From 8262b5f39d021507c52c44afc9f6d85995372a34 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gabor=20K=C3=B6rber?= <gab@g4b.org>
Date: Mon, 21 Sep 2026 14:31:12 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=9B=B0=EF=B8=8F=20export=20from=20upstrea?=
 =?UTF-8?q?m=20(18069bd)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .codex/hooks.json                           |   15 +
 .gitattributes                              |    6 +
 .gitignore                                  |   33 +
 .sandcage/.gitignore                        |    1 +
 .sandcage/config.toml                       |   18 +
 AGENTS.md                                   |   60 +
 Cargo.lock                                  | 2801 +++++++++++++++++++
 Cargo.toml                                  |    3 +
 README.md                                   |  166 ++
 config-layers.svg                           |   82 +
 crates/sandcage/Cargo.toml                  |   50 +
 crates/sandcage/src/acp/mod.rs              |  231 ++
 crates/sandcage/src/acp/registry.rs         |  456 +++
 crates/sandcage/src/backend/bollard.rs      |  728 +++++
 crates/sandcage/src/backend/compose.rs      |  112 +
 crates/sandcage/src/backend/mod.rs          |   57 +
 crates/sandcage/src/backend/network.rs      |  103 +
 crates/sandcage/src/backend/orchestrator.rs |  148 +
 crates/sandcage/src/backend/runtime.rs      |  187 ++
 crates/sandcage/src/config.rs               | 1090 ++++++++
 crates/sandcage/src/config_source.rs        |  304 ++
 crates/sandcage/src/docker.rs               | 1892 +++++++++++++
 crates/sandcage/src/forwarding.rs           |  831 ++++++
 crates/sandcage/src/init.rs                 |  493 ++++
 crates/sandcage/src/lib.rs                  |   18 +
 crates/sandcage/src/main.rs                 |  412 +++
 crates/sandcage/src/recipe.rs               |  298 ++
 crates/sandcage/src/service/builtin.rs      |  166 ++
 crates/sandcage/src/service/compose.rs      |  154 +
 crates/sandcage/src/service/mod.rs          |  266 ++
 crates/sandcage/src/service/registry.rs     |  237 ++
 crates/sandcage/src/setup.rs                | 1358 +++++++++
 crates/sandcage/src/shadow.rs               |  314 +++
 crates/sandcage/src/spoof.rs                |  170 ++
 crates/sandcage/src/ssh_config.rs           |  449 +++
 crates/sandcage/src/tasks.rs                |   97 +
 crates/sandcage/src/workspace.rs            |  114 +
 crates/sandcage/src/worktree.rs             |  224 ++
 crates/thumper/Cargo.toml                   |   13 +
 crates/thumper/src/client.rs                |  311 ++
 crates/thumper/src/main.rs                  |   44 +
 crates/thumper/src/protocol.rs              |  113 +
 docs/commands.md                            |  434 +++
 docs/configuration.md                       |  577 ++++
 docs/docker-image.md                        |  113 +
 docs/images/tty-decision-tree.svg           |   88 +
 docs/interactive-mode.md                    |   91 +
 docs/ssh.md                                 |  224 ++
 justfile                                    |   22 +
 sandcage_logo.png                           |  Bin 0 -> 401720 bytes
 templates/claude/settings.json              |    1 +
 topology.svg                                |  113 +
 52 files changed, 16288 insertions(+)
 create mode 100644 .codex/hooks.json
 create mode 100644 .gitattributes
 create mode 100644 .gitignore
 create mode 100644 .sandcage/.gitignore
 create mode 100644 .sandcage/config.toml
 create mode 100644 AGENTS.md
 create mode 100644 Cargo.lock
 create mode 100644 Cargo.toml
 create mode 100644 README.md
 create mode 100644 config-layers.svg
 create mode 100644 crates/sandcage/Cargo.toml
 create mode 100644 crates/sandcage/src/acp/mod.rs
 create mode 100644 crates/sandcage/src/acp/registry.rs
 create mode 100644 crates/sandcage/src/backend/bollard.rs
 create mode 100644 crates/sandcage/src/backend/compose.rs
 create mode 100644 crates/sandcage/src/backend/mod.rs
 create mode 100644 crates/sandcage/src/backend/network.rs
 create mode 100644 crates/sandcage/src/backend/orchestrator.rs
 create mode 100644 crates/sandcage/src/backend/runtime.rs
 create mode 100644 crates/sandcage/src/config.rs
 create mode 100644 crates/sandcage/src/config_source.rs
 create mode 100644 crates/sandcage/src/docker.rs
 create mode 100644 crates/sandcage/src/forwarding.rs
 create mode 100644 crates/sandcage/src/init.rs
 create mode 100644 crates/sandcage/src/lib.rs
 create mode 100644 crates/sandcage/src/main.rs
 create mode 100644 crates/sandcage/src/recipe.rs
 create mode 100644 crates/sandcage/src/service/builtin.rs
 create mode 100644 crates/sandcage/src/service/compose.rs
 create mode 100644 crates/sandcage/src/service/mod.rs
 create mode 100644 crates/sandcage/src/service/registry.rs
 create mode 100644 crates/sandcage/src/setup.rs
 create mode 100644 crates/sandcage/src/shadow.rs
 create mode 100644 crates/sandcage/src/spoof.rs
 create mode 100644 crates/sandcage/src/ssh_config.rs
 create mode 100644 crates/sandcage/src/tasks.rs
 create mode 100644 crates/sandcage/src/workspace.rs
 create mode 100644 crates/sandcage/src/worktree.rs
 create mode 100644 crates/thumper/Cargo.toml
 create mode 100644 crates/thumper/src/client.rs
 create mode 100644 crates/thumper/src/main.rs
 create mode 100644 crates/thumper/src/protocol.rs
 create mode 100644 docs/commands.md
 create mode 100644 docs/configuration.md
 create mode 100644 docs/docker-image.md
 create mode 100644 docs/images/tty-decision-tree.svg
 create mode 100644 docs/interactive-mode.md
 create mode 100644 docs/ssh.md
 create mode 100644 justfile
 create mode 100644 sandcage_logo.png
 create mode 100644 templates/claude/settings.json
 create mode 100644 topology.svg

diff --git a/.codex/hooks.json b/.codex/hooks.json
new file mode 100644
index 0000000..efc8c42
--- /dev/null
+++ b/.codex/hooks.json
@@ -0,0 +1,15 @@
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash|Read|Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "fermata hook --harness codex"
+          }
+        ]
+      }
+    ]
+  }
+}
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..c834034
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,6 @@
+*.md text eol=lf
+*.rs text eol=lf
+*.py text eol=lf
+*.yml text eol=lf
+*.yaml text eol=lf
+*.toml text eol=lf
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..68a2473
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,33 @@
+# Generated by Cargo
+# will have compiled files and executables
+/target
+.DS_Store
+.env
+
+# Patterns
+*.rs.bk
+*.tmp
+*.bak
+*.pyc
+*.pyo
+__pycache__
+*.log
+*.pdb
+
+
+# Python / uv
+.venv/
+
+# Export worktrees
+.export-worktrees/
+
+# Build pipelines and scratch
+/dist/
+/local/**
+
+# Misc
+/.vscode/*
+.obsidian
+settings.local.json
+.claude/worktrees/
+CLAUDE.local.md
diff --git a/.sandcage/.gitignore b/.sandcage/.gitignore
new file mode 100644
index 0000000..51b4cfd
--- /dev/null
+++ b/.sandcage/.gitignore
@@ -0,0 +1 @@
+local/
diff --git a/.sandcage/config.toml b/.sandcage/config.toml
new file mode 100644
index 0000000..899df4b
--- /dev/null
+++ b/.sandcage/config.toml
@@ -0,0 +1,18 @@
+# Sandcage project configuration
+# Docs: https://github.com/user/sandcage
+
+# Detected ecosystem: rust
+
+packages = ["ripgrep", "fd-find"]
+
+[toolchains]
+rust = true
+# uv powers the project's Python tooling (see CLAUDE.md); keep it in the dev image.
+uv = true
+
+[agent_args]
+claude = ["--dangerously-skip-permissions"]
+
+# shell = "zsh"
+
+# container_workspace = "/workspace/my-project"
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..b0c4a6c
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,60 @@
+# Sandcage
+
+Rust CLI project for managing Docker-based development environments.
+
+## Project structure
+
+- `crates/sandcage/` — Main CLI binary (Cargo workspace member)
+- `crates/sandcage-test/` — Integration/functional tests (not exported)
+- `images/` — Base Dockerfile, fragments, and per-service entrypoint scripts
+- `templates/` — Project templates for `sandcage init`
+- `scripts/` — Python scripts for tooling, deployment, and automation
+- `docs/` — Documentation
+
+## Python / uv
+
+This is **not** a Python project. The `pyproject.toml` and uv setup exist to provide a
+managed Python environment for tooling: deploy scripts, data processing, automation recipes,
+CI helpers, and any ad-hoc scripting that skills or plugins need.
+
+Run Python scripts via uv:
+
+```sh
+uv run scripts/some_script.py
+uv run python -c "..."
+```
+
+Add dependencies as needed:
+
+```sh
+uv add <package>
+uv add --dev <package>
+```
+
+## Just commands
+
+Project tasks are run via `just`. Run `just` to see all available recipes.
+
+When asked to "export", use:
+
+```sh
+just export-dry   # preview locally
+just export       # push to public repo
+```
+
+Configuration: `scripts/export.toml` (excluded paths, asset overlay directory).
+Public-facing assets (README, etc.): `scripts/export_assets/`.
+
+## Testing
+
+There is no CI pipeline. Do not plan or implement CI-based builds, test matrices, or
+CI config files unless explicitly asked.
+
+After finishing a feature implementation, run `just test-functional` (requires Docker +
+built images) at least once before reporting the work as done. If images need rebuilding
+first, use `just test-functional-full`. This catches regressions that unit tests miss —
+like container launch, TTY attach, and mount behavior.
+
+## Conventions
+
+See `CONVENTION.md` for commit message format (gitmoji).
diff --git a/Cargo.lock b/Cargo.lock
new file mode 100644
index 0000000..36ec025
--- /dev/null
+++ b/Cargo.lock
@@ -0,0 +1,2801 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "addr2line"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b"
+dependencies = [
+ "gimli",
+]
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+
+[[package]]
+name = "assert_cmd"
+version = "2.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2aa3a22042e45de04255c7bf3626e239f450200fd0493c1e382263544b20aea6"
+dependencies = [
+ "anstyle",
+ "bstr",
+ "libc",
+ "predicates",
+ "predicates-core",
+ "predicates-tree",
+ "wait-timeout",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "atomic"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89cbf775b137e9b968e67227ef7f775587cde3fd31b0d8599dbd0f598a48340"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "backtrace"
+version = "0.3.76"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb531853791a215d7c62a30daf0dde835f381ab5de4589cfe7c649d2cbe92bd6"
+dependencies = [
+ "addr2line",
+ "cfg-if",
+ "libc",
+ "miniz_oxide",
+ "object",
+ "rustc-demangle",
+ "windows-link",
+]
+
+[[package]]
+name = "backtrace-ext"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "537beee3be4a18fb023b570f80e3ae28003db9167a751266b259926e25539d50"
+dependencies = [
+ "backtrace",
+]
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bitflags"
+version = "2.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "bollard"
+version = "0.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9d0a013e3d3ee4edd61e779adf117944c08902d375f18630a0c5b8f95659734"
+dependencies = [
+ "base64",
+ "bollard-stubs",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "hex",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-named-pipe",
+ "hyper-util",
+ "hyperlocal",
+ "log",
+ "pin-project-lite",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "serde_urlencoded",
+ "thiserror 2.0.18",
+ "tokio",
+ "tokio-util",
+ "tower-service",
+ "url",
+ "winapi",
+]
+
+[[package]]
+name = "bollard-stubs"
+version = "1.53.1-rc.29.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce412eb6f7096743011dc3cb5c674caeb24ced61d8c498fe07cf7998a4fea889"
+dependencies = [
+ "serde",
+ "serde_json",
+ "serde_repr",
+]
+
+[[package]]
+name = "bstr"
+version = "1.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63044e1ae8e69f3b5a92c736ca6269b8d12fa7efe39bf34ddb06d102cf0e2cab"
+dependencies = [
+ "memchr",
+ "regex-automata",
+ "serde",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
+
+[[package]]
+name = "bytemuck"
+version = "1.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8efb64bd706a16a1bdde310ae86b351e4d21550d98d056f22f8a7f7a2183fec"
+
+[[package]]
+name = "bytes"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+
+[[package]]
+name = "cc"
+version = "1.2.62"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1dce859f0832a7d088c4f1119888ab94ef4b5d6795d1ce05afb7fe159d79f98"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "clap"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "console"
+version = "0.15.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "054ccb5b10f9f2cbf51eb355ca1d05c2d279ce1804688d0db74b4733a5aeafd8"
+dependencies = [
+ "encode_unicode",
+ "libc",
+ "once_cell",
+ "unicode-width 0.2.2",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "crossterm"
+version = "0.28.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "829d955a0bb380ef178a640b91779e3987da38c9aea133b20614cfed8cdea9c6"
+dependencies = [
+ "bitflags",
+ "crossterm_winapi",
+ "mio",
+ "parking_lot",
+ "rustix 0.38.44",
+ "signal-hook",
+ "signal-hook-mio",
+ "winapi",
+]
+
+[[package]]
+name = "crossterm_winapi"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "acdd7c62a3665c7f6830a51635d9ac9b23ed385797f70a83bb8bafe9c572ab2b"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "dialoguer"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "658bce805d770f407bc62102fca7c2c64ceef2fbcb2b8bd19d2765ce093980de"
+dependencies = [
+ "console",
+ "shell-words",
+ "tempfile",
+ "thiserror 1.0.69",
+ "zeroize",
+]
+
+[[package]]
+name = "difflib"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6184e33543162437515c2e2b48714794e37845ec9851711914eec9d308f6ebe8"
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "dirs"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
+dependencies = [
+ "dirs-sys",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "either"
+version = "1.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91622ff5e7162018101f2fea40d6ebf4a78bbe5a49736a2020649edf9693679e"
+
+[[package]]
+name = "encode_unicode"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34aa73646ffb006b8f5147f3dc182bd4bcb190227ce861fc4a4844bf8e3cb2c0"
+
+[[package]]
+name = "env_home"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7f84e12ccf0a7ddc17a6c41c93326024c42920d7ee630d04950e6926645c0fe"
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6"
+
+[[package]]
+name = "figment"
+version = "0.10.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cb01cd46b0cf372153850f4c6c272d9cbea2da513e07538405148f95bd789f3"
+dependencies = [
+ "atomic",
+ "pear",
+ "serde",
+ "toml",
+ "uncased",
+ "version_check",
+]
+
+[[package]]
+name = "filetime"
+version = "0.2.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c287a33c7f0a620c38e641e7f60827713987b3c0f26e8ddc9462cc69cf75759"
+dependencies = [
+ "cfg-if",
+ "libc",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "flate2"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "float-cmp"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b09cf3155332e944990140d967ff5eceb70df778b34f77d8075db46e4704e6d8"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "foldhash"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-core",
+ "futures-macro",
+ "futures-task",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+ "wasip2",
+ "wasip3",
+]
+
+[[package]]
+name = "gimli"
+version = "0.32.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7"
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "foldhash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hyper"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6299f016b246a94207e63da54dbe807655bf9e00044f73ded42c3ac5305fbcca"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "http",
+ "http-body",
+ "httparse",
+ "httpdate",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-named-pipe"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73b7d8abf35697b81a825e386fc151e0d503e8cb5fcb93cc8669c376dfd6f278"
+dependencies = [
+ "hex",
+ "hyper",
+ "hyper-util",
+ "pin-project-lite",
+ "tokio",
+ "tower-service",
+ "winapi",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33ca68d021ef39cf6463ab54c1d0f5daf03377b70561305bb89a8f83aab66e0f"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "hyperlocal"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "986c5ce3b994526b3cd75578e62554abd09f0899d6206de48b3e96ab34ccc8c7"
+dependencies = [
+ "hex",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "pin-project-lite",
+ "tokio",
+ "tower-service",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2984d1cd16c883d7935b9e07e44071dca8d917fd52ecc02c04d5fa0b5a3f191c"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92219b62b3e2b4d88ac5119f8904c10f8f61bf7e95b640d25ba3075e6cac2c29"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c56e5ee99d6e3d33bd91c5d85458b6005a22140021cc324cea84dd0e72cff3b4"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da3be0ae77ea334f4da67c12f149704f19f81d1adf7c51cf482943e84a2bad38"
+
+[[package]]
+name = "icu_properties"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bee3b67d0ea5c2cca5003417989af8996f8604e34fb9ddf96208a033901e70de"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e2bbb201e0c04f7b4b3e14382af113e17ba4f63e2c9d2ee626b720cbce54a14"
+
+[[package]]
+name = "icu_provider"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "139c4cf31c8b5f33d7e199446eff9c1e02decfc2f0eec2c8d71f65befa45b421"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "id-arena"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.17.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "inlinable_string"
+version = "0.1.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8fae54786f62fb2918dcfae3d568594e50eb9b5c25bf04371af6fe7516452fb"
+
+[[package]]
+name = "ipnet"
+version = "2.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d98f6fed1fde3f8c21bc40a1abb88dd75e67924f9cffc3ef95607bad8017f8e2"
+
+[[package]]
+name = "is_ci"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7655c9839580ee829dfacba1d1278c2b7883e50a277ff7541299489d6bdfdc45"
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "js-sys"
+version = "0.3.99"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "142bc4740e452c1e57ade0cbc129f139c9093e354346f0872ef985f4f5cf5f11"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "leb128fmt"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "libredox"
+version = "0.1.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e02f3bb43d335493c96bf3fd3a321600bf6bd07ed34bc64118e9293bdffea46c"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92daf443525c4cce67b150400bc2316076100ce0b3686209eb8cf3c31612e6f0"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "memchr"
+version = "2.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
+
+[[package]]
+name = "miette"
+version = "7.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f98efec8807c63c752b5bd61f862c165c115b0a35685bdcfd9238c7aeb592b7"
+dependencies = [
+ "backtrace",
+ "backtrace-ext",
+ "cfg-if",
+ "miette-derive",
+ "owo-colors",
+ "supports-color",
+ "supports-hyperlinks",
+ "supports-unicode",
+ "terminal_size",
+ "textwrap",
+ "unicode-width 0.1.14",
+]
+
+[[package]]
+name = "miette-derive"
+version = "7.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db5b29714e950dbb20d5e6f74f9dcec4edbcc1067bb7f8ed198c097b8c1a818b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50b7e5b27aa02a74bac8c3f23f448f8d87ff11f92d3aac1a6ed369ee08cc56c1"
+dependencies = [
+ "libc",
+ "log",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "normalize-line-endings"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61807f77802ff30975e01f4f071c8ba10c022052f98b3294119f3e615d13e5be"
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "object"
+version = "0.37.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "option-ext"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
+
+[[package]]
+name = "owo-colors"
+version = "4.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d211803b9b6b570f68772237e415a029d5a50c65d382910b879fb19d3271f94d"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link",
+]
+
+[[package]]
+name = "pear"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdeeaa00ce488657faba8ebf44ab9361f9365a97bd39ffb8a60663f57ff4b467"
+dependencies = [
+ "inlinable_string",
+ "pear_codegen",
+ "yansi",
+]
+
+[[package]]
+name = "pear_codegen"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4bab5b985dc082b345f812b7df84e1bef27e7207b39e448439ba8bd69c93f147"
+dependencies = [
+ "proc-macro2",
+ "proc-macro2-diagnostics",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "potential_utf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0103b1cef7ec0cf76490e969665504990193874ea05c85ff9bab8b911d0a0564"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "predicates"
+version = "3.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ada8f2932f28a27ee7b70dd6c1c39ea0675c55a36879ab92f3a715eaa1e63cfe"
+dependencies = [
+ "anstyle",
+ "difflib",
+ "float-cmp",
+ "normalize-line-endings",
+ "predicates-core",
+ "regex",
+]
+
+[[package]]
+name = "predicates-core"
+version = "1.0.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cad38746f3166b4031b1a0d39ad9f954dd291e7854fcc0eed52ee41a0b50d144"
+
+[[package]]
+name = "predicates-tree"
+version = "1.0.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0de1b847b39c8131db0467e9df1ff60e6d0562ab8e9a16e568ad0fdb372e2f2"
+dependencies = [
+ "predicates-core",
+ "termtree",
+]
+
+[[package]]
+name = "prettyplease"
+version = "0.2.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "proc-macro2-diagnostics"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af066a9c399a26e020ada66a034357a868728e72cd426f3adcd35f80d88d88c8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "version_check",
+ "yansi",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2",
+ "tracing",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "rand"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
+dependencies = [
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
+dependencies = [
+ "getrandom 0.2.17",
+ "libredox",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "regex"
+version = "1.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rustc-demangle"
+version = "0.1.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b50b8869d9fc858ce7266cce0194bd74df58b9d0e3f6df3a9fc8eb470d95c09d"
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94300abf3f1ae2e2b8ffb7b58043de3d399c73fa6f4b73826402a5c457614dbe"
+
+[[package]]
+name = "rustix"
+version = "0.38.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.4.15",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.12.1",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef86cd5876211988985292b91c96a8f2d298df24e75989a43a3c73f2d4d8168b"
+dependencies = [
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30a7197ae7eb376e574fe940d068c30fe0462554a3ddbe4eca7838e049c937a9"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "sandcage"
+version = "0.1.0"
+dependencies = [
+ "async-trait",
+ "bollard",
+ "clap",
+ "crossterm",
+ "dialoguer",
+ "dirs",
+ "figment",
+ "flate2",
+ "futures-util",
+ "hex",
+ "indexmap",
+ "miette",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "serde_yaml",
+ "sha2",
+ "tar",
+ "tempfile",
+ "thiserror 2.0.18",
+ "tokio",
+ "toml",
+ "toml_edit",
+ "walkdir",
+ "which",
+]
+
+[[package]]
+name = "sandcage-test"
+version = "0.0.0"
+dependencies = [
+ "assert_cmd",
+ "bollard",
+ "futures-util",
+ "predicates",
+ "sandcage",
+ "serde_yaml",
+ "tempfile",
+ "tokio",
+]
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "semver"
+version = "1.0.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_repr"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175ee3e80ae9982737ca543e96133087cbd9a485eecc3bc4de9c1a37b47ea59c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_yaml"
+version = "0.9.34+deprecated"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47"
+dependencies = [
+ "indexmap",
+ "itoa",
+ "ryu",
+ "serde",
+ "unsafe-libyaml",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "shell-words"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc6fe69c597f9c37bfeeeeeb33da3530379845f10be461a66d16d03eca2ded77"
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
+dependencies = [
+ "libc",
+ "signal-hook-registry",
+]
+
+[[package]]
+name = "signal-hook-mio"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b75a19a7a740b25bc7944bdee6172368f988763b744e3d4dfe753f6b4ece40cc"
+dependencies = [
+ "libc",
+ "mio",
+ "signal-hook",
+]
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "703d5c7ef118737c72f1af64ad2f6f8c5e1921f818cdcb97b8fe6fc69bf66214"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "socket2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "supports-color"
+version = "3.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c64fc7232dd8d2e4ac5ce4ef302b1d81e0b80d055b9d77c7c4f51f6aa4c867d6"
+dependencies = [
+ "is_ci",
+]
+
+[[package]]
+name = "supports-hyperlinks"
+version = "3.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e396b6523b11ccb83120b115a0b7366de372751aa6edf19844dfb13a6af97e91"
+
+[[package]]
+name = "supports-unicode"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7401a30af6cb5818bb64852270bb722533397edcfc7344954a38f420819ece2"
+
+[[package]]
+name = "syn"
+version = "2.0.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tar"
+version = "0.4.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f6221d9a6003c78398e3b239969f352578258df48c8eb051caadae0015bc840"
+dependencies = [
+ "filetime",
+ "libc",
+ "xattr",
+]
+
+[[package]]
+name = "tempfile"
+version = "3.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
+dependencies = [
+ "fastrand",
+ "getrandom 0.4.2",
+ "once_cell",
+ "rustix 1.1.4",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "terminal_size"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "230a1b821ccbd75b185820a1f1ff7b14d21da1e442e22c0863ea5f08771a8874"
+dependencies = [
+ "rustix 1.1.4",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "termtree"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f50febec83f5ee1df3015341d8bd429f2d1cc62bcba7ea2076759d315084683"
+
+[[package]]
+name = "textwrap"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c13547615a44dc9c452a8a534638acdf07120d4b6847c8178705da06306a3057"
+dependencies = [
+ "unicode-linebreak",
+ "unicode-width 0.2.2",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thumper"
+version = "0.1.0"
+dependencies = [
+ "serde",
+ "serde_json",
+ "tempfile",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8323304221c2a851516f22236c5722a72eaa19749016521d6dff0824447d96d"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.52.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362"
+dependencies = [
+ "serde",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_edit",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.22.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a"
+dependencies = [
+ "indexmap",
+ "serde",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_write",
+ "winnow",
+]
+
+[[package]]
+name = "toml_write"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "typenum"
+version = "1.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40ce102ab67701b8526c123c1bab5cbe42d7040ccfd0f64af1a385808d2f43de"
+
+[[package]]
+name = "uncased"
+version = "0.9.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1b88fcfe09e89d3866a5c11019378088af2d24c3fbd4f0543f96b479ec90697"
+dependencies = [
+ "version_check",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-linebreak"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b09c83c3c29d37506a3e260c08c03743a6bb66a9cd432c6934ab501a190571f"
+
+[[package]]
+name = "unicode-width"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7dd6e30e90baa6f72411720665d41d89b9a3d039dc45b8faea1ddd07f617f6af"
+
+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "unsafe-libyaml"
+version = "0.2.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "wait-timeout"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ac3b126d3914f9849036f826e054cbabdc8519970b8998ddaf3b5bd3c65f11"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.3+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20064672db26d7cdc89c7798c48a0fdfac8213434a1186e5ef29fd560ae223d6"
+dependencies = [
+ "wit-bindgen 0.57.1",
+]
+
+[[package]]
+name = "wasip3"
+version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
+dependencies = [
+ "wit-bindgen 0.51.0",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.122"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ed04576f974d2b2fba0f38c51dbc5518011e38c36bf1143164be765528fd409"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.72"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9473dbd2991ae90b6291c3c32c30c6187ac49aa32f9905d1cce280ec1e110b0f"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.122"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "916151b09da36bd82f6615cbf3a419e2f0ba23a03c6160e8e92eb6bd4aa1dec6"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.122"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "299047362ccbfce148b67ab7e73349f77748e00c8296f9542adfad2ad82c5c5e"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.122"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a929b2c61f11ba3e9bc35b50c1f25cb38e0e892c0c231ae2b8cf78d5dad4437"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-encoder"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
+dependencies = [
+ "leb128fmt",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasm-metadata"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
+dependencies = [
+ "anyhow",
+ "indexmap",
+ "wasm-encoder",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
+dependencies = [
+ "bitflags",
+ "hashbrown 0.15.5",
+ "indexmap",
+ "semver",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.99"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d621441cfc37b84979402712047321980c178f299193a3589d05b99e8763436"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f5ee44c96cf55f1b349600768e3ece3a8f26010c05265ab73f945bb1a2eb9d"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "which"
+version = "7.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d643ce3fd3e5b54854602a080f34fb10ab75e0b813ee32d00ca2b44fa74762"
+dependencies = [
+ "either",
+ "env_home",
+ "rustix 1.1.4",
+ "winsafe",
+]
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm",
+ "windows_aarch64_msvc",
+ "windows_i686_gnu",
+ "windows_i686_gnullvm",
+ "windows_i686_msvc",
+ "windows_x86_64_gnu",
+ "windows_x86_64_gnullvm",
+ "windows_x86_64_msvc",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "winnow"
+version = "0.7.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winsafe"
+version = "0.0.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d135d17ab770252ad95e9a872d365cf3090e3be864a34ab46f48555993efc904"
+
+[[package]]
+name = "wit-bindgen"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+dependencies = [
+ "wit-bindgen-rust-macro",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "wit-bindgen-core"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
+dependencies = [
+ "anyhow",
+ "heck",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-bindgen-rust"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
+dependencies = [
+ "anyhow",
+ "heck",
+ "indexmap",
+ "prettyplease",
+ "syn",
+ "wasm-metadata",
+ "wit-bindgen-core",
+ "wit-component",
+]
+
+[[package]]
+name = "wit-bindgen-rust-macro"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
+dependencies = [
+ "anyhow",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wit-bindgen-core",
+ "wit-bindgen-rust",
+]
+
+[[package]]
+name = "wit-component"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
+dependencies = [
+ "anyhow",
+ "bitflags",
+ "indexmap",
+ "log",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "wasm-encoder",
+ "wasm-metadata",
+ "wasmparser",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-parser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
+dependencies = [
+ "anyhow",
+ "id-arena",
+ "indexmap",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser",
+]
+
+[[package]]
+name = "writeable"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4"
+
+[[package]]
+name = "xattr"
+version = "1.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
+dependencies = [
+ "libc",
+ "rustix 1.1.4",
+]
+
+[[package]]
+name = "yansi"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049"
+
+[[package]]
+name = "yoke"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "abe8c5fda708d9ca3df187cae8bfb9ceda00dd96231bed36e445a1a48e66f9ca"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.48"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eed437bf9d6692032087e337407a86f04cd8d6a16a37199ed57949d415bd68e9"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.48"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70e3cd084b1788766f53af483dd21f93881ff30d7320490ec3ef7526d203bad4"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+
+[[package]]
+name = "zerotrie"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f9152d31db0792fa83f70fb2f83148effb5c1f5b8c7686c3459e361d9bc20bf"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90f911cbc359ab6af17377d242225f4d75119aec87ea711a880987b18cd7b239"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625dc425cab0dca6dc3c3319506e6593dcb08a9f387ea3b284dbd52a92c40555"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/Cargo.toml b/Cargo.toml
new file mode 100644
index 0000000..cf86b2d
--- /dev/null
+++ b/Cargo.toml
@@ -0,0 +1,3 @@
+[workspace]
+members = ['crates/sandcage', 'crates/thumper']
+resolver = "3"
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..b8d7b63
--- /dev/null
+++ b/README.md
@@ -0,0 +1,166 @@
+<p align="center">
+  <img src="sandcage_logo.png" width="120" alt="Sandcage">
+</p>
+
+<h1 align="center">Sandcage</h1>
+
+<p align="center">
+  Run AI coding agents in isolated Docker containers — your machine stays yours.
+</p>
+
+---
+
+> [!CAUTION]
+> **Unreleased Software**
+>
+> This project is under active development and **not yet released**. APIs, configuration formats, and behavior may change without notice. Please **do not use without contacting the author** about the current state of the project.
+
+> [!WARNING]
+> **Development Tool Only**
+>
+> Sandcage is designed for **local development use**. Do **not** use it in CI pipelines or production environments — container isolation is not yet hardened for those contexts.
+
+---
+
+## Why Sandcage?
+
+AI coding agents need broad access to do their work: shell, filesystem, network. Letting them run directly on your machine means they share your credentials, your session history, and your entire environment.
+
+Sandcage gives each agent its own container with the tools it needs. Your project is mounted in, changes are visible on the host, but the agent never touches your shell config, your SSH agent, or anything else outside the sandbox.
+
+Multiple agents can run side by side. A persistent home directory means config and credentials survive between sessions, so you are not re-authenticating every time. Named home profiles (`--home work`, `--home personal`) let you switch between different accounts without re-logging in.
+
+<!-- TODO: Terminal demo
+     Recording tool: https://github.com/charmbracelet/vhs
+     Will show: sandcage build → sandcage claude → agent working → exit
+     Place animated GIF or SVG here once recorded.
+-->
+
+## Quick Start
+
+**Prerequisites:** Docker (running) and a Rust toolchain (cargo).
+
+```bash
+# Install
+cargo install --git https://github.com/dirigence/sandcage
+
+# Build the container image
+sandcage build
+
+# Run Claude Code in the current project
+sandcage claude
+```
+
+That's it. Sandcage resolves your project to its git root, mounts it into the container, and drops you into the agent.
+
+## Usage
+
+```
+sandcage claude                   # Claude Code agent
+sandcage codex                    # Codex agent
+sandcage gemini                   # Gemini CLI agent
+sandcage shell                    # interactive shell, same environment
+sandcage claude -p ~/project      # run in a specific project
+sandcage claude -- --resume       # forward args to the agent
+sandcage claude --worktree        # run in a disposable git worktree
+sandcage claude --home work       # use a named home profile
+sandcage claude --shell           # shell for debugging
+sandcage build                    # build/rebuild container image
+sandcage init                     # scaffold .sandcage/ directory for your project
+sandcage setup ssh                # configure SSH key access for containers
+sandcage worktree list            # list managed worktrees
+sandcage worktree clean           # remove managed worktrees
+sandcage acp run claude           # ACP relay mode (bidirectional stdio)
+sandcage acp list                 # list agents in the ACP registry
+sandcage acp install <agent-id>   # install an agent from the registry
+sandcage acp installed            # list locally installed agents
+```
+
+## How It Works
+
+<p align="center">
+  <img src="topology.svg" alt="Sandcage topology — host, Docker, container, volume mounts" width="720">
+</p>
+
+1. You run `sandcage claude` from your project directory
+2. Sandcage resolves the workspace, loads layered config, and generates a compose definition
+3. Your project, persistent home profile, and (optionally) SSH keys are mounted into the container
+4. The agent runs as the container entrypoint, working in the mounted workspace
+5. All file changes are immediately visible on your host
+
+## ACP Support
+
+Sandcage includes built-in support for the Agent Control Protocol (ACP). Running `sandcage acp run <service>` starts the named agent container and establishes a bidirectional stdio relay, letting any ACP-compatible client communicate with the agent over standard I/O. Agents can be installed from the ACP registry with `sandcage acp install <agent-id>` and browsed with `sandcage acp list`.
+
+## Configuration
+
+<p align="center">
+  <img src="config-layers.svg" alt="Configuration layering — defaults, global, project, local, CLI flags" width="720">
+</p>
+
+Configuration is layered — each level overrides the one below:
+
+| Layer | File | Format |
+|-------|------|--------|
+| Global | `~/.sandcage/config.toml` | TOML |
+| Project | `.sandcage/sandcage.yml` | YAML |
+| Local | `.sandcage/local/sandcage.local.yml` | YAML |
+
+Run `sandcage init` to scaffold a `.sandcage/` directory — it detects your project ecosystem (Rust, Node, Python, Go) and suggests appropriate toolchains and packages.
+
+```
+.sandcage/
+├── sandcage.yml          # project config (committed)
+├── overlay/              # files bind-mounted over originals in container
+├── local/                # gitignored
+│   ├── sandcage.local.yml
+│   └── overlay/
+└── .gitignore            # contains "local/"
+```
+
+```yaml
+# .sandcage/sandcage.yml — minimal example
+toolchains:
+  node: "20"
+packages:
+  - ripgrep
+services:
+  gemini:
+    enabled: false
+```
+
+See **[Configuration Reference](docs/configuration.md)** for all available options.
+
+## Documentation
+
+| Document | Description |
+|----------|-------------|
+| [Configuration Reference](docs/configuration.md) | All config fields, merge behavior, and examples |
+| [Command Reference](docs/commands.md) | Every subcommand, flag, and usage pattern |
+| [Interactive Mode](docs/interactive-mode.md) | How terminal sessions work, backend selection, and Windows compatibility |
+| [Architecture](docs/architecture.md) | Isolation model, UID/GID mapping, and container design |
+| [Docker Image](docs/docker-image.md) | Base image contents, building, custom Dockerfiles |
+| [SSH Key Access](docs/ssh.md) | Setting up SSH for git inside containers |
+
+## Key Features
+
+- **Named home profiles** — `--home <name>` switches between separate agent identities (e.g., personal vs work accounts) without re-authenticating
+- **Worktree mode** — `--worktree` creates a disposable git worktree for each run, keeping your main working tree untouched
+- **Host forwarding** — containers can execute approved commands on the host via a per-run forwarding daemon, with audit logging
+- **Tasks** — named operations (`[tasks]` config) that run on the host or in-cage, accessible as `just` recipes inside the container
+- **Tool modes** — control how CLI tools behave in the container: run normally, replace with a message (spoof), or forward to the host with allow/deny argument filtering
+- **Security profiles** — AppArmor and seccomp profiles applied to containers via `[profiles]` config
+- **Shadow directories** — redirect build artifact dirs (`target/`, `.venv/`, `node_modules/`) into container-local storage
+
+## Planned Features
+
+- **Support for custom harnesses** — bring your own agent runtime beyond the built-in Claude Code, Codex, and Gemini CLI
+- **Full encapsulation hardening** — for worker and CI environments, ensuring complete sandboxing of file system, network, and credentials
+
+## Cross-Platform
+
+Sandcage works on **Linux**, **macOS**, and **Windows** (PowerShell, cmd, and Git Bash). On Windows with WSL, it works from both the Windows and Linux sides.
+
+## License
+
+MIT
diff --git a/config-layers.svg b/config-layers.svg
new file mode 100644
index 0000000..4c573fa
--- /dev/null
+++ b/config-layers.svg
@@ -0,0 +1,82 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 420" width="800" height="420">
+  <style>
+    text { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif; }
+    .title { font-size: 15px; font-weight: 600; fill: #24292f; }
+    .layer-label { font-size: 13px; font-weight: 600; }
+    .layer-desc { font-size: 11px; }
+    .side-label { font-size: 11px; fill: #57606a; }
+    .side-detail { font-size: 10px; fill: #8b949e; }
+    .arrow-text { font-size: 11px; fill: #57606a; font-weight: 500; }
+  </style>
+  <defs>
+    <linearGradient id="grad1" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#e8ecf0"/>
+      <stop offset="100%" stop-color="#dce1e6"/>
+    </linearGradient>
+    <linearGradient id="grad2" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#a8b2bc"/>
+      <stop offset="100%" stop-color="#94a0ab"/>
+    </linearGradient>
+    <linearGradient id="grad3" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#e8c9a4"/>
+      <stop offset="100%" stop-color="#d4b08a"/>
+    </linearGradient>
+    <linearGradient id="grad3b" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#c9995c"/>
+      <stop offset="100%" stop-color="#b58548"/>
+    </linearGradient>
+    <linearGradient id="grad4" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0%" stop-color="#8a5c2a"/>
+      <stop offset="100%" stop-color="#6b4720"/>
+    </linearGradient>
+    <marker id="arr" markerWidth="8" markerHeight="6" refX="4" refY="3" orient="auto">
+      <polygon points="0 0, 8 3, 0 6" fill="#8b949e"/>
+    </marker>
+  </defs>
+
+  <!-- Title with background -->
+  <rect x="280" y="14" width="240" height="26" rx="4" fill="#f6f8fa" stroke="#d0d7de" stroke-width="0.5"/>
+  <text class="title" x="400" y="33" text-anchor="middle">Configuration Layering</text>
+
+  <!-- Priority arrow on the left -->
+  <line x1="70" y1="60" x2="70" y2="370" stroke="#8b949e" stroke-width="1.5" marker-end="url(#arr)"/>
+  <text class="arrow-text" x="66" y="220" text-anchor="middle" transform="rotate(-90, 66, 220)">Higher priority overrides</text>
+
+  <!-- Layer 1 - Compiled Defaults (bottom, lightest) -->
+  <rect x="120" y="310" width="540" height="56" rx="6" fill="url(#grad1)" stroke="#c9d1d9" stroke-width="1"/>
+  <text class="layer-label" x="390" y="335" text-anchor="middle" fill="#24292f">Compiled Defaults</text>
+  <text class="layer-desc" x="390" y="353" text-anchor="middle" fill="#57606a">Built into the sandcage binary</text>
+  <text class="side-label" x="680" y="335">Base values</text>
+  <text class="side-detail" x="680" y="351">always present</text>
+
+  <!-- Layer 2 - Global Config -->
+  <rect x="140" y="245" width="540" height="56" rx="6" fill="url(#grad2)" stroke="#8b949e" stroke-width="1"/>
+  <text class="layer-label" x="410" y="270" text-anchor="middle" fill="#ffffff">Global Config</text>
+  <text class="layer-desc" x="410" y="288" text-anchor="middle" fill="#f0f0f0">~/.sandcage/config.toml</text>
+  <text class="side-label" x="700" y="270">User-wide</text>
+  <text class="side-detail" x="700" y="286">SSH, shell, mounts</text>
+
+  <!-- Layer 3 - Project Config -->
+  <rect x="160" y="180" width="540" height="56" rx="6" fill="url(#grad3)" stroke="#D4A574" stroke-width="1"/>
+  <text class="layer-label" x="430" y="205" text-anchor="middle" fill="#3d2a12">Project Config</text>
+  <text class="layer-desc" x="430" y="223" text-anchor="middle" fill="#5c3f1e">.sandcage.yml — checked into version control</text>
+  <text class="side-label" x="720" y="205">Per-project</text>
+  <text class="side-detail" x="720" y="221">packages, toolchains, env</text>
+
+  <!-- Layer 4 - Local Config -->
+  <rect x="170" y="115" width="540" height="56" rx="6" fill="url(#grad3b)" stroke="#a06838" stroke-width="1"/>
+  <text class="layer-label" x="440" y="140" text-anchor="middle" fill="#ffffff">Local Config</text>
+  <text class="layer-desc" x="440" y="158" text-anchor="middle" fill="#f0f0f0">.sandcage.local.yml — gitignored, personal overrides</text>
+  <text class="side-label" x="730" y="140">Per-developer</text>
+  <text class="side-detail" x="730" y="156">SSH keys, secrets, mounts</text>
+
+  <!-- Layer 5 - CLI Flags (top, darkest) -->
+  <rect x="180" y="55" width="540" height="50" rx="6" fill="url(#grad4)" stroke="#6b4720" stroke-width="1"/>
+  <text class="layer-label" x="450" y="77" text-anchor="middle" fill="#ffffff">CLI Flags</text>
+  <text class="layer-desc" x="450" y="94" text-anchor="middle" fill="#f0f0f0">sandcage claude -p ~/project -- --resume</text>
+  <text class="side-label" x="740" y="77">Per-invocation</text>
+  <text class="side-detail" x="740" y="93">highest priority</text>
+
+  <!-- Bottom note -->
+  <text x="400" y="398" text-anchor="middle" font-size="11" fill="#8b949e" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif">Each layer overrides the one below it. Only set what you need — sensible defaults handle the rest.</text>
+</svg>
diff --git a/crates/sandcage/Cargo.toml b/crates/sandcage/Cargo.toml
new file mode 100644
index 0000000..04f64b3
--- /dev/null
+++ b/crates/sandcage/Cargo.toml
@@ -0,0 +1,50 @@
+[package]
+name = "sandcage"
+version = "0.1.0"
+edition = "2024"
+description = "Sandboxed containers for AI coding agents"
+license = "MIT"
+keywords = ["docker", "sandbox", "ai", "agent"]
+
+[features]
+default = ["bollard"]
+bollard = [
+    "dep:bollard",
+    "dep:futures-util",
+    "dep:reqwest",
+    "dep:flate2",
+    "dep:tar",
+    "dep:crossterm",
+]
+
+[dependencies]
+clap = { version = "4", features = ["derive"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+serde_yaml = "0.9"
+figment = { version = "0.10", features = ["toml", "env"] }
+miette = { version = "7", features = ["fancy"] }
+thiserror = "2"
+which = "7"
+dirs = "6"
+sha2 = "0.10"
+hex = "0.4"
+indexmap = { version = "2", features = ["serde"] }
+tempfile = "3"
+walkdir = "2"
+dialoguer = "0.11"
+toml = "0.8"
+toml_edit = "0.22"
+async-trait = "0.1"
+tokio = { version = "1", features = [
+    "rt-multi-thread", "io-std", "io-util",
+    "signal", "time", "macros", "process",
+] }
+
+# Feature-gated
+bollard = { version = "0.21", optional = true }
+futures-util = { version = "0.3", optional = true }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"], optional = true }
+flate2 = { version = "1", optional = true }
+tar = { version = "0.4", optional = true }
+crossterm = { version = "0.28", optional = true }
diff --git a/crates/sandcage/src/acp/mod.rs b/crates/sandcage/src/acp/mod.rs
new file mode 100644
index 0000000..21ea17e
--- /dev/null
+++ b/crates/sandcage/src/acp/mod.rs
@@ -0,0 +1,231 @@
+pub mod registry;
+
+use clap::Subcommand;
+use std::path::PathBuf;
+
+use crate::backend::ContainerBackend;
+use crate::docker::DockerError;
+use crate::service;
+use crate::workspace;
+
+#[derive(Subcommand, Debug)]
+pub enum AcpCommands {
+    /// Run a service in ACP relay mode (bidirectional stdio)
+    Run {
+        /// Service name (e.g., claude, codex, gemini)
+        service: String,
+
+        /// Path to the project directory (defaults to current directory)
+        #[arg(long, short)]
+        path: Option<PathBuf>,
+
+        /// Arguments forwarded to the agent inside the container
+        #[arg(trailing_var_arg = true, allow_hyphen_values = true)]
+        agent_args: Vec<String>,
+    },
+    /// Install an agent from the ACP registry
+    Install {
+        /// Agent ID from the registry (e.g., claude-code)
+        agent_id: String,
+        /// Force re-download even if already installed
+        #[arg(long)]
+        force: bool,
+    },
+    /// List available agents in the ACP registry
+    List {
+        /// Force refresh of the registry cache
+        #[arg(long)]
+        refresh: bool,
+    },
+    /// List locally installed ACP agents
+    Installed,
+}
+
+pub async fn handle(
+    cmd: AcpCommands,
+    backend: &dyn ContainerBackend,
+    workspace_path: Option<PathBuf>,
+) -> std::result::Result<(), DockerError> {
+    match cmd {
+        AcpCommands::Run {
+            service,
+            path,
+            agent_args,
+        } => {
+            let effective_path = path.or(workspace_path);
+            let workspace = workspace::resolve_workspace(effective_path.as_deref())
+                .map_err(|e| DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    e.to_string(),
+                )))?;
+
+            crate::init::preseed()
+                .map_err(|e| DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    e.to_string(),
+                )))?;
+
+            let home = dirs::home_dir().ok_or(DockerError::NoHomeDir)?;
+            let global_config = home.join(".sandcage").join("config.toml");
+            let config_src = crate::config_source::resolve_config_source(&workspace);
+            let config_root = config_src.as_ref().map(|s| s.root.clone()).unwrap_or_else(|| workspace.clone());
+            let project_config = config_root.join(".sandcage").join("sandcage.yml");
+            let local_config = config_root.join(".sandcage").join("local").join("sandcage.local.yml");
+            let cfg = crate::config::resolve_config(
+                Some(&global_config),
+                Some(&project_config),
+                Some(&local_config),
+            )
+            .map_err(|e| DockerError::SpawnFailed(std::io::Error::new(
+                std::io::ErrorKind::Other,
+                e.to_string(),
+            )))?;
+
+            let registry = service::registry::build_default_registry(&cfg);
+            let ctx = crate::docker::build_compose_context(&workspace, &cfg, &config_root).await?;
+
+            let svc = registry.get(&service).ok_or_else(|| DockerError::UnknownService {
+                service: service.clone(),
+                available: registry.names().collect::<Vec<_>>().join(", "),
+            })?;
+
+            if !svc.enabled() {
+                return Err(DockerError::ServiceDisabled {
+                    service: service.clone(),
+                });
+            }
+
+            eprintln!("sandcage: workspace \u{2192} {}", workspace.display());
+            eprintln!("sandcage: acp relay \u{2192} {service}");
+
+            let exit_code = backend.run_acp_relay(svc, &ctx, &cfg, &agent_args).await?;
+
+            if exit_code != 0 {
+                return Err(DockerError::ServiceFailed {
+                    service,
+                    code: exit_code,
+                });
+            }
+
+            Ok(())
+        }
+        AcpCommands::Install { agent_id, force } => {
+            handle_install(&agent_id, force).await.map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(std::io::ErrorKind::Other, e))
+            })
+        }
+        AcpCommands::List { refresh } => {
+            handle_list(refresh).await.map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(std::io::ErrorKind::Other, e))
+            })
+        }
+        AcpCommands::Installed => {
+            handle_installed().map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(std::io::ErrorKind::Other, e))
+            })
+        }
+    }
+}
+
+async fn handle_install(agent_id: &str, force: bool) -> std::result::Result<(), String> {
+    let index = registry::fetch_registry(false).await?;
+    let entry = registry::find_agent(&index, agent_id)
+        .ok_or_else(|| format!("Agent '{}' not found in registry", agent_id))?;
+
+    let platform = registry::platform_key();
+    let target = entry
+        .distribution
+        .binary
+        .as_ref()
+        .and_then(|b| b.get(platform))
+        .ok_or_else(|| {
+            format!(
+                "Agent '{}' has no binary for platform '{}'",
+                agent_id, platform
+            )
+        })?;
+
+    if !force && registry::is_agent_installed(agent_id, &entry.version) {
+        eprintln!("sandcage: {} v{} already installed", entry.name, entry.version);
+        return Ok(());
+    }
+
+    if force {
+        if let Some(dir) = registry::agent_install_dir(agent_id, &entry.version) {
+            std::fs::remove_dir_all(&dir).ok();
+        }
+    }
+
+    registry::install_agent(entry, target).await?;
+    Ok(())
+}
+
+async fn handle_list(refresh: bool) -> std::result::Result<(), String> {
+    let index = registry::fetch_registry(refresh).await?;
+    let platform = registry::platform_key();
+
+    println!("{:<25} {:<20} {:<10} {}", "ID", "NAME", "VERSION", "PLATFORM");
+    println!("{}", "-".repeat(70));
+
+    for agent in &index.agents {
+        let has_binary = agent
+            .distribution
+            .binary
+            .as_ref()
+            .map(|b| b.contains_key(platform))
+            .unwrap_or(false);
+
+        let platform_status = if has_binary {
+            "binary"
+        } else if agent.distribution.npx.is_some() {
+            "npx"
+        } else {
+            "none"
+        };
+
+        println!(
+            "{:<25} {:<20} {:<10} {}",
+            agent.id, agent.name, agent.version, platform_status
+        );
+    }
+
+    Ok(())
+}
+
+fn handle_installed() -> std::result::Result<(), String> {
+    let base = dirs::home_dir()
+        .map(|h| h.join(".sandcage").join("agents"))
+        .ok_or("cannot determine home directory")?;
+
+    if !base.exists() {
+        println!("No agents installed.");
+        return Ok(());
+    }
+
+    println!("{:<25} {:<15} {}", "AGENT", "VERSION", "PATH");
+    println!("{}", "-".repeat(60));
+
+    let entries = std::fs::read_dir(&base).map_err(|e| e.to_string())?;
+    for entry in entries.flatten() {
+        let path = entry.path();
+        if !path.is_dir() {
+            continue;
+        }
+        let agent_id = entry.file_name().to_string_lossy().to_string();
+        if agent_id == "registry.json" || agent_id.ends_with(".timestamp") {
+            continue;
+        }
+
+        let versions = std::fs::read_dir(&path).map_err(|e| e.to_string())?;
+        for ver_entry in versions.flatten() {
+            let ver_path = ver_entry.path();
+            if !ver_path.is_dir() {
+                continue;
+            }
+            let version = ver_entry.file_name().to_string_lossy().to_string();
+            println!("{:<25} {:<15} {}", agent_id, version, ver_path.display());
+        }
+    }
+
+    Ok(())
+}
diff --git a/crates/sandcage/src/acp/registry.rs b/crates/sandcage/src/acp/registry.rs
new file mode 100644
index 0000000..c990e36
--- /dev/null
+++ b/crates/sandcage/src/acp/registry.rs
@@ -0,0 +1,456 @@
+use std::collections::HashMap;
+use std::path::{Path, PathBuf};
+
+use serde::{Deserialize, Serialize};
+
+const REGISTRY_URL: &str =
+    "https://cdn.agentclientprotocol.com/registry/v1/latest/registry.json";
+const REFRESH_INTERVAL_SECS: u64 = 3600;
+const FETCH_TIMEOUT_SECS: u64 = 30;
+
+#[derive(Debug, Deserialize)]
+pub struct RegistryIndex {
+    #[serde(rename = "version")]
+    pub _version: String,
+    pub agents: Vec<RegistryEntry>,
+}
+
+#[derive(Debug, Clone, Deserialize, Serialize)]
+pub struct RegistryEntry {
+    pub id: String,
+    pub name: String,
+    pub version: String,
+    #[serde(default)]
+    pub description: String,
+    #[serde(default)]
+    pub repository: Option<String>,
+    #[serde(default)]
+    pub website: Option<String>,
+    #[serde(default)]
+    pub icon: Option<String>,
+    pub distribution: RegistryDistribution,
+}
+
+#[derive(Debug, Clone, Deserialize, Serialize)]
+pub struct RegistryDistribution {
+    #[serde(default)]
+    pub binary: Option<HashMap<String, RegistryBinaryTarget>>,
+    #[serde(default)]
+    pub npx: Option<RegistryNpxDistribution>,
+}
+
+#[derive(Debug, Clone, Deserialize, Serialize)]
+pub struct RegistryBinaryTarget {
+    pub archive: String,
+    pub cmd: String,
+    #[serde(default)]
+    pub args: Vec<String>,
+    #[serde(default)]
+    pub env: HashMap<String, String>,
+}
+
+#[derive(Debug, Clone, Deserialize, Serialize)]
+pub struct RegistryNpxDistribution {
+    pub package: String,
+    #[serde(default)]
+    pub args: Vec<String>,
+    #[serde(default)]
+    pub env: HashMap<String, String>,
+}
+
+#[derive(Debug, Serialize, Deserialize)]
+pub struct AgentMeta {
+    pub cmd: String,
+    pub args: Vec<String>,
+    pub env: HashMap<String, String>,
+    pub version: String,
+    pub installed_at: String,
+}
+
+fn agents_dir() -> Option<PathBuf> {
+    dirs::home_dir().map(|h| h.join(".sandcage").join("agents"))
+}
+
+fn cache_path() -> Option<PathBuf> {
+    agents_dir().map(|d| d.join("registry.json"))
+}
+
+fn timestamp_path() -> Option<PathBuf> {
+    agents_dir().map(|d| d.join("registry.json.timestamp"))
+}
+
+fn is_cache_fresh() -> bool {
+    let Some(ts_path) = timestamp_path() else {
+        return false;
+    };
+    let Ok(content) = std::fs::read_to_string(&ts_path) else {
+        return false;
+    };
+    let Ok(ts) = content.trim().parse::<u64>() else {
+        return false;
+    };
+    let now = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_secs();
+    now.saturating_sub(ts) < REFRESH_INTERVAL_SECS
+}
+
+fn write_timestamp() {
+    if let Some(ts_path) = timestamp_path() {
+        let now = std::time::SystemTime::now()
+            .duration_since(std::time::UNIX_EPOCH)
+            .unwrap_or_default()
+            .as_secs();
+        std::fs::write(&ts_path, now.to_string()).ok();
+    }
+}
+
+pub async fn fetch_registry(force_refresh: bool) -> std::result::Result<RegistryIndex, String> {
+    let cache = cache_path().ok_or("cannot determine home directory")?;
+
+    if !force_refresh && is_cache_fresh() {
+        if let Ok(data) = std::fs::read_to_string(&cache) {
+            if let Ok(index) = serde_json::from_str::<RegistryIndex>(&data) {
+                return Ok(index);
+            }
+        }
+    }
+
+    let client = reqwest::Client::builder()
+        .timeout(std::time::Duration::from_secs(FETCH_TIMEOUT_SECS))
+        .build()
+        .map_err(|e| format!("HTTP client error: {e}"))?;
+
+    let resp = client
+        .get(REGISTRY_URL)
+        .send()
+        .await
+        .map_err(|e| format!("Failed to fetch registry: {e}"))?;
+
+    let body = resp
+        .text()
+        .await
+        .map_err(|e| format!("Failed to read registry response: {e}"))?;
+
+    let index: RegistryIndex =
+        serde_json::from_str(&body).map_err(|e| format!("Failed to parse registry JSON: {e}"))?;
+
+    if let Some(dir) = agents_dir() {
+        std::fs::create_dir_all(&dir).ok();
+    }
+    if let Some(ref path) = cache_path() {
+        std::fs::write(path, &body).ok();
+    }
+    write_timestamp();
+
+    Ok(index)
+}
+
+pub fn find_agent<'a>(index: &'a RegistryIndex, agent_id: &str) -> Option<&'a RegistryEntry> {
+    index.agents.iter().find(|a| a.id == agent_id)
+}
+
+pub fn platform_key() -> &'static str {
+    if cfg!(target_arch = "x86_64") {
+        "linux-x86_64"
+    } else if cfg!(target_arch = "aarch64") {
+        "linux-aarch64"
+    } else {
+        "linux-x86_64"
+    }
+}
+
+pub fn agent_install_dir(agent_id: &str, version: &str) -> Option<PathBuf> {
+    let sanitized_id = agent_id.replace(|c: char| !c.is_alphanumeric() && c != '-' && c != '_', "-");
+    agents_dir().map(|d| d.join(&sanitized_id).join(version))
+}
+
+pub fn is_agent_installed(agent_id: &str, version: &str) -> bool {
+    agent_install_dir(agent_id, version)
+        .map(|d| d.exists())
+        .unwrap_or(false)
+}
+
+pub async fn install_agent(
+    entry: &RegistryEntry,
+    target: &RegistryBinaryTarget,
+) -> std::result::Result<PathBuf, String> {
+    let install_dir = agent_install_dir(&entry.id, &entry.version)
+        .ok_or("cannot determine install directory")?;
+
+    if install_dir.exists() {
+        return Ok(install_dir);
+    }
+
+    eprintln!("sandcage: downloading {} v{}...", entry.name, entry.version);
+
+    let client = reqwest::Client::builder()
+        .timeout(std::time::Duration::from_secs(300))
+        .build()
+        .map_err(|e| format!("HTTP client error: {e}"))?;
+
+    let resp = client
+        .get(&target.archive)
+        .send()
+        .await
+        .map_err(|e| format!("Failed to download agent: {e}"))?;
+
+    let bytes = resp
+        .bytes()
+        .await
+        .map_err(|e| format!("Failed to read agent archive: {e}"))?;
+
+    let parent = install_dir.parent().ok_or("invalid install path")?;
+    std::fs::create_dir_all(parent).map_err(|e| format!("Failed to create directory: {e}"))?;
+
+    let url_lower = target.archive.to_lowercase();
+    if url_lower.ends_with(".tar.gz") || url_lower.ends_with(".tgz") {
+        let decoder = flate2::read::GzDecoder::new(&bytes[..]);
+        let mut archive = tar::Archive::new(decoder);
+        archive
+            .unpack(&install_dir)
+            .map_err(|e| format!("Failed to extract tar.gz: {e}"))?;
+    } else if url_lower.ends_with(".tar.bz2") || url_lower.ends_with(".tbz2") {
+        return Err("tar.bz2 extraction not yet supported".to_string());
+    } else if url_lower.ends_with(".zip") {
+        return Err("zip extraction not yet supported — use tar.gz agents".to_string());
+    } else {
+        return Err(format!("Unknown archive format: {}", target.archive));
+    }
+
+    let meta = AgentMeta {
+        cmd: target.cmd.clone(),
+        args: target.args.clone(),
+        env: target.env.clone(),
+        version: entry.version.clone(),
+        installed_at: chrono_free_now(),
+    };
+    let meta_path = install_dir.join(".sandcage-meta.json");
+    let meta_json = serde_json::to_string_pretty(&meta)
+        .map_err(|e| format!("Failed to serialize meta: {e}"))?;
+    std::fs::write(&meta_path, meta_json)
+        .map_err(|e| format!("Failed to write meta: {e}"))?;
+
+    cleanup_old_versions(&entry.id, &entry.version);
+
+    eprintln!("sandcage: installed {} v{}", entry.name, entry.version);
+    Ok(install_dir)
+}
+
+fn chrono_free_now() -> String {
+    let dur = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default();
+    format!("{}", dur.as_secs())
+}
+
+fn cleanup_old_versions(agent_id: &str, current_version: &str) {
+    let sanitized_id = agent_id.replace(|c: char| !c.is_alphanumeric() && c != '-' && c != '_', "-");
+    let Some(base) = agents_dir().map(|d| d.join(&sanitized_id)) else {
+        return;
+    };
+    let Ok(entries) = std::fs::read_dir(&base) else {
+        return;
+    };
+    for entry in entries.flatten() {
+        let name = entry.file_name();
+        let name_str = name.to_string_lossy();
+        if name_str != current_version && entry.path().is_dir() && name_str != ".sandcage-meta.json" {
+            std::fs::remove_dir_all(entry.path()).ok();
+        }
+    }
+}
+
+pub fn resolve_agent_command(
+    install_dir: &Path,
+    target: &RegistryBinaryTarget,
+) -> std::result::Result<(PathBuf, Vec<String>, HashMap<String, String>), String> {
+    let cmd = target.cmd.strip_prefix("./").unwrap_or(&target.cmd);
+
+    if cmd.contains("..") {
+        return Err("path traversal in agent cmd is not allowed".to_string());
+    }
+
+    let bin_path = install_dir.join(cmd);
+    if !bin_path.exists() {
+        return Err(format!(
+            "agent binary not found at {}",
+            bin_path.display()
+        ));
+    }
+
+    Ok((bin_path, target.args.clone(), target.env.clone()))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn sample_registry_json() -> &'static str {
+        r#"{
+            "version": "1",
+            "agents": [
+                {
+                    "id": "test-agent",
+                    "name": "Test Agent",
+                    "version": "1.0.0",
+                    "description": "A test agent",
+                    "distribution": {
+                        "binary": {
+                            "linux-x86_64": {
+                                "archive": "https://example.com/test-agent-linux-x86_64.tar.gz",
+                                "cmd": "./test-agent",
+                                "args": ["--acp"],
+                                "env": {"FOO": "bar"}
+                            }
+                        }
+                    }
+                },
+                {
+                    "id": "npx-only-agent",
+                    "name": "NPX Agent",
+                    "version": "2.0.0",
+                    "description": "NPX only",
+                    "distribution": {
+                        "npx": {
+                            "package": "@test/agent@2.0.0",
+                            "args": ["--stdio"],
+                            "env": {}
+                        }
+                    }
+                }
+            ]
+        }"#
+    }
+
+    #[test]
+    fn parse_registry_index() {
+        let index: RegistryIndex =
+            serde_json::from_str(sample_registry_json()).expect("parse registry");
+        assert_eq!(index.agents.len(), 2);
+        assert_eq!(index.agents[0].id, "test-agent");
+        assert_eq!(index.agents[1].id, "npx-only-agent");
+    }
+
+    #[test]
+    fn find_agent_by_id() {
+        let index: RegistryIndex =
+            serde_json::from_str(sample_registry_json()).expect("parse");
+        assert!(find_agent(&index, "test-agent").is_some());
+        assert!(find_agent(&index, "nonexistent").is_none());
+    }
+
+    #[test]
+    fn binary_target_has_correct_fields() {
+        let index: RegistryIndex =
+            serde_json::from_str(sample_registry_json()).expect("parse");
+        let agent = find_agent(&index, "test-agent").unwrap();
+        let target = agent
+            .distribution
+            .binary
+            .as_ref()
+            .unwrap()
+            .get("linux-x86_64")
+            .unwrap();
+        assert_eq!(target.cmd, "./test-agent");
+        assert_eq!(target.args, vec!["--acp"]);
+        assert_eq!(target.env.get("FOO"), Some(&"bar".to_string()));
+    }
+
+    #[test]
+    fn npx_agent_has_package() {
+        let index: RegistryIndex =
+            serde_json::from_str(sample_registry_json()).expect("parse");
+        let agent = find_agent(&index, "npx-only-agent").unwrap();
+        let npx = agent.distribution.npx.as_ref().unwrap();
+        assert_eq!(npx.package, "@test/agent@2.0.0");
+    }
+
+    #[test]
+    fn resolve_command_strips_dot_slash() {
+        let tmp = tempfile::tempdir().unwrap();
+        let bin = tmp.path().join("test-agent");
+        std::fs::write(&bin, "#!/bin/sh\necho ok").unwrap();
+
+        let target = RegistryBinaryTarget {
+            archive: String::new(),
+            cmd: "./test-agent".to_string(),
+            args: vec!["--acp".to_string()],
+            env: HashMap::new(),
+        };
+
+        let (path, args, _env) = resolve_agent_command(tmp.path(), &target).unwrap();
+        assert_eq!(path, bin);
+        assert_eq!(args, vec!["--acp"]);
+    }
+
+    #[test]
+    fn resolve_command_rejects_path_traversal() {
+        let tmp = tempfile::tempdir().unwrap();
+        let target = RegistryBinaryTarget {
+            archive: String::new(),
+            cmd: "../../../etc/passwd".to_string(),
+            args: vec![],
+            env: HashMap::new(),
+        };
+
+        let result = resolve_agent_command(tmp.path(), &target);
+        assert!(result.is_err());
+        assert!(result.unwrap_err().contains("path traversal"));
+    }
+
+    #[test]
+    fn resolve_command_fails_for_missing_binary() {
+        let tmp = tempfile::tempdir().unwrap();
+        let target = RegistryBinaryTarget {
+            archive: String::new(),
+            cmd: "./nonexistent".to_string(),
+            args: vec![],
+            env: HashMap::new(),
+        };
+
+        let result = resolve_agent_command(tmp.path(), &target);
+        assert!(result.is_err());
+        assert!(result.unwrap_err().contains("not found"));
+    }
+
+    #[test]
+    fn agent_install_dir_sanitizes_id() {
+        let dir = agent_install_dir("my@agent/test", "1.0.0").unwrap();
+        let dir_name = dir.parent().unwrap().file_name().unwrap().to_string_lossy();
+        assert!(!dir_name.contains('@'));
+        assert!(!dir_name.contains('/'));
+    }
+
+    #[test]
+    fn parse_registry_with_missing_optional_fields() {
+        let json = r#"{
+            "version": "1",
+            "agents": [{
+                "id": "minimal",
+                "name": "Minimal",
+                "version": "0.1.0",
+                "description": "",
+                "distribution": {
+                    "binary": {
+                        "linux-x86_64": {
+                            "archive": "https://example.com/a.tar.gz",
+                            "cmd": "./agent"
+                        }
+                    }
+                }
+            }]
+        }"#;
+
+        let index: RegistryIndex = serde_json::from_str(json).expect("parse");
+        let agent = &index.agents[0];
+        assert!(agent.repository.is_none());
+        assert!(agent.website.is_none());
+        assert!(agent.icon.is_none());
+
+        let target = agent.distribution.binary.as_ref().unwrap().get("linux-x86_64").unwrap();
+        assert!(target.args.is_empty());
+        assert!(target.env.is_empty());
+    }
+}
diff --git a/crates/sandcage/src/backend/bollard.rs b/crates/sandcage/src/backend/bollard.rs
new file mode 100644
index 0000000..89b189f
--- /dev/null
+++ b/crates/sandcage/src/backend/bollard.rs
@@ -0,0 +1,728 @@
+use std::collections::HashMap;
+
+use async_trait::async_trait;
+use bollard::container::LogOutput;
+use bollard::models::{ContainerCreateBody, HostConfig, Mount, MountType};
+use bollard::Docker;
+use crossterm::terminal;
+use futures_util::StreamExt;
+use tokio::io::{self, AsyncReadExt, AsyncWriteExt};
+
+use crate::config::SandcageConfig;
+use crate::docker::{self, DockerError};
+use crate::service::registry::ServiceRegistry;
+use crate::service::{ComposeContext, ComposeServiceDef, Service};
+
+use super::Result;
+
+/// RAII guard that restores terminal from raw mode on drop.
+struct RawModeGuard;
+
+impl RawModeGuard {
+    fn enter() -> std::result::Result<Self, std::io::Error> {
+        terminal::enable_raw_mode()?;
+        Ok(Self)
+    }
+}
+
+impl Drop for RawModeGuard {
+    fn drop(&mut self) {
+        terminal::disable_raw_mode().ok();
+    }
+}
+
+pub struct BollardBackend {
+    docker: Docker,
+    runtime_info: tokio::sync::OnceCell<super::runtime::RuntimeInfo>,
+}
+
+impl BollardBackend {
+    pub fn try_new() -> super::Result<Self> {
+        let docker = Self::connect_docker().map_err(|e| {
+            DockerError::SpawnFailed(std::io::Error::new(
+                std::io::ErrorKind::ConnectionRefused,
+                format!(
+                    "Cannot connect to Docker daemon: {e}. \
+                     Check that Docker is running and $DOCKER_HOST is set correctly."
+                ),
+            ))
+        })?;
+        Ok(Self {
+            docker,
+            runtime_info: tokio::sync::OnceCell::new(),
+        })
+    }
+
+    fn connect_docker() -> std::result::Result<Docker, bollard::errors::Error> {
+        if std::env::var("DOCKER_HOST").is_ok() {
+            return Docker::connect_with_local_defaults();
+        }
+        if let Some(socket) = Self::socket_from_docker_context() {
+            eprintln!("sandcage: using docker socket from context → {socket}");
+            return Docker::connect_with_socket(&socket, 120, bollard::API_DEFAULT_VERSION);
+        }
+        Docker::connect_with_local_defaults()
+    }
+
+    fn socket_from_docker_context() -> Option<String> {
+        let output = std::process::Command::new("docker")
+            .args(["context", "inspect", "--format", "{{.Endpoints.docker.Host}}"])
+            .output()
+            .ok()?;
+        if !output.status.success() {
+            return None;
+        }
+        let host = String::from_utf8(output.stdout).ok()?.trim().to_string();
+        let path = host.strip_prefix("unix://")?;
+        if std::path::Path::new(path).exists() {
+            Some(path.to_string())
+        } else {
+            None
+        }
+    }
+}
+
+#[async_trait]
+impl super::ContainerBackend for BollardBackend {
+    // Bollard-native interactive TTY with crossterm raw mode.
+    // Falls back to compose if raw mode is unavailable (e.g. MinTTY/Git Bash).
+    async fn run_interactive(
+        &self,
+        service: &dyn Service,
+        ctx: &ComposeContext,
+        config: &SandcageConfig,
+        registry: &ServiceRegistry,
+        shell_override: bool,
+        extra_args: &[String],
+    ) -> Result<i32> {
+        if !self.can_use_bollard_tty() {
+            let compose = super::compose::ComposeBackend;
+            return compose
+                .run_interactive(service, ctx, config, registry, shell_override, extra_args)
+                .await;
+        }
+
+        let mut compose_def = service.compose_service(ctx);
+        if shell_override {
+            compose_def.entrypoint = vec!["/bin/zsh".to_string()];
+        }
+        self.run_interactive_tty(&compose_def, config, &ctx.config_root, extra_args, ctx.forwarding_socket.as_deref())
+            .await
+    }
+
+    async fn run_acp_relay(
+        &self,
+        service: &dyn Service,
+        ctx: &ComposeContext,
+        config: &SandcageConfig,
+        extra_args: &[String],
+    ) -> Result<i32> {
+        let compose_def = service.compose_service(ctx);
+        self.acp_relay(&compose_def, config, &ctx.config_root, extra_args).await
+    }
+
+    async fn image_exists(&self, image: &str) -> Result<bool> {
+        Ok(self.docker.inspect_image(image).await.is_ok())
+    }
+
+    async fn volume_exists(&self, name: &str) -> Result<bool> {
+        Ok(self.docker.inspect_volume(name).await.is_ok())
+    }
+
+    async fn check_availability(&self) -> Result<()> {
+        self.docker.ping().await.map_err(|e| {
+            DockerError::SpawnFailed(std::io::Error::new(
+                std::io::ErrorKind::ConnectionRefused,
+                format!("Cannot connect to Docker: {e}"),
+            ))
+        })?;
+        Ok(())
+    }
+
+    async fn runtime_info(&self) -> Result<super::runtime::RuntimeInfo> {
+        let info = self
+            .runtime_info
+            .get_or_init(|| super::runtime::detect_runtime(&self.docker))
+            .await;
+        Ok(info.clone())
+    }
+}
+
+impl BollardBackend {
+    fn build_container_config(
+        &self,
+        compose_def: &ComposeServiceDef,
+        config: &SandcageConfig,
+        config_root: &std::path::Path,
+        extra_args: &[String],
+        interactive: bool,
+        forwarding_socket: Option<&std::path::Path>,
+        security_opts: &[String],
+    ) -> ContainerCreateBody {
+        let mut env: Vec<String> = compose_def.environment.clone();
+        if let Some(ref env_map) = config.env {
+            for (key, value) in env_map {
+                env.push(format!("{key}={value}"));
+            }
+        }
+
+        let mut binds: Vec<String> = compose_def.volumes.clone();
+        if let Some(ref mount_list) = config.mounts {
+            for mount in mount_list {
+                if mount.contains(':') {
+                    binds.push(docker::expand_mount_path(mount));
+                }
+            }
+        }
+
+        let mut mounts: Vec<Mount> = Vec::new();
+        match config.ssh_mode.as_deref() {
+            Some("volume") => {
+                mounts.push(Mount {
+                    target: Some("/home/agent/.ssh".to_string()),
+                    source: Some("sandcage-ssh".to_string()),
+                    typ: Some(MountType::VOLUME),
+                    read_only: Some(true),
+                    ..Default::default()
+                });
+            }
+            Some("bind") => {
+                let mount = docker::expand_mount_path("~/.ssh:/home/agent/.ssh:ro");
+                binds.push(mount);
+            }
+            _ => {}
+        }
+
+        // Overlay mounts from .sandcage/overlay/ and .sandcage/local/overlay/
+        let overlay_enabled = config.overlay.as_ref()
+            .and_then(|o| o.enabled)
+            .unwrap_or(true);
+        if overlay_enabled {
+            for mount in docker::collect_overlay_mounts(config_root, &compose_def.working_dir) {
+                binds.push(mount);
+            }
+        }
+
+        // Shadow mounts (volume + directory as -v binds; tmpfs folded into tmpfs_map below).
+        let shadow_mounts =
+            docker::collect_shadow_mounts(config, config_root, &compose_def.working_dir);
+        binds.extend(crate::shadow::shadow_bind_strings(&shadow_mounts));
+
+        if let Some(spoof) = docker::collect_spoof_mount(config_root) {
+            binds.push(spoof);
+        }
+
+        // Forwarding socket mount
+        if let Some(ref sock) = forwarding_socket {
+            binds.push(format!(
+                "{}:{}",
+                sock.display(),
+                crate::forwarding::CONTAINER_SOCKET_PATH
+            ));
+        }
+
+        let cmd: Option<Vec<String>> = if extra_args.is_empty() {
+            None
+        } else {
+            Some(extra_args.to_vec())
+        };
+
+        let mut labels = HashMap::new();
+        labels.insert("sandcage.managed".to_string(), "true".to_string());
+        labels.insert(
+            "sandcage.mode".to_string(),
+            if interactive { "interactive" } else { "acp" }.to_string(),
+        );
+
+        // Build tmpfs map for .sandcage/ exclusion plus any tmpfs-backed shadow dirs.
+        let mut tmpfs_paths: Vec<String> = compose_def.tmpfs.clone();
+        tmpfs_paths.extend(crate::shadow::shadow_tmpfs_paths(&shadow_mounts));
+        let tmpfs_map: Option<HashMap<String, String>> = if tmpfs_paths.is_empty() {
+            None
+        } else {
+            Some(
+                tmpfs_paths
+                    .into_iter()
+                    .map(|p| (p, String::new()))
+                    .collect(),
+            )
+        };
+
+        ContainerCreateBody {
+            image: Some(compose_def.image.clone()),
+            entrypoint: Some(compose_def.entrypoint.clone()),
+            cmd,
+            working_dir: Some(compose_def.working_dir.clone()),
+            user: Some(compose_def.user.clone()),
+            env: Some(env),
+            labels: Some(labels),
+            tty: Some(interactive),
+            open_stdin: Some(true),
+            attach_stdin: Some(true),
+            attach_stdout: Some(true),
+            attach_stderr: Some(true),
+            stdin_once: Some(false),
+            host_config: Some(HostConfig {
+                binds: Some(binds),
+                mounts: if mounts.is_empty() { None } else { Some(mounts) },
+                tmpfs: tmpfs_map,
+                auto_remove: Some(true),
+                security_opt: if security_opts.is_empty() {
+                    None
+                } else {
+                    Some(security_opts.to_vec())
+                },
+                ..Default::default()
+            }),
+            ..Default::default()
+        }
+    }
+
+    /// Check whether bollard-native TTY is usable in the current terminal.
+    /// On Windows, MinTTY (Git Bash) uses MSYS PTY pipes instead of a real
+    /// Windows console handle, so `GetConsoleMode` on stdin fails.
+    fn can_use_bollard_tty(&self) -> bool {
+        #[cfg(windows)]
+        {
+            // MinTTY (Git Bash / MSYS2) provides a Windows console handle, so
+            // GetConsoleMode and crossterm raw mode both succeed — but MinTTY's
+            // terminal emulator can't render ANSI output in raw console mode,
+            // producing garbled escape sequences. Detect MSYS2/MinGW by MSYSTEM
+            // env var and fall back to compose, which lets MinTTY handle the PTY.
+            if std::env::var_os("MSYSTEM").is_some() {
+                eprintln!("sandcage: tty probe → MSYS2/MinGW detected (MSYSTEM set) — using compose");
+                return false;
+            }
+
+            use std::os::windows::io::AsRawHandle;
+            unsafe extern "system" {
+                fn GetConsoleMode(handle: *mut std::ffi::c_void, mode: *mut u32) -> i32;
+            }
+            let handle = std::io::stdin().as_raw_handle();
+            let mut mode: u32 = 0;
+            if unsafe { GetConsoleMode(handle as *mut _, &mut mode) } == 0 {
+                eprintln!("sandcage: tty probe → stdin is not a Windows console handle — using compose");
+                return false;
+            }
+            eprintln!("sandcage: tty probe → Windows console handle OK (mode=0x{mode:x})");
+        }
+        match terminal::enable_raw_mode() {
+            Ok(()) => {
+                terminal::disable_raw_mode().ok();
+                eprintln!("sandcage: tty probe → crossterm raw mode OK — using bollard TTY");
+                true
+            }
+            Err(e) => {
+                eprintln!("sandcage: tty probe → crossterm raw mode failed ({e}) — using compose");
+                false
+            }
+        }
+    }
+
+    /// Bollard-native interactive session with crossterm raw mode and resize handling.
+    async fn run_interactive_tty(
+        &self,
+        compose_def: &ComposeServiceDef,
+        config: &SandcageConfig,
+        config_root: &std::path::Path,
+        extra_args: &[String],
+        forwarding_socket: Option<&std::path::Path>,
+    ) -> Result<i32> {
+        self.cleanup_orphans().await;
+
+        // Verify image exists
+        let image = &compose_def.image;
+        self.docker.inspect_image(image).await.map_err(|_| {
+            DockerError::ImageNotFound {
+                image: image.clone(),
+            }
+        })?;
+
+        // Create and start container with TTY
+        let security_opts = docker::resolve_security_opts(config, config_root);
+        let container_config =
+            self.build_container_config(compose_def, config, config_root, extra_args, true, forwarding_socket, &security_opts);
+
+        let container = self
+            .docker
+            .create_container(
+                None::<bollard::query_parameters::CreateContainerOptions>,
+                container_config,
+            )
+            .await
+            .map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    format!("Failed to create container: {e}"),
+                ))
+            })?;
+        let id = container.id.clone();
+        eprintln!("sandcage: container created → {}", &id[..12.min(id.len())]);
+
+        self.docker
+            .start_container(
+                &id,
+                None::<bollard::query_parameters::StartContainerOptions>,
+            )
+            .await
+            .map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    format!("Failed to start container: {e}"),
+                ))
+            })?;
+        eprintln!("sandcage: container started");
+
+        // Initial terminal resize
+        if let Ok((w, h)) = terminal::size() {
+            eprintln!("sandcage: terminal size {w}x{h} — resizing container TTY");
+            self.docker
+                .resize_container_tty(
+                    &id,
+                    bollard::query_parameters::ResizeContainerTTYOptionsBuilder::default()
+                        .w(w as i32)
+                        .h(h as i32)
+                        .build(),
+                )
+                .await
+                .ok();
+        }
+
+        // Enter raw mode (guard restores on drop, including panics)
+        let _guard = RawModeGuard::enter().map_err(|e| {
+            DockerError::SpawnFailed(std::io::Error::new(
+                std::io::ErrorKind::Other,
+                format!("Failed to enter raw mode: {e}"),
+            ))
+        })?;
+        eprintln!("sandcage: raw mode entered");
+
+        // Attach to container
+        let attach_options = bollard::query_parameters::AttachContainerOptionsBuilder::default()
+            .stdin(true)
+            .stdout(true)
+            .stderr(true)
+            .stream(true)
+            .build();
+
+        let bollard::container::AttachContainerResults { mut output, mut input } = self
+            .docker
+            .attach_container(&id, Some(attach_options))
+            .await
+            .map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    format!("Failed to attach to container: {e}"),
+                ))
+            })?;
+        eprintln!("sandcage: attached — spawning relay tasks");
+
+        // Container wait task
+        let docker_wait = self.docker.clone();
+        let id_wait = id.clone();
+        let wait_handle = tokio::spawn(async move {
+            let opts = bollard::query_parameters::WaitContainerOptionsBuilder::default()
+                .condition("not-running")
+                .build();
+            let mut stream = docker_wait.wait_container(&id_wait, Some(opts));
+            if let Some(Ok(resp)) = stream.next().await {
+                resp.status_code
+            } else {
+                -1
+            }
+        });
+
+        // Stdin relay task
+        let stdin_task = tokio::spawn(async move {
+            let mut host_stdin = io::stdin();
+            let mut buf = vec![0u8; 8192];
+            let mut total_bytes: usize = 0;
+            loop {
+                match host_stdin.read(&mut buf).await {
+                    Ok(0) => {
+                        eprintln!("sandcage: stdin → EOF after {total_bytes} bytes");
+                        input.shutdown().await.ok();
+                        break;
+                    }
+                    Ok(n) => {
+                        total_bytes += n;
+                        if input.write_all(&buf[..n]).await.is_err() {
+                            eprintln!("sandcage: stdin → write to container failed after {total_bytes} bytes");
+                            break;
+                        }
+                        if input.flush().await.is_err() {
+                            eprintln!("sandcage: stdin → flush to container failed after {total_bytes} bytes");
+                            break;
+                        }
+                    }
+                    Err(e) => {
+                        eprintln!("sandcage: stdin → read error: {e}");
+                        break;
+                    }
+                }
+            }
+        });
+
+        // Output relay — TTY mode sends Console variant, non-TTY sends StdOut/StdErr
+        let output_task = tokio::spawn(async move {
+            let mut host_stdout = io::stdout();
+            let mut host_stderr = io::stderr();
+            let mut chunk_count: usize = 0;
+            let mut total_bytes: usize = 0;
+            while let Some(result) = output.next().await {
+                match result {
+                    Ok(LogOutput::Console { message })
+                    | Ok(LogOutput::StdOut { message }) => {
+                        chunk_count += 1;
+                        total_bytes += message.len();
+                        host_stdout.write_all(&message).await.ok();
+                        host_stdout.flush().await.ok();
+                    }
+                    Ok(LogOutput::StdErr { message }) => {
+                        chunk_count += 1;
+                        total_bytes += message.len();
+                        host_stderr.write_all(&message).await.ok();
+                        host_stderr.flush().await.ok();
+                    }
+                    Ok(other) => {
+                        eprintln!("sandcage: output → unexpected variant: {other:?}");
+                    }
+                    Err(e) => {
+                        eprintln!("sandcage: output → stream error: {e}");
+                        break;
+                    }
+                }
+            }
+            eprintln!("sandcage: output → stream ended ({chunk_count} chunks, {total_bytes} bytes)");
+        });
+
+        // Resize poller — checks terminal size every 250ms
+        let docker_resize = self.docker.clone();
+        let id_resize = id.clone();
+        let resize_task = tokio::spawn(async move {
+            let mut last_size = terminal::size().unwrap_or((80, 24));
+            loop {
+                tokio::time::sleep(std::time::Duration::from_millis(250)).await;
+                if let Ok(current) = terminal::size() {
+                    if current != last_size {
+                        last_size = current;
+                        docker_resize
+                            .resize_container_tty(
+                                &id_resize,
+                                bollard::query_parameters::ResizeContainerTTYOptionsBuilder::default()
+                                    .w(current.0 as i32)
+                                    .h(current.1 as i32)
+                                    .build(),
+                            )
+                            .await
+                            .ok();
+                    }
+                }
+            }
+        });
+
+        // Signal handler — Ctrl+C stops the container, lets wait_handle return naturally
+        let docker_signal = self.docker.clone();
+        let id_signal = id.clone();
+        let signal_task = tokio::spawn(async move {
+            tokio::signal::ctrl_c().await.ok();
+            eprintln!("sandcage: received interrupt, stopping container...");
+            let opts = bollard::query_parameters::StopContainerOptionsBuilder::default()
+                .t(2)
+                .build();
+            docker_signal
+                .stop_container(&id_signal, Some(opts))
+                .await
+                .ok();
+        });
+
+        // Wait for output to finish (container exited), then clean up tasks
+        let _ = output_task.await;
+        stdin_task.abort();
+        signal_task.abort();
+        resize_task.abort();
+
+        let exit_code = wait_handle.await.unwrap_or(-1);
+
+        // _guard drops here, restoring terminal from raw mode
+        Ok(exit_code as i32)
+    }
+
+    async fn acp_relay(
+        &self,
+        compose_def: &ComposeServiceDef,
+        config: &SandcageConfig,
+        config_root: &std::path::Path,
+        extra_args: &[String],
+    ) -> Result<i32> {
+        self.run_container(compose_def, config, config_root, extra_args, false).await
+    }
+
+    async fn run_container(
+        &self,
+        compose_def: &ComposeServiceDef,
+        config: &SandcageConfig,
+        config_root: &std::path::Path,
+        extra_args: &[String],
+        interactive: bool,
+    ) -> Result<i32> {
+        self.cleanup_orphans().await;
+
+        let image = &compose_def.image;
+        self.docker.inspect_image(image).await.map_err(|_| {
+            DockerError::ImageNotFound {
+                image: image.clone(),
+            }
+        })?;
+
+        let container_config =
+            self.build_container_config(compose_def, config, config_root, extra_args, interactive, None, &[]);
+
+        let container = self
+            .docker
+            .create_container(
+                None::<bollard::query_parameters::CreateContainerOptions>,
+                container_config,
+            )
+            .await
+            .map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    format!("Failed to create container: {e}"),
+                ))
+            })?;
+        let id = container.id.clone();
+
+        let docker_signal = self.docker.clone();
+        let id_signal = id.clone();
+        let signal_task = tokio::spawn(async move {
+            tokio::signal::ctrl_c().await.ok();
+            eprintln!("sandcage: received interrupt, stopping container...");
+            let opts = bollard::query_parameters::RemoveContainerOptionsBuilder::default()
+                .force(true)
+                .build();
+            docker_signal
+                .remove_container(&id_signal, Some(opts))
+                .await
+                .ok();
+            std::process::exit(130);
+        });
+
+        self.docker
+            .start_container(
+                &id,
+                None::<bollard::query_parameters::StartContainerOptions>,
+            )
+            .await
+            .map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    format!("Failed to start container: {e}"),
+                ))
+            })?;
+
+        let attach_options = bollard::query_parameters::AttachContainerOptionsBuilder::default()
+            .stdin(true)
+            .stdout(true)
+            .stderr(true)
+            .stream(true)
+            .build();
+
+        let bollard::container::AttachContainerResults { mut output, mut input } = self
+            .docker
+            .attach_container(&id, Some(attach_options))
+            .await
+            .map_err(|e| {
+                DockerError::SpawnFailed(std::io::Error::new(
+                    std::io::ErrorKind::Other,
+                    format!("Failed to attach to container: {e}"),
+                ))
+            })?;
+
+        let docker_wait = self.docker.clone();
+        let id_wait = id.clone();
+        let wait_handle = tokio::spawn(async move {
+            let opts = bollard::query_parameters::WaitContainerOptionsBuilder::default()
+                .condition("not-running")
+                .build();
+            let mut stream = docker_wait.wait_container(&id_wait, Some(opts));
+            if let Some(Ok(resp)) = stream.next().await {
+                resp.status_code
+            } else {
+                -1
+            }
+        });
+
+        let stdin_task = tokio::spawn(async move {
+            let mut host_stdin = io::stdin();
+            let mut buf = vec![0u8; 8192];
+            loop {
+                match host_stdin.read(&mut buf).await {
+                    Ok(0) => {
+                        input.shutdown().await.ok();
+                        break;
+                    }
+                    Ok(n) => {
+                        if input.write_all(&buf[..n]).await.is_err() {
+                            break;
+                        }
+                        if input.flush().await.is_err() {
+                            break;
+                        }
+                    }
+                    Err(_) => break,
+                }
+            }
+        });
+
+        let output_task = tokio::spawn(async move {
+            let mut host_stdout = io::stdout();
+            let mut host_stderr = io::stderr();
+            while let Some(result) = output.next().await {
+                match result {
+                    Ok(LogOutput::StdOut { message }) => {
+                        host_stdout.write_all(&message).await.ok();
+                        host_stdout.flush().await.ok();
+                    }
+                    Ok(LogOutput::StdErr { message }) => {
+                        host_stderr.write_all(&message).await.ok();
+                        host_stderr.flush().await.ok();
+                    }
+                    Ok(_) => {}
+                    Err(e) => {
+                        eprintln!("sandcage: container stream error: {e}");
+                        break;
+                    }
+                }
+            }
+        });
+
+        let _ = output_task.await;
+        stdin_task.abort();
+        signal_task.abort();
+
+        let exit_code = wait_handle.await.unwrap_or(-1);
+        Ok(exit_code as i32)
+    }
+
+    async fn cleanup_orphans(&self) {
+        let mut filters = HashMap::new();
+        filters.insert("label", vec!["sandcage.managed=true"]);
+        let opts = bollard::query_parameters::ListContainersOptionsBuilder::default()
+            .all(true)
+            .filters(&filters)
+            .build();
+
+        if let Ok(containers) = self.docker.list_containers(Some(opts)).await {
+            for container in containers {
+                if let Some(id) = container.id {
+                    eprintln!("sandcage: cleaning up orphaned container {}", &id[..12.min(id.len())]);
+                    let rm_opts = bollard::query_parameters::RemoveContainerOptionsBuilder::default()
+                        .force(true)
+                        .build();
+                    self.docker.remove_container(&id, Some(rm_opts)).await.ok();
+                }
+            }
+        }
+    }
+}
diff --git a/crates/sandcage/src/backend/compose.rs b/crates/sandcage/src/backend/compose.rs
new file mode 100644
index 0000000..9763662
--- /dev/null
+++ b/crates/sandcage/src/backend/compose.rs
@@ -0,0 +1,112 @@
+use async_trait::async_trait;
+use tokio::process::Command;
+
+use crate::config::SandcageConfig;
+use crate::docker::{self, DockerError};
+use crate::service::registry::ServiceRegistry;
+use crate::service::{ComposeContext, Service};
+
+use super::Result;
+
+pub struct ComposeBackend;
+
+#[async_trait]
+impl super::ContainerBackend for ComposeBackend {
+    async fn run_interactive(
+        &self,
+        service: &dyn Service,
+        ctx: &ComposeContext,
+        config: &SandcageConfig,
+        registry: &ServiceRegistry,
+        shell_override: bool,
+        extra_args: &[String],
+    ) -> Result<i32> {
+        let docker_path = docker::require_docker()?;
+        docker::require_compose(&docker_path).await?;
+
+        let image_tag = format!("{}:latest", ctx.image);
+        docker::require_image(&docker_path, &image_tag).await?;
+
+        if config.ssh_mode.as_deref() == Some("volume") {
+            let vol_check = Command::new(&docker_path)
+                .args(["volume", "inspect", "sandcage-ssh"])
+                .output()
+                .await;
+            if !vol_check.map(|o| o.status.success()).unwrap_or(false) {
+                eprintln!(
+                    "sandcage: SSH volume not found — run 'sandcage setup ssh --refresh' to populate it"
+                );
+            }
+        }
+
+        let compose_content = crate::service::compose::generate_compose(registry, ctx);
+        let compose_file = docker::write_compose_tempfile(&compose_content)?;
+        let compose_path = compose_file.path().to_string_lossy().into_owned();
+
+        let security_opts = docker::resolve_security_opts(config, &ctx.config_root);
+        let run_args = docker::build_run_args(
+            service.name(),
+            &compose_path,
+            config,
+            &ctx.config_root,
+            &ctx.container_dir,
+            shell_override,
+            extra_args,
+            ctx.forwarding_socket.as_deref(),
+            &security_opts,
+        );
+
+        let mut cmd = Command::new(&docker_path);
+        cmd.args(&run_args);
+        cmd.stdin(std::process::Stdio::inherit())
+            .stdout(std::process::Stdio::inherit())
+            .stderr(std::process::Stdio::inherit());
+
+        let status = cmd.status().await.map_err(DockerError::SpawnFailed)?;
+        Ok(status.code().unwrap_or(-1))
+    }
+
+    async fn run_acp_relay(
+        &self,
+        _service: &dyn Service,
+        _ctx: &ComposeContext,
+        _config: &SandcageConfig,
+        _extra_args: &[String],
+    ) -> Result<i32> {
+        Err(DockerError::AcpRequiresBollard)
+    }
+
+    async fn image_exists(&self, image: &str) -> Result<bool> {
+        let docker_path = docker::require_docker()?;
+        let status = Command::new(&docker_path)
+            .args(["image", "inspect", image])
+            .stdout(std::process::Stdio::null())
+            .stderr(std::process::Stdio::null())
+            .status()
+            .await
+            .map_err(DockerError::SpawnFailed)?;
+        Ok(status.success())
+    }
+
+    async fn volume_exists(&self, name: &str) -> Result<bool> {
+        let docker_path = docker::require_docker()?;
+        let status = Command::new(&docker_path)
+            .args(["volume", "inspect", name])
+            .stdout(std::process::Stdio::null())
+            .stderr(std::process::Stdio::null())
+            .status()
+            .await
+            .map_err(DockerError::SpawnFailed)?;
+        Ok(status.success())
+    }
+
+    async fn check_availability(&self) -> Result<()> {
+        let docker_path = docker::require_docker()?;
+        docker::require_compose(&docker_path).await?;
+        Ok(())
+    }
+
+    async fn runtime_info(&self) -> Result<super::runtime::RuntimeInfo> {
+        Ok(super::runtime::RuntimeInfo::default())
+    }
+}
diff --git a/crates/sandcage/src/backend/mod.rs b/crates/sandcage/src/backend/mod.rs
new file mode 100644
index 0000000..bdb84b0
--- /dev/null
+++ b/crates/sandcage/src/backend/mod.rs
@@ -0,0 +1,57 @@
+pub mod compose;
+pub mod runtime;
+#[cfg(feature = "bollard")]
+pub mod bollard;
+#[cfg(feature = "bollard")]
+pub mod network;
+#[cfg(feature = "bollard")]
+pub mod orchestrator;
+
+use async_trait::async_trait;
+
+use crate::config::SandcageConfig;
+use crate::docker::DockerError;
+use crate::service::{ComposeContext, Service};
+
+pub type Result<T> = std::result::Result<T, DockerError>;
+
+#[async_trait]
+pub trait ContainerBackend: Send + Sync {
+    async fn run_interactive(
+        &self,
+        service: &dyn Service,
+        ctx: &ComposeContext,
+        config: &SandcageConfig,
+        registry: &crate::service::registry::ServiceRegistry,
+        shell_override: bool,
+        extra_args: &[String],
+    ) -> Result<i32>;
+
+    async fn run_acp_relay(
+        &self,
+        service: &dyn Service,
+        ctx: &ComposeContext,
+        config: &SandcageConfig,
+        extra_args: &[String],
+    ) -> Result<i32>;
+
+    async fn image_exists(&self, image: &str) -> Result<bool>;
+
+    async fn volume_exists(&self, name: &str) -> Result<bool>;
+
+    async fn check_availability(&self) -> Result<()>;
+
+    async fn runtime_info(&self) -> Result<runtime::RuntimeInfo>;
+}
+
+pub fn default_backend() -> Result<Box<dyn ContainerBackend>> {
+    #[cfg(feature = "bollard")]
+    {
+        Ok(Box::new(bollard::BollardBackend::try_new()?))
+    }
+
+    #[cfg(not(feature = "bollard"))]
+    {
+        Ok(Box::new(compose::ComposeBackend))
+    }
+}
diff --git a/crates/sandcage/src/backend/network.rs b/crates/sandcage/src/backend/network.rs
new file mode 100644
index 0000000..8fc06fb
--- /dev/null
+++ b/crates/sandcage/src/backend/network.rs
@@ -0,0 +1,103 @@
+use std::collections::HashMap;
+use std::path::Path;
+
+use bollard::Docker;
+use sha2::{Digest, Sha256};
+
+use crate::docker::DockerError;
+
+/// Generate a deterministic network name from the workspace path.
+pub fn network_name(workspace: &Path) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(workspace.to_string_lossy().as_bytes());
+    let hash = hex::encode(hasher.finalize());
+    format!("sandcage-{}", &hash[..12])
+}
+
+/// Create or reuse a project-scoped Docker network. Returns the network name.
+pub async fn ensure_network(
+    docker: &Docker,
+    workspace: &Path,
+) -> Result<String, DockerError> {
+    let name = network_name(workspace);
+
+    // Check if it already exists
+    if docker.inspect_network(&name, None::<bollard::query_parameters::InspectNetworkOptions>).await.is_ok() {
+        return Ok(name);
+    }
+
+    // Create it
+    let mut labels = HashMap::new();
+    labels.insert("sandcage.managed".to_string(), "true".to_string());
+
+    let config = bollard::models::NetworkCreateRequest {
+        name: name.clone(),
+        driver: Some("bridge".to_string()),
+        labels: Some(labels),
+        ..Default::default()
+    };
+
+    docker.create_network(config).await.map_err(|e| {
+        DockerError::SpawnFailed(std::io::Error::new(
+            std::io::ErrorKind::Other,
+            format!("Failed to create network {name}: {e}"),
+        ))
+    })?;
+
+    Ok(name)
+}
+
+/// Remove a project network. Only removes if it has the sandcage.managed label.
+pub async fn cleanup_network(
+    docker: &Docker,
+    network_name: &str,
+) -> Result<(), DockerError> {
+    // Verify it's ours before removing
+    match docker
+        .inspect_network(network_name, None::<bollard::query_parameters::InspectNetworkOptions>)
+        .await
+    {
+        Ok(info) => {
+            let is_ours = info
+                .labels
+                .as_ref()
+                .map(|l| l.get("sandcage.managed").map(|v| v == "true").unwrap_or(false))
+                .unwrap_or(false);
+            if !is_ours {
+                return Ok(()); // Not our network, don't touch it
+            }
+        }
+        Err(_) => return Ok(()), // Already gone
+    }
+
+    docker.remove_network(network_name).await.map_err(|e| {
+        DockerError::SpawnFailed(std::io::Error::new(
+            std::io::ErrorKind::Other,
+            format!("Failed to remove network {network_name}: {e}"),
+        ))
+    })?;
+
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn network_name_is_deterministic() {
+        let p = Path::new("/home/user/projects/my-app");
+        let name1 = network_name(p);
+        let name2 = network_name(p);
+        assert_eq!(name1, name2);
+        assert!(name1.starts_with("sandcage-"));
+        assert_eq!(name1.len(), "sandcage-".len() + 12);
+    }
+
+    #[test]
+    fn different_paths_produce_different_names() {
+        let a = network_name(Path::new("/a"));
+        let b = network_name(Path::new("/b"));
+        assert_ne!(a, b);
+    }
+}
diff --git a/crates/sandcage/src/backend/orchestrator.rs b/crates/sandcage/src/backend/orchestrator.rs
new file mode 100644
index 0000000..3f307f0
--- /dev/null
+++ b/crates/sandcage/src/backend/orchestrator.rs
@@ -0,0 +1,148 @@
+use std::path::Path;
+
+use crate::service::ComposeServiceDef;
+
+use super::network;
+
+/// A plan for running one or more containers on a shared network.
+#[derive(Debug)]
+pub struct OrchestrationPlan {
+    pub network_name: String,
+    pub services: Vec<ServiceInstance>,
+    /// Which service to attach stdin/stdout to.
+    pub primary: String,
+}
+
+/// A single container to be started as part of an orchestration.
+#[derive(Debug)]
+pub struct ServiceInstance {
+    pub name: String,
+    pub compose_def: ComposeServiceDef,
+    pub depends_on: Vec<String>,
+}
+
+impl OrchestrationPlan {
+    /// Create a simple plan for a single service (no network needed).
+    pub fn single(name: &str, compose_def: ComposeServiceDef) -> Self {
+        Self {
+            network_name: String::new(),
+            services: vec![ServiceInstance {
+                name: name.to_string(),
+                compose_def,
+                depends_on: vec![],
+            }],
+            primary: name.to_string(),
+        }
+    }
+
+    /// Create a plan with multiple services on a shared network.
+    pub fn multi(
+        workspace: &Path,
+        services: Vec<ServiceInstance>,
+        primary: &str,
+    ) -> Self {
+        Self {
+            network_name: network::network_name(workspace),
+            services,
+            primary: primary.to_string(),
+        }
+    }
+
+    /// Whether this plan requires a Docker network.
+    pub fn needs_network(&self) -> bool {
+        self.services.len() > 1
+    }
+
+    /// Return services in dependency order (simple topological sort).
+    /// Services with no dependencies come first.
+    pub fn startup_order(&self) -> Vec<&ServiceInstance> {
+        let mut result: Vec<&ServiceInstance> = Vec::new();
+        let mut placed: Vec<&str> = Vec::new();
+
+        // Simple iterative approach — works for small service counts
+        let mut remaining: Vec<&ServiceInstance> = self.services.iter().collect();
+        while !remaining.is_empty() {
+            let before = remaining.len();
+            remaining.retain(|s| {
+                if s.depends_on.iter().all(|dep| placed.contains(&dep.as_str())) {
+                    result.push(s);
+                    placed.push(&s.name);
+                    false // remove from remaining
+                } else {
+                    true // keep in remaining
+                }
+            });
+            if remaining.len() == before {
+                // Circular dependency — just append the rest
+                result.extend(remaining.drain(..));
+                break;
+            }
+        }
+        result
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::service::ComposeServiceDef;
+
+    fn dummy_def() -> ComposeServiceDef {
+        ComposeServiceDef {
+            image: "test:latest".to_string(),
+            entrypoint: vec!["/bin/sh".to_string()],
+            working_dir: "/workspace".to_string(),
+            user: "1000:1000".to_string(),
+            volumes: vec![],
+            environment: vec![],
+            tmpfs: vec![],
+            tty: true,
+            stdin_open: true,
+        }
+    }
+
+    #[test]
+    fn single_plan_has_one_service() {
+        let plan = OrchestrationPlan::single("claude", dummy_def());
+        assert_eq!(plan.services.len(), 1);
+        assert_eq!(plan.primary, "claude");
+        assert!(!plan.needs_network());
+    }
+
+    #[test]
+    fn multi_plan_needs_network() {
+        let plan = OrchestrationPlan::multi(
+            Path::new("/workspace"),
+            vec![
+                ServiceInstance { name: "db".into(), compose_def: dummy_def(), depends_on: vec![] },
+                ServiceInstance { name: "app".into(), compose_def: dummy_def(), depends_on: vec!["db".into()] },
+            ],
+            "app",
+        );
+        assert!(plan.needs_network());
+        assert_eq!(plan.services.len(), 2);
+    }
+
+    #[test]
+    fn startup_order_respects_dependencies() {
+        let plan = OrchestrationPlan::multi(
+            Path::new("/workspace"),
+            vec![
+                ServiceInstance { name: "app".into(), compose_def: dummy_def(), depends_on: vec!["db".into()] },
+                ServiceInstance { name: "db".into(), compose_def: dummy_def(), depends_on: vec![] },
+            ],
+            "app",
+        );
+        let order = plan.startup_order();
+        assert_eq!(order[0].name, "db");
+        assert_eq!(order[1].name, "app");
+    }
+
+    #[test]
+    fn startup_order_handles_no_deps() {
+        let plan = OrchestrationPlan::single("solo", dummy_def());
+        let order = plan.startup_order();
+        assert_eq!(order.len(), 1);
+        assert_eq!(order[0].name, "solo");
+    }
+}
diff --git a/crates/sandcage/src/backend/runtime.rs b/crates/sandcage/src/backend/runtime.rs
new file mode 100644
index 0000000..7c98031
--- /dev/null
+++ b/crates/sandcage/src/backend/runtime.rs
@@ -0,0 +1,187 @@
+/// Runtime detection for rootless/rootful Docker and Podman.
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum RuntimeMode {
+    RootlessDocker,
+    RootfulDocker,
+    Podman,
+    Unknown,
+}
+
+impl std::fmt::Display for RuntimeMode {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            Self::RootlessDocker => write!(f, "docker (rootless)"),
+            Self::RootfulDocker => write!(f, "docker (rootful)"),
+            Self::Podman => write!(f, "podman (rootless)"),
+            Self::Unknown => write!(f, "unknown"),
+        }
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct RuntimeInfo {
+    pub mode: RuntimeMode,
+    pub cgroup_v2: bool,
+    pub api_version: Option<String>,
+    pub server_version: Option<String>,
+}
+
+impl Default for RuntimeInfo {
+    fn default() -> Self {
+        Self {
+            mode: RuntimeMode::Unknown,
+            cgroup_v2: false,
+            api_version: None,
+            server_version: None,
+        }
+    }
+}
+
+impl RuntimeInfo {
+    pub fn supports_resource_limits(&self) -> bool {
+        self.cgroup_v2
+    }
+
+    pub fn supports_privileged(&self) -> bool {
+        self.mode == RuntimeMode::RootfulDocker
+    }
+
+    pub fn supports_low_ports(&self) -> bool {
+        self.mode == RuntimeMode::RootfulDocker
+    }
+}
+
+#[cfg(feature = "bollard")]
+fn detect_cgroup_v2() -> bool {
+    #[cfg(target_os = "linux")]
+    {
+        std::path::Path::new("/sys/fs/cgroup/cgroup.controllers").exists()
+    }
+    #[cfg(not(target_os = "linux"))]
+    {
+        false
+    }
+}
+
+#[cfg(feature = "bollard")]
+pub async fn detect_runtime(docker: &bollard::Docker) -> RuntimeInfo {
+    let info = match docker.info().await {
+        Ok(info) => info,
+        Err(_) => return RuntimeInfo::default(),
+    };
+
+    // Determine mode
+    let mode = if let Some(ref sec_opts) = info.security_options {
+        if sec_opts.iter().any(|s| s.contains("rootless")) {
+            RuntimeMode::RootlessDocker
+        } else {
+            detect_mode_from_root_dir(&info)
+        }
+    } else {
+        detect_mode_from_root_dir(&info)
+    };
+
+    let server_version = info.server_version.clone();
+
+    // Get API version from docker.version()
+    let api_version = match docker.version().await {
+        Ok(ver) => ver.api_version,
+        Err(_) => None,
+    };
+
+    RuntimeInfo {
+        mode,
+        cgroup_v2: detect_cgroup_v2(),
+        api_version,
+        server_version,
+    }
+}
+
+#[cfg(feature = "bollard")]
+fn detect_mode_from_root_dir(info: &bollard::models::SystemInfo) -> RuntimeMode {
+    if let Some(ref root_dir) = info.docker_root_dir {
+        if root_dir.contains(".local/share/docker") {
+            return RuntimeMode::RootlessDocker;
+        }
+    }
+    RuntimeMode::RootfulDocker
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn display_runtime_mode() {
+        assert_eq!(RuntimeMode::RootlessDocker.to_string(), "docker (rootless)");
+        assert_eq!(RuntimeMode::RootfulDocker.to_string(), "docker (rootful)");
+        assert_eq!(RuntimeMode::Podman.to_string(), "podman (rootless)");
+        assert_eq!(RuntimeMode::Unknown.to_string(), "unknown");
+    }
+
+    #[test]
+    fn supports_resource_limits_requires_cgroup_v2() {
+        let info = RuntimeInfo {
+            mode: RuntimeMode::RootfulDocker,
+            cgroup_v2: false,
+            api_version: None,
+            server_version: None,
+        };
+        assert!(!info.supports_resource_limits());
+
+        let info = RuntimeInfo {
+            cgroup_v2: true,
+            ..info
+        };
+        assert!(info.supports_resource_limits());
+    }
+
+    #[test]
+    fn supports_privileged_only_rootful() {
+        let rootful = RuntimeInfo {
+            mode: RuntimeMode::RootfulDocker,
+            ..Default::default()
+        };
+        assert!(rootful.supports_privileged());
+
+        let rootless = RuntimeInfo {
+            mode: RuntimeMode::RootlessDocker,
+            ..Default::default()
+        };
+        assert!(!rootless.supports_privileged());
+
+        let podman = RuntimeInfo {
+            mode: RuntimeMode::Podman,
+            ..Default::default()
+        };
+        assert!(!podman.supports_privileged());
+
+        let unknown = RuntimeInfo::default();
+        assert!(!unknown.supports_privileged());
+    }
+
+    #[test]
+    fn supports_low_ports_only_rootful() {
+        let rootful = RuntimeInfo {
+            mode: RuntimeMode::RootfulDocker,
+            ..Default::default()
+        };
+        assert!(rootful.supports_low_ports());
+
+        let rootless = RuntimeInfo {
+            mode: RuntimeMode::RootlessDocker,
+            ..Default::default()
+        };
+        assert!(!rootless.supports_low_ports());
+    }
+
+    #[test]
+    fn default_runtime_info() {
+        let info = RuntimeInfo::default();
+        assert_eq!(info.mode, RuntimeMode::Unknown);
+        assert!(!info.cgroup_v2);
+        assert!(info.api_version.is_none());
+        assert!(info.server_version.is_none());
+    }
+}
diff --git a/crates/sandcage/src/config.rs b/crates/sandcage/src/config.rs
new file mode 100644
index 0000000..7815f35
--- /dev/null
+++ b/crates/sandcage/src/config.rs
@@ -0,0 +1,1090 @@
+use std::collections::HashMap;
+use std::path::{Path, PathBuf};
+
+use figment::providers::{Format, Serialized, Toml};
+use figment::Figment;
+use miette::Diagnostic;
+use serde::{Deserialize, Serialize};
+use thiserror::Error;
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum ConfigError {
+    #[error("Failed to read config file {0}: {1}")]
+    #[diagnostic(code(sandcage::config::read_failed))]
+    ReadFailed(PathBuf, #[source] std::io::Error),
+
+    #[error("Failed to parse TOML in {0}: {1}")]
+    #[diagnostic(code(sandcage::config::parse_failed))]
+    ParseFailed(PathBuf, #[source] toml::de::Error),
+
+    #[error("Failed to parse TOML: {0}")]
+    #[diagnostic(code(sandcage::config::parse_failed_str))]
+    #[allow(dead_code)]
+    ParseFailedStr(#[source] toml::de::Error),
+
+    #[error("Failed to merge configuration layers: {0}")]
+    #[diagnostic(code(sandcage::config::merge_failed))]
+    MergeFailed(#[source] Box<figment::Error>),
+}
+
+pub type Result<T> = std::result::Result<T, ConfigError>;
+
+// ---------------------------------------------------------------------------
+// Sub-structs
+// ---------------------------------------------------------------------------
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct SshKeyEntry {
+    pub host: String,
+    pub identity_file: String,
+}
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct ServiceOverride {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub enabled: Option<bool>,
+}
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct OverlayConfig {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub enabled: Option<bool>,
+}
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct ShadowDir {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub backend: Option<String>,
+    #[serde(default, skip_serializing_if = "is_false")]
+    pub shared: bool,
+}
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct ShadowConfig {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub backend: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub dirs: Option<HashMap<String, ShadowDir>>,
+}
+
+fn is_false(b: &bool) -> bool {
+    !*b
+}
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct ProfilesConfig {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub apparmor: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub seccomp: Option<String>,
+}
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct ToolConfig {
+    /// "in-cage" | "spoof" | "host".
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub mode: Option<String>,
+    /// Message printed by a spoof script.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub message: Option<String>,
+    /// Host-disposition guardrails (enforced by the forwarding track).
+    #[serde(default, skip_serializing_if = "Vec::is_empty")]
+    pub allow: Vec<String>,
+    #[serde(default, skip_serializing_if = "Vec::is_empty")]
+    pub deny: Vec<String>,
+}
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+pub struct TaskConfig {
+    #[serde(rename = "where", skip_serializing_if = "Option::is_none")]
+    pub location: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub run: Option<String>,
+}
+
+// ---------------------------------------------------------------------------
+// Raw deserialization type — captures unknown keys
+// ---------------------------------------------------------------------------
+
+/// Intermediate representation that keeps leftover keys so we can warn about them.
+#[derive(Debug, Deserialize)]
+struct RawConfig {
+    #[serde(default)]
+    env: Option<HashMap<String, String>>,
+    #[serde(default)]
+    packages: Option<Vec<String>>,
+    #[serde(default)]
+    toolchains: Option<HashMap<String, toml::Value>>,
+    #[serde(default)]
+    mounts: Option<Vec<String>>,
+    #[serde(default)]
+    shell: Option<String>,
+    #[serde(default)]
+    justfile: Option<PathBuf>,
+    #[serde(default)]
+    dockerfiles: Option<HashMap<String, PathBuf>>,
+    #[serde(default)]
+    trusted_projects: Option<Vec<PathBuf>>,
+    #[serde(default)]
+    container_workspace: Option<String>,
+    #[serde(default)]
+    agent_args: Option<HashMap<String, Vec<String>>>,
+    #[serde(default)]
+    ssh_mode: Option<String>,
+    #[serde(default)]
+    ssh_keys: Option<Vec<SshKeyEntry>>,
+    #[serde(default)]
+    services: Option<HashMap<String, ServiceOverride>>,
+    #[serde(default)]
+    default_services: Option<Vec<String>>,
+    #[serde(default)]
+    image: Option<String>,
+    #[serde(default)]
+    runtime: Option<String>,
+    #[serde(default)]
+    compose_backend: Option<String>,
+    #[serde(default)]
+    overlay: Option<OverlayConfig>,
+    #[serde(default)]
+    shadow: Option<ShadowConfig>,
+    #[serde(default)]
+    tools: Option<HashMap<String, ToolConfig>>,
+    #[serde(default)]
+    forward: Option<toml::Value>,
+    #[serde(default)]
+    tasks: Option<HashMap<String, TaskConfig>>,
+    #[serde(default)]
+    profiles: Option<ProfilesConfig>,
+    #[serde(default)]
+    home: Option<String>,
+
+    /// Absorb everything else so we can warn about unknown fields.
+    #[serde(flatten)]
+    extra: HashMap<String, toml::Value>,
+}
+
+// ---------------------------------------------------------------------------
+// Public config struct
+// ---------------------------------------------------------------------------
+
+#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
+#[serde(default)]
+pub struct SandcageConfig {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub env: Option<HashMap<String, String>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub packages: Option<Vec<String>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub toolchains: Option<HashMap<String, toml::Value>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub mounts: Option<Vec<String>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub shell: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub justfile: Option<PathBuf>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub dockerfiles: Option<HashMap<String, PathBuf>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub trusted_projects: Option<Vec<PathBuf>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub container_workspace: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub agent_args: Option<HashMap<String, Vec<String>>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub ssh_mode: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub ssh_keys: Option<Vec<SshKeyEntry>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub services: Option<HashMap<String, ServiceOverride>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub default_services: Option<Vec<String>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub image: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub runtime: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub compose_backend: Option<String>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub overlay: Option<OverlayConfig>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub shadow: Option<ShadowConfig>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub tools: Option<HashMap<String, ToolConfig>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub tasks: Option<HashMap<String, TaskConfig>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub profiles: Option<ProfilesConfig>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub home: Option<String>,
+}
+
+// ---------------------------------------------------------------------------
+// Known keys — used to filter the flattened `extra` map
+// ---------------------------------------------------------------------------
+
+const KNOWN_KEYS: &[&str] = &["env", "packages", "toolchains", "mounts", "shell", "justfile", "dockerfiles", "trusted_projects", "container_workspace", "agent_args", "ssh_mode", "ssh_keys", "services", "default_services", "image", "runtime", "compose_backend", "overlay", "forward", "tasks", "profiles", "redirect", "shadow", "tools", "home"];
+
+// ---------------------------------------------------------------------------
+// Validation helpers
+// ---------------------------------------------------------------------------
+
+/// Returns `true` if a mount string is well-formed (must contain `:`).
+fn is_valid_mount(mount: &str) -> bool {
+    mount.contains(':')
+}
+
+/// Validate and warn; does not return an error — warnings are non-fatal.
+fn validate_and_warn(raw: &RawConfig) {
+    // Warn about unknown top-level keys
+    for key in raw.extra.keys() {
+        if !KNOWN_KEYS.contains(&key.as_str()) {
+            eprintln!(
+                "sandcage: warning: unknown config key '{key}' will be ignored. \
+                 Known keys: {}",
+                KNOWN_KEYS.join(", ")
+            );
+        }
+    }
+
+    // Warn if redirect appears alongside other config keys
+    if raw.extra.contains_key("redirect") {
+        let has_other_keys = raw.env.is_some()
+            || raw.packages.is_some()
+            || raw.toolchains.is_some()
+            || raw.mounts.is_some()
+            || raw.shell.is_some()
+            || raw.overlay.is_some();
+        if has_other_keys {
+            eprintln!(
+                "sandcage: warning: 'redirect' is set alongside other config keys — \
+                 non-redirect keys will be ignored"
+            );
+        }
+    }
+
+    // Emit notes for reserved sections
+    if raw.forward.is_some() {
+        eprintln!(
+            "sandcage: note: 'forward' section is reserved for a future release and will be ignored"
+        );
+    }
+
+    // Validate runtime value
+    if let Some(rt) = &raw.runtime {
+        const VALID_RUNTIMES: &[&str] = &["auto", "rootless", "rootful"];
+        if !VALID_RUNTIMES.contains(&rt.as_str()) {
+            eprintln!(
+                "sandcage: warning: unrecognized runtime value '{rt}'. \
+                 Valid values: {}",
+                VALID_RUNTIMES.join(", ")
+            );
+        }
+    }
+
+    // Validate compose_backend value
+    if let Some(cb) = &raw.compose_backend {
+        const VALID_COMPOSE_BACKENDS: &[&str] = &["auto", "bollard", "compose"];
+        if !VALID_COMPOSE_BACKENDS.contains(&cb.as_str()) {
+            eprintln!(
+                "sandcage: warning: unrecognized compose_backend value '{cb}'. \
+                 Valid values: {}",
+                VALID_COMPOSE_BACKENDS.join(", ")
+            );
+        }
+    }
+
+    // Validate mount strings
+    if let Some(mounts) = &raw.mounts {
+        for mount in mounts {
+            if !is_valid_mount(mount) {
+                eprintln!(
+                    "sandcage: warning: mount '{mount}' is missing ':' separator. \
+                     Expected format: <source>:<target> or <source>:<target>:<options>"
+                );
+            }
+        }
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Conversion from raw to public struct
+// ---------------------------------------------------------------------------
+
+fn from_raw(raw: RawConfig) -> SandcageConfig {
+    SandcageConfig {
+        env: raw.env,
+        packages: raw.packages,
+        toolchains: raw.toolchains,
+        mounts: raw.mounts,
+        shell: raw.shell,
+        justfile: raw.justfile,
+        dockerfiles: raw.dockerfiles,
+        trusted_projects: raw.trusted_projects,
+        container_workspace: raw.container_workspace,
+        agent_args: raw.agent_args,
+        ssh_mode: raw.ssh_mode,
+        ssh_keys: raw.ssh_keys,
+        services: raw.services,
+        default_services: raw.default_services,
+        image: raw.image,
+        runtime: raw.runtime,
+        compose_backend: raw.compose_backend,
+        overlay: raw.overlay,
+        shadow: raw.shadow,
+        tools: raw.tools,
+        tasks: raw.tasks,
+        profiles: raw.profiles,
+        home: raw.home,
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+
+/// Parse a sandcage TOML config from the given path.
+pub fn load(path: &Path) -> Result<SandcageConfig> {
+    let content = std::fs::read_to_string(path)
+        .map_err(|e| ConfigError::ReadFailed(path.to_path_buf(), e))?;
+
+    let raw: RawConfig = toml::from_str(&content)
+        .map_err(|e| ConfigError::ParseFailed(path.to_path_buf(), e))?;
+
+    validate_and_warn(&raw);
+    Ok(from_raw(raw))
+}
+
+#[cfg(test)]
+pub fn load_from_str(content: &str) -> Result<SandcageConfig> {
+    // Empty / whitespace-only content → all fields None
+    if content.trim().is_empty() {
+        return Ok(SandcageConfig::default());
+    }
+
+    let raw: RawConfig =
+        toml::from_str(content).map_err(ConfigError::ParseFailedStr)?;
+
+    validate_and_warn(&raw);
+    Ok(from_raw(raw))
+}
+
+/// Load trusted_projects from the global config only.
+/// This must never be read from project-level config (a project cannot self-trust).
+pub fn load_trusted_projects(global_config_path: &Path) -> Vec<PathBuf> {
+    if !global_config_path.exists() {
+        return Vec::new();
+    }
+
+    let cfg: SandcageConfig = Figment::from(Serialized::defaults(SandcageConfig::default()))
+        .merge(Toml::file(global_config_path))
+        .extract()
+        .unwrap_or_default();
+
+    cfg.trusted_projects.unwrap_or_default()
+}
+
+// ---------------------------------------------------------------------------
+// Layered config resolution via figment
+// ---------------------------------------------------------------------------
+
+/// Resolve the final `SandcageConfig` by merging all configuration layers in order:
+///
+/// 1. Compiled defaults (all `None`)
+/// 2. Global config from `global_config_path` (TOML, e.g. `~/.sandcage/config.toml`)
+/// 3. Project config from `project_config_path` (TOML, e.g. `.sandcage/config.toml`)
+/// 4. Local project config from `local_config_path` (TOML, e.g. `.sandcage/local/config.local.toml`)
+///
+/// Later layers win. Pass `None` for any path to skip that layer.
+pub fn resolve_config(
+    global_config_path: Option<&Path>,
+    project_config_path: Option<&Path>,
+    local_config_path: Option<&Path>,
+) -> Result<SandcageConfig> {
+    // Start with compiled defaults — all fields None.
+    let mut figment = Figment::from(Serialized::defaults(SandcageConfig::default()));
+
+    if let Some(global_path) = global_config_path
+        && global_path.exists()
+    {
+        figment = figment.merge(Toml::file(global_path));
+    }
+
+    if let Some(project_path) = project_config_path
+        && project_path.exists()
+    {
+        let project_cfg = load(project_path)?;
+        figment = figment.merge(Serialized::defaults(project_cfg));
+    }
+
+    if let Some(local_path) = local_config_path
+        && local_path.exists()
+    {
+        let local_cfg = load(local_path)?;
+        figment = figment.merge(Serialized::defaults(local_cfg));
+    }
+
+    figment
+        .extract()
+        .map_err(|e| ConfigError::MergeFailed(Box::new(e)))
+}
+
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::io::Write;
+    use tempfile::NamedTempFile;
+
+    const FULL_CONFIG: &str = r#"
+packages = ["ripgrep", "fd-find"]
+mounts = ["/data/models:/models:ro", "/tmp/cache:/cache"]
+shell = "zsh"
+justfile = "./project.justfile"
+
+[env]
+RUST_LOG = "debug"
+NODE_ENV = "development"
+
+[toolchains]
+rust = true
+node = true
+"#;
+
+    // -----------------------------------------------------------------------
+    // Happy-path tests
+    // -----------------------------------------------------------------------
+
+    #[test]
+    fn parse_full_config() {
+        let cfg = load_from_str(FULL_CONFIG).expect("parse full config");
+
+        // env
+        let env = cfg.env.expect("env should be Some");
+        assert_eq!(env.get("RUST_LOG").map(String::as_str), Some("debug"));
+        assert_eq!(env.get("NODE_ENV").map(String::as_str), Some("development"));
+
+        // packages
+        let pkgs = cfg.packages.expect("packages should be Some");
+        assert_eq!(pkgs, vec!["ripgrep", "fd-find"]);
+
+        // toolchains
+        let tc = cfg.toolchains.expect("toolchains should be Some");
+        assert_eq!(tc.get("rust"), Some(&toml::Value::Boolean(true)));
+        assert_eq!(tc.get("node"), Some(&toml::Value::Boolean(true)));
+
+        // mounts
+        let mounts = cfg.mounts.expect("mounts should be Some");
+        assert_eq!(mounts[0], "/data/models:/models:ro");
+        assert_eq!(mounts[1], "/tmp/cache:/cache");
+
+        // shell
+        assert_eq!(cfg.shell.as_deref(), Some("zsh"));
+
+        // justfile
+        assert_eq!(cfg.justfile, Some(PathBuf::from("./project.justfile")));
+    }
+
+    #[test]
+    fn parse_minimal_config_only_env() {
+        let yaml = "[env]\nKEY = \"value\"\n";
+        let cfg = load_from_str(yaml).expect("parse minimal config");
+
+        let env = cfg.env.expect("env should be Some");
+        assert_eq!(env.get("KEY").map(String::as_str), Some("value"));
+
+        assert!(cfg.packages.is_none());
+        assert!(cfg.toolchains.is_none());
+        assert!(cfg.mounts.is_none());
+        assert!(cfg.shell.is_none());
+        assert!(cfg.justfile.is_none());
+    }
+
+    #[test]
+    fn parse_empty_file_all_fields_none() {
+        let cfg = load_from_str("").expect("parse empty file");
+        assert!(cfg.env.is_none());
+        assert!(cfg.packages.is_none());
+        assert!(cfg.toolchains.is_none());
+        assert!(cfg.mounts.is_none());
+        assert!(cfg.shell.is_none());
+        assert!(cfg.justfile.is_none());
+    }
+
+    #[test]
+    fn parse_whitespace_only_file() {
+        let cfg = load_from_str("   \n\n  \t\n").expect("parse whitespace-only file");
+        assert!(cfg.env.is_none());
+    }
+
+    #[test]
+    fn load_from_file() {
+        let mut tmp = NamedTempFile::new().expect("create tmpfile");
+        write!(tmp, "{FULL_CONFIG}").expect("write tmpfile");
+
+        let cfg = load(tmp.path()).expect("load from file");
+        assert!(cfg.env.is_some());
+    }
+
+    #[test]
+    fn load_missing_file_returns_error() {
+        let result = load(Path::new("/nonexistent/path/.sandcage.yml"));
+        assert!(result.is_err());
+        let err = result.unwrap_err();
+        assert!(matches!(err, ConfigError::ReadFailed(..)));
+    }
+
+    // -----------------------------------------------------------------------
+    // Error / warning path tests
+    // -----------------------------------------------------------------------
+
+    #[test]
+    fn invalid_toml_returns_parse_error() {
+        let bad_toml = "env = [this is not valid toml";
+        let result = load_from_str(bad_toml);
+        assert!(result.is_err());
+        let err = result.unwrap_err();
+        assert!(
+            matches!(err, ConfigError::ParseFailedStr(..)),
+            "expected ParseFailedStr, got: {err:?}"
+        );
+    }
+
+    #[test]
+    fn unknown_keys_are_absorbed_without_hard_error() {
+        // Unknown keys should not cause a parse failure — they emit warnings.
+        let yaml = "[env]\nKEY = \"val\"\n\n[unknown_field]\nfoo = \"surprise\"\n";
+        let result = load_from_str(yaml);
+        assert!(
+            result.is_ok(),
+            "unknown keys should not cause a hard error: {result:?}"
+        );
+        let cfg = result.unwrap();
+        // Legitimate fields still parsed
+        assert!(cfg.env.is_some());
+    }
+
+    #[test]
+    fn invalid_mount_no_colon_does_not_hard_error() {
+        // A mount without ':' is a warning, not an error.
+        let yaml = "mounts = [\"/data/models\", \"/valid:/mount\"]\n";
+        let result = load_from_str(yaml);
+        assert!(result.is_ok(), "invalid mount should not be a hard error");
+        let cfg = result.unwrap();
+        let mounts = cfg.mounts.unwrap();
+        assert_eq!(mounts.len(), 2);
+    }
+
+    #[test]
+    fn is_valid_mount_helper() {
+        assert!(is_valid_mount("/src:/dst"));
+        assert!(is_valid_mount("/src:/dst:ro"));
+        assert!(!is_valid_mount("/no_colon_here"));
+        assert!(!is_valid_mount(""));
+    }
+
+    #[test]
+    fn all_valid_mounts_are_accepted() {
+        let yaml = "mounts = [\"/data:/mnt/data\", \"/tmp:/tmp:ro\"]\n";
+        let cfg = load_from_str(yaml).unwrap();
+        let mounts = cfg.mounts.unwrap();
+        assert!(mounts.iter().all(|m| is_valid_mount(m)));
+    }
+
+    #[test]
+    fn extra_fields_detected() {
+        // Verify the `extra` map in RawConfig captures unknown keys correctly.
+        let yaml = "foo = \"bar\"\nbaz = \"42\"\n\n[env]\nA = \"1\"\n";
+        let raw: RawConfig = toml::from_str(yaml).unwrap();
+        assert!(raw.extra.contains_key("foo"), "extra should contain 'foo'");
+        assert!(raw.extra.contains_key("baz"), "extra should contain 'baz'");
+        assert!(!raw.extra.contains_key("env"), "env should not be in extra");
+    }
+
+    // -----------------------------------------------------------------------
+    // resolve_config layered merge tests
+    // -----------------------------------------------------------------------
+
+    #[test]
+    fn resolve_defaults_only_all_none() {
+        let cfg = resolve_config(None, None, None).expect("resolve with no files");
+        assert!(cfg.env.is_none());
+        assert!(cfg.packages.is_none());
+        assert!(cfg.toolchains.is_none());
+        assert!(cfg.mounts.is_none());
+        assert!(cfg.shell.is_none());
+        assert!(cfg.justfile.is_none());
+    }
+
+    #[test]
+    fn resolve_global_config_only() {
+        let toml_content = r#"
+shell = "zsh"
+
+[env]
+EDITOR = "vim"
+"#;
+        let mut global_tmp = NamedTempFile::new().expect("create global tmpfile");
+        write!(global_tmp, "{toml_content}").expect("write global tmpfile");
+
+        let cfg = resolve_config(Some(global_tmp.path()), None, None).expect("resolve global only");
+        assert_eq!(cfg.shell.as_deref(), Some("zsh"));
+        let env = cfg.env.expect("env should be Some from global");
+        assert_eq!(env.get("EDITOR").map(String::as_str), Some("vim"));
+        assert!(cfg.packages.is_none());
+    }
+
+    #[test]
+    fn resolve_project_config_only() {
+        let yaml_content = "shell = \"bash\"\npackages = [\"ripgrep\"]\n";
+        let mut project_tmp = NamedTempFile::new().expect("create project tmpfile");
+        write!(project_tmp, "{yaml_content}").expect("write project tmpfile");
+
+        let cfg = resolve_config(None, Some(project_tmp.path()), None).expect("resolve project only");
+        assert_eq!(cfg.shell.as_deref(), Some("bash"));
+        let pkgs = cfg.packages.expect("packages should be Some");
+        assert_eq!(pkgs, vec!["ripgrep"]);
+        assert!(cfg.env.is_none());
+    }
+
+    #[test]
+    fn resolve_project_overrides_global() {
+        // Global sets shell=zsh; project sets shell=bash — project wins.
+        let global_toml = r#"shell = "zsh""#;
+        let project_yaml = "shell = \"bash\"\n";
+
+        let mut global_tmp = NamedTempFile::new().expect("create global tmpfile");
+        write!(global_tmp, "{global_toml}").expect("write global tmpfile");
+
+        let mut project_tmp = NamedTempFile::new().expect("create project tmpfile");
+        write!(project_tmp, "{project_yaml}").expect("write project tmpfile");
+
+        let cfg = resolve_config(Some(global_tmp.path()), Some(project_tmp.path()), None)
+            .expect("resolve both");
+        assert_eq!(cfg.shell.as_deref(), Some("bash"), "project shell should override global");
+    }
+
+    #[test]
+    fn resolve_partial_overlap_fields_merge() {
+        // Global sets shell + env; project sets packages only.
+        // Expect: shell from global, env from global, packages from project.
+        let global_toml = "shell = \"zsh\"\n[env]\nEDITOR = \"vim\"\n";
+        let project_yaml = "packages = [\"fd-find\"]\n";
+
+        let mut global_tmp = NamedTempFile::new().expect("create global tmpfile");
+        write!(global_tmp, "{global_toml}").expect("write global tmpfile");
+
+        let mut project_tmp = NamedTempFile::new().expect("create project tmpfile");
+        write!(project_tmp, "{project_yaml}").expect("write project tmpfile");
+
+        let cfg = resolve_config(Some(global_tmp.path()), Some(project_tmp.path()), None)
+            .expect("resolve partial overlap");
+        assert_eq!(cfg.shell.as_deref(), Some("zsh"), "shell should come from global");
+        let env = cfg.env.expect("env should be Some from global");
+        assert_eq!(env.get("EDITOR").map(String::as_str), Some("vim"));
+        let pkgs = cfg.packages.expect("packages should be Some from project");
+        assert_eq!(pkgs, vec!["fd-find"]);
+    }
+
+    #[test]
+    fn resolve_nonexistent_paths_skipped() {
+        // Paths that don't exist should be silently skipped (not errors).
+        let cfg = resolve_config(
+            Some(Path::new("/nonexistent/config.toml")),
+            Some(Path::new("/nonexistent/.sandcage.yml")),
+            None,
+        )
+        .expect("nonexistent files should not error");
+        assert!(cfg.shell.is_none());
+    }
+
+    #[test]
+    fn parse_container_workspace() {
+        let yaml = "container_workspace = \"/workspace/my-app\"\n";
+        let cfg = load_from_str(yaml).expect("parse container_workspace");
+        assert_eq!(cfg.container_workspace.as_deref(), Some("/workspace/my-app"));
+    }
+
+    #[test]
+    fn container_workspace_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.container_workspace.is_none());
+    }
+
+    #[test]
+    fn agent_args_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.agent_args.is_none());
+    }
+
+    #[test]
+    fn resolve_agent_args_project_overrides_global() {
+        let global_toml = r#"
+[agent_args]
+claude = ["--global-flag"]
+"#;
+        let project_yaml = r#"
+[agent_args]
+claude = ["--project-flag"]
+"#;
+        let mut global_tmp = NamedTempFile::new().expect("create global tmpfile");
+        write!(global_tmp, "{global_toml}").expect("write global tmpfile");
+        let mut project_tmp = NamedTempFile::new().expect("create project tmpfile");
+        write!(project_tmp, "{project_yaml}").expect("write project tmpfile");
+
+        let cfg = resolve_config(Some(global_tmp.path()), Some(project_tmp.path()), None)
+            .expect("resolve");
+        let agent_args = cfg.agent_args.expect("agent_args should be Some");
+        let claude_args = agent_args.get("claude").expect("claude args");
+        assert_eq!(claude_args, &vec!["--project-flag"], "project should override global");
+    }
+
+    #[test]
+    fn parse_agent_args() {
+        let yaml = r#"
+[agent_args]
+claude = ["--dangerously-skip-permissions"]
+codex = ["--full-auto"]
+"#;
+        let cfg = load_from_str(yaml).expect("parse agent_args");
+        let agent_args = cfg.agent_args.expect("agent_args should be Some");
+        let claude_args = agent_args.get("claude").expect("claude args");
+        assert_eq!(claude_args, &vec!["--dangerously-skip-permissions"]);
+        let codex_args = agent_args.get("codex").expect("codex args");
+        assert_eq!(codex_args, &vec!["--full-auto"]);
+    }
+
+    #[test]
+    fn parse_ssh_mode() {
+        let yaml = "ssh_mode = \"volume\"\n";
+        let cfg = load_from_str(yaml).expect("parse ssh_mode");
+        assert_eq!(cfg.ssh_mode.as_deref(), Some("volume"));
+    }
+
+    #[test]
+    fn parse_ssh_keys() {
+        let yaml = r#"
+ssh_mode = "volume"
+
+[[ssh_keys]]
+host = "github.com"
+identity_file = "~/.ssh/id_ed25519"
+
+[[ssh_keys]]
+host = "gitea"
+identity_file = "~/.ssh/work_gitea"
+"#;
+        let cfg = load_from_str(yaml).expect("parse ssh_keys");
+        let keys = cfg.ssh_keys.expect("ssh_keys should be Some");
+        assert_eq!(keys.len(), 2);
+        assert_eq!(keys[0].host, "github.com");
+        assert_eq!(keys[0].identity_file, "~/.ssh/id_ed25519");
+        assert_eq!(keys[1].host, "gitea");
+    }
+
+    #[test]
+    fn ssh_mode_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.ssh_mode.is_none());
+        assert!(cfg.ssh_keys.is_none());
+    }
+
+    #[test]
+    fn resolve_ssh_mode_project_overrides_global() {
+        let global_toml = r#"ssh_mode = "bind""#;
+        let project_yaml = "ssh_mode = \"volume\"\n";
+        let mut global_tmp = NamedTempFile::new().expect("create global tmpfile");
+        write!(global_tmp, "{global_toml}").expect("write global tmpfile");
+        let mut project_tmp = NamedTempFile::new().expect("create project tmpfile");
+        write!(project_tmp, "{project_yaml}").expect("write project tmpfile");
+        let cfg = resolve_config(Some(global_tmp.path()), Some(project_tmp.path()), None).expect("resolve");
+        assert_eq!(cfg.ssh_mode.as_deref(), Some("volume"));
+    }
+
+    #[test]
+    fn parse_services_override() {
+        let yaml = r#"
+[services.codex]
+enabled = false
+
+[services.claude]
+enabled = true
+"#;
+        let cfg = load_from_str(yaml).expect("parse services");
+        let services = cfg.services.expect("services should be Some");
+        assert_eq!(services.get("codex").unwrap().enabled, Some(false));
+        assert_eq!(services.get("claude").unwrap().enabled, Some(true));
+    }
+
+    #[test]
+    fn parse_default_services() {
+        let yaml = r#"
+default_services = ["claude", "shell"]
+"#;
+        let cfg = load_from_str(yaml).expect("parse default_services");
+        let defaults = cfg.default_services.expect("default_services should be Some");
+        assert_eq!(defaults, vec!["claude", "shell"]);
+    }
+
+    #[test]
+    fn services_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.services.is_none());
+        assert!(cfg.default_services.is_none());
+    }
+
+    #[test]
+    fn resolve_services_project_overrides_global() {
+        let global_toml = r#"
+[services.codex]
+enabled = true
+"#;
+        let project_yaml = r#"
+[services.codex]
+enabled = false
+"#;
+        let mut global_tmp = NamedTempFile::new().expect("create global tmpfile");
+        write!(global_tmp, "{global_toml}").expect("write global tmpfile");
+        let mut project_tmp = NamedTempFile::new().expect("create project tmpfile");
+        write!(project_tmp, "{project_yaml}").expect("write project tmpfile");
+
+        let cfg = resolve_config(Some(global_tmp.path()), Some(project_tmp.path()), None)
+            .expect("resolve");
+        let services = cfg.services.expect("services should be Some");
+        assert_eq!(
+            services.get("codex").unwrap().enabled,
+            Some(false),
+            "project should override global"
+        );
+    }
+
+    #[test]
+    fn parse_image_field() {
+        let yaml = "image = \"my-custom\"\n";
+        let cfg = load_from_str(yaml).expect("parse image field");
+        assert_eq!(cfg.image.as_deref(), Some("my-custom"));
+    }
+
+    #[test]
+    fn image_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.image.is_none());
+    }
+
+    #[test]
+    fn parse_runtime_and_compose_backend() {
+        let yaml = "runtime = \"rootless\"\ncompose_backend = \"bollard\"\n";
+        let cfg = load_from_str(yaml).expect("parse runtime and compose_backend");
+        assert_eq!(cfg.runtime.as_deref(), Some("rootless"));
+        assert_eq!(cfg.compose_backend.as_deref(), Some("bollard"));
+    }
+
+    #[test]
+    fn runtime_and_compose_backend_default_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.runtime.is_none());
+        assert!(cfg.compose_backend.is_none());
+    }
+
+    #[test]
+    fn unrecognized_runtime_and_compose_backend_still_parse() {
+        let yaml = "runtime = \"podman\"\ncompose_backend = \"swarm\"\n";
+        let cfg = load_from_str(yaml).expect("unrecognized values should not hard-error");
+        assert_eq!(cfg.runtime.as_deref(), Some("podman"));
+        assert_eq!(cfg.compose_backend.as_deref(), Some("swarm"));
+    }
+
+    #[test]
+    fn parse_all_valid_runtime_values() {
+        for val in &["auto", "rootless", "rootful"] {
+            let yaml = format!("runtime = \"{val}\"\n");
+            let cfg = load_from_str(&yaml).expect("parse valid runtime");
+            assert_eq!(cfg.runtime.as_deref(), Some(*val));
+        }
+    }
+
+    #[test]
+    fn parse_all_valid_compose_backend_values() {
+        for val in &["auto", "bollard", "compose"] {
+            let yaml = format!("compose_backend = \"{val}\"\n");
+            let cfg = load_from_str(&yaml).expect("parse valid compose_backend");
+            assert_eq!(cfg.compose_backend.as_deref(), Some(*val));
+        }
+    }
+
+    #[test]
+    fn reserved_sections_parse_without_error() {
+        let yaml = r#"
+[forward]
+commands = ["gh", "docker compose"]
+
+[tasks.test]
+where = "inside"
+
+[profiles]
+apparmor = "default"
+"#;
+        let result = load_from_str(yaml);
+        assert!(result.is_ok(), "reserved sections should not cause errors: {result:?}");
+    }
+
+    #[test]
+    fn overlay_config_parses() {
+        let yaml = "[overlay]\nenabled = false\n";
+        let cfg = load_from_str(yaml).expect("parse overlay config");
+        assert_eq!(cfg.overlay.as_ref().unwrap().enabled, Some(false));
+    }
+
+    #[test]
+    fn overlay_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.overlay.is_none());
+    }
+
+    #[test]
+    fn redirect_only_parses_without_error() {
+        let yaml = "redirect = \"/some/path\"\n";
+        let result = load_from_str(yaml);
+        assert!(result.is_ok(), "redirect-only config should parse: {result:?}");
+    }
+
+    #[test]
+    fn redirect_is_known_key() {
+        let yaml = "redirect = \"/some/path\"\n";
+        let raw: RawConfig = toml::from_str(yaml).unwrap();
+        assert!(raw.extra.contains_key("redirect"));
+        // Redirect is in KNOWN_KEYS so it should not trigger unknown-key warning
+        assert!(KNOWN_KEYS.contains(&"redirect"));
+    }
+
+    #[test]
+    fn parse_shadow_config() {
+        let yaml = r#"
+[shadow]
+backend = "volume"
+
+[shadow.dirs]
+".venv" = {}
+"target" = { backend = "directory" }
+".cargo/registry" = { shared = true }
+"#;
+        let cfg = load_from_str(yaml).expect("parse shadow config");
+        let shadow = cfg.shadow.expect("shadow should be Some");
+        assert_eq!(shadow.backend.as_deref(), Some("volume"));
+        let dirs = shadow.dirs.expect("dirs should be Some");
+        assert!(dirs.contains_key(".venv"));
+        assert_eq!(dirs["target"].backend.as_deref(), Some("directory"));
+        assert!(dirs[".cargo/registry"].shared);
+        assert!(!dirs[".venv"].shared);
+    }
+
+    #[test]
+    fn shadow_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.shadow.is_none());
+    }
+
+    #[test]
+    fn parse_tools_config() {
+        let yaml = r#"
+[tools.cargo]
+mode = "spoof"
+message = "Use `just build` to compile this project."
+
+[tools.docker]
+mode = "host"
+deny = ["* prune *", "* rm -f *"]
+
+[tools.uv]
+mode = "in-cage"
+"#;
+        let cfg = load_from_str(yaml).expect("parse tools");
+        let tools = cfg.tools.expect("tools should be Some");
+        assert_eq!(tools["cargo"].mode.as_deref(), Some("spoof"));
+        assert_eq!(
+            tools["cargo"].message.as_deref(),
+            Some("Use `just build` to compile this project.")
+        );
+        assert_eq!(tools["docker"].mode.as_deref(), Some("host"));
+        assert_eq!(tools["docker"].deny, vec!["* prune *".to_string(), "* rm -f *".to_string()]);
+        assert_eq!(tools["uv"].mode.as_deref(), Some("in-cage"));
+    }
+
+    #[test]
+    fn tools_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.tools.is_none());
+    }
+
+    #[test]
+    fn parse_tasks_config() {
+        let toml = r#"
+[tasks.build]
+where = "host"
+run = "cargo build --release"
+
+[tasks.test]
+where = "host"
+run = "cargo test"
+
+[tasks.lint]
+where = "in-cage"
+run = "clippy"
+"#;
+        let cfg = load_from_str(toml).expect("parse tasks");
+        let tasks = cfg.tasks.expect("tasks should be Some");
+        assert_eq!(tasks["build"].location.as_deref(), Some("host"));
+        assert_eq!(tasks["build"].run.as_deref(), Some("cargo build --release"));
+        assert_eq!(tasks["lint"].location.as_deref(), Some("in-cage"));
+    }
+
+    #[test]
+    fn tasks_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.tasks.is_none());
+    }
+
+    #[test]
+    fn parse_profiles_config() {
+        let toml = r#"
+[profiles]
+apparmor = ".sandcage/profiles/apparmor.conf"
+seccomp = ".sandcage/profiles/seccomp.json"
+"#;
+        let cfg = load_from_str(toml).expect("parse profiles");
+        let profiles = cfg.profiles.expect("profiles should be Some");
+        assert_eq!(profiles.apparmor.as_deref(), Some(".sandcage/profiles/apparmor.conf"));
+        assert_eq!(profiles.seccomp.as_deref(), Some(".sandcage/profiles/seccomp.json"));
+    }
+
+    #[test]
+    fn profiles_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.profiles.is_none());
+    }
+
+    #[test]
+    fn parse_home_field() {
+        let toml = "home = \"work\"\n";
+        let cfg = load_from_str(toml).expect("parse home");
+        assert_eq!(cfg.home.as_deref(), Some("work"));
+    }
+
+    #[test]
+    fn home_defaults_to_none() {
+        let cfg = load_from_str("").expect("parse empty");
+        assert!(cfg.home.is_none());
+    }
+
+    #[test]
+    fn resolve_home_cli_overrides_config() {
+        let global = "home = \"personal\"\n";
+        let mut global_tmp = NamedTempFile::new().expect("create global tmpfile");
+        write!(global_tmp, "{global}").expect("write global tmpfile");
+
+        let cfg = resolve_config(Some(global_tmp.path()), None, None).expect("resolve");
+        assert_eq!(cfg.home.as_deref(), Some("personal"));
+    }
+}
diff --git a/crates/sandcage/src/config_source.rs b/crates/sandcage/src/config_source.rs
new file mode 100644
index 0000000..97ff60f
--- /dev/null
+++ b/crates/sandcage/src/config_source.rs
@@ -0,0 +1,304 @@
+use std::path::{Path, PathBuf};
+use std::process::Command;
+
+#[derive(Debug)]
+pub struct ConfigSource {
+    pub root: PathBuf,
+    pub origin: ConfigOrigin,
+}
+
+#[derive(Debug)]
+pub enum ConfigOrigin {
+    EnvVar,
+    Workspace,
+    Redirect { from: PathBuf },
+    MainWorktree,
+}
+
+impl std::fmt::Display for ConfigOrigin {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            ConfigOrigin::EnvVar => write!(f, "SANDCAGE_CONFIG_DIR"),
+            ConfigOrigin::Workspace => write!(f, "workspace"),
+            ConfigOrigin::Redirect { from } => write!(f, "redirect from {}", from.display()),
+            ConfigOrigin::MainWorktree => write!(f, "main worktree"),
+        }
+    }
+}
+
+/// Resolve the directory from which `.sandcage/` config is loaded.
+///
+/// Resolution order:
+/// 1. `SANDCAGE_CONFIG_DIR` env var
+/// 2. `.sandcage/config.toml` in workspace
+/// 3. Redirect file (`sandcage.toml` at workspace root with `redirect =` key)
+/// 4. Main worktree root (if workspace is a git worktree)
+/// 5. None — no project config found
+pub fn resolve_config_source(workspace: &Path) -> Option<ConfigSource> {
+    if let Ok(dir) = std::env::var("SANDCAGE_CONFIG_DIR") {
+        let expanded = expand_tilde(&dir);
+        if expanded.join(".sandcage").join("config.toml").exists() {
+            return Some(ConfigSource { root: expanded, origin: ConfigOrigin::EnvVar });
+        }
+        eprintln!(
+            "sandcage: warning: SANDCAGE_CONFIG_DIR={dir} does not contain \
+             .sandcage/config.toml, ignoring"
+        );
+    }
+
+    if workspace.join(".sandcage").join("config.toml").exists() {
+        return Some(ConfigSource {
+            root: workspace.to_path_buf(),
+            origin: ConfigOrigin::Workspace,
+        });
+    }
+
+    if let Some(target) = check_redirect(workspace) {
+        return Some(ConfigSource {
+            root: target,
+            origin: ConfigOrigin::Redirect { from: workspace.to_path_buf() },
+        });
+    }
+
+    if let Some(main_root) = find_main_worktree_root(workspace) {
+        if main_root != workspace {
+            if main_root.join(".sandcage").join("config.toml").exists() {
+                return Some(ConfigSource {
+                    root: main_root,
+                    origin: ConfigOrigin::MainWorktree,
+                });
+            }
+            if let Some(target) = check_redirect(&main_root) {
+                return Some(ConfigSource {
+                    root: target,
+                    origin: ConfigOrigin::Redirect { from: main_root },
+                });
+            }
+        }
+    }
+
+    None
+}
+
+fn expand_tilde(path: &str) -> PathBuf {
+    if path == "~" {
+        dirs::home_dir().unwrap_or_else(|| PathBuf::from(path))
+    } else if let Some(suffix) = path.strip_prefix("~/") {
+        match dirs::home_dir() {
+            Some(home) => home.join(suffix),
+            None => PathBuf::from(path),
+        }
+    } else {
+        PathBuf::from(path)
+    }
+}
+
+fn check_redirect(dir: &Path) -> Option<PathBuf> {
+    let redirect_file = dir.join("sandcage.toml");
+    if !redirect_file.exists() {
+        return None;
+    }
+
+    let content = std::fs::read_to_string(&redirect_file).ok()?;
+    let parsed: toml::Value = toml::from_str(&content).ok()?;
+    let redirect = parsed.get("redirect")?.as_str()?;
+
+    let target = expand_tilde(redirect);
+    let resolved = if target.is_relative() {
+        dir.join(&target)
+    } else {
+        target
+    };
+
+    if resolved.join(".sandcage").join("config.toml").exists() {
+        Some(resolved)
+    } else {
+        eprintln!(
+            "sandcage: warning: redirect in {} points to {}, which does not contain \
+             .sandcage/config.toml",
+            redirect_file.display(),
+            resolved.display()
+        );
+        None
+    }
+}
+
+fn find_main_worktree_root(from: &Path) -> Option<PathBuf> {
+    let common = Command::new("git")
+        .args(["rev-parse", "--git-common-dir"])
+        .current_dir(from)
+        .output()
+        .ok()?;
+    if !common.status.success() {
+        return None;
+    }
+
+    let git_dir = Command::new("git")
+        .args(["rev-parse", "--git-dir"])
+        .current_dir(from)
+        .output()
+        .ok()?;
+    if !git_dir.status.success() {
+        return None;
+    }
+
+    let common_path = PathBuf::from(String::from_utf8_lossy(&common.stdout).trim());
+    let git_dir_path = PathBuf::from(String::from_utf8_lossy(&git_dir.stdout).trim());
+
+    let common_abs = from.join(&common_path).canonicalize().ok()?;
+    let git_dir_abs = from.join(&git_dir_path).canonicalize().ok()?;
+
+    if common_abs == git_dir_abs {
+        return None;
+    }
+
+    common_abs.parent().map(|p| p.to_path_buf())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use tempfile::TempDir;
+
+    fn make_git_repo() -> (TempDir, PathBuf) {
+        let dir = TempDir::new().expect("create tempdir");
+        let path = dir.path().to_path_buf();
+        Command::new("git")
+            .args(["init"])
+            .current_dir(&path)
+            .status()
+            .expect("git init");
+        // Need at least one commit for worktrees to work
+        Command::new("git")
+            .args(["commit", "--allow-empty", "-m", "init"])
+            .current_dir(&path)
+            .status()
+            .expect("git commit");
+        (dir, path)
+    }
+
+    fn scaffold_sandcage(root: &Path) {
+        let dir = root.join(".sandcage");
+        std::fs::create_dir_all(&dir).unwrap();
+        std::fs::write(dir.join("config.toml"), "# test config\n").unwrap();
+    }
+
+    #[test]
+    fn resolves_from_workspace() {
+        let dir = TempDir::new().unwrap();
+        scaffold_sandcage(dir.path());
+        let result = resolve_config_source(dir.path());
+        assert!(result.is_some());
+        let src = result.unwrap();
+        assert!(matches!(src.origin, ConfigOrigin::Workspace));
+        assert_eq!(src.root, dir.path().to_path_buf());
+    }
+
+    #[test]
+    fn returns_none_when_no_config() {
+        let dir = TempDir::new().unwrap();
+        let result = resolve_config_source(dir.path());
+        assert!(result.is_none());
+    }
+
+    #[test]
+    fn resolves_redirect() {
+        let dir = TempDir::new().unwrap();
+        let target = TempDir::new().unwrap();
+        scaffold_sandcage(target.path());
+
+        let redirect_content = format!(
+            "redirect = \"{}\"",
+            target.path().to_string_lossy().replace('\\', "/")
+        );
+        std::fs::write(dir.path().join("sandcage.toml"), redirect_content).unwrap();
+
+        let result = resolve_config_source(dir.path());
+        assert!(result.is_some());
+        let src = result.unwrap();
+        assert!(matches!(src.origin, ConfigOrigin::Redirect { .. }));
+    }
+
+    #[test]
+    fn invalid_redirect_returns_none() {
+        let dir = TempDir::new().unwrap();
+        std::fs::write(
+            dir.path().join("sandcage.toml"),
+            "redirect = \"/nonexistent/path\"\n",
+        )
+        .unwrap();
+        let result = resolve_config_source(dir.path());
+        assert!(result.is_none());
+    }
+
+    #[test]
+    fn direct_config_wins_over_redirect() {
+        let dir = TempDir::new().unwrap();
+        scaffold_sandcage(dir.path());
+        // Also place a redirect — should be ignored since .sandcage/ exists
+        std::fs::write(dir.path().join("sandcage.toml"), "redirect = \"/somewhere\"\n").unwrap();
+
+        let result = resolve_config_source(dir.path());
+        assert!(result.is_some());
+        assert!(matches!(result.unwrap().origin, ConfigOrigin::Workspace));
+    }
+
+    #[test]
+    fn resolves_from_main_worktree() {
+        let (_guard, repo_root) = make_git_repo();
+        scaffold_sandcage(&repo_root);
+
+        let wt_path = repo_root.parent().unwrap().join("test-worktree");
+        let status = Command::new("git")
+            .args([
+                "worktree",
+                "add",
+                &wt_path.to_string_lossy(),
+                "-b",
+                "test-wt",
+            ])
+            .current_dir(&repo_root)
+            .status()
+            .expect("git worktree add");
+        assert!(status.success(), "git worktree add failed");
+
+        let result = resolve_config_source(&wt_path);
+        assert!(result.is_some(), "should find config from main worktree");
+        let src = result.unwrap();
+        assert!(
+            matches!(src.origin, ConfigOrigin::MainWorktree),
+            "origin should be MainWorktree, got {:?}",
+            src.origin
+        );
+
+        // Cleanup worktree
+        Command::new("git")
+            .args(["worktree", "remove", &wt_path.to_string_lossy()])
+            .current_dir(&repo_root)
+            .status()
+            .ok();
+    }
+
+    #[test]
+    fn main_worktree_not_triggered_when_config_in_workspace() {
+        let (_guard, repo_root) = make_git_repo();
+        scaffold_sandcage(&repo_root);
+
+        // In normal (non-worktree) case, should resolve as Workspace
+        let result = resolve_config_source(&repo_root);
+        assert!(result.is_some());
+        assert!(matches!(result.unwrap().origin, ConfigOrigin::Workspace));
+    }
+
+    #[test]
+    fn expand_tilde_expands_home() {
+        let home = dirs::home_dir().unwrap();
+        assert_eq!(expand_tilde("~/foo"), home.join("foo"));
+        assert_eq!(expand_tilde("~"), home);
+    }
+
+    #[test]
+    fn expand_tilde_leaves_absolute_unchanged() {
+        assert_eq!(expand_tilde("/absolute/path"), PathBuf::from("/absolute/path"));
+    }
+}
diff --git a/crates/sandcage/src/docker.rs b/crates/sandcage/src/docker.rs
new file mode 100644
index 0000000..9525e48
--- /dev/null
+++ b/crates/sandcage/src/docker.rs
@@ -0,0 +1,1892 @@
+#![allow(unused_assignments)]
+use std::collections::HashMap;
+use std::io::Write;
+use std::path::{Path, PathBuf};
+use tokio::process::Command;
+
+use miette::Diagnostic;
+use sha2::{Digest, Sha256};
+use thiserror::Error;
+
+use crate::config::SandcageConfig;
+use crate::shadow::ShadowMount;
+use crate::spoof::SPOOF_CONTAINER_DIR;
+
+// ---------------------------------------------------------------------------
+// Bundled Dockerfiles
+// ---------------------------------------------------------------------------
+
+pub const DOCKERFILE_BASE: &str = include_str!("../../../images/base/Dockerfile");
+
+const FRAGMENT_MARKER: &str = "# SANDCAGE_TOOLCHAIN_FRAGMENTS — injected by sandcage build";
+
+use crate::recipe::resolve_recipes;
+
+/// Drop custom (table-valued) toolchains from an untrusted project's config.
+/// Built-in toolchains (boolean / string values) are always allowed; only custom
+/// recipes — which carry arbitrary fragment build instructions — require trust.
+fn filter_untrusted_toolchains(
+    mut toolchains: std::collections::HashMap<String, toml::Value>,
+    is_trusted: bool,
+) -> std::collections::HashMap<String, toml::Value> {
+    if is_trusted {
+        return toolchains;
+    }
+    toolchains.retain(|name, value| {
+        let is_custom = matches!(value, toml::Value::Table(_));
+        if is_custom {
+            eprintln!(
+                "sandcage: warning: custom toolchain '{name}' ignored (project not in trusted_projects)"
+            );
+        }
+        !is_custom
+    });
+    toolchains
+}
+
+pub fn compose_dockerfile(config: &SandcageConfig, project_root: &Path) -> String {
+    let mut fragments = String::new();
+
+    if let Some(ref toolchains) = config.toolchains {
+        match resolve_recipes(toolchains, project_root) {
+            Ok(recipes) => {
+                for recipe in recipes {
+                    match recipe.fragment_text() {
+                        Ok(text) => {
+                            fragments.push('\n');
+                            fragments.push_str(&text);
+                        }
+                        Err(e) => eprintln!("sandcage: warning: {e}"),
+                    }
+                }
+            }
+            Err(e) => eprintln!("sandcage: warning: {e}"),
+        }
+    }
+
+    DOCKERFILE_BASE.replace(FRAGMENT_MARKER, &fragments)
+}
+
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum DockerError {
+    #[error("docker executable not found in PATH")]
+    #[diagnostic(
+        code(sandcage::docker::not_found),
+        help("Install Docker: https://docs.docker.com/get-docker/")
+    )]
+    DockerNotFound,
+
+    #[error("docker compose plugin not available")]
+    #[diagnostic(
+        code(sandcage::docker::compose_not_found),
+        help("Docker Compose V2 is required. Install it via Docker Desktop or 'docker compose' plugin.")
+    )]
+    ComposeNotFound,
+
+    #[error("Failed to determine current user UID/GID: {0}")]
+    #[diagnostic(code(sandcage::docker::id_failed))]
+    IdFailed(String),
+
+    #[error("Cannot determine home directory")]
+    #[diagnostic(code(sandcage::docker::no_home_dir))]
+    NoHomeDir,
+
+    #[error("Failed to write temporary compose file: {0}")]
+    #[diagnostic(code(sandcage::docker::tempfile_failed))]
+    TempfileFailed(#[source] std::io::Error),
+
+    #[error("Failed to spawn docker compose: {0}")]
+    #[diagnostic(code(sandcage::docker::spawn_failed))]
+    SpawnFailed(#[source] std::io::Error),
+
+    #[error("Service '{service}' exited with status {code}")]
+    #[diagnostic(code(sandcage::docker::service_failed))]
+    ServiceFailed { service: String, code: i32 },
+
+    #[error("Failed to create temporary build directory: {0}")]
+    #[diagnostic(code(sandcage::docker::temp_dir_failed))]
+    TempDirFailed(#[source] std::io::Error),
+
+    #[error("Failed to write Dockerfile to temp directory: {0}")]
+    #[diagnostic(code(sandcage::docker::dockerfile_write_failed))]
+    DockerfileWriteFailed(#[source] std::io::Error),
+
+    #[error("Failed to read build-hashes file: {0}")]
+    #[diagnostic(code(sandcage::docker::hash_read_failed))]
+    HashReadFailed(#[source] std::io::Error),
+
+    #[error("Failed to write build-hashes file: {0}")]
+    #[diagnostic(code(sandcage::docker::hash_write_failed))]
+    HashWriteFailed(#[source] std::io::Error),
+
+    #[error("docker build for '{image}' exited with status {code}")]
+    #[diagnostic(code(sandcage::docker::build_failed))]
+    BuildFailed { image: String, code: i32 },
+
+    #[error("Image '{image}' not found locally")]
+    #[diagnostic(
+        code(sandcage::docker::image_not_found),
+        help("Run `sandcage build` to build the required images.")
+    )]
+    ImageNotFound { image: String },
+
+    #[error("Service '{service}' is not registered")]
+    #[diagnostic(
+        code(sandcage::docker::unknown_service),
+        help("Available services: {available}")
+    )]
+    UnknownService { service: String, available: String },
+
+    #[error("Service '{service}' is disabled in config")]
+    #[diagnostic(
+        code(sandcage::docker::service_disabled),
+        help("Enable it with: services.{service}.enabled: true")
+    )]
+    ServiceDisabled { service: String },
+
+    #[error("ACP relay requires the 'bollard' feature")]
+    #[diagnostic(
+        code(sandcage::docker::acp_requires_bollard),
+        help("Rebuild sandcage with: cargo build --features bollard")
+    )]
+    AcpRequiresBollard,
+}
+
+pub type Result<T> = std::result::Result<T, DockerError>;
+
+pub fn require_docker() -> Result<PathBuf> {
+    which::which("docker").map_err(|_| DockerError::DockerNotFound)
+}
+
+pub async fn require_compose(docker: &Path) -> Result<()> {
+    let output = Command::new(docker)
+        .args(["compose", "version"])
+        .output()
+        .await
+        .map_err(|_| DockerError::ComposeNotFound)?;
+
+    if !output.status.success() {
+        return Err(DockerError::ComposeNotFound);
+    }
+    Ok(())
+}
+
+async fn id_flag(flag: &str) -> Result<String> {
+    let output = Command::new("id")
+        .arg(flag)
+        .output()
+        .await
+        .map_err(|e| DockerError::IdFailed(e.to_string()))?;
+
+    if !output.status.success() {
+        return Err(DockerError::IdFailed(format!(
+            "id {flag} exited with {}",
+            output.status
+        )));
+    }
+
+    Ok(String::from_utf8_lossy(&output.stdout).trim().to_string())
+}
+
+pub async fn build_compose_env(workspace: &Path, config: &SandcageConfig) -> Result<HashMap<String, String>> {
+    let home = dirs::home_dir().ok_or(DockerError::NoHomeDir)?;
+    let sandcage_home = home.join(".sandcage");
+
+    // On Windows, UID/GID passthrough is meaningless — use the container's
+    // built-in agent user (1000:1000). On Linux, match the host user.
+    let (uid, gid) = if cfg!(windows) {
+        ("1000".to_string(), "1000".to_string())
+    } else {
+        (id_flag("-u").await?, id_flag("-g").await?)
+    };
+
+    let container_dir = match &config.container_workspace {
+        Some(path) if path.starts_with('/') => path.clone(),
+        Some(path) => {
+            eprintln!(
+                "sandcage: warning: container_workspace '{}' is not absolute, ignoring",
+                path
+            );
+            default_container_dir(workspace)
+        }
+        None => default_container_dir(workspace),
+    };
+
+    let mut env = HashMap::new();
+    env.insert("SANDCAGE_UID".into(), uid);
+    env.insert("SANDCAGE_GID".into(), gid);
+    env.insert(
+        "SANDCAGE_WORKSPACE".into(),
+        workspace.to_string_lossy().into_owned(),
+    );
+    env.insert(
+        "SANDCAGE_HOME".into(),
+        sandcage_home.to_string_lossy().into_owned(),
+    );
+    env.insert("SANDCAGE_CONTAINER_DIR".into(), container_dir);
+
+    Ok(env)
+}
+
+pub async fn build_compose_context(workspace: &Path, config: &SandcageConfig, config_root: &Path) -> Result<crate::service::ComposeContext> {
+    let home = dirs::home_dir().ok_or(DockerError::NoHomeDir)?;
+    let sandcage_home = home.join(".sandcage");
+
+    let (uid, gid) = if cfg!(windows) {
+        ("1000".to_string(), "1000".to_string())
+    } else {
+        (id_flag("-u").await?, id_flag("-g").await?)
+    };
+
+    let container_dir = match &config.container_workspace {
+        Some(path) if path.starts_with('/') => path.clone(),
+        Some(path) => {
+            eprintln!(
+                "sandcage: warning: container_workspace '{}' is not absolute, ignoring",
+                path
+            );
+            default_container_dir(workspace)
+        }
+        None => default_container_dir(workspace),
+    };
+
+    let image = config.image.as_deref().unwrap_or("sandcage").to_string();
+
+    let agent_home = resolve_agent_home(&sandcage_home, config.home.as_deref());
+
+    Ok(crate::service::ComposeContext {
+        uid,
+        gid,
+        workspace: workspace.to_path_buf(),
+        container_dir,
+        sandcage_home,
+        image,
+        config_root: config_root.to_path_buf(),
+        forwarding_socket: None,
+        agent_home,
+    })
+}
+
+/// Resolve the agent home directory for a given home profile name.
+///
+/// Uses `~/.sandcage/homes/<name>/`. If the legacy `~/.sandcage/home/` exists
+/// and `~/.sandcage/homes/` does not, migrates it to `homes/default/`.
+pub fn resolve_agent_home(sandcage_home: &Path, profile: Option<&str>) -> PathBuf {
+    let name = profile.unwrap_or("default");
+    let homes_dir = sandcage_home.join("homes");
+    let legacy_home = sandcage_home.join("home");
+
+    if !homes_dir.exists() && legacy_home.exists() {
+        if let Err(e) = migrate_legacy_home(&legacy_home, &homes_dir) {
+            eprintln!("sandcage: warning: failed to migrate home/ → homes/default/: {e}");
+            return legacy_home;
+        }
+        eprintln!("sandcage: migrated home/ → homes/default/");
+    }
+
+    let agent_home = homes_dir.join(name);
+    if !agent_home.exists() {
+        if let Err(e) = std::fs::create_dir_all(&agent_home) {
+            eprintln!("sandcage: warning: failed to create home profile '{name}': {e}");
+        } else {
+            eprintln!("sandcage: created home profile '{name}'");
+        }
+    }
+
+    if name != "default" {
+        eprintln!("sandcage: home profile → {name}");
+    }
+
+    agent_home
+}
+
+fn migrate_legacy_home(legacy: &Path, homes_dir: &Path) -> std::result::Result<(), std::io::Error> {
+    let default_dir = homes_dir.join("default");
+    std::fs::create_dir_all(homes_dir)?;
+    std::fs::rename(legacy, &default_dir)?;
+    Ok(())
+}
+
+fn default_container_dir(workspace: &Path) -> String {
+    match workspace.file_name() {
+        Some(name) => format!("/workspace/{}", name.to_string_lossy()),
+        None => "/workspace".to_string(),
+    }
+}
+
+pub fn write_compose_tempfile(content: &str) -> Result<tempfile::NamedTempFile> {
+    let mut tmp = tempfile::Builder::new()
+        .prefix("sandcage-compose-")
+        .suffix(".yml")
+        .tempfile()
+        .map_err(DockerError::TempfileFailed)?;
+
+    tmp.write_all(content.as_bytes())
+        .map_err(DockerError::TempfileFailed)?;
+    tmp.flush().map_err(DockerError::TempfileFailed)?;
+
+    Ok(tmp)
+}
+
+pub async fn require_image(docker: &Path, image: &str) -> Result<()> {
+    let status = Command::new(docker)
+        .args(["image", "inspect", image])
+        .stdout(std::process::Stdio::null())
+        .stderr(std::process::Stdio::null())
+        .status()
+        .await;
+
+    match status {
+        Ok(s) if s.success() => Ok(()),
+        _ => Err(DockerError::ImageNotFound {
+            image: image.to_string(),
+        }),
+    }
+}
+
+pub fn expand_mount_path(mount: &str) -> String {
+    let Some(colon_pos) = mount.find(':') else {
+        return mount.to_string();
+    };
+
+    let host_path = &mount[..colon_pos];
+    let rest = &mount[colon_pos..];
+
+    let expanded = if host_path == "~" {
+        match dirs::home_dir() {
+            Some(home) => home.to_string_lossy().into_owned(),
+            None => return mount.to_string(),
+        }
+    } else if let Some(suffix) = host_path.strip_prefix("~/") {
+        match dirs::home_dir() {
+            Some(home) => format!("{}/{suffix}", home.to_string_lossy()),
+            None => return mount.to_string(),
+        }
+    } else {
+        return mount.to_string();
+    };
+
+    let normalized = expanded.replace('\\', "/");
+    format!("{normalized}{rest}")
+}
+
+/// Walk `.sandcage/overlay/` and `.sandcage/local/overlay/` and produce
+/// bind-mount strings mapping each file into the container workspace.
+/// Local overlay files appear later in the list so Docker uses them
+/// (last mount wins).
+pub fn collect_overlay_mounts(workspace: &Path, container_dir: &str) -> Vec<String> {
+    let mut mounts = Vec::new();
+
+    let overlay_dirs = [
+        workspace.join(".sandcage").join("overlay"),
+        workspace.join(".sandcage").join("local").join("overlay"),
+    ];
+
+    for overlay_dir in &overlay_dirs {
+        if !overlay_dir.is_dir() {
+            continue;
+        }
+        for entry in walkdir::WalkDir::new(overlay_dir)
+            .min_depth(1)
+            .into_iter()
+            .filter_map(|e| e.ok())
+        {
+            if !entry.file_type().is_file() {
+                continue;
+            }
+            let rel = entry.path().strip_prefix(overlay_dir).unwrap();
+            let host_path = entry.path().to_string_lossy().replace('\\', "/");
+            let container_path = format!(
+                "{}/{}",
+                container_dir,
+                rel.to_string_lossy().replace('\\', "/")
+            );
+            mounts.push(format!("{host_path}:{container_path}:ro"));
+        }
+    }
+
+    mounts
+}
+
+/// Resolve shadow mounts for a launch: recipe-contributed dirs + explicit `[shadow]` config.
+pub fn collect_shadow_mounts(
+    config: &SandcageConfig,
+    config_root: &Path,
+    container_dir: &str,
+) -> Vec<ShadowMount> {
+    let recipes = config
+        .toolchains
+        .as_ref()
+        .map(|tc| crate::recipe::resolve_recipes(tc, config_root).unwrap_or_default())
+        .unwrap_or_default();
+    let recipe_dirs = crate::shadow::recipe_shadow_dirs(&recipes);
+    crate::shadow::resolve_shadow_mounts(config.shadow.as_ref(), &recipe_dirs, config_root, container_dir)
+}
+
+/// Project-scoped directory holding generated spoof scripts (gitignored via `local/`).
+pub fn spoof_bin_dir(config_root: &Path) -> PathBuf {
+    config_root.join(".sandcage").join("local").join("spoof").join("bin")
+}
+
+/// The bind-mount string placing generated spoof scripts on PATH (read-only),
+/// or `None` if no spoof dir exists for this project.
+pub fn collect_spoof_mount(config_root: &Path) -> Option<String> {
+    let dir = spoof_bin_dir(config_root);
+    if dir.is_dir() {
+        Some(format!("{}:{}:ro", dir.display(), SPOOF_CONTAINER_DIR))
+    } else {
+        None
+    }
+}
+
+/// Regenerate spoof scripts for the merged config into the project spoof dir.
+/// Clears any stale scripts first. No-op (and removes the dir) if no tools are configured.
+pub fn generate_spoof_dir(config: &SandcageConfig, config_root: &Path) -> Result<()> {
+    let dir = spoof_bin_dir(config_root);
+    if dir.exists() {
+        std::fs::remove_dir_all(&dir).map_err(DockerError::TempDirFailed)?;
+    }
+    let Some(tools) = &config.tools else { return Ok(()) };
+    let any_script = tools.values().any(|t| {
+        matches!(
+            t.mode.as_deref().map(crate::spoof::ToolMode::parse),
+            Some(crate::spoof::ToolMode::Spoof) | Some(crate::spoof::ToolMode::Host)
+        )
+    });
+    if !any_script {
+        return Ok(());
+    }
+    std::fs::create_dir_all(&dir).map_err(DockerError::TempDirFailed)?;
+    crate::spoof::generate_spoof_scripts(tools, &dir)
+        .map_err(|e| DockerError::TempDirFailed(std::io::Error::other(e.to_string())))?;
+    Ok(())
+}
+
+/// Create host directories for `directory`-backend shadow mounts.
+pub fn ensure_shadow_dirs(mounts: &[ShadowMount]) -> Result<()> {
+    for m in mounts {
+        if let Some(host) = &m.host_path {
+            std::fs::create_dir_all(host).map_err(DockerError::TempDirFailed)?;
+        }
+    }
+    Ok(())
+}
+
+pub fn resolve_security_opts(config: &SandcageConfig, project_root: &Path) -> Vec<String> {
+    let Some(profiles) = &config.profiles else {
+        return vec![];
+    };
+    let mut opts = Vec::new();
+
+    if let Some(ref apparmor_path) = profiles.apparmor {
+        let resolved = project_root.join(apparmor_path);
+        if resolved.exists() {
+            let profile_name = extract_apparmor_name(&resolved)
+                .unwrap_or_else(|| "sandcage-cage".to_string());
+            opts.push(format!("apparmor={profile_name}"));
+        } else {
+            eprintln!(
+                "sandcage: warning: AppArmor profile '{}' not found, skipping",
+                resolved.display()
+            );
+        }
+    }
+
+    if let Some(ref seccomp_path) = profiles.seccomp {
+        let resolved = project_root.join(seccomp_path);
+        if resolved.exists() {
+            let abs = resolved.canonicalize().unwrap_or(resolved);
+            opts.push(format!("seccomp={}", abs.display()));
+        } else {
+            eprintln!(
+                "sandcage: warning: seccomp profile '{}' not found, skipping",
+                resolved.display()
+            );
+        }
+    }
+
+    opts
+}
+
+fn extract_apparmor_name(path: &Path) -> Option<String> {
+    let content = std::fs::read_to_string(path).ok()?;
+    for line in content.lines() {
+        let trimmed = line.trim();
+        if let Some(rest) = trimmed.strip_prefix("profile ") {
+            let name = rest.split_whitespace().next()?;
+            return Some(name.to_string());
+        }
+    }
+    None
+}
+
+pub fn build_run_args(
+    service: &str,
+    compose_path: &str,
+    config: &SandcageConfig,
+    config_root: &Path,
+    container_dir: &str,
+    shell_override: bool,
+    extra_args: &[String],
+    forwarding_socket: Option<&Path>,
+    security_opts: &[String],
+) -> Vec<String> {
+    let mut args = vec![
+        "compose".to_string(),
+        "-f".to_string(),
+        compose_path.to_string(),
+        "run".to_string(),
+        "--rm".to_string(),
+    ];
+
+    if let Some(ref env_map) = config.env {
+        for (key, value) in env_map {
+            args.push("-e".to_string());
+            args.push(format!("{key}={value}"));
+        }
+    }
+
+    if let Some(ref mount_list) = config.mounts {
+        for mount in mount_list {
+            if mount.contains(':') {
+                args.push("-v".to_string());
+                args.push(expand_mount_path(mount));
+            }
+        }
+    }
+
+    // SSH mode-aware mount
+    match config.ssh_mode.as_deref() {
+        Some("volume") => {
+            args.push("-v".to_string());
+            args.push("sandcage-ssh:/home/agent/.ssh:ro".to_string());
+        }
+        Some("bind") => {
+            let mount = expand_mount_path("~/.ssh:/home/agent/.ssh:ro");
+            args.push("-v".to_string());
+            args.push(mount);
+        }
+        _ => {} // "none" or absent: no SSH mount
+    }
+
+    // Overlay mounts from .sandcage/overlay/ and .sandcage/local/overlay/
+    let overlay_enabled = config.overlay.as_ref()
+        .and_then(|o| o.enabled)
+        .unwrap_or(true);
+    if overlay_enabled {
+        for mount in collect_overlay_mounts(config_root, container_dir) {
+            args.push("-v".to_string());
+            args.push(mount);
+        }
+    }
+
+    // Shadow mounts (volume + directory as -v; tmpfs unsupported on `docker compose run`).
+    let shadow_mounts = collect_shadow_mounts(config, config_root, container_dir);
+    for bind in crate::shadow::shadow_bind_strings(&shadow_mounts) {
+        args.push("-v".to_string());
+        args.push(bind);
+    }
+    for path in crate::shadow::shadow_tmpfs_paths(&shadow_mounts) {
+        eprintln!(
+            "sandcage: warning: tmpfs shadow dir '{path}' is not supported on the compose backend; \
+             use the default (bollard) backend for tmpfs shadows — skipping"
+        );
+    }
+
+    if let Some(spoof) = collect_spoof_mount(config_root) {
+        args.push("-v".to_string());
+        args.push(spoof);
+    }
+
+    if let Some(sock) = forwarding_socket {
+        args.push("-v".to_string());
+        args.push(format!(
+            "{}:{}",
+            sock.display(),
+            crate::forwarding::CONTAINER_SOCKET_PATH
+        ));
+    }
+
+    if shell_override {
+        args.push("--entrypoint".to_string());
+        args.push("/bin/zsh".to_string());
+    }
+
+    for opt in security_opts {
+        args.push("--security-opt".to_string());
+        args.push(opt.clone());
+    }
+
+    args.push(service.to_string());
+
+    if !shell_override
+        && let Some(ref all_agent_args) = config.agent_args
+        && let Some(default_args) = all_agent_args.get(service)
+    {
+        for arg in default_args {
+            args.push(arg.clone());
+        }
+    }
+
+    for arg in extra_args {
+        args.push(arg.clone());
+    }
+
+    args
+}
+
+pub async fn run_service(
+    service: &str,
+    workspace: &Path,
+    config: &SandcageConfig,
+    config_root: &Path,
+    registry: &crate::service::registry::ServiceRegistry,
+    shell_override: bool,
+    extra_args: &[String],
+) -> Result<()> {
+    let svc = registry.get(service).ok_or_else(|| DockerError::UnknownService {
+        service: service.to_string(),
+        available: registry.names().collect::<Vec<_>>().join(", "),
+    })?;
+
+    if !svc.enabled() {
+        return Err(DockerError::ServiceDisabled {
+            service: service.to_string(),
+        });
+    }
+
+    let ctx = build_compose_context(workspace, config, config_root).await?;
+
+    ensure_shadow_dirs(&collect_shadow_mounts(config, config_root, &ctx.container_dir))?;
+
+    generate_spoof_dir(config, config_root)?;
+
+    // --- Forwarding daemon lifecycle ---
+    let sandcage_home = dirs::home_dir()
+        .map(|h| h.join(".sandcage"))
+        .unwrap_or_else(|| PathBuf::from(".sandcage"));
+
+    let has_host_tools = config
+        .tools
+        .as_ref()
+        .map(|t| {
+            t.values().any(|tc| {
+                tc.mode.as_deref().map(crate::spoof::ToolMode::parse)
+                    == Some(crate::spoof::ToolMode::Host)
+            })
+        })
+        .unwrap_or(false);
+
+    let forwarding_session: Option<(String, PathBuf, tokio::task::JoinHandle<()>)> = if has_host_tools {
+        let session_id = crate::forwarding::generate_session_id();
+        crate::forwarding::create_session_dir(&sandcage_home, &session_id)
+            .map_err(|e| DockerError::TempDirFailed(e))?;
+        let socket = crate::forwarding::socket_path(&sandcage_home, &session_id);
+
+        eprintln!("sandcage: forwarding daemon → {}", socket.display());
+
+        #[cfg(unix)]
+        let daemon_handle = {
+            let audit = crate::forwarding::audit_log_path(&sandcage_home, &session_id);
+            let mapping = crate::forwarding::PathMapping {
+                container_prefix: ctx.container_dir.clone(),
+                host_prefix: workspace.to_string_lossy().to_string(),
+            };
+            let daemon_socket = socket.clone();
+            let config_for_daemon = config.clone();
+            tokio::spawn(async move {
+                if let Err(e) = crate::forwarding::serve_loop(
+                    &daemon_socket,
+                    &audit,
+                    &mapping,
+                    &config_for_daemon,
+                    true,
+                ).await {
+                    eprintln!("sandcage: forwarding daemon error: {e}");
+                }
+            })
+        };
+        #[cfg(not(unix))]
+        let daemon_handle = {
+            eprintln!("sandcage: forwarding daemon not available on this platform");
+            tokio::spawn(async {})
+        };
+
+        Some((session_id, socket, daemon_handle))
+    } else {
+        None
+    };
+
+    let forwarding_socket = forwarding_session.as_ref().map(|(_, sock, _)| sock.clone());
+
+    if let Some(ref profiles) = config.profiles {
+        if let Some(ref seccomp_path) = profiles.seccomp {
+            let resolved = config_root.join(seccomp_path);
+            if crate::forwarding::seccomp_uses_notify(&resolved) {
+                eprintln!("sandcage: seccomp profile uses SCMP_ACT_NOTIFY — fermata hook available");
+            }
+        }
+    }
+
+    let mut ctx = ctx;
+    ctx.forwarding_socket = forwarding_socket;
+
+    let backend: Box<dyn crate::backend::ContainerBackend> = match config.compose_backend.as_deref() {
+        Some("compose") => Box::new(crate::backend::compose::ComposeBackend),
+        _ => crate::backend::default_backend()?,
+    };
+    backend.check_availability().await?;
+
+    let image_tag = format!("{}:latest", ctx.image);
+    if !backend.image_exists(&image_tag).await? {
+        return Err(DockerError::ImageNotFound { image: image_tag });
+    }
+
+    if config.ssh_mode.as_deref() == Some("volume") {
+        if !backend.volume_exists("sandcage-ssh").await? {
+            eprintln!(
+                "sandcage: SSH volume not found — run 'sandcage setup ssh --refresh' to populate it"
+            );
+        }
+    }
+
+    let exit_code = backend
+        .run_interactive(svc, &ctx, config, registry, shell_override, extra_args)
+        .await?;
+
+    // --- Forwarding daemon cleanup ---
+    if let Some((session_id, _, daemon_handle)) = forwarding_session {
+        daemon_handle.abort();
+        crate::forwarding::cleanup_session_dir(&sandcage_home, &session_id);
+    }
+
+    if exit_code != 0 {
+        return Err(DockerError::ServiceFailed {
+            service: service.to_string(),
+            code: exit_code,
+        });
+    }
+
+    Ok(())
+}
+
+// ---------------------------------------------------------------------------
+// Build with cache awareness
+// ---------------------------------------------------------------------------
+
+/// SHA-256 hex digest of the given string content.
+fn sha256_hex(content: &str) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(content.as_bytes());
+    hex::encode(hasher.finalize())
+}
+
+/// Path to the build-hashes file: `~/.sandcage/.build-hashes`.
+fn build_hashes_path() -> Result<PathBuf> {
+    let home = dirs::home_dir().ok_or(DockerError::NoHomeDir)?;
+    Ok(home.join(".sandcage").join(".build-hashes"))
+}
+
+/// Read the stored hashes from `~/.sandcage/.build-hashes`.
+/// Returns an empty map if the file does not exist.
+fn read_stored_hashes(path: &Path) -> Result<HashMap<String, String>> {
+    if !path.exists() {
+        return Ok(HashMap::new());
+    }
+
+    let content = std::fs::read_to_string(path).map_err(DockerError::HashReadFailed)?;
+    let mut map = HashMap::new();
+    for line in content.lines() {
+        let line = line.trim();
+        if line.is_empty() {
+            continue;
+        }
+        if let Some((name, hash)) = line.split_once(':') {
+            map.insert(name.to_string(), hash.to_string());
+        }
+    }
+    Ok(map)
+}
+
+/// Persist the full hashes map back to the file.
+fn write_stored_hashes(path: &Path, hashes: &HashMap<String, String>) -> Result<()> {
+    // Ensure parent directory exists.
+    if let Some(parent) = path.parent() {
+        std::fs::create_dir_all(parent).map_err(DockerError::HashWriteFailed)?;
+    }
+
+    // Build deterministic output (sorted keys).
+    let mut lines: Vec<String> = hashes
+        .iter()
+        .map(|(k, v)| format!("{k}:{v}"))
+        .collect();
+    lines.sort();
+    let content = lines.join("\n") + "\n";
+
+    std::fs::write(path, content).map_err(DockerError::HashWriteFailed)?;
+    Ok(())
+}
+
+/// Build a single image from inline Dockerfile content (temp build context).
+async fn build_one_image_from_content(docker: &Path, image: &str, dockerfile_content: &str, no_cache: bool) -> Result<()> {
+    let tmp_dir = tempfile::Builder::new()
+        .prefix("sandcage-build-")
+        .tempdir()
+        .map_err(DockerError::TempDirFailed)?;
+
+    let dockerfile_path = tmp_dir.path().join("Dockerfile");
+    std::fs::write(&dockerfile_path, dockerfile_content)
+        .map_err(DockerError::DockerfileWriteFailed)?;
+
+    for svc in crate::service::builtin::all() {
+        if let (Some(name), Some(script)) = (svc.entrypoint_name.as_ref(), svc.entrypoint_script.as_ref())
+            && name.starts_with("sandcage-")
+        {
+            let dir = tmp_dir.path().join("images").join(&svc.name);
+            std::fs::create_dir_all(&dir).map_err(DockerError::TempDirFailed)?;
+            std::fs::write(dir.join("entrypoint.sh"), script)
+                .map_err(DockerError::DockerfileWriteFailed)?;
+        }
+    }
+
+    run_docker_build(docker, image, tmp_dir.path(), None, no_cache).await
+}
+
+/// Build a single image from a user-provided path.
+/// If the path is a directory, it's used as the build context.
+/// If the path is a file, it's used as the Dockerfile with a temp context.
+async fn build_one_image_from_path(docker: &Path, image: &str, override_path: &Path, no_cache: bool) -> Result<()> {
+    if override_path.is_dir() {
+        run_docker_build(docker, image, override_path, None, no_cache).await
+    } else {
+        let tmp_dir = tempfile::Builder::new()
+            .prefix("sandcage-build-")
+            .tempdir()
+            .map_err(DockerError::TempDirFailed)?;
+
+        run_docker_build(docker, image, tmp_dir.path(), Some(override_path), no_cache).await
+    }
+}
+
+async fn run_docker_build(
+    docker: &Path,
+    image: &str,
+    context: &Path,
+    dockerfile: Option<&Path>,
+    no_cache: bool,
+) -> Result<()> {
+    let mut cmd = Command::new(docker);
+    cmd.args(["build", "-t", &format!("{image}:latest")]);
+
+    if no_cache {
+        cmd.arg("--no-cache");
+    }
+
+    if let Some(df) = dockerfile {
+        cmd.args(["-f", &df.to_string_lossy()]);
+    }
+
+    cmd.arg(context)
+        .stdin(std::process::Stdio::inherit())
+        .stdout(std::process::Stdio::inherit())
+        .stderr(std::process::Stdio::inherit());
+
+    let status = cmd.status().await.map_err(DockerError::SpawnFailed)?;
+
+    if !status.success() {
+        return Err(DockerError::BuildFailed {
+            image: image.to_string(),
+            code: status.code().unwrap_or(-1),
+        });
+    }
+
+    Ok(())
+}
+
+/// Resolve the Dockerfile content for hashing purposes.
+/// Returns the content string for override files/dirs, or None if the path is invalid.
+fn read_dockerfile_at(path: &Path) -> Result<String> {
+    let dockerfile_path = if path.is_dir() {
+        path.join("Dockerfile")
+    } else {
+        path.to_path_buf()
+    };
+    std::fs::read_to_string(&dockerfile_path).map_err(DockerError::HashReadFailed)
+}
+
+/// Build all three sandcage images with cache awareness.
+///
+/// * Resolves layered config to check for Dockerfile overrides.
+/// * When `force` is `true`, every image is rebuilt regardless of the stored hash.
+/// * Otherwise, an image is skipped when its Dockerfile hash matches the stored value.
+/// * After a successful build the hash is updated in `~/.sandcage/.build-hashes`.
+pub async fn build_images(force: bool, service_filter: &[String]) -> Result<()> {
+    let docker = require_docker()?;
+
+    let home = dirs::home_dir().ok_or(DockerError::NoHomeDir)?;
+    let global_config = home.join(".sandcage").join("config.toml");
+    let project_dir = std::env::current_dir().unwrap_or_default();
+    let project_config = project_dir.join(".sandcage").join("config.toml");
+
+    // Global overrides are always trusted.
+    let global_cfg = crate::config::resolve_config(Some(&global_config), None, None)
+        .unwrap_or_default();
+
+    // Validate service names if provided
+    if !service_filter.is_empty() {
+        let registry = crate::service::registry::build_default_registry(&global_cfg);
+        let known: Vec<&str> = registry.names().collect();
+        for name in service_filter {
+            if !known.contains(&name.as_str()) {
+                return Err(DockerError::UnknownService {
+                    service: name.clone(),
+                    available: known.join(", "),
+                });
+            }
+        }
+        eprintln!("sandcage: building for services: {}", service_filter.join(", "));
+    }
+
+    let mut overrides = global_cfg.dockerfiles.clone().unwrap_or_default();
+
+    // Project overrides require the project to be in trusted_projects.
+    let project_cfg = if project_config.exists() {
+        crate::config::load(&project_config).ok()
+    } else {
+        None
+    };
+
+    // Compute trust once; used for both dockerfiles and toolchains overrides.
+    let trusted = crate::config::load_trusted_projects(&global_config);
+    let is_trusted = trusted.iter().any(|p| {
+        let canonical_trusted = std::fs::canonicalize(p).unwrap_or_else(|_| p.clone());
+        let canonical_project = std::fs::canonicalize(&project_dir)
+            .unwrap_or_else(|_| project_dir.clone());
+        canonical_project.starts_with(canonical_trusted)
+    });
+
+    if let Some(ref pcfg) = project_cfg
+        && pcfg.dockerfiles.is_some()
+    {
+        if is_trusted {
+            overrides.extend(pcfg.dockerfiles.clone().unwrap_or_default());
+        } else {
+            eprintln!(
+                "sandcage: warning: project Dockerfile overrides ignored (not in trusted_projects)"
+            );
+            eprintln!(
+                "sandcage: add this project to trusted_projects in ~/.sandcage/config.toml"
+            );
+        }
+    }
+
+    let merged_cfg = if let Some(ref pcfg) = project_cfg {
+        let mut merged = global_cfg.clone();
+        if let Some(ref tc) = pcfg.toolchains {
+            merged.toolchains = Some(filter_untrusted_toolchains(tc.clone(), is_trusted));
+        }
+        merged
+    } else {
+        global_cfg.clone()
+    };
+
+    let image_name = global_cfg.image.as_deref().unwrap_or("sandcage");
+    let composed = compose_dockerfile(&merged_cfg, &project_dir);
+    let images: Vec<(&str, &str)> = vec![
+        (image_name, &composed),
+    ];
+
+    let hashes_path = build_hashes_path()?;
+    let mut stored = read_stored_hashes(&hashes_path)?;
+
+    for (image, bundled_dockerfile) in images {
+        let short_name = image.strip_prefix("sandcage-").unwrap_or(image);
+        let override_path = overrides.get(short_name);
+
+        let current_hash = if let Some(path) = override_path {
+            sha256_hex(&read_dockerfile_at(path)?)
+        } else {
+            sha256_hex(bundled_dockerfile)
+        };
+
+        let needs_build = force || stored.get(image) != Some(&current_hash);
+
+        if needs_build {
+            if force {
+                eprintln!("{image}: rebuilding (--force)");
+            } else if override_path.is_some() {
+                eprintln!("{image}: rebuilding (custom Dockerfile changed)");
+            } else {
+                eprintln!("{image}: rebuilding (Dockerfile changed)");
+            }
+
+            if let Some(path) = override_path {
+                build_one_image_from_path(&docker, image, path, force).await?;
+            } else {
+                build_one_image_from_content(&docker, image, bundled_dockerfile, force).await?;
+            }
+
+            stored.insert(image.to_string(), current_hash);
+            write_stored_hashes(&hashes_path, &stored)?;
+        } else {
+            eprintln!("{image}: up to date");
+        }
+    }
+
+    Ok(())
+}
+
+/// Volume-name prefix identifying this project's per-project shadow volumes.
+pub fn project_volume_prefix(project_root: &Path) -> String {
+    format!(
+        "sandcage-{}-{}-",
+        crate::shadow::project_slug(project_root),
+        crate::shadow::project_hash(project_root)
+    )
+}
+
+/// List and (optionally) remove this project's shadow volumes. `apply = false` is a dry run.
+pub async fn clean(project_root: &Path, apply: bool) -> Result<()> {
+    let docker = require_docker()?;
+    let prefix = project_volume_prefix(project_root);
+
+    let output = Command::new(&docker)
+        .args(["volume", "ls", "--quiet", "--filter", &format!("name={prefix}")])
+        .output()
+        .await
+        .map_err(DockerError::SpawnFailed)?;
+
+    let names: Vec<String> = String::from_utf8_lossy(&output.stdout)
+        .lines()
+        .map(|l| l.trim().to_string())
+        .filter(|l| l.starts_with(&prefix)) // docker filter is substring; re-assert prefix
+        .collect();
+
+    if names.is_empty() {
+        eprintln!("sandcage: no shadow volumes for this project");
+        return Ok(());
+    }
+
+    for name in &names {
+        if apply {
+            let status = Command::new(&docker)
+                .args(["volume", "rm", "-f", name])
+                .status()
+                .await
+                .map_err(DockerError::SpawnFailed)?;
+            eprintln!("{}", if status.success() { format!("removed {name}") } else { format!("sandcage: warning: failed to remove {name}") });
+        } else {
+            eprintln!("would remove {name}");
+        }
+    }
+
+    if !apply {
+        eprintln!("\nsandcage: dry run — re-run with `--yes` to remove {} volume(s)", names.len());
+    }
+    Ok(())
+}
+
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::path::PathBuf;
+
+    #[test]
+    fn generated_compose_contains_all_services() {
+        use crate::service::ComposeContext;
+        use crate::service::registry::build_default_registry;
+        use crate::service::compose::generate_compose;
+
+        let config = SandcageConfig::default();
+        let registry = build_default_registry(&config);
+        let ctx = ComposeContext {
+            uid: "1000".to_string(),
+            gid: "1000".to_string(),
+            workspace: PathBuf::from("/tmp/test"),
+            container_dir: "/workspace/test".to_string(),
+            sandcage_home: PathBuf::from("/home/user/.sandcage"),
+            image: "sandcage".to_string(),
+            config_root: PathBuf::from("/tmp/test"),
+            forwarding_socket: None,
+            agent_home: PathBuf::from("/home/user/.sandcage/homes/default"),
+        };
+        let yaml = generate_compose(&registry, &ctx);
+
+        assert!(yaml.contains("claude:"), "should contain claude service");
+        assert!(yaml.contains("codex:"), "should contain codex service");
+        assert!(yaml.contains("gemini:"), "should contain gemini service");
+        assert!(yaml.contains("shell:"), "should contain shell service");
+    }
+
+    #[tokio::test]
+    async fn build_compose_env_contains_required_keys() {
+        let workspace = PathBuf::from("/tmp/test-workspace");
+        let env = build_compose_env(&workspace, &SandcageConfig::default()).await.expect("build_compose_env");
+
+        assert!(env.contains_key("SANDCAGE_UID"), "missing SANDCAGE_UID");
+        assert!(env.contains_key("SANDCAGE_GID"), "missing SANDCAGE_GID");
+        assert!(env.contains_key("SANDCAGE_WORKSPACE"), "missing SANDCAGE_WORKSPACE");
+        assert!(env.contains_key("SANDCAGE_HOME"), "missing SANDCAGE_HOME");
+        assert!(env.contains_key("SANDCAGE_CONTAINER_DIR"), "missing SANDCAGE_CONTAINER_DIR");
+    }
+
+    #[tokio::test]
+    async fn build_compose_env_workspace_matches() {
+        let workspace = PathBuf::from("/my/project");
+        let env = build_compose_env(&workspace, &SandcageConfig::default()).await.expect("build_compose_env");
+        assert_eq!(env["SANDCAGE_WORKSPACE"], "/my/project");
+    }
+
+    #[tokio::test]
+    async fn build_compose_env_home_ends_with_sandcage() {
+        let workspace = PathBuf::from("/tmp");
+        let env = build_compose_env(&workspace, &SandcageConfig::default()).await.expect("build_compose_env");
+        assert!(
+            env["SANDCAGE_HOME"].ends_with(".sandcage"),
+            "SANDCAGE_HOME should end with .sandcage, got: {}",
+            env["SANDCAGE_HOME"]
+        );
+    }
+
+    #[tokio::test]
+    async fn uid_gid_are_numeric() {
+        let workspace = PathBuf::from("/tmp");
+        let env = build_compose_env(&workspace, &SandcageConfig::default()).await.expect("build_compose_env");
+
+        let uid: u32 = env["SANDCAGE_UID"]
+            .parse()
+            .expect("UID should be numeric");
+        let gid: u32 = env["SANDCAGE_GID"]
+            .parse()
+            .expect("GID should be numeric");
+
+        // Basic sanity — UIDs/GIDs are non-negative (they're u32)
+        assert!(uid < 1_000_000, "UID seems unreasonably large: {uid}");
+        assert!(gid < 1_000_000, "GID seems unreasonably large: {gid}");
+    }
+
+    #[test]
+    fn write_compose_tempfile_creates_valid_yaml() {
+        let content = "services:\n  test:\n    image: test:latest\n";
+        let tmp = write_compose_tempfile(content).expect("write_compose_tempfile");
+        let read_back = std::fs::read_to_string(tmp.path()).expect("read tempfile");
+        assert_eq!(read_back, content, "tempfile content should match input");
+    }
+
+    #[test]
+    fn require_docker_finds_docker_or_fails_cleanly() {
+        // This test documents the behavior — it either finds docker or returns
+        // DockerNotFound. We don't assert which, since CI may or may not have docker.
+        let result = require_docker();
+        match result {
+            Ok(path) => assert!(path.to_string_lossy().contains("docker")),
+            Err(DockerError::DockerNotFound) => { /* expected on machines without docker */ }
+            Err(e) => panic!("unexpected error: {e}"),
+        }
+    }
+
+    // -----------------------------------------------------------------------
+    // build_images / cache-awareness tests
+    // -----------------------------------------------------------------------
+
+    #[test]
+    fn dockerfiles_are_bundled() {
+        assert!(!DOCKERFILE_BASE.is_empty(), "base Dockerfile should not be empty");
+        assert!(DOCKERFILE_BASE.contains(FRAGMENT_MARKER), "base should contain fragment marker");
+    }
+
+    #[test]
+    fn compose_dockerfile_injects_fragments() {
+        let mut config = SandcageConfig::default();
+        let mut tc = std::collections::HashMap::new();
+        tc.insert("uv".to_string(), toml::Value::Boolean(true));
+        config.toolchains = Some(tc);
+
+        let result = compose_dockerfile(&config, std::path::Path::new("/proj"));
+        assert!(result.contains("astral.sh/uv"), "uv fragment should be injected");
+        assert!(!result.contains(FRAGMENT_MARKER), "marker should be replaced");
+    }
+
+    #[test]
+    fn compose_dockerfile_no_toolchains() {
+        let config = SandcageConfig::default();
+        let result = compose_dockerfile(&config, std::path::Path::new("/proj"));
+        assert!(!result.contains(FRAGMENT_MARKER), "marker should always be replaced");
+    }
+
+    #[test]
+    fn compose_dockerfile_disabled_toolchain() {
+        let mut config = SandcageConfig::default();
+        let mut tc = std::collections::HashMap::new();
+        tc.insert("uv".to_string(), toml::Value::Boolean(false));
+        config.toolchains = Some(tc);
+
+        let result = compose_dockerfile(&config, std::path::Path::new("/proj"));
+        assert!(!result.contains("astral.sh/uv"), "disabled toolchain should not be injected");
+    }
+
+    #[test]
+    fn custom_toolchain_table_is_dropped_when_untrusted() {
+        use crate::recipe::FragmentSource;
+
+        // Project config with a custom (table) toolchain and a built-in (bool) toolchain.
+        let mut tc = std::collections::HashMap::new();
+        tc.insert("uv".to_string(), toml::Value::Boolean(true));
+        let mut table = toml::value::Table::new();
+        table.insert("fragment".into(), toml::Value::String("zig.Dockerfile".into()));
+        tc.insert("zig".to_string(), toml::Value::Table(table));
+
+        let filtered = filter_untrusted_toolchains(tc, false);
+        assert!(filtered.contains_key("uv"), "built-in bool toolchain kept");
+        assert!(!filtered.contains_key("zig"), "custom table toolchain dropped when untrusted");
+
+        // sanity: FragmentSource still importable (keeps the recipe dep wired)
+        let _ = FragmentSource::Embedded("x");
+    }
+
+    #[test]
+    fn custom_toolchain_table_is_kept_when_trusted() {
+        let mut tc = std::collections::HashMap::new();
+        let mut table = toml::value::Table::new();
+        table.insert("fragment".into(), toml::Value::String("zig.Dockerfile".into()));
+        tc.insert("zig".to_string(), toml::Value::Table(table));
+
+        let filtered = filter_untrusted_toolchains(tc, true);
+        assert!(filtered.contains_key("zig"), "custom toolchain kept when trusted");
+    }
+
+    #[test]
+    fn sha256_hex_is_deterministic() {
+        let content = "FROM ubuntu:22.04\nRUN echo hello\n";
+        let h1 = sha256_hex(content);
+        let h2 = sha256_hex(content);
+        assert_eq!(h1, h2, "sha256_hex must be deterministic");
+        // SHA-256 produces 64 hex chars
+        assert_eq!(h1.len(), 64, "sha256_hex should produce 64-char hex string");
+    }
+
+    #[test]
+    fn sha256_hex_differs_for_different_input() {
+        let h1 = sha256_hex("FROM ubuntu:22.04\n");
+        let h2 = sha256_hex("FROM debian:bookworm\n");
+        assert_ne!(h1, h2, "different content must yield different hash");
+    }
+
+    #[test]
+    fn hash_file_roundtrip() {
+        let tmp = tempfile::tempdir().expect("create temp dir");
+        let path = tmp.path().join(".build-hashes");
+
+        let mut hashes = HashMap::new();
+        hashes.insert("sandcage".to_string(), "aabbcc".to_string());
+        hashes.insert("sandcage-claude".to_string(), "ddeeff".to_string());
+
+        write_stored_hashes(&path, &hashes).expect("write hashes");
+        let loaded = read_stored_hashes(&path).expect("read hashes");
+
+        assert_eq!(loaded.get("sandcage").map(String::as_str), Some("aabbcc"));
+        assert_eq!(loaded.get("sandcage-claude").map(String::as_str), Some("ddeeff"));
+    }
+
+    #[test]
+    fn read_stored_hashes_returns_empty_when_file_missing() {
+        let tmp = tempfile::tempdir().expect("create temp dir");
+        let path = tmp.path().join("nonexistent");
+
+        let result = read_stored_hashes(&path).expect("read hashes on missing file");
+        assert!(result.is_empty(), "should return empty map when file does not exist");
+    }
+
+    #[test]
+    fn cache_hit_detection_same_hash() {
+        let dockerfile = "FROM ubuntu:22.04\n";
+        let hash = sha256_hex(dockerfile);
+
+        let mut stored: HashMap<String, String> = HashMap::new();
+        stored.insert("sandcage".to_string(), hash.clone());
+
+        let needs_build = stored.get("sandcage").map_or(true, |h| h != &hash);
+        assert!(!needs_build, "same hash should be a cache hit (no rebuild needed)");
+    }
+
+    #[test]
+    fn cache_miss_detection_different_hash() {
+        let dockerfile = "FROM ubuntu:22.04\n";
+        let current_hash = sha256_hex(dockerfile);
+
+        let mut stored: HashMap<String, String> = HashMap::new();
+        stored.insert("sandcage".to_string(), "old_stale_hash".to_string());
+
+        let needs_build = stored.get("sandcage").map_or(true, |h| h != &current_hash);
+        assert!(needs_build, "different hash should be a cache miss (rebuild needed)");
+    }
+
+    #[test]
+    fn cache_miss_detection_missing_entry() {
+        let dockerfile = "FROM ubuntu:22.04\n";
+        let current_hash = sha256_hex(dockerfile);
+        let stored: HashMap<String, String> = HashMap::new();
+
+        let needs_build = stored.get("sandcage").map_or(true, |h| h != &current_hash);
+        assert!(needs_build, "missing entry should be treated as a cache miss");
+    }
+
+    #[test]
+    fn force_flag_bypasses_cache() {
+        // Even when hash matches, force=true means needs_build is true
+        let dockerfile = "FROM ubuntu:22.04\n";
+        let hash = sha256_hex(dockerfile);
+
+        let mut stored: HashMap<String, String> = HashMap::new();
+        stored.insert("sandcage".to_string(), hash.clone());
+
+        let force = true;
+        let needs_build = force || stored.get("sandcage").map_or(true, |h| h != &hash);
+        assert!(needs_build, "force flag should always trigger a rebuild");
+    }
+
+    #[test]
+    fn write_stored_hashes_creates_parent_dirs() {
+        let tmp = tempfile::tempdir().expect("create temp dir");
+        // Nested path that doesn't exist yet
+        let path = tmp.path().join("a").join("b").join(".build-hashes");
+
+        let mut hashes = HashMap::new();
+        hashes.insert("sandcage".to_string(), "abc123".to_string());
+
+        write_stored_hashes(&path, &hashes).expect("should create parent dirs and write");
+        assert!(path.exists(), "hash file should have been created");
+    }
+
+    #[tokio::test]
+    async fn require_image_fails_for_nonexistent_image() {
+        let docker = match require_docker() {
+            Ok(path) => path,
+            Err(_) => return, // skip if docker not installed
+        };
+        let result = require_image(&docker, "sandcage-nonexistent-image-abc123").await;
+        assert!(
+            matches!(result, Err(DockerError::ImageNotFound { .. })),
+            "should fail for nonexistent image: {result:?}"
+        );
+    }
+
+    #[test]
+    fn build_run_args_basic() {
+        let config = SandcageConfig::default();
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+        assert_eq!(args, vec!["compose", "-f", "/tmp/compose.yml", "run", "--rm", "claude"]);
+    }
+
+    #[test]
+    fn build_run_args_with_env() {
+        let mut env = std::collections::HashMap::new();
+        env.insert("FOO".to_string(), "bar".to_string());
+        let config = SandcageConfig {
+            env: Some(env),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+        assert!(args.contains(&"-e".to_string()));
+        assert!(args.contains(&"FOO=bar".to_string()));
+        let service_pos = args.iter().position(|a| a == "claude").unwrap();
+        let env_pos = args.iter().position(|a| a == "FOO=bar").unwrap();
+        assert!(env_pos < service_pos, "-e flags must come before the service name");
+    }
+
+    #[test]
+    fn build_run_args_shell_override() {
+        let config = SandcageConfig::default();
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", true, &[], None, &[]);
+        assert!(args.contains(&"--entrypoint".to_string()));
+        assert!(args.contains(&"/bin/zsh".to_string()));
+        let ep_pos = args.iter().position(|a| a == "--entrypoint").unwrap();
+        let service_pos = args.iter().position(|a| a == "claude").unwrap();
+        assert!(ep_pos < service_pos, "--entrypoint must come before the service name");
+    }
+
+    #[test]
+    fn build_run_args_extra_args_after_service() {
+        let config = SandcageConfig::default();
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &["--resume".to_string(), "--verbose".to_string()], None, &[]);
+        let service_pos = args.iter().position(|a| a == "claude").unwrap();
+        let resume_pos = args.iter().position(|a| a == "--resume").unwrap();
+        let verbose_pos = args.iter().position(|a| a == "--verbose").unwrap();
+        assert!(resume_pos > service_pos, "extra args must come after the service name");
+        assert!(verbose_pos > resume_pos, "extra args must preserve order");
+    }
+
+    #[test]
+    fn build_run_args_shell_override_with_extra_args() {
+        let config = SandcageConfig::default();
+        let args = build_run_args("codex", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", true, &["--help".to_string()], None, &[]);
+        assert!(args.contains(&"--entrypoint".to_string()));
+        assert!(args.contains(&"/bin/zsh".to_string()));
+        let service_pos = args.iter().position(|a| a == "codex").unwrap();
+        let help_pos = args.iter().position(|a| a == "--help").unwrap();
+        assert!(help_pos > service_pos);
+    }
+
+    #[test]
+    fn build_run_args_shell_override_skips_agent_args() {
+        let mut agent_args = HashMap::new();
+        agent_args.insert("claude".to_string(), vec!["--dangerously-skip-permissions".to_string()]);
+        let config = SandcageConfig {
+            agent_args: Some(agent_args),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", true, &[], None, &[]);
+        assert!(!args.contains(&"--dangerously-skip-permissions".to_string()),
+            "agent_args must not be passed in shell mode");
+        assert!(args.contains(&"--entrypoint".to_string()));
+    }
+
+    #[tokio::test]
+    async fn build_compose_env_container_dir_auto_derived() {
+        let workspace = PathBuf::from("/home/user/projects/my-app");
+        let config = SandcageConfig::default();
+        let env = build_compose_env(&workspace, &config).await.expect("build_compose_env");
+        assert_eq!(env["SANDCAGE_CONTAINER_DIR"], "/workspace/my-app");
+    }
+
+    #[tokio::test]
+    async fn build_compose_env_container_dir_from_config() {
+        let workspace = PathBuf::from("/home/user/projects/my-app");
+        let config = SandcageConfig {
+            container_workspace: Some("/workspace/custom".to_string()),
+            ..Default::default()
+        };
+        let env = build_compose_env(&workspace, &config).await.expect("build_compose_env");
+        assert_eq!(env["SANDCAGE_CONTAINER_DIR"], "/workspace/custom");
+    }
+
+    #[tokio::test]
+    async fn build_compose_env_container_dir_ignores_relative_override() {
+        let workspace = PathBuf::from("/home/user/projects/my-app");
+        let config = SandcageConfig {
+            container_workspace: Some("relative/path".to_string()),
+            ..Default::default()
+        };
+        let env = build_compose_env(&workspace, &config).await.expect("build_compose_env");
+        assert_eq!(
+            env["SANDCAGE_CONTAINER_DIR"], "/workspace/my-app",
+            "relative paths should be ignored, falling back to auto-derive"
+        );
+    }
+
+    #[test]
+    fn build_run_args_with_mounts() {
+        let home = dirs::home_dir().unwrap();
+        let home_str = home.to_string_lossy().replace('\\', "/");
+        let config = SandcageConfig {
+            mounts: Some(vec![
+                "~/.ssh:/home/agent/.ssh:ro".to_string(),
+                "~/.gitconfig:/home/agent/.gitconfig:ro".to_string(),
+            ]),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+
+        assert!(args.contains(&"-v".to_string()), "should contain -v flag");
+        let expected_ssh = format!("{home_str}/.ssh:/home/agent/.ssh:ro");
+        let expected_git = format!("{home_str}/.gitconfig:/home/agent/.gitconfig:ro");
+        assert!(args.contains(&expected_ssh), "SSH mount should be expanded");
+        assert!(args.contains(&expected_git), "gitconfig mount should be expanded");
+
+        let service_pos = args.iter().position(|a| a == "claude").unwrap();
+        let first_v = args.iter().position(|a| a == "-v").unwrap();
+        assert!(first_v < service_pos, "-v flags must come before the service name");
+    }
+
+    #[test]
+    fn build_run_args_skips_invalid_mounts() {
+        let config = SandcageConfig {
+            mounts: Some(vec![
+                "/valid:/mount:ro".to_string(),
+                "/no-colon-here".to_string(),
+            ]),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+
+        let v_count = args.iter().filter(|a| a.as_str() == "-v").count();
+        assert_eq!(v_count, 1, "only valid mounts should produce -v flags");
+        assert!(args.contains(&"/valid:/mount:ro".to_string()));
+        assert!(!args.contains(&"/no-colon-here".to_string()));
+    }
+
+    #[test]
+    fn build_run_args_mounts_with_env_and_extra_args() {
+        let home = dirs::home_dir().unwrap();
+        let home_str = home.to_string_lossy().replace('\\', "/");
+        let mut env = HashMap::new();
+        env.insert("FOO".to_string(), "bar".to_string());
+        let config = SandcageConfig {
+            env: Some(env),
+            mounts: Some(vec!["~/.ssh:/home/agent/.ssh:ro".to_string()]),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &["--resume".to_string()], None, &[]);
+
+        let service_pos = args.iter().position(|a| a == "claude").unwrap();
+        let env_pos = args.iter().position(|a| a == "FOO=bar").unwrap();
+        let expected_mount = format!("{home_str}/.ssh:/home/agent/.ssh:ro");
+        let mount_pos = args.iter().position(|a| *a == expected_mount).unwrap();
+        let resume_pos = args.iter().position(|a| a == "--resume").unwrap();
+
+        assert!(env_pos < service_pos, "env before service");
+        assert!(mount_pos < service_pos, "mounts before service");
+        assert!(resume_pos > service_pos, "extra args after service");
+    }
+
+    #[test]
+    fn build_run_args_prepends_default_agent_args() {
+        let mut agent_args = HashMap::new();
+        agent_args.insert("claude".to_string(), vec!["--dangerously-skip-permissions".to_string()]);
+        let config = SandcageConfig {
+            agent_args: Some(agent_args),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &["--resume".to_string()], None, &[]);
+
+        let service_pos = args.iter().position(|a| a == "claude").unwrap();
+        let default_pos = args.iter().position(|a| a == "--dangerously-skip-permissions").unwrap();
+        let resume_pos = args.iter().position(|a| a == "--resume").unwrap();
+
+        assert!(default_pos > service_pos, "default args come after service name");
+        assert!(default_pos < resume_pos, "default args come before CLI args");
+    }
+
+    #[test]
+    fn build_run_args_ignores_other_service_defaults() {
+        let mut agent_args = HashMap::new();
+        agent_args.insert("codex".to_string(), vec!["--full-auto".to_string()]);
+        let config = SandcageConfig {
+            agent_args: Some(agent_args),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+
+        assert!(!args.contains(&"--full-auto".to_string()), "codex args should not appear for claude");
+    }
+
+    #[test]
+    fn build_run_args_no_defaults_cli_args_still_work() {
+        let config = SandcageConfig::default();
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &["--resume".to_string()], None, &[]);
+
+        let service_pos = args.iter().position(|a| a == "claude").unwrap();
+        let resume_pos = args.iter().position(|a| a == "--resume").unwrap();
+        assert!(resume_pos > service_pos);
+    }
+
+    #[test]
+    fn build_run_args_ssh_mode_volume() {
+        let config = SandcageConfig {
+            ssh_mode: Some("volume".to_string()),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+        let v_positions: Vec<_> = args.iter().enumerate()
+            .filter(|(_, a)| *a == "-v")
+            .map(|(i, _)| i)
+            .collect();
+        let has_volume_mount = v_positions.iter().any(|&i| {
+            args.get(i + 1).map(|a| a == "sandcage-ssh:/home/agent/.ssh:ro").unwrap_or(false)
+        });
+        assert!(has_volume_mount, "should have sandcage-ssh volume mount, args: {:?}", args);
+    }
+
+    #[test]
+    fn build_run_args_ssh_mode_bind() {
+        let config = SandcageConfig {
+            ssh_mode: Some("bind".to_string()),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+        assert!(args.contains(&"-v".to_string()));
+        // Find the -v flag and check the mount string contains .ssh
+        let v_positions: Vec<_> = args
+            .iter()
+            .enumerate()
+            .filter(|(_, a)| *a == "-v")
+            .map(|(i, _)| i)
+            .collect();
+        let has_ssh_mount = v_positions.iter().any(|&i| {
+            args.get(i + 1)
+                .map(|a| a.contains(".ssh") && a.ends_with(":ro"))
+                .unwrap_or(false)
+        });
+        assert!(has_ssh_mount, "should have .ssh bind mount, args: {:?}", args);
+    }
+
+    #[test]
+    fn build_run_args_ssh_mode_none() {
+        let config = SandcageConfig {
+            ssh_mode: Some("none".to_string()),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+        assert!(!args.iter().any(|a| a.contains("sandcage-ssh")));
+        assert!(!args.iter().any(|a| a.contains(".ssh")));
+    }
+
+    #[test]
+    fn build_run_args_ssh_mode_absent() {
+        let config = SandcageConfig::default();
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/test", false, &[], None, &[]);
+        assert!(!args.contains(&"--mount".to_string()));
+        // May have .ssh in other mounts, but no SSH-specific mount
+    }
+
+    #[test]
+    fn build_run_args_does_not_pass_tmpfs_cli_flag() {
+        let config = SandcageConfig::default();
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, Path::new("/tmp/test"), "/workspace/my-app", false, &[], None, &[]);
+        assert!(!args.contains(&"--tmpfs".to_string()), "tmpfs is in compose YAML, not CLI args");
+    }
+
+    #[tokio::test]
+    async fn build_compose_env_container_dir_root_fallback() {
+        let workspace = PathBuf::from("/");
+        let config = SandcageConfig::default();
+        let env = build_compose_env(&workspace, &config).await.expect("build_compose_env");
+        assert_eq!(env["SANDCAGE_CONTAINER_DIR"], "/workspace");
+    }
+
+    #[test]
+    fn expand_mount_path_expands_tilde_slash() {
+        let home = dirs::home_dir().unwrap();
+        let home_str = home.to_string_lossy().replace('\\', "/");
+        let result = expand_mount_path("~/.ssh:/home/agent/.ssh:ro");
+        assert_eq!(result, format!("{home_str}/.ssh:/home/agent/.ssh:ro"));
+    }
+
+    #[test]
+    fn expand_mount_path_expands_bare_tilde() {
+        let home = dirs::home_dir().unwrap();
+        let home_str = home.to_string_lossy().replace('\\', "/");
+        let result = expand_mount_path("~:/container");
+        assert_eq!(result, format!("{home_str}:/container"));
+    }
+
+    #[test]
+    fn expand_mount_path_ignores_absolute() {
+        let result = expand_mount_path("/absolute:/container:ro");
+        assert_eq!(result, "/absolute:/container:ro");
+    }
+
+    #[test]
+    fn expand_mount_path_ignores_relative() {
+        let result = expand_mount_path("./relative:/container");
+        assert_eq!(result, "./relative:/container");
+    }
+
+    #[test]
+    fn expand_mount_path_ignores_no_colon() {
+        let result = expand_mount_path("no-colon");
+        assert_eq!(result, "no-colon");
+    }
+
+    // -----------------------------------------------------------------------
+    // overlay mount tests
+    // -----------------------------------------------------------------------
+
+    #[test]
+    fn collect_overlay_mounts_from_tempdir() {
+        let dir = tempfile::tempdir().expect("create tempdir");
+        let overlay = dir.path().join(".sandcage").join("overlay");
+        std::fs::create_dir_all(&overlay).unwrap();
+        std::fs::write(overlay.join(".justfile"), "# overlay justfile").unwrap();
+        std::fs::write(overlay.join("config.toml"), "# overlay config").unwrap();
+
+        let mounts = collect_overlay_mounts(dir.path(), "/workspace/test");
+        assert_eq!(mounts.len(), 2);
+        assert!(mounts.iter().any(|m| m.contains(".justfile") && m.contains("/workspace/test/.justfile:ro")));
+        assert!(mounts.iter().any(|m| m.contains("config.toml") && m.contains("/workspace/test/config.toml:ro")));
+    }
+
+    #[test]
+    fn collect_overlay_local_after_project() {
+        let dir = tempfile::tempdir().expect("create tempdir");
+        let overlay = dir.path().join(".sandcage").join("overlay");
+        let local_overlay = dir.path().join(".sandcage").join("local").join("overlay");
+        std::fs::create_dir_all(&overlay).unwrap();
+        std::fs::create_dir_all(&local_overlay).unwrap();
+        std::fs::write(overlay.join("file.txt"), "project").unwrap();
+        std::fs::write(local_overlay.join("file.txt"), "local").unwrap();
+
+        let mounts = collect_overlay_mounts(dir.path(), "/workspace/test");
+        assert_eq!(mounts.len(), 2, "both project and local overlays");
+        // Local must come after project (Docker uses last mount)
+        let project_pos = mounts.iter().position(|m| m.contains("overlay") && !m.contains("local")).unwrap();
+        let local_pos = mounts.iter().position(|m| m.contains("local")).unwrap();
+        assert!(local_pos > project_pos, "local overlay must come after project overlay");
+    }
+
+    #[test]
+    fn collect_overlay_empty_when_no_dir() {
+        let dir = tempfile::tempdir().expect("create tempdir");
+        let mounts = collect_overlay_mounts(dir.path(), "/workspace/test");
+        assert!(mounts.is_empty());
+    }
+
+    #[test]
+    fn overlay_skipped_when_disabled() {
+        let dir = tempfile::tempdir().expect("create tempdir");
+        let overlay = dir.path().join(".sandcage").join("overlay");
+        std::fs::create_dir_all(&overlay).unwrap();
+        std::fs::write(overlay.join("file.txt"), "test").unwrap();
+
+        let config = SandcageConfig {
+            overlay: Some(crate::config::OverlayConfig { enabled: Some(false) }),
+            ..Default::default()
+        };
+        let args = build_run_args("claude", "/tmp/compose.yml", &config, dir.path(), "/workspace/test", false, &[], None, &[]);
+        // Should not contain the overlay file mount
+        assert!(!args.iter().any(|a| a.contains("file.txt")));
+    }
+
+    #[test]
+    fn collect_shadow_mounts_uses_recipes_and_config() {
+        let mut config = SandcageConfig::default();
+        let mut tc = std::collections::HashMap::new();
+        tc.insert("rust".to_string(), toml::Value::Boolean(true)); // built-in: target + .cargo/registry
+        config.toolchains = Some(tc);
+
+        let mounts = collect_shadow_mounts(&config, std::path::Path::new("/proj"), "/workspace/proj");
+        // rust recipe contributes target (per-project) and .cargo/registry (shared)
+        assert!(mounts.iter().any(|m| m.dir == "target"));
+        assert!(mounts.iter().any(|m| m.dir == ".cargo/registry"));
+    }
+
+    #[test]
+    fn spoof_bin_dir_is_under_local() {
+        let root = std::path::Path::new("/home/u/projects/app");
+        assert_eq!(
+            spoof_bin_dir(root),
+            std::path::Path::new("/home/u/projects/app/.sandcage/local/spoof/bin")
+        );
+    }
+
+    #[test]
+    fn collect_spoof_mount_present_only_when_dir_exists() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        assert!(collect_spoof_mount(root).is_none());
+        std::fs::create_dir_all(spoof_bin_dir(root)).unwrap();
+        let mount = collect_spoof_mount(root).expect("mount present");
+        assert!(mount.ends_with(":/usr/local/sandcage/spoof:ro"), "got {mount}");
+        assert!(mount.starts_with(&spoof_bin_dir(root).to_string_lossy().to_string()));
+    }
+
+    #[test]
+    fn project_volume_prefix_matches_naming() {
+        use crate::shadow::{project_slug, project_hash, volume_name};
+        let root = std::path::Path::new("/home/u/projects/app");
+        let prefix = project_volume_prefix(root);
+        assert_eq!(prefix, format!("sandcage-{}-{}-", project_slug(root), project_hash(root)));
+        assert!(volume_name(root, "target", false).starts_with(&prefix));
+        assert!(!volume_name(root, "target", true).starts_with(&prefix)); // shared excluded
+    }
+
+    #[test]
+    fn resolve_security_opts_empty_when_no_profiles() {
+        let config = SandcageConfig::default();
+        let opts = resolve_security_opts(&config, Path::new("/proj"));
+        assert!(opts.is_empty());
+    }
+
+    #[test]
+    fn resolve_security_opts_includes_seccomp_path() {
+        let dir = tempfile::tempdir().unwrap();
+        let profiles_dir = dir.path().join(".sandcage").join("profiles");
+        std::fs::create_dir_all(&profiles_dir).unwrap();
+        let seccomp = profiles_dir.join("seccomp.json");
+        std::fs::write(&seccomp, r#"{"defaultAction":"SCMP_ACT_ERRNO"}"#).unwrap();
+
+        let config = SandcageConfig {
+            profiles: Some(crate::config::ProfilesConfig {
+                apparmor: None,
+                seccomp: Some(".sandcage/profiles/seccomp.json".to_string()),
+            }),
+            ..Default::default()
+        };
+        let opts = resolve_security_opts(&config, dir.path());
+        assert_eq!(opts.len(), 1);
+        assert!(opts[0].starts_with("seccomp="), "got: {}", opts[0]);
+    }
+
+    #[test]
+    fn resolve_security_opts_warns_on_missing_file() {
+        let dir = tempfile::tempdir().unwrap();
+        let config = SandcageConfig {
+            profiles: Some(crate::config::ProfilesConfig {
+                apparmor: None,
+                seccomp: Some(".sandcage/profiles/nonexistent.json".to_string()),
+            }),
+            ..Default::default()
+        };
+        let opts = resolve_security_opts(&config, dir.path());
+        assert!(opts.is_empty(), "missing file should be skipped");
+    }
+
+    // -----------------------------------------------------------------------
+    // Home profile tests
+    // -----------------------------------------------------------------------
+
+    #[test]
+    fn resolve_agent_home_defaults_to_default_profile() {
+        let tmp = tempfile::tempdir().unwrap();
+        let home = resolve_agent_home(tmp.path(), None);
+        assert_eq!(home, tmp.path().join("homes").join("default"));
+        assert!(home.is_dir(), "default profile dir should be created");
+    }
+
+    #[test]
+    fn resolve_agent_home_named_profile() {
+        let tmp = tempfile::tempdir().unwrap();
+        let home = resolve_agent_home(tmp.path(), Some("work"));
+        assert_eq!(home, tmp.path().join("homes").join("work"));
+        assert!(home.is_dir(), "named profile dir should be created");
+    }
+
+    #[test]
+    fn resolve_agent_home_migrates_legacy() {
+        let tmp = tempfile::tempdir().unwrap();
+        let legacy = tmp.path().join("home");
+        std::fs::create_dir_all(legacy.join(".claude")).unwrap();
+        std::fs::write(legacy.join(".claude").join("creds.json"), "secret").unwrap();
+
+        let home = resolve_agent_home(tmp.path(), None);
+        assert_eq!(home, tmp.path().join("homes").join("default"));
+        assert!(!tmp.path().join("home").exists(), "legacy dir should be moved");
+        assert!(
+            home.join(".claude").join("creds.json").exists(),
+            "migrated contents should be preserved"
+        );
+    }
+
+    #[test]
+    fn resolve_agent_home_no_migration_when_homes_exists() {
+        let tmp = tempfile::tempdir().unwrap();
+        let legacy = tmp.path().join("home");
+        std::fs::create_dir_all(&legacy).unwrap();
+        std::fs::write(legacy.join("marker"), "legacy").unwrap();
+
+        let homes = tmp.path().join("homes").join("default");
+        std::fs::create_dir_all(&homes).unwrap();
+        std::fs::write(homes.join("marker"), "new").unwrap();
+
+        let home = resolve_agent_home(tmp.path(), None);
+        assert_eq!(home, tmp.path().join("homes").join("default"));
+        assert!(tmp.path().join("home").exists(), "legacy should be left alone");
+        let content = std::fs::read_to_string(home.join("marker")).unwrap();
+        assert_eq!(content, "new", "new homes dir should not be overwritten");
+    }
+}
diff --git a/crates/sandcage/src/forwarding.rs b/crates/sandcage/src/forwarding.rs
new file mode 100644
index 0000000..1429a52
--- /dev/null
+++ b/crates/sandcage/src/forwarding.rs
@@ -0,0 +1,831 @@
+use std::path::{Path, PathBuf};
+
+use crate::config::SandcageConfig;
+use crate::spoof::ToolMode;
+
+pub const CONTAINER_SOCKET_PATH: &str = "/run/sandcage/cmd.sock";
+
+pub fn session_dir(sandcage_home: &Path, session_id: &str) -> PathBuf {
+    sandcage_home.join("run").join(session_id)
+}
+
+pub fn socket_path(sandcage_home: &Path, session_id: &str) -> PathBuf {
+    session_dir(sandcage_home, session_id).join("cmd.sock")
+}
+
+pub fn audit_log_path(sandcage_home: &Path, session_id: &str) -> PathBuf {
+    session_dir(sandcage_home, session_id).join("audit.jsonl")
+}
+
+pub fn generate_session_id() -> String {
+    use std::time::{SystemTime, UNIX_EPOCH};
+    let ts = SystemTime::now().duration_since(UNIX_EPOCH).unwrap_or_default();
+    let secs = ts.as_secs();
+    let nanos = ts.subsec_nanos();
+    format!("{secs}-{nanos:09}")
+}
+
+pub fn create_session_dir(sandcage_home: &Path, session_id: &str) -> std::io::Result<PathBuf> {
+    let dir = session_dir(sandcage_home, session_id);
+    std::fs::create_dir_all(&dir)?;
+    Ok(dir)
+}
+
+pub fn cleanup_session_dir(sandcage_home: &Path, session_id: &str) {
+    let dir = session_dir(sandcage_home, session_id);
+    if dir.exists() {
+        let _ = std::fs::remove_dir_all(&dir);
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct PathMapping {
+    pub container_prefix: String,
+    pub host_prefix: String,
+}
+
+impl PathMapping {
+    pub fn to_host(&self, container_path: &str) -> String {
+        if let Some(rest) = container_path.strip_prefix(&self.container_prefix) {
+            format!("{}{rest}", self.host_prefix)
+        } else {
+            container_path.to_string()
+        }
+    }
+
+    pub fn to_container(&self, host_path: &str) -> String {
+        if let Some(rest) = host_path.strip_prefix(&self.host_prefix) {
+            format!("{}{rest}", self.container_prefix)
+        } else {
+            host_path.to_string()
+        }
+    }
+
+    pub fn translate_args_to_host(&self, args: &[String]) -> Vec<String> {
+        args.iter()
+            .map(|arg| arg.replace(&self.container_prefix, &self.host_prefix))
+            .collect()
+    }
+
+    pub fn translate_output_to_container(&self, text: &str) -> String {
+        text.replace(&self.host_prefix, &self.container_prefix)
+    }
+}
+
+use serde::Serialize;
+
+#[cfg(unix)]
+use serde::Deserialize;
+
+#[derive(Debug, Serialize)]
+pub struct AuditEntry {
+    pub timestamp: String,
+    pub kind: String,
+    pub name: String,
+    pub args: Vec<String>,
+    pub cwd: String,
+    pub exit_code: i32,
+}
+
+pub fn append_audit(log_path: &Path, entry: &AuditEntry) -> std::io::Result<()> {
+    use std::io::Write;
+    let mut file = std::fs::OpenOptions::new()
+        .create(true)
+        .append(true)
+        .open(log_path)?;
+    let json = serde_json::to_string(entry)
+        .map_err(|e| std::io::Error::new(std::io::ErrorKind::Other, e))?;
+    writeln!(file, "{json}")
+}
+
+pub fn now_iso8601() -> String {
+    use std::time::{SystemTime, UNIX_EPOCH};
+    let d = SystemTime::now().duration_since(UNIX_EPOCH).unwrap_or_default();
+    let secs = d.as_secs();
+    let time_secs = secs % 86400;
+    let hours = time_secs / 3600;
+    let minutes = (time_secs % 3600) / 60;
+    let seconds = time_secs % 60;
+    let (year, month, day) = epoch_days_to_ymd(secs / 86400);
+    format!("{year:04}-{month:02}-{day:02}T{hours:02}:{minutes:02}:{seconds:02}Z")
+}
+
+fn epoch_days_to_ymd(mut days: u64) -> (u64, u64, u64) {
+    days += 719468;
+    let era = days / 146097;
+    let doe = days - era * 146097;
+    let yoe = (doe - doe / 1460 + doe / 36524 - doe / 146096) / 365;
+    let y = yoe + era * 400;
+    let doy = doe - (365 * yoe + yoe / 4 - yoe / 100);
+    let mp = (5 * doy + 2) / 153;
+    let d = doy - (153 * mp + 2) / 5 + 1;
+    let m = if mp < 10 { mp + 3 } else { mp - 9 };
+    let y = if m <= 2 { y + 1 } else { y };
+    (y, m, d)
+}
+
+pub fn seccomp_uses_notify(profile_path: &Path) -> bool {
+    std::fs::read_to_string(profile_path)
+        .map(|content| content.contains("SCMP_ACT_NOTIFY"))
+        .unwrap_or(false)
+}
+
+pub fn validate_request(
+    kind: &str,
+    name: &str,
+    config: &SandcageConfig,
+    is_trusted: bool,
+) -> Result<(), String> {
+    if !is_trusted {
+        return Err("rejected: project is not in trusted_projects — host forwarding disabled".to_string());
+    }
+
+    match kind {
+        "tool" => {
+            let tools = config.tools.as_ref().ok_or_else(|| {
+                format!("rejected: tool '{name}' not configured (no [tools] section)")
+            })?;
+            let tool_cfg = tools.get(name).ok_or_else(|| {
+                format!("rejected: tool '{name}' not configured in [tools]")
+            })?;
+            let mode = tool_cfg
+                .mode
+                .as_deref()
+                .map(ToolMode::parse)
+                .unwrap_or(ToolMode::InCage);
+            if mode != ToolMode::Host {
+                return Err(format!(
+                    "rejected: tool '{name}' is mode={}, not host",
+                    tool_cfg.mode.as_deref().unwrap_or("in-cage")
+                ));
+            }
+            Ok(())
+        }
+        "task" => {
+            let tasks = config.tasks.as_ref().ok_or_else(|| {
+                format!("rejected: task '{name}' not configured (no [tasks] section)")
+            })?;
+            let task_cfg = tasks.get(name).ok_or_else(|| {
+                format!("rejected: task '{name}' not configured in [tasks]")
+            })?;
+            let location = task_cfg.location.as_deref().unwrap_or("in-cage");
+            if location != "host" {
+                return Err(format!(
+                    "rejected: task '{name}' is where={location}, not host — \
+                     it runs in-cage and should not be forwarded"
+                ));
+            }
+            Ok(())
+        }
+        other => Err(format!("rejected: unknown request kind '{other}'")),
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Daemon loop (Unix only)
+// ---------------------------------------------------------------------------
+
+#[cfg(unix)]
+#[derive(Debug, Deserialize)]
+struct IncomingRequest {
+    kind: String,
+    name: String,
+    #[serde(default)]
+    args: Vec<String>,
+    cwd: String,
+}
+
+#[cfg(unix)]
+pub async fn serve_one(
+    socket_path: &Path,
+    audit_log: &Path,
+    mapping: &PathMapping,
+    config: &SandcageConfig,
+    is_trusted: bool,
+) -> Result<(), Box<dyn std::error::Error + Send + Sync>> {
+    use tokio::net::UnixListener;
+
+    if socket_path.exists() {
+        std::fs::remove_file(socket_path)?;
+    }
+
+    let listener = UnixListener::bind(socket_path)?;
+
+    // Set socket permissions to 0o600
+    {
+        use std::os::unix::fs::PermissionsExt;
+        let perms = std::fs::Permissions::from_mode(0o600);
+        std::fs::set_permissions(socket_path, perms)?;
+    }
+
+    let (stream, _addr) = listener.accept().await?;
+    handle_connection(stream, audit_log, mapping, config, is_trusted).await
+}
+
+#[cfg(unix)]
+pub async fn serve_loop(
+    socket_path: &Path,
+    audit_log: &Path,
+    mapping: &PathMapping,
+    config: &SandcageConfig,
+    is_trusted: bool,
+) -> Result<(), Box<dyn std::error::Error + Send + Sync>> {
+    use tokio::net::UnixListener;
+
+    if socket_path.exists() {
+        std::fs::remove_file(socket_path)?;
+    }
+
+    let listener = UnixListener::bind(socket_path)?;
+
+    // Set socket permissions to 0o600
+    {
+        use std::os::unix::fs::PermissionsExt;
+        let perms = std::fs::Permissions::from_mode(0o600);
+        std::fs::set_permissions(socket_path, perms)?;
+    }
+
+    loop {
+        let (stream, _addr) = listener.accept().await?;
+        let audit_log = audit_log.to_path_buf();
+        let mapping = mapping.clone();
+        let config = config.clone();
+        tokio::spawn(async move {
+            if let Err(e) = handle_connection(stream, &audit_log, &mapping, &config, is_trusted).await {
+                eprintln!("sandcage forwarding: connection error: {e}");
+            }
+        });
+    }
+}
+
+#[cfg(unix)]
+async fn handle_connection(
+    stream: tokio::net::UnixStream,
+    audit_log: &Path,
+    mapping: &PathMapping,
+    config: &SandcageConfig,
+    is_trusted: bool,
+) -> Result<(), Box<dyn std::error::Error + Send + Sync>> {
+    use tokio::io::{AsyncBufReadExt, AsyncWriteExt, BufReader};
+
+    let (reader, mut writer) = tokio::io::split(stream);
+    let mut buf_reader = BufReader::new(reader);
+
+    let mut line = String::new();
+    buf_reader.read_line(&mut line).await?;
+    let line = line.trim();
+
+    let req: IncomingRequest = serde_json::from_str(line)?;
+
+    // Validate
+    if let Err(msg) = validate_request(&req.kind, &req.name, config, is_trusted) {
+        let err_frame = serde_json::to_string(&serde_json::json!({"stream": "stderr", "data": format!("{msg}\n")}))?;
+        writer.write_all(err_frame.as_bytes()).await?;
+        writer.write_all(b"\n").await?;
+        let exit_frame = serde_json::to_string(&serde_json::json!({"exit": 1}))?;
+        writer.write_all(exit_frame.as_bytes()).await?;
+        writer.write_all(b"\n").await?;
+        writer.flush().await?;
+
+        let entry = AuditEntry {
+            timestamp: now_iso8601(),
+            kind: req.kind,
+            name: req.name,
+            args: req.args,
+            cwd: req.cwd,
+            exit_code: 1,
+        };
+        let _ = append_audit(audit_log, &entry);
+        return Ok(());
+    }
+
+    // Translate paths
+    let host_args = mapping.translate_args_to_host(&req.args);
+    let host_cwd = mapping.to_host(&req.cwd);
+
+    // Execute
+    let exit_code = execute_forwarded(&req.name, &host_args, &host_cwd, mapping, &mut writer).await?;
+
+    // Exit frame
+    let exit_frame = serde_json::to_string(&serde_json::json!({"exit": exit_code}))?;
+    writer.write_all(exit_frame.as_bytes()).await?;
+    writer.write_all(b"\n").await?;
+    writer.flush().await?;
+
+    // Audit
+    let entry = AuditEntry {
+        timestamp: now_iso8601(),
+        kind: req.kind,
+        name: req.name,
+        args: req.args,
+        cwd: req.cwd,
+        exit_code,
+    };
+    let _ = append_audit(audit_log, &entry);
+
+    Ok(())
+}
+
+#[cfg(unix)]
+async fn execute_forwarded<W: tokio::io::AsyncWrite + Unpin>(
+    name: &str,
+    args: &[String],
+    cwd: &str,
+    mapping: &PathMapping,
+    writer: &mut W,
+) -> Result<i32, Box<dyn std::error::Error + Send + Sync>> {
+    use tokio::io::AsyncWriteExt;
+    use tokio::io::{AsyncBufReadExt, BufReader};
+    use tokio::process::Command;
+    use tokio::sync::mpsc;
+
+    let mut child = Command::new(name)
+        .args(args)
+        .current_dir(cwd)
+        .stdout(std::process::Stdio::piped())
+        .stderr(std::process::Stdio::piped())
+        .spawn()?;
+
+    let stdout = child.stdout.take().unwrap();
+    let stderr = child.stderr.take().unwrap();
+
+    let (tx, mut rx) = mpsc::channel::<(String, String)>(64);
+
+    let tx_out = tx.clone();
+    let stdout_task = tokio::spawn(async move {
+        let mut reader = BufReader::new(stdout);
+        let mut line = String::new();
+        loop {
+            line.clear();
+            match reader.read_line(&mut line).await {
+                Ok(0) => break,
+                Ok(_) => {
+                    let _ = tx_out.send(("stdout".to_string(), line.clone())).await;
+                }
+                Err(_) => break,
+            }
+        }
+    });
+
+    let tx_err = tx;
+    let stderr_task = tokio::spawn(async move {
+        let mut reader = BufReader::new(stderr);
+        let mut line = String::new();
+        loop {
+            line.clear();
+            match reader.read_line(&mut line).await {
+                Ok(0) => break,
+                Ok(_) => {
+                    let _ = tx_err.send(("stderr".to_string(), line.clone())).await;
+                }
+                Err(_) => break,
+            }
+        }
+    });
+
+    // Stream frames as they arrive
+    // We need to drop the tasks' senders first by awaiting them, but we also
+    // need to read from rx concurrently. Use a select-style approach.
+    let mapping_clone = mapping.clone();
+    let stream_task = tokio::spawn(async move {
+        // Collect frames — we cannot write to `writer` from a spawned task
+        // because it borrows the caller's writer. Instead, collect and return.
+        let mut frames = Vec::new();
+        while let Some((stream_name, data)) = rx.recv().await {
+            let translated = mapping_clone.translate_output_to_container(&data);
+            frames.push((stream_name, translated));
+        }
+        frames
+    });
+
+    stdout_task.await?;
+    stderr_task.await?;
+
+    let frames = stream_task.await?;
+    for (stream_name, data) in frames {
+        let frame = serde_json::to_string(&serde_json::json!({"stream": stream_name, "data": data}))?;
+        writer.write_all(frame.as_bytes()).await?;
+        writer.write_all(b"\n").await?;
+    }
+
+    let status = child.wait().await?;
+    Ok(status.code().unwrap_or(1))
+}
+
+pub fn resolve_task_command(
+    task_name: &str,
+    config: &SandcageConfig,
+) -> Result<(String, Vec<String>), String> {
+    resolve_task_command_with_args(task_name, &[] as &[String], config)
+}
+
+pub fn resolve_task_command_with_args<S: AsRef<str>>(
+    task_name: &str,
+    extra_args: &[S],
+    config: &SandcageConfig,
+) -> Result<(String, Vec<String>), String> {
+    let tasks = config.tasks.as_ref().ok_or("no [tasks] section")?;
+    let task_cfg = tasks
+        .get(task_name)
+        .ok_or_else(|| format!("task '{task_name}' not found"))?;
+    let run_cmd = task_cfg
+        .run
+        .as_deref()
+        .ok_or_else(|| format!("task '{task_name}' has no `run` command"))?;
+
+    let mut parts: Vec<String> = run_cmd.split_whitespace().map(String::from).collect();
+    if parts.is_empty() {
+        return Err(format!("task '{task_name}' has an empty `run` command"));
+    }
+
+    let cmd = parts.remove(0);
+    parts.extend(extra_args.iter().map(|a| a.as_ref().to_string()));
+    Ok((cmd, parts))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::config::{SandcageConfig, TaskConfig, ToolConfig};
+    use std::collections::HashMap;
+
+    fn config_with_host_tool(name: &str) -> SandcageConfig {
+        let mut tools = HashMap::new();
+        tools.insert(
+            name.to_string(),
+            ToolConfig {
+                mode: Some("host".to_string()),
+                message: None,
+                allow: vec![],
+                deny: vec![],
+            },
+        );
+        SandcageConfig {
+            tools: Some(tools),
+            ..Default::default()
+        }
+    }
+
+    #[test]
+    fn validate_allows_configured_host_tool() {
+        let config = config_with_host_tool("docker");
+        let result = validate_request("tool", "docker", &config, true);
+        assert!(result.is_ok());
+    }
+
+    #[test]
+    fn validate_rejects_unconfigured_tool() {
+        let config = config_with_host_tool("docker");
+        let result = validate_request("tool", "git", &config, true);
+        assert!(result.is_err());
+        assert!(result.unwrap_err().contains("not configured"));
+    }
+
+    #[test]
+    fn validate_rejects_when_untrusted() {
+        let config = config_with_host_tool("docker");
+        let result = validate_request("tool", "docker", &config, false);
+        assert!(result.is_err());
+        assert!(result.unwrap_err().contains("trusted"));
+    }
+
+    #[test]
+    fn validate_rejects_non_host_mode_tool() {
+        let mut tools = HashMap::new();
+        tools.insert(
+            "cargo".to_string(),
+            ToolConfig {
+                mode: Some("spoof".to_string()),
+                message: Some("use just build".to_string()),
+                allow: vec![],
+                deny: vec![],
+            },
+        );
+        let config = SandcageConfig {
+            tools: Some(tools),
+            ..Default::default()
+        };
+        let result = validate_request("tool", "cargo", &config, true);
+        assert!(result.is_err());
+    }
+
+    // Session directory tests
+    #[test]
+    fn session_dir_is_under_sandcage_run() {
+        let home = PathBuf::from("/home/user/.sandcage");
+        let dir = session_dir(&home, "abc123");
+        assert_eq!(dir, PathBuf::from("/home/user/.sandcage/run/abc123"));
+    }
+
+    #[test]
+    fn session_id_is_unique() {
+        let a = generate_session_id();
+        let b = generate_session_id();
+        assert_ne!(a, b);
+        assert!(a.len() > 10);
+    }
+
+    #[test]
+    fn socket_path_is_cmd_sock() {
+        let home = PathBuf::from("/home/user/.sandcage");
+        assert_eq!(
+            socket_path(&home, "abc123"),
+            PathBuf::from("/home/user/.sandcage/run/abc123/cmd.sock")
+        );
+    }
+
+    #[test]
+    fn audit_log_path_is_in_session_dir() {
+        let home = PathBuf::from("/home/user/.sandcage");
+        assert_eq!(
+            audit_log_path(&home, "abc123"),
+            PathBuf::from("/home/user/.sandcage/run/abc123/audit.jsonl")
+        );
+    }
+
+    // Path translation tests
+    #[test]
+    fn translate_container_to_host() {
+        let m = PathMapping {
+            container_prefix: "/workspace/app".to_string(),
+            host_prefix: "/home/user/projects/app".to_string(),
+        };
+        assert_eq!(m.to_host("/workspace/app/src/main.rs"), "/home/user/projects/app/src/main.rs");
+    }
+
+    #[test]
+    fn translate_host_to_container() {
+        let m = PathMapping {
+            container_prefix: "/workspace/app".to_string(),
+            host_prefix: "/home/user/projects/app".to_string(),
+        };
+        assert_eq!(m.to_container("/home/user/projects/app/Cargo.toml"), "/workspace/app/Cargo.toml");
+    }
+
+    #[test]
+    fn no_translation_when_prefix_absent() {
+        let m = PathMapping {
+            container_prefix: "/workspace/app".to_string(),
+            host_prefix: "/home/user/projects/app".to_string(),
+        };
+        assert_eq!(m.to_host("/usr/local/bin/cargo"), "/usr/local/bin/cargo");
+        assert_eq!(m.to_container("/etc/passwd"), "/etc/passwd");
+    }
+
+    #[test]
+    fn translate_args_replaces_all_occurrences() {
+        let m = PathMapping {
+            container_prefix: "/workspace/app".to_string(),
+            host_prefix: "/home/user/projects/app".to_string(),
+        };
+        let args = vec![
+            "test".to_string(),
+            "--manifest-path=/workspace/app/Cargo.toml".to_string(),
+            "/workspace/app/src/lib.rs".to_string(),
+        ];
+        let translated = m.translate_args_to_host(&args);
+        assert_eq!(translated[0], "test");
+        assert_eq!(translated[1], "--manifest-path=/home/user/projects/app/Cargo.toml");
+        assert_eq!(translated[2], "/home/user/projects/app/src/lib.rs");
+    }
+
+    #[test]
+    fn translate_output_text_replaces_host_paths() {
+        let m = PathMapping {
+            container_prefix: "/workspace/app".to_string(),
+            host_prefix: "/home/user/projects/app".to_string(),
+        };
+        let output = "error[E0308]: /home/user/projects/app/src/main.rs:42:5\n";
+        assert_eq!(
+            m.translate_output_to_container(output),
+            "error[E0308]: /workspace/app/src/main.rs:42:5\n"
+        );
+    }
+
+    // Audit logging tests
+    #[test]
+    fn audit_entry_serializes() {
+        let entry = AuditEntry {
+            timestamp: "2026-06-02T14:00:00Z".to_string(),
+            kind: "task".to_string(),
+            name: "build".to_string(),
+            args: vec!["--release".to_string()],
+            cwd: "/home/user/projects/app".to_string(),
+            exit_code: 0,
+        };
+        let json = serde_json::to_string(&entry).unwrap();
+        assert!(json.contains("\"name\":\"build\""));
+        assert!(json.contains("\"exit_code\":0"));
+    }
+
+    #[test]
+    fn append_audit_creates_file_and_appends() {
+        let dir = tempfile::tempdir().unwrap();
+        let log_path = dir.path().join("audit.jsonl");
+
+        let entry1 = AuditEntry {
+            timestamp: "2026-06-02T14:00:00Z".to_string(),
+            kind: "task".to_string(),
+            name: "build".to_string(),
+            args: vec![],
+            cwd: "/workspace".to_string(),
+            exit_code: 0,
+        };
+        append_audit(&log_path, &entry1).unwrap();
+
+        let entry2 = AuditEntry {
+            timestamp: "2026-06-02T14:00:01Z".to_string(),
+            kind: "tool".to_string(),
+            name: "docker".to_string(),
+            args: vec!["ps".to_string()],
+            cwd: "/workspace".to_string(),
+            exit_code: 0,
+        };
+        append_audit(&log_path, &entry2).unwrap();
+
+        let content = std::fs::read_to_string(&log_path).unwrap();
+        let lines: Vec<&str> = content.lines().collect();
+        assert_eq!(lines.len(), 2);
+        assert!(lines[0].contains("build"));
+        assert!(lines[1].contains("docker"));
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn daemon_executes_echo_and_streams_output() {
+        use tokio::io::{AsyncBufReadExt, AsyncWriteExt, BufReader as TokioBufReader};
+        use tokio::net::UnixStream as TokioUnixStream;
+
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+        let audit = dir.path().join("audit.jsonl");
+
+        let mapping = PathMapping {
+            container_prefix: "/workspace".to_string(),
+            host_prefix: dir.path().to_string_lossy().to_string(),
+        };
+        let config = SandcageConfig::default();
+
+        let daemon_sock = sock.clone();
+        let daemon_audit = audit.clone();
+        let daemon_mapping = mapping.clone();
+        let handle = tokio::spawn(async move {
+            serve_one(&daemon_sock, &daemon_audit, &daemon_mapping, &config, true).await
+        });
+
+        tokio::time::sleep(std::time::Duration::from_millis(100)).await;
+
+        let mut stream = TokioUnixStream::connect(&sock).await.unwrap();
+        let request = r#"{"kind":"task","name":"echo","args":["hello-from-daemon"],"cwd":"/workspace"}"#;
+        stream.write_all(request.as_bytes()).await.unwrap();
+        stream.write_all(b"\n").await.unwrap();
+        stream.shutdown().await.unwrap();
+
+        let reader = TokioBufReader::new(&mut stream);
+        let mut lines = reader.lines();
+        let mut got_exit = false;
+        let mut output_data = String::new();
+        while let Some(line) = lines.next_line().await.unwrap() {
+            if line.contains("\"exit\"") {
+                let v: serde_json::Value = serde_json::from_str(&line).unwrap();
+                assert_eq!(v["exit"].as_i64().unwrap(), 0);
+                got_exit = true;
+                break;
+            }
+            if line.contains("\"data\"") {
+                let v: serde_json::Value = serde_json::from_str(&line).unwrap();
+                output_data.push_str(v["data"].as_str().unwrap_or(""));
+            }
+        }
+        assert!(got_exit, "should receive exit frame");
+        assert!(output_data.contains("hello-from-daemon"), "output should contain 'hello-from-daemon', got: '{output_data}'");
+
+        handle.await.unwrap().unwrap();
+
+        let audit_content = std::fs::read_to_string(&audit).unwrap();
+        assert!(audit_content.contains("echo"));
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn daemon_rejects_untrusted_request() {
+        use tokio::io::{AsyncBufReadExt, AsyncWriteExt, BufReader as TokioBufReader};
+        use tokio::net::UnixStream as TokioUnixStream;
+
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+        let audit = dir.path().join("audit.jsonl");
+
+        let mapping = PathMapping {
+            container_prefix: "/workspace".to_string(),
+            host_prefix: dir.path().to_string_lossy().to_string(),
+        };
+        let config = SandcageConfig::default();
+
+        let daemon_sock = sock.clone();
+        let daemon_audit = audit.clone();
+        let daemon_mapping = mapping.clone();
+        let handle = tokio::spawn(async move {
+            serve_one(&daemon_sock, &daemon_audit, &daemon_mapping, &config, false).await
+        });
+
+        tokio::time::sleep(std::time::Duration::from_millis(100)).await;
+
+        let mut stream = TokioUnixStream::connect(&sock).await.unwrap();
+        let request = r#"{"kind":"task","name":"echo","args":["hello"],"cwd":"/workspace"}"#;
+        stream.write_all(request.as_bytes()).await.unwrap();
+        stream.write_all(b"\n").await.unwrap();
+        stream.shutdown().await.unwrap();
+
+        let reader = TokioBufReader::new(&mut stream);
+        let mut lines = reader.lines();
+        let mut got_rejection = false;
+        let mut got_exit = false;
+        while let Some(line) = lines.next_line().await.unwrap() {
+            if line.contains("trusted") {
+                got_rejection = true;
+            }
+            if line.contains("\"exit\"") {
+                let v: serde_json::Value = serde_json::from_str(&line).unwrap();
+                assert_eq!(v["exit"].as_i64().unwrap(), 1, "rejected requests should exit 1");
+                got_exit = true;
+                break;
+            }
+        }
+        assert!(got_rejection, "should mention trust rejection");
+        assert!(got_exit, "should send exit frame");
+
+        handle.await.unwrap().unwrap();
+    }
+
+    fn config_with_task(name: &str, location: &str, run_cmd: &str) -> SandcageConfig {
+        let mut tasks = HashMap::new();
+        tasks.insert(
+            name.to_string(),
+            TaskConfig {
+                location: Some(location.to_string()),
+                run: Some(run_cmd.to_string()),
+            },
+        );
+        SandcageConfig {
+            tasks: Some(tasks),
+            ..Default::default()
+        }
+    }
+
+    #[test]
+    fn validate_allows_configured_host_task() {
+        let config = config_with_task("build", "host", "cargo build --release");
+        let result = validate_request("task", "build", &config, true);
+        assert!(result.is_ok());
+    }
+
+    #[test]
+    fn validate_rejects_unconfigured_task() {
+        let config = config_with_task("build", "host", "cargo build");
+        let result = validate_request("task", "deploy", &config, true);
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn validate_rejects_in_cage_task_via_forwarding() {
+        let config = config_with_task("lint", "in-cage", "clippy");
+        let result = validate_request("task", "lint", &config, true);
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn resolve_task_command_returns_run_field() {
+        let config = config_with_task("build", "host", "cargo build --release");
+        let (cmd, args) = resolve_task_command("build", &config).unwrap();
+        assert_eq!(cmd, "cargo");
+        assert_eq!(args, vec!["build", "--release"]);
+    }
+
+    #[test]
+    fn resolve_task_command_appends_extra_args() {
+        let config = config_with_task("test", "host", "cargo test");
+        let (cmd, args) = resolve_task_command_with_args("test", &["--lib"], &config).unwrap();
+        assert_eq!(cmd, "cargo");
+        assert_eq!(args, vec!["test", "--lib"]);
+    }
+
+    #[test]
+    fn detects_scmp_act_notify_in_seccomp_profile() {
+        let dir = tempfile::tempdir().unwrap();
+
+        let with_notify = dir.path().join("notify.json");
+        std::fs::write(
+            &with_notify,
+            r#"{"defaultAction":"SCMP_ACT_ERRNO","syscalls":[{"names":["execve"],"action":"SCMP_ACT_NOTIFY"}]}"#,
+        ).unwrap();
+        assert!(seccomp_uses_notify(&with_notify));
+
+        let without = dir.path().join("basic.json");
+        std::fs::write(
+            &without,
+            r#"{"defaultAction":"SCMP_ACT_ERRNO","syscalls":[]}"#,
+        ).unwrap();
+        assert!(!seccomp_uses_notify(&without));
+    }
+}
diff --git a/crates/sandcage/src/init.rs b/crates/sandcage/src/init.rs
new file mode 100644
index 0000000..32f9bbd
--- /dev/null
+++ b/crates/sandcage/src/init.rs
@@ -0,0 +1,493 @@
+use std::path::{Path, PathBuf};
+
+use miette::Diagnostic;
+use thiserror::Error;
+
+const CLAUDE_SETTINGS_TEMPLATE: &str =
+    include_str!("../../../templates/claude/settings.json");
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum InitError {
+    #[error("Failed to create directory {0}: {1}")]
+    #[diagnostic(code(sandcage::init::create_dir_failed))]
+    CreateDirFailed(PathBuf, #[source] std::io::Error),
+
+    #[error("Failed to write file {0}: {1}")]
+    #[diagnostic(code(sandcage::init::write_file_failed))]
+    WriteFileFailed(PathBuf, #[source] std::io::Error),
+
+    #[error("Cannot determine home directory")]
+    #[diagnostic(code(sandcage::init::no_home_dir))]
+    NoHomeDir,
+
+    #[error(".sandcage/config.toml already exists at {0}; remove it manually to re-initialise")]
+    #[diagnostic(code(sandcage::init::config_already_exists))]
+    ConfigAlreadyExists(PathBuf),
+
+    #[error("You're in a git worktree. Run `sandcage init` from the main worktree at {0} instead.")]
+    #[diagnostic(code(sandcage::init::in_worktree))]
+    InWorktree(PathBuf),
+}
+
+pub type Result<T> = std::result::Result<T, InitError>;
+
+pub fn preseed() -> Result<()> {
+    let home = dirs::home_dir().ok_or(InitError::NoHomeDir)?;
+    preseed_with_home(&home)
+}
+
+pub fn preseed_with_home(home: &Path) -> Result<()> {
+    let sandcage_home = home.join(".sandcage");
+    let agent_home = sandcage_home.join("homes").join("default");
+
+    // 1. ~/.sandcage/homes/default/ — persistent agent home directory
+    create_dir_all(&agent_home)?;
+
+    // 2. ~/.sandcage/home/.claude/
+    let claude_dir = agent_home.join(".claude");
+    create_dir_all(&claude_dir)?;
+
+    // 3. ~/.sandcage/home/.codex/
+    let codex_dir = agent_home.join(".codex");
+    create_dir_all(&codex_dir)?;
+
+    // ~/.sandcage/home/.gemini/
+    let gemini_dir = agent_home.join(".gemini");
+    create_dir_all(&gemini_dir)?;
+
+    // 4. Seed Claude settings.json from the bundled template
+    let settings_dest = claude_dir.join("settings.json");
+    if !settings_dest.exists() {
+        std::fs::write(&settings_dest, CLAUDE_SETTINGS_TEMPLATE)
+            .map_err(|e| InitError::WriteFileFailed(settings_dest.clone(), e))?;
+        println!("sandcage: seeded {} from template", settings_dest.display());
+    }
+
+    // 5. Seed .claude.json so the bind mount targets a file, not a directory
+    let claude_json = agent_home.join(".claude.json");
+    if !claude_json.exists() {
+        std::fs::write(&claude_json, "{}\n")
+            .map_err(|e| InitError::WriteFileFailed(claude_json.clone(), e))?;
+    }
+
+    // 6. Create an empty .justfile if absent
+    let justfile = agent_home.join(".justfile");
+    if !justfile.exists() {
+        std::fs::write(&justfile, "")
+            .map_err(|e| InitError::WriteFileFailed(justfile.clone(), e))?;
+    }
+
+    Ok(())
+}
+
+fn create_dir_all(path: &Path) -> Result<()> {
+    std::fs::create_dir_all(path)
+        .map_err(|e| InitError::CreateDirFailed(path.to_path_buf(), e))
+}
+
+// ---------------------------------------------------------------------------
+// Project scaffolding — `sandcage init`
+// ---------------------------------------------------------------------------
+
+/// Language ecosystems we can detect from marker files.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum Ecosystem {
+    Rust,
+    Node,
+    Python,
+    Go,
+    Generic,
+}
+
+impl Ecosystem {
+    fn as_str(self) -> &'static str {
+        match self {
+            Ecosystem::Rust => "rust",
+            Ecosystem::Node => "node",
+            Ecosystem::Python => "python",
+            Ecosystem::Go => "go",
+            Ecosystem::Generic => "generic",
+        }
+    }
+}
+
+/// Detect the primary language ecosystem from files present in `dir`.
+pub fn detect_ecosystem(dir: &Path) -> Ecosystem {
+    if dir.join("Cargo.toml").exists() {
+        Ecosystem::Rust
+    } else if dir.join("package.json").exists() {
+        Ecosystem::Node
+    } else if dir.join("pyproject.toml").exists() || dir.join("requirements.txt").exists() {
+        Ecosystem::Python
+    } else if dir.join("go.mod").exists() {
+        Ecosystem::Go
+    } else {
+        Ecosystem::Generic
+    }
+}
+
+/// Build the TOML content for a `config.toml` config file.
+fn build_toml(ecosystem: Ecosystem) -> String {
+    let toolchain_and_packages = match ecosystem {
+        Ecosystem::Rust => {
+            "[toolchains]\nrust = true\n\npackages = [\"ripgrep\", \"fd-find\"]\n"
+        }
+        Ecosystem::Node => {
+            "[toolchains]\nnvm = true\n\npackages = [\"git\", \"curl\"]\n"
+        }
+        Ecosystem::Python => {
+            "[toolchains]\nuv = true\n\npackages = [\"git\", \"curl\"]\n"
+        }
+        Ecosystem::Go => {
+            "# [toolchains]\n# go = true  # TBD\n\npackages = [\"git\", \"curl\"]\n"
+        }
+        Ecosystem::Generic => {
+            "packages = [\"git\", \"curl\"]\n"
+        }
+    };
+
+    format!(
+        "# Sandcage project configuration\n\
+         # Docs: https://github.com/user/sandcage\n\
+         \n\
+         # Detected ecosystem: {ecosystem}\n\
+         \n\
+         # [env]\n\
+         # EXAMPLE_VAR = \"value\"\n\
+         \n\
+         {toolchain_and_packages}\
+         \n\
+         # mounts = [\n\
+         #   \"~/.ssh:/home/agent/.ssh:ro\",\n\
+         #   \"~/.gitconfig:/home/agent/.gitconfig:ro\",\n\
+         # ]\n\
+         \n\
+         # [agent_args]\n\
+         # claude = [\"--dangerously-skip-permissions\"]\n\
+         \n\
+         # shell = \"zsh\"\n\
+         \n\
+         # container_workspace = \"/workspace/my-project\"\n",
+        ecosystem = ecosystem.as_str(),
+    )
+}
+
+/// Check if `path` is a linked git worktree (not the main worktree).
+/// Returns the main worktree root if so.
+fn detect_linked_worktree(path: &Path) -> Option<PathBuf> {
+    let common = std::process::Command::new("git")
+        .args(["rev-parse", "--git-common-dir"])
+        .current_dir(path)
+        .output()
+        .ok()?;
+    if !common.status.success() {
+        return None;
+    }
+    let git_dir = std::process::Command::new("git")
+        .args(["rev-parse", "--git-dir"])
+        .current_dir(path)
+        .output()
+        .ok()?;
+    if !git_dir.status.success() {
+        return None;
+    }
+    let common_path = PathBuf::from(String::from_utf8_lossy(&common.stdout).trim());
+    let git_dir_path = PathBuf::from(String::from_utf8_lossy(&git_dir.stdout).trim());
+    let common_abs = path.join(&common_path).canonicalize().ok()?;
+    let git_dir_abs = path.join(&git_dir_path).canonicalize().ok()?;
+    if common_abs == git_dir_abs {
+        return None;
+    }
+    common_abs.parent().map(|p| p.to_path_buf())
+}
+
+/// Scaffold a `.sandcage/` directory in `path` with starter configuration
+/// based on the detected language ecosystem.  Returns an error if the
+/// config file already exists.
+pub fn scaffold_project(path: &Path) -> Result<()> {
+    if let Some(main_root) = detect_linked_worktree(path) {
+        return Err(InitError::InWorktree(main_root));
+    }
+
+    let sandcage_dir = path.join(".sandcage");
+    let config_path = sandcage_dir.join("config.toml");
+
+    if config_path.exists() {
+        return Err(InitError::ConfigAlreadyExists(config_path));
+    }
+
+    let ecosystem = detect_ecosystem(path);
+    let content = build_toml(ecosystem);
+
+    // Create directory structure
+    create_dir_all(&sandcage_dir)?;
+    create_dir_all(&sandcage_dir.join("overlay"))?;
+    let local_dir = sandcage_dir.join("local");
+    create_dir_all(&local_dir)?;
+    create_dir_all(&local_dir.join("overlay"))?;
+
+    // Write config file
+    std::fs::write(&config_path, &content)
+        .map_err(|e| InitError::WriteFileFailed(config_path.clone(), e))?;
+
+    // Write .sandcage/.gitignore to exclude local/
+    let inner_gitignore = sandcage_dir.join(".gitignore");
+    std::fs::write(&inner_gitignore, "local/\nshadow/\n")
+        .map_err(|e| InitError::WriteFileFailed(inner_gitignore, e))?;
+
+    println!(
+        "sandcage: initialised {} (detected ecosystem: {})",
+        config_path.display(),
+        ecosystem.as_str(),
+    );
+    println!();
+    print!("{content}");
+
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use tempfile::TempDir;
+
+    fn run(home: &Path) -> Result<()> {
+        preseed_with_home(home)
+    }
+
+    #[test]
+    fn creates_home_dir() {
+        let home = TempDir::new().expect("create tempdir");
+        run(home.path()).expect("preseed");
+        assert!(
+            home.path().join(".sandcage/homes/default").is_dir(),
+            "home dir should exist"
+        );
+    }
+
+    #[test]
+    fn creates_agent_config_dirs() {
+        let home = TempDir::new().expect("create tempdir");
+        run(home.path()).expect("preseed");
+
+        assert!(
+            home.path().join(".sandcage/homes/default/.claude").is_dir(),
+            ".claude dir should exist"
+        );
+        assert!(
+            home.path().join(".sandcage/homes/default/.codex").is_dir(),
+            ".codex dir should exist"
+        );
+        assert!(
+            home.path().join(".sandcage/homes/default/.gemini").is_dir(),
+            ".gemini dir should exist"
+        );
+    }
+
+    #[test]
+    fn seeds_claude_settings_when_absent() {
+        let home = TempDir::new().expect("create tempdir");
+        run(home.path()).expect("preseed");
+
+        let settings = home.path().join(".sandcage/homes/default/.claude/settings.json");
+        assert!(settings.exists(), "settings.json should be created");
+
+        let content = std::fs::read_to_string(&settings).expect("read settings");
+        assert_eq!(
+            content.trim(),
+            CLAUDE_SETTINGS_TEMPLATE.trim(),
+            "settings.json content should match the template"
+        );
+    }
+
+    #[test]
+    fn does_not_overwrite_existing_claude_settings() {
+        let home = TempDir::new().expect("create tempdir");
+        // Create the directory and put custom content in settings.json first
+        let claude_dir = home.path().join(".sandcage/homes/default/.claude");
+        std::fs::create_dir_all(&claude_dir).expect("mkdir");
+        let settings = claude_dir.join("settings.json");
+        std::fs::write(&settings, r#"{"existing": true}"#).expect("write");
+
+        run(home.path()).expect("preseed");
+
+        let content = std::fs::read_to_string(&settings).expect("read");
+        assert_eq!(
+            content, r#"{"existing": true}"#,
+            "existing settings.json must not be overwritten"
+        );
+    }
+
+    #[test]
+    fn creates_empty_justfile_when_absent() {
+        let home = TempDir::new().expect("create tempdir");
+        run(home.path()).expect("preseed");
+
+        let justfile = home.path().join(".sandcage/homes/default/.justfile");
+        assert!(justfile.exists(), "Justfile should be created");
+        assert_eq!(
+            std::fs::read_to_string(&justfile).expect("read"),
+            "",
+            "Justfile should be empty"
+        );
+    }
+
+    #[test]
+    fn does_not_overwrite_existing_justfile() {
+        let home = TempDir::new().expect("create tempdir");
+        // Seed a Justfile with content first
+        let sandcage_dir = home.path().join(".sandcage/homes/default");
+        std::fs::create_dir_all(&sandcage_dir).expect("mkdir");
+        let justfile = sandcage_dir.join(".justfile");
+        std::fs::write(&justfile, "default:\n\t@echo hello").expect("write");
+
+        run(home.path()).expect("preseed");
+
+        let content = std::fs::read_to_string(&justfile).expect("read");
+        assert_eq!(
+            content, "default:\n\t@echo hello",
+            "existing Justfile must not be overwritten"
+        );
+    }
+
+    #[test]
+    fn idempotent_second_run() {
+        let home = TempDir::new().expect("create tempdir");
+        run(home.path()).expect("first preseed");
+        run(home.path()).expect("second preseed should also succeed");
+
+        // All artefacts should still exist after two runs
+        assert!(home.path().join(".sandcage/homes/default/.claude").is_dir());
+        assert!(home.path().join(".sandcage/homes/default/.codex").is_dir());
+        assert!(home.path().join(".sandcage/homes/default/.gemini").is_dir());
+        assert!(home.path().join(".sandcage/homes/default/.claude/settings.json").exists());
+        assert!(home.path().join(".sandcage/homes/default/.justfile").exists());
+    }
+
+    // -----------------------------------------------------------------------
+    // scaffold_project / ecosystem detection tests
+    // -----------------------------------------------------------------------
+
+    fn touch(dir: &Path, name: &str) {
+        std::fs::write(dir.join(name), "").expect("touch file");
+    }
+
+    #[test]
+    fn detects_rust_from_cargo_toml() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "Cargo.toml");
+        assert_eq!(detect_ecosystem(dir.path()), Ecosystem::Rust);
+    }
+
+    #[test]
+    fn detects_node_from_package_json() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "package.json");
+        assert_eq!(detect_ecosystem(dir.path()), Ecosystem::Node);
+    }
+
+    #[test]
+    fn detects_python_from_pyproject_toml() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "pyproject.toml");
+        assert_eq!(detect_ecosystem(dir.path()), Ecosystem::Python);
+    }
+
+    #[test]
+    fn detects_python_from_requirements_txt() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "requirements.txt");
+        assert_eq!(detect_ecosystem(dir.path()), Ecosystem::Python);
+    }
+
+    #[test]
+    fn detects_go_from_go_mod() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "go.mod");
+        assert_eq!(detect_ecosystem(dir.path()), Ecosystem::Go);
+    }
+
+    #[test]
+    fn falls_back_to_generic_when_no_markers() {
+        let dir = TempDir::new().expect("tempdir");
+        assert_eq!(detect_ecosystem(dir.path()), Ecosystem::Generic);
+    }
+
+    #[test]
+    fn scaffold_creates_config_toml() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "Cargo.toml");
+
+        scaffold_project(dir.path()).expect("scaffold");
+
+        assert!(dir.path().join(".sandcage").join("config.toml").exists());
+    }
+
+    #[test]
+    fn scaffold_refuses_to_overwrite_existing_config() {
+        let dir = TempDir::new().expect("tempdir");
+        let sandcage_dir = dir.path().join(".sandcage");
+        std::fs::create_dir_all(&sandcage_dir).expect("mkdir");
+        std::fs::write(sandcage_dir.join("config.toml"), "# existing config\n").expect("write");
+
+        let result = scaffold_project(dir.path());
+        assert!(
+            matches!(result, Err(InitError::ConfigAlreadyExists(_))),
+            "expected ConfigAlreadyExists, got {result:?}"
+        );
+    }
+
+    #[test]
+    fn scaffold_generated_toml_is_valid() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "Cargo.toml");
+
+        scaffold_project(dir.path()).expect("scaffold");
+
+        let content = std::fs::read_to_string(dir.path().join(".sandcage").join("config.toml"))
+            .expect("read config.toml");
+        let parsed: toml::Value =
+            toml::from_str(&content).expect("TOML must be valid");
+        let table = parsed.as_table().expect("top-level TOML must be a table");
+        assert!(
+            table.contains_key("toolchains"),
+            "expected 'toolchains' key in generated TOML"
+        );
+    }
+
+    #[test]
+    fn scaffold_creates_directory_structure() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "Cargo.toml");
+
+        scaffold_project(dir.path()).expect("scaffold");
+
+        let sandcage = dir.path().join(".sandcage");
+        assert!(sandcage.join("overlay").is_dir(), "overlay/ should exist");
+        assert!(sandcage.join("local").is_dir(), "local/ should exist");
+        assert!(sandcage.join("local").join("overlay").is_dir(), "local/overlay/ should exist");
+    }
+
+    #[test]
+    fn scaffold_creates_inner_gitignore() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "Cargo.toml");
+
+        scaffold_project(dir.path()).expect("scaffold");
+
+        let gitignore = dir.path().join(".sandcage").join(".gitignore");
+        assert!(gitignore.exists(), ".sandcage/.gitignore should exist");
+        let content = std::fs::read_to_string(&gitignore).expect("read .gitignore");
+        assert!(content.contains("local/"), ".gitignore should contain 'local/'");
+    }
+
+    #[test]
+    fn scaffold_gitignore_excludes_shadow() {
+        let dir = TempDir::new().expect("tempdir");
+        touch(dir.path(), "Cargo.toml");
+        scaffold_project(dir.path()).expect("scaffold");
+        let content = std::fs::read_to_string(dir.path().join(".sandcage").join(".gitignore")).unwrap();
+        assert!(content.contains("local/"));
+        assert!(content.contains("shadow/"));
+    }
+}
diff --git a/crates/sandcage/src/lib.rs b/crates/sandcage/src/lib.rs
new file mode 100644
index 0000000..6fd75ed
--- /dev/null
+++ b/crates/sandcage/src/lib.rs
@@ -0,0 +1,18 @@
+pub mod backend;
+pub mod config;
+pub mod config_source;
+pub mod docker;
+pub mod forwarding;
+pub mod init;
+pub mod recipe;
+pub mod service;
+pub mod setup;
+pub mod shadow;
+pub mod spoof;
+pub mod ssh_config;
+pub mod tasks;
+pub mod workspace;
+pub mod worktree;
+
+#[cfg(feature = "bollard")]
+pub mod acp;
diff --git a/crates/sandcage/src/main.rs b/crates/sandcage/src/main.rs
new file mode 100644
index 0000000..d698f37
--- /dev/null
+++ b/crates/sandcage/src/main.rs
@@ -0,0 +1,412 @@
+use clap::{Parser, Subcommand};
+use miette::Diagnostic;
+use std::path::PathBuf;
+use thiserror::Error;
+
+use sandcage::config;
+use sandcage::config_source;
+use sandcage::docker;
+use sandcage::init;
+use sandcage::service;
+use sandcage::setup;
+use sandcage::workspace;
+
+/// Sandboxed containers for AI coding agents
+#[derive(Parser, Debug)]
+#[command(name = "sandcage", version, about, long_about = None)]
+struct Cli {
+    #[command(subcommand)]
+    command: Commands,
+}
+
+#[derive(Subcommand, Debug)]
+enum Commands {
+    /// Run Claude Code agent in a sandboxed container
+    Claude {
+        /// Path to the project directory (defaults to current directory)
+        #[arg(long, short)]
+        path: Option<PathBuf>,
+
+        /// Drop into a shell instead of launching the agent
+        #[arg(long)]
+        shell: bool,
+
+        /// Create a git worktree and mount it instead of the project directory
+        #[arg(long)]
+        worktree: bool,
+
+        /// Named home profile for agent auth/config (default: "default")
+        #[arg(long)]
+        home: Option<String>,
+
+        /// Arguments forwarded to the agent inside the container
+        #[arg(trailing_var_arg = true, allow_hyphen_values = true)]
+        agent_args: Vec<String>,
+    },
+    /// Run Codex agent in a sandboxed container
+    Codex {
+        /// Path to the project directory (defaults to current directory)
+        #[arg(long, short)]
+        path: Option<PathBuf>,
+
+        /// Drop into a shell instead of launching the agent
+        #[arg(long)]
+        shell: bool,
+
+        /// Create a git worktree and mount it instead of the project directory
+        #[arg(long)]
+        worktree: bool,
+
+        /// Named home profile for agent auth/config (default: "default")
+        #[arg(long)]
+        home: Option<String>,
+
+        /// Arguments forwarded to the agent inside the container
+        #[arg(trailing_var_arg = true, allow_hyphen_values = true)]
+        agent_args: Vec<String>,
+    },
+    /// Run Gemini CLI agent in a sandboxed container
+    Gemini {
+        /// Path to the project directory (defaults to current directory)
+        #[arg(long, short)]
+        path: Option<PathBuf>,
+
+        /// Drop into a shell instead of launching the agent
+        #[arg(long)]
+        shell: bool,
+
+        /// Create a git worktree and mount it instead of the project directory
+        #[arg(long)]
+        worktree: bool,
+
+        /// Named home profile for agent auth/config (default: "default")
+        #[arg(long)]
+        home: Option<String>,
+
+        /// Arguments forwarded to the agent inside the container
+        #[arg(trailing_var_arg = true, allow_hyphen_values = true)]
+        agent_args: Vec<String>,
+    },
+    /// Interactive shell with the same environment
+    Shell {
+        /// Path to the project directory (defaults to current directory)
+        #[arg(long, short)]
+        path: Option<PathBuf>,
+
+        /// Named home profile for agent auth/config (default: "default")
+        #[arg(long)]
+        home: Option<String>,
+    },
+    /// Build container images
+    Build {
+        /// Force rebuild even if images are up to date
+        #[arg(long, short)]
+        force: bool,
+
+        /// Services to build (default: all enabled services)
+        services: Vec<String>,
+    },
+    /// Initialize a .sandcage/ directory for a project
+    Init,
+    /// Remove this project's shadow volumes (named `sandcage-<project>-…`).
+    Clean {
+        /// Actually delete (default is a dry run).
+        #[arg(long)]
+        yes: bool,
+    },
+    /// Guided configuration helpers
+    Setup {
+        #[command(subcommand)]
+        action: SetupAction,
+    },
+    /// Manage sandcage-created worktrees
+    Worktree {
+        #[command(subcommand)]
+        action: WorktreeAction,
+    },
+    /// ACP (Agent Control Protocol) commands
+    #[cfg(feature = "bollard")]
+    Acp {
+        #[command(subcommand)]
+        action: sandcage::acp::AcpCommands,
+    },
+}
+
+#[derive(Subcommand, Debug)]
+enum SetupAction {
+    /// Configure SSH key access for containers
+    Ssh {
+        /// Write to global config instead of project config
+        #[arg(long)]
+        global: bool,
+
+        /// Skip confirmation prompt
+        #[arg(long)]
+        yes: bool,
+
+        /// Re-populate the SSH volume using saved selection
+        #[arg(long)]
+        refresh: bool,
+
+        /// Use legacy full bind mount instead of volume copy
+        #[arg(long)]
+        bind: bool,
+    },
+}
+
+#[derive(Subcommand, Debug)]
+enum WorktreeAction {
+    /// List sandcage-managed worktrees
+    List,
+    /// Remove all sandcage-managed worktrees
+    Clean {
+        /// Skip confirmation prompt
+        #[arg(long)]
+        yes: bool,
+    },
+}
+
+#[derive(Debug, Error, Diagnostic)]
+enum AppError {
+    #[error(transparent)]
+    #[diagnostic(transparent)]
+    Workspace(#[from] workspace::WorkspaceError),
+
+    #[error(transparent)]
+    #[diagnostic(transparent)]
+    Init(#[from] init::InitError),
+
+    #[error(transparent)]
+    #[diagnostic(transparent)]
+    Config(#[from] config::ConfigError),
+
+    #[error(transparent)]
+    #[diagnostic(transparent)]
+    Docker(#[from] docker::DockerError),
+
+    #[error(transparent)]
+    #[diagnostic(transparent)]
+    Setup(#[from] setup::SetupError),
+
+    #[error(transparent)]
+    #[diagnostic(transparent)]
+    Worktree(#[from] sandcage::worktree::WorktreeError),
+}
+
+async fn print_runtime_info(config: &sandcage::config::SandcageConfig) {
+    let backend = match sandcage::backend::default_backend() {
+        Ok(b) => b,
+        Err(_) => return,
+    };
+    if backend.check_availability().await.is_err() {
+        return; // Docker not available — will fail later with a proper error
+    }
+
+    match backend.runtime_info().await {
+        Ok(info) => {
+            use sandcage::backend::runtime::RuntimeMode;
+            match info.mode {
+                RuntimeMode::RootlessDocker => {
+                    eprintln!("sandcage: runtime \u{2192} {} (recommended)", info.mode);
+                }
+                RuntimeMode::RootfulDocker => {
+                    if config.runtime.as_deref() == Some("rootful") {
+                        eprintln!("sandcage: runtime \u{2192} {}", info.mode);
+                    } else {
+                        eprintln!("sandcage: runtime \u{2192} {} \u{2014} consider rootless for better isolation", info.mode);
+                    }
+                }
+                RuntimeMode::Podman => {
+                    eprintln!("sandcage: runtime \u{2192} {}", info.mode);
+                }
+                RuntimeMode::Unknown => {
+                    eprintln!("sandcage: runtime \u{2192} {}", info.mode);
+                }
+            }
+
+            if !info.cgroup_v2 && info.mode != RuntimeMode::Unknown {
+                eprintln!("sandcage: note: cgroup v2 not detected — resource limits will not be enforced");
+            }
+
+            if let Some(ref runtime_pref) = config.runtime {
+                match runtime_pref.as_str() {
+                    "rootless" if info.mode != RuntimeMode::RootlessDocker && info.mode != RuntimeMode::Podman => {
+                        eprintln!("sandcage: error: config requires rootless runtime, but connected daemon is {}", info.mode);
+                        std::process::exit(1);
+                    }
+                    _ => {}
+                }
+            }
+        }
+        Err(_) => {} // Silent — will fail later
+    }
+}
+
+async fn run_service(service: &str, path: Option<PathBuf>, shell_override: bool, worktree: bool, home_override: Option<String>, agent_args: Vec<String>) -> std::result::Result<(), AppError> {
+    let workspace = workspace::resolve_workspace(path.as_deref())?;
+    eprintln!("sandcage: workspace \u{2192} {}", workspace.display());
+
+    let workspace = if worktree {
+        let sandcage_home = dirs::home_dir()
+            .map(|h| h.join(".sandcage"))
+            .unwrap_or_else(|| PathBuf::from(".sandcage"));
+        let slug = sandcage::worktree::project_slug(&workspace);
+        let ts = sandcage::worktree::generate_timestamp();
+        let wt_path = sandcage::worktree::worktree_dir(&sandcage_home, &slug, &ts);
+
+        eprintln!("sandcage: creating worktree at {}", wt_path.display());
+        sandcage::worktree::create_worktree(&workspace, &wt_path, None)?;
+        eprintln!("sandcage: launching in worktree");
+        wt_path
+    } else {
+        workspace
+    };
+
+    init::preseed()?;
+
+    let home = dirs::home_dir().ok_or(init::InitError::NoHomeDir)?;
+    let global_config = home.join(".sandcage").join("config.toml");
+
+    let config_src = config_source::resolve_config_source(&workspace);
+    let (project_config, local_config) = match &config_src {
+        Some(src) => {
+            if !matches!(src.origin, config_source::ConfigOrigin::Workspace) {
+                eprintln!("sandcage: config → {} ({})", src.root.display(), src.origin);
+            }
+            (
+                src.root.join(".sandcage").join("config.toml"),
+                src.root.join(".sandcage").join("local").join("config.local.toml"),
+            )
+        }
+        None => (
+            workspace.join(".sandcage").join("config.toml"),
+            workspace.join(".sandcage").join("local").join("config.local.toml"),
+        ),
+    };
+
+    // Warn about old YAML config files that have not yet been migrated.
+    for (old_name, new_name) in [
+        ("sandcage.yml", "config.toml"),
+        ("sandcage.local.yml", "config.local.toml"),
+    ] {
+        let dir = config_src.as_ref().map(|s| s.root.as_path()).unwrap_or(&workspace);
+        let old_path = dir.join(".sandcage").join(old_name);
+        if old_path.exists() {
+            eprintln!("sandcage: warning: found old {old_name} — please migrate to {new_name}");
+        }
+    }
+
+    let mut cfg = config::resolve_config(
+        Some(&global_config),
+        Some(&project_config),
+        Some(&local_config),
+    )?;
+
+    if let Some(home_name) = home_override {
+        cfg.home = Some(home_name);
+    }
+
+    print_runtime_info(&cfg).await;
+
+    let registry = service::registry::build_default_registry(&cfg);
+
+    eprintln!("sandcage: service \u{2192} {service}");
+    let config_root = config_src.as_ref().map(|s| s.root.as_path()).unwrap_or(&workspace);
+    docker::run_service(service, &workspace, &cfg, config_root, &registry, shell_override, &agent_args).await?;
+
+    Ok(())
+}
+
+#[tokio::main]
+async fn main() -> miette::Result<()> {
+    let cli = Cli::parse();
+
+    match cli.command {
+        Commands::Claude { path, shell, worktree, home, agent_args } => {
+            run_service("claude", path, shell, worktree, home, agent_args).await?
+        }
+        Commands::Codex { path, shell, worktree, home, agent_args } => {
+            run_service("codex", path, shell, worktree, home, agent_args).await?
+        }
+        Commands::Gemini { path, shell, worktree, home, agent_args } => {
+            run_service("gemini", path, shell, worktree, home, agent_args).await?
+        }
+        Commands::Shell { path, home } => run_service("shell", path, false, false, home, vec![]).await?,
+        Commands::Build { force, services } => {
+            docker::build_images(force, &services).await?;
+        }
+        Commands::Init => {
+            let workspace = workspace::resolve_workspace(None)?;
+            init::scaffold_project(&workspace)?;
+        }
+        Commands::Clean { yes } => {
+            use miette::IntoDiagnostic;
+            let workspace = std::env::current_dir().into_diagnostic()?;
+            docker::clean(&workspace, yes).await.map_err(AppError::Docker)?;
+        }
+        Commands::Setup { action } => match action {
+            SetupAction::Ssh { global, yes, refresh, bind } => {
+                setup::run_ssh_setup(global, yes, refresh, bind)?;
+            }
+        },
+        Commands::Worktree { action } => {
+            let sandcage_home = dirs::home_dir()
+                .map(|h| h.join(".sandcage"))
+                .unwrap_or_else(|| PathBuf::from(".sandcage"));
+
+            match action {
+                WorktreeAction::List => {
+                    let entries = sandcage::worktree::list_worktrees(&sandcage_home);
+                    if entries.is_empty() {
+                        eprintln!("No sandcage worktrees found.");
+                    } else {
+                        for entry in &entries {
+                            println!("{}", entry.path.display());
+                        }
+                        eprintln!("{} worktree(s)", entries.len());
+                    }
+                }
+                WorktreeAction::Clean { yes } => {
+                    let entries = sandcage::worktree::list_worktrees(&sandcage_home);
+                    if entries.is_empty() {
+                        eprintln!("No worktrees to clean.");
+                        return Ok(());
+                    }
+
+                    eprintln!("Worktrees to remove:");
+                    for entry in &entries {
+                        eprintln!("  {}", entry.path.display());
+                    }
+
+                    if !yes {
+                        eprint!("Remove {} worktree(s)? [y/N] ", entries.len());
+                        let mut input = String::new();
+                        std::io::stdin().read_line(&mut input).ok();
+                        if !input.trim().eq_ignore_ascii_case("y") {
+                            eprintln!("Aborted.");
+                            return Ok(());
+                        }
+                    }
+
+                    let results = sandcage::worktree::clean_all(&sandcage_home, false);
+                    for (name, result) in &results {
+                        match result {
+                            Ok(()) => eprintln!("  removed: {name}"),
+                            Err(e) => eprintln!("  failed: {name}: {e}"),
+                        }
+                    }
+                }
+            }
+        }
+        #[cfg(feature = "bollard")]
+        Commands::Acp { action } => {
+            let backend = sandcage::backend::default_backend()?;
+            backend.check_availability().await
+                .map_err(|e| AppError::Docker(e))?;
+            sandcage::acp::handle(action, backend.as_ref(), None).await
+                .map_err(|e| AppError::Docker(e))?;
+        }
+    }
+
+    Ok(())
+}
diff --git a/crates/sandcage/src/recipe.rs b/crates/sandcage/src/recipe.rs
new file mode 100644
index 0000000..7fb40e3
--- /dev/null
+++ b/crates/sandcage/src/recipe.rs
@@ -0,0 +1,298 @@
+use std::collections::HashMap;
+use std::path::{Path, PathBuf};
+
+use miette::Diagnostic;
+use serde::Deserialize;
+use thiserror::Error;
+
+const RECIPES_TOML: &str = include_str!("../../../images/fragments/recipes.toml");
+const FRAGMENT_UV: &str = include_str!("../../../images/fragments/uv.Dockerfile");
+const FRAGMENT_NVM: &str = include_str!("../../../images/fragments/nvm.Dockerfile");
+const FRAGMENT_RUST: &str = include_str!("../../../images/fragments/rust.Dockerfile");
+
+/// Where a toolchain's Dockerfile fragment comes from.
+#[derive(Debug, Clone, PartialEq)]
+pub enum FragmentSource {
+    /// Compiled into the binary — built-in recipes (`include_str!`).
+    Embedded(&'static str),
+    /// A path on disk, relative to the project — custom recipes.
+    Path(PathBuf),
+}
+
+/// A fully-resolved toolchain recipe.
+#[derive(Debug, Clone, PartialEq)]
+pub struct Recipe {
+    pub name: String,
+    pub fragment: FragmentSource,
+    pub shadow: Vec<String>,
+    pub shared_caches: Vec<String>,
+}
+
+/// The deserializable shape of a recipe in TOML (built-in bundle or custom config).
+#[derive(Debug, Clone, Deserialize)]
+pub struct RecipeSpec {
+    pub fragment: String,
+    #[serde(default)]
+    pub shadow: Vec<String>,
+    #[serde(default)]
+    pub shared_caches: Vec<String>,
+}
+
+/// Map a built-in fragment filename to its embedded content.
+fn embedded_fragment(name: &str) -> Option<&'static str> {
+    match name {
+        "uv.Dockerfile" => Some(FRAGMENT_UV),
+        "nvm.Dockerfile" => Some(FRAGMENT_NVM),
+        "rust.Dockerfile" => Some(FRAGMENT_RUST),
+        _ => None,
+    }
+}
+
+/// Parse the bundled recipe TOML into resolved built-in recipes.
+/// Panics on a malformed bundle — this is compiled-in data, so a failure is a build bug.
+pub fn builtin_recipes() -> HashMap<String, Recipe> {
+    let specs: HashMap<String, RecipeSpec> =
+        toml::from_str(RECIPES_TOML).expect("bundled recipes.toml must parse");
+
+    specs
+        .into_iter()
+        .map(|(name, spec)| {
+            let fragment = embedded_fragment(&spec.fragment).unwrap_or_else(|| {
+                panic!("built-in recipe '{name}' references unknown fragment '{}'", spec.fragment)
+            });
+            let recipe = Recipe {
+                name: name.clone(),
+                fragment: FragmentSource::Embedded(fragment),
+                shadow: spec.shadow,
+                shared_caches: spec.shared_caches,
+            };
+            (name, recipe)
+        })
+        .collect()
+}
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum RecipeError {
+    #[error("toolchain '{name}' has no built-in recipe")]
+    #[diagnostic(
+        code(sandcage::recipe::no_builtin),
+        help("Provide a [toolchains.{name}] table with a `fragment` path, or remove it.")
+    )]
+    NoBuiltin { name: String },
+
+    #[error("custom toolchain '{name}' has an invalid table: {reason}")]
+    #[diagnostic(code(sandcage::recipe::invalid_spec))]
+    InvalidSpec { name: String, reason: String },
+
+    #[error("fragment for toolchain '{name}' not found at {path}")]
+    #[diagnostic(
+        code(sandcage::recipe::fragment_not_found),
+        help("Check the `fragment` path in [toolchains.{name}]; it is resolved relative to the project root.")
+    )]
+    FragmentNotFound { name: String, path: PathBuf },
+}
+
+/// Resolve `[toolchains]` config into a list of recipes.
+///
+/// - `name = true`  → built-in recipe (error if none exists).
+/// - `name = false` → disabled, skipped.
+/// - `[toolchains.name]` table → custom recipe, fully overriding any built-in of the same name.
+///   The `fragment` path is resolved relative to `project_root` and must exist.
+///
+/// Iteration order is sorted by name so output is deterministic (the input is a HashMap).
+pub fn resolve_recipes(
+    toolchains: &HashMap<String, toml::Value>,
+    project_root: &Path,
+) -> Result<Vec<Recipe>, RecipeError> {
+    let builtins = builtin_recipes();
+    let mut names: Vec<&String> = toolchains.keys().collect();
+    names.sort();
+
+    let mut out = Vec::new();
+    for name in names {
+        let value = &toolchains[name];
+        match value {
+            toml::Value::Boolean(false) => continue,
+            toml::Value::Boolean(true) => {
+                let recipe = builtins
+                    .get(name)
+                    .cloned()
+                    .ok_or_else(|| RecipeError::NoBuiltin { name: name.clone() })?;
+                out.push(recipe);
+            }
+            toml::Value::Table(_) => {
+                let spec: RecipeSpec = value.clone().try_into().map_err(|e| {
+                    RecipeError::InvalidSpec { name: name.clone(), reason: e.to_string() }
+                })?;
+                let frag_path = project_root.join(&spec.fragment);
+                if !frag_path.exists() {
+                    return Err(RecipeError::FragmentNotFound {
+                        name: name.clone(),
+                        path: frag_path,
+                    });
+                }
+                out.push(Recipe {
+                    name: name.clone(),
+                    fragment: FragmentSource::Path(frag_path),
+                    shadow: spec.shadow,
+                    shared_caches: spec.shared_caches,
+                });
+            }
+            // Strings and other scalar truthy forms: treat like `true` for back-compat
+            // with the previous `match value` logic (String meant "enabled").
+            toml::Value::String(_) => {
+                let recipe = builtins
+                    .get(name)
+                    .cloned()
+                    .ok_or_else(|| RecipeError::NoBuiltin { name: name.clone() })?;
+                out.push(recipe);
+            }
+            _ => continue,
+        }
+    }
+    Ok(out)
+}
+
+impl Recipe {
+    /// The Dockerfile fragment text for this recipe.
+    pub fn fragment_text(&self) -> Result<String, RecipeError> {
+        match &self.fragment {
+            FragmentSource::Embedded(s) => Ok((*s).to_string()),
+            FragmentSource::Path(p) => std::fs::read_to_string(p).map_err(|_| {
+                RecipeError::FragmentNotFound { name: self.name.clone(), path: p.clone() }
+            }),
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::path::PathBuf;
+
+    #[test]
+    fn fragment_source_variants_construct() {
+        let embedded = FragmentSource::Embedded("FROM scratch");
+        let path = FragmentSource::Path(PathBuf::from(".sandcage/fragments/zig.Dockerfile"));
+        assert_ne!(embedded, path);
+    }
+
+    #[test]
+    fn recipe_holds_fields() {
+        let r = Recipe {
+            name: "rust".to_string(),
+            fragment: FragmentSource::Embedded("FROM rust"),
+            shadow: vec!["target".to_string()],
+            shared_caches: vec![".cargo/registry".to_string()],
+        };
+        assert_eq!(r.name, "rust");
+        assert_eq!(r.shadow, vec!["target".to_string()]);
+        assert_eq!(r.shared_caches, vec![".cargo/registry".to_string()]);
+    }
+
+    #[test]
+    fn builtin_recipes_load_uv_nvm_rust() {
+        let builtins = builtin_recipes();
+        assert!(builtins.contains_key("uv"), "uv built-in must exist");
+        assert!(builtins.contains_key("nvm"), "nvm built-in must exist");
+        assert!(builtins.contains_key("rust"), "rust built-in must exist");
+
+        let rust = &builtins["rust"];
+        assert_eq!(rust.shadow, vec!["target".to_string()]);
+        assert_eq!(rust.shared_caches, vec![".cargo/registry".to_string()]);
+        // Built-ins resolve to embedded fragment content.
+        match &rust.fragment {
+            FragmentSource::Embedded(s) => assert!(s.contains("rustup"), "rust fragment should mention rustup"),
+            other => panic!("built-in fragment must be Embedded, got {other:?}"),
+        }
+    }
+
+    use std::collections::HashMap as Map;
+
+    fn toolchains(pairs: &[(&str, toml::Value)]) -> Map<String, toml::Value> {
+        pairs.iter().map(|(k, v)| (k.to_string(), v.clone())).collect()
+    }
+
+    #[test]
+    fn resolve_enables_builtin_on_true() {
+        let tc = toolchains(&[("rust", toml::Value::Boolean(true))]);
+        let recipes = resolve_recipes(&tc, std::path::Path::new("/proj")).expect("resolves");
+        assert_eq!(recipes.len(), 1);
+        assert_eq!(recipes[0].name, "rust");
+        assert!(matches!(recipes[0].fragment, FragmentSource::Embedded(_)));
+    }
+
+    #[test]
+    fn resolve_skips_disabled_builtin() {
+        let tc = toolchains(&[("rust", toml::Value::Boolean(false))]);
+        let recipes = resolve_recipes(&tc, std::path::Path::new("/proj")).expect("resolves");
+        assert!(recipes.is_empty(), "rust = false must not produce a recipe");
+    }
+
+    #[test]
+    fn resolve_true_for_unknown_name_errors() {
+        let tc = toolchains(&[("zig", toml::Value::Boolean(true))]);
+        let err = resolve_recipes(&tc, std::path::Path::new("/proj")).unwrap_err();
+        assert!(
+            matches!(err, RecipeError::NoBuiltin { ref name } if name == "zig"),
+            "expected NoBuiltin for zig, got {err:?}"
+        );
+    }
+
+    #[test]
+    fn resolve_custom_table_overrides_with_existing_fragment() {
+        let dir = tempfile::tempdir().unwrap();
+        let frag = dir.path().join("zig.Dockerfile");
+        std::fs::write(&frag, "RUN install zig\n").unwrap();
+
+        let mut table = toml::value::Table::new();
+        table.insert("fragment".into(), toml::Value::String("zig.Dockerfile".into()));
+        table.insert(
+            "shadow".into(),
+            toml::Value::Array(vec![toml::Value::String("zig-cache".into())]),
+        );
+        let tc = toolchains(&[("zig", toml::Value::Table(table))]);
+
+        let recipes = resolve_recipes(&tc, dir.path()).expect("resolves custom");
+        assert_eq!(recipes.len(), 1);
+        assert_eq!(recipes[0].name, "zig");
+        assert_eq!(recipes[0].shadow, vec!["zig-cache".to_string()]);
+        assert_eq!(recipes[0].fragment, FragmentSource::Path(frag));
+    }
+
+    #[test]
+    fn resolve_custom_table_missing_fragment_errors() {
+        let dir = tempfile::tempdir().unwrap();
+        let mut table = toml::value::Table::new();
+        table.insert("fragment".into(), toml::Value::String("nope.Dockerfile".into()));
+        let tc = toolchains(&[("zig", toml::Value::Table(table))]);
+
+        let err = resolve_recipes(&tc, dir.path()).unwrap_err();
+        assert!(
+            matches!(err, RecipeError::FragmentNotFound { .. }),
+            "expected FragmentNotFound, got {err:?}"
+        );
+    }
+
+    #[test]
+    fn fragment_text_reads_embedded_and_path() {
+        let embedded = Recipe {
+            name: "uv".into(),
+            fragment: FragmentSource::Embedded("FROM uv-base"),
+            shadow: vec![],
+            shared_caches: vec![],
+        };
+        assert_eq!(embedded.fragment_text().unwrap(), "FROM uv-base");
+
+        let dir = tempfile::tempdir().unwrap();
+        let frag = dir.path().join("z.Dockerfile");
+        std::fs::write(&frag, "RUN custom\n").unwrap();
+        let custom = Recipe {
+            name: "zig".into(),
+            fragment: FragmentSource::Path(frag),
+            shadow: vec![],
+            shared_caches: vec![],
+        };
+        assert_eq!(custom.fragment_text().unwrap(), "RUN custom\n");
+    }
+}
diff --git a/crates/sandcage/src/service/builtin.rs b/crates/sandcage/src/service/builtin.rs
new file mode 100644
index 0000000..0c30020
--- /dev/null
+++ b/crates/sandcage/src/service/builtin.rs
@@ -0,0 +1,166 @@
+use super::ServiceDef;
+
+pub const CLAUDE_ENTRYPOINT: &str = r#"#!/bin/sh
+set -e
+CLAUDE_BIN="$HOME/.local/bin/claude"
+if [ ! -x "$CLAUDE_BIN" ]; then
+    echo "sandcage: installing Claude Code..." >&2
+    WORKDIR="$(pwd)"
+    cd "$HOME"
+    curl -fsSL https://claude.ai/install.sh | bash >&2
+    cd "$WORKDIR"
+fi
+exec "$CLAUDE_BIN" "$@"
+"#;
+
+pub const CODEX_ENTRYPOINT: &str = r#"#!/bin/sh
+set -e
+CODEX_BIN="$HOME/.local/bin/codex"
+if [ ! -x "$CODEX_BIN" ]; then
+    echo "sandcage: installing Codex..." >&2
+    WORKDIR="$(pwd)"
+    cd "$HOME"
+    arch=$(uname -m)
+    case "$arch" in
+        x86_64)  target="x86_64-unknown-linux-musl" ;;
+        aarch64) target="aarch64-unknown-linux-musl" ;;
+        *)       echo "sandcage: unsupported arch: $arch" >&2; exit 1 ;;
+    esac
+    mkdir -p "$HOME/.local/bin"
+    curl -fsSL "https://github.com/openai/codex/releases/latest/download/codex-${target}.tar.gz" \
+        | tar xz -C "$HOME/.local/bin"
+    mv "$HOME/.local/bin/codex-${target}" "$CODEX_BIN"
+    cd "$WORKDIR"
+fi
+exec "$CODEX_BIN" "$@"
+"#;
+
+pub const GEMINI_ENTRYPOINT: &str = r#"#!/bin/sh
+set -e
+GEMINI_BIN="$HOME/.local/bin/gemini"
+if [ ! -x "$GEMINI_BIN" ]; then
+    echo "sandcage: installing Gemini CLI..." >&2
+    WORKDIR="$(pwd)"
+    cd "$HOME"
+    npm install -g @anthropic-ai/gemini-cli >&2
+    cd "$WORKDIR"
+fi
+exec "$GEMINI_BIN" "$@"
+"#;
+
+pub fn claude() -> ServiceDef {
+    ServiceDef {
+        name: "claude".to_string(),
+        description: "Claude Code agent".to_string(),
+        enabled: true,
+        entrypoint_name: Some("sandcage-claude-entrypoint".to_string()),
+        entrypoint_script: Some(CLAUDE_ENTRYPOINT.to_string()),
+        config_dir: Some(".claude".to_string()),
+    }
+}
+
+pub fn codex() -> ServiceDef {
+    ServiceDef {
+        name: "codex".to_string(),
+        description: "Codex agent".to_string(),
+        enabled: true,
+        entrypoint_name: Some("sandcage-codex-entrypoint".to_string()),
+        entrypoint_script: Some(CODEX_ENTRYPOINT.to_string()),
+        config_dir: Some(".codex".to_string()),
+    }
+}
+
+pub fn gemini() -> ServiceDef {
+    ServiceDef {
+        name: "gemini".to_string(),
+        description: "Gemini CLI agent".to_string(),
+        enabled: true,
+        entrypoint_name: Some("sandcage-gemini-entrypoint".to_string()),
+        entrypoint_script: Some(GEMINI_ENTRYPOINT.to_string()),
+        config_dir: Some(".gemini".to_string()),
+    }
+}
+
+pub fn shell() -> ServiceDef {
+    ServiceDef {
+        name: "shell".to_string(),
+        description: "Interactive shell".to_string(),
+        enabled: true,
+        entrypoint_name: Some("/bin/zsh".to_string()),
+        entrypoint_script: None,
+        config_dir: None,
+    }
+}
+
+pub fn all() -> Vec<ServiceDef> {
+    vec![claude(), codex(), gemini(), shell()]
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::service::Service;
+
+    #[test]
+    fn all_builtins_are_enabled_by_default() {
+        for svc in all() {
+            assert!(svc.enabled(), "{} should be enabled by default", svc.name());
+        }
+    }
+
+    #[test]
+    fn all_builtins_have_unique_names() {
+        let services = all();
+        let mut names: Vec<&str> = services.iter().map(|s| s.name()).collect();
+        let count = names.len();
+        names.dedup();
+        assert_eq!(names.len(), count, "service names must be unique");
+    }
+
+    #[test]
+    fn agent_services_have_entrypoint_scripts() {
+        for svc in [claude(), codex(), gemini()] {
+            assert!(
+                svc.entrypoint_script().is_some(),
+                "{} should have an entrypoint script",
+                svc.name()
+            );
+            assert!(
+                svc.entrypoint_script().unwrap().starts_with("#!/bin/sh"),
+                "{} entrypoint should start with shebang",
+                svc.name()
+            );
+        }
+    }
+
+    #[test]
+    fn shell_has_no_entrypoint_script() {
+        let svc = shell();
+        assert!(svc.entrypoint_script().is_none());
+        assert_eq!(svc.entrypoint_name(), Some("/bin/zsh"));
+    }
+
+    #[test]
+    fn agent_services_have_config_dirs() {
+        assert_eq!(claude().config_dir(), Some(".claude"));
+        assert_eq!(codex().config_dir(), Some(".codex"));
+        assert_eq!(gemini().config_dir(), Some(".gemini"));
+    }
+
+    #[test]
+    fn shell_has_no_config_dir() {
+        assert_eq!(shell().config_dir(), None);
+    }
+
+    #[test]
+    fn claude_entrypoint_installs_from_claude_ai() {
+        assert!(CLAUDE_ENTRYPOINT.contains("claude.ai/install.sh"));
+    }
+
+    #[test]
+    fn codex_entrypoint_handles_arch_detection() {
+        assert!(CODEX_ENTRYPOINT.contains("uname -m"));
+        assert!(CODEX_ENTRYPOINT.contains("x86_64"));
+        assert!(CODEX_ENTRYPOINT.contains("aarch64"));
+    }
+}
diff --git a/crates/sandcage/src/service/compose.rs b/crates/sandcage/src/service/compose.rs
new file mode 100644
index 0000000..3ae99b8
--- /dev/null
+++ b/crates/sandcage/src/service/compose.rs
@@ -0,0 +1,154 @@
+use super::registry::ServiceRegistry;
+use super::ComposeContext;
+
+pub fn generate_compose(registry: &ServiceRegistry, ctx: &ComposeContext) -> String {
+    let mut services = serde_yaml::Mapping::new();
+
+    for svc in registry.enabled() {
+        let def = svc.compose_service(ctx);
+        let value = serde_yaml::to_value(&def).expect("ComposeServiceDef must serialize");
+        services.insert(
+            serde_yaml::Value::String(svc.name().to_string()),
+            value,
+        );
+    }
+
+    let mut doc = serde_yaml::Mapping::new();
+    doc.insert(
+        serde_yaml::Value::String("services".to_string()),
+        serde_yaml::Value::Mapping(services),
+    );
+
+    serde_yaml::to_string(&serde_yaml::Value::Mapping(doc))
+        .expect("compose doc must serialize")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::service::builtin;
+    use crate::service::ServiceDef;
+    use std::path::PathBuf;
+
+    fn test_context() -> ComposeContext {
+        ComposeContext {
+            uid: "1000".to_string(),
+            gid: "1000".to_string(),
+            workspace: PathBuf::from("/home/user/projects/my-app"),
+            container_dir: "/workspace/my-app".to_string(),
+            sandcage_home: PathBuf::from("/home/user/.sandcage"),
+            image: "sandcage".to_string(),
+            config_root: PathBuf::from("/home/user/projects/my-app"),
+            forwarding_socket: None,
+            agent_home: PathBuf::from("/home/user/.sandcage/homes/default"),
+        }
+    }
+
+    fn registry_with(services: Vec<ServiceDef>) -> ServiceRegistry {
+        let mut reg = ServiceRegistry::new();
+        for svc in services {
+            reg.register(Box::new(svc));
+        }
+        reg
+    }
+
+    #[test]
+    fn generates_valid_yaml() {
+        let reg = registry_with(vec![builtin::claude(), builtin::shell()]);
+        let yaml = generate_compose(&reg, &test_context());
+
+        let parsed: serde_yaml::Value =
+            serde_yaml::from_str(&yaml).expect("output must be valid YAML");
+        assert!(parsed.as_mapping().unwrap().contains_key("services"));
+    }
+
+    #[test]
+    fn contains_only_enabled_services() {
+        let mut codex = builtin::codex();
+        codex.enabled = false;
+
+        let reg = registry_with(vec![builtin::claude(), codex, builtin::shell()]);
+        let yaml = generate_compose(&reg, &test_context());
+
+        assert!(yaml.contains("claude:"), "claude should be present");
+        assert!(yaml.contains("shell:"), "shell should be present");
+        assert!(!yaml.contains("codex:"), "disabled codex should be absent");
+    }
+
+    #[test]
+    fn empty_registry_produces_empty_services() {
+        let reg = ServiceRegistry::new();
+        let yaml = generate_compose(&reg, &test_context());
+
+        let parsed: serde_yaml::Value = serde_yaml::from_str(&yaml).unwrap();
+        let services = parsed.as_mapping().unwrap().get("services").unwrap();
+        assert!(
+            services.as_mapping().unwrap().is_empty(),
+            "services should be empty mapping"
+        );
+    }
+
+    #[test]
+    fn service_has_correct_image() {
+        let reg = registry_with(vec![builtin::claude()]);
+        let yaml = generate_compose(&reg, &test_context());
+        assert!(yaml.contains("sandcage:latest"));
+    }
+
+    #[test]
+    fn service_has_correct_entrypoint() {
+        let reg = registry_with(vec![builtin::claude()]);
+        let yaml = generate_compose(&reg, &test_context());
+        assert!(yaml.contains("sandcage-claude-entrypoint"));
+    }
+
+    #[test]
+    fn service_has_correct_working_dir() {
+        let reg = registry_with(vec![builtin::claude()]);
+        let yaml = generate_compose(&reg, &test_context());
+        assert!(yaml.contains("/workspace/my-app"));
+    }
+
+    #[test]
+    fn service_has_home_volume() {
+        let reg = registry_with(vec![builtin::claude()]);
+        let yaml = generate_compose(&reg, &test_context());
+        assert!(yaml.contains("/home/user/.sandcage/homes/default:/home/agent"));
+    }
+
+    #[test]
+    fn all_four_builtins_generate_successfully() {
+        let reg = registry_with(builtin::all());
+        let yaml = generate_compose(&reg, &test_context());
+
+        for name in ["claude", "codex", "gemini", "shell"] {
+            assert!(
+                yaml.contains(&format!("{name}:")),
+                "compose should contain {name} service"
+            );
+        }
+    }
+
+    #[test]
+    fn backward_compat_claude_codex_shell_match_old_structure() {
+        let reg = registry_with(vec![
+            builtin::claude(),
+            builtin::codex(),
+            builtin::shell(),
+        ]);
+        let yaml = generate_compose(&reg, &test_context());
+        let parsed: serde_yaml::Value = serde_yaml::from_str(&yaml).unwrap();
+        let services = parsed["services"].as_mapping().unwrap();
+
+        for name in ["claude", "codex", "shell"] {
+            let svc = &services[&serde_yaml::Value::String(name.to_string())];
+            assert_eq!(
+                svc["image"].as_str().unwrap(),
+                "sandcage:latest",
+                "{name}: image"
+            );
+            assert!(svc["tty"].as_bool().unwrap(), "{name}: tty");
+            assert!(svc["stdin_open"].as_bool().unwrap(), "{name}: stdin_open");
+        }
+    }
+}
diff --git a/crates/sandcage/src/service/mod.rs b/crates/sandcage/src/service/mod.rs
new file mode 100644
index 0000000..a71e9dd
--- /dev/null
+++ b/crates/sandcage/src/service/mod.rs
@@ -0,0 +1,266 @@
+pub mod builtin;
+pub mod compose;
+pub mod registry;
+
+use std::path::PathBuf;
+
+use serde::{Deserialize, Serialize};
+
+// ---------------------------------------------------------------------------
+// Compose output types
+// ---------------------------------------------------------------------------
+
+#[derive(Debug, Clone)]
+pub struct ComposeContext {
+    pub uid: String,
+    pub gid: String,
+    pub workspace: PathBuf,
+    pub container_dir: String,
+    pub sandcage_home: PathBuf,
+    pub image: String,
+    /// Directory containing .sandcage/ (may differ from workspace in worktrees)
+    pub config_root: PathBuf,
+    /// Unix socket for the forwarding daemon (bind-mounted into container).
+    pub forwarding_socket: Option<PathBuf>,
+    /// Resolved path to the agent home directory on the host
+    /// (e.g. `~/.sandcage/homes/work/`).
+    pub agent_home: PathBuf,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct ComposeServiceDef {
+    pub image: String,
+    pub entrypoint: Vec<String>,
+    pub working_dir: String,
+    pub user: String,
+    pub volumes: Vec<String>,
+    pub environment: Vec<String>,
+    #[serde(skip_serializing_if = "Vec::is_empty")]
+    pub tmpfs: Vec<String>,
+    pub tty: bool,
+    pub stdin_open: bool,
+}
+
+// ---------------------------------------------------------------------------
+// Service trait
+// ---------------------------------------------------------------------------
+
+pub trait Service: std::fmt::Debug + Send + Sync {
+    fn name(&self) -> &str;
+    fn description(&self) -> &str;
+    fn enabled(&self) -> bool;
+    fn set_enabled(&mut self, enabled: bool);
+    fn entrypoint_name(&self) -> Option<&str>;
+    fn entrypoint_script(&self) -> Option<&str>;
+    fn config_dir(&self) -> Option<&str>;
+    fn compose_service(&self, ctx: &ComposeContext) -> ComposeServiceDef;
+}
+
+// ---------------------------------------------------------------------------
+// ServiceDef — standard implementation
+// ---------------------------------------------------------------------------
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ServiceDef {
+    pub name: String,
+    pub description: String,
+    pub enabled: bool,
+    pub entrypoint_name: Option<String>,
+    pub entrypoint_script: Option<String>,
+    pub config_dir: Option<String>,
+}
+
+impl Service for ServiceDef {
+    fn name(&self) -> &str {
+        &self.name
+    }
+
+    fn description(&self) -> &str {
+        &self.description
+    }
+
+    fn enabled(&self) -> bool {
+        self.enabled
+    }
+
+    fn set_enabled(&mut self, enabled: bool) {
+        self.enabled = enabled;
+    }
+
+    fn entrypoint_name(&self) -> Option<&str> {
+        self.entrypoint_name.as_deref()
+    }
+
+    fn entrypoint_script(&self) -> Option<&str> {
+        self.entrypoint_script.as_deref()
+    }
+
+    fn config_dir(&self) -> Option<&str> {
+        self.config_dir.as_deref()
+    }
+
+    fn compose_service(&self, ctx: &ComposeContext) -> ComposeServiceDef {
+        let entrypoint = match self.entrypoint_name.as_deref() {
+            Some(name) => vec![name.to_string()],
+            None => vec!["/bin/zsh".to_string()],
+        };
+
+        ComposeServiceDef {
+            image: format!("{}:latest", ctx.image),
+            entrypoint,
+            working_dir: ctx.container_dir.clone(),
+            user: format!("{}:{}", ctx.uid, ctx.gid),
+            volumes: vec![
+                format!("{}:/home/agent", ctx.agent_home.display()),
+                format!(
+                    "{}:{}",
+                    ctx.workspace.display(),
+                    ctx.container_dir
+                ),
+            ],
+            environment: vec!["HOME=/home/agent".to_string()],
+            tmpfs: vec![format!("{}/.sandcage", ctx.container_dir)],
+            tty: true,
+            stdin_open: true,
+        }
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn test_context() -> ComposeContext {
+        ComposeContext {
+            uid: "1000".to_string(),
+            gid: "1000".to_string(),
+            workspace: PathBuf::from("/home/user/projects/my-app"),
+            agent_home: PathBuf::from("/home/user/.sandcage/homes/default"),
+            container_dir: "/workspace/my-app".to_string(),
+            sandcage_home: PathBuf::from("/home/user/.sandcage"),
+            image: "sandcage".to_string(),
+            config_root: PathBuf::from("/home/user/projects/my-app"),
+            forwarding_socket: None,
+        }
+    }
+
+    fn agent_service() -> ServiceDef {
+        ServiceDef {
+            name: "test-agent".to_string(),
+            description: "A test agent".to_string(),
+            enabled: true,
+            entrypoint_name: Some("sandcage-test-entrypoint".to_string()),
+            entrypoint_script: Some("#!/bin/sh\nexec echo hello".to_string()),
+            config_dir: Some(".test-agent".to_string()),
+        }
+    }
+
+    #[test]
+    fn service_def_trait_accessors() {
+        let svc = agent_service();
+        assert_eq!(svc.name(), "test-agent");
+        assert_eq!(svc.description(), "A test agent");
+        assert!(svc.enabled());
+        assert_eq!(svc.entrypoint_name(), Some("sandcage-test-entrypoint"));
+        assert!(svc.entrypoint_script().is_some());
+        assert_eq!(svc.config_dir(), Some(".test-agent"));
+    }
+
+    #[test]
+    fn service_def_set_enabled() {
+        let mut svc = agent_service();
+        assert!(svc.enabled());
+        svc.set_enabled(false);
+        assert!(!svc.enabled());
+    }
+
+    #[test]
+    fn compose_service_has_correct_image() {
+        let svc = agent_service();
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.image, "sandcage:latest");
+    }
+
+    #[test]
+    fn compose_service_uses_entrypoint_name() {
+        let svc = agent_service();
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.entrypoint, vec!["sandcage-test-entrypoint"]);
+    }
+
+    #[test]
+    fn compose_service_shell_uses_bin_zsh_when_no_entrypoint() {
+        let svc = ServiceDef {
+            entrypoint_name: None,
+            ..agent_service()
+        };
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.entrypoint, vec!["/bin/zsh"]);
+    }
+
+    #[test]
+    fn compose_service_has_correct_user() {
+        let svc = agent_service();
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.user, "1000:1000");
+    }
+
+    #[test]
+    fn compose_service_has_home_and_workspace_volumes() {
+        let svc = agent_service();
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.volumes.len(), 2);
+        assert!(compose.volumes[0].contains("/homes/default:/home/agent"));
+        assert!(compose.volumes[1].contains("/workspace/my-app"));
+    }
+
+    #[test]
+    fn compose_service_has_tty_and_stdin() {
+        let svc = agent_service();
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert!(compose.tty);
+        assert!(compose.stdin_open);
+    }
+
+    #[test]
+    fn shell_service_uses_explicit_entrypoint() {
+        let svc = ServiceDef {
+            name: "shell".to_string(),
+            description: "Interactive shell".to_string(),
+            enabled: true,
+            entrypoint_name: Some("/bin/zsh".to_string()),
+            entrypoint_script: None,
+            config_dir: None,
+        };
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.entrypoint, vec!["/bin/zsh"]);
+    }
+
+    #[test]
+    fn compose_service_uses_configured_image() {
+        let svc = agent_service();
+        let mut ctx = test_context();
+        ctx.image = "custom-img".to_string();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.image, "custom-img:latest");
+    }
+
+    #[test]
+    fn compose_service_excludes_sandcage_dir_via_tmpfs() {
+        let svc = agent_service();
+        let ctx = test_context();
+        let compose = svc.compose_service(&ctx);
+        assert_eq!(compose.tmpfs, vec!["/workspace/my-app/.sandcage"]);
+    }
+}
diff --git a/crates/sandcage/src/service/registry.rs b/crates/sandcage/src/service/registry.rs
new file mode 100644
index 0000000..fcd211a
--- /dev/null
+++ b/crates/sandcage/src/service/registry.rs
@@ -0,0 +1,237 @@
+use indexmap::IndexMap;
+
+use super::Service;
+
+pub struct ServiceRegistry {
+    services: IndexMap<String, Box<dyn Service>>,
+}
+
+impl Default for ServiceRegistry {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
+impl ServiceRegistry {
+    pub fn new() -> Self {
+        Self {
+            services: IndexMap::new(),
+        }
+    }
+
+    pub fn register(&mut self, service: Box<dyn Service>) {
+        self.services.insert(service.name().to_string(), service);
+    }
+
+    pub fn get(&self, name: &str) -> Option<&dyn Service> {
+        self.services.get(name).map(|s| s.as_ref())
+    }
+
+    pub fn get_mut(&mut self, name: &str) -> Option<&mut Box<dyn Service>> {
+        self.services.get_mut(name)
+    }
+
+    pub fn enabled(&self) -> impl Iterator<Item = &dyn Service> {
+        self.services.values().filter(|s| s.enabled()).map(|s| s.as_ref())
+    }
+
+    pub fn all(&self) -> impl Iterator<Item = &dyn Service> {
+        self.services.values().map(|s| s.as_ref())
+    }
+
+    pub fn names(&self) -> impl Iterator<Item = &str> {
+        self.services.keys().map(|k| k.as_str())
+    }
+
+    pub fn enabled_names(&self) -> Vec<&str> {
+        self.enabled().map(|s| s.name()).collect()
+    }
+
+    pub fn apply_overrides(&mut self, config: &crate::config::SandcageConfig) {
+        if let Some(ref overrides) = config.services {
+            for (name, ovr) in overrides {
+                if let Some(svc) = self.get_mut(name)
+                    && let Some(enabled) = ovr.enabled
+                {
+                    svc.set_enabled(enabled);
+                }
+            }
+        }
+    }
+}
+
+impl std::fmt::Debug for ServiceRegistry {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        f.debug_struct("ServiceRegistry")
+            .field("services", &self.services.keys().collect::<Vec<_>>())
+            .finish()
+    }
+}
+
+pub fn build_default_registry(config: &crate::config::SandcageConfig) -> ServiceRegistry {
+    let mut reg = ServiceRegistry::new();
+    for svc in super::builtin::all() {
+        reg.register(Box::new(svc));
+    }
+    reg.apply_overrides(config);
+    reg
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::service::ServiceDef;
+
+    fn make_service(name: &str, enabled: bool) -> Box<dyn Service> {
+        Box::new(ServiceDef {
+            name: name.to_string(),
+            description: format!("{name} service"),
+            enabled,
+            entrypoint_name: Some(format!("sandcage-{name}-entrypoint")),
+            entrypoint_script: Some("#!/bin/sh\nexec echo test".to_string()),
+            config_dir: Some(format!(".{name}")),
+        })
+    }
+
+    #[test]
+    fn register_and_get() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+        assert!(reg.get("claude").is_some());
+        assert!(reg.get("nonexistent").is_none());
+    }
+
+    #[test]
+    fn enabled_filters_disabled_services() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+        reg.register(make_service("codex", false));
+        reg.register(make_service("shell", true));
+
+        let enabled: Vec<&str> = reg.enabled().map(|s| s.name()).collect();
+        assert_eq!(enabled, vec!["claude", "shell"]);
+    }
+
+    #[test]
+    fn all_returns_every_service() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+        reg.register(make_service("codex", false));
+
+        let all: Vec<&str> = reg.all().map(|s| s.name()).collect();
+        assert_eq!(all, vec!["claude", "codex"]);
+    }
+
+    #[test]
+    fn names_returns_all_keys() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+        reg.register(make_service("codex", true));
+
+        let names: Vec<&str> = reg.names().collect();
+        assert_eq!(names, vec!["claude", "codex"]);
+    }
+
+    #[test]
+    fn preserves_insertion_order() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("shell", true));
+        reg.register(make_service("claude", true));
+        reg.register(make_service("codex", true));
+
+        let names: Vec<&str> = reg.names().collect();
+        assert_eq!(names, vec!["shell", "claude", "codex"]);
+    }
+
+    #[test]
+    fn get_mut_can_disable_service() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+
+        assert!(reg.get("claude").unwrap().enabled());
+        reg.get_mut("claude").unwrap().set_enabled(false);
+        assert!(!reg.get("claude").unwrap().enabled());
+    }
+
+    #[test]
+    fn enabled_names_convenience() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+        reg.register(make_service("codex", false));
+        reg.register(make_service("shell", true));
+
+        assert_eq!(reg.enabled_names(), vec!["claude", "shell"]);
+    }
+
+    use crate::config::{SandcageConfig, ServiceOverride};
+    use std::collections::HashMap;
+
+    #[test]
+    fn apply_overrides_disables_service() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+        reg.register(make_service("codex", true));
+
+        let mut overrides = HashMap::new();
+        overrides.insert("codex".to_string(), ServiceOverride { enabled: Some(false) });
+        let config = SandcageConfig {
+            services: Some(overrides),
+            ..Default::default()
+        };
+
+        reg.apply_overrides(&config);
+        assert!(reg.get("claude").unwrap().enabled());
+        assert!(!reg.get("codex").unwrap().enabled());
+    }
+
+    #[test]
+    fn apply_overrides_ignores_unknown_services() {
+        let mut reg = ServiceRegistry::new();
+        reg.register(make_service("claude", true));
+
+        let mut overrides = HashMap::new();
+        overrides.insert("nonexistent".to_string(), ServiceOverride { enabled: Some(false) });
+        let config = SandcageConfig {
+            services: Some(overrides),
+            ..Default::default()
+        };
+
+        reg.apply_overrides(&config);
+        assert!(reg.get("claude").unwrap().enabled());
+    }
+
+    #[test]
+    fn build_default_registry_has_all_builtins() {
+        let config = SandcageConfig::default();
+        let reg = build_default_registry(&config);
+
+        for name in ["claude", "codex", "gemini", "shell"] {
+            assert!(
+                reg.get(name).is_some(),
+                "{name} should be in default registry"
+            );
+            assert!(
+                reg.get(name).unwrap().enabled(),
+                "{name} should be enabled by default"
+            );
+        }
+    }
+
+    #[test]
+    fn build_default_registry_applies_overrides() {
+        let mut overrides = HashMap::new();
+        overrides.insert("codex".to_string(), ServiceOverride { enabled: Some(false) });
+        overrides.insert("gemini".to_string(), ServiceOverride { enabled: Some(false) });
+
+        let config = SandcageConfig {
+            services: Some(overrides),
+            ..Default::default()
+        };
+
+        let reg = build_default_registry(&config);
+        assert!(reg.get("claude").unwrap().enabled());
+        assert!(!reg.get("codex").unwrap().enabled());
+        assert!(!reg.get("gemini").unwrap().enabled());
+        assert!(reg.get("shell").unwrap().enabled());
+    }
+}
diff --git a/crates/sandcage/src/setup.rs b/crates/sandcage/src/setup.rs
new file mode 100644
index 0000000..1e17d36
--- /dev/null
+++ b/crates/sandcage/src/setup.rs
@@ -0,0 +1,1358 @@
+use std::collections::BTreeMap;
+use std::path::{Path, PathBuf};
+
+use miette::Diagnostic;
+use thiserror::Error;
+
+use figment::providers::Format as _;
+
+use crate::config::{SandcageConfig, SshKeyEntry};
+use crate::ssh_config::{self, SshHostBlock};
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum SetupError {
+    #[error("No SSH directory found at {0}")]
+    #[diagnostic(code(sandcage::setup::no_ssh_dir))]
+    NoSshDir(PathBuf),
+
+    #[error("Failed to read directory {0}: {1}")]
+    #[diagnostic(code(sandcage::setup::read_dir_failed))]
+    ReadDirFailed(PathBuf, #[source] std::io::Error),
+
+    #[error("No .sandcage/sandcage.yml found. Run `sandcage init` first, use `--global`, or set SANDCAGE_CONFIG_DIR.")]
+    #[diagnostic(
+        code(sandcage::setup::no_project_config),
+        help("In a git worktree, .sandcage/ is loaded from the main worktree root. \
+              You can also use a redirect file (sandcage.yml with redirect: key).")
+    )]
+    NoProjectConfig,
+
+    #[error("Failed to read config file {0}: {1}")]
+    #[diagnostic(code(sandcage::setup::config_read_failed))]
+    ConfigReadFailed(PathBuf, #[source] std::io::Error),
+
+    #[error("Failed to parse config file {0}: {1}")]
+    #[diagnostic(code(sandcage::setup::config_parse_failed))]
+    ConfigParseFailed(PathBuf, String),
+
+    #[error("Failed to write config file {0}: {1}")]
+    #[diagnostic(code(sandcage::setup::config_write_failed))]
+    ConfigWriteFailed(PathBuf, #[source] std::io::Error),
+
+    #[error("Cannot determine home directory")]
+    #[diagnostic(code(sandcage::setup::no_home_dir))]
+    NoHomeDir,
+
+    #[error("Docker command failed: {0}")]
+    #[diagnostic(code(sandcage::setup::docker_failed))]
+    DockerFailed(String),
+}
+
+pub type Result<T> = std::result::Result<T, SetupError>;
+
+const SSH_MOUNT: &str = "~/.ssh:/home/agent/.ssh:ro";
+
+const SSH_CONFIG_FILES: &[&str] = &["config", "known_hosts", "known_hosts.old", "authorized_keys"];
+
+#[derive(Debug, Clone, PartialEq)]
+pub struct SshScanResult {
+    pub keys: Vec<String>,
+    pub config_files: Vec<String>,
+    pub other_count: usize,
+}
+
+pub fn scan_ssh_dir(ssh_dir: &Path) -> Result<SshScanResult> {
+    if !ssh_dir.is_dir() {
+        return Err(SetupError::NoSshDir(ssh_dir.to_path_buf()));
+    }
+
+    let entries = std::fs::read_dir(ssh_dir)
+        .map_err(|e| SetupError::ReadDirFailed(ssh_dir.to_path_buf(), e))?;
+
+    let mut keys = Vec::new();
+    let mut config_files = Vec::new();
+    let mut other_count: usize = 0;
+
+    for entry in entries {
+        let entry = entry.map_err(|e| SetupError::ReadDirFailed(ssh_dir.to_path_buf(), e))?;
+        let file_name = entry.file_name().to_string_lossy().into_owned();
+
+        if file_name.ends_with(".pub") {
+            let base = file_name.strip_suffix(".pub").unwrap().to_string();
+            keys.push(base);
+        } else if SSH_CONFIG_FILES.contains(&file_name.as_str()) {
+            config_files.push(file_name);
+        } else {
+            other_count += 1;
+        }
+    }
+
+    keys.sort();
+    config_files.sort();
+
+    Ok(SshScanResult {
+        keys,
+        config_files,
+        other_count,
+    })
+}
+
+pub fn check_existing_mount(config: &SandcageConfig, mount: &str) -> bool {
+    config
+        .mounts
+        .as_ref()
+        .is_some_and(|m| m.iter().any(|entry| entry == mount))
+}
+
+pub fn add_mount_to_yaml(path: &Path, mount: &str) -> Result<()> {
+    let content = std::fs::read_to_string(path)
+        .map_err(|e| SetupError::ConfigReadFailed(path.to_path_buf(), e))?;
+
+    let mut config: SandcageConfig = if content.trim().is_empty() {
+        SandcageConfig::default()
+    } else {
+        serde_yaml::from_str(&content)
+            .map_err(|e| SetupError::ConfigParseFailed(path.to_path_buf(), e.to_string()))?
+    };
+
+    let mounts = config.mounts.get_or_insert_with(Vec::new);
+    mounts.push(mount.to_string());
+
+    let yaml = serde_yaml::to_string(&config)
+        .map_err(|e| SetupError::ConfigParseFailed(path.to_path_buf(), e.to_string()))?;
+
+    let output = rehydrate_yaml_comments(&content, &yaml);
+
+    std::fs::write(path, output)
+        .map_err(|e| SetupError::ConfigWriteFailed(path.to_path_buf(), e))?;
+
+    Ok(())
+}
+
+fn rehydrate_yaml_comments(original: &str, generated: &str) -> String {
+    use std::collections::HashMap;
+
+    let mut key_comments: Vec<(Option<String>, Vec<String>)> = Vec::new();
+    let mut pending: Vec<String> = Vec::new();
+
+    for line in original.lines() {
+        let trimmed = line.trim();
+        let is_blank = trimmed.is_empty();
+        let is_top_comment =
+            trimmed.starts_with('#') && !line.starts_with(' ') && !line.starts_with('\t');
+        let is_top_level_key = !is_blank
+            && !is_top_comment
+            && !line.starts_with(' ')
+            && !line.starts_with('\t')
+            && !line.starts_with('-')
+            && line.contains(':');
+
+        if is_top_level_key {
+            let key = line.split(':').next().unwrap().trim().to_string();
+            key_comments.push((Some(key), std::mem::take(&mut pending)));
+        } else if is_blank || is_top_comment {
+            pending.push(line.to_string());
+        }
+    }
+    if !pending.is_empty() {
+        key_comments.push((None, pending));
+    }
+
+    let comment_map: HashMap<&str, &[String]> = key_comments
+        .iter()
+        .filter_map(|(k, v)| k.as_deref().map(|k| (k, v.as_slice())))
+        .collect();
+
+    let preamble = key_comments
+        .first()
+        .and_then(|(k, v)| if k.is_some() { Some(v.as_slice()) } else { None });
+
+    let trailer = key_comments
+        .last()
+        .and_then(|(k, v)| if k.is_none() { Some(v.as_slice()) } else { None });
+
+    let mut result = String::new();
+    let mut first_key = true;
+
+    for line in generated.lines() {
+        let trimmed = line.trim();
+        let is_top_level_key = !trimmed.is_empty()
+            && !line.starts_with(' ')
+            && !line.starts_with('\t')
+            && !line.starts_with('-')
+            && line.contains(':');
+
+        if is_top_level_key {
+            let key = line.split(':').next().unwrap().trim();
+            if first_key {
+                if let Some(pre) = preamble {
+                    for c in pre {
+                        result.push_str(c);
+                        result.push('\n');
+                    }
+                }
+                first_key = false;
+            } else if let Some(comments) = comment_map.get(key) {
+                for c in *comments {
+                    result.push_str(c);
+                    result.push('\n');
+                }
+            }
+        }
+        result.push_str(line);
+        result.push('\n');
+    }
+
+    if let Some(trail) = trailer {
+        for c in trail {
+            result.push_str(c);
+            result.push('\n');
+        }
+    }
+
+    result
+}
+
+pub fn add_mount_to_toml(path: &Path, mount: &str) -> Result<()> {
+    let content = if path.exists() {
+        std::fs::read_to_string(path)
+            .map_err(|e| SetupError::ConfigReadFailed(path.to_path_buf(), e))?
+    } else {
+        String::new()
+    };
+
+    let mut doc: toml_edit::DocumentMut = content
+        .parse()
+        .map_err(|e: toml_edit::TomlError| {
+            SetupError::ConfigParseFailed(path.to_path_buf(), e.to_string())
+        })?;
+
+    let mounts = doc.entry("mounts").or_insert_with(|| {
+        toml_edit::Item::Value(toml_edit::Value::Array(toml_edit::Array::new()))
+    });
+
+    if let Some(arr) = mounts.as_array_mut() {
+        arr.push(mount);
+    }
+
+    std::fs::write(path, doc.to_string())
+        .map_err(|e| SetupError::ConfigWriteFailed(path.to_path_buf(), e))?;
+
+    Ok(())
+}
+
+pub fn extract_git_remote_hosts(git_remote_output: &str) -> Vec<String> {
+    use std::collections::BTreeSet;
+
+    let mut hosts: BTreeSet<String> = BTreeSet::new();
+
+    for line in git_remote_output.lines() {
+        // Each line: "<name>\t<url> (fetch)" or "<name>\t<url> (push)"
+        let url = match line.split('\t').nth(1) {
+            Some(u) => u,
+            None => continue,
+        };
+        // Strip trailing " (fetch)" / " (push)"
+        let url = url
+            .trim_end_matches(" (push)")
+            .trim_end_matches(" (fetch)")
+            .trim();
+
+        if url.starts_with("https://") || url.starts_with("http://") {
+            continue;
+        }
+
+        if let Some(after_scheme) = url.strip_prefix("ssh://") {
+            // ssh://[user@]host[:port]/path
+            // Drop optional user@
+            let host_part = match after_scheme.find('@') {
+                Some(at) => &after_scheme[at + 1..],
+                None => after_scheme,
+            };
+            // host is everything before the first '/' or ':'
+            let host = host_part
+                .split(&['/', ':'][..])
+                .next()
+                .unwrap_or("")
+                .trim();
+            if !host.is_empty() {
+                hosts.insert(host.to_string());
+            }
+        } else if url.contains('@') && url.contains(':') {
+            // user@host:path format (e.g. git@github.com:user/repo.git)
+            let after_at = match url.find('@') {
+                Some(at) => &url[at + 1..],
+                None => continue,
+            };
+            let host = match after_at.find(':') {
+                Some(colon) => &after_at[..colon],
+                None => continue,
+            };
+            let host = host.trim();
+            if !host.is_empty() {
+                hosts.insert(host.to_string());
+            }
+        } else if url.contains(':') && !url.contains('/') || url.find(':') < url.find('/') {
+            // SCP-style without user: host:path (e.g. git.g4b.org:user/repo.git)
+            if let Some(colon) = url.find(':') {
+                let host = url[..colon].trim();
+                if !host.is_empty() && !host.contains(' ') {
+                    hosts.insert(host.to_string());
+                }
+            }
+        }
+    }
+
+    hosts.into_iter().collect()
+}
+
+pub fn discover_git_remote_hosts() -> Vec<String> {
+    let output = std::process::Command::new("git")
+        .args(["remote", "-v"])
+        .output();
+
+    match output {
+        Ok(out) if out.status.success() => {
+            let text = String::from_utf8_lossy(&out.stdout);
+            extract_git_remote_hosts(&text)
+        }
+        _ => Vec::new(),
+    }
+}
+
+fn display_scan_result(result: &SshScanResult) {
+    if !result.keys.is_empty() {
+        eprintln!("  Keys:       {}", result.keys.join(", "));
+    }
+    if !result.config_files.is_empty() {
+        eprintln!("  Config:     {}", result.config_files.join(", "));
+    }
+    if result.other_count > 0 {
+        eprintln!(
+            "  Other:      {} other file{}",
+            result.other_count,
+            if result.other_count == 1 { "" } else { "s" }
+        );
+    }
+    if result.keys.is_empty() && result.config_files.is_empty() && result.other_count == 0 {
+        eprintln!("  (empty)");
+    }
+    eprintln!();
+    eprintln!("This will mount ~/.ssh into containers as read-only.");
+}
+
+pub fn has_legacy_ssh_mount(config: &SandcageConfig) -> bool {
+    config.ssh_mode.is_none() && check_existing_mount(config, SSH_MOUNT)
+}
+
+pub fn write_ssh_config_to_yaml(path: &Path, entries: &[SshDiscoveryEntry]) -> Result<()> {
+    let content = if path.exists() {
+        std::fs::read_to_string(path)
+            .map_err(|e| SetupError::ConfigReadFailed(path.to_path_buf(), e))?
+    } else {
+        String::new()
+    };
+
+    let mut config: SandcageConfig = if content.trim().is_empty() {
+        SandcageConfig::default()
+    } else {
+        serde_yaml::from_str(&content)
+            .map_err(|e| SetupError::ConfigParseFailed(path.to_path_buf(), e.to_string()))?
+    };
+
+    config.ssh_mode = Some("volume".to_string());
+    config.ssh_keys = Some(
+        entries
+            .iter()
+            .map(|e| SshKeyEntry {
+                host: e
+                    .ssh_host_alias
+                    .clone()
+                    .unwrap_or_else(|| e.display_host.clone()),
+                identity_file: e.identity_file.clone().unwrap_or_default(),
+            })
+            .collect(),
+    );
+
+    // Remove old bind mount if present
+    if let Some(ref mut mounts) = config.mounts {
+        mounts.retain(|m| m != SSH_MOUNT);
+        if mounts.is_empty() {
+            config.mounts = None;
+        }
+    }
+
+    let yaml = serde_yaml::to_string(&config)
+        .map_err(|e| SetupError::ConfigParseFailed(path.to_path_buf(), e.to_string()))?;
+
+    let output = rehydrate_yaml_comments(&content, &yaml);
+
+    std::fs::write(path, output)
+        .map_err(|e| SetupError::ConfigWriteFailed(path.to_path_buf(), e))?;
+
+    Ok(())
+}
+
+pub fn write_ssh_config_to_toml(path: &Path, entries: &[SshDiscoveryEntry]) -> Result<()> {
+    let content = if path.exists() {
+        std::fs::read_to_string(path)
+            .map_err(|e| SetupError::ConfigReadFailed(path.to_path_buf(), e))?
+    } else {
+        String::new()
+    };
+
+    let mut doc: toml_edit::DocumentMut = content.parse().map_err(|e: toml_edit::TomlError| {
+        SetupError::ConfigParseFailed(path.to_path_buf(), e.to_string())
+    })?;
+
+    doc["ssh_mode"] = toml_edit::value("volume");
+
+    // Remove old bind mount if present
+    if let Some(mounts) = doc.get_mut("mounts").and_then(|m| m.as_array_mut()) {
+        mounts.retain(|v| v.as_str() != Some(SSH_MOUNT));
+        if mounts.is_empty() {
+            doc.remove("mounts");
+        }
+    }
+
+    // Build ssh_keys array of tables
+    let mut arr = toml_edit::ArrayOfTables::new();
+    for entry in entries {
+        let mut table = toml_edit::Table::new();
+        table["host"] = toml_edit::value(
+            entry
+                .ssh_host_alias
+                .clone()
+                .unwrap_or_else(|| entry.display_host.clone()),
+        );
+        table["identity_file"] =
+            toml_edit::value(entry.identity_file.clone().unwrap_or_default());
+        arr.push(table);
+    }
+    doc.insert("ssh_keys", toml_edit::Item::ArrayOfTables(arr));
+
+    std::fs::write(path, doc.to_string())
+        .map_err(|e| SetupError::ConfigWriteFailed(path.to_path_buf(), e))?;
+
+    Ok(())
+}
+
+pub fn run_ssh_setup(global: bool, yes: bool, refresh: bool, bind: bool) -> Result<()> {
+    if bind {
+        return run_ssh_setup_bind(global, yes);
+    }
+
+    let home = dirs::home_dir().ok_or(SetupError::NoHomeDir)?;
+    let ssh_dir = home.join(".ssh");
+
+    if refresh {
+        return run_ssh_refresh(global, &ssh_dir);
+    }
+
+    // Check for existing bind mount (migration path)
+    let config_path_for_check = if global {
+        home.join(".sandcage").join("config.toml")
+    } else {
+        let cwd = std::env::current_dir()
+            .map_err(|e| SetupError::ReadDirFailed(PathBuf::from("."), e))?;
+        cwd.join(".sandcage").join("sandcage.yml")
+    };
+
+    if config_path_for_check.exists() {
+        let existing_cfg = if global {
+            let figment = figment::Figment::from(
+                figment::providers::Serialized::defaults(SandcageConfig::default()),
+            )
+            .merge(figment::providers::Toml::file(&config_path_for_check));
+            figment.extract::<SandcageConfig>().unwrap_or_default()
+        } else {
+            crate::config::load(&config_path_for_check).unwrap_or_default()
+        };
+
+        if has_legacy_ssh_mount(&existing_cfg) {
+            eprintln!("sandcage: existing SSH bind mount detected in config");
+            if !yes {
+                let migrate = dialoguer::Confirm::new()
+                    .with_prompt("Migrate to volume-based SSH? (bind mount will be removed)")
+                    .default(true)
+                    .interact()
+                    .unwrap_or(false);
+                if !migrate {
+                    // Set explicit bind mode so we don't ask again
+                    if global {
+                        let mut doc: toml_edit::DocumentMut =
+                            std::fs::read_to_string(&config_path_for_check)
+                                .unwrap_or_default()
+                                .parse()
+                                .unwrap_or_default();
+                        doc["ssh_mode"] = toml_edit::value("bind");
+                        std::fs::write(&config_path_for_check, doc.to_string()).map_err(
+                            |e| SetupError::ConfigWriteFailed(config_path_for_check, e),
+                        )?;
+                    } else {
+                        let content = std::fs::read_to_string(&config_path_for_check)
+                            .map_err(|e| {
+                                SetupError::ConfigReadFailed(config_path_for_check.clone(), e)
+                            })?;
+                        let mut cfg: SandcageConfig =
+                            serde_yaml::from_str(&content).unwrap_or_default();
+                        cfg.ssh_mode = Some("bind".to_string());
+                        let yaml = serde_yaml::to_string(&cfg).unwrap_or_default();
+                        let output = rehydrate_yaml_comments(&content, &yaml);
+                        std::fs::write(&config_path_for_check, output).map_err(|e| {
+                            SetupError::ConfigWriteFailed(config_path_for_check, e)
+                        })?;
+                    }
+                    eprintln!("sandcage: keeping bind mount, set ssh_mode: bind");
+                    return Ok(());
+                }
+            }
+            // Continue with volume mode setup — the write_ssh_config_to_* functions
+            // will remove the old mount entry
+        }
+    }
+
+    // Discover candidates
+    let ssh_config_path = ssh_dir.join("config");
+    let ssh_blocks = if ssh_config_path.exists() {
+        let content = std::fs::read_to_string(&ssh_config_path)
+            .map_err(|e| SetupError::ConfigReadFailed(ssh_config_path.clone(), e))?;
+        let ssh_dir_clone = ssh_dir.clone();
+        let read_include = move |path: &str| {
+            let include_path = if Path::new(path).is_absolute() {
+                PathBuf::from(path)
+            } else {
+                ssh_dir_clone.join(path)
+            };
+            std::fs::read_to_string(include_path).ok()
+        };
+        ssh_config::parse_ssh_config_with_includes(&content, &read_include)
+    } else {
+        Vec::new()
+    };
+
+    let git_remote_hosts = discover_git_remote_hosts();
+    let entries = build_ssh_discovery(&ssh_blocks, &git_remote_hosts, &ssh_dir);
+
+    if entries.is_empty() {
+        eprintln!("sandcage: no git SSH hosts found in remotes or ~/.ssh/config");
+        return Ok(());
+    }
+
+    // Display discoveries
+    eprintln!("sandcage: scanning git remotes and SSH config...\n");
+    for entry in &entries {
+        let source_label = match entry.source {
+            SshDiscoverySource::Both => "git remote + ssh config",
+            SshDiscoverySource::GitRemote => "git remote",
+            SshDiscoverySource::SshConfig => "ssh config (User git)",
+        };
+        let key_label = entry.identity_file.as_deref().unwrap_or("(default key)");
+        let alias_label = entry
+            .ssh_host_alias
+            .as_deref()
+            .filter(|a| *a != entry.display_host)
+            .map(|a| format!(" (alias: {a})"))
+            .unwrap_or_default();
+        eprintln!(
+            "  {}{alias_label} → {key_label}  [{source_label}]",
+            entry.display_host
+        );
+    }
+    eprintln!();
+
+    // Interactive selection
+    let (selected_entries, include_known_hosts) = if yes {
+        (entries.clone(), true)
+    } else {
+        let items: Vec<String> = entries
+            .iter()
+            .map(|e| {
+                let key = e.identity_file.as_deref().unwrap_or("(default)");
+                format!("{} → {key}", e.display_host)
+            })
+            .collect();
+        let defaults: Vec<bool> = vec![true; items.len()];
+        let selected_indices = dialoguer::MultiSelect::new()
+            .with_prompt("Select SSH keys to copy")
+            .items(&items)
+            .defaults(&defaults)
+            .interact()
+            .unwrap_or_else(|_| (0..items.len()).collect());
+        let selected: Vec<SshDiscoveryEntry> = selected_indices
+            .iter()
+            .map(|&i| entries[i].clone())
+            .collect();
+        let include_kh = dialoguer::Confirm::new()
+            .with_prompt("Include known_hosts? (recommended)")
+            .default(true)
+            .interact()
+            .unwrap_or(true);
+        (selected, include_kh)
+    };
+
+    if selected_entries.is_empty() {
+        eprintln!("sandcage: no keys selected, nothing to do");
+        return Ok(());
+    }
+
+    // Determine config target
+    let (config_path, config_label, is_global) = if global {
+        (home.join(".sandcage").join("config.toml"), "~/.sandcage/config.toml", true)
+    } else {
+        let cwd = std::env::current_dir()
+            .map_err(|e| SetupError::ReadDirFailed(PathBuf::from("."), e))?;
+        (cwd.join(".sandcage").join("local").join("sandcage.local.yml"), ".sandcage/local/sandcage.local.yml", false)
+    };
+
+    // Write config
+    if is_global {
+        if let Some(parent) = config_path.parent() {
+            std::fs::create_dir_all(parent)
+                .map_err(|e| SetupError::ConfigWriteFailed(config_path.clone(), e))?;
+        }
+        write_ssh_config_to_toml(&config_path, &selected_entries)?;
+    } else {
+        write_ssh_config_to_yaml(&config_path, &selected_entries)?;
+    }
+
+    // Populate volume
+    eprintln!("sandcage: populating SSH volume...");
+    populate_ssh_volume(&selected_entries, &ssh_blocks, include_known_hosts)?;
+
+    eprintln!("sandcage: SSH keys copied to volume 'sandcage-ssh'");
+    eprintln!("sandcage: configuration saved to {config_label}");
+
+    Ok(())
+}
+
+fn run_ssh_refresh(global: bool, ssh_dir: &Path) -> Result<()> {
+    let home = dirs::home_dir().ok_or(SetupError::NoHomeDir)?;
+
+    let config_path = if global {
+        home.join(".sandcage").join("config.toml")
+    } else {
+        let cwd = std::env::current_dir()
+            .map_err(|e| SetupError::ReadDirFailed(PathBuf::from("."), e))?;
+        cwd.join(".sandcage").join("local").join("sandcage.local.yml")
+    };
+
+    if !config_path.exists() {
+        return Err(SetupError::ConfigReadFailed(
+            config_path,
+            std::io::Error::new(std::io::ErrorKind::NotFound, "config file not found"),
+        ));
+    }
+
+    let cfg = if global {
+        let figment = figment::Figment::from(
+            figment::providers::Serialized::defaults(SandcageConfig::default()),
+        )
+        .merge(figment::providers::Toml::file(&config_path));
+        figment
+            .extract::<SandcageConfig>()
+            .map_err(|e| SetupError::ConfigParseFailed(config_path.clone(), e.to_string()))?
+    } else {
+        crate::config::load(&config_path)
+            .map_err(|e| SetupError::ConfigParseFailed(config_path.clone(), e.to_string()))?
+    };
+
+    let ssh_keys = cfg.ssh_keys.unwrap_or_default();
+    if ssh_keys.is_empty() {
+        eprintln!("sandcage: no ssh_keys in config — run `sandcage setup ssh` first");
+        return Ok(());
+    }
+
+    // Rebuild entries from saved config
+    let entries: Vec<SshDiscoveryEntry> = ssh_keys
+        .iter()
+        .map(|k| SshDiscoveryEntry {
+            display_host: k.host.clone(),
+            ssh_host_alias: Some(k.host.clone()),
+            identity_file: Some(k.identity_file.clone()),
+            host_block: None,
+            source: SshDiscoverySource::SshConfig,
+        })
+        .collect();
+
+    // Re-read SSH config to get full Host blocks for config synthesis
+    let ssh_config_path = ssh_dir.join("config");
+    let ssh_blocks = if ssh_config_path.exists() {
+        let content = std::fs::read_to_string(&ssh_config_path)
+            .map_err(|e| SetupError::ConfigReadFailed(ssh_config_path.clone(), e))?;
+        ssh_config::parse_ssh_config(&content)
+    } else {
+        Vec::new()
+    };
+
+    // Rebuild entries with host blocks from current SSH config
+    let entries_with_blocks: Vec<SshDiscoveryEntry> = entries
+        .into_iter()
+        .map(|mut e| {
+            e.host_block = ssh_blocks
+                .iter()
+                .find(|b| {
+                    b.aliases
+                        .first()
+                        .map(|a| a.as_str())
+                        == Some(&e.display_host)
+                })
+                .cloned();
+            e
+        })
+        .collect();
+
+    eprintln!("sandcage: refreshing SSH volume...");
+    populate_ssh_volume(&entries_with_blocks, &ssh_blocks, true)?;
+    eprintln!("sandcage: SSH volume refreshed");
+
+    Ok(())
+}
+
+fn run_ssh_setup_bind(global: bool, yes: bool) -> Result<()> {
+    let home = dirs::home_dir().ok_or(SetupError::NoHomeDir)?;
+    let ssh_dir = home.join(".ssh");
+
+    let result = scan_ssh_dir(&ssh_dir)?;
+
+    eprintln!("sandcage: found SSH directory at ~/.ssh");
+    eprintln!();
+    display_scan_result(&result);
+
+    let (config_path, config_label) = if global {
+        (
+            home.join(".sandcage").join("config.toml"),
+            "~/.sandcage/config.toml".to_string(),
+        )
+    } else {
+        let cwd =
+            std::env::current_dir().map_err(|e| SetupError::ReadDirFailed(PathBuf::from("."), e))?;
+        let project_config = cwd.join(".sandcage").join("sandcage.yml");
+        if !project_config.exists() {
+            return Err(SetupError::NoProjectConfig);
+        }
+        (project_config, ".sandcage/sandcage.yml".to_string())
+    };
+
+    // Check if already configured
+    if config_path.exists() {
+        let existing = if global {
+            let content = std::fs::read_to_string(&config_path)
+                .map_err(|e| SetupError::ConfigReadFailed(config_path.clone(), e))?;
+            let doc: toml_edit::DocumentMut = content
+                .parse::<toml_edit::DocumentMut>()
+                .map_err(|e: toml_edit::TomlError| {
+                    SetupError::ConfigParseFailed(config_path.clone(), e.to_string())
+                })?;
+            doc.get("mounts")
+                .and_then(|m: &toml_edit::Item| m.as_array())
+                .is_some_and(|arr: &toml_edit::Array| {
+                    arr.iter()
+                        .any(|v: &toml_edit::Value| v.as_str() == Some(SSH_MOUNT))
+                })
+        } else {
+            let cfg = crate::config::load(&config_path)
+                .map_err(|e| SetupError::ConfigParseFailed(config_path.clone(), e.to_string()))?;
+            check_existing_mount(&cfg, SSH_MOUNT)
+        };
+
+        if existing {
+            eprintln!("sandcage: SSH mount already configured in {config_label}");
+            return Ok(());
+        }
+    }
+
+    // Confirm
+    if !yes {
+        let confirmed = dialoguer::Confirm::new()
+            .with_prompt(format!("Add SSH mount to {config_label}?"))
+            .default(false)
+            .interact()
+            .unwrap_or(false);
+
+        if !confirmed {
+            return Ok(());
+        }
+    }
+
+    // Write
+    if global {
+        if let Some(parent) = config_path.parent() {
+            std::fs::create_dir_all(parent)
+                .map_err(|e| SetupError::ConfigWriteFailed(config_path.clone(), e))?;
+        }
+        add_mount_to_toml(&config_path, SSH_MOUNT)?;
+    } else {
+        add_mount_to_yaml(&config_path, SSH_MOUNT)?;
+    }
+
+    eprintln!("sandcage: added SSH mount to {config_label}");
+    Ok(())
+}
+
+// ── Task 7: SSH host discovery ──────────────────────────────────────────────
+
+#[derive(Debug, Clone, PartialEq)]
+pub enum SshDiscoverySource {
+    GitRemote,
+    SshConfig,
+    Both,
+}
+
+#[derive(Debug, Clone)]
+pub struct SshDiscoveryEntry {
+    pub display_host: String,
+    pub ssh_host_alias: Option<String>,
+    pub identity_file: Option<String>,
+    pub host_block: Option<SshHostBlock>,
+    pub source: SshDiscoverySource,
+}
+
+/// Find a default SSH private key in `ssh_dir` by checking common names.
+fn find_default_key(ssh_dir: &Path) -> Option<String> {
+    let candidates = ["id_ed25519", "id_ecdsa", "id_rsa"];
+    for name in candidates {
+        if ssh_dir.join(name).exists() {
+            return Some(format!("~/.ssh/{name}"));
+        }
+    }
+    None
+}
+
+/// Merge SSH host candidates from SSH config blocks and git remote hosts.
+///
+/// Returns a deduplicated, sorted list of [`SshDiscoveryEntry`] values.
+pub fn build_ssh_discovery(
+    ssh_blocks: &[SshHostBlock],
+    git_remote_hosts: &[String],
+    ssh_dir: &Path,
+) -> Vec<SshDiscoveryEntry> {
+    // Keyed by Host alias (not resolved HostName) to preserve distinct blocks
+    // that point to the same server with different keys.
+    let mut map: BTreeMap<String, SshDiscoveryEntry> = BTreeMap::new();
+
+    // 1. Add SSH config blocks where user is git.
+    for block in ssh_blocks {
+        if !block.is_git_user() {
+            continue;
+        }
+        let alias = match block.aliases.first() {
+            Some(a) => a.clone(),
+            None => continue,
+        };
+        let display_host = block
+            .hostname()
+            .unwrap_or(alias.as_str())
+            .to_string();
+        let identity_file = block.identity_file().map(|s| s.to_string());
+        map.entry(alias.clone()).or_insert_with(|| SshDiscoveryEntry {
+            display_host,
+            ssh_host_alias: Some(alias),
+            identity_file,
+            host_block: Some(block.clone()),
+            source: SshDiscoverySource::SshConfig,
+        });
+    }
+
+    // 2. Process git remote hosts.
+    for git_host in git_remote_hosts {
+        // Check if this hostname matches any existing entry (by alias or display_host).
+        let existing_key = map.iter()
+            .find(|(_, e)| e.display_host == *git_host || e.ssh_host_alias.as_deref() == Some(git_host))
+            .map(|(k, _)| k.clone());
+
+        if let Some(key) = existing_key {
+            map.get_mut(&key).unwrap().source = SshDiscoverySource::Both;
+        } else {
+            // Check if any SSH block has this git_host as an alias.
+            let alias_match = ssh_blocks.iter().find(|b| {
+                b.is_git_user() && b.aliases.iter().any(|a| a == git_host)
+            });
+
+            if let Some(block) = alias_match {
+                let alias = block.aliases.first().cloned().unwrap_or_default();
+                if let Some(existing) = map.get_mut(&alias) {
+                    existing.source = SshDiscoverySource::Both;
+                }
+            } else {
+                // No SSH config match — pure git remote entry.
+                let identity_file = find_default_key(ssh_dir);
+                map.insert(git_host.clone(), SshDiscoveryEntry {
+                    display_host: git_host.clone(),
+                    ssh_host_alias: None,
+                    identity_file,
+                    host_block: None,
+                    source: SshDiscoverySource::GitRemote,
+                });
+            }
+        }
+    }
+
+    map.into_values().collect()
+}
+
+// ── Task 8: Docker volume population ───────────────────────────────────────
+
+/// Copy selected SSH identity files and (optionally) `known_hosts` into the
+/// `sandcage-ssh` Docker volume via a temporary container.
+pub fn populate_ssh_volume(
+    entries: &[SshDiscoveryEntry],
+    _ssh_blocks: &[SshHostBlock],
+    include_known_hosts: bool,
+) -> Result<()> {
+    let home = dirs::home_dir().ok_or(SetupError::NoHomeDir)?;
+    let ssh_dir = home.join(".ssh");
+
+    // Build synthesized SSH config from selected entries' host blocks.
+    let selected_blocks: Vec<SshHostBlock> = entries
+        .iter()
+        .filter_map(|e| e.host_block.clone())
+        .collect();
+    let synthesized_config = ssh_config::synthesize_ssh_config(&selected_blocks);
+
+    // Collect key file names to copy.
+    let mut key_files: Vec<String> = Vec::new();
+    for entry in entries {
+        if let Some(ref id_file) = entry.identity_file {
+            let resolved = ssh_config::resolve_identity_file(id_file, &ssh_dir);
+            if let Some(file_name) = resolved.file_name() {
+                let name = file_name.to_string_lossy().into_owned();
+                if !key_files.contains(&name) {
+                    key_files.push(name.clone());
+                }
+                // Include matching .pub key if it exists.
+                let pub_name = format!("{name}.pub");
+                let pub_path = ssh_dir.join(&pub_name);
+                if pub_path.exists() && !key_files.contains(&pub_name) {
+                    key_files.push(pub_name);
+                }
+            }
+        }
+    }
+
+    // Optionally include known_hosts.
+    if include_known_hosts && ssh_dir.join("known_hosts").exists() {
+        let kh = "known_hosts".to_string();
+        if !key_files.contains(&kh) {
+            key_files.push(kh);
+        }
+    }
+
+    // Normalize path for Docker (Windows: backslash → forward slash).
+    let ssh_dir_str = ssh_dir.to_string_lossy().replace('\\', "/");
+
+    // Remove old volume.
+    let rm_status = std::process::Command::new("docker")
+        .args(["volume", "rm", "-f", "sandcage-ssh"])
+        .status()
+        .map_err(|e| SetupError::DockerFailed(format!("docker volume rm: {e}")))?;
+    if !rm_status.success() {
+        return Err(SetupError::DockerFailed(
+            format!("docker volume rm exited with {rm_status}"),
+        ));
+    }
+
+    // Create volume.
+    let create_status = std::process::Command::new("docker")
+        .args(["volume", "create", "sandcage-ssh"])
+        .status()
+        .map_err(|e| SetupError::DockerFailed(format!("docker volume create: {e}")))?;
+    if !create_status.success() {
+        return Err(SetupError::DockerFailed(
+            format!("docker volume create exited with {create_status}"),
+        ));
+    }
+
+    // Build in-container shell script.
+    let mut script = String::new();
+
+    // Ensure target directory exists.
+    script.push_str("mkdir -p /home/agent/.ssh && ");
+
+    // Write synthesized config.
+    // Escape single quotes in the config for sh -c '...' embedding.
+    let escaped_config = synthesized_config.replace('\'', "'\\''");
+    script.push_str(&format!(
+        "printf '%s' '{escaped_config}' > /home/agent/.ssh/config && chmod 644 /home/agent/.ssh/config"
+    ));
+
+    // Copy key files.
+    for name in &key_files {
+        let is_pub_or_kh = name.ends_with(".pub") || name == "known_hosts";
+        let mode = if is_pub_or_kh { "644" } else { "600" };
+        script.push_str(&format!(
+            " && cp /host-ssh/{name} /home/agent/.ssh/{name} && chmod {mode} /home/agent/.ssh/{name}"
+        ));
+    }
+
+    // Fix ownership.
+    script.push_str(" && chown -R agent:agent /home/agent/.ssh");
+
+    // Run the container.
+    let run_status = std::process::Command::new("docker")
+        .args([
+            "run",
+            "--rm",
+            &format!("-v{ssh_dir_str}:/host-ssh:ro"),
+            "--mount",
+            "type=volume,source=sandcage-ssh,target=/home/agent/.ssh",
+            "--user",
+            "root",
+            "sandcage:latest",
+            "sh",
+            "-c",
+            &script,
+        ])
+        .status()
+        .map_err(|e| SetupError::DockerFailed(format!("docker run: {e}")))?;
+
+    if !run_status.success() {
+        return Err(SetupError::DockerFailed(
+            format!("docker run exited with {run_status}"),
+        ));
+    }
+
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::io::Write;
+    use tempfile::{NamedTempFile, TempDir};
+
+    fn touch(dir: &Path, name: &str) {
+        std::fs::write(dir.join(name), "").expect("touch file");
+    }
+
+    #[test]
+    fn scan_finds_keys_by_pub_extension() {
+        let dir = TempDir::new().unwrap();
+        touch(dir.path(), "id_ed25519");
+        touch(dir.path(), "id_ed25519.pub");
+        touch(dir.path(), "work_github");
+        touch(dir.path(), "work_github.pub");
+
+        let result = scan_ssh_dir(dir.path()).unwrap();
+        assert_eq!(result.keys, vec!["id_ed25519", "work_github"]);
+    }
+
+    #[test]
+    fn scan_finds_config_files() {
+        let dir = TempDir::new().unwrap();
+        touch(dir.path(), "config");
+        touch(dir.path(), "known_hosts");
+        touch(dir.path(), "authorized_keys");
+
+        let result = scan_ssh_dir(dir.path()).unwrap();
+        assert_eq!(
+            result.config_files,
+            vec!["authorized_keys", "config", "known_hosts"]
+        );
+        assert_eq!(result.keys, Vec::<String>::new());
+    }
+
+    #[test]
+    fn scan_counts_other_files() {
+        let dir = TempDir::new().unwrap();
+        touch(dir.path(), "id_rsa");
+        touch(dir.path(), "id_rsa.pub");
+        touch(dir.path(), "config");
+        touch(dir.path(), "environment");
+        touch(dir.path(), "random_file");
+
+        let result = scan_ssh_dir(dir.path()).unwrap();
+        assert_eq!(result.keys, vec!["id_rsa"]);
+        assert_eq!(result.config_files, vec!["config"]);
+        assert_eq!(result.other_count, 3);
+    }
+
+    #[test]
+    fn scan_empty_dir() {
+        let dir = TempDir::new().unwrap();
+        let result = scan_ssh_dir(dir.path()).unwrap();
+        assert_eq!(result.keys, Vec::<String>::new());
+        assert_eq!(result.config_files, Vec::<String>::new());
+        assert_eq!(result.other_count, 0);
+    }
+
+    #[test]
+    fn scan_nonexistent_dir_errors() {
+        let result = scan_ssh_dir(Path::new("/nonexistent/ssh/dir"));
+        assert!(matches!(result, Err(SetupError::NoSshDir(_))));
+    }
+
+    // -- check_existing_mount tests --
+
+    #[test]
+    fn check_existing_mount_found() {
+        let config = SandcageConfig {
+            mounts: Some(vec!["~/.ssh:/home/agent/.ssh:ro".to_string()]),
+            ..Default::default()
+        };
+        assert!(check_existing_mount(&config, "~/.ssh:/home/agent/.ssh:ro"));
+    }
+
+    #[test]
+    fn check_existing_mount_not_found() {
+        let config = SandcageConfig {
+            mounts: Some(vec!["/data:/mnt:ro".to_string()]),
+            ..Default::default()
+        };
+        assert!(!check_existing_mount(&config, "~/.ssh:/home/agent/.ssh:ro"));
+    }
+
+    #[test]
+    fn check_existing_mount_no_mounts() {
+        let config = SandcageConfig::default();
+        assert!(!check_existing_mount(&config, "~/.ssh:/home/agent/.ssh:ro"));
+    }
+
+    // -- add_mount_to_yaml tests --
+
+    #[test]
+    fn add_mount_to_yaml_with_existing_mounts() {
+        let yaml = "env:\n  FOO: bar\nmounts:\n  - /data:/mnt\n";
+        let mut tmp = NamedTempFile::new().unwrap();
+        write!(tmp, "{yaml}").unwrap();
+
+        add_mount_to_yaml(tmp.path(), "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(tmp.path()).unwrap();
+        assert!(content.contains("~/.ssh:/home/agent/.ssh:ro"));
+        assert!(content.contains("/data:/mnt"));
+        assert!(content.contains("FOO"));
+    }
+
+    #[test]
+    fn add_mount_to_yaml_no_existing_mounts() {
+        let yaml = "env:\n  FOO: bar\n";
+        let mut tmp = NamedTempFile::new().unwrap();
+        write!(tmp, "{yaml}").unwrap();
+
+        add_mount_to_yaml(tmp.path(), "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(tmp.path()).unwrap();
+        assert!(content.contains("~/.ssh:/home/agent/.ssh:ro"));
+        assert!(content.contains("FOO"));
+    }
+
+    #[test]
+    fn add_mount_to_yaml_empty_file() {
+        let mut tmp = NamedTempFile::new().unwrap();
+        write!(tmp, "").unwrap();
+
+        add_mount_to_yaml(tmp.path(), "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(tmp.path()).unwrap();
+        assert!(content.contains("~/.ssh:/home/agent/.ssh:ro"));
+    }
+
+    #[test]
+    fn add_mount_to_yaml_preserves_comments() {
+        let yaml = "# Environment\nenv:\n  FOO: bar\n\n# Mount points\nmounts:\n- /data:/mnt\n";
+        let mut tmp = NamedTempFile::new().unwrap();
+        write!(tmp, "{yaml}").unwrap();
+
+        add_mount_to_yaml(tmp.path(), "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(tmp.path()).unwrap();
+        assert!(content.contains("# Environment"), "preamble comment preserved");
+        assert!(content.contains("# Mount points"), "inline comment preserved");
+        assert!(content.contains("~/.ssh:/home/agent/.ssh:ro"));
+        assert!(content.contains("/data:/mnt"));
+    }
+
+    #[test]
+    fn add_mount_to_yaml_preserves_trailing_comments() {
+        let yaml = "mounts:\n- /data:/mnt\n\n# end of file\n";
+        let mut tmp = NamedTempFile::new().unwrap();
+        write!(tmp, "{yaml}").unwrap();
+
+        add_mount_to_yaml(tmp.path(), "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(tmp.path()).unwrap();
+        assert!(content.contains("# end of file"), "trailing comment preserved");
+    }
+
+    #[test]
+    fn rehydrate_preserves_blank_lines_between_keys() {
+        let original = "env:\n  A: 1\n\nmounts:\n- /data:/mnt\n";
+        let generated = "env:\n  A: '1'\nmounts:\n- /data:/mnt\n- /new:/new\n";
+        let result = rehydrate_yaml_comments(original, generated);
+        assert!(result.contains("\n\nmounts:"), "blank line before mounts preserved");
+    }
+
+    // -- add_mount_to_toml tests --
+
+    #[test]
+    fn add_mount_to_toml_new_file() {
+        let dir = TempDir::new().unwrap();
+        let path = dir.path().join("config.toml");
+
+        add_mount_to_toml(&path, "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(&path).unwrap();
+        assert!(content.contains("~/.ssh:/home/agent/.ssh:ro"));
+    }
+
+    #[test]
+    fn add_mount_to_toml_existing_file() {
+        let dir = TempDir::new().unwrap();
+        let path = dir.path().join("config.toml");
+        std::fs::write(&path, "shell = \"zsh\"\n").unwrap();
+
+        add_mount_to_toml(&path, "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(&path).unwrap();
+        assert!(content.contains("~/.ssh:/home/agent/.ssh:ro"));
+        assert!(content.contains("zsh"));
+    }
+
+    #[test]
+    fn add_mount_to_toml_existing_mounts() {
+        let dir = TempDir::new().unwrap();
+        let path = dir.path().join("config.toml");
+        std::fs::write(&path, "mounts = [\"/data:/mnt\"]\n").unwrap();
+
+        add_mount_to_toml(&path, "~/.ssh:/home/agent/.ssh:ro").unwrap();
+
+        let content = std::fs::read_to_string(&path).unwrap();
+        assert!(content.contains("~/.ssh:/home/agent/.ssh:ro"));
+        assert!(content.contains("/data:/mnt"));
+    }
+
+    // -- extract_git_remote_hosts tests --
+
+    #[test]
+    fn extract_hostnames_from_git_remote_output() {
+        let output = "\
+origin\tgit@github.com:user/repo.git (fetch)
+origin\tgit@github.com:user/repo.git (push)
+upstream\tgit@gitea.example.com:org/repo.git (fetch)
+upstream\tgit@gitea.example.com:org/repo.git (push)
+https\thttps://gitlab.com/user/repo.git (fetch)
+https\thttps://gitlab.com/user/repo.git (push)
+";
+        let hosts = extract_git_remote_hosts(output);
+        assert_eq!(hosts, vec!["gitea.example.com", "github.com"]);
+    }
+
+    #[test]
+    fn extract_hostnames_ssh_url_with_port() {
+        let output = "origin\tssh://git@git.corp.com:2222/repo.git (fetch)\n";
+        let hosts = extract_git_remote_hosts(output);
+        assert_eq!(hosts, vec!["git.corp.com"]);
+    }
+
+    #[test]
+    fn extract_hostnames_empty_output() {
+        let hosts = extract_git_remote_hosts("");
+        assert!(hosts.is_empty());
+    }
+
+    #[test]
+    fn extract_hostnames_scp_without_user() {
+        let output = "origin\tgit.g4b.org:g4borg/sandcage.git (fetch)\norigin\tgit.g4b.org:g4borg/sandcage.git (push)\n";
+        let hosts = extract_git_remote_hosts(output);
+        assert_eq!(hosts, vec!["git.g4b.org"]);
+    }
+
+    // -- Task 7: build_ssh_discovery tests --
+
+    #[test]
+    fn discover_ssh_entries_merges_sources() {
+        use crate::ssh_config::parse_ssh_config;
+
+        let ssh_config_text = "\
+Host github.com
+    User git
+    IdentityFile ~/.ssh/id_ed25519
+
+Host gitea
+    User git
+    HostName gitea.example.com
+    IdentityFile ~/.ssh/work_gitea
+
+Host myserver
+    User admin
+    HostName server.example.com
+";
+        let blocks = parse_ssh_config(ssh_config_text);
+        let git_remote_hosts = vec!["github.com".to_string(), "gitlab.com".to_string()];
+        let ssh_dir = Path::new("/nonexistent/.ssh"); // default key won't be found
+
+        let entries = build_ssh_discovery(&blocks, &git_remote_hosts, ssh_dir);
+
+        // github.com: from both (git remote + SSH config User git)
+        // gitea.example.com: from SSH config only (User git, HostName resolves)
+        // gitlab.com: from git remote only, no SSH config match
+        // myserver: NOT included (User admin, not in git remotes)
+        assert_eq!(entries.len(), 3);
+
+        let github = entries.iter().find(|e| e.display_host == "github.com").unwrap();
+        assert_eq!(github.source, SshDiscoverySource::Both);
+        assert_eq!(github.ssh_host_alias.as_deref(), Some("github.com"));
+
+        let gitea = entries.iter().find(|e| e.display_host == "gitea.example.com").unwrap();
+        assert_eq!(gitea.source, SshDiscoverySource::SshConfig);
+        assert_eq!(gitea.ssh_host_alias.as_deref(), Some("gitea"));
+
+        let gitlab = entries.iter().find(|e| e.display_host == "gitlab.com").unwrap();
+        assert_eq!(gitlab.source, SshDiscoverySource::GitRemote);
+        assert!(gitlab.ssh_host_alias.is_none());
+    }
+
+    #[test]
+    fn discover_preserves_distinct_aliases_for_same_hostname() {
+        use crate::ssh_config::parse_ssh_config;
+        let ssh_config_text = "\
+Host sparkle.g4b.org
+    Hostname git.g4b.org
+    User git
+    IdentityFile ~/.ssh/id_rsa_sparkle
+
+Host git.g4b.org
+    User git
+    IdentityFile ~/.ssh/id_rsa
+";
+        let blocks = parse_ssh_config(ssh_config_text);
+        let git_remote_hosts = vec!["git.g4b.org".to_string()];
+        let ssh_dir = Path::new("/nonexistent/.ssh");
+
+        let entries = build_ssh_discovery(&blocks, &git_remote_hosts, ssh_dir);
+
+        assert_eq!(entries.len(), 2, "both aliases should be preserved");
+
+        let sparkle = entries.iter().find(|e| e.ssh_host_alias.as_deref() == Some("sparkle.g4b.org")).unwrap();
+        assert_eq!(sparkle.display_host, "git.g4b.org");
+        assert_eq!(sparkle.identity_file.as_deref(), Some("~/.ssh/id_rsa_sparkle"));
+
+        let direct = entries.iter().find(|e| e.ssh_host_alias.as_deref() == Some("git.g4b.org")).unwrap();
+        assert_eq!(direct.display_host, "git.g4b.org");
+        assert_eq!(direct.identity_file.as_deref(), Some("~/.ssh/id_rsa"));
+        assert_eq!(direct.source, SshDiscoverySource::Both);
+    }
+
+    // -- has_legacy_ssh_mount tests --
+
+    #[test]
+    fn detect_existing_bind_mount_in_config() {
+        let config = SandcageConfig {
+            mounts: Some(vec![SSH_MOUNT.to_string()]),
+            ssh_mode: None,
+            ..Default::default()
+        };
+        assert!(has_legacy_ssh_mount(&config));
+    }
+
+    #[test]
+    fn no_legacy_mount_when_ssh_mode_set() {
+        let config = SandcageConfig {
+            mounts: Some(vec![SSH_MOUNT.to_string()]),
+            ssh_mode: Some("bind".to_string()),
+            ..Default::default()
+        };
+        assert!(!has_legacy_ssh_mount(&config));
+    }
+}
diff --git a/crates/sandcage/src/shadow.rs b/crates/sandcage/src/shadow.rs
new file mode 100644
index 0000000..b19f49e
--- /dev/null
+++ b/crates/sandcage/src/shadow.rs
@@ -0,0 +1,314 @@
+use std::path::{Path, PathBuf};
+
+use sha2::{Digest, Sha256};
+
+use crate::config::ShadowConfig;
+use crate::recipe::Recipe;
+
+#[derive(Debug, Clone, PartialEq)]
+pub enum ShadowBackend {
+    Volume,
+    Directory,
+    Tmpfs,
+}
+
+impl ShadowBackend {
+    fn parse(s: &str) -> ShadowBackend {
+        match s {
+            "directory" => ShadowBackend::Directory,
+            "tmpfs" => ShadowBackend::Tmpfs,
+            _ => ShadowBackend::Volume,
+        }
+    }
+}
+
+#[derive(Debug, Clone, PartialEq)]
+pub struct ShadowMount {
+    pub dir: String,
+    pub container_path: String,
+    pub backend: ShadowBackend,
+    pub volume_name: Option<String>,
+    pub host_path: Option<PathBuf>,
+}
+
+/// Flatten enabled recipes into `(dir, shared)` shadow pairs.
+pub fn recipe_shadow_dirs(recipes: &[Recipe]) -> Vec<(String, bool)> {
+    let mut out = Vec::new();
+    for r in recipes {
+        for d in &r.shadow {
+            out.push((d.clone(), false));
+        }
+        for d in &r.shared_caches {
+            out.push((d.clone(), true));
+        }
+    }
+    out
+}
+
+/// Resolve effective shadow mounts from explicit `[shadow]` config + recipe dirs.
+/// Explicit `[shadow.dirs]` overrides a recipe dir of the same name. Default backend = volume.
+/// `project_root` is the config root (where `.sandcage/` lives).
+pub fn resolve_shadow_mounts(
+    shadow: Option<&ShadowConfig>,
+    recipe_dirs: &[(String, bool)],
+    project_root: &Path,
+    container_dir: &str,
+) -> Vec<ShadowMount> {
+    let default_backend = shadow
+        .and_then(|s| s.backend.as_deref())
+        .map(ShadowBackend::parse)
+        .unwrap_or(ShadowBackend::Volume);
+
+    // dir → (explicit backend override, shared). BTreeMap = deterministic order.
+    let mut merged: std::collections::BTreeMap<String, (Option<ShadowBackend>, bool)> =
+        std::collections::BTreeMap::new();
+    for (dir, shared) in recipe_dirs {
+        merged.insert(dir.clone(), (None, *shared));
+    }
+    if let Some(cfg) = shadow {
+        if let Some(dirs) = &cfg.dirs {
+            for (dir, spec) in dirs {
+                merged.insert(dir.clone(), (spec.backend.as_deref().map(ShadowBackend::parse), spec.shared));
+            }
+        }
+    }
+
+    merged
+        .into_iter()
+        .map(|(dir, (backend_override, shared))| {
+            let backend = backend_override.unwrap_or_else(|| default_backend.clone());
+            let container_path = format!("{}/{}", container_dir.trim_end_matches('/'), dir);
+            let (vol_name, host_path) = match backend {
+                ShadowBackend::Volume => (Some(volume_name(project_root, &dir, shared)), None),
+                ShadowBackend::Directory => (
+                    None,
+                    Some(project_root.join(".sandcage").join("shadow").join(normalize_dir(&dir))),
+                ),
+                ShadowBackend::Tmpfs => (None, None),
+            };
+            ShadowMount { dir, container_path, backend, volume_name: vol_name, host_path }
+        })
+        .collect()
+}
+
+/// Normalize a shadow dir name into Docker's allowed volume-name charset.
+/// Leading dots stripped; non-`[a-zA-Z0-9_]` chars become `-`.
+pub fn normalize_dir(dir: &str) -> String {
+    let trimmed = dir.trim_start_matches('.');
+    let mut out = String::with_capacity(trimmed.len());
+    let mut prev_dash = false;
+    for ch in trimmed.chars() {
+        if ch.is_ascii_alphanumeric() || ch == '_' {
+            out.push(ch);
+            prev_dash = false;
+        } else if !prev_dash {
+            out.push('-');
+            prev_dash = true;
+        }
+    }
+    out.trim_matches('-').to_string()
+}
+
+/// Human-legible project slug: basename, lowercased, sanitized.
+pub fn project_slug(project_root: &Path) -> String {
+    let base = project_root
+        .file_name()
+        .map(|s| s.to_string_lossy().to_string())
+        .unwrap_or_else(|| "project".to_string());
+    normalize_dir(&base.to_lowercase())
+}
+
+/// Short (8 hex) hash of the absolute project path — uniqueness across same-named projects.
+pub fn project_hash(project_root: &Path) -> String {
+    let abs = std::fs::canonicalize(project_root).unwrap_or_else(|_| project_root.to_path_buf());
+    let mut hasher = Sha256::new();
+    hasher.update(abs.to_string_lossy().as_bytes());
+    let digest = hasher.finalize();
+    hex::encode(&digest[..4])
+}
+
+/// Docker volume name for a shadow dir.
+pub fn volume_name(project_root: &Path, dir: &str, shared: bool) -> String {
+    let d = normalize_dir(dir);
+    if shared {
+        format!("sandcage-shared-{d}")
+    } else {
+        format!("sandcage-{}-{}-{}", project_slug(project_root), project_hash(project_root), d)
+    }
+}
+
+/// Bind / `-v` strings for `volume` (named) and `directory` (host bind) mounts.
+/// A `name:path` source with no leading `/` is treated by Docker as a named volume
+/// (auto-created); a host path is a bind. Tmpfs mounts are excluded.
+pub fn shadow_bind_strings(mounts: &[ShadowMount]) -> Vec<String> {
+    mounts
+        .iter()
+        .filter_map(|m| match m.backend {
+            ShadowBackend::Volume => {
+                Some(format!("{}:{}", m.volume_name.as_deref().unwrap(), m.container_path))
+            }
+            ShadowBackend::Directory => {
+                Some(format!("{}:{}:rw", m.host_path.as_ref().unwrap().display(), m.container_path))
+            }
+            ShadowBackend::Tmpfs => None,
+        })
+        .collect()
+}
+
+/// Container paths for `tmpfs`-backend mounts.
+pub fn shadow_tmpfs_paths(mounts: &[ShadowMount]) -> Vec<String> {
+    mounts
+        .iter()
+        .filter(|m| matches!(m.backend, ShadowBackend::Tmpfs))
+        .map(|m| m.container_path.clone())
+        .collect()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::path::Path;
+
+    use crate::config::{ShadowConfig, ShadowDir};
+    use crate::recipe::{Recipe, FragmentSource};
+    use std::collections::HashMap;
+
+    fn shadow_cfg(backend: Option<&str>, dirs: &[(&str, Option<&str>, bool)]) -> ShadowConfig {
+        let mut map = HashMap::new();
+        for (name, b, shared) in dirs {
+            map.insert(name.to_string(), ShadowDir { backend: b.map(|s| s.to_string()), shared: *shared });
+        }
+        ShadowConfig { backend: backend.map(|s| s.to_string()), dirs: if map.is_empty() { None } else { Some(map) } }
+    }
+
+    #[test]
+    fn resolves_default_backend_volume() {
+        let root = Path::new("/home/u/projects/app");
+        let cfg = shadow_cfg(None, &[("target", None, false)]);
+        let mounts = resolve_shadow_mounts(Some(&cfg), &[], root, "/workspace/app");
+        assert_eq!(mounts.len(), 1);
+        assert_eq!(mounts[0].container_path, "/workspace/app/target");
+        assert!(matches!(mounts[0].backend, ShadowBackend::Volume));
+        assert_eq!(mounts[0].volume_name.as_deref().unwrap(), volume_name(root, "target", false));
+    }
+
+    #[test]
+    fn resolves_per_dir_directory_backend() {
+        let root = Path::new("/home/u/projects/app");
+        let cfg = shadow_cfg(Some("volume"), &[(".venv", Some("directory"), false)]);
+        let mounts = resolve_shadow_mounts(Some(&cfg), &[], root, "/workspace/app");
+        assert!(matches!(mounts[0].backend, ShadowBackend::Directory));
+        assert_eq!(
+            mounts[0].host_path.as_deref().unwrap(),
+            Path::new("/home/u/projects/app/.sandcage/shadow/venv")
+        );
+    }
+
+    #[test]
+    fn resolves_tmpfs_backend() {
+        let root = Path::new("/home/u/projects/app");
+        let cfg = shadow_cfg(Some("tmpfs"), &[("target", None, false)]);
+        let mounts = resolve_shadow_mounts(Some(&cfg), &[], root, "/workspace/app");
+        assert!(matches!(mounts[0].backend, ShadowBackend::Tmpfs));
+        assert!(mounts[0].volume_name.is_none() && mounts[0].host_path.is_none());
+    }
+
+    #[test]
+    fn shared_dir_uses_shared_volume_name() {
+        let root = Path::new("/home/u/projects/app");
+        let cfg = shadow_cfg(None, &[(".cargo/registry", None, true)]);
+        let mounts = resolve_shadow_mounts(Some(&cfg), &[], root, "/workspace/app");
+        assert_eq!(mounts[0].volume_name.as_deref().unwrap(), "sandcage-shared-cargo-registry");
+    }
+
+    #[test]
+    fn recipe_dirs_flatten_and_resolve() {
+        let root = Path::new("/home/u/projects/app");
+        let recipes = vec![Recipe {
+            name: "rust".into(),
+            fragment: FragmentSource::Embedded("FROM rust"),
+            shadow: vec!["target".into()],
+            shared_caches: vec![".cargo/registry".into()],
+        }];
+        let pairs = recipe_shadow_dirs(&recipes);
+        assert!(pairs.contains(&("target".to_string(), false)));
+        assert!(pairs.contains(&(".cargo/registry".to_string(), true)));
+        let mounts = resolve_shadow_mounts(None, &pairs, root, "/workspace/app");
+        assert_eq!(mounts.len(), 2);
+    }
+
+    #[test]
+    fn explicit_overrides_recipe_dir_backend() {
+        let root = Path::new("/home/u/projects/app");
+        let recipe_dirs = vec![("target".to_string(), false)];
+        let cfg = shadow_cfg(None, &[("target", Some("directory"), false)]);
+        let mounts = resolve_shadow_mounts(Some(&cfg), &recipe_dirs, root, "/workspace/app");
+        assert_eq!(mounts.len(), 1, "same dir name de-duplicated");
+        assert!(matches!(mounts[0].backend, ShadowBackend::Directory));
+    }
+
+    #[test]
+    fn no_config_no_recipes_yields_empty() {
+        let mounts = resolve_shadow_mounts(None, &[], Path::new("/x"), "/workspace/x");
+        assert!(mounts.is_empty());
+    }
+
+    fn sample_mounts() -> Vec<ShadowMount> {
+        vec![
+            ShadowMount { dir: "target".into(), container_path: "/workspace/app/target".into(),
+                backend: ShadowBackend::Volume, volume_name: Some("sandcage-app-dead-target".into()), host_path: None },
+            ShadowMount { dir: ".venv".into(), container_path: "/workspace/app/.venv".into(),
+                backend: ShadowBackend::Directory, volume_name: None,
+                host_path: Some(Path::new("/home/u/projects/app/.sandcage/shadow/venv").to_path_buf()) },
+            ShadowMount { dir: "cache".into(), container_path: "/workspace/app/cache".into(),
+                backend: ShadowBackend::Tmpfs, volume_name: None, host_path: None },
+        ]
+    }
+
+    #[test]
+    fn bind_strings_cover_volume_and_directory_only() {
+        let binds = shadow_bind_strings(&sample_mounts());
+        assert_eq!(binds.len(), 2);
+        assert!(binds.contains(&"sandcage-app-dead-target:/workspace/app/target".to_string()));
+        assert!(binds.contains(&"/home/u/projects/app/.sandcage/shadow/venv:/workspace/app/.venv:rw".to_string()));
+    }
+
+    #[test]
+    fn tmpfs_paths_cover_tmpfs_only() {
+        let paths = shadow_tmpfs_paths(&sample_mounts());
+        assert_eq!(paths, vec!["/workspace/app/cache".to_string()]);
+    }
+
+    #[test]
+    fn normalize_dir_sanitizes_path_separators_and_dots() {
+        assert_eq!(normalize_dir(".venv"), "venv");
+        assert_eq!(normalize_dir("target"), "target");
+        assert_eq!(normalize_dir(".cargo/registry"), "cargo-registry");
+        assert_eq!(normalize_dir("node_modules"), "node_modules");
+    }
+
+    #[test]
+    fn project_slug_is_basename_sanitized() {
+        assert_eq!(project_slug(Path::new("/home/u/projects/My-App")), "my-app");
+        assert_eq!(project_slug(Path::new("/home/u/projects/api.service")), "api-service");
+    }
+
+    #[test]
+    fn project_hash_is_stable_and_path_specific() {
+        let a = project_hash(Path::new("/home/u/projects/api"));
+        let b = project_hash(Path::new("/home/u/projects/api"));
+        let c = project_hash(Path::new("/home/u/other/api"));
+        assert_eq!(a, b);
+        assert_ne!(a, c);
+        assert_eq!(a.len(), 8);
+    }
+
+    #[test]
+    fn volume_name_per_project_and_shared() {
+        let root = Path::new("/home/u/projects/my-app");
+        let per = volume_name(root, "target", false);
+        assert!(per.starts_with("sandcage-my-app-"), "got {per}");
+        assert!(per.ends_with("-target"), "got {per}");
+        assert_eq!(volume_name(root, ".cargo/registry", true), "sandcage-shared-cargo-registry");
+    }
+}
diff --git a/crates/sandcage/src/spoof.rs b/crates/sandcage/src/spoof.rs
new file mode 100644
index 0000000..0c62edb
--- /dev/null
+++ b/crates/sandcage/src/spoof.rs
@@ -0,0 +1,170 @@
+use std::collections::HashMap;
+use std::path::Path;
+
+use miette::Diagnostic;
+use thiserror::Error;
+
+use crate::config::ToolConfig;
+
+/// Container directory baked onto the front of PATH in the base image.
+pub const SPOOF_CONTAINER_DIR: &str = "/usr/local/sandcage/spoof";
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum SpoofError {
+    #[error("Failed to write spoof script {0}: {1}")]
+    #[diagnostic(code(sandcage::spoof::write_failed))]
+    WriteFailed(std::path::PathBuf, #[source] std::io::Error),
+}
+
+/// Generate spoof / host-stub scripts for the given tools into `dir`.
+/// Returns the number of scripts written. `in-cage` tools produce nothing.
+pub fn generate_spoof_scripts(
+    tools: &HashMap<String, ToolConfig>,
+    dir: &Path,
+) -> Result<usize, SpoofError> {
+    let mut written = 0;
+    for (name, cfg) in tools {
+        let mode = cfg.mode.as_deref().map(ToolMode::parse).unwrap_or(ToolMode::InCage);
+        let body = match mode {
+            ToolMode::InCage => continue,
+            ToolMode::Spoof => {
+                let message = cfg.message.clone().unwrap_or_else(|| {
+                    format!("`{name}` is intercepted by sandcage for this project.")
+                });
+                spoof_script(&message)
+            }
+            ToolMode::Host => host_forwarding_script(name),
+        };
+
+        let path = dir.join(name);
+        std::fs::write(&path, body).map_err(|e| SpoofError::WriteFailed(path.clone(), e))?;
+        set_executable(&path).map_err(|e| SpoofError::WriteFailed(path.clone(), e))?;
+        written += 1;
+    }
+    Ok(written)
+}
+
+#[cfg(unix)]
+fn set_executable(path: &Path) -> std::io::Result<()> {
+    use std::os::unix::fs::PermissionsExt;
+    let mut perms = std::fs::metadata(path)?.permissions();
+    perms.set_mode(0o755);
+    std::fs::set_permissions(path, perms)
+}
+
+#[cfg(not(unix))]
+fn set_executable(_path: &Path) -> std::io::Result<()> {
+    Ok(()) // execute bit is meaningless on non-unix hosts; the container is Linux
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum ToolMode {
+    InCage,
+    Spoof,
+    Host,
+}
+
+impl ToolMode {
+    pub fn parse(s: &str) -> ToolMode {
+        match s {
+            "spoof" => ToolMode::Spoof,
+            "host" => ToolMode::Host,
+            _ => ToolMode::InCage,
+        }
+    }
+}
+
+/// A spoof script: prints `message` to stderr and exits non-zero (never 127).
+/// The message is embedded in a single-quoted heredoc so backticks, `$`, and
+/// quotes in it stay literal and are never executed by the shell.
+pub fn spoof_script(message: &str) -> String {
+    format!(
+        "#!/usr/bin/env bash\ncat >&2 <<'SANDCAGE_SPOOF_EOF'\n{message}\nSANDCAGE_SPOOF_EOF\nexit 1\n"
+    )
+}
+
+/// A `host`-mode script that forwards execution to the thumper relay.
+pub fn host_forwarding_script(tool: &str) -> String {
+    format!("#!/usr/bin/env bash\nexec thumper {tool} \"$@\"\n")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::config::ToolConfig;
+    use std::collections::HashMap;
+
+    fn tool(mode: &str, message: Option<&str>) -> ToolConfig {
+        ToolConfig {
+            mode: Some(mode.to_string()),
+            message: message.map(|s| s.to_string()),
+            allow: vec![],
+            deny: vec![],
+        }
+    }
+
+    #[test]
+    fn generate_writes_only_spoof_and_host_scripts() {
+        let dir = tempfile::tempdir().unwrap();
+        let mut tools = HashMap::new();
+        tools.insert("cargo".to_string(), tool("spoof", Some("Use `just build`.")));
+        tools.insert("docker".to_string(), tool("host", None));
+        tools.insert("uv".to_string(), tool("in-cage", None));
+
+        let count = generate_spoof_scripts(&tools, dir.path()).expect("generate");
+        assert_eq!(count, 2, "spoof + host produce scripts; in-cage does not");
+
+        let cargo = dir.path().join("cargo");
+        assert!(cargo.exists(), "cargo spoof script written");
+        let body = std::fs::read_to_string(&cargo).unwrap();
+        assert!(body.contains("Use `just build`."));
+        assert!(!dir.path().join("uv").exists(), "in-cage tool has no script");
+
+        #[cfg(unix)]
+        {
+            use std::os::unix::fs::PermissionsExt;
+            let mode = std::fs::metadata(&cargo).unwrap().permissions().mode();
+            assert!(mode & 0o111 != 0, "script should be executable");
+        }
+    }
+
+    #[test]
+    fn generate_uses_default_message_when_absent() {
+        let dir = tempfile::tempdir().unwrap();
+        let mut tools = HashMap::new();
+        tools.insert("npm".to_string(), tool("spoof", None));
+        generate_spoof_scripts(&tools, dir.path()).expect("generate");
+        let body = std::fs::read_to_string(dir.path().join("npm")).unwrap();
+        assert!(body.contains("npm"), "default message mentions the tool name");
+    }
+
+    #[test]
+    fn parse_mode_maps_strings() {
+        assert_eq!(ToolMode::parse("in-cage"), ToolMode::InCage);
+        assert_eq!(ToolMode::parse("spoof"), ToolMode::Spoof);
+        assert_eq!(ToolMode::parse("host"), ToolMode::Host);
+        // unknown defaults to in-cage (least surprising: tool runs normally)
+        assert_eq!(ToolMode::parse("wat"), ToolMode::InCage);
+    }
+
+    #[test]
+    fn spoof_script_embeds_message_safely_and_is_not_127() {
+        let msg = "Use `just build` to compile this $PROJECT.";
+        let script = spoof_script(msg);
+        assert!(script.starts_with("#!/usr/bin/env bash\n"));
+        assert!(script.contains(msg), "message embedded verbatim");
+        // single-quoted heredoc → backticks and $ stay literal (not executed)
+        assert!(script.contains("<<'SANDCAGE_SPOOF_EOF'"));
+        assert!(script.contains("exit 1"));
+        assert!(!script.contains("exit 127"), "must never imply command-not-found");
+    }
+
+    #[test]
+    fn host_forwarding_script_invokes_thumper() {
+        let script = host_forwarding_script("docker");
+        assert!(script.starts_with("#!/usr/bin/env bash\n"));
+        assert!(script.contains("thumper"), "should invoke thumper");
+        assert!(script.contains("docker"), "should pass the tool name");
+        assert!(script.contains("\"$@\""), "should forward all args");
+    }
+}
diff --git a/crates/sandcage/src/ssh_config.rs b/crates/sandcage/src/ssh_config.rs
new file mode 100644
index 0000000..9be5f93
--- /dev/null
+++ b/crates/sandcage/src/ssh_config.rs
@@ -0,0 +1,449 @@
+use std::path::{Path, PathBuf};
+
+/// A parsed SSH config `Host` block.
+#[derive(Debug, Clone, PartialEq)]
+pub struct SshHostBlock {
+    /// The patterns listed on the `Host` line (e.g. `["github.com", "gh"]`).
+    pub aliases: Vec<String>,
+    /// Key-value directives in the order they appear in the config.
+    pub directives: Vec<(String, String)>,
+}
+
+impl SshHostBlock {
+    /// Return the value of the first directive matching `key` (case-insensitive).
+    pub fn get(&self, key: &str) -> Option<&str> {
+        let key_lower = key.to_lowercase();
+        self.directives
+            .iter()
+            .find(|(k, _)| k.to_lowercase() == key_lower)
+            .map(|(_, v)| v.as_str())
+    }
+
+    /// Return the `User` directive value, if present.
+    pub fn user(&self) -> Option<&str> {
+        self.get("User")
+    }
+
+    /// Return the `IdentityFile` directive value, if present.
+    pub fn identity_file(&self) -> Option<&str> {
+        self.get("IdentityFile")
+    }
+
+    /// Return the `HostName` directive value, if present.
+    pub fn hostname(&self) -> Option<&str> {
+        self.get("HostName")
+    }
+
+    /// Returns `true` if this block's `User` is `git` (common for GitHub/GitLab host entries).
+    pub fn is_git_user(&self) -> bool {
+        self.user().map(|u| u == "git").unwrap_or(false)
+    }
+}
+
+/// Resolve an SSH `IdentityFile` path to an absolute [`PathBuf`].
+///
+/// - `~/...` paths expand `~` via [`dirs::home_dir`], falling back to `ssh_dir.parent()`.
+/// - Relative paths are joined onto `ssh_dir`.
+/// - Absolute paths are returned as-is.
+pub fn resolve_identity_file(identity_file: &str, ssh_dir: &Path) -> PathBuf {
+    if let Some(suffix) = identity_file.strip_prefix("~/") {
+        let home = dirs::home_dir()
+            .unwrap_or_else(|| ssh_dir.parent().unwrap_or(ssh_dir).to_path_buf());
+        home.join(suffix)
+    } else if Path::new(identity_file).is_absolute() {
+        PathBuf::from(identity_file)
+    } else {
+        ssh_dir.join(identity_file)
+    }
+}
+
+/// Produce a valid SSH config file string from a slice of [`SshHostBlock`]s.
+///
+/// Blocks are separated by blank lines; directives are indented with 4 spaces.
+pub fn synthesize_ssh_config(blocks: &[SshHostBlock]) -> String {
+    let mut out = String::new();
+    for (i, block) in blocks.iter().enumerate() {
+        if i > 0 {
+            out.push('\n');
+        }
+        out.push_str("Host ");
+        out.push_str(&block.aliases.join(" "));
+        out.push('\n');
+        for (key, value) in &block.directives {
+            out.push_str("    ");
+            out.push_str(key);
+            out.push(' ');
+            out.push_str(value);
+            out.push('\n');
+        }
+    }
+    out
+}
+
+/// Parse SSH config text into a list of [`SshHostBlock`]s, supporting `Include` directives.
+///
+/// When an `Include <path>` line is encountered:
+/// - The current block is flushed.
+/// - `read_include(path)` is called; if it returns `Some(content)`, that content is parsed
+///   recursively and its blocks are appended.
+/// - Parsing of the main content then continues.
+///
+/// Pass `&|_| None` to disable Include handling (identical to [`parse_ssh_config`]).
+pub fn parse_ssh_config_with_includes(
+    content: &str,
+    read_include: &dyn Fn(&str) -> Option<String>,
+) -> Vec<SshHostBlock> {
+    let mut blocks: Vec<SshHostBlock> = Vec::new();
+    // None → no active block yet; Some(true) → Host block; Some(false) → Match block (skip)
+    let mut current_aliases: Option<Vec<String>> = None;
+    let mut current_directives: Vec<(String, String)> = Vec::new();
+    let mut in_host_block = false;
+
+    let flush = |blocks: &mut Vec<SshHostBlock>,
+                 aliases: &mut Option<Vec<String>>,
+                 directives: &mut Vec<(String, String)>,
+                 in_host: &mut bool| {
+        if *in_host {
+            if let Some(a) = aliases.take() {
+                blocks.push(SshHostBlock {
+                    aliases: a,
+                    directives: std::mem::take(directives),
+                });
+            }
+        } else {
+            aliases.take();
+            directives.clear();
+        }
+        *in_host = false;
+    };
+
+    for line in content.lines() {
+        let trimmed = line.trim();
+
+        // Skip blank lines and comments
+        if trimmed.is_empty() || trimmed.starts_with('#') {
+            continue;
+        }
+
+        // Split keyword from the rest on first whitespace or '='
+        let (keyword, rest) = split_keyword(trimmed);
+
+        match keyword.to_lowercase().as_str() {
+            "host" => {
+                // Flush previous block
+                flush(
+                    &mut blocks,
+                    &mut current_aliases,
+                    &mut current_directives,
+                    &mut in_host_block,
+                );
+                let aliases: Vec<String> = rest
+                    .split_whitespace()
+                    .map(|s| s.to_string())
+                    .collect();
+                current_aliases = Some(aliases);
+                in_host_block = true;
+            }
+            "match" => {
+                // Flush previous block, then enter skip mode
+                flush(
+                    &mut blocks,
+                    &mut current_aliases,
+                    &mut current_directives,
+                    &mut in_host_block,
+                );
+                current_aliases = Some(Vec::new()); // placeholder so flush knows there's a block
+                in_host_block = false;
+            }
+            "include" => {
+                // Flush the current block before processing the include
+                flush(
+                    &mut blocks,
+                    &mut current_aliases,
+                    &mut current_directives,
+                    &mut in_host_block,
+                );
+                if let Some(included_content) = read_include(rest.trim()) {
+                    let included_blocks =
+                        parse_ssh_config_with_includes(&included_content, read_include);
+                    blocks.extend(included_blocks);
+                }
+            }
+            _ => {
+                if in_host_block && current_aliases.is_some() {
+                    current_directives.push((keyword.to_string(), rest.to_string()));
+                }
+                // In Match block or before any block → ignore
+            }
+        }
+    }
+
+    // Flush last block
+    flush(
+        &mut blocks,
+        &mut current_aliases,
+        &mut current_directives,
+        &mut in_host_block,
+    );
+
+    blocks
+}
+
+/// Parse SSH config text into a list of [`SshHostBlock`]s.
+///
+/// - Only `Host` blocks are returned; `Match` blocks are skipped entirely.
+/// - Comments (`#`) and blank lines are ignored.
+/// - Directive lines are split on the first run of whitespace or `=`.
+/// - Multiple aliases on a single `Host` line are all captured.
+/// - `Include` directives are ignored (use [`parse_ssh_config_with_includes`] to handle them).
+pub fn parse_ssh_config(content: &str) -> Vec<SshHostBlock> {
+    parse_ssh_config_with_includes(content, &|_| None)
+}
+
+/// Split a trimmed SSH config line into (keyword, value).
+///
+/// The separator is the first `=` (with optional surrounding whitespace) or the first
+/// run of whitespace — whichever comes first.
+fn split_keyword(line: &str) -> (String, String) {
+    // Find position of first '=' or first whitespace character
+    let eq_pos = line.find('=');
+    let ws_pos = line.find(|c: char| c.is_ascii_whitespace());
+
+    let sep_pos = match (eq_pos, ws_pos) {
+        (Some(e), Some(w)) => Some(e.min(w)),
+        (Some(e), None) => Some(e),
+        (None, Some(w)) => Some(w),
+        (None, None) => None,
+    };
+
+    match sep_pos {
+        None => (line.to_string(), String::new()),
+        Some(pos) => {
+            let keyword = line[..pos].to_string();
+            // Skip separator characters (whitespace and '=')
+            let rest = line[pos..].trim_start_matches(|c: char| c == '=' || c.is_ascii_whitespace());
+            (keyword, rest.to_string())
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn parse_single_host_block() {
+        let config = "\
+Host github.com
+    User git
+    IdentityFile ~/.ssh/id_ed25519
+    HostName github.com
+";
+        let blocks = parse_ssh_config(config);
+        assert_eq!(blocks.len(), 1);
+        let b = &blocks[0];
+        assert_eq!(b.aliases, vec!["github.com"]);
+        assert_eq!(b.user(), Some("git"));
+        assert_eq!(b.identity_file(), Some("~/.ssh/id_ed25519"));
+        assert_eq!(b.hostname(), Some("github.com"));
+    }
+
+    #[test]
+    fn parse_multiple_blocks_filter_git_user() {
+        let config = "\
+Host work-gitlab
+    HostName gitlab.mycompany.com
+    User git
+    IdentityFile ~/.ssh/id_work
+
+Host personal
+    HostName github.com
+    User git
+    IdentityFile ~/.ssh/id_personal
+
+Host bastion
+    HostName bastion.mycompany.com
+    User admin
+    IdentityFile ~/.ssh/id_bastion
+";
+        let blocks = parse_ssh_config(config);
+        assert_eq!(blocks.len(), 3);
+
+        let git_blocks: Vec<_> = blocks.iter().filter(|b| b.is_git_user()).collect();
+        assert_eq!(git_blocks.len(), 2);
+        let git_aliases: Vec<&str> = git_blocks.iter().map(|b| b.aliases[0].as_str()).collect();
+        assert!(git_aliases.contains(&"work-gitlab"));
+        assert!(git_aliases.contains(&"personal"));
+
+        let non_git: Vec<_> = blocks.iter().filter(|b| !b.is_git_user()).collect();
+        assert_eq!(non_git.len(), 1);
+        assert_eq!(non_git[0].aliases[0], "bastion");
+    }
+
+    #[test]
+    fn parse_host_with_multiple_aliases() {
+        let config = "\
+Host github.com gh
+    User git
+    IdentityFile ~/.ssh/id_github
+";
+        let blocks = parse_ssh_config(config);
+        assert_eq!(blocks.len(), 1);
+        assert_eq!(blocks[0].aliases, vec!["github.com", "gh"]);
+    }
+
+    #[test]
+    fn skip_match_blocks() {
+        let config = "\
+Host first
+    User alice
+
+Match host internal.example.com
+    ProxyJump bastion
+
+Host second
+    User bob
+";
+        let blocks = parse_ssh_config(config);
+        assert_eq!(blocks.len(), 2);
+        assert_eq!(blocks[0].aliases, vec!["first"]);
+        assert_eq!(blocks[0].user(), Some("alice"));
+        assert_eq!(blocks[1].aliases, vec!["second"]);
+        assert_eq!(blocks[1].user(), Some("bob"));
+    }
+
+    #[test]
+    fn handle_tabs_and_varied_indentation() {
+        let config = "Host tabbed\n\tUser git\n\tIdentityFile\t~/.ssh/id_tab\n";
+        let blocks = parse_ssh_config(config);
+        assert_eq!(blocks.len(), 1);
+        assert_eq!(blocks[0].user(), Some("git"));
+        assert_eq!(blocks[0].identity_file(), Some("~/.ssh/id_tab"));
+    }
+
+    #[test]
+    fn ignore_comments_and_blank_lines() {
+        let config = "\
+# Global settings comment
+
+# Host section
+Host example.com
+    # inline comment
+    User git
+
+    IdentityFile ~/.ssh/id_example
+";
+        let blocks = parse_ssh_config(config);
+        assert_eq!(blocks.len(), 1);
+        assert_eq!(blocks[0].aliases, vec!["example.com"]);
+        assert_eq!(blocks[0].user(), Some("git"));
+        assert_eq!(blocks[0].identity_file(), Some("~/.ssh/id_example"));
+        // The inline comment line should not appear as a directive
+        assert!(!blocks[0].directives.iter().any(|(k, _)| k.starts_with('#')));
+    }
+
+    #[test]
+    fn empty_config() {
+        let blocks = parse_ssh_config("");
+        assert!(blocks.is_empty());
+    }
+
+    #[test]
+    fn comments_only() {
+        let config = "\
+# This is a comment
+# Another comment
+
+# Yet another
+";
+        let blocks = parse_ssh_config(config);
+        assert!(blocks.is_empty());
+    }
+
+    // --- Task 2: identity file resolution ---
+
+    #[test]
+    fn resolve_identity_file_tilde() {
+        let ssh_dir = Path::new("/home/user/.ssh");
+        let path = resolve_identity_file("~/.ssh/id_ed25519", ssh_dir);
+        let home = dirs::home_dir().unwrap();
+        assert_eq!(path, home.join(".ssh/id_ed25519"));
+    }
+
+    #[test]
+    fn resolve_identity_file_relative() {
+        let path = resolve_identity_file("id_ed25519", Path::new("/home/user/.ssh"));
+        assert_eq!(path, PathBuf::from("/home/user/.ssh/id_ed25519"));
+    }
+
+    #[test]
+    fn resolve_identity_file_absolute() {
+        let path = resolve_identity_file("/etc/ssh/key", Path::new("/home/user/.ssh"));
+        assert_eq!(path, PathBuf::from("/etc/ssh/key"));
+    }
+
+    #[test]
+    fn synthesize_config_from_blocks() {
+        let blocks = vec![
+            SshHostBlock {
+                aliases: vec!["github.com".into()],
+                directives: vec![
+                    ("User".into(), "git".into()),
+                    ("IdentityFile".into(), "~/.ssh/id_ed25519".into()),
+                    ("HostName".into(), "github.com".into()),
+                ],
+            },
+            SshHostBlock {
+                aliases: vec!["gitea".into()],
+                directives: vec![
+                    ("User".into(), "git".into()),
+                    ("HostName".into(), "gitea.example.com".into()),
+                    ("IdentityFile".into(), "~/.ssh/work_gitea".into()),
+                    ("Port".into(), "2222".into()),
+                ],
+            },
+        ];
+        let config = synthesize_ssh_config(&blocks);
+        let expected = "\
+Host github.com
+    User git
+    IdentityFile ~/.ssh/id_ed25519
+    HostName github.com
+
+Host gitea
+    User git
+    HostName gitea.example.com
+    IdentityFile ~/.ssh/work_gitea
+    Port 2222
+";
+        assert_eq!(config, expected);
+    }
+
+    // --- Task 3: Include directive support ---
+
+    #[test]
+    fn parse_with_include_callback() {
+        let main_config = "\
+Include extra_config
+
+Host github.com
+    User git
+    IdentityFile ~/.ssh/id_ed25519
+";
+        let extra_config = "\
+Host gitea.local
+    User git
+    IdentityFile ~/.ssh/gitea_key
+";
+        let blocks = parse_ssh_config_with_includes(main_config, &|path: &str| {
+            if path == "extra_config" {
+                Some(extra_config.to_string())
+            } else {
+                None
+            }
+        });
+        assert_eq!(blocks.len(), 2);
+        assert_eq!(blocks[0].aliases, vec!["gitea.local"]);
+        assert_eq!(blocks[1].aliases, vec!["github.com"]);
+    }
+}
diff --git a/crates/sandcage/src/tasks.rs b/crates/sandcage/src/tasks.rs
new file mode 100644
index 0000000..fa84cbc
--- /dev/null
+++ b/crates/sandcage/src/tasks.rs
@@ -0,0 +1,97 @@
+pub fn glob_match(pattern: &str, text: &str) -> bool {
+    let parts: Vec<&str> = pattern.split('*').collect();
+    let mut pos = 0;
+
+    for (i, part) in parts.iter().enumerate() {
+        if part.is_empty() {
+            continue;
+        }
+        match text[pos..].find(part) {
+            Some(found) => {
+                if i == 0 && found != 0 && !pattern.starts_with('*') {
+                    return false;
+                }
+                pos += found + part.len();
+            }
+            None => return false,
+        }
+    }
+
+    if !pattern.ends_with('*') && pos != text.len() {
+        if let Some(last) = parts.last() {
+            if !last.is_empty() {
+                return text.ends_with(last);
+            }
+        }
+    }
+
+    true
+}
+
+pub fn check_patterns(allow: &[String], deny: &[String], args_joined: &str) -> Result<(), String> {
+    for pattern in deny {
+        if glob_match(pattern, args_joined) {
+            return Err(format!("denied by pattern: {pattern}"));
+        }
+    }
+
+    if !allow.is_empty() {
+        let allowed = allow.iter().any(|p| glob_match(p, args_joined));
+        if !allowed {
+            return Err("not matched by any allow pattern".to_string());
+        }
+    }
+
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn glob_matches_wildcard_prefix() {
+        assert!(glob_match("* prune *", "docker system prune -af"));
+    }
+
+    #[test]
+    fn glob_matches_wildcard_suffix() {
+        assert!(glob_match("compose up *", "compose up -d"));
+        assert!(!glob_match("compose up *", "compose down"));
+    }
+
+    #[test]
+    fn glob_matches_exact() {
+        assert!(glob_match("compose down", "compose down"));
+        assert!(!glob_match("compose down", "compose up"));
+    }
+
+    #[test]
+    fn check_allow_deny_with_empty_lists() {
+        assert!(check_patterns(&[], &[], "anything goes").is_ok());
+    }
+
+    #[test]
+    fn check_deny_blocks_matching() {
+        let deny = vec!["* prune *".to_string(), "* rm -f *".to_string()];
+        assert!(check_patterns(&[], &deny, "docker system prune -af").is_err());
+        assert!(check_patterns(&[], &deny, "docker rm -f abc").is_err());
+        assert!(check_patterns(&[], &deny, "docker ps").is_ok());
+    }
+
+    #[test]
+    fn check_allow_is_fail_closed() {
+        let allow = vec!["compose up *".to_string(), "compose down".to_string()];
+        assert!(check_patterns(&allow, &[], "compose up -d").is_ok());
+        assert!(check_patterns(&allow, &[], "compose down").is_ok());
+        assert!(check_patterns(&allow, &[], "compose rm").is_err());
+    }
+
+    #[test]
+    fn deny_overrides_allow() {
+        let allow = vec!["compose *".to_string()];
+        let deny = vec!["compose rm *".to_string()];
+        assert!(check_patterns(&allow, &deny, "compose up -d").is_ok());
+        assert!(check_patterns(&allow, &deny, "compose rm -f").is_err());
+    }
+}
diff --git a/crates/sandcage/src/workspace.rs b/crates/sandcage/src/workspace.rs
new file mode 100644
index 0000000..9fe0980
--- /dev/null
+++ b/crates/sandcage/src/workspace.rs
@@ -0,0 +1,114 @@
+use std::path::{Path, PathBuf};
+use std::process::Command;
+
+use miette::Diagnostic;
+use thiserror::Error;
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum WorkspaceError {
+    #[error("Failed to resolve absolute path for {0}: {1}")]
+    #[diagnostic(code(sandcage::workspace::canonicalize_failed))]
+    CanonicalizeFailed(PathBuf, #[source] std::io::Error),
+}
+
+pub type Result<T> = std::result::Result<T, WorkspaceError>;
+
+pub fn resolve_workspace(path: Option<&Path>) -> Result<PathBuf> {
+    // Determine starting path
+    let raw = match path {
+        Some(p) => p.to_path_buf(),
+        None => std::env::current_dir()
+            .map_err(|e| WorkspaceError::CanonicalizeFailed(PathBuf::from("."), e))?,
+    };
+
+    // Resolve to absolute, canonical path (follows symlinks, checks existence)
+    let absolute = raw
+        .canonicalize()
+        .map_err(|e| WorkspaceError::CanonicalizeFailed(raw.clone(), e))?;
+
+    // Ask git for the worktree root; silently fall back if not a git repo
+    let git_root = Command::new("git")
+        .args(["rev-parse", "--show-toplevel"])
+        .current_dir(&absolute)
+        .output();
+
+    match git_root {
+        Ok(output) if output.status.success() => {
+            let root = String::from_utf8_lossy(&output.stdout)
+                .trim()
+                .to_string();
+            Ok(PathBuf::from(root))
+        }
+        // Not a git repo, or git not installed — return the absolute path as-is
+        _ => Ok(absolute),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::process::Command;
+    use tempfile::TempDir;
+
+    /// Create a temporary directory and initialise it as a git repository.
+    /// Returns the `TempDir` guard (keep it alive for the test) and the path.
+    fn make_git_repo() -> (TempDir, PathBuf) {
+        let dir = TempDir::new().expect("create tempdir");
+        let path = dir.path().to_path_buf();
+
+        // git init
+        let status = Command::new("git")
+            .args(["init"])
+            .current_dir(&path)
+            .status()
+            .expect("run git init");
+        assert!(status.success(), "git init failed");
+
+        (dir, path)
+    }
+
+    #[test]
+    fn returns_repo_root_when_inside_git_repo() {
+        let (_guard, repo_root) = make_git_repo();
+
+        // Create a nested directory inside the repo
+        let nested = repo_root.join("a").join("b");
+        std::fs::create_dir_all(&nested).expect("create nested dirs");
+
+        // resolve_workspace from the nested dir should return the repo root
+        let resolved = resolve_workspace(Some(&nested)).expect("resolve_workspace");
+        assert_eq!(
+            resolved.canonicalize().unwrap(),
+            repo_root.canonicalize().unwrap(),
+            "expected repo root, got {resolved:?}"
+        );
+    }
+
+    #[test]
+    fn returns_directory_itself_when_not_in_git_repo() {
+        // Create a temp dir that is NOT a git repo (no git init)
+        let dir = TempDir::new().expect("create tempdir");
+
+        // Make sure there is no ancestor git repo that would pollute the result.
+        // tempfile creates dirs under the system temp folder, which is typically
+        // outside any user repo, so this should be safe.
+        let path = dir.path().to_path_buf();
+        let resolved = resolve_workspace(Some(&path)).expect("resolve_workspace");
+
+        assert_eq!(
+            resolved.canonicalize().unwrap(),
+            path.canonicalize().unwrap(),
+            "expected the directory itself, got {resolved:?}"
+        );
+    }
+
+    #[test]
+    fn none_path_uses_current_directory() {
+        // When None is passed the function should not error; it should return
+        // something (either the cwd or its git root).
+        let result = resolve_workspace(None);
+        assert!(result.is_ok(), "resolve_workspace(None) returned error: {result:?}");
+        let resolved = result.unwrap();
+        assert!(resolved.is_absolute(), "result should be absolute: {resolved:?}");
+    }
+}
diff --git a/crates/sandcage/src/worktree.rs b/crates/sandcage/src/worktree.rs
new file mode 100644
index 0000000..49a5ede
--- /dev/null
+++ b/crates/sandcage/src/worktree.rs
@@ -0,0 +1,224 @@
+use std::path::{Path, PathBuf};
+use std::process::Command;
+
+use miette::Diagnostic;
+use thiserror::Error;
+
+#[derive(Debug, Error, Diagnostic)]
+pub enum WorktreeError {
+    #[error("not a git repository: {0}")]
+    #[diagnostic(code(sandcage::worktree::not_git))]
+    NotGitRepo(PathBuf),
+
+    #[error("git worktree add failed: {0}")]
+    #[diagnostic(code(sandcage::worktree::create_failed))]
+    CreateFailed(String),
+
+    #[error("git worktree remove failed: {0}")]
+    #[diagnostic(code(sandcage::worktree::remove_failed))]
+    RemoveFailed(String),
+}
+
+pub fn worktree_dir(sandcage_home: &Path, project_slug: &str, timestamp: &str) -> PathBuf {
+    sandcage_home
+        .join("worktrees")
+        .join(format!("{project_slug}-{timestamp}"))
+}
+
+pub fn project_slug(project_path: &Path) -> String {
+    project_path
+        .file_name()
+        .map(|n| n.to_string_lossy().to_string())
+        .unwrap_or_else(|| "project".to_string())
+}
+
+pub fn generate_timestamp() -> String {
+    use std::time::{SystemTime, UNIX_EPOCH};
+    let d = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default();
+    format!("{}", d.as_secs())
+}
+
+pub fn create_worktree(
+    repo_root: &Path,
+    target_path: &Path,
+    branch: Option<&str>,
+) -> Result<(), WorktreeError> {
+    let check = Command::new("git")
+        .args(["rev-parse", "--git-dir"])
+        .current_dir(repo_root)
+        .output()
+        .map_err(|_| WorktreeError::NotGitRepo(repo_root.to_path_buf()))?;
+
+    if !check.status.success() {
+        return Err(WorktreeError::NotGitRepo(repo_root.to_path_buf()));
+    }
+
+    let mut cmd = Command::new("git");
+    cmd.args(["worktree", "add"]);
+
+    if let Some(b) = branch {
+        cmd.args([&target_path.to_string_lossy().to_string(), b]);
+    } else {
+        cmd.args(["--detach", &target_path.to_string_lossy().to_string()]);
+    }
+
+    cmd.current_dir(repo_root);
+
+    let output = cmd
+        .output()
+        .map_err(|e| WorktreeError::CreateFailed(format!("failed to run git: {e}")))?;
+
+    if !output.status.success() {
+        let stderr = String::from_utf8_lossy(&output.stderr);
+        return Err(WorktreeError::CreateFailed(stderr.to_string()));
+    }
+
+    Ok(())
+}
+
+#[derive(Debug)]
+pub struct WorktreeEntry {
+    pub name: String,
+    pub path: PathBuf,
+}
+
+pub fn list_worktrees(sandcage_home: &Path) -> Vec<WorktreeEntry> {
+    let wt_dir = sandcage_home.join("worktrees");
+    if !wt_dir.exists() {
+        return vec![];
+    }
+
+    let mut entries = Vec::new();
+    if let Ok(read_dir) = std::fs::read_dir(&wt_dir) {
+        for entry in read_dir.flatten() {
+            if entry.file_type().map(|t| t.is_dir()).unwrap_or(false) {
+                let name = entry.file_name().to_string_lossy().to_string();
+                entries.push(WorktreeEntry {
+                    name,
+                    path: entry.path(),
+                });
+            }
+        }
+    }
+    entries.sort_by(|a, b| a.name.cmp(&b.name));
+    entries
+}
+
+pub fn remove_worktree(path: &Path) -> Result<(), WorktreeError> {
+    let output = Command::new("git")
+        .args(["worktree", "remove", "--force", &path.to_string_lossy()])
+        .output();
+
+    match output {
+        Ok(o) if o.status.success() => return Ok(()),
+        _ => {}
+    }
+
+    std::fs::remove_dir_all(path).map_err(|e| {
+        WorktreeError::RemoveFailed(format!("failed to remove {}: {e}", path.display()))
+    })
+}
+
+pub fn clean_all(sandcage_home: &Path, dry_run: bool) -> Vec<(String, Result<(), WorktreeError>)> {
+    let entries = list_worktrees(sandcage_home);
+    let mut results = Vec::new();
+
+    for entry in entries {
+        if dry_run {
+            results.push((entry.name, Ok(())));
+        } else {
+            let result = remove_worktree(&entry.path);
+            results.push((entry.name, result));
+        }
+    }
+
+    results
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn worktree_dir_path_format() {
+        let home = PathBuf::from("/home/user/.sandcage");
+        let dir = worktree_dir(&home, "myapp", "20260602-140000");
+        assert_eq!(
+            dir,
+            PathBuf::from("/home/user/.sandcage/worktrees/myapp-20260602-140000")
+        );
+    }
+
+    #[test]
+    fn project_slug_extracts_basename() {
+        assert_eq!(
+            project_slug(Path::new("/home/user/projects/my-app")),
+            "my-app"
+        );
+    }
+
+    #[test]
+    fn list_worktrees_finds_managed() {
+        let home = tempfile::tempdir().unwrap();
+        let wt_dir = home.path().join("worktrees");
+        std::fs::create_dir_all(&wt_dir).unwrap();
+        std::fs::create_dir_all(wt_dir.join("myapp-1717300000")).unwrap();
+        std::fs::create_dir_all(wt_dir.join("myapp-1717300001")).unwrap();
+
+        let entries = list_worktrees(home.path());
+        assert_eq!(entries.len(), 2);
+    }
+
+    #[test]
+    fn list_worktrees_empty_when_no_dir() {
+        let home = tempfile::tempdir().unwrap();
+        let entries = list_worktrees(home.path());
+        assert!(entries.is_empty());
+    }
+
+    #[test]
+    fn create_worktree_produces_valid_checkout() {
+        let dir = tempfile::tempdir().unwrap();
+        let repo_root = dir.path().to_path_buf();
+        Command::new("git")
+            .args(["init"])
+            .current_dir(&repo_root)
+            .stdout(std::process::Stdio::null())
+            .stderr(std::process::Stdio::null())
+            .status()
+            .expect("git init");
+        Command::new("git")
+            .args(["commit", "--allow-empty", "-m", "init"])
+            .current_dir(&repo_root)
+            .stdout(std::process::Stdio::null())
+            .stderr(std::process::Stdio::null())
+            .status()
+            .expect("git commit");
+
+        let wt_dir = tempfile::tempdir().unwrap();
+        let wt_path = wt_dir.path().join("test-wt");
+
+        create_worktree(&repo_root, &wt_path, None).unwrap();
+
+        assert!(wt_path.exists(), "worktree dir should exist");
+        let status = Command::new("git")
+            .args(["status"])
+            .current_dir(&wt_path)
+            .stdout(std::process::Stdio::null())
+            .stderr(std::process::Stdio::null())
+            .status()
+            .unwrap();
+        assert!(status.success(), "git status should work in worktree");
+
+        // Cleanup
+        Command::new("git")
+            .args(["worktree", "remove", "--force", &wt_path.to_string_lossy()])
+            .current_dir(&repo_root)
+            .stdout(std::process::Stdio::null())
+            .stderr(std::process::Stdio::null())
+            .status()
+            .ok();
+    }
+}
diff --git a/crates/thumper/Cargo.toml b/crates/thumper/Cargo.toml
new file mode 100644
index 0000000..a334607
--- /dev/null
+++ b/crates/thumper/Cargo.toml
@@ -0,0 +1,13 @@
+[package]
+name = "thumper"
+version = "0.1.0"
+edition = "2024"
+description = "In-container forwarding client for sandcage"
+license = "MIT"
+
+[dependencies]
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+
+[dev-dependencies]
+tempfile = "3"
diff --git a/crates/thumper/src/client.rs b/crates/thumper/src/client.rs
new file mode 100644
index 0000000..eae5d57
--- /dev/null
+++ b/crates/thumper/src/client.rs
@@ -0,0 +1,311 @@
+#[cfg(unix)]
+mod imp {
+    use std::io::{self, BufRead, BufReader, Write};
+    use std::os::unix::net::UnixStream;
+    use std::path::Path;
+
+    use crate::protocol::{ForwardRequest, ResponseFrame, StreamKind};
+
+    #[derive(Debug)]
+    pub enum ClientError {
+        Connect(io::Error),
+        Send(io::Error),
+        Receive(io::Error),
+        Parse(serde_json::Error),
+        UnexpectedEof,
+    }
+
+    impl std::fmt::Display for ClientError {
+        fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+            match self {
+                ClientError::Connect(e) => write!(f, "failed to connect to forwarding socket: {e}"),
+                ClientError::Send(e) => write!(f, "failed to send request: {e}"),
+                ClientError::Receive(e) => write!(f, "failed to read response: {e}"),
+                ClientError::Parse(e) => write!(f, "malformed response frame: {e}"),
+                ClientError::UnexpectedEof => write!(f, "connection closed without exit frame"),
+            }
+        }
+    }
+
+    impl std::error::Error for ClientError {}
+
+    pub fn forward(socket_path: &Path, request: &ForwardRequest) -> Result<i32, ClientError> {
+        let stream = UnixStream::connect(socket_path).map_err(ClientError::Connect)?;
+
+        // Send request as a single JSON line.
+        let mut writer = io::BufWriter::new(&stream);
+        serde_json::to_writer(&mut writer, request).map_err(|e| ClientError::Send(e.into()))?;
+        writer.write_all(b"\n").map_err(ClientError::Send)?;
+        writer.flush().map_err(ClientError::Send)?;
+
+        // Read response frames line by line.
+        let reader = BufReader::new(&stream);
+        for line_result in reader.lines() {
+            let line = line_result.map_err(ClientError::Receive)?;
+            if line.is_empty() {
+                continue;
+            }
+            let frame: ResponseFrame = serde_json::from_str(&line).map_err(ClientError::Parse)?;
+            match frame {
+                ResponseFrame::Output { stream: StreamKind::Stdout, data } => {
+                    print!("{data}");
+                }
+                ResponseFrame::Output { stream: StreamKind::Stderr, data } => {
+                    eprint!("{data}");
+                }
+                ResponseFrame::Exit { exit } => {
+                    return Ok(exit);
+                }
+            }
+        }
+
+        Err(ClientError::UnexpectedEof)
+    }
+}
+
+#[cfg(unix)]
+pub use imp::*;
+
+#[cfg(not(unix))]
+mod imp {
+    use std::path::Path;
+
+    use crate::protocol::ForwardRequest;
+
+    #[derive(Debug)]
+    pub enum ClientError {
+        Unsupported,
+    }
+
+    impl std::fmt::Display for ClientError {
+        fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+            write!(f, "thumper is only supported on Unix platforms")
+        }
+    }
+
+    impl std::error::Error for ClientError {}
+
+    pub fn forward(_socket_path: &Path, _request: &ForwardRequest) -> Result<i32, ClientError> {
+        Err(ClientError::Unsupported)
+    }
+}
+
+#[cfg(not(unix))]
+pub use imp::*;
+
+#[cfg(test)]
+#[cfg(unix)]
+mod tests {
+    use super::*;
+    use crate::protocol::RequestKind;
+    use std::io::{BufRead, BufReader, Write};
+    use std::os::unix::net::{UnixListener, UnixStream};
+    use std::path::Path;
+    use std::thread;
+
+    fn mock_server(
+        socket_path: &Path,
+        handler: impl FnOnce(UnixStream) + Send + 'static,
+    ) -> thread::JoinHandle<()> {
+        let listener = UnixListener::bind(socket_path).unwrap();
+        thread::spawn(move || {
+            let (stream, _) = listener.accept().unwrap();
+            handler(stream);
+        })
+    }
+
+    #[test]
+    fn sends_request_as_single_json_line() {
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+
+        let handle = mock_server(&sock, |stream| {
+            let mut reader = BufReader::new(&stream);
+            let mut line = String::new();
+            reader.read_line(&mut line).unwrap();
+
+            let parsed: serde_json::Value = serde_json::from_str(&line).unwrap();
+            assert_eq!(parsed["kind"], "task");
+            assert_eq!(parsed["name"], "build");
+            assert_eq!(parsed["args"][0], "--release");
+            assert_eq!(parsed["cwd"], "/workspace/app");
+
+            // Send exit frame so forward() returns
+            let mut writer = reader.into_inner();
+            writeln!(writer, r#"{{"exit":0}}"#).unwrap();
+        });
+
+        let req = crate::protocol::ForwardRequest {
+            kind: RequestKind::Task,
+            name: "build".to_string(),
+            args: vec!["--release".to_string()],
+            cwd: "/workspace/app".to_string(),
+        };
+        let exit = forward(&sock, &req).unwrap();
+        assert_eq!(exit, 0);
+        handle.join().unwrap();
+    }
+
+    #[test]
+    fn routes_stdout_and_stderr_separately() {
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+
+        let handle = mock_server(&sock, |stream| {
+            let mut reader = BufReader::new(&stream);
+            let mut line = String::new();
+            reader.read_line(&mut line).unwrap(); // consume request
+
+            let mut writer = reader.into_inner();
+            writeln!(writer, r#"{{"stream":"stdout","data":"out1\n"}}"#).unwrap();
+            writeln!(writer, r#"{{"stream":"stderr","data":"err1\n"}}"#).unwrap();
+            writeln!(writer, r#"{{"stream":"stdout","data":"out2\n"}}"#).unwrap();
+            writeln!(writer, r#"{{"exit":0}}"#).unwrap();
+        });
+
+        let req = crate::protocol::ForwardRequest {
+            kind: RequestKind::Task,
+            name: "test".to_string(),
+            args: vec![],
+            cwd: "/workspace".to_string(),
+        };
+        let exit = forward(&sock, &req).unwrap();
+        assert_eq!(exit, 0);
+        handle.join().unwrap();
+    }
+
+    #[test]
+    fn nonzero_exit_is_relayed() {
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+
+        let handle = mock_server(&sock, |stream| {
+            let mut reader = BufReader::new(&stream);
+            let mut line = String::new();
+            reader.read_line(&mut line).unwrap();
+
+            let mut writer = reader.into_inner();
+            writeln!(writer, r#"{{"stream":"stderr","data":"error: build failed\n"}}"#).unwrap();
+            writeln!(writer, r#"{{"exit":1}}"#).unwrap();
+        });
+
+        let req = crate::protocol::ForwardRequest {
+            kind: RequestKind::Task,
+            name: "build".to_string(),
+            args: vec![],
+            cwd: "/workspace".to_string(),
+        };
+        let exit = forward(&sock, &req).unwrap();
+        assert_eq!(exit, 1);
+        handle.join().unwrap();
+    }
+
+    #[test]
+    fn unexpected_eof_when_no_exit_frame() {
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+
+        let handle = mock_server(&sock, |stream| {
+            let mut reader = BufReader::new(&stream);
+            let mut line = String::new();
+            reader.read_line(&mut line).unwrap();
+
+            let mut writer = reader.into_inner();
+            writeln!(writer, r#"{{"stream":"stdout","data":"partial"}}"#).unwrap();
+            let _ = writer; // close without exit frame
+        });
+
+        let req = crate::protocol::ForwardRequest {
+            kind: RequestKind::Task,
+            name: "test".to_string(),
+            args: vec![],
+            cwd: "/workspace".to_string(),
+        };
+        let err = forward(&sock, &req).unwrap_err();
+        assert!(
+            matches!(err, ClientError::UnexpectedEof),
+            "expected UnexpectedEof, got {err}"
+        );
+        handle.join().unwrap();
+    }
+
+    #[test]
+    fn full_roundtrip_simulating_cargo_build() {
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+
+        let handle = mock_server(&sock, |stream| {
+            let mut reader = BufReader::new(&stream);
+            let mut req_line = String::new();
+            reader.read_line(&mut req_line).unwrap();
+
+            // Validate the request
+            let req: serde_json::Value = serde_json::from_str(&req_line).unwrap();
+            assert_eq!(req["kind"], "task");
+            assert_eq!(req["name"], "build");
+            assert_eq!(req["args"], serde_json::json!(["--release"]));
+
+            // Simulate cargo build output
+            let writer = reader.into_inner();
+            writeln!(&*writer, r#"{{"stream":"stderr","data":"   Compiling sandcage v0.1.0\n"}}"#).unwrap();
+            writeln!(&*writer, r#"{{"stream":"stderr","data":"   Compiling thumper v0.1.0\n"}}"#).unwrap();
+            writeln!(&*writer, r#"{{"stream":"stderr","data":"    Finished release [optimized]\n"}}"#).unwrap();
+            writeln!(&*writer, r#"{{"exit":0}}"#).unwrap();
+        });
+
+        let req = crate::protocol::ForwardRequest {
+            kind: RequestKind::Task,
+            name: "build".to_string(),
+            args: vec!["--release".to_string()],
+            cwd: "/workspace/app".to_string(),
+        };
+        let exit = forward(&sock, &req).unwrap();
+        assert_eq!(exit, 0);
+        handle.join().unwrap();
+    }
+
+    #[test]
+    fn tool_request_roundtrip() {
+        let dir = tempfile::tempdir().unwrap();
+        let sock = dir.path().join("cmd.sock");
+
+        let handle = mock_server(&sock, |stream| {
+            let mut reader = BufReader::new(&stream);
+            let mut req_line = String::new();
+            reader.read_line(&mut req_line).unwrap();
+
+            let req: serde_json::Value = serde_json::from_str(&req_line).unwrap();
+            assert_eq!(req["kind"], "tool");
+            assert_eq!(req["name"], "docker");
+
+            let writer = reader.into_inner();
+            writeln!(&*writer, r#"{{"stream":"stdout","data":"container-id-abc123\n"}}"#).unwrap();
+            writeln!(&*writer, r#"{{"exit":0}}"#).unwrap();
+        });
+
+        let req = crate::protocol::ForwardRequest {
+            kind: RequestKind::Tool,
+            name: "docker".to_string(),
+            args: vec!["compose".to_string(), "up".to_string(), "-d".to_string()],
+            cwd: "/workspace/app".to_string(),
+        };
+        let exit = forward(&sock, &req).unwrap();
+        assert_eq!(exit, 0);
+        handle.join().unwrap();
+    }
+
+    #[test]
+    fn connect_error_on_missing_socket() {
+        let err = forward(
+            Path::new("/tmp/sandcage-nonexistent-test.sock"),
+            &crate::protocol::ForwardRequest {
+                kind: RequestKind::Task,
+                name: "x".to_string(),
+                args: vec![],
+                cwd: "/workspace".to_string(),
+            },
+        )
+        .unwrap_err();
+        assert!(matches!(err, ClientError::Connect(_)), "expected Connect, got {err}");
+    }
+}
diff --git a/crates/thumper/src/main.rs b/crates/thumper/src/main.rs
new file mode 100644
index 0000000..2c18b6b
--- /dev/null
+++ b/crates/thumper/src/main.rs
@@ -0,0 +1,44 @@
+mod client;
+mod protocol;
+
+use std::path::Path;
+use std::process::ExitCode;
+
+use protocol::{ForwardRequest, RequestKind};
+
+const DEFAULT_SOCKET: &str = "/run/sandcage/cmd.sock";
+
+fn main() -> ExitCode {
+    let args: Vec<String> = std::env::args().collect();
+
+    if args.len() < 2 || args[1] == "--help" || args[1] == "-h" {
+        eprintln!("usage: thumper <task-name> [args...]");
+        eprintln!();
+        eprintln!("Forwards a named task to the sandcage host daemon.");
+        eprintln!("The task is executed on the host and output is streamed back.");
+        return ExitCode::from(2);
+    }
+
+    let socket_path = std::env::var("SANDCAGE_SOCKET")
+        .map(|s| std::path::PathBuf::from(s))
+        .unwrap_or_else(|_| Path::new(DEFAULT_SOCKET).to_path_buf());
+
+    let cwd = std::env::current_dir()
+        .map(|p| p.to_string_lossy().to_string())
+        .unwrap_or_else(|_| "/workspace".to_string());
+
+    let request = ForwardRequest {
+        kind: RequestKind::Task,
+        name: args[1].clone(),
+        args: args[2..].to_vec(),
+        cwd,
+    };
+
+    match client::forward(&socket_path, &request) {
+        Ok(code) => ExitCode::from(code as u8),
+        Err(e) => {
+            eprintln!("thumper: {e}");
+            ExitCode::from(1)
+        }
+    }
+}
diff --git a/crates/thumper/src/protocol.rs b/crates/thumper/src/protocol.rs
new file mode 100644
index 0000000..b02c3bd
--- /dev/null
+++ b/crates/thumper/src/protocol.rs
@@ -0,0 +1,113 @@
+use serde::{Deserialize, Serialize};
+
+#[derive(Debug, Serialize)]
+pub struct ForwardRequest {
+    pub kind: RequestKind,
+    pub name: String,
+    pub args: Vec<String>,
+    pub cwd: String,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "snake_case")]
+#[allow(dead_code)]
+pub enum RequestKind {
+    Task,
+    Tool,
+}
+
+/// Response frames from the host-side daemon.
+///
+/// IMPORTANT: `Exit` MUST come before `Output`. Serde's `untagged` tries variants in
+/// declaration order — `{"exit":0}` would match `Output` if `Output` were first.
+#[derive(Debug, Deserialize)]
+#[serde(untagged)]
+#[allow(dead_code)]
+pub enum ResponseFrame {
+    Exit { exit: i32 },
+    Output { stream: StreamKind, data: String },
+}
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "snake_case")]
+#[allow(dead_code)]
+pub enum StreamKind {
+    Stdout,
+    Stderr,
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn request_serializes_to_expected_json() {
+        let req = ForwardRequest {
+            kind: RequestKind::Task,
+            name: "build".to_string(),
+            args: vec!["--release".to_string()],
+            cwd: "/workspace".to_string(),
+        };
+        let json = serde_json::to_value(&req).unwrap();
+        assert_eq!(json["kind"], "task");
+        assert_eq!(json["name"], "build");
+        assert_eq!(json["args"][0], "--release");
+        assert_eq!(json["cwd"], "/workspace");
+    }
+
+    #[test]
+    fn tool_request_kind_serializes() {
+        let req = ForwardRequest {
+            kind: RequestKind::Tool,
+            name: "grep".to_string(),
+            args: vec![],
+            cwd: "/".to_string(),
+        };
+        let json = serde_json::to_value(&req).unwrap();
+        assert_eq!(json["kind"], "tool");
+    }
+
+    #[test]
+    fn stdout_frame_deserializes() {
+        let frame: ResponseFrame =
+            serde_json::from_str(r#"{"stream":"stdout","data":"hello\n"}"#).unwrap();
+        match frame {
+            ResponseFrame::Output { stream: StreamKind::Stdout, data } => {
+                assert_eq!(data, "hello\n");
+            }
+            other => panic!("unexpected variant: {:?}", other),
+        }
+    }
+
+    #[test]
+    fn stderr_frame_deserializes() {
+        let frame: ResponseFrame =
+            serde_json::from_str(r#"{"stream":"stderr","data":"warning: unused var"}"#).unwrap();
+        match frame {
+            ResponseFrame::Output { stream: StreamKind::Stderr, data } => {
+                assert_eq!(data, "warning: unused var");
+            }
+            other => panic!("unexpected variant: {:?}", other),
+        }
+    }
+
+    #[test]
+    fn exit_frame_deserializes() {
+        let frame: ResponseFrame = serde_json::from_str(r#"{"exit":42}"#).unwrap();
+        match frame {
+            ResponseFrame::Exit { exit } => assert_eq!(exit, 42),
+            other => panic!("unexpected variant: {:?}", other),
+        }
+    }
+
+    #[test]
+    fn exit_zero_frame() {
+        // Regression guard: serde untagged ordering — Exit must come before Output
+        // so {"exit":0} does not accidentally match the Output variant.
+        let frame: ResponseFrame = serde_json::from_str(r#"{"exit":0}"#).unwrap();
+        match frame {
+            ResponseFrame::Exit { exit } => assert_eq!(exit, 0),
+            other => panic!("unexpected variant: {:?}", other),
+        }
+    }
+}
diff --git a/docs/commands.md b/docs/commands.md
new file mode 100644
index 0000000..060e446
--- /dev/null
+++ b/docs/commands.md
@@ -0,0 +1,434 @@
+# Command Reference
+
+Sandcage provides subcommands for running AI coding agents in isolated Docker containers.
+
+```
+sandcage <COMMAND> [OPTIONS]
+```
+
+---
+
+## claude
+
+Run the Claude Code agent in a sandboxed container.
+
+```
+sandcage claude [OPTIONS] [-- AGENT_ARGS...]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `-p, --path <PATH>` | Path to the project directory (defaults to current directory) |
+| `--shell` | Drop into a shell instead of launching the agent |
+| `--worktree` | Create a git worktree and mount it instead of the project directory |
+| `--home <NAME>` | Named home profile for agent auth/config (default: "default") |
+
+**Trailing arguments:** Any arguments after `--` are forwarded directly to the Claude Code binary inside the container.
+
+**Examples:**
+
+```sh
+# Run Claude Code on the current directory
+sandcage claude
+
+# Run Claude Code on a specific project
+sandcage claude --path /home/user/myproject
+
+# Drop into a shell in the Claude container environment
+sandcage claude --shell
+
+# Run in a disposable worktree copy
+sandcage claude --worktree
+
+# Run with a specific home profile (e.g. work account)
+sandcage claude --home work
+
+# Forward arguments to the agent
+sandcage claude -- --resume
+```
+
+---
+
+## codex
+
+Run the OpenAI Codex agent in a sandboxed container.
+
+```
+sandcage codex [OPTIONS] [-- AGENT_ARGS...]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `-p, --path <PATH>` | Path to the project directory (defaults to current directory) |
+| `--shell` | Drop into a shell instead of launching the agent |
+| `--worktree` | Create a git worktree and mount it instead of the project directory |
+| `--home <NAME>` | Named home profile for agent auth/config (default: "default") |
+
+**Trailing arguments:** Any arguments after `--` are forwarded directly to the Codex binary inside the container.
+
+**Examples:**
+
+```sh
+# Run Codex on the current directory
+sandcage codex
+
+# Run Codex in a disposable worktree
+sandcage codex --worktree
+
+# Forward arguments to Codex
+sandcage codex -- --model o4-mini
+```
+
+---
+
+## gemini
+
+Run the Gemini CLI agent in a sandboxed container.
+
+```
+sandcage gemini [OPTIONS] [-- AGENT_ARGS...]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `-p, --path <PATH>` | Path to the project directory (defaults to current directory) |
+| `--shell` | Drop into a shell instead of launching the agent |
+| `--worktree` | Create a git worktree and mount it instead of the project directory |
+| `--home <NAME>` | Named home profile for agent auth/config (default: "default") |
+
+**Trailing arguments:** Any arguments after `--` are forwarded directly to the Gemini CLI binary inside the container.
+
+**Examples:**
+
+```sh
+# Run Gemini CLI on the current directory
+sandcage gemini
+
+# Run Gemini in a disposable worktree
+sandcage gemini --worktree
+
+# Drop into a shell in the Gemini container
+sandcage gemini --shell
+```
+
+---
+
+## shell
+
+Open an interactive shell (zsh) with the same sandboxed environment used by agents.
+
+```
+sandcage shell [OPTIONS]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `-p, --path <PATH>` | Path to the project directory (defaults to current directory) |
+| `--home <NAME>` | Named home profile for agent auth/config (default: "default") |
+
+**Examples:**
+
+```sh
+# Interactive shell in the sandbox for current project
+sandcage shell
+
+# Interactive shell for a specific project
+sandcage shell --path /home/user/myproject
+```
+
+---
+
+## build
+
+Build the container images used by sandcage services.
+
+```
+sandcage build [OPTIONS] [SERVICES...]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `-f, --force` | Force rebuild even if images are up to date |
+
+**Positional arguments:** Optionally specify which services to build (e.g. `claude`, `codex`, `gemini`). When omitted, all enabled services are built.
+
+**Examples:**
+
+```sh
+# Build all enabled service images
+sandcage build
+
+# Force rebuild of all images
+sandcage build --force
+
+# Build only the claude image
+sandcage build claude
+
+# Build claude and gemini images
+sandcage build claude gemini
+```
+
+---
+
+## init
+
+Initialize a `.sandcage/` directory with configuration for a project.
+
+```
+sandcage init
+```
+
+Scaffolds a `.sandcage/` directory in the current workspace with `sandcage.yml`, `overlay/`, `local/`, `local/overlay/`, and a `.gitignore` that excludes `local/`.
+
+Refuses to run from linked git worktrees — run it from the main worktree instead.
+
+**Examples:**
+
+```sh
+# Initialize sandcage config in current directory
+sandcage init
+```
+
+---
+
+## setup ssh
+
+Configure SSH key access for containers. Copies selected SSH keys into a Docker volume accessible by sandcage containers.
+
+```
+sandcage setup ssh [OPTIONS]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `--global` | Write to global config (`~/.sandcage/config.toml`) instead of project config |
+| `--yes` | Skip confirmation prompt |
+| `--refresh` | Re-populate the SSH volume using the previously saved selection |
+| `--bind` | Use legacy full bind mount instead of volume copy |
+
+**Examples:**
+
+```sh
+# Interactive SSH key setup for the current project
+sandcage setup ssh
+
+# Non-interactive setup writing to global config
+sandcage setup ssh --global --yes
+
+# Refresh the SSH volume after adding new keys
+sandcage setup ssh --refresh
+```
+
+---
+
+## acp
+
+Manage and run ACP (Agent Control Protocol) agents. This command group requires the `bollard` feature, which is enabled by default.
+
+```
+sandcage acp <SUBCOMMAND>
+```
+
+---
+
+### acp run
+
+Run a service in ACP relay mode, attaching stdin/stdout/stderr for bidirectional communication with the container. Uses the Bollard Docker API directly instead of docker compose. Designed for structured agent orchestration.
+
+```
+sandcage acp run <SERVICE> [OPTIONS] [-- AGENT_ARGS...]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `-p, --path <PATH>` | Path to the project directory (defaults to current directory) |
+
+**Positional arguments:** `<SERVICE>` — the service name to run (e.g. `claude`, `codex`).
+
+**Trailing arguments:** Any arguments after `--` are forwarded directly to the agent binary inside the container.
+
+**Examples:**
+
+```sh
+# Run the claude service in ACP relay mode
+sandcage acp run claude
+
+# Run against a specific project directory
+sandcage acp run claude --path /home/user/myproject
+
+# Forward arguments to the agent
+sandcage acp run claude -- --resume
+```
+
+---
+
+### acp install
+
+Install an agent from the ACP registry. Downloads the agent binary for the current platform and caches it at `~/.sandcage/agents/<id>/<version>/`.
+
+```
+sandcage acp install <AGENT_ID> [OPTIONS]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `--force` | Reinstall even if the agent is already installed |
+
+**Positional arguments:** `<AGENT_ID>` — the identifier of the agent to install from the registry.
+
+**Examples:**
+
+```sh
+# Install an agent from the registry
+sandcage acp install my-agent
+
+# Force reinstall an already-installed agent
+sandcage acp install my-agent --force
+```
+
+---
+
+### acp list
+
+List available agents in the ACP registry. Fetches the agent list from the CDN with a 1-hour local cache.
+
+```
+sandcage acp list [OPTIONS]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `--refresh` | Bypass the local cache and fetch a fresh list from the registry |
+
+**Examples:**
+
+```sh
+# List available agents (uses cache if fresh)
+sandcage acp list
+
+# Force a fresh fetch from the registry
+sandcage acp list --refresh
+```
+
+---
+
+### acp installed
+
+List locally installed ACP agents.
+
+```
+sandcage acp installed
+```
+
+No options.
+
+**Examples:**
+
+```sh
+# Show all locally installed ACP agents
+sandcage acp installed
+```
+
+---
+
+## clean
+
+Remove shadow volumes for the current project. By default runs a dry run showing what would be removed.
+
+```
+sandcage clean [OPTIONS]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `--yes` | Actually delete (default is a dry run) |
+
+**Examples:**
+
+```sh
+# Preview what would be removed
+sandcage clean
+
+# Remove shadow volumes
+sandcage clean --yes
+```
+
+---
+
+## worktree
+
+Manage sandcage-created git worktrees. Worktrees are created under `~/.sandcage/worktrees/`.
+
+---
+
+### worktree list
+
+List all sandcage-managed worktrees.
+
+```
+sandcage worktree list
+```
+
+**Examples:**
+
+```sh
+sandcage worktree list
+```
+
+---
+
+### worktree clean
+
+Remove all sandcage-managed worktrees.
+
+```
+sandcage worktree clean [OPTIONS]
+```
+
+**Options:**
+
+| Flag | Description |
+|------|-------------|
+| `--yes` | Skip confirmation prompt |
+
+**Examples:**
+
+```sh
+# Interactive cleanup
+sandcage worktree clean
+
+# Non-interactive cleanup
+sandcage worktree clean --yes
+```
+
+---
+
+## Common Patterns
+
+**Project path resolution:** All agent commands and `shell` accept `--path` (`-p`) to specify the project directory. When omitted, sandcage resolves the workspace from the current directory.
+
+**Shell override:** The `--shell` flag on agent commands (`claude`, `codex`, `gemini`) drops you into an interactive shell inside the agent's container without launching the agent itself. Useful for debugging the container environment.
+
+**Forwarding arguments to agents:** Agent commands accept trailing arguments (after `--`) that are passed through to the underlying agent binary. This allows setting agent-specific flags without sandcage needing to know about them.
+
+**Available services:** The built-in services are `claude`, `codex`, `gemini`, and `shell`. Each agent service auto-installs its binary on first run if not already present in the container.
diff --git a/docs/configuration.md b/docs/configuration.md
new file mode 100644
index 0000000..7d5587b
--- /dev/null
+++ b/docs/configuration.md
@@ -0,0 +1,577 @@
+# Configuration Reference
+
+Sandcage uses a layered configuration system. Each layer overrides the previous one:
+
+1. **Compiled defaults** — all fields unset
+2. **Global config** (`~/.sandcage/config.toml`) — user-wide preferences (TOML format)
+3. **Project config** (`.sandcage/config.toml`) — per-project settings, checked into version control (TOML format)
+4. **Local config** (`.sandcage/local/config.local.toml`) — personal overrides, gitignored via `.sandcage/.gitignore` (TOML format)
+
+Later layers win. Fields not set in a layer are inherited from the layer below.
+
+---
+
+## Directory Layout
+
+```
+.sandcage/
+├── config.toml           # project config (committed)
+├── overlay/              # files bind-mounted read-only over workspace files in the container
+├── local/                # gitignored via .sandcage/.gitignore
+│   ├── config.local.toml
+│   └── overlay/          # local overlay files (also gitignored)
+└── .gitignore            # contains "local/"
+```
+
+The `.sandcage/` directory itself is invisible inside the container (shadowed by a tmpfs mount).
+
+---
+
+## Config Source Resolution
+
+When sandcage looks for the `.sandcage/` directory, it checks these locations in order:
+
+1. **`SANDCAGE_CONFIG_DIR` env var** — explicit override, used as-is
+2. **`.sandcage/` in the workspace** — the most common case
+3. **Redirect file** — a `sandcage.toml` at the workspace root containing a `redirect` key pointing to the real `.sandcage/` directory
+4. **Main worktree root** — for git worktrees, falls back to the main worktree's `.sandcage/`
+
+The first match wins. `sandcage init` refuses to run from linked worktrees — run it from the main worktree instead.
+
+---
+
+## Fields
+
+### env
+
+Environment variables passed into the container at runtime.
+
+- **Type:** Map of string keys to string values
+- **Valid in:** Global, Project, Local
+- **Behavior:** Passed as `-e KEY=VALUE` flags to `docker compose run`
+
+```toml
+# .sandcage/config.toml
+[env]
+RUST_LOG = "debug"
+DATABASE_URL = "postgres://localhost:5432/dev"
+```
+
+```toml
+# ~/.sandcage/config.toml
+[env]
+EDITOR = "vim"
+```
+
+---
+
+### packages
+
+System packages to install in the container image (apt packages).
+
+- **Type:** List of strings
+- **Valid in:** Global, Project, Local
+
+```toml
+packages = ["ripgrep", "fd-find", "postgresql-client"]
+```
+
+---
+
+### toolchains
+
+Language toolchain managers to enable. When enabled, the corresponding Dockerfile fragment from `images/fragments/` is included during `sandcage build`.
+
+- **Type:** Map of string keys to boolean values
+- **Valid in:** Global, Project, Local
+- **Supported keys:** `uv`, `nvm`, `rust`
+
+```toml
+[toolchains]
+uv = true
+nvm = true
+rust = true
+```
+
+---
+
+### mounts
+
+Additional volume mounts passed to the container. Each entry must contain a `:` separator.
+
+- **Type:** List of strings in Docker mount format (`<source>:<target>[:<options>]`)
+- **Valid in:** Global, Project, Local
+- **Behavior:** Tilde (`~`) in the source path is expanded to the host home directory. Entries without `:` are skipped with a warning.
+
+```toml
+mounts = [
+  "/data/models:/models:ro",
+  "~/.gitconfig:/home/agent/.gitconfig:ro",
+  "/tmp/cache:/cache",
+]
+```
+
+---
+
+### shell
+
+Default shell inside the container.
+
+- **Type:** String
+- **Valid in:** Global, Project, Local
+
+```toml
+shell = "zsh"
+```
+
+---
+
+### justfile
+
+Path to a justfile to make available in the container.
+
+- **Type:** File path (string)
+- **Valid in:** Global, Project, Local
+
+```toml
+justfile = "./project.justfile"
+```
+
+---
+
+### dockerfiles
+
+Custom Dockerfile overrides for image builds. Keyed by image short name. Values can be a path to a Dockerfile or a directory containing one.
+
+- **Type:** Map of string keys to file paths
+- **Valid in:** Global, Project (project overrides require the project to be in `trusted_projects`)
+- **Behavior:** Project-level Dockerfile overrides are ignored unless the project directory is listed in `trusted_projects` in the global config.
+
+```toml
+# .sandcage/config.toml (only applied if project is trusted)
+[dockerfiles]
+sandcage = "./docker/Dockerfile.custom"
+```
+
+```toml
+# ~/.sandcage/config.toml
+[dockerfiles]
+sandcage = "/home/user/my-dockerfiles/sandcage/"
+```
+
+---
+
+### trusted_projects
+
+List of project directories allowed to use Dockerfile overrides.
+
+- **Type:** List of file paths
+- **Valid in:** Global only (a project cannot self-trust)
+- **Behavior:** Read exclusively from `~/.sandcage/config.toml`. Projects with `dockerfiles` set are ignored unless their path (or a parent) appears here.
+
+```toml
+# ~/.sandcage/config.toml
+trusted_projects = [
+  "/home/user/projects/my-trusted-project",
+  "/home/user/work",
+]
+```
+
+---
+
+### container_workspace
+
+Override the workspace path inside the container. Must be an absolute path (starting with `/`). Relative paths are ignored with a warning.
+
+- **Type:** String (absolute path)
+- **Valid in:** Global, Project, Local
+- **Default:** `/workspace/<project-directory-name>` (derived from the host workspace folder name)
+
+```toml
+container_workspace = "/workspace/my-app"
+```
+
+---
+
+### agent_args
+
+Default arguments passed to agents on every invocation. Keyed by service name. These are appended after the service name but before any extra CLI arguments.
+
+- **Type:** Map of service name to list of strings
+- **Valid in:** Global, Project, Local
+- **Behavior:** Only the args for the invoked service are used. When running with `--shell`, agent_args are skipped entirely.
+
+```toml
+# .sandcage/config.toml
+[agent_args]
+claude = ["--dangerously-skip-permissions"]
+codex = ["--full-auto"]
+```
+
+```toml
+# ~/.sandcage/config.toml
+[agent_args]
+claude = ["--dangerously-skip-permissions"]
+```
+
+---
+
+### ssh_mode
+
+Controls how SSH keys are made available inside the container.
+
+- **Type:** String — one of `"volume"`, `"bind"`, or `"none"`
+- **Valid in:** Global, Project, Local
+- **Default:** No SSH mount (equivalent to `"none"`)
+
+| Value    | Behavior |
+|----------|----------|
+| `volume` | Mounts a named Docker volume (`sandcage-ssh`) at `/home/agent/.ssh` (read-only). Populate it with `sandcage setup ssh`. |
+| `bind`   | Bind-mounts `~/.ssh` from the host at `/home/agent/.ssh` (read-only). |
+| `none`   | No SSH directory is mounted. |
+
+```toml
+ssh_mode = "volume"
+```
+
+When using `volume` mode, run `sandcage setup ssh --refresh` after changing keys on the host.
+
+---
+
+### ssh_keys
+
+Declares which SSH keys to copy into the volume when using `sandcage setup ssh`. Each entry specifies a host and identity file.
+
+- **Type:** List of objects with `host` (string) and `identity_file` (string) fields
+- **Valid in:** Global, Project, Local
+
+```toml
+[[ssh_keys]]
+host = "github.com"
+identity_file = "~/.ssh/id_ed25519"
+
+[[ssh_keys]]
+host = "gitea.internal"
+identity_file = "~/.ssh/work_gitea"
+```
+
+---
+
+### services
+
+Override the enabled state of built-in services. Keyed by service name.
+
+- **Type:** Map of service name to object with optional `enabled` (boolean) field
+- **Valid in:** Global, Project, Local
+- **Behavior:** Disabled services cannot be started with `sandcage <service>` and are excluded from generated compose files.
+
+```toml
+[services.gemini]
+enabled = false
+
+[services.codex]
+enabled = false
+```
+
+```toml
+# ~/.sandcage/config.toml
+[services.codex]
+enabled = false
+```
+
+---
+
+### default_services
+
+Controls which services `sandcage build` prepares by default (when no service names are given on the CLI).
+
+- **Type:** List of strings (service names)
+- **Valid in:** Global, Project, Local
+
+```toml
+default_services = ["claude", "shell"]
+```
+
+---
+
+### image
+
+The Docker image name used for building and running containers.
+
+- **Type:** String
+- **Valid in:** Global, Project, Local
+- **Default:** `"sandcage"`
+
+```toml
+# .sandcage/config.toml
+image = "my-custom-sandcage"
+```
+
+```toml
+# ~/.sandcage/config.toml
+image = "my-custom-sandcage"
+```
+
+---
+
+### overlay.enabled
+
+Controls whether overlay mounts are active. When enabled, files in `.sandcage/overlay/` (and `.sandcage/local/overlay/`) are bind-mounted read-only over the corresponding workspace files inside the container.
+
+- **Type:** Boolean
+- **Valid in:** Global, Project, Local
+- **Default:** `true`
+
+```toml
+[overlay]
+enabled = false
+```
+
+Local overlays (`.sandcage/local/overlay/`) take precedence over project overlays (`.sandcage/overlay/`).
+
+---
+
+### shadow
+
+Shadow directories redirect build artifact and dependency directories away from the workspace bind-mount into faster, container-local storage. This prevents large directories like `target/`, `.venv/`, or `node_modules/` from thrashing the host filesystem.
+
+- **Type:** Object with optional `backend` (string) and `dirs` (map) fields
+- **Valid in:** Global, Project, Local
+- **Default backend:** `"volume"` (named Docker volume)
+
+Each entry under `[shadow.dirs]` can override the global backend and set `shared = true` to share the volume across containers for the same project.
+
+| Backend     | Behavior |
+|-------------|----------|
+| `volume`    | Named Docker volume (`sandcage-<project>-<dir-hash>`), persisted across runs |
+| `directory` | Host directory under `~/.sandcage/shadow/`, persisted |
+| `tmpfs`     | In-memory tmpfs mount, lost when the container stops |
+
+```toml
+[shadow]
+backend = "volume"
+
+[shadow.dirs]
+".venv" = {}
+"target" = { backend = "directory" }
+".cargo/registry" = { shared = true }
+"node_modules" = { backend = "tmpfs" }
+```
+
+Use `sandcage clean` to remove shadow volumes for a project.
+
+---
+
+### tools
+
+Tool mode declarations control how specific CLI tools behave inside the container. Each entry under `[tools.<name>]` configures one tool.
+
+- **Type:** Map of tool name to object
+- **Valid in:** Project, Local
+- **Fields:**
+  - `mode` — `"in-cage"` (default), `"spoof"`, or `"host"`
+  - `message` — message printed by a spoof script (only for `mode = "spoof"`)
+  - `allow` — list of glob patterns permitting arguments (only for `mode = "host"`)
+  - `deny` — list of glob patterns blocking arguments (only for `mode = "host"`)
+
+| Mode      | Behavior |
+|-----------|----------|
+| `in-cage` | Tool runs normally inside the container (default) |
+| `spoof`   | Replaced by a script that prints `message` and exits. Prevents agents from running the tool. |
+| `host`    | Forwarded to the host via the forwarding daemon. Requires `trusted_projects`. |
+
+**Allow/deny patterns** use simple `*` wildcard glob matching on the full argument string. Deny patterns are checked first and override allow patterns. If any allow patterns are specified, the command must match at least one.
+
+```toml
+[tools.cargo]
+mode = "spoof"
+message = "Use `just build` to compile this project."
+
+[tools.docker]
+mode = "host"
+allow = ["compose up *", "compose down"]
+deny = ["* prune *", "* rm -f *"]
+
+[tools.uv]
+mode = "in-cage"
+```
+
+---
+
+### tasks
+
+Named operations that can run on the host or inside the container. Host tasks are forwarded via the forwarding daemon and thumper; in-cage tasks run directly inside the container.
+
+- **Type:** Map of task name to object
+- **Valid in:** Project, Local
+- **Fields:**
+  - `where` — `"host"` or `"in-cage"` (where the task executes)
+  - `run` — the command to execute (string, split on whitespace)
+
+Host tasks (`where = "host"`) require the project to be in `trusted_projects`. A Justfile overlay is auto-generated for host tasks, making them available as `just <task-name>` inside the container.
+
+```toml
+[tasks.build]
+where = "host"
+run = "cargo build --release"
+
+[tasks.test]
+where = "host"
+run = "cargo test"
+
+[tasks.lint]
+where = "in-cage"
+run = "clippy"
+```
+
+---
+
+### profiles
+
+Security profiles applied to the container via `--security-opt`. Profile files are loaded from `.sandcage/profiles/`.
+
+- **Type:** Object with optional `apparmor` (string) and `seccomp` (string) fields
+- **Valid in:** Project, Local
+- **Behavior:** Paths are relative to the project root. Missing files are skipped with a warning. Applied on both the bollard and compose backends.
+
+If a seccomp profile contains `SCMP_ACT_NOTIFY`, sandcage detects this as a fermata hook point and logs accordingly.
+
+```toml
+[profiles]
+apparmor = ".sandcage/profiles/apparmor.conf"
+seccomp = ".sandcage/profiles/seccomp.json"
+```
+
+### home
+
+Named home profile for agent auth and configuration. Each profile is a separate directory under `~/.sandcage/homes/`, containing its own agent credentials, settings, and session history.
+
+- **Type:** String (profile name)
+- **Valid in:** Global, Project, Local
+- **Default:** `"default"`
+- **CLI override:** `--home <NAME>` on any agent or shell subcommand
+- **Behavior:** Resolves to `~/.sandcage/homes/<name>/`, which is mounted as `/home/agent` inside the container. The directory is created automatically on first use. CLI flag takes precedence over config.
+
+```toml
+# Use a specific home profile for this project
+home = "work"
+```
+
+This allows switching between multiple agent identities (e.g., personal and work Claude accounts) without re-authenticating:
+
+```sh
+sandcage claude --home personal   # uses ~/.sandcage/homes/personal/
+sandcage claude --home work       # uses ~/.sandcage/homes/work/
+sandcage claude                   # uses ~/.sandcage/homes/default/
+```
+
+**Migration:** If a legacy `~/.sandcage/home/` directory exists from before named profiles were introduced, it is automatically moved to `~/.sandcage/homes/default/` on first run.
+
+---
+
+### Reserved Sections
+
+The following top-level config section is parsed and validated but **not yet active**:
+
+- **`forward`** — port/socket forwarding rules (the forwarding daemon uses internal configuration; this section is for future user-facing forwarding config)
+
+Setting this field will not produce errors, but it has no runtime effect yet.
+
+---
+
+## Services
+
+Sandcage ships with four built-in services, all enabled by default:
+
+| Service  | Description           | Config directory |
+|----------|-----------------------|------------------|
+| `claude` | Claude Code agent     | `.claude`        |
+| `codex`  | Codex agent           | `.codex`         |
+| `gemini` | Gemini CLI agent      | `.gemini`        |
+| `shell`  | Interactive zsh shell | (none)           |
+
+Agent services are installed on first run into the persistent home directory (`~/.sandcage/homes/<profile>/`). They auto-update on subsequent runs.
+
+To disable a service you do not use:
+
+```toml
+[services.codex]
+enabled = false
+
+[services.gemini]
+enabled = false
+```
+
+Disabled services are excluded from Docker compose generation and cannot be invoked.
+
+---
+
+## Examples
+
+### Minimal project config
+
+```toml
+# .sandcage/config.toml
+packages = ["ripgrep"]
+
+[toolchains]
+nvm = true
+```
+
+### Full-featured project config
+
+```toml
+# .sandcage/config.toml
+packages = ["ripgrep", "fd-find", "postgresql-client"]
+mounts = ["/data/models:/models:ro"]
+shell = "zsh"
+
+[env]
+RUST_LOG = "debug"
+NODE_ENV = "development"
+
+[toolchains]
+rust = true
+nvm = true
+
+[agent_args]
+claude = ["--dangerously-skip-permissions"]
+
+[services.gemini]
+enabled = false
+```
+
+### Local overrides (gitignored)
+
+```toml
+# .sandcage/local/config.local.toml
+ssh_mode = "volume"
+mounts = ["~/.aws:/home/agent/.aws:ro"]
+
+[env]
+SECRET_API_KEY = "sk-local-dev-key"
+
+[[ssh_keys]]
+host = "github.com"
+identity_file = "~/.ssh/id_ed25519"
+```
+
+### Global config
+
+```toml
+# ~/.sandcage/config.toml
+shell = "zsh"
+
+[env]
+EDITOR = "vim"
+
+[agent_args]
+claude = ["--dangerously-skip-permissions"]
+
+[services.codex]
+enabled = false
+
+trusted_projects = [
+  "/home/user/work/trusted-project",
+]
+```
diff --git a/docs/docker-image.md b/docs/docker-image.md
new file mode 100644
index 0000000..6a71fd3
--- /dev/null
+++ b/docs/docker-image.md
@@ -0,0 +1,113 @@
+# Docker Image
+
+## Base image contents
+
+The sandcage image is built on `debian:bookworm-slim` and includes:
+
+- **Shell:** zsh (default), bash
+- **VCS:** git, openssh-client
+- **Search:** ripgrep, fd-find
+- **Utilities:** jq, curl, sudo, ca-certificates
+- **Task runner:** just (installed from upstream binary)
+
+npm is not included in the base image. Node.js is available via the nvm toolchain fragment when `nvm = true` is set in config.
+
+uv is not in the base image by default. It is added via the uv toolchain fragment when `uv = true` is set in config.
+
+The image creates an `agent` user (UID 1000) with a home at `/home/agent` and zsh as the default shell. Sudo is disabled (the passwordless sudo line is commented out in the Dockerfile).
+
+Pre-created directories: `/workspace`, `/home/agent/.claude`, `/home/agent/.codex`, `/home/agent/.gemini`.
+
+## How agents are installed
+
+AI coding agents (Claude Code, Codex, Gemini CLI) are **not** baked into the image. They are installed on first run via their respective entrypoint scripts. The agent home directories (`~/.claude`, `~/.codex`, `~/.gemini`) are persisted across runs through volume mounts to `~/.sandcage/` on the host, so installation only happens once.
+
+Each service has its own entrypoint script installed at `/usr/local/bin/sandcage-<service>-entrypoint`.
+
+## Building images
+
+Build the sandcage image with:
+
+```
+sandcage build
+```
+
+### Force rebuild
+
+To bypass the cache and rebuild unconditionally:
+
+```
+sandcage build --force
+```
+
+When `--force` is used, Docker's `--no-cache` flag is also passed to ensure layers are rebuilt from scratch.
+
+### Service filter
+
+Build only images required for specific services:
+
+```
+sandcage build claude shell
+```
+
+Unknown service names produce an error listing available services.
+
+## Cache awareness
+
+Sandcage uses hash-based rebuild detection to avoid unnecessary image builds.
+
+On each build, the SHA-256 hash of the Dockerfile content (bundled or custom) is computed and compared against the stored hash in `~/.sandcage/.build-hashes`. If they match, the build is skipped with an "up to date" message.
+
+After a successful build, the new hash is persisted. The hash file uses a simple `image:hash` line format.
+
+This means:
+
+- Editing the Dockerfile (or switching to/from a custom one) triggers a rebuild automatically.
+- The `--force` flag bypasses hash comparison entirely.
+
+## Custom Dockerfiles
+
+You can override the bundled Dockerfile by specifying a path in configuration.
+
+### Global config (`~/.sandcage/config.toml`)
+
+```toml
+[dockerfiles]
+sandcage = "/path/to/my/Dockerfile"
+```
+
+### Project config (`.sandcage/config.toml`)
+
+```toml
+[dockerfiles]
+sandcage = "./docker/Dockerfile.custom"
+```
+
+The path can point to either:
+
+- A **file** -- used as the Dockerfile with a temporary build context.
+- A **directory** -- used as the full build context (must contain a `Dockerfile`).
+
+### trusted_projects requirement
+
+Project-level Dockerfile overrides are only applied if the project directory is listed in the global `trusted_projects` setting. This prevents untrusted repositories from injecting arbitrary build instructions.
+
+```toml
+# ~/.sandcage/config.toml
+trusted_projects = [
+  "/home/user/projects/my-trusted-repo",
+  "/home/user/work",
+]
+```
+
+A project is considered trusted if its canonical path starts with any entry in `trusted_projects` (prefix matching). If a project specifies `dockerfiles` but is not trusted, the override is silently ignored with a warning.
+
+Global config overrides (`~/.sandcage/config.toml`) are always trusted.
+
+## Cross-platform notes
+
+### UID/GID handling
+
+On **Linux**, sandcage queries the host user's UID and GID via `id -u` / `id -g` and passes them into the container as `SANDCAGE_UID` and `SANDCAGE_GID`. This ensures files created inside the container have correct ownership on bind-mounted host directories.
+
+On **Windows**, UID/GID passthrough is not meaningful. Sandcage hardcodes both to `1000`, matching the `agent` user built into the image. File ownership on Windows bind mounts is handled by Docker Desktop's filesystem sharing layer.
diff --git a/docs/images/tty-decision-tree.svg b/docs/images/tty-decision-tree.svg
new file mode 100644
index 0000000..38fd5f0
--- /dev/null
+++ b/docs/images/tty-decision-tree.svg
@@ -0,0 +1,88 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="700" height="520" viewBox="0 0 700 520">
+  <style>
+    text { font-family: system-ui, -apple-system, sans-serif; }
+    .title { font-size: 16px; font-weight: 600; fill: #1a1a1a; }
+    .label { font-size: 13px; fill: #1a1a1a; }
+    .small { font-size: 11px; fill: #555; }
+    .edge  { font-size: 11px; font-weight: 600; }
+    .yes   { fill: #2d7d46; }
+    .no    { fill: #c0392b; }
+    .arrow { stroke: #666; stroke-width: 1.5; fill: none; marker-end: url(#arrowhead); }
+    .diamond { fill: #fff3cd; stroke: #e0c36a; stroke-width: 1.5; }
+    .result-native  { fill: #d4edda; stroke: #7bc88f; stroke-width: 1.5; rx: 8; }
+    .result-compose { fill: #cce5ff; stroke: #6cb3f5; stroke-width: 1.5; rx: 8; }
+    .platform { fill: #f0f0f0; stroke: #ccc; stroke-width: 1; stroke-dasharray: 4 2; rx: 6; }
+  </style>
+  <defs>
+    <marker id="arrowhead" markerWidth="8" markerHeight="6" refX="8" refY="3" orient="auto">
+      <path d="M0,0 L8,3 L0,6 Z" fill="#666"/>
+    </marker>
+  </defs>
+
+  <text x="350" y="30" text-anchor="middle" class="title">Interactive Mode: Backend Selection</text>
+
+  <!-- Config check -->
+  <rect x="225" y="50" width="250" height="44" class="diamond" rx="6"/>
+  <text x="350" y="69" text-anchor="middle" class="label">compose_backend = "compose"</text>
+  <text x="350" y="84" text-anchor="middle" class="small">in sandcage.toml?</text>
+
+  <!-- Windows-only box -->
+  <rect x="30" y="140" width="340" height="290" class="platform"/>
+  <text x="50" y="160" class="small" font-style="italic">Windows only</text>
+
+  <!-- MSYSTEM check -->
+  <rect x="100" y="175" width="200" height="44" class="diamond" rx="6"/>
+  <text x="200" y="194" text-anchor="middle" class="label">MSYSTEM env var set?</text>
+  <text x="200" y="209" text-anchor="middle" class="small">(Git Bash / MSYS2)</text>
+
+  <!-- Console handle check -->
+  <rect x="100" y="275" width="200" height="44" class="diamond" rx="6"/>
+  <text x="200" y="294" text-anchor="middle" class="label">Console handle valid?</text>
+  <text x="200" y="309" text-anchor="middle" class="small">(GetConsoleMode)</text>
+
+  <!-- Raw mode check -->
+  <rect x="225" y="380" width="250" height="44" class="diamond" rx="6"/>
+  <text x="350" y="399" text-anchor="middle" class="label">Raw mode supported?</text>
+  <text x="350" y="414" text-anchor="middle" class="small">(crossterm probe)</text>
+
+  <!-- Result: Native TTY -->
+  <rect x="195" y="468" width="200" height="38" class="result-native"/>
+  <text x="295" y="491" text-anchor="middle" class="label" font-weight="600">Native TTY</text>
+
+  <!-- Result: Compose fallback -->
+  <rect x="500" y="200" width="170" height="38" class="result-compose"/>
+  <text x="585" y="223" text-anchor="middle" class="label" font-weight="600">Compose fallback</text>
+
+  <!-- Arrows -->
+  <!-- Config → MSYSTEM (No) -->
+  <path d="M350,94 L350,120 L200,120 L200,175" class="arrow"/>
+  <text x="280" y="115" class="edge no">no</text>
+
+  <!-- Config → Compose (Yes) -->
+  <path d="M475,72 L585,72 L585,200" class="arrow"/>
+  <text x="510" y="65" class="edge yes">yes</text>
+
+  <!-- MSYSTEM → Console (No) -->
+  <path d="M200,219 L200,275" class="arrow"/>
+  <text x="210" y="252" class="edge no">no</text>
+
+  <!-- MSYSTEM → Compose (Yes) -->
+  <path d="M300,197 L430,197 L430,219 L500,219" class="arrow"/>
+  <text x="340" y="190" class="edge yes">yes</text>
+
+  <!-- Console → Raw mode (Yes) -->
+  <path d="M200,319 L200,355 L350,355 L350,380" class="arrow"/>
+  <text x="210" y="345" class="edge yes">yes</text>
+
+  <!-- Console → Compose (No) -->
+  <path d="M300,297 L430,297 L430,219 L500,219" class="arrow"/>
+  <text x="340" y="290" class="edge no">no</text>
+
+  <!-- Raw mode → Native (Yes) -->
+  <path d="M295,424 L295,468" class="arrow"/>
+  <text x="275" y="450" class="edge yes">yes</text>
+
+  <!-- Raw mode → Compose (No) -->
+  <path d="M475,402 L585,402 L585,238" class="arrow"/>
+  <text x="510" y="395" class="edge no">no</text>
+</svg>
diff --git a/docs/interactive-mode.md b/docs/interactive-mode.md
new file mode 100644
index 0000000..41d4769
--- /dev/null
+++ b/docs/interactive-mode.md
@@ -0,0 +1,91 @@
+# Interactive Mode
+
+When you run `sandcage shell` or pass `--shell` to an agent command, sandcage opens an
+interactive terminal session inside the container. How that session is wired up depends on
+your terminal — sandcage picks the best available method automatically.
+
+## Two backends
+
+### Native TTY (default)
+
+Sandcage talks directly to the Docker API, puts your terminal into raw mode, and relays
+keystrokes and output between your terminal and the container. This gives you:
+
+- **Terminal resize tracking** — the container shell adjusts when you resize the window
+- **Full TTY fidelity** — colors, cursor movement, and interactive programs (vim, htop, etc.)
+  work as expected
+- **Graceful shutdown** — the container stops cleanly when the session ends
+
+This is the same mechanism `docker run -it` uses under the hood.
+
+### Compose fallback
+
+When native TTY isn't available, sandcage delegates to `docker compose run`, which manages
+the terminal connection itself. You get the same interactive shell — the difference is
+invisible in normal use. The fallback activates automatically; no configuration needed.
+
+## Which backend am I using?
+
+Sandcage prints a diagnostic line to stderr when it makes its choice:
+
+```
+sandcage: tty probe → crossterm raw mode OK — using bollard TTY
+```
+
+or
+
+```
+sandcage: tty probe → MSYS2/MinGW detected (MSYSTEM set) — using compose
+```
+
+These messages appear once at session start and don't affect your shell.
+
+## When does the fallback activate?
+
+![TTY backend decision tree](./images/tty-decision-tree.svg)
+
+The detection runs through these checks in order:
+
+| Check | Triggers fallback when… |
+|---|---|
+| `compose_backend` config | Set to `"compose"` in `sandcage.toml` — forces compose unconditionally |
+| MSYSTEM environment variable (Windows) | Present — indicates Git Bash or MSYS2, whose terminal emulator can't handle raw console mode |
+| Console handle (Windows) | Invalid — stdin is piped or redirected, not a real terminal |
+| Raw mode probe (all platforms) | Fails — terminal doesn't support raw mode |
+
+If none of these trigger, sandcage uses native TTY.
+
+## Exiting the session
+
+In native TTY mode, your keystrokes are relayed directly to the container shell. This means:
+
+- **Ctrl+D** or typing `exit` ends the session (same as any shell)
+- **Ctrl+C** interrupts the current command inside the container — it does *not* kill the
+  session. This matches `docker run -it` behavior.
+
+In compose fallback mode, Ctrl+C ends the session immediately.
+
+## Forcing compose mode
+
+If you run into rendering issues in an unusual terminal, you can force the compose backend
+by adding this to your `sandcage.toml`:
+
+```toml
+compose_backend = "compose"
+```
+
+This bypasses all detection and always uses `docker compose run` for interactive sessions.
+
+## Windows terminal compatibility
+
+| Terminal | Backend used |
+|---|---|
+| Windows Terminal / PowerShell | Native TTY |
+| CMD (Command Prompt) | Native TTY |
+| Git Bash (MinTTY) | Compose fallback |
+| MSYS2 / MinGW shells | Compose fallback |
+| WSL | Native TTY |
+
+On macOS and Linux, native TTY is used in all standard terminals (iTerm2, Terminal.app,
+GNOME Terminal, Alacritty, kitty, etc.). The compose fallback would only activate if stdin
+is piped or the terminal is otherwise non-interactive.
diff --git a/docs/ssh.md b/docs/ssh.md
new file mode 100644
index 0000000..28ad99a
--- /dev/null
+++ b/docs/ssh.md
@@ -0,0 +1,224 @@
+# SSH Key Access
+
+## Overview
+
+Containers launched by sandcage often need SSH access to clone private
+repositories or push code. Since the agent user inside the container does not
+have access to your host SSH keys by default, sandcage provides a setup command
+that copies or mounts the relevant keys into the container environment.
+
+## Modes
+
+Sandcage supports two SSH modes, configured via the `ssh_mode` field:
+
+### Volume mode (recommended)
+
+```
+ssh_mode: volume
+```
+
+A Docker named volume (`sandcage-ssh`) is created and populated with only the
+keys required for your git remotes. The volume is mounted read-only at
+`/home/agent/.ssh` inside the container. A synthesized SSH config is written
+into the volume so the agent can connect to the correct hosts with the correct
+keys.
+
+Advantages:
+
+- Only selected keys are copied (not your entire `~/.ssh` directory).
+- A minimal SSH config is synthesized from your host config.
+- The volume persists across container restarts without re-reading host files.
+- Works identically on Linux, macOS, and Windows (Docker Desktop).
+
+### Bind mode
+
+```
+ssh_mode: bind
+```
+
+Your host `~/.ssh` directory is bind-mounted read-only into the container at
+`/home/agent/.ssh:ro`. This exposes all files in that directory to the
+container.
+
+Advantages:
+
+- Zero setup after initial configuration.
+- Changes to host keys are immediately visible.
+
+Disadvantages:
+
+- Exposes all keys and config, not just the ones needed.
+- On some platforms, file permission translation can cause issues.
+
+### None
+
+```
+ssh_mode: none
+```
+
+No SSH mount is added. Use this if you do not need SSH inside containers or
+handle key injection through other means.
+
+## Setup workflow
+
+Run the interactive setup:
+
+```
+sandcage setup ssh
+```
+
+The command:
+
+1. Scans `~/.ssh/config` (including `Include` directives) for `Host` blocks
+   with `User git`.
+2. Runs `git remote -v` in the current directory to discover SSH remote hosts.
+3. Merges the two sources and displays discovered host/key pairs.
+4. Prompts you to select which keys to copy.
+5. Asks whether to include `known_hosts`.
+6. Populates the `sandcage-ssh` Docker volume with the selected keys and a
+   synthesized SSH config.
+7. Writes the configuration to the appropriate config file.
+
+### Flags
+
+| Flag | Effect |
+|------|--------|
+| `--global` | Write to `~/.sandcage/config.toml` instead of project-local config |
+| `--yes` | Accept all defaults without prompting |
+| `--bind` | Use bind-mount mode instead of volume mode |
+| `--refresh` | Re-populate the volume from existing config (no interactive selection) |
+
+### Examples
+
+```
+# Interactive setup for current project
+sandcage setup ssh
+
+# Non-interactive, global config
+sandcage setup ssh --global --yes
+
+# Legacy bind-mount mode
+sandcage setup ssh --bind
+
+# Refresh volume after adding a new key to ~/.ssh
+sandcage setup ssh --refresh
+```
+
+## Configuration
+
+### Project config (`.sandcage/local/sandcage.local.yml` or `.sandcage/sandcage.yml`)
+
+```yaml
+ssh_mode: volume
+ssh_keys:
+  - host: github.com
+    identity_file: ~/.ssh/id_ed25519
+  - host: gitea
+    identity_file: ~/.ssh/work_gitea
+```
+
+### Global config (`~/.sandcage/config.toml`)
+
+```toml
+ssh_mode = "volume"
+
+[[ssh_keys]]
+host = "github.com"
+identity_file = "~/.ssh/id_ed25519"
+
+[[ssh_keys]]
+host = "gitea"
+identity_file = "~/.ssh/work_gitea"
+```
+
+### Fields
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `ssh_mode` | string | One of `volume`, `bind`, or `none` |
+| `ssh_keys` | array | List of host/key pairs to include in the volume |
+| `ssh_keys[].host` | string | SSH host alias (matches `Host` line in SSH config) |
+| `ssh_keys[].identity_file` | string | Path to the private key (supports `~/` expansion) |
+
+Configuration layers are merged in order: global, project, local. Later layers
+override earlier ones.
+
+## Refreshing keys
+
+After adding or rotating SSH keys on the host, update the container volume:
+
+```
+sandcage setup ssh --refresh
+```
+
+This re-reads the existing `ssh_keys` configuration and the current
+`~/.ssh/config`, then repopulates the `sandcage-ssh` Docker volume with fresh
+copies.
+
+For bind mode, no refresh is needed since the host directory is mounted
+directly.
+
+## Security considerations
+
+- **Volume mode** copies only the selected private keys into a Docker volume.
+  The volume is mounted read-only into containers. Keys are owned by the
+  `agent` user with `600` permissions.
+- **Bind mode** mounts the entire `~/.ssh` directory read-only. The container
+  can read all keys and config present in that directory.
+- Neither mode exposes keys to other containers or Docker networks. Keys exist
+  only on the filesystem inside the running container.
+- The `sandcage-ssh` volume persists on disk until explicitly removed
+  (`docker volume rm sandcage-ssh`). Run `--refresh` or delete the volume when
+  decommissioning keys.
+
+## Troubleshooting
+
+### Volume not found
+
+```
+sandcage: SSH volume not found — run 'sandcage setup ssh --refresh' to populate it
+```
+
+The `sandcage-ssh` volume does not exist or was removed. Re-run:
+
+```
+sandcage setup ssh --refresh
+```
+
+Or, if no config exists yet:
+
+```
+sandcage setup ssh
+```
+
+### Permission denied inside container
+
+If the agent cannot read keys, the volume population step may have failed or
+the image does not have an `agent` user at the expected UID. Verify:
+
+```
+docker run --rm -v sandcage-ssh:/home/agent/.ssh:ro sandcage:latest ls -la /home/agent/.ssh
+```
+
+Private keys should be `600` and owned by `agent:agent`.
+
+### No git SSH hosts found
+
+```
+sandcage: no git SSH hosts found in remotes or ~/.ssh/config
+```
+
+This means:
+
+- The current directory has no SSH git remotes (all remotes use HTTPS).
+- `~/.ssh/config` has no `Host` blocks with `User git`.
+
+Add an SSH remote or configure your SSH config, then re-run setup.
+
+### Migration from legacy bind mount
+
+If your config contains a raw `~/.ssh:/home/agent/.ssh:ro` entry in `mounts`
+without an `ssh_mode` field, sandcage detects this as a legacy configuration
+and offers to migrate to volume mode. Accepting the migration removes the old
+mount entry and writes `ssh_mode: volume` with discovered keys. Declining sets
+`ssh_mode: bind` explicitly to suppress future prompts.
diff --git a/justfile b/justfile
new file mode 100644
index 0000000..0a7a6bd
--- /dev/null
+++ b/justfile
@@ -0,0 +1,22 @@
+# Justfile for Sandcage
+
+# Default: list available recipes.
+default:
+    @just --list
+
+# Run cargo check.
+check:
+    cargo check
+
+# Run cargo build.
+build:
+    cargo build
+
+# Run unit tests.
+test:
+    cargo test --workspace
+
+# Install sandcage and build images.
+install:
+    cargo install --path crates/sandcage
+    sandcage build --force
diff --git a/sandcage_logo.png b/sandcage_logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..a93884123b22df15400779632341fb3a9caf7957
GIT binary patch
literal 401720
zcmY&gRX|j2*B!dMrMtU31*AbrX^`&j?hfhh?(S}op#-Eu8l*es2YtVb|GAmD;+$vK
zT6^t1gexgXA;Euu2LJ#_pQI&J0079huaE#(=(i7FLi#`e7y$4|LR8f)^W>$YnnAvW
z3-(93d|*(}yd8q3=8`rn&SjwgSHJc3=$Zaacssk^{!O~`I8<nTJ0#eqfvt@Wcw>nu
zG$4<pgvo-oV-*(guF6&2SW?pD<2QogL%i6U=zk|C$~PYaxZm*Xz15d;@A5%vjah5a
z_w@Mq81!&+b0h2~(ES>!r>6&cy}7whaoD@Kx$)`gA<~Q8IonANUHW%gu|~wY>;9e#
zFae@i(8klttDcXy_ls|LclYb}nwpwBDf~yOE#F*7Gq=&4&qC^LpbNLo0>fA-Wz<%+
zt}^|Xh9p@0zlYn19>DeYV4r&lZBX>iZitss+TYarEq*=|hkuRr+A4VQ^xjNc-r%ng
zg7m#)(NEm?BKP7XlI=4gPIH2D2Dr%@S5k|;E1&^eW-VaI<GWudWL_eI`S<rfFTwl$
zyE}Bf_IHAcs-N<WXB(opHUT{hD@Sz6*LTM*Tf`Ng^V<bkTe(9q{Dw9(L9rV$Jvor}
zkIzC9cOSr~BNh1s>;g3?MIf<XPwlT+&4ktIjCE@kZ)yG-<o>u03-I@8zDP<+^Zm5&
zDGZ(T4>v>Ihcfq!!7IcpN|7GyU+z)6ncL5B3|`{4Vl58NVETrANE3-8{FdDHG|!*<
zibc%WI&jEH{&>>hEqAH9i87ui=)#^Nc-Z6`<`O>L-92^PN&I_?z^!4+yZJ9n;U5^>
zr1}e~1uYJ)>d?}57Pas?*<uPn&~odKv+QE{2w>iODhz2fD8<T6=u_m~p=Uqde6`{I
z=Bu1{U(LzbjovRtDmMM|CVB0D7wI7+0*-XRH=otq6)d||oCzh&e)3lw$y^kk)ybN=
zK?Qt?u5~UbO0QhHPg~tKUEQpqgFWyl-{ZeQT7^Cp{*k(&LuR3M)7*4Qx~yvtg$n5l
zc)6>BV3zrGkJ(1XaV#tld8e&R1&zg2mjv<mQawn`;QB^yXNS5V^?M|V#%`BKt@MHI
z24UA=ehPC}1eG5Vc;Rt~0;O`C@Hjn+D<+z<i1BXVEnjN1zc2*ZftD%}N!^B8h45>8
zK`f+b&i*Be0#1@}UShd55`6kH%8|=g5gaQdRbQG*S@2;8OBM3bTE8>_r1G_Vj%Y2`
z+P?<f`JVxV!DB}jK{v<87aLEHkB{80-i8X?jo|#-L>Z@86JCh{Q|prOZP`lZvrA2$
z`RJPrCiejJEn&sAyFNR}8v061lz<+mMQ-oF`mX8DUS~;Vr6Kp&Fr@@um*BXF)mDsb
zLw$OvzhUn~`@f5KT*TTH`1HK)9>3gx5)8d@w$>$i2xKjm`}JySnv`|ACbzIeb~DG*
z(M1R@vjZTt&}C3uq3YdGq#vZs_PN?D9(w#$<0|-wx>dQWYpy?NF6wCb&_P7&W?oDz
zE^wc=Qr<V*NdWx@UpFQW6ozq5kwc?PYjSci-9%TCYig=+|3x#l6;$u=`x$vl$jIKn
zesWmBd<K?!4KOrF&hPx)=Kz5!dcF%V*u2lf&nu{Y10N>UoC`Q$UloC;dS9NNoEf$A
zKGG)AQw901DH!}}9PA7R9l)%?*mz5&k@xjpjgex;ldJ_Ydk6@>CaphqAs)-erGO<t
z7LgE24*5mwFpopHN5xuF#wch>1AW!trkBUB1Lx*zs7pdt*TMe=%SJ#I;P1<}Vt^)F
z^S>*7IX6S+Y76yby}8z587|nxiDBK+#t|a)24M6Vbn->kGTwt`jv`^9ML+syx?buA
zUi;EBJ!oGdAN$N$OnSm6?tcUS7<T6hdBlCruFv1#R~6)`Xz*E>_7z}#VLOfuQ6*q@
z$23mOHzF5%sSCj-0`U=+CZ@!Dr3{zsxj=xoIpv?pjQ?jlUV)xh_wI7fd;c$@3z}IQ
zdU`-ttjVLrBXFA_8{pANu9oL_H(%_9K5zmJ+{`##NJ(_4UmTdw8c+`%+jlvp)$R^j
zu>IXGU!OhnvQ3Y@&{lP5hKHaGg>-_cFgV~N)4GMj%j#I>lG3fFLwv1@{yiT3zfdy5
z25F;{z{r5rPocN17<kthY#ocGV?U2^X8v}<d^J=N;hq&1C8=7cFhXV=KO8zev*#U)
zJKyMwe%dGX&#zzSw&ZVra(r@BW*Knwov%e?%*6o)ATT{<M}l-@{A6Fq`OM(>ob>4-
z|Aw&2f47!o(*6eNf`bXBYF#%k^wp!A#g@O_ai!MpmGjd@2}8Hfm)hUlqG|<thFFlr
zP8Bv(3$NvI?(%>x^;r7vIdK&oY*fnK9NEFjPQl%hb`S&`<jg_XF=VsQ>+{3Pt-a`%
zmLM={{~es?{e9cUzxhgS_#b-6ophtB2)G9-P{RAkjn1SHE`ZQQ|9nY}$I{J#9~x9R
zS)6EoOraQYj}sV^ftn@PFK<Kff1J$r12T(K=tp|oAO@?Ah3dOwslp3gL;D@CrQba1
z^9iWmZ+6}DJD>rmMQ@}J-~-Zwx3}nQ8qom_+}}tpWr>Y~0qf-S-uJU2WuTKc6z#dW
ze|*d#i06tO*?I9HzTo;-u<8H#W#=q-L_ilRU0QQy9k8iFw0+19`i}T<@>0hRdeL_h
z7^?aLc-<?!6$guB?2UL<1ZNm5gUd)gS#FW^pw`~Z!gSO4e2Z5!-f)*lnipyOa?guh
zHJ60|K(-i)B!9Ma8(C|%On#E#=GpoNP{t#75LTb3@CcV)A~vx-SE0?mc_c3KFWh1A
zk>QFIs*dx%V5j&8!ot{EVDI(sg8S=3psH7pdCCo(RzCf+RIu{qNDr(cS}r^E`Ievg
zI)>)qb))qB*{AW~%*{Unmr?NDESj;vjh&cte`VZ|NaGk7=@u4@KWLXCw`_dQBsa!O
z3JCq4JPXMW#2MB(m;m;Of=W3;6x)-EJ9SvAxAT1QA3pbt_SaOUkl{RI(zlf>s_RD5
z_y<B!@e$a;yJ72*X3#T(@d4EjZuMMtV%#7)@li!HRS+=^bd`_?@xZPL`{SS)mljcO
z{KzYZ{=7iQo`;flah>oYoW`J}gnNu4o{d<{m+$Z(JM41<ciq8w@ZgJU^EKPTL0gG_
zvDxeg${3rlXmM&*DE{wUK^W;jd*HO*;B(~pe+>Oqs&D*|+5DlR)}O3{&jSYYUY@R3
z#Lqp~(@~aGdRLh@mm%wvPYurltXJHu4|QkgP$N!1;^g*bX5GkNi1Zf0agut`8|M=t
z+wDm8>wM~(xt<-LS!|3tbyABqvbJbjGX)ugM5LFx5Q4F%->ZWl=AUizuuce@gYrt?
z+Ddc%v**MHi4=JwerExyK|>PQdtCW~{})zw!@}g?Z1S3WIJ3zQC7Xft>XSRGmI-Dy
zewVm0Q209!6``&z`q<TeWapfXz@(*`B4mmbFR9*vRIj_v0fgL7C+#FZjb<$UJ*rSW
zKS>W=JKGA!2-}qOo`S^HK}jA+eYywZXEcgV_t42UV&xZQBv7bCd#x@?jQZ(P(==)O
z<hxUdiUaVv8*y;@FU`|`5=#1aw$5kGWJ04=7WYuzOZ7d{e<Y~~k0^Eobo$~0s_A)W
zAp2JjXDw<B@}Xk&%<cX(gqwK0dxcLPRQ8BFQyHjkA2-E;{!GvOC?V_6no|SJ4qG5K
z+$Q0BSP879IAo^})7r>8W<fpZUzZl&@<Ob&R~`CqTnYUbS2-~@X0I(HJNA<+AlKDW
zSrdDD&5iHG-O6dSRF2=%D}$aih(XucQ@p47Ia$mbSr!d^qjb->u=~q&M?WWS;zC7w
zQsKj6o|w#R;}qTD@4XG#nWKWF74KC=51a~ILKn_{Tmp5;c5&TJDIonMZAk=?x(j+t
z=AfqxUA$HjBP@G3KW8^x2W(HP?Eb^9kSqk3cb)^Y{ovJ243v7nfh)R$cMD_*sL}H?
zc5!olAoZ)b9f$0k>(`4Gzvqj_5ANH*T3kI>)PDNJ3p$u0UM(u*2~QV^#T%@26`5dC
zde!k<{>yPY>IDCiX&>0}kTxHd<~zKt>(7IB%-l4+w1I;G8aW1H_r6^ldcaC;5lmqj
zw34}{wmc}OFd(VFP7g}XBNgkx9JcS7kJJ+fUAG6K_Vv(HrkissI3<y1*9UHqg~aQX
z7pJ)N>x&l^FYpaW8HD?ax=Wd(i`v54vIsv9;G(7HKkFO*hX~9;E?LH*4)XI=+7+=t
zn|47MDx{oHQ}PG=1!{M&Zs?!7;OtL}8<7Dppe7vWZ9xjoxk3k`24C_Ud^jGoJ`y2d
zLZYLnSq@p^)jhU}!>Fm9_TjGof^cdZX*lcRNF1WW{A)yx!a<DWI&r{g{CT2GMgrXx
zE-~bq6;M4y`)NYS!f2{31dfxO0hyuQ_7Pcx7{Fa58*mV8cW|*EjkdzfNG?Uc!e(Eq
z9;IOW9yngi|0Pw%g`1FNt&@aV@g`isaq@Z|G>I_C%0-qECccGzzrJSzJgfGmV~Fsw
zReU~=;DqKm^kE$$)*tIxI($!D7c3tMVao^Sy5F@WSoXkVK_H@-e)eut<{-pTo4&tW
zSFLxEnnf1cy=Qf1fw~-b9cM-Hf-6dZgGIbI;-<%uoySpIO~MMj@7=9>e*f6cJyjlP
zhO2*hyQb_kY&~ihqw!S_O@$rIn?$5mS;ZYb?xv0g%p@EJLPz|zfrFR88wmNy=*Cve
z0-n5N(jB4|Tlq*<#@H=WFWT95VHe`dqX;}``UN%LEx0j86OAVluZ7zS=hA~tNPIhV
z3y|vt210gQywH??8eNQe1Q!s#W))J9-*a1v>V09cP6w%J1L_d`Z&kPM*uXqYbJ0mY
z;M-`1s(|Z946EaW!gac&{v{<+7wq6O?=<061Qkx*-ji~{;q=ehZz^DYN>=|^qGy=+
zK{#ZN_@>hU8e6~LrQDUQk~ufI{vD_o+~A4$7eNVQs#9nfgnq8<0Re#813i7ja>FIx
z_qRB+hMn`y6tELzM3I+?e(P#{7r$!kC~Cx7lqAJTM~l}>wXE@5_ObgRIX9!k`4?jR
zYh&}p6mq?}o(@+nQ&-cGR)-L5dYxsS{>2pG@A-71*x-J~CL^g8B4)o!B>dXn35Nau
zqCryCA2fEdNO7IwyDNg(QB8lue?6|F4jREp{`G{$Hi}c>#jl}r=L;6=JO07V4Y{<@
znc{ar0_1Xa7^BQIe%tEz&A@R$IXB&eHFIaN@uSEEU?^-E4s>)y7d$lcnv(hl7`Qz%
zFz=}G<v6cOAO&P|dV1#5B7(wj-uK{<6Mp-9Kd)}b=?{e_STkFqdLrZ_-=JfDkJ8M3
z)ZHKVnXL*-hf3Ic4P{KQU;<})h<AJc=|={8ue`0Wa?U^3^vEw6hhnN7e|$fezUlMj
zHA}9n9SIE_BhY>lRB6@2O39ps$E<E_omE;=50J90FriYv*d2z_j)xdO>Tt;GID10J
zNd5^N9S_-Q;-RNuMD304J%dD>+oDYQ&e@1-PiS*Nxf0&>l_wKw^3kJmT0{NAwWb4s
zcoT6F=hyET;G!hPV7(`ZQpENy0M*}dG5Qg>j%cR8*rgUJfhKGuZirr+#kS(#1Neq^
zg=}Gf28LF=FQ=$n+nR=yy*tMn>os@2Y;K)@s~q4TI@<?Np83^lMk3W-;RTZhsX|V3
z>X!PEs}f;@M%A7X9ldCmUiZcT_g?nwQhh@8hR6*0W;sQ;b~|{vkU?Juhc`1)&#3%7
z`Xff!^tb1`_N`>VV|-I|p|f9en*;S@pV|rYeXwHc>^evryrxk;P_|J{Jge$<gLc_z
z$K+nR1mhJ&2h)X}4*a$!0bAK;`2!H^^@=&Rq4%~>${C94=JhB+P$R!Hc3sOPg@@Jg
zEDJgKyXh%KUZxYFM!ctJ8vUrj!@&eUW*(5A>I?*H9zOcI_iTV(ZeW(*;j-gDxI_@C
zFJ~fC_wNImBPTq=!ES*{BnRm#>L*f#AdIYGwz9v*F|-%+Qm3ujNTw=pmTYB^iO5;G
zxlT^AJ)WYD!+H@8+mo4w?%V$IRc>gN2aw7hG&zmD40Tb%5e)?{a6O>B%RQ&>C|t96
ztj8?4^xpdE{nudOil4|8SeGAvB|2%QCE#7XI$|+4VuDhFudhMrn=q}0o1xKJu85E8
z<K^S3z+{o%Lkl(z;69WsU$GN*fz1O>=@V^iv^U^~xDTO_R82!nn#l5iMP22%)3*xj
zR%<vHieU3L{-GmT5f;i|=@ky_(~s`yCOL|3Kx^@HB=#y{`U0wnsre<VbsNedD|)UA
z&x~&&+jwd8WT99r2L~`v+{5fTMk6hRBTmIvWyBv7KKK3?{NPsTz3;&SnB2@Ul%R2m
zu{(KoHVUe|be+%ohF}I&?AxsW3bXjkbPOc`2B1<LBoh}+LMfCEhb(}3{Cu8jiJ|z3
zeDzU2OX8Ym#^xk^=i2^h<KP$j$7yqtPa81Ku;L$)o;kjaAHXc~(5>EON%QsiW5#XZ
zZ^NtUl<YN%<MqP-rIOJxr+=w6E6H`kMVa%J+=@H}RbcwK2^Nah)@V=jUh7#DD431j
zEm=9eM;3dJ=GIq&tR#FchG%bvTp&s03@?zd8Y-(GbFFvH4p9pxc~|q5dwx#n*rR}N
zkiUP>RM198^Q$;f$biu{<W6UK&8k1cpp!OSv9|6sx}1lFNT<s|{~DX-Jg(EIA=o#s
zEX-OsXAz}+_=D7l>Yv6DB5P{#kP(yu8pEZa>Pq;{d7C^+Au**&ZDRGUIB$<&_f8e;
zgz<q~UR-U2p3KgmT@cSz#4LcUMsmJ-thF+h<Vk{##ScTQ&)roSuC@#Oz3}`4(1N@%
zboz{0u~aohSahD&{KXqGXh*dcbi*g8XVk1~xh%48!^10#FEuDS1>XHq;I|@X6%70O
zP?EQIE?vyp<ERk8fK#}R1VofX#2bUC%^V{!12)kE=`Xm!Q&ivLKwkqL9u|LxLz87f
zjlehAPdSo4W(0r6i<ueVh?#3rK>TIL&Ru$E2w!P?g@5{ao%4vv=vCUTakDms3r-n!
zR^x+7pdQU+(N#{X4D-;6|L%3cR@05jlh7eBKT`@dH82rO3+=5by3jE41iUvYU4T4a
zt_2PW3<|N7?Gb^)B;&4XeA||5hJv29lT~NeykVyO0Gn^h!;W)ItK;>;ki&^UZ80`0
zT4q6bAFMxnIHN3N_H))V?$}lkp7J4`NL_RvZ$q)X>Q8lkj01<wQYX9jx`ajx?N4V~
zg&sIygs|2B+4I%nADPlS+^bph!;`#?`K;#80dG8dNfYU|z$nguvsSZKpcW)t_}oVJ
z+q)z#Y;)d;MxxG?Sre)(Iw-hnpl}Pr=7$lj)Lmq=w4^<-Y!RBER3;SI`*~Xq<6eFP
zQdlUGI`X#gKrfREwQS?M?C57e%Fldn?eNR&JD77QJ3@~3pPKzj5baVAoTl50z8HNy
zfz)K4<xM#59L`mxNb<8AGxQ<^-=Wq#%c+mI*vRA{6LP&wNUUq#rPm(hzxDb;WAnmI
zmD=%E_O$<-{hbZd4$*yP^Y)y(b0chmSrKI5H|H)j_Zb4q-GRt~pLbdm7nkQ~Tg1OW
z4VnigpNu7a6O?;Zfc?cb<asb~R&gZ9@k77hgK{ONJ+k0t1e?4(na24fL4^zth>1MW
zNNd-}=CLRYKB{1Bjab*40>>3Zywu|OzVX$?2rt)>glD+ju$W*npOm15?z`^p#t-=o
z`+HcLLrz~RI$>G`H&L@~_XUh`U#rxh0$wlf?$?flN(T!ckcy2ksAqqoIi1zS`m@0{
zzAlr#D^k83e`9_pc6jIF9@M>Y271&wRcGZ|jSD8k7enVs7cGYm_a>*?{RnKYiJCca
zRQgm;)H-AG(J#WYNZwUtQK=LbGFp{oOH6OS_t{xVl;Tw7q^Eh69&8qn2sOiNUrLL`
z=07is&okhncow68W)^mqnWGCil*<emuGa>D+whtli9#V6hzbzNnFtnraQ<c-n`k@R
z5VG9v(?SuW(~GIgB?^l~2S0cdRA?(Hjm7B7XD(+EFQN7E;x)#Bp`4nB78a7&qT3Ld
zmKO@R(a8n8_|f})7v1bthkTFz_<!w`Fb1#&bhz_!Z+kHCWwLdY(RT8QGOUvZOyt|i
ze&-{29=R9z_mxfrCgRwLpBF!JO1b+x;B!}R*~`E+fSmr>c!#{uFI4(4MOoU)yQc#x
zAb%xC##X8?WD0c)vBOhtW|@*$uh{gvtY`G|V$WngQD;Oot}gNMKRW0`iG{wW-3Xgs
z<_!G*SAugMP(Q2&?R>HSat;oO-Js@XIFa_%T-Y1dx`w=bi|71@!}y3hM1bZC9SZ|T
zZutmoSwrkj-5S0qmB+2Q{pbF{OYX(jU_`JT&qkJLMH(-3g~*@BXlyaQNH|P{bjm(j
z6k<FHOdjA~N(Qd+{YoEFrPlb=Azl>GAxNZ#`w5yqL2$pZTbh4angdwPWi_!1USn+X
z;SMs+4-g4ZvY$}{v9yV*wKX}nGYVz@{0?Ww?zswuadk@JC^2{&z+oJ}*h6OZd&yf_
zdO<difTpkk#}AtcORD!^7cBs>u(@EL?hi<mQtcL(+avl=FK$M#<>rg)HGMr}kl>~(
zp{$U_JXWy(o}OLTHv$JRSmfLc8JieIxCdgDMgdbNF;s_d3eikz*6BCO#YTOv<)1UJ
z<1QZ+bqmCVgbvYeDt%aE67)Tx-u-<0pPv=ZaUgY5&%9>^`3(<jsrR;Esc9zXpm`!D
zIDhu-8^RTDIJW3tJUS2hL!H&-o4_mRy}k0eIyYHf+a3G^v7o6MA1qE#+rEaF*QeCl
zO=nh}TU3IQ!VxI58iY9oABb=68)ZZ-Q(yy~ZJ{Rh)C$Ny{A%nkvbYVfBY*A^AmQLb
zVHhJ^rYU8RZv>Y>(zp|rzL2Iz+?1Vg&H*pLR5E?S{(z?1j@>H-oinYo-^<L#e`Q7s
z{$&VCH*Ru>sr^7mLBdxWx`ewSgap~)u`X#j-n^Veaiq7Lc(jNpvYGY_mMZzn>oFgd
zF{~{_RTsE|bv+i|=1$p@2)1jLe_|C_CpX2zmxfpR{*kYZw-shu*C%#~kYqS~T{zd3
zr^{)z5Tv!=ca^z;Vi_t_er3nHIO}ltS;;)g9=)yDM(61>#+^nyOzx`-80G6btwh{M
z?%mzotHI=q3hJB`SeU;)ymb*iUES-u;;y@Q^=V47_UefvJI6(%a$~Han8|4gA<`c@
zw50K&WLOJfZan!Q3-2DjW1=UzZx+`^@6($Ox{2Nb4l=3`-x(w0zu84kS(C5LXKJWg
zal29}_CbcZ>Q8AD@>q=1bK2qg<<QCnMtO<*Jwl-wmAxfFl!;8RR-}``(X~QQ$}q5d
z8ryRhyaFns1ygB<J@oxlZpd-y`ZT?|pQK9k4zO>P*x2<cJ}wP=dj;|CQFlR}A0=Pg
z!k;P9gV9j#WvwDPwp8|1t$wb*>cDlAj27THa2vC6ph1<9MiB@lTG_-KSe$VMA^;Mb
z?{gW#HspfYbQY(G-a!`spN{Jz%kA4B8p(BF2&4fYgzC&(w6A2<jP$>vi|VN2KF?9K
z9-nE)6V#%>%o!fax>7?hfB7h{Twpk+EWMa~jfD-G%(oiPXQ|175s<F;*?xqv0cG2{
zw{toR=0fJ4-G0FHVa-7E^8taeb4{}HMCxKwuXX)!V=-qv6dFg>Vg7T&;PF{bD}|MF
zgEtmLnR+*J6%f&&oG!FkOJVQr{3I1DUtEZ`7>I)sZGYyjgf{Igjr>4Oi_Ib@DF}0y
zw$PEdbLT9hG_(iz?vI&&skA}g?F%+*_`4&)lZPv_(SHz$5nc16`&45GL-Mp_vx5&6
z@FsM}P&itylmbjM)BscV@}eifWd@GQC4B>7|A2beRJn%Mqu)WeHrEFyZ@Upd55G1*
z&U#%;@)55a7-(t6aBx90&Lh>owGCGcf$9JCf=yyId@c`%IOqxSV{W#WC?UE^p6sVR
zhBLxV0|X#ybXPS&{!^PjSo_|67jqg@Vy;huum4dnGx=Fu73}+~|F7CBoC_;mj`N@F
zP!imtqC<d5XmNhb<hBjyLoYVc3hu&aE{R7yYwu`IRo7|Ee6phGMMMPk1C+lorsga8
zF+Dzi8JhF7xyxfA+n#&s5&)u%b8QZv_3S4B3I|1^ryC%RUEv%gl{)EE>jB5cu$yA_
z!kXsnBygCg5X@e_8pj=z3$9UH*amnz7YA3cgEps?rN^@+Wu9Z-p~V@{v&KxN*|u!h
zJCT9IWp_T!R+xG|k1|JGmy;x<Yw|xwKyY1!wLWs>(l5l&8ur}HYzoN$BE@)!Pna;%
zJZPonWD+STPZ%RfXL$8k?|P~*{6C)Z`CPFPK?}>z0<oO&$;1GWE19erlY2;AUnJSW
z2rKYdysw|XntLd{5U~|9eU$Gf^k@F{@0w_@a~}1t-$Ie}0C&L{O1-EEJ+NUeLZ)TV
zeJg&S09md>uqC({ir{7y$A}2e#{Lcoh}OXZN-fHGFcghRM$9B)g9xO%*_Sah3+`(p
zCjr@-7e!()idr~Gn0|Gt=FADwWrUgY5jFg+;3gyH6)j(zuAUO9ElV~+!AlSWOO!ke
zU`PCy)j|yu#Q+{FF2*GrK7W>I9Xu>Iwt>u8uFK?kbSN}~a7US{k4?nY=~h+DQ&DV=
zD5{Vrm;vvX$NYEsK!(>rKOgzc8T((}1uNXKXFs2>pM#<c;dP8yPjkKE9yMS?b?9hy
zVaLadCh(~>;ORj>Z2;^{^^r6I0qY0&hjMzDre1Nwhw8PX;{MKh2G>L(<^UL*DW-^)
z%T_`~j9Gcz??2^rIfwEm9dy@Y@_rHpO^j9vR5+e|f$$|5cE9jC_;~&uIyrRjhrxPa
z6cmaxF@yrVJ$<Zap^n$;%I)dS@tE<ld<Jii09{+KUB~|2;<tq7C!(V)ucWlcW5nd)
z&wHW;k<B1z$I;ur!Cdq&5A_1~7lrG*C|w&g7;_sz&L0swLX(nLz^;8fFkyaxhs!1u
zcVes_2miR<v0v*!7lX_7t+wwvH+m^Bfj5f#eCIa?gOd`4g+x5UJy>w11xL$nY5?JE
z7~ET`E_X-Mwv!q6!A_a`6so@*L1r;b!pU?_j|p3tz4D{m4?}1q`#*yfm02wLTA5R$
z_Lpr6_I3<3U{op?Rv+I*GUh(@_a4KGd%3uTa#+%^%E;Dv0I9RpdpIgMRwpGZ^OwS;
zeJjXm+<5;5rp-@r%-h09HXt^`#fB7<w28tqpwXczhm6;<dPFEKvr^oYDix|-v&O{o
zKIykT-Y9=wBaD_K4jN6jKzF2pTETbvAAdY(5r2bf^kAClEWze5c($JGqF63;pWwB@
zxcvGdD73AUeXD8*Q3+cov0hDwo$#2c*N1XM7GUp7oY#6@k6?biRSEw804HQM_Dgz2
zFAev6jn*dsL`3Z>lt}vSN66PnpE=q11zSe1xfiLx+Tar+w2eN-u+k~u!VTZyF!JF*
z9Dc836At*3+CT?3#a7bAY>v4P;8o!db&aLEG+hQf^ZXRIy-1=b(&W^y4x6ymgZr`l
zizCO+Q#S~cj$~8CbD5MO9Smj)m)vsnVwrXRlTW&M7FVm0expjUykq;uqszXOMJ2~b
z^XpH)Zgm}=QgHV6KYqat(WUzI5$5vV<N5gM;kBk)R}WOt7P|6Q`FKMAO0D-oeR^$*
zhS`_(r2KVbI%rhpkq_t@TIL$n>Uv0R7mWQ`JXzYJ;E_`TBI=x6X-&fNnuVUVy_j*p
zEG+%vO*V@Wis(nr)6boa9^MjlH{0A~?z$xS1a&=Pnlk~ig^%I5yBA-kWqU7_UEz*o
zy1MjbVB6xL{FEXCZWb9S9v~4TK}(EZ*5;@gE77)oic>|7;CK<_`_?gO2^|p&GTnDS
z;@M!{DvI75TdyKz8%o{K#x}SLOXG1~|E7}0NV-D^72PC&qVQL_aD;ueyXi&PDeV!+
zLH_k{DPAkF;hrZv`LlF*1Pdy4|IZoiw@e?#f!f4qES^$K9@R}_Z=Uqu7x%vJi#>mi
zZ`u#Qo8N@ct$%Ae-6PwI_|#Hxc0=$x^)E2sL|=(5`Fabi)+!A%%k@i`@b^7_;-%Qc
zv-&||U^AeIHQmZh6*pT~RItdTgQGibP&2A)pB&bQpll^xJ^BTqqS3K9=7ds0PCou*
ziSNl+={B-h=r>M%F(3=s(Ck`~9V*+G-aHc4-A>de`@qheR`}E*&Xdr?zc3fpX!q$u
z>j59IBRBS^p9IEnJmmEy0dgb4XysJFgY_@*UV4*Rw8kD5X!Y%5P88v~n1o!Q?z8_$
zDDS?c=3pB8Js#1kCrd$ZhIdPv+tsi61h=e3YWH?wHB2^c#GD&7LOd3%H&x8`?Cwc#
zeT3|NL&l!`Uz^tu0AdEOR}IA<KGfU_*YsfwQ~62p+<64e+}@?Gpx=Ew7sgf6Ip)OG
z#l2Pfu%rz%aT0;{lB0BiDuhKnoPvgjM7fH{QJQ@|W~u+314VxvV$FwNd39{>3L9I-
zto*^`tT|`gX|;NwF5jI8yFEPHRR*p$$apc8FIFKAT=#TCDza=T;+^z%{7b<coagwp
zGv3;40#Y!uE!Xj>_BoG-YHKh0(LW=m_-~UeEm6+QGJLF9zi#|Ri9pUG{hHo5lbOAT
zi&u}%x9zTyZ9r-r54N}fWa*ShO4iaGQ(KE~*V2l?H|NEXLTAmd#Zt-R=4@l70-cK0
zO^-G$j<NUh<d(Pizm91di}FL8e&dv#<53gzRt!X6g*s)5Z4Ee&swVta6I<t?2)e{|
zY$a4@vHT%CB;<SZilZlvY`S%8<NcCN5UH8mq3C|hqs#k?hts=>X25qX&f(T6BpMC{
zoI1<evikI0gR%cNkF__761M5hzC<~7g-$ka2#s8|(3oYNA>vq-n_};hs+(9|>6InF
z_YyGBI(ZyQKRbD>nNTioSoEar)}%uyW{Nk~@@flbgrV<NVv=*T7Cb)V^;tsD`a~x!
zfZ$WOd7=GGE)gJ9oW#DXWfu00zh~npYg^6>#0YJwViXR2RwW{UwHi_dMQDo$ePJl^
z5(3X^pH`(9)zor!sVI@K>w^>ID|lN@@(N#4!sojtGA&*AdMY`mO#?x?Lf-n@@=!Pw
zu{@D_Ml-LLz{2(e|G{pM7oH?oDHg2TGaAicu{eNloRa-`oQ&1z)Z#lIrFszGr678Q
z(0Z)v7o18a>-XiTe-y<Y8Cc^hme4wWy&#Iee)&)gt+#X{BTJc6MkdmHSc4vkE=JTn
z(c@C2CMJcWT^aqI@jHcd{^mxI_c|b?4#Ya~eEJ0(y7GMDT)OMtQloGZc0sK4bHGcK
z@wy#6CMiS}@I3TJG9K8Uuf#jvey%EmyH=Bf{@S&l?_vPgaYc8annp8^K;*|XcU|w#
zG7jl7jMjT&dB%-<^DrV&>OV0VU|5Nrqp@n74PZL^$i@}NJP_xUjG=d16JrS;7Decv
zpXbI+JCx%I<lm$0V#2EN;cuoe9hYc|PmwBo5*ofLpi@&mlsyhPAh)wOA88?bUkro$
zOHk~mwu$4F!@U(-&=tpWYcyORa9VAcj3@!NNknfGZ<n7WKQ(JEI*DzPF`nx2kIBf`
zgvkp9fc9LuMcl>^cL1V8dY%p29>vNBDKrj<(7s$(k)SlTz2ZJRvdWC|A&+BiQ7odI
zK-!bX%w~!8vd+Zoy0l{zj)@+{Zi}R%b;16+teYPn9psN_yC;v^KN<eK$XeK<6+<QX
zP|N!+eq#SiNbc`XRc(9tG<UCm)T?dTU5Oi9GuIEkr|qVHi?h!9^}^*~|1)-5%}utw
z;!DFqu%~v{-6y%Bi+#>kLh{&kg8d$m)cXm)I*^_}jvrIc(yOl9NP5QWg`qzgEg9}T
zY&k`E{SMZHZ?F<O{T>`>;kc-zmcXAEQ_?ZD-Sq1)!qvU%2p*vf(%OC4{yd_^?+DR(
zsiUP1!j%tWZ$;xD)w8E>09juW1fvt!%}uIN`f)8un1daMy5w5LS^y}As5K77MzWvk
zMhB^TnJQxFt75LtAdT%iS#3uRU`juuM;JNLncKy1@3~kC4&rZ2bxgZ|7_}a#VChcL
z;&La|zBB0;ue-;2m7pIzZeBbbI44NnU&-xoGv5&tnXYlnuE0Wk`6xFkP1cAlYBZd%
zvK&80zYg~2{&sE4NxvGVgt)>|7>RhypOlC79vow1tGFy<+Y+~^nY^HTM?s$a8a_zY
zjfO^Sr+b-)f7ww!llg{Nqj0B4K=oN5yBD|VYE-Od1S@7v5%y>}us01uhv$s5Id78z
zuD@iwtl&jsj+1QziNP4vWSUsnJZ#z?YOnWFD@ldwq(r8;F6n)nlk{J$Ur6)`(GmK^
z9GpQnm9yFnT__v<NaqB3(BFkF<Ydtr=oixuk=bbPvBQZayzUJDl07Odw8VhmP!%X~
z92Utqs1-3eSwV(|$|$u{H*i{LES1xGvAew;{JaaXD*+s^?jlG<MCkFf*&~Uw%RsCg
z5?mF5`5?aTXdpw53~hc#ZH(H{ZfOwt%11=cAi+eV7BU_nE_|Nw+wPO`!%NO5yy;kH
zA9%envfTdGjU^inq0K^E&r*#~ok%>g(5&o<$1^{Ct>m+U&5hQ8sWXtT4P?((ScQs8
z<G3pGwIW)Hh(=JEA*8*DUZ9%>nLgKVq~^iJN71mbI>84Ta?rd*G@lu(V&l>MRCBw#
zub>>UXiv6T0IG74A0Vj}nB{H|J_77$a#il*wLq3_)sR)}OMkUFo_~~kDADKCwz({G
z$!-cZ&g!B66i?Im5#qu592$c={iTwA-n@^cG2PvKEEk!)akDrH6Ukr1Qlxr<0R;sz
zd9u9X0Z%RO!3vyP5|W@Na<oRok6Ug_0(tLCkLGX#9-(I3#j+gSwQACd-Y&m_gbPJ)
z!RAIcez0=l4>5wU4+kcceXz?I6a&5GlcY@3-1(fJSVQXWe_S3Ke>+dK{~Fd9(e$-u
zg5gY4eXcG^^Oqnc(284Ixir3)nC>*4P0n+O05+Vp426c#wD*ms;(n<ZA~45-SobQ=
z8KaK{dOp*C5%2UdT!VqXyXkPxp(QL2oPIE$7G^i@j2v{_><FjFrup!LpZVUJX1lmB
zoDu4MVfeiv(f=zHLT?Luy=~#TzHi}LFEM1V%AfoWv_6x;E*fRp@pZ{vqdKg8WXNSm
zFFRM<Fl7w0aKxF(-fH`7(?pD-*A?!8x<M{w<H*{U)MV|+1*_c!Q$%Nc^M?;%Kf-p<
zHJGvHwYT&zt6SUTIEON1k^sZRaGibEbnuZ$8UQ^$HSn~DQMW&vWIXi*hRIr_eO1gt
z3lVEH{#k0Bq^Cy#Od2RL(zRdoM1*=QpNp`d3;4{AV?V=CoRQUkb+UxVS@=3TA(R9B
zD;E5Bop_j+v-f?T*nvH}ReDzSgf&IQlfn|Np5<r{lB=+|@n&}hpgeY;$yziQ$Z94y
z4jfpz;dNsTwR~B_`0eWw4)&o9T9QoEk%6BzCp}N@%1ddD`i?Fz`A&b;w+^W{J+cgA
zCHTc-mz9)UZ1@65CHS>VX|Qp}ns+^mA$`hwmFp|%RBIYXJTEM2P1}>Z`TZlat+7Da
z)7CW`cAy=e!GrZq;xH6K%ywE~QTm)ky=kadjEYo);df_uwfh{8GeRb09ik+Fo7E9-
z@jBdwBY3O<Yo18pB!Oyki*OJ{nLXclJ<Fv8s?2Pjk7W0Rvaj0~*hU^?>h_b{*P)`#
zTIFo|VgmkJ-gQjp=SFj@66DpT`;31>TqDb#fEIh1@EwJ(9o?bfztCR$$|umtL!db%
z9S_-bL7%z5_&2fE`4wLr+0suQU0VKDEw8abr%QPpk5nFU;Ww9A%rLzYjOI-~4?@>a
z9yI^+Ep_Zy>!n_@y#5U#EFoQEVLq^2S9$*zrNFu0*3#=BRe1x<w=b}4iUiOxSkFQh
zTzxRPM|P2cD$dw*FH~CessWVNtVtnPOe6R;f7FS)AgFE*)>_S9w(6R{>P*|DrA*3U
z2Nz#&7`zE1zJC{#cbK6x!CwU#msTIy!Oo)MrcSPVC1R{5?7LLHGD7;3BIGJk><%@0
zFkDb!6O0$!v?Q8mXp8?Dd4%X867@@l1)Z4igE0z3J%&o}aLgX7Z}SW~tF{SZ6=7US
zZ$fSnX_EYMsN5cJNHl%q??!O<ao8Or6%Z*8ke>H(vrfFN4l-medAZ^OJ`hUqikT$Z
zAc7LV=+l-K43QsS<ULciEBZ}goDGIF3=s(!bqbxuPA55>Wc2~bwe)DPFgy4><Kz(Q
zW;F^W5Qcl>s3^k)?=Zoh6;So|7{&_3fQew%F1hXwiL{l3z83V2$blEblK8Fyw`Kw~
zhH8~_yVxS4IbniZc=>HC$KM0?KS50(b~?i@*2C!{XHM8f_upaccd=L^b}kMVRQha+
zSE0O9mL28+6lto?H+Ay|54Lw###6&i(q}ur-hJDv7TbnDn)V^kqrlFI>WX@rP2KAo
ze$kE`&;emTi`wR5&A?j!t}F0U;q>z!Ycsfpf54B|ES>Y`p}U?iBVqkp$Txg?n>oR}
zX$KoYM)9$lIf9d#lr`-~bH=}u);j^0tIL;YYYD09HetQbDR6e__lmgv3zr6=Of4s}
z>s98Mpc-BPs_sz*;<v1?j{M!ZU0*s?G2+c5^J{s^H7{RVM^fPOxkZK*kh$Ns!fNv)
zT5{X+ENiePKXtRIhwM@vXLN(~5x?1XDio3^Zc80)bc$JDl$4~LGCqymfTuM+Pt+Av
zPMSG)f4RpoB6vKmyqq@?KV*6gy~*iDJ|+dmnB?JD-5fc7&=pl6Fbi79`n0YlDjha>
ztkueHwHvsf*2+D6?#P9)%gdhL!-J&nsVKJsvyS_6qE}PAzI0Fjmt^^Z1-WdDjWHOm
zY1AD=@D(sfyMs}MXTz5>TmI7KV~vwDR2L-qj{Dq;r2ShL8pmiWA>5{Fd^;qA)0^4D
z1k<NvCrPS$*gv+O1ZyzB!xz6uByy_n3Q<(J>YM}oL66*9cC1fz-3ktW+rT!fL}R|K
zxoh4&gh#%I{}V3KE}pHhFrzPbKc<8KwM0$54dd?t{ptHlG2X@r_7PX#2U6a3fxVa?
zxr(T|8j3>|FifCGid1?7^%9nGg#a`LGK$>W2ql<<+d)^Y;ID^|#+(*J-{Z*~<l@B?
zW67Q6TdM_(W_z?&+Ek6hIoyjpbgAWTHtmhhd6Tg1Iz#LVnrGSv-uUM0w`WNOnYU<|
zXgylKYoA%ZU+dk6zXf^M&_cOH)nqo~1~z3^s+DcB9%1Rv-7d8cMDI*i3W-Zf?we}B
zStE79R^8jdj{@~ct#HJ8fJk6tYpCogjxPg`Oq*svTlCkF^BnR$Nu@J43qZ9|6|AR9
zziY)%1MaD9Xrk)$^i_K5fi$v19UF;IB&}`M$D-;*Ob-GDdg3;P^JTC!HaTCJ9b|sh
z9w`O&#Hi0(#X&`IWQq)+>+*AA6R6ZS1#ZVBZ*Peto8`ZC=3hYPL>~P)i_82}&h)73
zq9%Xdhct|a^UT>}@K9P|>>hC=yELnS@AENcUI2{E-<OKpx$2|mhv|zYXHN2b$1}9T
z<P3YXKiDQD*!YL&F-KItk&ZQ$HnKjeSBDyvaX`!0AI&{9hg<V8|5C{7`ucOxR;A}l
zjb_Sp{O{x`m@hS7QTyXIY(Iz(w|R<=v&M2@z=w0uuWhwPNZs5mpdirtE8jM>3a-xG
zG~=1?H0GXmPSl*F!+l({xF5m-?<nn=7X4(}sSmbJs&*Zc<nr^50f@(2LaI!820^rr
zGK0Oly7>a?L?@AwPvVC~b02jTH6@)13ez3NuyOq8F?Q4F;yMC(YfQYu&+t}2PzK*+
z!Dj=JNMD_kjTn6D>g&dWY5c?XcyHuOT8!`al_U;7ZxWzplsV;VPcz7zh}E!tt)fZz
z0p2AQ&i9aQGqcd`Hky4yoTvm11i!YkzkJ{`=_P7JVC`ad={rcDr4;pfN_s7Bt{l~l
zD3ibb6p`WF+_KD=Rnup5s)H5}^&J~XZ8KH&2t^e}MbfD*M)#J`i|S5yI^X&N2k!^?
zJcAk!95l<!IGB{$(a-vr4pQ+2H=TPIVUK(XULbpdv5@y(k=V~{dtb9%Vqs73)Py;0
zJG(}H@nVW6UE2$P4}efNJ4zuul3n*;WmCQ#Y{O3Cj{Sffd~ptw9Sb#u_!Svi?j`5C
zbxSCa0aBTVpoO@}`Lj=$93GfNgj|(`OMkM=Q$PwdFm2Y&t`ISZ`fYRSe(f*j`obfp
z2pasfs5=|tC}YTzOO{N|l7{|qN+rhf+`B%uMslI+&TzW?4Msh6B$}C6V?jQaXQHXl
z+#jVoC0c7`6g^LG7!1|>?oY-|Lft*{^;~7HvbcU1?xlVM;m-;1-WgXXX)~pum6lF*
z_{*m1?r{0J2Y(Utq>FiU74K;V;1OXQ>q#t`UkH2>L(wiC?w^pFSU{3$%(|?H#5_WJ
zU_y<yW6joa;W@Do%%s0|-iNuDtXw0Y*xEhkXjD5UGRAe;9@_=q{uGb10tn|k1#xX0
zBAAK}Jgyb_OcdOt?rY2Ic_JjMFN_e(i?ZXvrp`XE%-zVE80edaDp?2C)zt;)ZlW<z
zsxfRG0GSpt@4#Wkrk3Wyavn>jkp3t~X}x)Tv-~b0Z4d~Pr@m<mJ02g1pP9U0RRtQm
zdCKl_JmiaQ>e#=nj6ov?gTT8UJ|d)sadtspj?z4FEMnZrQNMgTV0zB(CG>W&1ZN7B
z?rq~#(~cEC2q<R~TaZ0l6T-L>?%O@j$~`9=C;~)e5Sc(OB5l8r!)6rjug2?CV6mT^
zU9_*Au6NyLJVgbyu>?_eXwo<By?nJ&i(IUK0}2>Yh?06uFY0Xjc6mjA{@)_uEXo8)
zTwOkB?4O09Fn(V>bUN;>zIhyKiRi6i>tT%v)?}VNpweVylW74?j>|6@PE6fZ9^z>^
z_I=}P$2(4SamT{fJN;S{Ggn9VjmCefRsE}m@s0)DpJDHbU8~W+SIo4D<i~QTbH|KV
zv8t(DU@P7?@=qFGKj2Z+nYy_|ZTa2VUHm_CFZBmAy3VVYhVH{0JG4#JRqx?3QITm~
z-;e1yF(ITER1zll1pM}_ZEV4q#1{#k;X7-;c!MuocoE`GdjoCQXAj9c{N~{Fo_ixq
zzMtApXZit)Hw#j3H@6>$Fttu6#uiREd=e64h(KYN$)v+Rw|o$06AhLxww(+I+kX-`
z47(J3-J?L@O<OCbBkV@aiurwfGHIS}K1#TN;AvXv8tP+Z1Cnp9nx304C`PY@W<Jn$
zHp(Gkd%Abkv`%j-g%A6)UDDz3uq4HO19rFd=5$h0S|Zq})!7%-Nx^gBxZ-j5<XER!
z>q7aj2Vp_hwX24_%f4v8QmM&WovDE;4EX^(b`&kQK1jhJ5+iX|h7^G_$Y)g$cckJC
zXZ}%<)d~wQPm@2+ls`^W^hw>XTkfkEDS%esg?<kX|EwHrj10pc;xWd|SJGa#)QcaM
z2-_oDtFn{Sa4dy;A|M(pUhVJmPB*^mFCsJMqtE3FV5?6Z)Y3?3aWcJ$^GX~;@~2a0
zg(XUEKBci$NgA2*kDonL-DwY4J_Fi8$By|bx(OoYNIHjA#zfb+u_KDZWn1SgN;#(9
zbqVgq&e5MqQNY7Za}E$lIA?yDuiB+^#=m|o&U+I^^a9?O^)52<KIkr+VCh(*MGJ)A
zQBgKGb-a}IE=xQ=Q;~{~SUMn{BB=#(X8X3I%Y-};qKX|k6598Z1n~vH=^Z6;{|t2K
zJDhXgkE(0(Z8EpTl8kw2gbPGD^4*X2L#{l7JFamiZC+rrgW=uB6F+0#Q`ZwUW+)i%
z?j}T~)*0Sb*;t%J$u?Dav14&md3FGf=fRh_vIHDW9CB~-Jt)YzVEwS=WO^B1!T*@@
z@)8^uKe0$|c1TG%HnVf`65vP~Ph$b)7&(x0p)h-Kkbb@;69xwN^AJBn^KdQ-*}M-(
z-yHtni;L~&_-oX&cW5TX`49b>swZ<yQ)AXCrEBwhML>U7+AcD3&3+M1kbkZB*gBVW
zY{E=xy`#T`IZ^t!+!{9;q1Y&s>4CGVqu4Q=?<b7jpZG*??NKx&>j4?|bO5YkTBIkD
zrlbkd7?}WYA9Ud+di-eWIX^OEf~YBtLCJR`oWDjt+G?loa+yEtZzE?&xP$ieq}l5C
zA45}2mZGLCVA!WIAFU^N-M-5_2m5VLcDg-eKR9i)=xmB|4~H4$r`R8U7S(6WQWzM%
z8sJko)Q<Y7n`hu>)HMDF4)rxe!i{p4tL4X3OqRx`Y|Jkb8}Jqm{CPqYT!%iCppT-D
zcXqRnzwkdudU|IclNm?b0mj4uh*ac8WGJuuGk<cQ)8SxBw+JxsG^w)F{1q&QD~bqX
zG4mxjjuYmWeZ+(^E6Zj+=LQ4ZR_TH%>_Xo*XP&)IP~UAQf3G+5+frPMpDT2X@CP#@
ztt)H2x<~STZ}5|Y-Hw>vk9JicX&8(qUEX+T^)+>F6=>JA=V-6qnq|ZQ4a*>HsJOG{
z6wK6}Q}d$Oi^3)bPk2I~D8SfxcbM6YQx$hs3m&IHS9(CdRP5z;^*3y8+KO#yyw_xp
z54_w)Rp$Wv8k_qX7PB91>tGa@(ZHl8eu#3`!TRKE&pg+d*liitI_X<SCrrEo@kTF9
z3(V#b1oli$!Tjux`CKk_svLjvqbB<_iJD44s$+EEF%4V}e)KmUcKD*u96%?uiuz(~
zez&aGC_-<PbnGk&X}8>#?}2hHFx4JMsoY==aBj=XV2tmfB}6Vtr;7)DYZLQIS!`>5
zofE91CAh55Ct;al+WOP1iFK&MpuCNWyj>T5d{z{-Z$FLjTO0C4*#WnYTpFX5CmE9T
z>+zk|&(|M6aiQQ|Vp3iWWviWt_l1To77_u!hpak{CwbzMrSYTZrZ`pD<6mQ{CgXH3
z;qmC)7Yij~`4~;r=%!aWGgp>5Cunr^y&{jw;Lc!$im4>NdsN3i9Im(>DmbUcOilKl
zC1)op1_<zwLB-fS{j9_G7=SWjCQD4@_5PrmD$(b8a{5i6tTrpyF}+Lk1nmGV!8Hhu
z>UfE*IrObu<OIGC3-8;^EX_@07yC^p663Jcv|fG@HvcY!*%eJhR<z9=-)knq$RMQT
z*>2OCW#1Ayge6*>f(un+T2k%O6CCD5e~yF8h*9xw|9H@$4xeab{T+H+sal?7(Ogun
zG!fu2ha=h&9$%xUkXeZ>>6GL>=aKQVty4^wIEMTFqf()@@nK7R%Lv+pMG}){&e$Uf
z>@hU9Ij*UV#aP<O2Z|^;&5eN*Jf|hg&qV<AfCzU}-Q(n;WSL4DP2E!+Nev^J9qa=<
zVql4xD>}*j)d4G!dTq^!=rqh_k5V4jIiRfm#f-_woLN0zuqYsu4SdNil~cpXU8e)a
z?}k~v71IJ|C_aHsG)U!3c7G+6p-+)3023@TCwm=-@p(>>@7@xeGLDA{@^nD!Qwvhz
znrtF~RKor!Lv$F-4dpshi<nl~Brr<hI3g|TU`-=}KzVQu&?|@xrBLHjJ1t=VUMdYR
zjZFso{q{cyd}AUf-tg-0ocx&u_l|eDHQ$-PfrHMn1zGg2a)Mj~I1W+FKoDLVK5`ag
z;!W$&SRao+JlQ?6z|_=+_M{CYt8p}nlvj#f+GGp<F4rdP85@4SZIxw%jz2aU5i4dm
zQ-H`-6AaU@fmrDWNu4X$ut~TRbj%HhR>UxENMng@JXGpr(o~t^E=oTqH|fj4l)fFc
z9vDh}4%GY(q*J$(CA@B<){Y7q{X&iEqHN<BQ7aPAw9z0yChjFj3XjA%Gv5=>2JB$s
zW6Gwc4XoQ@+tr1^&=N8-ShWP9dotNbQbQ9d<|k<TtM11rM43sn(eT6TF~=JD8jX*9
zl`HCjMCf+m$I*qdVBlxnyA-kzIuUzG)i4-u+PF%{f3=FpOxp6CY#X>a4-2v&GHQyY
zQLC}avCDQygxpme6)q6W<T&$V@V`lIN(ABB#ujXXp5A_f$9+ZI^CnQ}EPZW@jwTK&
zTWU+2*XruNkT22JHA?xd2eDh8h6SZJC|c*<nhEv|U8hps*2n%cqH(>GX0;*JkFT8A
zua1!a$I&%5*3~Z2*tTukcH=a*)!4R;#x~j{C$`hrI<akAH}Czjf5Gf|X3fG_pRZf;
zLu628K(z3$*4S?L{b88$Vcq{TNe0<p7#qX@yvXQ0r^}K4^k3%`qJCS%1Oef}3wLV*
z{te#Sy;EEam~9GxLf^A*>c^vPn5oO(4S(hct{F`cu5#rgOwZ5fUb2ymM~xbz_E`E=
z{Vj=~H4E`DU}DwawY#64(lMvAfrIEWXtI2#{xbfC!dqegf5pMCJ&A$?nk=#y5v{k4
z8*-V>#>7dY5B|Nc>yiD?v|RtkuDWxE4gW>q*ZA9QYi=)4pFVZopFF9Ly}4je7(>~(
z!AuP7e&~@^bTg$Le=W|Y?wnt$-hPol`?ECPi(3e<M;FH7>cE?^snd}dTFUWa6>oUC
z<*t7tr>5FG+Fqdy=Ls=^k4WJ6CAQYSW)RaD#()x*F`CfjQS?*P<%~HWx=a!!5iLQy
zKdDk$o*n5fl5*XIsOL|sY7c>u3Pba{%Ln#Snupy1w`26OmK;=&6?UrD0}0I8JL~%y
z1U`_X_)pPk*6D_#SJxP?*jN5r<zymm;NX_3>#xGRr9X%2CJY;s(w{Hh<1-CtSQcH>
zJo{uIJx|iYMVgBg)b?e1xrBf&!LxvIr3GAeLI*g5={n@+l*ZGy?6^>u5J>NlnIeWS
z*Y5bc!!98Fe8|Ui*7;4o66b&J5b4_gY=-`<dDG-FZL(FWLjXupQyr4o1GckBvi&#r
zs?Fqk-0!Z(lho3Hf<pr}pL7UKh*!_TtRs4L8DXt)w$w@4Km!&%Zd;>wT)7KW==&Y@
z4Drl_+wqR5aq^b27r>}j&(gACB;fhVz!#Tp5&Rr{G@p!j7(E_ji3!Zl*JNW_f1eUi
z+)r6rvKSQJHe<cgFJ3#%a<)BIcPq15SoN~oeC(XbxpeAUJnl*l2V)kjt{LF|<R=or
z=qflnUEcf;FrWks#haP#asS(U@g+_Ra7{g{i(@qy+C8u>t5hr}i_JZ-ys_s%(+d1|
zI=pjn^#y0Cx29s!5y8}-NhXp=fA4*2c!akx;_4vlSI%X`$GB~bSsnnz?G_}*#$D9`
z_pqzuPpuPMC60EYJs>}IX1zjjqgy&KD0Ykt@AsEBsJKg5&k)wQqAAiS@i&--9WmF#
zeBUZi^etCZeM;*J!9N}dH~{zyFF5#gt$Fo@%tS+h@wIH3@LNyEo&VxvCWN1=$QY^>
zVlj(L8~(LZf;`~mCO|VAviE$}9a0qYDj@Arm<Qk5rKVmYVRRJ_I<uGqb3P=flArLo
zl;1PmT1H8GJ|bFfRlCDf7a`a6=c)W6Bx}-GRD~r&_wP}@&`jREZaPL`rS>pdDHlL^
zH3WRbw$mrt<FBu6q2ADM(IU=y;o+X^!f!kw6i(dgvbFqtcjJq~*>-(|juIUG6G0|O
z<wMn{G7Ghrsjmo0=U>9)^o`&u1Z@nqU0Sy)tjNCGHHx(tT1j7>58oFnJkki8{d+d;
zVO_2*_6-p0a#~l*y`@VDqEJEDPEqyjCtA-~|N98H7bQm<EiBCkNn3-@H3XO_TlgG7
zqH(It!r>x}P+o^;PawOMnghtCZ+p^2hH;)Q&@^;UwSQAmzP)gI_kf0<=Mx80=Rg&^
zO}kf9L)zZZd9Zx;hYLE^y!}@Y%YgM*#b%O8pGtRbII9?aDbD*i;cV{N4Us0|a7vr#
z*QE-+r$S}QbpK-hDlt1J#3~+M4_6q;1eE@!2Zt9I$3&bWxg=1w84=J=;TtXP?#jt=
zrSM?vp-+G13fnSsN7l<uM6g70@^Q)n2P7wC+w&rbyjec9uO``jQPz*$Go}aS;_4>M
z{%<_Pzo7{ZKo<c&^QA3+<U6lFVvY03W=qwW`e!%wk4Xtl*2(wUEOy_#ip5mgEO2bF
zvqR$425kovlX~c`XSfKNn7(%ECOqa9aSmaEj)iH@HsG}TM$bwR8IkgzPY-7Uhch1A
zxvo)cy7h;YolMBk4(Lo8SA%x=v?YXG^n(Xptux&^_Y7U-i<#d)R57ESt-H#=>A1k|
z6wI2zC4uY0ELBp_UG2+2YHnu&US~e#FRBZo$I({6^+&<9xMU<Qaea`05JG~=CMHJL
z-fH~?UgMdLW?nQpj?qpHmrj)MHc%T+dJ>(gjY*B5wFy!dxYtAixu3q56?*1*i{vvF
zgaAxV7!$-#OEsUUJu3{mn;%8rHjF^-_!flV{vV=L_xIfD{fm=d8Gin!M$ua<XCM_`
z<_=*WO|N;J^7k=XfElKapyVYUoAvj=3Jq_H+%B4I07tOYYGN{Tl}t?Ow(YiZByzsG
z?rf)}#+%^;>qYaO2dyPkhIgpMuR8{H>*YXJs(z@nD#N5T+b&YQdHoUvziOf#HeLA0
zBPNoi^G9_U3>54d{da2wr>CiZi9J+9Md@@bY|2FD;6nlDxU{}JVX#-^aV9S_hSs%a
z&c7rf^9I`2K=t+Bs{E!fa`)$I=3$56vdi|X5DQn!SMIEd?iHqQ&z63K5}mRs6oyNe
zScmc~TFB?<Of7yE?QM3Jq^5}_RTe^w{j@BRDej&#?eYwD+Z-|E9b_!UbS*zVS~^pi
zPTeAhaQ?BX*+FJ78Tu2gKRNbEo?=0Dg$v5sCYVT*=%;zP5N69#A<VMuH)cULjriU&
z`a&bY-BRUTTgc*$;<Q!{4&rgQT?&r)@%0|R{<R;iWIfxgUWrB9rduvss8U@2rPEIf
znF{%<?^v$H1B@CIOU`LWQ$MN)HrTkcP#PTCe)}|_OtH^E@R;FpYn!9(PfTs%Fr-72
zb<^5OqXWAs^?vQ0SSVB;+pOA>&luVLSmvNvcsR{cXBftMU}0bL{2ewzO_6WwPM)lh
zK(D`bh}VyZt13^rQM@&<$|WJ+JnjiEXv?5KN|yD{i$)1~u_l2Bw+~MSdaV5RQt_eV
z-Iy!YX}?xFzxzD#(Bpq&I)&^dtE*QWci}-}F}^3P!~WsedYVPokD7jp5?5zaqtrF3
zGE4~M5IVEsj?<6e_Y4&wE`7`Xnr0L8nwTsM6<t`L2@q`rn`)g}(l-|E7as~&=PMEn
zh;cFx5I@U8b6~_ulg!XyS6qV}3eF<BPWjyv^jfj*5~;yT9U7d7N0?-2YD{P>Q>Si_
zatG5J@TY*Z6QByGz|-}@q`D3*U9XkJAbsvVZpa1qEz`X1qwGn-`{!H}!9ejew_~x&
z)*p^czj$=&zrAF;L#4;4Wyv|}U_8XI1S`y)98kV^<Vx|CwxECBCA3YAg#t;f@~GqI
zC3qCaa|lXq=bt1DliFpHxnV+M0>y(KlIOl2MDna-?6jD04IB1Xu#U;tD8uxb7ch=!
z9t4pSNK?|$lb>)C@|X`cK&^#}U8|{IINfEw*(T`!FIV$J5@#HvIDP1sJ)`zIK|HWs
zV+Scfi*?JBs6~K_-2WVvoHG|8#3tVLxy5FwEWN=oM(K)OopaRIMBR0ln_!Z8stH*7
z{h`~yeXztRFeS#=-+Osa+Qew&ZkmUOqCC3l{e3Nj%AQolu2S{onM*HhB*mdFj+W?8
zu}%1yna&ML?ZZA=*?Ay9jkZx|6z>tOev=3c#($pKCD%<KG5#a0F$wI4NPf)3I#IFW
zDg4deHd~1&eGK~-dM5;;QRb^?n1HSCsi$k&@!acyCdnXtg~w&bltfPwP6XRNqb2?>
zVDf3w>eF?KeP`YJ3e~XS@KU4(8f(bB0s{3lino!VR(5I6%Z?`;ftr?-cRPt3C<SB6
z{;`;{d5}NgH`6^zd<DCaSMR*cskoI`uO~mzcAGO^)L6aRJhs}!_}a!ZU46{XcT6)Z
z6GiP%R%5d@aZRF8Y$ntdNr?8nc>(>uK;Xhk<I5fg6?J3ov~ZV%8e7HSeUvYHPVl^6
zMU(_+C;liw8@QS8bb(xD{;;5fa5vNcaE=8_E|cstxWoCUg)2VM!6X<{IHX(p6}J<0
zqO8py#myTIo}mTf{?A8>lC7<e`puB1`gGvL3It<~<VDDlfCGFeK0FaZowl)Ig8FNA
zeAIwCZ)JdvFMezX<~W5e3A6W;R`MW{DB0mJ5%rakVvya>NrEWe;qelBNZ@^&4XF<^
zr5aKnFSDS!A`4&VBk_F{vuFGkv1Vo%Fu+`J3ZsN5mMtZ|<3j05j(DIs!?%oSCK)Y3
zsl=F%wmy~{9wqIa#UF|pCdDbDzGN6o2GQRKFph$D@$>WSG0C6@qA?NB%5mJ>j?Ce!
zG{DTxozM@WH>e?auVgbniCA0bgzm2xxG*$C94PJbf<1g3g2wlUfe*mgLOYo={c{av
zNuB=vmE1C)zZgS+dj*Wz`Q>A!b%f#2FAIEofI&M)?Aq*U%UTd_K3Z}U15~5xO9tq5
z*s{(=f%TU8Hep=V0|&RZjesawo6`YAwd`llWD^Z|?1tC-8BJh+6pfL}mKT=JllDI7
z!z^4mpibIpDkI*dceU#FnIi?SO)&#pymLJrN=|kqJKx=Z=N=pkhCus$o&F@WRdP|-
zFEG)Ts7rG)9*ChVpu}dzIbq}AW|58mJqJ+zza0ELmmob+j{feEr#fOYRs<6SVyo9C
zJH6W&PLFG2S}?7nzlH>yF^JZjs$Um$E{k5i=FxlNt-7HJYaV(SDzk%$H(0q##x-Yf
z?4f@E1}j|{d={#7SW3GIYZ)T6b_m{T(TpIdj<QDfMKnz9zeGm(1%%9WhDqc_w!{<E
zP8&p=9ET>|nr#u){Wrx7n#G`S+mjM*Q_-hE!?<~v-XKM>9aX8lC*8^KR!+t6g(bYO
zONwk|VYep(PBTuhGlzY}mf_h-eS<XzMTcfdI<rV7iriV_L`XmdSfy7|f@FV44;{@#
zq`^xA&F@dnWcpY8iQLl5%{ueWbqtWQzB38^*NxI3DYc)3%rIlN%?sXuP8@$LV=(d-
zh7T6hEPqtXuzc83ezz#Z|7(xVYK!vN>-CmEx@efrt%#<j+Yo)AqNV$!Pw`!M4u#uV
z^Rp<>`U*P;_%D+ixOGtyrDCtkI@9409H@7dHt_Rqp-_0*8Wfsqwu0Nex<3)f7!Fl1
zxwJENP`HW;lwsGBp%VJfeQw=apa*he57Pf;rRr&{R!%F|Zz$;y7ZObhZ7~OAcu|wt
zzc(s(n_UYQ-s@dDOZSQ^#nEMtd%296R^uMmomntEDEQgMk3S$fpp_5g_MH$Bm2~9h
zfzLlo<#(1;DBkI-4gd4;f5=6~T)&7bZ1cRm-~jl&%S50V(SNhQOh*5uU)ejqaATP_
zo<?hFU7*PgLfa42!m}-DqALoDz45JD`=~3jnKsn=yYNxU&8TfqQ9AuxLzK9zJ<aU@
zNLdy2?hlUN!y3LJKzsBe#d+;k@hB=KW|%T2y0w7a#W~%}x9j(*exuiqkNe7T{T&tn
zW7mZZ*7gWvG=9jBy-OV5q-9&w*Pls)<mg*G*hs$w?DxhQBtI;>>@cnP^EBGz91Jr0
zXGms5MAN92XURRnWU)>+)h6xub~7X$RBxGaA*Fhcb<y&9g1jr&OVirmw%*jpQfN_+
zEBKmi8!otLj=b>kx1rt0P0{YVc2M{gmnWw-)mQu_{Wc6>^-O;2H_~kmJqOG!udz-K
zVs*kCOIdoV+J=`re4Pa1PA;+MaE3hVj4)KAK;qnj8`!bkOXMazo-`41e5ZafWx<og
zRK)60F`X1ra$W`EeurW_yM5j3r^A1R^yB{#0>3?l^1kdFkm)_yU~2o80B(gfOjTop
z0*R!w;o5v}>UB^aQk{;_*?<|lmUj_JibGo?^7=Z<A1a3(WNWU@beqlp#)uw(csX!T
z5c2UNQTVHXmO3bJGtJ<r&K!3(FovOmF&?XxM}}uCKHJmDS7BpNCHHPp{x60Yo*Y9b
z@~e`g$w_VYWX4)>i*>k<u9h^py~_(N#zD8L@j5ruN-X`W^c$H&Do6(LKdnSQ#AqLW
zy~XdILncdVPZ+yjRy2-S5s%s(do54xxQQ29;QeYpUs)=t;xMDB18?k!!8f6g#l34*
zAC4sCT9k^s<PCM{tp=So5Bf06TuY|!5&UG;U3MVas!)a&dCy$uflOp|mI^Hdnmc}7
zPuq+~mfpky(|>hSLC6ncwaO1iam@+USbSpB5to!9;;QKGHm{s@a7kAM58lgHf#fi1
zJM8u&1Qyl>XWPv`E1_K=X+c93CsoRtEYl+f`Fk3^y~a7c|BY)}gL^kUeggUMKbEO?
z@EJ^*`I|EK@H+0*8nQRg2I&0m`~4=O`FooEZinHWCO~U+;x$6QW`41esn3DY6Lp-p
zk?(A}s8_d5s1rQv9DL}!`|uHI=(v{m^E3uuAc&03*pGPc=evJs0zQAL2C%1tccB+X
z44C$T4}sI@?^EkntBthgk!5oCD@jTS@HisQx@@^xq=AqrkP{Oq<hi-BysYImdojKf
zJs>m86ZgTINO^U=`aov!h#NUE{ftiS(8WL`2H56aZ>P}OXw16Atp0y~BKyB)2QF{=
zE6LsGq93%KMkmJSyeXZx&;3kj=tJ_KMupqaRi;IcpF8)@Lj3(W;8<_3n+1Bdfp{*2
z{K#{Rz7h<zAeOzwE9l}<p84}E7ZYC#I~>QDcX-V;(2vU*G%{NRW_Le%wUe>zG&5$h
zajEmxReM+pY0H{w^|$}q#q|CohF<FESxB|!kQTEZ!VGs?{)6*qi|O21FK8_Hrcs3W
zUtL#et=pMrzVcXO^F()JsaoZV67h@XbI)Jf&&P{>tudF-=9Bz8+Ld1IcN=r$Pp;V2
z0eN=aNl84^rTo*kJ%KW?fqQ=<6e}JPtF9l!>BU@<c9arTx06L`RA(kjh}B%`i2~Sr
zZ`{<i#UAv3M4asqYAxCbtH+s5Ju7_$HR;o)Pu55P;zr+QnN{}i91@7Yw1fkf@{Ul&
zP~WjEt7TVxe86pO<xT!eW|-K$d1f9nWMmO04og%j`U}xnI!}oglA97+YWtG3COlpJ
zdn8bPo$wkhv~pCVDxC_-U2#MU)m9dh+XZPG3fMs4MVpeBApK&w7GW|7O*K`#d}AQc
z?s)CL(h}suP<J0y1!k$hK`(m9r27JUmU>pW*+z8i@ZvWu5`#&2H>67c<SQU<!lOd{
zK<?RGP{)psKl~e>GT8^2F|IoT;cdPW13O%1x=s}TvW-vc8DL0PMOE?<2jPCut{@gP
zwxF`M?%*I8F#3X;UqV00;UV!HiTfmlVM5Va=$-A1FMQR)<T4iofG06V`f7UX23G>v
zhp4zb@FuGFV>Qo>;Bh5QlN!6Ax}NuOj=jD`QNkHO=V6cAfk}=40954(BHhAB(Yxx%
zfPRHL7zSZ^F-W15*1<-o{=ZS&h%R3I(*y1eVB!&L`VF>T(EI=B_SG;j?Z|j_I2e3G
zLs(nn?=S0VaM6fMD5PvvYRM02NdedlU}?50X_IU$=c$a-q4vlxV>-2Iwcjx3lfmn~
z@wx|Xt(y2Dr>#dfUd)g02d&)(^%DdSm58zF-IM>e>20)AZYLYdPsM*&QEo*{;6?c#
z9(>|F0l1u{tL~~e1?rWZh&M<Ue9WUCmiH*Eun2GBXNKx-h%snPQ(+?<8OC<CY;0zS
zDWxsmml+D^Y%**<mL#%Na%Y#@fB6x3`E(w>@;ywc9CbQBa7x0~iNd2iN88ACx;PNJ
z5TGX&29x3#&P0`AU0+^9EXgcyH-m&xyBO((@+%eHTHJ0FdU`k0{B7#f`aDtVMO0M-
zOUS`4&|uWR-)Pr~R`<)*OeilnNNuH2Kl2qfkE5QB!`;apUqF?R4eSQ4q}u-jm=IIb
zly7ZWz>sKn`ZwGB*4kTmuFbO^TkG%O_Ga1n92VGGTFTD)>l$_bw${%X{2^HY@x0_?
z-(GifWc*)2?~gQ%HWowjN1_;osvGK5%=}7*by0nMiN$?}Rv;C!Uh$UcV+(G+5dfW9
zID;*}2o2D-*csi7P)81|_`y7M06-arq+YtLo(u&)f(Lv^2wmvVbo-k(;MM(&$riqh
zq0Aeca5TYv^y=Y`ugCjLKCwnqxk3!%bs(7h$A!#t0a*`*?(M3SpR>#7bQ(G4(=ROC
z>2W5h)NmAf-4mJ+>+ttIW0b3CfO?a9faBar-!|3rm;xxc+|1oOB=!HOvPkJ+Vf$Bl
zsZO5V!|2XfH(ZM@s06|H@p>Y=5_WEX&%6|37^k3<_OIfPsYOI3^3sk12&07cJ#Cie
zjGx1m&Es4-sI4(1oLHp+{Pc|-c_3ni3u@9=ykWB(URxfCBVE8Z4!_~lg<WmihUUW0
z-Oqs(^;MlplefXH6l&#b&j*~24`Kq8h_l-x>`ij`VKpY_?q1>8iCfgz?B=7as!mXO
zy_VaFS^Mq74y?!=e^+q}G))VP`1mckX&#JECE9J*{ySK`4AZ9a=-PX4V^BqY%tCY^
z8M}sn)N9aL>*bnptBw!aC$aYrSU_x4b6CBxHJr;GhQKT(w|w=2^m%5m59oA<Evg=I
z=_NY%urj`(Q>guC)7Ptya;J2Ps2Ks8vz<nY4;uTE-S?ys9zqCKTW73-6}y7iNP1Ab
z*Pp7*)Ic%RMKjjZ_Pp3Cbws2g?1)&d{}~Wqq$^a@42z{n^d@;66&gnaSrBdhh0`4+
zDkMwnfwj&+ZLlH6^_+E=!rMwbqrm0ItQ?s|E1Zq|89}mtHM5DaDjvcMzD@$CDrq&_
zg;{_@!F}*sY$5WTjrl$I>5g@NVgEGumi#!yjhY3`%u?_#99X}sa8*&cVM---{!zB@
z*kQp~Z9rf7VKB*r#j<8__5kfil#}<4Umiu>NBM?X#P<u%@n6?Kj0!l^X9ch3a-yGI
zD*7N=ft?k@`W+L-<Qv>;Suc0B{EXEp^mF>p!E@}<K`f-?Z`@Mz>GN0_p<5!#s!M8q
zHKqPhF&0-Fg)UmXCdJ6c6luCLNIxM2CBmdnzlQp1WphS^aFvzg_bMZcL&n%IqEO`t
z@5^<pnwt|u)%5r8)wvB->b$0fWhnvdTg)r<Z3Uj7X)iL#CU!AxQLsTAJiKVkj)xro
z365nOufv8G^wrsdZ92@|abX2u6xewhRRDm;fMj=~vJ__oOA*Z0)#PpN`d-fB{r7@P
zk-baLRBk4E%D0XX<_mhrUe8-D$sVLpV_g0sA9^A{**LjU>seVpIR_;Uodz%19g4c5
zt0xF?)ad#YfAxJPZ;_WT9xh8#OetMcO{8+#$VHKB{@8)~;fIAHQ6y5rP@aW>_9dV(
zccC&?BDK(JW*zNbTMCyDEkKnC4|@nvsog{E4&4KAo!}HE{0Q{(Y7`#a5qZnLkA{VY
zKuwU8us-esWtxBWI$L`DaC?4J8#<qNoa3s|L9vYdC<Cz{k?%fgU0P_XL2uj9qaFg`
z9#^pz0AzYPMIcQ2X=F&-JOE#nJ{0W4D7=@Y1Quj7Aa~q+FCw!VhiFFcl8RhN?S9?o
zEi~Iu%2^;-x!7vz1;D)eG5t%AuYlfRIZ#{{P7;fCAjRYl=QT)eIDy^qg3>TUB`RoG
znQ`))0M3no+ib<uiEDh6sTDj)MYaf9*fU&0?fY&F%uJEHF^rv6=4`4OdHFLpV*fVt
zO_4~hcxF(vajd@6Yl?0G>@QuQo<O*wg{M<wm7)ap<ut28+S~rW=7y3jcuc~j(R$bE
zZo>l}WW0MsRE6o^8zd=fVHV<UrfcbbKd?P?E8FMb%FtZJX-$sQ;BeJ17ai2QaXN&z
zUes;vapks{0ilN}wAfKj9yP)QrWqdL<c$q-&L<dMiHQSp5S%6gW`_`oEzTT2G#bch
z>V->vcM#d`6R=$-`cFz~70pjF`<)H33*(Zx4_JHPl9&{Gie!Iac_}!}7Q95-gb3|D
zML~0{GvwNe!}7wdniKRqd{uVCVp=K8m(H`KMX$BuwX-Q8aBZ7cnw*#>*%ZTiSaj8z
z`EfwE!^uuE_C_>uw!?l&coj`awMtqm_#(7lOtxAz`=M>;CI<cTt0}lU;sF(i;iDl?
zQC|AMnbeL8DFIH=Ya$FNsD=gPc?|My&Ga2fouzR@dwB<>Myr(2=I%3CFXw^a2MGRG
z+*|REq^<P!E08+sBvQ>a7r%^wz<|ay8ZgRt-Lr<6PL#kbjUI1Y2p=$WR#afET#4V^
zN%BwXzI*R3?WRN5vmt~${2*sZ-PTSaQ+Nd<)SY_`vpS#%`|^#v$izQ<3xMFXSsT)8
zzil%U5Ick`Qe?;jrH+ueH~0W9^0jO6a@17|<A%G({@LH8>Aq^dc}gJsmBDv919wFk
zYvd=0#Sv--k~+0wm7hhJ6oB!p)y4o1xm0U$uf;Dt8lUE?)_~alI5kVW%Zc-YXc~k6
z6ioPrn)c-Ik_FrJlM<6M$s~F>-2a9!fklxL=3>8lDTq3j!DNYU=Yc~lvUvDg1ucu$
zd+ozf^7C)w@5_b1Hbb}hUOux*c7CW+^wrZb83{IB_C02R+3~|8g$$T3{`OxEKBUih
z5<-(WfVIQHTsp@+z|bMcxBKG;m+?9fcco3_BbULCjOj6D@l7Nd-Y3fL-Co{)BCcr{
zL_1~?b{=lIS)1R+MtlFmcqH@BH3qct1Z=_&j<fZL;yA~WbKXjbS0t|Y&U^v-<=2ep
zu|>^ob_33G%-`^c-9`!_9#2q`(5DWK+r*qlrr!1Vn9mxmYzNR#QqOYW2JkLj<;!rV
zXGA|;?(!>VWD@d{`vO2nl?))iPYyhlb>7(flIt<0jIs#Mau8<)SmepoSogg?x?<3l
z@4hjcORjtqr2&-xRfS>Hw;4LY=EAqe1tbH<Cpfy!0lQu!?}?wUd1{5C@BxzBR=cz3
zO@4Ju68Pl^E&~j3{EcC0jzDBUbsfzRlhctf?xm6AHZEL<%2L#1n5ju)kY61Ulp0c{
zQ`oyS<>BErd`mkwIm>E28>;(wH+7d1a4cl_xv&sxCb@&<-RwDPboZV0m&7T#aG*by
zH{~X8t*O8?w`(D%ClHqV6LiT35)y%#$S_W!d#Z?UlV`80wW0XIOETjmG~cgPsO_AP
zNU|&*GwMhpLkf!Dfrqh1FD0QHC@bHd&<wN3W1a^}NwVW)EMiYJJkU`_k1~Vwg9*%?
zX?QEOsjs~pUVV(SQH8&jZLbvE{Y7IW2h9eCfcy#s!4wr}e%v!h`70OA`W?z4L`CQC
zeWg0C4&Zq9<b$X^AoMbr2iHomjR&}HMmVd7t<Hj80|nPSd^Y%Nl)R%q=&6H<yyo{I
z*a#_l6N-8P=DK4iA^WfC+s`E@GP+-RmV5|u@bCAE+oso?^(ikW#CNp|Pq<3H+1N&V
zfPrtI{ETlL`UNhRWlpko;x+gZ$Z=?7n}bd5ky3v2143SfsAsolB6<FjQKlfJ!{?ma
za_{H(A$O*zYbTND&|}ErE2j)UR}z1=Odtc^Uhup?=?0!?c5TkKuz-gEe-mMQ9~~Rx
zrd3lt^Y3ZBg+F;fzC;;t+)nl)P?8*+goc^}-X(+S*c=3i*WR_cI44DAf88^1JYBvg
z{&1L-uT(Ch$*41D*>YgPtM!S_K6=F!ei!+$kKi6EO3y&goSg|8M`T&XMk&j2b6mzc
z)RX^kCxoCy8+_{OM~~qC5<}#5wXa4=$-Mr;kai23VJ(#@fe%C}1W6tqsnMB#;dGEQ
z#vK4qK-d3Jw>n!Qwg^Cr;6TZbI0pEHjw(`EDmL=gJ=JEMx$>4XuXBlAf)=+jte%kN
z{8g{;4{-wRqWUDT(_7*hRTqOtm{gBv&(Zt37mA2!e9_?!vBJxwyX||6X!Edm_Mi23
zi<>s{0keHq|4(WhfF6$iUL}>~dQkN-wN4|QE!&C34e~3bc-{)PZ-M?uTj9F<IulZE
zXqk{%D2lbF?tr&_QhPkmBllf@mCiT;Z=T<liyS^(prXq5PiMBih`vq6RM+PnOXiea
ztG4jB@mX7f-NK^rok&xPTvCf91Z#$fpq~m-%H-*zoR8&@fRgygfWnBZjSzh&O#D;O
zmfmlIq+XUQA?7=W#UrSTGNr(JE?U8vYUKIDAiWmvci7gkdTN18KZ7}rh#Z}ML&0@Y
z&CZ!GXh!KC)`TON2(e(eFV2)e8L(Kn@SxhV+AZ^u%Trn+S2Tw|Uey=-(rTRahQS;5
zHfTvr7-0+XL)Ch-=wyUu#+gk1HhyQ*y)|Ih(|@Je_ImqH|9O~g_BC{#jCRA4rBsVf
zz0!&1b>9Z-{{`Ep)J$n>yB=j&w2`~1EXxj^_x!3K#BiTpC*qqbmhp1qNukCEm$TR^
z>zc3EcBsh=v9+JKLcE)4(dg)8%C1j!N{?_T`(km)T4V9!`AcCZ?r-f!F{_Vdesag;
z&D2IBrZF7V=S#NJj^9%BNg|44V3L@d)}E3U(G}kBgRc3z;Txf$>TUj{pkO%-cO-M$
zD#M;4`M03|<RAe8&0t1*4!wZfiPZ5fUZj~iS9SMu4U9S{LkunZ4SvagGQuK8b=k6V
zGW$(~(p=2Y4SxSh-i-^t)GnV!s@cfG?hzKW`G#TDxc4V&B=U(o20`@j2|B;hIxOr)
zi`?7D5e=(ndZw90ADNUAr>eKE-Z@vJy<o@HKzi(heFIDpxHcR<iWWL^QOf<%?QMmY
zz@t?)`D&g{W71`)oGRH29DW*I5h?fgZyoMd?r<pt`wH8WQEz@TxWahCM&;kUk;=P^
z^!xcd`Z`azkm9g7tIIRs-v+4@+9ByMkF#0CKmoXGF2Xu_m?YHhCrcxs+_n9OK5^p}
zWA+3?GbgGi!VfZSb~Dl&z!A>Xhgw${vCEfQY-yx!*c#lDlk#;2!T6)J=oV+pfn?#;
z!8N$=k*p}|ZSnhlhD~>x%jvJQ=P~pd!UQMrXk*r6C!@>BY@-)pKI-O!ILG)g)l819
z*GX&Xmsba!m98y!9?@%`DjwD`ubjz1a#GpSWnPU<vismoNFk`AC=#fJ=}O`<tO|*O
zINiM;PGeIJQ$tZ$$N4xt2s?Z0OC_v6qb^UhPDFke&Y|7lnK4~LQVP_sScg2P)aQGT
zI0_>vF>xnn6b!>cF<Il(K#yNbx@*rS?_T!|e)c9`0fU7*)ebCZ%Z}TPw5izd5(VGp
zh3Z&DOv#8Vqzmbs#H5Z+5XVRqi&sD`3gLcYd0R*`n$h0$;I|p)ef0ULUb5YeE`BmA
zwyzvHE)yGDfU<z_WrDL%Pa7y&87L9lYNY{MR)5bmTIR4{u?Z?#pq;ZORmB2O<soTc
z+Tw|k=`MLI<kCOXn6~_qMCl1gWJ4QZYm&2uFQq|+(5APqQQ-+9x1F=p4GWl{+@TXT
zx;8;q!44>W-Xj|JhGBLi-$zyRYMWRrYgwF@U+1=~jVXOMs{K`fXpc!^IA*`-{)a<j
z8=?OU`jsg@reKk3pB^6vzN|J0XaHZaeeF;D=_cAw`a5CJx;pydY~~okZ5>K*I_Wkx
z5-)W(1~V~uoJ^(rc-tgRNZmuIG&p=5nh)E*IYb04FD!=GPZI0)xCMWgyT{M)7?k{3
zO>h@I)?8>3f+p_>hf+X{N0@)Y4Jk8k%8~rD(qi#wRpqUcW;k(W>*x=yCE2aIUr)KW
zp>if#_{~!tR$L3^0SGOIMFbYDXF=l=hFFv#H>OxyDLeIb4uk>Yfjc93RE;hUNlw5!
z@LTa&sQ!D{Er94Pdv7bQ88TtneffIDOKTwc#pA!uoU}|4h#x?9nO#fH#$mANy$V=p
zGV~2XR2C~*z`RV}|8oi!_;0j>Xf!ovCa7igTpzg50}P9ur)}KUP|l=05YsTfcSq4!
zYpLV&+V{;2Lu0B6xZm05Zj}h+o1A<5ZrtrxwI6uooLA{=at#Gd1`n2LkJBrEAMQMX
zUd}4j+O@TW$|Y7jT;uA=1>o0P1mQCPeHt0i%3s5f+9jDK<AC-)F^?3ivc~9(<wl#A
z^3JYQxgM&B;zOeyRa$a8x5QnBUwmA#vI#MY?m$6shFJ?h2yw)az1%?Bj_#T}t^%tx
z)4_0{wdvm}mu?HQ{leX()U;KwAQVi1qTONMx06E>R}MN))j)dVP?Eha9Fw#=Zq#`=
z(+!X+O(~)x73h2gLN9jRyVmkd%mND5&cKa(LB6k}A-F`eyTNo7BRl@<5jIgO`IH<P
zRkX+_rz2^(g@AY>Xn-$J)2b+10jc$7_`m(syLGFfu3WNew{$csEl6lKZ9?dj-00p0
zH7sW2I!pS^>%+YAJ&e_fmGqw(&j`a^kcPAmaLXT!8UZ7A&a!U&tzk6R6@BU!v{X0R
zj@EWHv2akU%op}PP#$n!<4b-=r!^RMQq*t<@=}2fAXl+rBl|Xf-p#^Pf2DkGt)a72
z=z7B|CPQzf%9$>x6@}I%bo3wW?{63y#69(xaM=L3A)}vyqa21|{*uY`r+lN(As5A8
zc$Ar)EWaLjMIwK=9;{rb!t9~VAS?MeRsjsx@QwBo`u>}wT&~|=kAA1&tg=}9)mh?N
zoC(5guhIc~8cW+?ANvuLV@A$qi>St^>#{3Gm)Zg%f@N!OIIV|yAaL~w%)N>DG#E%X
zMEvkpN{0a^9sxo$kSHnOVe0U2kc=5bBeDnkKWfVTu7d1$!gC!?q#S1vej4vMj4&8^
z=W{eCns0*cnUu5hb9l^xFI?83YCXWGI~+MqSVt~stlv8m;LvABmr|Am%+I56|K0d1
zH|C>Pk?}8IT<IY8rtNz#7L5KGB%({Z*fH%Evlbk~R|>*`84?jbv!}M?<ka)1yE?i4
z6i#4j@b}_M%H*DR<{^A;uVDi|ENd30EcsWn=pM7_qrRjA!TaTuhceQ*<5I;-H6cd8
zXz~P>`HSlFO6Au^8}eFgNbZyu?DlF{fb`NoYe;GgHy-9DX0bqzA-NI+n!zM!@Ns9i
zR^US-VMG4x6}a~=l}ONp*++uD<#z7#S}(A&6Z;=+?peWi%3$wjZF1aP{z(5pi~L}+
zclMQ^!KpaHbZ4VID)P<v(|@=H$3$p3j>zfjuv?;+{wxcq#`|}OucL$Q(zPihH(x#?
zw*5PuOth(*^FvQ$n3Nim0?MF&RY#%Q6#5(ZNzX`)x=>=@%s3h(gSh`>_vWgK2}>D7
zOnJ-u+p4|~Sy5Lvpz{}nova%#DNFPy-Eh&93rQ&4whChq#Ez;^!DsE+7jeCNbpb|S
zcKRfKD@3byh~)VvvR08Kf&-WXfx@H`uD-}@#YQy=%&Sh<5f0RVA62WW_j;SU6&+h!
z!G-HuEf};xG7*0@lf5yx48`$Op`ihTur&x&f3^q0+rS>271qwRPNZ%=szDT3(L36;
z0eN3dxG=?qf-Dwc%}(g|g{L7F<U#bHe6LUbA;BqdN_T=SWHgG(tN7<zS^LP`^ro2F
zMkPxT6}O2-LHR$OHZYs$NZ=v^J!qGe`EattyaXUK(%!b$t744UllpKA`TB(?DNfJi
z+a>Rv^-D7a55#MCAcOk%kX3}!Z?9#s{cGq(do9EN{R!yT2|vErR)v)&K4nrgGRra)
zX(7=KPg;3~`*)d&vedcJ$vP#~2Uqaqa<H7CH4YmuYAR3+e^W1?TM$Y3Cxn*u(p{lZ
z{Uo;Dk-*_4C{6fNJk075BU@dr`=iabOl=0AmW%?SX4d+kzC|x5TP4yh8B!HMUCXuu
z)c%377ptqg>ob;SL0MI@ju+}G1Bqp6YE=Uqo(Fy!5w)WY5YQqqId~`CqtZJ;9J?|_
z2^iN3He6G?$@{o$vrew{Ud|l5krM~n*Rn9v*0SspILHP%3NSn>s4OqSZM4U`Fx(T8
z9Hh@6Kh=dsRy7qlB=iiwfoxT4O5?ZOYcDPe@k|$Ty2Z__65;j7mZm<O#+Fao>=^vx
z>~+4Ff3P5BPH)$^M~W3Nzb9DvTf|9i@Dx|BqrzkLiOwnH7I3yxGR1fY3OU9#=K@C=
z2yWxrs=)r*^L-WSHGfNeWoXFbzc}&tOD*8P8U_%OJD7~+5p~ioLr({RQY`oBUmL=4
z)}yYaQ%xE7r5ePT?gGp;Bp4=5KaYn#KNJ&gQT49UPPpRMB;x0XrA=P~yyBgMur&Qk
z;qY{4eNJe>b2N~22Y=YO)01hEyxx8WbyPU47Iw`e-7V1w^oJk7hBd~J$j1<k1{}H&
zHVeQB73^Oclc4ccS3JiW5VR=#`RTN+PX>57_b0perE@{H2J^@G902%#lRyp6PQ})y
zrlQv#VPErD!x->xbmLzY>oCGUVxLWG$!65=Qe7r!|1ds!j)!76K6Cu|J{Y6JGqrb0
ze!LYKouHBp`<Ho}nNUV-yN$8uT_MBuhmblTSh2WSmduhRa*JxL4R>)oGbJ<0bODYJ
zwV<AAnoclG=%UjRXQa&Oi{eTFORRz69h>|^&~yk$zVW5s*^}hxit4fH@N4pQyWXAE
z{Nigzw5{N~sgVC?#o9vsiXCwmpzKY;_tD@b`CeRwxNitY9!mLWcNqzRa|d8y2o{y}
zO6m(_JHKJmdg*jIZ*jFb-K~=<F^u(yi7c`nSXE23`0bI6r!jV}wrfVa$_{sk)O=nT
z)ZkMLjh;@XP!-MV8h0KpU)Pjuzlpq==3D5}PA|@rk2!OvAKN4J1Z4Ch==Dcj9t@%}
zK$1;4<hL$bxYdL%Eic3Q<mmV0-Y&#9WsY7Eudcc5^?(~#!J)QFnpbMQ0g%dZnocTW
zxmmL&kR&i<(2jlLM&cOTrVpbXq6Go4#Fga>t;lZO&yg%Q1zY!<%Kk@-9s*n;{eU99
zfv{WEE$I&^Z)wF1y~2CUfYG;A^v{=N_*3u6>dYcQNZlE2m3J#dXM>`S2)D~9Kdb_U
zeU?%DT+Ms9+Wei&yh~6``r!>d97MeD%e#RIRg;-bN5C4};?Py-x7+ENJoJm-_$-Dx
z0A0L1)PehRz0RV2tBwd!DRCjcPLc6ik)b<yl$cv#E0#k@8OwDeb;A(PPEn6N<v@)_
z&k>ov7AD-ex@1<&tUeR#$olU5U*TQDH`%u#$-vwO*%<=csX)`7R=j;>z!Y^Xk;>p@
z_5}E1O((I={7t(}?s+JG-GDvLKq#p6-UR(;hONP2aPiJ0j<#mlyNIptSV=4%T!DnA
zn55U)VnQ}594-J6^(<oTM3V=kl{kuePcbaE``~6{KEcyQ(&3Y9w9f-iH+UbAx8H3m
z;kWQlC7i&U*vh~)zuHD2`=`C)&3vkn`$k2kWpJI7`$lGHcZ;V(kuC?Zui0Wk=$HGP
zqrgPTa8BmDY`*A+md-?a0Yt_FT&DdQGA{CvHs|3c?%MZhOJVG9sq&33+?OhC5`yKt
zQL>@lH7jC#3oKS}b2HH#r)=W%&kWKcHFKhvuD_9iZ^wiAT+6{mr}1tcV*MP}kPV+R
zVgNE~c56&j(YM552#0!4N#WJX)tOVbYCKEJxRL}si{EbRTTP$hlNpAYpCKQWRbOBR
zYhGi)RY=f_y#l;Yx>O*>QCKaP!@usVuAn1Q7?cBHMFqV*?I;GCDJ(oANL1l-SK(<W
z)X13&2a;V;qNeb=1sp&W$kJg@$Hjrha1>&Tr}j*+M-tKV-UThCKNpn0Qk_8mSqvL8
zm8=0t83)*&5vXj!#S;%vb8edY>+wAEDQFLOwH$^Oqs}I92lY$T?&5{FJ9f3MS7iXi
zHOewXtll{seZ+#iJa@1(2P5br&FtoUK}TgmyodV!i@@rkRnu??Cx;<%H1%{*B2^wF
zAiKgywA-8$Gi9O5tua<cxQtdgM(M-&viNBBl6<cE-+6nzVf(MDQ@K3kCHgqqY08ld
z2W1cm*@a`=Q=UcW1I;F>&aGj&j=GzHn*lH|ZZ5Iso6nj+bcPA-&cn&oPtp{40*7c3
z7|cOy(!56Z%r!~s=T(o4VsFaJhrL7d8s?%kgHX$`;VG0s5e!g(vF6OvUtE#JL-(^i
zEU|wL8=i3Ba+MO;7&E8L{twl4HT9EW<)CS7q`1I(-hYcv!lsFaVd?#>W1>n&7$qG}
znzqfqZ@R)tJP2DnO(hb*Y1uWEhcw@&N$q!|sGBWG%)*_H$P=>Q0mH}oLmFJh=0!OO
zoJNDcb{UhmUUFubyZ=5e>{(Gg96H*`=MAn0kd_uhE4sYUn?9eQrj%!Ah?7p-w4_C1
zcUZf8gCnH>)>b{G*TlME(7!nkj?}YH7Q?hUV3tDSA9I9oK!ce;W3>Mc=%$5X>e_X7
zDF0&Qb45mORaVWMql((6GckZ=SBTiG)k?pNSV>J&rFrm_2USZGZ~~uOg~y%DWeGGz
z*R5(IImd(q2~|6`VWIZ65FD_?z{26`UPRh{<HN6z(`_-`^P*zbTN!B{-_}_bD9#Ds
zeE8XfA?MAe#6vx<CD9#;MaNhhj%BgO`BM^yHE)>=3tsF)!_D_*c`URQJ(_KTdkTpk
z=MGSp3>o&ybN5q24~v0d&Qp1Z!DPxgVnm>Ppz2MS$YZZ$=L~-@rH`E|8qz&sHb7>6
zNb;43b-S`k_ixvo4vIqRQb-h8)?YICnrxGr$@C`qry3DvnoD*Rytie+N@bTsovT@N
zk)S!~a@oK|N2*35=Ge2ntU~_J=sCI5XCFh)op9~0bEKn7|6d!|_O4;CuzwV^^37I_
zD`ndT=#9MX`c0-!zd5gnLNufQkg3^!)RZv&<W_8q*UEz5=3Ktc20*KNeOZ|H`1sp0
zvoS<z1^zJGteclal_%-_9uD-{L-S#{?w8coDeC&1)FatDA~)Qx02(~mxzB%dC`{<Y
zz0tnsE^9q!6%Mvk&%^1Ps!;m&A6!?L7s8NT4hB!&P&up&0fFR&?7%Gz<1hX{j~ovD
zv(AbcbMoI}SF-kjuuq_DQl^*OeGt>s4t5EOh^9Znne;<oOI{c^F`3H&)y?c(?elVb
znL&_Y+}U0Qa>n8HWw*Fy>cXr5ReYZ36D0M&l{)sei~ndN;qONG4Wdv#Ethr5v0n~p
zjkp#k*(e}v%@<9^rFf(8Nr%UjG!*p>hTnM8OqX7d2i<}PV^5pk*RNihyXvupRv#$$
zXjY0OS%>H~l&8D&^keFVtUhMy`iI0K>xEHMoP^P>wLkPs4CUl0w9boJklKm0|MmKa
zVAP}rk*tn3iKR5VM3!|rfnGH(m0B>M8somOwtSN5i+nVEIul%B4PuZp5;!LAxT~^E
z!nc?aSc=-x8IZGa&eU<$gdTxfLLM_iyjXfVE$AV~@ordJ;g(%_DmG2hEL6r9_ZFKP
zhs4yJoT&E#f{X^quWcI9jY4g)%uKzc0Z0{^z7U`xp|Xdki5KU(wTxbP<zTkMUhz5G
zBRsk7ReIE^mLfI=g-0Sgj!jtNlfCJ9$o%VA&$+@O+J;q>Mb&lGXQ5imb@HD?QNL2O
z!)!Fh(})60i<X6?y>6c7R^J~OuhaM)^x^hCA-Un4>_zZ>c8>ezuBx>+k{!BAJ*W3*
z6Eon;U3g|*?t-}|l(0wguaF;7GBF&5zeP!#fJxZe8}R>b0)8Tle@Sn?F7f^aM&lQY
zYn5I_{F5)*7kR!KmQJXx`8&O<rb>EU<K`jy!)T=j`$`flVtHNJhdcbUYHIdleF-iF
zo>UQLO)jh_z-uJ?6tlSjMO2{0v78{2a<l;q;2m)#0+7^VS9v>vsh(0Y4&@#H{RnUx
zyvsq(m*R?$Nx(mdcY!qFX-=_F985ki)Z8%xw!#WX=MhR#*UY<IHI_aF`=FNn9^l{8
zVpRg&R3x${7vvWdruVb&x3&>JlSj`B*X{ZV^yh#(do<$5Y};>0o02#2tZU0lfv9{M
zc`Ks+`A_@S)Dh+j<7HtHXx8Z^luw*x&c!wL|8bi^ApdJ*^uzv<r$=W`kY$V=p4PrU
zlkhI>Z>!7RW>w?GqBGzU+AUH`o&o!SK)7F9TTTh_`m<t4px)s2kbYG-_vCUPkNb<$
zwO1{R!rc3hapH0eFzeyhLFeiV4la9>+od&f`y2f#jq^447j!qXBUtZ+c<UwDDS;P6
z=Wgqo4#E&&Y-O-L7uGE&{PUmldZKZ9K-JeS?{<6COu*M_($g5T1VMI9#%YqFxQ{8p
zK|gkrUgx87&|-VOzuKWoF}!-(c?lX(%PQ?Dl7wHj*P$=FtG9$AA$C((J%kVN*QdQd
zi+tpjX#N1@2e1hcF`eNB$u`&z`*eeRF1fD=4NT5rDn6Sap!cB}nZIVRw;ol9v+soc
zs!o8%Mp~z_z5KB^(vrmRg_eTZ;~UKbI>z^~iVMc&5B1+x{7CnMdemcLH@Vc_YswZY
zB~8S^S5Q=<l_6M!Xb@c-CXg3$>A60d%km{ALFVfIK+u2DK*?c>H1(%7JKQ@GmqzhS
z?14fbY*17R$cjbkd`1&nN$>Ge;CF{>seRG%3Zbxi|4xniy*};?Q-UActhWs%7?bBs
zC%0C<U|=}{hRK>+HA8EP^6_{n8*Q0zk%F;o<IU!<E;FE2%L_#*(o$i4g)g*Tb8~06
z$Lc^}X26kId!vtUP2n-YB1;KW3ei+GDUE%F30uTVo>zqff+;wXI@ef)kzWPs@<OmR
zy3;2St#$-Z?M-NdH<9gZJHlJCSg}bYbti-=(>OOalxsPqROAY)(y??b$@gp$M#Rre
zqH8pK-V0bM!d^GlU?%^DUjczK<$LRTR*$$p86V@lsD?V;EA->GXT@=+!e;a!4xT<j
z!E_;{kHIV>8+2{B<J4N4oouGqavA)JBYUtK5A@#p{VjeSK&}(~R?zHhwbsvZomym|
zOs8wxY6ujF`r~8xwjNYx^Vv@=6t#=ghT$Kc=UHkL*JqAC))sR}1K{Cr``v;aeqD!1
z>!vJQaXJQsB0d+b3;7o;5hUqGcet@sJIo_q&BHMiVd~np*eK8*8G|2k9AD=ec%ICE
z^0lS1^9}}pun^)2&qdeofbRzsdEfVEKCZu5tYh-s!EeHD7+B*A51DV~&78g@_+a-P
zE&3BUTO!b3r@90KEKY)kB>$A^GolS@om&Zh05BW!erR_v{~7D77dyhxX6=S0hFwyw
z9SzNz?K8~rH@300Rr~K{+@jbFQ1Ocyq(1uWN0X<W90McXLS`gQk}m$i4-^1Jied5L
zNnYfwU4WOUoI0KS=OnsWB6D&5@{(sa&=+d^$_pmP<OQ~FzcbBr^XO_t$@0YSpFk=3
z5Al4>l+}GTv5J7oE#E!Lt}dXn=b{Xk?w<izDvtua=_*ug46&JFS3+?MMS~)yx(+!z
z{RJe1|Db{P`h%O_J?JT8Wi?b=^?imaMG#rG#P@Vpv(B|7wowfSPnIi~SBjLk>As0m
zbW=Xyj$w_tNXlRzZ6>Fi*JQ4^+44F3)c+umrUNfY$m;oIIlMLkr{6|##64M@QcONW
z5Q^oa$@6biL-%XZ#WOTE51%t_Jl}9Q?k1olS)!D2o)n{eE`B5MbZTQL#wFgsmrQ|D
z32q0|2t#1QJHPZcrhl%;ISXU1#8<vVRi|e~d=fs2EP0Extt@9;O7<$})1q5^R9SCk
zec;zKcv(bTryWtDX0N!{mO!3g)uNlsg4!2-xv;f_6_NdjDg_`<V%K_zii9~tiY-m=
zGtOwV=*djBZ*L*U>1!cUKC5zUhG_rBx6^~CcL?xbBH261j&MdU=iB=PSXC|zRZ=(z
z2$`{<2_*KV(*-*mDT8aGQHB@9vCki8isik#f&oJ(Hiyfcjf+lyByL)rOtQxg?n^c4
z{(zE5El()aJ6&XXb{6yw2jJ7c&`;OfT>drA6vGD<6~LwCi(+G(9G6t!XilpBM+&OF
zV@MVEoc13^IsoLSJa1tt+kJ?+RrF6pE7F9GZhoQ&vA<X>vg~HnOMqak&n7ki0XbqE
z415t=*YtA6QL~nVJL!mx=3Y>_LXW+o74d`N+uRvJEI`jusymsE#T%Dfxl-ytf;a@T
zZF$k4AXFW$Ei!Rp{FC)TSGHqJnR=jQr;v7hj-?{%5p(e7aWe{pK}Onv%mWfOJA^YK
z4LSLL0JcC$zx_Z`JnMOZ{lo7HJhLDL<coTE!U1aMRN$sCHf(!GDJGVqnJ&`X2X(9}
z*6cM}A;-VYbE$7*!h26ifzM_29)zn^o;09Lz;k5{Q|n>st>^(2?NQm(Q&9CJjj55H
zK!*`b^k24*7%5FLtP<Z}k-em~!&U-p`~++Tz{bz9{Oe%JKoy+E(%l#_Fe_B1apk%!
zm4jo(g0E5n1~(Pwg?O(PS?K`)F_*+x+cw|F=c8>yw>89I^>r7^87Gd=1bq!QU6nX1
z-1E_kLSHxZ($L-^9^-OT_|UzZN}-=Fy9Q}l6FuSzD5#;iu8`@ffomNgaxRaa%d_}?
zN!gk*Bi4gTvIa$o32%uk{SJ|)9-~I7#}Cx*7lkO0o`y6T$$0K^$i=?9po|MQxa9E>
z)E$j2;~Aym%oDOK-%<~jXzM8=g;39eJgT35i$NvL=${vcSnbjYB|!wI-CZSL^h^&p
zPV>o3n1&PA?|NkjSDB=`$<Pqb%J0Sc>rjxh3WxHp_gEL_{Hbbtb!z(bhIp3k1HocE
z3G0qvZ@kuYJin<El`CyJ)oUJIOTul^*7z#$tC8G4#DIH7cmxctn@SHY-h-q}f+N#k
zZMMW43in-fXnO)|{3862$it1l5a-hT%?S86Dgh$QxZb(fkZ`Yv0lN&73kq;E`T0!j
z?TJf1K!W^B?^pZGZlrEOly1o-B}lMPl%4pM>+1NrfQ;^WSjn1If3m_UlCuEO=8~ON
z&>!_Coa*;zoEl*Wo;Pien;EJmq2v8)NQl$Vr~0yIf1kxv<Z<M#G4o7d{pa}_y`VH4
zYwZ%w@NtOyQMgTZkNN6mLNqdRJvYr_kbY6awH_yB&zw7j*N2DR^W-_O{_9_SwFN}j
zOxFyV=}YwLqnQT0uGXGc?bz9npmF=m1yn2zz03PX=eG)dR{fthR(6`ejbDN70kHA=
z2>%Tf-&Z~(iJ0g1j}v<6ftkgRpJlyP?%RXdQ*kZ*4P5zz_Bi%I0|AB9&h{ehN;&oW
zmCLeW{f9;uWnOW7UL1>@xIu%|f~@npEcU@n`}YD=0SF0N@YBSM!ev?BU))o~cfN(i
zpTaT3J^{Xq$2zQ;hfu7%ld+AwSl6iUG<r5pr35I3$=9vIKOu7WWjhs`qlD{mSLAe0
ze9sE=7@jNjjyA8*_ri-u*wg|q5X6Lq>QX%a<os5xVCy^JP#9tPS}MFyz|`|-6wg17
zbC&On<`iJ=1}X#AaP)W*9zM|zTa`R!`!=<DHU*K_Jz4edad;Y@God*8dQTE<8f@eU
zV6s0|el(_hPZHmIBl8d_ILp}2>&l!`u2Mln-ZO3ddGjSbpCfqIDb88vX^nTh|LPaH
zc9geUEKyz9uh({-2h0pW^~z<acQ)y;%{UH17FIxE8EMNWeS^x(Q(jePbg{Vi;zKkS
z)$d-q(o(Lq{gEc{eYg>9Y<v^80$}6k2>%O{E-w$OF69W?Z>`SuWO2_Hwi!!{BI45|
zOJWlcaSk-$L+{s0J$#M4?u=Wz2j0*aH^;7^A?UD;A(;}Ei%;5eL2<3<F!`)WsC0<K
zn(4XOG-Cq3Qi9{a9SiZpQ5e*Vl!C_Y0ZgC0>ZT2e^t^V#SXbeWKjHEy&^D<N>7#aI
zomB+r4Z4V%WL*}tnGod4S?HhEmY6%+v2>ZuG(x-0y5wb@Z$Q*X=csNvl(s<R%8KXP
zAumRG6t_Gh^ouxWzFGWiF#icRUnCUO<+UZualMa7I5WYu7Vtd>G}lMTiOzFlay?C`
z?{%Soi(xy?rqYaDnguVzMJpxzE><++as9GtB_#fBuFRG^PR*aQj~0Yxc!Z9EqX6Qp
z1zw8^Pc_acB(a8EPz<>fCQ$x!%(1@WNARK?f~`tx$6sH)4b<z&VMY&6$To8rd?a$e
zfDpA#mCiWxI8W#+x(87BAl`mvFF`yx&<?VnMu>!eHJ_~_jmDvMFPIFx_g8pT$o0ZC
z=ximx#y4Us05*Ob%m2slx<~NGjmm75t}tFt$a0B6N^cmv#}*d2C@1#14&W>Lv6)xE
zPk|6Rn|MEL1f8<l6V`jt{&%ns7W?dBKeUH9{vAKzD1WATv%PRaym=~@wgcX1^R1qz
z;(E34HoPi{-N*C2PN_JEJw}>Ptm9`#%EA!_!Y7}a6*O;#o}2o3^2+A9+wVf?CXU+D
zk+6aSF$s68ZF|zIBCqq@Wz6_az>kl)ehJIaPb5zOeg{y&>Q*@M;Dht&*l5DHVctvn
z(|8XC{b#Z}EY8DCp@7EhQ6J!b;R&y(RBCpG&g!hw$u!^Rx@+K7H8T&+cteE_0CRSQ
z({T9&oX`n*9!_K%Ij(Md0&IK_wgO<|yYQc15HU~EB7YEx5};rqPElJ+gcussgAC^7
zyFM@08OIXs)pf#MZx*i5co@e@>bY;|IIvde=jm2UX)%;i&3HFu`aoNV%QK9XE=KV6
zu3MC$hMTI9g)`aMMkH3VZtXMu&z=`x;I}qL)qh5im!~OQBYWqyb*mk;8~~KbBe1qD
zk18jG$!kw?+n*&8o4<e3C%|7Ktb>{i5JNKtx;34O?{u8EGj>I)(_oGhiV4pW?g@8}
z!X<r^M+yW_fpfPq$D7;AeI$#2D7>gPu-4`CtGpqwgF3ISOP*Jnhn^m_Ns_BdwJg(v
z_73R}$9N-?KmBHU1~0tNvDC|Vf6PHc%2qjcl?R6CYv~rEvkvq#_89-3c8#(8Uwq#`
zxs#yGIWF3oFwT(B+dg{Vn^))#2iW*Hex6xw<4?qY_VtsnNRVa_#H8LyPBc~1U{iEy
zBmE6<^YjMgxa^sJb2mZiul^!UnsGf&#X9EM-p7ALw|Xmm4(@LoXj(X&A=gyp&I+F1
zhVR&POP75KuS*Ofx7e>67|KW8IJ&11An#d$ukzIWB#hkuvum<*S(&p8^1mG-;a{KE
zaLP}4ab!g%ETMVT^?xfcibnFzP?mnToW_}X?@nb-Q!0)O1>xlv+Me!vYSi4RsQd-e
zOR5Bz!GeP9Py(F4(Z<FY+XG<Z)A%pHo?rjfXH~P`f30xShkVsqi_YZ|H!+kid5@;c
zD=Q-BF9&OYFF;1_%58JqVgxY;_tQYv??U1@OS*HVpOy7b=Oh*`=WIwpVMJ{=9Txb~
z+rsGSxI(LUp&e|l>)^j$J6${vdoie=RZ5}9{;ADrb8j@8U-;~j!$W+lI;JtZaf&Ro
zY5+J68q$iA*GH5La@?jCXtcV~{o&XfJpua7`}Ie&JRT*tHhnE<GRRr$*YZ`7CHhPV
zK|pS5T>Vx5481NUJpo(`w0JxiLu&JlM1j*AbI6)7-Cr~1?h4;Xv_VLIIFt5I6Yepw
zA9+lmvIdTewFU2qW$<}8RVKQi_qtqu2fFu5b=m~!uSHh^xG6BN0Qz;RruX~nMen_5
z<yY&De*Z<E&^i`+_w^Aey$<=b_?q#Xlq1bkz}2k}+H-mCyUK-e0s2{aYH_Up+LNW0
z!~V3!Bjgb{vID$cub*qh+4!xoJpeX7hR5Ua??3Wwr1^V!ZGXEL&Cbq7V~@<a8NWal
zb4=&k_1Z3iPg}hT9k=NB#r{y1%q5HS@qj~atk-4Nz}(8`_n=gY@a}bhm?SWNzR{y~
z%QkYQ|4t@?s2@*RRM16M_3!j<2?;o<uV<8Cx}4_`ghOkklXP1EF&X{41*`SU<|-HQ
zzUN<1tx%Zuu!>x1lmddwimx?~x4umc|Chi2c766SE+*%=&~YT`A|ph%b~=QSjF;gS
zz6KEd@AkG>dA@Y)EVREUe|P8&0*NsvUU|bh4{Meu{D<Eb$L+8OK4n-C42tnM>GS6I
zi#w%DU`|?Xi83~y+Y?~pGuR#g8=paygUX6J73WRD;3*BhQ{5=F)|t9tVMOa+#8QoX
z0Hh&jk}x9f1J>VCeL%wV2ncmFX%D;hv4luW-O^%N?+L8x?+a~YjK;YIICG=Z{Wk2!
z31|x+TbtNARnr=Yyx`!XO2(9G;jOQ>@BraHe@M$ed1mN1O?)p(|6~8w|I|%6-%v#-
z)boeKycT$7vnzO5NdbB4S_is+Wh^8V6iE`~7%;CcdIxBd&DJju=UTMj<FgoIEUXXe
zD6b5SW#I`_PZDXD*GI1bDOt{5uFf4B-mFiMp?)Rayw&@Dl{c^cG|lE;{v%ygw16O5
zT?~!Hni-Vg^PZJic#O0x0HRy4A6q(2M+fv;@t8P66qv!OkNNDhcaC#gQk=Zr2gN*i
zI-x=Y+D<EQ$XbclxzK4A9motf@80gDfDkS{P>*^pp-513W7%s^YT(i)E%HA|Te_lj
z(IEm;)I&-AS=@V1&)2^3;v<>nMT%68)u-i)uXg%`_6yLbu;y{|YRj~-R=3MU^^W(4
ztab@Q@3LUbakhmp#c(@4sHb|y#r4QFq`%j+mWWpr+c=o(j1pCE2{txv!d3um+>awW
zS^r%B%@U0L&H=1}5}gD<>2ltIWPYi(Jlt$!J-%hjTRQZ{I&;g_Y5Y=n#b#ptuUJzi
zc4Ixo(nEznj4Ib|`<dGW-z@dq@H02aJ1A+TZ>rRzecQI+%Gl(b+~o36KU+d&d=DL~
zWi3?yM(yhejNIOeI8*D(^tiMhGyUGWK2fX)Pw>dC5$XofN^5s0x)`&T$!TIp*nrQ}
zS=y+#E(r)M?78i#>QQ;+`LGjm;0{NnF!PS{X1#?hghP7OGJH3*AmiO4y6yYx>-A74
zS$1~Z^RazJv-wJHag6HIg9;T0>U+0b_k8v4&uH_uOH>%4N^Md0zFTl*%x2fB04JLK
z+gDVE&<C8;j5bW9eB@9LJ-zBNg#u~VIdl(DM7Td_FlV2|nbevJ&p-(vwiJ{7%x%xZ
z$H``+78_5|DTtZ-Jhh1dH*UpN0BqcfGD&e@Xxo6iUaku#FMxL~&RUVMU@18R%`Q#w
z-1da^J=(~^URD{eoIJ?=8JG}An5yx{a<hj*aILFveu;rtZ_qC@^@9~N5_Y_M_!@tw
z4<{avH$iFv7S{h-Fot3KwZbG<nn8PFz`f08+cTx&4F_@hcL9|^<uh5@R`f!gzbV=L
zy7Bk(&*>KR*!)%8K9wu4$b@nM>*o7%8Z=Ne(U?92v6o-RZNmRu^<hX4Dr$}mGKCwt
z`PpHJ;W7~QpWw=HEd2?$LpWx@`sfLr_+3^5N&w8U7Gc2}c^V6D=AM!^b-AbCr-i))
ztYp@n7iw<O3WQpO#vqzC=Z7}-&y`SuOxf1?X=F>*&&m@+Ut25a=kI(EkaI+YAKB%;
zuPI7lqP3iDoQzU)8ZHLckl`3GRut2Twf;2mUS|3Ctolp}sq#gP`jNdX)#37A*!R9@
zz417PvikdcwmAVd?!@K**tqXydOq#SaCV)(7_!A~ww|E)k+(ix?NInPC3QTp7levs
zJ!@r){g0kW$6mT+e}Z$_1Rnt7N*|(?YJ{Q1Vx=;9m2)#tDERmNL>%ojo)_A`^lc-2
zj5c#1TuLZOjK_>^d!ux_Fa?be_$mDUP>R!A#2D;^$qreLKgZWZZL;y$d?Q@!*}K-6
z+4ywleuYRZco1(cq3`I<@AU%<EuKDXuohyvTOwm!F%19MtPLOJ1JHX2aY9Uk)Hc2U
z#&t*g4YA3XdBPa8{3<K_F`sDf+dX(7XYGm-TkIFR;&O8WY}|?M0kClkIAsYMGXs~V
zCC&Isu6Pvg6H7m(l)FqUS1cga*SG$(Sjew#un@l|>QId00Ez<?mVb0VhK0Xc-lV%A
z$F{0X9X*70eZ9qMF>uEp-9zMJb}Ik{(ahuOJknYNuQ$Q9k$Z7vJ+6IHk1z=}8fKJt
zhq%_s9-#YxEo;iECagK|8^rTRo-a3`<kD`|vmw_&XweyK;OO1%so?5S?gg~C(|>|E
zapd99Avn5!#F&J-v}F{%cgWgSt=vbsR)&rZEIfD3MWF?H)gn!y8qxSWyt&$Y>>0>~
zr&qhLp8JF~(es9KEXVpDcpcv)0QO(zL4ct_&x7aSc;;Dlek?~8L~6rP9cMEDsQE9O
zFI_Jp;soF|sm>+BBFtUZJt_nrK+)IHcvRj22(c_ddEM8>qvW_>b;l51B_eA|Jyw?u
zn3p*0s5L|DifpW1a_NWva_EdSC3Ciw=zcVQh>*1WvZtejVSy4t$=Wo?9yrIjvNy@C
z``SBDk0tEi`dIauW%d*-3m%E>x#;@H`{EdH(0VZ<7ySi{xB*69H!gPraKX@Ckmel`
zykFLE^^SWXWKK8+uJs2o;QMtYnd8RB_5j$pQTQ)JLxlG?T7w-#Ru8WGgK%BJfH+H7
zJEs`NXB#tgLQ_Yb`hJR0Wmc*GX|4#&%pmToZ`}IluJ&84=R3Cm)+hE{9ofcf$x3uj
zqf=VGS(vm<jgoQW7h~Xzb9b1<kAw5`4&ee713L97d{J)RwY@wqfk@FnW!?4Vg|j6X
z2ByZaEc19AYv=RcHR}#*@~7S}rC65t94Nn58z~$=qk4pz`|H^<YTUIx-I@XAoA9`>
zoi)VLs5B!SlrkF|7w~(HsEwa%`EMv%&p<JGDxDizdq<1Hb3*uU8<@K`gB%7amEEBi
zgaD<tYM-GRG95ap=ptWQ<?x*74KO{>FsAa%3;`Ax(I=z2&bXDISxgVBh<Zmg`@F}n
zEQlJTt_Zjt=p0(H`u!AnRuG~Qk(n7dyN$axPjlnu6Uz#DML?>y(dM#w4rnEgcNyi~
z9$I5U1%SGSA9*r;-HqVB)_-TNo#?x_k~^m2#<AU+C3z;CrIZk98tr&Sg0p%fJ3caN
zn@e!l+KgL6#|39@`kZ9}zK7#xrEm1}%wNkc#6jC(%szSr=<5+29zZ%!=%eXpdIug^
z%B@|zYh1o^Z4f$<n{C!QZ`E}_oC|Thtjw31dx#&T_B)^E*P%W~^$r;cetjR%3iK1;
z6-XWfr{@~Im7sszuk>u=@x#F#PWn#0e()YnkGBX;%zoOR>Rh>>u4e_!10h-mIU5kH
zDbkQ&IUH8;!2j(Ofg2aFLjX2z5&pwecsD31&#=#vyYj~^KVkzzn=HRr2q3(2D*)NP
zX6-rL`r83-!_bJD(B<E{xi{Bk>L*MGw17+O<(>~;Q~0cq4to8pnZ}WD=lI|Aupp5O
z<RAlrhaPazJBJhZ=}nm8c)-n?Nw3AOvi+U#LO1x@!(DmM2U*I+19Yud&)gV-&0F;z
zZ=2t9iU8p{D!K)uhh;bnr}m>dL`;RKyoV4#Um!^!xo)Bhf3&d<M1MZRiYAyR5M`cn
zw!LS^RdJ=o{?^|o-OX3VpAi-z?1Dk$WlGq?_nV83QqG}3pLsdGXP(zl?!4b$|K8fC
zgzTJ9o^?Spj6-uy^@FwlQ6iGA?R4l8l+JhrQpVIvd&*P2&V(eUFa|oSKZf#HxAA(6
z6ri|P+SHF;n|MuR=D2#W62qNPmW{_sRRX*wL)nNlnF(icYcTNlt2)xgs{reh84r3K
z(%}iOazDf>f4C7BL5-N`!nsbp=aU9k%-9uPgJXKWE#tSJ6!WFm+d53poHsTZ+!N3r
zYm`9cDfOXg%bg-{<0Q5MVB;*7B&IV$7Gp7%oEBuAPd>ZmEbPWJD%gb<((1Pg<b_J$
z(RY)F)v8-6*TN^=-fq<N?=Zs59T^i|3;F56LUINu=$hQ&p`6wPd5+a<J58;n*TM`P
z*T)9JKmSDm#=JD`EzwrYK-l@^K3>MTgZl5{%i~ykJvRS%%t?os*dr#;+F=>Rc#kag
z!n)HAlJkLh{+E2FkIYH9k=1`EaOGJ-MF|?e28`pqvi|oD4~jev+PdqC&#aVOL)exk
zF5H*sSyw}6X+CZbb*85xo&~v#1pUZMR@|1j&d3v9b*S~UN;^qhix<l4*gNR1VYJAZ
zF|6+7G>qIB{rAHJf?O!x`kf$3%V_o^V%h8SUr;Gev~^6864l90<c$#$`oSAu*b^#S
zgFaXOsQZO|5eWL?InvaP@wy`P`;8~Ty=Vf#_!3kD8yhp&3V@B%mVZnGWZd^=7K~Zk
zAc&qxB{OS<>%>U%ScPL1HZEXo?k*eXdX1pi0<AoK<Ta$_)|L+>t<&^;;yY{vJ(tgd
z<fk)vSw_^CVbzKSgiet%!RsqwWmoTHbx)N0$<j8M)406OQbefVtYC^3<8~8qPXv~m
z87Dd~F!$v_JQuC|Z0z-|%v>xR7c-mTvI&C@y-DfdrOG7I%<{ROWOsY&7jGPr=Zvo3
zZF5Zy*pv>M{14C31um;P>VRmxMqaDsKj#~8IA1}kE4H*vk#hPYo!f{AuN;y~;r8n3
zH1+f~v0fPACGwhbEo<r*6l-hWsFzR2Z>HbUb07w`#MWh~>>Q=*W6c8o?WldyXS^AN
z1Zyp|tM<y%B#J@+#C}2RJWPdboy7G?D^sb8X6k1vW<-RlES%L6j?YQYPUj(Yts@xq
zp%g3IQ0QDzmL0QRQ{Ie}dBa-OdKk@1S~p#f(;wyeH&|D~bss!Dn8;3f6cDsW2w#uy
zN##i%8-WH^c7cH0bVjM_dWER_%g360C-C>V{a2r@tQbL>Q(2uHSNNB%RpsCB_a+A1
zn8#KCY@Bxc7utTujR`l{dgAAaS_yMqP-)vJXU}!kJ@%AKZLpw7hF8+TD*+8HfL)qk
zi!@mY%OAERs>QpxU6SBX^#jGxuUkIE{-`sN*B?N)ceMTOxr+P0*8IDTp;(o#Xk}&;
z1j-aA?nmcA$o0`uOaV);h7r&o%6cKqAe8~V2?u<JH$nr8vd}pA&tU{#6so}OmVQwf
z?jk;dH;lu_5L+viJ9!BIzP3KU46<MA-)}au(ANEBhj~T`=v0_Xvha`y|18{i_o8|@
z=%Zb$>+33qZqRO@JeGYgH?>B~kkRAIzfPdfxnVwZy4S?KiEZP$!g4!R<)q*N@LaiP
z=At$%UC*V=^T&2$6K?!-atwr`Ltm@fm-Gr&$U$}+_ky(<HWWUScxAI@dEoJ4E%k2u
zdtMts)tE`cV~wxpy}6MD)5p@f9_}4ZdcJtxhW%#rC&^-@vjRBf#BdP9MXf=B;?c{Z
zVYrE4uOi&dg;49fC(a&+`b---Sn;{k)X_+KT?om5Ye4aH$;O2H3ok5__HsOqKoJHS
zWLBr}_ReO?(4|>HSNCxT>*w|a*qFjr0BlSH2}f4qG($u)E(H^(g|O_6?tfIRw!%dV
zmp9eQ^-(ktX~xZ7x0x}c)N}+EM_0Tm^v&>@X;CM|@e|EpwvAsTc&uR1NAAKsa~pP%
zjSDOBJr=-G0zjcefzqE<OU&EEo^v^>%iJgM3IJi>v-I~$;d#xEn^cZLDy)%L4Cz=-
zJK=cMI~9@OuSugacor_FN%U3ShXVx_aMct-tkb_PQCD{FMCtR>px=k7J_lE1IX{75
z;8}cylFO?%x*?>ZbF7cOI#Qgq_76J<P7o)A@no2M`)R<iW!O`4Czu>)BTMIuC3Gp2
z=z!I4#q(t5lCI}5b&c^JP-B!Y4aOACfxI@nKFC`W7H#)wiu1D~rdYm3y4m*U@PcS1
z?%-S+KaZOKoK&galt<UG$HwHGIOUvyAv!0T`89FVsiCR)Pr~2mjXs(|S-T0<b}vq$
zfOEVAc8b7_S!@Ns#=PZUFZi$!nGKzzX<mun&$daCmGfIc?u;|SHVN5GItIl_)(nIm
zboKV&vRbPc<?aUU)KxqzWnO0&=&gFjL-~YN_;S7I;c!4%l(~qoRDdP9S7Dol-7!(C
z-%csv!E<Gob-|7FvpesYcHJ%i7WxD?q8R~TFJEy=34rg*NH3vWd6Bp=ipAFuq)F_l
zVO?5VX}nO@qw00#)8RE*{g>c5(M;&}dS%{AuH|=NAq-)tbn(WUryCOr1697%!xajv
z+Q@Rvvc315=vAV<7f2C6UKat3unpcFm8)M1f6de5L?^B=|BoQ%7X7MDzP850?>P?1
z7(N5)V@TN(`MsanAH1#!<U=U0w2`u5sEh@#CRBz9Z%bT8)c7LdvFo_H=OBfBMEo5X
z0+2z6X^|q=5c4i8C;}C<+oTgbL;8xLvb={%m9LSf0C@(s&$H0`4C*BGFzwT#RlJDr
z;QhbD0XAl^6#yGU98(*7E`QPO3$4}}WA-$vA8h?xm|?3H{kzjR^TMoMrjyMKYiVg?
z)C^GI*XX;YHi3bx@yPhD8TutVtbC~1_*o2F=o|(|@@KChg733?(Luk>SYxbZa$&Kb
zAQG$X)?DxGNf8&WW5DTp&k~~V;k&h?8(@1us&=7m>=G;KEXM_&3cdYdQ_Mci(AkZp
z`IPl+a0$Ne+A{^?iao(lD;@D1mvtJ?+t})!E1Nop6QJEh?7Y1VZW+4SkQDs_>Q5aG
z@GEm*2l2LFS|6+!%e{%RD`eVvl>eARK&~lbJdrV<m3maMzGvseqA(6D*n<+<o$$TV
z4{b7IkXVA@G3KYX!}i20^MV>>^U%tLz|v1;N}C25UJOyHf^ii`PqC&*<}`r4Pzd2M
zNJ6LQo(|zn+TuA>rY>OF6W~MMh6F7v_dOMO4r&WC?#Y724;5rEcEWHgc%GC?z}cgC
z*RfZ`Lc^wgwBnJWLV5CtHVCVO=O8|mD16P^K$unoZ!`RBY-=aRY^{eDq=OP*hXZWH
z_=UTQjo$?El8!SM<r2=XxaDOXx=?=P-p?tQNn@#3`&6^xsSOt_12bR^L-J5xe;igU
zVYc5U+AORr+Dx6RFMX%3?{TN`X=@lO(Ney_*R8+(*sMLCpiG+{2YJEwV%e#mvTnS(
zj!(>$o_ETH@o<a9n}w17Sa8FyuV*Ixe_;GPzjvHYwPEnPiLYS<5`v=nZ05OFg?hT@
zD!H#{j!%q%<EP#<m}`69@7nJ>pbtE0%;C9bI_BUq7Z3XP`*fUxg$SX%II3PeVsO>R
z{k`A}rq`^bNx`3LW5dPv0N6;8x=VX*NI>dy3l6Ior-eyUxO@<ttJ`r=^xRN2Nm38#
za@s`9^R=K@SZO11p*g)x^(`BU=AB2DluxBvysZ7lpKsccvM*$UI9gl4?Nyf{3qW8A
z2-%ZWZB_f<vlM9E5WQ2!U+vBxZiazuD%y-&uL>3KafK*pFmMGkx$3Vdo;Y(^?U#dx
z3y@t!@y2w82XwJ5BbA@Ej@zSkbiyvz<wv)L)2Q5+XJYbKFo^4z^7w!?;V6kSA^pJ?
zFjiv(HCNY|I=WF=oA^upq3h={d14|pgrrTRKDijtwZc<<V$Kw4Z8O3%c&;o&LKF6u
zV@{Y9yN^@9yaTVDegU5sVI7Efybfi1hct}py-o&)p#c8+b$D4Qr#FY!0qdK+_cZ9W
zh2;hDdV{w|<X)IoZ~GA~_n8|y-9PO!IH%w9W#x^z`9jes)FPMzL$b)(XI4$+wUALp
zs*~LlhWcH4DSF-)qQdgqwhmy!$Myi&m}30*3&h7iK}I9O&<}THZz9fO)Rz>$)}_*A
zJLZ&e*5!EE2FQesl`1T?rMJg*78Y^(iaX`q5=kV#Vv3+c5Y>w__3d+Hq5AT*II?j6
zr=W%ZP^1XlB{lg`cU1NY557+l>=`stsu>sNvf*j}Op&O)b+|#fyr#_ZG7uP?upH}*
zBcl{pCia-UnCL(Z?Zaaq9;-bzXkR}M6N3Nq>i7=EP&qZaZdi3zCLg=isvSI=Ru-OR
zzr?Ze8iba8co(J>Q?uZ;X>}=Asr;}$0aZjB4m1&<XN)-h9qqaD`^Z3F`eCwf#dyd<
z;99{;g6(lFWy+v=iIgxwTNH3~K<tSThAOGdGU<KbniY(~6LCqutQbh|)AkQ%$KH&A
z19=zlUpt4HM}p}J>iSyBast)Xe?Z>7v4Pkg02|Z7zm8!plc-vpc=5-0wHr{0m5DrQ
z_5$@?Y5bR<F3}s6Lkla?vUoyFB8XF4JzK6=wum<EZjZf`OSeeP)Y@KKHVvtoip88p
zvZ1}itZZ&#V{VD&H_Q}}DSpK2T3dk~D-;P>Ez!Yh0%g_bPmnH-Ece_$$@|~OQXfy<
zD*)~gq+%)`9nF5p(%=Ufi`ZfOUN2k|bcW+7@y-xdxArW@Z{c?q<`P2y2YQ>KkROl-
zqJq*BICPw)W5ch<kW8=@62l5CcV{>>#CW0&u_us5ZB6Xsp0Z3oOTd7gz7kr9M#3<~
z%b?|IGG)s4YTh^*;icv;Ar6f`T%bNW)=$!-iScWQxV$zA1bDCLz|)4#6(#nG^~kkU
z<2#_MgGPyXNHX$Xo$W_+GWdf-dBO#`<TZI*B$#SwV!Pr|khO~expa>_*A8J(WkZd)
z>Dru{g<N>+q&{|BZD*&*f~=Lvs%>!}(g+$6-kv}cItxAy=nv*Rn)G%XS><ipoYlT9
zVt9-EIqdK2YnJC_(@uTOWYiM-J9i67*Wtnl_iKB?O$xZ-VS4~<7|du44cXZlf${=U
zc_rE)<EHH9H=oG=3V|OIB?Vi`$U|V{Ibc0o`&PkNNMIWw7XA}@86u#nU+np1;Xi7B
z*TwFnTjj`#V2I-6U+-MKOlWQ-lQ;~4%z}cc=GY%$VA+}SDp_@<IkCSgLJKJx{5`Yp
zQb}&JT7i^21i!n^&yG?_3HMd64Dyx0J*+oQzmMzb0rJ1Bi>~{GCsZJGYLAYrZ3q26
zjI1%cP&Pfvzg#}H2BTibgHU`4<(hgJ-g8$f)qc(wo6NJ*VGx!Ohxf|tcsbg9DHr)*
zF+ywT*)Xdtn}|oEiPw1~d|v%p7@c~qBpuv%EtK~wt?snT$k6M0l$kQ^pEyYMKHaju
zhgN<cHmtOFo&GETb$KuIm@vbD$55;=)k@QuzPw7v=)Kd^@AnlCnv?6_5Q)Y94)RLA
z4X$x|f9EL^PVM|Q{$y+qfDM6aB#7e%ZHz6&@d11Nr1hU!$62tHfsxONxT|<W)Z8m0
zH$RAp7KfvSht%@I{0`m@T7%1bVqXJnjs@$2b<J}&)5c<{7<=iGV_%`x0P5@1nhJU2
zFD;nOB3Y_2n*LTf^%-F5maL#?bsS2VR?oY5sz|GsvCe~~m#z5<**i@FJQRkimDPo_
z1+?~WR?K(gqNy|!?<c%7x^ZCRDdJJR=03^(&K9r{A|(Jk2R&QybfI~Je;&BKx~afA
zym1yXhQm+_>xJ=9hW-0pnoSry$>?JE9OS*IKM(I7vB{oj!|MD3o=<@_zqF&1Z~Tmf
zdC0oW@1yi~K`Vaw2<PxPTkSo)v6EWSFrV{St$k8YTdyV>$5fWx0!oLr->9tJ+`rTW
zZ#Dk~?SyNI7pq^ZlpZ(KXX*9IDq25l({pkk1)agf%Vtu4w*OAsj0{?d+A{?RZv*gi
z?h3L%v7og=VBDk*a@YM}oqrjvmft>Slq+>>(kI>8r<JSdbtsLT2Xmcx)V;kq>2Ua}
zP5AEZT*AB$7b@@ofPQf~Ah0YQa=bw3dfMMGpNfiUibAfUOaQhGqxPQCwp{@25syE0
zkLhz6P2L3Nz;xfoJX!5LkF!3Xmi4Bk#jOW~+fw~Mr@2iGKVrPL-TnJV2BmHM0&E4q
z2I7sIE>Cc=?#rBPsZ{_Qu|x;J8y>q7%J0n$^~k>}$`C7SOHKBzXg?iYhC>1#4M<@n
zTp0PZsslnQ+Sm30R01QdvKDwU&jU}<ag&zZPXWXy<9p5I>g77xXWHN^NH_Zir4;b3
z%Jr%$YjnY)e0A;<TGgyETGYk&7nkHpA`Lwv4(p{a6ePajsrSTEtU$sq0J4nRi0!W)
z5`op<D>E0vikg&`(y84y?B}W}3ZFx4z}tT7Y%KN^@f7Rl2I(Nr0;?2?P7thx^|5=#
zlu!xXX91ZkO+D`TRM+>uC8f&2Hf|r&xX&s@t=OzP&*oy<JGrH>6_>VfCLOLb?OFAj
z4=d;zkacKBj+T;>=cCqHCM3X_!??UtZ{+SQu7RBO_`42<dERsA-*|@yxi(4!M1l2S
zUxFgK;xgr_JxfI1T4y0OpLhlc`0TlodwUA^c&03+xs138wBm<JYkgtA9#<7QYyS5V
z3AY6Z-jg%;=ijZ4lU*L?w)&w8?Km9twWb|wMXG*zjO(N8f^}er18fks0$_tcJ7)N5
zwqgZcGwJUtP`i0$ql;5;?CyV_Z<phco2EXkDL7@w#MoFhu+&E_WL5&dfZT&uZLz+G
zr^FG@#&YHTX@-_H{qCuS9bB?t&oca%ui;z$@Xu3xGYLFSEUoSbbZf4fe7T7eW#Fcm
z8Yqex>>C(5GU4l8FXW3%4*FRPea9UrS6O%5zz>Z)RkXk_;$M~ZaO!<`tTxd(j!E~F
zKBx>m5fY#+|7Jvd$3D4%1<S7c1tHLu*Bf4jrw|YqN`EK%S56^!fE#;DFB5o_fHkZO
zrqP_>JeMP&)Wak-z*;hL=kM-0>J}>@1Lm>#dWu2!*yy|G(ZuT9V~3|b)~rR-sT8{{
zdJmM)sn3xT!nAe9k1+wumEme+>T#tQu$~C))@ZA6j#g5-epI(R?YSbwrrC$ogK2zu
zhAb>YC=g)3qm=;WJu{0ZjD<4-{~Zb*Oz#(Q838AX%Yl-3cD~Kh;l1yHa#XE#<Xs@V
zo%9|Z=i0!Nv3V+ZD!Pro44VUB<CrjtKe8nPvJ=*94AU**<aec$TOA$FX5O7@y{2Nh
z0RGq9o?VT+ir@D(Rw!ul^CZ^nsptF~W~U4Bc-@)^mQJU=b=;q@o`tn`>oIMz)?)`x
z1~^8Wo$u;L5GpUDuxP88SJt%%p9>*o;@&E3bv!Y2z`0Sm_I=5+=ithDT}WA3FNUoY
z2%{)?NaOUV1C`<?dsNNr9?N&;!d`U3i{rHz_w322@IM5)eXqtN&+w0Qr46oEwclK;
zu=t!j%iX%^vqQ*9%Xt>m)maDw^-<)BsY!krAJpYzh?ZX<IBuOC<@-Kp*DIm^v$%uE
z_?@*`)Hbw-Kt3V7R(mN5>(9w&tnbz5tv(w+8ruWlFURBgY@S)t%H~><%?2!&p|~C=
zmYB8R`rMSe>r8Bzuc^1?V(ZH=ewH?yhyH|OOJSp><MFaMdr#1#O&43Q$VsEQVtOG2
zqJB~qJA{qqdM$XJvF0vf%H3|%e*;4RT7-oKh2Al6=V!|WTu)5znrA_S-SNQUFWOyc
z<GKCa9fMTtM{%4UM0%s3QM#4T;Rm?lewkU{l4yehZLN1OiX|=8h&ESk*y1R8yt+3D
zcX2fO_<=o7f|<~R%b2iyg*mU!LeG<6`J+&XB+|u%QMk=a3yQX?3C<bo{UoX={S4k7
z$2-$9smz3qc<~-te7-&wh1&G#bP%&{FLlb1<#e(xZ1iYMMf1&IOnSE>2MbL~=XpcT
zRA}<llVuw{sqil$jCz7pr0L!O_7GU5-pi!(<)Hq_vhKX%3?dO;$i>t(&U%LLfS%K|
z7lB@naIM4r3YPViM;y0Q#}a4HP-q@$by<@m?7r+n38MO&!0ru^zMnh3!QKrEp*NFr
z92KeU1lL|~uUDk6>9y!M^K43h*X#9DO+XtT#t$<mY<wqN4PdZ1qZ{UdECc{2bG%-l
zdr!uj)EhPKXF=&{G}1Wweqa~_o*_!vW6A}Vf@9k$HgdFptBvrnq<%*TK!l-?67&I`
zD}S70glxlU1eK#Ky>}Phy}miMT77eWCWWhP)GOPWqknIW`986kiWumxg5KRr^^4&c
zGma-0DaiH_<ZH?$SZqv>pECLhaQ?17WuiI!cRQZx7&E_R;09YB^KsD2_JspmeY9Jx
zLRuFNsgKax3Og3xiR?W)D`-qNxzj(CCNor^Er#2?8aIme7%Tn)4sVL^Bq&p3os0Q@
zrf(?(P<a7NKjO=-rB7+~rc}9Sap+AxYf%o?j>R#p`v?(^H==$x(yF2%K>c9uM|h^A
zy=PXRgLk3S;q|{R>xGcs-13*^N_6VEph!5b<Sj97jrBG;3oR4R^;{l1WzLM_{yB(|
zjUWBG?FsOgVtWAm%|J_w6QgVxf9uI9Eu;8GEbLgOq{?YjIS%n(!PQMLk?Ta3<_RlW
zxVQkBU;PRib#Tqo3m|KP9d}lAMXl`cjnThZu<9h<wCowVnaAd<tR*_uT;$fCaQ752
z0gcZ2AdWW0$chR5ii#w>JzC=r5Lu6A{*IuHEJLz6Ljore#&C*p^)95p*jL6XBjTAA
zlzXyA0=SfB3F}-bgU>N}JMVqeCJycSVmKChLAe1-u7QjDv`FKSp9P<>J;Pv_&{&;Q
zJdklR5kkv<@&+|-#agHwS<Oy*|Mb}I*y^migs-KdxE{55SL)Axs&>#wu_u(D?l?Mx
zBy|yZSdG?!nK6WU;n_Q<o)~(|5Luwd7eE5|in`EMS{I?;S2Xkd0t9@n5?WXW)cuUS
zqxKn0h}PF9kMl#+eZgKyeoxclKYAn%`x`t9E_k$QWMP=@I(<T%GbF~m6@j^{^}pwN
zm~j#qPq$|qW2k^i+PT~RZPTTsr?YK+bX!D2v<TsM;d*Gm2%<?Zn#UAx$|{$G>=S4I
zV4iv7Z^Kpq{Kc;S?g_M9f>1+36FVa%?(BR$h7suVZ5{Sp>KNYfg$48uJ#)0lGn+|t
zRqTb#q`ew<$#vrbtriw~M(h(2*NQ%B-g7#ddXGd(gRE2MX&A?w=<*bqRUAlsxW84M
z!Wy3}ekR_IKF_+Xg1i5rji>MdxPiR{?qMFti`~Vz&u6m|k+l=UR=6=F%W>=)`z)C@
zUQ6Sv-V4dl+`3P^9^GXUelKi5J%yVKrAWc=I(EE|H*pcv)%>7}&{PMNR1O^t0Ph&~
zw~~6JG-hd73}(A{CF4=0p|hk`$$b_l&Dw_5;@H~?8@c|6g!a;EjzUBVHL(5!@=c~x
zsbi}41zV1RXwwLoftxvklmJtTGn6r#qPth*l+))hU1~s(T9uyN0z30uG}mBTAHH9L
zvw;LYExbTBnpBzPq}I&b{;978X{RIjAKnSP212MD|87Uvs{K`eWof1tWnWnIbXwSN
z@M`4FgA?J60R0=yp6lVyl~}eF5Xuwn{@+920uMtB0r2!cI%Jd-c7e1SW<v?vId8Lc
zt{j153ucu(1J4LOHs~?9{jm(Z%U&qJaSRm(@}xb&E(rFDs%)#_T2+7D>uvMtP7nAO
zVut|yg>YT}M*{l^h&pC0U^fuK+~qpUu9p!;@}RSkv}s+k%boas&vd4XsD)Tq^Fym#
z+gSWCPcZV{7zzL4yR(3&jPY9VSirPZcc%Wq`{2fZdX=JuQ41Si_gkly$J?UsZRCwo
z`_B3OXU!SqRgi?6^)RbEgPUmKMsC7KY5zQH|LTU8LnLmP`nay}H8^e(Y)K<sFntI&
zvjI$ezr;u>XHEyoH8b{-c3gH}o(=mz4=MB*NTAiC!)G%MLY^#&Xcl-=^qS+7`3bwH
zyh9fLv^ale6X>b*nzy5^KdbYuH`YO!j6!;b%xiDt)hBpUCa)P07JKlr72S?iVg7>@
z0@NnBicD<dT!O8~{MGK0WY@Ks;Ad?BH$IN-0r2-hlKz3!lSe<h<%uiYsof*@Dc@V2
z?ym5xmUTkd(CKu_u~YY2D615&vK^H0-QY3!3X8vTwL^Drwr0(GV<;~G*P>iB!|$*6
z;TUrKAFRr~NuD)#HIRap6p90vVeNvB1Z9y`&2#4;Au21}^T~_FvGN-zg&4)riP%g{
zP=>DmUKjuq`~=n%v{JhR4!ladp=BBU>XFg=99gH54mjQgc16BI#H24hVvXs69a1Xo
zs_K!Jg(PNbgKNBV0urohh3u9$llm`shsy08%OwAF<$J2zkwT<0PbnUgju7bi&SZTx
zB9S~E9d*Sf^u<|Qdbmm_`0FHL?ebO!k1b)rlxvh27SY%x4-FG@E8h*8SA`3DFpr|u
zJ+jQ#g77zK%VLTKr;ani;+TNYLRx_FL>o&=;Is;^w;3B!VVzrm@#aQH6S_mIai07p
zpOd5fm%S^lc&$b7yr;~)lCj6B{*n}K?6o9_<>0dl|6|?@T>FD?&nUEjLJ)DBm=Hpz
z-_Yv@yKS}oSJsx;vnf{!Tw1@_i>$r(xHrIgub#BmC;RJOq%Qbkw}E>@`8fXd?UL+1
z2Oq%etu~k&e=N2F;BUf1i;m805qJS;Po`r+p#{q@tSk2-hBql^832~pcI|zJr8Dcx
z%mNizyi~k>TE?j_V)yTRRB&xoZvW)UXISgSep+teM5;8`JsboJF9vTQ07h+@3nH{}
z_LT#pcOkTx;6lvrzH+q_uG_G|!TjW?AZzt%x7TvmSneOO@JXNFlJ}uq5Xbyeo21hE
zXEs5hAcS$u3-=MBEA(E2vP`=tvz0y4eVLeJ%iW=4o@LyBz~HRkF?t{1`y;r<b;);l
z8W^K^eQ+J;@rYp=qOL(5SjH1vV=Wsiz#d9D#sa+~EKpf&JKjv=Uj<aOd7E$7Em@7H
zQclm6_%2Zg3J?CO^sL@Va6AlS>q>wc&eW8sxYUuu#f_O8JV8h+^vg1XOBIEh5yyoi
zP?nZFxM@7$1KLewnL(wBs*h)2^=_CxG20ZspJzad9Luf11^Pj63~*G{Qx<XFft2?l
zSkp@Q7&K?O+=;PgejxOKaNcVZ-w);VzJcog%0hJ@Tq^1}&D}ztHb^L`$ChoB(RsO^
zWx{_6Z*#7>1!CP-Z4oLc9fwRuAtu8YgMA@i9-OR`Bw3c^JyA#A-n-}X`R}jS>tB*z
zyzz%%hXDLNm|G>Awvr|V`d2PaiOYP8kidvpofHCrEBC!P?qywFDW>@otmYxi+Pt=*
zIiM8+X<3~9k=Q4JVKqOA`OWQT-T~TJN#X2K1d+EM0}!*^Pf3e^e_Zvfw3ui8LF>7Z
z66FT1J~!;t-wp%)Kw%Z}BP_uoD$A^(MW{V_KU64cSJduS>9?)+Zn2dwJV#L2#`w$h
zk+`W7^+hqF!LZPg9HX!bciy5(Mi%R-<Hx}XE0!KJj#4cR3!`~LkDp*eJ+f?-x5aU3
zH`Z)@Dp786){ZQ8nMwTXdJ`$kFfyjpM+CVi;XPOHoA#Gdk2}}9R>Uq{wq}e4o0h{t
z-8g_!oZ`Pv;i?BfH!-xDf_I>-cN2qH@<hx%o0qkL;CV6eoEaG|9G8E0OyGGZ`_R<j
zjK<ayeD5i<$3PCD5AQ9#D7~q|2h#VRHU*whV`SDZmA8A4LMEuKr*!<>;M@2y*b0EZ
z0Aet!xaSayi!Uw&sM-HGP^qwFIhop8ixG1Ct|jZtLL+E_W>yJcEd7)B;=k<Du_hQH
zW`sOS9rY_9-0}|qL7%rT;cN6e?I>AXPZ!Xr<F(zg={zKA+eV;rfzao*wYy1OOm~Q+
zV|ko7-4k7KN5aws-tn066awxT@;c0DI;9|Dsz}C}?!sZ076ai}Q4*yi^{f1}^0Y%M
zK?a4ffkhq0(&${SEyida^QJE$oH%?8Ebcft>s_EbKat4=UBagz{wB-Bq0@hsTO?z1
z<$Z9$nnzD5(u!zlMrAZ*<pITnpyykudN7%(NTx{OCu?`MtC%L&bp%Frcpahs=Uo4k
zelNd=Eb`K_Ji<tUVnWE&oCgKv=VW;6Ya>O%={-O=*8DMbc5GZ7S9;D73awtKj}7JR
zF+?c2t7izZHDpyf-~TtWkG1i8Vut|yB`_|_4PFeFiNSOh*o>GaWc?Mcb)Kc_igof{
z;gUB8Nww@c7c9&sE)UJmsvNoLvCFaJqZRYPs@TY+EIt>19<4qr-IBTODTZ=Byuf5V
zTP}=qttaarl>3hNSqT!N3(!^4kn_~*mp~h8r>}H(XpRkfM^I!CAsWTlcvD^@&z+e*
zPaqA~aOyH)4!SeooOpNDaS?y2-v?B*d4>)+M6R?Mi@7-Cl}p?}XWDW;ZKlToF>&3<
z)fTJMBmmxguf4#8P;n^Vpu$MO61Wx{*Y6-iz|_~jwbXZANHtzK@4FN%W7hXOysG9y
z09qWd8XG8Ra#_``eV9oLGATNpT|k?ss9@uM81xs%xH~TI;=Vf8{iL@5hXWh{E{$Hm
zyJ)6Rum3FSPo%L>XBrN-RBJxE?_2LAE+jJvIsNHkAo$m3eT>hwpHV_b8|M%sT352+
z6Gq(tSH}tdfHUa(16Xs6zFGBJ8w<{su+=AynExIqV`UVwkBS}``fsxrTsQn}{NC6e
z0DqD7|A;M%&|QqRnJxDinAW_1>gAhooih`AV!5&P%SqXgbY+W1HkYDl@YqvBVP@jS
zvROR?m}~%W{3CEI(;{75(0-?^15=B(vi3U~bVt54AQCtxgPT>>gN4i;FR&;Z7Wyo%
z@0ANAsWl_v+K5nkkoh&{ygr6yR{A_0YW~}dUI%Q2QQj8BEr9OOEQCy2P+Uw}cUJnZ
zM-1G<`p;uE?W@GY%8A*=<LaRNns_gH*8CYSfgz-}W}=Sf@!|<6i4&Q3Y7p&_Jc7@o
z5h+tI2{Ms2kmSbMM(+a&E>agOy?BbjbaORa;CXg`kijGLG&i2VQRh*R$6fE0r*CM`
z<?+F0-<{MOWAJ{sdjP%P@h_ZLW?sZtX^`FIV2f?n3#BuV!3u8~89H_c%G~fi5_~q!
zn{0GZM3++P0{+K0Ki<X<!d3wM*+^GKS`JQEo-DebjNdcRsdqk*7Vs7f{DD^jC$vES
zF=759#Nz&ap2<Tf@5jp^je2&!EBEr4n_XnF;2u8AwXtjgd#sHaiHR0Y$T!bm_R;R%
z<oy)f^1B?Oxv6)ZtoK*e8uxX0H~Hy?U)Po<8U^3C8U+%QXKrjThuNH|6sW<q_WG&2
zT!N>R|7~!^)qK#7B&3Ud!PQ0RCVZ^FP^W!rvk@!R&f-dwkEXSil$$5+j$i(Z8!O)U
zLD(Sxf4Joz-7{s3R$J6dvCizuahA$`leYp&5XnLSQrA2c^EgC_Yfcsq$Bi{~Eyvy1
zg|!HOpXUnaG4+#+^YdMw?Qn%77cO=qLl<UMS1s5(#AEN(49uyE7`dWTKRuIGYo@)>
zA%n;iK`0I5V4KxtDW%+G-g<JStZjvE-`!OiGdC2wt?~=zaRi|P#`POgI7K<n1*5!T
zB&XiPa2<TVbO=C(VH>Wr@l1K#BfVyyp`{W8S53_x&237q%k;j2OK@)&3`1_L?@%AR
zmNPqZ;9(JjKk;MXJQ`$=p!b00%%fak_ip_-Y@5h^73aY__R#|`5?M%<$%sdlt9LI`
zJJ1cK;dzqE(6D;PYYT<~^qRP=2eF3H?1^NX$43rzXdW-b)sVE))9W`BN~rIs!V%77
z<;XH@;Jl$ik9bB@d@1N;?uF72uVO#;YE9YhB~Hp(k9)oF9+`)t&WbX^0^2+HDTO$F
zKtAOZy07`?qhCrMXJWrWZ?0qEjrLvK->vV-h@kf$-o6HbVN=Fqt<BNi-cXNY0uf{C
z%o<R@j637r?|A5}Dgow)+so{eM2IbO{W#gMybu`JTj=$k)S=-V>nH(ih$6TcLOFU=
zaWY6h`Stbn&)3)2zb1{c@f+d?nMXJ7LJdWdEZR-V>#`$x=5f5H<A$jw1MwLqDs*wy
z6VM7feTc+OoZZ#}*ZgclgrsI?;4PBIO;sshh@gc`Cfa?E$`u!`NWmf{MtxFz_NH?t
zi2-6P?jLdqi`*a=n~U7WNf9t=@1;e1(gn5%6ipa34D!f>*kUWI+)3`+>YauKT(qq2
zC;U$4u@-~rs1JsaLdz%2IErwL2*_qxlgZ$CV)K0T`OzQ8JHoxgamrFj(&d*beDvuH
zEtM*jo9C9#nu1md_mP?d=^2_3k6aI|?C}u0REqc19S@^9X;m<!vHXeEp3)t9Y~bv&
z41I~p7*P#=r@68!0XSL}HoU!QgGo>k)A3$ig|wA>I6BW`&hj!gMDte_UJeBT2r^N7
z-(dkg)1S`!-A^3?rPG!$cj>lfl}=GI!{{sH1m;qy-h{bO4o?yQlR#|0f<jNX(UkdI
z7yb<{c1<>}>)xfEPr47i_l;04_5{tvyD9L!{Rpq~Fvp=H2o(V{Fy(wL_s2kO>l$^2
zp8NBJx1wtAJwhW=BW#p3C}2oa#DE$+|9I;K5ePfuBfLgj?vocsWx{Zst_0ZlgRngS
z{!q)mGGMlo_@yrZtgY{LC~tv&c{E8GVMuMXr`(f@_B{x;Y|3-8vh+kez9p;(ozY?e
zWv;*_g@b(UGnQJchd$R2a6YqWnO&4T7Lk~dMMdM-nurYncE_yIII;AXjn5)E&kCsD
z<vUy(B;35{*h=yOcqf{BviNHu2hZypHEW`<N;}WxDUrl6>SO1(hZvCeQMRhSc}@zS
zy-9-N2}9mUCBHRJJe{eWJY?F5_FubMVX~~_-KXEg-UQ0_DJQS#XD*M3!eqOL`1Pc8
zbvEd(kifdkgjj6)3Ht?juiLT&(C<+shelyGL4@cNEp|@;C}{?OM;NC@lp;)%YnD_!
z1cPgKy)d3_Xr%-N0nUkwB&b~NqAbJqMAjeUoKiiT*sDXe0$QW>8f6vIWYMgO0orNU
zVM@feP|w?sdH39%`50Masri0UNPyw%pnfI(8+4>e`tEoSJYx(Uqn}%jg9W#XZvMU_
zOPk8xgMk5~ob$%TJMa#0yfre9P%`WYZwzcEUY6GSR_rxK>*KI$Rfx4)-D8ku749$3
zFkme77Hl}`2W(wx9g{??DuagC_IMA+(=h0&?FsM)VS51lt$5F$A_IVXNoLtU6O;7J
z=UlON4uw)$MZWPh2O*OG3fV1BXQa!KH6?V#n8b+rUoQ@yO4-*vAaAHYsN-WXhCtlI
zAgw%}!-W;YKUB}pz6YXgaLLu*Y_C2SL)kPu%a`G>5t|<V-2bKCM6fABD;oAobhWku
z&%nww)=Cq>PgynCiJtA}HdlT+MPT==&?5M!41<rQqNX$|nX>e?$veHA#l$;ym$mwW
zrw4_zcs9VUEE%`A=;xrg2|vIM#=^^jo<qMCPI^m4K;b_Gw5#@lGoAn#7MRsXWsMSO
zog-*vZki$voUd%Y=t9}|#d6YKCk=Al#^a1u^$HA)P~XYdweh2{Jpleh>wnWmvSv@X
z(JE`FR}W4wyqP6;%I;1iUCqRU7^~0}Jj+*L-Jhz?tMA4bKW(*gS$Zk;PIEyQDgNHE
zrX6F_%R<M-8+A`uw2eEzQ+L-ax9iwISNpRp!t~5wIb2zsM`hFgLk*9+!3FouX6^Ut
zH1UT`iIQ(>nvD$HQ?aYa!iy;bb-FT&;}h<Bg6X%r+eIE7%*7$B-S8kYi+UE9%qQS0
zjTLI&vtAl-&6Hr&`n!f)G%F-oQLvnfO%|s>H^Ti=4yYJR&l3ie143cY=1~6L>Z^a+
zd!pR@$<j|{X3&)Y<-cF2;EWgTWphRFANC{kjhvfgna89xkmt$12$>qi^=h!XLeLw>
z7M1IZ9m<|A3JHJ=HCwjatGx3Rx;7#ni|W^XJj0(Nti4LC=XW|lZ9=Wa)Mca~D7*-W
z!vn@xk8+0V*_sNLNGc1Q5Im>9E(kE^ot8eTcs52DTwh87_N$;0eck3Gdj1M3r^}Hm
zNPAttcd5K-{Y6RuU61+=URaG#h^Q&hbqH<OMc$v{`q}U`Qk=~glpGMhkUE&J(!dqa
zch+>S{)b0LkoHvC9?0v!z6ZYdhFw!V-YN&%3*ZmIRsj4t;E`HMl<Fbg_?qJAVx+A#
z-bPtX{Myo^+@nK}fe&HYt^6+GpYj}Mq$}`UYuB9$sjwAZL22XGt%-pYGzlS+$<h4`
zTks=TWN+Lsxfl@vs^b{yfyX4e8*%yRT|$&)_@^r(y1Fy&7X87(u1Vuq8CTAYc_XxI
zEen+<e>Vs|s*i+q#5Fl8A){yjtbpSa(arULxt79k<Ox;qP;k}sNl2=v3CW`PNfPW?
zh;zpzpA=phwOUng>tlB3bllmo$Altu;Px5`zFoeIm0BUfu#OY1<zDsC^*WwjpAI(1
zJ#<Q5Mg3-DzHNKS5VcN-#zGHyO}Pt^TH8?JI<O@3n8?O}PO%xpq-XsyCW*94oh+SX
zN($%v>Zy=DG#=Ut#Ch&lP}bBv1-KkL`;OA5Gw#e0MtlIjCR!lJ5yBRo6V`U6L}_hH
z;Sm{kf|;|F%f2R~Lqh?c_xb|&M&334Z`Lk?c*+_f?)LIay%0e0m)#aN;I0BV3ZM1P
zGtn?8n|Uh3bx5~;n^)VGr9D@WewZIYu5V=Mz`4VD_N@f?1F%B?{t(N*OTdH!nk1jT
zOK$(T1YC>N_(XIDXbn@Au}|Zdr1~Ri(L050hUFR~KN9ok|DiQshYNJVMZI~mWy9xj
z1SEHHKo>>L@E*CI(#MF+Hv`q{)juHb8GBP=8%A9R?yp^PX=6qVh%WfxKd|g`QToRf
zw_Nj1U*JDe0V*XTE2rus$`j7Qih?22bQXhKHd*ux_|F#dH@>Eg)w_Cj&e7NDd(wS$
zc*o%SoY;<v$InRZz1;3j=ZXFwU3(+o6&1%2UegPHgj@z!bvd!GDD;DA4K3du@mU>z
ziT4J!XA7q=0)rO*qjP7GxcGbPpcd-H`v>pw^g2KAY{7L1w-(w<jgI#J>T|6lG0Olc
zVqtCl3?b?@gyf#HINqD~JInix3N#(Yvhee@+yCr1)9aO|yw>{}JjVBT-ks@r>chBv
zf6WgxgEsz3SBSAk#s<5W6r_&k5zxC(9>>4+JQy_81-x%*DK@=%p}pUm6!164Rsj4V
zZvW01_^*PP9b_T2qJ@@duS%_*{3hHJOMWeOas)}Xq)xKAbFd(L%HtD@xqI)sa8vtz
zEKXU=ac)1@1+ia{yxWd(e)u>O_0^99tK=;W|BIIbbkUd~Nivs5^=0K(=BmYMZOZDE
z;QKbjC;I*PZA<g6?!n35HfXxYb0(X2qcv<cWMdlGf3ul1z7Z?{)Gwm3b!cA~K9zv3
zblkl@$4hB2k9l?od%b#oGq#@VZ}iD^|FV!jz-ZPOy{%forQP}Qb3_2B>vJD+aeB+z
z?AEycGazproek&ivFmyQXrr8S*<cUe6#(`5Q)Q;}JSX?>TM6(RV=DmuRFsw5lQwf9
zKE=;dw*T6<{=}X!3j=Un_|FRW6Zj}`((5;#k$%v7KC*CeA1=1{r^(>1;)Ab!3N5?H
zGvAC4DkZ-a-_()6oCxmj^o?#EH@L04oBZ{*>y~-{+Q$d_<_As9-v*MiKlXOt*r+op
z1;5i{^Otysp28_LcU;>qo(ea94{Q#AKf(HM+*AkFOYKGruCCF%p;K7FGxX2OgJ2m^
zTxAk(nOVxb7+6kGcOt!=fM~*Z8uQ;>B9Yiic2glTBCkh?xfAHVlKfr7tAop!OHQa`
za4DV=Lqo2BykjRfx@rHo7mNtf?Mcmd-~l};Y)oDGFND#w;}e8BK370j@(8W~jw^SR
zK$QMYJNq2P4&!1=FBpO1%60pQ?=3g=6h5UpIGzW|_?-B1(Laxa0X!KhiZH2F&~&49
z&ND`=Y~J$vI8dq{>C#eG`3X$3V^8!)#E}t_L}pOo7Br=4vZ>yWcxhj<@H>CT<_rkM
zcwY6$O@)hl=K`R)E~-oZyoJe-I5T1N{3O+ySr6P)n7wR0)%OEvnXg$otqZ@*9Z-2r
zDi2ZaLHI1=ukT&r()A5{57X1N5E`szW`98YfrXA+=5H8rM(Arydf`5wkb8Dy-Sv2a
zWZm){abQH;3L@<zhFxgS4*P0|<Mb}tG`%?o(9u7|<6?s3@`~{Pa`|aOf)#nrTWb)=
zJ=4C^x{vYx@)9|h)h!IRwN1a;;mvhl>3oT4Ku1vhu=xOfQ)~smZ;I#h@h*!jyEdX1
zbN%E_mcS-!Pf7P@-Vjh+S0?m=FoTOzDR)fx6ETL**Rzq4srd7gJ1R*Kcf^^s%82##
z(oW46u&JH&qG%Y9@tlgm(1d)vxfI2c4FE9Fdqih~Y>O5a`p!EHNfvia2s!$|zK_^H
z82@a9)zP9Kz30boD)k-hkSwsOUr<P4-5SKvF&nSCUuai@jWmxFJ$8}ghwejUN>S{B
zVtvkt8j)O%zH7)~(fUl~WiA`EW1J?0W4ccBScCo~0fje8L0ASJ$N5IQ_qg%GFoX7&
z=Bx6x)umgsE9BbyVa6>ypQl`<U)2;g8WGvzonZi%2<H-rxt_h7I<s{<F+~XG5x|M8
zDR3Nx5+oes=U`1VDF5I(ofegKYsm&!j30WRkN9P!q$y)4;{rH~p@YF|+)q)gaw1Un
z@}(dXE}|w{^d|8Qp>WT(3Y_#Hn@W2INkmWYN*6v;At`OMGMQENGHnAW14q~5d?x&c
zCRNJxF(G7*_(P)D`e{xC8mh47M`IHEEE<pWR~S2}j<-B^wC_=8L{jQytl?ubB*Y8-
zco$JBtsMj;j@A3}s_4|?P#KGe$WhOmYB@pUUr1_;N(bJ5fYME^izma^wi4hs#P8xC
zvjOOa%AEMhB^GO7AtoRN!t2BORegumi!5K47D}9pFRsOsdknT|m)CfIF%DxNVd6%E
z2@4UUk?1t3&e@9-_VYn;V9tVk2*lAw;b@nod4C3#<j2#<djvpkS;rkZZL*^+TD@c-
z_sEN)?^H!uzE8f-d=(HR*^^f1Qg7~52!$w3V`^fanBBQq%eWIf%e5bLT;}U!Ol-yh
z=mF;<PvN4b3jO}~_r4>_3?S^6ZeN4OB?DaBUsuz!5>3f6<$v*k)tdS^yx+izhS?Vi
zq6`^>wPXdl9#<LV+{$EQf#Xd(m)@5N%ld(^?DOVG4zhsuhdIB7m0vsR3!#98bwMZ}
z;csMNrhbQ^OrMXvf>9h$SBMGnIV7PQqWqpfZP_}=tVN30_H^7oRrx7u8;To0yKWDz
zqc#tD01&v(amb3rGb@B-fO<cuwaSxSqWi9lCr|`^0v?&HSZ`PexBEELL^M3a9-u#a
z&lpe@1;_!w_oKB`rITES-{zYS;5Wlo0Q`n-|8LjroC{!CTLEmQudErpx;ggk+hxiD
z(DFZAc?T@>E{p-VZ*V<#Q(mO;8of9Mdos43BuxJXiU7vD&ZH*H<dkgl^PJxx&2FGd
zk8w_V_m(|J@CXr4rh*Y7^|%VG{Jn_o_rOC#d3?Cf;#mDTT^VkyyzB9mrzQ;hj^6!+
zO^{AAm~Gz7LrvVr89UnbpEp#fBrw%X3Z03fv`aY705P5b>g0mJ>!+XkrWHE8&*0`@
zQ3fNRZ4GV*z4aX+DjGERsQT18Du(SfMFqX(&nxRo<f=YVb~wjEpK*(5?*M^ba;BNc
zJ8gx4jO#RA2yXA<G8^hPjT7=7Wqi<mQ0Bp<t_7mG8{^ZpVrwQAfAI!#kn0X<`;90A
zfQt)CtgFO<l&R=67tXBG0LB%++c^GA_-+DdbMiPaSCTiu5mE|$Ve7JCjmy|dfZrZF
z1mHJA)w;L%JkHUI$#VU8qIy}hVh<)D+UOS7+V&JG?>1{UFDz<zyS!@m@*!3kU)|kq
z7ubchHu4Cd?<n7>@B!Cd9o@r^%gcmM8fRtkcU)`5eFoh>Y`;T`euQpJG~F~m04f1c
zn8p3pWL+G`ui_4)e8r)AAGsSRWqEuCRu1j1OvkztpmTpvEa~?xi>2g`Y7A&0A=?D`
zp#n0spp1W3Ap<8sZOEySAXdNkMcZH=X^QwlaB~jkG{cSYh{TV2H~c2gsrr<Y04n_0
zB|TEsP~5B2Xe3~ib7$IgLbt>B)l>Iie6d)M?VW@rRcJ-1ZPVdRg(T>VMJkgxbBLVs
zM%gy^ENSb2r@$Sn+UnXkbZu4~4!$A5_G#3trh3I?(&wpG15IVxdrrmxV26$4tey4S
z<<U@MB5hmGh9Dd<st3)yAj$se!;<t~mfzs;(*zd<DHjKO0xF}ts4xuFQ+SeR0C^mG
z@WKKPOtl#)n_JpV4KG}P%6q9%#pfH9tLX9{mhsM;Y#d*zkDPJn?N@?uI4URRXn0-<
zkz4kv`JB_l#y4Us0DdPx%0Ceos|UBE9cLi|g!nMlr_DK<Y{`-|wM{z2)bcao#)4w)
zSm-#cg?BWFBw^B<<mpY*WI38hDTb}b&?|wRErztAA&UqW>hLu6Vq=QD0K67RD{>^*
zp!+4BN1>7}%U5ux@b4&Xy1Ysoy2*Gza3{5)cXES6ZB>;j?J8QJTOcZ(YgG$GR#04s
zr2+zvNnx`OC2v#EKihVa;~)yVFdJhLry8{BpuI(1k>E+s6TA!5)@ADhmXb1xbhuJ&
z1U|=8lP1Az_cC5NZTylOJM%C!;<!?xjak{Bst)m4ZFjl;czl()i?~nJamKU`Q}bu2
zjj&gbvss?KpA;A?s1FX3w|YR5$uWOP>sXB07h?t2C^Z)nhlU$-+{URPCDZ~9%$53h
zhMdoBkx((Z0e?JKpLY!_v5+65d_clK*e95aiA$lks<!mf9Kd}5dj}JOqx!a#;jk+r
z9qdmol;-VP`km!@-MO&NHG-F+7zd6&wkJjZMf^8vye#$4Btak=4a7V(Sf>RyQ1cY?
z_IIvFpc57s_F14bcS$wD1CJC1Wsj;n^E^R+ng~_*jp7_~y<*gQHypdV4rlKzpwH<s
zrt1=0Yur<|J-bqHlLAdB7H}-Xx~Y`~g7?PRo2=5;Duv_b1Ncp_LjZmsq%;4VD;#Zz
z`htts>Kl;DdE`#!-Z6>W<rvCu(jI;)S8t!22h*ex)^p)slm8u?T#p5NW^(3m0WJJD
zkAYc(+nq43dVw3HzX)qT<tF4Vyi3LtS;Z(CBC|wmPv@>TBdQJBKg#CdmFD=scT60o
zlwgq+Uu>#qGjxMn<{fol+X_o_V6W$m5nnLw8Q}pVjP%+=M?DnY7|)5rG&^Kt6~mNl
z`<)gf&j|A;Ze>C<0Hi!q+7idy+)1)L&lo<Ar`~hS=PX#xybGG6<5zB+&M2{=e0mKE
zU1H1xzh3lV{k$^g(cU3#TlHR;QA2BBa^onboHiTWA|%^a&A`-ea9zyrbni&k?<j8G
z=d4j<?E}CNw9LaGLh5bigjjr>>jc)Sv8N-D*c^Y4wxGX(K(CQ`4)W511~ncVa$kbi
zxLGvR+^eTgZ)HLw;iCNSVe<j}2G|OK-vBJe(V#}xo=m_sakK4mQ3N!HI8i);4SkvK
z`eY<503e)vRK9#hq;Ma6ouAM0o7lcVGbptG<Mpopgw=^ZwZAAl_Kj81hJ)+AXhCN(
z*8Bk(KLBmQ?&=kayIWDPq~&Jnz_od0kKnini>wy#Pj9erL%<8|g?C%KR~{Bpd@GFH
z44Vt>Iq;M6AxE*XzSX5#<LWtz>4=|=_C7^!F_tVZZW%X2wZBL?;0dhNLKX<KlbaxN
zgZ0K=-^(4W*LViQCT>Jj8HUkB%F(+Xq>T}Jp9?W8AafU<26z+nLuw8L!7@^q(K)Vj
zq_g?1Ft)2oG$wEy{1`EYva)ltPG&UFApzbks)f|Kt<k}r-~ebufNOJPbrlaS$hH#x
z$6J&r-aqq{YB)msD7=r4d22!-aC#|XSFO7)l5sNHYtUL@_G?Z%aHa-_z|R~T?MGBU
z-nk~aO<}?lj!+I&5`}$dJ=5|(*XwcLG=+rQ^7zh_>uaS>&YSFK4%=9r+e&~Rj;#RL
zaN$h@w-d|U4bPSJM`6@<N=b0!Q=TNSTgDB0fK^!S{^wmmBI|L6%i$2eq9g9u%-q=>
z&tF7nH;vfJ5%!31Ik<3Zl}_%r!h}reA{<f|CGG^b2s(cXyrx(t0Q)s-|99*;ZV?7Q
zsAT<7m{pAa<h|l2aN+09%z`CkC-FX98O_m7-q@=){%C9tfZu@izx*9oo(?OE5OyNB
zAkTZ1VwoE8&sz|a`J^J^`g)M>AwmjPgsDX`@+=0KW5@1}H((7b{oYsio?w@)qYdN+
zONQdxsk^(uHW#gd)nD|*!zcg2SlCh6!AyK1Hvz^gPtz<Y(j79!5UJlF{?3q~U3pK+
zSRqHa80d;uKH<26@itWJ2>uP}C8ND(1R;;Z;UUW2H*}VuNv~4EF-H+#%YjuUa9K><
zlmU<I_>un7v|Sq?ii`|HZ=#K?AomO`mG!afeT(k{EA)Dtan^xho6hhsc>1=;nu%ow
zeQz1ZEBg8a)?5{GWO@)h(lkd3wHu|kqI+qjD9&-(a|#JnL$~P%{BG>a6HWA;<1mLE
zNxUxG4L~aZhhQynb`rfz)K=!DkjLG<L^8MyajxP3xI*$PX-VYyl~4hF;cJ5P#DC1E
zaJ46n9{SCE9&n`gEok0M$i{C%J=uC}+uU#o0ld8g)sJ2@;a&nga)@_m#`(_+VRJ}_
zNAH5SKb(RZ)K8Hvw?gw}m1C1(0N#|NIXGxfk85GM2kc2`kMcxPLUj*W&tN@u9xQ6(
zu<f5;|9ri^{x!SJ#;?O)qO$zGh5vit3;+GJT(L>(&`C#{Qa}kM->&0rlQ)VC{O!u_
zYm}A;-L5jwrnBv`YV$qL>4MvWIU|@y?w0NpFIJWd+TK`>Tc{)IuzUC$SS}L^F{=RS
zQ8wcgR*~Rugw{xa7Z+u<%%QYX(2m;WG28geq_h$v59-sI0Swq5d@*ejZBo70SmaEm
z&yb*;1$$Y+F*GaD-!XqZj6f7>Ty>#Gyjh~K0#PTo#Ro;ih5qxti+Tc&Xz@GUCZYdI
zVO;zbS7~W6H%@1~G_vNEu{2ql#+oNce*IuL3Mw7;g2M(;55b8Wt%Eab8xcNwLT8y*
zJ=bcDU@f6gq$<E%9GCQ7=y&78q(`&-6{9y?uX{paJv){_(I=EPGnbE)lda6vfu?tl
z(LJV845CMrGj2Rf{b=nI)u2KF!UX&!5eyblr~#cn{`VedusZGWrIi31KN8ym;HQFi
zPoYIZa!w!aL2tBFB2#E7j%JvLwP>rfTbk*YtY^a7;%smqSJ;gw$*M}~ofcz<>6R{8
z|7X}=bxgRI2|=8Nw25eW@%F`hz1`Yoi@R8$-%c7pN?qq@^YK}h+-0*k<4g(jQtZt1
zU$^ZmS>!FO+JG*USOp1<1M-Mr8yc|0_j<<0uFN99!jfVNuIq0b%eWcS*Mn7uA}YOx
zr*xR24T*Tp48NAriab1Y2qP%k#Q4Q>JXG+0=CSlc^5)ZJ`d51r55|%hSfDT~MjbOw
z95E>pSeYj`M@SxMylLoCRy^3}CWVdUd-$41RyH)mtj>w3RPEOk;&j;6(tBBct?ob0
zq|p^?>^Vd4J!NqK<y*M~=1ojF`*1A&oV1}KvTvo9Nxktt`bd))(mLQN+;~pASKvE6
z|2fx`woCZE`c(9mjP0y8ZS9^34(+x}N^jOHwBB{d?9liiJftY5Il{mKf9Klb&cIpy
zxE`t$bx6eKr&H`8i+@??A1y-$AnXe>?fEk-dlY1JQ^7kU_9R~Y-Wrs>^Jlt?p8I7v
z2wZQ*wvVB6&sUP>@dfjJpZ?ugeqL*I|7i{__>9-<w79s(N2RrA#E^TBmeRN>0#J!g
z?-1W~R&f)oFMRy@+MWPE5L*H8Q_+Mtp3KE2rw`y#v>3DcW|KBu&6l-X#p=xDFQP_>
z1(2I0&op%_&>o}JLz7o`8q|}Au|8c8?xO4NcKv7fW<2;W{~|YsnYOh7_p@fQ7uPxy
z?_e)w7S{4U^i6QQ>2*HO=8=xDBwxgq>#=Lu_*#SV%0Bw-X>1)_3w4JQXT?ydbwtR^
zpu1c}S;7XaYw*Gq*b1iG^T5agRW>-ss_o~NPg9Sf%lZs1SZmB%Ta=tq<Kl(4K(bUJ
z(3q5%+%HmL2f8?EdF1y6j+yag=YsczbeOBxM7YAPU4~lyBo8WAV&ht@rzJgKI$<p)
zv_=W$Z^iJ>pVI+If3$)@72xY1<9P;;FL)}|HShQ|*B^I>uyuog_y%DW@w(w<TA)f<
zA*0NSqcn0@51AJtsl&{pfxvp_xLLvIPSKhwyr-N>!nHz#TdMJpU9S|E*eBjzL8KK7
zo<%%IAT$<%^O!@Ap;JO9<FKbIdqdOCK{`j11t);LE(a<BieauDulsWKU0v6|$hne)
zf8pBC@uG4siDNfP(`eGG;`te&|G;xDG=Mw>Kb7HO<2<$k;D@^Y>v*f4o4S>eK5;M^
z$W0XQ#Mqjpt;>$U>S!O?veng$?YXQaRk#X5UBkSrS5Y>qzEI;9o+v0LHu9_>4Lu=J
zo+u%ai{rToxSJ*x08tAA6FixElEt`xvFBHWlryQS+Qnvrt?To8DZHm^?GcS5(Y040
zKL(f3UNO2KmF2UPbrmmz+`;WZ^?0%#98jNUr9?PFjHY9#$6%3W1Mt&sR42S;yW*@{
zTkyMnz9WY>TZ!pcdu=NO_#XQzg#+ihtWSGmww{%illn}-GpMn|DeKHe&89{D9Z-7>
zq!a4Co}^tUsOp%AG9p-kpU>3-p)ORM5o4{bJz|1|5CQDY<9Op|Nd=kXouKi8_wrc1
zz2gbKQy|rlLbtaDbs;i>7BKbLi1=oX^~e)UQ88ZoL~GsV!UQbe%yWXD#P{Sl>%nnW
zXdMYhv$5o*EWPut&Yv2Z4{-e=1zZA8DTMEU;Nk$q8$QEfQRizC#mCw9q?CU`5wt3N
zzJ&E!asa63!ps+Xp2Bt7>=(TC4aX*ixH*rgx)JW%3!rxhwSf)~jTA=NxLfHPQUbKB
z0Gkis2jNGDt^JL7JRbkiq=2K5?#Y;1v@C;`rlPtMSo`BiynlnYbb6jYvB)=fLm?vI
zL=N%Ggh%Rv=cIj!h^n9-Ps{H=udE}|@c%NXcuDPR;dc9?;>b8>_{K>-_jU4ks?8tN
z7H;r@dfy9e5h>d42zd?f=?eRa>%hcw%)hltF}fOW91Ycx8%~4^<E`c~ziFku7(4qE
z!ap5_&8hLGpl@-CM0%IA7Q#)g9=qjQqaAQA_9{yYP9op}_)ZMFHBjzHGtSI=9(n?t
zfVt9nuoZ$@hNJKl?G(+O7p>0eBV{QF>FE}l(jQZk?WBs$aNqdV_?{f}*Lxmgc@Mk*
zhP*NdqHgr8`_FUfZ7-*n_QKj`)_bonK#?5PMC~rZL)j*m!~iW|RiVNp(3=n7M`3#a
z{3H|))c3y$4V`9pfB0HDVRUNOba&ZaL%&t*zU9UFyD_=|w2UH&SD2r6g0!rZYa36F
z8_$@=7uRk-Hagh^G=ZJ1L;82Ci5cC$>S;E0&;jQb^YQ*}d1W$-T*37H&MF3Gw7^4)
zJ=MjY>@WDPEHW*2I*Yd?mgJH~5ppP_phEAN(9jdPj<V=#&kHJ#?#XUH2No0Kg_F2=
ziqGf{JxRccd6avr))p+R^tI6SO;ZpD$m7`$DTjkjosPv4tyNwdb<$Eb)~Jk{`!rj!
zj6;vDG%S$nXHjHJ*7C2^Poo%R6uf7gmQK!v_Qw5fG4&sh56S>+FN|I0u?IU_Q5MEQ
zUB9dVQrns4J+H0h2;}%y^g`p)bxjoN2zsYleW{XETZgm0BMWppKiwU(UIjWdEh?{n
zi+W#0JK^Bam$kizvGkhym4e!_0-HyKm}5^sLH-E(4dyWeuPU);z_x8(0-BHGiq*N2
z*hxp3scY2*ynZ<zfAl$OQ#UL_$A2TB&Fh%z?*i=u1sR~4e=$6OLTvOt(c6Q(J?}Ex
zFl%d1<A>69);^BC(?(txCS*f>@1aky<`79GeOK_-f2vo6Ai`eS)X+BlhHTN(8$kFI
zkI5ulXSgp6`bM;^F4MnnPk<kStpNBz5M(dSh1(-EGQvMi+%(}=$-Bj@z9o?vPbd&l
zfRhH2#tG>*T5zb2dY11oD^NZo_wdfbS|<}vYUskE<0noP=C}9An<Cf1AO_JhG;w^k
zw^+7o-`T_qb%laXD<~J%`YyOas{?v>))=!F<HJ<vNY^}ScZX|%LOR^~V^_^`6y9I4
zCW1hR!XFc8I-49(2W>``kQpk+cwCZl4ZdSBM-Vj%Blr!pPkSjZl1N5Gw^(SU@j^}t
z1eD-S;jd)TulJ?6=MoPHW3E1L4XME}Cs#p<0t*1+{Q25s)5RN7XRa!9m=^ZcI2S?(
z9^ieLytmxE_uH{>IP29CO=W}2FS)|%x?VO7Aid6=lctf8p`Zc^Nq*Of05F)_Xv`_c
zTCt8v6@lstes9V{)q}!APHozw-;By<BA=BK#d>-ydlS0A9#4tn=KIsz)NA8HpL6Js
zQie7`f{g{d_vqy{Nn`XJMp&s6YzyJ2pDA2JC;`;mt=HzTZM^R|7hMfYEX!EUq*4`~
z+6$q+Czx%;n=^?7Q1_QBlqnt*+Ph_O{X$@*rHT46*an0Gp(a9g)=u%AH6-t^*D)sB
zcuIL^0HTjxa=*yrv{|gbR*I|rrY<uJqo5}QLba>JM#TZmjo2r80m85iP{4@iauhy%
z+*9(wdNm3Gu*&{&Bn_9?_*vK?06ztfumAH(@sTB7ZfN4ojkwO0U%)MJAS3c!ZW{1X
zo0}H=mVxqE_-*4BzY$ku_nT$^b1t-GnI5|b(y6rG0AS!qK^slCAI&BxuB~qguDjle
z%TIZ1%(d;EsJH1ibCUzW9`12rQJV2y9Tk~%fyKR;b#(RnCj4D@Z;*b%ek*xB&8CzT
zXmghjZbl<KsmL0w#k0)uv&eLSQz^sl#?|+xY3yfyZ6ruUbzTP<H<Ht;tIuF$-Tet0
z<-&7v;&*!98U76xo<$iOJO$61H(_)2|0G_&Xr5dQr|=ZlkDsx_T*73t?$m%k09yg@
zGw>fg@*Hn5T8Yu(Y%tyY$u6mA;FmtJeE~1G3f>UouGuzDdLuUjv3XL#dhz1Wgo@X-
z_)NC!C^z#FO4A(LYmEOVVAw=7RX?9!4{}3yNzQ6Vl;!bY%*A^v;-$#Sa{QyTJmcSU
zQ9xatNmkrq^{pl>HNvZ+9!MW?Mk$ah*=CXNkn!x}agZfBPu;vnKBZarV)$Ppj{*2!
zjyl%J`b}f44uK<|w~@%Cr;O9&WF^en^Qug;rcMpY6-#BHgSldT1l^gJX@x9h-)4!?
z4lC5ZT2A+i3$UjZuUk$}2AxaF8F0PnVFQt+GkP9o6qicr?ip}#H?_(qaH20=hWGZ1
zUD8Ar&)U7{_}SNpo8FSw%0kms-HOrpAkNyW_0O(+t`#;ILwHU33!!f_vHc?+2YeR(
z{GJs0Y3v`jKwcB2^I!GA@Y->PUm&}l;f?3)@tkMZM~*fcy<_Z^R=#w9GPc<3W+o2~
zR+!DLbTg@?m$7bC*h+w3jI99p_4qINQ!)o*9$W_HR~F^eXCb6dSU%NVb){Zx+A47j
z0ynJRZ9$outJ<o6Ox)qb2rjFp1Sv-7s}@d;tKPi0qFwJ|7j)-ZUc^D$!y2D+{W-OO
zdubK#M)Vxnd#XY&=<_=`C$59=ni&hpDS-Q{hdKG9l}cR64;SwtVO7%4BCm2(2LATa
zhq8;@y)j0+ot<h%8cY6J-Jg6_>$i|6!##+~Jw5Bn7<2ktf8U4QZF)3~bThsapcsxA
zq-9&qsn<q|fUX;jI#|u0=}RNW(#krfl_})qB887%PY^i7u^*V&6S(ff`uKaogD`%K
zWt8XE_xwa=p@zGAlHZ}AViQCEzCk0xO0f1v?G0xj_I|E5HmfVX3A*Li4_`kM-g8~p
z|Hfe&bW;6Q<wu0j+4!3on<L=91H<}cnY1&v65tnNa{&Ahl=LWXA|~q=WIT^?mYO`L
zh0aL<vsnu97_XU>zZ`;6d9JC_jJt31VwHRS@2{68!WuxPd<!Ou8S<;;6h0GdS%VFQ
zA%F1;$*;~aY0;;)>l3``2PndE(b|iHUIDVS7;QaqOz6et{8pzh=2E_0y&9B0l!QyC
z?-Ow~Kpd^<5gH39%sc%M_2t8f&nvg0^YGqt%&J*jV=oICm&>ATyQDprB2i*SHYBl9
z^;S~Fgg{dioE6|Xtq&crLM9F`U1c<^j^`sqlp<29KOKI*CUX?R92KGi?MgMzQH^Hv
zrQ$O^<&Mn$(QA8n{dtr-ep@zAM18YJ>c?Y`$;g}wv)uOjSzzv^`5DuRb!%1Ij5^#S
zI2Ndkn;AfJ+dzD?nBE{JoTs*kr-9D3I9VE3LYbfl=5#M<qF8PcKHgWZ+m$WT=}vVS
zejov>B&L4oas3D#%Wu{i-G#b^amYaB`dukUkb?kYnxUBF$Z5TgDI1-%vZWbrP{vfs
zfP=#%uJ0DscxRtQDBK!24?d!?WMj?sXUzp+$mHl_!Y8CTs$A}e#=kMLEQ@tLBIFCa
zK23itc7fi98ZS8F7x4Psgj&dXtQT|2!8(FFK-`zn`jgd%JQ11$qTdf~dUaf(cWHUI
zh<j{8<6g5g0NJUT7d;YUJ~6C+<MY@GfL{yNehG$uwq${(4+k_2Wb*N^yV!1J2E9NR
z?r8VZ7v`!#$3+>hD=7*3wa&(vj`0SJHiWR@TEXn*$ygwXNb9w7{h@((&b9xJo`p$?
z>X&k?$|#K>PPM&miijwOnRg*?ve5DpVIQm(nT3ERdMdy*;>L{n%$f8%iHjm#Jm4+F
zhS8{9cC@L=r>pM78>?yJm=VcSgI*AY;Gm8PVZad*4Kb6vk-uQ0AnK9R2@3$c2Q-F=
z2up0xkIn9}f~zLbP1M@OEWjrPOmCy>jTL_bWl0|W`*yPjjilN<&7(p}clK%~YV2)l
z1j2GSB5st5AeW5Gdr#DSKu@Q$fglOkf%IKR%?=3mLkwg?_cRej;#`X3x5gN7lmE-t
zzgS{80FNsqaRXOYA-D+HqxCwx`>Nv5E63B5Vt<yoPLXvHfmgj}>}5mk;yE7IzEN!#
z;IvRGlx~s2XsjI21_mv3mvc&>j7W&}ykyw_VGIhvl|Rtj+`<yIz=CsOD<c;#_45M-
zbJ*sySr-=eC^2y@7YLuv+w+y<x?gxZ5bPs>G|}5@pgVuxI6}RF5bMo_ScmMtR+ff%
zn+Lrt2Leo3>uxaS(3CZ2##xk+AnkjcUqndfU=!TRM|(xytH3yEXNLVQAFpS0pzm}Y
zdJ`Oc6Q&MO9P~^-N|8L+M_3YKft?lL7vZNm+WZYLt}m|3u-X8Ta9BQrahP2%xh@AS
z<x3X|131cOm;++8ja~cz_q>fS<z_jwZkp@cHICmjxpR7tCJZ0g-cAUBXe&>fkA>m8
zr$HC*#8HOH9pGkJ2R#Obk_~TPJm&(uBI`%h+-Dsu-D)p0G9w&<F`*pe6aJ<odzHOz
ztX0YW^J4V;O^~iJd5~#mmqej5*R8h7MEF+)!4-WL{avlCVK<>&u%z-5tP~?9r*`+A
zn4;Ww#Ixi;dGD9F^G|aDp5C0|F#IF}*YzmgHjO={cyAOoK)_&52N3kCuqUeEYh71a
zjF;8(tmdf65D|Wg9~?J+8Af+mwOXbO&zmQm6=BZQd>pv>H{pbjT=*Ag3TI&ze$%eP
zUe}LXrD}#cM*BXe-m{$~ub}!xH-cNAJJz_pY`*zh*B^d}<P>wE_;ZVB+f3O%0Z%EQ
zyNDEfqDWInTLrn#8jm}Ust1~TKEhQ`isAg4#`LdAN2o)QC)B*8IivKv6NDo5WBE>;
z6mn5mfXC%941ao$z4&G#o(4_2LjisPwgTXXAQJe{wF);(Xv_yAO1EV2-Z!ym#1G?I
zHS=0{w{6lkd7uUMEPFD^E!mtyDaTGj#d*H7$=#di&7_LkmiE6v-=v!I6JT9{yoq1f
zo6#f9$&?G^q?M)I_eM!4;AqIKhZ<d$lmfg-4T<Nx^3EnN6DUJ{+WXhf`a|JAGK69G
zdan}9Yo2Q>9x~*qjzUFjh<G0rgnMYq@<ccj_EFvET5IWdBAfH>6m0aGWvq!>`2~G2
zia#|LdVL-@trOfHZaKJKJPVdvZ7;{tg|GNb`;VM*!WwkwMnr|;w7n7j6FFm6z|i-^
zZ&W#18if~|=!)n;>S&YoHqRQ4BM+?mg3T}XUh<9?juh8(&|c&AHHQ({y@{7!UMO0E
z4$=LYx$Jvo>H)71?k%lhBD}8O+>E*B>^`j+c0Q}^G=!;0L|vX?z0PpIt@nzxa9B^q
zN27;?=zp`fo8K!8*Q&YcWeS(~<{P(QhXDK<_}VUE=#?8*FFub@T_t<&TwPaJ3Iv29
zdeaNBw^=@IRS6UrQ(Y}F;u^o<uXKU0hx<9#nGC(!Gi&CoRVSi8AQ!L5-MC%LZr({e
zvRH(P4}wn9V@7)=tW)(hTiM3HvfV4OCLe#EEk<0s&CR+m-x(qXuKf(r#*W3mxdhXj
zR)<#)ZLyoDw~Skd`;9hWI+TF-z~HsOV^RF9=zVe;*)-;4M<g4ek+qX!|6X1=jTaBl
z!E+rcJHg{6+~{}~F4A@pBerAqM{5`lCDkW%o_>>Vd#)Dy35h>rYKbuxH>1&}YQ`Ow
z=S>*5Ca?C(3I{^)SM5V<4wc~;=4_q<CAaI!n$4vSPlG9s9zn->p}1(Bg}LRIxMdoI
zdu)%B)qDaTxP-cI%^^PsHQ;qs!no<1H9>X=$LOnmid@m*!u}D$130ve!*TljSGx@A
zgLeyWfgvOG_w_h<LynX6h3O$j%DRsYGO!9GIUjS{fO1>Mf@2wRpVCdLtP>g)jcpk+
zVaHP_lrO;JbZR%^`(b#Zz8`v(7&v1Ty)|*J`c=8&Mc?tmtk*+pel^U|d}mvQ)`^iv
zh6r0U*C)IXC_@YsL1EuVcwXx(O`PgrhXQ;vwgTY0@od7s8UYyh-wya%T~C-};iMlc
z+HqJ|J29ZQNu$b?kmFfTFg{Hv8R$V(?AprCcQmgg8vSQtK`u-7(+Z>Is!?oL2JREJ
ziD}2WFxUPH2}CJuB1>1>37aqgj#+)ESWDafuFIc_GsM5EUI!*-KWfv+B0LgK7UMK|
z^G?baAj7m)ddY`yKrg&P5b?$g3V;qVnW)nd{0pg>`U$uPuI`w&kK|8AN%80p`mEZe
z93Hqu^4>HE9njS#3N(-Rp>L%9S3<-jHbI_`5z}b^k9)z8(Xk;$TS4t{?E8odK=7}?
zf4iWi-#l$;N|a<PQ<I+Ku$q~asKq+j-Jy9_jV={0DISJ74V0Ba2yOEf3N}&PF$s`l
z{&HQ7mEg}xIGBf(T<NZDY{BFAEaNQ!;T{EV)z)$N4R{M=bD!QgUlf*bd{GyB#(^PG
z92{2%#C`Z)x@-`i?o`#{$nCzOhD6p{-$ZCuep3xOE8IW@vzll1l~O$NX=gsu<5y#F
zz1+O?kI1K>c{b>?3FlNHqn;3m?){i1SSWn5a6~4ig*g@0QCur=4b_+yBq!FbGx7eN
zbg+FNjr9biuxCX8C;?i5`bQsc2)P#Uyf6gxeIbusoamhO3XggBboYsfD|_X6Y$d=q
zV*6lxZ)?YKE)avKk54OjQF{(O8(Da}Qoz5#@V3cZ@j0wdK;7He3HU#OVa(KQJ(1=d
z?lWD{^!=7Eo5FXeaI81I_nu*M>+wN?U(!F0vAJFPfkE@Brk`>WIB|0lRA(+dZ`>N-
z#2B8Miy=Pi{fj#D!X7QjOlFX~@JkZYQTbU6YslPcSL!WsDwbqZmg$!L%SqxhoTzuk
z#TKpd-vPaD>bnY}L1#XW=F|^Q6f)j$VQk$lEW!M9#p*u;@15}Yspzrfaqrq6j0^if
z@m+nhZ@RyLM5B+r4oAkA!Ra0<rSA*M07v=vE5g?rHXpz@VJiTB2m~`PNoty_PkLuH
zZ9KS|3Ly`obOr-?ZE}8mJ?+YUrXnBBZO)C8qur@~Yr*30Yk<L}4=y&jn=c{Poc6Yv
zi=GmkFVU^o&Dm;lr=HC56o}H54L6jn-#&uXoZ32;k`AjSm{K}v=w({8#%NJgo&u-2
z9K?O>J&$?fc>eNNyia7c58Q)uHeOkLFgEm9s>e(vc!9Ep*<)@S1=i)+I9R@Y5z=sy
z^u0NHojy8&T{ICw_w&8_Ig%Bx#!(uan95uQ4tq083)!r8(FhM$e`K?2hJva$CKooZ
zXO*J5|Dxvi*0bp*QDFqD@Ywss9-~cmGXmu(27NUC-~#bCQ-piVptMK_{5%?gf(F;D
z>M8j9Y>72rLng3Ej*E%Pv&pGh{-tkCO#v;&fEFSltnL)NJz;y!LiiVqz}b7AQDz_4
zNP<S>ve4cvt;Jvi?QZWza~Fnw277}r^w8n&;P3SFzd`Qb8~{H9zt3#<`y<zCd4yMA
zHuaS#5zgs-VGy4G)sNVB?PslfXV~WJux8lgg^PAD0qH^SEw-PsBwrQuN!Xf#682=w
zoG;ti4Vcx=GD~)|Ub5b0Qm#b7_ET1$a~r5d(~7*|Tsd~_)f#o$6x()O(PwGz3cBYk
z;or!k;C4jqw&-#${&CeZ&E1uIWQ1d(02;ZHb5TmIlnD8JfB08o*zwtdD5!uKGDmk+
zzO*@79Y!Z^L&_&tI)nMlTO&AzdA48gfXW~s73Eaq9l4E7p~j8>nmFc_^-hoqe_{;~
z9{!H|x$#$Te{p+4=jfAX1xW!D(&~Kni$L50UR*ZD`-hpKX8IDEuJbXB+tZLVLVcx|
zgtmN8-=`HUC#yfb?`#TXE$Uk%P5C0VUcGcH3Yj{Bkj-$9Fmw`7dr~jUgYwk6lYIIF
zwim!RU~>R`58Swa#uH+>A?{1W+KUOpy6e1OltM}8WhFI#tH$%<3O3AOAmI2TcWX<}
z*9u^25gk99A&SZOV$8j(XNk$KVmL86p%s$6O2)g2{%ne%>>jdwk3;T<)N<sI(TD{K
zHpeAq(s4V>+HN_0pNez7+$|m<7W{_7k&(QE{kXE;Pq;E>!lrva8bqL&dj#)JSJuc8
z&%|1aPassPIcWg>$XG-9mco>51le`_os%nh;qNo^L}uC0<s$wILkOqZ@v!L_qAL|k
z-Y$?@R!@z`*40KV_j+3*IOZ_<ZV9CIkw?Z5cmW(wI%0W8K9YJME{j3JBEC7{&rs&z
zeymB5+)s{HPmpU-zl-Xec{d0npIuM9a@G4qXw4FG)jamue~zPX56CqrR6MIRfV7v;
zbIuVn-rG$IrXu76cstztw`VB#DplydPy(kCUh!whS{<K^q?-z{BE^qSdOXFJW=ojq
z@eY~&jb@{N);1pRGwPpAh&N+Lj~C_rF`R$3wA-dYG0z6^?8n&T_kPB;osf~ov4c#;
zLvzx;FhL)|_iOv~`deWhgR(R&;?L&w-&vzZ{1{wWu)axN6nC)Ha@vwO;}LYWP1okm
z%?I#dYz4qC1_|$Ia*~s5C0B7L@b<S0{B`40=b$Gqsa%xVcmv@E1RtU@GkYzZZ%}&C
zd%g)5XgvvJ3vj&A@#~5!S|c%w>hI)Muwezp`AAIRPqe>L*%rF+k8O2W20F=6w_`br
zts~&rzO@Sn{|4=Hx+tBy{cwfYEM@PVd_KLH4g`C>aHE2S+t(q4BjrxD*w_WTu*<jc
z3H}?xV1Um;`(m>cCu_4$+SlCv>0EJ_M5(Tc?ae2jiq>vRcRw8>Qm5DM@?CM?=}Ib&
zwmCA)(~fD{wYV1MF{Bx)wbfZG+PFvbMybuO57)n+G8P<ldC$@=sSRVFm&oIk066Ud
zfFx(8u|Xpfk&jJJn^HN8@4YL~2M~meU>(cI=6r=i`)?a0MbS;3?L^=Q<e%;4_Fg~?
zSqaW+pB`SiN1cz?qmx<QjVLdD6G~^-w3=}RMrty53*tC21p%wPlWBqb1I9)u{0|7n
zxa?ah+S=^NpVbLbKh<4+wNk2%<Tl;5hQu!z7wKHscuh*0z@U6&WyXvfWrlj$-0WJI
za~b(zp2O?1u&UDUtskt_IS>SSE727_L`q1cf>znni17xzQ?(&z0aD?g6EF&vD}t(4
zE_i!D`ix#0KzJ$)Y`rjF7wyHVPA(ViSz7;^dDX2D#*wR3J^IK~rXT-+SU6nR@7ddJ
zd>?iQz%O=XaoIn$LQa%%tSiVBP$nN*Satd^+H`pn1f(*f8#``DVjZfpg;Ud{W>+EF
z^m1CBJKk2Wo|#}=iXA5O2Iv3gx^pa5{}G1+_EPQYV^Z(`aLuf`fj|@NF7#dSr|*K%
zz6mb|lP;}HfR&cHf12TxShEmn_p$Xs2yT%@1A4QM(Zm`<n>5jXw(Z4{@k=#ES+HMm
z=mokvv!!>ykKqMCt4NO5+{<GQvyxKl!A?voN58z@hdQCX>rKI$6WI9{(q5pCcD<<+
z9xnaf00961Nkl<ZN`^L;r!dPLFMu0lFP5J+YXP(060b%g0GTBz?<ist*X-hkZQK(i
z+^R_t(-uPz{-?rglyE6Pda=9KpA2nIn-%^=8a2a}<6QrUW4X29zPg65gcNx0=d@oD
zL!Q1gr5?H{V>le*mM%IY#PC$w|7VIEN}9}wF?nOJZ(@_ffatL#ypRScJ?}=>YopHL
zIYm{N^E4i3LuFP%1yBd7>vjayD8%ZvRD>|^m!=H7IWplNN_4|p+b?=yyZjxz9hXS_
zlm{|<!<BY=NM50ZX1ak>V}}BK5ZeRbvzUH)i{_5VLCBQ|HN8fVYbJd%P{F2DY<>_U
zO(X4{&_KWzW4nP6=|^A_#m_$D;svgy8D{e4&faUvm2<@Iq&XXeW+YOyK)<wEy|(eO
zKv40AQ(bM~ke5Nn9QXg!g~0R1U@rwqBa?tqCc0i5V|*&d?@GN|kaw+9$~wV&qC~4M
z4aIPsdLQN<5UgXuasy_!(+e+Hm!p0IAt!6uwUkSZ4*>TL;yRhrT>NHmr;MzO8d3NR
zhDAkQOXU>ZQ!5@Gf#u7&zd9g4-#QdfDqVLUci~LKVLC`pfnBUfHiW`;M^$~w!l-u9
z_mlv<(Ip2B$FdlN^0?~~x$qw6kJs_vs~Y{Nqk0=DZ;JAV7q7K8Pb~CHR)2T{jx>Zb
zSL%L<-d7zDT#JJs6L1zC$~Jvn2=F`z8Oha{?ftCImzy^${D7>s7%`(c%s6GpcmGVf
zxm0nZJ#+MY;q{T@y&{e~UIF;|5coYeaSGj`aMV^A4_9w)<vn7u-c84nt8pQ>V09ho
z!>_&Xe94SbAuel<>HXh?94i!3a$B75$Gzp9=Ro>S{YuyLp4FG@2rTzmRf@*y3DVDX
zoLE252oUtk;yBu&03X6u0Q?lFQLH!rp72M4KMIZ}Px&IW0LfZ`z}lbPD0Dx&g4Z`)
zPm})3ziza_v7Q~;A45#pbqa1_!u5Jnqbkie>NjxfhFvm$bvDG=N;S&=s$I-SxEMb+
zu3yC%Mj;tmQI@=`9<Rj+NZzUIVS)c)tyol!AjUT;-p<17s~#ON-0XOZwwDp0ofy0q
z_J%%T*rZVLrG)h^IZQ#iDz^(W3$c1`6Z(XCnlsFdpVF515on}54csL)Tw`g-2Et)x
zxn#l7QM74goh)OvzkD}SSDObt<sT`&>%&kD^`Ce<g)k_JFMCv+h2A_*J0~bt|GcOl
z-!JNFbC(IL>4PuTTV6^tmRvgI0&3wLw|k~d3=*T9cugvWgLb60rr**-6O-`=1|~cw
z1pm?SYF~t1C^9_ZoPH?OU~Dm*FePnja6>g$#!=?b7J1#!-p9KZegt{V==}tTJiswG
z)WTE9pz@pd4UTe~L*3vyvjy}9OjEFGZ#Ka6l(smZA@|0{ufy(v&tchhg*5D;fI$rX
z<+GfOtCc?AWLlY0xk9_426Czv&n6W0<kAja0C&HACpJwY{nE#TPTNLS5U`dO;twca
z9n!?18&_cAayLh+z8>%CUq`IO(=aPV9#>JB;_sV&W}-Mc&w>-@pI(L$`?P4n7_?^K
zz;f9)U|g5jL1EEI+lI{9^%v`fbY@`%`3}CUyZDI;TO8~a%nAiG-)IXL#>SGX`5A2}
z@o-R6r(Op%u8b8&K5sgn)P~3{8A*C4#?mlTgL;ahcQ`p*g-{3pYCx60iW%*8zAO;7
zF|5>?B;n{Io%bZTPc)nlbbEWCD{+-#0a|2+DI8qD?**h<wH8a?8^Qb*T(fyUp{)GM
z)5Z;h31DK=C%QBwOO38I(xX2<N7*#UTVQT1On}`n=mFNNm{xLPyEVm5q+kor30HDZ
zlsW^!G&%BjD8V$_!xDE7pT+jd-OlDYe-<E9b6(5MTEqLShs3Z)gMC~V%N?OVJTtnL
zqa470NoJg1j2#N_0c;O|Z+cl%mzR=JsS&Y|E2KkCB{ncRHOz<wG=XMs)sxDU!BZQc
zXJ-+XIX-C;K8eXkisW$74-{)hlWZXLkrKeOQqen9Cvk15>?kg{GB=O3AZzV^)WHj8
zKW$A+IRrl)PpfYF$jAVdXGGK%)Pmh0!jbCYK4noZh3717@(w=iIJN^!Z*)Tep~az=
zjSrQD|Arl&btrAlJj`s^f-<<lo%Resy=6T)W|NPazV)N#+*p}kk$Yffx0WdZn1m_5
z*t;M^#%A7)UJ!akf6?-#U63PXi4r{fVW%%!c!g)JMun-UmW#O)YyHy{c~z++GdoCs
z*!L9Q$TP4YvLMkbkk=8RAT@0nKfaaGjaByI%k={h=m)=i4-76tz<z~uQTUCvHo9Z<
z=u#CHBFZaEbU99AE*oNctOwxsC8!9b`o~(AX&e}(LHpm3BgMfiw?igGqp`qKJnH$7
z2@{)_4ek+y(INEsz`dwuHpOD9hk2js|AwMC=xnoNOoq9ffw4$0cndJ6h5oH-uMrvP
zsxiS@;gKC`v~=`+iK-U~RU<AVFieysZ}z4$NR&J2Sn#jgp#V2yD*%2Fhy_*)B3dA1
z3nrCmZc4_rTa)|f8|n?L@ISB5qOU8HBykf2i*tDvA`-}Ob~c9vW5nRU5*v2c>S6?q
z`mNXBW@{ECokihvjG;C<m-`+Y28j6rk|!Ypzw;Dt?Sv0=ejt3D{e8#~oTUd!AU7$}
zVCcJXYvBqkVk<I!6S`^BjBcCwY8YjY`{b{1^D@)6z7EFOi7k6+^g7N&dPMQ7XUnYu
zH`diyQa52Z9*htKvFc(DhE9#Fa4T++D^WIlL9N)m*BFk_go*%qiG-|Y`@)Oq7RTQC
zwUH8ls*{^$UBA$DQU(0?+2%qPj)G>HX)XP}^JnPN$`X%^{o@;OUtuU#x$apLcwmjH
z9-|<E{_?E-I4AM>R6*vSipFFVCWE19!}07$JF_8CT5zw*oyhfKu-=W7+b5Q|*$@rU
zmO|cdTvE`-83CYH-idPrXX!J7xg+eBBZo4hTvsm?d<yNqQ*)6~qIHAXO2!OZE$$%#
zSO1m%G<)zMJW(j3o&I^1JUBepJ)bsX4H_lVd%|&^I~|>Qz0st>Zxx>o``kE%9Rl!8
zt|}=5>~YwfYL*UtIMN`t3B_2qxVrgGGG`(nZv*}(9!)(1Y#6=+&*0x()n9N=NB4b?
zG5&zpN|{BG7JE0nj&kE7>+_O3p;uPBG$s%m(`GnftJL87k*g*Y{8~limC?SmLi(I-
z3)^pfeCj=vw#sx@TPoAu3#Z93ECiofN9#lgZ6um~S#QK<-C#%V=B2-#E%l0<I=Wgg
z&xvpSFY?LajwP*6l!ND)1dY+if<1yxPc~u>Zv~a&?b=Q&Vln6H3EodbZwK^x&;upu
zGEy!J4-l`sTSqU<tI>&A^J6|b?(fY@G+$x=u=W2q{%qep#&c5QfS}0z>#S$7&2w@r
z1)djtPX9BDiMswFLkDOsL#s5q8Dqu`XI={l9;4rJa%;g^gjBop`GmROy5T^Y(`Y`s
zI0UJFv3Jm(FBxBr+KbU=FU$tHZRop8?8$oz+ZS2^H#6G!9vAm)x5kl=`b>v+Jet5<
zj4K1*dB^phV7BT(8`kmH{|O6zvO!4q<)ZWAJ>zhXM(ewt!_JO_cns}OfE%$D0Qchb
z%h@fmG||gRU)TZlBu&CPKnQ@q_-^iN(!zDCznzHcbGVZoY$8^Px0WYzVVD}ED{ET+
zp_V_Z;*@eh?tr_%N4el39^YA*r@}Xa*hzFm>m-r7nB82Y7`4%Lxg!O;tV1sQIp|$%
z?}KWYsE7Lypty0VxQWIGed5ojiLG!44$mUa<0HuX%!~sK7F@EFijg4W7cT#raq`sb
zAY%Iip}~U*n+i6&p0!$&E$Qb$L56$UQOJd{%!`Ovss}zbpa>uh+-$!|4EaBfpG?)N
zywRLeY{fGCh&QTU40FUoLth(xgRC54|9NHxVKq~j&aO>iOM~!Pdl43tQTMnONeJg@
z|I7I$&`R*N1QhV;JDgmG_G}dQ0wI+9!zlQ!85xFcg=M4knO8j6Mlkw)xlb5nJ8{FI
zvNCw<v_4$%V65o*Pjhc1R_;`}Ip`w1_O8D8ltPD4y=m+k<$4_IYZG#BG2OK=1TzKe
zExT5zsde$XR~?M9`}c-h32+m(0^mC^WBt;x$@CG5;2<9o{vnwh)D|tkxfKm(3!Ev`
zM(l!?K84qGlamS){EUJ))7zhsW?&i?=Ht3ZP7(72M1WODRqspr4i+<b3J+$Z9guJ>
zGbNXhKKZ}lB?F7fmDEeZExWZ5$$@0d7(#IcltWyfK1i2LETE#w)_+oZ5x+w}Qf-!l
zTrR?#XT@uBuA0$<vA3koOMgNbb>ofY0rzuejS+&RW1)|PlB-y)$7iH&p)UnDyF97+
za!Q$`+I%FK8PY$ef3rGV#djdk)OtK+16Vr0eif>c%*>5#P2+jfiNZ39&=oBF;1Q3*
z*~W{k+Ftmg*F)ZIj~00>3YfJWpTnV)je|?60QK6qFq{qVhCFHKLS5v-oMx1!WQ~T;
z{oYr$gX6|nb^UM7Y3VI8OLw%NL520Kx2}5v8tfez=uo(aP=av(o_K56-_aBW(1+v+
z6+-M6WSrQ_@YopvehoGUz^AoRlh%WW*76xrkSeu!8dbV>=wjCdN7@?MMYm5ZxP9vK
ztK2@<bJp4)rc6s>sltVtCX*xBF^ahx=1N`<?8JCn{cPH0&bZ~Z#>2e2RVbmh02gtk
z;YnTl9P%;LvX{eb)~5HTFfipp5D+vG0g+e)48dP4kn;iwu9ipK>#TL!Thz~Qv<`Mn
zwSZFJp_?W3S7q;$#6_^VVe&=X^fX`#>-QlPS{$998dZFK?+^6osN4=;kJ{?g#;be)
zv*o&%dF+;4>p9t9^w`v0oS0aZqd4KC8;{s+t($D)K#UUz_uzhUTH9B)(WSCJ&-x#^
z*dBk)yL~2Bn6LNAvkc)`KjGBjRsULd-^8{Cj{xDquZ0oU5x^lBBagC3p#$Mgf)}EY
z$SKzUfLxdCn&c+U?cgYcD4WbF&Y9<+kAgnv>sZ`(6w4mftF3xy(Z_WqB%afK0OJVj
zd_L;>5tSi$`;|!0Ku^X_G}rbRUyrZXBev9g5Fr;Qg-jxP9L<}0ty~dw<T@|c?EJz$
zCd-~pyz}xsZx#CEON`$>XHvU+`&D7#hUyO#zKzV#wAdd@`vNbE04u3&ecm3&y&rF;
zd)x9UC;c!QZ<ue!o8P>>e60YAJjye9O0{UOsP`46jJkh14{9PB9!nInbZ-5pj2s~k
zgT*EUya8JQ@M)J6VYQh94)kg?et_&K2Xrm!Gp*7&7ka|hlNEXgnByq9cvUNbSYvW?
zDHyRAgh;cII*HK&gPVH++OISwW4mA{Dp~Fhu;_cb^tKtQYdr~?wDQXeJweB_grZQB
zX??SHAs0)^wT#vlkC~pVS$%^vr`hK+5i=S!AHT0%xNkpD748y88EZH`u#cm5fv(b<
zTig(L*Gc+AeTa~6OceiF?{oZo{SvhejniglHcsD$LzYK<qO#IzAqF>3qRl~}Bg3eg
z5)}nSC3K25rpz7hs&qj@H1-~7`Xeuv*8Du(?pNI+BSorfO{CD7bM<EE!lY~qmv4jH
z%qoz1z7%UuE+|St1m@c+mDJ;c?O)Art=tTcM5a)V#+Jt{F0PN(LKP{{Do>xU)a%5o
z6S*+XKO;{Uy$(ct7I>Up_km=VTV9VXU5|4=xQQ`{aCiWW$pd=rNas9IQrE)jT%;_}
z=kR(x#2sa}%=95UOvLUhVNW0T!ZF0yIh11_88aznU|B2^FV2ItvLeLxKJ?Zqx(4>E
zfl}bD$ZgXxm%QuCmj5t?;QihmGK|F@NANn%N=&D#9FL_(L=K+qyNe8wk9n;G2o+7<
zo+}IGz*CXZ+Yp>itwUQ0a1lEM;5%?K7LzgKt{7?0&*WEDa=ndL4=$L!&16$>TytV^
znY!1_F-W+0X(5BP?pnwY75Fl}1{tqN84xwGicSv8i1I+<M85+uMLy;rvTpfSly=TN
znxivgr*0hF&RJ8}&5k+<mj3BbnXwEZZrV4=6V*@{g1Nu#?d)}5?$ad>fCNYk#K$~$
zO8iCgoh9haqp>F9My8SRmBZla;>9_dc?}GYdc30IfMrc>@^YHsTk!h)99WQ8t={2e
z)(dc|xAt9ID>Lh{dpzO_aKftkPmszry3TWb<@Lzz$hiid68-^c2-S10>~YVG=b{`l
z3g%b|Y}#3W*5gF4Kd?^f=LrQ5Glx$spl31RY51vxbTfe|S$ww30YGz;-arWLDx@o2
zXx&hdcRT_PTxqo{p@4CvH<xQz*>jg}$@->N7@nH$i&<p*Q_W!dNo?u#<Je97iwG%3
zu3)Z<sUFA^TmTw8&oEPUuPYKTXRN|v!iXLz*&|Ie!AIb5zNDTNCh`HMV}(_tN^-{F
zl1P(F0x8x_AH@5i1RL*0ckZ2vH{@Kr|47Mj+u|+^NZnJS{IBIdCPj#Gw4k<x@inqo
zjAF^t=K~8#xxEt#;>e(L_c@V+I*x&i7YsfZ74n48k%vwBuO!|xy0n>b*xFNDorN-!
zh?M({MOhD?AQ_b@fA5%kK1%_x4px%r-_N6sjQ(N`^OT~IClz@WWO4f=rI6&p@vlc1
zmu=nF?PaI+=J0#6uk$k(8YiZ@P|$Sx-sHL;)Zcputo3cZLcu*E1>+DMZMkk<0a%9{
zi>~KPw|DCUk)fKNFWh2eG5=mhhn00})TSe4&cgWT_Z<xlN+BveY}Eb>zO&NHweT)%
z1e`snJKti+4gMzGOwai~I3xUXpTiABvYVoSo7fYcm}m8T;=AP2{Mg8~M_r+HJI?;!
z-7~hbIFFioS9ApIo%EpvXiZ_g2>~x)hX7o|>6h=NTxp7X6u7yOkj|FK1|6FdxfZ!`
z>NNOqBBu$p$va+s#`U-!l<u_J`n4!vj@-(}6|@kfG=^v`R&W+(v#H#QdqL&;>S%n)
z3f5hlbtQ05Q8DeZbwPX2ku~THn4{r!ViWty-S%*EF!e4R#l_yHF}Z^qHz@&T!SQ<9
zC6;o<D+{9Lz!2AgCAvOcvWZH@_!UGv0qmmcxcPN=Sb2`SQKvJzIM&Ro9Ppf&>l8yj
zx}9o^B)%ftLq*#HrZD9tqXkRu3m9v{_%@1tjS!8GnSIwQDLblnw%<U&K-BLJQ7Nuv
zw8&vYff9febnLFo_w02T1-aKpd^>P?)<47J>d>2Iw@un?L~;7ThWM0H^O?BDa*-q~
zPWNTxouZFJdzrCD?>9GX8#F4cMph3o=g~7@+2)$wL#1SY_AY!(35vtq8J-(|#zk~-
zQp?=eBLxAjHPntX%4qbkFyo23vE7nd^A*f-D9r0^3(s$)WGkTqZBA7>3f%A3|Fm^}
zuotM8uC=`=j}C*JMMK;qR!C3YmO}Dy=@4%zg_OZ}exY&iW-g?!{q1LC!Dug#g=XmI
zz=C%gh!AIo4=Zxq3U(;KNo)nc&6u97D1O<~s-lpsj?cvHY4pue`EUMM5a;z6TH3m3
zDe)dJdd+H_w$t6h`s><!QzrKotBRX?+9)EiQaP?HB7Dr-yENexHTzvd-&YkDC`<)y
zQTOVm1&Q4J=o!@pK3hn5bK(dV9@oNf!}LrxZ7NQ3N-%L2aC-09g&UsBb3bL^W(OJ+
z1xenR6Zuav_Jjafq7pDOK_5O(dPhp^rh23guE~0QGPgpuDMIKJb!;J6=kDOxRI)y*
z1PtChWcVz=wcHS&!Nex&Qq~o*7fS>j`Rs|eWp;8!SpwddsQ`%OXD~6wW@2wU4+F*y
zcW#GwxxNla5dzR$&V^8qmSY`H?1W&s&x2zV6o9l5zDoh><M430bh&_=H6Xf1$F{#4
zVJ3`;gRqal?cC-k>!6_}xdxuQq$C+xJPr9Ns<HJP*~;=xqe`3gPTm-v!C<UKgtzou
z!;m+x?pX%|d|4m_1NQ@E%ut&*!d{KXvy;ow_`oqB+g&mPnYyfQNX}z!IEi1uvA!L_
zD9$hcim@pCLyAmMMRfV|98VVl`{1ZbHcuZ1$9p2?yrb>462MeWV}U#{nr^jBu{EO+
zwz%&BN7fHXKq#I)S!2&|G>D=%D9vg;8+YR;I1&D?xbAuagNWvUs-4XTAZcAANFpn>
z$!%KNLI@(f0pexAb4PX`N|@6|+yftY_2%7%CgHgZUO-#a1reMh*?F$cg!f1&#5z;O
zu-%|dA#?Fwse`VGl<p9B-m_i5=3V}@by7*xnM3eZkzhull08T6tjst0x`J_D`SfD>
z_3LKnx#T2h936s>-T)hcUWEW0TdtZx19$_5a~cY-YeJ^$0(--J_NjW8`%$z(7ihE_
zIto5rMnQ>j{(WGDkGySK{tRD^L|0<oDg66I2Fi2NwJc0(!dpyVBew~%UhkYU&a{F@
zBO<DueSRHQwj7$4HtFj!Ps17LHo2s<QvHRAR%l;oJwH?*Vl_$`z{fp1$K%|KemyKu
zE6&>90uSHGE6|V`&|E;nnsEdF)%8=K3Bo{qzmF<9zX9Xy0y`Ao1hxX;W-ODZu?7y}
zjlJ^&nNGX?i)&!>JKEk%ZGX^>lQoc`H2d{qaB3fb7ahN)YTdQ_>BtH-geJuz3uxrG
znpZW4U)eP)>+Oud;*2>QhsG)~Sd`tdq?Bo>%!%Fs_gz7&<a?5N7xvh<bz7UO*y4Y7
zVF=uxr!3SOj({;5Kjyr!=EM9cJZsh(b}ID1UIfo^pn8miG5sen6mDkgMayw;&C0qq
z<1yh~HHC#WB_gQ%&9}pAdyH3*MFZv=<0%6k80Y%ZK~PP&o;HsSW01J=3^&Vpcaj03
z<#cAxFr{Etp^1Jbhq-%b4vy$LzJuBh=I_xRmW4&!L2kP+HMyj-gKl=)Ogc_odnj{1
z@-#TV%Q#CQoz{0-Z5xQK062%wXqy!Ai*_3oBKC;^8ajKa0gpxlV+4RWFH?}!$WX7U
zv*W^$K1qN@o8^>nP}EIY;=axHo>~ik-li%l>kF3<&mYM)p!F5+MN=e^HPd%-cVhf*
z6vlO$BW}H`vEhS$_ZA)<QyOhTym;cM+>G}Pm37-6-8<dqvB$a#puad{)0`sI46-y(
zU3q=>r5FpQ$$5D1nM7`|ku`#f8arvo2Mo4ynv^@rU2>@KQ)7zfNfQ6VXqd&cR%%Sq
zcW<mMZJk=mIR4*BVpb_Mpu7GTx3l*@iW_Eo7j*{1n-Dv<O+>uK=ZsOTE8WqGHa#EG
zpj&C86YY74AUAv6Jw*V%^CRIzk<@u(i~T!RJkH2E&1GY{x}%JjvEd9Vj{|&H9UFNQ
z3_USM_eJ7jVK#0f#Z^T6?=*%))ir~vbv6<zwP|yB;><&-MOlL{Oa#bxLWEejetODa
z(>^rJB4snJQ}V)Fi0W3x-&HRn4kz{2H!o!EaqSu8zV$=6k$gL?`?<XUR<St%euD5%
zfkSQ67)`i(D|EmU@@P;qp^Fe)$f69hzPE8wf=r#)`+}hF<zC-5SmiljQ81)otGJ>&
z2q&V-5R1f4;%3Lm68mj$E=b?Ny_Gk%?SIjvY~oo>$OXlIbq|rgPnISvkw?9JQ1|ro
z0s38o4Pr==l<j$R3_q2BB{AnC=$O{YcfiZI;EpXt@~4643=vjR=kWPd4109%6hh%r
zaa99<#=^LKy~8o!Tc~{Dfn&tcOCX5X_lXw!9Zbl`M1LBA6X#_m1dBo{1m>7=R&rY#
zqEjuj;8<Jq!tjW*Mu^q}E%f!K)q*`;K$SQLVXo8r;7ZyE^JIS*R-#8EF?bS*C8cG&
z(dBNBxHSfI>m61#<W<mXlnXped?y&Lp#>EkYpxe0Wf9iziwN7G`dNu9*Fe6m<xwBD
z*+2%-nICxEz`A9|6mW8k5Rp07a5p%>x&WzA#PK9}0no5R?>jcTZW`GBvEr>AM}L`a
z$MO4^c9QZIZLGI4<!50We5eKOq`w~L&_UKO4yZBY*E`^_ndP{d82)<ip!rNP&^wQu
zLZ%GuBh`JpJqz~_wV~#LaLQ7-J3V%9P1hLTM1DV%0I#oq{rrvp3~U9!uY$Mv)k27f
zsj{0*zD_TQv|y49PFKKghh58Ga_ML7p%Drj@f-@PhvpqE&*A~qmIACT?o_Qez#f^)
z3DjyVkxbbri+fPaW>o}G^tn5+{>#6}kPXu}unEG=X(XIDLWjGlcFA{;*bm-=NI*r+
zF;t-~4?<A68G<x$wtGRKX&=%Bro6}R$Jgue`g*<(vdw-jWUL13mv(*h++y{{*;u)p
zjh7Z?g|^>plKUpF-@6y(ViPWMt_*{Ug9SIc6=5|*A^@SchS=Z+<Hy|u*NR-%W-Mcf
z$!N3G3-Y*&ES#u3@I5}%e0o-45?v4O`??p8>>RGu@{Y|}v{$4#FWC?qHf$#Y4GXBc
zNr`0~Z>cw~C@?vXtOb{FvmOcmfwwX#bG$J^vf?q;D*O2>4#S|2UGkZNA>h&;Q80c+
zUQt*kyIuo{IBmaJw{kwEynOn2Z@fif$+AX^x~9j!ojQOCYKKJ4@%PBXsbs?eu(Ckc
zHCq4FT&FGaLJ6SeyKXD+4MThbvGiMF;di9aQ{UNJqm1K5B2DXMn?FM@g08U^hkG^}
zzn#i!K3Io_YZ`{W89`FKNM9pFiZC=9XfkL`3@z3wT+c|!-H283T3V}cUK9ICGQ2s8
z1M{rn2Yk>Y;Oo9j4+1+*U>Q3E;8$AzVUpnu$w|VaT8Z6MaaH^mB_VLz(m;1(C4g#!
z)=wrFsbOADzWI{5*}cMLwHNW^|NigOzd4G#i%Rn+B5N!+9Nf#Ro(*UAop58IXD8H&
z5P&H-o87s~UegOjDLcvFo>}eXnDno6t<-7^_A0tS%hwtyMOwOe!Jn~MdeCl+j@Q6c
zHD~TUTlee9g2Qa=F)Bw;Ns~2_WjUvKnV|e&{G~3J_Zd{ioj@-9in*NTzq>6mk++7m
z#3z-^3{8DKT8XI|?GCNDbMW)%mZHC-CUb;AoSR6Q>|@$wT&Yi!zVihBsBGjJGrK-%
zK84%30X#Sp9SS<aHJ**}6Yn>bjoLHl8|>pVVKutiW3Ka#<1>bE>;bk5eQR%jw_5`{
zT#p`74>t(&;X4;^$$VbD9MhTAIO}$v@Bj=W7S&d|{B;y3-Z+~cb1<)&&{D_Fz@I_z
zM?+QAk3#9KEB!Rc`{Qyw{Am*cPGWli{3<{iz~`aaquk`$TH;vZ4JdS=UeGMgbWUB@
ztkGf<+*VehRSfRiEzGJ6YVu(NIO_%#y62CqjeJR)suyRHaDpFfmho3TB1;DCScJK@
zm&M=Py*9wwNb#-eUbQ-M(W6zM*-A)&YAOFjUz&|H{Yl)_RxR~un1ur8&vsG?reT$@
z;r+r*FuL-q(2HS+3vOm0ZKGS(S+IqxYBDU)MHlNuciM91I6f=Xku`+fSo=F}jt`8U
zX9P)+$_JG{E%vki(igwsf`y!$Oj*3zIUPnJtjhyMfcDJs=Dz<wdv5}7Sy9~!uXFCX
zL*E{08fc(FXd1!{A`(PIR3u1no{->#6QV&M8lRu>dr4mW2o50xi9tX_BtBz|&-fhB
zC{d$0#3&l0KEx>^GW0y$@!WI1Uk$5j)v8ssYoBxO?c2~xn|sdQRkio2aSi{qRwIH~
zn%V)H1}{ly0el~It6xqBEtt-5m9U)6mz9N43O>%20MY)^t!@*?CfSzF)_|UE)-~ES
z9-M)Wj}EP%jf7&m*8U~-sf2K`W!><VLy&VMq7Cdkh>#c5ddP#$O3-3q{kXMaEs~P3
zld40XQ?<@WgS3!4|L|F~?O^^V&Xe5yH->>`l;ST)4H#Jm5{)%I0*AZeR4EZS(!yK)
z?R0hCEyRj!3MbKPu04hx@Z6(MyJ*_<ZP4%d>rv3vZK%0`ifhOB;QIBJYR=Dwh&~ty
z(KXrYo>#=d2wR%#X-vZy!Iv2FhA2;HTF&TE99<YF0&slHIC5|m*2l3*xjJUoAD&$`
zkh!_O5AIo6sF&gQt|EPAU3rAkUIaing<7RjAt$GaR5Moj$ZOvp+zc{8bILzCEaa{Q
z*NOEvii}*Mkt8soN~?4a+QZrwDylTrR_XeyAC1{1`sZeipT!SgqipfP`pC`d##lfd
z%Hx{PtW~GjPYas8Xrha$M&L2@S9ar$)heo|tX|o4fw^@>i*a`j8t5t!HCy`b`7zSh
zTG7XR)?IP`Km1Pb89}9B5+?Q<*CSNuPf*V2+3OjL<D!mv1K$kW?UKJqLZyq%q>!>+
z2KR7zP$URnh%Tc;nNZ?AJSr^zl#`xEV=1SU5@66M0JpaxCAy+W30$G5!F3oYGxa|z
zSPDlZN=t6gG?v!oDWeMQUUtG{p9+VHVR5aync4Vycp`f~wpGZEcq9=$Q)0!MIPXba
z5oN>nC+aRm>m}jf<bC=<81y^O>stA%($ps3hcY0P$oJT_$prYtyRqvge+V6rgnK73
z9!b_@kF2t~G}QzdYg80*g<D_%k(M~&-=zMjJ%)D8(f;mr9=MfSTHo30Y!GH5;P*mV
zS5dbAdLzG;Au6o>?mcrtKdp*~vm)#de!d8DPHr7W_iAQjXfh>&P;)N|pn&!&0Ln;D
zCK8J@4eq0nNCy)6((SUr6~1iI=c*2M6+}zN9cjqX>|ONaL~xK4N@1Rfjzh5Wdp+~*
z=G82X02@X97szhN#2^*aClRsywSHVZ5`up25UBD2t(8By*$cWus8>_?FRI(9NIQl7
zz!f(MUseD5Dh5VMDVGjRh3^#k{?{N?1$!dcZwe1l$<m*NJN82QArj0rr|D^w^<N=s
zw3aa8)?i)`N?vD3g#g6>gXvrs<Zm9RuW0j@a$^=_nWD-8Dyhap!>>}zl!`G6%BLP(
z+BMB|zj{SnVOv47EYm|x;=+H=LN-CFQ6WEy4^TLS0pG#SvdVYFjWD}a^xkK?i<C7u
zun1$seoNi15A^2>2!8y&3BRHOt8j2dAjh6a{2y;QLzd@h2E&Fbu{<I}QStcISyu_f
zsXIq&2&De#h|TYTqLd5PrR|sWvCtkW1HyL=`Bzka`$`oWYf+gs*p!N;P9YTvn!QSZ
z3fi-F#l=DnVwUJW&PesJFp^qw!OS6R>)DxDQ%L7NU3H-Rb;_2I#FUy1qEhOtr-Z2}
zTmGwhv#L9Y9QE0%-9SxcLZ3t<BNx{p4B5alyxQiH(fnmi2?GY_7@{<!&ljmNQ-t@V
za87@%f_f3$dKLBtrxyxJ7|3${*9k2BEM?#$mUagm(uCX)`A0;)6s?V1ksi<#G4q^;
z(lq9A3`&Qjmo$vdErkACL?j^(%an4}=#U%*=Mw7|n&Pw{#aF*dvwGAEZxt&B`f5&o
zL>d9aFXR+9{mk9MxI%+abjE~A-}<DGft85D<P)VEo`=lVPw<zux7Y=p|AuOzGxk!F
z_Qn9Hray@zyc*4A5AM;G6f;OpUrVfGVnqVMqLM?b{qsKPR%@J!D$ClJ$Uu{20jN$Y
z6r`NLP#nOIXlw1)qQPK(OdU!4%ijmn04DtMsqG_(+!{b44S5)Aj0A{!i<G6~>wNc!
z;Us)18~GLATY!I2|4r#AaM6nei&pfV8+8RAW%1Bu<CRKVR_DN0ZG_em3-?XT#UOB*
zVDX@SrfwBlNO@qz7oz;TN~A6F#og!qk1%)o-W~sP<W(EcX&TFl^W`rJkcgc{eCR4`
z(K-dC_1rOQl|^k}e`5;#Cn>y=nX#&b{V>9R*w5x(xc&k^+l(^D`B4&XiTis->uUfI
zi^yFjRj!8z^}<kzzWtK$PsntMKhJ`?iPTs5mx!N5GkOH?6+!24?Z%e7h>Fe@LGUj|
z<;-vF2As2<ZYS;=p)9ZG$`WgIum=(aoP$4S_Bj45Ddqr=S487K*aG?SYRb|1MPdwH
z64FoO0rY}Mt0HymHaby%_}Cc0TmeWQ@($6lrNT0<J-dIQYeC4bnZeV~!&ndT;3UVD
zBP6>W^Lsk%T3L70a1W4Jj8s`E@_&zO%*Takgzthew=4=E;)#VZR1}qyjycPR#<7Q3
zHKka$hnmFW>rcqnhKFDJ2eW<}bbJ||Dphz+kMi5zw15fPs{rVQf=OwPZL>+qi=a-B
zGNe#|@Y}w)C`*0GQzC0&K#)>lK7tqJ^1l|4>>sB8D_HrNUs1gWiAn&8BAb#JC@gn@
zSo}$w&XvOn7<QAVWkd$o`?TU_9}0^6b;w~<rEKn0`x{5;$0`CXWg{djB|ye^EGU~`
zz-06c6Tk_t<Kkf@^6*l0MG#1kS+z`&bcd!=Ifbvu7-}A94HZ!IIX0M{{#cdTNJzI?
zM>bWww9ZaugP;X!w8-jdfu1&<nHhWfd>0E)k1Z-b0;Zoav>YZL1R~=MDVH&6N=F*`
zIAD50=31g0BsK?^9ysD<092w}ORdK!0|KV#ODNNPJ@={J%hIuTvS30vEd)rTno<<7
z27*}Y)d+@QLLV8hc#n(rVTP(wf1|#alpv}bbVi_pm?#y2Pq~7#DrSlpq>cn9#ODP8
zR9QQ8{CPmcV7)mzL7q>myGDEFZK%RQuqL^{z=11K9HlQ9Av`YvgF@)r9}romgv%r^
zVaL#}lVpI$ZXRzF@H)Bfa`qO&Q)J5b!duHRJNmR@>$Jl$PtAi>io(C`ASrluga*V{
z5A7AvyNI8IB9w0o4U24g<%#jibUZ|3UOxgpx)c@$Al!=(sHQ~*6kBu@`;f5nBn<wN
z))*HbD#$$L7IXsgACfnDaKC<cEF>VAB@o(@GF8ET2132~9_8w!?q#0QO`tKvpe@9r
zpX(WF?GJ?gN{c5uYzrZ`y@bFD0__y+B+)uZ!2MDIfl31f@oQ4xtMEQqE`k+O|8-SE
zhBXK_m$L9PlC<za;5uSip$Zz@8eFsLciJx~RvWz-L9HOA4%{Br56x@s`#Ry9?wV(U
ze{|ndgoa229g~EMNEl3vYgoobU(FOE@59%iv}Z?;=njk_88m#gBxo9iN~_<m{tgWd
z>3;!~x<z5t4QO%&f%~5Cv_YI5K86i>yd*>xx{S;Vvt*Y=)(<*2K5SX>cA~(3E?2w|
zAd>|N79)=*J_paE!&bHSunc`yt2hYII^FtfE+E!NgHpr|OvoUDU8DpK`VVu$`zz6E
zV*RQ6E;R;;?GjrH0zV1}4UVYde2deobIW*R@bOOi3jWxq54-+3Qv9r-4Cx^*ZM%x}
zqcAwZ=M+CkCQT5Ou;4cY7YYVR$Rv~<hr$>OB5UaQh&%}>(!H?&60}zV(4+95qGGro
zW8#uNaj8XEu{cw)`*Mtx2*Kk5XaNmc@GtS%YR;>FSAV>R43)JTbE==5)iC|6M$Qsv
zpAnoHxxjX+YIE?BuidR=CXD`J(IrF=UnzQgQs{K|d3$8NaHb6lNV#@td<UxKuaJpi
zOPl{I_N*NrAETi{+n!oCcwlFtuDQd!-rxq&-n|a9_JWHd)TdA(QN8kKI5&;pV)eT&
zYQJOWLr&f?iui2)p&}so*YJNE%^`<q(tTx>0_Lx}kN>KbWg=zznG3$|pLTmI><3zO
z{$eloMAH083AJ$$Te<J5&`edre<?-5hBIy+!I?$U-aRacpM7ljP)U=5ZHJ0Av_gAV
zBzN213kdgF`YczL|C9SXa;L)2%v~`Rlyi{6e3BnoKoSFJOC$;ZbWKuY0$xv{%Od@d
zbYK!?fK$F=DKl2$$n@a8n?qOB8IB}NLD4b-IYen(cdr|OKzm&P=9^M-k1)H%sO)yp
zHh6%zsIrB7XSDX*FFF+kK1K}K&-OX|di*M(#b;2AQwpXW<N~eTXbmV5(WWMgkg?!!
z?{u>i!t4<O0ZJg}LcpT9Iu`)_g+cci#2ugQn2jd$-HcG=35Zvx45Aw4Q^vG`;=mTR
zT`=l_kEAzC*x66|o(Od*bd0H0rGO*(wgbdK$h<iVe`ZpJu)%Qsqm0ZUZz%9PY*J3!
zK935s+P;C53Bq~kmV}Qu&d10znPHy>yB81kD2^|EiS#~~jBgU@`QkFz7bwK_YPA{!
z%#n_LN-1IXU3JgAyJl`X3hJL?a_tIfm^d>S`x^yt9G(uM(Yiz0FC7Iz(N{U6+^G@@
ztJ)KZ09$xZRF*GYP7xTV)7KnuuxZi^Ro=TfOAueWJXv2kw~b(31u-*-B9kMiGHr5H
zPZA!@-htLLDU@v>HECSySdgv5(!eO;nV6+us}J`!bP2TPW}&}~`;F)8u$!ntz^p$G
zsEB?1$wtg9NuqDMeHd5l@Mom@qVk-m;002#gA9u?&v0-nK}TqtRB^7jVXhW|GNmh=
zYr(;9Tn`*CsO!ioJ?Ew%@PH-n9Z<qeHX27#E<h(%QpG%w))q-YotzJQDWJUyfSmPz
z5P>Kd^ei<oQLHd)(fhTzO&=-Pd}FPy<ClZ|yIXYdru>s7r9zQzP?cAGM|{!)DuA7u
zVv!UYHj`+J`<Dk$b@V@vlm@1b_H(YWfzaS7K|gX~FY{f0#&)=(f%{@I#Sl#csXjLn
zOjsb?3-5vf^co%Ougo@DDX3rR;TpvW$U67opLo605qzRK9R#hyF(XPBff1!X=K64T
zbwWiK&E8<H#qZ<Bh6eEA0!<{TGG>Y^i|8D#F(%?+&8Z+>Krltvb5l9#Q$!V2PFNv6
z^oqC=04Wkmj7HS8r>$dxwuLK8%a8&wlBTY8vgaJtq)+?t-=~Da|Hw!Snoaeu3GH^<
z{ZnnU+i^Q{b92S-jcx<2RttuQ4eK#C*MYgYwhjoE66#X|d@18vRi7&dgYr_GiyUza
zRjNv}qMRV`q?E7mI`(yxq6Yo@LuG#an}hfmLSN8;a9D=BF{wosC_nMp6yZpOd)fx>
z&)j8$Dw^VWC}fZBvNJ28RCZ^Iu!&X0U%+_~+BB8rQ+kv+rz#cQ0&$~(=j+fY;8oDv
zRRYf|K0fB7Ik#NXTxY|+xKmDmlX^R{S0JQ}9XNV?@8xk9k~~FEMgUov>6+^`=pR1-
zi3?5DSrP@eWph1AT^?LB<N;{Un)Z!WB2su;UNDH8L*K77aCd2prW(30iLWzm|F}3S
z))3iy6TIbH0pO~_*Lg(HUIjpo=0R(i7b+XF=_^HaQ|8D3(KwX|q~k0DBp?Xi1W<sN
z6cBVHNhvGJ4Z5amPLRQ1ee}E72xJcvc`WQMQm}JjztK&T_bzH?IYY}K;iS?0Lut{1
z^3p8I!7Wka90cG=^hI6aPDB8t#zC~e^-qqOLE@jewUNW;>;Y;R(V)@rIVmP6Xr~(o
z5F%^J$gf^w@1d~vFUj!Gi{Ys=;QcPef+d3ip<sov4A^9qEWi3XTV+W`%hYni!*<Al
z&>&r%>X2W1)e9xHMybUgnXjp-8R&GTqA^>sY#Hpob}g*ke}CBTfCFH3bQIRET?>aE
zatI8yS}-)!baS-R>B55#-VYCL+yq;<ZiV0c=GSoVZ|;MK9@-4Mc5a8+*;$yJ^zSe{
zJPaeFqgoL#H>c{)=`k${l*{|S7iA2#gF>WCwM@xH0p)`Iu<CFm_oaZVVcOwvI-r$5
zvcL<<(H!wuDl$J|HEoutU=#&3BkiUFccy{}24(HOf!Pg;NYY>yRL2!ZySRf9QTZdB
z<+Bq6dF(CD2#eBA&JQ#m0p%Q#=WrQ=DA`iky^GBTri_T*w*nDI4cAD6N(Ee}eo%5g
zPyxg)Af656j7#z3xwfmz^PWzR8&_g42KO4yBO-rbT+s^F=w73LE!wL9h^eoD5p}Gh
zs%*+vC@KE)^-Tl^THYO;S|c1AEhT}}J;I(1p=Lf7=w0CgL5g0B*0G?8t?a*o{>=)O
zRc#jvwp0m_qZFf>YEOTr3WS`?Ko*%1&!j<a_AU!Rjo25|D&lX@MoSthD@T<r!FADM
zEcA(kUB*l=Gtv{5DMW(MGH(4LL++q|Aw$;43Ae}$=9FX9T5qp4g@8RpnF8=u{In$R
z>@@c&O96jZjT9pNLxqft+mSeriJZZVECIw{YESaF%~8r?l6vQ23rhi|6mV{hvA=3m
zl!bp}WW+6?ojZ53wcCW%t5?DL!w!X`k3JgKAGRJ2TDK0?u02R!U$JTxEMLA{Tk)4I
zTL$~=vyaK%U<3YP-%jk>1-mA8!NkNQY~8vAwr<-7J9g~S%7D9n@_*qcKl#6K_dWN(
zefRxFmqi*G8H1%u$2IC;dU`rS7?kc>$vv)-AET@goDmeGThbZQtYCOM86Ki0B2A){
zOBxE`)k0jXB+$|MnbIUY!~8lHc@tG%D?r1{AB>rCi<zT<B5LLZOc4&=DO+O_g00kL
zAZxkI7&9WYAXg;2xf}BX^h|Tcf5!_Fbtnp?2t1=rN=k9ZdywT+AeU0~i0czZ6bVqt
zQxM2^rbthe)d@*P5kaVr`D)G+r!DbPOd|Zm6%0Q6fUw%=dZOzxgRmMn6(Xr|tw~ur
z2I0bC=hV9Z;4OVO_AsHn3V@InELvp#;2;{^oJE6M<SoSvP5;6kzHRANA^N_uwgLg6
z3XVl!K*ef44#%uRCBo%EdKSu*D!J!L!Yg$H&<xtbS}G;xOXXtL+q)j?{u$by$aY20
z8-y8ZFqnSSb94~;>QdVfeSn?g_-yXV5&n*}1xGS&QSy-H3{|X0YS|B!dEra+G{U5R
zBddjjzEU%x1njSBeDPWJdnViynLocGC8+zqhHKrveWx24b$$Q+_lJWHItVswI0}wE
z_E^}kVLcpr=sH+;&^lPNW(_P~xiWa163)BCy=&L52^U*R2l#6=VPtF!#+NSD<sbE^
zM+Nn_Z`%sLzV|o!-#tIQ8@}<)Z^94%<A?C8U;PTUZQBYnGgBI2px#ZLdrApFnQ4TW
zYp81kppq44m1ElX78yze4l14yWTNwbH*AGeNT+TyJfIsT4lA#-ydoEX8k7_?xrR?*
zH0IkMxQ2tsyplL9HTN<q`&TXr>S~fm5f~6Q*i4LD9lnj<uLCblHdwQ=)In9pOTR};
z<?+Rg5MHC+_qo<X4=oJUe6dEe(d~AUP_IW6?NtEG1J%`5Are3lMk#h{wVU^2bk_M4
z5qDzx9EUs*g^X}#69rFX#yT;Vo?Ka6V5o{N-Zx?B=1%R+B4QY%LrcM3B}<d_UG7CY
zAf6}0MZ;K;C99{YsjP6_J}hKCqb6$ftLTH7DxXX9M-P4L+lkLe5nAC*v}6)%!5cN=
zpGMY=Y2OMUEEJ%(komz6tk3R(EtOn<wwU$p_W|w-CluA3lWQvXu3K$=#Wk^38u6wb
zgJutw0m@KXR794kw7$i;Uhz@ixeG;wwUY;GN~BE9)k`4^Y6nKlP!#yllCkoe`|X)F
z%yeely;ZAL!2bKMg@X=S3n!m^3LLM5{-ZX)VTT<CYuB!W(a~Y?S;`o%;Q8Hd2c~9b
zV0v;AR;^e8Gc(gBs=w+e6_lz0Fgr7?yBU8g_Jw+{Wy@E<amTHK<BmHH;P=jj=RWtj
z8WHgC|Nd|Am9KmS?)u*M;ojfetIMl4$CixgeQj37Bd~}7gp^ANh%CB^484rJi>=%x
z`N++DXG$~Nmv~Nd4$tRp^)N5$`b;O`$w8s&GpyNd5}#vJDdnoeH&;XtU?0SpS6DlO
zGJ=-VR0SNYDZ&_Kb-I>0&-$d)c#{CiUIAi%brc)Q{zn`ybFtaPU~wTlipHGr^TP6%
zf}2^RA7+MkRzF){g{HgKxG?^OH!Ui;DP;odxi%G2s_+b_`%vt96DoFMb6?`rbO?|%
zVkb*I#7xM>7ZNMrpLtR>>=pY1+N%I4u>Ol${ET082`OtR5^CTTrGkM~TQFpJ54{gn
z)?*jpoK>aQBI`7_!Wh3Z#}4G)o5Jg=qLf!f_~+w+!Va%T{WFCCXQ>SigX8(}@xPlY
zwe@!^V31xYhTW%P3HV@f{+aF`FKZg|$^sokDQwFtfI=;?8*FT}j<Q4$!h`RL&AnG&
zz!Zwcxz;GgR2eCaS>N2m-=@2TAt$Wz#6#-nEh<1Vrjz!qux3M+idDg2fc7(M&bLF;
zarR-QcF_9@Qtkp$sc?xAHv?Xv*#{($Mm{#8yZcUKFSyl3gIp3O7<((w**T>e8Owxn
zm3~e^HB(gLN)QDY>s29O_d06zS62F&cH8x_g72?cvp;OuumR3G`%F0b#FMqfUs?E9
z5)1$I^epV!wadl>n1YFk3GF7ZbLRw1Oel8&&}e~2J?an`Ub)f*^lLVUbpPn6|1Rxb
z)BZ!H_8iR4wsm_tuwZ)*hDS$Wzy0=u0}nh9p7f-%;RP?a5We!|ufRY2<3GUnzV}`D
z&As=+<m4ob43B7KPHSk$D$hDF)E%;xE!}&Ou~Txp;>>PP#wwJGt#rZgIcYysz%f{>
z(Gi$D^z)srwv>EevHae~i3=vWIP+8HsEy#c-2E|#U>}z6B0inEN$ImK<Ax`p%xZLb
zscV~3thxu1KW3j3f(=$RnVJ_Y))GBK%x$75p{O<jpD;%u%Vs3`_tQt&_M+X7%#~<t
zBeB$!SLmRsKF#&J&-lc~HmRXuGk_?;L*caAmB1nYg`xq9hET~lo#G9HKJ~1mTa*Ex
zhczNwl)S!DE<wrnwWz@&poKK=dk*+5J*)s`$WjmL*fdzsxL<a=dQ*91(_RHY0f|$$
zcr|1imG=3{{eo|__@OE>S=t}fZ2&}Q3=Q4nfT`Tj%1z&O*q=(_zhB>37igrHlrcsH
z;KPm)VcK0-SPGZ}&5VZvW*{@sN@VyV=%lb22i7f1VGx%BKgk}~5sw@!k~aVwGSWk~
zcqCv-5t+kSS3%IZ@)b})BoJWV?e!Y*m{5S+>C1AHsI1`*>O;s>N(#xCq%mcR0sP|v
zq9lk9V0Uq%#uT*_Lu+CF7_DCk?uy38$2GkF#1oH)bIv&j&OZBWIP9<uFg`w}qw&wq
z&S|*)mTlWig#Qk}#MA_A-uxikf8YJ^%b))e?)u?faQ9E{hRvHdYh^&E(}v$U=4g1{
z^Pdkde8GzVMuwem7osinud>^ZXH1pCprwNTsk3IT1GDW}9VoEfo-^(U`|S@ee#ymf
z!84u?|N6DBz(@Y>Bk<L)ehnUc;C`5!HD$DGKy%0l(sMR@0HzjH59t-^np(IekmOv!
z3QOgpq1|v!iCIrXs-c(}0Fzcf#ik&P(5yo}61Dt0$|x);#foIhmgsHK<(*1buorVE
zENLf|Vl%iguISQaz|tN%vM7MGyOwDu@wqOg#;HiLObi#H^@jw5tY{`usu9I{<=P_s
zR@n!M^nim)#aIL#^+AUBQj+#608-ZfAec<bHtDtcgN`U#<xeGAt=tX}+lNz@WfJkv
z1$U9kNZQ|!W9k<Bve)ISdJ+B+U=cu(JJrzgRBmoQ1G*X5D7t0PK6ip#<`6(Z&qSmS
z@7WLD`pYcWMa0Gf_x&gUl-1NH)9_`O+$gFwQ39k^kxS25hgYkZIJyTrf<!MIcE%zc
zyH0R<zy<A7&{bEF7xs!Ym!Fq0a<SqiW|?G*K<^|g($m4GdSHDAOMF`)vb+Q>4*FT=
z1jk#H!6jx+EG_tv$ITN)i7F;~2o#uF|Gh9sxK}A9KwGEjYwPbSIG+mOcg{IahUY!+
z1@M^1JjPU*1DKqe)WW<9wl_95rXl%C=)d>g``|}E_#u4l&ac58U%mrore@&OQ%}`x
zu3o)b|HJ1gpZt&h-ACbsV~&T%o_3l}<u^RsF#7^o7^b^<76#=urqZS<<v<sPnoSrT
z8H3>wBg`xG!On@DFgiK{zkmJ(@cZXK9lrjxe}xa;ax>h1`{&`o2OfmknHe2lU=HTA
z3!2(l=zfcq$yC()Xl#O)^L>l^wH_B|{;Tg-9%nuwu^I~6$)e<(^)ijB30(gYK{eAs
z$2{>ljQe3An{z|GU2>v@k!_A<o%qkLypXrvorBgw-4GNlQgHq{{hhjQg4mkYDqWrU
zqf$d?Cl?>SIO(6j-9^X%Az!>b`^-nb2l|)}L0%ho-*E<ncaYLKO3E_{9U!IjEg~+n
zI|i?;dQdl2C&4S0(!gWKkfRFsH{}XdX{{&l%_v4>@WS?%XHZ#vMpY<Wi3lpRs((8|
z8J&*1S3@gP_8^LvJ+cXpVA`tyD550Z-`<vm#!A9HtXu9I<Tmb<uPOK8BAdRfnYBWR
zRRRQQV}!tRJU9V`m(lmpRv$bBG6*Y-2%kNebN!lu96Q)~jU^rkqg?gdpx4c>Yve43
zbkik@7VI=Cc+xTCP_j4@Fpecv`Vc{qME;fF?2+e(u;JreM);~@g7rmGM(Tfcty514
zP>UjWkBkLX{mv#k7BPUCzUVVtpyGyF{*A$y9k?i91X3xfiD~_aOAXgSV3}YwCE@`L
zB4b0+8iG^{j%*KBIr%mFT7S$_!h+|A!a41Y{J17UmzR*DTn*lGZO1hVIOq09-$K&r
zR>1^v*mEfZ>{9kQUdnt>g8$USgub$F-8wk)jML$Q3!VYzop(O0TD?kJ`lqKSVPaxN
z3;SbZBe37n{j{L{-MhX6-~Q%z;LCU1p~pzwR|5Z08;&w<D;EMXcThp9+T5{Y2kh9X
zf(ZuGKG=`+60nM5C8S01XY|6bN*L>!rP|hI6dGaIE*KhW!5L>f9?m%94EVQy`xe}I
z!%cAe?YF~k@4sKauPU#?0yLC=bEB)>3UGw$C}`YXE!4rFrMBaJpCqAyg;C{c{01@)
zYVi@StPMEG@2jnj`PfJ4_zL9~F)e4pFW<|HdCR?5Zu>uUzcjCB_gZ@s&r4TVrxEqB
z1U#uV<3E$j*<q3uE##x)_3HB%^7Hh6%^c8c!TcUYZm$XypoFTFT<$AX_7EO|q?nb0
z&N}{v8aT*cx$z}R9C452gPKrm@%<391w~_9utbtPxuiVcD4oK{^^ODuh|ko77f4w)
zR{YG1TxQ5Q6d-2Y5~OW~uO6(i;7BFf1-o}6N~FqoR~&ecx@zRsiCqJIAs3~0qV8Cz
z=n52$U3etZUIjqP_rFuaH`!{&Xxb%nS=Pq;YW_a@WAn5r+?wIF@K}#-G?ek_>Hsdz
z63KFjM;kp=0@w#cf@p9crG*l%y-!(QT|b!4mQ(bUQgl90bANwrB@Z#whv=Mcq>S62
z!;P8>o1|#iH3AC5DO6~j2*D>Zcu(4{5X8qY<hF2yd>Nr35>c%KOIIRwQZo0oWu%G(
zMn2ZrIfJGTCit<jpnjyz=P{vVb4U$;`q~@jKMi3lgK<E28&nE0#>=_pP-Ouu47s=&
zNx>9V@?~PZNq@}*lZrJi$4)@*KUB*2`#7f3Cd10Qd{^P~QWkse&(E(_r76rY8G)iL
z5fcC{gbMoJY?*QsI~5$i1FcpQ&OGxBIQN`$;K@%u2TnZsWNq13Wp-}gsjca&R;_}4
z_A!3`Kl|A);M1S|6ny)e-!|<`Ou)>{j8`l)n?V3UiB$PxjynbpUw^pmQ+rl8LlOYA
zKuf=3jlIq@Je#QX*8Ekm144zJ`kiJxr)H*Mba)sZ_qfNyvBw?{FZ$NE-~%7H3I5?9
z{sGjhFBw<AcL>_EZD=&YGt~vjt%$)AtbgS%N&<E{e|@`0^$TUKTVHZ@$_7VGoLNx{
zzl2an2~+$zYp%2&f)+3=XE%!;;AfiWb3$8maNLHW3WQh=L;|n^h1c7#^QcsS(Pi^l
zYXSghA68^D=hW}B@rH!637En-LKX!+->5af{nQ%}XdSvv{F!5$AY+L(5K5w=)ZN5)
zmG{3K3bQtGE3sXtq7tAZC>VI~PRo;u^F-iPaUU~Z(Cx`**3k3Y2F&)cd|3M70wa)V
zo+zU=!YUq5UWY5%^jbstf}!BLbmPV#ko*iQQNVCsF0ePqXC0^Ft&*X$0!3}gBGh$@
zW1-lqMMrxT02!)lx#E_RR2g?Ka|qD`Ibj#He}ip1B+5uTt7RF9<!peTY_8-SRX};D
zzj$p+F^6Yr>`>Wrdm}Dob7I<GdX)#F>iPM?C~>W`_-dg>IF$oBtwFbcYXe>eIsj!P
zLA>#n{!bVO!yU+sxiW&I7d}Nd3`x;KpM|65kOYFjm>uo;KdTH3&#Xdu`PAW@2|wJ=
z(6c!$3374I%O$KHuHca&V;i(Yu2rHl3KutZKhocwA*$*ADL?(T_3vN1b}gKD-g$7=
zS!coNr=JGv4_gndW=lus-@I`vjEuEl+4wS8xz9@2v}Ft2e*0(Pv!A^kHg4RgV*@<+
z;6{xGP)dcd@iF%f^sn@eD^{$4d+)nfD;*9$>~I~KA5#qm{fFWpTYp~X)eKfggP=Cd
z@@oW&bOrlw&(7)RKlR*m;e-=TfOF6NJ-GSi55m{){JJi;bm>x!2v7<NinLHJ2mO!;
zVO=Py@yt4Co6<A9{H!N~N4}cRvXax^4uz-e7Dtq(u5CxsZ)aoY0TbmEAf<%*sn0!-
z{`quikS?Krvu>SHi}Y`e7ePUhoNc+`kz5J&`)Q?mc?^fX6l{1rp&qCz_q;`MWEBMx
z8Z^QCrQ%r_J(};GAe|=RE1Uu~qdfM!M0_ss&(YZ>4T2j~KErw^8mzIucJzO%=R}}q
z$i$su@qZcv`L%m4J<=5be^LvAR|6K5o3Ks^fGXA0ETmC!1r2&okbd*7d7dbD#Yoy@
zsKt_ss!kYU@0GHCImSd`I&&+HNgG)-K$JerE_cDATtq!+?L{9+{U5<U+|}{ryfxq6
z!;Q&fu);c#AVLIAZViom%ITBYA?~cv@!(W$x~Z`$3>Jt7Z)J?Y1ezc@R>(k+b>-%#
zpirY0cU#yg0U8_?<JwBIU4eiYF}Sk7e_+8O46dJ3RM|lOiKw{*0!e`9n}R7+hp?0?
ztTRr5=Td&6!n1$n4_duEA+yDpOEQ<uN7Gp;VTM~;IO8SmkHmtRwD4PqY$?=`o<U=+
zmbS#JNdC%7k96|MC&Rhto(pH4btas0%Bebf{@k1jq_-WWre<K-_&6MJ;C{O7kAM7Q
zxc#%Ah5PQmU;q30J@@G0Qz-ydRsbDD&;F|-RYoZezWn8{!jqozM0nl{E`-@Rl@c&c
z#TV$sY`@10DV`-%w6Xr&ZvQjaRpfs~Dp26Aox5OoWEj>ScpzMI$t&QL$D9fu`}oJ;
z!?)fF_x}1`7Xv}LFHBEO$G+_u*9|U|_Uf)NQ0k<ukl|PEBrP{b-N^KJs>l|ubCf`Y
zmf?F9KF2?hHs6~|6K|g?TbbgO3vvS=GN+ld?e~IO%)OKL05Iqihh9-6^l^Y{A-tMX
zPLr5I0dby_w1LWL%9ohqE)-5v*>RlR1IOJ31|`o`)TxPnK}YcB{1_8Z@tx%D*%}Ox
zB-Y|DB5K@s`Z>P`<<1Mbe;O44Pj6dB0Y7As0B9@;(`tGiJNRD3bLhXu1t%HvS8)B1
z(54ui+aPVq$DO8&R=-jGqe$y6o<Umo{K(7*@Q76aG@H#osWX`d!@_#v&-Qu6i3YuJ
zN=jBLvmu3tqt`zAO~2ORRgibPFCxBPMNwZ9MSAfUt9%rumLu?1K29j|8HiSRI6I-=
z3YG4aq&N#HV(>atst4m=U{yxt(0uNAqOdPns4TRyD)3UTBr9sVE?`-tZ4Z5GNF8j?
z{&mZg2%-ErmH`WRtqP4Z9T#6VSh;!1b{FSjgowzlC`)HX>m*y3{cKD37&_M2clMk6
z)GrD`^keR!jUu>zVbj#|uLAn10DbND3~b-NU3cNK@i92{w9~X-|Cwhh!T%IkvSf*l
z;{VV?o3zDy#fov*ci(-rZ~o^$|2eqhjxX!$cYXJ}I!=HJ;&<qwhw5jj>*(KKN*aOC
z>A<>m2f+)T^E^20&_iM4#?4xhFwNa#GJ6=JE}g>D_nv|LchtRRumo}T47G-I>c839
z8JL=yhOyBxIQit0;K-vkz~g@Rbh!1_Tj8^x{jBb{(a}*D85@DQb{o`BHCD_Rkr2LH
zS*pjuMzl7RZ4cK`orA0pr8RixB4K?N3jDbLq7vJ@UsR~Ly@jI4{jFCNBh05cQnmz#
zW`@+`8I#jZ1=8$)T*SUBKv<OYdC%*%jxi}ogab%01A!5~q9wyu2mys@TTG#edtjP+
zvxhg63Ka~NDcr9s$k*fplgL$O8SVPMd_*b%9<d4len?VnQBv9;@SzWE!K=vY5*#ka
zq{>#Uro5a7ad0C4q&Jj=rJMNJ*4FkHGduiLNXK2M)>cCQL=9Of22<!R_nl~DeQ6uG
zgy(NXb&*32gwLpaNzOzyn>HX_ft6Cf6zMW4K#xEvSXM8QwC#n0cQwA02+I?LVCJl|
z%4bg(vft5fUx5325>OT{|1x=|ZO{A(+v-+KCuH4J;z_Ch$_`h{wC0dX1+B>SdZ;NV
z)RIM<pe6}(v?2OEjE3GX<pMa>CFR$z{rf?|{M)d7=XQO4^{Uly>S?FwX#VG(b3UB(
z=#%vIZQHhKD1Wor(gOIBCHv}Be*g4;{t3SJ)vv*S{qmRa?eBaW*00|H`>$QA>!^0M
zuYZrEgz2ptH^Up>csZPN?m4h?=Y;mVr+X=d?WZYqUZKS>uCE~cY6Y2C|7sjt+GSv3
zauRmz+@UT0Pk;K;;n62QT4yf!$VWZ`Kls59%zKZF!T9(n%+AijTzk$x4#%s<=|F{v
z`A`THzegBpH7Tfw{=fy4LQ5sv(cR#K*i|78>+%P=;ljD+f+6ZajrE0xUZ~3bB7Hw^
zT56^;$7p^rEdc6j_?Msu%&tk##Dvj+kBj9QuqSy9qfigg1JV7`vq|WZbo_-7L8y=d
zJ)J)_Am;8JBVa{-E)zAW>~x7r$_%QuqZOp?fwo$R4oL-mPEu-6!w36d=lGp(H$oTI
zi)WfE+y~}EgOB4ZXAP^f>duRc@SZ`BR0V*s{-;z|k`iD5d9<^X*gLYqe<nzb-PwKf
z%x5+7A4_cbA>@pHkPjcDdGyc3fJ#MF+P!@2QUQ7fI9$PR=*q|q8YqbpjjpRpP=821
zzS4N3A_$-9q)GqWob`&gC@CSzkBp4J1oOY+luF%`3z}IKky(C_{mTMqQvW>NUo04$
z^K~Q#Y9x;a$`g`qj>J-=XaY0d0_u`BDg6ckw&^_&Bp)C4+pGGfncvfT5olc24T%a4
zSuI4`fO2Li><`p)-LtOZ4-X*08GS%dMP4(df_zCJRO#91{$&Cr8YWiz_s<yr{{8pg
zUqk)RJMUZ_(f`OJkJQ(9?brbmQ&YPBnl)=+WTXX~H*bYI?zjW)yz@@@@>jnKzx?^n
zb;SHL&NvHZW~TZQ`jM1!;=u<WgfmY+1I|AC$<S(zz_u-$V9C;Pv3%M^hO4#w`f)3S
zDA#CQ0Nh(m`apASxYg3`0Xui@f~{M(!a)Zg1pocN|93e3^xuUKeBgud#V>vVe*4?|
zq1zqS?i6ZFR0>1fukp+%wfyIzl`kksYl**3Vx5%=+(8V7nv~qn3Y7ts>yMy=cu5|A
zDc41VqO8wxhIAdKOb;m7LkO>zX)}O>b5v->`#8ZdHAmdK_NN$kDe<q42V?rd(z#Cq
zUgpjq?qiPGq<SIoS*32F>Yg+iW9i=W<W6~Q7z1>pNvluHb<@>E*hd$SLKJDyxhBjx
zM+s$`4;b7#^0tnTe_s@&J8y*dnktRVBMSxaNL2vjCsoQfd7hL2+EU3Zuu^nsujz{g
z&G2BaacHMD3o+1^<HjtnMwm4TYR!Bo7Yhy2T7v>+?stkk9F;d4yzI)+O<S_*$0Q@m
zg-NEMs2U??WJ(H@_%{R7!;BAoZRo}Nq)s?SRQ%Q_r;si#SW{MW9B5w5fgMF;W_o>u
z=LIX)6$}Qg(wZD;{B4V95iKI)Ko=k8z3gf8u@91=k>{glY(?u-)DYhC`%@i%{93P0
z_Gc-$S>PMmXqYJb9e_4;0?WLD>7RJwiE!~n7s2@#T%i5?6>ZtH1v;G>7+<ywR`0hT
zD35pr{r}}J?}1N!>QivrM?L~0trnbi+UaoUx^*x$r3C-&0})cyUb%VmW>~#qHN5`v
z*Ta7M?FXATZq_acL97KbZ#}#}r38=!QPOuoebR?6ptfC;wtvS)N1!`0Yy%sP!V{l(
zHk|s{)8HTf@gLy2_g)Kk-Sr<j?V;-T=1^0+85kFn-UHeOLQ6&FpZTP~Wv*G@O;9SQ
z?<L16)utUMrk@M$mROp3IfA$fo`-v}QV2;wnAHa<En=3+O@RUAoJWxtnvt^MR6UFP
z<C`y;tRoyrMl&s7iqqhXLM1sqFl|8a<4Cgxh0*AP3iNl>U1v2Q_f+ZZcnfSJfew+V
zHi}0mnhK_j<YSu<bv8lN#^q_o4cZ2MX2NL1-z_o_+J#!r`orcqU0;l^<CzjLPM6J?
z)-Q>}T)~$FY-bUg^WjgAL<NAH_Ky*T_t^{Xdohg3HCFwsoc5b)Q-h#A<aDhJTvej^
z=l;)JP$5MP|3w%;_P&D@{zc|$0r;#OtWQ$VAf*&HLH(3=*ID}$mJzNbsM^4}a=7BR
z;Pdc1B04?cA!}hWmhW_kniR^>eT>&nPfT--^@YR_XD^SllvM1!qH!iE&q7~S&oq0b
zK*-2ZS>6nJ%xF`E0<DOMg(7CEP6&<Mp2is_2dgD5)EPe-JWE0hbQ6pw<YdZ>B9bz`
ziPTC`@Hbkf&OXKk;iS@`3DBN0g8%rq@?}36F1_?pIRE?$v@gG+ZQFLh#KcY$(SO-0
z?boh+{D1V5pTNyG-vqz>`7d?Kztc`VO^@HsojZN=0}%dI8&gvguyyN3c;EZ3g98pY
z5O!?aVcZqeoJs6&?)V@=yDt+WG`PXZd>52BUP{5!CxFE&TDEMd4iva~%XV14d?~!-
z#V>^?oqaaE^PTU8zyJHc*KQN)-G_%;FgMo`_wZiNttg8_4|`hDkD06)`n-NA%WGg6
zHWu+7$`l6pAFJ{7y3@3QAbuu&o@Le}R1J}cB&f9e;02I@u?#4na^<&sWZo4(e9!2M
ze5~^=(3RmvA{y*0;M17((<;Jk<-pC#SE81F3=~Ih(>Drq>>;Gxc7VBU4Xw$HBUG4|
zP!lBxUg{Q5fhOo{Jq3q7e#BtV83h*$2%J*3dBuUeH<hA#x?-C|u1KJSlY~Zu09EKw
zpdINP>LHk)_~_L8WM9|b4|uk2Sg6tHcDs)p6u=`<0no$2?k8MrID0OpKwaX(UNm=O
z|2)dr6fv_Na~VB4Dn}It=AqR%vmVF=0hw<%3{IJGlNhC{=&nJ1SI>NNkY@>=B%Jz{
zzL@Sg)dNE7qib8Xml@;Z7}f&#`9P!h_SjTaG<Zoc#P1YhDYX(P!hA*ZhaNm=)p9&o
zEEQpdbjwTQ%a;+uzD62zjNMQ<W=w-0G+j_X`FaMj8O;Z0m|#|;-0!YZfK_gJ{V6J?
z`QolMjbcgppQ{vg>a()?tAENr{q)mMg-b4Z89d_|&w&*y_JNu9tQPVWDnRv&N_(f$
z+bIjSiopNTkKU#u{wq>Z`4tTU<}VBXQ?O#iDtOCV-U1so90j{}P3n1IqVjhr0D%2|
z#i)h~t>9a7zlsHa9;F@?rGbLMT5{CA;o)KZeP((Z+OrKf<d8?fd*AzBc-qs>gZI4q
zFX3Om_OH6Xl;T7w4loNs-JpmPIT&(}x)%(F8YxMsMYNAS)aM=V?fs(mEUGF>edac`
zs`rT%peYnvPp`}oPXjbP_iT*dXo0$v<l%&~iYRCJX%z+m#EbIU<eUq&_M;#l*Fo`$
z7^T=}Ri=)@%)3k!z{P8<my!US#l+{nm$A*)+*u=-`9tM&T%~r5Es3nM#_^wZ&cp0F
zr~&0zNXoe9J<_Q4h_?Qh3g!!o>I*361|Y=%$O-v5Z9BDQTC*j45mv!BiZ4p)7W}Zf
zN|6C70lW`xUT{r8J53Nif2eXMwOUxAf<DcEo#{ALh54+@=6v>DIE+x^OJSa2)OEIj
z2NrxH_f_rh-10AVbV`d~MByY#rSg>E##oP|0Nh1wwv3f6v}{sgfXKS&u{N!siw$67
z&$6jQ6$I`jD%Mq&kus`yGn7>fQ7YXJhwi1Cs1Z<yDggo}HLxBNMlvzqQ^6gpT&Y|W
z1&XwusA0yX)f|G+kx`hQp4P$WRM5K9Pd^<ly7(d;*?-OI)q30}rgp&0R2ycdCN$iC
z<;s=1&OiR|f7H?KC$>+(#MFc?t1Q{`MLObtdq%&fibL?EC!GzGlQVj1sOQdgyD-!k
z64#hd>z9c)?%X^=e`d7)yQLP)dDF6r3!r9;TZ6Vi6%b8j5peI)7}DjHBA_)q4CkHq
zG&uFt$7<xnHP`$#Jow;4`u7dDhGBAQ(!5L8Bk=~}58gv?DT*ZELS~8JA6uAx9b7}`
z{t&FQVk=?>f{vp^mDvTtM9H(!-H`6rJrVK`$+Tv>k=Y}ZvkZ&+6@f3H!Z|ergn~Hx
zfOP|_zyEKPsY*~VR0;n`MGENB>;Q4&{ZS6di1!GO5D3vOEube<@*CE=3d3jjMgf^A
z2GHb&xMC_{So@`URsz&W%^p*O{MQgMw>%<H0FN{UfT3nu5KRUI;q$9h5G|aS5)4@q
z=5rBr10f|*#$6-G0R1=GMCjq+We_j8y2ixcl6wCnjIM-oIa;yJQlY5e*?cYp3Krb(
zwI5fSAwr_?aei7yj4x9v=)=#Zu!`n`W$N&NbO8a;Dub!72t&YyfBb8<KFku(O>Ep$
zkW6=G6r=~0Eh!R*$UIAC6k?SEA1h4xm9m)N{m?g$SU9>F#hG+C`=+r_^i<c!zG7e%
zKt{ogALepq797F4mWoI&u7TX#7uQPRA)69-GJ=qr7kVVSDss5LPL*BaoOcBY18T=Q
zweO@59aVnL>3b$19o@HSrU8|<Ze(~w2cA<Fe3jzwX}|w8c+m@A1ZSRk796y0t-hv&
zer0W+nwio9_JIc<tOfsn_=mrTuYUDT*tq#Y*t&Tuw3;nwjTrd-e34f!G-1Pr^>FdU
z7sKo<xaj+85S#3GnzVgBFDa@;!@jc983SVCo<}B!?@P-pH&~!fw}tvtfu0vPaAR}X
z@Nc?Iw+k~fvsyWDzySxq8{c>ZJod4_3xD~Se+jqWe!KpyW22+cfLUnIc@#k3?rVJv
z5kIfo8qNqzK^CLZbiOJ#Hn-kqet$05trPkZ?r`#ZusVVp6qT`peDx(T<<!2F;@$cZ
zCd#PP`XBLEEFJ)^m5@2Z^+lB>vf?yCESiJIE}f7!Nb#UtiRA9H^E2##;3e|u`vO^i
zffX~-nMIM09sBz-C@8i6h;Fhp)nyL7DV$H-T@96<fe}GaXd_B0<om1Q>BLkU%uM9}
z{@s?y({pRJVjUBmGDNJD+7s2Wff=A4=G1ybTK_TpGCNSY_B^Y=AK)QTlAbCB?Z<1P
z?;<V)VMFl3N=Be3tAhvkK~s+3?&3{95H6+nE9t^2pCQT&6CtxI?M%A8bQ$im=!6aa
z+w}oR1$|*`nX<-g(8xfO1C|Lqt}hG9peCAH0=V$Rwe($^60oT^z{IiZtjP*KORf=D
zfFLSw56o~RxH2?BmGOX%2?`Qn9}!{S@t>h(BW#bUZ88UEv`pxIey9rqD`uoM(<tG@
zfzvB8)Q1<6h=4-!!pDHDCPE!I%lNWklngYAjEtZ#s8Xm_DRv}EDHpJP<7Ymst^Eql
zujuTv&w`h~^yP5InP<X=4IA{e$z7AMd15EbOwGXf*q96Y_qor14(|Ngop8@Rcf-bw
zn_*0+vKycGAakm1<#O;}_x=~GUAsSAcG>G;cz6^hCnr7PK&Mm+*}%ZRU#&H#=)(Kt
zA;Ed#4;3R!*nN#y7F}UIFZ?RRd&(KXlW_yEZ{p^K`mB^NDn^2W{-1NsIdIrvhrx$F
zbThpFh8y7_9XxOhmX3`(lt#Z4`0FQp`s*pbYu3ebTu8xKBKEVpoS5^`Tqngsx1~@(
zbu&WXSGqY@LM|{dfd{X-xGFi6L29kc#~Q+zD1EkV6xW_7>x#<bL>3{Yc*a(8%Fqyb
zWrf5XAu5Zbv?!}1?c<VLmlP9b9>}Dw>&OV1<Q&N~*vT32yqi+k@2Hd{*Qo_RLei4;
zf+@Gz`Dfa)!zQ2#0+-TCG)|cPC@M?%>{1_omoiXMqI{s-bY*!V;aaA>TsSI9jX?QG
zuj>AKM8pDkBq;!TKY$kpDvS`x1)41uY8Y`}F0yXudhwy|+pznV+v{UNG^vpAQe$=J
zmgMoRgEH#Z2ao?Qu`8Jp#cJfkB5b3#!d@WQ=f*ft`PO-P_KIAxg~4^T-_%JEjZ}j|
zP^COWP>#OAzH|^hbJ5*%0ei9}WDE%I_D7CU-c9+$=aou-(js&htk42!=sAv^68e>&
z|J+>L3I4x(+G%jX(=ULhKm8eS(n%-jYepE|4igg-Iu5|WhZw>C```OMeDtFqg?oN}
zk4|f+?yXw2!p2>k-+7_hS8fMC`q7VI#foL{>Q`S12OoT}i=J=Fpq!%=e~n<k@*ZH+
zQf&XG7EJECJ8ud$EUOq&JRBkh)Zbk@cf#=Sh*rY9^{sD%V~;%^Zg~F<@a3<31*WC|
zmM$HKp`j*BPtST~kX2Ik6fA52!)Bg2$Y4T)r%>@?sSkIGpr$0eVB59FBU64i@4b>C
zh#&Exp+*w^2mfAGv7-!*$086BRcBwQ(*HgonD411brTJss8d4c`ZMXiOH-y&irqH@
zr5m~&Cd$;Mo_3-N;lJL~OUo6s-Q|3I+5q%$rALSYp!p|yQqX*rqG2q|CAyHu0oRU7
z5pv5HEwP5tNaiWuBh(TSm>CNBt_U9RR8uKHn3Dd|(sPAfq_#^qLZ7t;+5ERJ8o;3Y
z!<t&G<TC!T-j$%?Lh;Fpl`4y9Zk`15tQ*4ti-G{Ucjn`k(BhZmc*RpC^#FFG^8G3|
z@!mIkQOMzIfsX@0<8Vfgx2KP4rfKUZWtn@09Ne<9ZY^a0;MUUs4`Z5br5Dn&U<B!G
z7#R83D9p|pE3={_jyM9Ie!&Is{O7*_&UpM8`kJyVD{H#4GPhbyIPk!O_4Qx>`d9FU
zFMJVx@Pi*{Uw>ttRw)5Zu)u{oh1ByD(%?DIc@8|~Nl(#A3~KquKe$sgn;h$6a$C!L
z6{QrDD_te|u_Gx64Oc{QO3KhBWX2w}GDEopY}&L1R<2kEFM82MaO}~?!u2=2AO7JV
zJ_egMZPx9n_y8(cpi<Uo_oe=01cv)trw=Q$)BwLM9Hed!;ilyt3F9~@#R`2&_!p9v
zO>XTEhL^`x2_M{-a-mmp7R_Xwm3h`TMjv`3o(Z7D70Q)C$T_;HNxX^BjNv~+OFs>E
zDMtP81u0|Q6J0fQAryH0Qe|Fgph7oZL|GYaYIvSgK3TOZ_I+44B@dwI1}BdMEm<#(
z;#+#ED`YM)&PjcP@l1+<zPT}}G5&r&6_kYlROZPH9GdMO)+m5Sh5~?duUW(5?$H9H
z@0RF$7j4e{&q?XXPEpEOtiKzcZ*Z%GqXZT@@_$Y83~@~oA&~@DQ9(TmG6Q1%Qd9!v
zE72ZD2SEXtpoDTTe^-Wl=nkOMMAsWiR59nqpRKk*j9V`ZRb`t4^qXaisc%1Qfl46$
zNCpvWIzB|&8U{`ypX~47wQE8P&}-Ko0B4^0c(~}Ii{bY#_<bD%U}km(+OusfOse&v
zVD=`Z-!{1GuDjq1U-$xi`qQ6<gAO_fPCM;1EqKmHWd9r~!T<jI?}z6-=Xr3+C9l*<
z3K|5JFG6+M_X)-Prp7EhIV#Ve3S^Qje6UJUfJifrL&Gg-G&`_$+curi;G{>N4DWvT
zd*H+qPk;}8@PqKZ@Bcs}AC`<R(c?VRRsj&LinA^XKno;H@z&E)DU&e!QSwz$$+~f%
z+03x?{QSf_4Sb)->}lDvtKZaSTo9BLUeQeo#Rs_p?;ea3Fd#~{MUVigBJ%?McWJwJ
zAK#cWw57`CM`SQ_+$@!XGcZ8i%#RElpDzP#y@xto``<?n1fccE^8F`5CH-D8ZTij=
zT0v$5w6W!hUyq`a!!7o&7yO#d7XmpK6b(XfKz|QgX0{v)E$UV=+RVRC66}M+mHQk)
zP0gQiR1yl72N2|Aj()y)J@n;bzc&%Qhxa>e!|_Sjp@|6R)W{M<_hq@qlZ-M3fufcG
z`#c?tt%6e8UPXFCr(=uh<7gCltvwdB{>89^C<<XfXkk}~iW2662e6W@PNX~ym`JYq
zvSb1CwnzqmFv@aJM0mW7;7!pRHP0z$c}eVN&R3G$3d@B-c(}1~pgSbxJu<LLSEi>R
zeuAYsu(04*n3vE7k46)QM}~D2d}Yy}ZO?+rAh&$^a`@fT9t#(~=t6kG3!V?lm#>1!
zsVSK5Ov6mOt=$9gpQ`u0?|lzG^{G$7H^2E!9bE6|qmR}?zd{hqXOKUM)blnz_#hm*
z?oc@U?6Y;+!G|6)QSwu9B|=|T^&hkby9*%dv~)3BE)q<_yy3<=gZmWSTm2dcVzB6Q
zidvYNa@EHCPywElC3DG=CD5LogN+Yuf@RB>!)srA8JvFl<KX5G-V7hU^~11pVkZoB
zhjj2oHOVnmVD0f4)B>qUS0(}k0(p|fSI8*aQhQ+#9X^Qt;2&r9H{>G(%fD~T-ScN(
z%wI&+dKHH%j0rISE#y2*T$>6cfb`7LvWl3+)~y@7jfzJ^bdojLWjWo&H5NQ7!HYou
zb?989ZjF&O9@Ab{1@#d~JjZl)r~H~r@dPeA6uV!-`-i-rx8=}r^oS(!Koj&d;Q-Q@
zTG_r&@Fl7EHvu2Q)}$I6j6p!>yz3Fl_a)AX9L=|Dn?%&u(oMO4`hE*@+CI$ak)Qw&
zQ(E<-sgk407g(w@hk<dOq6cf3vo~721p)p7%zza<+&zBKlC}bezMw6RLXb9~7>^{w
zdJ@VPK}pk_!KAuYogB0h`3<=;c&Z#p-d4s#0XJaZv)*(f_BKuDXRVd|IRQhA?=4se
zl5jp9?=PbOWAi>fkj?lx#>wX0?yvuGj);B;UO}TE%H3*VFLqn;JgsMFNx;jhcn*|U
zn!hl}CK-FI+C-=>)(->KNCvjLlnsoTb?^%`1L1y_Vz_DwKT%K~%KTEr7GrF95X`8(
z4C5q~r@{>)0np;#8fs~4z7qZwq<r1M2g9ph{c8Awi~a!C9eRis<hO3wqWfoj$r970
z>h});Y~Q{eKL7d8!!_5u2exnD2`8R-vW^9yvH<ArT43QHpQ+yKEpNF9PI~l7@X!Mf
z!Pxj%a-LA=ss3&i*QA8`6X>MrxLQ;NZ<t-cy)ER$j5eC4g_K>PP<epg{X1C{v;HzX
zGNjW4PVAb5sfj6g^rIgQe|5suaLm!iz=uElVffB>z5|`M$&8@>p%P$sF|Roa-o`3k
z`P!g?YjalMq=hip%>0<q!0&+$$SQ}N<&lmTx89R@8hD+rM=qq`Z`H0<U6mrTN0Nkk
zVIOp5P|@vfB%Vym)|fBx+Q4XUL@^NX3tq_fJfqOCz)$k1{;3z@D;5nRa&g~g&W*7j
zR7~aitJ5aB3Rr%}zgFqN#axjPTTbS!S&M975`AbRm;`II8iAA7_&7c%Aye3k!B_nK
zRZ;Ovg8~+ppT~?GR8s2l9;5to&TaZ(Laj%P^}kPY{w%#rNUECW^$D*;1q>I}dH}Oe
z-e3yEd0xmjn7QA-ud=2EV6L1XS_qqzG8xc*lN2v_o$^CsIV$kb16-&0V~ttCo*u0I
zLi+H)nJ+2>u-0s_q)cJANKjJWAC1g(&v9F{t*Y_Ifz=v-uu}NI+|6pLgwoi*LQuwZ
z-3sQmcQoE^BV^Wwbbk3E{e5WIXh#%0UMT=p@4Ff<e#uMVl`nreoN&U4&}q-XwyoRr
zKB6rBbDcSzDsZW?G<N{L`<-vYRaadFo3?C$b?Xk(!lV-ZcPFVcO`#6n_V%}H>;JAD
zJD@p;RD;xX=}cehOYi%XH^lfLxT$Hv&$BROO(30W8XX(e@p3wI9UUX!vdb=mbIv^n
z{^Bp*2_L!bBhYToXk`z^L~w|+MWzI(+GzWUfuSfkBjk_tX_43$?4g?bE?DT?xDg1$
z#ClmJWY@h{Rlc7!QldQQg&Ory+~}X5U7BP;mCPYgnZOohZFdzZ&PBFrZ$UG8EU@yX
zLnDHjo(pr3;kIU;n;UG{J(Nu6yc?;@zjF<A_hFwA;Nh+S7$`-DJ=Id-fsowHg~^YO
zlq#Y!v(!e~R%RFWN&?g{#);wdH+#rZjj<_3AI2>ISPr9$NYHj`fl1~66|YGLW={$g
z;vT>d1F0O!(mi)w*p+gOU7-0!CWc!@Y-|Kl$^A_#Tks=0XoIp?nIT4^G?6%0B3BG+
zVJ7oU6#OZFlI)3k<5w3RR-2^eoHd{8eQA*pX6&<MQS7p{SVisoHHiT-BWN9m(GulO
ztPU{NGHOi_{nqhy1;)*%NtDc2HK>3GGR;besNS9#<))UbfI|OD7Om1JqIHr!6lDu@
zPr=2<V0LB}CMGAf|Nb+c{&cwfjc<U*J?;z`86MU#0A^>~&}t6pdQ(%=+WJ2_I;MT=
z-~YEa!d-WL2j;q6ShZ@^g8TTVNUg!sPdg3HJmU;#wpuW;eY=haKo#Byjpg%!>b}fp
zyOKn!Nf^aChy`aar1ahKaK;uzpX$`4(9~<*DIU=629H^~_mShI(S+uZg1iDuPfo*8
z8;*i&uek=!I^ztu^2#gWo}d3*D*;BvMs(^%iU#PL>bgQ<Oac%fxwO8KjC~0!DFi(j
z9Q)yBQWgE(e(<m5&L3Q(*svgp3Mo(}bX9P^MXmVrw5}Dh?=y(=eCX~*+otJpF{QD-
zi7!<B7>;`IX#(vyvPfnDf=tL56&MWI86p~s*gjhooLb7X<L=qOp?bY)Sa|}?M@bGt
zQc+m#TmE~eBn=(e<7(qhh0slYE|W8b?pl$XAQwQxK1?Im5M`KJPef5B@svII`qxHp
z)&_abpQb=`c}PKd3k^JbDm|PP00XoB7gG`jR#jfG;94OsfTP%j%nt;laB*`Vv5er)
z>N|x2b2BjSOre+Y#>ck2P}mCKb!lZuvkLxCA?H%tK~WDkuY=$yDobH;G|+0$KVgnn
z+>U9+h2UWC3X#g$SV!<@VI1iJ&kuYa!8bTud;$Xd)s98NKW?y8Q)3?$&)5`lXB)!o
zT^YJoJWNcDS>XRqnIK8IL)-@3qaw*C@k*4@5|u{rmAcW5vs7XI4=yKMG3pS9C-Qr_
z&y*o8@%g99yBOB0ruvW@S|#icwT58(c9qtz3r{%fOt|#5uZ8o@Jr7o|-bXE09ofIz
znS)kq2&N||b-6YB?Wg<X*4u7{_y6ttVV`~W(a%+B0@c6WZ8=u^o3ds<_~3)^tmixj
zR;^wQ+js8N*A(PEPylM*=ZZnKiej4uj4e1Ok_ad&m#Rt-KrqU@uZH7Cl;RYFZZ}!8
zW|gwjD;UUsTuYqqQ)vJ@?OB+Zn1k`Lad`PFUI8bcaw5Fr9aq99KJiJHEkX66Qsi*g
zrUjvbXx9b+rE<!U{m^uZ(;%w<b{ZY87_LyZQIdoboh3uh1M>_oqoDT1OEoS9YsO+3
z3;ZET=buPKIM0q#U8_E6D~fd!-Z91br;f~*G*W#}&jM+$#1DbOBvwERmy;AKV9c0N
zlxh-z80)t6KkZlEQ0^MBu_iXM*}uF~wQfZUAZVm`riw}ObGWzZ`xsY<#t@L6jc$>4
z-I$*i!}YtFeKNcztgS{<MV+ZeW>94t){S1<D*=KtHnwJv2Fij_8y!oHm>2`1oMBIo
zeL=eKu5c~Y)elz`z{6PqP)5C>giO^MDJQ~;W&U8{roy#@jG;<ssxW8_wxAE@3a53{
zFpH7u2{Yw_1|kxH__0gObwE`b*?u<@Hm>O3EFA>WGo3%QYt95i(Ltnweqq7%+=0!;
z0a(BBK1QZVVuo0dBsZQ3hB?r{lLN}VBL<UWmLFZO<9&M7;TrT+A8RE~CaSm=+#Rwq
zbEqV(%N-K{Nbmmf81PdvxJwnmsGOnm+Kx>qz=w<(zb^+96#M|Oe(*9Rprc!pe%;z-
z=#c^$<xH{SOB&ytPLt1#iaJ3#R;IGw5@oS`Hh?3m8$XLh`B&-UMn|=^SLKbL-8Bn`
z9rh@A<*Q$*Q{?^5kw@!3ot;r>`ex0zHySWKH37?Qg#Yh;@87i#`GXHWq@Snew8}rP
z)5`5;;a>^)Teok8d+xah-tmriz)2^a1Uq)@f=;`we={=Il+?OPiAI{$b&Bf5eIzEt
z`)!Z~E+y?q!7`lyqy>E3%ltb~0m}V1!FM|ZNP`;DhoK2`uybMp#>dCt(T{#CTzl=c
zaPldq!290!KDhtB`?V541xi%$8+t(lAfsv?nnBXkKuGhV&hOaq305gWnEjOdST0tE
zzMl}@JwHMe%~HNCCupF8CtkxzK`QZ%5~T(68hl5APjXqTBRl3aIBo<iZC3hdGZmII
zwODn&FN<hJ36;Zmv=mB?#`vK8j?X?IxP8)d)-5#KB>`hbKUzg2OWl_uF_5ib0?5WN
zBG!LhF32HR_-vOg29ZdXUlY~~?d51)vK`KSx8o$DJo79L`7H33xua4DbS(b<s=%5V
z-lL?ybBY^Mh#3VFt_G}JgYb7q{MWj)=MPhQxGDe!ZvB_Flk*p-!ZWtAOz0>vLAf>%
zKL<*HO#O-%V;Ig*2@pK21`RCR!hqvwRa(F5Qfg2W109TI<%AF_y87vQc(`aqht@qW
zjF3W^U>tgnoXosK5>;dWgMN*H&B=UAD!{WuTS!phTB=?eVKxUBAhL(Gx;ui(^-HC~
z{Ggtt`p9fw#zL=!``KBT*tH8*ty&4seC9LZ;)^eaGamnV7+*3DGt&nCtt|d3n*7Y{
zG&CDSux8DEuyy+u_?!1#2VeZ>FX}Q&mW;z8ha95Y+uedcl6sHv@nvxO>8ERjhI%*U
z<BtCAD(HO)r7c`NOn!ddS@C1xKdfd;ko7LTRA8S&fj`-@v7H-~gi->i%nT!N@WF?`
z6>q!(jz9i*c;9vJgD-yZi@G$rOlTzl!n{irZuGNM1uc@D!59{zU+cjD-T+vbT2B=G
z3TYutX;ocUWOOKTFDOZAhk!b4HZitRw0$1vnSxn-@c~BisaVSn4Nw?^2;U5OjQNQ<
z)cYQb3W(l$AGRKN|5f~4?!;S3f?jpOP1OCY3q(>3n%5klp{g4y+qh%z9#0Qf1we(r
zkD0jUpzeRR)D~QYvMFmWTBk~2a#6%_S0L7MHA?Pf1Wv9<pzYQ2!9`!jK{3Y_zQ?)E
zCYlLo3A5H24X5n-4Xfk;qb?Yt;-x|nQz8sWntKQB&%pC2{GT#?$=_AUNfnk`u=oIe
zL>&TyGP*%o;&YEz=(=DAL`jK2KQ{&`&@#Whkf*4ggO&b|Sx78xDEE+x`Y6cE1M&Hr
z>Sl+SU~pD-ZES2z3;!zrJNoB8@vO7pMHjsYp8f1+!~Xjp0PWefj+U=n1cqBJodrO(
zv10j3UH;2o`4{-|m%j}Ea>pI8ecMhr=GbFldU{G*h;tFM7m}2azj^a!ST;Tm@A#kp
z6GmDiItZXib=Qo?itf(|Wm0G<;=2u3zY+Kf{%Ir_VSA4XnxQiRe+l~r#{A|kQcFJ#
z-Qu2R7dKtgL!giv1`FJ3jp$U44?MI5R;^eD&wl2!VZ-_jaQ*ey!^b}QG1$0yqwZHV
zhnyn7bzfrA+cTvq5L&<>V}x>Q<*Kpgy0{kDm!vc51Rdsr3U^79kx%43?0*d_9cih>
zYJBfY#sBD)7EU>5#~dFghDBm-fXvoHG&TACpIV9;8W3Y<MDc*Q8y3wpBt0THH*Goc
z9GqKpj2tf|2!GBRU(@9<a2usnQc!S=%}{sP1#v;<udpBEvpeKPNY)0dYUNDItAueC
z%EbL(W(2<O_K%$dQg#PDbaY+yVC+QX1vj9f>qZGnP_!;dERG<igH*1N8ur|x=S1@C
z*@LO|h_(JxW@mR$g|@ybIF6W7j^6hLqwA?j+~rDvii5Sv*fTJynL=mK&q*Fabx;l^
zOo}Qa#a+PL`kDT?sbaKp%t7j2&)V2tg}a{W@dG7w$lC)}kyCCsE||n@h@=AHtDo(=
zLyYU?;3>8K2fmc7O6^F^RZzcqq-p`%3k@bGbr+hArjFRJ=719J6&-oxk?^$h&xcpM
z{N-@sNhj&KwRQ7WU4LYB7&@IUOwUZi(xpqa(%?70`3?Njr#=av`lo+_iHRvV_~3PL
z@WBn3nAoN7F9yLMNhvoJZ2hb=PlqFpI1+a3*a5AU8vj<{S6(u6%6}D8tdWgVQX7PO
zldKf4`vw6a<6WdYGk-@E8eqhvOH}LSgcDAHE3bTqMg!b%(@k*KcfYFzf7Q3@zE11d
zED$6z0=yS$r0UEkqi`P`Bm+Ar3-0b_ss|<f7wwTX6`_?@;X0jH1%1OMA)rEB5mY)v
zXJv-h7=VJN*fkUbmKKaf%KDtMSf?lqy<I`fB_e3Up`Oy*b!e^&828FG8JtDMP{<zl
zS*K%3^)daNcO#fDMO{Ps`9ulEr7U!MhKC6~92Ed%Im&I|ic$bdr60;XQDtx|X2EZ;
zzoB(Tf&hl*5fMF*cvjF1Z;vZ6Qgv%Got4ysmD2nBWAqn!&T!aT2?UY`R!sT#2Y*xb
zX_W#iaFz8R%iuFoK>%w}&E=5Q)&>Q8Yd_lLX+X`Wzbk&UV~T=&V&dAuqS2Zq@i(LZ
zcES6WGEK-UP@<N?D&I$Y04EROez!R1DrnoU(Ow!A<?kyh6|iyWbU@HX6Iw$Jo!@w7
zdKx-YQ?T#8tKmscIvZa4(wD*c=l{Mgw{6Q7n3<h{(UDOYYPMi*W)7OeL$G|=a-G8O
z2jBlbeE##d!{6TUe)ydYzXOLI{wUbCeS6?HyI4s1_bUPR*kg}|*T4Ra8ttH{)og;Y
zS-Yv?HsU5Yy^W|$$_e6(O?8U`ubMBBL5p)&WUuN*MI*Da`24h@*1m&|>k_s-ho?ap
z<Q>MwMzo;+zylA!iWMv1wXc0GoO0^PaP@oM1GnG)Mcu!upOssHDpwU7pcXoZFw?!b
z_V}Y%I8y?bzPjz!6aJ{`C$v(E4P*@sgAguDs1yiQLVQdsiLqd{<qu>rtfimF*a(8x
zIYE}IzkOXNs8S>qrX{9>MVBBs?=YTHM@3N0P#vXn80?wsWyvOFj?)DN<ce>Es~7V8
zt{W`GDTSYKC;>Vi7^8#rpYHFh)lFCnoPV$48zV%GWe9tabyDMpnPp0Lu%dmA40uUw
zf-IW0fxn-ZVX&Bo3AG-!*8jqsu*nkh?B8!-E9n<-uvYV>BDZHKRD|#`f6$t}#@b&5
zbb+hI;pwOtV1Z-;zDiO;koVEifob}_1nfHsK81aS_3XHIdUC@c9nSk6wZ>KvP~^vH
z1K@D-2IVjVfce8VVMJQ6pesJ8j2%B44<bsJCGJxgkTIb_W^*NgP<MLV<9ZPOqX2^y
zZMoopBtT;}RDixtb4DkEO7Z!hig95-Q!7ZQQKweSSh=GEauOu~z7PFtiet21a*qb{
z5<7?d=1z~yQwoyVCk3$1is-yNKwpl*mm-xLs6F1N?W%u<IaKd4G}MA_x1)u7C9s`v
z!twBmSG*iv@PZe@zWeS6+qQ0l>6sZAZVhQ@x8hY*n!n+Z5g1!C1`j;=0DSf{pMzUI
zcrz?pz8ubZ@>5}EW=dxZP|AhHM(Q_j-MSS<S}i!`lv7}I$r6~_w#@|n!|6l!XTcjF
zMKKmFOrJ>w4rO>Zdmfq?u@S=D;+Ba`F{72**{IJmwdTjNhj|WW5(rWP+WS>PWU%j8
zH;UGXah;f&n1bJZ?Bn428*YGWuelDcz3w{Lym6z6AE4YSS|BR{a$Yx8XBo|@Js=mG
z6vB{0(H)$e3J`*z#|;-LWt|!0P+1hP--)4-TmW)b;#wADQ!uQDw>j%j+8%AClYTcX
zOxsj>`uDlDgem{*?>C(wW^LfSU2tC6i7z5<hz2aF2nhH*<~M`E@OW@RGUnN!aG85l
zz?ZJ4zRM4?Wo>o<URSRzK5PYNYC3KMalz326xxxcJ~R7Nf~V(-SHsX7b5BxC@Xz#o
z1Y7gLzDj?5VRjAupS*G_QmhaILC@ov3cgukIBH1gvlA&USznpXei+chO#$F(kpx`I
zQ`0g&valaS_wRwcPj`H+q;42RxlAT3dD|SH5=HkE?o)p+SFV>R=aK@(DFS-urUK@a
z{0X(@QDL!>P~lPq4x<#Cz1(YXCM=&6VqQoT{&Rx7bDLx-%Cd}uy++oNSDcXGdXx%+
zGn%#0gC3X(|Gs(lZYY{020FPOvoZq{?)yYl)TM!C_Yjl>@qG;H2SGU#?9W_O(fifA
z?7!cB@WL0p5H7v+wQ%e)$HMf~lunJ;8fj@kUyW6Jt__{`9E>kn2CdN+eEl0=hYx=6
zgRtqLO|bs~2k3To?b^9${QNno_fybx1yeuel#}7Y3op`v|CI1=kQrt#bz7cgcsa_v
zjBtJ@ZC=8<LE&GHM-!Z1_Nwn@{=7gMb<cEKgo5EwYehnL1;PRVjH%#%?HSm#X%nnk
zwF=(;_CJ9Wk3SKvde@cko$q|tC<;_sMTSDG5+rhKWDqVnWn}s^CCF8!@v9d^Fl4f6
zYYkx}Pzk{m+|+s-DKZ0iOGV#tA%tI_hrp`%e(JYjkUU7lkgrmzPzo|@m=C12v~4=o
zRw@IMy@2{Q&UCu9n47m!I=6Y9=NYA0t(3YYUC3niSZ&J2TlZnA;RKJ8*>^?6O{(=$
zevqw$exj+(3!1vhxY~`4pi)^)PKma_jPg9w!$|?qU*vybG9v{tV=m`qF1NjSaI4Qm
z+k{F&YW>UP6HhV1;U-P$n43X6$h2a6uANkSylvqSq6&=QJvIEx|MEdnaeI1~s`e8z
zR%SMyc(`>~`o990viTwid$ixeisZR8{hMc&MJsfmIZmYiiRP2cmJbyFm^&T%oDAaO
zA*=x-2!u*CdN1W}69!0(5iWRLPUjQ4fkaFjv+lch;#N;G2c&ge$<y)zlG1!0m@RIx
zNkRIgF|4Dk44>iWzv(vP>#tz^s;77C*a<_;20Z=g=ffM`@CG>Z%(Gx<Xc%_wn$U^?
z1>ZJf-ht_vS?J7lV9ma3w7>kju6`GM`qQ6=^@p$5zeT0>Q?wWbe<US@Dr@zrr=12D
zUU;F7OE5Jt0V88$`hKU)O_HT8`@O6g8K{_G7c4s;cr5NUV&bF*F5hqj#<T`7^Bq$F
z3JNv%t*fFxAR@=y*Slty{QideO$Mqg3n%vP$OyDr9hlfTp-}<Pe(tm3<Wo+DtKM}L
z+;-b-`Z{I_z~GXld8#=@Ylp@WDB!+Rf#sa#RuKPb-<gzxMCg-J2;$i&tOs$85WS5U
zRUXaWZtr9JXS59>ytv1VLXrg%``yJ#L5;L9Cy+l>A9X;w5WQIHN}7s^Q56eHA`!(Q
zw9OY*Y8<Pq-ohI|9m@IUbJw+OJAuMZG)MdUbu7<xtu@p9arB+?UBXg~`84)5Ld1pZ
zGleDuk?#o=Kq0=+pPR`ppmVtbEIqL7UIT6`wVs?Yw$pJb(G_wNWidRAR8nx*!|CCq
z02nAGWtB`cWEzb!B1!T^h%zB6AjUiu6(-A=<0|WYxIZO?(M%h48Q)G1*&3oY_%(|P
zsN5K;9m5jk86|Qj=QjVOh|S$CT!oDG*YQS{VbYruPB60J7aqJtf>ytKE;6cvlran2
zG6!ecnjRV}1p8zuQzOODVE1YCbAt|)qew{YMEgM<D(U+{k52}=$?p$}6x7@NQ^EJl
zp3rIyYvF%#a#9EHJNkEyhBv<Pa(LeJpQqve?YTLao|yuL+#enp)`Fk1kWWob!t!M+
zVQk4LeCdua!YBXtC*i;T>({XVe*0@-ZZQk}VamU8xbx0C;r#Q@)Bn_Oi%?WO48B*M
zvBi~u#{_3h^eMK0;o78S-Dkd@1I`-vK(dWeErHXt)B5Uxd4`vVuy9ja37ndf>cI5u
zEF6CL;c(5>*T5NPoB>x}c_rNale=MTY+R3niW|`@8b(A-)eI=dEx~!p!<?LLo+%Tg
zI+bh1*5m%^5rZC~1sXMdhWk(o=(aJknbeMXcFM?6XS}Oo3suEO5!<S9Xt>D!h0hU>
zSD{|jE|U}LF>3}Y2uhJOxjE7I`GeJ+K3_H>*o#K#D7B-mD}fU~Gee+6soT+bvu)3O
z7Apq(NzMf?L^UN}F)mA?{|n_Qr^X*$ZH2w4A$FpyI58El4D9jra8UsCZvD>*^C`*+
z`Z*sa<A9nGED5VapyDX}cl()pZXr{Rq2YpL`G)vPTkTiQPCO`PIM}SYhCRnP&4+-=
z37JOQ898w;Oxr@`a(1AiP)HO3Re>J^caiLjkRj&-A%V-OO5Nk4!J|KT=>gpAAO33Q
zy0r>RELH*%){xdiVy;K>NOBzcn1zgVq{+u&Ecu~)JFC-GorQM|=$B%jJu}u_n1cok
z!P2G6V6M}Kt=qQ3vZc%5#V>g=T=u%x!g0qQuOaZ$(=#wT*M?TJ0mH3fEh0@#PQqNb
z1N-f_zg8Oj>Hqu__}=&Kf=0*8ktIu(ILrTHCtPPo9d(pOI*g7kfh}9MIIHx$QAS&p
z+>*Eqp4OTgQC2T$pYRk_5wfli{a;lIv``0N5H<xev2}^)WPD+jOTc8it>?%^7hMEL
zA9XZbbIsN8@sEET6aYX44phn`^{+%}ohrixrIN9X5o>l2><T*)K`kXy#0iwLP)EMw
zf{-h@T||ODeNh)N9eNIo*b{ZqL04-L)+1-8$xdQo0i@PJ9Tb2Ru|Jp6FH4xxkF_ZY
zs%Sa&fJJ})rhxtPHhz}h;7=`eF>rhhMnvsr+oXNP*9PGQUH?@!M^U@}n)&Ku3n0%(
zvlY-?K#C24zn!CvtEiZ_EA2;{vJtz#R#pHyr>yLi<F6Z1;Bq#<$$IN{bq?7*mmV$(
zfHY+U%D&RerSUH5dlf$GO6c$A{P@Xz4nGd9i-M*LB?uP`iOQTJyW|7V(RUP~g5eqo
zo}aLArl=>Tlm<o07t0qZ4gBc3Q1B(v{~>T8ypDUcWML+Mo2ku-XpV!qfX~XL50nH}
zt`5p>@PXM&zU~g#3IVb<{5A0Rr_jH;Y5>dplJ7ycu(jihg~Fu?>{xA~(QR>e8rQbX
z0nF{7@*$JW!yHk+ZWg^8g!9c7j(5tHiQl7TG{j%~_xm!VBO@@>9ENS%w(9$5KK@L&
z<Q1=g^Ur@89B{w^y3DkS{@>}q@X!zp4K-nQrVX?0S(o1L&TrlcSHI_Kxc4{r!al3^
z(L!^x+tfkb_5|y{A{D^!+u!~+JnI?HfOF41*ZpPy5JB(0Mg1xO0_B+FgQ(&&?xS2#
zE6r=svMA({%?brpy(*}6-?f9PYP&}U>Hh4xBd|_ii`1(ipBaH(#k|%A0<JPFjI>7J
zcYpVH;p(fehGUOE7OuPYI(YEGjd~s_<rBID=-L&*&q}YCkY88fn9*}cLtf2-3P5Vk
z4S)uZCDvk7u5fMe9P?HHDcM`8&|~tZ3vL<%j60&+OUeJrrLanNO~o5RP(cLQ#y_!J
zndELMl3flMWR4Pb`=sCbdxSh>s00eiAm3v9Ix<VxHQQ0;)LtzJl|>eN!UL2V4^q6L
z<5#k1|7Q7lXt$ckO@;N9L%9e+wF5q$2>4n4%rW7%9jbh>{JvL{+V}9*jHoTTp6dwy
zNVR#ps^T<Yd)>86%X1#DQNUGk-VJ4%J>&R)_$vUK0Dsb1s66rRp@RPxixwMQr@mk|
z$Xs@zRKR~UAtO`ThI*A?;meELL}~VQ8Mr)nw&%{2zZ>4-w$Q;?qD_z=dO%bNf&3t`
z^+On^_t_KcSIjFthE?ek-6ay4O!Dzh2>+a2%PLibcj4cub-R}l;Z_Sr6|gQ0(iD|R
zp$SO6#EY;6XQI5P>PUMzC9dc)%x);0yFLp!8&NSvqyMMKDHQ@q2j7zlQ&PqB=#`))
zLbOd-Rx!2nA80I3)q({5{aSqnt=0&Pj*Y_f<P_|j+74^iu7wx9=t8*o4_*wXJmwT#
zQd#(iT1^-p9@fuL0{z6q6f~O+ZK0i>o`Mg5_*VGFH@^x0`Jev@haYx0tXR21=XPJL
zf&Ox&Mp5~t@4N55I(;3csEgt=)JE7)0oq>a3X%DpV#YII)C!Hn_an;JhBj*wJ}!I|
zu{46%zK)SX4Q6yt@EVPJyCYEu=q=Fp>(tB?OifL|fd?K8Z+Y`u;jlvw(^&$(^X>2G
zGKdCH^QsONxx4W_l?ZLp{8d?c0;@kclY-0C?JRZ1rPi+P&Q60e<%#{xJ}ZjCjY6%}
z1_f<Z^aZu})(Y~*n~V4g25nB1l`PQGbsa~67;1t(5~gKUP*hj10%?)V8e~r>ry%N-
za}8L})gUgkxybKX|9xS|`cn2JH9P)&B)*2m&q76*B>YF;V}=ZW1QvG1kOv9MIV2A%
zO@&xc^w}il3V&=@p-qUPqB!<J4H6YPH8T}eJYZn*Uxx)Drv|$~L8^*1Y`~#TXU}2?
z9!?5?zJ`5XB2N~ynGlpHBg4<dVBeo72DDd!kW(#-<)CO#L)pumAi_Jh<Vs~YQ6@L1
zaiv0Ku~aM7nFn$kXC>;ZUM~1l8={_}7J^WAeTfdy5=C6)qon?i%$KYR6<iizEzPt0
zOlk0*95Wju0z5=feHm)0)P7x^?rx~rgvX!xczD&TUIov4?sK&(fb!{|o}Pu#kzp8W
zsu%$c?f*YB+lHk}$F<e}KYs8Z@R9%Z5%}gezX3~@jKgCd^B66lq42+_k@7iz)-x`E
z(@sC#UWrq!I_lN^110g2q6y`uB5s3s>@Me>^+t&S{1|KiuO-HcD)0Om8!IESRI$(C
zJVz`4Lz_0i>V5Zx7r*$WaM=3waLv_M!>2#>X+2MsGDe{^)Hv000T@UyEG}KfcWG9l
zDkdQtjh+Pf%e7UE7wi`OgoUAAk?VB5iB^_s%35gYw2p*MTZAAuf~pw>PU1z}BP)l*
z`nuyYdYQ|E5FSfh0D5vaESQW^pGRl_H$F8<7y$lGI+f}`xcxq84{<ZpRKdINsnmK{
z`2N$td_sV@L28I{RF1N3>IktVMBzWRH-qGXTrh1*nB5?aT0;lXGMACVVh8>J#(|!d
zy|fge@QAiqY_H;-E8$tRpQvR;XeT9XRw)Mfv*t@dv{0LNvtOipV!Z0=L9(kyk{N2C
zT&Q((;FNIFsO4`tK!w2k`Q|pX(5~S7olX~Krl<AQHT$iB=RE7#@Q0WGAsm1F2{1Qj
z)AThPCc=NSp?&!0W@e!=Gz3e>m%z?lJK=lZy$k;Cw!eehZ@(Q*f86OX+n&+U^YxSV
zK;d8Y`^JqA!jqr;N?3o`df2jM6O4?Q$p3ur8${@bf^ATs^eRZRTv5y3hd)5(gl$Vt
z@dzK<c1@`=8AeD2plrc-vk99wslFe9Cp`WMdMwtj-vGDXdW&`mP-T=7K$Ta>46NIi
zu+NK2KgYRL#JR7jg<q{LbKT#c58}!J(U5@pZnU&Yfe0;SQ_k6datlE{3#&v(FRsEM
z<F5aR@tDKG%i68+-dIOMJC;&sK-T{XRAR|Hr0PeRv#e5~B!DCNR-vhpc1T20+54i4
zXC4*M6Losy;U(nf?nW1C>I%I|`S1+C9w=9u&2D!OMFH&T3IIoLZVk%sOMs8_`%Z|@
zz{rio(>i)(!Vzd9=UC{zPdD^l2^&wh5KVIdlFs2s0cw)GFDc^7TmP>RGug*DWj1IG
z+(PeHJt>lT5`h~j^oyp-k%EgvzI0iQeaLv>HLU061{3ll&2bg)%InuWpa;HrN4}6a
z5*1Qttj!UN$#7MI0I<w|G)4}7%DR)D$h-{o;p3<b;lOcY$=y1ncc$O@m@x^?MNAfi
z2T35WYh|n}l*~uKIVJpKo^@qu9UUEo6HYiDE_uZz@bZ^m0%N0NI_010SsfE#sHH!5
z=H|5Je`I)AD-Z7b?Qh@{pZMSK`P)CQf7j#BJi}RJ_e8-TNeiFj<8bI<>vdnX+cPjW
zwj%Pib%K!5o`sDF44?WsG!%riAj<*QRk$nl;!7Ig|FeaxD-8w`B)-a+>MvgNzJ037
z?uWcB0$t+F#x_1SX3zi+ZGwXjJ{YdL>MA(us10!4b=ScUfA}MP50wBp>esJ5n~F~n
zKeKs3CXMjDH8sxEm%Ub0dM4yJ|75AMJuXtvdWSx9(|tg&;hdr&0Ur<UN%u=YW3C(1
z0c4R!q3x!u{-UK=uV=q#9MFdc%@mMZRl}Q`!=+>6jW^ZthqBKosZ-HD4WySxa)xLL
z5uCvV0d&U+cyU>IDh9X1{m*_gTO!-_asn^yf{L?W+M`MpZnXmZ)pWf^3fG1}65kaV
zJNrOqEHc`Y6##$c#+~L~l^7Q>EgwS+a7L#p3xN6~p$?*U+<)93$?qJsvecqp84Ru<
zNS0~aw^t>Al9F-RAgz*G6zB+}_7ZC?2%i=bvufx|f**Hi!IZ}#SlC=vw1Hnx*H9--
zN$#Dg;P0q{L6tTM%7gOFNEH4f0W|x-;3+ifD=kBn2vu1JIQbM}g$H$sH8~hg{DKzB
z!3mE(Wmz+TEu$q&mx;#M#{zKU$<E$rd=dhDFkM)`r^YxHTq_tYx&bol2^ZE&4%Vsz
zzOL|JS|=6g5AUgesx2kZY6$=AEX=msu+Qp!;G&Bzgjc=t)o{{DC+q0`3SzBN04hOP
z(VVib>TRnFqpe|>>vZ5hfAm9m&tJX=etP#k+SgzC|EmCQd$Qn<w0ZMpc-FI?1&1EG
z&ZhnwK@N_AMC?2vDYlSo(vE=Cl2ix^?>nmIx(P6&gYId@GTggTVxe11k>=6}>*g5(
z+=ei!(MXX8I>Wv->Z^~&RueLGQgBxGtBdv_JpN5jVh!`(*2oAnn{C)+(EzV{)ob9C
z6HkG6yz5H%?Cqb`N+)&Qv|-juNno@ha>svoF8Is<wvYfsbE3CPH;a;|DJZ$^M67i%
zCcX@fsX>KRG3r14?!H=KRu8PXR(U4TEHwEDaN)UBBV&!@^{6r;7YNY*ARTCw3f{bb
zFg8NaSAlLg=G$odW*mk3EVykDJkUy|W`%}<aLp2p`3$$F1S3XuH?r|b2;W6x(ixnK
z2F+wtoN)nvzFkB1Mucynic_}}=3J)S<`%v~@(gw3=@(Np9)xe<^QdG8qWe^EmQ)0O
zmXrfdPRhtvJYEF7E;Ja;!3Hlw6(F2nV?_I>*=%+@dmsv6k5vGez(RH|1e&Ho!hmo*
zO@zHy+6E_u3aFHI64rliMGvC1nv3Eln#<MdEtB|#mBVKcp|DYMsE1LLLak;&8k3YS
zxE~H5R4}TWNQ=Y+@gVSGQ1YV`6}8Ix5uBe`$5a#*JAra1;ScS$Zyrcc6ebxrmx~oJ
z4^VTl8WRR{!N&&e{~9g<rW9igt;BQYqw$iy6@oF+6+_24IOyqqMBW3}RVDQp?YIv0
z()V?=`AA`eYW+#~h7$fw3cqP>$$#`IC&OFb@)mg3GoJ-xV@qKB_U#UStr^`;7rIT*
z@M?8k1z%Iq{y*@6o8XQw{flnrpaTzb!Pxe6;UCw>4}S0ic<Wo=1}m4ZgdID!8AS;3
zmg6L@zr>_bW6;qGU}`lq<Ku-(`(LdSNSzlcYa!aKn01k|$kZUsm2r&>!isDH?qsV>
zvnln1AeE3KNQ1}7Ii`=JmO|x>=((uUF`j(tDR9FLH^BARUk}$`cRk#9|9!A**|;vP
zvjorx*gcS5J2px_evb>8|3pDYL#=Vtr#LoZ#uD68xj-MZC<q$jrki*tI_+{DMDI0g
zoMAn5I*l6da@BJoKlgr`Z|P`*iX@0>LkkM=2|<rW>eqEL!Qp(x_<o=)A_^oi&>dY*
zkpiL{r9PB+DXNr-f;ILq7<KprF&+Sp8%y)Z%Z5U|oA}z*j4K7OFWtFMNa7dpy0|2x
z^6B*(D}{WP56Wi*@8hz&5F;t}K}i5d+i#U)7a*f6t#!hsdUM0eL=E94mvLl%+kLWp
zUQY<OML-MV1T|=C!kbig4;EEApvDR`^}Q(bOQ#nVUP6|ukg4SYZstw6l0dJg(uE)i
z|4vHjVJxKfI?7E0Z7~APbKYPs#48$<Xi?fu@bm$1QmM$twMl8zt!1*Z=m55?Ai96X
zD&Y>^0SknIl83wxdr5d?Q6nk*D~6&qWHLMq50B`wJ9g}V@$n__hRa_MAN^l{56^$z
z^8w~MuyxBe-E~Sp^_I*oOioVf_LT7d)1UtoUVh2T;4`23476wCX!v_NAwzW5S!cn~
zN3FLP0Y+M_c*_fnE5>D{l%iEpohCj*vaKbs((`+gb~SA*4lf4pN|gbFBQ*>$kJ5D6
zDpX%9W!0(`tKe;a{5H7d)?47oPd*!V?woKg0SYys-3|Mgqq#j(Ta#601W5>w%9eG~
zf(94UjG%D6f|ZyTA7o59C%ub#=s>BcpNl8;{3|`XnLg-8&==dIE}+Rm<k_huBA`lY
z37nBsjeAdFy31VC+|`ushgnSlQ$A$*n|i-HyHBOuT`ZDx-s1wO_wVbBV#NBbVN%fS
zQMAV*00wc!IC#kb8NgzAEgnz_%e-h!t`G{SK%t5JE)8Ze5<1iNV=j>}4IPDl1sYB?
zw?qoXxINbdq6Qn)mdd&#k@NL2ZUElTH3bWjjQ~dd>&|XgSJJ>s=m2UZF-FYL>Ku(|
zWzN@b^+ps~Ph;(`LTGqiSZ2OcRJBnX=vKOn9H$e<Dm6|VPFXL0L|`})&=L+JSJD<D
zWy}|^Y-27oQ49d-UgDkjJxQ5VOjQ=BKB=zXo<uz63H_`h`m5A_%A&Gs=Y)ozKkkgj
z!5iQ326)=j&WB}7$6?p59WbYb`Ia)h=$>vihhS!QMh6F6vu0mt4h`w_e(!wuJK=!+
z*21!7%dBCuM<4Y?N@@(0@Oa*N=fdhWYZPAJjFGfv>R4aMku^jwdJ~C>&L7nx@k@dV
ztPNX{wm^4DEMkyqv;dxK3}s;N>9_<`@Ryc3hY@5cFVPvVrH*rN<7bpJkTp&G3WYow
zZ;r!LpZZi-zh0#Zd>`EKzUyK8&YiG&)hewFn3$Rf_P;t=H8A%$%@3Y3H%9*Xq~mlu
z5rj4rWTMdz^a_IISTH0+l-iaVWZhBKUYBwes1VeXyoL~e#a-`p?`2lpB)mLRHxe@G
z`l7-k;XyT*BF9t=AHl8v5@M7KsFqa!=`uV3sl>x6<A62h(85JN=xJ?3kjgmaDp!YG
z&^_GYg4hX$C^E)YiXi(menJ31Pw@q;p0p-J*Hso<z>gu_Kf7gt{g|6fN|{5E0rL?P
zsEoos?N*=wLPZJrXxE5Gr0tosXDR>&J$I}UV6fiC6^90Xbq6hBk_rToWEn1q<7ImI
z3mZh>ZjcZ{%{6z5IQIc5=V=gnreilDXjG?NsW|`$ITAN-s*#u4rSTu67pQS?rvy5*
zAk#jsf^<p!FQw0FWHv0Z4O`a1^xQkv3}%uUqe_Jfx^b~~5a^n;Rz>j!$|p)HsA95=
z+=ySJEbyOR3eF!oEy&|_&VM)AL5}0p3nd|URVcgxq!sHer?&oY#GL4U=*;QBeM^=s
zftlG^nA|Y|`>tLMFMat-;bkv<nT_y22ivwOtAAHR+|}<#i1);<UAm+9KVW}&;Qj~U
z<_~@VzW@F2!`R3YjRY7>Dz(K$st<Nf?1a1Tx*IOP?Deo@$x@hB=m(a2yH_%*6+>>s
z=!Pah=?R$MEgF{=j=<BA!kq7xIaObb0mtrN<k`W)NL?n&3Mh7epZYr&^ns#KT}^~O
z{nzeffrp_GkW;&5bhQ8f*vJ?ham11Er~l)Bz_G_34cA<A4gBOsKhc34$H&HDYGSIE
z@bBKtmUY4fHB|9_bo>Y}5Pu7To{`SxKK{Hi_ifK*(sBOk_|C+Fik~ATK&orp*z{(J
zPM&A%tc(2qdn5-J?+AUsD5-=Y{i9+FIN8Vj*Uo$7=V+S=-Y$N4sNi!-Cvs-Gm<75Z
zM#`^nZ%J6_t6bW0ffw<Cb;dX3Qxaupa7EG?xs-q@7mh~Y_GVQ9sklOJI=F=qx*SBt
zA;FbL{cbd9RIouwIR>ixC?9KUz7R9mm_HDx`$a>7^%v@ggRb5~4G4Rp0^lA1_*?gF
zP*S^|oCapfo9mfTtTB;MP^=96l{qMF1wSzbtEStVu>F7`^rA`163H&Gvepg2S=Ia#
zse-{+qsmhqMfWmV$AEIsz>)*Q#&ZzcE;tx@d;nU4ZX8soOlo?W&zxx+qgva3XWI85
zdxYEI!@wpeaJo5ziX&t;N~e7@AKM`$R)(yT`S$e-lwv5mNCAv^HGPpB=V<w-u^Xt8
zfT1js#1wTd+OKrDq!0!P)XPE%x2ZS{b>6|o=W$j>WyK#~vJ@IaO)cOnI{S%F)DiwK
zxZncVXP?!uYhnT>CnliPQrQ58b$<<Y8_=1ZgURU$Shi{fj4fRPU%&Gk@WGou2oF5)
zTiyOqM;)cDt`9fipYDZgR<D6W4?Rp@YtwXpgPa?b(Y4&8*{9+-8}us`J}A>ET5~B+
zOL*5X0WEzXeJQ%r5t9uUn6wGBTIucuJN$2bPE~{(D;Jkm6K2{o`rkhL>;tcP)oWnG
z`t|UhtFMOJKYP2bH@<9K-*3;DRDpdF?`pJ0QUyQdL)<nLo<VrVgs2T4@!wrb2`^IS
zo9NZhDox@`q=F4{lHh&Kit$COGk)(eAZlG$yKc+I)sTF;qm+K^_q(8qOaTy-B{F|7
zLL5EnF6R~HqG1C04(4O-;!&U`Pf@_u5hR%%182Ws-}N%eo%{2!wP(k%!M7glgRmH#
z>nYTq<J}z(L3TTCJ#f#@!!}ZioFE2KO;^W3L-t*OMbmiQ%3^!imJUvCk;tg7Y_N{R
zelTG+I8TUUkl+=OkM2sNzIbU*Q~=By%`;LqPks0qi%Nl>G*Sbax6aD5aPXK#kyo_N
z_+$iriE>tw^r^5osc+e%U!`9Uhn-Xh=Xc%S7nKYAS(2r-CKUzXSrnw+Q3>%wFgMqR
z*074)KMd1T(=gMXg+mWL1fKJp=fF!|{1SNdDW~Xlpd$RMei>UbW_cgOXiiPfK&#t;
zeGfVSCMI{m2XDOv{@36AFW9kt2OM(9Ivsp%VnRjve|Y)*BdOmv(i+kJ|7-SN19Nk;
znn_kc6BX??rAIG^K~D!rekBg}JgN&<%imH;05v`;zQywK<?xiJJQWUFcMu$Q*rD)|
zk9-uiZ{4n4JJeX}0D-+4CnQa0QOE2iE7zbIiFsZEJb>MzA<~Zv!Yw4uS@a0498&61
zF^Dnimv5-3A1ToKoU=jolD0~p8KI_noDGA9OwUuSjJQF%5E?~1xKR#JWnB1oPo+Ie
z0bo=&KXc!k^Q8h9(99libCo1mGONm_Z<qVU`m%wECAlG`Qg;+lzkS(Bv_Y){5z47k
z=h!kN!Mp5rYHvblS5!9R7wNzEcFIU2AGfkllXg&4{=TSTmoh6<R`k$`aNGo>O+SZ2
zU-cJy-(gh8%FIKsjE*kRKHEEY?u4P%5S)GX6XBJwd=)(JdC!H>(J`2soPx>eNf;R(
z(f1X6QAH}AYtO-)%5%SD6qYPo3P1hXJ@BP3eGzWD@g^Mu;FMDyqob~?cYC-B|43uw
zV_Ilb5$BacK%&98KQ#K7t&P4)#XBE=hhVWf3l1^Tg|JQvMW~>8SymV<zS#n$tJyWR
zOOMepzjGX1b>&sCVZ#Qv;rg54?z`{S*OekbjUQ&V=!t3!SvS-3NteMW(OLhzM$gnk
z7nSBNUsRM?ia5ocC+9-wb9it`{Sq~Ksa|Lv7HN?}o%DT>MzP1kJgPQGiL*O^K%Rr{
z=Rt3*RCm-7&@_x}k`41YxKXYsK@2VI0kmf+0Dx><^VGeRA;ojmT<eWts#B-rAas6J
z1S(8@t#la_EDN-;29iXO-}-NOI;8x*pc(s3MsU7DB|vG8-KtHvMEF1$X0nXB%~9$W
zqD<l;Iug_M*uSZia$LaY<tU}xK~mQ$%Mjr;jQ&i2V57I)y_XGKsFNLM2G!A}sKc!=
zuDNyP;EJxF@rH*U`=Ed3KYD#}h=1Z4jS3~5Q%EG{6GF@+7a@s))KfGNRn7uAAj@!X
z5OWj5V|aKN=H^ULwEgy51J8Z#bK#0Bu7D$tJWBiePfSeeE?7Fg)Sj|xuNi{b&YbSW
z@ny?&-+l92--H`)ya|5si(kNoBQ|J(ABF#iGim?-ojY~^ty#Oj{=MyXxX<=-j^UZe
zl{Gw$6u(Z1c!?1>xxJwOFrhN@KFFleqlLrM{j-o+@MjeUItv~jJzZtIS0(41ufJbL
zJ+75z+SJ8e1C*7&(`nmm7t7#H|Lu?9_+w9mtFF2VzV@}R=`q$>0$L`JU=&-x4it3-
z%bg?D!g}D@@A^9Q_x62Lm12&%7*JP&=pCIsA+fhoHw0TJ=!=S>a%-a_xS*w?`bUij
z*GPN0pmhBC=0{PNP9{hS6vj_sJQ$T`9N)}bZzNuTxtod4az(>ba=b(%6)!;*6g@XP
zwbCt0*L#VBQ$lY4L>)$h`TsM@rNOL%1qQ(Z@h4E19PKV=V|qA=lerJF_rSJ;ccc6U
zwucX~jWw;(JX%|p$G{+s*|C${ajMRxDi)Nk9}<<NlWLFIC?N{eX#R__PtmhN^|gxC
z<eCWt0pTFrLt+B#ISPOVcvA*0zJkp?J{Zm4G!G=@pHJtcmml2QW>c&M=RU&rTJSYl
zl|=nl-wC5&{_6kwvf_)f2jz?}gIouAKy&_y^mkPNm`VmX;ey1g7!{w{bwv*htibzF
zx?U1*p^&&grn^?xLTzJW6jNuwf@0Mg3SO_?!*hX*Lg57Ov3*`@v}RDjqyZ*buZM$$
zcFO`G0qO{s7`#&nG3tPwot@Q!{)s1^0RQd3y#X$~@I^2-wnV4!Q~T7|*r<8N+?)|t
znkw^OTW1MSnE-Z9?1DS)xC8#|PyZBFty~5B@3)^8l<-*(XF`Rl3MTjSpZ^@zu3f7Y
zDh2_7njmE@uHUwgTAwPBS6t_&ES1BhnNP%bS1{VixH7>p-SUGY%Z_I7V$nsNHReiZ
z-j`9B0SC`0vo_S2s<HjO-}^mSf9Rob)w|vWAOFNBbPB<du@S8-P>LR<Fu;06!~}u(
zHd9kNLDcgKhMk~_?>P5)l{GON1AuEvD~`qb$}KCPCkz55R^OmZARko=Lx?iqWutzy
z2L>u?czhqp5W`7#U&i~bA0$Rb#}iyBj+f9c%5$E`y+5%gBbD%7{JyRyC=aAGfrjVw
ziXG%hTtHP~EQk`)u^1Xb><F}1qw<K9QRAZiR>oQ=f$z_UyMX&{8h5W*wGZH80DhVn
zwJ+`ZST}>puC9$A!((gcF;LpfMUMj5V-x@Z!(5`2)v3ss98oR(mr-uA_sVB-?U7_v
zrdB|-7}7dK3o8X{5iOB4C|Z>egArwM=ZUzpIPOx8P*|^m*_A{djqW$=X&I{m{;1g$
zu!w4X3!1+w#Y?0sAxI8$!EfsR=fqYOez>?aG#F?nP*5T(>{HkI;DhF>ERdG069F#K
z54j~;*kAzD$QAT~68Zd;qEgd$Fzb%ijWzRuPK*U&q|dMgNL?JL%voVAnc?yz13Vxl
z+wO>pk4gX~{Hs2?<dRpw>tFXeIPs(tVQOj`wr}62l>o!7VO?IYItAm`{_eB7+mt1A
z<ED*p!;Lq<x4!W$IP{Q1b-zzfPxq`y+tUcgP6>?b*RO}e4n5ReH&iyRK2=?vgUp-q
z!tU+{fl94;$(<Q={)cnhPikZ7@>e~tg=^N{LBW)*Px1(t?u<vmmQt+EFUe!k!Bl7L
zz8ce+b{jTr*#bu%a|~R4&9!ji$tS~g*Iftq+;b0%jg7;|NE2peWD7IT?o%S<IYA)M
zQ=6XmW9&~et_0wgdlWL9aN#VO<U8^bo!F|agQ^j!MmqmgwESN7x!j&towcabQ^3Eh
zqM$>5v(1!&zaLY{@gTq4nxESDM60K8UXh!ks~hKG0$vnXK1r49DkX-fG-aO@@HB|I
zpo%hnq-X0gf5+53=?X|r)|WgWG`}XoCI|{Z3N04~@{6<)!L!`^S)nyb4@nhG_)!Ja
zZFJ_9hbT?0nZDi|ze3j%&|$z!!IYPHI1=a)FEK^*f*vUkcLe~{G%6e6(kKC<>;2Gt
zX}YQ~lt}#WwgP0oldV|s+o-Z8gw~pp7fWfuiz&59u<yN&y}YSO`t9oROl4At4rs#2
zVmC(m$`WM@6KaF9m9kN@cWp~mt*WsoeRS@-CGmhPplpqdcAqj?5wp#hBvid{s9;#n
zu5U8d1C;w0l$0<-EpO_tvT&Ys(n;{*7rz)Tz4TI8x^yYbPR~H6GpAz$G@C<a{wsff
zyAoz+l<?owK>)vZ*LUGB|MD+ka$+hOS^1Gds!!LfSp#eK-(RCCXg`<M9|Todefi2U
z^O;`t$w}${=PjY6WG>(=>KrhgoUo62Ya6y8?zRJTcug@8>9%!%z&609O%K7c@fGlf
zH@pE(IrS8{^2#esmH>s2QNaP*ZJqU@#gKh<t-RviraPJTOW2Fj$5eY<<?P-o+Ah8J
z2giwL94Pizo=0V8ig)RGJ(2W%F7tt4VUEZOChlvXBp?Qh65_%?Z-<u+zS^}$4Nux_
z)cO)Js-r*&Tt@?Rj^QJBYw%l~)&ct$_YM6l2l2LlQpyuSz)!vpX^*DQ4DJi0=U<7j
zm1b{1gl?%Gtd})7fT88tP8=n?_oIFm6gEb2uxA+@_6P-l?px)I=LFrt4J@)8_o<oc
zMfk5{fDvHf)N-5@CIk(vZ${Rdi~e%vju%NJXgcn1PC)gCc2}}utJhbmv5Mb6s0~|>
z8+R2*7IqJhpYL4E<VLu#Pc`23zza0)#L}PIf5RkwVLg{(i)tkUQ$JRV+2N37ig`CD
zcsi#i(=lZ+6+(P)DlJ@gvzOM%p!n^?o*ekVp#_n`nImC6*51q7e7{~L%ZT^)x4veK
zX)|~1+DR~ZIL4}8qnU<Q=G~#@4;C-Y8w&YXgwW=TF1iTb^rkmyB>=9K_S_r{kBn$|
zztgBU8ql7Zf$8ZfShj3A47FPD_kaH}_}jm|4))n+jaC>u+@bzCLIl9FWy>`Df7WII
zpnk@FpEF}2`b(E~A+dag;59Wb^&MNl7dGdL6~!aw%l~mZm^G^qmf7x-n7)ee1dONi
zdn_Wau;uu{KJRuF)k9R2w2%~jm<x|tJ7chOVgfqQh9^A!32?&=H^8;mTnpD<f4z?X
zux#159@80;Dp1u^${>kS3bPVLT4*^Aua~uFV+XKu$vsauU{OH9K8-(AM*S(`7JuA}
zN@EY1icp(+4S4L4mX?ClWU`f+md&><$vuhjiY%Z0x<o-rU5ZGJy0W2TNHzJs#Jh^b
zQ3wRh#JJJ1op&NS!(cArSRvYoFnfF*q}ErZQi~{vO6t;B8Pa>Y-%~1GQU18ohbw1_
zI{mdp*S2<JP>5aRZSCRG5ci}I`BY^%irhB>J*Z9!xTrM(dxQdD(b#epLa7))>7Z7s
zib@g!!-UWz^5Ded0wG_z9+mGdXr$I!@T01Lf>oR_4IHQbW2JMGl1wNreCA5spqjLG
zIK>OU9J0v#@!9O831e5?BQ&cQ%UL4p8^mgnw>F`a!tcrb8YpR4kWJQ%{9J)K!#6>J
z#MwC$8vazCZ0d(r3Vo$C-wYCklH<6mzsg@(`Q<C$^g|Cl6yA9G8?^%9fCCTEZU8FK
z-^!IMpgGjEzg=1Vjq8(&1<;-~dD1s+-URP_=eytwpZ`1@bkIS%>?2wDrwV{|>(;sN
zMj<Nga&cUny7GUPH%bI93#K`b#i!>u_vsJwFUOCj7D~J+Y-mKlR|*QLrEra*;%P3?
zL;W0Hh3al$Uo=X9rddNBfI|*G1m6Dkx5J4io(NZ8eKp*5*IjyzEgK)#WoGA$Qmi|N
zXH&@KOF{Tjdrmz@tl_cjDe_uXhUoBuuCw^(p53YcepRu80{)=SbBGEe#fA<^IYt(b
z7;G8K1=YHF!(}RiLxul3ZzFmItK{Y_`}4mG&5kufh5itgij*oIuh@;L?zomLdB!Br
z{+H2x={{AzBXaX(ZIKJ^`80k&E#zZDA)BI<YewHB1Pe4S-Mu|W*Awh&U15%gd~_jN
ziYeyyB-#@c08WLnklni=zOX#BJfWgx%Pf^yt-TZeL*M;ylIMFk_Bj)nFY@wyLGTS+
zMGl=;sFt;w_^)Z`8NZK*HNB6vqYjCBY#2+g>E;G`464YPDyku;K^=|uQP@go02oSa
zad2o;5Y#0TGzja4Po`n1u#aTw)M2^?FyvgBkj*GTGFzDWt}eztdcipQs*wUNRMPnI
zY~&O~fxn(7A4n@!%ncI8&ikaVRGdA~iWMvLGgaU+MbCQHGvL*)z7)<r`^m6mWE6I8
zoq(Cn42+BzUw_phD%hWnWIxx|Xo2yuC9r(iKJblieFHx8>CeEwef!%mK0XesR;|+a
zA1VI+B?tihT}g<F)Hvg3{hik%m+QLzN8g2&U}5-ty9yNC`XXOrxOaJ#nQMfioa{b~
zUtCF4deW-VqpScNiz)yxRLS*+`=Y!{QVYLca-C2V^l4_(yR6^u(84*U(J(vO9ay<?
zrB<S;RDsuCa}9j#;~$5u+qc8&RjafDVArl)8YQILPzp8l$0x=q2`LyO4pU=JijZ-r
z<YFr1dgM*C5`gk8c9biH8#<SzuI(hQSGXny`(`KfInSO$Y$_EAv<c={6#k{URNq7S
zMZtA6g>K8ns<Q2I1RQ<kfF~hsRt8Co0KD?LNZsp&az5!**`or1vf${J(1Xc%3<OQ!
z6l2_=ho1#rF)Qe%#@j}|PsI%>;@t@kF7az6zW+VB>tu>Yt~HH#A4~;wOre`7?-&e6
zV{xMZ_5=k$5<Wd|lnFdin@XzN#SmIY{N^eJ6ALCH-IOz%i@u&>!h*U&J;?{AiJMY*
z9OLE`XvRvGz&s!VQX5HD_z_$KTredEZ)L>BAdcW_nJOk&2IH;WCA`HN`&`dO3kOeX
zc57@gZag|+KolDFRauqIZ6Oyj?>n9!tnN719CIAIQUO+CavagaSBkugiXY;NlZw$H
zxeoM0k|l1C0n6r3$*BYsuVhe>$|t5KU}kDY2dKOF;)~%WFL?<Zal{cYy=xY>Y}^Ko
z;RcM1jH)=%=H0qoXm$anrl(=9-G<fs?4z%L;*<XfpZcdy!Ef)oANJjMUk!Cv0?s4d
z`cEl@JDc?ujC5+b_8h=gp6`*Hk`?Lw=kQ#27pZI$=-#|`)vU+FI&&~_tYOb0uC&I+
zl9aMwbF4(Yb!3LbZ-QPyP@Q_rq){{Dr-EOq>pQmX&{qG)J??RE=(=@q)X_)7Ew|hP
z|Mg%01xuDJ(F!4jp5c8QMe9!q{)~7qtejE+70`|+2$<!>SxU%9I1kS~7Z5PnY4&!Y
z-AcF#B#Zz>RAbH1lz>$fokfj=!k-Iofu79vopdfyA)X;HxT|Ow;4wZ!1Kx)6r0kjc
z3XK8aG>!yiLAs|7Vj^;L%B6X(OLUnxs|8YS5zYo#B>Zx8Ju?mw1f4LJDS_UPQ-X)g
z@Gwbtu?mWL$AU`z4qIyMaXTkUl5PbGKvB+}DUPkBTn*^=#Z8M^0id)eM%h0g2>c#I
zDd9Y4<<dDqtDswIVK|Fuy*Zj=3^bUbqQS@txd1*D+^Szyrn)@?-Bx6v{sFgR``*Hq
z%|mTy(Qb9STsu=h&93opa<9N3lN{1yUNct6i20j?06POBYIRvCa@~U{fcSu;Dl9!@
zTp8DkP*1HLG@}4}vR;xzA%n`ENaIZIFJ@AEfr2SFn<_n78zy#6z}VOboPYj#aLFaF
zglAlE0Su3h!nWUT(Yam6#+%R`Qq110LtM{w=3r`S21Z9mVA;x*@SFSYh1+hs4L<j|
z&%x-(D6Cw$O1liG_V)_^xqY^+EzY?`*R$@Vk9io$je@bc_;Az<R@gA5HEZjlw*g-4
zB=_73xN$+*AW&H+PWo5+tQNF9ih#NVjJ2RW(}t;SQ*iJhhrrw4_BJ@`sH5Q8Yp;cG
zfBW0o|6eH!W@cufGuw&Jaut&ykPYSDFA>OU1zarv3B)Kx|1OmQ03{`J&ABc*&+xcV
zo&M4gW+|{3)TC6`1hBJeqWh}})EL*xD~+t=6(Du06<_rEIiG+2j{Q(B-5t7vNYBD+
zRmw98>sP28UZ)cEXO)2A`mJ75+?{|@@|g;SSHl$~^}bS{R;Cp!DO>T})Wi}6{I0tx
z*U2bxssjWr-jslgS^<#Ec|TvNCy?gTuZ1^@8>$e=Us}tOc8~Xu5%ALU%|oEEb{a8|
zB>PZpu@1Q@_wr6NSwqVZ1w>-~)=%`_N<T8e@=xn(3XCRQF^GsGXWdF8G-wTVNhdfX
z8hmq~ruDPTP$Q8uSQx%YOYB~WL7!Bt#;&kg$5_1Zd)>pgZ%~bGK!9E1>(E!U$E`&^
zunwZB8EN`Oo;Fk8w@j0e&e7dZ7{yZLg8|X^O&rwR3P!AIoaPe}nO%cTfRT}wE~5gG
zp|Af%7hVXLUUn%w>QRTo<gQ(?{lV?f8fn4!SW81_ReS1xt=2Gf<~lGvH4WoS#$n0$
z68P~?eheS`*x$oVH{Jv%9DgFLT(weLG*iEQFG+KNj-MH*GT=@DEDMv1<DziJNWp?h
z78@NozdzORT8*<fk@hlI9IVHFLCtk-8$&;9%;EqvIwSTo=jR{>w@r~+OP!gHP8F#9
z|Nr0*{y-}M-uceI&`LAqBBM|ODz*l?hDgv?N|K*><W9y@ilKEr=x!FYuSb$Bb-}X)
z-(gM&<EG_k8o9vNcpmH%mHRSTKfy}iYpTFd5Gh9(s?<G_1Q{-&qCJ<LmF|6U({V~|
z&RdYrnH14dDo4FWa==dGf8!sCNJ7$vNRlf8S_!1A3x2T7pC0CYg#1gP2QqCZQ3J%4
zK&s=~X3y@0_s#}3?S&G@QJ|beBa>7%*!w|TKPiiUL@Y=%4J1oMtAV<5KJpX*^APy0
zXX+KA-s2-F{HI1GBfO-P00H!iz{TqN91|^au)*_UHMuHr!)Ojxu&EV@t`1eDV-$Q{
z9ibq|A+cgJT!>A4UO<`;?~N>F9u^NTvHbT)lES7AdBt5?H<!~a=U{^BU#tXS@iqpS
z_DWnnHoCw1r|zS`an@O9!4+4$5uW+XXX|p?wrtT#fw2{1CQYjn{1rc?f<i-6!~NC$
zWlNVsbEpAd{mPf&=38!tjSp>xGtYd2wqm02zn6L&tHD#fu?PhJXfZK&vK~-Tz9s)R
zR5rx#u{)@l93V_z+^H5|3AI`y&{9D*XJ+&odhBB#3)f%&K6vkY{|4UozUyJ*#*Hx4
z8iLkP%PD%PTUi|n{EwM%8U@8F-0#>;+o*tQB#gJ@wpHgK>MM;Lx?~LM<U^rSpol-C
zQOvmlrbnx-!~^oS>L|C9WFc>*y;gc|X(a$v;t-|;UDD>8+o`jbs8URy;SKNVnH#@;
zgEsa;J;w}MAf_-WH%NTFbO1E04mi_~JpHIR)VOUeg7amMRsbmYf50*4gr`DsOfj`C
zmrhXXLuPO-W#y?hKbMw}2TrL0*NG7)jh@O>LR(xx+aN_QP@^>ZVAkD`I`hAY)PWx5
zNH1`@kuX%fc3WY@wd{N!a;`4SvRS2(j1Fzu_f*qM80kpOkXlx_MhX-pK@omdr0SI_
zUi#46akOJLNT&NrDn-m!xK^<|KTlkMKv&SfVQ7pE$<Lo&ckfHJ*8Jh~ijL|C_jn!k
z&jg@Td)>s8N=LR#`}x25EpLXyA9c8m@IL{~R!iqAH<p;t+|%i_VP<+-2Q{0So`Ksw
zd>ef5gEzze2dve~guPb(>akOT-`1@r&|-?*axPj^)pI9IU7A3uxJ?oj&qRPUg(xDQ
zoP$Jh=U4zdfE>Om!V~D?O1Q;!Nj?XWSONw1V6>;DLg8Ti%{`I>`SY>X2(+OCJ9h1W
zHEY(wpZ(dN!@6~c!aJ|J3V!~JUqGYPFp9c4gSt_FITb~}mMrqt=RBEbo1zEOnowWX
zevjtBJZZXJ8aZhUOU}St5WuS87Vc*Q^5w{C&H~^u)v5*SFXpY2V<fo_u(K~2Jg{zm
zkup*cTZuv?4(IU&{#z>xDo~B4fM0&d{%6=*ijZ;F1Vv4F!6FI>PmpsDs52+xSYWdC
zUy3(Y5`@tg685zc9<P)Stg~ejcMY8eu&TcrUI~yh!qN;(rW#R@1x#Vk`l8ecELsHs
zk`XT1bmbV|LgM~HTuUgD2rH|oK%&CB=Ts4a4^s*!Efox@ke7!6Rh5y5yAee1Wu#f*
zIRlG<HZM$<C=jKD)f}WSNDJp-`}BT5RN!+ADk+DDC{5L5+m;T3P%E#r>7C$Rl0IS)
zv+NZHv`!EhiOpwH$Ofe%LL!Gz4vH$8lb@$F>K?9dx|{VkA-o@47s`o@tE41ghet{Y
zQ567)*O4$HRhIs`)(_tf23&M4IS4r^tu2o;?HTQheBz16!xdLt0WY}lLRd1o1SWS)
z>OFCMd<@!c`mP>)tJ3>TPfx=E2ObDh(^K$AfAkjk;y?d0oP6@hdj<bOQbL`|1%LP5
zcWdEKDOyw<1@6A#*0x>NdBaY%mfX!`E!?a9%1H2G;!LXeq`9#%CWq9ZlK>Mk2(AaN
za7CdXpNv6i{eAi_UbyV{;9>@b%F-!If2WYm@nd7kneRFVhmQWxgzY<b>NWU^SG)p_
zI`T;P^LP9?eCbPfC|@sV4G-%c9Ck<?n<1cZPfEdy1IE~~A2R>p#;(8xQH;P%5dZ~z
zT#;fXv6nhS4xWc3M?JPX$a60`_qk$?xB^P!<`gkZpyPqdXt26K@tq9(Nb9p8g4S4v
z{3DiZ&^T2V>VOECq}?Z_5YS`b{zGo0-8;=uCM>9ua}iyp$X6W{x?_aOlroC*g(+;O
z=<3N00P2|vA;5(9oZ*1h<z=I_gnXx970*%570?&Tw_%Exqi#yu%)Vbn2_lgcH_P0x
z=S#B@1>NLX1{R|$Kx<K3{}m-7Z`X#b6N-GiBtfRv^diJ>sprFh_+&{z!_XWkfZrk#
zgNczzX*OgI%S>7RV;0I=ZKz-sG66~p+G*HaoOP{}g$us4ud~nVl;;7i?0wQ7_JX|>
zs|Dk$ye<Ei3hNXCC><jBo>lMa4l4DplUO5^GA<eO=|7pJ(3os|Q^^75EsD%dgTxp~
zSuUIv3Vr`G2piN5)3d+sJ|$`Y!yl2Z+b_&9+ykW&R3Xqbe#OnE7Ccp;zl&e?61e>G
zH^Pa>AFm5xgnk82R@7>#jC4A8mj2giwqa^w3Py*AweWxY=RXHu{p!EMJwLt2WC@s_
z-V67yL8@=JZr=)9H*bZtYuAcFvYeH(M+AVXKQuHH1ir!($q6Jxs%N=R2nxnp$Rg`I
zQLU2wlim&2F%RN|3I@SK!;lK@8{I5=pwyWkMwkyNO#jyrE&EOxAhsbZ4)pS}e#)p6
z8XX;mC!T#a9CGM7c+b245^nj>hhS=Q3YIQgs_RTmO^HGRr=nOv)Yiq7&paPwqW!9S
zl43kd6vbA9N-Wg1_S_O=oGlY8ls)Ff^IdUu&L3pq<jgQ>mQO;6<c2tWFI$Ix7Y#;u
zL-m)AH`J}o@A+u|Rs&O8m=Bnj{QX235#h)P_rhGH{T$rf1-Q((dX$WB4lNqA>oTXr
zF${Vl$%r-xCBOjq%3Kx%sbBPG<}#g&sgMd7xENCcE=mP}W3q{#xs+C9V1CE!aOh8f
zx5v6-uxjMF59U_RQP^!P=>;0^$pvuygyvU#ztn?-cQ4A<I}ZnUF;z{X)V;d=qM6i!
zFNVPTvV$Xl@Do2J)bMktZO`z?y46z5OHG(ok_YaUEIcpOWH1})9+Q!+=`bbNlNM+s
zNU~70cFc_mrh8tfnMv>0a*%W7mw)upN5SQnUk)#L!G$_KpUOYpo|>`Q09uisrux6C
zr%(f{SFeV-?i}3sfg9nAU-)Nex94DFWLT&8Q|<5d_pc@t>Q#UJ*Drq#4?g%H9CFY>
z?w%3^2R|?T>I(O(P+65)4|?f2VTaTuJ6d{0;$CMTLf*u+Bvf@RdObROVfq_~R6dG<
zY)t*NP}l55{x&)~D5qX)vmIE!egph}SN;VYf5Hjyu6Ms1e)Y>=!qTNnVSIdCyXdHl
z0bH<1`5aSn28EmuCMht<-kTh4&JU4x(6~_~gj-0k3*t6ke$RC%bx3jDFY<EazQj({
zqj2?z2F}3HkZXz{-cpYu28KmRb;h~}qfi#kFQ8`37PbIqes}Q%ei~>@jT+RAP9CaW
z?yZAT?wyN?7Nr7!GTRL)=RIyV8qU~*)hnZ2^eF#)n>;FSFljq%LMzBv=D8`MUxwRJ
zYp*MqIHajIiygK^;875~;P9n^1o1l;e7JIk`^Zp}Xd<``AGahTpvV273dIq{gs6Bw
zZY38j$G#KoUq6%mCPRyR$i8E|&?*)f0Eizry-r*~TwYUc{U%BS&Y;`Caoi8RXrDub
z3-|SE_Hl4fB>;ZURTm-vr-;vCP0`_Ni-2g%u%CtXWecJ8)2uP7$cyW8rkd_;5#ueO
zIcPhjjBoD&0AmJNeIFYi(_^G8i;AB0tmnYxm%kp)I_pdr8XDGCf3-KaMw-yF!hZ;>
zRl@&-9&n{Bc;JBt;7|VSf54A_{1aHdbh*x5t}M)Zh5vFw;a^37KWf8KaL?WMz{w|`
z=*FH$I?uG^#y<TlTf!Ad3+e7|AbE$%X;+#qRU+wln+ZV_1irO&c@tq$`~BN36BVme
z&uy=Db6UhwWSL;WPhT%-({GB(RR&Wz`o2${S@966IwP$XOiaze)@{?UbonZH)vI0w
zM{HOR*IoBF@R?74MvsGvy`koiinT!rF;WhBLEx}lKoOM&oS|c79R-kfS{ZlOaId5=
z^I8g3(myUEM%0P(qy!Mhhq&Y@q@*&C+nm6Gp+}?8@H26P;rg$HvY3vI>qnc4j#AE7
z-MkOGj|&#v=R|~DHGdKGb7j!J8q%kg6L4HzE$$LP)1s7|mzEz>{1$bAts-1ME?qOG
zy3~6e(S#=Sn*NfcRLy4#koXQ?s9e|$<R8prg2Z{dLPB?%WX!Z0)H8w`WZ_>_#JKY#
zL~86wN`Tg)4*nNjHy>1ID*qdmqq0}yFx@-sXTQ<cjs+_cWw`n$zEDF>saMw$dL~Oj
z&Z_E|SHM6@-H2U~(%4i|#&@XKMV+nJsd2bOo3fBThpOm(L4PpQ_S|M~4`ypVrqN+J
zgkOp`5N%S(a1kb(`~CT!(CAGL=vVtI)bAO2Bedm|90|h{mhrI{5OG8bM9LQPUo+?Z
z728;#{OJpc(F;OgUI~4Ro6b_GEQ*I6cBl^Y_p+B=0*4=dxQ6R*-@Zj#o0Y&3##*r!
z)y^!;OijS@mCN+^uYc?7@Sb<Q3x4*qU%<M9)@k8i(PBO{7b~g#P33zZTeS-A`T0HC
z9iXKY1CswgD$h+tED^L9y4lhVp<}J%lH$|sXVK8PJxSnXgJP%zGvDMj6gm~iNjWp?
zk89}k!`NbXzjdB{l`7$9#P2-dC-NIKqHJ86yk--Ihm~Tu1DiK(hLtOp!tb4X9;`q7
z2srVC6X8Q2`Vjo)H^0&ATdhIu5`YK|>>m{)0M85_XC_Bz$;>S0z#W5E=0vjqSUym_
zQ=sTfD5{aqGhCkU$5d}pp|phm2!#36*p|qa`iu$ZWMo^wub~Dk<_{{|HfT(NN}uwC
zy01azvNLKF2>m@l$2E#ft%=@Zfd#|`{?hgmMy-HSokjRM&c9{*te`J*0%r=fgZD~#
zmia)%;F?nV9PV+0%v==l(0IM!jb~H=lJxn{JRu<FE<;?g7nK{pqEi4kO2TZ(wM+n!
z%E=?lVS0E}oz2CmNt_RPO&FhG`9}r{TfnL7@nD(7i|;G-sg(0vD65|&wG*0b_83Yd
z1LSkS{QkO6A)8IERMT%zYR;4fkf9`Q-hvf+ULq)$9NfEsygtTtL=rI*)uGpnNinhy
z;%A4<k!2D4Cw(Z3+GBza*&U=sy|#jnH??4?26yY$t@?m|@;Oh2%U*pcJmXo<(op>^
zTedg>G-QG;sWsJ}g?4)emakl?q1B)H%>RK;e(F>3-S6H7r=EN&437?L>!XS*u$Oux
z9gkuAcKE?vKhOw`6)ToOvpwTf+EMx3iBw}P<Fv1wsU`zhRL)p&iOfSA<4V<Ft;h-j
zU7aW!Qtvi@E34|DDD7OEw>+}^%k@)nJCx|IY%9aVY9Y2@$IhKFJu?MI9(g3Z{q1ju
zV~#lnuDkBN@U3rsTkl0m380=eH`g{ho7yuK18bj8BVqeE4jB^J4r1}tWhi6r%g_c=
z{?J_LDKfnDc~%WJwW@7LD{F{QuKvT7(o|V3Okl@9urr4S3U={3SOe-ks+2WJQf;z0
z4Rv@8hZ36yCPEw~YVlt{w0m&Yb47ysY^}*v{`fe~Io>cQ^z-Y^g;c1+(T2giAF!Sj
zO|UsCH3nikMf0#>`x%?0<Iohw!5Q^P?3<j{XAx3sv0DFgUD)rYt9<hvY$a-{AOHW1
zdqMtoM0~o+@yV<YIE|Mel%eFc$UZ$1r#M2WM_&ZbrW?LHr(;Ay(RdYfP+d4)zYroG
z6w<)t(;G=P7>k1C+yA)@n<)aZOuyvaWi0qWi1->r5~fxFd_MY1MuB!J)<)4#qZN|0
zm1wsp1yIE^BXNNV-G~(6imb3tNEvJWr)>o|XN^#f+o?mjgL}a&<8}_He={@2*MH6a
zYv2XXdjVW_*=2CtamT^z^ejB|&;#1)Z<GW=BPuxE%#8l4{EfG5+Xf%`=ttnQpZ>I-
z1ZSOjmKIhq&EH<?d)VN?jSs?o_uU8k?t22XT8IHK6zrjB5f#x^{Co_BPdugZ9KoH$
ze$80<JyH42hvVcB@RX1*oL$(ia5X|};azhB7M^P1V|x-q)LyGbMjP^*%1+ybp`j*>
z4=;h)*%{clX(Oy!u?jA}_+mKn$PIAad#{5}e(IlK=MELrb4)AaW@qPgz_zBg{5O2y
z;6b32-1bS(Yvj6pP*g2Mv~^{nM8_HR=Zn8Zpx_leLVqb#dm~9`i8A-tptMonu;B>!
ziNsJv$`pp)%mtG3g}mSsD1~rX5#?CG-&6^J+VZbI$ozu2#i0HDD06I^&4j`xX?Wqv
zdy9(5^+kXJAj$!s$s}HLB|^T03P@!Ls9M{DQhN0qf2)TzC-!xh@Y{4d$<0w>%t`Nk
z0AE3%zQo0Y^s_6k<lIGq0$5ZEfTAd~g$Ira^pY^;=7i1O4D}^%R9Pa_b<-;-$)#%b
zF_#j^0gSR-Wot<`3-dz`!Z)Z*DDw;?{Mak6Q{*2enZ$52DtvBM<G#>=Wd=cmGz74D
zE?eBwU5$|B93@v`ys&H0LJR*UYJbaRMp1&lqT`Q09xi+RW$?0>yabjkSqhsrZ8BE>
zk#Xx2NK`m(@9k(P`bcv`Tljzdn_t8A*Iy4`xcv*Te*JpwbG&`~cBg1qJZ=wrCSkz8
zHEY(uJ@?!LM<0DOjE#)J)XbEiJe67PI&QE?vEjZNVZ#ky>1t$UHmX*w;GQGaW0(65
zsJ2iW8#$MX*%T{DG&&BxufC6tjzV{C7<TN~p;0`)`@5%WCBP9!Zh#wax(V*P_ct&)
zIszl3BQQ7Dfw|e4=y^R`i+LLn$=RPuX(0lMNxaBF_!1WbAVCRZkG)y^7)kICnyJzC
zrZ_PW^|_iBG7y||s>$$`1cXyfb$)udX=?H=h6S*y0fBFGnF(mjh$IbAZYpsFm9pE2
z<w{?u3w@Fe&Yn?xFGgBqfL%kW38?LG!p4`K1mZpPW2EI6_FJl_uHp5XelWrl1Hy9|
z*E9a!G~?qhDNQiKbWGn7)obc`E_j*rE=&bsE#I_d@B5E?nEjvf|Fos*9s&bN<yS$a
z2m+rfOIg8<h0MmCEZP|TSXeDF4RAycN}Ss?Fpr?sH}k>%kHPFX46IUPFQlh&X=f6B
zFi3Lamm5ZhBCmkd<kl!9(zjypDNErTrenpFI1UYB<~sft$0rysGHw(F;>OKd2KZdy
z^GgciG+*lll>qHdTU!F3@r-A{4L95XuYJvHbyR;P{5R3+Z;>1w_Doe*<)K%B09AYc
z_ox3C-uCvl!6!cP2`!i^#lnI_+I|F*QmlOWjyquM=FKoPto-#QvN3N+O09H|xlUTA
z7<s;AEL0Rsh7d~%ceU3k*vcB7$>C^?DCjakuIFQ!()AjiQ+iF!qf)tw8)yputEx}%
zY1ZjI?G~VKH7p81on!X=ZVokJ$@mg|Z~OKguxiz6_|rf6Q@Hx-_rPNwd#cXJq2|)?
za0?nLlLU#puPC)wAz|6%eQF4EbHf8^{l3aU0m43>BiBV?@a92L=^m!bp^Ir^t!4Qj
z<O?x=4b#6EHp8D?^jx8xh~J|#3CD}@86jWER*!zZ2^bwbhw&z<@k0JW>KBPz&s3yj
zEFKTrR^=IKa%%?9pcGm98!`_NjZKQbr|1E@<{TeMu9X^dk}_4Hi$Dog2blHyToB5H
z{Hx>sQDyxvMFn&P-Zxo}@OJu|K8J8&A&+m@iX@65@_La_bFsnyBj^d?0#X8N(wE!Z
z6v~^sArz976_fyB{?Q&OC7fs?0v!G|JtF>UbDqmnNp&T9Q?MKEqf;_40V9F}VLiOA
z%1FOKn(R3lrCIQ~4pkf+JrVO^#%r!W>_4XvAw>H&VAUGUtVNgl?j`-ZIJAtw#9WbP
zIF{XxVsOa;EgU%X8sE%=0AdAHr8sbr$(c*5dj|5z8I(@cdSZ=A3J@oBi<6XW==OW)
z{vp-z;}#TQ#>t=zUgO+tMmtY`i}u$XAR<5s{5pW&$cSe8cTVhtgVwEsxBuze;f9-T
zfX6-VaoSoqF*OBaBO^Y-zZ3ucB5ZcrIt`#w5VS^H@Tt#!3f}RKcfi(-TjBU)k9Qda
z_R`=<DP|OX@rz&7ZU6zKUw=s}uw4%MI)w9+?;}LW=jVg_NajAZCetGa3#cPa0{(l>
zAY4~20|>n+zCS*5_pxTUhC;DkIv4{rn_q8yKeW6CwQAxy6&ef7@U>bd?dIg<lvd2W
z@c9?Q%^$cKUU=b!x_@@<+yx`U!!XnuA}Y_pkYlJF58bfmB>tj!bMyw13`I5`&hLeH
ztpw6r@UmVqQKhP|cW`c=R@vr{C({QVD}*3S+*V?OM|{mW?O2636)1x>>&_q|tXk<G
zkHwtfGZJ>m@08}f>z@iiJj+{@!2TT{;_Hcu3Gzw<MV?Y+3^%+{H%^H^Ac`I;8Rd)w
zRN0!#5<wL<YRy!x^#SnRPBD;M6V0-57F|~v1umKm+;39ylr;)jWu-oYIs#8=S~lxa
z|083^nr<{PsKD-}Mdt#*l>m5XRq)6n<rZsY@Cc>^i2aUhZUkI7ahhn-4sPyL31GFc
z+}B<sAsR%Z$gG&AXh*i_n+m=>*)-%iZ4VZqoGT;v<YfaBQcP8aC0NC5h*Hi~8>spw
z?LX+lV4HM_823Pmkw7RK4?DI_3(V4oaQI#D9WC~hv37E%(K_-7r|5&14Kl|Mi>^nD
zc2u-O-lsKOP-`8OIxTZ1E=S;e=ih-04L($CUQ)OO+ISaw#9~>Zpq4(Wx!;xW8$k%z
zYJtlK>vn1hpyOXck_D{}5`ZgY0&7XfC;*heu7q=?0C@6~pA2t(%UgB8KUH+c4wK$*
ztkp7gqo7UZ`^=2`+lGDi*;l6oyz;6m;jX*xa?en0@1=PpJ1&PFb{PEdM?ZuOM;)b=
zIx4ceatF{$Oyso+)~r^5ViEvuA;c^u`f6So%!GR@u^S1;Az(4k89Q6(@}qU_HHJU1
z`yjETaYD_-0<&Zi<Twp~%{$Aw;}rKq6ijV&d=iCP3)WQlM~SYf&;iXR%+Ah2d#(+~
zAAcOY?{EGFPCn^Gc+Y#@4G%uJQKt%=g&CNdo~}f|rM{QOHwgkD<C*C$#p#D7qC$U4
zSnxeqhDuA7DLM0s&qXe%cbVU^vozW>A9)5$DMzBZN5%=aPD7r83+OyDy7-zjj!sH|
zN})mf<=JXx0T2xmJz9@B1&SB;n*($vj)|MkKC4jVk|CvPX7@?M@inGg!1j>eiBO<+
zZw=5PN={7(Uy%jALJ<%dTnV}L*UZOllav6Q(y<(@dku+E(Gcc%5<yFqE@WJ285~!q
z+~#MM4t!b>u>FyS0C2(o77=v@squ3YpR}c86sQmB1FR&9YVv-U<tMF4p0^52F^K>$
zf&iTTWrV7_mnsStoDvc*RZb;p2K}B80)z5(EGh*>5w0{)t5#^_9VlrVKvles0V;W<
zLpc&i#Cnwt7ZvW;M{*G4tQ^pEf}x7?uY!WT<t=a4kpHLt-czC7?!d&vl+FgA();PU
z?w_?l+6xLDpxRWz|G)j)x8Nl&yBNNC=QrK+_R_-9vSrKQrkietpa1;l+PbTCHfU`t
zu%snPRhyId{WSHW!j~8&FSwRGU0RN*H`yI4vRTvjHLNL|PdW5>@QI#b+Kvp}uKL$C
z>$D3nF)^tH{>v}F9B#bvMmY2FkJkY_XWMNU86MGfjjPa5<=U>>w}XxaQVsF$;d~Lj
zL<j6LM<**knwW5b!i=xVQZe@syP?iGl^e5p0X`3aHy`L&HR}KFfdtYNHZ>6ez~u>w
zCP@)PXhyeL{EMvc-3OJr2bZ`ZNbawdWR(Q^e<-e!^_N2GCa)RG_HJha7Zn14!_ghg
zD;1<}fwU+&&2d#36J`lvV(h*;bS;d^Nz6opNZ}(iN^ay&#I=5zd8K`|GFq-i!kW(o
zdTLRKa$ZtDmmC_PM{BaP7S}ugYHjug9~NHYmVYGv+Z>b%g!ydynMTPaV@!SMXkDtQ
z)aB4>%}idR*11Z7V=5Zz^-Sef`d+D?;Vb`27*viL^yx&-Xw4n0&Kve=0ke0b^^8XM
zt>AM43r;X)5?W_ruS+3zda*u^SSbI*#Dw0fPCM;1c;g%22p3#%J}h6p5+-*|Y6Za9
zNE4bZ6AQ!aYv^KSAm=kPQ(8%||A7ZWXLc4o{NWG5SHJo-*tl^stXQ@}KVv=vckZQ_
zFo5Hae)J;~3~<c2b|@5vVb;tUl#6E*>0d2END~@H^qQi+zm%z>&>6Iv*z%6(S!Z@Q
z1icyL89s=vFTcn76Dr(vJrd4S(qhf(_D|LDwpza51yr@XTsOMF3I2EcbHtzP-F8RE
z1yCsgpYe=m!TR+_!h5f~7H+!fCXEtMXdzWjr3&nH<|=u!s@+Poa(dG@nPTDjnw4MX
zW6#O?s52P3oN20$Ab^xVR3sD&tdUZ`k~5IrOP(j(fFYbkDU=<3UWq}gU&{G~n|L$y
zdv%@EGpfo;3Kj<;=T_sYEEfz75RI4Pw{1r!#*y|tjU_<kjHG5%Yx}qjlM6HnH)(FQ
zhu%nx7bNkWN%xWPYa<iMpQAFQdCTKO1*i{#0;T8+*1&ED0xT*8KwYYVNFF%p$%vmb
zWt>}!P)J{*3y~4uKm$!Lu#_TJ(4mR~aWN-?P`HCY5MHDADxI}bEQbM79g9hA;lGLs
z;D<<Yk1GM*e&XHY_Vjey0ffAe2BIwEE~$%Lo^w9(5|b2Tg`*%no+zuy%`bBO97Qf4
z^FZ-g+>Dr)@$qr}S^4@eTd@pY@PZe>Wv{*z9`o48>if#tr^=6vjp)FCXeOfy0Cjoi
z#1wSe9XRm71L2`fo8Xq4Z-Vc9=R2@{`%c(@&06Smlz_0vC(FZ-RG%Mo&_VE#k9-8y
zty>3=fBfTNV&_h1jgQ-jf#aBgSxL7{0GdLxE>Q%yIwT8{c4IT^3iSx0a-d%-*sABj
zMmdipt*88^?1D9hpgw=od~nRFQuuY}x_Zv2i~-6e;Lrc;&*6w84u|Xi_WkgSU;GkA
zl>)Iftg{4Y#X+;7>-0?o(vI_nh%a`Z-R%Z6lPM+9=g9vJny5=5Qcjq(mHgCblq+Cz
zd`RkEAY8hOP@k%JjG8V0ico=Vzu9X83Pj7TWEC_hBW9oz#RZP<laL|&efFJe)llJE
z(9KDCs8edO=>-WDHeIJq7hNK1jsZ2i(jceio@?FhsS9PO-Xj$N8valHRMZCxU&(DS
z`o4y*_Ne6@Kv2J;nl&t#RI5uhPeHVB^zE|ha4vMv?{$U5DpY`W|6~V^?t2|1!~F=i
z5p;Xm>`UST&^q)Gu0r{7U!~4~a`~b%fN5p}<CTSZc<p$|)HFy?5oz9QpM2r)cfoon
zGeE3ybS~u%X}5{thTkpd7q|YfFG>F{5_ykq@?7xdXbFd`p_WE>aAG|*-%YK++Ndo1
zJgBAwvrP0aec#kI3CV#6P%;pzu+8bfe61$z+&Q7^9d*<Oc=f9<g^Mn_NDJ}Plam?|
zFk<t7tGvsGmsN0I^SPySY%Ae^LYG;(&r<mDkAJM)27dCBAHmqzxK=Q<+a`tJUfMmR
z)~yNz`0a0h8%{ap6c`&H*RcTfxOP-51_hafh!HmP$**tcU#@T37yyLq_GGp}X?^Lb
zOZFE>+yrII5kA(Hk@Rr(ds1hhKd3dr*A+YK1};o;>}-93y*CP<r@qZWCxV9~`E=AF
zDoKrh7a{G#!`kP6Vs;AF9Izi;@uoMy`t?V^wSRRj{Oi}hrh<OJ@@32Q88tOM6-G8E
zF-|1QF})t}Hdv0lx7Q8fT!<!<?E<Up#5f4StxVd!N{fzgt+Y-`z6@T@f2Y|IoX@sO
z-yjH?v|j_hnW73k=))6<9aMrA#Iuo?DRndK2jRlw%&0SoDgk&b2h9`e7*4`_bP7<W
zH25D!>STCB9*;pnX9i{C1_IuWk8P@~eQUpWhX3)42T=$@_6?8d>h_L;$i-c&Y?b)>
zr`jlvnc@mmKDfc=v*Y6kY9+;cMM?m|chmJ1#E9sI@^9B~!jC)!fMjPYrHtKT&!Z~s
zp}k)cXhlV+)Q1I`Y^jYpbvS4Jxp+GmVW|!Y+S@>zUZ4n|o4u<O$fur}4WM}}jC>s6
zvHJCCI?AeFF2aWhQ&WeEt^Zt;TWTrDQP3}oXXTZ+<CIXp5Jg^}qYUspcZdH!`sgdc
zPm!|DkB^PPS!bUGmtJ-mTyXv~wM@5V%QijEMoG|eL#_mVN(xG@`gz6p3cU_L|E15v
zO*h;C_x|!;IBflT?Gmup>c9I*xd3d~umL{%+0SY;zzbjaLLKB$BRZ@PM<<G=S$Nvc
zl?egpB0zUcAIo1S5wliZf8W*&zoynri7~j~i0W@u*3n$g2XPHLy>14|8Plb{Nc4?L
zji`8uk+D&jnwy3Pwmk$Z#+JkLp8I?_?2yCY-GBLR_{?WM13Px^&@m^}{xZ{<HW_CW
z4??=5)|n%usx3cp7mkdJXGPR;X4&NRYt7}vxh}ej(SFj_8*=tg`LBjcS<dyes$Olf
z(>WO(-k9^{x>@#Qe%5H+I0sS?zy6+Yw5D>Lu3RPZnHcg)E&qzV0;Uh5?giR4t-l7N
z0G|SNtIn>1c^kNAu-a4sDjJ1&Mz2Sj0zi}4c?CpLc+{qafTY&p351Ct2@_(}Nn2ln
zH0P|Lm9G?~s0++8(fj-7x(4vUmCvd>kksO@HN69(o`n|aH%2J)*b38-`igGC?l!Yh
z2b$e9<KUD+6~6y&u5=3gz0ktq?}lwIAP-yu-E+}xvEQgNjcFjcAAh_~GLBo^;!<Nn
z>-7*wMdA*JOIhw)&>Cq$d#0_0!gU9&g^Mn_7%qGLrSPan9RZV*yEK%4T*Lj9lECk+
zO~J2RF=b1aE`?n?cEKHAy93^J)w^^6!BbB;6*h0)yf@(AA|bTu|MHi=gin6*lW^9V
zXTpI89}EvX@PI~WU>Vt}W5pY*t97mdUZ!*;9SaE4wozy34VKT0Z(t2Ex_?N17j(@<
zLZXc)P_YoxYQGxz*CZ{(W|$7Zf;bKzIUYO7DqNURITRm>n_IU7V?)C*)ELs)Kqhz2
zz^SJ_7XIq5u7UOI*Tb#1-U|2K_gfel8HUlZQJ8Db!R%Z+;A>LW<$$LV1b=aAu(u6=
zbZq(ex3U(6`h-g&Wf85D+Z@kcMecYfd>#%I=OG0DdoH90nFLB*7bRXXdp2SblH~~N
z6dZ4oHMi2jn=m5PiM=3=T~B<VB+St+DmmgQVj$s;QN=6Bh74g3PB&1ize-TErLw#m
zx8fy}vHY6?16RZ}gv=Kyw-+94da==NRRHi@hz0^?wOF)VNf5IPq0eew=%-d>84gsO
zTXc|TKifPb!Jle=9TOx7nizzR`L5?6$LV+S!m1e?#^h1gfmB;kkd{ydm`nrceCzlo
z!R63YiWl!N)H5OTWO!K0C<XW)R>uqRzKGvIbPozC{rm%ofJwSrbOFgQ36+F=d5Tzy
z%s~Xr$y5%XS<o&9|EmmYB&0&(YO{y|qHEDI)uoY^OHnq`^+*|4=(|Sq87tvm_19^q
zoeEdH`3iW>v!17;!z*8Z)s5rhV+i{80z89-V+y||OP9d59oyiRTW*0nzIX?$S-l3<
z9kgz*@W04Njh(XitKg0g-hV&beDlrl$N%sD>(Vi*;EWUr6)V)pMvQCCr2({GO;o?&
zsPe}VrmGFf$#Y>wGYjW;4HJE+Yt4!F0XE!ihFoDl_DWRz+3V3e^o0Q^0=V{2C*M}J
zjf+T?uFJgY#B?>~3H(5W0e;Qr7Bpb#lBF;;H3PqWU=!@W{{iqn|L32<i6@>2fAv>?
z4d4CVze9Jn4Xxo}Jw-Zmb6Mzr;6LlqNivdB)LG>%y2iQAsMDnb^1wh8fOsC+%p1jk
zIjWGib2i}hFo<kbGsKM|cEw>lLxqBdzK?T9O_WOsL|z$~Awg*CiErrao-6<oTtDCe
z5-b=;3I@uau%O=ng}FeV$x}_^^_0tpD8NcYf^X;CBx(-{UyBJOZzYl8EGgfuKt|)<
zqyE=ySOjOvEhB}{ZscQ6HJi<Dr_<Rj+JW7V<JBj899=zRCWv3gBLAU-)c5nvwwLlD
z{3Kzj$ygE-g`+3i8_*ZwCeSJH31a1HJ!4QL8K-iBHrc$98KZ}@XL0k|!U$@P>!X+c
z?_=m_F8Fz+)H9L_9yyCbEbPZ9n{KIw*lzY&Kfa2k%PluKp+3nR3#86VZSimUlsL-o
zyVV+ji!Z(yZn@=Fc;WM31f6ypwrtsA0{xA&4718~V|2MF%fBLJ`TxbQegSWL+gsra
zw|_xD3!kw!)!*VHH706ol>h%d_uK=Y`^;xx-+lKr%AA7z&>LiU;nb#~<|?)ChgJ|j
z#f_rh2rDsT<O@;-r(DE}vr&0!_)c$esXe#XLxz*2tsYFP*4Ei0#hP9!tC+jAPpqP+
z+kqvc!!SNRs!=~GE#Qk@bdgprz34?Rg62>YrqzBkWYPl;wT58Ges;o(3NlzIe5E3B
z=Z-9+$jrB|d5Zy2<tX$zNR(%&LlTSDhlmlZ4V*U2FeRQ{LAm@3WYfr1QV;dW@DDt7
zBm1snC$N2xqcs8&yNazyiZ~2PC02$oUa4^t-zn2YQTj{uc|d(yYfcPm%kI{f!v<C6
z5rF{U)_;91_(GtzsD(~Mu&<(`D4!L9CkC-WNNprHPJZr6MRE`<RxT^w5#)vbs<n%O
zof-?0ECKjAVR0#yDQQGjVc`Zb0Yrpd&7gfX;6=qGSZC>HG_q)-JgNf?P$-cUV?huo
zc>o{UF5kQ=1jl}S(u-hSV!D_Zx)-*JsGZ)Q?a}}e5)s7?!C|cw35!(~6>HJy`y^5V
zNoavk3822GbRgz1Rsz2g@|56y=%I(|eBQ5q^{Zj|^5rl&snYwkVPs^?)<Ni<T_B1X
zL*#&ML&XJ9h=G6kmoLFPuDlY)M#l8Dy}tg7pD^X)efQrFpS}HdZLwXw{~DOsIiVFe
zsq+m5f3$K^LRQp!@zd?cC;{BJU>(uTEM?}R-x*Ooo_-(~{cRiWB2@wS>t0FGr{cPp
z=;6~Jml_3StQ|v!of*N{SyiZWhjIs%dA91e20*LZgpsA=Ff%g?JLh)lECGLg&0oU_
zC!PR*bKQ0DU%&db-XE0Ztlepw*hFfq6e2_jTq^CgG(aGIS00GVbO#y>s1zU|$ZYUh
zIjCP4o5%%|OO+pB8pnv(QlM%5ig?FvDwYBf8ks9xWQ|6}bTUIu0t%gcp}`Q&|LR;^
zxdwbS7f-6h+AKVhpVxsaAX#@bNFY`Erwn(2wVBQVyk{3}#4kh&RT()V)=TY)0>YN}
zm;R1@nsAAc+H&`jww{{fTUfjy@Y;cUExlD@Aa!SpKcpfTR9>aq-EAm<-G=}Wto|-P
z4GNhqa-vx%mA!*nCxMx%oIq&Jlpw`YaJm|V+A-8{(tp%P3;##d?~;<<5kCOB(*H1H
z0#T+!#PR|;Wq|wV1y(P&S_KV#KPRY~dZF)_N)Lcq`2eTmQc_9d7M<sXTH~z3CevP|
z$rOkRV$N+PVWp+kdHq-Cx%S`va3ez#KQGYKlFSeIJo-6%#<H=Z^QTDAO$OYlyC`Vq
zoB4o4VviBK-V}7Qw^T}9_7uO)ytv}W2AP<QjWDHb6ULlJN)FzOYwIh5ZKfjBs%o)b
z#mrqL=qZc7vid5){rvOKgPU)@310vD*K5D;9XobFyWI&=`{`w98C|`mY<sG{$_Sv8
z25Ow&``*9SN(3b|nn>~sfB@M`10fx>am5Pw!4G}_Z+`QeVWip8DIPhb(;T68A9QOw
zUWDEf<poMVpZ#V--OoaXQ~kp<fE0m44?ebz+!jX|Ve{YsM4*!kS>eX7eEVj7T0`p-
zJ#Zv!O*v_(xf5#DKdBwzoDGD3(--dSz;sovq}q3y0dguhW89fzN-MvA^<~G-U9itS
ztKp58zY#ug(@pS{r#waPLDMtSuw-NmT0<?}?>Nt#1(Zk8W@l5dM-oBR@k_Lu@%QU~
z5g>)SoaMiSu2Y!<{5r4-1(9DMn3zsteCqHWybe33@i&J?0Lr5g9*&&zF84h7pQ-A3
zhaAtq$Hmxv$XpP{kp@JgO%GDhX81nFKUyk^xnRe_#R~}9tq}f&ain~hyJnRD5}&UB
zX0n~pdwidb_ffl6$vTqc0{c?oU&d#+`A|4iL4R3SYu%$s)Mna{ml`*8uc<@*7;L+i
zUr)Np&_3kH6XC-n-amt~?g!nzXCeTq<{0%O?=uEKztpd0x1@d)9nw-{jTDrrQd|Jh
zkK9-AZMw+h@_qi6<N;QQBJWR|ke-Q!wFaIA60v`IPj!0C_d00O3LNEcs2G^84XUI_
z@M)xnrWfpEt*rjdY&>}Yohm=`KyxpRH#dYaZLuqs(%|>%=bzK`2G=Ua)rID$_I8cp
z1-Q5h<X|RJfB_l#gVwtqr!7&r>ogVzwM<nZ3aa)r=}?#YUj0>(xRu3T`F*cmy$UY9
z^fGwmD_;qRAAUGYPEOkh@OYqx>reAiTIphXdt&=`{du2#_JLph>Q`{f%{Rjje)vOJ
zyY?VhHonYu^<D+Qo<wTA)Es$m<3@PbyWRu;&maFkumg5!cMx>t5DB+nh2n06SpXdq
ztJjm+a8mk21l!0VQ>ZG`UNfawBUGHXrI^)|RQ6wjGm}@ZK*>4cNTpt=61$WvTgHpf
zGJy%%#a`6xEoETwXmZ=6WVPjksss=7NeTCzPFL?QV@sC6Ip>@Uk2-8U{MBDy1GjwO
zX4tl4JFHx_5{A3OFf}>F_FXy&!pDlpDBPzN6hUw0-5?$So)xYaQ}N)$I7C);QfUbe
zQ371A!}*&eQPec4LoLPjg8%(UPS^;qnSv~+BI6T$aguhC$Hd_z>EmjhXL+u_pKLxs
z;6Te?_S#nZ1%3Nsdu&V6MD<fDqejM%AoZJBlQ{Ro2DMSI+4MN9j4MEBjLXN8plhu%
zp3(rx@cPn4fhvF>CF9+YP!>T%|G57G<cyHLFX;y38uIPcHo!ex6aWtX&pXROacSWi
z9pe%f_d$}d+3%U3u{JMO2HH<_$_mgE06()aWO7y=9DXvFdEIXB5v7rOhv;CkZxbE9
zR0%*JSBWiOyo$Z*Ej4jD7jBDeK+bqA9YUn-YR%hjCcgX}M^-Wk@&$r38OKf-!%D(F
z6o#<wMlK!vDQ19Qcc>!hz=*QQkB!0ho!fN>o_+RNTJV3?vz}w3_3zrH6$8rZ@8>f)
zMP2_k0oondIk8;}ic6O-hcErhzrby`-U^#HZq)muN+*Z$0QS<JMQXk%ShhlM-1*Hr
z;UE9;AK_WgeJ)Jx+GXMdD9E-D+(}Q5l6|$t{t`~{q~xBeUHet|>BT?o9u{oj$SYH%
zjY|Ms811R+qg;=xQbR-P%o>8JsY&RJjKGl_Ho%|#$)CV+M;#5<zW2Rw_fPMJB}<lQ
z6cV~11xUIqjGRAD_ziS^x~;8umx~hK%pj%eH7_Z%(Z$B`4ai63QiM}&T7;%$Mxp^6
z`YC=SRhqv@ZfhvA*k%F(JF-gb`HDqTnevfQojIMb?lBi8e_eem+meZOUziIi6hd7Z
zjB`^uGk_>B)fNt9>eexeMFp#FH;R;IjYgx})f)7Ny8<A`=t^3!8Vq`oyOy+(1RF--
ztQvqZfLe<KxNiu^^FAcRhmLB=V^})V<nk`0lbcU;ioRf`lH~MckfN;C5G{@LQcm!;
z*3DcQml+__UW#&uMbJLc!ejr+bJ+f+mV15rQL`5cpJCNTTC()VgN1;T3#7jJuQvn`
zu8!29=Zdqu<<^;lc?o^wEG*3OLca8)=qj@QSCCs<Xmz5)WRU<I(rAhkD?YJ~NxqW3
zF-qm{FO821t~EM53T^0U>)WaotKg!GFVryolTLax%*_F8*|JUdo`QROcr3!cX;KFT
z`ENseY6@1bUJb*eqwt}>`w-lA%WcqUcVN}(Rl3~XV1Iiy;aXG{|BrwC<65EfxW_$C
zUsq$R6hBgGz$VEJKL<mi%S?FgbYo?4B~xWr4jx7N3sH2srbDYS<*A77I(!XZB3zwe
zQk4o?2!;JTJtNKp=+h_K4v574z+WO%n412zXNT=X6?jzPL)x=#Xt!r!zcu^8t6%dP
z*l@%K`0MNb8a{XX?Rt(WSCpBVX&pa+zhe<mX_6{0?AE5;nW$C1GtY(>;hd{N5xDF|
z&ZEOxh`GfuVv)Vo(9K!l%t{F`k+Mb7yAeP2;9VF|6i3p!?VF7IAQ4HPyJB|47ywKd
z4?g;sC8E#>_2)$3dc)?F>qo*P&@<cd#Dq8C<Kz2}pa)HX#J*RN(wp#~G_!z|4Ist;
zL>^0m+hIV8SJ!$sn@`993Ox$PwZoB3w6I(TpBJQfw8kNEtP3;}-HhN*zejEtj*$+n
z`r<P(n_4{u(ZehaASZqZbA@y{)ldu7f|qC7EqUYsv{fAHU98#d#nKr(cM;I;as|kt
z0Gq;LSlC+}@X}ySH|%rkDrbZ89e}P6z8otYY~jTML>Z7mw<e`+6VhRsY=s>7Ik+D!
zTX*AE{(ktbEd~D@8iJ{rDgC@-k3AY*{pw5MB`<l2hV3g~|Cy<_7W|#NzsmYX5^I<<
z*DycYs^0<F@4y3K)22;u^L5w4ZMWT~;r{CnTd&atB{4Gg(w;*qzJnTLC6FC=+;Ol&
zApvHlbb!Zxg(R;Gz(6MrJ?|La#eH&Ty(=KWn)-PmyUtSr)}lD%=9|)e>BdG6gv5DO
z!#gx=7#cbTiL&r-+qNCX#+JbEoqrx2a@Zko*!siaV}JiK*tBsIjE#-zprW(0v;ABD
zkva*%We+6B>*=VA18OtXzZphb$~qMC4(zP6(*(ikB{VRFOmmTQB3XgP-_-npHabzw
z=HQ-14TjkFgF*r*au`DjHe4h;W{#RY@HSQbmU7Qc8Fe1+3IGLjh%cr~7d7f5z*;IX
z;M<@TC9op<5QkB&JD;6~ifE>TO^?kV2LY!+MQET7fh0?`q|M^QuNdSXyNXup(9|!!
zM{u7)mfeRc|2ji7xQNpZG9^IJM(LPy?PKOWa`&`8S4B21$mt#=5()BKTg9>ME7bU6
z`&id}$LDgNuK05hI0zj-T@gHF!gnkpqV#YYaa8pNMbK(rQ<)=Z*NZLx6~)A$Qu+e@
zBWQVPIg1v^Kd9_=bMMJf2nOkCf^!WIxAf=P>1i9ue+14w=Nx$b<*$d|`@N^>I!b^y
zF#*O&Kt<{sY0(-A@!wX~IuqqzL3Drmv!BAJKJ_WM{<`a7?Lli{!-fs8dGqGHkN95N
zBT3C2l^XEYTW^Jzz3gRh%rVEnuE||6Gc^OPG3D3YNx)#|65OR(B;nCu_8)KE49^iX
zB-33FcPzT|`4cEax8-!(KIB~pMvmXy1P$D?sfsHh`@XYO+P`FMT;Fqda6159wlCpl
zY*G2*tA1De&*<o=vGmVQ!?DL62UlJB7jX3N91Yk1?e*~EAOBcCS1AEh*}1tnXwS8i
zxys!ObN_b2pE;{K#Aj6LIWj0=G}TUOP3e0!jsZ_k>k(|6H;c_?lI59GAjBhLCQ!z8
zBbUY$5+VBTkRfp{`jWoLk}dBo#^j!7FfB_`-L@2XF2%c4@|rY)e8f6%D?eAHqzn-3
z0jv!^zQLF<MJF8xNv`1h5h50nzc+9Z3;Rq3(~RRsC4zBK{;`4=r&$KV2SPEqV5r@g
zC(a@Rh|!e>RLwq%Gx`Z4=!*q)16X*Djz<4+!4~YTU=y*P&Logm>6up)@xLdFGBx@3
zV2x%L<17*QP6R!n!C?f#@+$p~7jD9S%|2Qv5G|0hpJ2)<OC>XR*URlmHitf}k9}J%
zkpp#K!wr)|s3hNRyv`N7(Gfs5btz(&Z<MqG@^huw8i}$2DS^>Ogb#>20}I_+;(}u~
z^RRvQxilCIwpTHq!rvKg%9!m6nM&z^FhygyM)L5j=-XWI7k)5#g+K#_hMF4ouZ8wb
z2lm@<KX}m#UkGo0%Uj@(Lk_W4{~7IP+iVf|w#~p{StFM|sncoeGOGOW@F@J-zx^9r
zfBpO5-uv!@(@sB4KS$;I-Yfh+JV}kOvi^VfyWiFG;F3#}65u#9k7j0|rJy62Ark%T
zQVM97>I%R4ZOO<4L|CyOsT+ZdSnhb}Q0Q>%mJ>{I*W@OB`vAWDC`>odrotX9)YmXY
zM86Z614(F!&y^~H!G19#f*x~?u2wQB!G80WEwEzwa=82tFV|?3zqs-*;A>y|8ca`5
zYvrRBG|}3v{&Zxkv*TqLALNWcR8G^z8g3jKtSQn6Cgu&QNQ9ard*jxZp;Rz3(-)?b
zqQG!Cl$l_2eC#lQC+8I@qESjG9G!jmY|JX5Gkk>ckV>eYi$;9*SB`?<8e-xGsJ{Yk
zym)z~t@Tc6DaiV$l+43JW4=8#9+4YKf;UM)-Fra+L@vGhKlB<g7P$iTDVbVOa4Qy{
z;f^2g_r;YqNxrR7A*Z2x2U|x~$_08~|AsydNOfqz0aDZoO0P*eFvhaSMBPPf>WNyB
zLwgb6sRpuERhw?4pR)&3OJsz-u(*&aM{br0pQZ29O{a7e$l4+M)3BH1XO(Wv18kYX
zsQM}+e8zfB^_Tarr~tC7ND3$?3aW8Ru5#AWj3iH?GZ;#YllAqgT~8p1nITd|ydco(
z;sytLrc$&85BAq=4rxo762z4ct%A*-dBz#=&cFBzc+b^WYvEs6{ZW`Vd{KA+J4RTy
z7YhGMnec!9&p*MN-|}YIxN)<F{j2Agz=3-(j&?6qk{aVxt5)gsfHz!!6MX-B-`8m$
zRosV}_KaOxHdSQ6XfXzoGC$FwqL@n_X+Qqvnc>hHi8dFBQ}9bgvg=zV1FgD%4Ax+%
zbo~|X#pXZ=`U2C_hFct-9k!3dVJU*Js@rI}8yg*g?K^hBj-3<mlqWw0-hbo!;T5lX
zC9GVzQtvg26k-4o0fX|7b!o{g1Cm!x_xOyC|DC<;mz+1G;vNs;CK%%h^>#R6RCuaf
zp~QJk(RwN{@O9nXYV}=$K`G`-SQ<d@J<=mrld$?r)NfEmx;AJZyRl$vReT3wZ0gjn
zM|N%0wiZ<rNBvY$oUyFyP%f#M0I0;`s9b(M``iJ!R}7LCl(SRt1`a(5gdeN*!t44U
zv3~Li8>C-ZaOw=E_ibL>luvK~$4P9YktQz$ocsFt*<1+!5#C5yoGXK4u)4B^*<4dr
zWZj<2*(&t~%{e_dDmjp`j8twA!Ve1bsWEg07|{?DM!3R}a=dKJX^We>q=gLLN8JwK
zbi_TTfPy|mi#+{D$zC&o8+|=<K+tmGzid9(X4M=bzcUi#G4x`XE7{bFH}_}{%d8jv
zuSx@)YF`QdiZNC`+iUh)124Gn1@N(te;i)?(wFMKRDu4KrA_^FeTQAc`@~vU+B0pP
zAwacx?KRiH6<1sVYgVsW)Y(b)()=j_RPevM@3|YUzu|iL`q#g%1v52|P&nhu8Ljtj
zA3@8lVB!j(kQlt&9V2S}>AXtBJ<8`$mPpsp&y}=txIe~>9-eaie@Xz#MqJ-*RE2RZ
zU#D)*cRgYHJ?LYSA71xHsCTxg4SJrK4K>*3P{B&jY1*F|8Zb7hVoS`yw(UFMh{KP7
z_q^*}@a}iNQ>Q6ah!a(BY>CfA5t@kzB%ST4z+#$|oZEp5TeFNGD5VH>ppT|zb^CY@
z6J@lXn~3~mNQe>$veaJ@TG4S9q0xxDA|T8?Y7Ye>n+BAx-4a*S>eP#2Swypylr7hx
zc}0=?CpH>>P4QP@A$!ksqW6-}V~qS*Z1{BiI+2U;8PYqX_&w?UxFRPobW~8U>qArm
z^h!FWaoHZI<t(a9Yg8NPA{36TL&uK}ir-&D1#9jZcs4o&L1{+XJ<$aq2bql!0?~bH
zqVqyQZ0#~M|BS2@PPBL3Krb315khS4IABVmqW3v>#XQ>-)v}i4;1VfU<#Sd^HOI*v
z7F2VdX~OvrWnV#VAe;A9THqBwKiYJOL@GsRC0}eEe7L{dbO$zj#pHM}KV7Ovz#COr
z7kcn)sifrkvC2NR*^6cJZ;_A7@62GKf`A%2(E^s}*V46%b14h8Q^*hNHlxanj0{7&
zJ*QJ=9dq<i@aO;EJK#xAJ_lAVUjfsTlQ7rq!kCWmj}Hl+=>OP{?U@-Z{4Za*T>IhP
zbkj}n^Pm45jz0R>y@LNEnAE&f3Z#4Qy;skPt(&*P??3(bwL5@P0w^Vv_W#%OmIVGH
zOi~{5Yp=PWW>TyG0?%|;>B2L@f3j^xRFx;5YeD_Rr~tstZh%a4aDE6qA|Dt0gXb4g
z-4-(u`r>e_rO_ojw(o!?<705iC9j0vIr<p*^FRM{_~Ji*QM)*)z=5j1QcMlGJv0Ba
z%#l>1ubQ$oaUfk?{0eF7rDUnBJ5@`B8~Q9N=*UweagrhwTF4&25dxT7J~+nF;4lyT
zy2}WVkP}EjkxE(mEbr?qHWE^R7C}WSW(TuMQREK2<tKQqG+?>+spQiKjFd8bW4XhA
z9c55486BiZ-9%qd#kF=%vV?2Er39B?Ihb84fh-7~!_K^ir2@cdvM4zXBDHpgkY_1y
z2JQTmMrppSSWcd#>0CNBCNugUsh~M5cYMk(hi;}$lV~BzUI>qO8iayVYkx@IUP86T
z6fK}zq!xc6Sef%1BbMn-uJbZNchqOLfAyhRnC>GKRDEigR2ko-8Pn7pk^-uvEWFh)
zNtV{pTy$-^{v?PQQ=V$)p_VY(B%4{JtuArt$OU7pp&2e$+}YJ0oFRM;WyXprP29Ti
zYI*0g=$1~C_%m{$gjxQp4qNvwWPJqX8{}CHl}<~g_ZtS~2D@w5E?6=)1{eRqAHeHg
zcNskPw9`PvQ{TC3rxD6X`+DBGK%)lgZ{z>z9-Nt&(RGyY|D~^d32wXPR@l0AyUP!+
z81B9F$R@S^9(?dY_{c{;0{7l`FTCb8uYu|5Nj*<SS|d6=q@GPG4xl{~bao0{O1O>)
zVkuk;-j|=<c1nR@DN)NA?vc(MjsD5zI&mBK2nF*}_FDK`^|q?kVi1T+EuJC!;JMOX
zBcBJ!cNA#13&~k+l|{LU3VkM2+GAUdp*45;`gW|n(x04t!Gq8zTp=s0$Ve3k-7XBZ
z8Zg&Yd)OqjhDYG6C!7V>zwdA1`uD#duD||zozisa_&AIV55wftls>QK<^-Nl#~Nrr
zN556M@SjrZr_#!mQj+K7sR<>N06vrJSR@_-`<_aV_IkuaT5BhTF9+6na-X7LvOfIm
zEOba!x8}$mKv9O)B?P~^K-^i^PIk^??4TSPP?z_Yf>=1{#*|7QCp<q2Dv0AG7zadh
z%Z%|Dj+NFyFT5OtssC^@jKv~@9@b2XZM&N>tO|03#J>b{iabaEBfOV}-P0h9ojPl+
ztX{4?Q#Bz2;JC850O(&&4S@|i-|-#~Fe}AXpzDG6R|=JpGZyvh;<QI70CaRi^C2x<
z1hBFcGaXmoJ#bZ`xo!3kl&}s`K-gSTzFPVck<lxf5$dMZ|C(iBaP&s62!^_27Q|i@
z6e(5beqF6TQ&_4EMFk~FLGA*m5Sza4fXxVtPHWzc{Vx?GE7b`elQ8I@;=tW>oVS6S
z(f5zWo(I>nhcz0LlLxR=w+5kWK-yizmFzA4RceaU35}mKX2U8pQ>YBHkBPn`9NK(P
z4AjW*i1vk@oS4wQ{>L11G+cV=YvB3MdjTAH&_TN1_HEl?cw`uch7=?1BVn8IvDOZJ
zNE2XYrmd}RO7K^7;|FepPk;K;(3$B#Yow(Q#l6D+UeeR0+0;k?75wq`+i!>a?z<1(
z_O`de0S6oa4?Oe`bZ6#ZY;4>GX~X{p$~0lo5O2QpI<yN9)dYFBnNYC6k1}yd$zM;Y
z#Ou+X<1%9uBJ5&p*pJVYMs+%2*Ox@#w>W|5Swl)`Gz>61I}JN_wqgB-4e-Z*{Ks(I
zamT`S?|m=)`***m6#yzTiE<Bc8Fy$q<eZK@o&1G5nSbVmB)%{)XNn=xsG|vRF2dME
z7H5I?P)Z?t{<yYF1lwQ*)muZw7Jn2py~Qm+4#X~o(t{H7pn!+KK$0o6hU9XaBFSBs
z??6#YbS+Wg)ULBC!$TAwfE)R$;xu?$UQC^OMmVG}gH*g0P`Mx?PHE-=p522eby6}`
zz_&GQ-*mi7O%Q)WL|9iIHc6KkY9y8Jk!uT*4Paqo0Jt+GP_cL@I!2IXOTtW4+Deb)
zHjx4RY@A#vKjj`Ck=#J-0_0Ifsh?FadAR14HkDcIS(gl=25^3Y!X(f6A=RPK{VIs|
zSf0+s`K0^0r3b&bA=!8h!KP1TYwEyN@zaC;Ar`LCug)1v1cd?9@VEn;X%~ZW^;WPL
zh$D=bO?Sz!xv`;6!Pfs?_c_tF_wGmOGd_sz)ZpJj&pCcQJ{VnpWe&dFfl2!^^0gD|
zb)lmUg=WKAy+&aBwrwys*M_HGZ~^?y-~0`{_O+L3;a>^<YAy~94_VE+9VZh00F^W?
z`&s$;tM#FT|DXNhXYi&!dIQ{i^UW|dF$H7eW5xZrmmXP!h!7R2{Vi{P3q0_^Z{dLb
z_S3UVp;DSdX2Nxu|ESCivo*-9CZRGdtSMWxd}}CR;`Ud^9Sh4l&|Gx5FLJ7UO>;8F
zyRf{u#XJa>!)O6qc}e2Y=;EPbIbtBF-)*-Gt>zGnj*RF%ZOhiJuzdLnc-hNd4p;xx
zU%~TU@H|~k%{Ao~FurUV4Cw%YMBpM;RBe>8v1Rzbfl$zqcEc@*U4$7}iilYJ`Pm`z
zQ-#WD=VwfOl!G$JYm<x+JP@Ie?Le9N%-KhcRQ)2H?K#(b2Cr0`rA1}IKc%cm^1lsn
zX}LO)K#xpd)X`~!8-KP#{uEfAi>%S9i2HSh!}8+E;C)R2xe+zt6#?{r{9Zm5N;mfH
zXNIvzfkxw7uyZWxdxj_ognc%w!5Vwmxd3QKWjh!t0aW<zk;(}ZXALqMya7;QfSJKZ
zNcWW0wn|pZ3eA0vr~z5NKc5qpnEn?lLzb};SB@7y5Euw%zPExxC4YZZ;qH;I>ere(
z^ZS?vk+0(d6Md>?WR>y0(}kvj{Ev*n^pwh(Jqw3D>QH#mMHj*)FMlO$IPyqs0o$~3
zGYk(KYrTfOc8DJ~CvDN6(UyOe=1nosU-{R6g)e;JcDViaFTmRU4}vvo)@Z2h-YEZj
zDHjt!DFVKB=biB8x4acDfBoy>v5$SMMyBlCxkJ0AC?D;?ZkHvy61qfDYYb(2`9o4q
zB^&N;gknCtNc#|&kB-TWAqP53vF-Db(NUP2orP`Nw&@^%XPxy#Sa--FaP*PC10TBe
zR`~U=e+?tnO=)HZU}m=M_wrV^+*4!Gn8T#Ut4Kcm&%vTLx&_OxE@Kc|ix?VcP@G0-
z_`ijtWNZXW2DuVim`hOu^Z8!86MnuZs9RmcMfw-qa0)7ym)Q+Nu}}(tzJJ<a=jl9d
z9p!FlJqePosIwBw0he;@POn|LVDpnigYS3;y8aI6x<k%fma_R?rO4Mob>-V7>>^ct
z00961Nkl<ZXkU}oGI9WCI-R=<W=RMpSVF;1uOq<ceDq2m+?@Y4JD<v{R9paR(HR<Q
zYJYzqmaZo};qmag*S;2>`RwQDU|1@3)?B*{OH_1hw7Pad*X8YFmru=1=`K@|+*O|K
zkALFh@X1ep5;kw#3MU?avbOB*75?{96`=+7*yE3fJHPrhjqZ8%rI*5Kr=12XSFD6N
zl})1E))^|CKcwB)9Mg-g0@NF+8Ct$LG*bC=t4~=aSGcOg-LMXbav?1*i<ykj5WANd
z3%^{$|IG+Nxo37dTDhtA!imXAn4O%2^@p#AxBrj-0l#z1G4QwVdmnt`&O5atRHZE)
z9UFqVnKsPL%`Jci+fqNCoOO;)fnUfGwPd<_WPO#8<0At&M?IqNEGaW|(}R}W`#}NJ
z^h58}pqJZMcpo9G-JR>Tm^{|*p!F^TB-fV`nt+$BImZ1MUYly(q8m)VR9CR)AdhCF
z+wIJ+8^D4n0DR!O09)aIFO7Cdq3kYiFfz>gzq-AmNkJBPE+atgYyp|F&Zmf?zNF&#
zPF)jx!ZAN+`DK0~QV=pnHh>5Zs7Uv54Blgc4W<MVS6h6h`{H7%h3{CKBp6pR`e(vd
zi}f*%<$OdDrA(?6m@-I(!wzN+6>{b2b>83Vw%UwrDj?@!sUfR$Wl%$lfs@m@U?5Ah
zT_4=ZwPXKcgx>6!N<LloT2^6@f$f=?er(LFyMc4tsq*!UexhI3y8mb#1_I3z1L0Vb
z;x=R>_>*<SV*r?lut3}zhG3{Uq~B2q=_(id^Pcxyxcu@zgcD9U38rUeV9S<GFx(o0
zv877_IIBSpP>&C@>1a@0Te)tuVCnKD@Y~=17H+-uR`|pxKLH1=JqVVq7<Xyi_FDe;
zQYmfUx)shi^9<O$bu0YM-@F(8<3G-ZOI~&fjEs%A^B7%q#J$5RJoPO+gNV`H0MzWh
zLlg<Z>LQ3Vd!_{kBY9jP#oCf?4f^$;&RVe8NQk6enF7m*lbRQBAz<kKWjcwUVTi7v
zy%L>sHf5tbm#}SG6Vt{qD6DCZ@GIo~lp9ogY6iAExDl4^vr-2?J?7}&f$Oe)FMRT!
zJ_TF1ZPiGC)^JNX??R{DfVm!})?g20U7Hsqkk7NmiVVL|6?vY+mJNV{@WF_5kd(=c
zXV8KBDEflA4|3ND{n0Aw0?R*9&V^R|m~g!DjK$wT+xHJ81vI=@;OnHIdqJP|iLK>9
z;s&6Uz)0^Yzx!x?3Bo^z?K`Ns)R!b+UBtJL@!}Ea-CSx2@56Y(eyNu%Y<xXdDhFur
zBYsb3jIz8V32aUK3Ftb&{v>^t4Bp3rM)S-Ufh&()8$sYe-Zn!2?S867x&=UIEQkUC
z-5ml=vH(xlKNx+i$>jGPW@_^YmYRZz6Hba8qnq7m`h_!>HjCQY2w}p6e<4MuR}h4I
zujDt@NC__z#$U8P)6FZkB=cvYpI>$wQ=u>^AX@9caXb%ixuFiz{85G!ztiSu-MX$E
zVlY2C0Hix9<XrMO4;yAoudN>_5~9{ZWm@2Co)c2BJaG-tn^liiure!%JkD8VO%Lt^
zs)}PSoxiDku%-gC<fy8QdA6)XQ4#x_LqjmsYU$ybo}SUad;R*u;dQTj9lYvQuhM?7
z3JR-gkB=`U^Q<BKPX8Sh1SV4ZF#PIQzkqA5xduM|v5&)<XPu=5f2ADQOM9s<sWrNN
z`*!UT&~A6&h8u3ubN3Ja;3Dlxq7+y-|8zzGy$(=W#YD;AOc2(Rl=X&`4V2~jLQvHe
zW%dSlA5YBP?GDr%^%tK2V;y*A)ZOuavH~9y7y{nRD`$e>W@yw9S_;O(ZgI*eGBi2@
zqpe}swR4wtF?q~mPKE2PyADn`@kDsv-@Xri_OqXB#DGFfL37S#a~O=<<$StsmOisC
zJe;S>bo!TsvYH2h6B;aj2QK_jBtd{o&{6BHU}oowMs~{4p6Z|drHMGWVA;cPrxcx0
ztfm@5oG5JKAF5oz@|MR)ri&z>qrJ}kiFy81;MIr*jOK{sw0_#B86HxNH0a07S-^yG
zswlwwVmv9**U=h@;ykc%TOikrdG~tKfknwdO_hv}sNkq3G&Ktdgn6{t#pFBW0>R|w
zmkTPvW4H`J_{YhqCyq^JlcP|()TiY=sVlE9{N>((G6+=yq3+@mft-c};Bn#V1pFDm
z#^pBOq_rxhY;Z)87xqdpF3j?3b!LNUm*kak<ET1jo;M#MB6Cvsr%D5Qi~QGLv1#w@
z@56n<1zahhT=dq$7AkHxHC$T#Q-0J6(tpmA&w(4?e<NIR#hYMsbWG=8Zw<9zY;;sB
z6TI;6e;*~27E?v~pMh4hrG@{mfBoxl<&{^#J@@<^PCw%eXZ7Dpd#PWG&eYTloN&T%
z@Zk@C7+(2`SHX9_^KG44Qq5`Q4xr%NYM$a&B{8IWN;~T@-_U9(<Xly6O{V|wKXj`z
z_t>r(F(ref0R<lJGccj%?_K9utGu+W>3&EFh5TOH!yALIazw2$P{h}KyGpn+dACQE
z+f!=@wr$@IW8>p+#hcy)H{AGsIPYoa>XJ$crP5NW`8O~ZLG0#!+N+ZaH!-GF(d7e+
zq8-=dnDVx>#sQNmG6;57K|uiI%o_vc^HK(WC?{>?i5S6!i|4@kmb!trizzi+iDq3u
zx!k74w_aytY?N(h1J;uTfjjO0dL@^}JJUv^B&cSlD|kOSGyo!ns|<d^v)$vJLUmC7
z2)hXZKp|p=Xl_{|=#z68@0hc@#;H8W)GjVRDT9U;J|hc%Ar|OBOGIEfsnjZxtSLfw
zBrCsEP6rgjYov8*1t8W_{><<Zf~Fatk=g`F1o<S)pI!Hw!U~XHCMPea6jC4u04_n%
zzA;K|nv!;1f?5UNsTMF2@Z+)6O0p{9v_g@__x{C1E<dm|N5YcivmLD(+dx%hToLV2
z*%rEr7&ip<Pgz6NeHGzfxoAx6*a2$~H~=nv?Q7tbuX;5ce9*x#IWeg%sUu^ffj@O<
zb@Q1K&_5c3{ViLzOz-ILzw!NW`)6<0WfWt)H@)9p8YHP@xOwwt*s$RUc;No~;f2qC
zA^i8Zz7<~jvX|*OsA5aZbpTqeVSSR>5CD$D34r@0!b%A8x9fnejT9G*Dd_z31NbLF
z1JvR(=F`!5J}I&w5`hsdw&ZhE9Tfus9}qVk=E?RC3seP6Z;qm-ht&Fd%2jHt)zZSg
zviLvwN$0>ZM;{B<UVANk@PoI&0}ng^OP4Iwd+tc9Wdp|7jQ%eTQ)zWtuAjI!DPopN
z%2PzC%gDGz=aq<<3Cl>rUoC`8618aVDRhSt&Qys8p4Sw)*$+RTV-2MHJrd{b>k9WJ
z(fH+xSRrmpf}gvu2{&>%b{In%q+V^lx3f-;FRW?gODxH*gpLWeDB>C;k)SM*)>Gsj
z5WPq^X1<O2$EMA@0wDH*Aw*Tj(xHQhfB{&%lazv;d+8%nHH4h=YjK72Eork<WL?1X
znke)E!m2D5fLI6b(Q#oD(ZP;_4Z$)1Y-}XufMM`F!;s9&s{_WB!MIQs#Lt7EAkusa
zHYB)dNWy&;#Exo%d72&ag(+$5UFY)}K0k>4zz+kq?mT0~>f(EL>^0?|CrQ&Z*IaHR
zmgc(X-H{p0Y^)8=v(=vre9lV3etBRp#sa&q=7WMxD{KGM<dmNKXFc%=@JDa@BRJ=&
z=fKFwDD2p=Ll4RD@Q5Afunn_}j8ee`t7&$%!a!Z$XWxBb)0R!}_P4(se)Pj1!Rpnk
z7e3eZUV6lk+A~!EHZ{+bOUoDj`JdrG|MN%ihBv+e)~{a=Gt<*BH9f6S0Sdy6N+^F`
zn05l;9M3uuug2}8k}-h@tHCOz%o}}*YXo-=AERT?;=e~I$?WQUX9<$X=$R!Gg4d|1
zy~OM_cFzgQ#0H2k&VqF@5XYCnm?`h)+_jh$jA09uGPBc}gUQJWIPk!O;O%e!f8oq0
zJOTdjvOk1h{OT9_z6ubi=9)r7)kXta%ckQ23Jf^@Lx@SMYsGdgQNa?GC``Dg{BX+R
zk4A++_`|^y3>LiIsE(x|z5uJA<Y8I6F32H^>s)&^G%Jie3A7x(L$6ls)HA6-8H`a)
z<zlKl_aR4QXihGYVsG&G@_b}yh)lXCW8dy3_M(Zx0x{4z1D<jPw&_3}vG>gKb`8dh
zvm*q{m`kDig>!u&-zCJZ*!NH_@9i-PfJUR~OvsW@LM_Zq<u};i8=&!-?M3)6kIrf&
zO1E*l=jW6HyljOZvrs?s`HC#|et|p89P5inslo;NXfyZ07`y?6^=~TZg*#Nduu0jb
z6e57WtLPJ*QVL{AY4>5^B<40voam{bAEJVQ^l@bErw6<}u+2u|IV&pY8y?m($W;_D
z)Ho)#E!%kT`tF+gCoZBMTr3icF*y9SBF<Ng<^n@zP}rXeKxixp>F1UB>!kwt@M~3Z
z1JLr1`<D{%Rh@}l6R>jm3V7wEuY{Ms^b$DkxZ_}Uwhh~N?1Z6a!(;=n3>}Iucpw;<
zXTwEQSHE~_Qboib)5?W!eCr$V_P75J*t&T$tXsFPrvN;AX)l$MvcxJE7B%<w-FIJ@
zoScMves&LBcG+cc@ry5pi~rzao!V{7<}Lbc9~mB1SO71WaGuJ-m_uDNUuXKic6+kQ
zFfOH9W>t*jjGR^S-r%T8DY-lR%=OOSMPR;-9n6F@R9<4=M>d(rnixumIzTPq4g47w
zwuHI>&Yn0_M^Idyo94X~8lXMbg`GQg!m{Pd;P=n}eOUG36>!rnH^XhW-lpSJC?$YV
z78n$Oh#RAZ8mEH}g^8q+hA0f2z!CVd*GyAa5bR77;~S#eLN<-SnBbIU8KDrfcUVZj
z3qp+JiR+CS@1nqikycLP2SdS)#sf(92JP5RJsxCGO1IS6nnK8C6)cImE~p|8?&!KX
z3~DU-lvC7A#G_awi4$U_W!($fBCzWTMzmZTbrnAJW7Didr5valV>b?fKbx$mMEn!c
zw;vm^{V6G9sGN{fJox?A%fx|hVV+b1^Q!>J%_Xvdgs>)mo5Gx3*y~ctL>!OE3J}Jh
zs5iydAeika?k;Y$oLfpzVBMtxo)Ab01R=2U{WwG57%*W%Qw2jo-}KvmbW`S^Y5Vgg
z7!mEdr17JF14@i7s#(l@u#FdtQ%)l+UL{JSh@@^BVAtt2$CPL_bU-9pbDnz9!sptm
zY9AS!v9VFz>q_wNbh_}EQyv4ayX-P}_H&;Nt5)p;6B850hqX1NBU)qdz(|Yi))J-&
z0+^hff_?T`rRVYoKlCB^<~Q$z%^Nqu+O=zSgly&Wzc<SNUYbwBKv>G!ifI6U^PAtm
zr#|&54a<Jkv!4Y=9DW2$?3jSb?GrFEJ_5~QmHDQtqqd`Rzdj)nh6wY*{u?sUMC%~2
zQ-x>jo=u@8+4NW1<m6+IkgBrmSWdP{-G<cP1a;_!))ww|Rm#66w1$SDZDYJlPENz)
zpYQ}Y{D>pqs0~NK4L95Xzx?Gd9U4H*&GyVpPkUjdu;|X9uw3a8R+_0O3FXJHDQjYZ
z+gkK23c+B{al#^9KatVjD+nZnV;a<4$azbGXQxjCPp9T9WX3Dz1<Lxrw4CTlN+Z(S
z@5$!`_!^=Z%Dx<gyt86MxS(B!Z_|w>?&lyOodGD(2sJYEv5033^Z;=%#^4-EA+dW{
zqkE1E06m=b_pnpsIzAPGFIWG_=~ajyv<FwoCLbJ5(S~ZNkwOP_ML~}8L;PCYAp4e^
zlvdym74+mCxFVurU+qm8uimK#BIsu(L)|F7ydK|(MJS)Ml6cfbPtSDY!ma&gMmYX&
zzV@LqP)sd!L6~ln&4)}g^`ZSxOF5?6A8xf^Y{{60qAKBE`9(kLna_k*z3SC)))UXt
z*Og^d1-Tj<Q-0DW=#_2B!EoI>s~^;8>G7GGoYd_r;s2qB9)cThyb-?ft#4^2_t;~P
z)q?+C;eRhJBvH%b;fEg%yLRn@JHB)W{Pd@H!!s^;CY*Qf(_qPxC9rApW@xm#I>v=Y
z{Mr4-iRdWQ6KkYh0Q3)*CVvGbfU6KPx!iyqo_pOr$Dh9!$}<GA?<(tC&X2`MR+!<z
z4Ta_F7>D3d9mJjxpgO2BR7d(Z?JFgKI^$=jr(x^tG#qr$LGZ>au7IPCItt$RzW2c$
zcif?4Q79#VB6LAX@dXG8kKn^qgobPTxpoj5{Zcinbn6GQ4TAL5Jo+e%IY=`|c$Y{y
zK<!MSM!T#F7$UHeNCT0jzodT$!1((Br(ycvUU-d0MViuxKPStQDsduZ1d}78Kz3+_
z#%+}w@%xE!LEDnXBkMg~AH7j46?iuz$g?s53M05JSpN$an}jB%=ihur0+=@iK%?nm
z`OEMLqK%I<BzoM8b-^7NR!Z5kQufrPT&|p^eBXyXXH5yJ6Ph<nFa{*s%2_|zGfiXF
z8~%I}PXWm9)uC)Ek(xrYi`FX$`k{4%&U5YU9aT}*v#1&2po!Df;6tp!$hqSboRSj%
zTU4!l^RBJ9u`wY^Pyo{R+K00pKf1Q4-=FsNZ!|RX*_rFWF~=MOFMa7t;o^%ghJz12
zSPMrJ6O$Sppvvl*WnsD4Zal6{XwS7_Ze|viEnTMj=<d7khIhQ<9q`ki{S*$`{~#C{
zZ|P^I=KWsUOAA5D6#%WT-@oho@SFd-4|eX{1!tZ81Xz2(TG+8;r;ZPxQn(Gbh7GDE
zC5bApz)1LKdl`*W!?!sn@JBKKeX&5%R!Y0k0d|0-Pnm@EUtgsT{zOY0?xi?>miSOI
zrkNX$xt#A}5IBVcE$9^mct(tljllHG3~b!E5tc4r4$pn=b78|#8+3rcPk!PPuzB-V
zXttVmul0(6d7(PfVh~$&jZ}Supdh%Puw<QYe}bxb_nriIENA~}eys;+`JgGqUvM`F
zsf^TLQKo~6@|i;ZU8p&*CLc7Pt`xg#YwZ#RPVRoOP1-6<b8*sAMEQ36Sy5xpLI7}$
zqa^rr6aIeEd5#u>639f4)?ZhPGtqSg#{%DW9Au2<?KSKS>f^f5^h&Bb9R(*Ws;j6<
zmPj$lHtb<b{m-Sm_d;xkaNN5*)$2g1O4yP5zLsXNfau0h`#=sXD|DO*BEZ5Sy^%Ox
z1GNHWMoK2Zn#QSFaqy}^X1<hR(Wdj$N~Yu_0UpKYWQL0#kkR2pe^zGk(7vmCAS#RI
zP;*G9K%1DJ)>i)~KjlgAy31Y%=brm}y6sJyHtD&iqxD-xy4e`g@fN-4A1XQ3r}nH$
ztu_ZMmM@3t_ALC{H@*Y6-S%Pl{6Bvl&O7%!?e}UFA$tY?y|jA?&j^J=Iqa~*VPbL@
z-14DY;Q!wJ6S&}lr^BNkeKO3pm%!w%UC?gN!BDHAgJWvm#vC~2j3fS#RXdvVLdz{#
z=evx|n7tgnJ^73O<`Q0od!Q1)Z!w9RnGUpjD7Quu&_+VL(x@;h#O+7`4*Hf<)KQ;C
zmW)7at_3@{Z-<=#aMB4U!F#TH7aV=mQE<!6x5AHp@*|jPPnp;NBPJ_~K7;nO;bQ`0
z;FnLz@BnnZy1<EXjs#l*{VZ8MrE55kFor^v!63!6xw7Q^6QTYIstov8hq`$_tYi%0
zpy^@%i&5#B8+C3O2QdL0Yflgy1%|bO66fuNVQ|l^<pGX!p&|<zFuu>m;F98>CC8Sb
zDommL`-yGUG$<}^1%M6I6OaH=5#bbe=XcS6sf?lq!V1o{eJ5(h1<1Em0c|Ee=SkQZ
zDdW1s$&&JKL->^!It8IcTE~c{aKa-IIAfEeDbM`-#h`aWtO1YmXyh%xz3@=YFdayA
zAXF$`q_HrrALf7DuPLSJr2eH8suTE~YD0Uxkp$yNgX}oD9>)snumD+P?sp~k4}l3_
zFYk|K_o|tkzkHmefG-Hi7s$aY3j(y%)(B%H*iIRoE~RxZW|GJmtIDfjXlhQW@tkR!
z$kT@(_9%GCOJ54FdgZI&;C1U@*RBbeo|=SFo39!bewg0O!(cH$S5wam6=hw;4p6VW
zV#P|>vULl5;vfGJKKHrL!_?FSJoPD0g{@n+?iKv^(xM|ZzZDu_sM*rK|6lvs*Wu1@
zd=p-A$;;u~bDs(;R<6|1+|?Y{x^K0PY=A#SYTl!|8?jC#8iuwMhZY3>0#27;b~Y|Z
z(jzM3o3U-QZrh0A&fBP-{VS`STtHHLivH)2ge1F6Xll1z8%gwT-}6^Iii|S9n1LMq
z_v1dM`!Y)jNu2+UoYED}MbAJgq?Mwv@iA!6wBfhEeE?RiS^<CbNB<p8Ir&t$`s%CU
z%U}Jnj=3^2HsS*Wwtdd=Uj2wECC@i1G<D)<MaOG`zfJKHyi9PGQGSvLe6)=yNO8hI
zC%p$1I&nNxsRYIJ*0j%Qa9=LNCyfUFdM`r!z>GjF>ys3aF*Tk%2w%jbU|>2SK%H@=
z3YTuA5DL<A#ymU*19bPjcCDOx@Qy0&d*sjg^K!}?hXOWV#Mf%L3^1~c!`(P&u<l6t
zCCO|wcxGV1ODlt<xx!sa_NX*~0ntt?u*wzbEbHWi8(7}B!B2AD1#XU6lp~V+++p9j
zu<iuPVAe4~F?@FXQi(~*hN@8MwK)1cC!|(A+v`oL2d|1mC5`XgTwn72S=RT&0<Gvv
z1`9_6Wq#+`0GB+p^_nvbt4eRCm`T;I6UsM#xCLiF>51^BE3Sa^p7t~?$gA{zipG~N
zg{~6lmB6DE2416SN5(U|nj!9Vbj1ImMia)yN8y17?uV=1c@=#Bt{=dGYu7@jGXgty
z?bs{)@1;dc$h6G1+pu!w3at=$!y7J#*SzLcaLFaFgo6)Wr!xsm&rHLxN_E;Ca>BnN
z_g}{-+bh~igWoAbYj-zvsj;<!U5;#;PL8C839`KmS^IyTSX4RMox;B%FHo2+wIN2W
z79<LRAb>4dkH<Houk<iuX>2(=sQt?+U*Z)vM)2n~%>Il*&|GIu@5jruJJbZsv^(&W
zr#=OaI{GNM>82at=9_PU`|i6BMp`XhuH7_9fUKJzROBPCGo&dYmh!NThF1_*_>q?=
ztpmuuK(&wow)>+%)zWAFoGPZM7sGO?Z$F6*popf9n~#9dk`e%~)BC=H`6CK=M7VU3
z=IwZ*)j#Q4>YDIEE+2>8zb6eKLstSJQsNfc<;aIbKL+ar*8yLD0z<C%G^&hCjCE<e
zfI-u|U`888Js)ghbR)9tuCI_1tgxf#KRd`l2QF~BtDgLfGUR>_<x`yXg7=l}2ZURZ
zexVS25h3Axk1((t(P(k4u<)MF+HA)a8#Cj}3;J;tH`!tV&O*zHhS4D>gz1Z^e^Qj(
z@YDuU1Kvb8RKB^&ZXEJK&ewv|23t+K`;PsLV`#@ge<t@#pch$qb<cAQwWq9hQR0B>
znZWEH2KDR5U%k`YyWpOLpXv1~4Xf^QCG<Ckv`?u@bEbrqiOC7rXP=euhp+oX_~6YS
zg!9k80NQO8q1sseRaE{i8?!h{x!(kpl3=dghS8B>7+*RL-}=tC;Nq8D4FCR}e~10{
z+fVzvs^^yY1@5K2w7W^IEhXqHq3f}aJq_-<>p$R)Z~SlY&;R@dy^fZQjl=)X-kZSN
zRaJSy>ke<s%SZ@Qm_rBwLWm(?2s1<qLI4E?L_|~^+pg}fy1(w~>awir_N%V8sx8}6
zL`2GgrjSNNilPt^nM6cDKtw=hkN}zAc;9{Ze!sQ$wDxp{JG?|a3trxRXV~Z5z0cWu
z4gd9DQ!*M$GgPT0r(*m^y_Y-!X_o^u<W_Pfr95&&VP{3y<XU3hI$3AMS$}bzs6*Y3
z4%6DA<}G!kTAcVI#kY&L@+;bIds+7-iP1n+?!VFk)F-W}sr_=k<nyKywQ`jL|1q$J
zncD)90zQT%YwhHEiH+d09tVp%O7=;$EXe;F4cNMME9|}Jp75uC_Gj>=E4~CL9)BVs
zwG>e*K9g!4%C!~|C`9Te>Jcf&q6_r!M4Qr2PvH7#j(|*1a~Apc&X3%a74c-}2AR$!
z^j(nvy84Kvo1{pZ{-z|;Sg{mEYFi^NI?t2irelP3jF^b`%`pg_`AA+wUrQVPJc6(G
zyYDP>+URx_LR&l79Gx*TREcEf?e=TVDUv@c!RIFBy(4kb>XY*SwGGSWDgJD$anb)N
zl&7|llHUQfKlZMa%jM?ph65mEK8Cz1%=oeL$|Q6;6Xc<bOz*jk|43We7njgvo^Uv`
z-*pQqUDgQ{Nm>(Jxr(lKnaEvKUU>i(mgVKnEW(rurk^Y2z#M9%l<W{t;!YY-_)mo7
zGM`_t1utS3phd2z9^4T|YY2K5TcBNn9`#v|ZmC2i`}+I(V6s+&iHUJ|``eF(uYBbz
z@ZbNx{|@`?voDdJp%G7nfMuM=1UV9=3RG;zX9EkOHPHbm+Q+h0NRl>)WPg<^eC4XI
zz(0K9AD~+5fw^<%ks;MeK4&3?><oe_GYI=f`Okm)r|{{&_%w`;j=+o=gG6*$o1D<f
z6Hfm;!;Jg7<8Oe=o+A`vWl(CHQur2h#K*E%6Qz+6^P1O7I$h$RA^4Abq@0s@?|4&B
z5+cqt;&g7Tx0Qo}Ic%)<OX+L4UaK3>+bbgdBje*V6la}z7F=`9HSoz#eF|pH8X_kE
zo`=WK89DR`op;{p^(?X$yD5Eq4GS8Jbdq#32MqtX5@(N%IgjZz?laSg<!G8-7mr&&
z{?|!y^Y>kS!=!Jrv`ZCvj=YPhYrX|2C?y7__;rK&DoY8NHZFi2Ax+omlHvJGI>xaF
zJUci6>0zZ_Orvxs1;8Pt&<}lZkqJRz=wEhF#F%VX^h2!5{~01PC45n^U?w3WHWKL0
znlq@%fTI}r5O;{ki?GtYv}E$UE8bU(ltgV1ijea5hb1=EaAbfE@&_O0$cy4YcB}<A
zq)+MnDmtGX-V>ArolRUS0XaZShN5;g<@4z7w!Nq}ft#ajLBfLU9Os^|yA+=Z$&C>!
z|L88v{(VTexelDg5d$3&DwV`IF?dewG^2Nt#Jpod6q*8|{@6oPthxje?+wkE0U!Cu
z<?ykOeH4}~Sqf8A4Kn^K73J_lIHy3{lqGx>(aqWu%-(gp!1(wWZJIS_4!rT^8}PS(
z`#E^-x#wYYWDEud2k5w+slN&-B(E6du?chM%!P-4{xE#zFFph3oO3oDcl`0>P^(SU
zpr^M&DFK)UV|f9rc}lI1JgSXiuXz&auK!Z=kI73Gf93fO&X&$3#b!RQwK;%P(h!k!
zKu<M&83;pKYgsUCVa7^dIeabmYy%o_jZjBfw~nvKEnIo?IhfFSy7#_&!(aZzU&5-D
ztKf5=`y4#_=%eHS;7$NMK1;O#BCu;P?w}0AA}ZGKAd-k&#-ji9U1ds4P%-01g^I*8
z0?k;P-0l>AMk1fufuquE;^_$X@qs{KGebIMUh#)KRb0|QtF26dsnBumTqNf$=R1aU
zES-n$DAxwrWH_Tjs8VgryZm6{1bNHID`DTXhbmF8S<v}rOSF`xySddqb*I5rr_&@U
z`BsqOhOq<C3SprPb=S?T^QT;$TOFIhhK<<|+LkW;4mbcfOd&)>rqcj2<Tv3rHt#6w
zaAOsV4XrB0UcQLKChC&KF|v|W(Lw8kdZx4*h?!6*BOIF;$}i!B0LFme@2ocLq$Afn
zH!}ZDdm`1jY#i9F`9wczeqiIrCV4wzYTBS2JzOA5Hf%q{=4$n^C9N~|TBLx9(VEB}
zPSmK<4=R!^G(hObUwqofVH#{=x3)W?36JzX`CRBlMR&0M+nj7BB38H8jGeqQmd6w`
z{#(hD3!Wo$wp`ZVPFG|INfy{7Kh7L3jw_cdl;4m2H!(g=isWI39R{EH#3$hV^Us4_
zc9{>uBO{dKU+w83gaAeN*>@tRjV2;*N~Mn8c&JZJQ9Wyftzufi&mMRX{{DY|0XA*f
z1l39v`uch^LnsR=<aa@^0>Hd^^T^nL>giuo?e<?i`75~mqaT63K7f&t?f7CqrP?DE
zBUvd&MW`HvjxAi_DtYUcH#g(njz?g!YQ5rEGbeT<D_2@v%_*iR$luZsbIE9pe!xAV
z_B<*|_UYc0&6<TytFLmCQ4G^U54;Atqu>N(l0iE7cjoBJhCo-<YA}2DY`EZp3t;i$
zMexNhei5#_?m9vPV09KeRv-hi2~QD8HEtA|F@X@;tMKC}{%!=>?6BMOQf!%{fWyam
zJA4$i4kE|GB12;&$C{ij5Xj@tn0~J0x!zOm5CF#B0<O>Lib9U@s8Tbyt`TZ4q@yJ1
zBYC+ZjFX=^Aeqk0=O0VBzsn8gFmwUEv(^RGHGF8lf<Wo<Wa)=)%4&@NC{dDppsg71
zog!XQ*A6(GN{-&kgJQbdRXKI$IJ0b79ZC&xuF2<J-UEMcJkd=sW1ruzYFia-*jXI_
zsSizH5ZwJ{B9dNR+a+ySQlUGNN+9RtG`F>6lc8QlH?I@EwVw<NDx_Xk`OpM=LOoEb
zt}Z{BT{_f<<^g9%sxe^R|M;qG*ySycZ(2~J%c!C}_2`45I!vUhYH^Kzaj07^iPg|$
zlWo`uro8F)-@#jw=QX5vR~h#~arFvkQSqdm@rZeToyEPAP_it}giwET2c>92DL^GM
z{HxU-GWu(^2^bg{fOnjJI(*_2ABPi9Jc-WPw0Sf2_&|R@lq(g%<s@3x*V1g*^h*)`
z0ZdFxz!Vxo^LL>!M2PA?e*GGloT|g_ME2+KofJ~Y?}6YufyNk?037J)r+4VuYp;dh
z{N_3M=*K?_`|rO$IS0@f6R9+)>|@0MClEl5nf1*WE{5pNnXH}Zkx$xb?^$NznvBh;
zMXx+f>zk=MqRsY@5}^AigxXZ)6=HTdYtW5f@Vz!?u^Wd={jU0Ilq!PyU>w4W(R`fO
z75hK(0$@47qmDWnKKt2)uw=;+xbn)Y;Dr}nAifrS-ca!QRH6WgjaD7w&iSdwhN@^K
zIj@}n8ILF{L(xmO<@$hLtN1R4+_j=Z_I2&_-M|yUw`GVfXL-$H%<y8T^Sjf!L|{`;
zj}F-JUSFygG7>Pg8er$C_nbR4L*r^L!vjj}218$>1$8583uV>oyAl6k2yZS{|CR#Z
z*Lq(4gm#N(i&^8|`_*8GvzVP05HB5|W9I&jt^(jp7-@MeYHZv&L##~+Gk&+lS+~9N
zFBU8*>ysTe$GM?Kf3u^L9*oc;n>h{4Qmzt~c&#7UEd_^FzZ2p92-SnNq(umjMHpD_
zfD=GDGuVq7_qZlV(n9F%vt0P$_Vj~MYC96nrKQq3Ir?|!gS1Q3O1VPHAa<Ez@?U!B
zQn=tf?}3Zndodh%zyUBkG77^Z!^8*B*CUima#@xt02&CzTyN+Mre~%MQ}szQ{(Gub
zm_26>y!`4baK{gR0M~x|TKMgT*J0JFRg`8><og%$`zk5|g9h5%dGlb)rp@rr|NPHX
zs_l$F`XhMz>eZA^gXo${wF;FgqOh8pC0$F%5{(%7Dg{gYp&YVZ)UaGhREE37$&GM!
zgssKb8$&iLw?&o)*Df)UMJvRwoiJYD&AN;gYqKxJhb47*R0=>dwM-ll|Mm8gV`+4>
z4!iHQ7yR+R{}WiWXfa%Q#T9VZy?4X-@Hox=_=C@;Xv0q_$Sjr-lyY7a>gzwJG0q@y
zbiP2GYR`Ob$qvjUp{E>mXqT)nc&^*;Zj{-9qUU|1lJeVIc{_!Q7}woW+1~?^;OM|)
z8npCaRZEhjpHD+@FI7TLk!ILQ37J*|zNXkCXgLDBX^kBnbOyz**pYGC(GGxIGfU)H
zCjdJw;!XNl9_nta<^jW8!A8QV6zU+`5b-?nN!N>#)};?+M+}&9`yPQ*2SdB!=rW1$
zyg-f~k7i|hKLU)*!F!5I7oBJMGcBe?;weXpbW9olW$5ecfvKrFG5OD$H49ES@p$;e
zCq4<MopK71^S!lk3q>Sn3=RkwKPnEg92Mo-QIy|aT{K!_s!k+<GbH5y@n1d$-~RTs
z@W{iD5Il9a-FBlW)$aw-P9cS)2)-BNV`DHha|jM!emMN>XFr4IpL-5AZrTWI*Pc%A
z#MW(Fq0uN&N(_qN22dJPY@$mJH|i*-R?4`=sfqx0Q@RWMw?#N7^Ju$?fiX{kW_|6U
z*-T<Us=LK?LUc&cQ>vRX=KK2xp;oWM8ynt)p`k%I|NQe|*<pvlm#(-1Zn)tFDi<g!
z1mI6YZ~~x>S~dCmxzg8^zS!b0x6~Etq?VR?X>PbF32o|mY0r7C;DOZXI{of+n&d7E
z=pnTM=Y92z$cRE8e{Sr%QpRPXGol^g_R_TIf$U;kvBMyJM0pomsvxial;Qj?O0^s1
z|4{7Q3IlDSza!sF6D_FH36vvi7I_P`k#S<`ghV}pZI!o^s}g-F=F)Hsd|@m~iInGa
zB?yx=JLQh_2aI2rZ_wU*jRv%H%J_ZI^|O+*BrT*Jc!_<I5`_w2mq=O6(Npaj_bvy3
z#Q>^@)jZo`L;M;ZilAxpURdf?fMuEIC~<G3mB+_kpP=)o3$|ygi*?pin=H_O`IptX
z_|@?pM}~5-43=SZbd1hfwCDi1<dRF^vdcb5b<0OaM_^=RGxYWLLABBgjpmfNEB0QA
zv{*J@$={7;lZ<~HlcAY2DGK$^|9lHv@s%&b@b*zM{1Fv^h=aoTFXRtNaQ?wm7&Npn
z7khMU3_kz)&%<wDdmYX__Z-+|{;n`GJWQ}`@t!KDH)hZY=s&6-JO#>3X$q;O4A;=)
z%k>qN4_bDd0PQbA94*-CDK<VoYD{@}%?~&O44k+W?<Y5spbuq=0<Di~-4O?p79&eF
z(t1XEjl802M=fg{f$p~7jx-w3TP{QItU(wZ9)<DYQ8@UJL*TFf`mbTdiWS5SfCPcH
z+PEMI?5zsbE<os<84=(GuT8GHwU7MAE}|lgoHcpd;_uL-oy9m0GnR|7!Nx6kxns<@
z=eg;P!C;7EsOmmw;ib@A03DRv?Kyf`D34wsM(rNU93YFlw>p@_^ibyz<0FtBJ9?Tp
z%A7geyz$IP*qAj{LO=5{+bQMz%#z@2u=&kOHqeOiV!6+<o!`&jLGw~r+;)21F*>^9
z4zrMGToT@2mfF*73i6em&H-SP?dTm&9&~^_O`UH}QHG1jS);#YUw17pmS%Zla)gM>
z5+#ughU1jvfttNlZg=y6_{+<j0cue-0e)5%CIIvCB+KJt-~;j+lJG??%=$jn#G%Gn
zX<GbpDP<kC!NWlos;+LZPa7RziB*e^t^pBT-0d@D?o|lJ6N;)hcBhql#I}2^q23~E
zS@;g~f56!$x2bcDpT<mgHg}*iHff|rDaX3ekygkAP4mfwKv~<hl_X;<h<B#~C5qrT
zDfbxjKu<pL1o+e+|1qpxyOtu38@FzzDF2M18ARTx%KK@DnB_&st!0a6VX9uIYxNHd
zkdc4W_ilvG{Ka3w!oBu}y%z2TBO@a^r?rqm{@_H;Pgo`p--87Uc7xA<{(r&KPyZVJ
z_}~3I*mI9PDJ`a6t3#!Vkap?Fl#X=q{@Uw}ct4G^+T=qsBhzupitIv_X3$F5HhvDD
z%Sf*Xtb5%Gm07m6^#R4K^<sUOyd^F<xvm`JI1AjqWakPsk7;z4TEW&Q-K4k(*&XOe
zRqLOnk2Ev&x`!A?oq{U*h#if(Km(xTX@f)qy#M|0hh@u`!{`6*@8G7JZia2!wm@&W
zmr@5rN<h7>^~@tC4mM*ey;1|SbYIIzQF<BIjYB#J->&`)k-o8OSfs@Pqu;AC6tZia
zAW~E~&sL~koL8g!$eFOdLAMup3`=RjIBw%8U7zdrfock-ZHG->vTJ(5Cd)}Df75x!
zrr<Yjc&VHzp~Digp|quysOzhP1^NbEs7g$NFSF9hjl_xsoCq<biwl!RM{@iMXvSD$
zC&mJ<4(Yc#&Efb6rRRo9e+I9yvp4`WqqzH4SPsB|al;HFk4S-^FBgo4DvQzq@#h(_
zrQtAxW}WO~$0jZ5iqw#cRYEc3J!Fu6uLMg#qHOP~Y>eVm2pnTA&uaJ_W0#D6RpN{-
z^5pHpeCRY%m(T$T=VUhi@;m0eYbc54->67Of;ZRge~V~QO$hw?PkPDSws>w3bH=E(
z*j2B1`$_j4i`ZKc`AFxv<ukLqKdmZNS<kZ_xWdrJ-xyKEAB--dg16Vgh47&dUIv$c
z=)<t*!i6w4I!fCIdXW<VOZiEbKk4XF9(8>kaxNgTrx+Fdsn;hZqkkX#=K0^il~-N?
zzkcc&Sa$dk)WGQIXp!$<NFn-NZBqKpAxoFSlTZB${@Y*uH~7E@J^)9pItn&#+6<F*
zEER~=F|bUhGK|!m?aXb`$<E8{2JI9p!dz+-xs=Uupjph@41Z<0nvYO3p*?@KF|JM1
zfcnSOAI9no@^E>GYv}2yfHpJSes_H2j3r&^6Yf|!{7(qd;Fa}QkJvF6EV)OY*ipiq
z=<Ti2kE#@K<Pk>@3gDPyR>K#*@CA74sVC`pbPQt~=mg;H=8;UtJ8a^5l$_w2SL5C7
z%+MOIhtLEG)H7kogl$7LrjK}}#=4@F>t(R-DN(ZczjN?8<<UQcN|S;DRSy+SIAY=<
z15NJdhI~l$G{n%pp3d!#Ss>_X9T9Q7um-h0!u)Qs9TSLkbx90(aPsO-i5KKxPPwS)
z)C^t;f}?W8Z}KJJar_c0a*Xqk>(K<)`1U(V*<bWoZ&t+K;jZ^|Y_5hoeXriJm|h-o
z2z5fr-GKiqNh@6yUlOKI8dR5DN~a=kEwsZuJl;O%bI8lsu2;x&W?FyvS9Kry#7SZY
z=YDrWk`@JyYKiUlw}l<^-XoAecIhetb~M^QHePNsEa;VuGVRg<uv17L1x&$v)uN3C
zd2eqY85>xR?}QUhfUkY+D)_TM`!iUu`yMbnJWMC__4h-ijL>62<fqaobbG38c^!;O
zs;EEaH)ACMyw=@6{t<lYlb?iVe*GJn$J|9UQz3=?jtjoqm~QjRtFOR6eCZ$HmRr6L
z^LCj>?_Yfq%fCq&c?rqccw{Cp2kL+FOFmQ%4`XI+pC3Iv6D#@bnWH#Wf?964e4?wf
zBsJlk8EMlRK)#kCT?3bBVFh=iOaWw@(ZEN@KXR}j3E;;*_7S+|nycaBOD?7~09+5q
zS%CZiuwx|@5zM-hgrfL-n;TSe19ZP@lI8tX&bX{--{9+z@qTjkqV20oZ7`3oCI8KY
z#gyA@Ra!)chDvI7!mw=ywrPbgd{9V_^N{c^qN9WM_6|h=B-ImlbBr~tC_rR3{mL+p
z_D5iQZq0fQ;d1uHj1hD+#IB)OjYFl$^7KcrPt$UY92iQ-)1=rKY<QU}fMLAH#tZGV
zktIBl^Q~<;=Zn0&&bb-K-FuN^L*sh-n8)3~O(mo#r0ejuL&<$fO#klrdSlWVk#bOk
zmgG4ZDr=$(5swxlDOp&V)$^z#{^IW@R4P@NnraaAe!;H0!Urz93_kLak5CCR%tsza
zmj0d|@ebj+bd8dEmi0KGv9AJ+$RHrzr3r~Bm^W`Ol@a{>-~TW8);GTid+xbV-+N*F
z7g9+2nubQ%#*G`{y6gT4whxcMMHgNOTeoZ`2OFYy(D)Z?ohb!qrc54{W+*o6LhkgZ
zczG}kMzcrCFm(#H-)fpvx*$qV<)DfUIt(Qx6!EtjaI(+DJnC`*h^=aaijX;qFdbw{
z3R)Lch&YKda4`bh)!ocNt0+`3g&Z_zc-VnznYbDd34rtT%9ShO3!ncytUl%#_`ARR
zJUsjCvs9^~+*^f4t!}MBoytWIMSyKjjl@TI-RI|+dr)Ifx3hI~(ToUcxH=&xFw^IT
zj2f;3sqKLr^B@FVexyFNazc%sNL2$&BZ-n{OtelB;2qLv9o`({)o=;7T_k|e&B8&L
zBz4Uy>FBh{+i=AS&^b;b9pH8j=5Teqt8P?jO0uWeMs;xFxmmA4;-poR1fEGRm0C&&
zvhT<1{A0{cgU$`1c&vMHkv%H3r%|V!v6VaK0N_Tw_gu++YM^6q7egANqM-`5VkODb
zVy|JiO89su7~7uYc)mG-MJ~8<#`_7T0YnT<-LK+6vCZWV&=42d3=!_giClYlWqaDO
zE*BP+Bd%f0N+D7=XG4Yr1S&AO;elEESf*Qex#NoMHA{a>M2DWZ(~<&P5DlSp-*1=X
zQunQVS#@rae1QXP+o>N;z9c&#_VV*o5$y@KF;C_=y<gprs98#HoGxRR{*JVh51G(t
zdrq2&U|BIV{82FKkFsXX8u-+|{S>S{Z7ng5kByH}bRJ9eVXm=8GD#=h6fKhcx(2=_
za+0TDbYc{Gdiu!tf8xm};5*;>4m|eAFJNGB2K4n|c`1xu7E(wdX`=KBjLvS^vITCw
z`DV(Sz3`%oV03hZoB-8opRNb5&M|MNwF<JWX5LFeu!UgbY_I%R<^`L7Qoa>~v9{n;
z?YJoCh}IR10k1?Tono6s=x0vV_Pf=rCw305VonjpJ#UO1uOYn2k<FyEwD|HO4NbD|
z<PP}@9k^7ca_%m0`Q@LWa)HPVaO-Wi(SAe;&~+QKQb4DLFWt&lZ|QeQ>%Sjpv;J0X
zG2S6JB{!6d?829QXu6{t@zhX9qIz0rAB)a=j)4x+X7DNimfoqZ;W+`E26&%Yn}t`)
z<$*GKqwS>R4j9qzhLllB<{+VZCPEGft!Kux(sW7G!?gJm*WpC^MZ*M2#SZAWM1s+t
zgT^tk$$6Tj^9Ry<-DCJZk9Wo)>E@hj*75RQ%>2BQl>rR+bG0$g4gApDR+3EFVyDlh
zs3s`Q0l+S%4M(-18=fn+xU_5hC$eF>4^apv%sBv}7k9jVp&WnxAh~D^a~*#wiz5qc
zA{odfAtOJJvqeuL$rovTk&q8*%+OcjRsv8C67M|rmk-Ia+YL=V_PrT5bihAsJ~_FC
z-plAdP+5FvU3k~p878kSmg|pD{MuxV;KTFh&xeaIz7XE`zW2lO<twPHAC=#$R-mt^
zm)ONsP9zt>6^Lz0*H}Z5{WV~+HbLltIdkVw?egz_@4ImG_ilzaHoQR`0DJAZ7qS1R
zB6A8Uq!2Ai2}Xl!`?hWHz3+VwX3d@hXP$WmMQSG}k+`!@8>hnQsq_synj)4ww_IHk
zAk&_W42!?Pnv3*dr5|LOxs274ZJuk#!corqlr_W?D^?cJ+r<9-eAJdFo0<IzMX1(K
zW8@0^gjvDPy|gPzAG5ZV%Y;0s*J?!Cie!POopu`Rv(G+o*wt6VRaadFn>KCIX#*|-
zpxt#bxJJYb5S9L-$pBfOy1YZ72(muW?qbXENa$^z&T9oOtXr2s28n#*_YpPhv!X;B
zT`2RNc0XwdT(@eM6C73jZ4)fIA57aZ^Z@@YE)yQ7c#5$-5AtI>f>6v9ht-Bv``3$J
zM7FJhIbgplN;r?5#fcCQ*O`!XjO7dpeDc}|m}Y7BvqKyJIv>G;HJJMkLDMa9B9?#1
zlG<18wjX$SJdZt_YwYNWFWd;`DF9u~732C?ZcDL6R%Z;;WO(m5BEk~Apz>q+ABugs
z>6D1HkJYyj@%%VA4eJKHB9iRjWJl7Dmv$Ti2;;~6``Y9rMGR5a9D6K$@IxPhv(G+@
zqC4BSZ6`wlp`DoDNeiE<045<@nvGR%6GMfFB%o9RbS&VxbLP&4H{W^_zIE-l;Fj;-
zLN~t4yj`F^RWFSHLJDb7lroA2*Vy<tTzl=cFn7)zSbgkj+KweO@jW;3<g5*=-+9-p
zcC$^hozH3#bzJOzvK=PD<Fj^bIIhqEv4cq66lKt(agXcq=;$^mm#c8_!3V>i{rR6!
ziP$Tzyb>OI=wVtr1_uYpkW@s19hHpz=td5$eNOa0sZE!kD@g8bpOEQ3qj};v{9B!<
zEW{lS>a)WopDIEpK;<BC4>5$M+x6^^K&*kik(hcY5AbwLH+W>DcIbDObVCPWvQsOB
zosg1WO5Vi5Y$t$agr_)1Vn_f@Pa8_>O>iKXhV7dyl}pWLqrGx~9Y+9gvDS)+2aAjH
z#_;^39T_?7s?Z!Ga{oin|4ujoc&i%T!gGOK{J$f4?jS@evm*#&8awd$Fzm%Hn!<n_
zL*h*%UEsms=^!!LSqOeyC7~4+TOj5T?q4AoKeFs2M01Zlc8B$6t%nbP_`~qFl`F|;
zczweL=<BIcbP*#dXw1{OY~n{GfH$Gb`^5ZyY<tFx8PMC)1HX9m7x050{s6AI=IgNQ
z`~?*CA08P_B>F6*kV4W$ty%b94-apLuYdjPFmIQ+uw=<08m^5fpQiTSu{ptFZBCD_
zriqO_{+-Y|62Gns2uojuOcc#-ugw@0i$ciC!)E&qm_F;$@apaDC&M1OC}z!?10VkI
zM_|d4rEtX;zXZ44al1wXxV$u7Ns)8KMGJOHcF=M)EqxZfxcHSV<rIT9!nDh?wr6{k
zv%Q5K(G~+_ps}~OwW=u7EFrEhE*b36R-{$Lgk|%2(LS}g^Y_~k2Y?R^v(ZGFd_lvN
z7#9G8V`y;=)eQHbYIB+#@HT|!8nrtKg-Qat1`hMiCFS%aK}>?@B=lkQ8lpk{SK0#|
zW4?6D0fxS}2lp4rke+yxO`}B)hdeB$)&#=t%b6wh_jg_b7m_8$h_&zVH>guRrwu#a
zKPKB`6U=d<fER-~sh75Ek(>Nuq(7ylbp+Z#0|EOSjdT1N80d#%SHB%DdEX^){(Ig7
zGiT0(H{N`U^7RJ?2cRO$-53uzvR*X2Nmru)<U1$wKASLW)+~Y{|KJBdfNy^D8?a%+
z8*uoc%P8uvjQ>IkDWo%k?;dh_Y<Ob>{Ez?fKj1(Ar~eF#4?bADYg4wP%?^6{@3W_W
zcoLg^c)n_@-$c0);#y09&d#}LTKH5LD54A?)62Yy;oPA2Q51BJv)uV&pl;%P@vpnq
z(IIq6lhp4+WJNlMxGT*rXkTZVM3oRkGypD9Xzb(X<BmHHmMmTj-}u%y;F@c`0Z%;f
z1S=Pq|DoV{-&u?aE5Dz2r0(0WVXAY8RsO$eBnUP3QU??6BS}=B;PKqZcgqGRNm2>u
z)bh~fKsv9(8<ADp5Oaqh$OgB+92=(Opgi^az@C48ijA~UhGC?SQ|B+ARNPndBtMwS
zMOTxA^9bs(>9qadXwi^wLz=-<7&A|C)JqooEX}Cbr@3jm)^j3`Z%8B$M<j3qyHf$y
zj#n~ihRP;H#K2&ZCOg-yz{KSVbKpS<^<aYMTMfldQT2K{(sQN}9vyTSfN5h2ckUrm
zBswrGbbdPzXB+*?8C<QlIyrB-#<E;|V+*DjOLMG(kq3Jy03Y(JWrR+Xs2S@(x!|Za
z9Fj<z?Nr>qQ7Kh!Yj=wsWhoyMA2XhVE80P&43#gGTD?Ynvd8Yb!zVuZNx0%GSHfi<
z`Vf`#+wl4Z=<Dr)p&2u5?h!3MZIOa+sqveV)jI|UXTYY78{wL3u7N-Q^q<4FZQIGg
zFg7tp&WFPIFQkypOS9P^)Xgoo+yYm9^{d1UFf?O`QgOs|mvs%&npv*vcaV3i17!z0
zdl$Bo*)}W{=#;6))_lo*<gQ!6zK9d?Qes8GjN{v+tAz=NTM<WF2#TH8FU}eq8l=Bp
z{q1jIXwEG7fBv8U09Rab1)O)@yJ6O>AzeWL*CXLHNLWwZ_(qEckH@snQr6Tsq;d&4
z;_5NE?njr)EwvvEXuHgul&tg|bW#6){QC7g?ZQ0&^jC`Qlh&I&F*??dbc7-Z<horz
zZ`3>jmeWY@WNx=+#N1*$4M}EIJ7Y!mmDln4N~>py{yTp+71_MCJ#=p1?}UM5Q<!5g
zsIpOxzR!Loy)~ts1py#9(ZW7s^>F(6&~|h*(5C6v1p8k*&tns)erED}kz%DP{I>H$
zm#CTuBLIv+{#`?jf5tlFazpq<XUwkNzL+r2RH$r7VyQp%{RtB#Jygh68F@RrKH}r3
zssX4zii~rnHf4L_mm0eaOrsf|7mM>CL?mLp+%}u8)lNz-P>9Lb`)tZM1fiUzh`y^>
zfX$AEEW<1+0<@fCm*$C&NM^D}akSc^w<$6vG`#WiniJQ+zx%g;4C~gNMaOL3xRLs3
z=Iog=s)K#2Nc_xXqw@Pzi9gGe+h`IjRFDc*;e{8ThtK`bzlK|Gxebna``bzRo0^)+
zt!x!iNFn(I2{qTg<8-*=jvvCJgARfZefY!B+tW+$A65Hs@-6x6s3TqSozE@-!m_qW
z`r4Z}vn-Gp;S<qExti10m(^(;TU<f!&AKCxlk=j9516uWya8K#5XQcjT1*Yd%vf5e
zc!@b%bi7NhO=b;jFE}E`Fg|uk%;nYIUYOO}3&Yz+VZ1sD#~ynuEM2k`uD$MC<P3Q7
z$)^Ob43PwuAygzl8&m8uZh6=&h|o~pvFuVNk*GgEPahH}@fXrxB9Y=OdD036K>d(H
zo|yJNB$ej&8%y3DJ0{ky`HrSnJsmI7Rel8pbG&7!hm2M{1iv?r>N`~%__5_c^qM>B
zluJ*43+HB&Dr~sp7_y&I$0bLJ?xcGV_nIKCtyPlWm^sf>^k3`G9Mx={YrjiDCk=Z(
z<Och??A+-4;>~k%#LDH#W~0#qElT??HLW<ikG5Q70uzXm%rK`Uj|eLrmnbQo*K*#R
zpwJUWOu&(ArHF9|*?kg?1anVbzyM7uYvlH4@Hhu5q)&{9@-A~&d1i??aZ>v`Q^V!t
zy)AkwIXZ(oYVvx#edC|D%Iyj6MgE*boM@i1E5%~A=f<rgt>$^<sfpZr?PPy}!5n^U
z3ze?jcH0d;@v%?9x4-#KSik;k>Wyt%w?Y5F0L&N~($A}^5McL~na}hnsPV2(QTu58
zBe~$M|8gt**FXEO@ak)C!15!HBu;^8L+lh%NFgvjHU@j|yARxb&pmMW-FNGGK$Fqx
z*V$z!7dzb7l^Z6uaHxI)E{O*oa;R8Yjep*%h+wB(gPq|`^=7V9sBrn0pDrQys_G{k
z?r)l5-URzZ9`NFuoqMrA@pBZ;Aa+g`3HMceJb6D?DJUTkrt~8|4-WQ2wOl1`fd0XL
z_{1mv4P1ToHSo@NzLSi9TrU(dO(7JmJnB}#8_ZbeLL;a3L!+m}5T)TDoZ}#Hsv24P
zrF;~46xG#ZL;9#%`*&EbKaW<oiR$&9W%prElHem8d9HP|IvwGp#=r{zIr<?-hwA-q
zS?^f?$nAU_W5H7wjq6Dp&p|7Ce93bJ1h#WjG)K?`x;{D{HVi--{wn3doXgXR)lwA&
zAu!a(4n+Wn2T}bcm1gA`)_KnX12qD5=0=TJv)z0N{~n?fh~CU1zcG()(wEFqr<XnB
z=?l238f?VwLnGY4jC+TY|MqLqn+ZPp0C^4t+npSHd6XATO(1;qbb5x2*tWd@rb%cV
z*fY?ovnDYzp8(xY^6Hzk4}QGb7r0i4H$$G(OhAz6YcWr+_lza@9kNKb7j#t`lEW%d
z!5SVOrr+z<odF;F*vH_clTLwwfdLpBAET&XZ=X=WVl1sekF9)X@YveK1og|T*|T7H
zbOiptzxivp=f`)$%%PbwC%Ljim6<{c`9l<Z=aBvX_19mApFZ#a9J%}mm^o`Uz4txU
z9?fy0DFD4W){U;QkX=B;yd!eL!~4=eX5ol)*13c0BH5g@c#Kl=*&4!?UZ)=vYRw>_
zBKm^2fpwe)SOgpbGH~RP2fK(39boE!Q&rSz%zcg?Eeh6GwG+TPthZMf`xxdQ8G)mY
zItsq{#V^8|HEZC?D+L+=E6h+?L8uD^0m#yUf#)E}xbss2?MS^_BV6fy7NdVmujF=$
z^{j-^0~QiA^4=KkFFV4?oiUvvl?%q@5~9x?BeP4<{lp<L;yE*Z94Vmw*6oXi{p*IV
z!`~X6>KQoCvbp3hMDAt@&Sq4d+tG=#AO|uNMz+8w(4>C?>x28*(a}QzLJN)N#G9=2
zVGF+-xCfS=-R`W|9s<BAYZ({wFy&>+wEk%K+jdzw&kdQ*Xne-VD!i?3ozV_R(r6{I
zR_aA3Fy5JJtA;#<-AG4Q`4}DWAo56YaH3D;xd;m<4~e!NJddFh0$1r|J<(1{c28~@
zdV7(%U*!8E%m01{><6Fy>}LsndHU&R5Ja;!KCatE16@S?%v|LD*n<7ngsFNR#zsfU
zm_XzI$tQma@4NWDaMO2hg2917-Oq*bUq~T4Mv#mXi8$}N>n^zdJ2z-YAM$jlXdFk_
z83orUTY8$61fboM>2?x25$=pCSTpazTyND&OTzi6A86adjwW|QRN_W>PoDKZd^{oq
zR0`VI*chSEKK}8K!qrz_4d<PA9@NHbv`*o(sn7u37Uk$qj1@-u+b}%D2gHjKyX^&^
z30pF~YtbQ6SPbPziKKx}vk1Rc8}ZpTQG_~h>Y|3#es7qXE!UaPhC<5PSZlg?UUA{}
zO}FwKDa;vp(1O5^aPUoTWS`ZEtO56!^zYK#K?r~lu*CSWxOZJeG4+uS(OoG2fwvyY
zy~w*z1U*F^VVTr90-26(M6Rj6Qphvw!nZhVhkJ;kQBCQN=P)jD=j>&3a$wZ;N-3xf
z?zXhYFg`%4-fDF64@Fl*d4?$aYbFCMbWE$`ABz$xPj6;Vor(OHLSw4lCw5KCf#^=`
z+!N`-0~rD&Gy(2tNg6{n{z`$uhh%tol$5S_pZ89<{PK^&n&XeBXyEAhC`?W^p|7U`
z)k>9-TBfIHXoJ4lAV`0?S%P`H>_Ypl`=|c{_uY3Ny!z^Eu*=-JgfPH7<bvq0kV1Bx
z;5&<R!p5;N_~kEu39r5O8Z20_fZpE<>K4d=-$+P{b0M!mQ4m-0mu<iaL_of!q?<H?
zG38X|{?mHR=6@Z*l^>AZ-0Ld7mWf43tV%YUxxd;;&H#mNRp+yIh2A62wR{02odaW?
z-4=vn+qP}nc4IcSZQE|xph=oEY;4=MZ9C_le)l(=_w2p)teI!xRx(bhu|7KfG*W`M
zCh^TR$m@&o1S^1_LIB(9$e|x+rMn6LML~M&`;kH`tGn<FeNHK3tFZF4+#D5{5&jI4
zQW#Mc=RvXUx2}=)BajN2C2ZNB#-6d|MkVD6xD=H5&TL{T(s;rgXXT&eiCZB6n}rbM
z(R`M9r^HIBWE7U;oV`y!FN`qm_4yC{s^o%*Q=Ej@i=;6pk7dB`b=%8Pp=*CK6MEO+
zFlV04yO6U{T}E9k$Jrl0V73J3TgV){KUjMgu1;b)VRdR{Szd35;D3;KGVMo!3Jrba
zKhm!zq*kb#gY3^uAiO>s5+SSYU-SXSEKGG}lO!A~e|Wh^$HqbZ(py5(&Ez0!6&S*O
z7CIA<d5k-B$AauI{;kN7v=PvFm5ot-1>YUIB%5{@18^Z5jnUhhBXHn{u#=)NqOBJk
zNvLTu;a`YzhDRDe<`+}Y)Yc4ZuBKu=gjvCj18~r4u}%}G|6=R?RK;R8M99>4Vb%AW
z9jv|ndhZ`NfUw)@!1a0aDQxbJjPvZhab)kj>j*r&*YsDZ)+iL>g>3{fr&xiFcJFWh
zyis8_My{L!Pq9WlCo4PzwE)l=D+SdOOFlB*aNs3gPjY(<^at)VE*plgJG5gmwO@#b
zB&pLWXmg6t4zohrRL)(wkfTFO=;`P<hF+Sf=4MkK<9N!T$rLrW2c8GAeFwkboZLv4
z6P-6fzQ!;u;gJaa2xud-=dm~lB}oE_QoyI?bOzex!vg`-fnejnq}e|S#i9L@OAMUE
zXmDqTgco$kw$ZAAw38QNllrA82TTO8@)nG_L+jc(DC*9q`lZ6ueJ)^|VNf0K@ZQ_@
zkS}o+8@HVngnmk(8YvP<v_+AJ_)H2%*Hn-!dG5B!p(m~=znKKFPOq5ePc7F=4FSvk
z;K$B?6n(5Mv!nrKy{E+XNf4G>peer98MXPE3^RWYGSm6XPwvdMje?b!Pnr*Vg1Hwv
z1OE$k^l75m(TR)Q2hE@^W5y~!**75?rM(;^0C~w2ABR5G5#x@AI`(?f9yy-%(?WZU
z`|sUm$`-=x_^s-^WO_C+?_ex$yWW$R+wU|rCJ3nm{j`<W5FS~YZ&{|%Dsmb>lmx!K
z{+Z{H$_fJbQ19$F+E5EsBYVF{X};0TRB?mAJTX%=W*$iJbMneQvpHS~oc%2LdH{X-
zdIsP+e0@C|cl$p_>abg?E);D0l7?f{n?i2uNE`sS7wk^s&yK<JOs#20kZy2lf38L#
zW`2W{aMsS$hpjg85ji%*ovBbv@NPJY6pzkv+E#zO!30<B{n4>!Hra&5h-y?QsaUje
zCxam%!22i5<>W5?YtB5c>CT@4c|q9qS)zxvQ=RiFKnq8GZ_CA&4Ow(jLyWJo4=+5h
zK4vS(9F9$jz=(I|KT1-Oj5y&0Uv{nJZb5@Pjv}PG+y336lwXx{{ODW>a)Dv3cER!^
zmfugFGU`p3T>1$8HbCmPB;|@ro>*?vA;=7ua4JfHjGExYirFz*Rye}+-_hjMa7sLC
zn}R!v)_3q@y?Y76erh+r>fGC&FO-T%V674T8f;JJ;F5ntyowTA>T*uj0fNWROhiw_
ztfmv;NaZ0!=W7_Lsl6EdohVtDlmo(I!Pcg_?uLU8OLr_97hwX;m?W8Ee9UrqrWO!j
z>(cj?KtQOm**lEg+5=WH!{Zb3ENgrlsTx`OyjR@-GZ&BCZLcrdVLu(vN=0Soch1;y
zY2*;Te%%6Y80Zg9(DuMmzDQMQSinF60RBkma8v$^Hpq6HZG`!LcUn#__5Ft(y-|x`
z3~PVRwzAz3018h!rv$P~3QL-j7z(ZMW}qzAm}4M{U~n_bi)n_v01c%REBgGii)=v2
z^Vs8z&4^Iq@qyAd-cp51nGC$BL(rYEFoGj~ggpyFB!dvd*B<j1m}Zr>=m*I2mTwJJ
ztz;zTv~)sx3{o;fEMdd|qin~68nXQfIoky6g>H4gRN*XM<8D%}PRgQ_GA<I(L?Z!(
zO=E4@EA!dZT8BU8d8}|71HrFv5bHltbk9rsGi=70bT8Sp3L^v}pf(Tm6Zf&5!-dau
zaYZU&7LC11G$tp3NW!uKKdnNY!DNkZOX|Gklh9+XB8X{fl!KYNNbc7vs0v-?w<0;{
zj#}L6<sxa0QTYP**?fmFqRd8icQ(%eOTq+|3hcym?%iN{utqa9>{F{!laoLf&Sm=|
zX+5@p^95{8T3JvI$p!lkS6R(N?gyr!IZqYRzJl9ZRlFr$*Q1_W+k{BvfU{JmHS4nE
zx-Vd`YwlJ&v;hJUMe4KSZ-I4=I2GiYYN_x@9qp)Fx>P7hb{5#p#{G2va+eR~#^XM5
zKauYR<Uf6_u5PyP1}Ku`Y1{}7=K=(uR=|CHeSw173n+u02hZYI{tp|GL96}%xu2Yp
zu2w$$N<mA;AE?isM;U48Bs9t8U1GIVvcF1c>f!}rvo-;FTCDR<$KFGeaqOPED~*?R
z`Xm_;c0J=YjzK!&p-#YOdLNJivny}(hURy!w@tPMhcSqVV&*nY){3-*U9U8{xIKv!
z?14V}QZ=E;FPiTHg?1g+RbU(>&uh$4zqFK;Zp%=|fA{PCh-V3&q|sJ^O2PTEP)sjb
zz;v0Yq^krk+WZCzylyw6<SY9yfNXfgH4q9!y7w<Bh<;*08c8pho=GFMJi$etEo-Kw
z60%H&0I~^#XUQz0DSAAqIR0sB5KD2AM`a-A&jf3_<PT-PB+G_dSntHcuK_g<T&gEK
z)8l8mJ8fJvs($IYt}-EX7ZH;e9pO3YN5RhUAl&SfgK6`EOy4SuSna@wb7Jn$lUR*<
z5+wn)_!NlD#wXH5wN|+ph9lV`bmQ0h{+&5_=5S9SXSI&rajPX8XfJ?jfZR5nOTq;q
zU^IL2IB-pP|AnW*1dBt3hk^{)GkK}({-F1|4bL=Q-5odf^71W_6Zv;qHo%hka5-#1
zbbDQ3v#_d$=I0w`RV9j5sHWV<WhFu;J6Og^1zwIcFu5DbYF>eLZK*$~G=#pJcoSvq
zvHH0t<sH#|C7{x~e5zF08m8bQf_0}Lh<LG5=7VK2yv8B@l$nuH<?ZtO{(y`{s6->H
zc$;8@do+O`vUb8__i_of;yN9!(R%dHI<oD5<+xKO{Ek}+T8IvkYy}6obB2>U9pNZ1
z2OUL3{Tf|$;&P%5onE=dO{@b#jx&p~Us-q;1~LlbGg?$onz>~$yIUK`=tGQHc41nD
zhzz-_VmA^hVZ_h(7gHW_1+@3awSx*r_{>x*=X;lKx~Ace9`C%`GLC3dId)QMt@%fo
z`<=4PqF$Ny#{r6B0D^n(EcTaRZD9f3p9*Hv_0YFYGa4jOwaqT1?Rs#LO`*WThs>KJ
z>}J<R2}gXUt2)^d3^`IQ<OHAIbhDTXYSsj0X$R)^t_a_oZbIZ_?Us1aYY+FN*Sucv
zA{4&(1-5rng>1jzCDVM<ja;M=j$jBv7CyorTh{iIRD4*8MA&0j86@tlMd_<zXBn2)
z??15>TD2p83x~N9@0VxIH1xC*Z4A<(8jfmvH^}@ws@}Mg8h>g3MFuE`P$l~M@OHYD
z#O^)JG(w6b^5IFovR|nU-uV*$41H?Ed-_!4WhPVjTOe)!!Ht)u8x;7A{M5fPz@vYA
z$lNFBxecAJ28l)JMFQm5V@Cx3Gnc@0?WfD(Qc<7Z+>O`todZkE`oeur%X7Ir#v@uL
z4lN~nX<-RrzfZ9w9NW<=_#7A=Rz^%tT~t|l&u@k0_X1G*w7fcF|FC{fG-Q~-TCBN%
zTNu<;Ry`is@*taRDihTg&1otk{drH4{pXRAEJX)&X7uQX<yJG8Y5XmQgqG3GGG{PK
z@Ah|0$uwO@N8txe{95~UF1Dv>!Dl<|rVEyqyBK<4=?Q?(8OoRwe}h}62ECUuvpnID
zCLAxufe_1>{`erPV=YAPFl{(#YqBq2H{SSKz5ILnn&qkXNB-Qtki9HcKZ|C*ZW%U>
zw8)R!>Gy3>*E5pD!TFs|n=_CAn+@Lm6V8m{sDfz;EhOVh3)rTkY{!nj*1wKV1>e4n
zTful?M;kGF3Ar+HQFd&hbAMaTX?SsE3=MMe)xBZVHSgtP*t=XXwJ58d^|YGxp7VhV
z%B_|>6Tb^JoxH_*_ukQ-R@p1dhF&}b8MzCIq|l71Hl0b&y~z03)nJap-2L``Xw>8=
zx#Wk)3sxn`>vEg+Y;+KVTP9Iqvh}O_5S3Ob0;5>X_l~_;-ZGYpEvK3C6&+XJ6YLm1
zh<}#n^Qiahkj&(YQz!>o{%xeL{+fn>H0nydXsoM*XRyADy_#GkK2NQe#j;tKvHy0M
z7#Z-j4S>z{IjbmvvES~>BLK&#(1LTD6Ex9VGMi4ro!F0*N|ouajh80&h4^|81YEOp
z*oV!5#900NUL4@Mrc+ZnS6ZymJ6@0QYoE8^f9lh!#w2Qzm#C3}!R`qN#lsE%oD-&y
z4%9htvuuOr&5;B>Vm!rm?&nZH$njS$ZmN?E2PNx+aM<PSvuM%$Gnl3=MBR`xN1R<}
z^XU<SmwZSUNFYp0kb6u(B@ka{Hxh5np7(p_qUbkb!uryro=NxTQ!wD|RJkAbe5p6^
zl^Fm@<b8m;2i5Zk(+Z0BNITAgoY2f~C)zm?%~Btf@7%#-@3gO`Ia8+sb7lU+1YD&5
zFZxg|A+%QYe({W<XKFEN#MC{5okv_ajB&|2pKjHL;nuFlyx~j);V?Dxu=7mZ?Pw{=
zMC-H?Q+~Jz_o-Uu9`m^tm2*R-7`80`ws=1mcv~yK5CaSL?(1E%nRr}8!fsQwd%+Yd
z9Zgjp3ge3LpYT@sdTj(>ls~-Uq6>>i=jBllGaxR|{M`*~_Nrf4Snnfu*5(LdZ3Ex$
z5+`eus}a(@Zj}$IJ*gzgRqsk1&3LF1b9w}^y1jXW#BO(Xtz-4ZiZ3MJ**m~|E;hn5
zFPnv$Z}{B#3gjD?x7X$6lnm-guA8TYZZZRJGo2=Zoh3S!d6H2e3Xna|=`Ih8zBznp
zD_ud#F~@%))YTPn@CnJyZJdS>vTPQ1D~&qQzP|2_f`GLY)+>ioVhQRpq~T`Rex9tl
ze89AmwjYpEb1^@iw99;iP#W5D?@{I+i_mhEkXumWPYsjn0@6T`3nJm=4gYAG>&5W7
zF`}4F8n@v_bQ<<`+}xYDYB9=ToAKZ+uLpzb*coze;g(CVX$#!vcHPDYhIPN@bO!^S
zx02<}Lkk$`O_I_gb8BYFR8+VmpjIuy)ngq|WmLcLcz^!9RMYk1mMwJU&0zS(Vn&81
zIJsWA#k-|J5<br}><7NY+0Njr1|_2FZ5w4utGs<wS97=aU92(nSj=}0q2$ITIp6qf
zndEy9VoM!|eGTpD-Dr~98B{BK+&Xc;8wm)Q5d5bjPtj;c<cH_XyGfICmbj-Zxt)4V
zD!R;gYKq@UociE{6^*B`*@cc7MRjI`FQvDcFgTrf9yUKUl&s@w;n|FrRe!QF(HYvs
zHp%Z20?#C~H^bb)EYS-wN}N!rz%j}y51>~q#L8w<gz2R8W1Ae}eC*!N^`tW7ec#ed
zX6R!Ce#@Uo|7$j}@AtP#lc6|Jy4`RkP=AIao4a$_mTq6<rw~ReHM5(7+#ex8+ki-;
zT5tj2;~&YY8?yWJ(iV7<dXT-r`ws&bp9h}OHwMz;aHI=0pHJ?|SSobjL(1VRNI@?h
zk@q0mkx`T*9MVy*kvSnVKS%!B%y*>}ioh1*ro#w|)M-VMDVC<Cu{S1u<_z%EEC{{U
zfP~zqfwl(-JR7w?TNGpRp+1aSPyBUZJWjkh9LU;Ri+ry@Ft&$7;@J^-0gjF^(1dO%
z`tFP0obD&LBa?Sg#j1AsWGv|%K%N9#qUuWDCBw>K!XAAjCP%5v7nrdq(8LGgwNl}6
zIou3pg;HFWL%n~cXv9v71fkPq%uh-ZYq80IgmbVZcCexi_Ch_H*k@9&_iAMX{tmDn
zNZcQ3cp+TaJ?dIZmy!{VOZRbDWKMgg7&cMc>&+kODv1H1Lz()+etVaF{8OEaAz~AA
zEi^T>NxW?(1-u7``E2SycxrqnW0Uo`GCH!rLD<7PZt&D1=OTs&*@*p!_j}%vQl*B+
zpfl7>-43!Ti)A!!l(jk5qC_3Lq<m;<R0B&G)koo4nu(O$U7xMw@M3XC?x<5vM^&5$
zPy<asP1B}cUq;Q*_QmaZ$z>IeH9MT$8UE%w_%~DzSxQhPgTVldxD5y|d-lGL=zQMH
zEb@YR9p>_>?6ea(a2%2^bYU1Iwp*cqCt(XxR#cpsGVol5Y;q)y2<$krX?cC$j+82f
zWw)3p{2Q|U$_un4z>)U8!XGESY2<xzu>|4+G0`46^LcX@=os9bfRk4$yV`T!-=_OT
zM<Rn91^XH`YZ?gFqg4?y3fctLLfM~u9M(WI)Z@q!0Va2B7q=nbRHyW!w$>v;FS)r|
zXM<Zc?+`hq$H;!4)NdyV7zq)bnr@g+Vm!Q%M%!hz)%9X6U>)kmKIhE<y7G)p3o@jv
zZ5<vGwn2<iyA6Tq0+B@Jv>*m)GiT}U*<gYGODokYmzlNZKn42AgbF7qC)O%0hfB0a
zZMGK59-J>2Xu}>w3IW~|?2(8`$#}Pz_vhHl@!^*n{)Isu0odJ|X10`&QWfr=FUqu9
z!^VVIENb+OrA%nP)aLkHo&25mH_&C7MRqOXrV-Fd(V2yP>+0V1g%6yJ=6SxsE~xh^
zb!~7;QN6})-5M|ySdCxaiFX?o!=?b%;shMyc+c+CImF_kL!TDbJgU-SSKnF!>Vc^}
z5*a%5lvVK6-<5Nx?<%lT&MOaTi*ZaU1{iVr<sAUsKS=Sqh(Hquq-B*LAyelC8;|>C
z1w`+5hdcYJQs-yr%(@=s97T1U3BUFwGat(DHmIYwWgC`7tDXy9*ORtHfe)CCC+6nf
zOW_wSul+yVCa<XDw4H@4U%(9PvwRrXc>gBV9+&;$ueK0RBps4ds7m~wh{U^iWEPp2
z=5exZd6{~iR=0)a7y7Q9igB9B=lB7_6!iqSxWPc!1hUZMFaRrqxRs!~>kat%9OaCP
z2GL*(X!2j^Y@ZveNQVidPx=*;#jAEQ_t%Dx1glSvzUEV=Lr*hg0O+>wN8G(oQ5r*^
zwjdv(VME7`+AM~*e@sn%`&sPKl6J?BW53RwHit@PG~y4;3-Srn9D0DHWvwrv1VQwO
zld8dahZ3<Dg>bikqnvakk*+R<IrN3k>xpfpuk8E=Hg!|!JEGp-**K!7JVfVVu~)`y
z=s8ht{o-_^MIw}fXc4!}QNb<9g@_xyw0xGab_-jt=`a%8V*m0SAjf~ZXx!`zS+MWj
z@E>y}Ag0bDPx)Xp>LOrjJ0bfovJ2FZsm!6D_v^|xfLDuaTi6_6yqu+iwK}5$10C;E
z{gJOX=p7om;_^D+x&3An@NTg3*BqT;#orV7xaqX=6@Af?A?-FIqYL7o@%-_1q${6_
z3K;!UzEpA=;4p|v-G#4VnyN+gP7sPUg5~Yd2vO}EPUC!=edoFI!&LgmNH(LGCFx@L
zA6F(i#S{Od2s;T{K+jnTWVhmR$%ZCJ;o}TDcWNygV#dqaspw+|gk#4o6avy@kh&5t
zB$D8T3UEAjdRc0&2?ydYauaGa=>HlPb*VZk%&nD)5`b<BKz)p8#^!RS_7pNP6%Z;o
z%y6u}G0n;*)xE2a3-Q|@*0XaM4<;<#VJH?8|7LUiFniL~iQ2m0-YG?pDG7Q)tl)sU
zEUcTC9$cQ5TC$up*!VSusD2i5m9P2(mk<mp@BH^|OEpVcYO0d?x1T2H`HFy%4dJ^F
zmuy5ClDFwZ$e?bpAOIgD42Zw7(w0n$7~y@ESMRBkbQ~r6`E^=3HWy+7j9vZlbW8vS
zIDGSud~~X>6&_u9FMgWvG*;AD=cxyz!4~|S1}CY$8y9lXQ#J2H2lx#qWwc)l1IVz6
z@k-r0*BT&rX_%@%hk8v54i(CRogFe&B5TI!?h=Ot>A2gkyZCb(0to$1?#6fR9r<HO
z;vBnPsR)a4z82jlA1^U=(!bS9>1;M=6hcKtL~)$99tVJXZu=wqy)g?Rwoh$iA_+dI
ztkj#!Q;}u-cZVw9bV?P&L<_0@n5?*g$TzW`WMZ_eZ=%_-n{e3-`dKYp_c-Lb)c|3>
zEd|3}u_R0wS{o18xg3cJeCbULX;X?3c>5{l`K!g0p~huxmkH7Py~Q<#)wmR{sjJvo
zc!nK(XlMx7$AfS*xef^&)1QTVSu3^rwYnb6Uw|;c9zDlS$oPr~ZT=h(^i*xJ%tL_f
zL$fK0n7}nZ>mbX(=YUr{SY$)U?%A`_@7T<SqKNq%wNJc-MKPGw8F|c;<#O!{0D?)+
zZ{kyNwi7{qaGPdx6AzF8q|!z%@LMkNqR~9ARftJudPtGx^lw_n*U`S7PyW%TEuZ1^
z-QYpek*g)u_c|#8(Xz9C%j;-Cb!objo>u5*sj;So;t5ckJygJr(W3ZI6E0OABHgc@
z$WEoxd}9X&p9p&4{K;E5>lr1Aw&do&1$ul*c+SH`q-ysmGR9>2R^}`g0a#+Gesb25
z^1?A1LpOr$M**Sk(v9Fe0$4u>y9hNDTlK@Y3`K3iE(>Q9RRO>idC04g%k3agKDsV7
z<#yas=vMWXeY$8*08!1TL<o^kiKjM%|NRZ;?7X<6k@)jP`sT652oYEY9&D;f2p(?%
z-sG^!Cx|Hmw1g#DW9N>arMj1=+tfPkij`}O9iT`cD$-cleR1G9=e(umHmgOwh#hBj
z^GRZjKpykD1;|*I!TZ-DxHW0sn3h-(gSdie)7p~aM<k~}Y6|~ai+Q`F`b(0S!~(i4
z67R3q4rqkxUHZt1$#9&!CkHU1kFmCaP={-utAc-i{`Ih5Z^JCq4?$1hC(>l#N2_lC
z0{qu82=s@^i#0s{%Z$v0J~~`<+(s2|OCtCjI}ui6C^M^gUvhnG#4!lq@$VK9ZudWi
zBKZy)ec|KXMB~A4dU9&zofn(oIPt)Xym8~qKzW+>6NIQN7_L*;e&szrA@!YAC^F-h
z<j}<4MvkJz7RLGo_(65jpTqOr4ArS)-uQ^RO0bo5%YzLpw}*1ixw}1BeipUC;&)n*
zs>(gPLfmYM*4gX6Pfkv%@%?eyh*S1MUODzP^DdM_#Kw806R%Mr++6yFa$pH_nTjTP
zPG)4Z;@8kG?xAwQ*D&h8Gi0bO!5J!q6{eX~Yg6>^sbX2F)XwE%{rE0&lGG+^xG(FM
z+{4M}Xq`AM4ikUR-Bq1XF~g+3+f*zLonHH6F;RE`<e57qdOnAT3b~lZh@7GI>~@j$
zW%T8>Hn0%J7F{skpx%tvZ@5~n+HC*jAIKQ^oKQ=_7N~69Y)~J8`sTKBFE6U9Fg}-E
zP`smknE%r%v|K40M;V@q7)@zuRoy*WoE(M_Vsu4?yn-nq3Sf$3X}KJOpma#Qk%sPE
zrJzP|gh7lldqNz=)!e!~Dj+v71GWs=&5@>^0?&z0Wg8e##G+Q1bMA80E0A4`9B?&=
zKtn)!Qg;LVQOq%}4FnPT*d5;m28BWZpW)0s?#l+y_}unkXlTbzPbhT8zga1VK%vvv
zz;lyFzVqIgz?>%XjEt!)+PBJ8Zv326V|Po=ahbPIRxmbvq&|0!7T~i6exCIgD69m?
ze^)<q*i5qFZKXkpZ4NhN;gK5Y`Pom}N}^^P2{BILBMNJ|+SxV!A}{_R-x7N7NV;>7
zTrIXgeq?qZ08M%Uk;kqc=d*FawL9E0RXb1u$#}mCP_?6mSLZDdVfnG~dsgY#WuG;m
zcfcbhK^b4BZtBf_>s!Ha(Uaev>L-;Fr*bE^p^M2fawh`xjeu-rM|k=)hLe62K1?7$
z8_+;dD3wp}^8{z5_28<S19kHEGPkKx0D>s$Z1xFGs|XeDXNN(JU8)P5<P3P7#~P;O
zRhfk3XL2tf*L5mb_%$^US(?zFLqSnV6@rKt1ma$Z$R5Vq3iTHU;tlTCq1&MtXB}b(
zks-V-CEy~tpkJ%|4s+$@ND8>-_)Jxm1uh0huG0%=LzRO3pI5P;)@(@?mdYR~+U$-b
zEgLatTM*2nmB59%b<?HI4Q;(>SDo=3TlPRe$5*#=lN7V>tF&9#Rv0auS1rvH%GsKv
z08Z-AZXh!3`S8l2FLvR)jD)@Ah`$97!snVN9Vxe<&DVqOhl&SxWsfXnTxm*5iK6ar
zap`3(5o^FSmWCp|h>~eMhm4UGmTYSMeF?D$|H6D7IetL{*`&6+#9a@_PQ#a;Jp(Tg
zo#2Zx47e+HQCWWE)!dOGSPuj|-@q<pewk+JHo-@xme91$@uJ5+c%FB{ArQuM&I^k@
z<F@Ca$n(dn4IN`7PHu{xw3#=jUs)wBd*EjXja<;|r=rr}d$R(%#A)G`TKhZZJi?nC
zl*$w_6|n=`h6JwVnYqdcXdZG|+G(P`YoY(b*>0H+;-6d@6vKqJ^7%X5ln!FsXbvW_
z#H&+06RoP+Ffrm#+pR*yqfU?J%fp|<Rk-GOikpGzdCMu8SZ*nEVcE^@5&q~DL7+4h
zTS)%pWAeQ2N{IN|IdO(nR!k}AuWa$6Y$?3;4_S$Vjtz|wo@V?Q-vd(>=4ZhZ4aDWF
zFf6N$2=A|Nqbo-EHKK%PwRWp)FAG4P-L-xo(!{1aQu^b5E(lcXGzthoJuR1&a56Ju
z`QrHjOV8T~x~b{SGvGY-Kj8MpYJ1OtSv(4qLw3o(d;MA6NhtTXvZ$jGF|HK6$2umJ
zjl0_2nAO5Qhn(s+EZlk9DwIa$;NwX+2lggUsg0ZO=YL|~-PU1hpfi5s2CYOYIf3_H
zxeO}ehGMFWfvZzI1W)XTd@n+r`lg@9Q=yi?&?$2+#lXF7mnsYDQUfopCDO~W-;GX|
z<a&FdGpJRp#tZWHmPFGGTTEX3@HzpcQ?8;)_jpzVko;a_nEU@ZnR_eQO`$mO5wpq_
zy@DHzy^a5<L%r$n+JXsy{mt9`<UBQ1L*l5}&WWmSL>gz7Jw|0rV|_clk&tlWq87ob
zb8DfX)`F-&=QwEnV`eZB*E|SYI>ZYht|jvkWl9xIFSjlNigw(xYW^Ucyk>nRUd+Dc
zkCmq03?%$7CwA7Wr*q;7ZEsS}*{dI^n$O&O%%R|1-A**kWsnAP$=z66^;j0>Py`8d
z>+^z!k<XB_$g{k>dc?ySk3(f9-Dd0PvL3AuRKq;ExL7wWVfm`2%YA>0UKb6HCK)~L
zqXzTrxH!)8{t#p?MLojZYc62Ad{U>MGkLI>qc3>nU386kKx;F6feDNlX2TZ=8JHn;
z@cnsC1HNhS83$@a)lVGn^G(TdH^04q5Zee0+rST%L8l($7NpkwoaJ(UNH}!EyAKN?
z90VmS(B0cXhlP?GPlFYNoJ_dun5gA)NpEMAx?oNg)ay@P<pD5qi7}_BO27!5{~#0e
z>+~fG&(!-~G9%OlK6>1cb6tNV?5(;ql6ZcFjcn&-Ri?S4)v8F0%q(MWKpMDywbp7i
zG|fAvAKCS(+y%~N>az}ZyIs?z1>2}CN>Z2hI-{MK=GkxTvU3h1pe{n|ggHY>KE*D5
zmv$FIgy@DUt-1lx3n~ji`C(2H08bz+vA)Zjb$1u78~~Oe45VY+Wp*Jf1LlQ$Z=Np0
zn$FKJL!*zv4AD(#bTj2+@WV+3)sEZmnRX)rGf2Ksz>D#_);~FKk?zVQUnIr@Y@ENF
zQ>$GQl~Kf-%`#z@(>d@=ce}=O<d;z#XNMm+uf?P*YOI?k2XrzH-e5;cY;j{x&R?A$
zoefMz^@lxH+xuoa*X7X!+t_z}2JP0=oC+}4z29GDmb%QmNBF1qb6m+_f-tf2pk#6s
z4{{6%5aPO6p_xnLfO*I1;bzYiye>PEmfQAfy_BGjEn6<v3I-*Vjo&(D(|{OFUY=W`
z5$>h4pCi$L&dJJ(wRufttgMd>l~C@DJ479hGKxC}3V%xV6XSkGLP48ct~ENH0t?Ne
zsS6PPEiEtCr3*EQ%SH`w0e-BqY%_~t(?-QW=QvI1*Ow>`&PgygcNgq(z&W4SPB66b
zc#~op6ieWjUshHYjmszS9gQsGlrS&?pl9w@I0Pv1-kQbuahb;?v;2CPo$ABWHhWw!
zivv8FwJot<LBRaMN7GG|GGiH|`C0d6-Iqo^AW}YVH&QsuDW=MS9kH_!+1x7)cA=fE
zgajkJMjq$(^F^x?lZJboh4Wiv-7Me3!&9FsePT#>fdP#4AAQ(=@YtPWWMKtMBm@LC
zI?GNW$%Iso8Ru4&mfm3z2-MsGK+|lq0pxlKiA-wJOlyc}bp!pM%KMY3DQz=Jr(w6o
ziS^VtK$g%-=`#J>1y{qG9+f+Zz#tUQrP`Y7HM6~d;N2ru$vzSYyD~m<G}o3m=l&mo
zSdii>+n%QH2<EI5-%gvYIr&s+dkHFE&X4&tHUx;zNt0ebVz7gnck5$*2$>NvTzWZ?
zf&GM5um(BX`esHc7Vv}5;fED!Tjsi?>Ve(Xfk3N#Tlf5oa4>d8D#P6NMr;*{o_Ca)
zm^G;EBKHH=E&oTJ`2z8FBAXJP)x`6dKp@2{eg7zRKFs-YO{DwzQhzWsAxvs&YFcPw
zNCFr$dpZoK{R&}sJ~&75{_wEvfkc*|FPFV!1ONzQBED+5M556eX9?W$E9ZuI{<rbG
zi=-qIqoS%e@H7B<zw`uASg=WZPlN$MBLr2>7teX5(m+v6THTA2e%0f~TqIkPgZ~hq
z)m$(*D^UUwiQb=XPC_4$Q+%xcgk-KlzmF;xg^C)%e5!3_<-T5ZT<!`Pi%zVGZW^SX
zzs$p=vU8&P1Gv2ZqK@4yPAZ41fBqKGx>A-)uP#BPQq<^d^IMb_w8ilmvb{f2*oBt>
z*f#lZw;ht>@Wy1fas%~<{cGs<`jpJ){@1!LA9*4PJ%=e#x<MKEj}gB${GOltX9pag
ziYM%+$${K=gq0|VF_Calx#)f#n~J>P!PaJ>Q6#gDP6-@WSu57upwY+#@_>__bqo>*
zgv=+0ABlI{PP`hN8Ke(E-w%&V+vi)kFhou5v?m)<olo!$+(6RCAo%21_ecbfBQJ|0
z!w*e%$o`O*EEM3n&;=L`z)O|W!F-va<Rv}2+ENihqVA%jKELB<=)CLOim9xL?8r)l
z;N5RPIxO+=Aj1B1-oD|d?LbB+((7cg@cP5pH-WInhfvQmKEMhzE<PBDd|C@uFPpge
zr9BZhxzXZ&Ve31A5(EsO{<Ysfnw%+LjH<(#u54z_FG@3x7n=CN8Jm`gZ4`hDv{7NT
z0O7Q|@ylBw-uK6|?kI#Rz*WSD3Ea=*p&{ehVCcTq<9u;-JU-gW^q2*59zWs!4O?9#
zhs{^W>-6Hu1xHYPZYm0F*R;k+$%{Yxorjd!z9JXNv+Vw`TGOtNQA&}Y{OLBVf@0bT
zk*1@5X|lQTROxL4r39!Tj}?4C96RhAG_>*L56;?$nNp{R*~%T_?%PBsfd6wp(Dm8L
zJdzj62gP?`us=!pXMcVF*(Od`z8f~5ZSp!L$G$iu!262)m{G4{GDe?0QE}gE!RyRn
zL<J$b670@d^%wUPj1C1J4t?`*BPJtx7AZ>RYkpSP@K5XDU%>S3H?Q#r+a9j(Q&y5)
z)gC#NQPVZDTn+x%XI<&0bVd7tcqDnyB<<iNyP&s*9>-FbH16!T@U}y$mlzHn`8sSA
z$!ph}ir`k-obH`EYJw7_QCh4bapfJp`V7UwA`hq?9uf@Ko%&f1cvIKBPJw?DpF`)V
z4I17}<Emj(ysBK*opH#Qbr=qmX$2e<eM9Q8rVubeikgpVXDr;oD4e;z%L<2Fi|gQj
z{U@>boQ?iFjC*Oza>dqFDtg?43@IRTIpOgTC+4+U4G?S4A}v0avDuOW(|kHfS3Z3!
zSzMp&)YORlUrbtVf93pZg9|DJVlQ&NT{(#V|6is*A=r3Y(sMdVp>*1~9Uk9s3UYyb
zgbb}!!!)=X!qV@XYiaM{qSIZb=S%nLp+GUtWMz;?hQ+MfTY`DUwPc@0ByZYdpJVY*
zBT_gFn(4f=2XiX(*mDf4E9)Kl=0uwITtJMyb-5VP5JMjsEfu5t7C}I*s`w*;+RdN>
zf!zY359laNzMjfvhZedC9^W}JO$e?Dc%=X5CXT>1^a7QVk}9m}PRuoPkAPBHo?;|*
zGmS+eST;nC&djVXn!$w{nKV+KH1(u7B8l$r%M+d_*#adu`XIfaP)<x-fpjT5j#9DD
zwv~NKNZW;bOywLt9Nn>!bR3@x0O2XUQVo3mRnM*??ApXxN$iw6D8-J|l()auQ%7e~
zXFe<rswWYcwBk|u=4b&O^ju4q7y<7bEi$&UsjKe!fF~;wI$^}Minxd=9TJFo%byP3
z!xUV8*$=`oP6&_ObXWq?f)aS!{N5WC`*7p3_6Wk4j<+D}($3BM)|iIIH{k6Xij<ZH
z*&eS^ztcd97#JLmicXucT=&F}gsqr@%P_lV#0|AQea3rq5Y!RR!Q9nu#2ELtCqt3~
zG4Kug{U7q^=60Mp(lg(a2mxUtC_0)oWV5&!r1&8U1w}Ow>ednB^y?x#)L&ws_&rc2
z1-tWQFV<<CvAG9Wc%k%uLv-`QOZlIHlho>F8V4r~9Em4rE-WH4@~7@)GK4N#TQy>!
z(I2_cWO_>rwFQ;_4D`~*k{~m#H@Dfr1CI0VQ}AjqZgLtfM?}<k9ZNmcx+n<5K7`{_
za<!m{ii?BUTXpxH%i?y&tM}y{83olY#e|rTt1+BiB-}%gLdHp`1$@PST(YfvIJ@m8
z#3nn&-o4O_KEOu-0A5M(kkDySt0t^H;KLNC48j{AjzeWsezRBEQKq3JdB|^3@g%Hh
zdJs1n7O|FwUS15<JwQ~ci25V(!`rA_Bc9@Kb!BK|LTobsI8<N7B5baD)9z>z*pH6n
zZorj33OV=mu;5xk*l#2=CRE(j3&=e=yRvf(nQTihNJvy<bBa??{>fDo2ldquSXvOB
zk*@ZB(4HNbtNukLB-x{JOF@?Y(3Qt56C$>D5tyaVY9>G7Y!Oz1WDn%s<z1w_g(vd-
ziVZY8YN2du4}(mLyttyy`>tk5m>d|F-maAD<?sBW&=P%hYcJ3!LxO201>jG?u|Sug
z(CesjpP}ysB00G!aHiJ$z9+3FBsMEE03RQ9crzMMW3^*y+F*gGiZASaQg*Xk@W~+X
z`7m$xLO<6Fd|#EIBn^!pP3G(Z!&afL+mB3tax=%Nx)*5zem0V=%VGV|FM9S2WVCsO
z^BC!_{O%UY!AOb|e1p6@7862XQ^6CMseV6jFWS9MIA3!AjkGW9JvvScLBST<k!2E#
z2Gh76>E<mb=Vwhb+`pVVLEwf>%M(B!*{J)?#_M2K+A2@llE3H^#okhM9Np`8m94J(
z+5Qk<io*KZO*%A!4l#&#B?SeW6+?0aO9nf$nfzT3Poq81NF;Oe#qXs4vy2;)2zwos
zs$^W<$&&yi<f4ZQ#~V>)JQ9N?Oa+5fS(kzz5oy;OrPGsV5`3nUnrE_|b|ws$3O$ly
zmORC^Q|p3sVIT(ULU@PrFToAe$MCs<jg>+)Av#&Ax;>T2m^moX=i(-YyrF6Sm$mbp
z{a+!e-t*CfXhw@%0U+cpwWB^Cdi4<py6EMK>$zpdy`BV719gumyC$rR#!8S50_PI&
z0%TO$YS#SPUG4Cu*Qhi<xs(hMCY{5sIak$F^4`h=t;c!fHmK1L$7Q!n5d-qk0E7Y`
zH~nsTl=2x#|56d*7~hZBa=CxZtgnN|Vl#&rcy6W_PA=x#keCR@g^ghgs3z~JxV8F%
zxNz1qiPO`Njo!hplYrFe0GLKA!@z}hqXg$!IcRHJ61t^W!C_LC7K6Bh5Xo(L%wHWF
z7<R66&x12_CyT^iOxIuuSt}6J!}F-fimspu#H7f#$)Q_j!)#i?8X{PZ17lu5Ef5}n
z2B$zACB9RM7hqMK;v$%#|Km3s;(3dcE{#zU2~rhFMEpVgltNPad9~NhW>cB=h?cJs
zH6(8Y+VK`kK`KoX_7o_4(F@L7^RrR`wv(g-*pu3Z2YR!{N_7Z7Uq+hVw09&`(};&5
ztU0gHODYnMBC=zu@B_q7tNg7gId9AOiAb<oHzCyOy#OgQe4IcZ>XQCM3UMuS7vFRg
zcB-E;Hj60e$rm_~(M#K8wM-+CM!n+(QLVNg>X!V&E?(g;0eiwty&vU{*d%zzvy&MT
zhY!?IAu5v3kwg}d?@8OKM+%Vq$5LJtM&YSnIw;uw9Re&p+w>Pc&Rtn<6X47=p%O$t
z*pL`4!{(8gFj%jkQe6){q+Ws%pHdeAu+&l#iQRnP6wiW5;|1w|1DU$UO%Md+!N-Jy
zipVpjD8Z}Y1d!Ilt<NP-?cTDTf`Sro8j@(F)*sAzO$gO(XL2oj@<t(?!+9Y4{rfC@
z0&t6ls!Pf=dQZsi=Bvu&JN|Y>ta}6$H<in0EWTD;6Is0A0Utn%sP}OmG;lw{j0>pa
z`}<EwBd*>NSlt!|dHy^w<Z+rM)An5QNrp!3bCzvN3}cHW_We?~Vg3cpfv;oAc9<Z6
ze)&|NpIWQ^3+B)IZ$l3IB>K>aO06RxI(q@H<SzoOWTsEHg-0ff<7Ts(-b|94r0Kvn
z{J{Xm8rneXz_4fW^Wqls__*|KP(V6W;6O6-K5V>0ytLuyQnmBI&I?XCo4>~!nkv(o
z^vTGcbX6xM&FFSITYl`dBrGs5VB+!{wtqb`n&Vy>@Swc=kMDXvC0xM7DMW?hA=oK6
z@Mm`@{*Nb3ENUrKgZLX4V%eHh_W=ocA__Z}>4DP%_ZSb&@dV@X>!CsjC~N6Bt5-|q
z@VV(jy9sp4nxry>dS%WK5(?k<_oyw7oJe4CrD3^RrG&VL@O)jG*pK}@27cj;>$#<M
z`6<^b@bWX^uIW?xdVj(d;ZKe<#=)Vy?2!*ab4p=>lkVD@_<iLP0-VkKZr`HgS^R`1
zM0YwgP!Bjzl4zp|&t}2q33A)kWU#$H-S4V^9zwHco^bWpGR3uUIO`O_CP^PvFmt+z
zfueh@g>4^wjnzc6e$>J7_wRta_gF=RdVxRlO`o3YFhxiQ@!5z;zh@{D%6xDiP{R30
zwlDBv9wNV{($=qe4tbb^e<#L|u?2Krl9NBY2T8^Pd5uiLu1k5~v6&1%?<1NWBB2&I
zNehvmnJt-1$vaO67*#6!cXm(^CUAnbyWaF(_A<L*m^&ZP2-$gftP1`ai7@((_%)g|
zi5lUS3S7AmCUJ^309*Nn%HCAu1*EWof|T)}V-pgzzMga5W2zyqQlT%V1d3C5n&0J!
zxmCRTrOMQ&K%EgAka*i-JAPfghJjSLY}GCtE=Y1RYm(tdiu0$`**`Lz_3pG8e(>X$
zW#Hn!>8+2|LrJuPrK@Fou@BjBo?Ks+K4eoy5`bCeH6nEZtJQkJg<ok!5DU9&kbQuF
ze3#!y@wEF2<9(tF9%sdDSAxb7#XINM)L{J4rZms+)Ily(2fi}(B}ra4&Ji>2;pb-p
zfL#0l)=j}*;8ee^+xSX-s&D8ABdS7c12;Y2v=C?~9~{)U*_}8`NKo~U<z?z0nvphI
zVL*uNO!G0%<#eK2SG&(rv&+DXOq5F}#MAR2SjItpzSlb%ykuWs^)Z9m#t`<aBk0~W
zRgQ{!N%DO!q4sd1>&;_+L0tUfEofR(Cp6Z#IsM#tzO=9CG8|+WrzoVZ))nU)%Q#J5
zQ3}D&9P?+()#rx!kO!0@TA|$ffRR)ztD~08wNfYzLGa!G^D~W_M?e5<QYv)ib6V)x
z&g=Sp3wk`0F*KXqqHkpcrw*V_E5h-0+nH>iHhWHwt;Q>ENhCb6KO6(ve$hs+prp_z
z9B_Z`blJFk>gn_K@p@`__)l3y)~wBc1(Go6U$_BJ+dV%Phx;V#)g*q8OYw?FD`$Ft
zHzEvaxf0p!1)nRUkt3cT{2rXe&_}?i>zob%+BKOrDLkBVppLGKMx>W6QU4@R`~<i5
z)Hz2R$zxr#LP>UP)enYjzk&ni{QQBDO6fjN#}?G;ueash!A!%jxdDiYe8I?SHZE4A
zN7<?l<8x+0qq25{m-%lXeBRdyMYfQkVu>|k9s`D9F#Ca5YSUOhs0s^z@1!5mIGIs{
z8U0$d&o?MXdd#&}vujvP(eURFVvtE)In;M0bAq+Uw%nx{*((`40GTm_Hn^Kigr&d9
z$|D}gOb$xkcVMrSu#|u1?H%oy__+l>Jig++tkyb_B=6M?cinm$<C@rUSMCZO{dh7m
z(j5~}4m)E0q@0^ZaO(xV@##SRvxycl{?MWX=kDi+pMzI~@)_EOxR9lxfnM<JEe6e0
zFEG2Q>gh>904{ul0aH3MpaNDW37Y<$lWHYXQ1BbwCbv#yZwIfd$>HzfokYM(;_gT@
zA#6MIN?x4HM88%{)0q)9<G2p~4G7ZY{Wf_OT9Ew(n<w_#*S$1Ru%2TpBvHVFsu!@q
z+4wZ2)J?zl=HHA!0ekdD?74x*bD5?NyA+q85XPwIS_VgfqCf8ebut}@;!(0dt8dvj
z{>?P<cU9t~_Fto>nrE7HQ8K710w*M>nVSFt{0gyiwtfV;o<=$3JRI~=W-~1~KQw8{
zIqu17;$LgB?lS>W-{|Biz%FoMsmkpts=b)VK;;&R#K7Yakj0IRhzSB#c56?9B%L1C
z6N7=mc#hM$eRD4mwDz-1H@vGClqT~RFpRPgzb1pP7ik@yrypBsHvmOKnUcHEQ6)rx
z{hS=NLdYjlQs6)3+M6FpB|DVspv()Z@gu0dTpu`^Fd|8FWAAj6U8l(9IyRL!!sl%!
zJe|9;%S6$SDUQeASJj!e?2R3DS<n<_rdRgzaT0yRk-EID6{}Ubr7}5+ON2~uFVy8-
zZxexu_=KSmHo1XV>f9h|`v+FDnj63evi!D!5@jUHU0_lyIwY$KumP9KZ)s@sU_T{0
zGnhC_HnpWrVTPjK?-@r4dC~I&C(tG0v1t1(rchQAK)gI}rSw;VoEi;lWToizsIPK5
zI!S=wcYV-n<*n#GUizU;DZ(&;KZoBzKXF8JjUgg5u?viWDShu}FwWO)EGm0o#_-yq
zM>!r2Hts__6oPS1Ivmi)3)S)!alZSsejQ}5*VLQKdk;(^974_-0gvkx8nYG+Iu=(e
zn14vT-oDP~aA479d7%r<c$T%>5A<~ME_ItQWeptxkWp);Ki)q*&8!%^@;SxI#pEmH
zQ-V@OzT$cK+A&otf`xQEB5F7zhRfgiA|$yv?9qIQ_NVErx3S_hPAAPk$22i(GFB7g
zaLY}#=)UP^m=tM-CeNb&OZ#ozCV2J$n;ZY*C46iH)dJtEPV5LEN-0Fqt;OUG@$Okf
zP(dY^q5@{4Bf>j&F4|=9y2w5?O?u7+s)WSy{%rO@q&Sn?Zs6=|DS;EcaBv&(s5SMA
zH`xXKrE9@33Z@a$%)L*$t+$6lsC>s`ITAH{eZ&8)-8s@Mh49=14N6d+jorxk*MZ0b
zgeCvpy1bOt?fW?abPySJl1z|Fi5j0Tq4?66#GUbH2Vw)Wc@kUKi%y4x4#j+{y;zi8
z=!^lG!9uwB)i9zQVO2A+f&mom(UqyP5gBzTeBNw=&lf?7;umlOdfGfO@eypnPpSEZ
z8sl@1cYBR<7Z$7TFUbKPN3X#ebbQl3eEX^I^E+e$di=e7<ZUk$yT6TnD(IPX12BU5
z_i_^WKTxAX#VyPqF~7pR#$}=dY-{MGpfE(nK@+0D@DkwS2S*b5!2qj-lv=*t&aK~p
z%rWEjCdRaGy`;~7V2s|^bh-Cv7!*y2)*bN7KG9h0{sS|_vqxGNZI?M=*P;O$xe&bg
z!v6Axn0kx3hWI;NqeR_01-?~HZHmBLSf;_Q8Yw7=B!AUt1}9!SH*s+szU=UmkmdtA
zKs?slygZlXEr5_x?%HDxP+ByBiu2a0gu_5ANHdk4lH=p!BdaCC0TOT=4v*aj#8I;H
zoDQJxt}h$HZ+~8S?q+s>P$DQJ&A&$s?|qukfl_lmx&07<U~Q;7Ap>=hAzN9f;K3A#
zLy5ojeaIygkekjkiJ4%v*wO3t4&9q6FjYz)d7nT9?bTBGDTX0O{p7E5w|1YbwiW&Q
z%JiKh+Kw}nQDixav$rfIWwmOKQ7rh#*c__tI$b@|5q&%X*Hn<|M_l^4(r^2B^SUkT
zB_ZlWJ4kEwNlnn6H-0PQDE#^fVqdL3I^(=SfpiCUEDS-^grp0~G5XW|u_<Q62Za&P
zDY*67;UO%q^yX=oZ!IQcgfLGsZ$xtLc24@}a);K*r+fU0T;?O=iClK%q=`fRkQ)!N
zDzb?lJ5I1@WKJ3f0d&MzyI(Z-$JcVDfkJ+-kvjwEN@T?Zwjhq1ZI~9oCKp9I$SAv_
zdgr`-N8vM%%+Wb{0sW9b`D0K%3>CwGSM!$Vt@d4bqZhEW@o(C7-!Tn*$1@n!>aOLU
z{|PSL`ysA4Q<mzFv@7-Y@KxH*6jj2<1Z*Nw(o)t$vEP(;+rXD!U+6L+!IPNAj3>Ug
zc+y)kx+$w!r;L>rlv_hvZ)m{I+jbm_$z@rFXT@4|uFfKEE=V9v*P?(<_PF2PW8lJP
zrEejwq7rb3elRr4nqfn{hKBIO2i5PzT<9kMjus6P?dc0#Z*mBgYm|cs4t&%Kge?1G
z0I%iuI_@+KG(qJ!cFC4~Uqk$wu~PYAR5+cRv*&c>kml_``h6vz>3W5Zw5U@h-%G8B
z;ag(Ug&2R54QK2#S$9qs^U!f=jtiKqtjt1|^JdEBV9&Se-GbxQ5%C*BjA7cOu(6vb
z%Fgc_m9%B5c}R9E-*gV$r{}3Xd4i2CJw<BKdMtINLCT}47ElwGMg4HUKq~gdCaJt=
zz`bB<(j;Ylvf1uHti;0NoT?R&fje#wXKnb@82i<nkE9fENYxU;iQ4B%h;ph=YDwbh
zv9uGJh9?!?;a^)mzo1>)T0ej~Cvya?rU1XjU9sw2ezVF~*AIcvst;CXTP4^cr?gvU
zd9a@@0;)MAPlg<QnaoB=ng6h5`S9D|;GdypUgWsjA&~IKR#qs5`oTjBX;zVAH9SJe
zE_fG4AELD2BZMp~@cx4SX_fCgp~yg1fdQnW{Tc*3_Lca1WMs3<gNVs1kXlOW+{+7g
zpT>&qJ+;AmQvi4nMz6Q_vx|!hRQxDA>XR7pQlTAX7`4^P2)A#G3mpGQjKPGNL6ycH
zv?wqMZwZNUsov>!fKAuOO>^5|Q!vq_Q$okBsZ={2acRtxJ(WRux6O%CQG1z#o1rAt
z)z;Gu)R2Osx2BqxszaML>qN@ob_~zYX9H?D&b4>;j-mfm^#UjKejsz(6}YVnl4}%u
zlPc8!E$1+?q4PDO<^we&`ISxpNI1b<kdQhKx?1wO8CC?iMK=x(Td=%XoIc%o#u@cU
zVXQ!P`Q|CfPrw!qF-Jk%B>f`9;ytw3`(?%VnW^GU|LtYB6lO1aMsTulmjS+X<r%Xf
z-c_y*T!dY`9zRxJTY=06lhx2jiKM&>;#y-Y9R<A|wCaV>0g-?@Jr?J&7nXAW16Y*D
z;t?=T#&58A^6-dlnxJR*!7GsB;T!Wgzwq~&DyJv3s`JOk8!&Qo0E8`Yc&xF-Q6#w1
z(vMrF1aHIk7hHw&Zw)}H&M6=Dkj*nEAV@9W29YBP6EJn0h_&qW!J7cH=Al5kcmK(a
zp33EAcrb2geYX=qnS>Dj(wsvurPhLh6bDGg6F$X00GJR910o8bx*p>ld+W_3XFbGk
zv~a%u$*OODkxu)^Ku^Kjdtl&hV1Mqa>u8+}irK_@W^0Wmgu*E?uu~}6wk-s)+Gz4L
z4#v{H_|tY5L5V)|9n#y0mlcu`Egp`iyVWXG{IoGcsIUpTdfbg@wgdmRdA6`c>K!TQ
zR9CC*U}V-v@>jV^;4A464xjqqo`i5~0$4?&ZIKnK%G~>3Qo1#%P7rTAD5$rSRcUDv
zBO_*gKcJ)UPL{e4)94lM-@@#l(jGj+OSf68UopcU9R;$Q#J#4oMTrcTU)O#Q0i%9R
zX=0>HYw?W3ZLkz_2L0egAK!ym9sWO-&VjoQZi}Kfww=aigT}U<G-#{_jcwbu(b%?a
z+qSKD`;GStk};Bd?m2s}HD@U}_`M^Dtg{7;Afo>62-7!W3NtDX*(3r!K9=v7*haNo
zz3rKs4=O|qBYIY=nLrx(=kpECkCq3wCrmAe=%WnQJNAw;9{gdPE1pLAMj)W{iHSO{
zgy1)vaBi268^95&7GmTTk-4>^GJdrMl`oGF^Qq9<Fp7c{x|M-IOQJlBu4#*jS3_kJ
z&7?!s<{mpYB$Kv3B!1o9Vantf8P0Q?3pOs}P6HXoO>4~u)KPsl=Whk$_Nyz;ryrpQ
zMuLBZ7Dc1iz6$QQZ<M6&H-h2Yd2kGVPde{9%hq3D#k!3aE3k=nK+5{7rFdGqPKRQV
zyCNC|$S-5FF`K3^Ql``B00HQ^Om64zHwYdVe{=)CSv8{s1qA^Sf&&f?ii<#?2J8qa
z_KtY{Y;G_<WU{Uo=Xu*!r%En3&RAma9xiMp^G1SLWLTl=oas=I5mfac6SSp4XZ<&h
z-yjfh2FIC3qzL|rCJ8qouRgGlwvK{opwQsH%WUo=DqMy>teW15B@&<B#lp3DqA#x8
zzd#{#Cut91lVHGa^bd`jQ-4=%funfVN27`7C`Up^m){8O5u$)-Hd^@t=Z*-U?^9oR
zpU2U1!DUsgxScN-);;|qkr|G|<cy(-pysS3$@xzV!F)zc!%f#x4f!U}i9b@$`s^bM
zRm^wS7H&p;nlfy6$ze&Vw1pGCeYr|tCzh#rMpsJG$>v1b%35y8QVJYZ!<z;c7&&*o
z8*diLe3XP5?GE*yGekPY5w<^szDXr&RAk{a4wf`xKqU(?0xhUGl7I!U-+Xhj0W}}5
zd>2p~`<c}KeZeEkbMZ@Rxf1nol(t=e2+lII5)~c*PtD*Q3UIC>G`r?7!CNK4F&+Dj
z%xKtfX3zGN(j+y3ZZW6?23I>k;7F&MGGToE<?oZyOd2&Jxz?k?K8|coTU}G{@s$Bm
z_0xPir$k!p6RZn^eQyH~ztKA&%gPT)_m;1De>Z$5<UqVv;0qx5QG~0USCDPNK&9db
zrVNmw=}P<AhqwYcKUh<*3wAi3D!lmxBvV6u9@=|@F?3vm;@NbQ2$4|vRsI{!$CUda
z4#dVPmMVU3hJOz*jN*i3vs{&lF-#l4wfl5bT9gUpEQxN0{O;d&=I?~N$8W-I8>LDQ
zTY^QBJv)5`9;j9Xi%UO$%95-GNQW0^S@;OJoY^9=GrsVz<y_q89K(iL900`QLyBFU
z|E=DHjfp8a?qELVQL=I^b=ocVJPg#!0=*GTw3?^E^AyyCDp47|-$aOp7j9SuqgBHP
zgCcB4m*d}qe;!q<3?O{pcA8}$7E~*Nt_S(iTYC(Wq->q$>$m#|56gj`dbmb+NghN4
z8``GLJqbDtz*kX51YrovmchQ*tm{;>)pzxL+oX#EY|5=BB-Cz6g{wjp@<LWznw)@N
zF5BKKj2Is^4Nf>8lSz#x^e+_=3I64qOl5M_5IUraL8iS6Jn+iA%-Z3Vb^=Vd(^5iQ
zdPRCDU(CQ(6cqZ@7{zuyLzZ()WZz#4_GwwX%O5<5cTovL8U2omki^9ky|50H3Fxwb
z$x?!tKt+lX(keFTQMHm7ud`@eJ8SghiC19ZhO5`kPFCtIAZ7e8Lp><ifq&OXh><&d
z{}a13<Svw-2K_lW1oX|!;k{2jobC7%zCh!7-p^EzeQy)+td)afJsd`5k$-G+qBu^~
zj8RJ*d&U>ulH~$n>Ep-!WL@RrV3AO41@6{kp+B?SA2kf_v)QfrIPs=IuG^Rw|IKqJ
zi8*w0iJ9Cdk=xJO?SbJ`c|Us1rdd=C(U2NL2O7n&x_O;tkjmQ)vz^$Z7$b5h6-!6C
zStYz;_k=jJ5@f4;bxXBib~G>$7EA(<jbe|CwoT-CQHSyEkcZ*66FdYx%nSiFMbL3K
zHM5-G@g?QPSzkU%Lm;4ZmDmRPPs)h*g&Ex_m*N{B7@jih7QHT(sOAVhJvhQPiyCKo
zz}m~sqW7oC^XgJnknZ~~mIEdi=rxpM!s;`JHUJD$Qm7=LG*6+4{3cO4xRiFp@7<v#
zZx(!r_Ln0KsYP~tll#&G9;z2i2lHaG$Q!g|E~v8lbn{kE++XV?me%10ZI5s4a*bvg
zj3kkCR&Rq>eII&Lc1iI<T&E%c^;^hc6~x%%1Ko11@7}F5rXCbcVBK!VK+7LV%<CX1
zlEbyH<Jma(czfkgpE-Yo_|i~=<?>N%!LWBY6-c|cV7JL{ZObMo-Ctl3M=)4}v11Z;
zcrGCa$T0`HDkUi7=Dx@ZozS~|5Mbb`9tTUt1k`g78`<-7W30wlOKa(@NOWUlgz4QI
zccaD;E~(B42vz|r`F;_0y|zO=fmrQOi&<V==ic4E^_E5!cz?~&3M7<80T5^`tH}hk
z1KN@H9j*0pdv+u;DLOvkFGPYLZh965pp|cj>^n7-1pZKjF36<|%;%kNS@YH|-Vh`I
zz5K;X7hrorp`c#3-<><)fNyYqlG>V*SF-!3@KO??hZ;+F#M}oVZB>VOS+7v3U(2S^
zRSc46vfO_Zq42;^*~&?!4D#P6UddHPh7bt)qhjCs53qw{m7*%<r<6G6G_+}z6o=^|
zPlb;nqZncJ(q_5OtIOAo7C)7$;d8h$G~s9*@SvYg4fnl%x2N=Bqxzh@48!?oEA-U&
z+2K$W{ncB0w47d=1A8O10sL2zT#MF5VBfgc24cOod`+^vf;Klkdjw&B$?Uq*t%Y}p
ztHKI26*k;^(~CLE!>&Wjf@A;cCWo4bCLdYw35YOTx>f+G6dc{6<jvZZ(~8Z{?;UL|
zRhGy@@qBcqHIzgQM&t+exTGC8Y=wX2t-3cRX6=Xc#y1eOe9KH^!&{jQ+hZXxUBcQP
zc?56j?edKBFYuaDg%IG$ojLCMlTn&h2>uXF3`*1vK+BL9N}DU#7y&LhDGu*^tbtad
zA7jJHXtzWl&1<Y9#q;65>x1F}Jb&3*3~pJ0?sdBhqAA_^I|9s4lKlrKC(*yrHk_w;
zW3tt#E~+)-h;cXDyWBskl<_SRFn}JI*Se{oI$);ifL3+7apz(!)T3y14h%TsJ=};}
z0AZw@>XJB4WqOI9k9^>YSUN*r$mX@DxOka~_5xqh^~P_%?v>uh23DMSPw3kDJs@EB
zy8hi32w#Tkb9G#n+BP9fGF&m~J@ZLP896xoE0P~c{+_F$oUk}W66#ft%O0JYjbdeg
z8>4=wTIr`RIn9S&bxtvP5gQQ@)D%}d4e2O<F@Z=<RFT95tE*aJ-P09)b}p~Z(VLb`
zELQAy;(|sxb1|-Sfuf@H<%qFRG_D5~@Rr9&TcA03w_a_=0ivn(4n`Ago_B(KPJ!cO
zS@sR^rq46W>r-h4<v(Dap3}-DAynS@b5MO;YxN>uZA7JSN{)O-2c}p|r7j@tc<va}
zJ?5$!+g-N@jaF3~Dw~<2;%d63=v1y*ASYH3mhqLuxbmFccp_hMAj#7brX}XWO89^%
z;U(0y;+;Bi9;Nfu_u0@?X#1KQ<m)$Tlx6QRF~da+_S$On*(`NVeak$64dLPX&rx!q
z#8S{Q4|pHu(DUZ_!1o5fa-C|^2j+<q{xms`sTRx1p(-MMJ{PdG9(2q0XMZ!eNXET9
zU#UBJ0#3~TG=FWn??iE51#n-rqXBj95Ou#NP!pm4!W=06OF?<TOe#wlaM>RsXLvqp
z*i5b*q4rS60T3qz_Oj3LTyY=yuy5MI5AdRVtR$LPEJ?{9s}%h#=Zi%1kf(8GNq<&s
z;4E>|KOurue(*_ao~E;s)eLuWG2V0jeM%2<oX5_6mkJg46CfkLq({NI9*oRqv_GWd
z*o*iP(zI6)FYouK%ai^DKD|-zMK>o*V0ukj4sasAR-(5*M?N#}D*^K;<m5$N(()6C
zHmlN{Ect;KgfzZ^LmmjsqAVCli3{`_=8>$NiuJJ<*x@$MROx*Wt@d`L#fey?dpQU*
z>aP^VNp;J^1A`wWY(a9YC}^x+OXx5v1}x7Gy?|sKi3<qGl!#u4ig3Aj#R!w+tvb%Z
zyZjQMv-F?rc?9d*7gQi2$GDTZrMcpfxW|sQI?SMCs<cB*Dn9@S8<DDyMsEgCEY4^8
zjYukTSvPH9cFzoz`#p7iDLv=UO$GS+di|43M<7ObZ$}8e_8bW&T+LLJw#9qDq@i00
zEA^E89WAU66>%#m*F~za<_9`vZ8jX2W(+!wPLwzv=9Q^;|BsuF;mKRXlEGOuPIj&K
z`r!Ka@j-}uMYq^!g!nz4LY%~G>G3=-2#Z+KVyiF&P4syHF~BhNjFr0Z%pjM=ffckA
z3%NkS4o%Hxa_Acoth5iR=I<mbJjBYP1*17OkGY~Y80EmCx|yr9S*D+-#`v@BreI$1
z&1t#g`mFYW^+EGTrm)fyb_bCPr+}x@Lbe52_x*yif?IWZ&Iz?wR%OLq3QlV3Lhbi2
zOjG4E2(7NzwUY6_$|S!s^EO54$hEBE<b>8m4D%V=I}q)UCj8+Tnvvyrc7R)XpzLI6
z%Z2p)G`Wi`izwk#uZxOPORWcT#(}`IDj!eT6>61wfU=cN;4<^J+`VAE)pLsi_9U~^
z(z6nS$Eh@rqsbt-35_3?It{yfw@R^WV}lB=xob^~yO_q<y=6+_hY}x(OAMWE_oQ5j
z-7D>~%CJq`2@%Lpskn+X)W~eZt&YJTiP_h<Fn~fLHv){_aT|1*77CjBrZ^{brSj}N
zi;Ow@N!$onLW`Aaa*<stlCQs<4AizONAJz$kFj`gJdj<S>u5(Dkv@rRpLpNQ?0R)g
z=$MSG^7fC<wo{ZS!LNKy{jlvSlAJ<`ZE-jffap@RRww-Tw{57M@&}W?bxwOT5FqMV
zH#o~2<M(8mY&>XB{QU!Pq^T#C)H}vIPIF9t;q9R{B1tg<dBaEG{chX*dRn%#6HFN7
zdUx0}+lNS+4;*t@iuV6IUd{BQ63TaFfl(>j6n<~M_9Nb-o>Y^{qV}Dd8YXOPytu=d
zj--=lV)sS5s8%gh%KEwm$4ZNpvBDY%tumtH+o{5a+u4B)RERf6SxKG54U&5k$R?BT
z>e3oQ203;FE<MzXQ|$qX^H8pnwX6|~$i|TloO^{Zxf3X%g<B0T)~hIP5-Zki_&c&8
zy_j<K3ZmBi*{d(P>?@NVH+(6Za3!OdnP_TfE_m{_1@2}U`dhKXidD-;@W8zCL2l@;
zNIZ8qOgbO_m*_8)$+qo{>uB9K@#f3dvmIbU6Qkc}LFc$4DYPsE6vooYQWGR+y@;kR
zGF}7n-V7ta5VGUUXMX6%x9;yBRQ(GbhDMnl*@aJzekoiDCG$c}e@Hw0tCFfa_6aX-
z$PPc)e-N|8(K@vtG_xPQuBCk7aq&60o3W`u0<7kNoUO#P*Rks3T4%!VvDtr+^Oj=V
zSrhJ<9PZ9RoOx*~Da+CWthM8TfC{U6ZOd?>K%oPgbzxKr$m9-o7kHC=2Rzs?bbmEK
zh~$`IKmHT<3L_=X{b`e3`Jhy|O#nFRr>xxKFbE?DBS0L_7QFq+6RS`3stx-0R0bSr
zAL;dCy7f*eoG^5Fp;zWC=cibIUSHzIvQW?61@JuGiGF$*{AT?x;|2+&nCc39e-Yt1
zE$bWIW7+(NrpFi5K@;I1KKBNC3H*_?+^B0l@_Q7rONG6w_8C#)F|$|Jr5s+dE&I$-
zxvVyBeb|IShDj?}WIE<05EItn6lQI)bLSh>=qQ~jNhg*Y4fe3?y@x~kOyfA@!iD)N
zHimJbOW|>g_7-5q!E%B|R6k@`G;luCC}Y-W%w_4xy@#l)U;#~3=xLFeq_it!l0FEf
zccbD0ic7jbAM6?RtW&>MrAc0==|_(<zS+Xsbj;d;+UzB=Yu-NKdC8Vz`(y({7CF=~
zzKWQaEy#Qysq*op+oNTbz|eCGj*jakL~-O|4&fYh>Cae90JlWd)GcUjum*3Fxs1&Z
zRZeJ8zm8Iz*ds1w*pff+T#bo#lIj7Qoc@lXv&W3E!ki~AW>2bXqc+~M#;K+HA)JQu
zds)bg4U`ptY_Kg8;u1W28YPse_mlWl@Zfp5q8Ao`2L(TjUS2#I4^wRQNWhO7DCs^|
zon0IEQiQ84)SR7_ZO4sxRV=%u=PA2(O%1_w363G(6qoAnPM!}!zbU{RC`rt#c=HM}
zHG~#$J&<zUCOkPHd$vZ6NxFn?$8TzwNItj^FNV6wvAU2ZJ(pUl^_DjDEj%KKo~b%K
zJH&b%S9BYMdmY8fj{1Hx{S+$Tv5P^r3;zje)%qd^jNhmUST|rL(eXxL{uUuX=lpLj
z*LFvN8pQi?U)TTo1$3*k+Z^Wx_dPFjOvo=tEkrLeI@F~~YHRn^2>P#>vvEx(h+2w@
zBcePt&{U*<rA|5|40R7~@63$qdsq@nOJIL9-`FY3yoi8_lK7rm&w8@GJkzQpJ^-P0
z48`?mWXF*5fk;MB_7!y&`Rm9j<F|v0MR)n0=!rn#Ue5d<N4KYBpsT<e_<O)5Yr8RN
z*#cFxbCK+QKuBVxKN3fVV|TmHcP@}s7%GkUz?az?Y)by}jae^M_fLB0nw(2`*=>o{
zhrg`dxMPi%9-M$}3X6Bolm0>y-?e>BY0i-NJLR*ME7~5A?lD|OdGrgVj=#che<|tn
zr!FTIjJO7|r@YJB?{hc~Mp{)rt1xokP#%7~C{G|1k%hRJW<$+I-={i8{8=yiV<R88
z)`6E-kimAjY==ap)(t9O73Osmdt5LVGLLUrkezKpB7Msdgr`wcQ!`0AFdQ|z=U6PF
zTO#6m@3M&!ObBw-b?;eySzf32^?{fp!GAcn!%C|%DIeLO&9CuunsLhiYN6<l`9yPh
zw5TB=KN=GfVErlnZMzispFOjqSgabTmbFWLocZPXu>Ws^GDpI}Fp<HD=JilUsecvd
z-nZp-X<z*X46836W9Nd}=<FX<kGoQU($^v3v-^yGInUcxls$)Mg(}~Dq__<n+JwoJ
zGz5K1w~8#UFHq0E+rq3ewUTnjc^WNFNawHe4=LyKP*9um9Lj&Ss+UT`-E?&#8n%kw
z%3jtVh(!Z6SjK!z5@a{Jik-%7tm8m&5LqeQFzAnP`l1$%I63^=AVMlqY{yL0?VReT
z^Gf*SHO@y+t#rT+51pcfk{TLl>{lb9u5D+9Z~Gj3&F=ld>2kz*)WhC+gHVd=BM3Pk
zKKe73P=_9_L-@q_;*^NzWANKu{cxk39Bvd-30|aG5?Rw4s8f8=TOFqY@6l?C^CrXR
zieLHIH|18ILJN*YH5n~}DjCnMQhpZ9X=6TBxC-2vFXh4$Z#HO$yQ*4OVcrCEn}%u7
z%LgT^h^dOCkHO3p^U8@+#^EDCb)?rWfH8##5~g+s-s{5dje58*s4{>1QmyZ(k@#+f
zB<g8<KdW0R>%w<3g=a7dBe*3#d>cYxN#^$1^<Y0^gy;A5U7*$iDni2_w&!B7BIYVb
z9aN3{TMnnXbHeNxQ|8}r{_YX(S+^o4#Gw%|SJC%Z)Wl-sWCuTjTnm*7ArN!lN(;7T
z3#E59j<S)iJeJzFb40^)y!Cu;4Jax9_P-P|C(zo)p?tY2IFOiI48Sn|2(FCW_jA$t
z65v-E#c(-XG1<QJ{&Kdt>UdI?<kxaZRL)_1hXW4boFI;L>BwL2tFnXgqxm2|=e%F#
zfpjf*<rgIxZz;bnyQ05=R<na)#31NUEp+2i`HM>V{pOJ+%h;NKJ^eW4dLKBcwOYuR
zz0Y<A9}$!<noZ17Jv_Ig_Dzih8ZfHuWTI-7)PG*uy?fDZhzZ+1fF#xN_Q!2fhbCsg
z^~AnxzV}Dt;BhTJ?IO}WX>Xska*>%vrgRPSvCDT5PZ)7!vdMw%kcvMbPqNuJy34O?
z6wRaU&nXy&nflxW`Fv(Ot(sMPyx6%Mac@bI^#Pxeye~VY9Y2ML@;0>yu|)bVILucg
zP3IcYK{A)@1V=p${6B?@+6o{iEZT^$1Lm+8{deM^TJtK8a!VF|#G-f#*yoa5D))Ni
zh@4}=c(i_4p*$99{cs_yh%lT3pBbl+5uZh`P2*r?n^5-^C`~wV8=B7;IFvOLt`jcz
zDKlTP6p#KE{<rj@@~5N>2&0bPA>on-;IHOwQb~wl0X-6Cuu|KMs@qe)_elH?Ba{58
z*6${s)2Pv7SGdy5EDvPk9g5}?F*>~#L8WU}bqyb@-_pL)v})Vu%^<zYE`DP$NmAy2
zW2qse&XX;ER2g{|5BfRa=MJov^}bwrv1hmr;#3<9#HyU(+8>Gy4IVoe`k~a6hHf7V
zHg!z!eJgpVANRaiv5+HXnj!;o?KJp3DA_t1VEFD*<@?I2I$<@%#d2VOV&meShBS2m
zZ-><2N0nJw1iOem9@}?YKqi#Sj%f9gj(g8y#hOUVocVx~T?UTYWQj!+#`j4gYUwy7
zi23``pI`>T;zu>l`J(xxTdw$Hoa_X#0wyKaW#tbFZbfy=*At}}lh(o|fJqSF#&RCx
zm+WsBDn%lkF<eA`FI!6!agJliVML9TUUG56$Qdll=b!9n?&?@eu_A{=$X%`uu?;%_
zsQVOkD)6U#LC|3Jd6Z8=0)~~nXPx;oMlLSIgB#rO^d{O2;OM#9V*r-pW<P!>=&Ulh
z?Xne3?2n@zE{Pj})@ItB%rU<FWk;J<W?TWC?0YB$`?$2^Nq)U3UXlR8MVOb#GA-`!
zW|JruPMyoTp04<|*e*EL1ity2DA~e6YBIMihtgE?D}Rg^@z6q<;}1cT+KHvVk?vc6
zk*rMz*P?EM9XCO?W$I1Kml1szeW5D#u^pjp3>pMjxXfm)Bxf@Kl}lk)qwbliWUCvo
zff`p0nSe|e8#-0RN`TG21UoW-n;0Y~?79su8#QC8x<D65+3M^BvNV_UjYLG=pEgYh
z)tjvF+wa!x^&e`=^lkKFDEek%QBH;Zx*zV5C6fjQHIrcD+y8PW<G5hEvlTP}vGszP
z944DuX%6h|H6WeNb5GkhLj=K4-j77{e^_ZQ*u6J-WLN)7OU^FRg;M2zdM!8Gk`jl@
zedW*XlmpwrgAv5b?Z!V;%6RwjB(&K<+dT7UqWuPxc3kR}vyrK7|1bz^y@?7BQl{Mv
zED+a1F>)zc!v)fBH1<DmE-mG;i~WR|>_5gUBaM7F<sROP{K*5pq$rxF{oGX%-k4wR
zAmm(|`)n6ZhGO6QY?eG_$L#<gEk$KG*NlyeaMPkx8g3%|7Z9VUTPbAOjtCUI1(;jo
zU|zN%^Es>-+q|bO*ql`~^+d97LL>291N7brA23D8^C|--`&st3>QGqTemfal%Ak5E
z&QlDP3`9R{7J`eXp9$pLMqISR!Jw8p;KqSBd#SEy_{+%BG#%xz{c5z1m{V@F>S8Nl
zM{`DW!~@x$0AbpTUBf1h>vAe&<rk*7p?K%9Z=57H5BQSf<{c`W&A*94qh_Xb$pFnv
zVF%qTV}WtAnByw=bGgPga1;Du{J}V+JHNcv=$XQ^+jh|ih~mEl4|~maTP^u#Rm1&Z
z^fXk<d3<tN@;EFymt%FU)sFZV6nmCNXO;$!vyZz}UQW=k6!Aw8WNuRz5}WlV_|v96
z63=Hp!wwL>``1qMAEdxytx=Q|4K}aq-=alZ&`x<D+x0ND2si`U+XhPVg5u@4VE#pG
zpzoiMkYR{^GWWDZCW_6*$Uss5kvNRV%}=1t*BMzZ;ag1o#@b)Eg40PDcTIBGqqC+y
z{fmhn!cFFj{L4`>#V%W?PsW0?KjuO;P&qirAxx$Riqa1!ytAPQa784V2a!Jvr^GzV
z05a&9ZSttGlFDb+?AiRS1F_)<w=5PceWs>%NV?`vLZ)+mlkPQquHx5X5PLBwbe!Mr
z6tEi&&Ax5}#tD|?_DVg0;=`|=mqO}Mha11!V99_lkhnC?5)A&zAcdR^Nsquv2=ds!
zg~ck|X!08ZKNY|FNYmg`9yzi;CR|j~voR{yTa@zxJ6c<ly@z|%v*(vtM7zL^Eis`Q
zX)qYT1cQh8W=zb6lt4fFYryXSjb!K;?-9`ra4$m4J>;ekPhmQwxok&4*sE<<4z3y%
zy7{|b;AmM+TDtb_M@fL*A{2gAsKo=pzLuFj{texE`>yRzs!W(jdxJZyh|gxhZf&Mh
zL`LUJEsn#KpEi#xN8Ox9S#WLi%aQ1Nz_q&aeOXZxmK#2FvR{6wH-}c-iP@`jy!-b9
zksvrpU0tO6hY2#49@1z&(5LrjtJ~6KS`3ck9Dmcd^lxk-4uRmE5&!MeSbAI)ZL$*d
zEIcwYqQ&WSAqhW@|H<2gfpp#gsZ7L4>;g&Y^0BlXiO<?4*3!iBB@9d#=%6Cfec8ix
z1u_*oxWsG1Tv%JCQFPihuE=QNwWYYT1Uryw{(2{K;&*J0Ubfvn3gP9P9V%ACWtVrv
zbDeSrfKy33b&+d<Hfr}I8g!b+evI!`$r7+V3D1DQ3*1C8U|EdOeqnW#J7H-IM&j5_
zrkR{g7h{wqS2V36eH`eVP9b!C&=Uu5J~rlWTUu*^m}Jx-TD6}1Zazp#-&rxqUZ4_%
zPowfz<OWxl<kaMP9<1F)`WSJvs-$e4OzSt%IB|KEx2G4U!rmw1EvKdSj6(yZ0X5@X
z5*r{Oa_xEEc`VUKtaKt%y{I6kF40}djQg!jhB{?Qj2XDVRxYxi#?H7+@Av}HVisgW
z`Xd+FjST7FQiZNJ4Uz*bbbSKNblbM2Y63YNJZ+qOw3#%We7pLaA<nUb3@E@2CO;6&
zy$1;{CUJ^-6d^|e86>y_FbiBGCgjd5gwsDZgq@a3s(5_~NQz3AgTn8|+hVUFl@hPV
zHeohzD2Rga2H9DhfQam(ne67?fhOW=!yH<264>d0HO^&qv)s6lfG(+qr|GPxkyELO
z$fe)X8F12~kJpJSb^Y7Ob9}wu>HTAg^?C38m7P|u=<V(XP>=N{cW;-^rjn3o-g?fj
zBZe7{aA?ny2wzAbQMe7;f(+Q}c$|nf?>!QB%d&eT0r5l2j!hd5o;vM>G{VjCLN)(3
zvs?Izu`RDg2)_{#dcuJD-LK2&FMMEo9QeJjIU*TG4uIJySp4?;==ivc1bdFBf4sWr
zK!T>WJgF{=!I2v!xSqlz4r{ur&ZT<Ak313q<5zX`h>7XoEa<%IjrFIJuaG`^W(auj
zqVqyQr@7*cREiUy=A>uKL<O?Q2fpN0y%LxIepH<1s0LVrRUh8oV~a8ug7Ce}uV11{
zPJD2adQwoI@*;iATX?H6JZwdul`@2C7+&)PxD<qO`W~FMQ!8xd(I+z$w`0nt5ko_=
zT?nYdHIVdQ{&?0hgiaMkrCCQcSLsc`;&;J^<9@3y2y7P10%D)GL-<fb6?}+`*>wb!
zou@R-XO(T+Kx2BYKsa#XkY|E%5FIPjL`!T)FA-P4fuV)n)VN!n7HCE(wvJ!QQ04El
z>V^DKv86pVL-DylT@ZyPykV_igz-IVZp)7URE-|5L{%;$3j4!2={pEYLaZobx<aiE
z!I`a90P?q}{2n~gBg2xaaMm!C4-GkX?rqb;z2sd}lmo`lNM#lXqT%mX3uHCi{Uo+K
z4MO+~;sy>YH+ch<h5a&%olP`obMAwb(oOjp01d+Df_lJXZyhKcK}|R@`i|!)X~*u4
zEi`>!6y}At6!7yLykItMh=>5KTRum|Cbs^JMd)M^O5l|p)URCg_9MS*r9k3!zks8$
zstPFyuO0jQM|YvkCUE}(_q2&+9?$CXXHWCK@&0LwNECbR?*I>AXb%x`^@>XA9)}Rn
zzOND*MiP6g`TZZ&gcGyTato6GWd!WHi|?!Hx__@LU@w|GE8-LQ11JtpRdf`AS>M}W
zdX8in8JTIV=A|t6Ue2>AzaLB4vLd>q`RQgrud4T-OJ@>wOyw4HwJ+lY%Al(wld`^X
z;!}CrG)x~f5%Pji3J9cG1lg_O=x<f#=}eBAXqsjRNxucWujLyfKNQ%dP~KK`mFf0a
zo2y9psgERZduuanE#`ypHL<7JD+ac>Y{;DFbX(U6^1pV9Y7KPg(giL@_0BnFBr)V}
z#a9j}ceyADA@_!Nf!95gGWOx>Awrg0_VyQwpYR;Oa-rVBXyWxY7!r`4r32Em<;88W
zQX6@QE``u7W;9|jRbAlC^`o>!2>{v{`6_Kl+H6P^Gj<kd9OP)X*9{kX&^Ch{Yw;xi
zMDtczc<bZ4qyS;qhZXK|8N)(44TIr<FcH2wC<}&U1C@41U}qHN?o$+Qe;?$Icp>Fv
zbs!A_EkUy5+vY-rWF?fab&Ac00?~1A7n9)_eyYyKEOzOfVASq}oW@{cx`Q3YV@8)(
zMbgXl3-uS{&rE4ib7KA7p1;Zz;0G?(he*8M0~C}+WV!+<cDZ~&)9gVUAwDw30CE_m
zn#dS4Rz+}xc`Ua|5IGcsFOtVLs>>Fzs{y3eWWs+<q_e~Mw>1SzUCyKs3uQ}zOC{+Z
z>RpeW9JlG~2=rV=7s<&IzgK|peqaD|)quf2XxH0Q1b$N=7f0I%Sh{`#Q26k)Ta9tI
zKqdx|9Lhz{(M7y_{Bo2X+=s*u|9L+31^>8V!oOVWT4p2l_z1Pc?cA~JZ67bZKs0-o
zZxX{;wiUS1N<IrZs;yO9$&KR=JGu1&4bm1rm^1_((rBoHMewKIlSLKmrV)XU)I;HX
zp3Fg%R9F{|vO8+;+v9}iR)7;e!%kCA_wa`E2)#ZgN4Gn*qP$rv6pXdDK&Z3$+LA<M
zuC;hVWXNs0)Ipi5d+zEQT%=p31GNKeIp?Pf$L|UA<}=_3`rmj4xHyAjvvdoO`IbR7
zZN>IAJQ%TFY?UPxLqEvi0}Y*VDOQ3J=QEtMknwkOYx<*L!k*`PnK;izp2L({rB(a%
z`SogE=`4nUBgJ+&-K<cI^hzB11szS5$j35bOWIsC1e3Bf2h4{XF|ug51td|p*UiVB
zD<N3Q63I!ff7$uTwLG<UqW;zsmk)L9&bt1XYWUz_R2&|Aj4%`r{aIO%G;<`NhxTCR
zHdzDQqe|HYo@IQbwG!uzM>+TaJSUa!0z3sXG?A`HQzV5a=|DNlf#nlru+{U8jpnB5
z9ay}*d}{wT={@yQeYN=}*ue+07Tg3kB+w!f#LrnZyqWx9WJb&wpmGm{1YxfNT+(P<
z5&K<a64Mxg8B&JRb%?s+>`Nd32binrf?um{S8aiE+Ok9n8{K(2l?n_3US;-?e!027
znRc!Ld(IxW@!0`z-`fFhqd%8hUEwCu3!$4rm~1T2C^0t-eC4bo=NZ-IPmB>kEM=*U
z*^?=|<5h`XE^AU}LO81mk2Bs6cym@L>^N2sOqCfiJuPlo{HwKx?LYmW_LFFqo**nG
z8nZT2nRo8<FCl309q0|=6@psXkU4REa;1b{S^rFnq&3KmIx0KmJggzhl`{K`Kr9&e
z9ZR{xA;O(%nfpvP4|U1&KB%YzYsl+B(wEHxP(O|Dya{97aT6ql6c7S>2Ohs}+C(#g
zM-m>68w+o+DdQ4ThrP{~mu!hdNDl%5!w@CMFv5>!&dWCvHQG(wJ;PnXmTEZXNW-BX
zmP;Yz;pD+<8&%Un)VtVuWWRS*oPc82S|epOnmUTDu6Zy5XAh|MVEkO67u37GY5o|J
z7`^wmvIq2spwUT)5_wE;Q{E*b@FLMr3LRz`F@J(pe;HXPl3-gH8Q`&Uek!eZ?q)rt
z^blOXwvze$MqO&Y?cT?*BMI9R{t3QpY;oitMMEaNnB2IL%q^|sefv^sJ(|#@dvQXH
zS~jDIBJ2IeG}P_>-32Mb>6Clh2ka@>Tt1ZpaH{P1>&F6kiJD2_o8G-H7YLPZR21t~
zvg6iiOAK*R$szjuAmvCdqw^--DzMr4)Yq`}i3!|JBK(VhT|6M(3l?^D4POCqc|u&2
zN+^Q&XtmE<&Re|IpXGHs`GjxScple1Eb=?=>XoV?grY4Rth1qgq`VN))F2=O(rZL3
zGGW-N-SyL9q9X{l7>lr?WWQ_?$+Q`CHO=W2qh5=9hTwhFQ)$b7gUSomMYuU-5Of06
zkkw2b>$f8Pm<LGES?#+_d(*6vts?M!Ywy%Q$%m#5PqW9@ocsiMIPwj7j=^Jk2wMEP
z(TiPO5oYmR6|%Yg_tjgcP43E<TmMd44|+MCgOgGm$BXcc2me&NQeKBw|Ctlz2mt`@
zUqSxK%IS0)Bk(|$w4L$S9mZsVg9|A+fCz;?94LwaP@s7xGWt72%wr{?kQ1!{C7ES{
zj1#3?%QK2hkMp9&S@lk|g)IS${^vXDV)<Epks>l=oAm=6e~@*Zh-@M}jDVI!m_6yv
z#~EZ^TmMqdFpp8;8kbXrRbP!iuMv8a{lSAwX}e+e$Olh|6}Qc}R?a2H7Npw}#*-MN
zRa-wg;LO*7z{&Ym6%F0w;wZp4w71<b7pvf#O#<Bu$|Owcs)1&QoSLh+B%1d0meoV{
zTdJ$pibmz0fQJM8a|qK^JM#KeIaV?m%$9v^y)4-*xnhfvc^*xo$bOer#VjZ@Gndp*
zrpN3^wbcfW%_<P7G%XlT-G!kH5_5oibYxyg(w<fsk0<J=yrL~~kgJ*;{&AoLa|-@Y
z74Pi1c&<_Zgw^GO-uc#X)mz5Ug*e6kME4UN8!tofC{zldeO3G45h7wE*V9tjRFy3C
zLOk~6{fzVlGO6Q@2#lM0F|x5C?&aqvTm~QlI=f8|$ju}}k-w#?s=q6q;uhQ&K;E_V
z=6W?Ta|S&Fg#Ne}EjBE!^*oq_4d3?e{{187$X3x`YXRG+?N)zbITOz1-5THoV(UMx
z(M32qS*TqQa*!W841ZSBkO-}&tI#Ll3#!qh2xXLEI~SA{jBLwh77W^kAic2HO2QrE
z#;3v%2QjKdR=^A=?z7_iIz2q>G`kYB{(KG;nIr<G!~bLh6YN{y>{|{$5)tW=%l6?z
zwAG7qN5o7ecxEkzB*sZU-;O3VP`btXL$~XO)&|Sp`-q9}s=6gHggp~l+!79^6{*Zp
z*g{c05)15Uk#qvNkqyW$eB<w}F9{pA*wc^K4y^Pm)savl;>hWH?Ewj6@LTajxN+M;
zNc&A8vBQO~$qhJV2zfrpfmG)TW<zKgd=ro0EkO>YXyl^7q0C`44naSqv#R#+@+jMb
zHedI&={zQ4$Yim(fqd50aJttHMkXdn{>U5KUq*|Sya<b#Em5Z$gthm`#VVx=eQ{oE
zO@fBzur!GT$0Z3P(re%v%!*;Q(<zb?97h;%#RzNYo12ith}Z0SNQ_+w2kcW{keBZ}
zNIU;#S3`u}c#x2g`jhLf`*_{0tN&u=#F?mq>Z<{%btb*(Rb4P$u9xiBolhNDQJk+A
zHm7DqDD&QHY=VOe>^>;$J)IWFK8T=F;#`sV26JIG^jzLa6NQtzL;31E<ZSIOh4gAG
zcK3bzUfeR%ooNQfz3RbbR5ch564%4c5-{O0Gu+E;Br5PqRkkf)-1>RU?aZQ`0Z)_!
z74vU@x$C;(m-e_Cz9C?Wn{w-XSgI+^=Xcv;Ih_G<X*zu{%s82a`ZSIbaRxWdH6{YQ
z?wQdCX1RKi4&d|VYx*|TgpaH4*1LMY>VC5(BDEhJrURQz>X6p(GyrIFWKsWN{fJoU
zL)RpX@-@_>jd3zTQ`eMuVa`yNFF^Qfn}iR`4#<1|9`o@9{Y@4bAh&iIz9-CF_GXR>
zhnIH&Cgzq$Qv!r~o?sA^KF%Ys+t&ZQQGLNq-Mun%U@jTV3`Lc?+k(vJ0(T8%Z$4ZC
z3uP3Oi|u~Jk#aww+yCN)bS{sb)7V5I#gv)mTcB^qM~uzinHboL6un8VJ9v%@{Hy<P
z(MjKV6DCD(J1*9m&;q)!a30*Rc_P}&Mksb0cIE77w-E0}=V^cWNzxUOkFDP$!cS9I
zwZGE5-&Je{LlJr)>$pEOO{bW5SGIj8I=m>M1_`D8$CW=RpbC6xs`|h@oXkQX{M<IS
z*>T^3dpoaVnBdlIvieK4)(!ZJH-e{ODPn}u=N#wwQL6+hl;m;WyMtfMzr!m7@m|E8
z=-WlQ?<^x<hy8&TwVFB*!#0K>H^0H%soaNdMy30vUH=N^C*sSIvA4%syd-Ycx$6A|
zc5<|jCLaKF`XN}gT&TKie?o0nG;PivfZcHPq2*+ylrBPPdLC&PIH;N>vJxw=K|raf
z4b)m{dg8217acr1M}Tz)-jS^Y^MzOKo#?&5B-N3}aPJ8*t!Fq!-&D{0JyH3u(ah~e
z&3sv?jeC4MJTq2_^(&9LVKX3*Dia~CqRQ#G_;g*QDhp1>FD2!aR1l(;%xbj~{mj2G
zSV&>6eNj6AB_S%Ossp}j7s{5p6|LRBd0Yz<{zHytH<H$Qcc>O!Z7$JDUFM<zB5ll-
zNHj#UMKS=Rf|Wc6N?1Mol$1bAyON5f>7mT(=V@70FYnVjf;`WQbo0&N7u<pr5*@b(
zj%zg~C1u;J$-m?-VIvhHTKQ0<{oC5srxV9cz~1)#+*HoTT5zx=!pWI1l;8*l|Cmk(
zDZ{(W7?hy$3X`gjk2wEDHAP;T!P#H@b9VB0m-__a;ssmtO)F6+nj^qM4OR#OdBB=V
zu0BdkEm3b8d&rY{o;bzk7mr&x!*E`<T;QwThr^F~icgD3S}$L+98FT$p|jtY-r<%>
zG^hTbwQ_NkKauS0iCs!Nre_9f__D<6k1r2M4dobf&D>Nu#MFhHRZsvI#nr!*xOimZ
zSpcUbo@ht34&d-e(Q(SwTOUus(H`f9Hm^7)-N3&utn;QTr7c7|klEU*<RhfYhU-{b
zY}AzDTbve3JkI76Q_|cMwezxJK{y2x-C>|{e|~M{o!=6S-k}})&;lOm`hsrvSj023
zwI3%!7AiKx5*bNDDTt);n^@zWO-oWblcY$lk4ONXd2;fmDgT{%*ww_!DgRT_$&L-&
z$D_uz)3+9B1@)9}^kkFvGjLW)o(eT^ouH;2n$F7u)!(~p&`gYgaDgy25xL`6TX>+~
zW7~9xL%Sks@4z9do}5qST5MM7x{|qg2S|fkq)y5|ZQDPQ=#RxJ|0iJLr+SO;?WC4D
z#d>jzUt-fxzndLAG&^fP^b_(gZX82j+VTWRg`g+LA;*s1s1KQ`hyi`TeSUlAj-$(a
z&Cqt1`z6p|_(i#F*<)30H=xMK<O_tQJ4-eFJBhuo{a71@$k!gnQ-ADqgCY4%dA!a|
zuWcc%H6jVuF^PHr46^DF<h}>-(@}SKk0iEd&eYX&pkQ76xi&<pY^;Fb959$Wku%<I
zqAnyeW#Y6!9eo|%ptI0>(CBVgxP)@WNzJZY8ZT(uAFQf?io?&?2A^&?sDOn%8T^V8
zc3aj$O=>(WtWqcV@q5)|E<v`Ml4#U_JFzIdA2%L-(CnCI4B80(D^H|u`iu?uoKMJw
zb^opf{h!0x4{j5oY2A)?-ENE?RPtr@Pa0#4OYceU$P?ba6W;15QTp3#Ugvqs@ak31
z4Lp%Yu01M?K--1=nBh~RP`U+oSP{apUc(Qaq&X$Kosvm}$o!5-dKc<U!rDZ7amAog
z=NDx_{SCbxT03;(FPM9hKbTPpSweKW17(3Y?zK$1{#rSlhqE$T-j8Inwud9&RIz`q
zDLF-Z$p~Jvb11dXV<vGfOB}!Z_A?17-gPMODCtFJ(r66fi*lzn(-o#AW;=zg*Vtkg
z@dpFzH!J#M+wIQTP-jybNKlvFM3!nT701}7Y(XJ0@(CCAn})0)Ea}W?0ZYOh<!-_K
zV<dQxN;?B4!buSQ_HJ%AC^X8F6}muRh{qAIudVy}q6-WyJOv+&sZD?EeiWbm>+c3S
zDA|1Gy8d=ZIBW+V8u&onfdR*9alW3B1-#S)7xl<O79Z1xB#AP2+!P6sRI<eOll^hz
zx##z@b}Yn0197YQQIWyePNaszTSo;PCAl^_q-W<@nC=Mpxi;escGIgeY`^2|oZocb
zI3IoB=-6%T%=d{;1Be)*hDHnN$ga4_3KecT6t3pXGN_b`?mtrnMd=3`lkB34WMk&K
zI~WFhi5(+zYAO_(c3rTj<EdUb=Bj?JEg6#Cut(5u@?|oOl||Mz2}5tnalqxF7?qI(
z;2oIb1daOpq)5$|T*qkC9U_Z&zXIzIz(TkmFpffC)%L*Va^WZfz8!09M?mETqGRi`
z2L6i>5uCb@^JNl9C0;AP;IS)rklJKRxA$LSWJhs9$0Ln{s8aHe#!)62c7m<RZF*ik
zsOghvlCNz_yLloVOci^}K;wwUy;8auR-FRZtn(Xw{2kQ7W<Xf>Ctvn_Q+Jlb712kX
z-USO%QHoK>e~okrdO=ntTR0Q_&ySk^^zjWV$J(OC@<;A=Q>tO-xTdKSf8_L{L^%}6
zDG3r2Bdj`%yy09AKfCV~YrbYw6HB;?In19wJ=HO8hPu>%Y2RcWC+dt&C;Ib-rA_do
zt!CRF2{h!#6{@*d_Txr`vp;`!m33pJ!=Hy>MJ1~w6mtbZYfK*nku8DxbanzSaE}5N
zd@%BSpV%H3qqIAn+3(<poJQ0@EN;N7r-2X$4Q$`P*x^Z1G47f~TA=;zKeP{TB7stl
z?PV$xBj6#8Ds*6p#OfW!P&W;2v^N2^B2=w(I{|uu7Pf%JD93#AT7AF)sVpb%B1Qt`
zl5Ep8QjAywUQ>44!u%cvm7NuO_BpympKiG1ai7uH7biY1(MCZ4Ctgb*xrixKAqh2t
z`pm@?0#3##jB{AX2YY1#oqP3WuUwgO*`3r$VnCN$z2DknYF;t#2*)w|&WcJU@A#MK
zNfA7(xOcshBYrNMO2NDUY#uf^UQo_XqV|v##Bv$mwuy+<?$ykW{%jlLwtt4)pT%-t
zaRyKH%9cai|3HJlFOlgeGBQ6gZ6<8w1nr`SPP)eMgZ}$WE*|>TK-chSsiOL!1-U0C
z%MqmAWaCLk20cm($_H`h`{!-f*=wvyK0(yg{$FdKwR)kN4a5n(mAZmW)vDBnsXfDK
zgPCdTuH9894I}6F41r|AT~HhVgGGWa7rtdT3&lqsYO4y-7lVD@`F;W-#ZHn-aEY+n
zwj+o&v*2^q1fe0Q&C)N^{<T3u#-VS<a&}RUcwp~oxvo9J7R?M2bS8iM=)NlVh}gW|
zIX+Ww`vmr1_6qo{C-FEw`}cO@q`&*_$@2gOjA^15mK&`<lfdYNk>cJG;p=6JTBe^=
z;EFCb8gs%NvY0<bDfg~QUeV{x<ENLlkm`W&+?g6hm+PMF9)6D#!fhZy+2>#TzVq!;
zZU5<CC0H9Pqlgjd5xCCvq0I6C<$Ji1?=2*JMLzEw0>$3qLtHBw452M7Dl%ZeS|y~L
zz+`1O4e9D4s?ktx($|kmX9^rK6(<(@RhE{hBNDHFICD^n09t)g&dflfbK+c@f0slh
zJQqDrdE)Fhvu?F!wSf0W_@mIh2Nx|+rXCDgD!FEP&av)Uu)Iuv<|X5n0Rv;bXC;g{
z<U5vh(~nlan3P(osGpzMQTOPwqkIjg(Peeb!o>U4d%l!kYz?`R-^gi{(vx9b<1x`j
z`@pA2-(N&{VV(sOz|f=Q=D}j`T@OkVs|^ldo8R-3`+%lsIQC5!wD$X1xP;%KZuzjd
z#9OE)b4&8v*`2@kQD!VYV6Ng<<L1jQ(S(hOBfaHxq;(fsJKeuZB#xKClNVN!oV2<J
zXP=a#ID|3<7-8;W5{2$k;|0*fg&7OJd3UGcCt>p-fM4_MJ9P`9I1tzj{h{U_CDDZS
zab|L@tH{7(eis&_>QWem`0*`n|6>g9Xsbr@LfaTL^1=PwMI7Z!<h})M(A$Eru|mp#
zN(dX`pqGbXy-BYJRK3lK{$GE#+U>#o_VzKMj4=ofbd30i64N!$$@#P*yyT%T>M1Uh
zZ)vbAtT`I%FA?B-O|QqwUN4Ug#QFW&>G@Qx$}cn&#vG1!&ISH(>GIev<loKms;Jmi
ziMnYx%Cj2;s@wbRT(?(WIyqKY&%;8CLpYSK;k+ydT%PS$2*$>f5S7z@a%1W4tt{G$
ztX5gd&T=c;?z(ESQ7h5Wie^)bZ^G)yUv(oUz5CZ8nj4(iE{7R2;&ZQiaVxzOyMaqy
zS*Bv|9H`>6Z|Dz4cmQq()`?<OHqBBC6gTqybkaHQ4KJ+h4I4was|35%Y83^K3Tb>d
z*_Y#kJCNsNP@UPT2(GMsr``_^B!ZT63H4S7YAw5yLYp}RcHok23m%F8z1ji&zHfS(
zjtf%~G7$~-p>3VInzMC{^w(8f2vK4eFVm!%$@=*=7F}Dytxd(iptR`4kL&q?X<{AM
zu8_?2l7mU$yBwTvrA@Js@b=s}TDfbif0=|gY`q(SgH1cdwb<T22&JdJ7v)RAQ@ssg
z(u!KM8c&ihHPE?&j79mFes>0T=nnr5bLM6oqO3y=rXA)~eZy<H#+c*<1}W{Qe1a{k
zk>rYi*+Nbv39E}-SDiM_&GCS!M!hK$P}w*FZl>Mo!8yKSjHr?Wie`w$IE#GkriIKn
zJ1~Sg2O^}P_HZ~Xu6g7itJL2N6+={}QzdBW0Sctp>R-0E%pW3rJwZMvYg&_&bpwGp
zp%31R<r>p-KjI&;j5Yu58?9itaA$U2*6XHvz24{o<ULR0tL+YGmJOqMhe1LmsL5t%
z)G|GEDD?<Y5iXEK5D#?o@L6MN?n&9D*8fl~Gi$PM(5ZRjJ0Rd?aUrXft}?B*#O|Cz
z)ieB6E2uA>tiG(<p~Z5Eq)wR?D>ycsnR2p*so@M!QWC-ko3p1q&fsX+a{4~4Y9hgN
zORtT&M4%Q8CuGkCg<Z`FO(c3`I;1#<KpB1aS0i^2oKaf9#U<`rES^ly3(owN((gE{
z2XNB_-*rExX!S-@wones*+FJpDp*u8Yzu3!95x-WcO+>r0<YuTYSXR{3AOf%$F-ft
zH7j5osT~ZcPoo^_ncgPC`NXal3@Bc+PJPf)<5wfc$95x4f$fgL|Ky=w+m7|_7$ZdC
zC!q&^zlcgW#O_bQ5=Z`GeYejkQdWd!+oq(_sq~twF?2*`K#gfcT71)Tms+!qy5lk;
zT#-P1;Y)qjx9=2s3OJ{6MVg1?9LoE+Hv>G&V1wu}3Jm@rx$Dt7%$lBP(_QR<8C&Ze
z`>wa4%{Egul{LhlpHBgEX&v7~&NFN#PwqavuF3&UKIkXeLVa&n6R0$KB^moTT~MAu
zz3T(7Q-&;4f{smj<Qs*XH(rA5_I;M3$7vQM4&KW`zUN($vCDe`7||KTF+q;q{N8ph
zv?e|%cAT<VOSGwcku&=T7qU2k2J@wW0zfS}fZf$vPAn^GKf2t7Kywrv4*m!&HWwrL
z4J+d8^W>{r{_+dvA1E34`r!P>=iWfubnb|n3~Fr4|Cd`Mqw*tegMHfcWT)e`pa#M;
z$NqJ<fN3zhVih+%Ba!iN2Q6#Xb{(p-R0jxxtZQL%$Xk5q{9$`Xz8Yo?yjQP=?>L47
z)JtT!scaFf79MHsPvDJjYzW>%pbO~^)b!y+S%ie~VuQ#TD<trC!v3Z)<~(?Kux!`G
z35t9VTvd+Dd_?evgx82AD#$3-O09*h^kT(hU?^FirkCF4u=rp42h;cE7Z!@Uk6q7X
zw?TEdx0PPWTPVoYJ}l@dip(oKYhvY<YGUF<rvxe+9zv!_PL&bvNSId1-_f2<H*;~4
zRl$;bn(}B(C9JRjq#ECWXA2RY-Epo>cb;eg_onBS_O-wF2gv*L(33(bI&2)9VH(v*
zB=&J?dAQwl)CRi0O)$|HW}Xlyh>M<rqxn3?&qOvN`)bt=!(M3PYlNuENat*NCIv*K
zUJ96Wu?nIxxED%;=y#us-`!cET&)>TRQ*`pQ~RA$>aIO8nOL<$&%7cnOY`>g0=qXB
z__1lA+uFhW7M$?6_z?C-s3c*gT{9VL%4GdSX)r-UM5IiJKI1VTn7>ckPrxr=ow04I
za+FL%XS}sUZfC;7uRs6IE>29!0}sZM`XX?CP%-;)eyX1}G^y=7xw5jHAfT)b>-&q4
z)UL-+7|f66kF$xA5GY9iPUGVlHLB)%b8aVqduPP2*Q%x-1_DoXua7g`z8_OOa6qg#
z!+FQkre938YP@2U*~#dCvtpS9fAo>}Y2p^E4>yjz`?;O_Ir(5Ic_iZ8pg-xk>uY64
z^xs30q*OPx#z^xfzyql<6}{_pH`&@;^i668onUIy<}HqtLD$cn#{NgrIY!6XEl@bN
z(U_Aowrw?yZKJUo+qP}DvF!$pZQJJLPQRPqSy^k=Oy)gj<Jr*L;WHh9k7A1tRNPSA
zkRl&BSZ$NMna%Q8Z@xc12vri@xW)WWiZr=O%YSUX^fj1JWgu&9pR>fvO9@!Tx-?+G
zqN44tFInaT4AalI`U*t2pSOcfj*^q)gQP%OXSef4)AhIk5Cc@~Nn_@rIb7WA78G?%
zB#SAZsfR<0I7)q>Z7I=(Oe$iWPsY8@GRL?OkIci}eYR{x)#f5(is?jIK$0unu#hAu
zTZs*@?qksArYZ^!-)MkQuKIPKa8MwZo<IM0h<9c+Hac=bXM)VIGG}7uGkP=b7^?8-
z6U*k?E@J~*OhVcRdfvHSs#%LFtO4X5zj&QB4Ek52L@D1++1Df(B9&Pykk&6bpttB@
z3#Tk(_I%ZC=mx_6@MOE+jutNy`#$e95|RA^VOPE$er{Uz7zSg*2L{wR<x(b`9(e!6
zL+=x!CJ#XWl&SN-zn?YszXfI6dVPf2NOFM>Yz}WdK)Oy4MatoLR%|C;426u{-#;GD
z-2{{+P?mN>`m{}sbeUkOGCY|b*v@wA#x$Qy2T#IGV($D&S0ecEhyr6Y*VxTUpeN;!
zBo?!)Np!+MDM|6dsN+`)n0+KR_2OL87~@1_g4I6ZSLgWc(}=$^Mc0{Q_<c<2i?OAc
z7k`~(j6v8Yk=GONX22#3Ql1f!Z2`wRoVNC+49ty5{EAC+yvsW7fwa!wqJmcuR$nRE
zAFHuk$WAgIm*bPv(;m-F^!ovCNO*wWLm#-m&@TX4J~3X8wspjypxq4;5~8r3Veb2<
zM+_+hAYqFq2mkG#f$NQ{jqlQxRC(SQASTkWt_y@ASfw(f3Te51-u(!DV0(B3xf_Mv
z`nQG~l!^6?6OrLBM8+(bRRgiXk}IUYoMqtapA5!TV%gk`RERSwXsq*a#V>?=1x~@>
z3PZAQ(ZQXReG<*yhoXVfCH}GbV5<6hYnZq9?*1>Jl+x3N@3)^2%q-LQ+=0D}7qdH5
zRgj4#;`!uH1LZu6wnJ0@RFf(V63DW=_Aj7}5NyXq9V`(aD=Q4ggc-EyLruTpXS}<)
zC`SNcXhyoqDE%NrJNH7b_xM+d_ZwKQ?)TgA>$|)UB;SvTx$B(IHzMjZT8HTX*uLK#
zm)|BM&Hpl<X#Qh(&i)D)V&p@7T7i9Bu^<xxK5e=gq-Ur5#}I4<TP;L9Tj)ySp=Pg=
z115GGgeA=srFrZUeM1_Vi<;WL3ZN#3_&1m8`MMDQ1w>)ycP3#P(bP*8UA%aTu4n9}
zesxxYD#%x${)RozrBY~D;MlK?<qpI2mQwnOCs23SuL2%OsEUHDcZ^#DE6y-D@kP&9
zWzDTDL|d*I({^u*Um>7e1_mC_<*@10?p~;oNKKgi{U+SA2t}tkq76%hbLqDa?8iFj
zx(k}3<r;|dy$87Ogy2wz7~0q%!Mwf|L_W}(>8RG|t%zcjP6_b-fN5hqIO(+RQx2j*
z6~!1y@1%QOQBu*GE=Amb%}TB`b=3MK8?|S6Lq&GId~bXe_#(bAXn4uLGI10Rx9+y-
zY;u+$2l0ml=JWJW%lMg`%WWtq@J?C;A;|k2QBnp1(xBEPm$D@%8CoDEyWeW<2OC8+
zfB%^Cz9ioj6H!cr*yjrm*)HNF8CukON0P*>cuDN&EJFdXp$$K}E-o-w4LNW;4ick<
z-0SnQ<4S(e_iQl_@@z2&oDIgjcYdG3W<=RH@uaE6VE_3H0UYVp9`A*<$-fkv%UL`H
zJQ)twyU$UyCRvt!6ksAm4wmZ&^mu*&B|^L|J8*yx26iE!0b0~AOuXrxy?=P}3E4w-
z{(&G}#OAX@Lxm&@(JqBRD=N>&QbGt)L_e`g*lagjGZqVhK(gG!3|d~d<%r=*Li>a?
zIUOhx!V+0{9Z5%|m7@xdTmsO;%kcMj&SEA>uNERCPiiMw5st-7ZgTqjHFbIR;+MAL
z1m_IA;@9BCPRN^W$>v7~U8s&0P3LzfyKf5l489=fD??z(sQXhG5`4)N`?)g~t~jU7
zWzg9H|C3g(^*xHwt95dq_P7d!hzIf?>I{=hYiZwtMnqN=7`e;!?~64eJ}z)CnrWFq
zog<q^ge?jP8llYBe#E`bF0w;>8En1ir$Toyu2j&%an7dx^Vk(gRuy6Q)BoU0)6+-@
zhuPk@qxW~)VyOK@pPqc{o@YJ1Dm}gk&9)noaA4V}XxNIsREL%g7yKnL@x_TP0bI%A
zLEd&~3mp3kcNi>+dd6~&;dLkXj<>20`!H`^11Ji)yRxA^Hb%Gg?G2vQLrhU_B7a%<
zYkzf)PVyclE=75$C9qTuKS)4*MuwdxRD)NVQV|2Hq%ARSmRomy&K@{|*jY=#%6Sv)
zAkt-_3ggmDnP(EAX+r(xkB^8_Zv`6gw`|e>mSoSS?vd@IDI!FVF)dAHnz%Rc1RWtd
z7DmKtPJ)Gek-k-I+JXC{{9EGScFv+<#^hOw3hYFqsHl-hpdQh6i)fPXDyP=<0uSp&
z1Ii0z@{}!7w~*waFPdA5?mXoKQG7{w6g$a<OM;&k#m1(rYr0^B{&|FJTd$l4&o%CA
z2;89L$~>`WkV$MN=$T&}FCVUrS+`E3j@frgh4^J6Ou_dSbm>^2%^cvg7ay?<$}TgX
zR5>~uoz!~M{EdeQWl1T+0%S|%{_9IG`}V`tZ<u#-iF;|eg_9*v*kl`yLGFB(^oPMx
z{1Yk2kU}UaP5U8;g87IC<Jo{5-uSJ2qL3h|alg1;<S|9e>)rL;gyW>3WP_Gv(Vcyo
z;t6k4m@2(j2|E_QB90-%1^Fim0Lt{~U|~2`3`{f5Wf)^8HaL}ZI5#|XworI=vG$n;
zQW|@twdiulB8z91K2fOjO=~~n)sb1Al<y$v%wx>M6iFft7|j7aJ$QAzcx<V6UU$)W
zka6&8rEOz*D>N^gaO|;H8UyuY&}K|ot=)#O`3Za)_z-%5_rCJl3gYu~r|N8S1k6*F
z<(HK~9emTmb(CI>b(X*!ExAU$Lur?6kAgcio^tD+n}BrZ=7i>Aera+cMeVV#PWFu2
zxLPr#jko6cPV|=lmy{__;ah6hI5#cGTgH*-6C?-=&=2t@6(-fRR)Y&CYk~}LzG^2M
zz4->k4fbqZnL4}Ae@QQCh&G(dN~CF%EVDUK9q^R%E4DqW66d-VRs|qREO4}e`e19*
z|A*C%1wJQpXpR6%S$V$L#_Btp2_as2LIMc@D197<$;kR@;4&lOa5_pg(Esrmga-*}
zYG}XNnIbR2O=mB8Z0S0<rMwIw?;pRtubP*Mp$1v0c1(hs|K@Sgq_Hzh(1WPqb72i~
zuTjR+NZ`j~HA`n;{&Se;D7mSO1W!-OYC=ArNqVF?e!;?c8ks^Vsc4SlqpLkm9O4!J
z`JGKpm_dIIky`YZa2ZQf@k?<tnhhmgqm$-vaL<Tt+Lp>TR10TUt7nyY#3@}Y#-5}e
z;Lq5WkBp9m@fOz*8BsVCozoq2l}9xmjuQdV%|xJS_eL~A6(`@4E5K5ISe1W=?I!QI
zk@fFaIEq+vJMPl8kz{EP<j}@zlb{=mQHWA&f5|dkFkRP1eKYbW5T2Jh#WSB}!T(~d
zdG0;(r0gi~)9xQxVMjwj5WdCxGjHehN*A{0<*#$*IUc0yKAbQyd;QN^4ke!PUy-SD
z?gCg+x_cb88`g4av`GdnNmuE=6A$Gx>P+s0=MyOolx)5}{H%5^0SHS0S6n|Np$=u~
z90+zb>+IGPY7h$fSy7ZYCNImf>|VNJQZs8weOGe8SWeUh6-UGc8f7H&&&-qy`ITu<
zL+!+JG1qfK;+dW_M^IgB4!S!74I=TjR42vW8OG!vl(*39w#rE#v)C+9SY8agXNGF6
z4p^8iHVMa?qz3%n9xvvH$klrHAGz?=22PIm58+(`FIc1G*i}iIIYkouf@dq8e0p9V
zYId@=T4D6PZzyR$0-G9cI`*Jy(hdI$Ahy$RTkLc;{+Rm;5-4GfHeP@JBTV<-nuYa6
zXEcD*DH~}CWq(dPR!~XE_*Whdbc((tblT{$VYtQV-0pr)AlPoaAi{2kOhw2SoBRUN
z=iR(U>*yyTRrVu^x)&XC#S*H+te67YanQa;H~nQ|yk})3y~oy45cZ412qGdF%W_ZU
z*HHzxA*iAho~Um&AxJAZ2_xltECQ267UpFdbNu-_S-DOf3*v7ZKJ<t7*)U_mJ8(qA
z5{H%$Y_+ez#IdxWVo1hC4PPKCQl1s?en^eub1>u@M4xLM!*&#^XF<K&4{sxBddw?<
zcqZf9w{gC>zAi^O*D?0qn7*%bdHw3N9B|3Jkw3Jl%lWhuZ}r3V@S@eLM!|S{MPMx7
zs-mt^MVF41tc+@PvE0eEdnE*g-wUD(!7zfK%FH0OuH>wlMB~E+-gmW)A7FKYqapJt
zNK8hvtqsZUYr5i{92d_?bwxy^DaH#tSp=RHixotFK-y8c)W>>j*!Vq2?So#y=ZTEq
zI3Mn@7%Fftw?6^wuMG!lL!rQIHW%)Nh5-4kPxMV3=qRwFl**_j`k*o8al}(=I*PGu
zmZtZEPxM2nVn~?*LfDY_$4v{k^@(-?g}Ed1H>Pnuaw>mI#FhFG77)J@5|Ul1Xx;bi
z!r`oE9bv5nb%20?Q*l$s(-~x%?Rz|s_xxv8v?GCX@N`UFPznMs6xnrlM7lo@)M{_j
zQ)-upy=Ht(pK3<iR1Zq66Huldz=ri|)^*ji9+PWk7^(bu=EbE6DWg%8P#~<4*$_0P
zVVhB~uOUBHjAPTX!H=t_U&CHC2pBz5)^U>!B%;N>!fhQkFZdMu&!XBA2D_wdN>zet
zWH|L$U=1-RQ7Bd{;o^<)1hg2oxs*l@m7DNrL^^V*`QR%4MUl3Rfe_NWh<_H<JM40V
z+e3kg^2>T@Gm2gtN_RvMuRJZW4J{dtYLo47dVroz&ife5=}4DK@7vVqkw-nVi;NFP
z!X~h{@Ot0-v|L#=gs9+$v_ZCr60G5o;qai!njX~0b!Vp5>;9;15QZgS1az&o0|FVY
zi#jd?%W_|_PZ~h=b8&pl8U+zs2qJLWpJS5H?ikFxVjjRvi_6BJ_n*~2mO+u_4hG+B
z88Ug1bza|zQrF}cSM%vZM-@6%=S6(WS0=3QNRG8Lu5B<L74Yx6{F2>aj4b>QVumQH
z(ufHNa`OHPVvvGGzbFMjeA#oagAkqGjO7g!Q&Z>n&~=n%eu@AI-use`N3mc>S_S^x
z4uOwNH?H>TtD!E1Fp44P*jDYhNKFUOEyAx;8%zgF8Ba)sU**RU72bO)MllSe?17_`
z5cwk}3>W?!RjxaELZxBMDdZQ1z&7WjSx3z>{0z;7R!lDcv?~18?(CZJiKl}@g3*{+
z@EL#K$j2$HrJQtsy6$^Qci<4tHpsW22=$A;HQ7hL!s+27hpJB%qW>3P`5`gi8Rh}}
z!&iR<O1nej=z>`<{SJXd<&TfWBghJt?D`r5v~tHz&bpQQ{Oc(%n>c26zeo>lo$@lu
z-;1VP{7l)%+xrc&@?mOL$M&d6_O}%}whm=_;!?wT|B}brIhPFB*b32Je%#&MwEo#O
ze`fT)ZLgrAxZ3d6jsr`rZRc1zr`<gIgr!4_=Wi1HP4c;B%Q5kYl&fJcgko~rL5Xno
z0(LcUYAzklSFF)=3ApU>glUgo$^Zi_d&r<$0{GTJ!VVE<X|0&305#K`U4H0=S}Ec3
z&*-5buVBKU@Us^P>fRTQTORP;x_XqOcb$v&3cQuem^Dh6NrrAWyq1)zdHZJ@BP+`y
zvP$tC?--$QBzMq-Zs(HZ6W7=MC~n(A$P10rr0EM7?lB2z7e-K7IYCt(MJ$TYLK-lJ
z7iLfdT}RA^DI*c>0Ic?viZHq<upqQaU{$_ckIO7AY8((x``2GCYmRf*HPihvV_>yn
z`3vt9`{X77#}U0Y<>7-@#lJo#sQ8pq=36U*a2W+6A!RX~X4nCHVWN|`D$p$#_P6uw
zFo&MB6bkh>zEE$fka<+k)^XJu73wTAYK<9m(&*22_E)7^{soqi>d*yi^(08c8Sp4j
zKN7Fe-t-L)4;YMr76I%VmFC06fTWwfX3CNhldDZ<XSTM4qxHc~&jxefw}|VFyL=(*
zd|gAno~ZGK&T6&`U1>N}{04!L`nmU{g!}pLtic6!B&&*$uzUsjJdujepDt7xz1$xB
z8y%QsF#(t`%X<KiDWs{=t(l%Dq^q)_Y2Qx!Cnn-gw>eE=by$aR^(<Ni4L&zwniNYl
zkN=RJYmVMwL(<^2<FQWUd`#wv0Lgvx30ACrKz+-E%qKb_95pzieCFkj&FmC;1Z$o<
zj~@<C$=vbSs+Z2Xnu{Gx8x{Y9m)+I~**h#xZGu)+7%uor#Q`2tqN~e?*>6ej#9}BC
zV6>ri2J(K_VTC~R@z=+IxL%O>25GWqvd@fG@e8|LedbTYgB&02aiq2PaCg{e_pY{B
zbKnu%CCZj0-7a1SxHd8eXO3ui8hOdN$w)JWj9A6H6`860cZf*>0w$tXC4AGs=L#<;
ze$3xT(jGPoMl{ZqzQ@_JI?`Z=2a3$y=@iJ<u^zfAooWfkZ4$|UV6|<qj72!kyOl3G
z%8`73755<PIJma@B_<a@rLc;=Rhd2m3P|JwV?vo<(V=UNUl26woOmSOmk9mH&%4t6
zYhvZT_kxC`4jj9tg_gGt{clylGS&=gBG#8T^()E!>u>)4y`Bc$$z++jz!dl&q1K<~
z^3WzeLB!)wAB(B4o8Z}l|36nS>@$b3f>K8ReiMpLoj$C|TH#;J6P=8fJRu$yny8|j
zKJt{RGbGl$Ulh|CZdJsn6!ZEaf(_Vl*4|;aY@XjJ5@-y7RwX41(o8!KoneARr*9IK
z`GPseC~FNsFiw;sOG}`%WuYY!qe+O}Ni_Cur#X2AF8GMkzb5L)k@HfVXxkDyv)APj
zIyDg4t~&@A_-wO0rZ1o1%6p~CuM9ia5DD$L$!}1edYdMCGS!tMC^ANsyZbtlkK6vW
zd5^J~0pG_9<YcK7l{VTpC@6OD9e%;5gN=@{{fg1s7a*ePd93`(b2q`ZV<F@dKl|Me
z6yWa#896W}NlEj>xna(HK*<kGNOctz_zLh#!e1BQ7Qf~GJRH5e;0|Km={#%KvDj*=
zXdy}y$zV*5&~O@aPNlgRix-b>(w@~$<eF_s%I#u@mnx40$RGM9-;p^XFX)G(l2I(E
zUR5<{Qplt-F?NI7uVrT~n)8Wcwez{+BIJ8v7>C+a5Lu^M+6KV!;xn(tH7R%v?u7>X
zA`CaaT_SGRg5ppn>c0Z#6bz&yZ4?YpF9ukB_x6gC`9cnWs*z#i*oC3<K9djBbf)n|
zNJW?sSCC3@K_6n%b3qTm{)QiMg0IZ{PwTS(w4Fpz0gFxke+A9sw}PD-Qay>{|4tF5
z<rt*{I-y3LoboonaTFZ{(EezUNgQ85tjGWfQ6;y=<Kxqjs+o>j!GfCUN^vhbF9eLy
z&=@%3o5fl#l-?<m5*yutREOED4n|4B>aW0U&RqM=-^IM(op1t0CU6gQBcD|pGVS>q
z%9Gu#v_uxr%%Zh^SI!UtgmzT@O^*+GIcmv|Re}UXnf4JmStAn0QmOChPV&((bOzME
zW<6=GCcPX$z7&jYQHi8AF+GePlp(nnl&Zy!JO(4dC}aTvv+~FLKGiO80HBB+#1wk$
zC+@g{x5#rw$#y)<xSq><$Fh4#)A@sbJzwK1QBhVNL{1Bq1NPjZDoW+QWlw%<yCtSR
zsN&LX6ZYE_HdDXSe*L!b8|$7nc?Fm{0vKO2CdKw9$FCzAueZy)K54K$oMtC4(biwW
z1g^Py`FbfyyRDfF-C!9~ST6MYKR*ho=~xiyK2g4;0JoP|%|G^XG5r^A9-Z_?oI@h$
zT94XBFy<@Bk$zH$h@et>&=CAgC&VWHZpy3Iie?0?68HUVXEUr3cwFRp1gQzw%--zp
zZ?NF#)yU>uUQv)dF#SAI=1H^*P>NKdNED>v1Ab_<0>=?K!3IKi^!y;w+I8;-D#+a3
zfO<P`K%L0z@t+h+6j81H@4vhhb2Xd?7#`p6J)`Ap-Y0>h2PQ@G;mT`n3WW^XMU)~=
zH1s))1!UDJCESGvDmp|PvZy-!0V1a5%qB>yr|B+4Y7F~1oG7=4N8uW_e>43%XKImn
z-AX_WW_xDR_#FVQDzCjL>D{R9h35L6TS{Mqp@%dH%J!6*E>Lm@q~JK-%MjDh(!#Ft
zLnGYaw)^iQGw(%zsymej67RXE8SY#}j!oh8$Tg+{6SI=Zeh{pbBF|MtrZW+$V+|vo
ziN%l`;`{wc#3pdzW3kA3)^+MMh8wwzo*UjzZi)J8>8P8dYu_<n65>@aUM8m$T@Cf|
z@rR6ZR*}ng69iaU5(2Z1H4qb;5_sZYcU}ACaD;jlJVNY6sPB7#jSF(kp1>4o5H0+*
zxv+Q_qC+}y^qYF|l+&n4iT_>&Lb3()#ON&p**tN@?t)iUujEHt=$dTzkhGJF<j{eX
z%jSzb=&X{?h&PGVzs1O+Zt~{KLZO(!Ey`r4d43{nBm%w^7!WA^sG${Z2zsF^P`r_+
zW)YRBV*!{JOQ17T!Y&my!!lyi-T(-}D23-S1pQN#QIU`y`gSR!cIJ~5LXs5t(dGGH
zOpWI?4l0<*<L<Z*o=h@mKe`cv1cvX>R?Q=sD@>-hxn7xh$*%c>fkJQd4cEOvsJ*r=
zn=lH34;1uz^;oG4I;HUN|Nkh+DWWGjqfV-TAc}z>k1Mc@-Ot7#DGG3m7L5g8?!k2b
zRAsiF3)@ibWX$l_C+OZ@Mg8F>2-E2zyn1UrzplCDm*Xq_k9zHI&1N%SX%%xDw;{vN
zNagLcqWUvV8V*Y>+A~d7=+;ADH6)^wcIkX6!Sn(8Ck(EGEX8H3rGTx%TvF_}*j`h>
ztg;047wK4yAC_voSS9Komh?Xxf_w_Q_pai?a^a3$BXAyTAPdUA1~!r@dv{fYtVoWW
zo%^2CO9(G6&c?D~ceEnovED_4(;l)NOjoG0O!bi8&uJrrFe5bO%}<+%J9{LbP@SJ2
zS7C3LU2$-bR~=Wx&qGYaK@m5OAZSGaxl(=e#&*x&)Ak&ve$$lW4y|0lP1p?r%C+Ho
zS_AGRUGe~O#N>|Vs;~VDEb|Sj8nToaHX@b!gZi%BCs-!yI@Lk9ntCM30?&ou=6|F%
zAq4xZr<h2v!t|O=Hp{Y)EN;L5ly<)qiZgac)$DzCo563S!-t0dE@N{OyM1xrU#$q4
zy7NmQQ?7jJR51_3?D}!pR)hOxUuCD!EgPn4sX71>g+ILW5%;Im0133w^MXDVY8;Z+
zs`Z9M^=8=>t|B#9G;j%C0<=`9FtRh~`LyBI2STcWw`_V6+&@0`Cl1LTOUZTqUmjwx
zd^d@;u=OVV!lVuLFHr}oE0JN%tO&A-mX<liuO=?lZ4f6U&18w1b`iqlll#NK{7%-x
zRzRb;#1I|r4Kk)twxxqB`_An^KK80TEA1r94lg#Zk1C;qGOwjY|7BD!T#3hY`DBn?
z<wEkI9#*&E&a#N-I0hxQ)Pf(TP&r^b#tDbrvU)@EFWxu%Qs0MY`6GJSKJ#hImf)gA
z%#}7?(Mvyx$$bUCvW#0NTx4Z{r)gATPmc0v=Xk21Igh&TRF=b0`cXE`W~KeX7AF#a
zXfXV>LfaL-b!ytjUVGI}^O$k%^A(nqqZ7KH99JZlufPU}m9oiJ8y?5*U<SLBQ+Cs&
z0izhIx@Sc=h|l8=mHC(V9u=v7)vXg!UdIc+00OPf^Gd)?MdnmP-wXLvMWs=Y`a@S0
z2JN*@EmJ4eo)Rn81>+!w@d(6<*~NG|d1@RtBoN>y%>#k~dffFUbg}3yPJeq<5`Go?
zby8oBS5-xc_bRBM^M(SB2#z)$Q)}gQ8`VC-D_KDkVPx;NV{wXq`JR-al8?A6kz6(d
zkLJ}|ojF=8&M`MaHkv|m!%rz#jiL)jg&#~r^DKxzS@{S`3`q6A9Oa<?n*s5<>SCJ6
z6Us|oUR@6VEfd4+trSQV&z8}bL?Q+S$N33EGy7ar3HN@;H8p_DrHcxR4kNNWn*`hT
zd^{F$B82;a?5lc!_)XS!=ff*qP2a2Y;(!NEHtgF)1BvQ*7jvMQ!Wl=UH~H9$S@Iy3
z|75krZw%9Kexq_@iWV?gItJR}_dXI6yrYrYp-U3Z1VGQjqa9Y06l{FeysZ6F$<frf
zi4Z24f&*F1_a=;AlRjLG^;45#k~gXxDJa{*=@<2XEA=4vaE3!!MCY&!_?EW`3S4<i
z9`)`uDG}X9mKiZhZQM&TJHpU7N+v|zPND*)!jicyIz(-?C9|99JTw!Vb~<%X82N+G
z)sAi~M9ci7dkAY<1GX4Dez0!9bjd=bf4-V~V(f<&9I>7JP&2VXQ)6Wi8{jEcz@TNv
z$83@*UuYInutz=j+YYGx1isCA-Xth^BVG1f`91?dhM3RO7L$@O*uppH*VnfQCa^UL
zBBCWc7uFrhv12sDIJq*UPxcQ1D-}6Nh+YZCA3NsdkCY=9iel{*Ae8stDs(bOtbi<K
zqTtsvjrroOp}@i)6#kX>Z7ML+dEOjFJ#12Uo+12JB)6nm2K*rey#n0?rfyn;r@cRD
zJ&Ydm&TM`($yI1d$oh$MgJnxn=NarnMRbz0zj}Fk8CB|s83kXBdjlp^1P+o_w%0+;
ztN|1OtjA3YvV)tVzPK4*5g=8gvT4)dMBxmAS|XI}uWbIzLK-4`Q4jTtJr0Y>^CA;Y
z`*kF@bw|E+$EBQP^IDL!sHCIDi!cpOnz`k{L-rqbK?uDhXROw2{7YsUW7|Fk=-Ua?
zD9`7y$ciFKC5bt59WXnSF?h_kfuV}kG<%94Npr?I$E3U@V4J>b$@8#cH@h(Cei|rB
z$*m3j!{^U!iaG9J!3O^<cJ*lWj4e%?bP7LJreM((p`!1vf%Ls$!C`K6Q3rdw^wp_w
zqKxh6he@Uvo*-b7vO%r}WbA>L&cmpfVhqYRS0cbDO|KAaJevF@bQg&}R|q-K=*S-w
zXebNbqo~E;(wwt2zbqHlZ*LS@OuhTwMKX`gsz!4g?sVM7d<*F_Na%Wia9M)@NOHO1
zjgE;GRcQKVJ#-659Vn1R4RN02!2!j1xEzjh-1<Q%Tp#z{w4Qlso$qZIASvF>K9LYy
zrClF#)m$zEW15Ca7$Z!0X|Z0ojZf#<pJT}4OWl!g69!^)A#yRN6F`s8tFvud@{a=`
zugFYvN@_aR?uKZ$xk^-mCTkIe@|x*V{1x(tSjEf%1w6y*A_eAaJ<snJwuK5C3FCt|
z<tdX-b07U`ShijP;W;08syN@{i;Dn!(Wfven%%hi@y@o|_dnRzv7mU!UaSG++eH@>
zD2+<oh}spi))Ln{KVK{fa}1XnEpImJjK$e)`jCVqi^U?ASZ!M*-W(k4+h8$Ox<@tq
zb^A!@lV{!g?(cQKGm|1@P3I#*3cC27-)5%=D~Is=zv@KD_q1)o;M-U0nwj^zNl+PK
zq(%!e3Pn@g8Mo4GFskrSXegrpP>gXSPVd$Dq=v>iW=fcdm$Z3K6*r#Lq5?O|$=uFR
zn1I%^K?_6)Ju|S1>xWo&8<4$)Kj2tvC!2y-C1G_Dm$_iZ=#})62g{0P$p2o!^!HvM
z?R*Tg1a5q4#(LZ@#3ukXx@eE10opzKcjE7Lifx#?+*-&Gp7v_DKXP^3Z-YR?-12~R
zYI~jQ$ontMQt^wUT5Ol@KLv%CXhJ`KV2sa<qR~B?5Z9RyR{QTQvkXwQHhoKHqs(!~
z9TXktQbuq4Zz1A?-k_UsQs~p${rzTS2P7MSuRC9LUB5d|^(`{!lv9ciO=j~5SG1?c
z@^SD$t5E8C4EDC1K}lzkv|$>Coo$!6Gjp0ol?t5IW%~;F(Wv@oYZMJu#@Z5gkUX_(
zg)~McItB0@c@8?CAE0^&7*AX?stP2}<?~VAnl-ji6vZp8kS%u;<V>#phE+<tM$}mM
zl>y{3^XWlT6PfkZ^r3^DHsH%DnHPUUu<YW52Z5(b_d-L>d&xlC@s&mDeKJ(J(s`)d
z*TTnFm`ZNh$&!*I`79weK(k1fh(!N+KsUrV`D^vwAQPunxo^!9XiC8vjo)=Mn`dx8
z?)DEz9>G))1RW&2=^pN`n{BbQbZXx&neAg)Ue)mW|1&F3(6W2bcsN*iz?nL)Atv&;
zP$#+fkd)`ui5n1HGdd87xHwtA(x#A-S!pLzu-j|n*uMQPLTKF~u}C=ZFR*k8VP1+M
zfVxq|-6%$8TXZY9ea^5w3qm2(3-VEa8P#2L=-+mY+Yi@m8#Dv@TFo%n|9y-)<v=(w
zuOhmsQ=+qJ>|~8{@L2nKL<3MkOE&5;L7NCf0PJYaq4Kw$M#|Aqqr{ts8Y!ijR0vuN
z!ucePG4H%8CiWA|&7Av=BP-cyB@%JCb~#DqCH<gXM>j7V|D8a#mkR#2N&SkjRn1KV
z;n{H~NTt54=*uH(ag;Y<5Lql=H-GmudU=I4qIt?PN2kB7?8JKAB9^5sf4}9fLzt7N
z_J{c@tzy<6n;CvAuI)Vr1|3}fyP;Y-0unNEA6Xcos1Rtii;y2g$#MAfc}f6mM^F({
z0l{2Y0ZU+oh7oS&^^(Qw>*#$K?Tt@;9LIYmYZ5!&5LzWPej`r64UDo^xAYx$X)Ijf
z3d-DpEj^$nv@#SszQ~<z@DN^*!Wx`^Xj?pQyx12})DADed+7Y%QjY|&Y)F>T3!`ip
z_0d>q3NQ?>AB_c<BGRTV!DKvGn3myCqqdmXs@eS4%-Q)fY~|!13%Rr)7H>hV`;0O7
z<Fm=maZy}A5Dv-rwhwCe^Jd$%f)z_)13wZE3a`p%f-7)3i0_AsGT1_3qEBaVT8WhJ
zwfhU}ZICV#_I_`)pk?i%YtSF)2bEJ$rn;^P`CkT;l4Jc#-b2m*&U*ZR*?x}ZSbT^?
zwHai4NpRoCiy1DwKGeF8VsPIKVj89Cxdv2>%Fy~n-Vv#ZkR{Jg);dtG2bl#?;+l3A
z=S5FQ&A|rB8c|qXWz+v9esSY5?pzZInKuX27Xj2mw;4MucO?Xfk@WI|PzTQ^klMV_
zOW2jN5l^+Yr@a-fWFbOKv4Ymnwm7b8<-%Umo5mnvyA^xF3ye|f8?P*~naP&azqhy|
z7fLo5^<~W!jP6P<IEOtg2b?edAZ*)jZXAc{Nh2O}Di)G$49hF?X4zp>0_XMRSo^AS
z#X%efr+0(IULkI1QVE`7h5fi}g8Hh}WQCpWGs$y3$V3v>an%h=?DMSjya3W#2{xDW
zYcwlVjSTbiR;!k>m^swuCNnKj+vJso&QhE@5za5rD1-sCC!6)X5S0m7P0ZZ1y5@>k
zChMM?EUO|>FH70hq<cS;i@!50G_uk$%H$nF_1fC7{B>dT_S=qVk-l8US?mPo88S(+
zd026p9Dj>H-D{Y<<1rtpRiV_EO6(~ogw9V^#kwbT`tttqw1tYI-3XUj!;K;T4<_My
zyi=PM{JeM0#?SwKSRj>Dgi54s9a2C*a}En0JZY3#lvMpEA^v%C&r+|nUrJ}PfKQ-<
zgN-Q^vBxRSbwA=%-<*N~vfIW_9FQvI>;MYT#~(R^1^^0!$BvKXLF{DE^X1(LZnBKK
z#cr)R#y6J#7LNOUS`4(j5?fSB?E^B#?CsV&Gg4uqd(+!!_wXAa%Qzvm4^qA0I5WVs
zOou}_w=?9iv=M)Tg@%0$_=XMgT?gW4r0St3D5UYLF77~~bfh-zV*Xhy{#G^cS!y`O
z@+BBN7x+`Ie4G@VkU~P*;6B-Oh-(|lbA3)uG7J;!$fzY7gI%1pTZgDcLK!v&56&pD
z&cS6PrFMq~sCIDZuFIR{OBDTHMaP;PD=3QcwbX|llfGt>z-J>J3o{#R-5Wuk_fqmP
z{>-h{_c|mg`bl}4$WUHQY$0^w^O#wf3z8fXYW1hFakkTP0@8JU5K3Vl+Y~ouuE#5$
zDAfD&Wyf}f!3TaWXwzW!NJ{c__N%ZDL6wD?liKhY8-(5gq{C1Ue*l%b#~ZbW_T;$J
zpw2dLwpVXu^9bM*9xi*^=eCJ_wo3^GOymBqc{-D_vsC?|7fo_N3B~>&Hm9Wpq8J$I
zcGooiLeAoe<V!#exf~WHx}KZW=G2-Q@p;b{uy*&)LGoH0^QTA0#1g{-6;%WWNmpOL
z2{$Qm3>cDxhxbLfL^h!~9uUq??Hh}{BxX|5^=%c?0O*Z|o)UZ`OvvW{xSy*9apgvj
z4ceS2H!ySK5S}I_Gu8gR*TASi6#Fg4!+cQ1MihjU({&mxahPBknPxFDF{$;qGtY!^
zj4cWmD$TrbNvyTh=B<iDV;^Z7`xOH*P3gy>%q%nH5D)Wem<LU&M%b0@2dP`7I42$J
z)kGICFDyTwj8-=Z;W%VM+nyMJu68he+o(AS-o_N>m@d;f7E}M8Q5QI|@M|Q3j|d{h
z9F6aSHH(~E&%TK7Qb|cNmlFl+K+ubbf}Dp?jP)uuQmC@0;dHSe{HyFC^Hj7q)q}`u
z2IdrpuRJ`hMZEW5_6dd;V=^@M<`j#BCt}~d*s%l1R3|btr(bXG_sep;9+8dziCC5+
z@}M3;1%lxbN=h<Qs~5Ozh@tXD`!afbQi3p4aRat3A9U~gz_*<x1tDY*Mh%|_MUlc?
zBY%#91X=CYiUm6}?R4<SFO0PETSPajT=<_BkE428nhYhdg7BUWgVzZDV1MTVRh`y^
zcet`8Os7R1;EGwi!kE#~$QzWvO*xkv#Pk+r-*Ea<fD&qEW!D;VV6S>Bxaf!!S>iix
z$R9&g>2NmxmJ%dC*75`T@1dWjF-SHP&?|0vK87a+vOCXvaY1uiH&PDMyF)H^Cf|}#
zGs@+rn<5DETQo%5i)ZXN3bZqxaSnTI{-A!OB6XU+o4g3}%oq}X%GPv>N`7uUZ6b5&
z`w2{B36Z2S>LEmZVK6rPL>lb*Klk?p%c)eJ1GL72^y>K*K4A}%Lj9w*-UQv(DvOSB
z#VIP1X(gc2`Diod%0`u-UmmKXscQd}SO9{Rr&Q5M$*@VQ*Pt}twBSwV_`}93{Q%NZ
zRK{}F#nqmWv52J2=4(FLKmAqrWoM>4q(#(dYah}}MInll&R+altZZP>BWNx32>56z
zSsYNN1{Pw$g#y2{X=>to{A{|Eh-xjEdQf~P95xH@V>U^C4ul#y4(f!CxcoD#Y?)oS
zR6hg8fB5UQ>x~91hj`qS%AZo6!TsV{H8$SgZ}9h*?O6D%ahG|67@E8m-AfK<SqQS}
zV5<^@zpT7)__emCNTs18;3o~QUUUxgN>zpnl|@Etj~5Q0K5Ji&P$wd2pccjbBZkXx
zz@F=vU0bQG6roE^%FjZ8lFR&b<p*6IV?)0&lus(fix8VoM*y?$s+SpLS^r4;X6UpF
zn&)={77Srjb&N;-;4cZq@1Mmz4Z^shrm*({xYhhg%t1m6*Y=LTEr+(TFbk%N(4ymO
zeeTyDHf7_wcg>~~eB0t_<4AMkN`$OpG6l_d`n$F-?EUx%+q`+QU1nt*=4Yz%m47SW
z9TN(ds0+9(SfQ%MyA<0<Qw_?E8AyB2+Cb%EMGx=!lminZF@Ta#fu>JVUq78{9A-(a
zKgCc5p+G(b?z-322G)U8i3iBLRNN|H)dPJ$VAU5%i0k3A3+;G&Z5KlB>^^nlq=HTz
z3{(TE9A+4=ue7l{c|^Z0h|<J@ol=xMkoB2g2(|4gcCbI_mLiqGLQ0D!Xn!fdLY(J=
ziM2>tS>4rAMOoZ(B+-mNHl?#e0>N|vS(;QGSYcJXB2Y!WtB@4)fr=MyLj5FTLD*2O
z^+<MzfwsoL-_MM?L5*I?1YaucFY48Hw?e<hsQf{;_-Kj7^ewG{J!1__H5i_XD6ya;
zL&gG(k|m0>HU<$<MPPG~D@g!`dSu`v7V53aup>_MqnrD`g{6Eho0wiaAc@?p&CC#v
z#46&o(UB7VQoYK<iB3A0ap$d#%^dSmld6n~ys!5$m8rf;B7fFWadf)0`1sNK(K--v
zc4c!pN3b9?fv``5?HNs>9GN$^IZ`e_m(~2d{EhPX44qdn^^uq)&%dtDky>MHdTj}|
ztY^>V)#K$LZ6^Sh#NX?x8;96a`gpf#m75)ZPgO}a<+!=EV}Wq^)H*bL-YuA-q%Pl~
zo0qAJ*U<8f;`xwlIvp2?)T&YoNd0@HKUMdaVG7@m-Py&K9HN&E6d_L8<;p43H%ew;
zQO9Y>`U&8%5Y{IVi}Ij9EkP=v?5y`r2H*tx>_Ci~gK1$D>sFx6!wMB0q3qmLZe%o=
zqq7~ugGh(=UTbTHFA3vDm+Ky?#>MJc{xhrTu4vP7^enrZdF|az)Y8`!2}9GaHbo+s
z8K>j{#Fb)@0+C&6=^WhB<$-?*xCTC2wh&v^T@gX8MLO}vuqQ!_NkX5lz=;}A$YBL9
zm_WK|7_0N5yrpmDY-ylS0(QoQpO+T~6T@g>%OFI#!nnr6&ZWiLQ>jYcA8BOll+p9&
zb$DO#ZpCPIW0f$G4Y~Pgnz|>(7&L6mcP>LCsSl5RITD(fJ#(pcaplQT7nGj%m=nLW
z8H0CQF5>X2I@iROj?-{BBx<T?Jyv-eF5a-Ag~6YSTrCDXU)=9mHS^^0GtRl4NzD1N
z3o>}5@IPZQCTeC>&@E#shE*AZ);5Sa-;*}eCi9`#$^DfnDQ^R$pcwcD9Uzv`_1Roy
zz_|nswD!%dihzGMdDI`G_@M3`Z484_1k0n6A;0BBRnTn6)z+1Gp_>yWHw??*y{=oP
z0gl99W1J_cA1V`rdT*kJJ&@rXn_szX_{vRW8MF2DbV_MR9m$~IGy7vjq=cJh#d>hg
zyQ#82f8QB>ygppd$};s0pb8*>3WR9uKbLZ@LAhUee~eq_hsb$<7==Bxln&Jldrp!z
z^iR-64L#RbDxeN;ugclB3Ms(BF|6t}4GbI%Ohz1JOp#=8WfM#`wF)gd<F8Bx=G*>(
z_<bLK!=uc@h55?oh2Z~2l#?|V+Md~Z5Om5oEORlW4C9*K_>9zEa=MDW1WB14W}a0J
zON&KAX#K8BQ!v9ce#wDf?7b)@0iob$AXKg8OrPzr3-7QWi4Ce{3>ZxbxPm5XQf@tl
zhb3vWNpnAyp?;BGe%~?)M^747;YE_>q8BR?gvLzT6NP4Y68$u+`AQ^CUJYu+Vg4)D
zx8D8ci)ixe3xsx&8<JHNe*I^s5HYl>@2p2Ec?aJD5a0pSSDqje{$P@PK#11`yw3-S
zGo%k-T>t_FcUk+A>3*k6_zW=!zc<LVjGMRJcw{wkiz8T`2xClIo%cu^`V){4@>pDr
znNC^@DA1~=-VzV_nWGCW1i}s)AMLN<jQbsyLs1l}q9!XXyALXEBw2q)5D&4UD@~&b
z8piXY6R&8m$GTAGbNVW~3H@-(jLAukg}!*cy0;;HXEOqC2%W)7JOa2BNrvKr!Wd*D
zzmL5(`7O(OdhFWD=(+1PobA4fP^!Ym(Rbk3>yigHaj_%ZyUeS&T(~~B*G!?s(p7-`
z)VAZW&6e?=^@53YJM8)#;e$(0!B-eKf2RTprNXFSn(fx|9QOuo`+uPL|2&)Ymu2cm
zo(4k|xCUGI7$Le|PErsx(Y=O7D?=`U$7Qw0ZglnlGp3yBAah|zg;0!K$qLwZg{vb*
zi0?pd1C+ew6v6G|O3iHp_#p@>NzvR(mBe-P2LLMA{_2B(Ej3H#yXuS)?tLRu{jGfT
zAC%!IF(*(#@EG^3DR|-~kh7IHaa*z*c?(prbJ7B)a6<!mR`6sc0?E#iM}QzI+EUyL
zDUs#(oqtd(i+6O;Qw^G4(4FPH?MR=Qds$(+ZFH3)S^<tS749P*H@+2u*{3%YdB&Rp
zAi&5P0PT<;nFQP4HGND4=?f}MnD=gPqum?!Cs6cxp4Un3Eb7<?fi!xYFB5sF14TvC
zLe!@T#zMyTeo|>VwEt39N`ZGYlA@s66wbe;-#%C&cRWJRW21jt2Xo!8`&iLNc4j7#
z%jq+t5zbYVd{7_hQc5U9Q!RUO3XDgQ66;k}kWh<`k|-8=cw7QOyS(6{G%hHS{&|%`
zvi+<Y3l1`?-f(RnEp%h>(<zj4DdP`>sJKXIGsfh4a|sML9T}F5D+tvAsUvp%;;d~q
zMY7pm8tg?jj@W0-6EJZ`;m9cJJc`(;ymt3|(`H>-z{_F9SvSMb#Ou6t*u*q6w%_bO
zt5@yr*|<JQh&V4f6-<k_$YGF5rvI3T9fKoYW>+>>A>gp&CMw2pX<NcNiRU)N)PFEK
zIt{VcNlkh5|B5rOmRsL)<0-eLANyq^ZhP<i8;tl5+Z8#?ml<&XgWeE!!%p>}N+gHL
z^cmDJLT|W_e-H>=&lR(45b`LVIF3*cggI=KpBmaziX*|t50)hQ!&tGP#SuW1ziG|R
zvE0dm&^BBIlKwB|SvvJTRx(;LGlI_W)|a%t3_HC#U-E$UN0r`Bn*gFKG>9yi4!@56
ziHG7nfXskh{nRgAH!QmWQ!-I50Xr8qVS9`x!$Xe@eI6H-2;^r^jv(q$4`R@1K6Vs_
z`3yqkg^Sf|2z7eHVbX_yC9EYuLYd6}_yg{LovUq&aryvb_^Mu_9gzDiCE=>plm+E2
z(-<{1&~DeL*oXa}mOna*FF>bx<8ry)_PXPB_c!JmB<S~VxNX5J@ZVrfWO77lzHfP+
zG2G&!{KXISd0d$S-2aE2T2U&jjNi_F8KbM|4TSFKHvk@3Y(MYG`<H|f)5_)+syIV^
zr9!7sOMOUhyCvmTv}DNs<^Z+tgyI6I#FoY0HoRxe_<U7wVq1=vyOECiHOU>y6^G(5
z6b9Y>y|%Y!?OM=o-?^M!Bf7+~NOodndOChL%~ba*OKX^wX%vj!raxL+zWuyc87PsE
z+yK)P_ia=~=<7m%44g_F_iN@eVfgJCOznK!JSi?M>Ga1T`x(Anpr@|&As|Rtbaut8
zV({IQ@QMpI^ZPrZZ=kKdl-TTD-&&!&-vCI~G==hY3NqTod2Fy9ct)2^P~X0ms@T(W
zcZR^%;J!NNQ@X;1DPrH(>iS$Y{RxZSV^1?NF06|Z$`+(#Ey`J7slTlU*Qt{TAfI=Y
zjdyvOuvXa!*{yQC@67Ub(IB!%7h(nIb(%1eOM)iL%{d@?g;!rLe!%*B=O%wMC{%97
z&Md=jBr%CfZ(h^+@+tr%1oZ<QZY#<Xo!>zi_+XH9lf?~reI=L0*>_!gJO|wLb%LW7
z?JHJ2bv>_}_Ym$8lAAM`%r44*w43G;_a?zEYe%*h%OMft)cV`{w9UKn{G=?$Gu8a<
z=<q}N0l!7J<@I#bfc0Rwt8MVe13k?ZNB5~c;Z4!w>!vGAK)4{1)68+}9`}*xK8DM+
zZMk<MMkFOSb>TeeZ0yCex=bJ3JP1>POc%$Cp#Ga5;R}fi8ohoeuKCoLwmY~B5<I+_
zHXcxRShQGm)uNn`$!51;y}h&?@co-g#dl)SI?Vh{VH2Oo)sYKLZBxVP{WBquNO?WM
zHuYal%HGZ!Q!-3y2P9Vp$z?V73cj6-DK!kB@F7|48H?inin(MC{MT_VMx*4u+U1X!
zLCWSs<+Vi5{<)a(Z~fz6a~@e}_yeL(jeKBh|9!_^DJkP+l8>~SxKn~Tt#h+jqP*dd
zto5)mGJS;nhMIPlq9c^1VggLVRHH=EG_s|nnGQlPNKiHH>1r`%YGpDsbq088rbxdx
z^mSBuU(;wQhOi)-8hl0)Fd;_4g$QBzwt~r9XcAH@*qa{Y6n&j6#N~h)+P5k?pzH)k
z`oLB+Yiu*{m2fkWwkDR=`YB%Cak_2z$H$^;rg>3`8^;;PiC676jCry8WL61F%AH*4
z7Hla8@!yEBC=n45R8c8c3P;SBC~NEN38!G53n09Ycs!f=jcqAmykofTQS2{IbL&B$
zmO(aqBpZPt7G4Qw_AF2OApUK_xtww&pCvD<7@5b(N(=EDr1YuZam9pi$F~`q*8wwM
zzE2Is3zB=&9JC^Vwn6AVNXu|}A@$uKc@VAzp0^>duZ!aP5Sco`>^pCG{lTbIbdnkU
zi(9J`HK-u!*pKR&Z~@7282X_w9OPsc8G0~W+dYW;4|gt{Ocx^?N6mPxp(BnM+ZA_c
zU`h&5EFYC6ndo<>8REKTV7xR$%wIZGzcAN0TxEN%T(hN|izQZo!W63V-W5o17cC?p
z`i_3>`?Z<F`Hl7Vb`Z`$04$?ZG|*_QZsZ0t*dJSOL?t{MiypUBSJ)IvHsKvTx^^Ys
z^~MrnLv4JJVS3JF)q4k&L4G;P4cmG@)N%*D;B13n`jk|{Tf!tD|A6Fh$^Z;BkP^Qw
z{H$oa8tBQ4_}|>>N<yGB#pJ+Ri+$LuY7SuqEJ-77toBbVLa%dtUYIi)1$j6pA#sHQ
zWybubm~fq38Jzd5oDm2Lnx$mjNlxhl)idgXPPHS=$29Jd*jF73D3|E;3`_01Abj=t
z!BL&7%GTGA-($Tfq@(IrOqg=Pk6sRx-1oLc5_^F1K`dKt|G{h2ZIs;NyCj_eVbo@G
z{=uo6hyKOQdfit_uME5`4aNFt^Ou={Vwi@FLOVW0aTBVPVwN8lJc;6EeRT;awT3<1
zsk(4C=vZrL^WAld4ccujM7-)cFgm21ju<=<)ryaRlaosP$o*4{A0vT&NaI_(Q*|Rm
zi2uTP7I|Lax$fsm-!R=l-#yz8O9oUfU^#4p^08nCXo}L1?;Tar+vb5?Rj=d+&=dVS
z77srpBZ@4P#a~nah~icV{-_EO?%bt8txS9PMBWJtg;nJ59#eT=XJA|_iX+&r8$98|
zlNBC++ACl`u6U81*Nx<Y#*5G$W=G2u@8A6)QTzh}z<JHB5RgwVpssLi)$?Hu7@f|-
zzENk&bE<%i-;4~DWhzR=`YU77c9{is7WUOhzh4W^9Q!>iENw4n=!a1GzHq<a2f%KZ
zr0Iu(q&|!wA=;TjsDkU;onR&04^TMe&m=iF$qr$Y?HZ?YZ2YJnD5m9~B+rAVPSTJW
zE292+6XAG#auTrFO^nA#X+T5wW|F=4^>t2bC;W;Y7<@kSiL{iO?_{m__lC%}YZ<}0
zZdezNUT8hU^y^9q3cV{nW$O0=Npb_abNg3==yHuNYNd0_4(K66AB)@Ixz)XIg_h#C
zk=8*YNL6^G24*f|LqJ=~IFc#Z^%sg7mW*LD!>1~=snqdnLEz{4hexCS(oYh&OM7=n
zV$hFyJQO$@lnC4|m=YF;O1+I%{W&)sqk@u6S(0nZ1$WLuPRcxqUej!ei)YDOT&3Dg
zC9TH7*fzHlZ36a4teIA!Swt$eJh@0bln5G>Fxnu$AU}WSjn~$a^_BA@k5}H#=3CcO
zuSmO&=it-E&iY#pXp7kE`C`k?VJKj?XxHLvH2>jcgXi{EgjWgu6Nee?_os~sWu(uN
zZXK+9z8`KO8Z;zyap%)P$$=SE23;ZjKky%sLz~;=RxJDTMHp9zdmQ(^x)g}Pe1ytn
z9bXNQ0MXuenSkVke2#%=eQ`oSZbE){G{#&ZREw!R4UJte>QY2uMJ-YuNkU=zcCRS!
zNg2S9ERL(08hkcW1vWMP3?31=LEsIYlLQ3B#q`NwY~i-jjnWPRF|q=)(uNEg5g_-8
z0<kiw@uo)?J_kn40BKaa8=8l~<~po8W5PFXt!1+r+pgn+^LZMUByb8iXtA?{>Vtc^
z>>75~aJfs~r#N#AYkl7!)=TqU>E#Q{-Hk}`dKZiuN`B^ImxS<T<so^m@KW-#B{GMR
zVYyt=#o;}>+`6;HRR2kX#ZHAqZfMW@xP9MlKl%Aa2hQ;DVt)|oZ#NjBLbQF{r39e1
zRmH&uX>_M(x{&BIx>}RjxcT#f!G{|8vsgxMx6B0a?;=>24w0%>s2;Tht;(atkhtlP
zF$gn`L#P4$Wn+m*^I(FF0=D{s9Krk%wyq+Y@$9Wi<Cm&Kc{Q|W^kPMc`L8>Nx40?Q
zG@vT_SH`68D}SS{j=-->nL{at&oM1=@3>2*QmhkcWSOE#PcJ0ogIf8C!iczoX>th`
zb^7a17WgrT>icyShQ?fbX{L|Z`l2rc11Hw8zakG8Tm3l_aup3N3<vj^uo1emymvYg
zC{_C(N!J)1SKGB?+jbhZu`#jjHZ~jEw(T^w8ryDc+qNdjH_!Y1IDcoIwaz{FzV_Z1
zR)5{1Dmitngg;)>T|dyvTR9$bicf#jb6bR?NPE&LS{Zk@J)x%#xF3wAxi`gP!WB-}
zw^3NPxl*uMH`^K=b+mCjHLjahv6DchHa9O?KK4L@g`I7*nXeBoDs)==jYonX0`lI6
z1ZAQ3yiC}iEl9h+jg{`M#{p0z<4DM3i4UNRotYzr83|3mQ&6t0OoRZ<V)zB$s1pY{
zwF`2P-^Bci#~nlSu+1gyyX@Dv%@rs=PR=~k`oMQcA|>9$`_LSI$`4;6j!FdL0OLe`
z(}i>mE!y4<Q}iw}jN36X3t}#d-5*t8fQi!$Uq(E%TT>&qcB!+z51ILWaS1-`C4Og!
z0BF*$l@Y`9rRpo9e*#1MECq1_D^>-waV{m3s@+m903L{9Qf>k+Jw~G4IO!tx-&w8>
zuoCYe$yGiV7&8|eqWKm#B+V8-I8zr8f&Xz3^QMcY8<y|79kKa(MY!tEir^QHj6mxm
zZ35^36{k`obYJ7(@G`Tr!&Qcc87^;j>~Q(sbAbjBUKRje4P0Kt87p=}cXw>CRKk6Z
zSz(Tlz}!ZghL!2=!OB*Y8=bxzW}Xv<TrvaVAx4>7={h`yeZ5o8E%*9T2?<km95X){
z{dv0yHYeEGNmCiM?aUU<75ZNeBlsA-K!?3i6M9Ne!1ca-WF#H#h=l)J9O6b@%;kAf
zmT_|Z>0s_TKqHP;VlziAuh@qny`xxlES^XM+c~@H!kgBLDddZ`$5qM-pBEg+lHYgT
za_E882!1_0ar6S~_P5F{tqp5-EQO>}wqKoX2_y|KTRIieew@`ibDFJ`+bH42pqMq(
zGig$qn$WY-O9uk^)g)kzDIX+vCRm!ml4Vv#VjE{OWPF2IHadQ6ro|Bw5ruAcxD9lH
zo?74<?(W{}#LY&)@y_kFAW9f2aVX|UY~Pq_DJ@>)F~u}kT)l$vlTEp<I8{QXXD)0$
z`Q<#s`+QeQ@MYz@+(V(xI>dhW0v!$Ufv~n&gDboHgOn0SDXL6|>xKHGlKszT)l`X{
ztR%hgWJ)r|IHBKAP_UL3k*z<_vqz1MP?^8`wxEIXa%xY8R1&IHwg`^f|NKdd8oghW
zKXGlZ^O!JO>G1<>_-%juZ=)Ub4iGx<JsB$H&ua4+m;TM{2zLKU_?v#+oZ@+<qA#p|
zt+X>fH9>{fRnG61xyZ<jDk?~_m#JR)XVt3z;sS|?=aYbl*BLI??}~@};f@@S<mcfU
z@MHvu-L;PbN6V_PC-s+=M++i7hQ-0Q*R{Zn+vn7FaWcI(?$p%3nI0*%(7}>%ZfvMu
z5XU&eOsnC)%H4M7l2<B1r2)UK5&%r48{u~Jf#l?Mx&9H9ahZ-f64au_@~1>kI=FP|
zDDX8rOo3K47(zo^QdRFf#AJsBr(v`FAz)Go;|Z}U1yBw>#s6#~isI?OJTDllwi}Nq
z9w@Y~V_X7)rJ)1d<B;Opt;4@7oEJ)20<+#=Az#c_#X>Ye4F+vLkzW3`wFPACJ2_Q`
zszRMyu*xb61wB(~2C3}_NzyvPw)vjN&9OF)OuGY#-={o-*vpcnj4%n;;^emrtnROk
zhKit!eofWhsJ(Z<5U1VSoDJ8(df>}!jihZ9^3%}1v8vN(Y$BW7HYVZlRNLIeuP{UG
zTa=7J4X3Z<eI_ZWV{=2-CA_E0C$g&TPW0}Z5T;)JcWXc78vPy=CSra#MZphtP*L+A
zg+e9qjz9zJv_(Zl<;w+=LGQJ0Rl#uezIDW56bgqKw~U3C^9q@v7Ofh~J9M?wJ}h{*
z?a|sV7>6w9JZyu1wiq`QN;{?8*;MdE!@%hKWU~lhoG;M2;6W7-11oEOci~4M$<ZdC
zg<w(w#~|-D^)h+L+xd86OX)!yzJn#{B;9iR`nc)!dF~TM^+9{OT!$s(vMnG|rP|2K
z%PN-Q?G{7Ma*jgsrEeM7H*?Z<pB)ASTI_wDG+(yb4{jgrVP@o2voim+!p8rky?1iD
z*|?wXS5*{%R0O%AdR$6q)`n(e;9DR!p6Yy~uhKy&1f8eyLt>oJ+I_yqwI-0AZQdsp
z@UiFC$^JUGt4L|5BTibC@S#Rr5QkXaHC+~inEG-3;5jAvif?8LK|+>zi+hEUa_mY8
z{wH$gNmh77EhbbK0%ZyO*eWDLN{0@;Y#W%QK~y%kii7-dMph0|;UT0=Z<%uJ9IDGG
z`!N7FmBG%=(y3}gN<XrSJucbJd&kd*NxC$8;n|y40-Cbxnxs>`eRKRV<NRy1<amdS
z&*!bHl;T;W-HqsE30Zqq3)IT}kh=HXV~s6u$%g?ORSEd(^QBmTlrP#i#_>H5VkQo9
zl?a=ZP#vq6)~{3)hAst)6h9=+XAkos4CT#uB(^^Q5|$3l<EGc?=AmJlmp#A<MvHKg
z8(z+Z$Puxz{^3XAVpq;WwG}Omjj|-#2^SUQs<L==K{?iytRNZ#AMtvOM4>s(uX~An
zMI&W3MA4hVc^BWyF1}iI)y>w54!l(4UDx0EnDAZpJm})n`v@{$JZHl*lBl?z4N6Dm
z=7uEaW(tZOg`tw6yR(Yk1cG-7aeZ4|UIyFUUH0$Imvy$6yq@9cYjN?afw=_%TO7)?
zb~bDWBTOYFP${d^v0(f#6SPkTv!%GslMbW5x<K}Z(1pULFN$9m);Ay5ex!Onhs;&l
zJ+b5O@^U&fq1OLiN1SF^`j(TwmQ-ZFH+8NLqL-ndBo<=cBQoiCL;1bief|E=u|(pa
zXy1Co(AN;Wq{RH>W9{#h{Jei~99K@?C_?T%G<S!Fh{L3UYwBMSgNm{Z`nE$H+K3~t
z8SB=l4X@yWP4dL(q)?wV_gm{|r4nwioKc1}WXZS0dx00JU+TtV3{_8FCXbr5d>buP
zXi%KJXeF=*F-lXL3oh0B7AbLm-|wRGJ+5+S*QDgFCsYLD5x7Y$U+`A`aJ;+Z)=Vd$
zTvGy(TZS!ajZQY&c}ht>q?Qp{xqwUD%p;@J-dm?#Lzq&rZ6|J(q6Dyz048Ti%VQJ(
z;Li2(et1^(%S4OV^(RKOYzt$xkR!qam!9bbxUdqpFz`rqm|}p%m{20XknhvzC;AD2
z>tMt)Wlt70070JP{U6m_Bd`g$xLPAs`*Xqt;>3XN-IDj7IQ{ycXoqF%2*@rFlJun)
zcDMVTglysARF!7;WY*aJ;6xdOerQ0Gl05&3wAyx8bY<ohlF(g4QMvHqaoi&u9T~?n
zw-T`erXne^7y`vBt1);qs39K&SA%KRJ$c=YYo~P)$=C&+)E)eARWO+~CG=1GdU@wE
z_L~N-bm#n#HQ~=(cXS;Vqc$<VIqe~jZ>^JfA23UC%)V9TfXzoJoK~Op%a#F3(pNbC
zyPJVJ^J&|aj%&fzkEeCR%eAJOkEsF=Zo7^2V1*XM>Tmro=xpXz$`fG~QPDuHg4zgb
z2zd{HAk6c=35Or?S<6!|89va_`&*5C@2)250IKf|BN6uvgiZ%1`1w-IKn9yRlBHy=
zBu}mNQgnL-l=sK~;E!9wjhB^$ML1EeR;sh1AxZZO*Vi}xn_kG9zAymP`BHvT10+{T
z3DO3sYDH#AQJ!-AO%6e@NXTCCKrU}AW=)7rRF@%n_#!pwF9p$`X<6GkMB}OIR{c$6
z__y&A-00K67VsWKg!uu=KOQNpiDU-!&ZrP@F1?{I7+YXUI*$eA&|69*XJOQtWCscC
zVhpu79%r_-HQ6Xb$G=IV7?C!Zg_NGbH41rz8|Nex5FzqbC(Eak-BVTrBeJxD#Z?nq
zF=p30=JQiA=Sh7PEX~7D%v%8bS(`eB$WnkB1cdKyh;~Bkws-XOjvG-*g1=I@O31E$
zNpo3vq+pVcUE@}%dS<`8cBk1yhEl}I_E=YW2|3xuAB%U(4rS3>1<yCTi1D(|Y+M%6
zWV9>t)SN#5yE_W01;be=#SIEtpWPV&AXO9?#!dM@cYXQ3y^m$!tE%s;u<ZRONiK!Q
z_ZJJCZ<v1=;rwO&2f9$SkeRDR=t;G-FbDkZnb)?19n$QL-!hwKX-Fzi9vwr_Wi?v2
z3Jx-D5A4qdMoTyj<5~PSFr*2ZqABT|YrmkU*fLT^UkhbII*9IZJ$HIz!*yD4OoQay
zF<QL#ekCj{@0F!m(y$ypw|-FYl}P-j00^sH33wTROf7x{#)`~*4vD8rnoSIe<LP#V
zM!)4Z3xtl#zK%t;5trx_)*!Kcim^Y`fA_9SK(e=RA5{l8XmdWLNIB(md|~GI+wll&
z+3Ms$9*OHgF`v$D%IQjydHTK9IM$p-*QN}*vli}tVC&$vde8jlpJT028!+wnd4ID5
zOA@T;`>?N;2uEC&l*A>4E)<kE*9cb~ilU*|eu#{(w~xh#oW*#A_f31A*RVX{r)f1S
zL$aEk_}b61*j>-z*t5Y~@$sxG;`qSdM@2Gf6X&(f$H}DPPsvN*SeAZ;cmyQ<1w3~e
z@OnQNvE$D}%e13%zy#BJ&hF!<zL+`}OX!d<C>sS;(kB8AH$Ir%blh66)GRknlozzS
zrcTU5Tub3|%Vx}6_G^D$WX+rvE<IH{{i`Y}@<Zg^_7?CUu0|!SL-%v${{@-2tx~3n
zgFBpTJcKJFU$BSs0L!%UuHmCw;GzE~zkzsFo-fFjTpdr_xV<t^swUgdGy0KU`6^wm
zZIqwX-*uQrv5b|hu(5fkfHkm-bq}=0zUI^Z6)*S;1uOW`_=ugNB0+BR1|F$j*KJeW
zFYn`@`R?RA0C7YiJJ?t<P9>uc5*DR*EQtpGk;~7C#0(7G7pz)?P(o6&9GQaQnz7f&
zeAc<IpersOAo^6StJ81LD$>FvOch9pZKCLS`&|`+eyFi1{LR8EBuq4E!d(<FflX$@
zGZR{2WTlmv!aBBN{S|}&BIgfUcv__vJTMY+*@c2O_5C2cvjeg%5AE`L>aE%AfY*y0
zW=AAg<T5v-T@I<;wBj(ZFaT?>27m98@5w~+drW+u^?Ato!T84^HvSVwyzM5ywh4IA
zF3192I-MN=k~|^m@x2lJlT#d6Z8+XNAf(w@x!teBLH>v#G%zv2y6X7?=Y@3w*85D|
z))xN<t(o9GfZD%RKuJ|+BY;nbm9HJ&m(`xnhB}9RiC_G5d)ud4)JCI879r^MV!cC>
z?DNa0vmn!8v<>SNkWEhFk7<R;mQ0FHkVrad*iTE5M+RJqPIv=#oHc$b$@GLnUBMYQ
zybxiy`?ko6fk7QfAvQFHJHWR3aSvIrMc7aNO*v5qT)bU$R_gehIw^CE%wKjIA&+E_
z!{SWxvN(G-24$BYkz4Cuc$D_V-~7eg*xBrwQij3A(wOHi2kx5>WH}1k;_Xe%VA)(l
z4xiqy<DLHw*@9nZHhV3~he$F_`**4LdxM)Hi||!rrpS!+5c6FX^pJkllLj$p)}T4;
zL}1eFj3!Xt0Pm*<2<^JTkEip(A}TS19VPnwFM4;tPLawm854u5tY7EF41VG0jzaxW
zF4~<^_*d*|`Gfig^&;^fcvycr>NM@fc~o0CSyVgTCV5}Q5=4^~RMmcuYo4Dn2L#rd
zoLNgWfmMlE;9RI#ReU@kvIWRsG58V0zUY2`0tLu=L%CkBiJQJN-%Ts~vX|TnJE77i
zJns%zk(hZ~5F!U(??)*Wu^3EQ;AXr|l45|pNpJfHfG4>!&ybJ}f{DH{>2wNRWQ@cS
z2XSqCWB$-<7elW@#QibTwdaG3jH-&P@F}nJmAR(i(e+<r{%dO}@S6GG^@tlyK|R`C
z&*jwboBh03hnFV(clDLOrVQ1vNy{|yg1#NlkOKoGLuShuQ|D=~mo`L4g$~^ajT&_!
z!r4s=l_G8OlWxCT5B~o2`F&*3(LqnYGf91r>vgxKw6TU>@s~B;&?#<p#ood!^pVd;
znj0Dd`4`=4msn>0njKq?c$wO#6`)_bQ>464i{BReWEcbKYv{5hqZzR_fO2x0%|Y3H
z8cXu6>E-56C}UW>;ne<B`Cn7Bha%QY6(jLVgeS()c~*DJZu4skw%0K^Pn}{(TNfgC
z>TDDYjq5y1m?&6Yo|2H^bR;$$l&0O0;O5&t+pTe@E|Sq}Nn|?3t@@YR9>`a(7aA5y
zaTj>qADb!|LMC+}R+mLJ*n|N$4)-EmI${@+3E!!B!*qi?N3r{iv){-SiCgw4EnFWs
z?^)cJt_Q5<&u#PHZB#~Jm+Zc{nSQgw{c7OA*yh<#<o%o3IN#(?=9{;-+vVMAuI+-}
z-o7*xmGR!8DBRt<Vp(RNd8bD5Z2}k-bm>hJE9FH5F>@wY`3P5u`ImjdQ@3UVU@fpN
z%0;$WbPB42n-#&Jn26)@LUvvpuy^94;CKpAK3yIOUK5O}n7tDK`pl^e7wUH=?!Mp>
zCBCtD`=7VBEUZA5imwPo@4!2$`cUfrHx{Olp*mUpQrN@@&$@r4OW=RPbUYgVMNJfi
zc#cHSotjIK2&h^dw5*ryH2>MOnjPSFaYC?_+ahzH$fDT}RxMTN%h%Kk<=Wzg2W?+q
zgkM`gqaQj%_dJ`6hQ7S-n*U#|NYJOGCFd5}+IUvloM7?4{LZ8N5T7pE(ze`^l9ua%
zOdu(MNTs1wsFRgCR$D49SjWp8z{dS1L7{eO>-I#~Dn`#soiHgOSS_T-R=P-C7&Btt
z^kF+}yj|QPD0uOw#2SqaJFXAcrd6_ur9VN+uoYndcK%-o(S1OXg_1D5u*{Lw3QYm$
zUtyYlIdWS-99or`NXa|5pUpTq8c|d72$*#9uVL_=5oVN)88|rOjR0`5DV}@U(FKz{
z?B3}>PBAJPNLgT~$(3$)R$*EHwVCZBrD<%|!>98>4{v`VVD{L;Jf`_TWI)l;mQJMi
zrXd`dwQ4w$w{0o>#b=Ogu%`A2E||V{gQ@=4)}8`Wk0GQ?izQjS@01~DY5bWUeZuA?
zswFeXj%L1?@i=<@=!L`^OMm2DydtA1iK@+$+uYK-SeYQT6nmIvTQB?pVOC}#Ci+jT
z%2Z^?1*x-|_SV9gaiWy0^;$A&*5Bx6T*vzSk0m0T{+k`Li}jAUPr>)q>Hd@n&7Fl)
z)tft6rUB5z92Pd$k7O!aK+>~+a1hFw7bs}k*V{|R1HJbB+JKYD=JuoFZ{)^u1a;}Z
zt;o3(k3W!EI^!yBtD|@Fo|qdD@w!||E)1%9PKlI~QXUE-X5%k90J6wp%}z<`bAi16
zSQ<?95zLqoZ)Y2<rMTKKQ1s|PcbC^LCFwid#r78({yZV4jlKMzXZ-y8^sIhd8l3Sy
z<q0ABE7`5=6UbZ(IHH|!Oo`{&`9%_oc568~onS=Vn`?+p-wQk<_fH<~m;NaG(>v4u
ze7|U~u_K^KeP0as2Zahr{jrScn)>wrYwebyw~bF8N8C;-)CcNZy}twBYQK2v-wWmB
zH~ptXaA9E9nc4lD{6$Q8lr#zvSNsa^#h_GHzE&HXVKP5qhD?oS)N#&z%PUwD`31x<
zf`MS<Yh;wH_IhJsHibqI*gKvS_C-`oY3rBp39{FeoA=cF!r=(BxYEJmv1QXq+AI?;
zf6z}554Ef8<=Wgu6FJ7w7V|}7$GRgPhn!2<^d($!W(ccv-7HDl7u@z@@`v1LOZ0vC
zQ)77zNd7kZUKjrB2B=JNU(#9>{TUZ-*!5x+a4vWEqohZr+YH#$9-L5Gbg*aOt~P;J
z{RutHHy|e9Z-U~6Ab@Vfv$ucv>0Y@-s|$NpWYFNo|0mcw#U7{Quuy+sJ7-v4oyIuX
zB)}@H2e1(X2UhVz=-DhB%5Eziyw~~MHOr<5)%KI@!tW&L=Dz1a*8cJio7)!%#s3a6
z__=tkUydDUvQFEbOQ|$*OK3n)2EW8<WZp5zA=wgoHeKTR-J4+hWSoY`r2T_i;T?l=
zG92ieXQvJAUz^BHVGmI>4pyQ9-k+rkFo`gN$xC56!WatcXKb8}qe%~sxN%zWsayS4
zJJ0ADab&LB0r$1t=0pf`5XX1D+JHs{+@X12B*Z230XVx!)<hu>EG3NJh9?P+3=f8g
zDS_#NXo+!Js2T0wE1~~1fUgUk(2vjbqJ4B&nFKc%&ib9+c^Dl6+^+aROvotvo!<MK
z1=VRKXHs-HHnxVk_uNhU>0B=?!|m$tZ0i4m*;5ELl&v#`Y*?xVpM8Lr_nWrqk7O5w
zf67??FY2LTHdnd&I$ef|dN(T6u7fEb4iQaqB7!^=25SbUk$vsz6O+}AmJN=VJpQ=|
z-r;v$!eWe@l7IWomQ%rJnKcr+SIHK#@jl)8qp~?nLnV;Bh8hvqH0WG<PdGL-to-Wj
zi+(6k6k0e&K(!m1>MM$<Sb+I_e~s4KPq=RKZ}R4$V1RX}yweyRZ>rd0s#(8yr**G6
zbmuvnOP-#G{)mbWfG`g(Be_a|FoSheFQ&5O{gsoG?3{+f5a^kj#IW?JJ}?%E*3$nn
zf`ApH$41fokIzcvI5NKM{5|{k?rvXsv@~;`aj9~wJI3>arUw-b9mQJ8&p4G9(_ZkG
zJYg-d6@K2m4&C(JjL_55pTAmQV1E6liEZ7F{e3eg2>^F$aI)V8dbl6X$lg4#P51W&
zG4*GaZUwWME2tvu28t^?J#qnYRiWg@pC}lg<SK*|-lQ91FU}wo<ERd=x50ZKomWS3
z?cULbm1Lfh5@d?egM*0&VLAgO><Pdw9T2IHR#cICCSKpRUXBwnvM&RUZPtDHF4o!z
zU2V5fKni9s5??$@pqIhNTg(BPMU&i*uYVgva>kaO3b?!mqlI|7GmT{sX^vFc8P2*u
z19*mL!R3(MCo&`yR7?+2#I5xhYp$Ik&`WFE<peG(5(VL+68VdUp@1~dn~Ebp7#aIT
zQ3Vbt^wXzDP6FEb_5bV33dvp+^iP}(Y;AFTZ*l!dd|%Ugq@=#z$4WM;Lc+kpGFGwL
z)v>L~L>a8Q_7Uh=Z~S}}=dYTuzRp*MGDb>PuQsVh!w}Npvl;8-VSC0Ux~wvnXECK1
zZ<jSuo3Tqu`NzL3A}AFvQ#mv1TMGnT3s9;@`#C8E*tRYqKP0@tJijy62c=JEJC&5h
zQDMyXebGl3NE*CY<CzrLZC=&R{lawuse_pP3z5OUI@ei#D9y_aO4}u2L#==vxV9$i
zwB?>5h_sIqsPD@G5stpJDn1L3bSYG(J@x#kaWzFu+C%9Ej%Der8biJG>1ZO35tZl&
zZTW5Z_K0z<9x8O(<iq#BNnsRZ_<ZurP)JL95Xo_!Kj&>60nWRhP#{Q{+}EM~YTe#;
zJ?CA{14Q9X=F>h_>LGu1VZP$++GE!OZiOXZgV0?@(%TMeN2Vn-Il>jB4rtkE4-TV{
zo;BHk0|?;i%fmO9;g%~a&yX*yML#T5pvkCA@`ez=VtDX`4qUy^uGU;|FFLJhygv~E
z$ZYd$_IC&H?zhFbAfknSAf=>U(0}_ALK;PtHF5+;m`3>e-+GNi(bXy(Bc<oz@VMMY
zj&!aJ<iC$!_o3N^+0l7J)!HC-8Am-hBH_T*JD`E!$qk7&vYAA_ITMOJWcQhL7^a{d
zTAkar;7XSh?!{_LSoEg=-|P-4O^{CN)PT<C>S~rNbC+rW9PMC}C?1kNDk-BQ)}K-f
zceJIdM}BZxsU^3a9bs<A7qo0aADq~{-i;6AVCGiyX8~pp<HYpO>vn70O~@_OAI>K(
zbFbbE??MazKe-IX_Mu|+dAwn`DJOkr2Oil0zjcw`cEwDAMYCtf(7G1a?b54wCC&iJ
zDo$R^FF30Ei?FpgZK6eLu#b`*m(d)sj=)YNQ{iK(m5k~((o=?MzF-);mL??Hp>#8_
zIZq+j{m*J|h}LsA58Md{o8xVMU_&H9S+NeEcJu6yf0<lhs)P(GR$)Njccs9-X(o9G
z|0AsEThXE_66`Sr;0DJ9Pee}qI=j6;9^Yk^@Hx?v6~Js0D#;O5$U%DOxe-($0V53I
zAjdC%V&cf+4=3P)Z%N3I%<t2Gl*v!ZKl$;PJu}?nHdA+Bg8mzEn|tl%#wRNr!hGc4
zcGSVM{R`=Gu)R{aml@q2QF&sb$#7O&0t$p*upQ-hIvTOI6EA7LuuBVCnns+sjhl5j
z&9#i)+zAPOu2qAg?*~*#Q)e&4cqJ4sze7oj({wN<*|zn^?diu!?Hr~%@e0ZiV)Ef>
z-LH@GkO#i+th4R!tPky2f}+BY@HQmNm!jBav@Fm)(OhCUjIBZOk|e=C?^~#T`*uK0
zu`}Ph7_Ob01kDJkn-onw@~fu#(&?A==4M)$-wASP(oa0pUcSBoxybihSm9uu0ALP<
zsd>5U!`(QThK1(gN$F#b37@)MCaex7Io>ltA`4O@3{pHs1U}KNXc#~19sa88JE!|j
zKCHoW&1Rj?I_FA*8|uYY10iS4HUecKW!*14AgzTrAqiL<*`K~5sqVJYSZX*EF>n%j
zdo+Gq`}n(?HU$6VeLJEs$Z2AKOq$rfa@EpPyZxgWW<CMrBv3d57nh<BCp)*;wsPHf
zDm)ViKr+GBe~1c53*Q~&z#<+<^04u>{k01Sp8hyc?7wW;7QP-h&A=ZyU@GkXY4{~X
z?_Yp2AOBPOFIA!0XK-i10T0-gu2I0A4_(h>@TvY!F*Ozm=uAj={RMs2WPCF^^Jwhi
z<Vw8s)&BLOT`ZCz3`rV0Q>^s$v8EIi-+QRoiyixEN2H2Tu{`&VDUjg{dMm^=eNvtM
zvTs1cu$~}iy3OWgv}dH;g$063&|gOeOsF4Df4-Y`R^oNj6$)%=>@o`1<izWgIzomp
zRq5r$6hEn-b|mi?kH21nA^mA&5@8SFf@v^LE;w(|U&OAW9IhMOr>UYcaKn22vW+Nu
z7j&FRLCQlZC_T=ULx-;|Okf8}cNY>gBC-{GhEx4rho9Q+dya5`GPp5(JX?GS3pfZP
zeMQ^IZii3%q2pgzOBymD8QXs@sUIX7rWcx~$14UDB|<vt4Us0qs}l<xCKq}ls&#1t
z<NX+cW!LztS53#e9hN@FizL3Ai0i>QSiwVCjsQOD9v7*<POvZ<3us}sJ6nY1K`jIR
z-URuJgR;5nte0)ak4r7St~Tpj?ltfT2~|URT=^vyJ;<EJ!4N4$Mti=eg;DthL!A5y
z^0SY}d!mjeg<j_e1%_n{x*){naD&q*<_3c{LbHPWpAV<=Y842iu~Wb*S!gW|ex!j)
zjlO;$#6PBgd?K)&)0vI6pn1`&GKL-`3=FK{+mXEc<4q+9FW%hWsOrD)r|62a<`Qz1
zSa`6fsGwC?Odn>eVv_VBH>+Dd%_ay69&r}apRuZOhMTSZ?uOD6VLh)Di^Ip+Ptnkf
zLP9DhI*j)76O;txu!eTK8^(q8?Tyxrd{K?oj;nyeUQ&4kEs_AZ8qhM@EW_XClvzT{
zN~wth4rsAs3*{Ak2`^DXGps06a(HQ9)}sjsC5(dL9E)l5ase9+W86weH6S%3Z(hMy
zSE9q6(+^C^NqY`PAGGxR>{21OA*9zGomiD$qG7pY-}Dafw1pqPyN)vV4}C53HR<F<
zvf3vrkV9B2gk0xiit7U+aHUb28<|)4Dg9u3ey14)gbr^wzI8boC9h?%a^J?G9iDw8
z3#o9A^-ObDuX;bBfOC9K87f_TCRA$AZjF*hO3`XnsJV<MV|PsQv2$ok;uDNCTXH$H
zxB8I{xNJxv62~N4*%sWs#EL9^iOXT9a|pwT;qN)|H=9MnLAzbALIPgf#9KWNSvwu>
zkh$MLSsQnQgg0;JwF47jdfx(t#ZaVJ;6QGFO;%8Ktk$JbPZqE^Huf1;tBJ_GYT+&r
zRl%>*Z<1LHIZ*Zbv;8_R>EQ~dW+FWkU6vOdFIx8jXH3n^&m`n{a4cd$?V>y{IU&%?
z3LOG)#+90VzqOltYXmwBr>_L+Kxs*a$2GbpH`~7NoLW7;K@&crlmvX(l)&UDyL&c!
zw3piR@YkcU8*>ZvD?$?d(AlT>@!|nanr}3_2jxljw+|lN9%opGk=cS?BulmWsA){O
zVIUih%wI`qwf%1~=Z42qIS1jrAMQR+XomW3IJof2{!=jJc#Fe+{{voBFIS>eST$_R
zHM#-yvm79104RFsKMV%%da(k+q7C*RM@WsZYii%cMLUz|tshp4+D%VRAgsk1f8PC|
zG*u+{S%IY)I4$9Q`<2QwQAva;MF#}<<l7Ww$hv1N{v;$`Dr($@xK~VRoRb1`$`c&N
zKPSoO8%|}GJ!>Hm)Gnc|H|{^|uEgy8Ye7Ut9dk>Uf>Mc~P}~0%&lbu}*M2AfM%%wV
z6q+aFheqKv&SS2XT4GcvoWL9Wo3>F7dQqJdo0x<GuIPbHsLdGhjfG+2@ri1M;yrQ2
zp&(JW)r^~u8B>>rn73T|@U?lx;efb;)$#i_3_`8)*ir423x)8z>4-W>S2vN{urKp{
z=oc9Yta$V2{qVib=${&i!*CYlY=ll6k2I(8$r2sFo)3YC?FKM;O6L==eNkmFvb>va
zD{GahqNpr2n5h@7EYvCF)p}12tmnzlK27$VoW4IT3w4O>vo#R<eu7-=54b#`^OZBs
z7zxMWLOrh#Cg>6{*guj7F+y-&Zo&W}PrD#5-km|v#5o4jPDu%G0;T(DO}W+im13jS
zf!KCS3?;x4^J4hV-3(fO_o|-D;8nk|m|~VZwmr&<DH#M3tdK}@A_Y2Cc>73rq)*;N
zT4Zd_N><7+<B{&4=V0DuL-=prMTB2_i7xVZx(x(NHfv&!IoGW|3?OT>cf<Rm7|?a7
zu+rqkCH#R-Kh4_WU*rjQoacfXunW%|?9WKF`P|bYt^9`8ANTD1ddHKVo*q0F0nhF7
z#!kfJ7(54FQd+w6Fg9=hdGV9m=ZRfTK^|Qc(9FiqDzcT|^}gmz%zmR>gxL?2;L90U
z15H0cfDB+1cs-?Rms9Y#qZ%iO@E^Hqr_}GLcDB1xvu4IK{NmFjef6Z4>Q|H~mBYe-
zFGnO;;n@i@r$ZESl3M3q+`gL1RsO3bO|=RU<5hn-;%Sd296B<8EY`|SIcGo@=K1>E
zm6|MlUWy^%q&8L>W18A85w6HM!eUMHPK0%eMoJAS6FZghk`G4J?}^b5BALi)u2F#s
zUD$a7HHvnR{&&<+k%P_>J9UGCQrcHI4yqerHTX@!T2~?>gB)=w9Zks(7*Bj0*Zgu1
zm=$S4$i=k0UsLe0gqf)IUlP2(pll*3XDtEI0Bv_lQ7koVIzcsVI}E$dV#xF@loiZ<
zNEO>)pb2sd0Sf*`yG8V=Txq?i97g)yi=lm{vV(53cInZ{i!0{tXV60nh}HV$^^g>Y
z;rRhtNZ4OI8e`!}bhqH@d!s9K-hR{R@<guD?SkMcMVo~a{M}12nE@nmA(p|{(g`N{
z9P_%Ihu^s{dNrCP$m{bG@eB|!8eQPEH2~MlzF5*`BnH!xMb|%(Gplc137IP3=)Yu1
zr>ysUq>YY^?GJq<-1T{X>VMz<@?Gin;p?=!)?4}Of(epqPQkhQfsSx`Zf+^OG@xoV
zq)%8ELW#A#{WsL<O}@{=nNGKN!nhcj+Sh|+^hMs^JjH>ZKt8|RKOg+PD_d`qgofwM
z>*WG_Fm+pmpG2%8I4olSV;BI-5W0i3Ct<u#65@KlE=hrqt-sHIGdo=J{+pccyQwgg
zLEeX+Wl$6Bx8Vnx#W*O-&?FkJ2C1yNT;lk6IsY5H0E8U2&e4L)8mw5fReo1#?0|F4
zQ!cT^Z)(!a1^!j*Vg;+de-Vbtq<X}YJfJ4x8I0vy^1xS=g-YXblrJZsa~X=s34=Ru
zAu8OcuP$gZwEJ74gvCp6bpNyR7I+-@Q=#oU{_Wk1%fNyBeX*f0=Icn+epGOZ_N_i!
z=&40rvW}T=aGBIk!U*CTu~H_QT4%ZLk$#()Dk(6Bt=(d-3|g|s@5k;Ytz>_PG0!r@
zuyS&@%j*@oWHy}Ww|Q__3h8ws%j)eW1$PRVCVv2Yj~Y9**|4QkOZ;Dda0VOax~pN`
zW?gPOE~qrMDKk&J@o+=vk<XTFed{9mG)_$u(}>LHV616IFXf<~%f4tY<<c%|)hY&h
zkWWkFy{08iiGr;JtT5%6>3<XG;>$v3i^0^^+blk&D%PGIMp*iWwYXT&v%$Gqy3`h@
zu;`k^Ed}G5zP=q)(_}gOEho304!ZhV6@eZ!$bkd(Lm4rOnEUmJ5Y#kkgPtrk*P9SX
zre1CHss5NT=~hk$WHS~#K`wJNh*1z`bAlxJjoAWPO^fVvV%ndie16*7HaVf@c!HVc
z=s*8ixomtf-U^=l*^8RKU|<)XOzdTxzD=@4#mZfaPaLucs-ew%&3%xlS79Krx9sEP
z^;$jTRqH;AR*zxO8#rFV2+FYED=hwBK{5(KBCN=lb=c4xFm5HW$aAevb2@^!g8-?{
zu-pvQ^bWrZTKtb=CcWT>QpMTAR<~=tdBaOi9!l5CwL>(h6;8jJnE&S?d_rwkjyB8%
zeybwE59oOu(htr13egXo5`q1p*9mp$iYOtWu?pn3gL9`={gtONhA^A3BrY^8SPB-O
zFg9*KCa*!OTdCT@uNc#Z{RgAi>M!)2!eIPI6LMr=eY$MC$^s~4vxHGZKm3OkbNyHn
zTghlrrB?W&$Tr=;)N!Q-my`wujP7cF5|P}`a^Z(#nO(L(TitqB^{Ddc#bT?XdHk=G
zFlv_28kq%*;}%Nz%Hg~e2`H(cys1bgRb~a4iYc$(v5xUumCjziFz%`_$kYw(mAo?*
zG906CtZOX+Q^3DyJ^Dbe@frXHv=C8>Exl973)t*yfRj*jwTftBpwIGOi&||9ATAO5
z=IlB+yM@+*%ub~%#t>#FWDNH~cy#*ofQRAB(dg&p(;wkOP+429@j5{@HS~?Wm~Jp<
z>YXjD?Q578M26MlmRgSofI-f%vB3x{EcaW_JbKO4Q3c_RT)9s2v#Xzv=U86q#0bO7
zx-qjjlC8r<Qp=KY1NtduFau5Go(zD(h&j-ph~KED_2m6JPZN$lkO_<z7yrY|z)g48
zb&#&xbzlykYj0>wmIW!|vTH7A&^EhB$;{&slpEzbe{{tc4v>74FBklFT<9IC09#@%
zFSd>Mu4;dlOny8dCD{L}n8%B(NmJYJ^L`a{d;2&F2X;O(Vz~eIcqRBUos9o*2wl98
z@c+l+tiOy-PJOHEo#X`o%Htd8e!ixp0@IM};}HEtCv$5PilkX!*r72dRLb(1p)@j*
zUA><5WGQo$Yc%INJ0i9ax;&vXRUA%-`!Kwozgu)aljAW*L!LkKYqWchgyZW`MvW<!
zozA#_`5Twb(x}ztI$A!Q*LR2CAwoOnHw_6Ijvwx0WhKHtGViotstwf^gI6sgHtr%d
z01`go?X+n`Mt?FqZ!93BAcY_TA7N3zr1yJctalFRF%<Vo-!=6HNGtOp9nIRconkv5
zh}e3%B8^KnfG25~WF!Gs7&6l#%pTQo^X73uXaa}SOQ(x1w0+XZ2`fViuo9;3z9_^l
zt`7bF3-eCsC)<gM+D2s^D)!v9Go0~s@)1FoIiq$*FN2$|)d^|fa%FE<owCU+>aY{)
zqvQe?8;EO&Or|#KQRxYYIbKXh(O(8>HYup0=5^x8A^q&$lhm<!d4(zvuo=X)+}D0|
zI>dT)<{p!0w-T$<olEz;iu*<z&+Wt?zU&fhQULY^@EIHAvZl)AfxlPx%xq!JrxdG`
z1C*5p@3A>`#>cv#9ik7E?`fJZe2rcQ!hh>&O_VMqMc=P?ked)wUmN1F;og~gD~}H*
zPL44~+nHR1yC}XtKXiJok+Lkb?)(&f4Mz7hiNu>QQqBnJfN5GhRz76Id_#=})A;D9
z6-B4$fX_tgcMvV<`9G^iRKDhGsuSQ*br!9gpS^wfT5)l+aXK1qhg9%PVJyfLV!OU(
zZ}be^&5yj{>tO*41e27;XxU%tAr*7@;Y$^aO}_9zcq;h{zVPJ)sdqc@6h@08{=Ls#
z(WYi>eb2GtKhnV~I+o)K=WfWczJK0Z`E=jcx$GA)dhuQd{&H@DdS$qigs2YWcXg3)
z;=#FVBfc$f+~FS8QJn#JyefUjp>OIvI(qASyK^uIr%#(HN3ZAFkw`_^6f}=;{4lf5
z8?hSq;_kVNQ{hc(bqv-KF_2ODGw4>8hvS`c8MX!&lHVLyzh+}0Usty%&sbTFCii24
z0(jDLk;$(r=jz*2f-)3wcO0nNC9)<i>80uqg@P5HHvEA+Stu1&%2AU~`q0DhV)EKt
zc1`t!Qv}ze^~ho97lCDt3KjSaB$-5ZT-66tbk<ETC^ng)D;Of39t!rE)htRF_amp*
zZ{Aq)z{_XPpiyrTuv$lu?FY0ZxvD4$emesyG#!>Ye$YJEhPgBe4gS$(8$^8W0N8F^
zADDTCjmH#A5^ZQdVx%8wn|Vj8S)lCW4u45Jm3nWzjnaBVhHnHsk?`?c0n2yJF5dka
zk&!6U$iMi#;kNISCF_HxAE}fqwgn@EVh7s~S=u2+BR>mlD0!=Y+vwS)X<D-XS+o^}
zoF~Zq?P+UfR&x5YzX>jA-QpjpvAcX|@%w_^>3Iv$500>2-g(e2-F-dw15*T<ZKEUV
zb$jFg&}kKV`T;YpeB;5cel|mHV51eG;HF@F3bqrLW&mskg7qE4#;0r(g$@h!UnPX_
z1mD%_2_UV5+ys_twNXJ_U;mElE$H{BP1ugBZbDEkbY1Bj!+VFk6t=?jyZCp(zLB0C
zs9+vw8;kswA0UjU*M$HBi)<u>PzZSgtKZ=mgXDb?JP)-Ekltpgh(n<2f6Dkt8siDX
zMfQ_J?fp=Zd+jMc+*<r^e!4K1cO&uu5*7FPy(@m^-AwcV#T|#|1a+uj<@AUXC9%^i
z?isJD;_2n1D7AI=rX_x;N+=+pAJ5u%$`gF;b<ezC4KUXTP|!7&Bhsm_(s5}_Ka4B#
zK4*K_^!p|U+smme_^nnx@L&bkcZirOs##5ls*4{i;eB;I`2IwQavLA*UMY)~I?TI8
zXk62*S$^A&dXuUI*FvVhN-S12t<F|EL|_Kf<AN92JIdb8V_xD$E5b4yvARO#BFe5W
z#>91t-yb$MRp#RaUM$)<MLV&Tht=pygH&48M(i+zln&&7O|m%6GmNud6SMkU(baJU
z2$Ot5vXLO#Dv8rBxRVNtb0Fz8`5)&8jt4daeQTwI1A)ZZKmNUY$_LZCy+`A?rLm*#
zFX-eDC0T{Eq)=mw-en5<=<t$<z(K{ZG31cfqC8mVJ|feGxy}@IlX~TT1dxnjl|<d7
z6alKu-8bIi_qJ{oyT5W1<NJE@tRHBwEL<(Vkwv&;{R1En<J{`DQa0@;5{+N|dWp8C
zDaBfF%ANq9wg!XlFgIrbGg8J0x3EL)``xlBff5iV_<{zk)_+w;urIvzds!U#A4g|)
zIkq2^%CIvSfvM&*rCVq@dO1rc<YP$;@v>av=;i8Y^!u>nBQ~)3w4~IWNL6qmH73jO
zJhi&ccOPb@(*<#(`;v1d2JN%sDzrMQrT3-XrOs@U76}zO0b|*UJ%R|F@^vs65Cv$F
zJ@7KNUhWsFl!pq)2el{AQ+a%-X+LxW88mBq4?%CxKZI!i^zd`db$0`LrELNY!l=XM
zqVUf?7%}A5et=$rAs$KdMNA*22I1%bn#C5q8{H^GjP6>8`nS@ri=H5T(4VT{na#7m
zobv}yPE24VVp$wssk$mBozJR(Fq*|Qb%+c>9z0~JRwo5nMyBcrqcl-L?TWqPu}c(8
zs`sr~zJpp(aJ8BNlR`cmQZ`XLg$HUmoTiB5y9s=WTh5ErPXJ4ljvUMD#dAe=o@>!+
z5afe||L~YDqh^7u0IuxKS#mh*9Gg#O{w>3AH`D0!v!0Z9849p|Ngh*f&oD^B=+E|}
zLMiwoU8_t_*Vk66lQ}Z5A&ZDZp8a4#j%#4mipGw$v`p>XFcy`loyzC&DCM8&@6`85
zIa}U9l_*Xq6<h5PpPt0o&uFD91FkRb&{*ksU$xyB_~2RYT*2ubaFtC9HMoh@*#WWu
zKSf?el@`g9x1kVdi+_)!hW_BrNXcX>7{n0I+kOCGQ{Jm(dS+%QD3C{4=6$wM@-z;h
z-{rXo-Gxu?FMRE4u@S}!vPHOPw}u5ZcCK12hLkqz&BRx2Ubq|0kFG0q4wTU#{w7CZ
zrQzbJm6bCZ`78GE%f$v#wtyQ-jZV85m+$SIc&p<pJ^Gz4w;#%u=ehh!ogpR*83j7T
z7DMVPNZvA^te2igsTf9=Vo>n%g3lKg@p=H6&I+{tk5Xmj;RUtbbCNv-eR{Eaf204k
z`~~OxX!n62)B?@M#@5)1e>>jow9v8Pi2s{)BvW^Z#!geY2F3t_jx&uZpiiw%UXuCb
zS=p%>hB@ooI6Rrb*gx#v@9h>RiPRdQ6}+`hue+u<69>6is%_B}>%tiI-y$lVk*+Y5
zGUm0A^V46ij6x~?9>MhHC93g=B=Xtvd4nO17quIz93aq%>Q!~Rr@n18@kA{@82d*D
zuw(SbXbLgY3^_24-u}ZAp1aZfX7)l`)XJaiFutt%Jxt(l^fAA!{G`CM{uT*qf7m6o
z$E5OlG&OS`i|2{5SmV$%LE2NIpT^_^+7DL8GU`~%V2=-9(!7zN{hS=(sfK~nd!KJ;
z)Ej0m2<+-B^fKM38CgNMcrc50Y+r0ad*K5~5`I0yG>PqZUM0#WNIMzDdC&3SGX>5>
z6p~dzM&3Zxoo(G%C-M}O#6T1(v1)bTp47Mu{;B%id(>2o%-}d6^h~+E+lFc@sCzAZ
zy+WfJjV0e645Hc);(X14E^M95oLhb3p4;9OR^c`v72Y4s(GZ>I<cL<DWd4XHyxYnI
z8#EgjSXtrbfvU42xuYSMA(4g}L$`l{Bj1lB5iRXC-0Ksy#60k|fCI&B8GzP(McLKb
zEhx4fAFeBnmTaIRV!QI+)9Argg--}di&<7F@2+|PtI^5zFFz%$W9E`PM7p^?0%hB`
z`XbjTZuqah{%jR=AO@YR?|47EGPUy1+x;azV+d85`S?UFVam|-^0EU#9ipna;gEmA
zuAx?gXH(RLEUTdOg64n4OJ$-%a)z8wP*B107iJpM0EnH?1K;yj>6bM(j)Qwl`%yWH
zHeX~+Cp*AU9<#xstXDiY{4h(uLS0*peUuXETT9i>uO4&sJAsx0?^?#kIEYGnT5Iht
z067`f_F$God^!B^G7$J&s`kv$S)MmDZ@<_GRfv;9Bg?IJkOp!0H=g~6%VfL-!#gOZ
z3k(0e-1xA^uI0qHHAM&;HzB!J4;N}u?76t>^be`4Y=hsAP;bC9o7o!O41i)lkwTS#
z2`{LhPuhJmaf4+}8W)9r8ve)6^}Kyn>hifjyPl#K>~ZS2U<TZgx$V&hLyTgqi(?rP
z+bsEGB^m^gJ`ke?X6!XThda>#WCS(InIiQKpuAi(vs16iRf@z5R=J6c6h9g5rzL(Z
zO8SQOZzG#r40u?Xw!1fUZ~t<GJ~y!TyzK@+LPqTibvZY%utx*!>HY8p-`l1WC=Gg#
zkm|@x?uTQf(=)r_=ebG^&ECFw5PY-S@V_^o9vFN)PhO5wQh2Zd{cdRGa!p@TrKX|P
z8H`SkZ;s>VaRRu5St!ycU(4^HYEbC{Kw<aZ-ZsrxRTr)`mGv6DLPbCA#~qXjGH|ta
znQi_*?bc50a~3fs_q6BTx(DVfZTsc>FW4i#`#LKNY~rw}U+yG_GsolKLlB#mgdZsw
zRzJiS#_`ELh$n|iq;DOq+v8FR#Qm|;W`=fp?%PwaN+8H4YDgvA?YJv!CJ+?-57V1@
z$A{?YE@u;d3?b<qe7}K;oKxQEiTF&_%Pe>w7?oBS!_>si%@u<14P~u?I&&gMSGbR2
znzm2gKSPgwHAXkGLdtaph|PXLg!)AcF2{1-He9@Vr)Bix`M!u2$+;toi<zG#9#fgF
zJZk=}|6*}G91Bv7y#Hsa(IJ1iOYR8!zAcSr7!g0}Xqo<OIu*`xIqHOGxO0pzC<~*M
zlFoO<LNS-*z7Y>lH4b>gl3og%cERTd;Hhi6I+#++<I;*1uo2M;J;yNL(i5z=KjWp4
z8X983^~DuBZMicnHfCxm3cQs<fC+6T(8yiXl-=sr@nYW`94P+5<Ha*d3nX10C_Heg
z^%8k%JF2OVf)l@*JaI-}yY583<(Tvuo5EVJ+pV-2JRx-K&WxIS?^*RPaTzsg7wF!{
z^@^&HAyyv=`ql`$ZhsuhX9%LRDdY*tn_jS-Y;XBY+j8B&jr6!5B4m5t%e$X1(4}`e
z5Pz#t=)LGC(#cCNIzb*EJaB2{altH^!Dr?W_k-g|Pj6N5fZ=n!@^7*pradN&d261$
z-L3<bsIAVS1PXF*a67CR?<+C2*yuh0sc>Y!cm?O@|EkIsVc@m3-1S?;v^UHrDJao2
z2@)@7+_=!Vv1k1>v7a3bQfw|MIt42C);T&D0DqFRo~;$~hz%8?<F{rV@bw23p7PgF
z+v_!_Bk$Q?YOw^F1T4DV5gF;HeqQ)y&rZwo{W_?}pLD&a*%p}9a)d-fo2y?*Ixg;!
zB^oJZN09}#sp!g~*v@D6E-~JcA+%Jl%^l*HVtNv<gnL{}d^*Nq!oZ6zOxn$q9<!F|
zW9pBE(5uNa^U_Ysf*7Q?VIoV(@@bB%%cMI&-Po+K9GaM&XLEE5N5J~)61SVruN|du
zu8?~%Pq;lylkwP2MeNSH3H6TM)(`2@GiN?#J^(5qXH^g=?+@a07XS=X3qkd&jX}U8
zT-D~Z3$6A0IKN4$^@c97-S9unuuRX%AlK+WUoI_+CglZZMu-FP<8JC@dUf3{3x2QQ
z5Ipd&f{5Gyf-?UM3K8y+0&BeK|G#jbs>WwQ-+%gD9s8pAek}VD<KW;Lcv@xh&k-GJ
zN+7_VCovnI<8yKE{pn74Osy1G6B7U~yXVWt$DLX`3AXPLDUFM2k*;s>eX^*<<!md2
z+eNQ_4N6d#unReKc?hb^KdSQx`b;87)X#f!V-?)1b&>q~{T;Qi9ZO)JwiJ(TGk1B%
zWU7a8Bs?Jj&1h^dw{}OlS8uQocXMTM5jU|*)Z=AC@kwp5<?wi3xzEM9IPC9xJoG<;
zA~04=cV_laDV7+OSy1ZVOD7FIW3ZCOXPhV0+&h+ar`R!6TpWJwP1?h9-jIq<=LWj%
zKhf@(&usXYs!=zzXY}Jc>tiZO7-LF>9*ju^-^+A2g7cj-M)jWq#a{M@aDK@mO5)dY
z&)ppB4k)(`l04I!f89h_3QP~FMBVB2r;S>&N9ey@th{|s>bS%_1N0&89Ot=fRxmsx
zAd3$z8tg(zu^wk8&okMurrR7PHGG?F19uP($5Qr5K8Z_7La<I0GFEqjaz_EvYbI>f
zBa{JChiPJ*9DB@Sr2e<awb6OEeV74)<f<uB1@K5jGQ_3uyoU`tzb%chPVjUiLw-L9
zuS-f1wK^Ruth72%Iv*Xgm<oxGDJc)+fQ;ZVhI#0}57&(#8mj3FM!S<p+{s#xev?W0
zACqR`Zh)b6*x)DO1Mk;AT;J5YIgpJ#<i7F#Fqo}t{;c@1171U1jDv>MB+Mn$PKav4
zKj_df`iMc2$3Ne?q6gho05P<16EL%Wx>DkNKSV-AMD7u1s@qW~Q0rk;!k)?#AH8g<
zZoDYTVq6Zo9bjUV#3sX9lhe621a^&xkPdy9s7FlrKE0hNE&ILfu!@oD?~<cuW^{h3
zaaS$se7t$fXIb>3t?Es**=V&b&VMUzi0F<FEn=8Bj*Ch^9H1n^*C8rQeP0j=mIz}O
z5-=?F-b$qr4-Kv&Wpb-DUbH0lr12)H2#==sD$Y9!_rV==%O>L8Cxp*V?ITJoV1}M!
z8NcofzP*0oHDRb|%mHX_`RY|nW9N{VW;==p`?XCtw2Ql^=D7+YlW#V=qnbsV94{PQ
zZ>;k-1zOa2ZwC*z^5|hqy*)jQn;^@0MS-%{=hyNsmv~%(uQ>lsbydreuc_s<J2<3q
zW=QjbT-+ua8FS1`n_peMjBLlI1L9U)RK^XfuJbLbSt=rP2y3X&liqI~QeXd%r*mwq
zYi+xB+}Ji7+qP{dO=H`(Z8v5cJIx9kyD=NHu~)L*weP*3_sjePbI$8JF~%{(1CFH^
zs*VmO{9ktkvYijyhVCcnaiTm?uCyc#3&U=<SbXY3aH9UOO526^fotxX3S9b52(xX_
z&fD}(1X|Duw9DxN4yF6jLgdH@92Yax@~`&$SIj8>1nqs1+WN(W1$|=H-|cm7&CwV<
z6>O)=g?mO2v=^-2O-v2kDng${#cB&_Fj;7%&#Ds}(ZW;|$>-b~?++@5b0*g()tN6#
z{b|nW-W}?D|7uL<$TvUk^YCcA`svh57?w&3<|oKOnD4VTlKq64_qjS)z&Mu~ghveE
zdZ!SV_&vHo$ZMCSLNWc4LR9zrakJnavB&+lloGyxU3HHVVVYad{n3~UyI?>$JCz8Z
zX$lvoCP-P;8moeZkc-99z{u{mhwd(Xi@Rk7vB(dJ{xo>4p*He|{I@`#Avq7bt()w0
zT~80<)*W@^Gj~jxzu(hCP-tRj=m|h6l>J4RW%Y3dyL*<uk$eb;otR4`1!X=@DDd7S
z#B3)_AoQ#7N{m)d`hF^^Kf%bp=lUfIcY4!8*@ImyNTQmTyudW+Tm4Ui1MYGv;8_&L
zFz!ZJgD^+~@6~hi4MSKwzPMQA;5z=4VttiM`<|@W_}Yj~OhPV#U2oP`pyC(Y8!@^O
zSideSlPFA(y~-h*XL^M4n`3_B^UYg|8@1U14$ai(7=upkOi1EkU02>5((9vct!SxL
zgfdNnNPfzbNw}@&Z(_n(NwHJzyB*9`&K9j5a(vBtX){ey0AyjoWflb<)(m6AISr!g
z$VG(W3%NUFG<qr6`#Q&{yJ)o<gsc#3s!p!Gg=$2q4`J-tp^Tv^;=;TZ?I88nf|HNo
zx9J4*q0AxEAE}J4pLiEWSA#BaNUDCM5%H6Ss+e>S3gXikA*3N+<ys4D>ToSHQm9Yb
z8B5e99cM@@#?V)es@@xfWTafNT0>YJG2I@P|B@vm+qMz<{25EZ{d;bea6)VJPmHO^
zi>6z6(Kd!;?HTW_i!0c(6t$ndqQ9`dzC!eI4IcswE<$IHEx|Aag6=ZSb9JAP+gme+
zl3w+X(SY3`XP%8cn#HIWee-9kK~n{PAD<j@$bxA7|8)h5%#0Lc5<R}>R?kzaK$v=y
z7Th1kJ#bV*RG(eSaGih)3QU{Z4Mj+|gu}$yYJ1F-o7D=%R0&yTUhtgJtBhC3s_~3t
zCnJ5IJG>|D*{YbY4wki*8LFg*?(^^mRSCEs0k)OyJ*@V6KZqR`F(whprh;5YtMTEb
zw<F!jLvY_TD`fIy5ON&F3q~sJp6wN=X^;1!E>8oz2{`L;36OA%%b5I`Tv=#BzJ1VO
z%xd(7?gF`tx(<s332Ea);LqEtRzXyLDD0-xFx)IOzm9o5b2)2Z47cHDj1LP=zs1tw
z@$O|eI^s&ZPtuUY@?PBCJYM%QtROH-o^)Lv*T4PTTk{lM%OqH&LqWky)-)<T=?!k{
zV$WhT4@SL{u^DWh<3B6(4i(hqcQ?npDvc2eRDp9n{N(}2zAe(iXVo5|!WT5Q9}x{d
ziU*Bd3BMSaf53M9f=_)$oCfs2`40$UkIHU1KHjJ$-spMx8;gQQxZm?=NfGUH%(Y3W
zU9Pxe2}Msp9vMFs{6Yee7-+?oUd~qf@Aaa_pbYA+KO6xrcK+#nsDmTIV0ZZo^^USz
z`Lpl|?`a0nmB+)C(N<A$-!IoMzlt`p?_x;Mjsi|K93S)kdUwCIkjfzUH~vWuU~`+c
z3wqnw`F!-j*6<Gw<DYRu7Nt@1!#~Eg$k|}XzgulYxJO_I7QHeRCAZgrllpd>A#S)$
zxq6TfhU_ZoJHl0WGS{Edt-G_j1hJ-~Gi+NO*B8Ac1I3}w7{;kt4%hN75AdXgU_3F7
zt<*krA;d2Xa%^)J-XluZN;CrY#*FplfFMzI&Lrff&LBLHCSqD$?o<?CVP?Wn6t&`f
zvC!&iy=`x#U^Mc~vv>KoEA0N7Ih<*w;BTQ~7(P5--QcY7AB+a^tFLlPbe&L6>oMMk
z_KuT@MbAT8HUddSI%-D_$o-*|0ENf(%>1Jhe1=_c5)#2jCdzMVKn6r^UUc5p)(mZ0
zzEPVZZ9cBN@t3=}QOuHyBUWXp6{WsUhk`PMgqZgGeN9bcQE15&?Q3${+Nt~J^7<re
z^h7kVHlJr%SAw4ZvWVeDTwykq-O|<fUU%Zl*2`Kn&D)EZFGW>)der#REPqO><#a9P
z{4maTu}eQOdHQ>IH|UDe4e0kBjX}*51&%&ZEw@B8oo&@5UObcQCIc@SnY)wU*Kti7
zR@tqOGWlmt@N7eLR9z`UIDY5{yL5*Hb4%0FcR5{qAMK^wO_nk0LH>Cv|LgtTd(3=f
zY(u^w0K*N%HeV#KC@*aO4~AZk7c+3g6bK7E4}NJd3wZBzPikc~?mp0a?;`$3ZvM{{
zn@QUxlz@Ps#IJ?yZFLmFfH|j-r|3kDU8bdN-T~IHV)%I61+OI}o=V%PspC3OXq&ZE
zyKu8!u7VmZBR$^Z@f#xBzSeM~QI-{O!#x`TmCa>B3V|&!LsNcBJ?T!)&q^<sTfrW?
zqTR8A+TYVZxQ27jXr`7bXOgB}p_$4&L*Z_sgsm2#n~Jb$zCWv^`km#il!H*~(`10A
zMw%p!RN~gCofIS^K`lf4-SO<$#UXsT$0oD?YTy(fH_;}=hZ=YO?~?Y^6m79m{)Lp_
zH3P~$vKa#Y@$Z`C0rgT$3$l^IAxDnYFpb!@b|K1-W(jX&4yedCy9qSHr@p3bec3Vt
z#z!W8TaCu&*!lw<xzxW<Xk@<NBg@1R^;6m}%ovRuFSv9)d`vf_s!Es2<7@5}2nYUb
zv#1*oYDuC{uD8QPvsLVoM+R-FeByCfg>VN$Lv}#%Akw}^SrBZLtc)BhmJ!}N=Jdan
zqK2Y@i}FBgGgu}$FbkZ*`*L?Q&DIg3E`arJ+FhQt-dw?(1a5_BPAe{cbmaF47--YP
zRZu}8;3Pf9qDL&5#AR-#xj1!pu^H%4Yp)(IV)AQhnc6l%`n?_RVzdKtVp;gAO0h<`
zBDKud2@`?5^Ny$cIMw?kYS95wdXvq!xk#<|CiwCyiTM((&xEVCO>&SyNBmWMIlLU#
z`V7RWlO)>^Htg;vnC9uH<N*Tlx$1M{{pEb0u~x5+fBfc+?1C4dj6_#^bJSW(mi_?B
zr4^C_K9zOUOXkU~I7mJ@4Tv3X%XbL;HDy}*)Os?H>Z&Slt+-h-XlRfr#A!35<CSvA
z6As~K3TQ7L&4<4E@E7`!m(X$zsyu}13w8RF$b%_rFbn<j2=8b3o;&y8AUEv~X7yP5
zV?C9<4DJn|MKK@-c!k+)HBAV%6!8JKuii<4^SYpz_6Acx5!8nVj}Bx%2y6$$fFjSG
z{htX3{E-I^f>=#^;n6mqAilGL$EUDSN>2W%eqWQn%yv^9VWbFoXGE;LxKHdYDQ3%5
z5X-RE04?=!!@enGa0DiP?3cWw<WE1L@}@80&*?qUOr0^2XUC59F?}zeIXcIa19?`(
z_dR(R2Dw=r@~^JIr|PQuQ5xV&$ls;Ktlse)!YJx7$nTHfwHel;4~b)uGnr^R_5$xz
zQf2ZnQbeex$1$kgnC#DXh4ZJJSSi%=S*fxJ>TLqTZ^jFC_#O$p%Up%F#Tfd;`aD(Z
z@$YR`2NdbwI`#&i41jMEsEJc%Gaku0WzBQVdHrj`fe!TBeOlu(kJ%Z`R#MIATKw%7
zZOh-F8zYKJ_?bmSg0gQH(nUHtWe?fvZU<s{Eq-gvx<@ljF^gIEK@ZhM$sPM0<y!C7
z1>bA?obD?ABLo)f6Fq?5<$?sN{K<*OV+G$y|95gotMN-#gFd23!yGr-Wn~hMH<NHe
zsOv<s$@Wt!43N{0EF^lH84#w%h_%nVqH41;vlmtFxFkYv7uglMY?h!U2$)32j8H!3
zC({v08<0{NV;xT9Ql}xsrcWgq<-r}ZzCu%rh7(;irtTtg#9hoZwVi1X^T+*gL8$!3
z)81_*k=gRTb&=PnuflwReaoR`<r~B%lr_^dnr)*0>dN$F!KbpS88<4Pqy`0Dx4_=n
za7pe`Oth0nXPg=1QS0BBgoj}H@HCVhCw2+bLUuKZuE+UFrk2rdwmEPCRu#Gjxj<gQ
znAGB3(2ad<UcBz&)5$)DI*YhBDae4Q3ndt;>M);+pk)-KtJulRv~?0q6(X{6965f{
z-E}i`cT#vXy5;IAcO2=`rE%po1QoK4uv<&j3Cj8THzp06J~K*Oi}-eJtT4xG;+Is>
zMW)zsUc?Vsc5mli{$YJFDC@FY0n>tU5D*d1w{6Rxk$q3Rc+wCFke_@8a}4k3)sr<_
z*4fc5eZ|$GOgg?q)Phg+&}M^}2?+NEe2@TH>?!9<45D*#eviII9_{AcD#Fc5h*uLB
zr2-UHP-5}98Z<;{xBQnW4yQ;9zQXAr?t}>8;T;KbeUg=xjlKHA+V`UTYzle;6_$R0
zqhqjBQh$jC$@T!YY<T{39T$abgXP@dSX8rJ=#It+nSZ|s(cVG0$(hRyGY1E3Tt}N3
zqN1=IT5Q_{Yj!^q0-o+vHu8GPL$f3iKr+J2AQ13O8gV5Y)3>Jj*Wj!*Lc&S`mgk!|
zVagm-ptE@JU~PR9TRAw4k4`;-n1h3)LI<)#4X<BdWDAbVz;%;{4LW_-w2B1-%a@Xx
z9>q^k#FpfDi+ztPyoaIu%&?4RR%llkwk*k;tV+Zs4gp=kq(Qkue$SVNl=mt#C8qJJ
zU1G>mfv^?FOMH$$mFSD!+g;`f>Q74|YfXYlZ^C)@a_~7J(`V;vSwya_(~3yl%Qcn$
z^ZEGWD=29WGN`RNd$WS;8v8UPd|!_|vEZTKwil;Q)Mc|1W(l&qicda0yj7TM26eO-
zuo3?Zj!)$wWj0?|(#5-0cA;ADIwDN1SQ>t4R3Z^(T}Q&d4+(5oJEL7V$ud7C=Bgbo
zbEMUL3plMNVIDv3w`doSphp^47y;f25$Af+ojLCWHP4H6GVAJ7`mn|?8xzG54Wrij
zlFol=wXZbbHTs!8_?Po3rJc5`_nUJ|T!f>xAlioP;4kd$>OUS~s{<7}O*TKDmLd|K
zc@9qfHYHe)lRw00#RM`_lG!c=pSVUayN?t<eenpu{`~p#uIk5u>aKUtad7!Ak^l_;
z?JOid^31L)n4ldY4zY_?QwI9Cim1<k{&M$gdXAJ>E0rjCPDAe8;sj42k*{p$h$CNn
zQ<8qbAaYruv5#ei;Mz|!n81S(&79eL>#5E~A0ygajEfyPlD}Hs!J-ypJChtV8D}Fa
zYg``2T!;dT7erLvDdRQXwH%UB4Wa*cB8W|cZFo}BFE8k_1J=<9PIB(}?$1WXr-NV@
zkUU3#l6z#c`D(&t@P&Km_OSYEZniUjZ3IPe(AuA-7FockMmScSm@RDdap$M6@}7-K
zC~`=GqgfIK2Kr+!I+#f_!o9%7@ZuC>R-Kav>`H8#ecfb0PkA?sS1o%Xk$zQEhBpT@
zRXS^0PXokh8ZLh_(EAXAQGioq^FmRDrb@c=&e0Vial$p4{0#0(kQ45g2fBJvLzF7j
z;;5bXt({2LU@(mDdI)Xt#sL^TXr$z5WP=jHP#>)KU-z{X`N#6aa=YEVhh5DDLn6Fl
zYlcORNj`8){PDX2k@SE^UI>FGE;`xUi74I>%kj^7&)`FV5n$8*z#R9XQ^zm&rZ71!
zXCdVCAYD!h$)>iHHfHvT=sM+E?wx+Nr4k}LQ%)JdH1$PsV({M<mw?Xt;sYt&eh}1b
zc!XfxW7q_yMlAtu;JvMB6wH>mKrMYCgm}2weKJi%&&1_6+mx*R^cRFGJ?tiHEx6!|
z+yuPrJc|4#l<R_V5n0M+!Z3J+Bd3zCw9VYV=2#wJ!s+Sd;7KxRxztQgCaFD0WsfVi
z6PWY+&-)h_pc>`;AqAhvsdqLnAq^Bok@*=9XD=Me18S*P{^vl+2icB@t_9L#io?^c
z`3CI6vTV!>T73M#nf4s#7&xTD^4M15w*jg(m~OG6t5nBV;hF^xk2%w=cy<l#_~lgQ
zIWA*j_i)%4n&>Zxn)G{ZL-|Kr3nGtnT=8A<N6R_ZGPCNzN<Az0LN7^zWx4kkRTDG|
zy0KHc(A7g0DgD`g8S23zCRMn%&++Ee*%(#GF>!p#25*FotNIaOqmmwHcU}@`01Q<G
zygPpoF+72VEgutiC5gNt^B~&d08EkVP_+Ie5<vy{{Qq@W;D?24lZllTudJ+Cu3h#H
zL3Te!)YlcsbgZszIwkPv$%z6(zrcppjUz>(R2}l8uiUND{u?W^K!HJcAlea!rhBu+
zAPq+tX5uHrwAo^&c!#EulG#~U!m=PG<g!`E2gKIkuUu(VxepjdIc9f2=JAT%kNt|c
z?Zdm&x&+yqYMp2Sb3sT&lZAmplx&715^fF;KB80+jYHA1(7OPl8&8Xm7LEYSS$He_
z3aWmB@E@~!73cdnC@#1|2nBWX93Q^WMjVr;GhdD?dFd`%$du&nmZ0Lg3^O^!O%z`O
zfPy^aothXH`F7HPA1f82q@u^)T6?jZiEfi{X8)oO%;?G~>?BIt<Xw2>pOrURogsTo
zxhN#rr6h`ZwtJw%IMO;v?TNdPc(7keiHDZHu>5%)p;VKDohd*^qMC$=;vA~Nz&76b
zq5hYInD4t`!M7`D2;q6l@!P6jL}@3wWbi5Y{aSJ9wt^~XzZLU5Her%fR17cH#Uxq~
z+`;DT)ziTv<$QYbYeB#r>n<ALReRNIl&5)1{YpVcOY9kRO>WfZLr@g(D!;yLMa#5|
zC?(Dzb^!T*qpF|?TvCnU9yV_N!*+sOQE#=3Ne2<bqTUF~ag48pc}zGa#br#|OzD$M
z`$HTYtXD=dv4O2j?R=|^PZb49TmnhbM1e#8?{)Z)#uJLmzMHS{^{mBe3ryn1o>7N(
zomQ$5Q3})_3t6)iIxi0rv6v;l(4|UZJ|tvAV(co2=_lwcl**^BbbkS8jnZagl@MGU
z5#AS;v{<;#gcnLzuX$w0+Lg7sd=iLrjXDU^s8l_o0d4sSuWzh_t10Fgn1Tq(+qFV7
zf=YTjp6Uwxk`@uuiQ%0%vG6JUt!KVwhlJ32M*>F#52xrgA9FGZT#{K%Te?N|_uGt|
zr7pqY*#6k|_W7&zd((1)^q06IgCtd*Fb?`+lFQYS!*)ODFi|#s(6HSFFa)42R4>hI
zB#&{-LQXRuV3aHr)|}x|RK<?HpkY8~jZ$pVjCKKlw_23`H~NT$r5B^uBdiJ*aqk@K
z=j#Zs+F7VvV+3YYh*h+LBvYX?tSbB4F~s72BW_NgH-h9+qV3c5{WS^)fA#2t9xzVb
z2XV`>`pM>)dyD)UaQQ$2TP&?9_YL!ISFcfrC^sruY`3f?0tJNls5L_e=j^cnTiO);
zj|8XP2L%86!u)BO#S`40aG3&^OkQ8CtZ?Bz!I=dFz?k@7az9sru2=`acDv|l!}jXi
zAo_vJq41&Kqb)5ht>35P-Fue8%4Cxl%B48^BO@aPXukbBN9h|Do12GZJN?$uMR;r%
ziWrW+KvzSadbiD7XS7a>7n}MEuyc^vwoA$+v_6W-q5iEA)diM5zBwmA_hRz5O2dVY
zuHTTJ(!8th%?u_Z$2V<PcmmW7-s~_j)k+qe!4LE1R&v$yQmrW-<>E;m<zKl&j?ALl
zx#3rE%@I3fr7#k*NMxBJ4ZEf4zqwo+#;p||sRRdrkDXO@=8(18n{q{`AM%pfoL|w9
zf-60^qu_#`3-XWG0o9#fp+PG|^fl}Xmp81VxBLbor(1#ygi*Cg1V5-#oO(>lqXA9_
zuAJvNF83}5(1EI}zGelYG^ESLS#u6bWM+%i85HNz$#>te*%wPy8blD6j&;Y~|40dh
zHR36C`*R7PoMyBN4sztzuy|k~VCbd1g@;5rD@5U4@cyW!T&9&M<%R%HoMM!Gx1RYN
zK@++kQ~_81JCWcfd1$?DztPKq8SMHgL+?tq1gR7Xz{(~ONAXnJdG*ZksH~E587O!9
zJuoP#s0?oVKMfu-X47;3_d*O_F}NOQi$sy`?(RP0gv3l@`?`Z{t>k=&>?#ya+YS#M
zVAe<s%HJZ?Pb_N1U6M9xYFhIcu8Ix8Sw-H^xi(l>Dm9%7_&8W`%F^HIXCdbrv=<ZJ
zDHL9qb&X$|38x22XFW0eSaK~v)|95}{SPNd!Dy~)9DPN7Nk4?X)bir51{4gP1%+(<
z{ZrQ*Y`JW|dEO0g&>XL!rczBAa2TPUvg;pL_O8#kk(eKc+2fvbE^a7+VrZH#qgHAU
zbJv#JLb*Usf~=f)<N|13Yo&(}7zwRRmCjQvk0NYIh_vCu0g8a~CKA*S#+r0d79}x{
zqptd8pf&TPe1Abym@PmW)z7`JRMD{OBJ$ci3Hr-)>QE#7WR|W<;cb2nBd3lp`@lu`
ziUz+Zz*agH6Iv~qcjGT#8L*F=N23T~qctcRTi{AKa3F6?xQ)$$lzaG7Q1P)RP;>k^
zb4Q+I(3z@t0^@Xj)I66nbfw*mord7u*?kea7{gyu-XnREZM?Tfdq>ONmnAu;X+zfE
zk0bg}kl<6Mioe~p&Qj?-39*sn_qQ53z&I|O6Gc~Y84x#t4qd%Z`BR?#Yj9KRsYDet
z(w#dS7auZJS>2!e8qI5e0LcHJ0F6N)5b9#H3G5n!8*^e^s6r<RIfP)p4Zhj4bc1jK
z%q=x(eIf+vk?w-6f#t2t$@K02{-9*s18wGgi=pAHKP_-8dF=NJH7b;t%_Pv|mslT7
z;}eu0n;MK@A|Qf8Kfa+TGQS(~I|{*#!g!9S->RrR4~HNE7>Ri~FbM=sQJn9bBhU3@
zRf#Pb7xcHy0zV&%%KbI^sCac`Pa-$4pItp&PD$CXtgzW+AYh5rLVICmRXpzrn(ekk
zzQd6!NjsHP53bsO3^G*$W(jZ<%}zuh{-7roq4DkygY#tHt3gAa(ja}l;CA=t8XTrj
zR3Q7?I6K6G;oPi%CEcg`CN?&3d!RGhoLN>_cguD#F{w~9*D;}==2i>;Nn+fy0Gg15
zI}r|S5R$YugZzi987>+AzvvOb#|j9s?>1Akyt!(Be?Ox;IoNW*kJ?hi|B=b4*C#b0
z*o&!SYrku?Lgt?(=Clr$$enpHg_Kw#)PI*@Z6mFpogJb|p$KfpmMc-~20Z_{SWher
zckYM@oV%usMI--DA$OztfSbo9SPf<iXDVvSvEd#h%4!-+*}%Ivmj|Y!qYZ~@Eh$K?
zR1P^G)4-W0&pL`G?VcdZkdMsr*-`ZcE-iZvgM^y+%qL%*+kwtgk32~wBb`JnD(&vx
z)#qTM(Z*(*6&u!z?<vo}AIx$nzilWc+pih1<~Uz{)0CDMH$#08S`GJbrXgO=<(6(>
zCIus*-5)qWZFoxPu-%60`44$Zy1Cj}AMOlU<k}K2UFKYy03|<hSh%#|6(d$@8|p{|
zY!;sQ%~&5&o2p4V>LIdZ@i0-Y>v>c%{WipZ#Pi94cSP6Lrf+aYy>1wfmpy2>xL|u~
zgT_y^G7wmY95ED)HZ-38xpS7al}9p|8UZ>;b|3HqM(y81Uo;E}m4)M<{EcuhDi9h?
zNbI7eP~QUr-k><;UN%O56$mvkftl5x%Gdxs6sILr28>ZM4~<H4*PZ^l1)oT2GQ`ht
zneQTH(A=7?JDu>dr_x~eTZ@Bn(C7%=#Yt*8s>ASNjb5&TsfK12-mHthnS}z9D)+5{
z1Umw9vRS)Ut4y;}7`W=poV?0*zgk=tizi7Mt#`aQuZXvMw6~J#Q|;YtJ>B^{-y{|+
zA5mj~DP@JT$q)B!#+HKr1ES?;s6`@7Vs@wbL-LD**@i&#Ni4C^RV`+I!qqW~kc>o~
zr~62P3o9MJoZ*m11lN=-&G9woS2+j_9_P{^xYzUVTwD8A#7cf4f97{Fvy1pQ3-u6O
z_m3kZ$h@(RD+*y22;z#FPXQq@b!OLWuG__&dz(k!?v1|Mb)A;n`3wuPvstCtpuM5u
z_(J#HlOGw6%2<nBjwF?lF^?R68<EJp%o)9#Gi46^{=r9(*7N&ZlEq-X>%whTS{_zn
znQvijZvSYJpV+soFRnJFB<CW0p|+3fTfcvGcKOes4D;i0h`Yn515T!6@u2D5S`NE}
zMHncBd!Z%ofja}Idv|p87*c_Ob9G6!2lpqRH0jUh@y4ti2>qwn3cO8M5-SZl?(k9K
zEXpStl3NJD1GOb)ZV<$Q@7&KF0Fd*ajo=rO&izNnMym(9shJrq4xqjoo}`6n`}C=@
zalT@SU)rbhf0XexRYhT`si^`e|5shW;1L?R6#48S7z9MY>4<Mg+;w_&@qV}?df}U!
zO)6dB76)zvc*kr*Wh*}CuADFl^GI*%tW<98F7OUnIRx3S*79#LVk)Ab!|9LM8QQLi
zEGeWy6-<D$#wLrY?y?<4qj1oKh{@Ib%EiCVy8CD7*NPk~F!H3$$|5RY3W*X7_{#|@
z4$5+GDOOS&FVg9A1b6Kc>>63mE1U+t?jIP%J>4Ge)9=1fog1mUn6nC*Bpzrj&5-lM
zE%5*HRx{@NsvEXD=0%d6MLT~#>&6b#WfRQr(M3#wzAhiOD(pr2S%7&xLlMKpcYB$C
zR5SYrhKoN;5~sk{;VoVQ<XYb&Ldk#(bhA3a@prV?E}YiuH~SGch*wN~z4R60Z0f~H
z<&NL}48Z#2OdyIK&tVq#Q*NS4aAn;Tx`_b()f~Szb*HJe86Cd0B&Gu`Hc30sb^mCU
zouL^2IL4C~{|6Py3Rx>ZJ}HS)V_-G$r;E+jZ76=ZQn#uuE7f{S;}iAKhi@B(T)%=F
zWYs}0GeSZix;vo&&;|e{_?ZlZ?zQuiNT3jw5~|+rSrg#V!zLhr_z9Ib1YE=9I<^}?
zJnHsrobwQN<H93IfEfKp|LY2ATp<3*b9UL?g?v8U2qJ{r2yaF2xY_yQcxskYWakU}
z>ub5x_#t1CRSvg~3}QtWg=Ft*`a+}>^_1@i&b3%h!NLg*$six`u!eJKh8*sa5>cZi
z<&xo+z4Oj1v5eP!JJ)+(Lb*?+8x|~+;=Ic{L#ZVP;`a&3xR@jf#Iak;fZ|(5XdWs)
zrVo~c0@_kD9Dn0S-N^ndA&q<IdG*))nm&Sb1P)}AdF=^!=GX)+H(NgTV!m(miLy?k
zS*yPtkcl%hD&xFwIyI-^f(=na$*E>22}e6fPXT;7!saq;wQ`h@3e+M>vfOv0FZ+w`
zoKpm<qQW)Rl|f{uuDdFlc7oIN<7F66KSj03)1G}4w`qC0&d1N7)P2Qd(BmCZ*JsAQ
zo_BIy9YI;d`!tmMwaO{%{R+&GHjc~jI&865(2E=EGYTA}13Wuq5xPQPjqwjH0*3bZ
zaf7bqNW3C?%AunG@h?i>yB-!lnw=Jtf-fTGBLW5%i*uONZDqXJU?Kv$T7-U4g{Gas
zIg!i$J-J%vCs`7hM}M!H=P=9Fy5hPym$(4Vp3-h3gcKuOnvY_=q;<!W=>4>Vfs2mb
zJ;-<NzXHwxLWUZ85zWo_uRop|N<1clkb~*z%V|DgZ|dN2o)U8OD`v9{fRp4*2Wz$K
zvOMPh-Ma>HMdB3-gNxRVz6WML@4v*z-wjX-Usy7W>C?3iQmKG@)qUnMP1sDe#L|pL
z-kQIh2fsHmZE4DK)s8I$Je|_zC9+%3PIx5~7WIl_l5|U8?(z?}1!N=v>Pnj9Y^U~E
z$`U7Oo8vM#;)!?ba1?z>9q262%xhaWFg;ZkO(M-1xEqic*rc*M6+%mjwv4)VG&Q_b
zGEY26E5bF(fyXB574OC35k6H0K4@xZa+mvOk?x_I*0qX1Kv}PQOXka}0v<4!Euejm
zB)NK$E8=`{Y<`Z9aLtFzeRDUNS{bbeCkpyvl`Ml=swgTTke~bWUwS$twyp^zEljj5
zgjAxz)sAins-_%z5I(><zfz}vI+s8KvK}mrCY=5Z{G$t^0uHhQg@o>=(7t$hDDPkd
zFX3&mu!Dl1dUh&qgIQ>XD$UlD2PG|oAy*vw0$w=iou7Scc>jlu)R;`J+=aR)>jPT)
z05^6X$3k9Spdu9-CVG7Y+^2naAE1)T`Jb!S>7<d&nUD9*X|L3>2AjL#HfZXZ#>`JY
z;Jtc#;WHA^@aXC&B6|6}^{;q*J50uJZ3!tK8~zT*kDXh4eNbzOnkG_2)M)5)!fHOy
z?B#UGnLsOk{`0fjO+i16@kT77z5JXA)WBePs#e}*bP!Yz(&7|>A{?|`yrXd-|Nh`7
z0<rbB8BHOSndJE?kBbn?5%u_6SB6Eu%bbpgl%DV{Vo;}kYSz;p?GM*iiU^^EF#CwG
z6Q-)oN*b?j7gqI;#!!q-u22Tetfcgx%)eAca5xfa{k`Y;CZC9j!k!BR@uM%lZXV5o
z)0{<TN|Sv_bHo+<3#Q4k@vw1JE^WB!a*_es)JF3vrh_R|MI798?;jk2-*-}_|Bl&d
zDkmy*7fuPk@Y=~c#VA01BXz%YC5*t9v6b^@c<5_Y4JOn-T*l}0_PCjHfjQ)d=T_}9
z;LZwho<8`El+hP}*9~1iUO1IH?|RhwXVzXhryaM)*tj%9QIT#^QLW?899)t$6$P-j
zrSs`4{Aa4B_aDo2O}MhgTbwJ-+%f%ENB7EKZ^_6^6_G)JhmBygzSn3F!g9io$eXtP
z0pWYrXBJ=J&FCL6YsSfG-e7NGp}P`M48DSEn1T6Lgq&daY^km$=t~-R(|<AtOb$^|
zw4SGn(1w7Ay6gUrcks^&AOrg~V8X*42RgSR;W+4}5j9m0>+HBAGZil3Q`q#jcLN^N
z4#0u;nho#P{>qsqySo9nQRlcSJ6Q?I1j!(`6=gCMMMm|liLB3c7RZ8G6B&zDokwjF
zdJ2wl+KTfOz$L=Kc{zn-d5k*1s&$@{?6qf)0O8QamX2=7nh+y=OqF>CH`4}NDkd@K
zmDcUg<34?6JpouDKXS>CkqJ7Ja3RDXU6qnVe!PWIKN|gQMv49T`H{B6wjb7cvBj!?
zMKPjUWdw%u_q#06PpyiH#jUv%kVZ`D^%t0=s3L|7<F2P3k0}YwYYp>q;hUnK6_cW@
z7FOkmLP((sWpVlRngiLY-#5X8^7JU7r`X`9nB(7x(h#h8sNrmbbvtG=(ceb%n3W8%
zwgFee#94#aHbwahW{jgrM<pU_kZmuX`^2={cASBgg5TGSQOiX=GHwA|Oj=ulrtxZo
z;=fIlQm=gv_xYI>NT_O|J3&?jxk?gsQt0dx#+bK1Vs%D@=UKVlI(O!A9Wci$&oS83
zp{x_koUvt(mYJBP=^;MI0VX)<$a$`mDmZyw&+*sB)+E;LWO-xVtT7N>pUUs_0C<s3
z<f#x7p+|4}m={D<XqD1m*ZN@b35g>-_xD{6Z!MpP8a^n5KtLoH;Ir!lXs6W`%L7+1
zL!ztTL{tE8E+{(?XS(e7xRn_j5_wU~b}TrZ%?7;H()5<LXIS~4)9-eOzSHDlvkU1n
z7&pUc`hsZG<p#^+unv=+u37(-D_vu6PS0W|4Z=ZkH2N{?l%z|QAI-32K;Z0JOh>jP
zTa_VSOd+~o$RSa?$E<)b^+LqguBG$Ize0)<CJWlrirvF=X4nHUc#xhlklieUaooZI
z1)ktfl^2(TXjNFJjRF2vhht1#d}ppY42e1cXu?UPNKZfKnuGWXM@4o<SazyCac_KF
z13vMaB&Qs%XN)9j%yuh=zc50t*~yU2Efn!pMqWkH8@Ln<ZJt$2u&M!v46Z?-gy&um
z@6U4*Km%imQcfv?f+p`t3MDZ6C$$kJg3+RnbyI$x6lS?ySa@d6r6v3GibTB#o&-yo
znO;mWa^noIMoQ|z;F`vs?i1`UuGR(&uOnrd9+z;YTFOkKKb2(Jpq@SzdlSb?Gb8TT
z>7Rner&Oa?<c^xxUKlhtNSqal3ypACu!?kS9e=xr9hL1W#(qq&eyzZ>fhTm_f0cQ}
zC_Jj$ATNaq9L5woM2CB36;L%`F3l{=FAN=tWN}z+gp^sS4|RSYG40RpyQg_R;w20J
zhgr_!v<fjaG{nX$+Trk97!yPR(&#WRwC}P*wnQnx+XI{ZuJ__u7v{sm!?k9+{yQ5c
zU=SR5eweB%wVuG_<mQGp-ME4sVq8J5PFPcM3zn#2NT;gwJPRSocw?C^%Eu&|1j>wj
zhAw4zipAA874jXs8pygTdfoaJu@uF~*)lb#>i0GY0c4pNFbeZ(>-TNHZ-6@%T-{0@
zRS|0M83$3>RPh}O6MC2GN?f7|Aj@POnx^J8oV_v+7+)-H0jS$!+KS&fQ<rjOR-I6A
z@5zc!k+L+4TwgVtlv-<Y`9C*tYCEZZq(5tz`G<_L>$-*KOJ2cz<UMO(rtT8+92uJk
zl`%60xaGVm7cvCboOKOcjp7s~h=ce>mCR&qs&eyGwPgEt?C}aQkV{>{vN7{y-rmzF
z67N3B<LYEZk=D*5Y7hykyk|2Rv<<_(4R>9pHY;{mq0l0zPX-5pLQG(xrU!VnWz4Jc
zcn^5<2B3jncYs7buesLMN;@YfcABtX2%<zKf%7uKrxn?|C-Y@s0luM+ilAM26&28j
z^Sc$&KZDk=u->b{tMHN%ikxD`iT(P2m7%yl`6%!p{HnmwX8>ey$}^j=FbY_Km{qnW
zxy4_!G>MskKyCuzsRfQsX=@hhJ^6_HYa6S9EcX3#b97yCYIph<vXaTkAdh;N(;$?=
znHqOkx_*8vHs=<%A`4{Wrw!e2pC(t2vxP#I&Mczw&b)|nNLBodGj}dtmpr{EzNhu$
zS(gK=6R;XwwxdX4R2-`XBx{LVpyYC$Qa<k%#pA=OdEjW97+qe=(R?z`Qc?F*;S3pq
zL5aFr?qt)u{k*B?+bHuz*T5c1Qvq|aCtrE>WIHd_b^KiVvo(u>o!Oy2!cim~G0qPH
z#MELNoKkJ|`e0aRZoOY=5rB61%kOm%!^c_iuCE^9?HqcQK0n9F>b=Kh0UF8o9MBY_
zO9hjPMYm-XVSOu+Gf-KV=NejMiMQk9@;+yRs)H+_i}UNVI@vGaAhb;|Xf(qFU^L)~
zedz{vFoVGGQT>l1C(ln1%)dyZzkb->e`)H0zYOIe7755{zx3Y`Q9#hs)2l9o_;;&|
zjYufn39q88I<x|~LBS^>2rYhDD~81<{mjb!gI3FLnORR9)lCEA(I9<iG)^6MfB46C
zlgVVG)rXG5?^+=bvb`A_i%Pou(~M?8Y_>nml0%%4kLINueVGbzEpyG9U0KiC6?pLl
zUsp^W>J5d;)xEwWG71<U$uF4b3n+@|CN|B-yW3<=94WHd1xG|X$`E=M4-!;rM@(L4
zb`TuZjZUFhQd!@QUE*)tFd%-W$CO_GqVmmYpBVJTZH(AGQ}ypr0+&+GH>JAYb|Uoo
zzln<a3e|>GP;!>8jYaxA7Hkv;@CjpsuxZA>(yC7U$>h}pHkoPV$8U^lLCAz(kNDe}
z)^dagM`1aCF725!43tu5c;Z-}3UtUl(*`|#RY@FcZ1X%TbpMh1V_PB{1*Pi))81%~
z{oI1lg;?rPv93Tn;9&17qAgZ-i-*6~%I^BU*)fM~vHsc5@c#a1V}9vR=N*BpELAMi
z`={Rot*FxdZr`+jCS$$-dh=!0Gq}(#Ka(>55(9DA8>g73gIy%j`Zt$<)h>5u_W|bZ
zZRu*M00O9wJ^kC6-=uzZeuVn<C(F$-H<7ZQFpt8HsqX{M^R_nt33O)q!H7>x7)G+;
zo$@EyX6*3x?9bI6SBtqbad`MAG~8>dldfGk2%5FjcWLq`X0Ki>h~Uj|G?A0taBlW5
z|7ts=!_YfYQ!#Q1aza30pN!i3M)6x$aarJr(&s^nWhT9sRCMPa=D1&i&_+SoGO?fr
z>b^ay``h#H2I1&jQi{z#uk~uaFy7Oc#y{>~Nn}B5DL72uYE)GA^xEip6WIM|5zmpU
z5j*w@Wi=cXD4Ao^&eZX;gns4QifZR8xUE3e1z~B!tl9bWW$0{v4G<mCumNruxq2f@
zcdot<%2c0DL2NSgy%^o?=~?apL)h5rEtMm*$0LH?xmh}Ge`N(rvV5r_f%M|SQaAIB
zYLIVuvK<lXuZ*7+LB}bDvS8()1Z#PxicV8-OERgDAGIEv^Xh9(h_FN_{L@q*GqPNu
zR)ZSd<23tU+D;0LN{5VsHOXLA3T#yV^i2D10_kTUvC~&_ZCMJv9e@XtbNI5AwUB=y
zj$%@fU$u8U4sCg9s$>V*Zk#GQTtD!ao>ZXHWW+0TTJi&E(oJA!y&Wg|cv<;esfw6K
zOm+RFJ&F1Py|`9`#3|p3#7ST5?=l!v^2TP^+vvR*bQNKD^XbG4Yxu2F)RGdigBV$n
zD=|~NYt@{6@IDJda+%jR{2e;xud4P1prW8+w1Os<7_V1N1E4>4(LRKkX1vW-jJ+3y
z%l@e98c^($ZTLQn)m`6CvMze6uk1N#Xyb2km}xw(-;U&m^WQ2G6heH5Oh*k-35g~P
zT76IXw{Nwh$27`8$Bdo>H3U7>{X_jU1!kI-z+N0p6E)f`*|jvTl|m$vBmTj`7GK@h
zU`)&!3JTO^QDHhAR9S-W*TSZWv$!d(>yZB;FrwD*_0v70(d0X1mu4wdVSSQoZ`V#*
zID47znA&U<BH}_X_ZRk<SF8C_j$OI;krc-b9Zd#pgt;0*szh>^t|tC?EvK)CEco^v
z{=VIMHP3&)f1T46WbyBlglMfVIYeOiX{s#6PytdZrAd==Z;v4+g!jo^jR#xN=r$e#
zT}os6ZeaZfpA-I$>eQcgXk}5$f;Yji`9~%38nmb_QL%&meC9N)6X@QJpj`~F`dg1E
z!sVh?sI~d8C`8E)D&(A$FrmNP#=NVGbb>_k<BA3)tCD8;9Tu92_jj}x)shNC)YKmx
zf*T+gBs@@(!x`i>pA+CvJ5Kaw2L{dyq5W3b#i|k;zEKJneu!T`z_yyp5%zy9<g$UK
z-jzxEhyvdLuHW~V7*?&1#fN@SDcv3?1n6={q3J4wu5b+7Bg=oxiO5jzkJV!Q1Jb?{
zeFy|k8K3;GA4K2W{~_st?@wqp02>-3y;7Lp?SVYU$Bi*vVzBLn>_QtVgpQWRHarTJ
zy_k0s(zH&x0xpvW?(RO>8y|Sz7S3YypD0B-3<=Y(1_SD;ts$5MEDQR>8+6Y5CE#7A
zGs)6gRtL*M6;uA^>nLOD({kP6oSlRTl_j+Lp<eSg12%)LShrT#SmVulA#$Z$j+H~q
zEm#StA(|Dd8?jfvXIEukdFUoxVD5c;R>Eed_7r(_&{{%bc({p5^!c+66>?^E@}V_}
zJkQD0Zh+@ykPpo5*V4C?Q-Gl&FuRxR)zVQDdQ;jca9lZh>Y82L)eGw8tLOgj)-eTi
zpT~+$3F{R6T=WMrNtD-=VLfUJV9h{HN?%D@;+^-GA8G~Cr1FoMW^G>f7o+?KlyUTb
z*xkG>=0*o;PRkkPX4$V`;KRyKhq57NXA7E;(UN#fezqu=8?n<{h!3v=P<r$uA|H+I
zJkl)+vePz5b&%(D<+@eg=hve=S={*B>3_sJy!NK;x#jj%oRt=G`T2Y2&V~eTKyUo)
zrY;RW%Dh){m3j|46L)Sxx{DCA>(Ar1A43(npP0Pv0lWb;9(sGcwxvVe0{Yl(`qIKK
z6B85vmr@R1euh4NAriQQ6bBeB$MZoX$Wob*Z+)HF8DSEAIHJ#MOb)tLr{w$px40ID
z2h`N;?2vcyGmBAA5K7Q_M=()47<fo}v6joPfOqZLuvVQxXo<XKUa^`Pz7N!t!O4+U
z>ZeE?>Ssso<bqx-N-i2p$zjviI0%*ys&BUQ@jYD)$)L<nZ_c}w)*Uwex=OfEYsRra
zqaKAVfSZFdDswfee?}m(Ubn${>^=<cW-V;EkniHtBWFWXC?5sAKK<gHLul)aS)zMY
z<G=|BkRF<XO#`4NX~cgyWT*1AA<c7s+?gB291U7DCi=~G%x`s;`3Vo<hxBX=Gc;ur
z4W@j$3y#(alI`{3WM(7+ZxL&Vdp0L3aR)z%?VasxCG#arHJhp9=-Z|xr=d-ylpKnP
z3^~+Adye)<K>VXrAD<x9o^Z`y<#G-A>Q<J9+CWHkG@L;I64uW*zERT|F7P;#9XPV-
zS)F+Ok+5G&lPG;i-}G{@hiv;ixso#R#eMNJH>2c$cUH&xyF#{sJy-XTD!(nzZgHh8
zEO246Tvcyq2kZHUm~L-Q4>L5xUh-D#p7S*-@Kdl{dW<>Io<(Fx<9mZIhR@~Ty|DSz
z?DXuStGWHMnjbKB-?<+E)CFOh_`*`%ID$#2!X(i#qnSJ(>av7nWYJ{6-A^tTtL(4F
zEVpP&RWdJf*HbiAuCvEs+)CDco@dO@f1mmkx05{r*Zw=I<(b5$KQkM_o4x@)z+f&S
zT9p)Yh(u8CsqKjuUZQz!y*I%_2V%ThsS-?4rn=#%ZUpa$h82!MS))J|#CK=6`9+y3
z+wCjOqL8pdP2jrs2$dSCqv9bSo;}tN)BtqfYzAzSV`2{1VNosNLf7IL#pAN)_2=xd
zUoIY}tOVC4h(&|MSMguuEjyeYWQte5d)O}%WO1CD4^bR9Fi;LNA>B_fzO)Z#HA;N@
z&RN`@<gOKSxl{`lah+J_mj-tK^>MO#HaPN02!^vEG96xKo)w|_8;K(me)n|cMbTT#
z17F&?OLxWBrlMK0e`ofm207QNsz_k$1zlrS`|ny)1%62!Q?N*`RHB`ujjVF(yaFQz
zUm~gFF_*b4yt_cTw8-Jn&!bM<1Mb(R4nl1!OY-F>X;n8X4U5s~7CV`lbQjda^#rf+
z7u>5U5UO{?NUG=e$+a|wZj;8XA6c;eVl7J{CLKus*!-QmaDOc)40J#2v-$1|0MS7E
zAP5i;^fX%o+@8)~<dR)Z`d;ClY1Ri7HUq=;Q5^WF@ALk!lISk3(k4<FMFq(P5Dv-#
zQeOOQypKD1RC*zSaDx(hIY_@w1xGp^9UUP<e>J9T{I_AnG#mT|PJJ452E7B&0M|&O
zU`<mU0B-;Mmo2;TiPDgmfB!8+4$fGE*Y@C(eTLQJ@#`e1fD^XPL@;;GK?tp)0AYY(
z5k*esHpCNQM5ogEGQ^0qFBtMOGv0?onaO;kF9j{Jza!1J<-5cNA$L&`$!+M2?2{1@
zkG6iv-ng2WBnEd4AkJjpw;T;2<|Wm~keSNiW5yn`BDFa}jzY=#QB#oamUb}6(Di{t
zWm0|dI6IrtmuDSFC(=nEo0cBMot*5M%#S2fCcZ?FVN&M#OD-Ba!lLM_i9jGV!ndP`
zU4Ndtl}+~pHO%a|H|~cm1Fo&x8_j80H5a_0s-uXTJRc*8Fj;D--yva*DiOT{d|pYj
zfMXZ<P4lT-F-d}{9+@*?+*X|1as7KZ!OJP3c@`nwStwD6GDx<U;i}sVA0@_djbk*~
zq(DJZJExCHDG#C1w3QaAv{lpiM)+wHPML7_EAbT3nISV>`g1yTqC!3M9f4L`r@0hA
zEo8Fv10?wNVH!JO1?q!#^(&JVG<Fy<tRXkFSL?Mq<EZq(2Eo4%)GKrwX|{|x^}SB8
zfQF3K#nR;y{?T1-H08x^0Je9f*vP7@(S?_pnOBjD0cSf{&hY8W*%3DIl<b`z_$K-c
z-O0`^ZTZXw3SO%9w74%LaVW54yqS7){q^MyoEu4;`8M=61c9J)##x)-LyO0BUW+K!
zR`-_O))P_)PbVi40t5f{bXDc(8QcHwX;2H#vMuO!5mHqYMEJ27{7Tiy?h8%&{=2LZ
z4Cb==BY6yts%!i7ZOLNxr#ce~*Ala)C4^j{+LwB(Y(SWpVh#tMQ_sT!8Fu?7MCN71
zZIycdghg}~?3;pA9+N;^mW<)SL^%PixZjt%)H9i#cWU>ZyHXO!S_QE=liw?-VN;c*
zAm^LHT+o8^h^AzZP!80M%lJZ`bec$hLy0>AP<yL0mgwf!-1j0;SCD4C1|@J!LX})X
z3nyg3Hd~%IrV`r^vwMzGC8FZi7B&f&LR&e7VG$4Ib&iDk66%t)v0XAqKqsx1Wx@{A
z&+8V$rq8SGe8R?0?<)%*(>xxqPjR*@tRsv2Rf5)Q7jJ<IH;gl^u2IdBbmVGTix?s0
zgm&iWI;Z+J4%I@I=cUJa9Nl7qGmGV@2IpLX>ZVtdTOImtREeAEPjovIDSx+L#<!0a
z_m=BvQGevVk7Ltlck7w{KSK@w$dJ;^A)t4OZ%oI}e1uR>EPQT8@cy)|B;g-Jok<wG
z1AZ?qkm*4ph@nCNQ{~Z|C30h*AtP3Z|G>lVY<4)4Ed~6VsrH5ZcSi`WwMD^fO?a|Z
z0GU9c^fPPlYt{eqysJb&zR$qpAjIYGrm9HnI%xfe_$#?l(lF1!pZ%q~Bb+lvZIF0%
zTsV|3Z6$TcD#~G(+{kS@QBi~6ClJt<v<SHAL*5yuyH)iZTk<GYzpd}E$NR3HB9mXI
z(j}qNo_x2N3J5&Q2s0Yrburg3no&1;WOh#wC^sxA-rrpNS_Z(+6a%O4)%E*Ql3L+$
z&+zNKW;DW-^d`mFSgN#x)?E?M=M_^u5PbFX3*OSo-f-lJNN&tK`h$N(X#x_CT|HK$
z&hIkir%<1Yr3{y*fO6EAzII-*@Xfuw&;j+>5MRbIy?fm+Go(`X@6e$mMd6NhLSoc*
ze#^YE%gh`|d38jA{E5XL*BU|d<zY><a|=#B(MFbolTJYlT5jK^tg}f|Md|`B(*B-B
z`H(b`ei0;~`q)y5hQHE9`Cb|Wnz}#^xO&?OuPP2gEDAjO1oITU8~W+bJ{gGblt#|3
zH%%s3E-#_|zOJDUv7z@iP7;?Kp+w)5W)!lRE~ppCGE5GE$*MEb$AqVy_+4w`=JO4l
zE63$lPj&$WH|BpkdyatzbFfwhoZRx|4va<o6`OuN3wi<Ju^4wF7r*|l+I_zQpe_F}
zR<wbjMswgHoNG>kFx^nya9b{Dvd@?)(Rxkc;y4gEQLy*5?x-&$j*Av#6-L}nwt+v_
znCXbi<4BU2rf|i?kQ|w?pnR@Q@Lw9>rxlxXElDj?V3jejPbp39#S&S_YBBt))<qYH
zSy0<PsprOJ6}puxU0ao~ssRJ_$sG#812A{3S^^Q^7a|%>g!IHOSDRl1^;p1RKvI(1
zE1cVoG4#8R=q)hDGw)9$4`<{4wO<iDGq)!-pFptk-H?kDw<7X&>)c|4!04TuFIytZ
zVLx2TJ?!De%0PbxJ5f?@vGqHFEFpbMGd=`8GS94_Iwu`nn5kk)d<6e98-TS1AK*|8
z%26z_@F`oNarN_=Axg)jfp<83n@#k#OKEGF{uLfifFad3Y2zKU3h<QF6{(6Vr;Q%3
zzl#5fD*gK=R{B;%s?B^Dlo=i!vjj>89jL|tKR({BsuqH5?oGj9oo$?siRV%O{`RI@
zQW?<c&xmSSB~2{%X0lOCq$-H#(dN{ods-TwEVg4vXIx?I)!Y~uu?jFU>i^dCv{r>S
z{rA)Pjh^Q^;DjQ<-B}Qj=z7{Y2<zk36m$*_L<e$#5n+i1lX94yF($88lj~Ss7^qCR
z#_{?=Xt&GhS>N<NeQ%;ahhpSb$l!lkX>piiBy2k<TuOyqgO}IsL~qWr-CG#^uud!2
zf?<j?H8_ywD8EvJ`h%{p#LM$&392nCpRXZ>3YOO?Y9k9JgKL>5^6oZYIL!3?bkw6k
zc8pG_{)^9=x=I70HxyHrE%7K3eO<<VKF#=b(6kaYV3+DoOip#gANU<i%um;WD&13o
zhxVsb(_+W!5Q+7rEXO2=$1Hw4w{vu<ccX{inx?TL2@ZlAD^UDp`?&-7qdq|b!$vb?
z_I=r^EDu=aH#Yuaf`hGiEhpUju4>u|Fr<RwBjf5CW~(jkvL%s{pHiJ}jp_4{XtDy<
zQ41YEQj-*pE#?d8n(OHmowQ18X%W@Tce>6jZAX=S+_+*LYdwD8=1L|RQzmC8v#d13
z9~+(t=Xz;Wy=n*;N#HB1_jI|Y{y&<|!6DN3ecO|5yC&P1?ApxDuC2Dsw(ZTf+qO2_
zHg?ly+txdu_q)G;VQ@e9b6w|o9K7Lzf^!mQLbu=eurdsPBAo?7;OjObf|H}0cSS$J
zPC5~|kMr>lR51D*R>1u{r0!)1er@WvuN}??Nr_;S?t(Dk2RM@9aL@HYqmxFtiq<;0
zcAiEI7f?CLz#rD_jh2-AO2H4fA-kkOBNJB069H%VnX+z6|78bBdR<``(O!v2NJ^wG
z@?MktA^o4yHo}Zv8oL#1+pijJOx$1zJP&G_Q0N(d@MuM&rBEO^VjnmB!Zwo_L^rD|
zG2hWfrI|b_w2emjBsHPIe2zot^~J3Ev6h_yWvGPyhatVQj8wR;1RX^DptojJ_1IO)
zq1YdsmhNxg*vdnhs|4_i!!CB<@it>LDmKG9t10jqM3(CiS0eC?@^D=LtmfE}$UrLQ
z!JDbx%2%STv13v)qI`tJNt#i@g(X5vVnd`+PdMF;XB`>V4GATM6ZmSArXY@wpP8(E
zv(*@|f*`dt`l@7$B@5uhX`~Gw;%n*ZS|b%jT7?(uIt4_wad$GWo4*+0p3S2Y5x!{X
z&2AN7QTTjO;7b{be=dSpla>)_o?61oDJq=w(cjd-sQnTd@_ozCt`7vBe1wUT?k4ow
z5h*j9km2vU9@rvDPNiLvP?A`$HS^jsIFl9N_c`Abq01>l$36~%{+gQzJt<+SdXMI9
zX2ZvdyT>@!B3hDcgdc=rJ40SXXV1Qa0+Ayr{Vj}1rtpM*K6&2x?mIs;&Yb)(KfKkc
z+hVnhp;Be`r|}u>fxU)tC7K~02&1_V%_SS&D)^nu;juqK@VIXDhV%M<@geNObRvxT
zYBC^l+^k2nB)tDhSxHLyafmGHI|9;LHqnc%rfyxg!W11%W<vIN<|Q;upcF7wmTUh_
zlPazN@t^D+k=O2T`4ixOr^S(cy2e4GjIhGTdy)Tb{8lgAMfk>R>_&hLsVDTG8Y4K~
zveFSov{(pT%b3KX6yg;3T+y~f4q{^~P~Q+JP0c4{o`?k`z3-$+0mI475J#V~%d_ks
zO)=QPYSB@D^;M4{l;`E;rhD|Sjj<J<0mTRmx>qRs`;MRKQYBYM&ihtO{7iM41vwUC
zLPy!7>3zN9c}OA$kCJcur0CV;oz~c8H9Eu;b-2uG76BJzc+O;f(1V!Ft*JOD4tne<
zaU2V^+56sOlp=q&P%a#sr0Qo`9!ay%4C|4z>H3(AeE??wlUpm(x}+~wLUaa+TXOJi
z6!AOo#CW{Wi7JSkulE^~5M|;>QE;5amp<a0W=85eHjAzFeo-&3`p!Wnhot8{H|7q`
zE6u@W-Bf^d%7d}g<Lobs6858QEh$+_>A&ea=IENuJ%6%gm`9r?e<cHPPfIp}Ay@;w
z^P(*2w5UTv84El{J=?F}@C#vI@!mRWkvREQFY4j*{DMb)1T~edJkMcYH@3G6b!4)b
z83baU-Yuu|Lcv_>yng@pWB;(g0tm2+I*g(qxWgc5k%)+hvY#yYsC>TsDj`?@-B4`e
zf_qB(G`a_Ze4XZMHCS@-=`6(%z6#0(ul+wW-KTY|v9)S>=>JdWUziIw_9Ea<c0X-N
zdViZsd#C@l{)@ox<l+t2=d_3{^mkE_<N~Jvr+hRh1+|z;v0j%#D-I|-_6dl`DcP<{
zG$-l;rUT4Zh;KL3sh~pw)%D)GW)ON{t&g=kgA2~3D$|g$i~SvxmKV^SjS87Iq8x!9
z<^e+L2DF5%Q)$fb4hMGx7YdOS{e+*krpjgShrHC@E8imAg%hxP?&MbeuJ>r8=ha$_
zEN(eI@L!g?o=T?|XO-L|-q0~H+M*Ay7IugU^*=?i5<xWNRreYddxc#|cg~l=g!uk7
zaKyr%<rb?@`Tewlj<<wtVwcH25??Qvs)w-$)jDRqjD|3t-$o?&O?h1g{>Bdv5yFOJ
zid5I=_5P4{<$bq{2lOFq8zgd5@SgpsmW!#`{`arnozr-%ey{27Ii<+)m$eb<j{~ak
zYV-=|bBm*m3dSSk!e6o4-G%cden2xqLUZ$?{G8|C|84J|7LwTb*d%v?P=lJY267QT
z{&T!c3%@X7oDA<-O{#F)-W6TDR8C~h<G=&ZW)bn<`wytKG1N+^iC>4smHxvdKGy&I
zAb6`K`<RGNqU`DI{`Y7v>FWy(qKBaS;f6#*OS|R&p7(C~-w4%y)Bb(ZC@}B!)Y9bl
zC4+XlQ9#DBbwDT#!&>k#P>)57kO0=YaYxn`vjhT6=E+IZZ!Z3WTZqV^%ZHV4kSu@K
zzPtcm6k)wL-k28Q@|oSxJg}WjxCmQwmQ1ztAqF_ANi@;w)jnl2rGv^}nH}?mhShde
zvw2vxnU9wjH*R623*A7zbGN;cmAk3d&y|L`NFUPJ7R#h&MRw+G-z@obAaQ3Pmx&~2
z0hWB#cl`rL@+tUS5o9LkLG%{-s7h(!2jL}@y=tQL%Wb6PM`U?PMmW7g7p>Rkn5DrU
zz71~B(r@lZ;FE-$RB7jkdlKj2Xqe@2=I^bwE4SPz*<UWkG-t|XJ9^=9!)ej;)f9{~
zP;(ex69}xae}5O)#ua_Lu{<zJwIb!o1n(@&gpsP&J8>1sLgLKrhpg$`e>Gzlk@Ko3
zy_c$kfkI06?&>Kdts*V~*PkQ5)1zO_xg2p$x`?4V$6h)&2bok|%r`6-li!-!ClUkB
zdU>i1J2TzLy!Oxu-oX;;@a1JtdK)`Te}6O^m!SE&2~O;B3VO!}x6Pj(qqpBis+tf~
zl2g|QTb(9DD)!d(;dfB60CHAOwkxPX881hY?9h3rpkJ&C8i5wDiJ}lN{(otOuMnQ=
z^l56{p#M=Bq#RTS8o&6g@o^C;f?X~F;G%mE*=ujwmd(eW@|Ls69q94YQUuA&%%)(~
zAS5G;lWij-T)GM-7%F(iu0Xu@P?ILyt6sGs0+F1ljVi^YZmlMmWo5K{s$2+F{y8Ar
z#Bcf_UZ!>TtFkAHc?0z)W7_yVZ^<IL1O9d=i7_kL(7GVsK;08pIA0~JfL&KM`@?}k
z%B);@a!*DvBFF4lZv8ypucFCaGSJ}?6b0IMhkw2U$8nc?$LgPS;5{EwBPO6wANzr-
zW?0ueOJ_&wpqGqM*v_lb$-z1WBX&_rh=DNuj7agsF!>dY#O3|jB~ZT+rx3n>ybHj*
zaCxp4ArmbT2s_?Gy?>fyb>}1#FZ#9B#}a|I^n@Xoh;*WA7T=9XCZ9SZpGwEYo#sWz
z;WUJ7?QVk^NK!5@Vo<7XVzXct{TQ|D_I6|Uynf%J&10^cbm0x+$&kr0YNmJ5#V=Rn
zmzckyk-Crj?Rsd5wVO@3sgRp-oLl&iBdzo_N|o*U2fX}YO0Z)WFQ;b-q7hx~f<F)-
zIow{^utE=VxYIRzG(+hAZ{6gue@ejTe=ayNF`*JlQN&4Z)U$f?%0UQmX6z#8^YO9~
zK3}FhjB5A1{Z3ihLb6DGeQFISis?`yG;|Jg7KcX4)C+%1woBST$m|52E#QvocNt99
z19ovjgSo8EhN!0j&GW1OKlY<G?yVm2)?N>vlRKJX)A*;iL_Uqq$nJW`)#LT*q6cia
z|MYl8_JQpATXklugH1#^8oLxW!E`&uzxW*iKIMn7%rnkA=sWchd;%{uwqSFGNlaeM
znkhCe+9)G0&dbByK~sB67x`y7BYjHjrP1C}G)|26YxPLKNU*!CL)>h-imyV>u@9Bo
z$e_lr+&$te%DIL!`)7_4C|aBhGv^rOH|UM5UDeA=$D(Ww*KBrlYJ<<+z?74(%$Fqi
zVlcVC#*g$^mbPPgKVoQAaRLi4Vw-{?ifzQb&dVj&u9DB`jB6C|%gtt_zMXSe@<~o7
zKUk!uiZy<B>P8q&h<GMiN6m}tp+{V=Jzlvwj^q(U9AbR)%1vi!R)UlWGtPl^`vQA2
z9x2;>`Lso>y1(;=G)n~RV;*>r_&@`0p3?Ol1iUvC=uT}L8bqz?8hSy<R2`An&O^j-
z0oF#|vs}s5yWwdI@1^*!mv+k|Dv2;w!j$flV1I_7Ud~wKb`GmSn1=@;3GuzR)7x5l
z(7#r3aeiLbN_OcAeL=<xk9$rNLW=3SR&r4u_-gRW;6EbnA$fM!a@cI5suc>p%utfD
zFhaclfq=t%AB@LVDBcKtfP?ogpr^xoy4K%jP=i%$yO#z;%EnE4W~w07<7<V+%96QJ
z!siT$Ijmw(!L$|wCE7i4Hz?j49<LllP8axqxP?de*ncTwI!u}DyfYMgJ4_YGP5AF!
z-w#(!zeDSXE?BG9MO34#)E9_{+B2F|w%LO;-QVeb5h^2cMF+-7=L}RvN7LWTZu0;B
z+E`#w1+QXZaFXKwoTVAjX-fSO+X}%THroFaLy+%h!w|#V*nz@xsaYSFMvJa_xkl1b
zE$Z{Q1Utt8UNrBnrv#ZLr(BWTW$$uqWCP-Z(FOFS_ci%d3a+$Uv7-J3w2Ief{5$#+
zjz%LwstUe3MVQ9RgTu^Y4{wEq&I+PqnKgq7VKmBDleM@B!Q`nTW8=Q^GRNPK!P&md
zC!@4}ZDwM!FB_-b>r3H<t$kpFR((?HLQTHlmH_KGcpk5azR7IDZ~|qp)ZK&bKIFDO
z6g5oFuI0)Z`9gR2K9S%>+B+1*r^@AHv^(FTn44F0A=*TF&PD6aZ@}>i2bZNm4X;Jd
zbnx(Y;YViZw`bvT6^ggjO7;riv0sL4-tZHMJz7<~9R7XHwjB>~2~MvhvN(ZvA15vd
z&hOFL9(J`1SP*iN#DGGJRXgIX`1s_Rg6+S4G$2tYC~S?f`-=_bDZnW<m3!s?1zI$4
z47nl!waXz7-5<hZLT@`F@6!!4T@GN)d6ze@&#`)ZABp?7;5znT#Pqzp;HM{;Lnar5
z=Ll;^R41ZpOGl-Kx8{L2Ljd6N#FW^mORCiL+XUXtidJ+}r|)KGAriItLZC;OYaS&@
zijw@N?q}A;ZnfZ+1q?+H?)C88tODfH&Av%>YDI`IYhi=7herk-blWQKzCT=C06cgB
zrb3JpOI@9gajw_;YoYbZ>iDI6;q%ACZUTm>-eEw+SG;2RXHP#Aya42%2aqomPW>AR
z<7^&8uYjX5WX4CD#)u!-&2rgFl-~00`4cb7pM7PgpkO*b)5EYdhEdoomp0t+`x;P2
zH}%mx^>Lb|`44dl67{COKW*McNx>6Wr_QrKfcOOAZQ#P;Wu4DfxPzX_gk9isJ+43T
zIa~t%dQW#cT&#DR+e~2*UY_A}Xd(NV)j|fNYtzTuZt+OJRdr=;Kex(%cdPM1;w9y)
zoRGx3WO|AT^9<}FNMyAxVmyQvl|n&)bYz=B2!IN5KqgIJ!T8sQ(%fo<b$-6QdAUCi
z?(G$Oe8<`dXZ>hr?N@#si0`Krd7^*ZlpqVSbzeu#;;{>woux=3t*r$ZxQO1Y1j9F%
zvaSt4Ybzb$B<R#j%l&b#2-H&XODie*ECRwQV&aJy<L3I}gvN;ZDX5h$&iF-5Gk9lC
z^Vhjv{)7_&<6!RD@z>Q4IXy`Rwiv6_Jqjc_=M2L>tiIcr!gr@g9IA>1RC@m4j*hjN
z7L8f+#=v+^&yH$$YWeHB^HSph2$=u@wUc1}@TF$zp3Oq&Vm=ky+I}--r*>P}RsS@s
z(INs|yxD|93&eP>W;RnZ$wd-no(u+BZE`|ItlaU3b%&P;Z&_#OR(Q_EOl6Q;p*_Ol
zCzTZe=63>z-yo)IUahfNp9kl;pzWP8;*>!7aVb6=(AU(PZEhy?fuU6NR%wS;g|&GE
zII%!Z?(5-5-AgAx5O1mX!_jpW1mcK!T*QV2ubX0<{<_$4QXb#jPe%KZ2UT90F4ed;
z7m*=4BCh92-UgB@lBlqcnHhj4e=pZf8fq8xG>IT!!|Rm&zsyhjMJpU>$A{Q2W>sDf
zT87y>FClSqL-1T}=KN>pJz+MVV-PW9gsIDr$m;KGNLs^o4yke5Dj>m6D_n@4u&yfZ
zV|VCoxopa@)^y9c1LjaeH=hb8)Pbj)gDvnNZJJ)|X4wCA*x)EM<!0f3uT|GYzz$rK
z5VF`8f%6s;u!B+Qv<*D?1`k~>_gMR1?mN-^PSx{*(1fljTFh2?w1s{Vw&4?`X9Z3H
zogm45TBYuS6G!v#Hcep^D?3afe6@Ovldvrrff$8<KZeh5d__Ii#7Mtkw@w(*bLeX~
z!+(1TlGev(X%b)S9w*?mt=0nl@@l`wO0rtEGKZH)Lk5&s^z}{l^_Fahbh2I3Z83Yc
z0K`|;t{#mN*GZMBBbyLv^awi}zTv=pHCq-=GSUx=#fVK1n$v$jWpKbQ$rGQtw9k*-
zkCTTjKvH<M@}3EBbHgR)EOstcjZxD^tSOPTGlA4_z?nWtOzG2-e*OFGcO#veMY}xY
zEye6LkeOvku`S)bk^Lds_5S!fh~9~RLo9+8MpA}S;<1x5Kf?hs<RH8Vw@ls@%L3jp
zM_TOQeMW_7AD92~Pe$|R5p8bBFt}s#_@}uWX0>S@b=CdcMa&}d(W|}0nvr4iLh2l1
zm$C1q=PWyjJQw=RMiEe!O__g;Vs7Zug`BUr;z;VY>b0bm*#Qj8<oo%<XFrH8f{N=B
z$vxNu(DgKF-*+JL@sx@FZ#iiZr4v2UZ-?MFv(sg=;{_&G!y17#71)1%5QTSNIr~Ei
zza5bUueD!<U0t~jK*mG_v_5$rvbZP^h-Kv+;I@ly-G#B(a|uF@Yw@LKNz_cIu^;mt
zfBOUh<0CZuek%DU7*@oSZ(S6Si!Pt;psy+$5;}hl_}bfiHg$!;RI%WgtVW4cTyTt{
z-SzdbHbU~SmfkGX%vjAp)8d!@N)^|FP9FyRWJWgRWLOO~4bsn1X?l0x^2*TJhaL)a
z>9AHLg1d_A(Y?ng;nZ(;6GbK~*JjvvoxkDsgq#?lh#0uOd@Xk{)C-p#xwbEgsnKd5
zq@g|Ezv3#Q-Wm#;>dx8;gCAygfgYR=We8kH`ULp#<@|ZJnX1akb1{Ogx#UB2s_-y}
zsxT^W{ap6_G;$xOth`s#e2&6aQbOB}dk=1J<zmmCOa6N%8~)K+F+aO+7q0SDx$<}`
z=F;f{m9rYYA1el`SI&&*ox*~w3~i2On_Bpjmdu4`R!7(ejSMaP+%eYOQ9(c2fznSY
z=O8%{2L|xr`(cc^E1-s#tcDvJT6VH`n-=2d?9s%$YQOm-T5n$;amUrrr~mG?ePnO5
zT3gGOd6Yp<GNgVXF@7$O-9*LnM>B7JCwd!&3(&`DyPR9i1STQz{xwvyWz~=>%LK-|
z^48D+)mudDl3_??h6DZlqZmigx@KGgG_2e3(~m2QUD8=~$yodLrZocs5X=876Yqtq
ztB8rtiRydjdY^lOf1U4`VX$yp_I_8<mzUwBVP~t&SXu#}=+nbOQA^>t3f8`=O98gn
zm1XnB9SfLvn>4{YcM6z!SwR_reHXuq;{9t~ouj>uEkk;j&x=1%<LhM*r06MuPB|-S
zK`oX1OSn5<3;q9)Uv8PM4iXg2fzXyBYA5VR{eDzp!%a9!9Vf<avNwmm%oaYwxaUrE
zCCo97;wi5ive|9vtXSQdVG;5p+>9I)o8|rrr4tYrO4$IukES_4JX9+!SVj3zB@L@z
zxH7jyA2Z7I=S4KMiDozE8Vtr_1}RQbkqID*LvgaISufTP_b0$4Q%ZfIJxwkdI(NQ*
zQ&Z{F_|q_9ng7%DBTI=HA@;qH)Z#V?wBDRB(8tA)?+%G(q_M);(5hgz?3gycAr$x6
zn|nM)&N4`<{$}9&H@zI~CrFSF8A<{w<k<UZ4{wvv=#A3!ext*WGj_BeO+?{n&z`r=
zNRDkYpcj_7eVEi+0fwS{BHy8yCKTmk!sFN_FyW<uutr({(C3xBEj<$)jV0PuJsAWv
zVp*{vW~m%ABjbk~xWe}o`~Q`jq`X(EZ_B?zuW4G|ohMQL_Yfa<vas@q_#>o2r_vT}
z@Q4QXd-sUEe7tgc+=4GwMR`8S4Df&J&QR;gB4I7re;AWyDyrAO;b0l4&FIx(?0AX%
zYS7qEN$hfH1r{<E;v8v2>SN0%V`D`rt8HK;{uC4hS?~-s8_x-DUzxyY5#fuyH^l^q
zwXzjwzuPd+Rcge0nzm=Nn@uQpd?{L{pp~=Ij%Mo=H?8d@aFbt}X2>khW?y&Fl3BGX
zBZISFI6f)fM@q|Fh{=Rq>n8?8iwQf<&=;DgV+PJ_<~q}ce7BNNp8T>vDgcrCefD^w
zos?43=R@stC)$)A!VFH$#$YxT$;y3adhyodkmrz-{<jot|4$o!qFzzmdKfT-Uvb!)
zRDLVzfC9Ri`qR6@Xv@Y0M3x2Z=(Rpa<fdNqaJ6@Ba)0VzYfKW2CVi0}j3U|JUubEE
zauita2BB`K589nF#AO}tNKdJb39uFWnGf)yOpwX%75r`S#Oiw4b>G?mqof?(U!@o}
z7QZ!_c)4XF`}4eSRNP+WhCUS;20RFYKnNS}_s#SXvEqSHn$nzm34bmY%tIr3ma*Sf
zsMP2UC9gFBRH||0ybMV|i?XOI79%J44UhX}%Oi-TR%cp4u*MBKPc#`|SM`6yW<<i*
z4m%U-%rEsY>gv1^B@as{!^U5o5Z~v?{BZ8ieaU>blk&jm>`Mx;)&wgiruvtr&Hhn5
zFmaLw8M&cg`Rly+m*Yncx@LrEXw7qpU7#WEo&kl)(w9udRT652Bo)Gp>2Cy&hgxy+
zy(^K_KqwTG8mDcma7N|E0Y_F69A+(G7176YObMz5cYFfkl%~pRCCB^tQhomZO>B8^
zFsy`#SPVRC`#ADg5u7Xmj)=TdA9lP7|9m$Ynl}5a*|IC+;tPD)XJh@+Twgcr+SVCH
zK0`Zs!XnfKlbK%9yaFZUb(FF8T|eFwy^=F~WmtcIwLOdImstp=+)oEa^A}jnj9Mtt
zZaUpP?83ATfI+wtrSA_ts3IbU3a5lZh~w0@@Pmbx5g8kV7vN5rwm{RL#Pp8mm8#3z
zr0KrJu6LuurK2Nyup^dQz`^I+gw*Rs#fX2=Y`)FTTTE=MYQ;-gu2)phAMNA#XH0}p
z#^hZ(AKEa9gMEX;Q-$6F(@*?>;>7dohaZ&WuI?PaSU*yDa~L^;Vw3nygi?pRzf8$U
zL8JI#-{ylIQ#iVlxIVX7WTDXqtZj$?qMVIPGU@5K^HYC*=*iGS9`=g(pA+l1`4CLy
zh`_}Q-779Nm<ait?&Jl4FIFZ|qSd+<Q+faOZKi-sZr@yxmw&+_+ql)^@d2o)TE3y|
z9Ga+bg83B?bcm@@L90YjKou$7D6Q`(*&BUip(XaGuvIWswHZ@#$o+BjFx(3w*t4l4
zPX}_)4L``EXuPC%!{j+?wMU)2A}gWGZ)W!_*OQ11vwnVCK{=;uX_$)S!2$Tl&;?oJ
z<k30~8MMSkKaSSY6tU_{cele5WKJ!b^`3x+V_FPHJXk@HE-(NRDoQmkC_qH}4@sE&
z=@yXMz-d*qLYgWR%Md3D4O;{{d%5RJfWYV*Z3a=U<YLqj-9hyJ=H=6%9if||-WchO
zI~F-#aj-P8*c2q0=FkJe$$Qt&=$I4_sy(J^77%1Oel!;6e0Xv~I{!Qn8>$RjHUtC6
zgpC&2n6r&Yo13n5Wln`o@+G_l_Kgu%OBi_G_a)pL>RNzH?xIPPdO*-j2`bmnzzO;0
zr%@MNKz%-ceZ5<(b>GM(8}bjr!Z%*9A_kmBAk6i<*J<&&<H#0tL{!QZ6f5@o4=6FK
znnZZ1)c@B0*}mt6-)R?qxgtWl8{Bz4JHV#4BwIz~vCAE+Ls{?4Hr(0QCd(E__1x{g
z(}5BFE4%J|9v?gAgWX8*4MoqmkAO)mkX80n<yB(2))DHzk;HArC(^Gn|Hz)>80w$D
zCH}#Ajfs9RaNj_Q&Ov29Z0UJuGw?Xt(*mc+-@3!$$b8W6FFpX^jtR?Bn`@N~90`Q8
zcA&8zDtH}>Vh_O8#En8jq8AAvjzdAK!egd5R&x`t^DG9<INRb-5SrIi8EvH)X6+)3
zNQIr@7Ko0Qix5R8>k>%qN;1ACc}Xp9|L}0gE03-Gz6qd{-%%zglfJ+R3Gk`4s@H<A
zlRdGK{VVMawevGgSql&IQbseShlfGj<uEz;(Qcw%5A(@#r`w58I;ydQ%!C6JNrEuU
zc?LZbmp6f2cO#l=U|v%*^K&0HLQhq|A_}<^%L-EGB91tCCPH;TIOk`?i!zYA#eU#I
zv2A?J9Ap*rdV>k4)(*iHy`e}-Q!qP)36pq8ZYSqJEh{{<oz5<O9_(&&YZZZ+H<pU^
zunXA<l<Tyr0xW5nByv_6iH3$8p*6#qST$Z1PBTyRGO~6<DhoeB6AO7I#~k&`#HnbI
z<eYgwoKpgOo;*Vqy6by4YC8QpSQUgkc4B!qFSq&~z>whLt)Iol4&0!xE%iZpD;p;J
z?f&^GP(A2Gk#OXJ#ECDDgFQ^??`$VHE;r(wmz89cBp)8;%B=bxom1ODcD80cW-o`X
zkGG5daFJINwFNeAfC*j%x^ZE|znG{_rL4y4=|qe(>|e)Wl7@Bt76*u~o5$uYIFUz)
zzwR5p$+=B_{a#>86=@|^t@ZpDHDncswZ29~PgsRyl<|*RH6xSG?U4^=ot5h-Rv8PY
z?KBtj*R++AI6n~kW!I+nUz(pU9TcCxNzk=KE91!qAR507Flc19(^>eGni{Q9V;JuB
z9<AVC^98f<3W+dSgv6fnw)$~<c8~ESNe7W|hUdVa3OgpOrg9iUKDXpUkPLEJoGk%t
z2jW7Fv0U&pneR3HrG&nVHJh8w$j>pl4x%^)qb^VciqbVfx{3FZF<&SGA;r@jzp)Pt
zWI~cqQcl!#lx7nNvO`j#ez2jj&h*=e;FaOve1f!?Z)PUsCu-~ESvF-`T|(Mq@Z^#b
z4<+DA6Uw8*VN_Kh?c5#?fV#=V<;LfAH=Zed%&kXxL&lnlT5yc~3RQ#lJaLp3bTHeR
zDglMEpSXo#g_7RY?r?-jEa(AH$`OPKM<WRu?tU@&b##BWDr4T^BP{-5VG-yq-o~Sd
zy6ApdwKE()e*tpX1pK%vC)@P8cxDjokqLB&JHF8!NVzgU?)32c9(XUAV2Gv}z|&yV
z2qh|%fVrFGrz?K{=d%49BNe;?iOedW%uH+lL{zXI^}<euWiGo&{#w}9mdOEy_|lg%
z`2StNElP4AWL2VVkTG9<?(4zU%Q~O4|CTDfS@vBB?sluNd5;6Mn>Fq3y;ElbTQvsm
zs&c*Hpt@B~Un4>aG#SK|iZ|{NzIK~Pd!@JmEbB~EZKR6awC}f}5;=$$VjrYX3z((4
zQ|CzbJ?RMNNvSnY>wy+PDl_QI=I)k#q%)gAGE1=2Le#!mQTG<PZef*275`tU*LH;j
z>bM^oVm)-LutTdMcKvMcM3kuD23k%s@-}^X1rLm^k<4&FG&&<Em&<$0FfCgUP_2z^
zh0F)pE?{3R?o^pny*C}<zygCpzlj>s%bZxW#woyo-gUmX;JLN2zAS%1|5!hzl<cnC
zfB4fZJi2A;bJJVkc6$D4UZ+yZ>j8dyqLPT5d^4sKrOr_?`NhVISO)P-lE;2uLm0VG
zL(GJ5EF}6KV9n>6Q@vGF0#d;}ra93I<kJXcJMy%bN0w5vnawR^McztNia|jLc*bj5
zUa}%3=Gl8uVN>&aU-0y}Z?)Xo1;@dD40plQ-_%22Y_z+xk_0OO^zC)lM*;R|7)O&d
zS5R9*IRfr+et57DkL#E5pHAN*J&EwCGcO1ZkOh9ITSM5Tv#*uT(s^hVxQtf;E+4Ap
zBeUxqsRJ(Y-Gf`FTlas5$Od3AwR7x8<ezSI=Lt$Z_7qU|cxL}wep-aiL(g0ePq!Qv
zsRhp>>ig%u^`dPOZM@Qu++4-`L!Phr@(NydJ@n>wdXEwW__v^?MA(%fkrWG-ZhoKc
zH2U0H(pAhimdF1&Wmw%SNbBpo<T-sP(A5~8JvHrDlm?_J>B^-}Clwe@u6m8#EIOt*
z$D62^^18>SV$G^hF~mOB9fZ#-YSl4bV<`cQBR`<BeQvKik(XT1CVW@P=fu@79MjgA
zLkX@(Bs$ra%!1A+jeRvcZ^<~3H_^nRvDiDWnen6^KJ-k?E&3bd45=~91ZQ8EGRpar
zMQ}6n1o1uP)e2?=9<L`Rhu1MrgDvX2R)cLtTAuW7x?<tBjDzCaE400;&*wF3&EfuH
zUIG>ZPWa&9el{*H08%uP!`>JUpYJ^vMu-24-bN{hpVg)P-;UX3+lkB%JMf<`Qd;je
z9QwA!&g?7X_t#H)TzBipkr$qd+pbIuftd~jp$B6-r+D@8*)>wuk5`ZMaH7qNv5CM8
zL_lS+(GbF>UyCcQgZK5&Z_pG$UXZ|(ZFRs%+GB4p+>!laje!OdCK-8%>4H+g|BmR-
zy1RrC{=^kMcL<Cy`NSfA$Z^D;IPZHO_uaih59?55p1T;2n{dML?QR!gcSO8>mm}o#
zxX#X;VGsl)kR;;+8{Zh=MD3WX2xlkc?{3n2qHl;OOpsbIrGVRXqb13u=v19@N{nS1
zQYHI+te6P-66V4siAA<s1U{Y_Rm<paeXC1W4~6+_8MkIU?^L3lzv_G9%GhyT8Q&u1
z%Qf`gS{@HYz9;XEX@G)2$8tpu&knzyWr!l}^v8zSYcMUo;l@InxJ0xXqGiq$QhF&a
zAf)9Ev(is_bYxj2K=+@5S;}UGpN!7gy?M92TD|Fg{&JS=1YOm~`|DpTf1k^sbBF-K
zt3nOcG<LF<e!)DW>?)i4sy2o3A@o+wxem<G#ULf>$ywt@B*o0N{Pfr$ut98z+|6>U
z{~YNt43deI5zL@0zOolaIu>~#<=*K7(xzp{yVW~&l~Nx$$%5=dcDN^H61~3&RTr*u
zS1d(LNsEiPxsi$ZML{-c<6hiW%(HQPRof*6f6Rnf1V{e7pX!&3z59DOe!Y<KyNsm0
zH%_agf{OM{AvG@|_^i*6Vm=IgzKylGpRG_Fh2cOHryCeCutJT*!kM#C>~vrIgq)P=
zMmP5N5PU?M{k4pSL?@c$hQ5%d;}d=46&6Mnc}fy_s=226pKSQLpLs5Q;8kD$B0*qt
zKQ^lv@J9AA>`%3~HJ|s6?DIS;W3u7<Vtn)GN9_<M1vAq`@2en#WVx)TRl&4`B4bM!
z#5!U28qkbWWBWP0m9b=)5PHgu7T?qg`Z&TOin+t)dw1xZc?+f*eT5-f-53X_6;exm
zSWf*FVeOQ>K`Gnwet+-8bB+RioN(#&Z1l(&)nY*Y8|R;LKIsMuWEEivATl3H&v4e<
zQ0E!WhE@Y*gcYIN7k1oI<;E>m61uu_Kg)L*rB!&U-J&SxDxxVxv)gsk9bv86zC7z}
zd%t)Zo87Vi5HXg1T;b6sXls%og>pT-n?18xiKMBGv;H>xaEt9jA3EZx3i<juk%f)a
zA_c;RvJ}zn(5!Q3LZ8~W=YUr5WOKr$l3Kn*wl3RZ*JjHlBVS*R3;>2Q7C84#^IlM~
zsn~eZ^ZdmTkDQ$&2JE>fGzL$ItdCfR2awT_T1pF-03Wtj&P9MDgnR*N7v1GSAqMKN
z?Hc!y?!~kI0ynoz&2X!1f_(5l0wGr1!KPlm$2s}SB{QS&VbT}elohFBo>Iu#j(Mhc
z&=xso=>^3E8O6sh$!f|*jh`dZCS(Uqp|TJpn-|o!W>1F0?!9Wo9f+c}hheCJz>y#c
zIQZa=G(v>5qDTGbMG6d`vX;m^U5_(~Nc33nye1|aKz9hgDVY54zSep-r-I>JZ4k2;
zq;dpuJjKT#1CxYsNuQR6H^GL4kP&G2ixsG<#cDTZa!Wu7($Zj!Z6d@d7leg#^4^_y
zZs4Bzc!An6Ukqkg=TT?_*xsgS(a=w?$s>+SK$u;BoC5&rW8T0<+)z2ELb5@dTUyt3
z9uu?7))-6hTa)t#GK$hceI_immQX`=i?W(Z`sIn)Q+{hCO+j52cZ|xChab-v*Dd3p
zUiH|?&LIgDkvNdYCKykKxb4HB$cSgY#D(cfb*b@;K!<+>JzAZ6*#HRf{X?ONxF>oA
zixq<qbNzD{8l{pGG`7u4phf<Gm{&Eol2CCOq{>!Rezai*VmcO)<c_fqyT?vr3Mpse
z4Y($}lm(TX3$pbVtdWaJ?7wP>PaVQ?D+dgc%;3x0r5e|G@i;%ksd1q|LQ`%%A|Qv$
ze3l%x!Vb?X^0TX8`GTzxFee)c3_wFS%Kl(EfR#DLuomLu5Vs*l{A}ZWv?&I>ei`EJ
zLIsy@N}TKDPzxb11z#W57z|#B*ngmXkovz0IP6a>9}>h%^68`p(=atgVp1OTiR~De
z*2r51{++7ta5_#+?UE^A`#IIA5fm;&Js6R4=w(3-TXGpZrUXcqA@faEfzV#m`40UD
zHSmAmvt3CoF!TgPS`7YLRyB!53`seM55g#~1rdy3r<zcn?8^oJ=|B2kOg7d#Yt4pH
zWwHkx<ecEO!+99hb4gk&xydqU<-cb`0K4hU{mKj4yd!ma4yqD9PaV$wDB(`N{WPSF
z5K|NN{7FerFd6IdEG~%dE(!sJ-PR=@+^g18*kaeSla7u-)5QEK(^2Q8v${weJP~5h
zZ7uTM<@|Z_**|w)>6hOSjk{gFhqq2<5L9bXt%QPhP%QW+m4ybhN~7;De{)_zS2a3y
z<tn6%IoBfQ#psyto|iohiF{z7?AmNhIbOL=&idv4W%<d}zW@bSya-DrR-B&mQq9(b
zOYGTjH*tkN+^yDm#tlUarL?@j*o&}64~l0lUizb;KYVNS!Y?hx-v!=ySziz}_@`_@
z^!;LcV%85!67AF7o`{dWK0zO_@2CLW{&Je(-|o`+6WV!Y^hVP13ljuzLWk`xAg879
zc-P42nZZi^8ejA-RwFrgL~h7XU@7M})GHx&NbObWcCoIAjx7ys+-aFH{Xe>tJaaR+
z`h!umNDc&`JXcg$gL6Y66{DZ{{O>r31ss$Al+@KZE`7{M)cU^gwAgP5g9Xq~>=;E3
znvh@B$sr>|@(nB$cL=ZFqV<x_GD&5mJw&kjL!~X!#qB<-RuE!Q&ftw_xghu<w+Nbi
zxoGCrBz4UEyW+FUVgeW<#Nia16lEP+qfU`Dx`PWXk)@TyMlgh4tSZB?u!wzUiDtqM
zRS2n${`%t>H~c9@u!}^ua6)z!s9^{=^{{S$O=Q6ltH&WTztoUt6j3@qQM(hcwf$NK
zA>g^oeJTIdM@<DfQO%Uo+h;<!%jihfxvsl-&3IVdH|+<XiXRxBLkPqLBP*r^{P8Qc
zDj^*DQI~qUk<@wdJ9}5L5(pulc#Swc-(aNM>d-K0XB{-ty9v<aw;<5XFg<8eGO+UV
ziu;E|Zlo@TYNgg{K)oxUIsxfDJ0u=&hkjURj?aDDrs408q>e&~(jvh5T(4sSk8|*K
z8O(WNV+SEvD(3`6Mk3%7k<oge+^^cZ<Jhm;s(jSAN^j~$9l~@Nx#${8k)0C0W=qLZ
zOQy7^?Hn7QZW{*%Av(Y3sEZc<hLlWhqd{WTYN=?KgadT*oW3k>Xyd?1b#yWAtoh;|
z0dz1#cm`9oS@ta^kZ!>{$|EDLSJqq+wECNy-9+*I{ikKm^xPaC%inSTu4e17VkPh>
z9t?>gDr3E3PKcZL-~icoD58fvK2OXcX~m4y@COm(_J{K@@NFK`o8vQ%v5vlWeq-zi
zwB^Ak`8{rwM92zEZF!u7O&MTQnAT~m2YjnpWh&-3aRy$qkg=RU=?<!N^Saqz$g$C;
z5?#k!MtpLxd?kkP=f6`iN5_a*hh$mRaJ{vSy1Cf>C`(ToQWZ4r;2!&oOC(XhRL}kR
zu2|_lE3KI~E1LkRM<xB!Wu?R>ATK{=u*eT8k0NrxYNL=FTWYG)C1@lU%}b7*iw|pl
zGBG7eV@&YD51s$B<baXLbs{e{VIJKfF=&oTEWiPkZ#WJn!R&TEXSC=rhr7TLdp(2b
zVRw3(g2p57ptT%x($b@ge&fKv?hDQF0^o^xgr2S?Xrz1S+T%}@T*+dsY$g{e{~0#?
zkd(*z(v=yp6$d0UNjAkHWx92fU}gIKyP|Oc)uXRT0aQ*XDtLN4`Y5x5kK$)2F>~m@
zpHW7)^6|HRT2*d!F#3Q#A!>w&<GI<^S^A?raVh@b?(&lDt!vT9Kj)9G<g%iEJFMkY
zZpmBr+~yp)S`%Z@F!ok;ng;ubhL;f1O<@G=U)Kfqy3VhSS;^HZz_76Jryo)}vY$_j
zQ9&>&g*Vk&RIhbXtY33zmx}|z9u$CsfN-_<{b_+Mx7NRznSELa(>q7A(`u8gTWlsR
z?fn+`XgW+Rss)?$)cLJ<q{n^?9P>te>yL<bf@flxd;XJgp<Oa@IM6{_6VWZu-Vse#
z_Y~?G>`b3#A>1bINL45ca*~O<<XTB;8_o7hq(sEBq!|yl-tO`%VRJ0f^YupGnI=Zp
zW?3+yM`@JA46b=0wV$Pw+u;iQyGJ;vx<Lgey7UAi2~o28q6mVwZ+JvhX)VK=s`Z1T
zAzqz<z+MwOkDHKvrYxrIgWkJLsZB5bf&82_R@8@SQ9)api*}~A?XCVnlbNVAcltX)
zfyDv3I4(|xhZt*1bX;F)S)<9&$KDa6?J@je&Z>7Lg8i9YG%5(=jd$GxDvnqfStgD&
z6zuEj+v=C0JB~j=tr5%qb8pA}TtX2~2g`LHPbvf^lz;(1awf*sjkjLJ1nW3uY3C;c
z^%&%$3!c>TiXe>CFE5sAfB~e9PBlb$*baAze!|`N%WzzA24cBEZ|$fE*re?aze)UG
zv?H{aVuQNLa|8isoWkVDRn-^}{{z@`tYI>!M<74mmWe2yVDeYitxWQEU7_%Qx#;q}
z?D0kGsWDhJadC+uUOB|?ab_z^1c7U|xJ=mdq8y_H#tuyxjV$)WC5skfq-6=Q)hbK&
z!o?P-+y!*5q}G(GM;x|3U*|w>Jov#9B`|!xVFaVTda7(G6A8FnwSO<S3nM5FP{cG#
zm3w0AsPTq**G@Ozx;oiVBrs#2nqK$BQ$GeA?~B6joCl`KnKgQHWHUO&t>s=v*T39*
z#zIH9XyE-uc5TnK5KUV|*4|kzz@qEEe&Tp8ZqflkiDF(QdRNg$jd830G1o741ktmX
z%$+j0gteQFfz0GRTQ`Wvb%1{y3Yu>goTlm`X4nI6<gHpP3fwVlFnI3q0gF-XGM+|G
z-K}UCmSr0ovDuK%+*tUV2n&+9f5;N<RCV};!{?E|!^gA1hzZIIHlN*%RKShIZ3Gxr
zAt^5UnrOnlb$F-xzR;*O#aTYX>HO~djFw<6@c#Cdrr?IC<*?!P{329T_t4{r1@T%D
z>xh()IOvb)s?-y!eg}Nnh8L1jHXlS9ivbY#6>3@tE=gS-yli?IosEI#(hpz%0V{$O
z$N4VZaCPaYoWn0=)pC&MzYc;~`H||aG-EvlJkU-)XIbo#H0Bpl_H7lhOFBDYd(Lw~
zm&JzL*x=|mazqsUxoE|u;3n(YPQg;pS3s>+!Xc{4ya+5<j2Nf>wK_sE6AJcp%>6DN
z$X1weCm<nkRryB(`|4Q+y$GbLOM!0suRJ?l9zp_g!q4@&Mu_?*czxMlYro-JYXcs8
zH~A8suC$JWnzdG)g6Y6sG1O2?VyN{;CTG92AJ5X$i4>4m^d%-t%4wtP*<rFgl}B{u
zXfBgYW3^|{3P##Kh<4c=F6+3eG``pME|BG~njBL?H(YWc5GT~VnbgWb<1ZfD=5~30
zd+{05$5;@+3*s8M*j+cPt!QeQ?zppi5Gl`b=~l+WRi&@1fMd;Xg&;F8axr*m?D(x<
zZh9xTjVCWR%k0#=N2I8oC@bP1%*9GG4{h(aJf;9r0q54^*ah+{T9#-(`+WB)o7t$e
z%}(3{Do49ke$I9!otO;-gB)SPP%68*d-g+IP}o)D=!yAlx8E&Yhu<r{;N7jd!&V>6
z(l2Wyf(h@7_IN*mq?v8d#XW$&?9Uc|xavEjR!tA*wBXKtBOGkGGA;(ftmUdjt+&OD
zr5g0F?_QtPuAEd=(LS_tflx*aiV$qM4DO5U6bcR!QCnL3g66=tiogC^MzdZ><Arab
z7HDj9%DG*Vr3R9urt!^a9F&l?JU3lJFT}wm_HAyk|2)k1^4h#ai?sCFm;pntTa@t2
zTq=`yJ0~U|5-*X^?$hT&&};hLjzaV@3dbQKL8q7Z70%~<x!cu?lu6?$wCdk{Op3u9
zNvzKb*lrJ=<#zHj!ZKqMLqPk$X`?@NxI9?w{#xrrzx7VFB=})x3KN!rF3g{@h@dc}
zcA4kCs1QOD6gIJ9slK~>>0aK6T~evUZ~P?`$M$OrCtA|lp&JiFkXA{FA6i4`wl*iA
zQ`iN&w&hiCIp&3s^e0?j*<#Nx$*eF6ot#Kx`JS+wix79bSlV_p1t|T4wLp_^TxnRA
zf3b3A{e45U9W2a|;k?7n`(?GXHvY07m(Q3`HWAc)^SpnkJbPV}IwQdf=HqAgC<*f~
zyg~AWo*U}+wnOj4AeP$yQ%DY3Qn!P#J>uYyp>ZTEuAfYlgxE;6;&^~)3DMoHXugcu
z&y#subMW8`X2;Xe(rivPEA=A5q4fnGp!ST18`3o3@4Yv}8V~0P2sVgl+pPZ>>h55b
zrrjib>_cLmvGnTR(m%QPX~@G+Su(;E$J*A*w5!oB`x5k5xuiDjw*fN74MaYzTsZ5s
zL9|-758<5zg1z({gmG>?VwXoH(Xo8kNLz@0+w_``sj89OT3>B3rhk0gr`JR5!Ep7j
zK|J8+3nX}iPE(GQioW~x-%-DCZKq7Md57o;?I2K!EO<451s&LN(e(n~_cZe!KEfW5
zhw(J@8%BlQba0vvh99@fCjX}~!uMjnh^n0%c3==Wi{K#57ZXrxA)S^n&vS6+Ri0Wp
zdg;m7h@+yb6U_+WVGJ(Uu%oL~36PJjUWi`~HC1(8)ZW3|mGGHZgTp;<oHA#yZ?B^e
z8R=@02!GodV6)egp!SWx?X*h|AGC*O34Dl({TpA*YuAs(v09yvYLCwNx8(a@TTjf)
z=K_~t3S|+>3c1@Ofq@P5&&?{k{vEUKH1=E@ULXU*xFX>pMVP%7dF3v(*fk;eK+c}V
zSQz?PsG4CM4m#t5SwJaekXw>)K%we=7)a}6CM2gq8sw1vb;^#_vz9ntN^=Qbs)ej*
z%~TM_ChzY)W=0Ik;1IBL(W`dp43sS84JdlGy3LXmAqA(Jv57_8kims$>&NwnE;w*i
zxln`M=U}IsSaY8{e<8s)4dJKWi2UW8JZo>A*>L{sHFWZV)}s>iQ8wy6t`_swq+9H!
znV@)4Axf5PJR0?`2trOl1p~9i?xRIS02hKW-{vV!q~ZIQ_UxNE1aiL&_rF!yUDsqI
zN!q#LtC!w7T*8AZL~=DK>wfpAI*;IpuGs_T)9ZoAh0~|XWQfXtQ3Q82haB-?0O3>l
zE=4icB2P8PW%n!V2RL&O+qd5Nvbpt!rb<X$iV9{4$4yzh1H|Dc+>Pt{1t9_b5)xn?
zkZ9HKFxc-p2sYwn0BsDOJO<jd85BOWH8|2v;6#|9|7Se-IIZUvMDe9LJ=ECERbC9?
z*H~$tQ=0LIK^y<{=8LXz9=?(uX{%R)R@pKN8}kNJ?nKap0UiR^JtUz?VIDDge_R$L
z3@**nFmzmQM@D=^YwjaM0YUFjMU4KeN6Sd2jJF2|w<qns?vK<b-$RFlqk>Uv$K!ER
z_%64eU44L?!tP_qirNUqTAVU-bFh3|CQHMNr)fOTj&TkHwrBIrSg#JIs_fCkmI?NB
zM<ic+Q71+*F`DpPbq*W_7C<2M^lfG1WFKb?So(ca2n;Xp@gh?^G!-zIYD}dEe6!Hg
zhgNQ^HNwgUly(m;?dg!Ox!&<c6DkREp8NQ8DeN@O>#amei>$kv1~jnc5IZHc<eCpt
zKU9hOrSA_AJ1lcrU9$F>T4LbhO$wo+BKIBtrkrU4y?N}mA{}f!S>^@P=6PYFl6b)w
z`W;ENoHeZ)ujaVV=>}Z51%2-xj`78A>gUUW@N}FJ?%x=MZ_Q;6tSqKLv8GHMS9>yq
zbcvbVc#yGa=S}G+TWP`2%~jQY^~1F>Pdv*$Nu&M@LD%PPjS!C+cbCr;%10Z5dL7@u
zT8Zr#l>Bb|`1|J62^9*V-UmzvKH30h*r1#2RuPl1lA@Su-QfQ{D(tW|zRv_ss$%M|
z4lVvH^DP6vRxTe|gM(__(kV{p)c;x91R4N^Tc0uf1NP8GU3#{G;A4AGCn$Z+XdGWh
z5rYe!5?2cIcbS&?XK8F!wO^P4Yh`hDXIDzV!MWLQ%&FYbTL4FK6BrDPNj8}L1yKy|
z@9pE$laULT*~(#CJJka)U-P-JT~}y}1Oy*}T~VoWD;DB`E^e$$io^u@PfZJ-5i2c|
z_Y$LjWNgXDm6FSIaj)%2_+%?e|DABRZ4XI+T+f`_uZpx236YKVwuYCD8s1pB3Ay@-
z{E>|Mvw2Su@<g}xh}?;#q)p^^Tq~v-Hl&NPyq6Fcq<E)oHbn(gx#uTn{U@#ooeP)j
z-i@z3Cci69@EhWElWnlD9JU`F!KDeP%e4z%w770RWVdx!yuTfuSYN)Bj$RIbWyjwe
zzB8_{I&~M%4*t1HO-WXTV_X8s^{Sdc3s;hyU7Pl5#hd&fGq$M}Q32_PO|WO#&`}>q
z?e(LQeqDQIoP834{N09ddLvNMnccKx@gi2%Lo(F)^j9^S;>4G0WYG6S%!UBQcfw}s
z&aub*0zvmn5WcXWLP^?xJ5zc{I(2n*>8Fas|GVi&OYT1uZSpsI-h6?(8+Jwhxa8yz
z-SKkY?12DJ3WASD>6f~EX*)jNANorbvo_a-yp4BC71_RwOBHN-mV1~;A~agZAOkr7
zIgrvB+#iL``B|zB$e!QB+vV1VNDJ~OK?ajDS}i#1q%!&5p<YVq>csp|<{v|EIjMfJ
z({^E+>;0uS{Bg7CUP50!aOH^P8|Zm3ODMx#g%VTjlzXi@b}<rm$cv1g+kDuZVaw?%
z1Or{ols2qx@rdVCO%&(A@s~9M$6_#{s!x7!1mfLZ0hW$vPDEDv=FRX5S|*+eZkp>E
zsKhAC2N7i481pUbrutJAq(?6bA6Hzn@dTFT`RK0d&7kB)rHX$*gY4~`+Ca*#%Oc`g
z&~5fY4Y3<s!~>=}fbP5G+5urXMm&2oYh0i69}U%fCtut<g<W3>3GAbX_fS%>r-F{y
z`wd_4Z9(1PY0SckM-Ln_1GRWuVNS3z&9oDf^w=!cgrX4fq+i$OOnK8BPut*OE^oJm
z#vv)#NUZbFj8Iox_R!Vv!~1nhIAO=C`{k`DrBLj8t1C(Rv))_Xpdwq^+r=XLPh)2D
z5kQNsNTeH*<2+V9r!XcMrpxnON2;axIlMwnlj&rm8nf80w0S)-ya|A~KVczJ(mxst
z-_A(52=YVrIse;X?yXUo6ho6h;-6VISt{U&VwOZ!X>BcmDZkfMKYLOYv#erCjoMQq
zVAu;A&ZcZ@PihPrQ2CD_CZ;CQw={<LLy9B-2=~al*d)*z*vlmh-jteI0&<vP%3ox*
z@n2#o4vyA7yNizX#ITKbgdX8xT@Ai$ckB`?c+!`m<@K}el|*yu0`a9&4mAq>8JCDI
zay`sNKeS9=Pm0D}r++0{Y~WBbr7~DdT!9b}POvj&pr60Nie3}WElT_#pX)MdA=2(Z
zvWcAb)?^jyP0;9UE0ds(Q?b%zl;gM$|K6|vICYXS@($#fqpXY~;a0S2M$r>VdZ^QH
z@qjS&y<^J;`J$qBJwkR?{Z!Tu|L^s?Ejqe(sML#s{#(^r*i$R0-=n+bP_1SCY^b}T
z)4_m%lsGJymBeK#W;~5mosbCe{WEbt1N;@6+Qu$6?x3<7Q|R7lznOfM<4AZhKcs)_
zcQ-&jQ7TD$DlzTYCZc>jcF(<mus=PcDMTu(;6fcStgG-EQrj`3HaxG!<?ACykRk&P
zA2$d_h9<t{?H1jwz1IE0&`UHU8R5g>|E%L3dQzz#ecaK1e$b%%0~q4eladDDeZi&t
zN`g*{aop#2-&K;@uMQE}5D_t}9TuGbkEw5PkGt)*p4hf++qSL7wv)!Tlg5pW#%W_4
z4V%Wc?M#wyp7TEEeD5DH*EKhO``&x)wbyd!y;Ih0brR}pU=fOjKOR^I_wdVV?SSo;
z`Vs#{0j7SkEJ5<LMrZ^q{tw!iY77IN4Iwr;>CU~8CQW5em#|DI)QMlD$Mh&X#+$g2
zXb9XB7H(-+p{~WFhn+DOW>tJFS#N4$;xK#-QCRZictPPT7$I2#J;e3j3$}v@sCO;x
z#lZ3YCyj5hgyzwBMB?0bdF0M%_YlIh1_8(g<FILDhmy~CRJ#MtF~db>P5TxB-u45L
z5HR_a`V6@+Qq!z;;@|R6wK(5dHw#AIe*8G<4hj@~#+4TBq_@LYGX3qZ|CE==gBDOz
z9r_pYIw0B>19yi+mutICM|XBvN^^0A!@6?e>;_}hq^KG8XgWWN!&(`G9wFvxHYDx}
z*<WX`n-m{m>!iB;-LLO@)Dxxz7~d!Cag6FH;Q!p<_N8_0P>9a4S)3*qe3sLrY9zFW
zj^o*#+r<En3f75%QtNlRnF@PLn?#M}EJ8pUK(fjzg`Js7<Ll6RK{r`HA%SOF4WLhi
z-cN3$&Vk|AF{bZhD7)~uc_<9^@YoL)>s7=AUyD4+{)^+r0T?U=jvW$ut>-+FV|=`S
zdBL4Z<m$D|eGa28JFF|{8R$cmn1|_R2?vv)3XxzmX>j(Mbv<zOA{<(@m@Yi$vdf-k
zz2$*hT{*?T#d|1oQR*O6u13|CszP-17?36`N(TW=CHk~zqYg(SocVFqxI5=e_Z2kZ
zN~s<0#C5Z(bj-wz%^Kz&TXaz<`FVix>~3LBX4XK9Pxg>%RbC5ykNrmrLnB!mN=D1j
zcBe`$!L@Tn%1h$B2NlM7aVg33@E*6r9x{QM*=&M}m`r>Ei(=do8Cwx8nKofPE884T
z{Zio#OUDJ3xzx($ASa-_*MZN;%ZO#A!2fIL;M%#ynjv!3V8tZo`a;(8S6v=2ObB5^
znKY(r>DX?}^a_Oy1m~ys?YH0el?B$fe3|cuLbQ!HIOX2aQ>GJ%3iugOzQkazmY#|2
zKUrs&(ai3O#$kVkMaa?`=huUUK{(nVw?sD<6u5A%&TWeX-GCq576`hcQ-hd;Je$1A
zHILRaxg`t1FvQ-;u%F2lP%|lW0d!YTVFefDEqSQ(Nn;!*08!J?pCULv7LEZfDYS<`
zX)ynu@Zcnd6*&oEk8+<|b=SaX7_}3=T;bxUBkB5C!_#By+XKKIaxiTW)ddw@_-WK=
z^`nA1qCBgDw*~K9s!>5%;ngr7pR>BWSn<(}lZf|qp#U}(6=rT0sACED{d?tq&^S<u
zrnAWUIwMa*Zvk<^eg4@8W3X@ne7Q?2@VT8zO;dMyGVI*xe@E#P^1BRa<TC$>y&1UX
z2&pwJiz3|x9To2mwnixvJVjUGxd@G{YkC)(sTShjz@)nREZ8DBQB19fxnv7?#T&5c
zPFjTK2SBbNgu*#o+w2wVFFVoK8(hj+bCmeZ7jO02m^bpJ{m`UdY4DJ5(o8cHDZl+A
zMXA85@4j`U#cyviao9{gQS=}<QuL)=l6%qNijs(vu8i%-Wap)jLC~eSPLRxaWTbd(
z%;Gj^TB)@l{q)RHc15ck=bIiLpL?Ic*R*EFwUte_!<Cai(%)_y_)t<rHao$^O`~F!
z>t$mK5PX3a`mgR2Y>V-&V~oTg=Dl5(D_1^*MALDz>)6wjVR(3eMPJM8_EU18f2OjM
zV*i0c=Jt8J`~NUf0?&E-H;jExq<Fm!1<%{PP`YJ!oHxO})*BP1_v|dj)^446ZsWr9
zCfX87yGS%D=blGxL=fD6L<n-PBIN{u@iOzA^g;G_upmBYMs&=|p&sneB)Vegl8TuH
zVtnRntqtSUwH(P`#J(LpeKq~t885<l28f<`UkNH1=HgfT0RPx+U{iaeqZFl>)4WG!
z9PcdL>P!Rgh{<M=18DWAiei@th8ti3f}`nCJHp^+{u#IbUei`E&RCts`LD!#hF9t}
z|MZ!TwbcmSKwI6#awEiL&zqC=tjN>4`~A~yKaT0(D+tAhAqm|8T?PS=QJN9~_uyfz
z{&wP;;x8~w=%`3RbrVx!3Zb}JsR~gXTAjtx+3#nKD?75Y$HMAfj)>~zXz=G)5}J!#
zM?4Zu>|iU*@Q6b<gJ~AC5mc;4n#8`9&o`~wt#El(nG+2u4QvIm=uy~~m?tWbzNN}G
zpM!}29b|P*%7it|_zKun`f<VlY_Lo)NupZDUE)V%d9>9~&koFquslxFYH8fGCYdPZ
z(r*GD{4PaGIB9u%97Ns{-{!|NB8Z)m(uWe}xZ3z3X>etQgxlm!5L~nXvo@}_U_x>Q
z&LVdldE&$2=rVhgi9GJ=O4tv4E1Gp5g*Ks~$;aBwjKRFlRrSlFRBI?i8cJ@7Eo%_7
z1HSj%Q}8Jo7)#V+vqC<nlwCfzl<B8_dkZ<?X#*{&rVl-!3i$o)vbi)M+Kmla+pzAY
z+Zs6OMTHMkypEFotkS5k5s-OZIcA|x|3Y1KQ{X#83ms^h8#PVj<sT}m^=lYebv>%e
zvA<DJ<>6)ihaC~7nb~+6lvhHX7v#3DZ0|2|YK@0dj~ykI?)3Q=6rXMFvNNb3AT`Wt
zxgrrtmcQ#kH?Cx9vVIW9rZTcKB%e1Vom0lo130v|AuJHT-%?^V{v#{?t1FXI^IMkf
z_Xw<xD3N>CcfXTUt+wlZjalDAy;ONtHZT;yYd|`YBy&ifz}IgOU_X#Z@w9&knP83*
z^Ftoed4ke)$y}*db(Ak{tgTrFtaXkTQ^~N0$50flOcI(_@m=t-Vr_33&-aGFwj_kC
zb8{O_USW)5Ci!yMUxMywY6dY-0-8+_G@_5fm2A>}$9E4xO>A_dv=90cLsBV_+PmL|
zja62Q$dV)}i;B?s70B<US95QU<Jx9~_PPjRM841Os6Xq<Mumzaz$8W)3Cfk4?`x0t
zNm7GEu(mI&jsv@303C~@5+%9hz}essD}wJf_bABA3ox7}I6D&uXBOuqJ`Y;FU(b2F
zJg%j(@(SD`gPxr_@1_N`PTi|>H~i+dQKT|dMsH7>*7+51FH|Pby(zFfdUm+2_|!@R
zCfDNbuBg}{!70B#^nIy|M%}@9CQ;`p@UW<K3sr}IEyo1gK6|1r^o)T~^Mm0S{ej%d
zZ2nau_KfmM0)K40OYqH^q(7*j^I#3u7?BQB^t9>rnce5Sadhl@bZo37Nm%}x7#QD+
z_W5r5{ro>s9B893bYQ;3W1v5WC*0=4VbJ9f^9*U^`(g=d-=48@w?JR6G)Fx{UiSFm
ztb^FXyO{rA#E8pjV0QI!2H-@xpvLD|4%ssMTibo%<P;Zyp>%Mxsldaal(QjzAy`g%
z+d$kcqq7#g^cNbq=1ip%t{-;%_YeeL!Zd66=j^^~*AY|dUn(S!mN)1_f@7u$_XWcz
zzwarT=x%SUT&KY|&ck^6wIOIx#l&9kJGm;me2GB##<k8z-9+-k4GfacCiM@PM+A&t
zeg~!TjI*=eP&j!~sVnLX9hr{gixgckA`bymwMR)<b!R!0=vJ}SdB0qggtwaT<_1of
zNLL)v96z$y_H&zea^|;^wF=dJUDqd=z4Hj7fN1KNIYMHr?TK5iPS#mM)~kB0LCx<;
z1v(2mEQURx60S$OOf!i@0NR-_2x2-{2%+<G(^9_vtI}&4j2z6%mI&oQ`#bG({^$fd
zh};qG7bSHv%jwDIRW7c}<Fbky`aJZu%ujXj6e+9awg$fVLA$jjy-VRH!bSp~t9Y$f
z>;m~x?bn(;?t}`*9W(Ox8{=1DNt*|7PK8A<RQ&aQr5WkhVOLjm-Nl3*ZtHE!TjFns
z@lM>Mi-A8`vAtuCm%lwFlV3Ea!wk@hTp`pKxI>Q}k3AItg%OcZ`gaG&9oB!M5x?)3
zq~V135(t^ExBlYzSNPzmsWcQ;@$#pQg4WdU-+hq@1Y^2l5jVTTao4YBGCMOL=V$lt
zEo&_UEo+y-onBXwPu-sZ4M&@PF*YtXE|eYEd<&gIx($?i8+C>%Rg`*v$gbT66hD1j
z0+GM3_9mo;CFrPN&~7I7Zv1pqNM@r9wO7SxY>&u?MqE*kFLD|jO=yD_s`{lEYL%`-
zl)yc!o8<3^Kd6>G8N>U%`^hC9mD+Kh)-O(W*(9Oc=>_2ZD<xgRr_PnQbhMCm{}?HV
z95v0xEuH;4yS-vS7xRObj@~`n{4(zG4aKBZCp&+;-7tIM-A%?%Wzr|d&&l~9;h-Uc
zj}{_*ws_}wPJiq3wKrzb2|KgyboWwMg$?*<h(k)3mcXUsqjPZ^bBiF<9pGUe8Ppbq
z^-NybeYrJAdezA9-P8MQN`n<d^E2NwXZ19P$L2?90P*W9*4&3vNw`Z2MzInCA|K69
zampqBA)Sc`82=8D9_Fku1bGpR*_WRGU?j=?{d8pulbtsEjG_U-X&jqJARGKWdS7AQ
zcLbSMG2z+9urO9*unS>@tS|8open5A7cq5B_9GF7-1w@-KEQ?(KOx^QWPc(;*4c4l
zt_c6YfIR0%GB2g&@l!_3XEZsGuIjpn4F#*YL(-W&sFunk`_Ss>7zGNez&Y?P2N~+R
zN+lqc8uf6Tk@;&SH?8rHe;a6<XS>CWZ7sjP-1}Ut{z{~PSsJXW%7Kg-zQSQK3LQU7
zb-7*0xt=e|92axh8$oJ2tLxm}?DjL=dV5r-2g{&cZ!o1WEJ1?(^{We9D0q4o+#|UF
zpaJJA<R<EIsPw|PkjTm}G5083<E@ui&9e8o7zUF&mg`hj*)gVZ%V_C=&++%n)wZ%d
z`V_`Y-UW`rn0p%Yj+iOuh3If)dtTS7G=5hB+LM~6pv6Oj4y(9MycJI?`Sge{`9A5S
zdsp}xZ?I2&a{t=*U7ddE);)hq9O@FwSDcW7B4MQTnilQxq!JTg``&;s;B+8p8F#1^
zi~^)fgl^DHHTJoWuR$+t<q#er0D>)a*+-v1!$eiBd)b`NO#SXBu-*)g8HeL_+4eCz
z3A$`QqSKA)qS3{I+LC(iJUTowvGR@FWLl=~Q9<mlipuO=8csKCO$lU_iG~&yf4ec}
ze5I*V&hm(~jXuxJox+p`YK%UZJKG9>lb#pD=C6oz`wSRg8QRNhh{HGz_?vIf5f-d2
z<_-hXG_B@KVBQ-$pSIx-*Vn@fSg@z^r*TbKvIx*2dwdT6Gw)MGR1>=Ox>MaW1Wcl0
z2d6CUgG&~mxYjHq)+J|mGjh^&V(thSD~)F<^kW-vU31(Q8uBkbIl<$Kv5Web0deJN
zIt+hjrw3+6MVM|AU)`tyNHPrv&~H3@f$Dnimol8H{q5ytT!Rj8ycUNQMa5P9D#9IV
zvp<_ZZ8=ihLulK(eW&bXzC_z!2p(3)`f>ceya0Ag^2_yp_)IGqp$SB@7+Dy2OC**R
zI7sl%kU`?(S&MytDWI6Ne4=Ipu%Bwh=)^*BPbSNDGyX=oih>j;R8WR4$#WxX+m#``
zykqC$V?Yi~iQ7+KkD@4IXp;=}xV^wJKTnN|ay!Kvwm;+`IMR)w#Pl!76$-$f&KFUL
z{Ak1&wRxUh?&S->m@W`N0U^l$^gMlKYW12USH<R?m2VDgczT;R&t#4Az|H4d+fY)5
zNp{|gh{B2|pRfcEw7hXMXvw;Io6->V(t_$yudy6fs$0os!Eb~#eS+>!0I>GxBREP<
z9_`pogUtc7xd23}5`Q6g2&hb!&nn0*;|cNP;x*4D#nx5}?x47aZ8y~Ey=4e9I4QBK
zl?a3*Q;=;vXp#@*X|pq`<z^Bx1p??+^#|%dz?csUh;iB2{;N{;PFS0s?N$X1s2sI8
z3~I{`yxif~C<%K#62>RiMdBb6Q&s?)9QN=91O#CGo;DG@HrtUFYYh=VRL6*&BGYB>
zHENKZn%hBDX`x16DH^PmUACWmG?;F=xo}NT56}eK7Kc7vb@6M(XKYFPmtPBQ;h|@4
z-C?jeC9n<zm)nw4{MuOo@WE}$(rT35s^75MQW1MH^<EM%sT^hLw!gx=_5XQyN&!iU
z)i~f}pONh6D<s0%WrxboSCNw^GwV82JQ}#K<6RkHnr2Ti%-C+yLxr`D&xoZhWG*7+
zU`|7T9VcI;V^p~I4h5Y1Hi%c(y~azJ=P`KrHp7L%?vN117r)Zl3>gas5!Wdzs^a|_
zltCUmh|3(0iQbwk9PZsoF~!9rF8aXL;{w-jb)rIM0Zx~_ToaKIWiei9?HNBZk$=;>
zCW@I2JSPEyrfN@gfm3hE1hcXss{StvO)uJpZAw<-UhyBMbb54RoLf^N3(aS4AAf8i
z59NV%N`**6RF*k>G$CEsFzbVDej-BJ-SEL!t)!4R2VGD)4BDG;sd%EMWME6>de1<D
z@+alKLnp8<qZ?QY$zp)4?+A$2GTrVDioBK<7F-WxJq~S3;R3ru7Ep3M{+mBo^8RH6
z)43zc))5+Du)#;A&;b*nMe5>4*j$F+$<((K1uhG1HX?6a>1EnL_AE9i+@@2jzg$L%
z1WewSY2y<UQqY3OAUsG*$s^h}zw*nT|7AlntT_LQnFI*1q7joOq1CXT$ODMKxDjEs
znk7baG0qs&wsZ)tdXo%XA3W$LnVK6(^ckLtLgrmaqXi0=uB6$3`+V!Fx_+u{2wlFg
zuITBZ&PRBL%e_e*&!?iGUMQ0aT0OkAGg6LwgfO|6Wqx6r{$@!GF}QjB^R~FLxkzSa
z#H~0#MiZaf`z$ou*}s%(l+&L)QUmljnGdIcCRzvn#{9UClKwc+s5pLid7<Y=p3(Tr
z%xR&Pxd|Gi`4w}Oy3y&?DJwkVn)}9HUvSV}<E5}Ga4rM9cwTD|NhA_D3>3hBmq{Xy
z_@PtZ;f}ScS3Y}huTy)EIju=u#khOZ;slv5G(D!XYh;O6VuUu2z0ZH(Y_1m_Dh?BT
zFW7PHaoVPtpBxRWfW=UElF_FW15(Eb(!Qjq6=}UMSl}phqT-;vN)^Ley{3|fi^^B+
zxO<~FDXMIRgC;!r?I5r){n3h=LSIsUQ;;gebY&XL{|l0!%V*WoEvbHu+#`{BXj})0
zLwDBfY=$r_)eoj;8j+(9XgGJlxg)qYI1NJMk`Pe9fYPeg{+5e1n*>9UTg1C*-PzbN
zY<yz;{E^lV?T`tYhR}34#IsgcMBX}5f;>&E2)=LU^M8IhNrYQuWCo+$yqtf*)mDB_
zRrTe&b>?JAWQ<!Dk!rK31}x?Cgb-sSW24zq<6xT7&AgTNzR81i2_*t2Wm|;g!~V|E
z%t=CEFwkUgUejxT@_+xy!^l)Xkk>URMZkA+z!Z^NOv$Qqdq9OG&m~XMGUu06@N26K
zzn0$qSeWCkkMQJ8^*6?n-4_}UNGnBYYDDZ4R8?58DB#1}g;u(-!ca2vRvCCo>#>IA
zF$G(}JK@3U%vAr-kXBZ1E;%w2=cP&kKT;-(arh4$7L44_`;}%^J}xQf^UJ(W6Nh)+
z1lVc!+$UOtV&tnB5d{dm`pNLXE6bg&@E{v!RyKx5B65;zj*mdfdxSE1<)9QzGV`m}
z1-n~e#?_7#Qh<jdE?G65o92ifhb48j<ewop4aDmhjV*Jxfc&I>L3a^+?GZ54fq*6>
z3@_c;Y;wK+4Tq7jvVe&*hFi|p2bcSsYdP=a71jK;Ud`g(rmx=|(k|cav*U-`cP60~
z5*kSHw?XpMG%7TUxWiqPfyt^X<IRKrQNB^1L`f<oggC}LswASjfkYvujOu&43hHH0
zi4Lj+knsD%8u8zw|Bq!`?N%FFi_<3JTB~E&g@D%ps5J%$A5SZ2@orTCI2c7n{&w3%
z&#For8%=V}&#lrnXeCsEyKL}v%7l3~97>Jr7fs{3{a!KzpZbBi|MG6{T!>RaWHLui
zmyI#~wCNYoF>mAIH#WFJGHIj0HrAZ;6&2+se(hw0YECr2XqR<dYf*+90YNrn&gfX2
zeiA1{^mLscp$Tl`UkNwwAh!o*qlGw6b(M4vJp+5n>*(jeNV=A0-%-gZ65h3&54yjQ
zQ^6u>03~4g4~zD!_o4Y*cX0^?e8H7-1;tVVfD(g&TRj0DOrck6k9@ymv`?x-*8}Pi
zl1NtJpZ#u(&t?2YcHa<*sAP~yTt}nc(Z10hK2Oshymy9SjHb=mrA?`TF`v?1mAoXG
zE*#0@vjZG^<Bofk6P^;)ddF+Hn32TF=fiEu+<GO!8%nrrWD0U$#TfPgh4O%a*6;p#
zY5Az-h3O`rMZQBlqQxBWYh#VE%!U&R!9&T_yaT5ElS&iP5XwC-)CUKJCYrl6B2RqP
zDe(ghl_b>I^Z$lqy+re1yaTlxB+CXNS@}bd5XX57+T7m*kZ!}S6#1D{$=-H<n1yDc
z1c2yf&C4ljt#wmb8b%sxjt*oW4!*Z{M#R7ie?-L*7)<mrf+_}CKn<Ka_>+Opz&wCC
z5`fVWS&3NqWbFa16FN;ouCc6_o5<jyGlI_>B{uv#v`a2+toC^${U|^7O-so7I8#a-
zA~1xx+|N!(*mN`V_{}z8E^m^iJZl)MhS$@~%J^iRJvzc@<~NfxfYEG48qLEzjN}ON
zv=XAtkoWg2ThtD}$GVb=3g{E0l)8AC!F{9Io-LBF=-LIkPlsFmA@jQIyb{*(>uDg|
zK;dg|VeFp(LOGyx0dFT0gW?lybG(qrlHl|0jo)^)53E@l=W|lGi5Bk`tC8K});~kN
z)a(+g--}EO;JT{Y@p!>rxi39Q1@yoQ`Qc2!27BWdCchNXaZ4)0^!a9+zKNB*mX-2@
z!bck0*<09oFT=H9o#cLRO)YH3H(X$Y%5$61ae^JEZ1&4)!AF&b8%S_SMZ=bo5@|oi
zxa41Bg(|9MBmGJ*v=A)mN#Wa+q&CM&(Y=DOd1d7}FGVU)yO@9veq;o3!FzAyVILD@
ze@HeRa`UhkPA=LLf_VfWkTSrYI}x8Qv=xV#oQR=C$1}lIa+9Z9YNw76D>L%#reIW{
z`ed4ohZ@XP!SH12P?<*~y<02coRxef-=rXzVz33KCaalRRwYD5tK-y6K=RhQo=Y}!
zt~MqQ#W)bQC1Udd19Jra^3-rRAecFQ1frV?c@_V?q@r8}lJ17E^4&eJeOdey@^UYc
zRxu;pGc;0oclL^j|AJxhyE!Du=Y=;&IgejX^#g-O<(pX2h!Dsg#~NrpX#98~e|mN0
zner7%8rZnn{|_bhb-E0`%tK&tN7qD_>Y@?-ZSp1?@+U3>^X=<2wNi90H}~IR00dBO
zn!2S2tfkvyWeRaM?}Ah2nlAbBv6D>T;b{(GHTf;iWNVE(^t4Q`$_QE&KgRCckq`!%
zd*y8@Z&JM#Zkc&y*o#yaE#rhYt)J0X^+^~N(xLS`Dm|K$tmu4CsoM`7d@NPX%=!C7
zn)2<a3I^&s4HY3N4B~W{-yuWM(B<&g`%)3&eD0^3|BlDl(P15)rl9%axH^D4bO$gv
ziuhsgjN#-Jg-%0ox+QyqB>5fpF-4h4fNNc@6k4>n`p&|89|;6JgCK8cTPBqWa?y$<
zSFX{ifcxmmhB;lt*)ZuP_6cV6Y^d`)dZ>lL`)mO7{?~~U7UAY#yaES(@bp3{aX4O?
zr9JOocIalo6i{_6Y6eJHQreEkk-jt+18kK}JGfk#Z+%HA8}^;hex*N5Fw|L+o?8bn
z^{vmdW@?;r8gB@2I-d#k-qH2`rfj1TDPp&n63TBLJGFk9#b@;=h<1Q0(C}xTYmlKJ
zxtnZHqan9r)^7<|PZ|+sKfhXUkIMz4<;|Rxi)0OyM07C{P6)|U`PDcxQxp`qk`ldk
zy%BPv7@gI3v$J4AoYND*%Z#2;QTsc^oltVEbMiSMJ+xcwBu<)bK{kW^AbWo+yeHvY
zfW@>zjCs`<u${u4?N3rsr;mlCb_pn~rrgx{y|zBdJVqn$BV=%b{RTl%5#sI!e<f$}
z3}ePB^;cFe%rj)7b~dVyW6kh2EGu9~Q;Ou?<7AUwx|KRI+3*1Pa@iaXbg#pNZ}Kuz
zPW#RA^4nTif<>#YF&-K0MDE=*Qu03&j_Q-@Ww7676j$rQ3!nG6eD)5f?uknBYzTL5
zMj09L|G;Dw5#|AwiKPY5<bsjI9`^P$=Rot0Q}+RX%9UoF?C$~6MiQnl{owdu89N5$
zcy<9p{IJ)pWZ#>~;2`e$;ewc)q`1eS14?vJtROhk-|~NNdzB>fmFs5MNxIc&p5z52
zW4vA>C?bpRe&5cTp=s%k0Kz58ufZ(2RpsMiy5XY82Q+HIMz7Buhw}CSojd=2%?B6%
z*>>e4R&sm$m%(M{oR8Q25wYv#P>$E@65OE29}ASciO=xhf0&n)fGERGyQ|ym`MDr6
zWBu2)g-q)T#HHL!ce(c#k~!I+F}g@!5q|6!y_adPp1n<uT5Sxc&D_LXnyQxSv~z~g
zk0&8w1u4fTcmKhjTFjVonRQOS31;v=yZf+J`MrwJaHwBe&tVh3Ql5)7jWhAUI=iLs
zRaYQrN&sADiHzyLp_8^%ke6^(!>VTRqJe*N^2~ol-^7`;>`p7TE46CSts3hU7CoGS
zN)~9$QecPkAD_4-q6GnwkUsY9z;RH*tl0r5h7zw-NI?IObU;}~*Zx@3Y+?U}&2MK(
zc6Kf4SpnE<XJ6m%i&h?x*X>zv@v*}EkdZJjrvC4~u^IUSUeJrRYXJR!v`iYg8f^El
zagAFu)R9J(5(YaS&W_(sQ~oyCd3(<DC1bdudmx<&e8izTFPL|9Gcz(Xs&DWs@~{@c
zPS!E;f>X{H&JC%L7BLsWff;VsiDDTTeKbaIahQv+rM_LXt~XF35Q^xQ<h^E+jVy~1
zB{Z4r<@b0o*|(k85JpAH-s~?Jyn;wvyas09@$M5ODuCQLhdA57^gC9c0Ceg)!?3Cx
z4VM!jRh!EPq2hX0_*rVIrq$g*1Omw2lJ$JK5u?ta9g)XLG36tAhV9^<W5=lV4AI{|
z|3)vvJq+%}J6~1jZ}P|3woDHTq0D;X6}Y6D;N5SISqH8Yy<IQq>BOo5nDWq&vIE(z
zfa1Kk?obHxQBn3YInmcQX)gt3035O`skfkN-)@&i;(~D50@&=?BYr}8{TZ5gRCV$@
z9XV78Zge$#Ww~aHI^C0E3TJ1(#CQLgt>UOQl11GeOt}ou<nLdoV)DG1;-`p%l!1;i
z+FPm+7F%HA=dRDQ`buw5ukX$FB%$%NQ%aQv^#5w1f0I4Dd4W9Rl@ZGRMOgAV4={s(
zqo~BlL+-DfYYe(v=Zj4vuLsm^*e}MT-Fso(BF5K6{?#3Ed4R1U#v_y32fnzo@;Bjg
zJ8sHqA!{eatHTd;c<xyknCRQ&?vP~QIUzm&zEC6=r=&IxN|}XL#0Z|Vd1Wfz|5+0(
z`8Kv`8Bi|cVuh^ea@iHWt?}~QK%!*5s*FMi)qV~JV!|`tpMY_Go=}En{>_CxoaXC`
zoW?poYj4-fgtw<B%2Mt>X40<h+X{s>1jbW3Mj9g!(ZA<FMLrPaDZ0CW^h~pI^1|9*
z_}bh~*bRDx!Ejg%BdZ8_ws(g?$7;b<v(=EFn3J6!xzeuJ7U+mhU2hz9vSN#$nZ2U-
zio>AF#F(X-77{}CnmB`*IlXryA@r@l^~FH}@-)fLqCm>c$K-Rz;PB$Pi`11Qks=eR
zH}IXm8)D$p)Qwn+3QPq`aKnGH|5IUgGO?mEt8sx1g^0lPAP&075M53NJYrw!%UXO_
z<IAhR(SZO0VUAfR!+J`?VX>)OJAXnkIjkOd-zjYH!rdGz1oK^7lO=dWNgp5TYoG{J
z-S&h!T3t^#Ji8Nmjp($RY0Pk0n>YBNh|d&aRA^0Etf~Ysb)ZcASt|4)ZK+oONU%e3
zWZ)w5m!5sqzhqinH@dI$q`O?)!$QH40QjcDEs%9|c{nTn9QP;=5fqOT2)I1Mut;<5
zVZrxv&iBXAMnb{>+gV=y#VYtSb{=_Tbm<!eAi>EEP(vJIuT$554I&ca<A(m)vp0Q@
z^eiPnL_!?=e#4apvFU`;H+zj*#VR2&=)rsn5zVP9)G=}lGbu|asqIDQj({M&*E|xi
zkU2J-{P$0+dA7}Ya=(U4r_zh@QE<cGlI2R<(T7v_Cg$e=snD6>h2NZHEahlS>>LvK
z+e)0X71nZB`31(oIT}2sPNvvS1_j~c;{^Nh?JhUq30R3U3k#G6onP|^!S3!rH)2Ao
zjm;CH&bS~v`y|KZV3q5i5zUi;=kqq-8wf{S{a)-vt|fuIEVoIvbdSLN#Dn?o28;ZX
zgP3RzAGGjKFi!;2B8M8H)>{nqUAu|Hj?Y8|5Olzr@uu=3rIs|m;u&X&`_Bt0JWim9
z9A_X!fxIgD$<MNN!!)8j=h+Zg`m_dPcDTZhpTAFLWZ?%IEX*@z468NSFEfoKzDk{j
zPi*NF6=b#Rd^;_@p|honou7o8MrDgk*%4-Rr-UMl!A<E4nxpVpb8M~36cB*M{eE8p
z6tDmHNDpM~kdP8+I3ZcV8Iq1*w?+MeKPb&mJ~tWzqNo@pM*;kZ9jrnD7*6Y19wQJk
z`^G{*da3VGQIV$q_`2iiLtKPlBO;T}n_xmiE9O6ro&GIN-)7s_#3g1Q*)+p}j)Dfc
zBCtBFx4}s-)sRvAT#+0Viz{BYF=(0_<VWHE=U3yBiwf7qoWYTB{7$)~618OeVw&f-
z@1$7T$_*^<5!TMrASd}F!#CIS-(K5?zm>E=LU<&j;1qX6geYbUSN#i9ITn2wrtT#&
zBYY>u6cn@B#=+w`8r10PXZ=I_o^7u0&=CShhli%8BbdLvuwi3GggjFT0h#p%kszI5
zxEvnGNM-B(#4w)SIkZOCKh#l@JAwgzsflI&XaxkUKs2jNJd(wC@$TkDsP0noo9NY@
zBZ9a0`7#B}zcSW@(1)cEq>k76_lhyo##|fELJ57aN?k_lTi;KIQtwW}?YirY=?Ej`
zmA+&om2HU^SOP4e03T8EDY`vA+4!jZe7<7v0E~4x3Y|kvxfGxCMD9Lx5?EY?#v|4`
zq?~Y!^mH^vpUbLROH`dPJ6PIFsPBE1*TqwoZpXTlaHg*`q%aFKGLGYCH{2h@j|>=4
z6K|j{G46X2DdTks$vbU2@jmygLQ-6_!=2DO`Tu^%UhUz@TbP8}@C2UobbZo=>xs9=
z6~tvhY)k97<s*E3v=HF|6ywW(e=PlW%`iYk%C=vk-afXkM+-FpxcA8D49;#RCs3E%
zIFnx4j8U)*%+8WZebb*My$t0tH)rMV7;(p7Vjfuib!Kw5I5kV?FnE6dQ)%ld5yc^=
z4P|8XTSzoAIW*xt?q7Co;Ir|aUKyS)+qHFx{q1JeiS2}aK_1srs6d19HBfmpc^z-#
zZ!U+B5W+v^EIG|QMV%&YJJ#0LCa;H_202-*$bd8d?1H?o>}<Xq-<7a&0-iD2F0ZR@
zOcz^I60_dI8>We!ooBTPnG&$GrCRqjeJ0LR97cQ#t@|#QShyr-z3K}8Ks!2|$oomx
z0axj;f+OT&4%A&14UZfHh|~fJfzdWenl;#4qQY~;781tMoE^_3N64On8jr~f>TG5c
zWx7_d<+@mTsPa0jbs3M|G~%#IPZl8}sfPr%`f|<>rnf*!W+DOQdhVRPK$R(k4(wa+
zF>Z{njrH)wYkILtTH|1S`_89U7CjwYyv<|5AQhos{ZIBputi|M{ln(-)88foz2_d;
zmwP6>s_f?K3zg1Z=Y>Pu)F(P>PSQ|Ccu&a`+v43~MbThF&N;@(f(z!(e*cox3p^hU
zj5i5yV=dYqh|E`lqN*kW|6hVtqTKIglH&kz*3evm8C<02`lXWDzMcDUCVlQfBCqwj
zRTaZ9q|FoCFbmOaVK3qi>*)?zP6QZi7lC3-nmQvc-^kgQ$f(Beq3uzsx%o>{8w~_}
z0Lm^ACjR9iHMeZ~*y-T6OTXZWRViCSrQnbZxq3-caw|b-4Mr`zi*T|2249cTXyW+d
zaJ86LNu;~n1ws`D8n^RCV>YGGY8PEj1pe0KUm~9QWDDnLUeE-U$nz{CbLmftY#ULJ
zxNGUt`Ak_kT7W-lYFxPzk%rA@f{q}g*o!hCxS$fk6^#chr(j6Iipiv&FTs-j7k<Oy
zOuN>;zL{>FzgU!0!M~Q))mq0=wDG`5KRwacHJ(G~e_@C1p&!XCA$?=bLM(&7G09HD
z%Vls%evCn;B|nt)4cGJ;j(?(s^GPwH=Xi^&%af#|%tu*a?j2g*32l!dd0QTZZPJ$L
z`(LVYH<gsUt#VZITBfG`Iy{UE<-pG8%;wgE;**1Czl~RYL}8&G8o9n%JQ*?Wz~a~=
z*@z7%<p9sBwLo}tKvU|w-Z~6rZ1{6%mW;M{IN%mFj6swb4K5Ti`B#URl~#gU?~OK>
z-So<m=f=~9dF@+}=Zs#n-Pi7Te3o7|c*_`)*CG=62sy!=Vz1?o6gCUVT)<6sTD)oC
zT)X655WyA`sw<)?01N<-lN8hRc+3pE!D0D4SqiKz<mvJJ)IO(+OhyP0tWZ+jn!``=
zzvOe$;9neq-5$R5qF5`v91kEF4p@;|dTa%n!Fpvx6!zY?scuyt3C?^11p8!>0&$X}
zzReBzjnd!)>Xt4+cIW+i@!c4GZP#C&o0J7K;0TEo!7Q^;357y1;8aS-x+n^`5MoGA
zI%Iz8_TD5oW8z{ATnFCE1pO?8q}{VmkT_p_PcRw@#pynlV)31eGvX|k)%G4oW${Ir
zCw@YD7w2Q(4xfmOd>=0W%1L{xW(`Z10_)W&I|wZ2=1QI`+iSu+4_&tk)E!l=mE36j
zs~9fUJ=z`yhhB1wFG-6K=p=uU;GsqVyr1&m-NZgzQ+D70_HqD{{(V@%k4nf>Ye5FM
zpgQG1{$<S!XDQqMv^Gq99Tu3rJLD$<>-Q&oBY!loNmpz(WqOtoXBGXF^x3>h#9fzi
z;SCDd$;U)^=~9mLk9(C*PV3YS+?}VO&!@~iXf*0pGH5|x$J75=(S0#aw@rzT>`vU~
zd}@6vq57@x?d9h!%jfNZPT+w~_@*cve@crvp`Nk0?8_rb$nAsWCt4AqihRTLMx^Pe
zM#U~8aqsY@`%Skjb|52ffasY%#ZS*S!?euHjsWT5uKO~rh4H~HW*4n>A*H3N0C_D>
z6`{aL`tZP+*KfWX>dIZl^~U>D%R9I;1OQEn$~3QK@UGm*G)b3es3eZ`vi=GT+(F&X
zO0%piCkHw3IuU_hH=a3i9@sQj#TcsZHjb1F``4HOuZ)OntFmE69~qxwqr_scNFOz1
zwg(?NK@U1Cy>|k=gV^&4ALAk~G*H}8W5E~AiDiCxkVgM3{@;`Jz%E+vrTaKYi|f6{
z@$HE$@B91_^iVHP?!XUbI=NnNxnAp_^?IolvW{-c4OKk01fE9_b%pNA?gG1)U_KL&
zCn}&H$1FM5f1(^}O~bcfKr2E8DzsnqUic?rP$Mbt*WDzk9f~oJ<$K6tXLMw0msB09
zUVN27svd^Lb-$(};xUFpz6fhuSN}#4_1)vY;D<(~!w^b~fyr465pgEirigy|D(yff
zSopBg5CV212S?pw(eupSNL?H3tY)V0&4PcIXh`Bcpmo^nP?RTR{1qlV-UOs)2+6v3
zA}#XdE~29f?!P<m?)H*@^^!k{^0AEqPto^P__Q+N|2E;D{h&SDUP}wO-E|(-_!w~p
zO26o!0=7Dg>x`>j+5+!*g8m5VtAXp+!D|wai$%S3mL6q|P3_iu(q0rQk;mWgGt|P|
z)mjREsEL17M)wxcCp(*Xhxi}}T^)w=4it{`RVW5mb^Ieum}AgQqqGq(dXQcI16HQ?
zcHd}N;Nq-g0~&CdWs@&NVPs4;E8<2Uyg}*iOIW^fB*~BZSu&0@Nxmh_8{aR0CdzQG
ze+f{^NipHTR=o^P2;7DVEY!8~%*#m;?VXAHucPfzoFCu+FyLb<{vlIZ_%YA&uCBD}
z-ERD`uJgHm&>D2t%F_Gh*K2=TV$R{oKKiOdpQbe;Olo-LKRdaFHIG45vYC?mFmhnK
zPo>DB8M*sCZXD&?Jr+uUXmfIc8f@^B9;Uw)Y+nuyxZ<n;-&ui-%pG9*n>^&cGOeMB
zDlVR!fs7Pb4Pm5-iP#XO$u>{fhsek1C+&n|ykGOeqx;u0yy~Ef`gblg^#&n=mYe^7
zCGU%8A_cRZQ&CPfLI3ohd%X6!bnx`KjpDo8&cyTgJ!cqDSd}ZOmbiBI)5pzl`9pLw
zqi3TXk%T5m-{zhvy_ss~^Vank4Ax3@yGmdq6~BugeJXyU*>E@I^v)K%PXZR8vVz$T
zAT^C>VV6>cy>MJ~!R%VX0Kfn9MFJm-*2PUx%hX)Em>0`XdR=6Ye-52ReLmK$>b=ZM
zp6(6yeQAZ}r&b)s;~ax-4yKqIJg|34K8Nu3RR0y372(oYE8{iv!!E2(dJPUFNe_^K
zYPk+!(nG+9YT-szy8iEVs$?D?OEIlEE(N`{2IYu2j|6`{EA(o*soHh~c>ckvu2H$Y
zdUx$L82?e9+F_dOEg+uQvosXgcxCujNue8*p!XzqX7S1&L?a~ex#>4$i+YOpMKPZc
zL3YN*kbbc?zTt{InnTht%{9yb2F27DF3pD}Uhm12HKT+T`APOET95)c!fYwrVNy1j
z3PRN5v5*aXR!1c!oWzu04AOWR5`G!F-_~mUW9Ue1{sT=a6$39u-)eZb>{aJp?hGNI
zpecCX%NIsodaegIvZRV7a=NBCW@QNp-vZMe<cT)z?9myT<R*Jx_0&cmHOth|dI0rY
zRq#ruc1Z#Z3vzjx40>TfDCv9j;=ta%^I-4)@7pWPZOiBK)<d-`p_f?aDEG#>;dJ4X
zp=2*~-|JRNIKDG7uGfo}Vnpr1d$53U%WjcgpV*fHIURQ+BcuRXFdFcu;40z`4sg-x
zz`v-Nqj-7|r3{7&owGL^{M{s_=~ChTR(13*AMSVabWbWv%54Jx1l885dpCVbtti#o
zld{FyA1(!G080s(62B23)gfK5DA(tJSggWabAoqYk&x@me3IPfu2yCaE%b+W#ZF@|
z+`Np`a!tyI^J87ogxfCc6(RhUkE3Yeqz4KjQbr2X_Y%U%ZTPw7(x06)f};8&Z_Oh1
z%t06S#+|^iBp@t_hU}ia4CcHV3$OJ5Jy8F|Xk&6dBzNHy>rb4(9h~Jgk*c!sRKrM%
zIZXlV1gkCfmLd)h%+Cvpq^k+aJXmTDC=b0(`^XW$jjpx7f@&%7uW0}^T>+HQjXP@A
zfN27053`)4ub9P)0zam;zTmuv+8}F>h`qFGn4Dk8oLX*w>0L<*DYdw%=^=`nFqQ&o
zUM{V1YC>_WUXe{lCRrurVNPo_(Oaf{@)V=)mei;#G=3cB!a<3vBW!AXcm`~+>z!F0
zBj984ij~%EK}mJ7t>z~{Aiwv6EZYtW-kXD{(b1d=f}W#-o^Ri`KHvS*5byxxVZ)QW
z|NUJE&R5PM9rpG=1sz%kj-)9GWU(I`ssq&mE%Pe<Vr~eX-1on>Q)y1Dzq#6m28SVD
zg&U=!1t&d!ghxm12D_t<)1K;BLIyXYChFD&#|vz~JXr+7v>W9eE(W8XAV{S7D^@*!
z2Jit$iMx%zSr42wQ*PkKZAWP;iiwyh6IXll*+8L!9XzPq!w!d|ROcznHsEGF;|K=2
zh~wWTStO<4Dv_HY+Q7`B20GeYBZB$v4sxLx1xrIe)S1HejStB{L1U9jNAb@1(4hOj
zpBeW8cUeBn_}<bFM_T59$4MWRaUaVQj<n!H)b;D&|8>|Q=jApMCgi0g_0C0k`q4BK
zre6~E%WE8r3vZF2YAw2}?Nj|7x`ELP^-b-X>z0;GizK;qmni`u@4>f_g-=_5aSX!6
zm%3>aMShH)C$3n3p6@o(jWW~i=zP^ikP=u>5-{XK|L$yJ6PXnGBwq7I;p;$X=vPcq
zH`@f(C*<{w+A{ok(USeb`)D$*<LLVK!1jnXF3uFV6K8=P&y!WxDuT8L0rmo_@|uog
z)&)2DDZx?z*h&q!;H+fX@pA*vw9;{O$G6|(StE(OePE9(#Y&Nou30`0dL6dxb|qKC
zKTeI`dksH89*%>VA|I(D*n1uQ^W1xVldS*$_<JN{(*!2QR4iL^74^-IK7j?F&8{sD
zTR~4=7i|6-FFm{mUyo81j-?CFA;)(l+k}fO*GdL{s7#1x#Tf<C-~`)RpgP4jIYrY_
zmkx@OiLZ3|)9-os=)=#h;+E~qnY;5kcfjNE!xAEmpz{cBz@4x<*3h3|BG043P~iY5
zU2(=Kw*wv{!Ow-Ef}3e}oi(ml-*;9^!P_CFSMXZLwP~);sbJW)zh6hUb8J(GLCv$!
zE0F6I5W72zjJ#*TC5vL1BBHV7*qB+fYnye!bNmvE{3Ap;I&`;r#*jYghgzH>7U>RK
z2@m(U#pIkc8T5JexlwE0Ec-bl@>(*<^Ld`*K(xs?9Q1Vcu`%fdTD9>%nQYpdv%NJ3
zwIp<*4)6buldoyfm{SR~LG#i%82bXCeD8-&FW(p~*;elh&*w<Qy~cByjFDAPFX?y~
zrhbpav=_1IOZLvs3lRvS=;3$jyVUwbvv<Fy_Q?1}R!^9OjkOHy$cvXX&p$b*JSmw<
z5rCxqsY+wHo1?7v?V&o4kDo%PnX|Q}aVV+J<Muep(9r=}v*+F&;PgA);Kasg#KGYm
zm>Hhv^_`AdZNZALCwcKt+R%W!ynK;CAsn-LOn(-U;6yz*x%I#r2^A|B%&kVC!MyVA
z1yQjRZWda1e1?X-j=6BKa4eoSYm3oIz?|Yt(cc|HiTfWXwe`R3#JE^%B5|KtdT)#s
zk@Q!3?=wH<4?ra5nXH?DBje|3P;$2w)Zh^Ny~WLjajf_3zupt~aScQsy_>b3i#6u0
zkBhBM3|i;WL&M91*Pz$*Pmh;(k>>#A58zSHmn7SdsV$&VYl7@%_Q3lVt*K##M=2xU
zXDeX<qRP_krfe3r3B(TtI2n2#?Q|Wr+Pw>-(8a4{85!Ai3#c?9K}NI7hMj}eeIHnJ
zrzZsP0D;vM36i0`;!WK>dD249=U_HcL7kM<Fu-xW2P3d=sI21T_waA&5E}bW6%)~q
z?DPrP!a-(e=)q)UtMC3IzL#0rC1$O5UOyZ*YMff9UTLEG*4CX`>kWEd9gUer|B%9)
zuPt!@1Q~Ar2>OK!eqVk~19D@^^h2Q8rX}!<9r~|LVDqUcP>)#R)`Ky9^9azm<?;T2
z-uRr*>2Z5GZ0#9uIGy_O8P|IsN3J1)HvD=t6Z`1_XDLy8CbjvjNn1}ZZVkJgP$Bog
zuy>Dm10*6eM`0lW@M~=;N4*9K2|)%=s}1d=R`H^L*raNa-WwZ8c)4|YZ3%#h>#DM=
z4R3~HqwVK*y|>C`$nda436X^e&IU?PlJ<g+T)|8sB_t&Su5Yrl0L2MbleVgN_>fO@
zYj$A{0rm>W5*poXca9X8e3(wHldYFq9l)s1Ym#;T-Y37_)~^2<Vj)0yHhy6UD(gF*
zby3an&GLu(ZUi0re+j;%+h8<z*~X;dPd=I+P{A90wwB@^1ai2FC<cE1lkFppdRaWY
z@myuTITH4Cx}ATOd+z!x^I$wpvl#RI22h%mB=+)+W}kYSy_CI?@!90UjlKudB{8B&
zYMW9mD5HWv0)y8c__-ndBJ%R22KQK}-16azb5F_AUV!mguXc6W7`R&$82TL%>3XYv
z75%*Jd<vq01qP)3bgza<ya<*0<=S1jYa&fvJF2hxo6u%brA3_c$?g_}TCLDMu}=WT
z_PG+b>cx9+d3E+79^>Np;u4A4jZ6m%u1n&VY_=aZD2{Y$I)U$w$U&CPz8axYZ6C&;
zXF*J#g0DfqSro&MiKjs4#^OEcj=wj*>H{2~6IX5iE9MHWT7*vVq4l5h=<NgnlRn7?
zFvn9rL9cXFX2JVP0n*vWgif!STO`_d(MgFYvK_jPyxj!^y0P@XSU;(wDLh07plfsF
z!{5~jJK(yF)Nu7w__Om(6MR5egT%1c_AkYiKn|Pj^{n6xIY2k1+d=1%+#(-X-;1Ip
zuNpyGIs(kO&cSlRj{;q1*K0mOSdCEW(a{}pUY~DL6Io)=vrE_lV#Glyg>}TjW~VsN
z_@*{?cr-<DbA*&Nv-ws?#^MK_di{cZ@rH2?JlbLemj>z{8;rF}j(^~B{hD_lB&1(?
zCWur=s?wR>BjDU}AL&K`wQ;vLewRnRAD&M_tqH(U5O$|nFbiC+b0*+HGc4Kv{{P?Q
zyJA{Fm(G?V=#y}ACK!hXV9=ZM=fy$N$8plSZ!4s`CJJ>W^X*AD@x@e=bV%3hX4x*9
z@^LmpBEGyTjv1io=Au8~R3nfkn#L<VC|2l57r2T;?Sb>aNJArf@+U`%jFg;Ik-W~6
z5g%FB!5VXk!!ut`>-G44cyC!eT=r$^VsB7P?F?hOeC)AKE8W`kT*(Qn0~z_tBFq;<
zv=s{K1775yyA|kQ8G$XNB6MD7!84eiz?o9y;p6<wF7P?7wI~8o80FAt>%=4hJGdOW
z?88=+Ky%2pr`MJYoe_#agCY(abteo0n!Ej0xS>Ac8TNt!KtSi%zGpyLIg?mC<1sN+
zYRN>^53;`eK{z$~KsU)lL1cGiaoRCiR(b|9@tnr(z?XlZASVdCp_cxjnJ5351DU{m
z8QykMy<IkitN)8Zul{3W=t^H#&7OlUj{+}m^?M)mheJ@uEAwkKPa&bUG=#^&w6>om
z9C{rm18~rBuCUq#H2fpItl0xnsXU2}J@)n*wX$J)acFb2{C4?i*ScVyDuk~SOa7R?
z`>W&?Mm{w9FE#C^#;Yh(y-eRx+yg)CKKaa8XJsl1O#E2Qy?==yTAHM&rtnv-iw;2>
zS8x47C!u@bA$TOl_xmEt7W6kVrrdw)>gn_9pcWPIG3U~A0E>|`#Sl3oSnxpWIpY-z
zz1S(FjnP`i*yYb)JprD!saUv4W3=8&j9?*O9Dg}1Z0;Da(>Z3Y6uAS|?-xFFjKE)7
zW~lsFuXY-i5Vj)NQj!3PkW)dBB=H2D;U%e}i0`O9$?zE{ZOQAHsZh3cbw~u)^RyLo
z)oc8*@_AJdgS6+{Y1H#D<!t!zxb?A?+56D?k&)wWQo`h6^3%wO2BYg=DCeF~oNq{B
ztd(l(kESxg>-1F@@U{N)_24Mz<H%1tP&DD=q~P6_?krEbbPd0Ug!l4Ur4tkneIpXJ
zr3)~Kw~8}hCO(hz6_9V;B78-(n{GKsbIzgykv<eGR|*Rgj|U&g;Z;miSrjAE=^27%
z0{(*cy|<uP`eA2tf5~sQ7fWijM|mUUf9z<K6tKW+Qv1tsMceCEL=o0V%*HGq@YTJA
zD^1oyS3tZI3Gfc(PZ1SS_%=hJLOlXyAkrA0j0f9k??{;U-YVUAiv;0W7$kEP?i+8d
z;uc#%!Od}c{7xPFtXtHe5SC12^jl`vXWi6h2WCQ4XFAyNxAj{1=YEpo<3<7qSPg1~
zg?nh<WLT&W0S=1zzw}(a38#7m+X(z<6}^N$yR@YA20@ztgZT*0E0^5LKEB=seaz_Z
z@4Oo&uDx|{y>(BjeBP@N{M?~_b9}pOadsZ-^>(LD^9_^V%3C*z^VmPhwjas7!%h#n
zd%h5~CQEkBOW}0_`i9KPdWEHe6}wKvyajLfy^^W<kiYq2RHD#7<A0zmc_Exk_+(EP
z6h`fJkiXfNs0x;!c=2T;lL0_xDk|Dw5vnm$<mfk-Ca|bPCEKVJ^syr&lCEO*D0g~`
zv<LmzOT|s^Wvh^?8YgI@)ufhb4tYV41+`DLWhpfE6RL8JOguI`O|p9r@noXQC^%jB
z9A(YgKl^7KK06<*%oABPLz9^=yfl`f^a42W3|Wc`{0OLj4m2|VX{P2GgeJBT3CHUa
z!~1*G!rM0o2fk(twe?`QrIidIet+-%d{O`(s73Y?ynLGc^v8qy7iTg?wX{&;S9V@2
z;Zga>FbyhkbpANi>2-T)7I`~7*aDsf1-w|r{iX4-|KS&Q=?wn?ssl+7*ZK@ZXzQ`A
z1o>nMn%b<&b&}0xsIUGX0INV$zaLRXd<gk<%LO1iWbl$&`Sb2;MU(S*Z-$f0aVMT5
zFIIGW_hd_%&T(jJD*fAJ=JtR-L7+W6b)r&O#n!(RM!@YhuRW;_+x_ZDc0A0{JJSy$
zogt%u59DSq?AC_v+OoX@|2dR1hmJoL;(Bc|Z*&TPxJDmP7i;|!^<NJQaZYIfeT*D)
z+Za(2Osy-_Ae*HA@D>Ju`~7~sZo$wFxk_bA+;^R3L3G`v2hE80rI?@7p(@G5fgR$H
zi74XV-X~iSJJND9RFCk+tejXNEIm-x?U*`?L|rlpf6_Q2VE;Rh^3#lbnN*{+X=dOz
zT!NTq%X!l;%f&2~GctY{-tqL`=1t$2$?yP~UF7>U<60?;@n`Hb=z>MDdYAsFefj&p
z|NG_N$UyKN-|-#AKoA*Z{@&mFdnF0sXnp<9|M@?MznI?bMK5~Mi(d4iPeHk_PN`U+
z`QLy3f4_Y5e|@v;#R$_c`QC1~vakNuZ~ykNoy`!y@6`dz>>Qwk!<f97NW+Ycaum5h
z5u#iR;zQ3NuglN!=dH*VO=hFKS@jYn__M~7av$V<p(ph!>ygte19s1yD+@N%2DKv)
zrl7F$xIV~fl~Ap&2?bxs_Ol9SI>6<r#C>z6W4inCi&YGkiT&_zUoxbW4;!ik&(u2n
zr*Lfv9ZatuHD{V3<A1xnM+iVj1Vi6G@5(H$G~eqW-XI{~iuC;Wll68shRkfb6Iz-E
zwA8yZB^`?f3a&SiXQ3#B8kmvWYsnb>DGFdY*F&NV&dEWh(E7LihlW}e*QYlavzV8i
zmFGyeEZzd99)=wtIz%BiHbMgcofZ(Sv)}y9-@MFdQ~qZLfFJmQA1IlJM`gBfgNV?w
z`$}y1q8GjBMK4;VtP^N6dPlMcUH|1@{^g3Cb3Cb}?Ejzt>HnOz^_8!D)lHyXzqF(E
zKt^NLQOVCX+1Tc(u(E-PTXskq1{^2RV_kk<rh`Yy*E;6O1S1L4OA;9US_Q;)N%yGs
zy%ia!W&JnQUNUNfhGSHw$dW<Q#%VIgz3XaPrA2q7(7zE~v*naFuRfY<P;UvpP0V|7
znjSlYpG$`f0G<VruIm^jTKqzh=?~Ou@DeIWP~YQ(*!--A|Fi^wJB$u8#3IxGUQ)!4
z;i>w!Z;gaT!+Z9c*Vcsg9`Wb#g$PyQ84H%%-IUz<{D|@)Xk<pYCU`^VytQB1gx=SJ
zcanyV>jN~w^-c^!G7zfXK%X{9Sc4XLmS{nkj1~ICO};b9rn`;Bum0+<US_lz2nb2w
zS9QDm^}qht!!=3?k+#1ZEYeHhsOe=Wc+rbq^rFw7RuuagZTrkOzVVIWUbWFL{K79x
z>$-lWI?i}croEj+=<Drr-{AiRqAx@L3VF^5?}Q<A$iU}lk2Ky$_(}+cSq%D{Q0Sqa
zBox$g#Ng;?Gk4r1Xx8E7CG}%P&s5>y%M-EV?)YgBbgQ02S8>jG&OH@k;86?=80b(t
zj{S~-!@1MhY;yDq19f}+i!^6>h-gfmsL{Pt6*eN2`%FSSs@%EGA-pFntfwIWvL4?t
z+3r1byj;>!w5gC3i}5z}=|P!Crir>%9&gh#I%X@&P=+T%<loQB);cx_bWeTF570kP
zAw?LX!Pn?due<Q->%y{{EYp?TE93sJCi>YL-0pw<>t9cMT_OVj_4{{!_jeaG0iAIi
z(H3u+8PAPg#)22U=tVF3G-)$1kBIiD-~HX+O*x9TBlKqFzIywrf7U%cwuvO)y32Fi
z(MZ2hx#!TLXPqGHGsQn&pM|j#y@4Y$M}Z(iLvb__bfMO#gnZVHP!X9a6!^!qZO$DK
z^r$O6I)g#FyspI)8@IW-y&rn~k9z;zW53@DnY~EYtg`MF>Ba!g%P?q1hJq;L4<ZZn
zKpij!96tpB-fyaR*en*}t6)ORoWN?e=SS*<Z<&cUOF(jxHA@pQjecqcB-x{86vJjl
zLv;kP`?f7eve+z2>_ARz3Oo;84|tymdp8z?($I{;BoA58+9$>!Z;t3|Vm)f>U}Qyy
zXXpZ7(@a@e_eC#H@(}cmMp_)b5CD_(#bYpPXH2ajN5G+KX2%F-AYI$tpZS@enZL*7
za`~tK^q-c5N;3n%7Nd#Bz>Fw5D(OWpdeMts^!Bs@1D@rWp}Mv`ChJt7XV@F+d5#HL
zIEr7V{ny)qg1B;)3$^#Q{0C)dC!sJl70BdPcBfY**+R=V0SZ#f$x))`tYWC;jHoym
zS+sMHZ)v13-k-?#9P_`?$oYv#XeB=iJr1*Wqf;4VLHf?b&G%yjxmgbO@6hrb(wEKw
z>_i4E&q-=dbxbEhxAoMv7AUz+v2PwE6+@>Q1bg89_i+SvJZcWGhAvQOTtd!Jofrau
z^13<Yq1AKrgpQ*IfSN`Dn1t7HM=gLxar%ffQb-dMlc$cz64@CEL3Q*oe+=P)c;}JQ
zEtEp+P}p<;iQe0$|B&H<GTS5MoXT&pWUv?td?@OIfYBSqaVEnsb@kmLyV(mS451j>
z5QF1kj5J%YzA%(<ipHU}>#mvmAfY3{kK|2zjSWJ`!zj~kkbQMX$w(MoFDd``Oe`KI
zC>*S}fAKH=Me3D*?8knroRz#G0cHk(t?d;Qz)=s&i(d4i7kx=IjXPKOBM3ec?Je6;
zd85;AxO{y`UJUjo-n-~~;(dlh%7PBh6X-oq?mZGpVE^ug7<!rK`8odVId-<>cUnFV
zAclcl=Z0-Mr+0Bl?&QlFHQP%aS9qP4n^6_@-&qmM<LcT*qL;i-=X%4dwaeTfkc%_t
zbx5e=h|+7MBT7U;^!ur5?oBLg7w-X5dY8r?Q>-o=JBm?;(q6)aGdkVOt^r>|4U_(P
zKn+a7{g8@3oe-eg<$5DX$XkT~cos$PSUD~1SLSAIhwY)Ym-vWKlC-kaGQFzP5FSrZ
zCRp)9?>{q!rv2%o2gD8lsxQD={1XIP+;uSs`0?Vb!0CJKZyI_Y)bs2Rj9~T-g%@!Y
zh!~EIVbd`ngEn2|AFayQ1Wd0TIYPpP+|Lb@ikR*ZhCDmcWkxz?kL%Op6T-OUkHqtn
zz0)3OL*3f_hyU;&UcT@9zVGtKfBeU}u%i2Yia^lx3Nv`oi(d3O(2C5mmEAJgXF|oc
ze;b^CJNoXQ|MP#IYv6XNnf6bXE2NV+@_b&>#7F#X4;ARP3kjgo<~jYn?(;G1A3+DM
zOj93HqC%7HCpyS3i8YGJKkfl)$JO(>fv2N;L&aX917aQYF&<OO0WnCdI6BTwj4vEh
zUFHDHkL{<IX%kLoFv#4_ilaD*COYA@{k!vLFbpJk)-0=kZ)dPJD0fCM5!eU-C&STm
zLU()D901Cy=yizpglg6UcCAi9lEG)d@6RH#81H!-V;Mx+tMo7BVpuaIx#v<U6wH)-
zw{T<7n}sm}!TLbszn9RuhX{|^Q<dzdOpqZD_RpUa<5c6lE};QuHwDI@Lm6EidN|hj
z=x5WJ%NhFj|Nh^XyaLA136*bs|CQTUF5mptH!t7+{ojB2p&$C8a&p1&_qFx2^~0b3
z>7TkqwtM<aTcp?Vh%b84i_WG@BGu@*Z~yjhFG~F^ylUfXTPW6+DE60r>6gkgHLHEw
z*FXuTJ(7;L%OC(owCDI|l21C%U64Z(kBB61T5u*=i!=38As`J+-$|q>dXBv#hH7E7
zKSPFFP(Yg*V19h`M1e#H1IrsvK>P{)Dngwn!WTzm#dkvUejo(nN%H=q`Ms)Pi`Gzg
zYUX6{MBk5)1{mLw9X1_CaDdJ*0E9m;jvvxc=}qCmntC?Il(K!6@&|&s;LQv1<}o94
zxV>Ul0wM%Ti!cm$MiIquP~kyKq>eqQf9%lNn0DJF)=@rE5c?xPLETY<z8#&#D&p*R
z(%yL^rYc{Yz<-({2BBho4V3@#vjoK8@9iQgc653`Ju8;%m}MZia$_}&-fhP0)I1$2
zm@Xo~W7rEPaG0?kKrl6NH=^Kj-ICh0&#FzN$Y8Mb)8_eKp<ny8U%ULyfBT&xq;AK;
zU|k&FMR`B&j}nUTkN(j=a&rxAhKCKlN~auX+V0W)z4S67yy!)r7j67;FM5!?@|$wL
zNBRGE|L)&ie((2wFXUNNcB8GGKm5Z#93JyJ+oy(!%FKRNFV^j2O(qZy|5bL|p3!?|
z;k`P`zq1jUL}3&_=;et5MU}k0;z?)!*K%k+L0ZyrhjdhiFJbA;n6QN{0+qS25{sVP
zH@E(*s0#8SdxhflHqZ-QdD1_*t4Z)ItOV#!I2DQ7o>4(NUKS__@jOjGTb0=}WgkvX
z4QF6HL@3E>;gNk9etR9)Wlr^i2ZkZtkH@!NKFTQo8U~IXRqqqJy#7QJH^jeFK8JO4
z2?LowfiRmqe)r0GN=;;$3Kf?Pg1vQ0JEqSXc57d0W#3au)Mtcqb;~WMYnUkLas_x$
z6Sl+)MYSn0YW%Lz`K%b{74>Prkne900umY;Y3}Kb4uhyP@<MH-$cSrIbv;z$N!z%)
zY0}9O+N$lr1O3$|zY7fm7-xj<Reyg=(4)qW6?1P~$b+xodpaS~3X^AanL6Te<gp<X
z#g;EYW~3ng)5^d)<9bxmMQ?lOd?zE=4&2+k`TzC*`mdKPZP}+O+&~*rx8MD(`?pNY
z7}4MSn}4$$k+>ayxL1+igzsXkI023EGA6v}Mf>Qe@J!zEO{w0DitJI}p~U~U|MuT5
zKmYSTFOyGc9TjE1=2iR3SHE)kFaPDglnnPPM2G=Vf61FunX*8&HACvA{Bc}z)SP3?
zKHATB=Y*SV!s%^;rR{O+HjVBQ5MkWNocumUPCz*vuR-}xhF5ZEyWz?gVw{4QbR8$}
z_Pr;^ZJ{2CKE*8c>c*NPnsH8GxlMMfAK3dZz4d;7;I{}pZHzfud2IR=I!wFzxXBK^
ztVn+6AURsW`iI_+x*|fj%(~R5Naw7#U8DuUhxhxVP#a4I@d-Syd@u82fZ)OPw>{^?
z`PZdCPTcq*j{#hx`FWRbN-4(elv$nB1H+*->je}+jkasFU?&#8S=dIJXyL3tS+X?h
zS1{U4(O=8)N&W+#p7#ic5AKpe-#!bli%WTHt$A|9C>m4I=nv1zTon4iweglre2;@A
zGe%+GI%`PYZkb!rpcZs_*?4cwU?BF|9_k^+Vk>rkTz=y>e&e!-HpTyUe&=@%p#Xm1
z2Y%r4wXc2cFszo|Cp%Y2Vab%&NoQa5qW7X_@xoP)d!)So(I5TM<^TAF|HFoV4UCp#
zDBk{UarT=B|F?eYw|2kFrqGKvTmBj0QB#VE*~c0nN-O{LJkiQ2PH(l1g-Yn2%}s4+
z^|$ARXubE%<Cvc#qEFY&p8boJ*2^1Ggr00c^eiJx`WcJ`SA$3#J*z#*6S>iQ7vqhd
z(MJmSzr4%aK3GP-zS-hAQ|5V!0l>9j(r5m7zg+KQcjYLa<!G$So6V9T11n~1w-3a8
zxjS0oD9PO5&f-3CNj2iZ5n9Y%`LbE<Lu>q7GLXf=jfzGP#%<mQW20d`UUh8bPZ&`M
z;n9!bkr^3AgB-ofU1fUdM=<8QtrS&bN=N)0rTc>LfWjl4Sm6|EHk#{jeC<Ivj`zju
z?uYX}Ndv%UOe2B0gn4ZIlCAS~w5d+b2RG$^`*&1W{jTr&uEU`O8~u&H@i&ShGeZ=h
zvN6lYu>Iz(Oy<Ofx1f*k4qqCb?G3?r@)g=ba=zm`zT?z)+1AOnUbfJoGYkNK_(y+q
z`ITS&mBa5<cv9m}MaeF9QXQHmsd(lej!_RiaOmNNdzx{RVm}hNSC8#GQ{dZc2x4dQ
z)}NP~RrbJH)XxgiMtp0)_x7%t2xvsj@*f+zC=1Q`-{U}Exn%>n#2^9a=*6dzLV|*R
zk`cGPuozbaltUeT5sQZq*Mvx=db_OYOO21A@Y8SIKPekQdzrz2Tn~6JH>Zt3ME8pO
zU(aVt&Lq9YPdMuD=>~wu<8i&-ZXI9FFr!GpAA9@>a)hvzY{tbA<=`j5jLkxr_a>+)
z6T^Xu@b48^6LoLVx;LBS!6bF##Pqnpku`OLIv)_Qo0b6@kXe3q6b#5OX!?pgEtE3B
zu89r_YFeg09t8P<MkUa1Od@B))Vlmcdc)H@vPoUoh=U;>BK*SPZ4k2=89%MZ#%s9K
z2AOTa3K9)6fCX-3l<c67M{w0&{^ei3oJn8%OJBSE$^V*%By7KBQ>ec6%^u<qjpJsZ
z*iZ`D(-qvDG!cVR;XR@3)o3%6cylW<(tHj?;XY?8;u+fdb5m^3Oh~rTHuo~g>NeVz
z%vZm9D`(0dHMn{2@h5-szb;?@`qxjb(>P@As^0=#g4P@*<YTC-7pv~cf0<!1+6PdC
zSZIpg_AV=4|93&LMY*KR_4e0;tl{U3b{Wj!;XX2&_lYv0p`gW~pVj9jwx8nt-(VPV
z@3LBg+$XBu?dUF;3?2H=lT9=aD)KZ6j#vL#)9-j>I87Zg3OK|L6AV+OX<GWgL4^)%
zX*lL=oH-B*Fq}gJdGfB8&O`P|nnso|lqY6FLsYkt`8~95DOx>49|QpaF~y|JRz;rw
z106RBRCX4EN2`;E1eW3C^NyrjWm*JB-=0avfz>34FwAWNbUhDdmhO+oJoCR!0usgW
zx%EfwK;43H0X(c{Iiv#{L(WIJ*E;Wn0XWdbk-&(tKD@x&cV)xpV!eDj3mA^iWZN<~
z+2=;Y%y8r3Qv&e4PLSj8J9>RNndcrOo61Lm@&3iwI8YuQP|j8Uxe05e6m?Q2Ycvrx
z@0V+N7S{<Wz;DEYuO4x)A2l*V^E89nIO!yYt(G&D7^E%F!Qc5if2ZUt=y1uNGh;@c
z?!RKNL_y*&{>8s|`L=KSHn$&12&6v$)QthSm(WQVZ~2=jH^v4@r|<Y~`kE%K=v=k&
zsU_Z=88)_e*o;uW{_DS9verL?j;=!*o9%DO8=~)%0YDj>bw+F=_DGR{I?@#(rZsj3
zfg!<ehBn3>&`%|qDhkW12L34D&>I>BywTm1Bs>e;Po%BlxRuyN3O+g0E_fdtNWS<7
zvEur9Ri{T3>+k75!#y77x|sL=Go`L_l3zW}@7czjVf`(EFZC&|JCP%*eHXriLHKPS
zivqg|6;WXXAmiH&#)`cEEdST{xd!_g&yg($5x!&X^2>IDqU@Y;pV1gm**(U(TsTc4
zTo?=|Ou~TTDBKaBQ;SZZJSh>k<M7t`17wwL?2A4q9Y|;Ivrh;CKwoHdznAkYkxa07
zQn3~uDTZESn%i}{7bWz|)Lko;mlMVbJ%P1RNf-hQkvX6Tk|Xn}MV#|qBkNSFQ75Y~
z%8D`?Ak#7N<k@jLd&51+qkKlP62n~OS|$$RZl-A5uj61z*wz9E&J3EV722sc`6!8F
zc4P=79;xJcOHKuB(q^nTXsy843zfMigkIT%uhiE@E+J#r$7{Oquq~?Q+QO(jqW)5e
z6E#Ki`#fQ)8eD7QBszZ?Pj;xnf$POrbCS=)ZT<6&Z+xTt`v~-p|M5S*eD`;McS-h$
zzoR5<Yzk$@Q1~ej{)SCqe#<b7t?kXwvYo>5Q$O`nmybfkvv{tzJQlc*6dp%M+#(-?
zwOao09`?;s)*%`^^eCAu)rv3aI#T0|JTfyaJW-MD(rtfwI7Wa$Se>Bk#zFo5hNv`d
znljk8jLGQfC4SGzd&N)gGMOGa&&$d7k|+tB)@d^6o~AJ3YgHehuV9@`1*r+9l;H^w
zhE9?yJSaWM7DA7aasKs>)Pro*-3YJ?ZKV;xT88lu#RG(Z;a{s`bTBMH^VwCB8t7$R
zuk?6jAR7uEg+>C^CMV-2<)2+W%0S!dISa9SngIYAleYF6D`pEsXJd&@R3~7UyN0Mx
zI6*Xn_hvMIj#-I0o(wIz6UEl?DH|qUuC_^I*egwf?!JiOUT8!C<-Ipc7p>AElo16J
z)QU>~C5z_;BVuAF$xO1ltAPsbaWaC8vSRyQTgv;UEJ`R|43=N<V2kIXOPDx7TXvO_
z;X>0Dq+MUzD9vCqMgm@Im3dcmOu67}!M<g8*X(dS8RatE>%?X?uc9stiM_P<EuOBR
zJ^%bsp|*slAcFeAb@8e#bL@04XnmK?P>r#%Ua^%E9oi8R0&Rfz2hVyT4)ym^?gsvk
z6Y^C5v!x$FLz%8G3=3hzh+{0J*iQIO|LR}=>&p#dEUE7D8@Kmup8uf%U?vznJDxIW
zG{QMsl3Px8W)y;GZc~Qjl;t#dhxl0Getqh_1QdX1iuTj(UpUwMI>Gski8J-QC*hSo
zms(nXcadWaZP?3$myK$Js;-VeN_@t6+SL(FVV3f8dX2iq2sPAC9e!qVuP9lE91$E(
z-H>o9n|UZ}=#3@P^>!-!nf);;g9<BwqYLr2?(|K)A?311E7_TjQN(pM#xXGn6F}pU
z*L}3EG|v;B?*S??GX_GY)_WIDeY#IQst|AJd3KKsJiuFPMt;k0n6z@O48qlO9LsIB
zKjS0nqywR?b4Quz`=*sybX}t{t6lpB2C_ibIBFOrl*&cP(OMp!89dF20kBTF9~;U_
z=*LiAgk*t^w%h6bP6z<P6yp`YV}wHsQU?eH6TI6y1<?H2pVA{qiivD<KHqOE%q<gB
zPW|FomZsm`joYhe{5;kn$|*yF*o0vd8?k;qPGzI!A-SJnfyc)XRaV`NDds`P`moXR
zF5%X=;o&ghJ&$zRS$RQ`aX>U6nOCHcYK4<v%A+Ix@&p~1EG@n-8Si~wfC=`*(SP_^
zhsm^cudfTF%O-G@oz;oi(}OV>*l5$$^$CQAx0IsgHBjQxFw7Ct3wW?V&I}%xMu07O
zX53i?>I)ks{^T1e1>%XGe2L{yfal539WAHXxJzBXC+uztz6DrIigGr%owDctQCcvv
z@o)LoIi83;#HhF8fiySk_#!fHyQYO@FaV$tfrZ0Gk6Z5OxBJQ7=C;t_2)tBnplox@
zKEnS4qcIwvHN4gER1jjP0xd5r|27_3n{qICVqV)bYAEwDAaa<PPPF9|Y079=rd`wU
zVG0e9{sYOt%r>FDzXJ-5JQIbG+BDB&m|eXQH@<Khz-f5|ZpRF)M#exH&{;p5A=s;<
z8dB@au)OB=6`}pA5F^(Xc?z9T>bqtSBM?S9F6bEYC`qw-pL|DovSb=zyLX&vjXCdW
z5EvKf5SV$`P2Lo`u4U~=A@Fj1DAi0Fvb~o$$0~4s2tctaH>JYUH%;eC&nA^AcQD5p
zK5}sJcZi*;XJ+Wv^{D6F$9HV->?=WKoB9&2S;)R6xp0+WOOP|FpR1M@D>1RbI)x0x
z#w=Ok0Ey3-cTg0kLhpouH}GgCo-dp4W(B|ADkBf#y+>vi&$~~;D|$D|b$qTCG}k@S
z0-LYQ_|QrGEu-WAkX+=(=1JtFFAg~&Ghx|j>%KsMn-*@1W5KZ-3(9k9Q|7u@@bYWH
z91Hk-QDkZDsL&=^fi$AI`+D><2F6hif0~i@oOokA$r(V9|9M*yH53^_kW5&T?hDAJ
zV&=L2s^nv<z_kC01u3&T)4Jaf0MUA17Fcx%?6bZ9nfFocQ(gm945RTwXd?@~U__(5
z0<~iCupuFoYFK+DMD>S3fg%OJ^F?~c4EaZv&y|zAG6EbPR#IwPy-|JID=$3!6JvcT
z;~`ia9vCU;dM%D(pQCG|*jY{87^1zr8)5^LgtL;;5zo7iW1Y1JThE#D-r6&WIfwYa
zb!BOJqwY~&|F^oz7pTio{G#W%E$4YgYD7q<cAa=e7A4B-rFT$#0)T@A<&c2U=122k
zVKwq^*z&y83wV=%FZILC+s2iH;sX8K$4kbQ6X9&2lJ!w3n{xO7<mBLbftJF!R#1TG
z+<Pn1@78oD<FUV3k35$%_7P<$fM-QMEo`&AOZ&RP5wT4|Gb!2Myk8U|e*&Ex;JXni
zH-nc&MRr=(Kv3RI3KN#?g~A}7&}CM)H#a><@cy=r8IMMm{KIgSH;lX6OZ*FGo2)a{
zv!hssy9ub;C~%7DFG0f)2$nnj^&lXv!%A8%j-7O5HHHk8;C#C(J@7)MZT#pPX}pan
zyD1Ovde7^DTo|j20cjTvJcOftLI}yKpZD-BEp!*CKm6MSpA|vZ5cd6>u*J3(onebc
zQhSB*H&YyZkze5$%;G_5$zkcbQ0k$){)cTXkC+3)ZC_4UxH|~KqIMDFMd2zByv}J*
z)5roodV~aF`%-cJ+E9v=7S#p_r#*DWIxR~^cw{8ePo?;zB!8LB@{vJ?o2&)HHeJM_
z*RN@w=nQ0__|HNuWS#2sF+rmKf$xI5AOfjf3y}j(^<L;-hR7JRht8HU4=sx`@=%rI
zH6>j~eUnxGle(;MmO75p48r6Yd3Mf503afoEmxSiwU%l^S2cC{UOVzOpYWS2<O*!D
z4GJ#IQum1mrd*?hfy2h8P=DV`K#5)mx~eurh}RPk9zKSr?}kH0t~`(0Q|Wq%ufZY^
zZZP>%%AY};r<W}|1Yn$abj%TAVHJDZOMs(e-W&^_m)$oMg7la=(6fH4!v;C-R(mGF
zx`|_N>I*!N#@p*eUAQ)1^myr*@QL#3h9rzo20((Rc*pIiIm)X^=nHD@t9eg~OSz=2
z$I#aZy`$ugz%W}~YF+Vlm_HEvKUzCS*Atft5IST8>bzBXvba!A3h+EfdQV{96OCVU
z5^B@2)EWAD8$CX~qSx%Qs(Te0{#XZ59%V-N1o<}7V=|1=nB;Pppw9BSAmDXM+GmBb
zDRHKj$4A~@^ssxp389&Uu`t3jWvDj&jHoL8!RNu;R;dnVODVEtm~Tk00PW(1OJU-_
z6vQ0E0kV6Xvlg=+Hq0+F@&>|<{_(0~jg<$HRvbWUM@a_Vb<q}<>tqOW7SL%ZuAVsJ
zJ&|m7*++Y2lo~E|W7%OdjG3|FZtVS8d8Jhd#XbROMP)PLYhB)~>%^T2D$JmtiZdZc
zX<6x~aB19?hu_TzPk$T~2In4vJu2~DJU_g$i0p(D0IrCPcD&G$f@kw7=(v7g4y5Pq
zcNLK>V%@k3*2nN&=ySMtJt1F4_+0&P&^g#=zuVsrD5mzSQI#VUMLHxv)hR-;U|b+f
z_xiz40k9-tw7$nh&b4i@uU(LIl+YzAu;jYX`#fR}u|Ov)q7DN`rkp0BH4KWaWX}x<
zjRd>^pj)0{se0?<d9uW^rf&n`ZdvJ(8oT;n1!~2MD8e@a$dmWX?)lK9EE1cR!Tks0
zVef;DCW0E0fF62T7-l-)*pX4XEnbXk=W%od=B?)|G?27>^{dLn>O!9l6@jr!3NRrJ
zVp>_jaKZz^>JDX9g1M`^KQIh;!%FZzO+c#(BpPP6v1$#iuw4Bb&Kg}iKKA78h0bgS
zRPq>=F+uz|;UGNE+q@6sv)gz^iDM%Y%aZzhYu_j;`kQg#>__z=oqZ}wRQJfR17*&d
zE@U|7FeO5CKnp8-gid@V?m3H02+s5@KChKrG@w7`AkXn~bG*PBN`61tIkB?W4ZB?$
zL(MUxUPwiPN1E&K?96Mq5gYFG>+h7|qENIM%FJIOcx_z=h^E6e2ocjQmp9ftvdL@U
zBNg{<%_v#7MBl*buC?YI96P%mBhBRl5z2^5^QEVJ+&Z>vl$9PO=~Jw)MuuwdxXu;w
z_yvX2k>XGBBAyZ8OnQO=z*;_Zk_BPi4536F;dDS(mCKIj&?FW-(pwxah;3@VbT|{R
zYelSoOmc7B2pwZcWUY$4X|4dR<HaX+g|x#)^Pw2dgwW%cd%*XQZNgS05NCufFE%K}
zB(&x7kzWHno30}_;qnkmrG26K?g+Ab1nVqfWY!-kYwwJzTV&c!NJhX_RYw+U+U61q
z2o?6+2`SyM6D3=$?Vq=}O?)vV?L(snBU~Kg01BxV?O{LlZ_Q0ZZNqEWC)zcK2YAN7
z;q1bE2}vWsQ0Z7$PebGZ482<&!yuABl*V($+XnHF{yX?5=$PbVo)LhOK$use+&GV^
z(q?i2ttvU*c+CvnnfybG#{Zl_W`I(22VqXTgxbd->_<CzMlzj3bcWvDGmUctG}~sJ
z94WP0DVePkN|f23m&+B)J=~=QN7>bajC?fh&~ss^jd;LC*Ju)m8gug)bboa?r-_jr
z4?Y_$VQuIfTV%x1J5ud>(w97m01_L!`WJP7D-{jCdhVbkWa$8^hUp2;zenqjtGk^f
z=C=@`?Qx}N8D$X}e0Cmyrx*Y{Lx2k%(?&2BqT3OH&JkIAh>xsTVB&59nX}bY{XV8Y
zuBlB{K#lrEU0I9WvI5pF@2@b@D@g7hOVvPVO(*X=b(0>~HHyp8wwkgDaQ{p1Mg+Y&
zV(AkMBM{0sRKOd54PVeyY-w#}sE8N<`Af@ySVkUPZ*Aa4=htr=b%RO`V8;C!k!fF1
z9Tx@FuQfHLqrJx!6cME{&W#J&NGF8}-nX?3@K~Sxh>jR~uh`?lPlk2PX(0wc!+lvF
z_cAW44CKKW@_p5(^@A0A84VyVTZ4gaY6Qm&1z}by>HFopO!M?{z)R=zVBY2^bjkJD
zs%!nbo!qVgTh&ovu}b*HYTV>Z1YwpVIXzYLM6bK9*UgPG2`5}$a*FSH<nL*nZ;Iq}
zfkD8)nY~j0j4ehcO=I*H7@4Mt1P5KD&xh~!>9!`KXGzg?!a|46oIRfZ?e{>kFt-Tw
zqsMc^X$ejCke*LpzNpJW@+(&MXM7Cm7WF}$cx>v*t}yD`C#}X1ao{`c;y%&Jr8GiT
z2E}?0E9+EDg;@~(-)U|n=T&{Gjd}De{}gz?spa}aq|3?2{mJLrXLb71mGaIw<CIBQ
zstH4NxFTrJlSkb;4BxC(m7dHW>XD+;@oWzYrgId3S@804X+ap<-NZH-+__D0k6jEs
z0@r_LHy;fpFcdBJj|dOIO_c+LZTxTjitfZdt~%$%sePFsx4q=9Jd%~(d$^)aL&6im
zn>?UvHspprq9H7~`c}{f+T(R4V`ULgCveF33ZZfGIPD@-_MN>Yf)=~NZe4)AUNxMH
zud`kblV55N{1f*bO{rr)2h%3&HO^eiP$)Yg5<y(_DgepWv*bjyvV2ZRZhB}M1dKR?
zc0vV_!!@tZO*&>@Vqnk{+iAW%v$Qbl`>eCiWSxtAcu6jhUZBAz{nwFOoa()qBNBLK
zUyZu786c0+wg;Y)bau4x-gy5sE4A%WxK-tJ^u23xi#^!FuMe*24;Z?u>Cv`@>rUOr
zB&%<RQaOU|CROifL!R^#@;Kk`J7Nyr8Udggx3T)87aAa*R6;ZV6apZlxZD?F8{c@+
z$|P^#MJ}Hq!5B_DecTFKY4xH-YZO}*TW!YK)sJd%-w!FW?;xzw%?D?#=GsCJHyr35
ze7-+plh*CkI3h2x6nmi1z>3GXpj8~8bVQkc&SoqvF-hR1@u1L=r*bP<qoEVpkT)I#
z2{4F_{R5LeFIJIYynwW*UmLWFcnw&D%d={X84~6!78vDjwRd-AWg(z3aJ(^kJ(tm-
zvf_H(hO}qJrA;3puhpnOMeJ)AsqRORHdE_A80j6O3M(yY9K}7L*%}IwFC++v`VsQi
zo@~cHaZ*q<e^jH^WUr4v6<q-d<#a}kCnZCzNyvh69W{5Iqx}SV=PT=?D#0SwT|eu1
zR`S;<uQGa%v1owM;3Yefs4<yB`ECt3ZjvxB<Y_|79_2*6gw*i!FRA^)zzi?$+7W--
zz(wIVo{`k7XHK5h?^E(rQ|_(=Y*%!^{^>lebk($v^@5<I7UkMpT9Z-Om6AOp1citR
zo*+2bhcAkej0iR3n(^vd@cQErn|XkBwf*eAnwS*I3p5iX1jIT<#swp5-e-veW75c^
zvR9ML7%1$#a)NW`AEClYeTa!wp<S2%`Z9)GqjfG|T|8b%PrmN&wS<rFo9z2h{?q$l
zJJy%OB0S`-O4vu0=&;_-Tl>gId!*P$$=K6mb0Ld-=nw#wUjyX>lzfVDFjXi6!t{r)
zpyM2-Fq?SO$$3JOIx#1}_(390FE>`|9)W;UObK4NfHt(~7))p5j)ZR%FhqjD&6wB{
z43$eB+-FNzl^vUB@rf}1gZ#>jybO+H@3rel5rhq|T#gq$3eS3M!(0xYfz1(O!x%kY
zlTG;vk-)KH!uJ>Q8qH``An+^kZ5bkyv=fG5!aKC$uh$RR+{y<q0@OP^AM_ZYGVh1`
zK;@2MAQMB$l#HT@!g4UBjzLJRdPb>kx^xG_pV()wX1pro8?Gy(K*|#Z<7zo(yMg>y
zuNNARTA8U^2yWVFIB_<5;ZC*7o(v1vJEpDwb)FwhQHWC+TE+7y?$}$8RfkZDJ<8pn
z@OU92Ug(yTFC6Aco?^2n_>fhTNj_Mkby(MB5tkCrj1pQI;%!R`zW6*Qb=2AUJy?3z
zJ!zcVdRFp+-p??$R_u>7_n@t#;Vi8ZD(HrP)RQuEhUv`v)a2B%K38T|bC~X7d7URl
z7*CqOg7wup>wk+exy@X$!#N>z#%bZ~V=Kza>@*VEg*cqIY)$@=rJf^C%9ZyuewT%@
z2d4lKaXtn87~(Tv9C6KH2#yKwRA^LRpSn)x3mUo&seYV=V2;Ynjxv2Vp+V|O?7rJn
zdVdDf7mc1)PjY0#?er9UTBg+CJPp<eOY$k@xJmHs50V7%dc9sBZi1wdxAXkp=MqlL
zjMa&)jc3M~JJby5^)p&%y##K~<fOSQM3{-<$qh#@(kgZ#F7iwg`6A|0y*TUZ(=32{
z$LgNH(R)PtmpeykiEd^V^sG=8J#RcM;~WA)0H8-%QSslk=Toi!b1me{V;AqfhvxzQ
z6m_iBo}_=cv2zo_xC&JQ_lH4F6W5@lHy3mOyfv@%cIhLAfPg&MuZhQ-jNNSR%evK!
zZ+s0E(^;MBaa+IQ0lM3e^nSD#0kfMHnz=5F5zc#)ivfjRCnnSMJqpEb0NptO6={Tk
z4PPVUZ7lp|Y41o)9SjTa63rXUf1-IEdESkIMUl7<O1dtu5d@}=c1N#IZ8$wEcMKCN
zih<GQto0~>382tAWIgF%XjWxvLHgq;f=>Nt1Qod&7^P+(#I;H?j^N#Ac`C)UM^p_V
zI&#&><2iS{$KLTC^}|3>?`80&To8-^uKsE(aJWr+a)z2KC}#vT(wmm@GO$tYghYWe
zA}6ho;Vy!@-$tz-XW@8G(r$>sf(=n1a(mFKlZa6d4c~RS^N#-`dYbWNX8oJqcLWIG
z3Elp@f$3-(pX4R$IZ~gZ`g67L(!I~ZOG14#txuATRf!%R-5STRZ}0b>@SeSKW7Wz$
zDC5A|%4PT$5ts>jbq6)O)JQ71_iR{^M^O*f?tSh;)=8^IG0C1ao=Na#&jQyBKGE|F
zZ#=&C{P8k$-yb|V8eQYXNjWF`|IR02u}M8a`;uEaV>q~tz5^~*6gg?l9ID3twvlmd
znkX=I4$$tRl*SCJRHqJj2sP>bPm;s4R^#?@R7ZPbNz_;i4c_OnkGxH2K;igOJ*fPP
z+tL8*RBS5jh5&7ZFuKrrbGpU`?6D2BGCii9_qA+(jW99bc#OP0Wn&w!nZ}B)YkOsX
z0sBhmd6uZRH=<|D|BJGHiV}Ou$T-$+sJ<pEsAqm240@Ya-5C^RK+Pyyjr;AC<=#>=
zSed4e)=8o#T|XIE032hPL|Wiub=<ni)82a~y~!y6zNNXx9%*Kk66|7U<r3}lNW)G*
zFxf>TfT`DoewY7>V!dxX%eh1W`1ftUb9*3IiQEF75Kv$({ja&7nYbq+D#ZEk1uB+-
zAGN=uq8_BP5%={Zp2xk0p&300&sqYd3t2qtw_!J87ak}W&hdq0`rF+HbmE2*^wDmu
zZ?x%{F<3G}fK}G@QEWJuZ&vnEj|E6SRYt8ZT-F;jR-kJf$nz2YcUY*A3zy-r!Fn#&
z#fAAXPX?+;djr6~4HOce)13o~i3ynz4O`wRgxu|&F$6%g(LG|r;ctB}x{6Td2617T
zl;|(r-%m!VX)-a89u0DmM7)Xa`FRy&`)(K^YKXWY!rYNL9F*5{M2=!-W-#V?ICyeE
z&C%d1lU^#E{*3)SGG1HpJ1w|^$HDMSlp&($q8RoT!Xv^#G5LnqhNd>A`uD}TO?G6A
zcTwYcdC_|p6C;he1f2RbT)*Gwe+kVJhPZgf0Up{u9tJI=+o}(APcs|5F-KJ|rk~$(
zHk3Xn=h;8%9yba(EQbfhv1@*~RD7yQ=dC&iOVq%9zx*yjXF$>_vEAfspxd^;c`SL^
zH8f343YH=cmnwDj7Fn;*gH_g&S5q7GCO1TWe+6rKHxl8a^kMs98Vz*`^e(}IC`<`t
z2*V4z<JHs75Y4S>kY%s2b1^h_epnk?WV~t}j(iZUruxx0a84el0i#$+iec^C^rxK+
zurW|HP%H20mJG~gOxuxYs#@`$*PDpX4+%`~TlsCuqbF*J0*H)=gJz3=-m@qUJ!a<;
zZTedi<(JWiW>WVARQ)=>07Hfo`MhDTEek6R`;4!$r61a{KT2I2SZ!&1aV)x_C86h2
zlTq37qeh_UF=aiW9{jYw!kvW^evRPA-3AP4TYohnUo#9k<gNcuc}jR}_K=A^-et9~
zJ%2l68Q!0l@mZq<2#G}hF!^8=vK$VkGa-v4TXjsuxR!e1-wA{{HWG#3mAb!vupcaW
zH}04FqyEGG$fBjlKyVo86rJ24-qe3Cg>ssq&4!-jdHtS|WK+V*o`d?zzyNAPC#?6s
zzH0r=MNVM2er~PHx#N%7W`v{PL&v^m$&<@clzjgs!etG=!+XcFN1;CejKp64gb|el
ziX=~(K8JE_X~Ac=`LaFRO-K)Sc@y8wS*uUW<d1cpbjpBR*Y%t%`4L*iQ0sOcy8uz#
z-*epO+qy4nALWd2$+4?uSYvURK}kY*PLZ~k=Ml^9PF|ktKu<*zngB<P<gzx^*$#vk
zd*!{Frk}~goo|;T;duxEI6B+Uave-gV(Ql$GmmO)yzckrp6(U#++6b7F#D+SmfosW
z(0Knhay+~|2f>m)6K;eTU|h79^Sooi{bIbR?sG`w$RIC0X%U|LaEKiqSl&<GrP%?K
zl^@9(7$9K0n0@R^*Ml5*am?6vr;Xco-_kW2z&=-q5+2=sD|)-ApVG;b)iung!4<>g
zxLs~puUQ7gu@QPaf;<2t_;Tpg_mCRO>1fVY*5{^+!d<Wv?*e6d*5I8A4WU|=1tS_C
z8mndyD#Aem=33pM&TYpiqB88W;^A!_xFPG@B=|7}zoh^6t(&Vx?;6Iyn&)NHDeJxN
zg4V?xA56kAdd0jhUx<tC<@X^%`tOs92zrjqGs^qr(jadNubp78F(^Xa`C8F+&~DTH
zl={lc^soAn;#-H5>3c*0m}lbn*`fE?7ViB=2tNlgAVdJ2Q(#~`2=hdM7h8`N9nXc=
z`00dPI18<?ClSH6l-*kvNF+&<EtXG@$$ZgC6LBx`ayFFf6EtU<+FHRGQEjFhVvVoZ
z#jO~j;P<Y72az?6=jnAtvg4j(O<}*<BP)7y%I!s+>qL8(!TT)6$i(EgQJNvG6iF7=
zq&`p4_e6THnFS<M?|(qFO&(6EX^BFdh}Dx-1G*}RehrtQ+!m<(qgiqrGhLI_vwGAz
zKV=*Zku*mrg~$E;`2VMe0C?0BVaaR!x&3A9NMrQn+903Wkp=xMiZ-7JqNEuEefAi5
z#JFt|5v!P(c1@=an2cf?VFpv9<o0L8aztH1DUBigOAER8eem#=oCK)5x&n+=>VSL$
zSgk?cp!%V+f(dUolAbU`v?gMc9ga_J1d1#vcQ_VOfXOpxu{PZ@N}!&NUvjOB{vTL;
z>uqE*TB;c*brkUPh+Xqg_4(p@)P}!do>+23W%*!eOEz>#39a2HkO;+C5T+x+$jj5<
zK97m4pl`jrGWbmB1#t~_VB|9p&hgq!lUOeIa#{iz<nDB)WAxlxgaYu!tmkasvqRE-
z6n$?E=&&`T_=E85H#c(GjFlv&ooJ4c93X`1S^e(GIqkoR@izMqWbsFek__u{4rP;!
zL!vg+>xDMF<XYr>@ZNVdx6o8cybp|NCm024`xd55?-li*2nT3za1N^=Bf!XTHb`p9
zW3E{lp1fj~M@MOBRo4q&ZPI)V0dR7-V4~r7KS9VLQx`hzSj&qHEdwQwjLG6i?^?gC
zP9?w$Nt+vFJthS1;jCxJxSj3EqJXpErakG&_)nx!D2|-_SEICV$Mx07iFmz~r<xd6
z?zAZ<lzJ8eNq*rwZC$lHU~$oJR>t8V!sH#ng57+pA$U>=qU)eQGHkEcHa5yT@b`_n
zjJiex7;uL6Fdm&O!V^fiN3UbU0pDAOKK7$U4$*Z4@zU=59dJ9kAH{&3#c2j}fDtN}
z6LNR7WneP?dIYc`PQJsglD+|x6|=9x`pFyGvflKm4(Ykiu#R&G1hhy<n|akRJjL@o
zjXYyDudduA5uzpcWKUtC=a9pLQGl$=&@Qc0*KkI~MrW+A(qdNeQdCy(boeaI?Tpt$
z!&lclTaY}pGgDE-jE@()?kGatu;f6!-8no!jzI^egye+hBbBIZO7J@q^HUi4>Dpi&
ziIz|~3SA~fr10U%<sYo`z_{=fY6j{jAj-v_6~*I6;Tc{|3^7oPgmKJxO``^8>vd^8
zC*?NdMcx#aTLPKGdsFs(ytN((FkYKL!caLNZ!T*kGrceN0{k3~*vi<D@p3hRs~a9L
zI5}aIgFzz<JYGs6kEbRm9tei<-maV%fg*38(N@{(Ft?8LLYE^{f(t}goWC}Ag?&Uu
zxg_zty?TZ=<<M+0h~b&Kd!oHaJD=cjzT;F`Q8o47GwI0)fMPZ@#{v2qt?c*}fg&QI
z2(Iq52Y2S-F&WPJvhI1(4zu7Z8V0VOtwjPznE0Ztie<=LYp`@o#|)g3%xH`K&?u7e
zAkK<B<H#(m>MGxZf1mM2(fp39<%D8j_1E`stgDp~I9+&5Nt+8OPXm+*8sR#a8Erp>
zaERLlS~`Pp3qB)T_my~n%I4SA47%yI2i_Tm`WGhJ6$Y{KG2>;;zx^dob0b_s%Hzw*
zOuJmWPAwcGQ#(9Oy^EL3$xFE9k?W*VeIK7qy#NP4`BV>?&!mr2Nf@QQk|2!MuRSR#
zgEiVc+5^J9M6D%MMz_$citbS!fq^&2uFd+~ZOi4MnS$x>1nLEpkXVHT#eR0oEw!2{
zd%GD0u6j%A??m2%WT4`NV!;GiCgG8{2{nTmHR8d*F;q<n%ymyxtrR1`G3EawoN&|m
zVt<$7acyJfd3_@Vz*Ep%hs4C&A11M*`*koy47>MCi1@gi;GtIviGip)MgU$fnTD2+
zk-Xawy}<A_Lmfs=q4uy$9B4fDlmN}Hul~7>6nK#}iUSc`_bZ?}gK6RNv|wDlbLWSM
z8>nM+wDB&}oI>WgJTJ*(>RzV4E9N?@$0+-{eYC^|YyMP+LL{#(@XvID?|>+Luk6te
zdn_~RQr!JP=!FPHQ}T&0kX@A=0>~>F4!`}~@_@*8o(2DZ0|dZEXz873MZt4ZYS!2_
zf68j19khJpU-#+`y%D=y%+St}2hpNGdW936D0~dku+Z}bv2EdQFkIKuXteRpY;i1C
z1k90rSL;Ib&vFmzS#yW)QGMo2d7UIpY*j}~JX(YgAZ|Po$*oMcYqyl=nF<6=ZA=kQ
zc-NfyBAR|kGzWNDbU75>w!SK(rumHLaY~LMjm=@2B{ZAB{)-UlDgKHw9;@lIjh)&l
zf;+lY{*6(H{%T{lHs&3rJ?rwx$80toZs-W{{zhJ=Zus=~KLL|fjrL@YRKzM$_RXBP
zK9Jlib#(AqG&0WaK^#hU<v%y^*o#>7mZ^V4p>RDZ6TU*C3phz(;QggCF%9x?OdB8U
zb*{Zj^@SrxMCeg}|LXO4_0Ptf)2eF3V1|y$5*~nb64DVSljc_nUWx!33~+=a9@R^D
zJwXa)H2-Jg*v+ABEP0DjdrY7wcyquyU0HHGNIM{Y?_@KzeSR4l3j9ixaTzv2sUP(9
zV)E1Q9JtExgLBoV_sszy<4yF<5tAcNs%3tH21iq1MA6Wqw>M^TVD;Lgh<eH0T;}1x
zQ#~@s0HgE;na$9HhPTyl@DYGuNhX1P7jh%;K&AR}?`FJ0#ETzeDC)@SJNv$Q31!^A
zQZQ&3p#7^mrkc^qpMh;t`yO1g(gEa#D9Wx&NTdau`lu>>w972<U?cVngR(~`iLQuT
z+_7+bkos4zxhQV4DI*VjzveBio?;wZ!4RFgy0MAYS*hV(y?nYagjXZ!*$?}6bbVA-
zx9joD%|p4Jpr9=BXb>@U4aT@70c13Q*^r%MAgLKb#He^qt*}-{j9K&$cLT3UXn^hX
z0cDIk8cyu(X(0+Ku~$|2_&9!6U!&hfMiDlSAVMJ8do*dj>F#~X14{EniweY}g^|a$
zIW@>OgJs%7l{uPpmyud}IC$;=ADwwELr<W(Ph~jv8?I^eg}Xi}$4TG;73~>&H5y=h
zdn8|IrDp22bQYN&qkfEO%ZjdInd5#X9=Bj%oz0Kx1T;pi-sN$kKX(tqKBj#G5Hk9{
zX%{|w@*tMcNh7^_LYgtd`?w!ReOmIR%$DS+3?c?v*n!SZ)f4kJ3UV&Ya*dez4_GL4
z=4iQod^B|5+iV#zIY_v?EK^pF(~q6uuv@6Y^ZFBsal!kl@0bUv94Z!xhH?Icw(WY-
zwe7X_KJ|OgE%X*ffTtq>9uQ<_E&rrZMc+j|{=`1Z<9kLmCwp2VM&Vf%GoIy803*+p
z_F%OM8JVO|Ku2rxQoP<S^85Kr@BbbzXc))sl+hGfiix?Cl~)T?v!1RShve^~?zzK<
z+`{AI0?DJ2={LQZdn3B!L0%Xu=C;%yY_|1DuM_w?Tyd(5ma&>00tB&{5k}XaMcKUp
z$ZJH4YcjJon8!5sL`uE3w2QLZ$lMe}=@5o?oXs5Hkp;5I_&QlvIb>R}1|Ww(&#5wr
zr3{WFl&7co*N22?82UU>w9_ak4drM1m&42k3Je>jsSK_B!E4-Fa|}+J@S<71l0&GP
z25&5*yeS|nOG+bG0&=~P$$cD=i@MI)bNIY@C-#9_Pv$bUW#TE|d>ooXCHbaWXQTRO
zv@D^(ae88}8gzwNYpBFeJociE$G9$U|IsRo$G0^R{9f~}%z7D>;rdpVUAAmAh*d~4
z%Kr#C=&hM9130pWh$)A?%5&!EXW@Q(P~i*K*H;~bwmR-7@H<$ix{h6S(z+D7y}u3~
zO1`6O(W;rvcc>(&pvw;%Qt;~Ef2uO|wx<AKyq{YjW>7JVWkShBJ1NV3qOCngDwP<$
za;9px;-W>@Q`+ih5`29UR>J{>i6)v?k}Q$h3Kot7$ZShitZct!t&B%qYzxY}(e#E^
z-(HW6%M8X$c_T4SS@fL?Te7Q;tc-MZye_i|m2SI+FB~3ywtC$9v`xWY(P)JyIJ60?
zb1<OcGFppRzE*-`MGFGMXUHPldSB?KHty1mRfF#cgLFCGJH_=c*RRnl<Z*<-@M0Lz
zQ|b1f&LBQxPLLl1zvJT`>cjPTsxr6i-ZVpEv>0SsPZhlZUh7faQIm`1S>a!aZ{=J8
z%9!aXfsntW{;~aSWCI$wN5r2=q3oY^on<}IduEU`JSI<Y3Q%mbxHhkwV*feM%y!)H
zV2q>(j4na}b37RsFg<TE)(wdwjhAz9yxAyE0ly!O_4YU6#noQ@*$GnRI>5lU|E6Qa
z)k1XFrMDrXu?zPv{?ij>51mEI7)pH=jS+k?Ys>IZ^<MNoqdYd6q8wc-h#M^LA>r&p
zgL`gql^?)C3sCNv808`%<;0T=Bwz3+2nFt!v2xfh1EVV%2UJKx07pQ$zc*yl6Xftq
zN`Z7zSA~vMbVNe}WYB4DzKv1<o(Fv@%<V9gAu)slK$wHDj4K}T>*T1xbumI!jSy#^
zK3nuK!5jC><5_xV_Yhd^%`X+=*E+2z;(Ib7Q~gH;X74Au5FV$ml=mtkw|l9b>0%#G
zXwkl~PSWBz*?^Vt#JtC}RtD6uvm&}VFo5k?taUREUr{v>KyFuPVJ(O;V(q2hJyj7M
zDtehh`-xB*-J~El{A{b7)bQ!(nv*Gm<ZzOp7D`&BFy>p`m_EB_mW8X=3kx{8ZKS<Q
z{&1XD_cTYDKb>^d!)>Up5i=HVwQL-8Q@LEOtDGl?+lmC@{2oX~?U9m3d}pMjLt*jR
zN3|(MbFxTBMu3{RhQeENie99==lZNGFX~cEw?sSo5+<xYx-XwVjP@MxR5HT84S4x&
zi1QTn3;V>nK&0=tyP;=1+P$*w63WWx!-}EqWAkmvIA$MSr>T6Qd<v=cbT#twRQ?+E
zy)y?)@j=+Zv*=AUr5*;b{*#7E%X=j~dJ?Vv&ThC{U$ECjC2(!zKK%{g7#d_g9;4(i
z`<k37@Spyeyc-4G+H72|sa6Pi%fp;_;QeL76xq;@QQ_Ka5-0YWw=;S&X5(D)Agmvq
zK2doBK?!f#)1Sz&?#cN6Nv*Xno$ep3Uf9m6qCRr?>{vw8t@8Tr>vWon?Wt``y6)_N
zyoqK|CMVWBeT3dN1VBSoM7%lu$LSddhH(l(Vx;>BIp8F+x{ctQoGCOui<F;!v}0db
zljtyT0rPEGALFnb#DQZ>3qe-lCVv#q1LUY9DSg<A@Ej1-39Q5-rtB=5DCQ}}{e;kf
zQF5bt-_GR}OsG$E`J9tb#PhsuNyj)`fMdk$5o#Wkw!8}^AcEW5$p>j6Y1IGN@5QjL
zlIgT-R3t!$Es+Vs5Y8un!f^sKeV6J1+jx)zpicv`&4bshOa~Qn&Mj~jI=+KYN`l&o
z7|w@(B%6UE-;+trkjJ6IqslRikMDbp0JUS9%=y}iws}kQ-12${Rw`pAVpyumsbJ!Y
z+t~MKx$(Xmjl82H<Q0VNxMOsX+<FE{aVM3H@57#E5-BMZfJxM*!zpNtfmdO9enxvh
zABl6&A<-FL^V-0+%Dwh(<(eBxHHNfu2Z_if?S4KLx1nCB{-=(9h2)m8+TJq(M-`A`
zf(u8Ucb#kwIvK}HhXzEU10s2_Gj^PCSiL*H>-N9f)lcrH`a8-45GE4Fq6BXi;-KBf
z_&K~*z%^cYmc7KsnIig2^{WXFXk^0*WjRDth_cS{nqk-mJj3<U7(tR++yhHpCry9d
zj|lyDW$xz5_aNtpAklM$LPp?%B|^G54)p%D&-9*?M#*qDHEs~<CitFGoBA$^NS>Au
zxAEAz2WgRG1X&n__<FJhBAdd<H5sOn+NGx3QYKeKmB*`04i#Q~b(2Fw5oN)l9FjDv
za$*0Cr&aYx@lDj@aL-BXKcAif04IFt36P_*s|&L6$SyO^U7Jo_M+n2oT9hivnz3!v
zjwew<^HAvkhVF(7SR;#0GNIJJ+Bp7BP&zBqsx5MTAe{3u;Cr;Wtc~93qR~Q(SAV3R
zD_gz?g0Y_i0s2J2;dJ?_AxmxIQg5u|;2OoW@Xc|8IFI~;N?He;LT(>Yii~Y9Mq!IK
z;x4zUx_Y4wslBI+3>e=(I-x>~Oyc@BmTLdChPY~Hk(<9Y?r^MnTN|{m*jT`B3{<8+
zE^>cV!=anMg!)%3Do0^iJkM9;ddS2^Yc|X_2KmmVPw(~jgo+3CpCbqfWd>Oiz$Ilq
zou>G+WJGPy_(c1YQW%B8qZH!)+PuL(<Csz{1f^P77(-KT`yKEZe|Oo&Mkultw_4X^
z-|%WQno>x?kk&r5vavGjwQ6jvgZC>2)X{IBU7rgEsc~>Gi*w9d>@6=a;;|%TQzTW+
zc%}Pf7!shBe{HM|)}_pA<QoP?aR0scJPJ?C*ttB5F}ulguHj*^Ua@D@3&DvtX7du{
z^|Nb4Yp18Ubxgu(ba)!RCyq-x!R<3hDf=`w{C&}&5RsNKD(|P8Qi(KO;TWp*zGe($
zK;7Zf{!<yQ(6_vt5;k-LtOO+3FhA(B+#V|Zy%}0KV<1!uvI<Fi_t9GQj0#+)<;P*!
zar<p|)3;ZrGco578u4v8YXC6i$Z;3s1L9&JC!Ff!{wM~3Eezm#ty7JBE0~0bK5L<n
z<_CAlCh$^{2Ct)51)DuIs(W-C$zZdop4)P;clGcJ&pK|Z*6NE%E3P<cx1+W2F(K1}
zHJ#e2H_UzBgD{tpD<FV!lSwb2==2ebERtpzIuj`y`9SISgm@q2piC^mu`s51z$nBR
zIRcewo!T>+s@7+eFtPI(9rFz8_n_=m{jv4<-Px4U3*Ex+?n{bF`-{e2-PMmrZBr*Y
zg0A2_dvF?A{cw$~^?a$XSuMPIhNQ|Ld)ca(sNd1*_xYfwD74S_CnrL6-h@Og`V*RF
z8}F`j9p3}p7FLL4VVREC5gz@XC>8e`{3NQ=Ug_XfdF|0Vdq!7Pe$U1}5`KuL2A!;-
zJ3)8M9TOb;XGo*eFe^U{0*zhRPlIG}vBKI>H(IE6o1pfoe+FewSt+5RZSV{jM5Dz-
zp3CjG<NO#Uzw#!#hji2ZXX*srhlc2S%O=bfUSehR@sdE2H(Yz-%dvg4<4~dOF0X`Z
z^O4HrDvgdB)JP|xyj;i1i@2uVZ|;B?lrz>%si@K#juNFEqQFZu=7ChE{1-0Ap6I20
zQ1pj1+#~U^aps1tvdr&o4@8+A){e^uySISr)gI?wRH8L{?v%UancMebogdE^ckOxQ
zMg{~B8k@A(>Yh~U$}RZpJ(d?9kN}$c&Nzu$$F{JIBA-$J2%}54xzuZ5JOG4awDvG*
z<6~sGJ(1ooxXp387+`=ha*82Y6{bFV9ADsZ5<;X}^upUR?G9kjv-THAkBhkR2@zW+
zPf>udS8NXv<B^_wn()#P6VW46X0IjjYQ6JI1Tb-z&o9Vcr;xi>T0`0<Y>q=#Vo!(|
ziC|bV;V^cE_m9O8zr3`(gj2USGQeqEVEq@ivrUYqTyC4}>g?SmU=A9Quvg!@ugkp^
z-9ClAj|>GFa;-5sjNs&c*43S%pgd(PWFk#mRZO!O8;5ugdME{AXE&^d{Fw~(sxC67
zy7!!CHp=YZOUnNOm3p7(cOr864Jt6R=MzSMQ#So_@ILr%??tRoT4`jm8?Dp8a7k-x
zXyCk9!<e}~NSayKOme&)U7@Y7F4rz1va%GO#PDodmDv~O<JDz|W|N|U*^O{{FLcbC
zhX8D3J^wUs>nf=Z1)Pl5S`hNO6}TSKj^q1Mw1P;OEI7LnqQVG$q9B>JqJEt`I_$|I
ztCrK}p4HjD@gtoLb}!7TJxmX-J;%>e!}Mofk5<~dhh6xLyOof?=M(;EyCb%(?_;J=
zZ5(rtbSh47<?Wuu9PQ~|6JI&@G;0)Vd({DyeNJp`Cohti&T>AJ2MUjp)8+UYdYHwg
z*+;_mKUji^w^3Zbg3(?#6i_tg#wwlRV}9qESpFaY*7ZOyz{b(vA}jXay;|gXcc89o
z-{iQuXc$LmiWCjDxC2ETOYqfTZWxpgwsSUR`Jc|~aN-_^qLDaCmJn<T%|v@lbtv_H
zYXqS+o-3y>MM70X2`D$5$z%_6gPy;y7%fHwJWXa2-=lIYD3%K9EQNaCyeQ)LIo!#v
zv&ieLJ^8|`#t#R|q4HLm69RC3A)Fi>8dxTSm<fsU(j1W~nx2VA2hLDe^-=rYdJpg6
zd_ICOQtWvxDKteF1zMf@$Z;Jf?g`yor5tnQ)AU)-r@dpfBsU@=JiOWK&E=4?ycGB9
z!gh3DfjCH^yWt7%kjF&G2+n%M`Xws3UZj1?L+OzIFVhA<h5~d*9W(+wBlK;z?k2|N
zN>ZXhE!C^Qf4TrCJo-?XYg{0iMmFmY{#!c}-qZlVVF1{{I`*}#RBZ%6VIn-YK1qj!
z+FC*W8H$;8CaIUi%Q6xvpm0fi4h0$PQ&@y0*%h=clna2Kcx5@U94LuK?cp&=nxVb8
zs}&tDjQznf?Y=<;R)NY*4719oC_hNo(%N4=uaP+`#ZT~%EpWX*?``-};UVkoWggE7
zg-~HC$$Q9_LBn@{4g>b%)j`WI|Gz^ryCxbXWndmtg3s|1VJS6?OQrir7CNWa7?<lM
zv{2e}Vf3|(@sTEZkA4wHQRVgM_NBPcbo-jPv=-3@f?l>BEnj2r`1upU16-$oo;M{2
zKnsH^8}bzp|IM(bVvJ3=3*>rW5<)49MLsnihsvr+w5cAE@K;%i-fgt8hkZNnq%4m`
zhF@Zvye5e;$L;Ap()%;787?d=2cje@kw{)*LD7b{hk8cPt8Wz2`>xw3L|&3HR7x~7
zeMNy!P>i5KxN|F|4IpAL8XLjkW5GlA3y}xy9))a}&w{N%jCeEpL<+7*7P#FfgzT1A
zjtqxRc%GYZESmaOP!M&9TT$r7f-DiOMXx=PNKfBG<EQcvM@bdEwPE_6#)SB(nmbgc
zjA2V)XN*6}2#2(1Kf!Q`rH~7>Z=+E_Y(EJnp{`3MHT7LGZ3~CJziZ%uqXG6gHpXeg
z4jRLtpT+pW?y2=Igu>HvWq8SYaqs%YtvM#LV@4qX5$}so0#VZRu<ada1GGIqngs+M
zV|`14@c<_ts`Hq1dlOcAo*^qYq9LY_xqO!<TOLzzKXekn!I`tQFQd%_I(jq_c3W>3
ztw`yz!WA%QIR5-G%o!JS6u$=#cZFSV*7zNjd+2W?v%%j}XX*|V#*87cMG}>L@cM7b
z7?)GbH|49a<+Q=h8Ug6CP~RQFmt&Q*5lGjyNIKcpZXzSsD*RIPdmksO(<Y4zK}?@c
zB8G9PCcAv|fO#7()e%|Zg$G0!dFUEGH0b|Gfy#u3cviG#LBRy%TEVA+wXdy#U>8Ei
zOWG5@Z;>*DC7u!=;Fb`X7s;D{B}HGIm_QGAGpSu`BOVy_xK(~)0e$EJd_w+(RT4So
z=o4LZ##8Hz(LPZ=PtKa}W}Y-dT_a`z(tuP2a{U&H^td>(#y*ep38+J3M2m}Zj)f!b
zQQj17KvBZ7dwn5f&7u{gvO@1deeWs%f^gdj)>^34!}Sro*^T92M6P)xezPNVO~XJ*
z!6&69;%44u*r&>Gdvs+`z{bTZ_N0K`cpX6i2;|_N#6*V(&{X)&9+FI~5#K04MrQt=
z4(C<mIW5Q-t;HCD6mg779uo9)LEkreMdMi$4~G@)XdU+Wi~4Ege2_&233Nv*j}D-5
z%PNs)>Z#|^#|w-{?XpnBtcvNkevX(jdEWK4gfMnW91DA&9i?YNsIXg<gogV7qgCGe
zvmhm|U1GIv8jp8~Ne!7xOO~`ZfsY}Sgqcv`P#Yq^^81(u1~OY?;&oyrCnK0Gtpiv;
zyD5z%DF3yON4q@!#O4KD7LxQvt6`0kK|zn1wgj89_F?}s&`qQM%TjYAhCdJ~gwA7b
z4JF98g~0~=h>mI6LvY%Ly=B|8{5nr!lvIeuQ4WP{*IglOjDtj+2ML!M_?|*VgP-%p
z_UOArCrg0-l13JuX{b54A67Ql=0>6#mRsTE(b06}wI)XJ;Tl;H!mmBgsqu7<4(7HU
z-iv$fw&wJ{GgQ{`-U%#{R;Q39CUtI#%}n{#Mv({|Q~s%A<myB8XU>y6IVd!QbK||7
z4mYvRrpw2o-OD(VG5k324z(W}`k8L~@@mMk_DOB9F|T?S&u!~z#XvJH`<Axxhqhi%
z=I&#se)|E|!+S`E$_(bkO;GPFOvsGja+2cdqgmGt4SQ&`S&szInq;CYAlAyaCb-Vl
z!>lH~(VS**Ig6sIkU2jV7<C5K)22MCJ(&>^x~(HTzlF7Nmkgzy&DpjBrFKtrt%jEB
zdwV>RBVpH#VXhh~v>Ux^bgv6;1<|7KQnyUI=M8pQJ?5gx_Ql~(BgNXllqW~UhZMzs
zBLe4S#k4B`0MSQ2W&jyug^~H_4qljAj$6HnK8TE!-YQ$+NEt=a%}O7<Ag^zRaVE$3
zKq9%qy=F=McF^2J<XJw~$jiTxCHMHbHv_xwJwtro$UHp}+9QdopgrsnEVaba8|{Po
zlme%Kf4tz6#{JC`&<%J-))<^ZV6OI;8Rs|BHb1hjAx&3ElsGBM=eOH24;>X_Bj5G2
zPXcJ6tQAvHj`yQN+zptec5xC1#~-;{H(XCA7MZpm6pj`Np2@kzWrH={FcO5JD8!10
zOA*gFN`^|*L{%eHu<RQqu~{${svc2F9r5<2R=q(iW*UMf=43ZeZI<_*cY&N-{WzTR
z#KSudD{4o_FyCz4GS)R%7aE>xp2hX(2nb8iR)UxB36C+K_yy(-&Tf0&{_Ds<67=U?
z#yhgWy@ld0OlA{{=XkOWEKj;fu{P=YH(Fc^SlqeRcEi$jB1jY0p+9dihfQE?m#<q4
zq6cpr5GVFiym9kc^6{vH4Ow`sb;3Hu)5Ly7_nrJUTe*^4ZY6P&fVwV{Cj>*-lPy1}
zYc&4NV1j2QbAMri(ygC#UJ?quA;e9P7l;I?DEVKOw%@H2pvw1wpLI5LU+;A~gy4YE
z!pEyd!-#C76)3|~F4#C^tk+f8+ZvrIEn5y26KC!u7t~4SLgW?xj_rTjo~zuLn#YVF
z{hXNb426Y~{%yq0|8A7sn`xdB!4Wco-?e3EH%XxfaQh*#2x#{~FM+DN7881lUdPW0
zdCG=UjgDWOJsELjIu;i50YrIA`a_E8v^7TWXbd@x$gqOP4o8R$?M~%{cB0UHk4lq`
zA{-~fJd%8KaSnL<#x)qDD#y1j^$>sf`GApS9wPS{836hmC3q!S&@jtu6NJ6kuXc|I
z#5se~PYQQJyd8x+m+$<aAhFpbL53<r3EAi~{_Tb2hRG{iCDAb%m?11c!~tRq5?@l!
zw(D9DF4yP+lr07b@q(rU<f%nPo{}4A{pk0t*LP+7BjXOYJGwb3+Z20tQYzU9leV~m
z3>Xy!fud6CEPq=jW})+GT!8N}Hn}3Y458jtSRD^r<d?GN>dP!Bi3*q6GD)}|bH<EJ
zpVtnoB{8Nd%d(Ew^As367Qp2BaWKBndpSZm$OP3G)bgclbETb#T{qFq-LFG}Jq5&#
z!9yhYXtyS~Yoe@q7GKN~8Or!`utA4OF}MD}oF^oNd5vk~r!l%nV@wsgrE&C{iPxnJ
z=d(CvuP=3fC7$>A<2~s)o<lM3L&4Gun_y*=%GS+2Oh)F>X#DXym&f#14lfY%$BY~7
zWxDT{a|My2*%HsTb+#*iKwu!kdd6|p%-q^Ij1wyBIc^j}b>6!>|51@`iX!G<!3iW{
z#z85SV<kTuV{Ov0z=?nd{Uz4X%{SIfjSM^AO@~~V-yA9JEZ;#gz9LgdxsuC+kl`A>
zl`P|VwZ%LDF-5GkYhD>VV-1izNb6OuVf}@zqjA#68~#=8(te{HD{-zfB^R{ud{ELo
zdS1an-T7V%hVuigu>CLWcgzRc-)8xaB=<Su0*zq{MwYR>(d%9zArq2gz-i}d#)<kz
zdy05Rf#<wyz8n}4=J|SSdLIM;t2$r^Xo?T|67*)n&pRFUCJB_d4cf%{KT8g6&)Ovt
zr)ZC)5>Cvo_hO0<PNwP8BZZOj4`@&J&;xjko<08Cm?0D{gub~)SdpNEkRs1aTQcm_
z*<g(MUHzMp=P~Q7N^S(60{S#M!Q&NI4MxC7_T`UKdFSh}Aq#<~?E~frIgdc-)f-Ew
z>}W&0Gs;$>>g8BBJYga2O~`Z_2?@$x3LkUOO<E}P6xAt`fXeaQ06`!^(s27-h3d*v
zELxrF0WpdzHR3hA-xC@pka7&modSbgAmHv2j3D77Dz0R_;UOKI&_JeELCeW7>AB-$
zoRNcv^|Rt}@yA9X0`zYeNlquc(DNLZvRbym<5vxni|gMrC;Ss=l6;faNLyH8KMTE4
z83A?<J!XN|Mi}qtIKD(EQb3mW;?huKLOVS4hxcv?R23tkw$mE6cCz*^x65cD#SCkD
zx>witAwI4@Td*72z|%L`v9O<k{7=wOQs=bB77rm}-vca|_&sulV37rJP{>^;$so27
z=L85e)C`);IF%mmF^SO6bUK2kd$D0N*=Jf90SD4s!~fqoVnc5P@^3Xn&EuI*r<PD>
z*fEM}@N)+g8*jtZSyau!Y*r(_*1Y^H3pk8>h5Gt?sq*a3!Lz&jv$*MG;VlH6!;MpX
zUdWa`OYX<_X}|}=x3xKnK{m;H!1{-F0QEs0F`}W~LyE@CyVp)FXqjPAiRl^g)%ctR
zk95iRP9AMClT@jYnXLMDOFY#UlIykCi_BYePCLd!2G6BpEiDtMf6UKrz3Js9dCzR~
z_sBpq8W6>YK<JDFP+^g8{~X(bA<bXKXW)HiN$Yw%BX#lYHEIbOr*YeCGh5qV?hEIh
z?<b}FhsDOcKQep^g0*4|;K|qJ_Uc1stk3ko;CP+1-n^x=hi7{1?-45U>N6$O1XL#N
zcLsv)84HldspfQj9)bYNE_uy@q-5STT5E3D(&A7qD@1`a(tO6t;`q7d)mO$8k)Tnd
z0E{(S8G6*7<0gEBcjxyJ?4ioCEBwaoIU0kSNF!a>v;}3j*+oqj-^E3=!VcGmb6g=4
zbv<sC1))`)u6pR@?v|rGg6W`;$LVdrIJ0M{9MAkC;w7N`m#?O-Kpq=4FBenJ!|_>#
z0C-+Xus&CKbvyp4Z8+sliA#I3vyxy#+R%3&!&*>@na#<F!SqQs5Qth|P@F%)T_@>$
z<=4Uckx^k-rv1mWMr%0rUUE0=0OG32g>v<ZPqEO?VpFYU5zJd)0hHEwaf8eI!Z95#
zD=)Ef!tDbBq0Jp_i<pSthmI=K&s7v1u9&CVkEdkju&_eHM$w>@bW~uy<n$Vv(jf!A
z7aCx!|Du{!4n1UOIi|6GNcW&bN#;-&8kWp-vJ&G#XQw=qc-_RyBtii|sgX)dm2x=w
zqnB^Nc=GvS`(AW^5JTwFCcA8g<lKf)WnMjm-m^D%S%sc|!vj~=eDk1d#-oig-Z*f-
zJKjemFGoNfTct#LbAv+Of<21g1D-z(hB*vJ+lgrvN2tm%lRPy^6PZAKXPB^5$TeiY
zKYNX@55`<NJfx9Yhx+JeMn{P)z%!?7;;Dpt$KZa{7qtvXZ@B-kdMA$}(|H)U9r{2l
zQSFPpxq#<6<qxBr&K{Nk{ggdYlE~xo*vD>P18HQ(CTC~`)s0<8`GNE%82gH_DMAE*
zv*^Ax#PzVpHCJmG3bO<5!A?0<FV&TqL!&Z9oB~<w8Xz@mH$XU{KyXTfKozfPO$O@$
zWJWKC#}{P)*x(M=Er^x+5;e~DnPZ~6WYGp?D|n)+puA#6Xm*mzNWti4kx8@HQ^Ffg
z#Lx?<A(kW<D*@Oh5F;Ua{7N=9$rKQ=&my}kK%^NytK-bQZYX^}Slj`_$NqO?UMUt#
zoGWk76P-bb#Cxc<9WiB@E1~6eAO+m9tk6cma6K}`HZO}0`=bJ6Gf*20=7fM)uihrc
zU$%9naZCVrTSm8xAv6k8=Q*%(?fHu;dyX*1^5e#;A^Bq5G+dweOb825ii8k&K#=p+
zvlZIt(dJ#ld?*ddIfBx1eDQ5VK{)+YppCU(@7ubd<Y57ii~4q`XiSU+B2NeK-0}|e
zjE#Mvg#fx<pX0<g2rcCr0mNI3g{o>;?Tuqht*HZyY8VHqe+Mftcgoh_TaCvCwryOU
zrGti_wh!rqWK$aOSif-V)f*vU`hIZ@bE2S5vGu8~`4K6PAQyBvG$=SNs8CkYY8gQM
zv1<QjLyw@bYNrv@MGzjUhW1NQajsGa${Or0&NXJF^*IBbg~G~!g9*wQ-KdS44sYf1
zptz#qQ=sJ!IGS*8oH;y4MgWE!gHmFRJVJYc>XZ{AGS=zq+jp`3_y`ES#^^d0mP%;5
zCPE2%`LZ_($3v@F$vmC`#=MI+fmF5SUo=KdF60goeHG91)X?ifny+SwenXK7z~~YE
zZdwzb{NXG%p6hMx=&?cMg>VwE#@hbSebHPUFWiq<?lcwUNXralkSiw>O^yZJ%CHU)
z@yEgVXgy*?JvYXqDE0U&F@&1*D!MKV*d+I{(IpPo@RDgFYUjP+|L<x5Kx%dXUIjP^
zXb)y8f`{_d?DbTQAhGF0WIfr45bEHztw4Rp;ct_Q+UN<%woR@T39N&@HMsF5XFVH(
zFDmfb8>ShSGTKN_c7k~jQ)p0BKXIdF&LYuE$|87o84X{{)Dzs&N{6{mF^-tX67vLT
zFNfL*nEAW#r1mUsKzt9M_x2?n<EIo@2XeJU*k7~9y<J-*UpjbtLp0I#JuD-%nZYx&
z_RQrVwsK??ayAi<N`Fv)dG~9fY6R#H#bpCo$)(ZJbY3#gS)8VpSoPjezNqmuLX;Y8
z%;^wNZOM;+)^W2sX<*^WU>lIH5{GxNen8{5Vmv0}941o5dJlNaIKC70n_EN6lkm<$
zFxqPxO3h(OjDi`?=I9igep^1Qj%#9rXrD6(@g#mW^!C#aT~z*0F%aygal0j!RmfC5
zQDR2=Y%((#SA^B3H9~)s*$r~4n10ve=_JwZ^QQkLUZ9hX5k<;CI7VjqNbjSlTg!hV
zy65r=L=@)6pgwqv(PcDHXb`<RNPuR+<R?sffc7wXHBhOImeoVq5Z&Jl{D!+*%jgH!
zm-F~ASsjE*iE(e8N!v;x&uTV7hzf78>Rb9wb!qtl`yORY(YD?OwUa?=z*etHhDT|+
zyj}!3QX9nZS<f)OK<T{`_NxmxQHcy<5S^izPl)@2oYLLt;E@<pXB^*)-qirmQ2>_N
zn`9UEVflR}3;8pWky#h!=%yiWLU=H@ksjm07)gzg_0(AKTF<aX7ZQu_hhYoQXlqNB
z7s*1%SmHo^G?DdPz=2Ximd|Kr=z-Q~RE0Z7wGjX}L~B(a2%oe&^Z2xk@1O{ZvKQ+$
z=}c@xA4nq*6(1(m1c7V_g<SBoP(Sx`%99=u6q4}T&UXrpHQ0y2CW~W`0?2tw%VGK=
zVW9TtsEvc}kx}s3%0{Yob*8y_&Qne^B=|^xa5819R2IrBV5p2k3Sa?XVl*26(9$m>
zcy>|f5sS+lN-Q@E4I#8!QGjaOZ8+NRM#E*xD&M-#VNU?d2Xaso{Z;@~hPv9ry)~s!
zMo?)K#0^gfGK|k?bV5lt&;|Eqw8u+{<UlQ1DTGi65@;X68tH0f_fT>ZgNg6*-L8#t
zo$j-$UXdRO9+`%;kfOI2B`~3-(1Gkbs4fxfVWeORGaFWd5BV|+R0jRr)~;vW^T=fY
zv;Div=C@OiL5-Dr@i{OKq}QwUw2bGqLYR%if7MqHeTq&42Ti9DqVx>EI-qw^SB_To
z68}1U{32HnBLrrXhUPBF#TU;}pgxN!j80Wichj|;6T(KJP4DIX-{_qJo%T?hjs=o;
zVzti{ptq{C)oUid5{oz#WZmjN7UdoIr_zz6ji(U`s^Hy_MF!rmY2Dd*WGgJtt%C}N
ztZ?T#d25H-tZzp<Vz!A)%yDbyw7BGF(m=r4zuA)rlH^{G#X2V4I=pQ>J&TIZ2VgyE
zikvf!?kz9uq#!(|e6%{>@-nUAIv-(8C5)>lQskUmkqz9GHfK|!-jSg}!1mvop0rnG
z<AqH!RI=95AMI`%RjU=w)I;3z@d-k5!5biIhI>>y^&ygj=$GOzj!>K0X=LkK>obYx
zK|@^PxzP}@arb^~9KopamKmN_*8Vm4Z0mH$7!Uj}I#<I-p$`!Pz@*?9aT0}nmMET!
zqi})US+YksuQBoQC|G<lNyu6+!XyNApT1LBVZxeW2|$*U-edROb<(VaaK#CG5?!56
z%42dljN7ke0+?VFk`QjRli#eZ;K&pp_MRDYEAQonV2d%DXK8J0XUS?Om}$FuNJZ#~
zE`qRR-A^jcQ9v+*d<^crC>C$8Cv0H-6=;=m)S?W@7+UGMPgP<|SgWqpUez1s_Q)uw
zI_Cyh`$fGeU`&GV!I;&rBLRsgOK+YNsV;8&p?9BP<y#zmzs$oyaCEgNOMPXaq__Xp
zv5=@IZNW#L7v@V@mL#I0Hh$71)f|mclD|@0euCS^1KNK}e_U^6T@Vx!_aOEp(Iv`L
zQ?5Imv%R<QB6pM$_j^GeKsgoT&s+?*wMY9M3UbT8C4ze%Fb;%c)1_dzr`C+AY=DxQ
zzDWD4pNI4b?Q7|S+cutU6bnK-3~RIAevakeLxJN%C^IueDE&tLx*Bbfk|E}zTnrU&
zaqEoqn6!uJw$VDB>`&81Dh$v!hB<<XK{rB~Q6g4)79PZxpX-qT`R~(rO%{)G+KeCa
z-od}`@>sP_wlnA5#KPXz7UTgiNJU51^Qg!Jo4iuiG@*I=bA(>>Q3mZ!(<4fhb=*|_
zt+S9Q+E1w1L7Uu)-r$la?_O1WzsPm=5PDU44v=THe`$`}6)I$PlovAynm3?#_d{&(
zhpMaA>4>pRHD)aK2JG?b4)2~G5-^{o0{YwFsWU4e2}iAh0W(_go_XX!!=GmMZ$um7
zZG7Hn_;`s~9hHmX`0^wYdQ6f`X`=D<;<{`+-dcBC1vJ<#l69VLu}vwbJGs)}nJ_;F
z(le*Ec0xlOY-S^PdbU_n)<^4RFK;9-j#$&PHJT)$OfD@HX*3I5A)a!0Nhyp3pR^Jb
z*VB^rnLa<#ExS^6-1j%(xRg_D%bU(480NgjL;GA9R`PU2*`W79U``xNJbAHhM5|Qi
zyC+_;0c`cSJ-W@l8u>p_l<Et*d}xTlOy}2e&!&$3(-80>S*V&|Y3(mMt?S>!ai4oV
z!O3as87QN8eKuE9$cUIbS=uXmu7%FZM-M9hPa@3!LcAtSp1CmgJvq9)rybF5=%`m$
ze`#6p*_tBc378$<JsPvfh+S{iI#~?6Qr|cvAp4-`BYJEq_j@vhbOyaA{Qtus0N9eR
zJvJD7#8w->(=l_u$Tsbi=~nqQ&;MEoo*PVLZg=5>l$3sbv*1y`=;RdILuJmaE;q0|
zl!d;<gh;~bMbCHFPE%Z@HP~3^b<#i>Lv0DvNkI-JSpsiL-H5ffxwclJT*D^nJ9&k`
z<*55nXOQQ_Q>f5mwpN_WC_F)i-spq@(dWW|+)o^!<bQ&Zb30ujUQtACCs~1NG=649
zu7GA{V;0<Z4K%nGMoum~@`{)f?u*f;t?uJEQ=%SBOs3z%AZoTu*PDk<$C0&n+U_kI
zv*cNU^^a3buOa@JL<RV#qLef6TrZ^*T>SaZR~z4?9D$fCfV<q$Bhl!pW0=u6gKgI4
z?3y>c5A3;Y&eLPtz7s#xila_Grehn2Yi>`R_yR=JaVSee3EqVLgbf1&y{+pRfNayJ
zD-auYGTHMBaa+B8Ep+n|55{tt2&JJ}+%S>wq)q@0EbBHjXN2boPJ~f|<|TylP;LV8
z6756g)Qr0C>D(LM2#)gVh`4`#i9t-UGA4(f!(_0zxvi3^dhbxh%7mfEAvb9yEVvo6
zjPgCPt;CZvN*`bR92uV6smew21HCJu?R5E>(`=Q6?TJNqnWf{Y_LWH`3jp<#O2!GJ
z#eRahY1;Fc<3eQl*M#i|)TmElU6Dae<sc&CwMI$K$U{Fx_vH=e7*B=Fn4xlq_1ByB
zr#u`nL!Au3p8pwYJ=#AUd9hx8rq}5cG61;n2|V_RE@kQ=B~VX3goY1<;Oyj$6j6Q-
z7|E0=5wcO}%Qh4BBVxKH6MgTwVD6brq?##k+vVJI)PcHas~Ornqq6$h<!G{I?Yk{7
zcTNxk?84(4TCg4+Pc|u2=%Jw44?P}qx%QD(G>o+D)Gw5m;EYn!-`dcF_MkFwA^Q@F
z=zCht(_@gTtZtYhL$3OL+#Z{Q`xvnzN5&qtp`-W7OHfvh?c<}-)X_a8w80vVp|+1$
zpw92fJ{{@fjmOTso#M8qm3GCp+;!ZM3?oNgg#~Eug=D_nKp!kNrTCZ<Dl|sia>mId
z1Z1JSSGbB2@@SMnS<p`9f7(8b_v3NzXH>WdG}*D0ZDNloREtv1rJ>6ataN{R$J!YP
zv%D_$P=!9+MGO5nlpC;0E|)V}n>sHQ)^B(R$PIu>mE{7V3)f(Xtiq*-Rcbz_x3NhG
zMkp{he(yb(S~uCgHDg4E%vIxSqV32aY?hlfRtkGH!i~GtOO}ruIQ$+Ui#zg&d3AMM
zG`7DP<!(@BxYsX$0cL9o^KVMWU#@;zUw;5mE<!eR96lpMV{km2H2Mtk26*8!y>iV%
z?dR%1QcHKn5*PY!MkYzBg91K-P!_*}vg0KO-nAou+(O89tZ8Pr`{E1${WJi{oZx=>
zyJDY@JXh^ze9w7)724MoP!-}88oxGyD)2@sL8X1Mo?!7zDb()K^s}DE-h>gKNNeTl
z_^ivsq(z}h{|@iB^GXkoB$LREl)GzzSyaZeFvgzMR|uSB8itM6>*DQli`O!OsZtb8
zTg1SWH-$D4F)fVC$9n&L;b}!Sde7sp6qR^kxjw}2Rq<~o%f9+-=Dg?fe2g~Lu@&9V
zCo%Cz4vac3?L8(HNk5y)mvS2$TgfR0mUN>#go>HX_HPWK+ed0zEX$2QZqHjqQIB`l
zJM4LwrRy!GXRV!QtV?NR@eEYf`xV+_JZ~bJupRG=c^OkF*dUZK$SOGC6`vUacIOA8
z$8S^NH*M%ikREs6U=NmJ==iEg<|Hn+&%{~tgRyrE47MQrg{4i`QhhblGk5ek7-wP;
zL_rX0V=0RGjq9*+p2IGiL6v8QuhHGQyp(}LZB5!(M|(j^`Og~GoZ`Znf9sNF3wX1J
zfC=(2P69}BIbZNk6H*8kPyV7cA(T-tN(=c=LHkF0)K%5(hMO`A(2MN(%73X&BLFUw
z`uDbvKkJHehAKx#`|?-2he%_Ia$4(90X;mq(^o(58~}nMMuc$}XA^ssS08iEy!6WL
zULW>17sd~tOR2!aSxv7p&TbTUXK7S0(3IrMW*a)hK~Br`TaG1chJdKb?I+!G-ohy<
z8-Y<eX3UqJIDJD%X9{lRhVQ+}x*(7a>40E7jrTg3J3<=)$~DI;7M;M*F8Y+|ZqHb7
zfS47Qx<;^>;P#%_doQoX>?l=Yd|DzysmwUk?sn5`V|dhqZb=C_#XAMDnuGN>^5Db|
zHBaRm?)e|$loPKnXGUmqhPfy>??K|NAm92*>KHj7=s;hRoG{8HF0zf&A~_iPpCag|
z6?@`v3|OePrJ{XGD75XJguH@s%=SNfdh`Kke>1*BV|-{F?9q>V$x|Lv&#7U~K1BUr
zz*%dr>M1+x?$rCb{4ne4=1LMZ>^0K3qzqqrz6-B@M8@dpHKU9!@)e-Fm2-i--itEh
z6zOaV?5l6TEV$>n>$-9I2t7%K{p1k<8$Is#iUM$A{ulyU{xj}Hj{m-xOe`^h;^)P-
zX5!MhtXdJ2z-MY*Mh{8t02wc-`vp8^+A3T>w>msX7cc?y+t7l{k5VYXBlK4G#~p^^
z!L#nS%YB2+u^~N(vnu!K&j7-oJ!?Fb>mjI536-8_y;6dyl4C>##jbc=szJz(v59F0
zbU=M~*q~@b(hg<l^J<w5#<8Zdmf>2-cs!9Idl8DP>!u?Mxjx;`I$s4kB@iX!x~iNP
z0S`abk9CA`fbAM5esnxJIu6z<!4$W7=hGZaKlQ9S>F_04L1II7a%|MMQf1`iptvYm
z7li;g%6=FZ3_MZTSzI1vJu=;p5-6p0pnOF}!28<r*+M^>_JemSSfhnNwVVx_Mq?5w
zCZi1V+DM%~XP!Ui1u71mK|Z6sSju2I4IiVVsM@Qdax~Bh1N>ciY=#C}h}|TQ&6dG?
zEF-j@8O3!E`gHiz5sz8|uI0ra#|T1u>IgxEas8Q%gXZ?N&v&kNB)f5y-5@8>1GuJC
zeuAi9L(je!`b`Lo;1ma0cwva>d6IP&#+H5~y-&)~fM}NTAL&RcBNjmZwcOCxu`~jh
z5FKi#jZ?IT5}z1*{u4+wSSNjKCyNI?`CQbQ7lSHhWa8zUQCWltw0_d@{@U}eDGIgl
zWEQ<;nZ$F*i=BK{Tz0TrDSWql#tw7G27rL{%s?K&y=NM_!-hK*CN<#G8sdMIH+z^9
zg)W2qWn>FNSF~q6{WKW6clZ8(C<DMobs@B)f~X^jAt?BJM69SRTI`ofD<;J(h>n3#
zi=YT$vji57r;sL=P_YTJ*x)JJSmNalsLwHXb{UOUjH>Y4jR7RX`tR;ca4Q-}Dxq`E
z#=XOkmxj1zP7$az)}d9#0%GL%jj2OFOM$4CY!~V`53<M8*_v;=;sMM%h})YX1u));
zHyzD;h6CmFuP}IZMm&5*JP&1dAaC63=r!XPlfrDI7<Nxbo9|wt#zcRy0@xqs`b1nG
zjPD4>so%5Tr|XxH6dN-4JVRL7MzsKjl?-yGVD6Q%F5(&bZk3m{<KR+CN>l#IeJOJp
zNOyE<M_n7r0>A<hn>>R!_udXEsWtzmGoEGqx8J$pmG4%`R7e|b<cdx};p+^>u)>u_
zs*Pf0g;1yBnnwl!7GkB;IrQ{uen>oWN?I=MRspWZw1)<2E2G!%lW?ew1lP-=o=TW_
za(|lI<lqg=+VzdrdhhX!iyo5D+g~Vwsod{n7*3h#G)96I_M@-_WSSG!#^c9rdkzh5
z*XBtvdxGpREI3TCNzh~(MnuL<6L9j{T{sYxL|&&)w2onvw~ZGK6r6IrBR%WPcdOu7
z#EsdH_{F-M!Fwp8o(2joQ*uoiqYn>`SEb#nJVJle9>V!a#xoacuat6>4<h5GtEA&T
z2AiPFzd#?`x{Meg5bc?>u|nNOT=)9dNp>3<wrA^v9a1Qs_)S`ZedZCN$wUHerH2iK
zE?x(Ux+Ky5`z$p34*D1vL81vV=BZSyvlEEktO`aP=&F--%6+w6b5|(e^B&<cCRW84
z$gJQcN5M;UCZ0zt*hi-X8YC=o&8`?>vVq5+&_k``Lzr~?En4X(7`zb1_Pn0cS$MAa
z{P}=W-##`s)7~+2f56FBLPm^mmVEZ)@Vts+%E)Fdl;%buHCZ}iQ(O%d(?ykLS%m<+
z;uvH-3dZQ>J(rxb5qvzeUmeN;aMA>d6we$vJ+8+&5M*=JC(EtQX?`xUds%__J;OH8
z`!4><Qub0fo=T3GDS*jo(c|1DgjqttGsga0Uss-%ao`8B0*7*Nh|H$Lx!s*a0WXX~
zm!|v59^Ty6?0Y&o7uV}%{yapZZenkdl><)?Z+oBvq{)Sth?<vqUq8{QQ>l|rvP2<H
ziwNu8w6or;dog32{y2*LCy4-PQdb3*l@5Pf=CLwemRN;jSze`VPmty6uAjRmW7dUt
z(|W3=dqFc%M=g+%d~_U$C_JcRnKHuiVtL+ZN1N-Q|JXwbmRg31JK5h$HQSMJJ2vIh
z3=k1?PF$jpngIFoB%bfpO-VMrJ~PIxjF-Zx0~70*e%@f;t&_aOI~lM4$`TxQF&u~K
z-P4WT%)(W$=3U1x=@-3^Wv9SH6#`d+BjRGdH@7^CCov>VT~~O5T@-ozGtce12bku)
z`;_N7_mCV|MjUVEl%G>|Ic~dM#M?x8lcSGl59x@y*Xg-R`rgEi-ZN+z9`P6vCNrQ}
zfAy`fBLT|yJFE-|6iNLidiSkwjwnpVbG(yniR8tmjmk?I!9%8j#c|~@P5NH=nl|KH
zUZeTqN^foGByInx-JQsF#1Dp?`M8zZLvHB%&y+2^cF@ayagzTI$dgM%SU{tQx7G&;
zN<%lHT;ivgWQ9(c<Y+BvhfgFEoRQd6*UM-eL}X3&PFge90rd5{us1NGEi7M^TH38X
z3jF`$ApjhIb*iV_IIY#mwqwJ60<U2O&|8oJ3Lr}s$vR4|b=_l{pO<-OFUP4QApHVZ
zw@>-@Jd$Y5wUxGFSx?tN&18j+4)LCab#y^y`)1aUiF&+5gb`_!PG&VeLk5C03;Wt`
zP}q~wKC<!c*pybnm+0r6CNqt^8YR&J__4VBQBKs@IZ&s2wE$)&`VyOo1cu40d=$S8
zddJ>vj~sgcy|SQufZ`t&_Y=yUGXh}-anIIy3J0>#^2*};aGewtV+neUx4zwQ^b0Z=
zDxPGK(V-PivqM1CGSOm{O7WR=wjoZP3vdphtT1pcU>+|`+7Pgpw~A1>6)T)WZb;f5
z9ZH8XHT__X|G9A=_L{EqI<D2Mk!+aSN8MmP0R+HCJ-oVbr3v)!q$7HYaC=XBwlWET
z7T(7@uNUJaF^*3j7t-?q2-?0=+g?oMgn_WtUI1Qchwt8+VvRQsJ09!J^4;Eb$r_#j
z3A`n7|6`)W@&RKk`JzZ1;vFqk%Uesaw^5dQZq9W;3t+wd)k2%3xbJ$%7vfy|GjwSX
zP-g%HK{A=efsT?sc^e;<(bjKwlUDcZBdX4;pLapGuRZ@G3;!^l8H=m9{h^a2;9WJA
zTrfa`T&kWeSx1<Y0pH2n%rR-86SrJ`;($-dd>XB<RP3Iv(_0&i*qFFAJ>j^rND!_g
z<iW&_cLqZ25Y3vVTs8y=QQCrzpEpo)RWADOqH@eyYfX#mo`Jm9BZOxqPf++8CK}YJ
z1h+d58fRvx88>+&!EK{GF{o>_-{ZJNIcjuWvVwNKmykS9^F)z>oUd|;Elf?Xef?gV
zFCt<NlVV1F#q;<G1<rrr(4K_r#B-oqu{0*5#P)l<t^5a-MCU$#v4&(W&N1asr^q*C
z>)`T;g5*s2b<u?;+Py}89LE_VU_?sBNI$M+lNMW#o^yB2C3Q#d*x)c%gCnnm$b-OG
z>LvWk?7=4g#UgL?l>ZUAIs-3rkTcwOfIS*n({-SrS1h_`3DC7FM27i*<vxt}|DzfJ
zc%$$jYP}3FL&(s}-zQ0PEb$QlhhVMyp1sq7wjyhClq^YPq;%kYB1s(H2ZnBv{e+2N
zdL~$0DO`ugC{*3t6Dnz<Rxl%@z$q|eY7gE+*YCFBJ>&G9=`)(51P`bC#Bdy?GdiA+
zv$r~eH7V{Zeo*l~Ehf#)`Wp4O=F@jaI9eF0rL$kX*D*)b$**;t;2t2AKF&5y$pBp+
z6(DX1R$L!;6aBS^L>ci;R97pPfj={xS))EwhH?}@v)SeSkO2OVesC~1ob}=e3PL`o
zB!HoS+tmfHpHP9*!Z1>OmQF~qhMd-jpY7Kb=!l=z$^<Y(E5*7W7HF9KE#i&sky(PK
zl|)ReR9$;43i7Q;@u$747V7-RjHS{@v;yDjgD{&-X~g7Kp0Ww>Om9h^<zdTE76$GK
zx_gKX^&Z?m;~Y@inn-kJ#;*(6CR1q{AC;iE6+`fx_Jj%<2-^o<ZuhMoj_)Pw>+pSP
zoQw>TE=60Gv%W^TJG#+=`ec(o=`<90z>(cr2e_d}LRrUgZV-RuRnnjW1kmPEF6xV>
zRFT5e`C)Gb%|0IOk@3)&6YpPKIKG#CkAZ&5@&q^t9+8|t2?CqUAY^bDNH6iFb@p``
z&e%gCp){X11-w-l7+B8lb8N{7dh`^hBwrlLGmdkk8+7l`7ybT2Cx=Gk4TV+&#*ymy
zs}I#{G~a=Dl?G)};*Ufh7K^Q8X$g)wHJ==eMXi5=WPnLnO8D&Ld7acIiUD`6b6~yI
zrvhZW{<`j-gF$Z>ikxIK7Ai9ulS!YpefktgY?yaoL74#(h8TIrvERcjSp;q=OD=df
z#4VLbhUU!_Vu$s>=g4@l8-}{-xz9kpg8WLo$^JhiUx5f1Nuc~olE?V;t80v%BQ0V1
z;H!oTD39AU)%D}pZ;Wd`X=6wvUcz>Xwx2}KWtL;u^CS&iyI^?Kzuu$Nr-LCJ8)gCn
zHQmI&CsPJ8PWzb^y5f3=UefKSkg+=H))HB-)&8W*tWeR5&|@Y-vEY3{G<#1M%zK1(
z>}u2ND7NqThH6=Co{+QJW!s5HjuA$n?b?yI@&yA*F)y_i+^cJJPS{38Zw`CTQR=nA
zhQp_glDh7Zg1@A&s5v8!zq>q#LRozWQEr@l$W-4sBW{y%pcpO5Byx>qIJGAkrJVd4
zeq4=tHGV&1Lr@0T4@y&%To8J*{afCCufb<i46|~`by+p1zUDrf^8aBC0FOJb4(T0m
zVwnVdHEBWGuh=-=VYDERtXQM>qbh{-D>pq}{OzB%C>i-x_Z1#n=P2p*yMD1&s}^SY
zW&7qMi0hefltIi~FLUxN)o2k?NHpV5DE~;2FtlB#bH9bx*~E3r4M2b+g@6lnuX5~x
z^s9eQxJGV{MxHrdv6YFAGoyQ9yY1+o)wLU;Ci*h#{6%NP4UGrt^C|+Pz1YU*=nEL!
z+@ePJFU2>{`3Zt&#5J*2)4~&Cl(+XNC;;GHX=Ps-BHdWZ1o#)do8B6i-U8(va6+-p
z*z!df#-QKbBbkEHE#<bjx51V<>n$&Hw7U)friupUqw^N|Uqx9whI?T7w99z(d@+e*
zU-z~(F_4}me6lCr>qnMNHr`e)z&$NL<Txgcnc$Ai^XC30jYi8*6V2{t%ND`>_Trp3
z?<K{c7e1(-sounxhW1M`5WshOCVHM^O<m^|#X@peUmf99U!vcsCuuNmkMM@6jDHKt
z&LHT6>@`BcgKp6KNZ<37;tqW!kxO1q4cepnXDZKV$AP0sTz9<NuJ?b!Up%7YFOf*j
zMtN}R{fBBoS!Kt3c|<EFYY&NZ0O(gV!hJOO|Hlmh$YkS&&L73nZ8SRvx!qWQM+Lpz
zOB?IgqM}yr`sC{FLY!Pz&Dhluf%Zti@ywqqxb{87+c!SMoUKX(hL{;lJXmLBNiNR@
zP(7#7;cYME!b4i%rjS8%pt7&C$_nGK2<?broo;-W7w=!ql{Ftldxscm)z%V0#50J=
zNvKEGlSxJZnYnySk?=b@8Gs>ktzSCi*v2|iU8X(bf`PUJFDQMNu)iL4Q1_O;$(KKw
zwJ<VhInX)1M$A*Y^%R1<+7N*o^{v+*PCw7XC6w}~Mw=mes;x26KoFFZxo<a?mLi=$
z9wmWfox~RRi|tujD_Ea~9oND3+jgFx=B>CYVOR032$3d^B&GG~u3a!zkKCEeQ<c$1
z6|cU90ZJ}9AbesZULkR2{hsO;4CSNvUSWVHh7+JO<J=h)XNziP9|BN@>PyVmNK-_O
z48(c7alb;tbaH4;vhOg@BzY#tx8jBw^1j!lrv43v0`i@>IY$8E&-FO6qq*mha2Vm|
z?tOAj8uXN)E?3^KcX^-p@UeUl<@fO@oliyOUYR|`<{4*=x_N$pqVOmV;Z)8wmQ6^u
zgFH{Y6h~e3HjE7#3<91%gXe+_I~MOuKO1sv<Y}y%%}%`0vYyKxv-$uPfdz6c|7{^G
zPFO9@U33n(A=b4jLm$!e|KSY)%~~R*;Cf@ZuBtdJ?yK3&eRT8$Cc2_a@J?9ACZyo{
zG%-4j;olwRU5|(Hg&TRnZnj#H6xST#xI>Y90zwTvGcOS+|NZAT1z-~Injs<FnoXpQ
z(<r=Sr!Yqf2aQwTJi9`#`&oPYwUQ$QV0wmQihF#R=dCvFqJoO;ptTx=zEJruft55~
zc0-^(&KTwJySP7y-E)&WvEbL<;nrflxC{CbeXPubLB=zZY|7p3u^Hy1fu%jbdq{-B
z5IG$j^)t>N5i3@551*h8OkM=wK%EK2&o9Fu{Xs(oau~1Ko)U(ZrbukW1{o^D0;b%6
z5fN2|VH)dRz8Xk_P%{;q07^i$zuxOp$1Js&=K7Z=TAgKRITCz&OM<$CzufPe(aT=X
z<me0y24uY3%+G^*X7B69ry{RYdkpodHF7C~sxr<=L5t1`Mq!Q&FI_Sw#lP#GeebG|
zw2^Ohid+FymIMbSK;ZGF-qxXoTD||%RbhlVs)%}Z@DK9GLz9j}mU<23dmz-39&6&I
zgs3w4gOpLuF<$Gr;C<$CGoDJdKPUlA3@49KA052nIvNsk!sgA#TGNEGB+FpRyX?gN
zoBcx9i$(*!)C>jKzk0psI+byO>M75(!IWS{$-6oJedO$oawhDtikbC5M-yA+zm}gR
zlGE2311eAmtDo@R&f9};1h6EX47`>+K8bu(t#f?d$S<h))4K(HTkjj;(at;bIgk+`
zlO*$gYk40siF1Rv9?TK*puHTsM}=AN$AB+ke|gv2+4jdh0bfc8fJ<JW>;mml{*Sid
zGBTg=SLt8aH`l7{3xOsZ+n*_<_n3i#@yJ{+@0K^%=)T!|7WPQNID<%#H3F0an^RdG
z;4fl6Ix{v3CBQACSS=AV$rrVi)B7Qp^AE~t+2dz4^!VTR44Ah$>nk9nlJXD~*NNwF
z4Mz2cq}t+|!J^C}6OW->J0!3j-$lsfGTS^?@qPhJ5bd072pEwNFLgJxtDABsA>TS5
zN7rF0B)M<JZ8(au?kGS3zZ&M*Xzz%|8LjplrN|t2xWc3i6%xU-2mA6UJnAgswZSa*
zYWGT-C-6-F8-!~F{Ukhxx#&Yv4FfN98}BKV?Hm%!SHlP@sB$Q#w82B)LjHZPl2@(T
zEq9hVmGlJ4P9`+0IYUQE`^b=@%SOXrviuMEncg2e&lDc+GYnn33HsT4hhh~X15)NC
zx8HQ1%LU%R4Cc5j4kN2&6vtpT3k%hInBMQg5CEb?KCV&H;V|j!O7h2otl7UxQ~9zE
z6B&m-q~8B&7y!(sPV|g3a(BeI9BR(_4PB|6Owo+uzhE2?k8Q9`p+}DESc11C5+R;O
z2@7TUOz$<J>|5_)OFYiZ=bM2+M=fi`e^2bW*M4hj$Q0Q!e)-TuuPKeVgWnb1+8h-V
z<jRP&_n*DNiyMy*(>+SL-<6L0Up5vrH_Yg<%*MI9Bd+l}daPuF-?8>q1Onohds${=
zlu>jT!M-Tu<P5u3Fg1zd?s(+jrU;&~IM$5T87jgpb@F}Q;bE>5o)2piVyjQ1T=YLf
zjz&oyeUeb7<T$NoZB+7;Ru1Wqpj{WqQm>v6qn^%3<siZ$-t@>iYM>6zErk^2V43m7
zft4DSwkQWkM}zK;G3(DqRV2a<O`X}-sn$@x{(!a6BPjp(J0}rVbxWWspG>p4AFluC
zJ#}5_>GSC0!VWVl3!{^5Di@GJbNyxBoIdWG38%_CSyCoR|8i9X@wFooo=FAAX)wiA
z5v2pl@QQ`y`OjJ_@+rqAP5SZ~8Iwg`i0GXn;me_Fpn@~V!%~{5WB=#+Z(p*x;EndI
zrw08WP2d&l>`=(tHT3w9g<{puZ4FhIhw)kTr!}ln9T5l{wwrJ+5~|x@578+A9Oe7_
zS&u`**o^-<kUjA|9NO)-Rt@ePq(fhIwJ+;fi;Z0+Gt;3U0$S<4(2kcp^1E#0%Lq&B
zd^hNf`6A0K!wg4?`HkPX0zy1dR;Bk1$2X5k5a9-wGsuGuM4#uEKNd-u1W&3t!yuh|
zg*JXWWsi!!SoCBXCByPU&S$jKSfeQ?p~cS~EmI3x>5<5bOV`)yx`hUh%<(`OUrFvA
zHZS6F)?aeipNj+NPHWG20EU_f(I(cU_a3lr&x%)n)6-5cywTiq%AX}*c+??hfa<(|
zSQx;E%>h7EAe%HNxARepm-^V`a^p+H-kgBPYC(7OTrw0O^7eTN`5r+`oH4Si1Uj}2
zd7T+IFl>%FpTsK9u46yc*kDBve|0~~Tn2%yn0QclXYd`=^W_u8_m6TO1SF6w2*;Cf
z3wsT3Dupl$W9mt;Xe0N>aSZ)xal@rssBi8|{eC2QW0q)aG2Xa~FJ&dPl9<4Vl1a7C
z%y0%u{D62<Zs+_;s-Sd+h!1lB=rd|(FifCfKj$){xFJnm*4|+*f$4=>pH5%|bI~N&
zk<(ey3>d|a_b77_?m-F8MoHlSsT15Xraf*qDPSF4D<)3!wsT+1BpRUHGAbt9+jI2(
z;@in+9~+odh2aL?q29FCH0QZ~8%8P2F1SXu%WCc+kvywJNVWABiVJx;!i;&(s@5Od
zfn;I`Ke8XuwV*Jl1h*no4RsIWO;&A+PrkDOLwr~U8m+0>Pah>Zojs!z&NNCev9850
z8pP(COysRRLH4V$+mS1kg6`Gl@xYm}+spUiyrz*gY|f1PKK{tlf57`l_FRqI0d#?=
zKPv|dD@ZFNKIl$TpHs=X14G=lOq>3Md5xmvgf8hkD2sa($!3}7R`UqR{0)P}toQD#
zEiy{h9TCbXGFsi|Wgmq;Gy<RzWYO3MYZnBH=Q-!Lo=e%ExMot~?Q;0!N-WV)x`!cH
zN1}VYN_{K*GQ@Bz8wiz5gaioD0FLW7Aj#<ExOs`ohEUE3gaEatXkciag;Mwll?JhR
zJ7|p5)9!VB5C3fx8(T(e;~IGtakHJyfo|33D-rTX$G}c#%JXijjPBG`r8Mzs+ln_m
z3iCPdmGDn>AQEOfVUeS&_Gnb;8K$FHWu<yqjo$W=;8CM4OYK>syc)MPfeRH_w_e2)
zhq(ZpYq%>_h`CaBG6pwL2IaEW$295(9b}=q$j%Bo#5!QS&yquu)kKC~p4;IBzE0Pe
zCs=#V1KF?@O{4;8v(2j}o<m+D)n^#66G#CujlHD5K>{*e#-nI#-ZFc6=!^>=*xAs*
zrM4$DK`bd{P&4=43J85@=e+AchztqhG$Y^0SHIeQaTKocp=jp!K)SX+k?f2`2W5nu
zBGOA;H)r*S_5Obn2!KM>by6at>!;Cj5otcvt?td(J$3h3=O>wC*#ovwS?GN?M8=Mj
zP%>xqUxLSXJ6)ibZX2j)jq<Hsv&}>`yG))Ba*3hLvhi}vWw+Lofni9|eag&B7H!JF
zd+Gn_LaQ7j%D~%CYiR!|oI-jx{S3{`24*~ubR3ovkca~{hR@mW%X>((Gds?-mo*+F
zam*1HJL37jIjGs3lUlwSRn*$zzN9rFO|uTsAQTr^c?r@JMG_@cCC%pREBGdfAia<K
zE-INF7?k?ZEgD6W^M5<yQJUcN;5=jFzm-!Ps6Vu@iwXWTgkO_f2Z|4(cbAftYbD<~
z;zt~NrrIULOska>&v_Z>na58&iZuPh-U>1%_v!*8YBX$#Q#<%Q6(95zktmUryEYoy
zhD@5|HDM!X5>}4=Y+7x+PbGUch#J8L1s}|wC+E=MR2m{Y3d=Q;rk!Ap*VB16LT2df
z;euziqb>DmMZEyEORmbvxM4EJk?>6?Gl0SFs(Jh6IW+Bh6Yg|io~Y-D?`y)}9xCZN
z5wXfr9<AB>8h6*Lk5F^3{gJU2%Z!W)X6{E`A_pNb+>?-@He}8&GJE4?h|bdqX={OY
zA_Ak%l;Jo)mv$qXWKeiqAXVZelJ2hwV@D_Kz`mw)7txrVw&ySMvL%#3rW}iS@tll|
zXKa*Y`Jtc0)gN{m`@r-`7ywG&->%=JLAzZ?lcFmA72+KqGhs+%lHCWv+e_Pfk&>uz
zb}0s{w_1dMS*2%g85Xg9#0)(5RxrP_p1U17-u|(O;LAtaW2m>|dD326Q3evid7h1t
zC!gDe4F~G*lzp`N_E$u)7a0Bxgm>OJrC@VgSu>GPYYL6OdrHo{5~-NUUkrvCJy%)S
zln`;QFE}d~*NZ+w79IwJj@X%d^C|&Th1qsRlZ^r^9-0iYrVO+0cnc}ckVX-V1+;wS
z;wUm91XX3SZs;f{bt8+;WE}~lo#(RiMUYufUHk0DSC0oTkJW8Hj&neVSf@U0b`c5H
zP$$LMA@XTl{58?|Q9l+8SRWkk*!xo+H)k?cE1}E8Aye2J&kORhQTuXT>Tm)xT08a&
zROl(+Or{naUV|Y73-8p9j(lAEai~j(ng;7<vsXEFqmLb-+4>r4<yyF4D<K8$&UpJC
z=Hxk%yqE{6*V)?P>re7j-|dF?9QkmTYXC@yUzD}qf#8pz{xn{se%3Bja;9!q$)lyL
zGE_XmFiBYB$%SBG_Hdo+iTIgk{5nN+k1Hwt21c(j5(>sdZ6n-kwBO?%N0C-!Fcrt!
z`t^%_5XVo*lb1orVn7fMkq^rS!%aH+;zXV6J~v1`OxPuSG;u5wXV7~lar&GL0F@d7
zAd#KhJ4-$_L03J{iSq8|JtEfA`^Gkfr;Kb(lV`p9%fi@B1Hku*8VIV#Gvy<CYY5Tl
z?JWo)%xsL(V9Vj(jqYtMx&xC0T-zpk{G+;kF97}Xtnk*_t_9pB@*K>wM^@I_sO)3V
zE(kJ4=@a<`eCNHe#*-!ytbsCi+6bWDMR){)BbsJjl@amgjhnKL^V4N^lE;&?l*v6(
z^@%O~Mh>2MQpFEb-CCKH9<M$d&}gR*`*d2Pm(9;pjAN`9=mB#{d>^bK@;sj!?$(&a
zY}RR|f)w|ze@o?G)~FITYQdS;s=K(nkK8UAj>Pgzhv;0UW9ljEBi(0uwAS+b=%3OQ
zGcI8fYoasA=*Y@_&5gomnKwb%?j@|A^soFP)|7_aR@Nttby5Bk9Y?-rkDu-vWsSXI
zxM(x7dCIuiP7?ARQtz%ljvn6%71OY7@M(wdbiLf}j|ob9yx*i0$h}+DOs1dR*PeZp
z3(1n~@Gas(rDjJK7bMUZtx@_;9%<<jg7VtP!`3;M#yO$d-@&ptCFj%bv7A5qAY~uz
zjo_3+qqRT)I0l57j`mUM;|0No)Xo!KfK|9zTti0wJn#PAn%Tk|+}lXpM+FmTC7z!r
z@}Buj!uMo|o{@Xuy(e<iT^oq})&v^h|CM<w=4_D|O3}0i$nb5v^Ig5q;s-2@Ip$E<
zWdz`g&RKf1_JuO-l28>oufYUY<kAvCt*moHC)J{PYdUqk83L_j5lV>KqSklzeLb(?
zWWF~}#E_!Vk(6V&u;&i(Pmn>+)i8%f`!QTzB|M{h-jkj;d26Fg`JIAM>Zvnwo*bl^
zQA#NP_?&Ch)DA23pe5HC3Fi;r3wP9uZ2A}C#fio3?S1#TNxl_JQgL8?T<!NHVM)m&
zBX=b?e=dH_)fbG5x3>0>a29(p|M=O-0q|70BOBf|t7Fn@k)ju^3y)W3^q;NF+q!(#
zh`^5HLbqknsq{J>wY=hGcj!)`WUQp3Az{8Ibe^wg=lYsaIr8+qrT1&12+VmCiueiB
zCxZZZ+#g@P;%pySZpTN9-KVjyQ*YH?WoHJNb|9+wSHrI`*&Nyd8TWW2+oEsj({Wz(
zS7-4J8J1oH)Xe57fO@ng&`UI><4}iIdG8bkgjpUDbd$&q4g2>zjWR)&GO24JS#fV2
z*TvVsI*AG*^;hZlc3s1n3~UxX+8L2*a<alxXb{VaWk&7Gv1%5TY7tP%2n<5osA(Px
zXkS|sy^7Y)!h=T6Vrl8GN(h|HAx<gi@8lWy&|_EP@@hdVq|p(V6XWCbG?YE#%ANr-
z4$U9g-a~j2EmIqAxZNvB3ZYtiw0S#TYYz?MBBFw}O-!t;++5qr7K5NZ1x4p9@$TJ@
zd69SJRhf8FJP(ME&`{oDrI6E1#cSOFM+gG<4LYR16{2;?zD?nY>(3QKDaEu0^Fz=|
zj5qWphGFPEE|U#=HDh*EzVzdU@M2zve}Na0%3qljU$0%b)one~vz5vrj{Gw6bfT*Z
zu?6pGtpr-(iut)|sHYjf+ZHKNe-rbqwK)C~_g@=Nwwb3sRSEH@&;W@H|HKPvj&~L-
z!)y?RQ6I5hPEW<`Jlp0SAOk|c9epTy!bISejgy#GrkUZ5r3@Lcz2dNzvA%9g1MmOH
z2#TQsjM!9joOqUo8a8JVkC|{H)yn&+Pwf$YRF3iXEc0E6ZLf6&W3@1qwPVN|TRIt~
zec68sfUOuRtKkjXzmjlRtdED>KR_lJ<=P-4fEO0f>ir}v1fPrnppa6C)~CkgiJHx9
zaJw-ReSNm+c<@fWG3be;V&BBAtvJ?2Ok!Xy)<%FSWTo-?$it!)p50bW)hD+DFruNS
zWPy?35rxF_ZlmnUYC{$8RFa!rT&wG&Bur8Y5ApTFgz)w;eu8~yAl3axSQ^EzF7|C<
z>P6PN_s`iF^F0Y8$VJY!l(u;qXtK5EBb?4t5_@q{9BTQR(H?|mG~{el_64QnoAHps
zz#eP!GH=}5zqB~cu>Sy@ou;F;F-k*0P4B0bKu3|#3Tkmj)t4S8Jayi}oi~n<05!Pz
zNLIUVP$=S&{^=XH`H`##l$D6G;VROO*888~n8K*$u|}(?7{d?hqUKrWi6f}BQOJia
z+=d4h!%1Z9YC>TNXKTAk8xtZoAQ`0MS-PzV&W`tV>^Rq_Lv+N8J<bim+(R?jZ-)$G
z))N@0mf^<N7^=QiSUFMM!HhCX&~>yx7+B)A?^&xYa?UC{t-ZFJc|ID+`#cYg=V?C6
zaj|*jE7DVOANbL2x2a!x$G9s_tVVVGCCMidiT3F^ubnmzYG`AVU-ejvA35j%Cvwfu
zh^1-P2w=kdL1WrB?qPpDV%;UmzedIqJ}wv#QlA<!;JuO4OZ2#FtIA3E;iC6%);&3k
z!{lWR3PxvI<{R;0WJqS?r0dO!JD*<7(q2uFq4&Ssxz`QXON1e-1Nch@HuT6d+1pv8
zIP##ChH~TNm2#gnu~|vzp7LrAJ)5Q)Wx)mLvKYsNfPnGrBND&;jLi}&%nZqWXBiam
zeJ#O~@e(==UCXD=2H}xR%;T+OYk_&It>jQh&S*nVP8Y!+JcD|)NtbT4VNci0d|!}8
zS52Edy3OmU1$Ni-pCr%td@30wbzEF{b{F^$Zgf?rL|&-0bIk~8sRTw#TZ=Rp2=k4I
z(Ve{aiV-=%-p*1=^Whz2jO@zz2>E5X)J`M+URb;FeD?Q>XicFbc}!Fwi+qryqCI^q
zzr=Eq<GA&p4V?&$O1E*oPpaIIx7)uu6wb+AiXx=ID4eZ$qEAwFMhH`}{|~}<BiWBo
z6Wo8(=jWqpSIw2jO!Svx17|6+ydFp6`ZVyU)X&WPxH=EP=_f-f)7#&CJ{9l(MjwN_
zt<WR6$?jp?b#=E5)xYg+Ff#==^(F}C50YMWuSorGm488if&1M8>6qP}-9#j)3*JLK
zugQ}mW;<45j8?K%yM2uYmq~k`w_wPdI=8OhJ${flW7IR5TLxSa0qMFF<T85B+U*t1
zpvfz6$pT65Fx7NM*u55_?HS+fEq`!BTvT1dQ8c``Z-$lY+Iax^yNNgE;aS@!$jCGG
zqHY2Y!4;E=!!7}7<dH5}obz>-kcQjlM`~vt>*VnLKSKAjtHjSNe(~U`{eqh-z#2x!
zEKSrq8QarxXna5l4KOChNnnJGoYBqzNF}FV#P4D+^m0OoJv12Q1PnhKLp;(-J>->!
zJ@3hR8<fIgP9kB*F!CzfH(XXhpsz;0uu9PoS>=4Ddd{HJR$R1p&&U^`V~<z8{};t9
z#h}oij;)a%d+7)g2Bhv{_Fr2$uju`wj?l{4Xg?CL@&16hmN6(em523ZNcWqUUq+1K
z0O_miol$oNp|a2twsQ6DCjAK@>@H*8xnP8>7m;R-O|~?~@|As(fj8SpC<&hNuyVIv
zd*1pJsNOS-q;E){oYe7nJpLwqzHf2+0c793sus05Qe-wsMO;aRR_@)PDV9hx2K~Lq
z=99pL3s`O7_*pA5id+kyqkQV*7vj2C2W||By=rI}JaE*XdvAmeXfRl>MCvV?lGw*6
zK@;t}$Bg@rE_){RSbAqVD>_~L)Yg@g8(=|PATm@T6o%X>OrA`LFK?eQ-n=|}TeO<{
zIq8P)Gpz1<4WN=Od}G1Lwo3_RfvGar@?ScFb<gfXj@kBwV2Qj`^td+3rt-;p6Hkf3
zja%^71%YceEF-}@E3j)LKz1y=J*Yn02S9vNuw-h5TU!}7txRhqKt!(R1oxP}=2n=T
zF}BhB!LffX-*k-VM@f%MYy>!03ak8YP=Mr!mMez*h>y^ib<}$-nsyN}L*lcyWj&!e
z0unvXz-GiFhaI-6bPVX|R%eWzQ!g=;ZF!kI1<!N-@I6{Fk<*7bHOPYuCExz2dMWge
z+FMOTyQ)aC!(l0SeRAKK4ri<oVSXHi^Ma9~+BEf=@+_ru9@lLKR)(!dnU2Gwz59mW
zX_?R9{QYA6Msgh6k%Ordp&q_0KGMy?`o_SI4@aL?4ggI-{P0kCg0ib;Qp$&O4|x+1
z=X;rVMPacE6XUO{;Wf6lBGahFa3<SlL}&o+@oHzC#m8_H5SL5B_*9(o&=j+0M%A@C
zSI%9Yy${w+`re&3H>s_x#{rRCN||A`V~Wc;H8#kq?*;V<c^n<@RO+61mESeN-y)U#
z0_E(5L7bdYEXMJ4s9;)8qxvvLTTrZBOU4xC7BC5UocHtgE~Xs<>(P@OSm)e4|3?z{
zD6~aY8t`+^@+Q2$!IB$>WjK9blEOKjYIqItZaTJ^5-=HrK|;B_pOO5?JX;5*?{#ob
zjd$T~E6pk+N&V1_)*{i8Q%2QMSgK5VGFeNp4TlpxI!WcO`i#8d9m6$UpQ%yN^}SM2
zNZBM~@<RQ)xa>wD<-=sC<v(g%6mrli)=D{4dy%-M+Y=6qt|;Q)3<+fiuOae4<@LZ$
zLZ>b#?b9@hFCLBUY}}9RonEdUz3x07rumoHvShv#%&Vc3nvwjelR|q+lFesBd_be(
z68+Kg1f3=$G-1#f0d9NIZ4OaVIO<PtZ};{AM8&{;TAQ=vs#NxxW|G0tb&xyUv#w?L
zqfPe0ex5$Jb6hj~WE3tULRKC)H|L~z+Ac)S2cl2X0Kk*%9z#Byhf<U6$k~<IXHALi
z894WwHtM>t>mt^kFmDr(*;?(#Qk6I1N$76c1Trxsj~VF=oxE?ExaeomF62OhNZBG!
z6K4xe7)gYI1dK0~Op!eOJPxpt-pa?8M2BFrVzb!1z|>}&GpOJ;gAnp{R$Crx3A#>Q
zKSkrougz?og*VVf#)fbDp`g@rU$-$G2vcR<P|_SoBq$o<A(jat-E6YrOj*YW!1JV?
z<N=#GDN99hX}m)SummkX*$5!URgKwMMk3r)S%7Rj3r|p}-{}L)?Z!VPd{ug;k!R_=
z8N_>qq9Ht@3S0u?r};Nso35+bsWS%zp<#Wf9L<bBfgm28q9Bwt$OzsF^rTd94Go@c
z+w%>aWEc;Ot)9|}#u_s4FdwBA4D&=7=uKZV1M^vi(fb-dtxjp}>G#7H1+{Syzo|XM
zYfhs$ymbU+giN5<Ng$(0Lk}6U<yi4^V(mb=>S^dltCa%|q=V)jY&V=>ab|c~P2QJG
zQWhe%bXzL)lZYh)>MJzLa0c_biHO8*ZEr%wyc;k<X1K;O0bbLF>e~F+I8l-XuI%?`
zl#A}sgh;lf$E~6&8q5J@Xiov}o0T+>s<DfRJka{|0jhc?xly>{_RbOd7w1)dokwav
zphV8IFv98SYED@n-6k%yaa7J+NH$%P0HQ&-$=wgwM>J(+VLjj9L*MzLLI5_pU+({(
z;KtJuO1x`N;T}v(eC}U2q~nv_dk1NEoZ3hL_3kxz^IOKwZhcgk99aT3S{(+jYg|r_
zjntdj#C^R!--GaJ+bomhjSnd3_3PO^fqt`OyuNw9kGuDN?>lyH%LLIGLFDyjrp%Or
z*kbMB$7?6FIzJjVDofuN^Kk4916dt;Hi8WHg5g}AIcC71SHF(en-FgCz3_-MY;Ws_
z!MmgF@?%iqO;T~Nunrt=C4S!P{SrHyV?d{IXm)FP&uuap<GV^pCFLWM;hiK~EOwK>
z2RTNAME{pDx_>YsWYt$hAH1P|<c^Mg7KJ=+2W9mO;q6}x=Qu)D)tm2q6pAH7`p{|l
z5RQQ`SHpyw^8Zn0_2-QMa48J(az5{>UP4<ul4tz(ml}lupw5S$BeJB^ye)0FBo!Hp
zA6k5=K8w*)WdpCi++6+RTy&Z8rbkf#li0is&W8?UVOWl=@iQwudb$EjwS*}5<KkRT
z*g&aJl{Q3vd**>Q^PBZj)ry(`+bq$o9`tq<_yEL5cb~HVPSpNr%(UQh$P;!H+NbNl
zYwddV5ILR+$oOhd83B3YER%Hl7Ip)>YhFgHUP3#V7o9N4I9BB+Zbqr|!!$aE0POm(
z9y0uJNWnT3ecR?4&&5{$;h|%oCut5}J<oEjuvRxa-Vw@bJ}seu4TVA9y(EM5cV(Qk
z2NHSG;CQpWD7NsCk;hIMNN^7e!zjFPH|S&BmdySbKIyy~!lIm~hU6h@HquA=7Uxr2
z31=V!V9cMUUU~|C^GYg_Abu9eHHYbPdQJq$CsAWt+x25dKuRR_nk$6HNnRk@PyxBb
zabcdJ%sU7<QRXYy`1$4LDApQjfn&5OIPD|Lc~^e{QMjQ=c7`rsVfgI113J&6`6GEG
zh9$Bg$?d25F8x^T9m)F6B!NV%%ntLVV6s-bFCljRB2X?GVsFM$qiytOq>K#BI)e>F
zmoiE#uIi?JYdalmMhvef&wIjqKje$$nLZCjWnuMnL2qULVCOu7A`|6*hIIK<=;N9&
z=k(*#WE4Ao-FbpEErMAIe=`x;ZX?UBqqr}@PzDxZic^;L>iZFXW{0JGlx03Tnn&NG
zgg%2fzgzOikXpa|YK~5!>nhU?_RY))qM=FsnXcs3Ewu}1Lde#ZUMIUe!!mKaul{?a
zGo}V>C9{4`^PFhJ&!Acg+n{7cqquPwy05btDPal6%*0?~J!%+GF(QMXPRhh}a}&fH
zHgR$Ds@$KJysYf+96#B;#QXUqt<U&*Qm{8l+YU9qgmppVgL1L%e^HNqpTOWFKGQL+
zTKR9u)=IrAJg$*Qs)&Nl;F;;zgzF@R(1rRxvU{yqI;aZI$Simy@k9C?wF~n@kB8u=
zh-^mVrWVFk*ns#Q8f^v{sx@-rEaiW^kM#ss_-{%B!*112dcTWxga1TzP2t0Tfk@#R
z2|&4IWflL?i}g2@6%OQ=kV-!V|G;S@%OBXkCdfvfLzuB1BG|lt-o7EITRhu;!IZ4!
z17oLg<T_p=zVoL&=wDZJs#kg4pQ(SNTP_J*n(l((!di5SI_u3vASt6wxuo_tx~Kn{
zJx33fT!=$nnI}+cXTnjmgbs-!^YP=ga*#;Bc~B^&-aAxT?;h@3pQ88w^FaVai9!&g
zXLQKEVXu1kGgOODo@tg_FD8}X-V|rm8F(v;@#3Bp3Y7O+UdJw5(n>1^2JsbDua39m
z(r|s*Fp(fn;3}V2<MwK0{qx8RrnxX}j4(d(ym!*uo#Z--C<)+}zRnYu7_Fo(b}Mc#
zCxuwH7=TO#amvbwl%XiQ^)Mj|do1t!Jjm#H8zq`Uh#@;FdMqTLs$iB&jU}y9R~lrB
z^3UtQiKXLuYsDkfhe%zAo3?pG8F2u`z{;!hXc>pn4>KijyiUq7JWWy0urjBH<~-Gm
zxBVT}he{cE>2+**DN_D}gH1;sQQWtxw<#^Pgxd7cNT4kIkx@q|z^KeZIh|B6%cG1q
z6xmHOeR|}XWWCsL%JEpJeAf_5+UJbHtr?)fo23=`daZjW<r=EYy1xzFalESKtH%R%
zUJMmyUjFFoM+kZA2_72RSJJ>`!dsmD8oCUQtFP!g>!KAFy*-o%?0fL>p2&w=fn9P1
zDtvfxJC{BYe=NMg(b(gO8<Fu3Uq_=4M7|o3CvaPj43zDG#tLP!VTZqY_0T(5$U*0y
zr7q=+xN0N-)J=W3d6~Waf60(m02>WOaK`#83$CuZqifn-8x9J_tP{l_ac`0NWxCZ&
z<Ydq}bg(W&VL5HqaU&!4SY98=ZcAe!_Cm|;Lb*~W`=s*i9w+<sp7juF7b)|NWOwc0
z`_$t8KNkeRMn9o1h&Yt@gcT(k@6Mb_Szjj%J(wbnMIDWlB`?cBtu_(k|7=^>$#CaV
z<&kQ2M`5DB357@sW28UOsoMOE*WQ7icB(+8TKwIKKJfAdP&iJO3?d^Cu)7m1P*`*&
zZ$JeRX`EuuWvpyx(@;he*O>7J_!B-7o|h@{{L!U$dT*cLaXb3kTq9ZH%A72+hi5=S
zP#evMXU}`jxZsyNe^OktvBMseAHDc*MUD~o@MKO}I-fodkb?0L^OVsUx*QnE<_#rY
zrK3W_cNNXY?H=}5KXnM!z07X6M899gut;>rZ2gVs@Vo>=(4JRl`S|wJ+pQ~^PwR2C
zx;K)>&Zke^05GuTeq8EMCHcY#Cq*(xkC6jIE8|CmS<%FS1@T7lF!A}<hiX0eJQ+@)
z|JXP#ExWGb&u0FpZb`l!b3AtBF{=vJ<=yD%$zsG1sBFc9DJtRmR{5W<4Q$sF+{Bme
z#j2lij*Ode>qE+%Z%yUA+brlFOLb<$Y7)Yg0~z(p=?}_^udji(SrB=yR(5jjJw2NU
z9{jBOpHcC^&_&;IY`vtWY?vtp>SwK6dPk<Z4X#RNJCuJ44S4H>w9g{XIO&zKB$?~#
zy3mdaJCxUGGBBn4ABPel%zW*hPDH#rxhID!2JcnKlMgI0{M;?j_WSTYRvue%+`KkX
zX+T&}_!^cw^Yjb~g)!^zK#0Jx9j}q2;Ol##(ZCD+Rj11cS%HdhQH%6Vh(712u`3;S
z2EW`hmjuG|0oPSIkljVd#wYCY{~SXAHWa{*hXT#rhi?fO^BK}m22weg?;3&<$B;Xo
z6NJVV2v#eXRq9z0L8yyo?d{^Tc^eagF!o|n0+`b_g(!P<X5-$`wm46h5LxPez15H5
z5!rJGn<_FU&wItAz+4@UpljY3W>_IaazD5C1+5O19p(nu!}H5jF+2J$B}RtRz;%qf
zhd#@qU1srP`T-dO$QHeB1j2XF@69z`4et_RFi10~Y8X<ncU{(F$#Oz@AI$ojsgK%i
zgfI(ZOeL!*_!h3m2>Ph5*`i&D^)UtVT?Ldg;*$|f(e&Bf^pr`$v}c&I;RMlIBX5-$
zA0P38eMjgHSrvM|v_VG%&eTi9^9D&fy*v_LGQt{eFz{Z6%jO9RKgFRBhLsWw%ZNAs
zCBtx}AYK`hl$JlDGTM83cm_n&h=O{&3O~adH~E6uomFPK()dV(9Ae*0@{??eqH{zb
z62rfVFOFd8)3rO^%lz@}_r1_T9Y3y>%}xXf$7>iCLp^L(moT^t5ox?+Ykgfw-QpR$
zA%M&e;;2T4vLS^L)eyLy&$V#i@*cA~)Sk({8#OIG&Sb}tdc7kHMY3mx^=tmf8ftC2
zt!bAZdiVNL<mzawxcZr{%lic#$Jh6Z@+V5Fnc$sygPyZS2Xn_b0UoMfjn!K2GuY3c
zYV7~#WB_<GI+pyZlgnI$ju6i&$V<cwzTd+I-p_*FO-kuBFY0dG?K(W`_Sq9;CwWde
z9Fe63?F?hlLhrr(NVp#LJtvH7p#ZKY7-GVO=R+SQJ9*8KGGaZ~GRw2hA#udA8R?xL
zg;u=yZa?s5DaWfT6kX6|G0M$<p|>AOtkmJ|I-J=UeDsZSL_nia(#&_Def-i<K0uI+
zAETJpmZyQcsL%Sb2SgcLA(qwZIBnd^O>2}8Eh~PQ;zMD-we#Pf;K5G|zd-u;q2Q|J
zD530)a?xmoLwr{JvW<1;vF>OcqC@$CJR?tF`0064IG8nP&jI*EMm!iBQv6fo<-Opg
zg&A)Yr$S9=IuuF?Wo5Ij+-f`@k0tU}@&wQ4_X6!&ql@=;tY`k+?ik_zB;&$WCGZps
zU;CmB4L8WyVW|#w6*=v|XLQLUG#mRAPaB-9;+6BlW98Nk)-hUpu0gI9zkAQpM&?@D
zWNd%p1Sce~RGBM?w#gFBVHL{n=XxRo=RJKm*V%fR>)^SnJ%mL%c~t4A9`}#*fkpOX
zxd50rndcx|u8+v~tBaV-46ivu2soK`^@6T{o9d>rANTVDx5R?|SeVO5cmmsFWi%x%
zrVTCN=bhJf_V{iEj;ZP?&X~-g%N`B52SJ(3KeX;ovTtX}D1&@dV}~@-brT){%!SKr
z3Z|3EU;Nxsso(kHG=n0n)%Gd?t}Cg=J38TKyhI!%4IYy-7KQ<lv%-43Dt8Q<$%jGE
zNZRzMKL=A+zc<xc*4E9&VfL)!TELR10Z+jc{(+VZ6#uu)Xx(1SpMp(zwgzS=YwRVR
zd`nOp1Y&o3(<MP_kg?id8*;PP2>@%=y$v2KhR+i3ZTGxfAJi@xb%vhhpzjCcao4$S
zil^ly_<6KP1+OEzcx1GO@|PgiHO@}o`JqU@q%xaF4eM$}&JD@{jl#JW(g%3pRQCOm
zT%dtyxIZNs94Ap9F5w#>!rHtK%9eZTB$#eU6T0H%T2L6SkJCkF)cHd4g=~}Rt+N`8
zrN9I5oe1*n%^Pnm>@jY+hSb?QoAJ{&US@=Ea|NZ#hg~7*X&dUjTl2d2XK3%>E9M|+
z+{47oPzF$*2SQebbtuNdIo)A__8nu|)}y0{7BWMpk~#u1gqD4NKgGR;{=%sk4l+y-
z_7fMOXYhO9iTE+4GYm-~9hEO)pOpstyU2L;0_j|~-#z};3-xdgLW9Wrd*u=00cJYh
z^xQxlsqZ(U#Ao3B|1uB&G%;uVBr%_)qPnPrXm7HjVl`Fg7MD!`;Cj*G7T#z05A6kH
zl*cTvd|iBKa(7W;dr5i^%-ZZ_XYR^rf{Qr)CoXwPJzVn`vnYKOso_1Y7$gd#hLPgm
zVpjnVhl1sEX5JQ7ARt(}&f0LzAg>fk{T^C~(87`|KRDtCXfG_UJWIH+$T~cfn+`yo
z8x`ZqX5e~UFZU}{<aw%i?WmJBC^KxkuERMrOiXG$bq&h#r>x1nkjUO!D|J0RS=Qx4
zUhg?;`bqJc-YF3HU6Ny+=kJu|pZ!h!DLCz+-nSg8`z%`q=5lI)>R;_`QTKUH1an5}
zFOatT6sn;WF2#`pxtdd%w{N|FB5zac8(~11c%QYRBak(Lj*0z^Jd;oA(8gAkC7Y^o
zy_#EJKIV$GcdomZ6KW~&E;gZf%U~|~pTi61i+eoI+tIG*A#{}lQvAf`(LV#K39SGm
zC)C&NmI1BcQwxULx)4RF8m$Bcp&r^B7tLYO&o?D;++(?97A|lKsRp*+V6u<5y{mi{
zmSm}*^mWjca>~k&ga)CGX6i-&5%L5v{Y3-<Wmcm~#0da|xZ<T*-;NA7Pxqqk891Il
z3t=CPdiYFRQOIj>JfIxO0!A_;;~GzY<q)7c>DeT@M}!vW_ZRcTlkO$)i9^Vv-2R&D
zOWw&+{bBg)pr_I@Y2oQ@olwr7tChKU+!m5~f2#C3831Z70FP$#V~^+l>|J33jnwf%
z<cW&Q5q}|juN8){IYJxZvtFHgBS2;(ti;}r*erV!hvZ1%s4+$0gQd-xk}xHiK|jyA
z2~b@7x`G?Rflz7W!VYAdJ|m-78w8cXBYb?B*v5%ddHsDg`}y*87pU|WTc@sRMevlf
zv>if*UP%3PzQ=pD#NgwYj5Y*~_z?Bghvl(l{RIHs0|FNb>>waKaIJ0Sw!T8+VMGfU
zJC27;LhH10-_B(+<xrF^<Gp|aVWSIKD2)#IFoJS@uz%!G3ow?Vpc^!-0DxFE2@`!y
zdj>w?LR*1hFA^P(S^nMz>q!V~sfxt|)`!@Mdlr8_9Sug`@%SspdnF8K#b75FE*Vvb
z-)X)V?sdGj<uP*{&)FZiT<-SQX`^$f9C&LjFv3lF-X7UycFd%igI&R+`;iA)8?4Jn
za)Pq$U&YywF-|J07rQ2E;r2=#S1X~&;^o@oN7fK`i;P<%r=#RkYt+ZHO#}KO?sxYz
zp?Eam?<eO0-_r(CC-Q<3Qcxd}PHNT@nnIg^Ov}g$eeTc;*|DQH$nGg=gQU?xv!gaD
zw@(If^CQ$7oaclQy?9-$6RG@bnZRvJISsV&MwbzLr$Q%04kItu0?Th1J_Wkeepzo~
z@U$=54WaGt2zmApIWu}Mu|W&%oSy-GP6mKaKR7}ONy0jNsNVi@#LSJibMSsT_DGNy
zpSHo%w!cS|JBaf#Udp$Qb9Ss8hGA;YNoX0tN35brOjg8td5qgp?u9|&9(%=}Z;S`V
zy=SOSvI(HaUZ2*GHjHE}!#MWpy6X&6$N}`av>R-_M@v1K4bGnZ`yl0s7);^hw1et<
z{bTBDK&~Cx_nzga4}@1zv@yCld^tb>tkMF)%!_|r3b9$Dh5&d}pRYE6N?&28*jOOR
z`ojE@;ri2tJ8c0%$iMSGN7<kmve5WajWm2I8t>qG6~5P$e{0m=;Qp{JmA-k54OOt-
z+y<^X+YCMCAO?%#?<5;$UkJ`Cm}f_XA>+ug#_2Tau^D8cw-3%q#2trg0224<;UYzI
zkI@mI(a1qhsYC>-lWV2fUYB^=Svj|u7OJ}Mcpooe<7lp;1cL4$&y8jhM`Ng(<Dhe1
z&W0Z-`CQz(B&Zq782O(l|E{_f8eZtb)hj&Ek<Qp8J`jB_IRNIl07Ptwce4w<)tgK)
zvL`4XgE&H_?f`V|>Da`s2vYoyeiW0Bq32jrUH2MI;4ljB$R<!yx&Wb)4nd6~4qsDr
z17pr77Q?K?xaR~QIPH%3z!7nWsL$vnoL14wdAbXaFIGQ?)M?Mb5(*%SyYk{KZ~3*u
zvCK3-c5e6-2kouz4#QJpq0UYY;l^HFqxCv^KFF`3>+iV(9EC`GZ)V3)?NH{kV}bq6
z2EHdCIM_%92pThXrSQdxZ4DIA(fnst+XXo<hX)!SJmVdek@ZcEjoYy+i(DMudW!a-
zDa5=R6X+nVnty_RPN3)mV$IX<$QxFRLZVFE;#g~t|46Zq;xp@03JEeWcItg9QkK%9
zfC>R939?oHZ@T|cBMmy$%2dL{w;rKFXXD5EhpUq(<Ka0ed%mD;M9QeNcy#d`tA&o7
zf?@t*92%cgJUguD5ViR4CKHI9P#I(u6{ch9+DxIi@?O@-ofCpIWSo7u27k-kZu}7c
z$Im-q7&JCS=!rJtf*xX}l8S0!9ha|<9_9uK3ZT|H?`N_Ho(3=}*vGELo*(iB&GySg
z<s;=^_O;HV(ECj~_j~v#?}dv$3(+9>E>b>1BaSr+AjwnI7F8t3|FuqbBO8uL#1Dl<
zDk5!I;k9_g1o@%pb29))isY-znY|~;uxw1oQsWSs(J~V*o);s*Oy_b2G6!tPdnH?b
zV=9^BJf<bQhn|pl>`Yo^0fE<;+5eV6ZcEy5(*kK9+eOrVZyMv#nb&LKcu>K6jKfNk
zi?4^)bg?bo^6MsR$icEYPe5y68phKu9@=%z9Ko)191J>7kb%-W%9{;Qa#c>Ob<`jj
zd6ePRV~&kn9?vqJdMN8CJU}C3<}t<d9vCBg_=Du(j*)o6PtXw1=YK`zYh=DzhdMc~
zSAXf7&Qvjp)*C>f2p3+yPDdiWq=K3ZW7kSwtWC=mQ<IMB`%|98ONUCMLJI}B&J8KJ
zZGusCK}f*?3Vjc=(K!i0o<dtm9lCw=_k=B5f3=;!ep4+({q>qs6m?}8sl<DQ<KKtd
z7Upp793Ohhahp3RHKYo$`v{&l{a(gMToA@e&TE1O0MDx*kv7!Keg=Iw(Dz5i&C}7u
z_i1wCTT01#K<H)k&fEI=7&GvE`W$~(hyoZ|otjmO%bhLEPO8&>j(QO^KU~0x4X_vr
zM$oOv+lY5@@)Kw!g&C5^l(wWVm!0Ir5+|>%)Hkxmd!%FK#1GV;g$|>X2?rrS_vx%_
zJ|zG*mhv6nq0f({_(+tnN3@W!Je3*yWE!6Gp_PLs@!cQJI*0M{LR^G(|GEH6#yJ35
zOela2z0+--QT#v8Uw?eg&Z$5-H){30-^T|)EE+;xg6#W=BvPEvDwy4)=gIkqj%YUH
zpwR&sB^#E&^IU$jYUbwkB?=yA43~jAt7}<w8|{nawaLuW#5VJA4U~crVk6#S3(--d
z_wWSs>^tv5w_rbu@E51+Ge|*I0o75RpTWEFsW85yz}d-#^2nZeMX&`4@Sjd_JF=hE
zr2>Ywzyl#X++<jD=H6jt5xxJTKGoreh=YzE0U0wx262R8PJFyGnwOn5B8)9wBmU8J
z(a$jEBAt)O^<2sN%Q+A2+S$teVF23n6o+vLfb1JbJ~r!Z>ko@8lOVsAS4IdC0~A0I
zzU!4Y`bJ;GCcNWAkaI%HuHiPU@H*WD>Qw&pGyi`%IRGME|7?MH^a`tOSzQ}1%LS?h
zCJjAeW4U)66?y>bLlH{}g(f9Lb4`lb?CR~qW3&)NdlGS6Id&K%tBT|Jq^AVy@RSPM
zt}`|zHVoi+%J^UsU%gcv-a;}nxKL>zSgnwOi>nE)6D9?f)IX4!IZ78NH*Q^zUw?(s
zw%Y{NjB;)uBsj`~O>yEuR_iW^Z30jTo$BqZ^0sVI?4Ogj+CDzcI`sOM!<n?pTRr0>
zqVw9`O5Lx$FDUxxt*!8fjN5lq`T)9*)UA}=Fxe(EC-j5t)dsJDo+^q}hwToB#N_R0
zN|Jk$iY&yNpopQ}6ED4oYP^iA@$XBJb&qoaI52D`hW#qV-z>#$nAQgEC^1<kVQMRA
zpP_5&5RGFvsBuEz+zBOvx)!&h(Kw4Fh`5hy{s;+W8Pd<k+S1X^avU((qCh*@mk?`L
zmSf4%j)++QG0~nhlQB+{KXiVKwjZWtoJ^V4U(DMAKF34JeGJdH>s~$_nPd>GZ)~M@
z#?^c_=Mft@gx`<&$3ha}GsbP|<Qsb%q;=F#7x=C^_W>TwyvL#TiP7hX0GQ?i_^_nC
z9*u!qgCreny~7x1sI2o8dmmIBKM@bMHBmgUK4KiMQmUvXKk{KbE6x!2SvOq$z;xdp
z4Ss$-N=!lQw**JR*85n7kXuEy#aePq^u$7I<Z=ft9e7gSnn)0+-q3UF7X3w&^ST%w
zv#=SA##KgaO2uBc)t|BN5WU58%N>P3EhgAqp)KKAMxfr-ksE7|MB^9eG~zxoN@uQP
z(nU8nMw6qxc@zEycz4$@a7!3&TBhVwxY{Zm8RXHcu=0)Fjw#B=&iiOy@0P#NQ1fu)
zUf3h2n^lr{%rb=m89)db_sJuhVQHrhxVI$wTC+wj5rZGi{h;4CZW+-sx{k-pz1(<d
zn^*WgqE6bISNjOdD<kuY@;@A&JqYC)X+FkcfR;DB;~2-^{r0*7*}R~RAzRid<kRL9
z@}|%3Snv~gVwDrm<E<i=o)msMZVvNr=;!>YAGU#OinpaUCv+dvcuC$`=S2+_Y5xZA
z$JdU^&u>MP#v_V~@?8KIJpx@W<N5#og7V4qc_RRx>=2GDxI>F#_#VDz$|dEokT5ay
zo_NnnVYbJZ#|vNDB{~A(G4-6iC%vuLdLs?j^Q`w#qB%-hMbJKkiAM^0w_`e%+``lY
zZpXa7pPTL}xXWJNRcdEpYcj&u!B>ckQDNqN=en8ao}h{XYdcffeVGJNd)qWXYd(Hn
zU14`^c=OKERmWh-3cz#n<jo(ARYRi-8UZF9;^!y#JkIJly<{6CStKD;b=c&1J$%6^
zD{pbu_z9j-O?utH4PV2*Yvpp_eXKXw0VVKi>NwTy{p!91?|<3C&M=oiM`4v50Q@e^
zW2X1O+pQ`s*INIP0YasolgueaQ<OP_=ju9ym#<AiBQ}5n>5QxJN<;B2l&XFm<RUVg
zm2<o;6+?qjF$hXUc4jyq$zKIs27|dfoRGZ7^OD|6)OH5*${K;C(oG5Byn7L8L-H2m
zkBT9-xG9JDOy6%vk-rYc7-d;&0OU3>!SmucgktpQ2uyQr9JZDx6tdK!a?lfaDg!3c
zCV4uqWzsrUE;oJ5DHm7oR&Ih5X_QmojZvV-$<7e5_FKn1%!w6N?)VVu%#-MIHUMlW
zfFFOR^{Fr@jEAM`?R;O6fqBBcJg*;F5X&D=;K!K>i`NsJt5CW{8!0bW6MQO<Zd<Ej
zRCrIsYV!H&0Gnxjp;%HFXBKtJ61!=S9@$W)LIivap|5IVCZV)=HJk9niUS-GhKe{}
z50nuS)Yx8GgjZnV@?|O+!$Y4-)$mZq8U=(Z`0i)?DHv-(oBMq{t9vPyQYnX9f7AP+
zpsR&m^fF-vUb<Ev>Sb~4@j3sc`rpVaLu;+PuMXEBFT=ea$F@qF$2rx5o<OxdOURuR
zbTa!=&2X}<7dUWtsGNf$*a0&VJ}bj$ni;_J_TwD5+He{q0ngQIUXz-Cb?(mMS{g()
z@(5q1j~^mxyR6UqxINKl#A_OFE4&IPD0QtPRat|k!_r96H!-nty^&Ic&~^cH2jQ2E
z3M@?5IgSQy-8aL2+xQcp0E`^qJ-);9yh?Sy0gmJu%}5^bpu&1>c|HqX7DlXY$|kI9
zY@g%`G(;fWyd4?HzXRV3ilIS8>@AJz{S&-FeB#EeTyQOu_b)Jj3gzF+Q$yis=APoI
z%D6oX?HtC0E8|4J)_86~NVX$H2kVHAWSkk@&M=Y<QRI&N63QKf{sdW|5b~FLqZOBo
zjY2U=jw88lYtM!Jv&`TALu*x+3+4x1*K#b$`vS?Zp!p7EzJtT%i5f$8N+FLlmx$j`
zVIG1jKhsx<?1v`z<?S+`5Phy80I}<9=P!<7v;FuH*%%3LnB0jVe)*T^NqAP~AFGGD
zwqAmhe1MUFK6u$SJ!>#}n~Bw9a<U2e!2d<MJvUZ;HE|g#h%S`5bWcCYVe|BRp#muE
zxTij7n#>PQB<NUqS<wf@Soh>@^>hYY60>p{qGhu(9D}kxas~bd9w(FhZ9-n?#}a7+
z--H)r!)k`!lhpX`L<7u-yu(g5_i3ogV-CmX&z|SntItt#5ba@%KG}CoFOav{sl8Bx
zv@(kN1#JnN2YnOxz3}slV2Q@-@~_p0@2opTDTUG4>l19q+j&&NtIMv{DPPown+M0C
zIyYHqJQfndgVXnHbCOS#B_pQWHBRtJNFJm7!(Z}3<1Q%ALBkqz3Q0Ym+<z~}F7P2q
z?@`#7wlI1$CHhQ+n>pRN&3{@0BXWG);yt~jh5ezNGD)i-KSo-{UdRG?1kny_hC;-6
z4tvHERNle(j0gZOO665(8r5gEC6?vah(~KQ_S^4F%#B^i_?P<Hjp^lvhhbOuE_Wkc
zAMFXfD3C8Dk_~^#^tl@V(zyVR#sYzz&|yl-K9Jx~*O1Bf#m{k7N|=@W04&7->30qH
z7`p`5Nl@Ur#Rn?bpVf6oJ=;CZoBJNl-_6p^Kfz%%p6+#rzYvPU8%~!gAQLg%ynCQ#
zz-_rH^gIDkB0)3`p+#5!!`Ezu>BoposTd~$hSy=i^9ei@Xl-Ge!|E*7w5o5jp+sC9
zDx)R|6OJ<;-2>k0p3Rwy^?x7`vtiA9S;zZNo<}zspjsn>yd!sJ=ZXi<?xhkAqP!@c
z;wH#5#Na6bkiEa$N^IuQ+AeuL_>61E3$1v=2r0Bgx0Bb#%HxxvNB%TQycfxkJ}-@p
zb7c%LGrdCD==v~robt4cj5B-lp^%U&PsIRuKk&G{Ct{q&6NwySVwVscVwTp%TJ3pd
zuD2W>ZgboJT5cS(Hk>`Lw1s;Y9E(P%IvKJSIcd}$b35x)65Y;%Wx<mJz1KmRLbE=x
zuh;)!&ID5jSAhd32ho)s5(*~f*)Y`BUw&l)L;~fn+ewar%o{kl2|@>x7s})STR^10
zpqo5L-bic|-RZTl;v7_tpE9<1rYaZ&lfI2NrF2-1dS?3E13oJM80-a~rT71H4*@9D
zJ(@A3D5LyWNMxO4bxzH>w^e{*l_;{h8^vP;!%9@#oiP3;Yjjt%Sb~3`ZzQ_DdVfji
zO+w<_=SJ|K6KJZ$ip_Pr%X#<1_<j(GSlHq&R$>|$Z7f`{E0w~6kC6Y-@kV-x_FC6h
zye>uWR1fU&+HB7R<KZdoQHO*Atp`b0UglbzRA$9IDC-M0_G*b!aLW!^9*!B313@++
z9onFSf7|oe?c%#$Ukk>e5orULHm0PuV!bBohpuq6dLl#&d(u$35l}(jI3cRYAPg>J
z^pfCV_jx??5!#KO@~l%3qmPhrF6!+!5bjd0E3a4Qd3b%Y$B2Ee8(@twNafk!Hod++
ziXM-0Dh$FpW}$5^dFv5=TNw-Z&BA0-_LH`ckLEb=Ox~}Grx(Vi4LYwqT1zxXVDAbc
z@3@Xexlbq*u#Hs&G0%z{+0z(Gvq#Z~!3&L0ERoPA!l49QybMq?TxxM*o=3n{R9yon
zh2M0=pBzjZ(jaq8a7_&axNkhA#uQff^|MbP{0$7JFJBtZBUt}-4MS$34m5r#e?t!w
zP-t86Jlch@4lkqw$GiR2?xgy5jz*l=-<7xsH!g=MKDzyG!m$&PbxaSIz1jsOUzbZ~
z81O$ZeeMW=ZDRbyvn))L3fJljCK+0}^AoY!@M>`-NDU|!SHUJoTrS*@x;Oeg>692T
z<RZE{&rFH}CuLVnWc#nx`SF%A*;rSGjG+d<tG;(z&lr-j7VwYENt`L_3Yy+jc0B*%
zri`n_uM>>{qp9I~=bW~XT5SK)>|Z$IXZJ8CLPv~Z<aujn!x6Kj`mrTV72d;O?EB**
z&e%`?;M^X-uf_aX=)76c)4i7`67el>jz$NMl94h~H~wvvx`rb!4n4i6Zrv*$A0yOu
zXER@*UG<L`j6gbB!^;XSL1h=3&>l|GRfl{4LNQ$WXdwW%w_A^-^E}O|X@n7WfAghn
zY;c~j1OJHAX0L<bOwtLt+ciyy#vPJpj1;J-;B)kD=s?)Ym+qd(EQSw`Xj$?&M5eVx
z{`gSFHH{oA*FV$Pf1-~oMSQ`8%3~A)5D~%T$g2BL&+M^f6{E2-QIaQ3!^>yy_c>BV
z!5?}JuZjAuF>B4lDh=N-8Rs>u;$&7b6yR1Ne@?edmH!1=7n*Y$m3S==mi}I}d<sCa
ze2D-U85b=?c&Yz&w>M8%x+~e;vPhW*&d#O4)gG(&EU0wEBlFYPF$Ce@p_3R9BdP)K
zx8zY2CxyB^1AeY)CJghMX#uk3+DUCs>XCK_M;YSqpB)6<8uhWxB=M%Suy=WKVAi2v
zT*|U$mfgC9_{=S3Wnw8q@yKvYp8gMVJl*4H*}*;*+O<pA&D_a1@JCEaE?EHHj%Z#i
zj=g6nzE}_1hy2OUpwB)808juwKDa-x#DQs|)$+cY9Tv)tvPTbNR~0PCXDYV5uFvy`
zh7i_(!x-x#)RpRAH>~1(N@pmYA^*W5GTe|o0Tqu^(yn|B-J@H@f*Um9j3qX25CL@b
z70Ad8Rhw9*U07uCAfIfRA3AW(ohJm@E2JP{Ghs_W%*j|BJW_zQSAdq6i>(G{6OxcV
z8H!WiJMiMCGgQan06lZL3<D{bjzW?9O|H3m=4<E6%*Q<`phw~a2f&+pF|Zb8gC_^T
z5Ww>iB1z~QDUgf%ZT=wtWX?DUSu*j96I8~bH4qKO%5@E+RL7YbVrD~QWQEpfrP2DR
z*_khHR(~PL(Re#y1Bfc2G1A_j^2tOX4S3vu{Cpcek~s`v--|53HGFSJB^Dx{bG_Vk
z$c6AaN|c0=2L`NB<VeAgKyfkyQ~^+Dz0}JINRSi_3CFFjBY6^lckExrD7KPR_z?2r
zKu8JAUBU0Df7KcgR2({8UgNPA%cS$ak@LvSmx3|>jTclz&UR#^tp)cLUS@j#ndYIv
z5H_q8?~k6n9H;0Mp<vJM{7Ldd>~pV;R(TJbx+KF&O<nW{>eP)>zqF%1NAzYV1$yC!
zV(bS*r}l7|#=|!Pd;#A7FUA1y7BmYz$;Ojy6lRrHC;)w&2$%E7OCpjaj1?TVq1#h!
z^^Lb}$sY}hx08x7!0dy82eX|IZ)5e9B4HZoe@4BZg<)chS_O-==e99QK-A39mx<%T
z;>zqZv*QEBvr}i66pjo$SP4EZbXmoZ6N&r`SdTe8p31h(hvQ#Ckx@z!=lkG`xKYdX
zb%qR+uER5g4)jMY%z2Ty<+rp$-$fF=){i||q7^uO<ESG=8H0{G3ppTtDuIR$>cm?H
z#X#>e>fkVl(kV)nBoy}Peluy3<KFv)n9!ow>YgQEBtB%$sCF{Li~eO>8yJV^8W@a-
z*P<si3bz^?`;s9t3B@tYCGgDskonWLrm(-Qp{#sdf%Av%NuXd$GvgoRBMO_>F}gVS
zZ~Y_y9FuT-Mw!GHWw`X-H6U*c(D5)dbi#L?@2MvgmXEq(omiI5C?MoeUnZ<y<=Apn
zo{Uj9iuzf|5z$z!IgP@6DHCTymRyIKHYx%cr<;d@!L^`{<1QbyK}99-rZU{VYQxMf
zm0PNQ`(Q%4V-PAlH!R=&w#@|hf`>XT({<2&=JX|n0Q^KEurem^T=`_|-)<PD<r?)*
zx!07)*7i&>%#g@H?<P3&uaj({96N@3cI1!8R}8_COWE=B6h}V}7L&jQl^NwReuSZd
zajI>x;R?$$ZZ0sNB4xza@iPdT%X4UD9zh3EMsTzUm;Y~>aWRX0mL7po$gSe)3kfDJ
zy@_e1?*<F&q$4mh$*$aCY*0Km2T;pNfb;3*{L_MvvZvHrUfU?-A|t}W9x8yY*N2_s
zmgHD;p}Bhv#M;&#x5y5g;L=l+aKt}vJJuRo@D|DfMaVTo#9)SS&-?3*wMGb3_T?`q
z7xGW<;Dyo&Hyo7reh1{0no=t`-7ikq`*Qmdg?0hbkmh!|N*&fh$Xbl}5NYNO0j@hP
zEDdHn4rQHnuP571LE$m;K|4S6JV>CFQ~kA*hwet8w{^^?4b433n)>iL-rSi(NG`yr
zSeYZid?0zx0z+!$9A0qEbyk(9!`rs-0u2#U&yYn~hUmPD{%MqeCu{KVz=G5~Q=ht}
z`Kgf?Q>O*sOKh@7;~_iX_J_#Z1liNDFkrM-ZpU4!3a`z0+%t7`W5E4!{~{~^Uy=c!
z+JeJ)qBi3O6aDs70b6qO9-pPi<G9*0Siit7z{y`z)S;_=!}TEP^<T5B`8&aWt3<>A
zPMEPQ3=Ha<#%Kyd{5URenyp&Z>sr;hkMmXGtKwK9xz!;WAgg~I*+dZo_ymq*V0oT`
zI5XrZ#m<%?0oqqkv_Eqc=URmX^={F)pOtKLVN;E*?Z*d?`U5y2`_s|4uJ7tfWa6tf
zE?@|#>s1=UR0Y%Z8^sgqb<1<kZ;UB3{j<lIE{(+fBm;rbSs>Zo_CFE(Qb`M{QvS5?
zR&UjL@8KbQc=q5iXFLZmUHODaRKWl3nfn=s#E~V1&>Zfjg}q44ae<DaH5OP4(tF;(
zYg%td_xts&|HJ)v(b+JP(MHam6-R;lyfcSHZXYyWM|@9{XPa~P3l`!AM(f)5Y`9@m
zR(;kaJRZH?)`xoDxZ|`h&f9M@S#Bf~!WiqZvZ0p`VG7wr17}-^6rSv-`noU{1P0c<
z#11r?+i3CMD-*ho*!%+jQat-v`l3PrqFewKLJ}Vn$j?VNB52qW>>s~z02Qog303iq
z@uN7aYS;q726PYCvmb4`Xjsq&esxdB4zg8$dlL`tIEpzXdNxFIWE4(}S&x(Rn153=
z6x2&R<M1L4Ka%CzK*BLwx{3(7q1$j89>$NF>#KAqOi~{2vc&K?`z;(t1|b3U55$k-
zv%*sk@Jodnz%uA9t^$%2SW(#_VT#c_Fy18eJ)&>|1^=gUdM2=j>ki`6?`I$sbQnbW
zK;aVA8^S%hb<0iW2N<F@%B^-f3hV!lDF=^*WA^48d6vjcz~8t3-LDc-PfM&_;2z2#
z%F0-8>%tEQC^-ahPs1g&I!SbSk{DIIv0iJ!kg1ewJ5CU{JT#JZ42G8^*TnZLB|k)D
z;d<vIB5ULRHYL5b{iw}k=Pn>FJm@)n4q@p8sWxk)8$gYb1mpx-1BiO@i~!VEdMv^m
z06>I16XQ)DPqlCA@y&!G-s)L$DcKHb6;0(I3%#>F8k_J)OnF?bmID#m%vEX`gmM5i
zC(bw@RNcpf(%HN|m3>M%M51xD*J;aSyr7ArEQos!!@&7J!)lg>Cb{NDbEG0(>SrxE
zkMcFiI=Ik0SC@Xqt4Doj*`rp1FAIeM4zwe5So9Gp^yv!J_(fg5t#ciMI(i@combe$
z`r7zntOQ?_0U#p(yx4Xx8IN*Q@a~J7t|)29Jrc`q5cLsa$~P;-j+hCpheRA6$O_hg
z&^8HzK)IYLT+Ek!w7}@IiGZ?XlZYtAfX*P_;N|Um{Ueom8>7|dKy-=#ZvZY77q%Z2
zE2igyiKTo`Qi~6hI^`DT#R{V&`)Xkd6@Zo$CW@;>BSDzML0ZZ51^I4V1|J0lcd!p(
zBFD3iA1iT^q)^T<naKN2%>LsFCgL+|?ibppMK3wZJGw!%|1iwAf~`e-c4};pW$9dO
zCYEEH@KOYxF<+`Ouat<o0l`=Sa1lMvI7C8}j)T=}2fmv<!Q0=;b-m}wdi&#G)C<-q
zmxFnsmDv=55pueZB=RTBV#`MgY<xzxf7#7h(Tp9D(uv=-q0%Fx{Igp?^IK<~EDl8~
zBtzu@FvT#@=`%B#sW2$FJ+Vzo<qr)lBLsjpbdPwP7ypd!QgwY9k1n5Ssat^uKqK%@
z=I4bZ*A!YXrM#Uwy>_p^BAbH<NjVAXkA;MYx;Qw|NJi`8f8(XFCcVBBIW$Dy<HrPF
zg}qlg7jAjPNrsLZpY{6Txzc3A%=&fqk1v(Js1Sfg8wy|_>ElVZ$u?vZ%3_%z@UG0u
zUVUb(j_u2Ard0?~mPHTNk9D?<;Zro1J^RdNPpaXpy?j}Dt%g?N9qj6;Lcef6{ORO0
zyKVb>Ol`Z8x}f0-mCE(jRb_UwE^9RkqbUX2pR?fpXV8rI>9QW}hIb;9ba<9my#3{{
zr6iFf_#EiqnzEK!kAY{U+Hsz=cDD|>4-8+8^!_pCMhE(rG)DSoYNq(}agzdaouo_-
zpjvQtdm!naHH=_LCWDOeCOXap4fW5ig^}`4CHhC-xe@*p@BZzB%LHfD?-<L%P>cgI
zz=u?jz}fa*qRDCwsOcDJG%c<SIIU@zphJb7^^dD^&qA#5dr~Aj%;bs5Z+m<}-v5nW
z2!Ne%|1^!VJ5x4P;Wd#K*hs!&C|1?Po2N<_;@d+@Z}izC_MnY6Y$tZ}5Zw}k^TwNj
zfs;0CZyl2Q`#B^7%OiaMdXr9KNJM7F3qOlkJbheTudBAJys8I<g2-Dn@}hWNGV86B
z<=y*>-hV;LE9jvf5H`G)A-pw#kYxu&Q|5$*Osdcjk4pQ1!(<QMc8pg_3d(5_qR-!Q
zJ!!?(fpeF??Y0n;oLnia?1{A%d&1`H!5<sfTguMuF1RUQ>gCpuKn<ZR$vrkMx91Qv
zl|lsGgoxh-f+OuqtO(MEB*N7c&w}x$BjAh&k!5Bd)*p?}2o8NJO+5e16Yp>Dj+uFp
zqcy={5nzz?#@$0uc`jfPY6AxFik9gfXv~RHUki@dOpIN|`=3?*z4BszbI>6Y3SH&F
z?CSJ>r`)sRXL=dMAA^L!k?{-Vhk9QbgYXoja&n72o=)aOc}&*?B3@d=z0WJ(i9BN+
zCO6&wOZ|i>8!dAP9;7P_LOHc8*D8u}hO|~y7@@>)h@$ehZkFUNf!=j(ooEEk^jQ*7
zriiI6p8(u$M}LaYjVMIpW`FqA2?za>=mRaQ4}=0Ji6>+N5<mG;GD%5t(Rd3{`3_}y
z0U4q{o519+=2h>8_dM;)Rhe0=fcxs;v^)CvfrLHN<bX)n-%dtq7_<bE0+h?3Em^!}
zTz0F9AYtnI6O{-`o|P=Tw~;i>JSaT(%YNudUGp}sj%T!6_uG7dIib-a(dKk!ILlko
zZBtg;=dB;`^C5K%1sx~fl>aiFkK6E$eMGgqhe+WH%sUYm(fq=sUzWFd<wu_#A(;6O
znNx9(RN4LEe_{K9b4S1T_FJ~!td%6w50KPqiJwgflMANGFBphM%Ceg{k@hf@FP;)A
z21@1VL>nqy4y=id$Y;<}c*m@+9c@@A%Uq6olO$(yA#$iG@^HQ|d7arwOB5NEBA36h
z7WzDDzq9uJZGJ>;xu+~)DlsA%!zy2m*M+J7D&Jvf)CqsgVABennUn8(XjsPr0ugB9
zXt`d#FnS>X-jg^f1;todf6>%R*B-HgPgN~gxfqcXb365jINpGMOQ9N$l3wS}Waa~B
zsV5-G`+YoOzZ7^mFxz{1R`%OtATWnR>LhF&mGjQuei!&8hAT(b+j4Wg>RCK1QcAdu
z_H<aKVkJXgUpFD#MR<(cWfVZI-u#v^Ep*xkf>k~y2K;)__jU`^0K})GC(ZNzmM{#3
z-pH<qQr~qOr}`w<rG&jS;=lbq8TW6A?@%H-@`^l}C_Z$fOl)#!0YE~dwlboKn14pw
zY-=i?za&I~ys??aB*?mbob{+-`(ZiGU89U{4q^)D3YP5N(oTInl83bXSA522!rTd&
z$cz(@Pt|A5hq;DI`R>Wgl0SFpUR-vx-z_vgo(;$-BN+q?NqO(ON@n^I$dM6kh>_hn
zj`Y8<rSQ7z2!i&Z$#B?c`?Kv!#=+CZR3iiMx6$Y8e%X0xjg5F=D`2V<0GrLJK=}Zi
zazcc^UcPktk_`avi2!}#+>dP(J7Aa<Nd*Up=wp)<6YdNFuf<uh%|@UZbrV=0Qz)fX
zMC1<%Zg`oB_b~SRGm<_6{LE1{w~c)3hx_JIL~7?<llQ6izwWPrhk3S>tCF;>2&V7V
zH%J`A?*>r43cD?br4C^yZno+B6NIcp@~mmw&OHtJ!s{X-m@Yru>}h<Z;Hs%8glaAz
zyjeBEbs6EVR$`!pM`)JWn9F$A+uu-8h2%|09m033p)9R0Sn1R2h?Hqi;M<1~A}b#q
z^iyQ~q)cVb^S<$={{rNzZrihELFlttQLoRNAXSx;#heYM`ar>gEc2WQ)$6C0NgT~%
zqC_*8qKC6y?-A?ezksF+lW-1sEhx4G|5SC6QAk6)Db`=Wx`hsZo`#a)mwOV|&E_vA
zXVm#=^fQQTYY(`FpkbzS17(lSNVj=A`nn$RzGGwJ^(!0KoJHx)fy&-IBOWL+sxBH^
z(Lc~P?w$k&F<eJ9#|7LOd8@ORnK~WFI=mRHD@DBEW5s{I=al~@^K1-aL!*srWr{?K
zDV+S%I-2wPl-m<@rYAWFC&3^r6eV(!FX#@~&4TBxyi?X-n-g1kmV2>pqg*t&E^uyV
z$TK?Zq<TJ1H3H~)BMko6zFmKb-v5n0P3-71Ljlg%$Cr}+joczIQAZn{bH1`EBAOg1
zo5|!dpC1v|%8ebdSWK!^hT)|Cs<6xYFU6U(r*W;ZjucsC+@C0&@9|R>{|xjmTQ6kn
zrk2hkf?w|Sgo$j{VMg-($|uh4$6(ISkPz;D94<$oa*ui()X!@c-w)f}_Ju4mO6?)L
zmLqlfTjc}La;}2uhh=r=mxr~1vl$pXNCrKdg=;t-vTT?fuaghLAJ0l$x5^J!b0*B|
zr<_JM6om2ssH;4~e0tIV4UlM6>5wq=qATra=D6Gi#xCPRo|8FAWk>7U$hViC#=Xu^
z{ykE8F;XEdBi5xAcSetbAz=^VR?Ug-j5?6l?88tX$U5ub@r5P+L;8{t0K2`=LxEXa
z$2I|599<$4VicKW`wW&^zM(C<$_gu>ax-tUN<bn6R>#WUJ(|+`9>pMe%!_|cgoe03
zam*ISRTj1HYme)p3`KBh)PRB&TQ4IOvx@xCudJ-ZB5N!^Z9PA92DAJ2H1wH1B%8_E
z@t5UnS85^%3BY5{1{8UR1x=I(k&LO?$yF=O4kr^JwJYW`BROj2?w(5tw)C-1dwJ9G
z<F0DVzIVK@ZetDh*Z7|^1m+hzAu=mT++@-*nWIB~pyQR=(M~F1kVyIjd_a52=zh5_
zTz=(;yYJYOVfD@~h8hR%Kcft)BU8>Jku;O_g|;sVb|Q@^d>kSqscko`^3Mj)u8`<)
z6R0;>$5ApnLi>={ZkFUz_suk!74a{RcY!>rA>(0vC-GL-gDVP1MO`16XpXIgF|S1)
zp_f=T)7MV-M8i7<@8{k^@3K}(GX18;W12KDI&xE7>#oplFd8UK+L?O4^BN*#4JJ0l
zy~ui(CHle`UbLNB&3!jHAfh=C;e&>0IOeomA-NFW`C607jgGbK)Iua8MA@^9nri)S
z<i0PiOGt$3^8HJ|kEkq8Y>n#E&br8H7smOkql=r|S7lK79<>lwJJ?f`@_dTNok_6F
z+;;J(#>*=V;G>&yo=<m$0yx?uIs-a4L$@s?MNnh~SH3BFRzi;fipkYMW_gF%BeS-o
zV$>5J5`6Zf&Bj!+q`lrsWw@b_MqZ&ft$v|BKRMz>J(Kqk<jNUVk1(zoIlze{i56>>
zljF6jc7!dCC(x`LbYusto23{^H)KG2miy<F<sQ!H_SfHS_mO1`ZKiz7gE1Q}4a&Zo
zRVMY3szd?ug}up>As8k(6KhCRZb+t_Q-Z=K$kIEv5P>xh>UePpGzIqS4i;G+AHK<x
zgfmjqy?$vjY3aJr^atbe{j%jwxL+PE1Z#`?-~QQ0lmW(5Xj&|?r}SsMbu$_%iSE#^
z@Y;dVrW%PHj~9N0-?oLbl|F3-8dv#;W#Ek^8Bj1$pdbMem-FF)N7@M`r1JnOSH{Je
z$buC*ve$IIP~SuL{zFt5pr_R@S7nY2ZdHs!naH4A`?F-6p)vH_%!73*!Z8qyifxIH
z^3)?}qK#)ewI<aSbzgFeo~iuf1OfOu9XULl69dmo;aP$4u@?fFZ-(I1asJBaY|s`w
z>}t@-5g0Wow&KQfPe)6hOgH`RlU2|5tLx=)|8l+m8@&(!JCcm8cuT@KGDDk0QWJzB
zCej>nb*(YM-Ds$e;(>Ui8hhC@_ZM?)O9p}##v1-Th%o~TA|7iZ%!tC0ue@q0g~023
zih->+s#7={59VAt*=me&bTY{bS#dAM8mzsQ=mojJu~()Y5R%wpEEqqH9etBZtBv;z
zEXZ^;rL!3gy~|~Ax{7jEU+Y9le!ZKqfnqAF=KvLD_Jn|E5IrGWP9@p%6#s5NcSyyr
z@-w(Lj72S!;l>$j1(L@q0-CVjT%NRz-M#mB>c}41KwMtFoJB;Dpx5U0br9Q%M$GOo
zMgyqya(OvW`hEZ0^Il2yFq$J6F{vQD2(42gBM*c+j#G3zOz8ceksfb3)|3kX>Q%Hn
z)<|tRpn{;iVYQeVH}sS#!?JKvGS91bcqo*YpYpJ1#Ei>x^=FkNGE3svvde-Zd2<q0
zEgZ+`=CGloQ<X>iQ4)Q1ULjC`ZJbbEAgakMgSCOO2FU~gt1`&Nz(US4iAEG6#2FTw
zK{EEv=^q=f5$R+mM&;4iq2UFOs!huzxR@q6ZZPJbuK^NC=1))x9vW|o$XD-gs+>US
zG$YW(RoeaaB9KtCkbx$~Qf?P5&5n*#T$La8qT3K@Sf0%qfe`G0yom05p_?eb={Y=W
z&qE1N!dbQdQEgR3=WjlLQ_eztpOSa(F#^owh$HB;zNx{Hkxl;NQ4Df*c+R>nm0k#d
zN<Xn`g->_zZcnH`J9UU@|01pJyt($Bl%L^6PC^%1;U^xn=!K&AywEG)k#Fkd#Y_(0
zvz7Q$$S7;gsKUx->`5lUGfL{`x7W*xFc4*U7<Ili^0e;*$Rertx6orxRh&CU=(+aS
z5@v=Sl%+Khb+HmiT`vq2U8Qg|^gDs@=GM~&_|)V7Q0I8&8f#;Th$wG=uC_%x1|x5+
zOd;6IbdL$~J-!*g=QUW@TB&g$o!ZfMO-Yf-Tn%0=)Ta)@gPMuZ8>u7bMz0sy!Un&3
zwss!F@la(!0j-EOsr-v7bf}xEO(#2BqWg(Rr)8LjRa}Z<6CGKaA>rKxBLOMmxe4x<
z8S!B6F<!e?amrG-HWmo$5T5L8wTt7b6)$N(<Nq)p6hMmBU&X+)b)VN&gQ-ENjt=pU
z%cBugT;p*@uIbV7eQe187S`YLp1M6sKMeK*cV_P4D_Y<O*<CCDrCpjAciIhY65+V1
zoxCDc{!gpUX`uZzhI8PAkxtj<<>T@A;`QGb0$?`5oJqDqWG$X2+G<JU%EzuK>J7le
z)-`Ealxy5xuw1232+tV2h3hp{Fg~tNJTEQAOUnNa3KEMap4*@B49Th*KstU4pL4uY
zVrVo(%+UqMZ4;`Xm2{4O>2bSVDH8SJMk82cPyP~lRqi`t_DWr-+zhggXV1nqh84W0
zdrx(!7r!b{Ho_T&1_Ex}ct7i7zEUELc2o|$ZQl50(M6s>b94=uxW2uMaX`g?LjB7>
zU-cdFzIGA^6)Bz(h}TCGS$U5CIx(^sV_OPYvqF6>>!D+1rQN4>tB)3>{xV*Eit~@=
zzflwi>&o+dfY3x^NM2(y0(fVuqqo!iU=au05fZwb3}KVJEu_FmX$>zHapNLC^d87)
zkB$TwkzO~#(CB2GUJel;4|L?Y@+-5EP!mt4=&QTrJzNG*Fa4rY5*#C?Hga>kt>Zba
zecofo+r{DjNjX^X9%U*w3QPncKbclqsfZ`*^_E%I<As6nZAZHBwQ+d1i*IdD+K@AZ
z3f1dDRTUau+RGq+tvvG@z83Fc3bnG@m(OrEVEy`9L?U;^VE#thxG`)7{Vet{a4hjw
zDV%_G(vx-!Y1EvQ=~tYA0(sH?3%lD%x{>>^y_9@3b!6=qLSMWEWOyRL*_}PLF0!_r
zqtW_2qmD&7v8s<hVUNU#Dg|TN`WnJOoTg45m3PBm0Bkl(qO9&FM@iB4vQ*~kXOl6s
zt<m8l7~hGcL26LSglDK{gyrlB9BNkQQLhT+060s~4XPOm-g(K2>9BD1jInwa?HC%}
z-xUc1p#%xa8becLtz%3aPB@HF-hm$Ut7*9*KB4hnpd}?`x`ZU}i;DC3MX~;aoh7r5
zT?6SG$%892TQ8a9xmjA`ej|f{L)ri)Z|Kh+E-p`7pJZjzJwDT?q74U0K)&S6{~t`$
z`=CVdk;scOqn%9Sv5vKDf3zt+_jvp+k)=|`3Q}|zHuHFs*_BH1^FB1qZq+@D<s)9l
zq%h9?YkI!eyH_VpZMs>TH6T4;Y53|Wx!mP#>001%aonn=BdQF0K0Xy=^KFL^b>=3{
z^M3oQ4LEYZxLXnGtQSa#H+C&PCO=1<U3u{SUM#yu#@kLY#ZMv(^Ke!jA#C&*hsFUl
zuU$pr%(*`hL<zDyQ&P>ljqWQ7kr{xb*rhOpJagxB14<j3y}t0YJg1CA7j|ANP>Pg$
z!L95X?(SO_d9D1cC@Jqt<RhK%%ll~kjDF{&577IskN_*r0*jziJTq8YUhN`FLqjH=
zYS`)xEw7i|VIxm8UU|wtz9Hp#AYNHnQSyCm%7`1SDNec<grwzK3-dgkP9IcF_z3js
zngtX9W!YU06H3G<*+gUfMWSFw<Oo}#P~>rBe4fDw&1&okavD;^L1@kk&wfCnQ!CW+
z;FKK&vagZ|x|71c?OXqNKUXGolz%K+A%K&tvEnrw6ka8ZK|{b2MTW7cPt(xYp7zmX
z=cRTR$v{>|LO-J(dqI&!mp;}3&<&XwJ^Fhc#TaM0p5BXNJ=X;cN;XCtt=VuB>w%!o
zE)5gO*<@T968TCNY?xI@qDs)MNCoIPGiryp+}QkzYp_FPCj*GNJ#M%9+~7EcvPW<>
zcfZF7HaYCiy*8O017#A(DM%@mqTX|D0!}Ukm(+ZyyNyN7=@0-fL;%O!JN4t4`G9ae
z`bM={D%|ga<dG{1luj0mMzjqY9)?c^XaVd`ed3T8#wZj~=8bAevB6r74~EjcInf$v
zp)-8cMuvwv*CM%amIH-I<f$<sW_`ZnIvt(R;nicl5BQ~T1gNXkHR@dUIokHb`|pwa
z_Ijzkx#^zdGuTT^ekiq%iG<Nw_Hfo`?!{xd#N$_09Gsk(kf6gx0R1?=&bIxw0x$1>
zr&kUD-w5#Im*s59DjqY-G`bWMXSPK_mOj(7^jGK<zCc8=a_&2*vJ|(ekAHDvD+6XH
zVr(CSSm7G@YTt|R%c!DJoGh02<Akc0>$K=VWZq5;SZE37xGl$;4oahY1YK)OOb3p+
zY(f%L=_bQcv6fS7?<`X?4vrVUx|$7Enzds}7zaGzrP`?E+$IljFArysLmAI-g2)Q&
z`<u?>3`PLVvmx>X2(Ju`Z)>B@q58kfJg!Qm9XlDnH-{ga`~tNS_Z~DdtX2=7JgQF#
zJJ`37w6b2Ok%Dm`FQXQ=gt1k&BeVN2C>ON;bzO9?{may-lUUlNbUtP#a|U`u-mjvJ
z{2SH$45S#gYYwjzD`gNGMf{U$Wg~zt)NUI7Cu0@lxzKI>hjHZ*0so8gaA<{{PXLIz
zoU_g6c^=Q5AkTowZxYx#JQ;%bqSjxWd=V<4tn$R$L=riL0-(BNz5%(9A;Yaptj`N~
zZ#+m8qd)Z1tDFmD(wXt%GA59JWB3kq;)yZB_(m1HEkwoAH}V;MN&sHd#sqB?6JrV|
zexR7gQlpok?%MO5n2htDQ5xln%Q&yekY=EZqdZm1U5JVZWPp*O(LaGm@<~2TKsj^D
z7;MI7Ew5iD??HQ|Z^3b7G^fvC2(xKSOuaLTD&7*GI(b$4$MWU>nQ!Rxr<VcXB)aK@
zGn2$;wM<`R2ua3;=_O+sds<{-G2xksHcBHqsiOrIxt@W*Fd&Ep+w$N1qF0HshE(o1
zH@{c5dEdgsR;%P$dD~y1gc~bOmugT6@itDcey&Xm&O&%<^=pHHV*EqppP4EgyD}p3
zTrKqN?#*|w`3pr}C(_eDH<TZpaj3hh8K<lW>Iwrw)^$9RbTp(&oL0_3Pw%karL~x2
zx5^;t;{niy9~#L9HY*UDQK}20TiZC%nM%gTMgr@N$*x2FoHh!Tze&YEq_Y)%wLFLC
z)=x+n)4cA&AD$3=>3$Jvb)v;)>=CD*aJYpv=4mCC#{;~eTG-X01jml5$_2*K5uENl
z@5n!Ayi9^Zr$WsW>)N23bE5!mVFvN>i20kI8$+axC+~o9{dAANau)FR#b4&MGBvz$
z@sdk=2@~xRZbqeRhD%fk>*)aUIp@V3r4N;Vp@>3a;Xa?N<3aP<$6)R6UT1{pd?HPg
z)HTB|Ddcob%Uki|L2_URDIi80u(1FE002ouK~!Z*Za{Q=Pp)~HD*w`Uq<A>-2w`EE
z5G)`%Vex!}b!Y)Nxt-6SULgSQln`*#^HT^SE=;16_eHNxBard+wQ3DNSYhG~B0Ic4
z@TgF8&*T+8Ogq_0iP(P+SzynXS6Ipbj+SS%_j=B13hH>Yb90k{)yzq8H$O(?`J&Bq
zbidRwS)){bWobt325otQ;^9z^GiW7I<M0(^?^UIIprDjT9#3S5dAc5a1rj<l=O~{+
z=NLmJ62l_Zu2Tg8tl%9z5jAHNqWIN>@(**!oNl9NeEjGd?LKPp4Dz<4$3T_{ltvfY
zKbhzH867e*T+b6aW)Nsj8do66QI{z0xxMsu;_p;pqon*Jx!Xh3WvFY?I@X2=J$8IO
zH;lBNmiMhu7w=_VGhb2(_dVt)+MV2aR7QjvI)dU%=<qyLittF)b$YTQzTcqm|33Fc
zK7D#203ynG@PXWtljE_rvwF$nP~;M@1R4ezt;NOwydz%3bL?=I9uqv{mmy%_F`Y3m
zf|z;X0R5V^*jYHSjW13ghZWKAO#4M9vgIDytmzMcT`P|)lDolC|3U)N%4ikb4xdrb
ze!Rw?F-A<ub8MA%V9xY8B-PLLcc0<goe;%V&gQ|ugS{#ky2h>6ku+x4z`D-GgZUs5
z%c*{MkD_zrYb~SWdoR<$AzV4OXKz!Hj8cv{LNBj%{4zf?#v0FCg=6WhS%sddmjWrf
zT!*j`dXLLG4Kq?7^?E6&WQG^A0*pu1Io{wo54?s5sE{W)VFDaVL&}Hp9Gir5-kJso
zGan<lkfch4(9n2ki1*fC#d7M@EAgqO-qDesE;1lmmu;+ipP^ArxaKV+9F@$#;F3)w
z=kmH4>={C)X5{so9yi%PE-VU?oVEWP^<YlIpu91Q5tW#O!Ewguy~3cLl%YU{y?Nv3
zhNG(2DQGlmdopHZxbEQ=aX;*$?6I`d+XH8kqH3HLiDfJjlgcEV3U1h@SBG%gH{=u`
zgQM_+$h)NF{*9N-^5gha7t+fo|FP+10Ep;*|B2h}_T$6zTKf$PbrEL-w}qf$oVDO(
zl7or8*)nJ&*x<8t&HFqMkW38n$S5(n)_;%gvzkazcvqs>^1YPF$B@uY>Z_5!{J30h
zo3L2#MFOjgQ!H0%Kh{H9ix%UZ?d~g~9S&P-Y81rplb3XhJ?HR0iqX5~#*}_Ich8>O
z7Ds6Fd~&j^z!*1+G9Z@(mQfIU)EXnWBi(O>)cLw&3;8Tmrk@or--X%`a+V`ZQJk_c
zN*$yb6f^4y<)=BR-I@`A1*+H?S(N{4gZGyNiP3lks0|8@feWl;dgG)X<~p_EN0i;0
zQ$Q0bBNNDYj@BPG^Wi>#e6x}b1bslJX9-oNwa|H1wTpY_(ZhbFlnpclj0|s7#`_JP
ztn00ZsbR8T@F`dnp(4aKg@y4$9*D}lE~aD&?x%;77YJj9%|Hi67D_m{ojWfDk!Be0
zYsKZk-g{CNt?bGeF`2yu*48LD5%NJ#{!`_$c>;*S5CDMmdr1OGQDkwCWr|1pDeaD6
zd$BCwtrw|0s(C_*>AVn9dVWiBa98m5*)XNTlpsv;zQ+{Z6MSck5m)@J0*%q`%fjX}
z=ZG1}5jvJ%*TX_yH;|ThQt$7|mjORO0}efdx=%V>qZm%N{VHLQIn%G?uSYkp+m}u+
z1Hgdp_q#|4XpcPW6MJOc?HQZn4Zw$Z`PMnOz|W!wgV6w(;HU{xQ_nAX|KWBfW^?*m
z2Fk;8&H_!S9L?H4+Fa_Z)$3Ie=a4TII&7`C9(=CW^B5X*aAVN+o6M$BhP)`i52M_Q
z_Y)7vq=37}C4rntdyog~>gYznag5GX^^9PCCDQOBHvZrlp>zt5L0q>K<oKm(7i^pK
zZ6ZiHOCj2CDM_YB!;N3BZ4A{JjU&CDT2MIunGI@Pqq;+s7i58O%|g4L2hualSp)&x
z2IgG__eZ`T2cF+{<tYdpjl#;Ve~wq>Uo6K&D*henk2W}`R?c8f6>}Enf|~1||Dl&!
zD@sivrUYvycfg>Y(-1VRpI41`yNrD5XGF@ir%cux^vB;rv`0}K$H}aXkTA+nPG{2(
z!m7M|^>m8%tWkFxbX>q^8y_rk;2Dr|FaCZbZR|utDf2KWl9ca6jv5w1R0Bd(CHX`a
zAVsp&H~aY}7vL=yM$^JSBeUF`wvek!nuxDs!ac!@RC$&QaJ~<YVkW-%7|GcvPpJ8D
zO`<qbvd->24d<XSmdMH*&kyPTMCp|S;0=fu%tCLc@&IJ+KWWeW*tF2m1o_*s68ab|
zs2^xx8H^2j4A+&LK~{fJ?7AO5x0BMbv`5?De!i|EA>?B?&badD(X@7Yw-d(bmN_m7
z)<;%&U0PCVPK2yW-`Kv_gxR5&WtFt&-=lbL>}zwi55I^_TeDU+YWhm8N60-f*8gBi
z#<!=P`;(^3o{)+AUCF&*U@<g?v-cPoP~r2_i~^@oH!d7f{9(=>o4*UsnqeN9>z+(o
z*L_et`SNdfz4&iS!tgdLd-VO@0yX-gUGzoB5(mk(9<3$?Lih~Bnlt1niVl3sU8E!Q
zz^J`NqK%k0<cV^dk#%-YO!Y9Gi<~_h`Mt@66L^Klx(g6#F6RnZGh-5Xq>oaT*|*S`
zGpJV8XHIHuYJ<4v6$|=pbw3nqgX<0|%vP@9lZyh<sax{$INlC*Dj{*i6PdZ|gz8}4
z4Lv50RpTG=JwhgoD1)LnN%5OehCkvN_L|~;(ucZhLiAI=QvY2KC8F|B8F)jS1aMfX
zTBB1#-84<+i;gXKL--s>O;pyUpwIWv6qc@Nce2Ja_97eU*pMDjB)LCMb1$uSD#&Cj
zYic;=<9xYJar96h=WQB;@iZI3WNs{Z#3QteD}PM(#mIpXmi3kX6+_yoc^U@&iu=uI
z?@7?h`#+#p2*3xiY-!lARRoow2@Ewnf(gry__%_(nmE0{CFf=YPHs-KbHiJqoe=VV
z?zw)>YkQTc^`Xgo2rG0y7G^Zmar=I6F|Krv3`d1wJ4(B#9rTl~;so#bWDB(DcY<e~
zn8AF7GD56?u@Y2ukmsTN_2NP@?Rx^aicL4mZ*{y13e`eS)3Y99k8j70>+Ev@ACqrV
z^=AodL@z%d+g^+S%_Xc98$ky98jpcE$|<T(+!O;7@Waa?ev`^WL-$LLfW^dR4F!eC
z?nXHv%31HmC=DSI0QWDqJR7!#v*M_<FPb-c1~lDPm{br8K>|bh4#)Z6N`lN(eaX1-
z61qd@ZUqq{w`)!4<;`cz&Q8V`uRpX0-i%{gobJ(onA4$63NM6%;@F9(4EAl56J>Ud
zeDUq>@r0VDLHYHJ4DuY(2}vu>{jFa_?x8@Ij8AvAW!Vr%23K{YBUxg%`!uX%{N#kk
zqOv?P)ib6H!f=O6Zj~Q8P0yb8LwF5Tss5qce0hMZz<fhNn4E5(rXaRnK0hYM44&cb
zM}j<GFZ!7DX}Cq-pNti0bz-AnRl~~F^R&P(3Cp`<&7CPWZi2Z9X#pTi_|qWMoLDU|
z3)8VyTA;;AD4dx?3t@0WnSt-{zqqn^B?#|WV6`6Q`3|kCgYl;4NSHQ4F5EAlr4GWe
z(sleS9K%iARX<!tl(NFktmXWn9lsP<f@duuil$c8XO38#&OG#vGO`MZgbHKa<yax?
zhM6i%_q8E}GVdAnSv)gL6qNNAGmgI{zi|4#bz@i+M>8oyUC0md#gf6(um-#tNlV8l
zemW)=|FLo-%ZG>?XUt}6TJk^HwyD2)HN=`y{pfY8pBbJ!CHo9(g*y^VIXHR{ubZ{w
z)JbZf&R8v<@7{MBYyP+3mD10OcfuSSP2rU9PeOTOZ^Y?4OKLHpFxLhw7tYC$acxo(
zUC?day-F#Du1C<>=drB&T%_E2vH&|l)w<O6Lp!4EfETVS9Bq*Wrz#vGXWTM%Ze_gu
zL3qTbbO;5G2sF09ICxw&<aN#R;O5GpNXCg#!KLlNXsGt))^N77l`-^lt*jdlGO~CE
ziR0eW`<b36N`8?0P=NSJpnFdD{10UYx!=r=!<BW5D=+W=gkA`MJpIJwcKh+Ymc-!%
zUSLwv3*s+Y&0Jg>tar{<?+63pJGgeFvef>ojuDzANhA-kpzWTML~J??!F|^dFwkAh
zQB9AiAK(~2#}dy>Us-`oBC;UKAA9^+psgqX^cI8hU0LFFvO8-K;41?`XoT7rsdiJe
z$KYg*u+Hc?A`*BCj6z=b5-^V7z@sENo~NaVOeQ&88+VZ`jmFvc6xhT)tX8#l%Gs2c
zOUr~m@<8@$q*OTGdZm1ZMC&5O3IzbRov7jaRLZFa^abZRl+nFKio?S}wNSb3M2vn~
zM$d-Ko??6nFQHO2&Ix!XjWv~g>`tcSQ>mjF0We|d^T@B?)BU>Fw|7Dt0l_=Hq-G-9
zJl3f)#hWoyXbv(8kRi@0t~H^ce&_I~Puzj|BWi==0hRH3SLj+hijeB?_I2z-`i>MS
ziP`|lNCE9`gzWz=^qf4(^bT!3@;rila+<X8G4Fe^Hn>agCm(q_Mr%aMC|=)wD;<+3
zcn*vmm2;EA>As=w$}%?d{JIDN8rLXnq`YV2ea1di-=X}Dp(w0)<88bSsK3iyXG==2
zM>?rX)n5LaMG(NgkO^J!kWJn*WFWhn{U2lkF<1OOtY?Ro?c;ZvdmdTzMU2!aAMbWO
zl%$y6W7%~!;=h<{?fz2!GxS0LyakcBXH*6}x;coigaf6aJJ*H#y2@k|$zn{yg^$_9
z57IImZ&aM6%Jw~L0w0VMEB+n>Mvp&i3SnLJZbAZHc+W-UUpPBf68-H}f>NglTn>@w
zVNb(ZB6dMWjfs+pns##U`?=%b(3uKuX2Kff-xR<Q0Wj1h>P;#819Hqe`zVF*cni4Y
zEzd+6zo|+=zm$GfQIugjtTRwl4kZF4Bftq;5@m%SHV0uDXHum2M>O1Rg02jefAg$e
zkGOs9ey<~I0~Esi(Wfob|AEPo;xj>!kz$@|`vgukY;74P(1}o-u_53D?ss&*T1D6{
zBAiAd2+IT<uQ9LtDM>UvgdpDD)|FaMr|0K-MIEH+g#cKg?O4DK1yDcxWddvAa86SE
z7I-wuA7$lp0hEJ{+}+&4Ixj9O?+b4R6t_n&g!M>+Vz)R`K-dC}t@rZYA;p3OIQqQu
z91!+jWS!R@r*84Z_%HYng$kg+Hhjr`wl;gbs*6<kyvalD9!EF->Apaei2vS8#^{@}
z#;fmS6mK`mro&VGF;)C|99swaYYUD*sz)}P`aA?r-@N;~)7tLf0qf;_3_bk=+Pi*k
zCn*1HrMG-icpqv9bocSVcA`o1MLoLxV?)s3v*;Ct`XWyxwNYjfx2f7u&+Xw~Wxh7v
zWuAX>oTXmxBcahEp0wvzp*6H7@2o9}wo>B<kE)ks&+^s0cN;IR7ZFkkwe#fe&Un98
za|^h}?uYN4l%Yw@;ML;21v&%9CNhkf{6S7T9VrE9H!(CIZ;(u+<(#BJHbneIA%A6=
zVdnm3?;(Rg77al87<9Ykrn=mY2z1|7><K-`NOUZtOOSg(qc!yNq0AWFOYme|>qS-?
zcyTRnQv$%`*yaqmd(_Mcbpj#UrF?JKLlh3KRplHMY*QtL7BivA5F8HB=8?B<mcxWS
z;HJ#L?LjhN3_8T0LlS3wy{)VHxWAzPNqQjwR_R&7*0!*>*spe`Xt{)5;a;#S49iUb
zluO)DpK&ve_<{C*H$ktfm>-x{761GAw-<v4CFcp^BqeMz=-ZiB->IvT^=Xx8h3@n$
z=r0^Dy-7s0%h-}h@JQbi#)4(#f5AyP@_KN*aIjgr-`n6;8yGzAELss-Kx4$0+JN22
zjoRv-ZP0r;dd6szaI?7adS2DDaioseI<oZbB2Q6aIKFpm@Hl+{emrSV82EPgeJ~D`
zJLWx-DjjN*fG^HvO+ERXy-xWOLWMu7U!&?Otix;kkcaYABa1>9q+?)5<k~C!JQ%W&
z7m74)M~A|V2$lN>Zd^j-an|rrmv8v2W0<5hFf-E3+Vqekt;$fDZNF0_T%PQ2I;mp$
z>!4mnhM;<Z{w$mTF`&{u{minrB|A@r#XR*CjiWT#qeqUqjA3<3DD+X{X(yk=jNCml
zBU|W%UgmcFAB`d}sgqHNFUrvi0kBS+b*Z8NJn|-SW@76^A5Hr=-ddnXV)42eW64Wj
zK2)nLe<zPNG$1njQW@No$*RcD_f7k0bkvKVc`h(E>J1S+8KGi*z1CP{1)QL9xwXF>
z=Y^JE&5R+wxx<+uGxwuq?rrbIF@PACOtG8fb!*p49JUq;gZaCXogA&ZTo#i6Izm?|
zJ7_;7Ra|>;1;Qor%<KFWYOzg|@8}oM?LbCn{XXm;KugW_*{0k!7H*O`?JddIn(|!2
zI+I@7a>W$)yjEy{;clbPXq>^E8ICuFQ5Vz}tTiu&GmPu(7l!D8wJ;|;Hm4W_5>6Ft
zry`3gdSd+BkVm$^Z47wEi^PodNRP`$UW>>K+823k^Se2(feKMWYjr~#Ih;vpy@v*z
z)ww(@=G4WW%}g7mV6NT5)3-b!O*uDcGRTi%(MeXB)Zbm+M}`CRVAFS0EFr7CkaNV|
zxeu<6MwM*tpCjwZMF?n*<szT<WG_TmMjm~>N7uoSjVD3qybe0I0+-!}rWm80^$rUV
zWeU2-??~6EJBq-eu4UF+OL&Q>3G_UR+!}*17V{%9?%5ML^xBB>Krs>ka$rPGBX6xm
zIf8(Bnz}GAM5r4CCj<<CI;RmD_YaRvcA1IwLZdt!x0m;SfnErJy`cclAQh{sh0!4i
z{V=xbdlungth3|2G=e~|8J`|s^d2+Vso!|_h2Z4tYExW9WI1MesLhS`&$QDu4iK=$
z3S<xMsI_G*!@J{AN09JQ_{ZfqQ9mF;W#$dp-<A}>++<oQ+@y~f2nFB09x*n+JReFv
zB%X?tecu+Dc}S|Dn&3IKjuue?rY+A1pyDsnvuao0zt4D;-+RALk!YJpTf|!B&8547
z<KTXC=;dnN#uy84MN7-xmk9x%Np7OfCwVuww%jBAOdsGk!+g}&Zcs4Swc$V@opSq(
zg&10;vuv4rVH+pqaTqtTp;peX7nSp6$|5v`7`i1Kw&Uu)7koB~|8>!cbDyID?Cq8b
zFbKDBQB`pfTX%*4b}#yvVfdh^ql4!t^AXU}`j7C!Rc4J52qLs*^)(je`2HLjQt1y+
zQ7`3xkzNLX4@7JM41~c*xpeCq83FX>jB)<-BFSUZ$|CfdabA>QoX<#V^c1@9=wpxJ
z_Xmt3k8%ik<|UJ!j5x!i<JnP@$UN+3*TNUB$)>W&sy_PYP7&pi1t-XWJZ%peD}8j6
z*UP!;3w6w>CLC>z92|_J@Z(%g0`FoxNGtComS<C1SBRZegHQs$F?DTa-ef~#o~{4S
z-a#8a5(Lin_MG${x{9jKq0ri6^k~?$+OudmRLzl_ulLB<etp7RKAAkNrG?Q>iH<^4
zdz0=$H%cM{B~~E=1$p50NgH=Dwm9D=!p`lwoq(c$@Xb;1e51<Y#A7uvz`-i!vQVTj
zMRD8$jRF5_7p62aGE*K1p<{ZqrL@v$l0n&sR*Yf(7{dXyQ9mDGqFYy+BO3#LZ%{Y5
zMx6C`$RR;XL-9Dzh^EJ-%87fzJ`=oeWbomEvh|jH8U!48MG2frA6-`e$aJc;$uNLb
zW1ND4g$z&g6>Ujw-#G~o2}=%~=nx&)Jk4)=wl)7Y4!koP=4$_BEb(zDd2W)}9cJzM
zq%d3++@r$P`GXmYx;eqfGlKCwJTqQ^X+ZE=vEFGU0fa7iN2Uov&&Q-2>12{OaE1jh
zpsZhp8Zrg@H$~O++(4B*))|`Of3rFlGbIn}{2+!;cW)qt2LCM*#*~v9VR|kzhOQmO
z_f?Z$60g^?{f_^vL~V^;?~^iG4`_x8ltinC=JZJ~5!Azp%=%l!yn3*89d<G-c{6D(
zEj+Z~a%RO@=$C3Px3xB@NFqBI_j}HT6TD+d{747^cpu#V+~-eL=9Z3leh-TF5khrN
zc%!!mBAQ8`7SK!Bdg>iDuAp$t=9E}p3w=C9ISrOkUu9uqFYo^j`t*0T&xLfhPPl&A
z$-BLzE|DU$2TsPZV;<jf5<d-~J0F)4P%=TD1vmlk8UgFXu>mVEF&&?*+X7=xEk3V%
zG=6mb(C9u(&{jzpO*ZMJs<5ufrmfc-EMm;$JWIy40(B+NSN)PTqCKbI_j}r|Q-M^W
z?PrfolWZ0W#vmML6x=k#Gg0qySd2~<w@6EmOcOOK9v6{<o(`1>xQlTBPC&80`cRek
zpxqqHXE{O22@iYT|0uncl`X?~&Ceud04&Xk?(p)cxaA;E5T6B~3e(Y69yxyqNhe=3
zPyk1<{>GP(G#+5c)ShuIOMD^=u?Kg-06FU0N206%_3Y2%6or5YI&)1pbrm+spYMlq
zu(&9U0@mGfhLG0W!pc;fzLzJ)KWzbYfZf!>L)!XjCUk08yn}cr<^u*ca2}0}Up!FW
zt!;ds@IEhkB>{YDLcoABr(Iw&oMP3B7&|1H8pd{A)nCQvO<_zMU)q-n(`a)L#{h<&
z%7hj0KDRoad*=8syH8{8eeh}mw>kzQxeFUcWO6c*?RZ0JQ2q2Q{sl5ZtJZvi%>?Vj
zIw;<(T8n$a$usCaNbENnE19tAeCo-Gl;YohdsfKOG2d=-o`#<Ba%{MHH}E~3^|DJK
z7<3{fS6W>=d)C?zPB_&swNe7;hmNHbfBIU$N!@+EwD$PBhGx3&p#&&Qo`gmP`rOth
z=`j5Kpx=_Y<8n$zw87v}X1w0Yp=Typ+2~!001L<YnPiM@`{0?}5^7>1s-E~wp=A04
zZZcUOLoo-?bwztmJBL#w8FZ4&!CcUS`(dIkovcMKp{l-i2D$UN{%|N$ztb(95E#3f
zj{NiZ)As!KGa%(dn0Phfsp{?9f1}(Es|huwabG83%p`o|yOBZsvQBkvd3+A{Fe+@H
z*K(QZ+om8QFV%_v$T1MgciL-Q9~SND5CE!ACKr|=aY)N^AL=^g<RX|ujcbawvJ@rt
zb7^p2Cqm`=>&0HK89H^HWdr~P$AvwmpSDhCp=Ef}ZvHj2(G2T)dH;9P>lA>uHUdyM
zizo4+41<aVEnElw!=KB&5da7nzJd|^1_Q~+nRV#RC*G^Mp7JkyeA_5K2rs>b;;#u5
zZ*QaZ$Q{2{&-Ugf!!;@wP={20bmB1_4<*=o0<MON!K<IrpQEIHp7KxkR2@9VsYYiR
zg&L7&@=!t#dbQLt5<(J=KS4CzjXCguI2-HCYcmqY_7EdAc8>Ka+2;ouZ~v`UF<`_I
z$inC#tQnR21yX3r^X&pEgrW|(F27PHY+*Gu9%Mc-0M{JU9rYWZG2SmE&O_cYHo>{q
ztGFE&Bm-j=Ls75ud0rGuf(SR|oiox$MrKfq>bA${u&@V=@4<Vi7wv``WndV3i&v)o
zea@oXWPp240azha1k`>ZmBog_Afy-_dFzQ9^qG#VE8V-jsJ~y<CLJX-<b}0C&7Vt-
zful&KmQ`L{O35peb-Fl?n-QYKVBhYpftZjFD2wU%dSQff6z_8F+Cw}`HQGSn7^p|G
zVw6ojle93`&$6E)BBS;>r=xTP9r4F5kJ!42X9=Dk@UPlU3OS}6I%u3`2aaAFO}0jv
z(P#kZbmD8Zkap_PJ$+)p3Z+ADoLK*z^iuv0(8~buUZf_x*Z|3S(S#tp?=geU;F0~n
z;;ya~b4ycS_`Yx_EYdo0U{uexK_`-&6}qo))FV1%B$#aObLe*^qxj=}EqE$nRFKE~
z=_9)u9jTkWl3kF)_ba2QkGwm9ygfS%9jG@|1-GF`hh_18kZkxa=BOm)oe<@;rz+|e
z>ND_sh<a50-0w|*Chu8<q(NcI)IsN^<Csl^q*bBFE6=Eb6Kq7IBb5Yd1`TL|k%b_}
zguOsAJqvXUA&bg;;aAAddO`UY>g?~=F1Pm&(T@Y~(`p}@qvg&zDli~d=x^iE@3pe^
zfmQ}9A>M`0D*+jwg$gW!qwS9>ejwy;8r3ma^1@rJ_M(($OeE&q;NO=wrL8~d{j8Fv
zNGT3xuV?v0H)7PFly_Q;qu`~MsyI{ktqmn4oXSJb<iR9jhm-zkBX^rm8rjI}<ss&c
zHUwj?CP4|q8`nPw&xyi3BGem>JsBoY`QLkDLrDTRLzC?=0*sBN-lcl<U}y*|bFs_X
zo`Z<;lNeN!+IO@;IuzTTBcc6bYM(P>+hvSChIai;Q87hcyX5w+XP^jPv_!ASigPG$
zh04z7ffRzWQe2`{14>`ywboXDTTAY}dJ!yif?_#=QO@Ws5;$qWu?tQMq=jhuHxo<;
z6QYY^L9(E0epW5f3CRFQLtbR3Cv6U+%*j&GF%O!0be&Q5=IA}b_wwkZ?x-H=z*w`|
z=Ruq&8xwX;kzGe%i3)7Irb~)nW{?;WFGy=2*>c&wn}rKJgPd;i9L7xAzBxi*ors26
zC5DPGEjDiv+}?aY93uV#@{*gD>qg5QAMrQ$@Mm5I{y4UW8NH|S&*3*CYRdo76AE~r
z@H99i;dCA^SXWkTN6Q5-(aW4613rUxOb9jtgk*m!^&RC4@cNpJ(Pukiu>STk-H9kf
zK2J70pU<9$&?xls{vV_l0^mJD0TOe+L%HgfI<nXkQ>lOHt|}ioK&-VL;bNu?cs<b~
zUE0@5rgWM4Oa?u@6B-I#$|{RYW)IV;iU0j)NGOtU@X9bBo_A40yb>fFWCQQNwls8a
zsHnjG4ZR8+$J?nJ(NRn8eHPE0p@*D<+yAst2+=JgfrZOO79N6L2K{He`RwJ4U%$+?
z4M}qydr3y?V>QmdehEAwH^{Cut8aU+t$grKI&M>hzCc;(a$!Iz!gBLA(*;WK2yys^
zX37XX?|J$4JL$M`&8Iis5WR;(8I<{oL6bc)M`7b|#OK2~P7!$>?p=BSd%{cVW;_2m
z-;Ew87pe~k5x68gT*ga1T5PR+;X8F7)!n@c+m~Bh&ACw22r{(2p_9uEh1f_zkTcJ+
zEC777C+L*-#QuoSWBvRest?~!zGHutnU=ds&I*J9WVs+!RjaFcu-&Fgz4Yf^j40c&
zup0R#zI$=yE%bu<A9#5^?=RJhin<5=_HukkC6>aY)cdepbX<va_cce}Tdy}qdYu*{
zfF~O|29;5ms6fh!J<iH(Q7Du^4>)U?WK&GbMUClpMIG?l&y)wVa!8`wOZh*6UIu`Z
zX|HvQnCggO$VkV!yYhEdMtf=VsRm54piDP;a~{RGs&|TFo<rqFB^8A9te0mHj=`Ss
z7%Bc*SwW~OTXNC+?uAp-8y0fx^{*}?loM%`q4(+2Kte3V`_gw36t@4xhiWgw#qs{q
zx;WV@Sp^p<VY)dMz_6tid>tFfeHg$#JVT7Aqb)@?zF>?boz@Yc4N$lsCECKs+h4kz
zj9*5hS@}-NJJvI(4-GyU1xLTPfe1U$Z)Ri6&H4plIExH#Dvw5#1BJ`Fb@Y6aEM$RG
zh36MtOj`gD4(uDgmU$Y*7<);wva!xd;-89rPoWVi86cGpp{``u_6(vLE#+d@D8VW2
zYrY_jie~=}^<P73Pm`DOyjLgzxu&`yr4@QJ5_?l*1VLpYf{qVj#?i28jGSO7r|)ua
zB*T$50`~F6wZ`|Gkyx;#y?B3*ukDplFg(qx0(dIT721E%AYJAY>=l04jfHj3a>ob*
z1NVKu@1fPa_I>%LCGn)^7R3q<ZyFgcX{@0C=-HVQC*y$H<GgT<WNpf`U0OfW%DAlz
z5WBRNaD8#R@I14?CYSWJ<E*n5Qp3DrMe*NhWPWy-+KXa(g#esO#wsPwr9IHw#Mtj!
z^0<*lxLy#OeYtY$VlpdxfmEtb9LPck%~2vFx}7{5KM?-_+X^cXSNx37V>qLnjRKx$
zgugUINLOV|`%qgLIzY^wjR#S|6G$tS$%n?rp=HtLpbOw7skd7X3IDIen)(mBNBp(F
z;Tq@zC)yY9pdAZ?O*mSU<v1&fSG=7JGfwG@M`5h;ulcPv2$4};aCMA39m?F!H&;p|
z4+|u*8!rcGa1gP~#yFa%%xvE+ENLUoWnmoKS}ZVDxG(ybE(Qh@kG4ZqwtxTs_WoyC
zmY?Sugm%@}9oz^L7;z~~81;k!_dozazq|xQkKntCzDeM#BGR_xC0VlN%&dL(K1b_$
z&Tm&`I-OZ|`j4a~>C0)m=;Pv?Nb1ZnZc4i!Jg+ev>vg4#kL#rnAA&pPUgE!ha?>m3
zf9gkUL&H6W$Bk7VYUJYG-|wwcG|HR$zoS?3bq~J3Pa^Ily#KST&boP`>-lOOqT}j4
zIp%~>(4~LZt;OLqjQV@~SK6p31~BHvea{dTSf#s!Td4m9!Tw>i@c?Fe7z)x=AK*LE
z+;^<4Oc*UT%8vUA%SAi4spZr9e-lyxa5G-7*SVL|8|&W2X(DD1EWb&;yeYmoX)lF-
z+Dm=M`g&IAS)gwRD~3%HQdK=G7aVixm}+A^UTn|Q!YVB!TqzKZzw27xe^hAsP`^J`
zZ7_@>@Zql)2>-^&_;G#solDKlR12(BqD6O6LYA@GV6*v;I@x-U*Md=NSqE*zP9XY5
zKF*xOjgz;@3T&b*B}KVZ6pF`uC|D`IE{r4Y(+}cp#aL+L#2zECeKmwm|M*}>bHsUQ
z|EgiN>-T<4Fa<T{bobi1b}cDVzP=a78qW%|dxT|=1*p#r0tvY1$nl36JWSP$shA*$
zCcUa8`%ZxHD$v$(%9L>ilGQnAzK4LdvwfUp-R|{|<Er!^{f5ow4$V`6wdlLMbGBp%
zQYRh{KBwLfaLWgjE@Gcj%Gyfmo0$Gv*h(vWR=!G@NCm(TLC9+EY7wCxkO6DGlREyu
zV87;v`t{?Wt;t@hmXANj#7Ase<|;O*mf>!X)MxqOo_VzdUBfuH(PVl9e5$?w)R_Ds
z7zBsOyFCePvc3^eoVoOc@gbB$oA1rH;EGZ-x<Q-J#?M-9$0+~0lIa6YZth&MIbWmT
z-w*!W^@?FBm`&v{eo?~Y1(?&VdXzhttMdBa;9B+@y7tb!r<WGcu18#W>Kz&S=wyR;
z1;S$P+GH7C1;>l3UxxFKKekO!HGWtVkWv1B1~LY~hXVp~)KG7Z8TdQx4_lMvag^-Q
zCuj)Nr#H@G@os*!&W1Yz^aaD`qCB&+KxhRspSUaeL(zxtYTzqT@3T`wJ<GrM-AEA@
zQYLukAm?~Q$TY3~$X4*4*~8h56s7bFEVxsbb?+qhdubf}+b#Fy0Q>|U^wI+Pv{L#$
zokJG`B++-gPS-DD5Fq`|7?)fhyaXb*@^K8i1XGmFTx~wM@9|?2tZ%M^PGQhZOQB`W
zGs0Ju>a~J%;@?`CGSwLLWD$dd0tU8I^lp^2_V9UkLxt%tFQ#ua<3T|AdW+X->x^Ct
z%ndFE>Vx^yiglvvvVDw=6uIhLJ*?_fu?eUzA9u5tC~&|P%=&-zZqRvpSDWhw2gqEY
zHeGX<q3=Lf<}}3wtkQbljm3?XE#yAK_f^$SQbM|}173UF08TZxm_n}zIUFbEfQ}D?
zbIS1I)_6DAj>BHE)v50zV$ld?jNWHr^nVKI*#ke0F^2lz_nG#hu@sDB(=Tg<ZyvsO
ze5mqYbu7lLb@%HyHdOo!(UrztVK4w1&mzvXd*V2sKDkO=`MfC&Eh>PF>(csvGg1NY
zX(hlacRdO!ijs9;7R?wJ1q|5YTK{=~$@DE-f<JAjj&0TxCKd15ZUhEbk~x)OvasmN
zcK|0NMZ+>Tk2r}s8_Zb{L5sHE*N3)gt+O`Y1MiEAh1I_}(PFHK5Ke4pb~Zy)w*2?7
zu#F{}9$^gpQ!W{t=;hz?Yl|L7?lduI(k##s2k2AdPD8gUDiHX&kE{z8ebP~|`90+b
z)+qFC(D#RHzSaT%=(CBSQcm~-x8F}OPe^!)3jS0^&xcQSy_p-`5je1(A!0K1Wt+=q
zVr8i9PNZBk*P2%>Z?^diGk9iNr2i{D9L7A+(f$XTI9;a&3jVGIfAwsO@k9btc@9mT
z`<lP6U60ud)Fy-t?;>#7avWZ91)=jz_%9#ZDV8gp@x!0TlhvaI-GxQxj`eu^gLYB{
ztVLyQZPy_ay;c}S{GC7Gf))uZH!9-dY`J4^b--K$D54&8DE6sP9$+~<q}&a?dzCp2
z=Tiz2Olu!KtH|&n16rHPH_<GCx#vvxz0N30yJBtcmR;c=b_q0GD#US6xbYqkjR-oj
zqBYc@E;oRrenn<RA*D!bQ{EyAN;QCDi&}~T>o_2V{|_J)06zi8JMT@{s8Kbg$R=38
zNl(~Bi<<2V>8t(tI(`(iu&DqdAEXai)-8?}`;87?Rp?%+NyiD8EMYU2#$Zw7MTLIg
z!Ls0|Xy>HhZw4cC>i-B}q3{LyKp$J1CaQ~dKn`sXB|pP5!5bC5VS+Z&7HE!`OpCAB
zk2(UM*jJ5x;%)@=xKd04Syz=RIC?T-b8JxXz*UchGHvL4&o&CiF$~s6RuDc0;|Yvq
z=KF0iq^SIgYwV5{6ddV3^ltQ_Iy{dRIsObvUppxlrx=FQYo7@P!q?C`Y6Gb^q=O++
zS>dg@&x07J^n9&OdM|L@8~U=oFyg)}e;$7)#&`Y3QkuUhKnZte^lP^+L#aZT2?Tzy
zKe|{Su(9et$pGme#9IXla4t^o-Z!|{ZNpW9#`+rPhhtRGJnRbgQbXeM$VH4GsDswD
za<8_>&<X<KXAXNnPw`W3<Lp1=k8SJBO?$T;MW$Ki;&_~`JNmpk#<a2-*o3u!DBX7i
zT5e}$nsE<DPFU>?wWWXBTBsNZ>_IXU!1v>Ca%K97h-<BQw-P8z<)Sj&JG!CWyG|<}
z#^=0gac=Z4Gyn1*3jcrlm%(Iy#z(vv7th@q>iBNA<4e7Ck-m9W+2IFaq>2~U2j3EF
zQ()0M-5^ceJa_G)&IVMthL`t#Tm7f3$6i-N#@Te*-FSBf#m(dM8y>Cv+KIw^H)a9B
zxXcafgK4=o$_ZKN;=D_+TlZ`~lAFi(^x3WRzOgrm1S9jS>&l|B29#+2G0;9wOKg*-
z81(^d-Iz3^&Hy0RArw9-MeQAZakDGhPxC8}Fw|yc+XcN09|K|E>`s4|SQVl@IOE4K
zDE|F8Gyz3uTK_+UWB`1VD}c@o?13j%MXfU<u&N1r>gzoz!}lJ1DT&_PHSqLMOf~y1
z49w;Q&C=KmpP(JN=)S()3fV3AHrox$tYB->A(f+J*}>fB!dglXhVrYjw0W)qf@+UG
zTID}=6Z=#a{@b>+<O}W5CmXeF7T`%zyKQET=btZ*VXkE*>sXXWWX<p~r8KiFljdds
z6n-eo=t%pAMVQ}fZ;Tk)c)Z4)qjolI7dLle<0-69An<E9jpMUr71S1KO+8mE9Hb?S
z4HneH$0JrQwbNSChr>ZNW#8Ws<ZOM@76YY$`hhI%_3P1w?Kkrhf@5&>-)C11<vO6t
z3{ZVJ)6Hp%H*!a0-N4{*#>gEl{aW}oPuC~mgIfa;t~Sz=0oadOF!u^d+902AT@PMs
z-BVnTb0W`^lE&Vd(1t(-3>544_daXbP3LG9hm_7A5H{(xurnoe_9gq{<H<T8m60Di
z4d4CIWk8HaW-WI2xFJ43Q!IGt11%i;vV$eX?gaY0F^{c$%fDsro8YwK%VFSHFqNF>
zk27k{nKRgK)~<p6sxMgh8PH|T!?6Dt3N-fGJc33We;M`vlSl=?cfj={to~J&wT}?B
zR=DNPntf3LG02+1%7Vp~8o<}t6?D9hpf5!h@1P*#5;8ylCps5eN`{S-L95d@(DxE`
zKyf-ZvyQHmLZ)A`4nRdpfE{JZPJlC`Oj$r86m;D9TVvtj`{xhf_V>%Vv`2mK$k>3+
z)CxDx+Qtj(DQ0+(zI-F<*gyKHD?)@j3k1DH=r>k;XTb!nDM9(VKeQ`EHsN$eu+m*P
zo1r7qcNsTr{9LjpUl2y-!lrsCa4+KdMF^GUzuZE7{0$PFypQ33zVxXLu8%frKn1xA
zESH>m(}~fz?TI$&v-z4h22>3NY(!T<qiyv(Bgz==ELg_+J}5&~xtJjV&-eI6+E;oZ
zPE5{|Ku`JO+hO;DTCU7pU-#p=5GYAWQf4W#20KEyxUN^g$NGCO71g4jQ9-T;OnVYf
zkR86iAJuKic+^|6Gz??l{H%JNpkTk(o_mFk%VZe_WQ-1oLqxYzebYKmxgjc`OIJ_{
zusUz{W%1N)>kPQAkpV}z3nab;sQ~y6yuSYP^?a4A08^l5wFx7x@1k|Br73rIvNVyn
zgINekE#mmwR$z?xWIOdz&~YdIi?gp55U2M#gErCHX}*Cm0e-Ti0O%)S;V$31Z+V^E
zLBsz(0`k-|buUKNlhJ}Hln%;j=?ecAWx)Vj{f*;Kiy`m{5X0lO(jt!=R%(SKxDkD)
zO=xL*3J&JfH821GE^ShmBP&XKDa?(Vz7#b5)45<_Rh;^v-xx<D%6Rf1#)^8MM?dav
zDJ!!M2><9ec_<ku6M&Aa%$96N2o-mvIwn-k&Ptf65)Aj2J1mO3F&`%L;?kNU8%hZG
zkK<a52+tN@ycXJ<`q^L@co^N%)@1}^WKlmtY*0yHyujcvudO$V72gh2X3Hd6*b^+J
zS<@(CLks>mPkM?2Qvr_k(-y{~Q`Zl*51n;s%N=cJi?AJ}6W@)=(=?V1wcij6hO#Uj
z*ES0-nHZwpEkeoaWGR_5Z~C)XpuQaftdjMY;~7~$f8T$9&5~JGsV<ca8?#<@++?{7
z2Yf}?EM|fjY9gb`*cZMrP|bT-pEWmMz_Jf%pQ48Y7I-D~|I<ia%Xi^;nV)0ulL&Pv
zL@!#Is}gq3<`r;)3NEe!YBP%q?@*oA+>QrLT=l<XTv3qhwr!!VpBHw_+yD^GoW2WK
zCfnU6JM|7Y_u8l{y0Ke|1V3!XukTEq2YIs?yq1hn;sAXp0}N|wk*b|~_;X+kdCzCM
zaRlBkQmU2t>FXN)G!=GhOhsPmt8?0L%Td82ZWnocAU;_c%P!-CeJHGj01zQVzTwk*
zXamHpsDkD0d(Qo0Ue`L33e_noUS|Xw&wJF{jQj;wW~lnNK{KWtSbL5$qf5UNp=+3>
zL38}$p8eSb-TC9nKI3~3asjZ);5!nO0mgmj?Ss^J<v<rhbX~-LuU(dY|KETguv_?t
z@olrq{R?r`T7Lapt;6dF)wP^pfiXef(EvjRW45MDs+w%j^lLEsc;3)&k?6302*ajD
z|J=#XzY;iX8<Sfp1F4NOd!8S>5)49_+W>;&B0rL;%eo>Y^__*YF{8K^2X2f6U+eq2
z5qp)fC_+}*9qRt<#h%smC-8|0Zu33()Eql=abjpQVq*@Ne%+3R*}Ctt%%He{scSKZ
z{qZ$vdz?r14SyKG@W8ka<&;VXSU~CEe!!!DQ*1(sNi2-$P}`aXgN0|VqKUs3=>qVb
zs9LT6ux6JbI2cpB?c=i`ES4YnFo`%m=tJFxA-b1y=wDQr=*^Fle*71(ZA)9s`Ul+{
zHQzuaw&i%eQPDnDKyOBpaE-asY5$CNZKv(mt2Bj`DUpb%)#l6wTl=B%hZ7yRDG=#C
z_Gp1320)`!ig9H0S1dRkR?**!f$sXY#|DjCYvU_|E!9qKp?e)VL6r8*%6I9fca^dq
z8CF|CH?_Yw0chenE<j0**(kB43RO?t<fs62VvI3Sz?>^r6xlI|YAdJR0A}>klVihc
z+pDSO(AV9?;jSh$l<hDS5p5$VtVTcU`Ai|=5~t&$JUkkDQ&xBsXwy}0HrB2xb3Pow
zoY!>AXB>5AHP5Wgn!@?cu}Tt6U6(hZ@1e$|4m@Yqv357?>0>8j={4!xMqjU&I^(cM
zAnsKX!(fA&-kX(Z+r2%7fUUJK;5IrNC$oJYpQrakjq9_)pShmHbK&te^TS6Gnb!uF
zot@iYEC_Mq$+_iz+CJ_b)BCv5UIBX!)h9Ytuy`lb9(ERIAPQ^!S@qAP57YYpP58lf
zpT8DcFZXJ)jZ(2316bf9<8bp$zibu#<lDDfcikEIyIt)9;Qe$*KC9>Kiv-1T_<$w4
z4PUaG>9{fv8$o1Dn)2N^yNUhK=J$@@X)n-{R$&FtGO?r1S1-i-gX8EEDK(LdK#P5d
zz6-H4g!LEm$ZI-;W*#fyvX3)^9dLpr6@IV0dbeF>{Jys6v!721Xt(`xO)`bXg#r@$
z`V;e(W0`X|u{%vmY>(l+{{!1ErHc|U*DU+}wFC}|qtY|vtRF|NefAtX%^)!ABZL*q
zb{8SHfc8I4X;$|pne@yX;0MICyYTG#CtBSR{&m&>yx*r-bLZTgCVRUb0$rPfy_%Rz
z_K7(P=E%_ywZ^XE=Hsl#7D!Veh5v6vG64PzIuoGn51K7kP^xg^Ce7Utjg_>+PV`lr
zl%JU1iY93qfWZ`jy*{~<keW{!2hgU#0v#-fNP3ul!nvn+u2xoy7@A4zKAkqj9Z~;4
z3M>>@1kH-mUa5)M2?Rq*7hdEcja@17pyyKzgN4R<wpfXPer`J(0dgi*%5`v<F}iiH
zfXb-vc+3C>f*bm0VJX8gC;CEfqzx9qU;%jce9UM;)7tuez4+Fwa;ntBXpi8K5@XN1
zMh`h*$O6_t^qy#yF|N^b9trY#W2I**Ix6H2ZILd01PmHXbp`jt=fE^$J6SZu>!8Qi
z=`?_Qb7gdHJ<kwmzp_|+g{ggDqz$Pr`<GUzt#`VuP~ii2t*4|W4Z9n&4q(u~@fW~G
z+L<%QOekMB;ao-AOq#|%!<25Gul`_V*33d~+t#m*DInXiU4YeVDtJ53!B>^FANM&t
z#)wf!*IDb99zUj)-&5+)WakIwtP#$gbhsNS(`J1qqQO(UQid8z<HwAqKGR@OQ~K`C
zt0M3t%zyA4{WQNE?T^1t^rF{OJs2CM1OoIVX=9C_vM*+Pf!aZPV~E$%S19-<?d>R#
zDW_w$*i3q_jwhX_?S0$Vy522n45~5NpHJ;C7K&QROi=E9{0_`|ab=H3RbV!adQA%d
z-;7iM`~Z}9Us2|Kfo)u9T?(<j4{rj-bRUNN;?~V~z+CE~+OFZ205L21v)(9F)o86(
zzgZbUtVpZfnn@>Q9T=^CxWCf4i%PA40dRkQ59kuLXwN9c*70_-|D9}zLP`MhxN*y!
zZL}UQEEpPX`}Hmx4s;jL8<_BIwF1JR-j0#&N0vtqAo*BWCvK$kV-;=VJEYM(OR?O5
zrEk$-WsT96b!aII@+@8k&XZb^gDwWE=iRjgtrTFpiWa)A9Q?W+f>q(MVU(~Y71rmh
z`h&X#Tuyz>!jKqC0sr=1w9db~H06j8%4Mlcypy)OvE6_8)q)7KUax6<2^Xrv;{U$K
znuxi{P1mTB2}fm?SdE_@cbkB}OZOg7lzwl_R^KO62=yQ1HTu)H_IR5@_UetE(LQd7
z2Z7}sC0fXuJZqlW7_^8r)21dt*0B;%hK~)~(g9Rznm+X&19ZZepfv>79H|J9<3@bf
z4>xQ(Y{LVB-t+fld~7KsC-+EvKT-kkLs$S>W)_0RVxdM2IbBlA!gY(u2MUV0f}@MN
z!v5E}pg(tyc}g!c&7FMT?X1mx-(v<gwMc2EMZQ>bUtK^~lQUWX#C;VF8m(Vi$nUpD
z%T64=#(eF+Uw!^wTh~l2q7%cj#h^K0zn6A<3O`rclp30Jh90Ys-bdGI9dj}4gTdeR
z{XJCvR<T|8>%M0|3syY<f~1$}LMyqz`XYqE*6z#gY)}|2Rvx3g{tee$P+&uP6#*aS
zT@3MN7Q;(#RxK8pU{x5t>ef2s#b2NpD|~E}DO)O6c@MIDmG^jCxwYfkF?_hUev47&
zC_=?Cz5qW`b`2CBR3T&T<@;(3`trvqe{~aQ18gq+%AJEP1I@r3++atAFi~2&0p^SW
z(D#>%-0yhpM8LEH09xm~{ySnU4eLgPv9HHwh~<B8pD?4MrEhfOD)b9%gN(h&#2fWf
zaLx*DY|YDFyrJQ?o9oq0Ye`!F{{S)uz@G)b^dxlap=Sl#G3j&$>RN4-Gw4bEhK8Mu
z)sE|pn7H{r^+rQmwXZ{eHag}5`cSOR6QM%i%5D3Y>m}4>ZvakB>XH1tU*C_p@IRK5
z2bB_L>Zk0~sp~jnjX{C`iaZH8gu##aiC?ie-{E(tm^QT!lqLUD@h`4+(Um;%0qiPf
zt_Bg*0)52l^oeyu@1<8LDSGc3Xg>%;;7hS|?KJiW+U9ZJ<a5@){xmGc!9`5_L$Skb
z;a`_)+Agc0SH}tKzqV)#H`G~-rCpqD>gmg&QbKOv*t^{tV+r~S*`xKdU-y(rd}Z8z
zZa}5*|A&wafS&?G@Y9+>Pw2CJ>jtg9r#TjWfG}YLg{gbG`_D4^3f71C$R^721t;s|
z89MTreK@bK<g?h@oLkPY@|VNd4+hnk=*P2QKlni!Kzp_TE@f($*Zop9{t<yBP{tG_
zsD9&m;bVESKk=UHg&C|AV5KKz3+B&`xZIdlFjD5Bf2%V-1oiT*B6C{{`Gv)~FlX*k
z%|wO&NS`{E-r?PD)|WCG6?>rSEhXD!Ha2viOp#H5%6N}El<ZS+corPS(J`@A>tg-(
z+M-}ueY+#j&&r}A8nf06R8ty1pzUOzW+>A?haXQxx8{Sg3|A~&7Dz!}En^Dwv)?|$
ztSHYcO87V6D(%+VBbe*}eHqiwYb913dZa9Sf#Gm&W985!aG>SxMs3i2;u~Xw<hN#(
z=ji`ev0xSOdKqLN(EFoV0`$9v%rYeo484-gAwaXGkoiP?qm({FY#Q2caF5n&;Q~e2
zk+Y#?kecp4j-N*|Y;#+i_K<hVWMf3qr1}m3r@*dxeQ(#>T^WWHsiGEhm>USg6^;63
zU`v@~0&*egnXFa{!ctE6Rba1id2UL48<GL==kY%t|G@xAXDmoOaLf2_i$Iwm)MjWV
zST=!&KJsA_X+6q2J~ZyOhIzj($lF%O9d-VxImf!e#xo+BV%2%GwqF=Q$p5l$!0-`z
zUq?01#6&o)sV;qa5rIX5H`*KTf%r{e3K0Rw^fjK9zFn?^A@MobOq+`<yc1K_42&U5
zkm7qYBd7h11VdEqrhBf8%ccKoAG@V27RSE1b={Zaf|`1uQ(8=$sKPYz6l5X8pmYX{
zimRq`w=fNwfMAB**c^eM+LP&@DLSbYY3q@op3laOsH+FP>bIO(!P;MDTJ=rxY>wW3
zHC|&s++}?}TaR@OtsCWYYmd?!heU}Qs`j3d@{@q`(Wuz;!A(7z_FnJuZwlvqidyCC
z+_eEczs>qX%)j>!utB*D<EQCiOdJZ42(3a~&eK-gCyEKTs|HAUru=)_eMdtP9;4Vg
z3}<e;ZO$96S&uAhJ@odj*nT?TsGfgtA1&4)SYL$On^3Z@<pMW2CX9P5i}M1Un7lSB
zrR8;`_5Tkd6#zd2|Mm77Veh#s7*@PKN7udj*6D@8Fq(ZF$8SG=hw{H4$~eBMo*PFO
zGM^<wL&?&Bg6E)hX(@-C)xi~lu-+MFKK&b%<#}v|&vY0Et83q}d5(-2$Aa!MSy*xZ
zF#j$w8)_iLFY9ame1lJ)hPR3O?%DozV>x1A(0A&qXNk^MvMPuu@;XqGgQL%v3J+)O
z%FS|DPLMLKm%JC0UTjj}+c7AU(L$sZRa)?V!W=ksRzE-%$<nlX&eT@T<6pq)s<-i>
z5&ild7Om9~xBULyAhV(O*j5Ih!H{kz1VffyH}9wB%@U{Kh?`UX-ZT!b()bI7JmL;F
zrtYklziNd1;r;I4d8Wg|#Jte!n%S(6jh63uJj$3o#xDJ9_c@*y=clNf>L0-s4V|rB
z`+5mk{$UoSIf_^U?NSry9_p6Ub0;cP)m|TGJe`$AKexbZe>t;K(mF`t{|_Tw0Dcbs
zH;<~a6%fI~Eb5klz9)u_l;fABD(oLkO~1^+y}QkQJx{LAuTRsM?L~NoE^62r6*N{s
zk%Z=0)mN48V_(+KREDm{;Bvig&EP<zkN3<=1fnKi@hcW|TckjTTms}T>=gc%t_Mr1
z&C-%0C+fpXLD6Px2<RLOJ*w}_RbDX+#Bn^oi8H~eus^m_qg`^#;Wt?c5p54Vb88Y;
z8$RiV-zJV99D8r4zSX#P*&H`uIp=*a1AzORK{zXajo;5ME_xDbOdGRL52a}9@5<yE
zl?OD>v0H!}e2$by`aXJQoVUG2cYSRJpd&@9D7~Pqzc#72%)Brr{(+SN*VIE31*8#g
z!)!fo4nt;@S^ZcWJ<B$GE$Yq|2xcqV_(Nk0Qy$_mw%RuHKc)ga(7U)Rtw$HNeqOFi
zMqhLdL%BwB=;r&Hdapj$uGak(eVoqk#3u2|&g$?KGrr=0+&JyHGuE0>S`*wh252V5
zY%H)csAq@}!BmZP(sRMu3beT#Pwx0g;r|C9834Zp9}HS$!%;1kuWgAr`%E`4m`h67
zw?_n8xLnMdZLtuzmmL$lp%BK;W-TpdfO&4wuB96{tzw~WFz!p+;TVzgxg%1l<H2|O
zq;*4EzBmWAf5ClmH2$Ok^X$EW=2~(Q_rnEeTgIhH&L5?pSHUwcxzc<J-yr-Wgdk}(
zg{Q=_iZYv{r9L}8zgP9m6+!fjQ#=%lVX=moM(53daD!{@1*X9kOCg{<+zSjCxS#bo
zcrm_T?sKUo-y;Q_%pC9oV8uw-Y2(K&uZvVvM5E4s)*r^dh|&^op~Wol;AXNwr9e3#
zmCU5HiA<Z5o1bQ2$gEHseHLlIlrn!Tk^%68@P5A^&*$_1+dh|L+L~+ScNb~j9N9!@
z1J#Cg+`N*2&sX<~MZl5%Jd#;psrx^(5uF9c`t-y@)<NARmLMPkEGb{CRsb>pP|>5$
z>Yc>i$qC{k9s<jk&9l_@iXepa_xN{a^Q!z`hfS#RzZBO*HSoCby6=(7;d|U;rcmM7
z0LO19t70i2mtvuOr%jDcuSADru4auf4H`X?QPv7v*tGqw!0Bn+f6<<ntQuuZLz~ud
zgRBnvU48x=m`gZMmjBrOg5^1=m{%sq#5!YDJ`Jbe{j{A_AW(I{+9o!TEx;c#0d)Kf
zQ&53(Xu%hm1JJ@o*HG$H{Y=)gIVtLJ{VMkfjG<{0PAr(7b&>qkPxIJr2ndJ_C%s0I
ze=)Yzz@UMZf6&j61_%0E>`C6f60IHv4Yz)e+BA+UO=USrH?Y$FHh+Q=Wcuxob)8K!
z7_@c|fntsRX$83)DJ4alM3vf_b%^6(${y`p108XS*-wVzTem?NFV#oH2(SYC1?%QO
zk)B0c4@%mL&{kJ%olSOAKVA2E-hK@NE^7aO4Av;?gm!lJ1%rYJmL$=yv>j3`t~mqr
z*mt!C@`i(K!?gbY5TpX&hvD^l{rBh!fPSUu1~zPTTMkk^Ih*ujQ8!KS)+SXQBU7Al
zc2pqX#B%(N)3xgFiP61z@wCb*Z7nbH#$>e{xzyZ@S`9;=)dD`Ae{eqPk?n;WEMr1e
z8!%4^z@O<|(RJweX$2+tyP(DOBCTxQH;UGd$_(ST)wDe?rc*u-r$!nlT?Hd3bfu3T
z$Mr=*<#Sx7ycdSxL(sZ0$K}8jDj)l<FjL`e(?Trvyz1K7*pl~qw!OmfPB`VLX(8(Y
zp6t}}`roo=Y3(|+Bt&HP1VSqV%gj}Zqja}()V`r;&fJcT@_h(?p8Haye`Xe`2!}i%
zaSH0IQ&tAF>cS$P8-#2qPsi8F=`IlYmMW$6sTB>S^z)4u0i<M6rzvp=I>E_kvht1X
zYgs_JJRx}MHkHB2+PnO9WYbWBo4Q`V?`A9;vBVwmIY3rz+Z)XmIsC}cU5&<V`2%C_
zp`L;K<7xh$IZx<wDE1Fmsj;D5G{SJkj`=POTduJm^!r(UcR79R<sj{B%do&b+?M#2
z!V>A@gYwSZm%vYO#+tRxS#EwaHw(9Kt?{>;naFt-a`lP0edu^wICpWKLiq{CJMp|@
zW|LR9RS3|SrM<+kzSZiafPX04422whC*}JR+}6f98b4$JdLHv%3jaR|sQ~z)On@VV
z>mcL{4Y0U?|6U8cVkrys24G&lRycG<fB|Fk=~{mAuqW)VFqoky_gz6Xh3n_b3RlU`
zH)M`7A=5-&HN|Z?p+(!$8heZo_qn^qo;O&t%n&o6-z)gC4se8jb6>R44^clrA#XeF
zrQ;-!#+}9>3y+=p0+s4bk7VR%D-~I_C8r#oH;~40X4TP~mu*&nk@Bn-2j$Gm@L!(g
zPv*{sEu5nPP$3jtbiuyOG2E`+)m3;9$}od1u=3fT#bU7(2f9CN6TZd`rn|Wf3iD_1
z`b=3f7J{<+m%e(AiZB_6K}M<9ZU(|9n#V<-oKcA6{<SQw?ObdfC>z;r?D#FW3zk7x
zcOJtO>eO7~Q<z)(9Kq@E_{8E^w+~XtM@uCh=em?oX{d7i@f+>GVT<8WJ1zw-QFU!x
z@_Y_fd`4f01_lM&;VsK9m0)GHvNFK;;W}j>A~xY0gh}xT_?-N8y}u|d7)*^AK_I1{
zXW5@#Gpv2{=h4b6c2$|~%WA`-vZj_hKKFhsWl->EnVwQZs+6i=v=GPieifb<`|Z}4
zHBD36+Al5tKMd)e@yjp~r%ww1_KfWrAZPc!rhNDS&RE7i35@7YPWyanOpoQJX*qp=
zwfVZazu2g_5cq!*ghK5$AMVHL(^vXh3;vg~Uz-X8ZxeNF++HU(!S*$1l;47*P(e(H
z{g?aS6aFKZ#+Ujfh$<0#z_D2&^;gR|A^eQ>h%EoNXAz+Eb|(U{l128m_##5#PY1>_
zef^u)MRNdI_lrz&^-+~PU%$pU%a;(XhRKh{1)Bmjzxg|j=C}dOwW0nn>u=b7@7Ok`
zW8+*9<Iwc7T8Ae6qIEMOfafUNj|vF24!TS!Yi_*@&!4d2POOj&fS-!@`|(CKV6#Sc
z%{ftY>PqP{1yJZyzLH4c8!cAGGg(wW=a?D%4#1lhW;<?Jeh+cu;1O%Zy+zYHIlotn
z+{7X+jPUP~uD6IL-|ft*oTAUld-kdPJ!^mTBlDJTvTj2?Zhr++{dFz=aIpSy>h|IW
zls}Vm(RW7w&fz@L!%-!sse1hab?h<S6KQ(1jt7DFa)Z+u7E}#tkCNtWW>NlH?0LJ!
zK7`)mlg;$T_-3Y}mJ_sP3&xwY<kJ{zC2-JGlQ0Vu<LjU(l*aA|=hT_2fHlwh?`)f_
z_<Z-Pd>)p_?in?2%d2t=bfr)ztzrO>rQUd#@!cKTX(k&KZyMRJg9cn}cx9gJ`d{vL
zejnz2dWsEoCscNo(xosTQW<luoxrmGGtBkApBpUq#&x*vYetnQ>&cbP%GtYEXG@{W
zdaRa4lPurHbwbr292XRcVRQ+wqCl?vXF@k*u=|Bxxaqr!<}O*8+-h_Zj?$c}`o*Fm
zD)iVy@*O}YLetU>H`cBuq3kph#%5@qTe;FGCf3eA=Ri?qJ?;6z%ur&?fnK0Qo`;ZK
zW|c#C9mND_1xAZL?J<=v0lL$e2(@|r&k>VB?fTOC{{xW<fS-)&JWsQRu_HF<bGn$`
z{7$a#_mvZiSU_rFTS(GMh5kFfZnxlDYq3`r>f5)%^o<v5vmegHJ2Ng~dcL<2(HJ+d
zLhiITUTdXo@Aw`%P4+{7M~?UdZ+DNqTujx%8E)ZdkRGGFr%dPtdI_<Rw$DN!fX$H^
zIox}Hc_XB^U{kY5r|wOx!>)gF0EJQx+0K26YoM~7P48?2rQV;Jg022!cni%~0O}ec
z_>DpeI&o;hLYEbPYlZfE@Nj~q1(Y=!Re7n7oz`CVInr|Fm|k}VN>H3`XuWsZ5C*3#
z0L`>e0tN?;gev%QCD4>}t2Ii$zv}dBHfBB;Reo7BO-@EZPbfnLrKb$DDEu>6<3TD$
z=~-Z}1Nu7tB4lG++w4_)Mi95x5Wi7z+Psk;VBF{FQ?$R-K0ye0<C-Gc#!+-z-%(kn
z^)>yG42N`aJKMmtjY}?08yCaAvM62o@XPKa!&gnavCKfan;Kha!H6=im-8vQ__T+#
zt^c$H(z+^!Vc&m>-w|0G{4y#0|4{sP*5SVZXIe0Ph?U?tpLF*H3(tDu@pb3I%j+6d
zIY?3d{$6=ZN7nIMhn&3dzwd-8=v$aI>lF$eRX+=i<zEzjj-9Q?UG5e;`<+i%9B&&_
ze-K`)L};ZLw?Vw<pj=QPPWZYd)O9*In)f`RAeQE5JiN!0x&nUQz%AW8@mHXIoDIe3
z3U6%xp?-r2@b&Y6in7x~G}t$hcGZlg%dp}aiSx??Yi!AZmz<|Ar5*ON#NfO$u2Jii
zTnqQ|a=Pb69Sr}6e$*{A(m~t%!9{uesYhJluR5m>Mlfh8+K12MGJV~H$4&c;t6he1
zep2}V(MSfsFMwQd+hk7>SlmsRy^yemkCcA~g;hrfWeqS`PKK$(qr!eb^Xo0o%UD?#
z76j``^w}4}yJ}kox2M+9_W)+4?ZNuxE}%Al8QLFh{&pXrt3Zi}PkpcU6DAE`W0OAj
z<<)5j@?0utUA92cquUqJB0_WColm>WI1>~MT5;FHcMC|ru3IS4GVLwSLm;LN&^Q^Q
z%<ptlfbp@W!77?%Kv=Hu10^DmjU%rID~T%OUCU#c4V)87WDDHn-J6fmn3_PhhnUNX
zD?m`9cwuU*g(65#n6Hy_CeBr8ku;PfgM|`;ovi}UP3zLj4g`D@V-?s=IM&U;s?Pgv
zW{jC+0XT(7wtyMXTul}~<@V)`fthvRbS+fpZSOTtV=mbk)#BeQ;9^dtN3!p$v2>L=
z5lk4{{e>*16JX^W1-!%Qlrq!kzCh+7jkAUFt+pqyDS%}`>F5N54c(itJntQACLG@5
zl+Sk1+AE4}!Co_BH&k}V%^GXCkEr{(8DO*ZhyML814{ShuxGIM++I8DcgB8TxF=;T
zQtP0&;bIBe&7zg~8At}eZ^;VqrLFyPQ>p1lWKlLPWu8nqXbZ-#=A^zk(bvfxc&c{?
zMf&t>O}oln%GSziiGsu=fX*!nV@3J*P^0orcSUzRjdSmfw`1}gp>EPv5F--ZP|rXK
z2Um_2LqyaQc|f{l_p$vaW_3epHe<@TiWJYXM&tOgt~<ig(aHzD@5WpqvuT_kU$<|N
zSC}YDF4bu$fpq2tYpxXEX6u&lv%R0;bQ?;Rjgx&EHU0%GwnH`t70_|V==;#ZKOeV8
zS`|$1vnq=Kio2HknQ!@IYg6udmL+gv-|^*LVy$0`TmLZ#>wAxh@~sd$?}-BY=9XIR
z(cFuSInz{7M{D2Tt|#^Xha(vPzeox2cvzm=k7Y_D*7QBc7y^Tq5-eWhLJRg}Cy2~?
zZ8`$@m8SzQ<$JWbuiXGKD=W)lvSUpz`y!4C6!x=(-0~|dHRq%awt~;h{L1B{^*T8C
zi?UQcHySj+5a@wn)TwsfwAw^A;2|reveY|)+@w`;6cE<RuA@E``$`3<6N<Z_MN5=j
zy+^7!%sj>yaLNC58BDGN$xPEtij*8|YZOLOUet&2ROGXP#e`oYOR$vpb{o!-@onqn
zXo0T99RKDM>CnzXr{=THhj*|rK6pH?ro&}{KE}v3ge{}Z0*WkwW#)@n+nyX_(>d_#
zgyqes0<G#aD*Aud!h#OAiSrSSEqV@N!FI;m5ORf?7^AYz?cs|ILtK&Em?{3{3p7Dh
zr<6PMj_4`hV9Zee;5vryyxI6V(3}c7SI4ez7}6>1_?Uy)Iy7Xn5Ud+uk158)5;*V9
zm^xmak$b6lFedHaV2W})AcGYu#-PFY^b7$WOGmQ}&A^S5y$CZ2jSYa&rz!mZ0{kHL
zc4CG1OD9}aUw1(IgK3fX6@{Y%vSRef{8mfV6)VY5*Sbg#l-Tl7YfB|$UYPkVbGpAk
zli%)F=WU`a3bAFm2nidLlsgWEe|IzN!V=_x;>d><*S~fxCKKUsbz?v9;8~Nvb)WF>
z0R6nJH+<3--k1};Z_S0X_BBZy5I7A!N3Kl-+a1rp_gMn;*H&u>QLK;mkE3EVrnyen
zKd}~z>q2;+Ry>Pw^d9NU<*T7g_13(>^TK%2@3cB|7L{oKuF93Y$UVDkWD@N#Af|n~
z+DA<2<7YZ%mIY<m<_lM)Fm6+VKlk^{hIZQvnyQOOV7b2O&zJU;@%K1||6hV+0Q@p=
z&{Z*BWh7in^XI0fL*t~E;%BgS)!mkG3E)f7qN;9yIIO|VPjv-e99WCn#L~e?7ShSL
zluE&cV8X;5emgQJ9)9j?^h-8<xg5)5Jl}J*LhI{waGG}WM#D6Esx=cum9H2#snHE+
zNn1tf>4J2+m!?CXS-%(lr$fpe#b!aa1<M)~C%~W&n<>S(+=<0Fe(4;$QQ;kUX&Kwe
zudCp;ZQoZZ_As51c*iZ5CWCz;pytR(bY^512!DS_>3P(1{9_AB(Bf!WcxU~0C(|Pe
zw(@#@{wg}TWi_<cCX=#?e$coa(eQng=v+OAytYQ8B2O@L9*$W$$QnBppTsn!$?N3F
z_<apfToS=mW1X|nN7|3s5?~s$?Rf8z3DEC1e&#A1-*I`1o(WlBTh7k<%fqA}Q3)`e
z=W1bf+PdcDG6DR@YZ2xRhM3+v2&=PZlhHhCD6TE*uMXPh^^JC?vc@UzS!yVH=ZC@^
z$n8Ec&KvE`=gn9(crhHd0%~r=Fyi~tW&r0hP*D1DFBBuRMda5mpweD3rkwSB|A%)6
zM?BvW)-~uyT`#?hgYxFOhg#wXAQb?=)D=J+Bbrv_HOA7)OdxX6TF3dWSiqX>7B|xq
z%9L3tsd{If2DYrqK|Mhv$L(N^YC-?>Cd(6cx{w;N0Kle66vYK$xB*GJ{TK@AJvz>Y
zB4WfD;e^+kPb@aDS?ZfBRRq@hTGUQGC9iPOGFjGptlS!F+S-W^wSjLD3`-1-rr^6W
zv}PN7qphqB&)}BxUehNBi%i5YLP5(ceZrLevv!-=?J;&;`i8EiO(_Z<JFKzUT!)`+
zMGkFXA>g3Onrqc*-ZRRm+8jUYJ#x^MAT-~uJKbENdGmiLPC!TiLB_4*ZKQx~KKg^J
zfEZGbSa38dZ76dhnCo5wE`Xx^P(W4Z_0fKC+yf>x+)-YRK}c(x&6Ws3EuWlUvDntZ
z7+*czoO50p1E$q&y5rbG<LuN(?y3aO?bBM%5$~755PP)a^i{DzXF*ggg{%Hf^^wA5
z2>4eIihE$+Z|oh?`u~fN3V`3L1b9Aqr_(Ku<-c4`YjiEGr0EZ&h5tbSq4OZ1z@&F7
z`fE`5=kF8<CaSe<|GmrIKrhbGjW23_%XMm_<gzf}`?%ou4G8<5J$wtMxoDJn_WSK_
zq4K<HM}dO)!Sk7hbd~Q|y~@M2LipEoViky!%JXUTLx%?$7Hq1A_h`l@1D|Ix-lA6j
zv)1Eb>pK(vx3U1N1%0bL&R@9sMC)0%lKHPa`_Ha|E<y$mZ^JIojDleW$!6-mj|cxN
zmiE@3!>idC8S1!TRTvB@D98hl-)*JLw0zU?dMmC*Xl8@*&o(cdSjiZ~{=P*Yvy8Dq
zFV(D^lnRv<q5I!c8-kJ=tC%&42u56z6&XqeT^_4<EYMmZ7>P7bytRR7IJ5F=TxB;o
ziUO2PsT>_Uo@ofIs4c{}#zVobECGeKVzvojJ7Ry~D*;SJJs08}iT82?P>Z(tx`gOj
z6`B(R86#*s3#Elpf_d+z$?{b58J5xRF_HJ(R2mK2Nn0V#hgAFsw~cMrmK6Sf8GgP~
zXu`z%^^!x|pwC4t(@R*^M~&tOcuMd;i{kvaQT$Bg*h&2nKRk>HfUyF$f@0N*0&Uy2
ztEQB@xN@W4$huoLELVm9fIn?bXSRDUX?xQGeUo2IgqzRZOxX&yTDN^yy@?9pC>nU5
zYZiyE&q4Ly(NCA&3N1LIRnpkZxO1Bl8f|UPJ@Ga4bA<Ym<}a_Y$U?b0#=gn=Uts;j
znP4BmZu47%+qx+QJiCHFkrCiTdQ}heU*7<gKx)6zyJ_qXhhC#uVes0U_Yx>*^T!+O
zFYD8ypJoXMcAv%He>~PoasAo7YHrH5T{h%1?q+N_n;hZeU;^Z>%gqRjC8N(XThm#O
zY$ns!_d+&B3je<lKXR-kPAUN!s`gk}qCh(t+T^<C522Q{ucMFKzIpd+07_awl~PL{
z3p`URdQ95ox>fU8G=0k=29Iy~zm|Vbi`Git8|AX)UhZ^GQZ4(B_znu^L$I4$H^GOE
zhFm)Kg;l!`$v+R;H~Jo`af4U!xY2b51Pe3n#(Oaq4a;i3<;VaTP`a<Sr?+XTT|6HP
zblxhXtyv)iHp-p=?FsyDT$6?Ja<)O8S-Iv9KRy@r^Vo*=c6Ztz=0U%Ywn6XB49CxU
z&EqH>D6Pv3jOO-48EtizP2=-u!EC3GI+VVX^h3nvaUN+vC9=JZv3#__0}`P;Pq(|z
zhWWY=)weBHmKuL(Cs0i5pyTUM80HuqvO|=9YwU^%BT+ro1vKUHK^oM}6S4l^%5bZU
z1FbA@mD{ifWA_SVE@?&~H|2W1>c#sA^4tm{pgm`)ccNjxZJyddUH|s?d$S_5_ugvz
zVJ>snOa#mN-)=N@htWZ(hc#|OYx15sfE50JDbfYtw}Yt59+e+HTbo@BIAdK02kD0G
zzw~$XDY~S+zoHgjRl99Wi_vMvK!{)KJ^%`>aJf**1HS$lRIY#$z%5g%e~C9@tH<sN
zG=>~mx5x<#DAm1z1+!HG_<7q(_xJw0gux=k*t~addLFY354%tuVFs%*SQdi<O$#2o
z&*031ngVON2ZZRaXJIK~K5?53SAvy`#IZ(LZUN<5Didffww#F<WcFNihoJPj!ihO=
zK2HYd8aE1{qkEaq8n542c9ZIJl)27Kl$Ust9!Kv%q+6W4|L{nQA^x2)%I>^Z*k$JI
zdu=gil+bAf51!729^ooLUnkTQ(I*;n8t{S2SU3E-4o?Sf?5%g19ImVB?)w0Wr1^cn
zelFuIaXV50@E5QEC>}t!278NX--LMqu#AKL0dL0FLg-;Me;J!%J$Znl79(W4xsK5a
zc|@3}>OgaET@w~w)$<iGg95c!QKrEs8MVPwet?w`0P3K7@^O~d>$YdQ>0YrsL@WWL
ztQ9F&#9ugR9cgW9M?i0u8dNa26lt#?F?d$}ieo~57Vv@qnmMug<nRP+F^0ag6hUE&
zvY{M`P|Ue)9SN~EUoT^gwP}WiU}XBOO<LsL)#W2Xp)i6#`>W$zU+X_BQwME)Ex|``
zu#i14_L=RAyv&LLa04!$-I!6<kH-Enp9ReA)b^rH=sksZxBLO$(%u%N1RWJz(zjW%
zWd^@zo<CavRKeC+q}oDSbUFCuvBOVewF9*KY>hJe<r5p{Kz(Q|@Z6ZR|8XsQ#CC{~
z-|RkONgWiY-n?whwUljz&p;Uxw1)8|=>8jVG<09;%nTwRvC32voiDwzhDL+p_~`c0
zmSHYm2OF0)<0^1}^y6;dDVQt`&IUmYkB1XGQT^sY;Qv5)d0yuhb+7g`lP!r}CoJf9
zT_`k%@g}d~{+|Sawu1i+MkDHP9k0gdbCf6C{l+V;|Gycj0Qd{=I+Oq{Gk~v+=N(%;
zYz*i@)2J6BOKD)$qc_K|<`1YZpU7{NE~^NNRz7+vZu#`xWHniB=3FZ~Ev_J6>y0uV
zH|u*ZHU&fE*Itwkhz<4dm}<J;p#ofKU+qihuEh(MLG%$o=!m@c^3w5|LHL^lSQ=b0
zTC5CtKN^?PN~S6Q9BKXxc4B3ysLUqL2rq4eY^Gq+%1ip0v|rO>0skIzi;=?2YAaTv
zsm+zAe6!w*)rRPdWrfpYM#hzun#|g`vdrRG@|T9^rUcN>MNA|*)U3b<tN>wjTp#nS
zo7hL_;zSsPL!P(D(%({`>ham0)lyosa)JVao?x(bWm`;$IHLpzD;XTrpYP98ZzVvA
z@+~k~#N_O=0^}-X3H)RKc7*}fVD|3~n9|dYvB!eE(<eKDRR`7$H9fFrM&(Gi6vM$m
z@Wa4vT#w#Y2-^<yiK6G2)N?Wa*0IEj8)eMEUtICJzPC6tcQ!KwwfP-7xrkC9`$O#a
ztZjixd5R2DbFBeJ>2O|dF~;x4b1r^QQvZKBG6uk3lo?=l9tFc#h1Z^E*aV!GU9JoB
zD<9@h0)4RfbDP+w!a@@ky&Tyqu(H9s$G!WeTXD&~00fgAbjHP(E7)Hg5+;_9sTXNf
zEPVnI;eQt*`jzeTalEhH>gojdi}vXa?Q=$uAFR|n!pX^Z9`lxa7~*(r)_vyksReO<
zp?{reA+8o{vu3ybiNer6D;>d)#hIXx4mwk%qgo`}=Uz}X>)w1Qg?svUaexv<Vd&q@
z7nNe5T-gTS86!Zs`F(fb#k;`lj+H=Mf-(dY&L6|E;z;Jzcf}_N$CUBrQbQp?`$Uet
zLRmbP5A$^fDg6HhNCv>)rvzxMMy2t!%hxh$6Qs3++DeVr&H|F$YL!H6(9c&BdQ?MC
zG()6s4Zg3I7T1B*enJR^^p4tMqFp`Sa|4&@|0OJKjj;Eg(J6!UZECBlF#=wy@3!1F
z#K!e-LFqZJE$b9nSo9bX#u0E2sMZt1^6$8WFzW^^)gt-=4O=cQnFE9Gzkayy!t;9c
z?H5|RFe(=supG7qTf1nJOGe+x21!*gq|-8?2GOp-A}!+W#*2Gi87*1~pxp^j$Z;7S
z4m-BG{PZ$MJyy(xf$_q_L-rMq9V3PY(}>kLnzg?sOg(0CPk@@-uiyuh6|P{pugMQ<
zY|fEp>49VIUr$!w?nex>&=BBs94C5|@my%#hsr$WOpc+C>6x@bwqNM|xcWr8UuLZD
z#=_7-U>Je2Gq*)?UI%Mc7W^&f^?nv;_A#IHR)OY(%g$oFma%<!t17+X$K-zu{(ORI
z<MrXNzj**l15#%W`$Gq8s4)i^6&m;H`nrMb3BjxJ8a}4C6!E=$3jcozQUUO{f+lo9
zk!&D&qX`xwKe@3Hw-zH3q%i-yE;EJ4x0(e3#0fnpkm5w``8V@~4{l<5(r4==#Q?DG
z^)7s5P`bcmt1+2;iIR$fJqrD3rQvm(Xq$Z>CF->(f}X#v{o{}ZtahEsC$jz>smB!M
zzs755eL+H??#5%y=I-7U{#9|Y5Fh#g>>pe_xxpXY&)q#(th_LufRab;GAMUyf$poW
z1;UqHkS%#JlnU|$h4{m}FwfVu_?f?y65z|BB}%zOC`R;oA$%D0SkvDUl?ZKIctKOK
z?jg>HsUWqwld@gV#`O3Oo79tig7cXxShyDl&e8k`KgitV9zOJ}{OAVT(rTlQfa@7t
zq)?GS<5LU#G@``%h6)&-?5MZYkL%-ZYkZv?FLx+M&F2X6mydZ(8wctM^)4F%OeA9e
zh}!3?y2xS-2jIDi=5840q^$1k*~So#ANoF1aD6k(dpeIXbE7fO0TGm92WX%#crPqJ
zm%87!z%TX`MqC;aOf5w??w@Knp@W?%t?#ow3Aw>+7%Mcw?i$B9KK6Sw7wR=>5(Ln6
zE&O^5CJGyw^uEoQGY1#8c8$esIa~>cdwU8SFqWJ$#w30`QUUPyf#U&q`<+&(o^BJe
z8KrqpBETspU=P-f=S85d$Y#?3?{WHnw%}2`#0HrcrE#N1mUC7Hh%|i0qWYyauPA6J
zYp>-q`S2!w;~p&nM3<R#Upd(YgnwXkat{S5Glae-_lWdyUR5j@#?8)$Kv}CCD@DZ#
z3hiAH0>X*1gbg_QTuU(OymTGF&8$^zpo6uN=7K`N^$U++!+N}~%DBLqgAS18(nuZV
zfm3IRo>vSItIu_84$C^@J+Jc|*1P>gKVrn|n()Y0dlG;|CD(*d>pCsm9oA$aPYiOV
zCyGOylqNtR+raCGGK>vjwjUbV2EFWPDZNZlHv|>Y*B1m77tyM;1yPSB)prQb+V3d_
zPyh-u1W6G9j4Sw$=qtCMq6~lytO60=EfiU?MzjKDV6qYYTkS{aI($Y=9aj|%a8m>t
z;|F889BGXGI7A(|FN?J2s?1e?emh8Ug}AS>19<(T4QDG?F@3!^erE9)EQacoxn-?Y
z<8Myu|6hcR0q{@612AXw<>u821b7M7hV+|X*g*+kY?PymxfMm#jHDZA!!f8||KF93
zsi1uI%1_s~#KJwJrDP7j1{5?dRyg{Cj4!{xJ=L46<po9+$QYnnbbl{~q*lh=jpv7j
z|8U=YEjL%<ykq^hP{xr}m#X88|G#-J{$iKeS8-jR|1SAE2Qbr%MIhV$>iiUV5+x+v
zg`a9A8#0oRkZHJN(D^&Cs>eMW7)QSqLu?{q*EH<J6IrH*gRzA{h^NXOR@ANE0gKUb
z2W#yNqBC4o%1usE5b7wLpK2)r2H|{T{-H5@_nakwu0kCt{QqT02Ebpe1Q?XWV9D3C
ze=B9r!3q%8YoLX-dn`4OT=oV{0#e6Am|9xqI$}(T)((_o?(ZN?y1|xUpD-<Ss&*PW
zY}}2}g>b0Zmn|y{Yvjd~n7_gF`@b;)wQw7Vq{_n2uWNB04tg-liaKUPE#Y0+EtX^z
zX6rs(eB`)n-H-jFERtH5tp*y}h-pQe6r;NAKT`a{mVA{qQMkR3E5@$b<cxLA^I0C=
z^>~#-tN<%M2UiPL6?D6pL9umSkC&v_f@MXz@;LDZ1mUQrFP$~LNOc;u9=|>?hE2?(
z?suV5#49ON(=p$4L1ea-wbE1J%2G<;TB8^^Or>?^=M~&`Tg+*pv~Q<SY18HH*{Kq&
zy{3zcnzLqBcCF6TzWJtw+7fznKVf_o?>CfjrRH4EGHfpW`zdU_G4l!Qzow3x!ZpB+
z52M*lz-$`!9>|PBR={9NGAzg^G&9uKZrd%^A~&5N7g)HHTGtNqa-%E;x>vV>>3X?9
z?~AV67V6NTGR0!x4)*|MIJu3OEZ~k5{{KRx0^lzOWnzI{s>ty><Ox@Uf1vFf^Zd;J
z^^EYKg_^SqY^6E#mpYGIx#h3%#7dhT&nx%9y`eCDTlu`96hZd@67+c+tzr?BCn&Cx
z#zvg$>mQgRXi)&^_?fne=E2s->W>&s)I-kZtNiCCi>B2M2vUM=$PQZ8(A&29))>@g
z?*^Z=rnC*yKwWmm-<I-0P%80;2K43=zb}41y5m^>m%>W6qhL6MrDKz{c-2tADXvvP
zVN>r_Lowbstzw_YUE1n*^8C<hIW1!}3haEVD?oS4L1?CoP=HF`CtES<Y}h|)Q9B8o
zF16C`6gJ;|ikCtc4wpiJ)$@<k;snqEns2;-5$)jniemC+H;mFZuZua0KpASyV=Eds
z?bq-r!os;R&!QhcAu7=FGe3b9sZxe6ah1n!?I+>o;21-T+lBX_j<N*X!1cWs`@(*#
zFNKd-I>7~7#5@NIZl{0$N4LVnuSO~W{(el|<w}9C;H01yVz1(DzduByU3nAknI-ml
zvJTb)udYGGsinI0E>oM)Rn*?10vK}g+I9Cpgt!k@)B8sET()v>P%_HBJ1cvi@8*|f
z`RC(~nL}RLN^}9E?v+5gEB#IE3IpvNF%ic4M`sdxy2s>sx5mON7>Me*VFA6<@I~VW
zX|U0~YcwW+7j0S9HOyaNH7&=rhgGwzS<1cW27Epqpr>o(tWcffJwB0gODY^6A%;dV
zHw9R)_CzYI#JUJsmBG3^c;AQzWn1#}N$m0RhiLwa%@c?0Bk`V31u|QiESho<M1qST
z!hD9IgJoaouA6DoK7cE!<5qnbo!2b)KKg7iJqG`DLow<q8!RDF3%)3fI`6<z0pRpw
zC<aOi<h1!3n9HG5te#P(onc4N8$VPZR4C8dRwxYGjm&keYgzwa+dm-jYmf?ne+VQ5
zvcT$1D71lk7->z^Vl!K$c%iT)K8KZ0Lia9RRcmQAU3PoB)D|FA0=QOTpt2$zn1lk;
zB|<I0Oc`!&7uKTPZ!#{rkBK0v<e1)XO0Y47vAg%U7@&-gjm2h4Aim6@a$2bjJNx0G
ztW1U+FfrZt&6C=gwlRa7YrZ@6e+eGg-4STxECUqMJ(>jo6gg7M^cf7<FCu|6Pt<GM
ztDms@sTnnfDALAnx5n6Djfd-ry023L(wMO5{PlqG!<<dC2*kBvb*=MQZI|+2%TlSR
z<vpmT!Emy^e+oMIrKX~Sm41l&4hk|WFkQjxaKX~?6_oHw>E@IR6pg1bU>z0nEt6Zq
z_6d5qb&UubsIu0S@+a<7+AbQ%kJc}tC_!a)YcZ|V6!VoHTW{w*=o)lXCUD)5+J;pa
zXgq~4OC{Ht{#iiu%T0BAZcY3hR*a!6o`ay8U59N5|8$)t%+F+4C(xj0>EDV8urusv
zH4*LKt^ekJ@}-#qa8SDgP~coRUUqCpkV9|%dG>X~3SK#D3o=?r)z`T9qkEfyw=JWG
z?t5@WTxGsV{C&tEfd5WBfS4vxy8)TP4;8&x5aGGE{V%eZ1~x;l8=mJ_0K9a5!sVMb
z{8&Wzj4w2_ZF6%fc#aXl`4X-5V}gSUest#ElRh8b8xDG;1cw7V%`DCF=cun}DV<nN
ze-e)Nyg#T}Qv`|V&qD9$Le4wBrLhM%GlX!<uxMZ><A8N-BsiDe#Fi=T>o+0z2Cv48
z6@eawK^<FTb`KW*jWPcdahEHT2UL_;v1G8EfLyz{7}i6db^m(pt;>3^1^6l7Hc3YJ
z6n`QJ;0D5bFGGoa88n|_-`KB7xDCSX@Qklfs9KJ#VUs;1MK9ig(I%f$-H#x}KsbQp
z*Wmi`zyItLCjK;%0q~EYC?uZ`kSp2zTOsC%$%GM!?25Tzj~h_@fQz%AX^?J|SZi($
z1(;b;%|Qu(U`wK*Q6bAeM)0qu6kjuoAnO=*O~`kS&%wsYU>%5Hj=ubKA10RiQ?4F?
z&4SrZUfW?CC`N$Rx)1fjW?Hz)fc3r`(bQ7w1=zBf3(BI}T@UKNBL$+@W+5NOD{POm
zX#m^UrRO{T(T3#^hFzf=Qo|87;vF4d(ATAwN3(huDUx)wY+@2{E@cXmsue@}mPEG<
zwEyU4L5h-AXc27g5<<Sy<HokUuBG`wz|;ZWR5f<g@eX9im`x{QqL3x5T}huk-#2A}
z9?o6yX+P5!R-ex5LW{Fy@g9Po9n6}SRD?RgWBd6Q6buiePqH%~_Vun=IlVb;2tsE=
z_)bIaRr9U5i?MdLj+@3I&4UOpdc4lmG``OZ8oJt-nLg!2`*+gFxyJ)A1Jhy*n#SdK
z*-ba$jB9C`{Z%X`h8ufC7xVkZs#%Yn>Gi{2rS+3C0BYt(`&~a+Tbj5FsQ~zg@Om9g
z0JW-rjg~M`!lK&IqG1}uRhb}=#_9*Na;(1K7t2>VE(Yy1T>Etn<X;yIB<{6GM6mC&
zyy}>@vCt^x{M(}80o7}k>ahkkVluMxbb(zL33`?fxz#6DKWm|XW3$Cg&zoLd!hV^D
zjnho`QZ~p=jVA;OdvUinU*$%s8$O-xO^(?Uo8O5NN9!a}S0&GkXE`8N>*(6_h8d<r
zJm&NbL;nw{vXtUr`rufPiVff)7F6-%WaUN@9FLbiwS3I6j^XF927pJ6sp!)0v!a7j
z^nOx++T#bP%zS#(V#})g=36M`9AWi1{v>yVXshpJIq4T&l4#tk2mk3t%f>^hFED0I
zJwWRVD3DS7E{ClRKwz%Z_g-J2AE1B#2yS-yZ~_kQD(=KQV$4g{_o7fWWI3(encsN)
zJY+T+w0Fh?zKfmVVHkC0N^!f2y{tN-s5K{|QNY+wfJ2K??!%m<==`*g5yza29j3C#
z8f?R@-~VOu%M*VQQUUN!x&t_~Kkwn%D#8YxmIloTykyabOkwvuw=iMU@mgflnn`|=
zwUigt#io#*uwV)+y%B-c(%`RrvdVS!Vp#_6(Np!H@S>h;2o$Jx%yc6a!$Chwwa~8G
zB}l1+I1JBaMgZz4+wb`lMKdZ;D~)&${?|0)o_}3QYi3uA3$<sF)RwcLj-mo0!55&#
zBnY;&Y-~!WWxXid#&Py@=jo@t>sFh9rN15&rVBo13jP=$qXeNt7Ef1(iM~ba7RZ@o
z6&s?-+ggC-CV1MGFmS?~)MyH<;Z`jMi@whb{WLm-+wv{bbK>B7qkX~K@zU?sd?fk<
z#u;C#tjUw_;vT?QsJhhZVsMmu?aD6Pe^Dy)b${{DI}?Pp4pse_VaWvLm}OlS!ieS8
zq3&Zn$B_CCnE<>_(lxEnX$BK)0A8Eysfh4@12bR{=9*u>8K@N23LWR9SJ2KomTGZ~
z_7lY9#CcBX-n{o=R{sHQ^y$Wj+9#`E%z`Q4ur|%>4Aw!bu*0O6%CETRs?nTCxNq%m
z>B?veXR)PJ924Gy3niyBRvcEq;F4ynONV@5UYz(V@w;3N6SrU-<c4Os9p*{qxTFOP
zu_hQkKH2Qj#?tfmqD|+Jo=|;W`-^?dd0jxa!r*VJsQfwzpt%-;g^K?1HBhfEA9_e#
zAyxy6mVhOoM`w+lvig3?Kl}<-R5?N<0FGbJP3tDmbVck48dq1WDc&jJhkxELRe&j+
z{nn*!ICm9;f1_aI*n)VsaPoiP^x9vt*KXxepNykB;3+T-)OJ6gEx_G8PvqR`ua3-H
zmVz`;rk{%UpT5WLb^aKcXKAR@+Wmp(=BU9nwx*6ju`?>REoF5924K{uf>W4|o3jJj
zXT%DFLedcaFJbi_1gapVv8NEZ6N77&w)}h6W9PUv7wR_UzEVnSJqPi3qv6E*HC^cT
z_9I*GQ3L*7R04o%R6y&qv6LQyR0sWUxOa38qhhEuO5y*XL^1&WT{PumpH}(_Lu;wn
z0Bk|lX#(*QE#XFtB!UVq{~}9ZH%kClxk(H2fa{^T5pw8QGGc6h4pN>BZN}Bs2DkJp
zGe322qrgj2(_DLfcp5^3uBeYt#E$DwI%*d2XX{aPboN@sSO-Q+7Cw)WbyZ51q9H|p
zctVaF51^Gm1`c26bk@xM1rJ$1myu0xgqrEqvq-0AOgTztMenO`P2%G^Ae@oH%1vtp
zn<I{yF${4vXKLmRj7xrxsGgHkP<Zb8n0)D1>`fgHkLgrCbTh6cV~Dxc3SMVe!Ps9~
zzdO1fZP7MI?+tn3N%3{yQ-Z%UCMzQh-)FlW>&d=0Jwziotzofj#8jx-6=Dd~7&=Fe
z^q%Lw{_REt?mx7U@}EbUVl>l7%wIP&_5Hz5=NO{>FN8WPh42t_1gh{dn{;M{vBn7d
z(70dJ&pC^7@BN-3dqZd$db)eVaKCBx92^hBSeuP-%>AQJ$dL2TLIG11m+^Ks`?y`7
zmj8bf$pA>ic0P-pc_awTD!TtL5j(#6w=c>^btkI4vPnE+siIAkTp0GAV%ATgKt7SS
zx-zSvJI2lZykj-7th)zJWoHP$to6h@;$q5T-H4XF)wgv-zp(DF&!KL7-@f(Pb%DIE
zojvQ!ZP<|i&$jl*<44%kr&CpltGs}L!8&&4WPgl|t@r%HLgf|A+VgE#st4tp0=Mug
zE~b=Em(QYcwS{j>1mNy<407GhO|{N4^6oAgP_wBbu1hYZ!_!S0k@~&VjqW_83`wzU
zQR>>OOsGv*%~YD$)Os3{K3rATs|#zE+P`P&zke600Qk27_T}>vim4U$C}aQP8_yA{
z_1vx|^6(Bv7mQh{wPk>*U$h&$Q*NOh&QIFwhW1Dk^?V5Ldv$MjDgiV;**|B}CIxZ+
zHN}^IUCWic$iH?|^;!rcCo?`QaaVKwAmKXTI(!dSjGUuQP6X$(5Ym5I@dQpPXFMP&
zV2BU9Rg*_c+^{15fp;<7nhrf5uisH>vx4*P{es5Jq2p^Ckri0jYxW;8HF%87h5c=F
ze)QrES?f|-|NmX23&1~)WAHzp&$sqZXMcV;CNzhQ{@)AGA4Q9utrDR?RW#|pf+_y|
zXw07PrRz>G@zunXNT%=VF!@UV)GA!`b6!xL-p)wdJg${l0Ej9{G<F>^m?+3Pn3A}c
z(JpQ@a108j+qt+|U?Bs|8q9v-eEhuSa^@Gz{*By>lGcsXNGods^@E?a0eh)M0QOR3
zP2Q*4rDU;|V+l3(Oew$6RNH|9TVN(}J^RqMGW;KUEzUn6w}}XR+1o|aSqF-@73JOP
zTQx4a6_Xgr#$2f18F)v;Z=m<A#Z!r91z5#WGz$@K2rkD|+7=X$1A-2E6oan3aEFpX
z7Qr<F`Uv|}tWDgetq)*)i)Vs>kJ`d-tsPhg)>Yr<HlHnmURF7L%s>-LM|&2Yo~8}N
z7p5s&y>~Efdh8z<I}Jl1GDU%|?|JJ-x`wI7(ye27e`uf4Qf;DJoOB22ZgX{QeSN*(
zuwFgm4PJV;%x&#`KO3T9mAz(BsrOzU7~V~X*3T}Q@Z$4(zxlGwV&|aC!R-1~nHgTs
zo)M}agpYdP;RFhFT>>_P-g=-|2YRnt*96?3Nm2#3ZyywVynU$GwsRa8g92-o{(gay
zP5r#~?%})BU3_>h{H2=e#2rWlK%z_nB{RTme}F1VBU1KhEazWZoaNE27yvT?e^$q=
z?k0!}EcaJVCIIPVH)_|BDA2VIHib*?diinn2CaYha;{tLLRxqZ$YXS17Yw`fQny~+
zXAkdjHl71MRgD?YAEzwI&nEcO%J`DjkK=qnd!J_kmsS>+;cbX)wlO;SB3d>*$8Bkh
z>IEHv%h1n~`-)O<mJV)rr$eC(S@XU(S*UH(H1?D2f6Oo~A|!Lb275t$^&)3`ewX<E
zge-R;rxYa_O;yLZvl`WDyDeW>xTfA$x`p7wpi-^=MrdxOxC-GgP?u}rSgTYE|LuYN
zpmr=o!baH;q%>SVTKZwDcHDGt+3Fj5AFS~@UAh+aTQL>dajncDEB-R@nSM8hGBS&R
zd>(ujsSvkT&HCTR*PGi>XeT!SYuXjX<p(kXh&I>80Wic+h8mt<o}*EQl#!a*qy@#{
zzLQ{^t8)EId(PS1V6clYEi^u>HFn$#COg<*IO%tNINv%5)K>$#5}<rD?_qsz7q?nT
zS=#Hwzxp$MPs@KI6#$8XHW`dF5NwXo5+*d!XhB2gzSTZ(Z^zW<=9QmvV39q;WTgq;
zy|>uF+C{ps_b3mch4CH=%b@jZr2y19yXWlOE>*b;{=vo*a=A?lHx&(A!b__cq6(Hx
z&dYdTzv6v_;E28|kmKwcukKcnTc%o+>Aqvx@{Ul`wDCuygRQl@*sw;9u{w;+ShTKy
z)l29eolVczBqe80^Va4wA@Im)kF5F2^jI6irUVDvk%{SDZgkey2|?m)1ap`11JB0k
zFnQhwjiWKn-sWZ&ik5mXw>&W_WIss#fRWA*?qh9ucLHV6XY0D!wxgwg7qK}`X@f36
zGg&ZhhER4y>+=*|T8Ib1Pa6&fHybVF5(@!Sc$P6$=SX5G#9%kzM`JRm^tI7-&CDMU
z0za0tP_i~D0|B$0FbNa{yyY^yMEOE1oyTB;o^sO)G(BLor(nim`{T6Z!5Yx@MEh4L
z4uX4}QXbz~Y)3VwbZbgRs6t>)dvu$ITd#L4h5y8Xi~*3)a|+B7abGht_|+}sqMf`g
z&c?X-BdhdGSEBsv{I0=rzwo)UwEQO7V4rqDeT2d+QY=H*kjX9AjgNxwNna0IsA5<A
zL@=8~Qa7aV)2uv3zkfVvo4nb#fqy+weZ_lv2pZi2Ezi)0u53Z2fw)7}u*@Ii3d8Ac
zYzQmg8f?yJBbvHw=(9r2qa?t#k@j2+E~k%-*Vl>uC$X7|>=rkHyIy3iJb=HR4Rk+d
zs#O~akk|V@+_q=tIifvzxQTAwKjZQ7yxZNLVF8+cOPOu#NAzCfGIqyJ1e#UzQTU_e
zK(v*_I!COE&2gQ=e}a$<fP_YI2e8s*&ENzVxzxHy_aa}+S=rTw_X$b>L1zv=%kg{4
zb-;Sy*a%+pXd0gK^Agrh7XCfcG-&ZnQY2{aQR}a<%O21OHP|())fwT%^8q~2DXnya
zv2Cy~T>o-M8!s#B??$(N*w)dm-01>PDYl|glZ))@@%3tcfT#0Tv(e*eT2S;oKc&+t
z)dL%n+#+gQk4lni7;Nb^>yc*Z?`<xW2!g9l8z?S7M@_{G?%%XUA1S!Q#u*iC2Yvp%
zU=a~!r!99@oYziJ|4%(fYhb1p17kyOcaPufu>cGWsroKjRQNeluaD@bgO-2!Pz(16
zP&7X$bC1<_JiNN=lZSr4o1o@0lj(%kTIkbuR_bN6Kw|5veb+apuhZ4~9=w<-H#dj@
z@pT4=CBA+#RXJ{4g^>;;h8elD&1mX7<I*zp3o-y&`RSdPLbpe|$F!vb+rVOp%-jjp
zcP`V|1tBGXZkFOzCS5bi;icQAWCHG_5;UI!o<-kN2UQkEo;H4Z+u%G0{dVj%Xk2Qy
z8P%@Hm}0a6C)(MVQo+UXr<y?$e*mcfNDMe8i4qgQz_6HjlM<dg36Y+x9vI5(_>VKQ
zR;4{N>rj4|;+(Phmy^BWbNZMo0<etNzIg5EHsEN3tsPlFgFm!`KBnUVtgiVWhK-rJ
zw?*53J!GLnFtavFBkitkoXnt&l+#E1lutXhUaU8Bg|@DO%%LCcaYp+(qEZXL(=jt*
z@>VqQug~Fe^a)HIM;ntD45=e|FNJN_`d*JC>K<{N24QPgRtVS|<WjUz(R=?OMOKZ!
z+4v`=)1j~^Im~-plcIFlYTJcifdTvM;wpSb7hX@t;{c`CV80bX;_7&aQ1msrUpaO_
z%_lEIs?vSv+aj(*izy%;c=kM^t=k_`oT=k8tm2>G`CGuRzpoTwW3aI-vFM=RZ7l3O
zuN5q^zY-{bw)aC^ECpYvR6O&*0CXd0F5EX>_JkOTS7Qg8n@94r^4ZHDhK7XNI^0jF
z%xTBirQA~RlR}clgL2<2GaYC~XKSK1GKkCqZJsQ@?IGjx$QVM7Lep_&3(ZR}!+-?A
zYH7_3kFAZs#B%nNfwM~w9s3MkO5T;iZ&3R++o`);VY&Jyh!{?q(J5m@r0|~*NCiM5
ztOT(9_`J=;RqKBg(`*32O{`hR>w?e&dtHnIZbi|K1k)MP?m+#v+Xb5VjruHq%-IH6
z35J4lu7$=w;8dgqUkl=$Yyt^xjx4`#0tN>hqP>fz?w!=Oxb-*<qnBl2@l!a8jlgi`
z*gV(@v9lW|FH$l+`wZCj+rlFUtU7{Xd?_pPhINVq$Mx@}I6a#dPQ5Xw-Uq3|fz9!x
z4xw;TdqQGtFm~sdh=OgSPBY-&N$?o4EMj1#<l|P%1_fEZTNim+9A66|iYPjQV-e+t
zaOdJ#+b{!Qv;9^={*^H~fV*X!!{qy_lr!xw&S^Rmhi@(J*R1vg&h1tG##n?4>;R?b
z!umg-*W)}yTn)?k(@JYY!Ede!poA&&6wH6D9-+Q|7z%NzhnDx#!JZ8aMhQJXqYzB*
zz|kge&)VLcY;IsMnL%sI0eQaP`sC(?=@)8D9T_-;F%0(`bM*e1><e)}18SjxaZ$&2
z3jc`#83Q2U!kRSBrgZs9xYeriK|M$JTy{3bpS(HYb)xOQ(fWTHSDWr}wwz&F3thav
z;kU*D_)Zu<oe3A0>Rq%c3ywc<&if5rO&eneD}nI368Zf-mstY&Z|EPb87YSXKi(-b
zbhlzZ`O0n-c4JRnF6sKhe+Mfv+0J!NvCq$TKXZdHP1m_Ip1U?NUi5}}PcuX51}Xd}
zJR}1kk@z$u`xOp1y7(c<I2QPD5FO19SUu9NBIlcF{bvvk&E*8QyftW%C$;`2>|_SG
z#pk>bBIn92HHPrGB7L_n%F4y%Wjufxep|QwWLy{6ycZyX8O;f*zYD)$&ipwLrqY{B
z|2-YJ{q|Q{zy~V+5H{0k{xqOlL^a?O+p?aOWfO@%i&Ow4)~*0GREZQ`CsaxFiLI2c
z8m#QB#rjM>Ymd8E>$%T7L-cN)2GJ8FIRy{yU}*8xDSEhwl5Qq6T5(N;HvNG#VIipC
zS#JGQJmQ=DQk3$}BRBmNb$TUJDPXiSr*TyDf9zWkJkH`-@?k-&g=drkYVpR=)WNq3
zm~=%D-`VS)q|}Og>GWo!;etQm+~ZMWIqj19ZYv6Hqs#ii$-v!%E*E5s)@M4XpcUAY
zZn`n#LV>QLWmmYk+aBVdkWaCq|98LQ-WaP?np0P@)+c5x6{=e+MIB*CUTavz1JUBm
zRHjZoa*F@Z^UiP5{0p<a`i<}OyGTKczQXjrYj+yEmZ3g<4~CPDOs7|5;Yb7pl-2Zv
z9?Bu1xK;N8Q<p$&)(u~Bap=rGWRr170f&b<#aN?+|G2}j@B~dOzD+rfepp=fIM0dW
zE4`YEg%ZW(`RxX{v5t1MQZV;;J7IpaMd0B2pE7Hztpm-eQ}@xN{wF3#1wdknBTgwx
zAcg?i%J63vj^2L6^@ty1Wb)UP^w>gi(_(^wuT*4kjK(W|ySGU21_z>C8yjpZz0R;W
z<Flwuw|G9(O204W=iP-4p7o0P%91k340H#|1ZpE{FWm=7m*W6CM}QuT1+XEs(X|5f
zRS84GwJ2<gOS%%L4maxOBfTLuPK^C99Z!y+VfX)Z(6%BgMGaN{0=cUOjH-KGLzq`l
zrM+nGLS8?{CS^=G{#O_`QaxvFZgl`gYY5L+G-jNQAjV*h*sQPZ`R-DDh80?43x%UK
zx3wv#h<6hq+*ZmsiUKXStFoga#y4{gm#gt*N9T8fH$LZMlIJof(3#MQI?4yWZX+H*
z^j%!KW(4Y+Dh8+w&(H0>P-p3-k=Yz3zrj?(7-iZzQos5QcbhGGW6V*85LCzr<(gV&
zEX%T}ul(2OPoY&I#pvkq#Ovrn5!asy$0f}PK*Tz}l%S)QqU|X&HdzX^jraYGtEcr|
z?97=Q-=#?FTA|raaS{_;W2g+OzNuZuY*S{pt09uYe`1AH03>2KG>J#B(ek+;o>|bQ
z7My_KAF&9FGOG#Sv0R?kGOG=!OjV>d#Tt$xz|_h^`adk^ZNQW+Vz`NywrA+83k=Ae
zHl--YtFp5w_vJfUlu@v!O$jZYO_ffY8@5WdHr5spYXc-AAr~u@Ou;BOX=_1I0|lJk
z*SNxOXeZQo*<#dqiUGI09e7LknUOS&sQ@eE<CIB+x*J0QbL_%Il2b$ZGD`;umrVtw
zJ6vqIbuJPvK59LqS8-<j608c}x@`G~+YBaY&GrI#ig65*jeVc~{NpsJvTaZlambzk
zh54G{+_GN`>E@gC*?m6qt-aLEVkT1ShOl0eqRnI4zy~T%&)~mc<8#g87Dxqg-y{4<
zi}DQ1pqP5<w<2IdVb`r~NZ(if%ZdP;N7<M`u~d)XcBD`pGSpyK89iC9^{ola(_qHN
zbIh`_(RE>E_XUtKL9$=QHW?JjAjPA?8m}2(7!!1g<945Y&2!?P!><TcllUQcNk#qC
zQUDh19qd}G!V9^f9C(s2bYVkqTOdB#S@nuXbEa4u9-)e?E|M9q9{0}-B+Qt`t^1}N
zVgyWKSP794V6ro=;>0UK3bXrS5d1;RHeJ+RkS{xig$t2kP!i(?lqoEjfPKuWc|Ldj
z1^sju$4`Hrc<0|YJ_0bJb}ieQg5D_|`X-Bc&^gCx-MsVedry;QyLh%FQT=zzu`{c_
z`ix2d`X>fc$kpr-SPbtOYd=%u{{(dV870(dm-L2OAEUrl+?>ZZb>gSS#s*A<$RNBc
zrIx*2K~B?*(}5TM!;4d52gv|PTuu+Dq4Ub_AS#I4n%#k`IX(Y6LC+(Ko@G6!9N+bz
zTm%LUF<6Vy>g-z_^<ts5$q%`-xEndr;moa<<+&Uht5DLAHO#S+$qQA#P5fsgIFqZq
z{xRB;izwfIVg|r@WM7!^83GpSR&eZB8d?jM4W@EhQFc$o(Aa><$S~L$mGt~94AA}O
zkrYUA#<CcXyQgW@^k<L(4GO1FutEQ8|8;)0_Xn63clFnq7#^@w730N;qaiGfGgg$i
z2ySQj_q*58AXGxWs?!9dOA{_#6B>SbqbF`?+mzyf3r&PwFhh5VShS;MjfUf8m|1O%
z(f@_Q4Xyr)p2JEQ?D+XJox$#!-+_Jn{gS0Q$1`<&Tr*k$RUDZw&YFVrAi3;J<~ecg
zgt?>lD_*m{uC_0bXwHle?P|E+H=3e>1xF@lX(nbQ7GGJ~JQ`VU$bAaN)5uIr;Xe^Z
zDgY9vl>nxnnw|%5wEAp={Qc<bg{mkpk6sk$cXKR&FGmSrF(+VGgjBkL+O=X^gpDnI
z15g*2cldW&&<pJ4Ky)(<x*X>o<nR4@d_A6z?vrO3luWa)aSr>Ag7Iw#C4&M%$8Z3J
z8D29eki5a91r!JhxP`L=WkYG#Vwb7MeOBd}+Wd>(3wzepxDf3*j4|bJZqygEf%bc`
zuqfo7{(H2w^m=-`K%c>J@h)hk8^(FKipkzr7JJP5F|dV20b>l}r(8fLV;|$K5RUfx
zZ(sk7KhKy=6bE3%MDhXx?vJI)SbOf&`Q-@G)Nb_bG%lK(Of4$tV)FWi+SX7WlmOKg
zx+?*M`;A@)5fGq|o(XB|btF&560iGBq-^dQp}ER*6}%#pUi0Dc=L?K8WGP5so>O}@
zPodB*aP_Am)!al$H!uTC;a`oJgXVv!nXf6v2&@?0VG)$rGW135i=i>u5QOs(c__XN
zM$%$FRdZ+x|A{T60w8f&37{c-s`=p8*YgpKrg{_31cC8j37kxO^r&zH<%=%FO4?>t
zEfPc2`AM{K^;GzPraW8Lm2#pBD6`+Gwc%Eo*yeWeJ$UW(UgZCO{O{#Qc`w_;=ErR=
z)(yjErwOKJ+p{62#TGDxeg3ZB4b?$f5#$9JEWhQ5a#w~{7wV$H70o_w3WP8lCldIN
z${G@DdDg@DK^y$WbR_FJ3VYV()nv!0aaG<2@I#NpDbZtY@ENC|gy4s3ZL-Cd{OGSc
z{gAzg@ZNZtF%7IuZ$v2++^C8Gj<dKL;M0o1RB>Z0#tfxWg$K5R4IbTelzNhtpMwcD
z#cg}W<9~;L|M8a<h|~s~N-_>u8WAQ)XoXa0qb1S~fEob_iI}~Dg!lSBx4!WNz;+zV
zzK?))^qsr&7*|v~&V3S6xd5faT-caS@C@aTqr{bK{tKq07MlbKXr7gq;+Uv&L%T=k
zJ*Peoq=b(I5|!(MzusXzBCZ3^xlYhkZN$MCIciIT%2iXjhYF|Tv&hJ_ITxx}8>NP;
znQ30Z<4#|8_SwM(oj7Uo+EB+KD+DYCSwN%O+Bb#&#5OVpK;kq|<4BgYr9WnI{f)hL
z7QOOLcy&ka8MWe-P2{nHh`mnxANYKmKIs!I+gZC1z`tnz^S=ThB%EcV987|BA-av+
z6|JbwE;Vw2<t0uGh8=uz>`k4dvCjajsN*4D)Wx`cOla$NNgP;kn?dEa5yRqy-}&;~
zS*!$qc<-;oLz&K}M*FI($B#xpxvC==H`!lj=HQLCKIZ?j225UgS@)#ShO*5C34Ajk
zLm-N$9*13V!|Dd-w!_$6J!5%3LlG?$)x%jHZ<pt`GuPuaffy*E{S>ZkE*au!)YBCV
z?@9khcM4V=T50;;T&O5h#(0AM1o~j7o1k8cHHE<m-T8@h9E)2~x=ZeZmoe+ahu=T6
zp-bF}Q~)F{!J-}AMsfX)w{xJO?Oi_jy)Ee9@C6ImpKrizK?;8<OrK;*Kc(MO-4B-F
zabl@O+T`jTIfL67H6JDD%qzF7OINoyX8Z2csWW_R-1jGrzis!BPrMKByRWCgx>oR*
zml|Wr?7L5n4I_5I?HIDmsB_V^8_Nb2%Ha{TBlPYJ%Pq#)>(7+?Ls;$Ev^oui*Pnnp
z*i_+p(Ylv-4<|3B(v1o1wr6!kOyNIq8tDR%xQsFh9f1LLkUN^1p6&bVvx1FFRd+U1
z)z^!(y1^h#4h9YT+ZOt@FSoUb>J)#GbYr71i<<Y@!qPellhi7Fm&?Ytz}PenKKNST
zd+%BQkrF;AdZ@X<J;0;)&+jh}x;e>%F!Re#qL|MD{<T8(xf+GbI5uLS_D{yaKx-x6
zd`BkKZZ@;}^!vemhCv+PK679eyUa~fHKUBHb0Q~vh-w}WIv5RxCEQ&s?-=y=hWHM%
zb~gLXaxWWi#%1A_;vDPuAed&qe(__?E^}ONHiIl;s#8-50PX>&K|c99(4RH+SnHEP
zRjwySN;)|>ceg0?m4^P%$^;_-p?E$=NkCbBJb|0q_skl<ob&c7o8HHZuY|5k^#IN@
zcAMCH3_Vv>bV}zqKi1d99vmyxo4hU_Gsg4~;Gy=43GQmXvs`FO9m_ef_|{EsL=2Z>
zE;Qm~@Ej-mYiN7AMm1_Vk1;gT@}IbfWB?>?K|~WtRLJEP1~;;I$ezbUPr|-+j&FMH
zek*I=5Y+5~0^RbT9Ru-1Dq5WX*JcP@jawh-;C$$x9%7wqOEBwP9#W_|Yf<@B$|Dj)
zzwsSl0rF0}##IKvq1)8&fGDs_;jI(fDXW#5uFP}a1#1qw+a87VX0PrtR@bgHA-&pJ
zMAoW}{`q*Gddqr$vujxGwwqdcXHK}Q?e1h@Tnq%b!fv|d;rhk-t~TrCg<>Xf|4*5!
zONJR&VYXM#TCrg4BZql#rkr%fS;Q?zU9nR*k+6^qfW+NOfI~$+Si7fD%u$HB5VAkC
zX|fjLiM7*%7d#Aquh7zq2*y4O;H>2zzYEKb(lWO~y-W*=Mp2)S_Ic2G3fQQcYnJw^
z7U&xFnX>2BU}!6#p~?xaBrNv|6sU&-1uCDv*}F|?eo9+VG<p>*4wV4fs$4HBq09JA
z{0=?7U+@d{7bx7e(-10aI!5is<8DgKCbZYKrh`ZDGn$v$b)<Abizb|-dl8!eGkWxK
zCZ9v6#iKfKEOSKi+1Q|5@>YAJ5<piG>Y8|8gvu(mlf~Q^*fmBUyD0*pJ%{jgC0$nQ
z!_uE>&eIldHP=!~w3^x0o_j;@FLo(pp22Z&+IH^-C{t_MN)hO+34OkibC@0IR8s%-
zyUpW<)<5jCVa`;~Wq^k-ja?25S?~W+*Xn+{w8q@2NZ74Qvj7$2Ncith0{<a~Jpz_@
zBuX>8lPn;{8SZiTxp}>6cVc4ZO#%E!3D9Cjx%1`ZUM2%>ayN}0+20vU<v(h#g$fi5
zuqnwi3Im5GkvNT103`0lIgx~}xVq-f_SUmWU0c>HH?Owg@fL?!v|Tx=j}~Q<n(ox&
zWd*=%FatpODl3qGVFUeq*F}n>Ut4t7Wz^&KW)~O#Tk_P);Lj48O6O_XC(9~c!*plN
z0CBY2(vPx78Al5GK<hN0OXdLXk(Kw9E@50y#4%QMTkn~jad1FH$3|frg^QL$xfo`I
z5~cNlP$<wYOKr-Iz>h+yAUESCbsTP`=K>UzO4BZ4xy6($Uzc%p?CCZz+r#1qN4Kyg
zV7MgEO3h9ybR0XBm$;ceewRmc7PNBmUZY9)crpK5t@7cd+H1l#DQdK$G~^-^jS5fq
zuoTzg`_~>?J6XaXzPG)&7F@a#rWc|L`rkh095GWVAgosdm3%C4t{79h2K+^U#nZ}!
z&GK}gA?t{mld!eApuHCM2L-h84ATq*gS(>?UQvO~BlcO9Hb&e=w>?*B{WuL~8;jrO
zs_5MY7aSu9DZR6Li0Hi<p2TIXty(GkCvHP30224({XW9Z!n$&#wTVy8BDKpYD!~3F
zt7|DW4=z^PYP+K0@g}CqakY;3B#q##t_`}lGQ7~k-|FwbD@dTP>+E{-_zBA=`fZmq
zU$Ds%mRqM;(c()f$F$Yo^jU|#W(y8k#kBCMpV_d|w2Ftaob~!*E@ehz<MeFW>q@sb
z$mn9AWdkGK;#5J>#!)FkN`PKfuXboVufy@9LoX*+5Z<iGXLVzJKvd}}2Yxqqzax5Y
zZ+z<hG3O<n+LXpb-_`mM=gGp4$F=m?ecQEV5(R(0f|&#Kt{tB%Q>PX<=*7m6YVWQY
zdt=e2tXrEX0Y1Wxa@b&a4v(7(XyGy-b!VhxvnI5fYOWV+16;CiCO+&^0V~-H?pnAb
z6b7;@@N}ie!p-!4iUA<!5UEJ4YZhy>`jVjLQGd=<xf-aiXTO7$&hM|cVgU|{2T-{3
za~Z#L1y}gT`=2J()Q!aU<wk$I?=F9+{ly9w@y?Eo!>mAgIEDYjt@zhGd=uY=chAhc
z1J0R@dChn5;k~p@sdLKr?o7k1s&stFb)cEh?T>3t_&=VBTpe@U_&N<Clx?n`gHi`K
zSrZKY{`~>uUwP457F}4qK9UV!BL;w0>g+&l6t~BRblr$uPJ*G7X=K`}U=;uN>NlMj
z@MiX_KfGK|Za<v|9VW#+fEQ-Bnf2UgDn##xCY#+R{NJ59z_AY7%E`q@8MJYm@4-80
zoj!v*QY(G}hY(m4o8!V!$5B7mb!s2jTxgK-p#9TNC-)k_*4jj9J-g6lud^(X6Yd-p
zLNg<nP4;EdWV3hEL}HCp03<$#_xrz;zgHvfMzIVAd;N8%=dzRlEHL8Q-2SoU7pdDy
zpd=w)|D$@@DuCx{>jgpOG|X(i(}02Wjg&DhQ^I6}IqR>LKsXBwIYc<8s=zuugJxEU
zHYAG`S|sa5+*gt+sqz{_KdAi}_X}M!Y|OO54a(ZTV=mu__VZFF2Xapj^&U~jm9;A*
z;Nv^9cyEq><!3kFcx-o9vDIUWvv+Ct_ou&Ay6@IBVrf=Oa(xf#KRv$6t8pA}^kpxd
zB*h3ICXY1-=qu&B?$FDvw)!TDs})ddcRm(l1Lw=;0>yJz%hVv+Old2rAGp2AXic(+
zys@<UqY|%KJ$dNS{K^(;Tj1?68}x~Q0OE~-JEHjy&oi%)+k@I*rkLV!FshDGsZ9T%
zhuT<^4467bjN2$Gv<Ag=5X5J3(RuKkcvbj^Y(q45yr6VD%F)ucCVfv@<EJqctTxp|
z4q^kC*#c;+R<=wXe<}qe&v{_oRtzdJe;!Ss9?K2l=U_T|!b<B}i+Nj7M`I}-|GX4{
z>irzzY8>;Fo~v-anJBX|)nDRMNEd*_r}2Mk|L(U4Z_>aEJ=!Q|Ej+WJFlOLAC&-~r
zH-<jQd_4ph3sd_YnxC$R{hVQE&6GbKAd7!srM}i5PLz8^d6bPaw9#xa7Xi++;QF%C
z%#8~=`~QuV_iO0q7=iWlwWSQWV^CR_?V(Zy(mR0X>qT=Kq;(&xlPghlc>jmno7vZ0
z7Ooc5O!tu+G9Y|U5G54#7-_y742ya9ecZ{`Y8Esrz#skf=+9V~zxr)2Xs>pOHUb|*
zq-hhclQA#uh}$rmgN?%&!190>8$rx#il#htj6T<2jdqOa{PjQO4KS?2BZZw5KkAu~
z24cC_Xro_KK3<{c&&DG%X^zil83E+BCfnYl8TGcXNK5!_hy{Ra$-|Xcs}NLvg3(u`
ztX1zo6)cP271tvaxYGupI1RNEsm*J1e!%LlG7a70z5y;q;^lq#{{8ZDxSq;XEohvW
zGz0?l3=Qft#%fu(5}EFQmirmZajw#PXa4j&=EOmovmLz0{^(<*7b_#Hyvi_cYT=<x
z>D=q}O3Q!ZV@L)-;yds^{S$BRd-5-6x#(7!{=cEj<eXpc&Po0K+D2x_*5&FA$l69#
z-RT-TN_&?rOhX_2Fm~w`C|PJYCQ@&1BDyCnoRP=NCYWl0XJ#c6aRgg`MTLLVt?43q
z>?d3-T`jEX$&)i@c-6bS(15wPRl9KGCi>DJH1PGatSIy+*+`{o)s}q-POdyU#;VBr
ze8V1LyJtc^>vLkrskZ^zWknm;N@{OhofiIeCGFpljlm3heAoQ9;fiKn`)Odup83tT
zQY3}{#7FVdM5x5yi~rl~<d)y?**%rBG7}9M0PsK$zv<4A=Ru0TH2(Gtt+}~nYA}?W
zSTsr=@|KHySY$D)fTFE)k;ldk;P~B|p63a76CqExr#RPwYL#=iV|wkm4LB!?<-oJ3
zV-$WA&^bbXV`GRkjs`5Dkoyw_Lv>&4{<^M}Z>xF!q`-X^1KZ=U?2xJS%5xa5FALEE
zDB<K3FsolxHLE&MPlUPCk~c_g$x2d~EX{5Jth3F2CB}x625t*ciPE}GJ1?R8i0M)T
ztS8IzuY*Dud-Kz-WZx85h3<7c_OKS{azNb{dTNIeG4!=ou1y5g$h#qeqqZZ|&z<#w
zzh^yQ`&vUxHTiu9-kP>ifqP2#wV3}rWy~b*&v0C=HPgVwMD17iuH*sP=fd(2nH(^X
zA+344fr5FDpfNKPL<&dTcQ&8{*0zHkjsCB;2HcL+uGD@h{3pHxsQ^fPC;szRCBTQ|
z9WR&gWn9&W>%A4x%Q3cqf)&YG209akzdizVv|IRGUXo!aR)UaV68!n3@G%1np6TD^
zeSfYQS+mctBGd(SciH^IjVpnYY!5jl>01i9MVn*#&Vk;(+g;ZD^2=7{?cifVX|p-+
z=r;ClJsc<c^s!ktibIMn8~ZUd{s_EhgjfinCMU(f8Kq7Wb;e5_Et^Hj7+5u0neq6(
zJ;EZE$rS_j$F>cyMh&`7i`Kug_7C-Mj@v8Si&<YjKS8@Vi{6gQS6{ek;^9p7m-rrJ
z41mO+Py+miK3IGmy(QF2`xd~JR7!`1d3L?_zmqw8A=R4#(fgMhW|U88J+NrT!*fYm
zvwk*u2K{-q$$Q-y9XCj$oR(Wy1fu<|bGxgPbYg(z-^YIG)+UF$ub!7_wZ?l`{>+w@
z#RSGnm^8zsG-H$a7$L9^F2tFb1+3(A3WhHw>&QGmRnizt1W1``Yi`NZ?~OICLju$=
ze*88q?Y(6I3&4A4qHzUuYD;x)0PD-tys6vEp!*Nw78Id$%+ADN3qyQQjBakAd6Dlo
z^NBGg#%ECJP)1ZVs9jl8ChsLhcQ@9D*)pUp#uRsf&zJF618<7J4q^;<<yx;-#U`M2
z^ptYqYms-pf!KhN{*Jc$WS!LWsE(@<vG$woQJUEnN-@=(b?w_z7JRMOEG`~kNk!MC
zvPVS!|4^#hn=}BEKE@!YvdQ}a!48C_U+p84_MiARqyixEbCduRTKAbvsVkW1{giv#
zNltaxznH>&+mzbE97M@&^>CH|i%MqfxWtAG1^VZ>A<)VSchlf)eqX^2PD_~mEWs8p
zL=itFluphW0s{VJ(D@Q{s$Hsr2a3Q-Vq^Po0x*JNfchF0K)m}>j|}uo&iO3-Ox`X_
zWuPpVZjl?$p+CMe6;{>on1LK;MkTG2ApxZ_guBJx3j9~kwP2mC{|?2P78Yq7&Ni)l
z?#mh5iV-5-2gd+9yuhzb>cwrAPUl`k;Q4BS<=PmjzgMbBG*M~zGDsnI(98NsF*UFq
z`EVQCplGA#k~e+B`_jr9!PMUK*Orr`T++2bP&)HoA_(dWt|6gx6qJ^V(=xX~z&>LQ
z@dP;;h?5W2KUlx2yVr|{)f)oBKL-@#xmXp2K&>>^N?^J7>+AV2g8A+!o*|n5PzNbu
z905MEzHv~;e!%TBS7{H5Hgb3pC1Ks73>QbA5A`|oC6{tsV(2<NhT{j{BN;3*F8t46
zx)f5R$4@U^lRnma310IxJ4_Uk^Jdci6W@(rz-LSRi|zm)rS@qbT#LVF-Q&^A32W~}
zc$@m!LA{(3%hklUO_3Hl2fs60nAbkl;por@%EBD+nLHNax<$3(DunO}imhWA^b|M4
zwPFodR!&2p8~PsJljXaBw;rrMBouANTwq~w77@$o-xH|=KM@>K_-prr^{=*0lB`!x
zHY+43b=v<>fDesRyh+=Db6=n0x3-DL^K%W?vX?^ZeyVhjZSker+=@bO(!7Ov*HM(<
zScLR|_An-)173#qa+HtoI_-?f166T#19tqO;ofyBKH-aAn!;dLG$n{1cSC~D8ZiJU
zMci1AWtmpW0-+G-mT8RBQl3@i6V#bCa4wuu^Sv?S&4r7&0jm*6{l#04U>pKV!AOe5
z(scMwU+1w}(8ph0gXtp6t)QRzRw~Ws6huqB<OA>xt{#`yxiQVCIBOVQ(&s<%Cy@$(
z#P3uB{E0XE-4>dem2yU@UkHxj$IvO~R%O*@Y$f;~b#tmdwhT{h5@b|Zm)+G}oJTlN
zDF!7H@R~HR$60{`BJrko?|M{QoI=+EY+rg;KSgpqhl5&0{FB>m)zG2b1F$%I?11r-
zUiJ_p?+_(RMg+2gU8`scvO3S*m;Cp8SJ18($!h!IU|o0iH(4n?fg?IlP6`?;q5pYz
zoCds>m1mOz<VG=h0(T}ORu0@l2Wh?f8w7qsEQgbD$C;%Bm{&A642Y_4=ofgkLki6u
ztN+Kl8>uQj<3R^aJ&>0F#GgXC03?2-JHREJrNu556m2=&S_q9b!D10q7XY}1D>hsQ
z@UIYZ-qT#&;+RG8ELIleye?2!6l*J{Uerw&i?bATrsmpthBYl8Hw3~OZ1qXAI1QNr
zbO1PX2T?8{u5YHkCqD1cw--0T;5$C}Qm%%Q-jL}m0Cd<XQ@_UgR@0E#KRX0XXFdAh
zwH1HEbFcCG&|{S#!vG`GkFid0=eziM!+1g8<r~akN>9X!K&&6+xFG||L{c=BJB`v!
zbq`}fU!v!~fmRF04aN;+1~B7wc=v_2xTB44$q%p4$Kc#;4d)f%-lSraU>pp(w)E8y
z!^Bq3d6;Kb8KydhmHmdF{RN+Q6fhgK{Rr;tRZCE$;{{|?S0Gk^Xy%DRfL$!6F^%Lg
ztK7`+AsGzLCaWw*@a{(XF|glY7mG;eTpE`=h(d}L*pq#T7LiD-@%O4h6ThAbpe=?G
z3*t5%Y-0o*o1tToa)o?N!!u}k;y9jHo3g4$mbS%Owxw-?)PQh7zr}=}hrXOciEr=)
zFZRldv}dc%Rp0ACjnfF^*e_nh{}qgPVel0kHVf3JmUKe2%kfq;E<)quJ8;l%PgvPj
zbbS8lL^bXgwtuaKiP~JHK;V0?@4W(zJy$rT&k#!h-G?qw{ZA$~r@1ql!ftu5Fd24i
zPb=Ui#?TnXra^HYB4-=vR?WTyMeA^k+(fMLg^ESb(*Ip!>uYlFGtXc)lM~R<y#6u%
z3tiUwyV1>e73=5RZq`(OS+ve$F^lxQ+v$0lzW&D?VJaZ1o>%!b?}glF2t5zp9bA8C
zTvvq~TNOs=wObUU0oUBowz5Sz_d|AL5R~rLL~BfDrNxv0Df}n?D3Sq?`1wqL2-QoM
zc?DPjyG#LEZJ~UzC_+H2A$XX!RH5aJK$faUw+;p4=8P6G>#?m!&S3p#s^1xkE+Ik`
zxKXKKMGN+<bI6?FO($el7y=|wAA;o{Dl^Nf8}|E#tRhD)`>`Gw?Off$s55M>3RwPo
zQ4B^Fx!|5YuKOw9x`cv14wbIj^6Hh0jU6%t24&>GqPkd0yJ;VtXuiD|8^Qau^TT`c
zG}?{7lh8O?-C3ul<||X^d(Zn!M1Q9`$pD9AeJ~?~ANgc#Y7kq7+hry<d`bzhN}oEj
z{5K3VdZlO7Ytq<!wQW}c6UFPH`bh^|gq!ya0Pw7WJ%hpK^g2uJ5MUjBN4&TltmbXe
zW;oUiwpuMmu>snSL^ZdZFT1L4P^x)-6<{jJyG3w!G}8|;ZHNsw)NOFfRKU%un5Ky@
zh5y8#M=}5sKb8rgeI8E*K3ZX;I`)nC3rMTH#(VFvL`}TN*4=IifJH&D`r$!aZ&@z1
z<%K>!@0utUg+rFb5BO+mp}R0Tkjnn`los1skd-^D9Pvk8@0XW?tXnz}<K~I_R35Lb
zK~^05-aidzo{6nT=&o}7gOpsQEwrVPu6ebtYyAecBd%;n-3I}!tWB^6jlJ;%eAZUt
zqng)EzW(Pf-d6l9%Npz$!h2`_Q)3MOhxc)XRjdae*;2Oh@OF;bCe=|9_RYhMUneqz
zUSw#vzvVGuw0OW^fL6e{p}17OtduZ=>(y0ktSwvVQa>;UTkAtP-u`P7R>mNHWnDV{
zLBPeCvU0359`sLSEO@^l=FSAu_!%5Faf`j7s~@Y}tA~O%T8~+iFR37a0MTkG{3m`0
zQUQ?oiAsR|;DE2d!eaQ(ejHLIjHWNPh?wd6R>93qU@OwOMxhUXGbS6gEoIP7^nD>0
z+_>q)s?Jm!cz&X*ert5U4+YZ_8!6tjM%qGCG;CV(Ey2VBRooV|?CTFI4`f9nI+e)b
zlYfTkx;>YfIvcPk|4>5ir3?=WQl{708;n>cj!VS)MqLpQVY7+gsJ6^I_?|~B)OX-V
zDObf<!^2iTE*f5KM`VT9=B@pH`Jh(q#_?l4;p&%y<^P~d{Lon@@h>730EwT9t^|0U
zdy|FF>(#a8Sr=Ko8PGxB_<tguPSXstEYc#FH_EJQ7z3*$r}Swlk{E_?qtpF)I8rv1
zvh5zPVnKbGi~nn9Atjoumt`sDFYxhb&4VRs!rmx-c;t;&RuC)Y<6vFXRyEDkXyieT
z>+m?gu{9~Lt2QjIjXl_#Jk`dK)n#BEyNjLEQzss-H6)w?{hsr<Lux7`c-boc1O3Hu
zs#Bp2nHzSVzufe6GjO}#u68r_*{1}|r?lK7&|pvVUY)0)fG#|<O6oBLOd6z$^S=_s
z6oi{u|EXuPo*|m!J=%_L+1Z>);|rJ^y9%A^o7~xBru&#6FI9rL9w&&-Ae+XTGshJA
zsk_e%YpgYf&qSZ!nWv(Ce+A*-sL&Sl_InB(@wLTD5yPmsx8Xm$huTB5N{7C)7y&q*
z)%-c_s}u5nc)VFbY%hTKLPz`1UyPN|+MH?s2U74){6M4vAn}v&pP{#PH*)qJ-~_yY
zzPcKEVZCu8N}MX^1@7~!lJzRVf6Cmn>h^F|z&kV3+-Z3^%bHNa{8BLY_<u7xExH@r
z40n^{2>W=Pd}UvMDvcKV568yHmnF|Qv{fq`z$J!^2I~a_^)*Vjh9%_PX$?MI-^`uC
zO@F%aa%%;_V*Fg`GmP7EE91w5&ZvMeBB1X?q2ES?uk4kHR2EpLmS7om<Na~Q)3;zZ
zNZkVF(y;rQlJd>bt&QY@c_7C@nSh3n_XpDi29}*2MciG`EoHDN((0f1k;ou`iC+^O
zkOUOHA$q=AdL|X!C%kb2xyQVOaz8`mWS!(NIuKxrmw>}!EX=)ls#~t=ffl$2eE0ZX
z6!DxEHjc7egUo1wM_mlh+K<t_qkfpD(_lR>MqrBc;i^teX?0=(P#;=?;VLy;Wp&tn
z4L4!dhYoUO`6+uA)^_1^Q;fc=!)DlMFRNc)G%j>}F&zZS2vD~2owd#%$57T2Z>?su
z=)jGl{n!Lmi*jI1t%Mu*Wyk=)??a$SVIk}9){wptt<}`m)nQaMh?={c7n<BWbi2_x
zeM}#3C%bZI!Wc38?l?F2d8?P*2q;?GptXmHFwZ(3XiLbRV5h^R+c@ukdz>K<EB&RP
zMdPrgxI<+?c^88|&!tMt5MZt$YOV6hzAgx{hO67~?!HxUQ)pX`+)h6Cj-thy3(vT^
zFw+Od^cY~UD*-KmQ~$oFUaLQp)dt64?|XHxv-fW78aYnz^BDY(K3myIto5bG0;oF}
zw)6A;rCIOWcx*3*v}#*xXuBL)P*l$_mQJ+~44PLUYs12DF{CEmi1kpL<H!tUC;^V&
zU(2QNpZKvz20-H1FabQ8F>k0|=lz@4md^2P6#|NHKtW&Rs(!pKo^-4RD68e#hGy6#
zkJe6+XV(z!H3mUtrVYo9{K6tLP{bQ;+}xyEx1{E~b00>1yjiCiREmUct4*1F>AMKL
zj$HF7u)ku~O%^(oS%p%P^}vJOGBYT2tmjc<h5D&)kOL6H2z|C9Ap4iL%gys<#O`CW
z+Wtj_e?Et-7f`He>Z*0EK6eDn!spWz=6X=o0~_{AZ;lI(yH;LK``B7{rkLx25W98q
zb;|vQzQdeh`Wa&mc@Rj@YzUg3Av%5gJ#PD{%pIPPPMKBs-tE4YtB!Xs&zk638NG%D
z>i)89J9ph{ZLt7qgS~cNQe%VGu|aVlDC7{yzYPZxlstt3PkoMiK`(31dm?x%GiR=2
zW=S^3s}4|iCSV=SA27x6FGKC<?6Uzezd>19oZPCw$iScL+>HAXRBYB~ZST)<S@R^M
zIiQpfI@-tAlQvx&tcgh0A9P6zFLinjre|u(QtMqXo0{gtswhd}Kk=iH41mP%PZOvR
z*%XK2EZ}`nmKJo+s$M^mPbFI6+j&k;H%9&!s|YFt;5%2=e5CdB4bMO11~Td+6q&JG
zt;EJs3*Zj59Qz_-!Q6^9uz;}YKjM^B6im=cLgg)=)Ovwo{TwUr#fP0(-(*`>YR4ez
zg4r=Am>iWspoBrK1aMMq_4}I@f9-->!cl;*5`dItuo>%@+6p#oYu>uO1MgI`9?J)u
z$0Fe4C)MwI6HKuJUS&t!gh#QN?WN^dwIAT+S~1)8#rL(htNyKm5kb=urtSlHu}W~v
zQu|u{!f{l*dCm}4HSJ$0ZYbLMYn;P-vwf4@<Pb_W;tC83wXc_$KWaZ2Q=rv!#<8y4
z9+d#~k75=u;{&b->oBuxChvp0jscqk=dxi9aTqSqwPwo&!%&WHyKppNUKj&b8G5};
z9FZW2s&3w=pijH*6XP6KAccK=Po&cB==st<o62Rz3FW_q*J4dO#^7oca$EPkUkd+;
zACF`JBz_Z?*#Wd4^DYx0M7z|2#U=l?s^cFwWupaj`AjE-L%w#P^~T{^$smZ?tX*k?
zbZTRL!v?_i5pU;2(`yTrWu`HU4(EL9@Mq)3pHYgDwSH$PZCkZlKqWF}NqtC+r7~I&
z>n78S7%r??R);N=0HR#rc_KdFSMV{v=ZO;Zu|38>`1ac86I*A?TKcJb-QD(qdC?nc
zN4rPoRn2gkxj#f*BSa}LFs(WCke%^oFi`uy8_1kdxFuf2P=%pv7Q+7MB2d18!9%dG
zpvqe0v7Y{RQZ(K$-|addM3BON;<q3b0Eu6z1egVTDHK48m`t#WqC~@Vv`O8M`G^_z
zv(0buF$=7NEPN73*!rPqs-t*FQPHjYRQ8^X08Dj<HgHI>hkt@%H&|TiKg_<c6a=r%
zLRMED6hr7k%+SDO{z*iC<yhG>Ik3*>h^^4~G{VxRHclq>ytx}l|8a^f`LLg-7vLZM
zm~*~QyGfWJN^3wUxfF~Em@L9SSSiK4sO0?}CnCT|SM`}N-C{k&gJ}Nz#cJ7nZ3TmX
zGZ>6NsrZVTwBh!5Ht#He5#kRY^MRq`Ul^%ed_A78{5;4O;>E{6bW5)62WxDgOAIjw
z>O9smanRTWi*t9+px4K+h@yoWj$uUnk&SawxrJlz4y?x8Vu1JeU(hF*rJ<?dG;VYq
zvae)Y@hsUpyB!~&L$l=2)rpxklR1?7jN%zYKveE&-#sTv0PCMDJXCijfFr%{LslW0
zfApNA+6?DBEHl#`%mbm~#p;bQm9(uqte+Zn-m3qe#5Rk<jI}ZL%XChStZ9Mq4lZUt
zU8R^vFj4`K_|;4RbJL7-_3M1fEq`z{CpYl3ug~xl7Ja5pTMJ8DFkecnr`4k@!mxp4
ze_G2%45?`7zFVu1Ws%v5pD<Y*$>KcsQ9kJcAS;>2B|wZj-T_sQ(fs-akWvoM3-scx
ztQ5ju<I87*2#WPZt5|d6;QyH^$!zIG^w6D_vE%o>4$AVLWqD|m@=T5piW_3EV2RDO
ze);_X+RMn-{ig+9whhpnHw3U6^84-88@VUq4PzDsG<?3IFqpY)0ED9E>*0@MwB`qJ
z(D}6wIzR6_5(ws6d+PS^%e3WUltN`aM%~`y9_=~Kt471Mcs70Z8T+zdUEh43BSk$>
zrd%Q#z1>PNahkh@_l(iGz)YJt6WGTJuAIJ%J6uavDFMxE7Qr+}S{5jA(6W!Z>fwVA
z@doXrXxx}M!)-f@`{2|I?{m6TCw>)D0g(8Wc)ec#dHfrWd+C*|*&B}!^3G&&SsRJw
zz+h#v+KOW%7NGs3(m)D@V0rO;{f*}ta6um5qJXb9-n)2CEUpvuU{@q`^O@ed7#zEN
zu#_@(0Jy0j$d=1aGeDurzOt&1jKiZ6?0I1YsHQV}qvo-2uBMGdixRd0Fak;+TWuO~
znF*p=G)cKe%o^jK$}qZ(o8EsN@8J`O(!a$u>eIP8jB$0Mt#uu=W`vw?!agt;`m`xB
zWqm3@nQ=R_q6T72blnN6lt<?#4}D!)EP?}(YE<^f^Zl~Q`oQ@QPQvq-Luhb)#$1`M
z;Hj;~TNh7U<;);+2g?kUjL1@P;KkC=ff}Iz*DuPUA_xDc>hF7&t|sjzUY7RY+>nU|
z3N-p9z7L7Je4ya}e!u^>Y57n5Mx@3n@vG640I}eJ4*hQ#nHk*##5z{Zx2CYiA9|FX
z>OLp^<fQRe2Jl0H!;ZWx9PH$Mxenu)qE-&&)Ovk)E@~@S)e6%<fiFV<(m%X?$ADjD
zZ)FOLmQV=-KL@TN;go_qj{Pyz+@f&RjhWp+@XFNh;L_3gB@1yy$HCBTgk?<S*vfwf
z{F66=H_iI-sfGLo>zGDo9m7}vi!^@c3s{%n)ZIG57LrD;hUMl#wA_`zyEDeZX{{t(
z!#b!h#+!uiIg78rpvc&^hlIGsa=qw<?D>m_UVBV(1BeDfvr-cdc%5*m(UJeXVnV=&
zz>ZdcI~a3rzmUQXt?S26EWsPw7emQ5O>^1COrL*zMVJ{>)o{0={?u7dM3sg+g07?d
zR68%+R~Tl|KDU+bZ)^x1#P&*{K=zii>S%2uUBUXEzzU)%-g(?mK>Lchi-Ks<`vLc%
z^Wxsf<Y=x?stB!a;!anh+XQB>X~``m05D!w*S%h^{~D_}k@$H?20-H92o6YTv#tc1
z+c7Mn5UnM;YMM9vg}Z%5P$2cjRQXt5L4AhF54+Pce+6d5pha1YL4q6oCGlKO_l6|!
z2s6V{yBL=nMldO)8g{veb^C5B<;>c3SD>sNtG&p+piYJBSafAm)FJ<Z{u_EyN0|BK
zIGb-;n_|rCr<>e4d|_Kk32xv;D$Ad=BEc$cI<mLo>)!I>He8;E&Z3&CZ=ZaHf4DHG
z8wxiq{ExNm`{}65^|KA}Z9GM+b>GK_)~Y-E*_lJnFcaMOS}8R#<HhVc8Ur)8CLQ$F
z%B<7xN?N$aV(|Jci2Fyw>}FEA<Kg{&|6jl9i4uvAAQ=FOzXbym04ML&0=rBdIJi2t
zKs-&7SlN*|y&p*PIvx|((*j*dB|r;$#GAD$WOBeWd@`0>$+FVU;$r4e`K+HF*qqF)
zAg9y(;WO+e#ujbc(@#-5TIkv1fSsX((NS6TNirxPrh^%fteua@hb^uH|E36aI$*rF
zaGL3{<F{#*J>HLl&ad}~hR^Vj9t_{}S^^B4XdQz(aFaVUXB$7*?pkZpI?qdCr!R@n
z-Af9;i2wPd%sjZ+)3ri!DlW{%vGFc=)_)Ng%xVIyCsT}zh~h?DsfTxE!XD7iTOY}0
zbP2Q|ry(ZINldHq#?T@)Ck0X@%$X6Gj+QP^ZQty?lq6NoiYiSiy3io49Uz|v{L9CM
zlC9#r4xefJ2y-dGgjtR|t6y+929`E0$ge2>ZW(1nz`2tHZsPn%eGaSxI*u*@&&M%`
z!$s;n5%)fW@EUW^APiXkmqw>V;-@1O0Exd=39uu~Y^6toMUlRizd+TdHBfFYM?1eh
zSC88?NY<~zMoyRP2K|w7VER(C_2mK@CDv1-loWEi7RCu3c^kCxHw8mqKojj`QJVF4
z5Lhb>Q{J!NOHpo>!hsLNHQGWJcA=iRw1`9T{+ZJFH<dlLe9c&XVD+=yDE=_G>^#*V
zIf9jp#tMxutIxF5$q~!Fpk|=XEBA;5hJI~Yo{5egX=W5c454Rm$!X&?(wCO-Keh|e
zyXhil>=~IF3d0y_{_WacrYS-#;i%kHX&F2^IlU9XsPfuvtSU|Vxg#4xftbcVY{Og#
zwAv-YQ-+ilJ6s1yd8rpJ9BXB0jN{D;@W`KetlMR1j;vF*uqn$qoLDw*XYJS&?mq&T
zIR$g&Y!HhfB*&GfcwD+Bfg%Up3vjLyt^&wrvIKkU-Z*9MvY`eT8n!?N2EV%C`{5&n
z|HNN`bOA{GTNwf@xNem5Yv(l9R)*F=u!f-_h0~3306G-%@E8d1Wx*!qftB8;*T)x~
z2)ea{7yQpW?+A--8&hhayB<&p|MRjk>b_e>S8oXKLqF=&OnkxUieVb4x%@_dK4W~!
zun+pAEFIrd_*4dfZhz56j;jhsqBa^!Dqf6KV)$Px?HKzx&)*p{%_H6<@XBptr+Gg_
zTYrR8iM1e#BGZChpSnuaM>FTBoN)$=rrET4kY5+<w@5!t+K<zsHl~s_7kWxIa~`yl
zaLgXyYZo{#St(I#ArkZ<Ehe-z3U*V$l<o=ti$KO!Y274TvlPhHFVK9?%dRi_+6^UY
zploD+vAW)cGiTB`kZY3^_AzS;SEu(b#16P)+hKJkyQQ57#&``W{3rezBm*GvH-aYV
zP;kIlAT+>YQ8TuuDh5Ec0C&T@UEw--7?CeE9YHD)_{2n(QFgLDoLqmeEZaIj)(mX<
z@<o;&ron0iB{b5$skmS8M!9|Negteyo3RB9XV`v@-ale5m@n1|cNSG{3xN&uEz$qa
z#s{D}pfjy1z2I<e0Iid_vVk9PT2^WOQF;EiJ&x5pk${Jh$wu1u7ti61GySkwu{af&
z`E~;TP3kD~R%Cntt6(U9!GakMjHupS4m#JA01-Mm*P*P&c2Gh2j6;3ge-q*V>!e4<
zMi5g8%M}AoIS;bqnizIVX~2NN?lsQ5rpNBkFPn3jh(pl&Ynwebd)FglQkOZe?@7Tw
z@z)_00ExdAI~fAZ>x1Q(qRrIT!X+JC1<E=808~4a-__=4pgaqu!q;+ZptA??Gwb?L
zko_)T6nTA|Kfc!K&Ws{tq0sG!QTTgVAW4u`W~{JYk7rf<1)&h2BDxy54)0B|9Ps*q
zV<2wsh(?ycu%L@?MX;v&)IH7P0Sxyx>DkaW*3ZUcKuI2g@_WjKi3^DKW!CSK7N&$n
zc^G7ycsi_&(8l+yP}6R=bFF&sXBh!p7Y-a-G_FJ(23fu|Da6{)UKV627DKv}SN%<M
z_XFLkq~)^4NC>uv9(rYt^Ure`tEySxO)L9Gw9mAX23?T&7(6R24K3n(`5av*+Pg0(
z<!}szTT2mu{^`TZ0R7J>EQ}a1?!_65!w?16$$f+O<h4qt&QO^FLVcmuJes!z{eMtY
z_xlacWvsF0Z_pP{e!HFF=c3llVn6LynZkeKuSB{4B>r}spS;Ph(-<XIpdI>G*lAys
zqr7h_YdW`1S)EdcnVPIAuWjRlsp$0PpwTtUVSe_<xzYaAf7`|r+s5)KS8d0+j`3J`
zoBe2rUm5YbwmWYVnM$uV#7H?ma{dmL9_{%Q<w}3PUR^M0?ZoV25H^Kt2hwnl>*;Ag
zInrs%RoW@PsokC}N^bwwMklH<rm`A0UH(hbyUwRJhuv-*kl-fbX)wA)$<1pm=-m*)
z!Mh<+!tvhiAGr=hASke}+1S2_z*wmP|HnSR8ttF+U$=L^zn3G8JOXTQX4kZUko329
z0$hXF*M~atml1cF{~h%{aU2`-DAjhn!!%D=md^5ypKUr)-rPCI>6Cy0@H_4gJXTuQ
zvN$%{|3Fc~^;-Sj>LFJMUK`)9IyRV{<FBKFZvIr1^ES`2;`BSwCPE7H;1{d^I|W)A
zUa(d<(D4;G=xx)Axvm6CnRBcKR$pSg4&6VfNT4`1ME$2Ug=NlYpKl!oq}V>@Hk$8(
zms0uic|Lwp_)q+`NCiORU%>s7xXy>`6;p0-C~S0!vKC+_eAV$Wx)NYCm+1qhg}PiC
z@q736Ax`mF$s-E#DNJ?~VuLwYj@n<NdFT)SGpvvr%U-f9Z1gC`<6*t?x}WiQ7GEDk
z3jpbDq|Pb?-qC~l7{A9-j9Is*gr$NQ%7kJ{e4RsdT-+eo--)S3@Pv|}T}c&~_aON-
z@Nn~a?yVFZ6N{}-to#XFu#O5vm!<TeiAgD!#r1|FV8E=a7q7v`6llK@g5lKJ5n53a
z#TI+ODHmlPh`+Z($IkF#3fWhr@SpgX@pE<!iNqgN0+<`QYRV67#C6b|4oNp<Gj7R^
zJFbd7a846m^oE%?0)0nN)9m7g3~Z#VfY=v+1jljK1|F^T5Dc4{q}YL|J-H13=OZ%_
zZQR+-0u%#1u#`hN*Mb5m0%n^Y9jLC=!3rP4MIdth@Oad_uX>sV6t9mq+IA+(Fk?U!
zijZzYLJ~15P%%a4xc~H6(dsn=UE|j3l2&0<_-J^&W%@fS8vL#P|99c8fLTX90YQI9
zaPVpy^*hM^0QZ@|wL{=dP!yuivWA|!ehfGmS^!hUha5|^p7gO{3_#PU>@#!B>l_6G
z)-iK(!!zHeh@mCx?)L#7zcoCkI#g~ch*22^t}L@Q)Qo>;Z9)sb4glDhTIwG3;xu;!
zOc{6^Xn)e&K57uoK%5$7#c&jSY57n5^~e|iiGK-haKP=rWk$Lkr&z&3%P)V4vESB0
zTHJ|^I@;%TP3pAcr`K*e3QRlDO>*otpK<5!h+z0FdupbEga5zJ372iH<2yJs+QAo+
zgnimruVO5Cih-%pAl`Zylj;tT3qd6M|2$82eK?(pl4>c(blbTbVdoxR+fS4+IILzq
z?X?=Go{RE-C{0)?aKk7%8(7X0<^$}gu^vmv@!3$ARl}^(I*5Tf={p7Ogy43O_2A=a
z{XW%Sf->F?w^@x1ww7<VHSz5NuYbxqEd`93R_=$O3Y*%x{5+Q$_2T4=<4s57*PkQ%
z79A77dLO*8t<x2@gKLl{+pEUhSO>E;f}x1GLZGy(DIZ#WuyYyvBnAJ(KZ9fdB>qL5
zo8%vT#8``HPgm7x^^&HCwBl}-B=1+fEgKEdl{uib@Mb&$%Zh3|E7H?L`zvh;8zNM%
ztKb~j*15nVge*ORG%@;&%k)xuqbmgw9Wd*mE&LP=4&4Thf9M|xkHtc*>E|x*OBT-I
z-TK<M652lhx@aUq`8wUB?jx5f{em_otFo0#o|IWFn*;ltsz8sHm5S?Z<#(~NVrwey
zfSp@HTn+B8*O@F?l$H)Yn~}6Zkn|#Lt9o@%KPxR*SA33hlm5=fY>B;{vQyRRu~^26
zRgEeqZviy;A0}k_lx9DQx`&xE#+r%DfQ>`bsWFE>==eW4FWG8puJ(N90{wEln}5U|
zqYc1v@5T;@%(Y_RT1-Qj=y%vedS9U1e#c#BRt{M{BB-uTZLCv20@F)?+O9PO1^RVe
z31>kvhkc4X=k!ks|A~JJsQ^g)t2jT|8xoiu2+89&I%3>pb2Z$UD1zQ*DroI5SCSyL
zBOEb(|70-1-6A^R;Mti=)4_+6mUwOS>lr$u4lXzoOoY;b1mAsM&j?O!nkQX<3tbv5
zwN`*J@3Lt1D$U~bwFm%%1<J_wH`87%G>g|Me{^pQ?*#j>aPvDlR38v%10$JB*ZRKx
z7*6-yX8Z>?YI}hGUA`OaDNC@_)9G-Ys8m>1UmL=o*4VT_a$v3Yl%p)jYQf*CGVrsk
z_kU)k_uP{1qUKMP6uQ6v1m<f}3jc|J4(S4r_?PjYU(c`qi0Aur{1hGQpKBGQv`B`A
zzX#_DJPUv9R+GNScj|ey+!&$=<%A}ynN?<6`diS&LBlVvt4B+oY>VFd+K6<gPh+lW
zW|Sf$fEXC{FA^^JA}|gXW(Oz%u<b@4V|)&<P6G9KfIi+f(%ZCZ2ii*i2`cl89AxQ_
zm%2=$TZ3C0pt6Oj+6pLeE9K0X+NxQm`VIYO*f>^iquoI0&tz1g?6w&qJJf$?`*!0p
z?Y>d<Rd%j<9lT7RQwQ8RN%ylD8{RcE{)YP;&x7yTR}6Cxs4W!hHO-avK)uB(tsP_o
zh>l~e1R%>kTKH!^<6^yecGn40Iq+^SZkV<XDdPHmC@5C?(>SgK<nc%wX!oVl0GjzR
z-&vMwJGI?Hx%N`pD<g%U7t9aak@`c&1i<np%L6dGmw65LU3(6G23o^5+Wy|P$*n7e
z|HMCuQ~)IYZM^)r00QK%h|=K@Kn@q!iI%?adY07FkkDrubXxj2N^^%ablQNUAM91Y
zhK79jT>73Cdc;@S9ksxK!<uazj2OU7IosM)B3U2l!Saz=kWjwFB=~67s@adI1W;}U
z;yH;@yBWFp$N4Z{y<g-#J?^300;bn%ZO_8r-+ru>RV`rtIxDANZBtUn%zVm;+T0yy
zm(`LW-oDsE11drfv_T^o6yuPrpCwyHxB?i8x30@G`l`G#JgQ?5p~P=e0+j#szNl`?
zPgVjjL%>v`?mYl10a#h1sQBi(M6WXIm}$OyOZs<PcaF4wbX<=~?d#7m7@iQouKXEO
z4_?FKeP7~WYj92cE)>6YU}MY`bAj7T_7FSZK7jQ@GXv<jM)cm6yTAjsNq^e-?;r*L
z#6OL60Z1e|8^9eVHBWTMdl8}7qH1@Vu<w&cn<}iw%E7Ds@5s**uc4q?x_m37Z#(>w
zfmyn;T0ps)llQEJ86x+Thmib#W(Wi^&>#&97zbm-jV$}zx18|WLaq8)`#@8hPK8KQ
zL3A@tQ2f_)<ON53)0%Bjj;Zaa9oYp!QM_kDKCqC-dl~;sKXV;_!HkC8?kC2W@>92{
zy%bU0Ywt-j-=)Br^>tU^L5zT@G7{z*Gz2abm?&&oQO$XNGZZvJFJO(gc3r2j%h(cS
zCWm=)1r)?TLibm}HM{$ABbZy^=L663J}cZo6nC`to0M`j*v#w!JTdy#V;L>Lm|u;!
z6H#0nHL#|kt5aaUTg|E7d5Vib?O%>fRtYN4?FQ_O)%)#^f!Rc=?_F=o7knfi%Jo<e
zDf}n?d87g$kr>$k5+WqI@fo>#(^XO}tRxVCw0O#A7;Y&P2CGY&a55_={1#VGL3}6}
z(z(<=fmA-~zGsC_fo5?MU8pS>N(q3t?4NJ>yjwW#6HTr6+hD~*K+CQfXm6yl3gO#B
zm+CJvVYDC=*e&l`nLmJKNR6j<#jyw2?3cO$#8yJgrqXP<!U#&Jl?a!WZFkH$ld3}<
z7aZe;^9&2}+Jal#$*5$;#77bnT+D$1)n~gJV8;QCO7!1laT4ijX9gApsk=`pw^9y>
zcERli9s9CBb3aaXb|YH~19P5XoPqo=kKF-ktMhAH3jc{jG5`{Z#o};wkx|wOxrh=4
z|MRWyF5UrQr+THH#4K}<_}ZBQpTJ5W7aOnl{`Jhl@X9&u4@R*2a<l(rP>?$KJ{wzX
zIX2GC)NBuj1@H-&KJLbI)jfDW8jsr+(*T$j<uk00aE1+s^@OLz3%=I}bKyT;&t*~Z
zxY%rtpEF)*_B=g<1}-$M_;hYpY4(Vxi2eGU{a9i$AZcv%aq<0qFO)Npk>nKt_nHXX
zWjJq5%A_1;Mh6%)zN3GJV$0Ex!ha&skTC!f32%{jK5JY6BM=h?zA8cC^m(IFq~;Ul
zG_<*~44%$)<TELc8UDBZi~j`5njZrALryU}J^0iPfdcGcPLn+v`>Gn&j@j{cas6Ho
zenqh|&``a#%jP>K`CPOSbe?4;#0C6c*OsiCHo__>U}*)SYHN2D%aYuVt37FF6YCfa
z7$nnD6sYkae5ElS#3EJzpG9{Z`k6+z`N6`j(akM*e#(~cAF*h1aJ_y+yyumEY)OxS
zdf8uGUDEnf&SfUgeW+8OHrNFES#R?3zr}UKbp3BW?TdQZpPrdC{hT@P0cPve%zZ=D
z$@7*|7W+?4p57dJDjv#^y7r<1`gKqL;&r~_URmeW3on8NZp2RTSO6SDNIiqP*zC3z
zzj6JWc5$wKQ}9nD6n-H;G?Dlwyk7rlE;bHbm;>use)^((w`xQ-q$V6QsO7^vJZCLv
z(`LVd(e|S*;?H%^KcOrrvHxn2rO<6CU{;GcpxFeP+KT<*ML@=LBA^kJ)BlDT3%#)U
z+?07?$F|j<i>{);W%4&)vIu?(ke8mmAO8lca~nS-{A<_K<NNFVuK&8<jPN@*g-tw1
zlz*u6y$~3s$B#XBYq>))D5>X_?9<DV`*5JqoX@J1mDAd}!OX%R%3Y4`Csurt<21T9
zjk2bBpa#11*)&|8)GUluwSpW&!uU7-9FM(YH~Z^wPx>Jw0Gd6`$8qwl53y??o$So7
z{)qTLixRJoi*qo5#l7Eq@dub)a;K4bG9YP8XhqqXw2iZ|H9Ln28!sC`FFapVP|#oP
zHAHM1Jqc48@|J7o%k<hN?W#PW`Sbmm{uzpyqalU=M8d$2+b1RxKMbM8W7rt!0_4MN
zL_o$mP`i)*cV%<-uK(r~Nq?agg6-XO*&UzQ(0K~7wB9tG%46RU4gBR&`J>lU`>S?F
zWrP>l%6zw8&7!P3jVyuspOZT5+hE+wy1TQ_?B7L@so~>rogL@Gr?6Am^3PN1I91T_
zmff{hvrS?3-`Rcx=ErH*buUmEZ1oT50B*fpd*3I4{Rk8}9u=!?Qj``;Qi{C;@iZoB
z2<s)r@f(Ews?=;+&9nVD)9eK^Gc0qp1ETZVPC1b>P~ES;57Sy8p1=(;SN;%I3WPDp
zC{Zlrns4nRW-JRG1b3_b1{zME^vd2ujAxm3h~p8^di{ZZbJ{e8|3tz;x&R~+YtSO{
ze=q-a0_<7BHCmE|V1snx)j~XBdy7h_TnjJoa4uzm2<g!j3BRQbx=MXLp8=qyQ-T1?
z)3S#Zx#Z6FOJfe|$fi}F<INITHXJJIj81F{@snpj_XB!gq(u#B)iOw1%(%P^S$%(O
z0<6=^VK1VBPw2$rK;LebF48UoS_#mo(A0+INyw#V65vrh*Q4h+@6Uvzt%<{?k_JBS
zHgPoY<HTZi-e3GV2-a3BalFR2quAt05B|V>*o%N5gZ1NwAwVZRL+v9|5vv}QSsqb}
zvNJEvJ!`1tZ}umMyeH*-=$2T^r(dV0)or2!1<s?t;|V!u>fnG;tuwEqL;*oz)Op`Y
z7@Vy^rHnUcwlubuo6NVRP^Gzze|GP`%5v#Sm2#fPWnYi1SVW!+oLi1g3sMJk-c#y2
z>t&-Vm)ft4b8nu4)R$+_Tmw_^Pb3yd20$Va$Ny+rE6K7;f;4IFm9IToo}?vME#5?T
zd~|D>I0hRyK3+CQU_}uRs-COfL=>rO_q!~frOfjNEB`m`k+wEtVCEH;KqEjB8W6j3
z$4<p)!4&?L;-?>03;@U9eJarWko1A3CC0F1>wcT1!D1_LfVMKI=UBl-=NC|lF+PUR
z&;*;os`^+x%hz>G-}gm&xnpA;=vVGT9e~TYH)dQA92dj7kHU+U>aBodF2ErecNp`b
zkG<~Fgma>F9}v>X!1SQ!TEY=pW^G@lLrfdz)pOUJO5+U$bC}~y48vwrntFob64vCU
zpNFj5nsPqCIDf^Wyl{(|x~yGfpvj8HL)y|mn``*+f@O%9zV~{<<o<{8I?S!}>>gjy
zSNKGm()dc@Kaq$b832jI9{%57Utj+-3H)U_BukR8SgDP#A#jWDWR+wAUZ~n7)M-&Q
zSv5%m51U?ZSw^-1=<3^FW3xlS0Vl?+ss4U)-DwNUvUoQamVQ$Hl%!-SpSjt{iqcJ$
zH2~j1dE^Vl9k4Sjfs?JBlgt6U-@-PSWg5^;Yi*v;@*Zj1i-D|2fOPxOIDV8h{l8c2
z4K-BI=UymNXroFd>UR8yC*TEoR70)Z&KOC2Pe>v8Zhq5El07~bA*xwpV^HI8$=nD~
zXO21+8*CYa)48_}AW9V9I!J_2PF6-fMF1v&ur@auQ|&)#Egs^WsK2CaeRx)Xcvkaw
zTyU#c<F&`4D#JA}m(HxFbiH8_*3bfB#7|s|N9eO!fXemvxa%ZTO28H*(4x3c1y!Eg
zB*kU9hLojDT`THc5ILaC?z-g${rpl47Db;gfN`MT+~YaQ@nZvk3p>?otbHrxmr#<^
zBG@bJ@jI{%oCAre0OOVds+!70dXG<#WnN!t`A;OGNCiM5v5)`Z{eJ%skFT%)Mwb3D
zu#w6oKZPL>;I+F(UQ!@9!O&`vZrL=eUl<t+HFBW@@Gl=J`yw*=ofPzGAJ7g7Ka*+K
zw%qcTE7G?cR;hvBf48r_q6AwT(5b+_33AQ2f{*$4It+_gxd4v<*Z~48YZxvoXU5T$
z{+bGv>nsrri&3Ol+VwOD>@zyK)#a8J#)D$)$a9eS0Y9I`PCISay;;5~0jAG_)17sC
zlTFl>I%9uo;hvgW=rlK?)LZv1^`XmJ5G$9lQl|a=7>UiefjKWIpmJ;pUbFUDVmb(}
zsE`1A2T-5l0Uwd^x7YYd`A;M^kqUrB;v`=0_kVdl9&hx!tLPMc3-h&cu}d>HPGWz|
zey#fZutbaNsgCZ-=SM~6$ou5y|EX=#Y(u-NAgKNk-HP!-D=~X)b8(+)DJhU9-F#-<
zSC&a(HG$(bu#&WjO+gl@d8v;G`yM`0zaeOv^16!0VOjqBbvr@`^@Vyrnw6U0Dd4Yj
zBy*tgvJkR#%0Iz`xuQHP*)(=6+Fvq7Vx!+TY810>*qUir+vTh&EzjP&Z;cr#swmco
z`OxZp*i{IK6r|^r0fJGbtEcxvU&H6|^(c{3);DyPm!%uiV*Z)M<*4=W;qKaDD0YSb
zsBKIMR)NOhwua1_scs9>YU<`{O1P>p)$I#q^l_*E#+z>h;lO49y>tOEC<cH;Ug9MX
zd&a6)Upix%En>3>r8uo!xH`@@Jy+I=+NLS|ClV)+F#r;Y3wXU=xYJi=ul4mzITn78
zq~Q;2NY#c~)6gT=Z%+oCZs(kd#M~_D`tA}Qr%eGn(6V{#3IXlg-GeRZ&6yv?Jo-qK
zK25(qr)Fo1S`R+R?2Bypu6|o!tE+%W)9jZaPEU8aMs;5LvzYMH3dPZyU8Jl$Gmd_A
zf4!&g`&fLzs0iO}(iix?e~Mjl7tX{`36|f<Y%x&BRY19j%MMpA*#2G7bHM>)bKu3>
zYpdxGx0@U8A5tO=#5DQ)1tTIdZf=PoquC!_@3#$|DPx5c{u7DQNCrS6aS`t~+cc!u
zZkpT2?GD=V1&d&|*b7&?YA4|bIEf;F280UUsGOBQzFlsCXw!<MF-qLd#(3JPF<QCB
zWH#y0?Q!qenhp5TLSusys8XCOpZg!SK#Oq^Y{O0)P{;dW$+sEL_p{0!Xoer!72(H1
z%ehJEm2pR0QEl4-Z<JGU8@6##A;5;=Ph`*dTTm?0eHF6=|3iQkN`b~CAfNa>1d04~
zIwE+^UH3l+@3&+745y5_XiYF2>xqnwGvmh{Cn0~RwE8C!7m*5pMB+X?9*;_Xqo7sY
zJwOWoB4wbWH5WTGF#)JNQP{=CiTwO!bbl$Y%FV%B-yhEzn}``ze2*l21ciIKYks9$
zs+a<^jWh)^8*-%6c_~6$f(WrMn3~K@D8)w+Y^ha?>8Nzyl0c-}nm;!SoCvhVLeNu$
zA*f7hpuu{51wsCfU|`&)4mEilAj^p2{|y-4z~(Z+L8B)7S95O*<F9OpA5f>ExT)oO
zO{F|$-hhYH^k||fbH4M3BgDM!QKXq;vr)=VXPevYXPR%+JSQ_=5Ob!rtd)9C1u1=C
z;6G}5h-If4(K4F6@8VJ3BXYw5#Rb1#j+@AuQeNjHv)L!^0q!^?9=dUz_;wgfo7;z|
z%aDEP{nIJq7?1rRfb_2SDj+TZyTj1<CHJSJz3Z6L0R-_GtosjX0FMtZTjgdo`_M*;
z%FlmxhQX^@tyPNCp}%=uvz}E25k#6lxq(42Jvzrh6Wcj#|GI|g^szF1DT3#(R;~>!
zIX@1u9>%dt<4df-Go`L*qdIvlT+~wdPb6+YDgY9Ro7n)*$J1QpOhN$qM3xHpKWc}o
z%HZm%DyFOi{2gKf46d4y$np_?akZJU0>Fi2i>-~<2?@uw+V*b|yRns#E_Q#p!REst
zEK!Yp^JM$Vn)J<K)47iLK8460P!4?E4Sc_<d`=r&*nrYI?Y*yNkU7~t7(5FF)j>@J
z{>I+hVELwN;YkZzdx|scGd~`Oad39YN5H=hDd9njpiqQbZH&SSDc^8voCFga6hiP0
zaV(CTTme{t=?QkHDx`?>E#?X;_V~0znI<KWUMC<!20kA~dS_oGCoLT+Z-jEwnFUeF
zO?@)PXpqXZ6(TH~8Wo}b&vrZe`caOw)-&p?2n6k(MrDNJ@ofYSRD)vb_dh($*yg=I
zx4j=7)ZUsjY6|~}#7#&AKq7H7Uhf(g;0T37)-k=rPOTi;r%nYx62gbIcpHbFH80@8
z=kM|Lb?7cYcG5xrUgYoiy1qG%TGph+%c9t_Q#D^B*b_>~>-%A7S5mw*KUZxv5kE$;
zGw8-B_&tv2oVK;LHLJ77Z@~BrrM~_=<daJk&?YyM1<o{64%RS3k?>6+V@yTaB#q?&
ztDv%cnbxUtt=5zsLa1|(#l9J>p!`0eV72V1o2B?qM6EXjeoJXmQZ4e?BNbd@+yJYo
z8+GMq9Th6dGO1Vy)-&;UZ%ksUJgn#VM=>*~X!&wduy+-v?Vt!KM?oT=bA|v`BFx>!
zy$pqb`8fb)z8JzO&$65*P6l=yzSDE6l#c`W8C!u_N==%wC~FPGKAERh+*EezvM0t@
zc^+qa)d6QMC5cEu44E02$pLN3$9eeRT8D-M882e?T2!|Ue}BPDfdvDAb{Ym#BL)9N
z;$~zJz(nH1u>p!aJ<+oF5OAPQFDLNJs9`_q9POO75;xG30}g`bF;efaB7YF!*g?uV
zQjgJxx-p%$8*h{~CByECa<=t_a0gMJWKTOaAtS^<wFW*v*#6&VRu)0|Ru(GNUqd#I
zdN6wDv3jkPJ8$0F@Hu|{-h~|~z(F1WU&mF5>WsN;mAhQC1n8f<<24-PDmu1q7=tfX
zKJ+@vvE%R5U8*U-s7FK)O@J6KfmCxI8HaqA6x(1dsH?LDTeA+snr*>!k%>m^4`aV?
ziJ1_orU#%k3<d9dgZmZN8w$6eha8omf5^yE<Le5BW=P>bk@yIb0gy<16565MEK^<9
zAKkpnD2wr-i7&!ArHvb}=d^v*$$7j5SxTlGCgewtf`768dwU(vxBukE*S*f9*}`Yz
zQ8eARSm$YzRIE<4<MAykXwj-AX*10Q+y1B4<!yW^lYp>x>WvgUYyH?QKqAc?uosB#
z$_$MetRmk?86WR$P+yysO0Y4a8%(g`dT|q2b}(W9^iQo6cYU|O4XmAsKsw!wpY_#W
zV8;(VgxPaiaTE+Ur2gLbcpJ5u!TJu&mnc11D2hl~;8^<~GiHgtMhP|I=S#<O_u1H*
z@A#Y7bCvY$2S{mdJY?bbm^!PzZ5<#LjWDmN_yEOEAN<qIzCgDEF*j<anshS|DKl9C
z)c$ZEj%<J-{c2!J&{<EGLqNB;=cj)aikSd8cm;b1!R^LV6Z8?bQ;Pv08E&NiX$7A$
zU8$(UiD5H7PX!W8rY=!|a0*aiTKyA=4<Z!+iNtr{UF{+ybl{>`<whl-H(|2=sVjMl
zFIYuL5?YbHC;sDGqw6C`ilC*zAE=T+t4N4qNw~0?V%qEiDE!+DfF8VUymn5vlpn24
zY4_ixepaXJA1(N+XDNb&+F)z265s}jvimL@E*}?!R%;V&MNT(2jh?laf;bY>M!(la
zy>PLvjY^7ZG<O4s7*cMnXys-!?mLBkL%1Ku;KdtSmy_bk3KHfhVaoSfvQ0ULRbKh(
zoA;%1x_+P{TQi_e_c+|2`g+rvS=xIR_-%&B9C%geB+9*%(1tR@`)$hnN(hG_k6aA}
zPJJlBvw3Ifpr-YbF?b#4vMgO=K;{3_z2Rnevum?$b2r=eX4`gcwl>?`tj)&e+Pv9*
z>i2(M-TUsVnfc6|b7p4gnxosyN{ic2Cy@eu<x5v+PQM7VqqFLSt~7y44t5nH6(G-5
zdhQHun!=kOh#1V0BXkaX{IucC9-ADnZWir@oA{TIGtMya11Y;S{6se&1TLPc@3mNY
zDAGzzaPnCd)BwMle~_TxfqU-i)IdZnrBD2W<E@5-*SCa=U{|1KPr9%Z&r!otIR<8j
z^*hT*`ZMCG8ZP`?O_<PEl?W{N3{75`Lw`%PQGl;{zKpDpgzSxBX_v0F={d!9@v+ff
zZbb@UUgg&TD_})2Gj={iFA{|*0rIW82`@rF{&vS<b7j81Ul3n7V8AN(kcLNO1w%fl
z#8CEM21}}f06_*a*P?=I8wyFQ0f|Thp0y*CMjUh~9_o_7QniaxSMO!x(85Jt6<4~#
zWSbd-0H^r}j&*QBB6M%Flw`w`vlDI^Zwd*>YODc(|Lrc|`2lYtm>D3}pbd9n_`=S~
zZECV5!+{5v4*PkIc7c8HQ(wAJO>t_#2Ms8z4_*hA6Ras`XH1Oc76W86=!3jZ%{KtH
z-z(7j-er4;je}x1>-F1=yJ1y-)2phZxwi;Q$EDvt?%(ai`_-K1S4VM>7{+u>1$M}C
z{0l|;hZ#(ka&EzBD=|WPq?lzM#2eV-?Wie{2E4)J$)TFEiHFpIxZ7&5rTH4M40h|Z
z(Az0z>f4GD-#%}qB~~HKnZBfzP<5L>>KJ1x1C;`2<c8H+)1|oWh#RnJdq(c<Xh6j(
z!Mvt?Z$U9kb8%`tuJ&^)SIV1=1;&8%5*h+>(g7qq#;2wC=U!FC?{bOCfhIf--TDkc
zz{Y_Bd)&`T|0x_Q-|?99gq@a<I#G`O9f~lH)c;3KYp4Pe<nfhOeU|1TvsON1uV2=A
z{}7jx@)*#McuEC(6@2n*sfP{vKOWI0dZVS7y{S!J3MzrqxKKP5c#U^O1^FX&M{F0u
zL^}JRKZVBAJn#*7Sl88x3x%f5ZIOkHwSuGfF;|Oi(!x&W^ARJec-P6?OL8DcS{-cp
z&(dHs`h$c;^V5L6AU^P=<zLVHP5Jsf{#112kzCIyec)t+*9C^EOkDd_3(8vSK=uBm
zHy_gRPM6vU^Du_~CNO8E8z}`t1|FL3a7jig{ohHS?|TA3<8bcZg7EBUaos-*_7tK>
z|L`Krs<e66!zk;bKvAq9AcUEx9{&cmK0vU`uE2!rpzjuCqO%Qb4Z!wK^9Wa$B5ZId
zy|HZ-dFO#k;`UWC&>uGyPXxi#P8%7xe>+9nckS1MMt?Picgpk-W`%{M<7Hp~7b1lB
zZ~d3V5ZuLCP}jxkI6E|mb5Dyr_o(FQTIL;AP(XCRM+OlKp+<=8r(B^g0@AW>__J%#
zeSaK1@ha`-`HK9hPa2R{fNW$}-B<9X4JgG=s%YMz`<?AftL_Hxqj;wbNf@}v7P2L>
zl>;TFG@N_d@io*37`P&SryJ?A+`?cpH|!-ZEzI(y*3M)x47v#~O(uO7Dy&`HpgzWV
zoL-a%)1PXJ7RE{5Zd_oDwPHCax&!CX`UaRVX!icj-@Sj|@i!6+b-lMH$*=hg8s>>&
z)c)tCTC|)n0Z$LHjiElhF_cY@7bbYA%+cS<JTnnYp1=%U74YDpU}z^98vT9CEx9M<
zgD^s|8!kA)-hamDz=buKe<R`u5>PSpgV@X!tPOl4?PZg%i#Gf_3eViM&~XW5rnw)L
zVw~_&jIS{E!`T!QWO&g@@|F!;CJLkIuokNEK*1}mczQ{6-U06)+akztv9tS0kENWl
zicTVWn?l}_j9!H?KdY97-Z?pq(F#W8!y!5_Eo{oc=uA2E#Q{w%H3A*3@Xu;ZF#LmZ
zL=zk%&nw*|CkHg0#EXnUhVvLC&v*u0zUjAY%cz+6`1BUQIR%A++elY9Tc3~@Vu<zE
z*Uh438&WeH6mjFusez#b3Nr8KgRXL{VOYU2m1^lCO?+Q=Hw7TQYrwr<-4)t@_gN(K
z8@enmX`PMD7&tw>1l9#eRt=N!ugnb7f*Eq1z))0tV`At>se3_!>R})~`<p2`-<&kN
z2KjA_Bj;~gror#&^q`phA(XS7sQl>ZO9i^nNu-WV)+^p!oB5c**>Q0rj|_iM6l-3f
zq%k?wj{*-EgRop8rF?2^Inc_6M=^ngR`*JEq6FV4S@wJLG63&(n(BuoCT&h!37(Lm
z*qi$4cj^bP+!pBp1r5ky6&FP>*?QO)L2yC-1SxOq&p_#$Ln<`--e^zck$&D0_aGPb
zzQB)UlObY?b(`ho-z-WP`~+9u$|)ztKaxpqd~d9>Ws~zA5!B?_XwXg?B6{%Cs%g*0
zk994uy$<6Zf@H`{q}Z28E#MjIi7{KHZ4Ysjni)*v$Y|d9uK&yVEisH{r;9^7ZD1#2
zyHKrY-{Lzm*N?;td3k>u-ezQ<rEkqe5X#tJD$xsj%$zLP2E`i6BcH?~&@t~>uT{q&
zy5T`Gzea8ZaDRDm9V@rA=zwQg{ge)^!aq#LMlL>%ob*d8KUZn*in+B`obkNL@dyje
zhd!+W87=CVB&4u0RpqG~u%|5W#;bjJVc2Jv&cIYqB;th{1E4UZPS0d6`t;?7usSNV
z)sly7<itvcrWmWL6Q_OSG%GnQEASb%TLows!pR|k$?j3AF08PSjmY$*DA<UWhl%nn
zp#KMlHKTY>U2}^G{N4af%|z6UV=myqdg*0rBG5!U5z2~z7EFtGQVd8k!Z4cQQJ*;w
zF7l2;QmZh?`3Efo4dm!r_;3y*enn7GRfI#c^Gn?p4QPs%=zy29=&JCd0nS6zFmxE`
zW2n{s>tH4lu!pKVW*r>??|`iVn|EFl5M2migUDUsA2DD)4VUil1`JJ}lx7qdy);?C
zDcaRX{d+zMH$7~rbJ$XhA&qL&r=X!m9_hV+j72A4r^-$aHm(am>K{Tp0z;1&h#8^#
zcsa;}bry@S+9lEIb`Ik3>R<enOWEnDwbN{JMkVIsB43!t@8tUB|JlsG;vVcHa6$m~
zj9n|g{Di4xn&q`_r}f>Jy;rQ+W*ze#5>|QlWlZePt{cfb2~c!GWHeZlw7HVaU)?FY
zqFx(_jmD`^*D&B_rW<X#DzenVyE(9DF!OK}L|Jh_e4QH>$WJodet+n%|I3Bk8^EDJ
zh3+p%m{v#9sK>Fsret@;?k)rW1Ig1n?CU`)M~EL$Pr8=0A9OW_oto7WPj0E3s`f^z
zXSzeqtlHBV=UIB{HkoGCs-P}qDtE+c<s;V2@KO7ccmwyxbUkPFz^CLq(m95G>e8S`
zd#KLMbHUBS2r(m}Pnwk|dg;U-mI~ZpT}hB8B(ZWfBUCzbJs|KUXO6ApTR;er8?z?{
zyxBooSQQ1UpC-?MV#5&2pyzk4!YF&aFaG%NcEyOOO+=izLYG94(ByfCPIM2Pe$tFq
zLh6S%-D-Sb?HKyzd~o+w&3us*%;P^wArBRQ?|{pdYTWXczRlF9E<Y7jmb0D|EaZsh
z32ZF$$bhNVn13vp7#ZDPYVS^BJKCvEvpP>+<~ece8u;#>UB4yCWV|ajY>8ve1M?Rw
z!x-1SizLJ6Bx=Jf@xDWsEGaz_agG7ghj(1pK=bU{q{A-ijpP=1E?n1)jBD(L#G(3F
zSZ`|`BRZH;aDqprp%-8t!3p9bw2B5nvvqqoWrZrJG|2gb=a*{$kl4ojV<S!|Cj8hr
zCftHHmN7+K)5Zqym65}_V-Bi{Q7R<k`6Wb?d4i7<cFXy|LaF-9RnD->k!z63#YiuO
z|4VGe>%d0rgLb|yAV|^vMrnI#F))6QR#Se_VPNzsrhEpAW&zhI#)lz^=M*}|m!fR!
zon0EmvpR`hTfX)G*eSvd&(tA2ircyW7t;!FH*OG$%ksUh@?DE-zSMM2LapR2^O4)B
z?Ql``Ya(f$rr)8S+QVG;i|dn+xel6t=NO@*w-i{9*_1`!fP&aVRFF_$i;4r37`kXP
zf-)G{nb#cT*K|$|X#0mOUN*a;o1JP&@wHgAo^mhnX!U}ClTcS`^scQ*7f}Q8@+tWE
zQkTlfPRt1UykTUTDxERGxCY07vZR;9Lt(&WUQ07}&2>_9O&XZ@)HaFG_S*V1=B34F
z2J6f9BO_7j1rtBg9nPW~j;<x540xc7moN3xvBDZ=<6L<5vS6g-0#<*-^7-|5j5U^H
zwcAl?u<%%?qL^;iQrRtgc*!}hto*(^{QWcDCXh84N6XR8p=I3OVO;CxfLw+%V}_K-
zW9t0O<&@A76Czo^O+q*Sul^-$iFqGSq>&9w$dy;i$1uC^R7>?!OwaPv?sS9B^kgd>
zxVqb9NU_%!7Ps=BB{T376}=prUi9Kn#vN-M*jg@;(_bFQN6c~4?~nkY_|ssxV%li?
zk%KAgLnIk*3kvYLd$YD%P@uxZdYYGOT+&a-+?OIRAxTBKV#_)Crq*(IOvUDFzyG@*
zYd&=PAxS3EmRX`Tqfdk?j(W$v7BnY38tCPF$NAC1H*oK9>4n_;&wiMBE|x^so0*}4
z6VTYrC0WNxG3AuXU~3=81$jZ?{{w!K*7MhP&aQ9+tQigm(=UB=z-s#BmV$~;)CT=*
zc0ol*SMCMxNs=F*JRAq7UBBs4bd5(xXXRF`pcE_?qC#7xIo}r}#>rU$aOJ!XJgG&k
z4uQ`k4r}|qToOIP4`<j&8&k&-JkBo7!npb76<L<B(W8Fy4u6z_6t$AVw9s-!<70|@
z^4rSk7oYA3TWe72gsonUtH#Hkz%PHLh+Z0DMmb@U2x&ETZ>nc&)!O#tdLsL5?)K8F
z$;f+TX>XX-2HblsqKQH;#5pX6ktG$mP4(PuCaxlGjBPP+A+Rv`C-XQI_M3!=TMR$O
z4f~b<Jz4F|L0@Jlm@%I#gg1dDwlYh`DDqMg-|u;}Bq%I^`uZZ=_rl;j9x9A89Sh(6
zHtgC_waZzV`$+-s-2cbF*$o+XmU)Fx9DKj_y+0T*{&&#Xw%q{vWN%;R-{v+<!+&c@
z5s>Q`NSiyq%QIKgSS0y_;qALq2qr4R!p};JD_oT4C^Vr*>RqQp24--GYU?@kStf=t
zqfPy$AKX)6-P!}9*di2c6?0o*e}aY#3I6n{o{6T=y7;~9598PyoON$ryXwV6@$P_G
z*udA?${91sO|C{&jY<*`G^FIXQB+T8`~=OVjBpS$ZKZel6)r>v`g)XrBRf*KlO9Wo
z3o=mlDZEwya?~JwZVvXRN%`gt1eAN(kGS3!PT*4Np44dFv=r2$YmBrC%IxCmGxocr
z1hM+$>mOR$GH=<2&-oV1cj2o{(UW{du>f{5j{(ooebX)jgxr6gZ@)!-l;KhTf#@|~
zaonkP3>$doE+BlaqeGOYlilpC-rNf~Qn8Qiv1tT@e;A9JT7w*dZfa-A%KRl2sJ)Lx
z+QyL?U(Ie^)<wZACbyipSChm!+EKv<KPWc(ZpFpc75DK{bCiCeX=Co9nbcR9zfc64
zuqE>~YSN=mQjR1=lNx5Y4{;mZSFo3)Nysa70Q2e(^nH<272hE+&fMXb5V`um4~t?7
z)kV*2B44Uyk%9;sroCdN(K<BbEBIy;8UuhJ=esyY;a^`xh}q=A4vcfyQr1n{k<dO;
z(%;9WYivC}H^Fx-pkbwzf+rA>xKy$yLueg4s!^&fKfHKpk<bRAGW@^ev)IkPQA^Ji
z_QY|OW9JxlYOr_@<92GBTHy1&tL!IITO;`?DDZ>DMU<~R)~ohHKxh=b2el2Ut4Yfm
zZsfm&<%Dp!UR%o8UGeB9kLx3;dRxd=_tg5vrvAYw&=-z^@J}}IWE&29mFr&4HZTlP
zc>Zd&Qm5HMdQ(Alu_h5WyfjxEIiWRd-CfwVbW&@9xTk1QAre~W@PQVZC#q}I)UxY2
z7yA=H4sEi0Zx8J^LKUCq#;kS5Yda-}kNk6}%eCLgIc{mDd;WF(!H&oi|7hyg%l==M
z1LE}Ci5vk-FR%(clt=*fUaL&0`=*;$IYD)!G&jf#DY0^URw?w%stkk(4MCTWCAI3}
z=oNjkVMg%BbkCu_O`5-;{QkmrbiT~>*(DUOVF?LQT<fDW>Hb`6_vK9hpO<H~Ga?gg
z&HL1LzYASDzhrMVR?ebg^IM=hJLhxXeI&OfY^L{lHNpjlzL?!R^D>9t*-wwdz9_7D
z*(dr2`p6DpzZQc!sL1z97s2WYc>Ge=1Imub;6x*8Bp8IjoEPDD2YFbbDb2%Yc}Xrh
zpeJ9jluWP)m>tNDnKRuOlq525$0Rps^YEskDVEgE0lSe;jJMCsy4rI?g1^{<?F^zH
zDDJUAU@(-u`y=h82}66gqg5kN_;$s>Au|jKcL%oAG`bSrM;PaOEX;LA{awqhGwAZ;
z3Pi`@9L#m#Yq!N`l)lGEBneVkLjM^7W28ob5BTqvM96njKyih@h!p=ul6G3(qj&oJ
zL}`ten=Zc8{y^I~9$hV8)X0jx>HwTIydWr1NM*5XZ&_fg;aOpdyuiblrjoX81I&Cb
zKGjNF?$jtB&*C5oU_l(M9e{k|C2doDR95#|jf7J2jP|U3z)oaK#lY4@ru!!%O^)qS
zp&R3Bg0$cTktw85bmq>}mFSJa-TnpMlm9DKgPtE57m-%}kq-Cl;VUVN&jLdu{4aro
z8%Ly^q21_x0c}frjJ4d`F?(Nj^WO%pZmu_l&A<Vvc;g9!&8>yBXM!ap_o<RIv*}?{
zLP!F1bTTSb1RuoBl6U|Qtz=x`dRu(MG!tyz$Eu}vAm6HH(fN(8=l2xo9Nb%zXUL-E
z%kJF{egcMu8G~l1z|56iWu{N$=Oy`*?6^$r0OChIUq4nBP-<rV_6+n*-GJI1CA@K|
zV&F_8hF;Qw7xnBnhI;S6dKGEVxt+2O%&#s~oaMKQY_yGg8~c(M-kw>*1IvQnS`G8A
zG%}QArw#%u3Gr)hIZJhYK_NDuT2xK~`;|GV`LR;y@ZgXBI=Wip#W@R`m>)Ktg*l&Q
z-`iGHXZ{HDvzMqPRwQsH$t{fZ3`H*1R}7vE%6G0>y#GO|Y;fR~7+)z*DI-%%&xvE7
zS9rJh<-V=&0F%7ui~YV^(dPUXj&!4`I68!QJin(LYi*&@;*FPoeH+%9@H>}#2^`Dv
zllaZ8Sf*qEgnryH6w`PMrSZfevr3X4e!n53#PE(pqLc1X{-%!-Dbjh>;Hdu{VH%NI
zO0=g#H^<x)Ihr5)Ebs#zg}(6oMK~;Y?oEX_w}^Otd!M^uj&7l0wDwn>sDsxhtMO63
z;4K%^_if(j+9|!far^CKTCK6clFu-K5w!VeCd57d0OP|i(TR`~Imd%(jpj_VLk+$+
z-gEOUXygW3>Az{*`(3FIuQU=txx5h+Xc5{MK_$atqz;^B-~9E%>^OcRsyI|Az=IC9
z3Dz3(JA-<`bg33E#xB@n;Ier)YWj^EGoM}P9Gy<Wm(ckLr<B1^*RAAY5gI3Zg|S)=
zD7uwbn&EyrtR28~-reGE>epxnjfeYcX~lWnLLk4KAax>PPNcRY4{){mLQGM<KNAz=
z{^V6QpD(qdNC#ue0LNqsx<@4L>a`#7*6RpmZvWLIJK<x>&`D4p^Rmo*F5UNj6!lT$
z)qKtoM0>~9=+J)*&@RRhzNFAd81+;8ZVF4F>I*hU>HS=st*z-(+${&OZbZPiBe7!J
z+b{Hh-67#<s`<5c!Oz&ygEDIE%_`pr|DrC!KD=vym4{Pt2AE7hHBsE%zK1D96qEng
zX6W<*#-31z`|vqMWV>T%GpzE!s8jga^Nia;YPN&>2a)<gy&Vc}6U&r`pqb@WaW&G;
zt!<sLGhcK;+D}mGUn(R9&KLcaFs1EjYJvsw@;H6RqCWFM4Rpor*UCN{iWkZC%IX27
z6^u6*njQ#RAay6+pej>>)C=!_&U0QMHu$mZ=*_RC9ni@EF$k-F>0Vx+J@Gi+lFIp2
zc3G@jWxE6p8+<xq8C(|)pVOc=;Fivc9wi6GRR!|Js7>@;Q#x%R$v~2(-Zc#(>Bw=u
znf0;AIdjsotFFH(2i^5|oN$ji>J#-_K;#;ucg9z$mAaIO{Zrvam<FMMoz}Ym4yqHn
zG`cTAwKeWS9W2TeI+tGscf!M)9W9>p=%A3Wm{9+jWV&uEYsGK&Ym|)!aSq2?IDWUP
zQT$Do#H;dn*SJhkBu{M+od(W|&~>SnA!{AxE0%<_W26B4t?)?zn?wPEpu|fRv2P31
z^9^v!iM<(4Li`1%yvl9Ajk2=CSQL2G@3~W^9F`dZE^0)VH2VX41dHhoej*4ZX)bNo
zLgv?oA1c|$8?*ioniPz^UwZD28tQ5%r3*()Y7i9&jEZn#CGopf?98*>r?|J#R^rk{
z)2%qhKCYX*9JKhFh<B0PL+u-6-_AMl`>Mjhnr<tX*H|&Li}MK|Xhp^!DfNph^ylIz
z7LtO53%8FQ@OvZ2WDdqe<y^RbjdEq1jYA4II?7AQX}8m6$$pGq3>*lC!P7q|UehMf
zIpuyi_tp;UyIAhd=~w^x01|11$->;I`BItbDmf)1gW4tqZ4_;ZdUFQo=`|eMNmfl4
z1WiU6Am%K65{oz$0dIp4)v1{2tEW;Qf}D!?)*;#BkMMdLV#53Mkh{5CzCGaL4fw<v
z)##2eFTrF=`(m~e)yYs#IX2KwpoGO1pNg6@@$4fM&piku$wi3m$mgH#zPaUg#WmNa
zok92k)Y$$CKd3K_%TSVxo}MO+<^FR+4GMpw-y1<sriXMVbGyqHo-Gy_#Z0MRZ|il?
zp7&_?`Kg?h8?%DOr1fYxb6Yr}j@WzEY#SZxT5?|y$8hIkb0EkEMRo~gpc5_FrhOLX
z6d7WYf>RF9LDK=Tg?@N_6D*5b%j?%HgE>>ryGt)HR84Qc|IA|rrBEASHTTg!Ek^n=
z-$;x!;GyR9+;8m<U8wkApTZE^B%d@-y(SJ3{XgN}wR$VUYsX={w{maEen-KEzFyg9
zb~iKXWmK3co^#0><-K-Ocwn>~FT-oeX}A<h53xzwkJvE*3Dcl6@D2Tz4m<`RZ{(Lo
zvs{d!uh<b9xGfk!)Kr3>Uw468B_S!A!fUmwaiwd4?0Iw<w_5S8Nn76)huVDE_s0)P
zDgJSALY69wUI`Yv$CcRY+^xi1s<hINup6l@stmEo)|oM+2k`b{4MgtdYXYlezPcPA
z6cQoZP=QT;Xyb0k^;TD4B-KT%F+GbTczeJSZ^<({e$@oF&TJa0V4IkHJbu8Z>nGG+
z<hIa&k32bw#Q$BpbgtW=g+6WyYF_E<Y%02`ygx)A%Uq_&>m<Xoy6{<W(Z+1y-Qrj(
z@;A2{jDc-g6N5SQ#d^igq8#&0n>=;F%o2oD^?Z*+_Cr_NtYOv@`X$!xqj3hsyNoL0
zp0#EXt+%01Eju(v_0J{u%oOYL@oe!@sQXQ;%&AOK@Tq5&Qwze_YRgT)rzA?oTOp(G
zyF<78yty;vrIt(%?`w6SQNCvsSCa2J4nw=sgaT+7<jp$$lLy7T)YgX|U%kG2)m+je
zU(C2Bs+ATkmv_JS=ZBaF_H!Kg7c>WP{|)3{9Nrr8Pn?BKo6+NZWi3xcL8?<%Vb&tN
zngz9$cXp;$M!b^(wQ&Cut@)6jX6i5O=A})Si#b;RLG{Vz9_N<%dC(K@faL&fooA4V
zjL8%Pd&%{5sa_1XYKPH{A^jQYf!@|jb+@^()I=tpRCUyLk%3HdB@(SDL=a(9x^UpH
ziHhK2qa4%kA?%5VYgIAKSKT&soY*`%)m^-*ibAg|$&SSZviz>@;pttwyIj#`PT_rc
z!)6ob_e<y?3N;Dz(5s^sqoPiTY8esgZ^NbI*VHR`q`s28t~wtS@12`iN8F)1IxGGO
z%wQU-utiv)6}i8K7i}87I)*aR<uyJvwLXfpSZiK@Y3_z4w*1qze)1J(g49~<$C7iY
zFRmc4ldt68*;htn{doP&I^9-U+xVNE&188otGw2yBwxy0V}%59IR}ElgfSnau+Z?*
z8M7Om8+AZ>7`bP$f(z@cahN5{;|}i4N0;q>iZ3hJ2kM&C(i+w!vaL=xvgrGC3!Cx*
zI28k6x8|RH8Ac(wg3sh=5xIfyFP;IULJeKgfb!RGny^9*Gr^`?X2|~Uia_4PRpGsA
zPOih$LgI#wrFqPkD|tKr-?%0kAtUWhB?wM#;ViM7u98K?el@4hqh9a#Vy{L|`s17n
z)wK@z&Atb62i}ED-$Z1IkfF|ERSyOfOG`Y}!f+;55k?L{!^(T-%whf)&urjsk&<jj
zvr)EB=$Eg>D|k8iyQaZ1kUps7dQD_gqJO_BAR{?o*Yc&}xY!l*j^~9Fa}qt>YYoT4
zfU%?{@v&8mV|(M6R2iPfaWq%gyKfN!Z&>TL=lNO{{_xE%2_{I1#WMgto*9`@PyjGT
zOSYhKGul&>VH?q#!p1hJ;(6fZyKey{!CVNH)&LGb5^lm59$p=gZK)g0?zwsFq@8`%
zZLMW?<$SILvmb09MX2537h0ELcJqFxrsQvj3xE3K@&y}K(40))jjDDHrxW}jhuLqB
zd@#$!d8&Y}f72W&P)SJvwnuSVhtVx8Uf2@s&HWbRC>*S}hYOs}8Y<|;tIOKkQ=HW9
z>vmfMKwXJyUZcW<(tx0Z^}QXp>(<J|xKGk%w9S{b2}j-SmB2!I-iphXyhHETCcqXG
z{SwZ9NPS`WqzuG%=p@7eT9-kV6YjgL@SxVxF*J(@7<iu~BU^;p;DEgmqI9q;H#P-T
z^SXXD7nGzV!K;EZX<j}O{52G<7mBeZgyI?&IH#ibiw-n=tjzs*1m+p`aQ|T1Lo2~$
zTeh4@G5$^QxNKqQXc25qLnZlNS&(xzX+lTNK{zOg!FrPStlg)-4V`|UZ$_PN4_#iI
z4|4xqaQ9U3nt9oRy|#%JA^(=kK{Qr>i{l+#2fSc*dDUNK1~dz;;OF&6Ij(9o2wY6c
zq_ZeR{0Q_TP2dXoY&1i2qXI8y5rVeM7-t%$p!sokUTs-nm*xL9A+Z;7;bYCl9@42`
z*w*8oAnAnBC!k=ZI`1c(UF4-B1^qEJ8lQ@Y{v@BuSYh;BL-?Ej)$3-6ErxEZ6{Q^r
zZlFWtM`0vJ?QY3)mBKD{-z4)ex!!Z>dE|<D0>#Bzy8|EnDAI0!UNW)^-hIEni}&EJ
zqVLH}?i6d_+Sh<w-R}dvHP6!->a9EmG=fhEd9H?F8?|rnoM5d;V-hSzQv0zc={>R)
zKNgL^tOo?AFU`*)#e;4)6iaN?K`+W5a4MSm$L6n(+#D+sZR^(aH7uUB`a{`owNMuy
zQU!|;SWk18xjWSC8*n&gdZ5FV&adT-uH_8c@4XdLG<}q5Fwmp}lXIh>%O;E99#`4B
zF?G(<*CcynBsDU|9ipP=SiYC+s4OUQf&z>q7%2WD7~7t0%JX%ge&291<~KhYo$=mP
zYqNBP=2rvHHdLP3^GV1i8G=s>;jV_Fkvr@FTNiAwxV0W+^efuwiPr1Rt5P>o5R^L|
zAm=!!5m@Xg@m=Z0j5-oP6l!`S@)O<;AC(-b-Cklwf=*a~WP!zZS~3=SZP}N?pW~au
zu_YY9+TIl324^$w8&kr?wo*%9aQVB4Nig-2c1j?;7vAJ+V&DDwE<Of%NqrGOrMp=6
zR$cNR5r6?fk*cDz(w~HRR?e;z;?dD(?K)(JuIYe%&v*SHeS72ZO{z}7_!kAehe0hN
zxT;r|>pMf1zdx+kS;oJzRabhj88a<!(KY`VZTu-I@V(3N;-0Q6b~TZZRJ@KXtFq=$
z@5`WIRvOq^+neW>xkVp(RG(DtxHhn<omN^gIPnBrKTJMgG>QSPa=J1LhZ~}U4z+FP
zGOS3d5Hk@)O-PAGo}@U%*D6{GBF*B3O3H3uv?uw*@6>4X)Vjo2cWZVE@k_~89AGre
z+1x)ynXLfp?EXa#S;PLp=i)qzf~c*Rm1ALUy6NhAUvEE5;+|CZgUuN@2m~4}`d^sN
zhG{+<E_U<UL&A=Eeoaze?tu%?hu!kFRItE4D}#VL)~$>zr$6jyJV0tMe8a4y>XRZ9
z*yX9cXG(Mu)dx~vfVJLipZ_!IRF5Crt|K_cDLS5IiJ9>|0R+xIohud(pLB7PZy*c3
z`{0q>fau@1sbwy?^kVOAmXK|EXQ`z()NhMQ<q@aW^Dl>$rfp%~YnD#Br9U8cDQ|E=
zb10b)2+c3rUv^C-Ks?GOcvnmI+$_g~fVbyY(XNyArhPtk>3;JJolVb*gztKwrc9W4
zXBd@~!o1>5e=pV)4J1Y1GtGzM0)(bC+cw+=;*t~X*j<CPDLVKE#|qXlmN(~FWhJ?X
z7Xzz}vask~T)2vi-TZ=HwHcLck3)m8dBlR-e8%$S!3w@>2t~U`q4E$%h6<e63pyFS
z8mN6iNp?4d)hqA2A@}gnF~InlDSr`&_%Enz0y%w%ZAKb<>}HpKjVxn2+tZ+kh$#q>
zcO1H#q(u<|`_ec4MnnjfW0o!;(1~=NbEkKFFAK2od#849^P>TWl#_wqYy@TT&TOjJ
zcyX13YDkW|j=_KCN1cmFn&%pmQ4!1=!j|jQD1oop>bkx>rFIQB$lzsS>kw<{rwNQ7
z*65aQ@W)Ef5+Ad#=G4Q&tS_%55k~?5#4TUNgjIebvx)!8@sC@V^vSD3*ZL+nQ=D6H
z8)gj5@`7UZu?#v3ZAlCS<v*{w&S3kzd^HVP;o{mWempBRzxpG>H|%s=sQ-k%n>4MD
zKvcUs{N6YR+ipwxmc?Be6Y;@k!G7{tQZLxzJpt>0Z>Sf=D$i~$KKHG|MFd({q@=D?
z(uc#FELqp}@0uX@*XgFKLG*QtKN;)C#b+V`3?eFB{TTj9^3H;<>+R-V%L9#0c`<UG
zq5nJ^egOE#n&qrGy(BAT@N-=mA0ff7`<&1cf2u<e6pzk%yYj#X2dX`_R|76OPi_q<
zAEch24KV>VR(C#f%zx2753v8-|E-l&$odejV_`GKh8kLhn3hq=%N?2b@|DsG8}_Hw
zyXkW*y*}6gK~m<XFkzs-FJmLm<s&k0?4}}r2Gln6F(7ufZ!I(AStX4K;=VC2NeomQ
z>v!;D9*mhxAfdz?*NMT1zw6fWUo_UF9ifpWF$BcA)t_gf0NhJ1S9x=IDhaTSIRl8B
z#sp_O0p{o#*3l8=pJ^4lH|6qPLfeKw75x1+#AbMN^=(O}eVGi*ti1RR`{!%1Vt_|m
zHoH&>9^Ibj4Cv(p#~>2^lui%C89^S(&Q;}sREbMrpX>_Dw74tDTCEbxNw8t$CT(K^
z+F!=<Flfw~U{axyjX7QPu?Po&?`%WiXTB@pXw@S(e<^CgPY_i+KGyvdu4Uf#KJc)n
zxRt)R89T_k`Le8Oj-twLtAkz@A2y>hsiz*zTMqmQIO}*Xz_;~szfbj^XuW29o~RFn
z|CJsO7}a1Uv-UUwRW8W1Wv|va)^9y@l!2T4M54Kd)vnR-OhHV?nQy?WyyU8${uY?m
zSR(Gb-vrh8TCl{XSZuen(seX})CbO9+SGU@N$;@mCZ$A1xH^5sU(+!x!s;%MhW!8m
zKXZ!fGuJ}{w^8s6aWCcT1aI01^mEc@rC{IO$u(1tbbR(Ti4*|b-BoAULA=-6w5<%g
zMZ$xPp406-NTc6#=DJ?Up`vzI<u~^pegs)(a475|OWwxa%zbR5>ivj6FEIbJVzw9a
zRT)_furDU<fyKtaaxVp(${HweYc+b^jlymDU~x4<uD-q6Is(^Kce18OUlqf<hs`oN
zSUr?h1ADHq*&-Y~e4CC14{Cut3v=rBWM$&%g=)StD9mq>sEdbxWklV)ADP#QCEL}D
zWg9uPU&|rDb4){$+#$s!Hh+>485inmBR}jt=#g(_+YH_er7eV-!AZhQQ;k}gel@&S
z_A*8QIMM>P*U>JT#=_m9VCmN!`EB)u|30L0hGvC3c7Xff7-!N2`Y$}kyuE-RXO!F(
zcyUMN7<PaT!7RvRfIK=R8jU?9p{4BulC3-eiSFF`FV-|h1>eS4<dA?0olpN6TAav#
zhE`(=DYFiYjlqY<FAS-8em6>o4NDFV`kLcFf}o|wV%q9lR+SjTBtGFQ*vrTts0k-{
zo<!1EYY*#N^H#iqCh{8A96W4l2E5}IoWvM*Q0{4bnQDXM8?Mh&0?E_^G%)4Vomu{@
zMiMjh@n$jE(&+EHcqo<P;Ba@ou~)r@{;W!7Xt!Zn&Xs##+@<#aktgVXQqLOY8E49+
zx<1=9)bg;4|1+7UJ`%6$v7^uLamvep@4}%7Ki(u0GyUfap^{_5s>)QJgTJTj4YP?(
z50B*}Jsf)x-f?Q|uEGtyxWg|JWl<UK2KMHU0qP$*DzyJ9Ouu9+{~;mF;)zOCceB!k
zfPn#O=~8Ffr*@#pVV72RBCf3&VwCnzc<5hyf4ZcAX*6IDf+eI0Q8$j~+`m?&`AdZ9
z0@CfAj0C=U{)3XXw?0KsJC19)DFS7bJn&d$<#%bzBtyxyz-odT+o324P&@0AQoj*-
zP~RNn(PehRvqB+iy$YVbf!qc^Mtpr3rp5mZ^P9N;9VaDBJ_fzl-?;B8(JD$~oUXVb
zM8|p3@!o4=oYI8_@w-j0b;C~X2u>D~y(zj@iPn#yn^4*2RzD@Qr~YcajeM)nAfTW_
z;%Zn_t$rM;OuHRaI5_UAzy^@hE<4Tc*Pq&=l3a2q?}WZ~)oMcynhI6;{q;%u!&UAK
zf;yU#dDwMeT4b$9|I5BQb7H=N^)h}v?MBHAOVhfm))V<dsuOM4Cn6oqhGJp-%juO7
zOZ7LL)e`-<$1u)w94dMT(KXaxDHmM!MgpaepYlM`OWOF4PBhZXRRs=BY)XTDxap9+
zVo0VJ?-uVyyuHqFfnuf^>LVRJ>+dHNZB$^Ljap7Y%hdm@qXp5W;)6*9mxZLLL|c$X
zjsd_YRG-Im*9BZ66dB!n$P06~5Tg{zV`wzCFW<GZ&yZ`%u$aNj;E0RI(I*=ZO8E;%
zi}tvLPKS-#zh5vB9iQ~kwc^QmZ<L%KYuqDWCQRxFV(prkR~~!Fmx!p;p?jw!ZJCui
z#hyf&*=yuZXtPrU=66oJ1UC%J7-efjnw)8xKaKYIejGTQpYm_9of-q+Jfb!t+=Fj-
z4_A2L%4)L^0iFyRRg8+^#=dg+YiEGK+bYBitaQd74sA8tKki7q$8w}-%cJmb&DwGB
z8+>uLfCiqj^|A%$=n&!3egQG^X!GBkAjnxakDpx1(-O2)>1yCfEIexcG7p%2gO?0T
z-R_DlPjWPw+fA6^lQ*m#ya@dRFpk^<dQ5>fKPo2amW$C_8(yGfOb=RLVK)7$E%`S{
zcZ&od-z8NIsG!X1Waig9^b9W%Y^qN#<q)unjlHR@x{>lm4q8u#HK+#c9S^2l8S~v|
zUZaFn7F_y0$kf1Sz&d+sUEr=(V}`dgjuRH&KE9>ZCtXZ>$(d&}r1x%kwqe^;il@eQ
z&Sx-&#kW30dHNhyhwiowArnjQy-fbZfem_N{a#~LUcXx4<gE;?Q>p#D?NyEXgzK*m
z7_#;uII|VtBFuSS6fY_bi{Cj({_og%{ok>Jrwl{*&^<3mujKx?OeZlUkyI6O>>gkM
zzpS$x@Pv!<wnhiogt-&W)nq@1fmNt9pYX(4wm?o9HJ#=+_|7%&kl=Xv6Cr<>^YE$S
zw((I!AB~zaXU{wh`x0Qr98deea+vRu#Uq4>Cfb8<5S?yGOIuO@27Be>>9-+nMyZj_
zFiaOvb%S(!9xTA9we{1UAZKuL+%09*UlqAX{!4MR>jc%}E837>?4`HX^T+9}AM&Zz
zjOfOApSs!{UV6WLC<OY|`KYjIp0;dusTdaj%t++C3MS+%cri(|flW*1Se??oxz^?3
zR5qP~UM~n+5^2gxq&H}dqb#X}BpQ>%@qQiN5xO-0UR%Q_L@p%7CHV+)|GoUi6X;pi
zwzhjn2?sS@y$RwQpZ9kgHV;?fOyniID!A@)y<|N*+fjN9({{ZN^awf0x^L-4f4gi&
zzmb0`nG@#OT9Y5-GsvDGt?#a&Q-D)sH7E}ZZwpNF$yUQKlD_dTKmL{XtQDzQVI!?I
z#vF45^<Vh(BmZBrW!t&=9(8qpNyRHDSgZP6+O-R{()>C(p-=LiKIOi0j5CT-%OLKV
z%?|~h)-<6c)n(psfl`yk`FJ>H8E&*sH`mx@o#Y`7Blvab+#lo68tqc>Mx#A?6(Og;
zdtw}A!7~3sEM4m_Y6oLIY%Ts?N_Xb>GuYe!{JVsI1j;h2!H_rTF5=6w5_d>chfDd#
z==XXzF;ls)B>zPm_0K7$Vmq5X&$@R(^tH>YB|F-8#%tcV0yUsZAJdp<I8X{g5fLLz
zYj%&EXPt15?rFPrBzKGL51fqy5Y?}Ya<($KZ1`=+z@;|sg|>b@0jJ$BX%h%Xkkak-
zsx3`!C6KNI0u9yhUFNrLw}5aUWuKl!-F#HNBKXn-kLoZwQ$2@!+`~^V_W;JsrgY^g
z)kql>BHY%f?_tDIJJAA*fA$f-F(xw`Dr6WDP1d_zh|{n3^c4k3#;Y0Ne>8VVu)Lr4
zKGKDJy4uwLK$_hCXI;1Ese|henui3fl~O(4uf-I2hFR_)cnVv`YAWo7rp!WfUm^yf
zF{s(Lg8`bHkdA0yJKnBY*vt(f8>R0K@6!#A6_vBB#uTwIt`efP5+hxT4Dt<#Js0xZ
zS30hoDk;MUx;#GIzj&TIPk(vm&93R|POOd=Kwc7t>kDA1s$ONvzr%*Hul>Gy{HQhZ
zD<|YeFaKwVU@qyC*Xy!C6kDJYip%S2wsW8)&iB;a25LUX%-pY+_fO$yAA9b0Cp-z0
z5rx3l3)~eDY*|>h^<)&k<qg;6X@Z?EjnS<VRmH9r)a)JM=)zr4%91|g4d>~94jVvw
z$N!(jX?E(>^o~#Yt|CRoTf$x)l5M=)sCVsWIgZug8jo_{q7ZP7qPa3W0r9I(iT^S}
z`hf$Z=Y;pTCNz{I(~@2mH^R_*zc>8p?b)|4$bbjiIPRw~Rmy^HS6h=?uzA1BIG!qY
zWBl{o^^NqsjUPvFY2HV;$=C)88-chsO6U69S4WMTkRo;3iLH(?IN@%;Jx*H|DGKUy
znC+LVP@;BokK&uyQv3>_aSL;<Q=do=n;(hkPiE5?OEw?3Y(25tx^Iu1<6g0W;28F_
z=2T`)<MeOXbQ}pE>Iv@uj{Yw+Tmp*>x>=kxP&T<1jX6n|^qK&HLx$SUseK>OGqln|
zoQGjKZEYEImjH#%R^-+<#3Bv<GooZ#`E41$!UVjov_8R%KhzRK7YuPR0*L-AfdjIc
z?gsxVU;E6BqjQ)FARjaUL&$LxrkOcuVWc=R1!oM!@PLJy=RYvI{!~7H<0=~OC_n0{
z&!kYys0V^hZBU#Tf%5oWK}JIc(W>b}@r?r5i{Y){@9|4@kM87`WGYNQbnX}^0Ng1;
z)O1Hf!6*{kbZdBNslnU!2&L@ERjGeHKwAm?2b4eE3rAsK)xUDaj}0X@Fw=Ls?|y@e
zTW8>gGcmvOVzF%WI}Y|3up$FHt{L=(zcZZJD8KQ}WyCBsOPA{l9-Hh(f*+Cgu-{(y
zyiumc?%~sB@_jl-g2Ja{FF}gV2zaP_R9mL1R@PB?M+83TJV#4+o;||&(#P2Yw%4WY
zt_gH?s#&cWZf0M)@sT=pV`!erv>WqzXqECvre+zNA+*7SYb?{D9eL_Pd&B$<HQDkk
zA}s20aC9wioW`h0&)JAm>i$oF%Y|ru)aJh+lVJZ}T9cpwL3TZ8;#KdDBi!s6d)1=5
z{|gBu^>(zkDU0ci_ONomO*63ddYOSP694w=qZ#(DmodaEUcdzE(BHHgqyE7Q0eY_r
zSF|5Juky`BABBPj`|Xb+W{+xf&lu{1+a^h5oWh!pUh#BXz$R2ww<=K+=b+yO2vz}$
zdbr(m*-28NGGU>^0jjTLm;LwCeY@KI@3-ORQ|LOOSJ4I~J9+Ioj?TRytIeRdm4m-t
z%$VN1mEh3SH=p16KkW`$1OeM)y^TmjiTr`5eJj8@kJp9hyx=k`9va;BIfU9{^$K~g
zs>gh$F%X&{6Cx$wDtH){GnO$#0s+LS@f5{I`_zxA_KS##kjF?Uc!fCBKF;QzCAc>Q
zek)0aiiJJt+gjk8$6nO=1<g*dW9*A9bbMw}NMqGxHkv&L(D<jNAc4x{T;1jG!P8UX
za0$3!5At2N5$Bn8fC;ym*f05kcZ)c+WT1QerT!9f&Ihs!`#<~K;rnv5imt#Pe80{)
z3<mR+&294n=ZDHq8NWEP5W8M=QfgC}>8Zb(@8^FrQnyTJ5r~wtvfL1sBkkWa#HTZ#
z-J_g+Lb#dQEyBkEd7y@6h+VfQYkq@@O~0O+P5%xM0*_UwL3Q}!h(hgQVcPy|*MMw(
zoBN1wHzoDgy2%u4@(<5NEBT)Zw8AatcKr^n;#ey0?4Vv8riVK{3-#m;e8dQC^T<Uc
zxxGAGlq0DqO$s-`;e$jl#mF&5bC>z+M__<(vd<!=s@_++!pQ48Renn9;~Hi#!c3Hd
zgl^ynPa=pF*%p{^RpV&Bp^S=-0dCABX%kUgLGG2eZdQs%zL>eT`A(<yL^4)%IP<Ja
z3oKRr!d-k%f1k_jTY7d?^0>669nhrZQ`S&6l9WJdWA))GU*!JFT}d4%6{^8@m!9)d
zXtx~^^p@TW^gFmDMQTWz-2>k=NffoirWPB#*2hNPC$BP_wQ%1yFl}^_gpXOo0@UTE
z^Bet(^bQ(v5FCg0_Lt!qpF7^XMfti-H)Yxm^qb=z*h0u?WIPdRb6+j}?!p6tv?T>i
zBA&9XghWnTdXHC?Z^v<P!{Yr~-3=BY`4}^iF(?-ZBo@`5o5eK`T`ZtNaRt?^5g0iJ
zdKNv1Xcl-y%RfXZV*k7GOX|)zdbTv;TLv|}FGsWw`EhtV*hOC28k}E-;-1;3a#UfA
zmEub!%K;>@IE$W=rSWQ(wYCLQ0(vzk$v3Vj<k<pyn+T8ZOov965TKXKXNK6PQGVOQ
zZdHtLTe+I^n^4kQvh4)J^gYJT78Fo~c6@-=qcjQ>44E69lq;i5e)N#D6IKmNkJ!A#
z^QAndtacDaTW;{XuP(edxXZL+?Q#c>f|S?NW~`wMcs8KE<|7#t+kt4s<>mP_8AVf}
zCbO8>-;JF6HBhJedvf;*L4yQue>2wu%f{Y8YnzlIoium)iKwJDN3h>gFxW|7yaF(x
zan3M%UxUF9t>4jA1(n#eN>KmV(X=*4qudhWorlIcBf|_!wnnnvuSl(w0<VrbYVcnz
zD=klc&6cQMLHnQvaFDMIo%S2sdN26Z=_h~OM?}N_LZ>%tQpgECq%VfT*tM`Afs>sC
z4w7j;yoOlKmr6=O2ND?~I6yyI^t@@k0K*??t#iqMfx>L<gB5+8WB|%$?=fw|DFe()
zP-dudu0fWS*8A_b<F2iB&uYtk2p_K>;PF8~r8aT>@1t$x4;_tegIhh{a-r=GZ0?s%
zqX9;z|CrqPK023(+>{72#tUh-MG3y464M&E4hmCH<z_si&1d)dei-cw*o&o?{O6xl
zt~9XGs}OKoi~ef*@V)2#o40?K+qMu3I3f4SO^htpL$AbVX+ay#5L7I1s=>p7EU*Js
z(;f@-EnuND>_K2@kbRkS)2d%<OHZKE7pEHY1e+MFi;W8o;!>Lhl$FflZ~&34oAHeH
zopC$a)*@9vlIT?FoZJ;|9BNj#I$ZNV<bi@M_aBP$J|mO(H}lStcJ+_uwM$0Jw@-}p
z;6G|6;eiC@W{G!4PrT}dm{(!CR{P9LBE{oj^D8kc^~T^<>!!)=53_(bPd|R5JJD|a
zLz!y%Kf|v#LHFBDBz%sF^-sI^=mve?Eb*>>ExkQ{JLDrY+R?fk4*K<L^Y()t{S~Z%
zr%jFXtDvDPxQpuin)<oppF#sI$$~Nc`hL??DCp~_$)WrQb3_oq)W@^aHnTA=p}ocz
zBj)B)wd6TZEos3}vmJU0^AewIJJy)X(jV|mMxW8mzEabAA^y;Kh5UBNPacdQ{G^io
z<)(Y{X3N;VZO@I&45El;zFSl$=ya}fRFrou%cj?r_n|#>QvFDeHnbxcVG-H%1h}J9
z(>|z-5&(v`-Z?XJi4#6_4h#mJi{gDN6knS}Ck{DFU1v}DhX|%1m`~b6K=zcJ9^C)|
z`dR<tyJw~n^d_uH>$Cp_rSSUK)AE1LGfeVHZ;0)<Q9;D|y}y#&N@yM%8l<#EfJo?)
zHZ3R61^(Q|{V=>MH@?3*1Ft330cA8QQsCRm?HN;Qy_K-id&8U6JtoOmV3uG5UVEM>
zw2(PGon#De_g=0d{C)7>r3(Dri&m>SexBMd(_-zH=CMkAhRQe4k566+tsCL|{@D+x
z|4s(V`{zM_xY}rYf0175$THduns1LusT|->d|sLt;r=fB*Dcan0J3h*WAD~UmaYVJ
z5iJlk@}3KN2`P|Rmn_Pz_yS2FRh#Wc|D+39<(*a;^?jg5X`k4cSIv{hoSEwz5h_V&
zJHYrml4sx~W?t7{H}hHrd2RsuTL0EzYE82JpWEH5=ioCi2`H$g(GO+<EkZx+zj|}v
ze8_J$i~_P&#GnV5d(H|zWZG*&8kfI4d)<($NZzag;_=M(MUiGkF+hHSw0L&{y`4}q
z{^ax3Y-(W4+l8G<7EQj|rD+xZvi;{yFrRI?HyHtos4tzlIkS0oMDK$w{<u`+|1PCp
zj&eBa-+%1&(gXy`KfrGv%_Xz|(OKST;O!(^?ubl@eRFSMVW<%4a?K{&4W6)sA_WZ}
zi={hU(sOew$Kf+>V++3MxTaR2$_frAyd4t5-P4C}QvGh3EB%u1nxma5OODjY|5StQ
z^PNdd>f&IRbuV@SvMBw<8b|F<k8kzM5|@Cb7s8@OsDqPut&%s-79BSB`ZPA>pR3%m
zr%y{c|NkVRMjfj5=T<$0oc6K4#Gh_Vg$vMzVotrAZ1fO6qCv5#+&o(?R6Z1m&N>-B
z8L>aEH?#kGmp4c9gjLBBU2o^i-C#autpi=<+Mp!;?{5#o-J&Z1ye)+9&nmE4zX6mO
zEOjT~xs+TvETaOJ3|NwpT^f5IaUkL0Kb7l8xXSzoP=j#~3{Osx5qrO<dvEs_&D_6=
zOSS0@le*rc#Xb=C_2@_LE>Zx9vTORb5icoUrzuZ6(ua#|@sPYgz~_f4m*9pSIIND>
z9m2yqJR&<?byo|80OId8_*WB13SNdX_D@eA!-I&rL;i4r`U3)I6r=sm;0%fs=~BEH
zrr+>g%4AS)*&d$IJAx(yk~7!fVl{wI3A#gr4%P|HQ(t3e7~Y|Xz&+)e;X|&j<pn>J
z>WBOPr8N(3hOO}b$g;Zm;Kst=m%HZ?FZbKxksaT6PiB<Ht9;<(hT>K&rbI2)419-$
z`zlKaut)KR#YVf3I*!^Gx}gizWdQ1JwZ43`P3!e9jS#15OP0@2`5U}%G4@;pM`NGn
z`~JDj>f;wSiohO*;k`G-^GZ-p^O>_}iJ_q@z&^AR5EZ!T_>#cbPB#<OUAA@WfUwuJ
zXuw$iGH#9!XBfbKyN3F=?JUvb*oCH_=H?{#{_TlW--(h{h`*H9t)2#;+~3)?cBbkA
zRo$L%?%s1?xcLxbl+R}FwcG#pWbR-d-}~hBUUGH$`X;!kVEmugga5A{LsKpSKoYWQ
zf)77d@%<%q9_rq1ETld>0;s9dP28A72&A1Ygjc@IZfgd2KO-BegzZAE?G@Sr*6GaB
zvHvmMG|9qW_tBlhob(LU20~|?L5gzgYodE}#4+28lbCJXxacONetH$;|MHrI@NFP9
zbcKl$26#oDpSme2!EH7musdCQBNDsh<%SuJPx4>MgKsFxF;2Zp?BnIOF*Y{X@cRg|
z&kry_I)prBTJ9jnGTN1@=4q7vssX6r>jkFbzWB5_+jEQHeDq<9{Q9niM=A259%*6!
zmpT9TCfV!U&W|Z9Hw&7;(Xrp-+hoAcum3;I<i{T_c<Bc&0%;+53w)y*g-1kbZ}@=&
zE$5K<2#^y9;bR78x@iykCbZ!X#Q)o6qX~07>+d&|>|PP_Wv2Zvy=_w&xTdmR{B@G!
z$nw)lIz{&J@w=7=eK{RoVlJ_Vk!R_IiP!v=D9SWH^!>>7J+wi)pyJ9Nzm2RxH-O#!
z&LgSN@RvVtvH^I{^W)dYJO0dxmP@?2yVKDj{`67dg<qX=_P_nXBxk{RU^V9(^U&L`
zc6Z%#>rGr3DU`<3@M`9HQ-Q~avJ1R_#Iqz^`M!0EaJZ-mlc~pnT{15@)0WJP^5^;k
z%BDMHA$8=D@0(fDiiCdN%l@@(lL3F`{b@|w7tNY&#mvQ(e!TU49Q&k0dXE_wB&>e%
zF3`gA$-6#{_%#>Ona<m8c)Mb)+r#<Z0<!ZjeUeQ`<%wCoZa&+K?3I6S9A%JDmI=O)
zkoDp7>)&(VY9E?rel)<M^)D!dYq%kazSCaJ+u`B=fPbr5{?1z-yNjuyu3YxDe9MmK
zk59zLzqW2VdflL&zfAT(wxN|x$TGQ$U4AQ?`2E)Nrv?02ccw7?J#*8RZy(DOr^*_c
z`n*e>8+6EC_Hg;Kd&~amN-{^yZO(4^{6~rV*w;EwN8l6#aMoP}>finYzyJP=f1TWa
z{PA1PG^dL2mG^FKJ){-;)aG`)On>0sL%+_rWv}>u_wRl6{hl@AQ+~G^R9aqr)RI;g
ze&ko)S@T=xG*{Pt{%Eb`zs73C{D%&f+k%uMzF#>d_mJ;`1m9BrzBDaEiS56YA>RFC
z0gX_5vG?Wtzt^`^AN^nc;<4YCa_<C{#{ElvB=7&SzCXeB>HaxkA1%X~rd;V2XJ$~^
zadyvV^B*@i&vx9h=je-o=L?eLZ?u(FFIxbq_L{+Uk;|iSZMIwGA4BIS?<yC5!|oXL
zdqMWhiOK9vDwWO!GA#+A%UJGlyLGJ>U(@ZkzBX=+c7yE0d#S}c7-dST%YZGg)kdsq
zn0_-ZZkAA*u}kpvvM<wI13!KJbw0oNG$?brJZc6HLjxNFW;~ZvxZBSklPOR-HTnM!
z#TEAR_|=<gm;Uz`<r2;bd@p|S(R!!N3^ShXJILc8%f40os&mNi%?|uM-%Yez^gk?K
zI)93O*tE{?+*7=~GADx!KXShb>WTRWUw<`fwK=A^|ItsO6aN)8AMkBna6}<M?CI3F
z1B)Mi-l+WVj-rowcF7xetNHCoj%J6L_VPX{U%y7wBp~?f?hASBi7K!6axmRsa++qh
z;P->4@7J@lGrH8AII9eb_|Ey@BLskH-qGU8cQrvirYGUtY~?I!SDN%TFh$w=hRwB}
zp}+RDb<=;&7r*CkEZhGvJnG<olbcN%zrV~qWw^FpXr{cAv4-nuW>LoSBQlVX$%j<3
zN)vA!@IET9vEj+t!%BZ^{?xBZ*mLv9`MlZxRapP>i8nMkCzNkCwV2Km%JWjjH@r{e
htuVNbwCeqD|HJQNd6@V#;1UJ~22WQ%mvv4FO#r7%3}*lU

literal 0
HcmV?d00001

diff --git a/templates/claude/settings.json b/templates/claude/settings.json
new file mode 100644
index 0000000..0967ef4
--- /dev/null
+++ b/templates/claude/settings.json
@@ -0,0 +1 @@
+{}
diff --git a/topology.svg b/topology.svg
new file mode 100644
index 0000000..3bb385f
--- /dev/null
+++ b/topology.svg
@@ -0,0 +1,113 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 520" width="800" height="520">
+  <style>
+    text { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif; }
+    .title { font-size: 14px; font-weight: 600; fill: #24292f; }
+    .label { font-size: 12px; fill: #24292f; }
+    .sublabel { font-size: 11px; fill: #57606a; }
+    .arrow-label { font-size: 10px; fill: #57606a; font-style: italic; }
+    .box-host { fill: #f6f8fa; stroke: #d0d7de; stroke-width: 1.5; rx: 8; }
+    .box-docker { fill: #fff8f0; stroke: #D4A574; stroke-width: 1.5; rx: 8; }
+    .box-container { fill: #ffffff; stroke: #D4A574; stroke-width: 2; rx: 6; }
+    .box-component { rx: 4; stroke-width: 1; }
+    .comp-cli { fill: #dafbe1; stroke: #56d364; }
+    .comp-project { fill: #ddf4ff; stroke: #54aeff; }
+    .comp-home { fill: #fff1e5; stroke: #D4A574; }
+    .comp-agent { fill: #fbefff; stroke: #bc8cff; }
+    .comp-workspace { fill: #ddf4ff; stroke: #54aeff; }
+    .comp-ssh { fill: #f6f8fa; stroke: #8b949e; }
+    .arrow { stroke: #57606a; stroke-width: 1.5; fill: none; marker-end: url(#arrowhead); }
+    .arrow-mount { stroke: #D4A574; stroke-width: 1.5; stroke-dasharray: 6,3; fill: none; marker-end: url(#arrowhead-mount); }
+  </style>
+  <defs>
+    <marker id="arrowhead" markerWidth="8" markerHeight="6" refX="8" refY="3" orient="auto">
+      <polygon points="0 0, 8 3, 0 6" fill="#57606a"/>
+    </marker>
+    <marker id="arrowhead-mount" markerWidth="8" markerHeight="6" refX="8" refY="3" orient="auto">
+      <polygon points="0 0, 8 3, 0 6" fill="#D4A574"/>
+    </marker>
+  </defs>
+
+  <!-- Host Machine -->
+  <rect class="box-host" x="20" y="20" width="760" height="480"/>
+  <text class="title" x="40" y="48">Host Machine</text>
+
+  <!-- Sandcage CLI -->
+  <rect class="box-component comp-cli" x="50" y="70" width="180" height="60"/>
+  <text class="label" x="140" y="96" text-anchor="middle">sandcage CLI</text>
+  <text class="sublabel" x="140" y="114" text-anchor="middle">sandcage claude</text>
+
+  <!-- Project Files -->
+  <rect class="box-component comp-project" x="50" y="160" width="180" height="70"/>
+  <text class="label" x="140" y="186" text-anchor="middle">Project Files</text>
+  <text class="sublabel" x="140" y="204" text-anchor="middle">~/projects/my-app/</text>
+  <text class="sublabel" x="140" y="218" text-anchor="middle">(resolved to git root)</text>
+
+  <!-- Persistent Home -->
+  <rect class="box-component comp-home" x="50" y="260" width="180" height="60"/>
+  <text class="label" x="140" y="286" text-anchor="middle">Persistent Home</text>
+  <text class="sublabel" x="140" y="304" text-anchor="middle">~/.sandcage/home/</text>
+
+  <!-- SSH Keys -->
+  <rect class="box-component comp-ssh" x="50" y="350" width="180" height="50"/>
+  <text class="label" x="140" y="376" text-anchor="middle">SSH Keys (selected)</text>
+  <text class="sublabel" x="140" y="392" text-anchor="middle">sandcage-ssh volume</text>
+
+  <!-- Arrow from CLI down -->
+  <line class="arrow" x1="230" y1="100" x2="320" y2="100"/>
+
+  <!-- Docker Layer -->
+  <rect class="box-docker" x="310" y="60" width="450" height="420"/>
+  <text class="title" x="330" y="88" fill="#9a6b3a">Docker</text>
+
+  <!-- Container -->
+  <rect class="box-container" x="340" y="105" width="390" height="350"/>
+  <text class="title" x="360" y="133">Container</text>
+
+  <!-- Agent -->
+  <rect class="box-component comp-agent" x="370" y="150" width="330" height="60"/>
+  <text class="label" x="535" y="176" text-anchor="middle">AI Agent (Claude Code / Codex)</text>
+  <text class="sublabel" x="535" y="194" text-anchor="middle">runs as entrypoint</text>
+
+  <!-- Mounted Workspace -->
+  <rect class="box-component comp-workspace" x="370" y="235" width="330" height="60"/>
+  <text class="label" x="535" y="261" text-anchor="middle">/workspace/my-app</text>
+  <text class="sublabel" x="535" y="279" text-anchor="middle">project mounted read-write</text>
+
+  <!-- Mounted Home -->
+  <rect class="box-component comp-home" x="370" y="320" width="330" height="55"/>
+  <text class="label" x="535" y="346" text-anchor="middle">/home/agent</text>
+  <text class="sublabel" x="535" y="362" text-anchor="middle">config, creds, plugins persist</text>
+
+  <!-- Mounted SSH -->
+  <rect class="box-component comp-ssh" x="370" y="395" width="330" height="45"/>
+  <text class="label" x="535" y="417" text-anchor="middle">/home/agent/.ssh (from sandcage-ssh volume)</text>
+
+  <!-- Volume mount arrows -->
+  <line class="arrow-mount" x1="230" y1="195" x2="368" y2="260"/>
+  <text class="arrow-label" x="280" y="218">mount</text>
+
+  <line class="arrow-mount" x1="230" y1="290" x2="368" y2="340"/>
+  <text class="arrow-label" x="272" y="305">persist</text>
+
+  <line class="arrow-mount" x1="230" y1="375" x2="368" y2="415"/>
+  <text class="arrow-label" x="275" y="392">volume</text>
+
+  <!-- Arrow from agent to workspace -->
+  <line class="arrow" x1="535" y1="210" x2="535" y2="233"/>
+  <text class="arrow-label" x="548" y="226">reads/writes</text>
+
+  <!-- Step numbers -->
+  <circle cx="265" cy="85" r="10" fill="#D4A574"/>
+  <text x="265" y="89" text-anchor="middle" font-size="11" fill="white" font-weight="600" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif">1</text>
+
+  <circle cx="290" cy="240" r="10" fill="#D4A574"/>
+  <text x="290" y="244" text-anchor="middle" font-size="11" fill="white" font-weight="600" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif">2</text>
+
+  <circle cx="535" cy="222" r="10" fill="#D4A574"/>
+  <text x="535" y="226" text-anchor="middle" font-size="11" fill="white" font-weight="600" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif">3</text>
+
+  <!-- Legend -->
+  <text class="sublabel" x="50" y="460">1 CLI orchestrates Docker</text>
+  <text class="sublabel" x="50" y="476">2 Project and home are bind-mounted; SSH keys via named volume</text>
+  <text class="sublabel" x="50" y="492">3 Agent works in mounted workspace — changes visible on host</text>
+</svg>
\ No newline at end of file