV#<#*J3>DKNXFir?V@c#Y
z_%)u&W0tw4$ZJ-qxJC;9U<}p!_U(nl=+txICMDsq?IL_gWzF5M>O&}$O%ZO99G%W!
z$1AH*6v7PgHW_i!ISc34;B(#s93<AKV1AS2Vq3!*PIG5Y@Ah#*f`9ufnoZm3RG519
zuzkP)_Z=q!5^CK9CbxJ5Jt<F*$Flp}zAa>ykcFqo3B<0ql3AHEGvQ0H4%BFBvvVR3
za(^|zg&=%vDp)a6UG|P8;-k#;y>Is#(IYym8`0yNyaKp-`}17V*kN)%L3GJ9A_ejo
zd?9X&rwYtd?v#;{W^naMSdqg?Vf4Iym}5X`NNs2bqijB`RQ{~Vu7f;28a{&Hx5s!0
zhEmT)ivzvPMmuJ{Pk@oxKyP#bBqCDpVl9d__-Q)(cHVE`-)G31@-)kiM-qkgJRMB4
zJUg022L~@Lwx8><*|>A(4lLud6RM`?MTbQKb$pzip3cYMP~4+UMFRShI7eQx`Q&&S
z4--dV)QS#+f{Q(IQ3G4Sir|N_E@1BVWMQulnBy*kD?Z52piiqTVVs50&TFodcJB_R
z*kqc*W<<wBI^fth*~D!)VH6u3HSy74okB`D61JBze@i+(n#L~Nydmju3a{&+@Hn3&
zqf=1OPjQl7d3iVST2o$=J@dPHpH@pUliaUEp1Vy;SceBBo=|5b9XN;2IANWp2wbe>
z;)dPDLtQ*nPN+^g0dFHL!)KgmNHaq1YI<}e0STVj8NW^GbmYHlyH9rNewf`V9tO`l
zB)$gUz<6=!ESXe*KN09OT#!LXx8pR*Y7t>AgEwJI(HCqdhog`R=SsOHnc})259F7U
z9Yx6zNgXMtrPF!lNMo$ol|5mrKes$%Ja&JIUT~5+I^Sut_6LUbbROlWS;lLYSDWa#
ziSO|o3^s$&oHxlhI{eE4(};PE*LCJ7?eg1QEXK|5+nl9o_guLTc%zo}MH`J0+63C2
zB-c|JY;k^VDf1hSO*~f!;ypCxhf%qgY{D%Rc+Xefo-I#Yko9VEQ~CCvkkR+8@^#SO
zajax|zTPwlBw>=~V*MKgDh6$3o-EMujPv=_@nR`Yg{H=EWi~m*YRi()eo9AqS;jby
zKAkXZF?bG=%(C(qS8?u{macgi^SR-hvpp7F@#knxJC?%HtYzO}gJl{vRmPXIqcQQ0
zIBh)jnS7%ShkhSv+l7Tx%k~>RDy-k;-CnXvLPMU@9s`!s0S=bjwrOW<)#z}mtP$Rq
zVrM~_iQUm#jEV`2n15QAhZ`wgG$Y5;c&!x`W^}c5t^>~vCxT*_1h$yC^ALtLw*6WL
zPpif9Tx(2^LC-@tLx}%LoQ{KRGeM6PljdGX!#Fi0h9|v-Zw)m2%+t#p@QyMIbpR)?
zEBj(XUe`mgpepVC7Gnl-VOoF8yn#1)qqW(C%rR6g8*E3i5V`5aRtU_&858|PP=c97
z-6vV}85BD{mD=wDA{)-`i9u7~o+VtxSql}qVIih0yjw!ShGus;U{^xW!5@>~g>wM7
zG-oxEq>|~>Lebb^K~gQ#!qtsplv&}1!ga-`?=&Hi2g4}{29kcXe>F=mKW-RFBu$(}
zz58h2!<Kbt>-<!`|8_@7AldT6{M$Md!AuVPHoBrU=ve6-3&}EX9KJ}-bj1aI1~Up<
zdD^UX<YrWHL6>a1tonDW5<(hcP7d=@Ud;vDjB{IXpCc7ZqmVZkoJoFKl(OG|b~S-<
zfi<j|ri*lZH31uvj0&ApvlDFNq~&Q=N~m&jX2+wtl3kq8VbO?A=BKe7hHTukkY;V!
zfl=3cvNOL@*#<A*#~2Dt9&9nYM^Sc)wV{c`m|;<=*VtBuLGA^f!4_9{FJ@@2(tOL;
z5zjbI|29WvAlm)Xqtr+ebV28S9P9;>+<elLk4Z(^@QKT;Ovwt*8GKQ?ZJ_G+jd_z2
zO;$6Y)eese8A`92r1Yj<sn?}%f|R1tMQ4S)K@ylg7A;7qUG!+WIKcVZG0tMFnX*o*
zXC%%L7Pf-<;=~b}Pj80QWzvdgx~`}R9<haYWV*_7K%Sl3w>y?<CP)CgByG-hGv{2K
zub{CabIzs7bJ*y*hZN|X%Q{;<?Dy`H2<e|IGUu=;60^L@%PVGCm=2qn@dA_59Q(XB
z0nJ^&eQ)3XvMZdotByvWj+Cv>*oJ}(H}1@$F#w}H0%fkW#oe6B!|2VYg*kWAO{?ZS
zRW;616I`um6G~8hc7}&E9ef-)K2HzgfE7tCMR=mNXU9AXnhe>LL=|tmfM-XOK#S;z
zFkeuS6*tiGRF2{)3_|izLvwq93=f%qNR6AuA+t0*2qfhhdQjwCT^CN$kiAZK8wf!#
zHa$uPF*Z|vIAxmWg_?(FrDiofpIBx&+z+YMR-UlMqqU2kl;ahyfzuId3+Wgc<4FLJ
zWNzl-?}}5vN^nnAglx`{8?l`{a<^S>NBLw&AGcCF(Y%cvsEsYhWz=Iu!p~hRj2RaV
zUBuF>I*>KQBCq%f-wj@phE!<~lVb=NFr0firwx+~7OvK~m5$RYb2&pQbV>f)p&7`D
z0@53ajrTu$68`s}J=OtuN=TY{D$8N(g2_-}r)aU4U4I<K{rM=H=iMLE@sDvAd0~+G
zOdMMLolX>CH-fa_Znu8iLd^r1kLw$oieASQ_YTkF?pu;3Q4=P1qb-Jnb)3yb2ilag
zEQPF#xPKgv;&<mA0}hWg>zc)GHu<paaE>@OceZ5P7_Gej_Vf%vD^VmwDN;}~`tdZ$
zA!+a=wYPQ#CmG%6A?!q(TYqTXq5rp8i2~SLM|83Z9Dh@-*Xemz07_QPxD##ZpM7=V
zYS3>ds(uU7yDDPH7#k@=CKcG5f=+Un^ykO4`Q|yOW*Cl+D^~bver%;QqWAAho&4d0
zbo-5JQ117v5nJ|4Uth`B$UtOh1o|zV*t1OAivG|6nVefKl!<|A0!BSo;7?Q}YZuXn
z4;C*=8VWrZe#d;!L5i!tZa;tK((kcanlo5QF~dq7p4hZ6?`X<f!ur1Eo?%Bb`<;Uf
zGe$N}Qx=rIeehSQCYQNF&pau9d6}^Uqrpmf5Oikg0gZxxF!EX57PUH)Y%1R;R+qDg
z^HgS22xbyVcBDF!PdzB$FSiJ5yxf`$*bVJHrq&`e1`e)6w{Aa8CzQ@hgL84{_Xf-~
z%{2gQlI;+F%P@IVBz<h+ifPlVu$ttJd(pN>)FBy4mM$9#=gLL$I-}bLQ;caK(NGel
zn(pd&c&*pXb$#94DvHJl+#Ov>pBg?PS0tcg3LoA~H#FG}Dq%c%P@e1%rMnUdO&2kJ
zy79D775W*=F{wFR?d?Lzib~s)A&mYCK3FEHQim*EV?n>|yMUy5J-!*mh_r!zM6jM{
z!cUm~n#Wjxgc;ZtIq@sx%$Ky6Z}06YE{|t{n1rT*V<|t2SqM)vu?TVsA#?gOOuES;
zQZ9c>CR~z#Uu2e{0t**-GRI2a)+tv&bjili=d3J}dqbgZl0V%eza*6g=UpKk8cS3U
z<L}jA=b&n~@=WK*D?a(njPtPx-c&+jJl@kSf&RI=o8qXa4|jT!J6WjAHMF2(B2;mP
zo+4`@#&_x5jO_cJXycnWAEaX$=mR00q4oGZt=oKqCx;|4Ev2_w%u;;qM8%BV<iRK|
z_e3WOFXH0d>a1Fja;k_V6ExV2%3i<|Zi|9sIS~XPz@D}i^h&gEFjH9p_N1Txug618
z{&bRM!$wI`wp{kPKTyM*V7+Ejc4f4J#&#rnnjS68gk(LFyhCDh*(C?m&0>~KPU5#|
z=7Ip&1QiI5SbXlg2)Ye#94;irUIb=z-7`FZlIkvB$RCEabV3UkiqlZ|C}G)32Xo|1
z3o^K}ei)dYjF2_#g<z)_b7^0d6wYGK%T|)Hfk{f@okJVNvOd+%EXV<>y0R4{*3<T!
zj_Y>;Y4qylWqq@BzS&KMed&`XV+U`4?A#5@au4wIl_}Y?ixNC!pX+(rx|t*7LYT8i
zE-@5Smt&jXZ`-S_NJ;O8S;HsJlTdpz&nagZ=GTeA>Ks&CVt&~&ZJ2kdM6heJ*dtfD
zlyNq0>Q6tD{r3JBx2kMPv9y3q9BpK=uAkUvlzWy_5F1=5_<$>{VX{h0w@Jw!xoufg
z_g=W0ioy9P0MrV0aOOEh4F~IM3oNuOrXVnEUnqAZ_K0l?3u4+_vr;RjZ5q5`bgG)A
z)ZP#~uX$Jymnf-^1efNM!*Q`jdFj)u`$XpuR5T05H-S^b8#o-?a&VF+8pm%~eI~)>
zYD-44#6&(;YY^`NhdK4lxkd@7XwF{$>_pLwoLrSdZ`*7+%j+(y6+2QORt_xygtdo&
zr!UB5Uzh~ahrz)DEl;&AT5*T1R_lk#Ke2u!i{38@nhfbM;@3_AmkkUDy0W>iAV7@t
zxJ4ixFXp2-9nmtUUAm!S_enNKwqi~7(LZ<0dce+%IpcDRb_N%0!PIa_6uprvm1wZm
zcz<5rCq0FVkZ|5I1d21GsLM#jp>f_%!-=Px5m(gK2m2!<P5<XSVm-AXIR{-7dXA!I
z8Wn6YJy8@bv8iBf1B+0g1%@`Vlw~(;0!|BY;*1_{!EC#((M!}}=O4Aiq;8YNdksMV
zOO|58%urJ~&*8gS^vR;zO)jj-@!*(EP4{$N!za$tJaPT)tKSP|RA5l!l(|5ZqN0VS
z1g2>qt16Xkepce()uURFz#GM!t`d;YD~_w*&L`P~&MXg~W`Mf}FqI?f78>Jf%E1l(
z@;sG@X#MSlMLm8bktFXw!A__OXu+R>ZjyUimIt-7xid0_DCo4T@cy|zaxQK^@d#@q
z7otF80X%A*3|6l16pnA60{~b8-*Nc_4&{?ov-l(#7yNoq)->-B=LA(<-1jWf?*<;g
zG!NpyW=H}#m8D;F3b7y2O-h*_`HAubxwZm2x}=|{$!TVXnFe;oBLgZ_Dvz8~sZpw{
znI-g4D$c+LHzhqX<e|NU0Vt%3az>+oCpKvvw*tGx+eG%Gx)<$&;bQ_=H^uBbd<2wo
zqFiA+8g%uu-R0JJIU!FN!-*}`f>FGP(a=U0BN!aOKG<Gm2sq-yQ3}zylaA*y8l1O=
zEgW*j3)qg`sJ>4cqBWdp`gSoBiO!HIC41>e=-H{!3d0tju#rx-oN1B-<5D^h7Czu?
z?pIhR0NyR_QQW}1xvF2}GYy=Ek1p|s_?!}~(wPl2UhX<!xy07PDe%P?I#XP%RIqhP
zPEy@&)xSB?{MT?J!@ejj<nv#*@URkWs13a#3nspcd^plU)gAS{xw}>6wJCWXuIlpH
z6ray^U)%b)*Y3(|w)vhf)yV_B5Ssjm#UDSdp+WGz9C+5Q)Pt8)5(tVI$*sC2e^^Pp
z<qxx7r;{!(pODyDv32A#K2vn>IMq-+KlA8pRM>^8CBoYhbLb1|7cpr8r{X>;c;tSl
z-Q<m?3FXm!`65XuHgADR*`yiikxcsy2}C%3k5b937aRyG3rj?5;cHQ`N}T8iHelwV
zq!vv$0iLCIU)0w$hZ(!&+4aDZp;D4-&=^cR-pv>q2SQg$nwwv_lrE7=YXE<sPQr$K
zNmHYzqhenBjaiVO)1TLvX9|J0<k&^JJQP%vXc{55_b?EA%ftBDrC;lbxt;(6mxwb@
zG!)egO(MB5pp*Jl{IyHHwW5WnVaj&Vf?5%*z@NvnE19Imh3uKkb>ApjczXUz*|JYr
ziX^n1&WKebBQ2IHf!1fSMm<A!ap$=yTAG~-ZgM)Wb)HK!2=|_Q#Jwd(3{EbT&J-YG
zqLtVi1QTx0)5bVIl~J<|%72a*lMOm&*dSpnWMI091#XrhI8I<U)8qyvdzD#MVyE^A
zlaaw)ol%1EV`8ms6pZWsO_@*2XU;NvWuBjO-z4Yd$&wDc(>zu=Pr+^h@jiaKT9t7O
zfjJ^D#nK0l<|8?-!^SfL)R9BTPAyFgy&(;eYQ05Zm<b)z!M7k2$*sd}JH!;Ad#qCD
za|}8nKh(fhm=*Mt^yMkjh1t2{eOgdS(g}p=&AM8N7=I{Vwp7)(rOvlqw}_+k_H9qp
zlM0j*R{t@pxukt!U%Y+0QPN|iDp)0W7$z|hXJEr>HXrRg-F*?g+}nA9I_&N5{$=~s
zPW0W*U-@q3`M1Z9xBtAev-{^K-;cg)@4wkPx%d6k?;gL~&$kZFCZliu^6KFHZ`u6p
z)t|rH{g3Itx1VhdMt|G>?$Pn_-%j5A__DJ1=jV?eefiDK_MP4BM?2H!Z=Y^`6L0?b
z<I_Jp`ElpZ^RxY@k9VGo|MKU-=F>ZA|8@J@-OWcozS%uLx;OlNep314=F^k2@1DH<
z_Gy1F-ud%4-zTpg{rUIb_5XVI<19OUc69oGJQw2|S9j;dlhsX;`L|V<fPA$E7G1f4
z5UMVDS*bcaEqRsuALBHXsoaBmu@i0F`SQ-44Ys70yIl^mpzl9nF@=}I4@>jz)^W&{
z6h=8>kx&gjC)+2a_B2V@djZ9PI<j)eP$wpxgB#<Ais=Hl^uXP8mr>gXKV~Q6NOI$$
zt8mRdfcj3R>01bORPQb-^FSM+@5n}&n6MV^x3)0!$UFjvVXII!G_h>l1!m#FMl)mY
z<Y4wK)$zOJ{4x0SXmvaoXB+%62nug#0Wv0sOMVMVR`nLsGJBh)4kRZ77L~Hcgp2{=
z)00eb@CJ{$a}XJ%SlwLUW~l{@$gT^^v7?`H${)JlsZ>wG?6H+aLwa_E-BIK-h-b>5
zqFHI#d0;O+We8OC*rT6V5^}c4B^CijPXw8S%?B4=?0H)URiT9b!#V-EFZTDGx-NGb
z+UbR2j9(qU9FQxD7^7V-={QNIu+ARO&s#C|>&XS6FUNtQ5}3%Ne1?Lt!|VqdN-W->
z9hdlSrx3n(lAUo<y;#h|nu3{Dg~sj#zG3#9%#y*$I2&ch=a_CBlpBvFwoNmq6~=N|
z=+EXC-S838t~7mGiDE#DbCH$E%ExC<rhrq=x||w`*s$fv9c@Ow&F#-7gzC!U`E<&`
zl0^(4$4MBl0^hOsUA{q%(zWjGsWWiqI~=9=0_HUDASW?$BCdpRHkoy1nz(Kcd~Z)p
z=PRUkuDqPjSRSLPE|auyAG!_Z7n_RRm$W(@Bveo*V@9Q^TSSut&j%+O4gi&QKvIW5
zPG;ti<~N;Lkd-X)@GSW-UY+H1Cz~OUeWG+eho*fRWG<HQL_^sCT2qK-)4$sgw)0s#
z=)^9E&lRp{Z-OiSWOh2bslS_M(`yC~HzBAt<EDnY^QvGKs_r7rLtt~TWt6rBw~*7>
z@0SE$XVYVvy?+;&kbkvBj|2{O`=xY69ZqxS94v_t)o`7_|D5*I5n|?b4L8(_J;`#1
z33O&KKj!LwMV#AE^l7j7mB6}1aWiG^FF(JBie~10fGuBv?CvZo(l_(zh+Fq>zDqic
z5A%R$d&75$iXpAG-P+Xs`1CZT>+#)t@!;N3ETqFz+FVXL9PG-WmlDZ|=}6}`z8@;W
zL8X?ARjFbuPhF*Ys+Br&S#K+hwbB9W6Fu*}F9ox|C@lQAj1_9!P%ktCz4R`L<R?yr
z@zHC6goz+Y@vV-7h+>iNV~(xu=g2-go`s|gfj=X*k9qJ5yIp6Qgd_8A!12X886Bd*
zw2`?{?WehyX4rfJZ`DwvlwFl&|0`*kJXzWE&ypQ?-lAxPakeKQYq8puXPv^Fgb*k3
zRx>qws|+kRSa|%1$!jv_iWveAx{J&THjcoktsCNB;J9%ez&f88X&kJHHhOfF0E2BG
zeJlQ+1vf^_|A2#9cZ2CUD;|jV5A9@1wqY)HOeQBSSpjV0^7s$c<=LBEu!<MVa;gvO
zv~*x%$4Giq6ib60gqzg0uRC4Er19cywFgPB#V(Vx^WyN+zA0>-;I58#pE!{AY|fNo
z`3TAs19H`+B72^7tRiuw-d3U#|H;D2ox*d<LA@Vit6k`cRCg^-iLm)^_T{eSRNVA;
zw-)bi`MY-)@7}#oJ@k)f)2@8JG{09=<_aZkT~^Z8RZF^iSxI;OYO^>g&oHuw)w0C(
z2DDx=<glmj^dttowBy<g4~8#r#ZW`uzU6<9z<vhaHU0%FTsEg_-<97-qdAmKRRj3x
zL1IyPxeR5>hu~R4JNOjxLg&V?zu8iw6ZR-&n0H8FnrGtssQd)F8dBANTGis{CwivY
zY)1ND`qg{;wimVWkNcPYsBL0Jd`Ulhc^&07agnOihcD&4uCLnfPQ-8hr0I@xG1<yP
z+9UVV@$6xbi)!+vp4@g_6h5FA^^u_0tN>hT+7<mu(3Ac<gQOW;#FN^=_m%72KFOD<
zjcN;y<qT!hB5UJlGAn02eNy1mr}23}f)|%PjEdrW{~lM^LH^-G53r?}(Q%5eQ0ZAe
z&87f46f`Jt)r`}20LUdTvekeATtxtBaCZqpJFpdq(@cyOL6o3uplnif!e(t}C!pKk
z*)h~Rt+%N`OJJOqtAT~V=$4R1C&5bV8_T$%3eD-}-Dk+&?Rl6uu`X*Bj*m&TD-&QP
zbG2|5&4OBs7tqCGOR!8Vwu@;I5TGo5e7MW*?~NvLf%+^l9KQ=Hjth(%t%wn2!@#Yd
z<{mku7S+I={d!kwI7&1+B~e-%)6tB&fKO<6xlWSNL_O2^Q)Evc0uwZ>RVfSk-ZfdO
zVToJZo$#gP6-BRXfVgvlb*HifN^CbvfZ~_az%D^jE2}}4{>xcaT_c6O+|SAonxyiz
z=B+*p9kddU<q%gzCvi{+J}7K*9;xgegCP`yGCf!RANpGOF~xVOJfShZ`D7%nU&NNN
zOc8wx_7+CXWfRCLV`g8mKJc^5$?<Hjl`PDX<~a;9W4Dj$9>S+>iai*;X_N)7hB){z
zuNu;^@uS71qO#<fa;qsJAaA>&`z3ecUeG_($l~f&6^T`hU`8uzE}(bH+~w$boZwf8
znVw~nrsPqf9aI5_bZI^b@ObJ|i!Hs%NGTQBqz=25QQf#mBAwCJ{vaUFZ1}v?Fek-4
zmc$axjA3`GbKo9wFw_tkVvEX4n|#g)bAo-zQ9%`Af~h)xQ#wFRB^@T-&c*3d0GpJQ
zE!hi~xz_z-GRdHop8I`*PAjK!eU6nLd9A?js;X`UAXz8+8<~wuNiA}{V1Q+eEX0YI
zp|fjBbS8&zy1Zj(h#>9FKey{W9ESf?BMR&Cl|AeLZc~qE#n5k70cy+$1W++u(nyt2
z`j$t<bN>25Wr_Tpy-8n4xD%sr7In=I)CsS)hsj%pd^!6wPZEYa7QNl!F3Fa^T{cWf
z)`ZnCH~N;@p8$<+0+i^<GD9?E%Hb92zgaGT`(ZO<U=-T;7+$@6Aa@rxsr&?999S~J
zo!2WD)Z^siKveR#y5aqROPjU%fMt&#Rx(uPp=2>anQy$6Sg^>bA~mA1)HDYZ^)EI}
zR<+U33te&&vV^^ES&x;j#d0xdczel9%%sHKw0PGb4VZGaPX_~Q0VaW(rv`MkTib9n
z)nQV8C@^Y=kJ3*8`JN(CHe0{Od;m_>f2hU<Fy5;>aKh4tnbY9&5c|EWbiwh}lJ8%l
zZ3@pY<YM;b9Hk-?P8}U3Gx#9+maU5?iq_@uO&8(Aii=y3JRY$AS<f%qBQydu=fjlh
zR90d*t>%ev{&*`Ew5C})o6nLUQps@=1u>_7w(}suWTmES#dZ`Hfl4AQ6RYav)Fykd
zp~hnF62C())ucYtN~-#$M7?7_y4pvWz15XFa5db5>1|TE@Q%VQ%@_{#j_sQ#@e<Xp
z@WrL!w^ZuV>ssb2h43XbFuBms$Zwe{^fjbP^$M=$uTpzsF#IBx@=>A_X_|0IRNT+A
z5mH~_o@|S~Rtt{cW0@O5jQ^Ic*ZClx*nu7_dLhT*GXSv_nq}{I952lb9?uvqH8aq^
zJ&^@@_&OXpM<<ddp%d&Tt#%(IQE_Z?EzWKoOF(w5_jop?jp_GMkM+_XvrI7t;9Ry1
zP7o|q_zLS9aZ04)%<*I+@C@5WhksT>-l1xkHwG@l;9iiN#mM56plwMpv$*f|NYQE2
zzb7l!WJ|UQ>MdGno_fozVn=TV=T&qxA1m3Zb&<!zx>N{WtL1bs)0mYh;4&n%&q1lq
z5&@_B;H}55w#r;^-s@<7g=un}yo2WIG87`w@SfOndJcliZVbU}E0^lqR0(Z)fojks
zObw&SNldex25`Vk%Q5Lyw8Em^|2o`m{vUDk?{}Ji{NeYvdaXz@TM6KoVd1(u7~SAv
zTpY^=-0D#u0b0}xbgI$2Z_=TR>i5Pd45<hK%~*EMoFMSOVTwiA=k1gla6FAqb+c7b
zou5c)C=gngD{BBcv6xWdB05X4hn%pE<3c$l>I6|xW0(7Dn#E$Dan*~hQbsTW`8>Bs
zzuflnbXs<1%k{Bqh3MK^mZNeuaEn<|>}+L_3|rvO%6+&RX}j5V4|n678JCOXVmFup
z)C%%Qh3gf077v=zyUk7EVq9J-^D?sP0^(_abvu@~<OUd6U|fLP=0@aqkCAR_97C?8
zc7-4=QHC;0D5kre&xW(S9e29JDG8(O#1h9{h}aM-K_#>j*m(R^z+jd<RB2BUdJV_A
zfUyMXpTyHq%Ja$N>q92kL-mY%I@iVCzSq@<3iK~Gr7}%_uO7xo@?5Kg+?AFxC^eo&
zOf+L^6z3azV38wC<avJ{7%2wN-4i-Kko&YM`oD%7N+=+VfjDp)82GaUn?+vXxy+fj
zqHPyxt!dfe%V+;mX!Yd5qc5z+kAKlUr8d)KgU3up@Mw<B7zsWK^a;$GhjCPnxmGE#
z#v4r!OS!9#f}BUoa6fmuv=4`$a)HpuH^V_Vk0sEl`3xqHT}O-yB$CqH0dS0STT+v{
z-QqkzrLk8NtiSB_PV+Y*9cT2-e2RUFrAiI_a%mu+1iPqMuhc3PH0LzU2jCmZ?~13P
zKrod0pdvp&Fl2FUWrMVsWXB40Bqw}4h54K<L;SQnr$+#-15kC6RQD%U9kkOKy?#o<
zAUFXmp^Q5&`@-17=Lw0!B-k)`gwxR!`1cgz%n)YeaBVW35cdoYD<%|X7n$ei(9C*F
z8Sn{w9dJBk&LIN2%*Vo3CR6N_DP5SmSg9DL$wjW*<#f>05vMRXAk;|eB<T+V4)QDW
zK(9&!a9J(@&UUmk6~IN=08m?7u!khMPm}O$%ok>Im!Iio<L=44@5%`lr^7HZU8XZ%
zd^_)ZycSRqAzL~kjmE44k)R*&<@y*@0m8~Y3PUx?klEC!d;NsI$|6{>ilC)nWk9_a
z!>$^FzxRgV@T^Fw-ZPi@*D+R7zc6q{jI+h0am+6P#@VquyTTI3tX#toZvg|bWn`YJ
zbw3W`oV|H0cp!lBSSmTGPpp7&4u_VsAi;42V4q0bV6j~yb%S0(a&Q*8u7eFakif-0
z&r9El`}BhBjYTqa=4Bw!m5q07J)Xk-_Ifwu4FVgj<*vCRefh5UW?8?y-fc)uJ9c^S
zUx#N&{{)KjYTDVZJyIZYqTvd9X>qKBd;mxo5VfPd>@1lcoZt{{M=$0-PkI2(>Q}ka
zHw&o(qHE*|!0seT5Q5^V2VTstnG;~03*eW_1@Ia|@$N5>3!uJc^9NJqb=ds#lhqvl
z^u0$3G&hMOl!aryJw8wDKtPTmTbgZNnK@Qw`^CJN{Uu2Mc{Aci1`M3$KOgAz1uk3G
zr2gYU_111x%oxf&nfu(0dGsIrG*~m#h&P{(=#}@Ioo0dk??bgxLDcnJl+_2fY6Bo>
zn|ajCBKU#YV_@N%XHoUH@3ANHV;`!~EqaU;RuZfa52IT_5z&JO(bnzghaaM!ep+_#
zF7AEJ3KPzG(lVkdTbcHs$q`DsH_q}K)e1<0mOTRut$VIjtsJSRivBZky<OqnsG*+G
z14Muat%j;ytXEXq9ly=qB+c)W{yu=Rw6vP9rzy8HYCfm^AR8hPU%hp}?>%Po3^l)2
zD5%N)#Ol`VDs|vAT6XX5?P@)G&t_JR)N3NBXk{OK5UQjLpD*{v2j3m6C{?KOVxv2x
zVi@EqvtqGhDnIb2fEjzQtko|Zeqjo;g$DbvbaLv#_0uDEx}n<;VxIH6m@kZHK_~K+
z3x_+3KF~%EbL;!%50~3XFIZbIJVIfT@F!jnl6O2!U<>6W-V>2bUHlM--#W|cx3Jw!
z7`9*;$7Pf3g^&o2Pf|$3%t0{NC4_(_B_m{3BpCb;pX=6pHR5>Ns5O7uIy1;RGsrqK
z$T~B~Iy1;RGl<I!640xQdyCC?aB9KOs;|RalTEqgU~1>G1EA2RB(2TaHmom^@STi~
z<QX=~$U}$fNX>OG{P?wpZLbjSTXET!7d?(n4FIOzoxeqzeDgrqCR#c0UJAiks}Gnz
z4U>d+nVR;+kuBThA=_~R`x=e6AeU!NEvDI2UvphdQ0ze3k<Noz0@?smne!zOZk^x&
zZjp{XsSD!z5!(#5;UHi%1IXKOt><}<oW-|1&I<kIBKlcMOIHX>)Im8Dc7l-$z4>L-
zj??^@UfHZxhDW0r6p*bY3dl|G{}v7&-92YRW;r*^s^^=nh-k>UC8AsOjjEFZ#T-&(
z^p7R9vt%pt_XS`ij^O{iwb`KmY~eq5TSzLxb@dM$uEB*;2KYjW(&kWyPSji7<eqxg
z7n)4%rJ2`|r0%_iR`wdpdc$z?LJbkv_zRvup*K-InK#rcS~Ct~B$U3ICEHPza<2-L
zuM*7!CaUrj_jj%_(SzcyGTj#y!{_-i?cp*{4}bXK)(fC!>B`=LAPrtJU+)jM=-)<k
z>j@3!qPj$nr(=5NMW627#VU?=8H?L|p27YUJwKN}K4y}Ow)c{!gqsG>!^!UZ;A&Hz
zTOLYMEY9F)6v12cl>+jtRoO02eOux^C82HrE;j46dq8l~Khz+E&C?&WL{8%o{e>k$
zm*~l2@Ajga?ju}B*pcX9?E!s*Ll!RpUnE8uAzXCnM%e$;s$6S@25h*(K@|0F*^2_w
zq9NYpMAG3fUva&z9I#*Yx_vPRuRGf=^e|!zS+HnnlwQnxhPo}ofh+{s50E;>115ft
zs;Y$YHHMh9EK~2es9|}$TgxpS$UoGGhAWosxNrGOuy7+-J$}R6?JXU*8aCYe5?cz?
zJX*9+Ws~Wwg8q?h<z}?aT)n(Dpzib4g6SoS##z^8zfd%tBf&&HU!;SKW?A%zB#nOj
zCaubC(kg(^MpN!>$tA3jZg$k|r_<TVpE{APnT91@0aZ7$HPAcntMX@FWt1WEcqhZ^
z2YGbVVN~*csm?=s{IHr$sgJ6-oZqPa(9nQOICtqw{D)i<qJr)lqzZs@kM3f<QW?Mr
zH`JO0E7Ge($;WRNTq|SgyjFhF25hmdA{5g(RDSat>0}xVI2#_I@%4%(uR(9vV13U%
zYzdz^iy3G#8gRZkrF#=X$=WS+bG;grP~}WP*f6Qz&*|%}RyE?U-J&jxZjHjP%`}+>
z_gXTukmm=1xh#Uc%elg%qqZJnd0QUlhl*ydDB5_DSy|@^NBS+i7v0#9SHCW{|5ZqG
zMlb$nZ{gMd>~&zI<iEA;H>0Bj72t54ce5b9fi;bhI}f5;$@p#S`{&))2Rr*Owx91*
zyiIVDP7-W|`c5AGq*{9ph~C3!^GzS&pEwJ}^DBGtPuB6HyhA;mj)Ni@9Vvz(#{&to
zk$-}QGp0vyPBb`<gHwN}pm*GPH%K&X7DFF!s_HJ?&)&7Pj9mx^Nu2Y1=uhnn#*h}Y
z3#}1GU*?k^E43Hgvv{M=T#sxLfs<@|Z@1$*Z#?gk=9Y|eENN#1wP_zu(pJDh!QP6t
zt^@m*x(TmnDHYAW!AHk?i5Vjes-qJc-OOQR2!hV({KVjOqFZ9M@s*)V{>KOF5YETQ
zK?y0sqT(rAKhcGMy25%bIYMRK8e%vQa;6#1TvkWv8Xp(NG$ULlY-K};$P9{xBbVSv
z3L1|2JB7(;0vWhu0rJy}3t)#oboGg@J`n;@bjNmf28ZNP#gS>e#|)ysQQ#U#3!TNS
z@Lb)oAsY{~qob5bCRdQ&T(u+XzbZ_#54MfR$BEd_q+XmWDB;jjzG>1JpNqlA3jkn+
zYze^Ej&I}D>tWt|E`4u^Wh!|#o=R>c=EFqXLu_gu+m)F}zUB4cf()pBvIQ~lL)FOw
z{L)n<$JL&g=n8K`E{Q%E4e=T>zJ`n!AmcX<w-s68?U|va$qm*LW78T|yoMG3Qn2D1
zC_55SU11TJp7iFz#QfzE$SmunOAyEmY7u3)to@59CWBaB6-tn;4tC9!6ln^>Sdt^D
ziVZ^yi46@kBUmu1-UIt|A)S<{DqdPCIN-&W)|^kwYsx2}7-(GzDlOag2!7P#Q%oLG
zOd`p`Vh?hyWl5R4zPNi^jpn(zPPN{)(L_(O!5bgX4rUveuXuOEeiu0Wrov+CYza)L
zM%(+lNV!)E1fm%;LNXKw$B&swII)_e!!dt%z)Cig1;>goGxNJ3LUGnlnRbD;`guGG
zvfw&OEHh9TSO5s(VX2MINeT6myIWuLld*R*%4rNpKZ)+MkNzP>d7RB+mvC0uDtYk+
zvEx5xeenfH<NQbA^yhLKG)M_8Rnq0?=ox3$^Ev)unpnBeOvg>TMP&{+jgyE+e$+An
ziJxL81!FEV^j5Zk%5%FM%d0E~3e>H46YOmFT@Db&Q3V;cq$Mud8<)*AHG(MX`$gqQ
zbcRt6oNdBd(+hL@@$#{w$>8>`cZJ3jCL}MPG;9ro)RnXf5S-6jW>mYFS%wzt(NW;s
zudi|YYux@Cx4*{iuW|c7A8!Bg&7TLOKfuzOz&BU=!Y3i}4<Fz33y&>ot<x0tt&F5$
znEaA)bDmQrXXC``(4J9A&FrYDKQV<N*VoG^0+j7A1oE)J_zv9nAK$Fj*YN)}{J*0U
z#uKZPq|13(CBq*W<)G5U(e2xld7m`-+qW(M@pB0Hr-FJ`v6Ce65d@4{Iklf$h8#|t
z+9;vHo~=U<8tSFKa_9l*C|89Z1gb|->l5m-9INnRD*i9K!Vy-O|4P87goIFzlt^rp
z_NVbwGc>Sp;$~5Z$AIVFa?ES-(R>1Po+LF3PBuO-3RSngA9C+Vr*eS~2harJ%$vk#
zFkOT}z(^a6!`$%1T8q8&y<MNILYJR$V>g7!I>?r!I)Yhhva;h{Gte0cT1mCg*K(UV
zh1&m0vEyyYURXF;)&TJ}Kzt1lUjxL~0P!_Id<_u)`2gZ8RlCA7dIksZ*~d4p4x7Ca
zR(6nAZcd}>c+Ld--{O=c)rB_rt=8tf)@HR*5xc^{If*ByUl)G0o~7fz*(LYt*OiKB
z3DUzAK|YDnVJgQHs?sa46+`!^87@~cKz$EnOT(NhXM$?04g|{wIME4BxEJh1eRVQT
za<CB66JOk^^M?#*6~T0w)A840s3yo~Y62l^2!`xNwXOiG6%YRv13W-b@mSzC;uapw
zr>fpzU^|6UTua8u8QQVUFxCe_!&>wq(yD9pz#%;T+`bR>)~k%4t%aq*`Uc^t_7;gW
zA@YR9*4=Zy$;(@Et4h!0tv#!Gt^NVEwiiD5FXBT}n&Py=9x%XhpMTVXr!fNZ$P2?%
z%FosdYGrM+5pCYtytrp?Ri#*Ug?FO&VSyi(^r%E{N)&71;}4h4hCfBsZ|Sm@f1?_8
zqUtl}dcRTit#Rf4p5|CoiwA&C2FAgeE7L_j)PvU-+hzp@Jr=dwZgsFE$tmB)g-*AN
z)IO|>1NyTCrQ&%yCT%3I{qauy>kE7Il@>sqX=SzSqdMM|W%coB1UU$Xd10g-Zgz9)
z?!^^&VPh$;(1hmszU13(9+tkRLyg^Jj<k0)A|wcmlIn`8a|$9$=Q2nN{mJ(pxP7Me
zdN!a#w6#4PJ|Qiy*1UU3cj85A3yLXsqrIjWJv<^8!vJLu6)^e5_~*qQQ}U`7GS`RF
zcm?@A&Y6dvPur=G(2Dy=^l)bQK4JM~#yO{wz{JwS2HRsL>D5Be0Q+!pn&{ao<e;0a
zNaQRz_<*YYbZd)0ujvb0_60i1!685VG&zBjuqTP6@(oi$s+28hyuAsXCKaUcSHNz2
z4{XpS)QwKsP^Avo6FK}j{{WB$oE}f|T8kYCwiOV9BXk{bgV@=I&be&tRGc3RP8?Vd
zhF<z`cK=Fbp9DlRhBPb=!W!I%C|WUh9zOyn+YN|`du9w#mCfgUG!^N^{AofH>EB@(
zv<zDXC%elvWtpV2i3<v2v&ypg3Q44QMR_8)yG>*J92w;4_Lr^A)}5-$wFYSSIKcHV
z>`F+r$3D3^Q>vkgZt0MCGgg2vZRK-#7Bu(buLfJW#_#<r;rB!l@aVlz7g+U1b&cv<
zqx${<s6O^L8k#ShsP1O<p9|JkA{OnZW48ICrdJ~rJzW!uu7OEwVA2|xv<4>q%L9`X
zLi@9TlLSu;aMF^md^|vDimYT9-k44;F1Q$&CZA=TQr&}@L-g~QQ$Qgdh`G6hkGsL@
z^MOvfr&%M~`*yD(&}Zt!gFioO{X<aS9y`Ig%L}0GCl`UX4>eMuMKcAM=j9X9x<OT^
zK$Yjr4eHNTd^YU$OF-Y2k4A$bJ%&4~T?fNm_o<I&4my4%)HsP{^65N2axsupsp*`f
z9pxNB{6QXUtc6|u@hF=Q!xWqh8arHy{$D2B{h=!}uMALOvjR9M9Uh!zPo2%17Zw%g
zUEPd>5R)}9Zq19k2B%$*7gyHPXXD0|)1MCp-D={+otT?;Evj7GR^!oxO6Z8JMAxw`
zR~L5OYGCNKJ=1GPyDtuCfd|_tvpO~WSE#Svrm=3M;`Q!l!*eOgiNO3W?YV8zGus+*
zb>_~a>2Xd4(k<FHFf?o?L(k_CXsEzK)oM}S3X2wkl3BR|XVxME7HvOKJDCmIS>6N=
z6LzSdq7y{OG&eP6U&aOo*5q8888^Fq!}K_6@YB474?l7XZ?WYT4hRVxnsU&S0Bb;$
zzn@NS00ei&vqxuOgoJE^b3F{3AY5=Y6L~if7fxZ<rTfLBQctXu9SSPU*^$OctR=H_
zEAkLG$4&zUcF9pK4O$bhuJLtieBByfx5n44@pTSgw+7h#Iv7}&sq-sHS&KlsCn~o5
z;$*CA!S)itwnq;#qtuU#V$g){qG6aDflm(av=}<lLl1z_DO<=csidxE#$mO1I#jFH
zIMFB+S`0<*9!Xm3m~q*DcBQEQh6caqvyyj~`~UWBG3U?`C*)bDY~u1mN5`3rTqhV}
zB+5SG5Ut6au^%RY_<<dq;2{z6NDjmd2#2|+;|wOtF|Dn1X7*dLDY29|W^-ICFu3{b
z&da7k@75-`BX4cdfB*Y`|9>=jyf=QaS;|@87Yt$W@k8wA*3jLaDk;<+1ppv8O1I{9
zX5ckU<bNj3)3W1iHS<#l4LJbpu#ivp*95P)>EJH^vmh@2l4MZJCh?jd>YtV$Y7Hz|
z154Jxk~Oeo4J`SYfF)0}p9fTOoB>c$D*cn#Zk}fAT(fJRx{}S%#JZGhrl1n8UGdj-
z#UE#%Ges>8*pigAv`Z+73OzFh2u+D$YL(wqL0W}<s9GU;9OK9%T0@>x5o+sE4M`vx
zk|-3pPJcu4(1d?S9bv?8JxykKrH<&mJmJg@Pj_CqB%-?eI&<pl{b!Zmq(@xDjR(;<
z9iiCYXuRDKsRN0WPsK_86nC<6EgDhysI!0Zy~=MsRDLtWfd~P3(t4B)&s&d2G%7W&
zp0^NSjgB%kJK)(29RF-Y<3KaPDygwUKA2Z3zj1YnBps~GffS;}>@1=8w(i{FDsBDo
zj}1-KbDT&Hgq)kr_40{lqlXXpo!|X#;m-XBC?)J1&cuNpLpv|14C2TxuFx<`<T0*U
zrPTZQ!a5u48Vs-o1FXRSYcRkX46r8KSz`hId9eVJk0l`7InGu){-0*oaQZ*ZuH^E+
zP{uwwomJ_dX+CJBS^IDEY?f46bUWh@R)hReW(H`E;(qRb9cN9Nuyl;Em`-oHggdO1
zspwX7hVAzsOkNL#`gfM3E*eYPBiZ#KUVf8hX2kA6YwA>wvaH&xe5fxi6|YdMT6@U;
zH5wObcSzJJ+?0>C=o6(I+!L*rlUc1^=l*!xh`P`zxL=@D{6%fMwdz75G<-$d{jMyo
zUdqkULx1#s33iUt0y_r}*_xu`e=tQyGuj<<w3J(+ZjxQLRKv8Sj=FX1$yiaM+ofbX
zu%x4@%y2VAs*ON6GDupec&ExII8sPdseBfHNhRo_LMWID&*{{&v0}^&r#>tuv(=eE
zpDn;jc&Vcs;9d#E5{w{hDzs0dYjEBK2`6ddBr*#|3H_G@@%dO%waQRH-Agp<gdhD1
z4>1lzoCsPy9E?u#mji?4BvavC%CiQ|kaOB`&g9GVUWE@OnR2AqpCzjLq(-)8E{UHn
zdo1H`k^oUvP9uAz<F0V<FzUjYlk5-*4N78qptIqC6G|TGi4y%bM|#(oWx`;OUqgV_
z5TO5g5THFL#d^d~QIK78!mK%Aera&e32(##*Pw6uNeV<yaeDp}6T{45alwRtnq7?;
z=4ed}v&QeN@jGk$&Kke-FOT2(cba8C4}#}MDj67_g)e+s&MFjFB!a<*ga)Q;JC$c!
zT$L`8qm(mH;emAysx>UgU_m@rKOzg&>9Q<ToSKT+<p0Nmhkl(Ygm_zUudY!IYgEG;
z)v!i2tWgbXRKpt8@H3+tR!HWhCl*r(;p%5jBE))1yR95e>@w)kZ&D~)$60nfN?Mq0
ztz$q3_&-~%uUdb!Cj{Rx#j@*9Y4__4XdTAqolT?!xY|P%O)n&ghgfPvQk-JaA-TE7
z!m;Mep$+0KCd7e&8*pxYUATc9D6|D@29kE0lZEiPkxj$AMp9}mD5qiX)`R>!=<yc2
z7#;*4b9bQQJdp26LJ>{QQ*6h}{*SP4vG2^PwKq*khM;q;Vwqdw2LDN$8coK2!yc5E
zCFu&Z0+_WRYx0F}_~D`a(9h_tuw_=(GsZ0YyN5qSM|ST8t(R$>vLFT%P@Lc3TXpG-
zrx*iF1<f;r-!AtNz5X<TGh7XG6_+K4#BKD@_bfS)*0isW009Ck7(bA=`Je6`%hsaV
zsz@VfO$?Iq3XgQ6YV><4HTd>p(^hq=WZV&aSFebIrB&CVkHnAp;6YTa){%i|n}#ew
z>LHm8H6C1gWj-3={@put3)91Y_#lDqY;L&1*RlUVGYQAyN2vpPu{F#79hH!ZUC?az
zi6Iv!9q^;PW7T*Kt1Yjt;@E=eL)&cE-dCGP)kahuPUGWjOn-5mK71WkQ=P*PXz8HL
z7X4ohMQJV7yDLw9U6C|84y(i3q)SR7*=(Z1V#jV;TpuO)POGx7o^_x}uurQT3M>0K
z>d8FsK`80H&C(&MS=-}t>;ST&BJ6Jd<%MWlI+5NcQ}q&CX|!3d)Ag*eK%bbd=kPJ@
zZh0EgHq)lp9OzZx1?xX+HlGy-JL_V*!ww0_=@Cib9r{}xqo3>8#|99pMu*Six5?P|
z!zq5Y;t70ct!#SShF80p=1sYAGCLiq%)I;d+`mSvFMKI|d)}`52rWtG46=zmJ^%Tu
zfEBQ7kB*|sOA_!I+CduxZInBr0t95p4X0;1TZ0oPtT_KYkwp&$uQEuYCH4_#&)oc~
zo9c7U<`O8uzLxc<`7qjdKk-Yx+;jTDI|(7%Qwh~EFAsQ$t1DyKOFVM|-XFFzEA13+
znWW4+_X%uSz1HbgyI97MX462{oAYDZTvx4GgyX<mLy|Y<SR*=3p-`$I?W5}uH<s(J
zLSn&)(~_66jH?<gbzx8MD515kmX{?B75~d=_BH`DV@IKLr3baoWXaH#%6+^4koJfB
zTJeW`-081}D)`+`hYwHBn>s(5XwCgLU9;QJHy}Se6wgBwzwfu*ReKCbEF{xIS>hvY
z&ayYj_<q~nk*~M?=k0H)Bnka!uhmk2hSk(M7OEG{<cCg{^_R~d2B|48X{)q%I(k@K
z;;NspcS0G#a_Rwk&VR4H_`%?ss~h!(Z<hNZ?WbLg&icJ#FBC5N4k%vcvdXXDZ~H0m
zYr~|iVP*eHurf0v%+oG=0WZirX7+?N&TNe{`v>G6vzZEHnV+h`&0j_KF$gVADq&Cz
zOG@i>WNXyf8g;ftovl%4Yt-45P-lDJ?)^NVv&qQ>n6q;Ep9DFhGS|#eYlxUa#Ar6G
zsiUq>9hF>%I*R&uHFs3t)i3%ogho5Z67qJlW$Wh4uEw2~Q@GKw4a0iEPyipO+MmX3
ziA)tD;HN<7c&1)tQzBYwajo+SRQ~v_ZQ4O}XR+?KaYASu=|n7<|7M~R<&*df+Ds^i
z|Csfa-dzA?T8q8&z1?VHhI(B*So2~(PsXJ4OU+_StaO?<<*lgp;usu3HjCh`pF7Z6
z`L*2UPNDX?eO{UE3q8Dq?yGYDPrSjm+iKSg(1Uc%yaUb~0PTi7Rd6i9VB|VumYK&w
zkJN#Pn^Tm{#k13(qd!Rl%t)(j>%aeYxAi4^_n8!ow!%r$mVcUDKOYy(Zf?Z??`8Sy
znB?ZajiOuZ-KJ~tbQ+&WxBB{1ou#)1jmmG}1iv+m9z>g4cj>3{7u<sXxLTm^uhLy{
zlixa`n|E7Zpfu2$MYoRW0+VW0!cf#(!>=vYbj?$>Ms%(boohtr8qv8%bgmJdYeeTK
z@l>5m0+K4|%w<F;U0VcnvZ#M$$|^`#SHX1RxwWkLS!KmF_tYA1_D_j7E3QdJl+g_2
zis*FFCEC+f&ic1v&fGFLyjiQbO}n)Zq^(&AmhUot8(6sq{5m&)UmXg>O+A@UEbL0X
z`U&=`obeF2Y3qr%kl^D5yoGu#1y5l;Du<TwUAgVYYfagBW9Aar7{)9avHGQx1xnyK
z9E2@5p^DStg0Za2sH{nt)@Ye4qGeP>^9)Q*N?ZB-8Zom*%>088Gdf!Vm~r#e-})zm
z%dFudYq-c7F0zJ;tl=U*3tWVW`F<wE2$#*Ek;Sik5^hAw`!zyGcz6XnDWo<m(jBtR
zyd0QPAWmG2`uU<8KHN>|Fz1KYK$V{xsG`$(jaB)Xu`1_3CsgGs>*qSqmBOT0g<hFu
zljaB;!_R?Z!LjMy2|+AsXNzTm6m4*<Ne8BsrM3KZV`M6oL!1+<MK(LU+P~e}qW@1*
z<L(_g<(hfI9=q|ZNt0@HPP;=BUu}*@vo}q7wtjWwjZTmy;G4;L<)+RnPGVua==e^B
z7aRU+x$4*?Jg^Jc`)CAb=i8{~-;-&DUx0@hN_?&QmQ<~2ca*$KX{e##k)keUuo>x9
z9T-nx2KzoE4fe&eSKo=~CRwAA{Fy}V8`XLzjLcvC@mjq#$wss~X6LlQ&;rl-EA@3^
zxHaHr4Y*kYZq|UCHQ?r76>uX<TFm>bgq1VO+*l)WeubIi<ihIgadQ7Ua2&CnTnUjQ
zkE%?V<&}acS-I)@NUy`T8_MRb%1t(X@J5abN;v8GD7(xC<aDX!iWI(W2Lm6u=aXdU
z>AU#c&BU|EG)kn+#|%jsrh{4K=ES?|AIK#ywXz^O&bqoGvj8jnV>gHWPUK&ei#RnO
zR9}$rJEAW<qVM<PH)&OFQWre9w<UjP{U1C0E&Am9Dycx@YA34VLSFqKkBmB^em#f|
ztJxGRSNNIVsQ#eLYBXZq4mA#{+5`EwcBkH`koasIa^qR;s2VJKQTL*=n7wGD0cJqL
zXek!KsY~9Y2_LHUpoA)3g02%&v+$Kxi)zDyFEyhPjp+X;;~LkeUYBp*g!E2oE1lBL
zInnS#(vXBzp>^{tNF2sR%%<lZN3kJ3jmVPk9VavA^jMyK4=*L}u#GG!r1~PWALsOc
zw2~K!h;CF1oro>WzR0$Ng*SSg=)L@f?$cfXkDR*lu_^JU;vGw(W8%=KDe6>A-Se4c
zMP>qAa8f|n0eqz<O&up^?uqxD9kCPL+xh_5L-00z`30=a3G$Nr>%|fd`Sl;7-#>^p
z`Hp-scVBc*x>g<~K!7j}&AXW&aK6jV+Xu8=w36}LbV{2S)xB2z{(1NH!Os4R?dLny
zaLz#E<4u$!(nD%9M?a@ey|0pJ&O&!pIPO~fyGF-w6(6OmBBWNivUtcUzQ)6?@o@hH
zxftD%>{-V4&WAKhKqB}k&XeaPosD|lo`l1&HPJ`-cvPXX_ixapnUHYtah4dsHg>ly
z*2MF+dzv<Lp(@i~=zW+-Nj-<&2|useB;(*ZG*&)i)!6204KL$}?dbM_K=5F*uE>0B
zI+j`J1vTMQWF&+*zC%l-XnLyj8xo`yy^vI~{9XE1@1?5!J^CB;pgoxdy(cLs7P&oQ
z50)NhRxRdRvlcKthE?7k^Eib$+Zz|hDDu|&a4eQ|r<r=EC98eOT*}tmpj+4gB96SU
zYgYA)jEq2|6tX6R8A@{8^ERDKYIALp+w>M2V&tZEZ-cp4D;25R_HalidtP&|ssWE`
zmLwuG@$W%8JNLi-o=(`g-f^WK(ybrptiTy%Wy9sNP%w6TUl2(m9XL(phtws>J6y#>
zts9Cx{2>tRa5Qwd^rE%V#HIImfT?mnu&kpO=&uh|IX#~EH6*H$JHXH4^Ugv)2TRU+
z(_N}m{G8EtKV~DBRPBVMOy69*%I&2leRb!nJA84N^ykMN!GS)Az9IcK2^uRFvyK*8
zZm?oO)OY?~9&X{IA3F96AGL;Gng;f;lm~X1S7fUz_j2{#>QC4fex+$+*O^;CJ#*{i
z+)rA!$a%i1D)OyQ_t%PEp1>u#A@J4rAN~|Q#eM_%>PEFCG@@Ke9Wt_Z5`M3-(7zBC
zdf8|~{i3hK$+HGOufflsnt^uFAO<KWtsCC9FgFKm;(R&gbD8a!4EGrZv}M%%V-nI7
zuBo11ej=rTgx{Ho50n^|H^?giO2lt-!fR30O9QA-Gq=Zr&tW@vEC-&eUTl?;Ld5?i
z$17LICnFDSV$P8>cC8S+o0cWKw*V%OL&KyR;_3gt8E0o>2DY4)`*8KyxY>0NcjKIe
zx`LJewawdqv*&tLYbqpG%QaUeo02|&b-*jfEg=@)|7{lMZ+g7@(jV?7=_WhqIKC)&
zXVw)I<-vdfbt<x#j6u@UMd@iG=51*0EOCsal2%1pA~`x1c*)sWlE|k?u@e$l@lNJS
zI2YxkY$mzufHtx&TMDeYLg$^ugQm=*=B9XLmzT=kSs?S1S)7ijW#9l_WBu1y|9`41
z%!^y}KN0HxfL1eY@v6HUiM+3&7@TBo29P0r9_QH^57{Vvlh^@q#BOnI#4?Kez>L))
z1^n*jod*B2DgSJ-V;z6pE$ERq<!+_IUW{+DjASWjg<i@cq3SnBS=P~;Rr;su0s-lU
zNxnBr4c3ThT3vZ*bkH95(^#)Bc_n~I0cJ7KwHwdESZoq!27cib8U0Ib>_iVA+-;$u
zVZ#EQRn-8VAKDN+|9e$X%cVWw(ptB#RGxUPT$xtm6-9GJHyiiqzxS?L-A(ik{d?D|
z)p@e4cUk7x+u4im-MizBdy`~RFz(Us<{f&XT?f2-7Qd6sB<h{yA*59?NIAI*9eUY_
zLH6Z|5DpBsSY40;I}7Hm7a0Qokw&<j8HUl+J%-?Ml*5GHCXo-34m@eJnFFiFQNrSK
z&d3sELs5w&&GWfnAO|GwLZC7r9t0`C1xU_L-_kzp(;wt;?L^0;tWPqwwXc8f@I$sP
zcV8U5+J5nPr@QypSKq#T(f!NL{=x3c7tx_QEEoxAc7)Y9hd*?K=e^yb1SVmyznr&t
zj*qJVR5+#c1oal+6Gp!JOad7WILxBTU?a4Ugpju+Qmv?bFG@}))XB!Jn~q7+#931;
z&Ax0V7m+0y0ucm!KpPn+XQOi;P2nKPXozi+L)70gM7SPz+`c)qA(;?-fH;IEJ0<BM
zId!~OOg;4Rki9AVT0C<r!*!e1&`H>MNX|k4y@E=!KLEWp&KA}gpIg34;WD)bu+_$c
za~jap$55u_XfHJz?kiT;hZ3?fOplJJ83=$GLqC3^6A+`p$9FajA}8{O7OZY0F&2d#
zUo;ozBpk8fK|oOGO_^n<0;oX`kAs0KjeDVqajr<kv0pbl?Wo%pN<cf0viVq%Z!1S%
zOkQ-ChC~PK;xr~vZD*&hdO4@vI6Sy3{L)wBl_qh0N(+DFVIH(g#$(3uOH`dG2|T35
zO>ilFc9An%U$_!$_R*R(dmRS34uf2WL9W9f|K-CV_kW%U$SELj`=2lF@o?WSI8<ud
zBt-&jHLPl&OW(I|M|&gErB4{Q-GLLBntV!<6@4S)ZrFEw7;6N6f!%I@KmnBs|FsSs
z{24+A_X{HWc^EgifN65U6}jAs?l;{{s$Z+#`^91kv9;v?140U?pD&{D>YKpL@WrMS
zhyBNg7gk(&A;c{gGiTm_{c`MbPXR-<y5uKS>i~YD&UvG<Jp8Z_U3}%pLrI%QZ#aFJ
zN9*za_KQa4pP1@;e_5>Ev|@cn8|k#}eqrv8QU*^hthM<R=#8oqb?D!ID&`#;|7wF)
zSe{Fg=Fp~OAHGqQT+h^x)a5h`RQA)IS17hY=Kv)A2aGAM`Ev9x!R_)rh3?SW$l1P#
zKUn;$S-EuqAosH&3e@a_?k=0Fse(KqhE;tysQErkBFH2#2aOU|YUhmTfS`E}*lj&v
zEd2Gw@L34oVoctC<oD24d)joKY+=T6cYj?`cb^o-Mx*@;1hUar{&AsfpDikpTJbZ*
zC03$hWa7nfYyTv%d7{pLLUi6gKK_ms?~jYXTL;grgXh-4a|^+9`_Ya~YdT<6MbqO|
z?ko~m?_VQcZvRT5a$fiwOyl!x?8U#~WON=#gMZJmtBHoR*}a1##po<gB+8*>B3ErO
z6D*(ZD&=i9qOC@BmnE>HQ4D(6SNpGbDk3G`WL%DGCITgZ>*70a<0-yg4zoHv$4`!~
zLa<J5&zM<MpRu13*fTuBW3#l6LbUq$r=j&`>FXW+@lIfx3<#w+=)K=Q{A~oo+AOIZ
zE3}iI14<!LC@9Iqituz0&)O_QctK4{YOs#cosaw3J8gfxzLXH#TPr?ISN^#}gxu#k
z>sX-`u|iKmmfd2c5E}wqXIVr@7*P>~5VfKMA@9}ImYcqzoW5dRXha5&EI%gjNB0;O
zW&15Bo?m!0Jg+%A#$HNhgV4@i1gd@%5BHUU>THYiyWJX}PW$@8nzs#^`%o2d0jn?B
zry5c9hDWK(F}qJ{dtG;S+n7kW*k+X&v#jU_b1tY##qU@Q*WnlZhW>fNBls--bk~^L
z@7ZM1OvifKcp&G;+f3{*d&+1JYfr^R`z|@g7NdoO6098ndScod4OUy|+A&hYepj^N
zW#^wO++xG6cp1>eC|Q{W0d}OKL9<l&!Fi5wS-M${n2jVjU;<<E;)CD6-2d)iZ~L*v
z)&_PR3xSqD#5P0iL9`E|->qf0aG?<f@UoUH@xboG5B%Su)#hI|vZA71{vcb)mBTAI
zTxv18q7p<`T(}3Vx#ZX36sy81o|dgGoA<iYdH+0A_T7+?wk--%VSLvl@@ruEFA6OG
zC&Gw73B6g~tp)+C;OOFhDtNSpbR-Yl&K7#p*gIHur!9o#IAPAY#?)uG#6@;h5o(1c
z;`o@>)@*B;hy|NMx8$4B?X)$>PMJ-hHOSvqL&E|-&!^tEuU_r(5k}{8zQj9arK^~<
z$ARyx0@;(f*)>opYA&nytK3cyuBvq{3>D#aa!t4l8ozWh7mm`Ry#aTB`|!6$u0!*n
zb|cMO<G99pWWDb0iiJMSliDe%N?qYAfiEo{+p`r{wn;@rz-D2dbQtnB%@sd&`8;t5
z>pXrNp0QNUzRZ**6C|qf+`ro##^=$iSI-!C$f&?<>Y%TAoyyqNd`V&cG<YlGsY5GD
zBw02+2VzaGgi8TM0&JK}J)Bnp5B`!&`xyrnz<By7fYVM%dL^ZFhOI0W?gb9zA4Ws*
z{My_PX=Yo|t4uss++;3V%itkLTs&mAh92m>oBC8QK(m`TI?LFj7c4<rRQ6Wo6Eu{+
zqF6RNLn;Y`<r30#-!(L(*1ZbS^mL6hT_a7`NYj5sr0M@yplQBFntmM86r<6Oo=)S*
z$)BJ7Ot4e>M)w$B_!|>IUhvINgricyeqrLXv{l5Dv^7p<?RxaP=up4uAJS?$!0N9q
zgU33j#%Bh`t`lQWYqD#hSZSfH2C~AHl)x-?b)Y2nhb34^(hHM!!Wql^V=;jyCo^TE
z9{ZdhMDbZnGAWZz);4UtV>cj`A*MAVTIt)(wnltO#Og)^<^1L(L5hOB!#{qrJ*O_2
z>LZ<~_b8!GnMU^^U39Iu?kszgj34$Icw^(SD4tCa5^i*&4Vs@LYywn38$-H5PkpHT
z=0p8!7kN$9ZsAs~{&gVsui5(7Z2fDt{xw_wnyvp|9&p%N;|YH@JYktr-)RbtRNqtu
zoTeL(gJHs>e}1-67t1B2mj&n`OGsBn4_*a3NWxINEo>I_N9g0EvfiEB=B0XSyDe8C
z2GvNEZMT^%R9I`<?MMo8D-t4Ke?DF$OK@>A+1TC@TU{Qi)esU#ql6`Ql+G?qVgKfk
z8(PpfRbinsLQqldFk53NLok2jO0sPHGC?WsWMe&K3SON)+M#5bx7lOG9m`XyYHDj!
z=tHZOiv&p>oi5Lgj-j(2M0dqPOYN!Nt=a)!$kdJrSa_SQqS`4?C8s$5MI_>N4k8a{
zM|izUrLPiTdnUj_K%Dr9$`+V+Q5Flcvuv2<?OX2)mH5zWaK)p@3$;--luwaVpe&zO
zBTg^?`P4Dg6a`d~P+3?H=M6mZ;P5$oL=y<5A9#UvQ%sbyH7?!JrMXy+tfJa1hMNI>
zGzMYN$Zre0=Jlfg7SAl6E{FMSNOQyM`^mU<mcB{*u$i#Zk6-P_-94ecgW;_$@3c<p
z(Z9!U;{!87>70`pC=o*}q>#Qf7|mJLUbrXO(k7?gM<Qmkk*pn^{d5o%um}8^Ilx&m
ziMRK5FDA#G<(?S#UESOwOa;=2egsZ+&W3E+H&(2YjaJ*4cV_v9XYuX14Wg%0NXUH8
z3=kZx2vt;Ken*YBA*E2^+zlJF#ca5_0~Km$M;=@{2?#<g6@q@3wgR`+N#q{44*P64
z{xzC=ax@Q<0d{)z+$2a*A&!qT#?T5&@JNoIRJBg6<^~=mrI-&Io{!P~&cQ1M6Nn~z
zj+&Ba16IB0k=rrNgweAt+By!_O_|`{Yuy)+glA;|oMb+Vr(uf%>y0?*9NM@1iMnj8
z(3R9_=gm*yVy*P)*gZ;3{)&ysJ~=u{2bfEdia;$aa^7;}gZE2Y(8FHzdjFX>n$v7W
zM>Bxg`N;++SvnAFbP@HVdr~C0ISfZO9jd{Y-;^~K5>BB)7zj6Wq#=PE`T10ZK}^a$
zn5a_OYv361g#0S^V`_L{wJHT=Ncal8HPF@`n*pqKQFCon&}Uonkin%t0rvda5+r=a
z^avjhQg#uzj5{&vRtDvZNO;5;*Ux}Vg>Lj&pt7M(yD(2h?pAL{8AfC2V4QRxM88}}
zy}EU`t3fecm4$-}(XsF_+LbSuSuXCAv;x1243S5>rig(ajM&4^)61tVFuJm0x`M#$
z66bHk=jCu#7j^|tJD!*!9c|DLHJ2fZjoxCCV;da1SdMJRmyIZuqZcrf1Ai4_APZpH
zP|(JKXpV90{<P;N9MN#JqQ?sl<|g6IrgKg+;YGUMlbshYyN`GFU-bap^{IhsSht5y
zl5s};hW$1M=54?`NGudrh4dUGHfAj0>7LxCwKk7Oi{2L!)FxdvO9oKko59~rH$m&F
zu&Aa})>-uO=T}=e#JqM3#;DDXhE6mh{=L<KjbDG<?L>!i_XoD^f;Pkn=Xjt?uS+qF
zsBnEtuWyyE-_`3Z$^Ygz#j+aZD_aX!?pA*D!7Q^_rxGkL8Z!%BDfLRsOB3gWcW}{T
z*sL;3+9Z}!yYJkbW8L2Hu^~*x>4sZ94&57h)&X;8x%GKLPGNgQcec&VE%SZVogr4&
zW{`G82JOeZA__!xrrLs>)|#=bdP^S0jZjT#%4HU_8J*eQy0dksNnh6I^>u3+y?^Mk
za8=o)KA(;x!Iow-t19%CPUC7vwVLA7;nhNwB^XD)>Fx>xDeljwY5Ar_&(Yn*Th5fp
zx82<jji6GzCy8I+x)uA>Z_9?(Rq<-|*9#-L@)M=o#ZmZBx*Lw?55960`LC`YIBP%k
zOoo8L4tZ$=`#5>>ioJrt(BPJZ^U8S`V#gOwM>Ct_Nq8uFL;;r@N+`}y#2*E<l|UEl
z>Qt6gerh&N;#1a*<TSOsZFDvk7rQ~*7o<knQVMj4znHuzO3U~&iqHRp#Lapk7~!8m
zHv3$=f11mH@bDW)JUDO>I{?iN0}_f?fPRy>&5<`elAql>!&3V!SRYYulpRaryLI%*
zzfv-ff&no|=n)v>gNz>Qz>{_0$v-lqLEtn(N`obn^q(kRWeu!e1FP4->NSP$n!@*I
z0anjxuznsmHI>XT>hc#p5j;)BmFRrwN)sqThmKw&jeiCTUJPTAg%{mrSVt1Dlw+u5
zS+_5lGqCi4jJHqk#yQMV7|c_6GuK4D*CXof|09@sX=YrPte5TvM7@4$d9Gf10#l%8
ztF>nNc1EfK_UDWUq~2%IQPKp}KQD)Gn6vw-RH%jO{IUeT&ofCF19&oyAmQVngL<f;
zuHc~Q$8^jl+}FAiH8T-n8{f^K8y6DQnBNL;0$MhVp7Y7gJ^0}I{J|K_Wfa0V57g!w
zZP<~b!?#hX=zx=I3(-mZcn%MbmoaCs#c$Ak`de<&1Uz>a1h7v15~jwUjyhK$A?~c=
zAP!@^AFy8zp9DQkz(fqFk}Jr_fj<O^dfx{;#2r^)3+vs}4|muq+~RrbBEeg@Q=}d4
zT!nS`1NX!KNZw&gumbfk1b`CzaQMucfOt(nye1%C6A-Tnh}Q(fYXaiy5fI}X4LFGT
zq{VE;aUUGDtH_A)!gctFAtPRik{A!(j2=PgguOByr;&-2kzkCM$eMU;<02XKCMW*k
zZh}BrP#Sns7ORhms-kmzisageHvS(EqdTpw&7u%1*SA_<syKVo4Z5PDVW7q1Lb^%c
zc#3aSZgMcUL!1eP%J?X|%%0;c_F<E|>9{La94Ac&oXs!NK{ldo>k&1$AHPWh^5%P6
z_&e+WNPoYNs>m!^jUGHCF+9#m8&k|a7?=*LG;11Bm6R7!k8V_dsNfu8<+&Pc5Tcrq
zKEfWS(ExKL$ka-U<>q_T>qFJOjW?i5#Z=34n%S)uJww&|K>tw9@Xv@ISMq1t+Y;zh
zX0UH~X3{d*CkcHg*$^yF{p2_uSAO%Go6)W%wB+G%6OpH-&c*^?<>efntaS`P#Pl#q
ziZ54RWcK46B%iZrp@19c2TUC64eWXj)dz#Y!YjQF^@#jw-6EjE1&Ys#W6|7s@t4Dm
zfXQ>?2iKoadL-B+%?)5LXbR{!WyPpU;ui~6JWW`}<SUA%!sqyor|qn&E+q3RP~ET=
zZY(N5-d7m1%r085%5dnb(O*kC(V}6CF{mu?H$uBs=*8{(NToG}_P-#7HnzhyZ+-tr
z2JKf)8P~H#T(KJQh8Nsv&1b!AXqIf(i)q3L3{|(ZRZ0qZV}P!FHY(@JXK|6P8N@$<
zK^)S76Ant`;iZFIPv}L)aNDr8TbMcAZQX13<)4*(d13t4#LH{w+ZBnI*CfkptlOGo
z`MM;_bGC<;c$Vb}3(1Ph-cOld*v97)uY3hhs93tpG$F-sDj*317k;?$G2J^JWqsHj
z1^DrE`|6fhJm@$|L1?w{@IiF1b;n(&JuRi#ogmZ}xBt+(6WpB~Z#3*U>+nyzGt7`W
zBD{M<Q=%YL+>G|7>01cbc*Er&u^GhqWP=BsOFnh>fMI$>iUU*z>2K8~fuFd2`z8M!
zZFZu)WZLwfU=2&+@z~n`3;9L0DX0kbiVn0dgbN5Lus3{9xu$G&B0&b}RFX!2_7*I8
zV4-$W&SKM=JfoIe-`Y@Xh-(&3a?&<WuuIBV$V##?*9p<k@sfBmt(XOoLkSN;a~9an
zzhP$t_J#?_wb?|<5tD8DJ>Y$vk38XW*4R?35l&G04((pNVHD<HIu_1o@D4bsD|!*X
zO^;b!&7#}4ckKZuaXpOolVc`NPWT6k-AA#vZ;N$pIFz+taU66sjN{Jc*4=+A4?$ac
zQO(1)lDLx5!k3-h7^O6==F9xGmlOnn;sV<7K&lT$iZ}aUT>NIf*xUT9bG>kU4?Bp;
zQzb|A6e+W#^Oo!-FOnHMBnq)x;>~^a?4W&c@QfW|h1yEd!xE1Si~H0CLEJ8Tf;D7U
zBOmi~`gJPaV({glbp9huyc1?xTA=c`uPYb11BIA%2&gEmqmZ0jJPGPxf|2DITjte?
z;EQL`1*GpLMS9Q;e>nu;1hnpj!xS1ZM4@cNqZ;NRx)!s0nZ>-|4LEl&mo<<18g9Ra
z+pppFYaa78-2RGidm4?O32qNQza?MzRJeV}RW5M*d{%_p7YGUE1;<8+r$xl`3{iLl
z!rYp~d>vX~Q^toDkYE#}ES^Q91VT$Wu3*i6e%;W3{PTqdEUud`yXr42a3m`9KXTB2
z=U_yhA(huP1i(#!5F8XD_{|~tQQ-ZN&cp(+9#}@UeCCt*j8mfqBL0tApHEps_G&Hm
z&i8gbOQNnGQ=b6({pG>}er5pnp&_uZh7Po~R&TB8;Ma8UYdZKf9sHUOehvR#)4~5U
zqr0!7ww0b)2JyZYX*}zxSA%%dgYEVWhGdtGyez+DX4ZsE02T6aJUz}@Bm<5(G3rqw
zC2%QJ;sCe#M^T>TOY!&|o9ct8y4kwZ`s&LnU!9_R>DryvA6i>->86rV)7Ae)k5&PA
z{k{l2j}D%E$2|g$VRjG4ax_>?T&+BMfTjY^Y5^wtjn|8WJvx+_K=~*UybzaQ(?tLt
z(?msV5?9pZ%owg<bJ4dUKtd>xc6U1R@7H_{t?qR4<ZqqM0j=_6pMGbja*yjt*Apo1
zq%M9<tNT!DR&y5{(G#R9t^ZJwV=>xKW(xH^&5s?MCSMRVN+(LcYJjc%Na^j*PO>gm
zB*0>xep8_<o#-#g;C}km!+O+w=$f$4;I#Ynt%v$C+Oo&9(fCHq6AtdNrpvT$QuO-|
zv`QT&W@g9%y3zU5hk#KqtdOe+-(~LkD0=y(=9}r7D$I>HYE=(=d;j4^wNWUq?muJQ
zaXb8i{jVi;tNrejb^sYA5;jPN>`uqWwR*kyaQ3E~O>5FSQ~?1PE3BihaG!;C^LAFP
z*Z(9{`cO9}#HAo=0|<T+ditZ0&#g7!c?ID4v+)^5(Pv~dtVAD=Qr<J2Tg89%OghjE
zZ|<$=-(g5FhkD`EaC@O19~T@N+!sa1rhX1@o|<8!bWVM?69&s|0jI*%1dvdD_?61b
z@g?|zhSO1;p6U<|<>Ew&IovG+3zivsHoxkc8^3GM1?rP8ly~O<c0j+%-)+Hh&0>v+
zk(}*Ayd&~xPwLJC)MHkV=)eE>e+8oh+jXw$d9TGI&@Q~A;|+t3%kyoHZ|C%F{i>kG
zYlQ8;61n75Wphs}>BaNaZ>;gRYy9m$f@?Azy9o<&Nk3JCo7I0Vipdh#NAR?m?d+Dg
z63FN1R|WF<CT388^KsIL5<{)IlNEMr>^8Y{L-=?An{sbPgY&^C$<^DVPxICagRUH-
zrZ;pdYFQ;Ekue$KLCpooCMT=CCKGzj98T_WK%i5DrAZ)KDs~q}&5e<ULo28OX+u7V
zXu}`QIjDDR&7&LXn7vVA2^9);dBw>KY!u}HxFC&~Kwe^ot$>KS_zK|1^ewa+e~`#L
zo`v=129m0SBZ%c!%n!?IG&twV>?iPkCemgPC_rt*K^Sa#4&#A%EpDdtjuX-4+adr@
z!-6rI+#7TzPk1VyVr{9Fl5L-H80jZ@OvItqr%5QpvLxQg)C(ty%n6gWN<OA=W;FEZ
zb%PRA1Qqrz3i=^mL)Jb6WbL(WS3J4B1?%EmZrH{P+1xmmR!m(*`Y-BT*ugv!H^||a
zuQ79L%-ouyc8!_405kVzSHoy8%V)>a<lxWG8qxD}`R5?we;=jCe+Cs_BRUvoXGbH_
z_C6!JF8|vI;JWL5zY*;x!~7&YqUrIH_C=gIPv(O+Pab_DDvv(M(dqmc6a)j!>Ddqm
zOpa#I;bc!>f+T&I4#NZFcuA&jE!&~sV330agoZHI=%51`!6`OmHo1ZiT!NSze%JZk
zvL3RY;qSQ4fqp=}$}o>#DHhNtSTvXWp>KW>G&zy$)L=nP(xJn>Q+(?591kGCh95`)
z?#Pa2JXi-bSXjJ;=j{o8hu&@G{1o1{UiWVdM%jGWI?l3VjpFI2$IM=-?%-f(!jI&3
zSt`~-q8FUKkbGD}(a0~Qt`K92?|G9ysK2&Hh?+v`PywV&a~Ev4Wc6^RWOccr_M|*q
zV|Vs7{XyjLLp-FxmQ(XNIvUa5IaP&(<EI(TPi*g?)u3);(~qqgXbFg*53Q`pViXr|
z*63R?&rRY%a$&=GGZ@jjd-5o3qq^=Df8aaN8l<YKtOe_cWgc}%VaJx)m*oVOm3+V=
z_I;I4c>~D3Gy&=fI%PjY)~i;u?+5GiCBPyb9S4P#Ey#(e>waU9yHRcFLcBcP(7m=_
zs7u!9<ppfEc@6WsJgnDv`R-QxH1E>e-HTT7rN!L&$}jB3(p7zV5r1gARbQ`Hc$CEQ
zmaD+Rl8nPRy1bi~1{vkBvxScl-nIEqS0rujFER8XMA;TYWPPQ}nfkB+cRHO}I`O6?
zs^KsIds;SbOI<lS_xYy%3=+nlY+Sjb@a%dk*D5U5W1^a(eSweO152^UCc&XvoqNru
zKVscD2uM#dv}MJx(pSaoYemSbS)SadEl~AD@v@nVXiaBk5iClqYIId2nYEBTQEo|b
zj!4*~)EqVNI%$0MGtkQ>wZnt?gu5WvZo+M>o$Gz*J~XLcB-ywHJNl~U$9RCB)s0<<
zj?G;ylbI^JA9j>D8GQA7QDIvVF^qcT+aw;Ec=S2)1BS?5nuk>YUhI{sjna&S7E!CH
zbig2G10N;I>s_cfKEaaNfjr>v6`K@_J$WvshoBcH5GgjBuKHnyAhu<jJ6_E5)`cJ(
z1n5B#&pdsD8n|Ic3#zY##+oM((m2A1ieXB`BeDl09tVwBz5l|%r>oR_t7%iNIh}=d
zxAh7o&McFY`4lFE+&fKeG37#bzN`-&w29PTv9e<MFbuPheNW^F@j6o{h3tDs7u&V{
zB`1j&a#h|77GAjWI*f*jBU>+S?^p`0qapcwJmtBX#CbY8S7+I^mYd(6ObYYWu|S1D
z@*5{-VOQDQX+%H5x>PMy|H-3j2vHwlWhq2Gc#5TWM%`AN7avwmEEt|$w4cOdYOAE2
zc!eruLH<jAFm?@TNa8+8BxsET#TChKL)C`ZqR2GoJOZ$hu^?*3<Sfvow)dQ}eE?aQ
zjp$VNq5Sf@V9vi=X;yETmDGe_S1Q)I9HY}=lW82hm^MmDEIx>7+Ry?Uu<B1o)xjj2
z+2^4ca=HLZkQmQ&_hwP%;*I-ajl`|n>ujc6<gaTV)hd^_P`<pdd$#4xuJqH#Z;w*?
z=h_+DnBR+a`UzMIcAG~($w)->M*weU*w{~wE%B#lU)jRw&+pklN2B!(gsji@zn`d9
zP5obFe@6aV`Br#u@v+bJKd#jYZDQIX%I^4+=cLe^KlyeD$Bg{>R}3j0;e$oCV=w_)
z65dHXPDWV0jx&S>etJUYK~V)_%!~CEgFEFbN+uc9N^kxY-MxF~%U`lqEHsw-3Q>fN
zsc=2y|C&wb`m!pt?39wv)RNY5s}a3T<7jd+d49eP8WL1XZhucYc0U;pPS^tP4q%e0
z&%^eiR&H+(YW2jfY1MxDTDgO!)K?pMc<Yy~m7EZ)uwHURe7sHSqt1_lLj3DGM@m({
z=6RBT;&~!ArO$kz<f{*qi%yhaGXIiC%hEIEqC@5%blR*qb}l-1qDwZ_PuS{Z;;h)~
z!ya`f(M3nm(u#hbGwI3|b%)bMr_*H>4YywTa<KRMy)b(2xc;Jp*?dT%{)Jm_p`ydS
z)#!o)E4s#c`g2v(ol_T`VgC$0YD#S~1lIn9zS_@dR&ixnJ<QH>W;&3EK+zQveOZ0|
zzdK_)7tJ~#uqtZ!cgd92K$e$C;b>2#(~0)wxz4z@Kjo>0aZCpgvei@JVjZVHUZNh7
z#6H@7a{1)kHxG=wm?uDf1)le?Lln2ovnd$87xa7R&x?z`2CK=K9}h;!`%H8cd(RK(
z_QB5nUv~C;b^bU>BGdDUNT@sxk?+x0&kpRq9vgmE7ruUwuq+~1*j;lZS@7af0eOTE
z&IF`F2UPIES5wAtNwq_swG|)SJ>u(vrC#!y3vW@5He|cN$(pha2tf^S>>Co)p2Bp@
zrhsjrqJx-gSzP&#w+r97d_fhT_W<(c6>pI=XX!zl_~6!J@L=u*yipQQ$0ZRj88_!S
z1ikhs9naqdB43j)G>6%MR!9?DI@n95bayaE)BgmV--F<J`oGODZ|XE?dPya3&a&o0
zxvs#xt|IKs@&dM89TjbrPFClyMex)Dy`R3+sZ=&w(e2xIQndGU-74E22QBols+Cy7
z)^$%%y?Lv$h4;7r4$L_%<Ju0LX>lE|8|13zmcPCvQXMbjR^={UzkHXf+0Mg7>w4;y
zw!WTOvMw!8u`Pki)060#nQNPwS)(T&>zJ(gtZkKUcPw_cqDAFxr7Unes>3G?2HAXE
zWZQJ{Oc(92EfARM=E&9W+`g?5WAc%ZX(r;BCtuMS;#+6oq11bmj?-CBs0Q97=X5aF
zR~F~8Ay~n^b}}2Z-%R^ov>>$fLI~Fs{m9V5(-MiK6kqNM|DAwE!QlC`czR3~_m<(?
zx1aD5Y=1YWri~NC%kUY2?%0IE5M^4EM2J##O55d@8m9DP7fiIgNqihjTP!F6Q~9OO
zwE~E@b*9isNa+r>Og)TA)BA4!(HGtCULm(kZz;DWYpWqiYk)1}(_g{Lh>>jaX)%?|
znM%6~_uICAWtZQ0uuo6Fq=$Rf4F<o2O&<GYR9@6#23Ka_jDumq*^1f24@Nb8v$TNf
zQE1q<__cgM+EvuE-PcBx-I270TQrpIc1xk?uCm^bDdIqxEY=ib1{m@@=w?`zH)B+-
z$$!^d-tT8V=!-1_*TS28j48lA@awVy_*$0@01g(l$_8NFwMye&qUc^h2VbEg2l{yB
zLPhr~`txO4wP?DSXI<0zy6?WY^G6nfy7TEM6oYsU+hfsxwCK5lob!7BS*y?zFA_nr
zVuW(3^k_jHd@QKvOG{t=5e=&B(gxa1hvi4T7XQS;t1JqWUhsj+<&$xFOA^{#MvL`v
zAKBsiWh$fD;vv$yq$SY>AKAM~{V(XQ42sS|SCu~Uly?pq8bGV`9qPl@$|>x%V95TE
zs%W&+=)#Z47P-~Bqw3b{{oU4u>txxOENjS;*+t{;I?I1|vD-=?;dQdSA<J8$x`nty
zSGB10k(q29(Ip?@{Y5A7Qn9(U`XjVMYp4YxESj82GMNbK6|&2jnE@Hbqj+F=F<UB$
zA1um)%A?-_aeUOIDdSFn!t5cDCC^3y1Zp4`S_@}Xy(J|b_&q!%|FLQ4u-iBQ5DKTS
z?FQU8V_{@R-@uI3&{R6r-R<Ym?;<wUSEGkfwbZP<s$~^oE~~$f9`EmLzuJkQQtv+A
ziMAg<e);;vtEvW6>Px1WXgn*9BjX<nnGIbIq4K5>e!40q8mf<KGC4Hah$*~$pKl)_
z%E}=CmK4g6iVe|{sRK_Z8XHY|0*xXUC+Y25*6me09IJZU_!`{}>pyCSzXn^Gr6L70
zr-baWJj!6SQtL?UBt?=AbGD8@$;R}jhZ`^L9nr}gK{@Szz9V$(7snHEKoX0^GaC<$
zlQSgpP!m{LyjS4@IJRYTLA2IkHp>g)=b`LT6{{I4m{&EvlqHz&l5;n|H0JU|_Ho_;
z(8U1bRTb4*ng;h;LOBl!1Q_urf-<l^Ku`&f_1h5LuOATQ4uoWg`=#p)`eS9o5?0Na
z#zRqimZ{2Oy@m78Aa)XFM}2s)R|E2E5D&0YfW0F4Ibc+90jtVGCq}nJ*@dyXLZo{k
zre~`g2;D*8u?XIn(Gp*pjs;QU5z+e|OTBwkxFetSy#UkGgrwC(SD)0`aP+|FIH{99
zc0!`F!UI2p<lHF4;Pb58zlPk5_j<11rI)~C>G`3cGafR|l+TWG|NgPdmvfI{<p?gw
zL0y;#go7}Q_+}_plOAgF$Z#who4O<*P-tf~7(swK)SC#YVcDuY3IUQz1`7Q@WC|O4
zAwMyb2tVyLjO+K5Xc+GEqGFgqBvdsPXHZ$!@bmmKW#i*@jE~kmK3?UxvMM4QZ#N*i
z41}H_B*8Xl|C}QugAFz6-Or}SIC&p7?^~h#v)3vMs7plckC(8cs|m%Ed7oxmLAnpW
z$#*~XljU!o#na>@o9D?=fztP_e@=K-T@^GSsTEyaE}t)Y_m=to3fnZ86w<4;aA`Xo
z+GOcB;a_oFQSOr-S{a^3tt)?1f%q$gbp_OG80PXXx31F8Lf>NdT&*DNXCoUx(n06&
z5;0-3Kbo#Mhd!s`u)VNsO=5v@b;+WpjZ_i!LNb^KYrJ#eA}@p@c#M58&6B=|*PH10
zEIW=Qf2>emmNy)g*jCh*Gg%)Y-nEZP&c}}93R#V?h-dC7S(t*J4<lwl9*5OPs#7cN
zZ7wm?WKt50v_INmZ?t=ekDz*c*(!RH4VYKRd7Erxc3o?{{Ds)e(sz<^8%w*%LoW%c
zn)=PA?~uCcE4I$V!FD@?Q60OwF-!oh_k76(5ityglyT+<&2;I6D+!>mQ-8dnhI-O2
zN{YgYInfAGu2!9rN8c@Krd70#bPK16F4H*++Cx!|M9y~89Sik`aL8>?a&y;X5Ih3U
z3Tr~ak-@k9spUGopis#HRDM=L_l5opN$O5rV#FD|xD11SIZ4I`2hXfe@sruKrZgu&
z_P{1`Z9m*?`h212ctw4vndwwQZIXB3GZ+Yi3}~*-;d?kQX_t_aME#Z2T>9Mtoz>D0
z)5mB(q1VTGK8mJ!95v|<#LXs?UN{k<HKAT;;)XxNajjQSykx4W!j*^oZ<F%^!J3Yx
zbuY(_Yv9l%5#NM3F&*%x;Fh|4VUwO2?NKk5ot3}yclMQ>@ER+gTGhnZG+9+ree`=1
z92$BaHUgwSGXT(;6zl;E_Mg&>o*508g`6$ffJ3Jf$`VE_=Jqol?$R61-IC@3KfKM;
zo)dF=9iCw0rGkMMhInBx7iK|3(9)#A7Z#;5LRb!!YXw+OU08$@Q!cIy`dQ0iA))li
zW%4BVO5x0uGz%8K@L7+~@^`qkOnK(IJGVKM`$?4hS(JPBE;}_vT{mV<3-bGDW5xDq
z{C5yfDRBUsEJ8=yxco%Hm$u+RWY=;|0@zS^h}3=%yqzzklMQ%VmIU%><gjIH$uo7~
z357uz+UO&J!uNlP*tDm~tY|_KvTT1=ZhwCesR>wPvmQTteeh~${~&s(2}!Jj1|tA=
zrb5q0uelqK<pzill4N{IZKwKHGd|0kW_%XrgKum$awQd6wL$v}v*T_+h*T;#wtev7
z2jhok>s0SAD2d*1R)f~PKYa1kAMbA6yYq*y{@9x5P2|sMZnj(%1Vn=bmaUlQ64eQN
zZRd-7cmLQPCU3c1W0VXs9Sp%|m3X*aLr|WW55o|p$b3k6pc8$*+EJ1CS|>s+>4$(N
z@rAd-M}O{CHyaRPozr12(Dxk)OJnXC*b9P<GmH=WDir|6vAAxTFFA3knGr3f{8Btq
zLZ-jcEWGMWv6<aOjcI?7*}^A%_&Kd1XVFB3ofMGI0YQ<B(J`~b6eqUFhC{PjveIwJ
zjwH+_7dijO(V;x#ra{q&n(<9O&g}s+rIsE4WBpu68}ZNS*q3@Py7jgGs|;=07c!Vv
z#LurXkX<QWs#!8lTo?;eFfLpPH(fR`T?H9jc;}Oqdus*2Z)FjtG%Z)jFA{;OgiB6=
z=H*f@p@=t^!yo%OZE|QVzvCWe1r;2SV9#nTYNbVul-<JeIW<Ln1|_px|K)0?>XPcG
zGOh9BG{OKS`RXK$t6c&~(ArsnA15*yrIP&Xn0=;9H`+W+PQmv~no~17YSKrW{p?+V
zOGWbzS6(FV=tvW0Tu(V<Tth}=Z@BNG2hVwCq9sYWDubdYS4e1_<5p~go=v%-DTM&Z
zb6M$v?T6>sL|DrLewap)dEus~TWD?uTqZX;EL1NkMaj+6yy-4_AlFSpAjyrup>@+K
zX>?0=zY?{hPcC-Jd50J&>dUS|>;fsSKoHAaavDZ97l|<%j^EZ1A?s|uT5d3}E6e9d
zg6zjQ-ZL3{VXFsQ&G<Z$yakJ_7~3ubfi2j+ECA0sFYI+{Nn{BQ)MB(t-`eDzYcqP_
zGJnL=W4^P+ceX0KFAjG0Uq!nwUcHP!8xZ|v``PQAgQ#|Ev(tIC^B=Do^lYa?_v_LA
z&a2n^FLqx%jcyB<e3eVDHX{CGi)LS9?s}&NG1|e}Aakx7RHiCyDjrTCcUY{U-gr``
zF|i$0)$5S*?)9#uq0~jLCh9Ondo1)P7x1G5y9N8Vg)hxk$AoEIkzy`UKDi(Y{!<33
zBg0gi(RNW^0AN6$zZ@;Ty#?FptiF20q>zR_U0)B84ABkRrKp?zHAqgpVRiju!4?sQ
zt$xaw{@b3dzS`S(3bywpBl~ZAx)3iLTq>=Br`N-J;jrcx4y#8Uf6~C}sERDQY*77(
zCdY6c*tNU%(%}!qq3&U<hy51*>G?6&1uf<2zjs&60R7|cRi?sKr-8(vNR@jH4a9J<
zDb|#pC^t}vekD70fZq9(iSVb(*Y}^Uwz~h+i2n5PEBkuGsg><TzvBV@b&cMQz&}t}
z`5u?Ea`i8mK@U=xDz0s|^kSVja(!;yLdMQm(q;q#v?pXP3ev6UxyvI0Hnl(`Utw7Z
zEE)UMR>Vo4`CyTlgB|omPnLA<6F^8eOAL|clg0D^peW#C3f)a&qX>k+9+-P)@jDlj
zXhe8y!o}y{+H$(FPs3!h(iEYLlbA?48rUL#Mj=)f*|Rbb>yWFZY?d%c!$MGUBEe`V
z=0i3+nNh7R)XweUaeL79HreseGlhZT;AD0>s<(>fuTR;0+=4o4W2UsRoUSWM+V8v9
z6fM85yxw~Phc7>Lu=9!*&S;B1rlo!V?auyA;o8>MpMGjxQ-E2b#>dy~?_d^Q+^x5+
zw9VhrZoCyp=s&+C=NKfBO&}I@EbW5_cX==IIqvvNuovccC2BlmQOoE3e3s7UvqTbz
zl)?-*^1HN5NFQ!(2pwHKGxFJ1afcV4Nk&?7O+2Bv@Q+W299Y*K<Y2{&IX@n~Gm{@+
z>~txi@~ALETwKj6U#}eOJllEvD!Ltgv;XpW6qZ%vXLT>&B+v}E9mnjX#!fv<;}NsU
z)(Yg)2g^990~+4CCde7UY#jA`WqRTGAxA{tJT$0@l2b^YL5vZ@n4Lq}lcKW4Ozi3L
zFre7g>QXs)vndq#E^}6`_i}IN1@1tILl^duB@%h{ro%j$;VSNSUu{2nwnM*Y80*4#
zefYxn$$$T!|3#B#b()_|=BA;7^Sg8iQw>jxNsy+32yW(g;eMcPG0vObX<ipHXBh49
z#nHJxX4x!-ZJ9gE0n{BcvX?<*GVxrDEKi{l>rbXBCqwsdY2F++hc1{eI=wNo+p`SJ
zHAzeFZRj+@H*)GxOyTqEmwn&8+tqg;Uidj)nbt&^b=)$U6UU>hk9COd%&*bF({t|O
z_U*;bC8chqKiGmRkS7-&dPv*K-ZXpX*w2fTM3#d!v73$^P329R78AT!FC>yLTI{Gr
zFxJz?Eh~0Gs-y+$mt`P%F()>bZJkN(&ERS*z7m<>vR>$M0W!w1gh6|<&66w}`h92n
z)vN8t-$om^r~;ii6K}R5BP7(dPQ=@Ywh!R@tG)W`-cDrK=@cyv2<d-<!)YB&(_}o%
z_00TqnY@sF?Pt=eBFU7CQ-35zQeT7yHk{cu7G{E*CbK!oVm>B!%H?!@IX!I;_Mr|O
zT#wzYi2WeRG2%vwP|uh18FHarlgQ}`*zPM4E{%}r%=J$<9*w$FAU<n4uj`0GolZ$Q
zrZZRf;R|b6Dv&MVD6)un9~3xpu2Z1Zu$vF!Q9P9bT@B^p$JNl62=K5KeuWyMO0K-z
z_hHy%SHt*{&RkO9(muS_psc9j@;;0&>CB6281~`y1|>O;2j`e}v}&39zrFy9ew2X7
z8(v3A#FK(0%kpBW@JYfAQ~K>F!*D?pSy-?SE@_ADdz)?t+;V^2{TfMHbTjEhha@d;
zHKMye$X0mKM_0_~f;4`5-WA!%B=U`TqY-WN@t?s4?Z_8Dyou+w@SnRI3){Cn{&k`L
z_z^|#qbk*Ov)YNOF+_c+M)=X!A9wL%P>nt`7M|Y>pWh0fC#C5F9{+*<W4V11l?oMQ
zPG_3S1LikkoO_3ZC6BC5weyE=09W+6#R9p`m)CT+>(1HjA}wAa7gV5kolWD(L=>;y
zZ-3h>gOCD&W#hNM{r-9P`<MIQ9qesC-udlsH(Yb~<1_n$n)c!&bx2RL5xY^H;LUIo
zNesc7|IsLUm-f>UPJEKE^$c1(-biBi`3qqo5Rr$@@!Y+hAs8#iw-uq_t01f)h0fs5
zy<vCbAv}T!qu&@(sY$YnKE~_k5WlI#YIcLBFSf2)T`VyON{l^siOxbCE9X#>oC@;f
zndZ)&a~uO~J|4c)Z~?WlYBJz^NAuIM=&_vRg|<}5o*2K)(xK8x{-}gZ0KS6oyrFo_
z5}=l$Q5a9BSz3}IPQ%Q?#1VK3(j#`L%GL$RX3ii>u~CW1j<K^%#S)m7#fkmK*|?dU
zPQZ}O1KHBYe70WAgF3PxO-}0DPdHsdRNFpyyt~UBV)aI(seT(AFEJJ&GRI(&O4jYc
z?w7<2@f>GJI5|s1F@Yv=e%jAQk&P2@3Ch|d(`%R|YI9?Vq)K%{nTSVsk1QW~&^T}+
z%}+VM4wL=#8QfueyrseAHSE$fyZ&QLGku(t{bbCP?UEC6=0exe>2ILcf;MTKyaVW)
z*Y}SWstm<<l#H3Uz!xIOGDbE~OQ*<+Xju?*ON4A8nw)Nm&!D3JbVvh#-sP-}^V2Sk
zM8@mPnYn)ZTb`60MDp9;Qhnzst)#cfaWa$bY><Fmi1rBGbMRmzas}}YUn)ecT=vMr
zXn7@Mud>`+p)J)JUV6UV9!AQBA{Gdf<dF+<N9xS$RizzODDYL^m@3mr^{Uz?+_sg%
z283chW+&r2DIHmLW(LZ0=|vRUAkDC<w``^@DR^cnzodvb$QHz<H<qkjl|fG9H)6;R
zqK_3<^yHDXW}e&pW5{AQ6J{i2WP#eo`U2D&1k8%wf$8t&H_vEN`BKYNsBCEhvCqK_
z<IXD11wMxerlY|e2%vtNIqQ)wlgVUs{wZ_wXPbfFB?%Kao~D|NKt}SEwxB#r)a^5!
z^2{(}oetu03{QmYfA3PsY%hKT+BfZjOhdP^Sb&q9(67gN@r>5!jyT%iIe6ueQ`>S#
z(@?zC9Yc1HoIyBnm59NUgRU~F3|&MLD=!e(t{CR%dP3U{7Kh~OQm&OC!Y=cylYF8t
zJIpQb`>X^E)Wnm)rfbZ}(xy(-D@u&F-t#LTdadYNIr^llu>-(YGR@}5Kg^l-{ML`V
zrr#F@9UfP@jnE$@MnFzwIH8Ist#@oB<JMXFCM7v6l@v($)uyMr?rA!v5bMO9IpDL;
z<~}S7Mo{Tx#MVNB5nc_DzuIk(HFE}{FrkpKL^yj!g|F;614{HDdS8hY{w>|mpx=Vs
zmO~G}F^R+b2Iuxy@_dBMqlH2gOBi08W|>fYDq~Z3lAPN8$_H)-&SIuyb5>Rl=d-yO
z>!RVw9kj-?=taD~(6%U|LLV=W4CLGKS)5uX-Ii{PHBv(C-5vet%yK#L4eVs>1Eel2
zl)#VFggVU^@_1zI9e(3o{5r{%;g|Qtg5y4{x*6YA>keIMK^gm+E`Fd{G@}!ymQ1JF
zw63kU_yxXL+i*57DG_G_$!w%~$xB}c-#(eD3zlz*K*71zslwTOmNVveD)FbYka%Y#
zT_gqY%UnGgVBRnPf`s9^6J9+Ht|j^mlD@V7uzBZ;woZy>Jng5mX*@k|3JemCLg}TZ
z^jqEx^2N2>+PQp5d|g@+Uze7|*9%MH>%}GU^^zs=b>+j?6_V#TFoRRHx=D{EP#g9;
zLCqR6W}WDOYgsKBIg``u>#B@83F@^Q%HH=r7>gaA16ASQVM$dr4HnE>)w+z6&F=RR
z+l4;3DLy$CaxAJ?T_*ZVHaolN?&l@XNm|j`I@hkChz<l>so)3{nEfs7`v`uLVZXtD
zVjwhlq~GE|7QSptm@iA`%Z=G6?`SFbpOTe!Bt%^v`Owg2YGnbLcD357fBt#8x%J0;
zZk}F!c24*#t%wc!e8OkcDR(DM-r*Bc8R+2U|89@ZD|&B|pAWLh@fK3x28Y6un2{yt
z!(aqormsoOeW~7Y!@<*+f61z#!;*iwH6bJ9R|NkK*Mqzqt_IoERvix&L{7<?&^168
z8}x~;K>RyFmFrRSA@|B5KSMq9gH-)y`4|Ygq;Mi&i>9e)9qA4QH>uDG58THOtN300
zq2cbMTf+PJ9o|Prh4=Bh@V@p;p$xqiJ||rqJ|$PeXSCbHhxAhEDRe&iK74Z7fY@vG
ziuJ0&?@4&f=|B)yl=LLYXb-qQTXM7J-db_2&ZjM1D7vZG^WP*m+aMnErsN~(W7?_o
zmB6;7^XUxdGYUPz>-4s-KyV~Wy~R~kIGyq40MF5DHZ$A>KdIh=4xA+~W}nD{w3fq^
zON&iqV*wX-0?6R-6f!Zclnt8>>U#+8x5GO>u!M=fArPV}0VmuKDh04>2(Qq0YJX2B
zH7%xry435!r%PLZDtqz|m6G%TdE)b*%3rQLm5ZC)(wv~&H5#H|nfIuwB8yWO2Fvyu
zi9n0-sO4IyXl;4d40ndmo<VdBo6wOZ>S?Wzx&<|Rnd~i3$vH=huESLKq$xH&Mhtgn
z;A*M+W2Ne1Ybq-QX~~PTuz6}^lI@!$0!9xWx<eV#30<lOr}Q-WQ6E$Z)K60T{h^|N
zEECCnh6%RpI7Lxk3F;Jx=M9yV8@dkidRWVqV!KkW_-{-9*_KiIUMSKBjn4|r4?7?W
zyWm5VfLN#aB#HBHlbY2zc-VSMugSmo@8=O{7}}53{ng6VE%}sJuaHZmkAKVxxp;|a
zQ}gojC`|l{%$6_)FPJbB@Su1&mYb`^{%~S9KmI_Y)wnnI=t}K<Ab)W`yD&B{6-)bz
zcX6#OGZ&w51RN!?toW2&Zv>KG=?S{lu${uPCd9)Z#gYL&mm*!h3LYK&M|kSxZRi@`
zWYfn!r9?-vdXzSpXX$B5mDs!^H)wd~iC*JNA7tSbECFB}C|Ez8Ai>=Z86dep;XmX<
z)GI{vPD$erkJk$obE*t@A;+p-X9I{K4b{}rnHoq%<>q`OybX~EquZK1h^Z!OUGE##
z<wKjD%F4Ii^Cv#^WJACy%hp_1kL}S}e4a-Gx7$fyxP49;bHpYHC^zYAq49*fL3cV)
z^gr*0^M@;KI9E`YOh>XzsXPlH`sH$|>n@eFrzKmL>Pr0Hf|}$uu9ZsD(I|_Ts!idR
zwM0+ynvmAmXD-n7sCI&{@i;3(^zRA{sJM+S+oOWwORJ9-L8;GHC`t?UTvV7?AzJd>
zO2uf&vr82uZP~Kt?cRdoMv`J}S^2EQ)eAaPcbMjEUw8mR%95ApnQQ7xxbmPNMO{^K
zqNgs@o#2uzSP)fr&{tVQqGztHA>rk+l4Nx+s!D-DbJ3JZvs8r|Qhn;5cLVw3<r~O0
zpaNN>Y}@5%>lLxqb?%bo!Pa$+Tc^`6J5B$dgdPj}obmT<AWAwLCn2}&;ge)C%Fb5;
z74CG0Q`(&wp)lk}1ImnQLp_ZGFOMZU-2$*3O4s{l6mKdn4%NF1S8@0azzjh}j_|v^
z*~Pyao2?<)hw-EkK0cYCq9F6t5bl80L$+MOrH?XD-&MXzk`W!oi4c}7>$DB{)Mhc(
zZB#o1nsPOg<4fTU77T~ax)b0y@IH_P><kPPYg*ujf~Wz}LlYbj>2uQPNwUaS2B-&*
zcKK237R}1TggRFWZ@(#TH2IC@EIy_x9S-8bNwTuN|9|%WZM}{3NEZf=jjKpQZHuG<
zaHlP8sZDK4MO!<Il+|AB8Xy5A$t(d#R3<=*uBv&~!JN;@I++`oYxw`$=^L0^n0O=N
z+a(et2vMbSH??||K_K(nf3c4@w(hj?fFG%Xu8DxN*`}|hf#ydeZQX6#huiwFw_$qD
z9ZdN9z4;4a_O3lm`DM;7bJu{cRm*!!>y$>fgJ*7Ya#{32io1`JPm_O#VxHM}8u2r;
zOBN7<3b11g1`-p&kVuSIa+GLr5>O6`!0AtCAE6OIGv`W3z(3+(90`@+fEEB{M29vC
zOA#K3)K4y0Qy0|5=TM*bmKDNjW^pSJUgGiR!~C<+bI{`9L7pBTn_LI!$u#(&J&_*+
z$Q`({5pn{VP{u?;leg^j`&GySebek^eJ;&VT!BCw0u8D1P5jWt4{dJ4dkr9{r2J3P
z9%2fpbL;LZxEdwVXT$cJh1RD;>Ae(zS2%ds*P)>C2k0<7YxKrzYAEMnaT4bNjVj9c
z=9_JPrk#!2#HQTs^fP@-bo}BRZnecIlF*Q+U7|H6(&F3}IOJ-AsVELG_A;tXVZuPV
z3H8e17N?{%XhaIN23Pqx%L$C8q*3l>Omva=y{nhfxYac;K`?nDp<X9(A*lKa00ahQ
z@}Oc(1k)oQ`3;WPQ=id)5ET!IT!!*v>=Z@3w-_(ob4iCvi|_$42_tV%JEkSz@x+P?
zgSRwug@<PlNn(Wfr(E(bb9ByXhX@RmK*DsSST6QA9TMto#3afnkfl-=OXui?X)b|n
zKI_9#PlnxuLBAN<GY9j2zgKwT_#yD?8O$D-yK=nl^XYH@FeRyhgVlnIkGLp+`}q+*
z@An!Jdl@l2@i!ixCEb%O`*=Z|YTG>GUo>o&w@R~nEy7Rf`qc!e&gHaVT5|apBn&0w
z7n5!>d(Xqx?r>{?^`UK8u7x>k%eyi`Xt}gIl3}|Deem+xqIFfQ)=h!Vbr0rp-4zov
z0gpDnS9s+GlMzgwU`{$t5<0q&YuEc-GZ8S=da1Gcs+hM+UwiWn;#YTw+C58)@gNQ%
zY56Ae<p(`P6_+_bbIy^8s=;=eBi%~|16nnXci|Lk^Cd1J9>m*BZ2|cvHnkie!8D)*
z_6Kll{9W5+kXOMO;#^)tE1NVqA_n<!7(c;&nEh?8258D=9wmHpX>s<EFip~*0P;#w
zU`1NZB+H^9!g5(06@feX)I;GKp2_A$w6U=v4k78Bg~Az<8kzXT9wXpdWMv<Um1)ej
z<O)nUc8cca;-1aCgg$ak8$$h?ybvx%D{_<qvxL;J6Zy!0feMAh?Db>0B5i&t=^MSu
zr#UQgs7^DtH#0~6P9tj>Gmc?UWxkvTg()c*mDNLBn=MB<I6v<2$<)Im?oLOo;sjWQ
zhp&m@eGfE%5r0tW6(MR~<~jY<8qg2xs~lPlQ>A5w-aJ$pkf>dR#1VhUk=fP*qbf|L
z5r;vRau{m;TRO^F^Z}w|y>d2ez(b_2ofP15_ntj(cvav`<}O$`ZWWsYIZl~TjY-=`
zMK<x;U3r=HK61|PILTetKGza6SfRP75~OTY1)!iw1ie;hwt^qmZ65e)Y1}_WL|>nX
z5&zisiaH1E0+DUZ`?Ov!=5n~eWUBhwywmnyK(3=Zg&`C4r3=iGC|=qVMv8vBH0X~3
z<fvv-DDOT5EM2TQ1pVnC>0c~42aLUe&~}bChCsoScjshb0a~&SnE)Fsz8L#jAS0cn
z3cvw!fnY5RP%v9978DcA3UOqvxU9EWgf3X`IeeO-X3s51+p9aw=)IF>frV4Q$}Irc
z02E6D4g4vrjqEGeg{4G4Qo9xg?)Of`7yJl^v}dy*NDF5vuHgXpJpG-nKPP!hJ&n)G
z^;pGfq^$9brxOk=4ldE8a55j(lFP~>16Pu7;AZH<(nZ=+DutH?=~fq5BmepF0=Y39
zIu~(a8qDu;Yf>m8kp8Vg^LacRAd&PC1Ze>?STTruAJ;dx9^6?kkh((Dte{JdI^Dny
z86|@zKe8&~yHYR{P|v*FNZoXE%496SbJ+>Q>h{qr`|^In6&r)Vx7u$!HxUhF(t=z5
zl?+Y^g%h%+sSin4>oYQ*3*^{Hr&IflI3tLPw#u!o&;Wj;bKQybLxa9Ue$|d^!E=^g
z$g_Z<U5PqL0$?&JJf{i5FBEP(g-~39IH`uejzUd#d~}EjBt}gol1O@k)F_#X0gmHN
zbofed&tirqbJx^VY3?Ru(AU=R>NSPdkfh#QPlw<Vrfq|2S%}E#-i5TeTkvr=!Q2+|
zaWSYzuGiS`RW+z{9+fBom8KIdZ!RmYUNoEcAqH%P`Nu&fPQv<N6D2E!oUE;pSgM#G
z=1QEvwHcjEN%n7=s2xLoECjy_DSH#Eg*(d4aS4-j0&TgMXGP(QfJag0De+K51N71k
zXO0Ki`%MOKot)5EO>GooBb|;?k_v+YIVV!L8w9>^`(R$k&PGZ88K%@#mjz?nWPn(9
zsdMY4{2D=}mFz7sj7BSmN13nP&Wz(hn;(>M$g{pVSHD?Zm9_CunPrL20&sM}Z1q8<
zj4;Ma0~<hdj<GWw)x9>JZQEzt(=?C>M1s!?Q+@*K{Zwu1-g!|45G70UkEpsRvv{fZ
zilz``0LiaPe~}pm{N7!~Byq<CqOe;3W+jac5j9kdF~+)GL~)<SgW2a*G>P>A^8)*x
z)k{6w%YBt+@K9SHV(S;<cM)gIvmVjjZ2q?2*=~=$=K|}d=3Dj*xXVQJBNBZX{?)4l
zYb039O%5@xlIh_d4|cw&bRbzhqp8>)K!%Kkh13Bn!oZ66PLzhlsIY1nSj`u~nY(3=
zRdbrE5~KUM81=kmgj5V4u=@eFF-s@%miday5+Sf(eOL4Zi8V$)QKv8`Jd)lH-?+X$
z5s(yHVn?M)p#W&K$=L#FQR939d5PqwWN;+Uu)R?pI;8zRO%pBS^*MJBWX~yA^q-oo
z>Epx-L$RzR7d3_PTT5zMq?)p4^6?B2t(hxqk)UMg(lyL&x@00jYE1zlmxpYl^i0RJ
z-;yCUX=*dgCZ1s^Ot!9yaR|6q2m5fLAmqP25vF@vzrQW^9T=9N^PFXx%_RYhMwtyo
zIF|HDmyT9cznE2^S^u<H-m8%0MV-C{JzBUtsq*8LGl@ICHcAbzcC=E1%hU8yziq4m
zr>c6db~939^D)f1CS7&n3X7_!>Ff_AO-}60hroD;_==GirpiiOaQRfkTdc2-vhGwB
zQ2ImQnCQcJ$iHFUX!05@B)51h9Big>C_mD`J}?}{&vGQ|63YhB9I*_=pEv6@Pa<`d
zF$_gBdH<q$MIC5dovJ9$ZW3_l8c7HFxnN^Q?!btnOh(5Rs1v4X6E29FcsiMM)H2E5
ztmruuI5cHTLh7YMs9h9owjv?Gaw8D?_xU=SyU5hTmg#{O6xPW8=MfMFcT5toQ5sR+
z(@Hg!*qZZEZx4&Y!HpvW>f|j+sazVQJ)q(VRX9loV^9%;D*zXdXrHa<!wGCU9B6{x
zj7FJ=9r=VP=-`~;Rfa<tNBWK|Ssz3#GF{Sk2}-*7Ls#G}MbjRbr0fum?{5V|3}slt
z!oK{N9Az7M&k#uJVP$v$9uIgLot+j=v7a}3=$mpr$J%3L&@_kdtFUXXm8u;Op=uGb
z+L{6?o~uzN*NIDCjm`t^j#X;0<$TsQh<Ay~nYau3Yjb1ccQcr$AgZnJC3_av2wgA_
zCbA&;6&Q3Yz!U*BQe&N;oEqAzBnLwGf!VTo#YYgUNs?hhi{KPW%f)%))x878UQyHz
zFNZL>+`&z9UhO*k*nk#0<H{MwSxxKT(Ik{9K2hv{@Y2BU%J1<7K!NCp)Qstf?_l}N
z77g#<*O-`1^swuxnMzp{(QAYku@soQkfsj93^ahv3KW*aY+{Z1p4>KKp=ZfVw2e9i
zVi8Lhv<hA&-i8y&l~XWUC2UvfHDDmWkdxMaqtp6P^00rlRuSY#2ovK>WFl0Shf1=#
z`O^~{A<)TVI0Eak(1YxF-F=V$X(~%w^@So38P9>tw@uulF#bpKc0S_-VBV}h8a;vb
zoCFORmbk{ql&wr`+#M%e_*QaVO)$Uo6(*Xqs_x)g1Xw4FGzd_!Hxu;%TSui<cN2gV
z3|%Q=snV;T&~B_~zK~)z;8rBik(GkEB}wLzbIi*C()C%wK79~+t8Q}Ezm8afS_H;N
z)l@IyBc5$(2rHV_nGxE=;G0HZIDODUJyA)(ytd_#sS9+XU-!MiOd1uZ#9(y~BxTY*
z&g1b9CqE3Tl{#m@w%n?OM~Fk_2);!==$MgoRGw4_29Wr_>{ss$mr;@jENc*uBZ!51
zNCh;)3LXs7Y3v1z0)Yjyjr5a%nUwg50I&*{hL$^WCA>0)cTi013W;5vVm>60ekDdo
zFq#HPS#VleZ07Cxt!fb*KV&Bhy+xjC2a6y|Ow}8r(eT=^MOXoMie5ZMcswFo!NL@w
zdt@*}G=xvqYE{C)Qoa%eaDQ?^refF%Obr_?h!Ckjd*|XO#`ocwFqQzlHteqcgu;W+
zAK*57I>@H|h}4#mT&aE1a+}{~oCM*yoD&f)h$7P8J!pC65RHd`P^a?~=RR61xJHKs
z0;q|DL5Dw}-Wpw(PM0ev=?^pv{T%q#3?(c~%v)T&mW&V-B9FuRNL~1QO~Z7Esj2eA
z>s<<L&qcZ=e*eXk%cqlku>SPbvp=-hk%xfH&~u6W2o=0e;2dsg0@NrIe|4RfY^ToE
zpwdsgM<Rx>=7)`~a847EoyLPdpKi9c@3pr1>R{#DCTS`!Ry}=k4Lf?q6IXSTdNf*V
zQv|?2Z?^7k-ED2ud30KUQBoS%B5SP9e|Q%pYE7ihQp|rf8EMAB2Xo|sO=N;1J_D+t
zQSLX&?2R&eqs;zllv&Ouoto4x<RO62SB1)OWd^lW-{`0}I_j@lN8J-cy0ypuK2l41
zt@hHp?L<1v6Y2nAKg14KVjx;L9rq3Bz>tL_OG#?hUC@f&AxMZjh*mlf5<1Zzq7I8U
z9SJW-EcUqsSBoglSvV~p$D23yL;;s*TwQ<%6Xik0Qv7HLHSfFE`8WQ}&>Ev`>9*A>
zOpRpOddt_GtC`QNLFO|BBmmeK7p@#Kkr1d^GuyzKh(7cYkcnszb<N;{*GZ~$x(cRD
z3P6N*q{gQ2^{QJ(nz*3+-@NDv6RM!$0Ts<m;x0OtKvtJe6nLpEk5^?$BET!6zpa-j
zOc3`XzQJ;Q71txToH?A+ixa7SQ`$6KLPdX7cfZSn8EeJi&W>(so*XBi_)x%;hvlYW
zblyrqf{q0k;fhD%sRG*&Ay^B&<Fc?C%c>!RtSX$UhsC-Rb^afRyUqU<H~+cOeE8iT
z{;gvu3SA?v$qh4sI4jsb&@&Z#Ij9M;_9USTLn_<=tB`UU&d0PbrP-AqI;UwESQh37
zO^UGK6bR=>raCyGJ@!$)A%=1mGhVPnlJ-%_H|;Vg3{C$ykB3E&(9chh!Z!g>W}(_J
z!#E!;8k#3@6(@1(EF~t?j}r<-6=gqkEOuc#yx0s%8j<*v!r*om9{=~{1siBF@{-h%
z)1Ynn+&3^=85Qm0C_5W*h~Qay4d*ky&9;5G9T%K<6Y{-09!qywPQoo$4oJOfGIH8F
zrjeCZ32IY$67Y`2N3ZmZJdH2u$yW57>r&tml0MYYZ=&TC<CMdGIF1E?ExLFlr-+9d
zssWqk6&%)#gDy#drA1QA<Sao1I`u-*W1b*<QR0UR&76bLU?S1^h}<-bHWRG6E<qBq
zO4c_!{}mWFs^Zs)r~I~7`;eII(BDRmkQ#ZFt3LSd=patLpS1vL=G^_Cl~k(bk85;*
z2U+X~`><e+c(_6%iKW^#i`!5IK;KOG6$v;b-{l;PV9u@|qI;;qZZcoZ*}l`(heB9x
z8BEjtw(5(Zd~s@i5Sc#6wh#`O!mTkOQ*7;!JSK$fVL4UA(s_YBHsm6nkgQOr?W&80
zqIKY~7;KD<AYC+AEk|xcT-5lc;GDK1?0jKeNd^EL<ydSax+#=QJ<OL)@3x0DXQE4_
zQWmm<M^o^nHk$Rfk;7N8j~bW3CmI6G35%qX`8ac^sg)8H4vNPpzA@)4P6NHfGSH_l
z_p0=v?Kbf-e|$Fb9ctq+rt9*QG%kSUiOyidoDqqxK`N5?TB|)jWk6-N`s2{UbjOJm
z2;RmQMDaiRQFPHal8`0U8ANt+8ATog5nGSe)|tuh+eTd`ek6#AOP#I4&$1ISP^006
zxHN>Fg5n&BXcXrYQUqA*;iu)fR%J%4gB9jb#W@MFH~Fx?ihNjBiWU#gzezQ{IMsA?
zlWTgDYdZ1M-Sqx0o8dOG@B3}pn_`g%Xi_3Q>&okUVweM&1H!lv4AM=S{ba}oS6h_S
zn%#1gu`Em#5xNydBsZsN!7+GG-G*Zm?M3(VYHztyf%lqts7VhsX-k{(5V!SBDc$~-
z&A)GQ;=4~f`8cYcWP(ha__E1g^0OaiHH=$UkwA$;&MAsk%$jm(4^9!%WGkcy=|`Dt
zwIr}Yvc)Q<IY^s5?~$f`WOnGgZ}-XrkH_ikb1z@MQfzKr+*eQEmR}qUhU!_-wH@{#
zA(_)74WZ&)4r2h3osr3{`e5(FEpzT6H;j6NDJ$#z<{>A(c#kwq@49d@3Q6EWtIvnf
zB<O{NKX~UP`u5=9ZIow#v$N--i3`${FIRO``&sW}GO@>1IxqOkrVS~^v&O^YKWdBf
z22cJqKKdB@kA1`!;WMvy5BB{>h{Bax+5cPcK=DKA_g8;AIPf1B{xB(x_{Gz={sYIo
zarpc0KVdp~j$Mjg<Z0i3IL2>H-ofTE{Z<;iM39E#r*GU-(aLK&2R-;i8_|m_J0^bi
zET>28Ur*yff`rfD9`vJeHsBq#X^2h!rm26U_GkH2tTL=A@sG^0J)%G?r}&yt?Qq|d
zCN|m?0j!&zk77<71si=5(xSM;GqUEw+zNP4h=L7`x?g}3jal*@8vMtegP9}MD3qw?
zic>QkTSJU*>S0$F11_2P04_(tIH7|<GH69lGQ@Sj^CZq``q3gK5e-*_*l3oNYX$Tf
zQtmMgoq5X1vzC(;Mp0HGRYWWFngI6BvKgf6_f?ZmbFYFETnnVD5@|XAXJ8|Ci0k%Q
z)=4C7jb$h2wX|U)M&I;OD79v@7u`6Kis)h(&l4LR@qUjhTI6sfvH#7O^LdhS&ns{2
zw{NUgtR*{Ei!4OQm4yMMgUiRoD2dI`)@CMw%J4Z;oVFaLp@<PIM*5aAPpoq33@p{f
zUgEYaEL1813yv=5z149*AO5kw_u(Hez-9G0P5}zbhOzvmMzyn%WP~BiiWE?Wj_>E$
z*kLxP$tyF^YYv-&LwsgVlN74~#V^-^J*+;g)iq}?b2-OeRyk(tAyfL+Nm<TN{1BlT
z5(xV|^K8Jfy1WP3QWj_qM$mkKAYR3H3C<$5zkiwxCW3^<44*yhY+AsLlk#!!l8cVZ
zBn1YJY~-bt2v$}Ds)h-&I>Lp+56uD6;e&d3Vu$>gB#cjKnz>!Lz{5u5W!dqj4YK27
zu9ybvqd#FT`oNQZ*be9H)9K)sHeOMy<V;h7xn(6^Pt2qJ5K%7IBzi3ewG`z&^hj@s
z!fy+S@8&TyAS5x}lFv<g8mfj2gIXFE$p8+r83CLJEq!sL&ic*Zsi5s6`x};Y&;1Q!
z7yrz|kZe}(=en*>g#*GZ4+!7HMBaUlPofol1s8&I^GYSB`C`FVTL4$*hy>W@5{|>N
z(#2da#*7nV#z0?9xGG&5XK_!}q2?xbUiaEaVLn3-NVO5l>;=$BMCR{JsW@#aN(n-P
zBq1|V8^=gQkJi=-iT7heS1->zToe2?iMy@iX+B+FU0Y*A9@8-?wyDv(zBgGi)6Kxx
zi7Z_HTt;RPHRV`0*w0~op>jgv=;=FR(aEPVwOy!UZ$=#kN+0Dy2F{UrT})k3Jto#7
z?lF)?z*^J=PdqUdwV9UZlz5P`15)Zpv#Zqj6v3#&ac&)cGTf0++_2kb>W>v_a$-Uu
zV+6q^DWX+D{zz4<=Hn=;20JM|pc3u{gWzsvMq+NAT@|sV_y~3({PLlT$~IOhcTf<l
z6<9b>u8h>$*2!czxV7%2YuNMUT0S{P68Wl>MubgC<TWLxfd$N=ZXh_rh?*`wz;mVV
zv2UFS3>SfiCZ%MMPeI@tFkB%J1uj*=eT$3<WoOeBauWuoRB!Y)&n8)q&g%-jv+5QK
zM#_N}*B$FKtu$Nr3pB6#>o6-pm4_z292;RRwn^$WdjIa_j9}*8!%v>c(=%XInhliu
zs3D*fL}}~;;zbHAi^gWQ@505t;hXOw159c@Om!zja$vyXda3SDcjY;e(S_u}H4tQJ
z%i_hOf)zY*oT(XDhe@aCoIQ!AI5wiL;X^5c^baLbwq&ZCWDlg=H7lkK5Tb%fm~p6x
ze-x4@Ni7J4x7L4f#tRI4;rdf6r)f_~DKrzVg{dJGZ{O@6n7)nu)6YJq%{Z~1MKgaK
zj1|2;g}qb6cNr+9nr~IvM~z*mY4o@zH&8Gd(UXJ@1It`mWimhJbQsnlr#ZVZM5f@7
zTTc_hRplsA-k4sJp87hY#lP|4H)I^NRqqRLqYDjSXSXQp7&Fwxlh|}0OsPY2)OTjC
zBEQ3?F$w-K-YH0;_K?uj4lUSIERT1y5?}akWxb1RB!wpsOPaAHa^`%9Iwn9g7g7g0
zBy<!2LQ-(Jm+4rZ5x5rm+8RDgXRYYTxrNU*?}eiU`OPIb!5n>g%CsTu8;S?%ioTBF
zq@{-AD0H+Z3B*t-Nh%W(g#S;LVM7nG3bR{yrPg9^^!zpRZR1!MJZ%7XP;qpmxOH|h
z<cYZ7hv3ohXL7jz>fo&-<FM$nG3|&rWx@ffoDYP+0B)qo^-M|YT1TivGcB6Ma57$}
z8}K$DR?hFK!H0RFj;4Tw$-oT6p`}~53uBy+8CH`oXEE@tuych<k>=H;;lIJO-1h>y
z^<J1B&m)=^k4<u#iiRn!<5`f<8#}|iBI3Ff>=a}oe!&{dT9>^wVBytyeBHAkzZ}fw
zEN`A-zGBn3#QPwG%K}4*-;POGziR8lUAC5P`#RfEg6)nAJu36(Ib#{0Kh4<L(Zj>-
zs#I|W*;QAlVZn7sxy09)?yux2n%8;8v07(W_FnHle|OM`-oJged+@vwJ$wH0`N8v5
zm^o}|9<4mwh$MZX;7k#z{5(nXnNq}|wSWH9<+*O2eJt;;^$Mx#EqiL|M$FaIWKX?;
z_K-c8_KeP-=)!Om1LuS3)^p(GkxEsbA|T^QdRcK^Op@W{r$t_<J}H+7G@R<?dpzbZ
z6F*jU2bNu>V#?V#ORp0T=nBik&o8}7zSrl1Ycz^>hw(pYns}az0WG~)rF9XPPe12q
z0&i*Dg6w{{(t2QoOD{*@<hpP@_({24088wmxh|7}(tT+xyHFn3+MGqYd@*>GORt9S
z(3`&)#=pk-h;OIe_5Er0nwMleWqI#<)<lQ6{IbmTW0uw^Sc2J?bSdOq+dummTugGi
zyr*B2K)@a|eQ<#lRLX+&Bb}U<DaYm8H%dL1SfVW%Pm7a=?A~*EW3#oP-=Y)$m+_R*
zo=8Lix~phI5yaI?7o7*Q1Q8D%zqMNF3k{Z^)g>7}V6ICT^D4Q8SvsXjn`N^?xo1Xb
zn0{HqC@(ro1cu0;rm@qN=#ewdaZz+kV~8txp`(?3>vWF(U`;j7>%8lkubfsUUQJ_<
z<XGR*t0hN31w38L22}(VKqOgew6Mn*#?3ql>|K0hc;D41<!zRvz)El!=NloZTH~#O
zNuJWhC^U84Cb#5_2BWF@l1;8LW42+l@U3XKbVnesrtFH6(HYeQp<Kac$SFUx>soCz
z*lfEnfpWgpA!nD(dGV5H%3Jd8YP7;ZWRl;@Ck)PA_F@5W5?4wT{1Jl*2y0?(p9Rz`
z?<+DglKvH^*+b#TOgQi<$5gRHY1Fs=U{*KGK17<J##QOFap^2<$zi}Ra4fAdnukLS
z<Ah1wPqDjlmVk+JEIy{=anjdtJ~q7@J=shhR|rJSngJySf}uvaeyu3ne9*kqeZ|`?
zBpD))Ij^VTGO`r!<QcnjgKWprMsK#=nzuDtnX4PL<u!GIvK!w3)5R{%p;`2@F$y*M
zCE@tu0`XiCURWb!%x-$Z_#8CkJ%F>5z2GHO2VjX<SgTWNysD-W0JcFEsc=!FY93`1
zo29fy;dNMgmguJXE!P|ucw5Q$NCZt?;hL?MBDc;Yh3G>PF+m!CI+`kqoY)=JdRdq?
znTpfRL|MbG#!fg%uAA|G%m6V+rRVOH9lbIWqt~&frDK$O#D=g4?u;?Tn`cBLV_$-W
zUzwTKBs)IVe3-hf3n$aqi&xjs3KRNZNt9-6?ZDIaysB~dP^H(l{h`eeC(fz%3MDj{
zLD^TaTy8@(D^rSN_>Tm+Z!-KODLqryY!x2kn{hHK{f-gBH{y*CU$^Bg9VTxOo+@l9
zi{eCV$`}>zxem!>Sn3*axBKC!xdHTB>QYK*NROJ_nCjCO_yaXK-X+BpKx3nRO4oKu
zR79H1{A#5`Db~?L!2tQ$q^*yTwll*1NkX-25pxlDF|urXiPyx;PrP;SkrT^{Z>@!X
zP1l+tBrz7vxxXy8i}2BC#Q?eo39jbYqbf5hx0(aT7Kg+~n-vy@0(Vlud1w|}>U03O
z#rmmCCT}nT-l%s8L`;?hW=~0Oe=MC9-LjpXoinjG>b&zP8@QMe8fl;X^iJ+<Siu3D
zOtXcU4B~H86<NWoARuy%QoP!*<tZ#8g+yf0{XaTl`<n?4BkHO6%6^w1Gw|Yaq%=pe
znP}<VH0PtXXtZ=tLp`=HyM`j~iCXQ@d>xv#%!_QXRe)`lfN6IIMC&s>AHZf|*_;Et
z^5b}v{?o9bp&=m3hC;|wE4R$RgPRd~5r5W&srjGg5jwAM?H>6Ri(0|5ff;1e(S*qs
zQs7Ly+kop`jQpnl6h|j{a`dQfy|w--h{t|iJU4X+3y<ofOdzuAkDp0V4cgd~Y4=a-
z@nad3Kw7)1kr?gA<h-snS`q`my|N&w;wLyoIi)!INnkx9`rx5uOKDSlCE4Td-%ms`
zbftcZK5*X*woIK}^zSF?v#I|g^D%PY&HPsVUDeO?{&Ao2IQ?sK&g0g^^q<_u=~B^G
z^xyvo{?T`g)Fo4PZ^%|hkNMrlHZPt3L`Oe`M?<d$vNkpJ!u=)^7>iiOmdoEWvYgia
z3Bm_<1fSm4Y}$Lawr0E*M>H%G8OlyY)lE=ZK(NIpTx^1me?1<L<$P%3t1;YjI$2a-
zueYM4b=-pcvUh%eeANHv@n7~%CYd0PAMh}dLGEzpIiFnnM3@R(SO$7P@U}GUsxEJD
z*280X;W@nc-;yUXIFc8h$;*z}Qm0dnC-!l#ABE@h{S0(JqqjKIls!Ux3~1%tNqq}5
z5%zz9b)){d85nH*{$J}}vY*#V8hU6YFpNbC?mY_o-y3<v^>uhCBpJ)<6hAS+%w0Kc
z-vM{1-j%rUTuiL+TunPwk9yNSg_IN5A`q5M0>xOex)Q~ucdkxUMAls7t98zAqIXDT
zlAs~$*NnB-X7{|w;t8kXoO$?MO?nF7!E*yY@M+RC^)*(_E*$zslMw&iPeJvd46an5
z^HQ9as<_*^LAP|@A4kvqYBKxNv77{Z0=kI?YY4K@S*F4btOtTKsqP0qB-`U_B-TvQ
zF><v>3iXBrVyL8skUDGudx=b9{KdtjD}|obnTo{{b7v#AZ6_|h$z@#fdX-bpHa6NP
zuy|!{T86e6Lb#5h^fn%IB<OO|n|;|eRF>ZK>mb66zd^9nssUmg^>LS=K$?(g@l-MG
zLP;~0*Rn3+o^dinFEw2yuJ^!*>4Q}kCN{-kh9-kV!Py`^+SK5yU)5CwB<Z_xyz?8=
zii_de_4`PP<CXAo;(ey(v9+u7wHY>Ng|THh-hB4w^R6p%z=as%@~!en=|C~CU%)Eq
z(=;Dgm{@Zz&B<G2P0g7O<vr$0yJ2%Ay<f^#F;Y^vU<ZuKBi(y8J5c}G%SP&b^d(c%
z)U&ua>1I&aAItFHYTJ(;O44Ht!j1GJ3&zpRNR3#$+;Bf<q$))h<uyfxkhZGlBs68&
zAR(Ib6Dw-?Ez;k5bnPUGNpLvzAV_&pF|OIdgsb65kK#e0_jJWVnU+iynU<DAY`+z_
z&Ae7`1ezOx=8Fk57YZ4cP<=Te<E&UtzBuC?dc;MPq>2ywo<MO{v|<k0s4@l($5Xa6
zT0>BV6~s3t!#;GS+BX^otA+R0)@YuQJZNyG;7SAGW{bqRl4Zshy|#w;%tn(Utoa@c
zNeS{<XkjyfS3wA3qA$JKd-l|O)1*{VyHgb9+1q^;ajiA>%))R@R9g{HYy`BL4B?TA
zPfcOD&lG@crZC`{kpXMWxPYGm+!P19@T4@7zc5ewC3*1_O;e%RE!J}soJfa-+GgU8
zMlL#kv}{HoD~ni`gkQyg;H0T)Vd|T!2~(GfS4){0DrK_I70+f(WM{=LpIYL)Vv7ij
zWwi40GuyZ5DB93dwR?JeG-UYnCVO}ULYGc(L8lr*2p#apnj-u-I%J-SzrJHxMPhZM
zr?erke-K+XqughtAUoFbDCK8=uzXf^kiX0*^W?aE=t`q}Cr{W#bVllu^c09Bb4PiQ
zjiYy*$MiJIk)gN(!(Ah)zivf;PxIq+l*aYd;9LfmifK{h&05|dxA+AEEILOxf9^k8
zdv~gTn)z_0e?L`xTC%Byy2G)d&D_mL;bD3A+StwvM_|u0a|tE0ynB_h_f^jLJ7zZK
zjN>nyarA#ViL(d(YRCKnt>H7z{j_MFCB>w<6`cB+k(225U;nTF`~UZU{lBB<BZf&0
z*Eye}Myi*W%`2_Z61f0vBM@h5bKCrEZQ}{HatY)KiRDrEl806Fo@)+^=78yDc{C#=
zs3swJF>k-7BH@4p7%WIMiJ1h(|K_TNLRw$0RQv)O0w1F***$T_mN0pq6>Va$ms>ok
z`7f%6M8)>9sz?*B-m>xG+hv`^d_Pw+DYir9#ON1#(K&Bdb9zA{Y)qBLhB<u%k%xAh
zd3%MR)0iBk)RP;gb7)>R9Xbz+g*OA=Pe+4vNUC7pg%+JDhW=qckq}?48h~&B#<9G`
zhD=%;OA5F&f+S`ix;Ze4Mb*uI(3a_$U^CP+nBB`;F2YP6Z|dW#4Lio5Yz%kr%ENeN
zVFK7z8{FY-CN7&-@|8|KEvzXfKq^`MeZ~<hr^zVgdI_k`&Eba{C}s0SQRQ3qk~M5e
zd)v0LS10kQMs!NC5|KT1@I5CSVnHnwI52LG1OP)1i#PPoSYXrK?D}FfUZEYce3=A}
z7+uVj05c&ugE&7%Kwvz80(dO(7Q%{IrS_04EV{%w<D?2uNmatU7ACj4Dp%vUfC`!C
zlw;i4T3@x*EI2a5dIPk64OkHNNOF{Zoq8=u86&xS7oLuYAwVYRBpVo<6H@bsiB3uC
zHJ#&Kuec<=Fk{)Ugzl?3RVrQlm#Gw$x`X{~2_5~X$lX3_TR^t|#r{=?D_mv{xah&9
zED6_Xe)wAdB=lm+>76Ct2i+C@fg@VxD=AjJa!0IMSGo9H`XLgoZ(G~uU*udmvq#`Z
zVgsqw1H&nPfwfefQv%|`-cZ#hV+gWV^wgl7*{~_Du9CQ5V(V;#!_N#|T52J}Md)Qd
zj5^6ww9W0#wXG$I9{c+*Wk$}^^`6)^zCIGcg`oi;(wA1yQ=TtdOKM0n(f7BTAs@j#
z*nhcx@N!?0rj-JtZ^u&p70xAX<XiC?m+rXlPQHdae(_p9_m2}tC7;HCs6RKi1A8j3
z;{{`7kdtZ;sVM<~A&_>%F~BM@+6rBy^t4JUi@?7O)&-$@{WvEjhM|B~O^b4p>05i4
z^?kHNO>|mffSt9w>Vi0*$7O5jouIjExw5zWYIQyzcYUcTT1UV}UQ$5kts87Rh1?oL
zZ|4j^>U`E;omZN9>n(c6)Yh?uE>29DR5nSCvq8$GAd&K?R40rPh$koelk-6`bI0)u
z3GVnwu`hU`{hNJl=h6sSDLhU2WEu~ef_th1pyOKn`tP{Z52!kq^2;xCF4g(qU4?(O
zvw0J}a1*`o6~i%!DKBA_EVeH-NU|m1y6usQ{#j+*0}xe@`@emf=xAU<qJcCtwf@N<
z>#`L&z$4gK<DgyspmLF4{@L?O2)KA)`_ko{?d<7(L$Qkyk}tS@wz8_VO>){S>^?T3
zm7^+-Qd8iin~os9Xv)oR59cieNy<lX3ye?FUd3&#&QmS6+o^j^3TM^l^-xy~$hmgb
zE0`3u_%!EAXa)9(rd@v}gP|>8S#iYPGavA#5<Q<Op51T&lci;uYxm>%oCqeRz_MFg
zHjIF=q8BS@r?p>}EME`W=7+XP+w(~k+mVfZ+B>(XU}P$~*+M6CPnVXFs5B^>)NnC5
zn$os~JKCRN(){h={`R`uEHo$Zxa%)WCGg+t-9crqibKD(!Fhu?=3GWV3P#B(U$|Wy
zd*cv!k{)v|_EIj9u6>ys`WwT1g+3AUwFg8CV%0ik%EcOnX~p-9G$k34)3?v!JfX8+
z_%U2_Y{M2Zn@y7f|KUdFM{ohJ*&Q8Iy3am}tqkq56#?94;B5gq6F6*BYAW_uM6Xd0
zB?gr2w<r;)70@kxLE`)iIrot=79-tNGo30t<h$+Shr!%RJ7)K}vLDuVx#<6%_qsOr
zE&eK<0r!J{3e2ls$li!ErJF{6q<c3UH8VgTPZAe^=U+KRN-Ei{y^(z7YyfX03*`fN
z%Tk>ZaK)&aFCM1$8L66IBVcWwF_(QcrD!WSXCy5#kM`a|#`ShnBg5we%)Awn<bWK}
zKGQD~0Rku;Uxo9UmY`7<n4*=A{MGt29CTI#BVRr$rQN+Z-+}&z?WwtMZkWtBbA}>P
zNjM<>PRE1tE0<1H3>HN}bh+=3_pSNvS2x}pMfOIK{c4J=cbu0{XdMH&RI&A`*%u4A
zd1{e$qkL;gA;YxLL<>QaWjVwC@NVlufZwqIv={67Rv3^|Qgk#fM^b-C{NQ46Bi07#
z6b-c6QE?Nua}&376Sw0jx$Y(|ABj>O;!=|H?S=n}a=te{jYYaZz%RCa!TwvVKzk_X
zSO9rKmz)7@DatgANLM^g5mJc%S&f|MT2pz0!Wvo`e&;$PYOYC-_=3ST*BJA1O<Kqo
zRA#O<DuuRr%geM~es8~6fXa2ojr<fH(sbu}#TUMUKcOau=^ExphXst~1nFcW<wO7q
zZ3PDx9`cJsc3j(R=LLBLg4oxNy|}j7&W2%h6F&xmq>PSf_fWR8nfAYH<y$S~$kIot
zr_OamM|gYtI-3~b6wGwF{U`@Y&<-PMJ=o>tw)Q&W7p{M{f1ew_z-5pIsKIUZzpG6A
z8X^p?f3~y12G_K|H>Q&t)5%Q?z)cLmO$@+I48Tncz`sfi002Sz+3`}=*}i$#Hd8Xn
z>bIdeR^K}L!N+SEW~0=Di05MT6V(3*5PT&(K-Qjac^+GId}AQ>&9Z^H$PDl+`-IIf
z7IFydO8x74gZ~9R!WV-7n%y%XXPoz^l{w|y&DBHAt3H647ll#?fLSpI$85oMrVDVv
znBUqlTib-Pk2xC06~^pt-c`n~>->bVV7)Q(7k>VXzwj4pN&b_8-XE<fr0|Z@)KS?u
zAV(d@Iby?UI>cORs;eWq0cyKZbH1vYW6t*yx{jXoOBEi|#g}soqdY{G_m>ko%)7Rk
zvd|&ldUihf!WTDAv$U5qBFJ}{R%ruxIh2{{$Ph9w-Y^s;wA)`rUi3oPWnY2!&qIiv
z&%VC`x93r66|FYVU_BlLz0mBmUvPUKf7eI%B{uA_`QYQHhOE;RrlyZi<p%0EpySZS
z?B72HHGT_I+PCkYq$?sJY;N2!_oCg+ChY*LR4@|Ej8JsC744#+nNUHxLC0K;uzMbX
zW*j~X_^kJy32-nJ6BiAbgu8pUi|EDM16E^`!PtiDav^C`P5a|0I~yc@(zft&Q-|B6
zc2}dx6xu@UsHb!NTjFBBK@t-xjWco6(Rl#V_(^a6<eUo@7qUlOY1^+S0<GdNSvvAA
z_8|vV4ARlZY5;CPk-vhIj!sF9U;q34x39MT@on+;i6w?NQpAlE@ztaVy#>oi5%TKg
zQiQo^Urvgc_CEHz%Lx(ssx<QKNm+#8FTD%Rk81_(nP7F;$(p8^AOiT`yxe_zLBzVN
z8wu)jgkq1z-VqP9UOG%uTpi9&b|_3u(}Kw40KLtaZDr&QsTZns;IKP1h;%$f9=BJd
za(_Eo=@q99P#NlW(ulq<i2BogaF$<VRYobRVcN^HB0HKi+4j^VD&0jD#D-0GXqckq
zv<xCwy*j6lGzq)T(d=|=T{{i?N5G27Xl46*W=c()+HSH)^b1^uUJ+AcB|XdO0;+eN
zOFDL7R&DD%S5`aGfBo<O!^>}&T4(?H%jZuIFoI1KP8@7S-@JSCD!N^4(*anA^}406
z-<G#y4YR?H(=W)DWyf$j;)IS9P3=h7LMjvEV%c1#5v5rBGoxzgH?%4I7rKydurV06
z6ofdMj`TLOIAFNv%<6HZ0aFy?BH{I#n*yVov`_+!-U-fod57YJ=4~ZTGx;vIqOgCg
z%-HP#G33HOC{oQY?wiu8#x_pp`idvD6>-Hz@1@k0l(R_4&K+QF#mmO$(cRFA8Q+VG
zg3}d{BTRGo!Db)H^t8xl^w!+Yr~7|rM+}OiYSckXs|@mxWzB5|VcI^rAp%5F+NXxr
zqGd&ZshPJRMcIoaJ`8V>H0;5ylITZ7&P~QrLl9A-Y&x0EYT7SnH3@kxbAyVsrs9Xe
zEje|~O+S(8`KMkoSc(lK^5(7Rl{qicSjZ0SIqYXifm)p6c~Ppv=AjunTxw8?dXh+Q
zoeJaZEXh%}lcNi0jX86T-<2VVzie`nXVc>o$!D03UBOVl61bs?Qq(Ybf2H+lP|$|s
ze^yQ0>>2n0YO9W^6)sJ^6CHwA-MbSJxyr<w2R(?ynp^TiQ-5gc527O!Llox9wKGVL
zmRfs$mSVf)U}<`O!zQ)UWZy*I<Yrc#n<e+XhIBya3(u`YN5G$InPLF)6cxwb^Qyre
zqg(=o$3_c+aGJ`wy#DEEJY^%nI2%EkcW>X}w*w{0xvubTo8OftQPU=f^5*%mbb6bH
zMa-~ytfk@l(fhqB$^Tv(kG1V%?P(f{o0vH0Vbb?cOVYPk^M`YNo-6y?tDiyer0=(2
zh<#IMQAH2e`#2kOaqmIe&Eq^Z==-Gj5MwNy;3a>z#^>xT7Wr%CP<&g9=R<C_$NWZh
zN~CB!xF(^WYBU~xUr5G4-1`XMGM+*Iu(#}UH;a#9Qxqi8Q>w?ID`&O}hqQ}w>a=Qx
z3@o6{@a-8+2c!!O)axz{|2-|H@gV&tZ$s7LGbaPJxao$%Lri~HdEOtk@l2akf$<<d
zZ`)`6ivz{_inmNkOpDrm!W9SQd++k8ixu5^7cpAdJ${j={pdi-z8)l>h+UEb+7h|r
zNhNKQGTerQ1yu7-(dNdhC#zx9#9R_NyFd@x+)!IW9ojg({uQx#8qBM?c6Twc<d}Dm
z`XYIlXYP^uTCLOR$YHM0YY_V6im<JqZ@x>jTCJZPF_m9oCbtuH&nHRIh>DXWnY0lJ
zyn_iukD}MKhO0X@n6c{hI{)uG2wT?w!LNwy<rYa;l@zssK#A9Oa};$p<}vLT0<ZU4
zT*yf5WB!2Nj5QKmy5x9e<F+XzwmqkX;$K&5I@HNDA9>xn`y;(#?SskjxZ2$*bZeS^
znzf!_KznawrL^5!m5Ts<%?*Jc>>p7h<9>_9bZ%kA@4;X3NA4q9+OS<2%YfVI9g(M|
z!y!UtP}e;z;1A~)%-4^iAMLd3Io;s;PBchHEB&L@hWkNP5Bpn7znFc7M}`O8L#;_R
zpq^L!hq)a5Sjub5!^nYO+1yyAr->-^CM%M+{pdFMeBLi^`>&6tLn0Qvw$4IYFnLNV
zt_{+(kML8G48V2zOg~rBQExEqCy#DZGu<S=z1k{H;&F1g3E26KD1jpoCz|{FSr$0w
zGh&tvSBUSCBgpdD`g+7{%R8?8JzZ<saq!D7tg(-x|9H9oAH3fySc*pUBO70LqT6wv
z$LF`BpI85ATYQmBg466BAIuMdmwLvM{;JpA1oF>hpPzdq&r7MzpX^9l`{vu?aO1l_
zmd0A>tKrkdq1W(tZkSIInv`?E60{4iEoh$b2$^|LC+VPQ$w{WIV#U<<XC|&I{$qH{
zNzAMmyE_`P(@CFy+wqscJ%eMuV+YluBYiwMaX({2yq}9f+Dle88br>Cm}7&rD!gpN
z<_5Rt1|TP7#~V2QO|nTm*q=XxnNi?hd>W?%u%ioJv@iTD$Mui3pXGGELfs!t+kp+_
zBs(*;rK_1xHAC-JVE}#$Ey1wWnTWirb2FpKNmS#E{2#6OL4sw`epQ(8tZ>ic@}F#!
zBNyjOu-B4Vx4I~^Wy5t%%4xImq2KRszu|7mte6*b$Nsz^OIEh#vr=QjGYJNBnQ*Dc
zh%*^9ig0o=L+=*g%9rw9wq0=8pAubvF1MnW8LT<pB=~z)lxUw2&<V=Lnmd%YcCpQK
z@D?y+(>epR<)n)W&g}QF5N9^aZlwsTN%1uZSuk@V;b;7@k_lhJTbU^-Pvp;zA9{}!
zEHCg7JPv$!F$T<~Mo3>djR#ZHS6Ymwg8^}0+Ap66SMhBUMv9BMwh9`Tac(1sT*|q_
zMZZo4j%S{l^Kcm-7l!1?e*Ya<H8Vvy<YE=%70;6bGIupISA)h;R%Vn7ary8T6&LV&
z%X{0ET;FlekpCOmbe<ewA6BVXW>RXL&*Z;HLNQw?$+u#jpdDO|cA~@Y8kY$U$#6V5
zFAttpk9ge*eH%S`Y&wv;h%Z-L32pEB3Vnm$`F|cgif-S=d6K^(+|||9O0h%MOK;Xy
zXJww+i8huIO=fxj;!??*nHQ}w?=uZjo_t~~#^1!#QM{z<@W{NY&CECt^;>65;y3*0
zBZ)nL1FvCY6f2;v*pNd)UOu`ovYGq)+HuV?h=rn>WjU@Truj>v17CB<)Mtc2f6)M_
z>y5dZTh>kC^-Wc1d&XC$bO(}Y!<0r{ZAFJnVL+5i;N<Qe@u&6PG)Hj6`XGt((K@3W
zvu72CNEt)>IM1fzVs&27mbt)wfb%mmG#j~fVP<DIP1B&4+gTMO{^bts!qc=6(2o@=
z+Qpqej$V_7%qgokQA#&aN?$KZNtntKF-pp#FO5->4!&H3(l^u5$Fq}oupGkXk$c-~
zsw{1o?>%|LeASAl{WPn@*BnmaULd-a#6y#GMLKI<!dVRk4LgLdEo|6<EGBT+_4vhw
zj%$@7ejyR!T4e&kr6CIPJ|9%4_!yDEKj4~mdJU{^mpCs;*8h~ga1SQYdThVEV5KM7
z$7EEl!ECZ^@e{+?OypP(vg6~VPYgk-Cah$}WCrd}G{*7&L;`P;Vp0-Ie1uE86p#J*
zaWBcrFlj&U>V{e0Fzc_$tnHy)hGCnRFK5}dn=i+<U-aVT;>nKr#akAZfrg1d&l1Zn
z{p#Uj>o-0?`f4OLgGo9}nx$NG;OO<I?8_mp<{JrGf@^TWIM8Z88znZh<PAur#FBkK
zEhdhor^h243qB{j4ce-$O*4|OyRdViN)39}#8QKlWFve5gve4t-#8zf7w0+zgg3aw
zrT`}&d*LO;A_X=ZZh=@Nk~Lw)h$o^Elc?W0nU3{WY{dTl8*YD?7QOW?M1D=j?F>{u
z9Ni6lzM;?8NuP;Uy%ziyl2Awj$qPPXE@EjE{#vo8cemQ|P}@A@&l)mLaCP&kv*;oi
zh7Gy`XlIB_aw_6}Zoz9B(RAFG55UqTjex;wOG5{kOoA`yr9l()E*ejZ6NE@00!QVZ
zA`@yu0~txUSn?_9O(#q~ij0U6{jUxo>-DDj71>ysWG=zXzy&VlW95FnBsUu`$;`$+
zFJp+Iw+4-)#L=F<y`aViHDnCmQ^d8?We~t+1n^Cz)P-Oz3&KiwnhyF#DeWiYL3Yl6
zU0?&J0eo$xw0fNuQc!7ueAV<COHR|eTuaI6FynYu_xd~q`fEXxl#`U_YQjruzh4W#
zM6~XSqWe~_xXW|KW4MwIJIZ+R7Spyp#WlDCrtF}Cg#4Z}qWO|P_UjJ1^k)OOZUjqM
z&mT*&3meiAF2VqkdB$$Pw145msxPFz3|!04pV+tHC6948E^2deWXwE0rG;qIY-c9t
z*Upf~{5qx_M_gLIU)7G;iCwf~{=^oW)z_Yw$gb^V7^i~^Cia|vS4>mlIYrh>*%agw
zwq~dKYnWKo74s+dlpkCC6n_03gHqO>=IJF=aX0kXy??j2zzo0Y#Mme~XJ$URXWQjs
z^Z6C+m?_ZH{&aWaVY^3?NExq#m2q3g=RaEXT!iNW9I0}jzlJ*&&S>r(TX05Sf5&dD
z95+^uFJpyXM4t|&y)UR$_eoe;&aZo{uUg&uSzdzRbw*<T$%})*pT2I*U#t($oBV;*
zY`=!4%`x{}y3Q^<)9;N@_{J!FLoRQO!q;XLwzvRC*`Uwm8Bb{cIK0=VLBDQWu#m}R
z48cN_7c>P+H(!urrKs^R&I+93<!U}3r<1ndgfv=WT<OHE54}K_eCP*1`vBRdCK)nv
z@@z1JkHjeFjA_9!@wo5Da`riE8^7awg|=4Hj&2@N3<V%aj_Ak$b^W|m0)?Z|(505B
z42Pt5a5W^o?YpIQS(VGn)!wi^#rddL;xwCWyn-JBA_dM$-+5*1EFZ+BqwO1Jlf>Ia
zsc*-8D7=!4*fJcZlZioqpzD+LOLYZpSwS4P1gYnTVsEdY2^;Nx9v@AZ#>+$DSwqzB
zj-t^pu4Yu6pbO0pzzrkz7?+Nrv15B!GICVunjyMHiYp?;i>Rg8v=MDX|1(G-FQ5Vd
z2inBt&>S!1MsKq;y2Q5lAON5NZg>~<q*?y46u(m(E_2eQilbczAYdrxmx*{aY90Ix
zuR44G%}US`=aVLug6D)$(RPY}GZ=_W$4gQQrKV}(T;p0MBjItTAXQU-Yx0+V;4=M$
z*%8}zPm~`Zxx)Xs=??^l#9KKmjY*M>rc#c;PPMYc0=rsV3-n7soK6|vqHSC|>oN@H
z-2O0pPs=Uv%4EXOJ1WQVyDBBS!D@j6hnW=ajEz|19X1%UdKxU+G$+mlw4{R<vhD<6
zJlfmr))ghV2&9(TGFXn%OnBmx{QN4#6mHqKu)2F1il;-#^5b}v{!@lR9Tm~x-dj1(
z5fT@R3lEk5cCr33Nr1=JMEgzuCt|(Cm`Q~}XbYYwG%&qsM#}&}Gw-<<ct8lg8#mR$
zn#_4euQHQMqsh=kq%}wjL8`+1)JjYArZZ>9WC_xVl<VMNzN&o_PGuGom-{3h9NB=!
znbXsPMP`DSLIp+pv)?m1L-rxp`H;*9Z@4Y%HWUgxnmyGt1Y!*AMNMqQ5Hko3E$VxR
zz7@%NV6qph1~vN_@SVJ0yxT9!U3E>oJ5mDg3l5-Ln7xs3x*kc&4P=;Jd``n-+VD2H
zdO)`ef9F%-I4u#Mc3A<f;K(t3F$y7rX2qwFhZ5yiEs6LRr{U7wxWx^5Y(|fg&uU^}
zH5S$<xLlGdpN>8X+TkQC&C(8;D9Ia1t>*?I0d)cUrya_L@R;%JkmSr~)KBiMgp?k|
zvnR&Y&U1<|Upbj)aXzBU%8CfzKR%3LcU_4mH@tQB9$lSdw@i(tThSip;)7YPlip=M
zPqKBsn>vy5aiC527aj{>hFe;ysuP&;iTyTFeqg;lky}SIJGY@TV<>_UhUAmLBV%Qq
z_vkMl4s?lBIk9!0^q#po$#t209XNCoC`J$o<6<I<j)pW5vk&m&ky?X1wx*y4<t++#
z_dwf{L3txJXL6p5!lipgBnokLZ5kWSCPQeZ$0w7*C$uW`sQfp3T!>rZ;Zyo-<`#y7
z5aFr5V9uBo?5AW!H^VDHU$~7;740&f-A3;y?pM>#3JLcT!tAakvfK&)XE<Hb$t*nd
z^D-@E=u*0{eDYOL?cplq?l^l@p%le@<;Azp_g6iF%uEI-;Bro3@UXINcB=TNe0h9K
zJYCCScA6A=+H8d+`n8JRHlV{RKSfAc@<~hx4$jY_m(F1}=(CcmsIp>YJCtI+upX8&
zP$}f<gNAz7Vq|KjLwpC*oD!v1PB9Cta<5&<5j^?Ky}v3kPgakb!;a~&ZMHbwk`G2q
z$NsEzDykMET5-}F&VoEcn{J<2t!*(MwhMe{i;I~Yg)2#(Dkmg%#Z_cD&Tzlh)^<&C
zvBwq1l4i2DCd$2(Ppi+lUC|1-2Tug`qo&2giDdNiYQ47IioTKaV$ZCpm+g{NR+83n
z%SrNXtvcaip+Zc9``vpc|GPh!9ygqyT%cD?paXI&SKdB<wOYH=l3HycRZ<OemL|>F
zMJ*lZ&Spb>gw<=~+nTS;WXnmdx_+#lAS_J@c$Hj<Ff?^g1oT^w5jZ|?RA@apd-022
zHg*mIx=0MZT3Ubxta&i_36}>K8YD5m8%eLuGZpTbzxvu_c(S6xo#*xA6WmYIA<dV*
z{^*(3=sYZIQsY-|xv7+_X@SAf)3MZ^MnloH3`(VyO=~l?3|fJbdreLtWu`Yype39@
z(GaqZAbKOplebZ=XNTqO^i|7se0Ujm!-+gpD_#5eq<uWNaXI}Db~#<i=V8qiSN3)=
zX}a9oAsu{CKL=5{Wr;DrdP{HAEHUP5X3NKQv+1NIFIAIddZXzXyM-AF{B!hlZ~f^r
zx_o1)ikdP@Qj%Qi`}0UL8oMFMS0>3C)-UU~SRB8c1W!P?A+$Gyc0Qq{!?Glyr8gHL
zwCLaq5?VwxFGpwPO>Lq~W$~R`3;g9rJmGIcXnE=qd~ISAH3F2~XX02lRJGjIO|a8V
zu+t4e{2zo+AQWI3f{Pa~r?*0fz8tv~q9du38rZoU_2q_|T1?$ERLb<+pT$!4pbPv*
zF39}U#+h2ntGA1A0)}ok*eM0`kBLspqWx{>)pTY@XvGY@J5I;RARQ%McpE#x;<@27
zl@shvdmj_QQ-BXDok;K)pHBL69dY)8`)VAw4yB)Fk&InAw!wMBRv?4vy_=<jB!^iB
zOlTizm={c=g4}G~ZwsKQdB(qw0uSlHIL&zp6Jx8U{HrKjYm-JV%NniB4z<56ktF(4
zM1p;)06otX$@E|BUy!+4nP<9iLh9$_rG9k)%j-&(RVv_T-jvg2N(6(k!skOz*>C2g
z+?duLM^CuDV$M-zBx#~N>=k&r?+x@?&yteiU6E+vmxz9HT$(;>ZcwC82t4F66W`l?
z75$!WAmRfamzynS=Ks#rP!tm0IcE0J@y6z+;aH^rQ7^|G&AXN%3L1AcCzRj9C=j0k
z^3P%@ayWb=(DJAl1A$zyzvn{t%=Ueww%n*KH)_lOB()`=1k0!|LWLI1L(q=Cpdw=_
z$8rSPd)?CL50)5Jl4<+1N2zVdd4RU&YbrBvHJ<yF7BCxVJ>QNSlE;`Bf5X=MRGMR=
z)P<kR;Di@G<7*5r0mv2$_Zs2Kn36>!5-@9EC><k+34x7_0%wq%t%o|`AeAfg-;{|Q
za7d9T3$oxGHNXJ`IDjsK!|~~OoJy5PrurOe)9RbOXz`kNmU$DKw)BfFv#Cq9KnDcp
zqjSSmZ@B9J^vuUg=yR$i)Tf2-GPsr;$urb$WkN0yi$yu>kr%Oq1E&Sbz34(ip+PN6
zqw=VyN81}(d)@>C7Y2q;#0j^gN*h-?l2s0E1QCv?LT`~sE5DSK$_~vkP6u3Lm?L75
zvB~)1GntypNj#2oEhF^UwOLf|aov46(T65bjI+s7a?go*mz&wAk0n`0zYUd9eaj0^
z06*_??VVwqe@rl;1~FwWvByzj93+|K&ZRa758jO8D+BMDVJzgLH_P#vNbp}4v2H1#
z_b&@Jw-_Wk({%;=;z-&#Ff?Y%0(kR1Z?6QCMge9Nea3HBy1T)exe+10qGE1N@e<rg
z$<U>&$#n7MI8t!ysCo0sQY^~<qn){GY~Wetjy~Amf?p8ojce~cp`qmGn$u@$N0H>h
zdjc=c@1x|Cd|XwXIEV(xS>-l6NK5dZy?2glrR5=*n=Bbzj!~H+iJlBuEW^B_=g77<
zEK9)%-uVaw(aO66mL56XX*Fu{ABi6SSLgeGd)bIyWuxQl*^@@JKZtuDrQ|(5$+?oG
z2*YJ4QTarFhOvAfNQYq6h30n&YX(LF-NpeVzjI0G^RIwirIjo%t;4EFo}6bHWOpNB
zfe!Q~7sRgEYP7PovGIr5)(@w_w(+{Bh=&$}vN8m`?Q{&147h0%1HUSAjZU3JSn;P|
zi1{S#4HR_XTZCGlq<J6I9p)4Uqu@-R5ts3GiTD{UD_8D5NypU7sGsG{ZXR=mV|_f!
zi&nHdI=2VYfLk=}0j6Dx<9#r?M)bopnI>`$<zeF%H;KHoLj1RwqAbo`6Dyqqx`9;%
zmw&<Lj$IGcV#25vSLQ%Mk%--x$C`LzH8@?20H;T61xAF1k0#rQq#8=Gs-Si8MAxDf
zy-j-`BiNzT!&R~G3zAoNdK6?F!?T36#fxDZKFJ3C!scVbxy1crU_1+P<41?5ah?jW
zj2hbVWK!v;Z`&t%5%o!*+okOEkvto3aWJrbCGM#t>>X<McY^xY!mq1IeOtLgo8-^l
zNB-LH(Lm?~_nqks*0t}XB9Zz{>X9B(xoT&$CV*a1tU|imbj<T}tnky9dwk2sbQVc8
zlNg6xl6B5FOPiHbT0^vpma^%DkL23g>)=EeYirR;LCZ}GPe+Ax-3c2zk4Shrqj%}l
zfF84os%FSMIi3zY$aI%9ne;LlK8&|01&CUAFx1imJJI3ps7SkmE3D=w$u9EFoHbri
zjT~_xz9b=s@GaL4*F{6peK94XPh0SM_wDY>R}ElK4AYMpo~1(&j|Zvd*^2l=3X(P<
zV_SUSTWzUZUOns<X)nwkeaz>9V8KzRnk5%p!xnGd0rA8bsvvC|Sk@?u<}5%fdN&<u
zFip&7MWwF8CvkCd<@wxc6Tv*0vkAy6Wm5<u>qP^jv!FHYZIU~aOt1ss4y7~@;%X+R
zm!D0`R?!D-_ek435_Fuq)zbdcp;TfAGr34+;OG4X+kra!F6qT%D+b7W2Uij?a<owO
z3pC!SKDUE9qoG717x{c%#4{FrK@T|1c@(%3h6&vfi%4U-7T9^o@ih=jBrt;NOgJH$
zeGNwtenJ0Bz6mW+{_m1GtqLG&gWFKALlu?d=nHYU7A=NMpbjg8u@Tq|dI*N}eN2=p
z8CZWtcxfUtT4-SD(Ye&=&f^po5QE?<@2?11ZjhG3`2H#DD<mpp`FX><FH5W*4wm*-
zT_0@6MBQs&;_IS5!13|G;sERx%&zOolv|oIs?`O0*^q`cVX4hxQzL^ourHp$Z!@Jq
zldjDP$`KocNO4nW4r&KKAEKflhty@P$~dRMW}AP4jzFB;ZidN(vyP+Uqln-~_yVCY
z4PTFlR%|LLX;WPI)k^-U)7V5^6UAU(r4%c+=ocz~1QIw#^Y<iAX@mOimp~}tY)7ys
zqw3R<aLz53grTTfNqDvuM%}^+&nB)T;nv3pN2)%k#QuqBD9arCb?T}eAednTKpYef
zX}6HXL%wW(fh+Kk#Y-@7!Rc_jc&}}U_enAs2Nr{~<hE?#2?+>XqXLT|&|EB(iQ>U>
zd0+GM4Z=fd^?Yh1lKRVvUu5*wLseX>@5?oNO`b0oPxaPF@)y*`Sh6PNCDkpiDUOf3
zDc3ZMR=5ZbCs5M|Ty0Y+<VtnSO0x-2aj6f%SL9yAhoSxaBvEH`KyWWzG?RkTlE`m6
z`q{ntW|0Jx`P~Eo7b_-CgFBYb-1Se<n+qexE}f0$khe_sI14Wov-z-OD!J`Ol8`k)
zX@PF8mL4hHyi7;L6!w6pu|D9>>8N6d*s6b&FrY>}Flw}^D%2winm|iDO$OPR528CA
z+zlI4&_{s}bLN6>1O<b*HT5Oo8nf$DdGffMS1Di#vZG0Kki<hq9GKukxx=6M_foUc
zk%7{h*U?XkbC->LI`(@fo?e9<T?=9Q(sg@&eX+{2*}JKTR@miOKhGsD9vz!^nwU=u
zEQmRGHfD%(3qE&^4|m7ovpk*1i1qU&BYr;W!vF^}TbFK5qSn|X=ixGa$2hYtss%9i
z=yjfo!`%=2JlM11!f{ruu_;Do*EfUb0N=p6lT8a(rfiUYOxzm{%VM}<nYB+ZJmP47
zTL;}Nw&&8C@`y_*G{4x*JA9HJ|81Hu(&TzKJ^lfoFC2BqkNIex5d}WUL~C4#F@M&G
zpAxV9_$_tEC%K2e(0OtJYk%WaOQ-uc9gdp7X&p@xx5bes$f(`y`bJC(b~J#b|87eL
zZN6ycTNSHqPKDO)DjyD$Z`6cbJ1RK*#IGm)`6GTtt@pEIjI}QxFS&s~!F|E#w@SQd
zF$d?9v{!^AP7~F7QXBjzk4c4|_87BE@r$oM4H+>>=~>?A5zEI*NBsAUt?&$REN+EK
z@@X=U3uE-hq_yV7HJyrQ)85BtPk6xeso%Yn#s%jXN=;L<*P{Kuy^P+x+<p7y4l|GV
zn|L~kWynYPc<GpbQp`Cd)HPr-nqov1cTe))NLCqL+ewxYn+nrBX7k4dqYi1skZ4*D
z@ew4inS%{u$Cn{=M)LL`wN(Q50Lf>l1%g%>N&I*gjQetY_Tm~wTv@GU1(iZYXB?N-
zn@+`b)ec>5#5TC9Wt{hyp5wjc!mO_ARFI;Spt?A#N%Uy}T44$qdXxa(6LCY6l5)nj
zE>CG<T_w845r4$y8PyJ-FOfF)Jp)fS%RXYQtseR1C81ZO`S(uJ;TS_6nm;b26}y80
zB6DE$wg)5R7*gAy3)zUltiQ~NqgQkab8(})p|^+nt!J`%mcTcZp9iwUB#%dhgu{?}
z%_b0ytRWGf$VpNx&z#F6ri;?gMlw$Me95T@cwRs0(NWFgLHbV^gMis;?EzovR1gLI
zB;&=W1-Z0ySu!2=hu!cBp@g!=HI3MsA$I=>x$4OvV@uA^eBX@meX~p7t4+$ja<!EH
zYvXy9NCd4)a0B6gKP?48aE+(JuJQ9vy@an_f)DdFr*Mg{Zu`525leIt9|U|{Kz4hb
zL9V<&YWu?Ucpq{t54b3P7+h`wAnNu-b-Bw&d~ODOzR-Y6(q^6rb}Esy{+FK!kN9;W
zw0M+ULWip)`sgk3>SI8=e)$vOjrh}que=Of|G1D#d(tMy(y9r|3PBpiV^X8~>i^~v
zm=H$-!E}icXM#OV!{twl$!??*65&EBAVx%QCe4X>ljpltu4|2PD0lZT;*37U=>j9(
z%{fH`>=;hn!5}^6ME`Q|<`+5@dJ^^ejrCmqFj&wgBzBhOFLVKU#P8zs9tl7gZZ01$
zu@(LVIAgo%1Jb{HCmQcH_K!<hw%0hdVcdJO|9K-$NS);I;=@AJZEw^Zl5$GoCff;}
ztq1H{WBa9amkp!rA^cIaD)GW3NJss6)stgJT%4pw6CE^vzIc^?ioTg5uT_z*Ny+QQ
z;_VL%o$g%Q@@80LE?uU^EuFA4B^!en9WDnt)GCj7pDo^bvAD(i1CfIxPSQclqgJTm
zEaO?B9dRy_<1rogxnK)&+l-9A)Ttn;3hFy`fK`G!iXCm+7kJrx`|%tLr(ZQr&WeOx
zkp!M_vK^7dq2w$dUBNvfBTh#B7kSDIq@d5o^!YMB2z!N*#UiGNk`DEydEWl3gSR}|
z;bgoZm*zk(Qj9`9BpJ|R=NTy+5zmMfKdn@7y(1oFXGeqhBa88c`Qw7S_tm`$`#(&n
zKOQcBT7*l-=Qix&C>_NkW`9;v_;M^yM@*MtEF<PmR~WH}diF(Ewmf1@@!>J+=f$=E
z=$kZ8m?!&+-IpG54rN{Rrb7O>P;)ZpSj||fLj5A*v5xputQEy+`sq^dqhlc_S@uyA
zIe$SHB#-!jsM2vB4<%kgJ}=@)_p46K#B7|xw<FbS_TFCOlw`z+!sOxN!$Oh}LZv`%
zdo03R8SR%^<M(4)q~Zi)p3287cy6R7S$5V0_#w*suq4>@*uE8ZuEmohy7b=;4p^1`
zVKP~e=e<PDg|mb!FSye{v~H61jNzNju_#ZKseGit3!1>N^cve7Jh9X-m2o%FS4|_O
zlyKt%FfFPl0F^rxLV3KD$-kTmuAP77OmH2=LW$tI5*!s@@os&|#PBQZ{})XmzwEAD
zIlX+DIIAy_h<<65RXk1^zA(sA2MUNuC^vEUy5sb9>$07SqKXS-Yg$o{=0PvV{U$s8
zCOiFWW~b}%ULrYN&iJLd>Ds}UOHDWK;AI)3zU&&BWsd4@uBfh6kcQjMr%CT)lH10V
zXBHPYohvw_^!@dDql{xw?kL{(&%{Z&CN{Su$GR3yG#~kd_=znyuUX$FcLl#yqT~ML
zHsUc7%yJ(A<wZgi0Efmk&Dg|5L*D0u8HUz1)d@9u$tDg((LCUlw_b7rUt~KP<FxQC
z5H}p`hJ$@64t5FZNl`{U@nVCniM1ecWNFqSFPnz;Mis0@l2rV5ZMuqAD{Q=6mWqO1
zR(1aw*q*kz8;Ix|Fv}ZC`L87F%e`Gr+GnD)h`cYId^w5V1}82>mxu0cuc;Dc_98a@
z3S$zt>4PN3SB}&4s?`XNf<{Gx7z$#iUAo^#e0o_|DF4Q;A@<0Ukfu$DN6U`AA^22=
z%vJ<-`f2hP1bFf^w0e!dP?fc0TrXc)mvIAGNSSf_``OyeFJsKRW&_>z8sv<Tt^HAo
zgjkit?TWFqExLA<s)}pwu`N0RqC3fB4<52`_>j9&lSGS|um)37nAqje<BIcq@|m=`
zevHt=#oilq=Qg)i=Z)?gj_glWJTep3H|uz{j$iAWTibEB*W@o&Z#1eKIpM3y3GS>f
zAt+cfda0z~y7>h}g~%|p&yyM2t{J~^%TMP>5ndKWwK$QC){kg)rnKMdLC!=o@hh43
zuP4W%<)LZ%0)saXRywn@B*&=*QXmfIp$Z}FXfDekl^gb;680Pt3-en~7CLzO>>Vqs
zbS?|_AWo6<i5Yz&d5W|+Q{^5(a)FRxL?erh6WspAAl!sP38ARQ50h&>cc%B4a?C^7
zGfFn1!dOC#bGgcr`{hJHI|l|IJJaxq3JQCtZGH@o|7#@daloE!YDDWMF)h%%1vapV
z4igR3^04cjc6`6hKUbsH>tql-){^^1SIvfcq&{lv;fE_u!GE1WlVZ*<q~Q-FR4+L~
zG%(Y>WO9=A^$yG&O!`*kV+jWwIgCv~rf)^h<t_=m)aL^j{8Z?lmFICS0y_qHC`S{*
z+%G6j^!u?|X#0_wU?Vy^NqZ-TkstA{D|M|)altwrien3LDT89JM4S3F8+I8NQjpcu
z>T5>otr%mg()}>~nhp(-H%&~nE~Q5BA@F;W^iD?EAUjTxd#LzgV9$OOruN^>v$!AS
zs8@gim%vL4A6&P9Nu@WK_UBL<4j#l&Yw8}-5R*?yZ)%X7ert{pFj>bLK+!HfOZuU0
zA6ML}$AYF?+HN5Kos~OiMNbksd$}(35cV)yMJIVBv<@619l-)bbn2f>Sa-~OzaLEg
zc<|=0&tL!kc=E^SB#HY;&R~y%tjVo1AcB+O97Dp(#%hK4`3r`;#9#l;Z$Aop@KE_K
zri}JnFn<uTQ>*PNsHc_)H3!pU&?y8Nx{OMT<<K26I<BG9^H`e+7SBV*wthTC#UuE~
zo6~VqDWR~tri&t6_Y0<jJ@BTTsVr=q^ak&^j3?|0sa`C>i12r3bKMFM-$Ese6(myX
zw*p{}^;P<Lvt{&&*l?R`Wi}AAF{mY2O#rX?D*g!YJ%QI__-NR2$J0p=2km3PDrX`l
zOnPb&t@v=#u~C#j{OF;&k%rnrQR`T~tyXln51a9nkKm=26bxgEK%*72t85uyp^^DN
zv9hByFBk@WyA{32tU<$8s7OXr(4mXvE%}DTAnsP*MWc6GDD?{QiYPlRAFLhIZd3kh
zkrL-tpkppjOMj)NI@H8nX@YOfe_%bcTmZ9K+I{wV-+9b9hA<waj6KctmG7b%F*SCN
z`t-j7oHG!R`HJS*xDV+W2}))mItKv6Lodcn*irmR;A<i>JL<dx{U|z$MuF-v`U^LJ
z!M{$<B7REW?X*yjQwq$`;sAY+i4e^Dv?s=}KT%u%7|eyQ?@F=i6CYlJkm|Ogw}S-w
z&B#hC!nZ^$jN*PSInDiy5wsa!oSKBrl6*=9{SSRB2PA>g?maEweO*Au6_4$q>1Zk6
zjy*M%<J&vpj^ojJBeEExOnDWKI<{P6rSty%-m~>x05NvxP!^nfi*h)TRh$=;er}-+
zlCDPCv{=Q_d_W@^*@JMqi0a5k!d%|Jds&aV*{24$lAI(vA{AR$WU*zzaPR}7*J>em
zrI@s{qc%NmhO@2=hM5b__Cq=c_WaF1YOLa&B=lU0OjPwyu|#@ifI}rja`M|+?Nxl<
zWnGYT3l1hEf<$-SqF4%)Y1(s!K^2Vngwd)ncsu}>Xqkm>oev<CSR`LoA|&jXi56W2
zgT)FOr@<EA7r;#hEU_!?U0CWD7eXxsHR5QRGuLN!Kog6iw;+~<?VH;B3$=%P(}&6~
zyrR?Td{0dFXM6xWJk7BFsUAIIw0k}#LXkUcdf?Bk5@GGM1f7lTT0Q9O*jw@AG4-$}
z8NQ)?y+?rM)$@(-G39(ZkV1DXuVTyMG3QMg6@*iLN?4_Q8F_lWB%gpp(r@WF<$Yle
zVZ@aNC(vkHqQ+%h1NqM^M2^luFjpIp7!6pk;NcFEQ=EgDi78o-22<d5=P|-?>9I4C
zT=^id{}6j6>^bQ(gt%w1(<%jH*)2XrygqbHZB_Ip+x|-2Pu5A#(TM)cW1<Ii5=EM~
z(go9@LQq=uz{=4Z6MbXkYyhKTlYcLp?J2$(C*5Nvy@*7j`>s%tB1|_b_KvFx(5dDP
znxtBQBEq2_7^F$vw-!SW()=4*9Rrcn10tdjk%kG1j-|y=H~tu5?ITvS<B^A0Nr#@E
z>kqg(8SNlOqd9b*er52_dcc1p*3C%o{`3-)M5aX+r0M1W5~6F^DZ?{vV>y)SL@*SB
zBpF&B4F<P^83VNZh(%RiH+D+HqQ;9j<f?0CpaRrp&$L-O6$Ci&8PRT*cba@n5^8Z=
zX+CN`Gsx{~r!mLdq#N=k4P`+Zkse`zaTeuZJRY2Dg78G^(oGBToj{SBD%7-hv~{GU
z6pJZzAX&Z4FuBl$u4dPsZF{jnYXR3ww-WBFk0bHKOxPR21|ZjuFAJHwzQg3abk`ZW
z=Fd(z;?aDcCH_||IWP`&H?c1o*7Rq`qud*M7Lex%bPmo;mDv#Ich&;f+K*`Q=>qm0
zO$or3pT2vgCW`~eK<6gf!Aclb&{AE<vMB1QuJKzEBnZAxH*5(g(JdYmvj^5&UnCRT
zjMKN~I-#7AQA{t=gYS)c9JSvFYwu<g2H)q51d=O8P%rI_gHA2e)K$a`MTwoq+S->e
z8$Gy-u^C^_FrZ>(UgH|%_OHZb+`F_v6`Tf=2W(&opBo&8R4t{<^=VYfi!NtGbVbwS
z)EQaXj7q1CNb8lD4Fo2s4r3}G7{V<^(P%#ls`v<e`3OoltRt`?GW@NRzj1%hPBL#X
zT)z$G7D8_MMLn@@GR73UkBnVbUWP*ea^mPKetqbyRe34$u0x#<lbqZ--s&h1ZS@W}
zzH1GO;}#(BNdM@mFT-N1^GeCl+ksFOctQ%UIAoroc8?R;9Jedpag^mNOJ7ptq9!#n
zXnwUCaR$)g(TX?f)g9^^jkd?}1okYF&~mQ#JWdD6N`4zE#ZJ`vL-ePW)*n_M-(IEX
zl|9URWnX^YiSP!$0IhG{)6eKP@6ky%@4<s?#~%c6*XWkad-^{||2bM|t*!p&=r(9X
z>)D%w-Ip&{Yi7DqS%6<Ek~r_3toW<Yi2OA&GnjqHpV-VhW|?MRD=py6o3seCFS(VO
zdETtW>`SFpD!oas<_QVHqv*$)IC5`e6>jf%Yb0f!S2kC{WxS<J;O~7+cd%hz#bVH_
zZmEJ-y%n5&RTqTb4i+tFAY9JbHYORpZdNXM(=O-iOS(SvX0V3#^%my>uW&QrD%-ZG
zsh?}2=6nYC)BAi4{7+?sd6eSX7$S}4WJU#J$Ji{V+$C8uM(rz5*I|4v)_JCMlc}^R
z)oFa)xROQL#RZ@tM&Np5EP-m3uob;ZNaP<Kvyw!6x$B-}S<G+^)@gXB(X%xT(+lRk
z^6X?Wo?P(i6Hn|CiR+9+#%v(QezB{n>C472iGi4(<e88#pkjEQ&<IExz)#Qt#ofa{
z2L5rC6il_`Sj&vjx{6XGdK;IcVtw*NDhWpH4V$P_MwnJ_fMgc%@6=hq##xqot({Cs
zdq-`WN&L~(0Fk3=<aJ2OV6l^|1%qkHS_L`(5S8Lk?aGf%*p~1F^AiVWNm_wOHF7r+
zTH2J23r9A-Rvk&6EwdpzVB-Z?8e{Y@5f)VOF=iJv%n4Qo(MgCcr}1E#;4GxN+wjuX
zzd7sI8~PicW~j=s8zhMwG67k@eln(&Xw7o|U|7;6CrG3+A|B5{Mz`1Xeaz**xa(>o
z%x?^lx9<>(R-^XMf2<MpVo%u-f|1{d#{OgNH#5)fAfbnj!sw62tn;lZO(=zi<zVsd
z3};;=BiMUpMIvzw6)lw$I?+m5Ix;#1FNRjFl;J*-mEM66Ds>96#|`ZiKVdwO{n*>s
z&`m0&&?Sy<EI-Gy7uo2!T0_X}m-yvyOWuG7Omo&pQ|o0Euu=w43<|h-l@l|VVwJf5
zdo6JI`%aulJhLMF;X2@U?#SG%WdhD8xRj0(Q-V_ufZj5mvaNz1i|a_wllZ{(9F2S$
zWzQCX{kW<F*XcriyM|Y_=r|K&<q#_WFq5iCG}=#&6fuQ;JBUTqj?ArH{AycG-fpjs
z9QVqL|4I63toMkE=p7lA0Zcl)!N$-fE7&vjnP7aKsP#1~8C?X>2ld(By^`294hSlO
zBI1h`vTa0%`!EpDfkQOrVlNl=4ZQEFBP{l|sh|LJdeau`GPV%icAB$pin<fk|7_g@
z))#ldZgGJ*OXbkpx7a(2dA8Vi1s83V=<jeC=X94U_tI?T-Ux6MCKE&hAelfJjobtt
z8z&#69EPx9^A>-JXbFUyB*OTOwMi&XV1V^RkxEUO<BX~f4-X}_!*iGciZ{=AEil@K
zQ182gB=@Itn=4vj9^8mn;nZ+u@XKPnv*?7F(3!|;V^DOmgtaDO(c!dZ)`SiMx1diK
z!s$ELQCxf!Id2Y>LPG?C*cuD@VJ1KkjI^U<z&1iS1niI<m!wNeYRynSB5H7;{@k=E
zrX@3~B*{#&F=pe@FQ(o^CHhQq3-L{u#X~U6M|z><2iFPA?vf#O=4IE=O!%CE^mR^L
z1@;wuUK@p<EsEsZnh93dp1*pmx{hPPP<35~FBYkO14Hr4z);Lf+V%2vz00AAyC!~o
z=2j><g6*fiIxn+$Cb`#kFq7Py<rTeSXp#_8kz?oftTGpRWU>NnMl@InU!y@r6s_M(
z*~^hHnG2v}eN2-~SUAFv9;1$}O^tjUacKRnk0A7zV;_7FOfSni81YSH{!L{5SB=cq
z6TVbnzP!6YT)uYlCByOoc)z6FAg`K6W@H8d)pxX!q4l%;I1m<=0nwk89k~CmE;;Zh
z7L*%!F}}Fe@QX_eUr0#!#f5`KWP;dixdvv;N&~#f%gO@WbhRX)*KHv=;7f@Bb6GzR
z?y--PvQJ8U4&3VB(>&ADxOXl&g6RB!JAX{4^Aurc!M8I2d^a5bhU0%dj?V{sDSnSP
z7vT0nOuihiw*^hOI821%Fw1fNiYhZK2UJw0DN6;Fg==hNEWT^m<~clEf$xiT#SdRc
zZv~4GOO~|pLjG*Tk}0<sjni?05VJxm+k?gcae+>dOWm+2DWI7nf3g+~UQ?4@C@UzF
zo?7~H9eyex$xp0d)5B|)EC-Y4KR9pr5n@p{O9x4gOsE8*B6OGzFPKIJ8QQwv#xrgE
zjDJrB+ci&IJZ2TLK-ETTQJ=3ThIt~Clc6pXqADdMhnjqKLFp&t9~k$VhPX%nV*i4A
z&6Tp(!a~~T$ZB7+0`&D_oC-O3O;SW4h2gO91u}pM=833UPIO0%-+G(n6FOv%?bS16
zXHKmrG_JNR^TzH4Z+y<_QAcf(%Z&UP`@^u0k)SJeASVX*;j<RtF%o8^<zlwd11BGr
z-T<MOSY4t8DP#^iwxSh1J;|~{qWcg%IhY=s{O6SYxQ;mlt3VIz@4xiAR%bPRg8vJ@
zabY5j-h-^+CR;UaqDLGI!>%XIkpw4{EYfce4&LrV7{v$lF=Ct;b=MeG0wfvohR?7X
zCU~)kRDsA0UqfgyJ0YZXOpAJc%RQT6m5+1459~OrRfb5FD*G4$ThIzI^?;|+a?YDi
z?j~e<rB%?f5_$HC6KQ?__#in#G|G5#Ztf>F{8s~kGG{`no5*8x=CbJVbZr&xCD*<l
zF7W`LAaS8*a3<k6Dtt8ZS5oS2IZ4jEtIa%nQkK_DNjbk!Q(Vr2#k;JI9OK{7lbmZB
z#pzHYZ%!m5$p8viC!M<y9@?GFWw)BI$X_<;*-T+~GKdSW-Vi6*sTfAD43Ub7oZr;P
zfO3<S_rE*TX*Og2lY<;Uvi#Z)j4m&AglzHM?5L&<A=AOmd2Q`18{J0a2R*p9rg6Yd
zV|TCHd9V|AP-HbyN@-pB4962*FcaJ?kwc@>lsTnnI&L``_9$f>{5%Q0#9auL3XF|3
z(O?B?hmd|s>(FFCz3+@z_}fDdxQcGp<O~^K{saOYrpg|+(UjmDYYmHTKUH+rxU{9l
zW6KJeY54XkUjxkoHc}$;yOboW?IZxq(vT6z(@tfC1{!3{yDT_5JvHEN80#J#58Nha
zC-|-<e8oH<Ili>(_6?Ru*VYt(pr$pNHOA{C7MFH9p+h4%7Dx*Uk!oY_l9~Ygv*b42
z2qR)kq76N0hhb;X(QSkrJ?XdySWf1&UQZzojt#PM3V~G6^z`gV>cBY^3+mps$f7wh
zkXo4ZeMnlezg{-KJGMC?Zmq`Zc*nOctz<kl8MxFsmjN*C)y>0jru)IDx}Pq=He3db
zl`XjY@<^~ObC2w%n}=`1rTO&YsZh=Xm%L-T?8t?_a3|o@j}H9@F0e9~L8vlx@9w()
z;;OK15C>u#;40|;xw2WWo5g$B+A=+u#x+(U4C#zk;(|ddSRL&W*%}lLwUU}@+DHoH
ze7s^+f*~hf09qlmUr)E$zO}V*<%o!Kd}ylJrcBp~#3yl)N{WJacLGA<DYeOnFPb%l
z3afFvLv&S(*NozJET^S(yt(T*C+0jbWU?8L)9*Absxa1_wKWAC!-(mpwKXH`&==H@
zLkai*PQ_WfK!i1iy}nOWzRt(=Ew`Gw@Pz2^h_Ni@9@VX;j4Pk`C-s&^si@jN50of#
z#N2?*u=z_j!kOYGd|#G1NGg(Xv`hC~skKoBoT<PWVNJrX{%Ipief{4r%d?0fz?lK$
zuLYbX%PIPSYJF85JN$7WSIBZYG!K)ucXpYaWNZuZj;zu;>l>JHbc783SzMfSGkE_(
zz0e9We(b$>oBh?C%r1Lb(K>j!Kci^PXjp+8;~z$;7~A*-TQf<}9`L4kU3ycFISrbg
z-E<{?;V?OmS&OUY0_~;FBq^F$EWMhd<oazv+D2TQ>a|e^f~WAL4p?}Hhlwwv6;cEz
zi7CkBZ@N^BveEOOz3JalcO!4(%L2~4E5xz4<zX`6qtX4unpZTM4!g77tDmB+`x~40
zD}7gUhiQm|d4jtq;@{!6I`hpSmd$zn>vmw%opQ%O;GSr{)M`F8;rAW*?Xa$$25m0!
zg|jU0<1<Mi^k188-m!KHe%f2n%A0PV`@Bv6htFcU(c48u+q0Xl6S-`d_PH-G%-ObQ
zhDmfYJeehnLb&OE;lQPadEnDa3&s?Oy;Ka-9s)Po3x?^QW-{>f-R`UA{<pi$%|+>^
zxkB;0c5$8RUc+?|Bu}#w-d(GqI(Q=*B<%Gu27`SsM}>t!lc7IK&TRCr(@|Oxs~sF}
zS`&X>HY6GDY)As!m{fB5Lv#=pR#oK?khnicUv))WA)$?hRQ5yzHUjd74oB0Mj3d@J
zHdv*G<>+V0C^Juc@8<~89wtUyWe&;KTlu*&JZ~F`SXPHFHxe({-=u--=Z&cTHwHMv
zo9a+C77D&IBsA88G-o&GIu=_bPwi8RsKYJ;m62Ulb7jwM<Fz&~`68&5WJ58Jy~EUs
zD1_oimaHKM)m5u;1h^W$-T?>a5we4fRK26e_>Z;UDDbiS=I1}wIE|>7SZh^5Z;KPX
zW$w|6`LNpR(a?mkuegt^f3yiq@mZXDZMC2>uLx|!s!dAT8*$!@m~L`CDI!T1vgUo+
z2%|>Gw@rNeoo^E2>))tpF1_ZBb>wN*iei%Cfm7p10*z&0&<6R5TpnRV1M5t2O%U*y
zZn)@s*Bpy@Vk3_8<7of`r03#{Ws5<UeXKEtN3g3!w6eBF3&3b4ob_9*t*vra&e|FX
z0_j0bUrTr9i^K<4R2}h@!A)@VND)}^ZvpFttK2NRIHeVCz4LTHs!oz`bnMSq9{H_e
z0r@Gn<MQ0h1G3Tb<Bw4t>r~&NYeO7@R`6MZIM!a86!qw5ItIH(3}sClVzyrrU6H7H
zj@v#m-|MQ9KExN16Z--9REJ?3YBH0W&eKUg=tO^rI?oZW(2=4cD(4jm!|`!U3LF>S
zcFNIpYbr^+HQ#Q+cmCaU<c((TJ-=h_`GmUg@3`cOAW4Gy;xmScbcGak+G)QNapJP(
z;BxnTrbihu2vhGI*DLLhZcl3F%8kwu&vGpIXSbmN_F}c~GBQz?Yti{p^oE74y=MmZ
zQwoCNh{ppVBdJw!`9{c9pfTbdAG1O<5R!i7h|11ub|o94Yo;$Xr_m`M4-h86MgS&k
z)*9yso-s&+WUI-~457C7?AJ;9(xYhQHf`T+E=MD@4x{*ud_LsgzN5AQRi~?Bh@$?8
zW`4dJ5e0nNoO==<L!)t+Wnh$+QZ-<3`Ghb615;Tu*Vdd0y)wkZaf@kyxWspp?sos)
zy$9Xx&3<yXfA_(IqdQv<x4XE@{!OdlrrB;wRI^`649o?bXL4mrz0OU!GV;a-u|h5x
zc2I3(Wol>*tZzng1mQFDtxCkh#js=+f#oI+(hxrhA6pyjA~U8D)_`I>H3_HtHm-^v
zKm3Mc$HX`;ab!ppM6{QD$AMphzgm;f-vNz@#`>q<Hk(|tq==f$$F-V~#hk_1dA4Q{
z^z1{mK!ltBMy+Ixc2CYVT@^KNaW8nj(!o~t7VJdgjSGWZDneZJ&2c<AnfFpQ&=<x@
zK1{hbRdEY1)ckEQFPFo}$_S=4Z=dG9gCB!eLRVSng7m$G{QJ70Fttk8()_pSowR4y
zR9`Zvw>8fIJHH8@j*NmH<dNWw^;(78wNNYG3+tXw_J_%2IfpF2NDch$;Gpb^<!aeB
zxEM9FC76EYl_n~Zm_G$!Jm9b@kjevOWy4sZZrZ`c<+CkB)IxQ%voR?roZ5%S5f9p>
zr_R#;<fIXuP#>n4IHyZaM?}9;W^tMV2t%&(?Fb&7A|0t-$E#rS#v5X*=K#5B*IIH5
zMcgw|E5FmtvyUi$#`bhClhY>O+FVj?s>^hBoc0=;ZjXgvYU}VwO*SffS7V#d?o=WJ
zL!sIE{h4IX$LtS=Gg5rt7D-?HwUAf*0BS&$zbS_Z!p_=^h(L@|8loSk0ArjOkSjlD
z+98-nQaH-E+Kg0fx;mS?QVLe#2L(2wv7pA5${JzphKZX}M&&?099#=#zv?Hk7R3)s
z7KM;EsfqmvVF;yr!(Wyn7=jQ}db=s6Qtx9E;JyG8ElkM=qfmMI!jkyhs&Y2R(Gffp
zI5fP&;wLpjG>zd@3xYWdFB+zbCp`3g<9YEc1GsT{eCCBQ%<;racMCb<%_=i5;Wg!Q
z>%KSMtgjkptNidYb|aJqD7+Q2bq{Q$Rb2TB&ry36v$HCU@6}Sc{#I>qYim2vzDXl;
zkC)ozcQxGZS+w#Tc}A;vm1_q!CBwWl6byl1F;N<J-?%l*3Afm+JUtLjAI<+Y$-4=i
zwhMaTc>U-ZXAopWwv*9mnr9=HUgh@5#beAllsoiYkv^>dr2`5bedW4jSi2V*4Whi>
z_+l3aRlnP&lT!(aerrfP{)a(u>CczG^ylW%pI6-Z^Vutp=YxuIUaq>x*5b;$rh9(=
zi(d2dg>N~pL)(Si1o!*=;_Lmkit2yiL*t*8*U6F?2ctyr4bVUf^)*W8#eVP3%*cFI
zd0r&lz#bJ_mxK)#_G}=z<=h5{0WkbHPl9tHYYbt@)JsSQ$dux!6%rftZvgn>sA&^H
zq?gnmG6`Z0Z;oPQC={&hcshu4*Mb%L0t_#|Oo<W@wxgU!hu-jmIQ?tb-_2HpLIq7J
zRDcQGE}}oh(FqOek<F)r>4J2fmfIN!Y3+0beR}YyKFVam_2}_a-X2mr|Fj-I=Jc$6
zgxbN|=yq6hN@;ani<5O)fF}NKc998W<MY<<0=I8s$||V5W+T!#vZpU6qUsFsk(7h5
zuJ074i~^*|=<ulvc@%@q+-B6(yv}AK&Jb&kA-9OJeAO!IQPyQgufR=(jXNkluU`|y
zKq5S6rig@$?QjmK9b=}A6-KE+pP+&|Oy<j+_Yws)J0v4Mvxy4aO*IQ@MruQpz}c|g
zY;<rZezs9bEHS74hk<u?7Y$a~+`O|swhd@1+jEie4Q0NdHN6d96YHB>5AUq2me7=K
zq(+-!6>2ItS<~y&vlBrLP~+E}+1e{^gLAZ4GOJ30y~8It0M5ZmcW{m((=Sb?ACJ;x
zu=6M5^?dy2ge@`?1Y$RHB0Q~W(IloYX>PURv%<Sc_{833@yV%u%>cj=)%~&dn>y|m
zOl^y{T5r%x;IH)3-8<V`_!Ev<v>{{VC;DAuh?i0DmqjrcW_|uv*F##<so{G!&$_J=
zAkjZiqvU<hR%qMdBf<A%YM_P<V4FuZG44jx!MHo++&uW%n5Qhs-t606Q!_kHzxN4?
ze&vU97t?gY@fey|szD?cD2fAVSmjl0C~;;T!8BlE@=XA3IaA+_?JFniyMZi}ukRM>
zi>B;fbGrT)NXEbBMEo%Nq?BfFzh}Q>&tyjmPjY8`CQxWjiv2%?RhSoT;*X0&y*%)w
zG(!75{V&k1Y*jaLRBB59MNu=?HNtsN1<Z#%45NyLE5jDJv%U~=fvv17K&=uN){S$U
z*jl|;H`)9*+5Fd>%?~!JY2IpHbY3+E@*Rc0R_y8Bt+qT=U2d}s$eB+^vsEtHk_v7p
z-(>@ac}0}dF~jiAxfHGP;B7HDhk`Sn7ANc*KeC8fh5G5>6oqlUFxF>DI7gCCp=CCs
ztk;|7SA;!q16>07z><<n!4F(FUk?A^btaO~G6I&qY8okvR+(5k{1)YvR*@OGN`Va0
zQ={Lb<XUqg<vmgNGpq|7%1zSi#X=K_MhxZR#$hWy7G^k*^K4|^y6ghcBYw|Pme}-n
zJ))MhwV0fhnJ}@aUh!^ymDeRK1J}S&(Fa|1xx-iI{w5XkHfMO=^dDR0s6VgL93mL}
zyfIc@4YwEUamVk+iSID4)t+Sv`^-oWG_v|rs|MG-qE#$P5OoOg)Zv@L*M*=mh?Cyx
z)b8y}<G@S`ORI{tat`DTf4$+azYJQA-p6Hl2ETbZ!;lWX9JhGG@Xt$ei%egYMt1i~
z+@cIaEsqDTiQSxeJn{x$?jNMb97$a^_IgM*yL;+iqTi^iAqu#e0KD6|)}2li8?5qa
ztr_X!i7-aKm2}+nh{kDKOKO9B`pXuuE1mYQ0tu#+26lZ&yuShjzKUeBFM!PZD}d+|
zlm-cCoJ~giDboB(=97B(zUZD-YQoyF%guOfGH(Hbr&$b;CoobP=xIuyxri<%@ll~5
zFjJBj;*nM|Z>NFT;SHd`agWqE4&y?>CC88ksqv)7vF^7cAw0$$4}Az80`Gw+Q)rQR
zWUZHTK>n&`s>TWr_U}#5d-!*>_w2?5a3i98O%X*8@e(46R))AtM9~huoQUGQT1$y3
zWAF7_zM~=(SKJSw4&`2-0rfRra>;aTUVCswl_&iRM_71WE)-_L9@z__O@amgwMJa*
z?Y^pvSo*LZy?eGVr9q~7md8#K<y4e$o)(E>{v6S@m?{{C#5fF+;5K-#M9(G2@w=6E
z`Wy9BR=N6xIr>^c8T4bSSc$O4SxdZEqc=cKqNOuq#_)N_)d3mO>>(y@4{Nvro_&Sx
z6gw#6Vf;_EuI%zh>S!I&uf=2?;c71c0kqDD3n)8IzqY7@XHO8E)jF9B2dk|RUlN4w
z*Z|)bCv@nW0}fj)Z3bIFiqI^{_0>n27oB3<6kG#Ji|uKaj2i9@1vWTMQpuZ-BZ5Cn
zB&i9q!&-W|%^I=C@p*@P@Ah{uUZUh<VHOAC3*#fLr}41Kq3lgMU`^F@n(6~7WRap3
zY|A@5#m8`8^&u5L3S@pAKL6`J?QB2V<Izpdml(@9>o-$*9W;Ua=BA%+aS?C6tE6JE
zmG|QIX~44wA?>#%Y9EBYpjGaj@Z6h8Z>w#H0m&oMf%ea!9s3CX<A9m9wdVp|QgKC%
zl^Ms~+LzbXqCMGc-aQGXX{gC;=5d1xC1PXZx|(w-Brs-e?Wr-G1&Pxh3=!SYHtltX
zgGP4N);J&lJm~4W=eq~bqxbvI-$lc7e(S^D!MD-NH!t>H|FQPs-R|pyNZ*bQ-sm%b
z6gT}g`hLM#HyEUs2@zzn5Gkf*fMblGBAL3Ej_Cl$lSvF2&puqbjL{0J7~y0$g0sbu
z?d21(YVMg%x7qLRXsAX<3zWC4AjIRy25Ij+2#tuM`ric*3~>ot8=G6r&5h>f{W_|I
z*7u3%G4G@w54mipsg+uP&h^Lf(k{nBnX01oUGA8pAA%vdC#;o~o{96(4xQv3efCdz
za!hYO-uaVWNV*=6clurIz|Nog-PFq0_+g#CY2v3Q+@6o?+`-TE-|tLR#hu`&R794^
zfiXv0&tD&#htMm)8{inU@neUJ977KiFbkwtMi$?qAy^0<2~X-sWJrf=(0j-Tl7<Kl
zl^&0nF0vQL_D?^UA(VE>M6e9cksBf@rp>t9+uYi=K`fgsT1F)bAP?}T@;(NUEcCYt
zWs##T&$w6?bRpkWhO)@}c3J30tO<WFyNAc^kZgbpFN8ecEkia|flX^Xc8F%Q-#ve^
z_vUrS4^NIx<6M$Dka+2W#`Ll=#3e5tmyIhI<pK@I8hhX=p6u~1KJU?3my&IB^R8{C
zB-QG-p-8K51*SN^qS+vxqRO0riUs~08y#a@E~1?e<KCNnn$qEK(c#n5Fcyo%H-loQ
zNJT64)%lZ1sFgGW7>;d|7>QXC8=(+Khs^k{)=<Qiih}$VM>n5;nvh_kPAm9HT`f1K
zSVNQ3!T9@5%4V_LuFIR+M0v;Yotq&)+e$OL(WGw=lOe+I8Glwn5Fxj+q$Emd>?eXW
zNX(?uAe6-<&S>TlEiw<m55eX1P%marq$afKU^ZJOyA6d58znHTzK^)nU{oW+r478A
zk0CRIv{nHO;;NSzEV%jJIg@4Y$3UUl>g|Hd>U9SuKgf(%JYo=`xaXNo@nH~5M(gJT
zitX4@F&-d~OED0DcFAinir$ZjX%~LP=o|#GD+7pKYUf=NA-obf?8?Alml|i6G}+EU
z4D&&mEItownx)4!s_cwrlboRu-|q42s*;#TE(<!YMhd$!P}rqlH_HKp%|QseGC){h
zkFH+5Wq`rvAcI{Q7;J&zl>x!bQx^e(%|QfP7!d5<_Wg$oo;`EPg_c<uFtpIQ7!Z91
z3GB*1U<<6C0|0ZP?LvfQ7Fz4d$XW{wk1ve*NzULRkXpWEP@JSklVybiefd@-MjG2*
zC@JWVhvrwWK1rzCn-)!kPmu0I%$rDi_k5Bxk;tQ{_K*?jwt0y=YJid8r?FQCN{8_w
z=^8sn5v`CIzS^qo@u{=f+OFdL05wJY{w&NrBmpgpE$|{<y%AeAghoC%FVf;Fw%EWv
z-13adT#DICbmH(8K%Eqlkun_9dV@K$s#n?(hGJp6qzVaQpm6)8)F5-_|LA*CzI?n^
zmbavqO02R^mC3L5m8`5)rB>`gFP0R53lV?!_shcX{=O&r7KI=1kJz)L#GvhHBEI+)
zIoioD(8*Q8IL=7wN%J?<K#@*nqx~_AuN>!(AuJSmhBdiTZ2xCE_7{lF|4fg%#MbA7
z8E5%7*a5_Z&nMr0IXcGUqGjYGVqv*>$8TJ?H!j?->B7aaT*7}#uU+cAMblr-bGyI2
z6nQVULEZPa5mypu(%=@`Ld~T<g+zB5`97?Q76=Yv+`vi56X3LQIf?Tq9&$7X?J?M7
zOB`>^aXE^_RzNHDz!osO-Mr1hzG-y!o|&Vs%iEB+`G#ROg$LEfyTdtVqd__(iqqGc
z8gNlDHe5lsJTV9^EK8+QJ>a{QTcGQ7OSdiMz&`8>eA}U$!vH3`D$?+vEz@i3^xEmD
zVsmfVmYVAC*2h;Hc8tj<n1;0i9e3|sp1!No6ald%eFP)WSxjg{oNEGCfEIS5oy2s%
zz8B^7G#RC=jt=5;5oy$eBWxWeIe1ZdFLMxb-YRO#6q-AUPZgXlj4d|UF~+3Sl7v);
zO9P?i(28eeW9M=UY&~K#>&uX)&Ux%=s2s8M(m%y(edB>HNNA;VMf}K@lLy(cAB})D
zA>EGdLYFao`pGz<k&JrhZ0-Z>V6}8S9i=2$JF(@87OXp4>#J&<I_J1C4<hh{8-vjt
zdsGlB8^)6G0vRXvZ<iRq_#%p5S0xjbF}Y-m_qY!70>P-*o+B46Xc?=PldfK1ZjLmB
z+_!1(V=|dBNNk%Q%Ba%SG7mK*UXY50^an)`v>ncE$kqK?q~uprS@bI`v{f3AtEm+&
zG&5J=Du8(Yuy1a*A6GfIxG&oYCMWxo^FcB*GyFm~6F;dDNTf~kdN?yuq=?^C4M=`j
za6p{G&aMkCWC>1vW(05sQsfJ-XCJ@DjE_9BfE^ae%F7(VDE7CZ%#yy3^UuN(=o-UH
z91U=}-fiK5p8cYkZ^?6<vC+Dbi*MxOuO}B1g;+u?F19a~ikbUdw@^%M?86*^(nBvj
zb(nQA2Ga0K^Klr)i!3{)<rnA|Q*qBOzqgn!L=1K~8*NvZpuw3kVO5<y-EY8{g*{Ct
z%4z{916je<A!cAi$QssM&*0dS9g1VtO-HeM9NA_uZy}<+(GfB=#v~b6+}6!afPWSw
zw$O1h(iClIJ9V!W;z3@d2hOuoFMj2-R}g6vkq%pt7%hj1`esn#?CS`u2y3+V!_skk
zPurLKQ>h3@Y<T9!a9QTcojjiteuegljr&HI@=%@_R1zy`+80u#t*vi9u(4rn<M;K+
z7V9xaKl08nM`nO8m}TQW=A8r5o8~GsChkE*-Xa@Jh3MF0{uv@Q#L{)SWoYj0IqmCc
z{Y55D_UQL|kErR&n${cb@3SswSeuK8xA`qO@e8+$V{bKd8sTxCE{Dfb*q5cD7xcMg
zkTqXB;%r_DqEATBPY0|H@FFG%0wsE(nta*dYWw=iR#!WYg-ow@;#ai4R#{z-J|~@O
zc?0d2$+i-wH6nZ~(w)rrf!%hq6(C**N6L~6&7&%!t(FPF8`%u1?N;<O8=niy#}_vy
z-WyT&Yl^allq@6A>hZr^tTml{L5uGo?tNU2naG>kM464?JCBFp&wzo5#NeZSiz|3Q
zLPw?of>DNBrfex&k7!%Z;&VwCn5Kh%xH%>-Mh4}l#O!dmA0Id0JKH_SS>mT5C*uuC
zU*v)e@&kxa7#--~ulLlp%i6xF49dlnQNH8^M?25J(pAKhc;{dUA~VWzLcBfB;z4BU
zv`&JmyXojOLuDNIvdI^+Z8R_?Df!f~L6IFZIUG4u0SVbJ3%#fWZDg;Q-Wsi~aXj+K
z#w%$ilV5T3{a&Qjr^BZ&_d>yNyG_K%J9|4aJ$ephvIJD!G%X8lq~_yH?2E3SZce0!
z`esmMw#-NW^}qiQ_K8S_F<mi&Z~_|5+sv56MI(B;C&D3Yu+(lt<y)*91Fmx*2-j`d
zn`roK;)O;&d&1c~i7A9dQ|A6x>~dMLR|1u(%g(W!`A&39a~RVX{AZhvL`SiAfE(Y-
z&v^`;qjmfHI{p7PbJ32AVire;^A_kHx;kTW+{a_c>W9QhTkgsUadrH+{M%}@q9>jS
zkInqeM${F~_u87Q`tPH+E`I?<N`Q2!b$Vz$Gn7}h=Q8;;X2o))qbILG%zN)7p6sxu
z6#ms3PrHM(r(e>M7!*6-(;>hYtd+W#z)&C<Vh}sfzVKx_+@VVdkZS#le^}KT>rz-`
zZH?6{fhMtP21=f15#ykopc?uUn#+54(hjf@^vp`<Q}(Ib{ICE0|Lq9bCf+O&=#wNK
za>*bLOyj>emY<6x#ZpqKgXq>4vTZt&PC<<8q}GEMyjeue|A^kc**}P8sU=E4*jJ<f
ztVL1t+o+C#Ww~Z7??g`$qKkRN<NL>(_wSkqZ~prHb=`*1yZbxwb!TrNXEvooZofX?
z<bg=HP1<9D<B^V9t(N|P88?YX9c*lFZQt2_^3?yHZQOMh)DGxxE~e^6W+^Us0w_)s
zId!~{L`;X{3}yqq=P+byd7U}cbi~s%%9`0&E_m>K?1=&x7&XWTN^W$Q4lP?unCAfV
z>HxAsVb%?aQuzhz<sOwKGZUmC^#-&%g}MIWS&{Ed;zt(6g97%1VWzqeu9Ymgp##=A
zvo17bU8xHxV96v=@YNhbUnVmWiw-jfzTATh&YI$U)Ke;CmMZGVr1&S`d3Bsma&65T
z7Fd_(tB*h{q?BOWSoR*m?vKZh2U(Xoaid?c)gOuGa*hQ}m2@bgJVi>q#`)lUW_4|s
zzsO-UNuo~#;m9|{>B9VIx4U76_H#HkJ<~!rL<|S@;}5*)>yi0OoCzJ8|0LBqUSf;^
z?Zq*iO?RWCaYWRli$#D>qp-Nf#E%SqlPUg48d5Um1IldesbP(<2_j=Gu;#cv-tS$_
zvO_ycM2;<KAaXO$w$9_>pmUp!e+DX6AVmk|U;OLYDQ&koduoEU^}v;hKyXq~$(Udz
zG)zrvBG(wmW+YQUY;*NRgi+cV2MT}`%(Oh!5GRRY%&nv)te5sfYkf*ZN}DyNs>LL$
zY4BqpT-L<}V@EiOPt)VrAD~v(674E_0ZS%dU2QjJzhRBhF%1dPw%a;V@V!{Fb4{^L
zLDP)tp`feJ*9Ds!lUF=2E+M}Fb~JatzIkWk?z)0<HnXFqqd!oPW4Rqo?Nt6+B`Q3G
ze4orzk|V(Z1CNDBO-GuP5~rgTX_yonVw|Ra9I^Q1ldUhu<=&*0+^6V~)^B4)I(WIk
zRpBJjWhc4~?t8mI-*mJ7`A+ng{Wq^$(q4LWzVf5?(0TXf#q)R3zx{|mf9^y-uhxF^
zGwQ`je-=*Fbc^Dttz>lCqD5V~{oz#`DWtD=Up>EVUIJ?TAUj^+R6u&~-+nZW{M>Q%
z<)k{JcQ!c2c09<=5zT83P{fo$4pFT(15!Uznrv2h{r5@SeZ;#{2Cjcx`%QRnYQV3r
zJw3@XEoWOd#b+f!PXY!65q$O{vG^@$?R>JsTDZ~@+w7F8NqG_Oc&@=t&e(RdXI}BG
zcGM0YoC@4S@moIabgwuv*LrWF%FEG;P~XpE2wa!9LbI~9=2Vrj(g7!3NHrt3iNx^f
zR;H60)EyR4T$8kVnTQDIu52c5CU3DGLp(#|fux2L^+1q3NfIzBU-^f{WDYZr;eaXL
z7=zo`@vlXv;T2|LYmeoEp>5Wgz#3rT;{jKuG`^0LWC&eJYKYDN5#o5urLU=|Pt37~
zgU_One4=l3S!=p>_zD(6i2wAFZ^myA-|Nt<+M#b<a!&4sG|4|Jj^+H>Xc;q$MlW-U
zmart}w=>%urfM7G4Xu!A(nQZVD@4X@A2Bw%DA)=pG3?e8E@qPXT5f23%p$=Akla=5
z>FnVoB?BFv+r4Dr*<46vEmnheXW5<NAnzV_QP+$+4J`(y=XdQGtthL2&YeHoS)U|y
zpwP#_=xY3+c`+>kNHC2ba}KL<7l9NL8)czQ%ztY6HOD@jBD3vuVjye_p#U9!9JEk&
zIoWMTm%zK4!J|?=0Bb}OFYn1{r`C+#vRZ5Ql(b>a-!>CvhuCTAaesXfs19%Q^b~ac
z(s%Ljv*3VumyRB#pG_q`Ia1VAo{Z(J;KZ36QS5Aa*VN-`l=zO@Y%9VPA~ST%s~x8P
zt|5aPymDFuN0XD#f|~@n#gLd__a>~4;rvZgdfpiM_yn9~NCp?^G3YE7%EcYa>H#Sc
z;v?k#t*^V)!Y{m%{;4#F(4$`F#i#O(#`>6LJp<w~y=*9(*ORac=Kg!n7%i<xREyHL
z4H@)bQp{E}p?WaAqQ<Dot{-~iy@UYr4|=+f(j>1<!h|?~>gf>mVu$0J9GSLxl%6@@
zZ`>o%3avlG^UAZUR;2=xuy-#c51n0wbmF0h@cc=Jel9@JyKnbQkS+Z2MR*8?xT`8#
z8Xv|s;<D)Pq7{9^#U4krv({7qeiLgkGRcvrL4KcgRRTf$uFDot6B@+MlRO(`(_(P$
zMY~!{aLcMDNc^&zHq%{?-r}(Txf3}a!i16M!hy%!oU0+JU^mQ)O$N4@EDH5Yi%Cw-
zyb&izYNnyAtzqu|)e5f_s=XOT8S;DYHm`8P4M}t#k%O@++4Cc<WMfBWgiIcO%XaOq
zzL}BVr_2=zV=$!qq)80~DF1>iPD{Q*YS^kSHZ9FQVvG@PCoCy_fgXVuJf#6x6qTw4
zeeW)L@U5(@`Kq?cgAhHyv~&RK@hIwWLFO3m8_j_R7lCH2n7jSx(WB_LS;O0_ikd=K
z?Hm7M?=bTY7L%WoZVO!v(LGqHhT>s7-GAcu9<SW4v@}B_aZMrdN@`?NH&5AOu_87}
z!Q+-^wWFllf*F@#*OYp!7}OVCyd7^94XTT*zrR+3#=?#N93=>)43@#MU~{ZxJ^YRH
z##OEJN#A9?PrkiS_X{?a6hCjQMoqgpqBlqM*MCIE9A{Kx0a{kM=##KI<b!C}vZi0~
z9+^K7vrinqFn=@HP_3UF$%(bcwK02A8|6dV2+rr~4v*HpHj#6ARCfnc&SkyE57NPO
z=h72|c4|hHxwY82#6NQ??Rm6e87uY5lUQH1@2Zvek#`FD5iz42*5&!{$}jM7Z2QNt
z=F4HaR*z<nq&t|8g2l2wOHVkO<+WJ&aLP`|R`Zn!2N#^z;1>joKEk1B^{2yevGQXb
zL#ywE`}*^0_?9417LR^}4IBQRCc>&1>&qqhuA|xd&)zioJm2y|bers(@I0YGN!eQM
z$+>|KZaB5JunMtF=9$-wWSxepJ$pY=u5t}y?YG$(y_|dP%M*o^Jsg{KB-bXoPBqxW
z_Ne(Bsb91~!Y56PqgEVtv65+#4Qyp!hSG3D;M#8~qDO*WN+3Mk;J%5+<o|GL8%uJ#
zrx~J9PGS!9@_vkB6s#`11?6@Cg(9((6EENrEq$n38F^%8ErO7egUnmC*mc;n71r(4
zc1lsgx~1ZnL1acwYZwjK003N(&|Sf9{<BP7`I5z!qnK0^iXW>jp|1=A_xh~=Ow>y>
zSra0{K9IKc2hj<KkLvEd`wt#&wA{yf)#KtY!lmf;=oD|*$JKuYosh##NOC@n2U88>
z=E6LH)gF_IIr*b_BgH_s;`t0UNhN1h-Zayx*E_30E1qkzytZ~#8R-r_cF!C=_inW+
zRx%!NbWg&k%P9D|7b~3+Kf{KQDN&TkDqD2C?V(H3O~03rH})J))XkhuU}pKp?yHxY
zkIJYMKrtP~<KiTP#o1Zf?R?nGB3|K!r4>(K?jbBc8#Qh0(W!M*TGr(9KjSX7*D!%H
z@9}cQ`K|ABggCuf_U5gKP8_S>Kk>6L%R3<lM&rC#0k66XjtsCBN8IjXwFz;>w5exz
zGnInpg{jyGJnQIn)JL^<Igf?umgpFQ-kCEAp6o!(Aa*t6QN9F<Cff+kQsiH1553G-
zr7#p#)!E-hQtQNzq~dUVM`y5!qM9;=x8cT1M2%{6qw(2ShK0B7uiS!M@1PAeYR0y#
z>d<UWM<a_4+4*15`hzzAB28<dFE6fCeq7Z8sBziIYWyL@>>Quti^1LqLDZ{sba*js
z#ILB)9I!&b|37O%aQjw3`RLX;!<V%$Xbv`(&aREr?>J7C=s5IL0}pGlL5sQ+DXRb7
zyjx#|?Pc0f|16EIvrqhsLx^5r1;oQL#*ez9677EyOUSkyK)1&8y$PEe;!cod_nirE
zMv3@GQrJu5a}N^7hk}(bKL)azvl5accqp5B^)1(LR&7r97zj2BW%aq|Xm<5%*cu|=
z-H<O>!Of<52eGU2j=zwmWer+E#MUAkv(=Or(CEzOKzjUEHp5n?FtTy2_94+IPPS|w
z7SnD4p%`f+IbD?jl8L&5?08)XT<B4vWl;!9m2GBvh<+cPOzD$})E;EnSW$soxDK}o
zJDH+?OKIyQh{oQQaBTCF05ry8yyl|H;&44QR98CjThM@R^MHvH#`?U<Mu<aT({vt>
zEH{N?&K5B&k|cPb$~j8ZM1wjP_E6`<;VV4R@91mJW)&xNNOWLDopOw}Z~=GA7)Qv(
zlX?M~60Ri211F6-V5GB44%a=HnVWdfKU8K-IF@UutH*@Kjsy-U-eR?3JC`f-v|PfW
z`DOz8j`nd%<1_c8;-22Q-}azy9c%IKs%ywzG~8S-D50bLAT?1SCy7XshD<nLMOdOc
za=|GY%TfFb#&ED-LkZ)~7Z2$;6FuBM9+}6@!<~lfT>P5h7T^cHqWghNCAYg)JKVj}
zb!Xp9Y*<t=Eug(I$Dv0r%>5uae3A~F+{R9(l|ounKWo2X5iYFk2WhwmL2jT?861P;
z#~TbiZs}fgf$owP;DnSz$)O8F*tS%ID%QpFrGGLA9Fs*?b7S6%lfu13^VP3KPm-ig
zc!d$#U{5+LOKd`sTnDEl*nKi_Y^`W_&J(Pr$nFlU|CX+(COXM;38yRM$@dZ`6J{xd
zLG>;bm4qi>J+mwLeoxobMS7e}yEcHq%dleKHZSN7010KPd)_S6U8ZwcJd|wn&c^n-
zuAQ%4DSI`G(_E45T-9(g8jjn@>mSnAB16)VXmL9jn@Ft|sVyH~ashAQnN{Q83odg*
zV{h`I<!b%37$YIsmdOZD2`5Yrvwl2~%tzB2w^2xDj$>^ys0oSdc0_FvXF2!A<84oH
z;)NR&i9HoDgHX>zw5VycbTf8*BeYmtb!FS$%4+{+IAVa5?<_hEVqhQD*Qe`-9Ig+~
z+u<`>Lcp0(AJxU^WMnn@K_AoAdsJ7{MZI5=-J^rlNA;)tQQdsn+}hUP)W+D3^W&lo
zv*n{7>mQTzO;|LUpKjJ05x&`?Z|-dUtZ$vu6w)5?@#)aMc9dl(q)_jjWNA;{laE{V
z@91+k&iQAtEAHZF`S_&%9W}e^+)_o&ce&_XysN>-#~c%Njqnl~_3AAxHjV!ZtGx&N
z*5#{B4=ujjViT@j?_FB%zZ4)xKO#MJ(_d{YHr6@{7yCKZ+Pp(+J%6cbrROa)+JpeX
zYc1)%hrwoEcJcM$qRCIM25GDady$_d{7J<!>Ab*I#7lCoT_OatHUAi1Is|#PiDwrY
zfGNYLmPQ&!ID{4xL96mO<}EUTq(_Hv7lJkGlMKtsY_NtUi^e@6aX}`p!zK>-G$wFl
zIcJr6oFol?reV&-<X}n^YsZ6EBUSi!+q)~_MY-)9Ah&HV`sHfvvT@0s`l5r9F6@Xr
zGNP-w1{QPXau@4{eQNe`{X*BaIFGNNB3(+3>|&$x3wubv!XRXEbp)yod{aW)Wou6$
zznf%_G`HX#4K0id(N6H8!Z-R^k8h(xxw}l=_i|H3pa@c3MKY9dE2Ag?Hn}3z)>%|x
z*;1|B$O{@FWTH6zdf{Q56;cnS_NP`*gQ8i^jg{PwQZ_8{yPl>nYI~;gR5v+^2S+s9
zmq<XhvGdyZ0yYU}Z!8%mtR<3d6EICk?R0jtNs0)A;?-;l7tOKmDkVG90Y}&IafrLv
zT-UNnd%?~|hggm84w0a3aSFaO2{gYw)Vvf~hWs+z3t`pw9pHg4|Lsf6zHfszV-qY4
z8<txavpnEH>(L-B1ZxEekyr_Yqu7k4#S(V3ypt<&-}j95nj74Tp6WXDj;N{GVInH_
zPL=7p6>%~V)T`ULIiqCWuxdteayTXu?P-`9tL$DMc7?D4?BPi#o^z)520#qS;HU}n
zFH7{|-zZ9{SZzGi#zO%*gWWyOppWdj%g~kAMu%LVO@HNq?7!jmhiTCxRhKiR#p76k
z6~GyDo{I%=NpU~<ZIBreq&V2D`7l{Nup5zHlb=hbk<y06RkE!IcNj&XsbVDZjFiaQ
z{34BCjGgkF!R@zTNa1fP!nJ;LVLZ`qeq$o{=_3baux06Ild5n423~lUhPl`8p@H|H
zTSzk0tj+o~aiNl&I9;4@BD)V7CX}vLdv8@Uhm>M6Uc@bFtOR`2*`N_p%V=fF=u?tL
zLdSbm@O@6MFb?NC4GEDQi;}j(3*ixfoy)&B>Hn<E!N@4O>k5SL6`=nhcX~t{^6$0X
zL6J3(nmzz|Wg4rAO#$Ywh5QZ6fnEjTgNNfng`?+rp4m`lz#@z1QNWarj?x~BzRFgS
z7npI3Hdho)@UFUm>|pZg2&5+)1aN4%tE(7QfWeLe04_Lc6E`lOVbTJ=DhVWq&x1#+
z(B3xM++5o{<NGtg4Ao-!G|U1vi&0WM)OHvhmXe069J2S@=ApJc6x1^a0Xyc`el=(C
zLX<U{Luvf1)tI8FfQ0TV8FW@O$V{n3qM=^rU$X86SYh7KSrvw#K|QcUzjCBVQyVWy
zIYmS^DYuT2-*1lx@u+C)ws{T!2NN`q7n}5A(=wh_VtNTe8sLE(C1>cth3X{!;l0|%
zd!TLnNK;#(ZNUhspVw0ThR(Uo*w;d{?0I9q42P5y;z~wps~DTbrIQqN3Hm`phgio5
z#9FiZNwS|-c}^a-r7v}Kdc)>7h`kW`?=?-fI!+5{rlvY@$F5ukSE%;~=fKL5E5S5V
z-RGqvZ6oS;xP+=p*FM~Tb@28oIoY?0;bgpOPV!8KH)^4pO3zHr?GrWu!d!xxcds-I
zGeKE8!<&m$6hz(U1v>Y*K`+Rg(KXS$M@}#rO-i0MT}Q2g%Dd+RY22b38Y0xx6brF=
zRHJJ-dP-81e1%DL7Si2}Qh&eFS=8g_NsR_4l9*sWnK@0MM;y@u$QyOT3tpwoy*Om_
z2G&KZ?(;pZ0}RK%7pUN$GyA^coh7H)xLB?&d3Tj7?`lj?MR=4<uAwtA$VK9SVGs(U
z(5LAjIhN=xb!S=$Us&;<e%owDFVoS-B5F1t*J_8v#zl7c&VgSoz}odik>)OVGn8BJ
z-FdhUZHSA|s$H~J(%g0;!P*K}u_EBe!|<XzzZ`@Yzeo)bl_>*wG2t<7B_nF;V>%`^
zC~jr>@jCum-$!Ii(tbsRynT=p-#Mbw`!>%eSuaCTZ23LH?~(aEa=)imAjwC`#1-*o
zu>_iCo{ebV8EJBY*Y)VoJ$Ri>)EUM@pS^mDSXv4eg9b1qRY4Lb^(1lFBTS~BDQ6I2
zOGMKGWm=AKi(nlKcs^$KIk1;Yp>6J1tW0#j7)~aQ{Aw7P0f727z-2CgiFw`dn6C6-
z2?LYYjeiJg4$duOB&GtqWXho6`17GhE1c3SkLRwQpfscGE36{um6r_a27XST9Gp-!
zPaC6934{N6^EB1>%6(SV`n#4sZ}3EK@I=2Jo+wV~GFYO@HZH~y<ty;zFhob$+0h{W
zm@FrRxVOEg%HoLmJ}d=p-<4wEBU3uiFE$m_x8y7DU`4HoL?HIz;*|1{g*OsixSbNH
z^%cg%J3I^XuW*`&262i`NjaSTQX}mx+a1#hpUWS|iq`4#dB21!J66RaeVriNcHtJ2
z9_(_>Dd#g=@%qAo*UQzuUKWA7LaJC)rufV<iWdqd>Mm(JtcQS&+8r`(74NyrD(JeG
zpGy2<^f=npX51$fZSeo}#sS_g&?arKm`>&J^tp1;o#ltOkDAx0Xz)0Cx4#>q&d=L8
z&C5lH8MMV8-JIbGxJ%XOzU1&+t=@}==bkH9n!3{PKA2{T#jeJzOjtcU`y6A1g@vZC
zFueD+Ags4~@@3`lY(e%*hG(CfUA(Id@0l$$yx8hV5w%ip6~oi#Dh9XY@E%8pEdQEs
zzQcLsP6}^$FwxBPRxvz&jyG1Eu82RU@2)z$%FTTTGf`zd?i&IAf0O`!CHdN(u4RO5
zD`U-wzCTQfJT52q>Z_)avc$_@mPAYbPVAXpq3m&dZtK|`rK5P%L*89sinALPccv<f
zbo(o)$#T4SO%@*Wud5=<*Zub^s0Z_P|1DLG<^`vZn!DA9br^?8Z`gEf!SSOlE%5*w
z@)0uX5F6AJ<kP1PJ^=-46fS#`jZMxJoZj~7w_I63;vhlem_2H}0nx`yaWIUTe%z;v
z)6G8lPn)m&M_V_n@5XlZ#cWp>+LeTZd_l_+Fddd;ullNKq|9FVORqu=|6RpZ>4NsO
zYOG(7Cg7yf!`J4dGK$6cs7%-JQHf10HBkQrx$7^+#jegRbXA_k#R(URiJGJ~8HQ2d
zFRf9=pZ8sv;2WxZLzTa#M?uc*GU^V$dAV0XI{1RrU)OIr`fp!$4V8I-e(iAq{U#_?
zM)!Qw)D8TGE)BO74-mG%UIWf1i1U#_e6ZDa6oT6JPMm}*nud7~`zG}C8ykAMODBuT
z`ks!LDXlGSX4>;pF6M_6cbgkc0a<h8{<aAMi)Tj{I4f?idI<^~<}@+5F4Wm{m?%J&
zl;J?;!nw(bHpvvX=O$CY0=PcNj?>ZYayEtOpYtee@V}&_U%YLrW+EiFYa%Y7e;OPN
zrI|8z?PqgjQrM|%brXKtu2AXe%0q*LxN12d(l-zr=#`W{&~%u$Sur`zMLp+$7#HD|
zd`fy#x@kX5lROpd7dr+Y!y-?Pr-L}3ZK}m#g!}37s5u>TXrI1*yQt1_38qlUd*uw5
z=&_Wrro+j*0v@uD_|b2v`wLcMoh##^>Y>J(GQ<NXL6B~BXzQi`%(HwL7id<gOjD^0
zhzO}--}qOoVTs_o&p~wpoRC8kl58GJ+Uu?8EhnFhbu)e#)cL^bb9QFWp42s9kR$E~
zNcO=g<?IAEe+CYRG=&5*UzTLRBB8<gaXiv0U|Oip51Z!)V{6B5pcd3XZnw2<+gJ)o
zFXKpg-Wl(p+A#q%ljFBvXd0-Id$>LVwIb0coD=5R^OJs%ugM8ac1-6|c7`X%lR_sD
zo@{ZWcQ3(Ar83>9Kh98PN-_e>i9qQrMJz#+US*M*9;3!grdQ{!QoDVP#Ok<gEp4Df
zL+QAbChUHzre$*Ya+~4doh=anv0);Q)6!gCv!vVHr2l8(2R*CSZlQ^`PS7smbA>=t
z<zJEa#M02w0(vZYnzSXgx(|@HB=NT6Y=Be)slCW?W;&6MmZb9DKj$hB!19wmh8Cft
zR>Viiz!j6|sI5^VJ++~r#ni93ne<}3nNDQuxm0GN$oCqlS~JqAO&L%sVeXqmQ@deE
zXC@<AsU*nntlQmaV?!EMt&=Bm=R2+FL!t@FOjgk_(BVz`45zU{t~0nB4yvn5{iJ+I
zYiIFjQqHrGj1G+~C?Ttvc{WJ7<UIId+8w47p@$fq3Lc<FovWmy*wL*rO#ACEpX#`_
z2Jocdw~LPc79IV{G{d#Er!HU8($}@M$hEF_G|MmUV5`~B<FgP+3?Qd*-aBD~TE`HP
zj(_umWGO6sFtY{w-lltve!{*vwZtc$0ig@%nx8p}yutc1qqt+2c(%q(5=_+3KV^-i
zC%<!E+#Gd=qvTD!v%tJ@7N1)%C_pQ@3Y)0;g+w@e8-kTC8hBh1n-vDvyg_7w(X*7`
z*=qnyCcHF`dmovEPdvNsC~J{c*<b%;A<5Q<S-(Z2l6*fiB~JPC5UKuH`weZ*!f5Sa
zcRRK<2CxDqxOt{0$i{_91~h7%S#f43oI|3yk&51$C&;sOqpVW3u9TH#258c|j4&U_
zm<%p_s9=qZLtuQurcTE<!8!HJUIr7-F!&~;K^2;!r!T-JVa5pHo<mpd{W;_3C9Epb
zc4kP7OPsELUvzc*5Kx@L2KGoPNf2z_L&n7}<C{)Sd<8Jtyc@krM<ibtX0)Q%HdDOY
zoXEQ{Pi)?84&})!_R@^r0$*_}dTJ|ju_cI}ys%Gzk2SZrGh9z6d4<stzLZCc4>jRD
zdiQdl<$q0{7Su=%rT@g5>Of5x(!Je_Fz}*@0)6=awjyn*DJ}U4m#Z^sdQOuW^t(&y
z>Go~g)Uziun!0}PD+KzUZ?l!SKh30mo$dearIj^jY__(muWh!q16j;+Yv(;DUhc|a
za@P=rAB4nRITG#~jJrGn1j9(eqG#8AZND`9#6M)39x@w@VxI}@zP7PTgNwWoJPRU;
zE*QlkBe*D@NaBaGaWWH^!(SR4$Li@XyaxMH==;L>ubIf8_kOU~MWYB}`R9yaPIQ-x
z--}(=g&o0Lqw4+=BS2yA*)<SV_Od;=AfLg#c4n&VsZlmacDivq+&CV-iaXdI&oAf`
zI88q-Cui`B(m+|dpsz}SR`iX^6`9mv6XOXT`EEKu7$S;w$3+TwGPR;8(6fUh)pBZ8
zm+Ma3{1{FZ6O<J~4q>UVDO>Eb+{;=pNTB_`T<BP4XX@rcIkc(}Er^?zZLAPE#J1?Y
zIZv&mHXQbbZ3xoHs(?rdV!dtB%+#6EATT3kEgoo9yx7eSavXKqaIfhkb+tWodRt!@
zmgDEfHt6*D8AwXO&1=Dl0}WIaQjaX#Cry4e+uKH}g|nsWsdMgpuprl3ra`goxhg~Y
zPq2zHLV>11F=Ob$&J-puLixhRVPVF+Fc&YsDLd~eQo8=XJ$ybKPtLXfi(5(XWK*8h
z*WZl1(c8c!51^Vhh|2<tNy|ccHFViww=z`(H8zP&-SmH2<$<;k@JiUfajsz%ofit8
zVc)e$-&$beanyNDn|vUDiD4wOz&7Hx7gLW*aqs*`$JR@vZ9w!E?*lgyJ>#b@ULZMO
zO__*UUwNIc+{JJ6YfXMoUzYMBoTZ!(W$^I?fXVqexXv+_iReVm7HfBZ1jtEC07E6m
zQ4#SR#ZdW1*lHlUfW}nba+LERiHF5fq;n!~-Xgsj)qb+0i8NLsqorRR?cw)ZL-TW>
zu#sjJcQZAVn)n(mQ($y8b!fj~Ye2Mp@2;Q}=VGn}GvksmIFr+K&<}m##%o$0yYD>R
z0sce8?AF(<L1Sj#Gl2GV6V&`&D?b9$UI@hO&}TT75Z3|TD^R)HOxxK84tQO*F2@Yy
zUxMTd@sMnvx~;(GD`Vq%)lSmUX$H4U+3j3vOeWC4%vpG<RY3V8EC2*F)Roa!w6<0%
ze6_Zwjw!#8Ifq^@Q=opv5bY3Zj2nl<eB#04H4Y8Bb%7dLmnqg^Apz<ee#;Y6C8X|=
z_tK(xP<_$9!)ue3zu;nEFPP#P&n>6;ao4|g+&71^U|c6Aw828VIx6KVs;P&8OM}aD
z(8<Px={8^?X5SH9mmXxJnF11rreMZ*D+*#{zJN`NNz1AcT~R4!q<z-$KlPSh(A}2a
z$VP@5GVCAEPG)A@kZx$~mz5^*-<j-9J!0&(mlD+#yi!r@=M=}_%1}Mu53U^2pe4!y
zwmvXpad++dl*v?$YH8sk^#vLar~_7%R#aDsUH~WO+|_c3B)O=@RokNuchS}^+6v;-
z;YuTPuX7mm>8Jc$s=UkUJ7THN*H_tvc-xei$OQgx0o*_Co}t(uuB(l_nH@EATYnj{
zP~5aUMh=EKD(09>NaTSxVW*7#cP+TKz>|eON$SDHwOH{L+HYfl{Vy@h(yOxW7A-p-
zoogl6^>wi+cX27$9h@DfJ-@_j^eC!N;^Lz%b=F4}2Dpx)N}m6gi)m6bE2c2vs#yD_
zCN_3QH&M}<1dUW1Q%}tIS+@kE%kS)qKez>86-7uq$cVPWhr?7+Ac;-2Q;iRJ!j(II
zbj32g7kF8`<#lkyI;R~rUAeEd-p99TBl@==?P~w*6(0S!ANAwUT)D<y8z)6N)31Or
z;x+p8b4NRpnw0pjMe}u4<n)TAT*7;hokLKzkqBM|hDEC3%(BCOCl)4!Mk}i1$ktih
zFD{ky)QR(T8CqR+BFQc=`c&!G`kYiSAd@ps6O)#F6({Lm9{XVKr@r7Dv#Aw4Hr2Wy
zzh#m^#OZs~f4A6`Q6+_G1(>8Hpw;FTBuW+IQkn_qeE?-@X1B*ee`*~1{!#Q4B(?(u
zpyuuXIpbJEih`Yk#+#}fh)0MaIgF<h52$O*c6}zrLbXT?$M<{BjM8dGV&KNiy12Vj
z^9Ebf_sufcB5+ohtJ(Ta@+6yWwJ)~qqSTWEarP@h*=ts%Ea1O1?3xle(|krPrEpJ;
z<MTll_nnzQWe2#%sO^9d8cbE=#QspKZF}jl6G^sIx2d{Dpp)qSm1+d?M1KV}0?XGc
z3(Sf^O+b0{S5p&ERxqpyD1z3-rRU^`$#MN3S`ct%>8?-^P?qm{s{u-zOP2z4ak&%7
zM<oSeMj96h>6248=mYL26E->I1~s`A9kP9F!IFX`X`dCJQ&^C52)|xYL9yHg_T0E1
zk5wt*rTHIFcTh?5)$0z*G4|+0nX=fdQzK|Z>g+Qrxs^v*2DI$D?p^_=G-?g&GmA5S
z4#U-4IZ}*r!5$JR)L3&3nzUu{Rsk-Tf~g1W-W#6)w|^g>#;UpjTif}*g4c{lQG-fR
zPx~mrw0VE~;oUnA?{43HuyvoybMP|MjozV;Z9UxCyt~zm`#)^n-P}5O_oDx|;irQi
z`p2WAgI%raQRk)GLA?P|Ng4I|E#n1qaSv`9_XSV<DW2GrhHtsN&68|G$7u4n71=`@
zB|TbP`gxF{O!}bzTNxij2Q*?9gTEYP#EJRqWYm1WFJB^%XOa@1+ldYX1#5wU)Eo9$
z+usQ1&i$ZYB>lRtrI{6bu(OeL<A-<dZ#5rm_cxn&wjL(UZoJiNZuYhwKHTp2;|F*8
zb*G`(^_v+`Jyfn5rMc+%L?;K*kQ-vvvhWX_L6V>27yoNxamM$r;-0q%=`i^x&6W3e
zn9#1q>#viu_CJX3*R9U?9WQ%M$9v57f$}N3(wbbn9(tf?SjB{nJ2$_vb+@^()!e*u
zuz7E1bBm5_>%rao_qHGYFF6kymi;~-;Bgx{HSET%Ngl(TE=(kEjgrYa^`5Wa-FR@c
zai@Q`+1=<T%{%w*ZPKT0`t#vNw|np5=4LOszb>uElS$k=;c%$g1E(R6eCEcF|3s`3
zbx)HaHt*4Y@>nnw2AF9TAI~-S_LUs5|E%-F9Lz#b>z`?#K5zVIz3K#`gNrZIpVr5Z
z%R8s04FuJ=y#o#LPPic)4|neDe@yr9y!*>!^Z3mVKb*aLpZuf$*T0-T+4zs_<KXY#
z{KuW{%ZJV3$=jFRV)M^{hmQL#TB6gfx_^$T{ZZ_l72CriOCPpmN~$e3*#B5=utZS7
znfI=xVL8RVa$3GKpVPx1l|<4(Av%Bm?!CJY?%cog-~sns`&sm7mM_!?^gpU-YDpoV
zDWAGzB~+Bt$PkcLD)m?dRZ!gwW?XSBK6%bOR+U|*Ma&i5He1o!+FnJO)U~ypXg3tA
zuUaNmb<``ANk!(`+S(HmVSA;46oPp@NJk&Ng33rC4J&(cwvk$FyoRk=N^2Tjp&V;v
z%~N$qE?)Cg4ei?xx9_g|wNA^HbzAjROzVFCvMis`^S$-UdixqRR>LE9VU5*^_`ff%
zu_|8iFHv6Ab8K8(;EtzMDsYEky=K3Jl|#ZRcKV~lZ2Y$_=NT@g_*Hsw-fxqVu4ST1
z0<#m)=g3FCj1)>r2igcN$v~s=*H1~U^1>z%r^EU(ZJj4am*lOm`Cx#%`tnn1snh^J
z_irMP`NE><51kjSG*gkSus<|;Sg2TA)uJZtFk^4st9k<E+Jois|Fv2zc&N}tga>CH
z`YvqoXZNS*4&NC`sU&fTu+f1FDDW};+`$2;)t2yR$-0NGtg;Ks6uPhPvH^*m1t&3r
zRFaVqAQA~DOkDvRHrwbeC7sYegCy0g-qfD`wbh=zZqKsy_|B~g3#uLMURu%g5`xbz
zn%!$7_fq3@k&!>SmXSZX=8^wutFwwIQmW1hwdO;f`kwp6>bK6u!+lQuRvQBMIrUp3
zSHD%-tE%66`->NFE!S?1zE15{S%OPzw~DA7q*RxRwhjxCI!*NX-1@D~>12zyN>Lhp
zv5f?m71-ZpY&-)e;|~CbQwsP@M$KvA1bdP8jrnceM0;}rqKi&nKgrITlZ+GJ(vkR4
zn))olABso)Y%)qFtIQ+4`)QzfOvseJv)Xc7#gX09QWmtI(%hiQe^kPtmh+=*I_d{m
z4HswM8r^1CsCIMr!Il&*js4Q4#$RY_n4YGwnPyYpRaaddgtQ2&n!egEMe5M&X2$gy
zj#Oi6oM=TemMumm?^q-)!y7q|DjjKU)K_c<Dn4k0u}Ht(c?grGT^!Pc9<_y2@i5C!
zD>{CNq9kuaa3Z>i3p7E^RF$@MSZyAb^jQD1k!D}H7Q`U=XBL9R&~1&KVqrwhDt6zo
z--I96fHg1=4N-@GtFV!5{17ZE$<u6*L0j3_xc}gpI1MK0WRT3h%3n+CQoo@n8%9ki
z#(_3qDW9&Z6_L$@`_r!JY-?j{ySZ_<xpg<%yuWjo{_pP0<9kDJH)mrv>)`HGKN)7N
z_@Bh2Xg><#7X@2?Q@mKLzuJGgxz&DC(2BP=Hnv*dkB@C1D!Z2Fj1_M<qalghKZ^oY
zRrhozQubF;0d?KPf6*tB{h*Yd2W3%bt!KYrfz+8G^qW$tH>Fbl$CgSh-G;APG<7!e
z|CcPE8nXSH@~JoFQ@?EaRCvy4c@cm{!U|5UFswRMON11qLKyvMGT#J7V<c%duM3$}
zL`fl;S+6(E^>8_zlJO7WTocclC-lap!{1d!`w4ab4T425cJ=raD&w<qkIOt90+k0S
zWY)LzRNDdAx=IK6l;#Py&fZbQZG+uztW^Z*D1-XR{aESEHkFLPHW5TM(UlsKpo67?
ziwe9?(fu+WAe#=n_({{EAr-8VNdgMXdd=urS}<dt?OT3_{u($CFb36{4YHXWjnZgp
z>g%G%F<hovK$J7r6UqtJDDWj(_i8jm&~`VeeorYD^bN*MGaK!~<NluHhSs4q`v0U_
z7JeJI3sTO<W76kU<Q4!(8S&n;h%U@9p7c)E)}XN3e5=&}WI&t09lj`)8CVV4u40;N
z9O^Da<!JXAXXn04j%l%UQ`KgOPS69+60dcb5r)_35#!jC<}f%lDZ6(%v?qK0PAN2<
zS1}%?M+r8AgX460^!(re_LBh-YD90>^sr)o&2ouA?NXd@SIioN+)3DT(2lWRaoCs^
z&qStlP79!LlhzdL|DF~WU_--Z3j5C9kv}g9gTM>SEu1Y?9&cESZ|C6o?yLRw{_}T#
z-+TJJO}%tzgHF>t8!<q;i51n=H{I?;orNM^I?;+wWK|k?{_6Se0xy$d7_WD<&$qiz
z7wL~ksd?r7e)Ix_R_3ts;_1`XatrC`D34pmy<V#-gSIoLnzc9|7p-P3xxH7cW_=ym
zSl3YZ`XCu#BEuz<n$63up;AJ#`P$E9mT%aeP*H1ANQk*ylAGC&PBSh&3$D6nOVO6`
zsO%WNG8~m1$3kdSc0s~Q0yB-&7px2Y-@8`Nf1iH~RowpXU3chzKm{d8DXuO?xrWjk
z6VzmHJ46-ZsUfPX1-Ffjoyda)@pNcANw*bJ)fP%Fc^Iu64o)NahRfO3Ma>wgV8Tyz
z<Gh9XOZxy70!5a%E7jHPtF7oxOZ<?20$hE4l$=qU^}t_%By7%FzYB$meN;hPz{w_B
zpHE$=+p$fcX3<MR=h1^HblHmTAq!p;&RO#ca!yTBl}c}outy0@QbVSQ%-#&$Hr-T%
zx`F@ts&z*!HCUqZh@k|R)*i8)d^x1CgY-C0mjukwS4|^jxstyO5y#{e;710vNA|ZN
zHIL~{DEC>HG3yIDGO&Uey^BpXr36iekdfNwv8Yi=|2SdTBn`X}-8+RFT>#~iek=N4
zNuEUs>KDN9uStioZUb@_SMEkHo~&{{v>G_^gy(+=hX`AmJ8FEyB$#o3+jBDOwJS^|
z6uwP@DTTxC<s|Vyn5d2h=`cm+xJ8&c(^SSoLCx<PTSIEF$ZtVnB?_@^sTL-pRr?Oz
z92i)?iYz^7%k<hhy>>dPI7yxzUmkDj<Esrj#^h6PKnrndBNseRiswPG{4y=PAW+|f
zMHk*fiUJ7nw$15`>280Y<zj&wr3~qfkXFu^6pNJFeAw0-OW@fV$B+mV`F2HAw3rM{
z{XyZSt_~s=RMX^f5F5<Goi*GW`e!V#X>N9XF&fV&<uJn;#Lt-DZIq6Uuph+vF%dK*
z4*^I+lPhgi)jo_qX?M!8;|WLUje2s+XjP!f@%6ne*iWLL6%GYQi#0<@8=YfSy*rIa
z8H1Y#+Pxi?IPeriAthf?J@m%LLHZZt6mJKZ4i-CGPYy%hPk`>jwVsv!fu1_LIQtt3
zhkr$#4UiRx73n9MJ0JVbB<;65(TZzcSZQZcBt864*urd>OeJ9QWr)f6Su9@FYU(#v
zR#Sh9+-0H0#g%;B`kAMEU806nKKNOx+ZWUOc!u3+?<4K0ue1QOcia51c<FZK$)@!9
zg=cW4#n)bvtoF<ZA$$@)Zx6*5TAtzVhkf&lMKiXO{weA}7U+~__<DVJ>48MA)QT@H
zw+t=HGl1jIl=m4Ws8T%<i6fLtD&eB{_g_jk-Hetx9tmD_gs+c;eT_7lro3|jQu1fb
zkUCpGc)1^G5GY@5bgnb~oINCN@s^=U%cs=VGpZQRg{O2*A+icNl4a9Xei=*JnQXU|
zS>h;n7<sI7G&r~4x^vFxncvV)X?EER<*5G^H7`r2)T8!a{vPhS&i0-)su{$Rdq~{+
zWPfr#NM=qcejxz_KM~tAkfy=eyuMRv?;$tnE+QP6(P^4brtv`CSvsco?_L%Q%~1Gb
z)gC&|`3vl!)=zckW_BNip<i_mZ)_qrHj%Gai*<XcI;`85*I?cL0u~S?63kKP9bzUB
z*(?|v2GTID?LpRMzVaf=j%oR&YUI8e1pGkj+0tw<72DFI2=C`4R$t%M<(%#8>3#$0
z3>?K~N_cUdAkL^V_6V?a*7bB=g~WItrKaXmHyr`Rk{Ku?qtCN!0C$20H9kpuRbe}u
z2-Yb`ZKUI5v{~BFcIsZ^2>qx&uLroy;ANj{Te*T6ArU2`745NMV3=sM1*7(U6(a$i
zF>668AF=lw7J6}PX~RX~m6m0$uFvy1;a6yHkal40S5W+8MfO*7nYCG5C2((5Y)8f>
z6`}wa33$Q8OS71Jy1rYPZ$#44U>eX&40S4m#vbj@Fk?W+UzeMO=H8yuzK+&kWMWT@
zey?|jnl3Jg%B5q@@#SrPOHTR1?c&&56Kr;TJXp>GD{pEOW&10>^PKwl(+4F-2x`PN
zxfsniJDQxu`K-g9TmIVKdLG1Lu6mwkb<wCf{`l+j#xLM6zCLg9Tz{tXWkxgJ%ohwE
zXwL+8zvWH_-8b+ExF(t3*U=Q00;u1}mN&BHS1Gq6cmK;dz}}DP)#79+`a3o6+Ga{L
zSif~tSl{sJF#KCdK7b5?UBbo!y&Ej+9c^UcyT;hl1s0iTmH~+noTh8Q6d-h%q0AWQ
zor#HLBjQbbUk_hpqvH%U2V3hyeC&4x2T_=>@y7K1@@|a?MkFH`G;|6K>z5CC9OBmU
zgds`63(7EB^8QM?y@;;2&Coo`{w<xf+sw&We3KLxGhRUy2233HT(Lc#tI4cE+3<g9
z*<qz2TU%!7R(C?HyHoiWvc6y4_P(5LJusYK(SUw+^Z9a&PD%}SXP1cgkdB*IbC9q1
zB32u|Q5=&@4VYw_SjB)nZbePp@}xcXe)M+FmCq0+JhS9w^BJy7g^_oTiT59d_KjVU
zV$XCW5$$;Kh-15Z5IASd$Fr6%%((~#8RvO?E{BLe(bV-S8@+MKm3&SDZ`hQ{)IsuU
zOl+V7`<(z0cYp}d;XyJM@X9FR*!5_}<sl8K0rIoA`&;VFNB)$Dt4bA?tfT<2C=Jq`
zNtFCDIYTq2;@<ZChcnxK;UEn?kcYTy`ri&3>RfcY9qDzw>rP<1!&18*;a+MbpUS4v
zxW-z4va_JQS*umr)%3U9-fsKYXKgp%DtSUq=Ix@Q<r#yjkrVbtlRUeElz@kC5#^R3
z1tYWkyI0qax&Kj&8bfPqGnfv?Bs5N??5{;pA?>}ef7KrYZ>=ee2tW>NYYuKF867iZ
z7}R0t>I|=Ma0p-^xy^w$@qnu)PdwWSEJX}B^DdbX4QoK|OLE5HAx=MfK&*W?&CyAN
z_#DwEl=1p2GJ|67?jQjcOiVA5;+`IlL{D5>lcH6SW%A?%8R}~C;-byysX*?EaTXyO
zM(08w-|rQxY}L_v>HwSWYbK||^J}Qa-5@Q8K7aeR0g$$nM)dR+&Ejt_8_~Nd7W>__
zE08zu*rtYHg=ZPpxaRC|5?uzw%nJk{(nzK$ua1?sc^+KdKuj()3@#<UOOk2wiHNZ#
zRgIuuL#Uc3=?nE{lgxlR_2oW`i{l!Mkz{}aqj`cygCv=>wBIa89263ExTN8HKt>kA
zNWvO+ji5x=%Rw2^bTgNwUK*2Zg$PYr6)2ur7A)vLc3-{Zk%d}{*5JYTE>u;HOqn3g
z)FB$s?9pIy04tl~v}$ke=kYN^Y4l0n;-i&~1RRMw57ZrAmU+sK9X<EW)y$!|0Bfwz
zi97ESz{Jpx`*fEkev;9|uX89x95_#u;p<!8ZMR343!uH<(_9K%OwBk2o<)kP7)f{U
z*>kH5lujKGmJ$>qAkqEl%ROFBW47A{aHT&lDaaz`m_t>?UZhAq8fOI-{ycbpbF)ok
zrwweTKqZX_bdfpp)s}^@>bIdUY<^>J9L-u{l=Z>vdl8oUu~wYH*A*0R2F0cfUK2eQ
zEBo$vtn_YW#0n#wA;I*3SxPMe83UOF9SLo=v$ZA1s9~ESN3)c+#d`ZpCdXtNIF;XI
zbUdJi@~&_Q8u3loCU#`HHqADySkw?jnDsZhr=!9#+)3u>AnYv&A%ISWC1fL-#YjYD
zv%kF*Gk(iYAJz5>z0iD(4P}WWKS_cp6~hVC)|#^g^nA*IMe*r5F@U3q*h!yc)Kkv2
zq-4IZ#UmhbB>s@X8$%4P(c`4zBlSy+lZnty&QYbW`4Hn65j}52hZc82a4&EY7YCAP
z@C5O;t}k0S*b*!meroqk8S&q3`n|Sbl@&o->Qa&Ai`j%zNDe<y)g&HLM@e5!#8Xzj
z)!JUGt*!0)z#dBXkt!;*TUYK->9;Wo@t|gG7j50@HfesuZt=B$oB8t4>Jyt9aH7?T
zaa5R$EIBkS3~PUgE9lw3<+<^6;@QhF&M<Vvz*a<H_|9P@FJfWTq$7ttLv=?^BUMlf
z^#vh1)po4miI?w#I4QVp2q(`UO0OQ&Ncn(lw*kr6mdHa%9*^@PJSn^y&je$Svoq!r
zSFDDbpFCULd<M?@VLdSHePX{5ZkN=Jprvg(AP_qCvvauD##3$kRC}6+XHx_xYZaW&
z++{c=uE?b2C`OTAk;i6DhZnPBLnahg=rmE;i)AM>wz6UI0#?hTEb&v`BIgKe!U1=V
z-Ec*X#od)>UBreQI*5Skb8#u008FSF@!@X6Y(tk<Cu&I9NufWW7$msn$Vg_JC_sPQ
zw2t$bmdHxsnDm}!=aNWpy^ZuY7JygFud%&IiERvqghC`P5kqlitQiK2N8)kXI++Xy
zs~U-pqkoe0rvmI!Uf8z&SSH4<Y%3&~0wj}o-{4$$k>ZIQ<*_6aO>>sA)nUZ&MD}#K
z1t4}Z7I$Tu2u*v5x(B|%fhE#E12)NbB;qm&11<6@gE)#$Gj{5N2sogNzwZ-Wr@gV@
zSv>VY+U6$OSgXzUX@LXXw9m}g*Dn*tw9Ym|U&_Wp77K&LFB8UiwM@V_j45=`Rn0S^
zp3|HR#~Kn<OaPt==Z=6C9vSe6Lhe>HPLrM}ejL4THxw{Hr1zm#CrQ{{Xq71|V7?+}
z(321s!ZXADk39WUz2sU~z6FaW52GhzV>!B{ylT*b(I<J5s(FHPyx+5QTOKs}s*|`U
zQU-M@f*>DE=K*g-=7MMr2IFK3K18derH}lnG#s1)%U5AJXX3ho<^iARAo-*-M#D@X
z?U^H9DyUzU99t)MLn0E`Evq-lzZO8Eal#d9Ult4%8Rvos=$DDZ;&M!Y>^ceK{i%%y
zIg}-nYcBiHo@DDee`}~DY5e5}XykdpE;ITO&*-+W3jwH8+wCrK{u5e@j|IPp!2;+o
zmIp&RtX71XUgT@@l$aRG4}Iisy*p@*%jIL4=#!zSV9Y(cq*4=|U|O}P)rb3wgBQyU
zd0{{PgT|REg3KiSr-;{#C&U<;{=@7ik^d_Y9NSy(r!i-i7N^HvT)`7N?<-B9>%A5>
zV%G+=H6C{R@sbU%$7e;`v~Y{VFJJOs(P<GNxu#eHeakz}Ct++00KQxs9={_B7!Tur
zW+OJENr&sJAqcE+A2zdaSx_x)(A6TaQwcw2J_1TD^o|S8HleEZxPYhnk+!!<2mL1P
z((}DuYOKJ*egLZq>>uWFgJW=^6UYD`fMz2FOOf}2hPw%a_Ur(%hb?ta-@b2l8I&`Z
zELlbt+gpDl-})h8adezzeZedQp@`3P8o`pa0C#gB(PKI$p0>km6*-tFCNzJbVvS1c
zVHJ=TfM|G_x^&4%>VRdg%_!}QxmlJ`Y#@ekni?Gpnk%_KLn6kw7VJcnZ3j-?Q^2dS
zjuWX_3Z|Y9F%e&9DTDsi;)him>75J71Z)S^8O4R<0a_#0HVoz$(Ql3_YH67Qt2Lh`
zc>vl)Gff9^j?6FFU9mhy+pWz_T-=FNO5>sMI<x=PoeX<$j3oiZCr$NS4&j0W#c`I*
zVD-RYoEo;77VJc&8_5OG6&$$)gpA7QTIMYI1gV>c5<38!Ltzc>c19XI;Yg)NA)^ll
zkkQQQ`O~dvc&90`O{t$RX(!~w_z|M|KiW&7Si$rKd%5Wvw9bbEKTO~@%O|8=)7c<t
z>Dy_SjaSi%W28KvKI-NU*=m`#Xwf%~p%fTr4K6(sL6JE&>Gl#&PCEgE31lXCr$!7}
z^)c~~dL(`FgBJ!`5zL@hL+<$u0iXxvd<aVIm_OHEx4+qY@+NvjRD(SQd#|3o+I#s@
zTi=N~Q%5lonz(*M?W%>KQ|l*35x!U%?SL+=3K(j76pf-kJ&HCRHmV}dGC)?842opt
zCuxSr+2(5W2lv+&u@dwm*z7yC@*6UK#pRdO)w6`HSF}hLnVxT(?zS2?86DT2qfU_~
z$4SSd^N>Eu1&SHJ@v=r`dAo?n;6|fnes^OdYW6mx=4sUYHmX0Rr&8ip93J)P-#)x*
zAH4bN^Vjvrl<LA)-@e&DAYCb4Kl51@$NbTqZUaTKEoHLT$LrJIZGGdO!amU#-cHqB
zH73WR_&g~(VQg5RK^OE%NkxHfC9---`~#&R{IH1B!qfH39TwrSZN>Cl;fha<ND+(e
zA;Q|x(1K&+_2FuJ+=hTNEufp--ifw0HeBV4+o+U5Ut+qg{&YAlR;1xot$rr;B8aV+
z5Jg?*t&KYmUOfRz7$&5!pEsD-(|yhIzAK^0QJVZgo{B~ZoQlb(9-Ek>yBn{b0Ota`
z+K5hxLvwxEJi{IcgVcuf{UVd=F@ghTI%J}A%n%y=q{jeX)P_(RDK!O3<F0_9)8h!i
zM*M;(5io>V*M&I_x-AH?p}!69E~XQY+A_7QzH^sfpHEG?7Ql(!iT;g-(x#!b|N8tN
zbqB!AU%%Xa_2k*E+#>}Y6XGSO!(ItQbkc7HmmRl*J569Xk+m<gCY}}wp>~c8kzLu`
zSnWg@s8EHKPP0iIqIg7Kb<mEPtf`%$8MCf|?QLpc(=?#Mh@2(m{J{<62%ojJ6{PZW
znSo+;Z7srAx4@bT{lgP#k(FznF&yJHB(Xu|PtTG*BogpVVPW<m>Ubv%lG*WNYj&yw
zZFVk;zu8$lKxc;s5z%P*^3vMVxIBM6_Ti_p7k&F)>+ZeTuid}9cU#*RKH&as-D^GA
z3<p8`7Y<^xY7h^%TMzGE(8uP+!`8-vgV@}-)4Ge`fDg>}fQcjSbRrQ5&hMM319;tu
zaX<pV&Zc@`yd&g)z50tD9lP~A3x9ou2WF4V%%KV5IHLR8RpA}7+{6jz<>dLN=+3-2
zlW6v^1dTkrvoXK(jfb0;cTOkbZgu>~-&6S3AcGR=I++cZ=QNpOM=f<D&U66-2X3bk
z3F7D^CF<{xhzIoN<SfB|#Q;QPFQka84a06wzhV-Y^bm{Ow<ks9WY4HjGJ)T1+h-Mg
zII!mr)iKDkf|nG~u6|b|Ij-ip0=TQW(Q(0?xTJJULV{K9SSN=Dgt@hNDG-uj*JF0d
zpy9q5y40^|BjJqgh~mKznjpe0Pf7V3P3+(p&x^FnCdp}>E+PKqidl`4W7-pr(e+K5
ztlvx>h=~~Me1iw@bqn53(u}(aT*-lLLzETR2R<V9)3hN~JNOm5jtoXFK+XV&7x*vd
zkX5;o-KFZ!7CV9$k!>tIPo46&tcj=RH{sinNLqZw(Z?AL<=jMpM_gw>1w}diu?uV^
zu?9<2XuTOHw+vlNjfg`M*w{(Z&>?EfGq$g(H$RA{^jh;QNj^3=*Y&J6jn%m+R%aU@
zzNer%uCHP;?aMW`TU?}{n7+FJ9DzY*`}K}z7_}xT`Jx4k)RRP@;CvIPzsAM@nr8fr
zvurw?PWi?>VN9gvcQuacuir9yuh)kcVRj<FHL;ueS^Ys?v^`omLi~f)iU`un#JycW
zNJjN1l4#>R&7|sS6sJSBaKMg%ie~VzLe+-O&L%20dxa((70ZF+-cJ%RQd!m}=bmwi
zq|+4TG7Pwl^GsQPe2=z^n?{*SOv{*!8Wzt9rie*8NdIX<(w#jnvzD{6Mz6U|s)}(B
zwis&?7b)LMzJykR0}y-?`GH!rHZM{!OVF#vvvI;LAEh~}Fb+_fMgxbulrlbptUT+T
z=CCfJdfVj=xU8xPCL^lVJCUr=BhO%g(alZ}+r`yEMllU?Cp0Kq%SplOCG|=BI!Dl0
zm^am#WSlzoNEj&cmt`KdwzgCI&3-zBVGM<K>6hjaqi*ny6(_U`O#n9sQBwl&rSXn7
zC<3_S{Y)ZNS_<y{GDBvO&qBDzXI_|MF=b!5vE9vNP--{sd})~gK4Via3DQ|j4N&(h
z7%!T7<m_Vb2te$N&kJ>HMnXwY2p4SM>kVUgk(nc5v>|Gu8QmeFcSbD050HijGgGhq
z<~Ii%?ZOI<pE9Xe*&17v=Qp@aQOYeKBa2i^5?qG}5~TI+#sgX;4hvu}a)A|K%da)m
za;hUQ6pl+O88QdfvMF&NJ@(AOy@lXkb=0B7QO3?$j*{|&d)!@+`iAJa=b5$L$quW>
zs?FpVv5c^~+Z2^k)K%Or9yF)3mUpe8p&U-32uUOE)&FyIW5`zQj*7MG+Yhwif@`6f
z#%FfEf#eo7#ZSa<V955#bkql1^Ocg8`eC?KA7nBc0ahpsj`n1?XOMRDIOn}_IYhDK
z48x{<&QAX{8A$9B&NwfDAx12;l>9qv45(tVa;{!#SQR&DF0Y54UK2{Ik<Lmr4Phm^
z=pvfsC%ZpthZyH6ie;6ZBqo|m{L47g2>i2>j#Q}#NV4e^bG0{22P|hf`819>nIF=L
z*rPbU_%HEkEOE}!iqJf5D(RyxHBklY<c4RNjc#-aatYqG^%^<w3FW>)n@O}K$yRTu
z2wg9-rdDw<E6k%}K5Tfmns*H`>-mB9!sI`V2OK=7A$o>cn~Zor5JX%QTnY#N`Z({W
z{}jpF+rNgW1O8HmE)!=9_VExZTnpS=!)g+=iK1^0@3cY>29ah>aCc?3l*}c4D;aRq
zj~Mt&^6VK$S<D8-fqV;T^&MZd9&f#)u1l;bdU@I_*cxTe6ki=%_d}Mzu`e+kig%6K
zr`$QU9wL^`W*G7h%FZAa#6&T28Yci7YBd1lX#Y{x<#dTYpTg$>A=(kqCKYR@#DE&N
zQm|J%HVKF1H^2rmMoKJPWnf_%GLzWEzGpdtxg9$xcUySf#wv;l;zM<7+U>-3Yy3Kj
zw#;>&sLumL)uxwE)n=@QYQ4~DmK$VLfb}F2QIL=dpQT(K=AD-Lf;mB;5En1&xXhhl
zMJHnIGij!`CutYhppjO^=8z<gl%ySe!@FjDwRA9uCB#~AjQZbaVJhGYJHbI@*p0D`
zaYw26%mn^+&r7t}h+Uy0ntskWM}zh5ESGA^WdVwoJ(TqP@TF!nE41xIuK?wtK{dS2
zUKOY@4hiQ=042(ISvTgy&k9Zjwy1<7q2$fUGICv?f0`)ljrPygv-q0oAG&MuTw+St
zSR=l;V%5YyPG{L07Xi$%%r>i?mL@-+$;GXDQ<x50H1ua9TFxF&qIAPCV!3qn?2!44
zbl%zQLtf>T35hN{o<z^K8m?qU59>8*#}j&nmy`5&IXrx&P<v1V3;XsZjePcB@~*9H
z05_h2@rF;@+f;i;8l*-HNUDRiAIa27RBL*=_@7Y@a=plV>sUyulEaa-%1;_Sy7Zu`
z)9yK|wU-_=io1K#>F%XRtqSj+bqaUsS!;7~&sv?n^r-6a`eaQ)5Hvp0lvC8rwkOKO
zAW8MtLnVhc_sokA@Uur2PFM39kSKzFD*pDqW`c>e%z#V4t_FG$vVAA`Nfo68qPii>
ze40%FyDDN{NV>_O8Vu}>5LT57fHQ+zi7C!={uh2snCj?uCf8saGslnPpvvtR65Jt`
zT5Gk%%t>Nt!BWD~TCjYJNjtq<DIqJD)r4Hocd{%uVKWe)73GMf3twjunW9XlHD6ES
zwwcDV3D?sM`w8g+CcVI=P^i%8^O7kEQ>jE-;%a-kLDS~jl!9K(T8eb(`P<D8CWdya
zb-%UkV*!+f#&|fmaKR<1i2rVy_(pDYy`rVn$fk7nJ;lQdaygs>d%0lG5|oOH(vz$-
z0JYj9*xO;9gpV|NjOqe?w)?`KCExq$wCBBp=kFp?lf`>-D{|;3#Io*e)Zp1~zvdu>
z+21!eYBfHG)Xxel)BX6ko%SEq`TVzk{JGweEU6XrvnsBC!$Tgu&PIuT1t!ua5|%u|
ze?SUWP(-*9ZPNegdp%IZ>G;t%$h(%WCh>9c=&){YTm8F6Z50|HjYG71)~K*eBnuuV
zG7P8p{~70e1^>aQkLvvC$Mom=s(l3J1^#-NVbCky+hxmvtd)C}9p=pF9)(TR>?1_`
z(&%xt5jINPhjguJAum6E>{_Z-Kk~?XLQEA(@07b-FTGRN1bR2qewp6Qn5+$7BT7Sr
zPU!$VI*Isvs;nK3)_Li<xLg)*#f36P-xA5BKN_GqP*IPMwU}R^@%q%yn)3XfxDYrK
zw!RHlB1LVSY8WObM5<xh%KjQf=_sKfMzEsUl-xW7A&FreW*2Z`SY9Q<a#W(_Qg#>`
zMl0CO8H#9rFcfj4b#JS+aS=%z4jj6hC0ujp77j$q-#0(ivP7W_<#AG~rRpM6+fvZ#
z-*P91=+f(KqMlC1#;LTovM~eoHv7WIWRjhC)6tXZ;N$D;18rPK8Y#vD*b@+<#fOXJ
zl(Y|>!g?K5M~gksJ2zg=Ws?NIsPlIB-R{em&tE<QSb?@LZqLDNd#F;X239E=h%pXa
z+j7pv0Po;ul-+tF6$B$caMy`5M$6Uk7Eid*6#i?y>mo7Zs+U_Y-}DPySFTzk>2CeL
z6yXEb));0i-%j{n|NH+SV>ng@Q#gsCiZ0+5sWY10px(fllz4X>E02qWRc7lBr-mx}
z62I)FK(s2d9K@C85*=DbM+h<@h-OF~VRm)QF?%}Axq$TozI-p|p;eXE;5+~53B8QL
z1AtHqaJ8zDv)nnEp(6UdAtI+6t*xz#1uKt=q`9Lb&#LK&I}wVo!If6|p&2TIyD*IV
zD$~2zV3uFgiG%Jmf!rD=U3T3|_?fR>8v@1G@FIF-Ln1uE>4P!kOHdwLhXn0;^k{p#
z(}+4LGRYrpZU`_=@PPSJpSiQqX+@6Woh7!AsBib>>M<DLCZnOUA$}kfLn>`y-~}6A
zV7sPE10`T&oIb7Sn`w?Uki^E3Dvgnde}Nx{7StGuToK&9m_WtgVR$beYnUk&Q9^yO
zyqL5jows?0RI!eX5|>t-`tfO&YJiA16cn^W5rq`J!G?{v9z7zbH}HC?oL*&+xtaFM
zbZ*Ac?>qUCs^(;x%SZ}@lB}2n(UB})rzXo{F4dc0>z(}&h0l8l6U%D#EF?k3qetS(
zfBo<O4=`xy05RgLfuu8>kZGpME5w$vF$`q?RDV&)>Zjk($Sw1;UglP?c{8NP{NPl&
z%{#3-Oa;zzToHq(r4IYPIXFx%z+Q3B60w7!N-$%8#(^sVmjZG8($(!!bpr0oh7Dlc
zZ)s~#VCsi~#0nUj9Rqksuud7hITJ`Y)^H_HPf+R-vj!xbLqDtOJa?ko+pPz;Yc-Rm
z0zF`?{i-7qfHphs%gs9`0vp$82lb`sssVHt8O!|JX*QsF6-K9MM*S{yt9WPqG|txt
zX?J~Wr^d!6@rbfL)4g=}&i0o4;G8(-*SBx>4_>@`zTbYkyTAY8&AVqiT+bVp*YXq3
zp6o>Cdf^9>f(MfmuGwr_gPUw8I=ub#)wAaQx6fa`yxoXyk4cd%IEy@LzPHoA{hhwU
zN%5!gV26~@!n8v|I^DmW=&t!DPq;8UeFK$ChtU-5sBn4Zr;{JdZQj{p*qlNJtu+|k
z;`lSd-_oS}6MMsdF+hTQ@6Oi7#t!}?+A>q$q79F>s&&EMOV=Zbq1rLIOa^SCdawWO
z$G0Dz{cNYPo@d!)y;UBsKE?EVNB(E-UcY<(&GV-R94Y>6_h9$Q?*8-k(>JeQ)0ca1
zUZc#lJDxub{tzSGd3+4QXeMLM#-HssI9%)DpiDn6-@JIS_xc5w(SH7}{qp(WpHl~W
zufKUyF(B?-6F)f78(Il3Fw#G2-s+e;5RImTfhfsN3}7dmM8G&{$Eh$TMknRGGG{zt
z*+*v)Y3_zNp;;6EeB;V5ll8$?5Zf195vsC<jCrH>XUuU0xO?*qJ*(WBWory{VVb<y
zBIAvqR-=iw+vum=jvhUV>g_f%ncD5TJRi2-;yZZBuma<V&0Y9>0U|d|1!0mTCwWSz
znymd0O&2SCZ9_ou65FaD@a4WQW_sUshIOtB>&YW)Yk?F~Eyy?<J)E32{z*f6&Jy@q
zC%&S$w$^}<KtjuulQ4~?#v)Ytx|@+Se6e^&pChd?75N9EXxhgWiu=Tn5l8_mK#;7>
z=zheXOX;y*03xF-K?r4POCpLjtSd+W+{f%BWh47hI`Qy)8-anlNZ1X1>e&_$P8KMW
zmHOn`nr9$0VwnvxzEoE9Z6-DnlN8f44tqTw@d2$A3?(Lx6KVU5z5sz{3Rm6i?zo-c
zh+77<P(;K~t*zE<aT4fBU%RbTaP>KhA;6D`Mp=3aJ4a6jx^T5ROzRt*+(39YUIsL0
z#M3eal-6Vj&4(mpv7Z;XQ={X_NuhjRgH<LcPO{eQXfODt73~6tSa7TwUS0@|m1MlE
zAAn)_@D$pV@s;^j6%*HD(zeAKWh`qP027$nAf017zhUsTK}FDILxVPFee^cSpeT*r
z*?_z}1Cq5Tu*Y%TYPPZJ5}Pnt7c<q+(8&g;vqE3wIAPLeNwT2Ln{OYs@dA~OGPT*l
z{@jF*N_88Tu+QZx_*yhcFP^>2W-Xl6cUpJ>x`|gmR)OYN>qDS2ZdpHx9obu3E62=M
zUNyN4-r`=853+Pth}<P}jj1DA>-^Y7)k)gL(UC|k4*#U(fxZygO-|X!GWO$`Xvi<J
zIW}Il$bDp6j~L@;!o02F-y_*pt96AgIB8r+7MltE7W&gfj7bG9OH)I9GR^77^cexw
zoLa+c1wV^}8BAnR;kV^fWGz=Bo>-$1+c<Xa0DM46pIj<jQyX=|f%W!CHw^8jJ3JXA
zBhsLX8NY@nz|Xof^oDU&Vqzw;81}p@;@<#-laOFK3v}^fmYLNeJxu#euDz_g3`zxq
zE`}|Le!Vhfs%BeEe**Jvcy*Dt$@W!#T*ZJr0CQ@TB1`ma;T;27vL|L_HuHM;Ll*lM
z9Wg|Y+dF>N0paQ%v6a<Jws}u0KV+U<x{nArv|(5FqCo4X85ki26vu`m8n|C4iS=o>
z7^SLU4Vj+7VhVzj@|TP$pdoo0H5&KhF`rVq8YC~AahzPH0lNqr^`sjODzze%3Hlr}
zxf-#w;?aOJHivM9ZVg=PLmCO>Il0~8X=IctKe=P#hoNh^Ah%sUbgd0P_3sNE0(<;4
z{Yv4q1`<8%``sLE!ET>vywoUR!3}yG>2I=WGiR-DkOw_UhXm+vrYuV0TQ+5lX(u%*
z2N1HHdc+Aw=6*PZQi8%Xl#f#>_PxSR8a9l?0@8AxYdk4(34p9M6Gf}{sW3Fz<rtcK
z&4OIvB6KuJywK=aHY1-TgE0y)0BUcf(Yu2f(WFMW@X3ye>(Nsyj>?=k8R!tLEZxrZ
zpRno<%waMq90!gA^b#)iQ0PQoar~FjzK8LrbT}QVLv74r32Y%jzle7dpaMfXCDhg6
z4s(bd#xC(|1wyDbt(PIHT}^ghlx9UfR_|>X(<cP=yql-}$kt8ki6d!HL@P<_xYdZB
zJs}mFNNs_@a_+iVHAy6-bfyETUM8zHqRW|yekO(<vmSe@qc97htEJ8roB#BEDq4WB
z7cQwg0PV2b93EuT52CI#L&x8-5Zf<e&_qTd2(C3rHb+xIT+&s5!M=Z-G<%HeYemO9
znCo-dC3C9GB`-`~h)(n!=ZY|4z}|YPfgxImhbm--r_8JeVUDkdCjom0<#rKrokG{1
zy+dax+-A{@B6Gtfw`N4QnFgGU3r>NfA&en?BEf4)WCoynvS4&0Y(AV4Vi20OH37Ut
z=#@xq9)O+GR=kZ6Dy+YIj*l1Fby^9I8QWehAUoXnftT7>MPLlWh6oN9yznHaxh)(x
z5~f04{+iJmEAkmHeb=ncs>Sf~P6(V2*^!?gYBSubld-t}>TIlrs8$e7X0)r#jp{@T
z7N>|!y7Yt*4kCa@XmPtqpLkqIgS_ZTe^)&56Z+bjF<Q|3K|J8v8Z%0Vaon&@MHWyD
zyEO>|CZLq$028)eNn3PC)PFKKQU`0<^Xg^%m~iTT%Dx(t#e;TfHEc@G$b<oatQzk$
zz@QjsU3`ZO6po7*!@e<4EG-vp0mN@0_izyUJKeAYNj~4)kgZ#F=q16{1)DWL70YR`
zeVajpP?sGeHSR>)8?F1Bcj;ks?02HA2d(YR?IJ+3qi^rG?%jESgR$#H?+e!<F$Ti5
z=annvl)3PJ1uxt2T7J0Qda(67e*_OVTMssW#{;kfeej@l@8Rz>U#yrOA4|FP6IoqN
z4>h|eoEKYW$K*sic0~6Qb8m8&&e19-gJ@)s#=0JPB6hU0)w*-<cdJ2J3VeBQ<9Dm7
z-q@fhlY$R@2N!P=-Dy3%`@2>-4@A3TYZynJNzy=H+p~Sg$Eb2Mpu59_LuvbV>;Crd
z*aOb{E>Lv=-V7fb1137hhdaBNR*9w=u)zX3RC7Xm4G|88Yv=E*SVorOtH`>d8?+cW
z-OBh$o^)M2%BQyl1kqfVZ>n=1%PG8FxJCgguMxfmuu#?sYN3Be?zSG>3Gc}E!`8;;
zz49H|eAv3bv4uN=@?nkH*aVZLSweMK;e<=T&S#~C9VYNlAydj+p#W*I5|37l3LH><
z!cyo!!`R&lLr4}vXOAwen@$)2g~atud~`oMqwDG}hJST8AGGdn2UqvbW^3zC>FVBl
z(0Xt`IPHEL_wKhg?+0z%rCYRBYGdnO>ptBWInQi2@J<LV3G{c9ENK^owCDk&?SuVr
z!a0n4e&G|*Ee$mnAivqrNpq3I5;UoAQbul&V07yl=Jj%TB5dvRtb-zZvu=QDR+F47
zOBUWn8Ip~BE6$+x;fH&4`62a!2Fyg1&6u(jyuI+5Ps0#VX0eraNW*hEIo&G8Y6xK~
zplDBYEByp?xu?X!RLR@1a!H7>LY!oV)|8@dMHXg#wajFc$T-HvsFPfjaK}4Ko13l8
zyIV!WKeWVM9zHC>^R;=O&et|e*XBkb=%|dIQeo~}d3dMw0Gz-N@N#V8;Z|$&p=Al~
zzN+PEhBurZJBwJfa<_Ho{sTI@qz~RDinE3EmM~3{6;K@(%pW5;7*1<YyNy}l6+RpA
z;%+j<afg7pg3XaOCSvOlK;wwT8HCw_tq^w@0OJ!bbaY~(od+pv_~I78{qqc?D;uqi
ztvki4HJW<2x<_)Ky&*6HB<>0YHqSubR6}7rv$A$oL7oj~7PIB71$O1$c5CCVvUhF3
zg<CgF-XW%tXDH|cw}+T%Dgvgtkch`>t;y9%Cwx);pu3we<Hf^_%k-uiuEL1Y^YhE+
zAtqRoU^7<4N7S(9c8z_sk_g7gLfM_x*8L5G<=66&p+TzPu9!skTU%Rq%rnMZWRIv@
z1JL{U7(R|}a*~evhOUSF0?d8;e(S-;!^oj5>`oN+<#-^r6DLcK$3!s-ta;ppyW5Le
zcD#<Av<53@kYyjmmUA{I)0nR-s|kZxcWZ+B6wU1DsF=+rkTi2x6in{&dv_OoYQ9ZE
z_vY_P#GK@Uh9|7GHt+ooY28FfaTB5gPOx@w(2i`E6rR>5t3Zw!JZx<~xKAhMnNkz8
z88G$Y{?7A4kUj_)WR9Wn2(uJt@aTGwz2P!?ox3ogFkZGcZiZAw_N8)&wF9XOLI;>d
zi@vxW48}(YB4hD)a1%j-w>OGa+2o1CZ9!jyL>lNDMLyg(&+vLfyOyI}K?w?1?Tww`
z8W17g6gwu*?bbEoKF6YaiKRP%W`LMHpX<sz6{c-P2!n=Ym?UaiAh71U_FUl3gNaGJ
zw4`S{XnQ7#uAP<5*1db%5LS#8TaS+rPfiT>Km!{R)!~}sWkxJ|Y-$JE={LkFptuOM
zIn!>FAGZP8_B|85?FQ&?w2sYS(Hnsw&}GBZULC=2uwr~_dG2cly8fQlA((*akmTG{
z;%0ccH#Z)Hih>nQDpI~Y`|Dq>Gf-^(`y#Nvx-bU;!@1a6^&#BHSp$OtD;iA2MPgyf
zp8d5o6QbeUg4LkNYLds5dEZel#@^l(NoWtZ?>eTuNHCCN*z8?2TlVnYy)xsr7ti6P
z^5wDesNN!af3vl5|GqblOG1cBDrYDQP;*<Yhno-Ga6}meAD^71J%;5kIBdvhnPaPN
z<p!D99n$d$JXAA=I{_(C_(DV0Iquxr1pUmyu&RYG0MVJu@bm*x_V2UVD&-U!YooBR
zE)rl6h(Rim%jB#X$q(&-3C+7kab*w=7VX|W2>NF8WCu`g;sl04R5=^Vg}+Ce{or?E
zC-O*y2J10yiI?ACWAvOpQ@E%EAtc7?V2BsTI0imFv(B1be{SHi@`Q^j_YzZj!2+;2
z{%dHpnu0A<2WlQzbdtF5J6};^^f;HIA8Z-1^*s#Ki)UF7l$vp#^iT`hw?#n>H2z|@
z3D(BotrDrX_aCT|<tctEB-Gu7@+CG=E@fPW_mXn0AwL>3v|gMe$tXM$p?#rYsy1+?
zERNvxRDLPZ=(wf}%bLC7m~&`4W+BTNe7D#PV3AeTG9|$h8pWBj*_tF|(R@YrxbE1g
zK;LOZ=bG15oD)SIYVwW+M6nTpPV50j{eW?7mD(yUjY6eW8D~T0P@G5!P@IifFP6%K
z4$KaLCDO6Yy<*=#d!9K6j<}BxDaUUx?1;oh6q^6hN9{seijt(`85%Y>7ZNbILkT=^
z0&m08Q3eTOXdqi5R3?)hO_&=hs(<O>KzJJZRlywNKvsgj>A0TINb4vQ%D=gF*JDJ1
zsVV364cNr}ZO3)&1qrv^@XGDh#=Y$_k5i8qVgXa!nTJF}t(Hq0;LtUEtPqe$$ZK3q
z6afPygwS#!T4}^J!=yAqIq0g#nN24KE5FR5aL?HF7K6mVDIB}})?lr6%BC~aWuTvw
zXR*HiuyudycYzhT5#1$mA^gs5Q6qZ5zAF6c1V9k9yPLT2{DUl)_1wEc4kedN*-K#q
zR%c=@HB{Sa@xJol&X0h#u`{e3J>&xL0>Dkx0X;x#t@2~Yqp=eh(&nh19X77ugF9fW
zp*N~gX(A=kdFMfEV}p3BQMYk18&&hEqEDf8$Hi?2=a$f_-eHxeQXIWnOFduABy`C^
zx+Oj6cdMSNW^RFR&({dTkSI31JjjXqE%*kzKJ22c+`S7w$f_}T0%Uf^zwN_gi7Uv)
z`Jmprnr`^goan$b04g4*{U)8X#Ea%(EIz)-{E*{~>|bP%$70H^y6p`(Uo9kBIx5RL
zn-7Qr{f-3|J2$O$Z-QJQjx-^$H68X_h|Fwl`Kp>(FR%Kl*r(+%gKQ8PCpXZ{h|s0|
z5+<|B#w#p{G8FWWNiv3I!CnF{SJa1k_6j?lB?cveIaHdpG--T1n1YCb4YwqrxMj19
z{fcTdpfd&BA0=llv$z%Qjzp7`tCa-i0v)%NOO0r3H1)FPZ7h`LsEL;15%9~?&<m6G
zjl(j~v{MQ0<7Z(odQg;TBz<?Mm`fu`w=Dt^=~qLPfcooHVKoWPS7S{lm#eV5uyhXL
zH4#+VM%j6)*xjH&b2ye@K*en4G6_H8g(;!wEs(&34ei2lnftu7VbFE&-f7*t_rPth
zRa5Dm%k)WBK_P<QD;m+|IY0XNod*v!Dt95hS?t?)?qjx>rqYz7sOH-QT<IK@ie`0E
zfkzK);~XA(zjgnihPOOuZPUnt>_#ph>lI(a`UA+|3*|8|FbBdEiRv;Ru<A!(+?Qc*
zY=UNoLJaX*lOP(~>Xm6`@ezcZcqZi7SdGPwJQi9dCq@T}HUq^!5TmTJYB7Ah5Y;0W
zM-Z(%yw}>=1WR)PG7nL%=XV+}=XpuDTMxE>=h+J_k2qEs`{aU(nWNYQIvU%O=;<n>
z%%t8ZV^L$b@r+t!{*tsD9y)Un!+?TRt?smdqF#}tRW=N=8W0*bTmV7l^H`r3-`Qww
z-<9YH5?1efGM4U7qja8SNkwr^Y>gDlAyrZ~2-7BD#%-yG;LuHuGQD?xe7r`h3tX;x
zCd$&B1z2Da&NIza<X-qZ%A#j0A7+u3RxlkHmBz=*3F)g}X?f&{v_mP!ZA7yfAACuZ
zU%AtIumN)f*f^%?*JoKFv2FWzp(i~SEtiuRXOUpN*tpD-HsC-R0iG9PPQw?EOCl-V
zPLa?DEFww*g#eaHBA>c@1p5%XYAvCN8K&2nrX}E?EXwmSWozV}-!&?V1Rydd4F53F
zr5~FTqQN2&HRCc9YAqcI@@k-(0_mb$ILA+hrJ*8enqIGpz@cAl%BTSC1ZOD3o!*f|
z3~#*~e!OjYW2~L4aY3HmC`-AV_vMBU$p=V2^#)TqGKMr*m@@;J$Ag|IhzB;wi<TRr
z5{d7eohQ6;**;WKF)5uD5ABGxw`_m0%u_K!*l-HT12!rHhXdlp4jDfV&5H?b*!h*T
z3g7-><(JJ(;t^Z_fA;=vxs5DK7X+^ZPvHq=mjEUJij*Qk!AM0GMKKi2)DM%SGAf%V
z3~&-o(nA0o1qZ}nMyaiAUSY~?tj&7N`f9G{8G7ENo@Dm-t+n>v?f@uC5t-+lnX2xS
zA;R7F@7imx-*0W10J9`qJ$lgfB9$<8iF-FONJN}Yq!YTKec>qikvCQt=ZRhJ?nHmN
zUGdojQ8tPT;x!j$Q03K@>s*UNa)*Aq_th6)y8a*a9zK4k!qS$T=5}4wux?gophhda
z?9)*542>3Sd$kOB3j?Gn=)qUfhm}}Xu@rsrWfVnlFj<RED0!wed?bnc@pig#*;#j`
zT0ExI?1kuoBo}vnkysT3o~pq{tv=<LyCfEss>Q*v2w9+DiwQgKRMyA;ODwQxd68s{
zxqJ?Rq^i&?Euj!(ROQ+0YcWK&_nP41xYld`ykJGp$id&KXp3vDgPmG|Fq0!Hl0%K1
zwLX8)`}|QYM6K?<Tz1r=2&kXDSdq#K@_<`jt&PCsRGj@LGWojd^K9yEVXAIPMv<!b
zyA#n%J|Sx?#gVPDhy`Q89PSZ&m!pbfrnu^!@Tx(D-LaIMN8}VY3k}7kIHSX^d-;E5
zk+)z;u9?=C&>7q-7Cx;GmRc}{o&oNpzi^l0{os=#pCpAYmBjfG)oSth@#m0QC=6!f
zvym|lxdul?F?A!nK}w|}{Z#@HLMZT3h<aVoN-hM(E!0}6NB2Z{*Yz0o031Lr3fV<Z
zjoOSO*+($L9L@3Ef7$!|OB$T4vPVb@cUql1@*CERgogjUTxoxc+%>JwANICBubSeR
zmB&n$iB_V~(Cl&?s)XSZV3z7!QrNWWZxlcr;asF~<Z(Ts86@w<@u>IJRu~7xc-Om1
znW7mnvD+t$S*%EOH=EUYWfFjGM|T*EH5G0cs6yrbs@r%e^q9pr;_bJ)!LOSdxh=TZ
z+qmQ8c#Go9IbLHZb)b|g8@zJwF<gj|!;D#mud1vXC2N@Dy#S!$J}~%6r0aR$xmu1H
z^$&ukNl+ZpLtvMTgh?^E8rTLwa+lN?D;UK<a{U@8Dp3fYbw*hrBnk7pYtSBhuE3WY
z%8TJbtU`DRrnh6sfc-UXZ>2TqTaRohqAyEMvX`m^urWfnTotY^g{^%RCjgVHgINt2
zQpH`er<qmk=u)lwzE0k9{;{v|qq4H2v-7t}D?%hnPC>r3^n_m{D~<qy0`U_GV~(3R
z0Ws4YYmPYp?|s<XcNa5U=MHwgI~wOSfGoTJE;C3SzgMVATDV<6?EbraMlcmyHTQrM
zy@Bm|=z&3HZM+PW&n>;%O=3R3@f)J}EnFfAqm?1}&G6;AYha3qGI0$c4S>lTtaUmV
zKkEI&@=60=U&(1-EP38Zw!V0N7Rs?}s6k;fq7?}dU|NrLi9l><z6jjl)ti_7?_VGN
zY5(YW5Tgi4;_q1;0OX`q*a73nNC9VLj35diL41iy!(zdQ%;`ebts|=0@S1$L2*fFS
z29a{a3Vk9&MQQ1JHdrEYqNW|I+ir=V$a<!xg3|J#%v5Koiag>Pl1tptEYbE8FeR9i
z67ncTYLWuPLy7o!n^{H9Ge`fjZf<z6j7}6?V1TCsM_dmE7-m4U+`%rpMTezQ)`Id-
zYKERrF%T11<{*IO)E(J_FOM5%+FxruIbPz?rrW}W&5y>3kzLLeYjdRR6O%_}R;?F*
z9T)5@M_D$-u<?Tb1IOP@c3ehxxh-s{>uqnQ{5UEjmQLzG!2#+|(fwHU2H18mtpU;Q
zGv+#Q1g!_XEk&67HlJ9*XwdbH7A<tK!rS_NkaA-jU5GBU4mt_doq(YijhbhR(c7*B
zR5rP^<jHC@Oebbvmdeq*(Wi@%Nv7jq4`Bqe)Ee?kLJ>=5*%SgTp;6yuotW%20bfnv
zae+TSH@z#gW*|$lg<a=hTOi2?QRG#bwf*GPxy;j<3rEnD8LQnzvKK`KDi#FQKA@Rq
z^L|(mNVzC;HOVS<!6bc$cnIDbEs!XVRwUY6uRn5!+8p&<)G|IzYKxJgQPcfZozZEn
z_Xq={g|Tj;#CvjPhT^RUf8rFh==;i&?8%znyKCNd?QAD2i>o6J|EuJV|A%(ISkunu
zU-ce;Ogmc-R=4xjSG_Mjrk(8v>*jUm;jo>DYuefV$aWsBY3E_R3jGJ#`Fu?~kG}fi
zquTl6!MgqWxbb|srkyXodiYW8JYLhzmybVgUSF+g=ken&laHgr2dnAu@yD!B!xx$~
z%Y3k*h<tVzNx79G8w9prkqj|5eI_C><p$`t;xCGLW0a0shKK^1rh#gO6r9UYtXkQm
z2AJ~FRNim+_MPOFA6CTCJ%5c8INYe5SbkZcxcfVZZyQ?>Irv_H?kQ{j$lS}U9B!mB
zd42d-MR_;b99q+I4|SaP4-{*!x+7~zB+F&hC9Khjnk#X#mLV8J_4R|fk1bn{<c#4K
z4Cbzm^+u~lTp>N#O)eomc+k>$mX1q`ZK6th+^vp;?L@RyvpPf$Oxp8q$-PWfQR!88
zcnJ#LKM7dy4<CI(F`MW4{JX{3hbrCKp611hLN-Q@Az|p(Bu9H2<ha~Jog5?3oAyc+
zMvo+iJr7886^RyB)QUL=VG$B*Ooz>iOp=uqH`&liLoJ&e)3(JlIVUVm)6(?1nl$yn
zvL~Wr-(LBoo=)0XL42@!A%ANOX;@(yJF(5n<36gTw+^AlY1L4Uy)&tp3hd#EV{dh#
zHS-!W^v%?&A%qK}eg^y#I|Ez2M~@%&w*F3sV0F32zh@B^Mh!%@RPfe{GvKXrO`+N*
z*RlD55TTEX4{Dl^sR*UPz3-0$i1Ozw2+#@+r&^Lz)Y2Obp0O<oh3n;_heH^`LeMG&
z7XJH#m(N}vym+CF?IeRm;2BO8oNW>nU7ijaR+aAW4-D@WU4A27bs8(6;U}W^>g0Y*
z-=#8G{<69GaWm}COKHlix7J7UbHi87Yso~zZ?&l=$$L(B`MEUKjb_{3wwitK8}h$Y
z;??Lj2~~o`A;S&VlvNrd=q1*3I0Royp;UKY(EAft=BZ|KYBg7JZ~pQ4^{a~7ZDn@M
z2^~Ri?1VZZrQ8oY5v>I@GZrNsX3`IHyuU?L#^0U()q<VA=QI|}0t(F_zx|=Tu=Swb
z05lw_N2(ZV$%$@~4|kGO*U!JB1vwnA+W~)uBaEZ5CzUp=C<R(Ns}w@4wWl>Q()ra+
zve-=Bshq@wQ?H<~;+6iKfy}F(To$!{Wb_dshyTkb?wI%K?;!MM06Rd$zkP@}ERAI?
zL0iQ3p09W;v&FJ6mxAy;GwrsR#m#3wO=mmF?rfIc5cX)f&_sO*wG%3<DwpOC3YfWb
zQ)>h%-Rk<Ve8*5^$~RKJ&8Pi~G#@Qc<bxkI5DPR;G2Z*Xm4Dw4QWL5hcjZ^9hdN6y
z=9}9OwjXr2wm0PgE4LKxa-Fl3%g;EZmJ_p+oT4I(%&Iv15#>a9co|+Qx8<r4cg*++
zRVrMn16zdw*JBLeO29=)-bgj=*-ocB>Gbn5oYG2z1>LBZyis_aEV(L*VU%&f6l(^o
z#~IdDzYKJ=<(%tYrHF*&F1VL27x^&zDADxXzE)?_iq>`sOX$|$ZIo1Yo;pzpWZ#J~
zphl4?e29o{>=+B@EGF<FaT1d&2uC795IR7R|9Z(^QFa1b(-9%&ycnu=?;6-)Nd0hQ
z?u2UU3IkKJUWE-v<109DxVuLJQ|A`-rdUvQzRbY7-xZ^G#MJq&QaSn>#j@;8zcK>I
z5cR^!>Khx!%w6TcVZz<maJ2YlN*V74KT0~c8}qjU62Cj0ssenZc<>?%Qg+$uGZnU9
zO!`hJ^WsUnf^y^}xgMGkm||*XKnlX@I_h!zDXuhP?VVF!H-BZ=h6VI&41W)Pe81fa
zJDcpw4vB;raIoCFFz|nj@Ce&0M<w78FhTRwGS#GYcvQAQEh3-xlBbJH3aK+CjEhWy
zjr|uXL0?A;_<sKL-~VGeqGRDgu(aLTD<z;t3)+jTOqC!U7n!jw!v5qky(Af8&VMX`
zLEv`m^qD&n#cUXsE2@Dik2qsTKq%GzmoE=rZvXYW^6)9QiRjioKGm&fhXEsqP-5OR
zvBS~KqAZ0%0QIS=z_DW-GYkzS2i$+$9$z~C(`fAM?3||(m!itjESDO8@WeM>FKAp@
z^)1aSDFqja(4!yg9SW?YbGe1w;-#aT5<xSWlSqffsJOhbSh5!{UJBxdL=#_UBZST*
z?-nD}XV>IoziV?pkbjPujd;?=2)cEGihKP!oegC_%LVb=A^`a;od|Z6n>H1MR4}qY
zMOvnj-)qSI9Bv7iN6u-by1ps|#(KeI4gu%7xUnoW87Y&2<B~77dhxXKOt4w^=^+U9
zHI8KTz%Bkh(;c@Nx%)tDcE8>3eE#5p7*@axK{>>MsSd)uUm`3j3q!aVrPr21MHl<D
zn0w*TaXf+akSLE!e9@6OlcBuCAK=(}=WbxzA4Er!NTk4APaPK+bCQlhF^oqu;BSUA
zQaZ)hY~I?pUU?M);5r@oS!q%hR_LVA*}B`T@`=;X<@lBvBLQ9KZomvu_p)k7gViK=
zJCk55$j6d9kRvyzSWR&~o(kBs<c1~cHE&h$c6fiwGApfkp9~Pm_)e>E93~%1d=CAq
z63vYXfp#zQpOh}1<A&kwqNG3&0_+>Qz*1QN%o)6Z@I-?Q#3)-|LB|`<M)~=O1r(_<
z=d+<$2{Z546PGqdpiynG<$}<?!T8Z*#}XD2H;@j8Gn*oLBOO-h<SoZX^lo=fn7CL<
zl0{^Ta7(I2y8WM~sno5BV#$U0Bn)@QyvNA3d%e2=Vvk@MBmM+{(t4jn-<#X_ohPo)
zAl>SA0y~loC`{)(zNr+Db~s$suL=RIRteAG+00$Z*+lo7UUVKkIS&!oBkmD|PhtB=
zF1}_`EOn&kb4>tJallO}gc;eKpwlu|dq${t63ur2-YdeL3%kiHKmJ1<KM3lW_ojP%
zh+FeW?m#Eu4^^~So^=gjP3<nHz?yJpY_o7z$dv^K^dNM9#8tj|HY(0GVF%b;-(Fkp
zV(;1rwGN~Jo9L`~v(fxLOS%;oeJhO9hal8<FZLr^_@=pI%6pUDEoLM4Q}g%s$2ZN6
zKAsnDRQ|dDE4<)1u#>dh)88}bF_*C6VRn%&Mleg`Dfx+}ES=rh!*8q!md))`D=5Rr
z_~`d<vzu?&wc{VYQ>Ui9?|5az9pORT#DE(8Byk)so$?w(fJwn>K(dOp4JOIMMBkvS
zDph<h@@zCT$Bo)qB^_8P0BeO(3_=!fj$SxQ{Hsd1qD{!2AvRQWD)HJoHY&C}4Za3!
zg$CMi)a+fVof0d|4Pz%6C_(gv7zf~I11C`Alkm$0g<hH59)A?dXz=J=r011qy3DrY
zJB;U<T*?ajeXjnDqX*y?Jo!WQk!-a8@$`p|Rz3~;;vOC`qV)Irp}zag@~eI1Sl~o_
z;2XED{j*|t)5kR2yJtl)YN(BAX~|HUpw!5FUpGoPer+l7#_{oMMTSkMWanDeS)x@O
z3)ae&^cp&)&S!=sr*4TTyiku8jm*lR;8Pzx2dL5WY`D1vGioRn?M`Z6I;)fy*HG^$
z0xKO+t#ZV(AhiMJ1NE^qpavs@=0cZ2U?0)AdbmdvYTQSQFcE6TX#Z1fX`D`f8B=q+
zT4s@7rYk>mr#D?)l+AK>?!Mtt_u!HBXUW7)#+wV;HgGt?<(N%aiB^Zr*W6-KVmfkL
z_##6P7!&(aL4Hi<W?syGO7UM@AzQuV+ni-`3a1BgH+3O5HdaI{xm9RXqLq@Q*Xs%8
z9n3{Kg0)7mUuHAltNIj1#RC{z0xVEd`p=}A*+}Z-=rb|qMXyNr)UY=;wtLATacMEc
zH>ivj!p~3LN=o$sY9F6Ob@#N5Zv0}`t#CIcZc))3Y0h99h@Pxow&Y&on%#kZYB}v|
z)^TIwVUIU6c9@~EmyWUsyE4U$U#0Kz%T%lgr%F5JKblb0sWtSZcw-mD;P|`OM<@M*
zmxt~@$NiVPhXbz2Y*Ee|PB1k+ap^TA`#Y|aJV~Zk7k$^)Z<JYMWq2*RsWp=)-y}`H
zi0*29|FtdKqh9jbZJ48fEE8ntDR8a;)dxt3*-b^}iwz;a!RN=~c$Oe>v~cXMMJ>h_
z7q!=|w!-#GnI6lM`p%#?SaSqDtrjHQ<TU-8la5hs8_|Sa>`hb%{$`rfis_CgERmbb
zFT;0h$9akF_<B!Y@8NYL!{vt5MG@>(K*J<^gf2Mq{ME;7p23wzm^C7@SgD!;n;v*L
zpPbn!1u|Wc8pMypc84u-%h4enSx+-x-0Hs@ZTA{aiKde)YzKxXzRAJ2Z(h8plJ*M9
zuD|qQ!d~7dq4VWkiU{89wfm5Brn8*%#E6iOO%2F=3;no-wM~DoDij!y*LI?J_XVit
zhnAz;9ANY9iXGJ#rvZL}AW9ink%;yN@qfl_N~lj%tUxr%Zmg$sxAcYLAbzWlA+9+A
z2V^`J;H6aJTw$sOFvDV22`;4rc1J2ADe$b-LnlJ@o~6M_X?K8jy4&siN;IeQ+EbBv
z2DZ`?FYReB%S6l)oLH84mn%LB(a$CfM~~K1ZI?F5Qz=yA1}5S45`WK2Y5BVAqkv8y
zMa-iMF05cTlf7z-(0rDbSJ-#qD9Lg}Kts#hUtXQh5Vf@W7`l1xXt8^VUdE{Zv^dLV
zlWd-S!YIQOyO1opPC6R5<B7ws2(zA8|FFam+L4<bz0}r(L71n&hpPfC!;L^Sx&aZH
z<rCTL?_9T<>`m8N*@MqC@}7ooaHUH_Lv>qmC8QL}c{XvaIwg;~6M{|rFBlw+Mx4aM
z&yyjAUEH>Av`zwXB<_Zv!e*P6Ql24I^Di*k%-lt7kiIthLdek<YAj-oM%<^ymiX#u
zmU-ZoRqSIvHS&_$h`M92sEBHM3E%Lfm~_L-Q4`ESaBCunxxiyNuyhXvdR{>gkNeg@
z-(HF%bm&3Lat~PQriNJjyhPNX<r>cm+9a2kW|WU}xXD45&`bSTJO1*cmF6;=h(epj
zGp?+h50E+CQ&yB5qSoK&ht@q~PF+_2BX&}3nExlq4QJK481bS^j$iL3+sO&k+JgiC
z);w$^YP(46kLy|9R=eZJj7Q2T-9|YL8a_`?aKk0%B<?795x-Wh6p;#LJYjB$)Y8MC
zmhT8!)WjqZc~kV+0@-?&hB~Lyh`#z#54bKQO@5*qvMX<L#s!f{okL$94JmAnF~A4-
zw`{Gg-o#t8d5&>uji+;r6;x9~HNj26)pNTMrxbN8=qlU|{(a*ldk33)&zvYWrO{Vw
zA;3%_<v%dmMq^J+aBer9Ud}_Z-RD)=r@bsX5u2ySyDwje=kHP99q>`#O`%_&=i|ut
zhh?K7Q3_Of7`U|3aa^8A+^I2Zpld*!LSi0`?CQ^p;u4iJU*=#a#f4jn*Kg-(N4;|V
z?~C+ItPett3C11STHWo6AADjtfNiHqc{4e`a?9&e%Ok5U&C?Z5F0+%FPT_@6KPEhm
zOc^w1S#>7Tm)PTx`n9vM5mw@GRwT?tALr^gN__?rGb}{z5XIN5DA-a*%Z^K5meCRS
z0uT<#EW1)Tq|?;DYz(m)c;<GNuk`UsJz!BZ9Qep1phzUAb_Lj{WFe>Xx3Vnhxq1{Y
z@)1H3V4rlHuEVFWrgrodTGu*eUkIg*Ch=iLp<39K{P^i+n`H_W#Gx!EwsyWkQu4xH
zg@`L&JIg539wXE!jmAh+91i94;AoN@V|Q^@c5k;jAX<;al_j<7<J}eRd{8Y~`cGlf
zrEKWy${_gLJ-X}5DNKz;?eXcJX13i}Jc7LE=;!$1>Ro>LxG$~rwH4SXma)|C`Nq2P
zy6Fi{%Grh9kUWLHcPu~BjVH%5*<)c<eGo~ULcsKjDOwgnCB!FQdZVtmE)cM&PC^Y0
zh%o{xr*RIdE1A=$A&?sVE%(%}Qv&8|2>$c!e#*xcVi#$+r)%$piTct<+%rUX9zV1f
ze%a!i$WUK<p-N<^bv2v0xU6&As0vfCEZl_R?xA3}C5I`lW(CH^$E&agx2EMq@xq9f
zaFVKkoK`x);gUW)QG!txMfLDJTR%*}9G836t*9AhZ#`P~l4pzaw=ZA~`5piH>?s#(
z|Kx=`Cir3Go~>bgTYZn2>UU;ysNZN{H?us=BTI(j7QQ5B6}L1!>Lf!qJ~wPF;|z<#
zyps1I;afUJGA|<4IZ{9V^9x^1G+?htg;kwQTuzgnF(3k1R>DPN;^6a;3PZRU*PAVd
z7e^T&bj&I7lM!=lWENs+^*CRS8W!V8I#Vy1`|i)2BER!)M~aE=<9Md-)u)Tx(UOcx
zMUyh1ynE%`Zn;0daNiuLgDqRa2=l17Ra_CPGcd}2;(8&cM+oG5Re~AF<?#r@ld4Y=
zDGc(#YNGi{W3&5mtyd~jNLU?>afpXYX&6wDP-saP5?rL-l9)Jp$$pf;eC{ECGL6;P
z{z72Q-9&w|(%8v?SBM5+%pE!e7P=-$^(vf7+m#`I^t>b#!Lf;u=*vO)l25vGL8i9%
zbYEM~k$lhm9!o9H=I6b3&#5hQ;`>;Tu@ng>WTorHe&pVYT(_=1@k?+3X8gw7M+`ux
zqBZDkvsQECx_sHE)X|q%k7yb0u`Sx`t(*nain47th7+?3PhQd5r{VY2EB|P_AH7pw
z_{yaxsSRs#^1K{stU{KTIWdc|mXZ<C(x=VGaSeLZf<dK|?C%}(ir2+o##2NHXc&9P
zS45l|#+Bw_4}E?P7LG`|jvCVmvdbVWccY4J#2R}pY<z2T>%rWkQVPXOJp^xYNFBvn
zzZT2HgT}Y@k~o|>DUK*Sm%M+J0mT-0-9~$JGL<Deyg58z*?KY3MH{P&5}I7HH+<1I
zTX0RPo@ys?|FT=FFeFObR28HaM2!!_j3(vU=74=7O`cgvyxn}(y%fuO)JZ93wD=b<
zlL<%<%$pR&80Vr&1{};{6pPFjB@1BpI>~ldc8V4!x4muMeYf8LCWWzyBK7`Hv@V>^
zGvu?(k@a)W|C>jR2AD2oJs5n6et`LcZb0yk!dgz1Fbxg8j$C)Vh<>p_D2%0@e3P8m
zAMW4HXJ#tl0GoPgYt)zEKM>%O=@N`MX$5m_nBvdSj^1~F#@iG>-!n*M&<;Ub67ItY
zcZ;!FFnZTYDin7%6ww~yyGlk*0<L6m<rg;!AU;B*N2&GYSOs@H&FmBd`tL$f!2<$4
ztN0X|d^FB7)lFjGW=BjHZXyd&uV)hGM8g>Ipwv9Xa~KPqQL<rd(UMAmYMGVl1#xPd
z-uIbauBX);tdG6c%N6&!2s-38RqT{-%LDxPoOn4NrbteG=}iV`Q$-g>9SUm~<{Y$I
zFUC~L0|pU|#;Ys0)jly2m$c}g&mudc?U^j|Uo>%#KFmTr?9Xu_-%QS(EM)&&J~~_d
z%iKxL?pY-f(#y*=y)@WbGD{sm+acqR6L?n}4kF+zKK(-C(-rY50x66f^@1{6jK>VA
z)2Qss$7z=u-oMh*BVHMNs&a$3{hOx#y+Nw6ZGGrv5lzmBJS)oUz4bbB8aUZ|tCwtS
zzy!DHjcn`ea87UPCVTK>(%GqTdsX|IUht+9Hn!RPIvc{@$w<I~It{?hJF*tUk&|AN
zRn;9<fW||Pb&byb_fe@i(q|vgnQMwwRqJj%;;29Jgs|WGspHvQL+6dp{YHMW2rrYZ
zC8G*?2BF>8c4oRq;|q4X`^nNP``k70)l1}x0_TO*VdhqpKGEc9J`(8}mB2L~{8W9t
zk=K`yV$d9sy9@ut0fV@Fi&g3PbWeRbZzh!S?^UID-m!~PZIQK4#b4p%vXozz_^*6{
zbmG7=Li=v))gC`lsYqITZ`#R|WLwv*`}}Fw<XPzK3UaB7+Jd-jm}XC$IK219z4d~p
z%p-PuQ+;XMy_B@hwN5Np-sqxx#R^kx_wiODx3TZyvHjpQCqw$Mz8V`FFICHk{iU27
zY(5X&OKt?)0iClZ>QjULUA@!xCz{MFI}!zws`j+3|D}@~Ugz)f^v+%`Df>DrG&n~{
zS4n~d15&_01l)@Z8;Kv@4Q8YolEQYqWXreD#k!Qr1&5{#!`jW|R4mBF8gXXpi@xJ4
zSxI+I<gAED&l+&FhH;&z;x+Szhjsj@9S!U%9U+StV-pY7Df9vYd;anJlVy(hMc<w?
z$h40|?EiROE&5Tp)jC+aN$&1(v?vQhgiLY9!Vc0h=fWl`Dvml5KHKsBS0_v_rX$Ub
z)+iuYN&uupH+VNFlWal5JFkn_qQQ_{D#O^f%CpGP8<qyI*oaG&Kvzrzgd+eM(OM=g
z(`+T9QT9oFgjuS-Xe!*MB8>B&{F|lXoraxIBmBiIgUm=R%^fy-pC@nWbslbvM(`C#
z8|>HUS0iHbo)fUuOLe6{3+|%4)Wt3;M80zUf#W^1JW7cMHwQ~EInpB$Tt&JFr6yeo
zAw=fwD9nI)T@b+9Op@?CBuu6hceN(~OyuiTYZrGmB_6BvqDMYxhmux7ABd{0^lL@@
zH71x)0o8P;5Lpk5JmWi*mU@-S0$z=j12Gzff~%*dl?Q*h9Y%&`ZGF{W8J!ie2jyt0
zHHN-C#GmVQfY7wE;;bJmdGXZk-ig`>5x7vDZs59LNDDU!)XeZ*DLD|5o|`Wf-NiT5
zbOdvGDV~8}Q`>hU#f87-b&P2+pHy|))1cJ4dm_BnjcqFJTl8HiF*L4Ej)~e5>eCT|
zt>&x1b>o_*5#Q9N;zFI!I!*V;gP;=m^34&9>kQDB1P7tiR`^AE7-Rr5=E*BQAzgkA
zFrt7~MS)=vE!=nH9{QCec1W9@aDaUu<pMte<Uo0^hDSI7v|9;}@$&%9ElSOtU%6^V
zPMzfyV*rjnD?6?aDBrdS>VoOi>O}b^k&q-rIcm&O9FJ5c%~u+%)ckb_(qf;w;U<#^
zCE#THkR%I8s>CcsQjb{Ofc=$u&h&S;j~)BI1PbT;Dm#D640pjNas)fqTEi7-?c*Yi
zTK8Yz9+4oW`)Y}g1L0zA4Mr=Oz0_b`72QT8Tw*Rbjtu0wiyO(5lw1Z{J}r2T>5CL7
zqdG|F(+zT3Msan-eE+L)llhgqgf#>~tpIy4g1esbiz*%G6U#<{GQS&1ubc<8<~LKP
zR}WW&Td8hRT|=0nh>m?KD_G&&QGEFFL+~$hnwP}{)*4+&tV>n@>AE4os970IxmsFA
za}rYnr~?M$a-mb2NG#XFz2&W~aZsB3U6<roq=6M<*(3guH<mNSbY0>;3*~@SXbhn8
znQroYhDcvo6g7oYP(k9ZV|oBgqULaaPcH&8vhu!e0mCAyX^$~gLZ*{<_V<H1DhPJ(
z^6XkOvN=*;m%<H!yIytfReSnqTW8gkyZRj7MkekE{-$cGSQ^mgIc8fOf+magrjDiF
zzvc7$Z2`2cF6T6zpq8uSE~R2#7#&cV7Fq>@0;6J2S-KX${3PLbPR3kz27a>IE)J09
zqhyns=$mGn1FFo)4<)$Tl3O+rm&sodz2<%I8yn<%hLDc-PLNSDCul-s37ttbwP1Ht
zCzqz`;s&dBrNqV5ig7Vi{x`dAc*4UV<*{FmbZPu72Q~!f04v*b;^|vLlep6cJ<93#
z3=kr*O8~qM<Y9RGsB!@06G85PC2sGkK-4<Jt-+e7)6osVhp=3`$GeAEr9C}6gdUl~
zCrs6=ELdN!itfhqoeGLcX$>7~p;fN=A;uM<UxV*$`kIIY_XuY-DuxFM`8+e!5tCD@
z9m`sj!HL2OHM<vxs*^#XR>XNUpMaNNRE0ot5BJM`1|OVf3|*1i%}mE&U;Ksz23XnI
zq*~#^N$Yq-xOs&hp(0E^SHE?6g=&QFDE=)lj-{LtK5xse_-G#q#$BN_^^&JIky;Qr
zAcbqDm$+e7l@x6Ie4<OA#0cH25DAz(fXzV1Wujqp?Yj#ZI#>+D5wAEQ2jhNvu>D2K
zz@>;x$Sat((VEvO<oK~b*eu*Zv+PnqL*j`^(+ac6z*!0MMp(1O^zN^4X-H;@zptVi
z-r5T0GC@rgY(MuGqtPAiB_5r^2bOL>+WgXgtxlZNhutf}2))=fFbP>+i5lMS>-!Qo
zJX)$up@Dx=2S&>+dd>O(iC%C;LfWM#Qe&WRP?5&2NV^%MySY-cygoIXxE0_`1xsB(
zDomaG=c;T3Qg<TIs)z0Mp}k=*?BLnzVaX$7Q<^+_EbCZV!(L>xUpI?YL8v%8=%4qO
z9#G3d0x@!BR}&+PB7{xQ3pETwd&N}$DjY*(t98SZ`&i_#v?_^JA~tJc2HL-i3h+&G
zK%tJ^>|;Uk<*IGs8&8=pnIK#M?=7Z<Cm)$-alRNEup!=XvgHhD_lsFAtQvW4TxVvV
zl`5iHX)E{&f!oF`YR1Bb*rakHbXo~)b309y?kX$uxu)StH4k47%WqT1Nw3-PjQrRQ
zpf1W<TqK?2OqfKjKtZ~Ln8H{WK}%b~Hh8QEIj8P*-vW#5fkK@mK2E3Pn9Ns_Y1x=y
zA2kOk1HUEpwPQ*YoS}N^CFolK%9f%96nM?URE0}wEhiJ?DwSZRgqZTM2#D_61@Bmt
zjpW{bR8AvoL4ADOw~v<_Oe{!GuyiXi`h;RCHAX20V*!IMXlm-NYN}=S&Do_}Ni^EA
zstz3_d<rjBuo$tNvOuFdh#A3pj5oq%Ug^10DGHN}MWOZJo2>j7N*+4aoq3R^sCvm1
zHL4;|CRlY?xzZ-0b-ob#J(mh|$n)tWrze2Ydbb+ymlZbLK6c&IH|O$Vo13T@H7La=
z!><g?yfAR$i=a>~9YhmlEOVjs>@rNThi+gvrsOU<nc+(MmKcG!_mG$qqTerS#L<y-
z=CKb~M41|?nd8)2RE|^|$OFRa_lT@^ozAcs3W=p}IeiDvTW12sj2?eVN%+h`)ZA%c
zN~-lx3XHgsO8mV=nF3=b1hf!`J$)x7W;Hj*q#`9aFV0&{Zo{5dG&CeFjz<ju2A@QW
zLkcM)3TGsZoDjb@U`hKS6hHB#*VkqgKUlIwfBW<IFZ%~Ccc1SI9xkx^`qRQK&&`hF
zc_;`mBx6G&wFTTsw%ibP?Y3%Lwr+?Dl)||99VDN)Lxqq67<?6Y1>|FWb(6;r9&E{j
zU=0pWk<9(Xzk*+$?VjvD-96s#zd3sG<hMV^f4=uGy?p&_|B0@M%@7eq{lde!4$lJe
zDry?!0<5bCq<@vAqxsbhUwMbv?tpRItu6Y_=6pO2sqnfEOgoMDm-Z@Vu?ldN7MF4l
z4O+zWL?@G6XAGB7=74Z{MnFDQ&=u;idD&@PEA*+AYH~bA<VF3`i_U^aR>q0bj-?^v
zMD<~XlfMr5VMvqiH7tneS_^UkQ32j%cRod6$6Y8)WG@{KZ-m16PsFY?e*UfBp9pN}
z4Cp66|91D;v!ngv<M$D^GfeeaAJwyNlFjRKbA#88<9nlWy7MrQLPBKQ+S`4%6aE7|
zpy`b}7Vg9Cb)BTs99RTb;mf5{^*HXg_WANxvUK?9K{VL8lSDU>7+Lavd(&)ee>>F-
ze;Sz3k#3@tHq#A+<_Xj|Tp@nQtmuae9s^Xbs6bGZ#)g*pc6*uqU-=B{QVXDz*}2b3
z734i&;R2BoNk@iQtD(MYub2b>qu9oyBVm3lGlc}-vp2gR>sN6}IMG}L?@N-wjnQ+E
zf@~}*tH@O_xY;m{gB^cU$Lr1Zu&uRG?nz%t;4#0gQj8x4{~7FKYfC-dR{N=128wMQ
z#CMTKO`a`=P+D6rpSGiVL=PS$FQ4LHxb<22TwkYf5-zg^3rErxZ)m&_tMc+K>Oio@
zn+DA?s8%wa0*?ySLwX$G9`QU8TcRbeO2jU%D&X{hRl;n5Fc}P0k0`ai94ozBC1?X2
z&gUV95f2zuILh9o8qF!OxG+#iG`$WKfg%z?C(`$|02|xgto29Hym{wYLVOmg=7pe9
zYg5oqtxnjrR5yqeN|hkQQ=Z%K%`2|O)_YQ?=qS5z4Jq^2WDa+B+slQf9y}=JU-3o4
z&MgImj;o7ou2l^M{UO{Wl1a!+YSsG1y5Lrbp|Fyvi~a%GTKa2f(<g7%?M=K@WW728
zSkV^7EpN5{;KfXE^JOH0&G%5q=cS_?nbS~`b09>3f@10>`H;HtuRqFbhzfCPj~21!
zwPrgqcM`9tK8CmHiQ?ZPmX!FsHgKwwD}#?lP|CGBuRL&QUj4!yKVH)BiX0lPKOP9J
zkcFRXR<O!J8X^!!exX))UIr;ST}rdHBFVes^lt?+&O!j53aQH}pJzTnkWCIL@FC(s
zeHAlHo>SI4)Y5v&0`b-9@xx6COl4@Uq0S-q&<A_ok}7@Ipi>DNb*t4yTixLAfvrfw
z6-ig_$`bHvpIaCffR!6WHgiipPg$uZrt(<hkS$oD!|<*yHI!(j5(9qdR;J|^Vz5fo
z8z{oWn-J?>(Vkzp|4!Im{h9596r~_m(@>MKz%EElYu5R5)vx<!>8#>+VM4YP|53QG
z(^%_W)7%$*6MU;V?)TiEU1_u(ECf|c*+*Ch)ZW{d4;ACb5&dSZ$p8qnVCH;`T>A$z
zs}VWRme6WVDx_T%p;<r-S-A_`5r<ETpK5ILZ&2uSCRm~=>ch}*N}=M%I;Qwtk;E1M
zUaEPE0X&t2sSLH-v>0qa=?^UIDxFRRe-36e8te(12pA$XX`l`lSvF$C8WHh;z=p6#
zTKhf*x=Vb%ZCc7=3%u(TRbpVlj?rsBrfIMr=Kt-wv%Cr#Dj4t_7t-*S`AXxYVla(`
zr309V`IH1<7n5IT3y6y-)K_VMHLTP*g*hPuhhfue$@a`CI<BK}(T>q@S*<*>mPzhz
zYDxaP&;FD+RyL8sGLvNYz>Q@xJS%?sxPwBQ>1H~7+h=PyEFaNRg!*-zj^1i|wi=Vo
za^)7mnqo6?4$Pn2k!iUe+R=9N-Jb4xUSM!tj<~Jkh|A(?jbE0&5YbpTu)GQ81pN~O
z1kr}E|Im_EsPd;Y@9T3%r+~RGS?eC?-;lUV8iaWtoXUl;x*1jEwL+~}A~4SLkrRGU
za~YtJ1BJtrAU<D30=GL)wCh8vl1mQ^{^kGn#edu8k#WZw5{kWLj875HHubR{J5bh}
z1Dq4Lr&PFrxziQV_5$Tgyl!&_BA`5)v5JBOxia=MWP4+CvCgH1{<Cl-^I{nM_&h^c
zSlHUs$u)~%Ui5U2airS{_dm==-Sl$er0@K^qv2H&397YvnCha&WHPmYPy>VX=?ljg
zU%YsE7ebOjZ?e;Jli^+Ra#wz`3_WVO?#j<*6Ka3g6Y(PifOr~LFjB?MZJiFZCD+;D
z7Np1U)@HlyB`#n>Nf{8d^w09rX0<7t=E-#YW69;ygxJmKUDqCSUA1PM<}bqO%uPi&
z{B@Rc3C+DU*Yg6+myV`q*@b`u*x3qPKz3jf?B<Ta0$QS*9Mw+Sr2NrwS|d##%VwZV
zeP2WGp1j%Bv&Y;L{kKtq^sQJ5v~ls{Na)ni2n^&<MCfpE9h+ii8*>zn{|r(IMaTm<
z&7F^R$$$qf)g@d8n#nke?%}weh|>ixaO+=SbSFf2NRxqJP7TBqmnh++`5-y9q{Y?a
z@F|US<uXaA&FBfMH0CsC^Mj#+Ss7Lk*z*AD^xjP&lEYa>k538R3H!er6<swe2{-=q
zdTk!ts-dnI($}Z1#g>|u)oqfbMBM<aVgQF&)o&%JN$=HxP}v|-HCt*C;O_gJm{4<F
zoE3un$X<8-t$2_elb0pChX;%{{Lg>?4?6m3^`9rFtC(Fn&E2cFGemhudy9y|cAa%x
z%p;_o3%^=LK@24h9fA{9M1cyTe!025y}fCzxHEW_PkoK1xT?_CTF{U=;M!54smP3G
zmheHR#fqblz=w!29k|)`-CqL@qnKyYWNXL514EI!M#FomVJc9{4z0=o8;bVGE@Idg
z(XScXuD}--ZBk5q?R8pGY*JkxI|L_d$<3s0J!k$Q3j@NtHgZ=tcwsL_<GtqvqI*iB
zD0A_)E8;@W{nJf0_NeYO?gjqe@MykBP|OSavnU&6Z9v2u<!6S^d+7d@2S~Sv(jmX&
z>KH!D5!A$|N>Q$Zo?LhKB89M}cOa}0>`h)e;-5=zDL*ZH<-d*`tLW?BrqtQj$9#G$
z50BMO8@J_#kmmNbWH~m@NA5OCjQCo9K3Y9e35QVp`~ke%gZYcw$?9$K7vgWb1KHQh
zu7#9uK58f3Z=6hjuKu59vw0+y9!XUilxSBZ2rSh?*ymEd1|RLtE~6rT(li4i;X|fH
z*HJq`p%>Ghbt5h!WZOQ8Tog@5ayd&xG*QvEfA0Rd^|+HXy}Jkxo5yZTZkq2q;k$Y9
z_NJ(Qx4pge9b;OnA5IwDH+x&_bNSmNNACVpah?Fg*A1UpFm83Zs=X0>imi6rii+|j
zcV1pOX1G*8^yj8T^r8bo$TwZTW0cIf%-nAm%~yqAeMwDrTktdbdEaZkZ>(uagE`O^
zUUfg6)2Y6(fx*0QG-gFH7bV9HpNBxJl)BA&($o&+1+B<IVem=wl2UAUyZ3qb!qMoJ
zK8;NAPnx@4kdjI>bgY$8Ku>yBEas~Stf$T4nw?2{`jb}JDuk=kJnH0}Jev#=Pf-`%
zdPy^Uum=SK{Y0cs2~8t1uM{|uwVGvAHj=oR1Ej!_m=*m?BRmi!X+=*Y-G9fiBuBrU
z<OJl{VTGE%I^ya{Yi+B&QH;tbr_rE(=rr0+7Ck)dzuJAd@AjnW{aR2*p%6D4Z;tnm
z`UlS{Pci&v<M?FvWWWFH;K)4#Pi!^8p_=W+@&57g!RuH3Zx3Fe)$rb?BNAar-F(=a
z|1@tlo;|(owX!!nYc?9>%PgSVcU-b1Qrjv<;@jwr-wyLxOVXmtCnvK-))5bXzj(_(
z+YK${E5c~kQhJq-wvP69Uv$A3hf-%10mWrU@1Ha;g#S7{#oa~sOKppIw(bghrjl)y
z0TX%l&o6dIsF8Wol`L(Fo~{EF^VU|TiqN<@zHz;Ljq6_}X7$&w00hIeMB;U_m3}$^
zk9UH(R`5ZP%tA5<G?>M$*+95q{pNVG^3rIz4_dlOZC$f6eU}aU`4FE(TipYyAtQoX
z?H<4crY%N#R^H(rl<om9ba1D5Fs?=all#&-3Jff~mtLnp8>mhK{Lrq%R;65PI-T~(
zXN=qhh|@LxL@B)E8*{%|&%O<vdS3Q*(VzIS=<$pPj=%k@cOSiobe}qbXsq_H%F@#>
zBm1L0^zxz3ON0+MFcCXK*W|`e0_P5Q*z$nt^R#(Asr@Z4YR~Q_?CaIzx|dSxFc$mU
zfx|0C?uH=S>4<#z<WydDoNwL((aXf}KTm`|w10@Z@v)?ij|p28rlP>EVq23{fF#!E
z(=dQrX~i#QC!Wod=-)DuKnOspL#MrSnW?uH`(JvTWwjzP{WL(KL=5+bUe<2#q=!{m
zRopmQmft-IuQn<-e7KQ3MZ2rr|2q<D!kRR9l4w;TIg2~vp2|O>CpHlG%>HRIPblLe
za=?xkQ9DU=6<}v!YPm1Uwq3kHyv6PKhi2`rxTob_y|%8Q!`b8=;KoD)VN4W!s@YEn
zmCAunXkTYp(mYIwD;a^cmQBZIoirw|6=hGOolcw2U%!6-V!!Vc#{Qr7|JwY)4Ok|0
z+EmfH`GYYKc|h^5X+pJ|z!Nt|nS38<gV|60G;fBTUD4a~{a3pOeMh$azw95K?ElN|
z0XuF2Fu%E~Hxufc?GLp3^5E4$-vWLrv++&*5EGIrS2$g*=o)XgwXD`)z!NRX=jNu@
z=-fZosdTEoY_QI{1`FPwIGJ(hqP$;u3KcGXj=%3ajmOd19CF(CN-a;Q?0&0uwG$^Y
zwQvBy=XR3&k?eFI)LALie*bwkzeRtcl+Lewnd)*U`CCs+FD*G{qQ(5JC&kFzH7Y%v
zWv%-a)uwl!Lfw1*ucB1!C`W7kEbqN{szu^8E)ePaHfo+|Pn<b~`=v@~KPRG)>?r=r
z*CA@I3~hZAX;4(3cA^iVJjEZ~r|NV+@hT7%r}zt~O_eW1X^K9%Z#vWcN>BCgs4)4@
z-ba&-^rlnp#=Lj|t!dAZYpd;#Uh6k_vF-VvW<R>7sVdz^dN-N+PBK`fC;e6xr9o2F
zltMeID7ltILF)B-92?$u<9^>Z!o;<^tNIdV|6(*2wJD;>irPf_qS8cat!hmxNcI;f
zO>8YvnS@*1znivnKlz=!{!4Tv-^j0^DRDN`kam*Ozz=?icOz1i?k_1y_w}WqF5R!F
zOZGfgn(l*(`3F^{2@I+Smvqa2(Q%Yh(Vp(N_1mCC-TE1{DWr{NKLu-7@FDPqb*o^P
z?9oZ@x!tqiTH&U}`Tx*m+h~(JIOYwe{bNbU^D@zEL+`+(1<dsLqS6O#xqRdMSsSZe
z(w&tz^j+>|b!6aT>(xeOH(5`w<@(zz2E6JU@DlyeW4=6bH~9Vf4Sv6^oOEq3@%;_L
z!R>v&A?z*c#xCAl+pFB$VchmDTXp|)QHl<I3^_O=rk@erw3s3BN6PLb?<rynC6-l%
zSJ>8SZMZcM6?$iL^S3`M1-~D}Z9xY+fR^dTB6_0?CORpi>ihw3fWW@ZN7>Rl?f@+2
z7v0DA+dW6S<Cc7bko6&bY(sQ8%I1-Jrd?~}6=m%>Xqq~o*3Yp{^oneGStkM$I2i62
zgIH3Q@Jze4XYW^zR4=pg$n?<P{6?ElVz57r3f5?y#}%csK9{vKSve0KsoMoAnQOKo
z);g8S^qw>A6V##_sFsmkJq%uUJK=up#1lOZTBeXD_BPW0?&IW8DC2UpWDKGN78j8c
zxJw=I=f>J;$6HrZcic=~nwTIf{KmClimi&iGDO=a3`qxLrTr>e-XBEGOaAbO<n)KO
z7rwCNUUh4)(dbMT;-XhHyI`j9G*y`#%r8r`i`BPSU3+hF?dDn9-obt*C~9iC>nH9y
z-q^5QPiaY#3<kGfDFe&io&~2H#0?D!M>R#%Sr&g08jK29W3Cnb^}^i-9CB4_ZGOIW
z_IT^@<Hz04zxXoiKDv1HMfa<%uO4)V7Z+RE*7>6>yBN}59CX>+N6mL5?Y4Qc;x$?Z
zAtKwdK)eM$5W+Ko<oDPKZph^>lf7(I=8Lk|w55JkTr>F#)yFSkoD^4UbC-DLBI&rr
z(|`)OQspw1_>OmkClnUp1Q+kj7p1GCM#czbJa(&xP*t((n*>=wpkz6y1T=Tsj^Hl&
zl{Tb0_2nJF??eitjzQ$b?f>ily%*M0)9P}Kd6979f%h^FlFeigR8*7;pQTe-BE&cQ
zAc<cXf)NK&K_HThp&LX#_%2XkAibU_;5ec_UhW-gN)IF9t}=+&PPA2_Dr1Ij6ukl1
z*_)E(!U0btfMgP57lJzOGf!j&oNVO2l6pO;GS_Ccl5R`2=4qqxQegt)sB0hUn+$rJ
z(#k9wiGg0jeqG;M0E0P=Orj}fC>|!YbTqkA@)pa5yAcrRD4C;-7U5dr*$wuCl{SA_
zI7Pd1!dO`iK5(h+qxmkn3W)C*U|yS5fquXp;%O3GLB#xov+0AfCI~FXnZNaH_UgSr
z{+BM6LvSQ6n<+<hXe5KxQrn<YiGE<5b1lZF=Tqt#{0U7EIS^I0;Z)R2qX=}j^_DBC
z6d->kjc_IP9q7D<vaxP}5?d#M6D1-D(h&lqHGWWDD(@1bW~*lZ*mOHQIGDU-!cDEy
zWW)eNp==Fx0Pa^2l_bH!yLmAwMJdrobbus#Yo}zlf^Hh*b`A21)(;MH3IB{T9^}iv
zWdMq;6yEAdeikTH>dy@eDpr*WmgaRrlzM;y5Eujrw{sV{PAeI#avu#4;A3GicL`t^
z0C5nvX}ZQSM?(bz#>&Vs2OHl2E;|ttE{iM_!5VmP-N2{BcUZX1tr2SyOK0krOMVyJ
zd-O+i$4=3_N=E|LytvdMEM^z!xfG;Omk`EqC;uB6h4~8CZhFp0F-^~?xC9xnsbY_!
zM>4U%iUzrn_qa(Rno&1uJ%xqX&NK;{+3#Uc_+~(oLyYIk{OzoGee@D}dW7CjW3X_f
zrm}=Q1Gtfs*`@Wy|K(^BEP<IYrJ~cuG>mkxD7<YZy1z&bu_5@kA#|-~6Xx{|_5XBu
z<G6)e--vaTw?-A-(=WR6cb8wZtA$ixZE$DW>GS6q_+Ws`Utw)<16lGgSddgy(L{Ov
z4WDmpxD9oiRZaI1i;W;OtuBia@dFhg=$TeY4<XbRCFcdaYC+8+iv21r87A0N>ZiUH
zN7=Tun?cpZF<3!_tx8O7_^@Ju8DQ%NtL!X@TH6JlRbWyY9xNK26OJ_BB2>={(kTdv
zd5FcRRCE{Kqs%G9HqaZWnL&fshn1c?$>3!7F9$FF8vVj9V}Wa4yv-)cTP<V`*-frt
zAXCasZ2^1tOJ9F68JLMk7}&tfF$2c~ve8h`+y)`OYS|6s-W=i1!>&7N<}Z9eV{n}K
zHCSs`dIAC5@h1IHs?gi(doNzUdDcHXdi}@!y%QZ`<<X1Rd%Gu2)gQ<anM9%^FZ64M
zkQz%)hhnftVe<HhFy=CvJ8)kk(jTlgVhw!R)zYUtoMl%zgL)-(8yf}X2nY`>q-+_z
zhT+>wUTQ9}Yh;umEryZhvigZr#~65qYVa)gV*-%nY%nXVDznfI?<4)I@%6prDO#7S
z*PvT|)d2dWC1<srXf-&;Ob~F($4)*5FfXw1!|5b2Z+V>xk_WS2MmLzJh55UCE8vU>
zEVpHY>`t(?Q^#)iMkx|}q1m$k4pAmj1(qI2M3<A7@`>u_8p2r*bd+iIC?kwUV+&Q}
z5{<^69!#bUw3?|6dGnk@?mp~(-Yro~bl%;5u>EN3!S;4jW2bt(UZd@S9wthZ$zb=@
z$#+Mu4-fVN=W6M7;nSCW@ms_chowVmTDpQ|8s2g`0&Bdn3@tAy4*a-3DN4OV_?s!Y
zyJYS}=dZFM-s|o=+@be;$?5JE$DGBnqj+g;=p*)x(dqps@AJN!lh}$(0N&7pvdB?T
zvERxmpNhaC1S0Bf`7!4ze2uIp_?;9y0~ryxD#RiSRa{>ajZ%sOS{gRedx+-_r02@&
z!k9Cs%~NPs$X0)CcGgEeR>Bmy_MK`VB)6mC_MW+%OI?Hqzqpr<#T2?ferSK_NJcC1
z@zI?}1<OuRnydnyxRb_2Lxzv1Bd7ORJg3_l84aQyWnpQ}(&;n$(POu$37Qe@PMo}P
zeN6<6XvpmbaUnHxq}sN-$L3ZShyF?kYQDbQa7dwm%Oixz%rd9;P)~4D%IQn;VH$*;
zGJiNL=EZptLCSJ*&gJn`pMp}`CTc(&AGlr+q~Pw{L4b^jgg`U%l#$ISiy(E&^a5oN
z90PQ-jRcvRKslzt<yL;px%S5A(>{}t>>m^)g>{Fqc9P@yFfWeT)u9iEXf#AJGe<@E
zKq9<kXf1Q;PXxE5&v=UR$;u{MNW^zb@uWGK{^ST2pkYr=oBzCObvLE`ZZL=;l)2Y*
zq^*Q<nC3GBA)umEX6StG^%v6>!a}YxQZYVzt`b&c_M#fo3&KPYTrH(5k!oen90!$g
zc<v2m1G2h3VKITmt0?3!73cFfoi8e%4&Yzf6DSoEbV66lr$(CT$a;$^Ta}xpum0=E
z-8kpw<d+CS{BuH$)}&!Yc`TAsLMN_lvBVR#vFU0{dT5+krC=yHXu76qXkleO8d)gA
zow(x*wdu-nELNp}o-(-S&ATCSg{rn#W|yikt4<xG0y9x56tFP36KSBQBI507P6C5E
zF5W2t_@Rh4^%qrVi@A}Gn}Ci)pyhoz!c|FPQXs=;cTvhqPV;5>`<lIa3Hu(UP^>tn
z+f&t{t!@sW)a)==?EvQ7TQ;L(Co-QqSxlffnmFn0Ep1zUF@CHyZJ6LMh7m*RyCP=G
z$Jl*($+0^ug2c4O*u}H)G1ji6MFu;`oisj2fD42@mHdWc#L5-iA+ngF9{I9mSJ%_@
zd|N-2KZm?9=w8IVUeGGDGL!+oSJiPWf2=2%mHLmz0ztJ#iQinK!*@u%%aSjOzKYUC
zi`UF;XFigIAIrhty}X>|?#9LO`=m5`e&5&c(cW|4o}|$?JPcaOs;cK;uAy#WF)_Rl
zM|6$T`1@*taC+HASDIlxFD^6k*c#I50i<x+@EdNXbAdmZ6v^93aXre0s4KvrC+UZf
z^4jI=cOaqc+F(B9|Hl>LG@5*TDKoYS7y34!uX@+n*|Z%}ligI~X^1>jnVEn^PTZ-C
zdP4!M%}0HNfmbljLv@UJu?6M0g{#1kqBhRs0uN1F*1H_zrcm9~aRNXvBx&QqDGe#K
zW~Vit%~Dp)VKX|&TNa)x>_MC9lR&aWnv4p;08#$tVOsft`&4{3si1C1dT@jg+nT2N
zux+(wdaTmtD_t_gh{il~<I{YIhN9v$en)q9cAOp)wQk-M0s5n%&Ud`j05Vdt6r>o}
z-jN;pq93EML}=3rPkGPN|GP3dsctlWdKU7tks?bJ)d0=zk(3_RiKN_NxLpaqLD;Jk
zIU^rIKY?&M4Zqd+GNLO#D@DMmjrpVcGl{0JDZ#Q-avV;6!8wQyKwegG>j+y%lAB9P
z`h=B{Zdme>_clEn!v@v!juzBX6$DIPiA(Qz#qGax>{!Y+GUJxLlhcgKqOo)sBs5Y1
zSJHD6dgciKgoY*f6&%{RFIy@q(6#%n;q#D(PAVM&p+UZ`#sJ`DW-K-uzxp02a$$C+
zDOEM6CZ!1~C9()sl~)n*02?X!7go2yk}@c-SYvWh8K--KikpyEvRTE`DZs^YX_Nv;
zB*g(j!%j$=*#0m_)m!5=@ZA(MT8+gE8g=IZR^Z`qUo}pLF-muRB_CoXSpyj~&}DHD
zsa6!4Y&R|f+KvceWNF4B_GHX7cjSVwuS`Sq7kCiGc-z4yGYpyvM*TY}R$z8lZ38k+
zgCV<DQf<cCkkB5(I+fh;8;vGG>8v?RysLLr`tk^ZjiCVi3YdDO{)SPbm<-%G;FY>G
zN5V$l;a=@Z&)x84*KNikzGbcUl(eALr{=fM#OfE{#IHD3+wiJKFL{wc;Q{84JE9&s
z9up_{Qc8?C@)?9ejc!zAp&x-p?W854ylueTQY4n2<-I_dwyFQ-^zJ&jt-E)BbORMq
z?c!TL*wnQOQ`)@eQQ~zW%Pz-&LNRhk5d0Sp)V<8i?xn*7BJsgrqRuL0Ad;_SX8iQ;
zI}I64Hw>PI-6+Ze?BdLEp)8%WyXL)(CIVH*UR3OGn!EnK14fr!>(>UGv|KCy1_N9m
z4iBHs7ou_hgT{xkIq53@TXiLqHA@*@{risZIv>ujy1qA#vbcWcRPA+R<fZ~qRKX61
zc=sQ+o^Eje%k~5Gc}eU*8Ee~+F&+QxQ#kI+l@J=~h{4JI|3qyMfUFlztH6EKFgAMV
zzxl-jm&-{ON1zfDSa|7z_itH|2l3vM!=6|0iqBVEVQRt~ixmo@MO1)vgfKU-(Txo+
z)DT8+2%8TxQ>vGKLxd+&CY)??anXs8h}@kaKERp3mk3RWmLQu;z2uV^;|0$>)M=q>
z?PV>1e_o1yWY@bzVon-n8x=f6k7(zX0c-H7H{LnI9WJ`scznfumr2nI-g8zPkXA7)
z+|ufcfy$PHYmg>?JbwKOf@6b%kJ`-;p_!JY)v41=6>RuZ>R6&Q5-=Skp=Oj)EnrwY
zEG~xzTp)#H>uKe$Lmg=iW14XU?o+*yA{?C46{~({kt=-bpQ04%l~u(){dPvNbC~?m
zoei<H+_~`!{kE&|8x<TwtNE#7t;OJK?vPCLS$2^;NlqQ>(O7g`m^;aRT$%U9of7Ue
z_d5%H@S)_a)xUFMw|-`Ki-ue?Nc@MdEvHJ?UdS;p4$UnL-y$}l@!ox=enLO$-Z-7M
zTIYyveew-*AA7ytnnsyuhePnb-Tqn(`u-qb{(jAs5%pa=Tdc#^R*LbIfG9qvZ;7I#
z2jE(?VSzABO~Bpr3bpFNgY@#4U+-n3(LT-c5)kIZyHhcoD(B5K=_5JMNRFmme<W8m
z`(GE$bj1<it^}Dv{A0VpD15N_UQG4>aKh9*K5cyVbK|qmYNYttXX^;@Ge?J&FN6p`
z`|RAWG#x|bPDpxdiSr2A6rX+enNQUeR<M(tZgnJGx9m|VVMW}n2M>No94&sv4x`rD
zWqorw0xWPKWc=c!fN!a6&9j-3_h&p9q{~#$fyrr;d}+D2`+>#x17XDV#MC#s#C&VP
zxh#jn2o9^}rq`2FxLto8uT_|XF?8FY->OUolk8fn3QB0yKpM%0N5%C(ZI?9P1}hUk
zy{ob%{;`S$Gdh!Mb!bWTrqD<Gzbh>Zrq<K>1Qc<EK*^aC{~WbNmiU$<zxR#LutODk
z<VlntnA(Ydd~LsH&z(&1#G~tL8rQxA>bCC7YTR#E-tXmba({R75_y034;LlM2mI!~
zf9K2%6InXh@H@J?5j(K@K@U|uT69iSdq{`FeIzZtp#LqKweFwe!~2~z4dHV)cXvIz
zuUj(jnPGuxqw)&Eb!Wv*D_R@&D88~!==6P~wk<t+g5mmExe|eCa0rrWN0J1RwhSx$
zjqCIW8F~1zH+5^?;vAje?KldnSjwT<p$w#{|M|sDE82c?pSEkvjXb&q!6B<xbwVCk
zxrP&Cixs}fs?=tb6U=otNY5^9Np|X_`w!z%wB=YVCNiuiM7(u;M*S~d7PbSQvG#+W
zFy9|*%DcPOUC&cZWtUX_$i5-|a~7oIRt3idZgs1tAyx%F{EfglWAi3Vu-6$)E>Yca
zKUDQPgvAh77@ek&JEJ+!cnDhz{-DRWfr*QYw{U{8TEwMZS5OwEolg}OqHSu&Znx=F
zYNiWvcR8L<Kgs(xo%Yd8pUw2884q_oVK)+7j}lICQOM($Cx?y3_o-CB$N@M!%nI|y
z8B}r{08>D$zbAL<8mm*}16r0v+NqEs`dkP?^eMVZLSUV5p&E_ghEAsg3kNVQONV<J
zX<zX+eDv99ojxTG|0wgguzhLZpOVuP1Z>bc`*98nRQ2O$Y$>LMW2p}<N@=L&=l1UV
z<K$&Jdz;M}?fFUMfvQe%6CcyvY3-K?;`O@hrL3(%x{rF;Y<m?l<d#$&1Z6ycvbdOE
zr&{#HQi*gly$G+jtdxtXkJZxbXz{b=X?H~tR@^!kTx^aM!7OO7q={n%qfr{wwO8IU
zN%sGA>^@(hUJI-GNv5pp8=^)ra+2#LeV1QqMNPDiFKq4{RE+qlP4(*C96dYsh{Sj7
z2cN9%$J$bUDaB4;1YqQA%;<?jt9g@Bf4j0{`Q%I-#!}xA)zD$8{QS|w?a0ltIGZqu
z@xrfwO*Hv-F$0U2LV-6nmfA2XRUo~mDb!%L$fraj&yvC3(f;nqzAtCzzy2CBF|whp
z7=y+L@;bH3z19IIz?F`M41$TPQ^sN_I~Ot3HE`8<yEsGU6XUn1$RX->8E*8%54hW%
zjgxMkbm#7$2|sGcn^(#2XT!2<JJoeU9%_SqlXTyN`F4kXW+7Nt>D8YNM=&g3!Aj1A
z!A`}PvU>blyu((cKL2QX?vN+h+cH^9QF^?~*^;@rxzO(ad;NxgeS^tnm$)u}FaP~U
z#{7n#OG*-Tz}`(d9x;hiE+VbETIO09Jh0D>uYOJwWM%iFq#$uMTGoNYlXq@kfxNbe
z(X?63&7OO*^kq5xFR};{5ElI?G##GFBJ5Gd$S*=UROL8MXDqE|@5N&DDdYz`+_Z3)
zdv{VJmjhO0(K9rZY$<I$#H;$+t&yel&B3P(1iYcEX*o&x?mSdBF;4aP!Q%%z_@Cvm
z%BHar3kl-P$$zDm6^ohQzzP}`jwn#Po$U>la0_bl2}(MAfKs+4tbs-ONtqwxWL&dP
zSO>NdO)%+>fV%O-|9wv_@ByE@P*)n6@0A7}aFnt-FKf=^7)7e;jlBrn>V?R%D`tc^
z4aEvs<L4tP(xA}%xGQxI+sj2<SVYCjbDtGzCI3D<J4Pht+@c=JPZ49ZT2S9LTa|9_
z*yF7wT_RC8Zj4)@oYDuz+Y8SfHNu^M0Klls?^55L5L@CX0F`0s(H@~%49vf?`I%!E
zzQ{HUr{%1=WqYe3*&Qu?fWY3NR9F)%lrp*~Pc>6W0M3q|{VA%q<d(GOGex+|*<>@$
z&(M?|{?#pqZ_O5iNc;tZHTDB`d|ZRZpE8SKbh{!k)*wJCVm@41qS3MXArDgXJ~}D_
z3L*knl_k)#5{l2f`H1ontqGFVwN{NUZ?=1&HODO8PuxVT{WZ^+$_;swu~u;IZ=vAd
z#>Ud#N+ozt9!eUH3XC{fgX@wfOaAUz&8y4HLA$Xnan~CgfePd#yJkZab|3)9$&s_o
zyhF*AvnqxW9eJ7vB_`YlVPqDU-)=mVNnNQarnF>IpU?n@Q88wnfOpKrA;`f3zNI<q
zqiapDLSv`|0m5?CqN*yAvGFJd-WWQz2UnE1!G$IumVinsAx=7<nD|SH+rTQ!>9Zqw
z#Aowp|M&!{xpyxD(kipjMHiQeWqj}NcUCYGkCj%@MF^{yd^^js%@dR<a~jE{Y_qEh
zKS3U=Q$bbejpAwSEv+Htw&M_9n$hZNX+wL9%D=Icvdtdjv_YSp>~0&`7Sw4$#^67D
zM$k?3rGr06wEj-gs?2jT9k*8%xTvsA9+&5Zowd_nXKpwx26hC1!QJq1W1}Or-g4%l
zremcRUFLiaQV#>#*m%lha3@7Fzpm@sJ<1S7bb?(%vN+?drZ>v9uyurbN!e4!iVu;y
zLEOmaEMO{4zF`W$#>U|+f9J$p@G#>E2ZG3fQENf)jSWS$N)*aU-`Uu}p@~QSde<Gl
z?aJV-CwW9nf#)#SA|(ucsLz3UqHcEvf)7yr)-4E%3%UE2aqr=?9rut%O&uT~VWCq0
zQ}Uevl*p66IA)r_^g78#?qywHTg6Kmm|F}ClU27M?d1etuE=~8(BEnCRXsfNhGYO$
zz_64G1MY|21l~!3csl>9?<|A`SYC(Y^&1;YM;4L#zyazcgNse~s~1N2bkME?F!5(#
zBK`ICo1^}-gX6u|N6-3CU!U|(UjJ$Tl?O!H*jPHMOI?M;)J{?<eiP@cE{#C5Ky3)i
zS)+AGv4@pnHPt(zR<!2nVzL<(^wMOh)eEEz4cZz;s4rX2AGm#8p3=MK!xxH#jHGr$
z;KH6|=b2*!Dv?LX$AGywf~zAJoi`1F_qh;j((<SQIOUov<ii$}q755#_r;6X-|s)`
z?|rxX>eW6RKeEvJcmLp7^J{j>TAOY~fV~np79hc-*tp913||6HSi!e_KcJbYRs{RN
zZ@Y(wFAfA7AoTTGC$J;7o8;Nc((=muY}rwZ)Nc!~eb=Y<>?M2l-5MF|aI{Y;sAd;<
zUGjs0A9pj5u^56xJu~F-X_xp~atvK>ikvun`|^A$KSsd3O}98*cGirsWqm0Q!<KIX
z`BuSo`v9V78q#934k$eo3!D_B@UQ*s5t0@EStB7rX&iM)CZ|91IJ&XHz>D-<;KCb3
zXVz->=EcGB>th9<PTv1eL!#7dc(<6yaP<*BvZQpEuxb-<$o_SKvdAHPx}$0<^q|87
zcc0A9d)C;=UBqw;hG1=D`|>yvz?r4UI$}O?mFhqhy@;E9P36rk{E@P$R+w37a(5!~
zIPubE>9w&v;-5wK9E^o9!CwPf5#=Oh<podji8%G9>8#9J<MPtI<yO<p4UUYT<IMNT
zVl?`?3X54x-S+|kSxnhHk501nU?=%5a|cJyKh-Q@HwPTnh1A)L<X?pbMT<|KxCYu0
z40ti3bFwv%HjOj&f~eky?_>53=k>Qg%YcS|=q*2fKQ0HHq0K;Kkta?zV?yupx;Izc
zQq499(f#A=cztTlQ6ukSx|3`hnGScNas_N6z^vvX%j_f%zkK-RmmMtS^EU@Co*gH@
zlYjJI?jIlTKHtX=`p^E}>sKfHuTI=A&km0E_fGsfzS$6l2vqXI{cm%WPZr2ERsmrr
z6wYB1J#0(yZweD`Smp2Ao(gogx3Jr$H0|#FiMyU(PGDte1$D|@Dsov3Eqqutfp%^4
zx7t;j^F2ATa-4Qb+LXJk`elV`+~#`foPXW$=;?F5+C19defHO8Kq;*d+MXzi0_qY`
z6!^RRFL>yCqot)YqU%%X&~F*7?X{jA@AQKm>R>tR16fAMPo|DWu&Toz&QRgT<X%`_
zHEly81bByOW;JhVuikn@n9)sTNO}3}CE$CVjt!$uKOcS_^^K?Ph@7!SV2cXh;crY@
zYjBBXdOx;&@-R|;#a39@XB1;zmhHF_Ni@xTnEb{qX6<5aFRwqC7%TWx26!;>;>V6K
zabr%ZJla5Qjj&#njs6)7+Og+sSR0wX*{_XErI(c>v-R~&B21>If0cjeAy1&y8t=fk
z%DZxmd4q@|8K(VpWgx%tjjdjcMrCJp&<E0Un8Mf9w^W1TJMwSeXHP+MT0}(7F86<$
zwg$id=imI{w?9XNeE*FTwVRjCw)@{^*i(hMuJ&f9irv|M+mBy2RvpvRd%ykJPv!j&
z?xgyoiHktT%wrl(1Cn?b(>0oXKr}dh_NU75yoPX;1ptV(_l1AE>1P>Zoi8a7G4PCQ
zt0ziFJnSQNz^pR~$%{24>1NY<UxJfn124-<*tjVRMFN@O=M16+b;|lp8L#SpoBX%Q
zk)9qH4)YR8JnkHsFkH@WkOu@v0ZL+#reWAay+OGDL}w`D8`77GXbS96vlBf6@ZU)x
z%dzKP+h>&#31Vz+F3Q>FSw2y7O!Y&rode<og7D2WEz3x0ue?r{@C*S^vtm(>ZjRsP
z)9BrR3+%^i!nRZ#5xF{&%cC-j?}Pjrvr-&r+n*j4RNf%IK1H)#StPyf5K8gH?`u!l
z`_jqf0ldgZP9kcx&H|G;i+ZB?-L8JZIOgj6!1J!Y#L5oMX2hKI4y;0dKjCP@OYiG!
ziY(0+AQpD9_I{I4u?)Gq5T5InOQ#+>ZE>EAipizF^xBof{cDJUfwwLuZ^0tit6Fwi
zwYhYX?FSDYwBys+iauuy7Tbw;TCwO|OP&Eyr-<vY4OSTf9XHv0xAkDt?!L{KZEo6<
z3}Pbwxw5awTPvLK+B|%Hd{Q|b7It4dw^C<PD6b0(2ka-2*1ie*O0A(J*(KM{|0Xc5
z$pE&r-~P-sem|(b{J#3<Suwm>ickDGXqK|7@7wWL??XMh+Fgnz?iFvBPno}YJdXqE
zq1s_K1aIVrQby;!`&0IaKT6fXNMhuuoqqoImQzsa^2iZ*j(XS94T))#O)lqG@9BXo
z+cp9|Dn}?`@qp3bq2D^hz8od@i;o?xP_5|SR(ENf{`4Z7Sk<MrJvjY=>tx4V2bKK(
ziGJYE?I|Ar@O7hlQle%gBGqm&`0k{Vi!qDqD}*_;{3Gk?n;`jP6id&ep?IO2eM`8j
zf8TFTv@x<NtiFMj*#(b{I!Md;0Yc(lU$mP4ZPK(w(v~n9`|S7nDA`Q5+fifkt16|d
zMisVFKWev4@eE5;f7@Oqzd1%;QA_nUzxUGF*Ji$S@<zg#k8+1NE!5+a7Ip6S#>Ni9
zRHMtC0gw<#L@B50(uoqqePQ`@5|sXFdNV50VO{w*!?aJ3j{H&PS7ro)_aU7rl2}uC
zzh#&KcV{$j5|)#{410bqTbN6vrE*T9UJbpoHPTk+aAU1kTJM)h-Ph>jY$nA#S_v6K
zRsBQX5d^DT#|ph*YS|i<1o(}?9671zR&B+uT5IjK@RXwFKNjQFCwUcFJgT%|E26Ht
zxj9XK3Imu~$OsI#Y?~YeeX;I&@0kg%W_(-a|3<hJW6x-Xkob>D5zTxhK5<7AMh#g_
zpmS$u`J8wzPWXglLqYUzHR~;#^h%lW3Zvejv)-InG2wM1#}<#afNJgd^LRz9Ob8W>
zDM`<<0wbWL5wqI6e#=7Spql%a0#XXdw`%~OCJa<eXO_Gwj*UkZ$HtOFx8~bedcGzb
zB^;ccM&sY0o-s7}-;%!|zAgE;#=mv#|LkAxH@6;dj$UkRxcAn^1#JG|-IJ{c|CCM6
z3%K~7K;{@E^0CKz{<n307JG38gW+fU!eI2Z1LOsy!KlJlHd+&>k+<DHCD`!0)eIvb
zIvHvT>*B14fzUVvq@Ct;?fB^KTjCce1?fe>psbWqq!>}%=T7^B+g@(<DrlNf*SS;=
zsK-zsHzfJr9&I7c1c5ZYkJ~_5!7yO1*<W2hwxnXTML+?YZ_9Q)+OoaT6CpqU+$^Rj
zQQt|LsLS&6&rFqg|Ngz-NrJF5^F+QV@ucya(>2>dZmcVS3@|@Vrd-~?!&kO%_uIO~
zb9YxpMHS}74jlaZfT=gXvKv&ZwkK_chah_dleh`tB-WGF@!fXK@r|%69U+nW0{tFz
z(6_F>am%#ws+Dk_KvZ(I$Y76<XfM%Mp^O76NdV0YdO?Iq^ZnJ0uiuc@4hz@JgoHmd
zY)+oqNq3}p5WJGEqj?cMVEu)|KpYxp*+n4%Eez}Nq6gmEZadbUV_}y@;DccD@i-gi
zZr|KhQcPlUZ)wvAd8~W~bh&nCxyw}Q*i^ept{GH$LAXUkAG?n`D?G*Swwy~aR8_{(
z;2n{z@N7xAvIw3vvXMr|1ppoL_Rrl#%}8&FIXNb%GXsGI1|kSPj2`h3p2pin>9IT4
zB1e(?;_hD7B~|?4iIt8~l-Pr32q`%hCg%Om8dc!=kI6p&>|+=-Bt0Dt6@*L;pejqX
zEk^3B@WZJ%qD(sKhCm9M5JFOv8=XP=RGb(Fmx^Qvtb--e0R3UennND<F^ZtI-Q{zR
zfROFFEj&_=lXm6ICg!jziN9D%=C)8m>}XL3KN*9rl}6*$LjlygB&T_aWEfUCsCu9V
z21F@HgZX@%mTxi9GhQXUtR=Q4u=?b1F(dYM#Pt8I_Fv)t1MzJQz=yYz-~T>&FmPJT
zmizNak2ie|o55KzPZj0IKK8z@(8yP4<nyiVs2L+ET`EUeY}oq&q`{i^EVQ__jV2#G
z`09(O&1WyIIeuJo#zh~0j*lO1fBD5@_uH;Wpz*DY#cNGNTodTVU@=vJ@nLPXkgqoG
zE=byQcs;k0-*Mi*lcD}jJAEQsxv|k`*tNbiT46o|9gdcBK(DoxGpr9G+lr<_`jhNK
z)+Y!;#L~ic`~ki$CilG@5|&iRcXvou>ZD@BiRO_}5Z7=<v&j`>4t=9|D?%(bOyIK{
z4eUMDCT=aX;;sqA52U`%S3ujH$7M)%R#XMI3NYiFE&?pHg`U`<EjXXpBDa?nlMglr
z3ew{7u;;{HaNiV@RP>cjrE--OxuOCya@+zM*VN<dDE5eUYUsmKp_}IHRpCA_z$1L0
z*lZbTgJu!xONUY>5fLuFz%sB+kcAQIDmTAwz$8*Fm)f+s9_}9<zkapb8xNam4zIOc
zFQU5YODEm1m?~`0Au#I|hyd8q616%Uu3R(51G|4PCfgC_WM0w6L$C<eR+pel2gj*u
z@T<w{Iy);VO!Y1H^`5@pHZ6KtTSCGwG+qC9BqHGS`8XsI3%F$s1PDqtlCM617%1LV
zP|g^bA8MPd2+HLN3N=D#d@VzI!V4sdBpO*d_I8EcgHK6BVAe_BJ?f*8ewrg4;g%jE
z{BOmG^mYkj1fz9dC!z!fVl1Vmr$zb0g><I?e+}>j))GsXobD~$!I)L^n9unezH9G@
zMdQT*F4){LSWBG3CaUnEyv`$-=iVZ5`j=x44YjP?MpQ8rolM;KYq+`9e^+8uUH@v7
zt?QJ?zwW+#fwCrZB_KkMI~gM%)+%M5hN!Z*vkFOnzSSR}$B?aTQV`@tdNHKVY<`_(
zljOw<4L|T`<ct#St&S@{^;_*0E=~<LxbKI3H~F}GO#_30d@z}YoU`twPvPmhPX-c7
z9?-{2aR+l5M_S%gOf}I<?#M_@p;LXtK(^^(G#acQ9NyvBT#pt{h{A5Rquv}6Ci@FF
zIV^%kuP;-5(u(N4lL+lfw3~#ZgHS=IMy8F%ktS^E)P;!24z)C8Sf>kC9P_csWtE~y
zB8a2&M=(nFI(Itkjc=(D`ikyMu^G}nJ#f;*tCM4Q0pxD#gQS~i)Lhr{T;i^^R>zr{
zK>UL9p|3fpaq5$I8j2D1Ggbl^?7i51^K4)HgtXHwt|wNdRN=A|RG(Ujj;20dw1xU?
zAxP2jG+^X*JztM1oM0r!Z*9P(qT+iYp~RzdQ%Bg-6eRy^7k77e4)Gm~mwZyU!pK7_
z)T|mM#hs{c(Rf)hQ;fi3kwAiI3-1S8r@f}}1PHymbv@CtZ1Irc|B|gpt0)W#S~9g)
zB}8Uo2ZB3|!l?yELCrIk^ukN3OILRlTyE(UKMKdrE|YN9?%8&6QGycLJ-g`&9inMP
zXD-#UY-E_-MuZ(AMw}{)M>H_`Wd%9}853)1L~l!NjjeuET|?hS#pc;%I?4Z*4LfzP
zk_cva+)*mMmP|SjauoS5x2MSsQO}0yt!Q?ekG<5hH0TnR^TjAD*WNQ*eSOEZ7z2cZ
zcr8*o6@dR_9<6k>JmDn+mGi)l7=>brd>)Fy*_{*{WV4^95(~(En$NOqhdk*&|KtDo
z&;R&$_x~q);@mI)w<Jma^FRJWf0q+j^>N=z#<`e7s;4(@PL&1M-2e4|{$Ky+QiJ|M
z!rtsNcWArHwAZ~dORu}>bh_@T&-GaS-0#+!=RQMp^<$jhtjhv1x4oc{FT51)@?L()
z@TEJwyO`YZHL2-(mzU4Wt8_NK%bUY&Qrzji#rfOe*<Ieeyi<FZvvhj(ucN!X3do(i
zyf-e(yEVvauy=V;7JOdb<=yGkoz^>)__^ELs0)u;<ac_TwO$_H<<;4uoY&s_k5%uL
zlj8bfl)lX(PEfgyD?CKRise`1*W}e8qeO4}TlY?H&*r^hZ(d_$c)OZKb##&hpoWMo
zlyU?2!~qH~+`38lSM8<cVRb}EM)1LMyHQhe3A-EoEfF#r(W>)x{wT$Gi*aT^UZo=U
zLR|4Smxa`Rl8kq8)<Ohrevj=76$*I~i8r{6AiTym$?;+;W&>NVX8bu(nH=xL^-7&g
z5jrWqiwm4hkJ2;PD~aO7stazR-5o8(%Th#NIAQ0<#pJE#ek-?zJ$^1_F-1}vqMX1y
z`6?avI1X4t9wpzMoE!!#fR_lY5PC;}OV~6aj-?VQ?1VST%VKg_JbN0=530mp@^X<v
zS<jFcUQw-_OyyQS`olsNM1Mzec6XN1Hf@D#<(enhSXF#-pC?l$*mCvA?mD(9*7=(Q
zE)N{*?gA8Tm7=$FNTH#Z01=bGJj2`x%Q^spSGe}Srex&fGT5cy<+^2?YP3p`3@{3k
zmq@tzgdTO3=dARuNCv_8aCTGIuSAD%vb0WNpi(#&VmM>*Gs-liGL1fnl)J<yDksmf
z^6k8sI-!Xk+wwfUfTkuW4O}z?J4~mYxD+ugK(f;Bs{6=DgJR+s7wW#yO=;FODe{F=
zIiq(HDXG$i-y|z=PMrUPNwTpKjTtGM6wRa*>-n_bm#6(h>Ac_H7=+4&VrR6h>UKPQ
zr?F$01JnI?lHYTA`&uvDy)(NpYp$qAGf0VEr;>_;J&75h?jRK&r7nW3MC>q?GQK#9
zz1qZd_1)Ym1)vRJNNa+G(sMck9*A&4fRIykv7iHsO`>!TX-@$-GNc0g-p$OgsY*V8
z!GCp&LnqW<^gC>aG|F@HpWb&rU!eA(*nO6aTd|R<hBy9eS;EZZ1&>#BR7Gvb5u1*Z
z+_@X#YOA3jna}}x@ND1Fvz1IPd09l7NU*I{JfKc9adP^MmNGEuvAY7$_*?0p=P|BI
zQZ;_y#Aex$+-6iDyG+A}ggNPX<}zYRvO#L~V^$wZZK|&6CaMFAyxzeMsPR@8`A<?W
z_FA1f?%oDJ5Fe$ON|ddIeWY4mMXJLMBx&bb!<|M@zG2q4Q2JdIRxvrhc-g&}<&LU=
zZW2RD)+nS3GwGIWx;S%Jl>}!cg7!llJinyHMy*lQ-N=qk2WxHDqtUqR&3~E?s&?L$
z@3eOa`YDY4)P4;g;urTr&uQTR_yc7cNK$1A9rIL!+42&JO3pH@3+Jtu93pB{mR6bH
zTrd5LT(?r{$?$ku8G65Ls%wLBNazU6-12S(C@__{G{6%|6{Q>885;C3palm|18#{O
z8|p}w?JX<1!cP)ZeYAGVN`L5E*axKMv3lUe0jB4&c&F|Z0u5uLjIjH_?sqR1?yozL
zfPYa<|2QGD+SY1mYbiBJyF%-K+wMI~UOq)dIHEW!g`O=&Z-qv9q0W+{-RH?PpJpHk
zg=fWk5LH4ES7zd{<f<<{s-_Q|R9JJ~W)+GdYNQY$a-mbYKSz>}E-$LV%e55Q@H*^U
zh3B25`E4;<A}lvZDbV`CgCiV)!GYBh<w9L<IB&~dQ>#94HeV*w(c&_ncsw#g|30-B
z!e;3Ld`Yj2eh0=-HHf?a{VCYRD>t?^*_G9jh@=2}#^C8h;wVMr88W&#Dx(VHI!~7z
zdX4>*EkFe4V%l|=1LbVF`GdE}dvK!@DWatq(HpC#xej{_rXq|ZvaRPVUJZ9G1+aW>
zektSxKrQxc8*=4AAVIwl;cJPUBaSlcFAWD@Ou}zg?RFrZhbZh=uF$d=0Wo5fUdk;|
zF3!xd<!>P_dojJ~PE(ec4VMR<cgZgDn^}6v(~7M6InKXFpj$+^g|#yZZxmS|@3O!L
z=Z;lWS2;VQ=gKcIq>#aC%3J-iM(sp!4vh#1?b94`diw@LY2h7nflKHOvkc$DT69*e
z9_p@yuVCF)FBh&42_rz5#ox<(4G*_EvQ;JJzeZAKxDyJ|iVxq6)vZrAHFuIzA0@u_
z+wH!8hmdIsyjE#Od~Dt1RWVm+Lhw%5fUHjYFq@8w8~mlq*Ae+hrUh8!4#2yw+-1%{
zcbtig6&H=1!C+Dbczant7=}b1<fW3KtV8ey@r>QLjr=JRTIHrt|7f*nxU?QI&e)MB
zzdB;%Ez<3>mLHLBaUKGoqK7}8POH}e($zrA*PFk`&C~TX+0BRF;K?5tmGDHK^52S%
z8pbOFR4$HjRO8O=Qp1$$G3XWapODPiv<x?ojL>xtn<4M5xtNWR=Ju=3s~M$jX*i3P
zRurzVuDs%1y!BD=fhOo83sNc>fpKSZw~(<HQl0gSxs`5`Bn+t>+-U5=3<!^l<2hZ?
znB3*JA|k`h8+0vbfJkhvyOygl0_Ikp2S?vhv;?A3iQHT9<e;r3cl)yL%hfPk(zV)&
z;pRD&9qOUzSmC%JjMai~1aVpzuNfJ9x6v_*VkY7-`{)S-u`+opz-q4J3=#To>|$?x
zURhz9+K@q{a0_v5dRlxKc4X^VHT)=+e5RTvY;+y7jF=J3inN5g*sKC(9)o4A@r6@b
zP~3xo-TH~WP+6<6DzWuYqc6&<K?qDbaZ85v`6mFzqI8^m0h&0;kc=~*-F!-nl4I5*
zge8Tb{X2DZTKPL^y*}B0(GC&;mUwPYdwHQi?-Q<lSB>h$8OTIyj3+dkFbPQ__$&k}
zCCfv-<->!rqZO!GO-eM|j#?pcjDu{$RIaHHdH|>=swVmY(|%npoYW3jEjMK}h)4Ok
zw#afJ5EAl8r*_S<qFI0*G-x`4=#>dd-P1DU^wCmu6t%!nKex;1EW1kI<%QJ<&Sx>?
zSE(~{E8@N8h60c1NMF)QUi^zYzD|ouu`Nta<7|*Tb(A^MF2%r}g&;^m3rKNYL?t0C
z-Yo(&>RF1LfHJRG{&4FTi_&B5L+s>gC3H5A1uE4w<-_qDHBU65>lpvEOhA9Y&)~Bt
zrF%97usR*5SZq~oltm@#bq*X^d%u_Lqf#q6vech4#82CvhOY(Xk=}a4{-*uQ{W6{!
zhnc&bKZ60(a?wZ$82q0Xj?LtA`tP(@%N3K4(sE(R8}asXVwPlQquD!r<D?j7sExBR
zLNSpdyckc#4g&V9J8_P<SsBC&M}e}92z8elwGyk$5fta=i&<D3>rxJmFNLI9=g_SW
z-6}+a_KTxv=roc^rw7%8WZP$eY%JNXtuq_2O1OlJ9|?+N<*fCp3?v-y<7a=8LEv~R
zMhQ(@478Uq?Maic@$NVR4AraDX~GcevJ>EFJJF#p>!;q0(a0J+8NN0tOs&Pf(*%*R
zFdkkl&SXT@sW{z*iQ1tYhWHYAu_5f#0L%&PP4XIL7>ML(=1{UMi6sIZ?<Bs$iCf<4
zaw$0XnG+8#@^hryU|iy&y1ptL72vihY~+9`y1blam*&yZ=oVpg5qlHMt9*ob8SJLh
zDnYcOUD5m@v8Or>NtG`qxdamH`Ek>}DbZFs6^2d@%@}{oMn>ue$kuU`Fhr?hp!n*_
zNZrYF15u_ZG)=k8Ux2)g{+MRW$UK#QR4rCN@;AN5<noc%R@_1Ey4I6F^f#aMs&(RR
zo_dPT7IG(!b3~SVuK0SEU*?Q|^j8CYUT@BT>WwU2cWcN+^VW`fY0>G{Oh=aSZ%AQ;
z<H<>6xn;7P74!MX?Y?83ssxH%K4Yd87*S7B++iSMReSGZ3xjrxKNL~dW7<a(jF?zQ
zMWg(0Tn{B@r@p~%H#yJkgz0ugi#E$fx!&mRt|)EcP0=RJFL45*Ommr(&KC;6?RkmN
zEu}6yF`Brm*_cj}H=0mO*|4DP@Jceh5(ebsO(O+`bM8c`2fQKdPRWAEte=qb&TfnW
zuGY8)Lj;`9x_UYGZp`_T$bl91cDnr5M_}u3B1mf!fC!uB*WVP~n&Mnn3Arl=p)K8u
zMHX}9W^45er*Sb-AW7uq9l>=#VUnGsa*#Il1<+<Ga64){5%sW}G`GI^;_(+d{9n=Q
z1WP@<@#x{!m!jlx6|O}~VMdj#afxCQRyc+Yd2daPA=;JT-$vU#vz=1mt=Mw3s=6nV
z$uj%B^ytaW1Er4A2&`;!AWg`*n@HGb0#{j-C{gYBp;C&K7m4c>Ny!GOC~|qJIfus7
z1RTnzJ1f1rKc&H_9>pxKb)(&RitVUDUVFEcCaZ#>JBXE%a*+D{zJ7o#V0owS3#3dZ
zml8PbwNL%%&4IY5{GUi!j8W0)<F3=W_eDYyd6)SiR?LsfRXa!ugPve?*s=7HDaFj|
z+*;K^w>7FF6czlof*-odd2L!MeLIO_u60DNvawy2o<G5oT&WJXS`hT(Vxud#xpnU;
zQB`LI_R;_!Z`6qsTVa%rHfpXv$wv7%za2ShW2i{<?uGxc_BK_9xKaGwkKPnk%c2Lc
zM91klvWjY(!W)~C`y-CH+Itm$O0+zkYA_P(pQ5c$^KogH93z&FG*@*FV>(pDvzz#i
zIH_`JTHI&x4o0J`&51tK!H>mRKOYW63_f^fo=o>Mp3aJ5-gp0AdX5Lo6=&2A?4pBd
zN{r!EZ_A_F`?L)s>||B{3`bGn-)usRJ#`<dDH>{?erFnA$nA^XyGl#E_g(fAoHYJD
zxlsV2Ag2tfA@jt2b#{9BM?@V^A;j$MekG+5PRH9i!gR<IwY!iTq3=36TrqEXf_Fyg
z<Z|KeDSgHMT%M-ebbZIkU5gAv5VvNlhK+vf2*<tqN4F0Q`9r*qE)%>vcoqMJLCXJ_
z<}^g$pBBobuljcgwv3TT{F!z0o%#W>?bozJ@UbS!4$P!azfyK~RTOXW&$sEt+Z6u*
zm&AX|e=V2$z>GDsPT5Y5`+;6-Sso3aBWVmSHnY)u^L#e$=de~uIYR3n&1&L8|Ln%K
z{H7ERr9z*SjFfPAKcUuOv6;G4NVixtmH+(r|5w|x27=nHX%|p*CF{bmNWDUEUL=<S
zJA|lL)$`m)2V!p^?u&5{S{j_DR$iSIDfDJ{LXH^^wfUV>8*h-}y@}ed!{SngPB^TD
zPXAyeISZ+YX0MtlIs2nvzB<4Hst{P=<<FkR+*=rE#Ab!ZMOUm7F4VkYy1N@YGU}mn
zx|`3xK>M@@f$GFI->HW(skQ{`0TeszO<Jx-35sKy+<W&++_ku2xWGiWHS;k&!n0zU
z$`x7Z3T9BZm`<}og%eY6m{Gq!d57+je?!=qkM&rEp%UfNpB(M(?H}$QY4Z8^5BKE8
zGS8=C^hw3Ion-LfLHB35!t&w!?$00*{_BAvs|>J?eYV;^c!nk&@9PprN7X=boEECU
z0z<}Id$D$J-W)t@N6j1`?!H>l3e8g=Y(&pN*Z{%l5ZBougRncvQ%A}j)KciUMVl0z
z<hlEQArGiSoRUtmcMtzMb6Vr8MThmZMM*pS?vOMjMbF&6RW4!v!5VDUWkz+d#as$H
zGIo~GP~y@@fadc4T8@pA5k@k9OXRAY2}~akduwRgY2*S7&=TQ(uNaRP6Ih7%C9hY4
z@=D0Lq@_@3$1R-K0IUQo@hBux#OhPlb^c68l5&m~i%Z8iqTK|pNW{6NPc5z&vofP;
znw%=TUhA-W)YmsEIYWqk0jMWqnS&6|8}$@aKVY9CEY!nv9x~qQ<Y<%cboDH5w)Jpy
zDsd|l54|Gz9J*4%z|y%HT2GW*v0t6K<5hOpEepIQlyRAWuEE(-@MCeNyt*SbHz3ht
z?E+oMlHV`24-FZ)zA8qs#TrN}2p<9Gvfc2JnJ5WAFS=fF@*Xy$DmC*_=STP=wz8Dn
zJoiZG?rN}5L=VhUp-t3>4X_oI=V?wl-G|+8I?EkNDvAEk+H`;8t9HPnp(tuJSlLM*
zgi)(KrmPz4ds;o6tGM?Mt$SYk_xs<?CtVx?2}AG<n_Wn_yx%!4zOi@n->>EjVx7Z%
z>3M{(2h<{q?w-ZuY$i@uv2=y4J->1aYY#rvi|pF0(-Jd17n5@4Vf^Cbpd&Lhb#FEo
zfYeo*A?J5?Lpi6T0`AOi@Qzx^OreJ7&7I;2jKc%hS|13feK{ioS!rN+B&TGF5;DE^
zkU#vYj}zL*Yt@(wF`hB#N)m&Xi-t{eN3%mEd7~OxRSo*+NfNZvRN<q=q{it8+GkcL
zFTEZS1toZpJD$9xcpS3=P)LOBuf4JS@ie6<*^D$GgzLV=cqbL<3*s2dwC8gn4^2zd
zh@fD9RPS5Wz-tzcs$I~#$?2$e7f_xVxTLh9>_M$W#;j@Z#?29bwq$Y~PYsNyrp>$k
z%irZgxQvC<dEZM#%h$u<D9jy+M&0uV|2lUZ2b5O{3vn`JGnXnq*N8^Lu6v*@Zhf(U
zgm4ADGP0PblfrGg02yj{2yJVNX~&f1NtQ_wNC8)=R@br>bMt^%>(4J}t8qkm#-!b1
zMo30=W8n=1LoCW(Y-b%3>SoE(8s1)OZAD$X6|jlMz;8FEP9#2PZutq;nHk)yi0MDx
z)>^mepmu7-*cwJ#F}ULA&FEQVYpt77zk2Z11OB0yKH*6(YN4wsWaxHh)2WEjv*@2#
z6D=&FWoo@mw`)ycVoz>wqA9lB6&pHOJtW!8ov<>Oqv9+bp?k-`(`gnJzS;U5MF29$
z_;fbb9yRm>X`Rc_1>@>VH7M^68|wY2bkB(b+$}$kKgGwAF@u^>_tkLv`0?Yf?*E|G
zlHH-5Y19sERuTP03{2=92T&_%(=hGLSZ43FL+JjFj#%=oc|)(&P)blGaZw=UUlO*9
zm8M|1C&j`ZFz&1)agFx89enwSXf)l*(6XpMJ!?DvT|5c)2li#%S&+V#&w>2DX}{O#
zKRNY;55%R_Uo@2z%=jCT`*N>Kr0!QP34vN5HnR-~>+R^$^_c|z16YRzCd(|%RB3g3
z=nDs2{b?~DO@F8s=P3B#3~4g<L?}VNsCM1AM;*%MN;>kL{;?T7ST%&D@2dTUGlQqz
z%f6%N-y-K&ySiRIInOfGcq}`<M94do)DV%<m$Ok{^G@=h$Nvv!`LRHs7nk*KpY1<=
z^SsfBw#8Gm?8A<-4X%@YtUHmQyp644!`Bz!5apTv6}?kkcxljL6a4(6W_KE)asi@A
zcH;6J=}&zd%GLw?U$jd7m95qWv{NaR5?@ogg({0nn3=moqu2bkB>y*o=!3|DKJ^1B
zCbIJR&;nHDm4+&2pjg}nF`YF6iMdB0a~Yj^lKo&WXVddA@G$JA5dpYJv(bo7M*|D*
zj>itR-zaryhy2lq&Y)ktIsw!dam6^mz?%MEsrWe}7uE!dOx2C$FOHfVyzJg;s-#W7
zWo(tyP^ZW&sf`A^<UVIxai?0xh+}zu^5T#KH{><m5!FzW*!(~lkv?0~JA6D+I*RW?
zq^6+pSS0n1-<~2=Yq?t=v1RVne4^1z6unDz<0juE-i7PlB_O4Cs8YWTj`1#q`-BG3
z>TEnrBFqoL744m-X4kW(1wPfws;7};JlNEi2LAI^U_D!p`zAy8Z7x-`9&NDg9paB4
zJlGONFY3;lm88OIs&Oimwxd`O3nr6_6m-AC6cR5L;!}gEA}oS9hE&jz94`ySX*9ka
z<<qGt+vW%NsxLAd(i=tGLi|N0T7qhwAO#E|n_2jnR}2+|7$Ho(h-8C)1KYEZNb+yA
zodU2lcpt<7?f)N)yFP4|P9xT==rcGEmfk)5BZC<m6twDnffe|eF95gpG4KBkP_<cK
z7wHqe{P-dISD&YgODrLMYb#$>Q%wI(pU8gq)P?k+vFO_i1RrIUrsc_+*1a`x)r@Z$
zRrt>CDBAh~sd+g|$9Mf$s_5Lg*Rw@=bN9KCcGeD0KZVOMEyY$-ZDn}Yn-;~WC!u+9
zx67+<@8-kN9p7{k$?Y#*!6tI$-tTMR+g)E@Otj9!2S=^n2#j}SU8inMG9u-_tSCnx
zYu#mp#7MmkimOE#!OJCL0p8e%FQ9zsf<jo4dGS(~g_p10%fneQrI%7{putKim3n7R
zAV8ct^8107nzSsiU2b4yh3y@Q6NhvJK#E~@kuFBa=3RKtp}Psrlgp#SJ;S9>5!hbN
ztGxbxDLk1k`kSStSu!Jmi%15HH)=~LFC@lIF38#90^z*u)2*}knC{RSU%a)m$G(O*
zT%`ZH$ls+S#n#tVR@dGBzZ||kI@v$!qv8JH(d(1fd#_(Ssf-bUQb52RRDYE$QeK-@
zJB3hub_))RtQ4P=L_W$IwJMG`$cY|6v6>8FV!A-&YKUBA=4E?1D)uCE>N|y$=d<*}
zHQZ>N^0&y|B@bxuVlK!W&ow>cwrE)MiN)R*?FIIe^S7&VC3HPHVtEvIq!gx(BRb<=
zE#g<_!cmoOe<d^wLERS!fW~%~PTBVrDRi`P_<KsRYnEMQ<PQlUO)TE#mV69J8^1$3
zMjU+VD0p3fBEIHqgpmGmCQ04vTWpdmgF=~KlFou`=S@BH1tD};zY4i?^jT?`F&cVN
zyv+kgs~DUm6h7Ft(<ps>-NFS6)(1j@EA#UGrxjPPKzz6c!Xd$MVFHs}YjgIB8QbVD
zYHZUDsWQWkzziS_gjPTSkh(2awOUC9;qYW)7CY=M=j_JQjqeav_d7KmnVEj6t{kh%
zYcyr5z)ln^7VdqRVk??6`Xuihxk=SEU?1q|9zEQ8@L&^fOM_u(Zu(A$nq}U4fR}`E
zt!Yo5c^l#Swqh&X-_fuZ2K>X4&FPo7>{s`PiU~nzr%H0y+5Oc9VVk^0EYB+s%?%V2
zY)!8;5@pbT#Q+{6y_r(t4l+KMTOe{i>0JWVd3oHi*_1&ieK^d-yQ&U(-B5|1#oF@W
zh?NKWSg)Pr;WlkyZt?qS=tJe6MuTJNJ5EAe5}KPBm?b-8Qgy!^6(nyGhlF}e7xVtv
zjZ+}y;a2a#mk+;uwDoxVQTDqBUzy#FiD`VppRbjTeoVt+ayq-|=fgF_Y<S*Ra6KxF
zAZ7(Cm_eN#RE$>Pa5WnZi58R<hvkvkeUUNm^D#_$?mju!Vdx*+RGK;Y!7Q5#(2|?$
zRij}BNp(}&1W@?SjGZvfBH5}huz|szDG9I~q}9S4EjUD<n%}6|ZV?)=lWe|AXDSZ)
zemAevk=3GfcWa-BmchNSn2pvMLA5CDCcp3t32#r|>4fgmPG`X!D!itD*Fjmxb@V=e
zsu+%UB(Ix4U5ig`WwSOzzP<J>$=Yl*aPDSE+{2ryIq2fA+_WW5rVLk5TT5{*bbaD2
z2ho+zjNO^9x-X#;{VP*#U2}*M^+hluaSRt|qanAoz%E_}XZ9};Xhon2Vl2g)^+IeI
zz+Gfm&A0vs%CIj`KP4G+PD~8-f``Fodyi#4Pfk&(<rY-}SJ0+7^)}n$y$p#Ma`RYp
ze~vw89<1$(#c0L%4;3C^;iBES5kX2w&I}(%Qh>t{)fro<I<u+=Ny?XHEHp1z;&Hql
zj<T9rHl#t3%d+l9LZ#Pm3tc#&Smlbf_mG<cx#C!u;Ed&_R5}q8FWgmL_Tr<r??`)|
z&+!lUfh;50qu=fRg|ORXt070Z4}7rvCwHRfV-XeLF9$TAI=zK6N1k)g^iHz<VEaM$
z!ROtr&l^#v^Ky75cgPtKv-<jTC@v~5v;Cdq-PS{$+c5hnuml+of9yAW;rbj^xVIl&
zdEOR{FSM^W9)Ts`{R-3Cl%l_l21|pM(bp6{`kwfQeY=>I39n!xLA+@+Vo?X@xt17O
z)!rR*pW|rWiN{Q;$nE(Dd5#H96>wDwO{-3HH1Io~>nNrpFXUvqi{Gb?ZsH06AKHWk
zB5J;NKCqy-gmd8kepyJz{V>q`Yr{CIfgH*GkWz+A`hN05y-{9wcW+OGAxM^JYXuQ`
zON{ONuS`Bm<YJk-D@dlZ<i}cjb*-Qz>-kf!2mRrWH-u;bIG~z+VOAa;zT8xHw}<y!
ztBV;p`Ir_b?|~CPkzbr)q;rJoX*H!L>fK^IZasWa?rFA^d0MqQ{M|B8*VzZW#nh53
zX)5y1B`GvcPxT2nW@40~UzVDzTGEM3w_uz<ie_)i9<?>M^wIG5-!p&o;e!Vc28y8~
z_$ZCt6@gj|Ow`1~<$S=qrX2p})FvfeVOhv0G%mxh$~~@U<6DvaSjbjvTW;p0?-~K#
zmdwiItTe!H-yBqif}SuC+>(8QKZH@J<AVe7tRfoA`Xh1Mh$7{_)(D4oa_ecLi<zn&
z{O}SPZdy`^1(B$d{v1UjSHGYRrCT5N&lao%eCs>(8Q%U%xfrj0p+ta-3^Ll0DDXmA
zV=eN+pr4*Hq0K1?gh(OL9{>4;vaDk`I3}Nh{8Z|f_gLW%Eh59g`ZE1mI<59a--?tA
z!0jZyc<$Y)yb^8!>BI>VZ7G_mZFFJ;rI55oqv%wwx_mb5;^Mmr2}Uf*bDTOc(49_6
z$op<_c06U-We)JqFM0rwLl>5r69CNwR!f0w1Y~M~q=it+pgL)yH&K&1)KVM1Kw>Z1
zo!n@^wx%t5pf9C&*F?v_w5e>sY%T@Gtl7}o3pcat9LTgfcuGP{BS^-Jx$1B@Z8SMc
zmFPl~8*6RF2^4Dc*6}#*H7k7yX(%B1+}xGp<xzz)q`1FyV4g<&#YJ?s5A58c0<3wz
zv=s%_om!;d`b3JpN4g~XB)yxJYDrRZG($oXe4!N>ZoT@oycV-T{|x-*cld)s)y;qY
z`~R+Wt_d;h>ESdGTQ%FN^uJTSVd|D4T^h*HsnX`{U;3;(Bvs^-fkNE5&0;$N_0FRU
z37pa{HU9GyTT}gnFa_s|3T~9!(O7*1>RUMSbun`yf(UoarVynGbD5@qvr&{x5oqD>
zF(LpRHyTfcj&7ETWEq43qMZ+e)>>R~YsuQ9wu3Ujtl_;y_$QWlIEB2c5;kt?I@<v@
zWnevi1R7Kr(XyQkUSz2{iQRa1z^U~$C)1S$9ky2z-irV>C!HDidQ?N*szK_P#I?$2
zb4kzYDL3qIfx##Df7RyixBWV8W1WH^s)vC<{3rlh2~wDA+9?YIjuvC(GVxOMe8UeF
z4Q$d08!gpJQNLDU@NJE6<DDatvcN!9p&xMYGNd4li|}P|DT1A9*O2SVFt$g5IN07O
zKYyDviKUx0tK&V(E|uy$G^pZw)n<ijO+_4)N29%nfkQ*Nl@+u7ljOwZ650XqsSXsE
z_)v)D>U>FexRnZT8xJ8VrMx*zPZHJP&K)y~P<H)7T!xk<YYv_I=p&-tzMW|Q5u*W(
zQ$_{bF+@9Lhem$*n5lGNZdSx4iYv7OxSm5;O~0;2pxqM|)lIu-M!~E1jBQ0Obh(vQ
zRqpjzZdd@)&lusXq4F@V%?KYz-}1L%`3tT?0wf+;@v1AT$^K79KeoaJ+(};E$bXLI
zW_+4o{uyQicWSI=S6j2bQMN;4gp{L5y6{z~{iHHLDF7Ni_bj&v*l^4w^d~v>`+SHR
zGi&#Vo|N)l#mv<9sNWYJM3v`Iy6Bp~MJ^}#%<Lo~hKY{DfI{ILo&iu)Jo#mWww*=7
zS6$*#<_Te{E^tXs9&%`;t04I3WW|EvsmJyx@I-h!1$19z*-HR@hDQ9R3b5telB&Z&
zv}2-DssEsE&5rNb=Y{9q0SnzSI@RI;Q-n2EHm%I}D7%;^h?qW0XT4;POjsZN=fD3S
zsKjO8{O7;_KVin7qsmEqZ%GVYEFXf7YIo4LL|t6WHSK0L4jdXTT@*rr=#o5#&jgDX
zz_);=FZwCbB82zgF6o2~6~s{gCvY$1CrNG9pIuAkH3WYjgVNty%>ett`7dJ93=7(8
zya~pqrHyrO+8#6-uYi<f8bVpU!o2)94>u=;%ln9DL8MN|b&qXRzDtDi2Qme9x&vdL
zdY)(zFDEt1U}3Gx!UG(CkZv3$d{>M?0X4e&))w;jX>v8oE}pE%8gBwj;7M~*NYYjF
z8??xa=J%WFHyyqImGqjwO9U#TsU+8{(%dT$2VOKljZ05APNyHIGsVVMlL#m1CJ|^9
z#Ow~JK@iobRV{t2D(8s6pPH(T#kL_jyKXUMLuz8qo>;?VAlx5eZOW3pFtUmXR%_nm
z7m>8&rnLXlbcD-QS_)@W3+x2ghRRt9!~2}WV{2Ua6DP>pqT6mjPn727MHE35CZn2r
z=_}K^_P=wN=KWIAiv>K)1Yb{}go1U9Ty;QA3WnE0$~H!ZDEwHueF2&-oRDm&qasSE
z6k`}r|Hsqx(yfJL@S@&kx10QSOP)SS+{4D^#%@_6^-z(s=oc3bgXeTusvauVfQW0j
zOL5WL*lZl{zu4b9u`$yhAupvm)1E!b{lLHfZvSZC2J+jjot=~Ye>t(LCpvzKV@_w6
z3qhwBJdx@c-F*EtE8f*~be-Om<aLY>HR(k@^K-~2(*=;~v(ZrZ_AIk1H?CojK_I4H
zB-K8QB+Q49Fnib8*;H)C->X6$Bd0qq2WcxZB!!WdN=~QVV)6l5qD`JxyUZm<5stY#
zNdx|j){YsdNX#u_j2XsaL2@8=2U*vEu}@^1oBP2yv&vXRnSv9L2hxkpS&l=;k^DPF
zFD#NKnB&SjT4Wc0Ufot1tE_C-ufoCp>K*pNy<qYXk!zr57$_aZ)JZrJqb(QoKq%HA
zn<GjK#;+*SLA**n##$Mi26YBefz6a;48vr=CFF@ilEf$te-L+!B}oSz6|H8Hb0B5G
zsuQ?oF)rX>h^-R0=8oqY@~)T_D`ud{95riNVHBOjkD((4QQHj_S6X(;JIQai{l6Z{
zzuI5R**{d>)gOBOIPA9Fj1>l*uVB!Uz+zDwoPgXo(II{m9pXo|L%dIHaYb0FiWdp6
zvX}}Zj2&+}f%isLKy0dIrWtYT2p3buo>C*LN%fxpCxqmL)ZwX;%?E4SdDTARI@9V6
z(^0D8PAZHOpw|fHhbPEPVlOgxK>l|pfu%Qr6{KOD7=CQ2-qSr6<{Lm;xVOFd&1+FC
zF%Q>7y~N_$@yF8G%83wx8jzQ=%<ifxMN-*~Z`CMGQ?$n8#ToP(B@i3_#zryuRv;fY
zHi#<Z*61b-&U*K|s@)k6B$8Yn<1{kx@jB2!Z29;+BCpS5@_KsXRsZHLOZ5r4H6;Oc
z5l`n@7bjCku8d0-T6`DLCg?Edg*%0nt&fNGMKr80YE=KqD#n&;ZmZjE=vLOL=J4ov
zp+^{#8ki}jkG#9Sqt!bJ^pA@J1=(ENr@jOOw5sI-R%!$3s|{rHL0{kLyP==I<<Fa+
z_Z=sTf2e^Pu{>xLG;oSY0W+%s;dAYk3@eLyyu96k<V>m~$;=9r!ub?mmo?aT4ffGs
z9}V`kLG!WUxVsKhUkWS?go6OmSUix(5q6!9-ddqrfr0bOEv?!G6#%SIsUYfs+LaW`
zRqkxvk=4v-ZWBk!>)i$Ku;6u0p573>V3rc;eR$*Uj{KY-X#w7fy$y1k@0rb8liq5@
zQe5e~!f`1HgsHS3_6Ew|5>PM0muV&Ei*jC!8D_zZCzzu!kt&KZd_?&<3>u>w1LVc)
z#q2Vj<bR88X9!S1S+}T<X)!_&r3}TF9|^mI3@taT(-~lys-M(p&=!IonQXGjYV6$B
zO-?SK-*jCwU4}umJx1eVs&4E#VyttPjMZEi!H1gra$RAUxz3%4eTNatp;qt6n}bm2
zqKvoNaFyNlHzKee_c#FVVu_$Qp`z?L7<{P5CfWuRkh~m&&xEKKBenZNXf(jX>JAB%
z>nLt#KaChQ%POv(a&BGCc*};tBp40f7|wQ|IYj*e;geA&JO6Hb#Hr``+;O>1ay)WM
z01Kr&FA9XGeD4eS1-9`Qw_}Ch4Y3ucR^<r?)Q+Z`x<8$AL&An}jU)?U08l`$zx=kL
z)M6NX@ZiDDg9pi}Hv+%PuIsxhu((Iwn;Ekw#~9{|Godi{^M`j&zM5@)+24J7_~>8W
z{?q))gR(8%Jp3{_ed=a=$+}ahZZ)yc3Xw8*z50HlRr@}!r|m82YJ2CwqvZ6N-qmbN
z5LGAhk8SetLu>Mp8$E<d(RHTNk8Nq|(U+y%p@*}KK#Z&=$x><?8^<e;6KzMKtm<if
zU)1)0JK=dQ;4Y%=9;?pS5tV%{w1Bp6J+kdYU7m|)q~?pPuox6eoJiUjj%CENf{D&Z
zRc0Xii*PYRMYQ6vYTTBKQ-RgpCB|9G86b&!3GX^n9)l9NlL{HfoYxEmgYOSsJ$rfZ
z;>EzLpdI{t_~z-0gS~;8inOZsbrH=*^Ng=%yldn7>|`;6!=r=09K6_nzW;2%7nO0W
zc^k;6M+bW+c$-|;tL(lAR1K(#>#`%IsCHlM9v$o-6Y}H#9v9+af~_uTJR<fgWta|L
z9=Kln>)Sv~1fu1<RFEZ?1+IhAg8yU}A(zX=%!K6`qJ6S=*-Cd<%#>I7#<0Wgp1u;G
zuZeQ<<%?Ql-o(bb6MR^c73@oP&il07ffIk~xfUeV&(QUf5!j=*TW#fyjS4q(2gNDe
zZt47`##09BY*su|ou>LR20>=yQ62P9flx7DHa7NunzDG144v@_u5|?EA$-xUH3?Ph
zA#@jVyN32-eOHVQ^1Mie`g5OF0*%Ic)U(6>=0NMWcOuitbOhtXIq>m+N3Rsdj7>m}
zYwVZ`qV4&)z`5bzWIo;9Y$par8>(GtNhaHVC9Oat5e31nl}<vb#do&Hk!>a>AID5?
ztQfM;P^c{{PQPK2*NRWZq_w@1L|4{q>B<TgXE~KlDsdW8Cxn7*Y^=EQ2<B5gCiRA@
z0<#yE!z$xU_DIYX+F#cn48Jg%Hhl}d<_hXr@iD09%>UfCHIQHrM?c#jUJ!N~jZSUX
zg_zdrlXDEzb*<JT_b;^&pX@$;vEP5S`*J_|_UQG?<lxn}ua92to*cY>)j!_*ZvW+O
zkFOl7d05_;C&`oKzHsjQUu)xyxU#2!DXrZLdHjKst?C6?4o)NwNi9Y|j!JN<*kgg(
zRZFs3;n#H7<C%;=pfqrKW5dgx9Ej8&<KfAMG7YEVOy<#jN`W8c*CU~|>?N_}Oju|W
zXT>1S$W(e|ed+QEu!|;+1m}#1ty~dyZl?>0>_JtZUqo5kN?D)xBA3g?hWiYhP%Jj+
z*LaH_Mb|RZ$ii~tmiQt%Ads`LDV0qXFSl;qJP^a0bF`SlPRop8T6ATLJc0?G9?8p8
z(4xcJ1IGMny$4z?2WIR|OTFB~x%iQZvuBt62R)fdZ=6nB{p86vN$Y1T2hi_@1JjY1
z;_8pd`*z!(1<%qR?j$A}i=XLSL}T^B+AVhkmyvW{SuW^)S1OQJzOQmDp?-54)EL#;
z)_Hg8ZPY|5i$qK!O|yq}%#W@SQ0`@BcbgkD@@583*Ys_&wxir}dK*g+S&eV0lD1Rj
zQr&Ly2bqreuv+gBP@m4)j`x_?DV<$5m=4P!Y{)_7j<o*Z_hP%wmMW`3KHoGUu&FHL
zQ+QNwnE|foDa>f8uN9}oBy8vlydZo3zsRhjWdf6$xjz*wJqS%Fq$gV!F~d6b8X+2n
z+oKGELQ)96U3onG@qDzCcs0`vR8QqKj9DzAl_hri)EJ#f=tfkJIXZ?&z0HPQ2}%m~
zHa(9Kb3K#_KNSXBx`Cfx*{XSYOp5^}V|SQ%U=96cNmN7z6T&&MKhs(ME+1v^5VMsQ
zD)w|@HL6`@;l@_<vK*M2GVp80eftaEcRhS}#CEY=u0^z>TlEm>%9pen*Y9jMKK?8-
zo@j}e%2YZ6ofu}Kw+rodOLM7edKv@m*d@GYK)J;BiDHHs)fKQcGdotKC7Ygg63x*U
z)5iCoVn?3KhrR_vnL=1hNRb3pX@;CnXVWXd&OvOug-=1A?;ak+;E(Rq&P&)2P%s3B
zYyW*;%3$AYYG6Rc`LKKWe3m;3DVKV6KRq+8xtuSCc|qT92nV965BAN6{?alV<PO2w
zOT_WrNY##^wBKo*N{<{mfVT5tpI>|HijeGSt?ziM@f@STw19PKjJ_}5N}!|Y+DmJz
zwE&8e#K3B(yxMY<f#(dsIp_?AB;zhLSdkm)Z00U|ca9{lxs=Ka?&1*RhDS$xo88!H
zlQ)gtwa$V(YZ#FpXH2GZEYF8VI=T|StZDk^iy6ZzULXQLwe-3>tZSIHk397O%Sers
zx;2U-YG`$A``6wKIR=gj)!*RFGlFm?;HQ8CWP*yQvKlfT+=W9*9d*8z#=#Hwi0&z{
zSB=Kb&W?b%=m|P@=kA<=%XX-NrByl9oZi+~a&)?W0lTGs+D^L3vF5N@1?W^XZq_-|
z*CfhFdew|b29HQ}3yM&(^%4k!@Vn{Fri33}xc}`X-xX8%JjBT@{F8P*bbLk%#WhIF
zl52G|L|kuq6SdRPJ3RF0{fmr2Nat9e!13e)Y)PGT^1e3xzu?#-9v2Io3h@<szXs1G
zhnVHG9Sp=+Fz7S}-f}sBk$!-r?tz8XJBH8q+^yLa-#jb~KbFNrvQosrz!!ZpeAo01
zC1+I*K@k&0Yw%@W!a<ND)u8jj&M9oLXdc62%cv;>rcJ3BziO%$Z6OzucF*s9AN0lg
z;q@B)$d^KtNUKm^$nMWx^0X37g)q#k0^u*TY_O-ap<QslDQSBn3#VrKfDTvQ?veQC
z`7}h<0B?}zr?OP~K8v?#IE<xtK<t{uU>Ml2hL?<NmE(fzQl$@dH#9CGuap)^%}J+0
z7;|@IjRub(dd}2{S(Wo<dPHIq4SutT6uYm-8FKEbIV!q}^FZP8SMJdCF6;9ab9%!E
zFG-rc_|RyMp~rGYv?}r7%0lp1RGpaaMHr`sq3XrJeb-afm1->hCdVFFsDzYj`Ku+*
zGAh>M8ogWYmUe^-9th~MEOW#PrOs6Jj5nfN>W1;ec{&mN0C*$hN_qEKq#eK(A>BZJ
zzNhU-GYAX>jiIg$e-U=qvFpomvVmj~{Uvvr1knr-P$j>;M!Age=V4BOV9u?fza6ud
zIO}2gd;v0skdLOSYg}j+Tjza_y7$kKPH*F#iz@|JZ$nEmfSAItJ1Y6WoA2J8QiGmR
z5FLrN6sJc(5_w7eG!;MqajNpm23KZs;}JjIz0ok*cf0i+q69R@ilHl}3&$3M;P5R&
zIv5kz_+5ywxr$p`QE;WanatCleB|B$wBpF&7`vtxmC7-(k|ODFC;@Bp@~6hnPQY%~
zH?+Bv{7fi}W<G2h-c6FcZ@ib-Gw~K@GD1agbqyr>P%rPJObVxb%34^CnhsqW637%c
zaz;xw$nPP_h1GIw#r<GRPQD5yqA<D@ODHQ+UBdjAtRWA8Te4GGKAI9b@^2>~*+1Q?
zx_|s&%lVxy=c*|<hK_|cnL%2#8ENpTggZ^F3pB6$P&tOb;xx6zKqm+|_0zVA^N$~N
z&WtvUUy(&f2+sn_YIxgR%qV`vK}&-*+TME5iMDDd`SSAz(S8A>=0QyPFEZ?ePfHOI
zN=sycIUpCR<Eyw+zb&UeWW3C0naA+zsID@nR;Jt<+BLu^r2eLMf{b9Njh!=UR@4Sx
zs~Zvzba^{UDt}E-97|OJAL+iVL&>!$GLdxGh_Ep*jfx2+zIlB+I)Yg+40l)F#qM4N
zqT5*9m#B<ZjI=14uLaKIEbPTHiG}nH^Gl^DRmN&a73YzCPkm5LX}3v*P7N9oUR)_5
z4V0r%Momezf>YB!erVk@1l~4RC6>kYm{FxG;R=5$_7jXoEQXuU%pA@Fkc_m~6-4~6
zon%$E1vRmh_`-lJ9jSHb<R}B$1b6f7#yiE_gXem&xqsSK)_NM!5{A(3-4`hUEG8xE
z2+pD_R2yo0IRoG(_MR^WXPY`iI#B8MQoCa0PNdp#UaBsKM2DzscQq$C>dH37RJ6va
zDbuN7vscyFhfrg?Mt@y*ZD%8fdqlHrH!duxG|nE=%lqI$fVzbyN`G=nl~UXUG3o0_
zFpdmAro&6l&Lq?79;>zaV4$Kgmn8?q<?s=fstIr^i;KQ}y4=_<1quQ0z}}8iSo{AK
zK~g*^LJ&?R&uORHPT<16EKpoVLpt_~p$hwMtq{MBP?#&n#JiFg!qzn`!zZYnL9B%h
zn`}(->jb${HbSEgJ<b6V+KBHWYOblK!UQdu&fX@j>*TU)6+nGbt!c=t#~xteCFEl9
zlO1)AyDKt8ap77MK<0@PJ2T?_z<j%)y;>B-!h@g83n+hzT&P9RL!uOB2FT(Ik4M4t
z|K}HiXV*zkV0)x8j0PjS_Ai<Di8#JVnK5Mm0IT`=tmsyzc7+&s=27KbZ4JE)s|b@z
zDcJi@3)kZe=wb|AvIT{e7M-7k$4+Zy{@a@a$=XwBT)7hrOwT9$TSHtE!ZLNj=1C5L
z4#tMwk??DvBf9oSB5u>oFU1P-bDtZ=ePGK5p$Y65gmD9NCo(SKX5Ks4+<VrMAB75>
zMu{9At3TfX$e=qWtm@T?V>C#6+58+N!a3RwN6X>?H{8<nFS2Y@_Qfo4<IUH;5GEB<
zNz@`ANDz;jjXH9x5%i7!xRg4$FR3|rpc`V^GMm_GAn!6-mNqsfMHi!jdliUL*Zixa
z7v7E4IBS5PWD@1>RC{-KKx%XZr~%#y*pZTbJUJ~8EQuqHD(<L<q^o*~QdWW*pTTFP
z^|664Tni*~Jf=Y&gSfa6ZKrmyN?5_J5x3k)+yt*_F0){dn`D%#;{|52Wa{4J(lstd
z*-xsD(AXl2V(XyBDJme4Us!x;PN)f%6n8@q0?sv~u@N~cFiQwg0Z+aRX>VkI@e>pX
z0ir{<9`pG@5dU^SK#Eq^Kw2q|AO*yjMk}uOZiV4d2mbK8L#q&v0`OogDP8g9ye+9l
zzG6ftFhaib=AcxMFH<LB{+M^_(@O(Z2L^SNfuVE|oOwaZw`*tec+!)?%|PzD1~HV`
zIPcE0^Q#G*eCpK%!H5?#GV~fRg#zY8XQ0Ywj6`xY;ZDqGEXf%nf8dHbb9zv&&ABa^
z-6Soy*q!9y*?z}E9!K@DnWRQG5HX9AXT7b%)+j5jFeU-#*~E$An~tAf;QqguUqfd1
zWGgS>#`Bp*;&hmLClC;hVUW${iIA&;|5|K(>ieRpI1n7p(@<{ORD5NyJV73u;jS24
zSkz*oJZj=5d>ZJ(M4&t6b8HEE1RtzU>i}Op6^i?)mbd#;esoK#&x?<0@nQe6xTQ55
zf{$wNQQyg^SL>5mh)wEL=Tmp6KC0ncl4O8m%bZ@AmM*$h{RI`aSvRYL%O5u#0(B+Z
z>L$AHI*yt0Xh3%E=pe^V$Qq|K5~&2Dq%%!tWu+3V<1LoIZB1GRg{2Cjf}R(~Ntp@C
z^tr+EHD7rf5Z#nulxab20tYDxs7f@1Q+vl2&sVeiqA!ATj9Su<;~Q0#6ILL#O|q(-
z<Mgicxq66EhEEV%GwN<y+#OD+c$z?~ddH%nHo!1!8)6k{W$R%dUW&eAB?D{)Yg#Sl
z-cMSRI1Yw+J{KV|P5yZN`jrMp(>JzMyF3-tblp6NT9vQ}a1;7|LXt*Ma4o@c1g#Cc
zYoQ?X@Kwp<Y${jsw{B5M4`j{AvB5oi27W1wL{f>5^`a4?Tc92QuT5`q6@y|T$z`HP
zg2qe?k%S5rZG1g+VVKg-nWk6`m35(cG<b>;mg^4K7kyq>Yfh<IH%ikoFhG%jV{w~n
z4sBF_E3a7JrXc6^jQ6|6*?PAj;A%;pPCar5Z(QJxf}G*5l3^j(#HT95+FUsD&8<g$
z{hc0LF7QSElWGho<}s15T_(C07Z=i&Bq*AETy64kpHKVt)L4uAOu$5oX?+meT*p2i
zaU2vs8Fs1#7$yGK$y(UBDebC+@^+1$IUVi%YH1kmc(74<tn+g_%|L<085;tW#)NS#
zTJMJ>iV&T}S(nYQ3#V|NmWz_7by(}gvC~nOO~dK|q)t2%hye%E`q1PDre7?^VyM4~
zqL}AW4T3GHOV@qe9ip7%nDNc2RM&=N3|vQ8bJE;m?$2m}MI^Psl%|tP9SV59ui$jO
zz5<uJG4(f@rZ=M^9m+IM(<wx3I%cw^J=&7xw0DHWqpUt*hkltX;nI%^S4Y7@u#k5+
zyv5Av5pO3fvI@ahMJegR5wD)&Q-6#dAJUV&?nHix0j@ca(Mi`@AMT6?WfUJGbaKpf
znPi$s=rLjpD6-<{q)jXme_g{X1z@jOGmD%g9f7(?PjZA+`SDIxTLfqsvI_9_*OuWz
z%5x5xLRwbmO#CuoJ6>1Dy*Y96GSa?*Q0RpHc@`)56hYLs(gbFwDm~JW*($q|cAfcR
zgeqQ|>frNbn71F4T&mVW4>etxjxOowqQFE;N$3P?cU<x4>F!>vEU&pBzmODKxf;XU
zb=l0am?CDjCJ#&Os25H;zfx}-Ya3j+lguBYEC(7jPW9Za8Q`P7Jzw529IP9EsbU=@
zQiD2(kx(}DM|>m^Dk<v~6OC6nLzb2~%Je~SAJPY@pdGx8B(kSkd&4Ns>=Lsz%iGr%
zsuG9B;wz0u^zHilR_t7RDDgTmC~aYuzNCCUujFq+24L!=R44QXH3+}1-ELB;S{U6H
zB3uY#(QN);>M_T&SDsDurT=Oo!^wscCRr@X(Ty$2-iw1JiSc3oe3Vz0fFWhi-CO{?
zvh;ytrcN#F<5^5xl9&^TSqj`n<Hy1=5#>1@5`&o@r;^N@>TQP7c_o6Qfr9bcXYH#U
ztjs*#sAHYfp(O+76n!lw`8>wB%S+(+(om2)rFEWd{^iTVm)n2+t~`7yVRH=T&?2X1
z^l!|8et{tY(^hb}Ehp>80#?Kubw42Jl;KK^hIuV8)@zG)ITOikUd3#+OlGzBDv5#a
zn7mH-MHR}c%SqCIa{ya|-iO}&AY!BvJXIdGOYT~7{JShzC|qBb1FQtYaT6STmW~L8
z!1IbQ<V*s~RyL%zo+`9+D+X0?a-Un@dB;+VkFT<9Ubd^I=&}O-CRv#2=&cVHp)AN~
z=X|CnOapw<TTt{QE^AU11I$4s<z*oVn!F_ogiyUM?C*$%NcK-&lw$3o$Av+&j36PR
zZ80kS!s!xql4t2<Iak?SEjPX7wL628Lc?bCkV?Ebs3=^xKA-`aVsAO~XW69aB`*v5
zs8Gg+gVM2_WgeI=I9Y}sn@(Vj9SJ#c4GY=w`3Eub<WV+s{QhDtN5Cg*<K)c%Q7le6
ziDUyG@s2Z=WUuuhXvs7bE@ov2lC#|qyo!i;WLMZCLbWhC*@;8bp*(tLkX_=_;VCEL
zsND-KQ7STyS}D_HNrNhLcLdW}Ft?!<T0ljbKtOYuY^q2>6P`A9&g5JfG)FiD(;DY=
zbC_hJ)G4l>(Wt6imi{6vwZP8kCc<taolQ|qSIoG^QG~Y3X>N$8;uLP2-mX)LJ(l!#
z`qT~UhZYKrUAC2XeNT*b3en0zu(V@GO?e7?E)2>Dy>eS~awPz9Fp?+f<qQV!#S~f0
z=}oYg=^T4>#wtnC#1ph|G2^LFkfT9r1758_-dQ)Hx!%b-1XW^fXsF_{kk{!=AOsj;
z+||Dz)FOwAlFP9Zf^za`l%5rayOAzn8nucL>cJ3x3*n7c%Omr1>8=%`W7Uk0YD?Dm
zwsUu0yT0}qJT9Z0fpv*!q9Vm;X&OyKWN5U-5pQgiZ<)UV7bjLlJiUzGU_PF|J~-1-
zDbWqfH8$4Ebj&tG_PfpC4Bk^%M2Bu?8wv*^-Ydx=fw313EvL(4Iy*_94x#|Fq8AaW
zsihkF;^rjSjSUKWXT|WQl7a%QZko+=F>j~kTfL<OE=;G5srHp5zbhuXHe)GRSR%wB
zwwar^oKlfn{&6PNp%)q|wy_~zb@lk!n~;c{=xGj^xuyOFAB-BeEO0|gwSe173~}U!
zNF*$+L0*W__mX3}u*oDS^^!qlQf<}`Qe!^CF2YPw(o!%=rwlWrK+v~axX)4a^`7bb
zaQ2%0rz3`}XoTF-8=Mdb+jw}DrSEdeV?#x(>4+n3QY>-EkRfkE8r!jpHo&gX%{HaE
zP2u|r3t*IhQ_j$npq>CaCdFC>7YQaTd{`zJ2rklNrFo*~bCILD(qHPGD4^RD*Vd2O
zyx(z4=eYD3a766JEu>TECRsme{pY{`pK|y0kKq82l8Aj-5;`kp3cfQhBdREcw%`Us
zw=>@G71986gXI~Jx8hA@lZ5`ymMnL&w)Eg75+@+s5uR9azljrC_Q}+u<>1yjVmCOx
z)G~w>in)c1c2+259?4>6mwF@E=+2|s)X|GUeUiuhd9gXAf00uERG`i*a%C6LRPNZG
z22h%{ffdj+#1rP;|3p`xDl5?U;-z2KS^9Y1$MdSHBh>@}_hUXFQCQ4xcusB4ZgTOH
zs$VojHp1I@t{zi6QN85*OdO4sk{OiZD^?r7Ges$MM+pgpr#5@scPn^m2)zhGM7$1n
zUjt798j@|bp*)`CVmj!MlrD=f>5Yv~z!KgY6^kLX31A8HVq+wb1?L>5v-t$JvyTbO
znfj0Jg{g!e{ZD%c55E9jsCB~=7^<q|SrG6km5fjuL8`r|&=FjTz=2Yk4)}k@oGJiY
zKGHhWyIPpi$ZW=W(RKf+`NX9%Da0T}hNm;T3{r?wFo4`BVvc4B2vha>EpFQ+l)!L$
z%R*YiE{e~XP=}HgK=dl8912-0DnO3-yzes~xo|q2<pmJCOl={BZEg209T1kPa+KDL
z0u({_y>-nAqVB&C*V}5?W2^$BhfE#vU|)<Iv_%vFB)X@8VdN%TqO2=NMp(47#U+i?
zQvOx1k7{NG8KvI|U?5wh#C2vD*?Ec*E*5gSJP3(c3)@NkhoTvCF{8UIY`!}mDAsg^
zB5T)@4QOB<1++x5F;iZ+;*QUCM=vGt*T-gga#4#!M`a!i+;6>zkYz!p0V}pz*`yGm
z*%f*QWQ6HBawxfG)tEa{zw0ex6buuP=!Sn?<g+XyXTK;$x?=-5$bPy?-Ih}#oM`}?
zyA4^xqGBUC_ea&vG4WGu9ZxANBSuvI(H7)hT72x*Geli$pp*E56{ongK!^HBt5AF=
zf{RMa>GB{N4V0#;1mNVvH0B2$S2Z#}-!FatSNYUpaeHit{zZ2N?RfbRB~U|!jd<=;
zt@R`V$%>^qb8`Geu1QY}cY|!|(+otuoh>X4E}X)M4~au0P0nUTIy5dqx}fMGiDlNg
zRYHaYv$Qu_56lL4u9%HjCq)#dk>^5H8u?1YuJpZ5_}oh30eS=ZD|^)ukfEzjX_8&T
z#7v?53n*XnD@^gJtPZbOo8|gDBADx(V#~K#aM;IYpDy1jF=c6i7QHj`sPLi8v*(*F
ziEUt8;VlH_Rtky483?GG>?UXF@R9(4<gm}g+^GW1N0~uA-Wk;Y#W(`kNasGNKH33#
z&SPQ`Wp+}C$ycwXNucPsjvZFs+M<j!re6gx7BU+NN+W~!IlS>E>yX{<rlTmv?ZVL5
zv=ST4?j70vIo%sZIjDlv^P6=)Uh|Ml5GR;NmshechQ#<1(~t;|Q#d^fhAlg-w?_S`
zq%@0^LDsqepoHvpG!#Z)1;)6Lv&HL9E;S!2ZI_^Qbcy?R4hZrPY41d9Nqx(@<jQt4
zDd+cN(_ohJD%?lF3=VufU|(uXe?ALCuH6|SwBl4`zS|cuUObqV81)h46jeH<OL$zZ
zTeoM3TM4>SDmuFl|B1}*aiuE(gwP}IOKn!M0DB?!UKhn*4f<sV20KY#5bqU1r&*!S
zR`s7_q4kFrp3jS&l}`m?;Fx@&E)mw)u;v~qqCi?o1*9O1h-qIRa~XNml)$C<1KGxk
z+k>G%V$;^><8cAMLK$z8D#Px?kJ1@4JK_3foTKvYp*16Svj8Pdh8>?*6&GSleIWeb
zVgU>Ew2-`3Pv*R`s)9&3&D^OFSD>sKEOHX18HAvF*>*edT8cqXo&0WxCGvo~mYo=G
zD1)obN{N$TEiMKLF@{^StR<k=CKqYmxV7MR8ZJ0lA%A~W_+uXm!j^B{<);CbQv%PJ
zASr8W*5goTSDh(hW>gL@LYnj`DLQj0KyG*<X>hRsn()Hk2AsDp^yyO{eiUNm!)Fi$
z$a1>wjjp}X)i=6$qitsCJ#l%=QK-(H6^QGo#c`p5E&f`S)jp5jc2}DiMuq5XMq?X{
zCOpP`24ulxKPwP7ltf!!-@$4EMwP{s!gU8txuWfgNjb4naUx(r6p#J2#Jm0?bpy!L
zSx}}05ekLR)iWeNm=3Q|r1E1N0U#k>wYN3qMM7TWk-hCS@7l`@xp+WGiWSY%6Z~x)
zyitBIYNKZmgsPKd;HRm8@!|emn*6!cOcl?3mCMiyXjs;e!A^G<?luZljo%!s2~YT<
z52H!nzu8~p@gULEvsK9s$v<i8QF*7>O0*;Rwf~eH{t7W2XzyhxVSlt(*VgBKbtm)z
zSiu%WY66N~y~Sho4VNDk41q7d|M(aXE{Ts06KPFNq>PAO-PDIl@1fPdxVt6<@u&l5
zb#vSOclNT_CFJF}L2{fA@Gd>Yas#?^eon_~F^M(2k33XzrY=76Op(_ck5je90CG8n
zc+^_&&|{S1>M&*&m|<nG+x>uq8^DmtDz7<P1|qGtvNk6$eCeN-%3d_O>$IHT#Nn79
zhRTtL`kAg$#j;0C5UX^xlKX_rH+6%Yu34U22eP#qK`QJv`|<{%>ej2IT#sgx9bAfD
zTSF+@eSOnISk@Tww>hJ%B1Kv;!4O4}P6cY`BBXbn{u=RVoCJk)!MQQpD&jb=49Lu?
z;i%Y+e3R2f8H!%sk-!A`rfXky1zw^H2VmF#T6Q5l5<{-+DiUCusY}BD-LwJ9cV0P@
z?DuhBo^ZKsQ9r;xBm|c_mO9g}GjA@7#qH`IcuZ&ud!!pc>YQ3F2Kop(iA4vC_R9cd
z&HszC|J0jVlj)a$t9FEKe=y1#ukAS^VDO#0Ii<37^@}e^Ci+I7Z+ITQC$oa51;$l6
zz1(c74Sdy?$@ld&>-f+t(Dqra<Lw81Gg8|pFY*f_+a#OGGgcT&QbKPp%B=S7mK&+O
z>*txS2+e-fXAN*ap?wzFC=sc)nLKry_qNt<Kf@b+ykQN?H&P;}w%A|k>+&$%;1Zhb
zq>Nn)aN0y^rtx%smsn>ufdK7N)<N^(FXH@w<(P1Og>;8;A&`Zx%X|`GDWlKaSMJ5W
zz9=cz^y-UJ4v&pHqTnr?keUTUpWA5m6U8QwyS)--o6wjE3WtrT=463E&tHY+oc5Or
zv({oe^pa5bsLyx$(K|5<i_+aXY6}#T;pwFtl=<M6TK%doQ6>G$tN!Jvl2@VkF!M|<
z4fZCEFo__l<QAx{(6VFiVP9YA>nj!J|5vNh7TIsCxRcmi7g`BON`i1e?w>ExGj%N@
z%H3cW$yl;q>4H!PhqujGh6`ukMST9K<8M&44aV!fVtk?e%jxm%%NL#Gc<<n)c&Z-t
z%XB;vaqv7J*Dw^tfp=O>Ty`qETcY8*DSqC!*UdUv54R@CRw-6*j+b^{q){|~9LX$u
zf~mT3MKR^L9Yc95&1plPbM8?AKEBD=vEUmG+N<0iHv!rwC~K$RvpFb0@-M-|ShHkb
z^`-Z|^j?)OpXEpvK3hOsJEoT^s=$&>de`~ee2NgYo?FmO{IwZ<(wA&4*b_UVCt?!h
z-?z6By}IVO82E_fraCEhhT7W*_SLy>u2@trOtEyej}9AI{O~h!2#GKAcADCLspWi@
zw4U!Bc9PxikKO<L%{}S$dhOu%7iLp2q28s<Qw_@%3+<uCJcQ*s$M3yMzGUT9PIt%Y
z-=F|xXUVY`_@ja>*JUr|bN~8FAS)ovSH>N^%V~`5u~vw3!dbiR$sBxtG4d<6e{>kv
z(Gt$-W78V7t()h>cL-m^B+i{gd*Tf(D{Z+K@n{L$Lfz63m7XEli7D<(7gXnL++gc?
z*X`JAr+^_8C@jM>sZ%0((mmX<`w^kpuqtuU1UeRH(XRUNLe`&#hD2B#k~E{y!>%p2
z;ZhO}4gAUR%275H+yeJB)VH#NTs|Ph=}8!qG6ANr_SOtn!i8^~H0mx(GvbP$F~%Ul
z=WkXmnny74W0mM+#xhWcJ<rPOxv5v}3e-Mym;da>ic~E<=!CkZ(Gm9+&A5U$9VpA8
z8{~qB{L~hsLRsz*O-hT$`nWI_eA)M3T2udIe(A-Ok*ASoz~j=UiQt#P-7OxKgsp{4
zSDs|UrkD62$>G(=SBV5IGyP7|5X$^=B8oE#syK2QGV#Q1oa=UB-~&#t8>i}+)M$$+
zmx_0I_5SOKb4lX-d|-YEvzvt)xY^`Nv=r(`p#0p5xlJ8K!dYoCBWKx7p#>=6;d2TG
zk_L9^tM<Wh^hX`q5@{5G`k*8TKv*GHLEwCXl|DR4T6>mn(n(I-ygQM5t1YC(cpAMf
zBi~oR2|ls-)M1Wb(es*xU(77{da^LDfv$J>L2f)-))3tc)k1=3AxY=Ou;bT>GyuQG
z#0jE|OjTQ&oc##L_@meEI3g`w!Ptw%ZPB>VNn+8e0D%hMb!sz~8o8B~SxhvdQi7MG
zwMCzn>K;J-Ia#ZLXkJtEEaObqd;*Z2W{AO^hwvUn3<$6rl{GUC;poDN9kvH+M8-#b
zZc`txRHYwZcMm3LlZX`tTNBLIm`)$}<+Z-P*3Tz><1*DgJ~FARW73_;HIbeC&B4b?
zc!nzO)K=N6N_jE5YF3>Tb#t9&Ke_7{@!F%P>d_CaX*$0G(3#_|MvwO#XY8T}2A~Co
z6=E$NH_Ftga*<tIt){I9z*#}^mEJ$U-TwT++k`6byKJ(MnvavNYn~A#|Kx~~usq~T
z)wmmRUtYp*u}q`D5&q)A{~{4fi-`u>Nys$Zvc|;$WoFLaK)g5?@a3_s51dSks31Gy
zWsE3ZpsJ-eK2%JO@Ap?gD<D8pd=Ey4n0y=dyUL3--fSSBiebgn%?dnAR`q`RP+OuN
zxhp3s=>-GV&|KFZK`BuKYiM4oL(KCyLK7a#A_};Pynx+G0vv;~Ekj88LX@QpTt&+|
zW$Zy*aTclU*%|66s*IRvma)#>#vHi|;y5pX;2Px|)ivV+$B`Nr*1&y7_aqEkBG}YH
z^|UH*ZEq^DI5Og?-WFw+?Zk0!Dqna{F{n!u9r;APy}0fyg2NqW{3UlHb1_t*uj%kT
z<`Gr8VC4pUoJmui;C8ijiIBR5hCd<RxO#gd=-AU6WYImV*nVSiv4l*FYxv0IQJKbP
z*iKcA?<PJJp8;nQ#gqB+HG!ee)3c6N&9w|UUo75wsH_T>w22;~;+wb=W($=QG)SKY
zO{v?iS?eM{cQl5;N79DE%S_yNI`b4pXbOKC#LrZ(#GT|(94=K&LQRK1E_lCJ07`2T
z%BCcS6tlo@7xRkkqe4;3kwJ><Oj)c(Itoo_u{=dxzS=i((#V{dL>Ef1%0kNbmB>)7
zgx+*~{M=mw=Q@I4FK$(s1IJl5uh<%vME$d(c-uww-*$|NOdS%7{~8k_b!bKVMH%8P
zjgLeXD6}}V?IFq*QN2QHp8nVgp-s$}_A(I+vVs}1Dnd$kRkVMszZ9~MRvFveSr<2@
zLL*Dlq?a`&#calRg)qP?Ll4g)tQa5KMf}gv53PGX_ro4_<x#tKq!v>uD7+S>Yby05
z*&3ae?k+8jEyaOjD`+VSN2r9j(Y<Jf)WvkC@fpnJ$FDbGcl<CA1MBug@{}4ND%QlF
zwD~aE6zfUybX1&~Fc_Ocevx2!FR*KQy{oSW58jG$q~cVf+f0m{Qg<L{#as;g;O`*A
z-ZLUy8mX^65RtZ9I9n@ki|vYK6Xld@i$9F4j}Z>$d8+y1nA0bKB5+h;)q;^Evy+TQ
z1MtBrr$|pZqSvrQkS-Tz5*d_hJ;Ew4<lEng9(o~Y{=_1-bLY6$3MLXbm|g`nF1GpT
z^7_%$;`6P)o?ZN}4_<9Qc<^J}5Y>{cF5|3K1xKOp3RL|61guzVu2-v0l^J~(63WO8
zt=>agr;H-Px0t%Ij+NJ2NAOoAQ8$V+zPvi0_3~m(u3I<zn9R7%>075?s)Cix;#Qna
zFc$VfZ?L4NF>2g>uJ&yIVOfj8GW-pTnT#r&go^~t)1Ul|d1QCXM7t+RXYCzycq)H%
zH3O}8GmbI|XX$lM763d{s~O$47Lchoms`|OoL)A0_e&c`8_XU*{Vp4g?>OPeOcpG0
zT@Yj!@SJWXJS;j|WsH1<QylH@K6|<U5mdo;yKIM9FBBG(i<~i9z~AZap38Fb(^Ds@
z5-a&_cH?ei`ii=4R9*eO>wfQg8&2Ct(yHbe?g0y!SzeyUeLG4aswS*c)K6QCK7f_y
zDA}#v`;zG~M767VvYn*8ak9660xgdK0;=s*c&6is@0`v#Oj;6BHBIxO>tdH3_=n&K
z4?joCnrn&dBEKXRz#k_B&74vlA~kGYWiR<7#E{C#XL_jPNA7wzXRv=C<GruOhT;8R
zZ!ss@WY=D5``kc{=nvw$32>Tv?}k1RU04fj11jFhQE<Ixgj{AE=VGEk*H|~}t~xPl
zER+0S7e4o1t8>cgrI9omm6Md{dc|Va!ZJXf6n&NQ6jS?U0Gj*HYTAx#uNMP5bpcY9
zK}_9h$;L#(lpeQSpCq#ODsZ$o^o~3c19hD-66$oGA<=L?lcVOk>Jk>RTmi5&p8>>K
z0xT6qCbMy0AlSUnqQso0)s~o5X46adfzrV{u4cV;D{NzNdsY_bd8*3oP5lTk&{<0+
zMCosmSsB%^D1AYVY={ej<g-)PACuNrfN<vRzMXiLvd!=@hW82fQ;WAQ%8bhSQA85S
zmz=4OLlZGM>$dHxw>-s_As#;9LGO^pXQrd_?4_S*+m$r8Q;(DM$L~*;Pwf|dd(N1G
zKCXfOkJnY?+#0BQYKO?RxJ3WJnQWO!W0Pm6BiTTmB%FPxo{W@ttyl$E%8CH~BL`3<
zrt2b#i)XW?f`Hea`Gee%p$P+Uuh^hVRNun^uFWO9y|uYb8ctdqMp`OT94W#r?~&SB
z11N>*SJno}Wd(0(QQ`!HYBQrH@}LtjgI^btHl&MycE3*I%{1l}aX*55YA-~!;bGii
zQrP9?EW5O{YYCq-jI$^RC`e$v<a;lbjVZQ83-8njcYwqL*V=jxY1m-1lh!u>#;S;h
z*7_#FPf^<C>7F3mCT}MBe6=lIF>t$ZcOhmM%+l!#U?=hiO$*7tE(&+T-8{B66ry{1
zCdvTh3<VZg;=C$vN(`njEK69WMV>Wfve~%wsn7NM+xuij!Je%!Fc)!&Am#tdZTNHU
z8fZZ$k)$<a>4zU=>Fr>qLBgL}e&@XCiRD0B-E1Z`a`IA@rH5un+(9K|Wb_AiD^7p6
z$QZd)kY3Cb;We65h(AEGz5vdX$HHT!1~9R{K;NP-7_}>zlXQzudbT*rCf$b*#`y%r
zm7%|xxIfFfRxHa*rm_D_+<ArXe1v#BK}ikSq--ly$D|Zd#nwm}(<|2IIL{DYqcRuD
zoI5d0@io%;;!)~G!3b43i^zPI&^iQl&Lgc=R86h&#iDP3aKPZyqJec}@$%huWb-MM
zLQKQ+j1w%0JS4X@f}zitX_U>yg3OpVO_Y-z%m_u;S-yL(C1F05!k3T`y3CGES}3xM
zdRCC3LLoRWCb!jPF+y>zN^#q;HGT`Ul8bCZv~}DCUs8n9mCyGH`&xP%J5p2Ks?M#T
zx37}r4tZ1|VTBb=<b8zM+U>5GjAx~pN8We?cf3HYpqo$<%tER7=(SEoiD&6E+sA<_
z%qj;AB3*hAbZN#}NKLKTy9lkD9Q<2r^w-sfI-+SUO{K{K?(Uz>0J>#Ou_!jMD=TUp
z`XBc7r@s3Mm9LZgwfF8zj_T_ParqdUi<=~DmQM#3Cl$zW)zg|KHB<(y=UW${C)Np<
zK+doFq0xSLrDk};y`;#>7N0Oz<f{1Ai=z~n-BWp(wD#VJ>^*iz%%g)*^7d&>YHSt(
zgH*Y{AK&Fc32ZcWCC3CEEbe&cVhn8v*ns4o%u8PgPSvz@6rpj$|9WnMdTL>bUWdYz
z^rDrxeCpHjFNp{4R)rasN`W+-riOB4PCm%zK@UUYmDO|et*$0zB(DNMl9Rn>Ox>=H
zmTbrgGu3fDNgnh*Pxjs{y}7;o=GLnB9xcDO?cOWtd|9RcAgMZTV62sRC+srlSV2<V
zu2YZY(N<>mh5LH#H*FbC6mC=xim7%%dp4BF2@?l&q%ttyJ*KWhcvA1MlRS=}K3X2m
zZZZkbuT{xBiHVt^8c07(9@`i0&h#>#xFjzN_tf1-k9*0hxK$wz`*#%ZUG1AuC3<u5
z-<ks5^?~1{e5QU=7u3&jPdK6M((TE=0tnTK#FNW~JGUk8L4?8c6&9mm)R8YXrZI%>
zn2kN`*V6RJ3G)fEcZmEfHg>l(!2k|ZM|CGB)dg^)eIU5Ur@P-DC;NNHceEs?*Jbze
zeA;D9ZFiCt6JYFG4!tVoRkBf|&b3Kpk|!5zA(Gi%IWDJZs2@+&gb4bPVHUxRy;=;g
zgbTZ=Y~skfQG3mv41E*OkbT0*@R~;z5XTHr`L1_0ACK;tHq-aLF1=m0J%r?SvVz~J
zPNs39kr3BtJdNGhLH;%#9u&or*aaWK%p$gG@j6Pus_R8L<WWCBdoTrYC^gK~YIQj(
z&eBokyou6<IEJNhg=+wEF+BHjI~l0~;<u_rhC2cRdZ|;G7btGLj`zUsL$}G0@EnB-
zfGG>#U0)R=Blb=el41fc%Ba?wRE&xh?`W{=S4@DV1a6q&8CqD~)Mu$9x5zumsGN4h
zGK=7_8;lAe*ddHwGpc3#t231=-phs`DfKgWU8|7OC0trmS3au?BTq8~d<Yv-6o*i~
zUecy+^^SblHFV}EX}wPb9^7@KGeP^QR3PPGS`TrDI>B%+)XLrQR)8}3|NK9A8_N;+
zo%?r{pOc%exGvmH#D-Z?_$D2X8WuQ(iZD(F<u?0Zs@CwVqmp;W?d5QIqw)1{dETE3
zML7z+W-Sc1n<Ta(7O|*Fhm^)x<3o&xJ6b#0aZ&_+m6)9y!I~+WP+{MwU}lXZYVrwx
zC(0*Wvkx9Ue#xfYg)Bl0ElJYPsu9bw-9FeYwD=LrPTA>GM=zCILeiYQ*iF8Fee|dO
zqyF=w*KZD=NWcEstKE}>zwGy4zJ9j<WIkJDz9{v*<fULzDXl$TMQaa#1zLN&p4Mt>
ze*0oS#9}{OM;Q-)8D+$TQK1If|L!!tM;PCuikKBk+9qR{znGS{9&A6th_^UmmE2cQ
zu;R}DcRX*ERlOVe>Y)Gs^F+R&Em;qwPaT`MkG8(h<B7V+JL><t?%0)wgayF@izO@E
zbdpp$`~d1*a=1FCPYu03B*ABZhAXpo*X!v~{NQ0Y2_MBwWF79rP5LI^{!en@(2?*_
zET+1Su9Ht5?H5~*9&xl^aJ16u?ZdqjciG};)NQq;{e`D)J+J<|@rjlbVeivjAVE39
z_W#(dBTg6UDp|BY>6~tV>N(y1uXDO)9Ze$orN@*Iwdr&!HT1Us>&X5OdbP`qeeBDm
zLuZCc6+}$ct%4G5IyB8tRPkvfcB<EEooiW<bic_}4f}r07REJ0*qe9~#Kj(hIck{o
zc(GG&!dHp%hQTuwVHxHZH|A>?5b?b1;rI_k^;N55s9owq@3dM<3<9+jQ!5T44nSZK
z1_;zw2bMaB2H8*ZS-L-YhaR&Lyc6F^jh!V7i`tB=5Lso|JAr}49ZTU<>as~w+G#dw
z#A<amIhsH{`cXtEO;3XC**yg1H0xg+zu4bD?Em@A{+ktFY(IF=l)Jz?s^g_({gXj;
zyaPv)lE0<Sh!wVA@fnK*SteE6E={^<Hkvcq%+!gp#uDq7C~3`arW#zZ1xt9?x}9V{
z9K6JX&H2pI>dwh#45Afv4eVB;xyosJz1nha7<%(ruJEch&YF4qcaqCy*iX`Dv?rK4
ztF#V{d<~6;6|$3QA-O*}$~L)wI?633Lq^HacMP`kpzQ(ULk5!hmMa^IOzsOAWHrMh
z3TBPy_!GleBWsra;O$&d<M&={eYqW>jK<bd1%6Nj5TQ;BIk9Xg?CR~#X#n-4G3Llh
zyu|H(^iCzw*0-*HMqvh_^i|{|DWrz0fy(9+Oy+WyP7nlz48cTkixHi%^`Od9am8Ua
zTbo-C=2vD@WuOibJ0+YzIJbp7rC!InN)fsNmOJu9=qm=Hj+#aM?1qy-aSv_Z*Lx*6
zCghM+{E2#~rQn?g?TF=G>m65W35#PF&XSj@`+Dx~r1Pu>o@}YYK2^5%`davsad>C5
z%tj-abdmWx%KnfKpV%)yjsEqENj|)uJRB8m=BjF49{~*p+IN94qcXrwSj4qCX{YJ=
zTb2)v@@%}jSNVvR=&|%jI=J(9nh{nBtwGK^+}_JUD?63Ah_F9F4u{{`4<<_JvWyy^
z@!+A^O`+G%0%*2m<4kU1)N&0AvJjnBK{=9&?D6=kX7)y7O(hWq@*mEMmDNQos3%^E
zvLhz_PP`<QkXMVB5V^*eCXvc?w>Scfn8f;DD|sX$ggnv&vc>EoJ=g0^kk!JWEa!~F
zcl2Hh!jHo36$&50Oy;{o%}pe<Il>q0Y<Yuqr3t3<n^PNY&&J7c5Bc@JVz=#9az>}R
z1G@^;7@sVYexz6;++W{%m&LCg@uKosbI)<sCNgW2|NQs=sAU3jWhDwq#;|VnB<t1E
zp%jK6Sx^k{Ua^HA*x!zXyV#mZz$~L{{b{QNU+=PH<V3oZqIDA~1u@s4d^VxL3G%Kq
zs={rQ&8tEA`kYxzHx?})L7_|SCOd+B83i`2TtIbrQl?~_YRzaTKW9Jr&lDk@Q2I*I
zsN1ITjl2#b7>?@UtDZW8IM_Wr=piE$m)V?9?CE%Hp|WxnolAPNo0mGMY=$akR42yR
zQ^71KnDduQ<X$Rsaw|f>HvrGW{K#SgjzHv;6R=!S7rF*O-%eUiyt%RfRe=6SE5cUW
zakee}nL0LQ9zKC!6$!~Zx09K?)8;`|JWUdi=SumCBd0C(@uoj+a_sNc2H3(k$=%*n
zN$WV?bPLi$l7&<}Nmcx+c|iXfipb8iyaL`V>ONWDz0B-u^A6ASs$!b4hKB&v9txlY
zDruVaMLrvQVM%3;aX##x-w?CQ!0x3siGnmr<0^&Np^k8jLL?U0QdHktK-q32NGCoG
z9RlQr7+5E<NwFG&mz9)3U6*81?$hnft!+E4>148COh8!~OBNuvOUZt5%J1TQ-9mQ!
zp*dZ3Bm1fqs~)z^CG3?Mf87wJNfS#^_(k?3Y_G;!rg!`>5x9-w;)3`oD36wpnP#}L
zvDCR^XnHH4mc&J8Ig95U^g8l2wxUo}t1B;2u3DXVX*iW0SX$PGFwD;Kxlf`;AU^7*
z(zJlOKCJRL?1VIU*2&byHBF<o0%xf^Y=WdFIUb5#9It)X5E8h@3?d>G)rc+1cG5W5
zwDPfLdm!0DZj*WuaygPz2qY%LqP2PW(%iC*qOuaQkldULN0(Q<<W-?ZNlhq(RB=>`
z6_pT@>v#;|5Lif<Q^RcmZ4pk8ZCstJQv`^qk}hQppdGv)Rzvx_F!VVJ!(!KFL?-{}
zLjgh+0+YZZ4lSZuzj0Mfq(1rz`?Mvfpe8J-G7JTa6qmMeYVTOnn}~sJf_H}|m}U+J
zfDK@cXOf<wf0>Hh^|GeZN*0=r!Zji=rKOtH8I1ZPgwmzdsc~-Yyevkjq)R!bD~WqL
z>6RUn&I*>$S;0K!#ii3tE$o9)Yz8{wAt4;CPp>pYS*oH`*m1a0tSBnvCm*eEL0J*8
zFI{3P16}37A0T3w^qH_g9hSZJdL<twDbCLqQ%65Hmc65)iaper=mszWZPdgkt9hq|
zlQixvEkib4jLp)L$f>0~rku4A+Y(0RMSL<k(NVNoSV&d$*v*dq{EuDxQCbpiGnDJd
z0<8=n1TNhXPew<9ahk_cMan&IM)6O-T$%9WbAsGZ>k=WiG$mS&Hl9Z+Y>9-4bY!K{
z$iX5KQQ|sTS_?#Sc}T)jvyiP#@9Z!q&XIkWDU2ZEl2Wc5LOZz3461++NNl2Uln8Uk
zdIA^BjNK1AwGY9aBZ^}Cyx9CtFv&X7{INLGxI7_BO}~uN>@+IZ4Z5tgdInhZVR1e2
zV*06Uy%4Zp3kclulb0(FN2%#N7V8%%w!HH!7n7@$rKT!L#Eh3O9Dx8^M@AHg8mll;
zco$HECF8q^d+^KEhpdu_SjlRx?Oe-=Y70RVgS(d8*C=NBWPUo%b}P<HtmcF!zta+N
zzl*X$%Z!=cE3#svQig6jSu)jjxg)S+dJixo)attGD)J6d38+lAA0=0)nyP^Ol7Wwu
zct)Y>xq1=li9vL9jo;|tSaM79^ee`#s%{WpzLLx&^_VnyS)qKGt*S{6my^X*h=qUv
zWrk4WIaFt4jzwK*6>GE*xa9>ikE_*B1&iKq{!U0SM~j%C<Z7|{Y~(tt3NPXk48_P1
zxDDJp&!3~blehkHsfMTOvzD(TcOg~8Wf*Puzu8o7RAy1*Le4MZuiYGOe2~7(Lo->)
z8kl1niMO~a)rPUw_GLSL@QhGts$xg^<+$IO-07*(D-82_HlEJad=|_Je*Vm;%y_=e
zi%|hr;7vwgHJ!qi<~tK|lphGUA4>ACETS^m<UrJT$vmu<BCgC47ABe7Y3)71!9p{x
z+wzJDOdqVKe6MDTAh%>AUEhd6OMST9ayUrpX{7g!id5AYQmUSliX}*V4mBtSf7nn>
zPQGH}YHwL#{AjuRV7Pfb16HB_4kGIyFno>4s4a@v3n$HHL#tFkwx}c2cBG^=buN8L
zV#yS>Orzs#pmxIm+UJ*2`rGG3#hP#RNA2#grSW%(7DN`{l=z!c(HWuF<biqwZ^Dcv
zyN3rl`9|X~vZqx_b>k(n3UL#ci*cq(tD2$lg4P)hGpw5;+{YK$oS+$GL0T@kvf#3-
zsmW@z*zlo1!f`HoHc?A(5&$>AY^91#G5K0}HA=yaQC`-~0Rnk9Im+G@ZzU@ntw;&k
z?BW6j*yvT^CzG2B?z{N>b3%$uOGD>}*U45V<ylLIqD-`&@1KMUlK4pt@w8FmBYG-{
z0}gZ1!q=r-W28f(%k3sQywTQU9^*D-!w?5RgQnPY6=2G+Q7WS4@$0>0Thn;fIzWQ6
z!;YxRXLX}T0x@iaYN8P)Y1~E76>E2BPh;*wSytm_hI#vG<|CxOpPsND^*OEQVP#pR
zx>r@Lv8FQK2%}!=ey_%Y<c7<Bd)RLOj2WLH6NY8EkdZ0w%L*iZZdbGGN@7X0oM@#4
zwRj{&*A&tI1Bfp{;QTuQyqr{0o18E_Epjoc44}uCmGvF$e5l@WHF8&r1Blm=#p1(s
za?e%sYRbCzZP-{sB0jX^iyNI}Mao#R;L%Cni#4xwqId}c<!H7x4MLkJO6%g>{H~6<
z=3`6iYeBwW)-RK8=;70K&9*l)Q>T>irTMITDY0>JjfD;}gbl;sjtS5ALR;M^AWTt%
z6tRJhF)9_{42mOs8jWJr#{a_Z1GR9+b&Di|dlmV00%x4Z8;iYjQkY~ivU;;tC-~#>
z>sMl36&Cb&+Q6jMd}fSOtP)zKWQw1H`0!DQVE|M>tG_&&n1=|5BZMV+UZE#Jbd`~S
zL<o69(0BJZxeyLV5P12bu9lmZRz6gxhbUMC8HXfGb=gipSZj}A?R04IT@f4667;Ff
zA=0oL7e243wT*5tq#&m-d2{r_{U#S3%6jVQZiQbI8VC_qY5~(%EXQ1bwRStnyS>9V
z?xYA0#CNnq=vU&>lQug65y<!9ZX)*+WUIP4z&(uBw&2&I!Sl973x@rr1*5Lx^o|j?
z14{>6iY<cL_BxtsIrPy}I^6$)(E2Y3t^b11`X3iUD^AG%6m+cQ^wknZ;;#Ves6l8k
z9^*WMch?e8RisCmRm=e6%N&R0v}XKr*IN{w<2Xy*?v|G|u|u$eq?}p>6Vf9^j#D_b
z>9+YV+_3+`4f`+Lu>Zmh`@7<XCHvK7Wdv);4k#6?ibg$QZ$X)kVjn!aSyEKNEZ{?w
zsIS@ttUi~q0xHprJW8(9*+hjW39L-c5#UXwAf?sinwn5C$+`%O!Dyx$hJ<=Wbi~h#
zwJa>cQl_(9w%=VB2rpz$QJI_QurZ>F^(cmjR-b5`$Bf3a)bG9SHsONjf<0xbh{c(!
z??MQU-IsyRqN;jQ9ladB{iuq1&@$(JeieljOIyd!{v@{g<=^AFdgTHpYHU?eMCGHj
zju4AWiCMB*cxdG9zAahpl67t%6G(+d`wMl3<lkaqnp=(&&hm6h1={t(v2_KY#f=V?
z4@$Er+=u2^h%Gf#g;Wt{1f#vo3|%=MH}NHE{D7CL%(FO9a#}4^zoztjBwOP;&r)&p
zpx&GMJZdrcBZ)jem2y)r;4-XO8y@#r!>CVZVl7QVjB8Z!M<XrzxjP)zR4zj()|Ha{
zs2|J5ea~P?8C^#i_ji)}P?~p^A9eqw_b>nA{$Fo?`M3L$x3sgfGtZ}q83KGY9it@>
zk6H;USqHBUU&>j-3*?n&SvW#G!vl098E8FrB-IGxd>STI#F-7)>bbOc>_oPC7QwgM
z#jA0$`T~j9bup{2kq?o<oc`jL|F(4<paMfrTt~eh%Yk2DS*6{H_cO$t!kd*<5*;ir
z`5*$f@0Ib8uCp^F7$l!3tyfNOaJ_2vTbpMtG?5HSPP9v_%xs_)VAjqAfn=*@0@uo%
zVP>)g$&=*g#%DT;9r)AnYdd-J4SxSjTNoE8LD8EnPy=PUD6d+0_!(T(JIUsM>$PNX
z?cZ*8@VgU&c9K*4>odOh*=I6pN0XIV-0#R!llu~V`?Jg`K6|D60m*p!(q~u2{3yeR
z^0WN<zTyA(2lqek+g~@_f278|Isw0KxaaTP?>Y;ywjoC~EW_89%Pj_O^;=a`YEKJ@
zyViWt9xXjs4D}d1Erw2$`&qQ%o#d~t-yHS#U+x~f5I{>O-4FHG!`<WK?_VE1OWfGn
zjn8`Ms@3ufzqy%wCk4sN1zl&T^2pxYZ1Da$0<v4JY&LUh?($a}QIDr(gUiAR9%T}b
z7Y0T`s*cF}aVVsh?ouE}(5y3E8^?4t`dAm{r$*yqA=N&UmpAUYn+z9*Tk(7M!=bz%
z0xO>U%#M-MdwjUNxBnje_%NMc>4V+FLpQ3E@7^by-+bM8zhVmh(=ZMD=!4U+JNWn^
zOW|Z6bp@9X`}&cx?d5tvmAX58nfJrt&HM@mnj<H5bdu*qqhW={Kep_oHcF#Gsr4f@
zCQFO_<SR7pFZ%hI2cQy1!vG{`{gLsL<-Hx3I=2!Oa^+Jxr(xn6uJH4>G|pP_E~`pt
z?Od2SAygjH!VFG4qb|=13)2N-Kqtk_I3C#FbsnmA(ZC{0(E}h}#;k4a_AI}=q!@`J
zZV*O%03?U3p%wYtY?NOWBB`s@7+Qu?2GXUZKZemTtR}<;TU?2*{1t>dFb6j|eWfj>
z0c3EZKi!Dd0=GFGG!SvYqXn>So=q5YDEVe(F<OYgu&xwfTW}~PbCHQu@ou~OWTvB&
zXcY?Z3_pb6?EYkkt!YxLD!$8d&(vmeax=}2bq%jG)w7v0W6+VXa7@P}igIDK;H?O+
zm1@Krnn)+cFsWIQ&eVNE<G`fwHYaEXKQVGQ+Urv}I!4i#VlL_{6z=AOzKW!M=7aI)
z&F%h_AH}}~^OBapYKwd?xPAh&SI*4^NiqK_&)!9LzVbT1n6s>Rj$6jbrIMH^A?A)0
z91}<v=c+dtz#(adGAW&`#}7XsP=3f^slHp(Ffyg<A6uKuJZ(=GAGax6efUP?!R;Gk
zY?5h^&x?=h<zfG__)zO&Ih;T_KU?tPq`8R42k~op`8F~YM6~D*pI_?NRkk1H|Et%;
zZJ)GWh9thTj2{G$&Irw+c8|1}Tzven-BF=aY=_I&OJv42fNo?`9Y5TZB75Qb*?eB;
zH~*ye-}SDG?FW6>6maDchE*;;CRjD^+;md_wx7#UkT>ha=rU0@BF>w}uh2tR<<{JX
zeC{I{WaAi*h@h(|`MS)~83UnZ%NOnt&Lv+PwlKT2h|=)niQZiUO<ZIU*%sAO-&e;A
z=Ja5NQPPkyy_x16$$1>YA74(=Y3bxw9Mf>Ug|9kbg=n1lF;2e5za8UoqDhMeIrc+l
z(wsUvPiIYc__o84oMP*4by$2CIwX6~LW`LNkuwfd<fkwcn$2z4R+V~;Lc$km=`GKz
zUPhv1DrMf>GP=>)hwe5jBW29v0HYy(h*5=))x<LK>Q1V`m>I!W&oW|>bm$zHIInaT
zCRMq31dCasuEK@VLx$hR2Ebr8Hg?44b~|%z?eDi^Tz8Wa(X}Jtks=n%F4GC43ME=a
zVrj|VmBy8pd=+JZK;U{+F77nCw;31X&bDJU!)0Hir`Bo@bkxOSZ93L+?&taV<78X+
zr9^4+OV`xy%NOo6AMYK!bPf5!pz=GzmfRC7P_O3xI5bS1U=rOXE_JQ>Y+Cf})~is^
zs&C)0Ue%@`++w~icH(3GP*@2pi*PZ_TX>bu;@}yhj(lB(Mq_vHIC(RpHDmC5-|}KM
z`o>9gIhS}dJue3hE}fdMirL!tUH^l|Zd9P#*L0Q|wEU1UoddA^<zNw1wO^Vcn0Q-Z
zYqDh3M^PaL?)J-Up3)if=IBMzDg=+%twP(Jl4d&^*I)b>_qDy;Gm}#s`OfSTU-4X4
zb>Xx02k5@P`{vof{;R$HLF~ZuAT@f(Lftwj&Fb~KPABuYC?(~%B{Jkawp`<mc=KA&
zjt=2q%DR`lemhT54#1#|@ONB&(`++-Ra+YPMmBtY;f^5>;ZHYziz>uRym5O6yU7;g
zjOW7rfW7O%aMS*uW5abCaeFqE?RYN4#?2wg6c=;&J!WarqL2{=E;5HWkvah0cN^P`
z*h6$sO1S|w$~a|oFKovUm=Utmgp>Lb7xL_;$ze+4Q4>G31b#k>6^l*bx~8{$D4oY2
z={K(}dLVj4`B7rMJtjo-_`XJ(>!gnbu?DeL-D1)-VRDqYwR2}<q2Og!lbw<Q_O%I*
z@SNEwHgKu#EF%Vg>Xv1p;{>~{2&t(Rfi>v=eSc)#k5Pdc4}jqKq2p$JdK*8yZ9HB=
zuC4g`7yH}#>b*KB8^-j?u>d#V^HG{B7@J&Z6|)~k4DrQ0)>epugxOhx&noFE`51Zy
zdl^dcYw>jDV|7itz1W?r3}3nnb`Q@S!5Xldx%fG(I;NNtNcZAxUDXfuXzX1+hqQRC
zn-zGH7{dsVhNOU3fhn>PxmzGH?Z@F{_PWRv$WoCx;Kczhrk=lu<ow1fU7bjDwq|J;
z7aCv+xJGMsE)?uG78`S(=u9oIny6+9?Uhe#4}H=VjGEtO!%W|<us$FE!Djb-Xf*Ti
z&UH^>iuA+MDfTH=*^fHALkQR++M|;?MBgd~-TMS~e<4BN2oZvrs<6^46`mcUj3G&e
z1aiMT5kuERehfbMxn;!si=1WL38G`6PE*t(Q`_bq_r(dzWKfclCAU55JPnjbnREH9
zaDR<euhJKXv-H{#D&Hp;bp7ATM7RqWfTu5&YyS~fxsw^x_f6?>5M;X$GH!?d+B?K-
zuP5S?FDzuZ4AHsp*3KrGfMsyhC{_$bQmw`!fqQ+d-gZyK8NH*iAV0KlGj}n#?W(A;
z>Xog(n>2EMRiK1Tn#|l%7vn?=yTkM$wU1>iZfb97-_)2I4LR_%=?87Hwp2f7M~*<7
zRbNl?63*f7H_3M=Cx^**8Jtzk-nz-(S$f%1A!Jgy?>%Q(FTvm@*Es%|6_U-6&T3u$
z(7HFaUzD}-2q0Ylm&+W75SF2Gx-r~M;&>h^maP&zxSV=M-FkMNjJ85p+7n8UYtzz6
znj*UEXqfQeqsAxRn13QhcE{x~y{TlFN;=dzd7m9R&v~`hoj?22S$2{C6rb4MC$Rgy
zyWBLZSnIEK5!`mtOq7d`Q%%HI(>8^M`cXslJ*a~#66IkE=mFSs6O)N@vsR4)EikIe
zVqhyvi{;te)5`Thb>vo82#&YGUO4D_kHn43&Z*`(VJKoz$sEHf7*h`Ok-n4?o%nk*
zIS<(cg2;va6Qo*HmzHFXxdJjoRLv02bY%JV0^fnJfFd*3^;PBdJdi#^-w<HK+;XPx
zyUW#-pfv|~`9!{{b!x}bM|#_FPR`O9n1)WVKG;OT93`}nqyWqI&E$NkV)okO9u2r3
zpXREPl$VA{9Em3JoQ~nqs!9w9j>AlPy4?~%Qe1O@SF-}9yX7gl@yv>!^0DM;itF>y
z1H~gX2lzptWgVizfwH8Pt_^d&u88=lM@co%SY&(^{;uCFU8RW11w%4}@i1B{P2gB<
zTVv>*zbFrPPxij^8IELd14)<INiNb+nGF<{6zdX2AbNNMBLiDxFQ2ezS`vfE4KpWd
zEBA0p&oj$g<B~HodryQ;&8SAdvE7h}b`w-<n_m?}WaqMa6l-D)<>GYO`&ovXTU`cG
zk7!0KeUVau=>Q=kWR2;(PG)Fw{Fd3$Y%^__+ao!B@s|vhyvnt*RX)$g0uX`UWTlYT
zk)Guvx8}MJsn58eY9o`zWViz@zut&r8HgJSfPWr<5}3$^WHas7SYVvySi@#;`!PU5
zaL}mjE7{T|!tjaR%+X_PtOyoXTI607+#sZ=6XZN32x<zvrHaQ(sXu_*EK{U0ifUSD
zbSkTXd~VA&HuCC7HZ~Y~RthYwd84&&%!~B3yOb0!0nIeguNhoxQfREc&-SM5oee=K
z$6)z2o>3)}xH}<nQ>x5E=Pit$(0n#%J>%?9Mio_??aDdRjyW4zLD2wm@pb4`_E6hK
z@VE>vr%6rj(Z|#$0AW#y>p&J)CTV>N?>97KtH0?YpcZE17o%Z>^sNYj^#0SUIn(qU
zyZXdSg3Ol*b!!QrR+v$p+49T@h6W|eq!s4B$C>q<Ms&T0VLGaFvewwMb#-+sGXnt4
z^6J$m?fwk(8GX93;h0Xy$&(zEVj8EDRH<5HW_!u^f|m-{H=(m7U|YTX@@kc=Es$GI
zbm5KRRj-Uj^Vf!I$P@~|w&qyWuogNxeJr=kDnht$3)0Ld7c(cu&KBqJ=rncIutS6u
ziM~jhmUGt?bO`;zZOjqkG7M`CEGK1-RCNJ>6C=fTjrV%^ivqy+<Kms&8DR~LCu>ni
z{&>F(n}UU;awLUk;@2pR;C^#IH(qLLPeKf_IZ-W%b2Yj~#5luSrr4q(u^0&JaltTb
zzZ7m><6_R>Y)-(kg_NKA`AbOqFdK`Ih<g>LOHzE)1!FZe-uXzz;*Q{9IGvvgx^%Bf
zJYBxtbqncpv{Y&_RQiD2#as-b8l2np=c>lAnZvDi*oa#OPbjx3G;DliT3kCWwitP@
zV&yOdWSA;sO5$xLp+9$!4TtC^`LW1}k6Sys5iPk^Ihg7Q(MpSWtxm3rl32O_Z6E9#
zTC`(tb!9jfHvdx2@sg*?-;LF8WVu3WAlIv68ZFuE32_-ne#I=m%qOlPz@+CTq_{<1
zUircbMxJ`g!i6|z$zk~wOOn?G2yP8FRkMhrz!z0MPQ$?K4%=GUfk%D+>I%1QTRq3r
zc9NI=!e~}ewZ)izOxaQ62Wo>hAwFGCD;8@ad$jF@T@>>bosG*~1>!SKV_U2pC>KYf
z)n5=Qiv?Alo&6-cP(MZGlFaG(-ZG8m>vV*UkhUc4Rc3jaR{1pH`u&d8kEBYnb}^Fd
z-P*z|3Vh&>9HWpFs~oh>mz5AGW{S|z5fyO70K<jAd_3@Z30)POA6%cpLBd!&5{QA-
zL_j=CYI|VoNU%_GjZ3DX9%7LachOkD#S}}FKuB8XW>GGk$%=r7p-93^IvG}k5xXyy
zb(<jpNqr(ptv(5lH9VMnTi;y8vjc1PaUv{QRzUCixF`{P*Vpf?nb)wRN=V4@>j)o4
zvkl8c{gub?SH2bl-Rbk9aKHV~x_8Ncbm<jvTG6SuYR2|VJb)F}{RTZ5e+nKJ8eoAH
z{pm%jKRN9PKmBnro-)eT{raQ*8xQ`J-MD|JZ{6>2^`H3JOv3oxw9@ckl&AK)`zM=m
z<S`th5&i=|{jW|j9HNl;y}!x7@FVg(Y#bB&Hy#|KXz~2unfrapf9698@)QSxuaqMM
zxV*Nf$0NtSQ3e42U9m9TtrbfnKR(Up5)|itKeK=HZSF~Oe3fPMGVD>wzoQqP%^cqf
z&xiQ4d&&RsEqDa+n81VKv%PebAtOC}d9J^7FWtYQH{F37M+1PMSavV@pSV3;SZfS_
zx|VE-^(`-wgf~5N=wAANa$(XkJ9h#v)<yq`p9QY%V8T3c{8K3Q&j>etS`=?FQpTPl
z!<Ym7OJ0saGVkzT{BS%et}jMTGQ^JAzcqo^(C>Mk+;a&;>+-Zo)@*Vbmp8d3!M>08
z`gpHWmPbx%)jcYJ-QMVYn*YMEDNSo5EBMW+a0vGY!ajt1gb0K0nTlGB$AXS45w1?%
zg)p5=(s%i#dgIeG-nQmJ6l0p&kE4<_KD~ghM=1M>aBH?~aXpH46f*Y&-{CaNovyO0
z(u*YCG&VNWgQGvo8Ui0+W5eADh+C~i1X$Eb<%7LZPNW$pay_Tj*0`+!MhC#vo=_*N
z_N3Fi+;lDS>P{_b(|XW+H=pF64;d26F#lpgpa}^VXzCpHLQBm~Y(sCxqf8E-HH{vI
z?xO7iWsUYUv`B|l)i){y!Qx0Yq!8>R-)Cp>uYBtjYod8GDnAT3jYpZ5EqQbFqTERa
zwo1Qen$N+j<CEQ2d;8zewYkY1>O&wvfc>T{+rUp+=FCMf7mV9Xo1v3(v6lXqWBNJV
zufa7JuSpYbCZgE=^1wnO`tVdI_ubJD3c2qV0)OGZCqzt6nnFQMjWeBNub8q7G^5$2
zS@?<j!O{0>zDOia`Sm>b$mR5x@1XGlPww>jAUHgEOl1kTdk>7X99e}cUZc5|zz69k
zApPGv8@VfV(|^(5-F?<S$}S<jIa=OD(r)ZFec>KF#V24xKHjF{=Vh6l;Q5+GE5t~p
zr@P1deK?(NUzCn<6i9&3(<i{kFB;){?C_?%Fi_>go<U;wb*>`GI)!Ewz1M5(3YhQQ
z&Ej0)XQ+tYRAf^a={O4{u(WpF)4D$zL0aMv?KWOQgOtD8CX1GABz%=xZ-|0)!u(qT
zTm8#f@l(4Q*BKD$1Z&YySnD`7wpQ4ZyP@SC`U<Yvv}5%5JzC3$%WvgJpD&3R2}PlH
z#g;?dD=7!OV%}Pgmnrk2d=4rn1sUy;@e<j)Ns^>u=xH+650wn*6lto{!?CD?XM1i=
zucwZayDe7tC&Cuo$7lL+?DR+cWB9zrpz+<d*NUM<sqryH!B{B+2=UKZ*oYC8?!Bg-
zaQHbSs7HJ>f{=m3)RZ{|hA%_fD~6f;ex!i(CvZf|PX|E7JkRGz>+0rg=7eKyfq2Jm
z#(Y)O(A-|V^y7+O)>2;|_yAfs7OgUrj$g2&VlGN28WDG__zK<p-0D5*C2z#~@Z$CJ
zgICSKW}>@N2Gu;)EsYtFI}L%!R-$(9mlnDJscxdMS5-4gR3dUUONZ{XIf(lQ^ZNS?
zz`Ehx;U4DmT(cxx7YK!bd)Zz((8nsFxq<vW7Gm%Z<}g_9k7h2SzWt(`TNJ;Kyte<L
zD<dQPl(lhM>@Qs#r~iKB+DO0mmn<2vvxyl=Q^oXjsz*SBdPZYWHdG)if#UV~G}5+W
z*onA=#ar^4dguui%okH9AJGp}oG->wT2rE4ES+K&s$z0mdOwz0ps1{{qkr_yyY>I*
zo%eQ}Mgtvmed#t_fQ?2?sc49bg*Tn7xATh###@a(Rt%O|)M5-pFRG{<$<wsV&l^4{
zJb5W*@=kJWz<tMrQ*_?}f?2|{1Eh(#<AW32>vYh9C5TB4%`h&KmwF{gYW-A3Q$$6n
zO7}~q@lVURBSK<Lzd+4@G%bamm&s|FlElc;T)!_(20E_Tn<gw7ktMMgh@u__YGy^I
z%q^y}+^7dcP*Hp8hwFcUTJ-l{I&>RG7$eRs@2;&K%c;0G%u1>cc2J29m7Dv9@*kt8
zyk%je6>w6NyZl=ft{1!#G6+qgCesvw*_&c2#tOG|zQK(RO=}PaAkw+-&6~EOvIvRT
zBxq~mJU2FCeNwFia-e+wh~A3c+St%`4wj;5qr$r@Btfk=zp)YXCni*U42SY|>OpAm
z(8)&K7owbgLgP_OBIM(Il=ygAbnmPZ+jl7%I}T*(PbCP_N07$%ng*TR!9*ik%ErcW
zFlnT6)<_`=0}<D||3=(}D-1EZsm5*mGHZG@%wW+L1~PMcdv%$2-<*86|LWx6PyO#+
zAD<xk$*;v`vFS^;Zbqvft-(%mDpl#cYhvj&TbR|ab|p$u5c8@fP0g$E;o~|&RNk+6
zT3vf<59=uQAm4sgssBpT{;bAYwJ<CF^ww0UU+W;c!T(*(p~wLE4$4023W*%Bblj@P
zOY6-44}PrNqTO<;Ko6@A)r*5&n8_rcu*iq!{xpdZ<--RGF1@>*Cwudj<0Rg|TMv`G
z@@pL>Y0dA+fqI&?lK?P(zS<^x?i;EV3;Kr~7jc>X%7<me)g!Zvj)jHI{SSO9WNlWT
z3EkbL6Y;0rR|n5t%6VA0<A9^E{r_$6UANmvjy2KW##59buNJ`#fV%X>n{KI1iIhaQ
zE;LDXuO7A+Py~u(wEz^20!VS&o;APb0nR!PaDJT^Id3vga`O8kA~UN1P?TEgX^-u-
zcZ;Y?R$d|_<NC$*TR`2{@7w^<bJvi+dcLove|_d-Z2)b~&;N5@rHdW3uZ5Jig)>Cl
zLN%GsLh~2S6ZN3}lBbGB5q$K0!u$oF0A@4A4WbM3Yu+F_E6aC?4Q64B{I}i1t?ixX
zvPZZ<HZJZ33GDjKVu2m++%55g*K8Lb6LRf_@lSoME#n(pCVz#mc>zp5%Vh%i6ly6f
zSDV5UvEqZea{u%Hf&ioCr~HNbIaGQ*>anU@FmcE|iAh}CiuYp0;uqSGK7J=67Z{+}
z(Dxn%VT~}zSFAWIl@wT)t@VjcDYjY<P;2`-uOR}-Caz*P3@%s%dv*N~>4cTM$c_7V
zH%J9N2?O1z#F6y$AvtxrXR|Sp-v2jn2H*GPydlhk@76Xwkz77(f@t*OqjYO&c@{QH
zt!p_&i1vCXuc$tH4Y#mBu|^|`8ME$)J)MgsQDmKb82(bILxItvFU!XeQGfDyOi6_g
z<+ExA#ZtZ!L`dt^GPYv(BCeu7(@8e6O~2}#y)GI5W9?~+z3X4APyG`Jjy90x#P8QZ
zPsYQuP}R!kLoY6t!~pa|l!g*kSJOg3czvw^MvAh8wK7@jN5^YhbE&DR(T7^Sgq1;|
zhki@rgb_(ti@@$iTS{C2!h0RR)p7x?&14JV>*u3Xxv#lF6na8)(XZRVev7?x16Q8B
zX8*>)eIbpRr9-3|g51Xf>v0$&k$xf5a1i@~8Ql@(Z63q*?%kF+KON8a0?(0Iz<}&u
z3l<PuwyI%**^BX+?$aiYEN5&5fN9U?lriv`u%Z=&<dDFgCbvmux9jok*(CFzeM}lY
z%csK*P*r1ix<d^*1W2QB1grf$5to`jwL>QMzE5~#CiO}jDtuHUCnVH7YA;#KyIB{#
zKN8L!I6c^WB{)0sL6&+Bv~K&fI|~hj@mVVfb7=&eD~jI^@tNW)^guib1B`27UA)GS
z737}=*y6m)Fk}r~JTJddREGz5`;EpP0}UBABWM_iy3bF55}>h&KWx2tE*)e0`bnpo
zv3I!E3$R)QBfVXJ^0q+fPb=-40}PcVBn44Q5DAD27PQYpBC$gP{P1BPjQVpy&MX&z
zT!d*Nt+OP4jsztjLxlbiRA548+Omd);Zgh0K^0@y)nVW5MtX-wX~|MtxLDq_5f(`)
zt&KlIv}3@}lrY)XHp2$&O{RfrEj?z%JL$O;sF;4gkC=*vGS{9I<xy~|guJ#A+BwX8
zd6vzjT673sJT3%NNJu{-WcMmgWw<om24|7;&E)p2`^Ue(ck<<JcXw1wPJ5NsE7ea(
zn3DFTc^NvHS__c%a&WwX+r<gTmzn%42R*?>P{v2%g=e)-bQeE*p5{{~-IFS7saR>G
z+1VW;uNnyjlvr~9xKyl(0gR<u(o93M-6#;bp7hQNw-!9S@K<k^9``gST`MWzmJY7G
z$!!#%?g8~;;X${IJ)GR~IirmQVn{SG5{=}O%)d@*w=JLoUB?z|GugO|n@9jCx0$@h
zrqb7{#3Fk_rdIInH3Z%#>Qpn)xG{tgYA-M`J-0lwO|6&oR_k_ozgAjCSWWU3eOb6s
z&-ExhHvonPyWSI>3X@<_S-{Klv$AB|m_Z2-Xh_Grz=v5xN<1sm`%9E7;|CD9T1F4K
z<-E3maH%UiZ?Q2XOZuy*6j0XNFy7{S<w#aJR=EjM^LO&`rsLHJY>hARkyr^J_v=+^
zzRM^S^rClTx)DBVQ=vaMm-W<N(~Z*2$L><#pZV-c-pk7+yX!_BE0yMoDfk^~DTS7V
zZrt)y0__0?Y4Ik-pWd_(HNSqJ#Wn1>eW9miIBf0wjE`D-3J2{W@s@lX?9UccTWwH_
z8osUxQi)`QC+_*sVZ0r87I)FnE!n{^$7qO^cgwS6TPXmJ0&ZfZzp5ofyhKH*ty=b;
zN`~_ICTG0qf$>Cu4>{i-oPr&iXvOEpA;HW=zB$gcPzAu}L$Nz4szkvoOx%`1h=kem
zs3P$c`sXl@FN;gf;|yQ)f_#8fk~a-nfHS@siFNW|B-6=-ia;lq@J+2#1<2M|G<p1d
zH?G8~HLLhC<O)M-UyfI^#<iY6c!4@_hFsA}>C?Rxj-E3vzyuNjQYOvEwNW-(6?lI@
z6|wkd)K&KZtCNUMTY150)*0ulX4-#SyglyxumAD?_Stn3&}P!VtReyGEOj_%NvGo;
z?MNJQx7&5UXIVOSI(htybm@NgyFdmPJvijNaVq?G!l76FkiKqaM490@@NrlSjHWBP
zh-d;-KIu&9xc~E2vcNRt1FcYf1!x8ckM9EQh$;L6JuH#EowSttZB$cAg*gYa&xRG?
zlL)6d0wPe@3$M8_JtQ4!UBxI5UmvVkH`~$l2vCKghz0Q1e9GcDK{et+hw1kEZIsSs
zm<3j&FMK60i;;fX5atv9M+yW>FdLYIz{$^|4CXHV3Bu{?%N@EW6<42l?}2c#s@6pH
zFg-3Vs+xM3!+Qj^U6hyFmcHj*Y++i|w}wFbkV>{>ny%shj-iL0j|B5*f3+!GIE}q8
z%thrYzTV4+f=;~bo<s@uEA<Q5rQ4-@-i$fWf20lQ5xRGX2nXa%w^JS!Zq>>Bof-lC
zrQ<ZPbI%O>`Yb&JD0w!Mw4eTjmn2huQZf%$OKr<|@Er7Gtxpj!ZS`1!O<@YnU5zod
zawHXHL;&b~J*TiXisNbqiaKNrbe`)uLF`eumM7HcQg{JS;X0L#C)}Zub6-prh`N^1
z3K%eQa?QzK$csx39d|5!Dkg^`U~zlzN=R!hT6CIj$rCLO*9;ir+M>I8U4EOi6cXIJ
ze9OJmYIZ$(Ui1N+nu0Y6;Z&1~<m6m<_BNoap5|tdq`GZY)thIm8P`O5q~`l5+^&Mn
z8p^oji8U(_Z_O7`87nqn_Dq)1)x5gWS15{;b*-#Uqwawg6WUQdaSf>=lJGaJd8!sC
z6F4iiT*2L~7aLnVhPN$2?nO44Ge>aazi(7i30oSNTbT}+&xl>6J(Zr<@lQ34R`5oe
z2vBcs?d`_MSaR_{5?E8y=!RSm!+ttV&(E}lD3ElarN^Reb@$zdWtehzYoz}0Cg{6%
zqe@NaTNM{5qAI6&#4>1|x@zx|%5F3v6#(teG%VZC%S#`wr+0J?hQsFa9A2NXn-Z<#
zwiODMGCEM`=jV|zI+#Q!5ke)h!%(Yx5Sou?eNB4Qiv2v>A=A>5DCKUo8-yddc}L>a
zkpW^+AjXxjcDkdhz7CaX;3^yl7PjYUWOID>$<&?hgtV`7xM6nD<yX2sA<~;~moPgw
zIheF3BAQA@CyC4n0^S(dtOU@^J%DdCu}CrZ{tXtDEaoNS7tp+A?mhwlG!cij!M2-9
zlmnIH3Ayu96m>AbRM1jbY6DHd+ZD4|Go<jj>5yHbI6;^m*PHhH_cLBHX(cQf_R%0c
z7l_C_Ti8VMJXh`cO?jqT$rX`#+wy1Qs<4V0vH)!y0-&&V6TukMI^0dI(b)uMT5}IJ
zozgKNjoS9|Pz4Jof~!rfCMYBm!s4D6V*gg>L-kcN%pR#n$;1vT096Lkbce}wQX|W3
z(wUbb4V#m_A+m3WBx{wV#UNjvX|ed)*{|+Zib8}-Kn?_r-5w`9D(^jr&>W5Ej}(qe
zs!4kn2%25GpUw;9nr79`E|z_$Ar3`8hi#gFthl0dR((;cmPycyVc<vwFVWYaaI63)
zT3Tjp8z7&Xv!Q#RCr-V`PNE{!`3ROB@bcgqb3bql3O{Uex<U?5h=zd!a;>@>lMUTE
zD|RJdSC*vxXzn}O3+#J$yHz_C#nU7^Sd@bpOuKRjimNHk*feoc5qOeqL-g?0rlkQJ
zezF1rNGn3_c<G}d+$Wni2H;o%v+=ALXT&~vz5jf5ctpRkBtu)nB(8r`t*8rWsD3CW
zY}HcEKNO!MPP0+vp!>;bwVt_JCDwN(u2zC#6qE_tKdb4M%cx|OYFLjv6z7gCkV$=7
zR}#t+;<#ak<l+)Do0gFeK1orEH-JH%Pnp#%4hr$S_MLQzs1N#+U`upAve_US3PUKa
zA(1LW@O1L)A&^Rf>&*znLvclH#9zBzQVV))xWwly?rKZqk-NH%^=~L{N8l<@sjUoo
zxzSq01VYn$`oQ&M<A@ao!;e5WzRyZJ3OKPqGXG@E!4K=b`9lo2Mu_yKAX2)xu<f4~
zS{?G2#gW<(tD;i@r3tk(lucbn7F=yshJ%OYw!TbEM|bhP(WxRBq22BB*A7utXO)7U
z_o?BjJ~?~iFm9A^EiM_UolWEe?8z&ZClf-TS&yW&w!TiV!1eVuQcj5=h`(_#v|#b$
zfvIGrKu9&+IslDV)arP95w0*<d&+-X*k+OW8xsN;&VX)HAz}`{O?U+@D=ZGhp$*1$
zJN}9rmRl^PP*_aVR7Wmksr#Ipk3d?SuRdCStvamQs$yS5-R|*;>4bfHZ$2o{1|NH2
zSjX-cT@lv8`*ke{y7YnPk^y$Qz2pA;WIM-y<`-Qm_t&p%rCg6baG{8o>Q;&WwnUbU
zZeS|MDZ#2LJdv)ZkVur&Ihpn>Ug%G;62x`=m8}K)^r72^X(n#Z5Q+Aa?HYas$LKG(
zXPEx<E88_yB$)SFsZg$9?WzC!!&giyzEhU=t0f?T2ixENvfRzPN`Gam<@@#Cnz8~i
z$BMFEa(Z&Gxz+s~KCh{J|0|ZWaS9<dqY4mEtRH)G730Z&dE<&fPxt@Hlwj@l`!1}Z
zYex%fm%_3}#xcOu8w@vBGHAZyyjp7Nc&7#R(`bLz(f3`;PrqE&v-e%DfO;M+ShyIL
ztm0~vOI^1a=ehSYh8r7yJual&z-cz?X!Xz~3z<$ncrD`vy!rYCSodGw3WmPD?-~-G
zK3YEhzJ`Z}1tg%o1jH<^&i@`;G`sZcTOD@meHX@;2{0(bxNty7w>t0o8Uj&pQgNPH
z$w{8F5KmmYJE#e7fos)l+P}^LVH<_`O}xbKgSRC8r~K=v@pyk{>u@J|wV&+o>^<Ll
zyptU4Ja$WU_(QV$@^I(r{?_5{tCz{wOg=?N;uOq<b{{qlf7she9=JQN51%#o-`?Zr
zyE`ur-NnbR4-Q|ws9f#o^S2+rdii8`8^Bsy&u{A^`#ama`#X;hdqDGc&v@EV%-H#K
zwAwkoKvI5o#TjTHd3~_cb3=aha(iq4hu;3H=Q{`PTe~mzp6@>1J#6f}+<NqUXWLym
z+<(2(c>L<c3mMF9KP6E%itkRT_z0EBxy=y${cJYPGj&a`ulry|Pt}zW##jQVt?{O<
zVaIK}SBE>BzK;3V3k$<_dl(|!xr~+c&iG*>f~!=?h|zB2``yE5lH1i|70a!IWX<jG
zgPrGYfs(zgeK(DNI(YSR?cj%l!<`quJ9zf$`(9<G-6Zet93HIQUe&wXtrnV<j{x4Z
z(P~KhOtA>pH!JP#Zf|aCF>&{{pU(ERFG**Xyr|aBC;N_2LjxG{A0)xTFQ2&mJXLvn
zzEoy9$t#B?a2TrFJDV^=x^p^rFG#3CN1Nz`CT^YNjG5`Uh3dr703Amw{&`Fv>Z!Pk
zb}cGU7^j0Tb{CcBeA0(q^p0{L3&@!GX-v9{<7JVK`9!Nt=Vgsdl~x>g*~b#R+JCzB
za`(THzw};iz1Uf6C4c{Wa=UXI|JYMoj~~B!?f%sVKp)f7o_@P0K}wEHb#Xo|_pfn~
z>N#NhHo;DAho62M%jRC3HG&HqN?ZqXTGLr_#OWhx*Z^3v=|6kCRz}PW;bhp>biYd8
zNt|cGlzxWdG60-K>KKY62K!3QtK)e-8mc%JScN~V78!*B4>FKKlgDG9xZK#<+GdN>
zDDboV^pT&HNVoXgUEsNjk5c$xwR*(R-N4B*E9&A(^8N11?H9YxpR=Sx65$R7)Ii2v
z@?zgYdn$1KjQ09IJ8nkxw0#!S{5-^N`pj)Zqy@ML^!jS#rI4V;UM@jPw36?fkswPc
zBJOv<(vfIKtIr+DH2SK>L1LChDULj~cK9P#`tM`h)<`w-E`TRW`X9AMF%$qvHPeW_
zg}_=IJ{H9lMeoM`<VuNJP4qIaY7EzUmR8{jB%6B^b%1sR>>_z_aPViKXE@Q(VhR^x
zdQmi#QQ+I|3FJWxoAKjP6aCN6lWliOKw*|xSMJArtmQZ;J4Z{-Ea}?VYm2`ubhknb
zE5XcsrrLs3ROO4FDK2ot7-NE^>!cAkY<erB(n8h5It^BBt_ZuOn^$I_`RW3eGDIp8
zTLE>sYt0{M<nYo@#1t$i*aFph8OHHDcW-LVA4>dKB^q>Tcl>hgZZ9lOKCCW?W1*72
zqxCYR3}sA?*hk1NnqKKJV7Ye}BPb1z;9Mqdfv2fEa~L|&Ov*W0D+5OwDzOnjqPPUi
z(`;j-tI?%WFZ}4m0SWVfa86wEQ(54is^c3Xx|TiaoxHf=&gxs^vg7_~MNG;_sXh-L
z37`g^U4=-ILK;Uqz6N%(BgtBSS=(^G0o%|Dm1t7#Kud~2aq_4!UnW~PiXej!hJZEC
zna9r}@7V2bXgJVhG7VEkGI|_$*W@@&)b2wT>MNFzUC{&(e)+NHb5qs`1-7Gm$=@V5
z9uvb<V399H7M1MXh0BJMgFD|;Z^`2Oi${Nv%N$J)d1PbU+|S$w8GfxV>a!0QAN2r9
z?|8?}Ywx%iUiB~x_v~>|j2izC0c&B(9Cv3V?FmaXtK1}EnzgB9*8RaN*1j8Lfz4l}
zqkPD1N})lQ8Y|dNE)m?Ssj0O0B9Tx7TL!$L`tjbrBr_ekbr9(NVtPB4pgu=G<c=Gu
zmyi}ylH$UeX8<m8JNFC`q3=^!6EF6PNsli^4S9ad7}KNp=U<L4#~q-<L^)yO`2;$o
z+f}8T4-jKOi-_yrCeRWZ6b1MtPUL~?>~``5A=+(-U?MK;$H~uH^;PQLM3s(+n1iGl
z<_^w}{ds$u%`CXu1Mc|u5RT1noDzXSjr7AtTt><wvRR27pGB4}3%`ONW@(uN7pkG%
zw{UGh4$LwpMBprzyY1v@(N6ZR96ylkghwf2#GN>chTDzOs@B?}5#xKbqlRqGeFZ}|
zwoy7codXB}l{!@xcI!l<O!ILiiE=ib6M;>OhHz}Yuy9FXCPzXhPg3T3mgl)j!hEC{
zT@XFp2`Xc)eK^dAs1pvzg5-^p!9(YT@&_pO{98bdNav>#;Z8+u?8IVrV#K1q+2Cvf
zu%yr@tj|g6TFcXE6&NmbQVO3JsH|k6^!YRyx=nILTa*ZLm=h@i4Q|bhK`}p31K4)k
z!7&;V_fY><+70w=C6obgos8$RdFpGTCZ8p5=EDNJ@=*rgoj)qsMbU=1MMZ`2o80HB
za><bB_J;3bQjRkm8o-A#6NvB2Z)M{P?KK*Y=Tns1b^~6qSAFT$h?ds2vq>T3I7dxU
zrO*4IRva-PQcZSt<N6^w^B%iyAT4HRI(5%UQs0z2m%u%2)8J0D0k;JkK70^E`8st}
zJbKWa6k;xFCTET^9yC{CPH96<7#ubq!rCjt_<AFK$lz3-sEvd9c#MTLL=@tr<g<~t
zBH51Ijm$cVD{y8hF=};c7z@ZFCZUXIEk6mc4URKtIo0jR#ulL!G~C~A6>Ao_2nnWx
zZ}>%ekxt(rw$M}%W1mA+SjXvUK9H1CAe^YlL|QVNrzaJHAV61O1yepm*=RWI0VqqZ
zc&SL#its3C)=^TkrN`m5EVUiYaKKzMEC+P05pz=TQO|MXQ%9gOAs8M2Hu4!^BX3x6
zHdLr(hP2gqaATm5NIb9<CuKAj=Q)5Va0=F^gF>R5OinoTb@h$_hmWh)DID)W5r{iN
zgMp5FoH~-ju(6E9#Jp;FH5c~CAmO9g#A*054ZS!|OTopIA~}sC(7t?o<z8XMZ!B?3
z3eRG)C527$6qVt;o4%rR8f`987blg@51SGW2eX>J#SHWat`N=VZ~Xu?ro6iWI;=k?
z)F#j6<-6!E5A+tD;r?8Ae-<h`gp_o*1LcxeIwQeFGz$AD2_Pm>?jXI(u9r2EffQ4r
z7#u&2Z=O4j1DeoD5{gDa(L24FlV6Y1DeYmXp*`?VcVHN95r=CcA^~%Qg)%$^ne9{)
zv#KY-YFZKHX@`qN`xhH?4e&MXVd<0>@o>9s2UDJQ))pD91{Sisu_hP)05Y1~yXiM5
z*3ArlPrtFyPGC`D82q_JlY9`-xTUYktxkNdUid(ONtT!v#&N_+Js6y2<8(!Hckk1g
z;Mf@+5`dp{TE;4cYg2T8FC89=-LDbs%5L5e;_q~`d}5R=rN59~N}IfZPI&8<A1n9?
z4%BW8dD0e<k+99l>=FVX0D0%r^P<cu8;lu%PjVn`B$fWuv;t#D0bKL-t|VBGMAG7+
zo<c~(FF}!prY?gHP1|`aNFZ5IKb)?~i3wFz0qYrm&+~34cE)S-GnS@nhqhB0pC%DD
zDbH>D-8(<69o&`2u_F!(wNm(b(^al+2uhzGPgKsB${W`(5Z@c2S%2zyr%c1waufbE
zJtblX<t8jC(MhL1721iG>7cM9a3+5d4ix}dm|w4_by<;4Oe;$VcvO*smx?5^pBojO
z5@+>*hwi($2r53G;K5Ub<JqI6^M(f=Iz8(s9Ff4ONk{bW+?zqg)-|nio2pRMO&(Dx
zkau05R47<{b)2PUb<URwW3b-E2u$9fa9GhnxMH*+5tEk2YTB|qT#Xg)gFHdaK$Imn
zaZaa`I6qUf_;_&OBw+B`MVe<$=A*U~n=Z2{>?c(4=7y-^y7%>OJDu3+)p_WctFCRZ
zchu>#5$kl}F}*@hPCmJCV)Vv$U+ulP_rtSt?~#5hR<TUaCm&{w#1ZHg$CV604FEI`
zXpqI3<8Feq!x3ZJjz<L`y&RWS4n&)dD5Y;j&S1W@>smIoB6(>fkYk&gX<7T`)43-L
zo0>qJ6agcU5j#8MW}96va+TiHV0P&!O4Da<ivff*H5`gHxbk7A?<pKpr1V+S0kt9V
zonzLOFW9Y!0Cu)F6hE6R#faI^D%BP(=AT)tys+__J*(T;(SQh1%9^S&HdQ@4MjtNi
zJky4Th1(#+%@=s{rE21=_R_pm$Cs>Oto>0ZIhjw1g%C|gx8Z>j3|)cnV|L8>3DgOV
z^n_4<6SJW}1Pv*x8EbRZxd;*&F_J|dQ;Dl1F9~kiGW&TA5UZ@3!h|loWMzkB<K}{C
za=1wUb&#)y$5Q<{n?M1J8(}m2mJ+*eG0X`>@<r|N-?X%hmZE8^kWx)as@jO$(NnV-
zk=N?qmuE=uR#B0r#Da)s3B!C&6yV!UDkyT)P+5SXXW48%B?Jh24~u>2L}>yuIt>b;
zAhaD_@p~fJK}0m<4XSqyfgNFo&a&YgfXUPYrrGJ-+io34nzPwiHW}!ZRDc`tX@Pa^
zCcsK-gub9v>7)o5sga{+`F4WOA`Iaew*_5nP-H;_C0ZpS$)pG)Zu<v4|196+=jXtd
zGR|N9?9Vs>8gc?8izh(+6Yn|+8ugPPdC!xe`oYHX6X9cW!C8%nKM^;qO{8(f#`1ao
zVD8vh{FZRX+FmsdsgEw%?_hZCBzq5jSsO#(n~ep&nJn<l+RLl?XJaM*Os?mj3#6<E
z(!2O*VtlmLz%^94VzQM$t8*S%qC`aYZbEfcaG6Kx`*{lGU23a*H#GNIa`1es5%edI
zE9&T-!9T&>Bm~C1BgMo`Pp4TX%HW!7rff;3wm>82WBAn5vdpc1kF4Jm&LY4n=Vdw1
zRQyJYVM>qva2^yCLZ%yioIAdZ)fF?%q4zdv_Z%B^Z@`7+nEPo)Ey;QgbRO!0UVpmx
z`Nmfg0)g(SzXyRmu3y2Cl~3sVhpTxuE!_HNj_`{ao!O2?2*yq48s5hcXfjE@&v+;V
z5Kd4J=ap<xCPrdSjIN=DkLKP}r*oJhk#9`zTK3kR4S6=P$^ccP)h?#eeIqZX`AlOs
z1=988Br`-|@$_if7JV|)RiM8S%YDkE6+xooo*3q?3Am^1r7Kzdl2w3Ah0UjM;Nh?&
zOxpAmC#XWzN<JG@L{(dh0ikKVD(E^1oGW_3BwaCpYY)&(u7yyG)l<sHV@II0e8FQY
zJAPN5Ng4l=4&D$_Pe4>%=Py{HN*-a+QknYW`KdlVMe#F@fKfmurzBFfPWJ93YkM{U
zcUp*TpdCzN5~vp%&K5^MtB|*brA56C3l4kN-rcD6yRP+T`RQ55Pk7uE644l!$LZ2Z
zcZ&8vqE7I*>yRTBaze##+q)OFf6ul5!gXUlUj7BOxd9wrih9X6+(K7A!*=gS?cR6o
zJ})k>X%yA|##qbcEs7aQ@b9jKuoWyMc}{+_W&DQhrX^e6{ROl;r>l#19Xo}xgzYfy
zII%T4aqg@}$D6XcTu^yji)h?8Kr<}Q;_U!<hUs0r|M~Bu`}Y^`e|699$J|}`YUt`H
zWpdm4x;M?BjFg}!8h5KOwh$Ab!a}g=ps{Y~hs+AN)`dI6+c96D{YT0`!v^bU(Vb5-
z#9pHf4rzUzQ5c^kd(#44dL4f=+>#gkuJyEH;{_k?CRoPPf}32VZieC2XR=ywDx516
z#%P+<f=#X$+2qs_L^jpFhKMlqRf5K%{zd^~=&yVGr$VfS9D8Z&;!Yx+bX7U79hbqj
z-|wLNRdN*0<CK*XCm(PC;k>>1&}4^54oGx{r$e~5Ih6;m9w+z2rn<W;hN_%QA=xT@
zYytzKcvx|7&BU-D3Su$MBpkqUR=5S44`!x7IfgUItd1uNU;$J;*}^GrA?QxynvbBJ
z8NQ|RX;D!)SM%ApD5HaBZSPJi78?Y$eSAKHRL3`v^V}Ia8a~P2g00iMN`E?yd{evt
z<Ly9><>=fKz)a1b(MgbvLpf(gAOnAJ^DItJ9Cw*q<kMopiBeHAuPhIOE3q_WO_kZ7
zW{cZ(?nuJQdPp#3pv5R?QRCHQ(b2LK;E69xQ99@yj1a0wfii#6k+A&k&kGg7uaA}_
zI;TWC21cTfiBuls1B%z@>Fi8+t)E=N&P#YUKkIGrD6-_E%mpC=6pa99@DA3*LfVYe
zy&SQP*{VPnkiiIZeBv)2`Ky(1Pe-hJq8+Vj**y<CMDN_+>ZN+C2idVDXIL?xjr=h~
z!$o+()0q#Jm%)#no((iv85-gS@fgZcn%Jt?qb4F4S7&Gry6yIm7c@ig>XhdL0#wyH
zUy*f9>Z#^)`C>abQg#6DvMH7C2D3lLGy|TgAyu1^BU&#7LWnYtt~19o-E-TsH$j2_
z%i1l$Z`Xczv~w*6j#xm~+AVE)@iF})AxEsRZ+xzX-MZ<EdsOsiuTweIa}8y0kLsAO
zHmk?ee28d=TOOg6<uXd&FL|KlIFOs{_Nr}+-NflQP%{+dtSkdTxS4*$yd1kwO<S*M
zcF5fA46||3iVK}G)q!Zef?(|Viflk=2$XX{3T`WuXB2`LQe>*70x80^lC@}#3D~Q}
z!&=IZ>Y7$X_n|!Rl{zP3W6xC87!f}%MR8(aR>XQ~9SDaawg5xe)0uknffeQhD1Itn
ziZl6<6$h+$N;8edySS`wF`d5XY_61=@ieHFaqAf?m6AJ|e;T~d9b3bs?_G>vqvy!H
zdnoxl90=zUb+JkotEhfjb{UFf%84ye&9a%3Y^*WH2$6p#o^)0#1N0e7^6u7CH*Dw<
z_cXeeDjZW~Ks2OM`Jhg)=AT9RH0$f^HfnLF$6XZvU<mtkjBOt5GI6(6&5`gsukOik
zyC?x-rM@+FT;@e5cYS?fu6?xtn=+b#b=t^9`CSG5jn{9%d_W^$t+edtU7*Wl=d-A0
zNp+E;%*T9kT)gc{6$42eK*x-y>*E$~0ne-Z@|a<Zp^e}qj{N8gefCl!({*9XRVzTQ
z#XEq<t!yo!922UUx^wo@aR#Z2g9BL^|A%cO&FNg+OMZ=N+s1#6`6R3MPWE=Tux-K|
zA{#X?gI%5iiTb|Dc>E6gb?g!ybG%QgRBn^<PCCDSBDjGhQ9$sC{6n=_Ve0_;P!43J
z39eZw)pvxuGpS_gIg^=R!l|u$$A-C|Sxk<0D&QRv*T_warDO>2cRM00&uj$f>HBU2
z?frXfgzKe)C7++p-PBRkRvyExr@_Yd`2$B$@09yR81!PLN{eE9CBp=yIhY!j3si2t
zG-XL{WVTu%XvFFTU0G?WiR7!+$7!qP{U33-fHy-(A)s!gUb_REGtE}oOBTf*(5}hE
zSPfBecO9cR5|adKjCb|6edY^l$H4uu1b9>z0mDunr_(ptj0guy>j*fZ1d8uQnWp8&
zWqR+<ojZ5$y8pB!-NfR6!xX*<4SE+w9?t9<Q{~=&;;VT7EY2gWWf`fu%@vp180aQ^
zYFm&SANm~l%;RFHrzVrA$V=~j0b}0W=LWOzPltg%_dVaN5|89#Sc#m=v<$^-5jIo`
zEBvxE%ujPwCK)nj<#b8q>+65)Skcb~IUX7D0vP_s1rh)5z5Abk@nv85nr}l`qofR5
z?W|*_5mW3CP0vbo@>RL()M!g3NPU67Y}j=B$n9wGHC;k%OjNZ`5IqT1&PJoW%_iq2
zgF|PPBbldkCBK86Pde!-(ry8IJ%z%7PP24c;jXe$PHV&lmYwxIE7OAI2-yw`<O#W7
z4c6`%U4?yGU0K)5XdoF8N2Xcmc{kY`A#T)$j^eO0Jw2e$I!+YU2MnV0r-$tsIk!8B
z)-&>{Jrp-)Gstu-AxpV=2{CNoZojP&v;_+}rm*#QXq!`em&V+m>vE-T?-Z9M%qH%L
zCNby}+%0a{E4K&wMXkvyf)r|(r)g+e2hXz6c|TcmO)*xy|19q(8}6UX>GJ(noqFiC
zLeI$x1)kf@*Z}7Qk4e{QP$q2SBQ@(?YT%wIhgjRNLg*P*Qw~LVZfU*IqrFyls_mLq
z5LVbk+B)@aDOoEUA=ht_o{ai>GVwZZC7o!|rqGj2C@s){5|+{>j|%QLR5)q8x-p~6
zf2J_UR4`RnWV_q^w<}CEbP&w*i5DRpEf?oyZ~>{aE3h2N9;&P>=AD(xvuX5M@j#<`
zG^y2%0kMn`@5r^FBN7eyQrkyZd%?-G_-dNUu~g^_tik#sS?x*^jNF)J9X4Vc7jl`#
zia5!nxUl%0j_G+w0g#NGl?IBTnI%>#7h<Co)0ogBIbl#MPTt*kTPg}^kcyPt(ufJH
z$W%(v!mz82l%bWf3$vjrXs|=i&xh2|ki!`Kj}>7>)J-rWih+rim1iIWa3zCfArjMU
z;>8(MUU}mULkq;?8(DF>8-92QA+Y@TxXhuO(*s`-xctzn!fKJ9Fb^yi`72o~CIosw
zIQONmdh`bMGzU5Yknx5P+mjvHgRRAysgXU?4>&5i?koK8{Y`p*1QXI+x+EaDfmrhr
zni8in(x4c`HClM7Z4u>_rS;KMVidL|;D;j+NU5?_23MIRL<>2ncLRmH%3_cQhe*26
zfJC`XQ&s^E6Tjr+H1L9Nd;5C$5W2Bb`!=_&SX<(kN=5HsD4NnYoZLe7%9LM&eUs%_
z8o-TqVZe_r74UzP0{oVaD;^X9i{5RjypcJRLiY3G6pT(1L$1`xX0u&c7_mCVFeow-
z<kwWfo{@J^2{e%UXz}IRyjVb7>G4m*fi+W7pN@TTvg2$N5Wzgny5m)29uvi@^Wpwi
zF{oB3+#yd{#VIzlw8)g-lcV&w^uNLsIwAKvlyD2w;12qno<ARD5lxUB<YQlfBM|Es
z5LSiovIUyenjv708^#%p<6cjg$chv69bv66qgExsk#~Di*EjyA@Xs&dzYG&iy^z@e
zEZEIzvGs!QjA%8A$2-~d6ap{7LfDW`Y)(&4rM2cX8#(r#Z6*rq(rkQX7D5G;;(d4I
z!M}+DC-YeZ=5lP?RZTy$Rp0WS0&DQXu^|DfvKX`P&uB|Q&7KjZtM`a8yTrS_=-o<l
zm>nNpx+K~R{PuXNIsK64hpMy8@@W-N0Xr(x#V*Ef?r8++_|P3nc~Ks&9dwdbdzT5H
zJ-H?4nMMR6VYK#&=5`{TQEpT)+)M#vVxO$Q>s^VOlDc}AlL|BsN~sITMlCW5iy8Sl
zY`C{ekMkW&{DdDWr8Zy1PcH>~QT@`rCtmki#WY;NQA?njBVdY$1l17wc49R@IRSUS
z=rI7gR}S9<ER(j4mjFX32pwZArqB(b3QbvG&te9U7UPp_kWRyFq=DoAZWHUP5&}>v
zN8ZPmHx4ec(M$wMW-()fxz2Z4iXBF}e1PzSHl-xKQgQeqj*`yC8}qjg>DZHThZE4z
zcGM57(Wpdb=Y>nb%ivNlQaz$eN+f;_+%Gp-6UX)7x1PXNNJw`_d0?iQ1fG(3A0g=o
z7YMfj&HO3^4hT<?jRI2&p*SEVb{mh+G6<5y#c*PH<VLh1y5;OB_frg5cZ!4r$)Jt8
z@f}MT9Yi80y~leWBpD_vCfaKE-FTwmQIY0CaWjXnDx{PiR66gB3C_l#BBYQ>-QA--
zJxinX<61iIy`G-8NNujb3)Ew!E-O5WRI1fRbyJ>sV<NUQdg91As;8NbEDAuJ42Fku
zB6v8d;o(fHnXl#CG3C+(y?mm|(f1YVGussSBYB?tnByiHqKJ&wgDzpA_~QzCmWgyr
zZZQ}l0Kf{vQ^1^WZsWo2=2ZEz5)9C8xUCr+@;CGNQ?oCFkNfCn`Lqp6M$yCoOspq+
zlws-U?&#z_n7)JxMawT#?ug6vVU|^UdM+2clhH<th#WD@gMXvDq0cSCl_j^Ayn$+<
z{^%8aH5%s~mwvyaSKjUUcb7C*yI@5ol*oba9Bhe}zXOSsTcHl~fotP*aK>PmMWD3p
z0>QK(f$tBVd$T|82uMvEkTq?m89Ih=aF)UQ|M->|QC`lS5Sa}CtR?$N95()|a#N%h
zyY^Ba(UFl~R<K8s<(32$#l>8mq1cThr=w$$!7Cv|;vylUs^hhHi39=gpVyPzoj3Cd
zBeXG<__k+h60kJTXK^+<LURJ4O&vVamc*Zm+7x}|UgaxLv<$<?{516?H4(u};j#|Y
zXV4J_Nda`FqwxxR?w`|X2JAk=`Qsu4N)QjM0*s4}jpAvQ2nRT~xGEqhs&4@PWRbO$
z4^UM%JXL^TCO~ZW`jo#VM`eH<yG+GLZ{Xv#ueOt{d)jR${l}X>Ql<WJYm~kH(e_B+
zb^9LrvhDab&9wgg&|Tjf{}4VD;xe+V>mKgYq#07}oK)^H2!{3kQ<78>yR6mSe7AOG
zFCwnyzRlz@!+qn(Lx@)t9sK|fvRTbKa<ue?<p<{HU-hD=d;aP8=v*`0Z%xJ+WM>6V
z_%d=Gd%^qyfSF~BolBB_zt6nz5}REv-J*j+n}af9pIp}3pkl@1`@eJj-F)$Cd*?w@
z$e|fs-`+ah0(frk_5Sk*&2u4hu?gs(Fs_|u<Lr-jzq;4Gd#`(^dw27T&+p&!EAdTP
zjt~L=z#VkxSKR!;x4V127rTmD|DZXW&h0+n3;D+jB!(|t0f}^yjpOZBDjD;@OOCJw
z-h*nsakTsZ0^&I96c-&3>#gY19sg-i)#sq9{W-+#3Xv-%EiBdEL9%><Jxsbk*4k)<
z8TdYex$|({L64(Eqp|%~tI_lLXx4<8_RE35X1+W)c+qEoaxoEniDi6&asnYIoXl`l
z0;SVQ7h2X^YN`7iOgzat>qMhCvBWgla>V*vW~K@e`i9>ZVso&p61-%w;=(@_pv{gq
z<&?YXm7ZU$T7d8?>Fn6?x5q9gkFHRLH|Y$LCSt05nFnCLjJoC7#{6PKy{z5y@^13?
zB+uS9ZJ8>l>jP06G>wk0h*~zzT)&4b_B6lfJ1MJRx{eb?odiNC5H+b(VCXAdP&int
z&ax4=PXr@YX_~K`9Cr&A%c!uH@59lGP8`oC_&9~6_;UiqsifAG6XLlfB%uTGqn@`u
zAx<IBB|Z~*t|Kt|)x3_cVt+WzcT(dMUXq>9++iQJ0YBXg*^<0c-GW`$&X32r`+qk|
z-FMPvI5e(5F05u)I4+j+s$U_~fAsogZ*S}H*@NcwlM-=cZa*(=1}du%S@ghH|B<Yf
z6cAdpl!w}E9%K+2X-Sm?VzimmoB$a$b9@!eFXe)FZ5?9fFAqEMQ>jpjf;hyk+rQXi
z;kiyR>8NJlwwMSBWOwmE$r7E6m!Di2a<nn)%44wPf<cfQ|8DQ#JFy)eV)Xsh3toFt
zF8XW9SKZIMUqr+k@5ajK-?c5P4}bXnJijc@_{S}ni(!+UW*0PMsj*aXh(in2?f0Hr
zdT&~sPSY`vva<5WFo++&`q6swFSWJzUVXo_fADPQ`SY;DZ!kyEP8X-=tyKp}_vOxE
z@}J#1Fl|LAN)+}VS8Tk=z8n@aK%zsO_S?~Royr?;kkk?L58n$<rn*19hR3rwXVvzR
zDsxs&Qpno%zg)c-(y64=!OO7ylwpSAJ;qgGZ{D@R<e?AWSkj|kfS3cd3CSX86oCoZ
z@KY1-_NzlTNxl77uMU?Gu1r94@%a^mF3;;f%ZNO(lqiwEoG&}9!iu>!-v2~`*=aHt
zR_Ej?Sm`SARQGH)9^FzSWJiSS>FNWgdfW&Q3DF>4$~RW8(PX~jpm4)_7xm(i52xM9
z{9ld{zkD6&vfIV~$t2Wdsz0R{=_*!>d)Lz=o(QF%=B4Diu}wW~r8F)=y#BQPZRg%S
z3D*qZ>9m2175(@sf<(9x?XfpzpX&eQJ}XHC{Bv-PP=ou9w`w1g&pzXoLAX>WRGX5=
z$YN$KCZ!Mtuhn{ZlFgi2+5IV<uI_=1t@9|Km50-GQl7XC)DeSmvczgI(C==H()q-l
zEz@#inqF><5%V?mcazRG^L9n+v#bB-lYQ43cu_g2%^ADC4yWV#Ix|~;8|{(DuU_vT
z?C$K>cZ$tioni0K9gVKoEVw7~$W)$NsMSJh?N8l3S|r;^->EqOZtotaGbP;9Y}_4;
zhkdB(ee|kd-Cjp%T0a?Q4Wm`tmeX!AJ>6(&ZgXCK$Yu)m)oWxFe6+fYbU@XMZcIxz
z7H4$jbYd>ONjH^J2y!Pf()y$C@&49J^UQ}?8MvL*opu}@{FDu5oEE2DnsCQb%Yb#-
zmej`h2x=RG$$rQhGYCa7M`3Z^XJ&&TeZTUh)ziCg(Dd(ON_*)Wt=BQR@OyZFev_uN
zr0I=IA^?<YgSFe|>6_c_#Ho^#i`y+k<R3pcxGKA++00#8yS?9gzWe9^6*2d58*#7Y
z17CGha8fJNe!ErOO6Z*+6O<YP538YC6D1*BlQaY_!84x{5qt=$n7Iq5#NY{Mi8>k<
zZU4)@;^Q}%+g-Innm3rnu7zm9nnhAgkVK+5N%N6wu5A@pan_B%#C$;$IO9*Jun{lG
zb&~k~EK0~9GjRjh1_=5TdO>8Mc*=O&@wK%+&FEsf?6=&B%}wRr{HZvOA}aqn&*mB5
zmqJgq_r+I)_xI<LFXju?YZQRnVTrG2B=M1_*3HmPifd>_vnn*cS3IV5*A%0Lq`T~`
zMkB&$OaO?A(V5f1CvGLt6f~m0eW9URyI~f5Yn+a*_d1$WE>4lc^Q(Mp3>9P3;Zt3d
zjN7+#l%=QU=K8vuxyp*+ckJ-!Z^j?BSb64BOeHYumICY81Vn!e-Bkv9-74xn;F|(3
zRWknN+2P@ykDYGI>(cD&-PjB-*W5JdbiUsND9L@;1O(b^gg-6zBXX(Q!d^#(i0tN&
zH3trRu1*NPlA27JhfJ25R?5-ryGU0nixK^cPXA-Z9>d41-UEH3K>wJgBRY6llBO6*
zvZ1;m5YLJ*FpX+t=_(0y<ACjBHO+6CfAHS#d)${6Vi5ZUmz1`8pGB1Yj-OmVl!M-X
zx%FHZQme{V)3RmK*VO%slfxYxOa%@hPJCwb_jm5x>9^4M)>GDje)a9nOV{k5zCV;g
zY3zMGPnI7n@G$bB;+TP5tX&!MuxtIfZB(PA%@M=>+mZrC9H)LXn+(XB@ezFqZ2eqo
zaa(SI-J7MSWt6f2sH@KDRM4rb>&{>T;VS-<)UiE-sd@5kVk;-8UGT}W{)90)jU+sr
zj~1mUQE7`usFRxz+F3mc9l4OblcsqtPp>)GHFXl%P$h#7k25D3<%LueW`d0+g}MO(
z5902o#TeLHa&WITK;7D>ZxLdECS~|QX@AtiSsKe{rBiW$WX4Lb#gv6UA#_CN2nf6?
zIh6z260~)r9eo9cV>d^8PQ!SRG?%+u>%P_|-=g&JfHTYA+j;4<psSbZICCv|68&CX
z<P9$V3Wdxg3+q(<ZknB<ONndg*|*PMZ2l-!w|~@nRgZ=AT!TL<Ok4S5bzsc~G^OuS
z$7CKPe_W#!*No1trj!C~R{ZrJ$6en>S?_Gt*>$qkp47Z>>IR47$JN0!CC!~M8_lF6
zr9OSXJ514gF(1wH135k@h02OY2j@*!TwnR*D=y#p1y|fYxN60POMb!?|0NbYND4Py
zZ+YXBFE>B)3$C_)Z`ES+<gvA0IM*M%>&Uh@qeJ__PnR>5LGW5n%ACSR`-vBRb8~Z+
zpEp>ZWpWjRv#c;{Ne24&ulB#)+3!8wfAxB=-}Z(I!AEnyXM=9bM8m%I!6}>5X^J#q
z7FpEjAjT4Q(UJIgySM3+`}~qpp=CXk#^XxPoZT02MOqxHhjCCprSNP-*TJ$@JGCkR
zPRiGcX^ryJGOnp@n?%1=Z_)KFbHx7pFF(I?Cy|;f<pb;S#+QyV?rdE1OBRgcwNDu=
zSB{^tK40EJesD1vQUe!EH3enQr-UScO0C^3EAqwtO|{)r#EVZqchdc8dkwRRY2QBI
zOuiEnQat+Hi&%^Ol&k@J(tTq#FYSv?H;c-)>KENRO#kwT(8VeBmK~yyNVLCu=4Gh&
zuvxj6JoF;ibG-U6iK=<K7oP(RO$+?^JPHk=Z`Q>OZxVa~+1s33eo@xf4`#)Ad~GHB
zMw0f@$%Rf+*4O*JntA8?t*^h<Ji1j%Q+?Iy!xE~!t`qL1>pt?&F7&bGT6`wMGxb)?
zmLH6-I#j!wu>OO=Q<EKH+eFctrTULQ*)hX)tTU1u5X*Lky5-lC;|G$+V$=4*Q0}Z?
zKS@+g0g2AoiHO<sD3|Bc?1U8rp1$7g2!J?Q92xIayd5+qSe;Pc?MSQE!2Jjflim${
zC|P@1Ogaa1iBvN5=ojLaZUy81q%6nX!GPHucPmliv9|y%x+%S9A+!8~>pA9mnQa`c
z`j=}{r1on%(Zb=ZhTYI6&7x7xpi{El9ZGc&9dLpz=-2k%wisaIcZMP^N}&b9xJ0EB
z^tFgw?bR)-_O?RCK?W>pm5i9iAT<{@lm53mKRozu>-p=Qe#;u)-FRh<z6yqokkRjs
z4T-L&VC1{>7SX!{#lx4^!=%{}ZYBT?YCc%TomVc?(w!B1mkz6l|2#!(3&}JW(ui2I
z<N&RlaBHg%I5C@LtiWvOC$14av_U>AV#h@+l)Ph@7lGtzaQVwjFC-fH16BR#3pyv?
z7Mlul?U4ow<WSgCypGd0KhzS_oVeoMwq^Vy-H)+}&BNhf+8$fvU{$=}TM!%K39LS{
z3G>WK8H6$6M7px02pdUctG>5Mjmtq_+#Wtod`cWhN-Q&?mm`N{Ha-u!81DVpM^u64
zB{rC|!Y<Md7-fB+0J>6f8C9~Z*BdlOiiU!#xz-qScS@h!XS0FaZz&cXL2?jrWTvaO
zzFy9T#eBBm{&8f*!k>i?LWFyTv^qZ*qB9jl(of|f57L~TgS`%;(TkDJ2ji2pSkXqG
zt$l8jgM_7x95b?t+slHOvw{m4S5)4CNP*y|>k#4SXvIPEm$h4IxYJ>eJJ|0n!vSi6
zBA=>e6&Yof3b&#w$r#v6$8mYmmFC}1X<Zk?dN!;CC%V4AtkzOnVt<aXkE)%v`nQcv
z71$!SQhPgiq=YP*t6`j0yeMx`9}BcpKj`dVm-Ca8{O!Zu*N&^t(@_t%`253ulmr<!
z9t~rjzh6Eio9VHcUTCI=W~v`4<FCBlZ8R!Lgib@A6l12bi%-{=^O#Rq_Ea6=C@m&f
zOd*{aK_d;HBN=L)R7!YKu@A+|wDu8lPb3#H%56=j1Ei`Bu-ha#|4uKy7V`7EHVPY}
z<`&6FhZSsaPY<tmJ!;<q&U+BE)V5Wj0olaDvRLX>fRjKLKuS_6&O|oB=Q|2$O-k}B
zHpUk{|KyU*(N+kr<!7b%8IN)|lnvC*af1CID#28(M*sVslT1}|>(O12$JuYU(27-P
zYI&^oBLSY58W*1>%TrD*V>`+yjgmQK62tB-CCxCNVmA_9NljQEocR?wiqe@d<;&;s
zKYQ_(sPGpiogz$_wLaR(5rDQ&Csqg|RcJ?@xDQ+=1K7|}VKP6?O0<Jx9)+VDzdcgY
zf68ekJqm%|Y+@>$W1hza(3sHYq};%*5WR=2?wj%^NGdG#*9h+>2j|&9Q0(}VfP5m;
z_zD(s1e^%UN0UWnn_Vqx54K^&^BSjs;{y`Pk*}wh4z7T}lgO>0|6~)_!8iFipy(Ld
zgkKxm`dUw4>+v<(DUX5f1Dt?P$XXWg^$EiUvU3>kCbP1UdN_7TeOBi)s^T)a%+2wz
z^jKPMWP?#Ul@x9Wo#GH@@m)yWRuwIZcge-3he_(FL5Nx<i(>(rB=hGj+d__ZD8H40
z&-*III*X1`pwbImor6@^vrj|s0%R6LZOeec_+1w+v(ca+<YGgbVkr-UkSpA{F0zqR
zu5qfq-nAO*$p4=C)#uJors|$+gl{$)(lh1VfUeefSEr9$4z%*tjmr-*jbCaI3Z7?@
z1q226%abzdxoaVdsG>Lv4Kiv45QnJ%e8B(SIC_1~nkSb;NMmuT1Syk}!9X47Et$)J
zx~|!F+K_0^fI3)S3hwWaSnoi00uYWqCg36Yl%8gUkqET4phRg^PJH)WBj31pf1}lE
zOC|FNcbnDTAz><RCj814B&xBY)s4;)GFlHtW^HS4cjMqPWqm){q(XQ3C@R(Jnlysf
z)O!K_U`<v9;$j>ea$2t%%>V7aPulqLs5ssL7?5W&UHp-r=iRGxJZiD$ms%g)Eg)=A
zQsp(lQFZ|UPhXByhgBJlU=Xs#EfS5jMwiJFhF2Dfn&v_9?N-?vVcAS)#Dq_sew`G@
zKM^p$)KXrA#*zr)QalobO_3^~_%m?O2g%<WzuDLjzNxMmK)J#;0eEGWsN}E4Z}itU
zn;HxBhX!Bu@5R=U-$Xy^FHkC`APd#S@z=PL>u(sWyvbcc<6rbrK7pbIf{0%ss+f+O
z;DbMv2v>5OXq>uE^IzA6baM5F#y|cb*0$Z5Ar6(kASVWCBW_pgWVTrv91SV+RxXMy
z&^VAAQgE+;l7URM@Bs0uoytmUD6!?w=QFRQ`f(E4#x>jsfWVd6@h2Q-jv*i%vxcSk
zc9yPp_=;a}w`c!4Cu?yZaA(JSB#`D(Q&fg2g%~+cz(K)#AZ9s={5zCNQ{3r{ih>wp
zDY3K$XN}+JQ?j5h_~Ym=(VB`CN5bD2kqDO>;jJ_!6b8zPy5{6;!5fX=s9UKgANVHz
zfHv<sG*BA>>BJ6VM)M369!=bL9<Wtp7~K*>IXYO*Z%)j}69(Cn%OZ9BEK4u07@Xz^
z&AqMy(I(<kM_D=v1h?hakC4PGW?!oh_#I`QK6xO(Wi^g{304bmm+F-M4QN%9D}&Dt
z6vP0!$(y7<n_g`=Ha&n%%dt{Ja5<Mesxc0G%g!%FJ+Gd7+UFp<NC}rzgrx>6`4ILN
zwyeCIBhoH4)No>$b@IiUyb;b%*CPeVqO$U<epN&(2$%{Dq>tQgh0P$B+{}jq+UD^+
z7-eXQJExH(+&kKk3K$S-FeRArH*P2l+RUVy(L#iuYeHGvuENYEe^2()OFdEkp1{!P
ze>^Fs*i-EN-;+n&RIl9U?C&i%X@9V8MU<m_j7$xI5R0svuaxHB5Joza^`Z!xpRi0_
zZfiDX1|nYQ(fixWPh4|<13vZCH_N)(?oJQSIr-S{gybLolcUVF&d5R9DZ$~~>3=mz
z$L`O`9AM<E6)2u%d=qbcLx-_@T5@&(BldTuJIQMKtM-+72}H;+Hn)GB*dt<uBiQ*^
zGueopDWWaPsUcJ`^g+F+8c`r-3U^#{LfJlNz%cN8^7uEKg6RjDS6}c~!Zd`BNGVA=
z*Jprm)R<t<mwp($M&JTXq^xjF*C1d026ZyszhF8-y@9Miyonq=y_wBbi5DO?el5$_
zzS$H%{DW(1Kq$UhAgILii_N6zD7$F7x0~n0?YQ5>eV8XB3iQ2<2>zpY6W?6&$#`4I
zH&>if2`b1-q@q*8T(^AlxJPQY_=az)Y+pVUcC36xO~Q+xk@FHA*g_P`*MFnSb#dR~
zYGupu%F5pV<KaSQz%o8!XW}`CX5i+%sxPMWO?jkAZSv@nRo2I=QxY}+x76Q+USSiM
zVaKv_sGBf$%CX;@Ivim;m8<{wgM5LYlzBROR~uvar%^y+db7s=5nRC0d2=Ds9D{=S
zH;}Zl(a?_bet5Po!ejL~l2pDg<wRoD!oC5U_BW+A2kM3pkCZP_%L1>-N<}86pjxV5
zq6?pd#@v&5j_0SRL{xVzPt!|T7}vA_Yo>xX8kD6C!SLC5T5LRW`s)Vr3l6M)e5s}C
zT*D%!gm0OhQlw#tWbT|5-W<vA`;VuQIfEuR{e<K77!y5uYx!g_nyW#>9K))qyAA|9
zbRPhiefr(=w=6x_KM~G>GsS%kw(KDJT1^aL8JQL@g2=Bt#0f+x?S+uJ5|2II5y?&>
zuf$0qr&ES?Pd$RcPoDfq?-@N=t|@qo`t}X2(t<N?6!gg;`ON&y(kMw@rC%f=tgM>9
zO6@HNE<C}Ji4L0vElSUs@(Utws~pr01<p}VLk*nB+S{`qVt>;iQhMw-9<PZqA&3m^
zYnA&McoM2HNM4ic1sdE{U15SJ{X;P-s&-EzxUQcb*WRpl+Ye8~?^Id|Q{wa$oe~Ow
z#yb@kSZXHaUR~<K%RRk{`a~>EFqnmz0Ft%r>R~qE1}VsHy_662C<5};Mma(X1ve)F
z-|MBzPu9faFA1lzlb5}Gp*ghSB=36#!H|9X^;6xKkbzR$7^mmwp!4Hwb_twrvbxf3
z)o#{RPNZFxhG|#La%!SpkfgdzUfFI?z;tYhhsHsD*L0P!E_BM~=Q3sT(NGw}dCtz!
zUXDc;4cPE)8iX}#d+!M?lfi3+8nd1y%UDWZa8vfPDmG5h%Hda3^RC!PqW-U?Bfy28
zo{`PrwBt&JC)#Q?q?*>&ba+SAqkNoeJyC@d!&x-V)LR}f?#$9g8a)|hZxP!7Bh)1G
z*!To%XW5~N8fHOWn*5ckvDSPn>+6JbCRQ#w^;Qq*vSB%1C_Ggb@&b|H@-d<i<%J>?
z7!bqdaWQ16dz>B;)<AaMkXEIS=Y^uL(dt^9&qu;T^O<Z)k4vPRKv;rDSl<zx*)eT4
z?j6pB6cHgo07f~S5$6)lhH6nT@Mcp&+#<+Le+#s&Q=8<cXsyxx+vXop1yTGYT7SgH
zOH)&$;zi1xW^ikcwCYyBqL%d|QywjY%T?RTJ7O2AN>RUArOe@$*MGby<85oOBG4ot
zLPzC0U3>yEf-*Zt$V>O9S^VE*F}re1Ew-W2Q9#C+M>aCU4^-853i3@%o?zG!W|Gg6
z+oxJ>Kmk)Pae|l|WpXMYIBbXK)ugcN-6f-|&6pdgCB&YL(o^#7Ow*H*`Q@HIPi2E8
z0MF+6qnV9XrK%w675IfXH3WJ&Sbs>J#fi8e7ke*LhRrq3PtRr^7dAhg6l!MFtW`G;
zOqXYw1a^(aMT}7vyPx#djIvrih+6K*?M$*$@jsc0D`luMn3R0IZ?En0oTE~`CR(@;
z;A&~4sABoUgW-#_uwIi`B__d?g-JuaI+V0ZLZ}lbGl5K|Uqw0YP_PE5J{uCGoS@=O
z(h3NeFk+MAVeKTV93W0M+!(;&I%?_Lt}px5;lzb<8-0&0S%ZP!xZL;}QMCtqTaR}h
zZXo$^Lq56j^`Bln>g{enWDfn_tAj)I;pxs{!!m<W_(SU}G1P{O#}n{8y+Sl*+n<lN
zhorU!S?C%#VWa<8)Og0#ZpQT%Hef~X!@}tV5s9Q>CqiCw;TygX`*lH&Okcm=SN810
zlXMJf5P@QS9fIMPpU<a&1(96NVRUde*81OQ3lDzxH~(x;pX{Mq|L9AH+-&&%5dNLn
zp*$a_OIAY*^bFg9rjR_X7y>*QoQlv`A`=ABOu~9D3&eWS8Xckw^NG}L6|N^8a17v(
zF!LNx@V8U*LVqT+T35T_<<h;qCF%k!v(kpf@~5noQXQl24H2RlnsDhj1O-7ExKlLZ
z4{O8>%w#H?sI(V_hmGh8!8ECI8CPJFJz#DZBQFhna3r2i8?JG&LA#IjyIrAhd2gfJ
z?Q7f&G#|Ip?ZCt@1tkF9XN#n2$ZLAE+mxp9`5-y=9#Y-u{w$soQp8W@Q|<@~Yz_4=
zR;}z-l?kSUJfoD0hWdycwQs?wAh@^QO(|L{d3ZQ}rEZgC<}gKu=|x(@9o%XPs1U5U
znJ4;c!%O;RTj;BS&;m1QLFglt+)1dChr`Sp_Y!F*vQvP5&ZUs06#0wp5e}m`IYEs-
zq~d0$KG}XMBTqUoi@9Sl6q&#$tuT%^atz~MxT7SDPKUrEOev#><L0UTy**3k<;?bE
z&EL_%(F<|AL)}=x{u(<@BrEdK|M&ldY9%6DVuP~6B@0fRc)Nd8q(_QpTsU@BYH^hF
z^BdO-ka{le<(|CUlb5yCjqm1}FS)`So12^Y<fIVH0*fX@G%D)*4MhW4`l>H<g@?0?
zVst^R(5;UEDs`mvpnH;45-V4NkKNA-y;>*cj9|b8)>Q2(R#k-zMCJ$bHG9*J3nxZp
zi&@x2v8e+tHymM!B(`@Ol5$s>_n$S-a@Ef^3!vm<IK<yQ(f$pNF#u^(p1Y(54SHE$
zKdR0y<DPJ-hfC6p5SsNd=N{z@%qCS1(i1ouY3d#o1G?534}*w+wq_!nkBTde5U9+w
zEZonV>QdXV*4}HfV><r0vt1vlDh*WEZaQGmfO_`QLMywW$8EhQtf~@RisN^j{^VBF
z$7Zh0EE1K@WCEQd43#l79GYt0Jp=Ool66(eo;&6SZzK~lj{7^(B8oUqF_)n%5?kZ+
z+{Y|+Y!`OUQxw6L*Qt28RXJMNtIOv3UQZwE`Nt}ie<n$Ftt9wLM1mt)K}(If8@WC%
z9q#XYs<gx{Bbsx|)<D}stUlBk7&echV4JmVC)_2U0Y<#F^b2=-Y7&m8^lmRGzAL7>
zaU`bcn>Tu|CyuR^4L&Vy-q`)#X|b{)n96V7)aPy)%d_Q;xfN?19sK$E&0G7TSN?Uh
zyfKJ6WdnjRB}(B9gw+YfyKFCrvVKGvUxH=Wg<9#<`xNba5@sU>RMTlGK;8D$MkT(?
z8;Xxemg<qzwjE(F6rFRlrga4H=F=kVZx~VpD{j(2<a#G0EgU%x{00$evg<6;_RF4(
zxfTzc&J4az{x(I^8(JA<q6D3eF4L>BVO2jRM3fIuUOX`*&y4&Y861;APN0|~Imu^n
z^`@ZFG7Pk>wu50Nx}khYhuA=@o7>Nmfy6d>D=Zu&Kt;L|k)3HPK3v8OFT>oOaIi~C
z>ISO!1Sy|JS4M3JlUY?iN(DSFpxd3ppd|(fF?YylJqaPr+ofsp3{9^s)9c+OMD=A4
zPxbs$y?Gw5*MeOvEw3g6KQk;4xW=B{HLF-#dU_9j{|UiU?N0KK7EEZ}ZrA*INS!0O
zHHO*ALSvz&VUEIk?nT!jzHe`z7EWYFZ{+2-z7O){L|jFGOP&;kb>hc9cF|_@q$rv{
z_R*&`k2m(Wf3ziVphfp3Kb0if*(ag=ny4BRr&~^8BpuO;!-!-@PHX>hw|(c%ofc*9
zP^6@Ent;b!P*)uVRuV&bJvF#bA03>f8~_@0Q_mKvJI-+<d8Q}N^!QA5d)K7`e>{t@
zUA>oU<v)uh^pLCe(x%U=kxE`^$vF^fxH<?Vv1|xDqx_f~MMJ2{m;=ZYPQ;rDz*J7t
z787qz-aS7OT8N--zeKabaqu&im)e?$H^Qd^OXJe9)VgD4xf5@bV@H&Q=F<v?Y1?(b
z|K)XS%fqu-YLs*<ptHT1uzY7JSqqifTe3~>-|hLwdTB|qq;l3E8Ln@SthLnJG)v1j
z_(3!92|We~oF*sI^yp#=r`F7BWYUT&+Om7s+hGxnhs`K>h29dxnuW+^^wSZ9c{Pca
z-d}|VOP@sXK_k9Q2OU}V&Ry{mEHotnZpmZp#03g}5{siAu2+@%qv)M$jz|qYkEHC!
zuFpg-7$BN#oX<W;(%u+^W_sGplD2i9E?)N<akajrt^1Pa7s^R$a=L{1Mw||3A?{P8
zL8)m5&Yc$NNOuz4MX;A;ZwFa6G#-Z_@8|fI@efH)a75?sI7W+pOoH#8$@x~&4sI~4
ze@Zw~E81E~TOuhf%!6>m5~iri0xrz1R<U1bK+;AksaKemy=f6AT}8QAam~MCLX^10
zMlI38NiE*Qd0^GK-1#u?O1*fpoT+TUvn9)>#R4sVFd*y@;Bu(WO_Oxgen~@a$P9$>
zZ4B{bRLqjo{2~*pC^HNNez?1W$Q0=ndB~&USP*BK<ISSH-1guYV&$9ADr2y*Z?eeH
zt>?yz^lcnU7$iX@x>~QKQ{(h)KAw-4zew5-MNjL)f|;%2Y>D3$;w{D48YY_z&t3Vz
z36>-GFm!@eaE;sq;z#tmUGH$^G?FAk8=8ouvv*BM?&m~0@>r}YF<rTpQB<Sgh=@$I
z-3l4Fhed4>0tmUAR=H?Q{S<(r=fEZMOg6ZK%^#5Tf9Iczki@BJ2wK1U&?$2~ZkOso
z(G>CDxf|sXKqq>|NzeWG3(7J6346yX-Q}>*XOTnUh`7PnYD-R=FM3+>&8bx7jJnmy
z9NZMjeno)^<A|r_+w3Ybp+3GQZS(`r2DZ4oh$4@PYrnWV;Q<~hb4Jg#BlA<`;2;cy
zG<!{{$M>)Ehz%4;M5T&Ec6tRrC6%kxlAtHto9Sff7;z>QQ#;5j%A0KlsU_~_pi4Xh
zOHkK*4yg{Gi;L)~#xRJMIrlEr+elZs9a>g-QKXz=dCzc4Ib9U_XX$n6#Of2WV86)1
zhUHL)y)P7)mjM*z>u+~{c=+IJ;-Wn4^B8f{D3^V#4)Iy^6khsyii_5Wy+s_4^1KkB
zYuSO<G_tS*^8d=-Be#AT#k&?Xt^R4G$2J--;w5JKx-bgA|K(VVP=55N4fWL1lM~C+
z6Q%j~N70x?_5KK!9OP&k@AB&Xk;x1QnXy5sSjyzdW;{<#xEfqL&obFqaej*9*pl$0
z0-_UnKCX#R+_I_eS$94mV?hF&;`q_HzkQK}8jYQlsa3M3w47JfPa8QsgX`;n#RAMq
zozi^^YnIHSJDD8fiINYaR@c{IMzuy5{quf}AoyKV8eZ}sMhw2#A|6RhP+LO9+sP}2
z9ML|!HMx?nZ--Pm>qL}YSMQ6wqfGxWpRv-g_d6;mQ|RgI-54W90!I-hjk%Jh_CkG>
zYg-aSrMyl492!Htg7Nw6ib57}Ufd#8gG_~ita;VAA`C0*gUH_U--n?~LeHWCE=*1m
zL^iYf(T5#(1`BAwQ36H7VLstaqaKWOkwYxB7!w0qcLe$<(_A%+382ekp)Fs=)!N|u
zj%xqTsBc!C_<KOHcpTS_N&fvmPLG?bj{YwRfByS_i~r+XDHj4=y~xFk@6;?O#H*+p
z{u0M&*8SI|D`C{hzvt=(b0vqFpDRRMIyEp&rnC!f3qOtoa*5<kcFSZ>Q5X<V=h(Uj
zz(2Bwmq<wWg6=@^NJFt>@q)*XQ}f&@&~h?;g|lz6KA-ExnuN!-lFx44z4!Sak{t*l
z`u7u+pcysYCUOD}#C9^D=I%f9eArI%^NY`&2%e7J1La@ce*kUTp@y!l>}i<y+P>R%
zu3MNZJ@7GCFN<(2RLX++3RpZFy8p6twXaD4|DLON&y@&{+=KdO2(6cB)8x>}V5sYo
ztXbBU+i3kr+vxkWi)BXlp3lkPwxi=O0!KnS9cicIpKP@}vV*}zQ2jAD2!nYGeeM2J
z%r>QUk<dB`V0krSS#=oQ|BE*?1xA#fg{LInpiI^<N3F&CV#Qn1{P7j+uD{l~nq29R
zfA8Y!=gON%wwWE8eOOr5#?Zg*{kh>%6!maa#tvOr4Jt892&hA7V!)fQR=8Rp+ay5S
z$fLPCEkn@KM-5a8M#bG(GD0{q&1V@h9J5p$pTM3#qJ#kz4hTi-7}q&CYJ~510sMK|
z!4S;mJ~enFeomj76S8q=IArt(GDQbW_fXJMb-JUcl26MicAesj#D`{~)-=)38#nQB
zOc#Q=BFkW;EE^2SJtwG+aze*uv?aLq*Vj?pb|&DQRAZe`a-2?+H99LSka<3_5>F_q
zd|#Ap^_#MCa;e=N>ns_tqQcKAmU8Wr5`T%;ta13>vs4q%;{M3&JPNDRXoRtx&LLbS
zYoqK0*{##le9}s+|Eb^+soMhsDo#%c@e<a$n`|ZU0t}0p_CR25br|$9$YRCsd~cQw
zpGs{09(v|v!}#YlDSTdL0a#ZY1B#dgST3NyA-l-@Fx!>cLA=BulSYPu_Zhcu;ZL@N
zeo|+JTELK`l27KSbNIjh$Nz14524?J?crTjq49+4OuLXqC`buLLhN0@8pH-ej6-c~
zthHBMWR*OmVv<G8Ajrj<VJ+@7n9#Yi)XoyO8~1|n!W`8+9*8~e+j0uRd^#!Z)#6-V
zlQb(U)K%GhvKHS3Pst%k`nyncIAOr38N#IcpadLa<l+RYX1K(CW422-`A$m3&!sRz
zPBI#apHDN-78sI5bco4mG_w>f@yh_0RlN71d~xtL!20g_m5qp34sgW}2|#~krMH1x
zl-G@NNoA!8%g^)4lrT^h0zxP{LT!iLX#6PEhk>P60TXs4j#)JD;F)JSU5lsy=k&do
zpT6q`WLwN&|1^(;Fs-T+YZa$nSS0vUN45jIVx6P8+^1VIQ<f=r3<HQU{Uo&}EE%AS
zr&BSnPczcEPpFML68TGBNUBJB^`Y{>IBuZU9wsrmup&?dY3=E8!5ANr*|T(<j585O
zix5~<=J=Rf2sa!?JH&0r!4sd|AYelK5>3UPdn037w|?-$Cgj|j>G@_tWnTkt*JS6#
zFD`V#7X=^;ry7Xo6U27<Brl=eXR_|uMC>4oZSPKQ?$Zennfu^;*h;BDWorA)&{L5Y
znr(?nJKARc!xAO$PH#9(PsGVBNfI@{UVjoq!%>6#vhh6T@Wo)BB}YFM$IA>lcX~{0
ziygt#lNMT}BSBIWqwnUk5Fs!GF1@_ol#e%6@Q{!oURr234h*Wf8u^06ldX6eQDv0?
zg#r1SBZcMx41=yum&`8yuWVX0jl(pxs11W+%o+FFqs2E?_YHWlSr5<lW<?LrN<SCd
z(7?At0KDeuh;HYRJ1Zty@Z=a7e|2h!YMfl;B?5eq9Hvb~PC|k8Tv#fIQU-_{N?KNO
zT1Lp|lbT6KTj!9Tl5f+KH)(($eS@Ffl=q}M{9*<R5qdt15$G>%q0(Zsrn4Dcj-mRR
z9e3#{Cvw3o#KJq#mnSa(`>cMNg!1|WIqr7s$X&hHCC|E4j0#fEi)@x6VT_a$v>A2S
zRz0He2PL>_OL6=g`bQ;2XAttNjuE{ds`p8tpOBIyqlBG)NW3JpW2rL%gvN5u`F>k+
z9wZ7Gg=Pu#qS}#QHHh>*RM=1fZ(If~KzJM{RO)*yZr;}N4&!t5C1AeUAq(GPdcp8-
zK<a4Jm%<Zh!)^DPPq*pS;ALeRoL~=Vm2!S8P?R&H0GXaGrn*<oDTUNatAKj9wa(fF
zB#W&{cu^PaQYt2h;u!2@l?vJ7F(<G}tz5C=L=1dTc)UEjkm|B9nCo}lr%>pab>Ag*
zURYjYSqV;Gei0VT4JZRHdclRL4^u-vJy^0W&7_!xyc1h+d{&Hu5|&|^3#y<<h7@`t
zQzjF;6GQj8X?-Tpol;nYeNtF$Ce=!ww<gSLMsNhv;PYom25!-ZMJ9DfL|>3G;E<v$
z$`GM;1x^-fd_FWBQ8$RDVy$MwrlwQ7E=b}?qPe|VU#6QJK-tvYkd{_cD!d`9b_QV)
z9pT7lnrV}>I0(V>6>CV*F~U^s0bG=|BMQt^<!9Ka5}~Vie6?`HPLz;WKB(u`Ni`$b
zc-9B<U;lR85+gkH6ggvwXLXsoQ?MB10Z9N+n3Qz_yyI~ez)9mWFYLdQXl7@6%(C?|
za9kqv3lP!<AapX{*8t?Ir)%X^Jz9+)JBe5S@)H;0Xey!|Z1C-Xm|Ve2woh^l;M-O`
zTb>3t5rEQwC?e7|v6$P**?gQ%I)aux^03Ut9u73!V0X48n1i%5L)eIg?ix4YCMm|q
zF4Tl`7Ccg5Zw0SFm8Vd<rz=>|vcDafb;KuE3r`mQ74YP@mW5W`yVpx|i>v~|MkNsm
zlLPoHN9HU#RYn7Kb3LErj!7p1;CGT6%nEmJ8DPAQ{Ngy-DVr{f&ib-9EzI#4)kBK>
zAko#1d#WQvt~zR$X@zVE|1k-*fhNY!+I)F<F2Jy;3r9+JxbEUwnXDZNr1FxU{$A@!
zNW3baihHS7S}molD8@(we)Cc@K1>Ka6_}b(21tcJ(EwE#gdK(voDq@v67G%&-#{$Y
zZ$4KlZ#3*LpXR48heAi%#Ac(DL`kh5)jSMis?$r6CfmYiKCXQmEq<J|R<wk?R@c`(
zUt7-ocsc(#nXYL6V<oyKYkN{p!8O=UUR=pP2MPaul%M_?AUEygU{YM3jM6t5KaOIj
zZahzcQvE*t_!1t<8PTo(dbX-Z_`r6d$YM8a_$#Mm;f)n7dQD+aDSYhD4PiDoaiK?9
zM6KkF2~wfhVXWqIYN#W{vK$;{vnw=;+8AN*7B)Qf`4MRpXnzd&ze!a4kf(xU(?_Y>
zUX${}7#-hjS*A^BcUwdHY*UxlXxGtuo!U8jeVc|={)=mD$(rg+ZPS6;UJPzm#nX00
z1k(gdwbe8lX0!>?4FkBn#mz|ROfF7i6NqLN$D+(sn!8q#(Pucn&FXv2mIuwdSx(u{
zNhy10E}5N4$Aw!r7Qp;daSZdk{<fqtnBIo-$q=dYNX3bgTaFE2iI1yMju})UI#LvX
zt={Q;(5<p54BCTIVuw)OrI;8F+5A|fp0Kx+G$7qoGNW$QE6L4L*Lfo~J=mqp6<pw&
zLQzRwTe2CisiDOv(i2CddDTkq{%@F{5Xu+cF|7s1p<ko|>{LMmpd}(&A<>bGB`(Ew
zT*aoE1#np#x#<i?6*+sk3ZO1p0Yr(*Y5CS}Ffr0IW#K)VF$6NwDru3#VN8N)5|eTo
zGAn4M0AdpsO76u_uY$R6DEC7RT<~dQVRr^_L9eb8m0%G_PZANVskR_&ipn~lsv`oO
z9hw(GtHUaeeq$@n98s|R5J^!+n5Jp%TU`Q8ik+AmN}wE52^54;HEByeb6?P2)Xm^O
z$1sk)UaQKdws1k-Rcx~`#~yF;IMa%Vs|x$QM>RUFt{8pET@fHRY!;Xa9;fQ(O&;F;
z;?A8ZK#N#?srqR^4<r9EWc^LVzbXEXOzT2`4H6nqVE)^bJ$dyJkd~kLVln<`lzFfX
z@0crd_@L;q5X*Tw6`~tv`LHq<sHMkpF4+}q<cz^TPcJ71G;T+Otp>rDWa*t)(P-$E
zBP4V$6Bj=3rE@nbpbAv$?}h9eGcjQ^`IZHh=rWzM;#xydk@Q4-_44@-u{3l9fQhqd
zF@dwp?dY?jc(XLstY<ePaV2_}m<g9PN4}}+p2rhg;96(_Zhke67_bK*|Dx^Z>$nE4
zpys+H9*l<oG5d}td7v-`mfLYP6%sY0e(9{L_9R*OvWpE!ixrOq<BiS{uUQo=kEZbH
z3c6()s=@-o219$9@Fniq!!xbNuJujwDNf{Rses2snyNZQyg&mKOV<+4Uyv*_SJ&6$
zEEJED=s&S(0UWbfP9|~&4lw{IF4R8hCR?O3!Y|6u#JF<J40`6Lc4w=Ar~?hWFbDv|
z^$XYyVb8mfb&QX|KkR;jfI2v5y2(-Se=bQ9$0mH1pPotbBC6aNll_y4Fd~QGV8H;H
zfm};)OOEXAn>gKWAr7TuZ**|8<?$KratL?t-03F11MUNOg-G7oNy*}|NtAA!121zZ
z#hNZ;IsE%bK3;fTg$6$=LzF~{E)^)&e^bCxZnYz^g8hu#-COxYbu++$l`U~J@^owi
zm>!4PQIIZwR+g|K${TIK%xYhcOe$pj?og81AQZ3RaKi2x0PiSa(Q>p_wmwLeYju;D
z@%l;_Zn>uUaF|VuS%zLqH2|F&$6S1_mXGg5x?Zvtw!;#Bdn7Jqc>Ukc6Ro;bHScr$
zFOm28PnWM5oP|&&^{=Y3tLETr5nVb?1`jnc5Yog`Q*=PWf+*H|8SBL6!n;-}wudTO
zv0XH^_<NNn)H!hw*g8EylD9IfIJa4610xHxV^WDkQra)gD)h_ffe=k%5R>tx)Cz#n
zNcDpY2^~wP#v%{&)Pgt0{)BIs^Xx6NLADKt7(I-xJx(SObK5wuxEoGbjsfaC7aB-C
zc*@tcrn5uh*F5^KQxnjO1^cZjE6)xO_mU}}qJvhw$zB%&7SAYX)Y)+f1KccXQSEIL
z?$-j39PkkZR?~1xZ8rd|u2n5+EkhDe7-+#87QAQEbF?7r>ThGa=|drM0q!rWCHvQr
z#4d2EK*cxh9K!*jUY9%>{Od&5PSpy(w)^s6XaBIByx!a1I^1zu#Ln}b!<`o6vVxsL
z1DA!rl)f;w)N%Ap>!2Biv3kV3og7b#H}#pey{ZeS=9HyC;!*#Avvi&h4DTV+`9LV7
zBvh#tje$hIupG}ElC<>4iG30Spo4h1b$GCP47mGIhfvNXed9w1!4B2OaPa2?&x}@&
zWow-Nm+J~1rpWZc1FH3%ee4XUD#-cnhfZ&OANRTHb7n6+5WINgTn}xl)%?sBJ{|L@
zDjRt5=flGrOosc#CuMEhjL~q-9ZLbAD#5isbfO~1^NLA&_hhh_|DKJHG8;Qc)C`tZ
zT2|sJ=0W{NVKCOh@gvbX6Tz%I&?nO25b?O}I8g22#o=BQ|L~n4%l*7~)C+;It3{)R
zpqfeY-2qYSMDO-XtydXmGm${#iZQ-+<d+tw?2}idG@YrF+FT8E$H$i0i);~QC0{FG
zl%*HG(9j?t<xv(}=%h(w$4(J<YUsWDox68C_wIBqO5*s*KRy4rc!L&Nx!r2~{}G`<
IR`_Ql0IC`}$^ZZW

diff --git a/backend/windmill-api/docs_snapshot/llms.txt.gz b/backend/windmill-api/docs_snapshot/llms.txt.gz
index abdd2b0b27282927c7aba779ec22b86303730291..111dc1537fb49226cb20a784ce8f49674af9bbea 100644
GIT binary patch
literal 9144
zcmV;pBS+jHiwFP!000021Fb#VZrjL`@A--b0-Q~-lC_xG-G{-!2^`y#cw#4x<(Xiy
zSa4coOX`>+Ic(C7=IggE-R$N?3hDSEjxDjPtNK#+D!vq7be8ONn!b4PujY55jgXnh
z3zf}HUYD_gKNDe8x}I-yQ^{4T#A9CGuhaZdsBEJ%ej-s1DurRCC{kIi^KvJuT&!xH
zCNq(j@m86tl$Dy%)4M#=RbC36RjSNnDonnv9%TuzDq&)osuS@R$2N1BnSZ#-^A!F*
zy%chzvdR!hSy%Z^RyxnjiTJe!Qr4;ZrdK-E)n4Rl5$6e@uB)y1=|BEmq%zyoFdX0%
z^(xgd0VzuT07!~duS!|&h29l;Ss6xJiZln*9H~2)TBvV8vQ`<aQ(jbhr~g)o0O}FB
zS7)iLVa_v{cqY#3(&Q!le|0JTA^up>$1uK9nE|9<pNI>j4=^xlz9}Vqi3G!ML=$6v
z16!~u5$R=?Kdw`G50F2|^}U>l^E$pie@mGD7Z7Mv`JiKE2H+YM*CnnB!CWps0l3ra
zEBJYKd2JUn(G`%pF}x2I;395oQ_VVL@?O1o@kOnSuGBALTUCYmWwCgCd^~xyhw21Y
z?8SK=*SKUv&f(`4NgkUQ?{xLPUiqgsfM~rsiSymUJv>k4$~1qyI7{<7@dIR0w5M-@
zLs+eEKf!rFy}3L*et|ba7W!mc?cl;(JSaFFh^i>y5Q&w->wtIXLF$w)i8P{=k76gw
z`y_wN#A+`9sLB$ZZN#4^yW~&2AR12Z@3&Vc;%*CvA*(c8fh1fh0-Bn<4Ot2UVBq()
zh99qTKu7!}uHVjRQ&x3)4;z-i@rSwK0BzyxY76%|0r+txN+l7E*Ld3wZbX{y%zO<O
z>7@Er!4|)KDO!6d;6m4NRhJ6Cdnw+js>1nzNtBgJUd+Y+c0T&QS4Ve!vEj!f`}ks;
zKSos^)ka0l!@K15FXBBcc9M%r0V5o6KFp4fy%9_JsxHJHm>4k;Q^*)DOANHb1*ebK
zx-`gcN?pLgCXNQH2fH-0EUid$-~n{_cRH&pxJ^jbl13QuSFPiFntm!}Jg12~gbrbk
za6g%`mUU)PG>C^M@N+X(Y-*h-LwkR>FVxafbhEFvc{UU8a`^rI%}l(NW(&9cGhB7P
z%x5oW;x{;1`1fiLKWR$X=6h8VslOuY{Q*LWbsr{^<O7`MMxwMRTvn=>ul92T|1*tv
zWq1c?0(PSc_eqLfomQHkMqot1X;J(L{%{z+kABt`O?(pJ(uq`UWV{DH`Zy=)1JHy@
ztmF#_J>x@}$V$!=5J4)#M_H~VuxG1WmWdSsNhvpT_yQix3lM4`p)wSLAoKuirXFeN
zOu(%Xczc_f`RtNpY(DytodrM<0*XehQ5%=uWj(UfF!okS;95Z55+rXGKv+pQseDN?
z<c&<@U8y%4Rhp?JRd!s50{d}u3vpNIT(>vzcUW)(dQMWOD4-wJYMbZx@SEBJ=Z62^
z-`(AaGDkK-UmLt;s9ab9?uGlu)4L_!Q}}WH`R)#G@EP3R)4ze&3J^V@cf2cgVl}B!
z5z#lgP$_C-Pv6qQg81HM?)H{-x&iHlI2C4aJFSA^mJtL}1>zAdj+QAX6!iTSXf%Sf
zOk5+7R$j3KO(Wft7&QiXJI)KD_k@KHvplcW5u5&e_2YbbVgBk09puOW8x|T>zs@N*
z%d-qcEYNHBli2O`p8k8QH=kkDKG5H27jqKPc>h<@*i(E8dLfGY=ae!F$v_7va?^qO
zzF*<N9b{36tojD}BmC}0xD9RHX(9pTjaa}!JgRcJRls=`;$!{16v2XR2ZbjKyI^kM
zA29i#EDfk5c}ve9rt9qG^U@HTtt^W{DqyN3826=M@I2xDu?8g!zXUc3X38FJTm}~e
zwKyV$W&QJ#ld%5KKVx>XI0qFHu5a0)>B1f?neE-9dWY&YX}pbz$}@@wEoqO1sSC8y
zh@5x%^OCa32X_UgnY1gx^Rz1sPXqpq@}j#dsFOV}AzuOFASpD}Bw|`4h@5MQD$C(R
z2FmC2Qd4Y)ZwpQ|iI#8xk#dF#l|g2Fm>N>6pP3+nIZP8zH;pVFLll9KK0?gx^U_fc
zl5jf>``gZz+@5{}GdsRVR&az8gt7q5NETa?&d*5}z>YQuxu*^6P=?=LEboW{H+!i-
zJ1_^t%<0W#n?h8psyRGrhY7IN6HstAOc<DE&rA+L9Ns9LYT90fBZwH-l4H9BcIR^w
zW2ythG}irSVuBHT_GG!qkC5Zd?dK(`0=WF~AZfw0lL!pP5qWRx46F?>%1*u-)Q`?p
zmZPMu^bWO9QmxOx!a$K7E0~59(=y%y66E^%9;rKR;)M(bgyewk>`?wUknq7%<Pbm~
zPWhn98T|#?!c2V4SEzQ^K$=sQiM%bq^QJJH<7hHA-ekfXgzkK!K<|*~FZ%uRy9Qzm
zq(_eQ1q$t`86VZ!93V!xhj5Oz{qjcqTIM^a!Z=G3xLYZAsv;U`V`4ao`A+{$4nOp!
z8`5`vTYmaTM&?e!;4H7K!<%%5)^`cQL?_`i8o!!6ix@}*Kq3o-3H^c=n>M05)3&z&
z=zP#*1SM*X2BIZcXGM(`Z;xowyp@eO(BXeW+Ud~6`yNFyd5}O(vasI!9>dOBf&@)C
zoZdbyWL)OPcvG@<vq=5}#u`l941JGzNeU`CYOM7(ZN-ZQT4bRGi;WQxbR@ZX(D{zR
zfVP|L=f&+$i))=-eiHfWD_WoS`Ov4p);Hf9Yhe@G_i8_XkZH}6Sljbc3ygTR{Q31X
zsu&MPQKYj&9^Ba4%gxb&Gqe2JIXm8_`3l2Fpg`y7?j|q4SX#8u-`Ti!c@HySpA?K~
z5x{2&33ncgiJOFr7ByoBEE~06YdA@8Brfi*n&TjfGLMzP8`R#i^V4^8JS$1~1V>|j
zM!&j}JNU$J8UkE?zM2CATmH;)G<O>a2MD+<#*iiwRU!z!<sQWFWeFbWxjQO=1D6J=
zz|FJri0?SwZ0E>y*V`ahZZ-<P@q3tJXw5O}EyhD);&780HH}@{(fuR0)*C!tvNcIa
z8E`P%5{iwX@>l8@Wkv#=98jkt2}@H;Vs&M}oam@slqEdil(=cgD;yg&3Sb*``dA5i
zX2AWZ{Jg|fOI4wVYG%cW{T@WSA;!kL66X}m;_&Q7TMqDBzM6QPKsK8W>%xz^K?@Mx
z$&4JfxWI@43hq?l@>bH^Tg5BYYZdR~mT5f0_-qaekYm|4jNB;7{)EAoBt<6P2nT>}
z1p(+#<PUL+ERu-KbF5>Nn5pA#bZ<}?IuS8L8^EHu)nzgVSy=6T%oeHnLzddJX`^D;
z&586pI1ogS1<|4CVQ88*b+@WEq=>ki!`FrOu2c!$AekB_IpOHCO7~8X_T1(~-4{~n
z#HP&aVj@+n4Mse)L(O9dw&Rut{<X>YOd_8uRE!+LE0>nn;XHL&lG4#qOF)0iEkhwE
zpagw&>g|qsP?saYr>dtE!o+o25wh|j*N90{XNd$MgIA`u%3n`EIlXiW=ycAhBR{l*
zB<geky0xb7oT5v9Vayq5vwuz|KnXyXn!@ataQL%oTjqt1XX08T<4Hl(DOD_$x}O11
z5PrHH-Dq+>Cey>i2ICk$fuwy<l7v5}I0mgh6GJp$91E^GURBA-B`2ZN|LG)tahWdY
z?!-XZ^jpEvR%s|MH)uFMb|>izk-$a-VG(+g;E=}mMGn@LRbG5v5Ag#^9g-=9LM#11
zK_Ap!AGAS9$tgn={^UK~Y%q#Ny67l7lEd5!N#i0KH*iLA#?#Ha2DCQ}k=DSE4Cj*X
zixviUVwHcJe7Nkmp>PW78I<c`k60%g2!4K>(P_b7U$=A*T5Jp22}y4zaLz}l*`5{!
za9zBC7-<w{R~3`ivnV1Q9?|d!haZUHhD&F~9E>wI!fACTI0MUTjC5MQ$tYsXZtCTw
zF&zfaAGVguo1nP&djaP$zDGsc3FNl+S*o={?yk^WaQupqd_=Qvw@T!w<y!%eE#~(C
zs&MUi<RO;;9zwF_a&h`)DX!>YvS8vI)|R|JCJ3+Lg@Qdt(;xL@!tZSf7Z;?PPjwq@
z3a@x*<cAKN*;Nm|)yPtPuP|bbt0jxZRyhL>x6}2mCxPDD^J1;G)AJ9Oq2dLkyD{>@
zwT@|W&&+%P^MR@Ikgt6Kv~40!YkntlUs*QSN}zdd{pW$XugC@h4H~%i{v;rkfSv=k
zd6|e+Zry8N)M`mVewRaFrVyMkxCp>`l3h|IkQ`1|V3-q5^lC3GpP}msYh!F$87O3Z
z`=*bejZYOtYOSI<*<@m?;DD}_tOBZGB}k2B!}ar(Gn&+2wa%tcYG}j&FK19lGzQ!E
zlrBkmHtl)4=kH8rU>R_(Ci*>hym{3KRkOJ<v4atL7!kwhAZj?%4DN9%S9zcu2b1>_
zB;b&e@sG|KI#X-%3vMOuqBn?9_rO0`RiOMP|0N9H<z64v<nEn7p^j+4Fga(J46cp(
z7t$igt=!7vXeVjlm3#!tnq)CPjAlWjQmk#RBrlIj7<-U{WEv5rs~Sz%iSi<LAjsOW
zAUecZKX@w3O-s{>{q)Ao-al614o}4`7~1nkxbJL!a;4-BdCUs$qYwRgmx@!W`v~p|
zRiT1qrb@8b4{bYpaSL|}xMPy1`DV`vrfwYZkVXz~&^J<vQ(YpWGjW5WHU_i(PN8oV
zRbWK@1F4J_;S3nhs>X~s;svA7j@_sMOUixKD4z{_VNN^T98?V$2XrVPuaK!Kr|KxN
z9USrCgPx|iJqfKM1~WjOnl1VRfZeJLz2?T$%I>i>W`Xsla4LG6%|4yRljfWY6A2(F
zk%JOBC<Dw`ibGSjBny&8zScYMRzN={B|G8y&g;rEa^k4oKg*8kAN8QKzm{Qjxf}Uq
z5GR%>AQ<URqO3p!tXy=&1cbB$5;pOR<MyLjZWwexr}$vl-})h}N|JPD?4-dAqvgYg
zPe$!v1k$1xFwcW1@?yTNSsY?;(P4{Bc(WCobP9ejDB5hJO*$;GKnVmD@5Tv5pHxg?
zD9#aPmz1w|u_xKCBIO*7$7p<-6AAa;&WT%EnZ19~<~v#K)Frhe8~gKRqqF{#9{Sgx
zK?D%PI-rwga7@{~c3#SL82OzT?!eI`MS1i9Ge|lUa4`crgN}(TBi9{Ol$YKzh#$ZC
z7SI674HH7|AF%;e1MuEEqY|t}&l_OfcZZcsUseMIQ-<~kZy?Dp)r^e%$g!0TK{=1O
zNHkYsAQNT92{p3<W8d1H>Wl0_mw85NXyfdi7?bcIq6Wl3n9|p%sG&)%xyv%K#byl!
z`b`k&CuelP;V!<RMWU-lXC8e`l^q$mkptWVXTudok?bDhON(pYb{jEP7AY&mFp$LC
z^!2ftfEf=*t9%>b@Cb%?&<kQzih@nn?r9|GZ(r`<MBgj&1jA*J30Au`=r*}U2#B!$
zRpVZ)bcPjfc=)Fs26R7}h=-H9FdU<z$M{V8nTA4aonY@!q?h7tsA&B6f4*so7%Er+
z*gQ-d8FlNZU;zh3Jg9@V$~e~o%M=38$jm5Yz|j$k&ro5UMZcwDQq7er--NYKTa}LV
z#@VbO95BEP@Z%0Az>E;<1eggfnWL2=cN`<ZaS#eA<Y_X(0ny%Tj-!wyu;T~#>ZUgd
za@c{$F=e`!8<}CYKM0GR>3C!t)0U8buR%kwEQK8Hqc7GLMn>VtVTEDaoq%b8zp0>(
z>Kk3*E3n~K)Z6OyY?9;Aj)|)WHh;Thb4f{ojaP+)^kudN_1{&|J<aW}TQJ(b|7+fY
zp0?A8<0UEvK}a6^)YgRl&*}9Q-(cXx;zJFVXr{oBx0GMYf({xU{<Et~ON<3>_#BUC
z(2eckMjo`H`jogKwkWcO<0j#e?2ShWMTUCN>T&AA(%{Gr?%-rU<p^%z4e2X9TyhBu
zOX8%(E;ttQ#)jKrA69t{O7!HMt$Y>vu>%+MYYRADPK+eR{KZ3_);loFwis0avWUmQ
zQ!o&Cp#Wno&UdWW<9(T9SgYP_iyCPLrdjHoCG-ci7hxjN536$bY9A56$Yv(>Df^h?
zy&6hmVxRSOo^5hWpt*&$w!89s0UK+!of0&p;7YDkIuY-b#&l3?nA}h@%*@9kW?na%
zg|%aJs#*?No~EaRUNs6V-_{>qbJB=Osz(HH(0XRId04=Ep?>=lhCZ{)PvergdZhJg
z?P(!SFQ+(`sbC*2#{+9uQV++pU8K(7a!6#|bb5k_9iq(@{3I5*5kPa111t&mYrT1j
zldutgQD{*EL7PFpA%Cuzv0$w^W{(56Vc`R}+<S@-S?G+dZN^YYn=HJpNgiSFU>X57
zA16XctTYg$2qATmKQJk>B#K%b(+oc5Xl1S`&-eTJpmZR>QU+^l9r2L1i!(?<e$ecU
zC(&P!RD^@E!c&bV0VsYt<^^BnaQ;hdcELE^fUTB|jqnuq;f@W}kb9;|OkV?~!-4f_
z&NAaLr&kCy=1(<s`HW4eNPwXMfVWet@$$H6#zt;zU;1^Shw(ON#aU)xlh4A6E=o4n
zna>w-NZWMCe5#^aghK}|dFy*}4VN-A)TTsdAmAvb$rZaZ$9kC$bJeaZ=UAyVazGo*
zXhO9XeQqAItyfc#r-2c+r8wZ(a<D<gC-=pcV&MhQ^w7js29%HE{w^-7Hp%^{Gh5=*
z5j@>BoOY`~IkrlT34;`vz+`K<t>Zl~p7`_S`3FWxgUJP=8mmxY)q!V~ll7qzU_=&1
z)WGQa>FD!=Iai=gx+-Kouvos0EmC%}unWvJyEqvo=*z0lS(iU^YS*asH9tr6a6kM4
zU=qwBqPRv9R-<s@SStq~?^L1SF%C)k)B-*V_G&VEY~ikCIc<U2GLB%}f%F^G0LH_b
z$p^i`!&~q|4xQFkUgbf)zjTdjw8_(H2@tO5P1Fn>@LyRL;lZ=j?=x{+{=Ii}^|m~4
z5lmfG8W~a7o%XsmriNWu8yIpf301O3;)tn16)|hSj_5DU(IYhOXyWq`J%7+P`-B<W
zoT$G1ge&==$rXU2)Q1RL3D=AZu`*cd5p0u@!2wa84Y5mtHLP^^D@<A<3m9vI4hgM%
z2Pz5+{PBm32S+?OqQQeGhR{K#RF6ve3Qy*Z9GH4gO<hXwr1=g4t{n#DqElM`r0fd^
z2s?SOqKtqd0yH`kj4J?ORXtv05U{f{OXh?epAv%1MEpe+A10`Jn0RacO0h=}FwX`+
z&t}2Tn~n|pFt66S`>`Jq{%%bg6O<<LU9$O%2xF+;jwmr(uMdnrF=iVzqXrY3R#f6{
zlPB;4Q1DUxT`u1XbWF8lOE!B|{P_|fi+{QU4;p#3{nwwCL)g^JQc*LKAmNMz_1Ah=
zhzy-bL{=p?cpTwEClhyuN21$38P39B7a-v;g?+r8`+{R@%AX%{xBh;~EC0lkGjv{*
z@duGm>2@TdvqVOUJw@n*T`n)ehA%;*7dl=|p0Qm~>#TdmlCeeO0Zby_MWipBT{)Pa
znJwLAU2q^Ddt@j$iIrlt#y9z*0;HZ3pEsah;Q?LImic^(j4~asCCI7@bg_6^lJBF5
zc7AC0PLG_?qDTE9SX`##ayxBL39g$+<pDbl3`YB)*9^ii0cFlfSa7z<37fmA>CVUU
zobN^@INz0$9Dn~nfwO7SH!=D6PNC&kmHR0e0sA=+f^UJOL|m7@3^P-r6Ia8uv;v2t
z*{<|Nk4a@m^^|)mY63pPbwy3Ap`GbY*=ZI6Genym62}^=S}2#z!8lmg#&&>bTQnKn
z^xsk9acFKDStNdWU{~MrjcROw1)B*p;lH8M4ErV5=7ZH+rxNX+95o<pvemEPbCoe=
ztDZ{6zSj5;<Un~gndd$<<2p>&f5BXrdrOW?d;5c2*i&nxc+kMbvfs2~l_-mt>pCTY
z%_--uB0TVEsuN)wYt)r`<S~&QGkmSA`q6<;N4D-~1T{%k*5iU#ZF%*kTXhu_)`?n=
zLpG?qiu~}X*26hM?P{#PRbmDBmq9<}bNEh&(Xv^#EvG1k?@GGxz~d3gPEl&_(0QaO
zL3gyq=MklG!}t5K4V<n6>ZHIwJ3jHIp64)rT+;_ScwFv_AMr{vpvVI{RP11%2*|K?
zg|o0&18!T95Qn1Prw%BFa(Wbu3n?B(JPa(hiUr#fw9)g%E#+NMj9r+07SDWv{g4E(
zy1<*TE#FiX??A0N+h5JM!@cL)t){|mc{4mk6(tQ(Hw~&~=39~Y{(HVDA3H%_=`2ob
z3Xv?&&VLeHjpXlNyJiCD8AUL_5^d*XSD@Q#nCxtdiVAU@cySk!tdqRlKZ81qGeo|g
zmuHBY89FC{pYM30@Y0c+nCkk8RM!x}W(B#Wx9PguJppSnbG(vWP|*=!VDldz{An>0
zG9Vu!KdkGLm%0SqF9|{01Ax15Pl_U%Q=z8PYQC0meGEXD(Fl5aX4_)tWOK$_nW6KZ
zOW)JI4gAAL)7eUMh8NlaK$0jRMZ)!|;OHEhLAMK9Fzj=&;=9w5vb7*L*cRMugZ1j3
za9ZBQf<NcegY^%bGS8o}af|)z!kJE(%GND=I=L+{ZVhkTJ)f+jdC)}wgWys>AlF@$
zJ0Vld8acx&pf{V?CB!ttyW3@B;ln$Fy8GGfr;l^8U4bE2@|!#Bw$`-qciIjEtm76k
z!zeml>=OOK<mscn1tf2*0Y6d7*ii$Dr2DFk{oTQKvRwBG@`Y7h`mJ%!G))`|xlePM
zG+pllhbobAK}Dcr3(kBpA{Bp5Zh=b&ya}P%LQwLFU=3(5)O>a`F`^t72O7p)U0s{d
z`u8T?bq+Qgbtb_yzMC?ya<DwbE13K>hyIQd!%=_Nu%9}D!~KQ9B2KjvVU3Gt^7X=J
zBRg_f`3v1gBTo(?-pCynt(<XmfTSCSt$o4<X%Y53p#cecFx7Q87s2)>o_rN}+!K$H
zuSRTIl=ONpIS1C*^WEWXcK8z!Y-YdwxV*T%n~C3V&QI?ySV*2<TwUB<2=zee7woPi
zVM9C8Wd3ok6n1=mA`SOA_K5`Wya!ho`%XU*D=<-?x~eqmL7bMKpNf+C>!}!_7ZK;B
zR&$3@!`|Fa#BKLi_0(HJv#!b<E$f4*y#sdjG|V<}@kGR0X<eW_Etd7_Fov8H_B0$N
zj(zIhcDtzC3){O3wuQx0ZvzZ|>U{u49@8TFT)A_6E5PDRrogFXIfyeUXBV7(;onkW
z^D(}MKBE%Z?i@p%Lk?<Um2X{R-)+EpjCG7pe<{V0S5b_lh8B~44pYSP??4ZKq$g-q
zVmq{g9Y~#f&^F33o~&9uzGgNV2P+z>X$+f^)PBpohhil1=;EZF97j<1Ep?{6X5#$7
zt0NlK@@%;z#5pHt^1CJYjYgx0q!&jVIc>wOX^>d=QY4k|L*Xu+Ud}m(QzbzQq#0GG
z+b&}+siTST0zlgj#P&OV4?^BWEqpdVr%l*mfC*VA={mv@J-@Dn)Cykh_5$A&)K2NQ
znuPb|zE|n)P2hxg*3D?7tgk(?<A!~t4{hMb9rBFgJ6-kVkoB02MsB042nTc*3~ixy
zgB$?eyya)5=QgxWmAv$Hr_nm5T;SW5xTKbfK>_`<%f;Dw_@b?opg`3Ipr@9oR{4>b
zcRQ%v4lXk-HW0obXH8H?XBx6?_obk{M7xV3JC^B2UR{oF2a)OnQAVGZdUXkCk^?kY
zL+4fhe&a_HZ}jS=3d@3Et4;<}y+`BR<aamz#qOfhH~kQa7r6u?-3R#v_=Yz8-oB%a
z?^^eLZQo^Zsg4@#77qq_)w~(~y@l>g7xaC>05hKNgQT$948M-BO+BaL=X-t_&^X$q
z{oNuEJa*)d2+N{u;HTgh^%?!QW2kr^-BeaAPC20TUbZ%hskRB^MQyerJL;WWx)7;;
z8b6{9J;a!X5*9g`28N^Ymm3sPokQ06f=AXTwH5+CoqxYHDFv-@KG2uXro%}V=mU44
zw{T$<aT6e>Q1>LX1AaDlVCEb#Ka^Nls50nz(~e2|(&A2<4u<g)y(Y<CIbmk7W?;DZ
z#%by^SHfs3kX>A;Xa{)kO?u|OQA;N+0lk{+*cs-_d}J?vB^0MkN<)T4y(`*0GGmiW
z04kFlQ!?C|+_giWyV1S!)(&(RJGy6=RbTh$svg5ggSaO~Ikg~>aOT1D12u_u={8oq
z=~Pr6LF$t0CZ;7XBSJbD*g?kCVhm3BTfUk!&)0l4a60krt9V~s%ZF9Xj`L%rUg-&v
z9H$1UQ1#}v+6`D%nu5j6G`>dl7!tON3cGHnV1pW$eJx959lzfZ+O4UmABKAk0V!^6
z&K11Y@lDvfc+!G7kVn~xpZCZzVJ8wR1)i>aEr6)VLK(<q?I~eS>`<Upg;p0FFVunG
zG;a)f;{M^gK}POgFin5&T2G$d*u2we4R&zD1{><Mx2v56KDb%SDGCftJFK^W5=T|4
zP5@9Bj8I|GoFXO%3a|T`%$<4aE>&ja9)%6tc&FT3Ox(*$-nhKGN$Z2@9m5Qs8*Uug
z3)iK4(tJ+wICK!44c=%sM-b>_zfN~eP^zuEhkx;bZh74VTgK+%!*V7r&X!ctOHSWk
zsSL`+I9j9r9`UZ2A=JpxOQ~6rPDWry&RzBeePCY}C*xT4R$=#?Qi{uS@#>2;T*M`H
zFt7HnZJL!apy^=)Kod4^7${x&LeuW$F7-`iC!K>wdXY5(m^T2r{cf#X58nJiqfT%X
zwr01(2zN!D{M)+7y&}S?HE8z$p;UL7J&9UNOlY6syDYG6Zu1i4QpMzM14zDiyUU1}
z{8AR8+X0vduTwghLCE<o$L;`jX{#pR!o-d0OwCmy!95ILnQ~0ku!$3skZ{=+eU+}D
z)`_KUo<^3OGwqVrt4sz&6gg_HNN+P+Y{lrnxOa>D(X*xxC-vq;4-IE+as9syEBKyM
zYbDVwNg;-tRN9nx_%0sX{;I%Hpf^;QD{wfo-hveLIKDSYDeNREcQj#uQKem-8Anan
zaPxgzf|e}y)gtcY_ETRg0^@@6Jby<UfQR~0U)rYBd0~Ch2CpLumzmA0p1GIC*nZjG
zPcr=_Rl~lV)@x7PGbG-Vuc-T2pG}<Ca6D{(_pEX64D=fHuSrNXx>l!lL~X`LJbobe
zIqppoG?xoJU(G8L)VEkE;%AuFKt?5xBb+~7o}Y;Y7AQ`9n~_f90o^1xtOVH=JrX)$
z+peZnE;awQuXFa9qkL?!r7^2_XxLC8<=N%+xM~%U1zf5U>)pX^Z^5PeQrm9d2VR0>
z9aM>C{y#FUz0*q24L^|KPQ3)XQ}7k$q)>cQj7@e|xRsft@KC#FI=)o{gdcZw3Y?RH
z=YX%(#wATpk2&MeHW8iygkanEzGe83#mx14_$q6))p&w+sUAVh+nxvlt{<8$s_p#e
zgahn0g=OuqZRpjT%pG<fz`#BP-*RP0)3ca5Lxp}sK`*Ps7vAgLK-XeckMMPV+_@$l
zD;pkhOw^2dN~-}IMYB;B#_iFg;>=3Q56i}Okn8a-PB$KEBxh^1>F7B}DHiWjdU@-W
zIE^zl@JSvla=|<{TRc@_m!QenSw#aNasYf%=NT6NnF<6MN%pf}PX&6abX8aC7jbZ!
z7>3R5utmI<bL|EJkW=I<plicg!DenyOC1YJ($KjMh62DFnGwIdk}ES7Qo&>9u=hyV
z={F79#Ar0=Y4;jTe1U^DuE@{#&UT%*iCs~l&?x4@1EMNl(14+Kn*LQPtyIV6#dnmZ
z(0U2Wj2#yk1g$vu;u~rDlkai8RruHxWJ?+`;x!ix+P)PgY`z`7A%?n%V_b`0kr$%Q
z&AO~i3~{z?#V4&W4;g{A1>Q!isj`^`#nSdQsaBAOF9hmg%pK3CAbd|FM&Qe!kDiF&
zH6o0xQ{nkt9nCqO*fM^oe}<naxF78n5OJ_Btp2p$BBZhn88uWm-MlG<(woF5Ys<d?
z#NUFxedHdm;A>=LRIzaU(bzqMEQXDaBTrki1fIS0Sp&y7N|0P&Ui?308AJAVjQ{{q
Cpmy;9

literal 8745
zcmV+^BG%m>iwFP!000021Fb#VZrjL`@A--b0-Q~-lD(MO-G{-!2^`0hcw*;bc_vsa
z7Mv#8k~*eH4x6;2`TDI(H@kU}LOOnkV@s^=s=m~{iqFLtou@mUWzU}dtNmSQBV;a$
zQsqliG*zPD&r}$dt(V)v)H2SLcqpp7byhqGm2Y&;Po(NzWdK%*GL!YXsCJ?*MBL~s
zU5KJew#w9%tkr^^-W9p7i%RIcR#h%DVTyJAAS)QF7ABFIIuWlCww=o?{KIuoWbpUd
zrH~ty*M^3aO<n9{t&7~8h+i8ZWu2*SI@X!4_o7&fq(}jEU2nxt|MBl4lli6ra2Tg-
z;!GzrNLlH7KvHBnu4J_rdRG=zZ5U}OvI0<Zr0!s9p}qmhTIH}#MOo{e{#&I2s7K^p
zoM*CuInQC@g*b02Q&jN()us4{_+v#M1AMJ=14zF-5f?}wU|`g8Q%U#|35MT@CdT{|
zY{8~Nq*r<Iu+HQijQn1%@8m+fX_C7)uL;xt0s@Vy?scNf$hbx&O@*sMW3E;oVYsvF
zEBJYSd2JUn)isd2F}x2o;394sQ!jdC@?JfA_C>`;*XkFst?SbKa(epk@Nn{A57h~*
z*t0i9(%_O2IftJ+O^d`ld#merP3)iA0HRHNk`%jB_wX{4v1$K$cAgbY>H%a~cBk(Q
zhhufV{Rrp%?9=68_*1+QveYNrdIuNg;$Fe&KvYEuhe*T<uLItld#N+JB+`gVK8T&H
z?$Y8R7x7-epej#wz7c<(?9xB+f@nCszu#P)h}$h3hP>8r1=4V(Xwb|Q-I1j*Fbw>@
z*6`y+0qBUI#P#b1ZA#o^cd%h89DkS#4$v09uD5WnQy4#~MWrO7@e*&_!HvkWomsBo
zBAwLVYS`lE&qZes1zhMRshdjSchALJRo6HlFo~*G>9eKy-`+?6_u}ZTpKkc^$Uc6$
zEgqt}h#I4!_TgRn@)z+A7CSA(r2q&wI3H%m$6kpQeASd<4@``hh$&?Pmn8w(;eyl0
zYh4*+H<d2oU=v4!)q`DHSe9011@Hhm{5zdDHQXj7Yef)7{MG2>j;5bW8P91VKSGbN
z2e_ZiSgR(tC>q4W6ZpA>6`Mw<%Fy25?n||@6n)y)+ah0xw*~zE?$biNmSzjL{4-p2
zzRc&(7veWKS@?Inho3YhZ1bI}h}2(^_5J{%#JUfYN%8?sb1P9g6s~GjF5~^u!2e7m
zUK!rOg@E0t!+nxs*JQQkr*SYM;H)fv1b;XT-$y_1il+WaJm({q%33Z{5HKpoGsaRY
zg&m0tS*4c2r<L3+;R|@MC_!X_{K;DphZ2l;1;rc5Gx=lW;q{JiplA}I0-s;Hi3d0C
z$aVqjjgr86;E1k3eAdATv4rEsCp||7$CvE3(wmK{%v_Rc3)iE-e%xLqTu(Zj-6QwA
z0r3dRO4?*7Wgk?$Es8t%P3?gF!vF7XZ$F8uKwdy!8@wy1Ay_HwCG>~0+ZA3m_;LOD
z_7<+;Ib6ZBzky*2kRPBtysdO<)uBqAFc;;!>(vwDH=nP5oWY!$zxv!0SqqE}=LdC|
z-b$Pod5*FIw$Rc<eB*jg|Gn0m&j7U#6cM7NAX$S)J(kAq<QXV9D7T)HU7kuFbc7-|
z9q6I^7&os+mpzYwtojCu5d7{S+}Y@yYa#&|r#OX$cu>`9tKjyXiVw}xQUnXO9hCyi
zwS&3g4#DK3LLs1z1P48Tn6C5ZPfJ5$wz4Wmseq}DU_4~!!SjUohX%9>{1R9N=-YeH
zta7*@sE!aREVQ1MoRkIO@Qm5Xk^*!guz;!_O&9iH$$ak~)jQM^Np)*&EuK-_Ye{=7
zOjDw{LFBwGo|cqNF}f=-&8%Gso~K=LR#yT%40&dMS5UclT0*|Uh@+&?RI`ZbKoB|C
z5~cIuLk3#Z(^6Az$8QTxG>euHfJiw<-N7I;K1>bihfhopjX6#ePdAS&h9QbdT^=Fk
z=4t7uMoGAthy6`&OK#3SfW4U9AuBjS3663K+JP*$B%Pm<EEqf5;K&1QV23jN=3;eA
z6u8+d1=@i*AZEa1?ox<)V!eb%EtmkKGtB@eCJbzhCng6*9N#FMYTjOj5JU`Y$+2Am
z1L~=XG4%mrS~GPrF#!ahJy~svBjk9y@o9;wVO;)rl(b;lSp)`fMBeKL?A#A%AAL2b
zAH7j|fs(q`JJdo+wLS+e8%1`aU>Z_Pt7HpEkPqW~r0%pyPGtZPk^{Q4L;2r8!Us>0
zWsA;;>Rwd~`U|v$h4@;;sCG9%np2jEye*6uSbbzyqS@5CMG0>Zy336My+fko<M+$&
z8c7L|9y!uaQD{dkeAH-jfEeK(!a2OGmsz%dC4Q}nol{|)H3i(Qk~>usjkGZdoWx?M
z|0d5Bx`hqtJHM?yejr0@CjmGwYU{ZrouTtxiesX;YaWeXO_4`DNCbmKb`U1?%NEvC
z8_}O>J6M1Q_C=Esl&UrQx-G#vFB`P_21JwQt*q;u4*x6CPRB0Z_b8I-y##X7Q|pEv
zFzmb|NYI4C>Fv`(CRJgKHzhkai{w9Gtif8((TP@6q@a>d!dh?hR=jLSi|lB@Vxwyx
zOv82_^dh5IyX)`y`Sj+e(`%hyeiTLg6|GPEd}vp*pPTQEpnwFEeW&)zdzm#niM2gH
zc7_ozRzJU-M-}7YD2jA`$Q7Abd$~P2aAsCNJA?mqR>T+w0R_51zb(0|#mb_Ej=R=J
z$$OXs`=qEshX6iHNH{1%3IyxiO~OTsTG&x9Pudy2yF+iz-Y)TIq~hZCN|aTRD1+C^
zMiPDwLl#8G>hskSm=%0uYGCENRuw4Rw!yIh-ijfRnWR)W1mA5x#P}5n9vC<|Y8VHu
z3KD`_W~C6{Y`o9TQ|B(VL0;T$4}Rl!F2l%>W6@i5=O?rjv)MDjt}XQNpsn==50&gp
z5>f_y3wMP=JE-ziIzdU10{;fo=^(<=G?Exx6|f{aU>8*d4>;9r9`XudqgL(fqD~(x
zLC=gh-jtu0cxk0-^h+(Q5V7BbKsUtBcvq5wVlf<D+-Q66e=Fjd#|b2|=`k$)sPA(J
zk)1BcRf!ACUfErlDO}!Knmem*WqPfWebO<A7Z_eFK<#mi+D1X!JK;|ld`Yrn=8bRz
z(5;{WdKCFX+#!qPAafdnfg<KN%JDS1Hz)#~U|68$Z_(W9DqVsEtoJ_Th}8TcEA5%H
zQ3>qkOnUC!5JZn1qDRsF*fd@0Zd7AP{ctzOvnO~u#Tz6u!z8C1997xgiO+$<n5g?g
zik#R~MN`hCigmz<L3`9Zgu`~JI0OE*$@xqopDI;?9Kx%Vme=7tO;wSq(NRV~Ybz{6
zA=jS-Ep_hgP8g`qk>FD`Pz7P)CaVcqd0%M6ByI9kg0_KIrm-sDKr1=BbZX~(&Z#30
z+CvgGIT*ULrf;2kOWt4%d3V`A$HGwp(50p*@g*Goyxvwtsgs4c*2s7=&`OjlS4!P2
zU{H{9I`Hc=O`NJQn;r%m71Tcep?gr$ls^|3h@tgoVu%Ke;J{VKt13A+;v{tSKc2)d
zE>Q!WoERdSe=9gxC=ErVM$N^C{v<;o5?F>HEJFVg9Ma^jEI>uEI*d<CA$~xaFEXP@
zUajvbdWAacy*4N*IpZZoj?H_z*<k#JG|)-bBS&dZCBa1mH*!XC#<R`ac4%)7BCUb<
z7|tc%7cC6zL|lBEeYh;#SP%vE3`$k7N35630zbbk=(OOkFFU#iEw&xn2}y4paLPic
z&z_Yfa9zBC7-JJ=SC_Navn(S7j|e<M@B`7yaOtd=12|)2dsb(HGqAeG7@y^vjG{5K
zrI#d_9)sr(JImz_Pu%;xfb*E#p)TzNa##DT)LJ2TS7;<Se#J;Wps}}$Q#on*Vi;tL
z=_!CJTsww5<Osk+NH$y{&c3X~6+KLLOH#nvlCQ@EK{dQku;*y-qn=Foy{_Qmf^_ql
zT9Xanm_Z{CI&x;?!T44q%k-VXSS_xWEL(Hs95~!gH@krZdTq~(wbjnvytfP$FCg8G
zi5ISOOw&7N<|CMoOjU$@?F*o7^H4hTJDK~!vbj$F$4l!q4~%?8HV|mgz_s@$0jV_T
z8^E@xQV|!{srE(1D++JB=((9gaLU6)Fq|jZ<pcuB;dCViH{nFbdtvzuT~AmWW3!?_
zAsgB^Lj-M9sw^{W6)njo6I%rbG*+?>sD_mwHI{AH&sWZ9Qhzl%pF^o3h!I}SLm|-^
zV&7A?AEk+O=k1@rbD4u>z^R7l?cDL^)e}_B_QoV`jL44>@fbZs4JS&$J<eoY1j=zR
zc~`-}>%LK#Em@#ThR)QQyn$PZyXXyK)IIPIRuw2c$A1anyTa?Enw-2dDAW-FjFWSI
z$-{L~|3X>>Ig_1UPY12z+N3M_0G2h$Vtg3Qf>xzi+f+YZ9+fioAO*=ZB1+>1P1u?8
zB5^~IwPT0q5of*MnXEP)O(*fw8#nv#ScN-07q<X(;E!<M+4S04$sO{T81JJG_<5I#
zQ>upu?n+gof@S7Pu*8FQUA(x3I|bY^EwW;>=ln<qM?9pJ!yELC)Z$E6i0DFmLQ$K5
z*?z0gqlzjpqW+##MvHI`j3;g|m6>?KB(xI;HDXD*uUh4^MK4UrhMR+`0poxU1>_Yn
zQ`KA@C9%K}10VD>CEZDA6)}VX^3-h69{}uD<>)Inrcri}tuYI%H-l3#*lhOcw4OBQ
zT$o7!jS{(0A~(tiGnV4elpV=}q>+d9*1HwZ<xD9~c)p9K_Kci3s`tvWJNifc=Io{A
zvHIMN{4$6WOB4`{bSF_(AOcn{I${Dsx?u>L?#0pi$t*VvHJ~eeG}v$b5LP8gdo%Wu
zU&hh$LBmI*b};T}(F>U8K@@p0UpFicF{J3QMJBx2icK~LKLCn0+h~)GODs?VLB;#z
zgrd)hrQj2%xUx&i7i-v)Y*&#ojizHXJ-La5`(Wq94Xw=HKWVd^taj>hvXPDb`MlLx
z|49%1>(3zWhrt}sNpm=+>|T3Q$#od-of+gnXp*7~J;Dsq-UOVB&(5G@BFo5iPZi~*
zw+!OPZ@wL91m%_qq4$s20ILCb@10QzR-@+)u<pCVN~W(00fH$7d4e~P<d<q8BM&(>
zF+ZqA5f`cELIPx>tT>@&R$|0kyHkCU-|MQ#NeykCy)$DHeu$_YVk9`}ODxpbq}JSJ
znb={ohQj+Mi0_j#I^b{@-_Rn_b*nQ^zNX4TMh<d>d*E!i;wX~cV|;0G?YnLx#>ygP
zr5Fa1c$>aH)H5(+aJ0&|5rRhm-a{{lQ7H;GS-Yo|puc^&g%f?J$P)~gL8e%&)uP*G
z6yZRG^{*QDBGx$;XyM_XcNoz9WFiJ9bzwY4MUU~B^fQfx*m@z}vG^{<+fdQ?@Be(&
zrtjCV0<d|QEHdfVQK~)yMGVwKTjiW#feHG-(8$avWWdo8iqBA8mqov$Vp7SFs$PYq
zJ6n}a^v2m-AOsj;2KaH06JQ>Qbpk8|SA5Y*kvoo&;5Z0{6pAdJ;DG4vHOEm%5?J^V
zzPcGqf*f`va!mQ{)kfy}Z%hhNJJa*Xwx%s1|4xI3U|9+|+9zMEEkH&g<ha7H?N7io
zz~594M&)^~ZWGvWC+cnWdN#@NXeY$g1Dn5Fak!#Xz}BlmLi#dagZl4^z#ixJ*PSuC
zzW;09f`PWvi{qs#0YOL}`^=U!{?FO<72jas#NvGemT0cPkhhdy%aRTn9{%&IOG}I$
z-0(S`&Y)Y{!$BUjqK1?>5L?sNz;ToCNdC&Bgd#)TYxOX9VF@_0z&)JoryRizydgt{
zhbsnQVM&~H*agQzUfFOv>_c2MphVBk)GFf0!;W0gubsj1a$+Pg;V<rstl5EKw#BFd
zkVQNWo&rGNg#wJVq}Z`ukN0JXVXbDfEgPg6m}aF5meB9jUWDmGKdj2#seMEPMm8U5
zNZE%1@6}lH68o&Li+odHuG0;ywcVB9OW0Vm?G;}k1y?dw*-X4Mg6W~wGP$v2n1zo;
zEWB>C2&<;(RCOG(Jk3A{y=oO$zO6sJ=A;pmRF7!DQR|u2=5Yb<h5F4;82ZdFKTb>G
z8jv<96{m$byPV@#rh0R@9QUkUNj)CZc9A-R%OR0<)9DE!c8E3?pp#hOI`;M=2UrsB
z*Lw39Ct)l8qR^rSf;OXmL;hSbW5H5s%ozu6!@>t{x%U(wvd|e@+e@I7Hbr>dkUYZR
z!8`(NK2C%qvC=>zML1F)`2&+8OQNX7G0osZfmY_4lI6ai1xg13EM>5^))9krU7SJc
z@x5keJc<62q#_)Q7*92t1fclogcm$6;QUwEtATO)1h!f}HNsQchkG_uOYXU<FntY_
z4mYe%Zk9QRIlV%tF@LHpD`#vfMFI>B0KA=AO_#@I3mZAuq4evI9>&|86=#`&O+E|j
zxG2S3=RRM=A#F1vi@Azw8G?>n^3M0<8m?q+sLO`VLBLT=lWSEMj`cDh=6Y3E#1X4C
zazGo*XhXFYeeQj+ZQ{Ae6JUg06%Kf|+}NPvllx*zvG5XTx^H7EBg)5de-{@NoAhqd
znXT~Y2%hd6PP;fzj;&H-!XO1EFxl#5>v#{0C;oi(<~^gN!Q=u_jkTw+>cF$A+4@ig
zV?=h0s2!v4r=!mg=3Id~SzEcx2NnyLvBSqsmUe-;QWqzqw0v0)IqT|YPVJhszUJqM
z9v+5YV3-thh$ya+hBYXhIM&I$$2(Ojc#K1mKDB_4g1wrI9$UDvtmZ8+TgDN<9Z0`1
z?Z9|gb9t{fcz8=*$g$Jf$*Vlb_gAj(iZ(?yF9E`}Y>8UX5&xBC5q@~K`h6yj%ewcD
zuECZEE`qtMN{|sXjp?pyYiihqwSgh$l28?UB#xLGR0p&6>xlls0zE?0jwU`I(enpw
zvyYgu%_-}vkGPWenp^=WN_~j1lW@(r5G#YFp1?L483c%me2iVvSmR3fu&$&dvVgI+
z=#bDVcA%oLz@L7|7&v0!h=4~?3`Yl<Qa>o=>pGb?a$xFSwbdwtlji#dxJD3^i%x0%
zv$8MTK-j~A6=fVKqJbu7f^h`^tg6S03<7pm=IN4<<5NN-GZBALorej^8)n{`zcOrb
z1I*LcNAztL{Jibcun+TUt-BxF`QY!?q%lE365l18&xm7;RoM|GX6yBV=_kf)qZVp3
zu_>m)cAGqbAAo|7>hEgxPM~9|8(Xs3tK!e+FtYfkJMf^9*V}*nX*q;V&8!r);Rq7W
zNKk)mcBRN&r<7GKH+UT3LZ>r#h9S}Io{nc>unUmzm%={Y&3!@GhVtjf+^xS~^2$H*
z<cyscW&A-TRQe5d=q!<uVown|VOOh*u+>S>;)IS@n`dlS)H>^)uu$x@^#G=k?;SD}
z&aMc|&&-zYswp{;kDW0ToWxqOTH||EQ7O{EiO(C*#CSks+A^PSkyEDQwFFsJgD#fL
zOY(g%(awYR@ASkOEqc@yg2iPvEw|HllHj_DOdhb)z+kiwdd(mV6Hw-ygav1toUpl_
zo9=up&-r#zg7a-9$?^9O6gZnUeG`+9ZxvdOb+w;^5wM>FA^6Ual!)u{mtkf~bmD55
zj#l7sG}~Cu^qABZYM|UxQ4{bPt}AL|4c$z4%1*N*FhjK2AxWaKs)cgd+!zPz+Sm^8
zY>OtNoBlgWJPysxBa6f@1NQYT-=4+>Sg?ga8~z(B&9Gl`MLt-)O(xOqDNqB#_EN(N
zK35r2b?T{P;wy~*Kn_&ovw7})3)f@1{tM>1+!}FW+S?!G!k$|j#Xut$%YM^|RiZ3n
zuIrQpHm97sitxavsZNA#tVvhufng#GGk&eC`q3Moj%+i`2x^n8tj7hf+Un|6zv?O|
ztP_o%hHOxI6?yQe(c?Kn-D<3%RbmDBmr+0EQ}|BD(Xv^#9j7RU?<%_Rz~d3gUQz1c
z(0QaOL3gso=Mg2i@%#PI9h|NM>ZHIwdp_~Dp64)rT+;_Scv9`lAMr}_K#?ElP_cu3
zA|S)o6)wVJ4Y+M(N*sz>ce+6_lrx}UT1fFQ;$dL1Q!Ln>po^Y2ZYl4AV(h}~^JL-6
z>c=F2)dj3_Dr+h_ajeuGKGMXCYX1bPAI=c@+Etz*YG>$C&CmC|E_lGmC93gMk(TF5
z{%r<~+gzKPy4}-YZ5E1GC`&4^0SsPo*AUl-kQ;wej0@TP3t*u6%w7Vf1@H4o8#^2C
zfr7IB{O03_CF#1bfwlZ*>l|EdTI(ON70E0UOPOQT4Hu_E{}FixsLq+rr&ai8o=OWf
zB6!?aUF>fUHeTd9F*uJb8tJ#zm}`r^OS#VqnYK-y0|yL|aY036Qwvml@)8w`&2AP+
zLZEfI+rlxjp|ECb5SlvwG&2H~ln2^MTwPt8&|2^+;5FE~8Feziw4YB^Q5T@8iWe~X
zOAZwrC5EGfu0J(3z|HppfJKsN*Bz)e31_QJ_-te$$Av{`ZcaQogm`;*U36o?-bCUM
z80PW;Uh?|b^Mnc~$W5vPZ7+iD;yL>&Fx(@Lk*{8ATN(^Hv^axz>iO=mTMPb31l!p!
zKddfpZWrSBPjAj{FPMeCxwyKxy%6f2!nN$)Acr9BNSi6dxfR$O^^r8(A?zaw;CT<O
zE_P^rBvzo(K6X`U)`K{$K0g*E^VefBLazhPOAV<GqlR5<ABo%UulljKgl3Ja0yXi2
zsJ#Vt^*GEnN%=^`I%y!En)r0p#D_8D9FoW3C=vFtd)x0fY%lEKF4&Uy$KD12e(Ze!
zMxM|j`rMi~*e3h*TxP(j!Q3CinUu2&j@J67>^6S;J@grs$X4@@bs9LRiPgT<1%q2X
z#yZmG_h3KLd3_=^w3zgBoFbNg2fAG&Jwa;&+s6@fY3lT`0G?i8{7H3s0xfLt9xI@z
z$pow8)UL<1U7v_Nx<sgk{|M>>w@HgRAnyB-hZG!Yq~7Y4=c^TA%>jJ>KwHi^5r68Q
ze&isHcd0<!U9T*~o!vX=pIt6FolB)bH<Sexs@jG_F236adtgA@8o)L@d<XK|IWT=<
zFGo;qUhs?nbheHVV&LMjBX#`PyS>17UUaj2t&-r~I`34rdlmTOoZ&JVDeHENEZn%e
z<i0!jao-%H_*U0L5o3+#$;fRq7`Xt@UobRty1g=B==OaTv0mCJ7Zvr<)4fj17=6X}
zhH!Nq)rA52=a;AFZ^Hg-Cqb>6jYZ9^R;!C6;jeCds~cxxT5L@06dwyqYD`PEZNw5(
zns*zjv5$#v<kjW$%J57d2sro*wW~`&lYAk;8afBt_j|yR<f4~|)L0<^TXiy;^*I^m
zHr3NX4i=rh8G1{-G^HW3eGqEIcMak9_H9Fa*ZOZB`YwaZbkt&ZdT)?dEnDdCE%acz
zpalfRn(%xdB!x9%_;rHW={XfYKX9>tGSRK_?dOBzu_ISQSRrA3z$L$O%ILoxL&f{(
zrm_-m&H<%240Tb=w9O?g8?z1B(ct9Lg~;^d_z`XBA;vV8yToyI07tv7Fes#Yhs>76
z-cK!6=qv<$y8M2XLIw)qa->C<&5V%`ykNsSFj%;-ps<Y<QPgV|+5taXx?z?aJUf(Q
zRH`ayf6)z3`6|O+#2zDhsa}(0ubnV6m_9t7hwqf|g{x+=#fZ*DTy}lE_)aKu*J_-z
zmVjQebL<TBWj?YOzY>b`CMA$@QSa)vj?CD`6+vZ^Q>q6$le>P%O9wrubnA_7gU87o
zd!vTBM_=_AM;gREG0M5MNrW>4FAtO_*`?c9^`=)`bp)wPPNANc$A}2&0I-LQOUoXe
z@V6qKHP6=~9yy)(9zndXuKGJ}*e8CB)GIwhlH=4M73#s<R=WYCNmJaYoyM1|9Yex4
zRA8^{9BfeIvhQVxtWWnlLc22+mBzb1<fOQDIalz4vR7dn(^(7VhCIqn{Jck&37ZmF
zDe!pZ>lBEJ>?k8?Z389Di5-eVsnF_z<Apl#tM-)vkK8|eIl#o-3#J+FUFXTOPc{W@
zUat+@u+iQc-R<fogpO|3YK{U!(~j#cpu|zZniBw25FaWmnzKdZNDbytlesmI-KE-0
z+@r8}6YrFJje&c6!7G=7Gi!Y?(mT%Jx%U3ZUbu$6v*vS($DxDZZ17gQIf6hh5pKR~
zg0k+^9sElUG|uYh+A%g4?^g?PalWGJKJw@ON)-_<e9?jWd&0{i#!w?4E@f#%I-P(W
z`EA)3^qxIc9GAE1t-?kcl@yn6#EUQ1a1oc(%(&jav>6x1fToANz)V=jJ(9)#g{Ixh
zUFQ2s&N>GV^h#D7VA&4PZ+&UydeHixpiU49yEI!c!d+2Q@2)O#r-*Rs64*aLDAkj!
zp*qM^ttIBRE`(ZR125CQ&a+Ypx!YhQ-^Q60;YYlcf#`MvEQ9x{984ynCy(9%Y}i!K
zzJ;lS>P^iF<H0=)-<fa-3wEsgE-h;%(R)Wu_D`9#NuuywGPPk$iBKS3YmAm3&PBCD
z3VIyhFQOFoUXweTFu<tRt}=t;2Awxlcic(V8Qs3kcy1$pfC~y*{84TPJk-hc(zbEM
zH)7j9*D;-5EXzx*FPGo7VLQxvcf$Oaxs1C!Ixh-v&yW;MzoLp@T^mW!fcUW;k@MCI
zGSZ#THx|z{dLZZa5NzQih9AimOa_w#?U(`wQQK5peM^+0Ymb5bieKK1aD?;6%QxrZ
z6ia$$zV$<=$%qIK4l9l9%7h4=u+dH1T$0-5+E;)2Tq{1d*aVcdAk_b<^yvKZdRl%r
zuuM+wPW0~Jws*#*`_kC{xCdSvVf{F%W;Qu75wzEQ%Yh%r38n5^{VDhgb7~pBTfwG>
zD%{FkQWT}zWf=R=gN)!FD1i?zFtGVrZCsk+{HQB}c8Tx|ARM-P?>qJZ8J1k}0#Z9x
zTa71JSLy+zp{*hoaQ#rbS6v@DhupD03l@UHwxRQDHh0+h0Y>&A_?C02+b*BfOC@x-
z33{m;zTsH!M*4iR7J;w5;$9EgRN3%=Fi{KhnBrU;Y_h=!#_hqQ;;b*qkjkg_TpI8$
zPFfsmy=1Ez>F7CsB9^;SLT2YB60OfNaNQkD3&%_@TW(NcUya%MNo6}g<OV>@?aR=x
zT*lNO$VjrE|9U3Sp`+`jR=*s6DSQH8OAB_ItmRTWAQ<Ef`3k6{uvV~{8&u||4kZb6
zsRK|L@RQ7mUtY=BOdY9Ym?i8z5_a}YgElc44SL$WE)H9sYvamde79NGtCrXmrPfbk
zE({RW#VG-dHK6k^ALu0ewJ(UW@2C%6Td?T9d%V+n&Yygb>y5(4<{(=U#DvE1JhXj}
zLfEc0e5V5S-^K6`itH}x+}_5@#1LoOh<DZsGspz2?ciO++Pw5dP+n+XCujwE_zH~y
z#@r)#4#IZ?F#%s5`sj%W8t*f*PKD?0_U$>I*<^XF;@r;^+>dV2bP}u!t3TcMZm4`i
zFB+p#!}i?*WQT~4*5rK#h`$DX`^Y_x;cH}MTbXav@kbN)46+zDI*vST%@TO_(g)X%
Tag-niZ=U@>xxpi+XNLd)aAW{Q


From 4b1f2207b815858837985f85cd665c9e75e46ca7 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 10:08:25 +0200
Subject: [PATCH 72/76] ci: replace expiring-PAT org membership gate with
 author_association (#9957)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* ci for broken links + fix broken links

* ci: replace expiring-PAT org membership gate with author_association

The shared check-org-membership.yml reusable workflow authenticated to the
GitHub API with the ORG_ACCESS_TOKEN PAT to confirm org membership. That PAT
expired ~1 year after issuance, so the API could no longer see private org
members and check-membership emitted is_member=false — silently skipping every
auto-review, command-triggered review, /ai, /plan, and git-command job while
still reporting success.

Gate on the event payload's author_association (OWNER/MEMBER/COLLABORATOR)
instead, which comes from the built-in GITHUB_TOKEN and never expires. The
trusted internal bot and existing draft/fork/command guards are preserved; the
workflow_call paths stay open as trusted upstream. Deletes the now-unused
reusable workflow.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/scripts/check-docs-links.mjs          | 126 ++++++++++++++++++
 .github/workflows/check-docs-links.yml        |  23 ++++
 .github/workflows/check-org-membership.yml    |  83 ------------
 .github/workflows/claude-plan.yml             |  22 ++-
 .github/workflows/claude.yml                  |  22 ++-
 .github/workflows/codex-pr-review.yml         |  20 +--
 .github/workflows/git-commands.yaml           |  36 +++--
 .github/workflows/pi-pr-review.yml            |  20 +--
 .github/workflows/pr-ready-review.yml         |  19 +--
 .github/workflows/pr-review-commands.yml      |  25 ++--
 .../apps/editor/component/components.ts       |  14 +-
 11 files changed, 213 insertions(+), 197 deletions(-)
 create mode 100644 .github/scripts/check-docs-links.mjs
 create mode 100644 .github/workflows/check-docs-links.yml
 delete mode 100644 .github/workflows/check-org-membership.yml

diff --git a/.github/scripts/check-docs-links.mjs b/.github/scripts/check-docs-links.mjs
new file mode 100644
index 0000000000..122d098197
--- /dev/null
+++ b/.github/scripts/check-docs-links.mjs
@@ -0,0 +1,126 @@
+// Extracts every windmill.dev/docs link referenced in the frontend source and
+// verifies none of them 404. Run: `node .github/scripts/check-docs-links.mjs`.
+// Used by the check-docs-links GitHub workflow (release / manual trigger only).
+
+import { readdir, readFile } from 'node:fs/promises'
+import { join, extname } from 'node:path'
+
+const ROOT = 'frontend/src'
+const EXTS = new Set(['.ts', '.js', '.svelte', '.mjs', '.cjs'])
+const DOCS_RE = /https?:\/\/(?:www\.)?windmill\.dev\/docs\/[^\s"'`)>\]}]*/g
+// `const someBaseUrl = 'https://www.windmill.dev/docs/...'` used later as `${someBaseUrl}/foo`
+const BASE_RE = /(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*['"`](https?:\/\/(?:www\.)?windmill\.dev\/docs\/[^'"`]+)['"`]/g
+
+const CONCURRENCY = 24
+const TIMEOUT_MS = 20000
+const RETRIES = 2
+
+async function walk(dir) {
+	const out = []
+	for (const entry of await readdir(dir, { withFileTypes: true })) {
+		const p = join(dir, entry.name)
+		if (entry.isDirectory()) {
+			if (entry.name === 'node_modules' || entry.name === '.svelte-kit') continue
+			out.push(...(await walk(p)))
+		} else if (EXTS.has(extname(entry.name))) {
+			out.push(p)
+		}
+	}
+	return out
+}
+
+// url (no fragment) -> Set of source files it appears in
+const urls = new Map()
+const unresolved = []
+
+function record(url, file) {
+	const clean = url
+		.replace(/\\.*$/, '') // cut at an escape sequence embedded in a string literal (e.g. \n)
+		.replace(/#.*$/, '') // drop anchor fragment — irrelevant to a 404 check
+		.replace(/[.,;:'")\]]+$/, '')
+	if (!clean) return
+	// A `{`/`${` means the URL is built from an unresolved template/interpolation var.
+	if (clean.includes('{')) {
+		unresolved.push(`${clean}  (${file})`)
+		return
+	}
+	if (!urls.has(clean)) urls.set(clean, new Set())
+	urls.get(clean).add(file)
+}
+
+for (const file of await walk(ROOT)) {
+	let content = await readFile(file, 'utf8')
+	// Inline file-local base-url constants so `${base}/page` template literals resolve.
+	const bases = []
+	for (const m of content.matchAll(BASE_RE)) bases.push({ name: m[1], value: m[2], decl: m[0] })
+	for (const { name, value } of bases) {
+		content = content.replaceAll('${' + name + '}', value)
+	}
+	// Blank each base declaration so a prefix-only base (no index page of its own,
+	// e.g. .../app_configuration_settings) isn't checked as a standalone link.
+	// A genuinely bare `${base}` usage was already inlined above, so it's still covered.
+	for (const { decl } of bases) content = content.replace(decl, '')
+	for (const m of content.matchAll(DOCS_RE)) record(m[0], file)
+}
+
+const allUrls = [...urls.keys()].sort()
+console.log(`Found ${allUrls.length} distinct docs links across ${ROOT}`)
+if (unresolved.length) {
+	console.log(`\n⚠️  ${unresolved.length} link(s) built from an unrecognized base URL — skipped (register the base const so they can be checked):`)
+	for (const u of [...new Set(unresolved)].sort()) console.log(`   ${u}`)
+}
+
+async function check(url) {
+	for (let attempt = 0; attempt <= RETRIES; attempt++) {
+		const ctrl = new AbortController()
+		const timer = setTimeout(() => ctrl.abort(), TIMEOUT_MS)
+		try {
+			let res = await fetch(url, {
+				method: 'HEAD',
+				redirect: 'follow',
+				signal: ctrl.signal,
+				headers: { 'user-agent': 'windmill-docs-link-check' }
+			})
+			// Some hosts reject HEAD — fall back to GET.
+			if (res.status === 405 || res.status === 501) {
+				res = await fetch(url, {
+					method: 'GET',
+					redirect: 'follow',
+					signal: ctrl.signal,
+					headers: { 'user-agent': 'windmill-docs-link-check' }
+				})
+			}
+			clearTimeout(timer)
+			return { url, status: res.status, ok: res.status < 400 }
+		} catch (err) {
+			clearTimeout(timer)
+			if (attempt === RETRIES) return { url, status: 0, ok: false, error: String(err?.message || err) }
+			await new Promise((r) => setTimeout(r, 500 * (attempt + 1)))
+		}
+	}
+}
+
+// Simple concurrency pool.
+const results = []
+let idx = 0
+async function worker() {
+	while (idx < allUrls.length) {
+		const url = allUrls[idx++]
+		results.push(await check(url))
+	}
+}
+await Promise.all(Array.from({ length: CONCURRENCY }, worker))
+
+const failures = results.filter((r) => !r.ok)
+if (failures.length === 0) {
+	console.log(`\n✅ All ${allUrls.length} docs links are reachable.`)
+	process.exit(0)
+}
+
+console.log(`\n❌ ${failures.length} broken docs link(s):`)
+for (const f of failures.sort((a, b) => a.url.localeCompare(b.url))) {
+	console.log(`\n  ${f.url}`)
+	console.log(`    status: ${f.error ? `error (${f.error})` : f.status}`)
+	for (const file of urls.get(f.url)) console.log(`    ↳ ${file}`)
+}
+process.exit(1)
diff --git a/.github/workflows/check-docs-links.yml b/.github/workflows/check-docs-links.yml
new file mode 100644
index 0000000000..ec17c06771
--- /dev/null
+++ b/.github/workflows/check-docs-links.yml
@@ -0,0 +1,23 @@
+name: Check frontend docs links
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+jobs:
+  check-docs-links:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          sparse-checkout: |
+            frontend/src
+            .github/scripts
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22.x"
+      - name: Verify docs links are not 404
+        run: node .github/scripts/check-docs-links.mjs
diff --git a/.github/workflows/check-org-membership.yml b/.github/workflows/check-org-membership.yml
deleted file mode 100644
index eb338d3188..0000000000
--- a/.github/workflows/check-org-membership.yml
+++ /dev/null
@@ -1,83 +0,0 @@
-name: Check Organization Membership
-
-on:
-  workflow_call:
-    inputs:
-      commenter:
-        required: false
-        type: string
-        default: ''
-        description: 'The username to check. Auto-detected from the event context if not provided.'
-      organization:
-        required: false
-        type: string
-        default: 'windmill-labs'
-        description: 'The organization to check membership for'
-      trusted_bot:
-        required: false
-        type: string
-        default: 'windmill-internal-app[bot]'
-        description: 'The trusted bot username to allow'
-    secrets:
-      access_token:
-        required: true
-        description: 'The access token to use for org membership check'
-    outputs:
-      is_member:
-        description: 'Whether the user is an organization member or trusted bot'
-        value: ${{ jobs.check-membership.outputs.is_member }}
-
-jobs:
-  check-membership:
-    runs-on: ubicloud-standard-2
-    outputs:
-      is_member: ${{ steps.check-membership.outputs.is_member }}
-    steps:
-      - name: Determine commenter
-        id: determine-commenter
-        run: |
-          COMMENTER="${{ inputs.commenter }}"
-          if [[ -z "$COMMENTER" ]]; then
-            if [[ "${{ github.event_name }}" == "issue_comment" || \
-                  "${{ github.event_name }}" == "pull_request_review_comment" ]]; then
-              COMMENTER="${{ github.event.comment.user.login }}"
-            elif [[ "${{ github.event_name }}" == "pull_request_review" ]]; then
-              COMMENTER="${{ github.event.review.user.login }}"
-            else
-              COMMENTER="${{ github.event.issue.user.login }}"
-            fi
-          fi
-          echo "commenter=$COMMENTER" >> $GITHUB_OUTPUT
-
-      - name: Check organization membership
-        id: check-membership
-        env:
-          ORG_ACCESS_TOKEN: ${{ secrets.access_token }}
-          COMMENTER: ${{ steps.determine-commenter.outputs.commenter }}
-          ORG: ${{ inputs.organization }}
-          TRUSTED_BOT: ${{ inputs.trusted_bot }}
-        run: |
-          # 1. Allow the trusted bot straight away
-          if [[ "$COMMENTER" == "$TRUSTED_BOT" ]]; then
-            echo "is_member=true" >> $GITHUB_OUTPUT
-            exit 0
-          fi
-
-          # 2. Disallow other bots
-          if [[ "${COMMENTER}" =~ \[bot\]$ ]]; then
-            echo "is_member=false" >> $GITHUB_OUTPUT
-            exit 0
-          fi
-
-          # 3. Otherwise check if the user is a member of the organization
-          STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
-            -H "Authorization: token $ORG_ACCESS_TOKEN" \
-            -H "Accept: application/vnd.github+json" \
-            -H "X-GitHub-Api-Version: 2022-11-28" \
-            "https://api.github.com/orgs/$ORG/members/$COMMENTER")
-
-          if [ "$STATUS" -eq 204 ]; then
-            echo "is_member=true" >> $GITHUB_OUTPUT
-          else
-            echo "is_member=false" >> $GITHUB_OUTPUT
-          fi
\ No newline at end of file
diff --git a/.github/workflows/claude-plan.yml b/.github/workflows/claude-plan.yml
index c63e3fe1aa..e4394fe7a1 100644
--- a/.github/workflows/claude-plan.yml
+++ b/.github/workflows/claude-plan.yml
@@ -11,20 +11,18 @@ on:
     types: [submitted]
 
 jobs:
-  check-membership:
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '/plan')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '/plan')) ||
-      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '/plan')) ||
-      (github.event_name == 'issues' && contains(github.event.issue.body, '/plan'))
-    uses: ./.github/workflows/check-org-membership.yml
-    secrets:
-      access_token: ${{ secrets.ORG_ACCESS_TOKEN }}
-
   claude-plan-action:
-    needs: check-membership
     if: |
-      needs.check-membership.outputs.is_member == 'true'
+      (
+        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '/plan')) ||
+        (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '/plan')) ||
+        (github.event_name == 'pull_request_review' && contains(github.event.review.body, '/plan')) ||
+        (github.event_name == 'issues' && contains(github.event.issue.body, '/plan'))
+      ) &&
+      (
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association || github.event.review.author_association || github.event.issue.author_association) ||
+        (github.event.comment.user.login || github.event.review.user.login || github.event.issue.user.login) == 'windmill-internal-app[bot]'
+      )
     runs-on: ubicloud-standard-4
     timeout-minutes: 20
     permissions:
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index f5db652084..0a66553362 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -11,20 +11,18 @@ on:
     types: [submitted]
 
 jobs:
-  check-membership:
-    if: |
-      (github.event_name == 'issue_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
-      (github.event_name == 'pull_request_review_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
-      (github.event_name == 'pull_request_review' && startsWith(github.event.review.body, '/ai') && !startsWith(github.event.review.body, '/ai-fast')) ||
-      (github.event_name == 'issues' && startsWith(github.event.issue.body, '/ai') && !startsWith(github.event.issue.body, '/ai-fast'))
-    uses: ./.github/workflows/check-org-membership.yml
-    secrets:
-      access_token: ${{ secrets.ORG_ACCESS_TOKEN }}
-
   claude-code-action:
-    needs: check-membership
     if: |
-      needs.check-membership.outputs.is_member == 'true'
+      (
+        (github.event_name == 'issue_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
+        (github.event_name == 'pull_request_review_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
+        (github.event_name == 'pull_request_review' && startsWith(github.event.review.body, '/ai') && !startsWith(github.event.review.body, '/ai-fast')) ||
+        (github.event_name == 'issues' && startsWith(github.event.issue.body, '/ai') && !startsWith(github.event.issue.body, '/ai-fast'))
+      ) &&
+      (
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association || github.event.review.author_association || github.event.issue.author_association) ||
+        (github.event.comment.user.login || github.event.review.user.login || github.event.issue.user.login) == 'windmill-internal-app[bot]'
+      )
     runs-on: ubicloud-standard-8
     permissions:
       contents: write
diff --git a/.github/workflows/codex-pr-review.yml b/.github/workflows/codex-pr-review.yml
index 66cc4b5f10..772e3e31ff 100644
--- a/.github/workflows/codex-pr-review.yml
+++ b/.github/workflows/codex-pr-review.yml
@@ -32,27 +32,15 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  check-membership:
-    if: github.event_name == 'pull_request'
-    uses: ./.github/workflows/check-org-membership.yml
-    with:
-      commenter: ${{ github.event.pull_request.user.login }}
-    secrets:
-      access_token: ${{ secrets.ORG_ACCESS_TOKEN }}
-
   codex-review:
-    needs: check-membership
     runs-on: ubicloud-standard-2
     timeout-minutes: 30
     if: |
-      always() &&
+      github.event_name == 'workflow_call' ||
       (
-        needs.check-membership.result == 'skipped' ||
-        (needs.check-membership.result == 'success' && needs.check-membership.outputs.is_member == 'true')
-      ) &&
-      (
-        github.event_name == 'workflow_call' ||
-        (github.event.pull_request.draft == false && github.event.pull_request.head.repo.fork == false)
+        github.event.pull_request.draft == false &&
+        github.event.pull_request.head.repo.fork == false &&
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)
       )
     permissions:
       contents: read
diff --git a/.github/workflows/git-commands.yaml b/.github/workflows/git-commands.yaml
index f1cc380563..68b6da3da8 100644
--- a/.github/workflows/git-commands.yaml
+++ b/.github/workflows/git-commands.yaml
@@ -5,21 +5,11 @@ on:
     types: [created]
 
 jobs:
-  check-membership:
-    if: >-
-      github.event.issue.pull_request && (
-        startsWith(github.event.comment.body, '/updatesqlx') ||
-        startsWith(github.event.comment.body, '/demo') ||
-        startsWith(github.event.comment.body, '/eeref') ||
-        startsWith(github.event.comment.body, '/docs')
-      )
-    uses: ./.github/workflows/check-org-membership.yml
-    secrets:
-      access_token: ${{ secrets.ORG_ACCESS_TOKEN }}
-
   update-sqlx:
-    needs: check-membership
-    if: needs.check-membership.outputs.is_member == 'true' && startsWith(github.event.comment.body, '/updatesqlx')
+    if: >-
+      github.event.issue.pull_request &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      startsWith(github.event.comment.body, '/updatesqlx')
     runs-on: ubicloud-standard-8
     permissions:
       contents: write
@@ -147,8 +137,10 @@ jobs:
             })
 
   demo:
-    needs: check-membership
-    if: needs.check-membership.outputs.is_member == 'true' && startsWith(github.event.comment.body, '/demo')
+    if: >-
+      github.event.issue.pull_request &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      startsWith(github.event.comment.body, '/demo')
     runs-on: ubicloud-standard-2
     permissions:
       contents: read
@@ -227,8 +219,10 @@ jobs:
           fi
 
   update-ee-ref:
-    needs: check-membership
-    if: needs.check-membership.outputs.is_member == 'true' && startsWith(github.event.comment.body, '/eeref')
+    if: >-
+      github.event.issue.pull_request &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      startsWith(github.event.comment.body, '/eeref')
     runs-on: ubicloud-standard-2
     permissions:
       contents: write
@@ -313,8 +307,10 @@ jobs:
             })
 
   update-docs:
-    needs: check-membership
-    if: needs.check-membership.outputs.is_member == 'true' && startsWith(github.event.comment.body, '/docs')
+    if: >-
+      github.event.issue.pull_request &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      startsWith(github.event.comment.body, '/docs')
     runs-on: ubicloud-standard-2
     permissions:
       contents: read
diff --git a/.github/workflows/pi-pr-review.yml b/.github/workflows/pi-pr-review.yml
index 9fbe43e9f0..4416e5674b 100644
--- a/.github/workflows/pi-pr-review.yml
+++ b/.github/workflows/pi-pr-review.yml
@@ -30,27 +30,15 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  check-membership:
-    if: github.event_name == 'pull_request'
-    uses: ./.github/workflows/check-org-membership.yml
-    with:
-      commenter: ${{ github.event.pull_request.user.login }}
-    secrets:
-      access_token: ${{ secrets.ORG_ACCESS_TOKEN }}
-
   pi-review:
-    needs: check-membership
     runs-on: ubicloud-standard-2
     timeout-minutes: 30
     if: |
-      always() &&
+      github.event_name == 'workflow_call' ||
       (
-        needs.check-membership.result == 'skipped' ||
-        (needs.check-membership.result == 'success' && needs.check-membership.outputs.is_member == 'true')
-      ) &&
-      (
-        github.event_name == 'workflow_call' ||
-        (github.event.pull_request.draft == false && github.event.pull_request.head.repo.fork == false)
+        github.event.pull_request.draft == false &&
+        github.event.pull_request.head.repo.fork == false &&
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)
       )
     permissions:
       contents: read
diff --git a/.github/workflows/pr-ready-review.yml b/.github/workflows/pr-ready-review.yml
index 4d722df4af..263696ceaf 100644
--- a/.github/workflows/pr-ready-review.yml
+++ b/.github/workflows/pr-ready-review.yml
@@ -30,26 +30,13 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  check-membership:
-    if: github.event_name == 'pull_request'
-    uses: ./.github/workflows/check-org-membership.yml
-    with:
-      commenter: ${{ github.event.pull_request.user.login }}
-    secrets:
-      access_token: ${{ secrets.ORG_ACCESS_TOKEN }}
-
   auto-review:
-    needs: check-membership
     runs-on: ubuntu-latest
     if: |
-      always() &&
+      github.event_name == 'workflow_call' ||
       (
-        needs.check-membership.result == 'skipped' ||
-        (needs.check-membership.result == 'success' && needs.check-membership.outputs.is_member == 'true')
-      ) &&
-      (
-        github.event_name == 'workflow_call' ||
-        (github.event.pull_request.draft == false || github.event.pull_request.ready_for_review == true)
+        (github.event.pull_request.draft == false || github.event.pull_request.ready_for_review == true) &&
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)
       )
     permissions:
       contents: read
diff --git a/.github/workflows/pr-review-commands.yml b/.github/workflows/pr-review-commands.yml
index ba55bfea2f..4678e2986c 100644
--- a/.github/workflows/pr-review-commands.yml
+++ b/.github/workflows/pr-review-commands.yml
@@ -42,16 +42,11 @@ jobs:
               ;;
           esac
 
-  check-membership:
-    needs: parse
-    if: needs.parse.outputs.command != ''
-    uses: ./.github/workflows/check-org-membership.yml
-    secrets:
-      access_token: ${{ secrets.ORG_ACCESS_TOKEN }}
-
   acknowledge:
-    needs: [parse, check-membership]
-    if: needs.parse.outputs.command != '' && needs.check-membership.outputs.is_member == 'true'
+    needs: [parse]
+    if: |
+      needs.parse.outputs.command != '' &&
+      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association)
     runs-on: ubuntu-latest
     permissions:
       issues: write
@@ -68,9 +63,9 @@ jobs:
             -f content=eyes >/dev/null
 
   claude:
-    needs: [parse, check-membership]
+    needs: [parse]
     if: |
-      needs.check-membership.outputs.is_member == 'true' &&
+      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) &&
       (needs.parse.outputs.command == 'review' || needs.parse.outputs.command == 'claude')
     permissions:
       contents: read
@@ -86,9 +81,9 @@ jobs:
       WINDMILL_EE_PRIVATE_ACCESS: ${{ secrets.WINDMILL_EE_PRIVATE_ACCESS }}
 
   codex:
-    needs: [parse, check-membership]
+    needs: [parse]
     if: |
-      needs.check-membership.outputs.is_member == 'true' &&
+      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) &&
       (needs.parse.outputs.command == 'review' || needs.parse.outputs.command == 'codex')
     permissions:
       contents: read
@@ -105,9 +100,9 @@ jobs:
       WINDMILL_EE_PRIVATE_ACCESS: ${{ secrets.WINDMILL_EE_PRIVATE_ACCESS }}
 
   pi:
-    needs: [parse, check-membership]
+    needs: [parse]
     if: |
-      needs.check-membership.outputs.is_member == 'true' &&
+      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) &&
       (needs.parse.outputs.command == 'review' || needs.parse.outputs.command == 'pi')
     permissions:
       contents: read
diff --git a/frontend/src/lib/components/apps/editor/component/components.ts b/frontend/src/lib/components/apps/editor/component/components.ts
index 707d992799..eb4028752d 100644
--- a/frontend/src/lib/components/apps/editor/component/components.ts
+++ b/frontend/src/lib/components/apps/editor/component/components.ts
@@ -1171,7 +1171,7 @@ export const components = {
 	chatcomponent: {
 		name: 'Chat',
 		icon: MessageSquare,
-		documentationLink: `${documentationBaseUrl}/chat`,
+		documentationLink: `${documentationBaseUrl}/app_component_library`,
 		dims: '3:8-6:12' as AppComponentDimensions,
 		customCss: {
 			container: { class: '', style: '' },
@@ -1299,7 +1299,7 @@ export const components = {
 	jobprogressbarcomponent: {
 		name: 'Progress Bar by Job Id',
 		icon: Monitor,
-		documentationLink: `${documentationBaseUrl}/progress_bar`,
+		documentationLink: `${documentationBaseUrl}/app_component_library`,
 		dims: '2:2-6:2' as AppComponentDimensions,
 		customCss: {
 			header: { class: '', style: '' },
@@ -1467,7 +1467,7 @@ export const components = {
 		name: 'Code Input',
 		icon: Code,
 		dims: '2:1-4:4' as AppComponentDimensions,
-		documentationLink: `${documentationBaseUrl}/code`,
+		documentationLink: `${documentationBaseUrl}/code_input`,
 		customCss: {
 			text: { class: '', style: '' },
 			container: { class: '', style: '' }
@@ -1810,7 +1810,7 @@ export const components = {
 	piechartcomponent: {
 		name: 'Pie Chart',
 		icon: PieChart,
-		documentationLink: `${documentationBaseUrl}/pie_chart`,
+		documentationLink: `${documentationBaseUrl}/chartjs`,
 		dims: '2:8-6:8' as AppComponentDimensions,
 		customCss: {
 			container: { class: '', style: '' }
@@ -1919,7 +1919,7 @@ export const components = {
 	barchartcomponent: {
 		name: 'Bar/Line Chart',
 		icon: BarChart4,
-		documentationLink: `${documentationBaseUrl}/bar_line_chart`,
+		documentationLink: `${documentationBaseUrl}/chartjs`,
 		dims: '2:8-6:8' as AppComponentDimensions,
 		customCss: {
 			container: { class: '', style: '' }
@@ -2132,7 +2132,7 @@ This is a paragraph.
 	timeseriescomponent: {
 		name: 'Timeseries',
 		icon: GripHorizontal,
-		documentationLink: `${documentationBaseUrl}/timeseries`,
+		documentationLink: `${documentationBaseUrl}/chartjs`,
 		dims: '2:8-6:8' as AppComponentDimensions,
 		customCss: {
 			container: { class: '', style: '' }
@@ -2206,7 +2206,7 @@ This is a paragraph.
 	scatterchartcomponent: {
 		name: 'Scatter Chart',
 		icon: GripHorizontal,
-		documentationLink: `${documentationBaseUrl}/scatter_chart`,
+		documentationLink: `${documentationBaseUrl}/chartjs`,
 		dims: '2:8-6:8' as AppComponentDimensions,
 		customCss: {
 			container: { class: '', style: '' }

From a1c5b7aa3ed2841f09f4f148ded5c5b5ef10fd3d Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 10:26:19 +0200
Subject: [PATCH 73/76] feat(pipelines): require data uploads before running a
 pipeline (#9953)

* feat(pipelines): require data uploads before running a pipeline

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): require every S3Object filled for data-upload readiness

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* feat(pipelines): Run pipeline defaults schedule-triggered scripts to their schedule args

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* docs: correct why only schedules default their args in Run pipeline

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix(pipelines): close cascade double-start race and gate data-upload readiness on full-schema validity

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* fix: expose ScriptEditor validity via callback, not banned bindable-with-default

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
---
 .../src/lib/components/ScriptEditor.svelte    |  10 ++
 .../assets/AssetGraph/AssetGraphCanvas.svelte |   9 ++
 .../AssetGraph/AssetGraphDetailsPane.svelte   |  42 +++++-
 .../AssetGraph/PipelineGraphEditor.svelte     |  12 ++
 .../AssetGraph/PipelineScriptView.svelte      |  26 +++-
 .../assets/AssetGraph/TriggerNode.svelte      |  48 ++++--
 .../(logged)/pipeline/[folder]/+page.svelte   | 139 +++++++++++++++++-
 7 files changed, 270 insertions(+), 16 deletions(-)

diff --git a/frontend/src/lib/components/ScriptEditor.svelte b/frontend/src/lib/components/ScriptEditor.svelte
index 50b5c8da95..ac941d0bf0 100644
--- a/frontend/src/lib/components/ScriptEditor.svelte
+++ b/frontend/src/lib/components/ScriptEditor.svelte
@@ -164,6 +164,11 @@
 		// succeeded.
 		requireValidAssets?: boolean
 		args: Record<string, any>
+		// Emitted with the test-form's full-schema validity whenever it changes, so
+		// a host (the pipeline editor) can gate a data-upload entry's readiness on
+		// whether every required field is filled, not just the S3 file. A callback
+		// rather than a bindable so we don't hit the `$bindable(default)` ban.
+		onIsValidChange?: (isValid: boolean) => void
 		// Custom timeout (in seconds) from the script settings. Forwarded to the
 		// preview run so "Test" honors the same timeout a deployed run would,
 		// instead of silently falling back to the instance default.
@@ -235,6 +240,7 @@
 		customUi = undefined,
 		requireValidAssets = false,
 		args = $bindable(),
+		onIsValidChange,
 		timeout = undefined,
 		selectedTab = $bindable('main'),
 		hasPreprocessor = $bindable(false),
@@ -678,6 +684,10 @@
 	let jobLoader: JobLoader | undefined = $state(undefined)
 
 	let isValid: boolean = $state(true)
+	// Mirror the test-form validity out to an optional host callback.
+	$effect(() => {
+		onIsValidChange?.(isValid)
+	})
 	let scriptProgress = $state(undefined)
 
 	let logPanel: LogPanel | undefined = $state(undefined)
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
index 6f8460fa10..fbaf3ed6ed 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphCanvas.svelte
@@ -129,6 +129,9 @@
 		// form (with the auto-generated S3 picker) for the given script.
 		// data_upload has no trigger row; it's a UI-first entry point.
 		onOpenDataUpload?: (scriptPath: string) => void
+		// Data-upload entry scripts whose file has been staged in the run form —
+		// their source node renders green (ready) instead of the neutral prompt.
+		readyDataUploadPaths?: ReadonlySet<string>
 		// Script paths the cursor is over in the Activity panel — a thin neutral
 		// ring each. One entry for a single run row; the whole cascade's runs
 		// when hovering a group header. Distinct from `selectedRunPaths`.
@@ -186,6 +189,7 @@
 		onDeleteTrigger,
 		onOpenWebhook,
 		onOpenDataUpload,
+		readyDataUploadPaths,
 		hoveredPaths,
 		selectedRunPaths,
 		panToNodeId,
@@ -703,6 +707,11 @@
 					runnable_unsaved: info.runnable_path
 						? unsavedRunnablePaths.has(info.runnable_path)
 						: false,
+					// data_upload nodes go green once a file is staged for their
+					// target script (see readyDataUploadPaths / page dataUploadArgs).
+					ready: info.runnable_path
+						? (readyDataUploadPaths?.has(info.runnable_path) ?? false)
+						: false,
 					onCreateMissingTrigger,
 					onEditTrigger,
 					onDeleteTrigger,
diff --git a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
index 095169e3b7..a097f09b6c 100644
--- a/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/AssetGraphDetailsPane.svelte
@@ -245,6 +245,14 @@
 		// preview only — the client orchestrates the chain). Unset on the deployed
 		// pane, whose single run already cascades via the backend dispatcher.
 		onRunCascadeByPath?: (path: string, args: Record<string, any>) => Promise<string | undefined>
+		// Persisted run-form args for the open data-upload entry (its staged
+		// S3Object), so re-opening the node restores the picked file.
+		runFormInitialArgs?: Record<string, any>
+		// Emitted when the run form's args (or validity) change (read-only
+		// PipelineScriptView OR the edit-mode ScriptEditor test form), so the page
+		// can persist a data-upload entry's staged input (drives node readiness).
+		// `isValid` is the full-schema validity, not just "file present".
+		onRunFormArgsChange?: (path: string, args: Record<string, any>, isValid: boolean) => void
 	}
 	let {
 		selection,
@@ -285,7 +293,9 @@
 		onRequestEdit,
 		canRunByPath = false,
 		onRunByPath,
-		onRunCascadeByPath
+		onRunCascadeByPath,
+		runFormInitialArgs,
+		onRunFormArgsChange
 	}: Props = $props()
 
 	let readOnly = $derived(mode !== 'edit')
@@ -463,6 +473,31 @@
 		script = undefined
 	})
 
+	// Data-upload capture (edit mode): the ScriptEditor test form binds `args`, so
+	// mirror it up to the page — that stages a data-upload entry's uploaded /
+	// entered input, driving the node's green "ready" state and seeding the
+	// whole-pipeline run. Reset per script in a pre-effect (before the keyed
+	// ScriptEditor remounts) so switching nodes never leaks one node's input into
+	// the next, seeding from the page's persisted staging so re-opening a node
+	// restores its input. Guarded on the path so a staging round-trip
+	// (emit → page → runFormInitialArgs) doesn't re-seed and loop. The read-only
+	// branch uses PipelineScriptView's own onArgsChange instead.
+	let argsSeedPath: string | undefined = undefined
+	$effect.pre(() => {
+		const p = script?.path
+		if (p === argsSeedPath) return
+		argsSeedPath = p
+		args = runFormInitialArgs ? structuredClone($state.snapshot(runFormInitialArgs)) : {}
+	})
+	// Bound out of ScriptEditor's test-form SchemaForm — full-schema validity of
+	// the edit-mode run form, so the page's readiness check sees whether every
+	// required field (not just the S3 file) is satisfied.
+	let runFormIsValid = $state(true)
+	$effect(() => {
+		if (readOnly || !script) return
+		onRunFormArgsChange?.(script.path, $state.snapshot(args), runFormIsValid)
+	})
+
 	// Persist draft edits back to the parent's drafts Map on transitions
 	// (selection change, pane close), not on every keystroke — a per-key
 	// sync triggered drafts → activeDraft → draftScript → re-clone → emit
@@ -1172,6 +1207,8 @@
 							downstreamCount={downstreamSubscribers}
 							{runsRefreshKey}
 							{runsPendingJobId}
+							initialArgs={runFormInitialArgs}
+							onArgsChange={onRunFormArgsChange}
 							onRunCompleted={() => {
 								previewRefreshKey += 1
 								onRunCompleted?.()
@@ -1234,7 +1271,8 @@
 							bind:assets={liveBodyAssets}
 							bind:inferredColumnLineage={liveColumnLineage}
 							{onTestStateChange}
-							{args}
+							bind:args
+							onIsValidChange={(v) => (runFormIsValid = v)}
 						/>
 					</div>
 				</div>
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
index 6e6a694e82..cc44d0b41a 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineGraphEditor.svelte
@@ -69,6 +69,9 @@
 		canRunByPath = false,
 		onRunByPath,
 		onRunCascadeByPath,
+		runFormInitialArgs,
+		onRunFormArgsChange,
+		readyDataUploadPaths,
 		resolveLocalScript,
 		localScriptsVersion,
 		selectionProducers = [],
@@ -162,6 +165,12 @@
 		// Run the open script AND its downstream closure (dev preview only; the
 		// deployed pane leaves this unset — its single run cascades via the backend).
 		onRunCascadeByPath?: (path: string, args: Record<string, any>) => Promise<string | undefined>
+		// Persisted run-form args for the currently-open data-upload entry, and a
+		// callback to persist them as they change — see the page's dataUploadArgs.
+		runFormInitialArgs?: Record<string, any>
+		onRunFormArgsChange?: (path: string, args: Record<string, any>, isValid: boolean) => void
+		// Data-upload entry scripts whose staged upload is ready (green node).
+		readyDataUploadPaths?: Set<string>
 		/** Local-dev (`/pipeline_dev`): resolve a node to its working-tree content
 		 * so the details pane skips the (nonexistent) deployed-script fetch. May
 		 * be async (to infer the args schema for the run form). */
@@ -438,6 +447,7 @@
 					{onDeleteTrigger}
 					{onOpenWebhook}
 					{onOpenDataUpload}
+					{readyDataUploadPaths}
 					onselect={onSelect}
 					{onAddScriptForAsset}
 					{onAddPipelineScript}
@@ -488,6 +498,8 @@
 						{canRunByPath}
 						{onRunByPath}
 						{onRunCascadeByPath}
+						{runFormInitialArgs}
+						{onRunFormArgsChange}
 						{resolveLocalScript}
 						{localScriptsVersion}
 						selection={activeDraft ? undefined : editor.selection}
diff --git a/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte b/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
index 18564c6edd..79a1cf6d47 100644
--- a/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/PipelineScriptView.svelte
@@ -33,6 +33,15 @@
 		runsRefreshKey?: any
 		runsPendingJobId?: string | undefined
 		onRunCompleted?: () => void
+		// Seed the run form with previously-staged args (e.g. a data-upload entry
+		// whose S3Object was picked earlier and persisted at the page level). Lets
+		// a re-opened node show the file it already has instead of a blank form.
+		initialArgs?: Record<string, any>
+		// Emitted whenever the run form's args (or validity) change, so the page can
+		// persist a data-upload entry's staged input — that drives the node's
+		// "green / ready" state and seeds the whole-pipeline run. `isValid` is the
+		// full-schema validity (all required fields, not just the S3 file).
+		onArgsChange?: (path: string, args: Record<string, any>, isValid: boolean) => void
 	}
 
 	let {
@@ -44,12 +53,25 @@
 		downstreamCount = 0,
 		runsRefreshKey,
 		runsPendingJobId,
-		onRunCompleted
+		onRunCompleted,
+		initialArgs,
+		onArgsChange
 	}: Props = $props()
 
-	let args = $state<Record<string, any>>({})
+	// Seed once from the persisted args (see initialArgs). Cloned so the run
+	// form mutates its own copy, not the page's stored snapshot.
+	// svelte-ignore state_referenced_locally
+	let args = $state<Record<string, any>>(
+		initialArgs ? structuredClone($state.snapshot(initialArgs)) : {}
+	)
 	let isValid = $state(true)
 	let running = $state(false)
+	// Push args + validity back up so the page can persist a staged data-upload
+	// entry. Reading the deep snapshot tracks nested changes (e.g. an S3Object's
+	// `s3` field, or items added to a required array).
+	$effect(() => {
+		onArgsChange?.(script.path, $state.snapshot(args), isValid)
+	})
 	// Offer "Run + downstream" only when a cascade dispatch is wired (dev preview)
 	// and the script actually has subscribers to fan out to.
 	let hasCascade = $derived(!!onRunCascade && downstreamCount > 0)
diff --git a/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte b/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte
index b888ae226a..98307013c4 100644
--- a/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte
+++ b/frontend/src/lib/components/assets/AssetGraph/TriggerNode.svelte
@@ -60,7 +60,7 @@
 	import { Handle, Position } from '@xyflow/svelte'
 	import { NODE } from '$lib/components/graph/util'
 	import { twMerge } from 'tailwind-merge'
-	import { AlertTriangle, EllipsisVertical, Target, Trash2 } from 'lucide-svelte'
+	import { AlertTriangle, CheckCircle2, EllipsisVertical, Target, Trash2 } from 'lucide-svelte'
 	import DropdownV2 from '$lib/components/DropdownV2.svelte'
 	import { stopPropagation, preventDefault } from 'svelte/legacy'
 	import type { Item } from '$lib/utils'
@@ -101,6 +101,9 @@
 			// auto-generated S3 picker lets the user upload + run) instead of
 			// rendering a "missing" placeholder.
 			onOpenDataUpload?: (scriptPath: string) => void
+			// True once a file is staged for this data_upload entry — renders the
+			// node green so the user knows the pipeline can run (see WIN-2129).
+			ready?: boolean
 			// Page-supplied dispatcher to open the matching native trigger
 			// drawer in edit mode for an attached (non-missing) trigger.
 			// `triggerPath` is the trigger row's path (e.g. the mqtt_trigger
@@ -149,6 +152,10 @@
 	// data_upload routes through its own handler — clicking opens the target
 	// script's run form (with the auto-generated S3 picker).
 	let canOpenDataUpload = $derived(isDataUpload && !!data.runnable_path && !!data.onOpenDataUpload)
+	// A staged upload turns the node green (ready to run); before that it stays
+	// on the neutral surface with the "upload a file" prompt.
+	let dataUploadReady = $derived(isDataUpload && data.ready === true)
+	let DataUploadIcon = $derived(dataUploadReady ? CheckCircle2 : style.icon)
 	// Schedule + the other native kinds all have dedicated editors. Webhook and
 	// data_upload are excluded — they route through their own open handlers.
 	let canCreate = $derived(
@@ -306,26 +313,47 @@
 	{:else if canOpenDataUpload}
 		<!-- Data upload: UI-first entry point (no trigger row). Clicking the
 		     node opens the target script's run form, where the auto-generated
-		     S3 picker lets the user upload a file and run the pipeline. Styled
-		     like an attached trigger, never the red "missing" state. -->
+		     S3 picker lets the user upload a file and run the pipeline. Goes
+		     green once a file is staged (ready), so "Run pipeline" can proceed;
+		     until then it stays neutral with an "upload a file" prompt. Never
+		     the red "missing" state. -->
 		<button
 			type="button"
 			onclick={handleDataUploadClick}
 			class={twMerge(
 				'flex items-center rounded-md drop-shadow-sm overflow-hidden outline outline-1 w-full text-left',
-				style.bg,
-				data.unsaved ? `opacity-80 ${style.borderUnsaved}` : style.border,
+				dataUploadReady
+					? 'bg-green-50 dark:bg-green-900/30 outline-green-500 dark:outline-green-600'
+					: style.bg,
+				dataUploadReady ? '' : data.unsaved ? `opacity-80 ${style.borderUnsaved}` : style.border,
 				'hover:brightness-95 dark:hover:brightness-110 transition-[filter]'
 			)}
 			style="width: {NODE.width}px; min-height: {NODE.height}px;"
-			title={`Data upload for ${data.runnable_path ?? ''} — click to open the run form and upload a file`}
+			title={dataUploadReady
+				? `Data upload for ${data.runnable_path ?? ''} — a file is staged; the pipeline is ready to run. Click to change it.`
+				: `Data upload for ${data.runnable_path ?? ''} — click to open the run form and upload a file`}
 		>
-			<Icon size={14} class={`shrink-0 ml-2 mr-2 ${style.iconText}`} />
+			<DataUploadIcon
+				size={14}
+				class={`shrink-0 ml-2 mr-2 ${dataUploadReady ? 'text-green-600 dark:text-green-400' : style.iconText}`}
+			/>
 			<div class="flex flex-col min-w-0 flex-1 pr-2 py-0.5 leading-tight">
-				<span class="text-3xs uppercase tracking-wide truncate text-tertiary">
-					{style.label}
+				<span
+					class={twMerge(
+						'text-3xs uppercase tracking-wide truncate',
+						dataUploadReady ? 'text-green-700 dark:text-green-400' : 'text-tertiary'
+					)}
+				>
+					{style.label}{dataUploadReady ? ' · ready' : ''}
+				</span>
+				<span
+					class={twMerge(
+						'text-2xs font-mono truncate',
+						dataUploadReady ? 'text-green-700 dark:text-green-400' : 'text-emphasis'
+					)}
+				>
+					{dataUploadReady ? 'File staged' : 'Upload & run'}
 				</span>
-				<span class="text-2xs font-mono truncate text-emphasis"> Upload & run </span>
 			</div>
 		</button>
 	{:else}
diff --git a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
index e65c97b83d..ad2f63e388 100644
--- a/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
+++ b/frontend/src/routes/(root)/(logged)/pipeline/[folder]/+page.svelte
@@ -94,6 +94,7 @@
 	import {
 		JobService,
 		OpenAPI,
+		ScheduleService,
 		ScriptService,
 		type AssetKind,
 		type Script,
@@ -1379,6 +1380,43 @@
 	// Run+downstream affordance against overlapping chains stomping each
 	// other's storage writes.
 	let cascadeRunningRoot = $state<string | undefined>(undefined)
+
+	// Script path → its schedule's configured args, so a manual "Run pipeline"
+	// launches a schedule-triggered script with the same payload a real tick
+	// would (rather than empty args). Schedule is the only trigger that stores a
+	// static args payload; every other trigger (webhook / http / event kinds /
+	// data_upload) receives its input from the live event or request at dispatch
+	// time — a message, an HTTP body, an uploaded file — which doesn't exist
+	// during a manual run, so there's nothing to default and those scripts run
+	// empty (data_upload being fed its staged file instead, see dataUploadArgs).
+	// Resolved on demand right before a run (schedule args aren't in the graph
+	// response); fail-safe — a schedule we can't fetch just contributes nothing.
+	let scheduleArgsByPath: Record<string, Record<string, any>> = {}
+	async function resolveScheduleArgs(scripts: string[]): Promise<void> {
+		scheduleArgsByPath = {}
+		const ws = $workspaceStore
+		if (!ws) return
+		const runSet = new Set(scripts)
+		// First schedule (with args) per in-run script; dedupe schedule fetches.
+		const wanted = new Map<string, string>() // script path → schedule path
+		for (const t of displayGraph.triggers) {
+			if (t.trigger_kind !== 'schedule' || t.runnable_kind !== 'script') continue
+			if (!runSet.has(t.runnable_path) || wanted.has(t.runnable_path)) continue
+			if ((t as any).path) wanted.set(t.runnable_path, (t as any).path)
+		}
+		await Promise.all(
+			[...wanted].map(async ([scriptPath, schedulePath]) => {
+				try {
+					const sched = await ScheduleService.getSchedule({ workspace: ws, path: schedulePath })
+					if (sched?.args && Object.keys(sched.args).length > 0) {
+						scheduleArgsByPath[scriptPath] = sched.args as Record<string, any>
+					}
+				} catch {
+					// schedule unreadable / deleted — leave its script on empty args
+				}
+			})
+		)
+	}
 	// Launch one pipeline script for the dev-run cascade. Always passes
 	// _wmill_skip_asset_dispatch — the orchestrator owns the whole closure,
 	// so the backend dispatcher must not double-fire the deployed part of a
@@ -1391,6 +1429,12 @@
 		// drafts (same condition as `displayGraph`). Otherwise — View mode with
 		// drafts hidden — a bounded run must execute the *deployed* scripts the
 		// user is looking at, not preview jobs from hidden local drafts.
+		// Default a script's run args to its schedule's stored payload (the only
+		// trigger with static args — see resolveScheduleArgs), then let a
+		// data-upload entry's staged file override. runWholePipeline already
+		// refused to start unless every data-upload entry is staged, so this is
+		// always the intended input.
+		const staged = { ...(scheduleArgsByPath[path] ?? {}), ...(dataUploadArgs[path]?.args ?? {}) }
 		const draft = mode === 'edit' || includeDrafts ? pe.drafts.get(path) : undefined
 		if (draft) {
 			if (!draft.script.content || !draft.script.language) {
@@ -1402,14 +1446,14 @@
 					content: draft.script.content,
 					language: draft.script.language,
 					path,
-					args: { _wmill_skip_asset_dispatch: true }
+					args: { ...staged, _wmill_skip_asset_dispatch: true }
 				}
 			})
 		}
 		return await JobService.runScriptByPath({
 			workspace: $workspaceStore,
 			path,
-			requestBody: { _wmill_skip_asset_dispatch: true }
+			requestBody: { ...staged, _wmill_skip_asset_dispatch: true }
 		})
 	}
 	// Poll a launched cascade job to a terminal state. Modest fixed cadence —
@@ -1456,9 +1500,13 @@
 				true
 			)
 		}
+		// Claim the running-guard BEFORE the first await so a rapid second click
+		// (which reads `cascadeRunningRoot`) can't slip through and double-launch.
 		cascadeRunningRoot = rootPath
 		let rootJobId: string | undefined
 		try {
+			// Seed schedule-triggered members with their configured payload.
+			await resolveScheduleArgs([rootPath, ...closure.nodes])
 			const res = await runCascade({
 				closure,
 				root: rootPath,
@@ -1637,9 +1685,13 @@
 			sendUserToast('No runnable scripts in this selection', true)
 			return
 		}
+		// Claim the running-guard BEFORE the first await so a rapid second click
+		// (which reads `cascadeRunningRoot`) can't slip through and double-launch.
 		cascadeRunningRoot = schedule.roots[0] ?? scripts[0]
 		let firstJobId: string | undefined
 		try {
+			// Seed schedule-triggered roots with their configured payload.
+			await resolveScheduleArgs(schedule.nodes)
 			const res = await runSelection({
 				schedule,
 				launch: async (path) => {
@@ -1679,6 +1731,71 @@
 		}
 	}
 
+	// Staged run-form input for data-upload entry scripts, keyed by path. Lifted
+	// out of the (transient, per-selection) run form so the uploaded/entered data
+	// persists across selection changes — it drives each entry node's green
+	// "ready" state and seeds the whole-pipeline run with that input. `valid` is
+	// the run form's full-schema validity (all required fields satisfied).
+	let dataUploadArgs = $state<Record<string, { args: Record<string, any>; valid: boolean }>>({})
+
+	// An S3Object-shaped value (the file picker writes `{ s3: '<path>' }`).
+	function isS3Object(v: any): boolean {
+		return !!v && typeof v === 'object' && !Array.isArray(v) && 's3' in v
+	}
+	// Whether a staged value carries actual data. Covers the two shapes a
+	// data-upload entry takes: an S3Object (file picker → `{ s3: '<path>' }`) and
+	// a plain required input (e.g. a JSON array pasted into the run form).
+	function hasMeaningfulValue(v: any): boolean {
+		if (v == null) return false
+		if (typeof v === 'string') return v.length > 0
+		if (Array.isArray(v)) return v.length > 0
+		if (typeof v === 'object')
+			return isS3Object(v) ? typeof v.s3 === 'string' && v.s3.length > 0 : Object.keys(v).length > 0
+		return true // numbers / booleans count as provided
+	}
+	// A data-upload entry is ready once the user actually provided its data, not
+	// just opened the form. Two guards: the form's own full-schema `valid` (every
+	// required field — including non-file ones — is satisfied), AND that any
+	// declared S3Object file field actually carries a file (the picker can leave
+	// an empty `{ s3: '' }` on a non-required file field, which `valid` alone
+	// wouldn't catch).
+	function dataUploadReady(path: string): boolean {
+		const staged = dataUploadArgs[path]
+		if (!staged || !staged.valid) return false
+		const values = Object.values(staged.args)
+		const s3s = values.filter(isS3Object)
+		if (s3s.length > 0) return s3s.every(hasMeaningfulValue)
+		return values.some(hasMeaningfulValue)
+	}
+	// Persist the run form's args + validity, but only for data-upload entries —
+	// other run forms (partitioned producers) run their own way and must not be
+	// mistaken for a staged upload. Idempotent: the run form re-emits on every
+	// keystroke/validation pass, so bail when the value is unchanged — otherwise
+	// each emit would reassign `dataUploadArgs`, giving `readyDataUploadPaths` a
+	// fresh Set identity that re-syncs the canvas and re-fires the form's emit
+	// effect (effect_update_depth_exceeded).
+	function stageRunFormArgs(path: string, args: Record<string, any>, valid: boolean) {
+		if (!dataUploadEntryPaths.has(path)) return
+		const prev = dataUploadArgs[path]
+		if (prev && prev.valid === valid && JSON.stringify(prev.args) === JSON.stringify(args)) return
+		dataUploadArgs = { ...dataUploadArgs, [path]: { args, valid } }
+	}
+	// Pipeline scripts that are data-upload entry points (a `data_upload` trigger
+	// in the displayed graph). They can't auto-run — they need an uploaded file
+	// before the pipeline can go (see runWholePipeline's gate + the node's green
+	// state).
+	let dataUploadEntryPaths = $derived(
+		new Set(
+			displayGraph.triggers
+				.filter((t) => t.trigger_kind === 'data_upload' && t.runnable_kind === 'script')
+				.map((t) => t.runnable_path)
+		)
+	)
+	// Of those, the ones with a staged file — drives the green node treatment.
+	let readyDataUploadPaths = $derived(
+		new Set([...dataUploadEntryPaths].filter((p) => dataUploadReady(p)))
+	)
+
 	// Every pipeline-member script, for the always-visible header "Run pipeline"
 	// control. Per-node runs are hover/select-gated on the canvas; this
 	// pipeline-level affordance runs the whole graph without hunting for a root
@@ -1695,6 +1812,21 @@
 	// downstream from every source at once. Reuses the same per-hop launch/poll
 	// and one-cascade-at-a-time guard as the node-level chain runs.
 	async function runWholePipeline() {
+		// Data-upload entries can't auto-run with empty args (they'd run against a
+		// missing S3Object). Require every one to be staged (green) first, and
+		// point the user at the first unready node instead of launching a doomed
+		// run.
+		const unready = allPipelineScripts.filter(
+			(p) => dataUploadEntryPaths.has(p) && !dataUploadReady(p)
+		)
+		if (unready.length > 0) {
+			sendUserToast(
+				`Upload data to ${unready.length} data-upload node${unready.length === 1 ? '' : 's'} first — they must be green before the pipeline can run`,
+				true
+			)
+			openDataUploadRun(unready[0])
+			return
+		}
 		await runBoundedCascade(allPipelineScripts)
 	}
 
@@ -2328,6 +2460,9 @@
 				onDeleteTrigger={mode === 'edit' ? deleteAttachedTrigger : undefined}
 				onOpenWebhook={openWebhookDrawer}
 				onOpenDataUpload={openDataUploadRun}
+				{readyDataUploadPaths}
+				runFormInitialArgs={openScriptPath ? dataUploadArgs[openScriptPath]?.args : undefined}
+				onRunFormArgsChange={stageRunFormArgs}
 				onSelect={handleCanvasSelect}
 				onAddScriptForAsset={mode === 'edit' ? handleAddScriptForAsset : undefined}
 				onAddPipelineScript={mode === 'edit' ? handleAddPipelineScript : undefined}

From 43044c2e28139b1dbde6844c781a821f8de68f58 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 10:26:53 +0200
Subject: [PATCH 74/76] feat(pipelines): wm_partition macro for grain-agnostic
 partition filters (#9950)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* wip: partial work before earlyoom-recovery relaunch

* fix(pipelines): scaffold the strftime {partition} filter idiom (frontend-only)

The DuckDB materialize scaffold and the AI pipeline prompt now teach the
grain-agnostic `WHERE strftime(<ts_col>, '<fmt>') = {partition}` filter instead
of the naive `= TIMESTAMP {partition}` cast. `{partition}` substitutes to the
partition IDENTITY string (`2026-07-05T23`, `2026-W27`, `2026-07`), which is not
a valid DuckDB TIMESTAMP literal for any non-daily grain — so the naive form
raises a `Conversion Error` for hourly/weekly/monthly (only daily parses).

Adds a frontend unit test asserting the hourly scaffold emits the strftime
idiom (`%Y-%m-%dT%H`) for every grain and never scaffolds the naive TIMESTAMP
cast as executable SQL.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(pipelines): scope strftime partition idiom to time grains

Review nit: `dynamic` partitioning's identity is a caller-supplied key, not a
timestamp, so `strftime` doesn't apply. Scope the scaffold + AI prompt claim to
time grains and add a `dynamic` example that filters on the user's own key.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(pipelines): wm_partition macro for grain-agnostic partition filters

The materialize runtime now injects a `wm_partition(ts)` temp macro as the first
setup statement of a time-partitioned script, so filtering the source to the
active slice is one grain-agnostic line — `WHERE wm_partition(<ts_col>) =
{partition}` — instead of a hand-written `strftime` format the author must keep
in lockstep with the resolver, or the `= TIMESTAMP {partition}` cast that only
parses for daily and Conversion-Errors for hourly/weekly/monthly.

The macro's format comes from `PartitionKind::default_time_format` in
windmill-parser, the same source the EE resolver reads to stamp the `{partition}`
identity, so the two can't drift. `dynamic` partitions get no macro (their
identity is a caller-supplied key → `WHERE <key_col> = {partition}`).

Replaces the earlier 9-line strftime comment block in the scaffold with the
single macro line; AI pipeline prompt and design doc updated to match.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* test(pipelines): verify wm_partition strftime parity vs chrono through real DuckDB

Runs the bundled DuckDB engine in-memory and asserts strftime renders every
grain format (daily/hourly/weekly `%G-W%V`/monthly) byte-for-byte identically to
chrono — the engine the resolver uses to stamp the `{partition}` identity —
across ISO-week year boundaries (2027-01-01 → 2026-W53 etc.). Also proves the
injected `wm_partition` macro buckets the whole slice and that the naive
`TIMESTAMP '<weekly|monthly identity>'` cast Conversion-Errors.

Closes the one cross-engine assumption the pure-Rust/frontend tests couldn't
reach (flagged by CI review for weekly ISO-week rendering).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore: update ee-repo-ref to 0de2412ff0734b11e12ba378c9bcc373ff9ae800

This commit updates the EE repository reference after PR #649 was merged in windmill-ee-private.

Previous ee-repo-ref: ad6c6685689d7741058e7d2c9ecbe95d982e6268

New ee-repo-ref: 0de2412ff0734b11e12ba378c9bcc373ff9ae800

Automated by sync-ee-ref workflow.

* fix(pipelines): classify CREATE TEMP MACRO as a DuckDB prepare-path setup statement

The FFI prepare/diagnostics pass only EXECUTES statements recognized by
is_setup_statement (ATTACH/USE/INSTALL/…); everything else is merely prepared.
`CREATE [OR REPLACE] TEMP MACRO` wasn't recognized, so on a `-- prepare` run of a
partitioned materialize the injected `wm_partition` macro was never created on
the connection, and the later generated `CREATE TABLE … SELECT … WHERE
wm_partition(...)` failed to bind ("function does not exist"). The same latent
gap affected the workspace-macro splicer, which injects TEMP MACRO blocks too.

Classify CREATE [OR REPLACE] TEMP|TEMPORARY MACRO as setup so it's executed
before dependent blocks and excluded from the PrepareQueryResult count
(persistent CREATE MACRO stays a user statement). Adds a prepare-path test that
fails without the fix.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
---
 backend/ee-repo-ref.txt                       |   2 +-
 .../windmill-parser/src/asset_parser.rs       |  34 ++++
 .../windmill-parser/src/sql_materialize.rs    |  72 +++++++
 .../windmill-duckdb-ffi-internal/src/lib.rs   | 176 ++++++++++++++++++
 .../windmill-worker/src/duckdb_executor.rs    |  15 ++
 docs/ducklake-materialization.md              |  30 +++
 .../AssetGraph/pipelineTemplates.test.ts      |  33 ++++
 .../assets/AssetGraph/pipelineTemplates.ts    |  17 +-
 .../components/copilot/chat/pipeline/core.ts  |   2 +-
 9 files changed, 376 insertions(+), 5 deletions(-)

diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index cc9c36f5a5..087459205e 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-4bd7b73dcef1b77dc2866bc58e0c86962559495c
+0de2412ff0734b11e12ba378c9bcc373ff9ae800
diff --git a/backend/parsers/windmill-parser/src/asset_parser.rs b/backend/parsers/windmill-parser/src/asset_parser.rs
index 94b43c1d7f..045cac87e6 100644
--- a/backend/parsers/windmill-parser/src/asset_parser.rs
+++ b/backend/parsers/windmill-parser/src/asset_parser.rs
@@ -218,6 +218,40 @@ pub struct PartitionSpec {
     pub start: Option<String>,
 }
 
+impl PartitionKind {
+    /// The `strftime`/chrono format that renders a time grain's identity
+    /// string. SINGLE SOURCE OF TRUTH: the partition resolver stamps the stored
+    /// identity with this, and the `wm_partition` materialize macro filters
+    /// against it — the two must never drift, so both read it from here.
+    /// `Dynamic` has no wall-clock identity; it falls back to a plain date only
+    /// where some format is unconditionally required (never for bucketing).
+    pub fn default_time_format(&self) -> &'static str {
+        match self {
+            PartitionKind::Hourly => "%Y-%m-%dT%H",
+            PartitionKind::Weekly => "%G-W%V",
+            PartitionKind::Monthly => "%Y-%m",
+            _ => "%Y-%m-%d",
+        }
+    }
+}
+
+impl PartitionSpec {
+    /// Effective identity format for a TIME partition: the explicit `format=`
+    /// override, else the per-grain default. `None` for `dynamic` — its
+    /// identity is a caller-supplied key, not a formatted instant, so there is
+    /// no `strftime` bucketing expression (and hence no `wm_partition` macro).
+    pub fn time_strftime_format(&self) -> Option<&str> {
+        match self.kind {
+            PartitionKind::Dynamic { .. } => None,
+            _ => Some(
+                self.format
+                    .as_deref()
+                    .unwrap_or_else(|| self.kind.default_time_format()),
+            ),
+        }
+    }
+}
+
 // Freshness SLA. The duration is kept as a raw string ("1h", "30m", "2d")
 // and validated downstream — the parser deliberately doesn't bind to a
 // specific duration crate so the annotation grammar stays parser-light.
diff --git a/backend/parsers/windmill-parser/src/sql_materialize.rs b/backend/parsers/windmill-parser/src/sql_materialize.rs
index 1b24a5bccd..0e6e6656eb 100644
--- a/backend/parsers/windmill-parser/src/sql_materialize.rs
+++ b/backend/parsers/windmill-parser/src/sql_materialize.rs
@@ -1062,6 +1062,29 @@ pub fn materialize_result_sql(
 }
 
 // Ensure a statement ends with a single `;`.
+/// Convenience macro injected as the first setup statement of a partitioned
+/// materialize: `wm_partition(ts)` renders a timestamp with the SAME identity
+/// format the resolver used for `{partition}` (from
+/// [`PartitionSpec::time_strftime_format`]). It lets a partitioned SELECT
+/// filter to the active slice with a single grain-agnostic line —
+/// `WHERE wm_partition(<ts_col>) = {partition}` — so users never hand-write a
+/// `strftime` format that can drift, nor reach for `= TIMESTAMP {partition}`
+/// (which only parses for daily). `None` for `dynamic` (no wall-clock bucket).
+///
+/// Timezone-agnostic by construction: it formats `ts` as given, matching the
+/// prior documented `strftime(ts, fmt)` idiom. When a non-UTC `tz=` is set the
+/// caller is responsible for expressing `ts` in that zone (same caveat the raw
+/// idiom carried), so this doesn't silently reinterpret a column's instant.
+pub fn wm_partition_macro(spec: &crate::asset_parser::PartitionSpec) -> Option<String> {
+    let fmt = spec.time_strftime_format()?;
+    // fmt is a trusted per-grain constant or the author's `format=`; escape
+    // single quotes defensively so the emitted literal can't break out.
+    Some(format!(
+        "CREATE OR REPLACE TEMP MACRO wm_partition(ts) AS strftime(ts, '{}')",
+        fmt.replace('\'', "''")
+    ))
+}
+
 fn terminate(stmt: &str) -> String {
     let t = stmt.trim_end();
     if t.ends_with(';') {
@@ -1456,6 +1479,55 @@ mod tests {
         classify_wrap(sql).expect_err("expected wrap-ineligible")
     }
 
+    use crate::asset_parser::{PartitionKind, PartitionSpec};
+
+    fn pspec(kind: PartitionKind, format: Option<&str>) -> PartitionSpec {
+        PartitionSpec { kind, tz: None, format: format.map(String::from), start: None }
+    }
+
+    #[test]
+    fn wm_partition_macro_uses_grain_identity_format() {
+        // Every time grain's macro must strftime with the exact format the
+        // resolver stamps the identity with — otherwise the equality filter
+        // silently returns no rows. This is the whole point of the shared source.
+        let cases = [
+            (PartitionKind::Daily, "%Y-%m-%d"),
+            (PartitionKind::Hourly, "%Y-%m-%dT%H"),
+            (PartitionKind::Weekly, "%G-W%V"),
+            (PartitionKind::Monthly, "%Y-%m"),
+        ];
+        for (kind, fmt) in cases {
+            assert_eq!(
+                wm_partition_macro(&pspec(kind.clone(), None)).as_deref(),
+                Some(
+                    format!(
+                        "CREATE OR REPLACE TEMP MACRO wm_partition(ts) AS strftime(ts, '{fmt}')"
+                    )
+                    .as_str()
+                ),
+                "wrong macro format for {kind:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn wm_partition_macro_honors_format_override_and_skips_dynamic() {
+        // Explicit `format=` wins over the grain default.
+        assert!(
+            wm_partition_macro(&pspec(PartitionKind::Hourly, Some("%Y/%m/%d %H")))
+                .unwrap()
+                .contains("strftime(ts, '%Y/%m/%d %H')")
+        );
+        // Dynamic has no wall-clock bucket → no macro (user filters on their key).
+        assert_eq!(
+            wm_partition_macro(&pspec(
+                PartitionKind::Dynamic { key: "$.tenant".into() },
+                None
+            )),
+            None
+        );
+    }
+
     #[test]
     fn split_respects_strings_comments_idents() {
         let sql = "SET x=1; -- a; comment\nSELECT ';' AS a, \"weird;col\" /* ; */ FROM t;";
diff --git a/backend/windmill-duckdb-ffi-internal/src/lib.rs b/backend/windmill-duckdb-ffi-internal/src/lib.rs
index 25347098f2..a7543620b6 100644
--- a/backend/windmill-duckdb-ffi-internal/src/lib.rs
+++ b/backend/windmill-duckdb-ffi-internal/src/lib.rs
@@ -148,6 +148,23 @@ fn is_setup_statement(query: &str) -> bool {
         || upper.starts_with("RESET")
         || upper.starts_with("CREATE OR REPLACE SECRET")
         || upper.starts_with("CREATE SECRET")
+        || is_create_temp_macro(&upper)
+}
+
+/// `CREATE [OR REPLACE] TEMP|TEMPORARY MACRO` — a connection-scoped definition
+/// that returns no result set and must be *executed* (not just prepared) during
+/// the prepare/diagnostics pass, so later blocks that call the macro bind
+/// against it instead of failing "function does not exist". Both the materialize
+/// runtime (`wm_partition`) and the workspace-macro splicer inject these ahead
+/// of the query that uses them, so — like ATTACH — they are connection setup,
+/// not user queries (they must not add a `PrepareQueryResult` entry either).
+/// Persistent `CREATE MACRO` (no TEMP) is a real user statement and is excluded.
+fn is_create_temp_macro(upper: &str) -> bool {
+    let norm = upper.split_whitespace().collect::<Vec<_>>().join(" ");
+    norm.starts_with("CREATE TEMP MACRO")
+        || norm.starts_with("CREATE TEMPORARY MACRO")
+        || norm.starts_with("CREATE OR REPLACE TEMP MACRO")
+        || norm.starts_with("CREATE OR REPLACE TEMPORARY MACRO")
 }
 
 /// Returns true if the query is expected to return a result set and can be wrapped with DESCRIBE.
@@ -945,6 +962,165 @@ mod temporal_json_tests {
     }
 }
 
+// Cross-engine parity for the `wm_partition` materialize macro. The macro is
+// `strftime(ts, '<fmt>')` where `<fmt>` is single-sourced in windmill-parser's
+// `PartitionKind::default_time_format` — the SAME format the EE resolver
+// (`partition_ee.rs`) uses (via chrono) to stamp the `{partition}` identity.
+// The macro only works if the *bundled* DuckDB engine renders that format
+// byte-for-byte identically to chrono. Weekly `%G-W%V` (ISO year/week) is the
+// one that can diverge at a year boundary, so it's exercised head-on here — a
+// gap a pure-Rust unit test can't reach.
+#[cfg(test)]
+mod wm_partition_parity_tests {
+    use super::*;
+
+    // Mirror of windmill-parser `PartitionKind::default_time_format`.
+    const FORMATS: &[&str] = &["%Y-%m-%d", "%Y-%m-%dT%H", "%G-W%V", "%Y-%m"];
+
+    fn scalar_str(conn: &duckdb::Connection, sql: &str) -> String {
+        let mut stmt = conn.prepare(sql).unwrap();
+        let mut rows = stmt.query([]).unwrap();
+        row_string(rows.next().unwrap().unwrap())
+    }
+    fn row_string(row: &Row) -> String {
+        row.get::<usize, String>(0).unwrap()
+    }
+
+    #[test]
+    fn duckdb_strftime_matches_chrono_for_every_grain_format() {
+        use chrono::NaiveDate;
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        // A normal instant, two same-hour instants, and ISO-week year boundaries
+        // where chrono's and DuckDB's ISO rules must agree: 2026-01-01 (Thu) is
+        // in 2026-W01 and makes 2026 a 53-week ISO year, so 2027-01-01 (Fri)
+        // belongs to 2026-W53; 2023-01-01 (Sun) → 2022-W52; 2021-01-03 (Sun) →
+        // 2020-W53.
+        let instants = [
+            (2026, 7, 5, 23, 10, 0),
+            (2026, 7, 5, 23, 55, 0),
+            (2026, 1, 1, 0, 0, 0),
+            (2027, 1, 1, 0, 0, 0),
+            (2023, 1, 1, 0, 0, 0),
+            (2021, 1, 3, 23, 59, 0),
+            (2020, 12, 31, 12, 0, 0),
+        ];
+        for (y, mo, d, h, mi, s) in instants {
+            let dt = NaiveDate::from_ymd_opt(y, mo, d)
+                .unwrap()
+                .and_hms_opt(h, mi, s)
+                .unwrap();
+            let ts_lit = dt.format("%Y-%m-%d %H:%M:%S").to_string();
+            for fmt in FORMATS {
+                let chrono_val = dt.format(fmt).to_string();
+                let duck = scalar_str(
+                    &conn,
+                    &format!("SELECT strftime(TIMESTAMP '{ts_lit}', '{fmt}')"),
+                );
+                assert_eq!(
+                    duck, chrono_val,
+                    "DuckDB strftime disagrees with chrono for {ts_lit} / {fmt}"
+                );
+            }
+        }
+        // Explicit year-boundary pin: guards against BOTH engines drifting the
+        // same way (2027-01-01 is ISO week 53 of 2026).
+        assert_eq!(
+            scalar_str(&conn, "SELECT strftime(TIMESTAMP '2027-01-01', '%G-W%V')"),
+            "2027-01-01"
+                .parse::<chrono::NaiveDate>()
+                .unwrap()
+                .format("%G-W%V")
+                .to_string()
+        );
+        assert_eq!(
+            scalar_str(&conn, "SELECT strftime(TIMESTAMP '2027-01-01', '%G-W%V')"),
+            "2026-W53"
+        );
+    }
+
+    #[test]
+    fn temp_macro_is_classified_as_setup() {
+        // The macro the executor injects, plus whitespace/keyword variants the
+        // workspace-macro splicer can emit.
+        assert!(is_setup_statement(
+            "CREATE OR REPLACE TEMP MACRO wm_partition(ts) AS strftime(ts, '%Y-%m-%dT%H')"
+        ));
+        assert!(is_setup_statement("  create temp macro foo(x) as x + 1"));
+        assert!(is_setup_statement("CREATE TEMPORARY MACRO foo(x) AS x"));
+        assert!(is_setup_statement(
+            "CREATE OR REPLACE\n  TEMPORARY MACRO foo(x) AS x"
+        ));
+        // Persistent (non-TEMP) macros are real user statements, not setup.
+        assert!(!is_setup_statement(
+            "CREATE OR REPLACE MACRO safe_div(a, b) AS a / b"
+        ));
+        assert!(!is_setup_statement("CREATE MACRO foo(x) AS x"));
+    }
+
+    #[test]
+    fn prepare_pass_binds_consumer_only_when_macro_runs_as_setup() {
+        // Mirror prepare_duckdb_internal's per-block contract: setup statements
+        // are EXECUTED, everything else is only prepared. A block that calls
+        // wm_partition binds at prepare time, so it resolves only if the macro
+        // block already ran as setup.
+        let consumer = "SELECT wm_partition(TIMESTAMP '2026-07-05 23:10:00') AS p";
+        let macro_stmt =
+            "CREATE OR REPLACE TEMP MACRO wm_partition(ts) AS strftime(ts, '%Y-%m-%dT%H')";
+
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        for block in [macro_stmt, consumer] {
+            if is_setup_statement(block) {
+                conn.execute_batch(block).unwrap();
+            } else {
+                conn.prepare(block)
+                    .expect("consumer must prepare once the macro ran as setup");
+            }
+        }
+
+        // Guard: if the macro were NOT setup (the bug), the consumer's prepare
+        // fails "function does not exist" — proving the classification matters.
+        let fresh = duckdb::Connection::open_in_memory().unwrap();
+        assert!(
+            fresh.prepare(consumer).is_err(),
+            "consumer must fail to prepare when wm_partition was never created"
+        );
+    }
+
+    #[test]
+    fn wm_partition_macro_buckets_whole_slice_and_naive_cast_errors() {
+        let conn = duckdb::Connection::open_in_memory().unwrap();
+        // Exactly the statement the executor injects for an hourly materialize.
+        conn.execute_batch(
+            "CREATE OR REPLACE TEMP MACRO wm_partition(ts) AS strftime(ts, '%Y-%m-%dT%H');",
+        )
+        .unwrap();
+        conn.execute_batch(
+            "CREATE TABLE t(ts TIMESTAMP); INSERT INTO t VALUES \
+             (TIMESTAMP '2026-07-05 23:10:00'), (TIMESTAMP '2026-07-05 23:55:00'), \
+             (TIMESTAMP '2026-07-05 22:30:00'), (TIMESTAMP '2026-07-06 00:05:00');",
+        )
+        .unwrap();
+        // Filtering with the injected macro against the identity string selects
+        // the WHOLE hour bucket (both 23:10 and 23:55) — not just the boundary
+        // instant a `= TIMESTAMP {partition}` cast could ever match.
+        let n = scalar_str(
+            &conn,
+            "SELECT count(*)::VARCHAR FROM t WHERE wm_partition(ts) = '2026-07-05T23'",
+        );
+        assert_eq!(n, "2");
+        // The footgun the macro exists to avoid: the weekly/monthly identity
+        // strings are not valid TIMESTAMP literals, so the naive cast errors.
+        assert!(
+            conn.execute_batch("SELECT TIMESTAMP '2026-W27';").is_err(),
+            "expected `TIMESTAMP '2026-W27'` to be a Conversion Error"
+        );
+        assert!(
+            conn.execute_batch("SELECT TIMESTAMP '2026-07';").is_err(),
+            "expected `TIMESTAMP '2026-07'` to be a Conversion Error"
+        );
+    }
+}
+
 fn json_value_to_duckdb_value(
     json_value: &serde_json::Value,
     arg_type: &str,
diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs
index 051aa77488..e4e24d6653 100644
--- a/backend/windmill-worker/src/duckdb_executor.rs
+++ b/backend/windmill-worker/src/duckdb_executor.rs
@@ -219,6 +219,21 @@ fn build_materialized_query(
     for s in plan.setup.iter_mut() {
         *s = substitute(s);
     }
+    // Prepend the `wm_partition(ts)` helper macro for a time-partitioned
+    // materialize so the SELECT can filter to the active slice with
+    // `WHERE wm_partition(<ts_col>) = {partition}`. Runs first (setup precedes
+    // the wrapped SELECT and the write transaction), carries no `{partition}`
+    // token so it's inserted post-substitution, and reads its format from the
+    // same source the resolver stamped the identity with — so they can't drift.
+    if partitioned {
+        if let Some(macro_sql) = ann
+            .partition
+            .as_ref()
+            .and_then(windmill_parser::sql_materialize::wm_partition_macro)
+        {
+            plan.setup.insert(0, macro_sql);
+        }
+    }
     // Deploy (`create_script_internal`) already rejects the invalid SCD2 combos,
     // but preview/test runs reach the executor without a deploy — re-check so a
     // bad combo fails with the same clear message instead of a raw DuckDB error.
diff --git a/docs/ducklake-materialization.md b/docs/ducklake-materialization.md
index 50e7c21de0..32fff7ca23 100644
--- a/docs/ducklake-materialization.md
+++ b/docs/ducklake-materialization.md
@@ -181,6 +181,36 @@ first materialize Windmill runs `ALTER TABLE … SET PARTITIONED BY (_wm_partiti
 so DuckLake prunes on read and DELETE-by-partition rewrites only that partition's
 Parquet files.
 
+> **`{partition}` in the user SELECT is the identity string, not a timestamp.**
+> The token substitutes to the partition's *identity* — the same string stored in
+> `_wm_partition` and used for dedup/backfill/state — as an escaped SQL literal
+> (`'2026-07-05T23'`, `'2026-W27'`, `'2026-07'`, `'2026-07-05'`). Only the daily
+> identity happens to be a valid DuckDB DATE/TIMESTAMP literal, so a naive
+> `WHERE ts = TIMESTAMP {partition}` works for daily but raises a `Conversion
+> Error` for hourly/weekly/monthly. Rather than make every author hand-write a
+> `strftime` format that must match the resolver's, the executor injects a
+> convenience macro as the first setup statement of a time-partitioned
+> materialize:
+>
+> ```sql
+> CREATE OR REPLACE TEMP MACRO wm_partition(ts) AS strftime(ts, '<fmt>');
+> ```
+>
+> so the filter is one grain-agnostic line: `WHERE wm_partition(<ts_col>) =
+> {partition}`. The `<fmt>` comes from **one source** —
+> `PartitionKind::default_time_format` in `windmill-parser` (respecting a custom
+> `format=` override) — which the EE resolver *also* reads to stamp the identity,
+> so the macro and `{partition}` can never drift (hourly `%Y-%m-%dT%H`, weekly
+> `%G-W%V`, monthly `%Y-%m`, daily `%Y-%m-%d`). By construction
+> `strftime(ts, fmt)` equals the identity for any row in the slice, so this both
+> parses and buckets the whole partition (not just the boundary instant a
+> timestamp cast would match). The macro is timezone-agnostic (it formats `ts` as
+> given, matching the raw-strftime idiom it replaces); when a non-UTC `tz=` is
+> set the author expresses `ts` in that zone. `dynamic` partitions get **no**
+> macro — their identity is a caller-supplied key, so the filter is
+> `WHERE <key_col> = {partition}` directly. The scaffold and the AI pipeline
+> prompt teach the `wm_partition` form.
+
 > Storage: DuckLake writes go to `s3://_default_/` through the windmill S3 proxy
 > (`/api/w/{ws}/s3_proxy`, gated behind the `parquet` + `private` features). The
 > proxy must sign the SigV4 canonical URI with **single** percent-encoding — the
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts
index 262d36e6cf..fabbe1dca6 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.test.ts
@@ -58,3 +58,36 @@ describe('pipelineTemplates S3 seed/body parity', () => {
 		}
 	}
 })
+
+// `{partition}` substitutes to the partition IDENTITY string (e.g. `2026-07-05T23`,
+// `2026-W27`, `2026-07`), which is NOT a valid DuckDB TIMESTAMP literal for any
+// sub-day / non-daily grain — so a naive `WHERE ts = TIMESTAMP {partition}`
+// raises a Conversion Error for hourly/weekly/monthly. The runtime injects a
+// `wm_partition(ts)` macro (format from the same source that stamps the
+// identity), so the scaffold teaches the one grain-agnostic filter line.
+describe('pipelineTemplates materialize partition filter', () => {
+	const materializeBody = () =>
+		generatePipelineDraft({
+			language: 'duckdb',
+			outputKind: 'materialize',
+			output: autoOutputAsset('materialize', 'demo', 'duckdb'),
+			input: { kind: 'ducklake', path: 'main/orders' },
+			triggers: []
+		})
+
+	it('teaches the grain-agnostic wm_partition filter', () => {
+		const body = materializeBody()
+		expect(body).toContain(`WHERE wm_partition(<ts_col>) = {partition}`)
+		// dynamic grain has no timestamp bucket — steer to the raw key.
+		expect(body).toContain(`WHERE <key_col> = {partition}`)
+	})
+
+	it('never scaffolds the naive `TIMESTAMP {partition}` cast, nor a raw strftime format', () => {
+		const body = materializeBody()
+		// The footgun cast must never appear (comment or SQL) now that the macro
+		// hides the format entirely.
+		expect(body).not.toMatch(/TIMESTAMP\s*\{partition\}/)
+		// No hand-written strftime format to drift from the resolver.
+		expect(body).not.toContain('strftime')
+	})
+})
diff --git a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
index 04d4232dd0..51af13442d 100644
--- a/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
+++ b/frontend/src/lib/components/assets/AssetGraph/pipelineTemplates.ts
@@ -689,9 +689,20 @@ function bodyDuckdb(ctx: TemplateContext): string {
 			// the slice — the runtime wraps it into the idempotent write +
 			// snapshot (see the `// materialize` annotation in the header). No
 			// CREATE TABLE / INSERT, and the target is NOT attached here (the
-			// runtime attaches it). Add `// partitioned daily` + a `{partition}`
-			// filter for a partitioned table.
-			lines.push(`SELECT * FROM ${inSql ?? '(SELECT 1 AS placeholder)'};`)
+			// runtime attaches it).
+			//
+			// Partitioned? `{partition}` is the slice's identity string. For a
+			// time grain the runtime injects a `wm_partition(ts)` macro that
+			// buckets a timestamp with that same identity format, so one
+			// grain-agnostic line filters the source to the active slice — no
+			// hand-written strftime format, no `= TIMESTAMP {partition}` cast
+			// (which errors for hourly/weekly/monthly). Kept as a comment because
+			// we don't know the user's timestamp column. See partitioning docs.
+			lines.push(
+				`-- Partitioned? Filter to the active slice (uncomment, set your timestamp column):`,
+				`--   WHERE wm_partition(<ts_col>) = {partition}   -- dynamic grain: WHERE <key_col> = {partition}`,
+				`SELECT * FROM ${inSql ?? '(SELECT 1 AS placeholder)'};`
+			)
 			break
 		case 'datatable':
 			if (output) {
diff --git a/frontend/src/lib/components/copilot/chat/pipeline/core.ts b/frontend/src/lib/components/copilot/chat/pipeline/core.ts
index f99bd0f210..86fe9eb634 100644
--- a/frontend/src/lib/components/copilot/chat/pipeline/core.ts
+++ b/frontend/src/lib/components/copilot/chat/pipeline/core.ts
@@ -320,7 +320,7 @@ Data Pipeline editor (ACTIVE):
 - The user has the /pipeline/${ctx.folder} editor open. A pipeline is a DAG of scripts (nodes) connected by storage assets (DuckLake tables, data tables, S3 objects, volumes, resources) and execution triggers.
 - Annotations are top-of-file comments in the NODE'S OWN comment syntax: \`--\` for SQL (duckdb/postgresql), \`#\` for python3/bash, \`//\` for bun/TS. The \`//\` shown below is the TS form — translate it (a \`// pipeline\` line in a SQL node is a syntax error that won't deploy).
 - A script becomes a pipeline node when its source starts with the \`// pipeline\` annotation. Declare execution-DAG inputs with \`// on <asset-uri | schedule | webhook | email | kafka | mqtt | nats | postgres | sqs | gcp | data_upload>\` (e.g. \`// on ducklake://main/orders\`). Outputs are inferred from what the body writes (wmill SDK calls / SQL CREATE TABLE / writeS3File); declare a managed output with \`// materialize <asset-uri>\`. Optional badges: \`// partitioned <daily|hourly|weekly|monthly|dynamic>\`, \`// freshness <duration>\`, \`// tag <name>\`, \`// retry <count> [delay]\`, \`// data_test <kind> ...\`.
-- \`materialize\` (the managed output): \`// materialize <asset-uri>\` means the runtime writes the node's output table FOR you — write the body as a single SELECT and the runtime wraps it in the create/replace, so do NOT also write your own CREATE TABLE / INSERT. IMPORTANT: \`// materialize\` is **DuckDB-only** and its target MUST be a DuckLake table (\`ducklake://<name>/<table>\`) — deploy rejects it on any other language or target. For a \`python3\`/\`bun\`/\`postgresql\` node, do NOT use \`// materialize\`; write the output via the SDK instead (e.g. \`wmill.writeS3File(...)\`, a \`CREATE TABLE\` in postgresql, or \`wmill.databaseUrlFromResource\`/ducklake helpers) and let the output be inferred. Reach for \`duckdb\` when a node should materialize a DuckLake table. Write strategy: with no option it REPLACES the whole table each run (full refresh; the only mode whose output columns may change); \`// materialize <uri> append\` INSERT-appends rows (incremental); \`// materialize <uri> key=<col>\` merges/upserts on \`<col>\`. \`// materialize manual <uri>\` opts OUT of managed writes — the script writes its own DDL and the annotation only records the output asset for lineage. \`materialize\` is paired with partitioning for incremental pipelines: a \`// partitioned <daily|hourly|weekly|monthly|dynamic>\` node runs once per partition (append/merge into a fixed-schema table), and the \`{partition}\` token inside any asset URI is substituted with the current partition value at run time. \`materialize\` is an output DECLARATION on the node — it is not a command; there is no "materialize run".
+- \`materialize\` (the managed output): \`// materialize <asset-uri>\` means the runtime writes the node's output table FOR you — write the body as a single SELECT and the runtime wraps it in the create/replace, so do NOT also write your own CREATE TABLE / INSERT. IMPORTANT: \`// materialize\` is **DuckDB-only** and its target MUST be a DuckLake table (\`ducklake://<name>/<table>\`) — deploy rejects it on any other language or target. For a \`python3\`/\`bun\`/\`postgresql\` node, do NOT use \`// materialize\`; write the output via the SDK instead (e.g. \`wmill.writeS3File(...)\`, a \`CREATE TABLE\` in postgresql, or \`wmill.databaseUrlFromResource\`/ducklake helpers) and let the output be inferred. Reach for \`duckdb\` when a node should materialize a DuckLake table. Write strategy: with no option it REPLACES the whole table each run (full refresh; the only mode whose output columns may change); \`// materialize <uri> append\` INSERT-appends rows (incremental); \`// materialize <uri> key=<col>\` merges/upserts on \`<col>\`. \`// materialize manual <uri>\` opts OUT of managed writes — the script writes its own DDL and the annotation only records the output asset for lineage. \`materialize\` is paired with partitioning for incremental pipelines: a \`// partitioned <daily|hourly|weekly|monthly|dynamic>\` node runs once per partition (append/merge into a fixed-schema table), and the \`{partition}\` token — usable in any asset URI AND in the body SQL — is substituted with the current partition's IDENTITY string at run time. To filter the source to the active slice on a time grain, use the runtime-injected macro: \`WHERE wm_partition(<ts_col>) = {partition}\`. \`wm_partition(ts)\` buckets a timestamp with the exact identity format the runtime used (daily/hourly/weekly/monthly), so it always matches and you never hand-write a \`strftime\` format. Do NOT write \`= TIMESTAMP {partition}\`: the identity string is not a valid timestamp literal for hourly/weekly/monthly and errors at runtime. For \`dynamic\` partitioning the identity is your caller-supplied key (not a timestamp, no macro), so filter on it directly: \`WHERE <your_key_col> = {partition}\`. \`materialize\` is an output DECLARATION on the node — it is not a command; there is no "materialize run".
 - Use get_pipeline_graph to see the current nodes/assets/triggers, and read_pipeline_node before editing one.
 - Build new nodes with build_pipeline_node and edit existing ones with edit_pipeline_node. These apply directly as unsaved drafts on the canvas (like the flow/script editor applies AI edits) — they DO NOT deploy. There is no separate Accept/Reject step. Prefer these over the generic write_script/edit_script draft tools while a pipeline is open.
 - Reuse existing asset paths from the graph when wiring a downstream node to an upstream one (read the upstream's write asset, then \`// on\` that same URI).

From ea19cc9dc459bd259e27f7fcc29601a010c5f8f0 Mon Sep 17 00:00:00 2001
From: hugocasa <hugo@casademont.ch>
Date: Mon, 6 Jul 2026 11:26:24 +0200
Subject: [PATCH 75/76] fix(ai): test key routes Azure Foundry Claude models
 via Anthropic Messages API (#9956)

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 frontend/src/lib/components/copilot/lib.ts | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/frontend/src/lib/components/copilot/lib.ts b/frontend/src/lib/components/copilot/lib.ts
index 52896f0d80..323b552cca 100644
--- a/frontend/src/lib/components/copilot/lib.ts
+++ b/frontend/src/lib/components/copilot/lib.ts
@@ -14,7 +14,7 @@ import Anthropic from '@anthropic-ai/sdk'
 import { get, type Writable } from 'svelte/store'
 import { OpenAPI, ResourceService, type Script } from '../../gen'
 import { EDIT_CONFIG, FIX_CONFIG, GEN_CONFIG } from './prompts'
-import { requiresMaxCompletionTokens } from './modelConfig'
+import { requiresMaxCompletionTokens, usesAnthropicMessagesApi } from './modelConfig'
 import { applyReasoningToConfig } from './reasoningRegistry'
 import { formatResourceTypes } from './utils'
 import { processToolCall, type Tool, type ToolCallbacks } from './chat/shared'
@@ -466,15 +466,19 @@ export async function testKey({
 		throw new Error('Missing a model to test')
 	}
 
-	// Use Anthropic SDK for Anthropic provider
-	if (aiProvider === 'anthropic') {
+	// Providers served through the Anthropic Messages API (native Anthropic, and
+	// Claude deployments on Azure Foundry) must use the Anthropic SDK path rather
+	// than OpenAI chat completions. Mirrors the chat loop's routing so the test
+	// key exercises the same request shape the chat actually sends.
+	if (usesAnthropicMessagesApi(aiProvider, modelToTest)) {
 		await testAnthropicKey({
 			apiKey,
 			workspace,
 			resourcePath,
 			model: modelToTest,
 			abortController,
-			messages
+			messages,
+			aiProvider
 		})
 		return
 	}
@@ -496,7 +500,8 @@ async function testAnthropicKey({
 	resourcePath,
 	model,
 	abortController,
-	messages
+	messages,
+	aiProvider
 }: {
 	apiKey?: string
 	workspace?: string
@@ -504,11 +509,15 @@ async function testAnthropicKey({
 	model: string
 	abortController: AbortController
 	messages: ChatCompletionMessageParam[]
+	aiProvider: AIProvider
 }) {
 	const { system, messages: anthropicMessages } = convertOpenAIToAnthropicMessages(messages)
 
+	// X-Provider must be the real provider (e.g. azure_foundry) so the backend
+	// resolves the right credentials and Anthropic URL; the SDK headers tell it to
+	// route through the Anthropic Messages API.
 	const headers: Record<string, string> = {
-		'X-Provider': 'anthropic',
+		'X-Provider': aiProvider,
 		'anthropic-version': '2023-06-01',
 		'X-Anthropic-SDK': 'true'
 	}

From 98013483c81e9eedeb847866a71fe23f85529984 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 6 Jul 2026 11:26:55 +0200
Subject: [PATCH 76/76] restore auto-review & command gating for private org
 members (#9958)

* fix(ci): gate auto-review on non-fork PR not author_association (skips private members)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(ci): authorize private org members for command workflows via app-token gate

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/workflows/check-write-access.yml | 66 ++++++++++++++++++++++++
 .github/workflows/claude-plan.yml        | 28 ++++++----
 .github/workflows/claude.yml             | 28 ++++++----
 .github/workflows/codex-pr-review.yml    |  8 ++-
 .github/workflows/git-commands.yaml      | 22 ++++++--
 .github/workflows/pi-pr-review.yml       |  8 ++-
 .github/workflows/pr-ready-review.yml    |  7 ++-
 .github/workflows/pr-review-commands.yml | 38 +++++++++++---
 8 files changed, 166 insertions(+), 39 deletions(-)
 create mode 100644 .github/workflows/check-write-access.yml

diff --git a/.github/workflows/check-write-access.yml b/.github/workflows/check-write-access.yml
new file mode 100644
index 0000000000..5e9494e74a
--- /dev/null
+++ b/.github/workflows/check-write-access.yml
@@ -0,0 +1,66 @@
+name: Check Write Access
+
+# Authorizes a user to trigger privileged command workflows (/review, /ai, /plan,
+# /updatesqlx, ...). The webhook author_association reports PRIVATE org members as
+# CONTRIBUTOR/NONE (only public members show as MEMBER), so command jobs can't gate on
+# it alone. This mints the internal GitHub App token — which can see private members —
+# and confirms the user is a member or has write access to the repo. The app token is
+# minted fresh per run, so unlike the old ORG_ACCESS_TOKEN PAT it never expires.
+
+on:
+  workflow_call:
+    inputs:
+      username:
+        required: true
+        type: string
+        description: 'The user whose access to verify'
+      trusted_bot:
+        required: false
+        type: string
+        default: 'windmill-internal-app[bot]'
+        description: 'A bot login that is always authorized'
+    outputs:
+      authorized:
+        description: 'true if the user is the trusted bot, an org member, or has repo write access'
+        value: ${{ jobs.check.outputs.authorized }}
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    outputs:
+      authorized: ${{ steps.check.outputs.authorized }}
+    steps:
+      - name: Mint internal app token
+        id: app
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.INTERNAL_APP_ID }}
+          private-key: ${{ secrets.INTERNAL_APP_KEY }}
+          owner: ${{ github.repository_owner }}
+
+      - name: Resolve authorization
+        id: check
+        env:
+          GH_TOKEN: ${{ steps.app.outputs.token }}
+          USERNAME: ${{ inputs.username }}
+          TRUSTED_BOT: ${{ inputs.trusted_bot }}
+          REPO: ${{ github.repository }}
+        run: |
+          if [ "$USERNAME" = "$TRUSTED_BOT" ]; then
+            echo "authorized=true" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          ORG="${REPO%%/*}"
+          # Org membership resolves private members too (204 = member, 404 = not).
+          if gh api "orgs/$ORG/members/$USERNAME" --silent 2>/dev/null; then
+            echo "authorized=true" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          # Fallback: effective repo permission (also covers outside collaborators).
+          PERM=$(gh api "repos/$REPO/collaborators/$USERNAME/permission" --jq '.permission' 2>/dev/null || echo none)
+          if [ "$PERM" = "admin" ] || [ "$PERM" = "write" ]; then
+            echo "authorized=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "authorized=false" >> "$GITHUB_OUTPUT"
+            echo "$USERNAME is neither the trusted bot, an org member, nor a repo writer."
+          fi
diff --git a/.github/workflows/claude-plan.yml b/.github/workflows/claude-plan.yml
index e4394fe7a1..ef25554f83 100644
--- a/.github/workflows/claude-plan.yml
+++ b/.github/workflows/claude-plan.yml
@@ -11,18 +11,24 @@ on:
     types: [submitted]
 
 jobs:
-  claude-plan-action:
+  # author_association misses private org members; check-access resolves them via the
+  # internal app token. Both are OR'd below so public members still pass instantly.
+  check-access:
     if: |
-      (
-        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '/plan')) ||
-        (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '/plan')) ||
-        (github.event_name == 'pull_request_review' && contains(github.event.review.body, '/plan')) ||
-        (github.event_name == 'issues' && contains(github.event.issue.body, '/plan'))
-      ) &&
-      (
-        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association || github.event.review.author_association || github.event.issue.author_association) ||
-        (github.event.comment.user.login || github.event.review.user.login || github.event.issue.user.login) == 'windmill-internal-app[bot]'
-      )
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '/plan')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '/plan')) ||
+      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '/plan')) ||
+      (github.event_name == 'issues' && contains(github.event.issue.body, '/plan'))
+    uses: ./.github/workflows/check-write-access.yml
+    with:
+      username: ${{ github.event.comment.user.login || github.event.review.user.login || github.event.issue.user.login }}
+    secrets: inherit
+
+  claude-plan-action:
+    needs: [check-access]
+    if: |
+      needs.check-access.outputs.authorized == 'true' ||
+      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association || github.event.review.author_association || github.event.issue.author_association)
     runs-on: ubicloud-standard-4
     timeout-minutes: 20
     permissions:
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 0a66553362..115115dac6 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -11,18 +11,24 @@ on:
     types: [submitted]
 
 jobs:
-  claude-code-action:
+  # author_association misses private org members; check-access resolves them via the
+  # internal app token. Both are OR'd below so public members still pass instantly.
+  check-access:
     if: |
-      (
-        (github.event_name == 'issue_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
-        (github.event_name == 'pull_request_review_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
-        (github.event_name == 'pull_request_review' && startsWith(github.event.review.body, '/ai') && !startsWith(github.event.review.body, '/ai-fast')) ||
-        (github.event_name == 'issues' && startsWith(github.event.issue.body, '/ai') && !startsWith(github.event.issue.body, '/ai-fast'))
-      ) &&
-      (
-        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association || github.event.review.author_association || github.event.issue.author_association) ||
-        (github.event.comment.user.login || github.event.review.user.login || github.event.issue.user.login) == 'windmill-internal-app[bot]'
-      )
+      (github.event_name == 'issue_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
+      (github.event_name == 'pull_request_review_comment' && startsWith(github.event.comment.body, '/ai') && !startsWith(github.event.comment.body, '/ai-fast')) ||
+      (github.event_name == 'pull_request_review' && startsWith(github.event.review.body, '/ai') && !startsWith(github.event.review.body, '/ai-fast')) ||
+      (github.event_name == 'issues' && startsWith(github.event.issue.body, '/ai') && !startsWith(github.event.issue.body, '/ai-fast'))
+    uses: ./.github/workflows/check-write-access.yml
+    with:
+      username: ${{ github.event.comment.user.login || github.event.review.user.login || github.event.issue.user.login }}
+    secrets: inherit
+
+  claude-code-action:
+    needs: [check-access]
+    if: |
+      needs.check-access.outputs.authorized == 'true' ||
+      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association || github.event.review.author_association || github.event.issue.author_association)
     runs-on: ubicloud-standard-8
     permissions:
       contents: write
diff --git a/.github/workflows/codex-pr-review.yml b/.github/workflows/codex-pr-review.yml
index 772e3e31ff..ea622914bc 100644
--- a/.github/workflows/codex-pr-review.yml
+++ b/.github/workflows/codex-pr-review.yml
@@ -35,12 +35,16 @@ jobs:
   codex-review:
     runs-on: ubicloud-standard-2
     timeout-minutes: 30
+    # A non-fork PR (head.repo.fork == false) can only be opened by someone with push
+    # access to this repo, so fork==false already enforces write access. Do NOT re-add
+    # an author_association gate: the pull_request webhook payload reports private org
+    # members as CONTRIBUTOR/NONE (only public members show as MEMBER), which silently
+    # skips auto-review for every private member.
     if: |
       github.event_name == 'workflow_call' ||
       (
         github.event.pull_request.draft == false &&
-        github.event.pull_request.head.repo.fork == false &&
-        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)
+        github.event.pull_request.head.repo.fork == false
       )
     permissions:
       contents: read
diff --git a/.github/workflows/git-commands.yaml b/.github/workflows/git-commands.yaml
index 68b6da3da8..3443b7e649 100644
--- a/.github/workflows/git-commands.yaml
+++ b/.github/workflows/git-commands.yaml
@@ -5,10 +5,21 @@ on:
     types: [created]
 
 jobs:
+  # /command comments can come from anyone; author_association misses private org
+  # members, so check-access resolves them via the internal app token. Runs once and is
+  # OR'd into each job's guard (public members still pass on author_association alone).
+  check-access:
+    if: github.event.issue.pull_request != null && startsWith(github.event.comment.body, '/')
+    uses: ./.github/workflows/check-write-access.yml
+    with:
+      username: ${{ github.event.comment.user.login }}
+    secrets: inherit
+
   update-sqlx:
+    needs: [check-access]
     if: >-
       github.event.issue.pull_request &&
-      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || needs.check-access.outputs.authorized == 'true') &&
       startsWith(github.event.comment.body, '/updatesqlx')
     runs-on: ubicloud-standard-8
     permissions:
@@ -137,9 +148,10 @@ jobs:
             })
 
   demo:
+    needs: [check-access]
     if: >-
       github.event.issue.pull_request &&
-      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || needs.check-access.outputs.authorized == 'true') &&
       startsWith(github.event.comment.body, '/demo')
     runs-on: ubicloud-standard-2
     permissions:
@@ -219,9 +231,10 @@ jobs:
           fi
 
   update-ee-ref:
+    needs: [check-access]
     if: >-
       github.event.issue.pull_request &&
-      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || needs.check-access.outputs.authorized == 'true') &&
       startsWith(github.event.comment.body, '/eeref')
     runs-on: ubicloud-standard-2
     permissions:
@@ -307,9 +320,10 @@ jobs:
             })
 
   update-docs:
+    needs: [check-access]
     if: >-
       github.event.issue.pull_request &&
-      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || github.event.comment.user.login == 'windmill-internal-app[bot]') &&
+      (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) || needs.check-access.outputs.authorized == 'true') &&
       startsWith(github.event.comment.body, '/docs')
     runs-on: ubicloud-standard-2
     permissions:
diff --git a/.github/workflows/pi-pr-review.yml b/.github/workflows/pi-pr-review.yml
index 4416e5674b..72553b0d83 100644
--- a/.github/workflows/pi-pr-review.yml
+++ b/.github/workflows/pi-pr-review.yml
@@ -33,12 +33,16 @@ jobs:
   pi-review:
     runs-on: ubicloud-standard-2
     timeout-minutes: 30
+    # A non-fork PR (head.repo.fork == false) can only be opened by someone with push
+    # access to this repo, so fork==false already enforces write access. Do NOT re-add
+    # an author_association gate: the pull_request webhook payload reports private org
+    # members as CONTRIBUTOR/NONE (only public members show as MEMBER), which silently
+    # skips auto-review for every private member.
     if: |
       github.event_name == 'workflow_call' ||
       (
         github.event.pull_request.draft == false &&
-        github.event.pull_request.head.repo.fork == false &&
-        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)
+        github.event.pull_request.head.repo.fork == false
       )
     permissions:
       contents: read
diff --git a/.github/workflows/pr-ready-review.yml b/.github/workflows/pr-ready-review.yml
index 263696ceaf..eb634977d1 100644
--- a/.github/workflows/pr-ready-review.yml
+++ b/.github/workflows/pr-ready-review.yml
@@ -32,11 +32,16 @@ concurrency:
 jobs:
   auto-review:
     runs-on: ubuntu-latest
+    # A non-fork PR (head.repo.fork == false) can only be opened by someone with push
+    # access to this repo, so fork==false already enforces write access. Do NOT re-add
+    # an author_association gate: the pull_request webhook payload reports private org
+    # members as CONTRIBUTOR/NONE (only public members show as MEMBER), which silently
+    # skips auto-review for every private member.
     if: |
       github.event_name == 'workflow_call' ||
       (
         (github.event.pull_request.draft == false || github.event.pull_request.ready_for_review == true) &&
-        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association)
+        github.event.pull_request.head.repo.fork == false
       )
     permissions:
       contents: read
diff --git a/.github/workflows/pr-review-commands.yml b/.github/workflows/pr-review-commands.yml
index 4678e2986c..ef93274d7e 100644
--- a/.github/workflows/pr-review-commands.yml
+++ b/.github/workflows/pr-review-commands.yml
@@ -42,11 +42,24 @@ jobs:
               ;;
           esac
 
-  acknowledge:
+  # author_association misses private org members; check-access resolves them via the
+  # internal app token. Both are OR'd so public members still pass instantly.
+  check-access:
     needs: [parse]
+    if: needs.parse.outputs.command != ''
+    uses: ./.github/workflows/check-write-access.yml
+    with:
+      username: ${{ github.event.comment.user.login }}
+    secrets: inherit
+
+  acknowledge:
+    needs: [parse, check-access]
     if: |
       needs.parse.outputs.command != '' &&
-      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association)
+      (
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) ||
+        needs.check-access.outputs.authorized == 'true'
+      )
     runs-on: ubuntu-latest
     permissions:
       issues: write
@@ -63,9 +76,12 @@ jobs:
             -f content=eyes >/dev/null
 
   claude:
-    needs: [parse]
+    needs: [parse, check-access]
     if: |
-      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) &&
+      (
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) ||
+        needs.check-access.outputs.authorized == 'true'
+      ) &&
       (needs.parse.outputs.command == 'review' || needs.parse.outputs.command == 'claude')
     permissions:
       contents: read
@@ -81,9 +97,12 @@ jobs:
       WINDMILL_EE_PRIVATE_ACCESS: ${{ secrets.WINDMILL_EE_PRIVATE_ACCESS }}
 
   codex:
-    needs: [parse]
+    needs: [parse, check-access]
     if: |
-      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) &&
+      (
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) ||
+        needs.check-access.outputs.authorized == 'true'
+      ) &&
       (needs.parse.outputs.command == 'review' || needs.parse.outputs.command == 'codex')
     permissions:
       contents: read
@@ -100,9 +119,12 @@ jobs:
       WINDMILL_EE_PRIVATE_ACCESS: ${{ secrets.WINDMILL_EE_PRIVATE_ACCESS }}
 
   pi:
-    needs: [parse]
+    needs: [parse, check-access]
     if: |
-      contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) &&
+      (
+        contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) ||
+        needs.check-access.outputs.authorized == 'true'
+      ) &&
       (needs.parse.outputs.command == 'review' || needs.parse.outputs.command == 'pi')
     permissions:
       contents: read