From 94baf897c4660c89e4b8d7098fc3b5f0e7c00ccb Mon Sep 17 00:00:00 2001
From: ee-extensions release bot <ci@gitea.mulligan.casa>
Date: Tue, 23 Jun 2026 18:38:01 +0000
Subject: [PATCH] release eea-foh 0.22.1

---
 eea-foh.json                                  |  20 +++++++++++++++---
 ...{eea-foh-0.22.0.zip => eea-foh-0.22.1.zip} | Bin 456786 -> 456909 bytes
 2 files changed, 17 insertions(+), 3 deletions(-)
 rename eea-foh/{eea-foh-0.22.0.zip => eea-foh-0.22.1.zip} (90%)

diff --git a/eea-foh.json b/eea-foh.json
index 120b559..4cbe238 100644
--- a/eea-foh.json
+++ b/eea-foh.json
@@ -1,15 +1,29 @@
 {
   "name": "Front of House for Event Espresso",
   "slug": "eea-foh",
-  "version": "0.22.0",
-  "download_url": "https://gitea.mulligan.casa/ee-extensions/foh-updates/raw/branch/main/eea-foh/eea-foh-0.22.0.zip",
+  "version": "0.22.1",
+  "download_url": "https://gitea.mulligan.casa/ee-extensions/foh-updates/raw/branch/main/eea-foh/eea-foh-0.22.1.zip",
   "homepage": "https://gitea.mulligan.casa/ee-extensions/eea-foh",
   "requires": "6.4",
   "tested": "7.0",
   "requires_php": "8.1",
+  "last_updated": "2026-06-23 18:38:00",
   "icons": {
     "1x": "https://gitea.mulligan.casa/ee-extensions/foh-updates/raw/branch/main/eea-foh/icon-128x128.png",
     "2x": "https://gitea.mulligan.casa/ee-extensions/foh-updates/raw/branch/main/eea-foh/icon-256x256.png"
   },
-  "last_updated": "2026-06-23 04:43:55"
+  "author": "Mike Mulligan",
+  "author_homepage": "https://gitea.mulligan.casa/mmulligan",
+  "tags": [
+    "event espresso",
+    "point of sale",
+    "box office",
+    "front of house",
+    "ticketing",
+    "registration"
+  ],
+  "sections": {
+    "description": "<p>Front-of-house event check-in for Event Espresso 4/5: tablet <strong>check-in stations</strong><br />\n(installable PWA, zero WP chrome), <strong>device trust</strong> with admin approval handshake,<br />\n<strong>clerk attribution</strong> via badge codes, and a full <strong>append-only audit trail</strong> — plus a<br />\nwp-admin \"default mode\" page that makes it a drop-in replacement for the official<br />\n(stalled) EE Barcode Scanner add-on.</p>\n<p><strong>Design contract: <a href=\"docs/SPEC.md\">docs/SPEC.md</a>.</strong> Read it before touching code.</p>\n<h2>Status</h2>\n<p>Pre-release scaffold (<code>0.1.0</code>). Schema and module skeleton in place; see the spec for<br />\nthe build plan.</p>\n<h2>Requirements</h2>\n<ul>\n<li>WordPress ≥ 6.4 (multisite supported, per-site activation)</li>\n<li>PHP ≥ 8.1</li>\n<li>Event Espresso ≥ 4.10 (tested against 5.0.17.p)</li>\n<li>Optional: <code>eea-ticketing</code> (enables camera/QR scanning of printed tickets)</li>\n</ul>\n<h2>Deploy</h2>\n<p>Copy the plugin directory into <code>wp-content/plugins/</code> — built front-end assets are<br />\ncommitted under <code>assets/app/</code>; nothing to build or install on the host. Activate<br />\nper-site. Deactivate <code>eea-barcode-scanner</code> first; this replaces it.</p>",
+    "changelog": "<h2>[0.22.1] - 2026-06-23</h2>\n<h3>Changed</h3>\n<ul>\n<li>Release now flows through the shared manifest pipeline; the \"View details\" modal carries a description, changelog, and tags. No functional change to the plugin.</li>\n</ul>\n<h2>[0.22.0] - 2026-06-23</h2>\n<h3>Added</h3>\n<ul>\n<li>Color-coded plugin icon, published to the update channel by the release workflow.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>Declared WordPress 7.0 compatibility (Tested up to: 7.0).</li>\n</ul>\n<h2>[0.21.2] — 2026-06-22</h2>\n<h3>Changed</h3>\n<ul>\n<li><strong>Updates delegated to the Manifest Updater plugin.</strong> FOH no longer bundles its<br />\n  own self-hosted updater (<code>Support/Updater.php</code> removed + its instantiation). It<br />\n  now declares an <code>Update URI</code> header pointing at its <code>foh-updates</code> channel manifest<br />\n  with the <code>#manifest-updater.json</code> trigger, so the network-active <strong>Manifest<br />\n  Updater</strong> plugin surfaces + installs updates via WordPress's native update path.<br />\n  Functionally identical update delivery; the point is that FOH can now run<br />\n<strong>site-active</strong> instead of network-active — which removes the stray Return/<br />\n  Settlement payment-method rows on non-desk subsites at the source (the cause of<br />\n  the recurring \"automatically deactivated\" notice). Manifest Updater must be<br />\n  network-activated to receive update notifications.</li>\n</ul>\n<h2>[0.21.1] — 2026-06-22</h2>\n<h3>Fixed</h3>\n<ul>\n<li><strong>The recurring \"payment method Return/Settlement was automatically deactivated\"<br />\n  admin notice — root cause, surfaced on multisite.</strong> FOH is network-active (so its<br />\n  self-hosted updater runs network-wide), and it <strong>eagerly auto-activated</strong> its two<br />\n  internal payment methods (Return, Settlement) on EVERY subsite via<br />\n<code>Schema::install</code>, then <strong>proactively reactivated</strong> them on every admin/cron load.<br />\n  On subsites that never run a front desk, those stray active rows had no registered<br />\n  type in some request contexts (e.g. a network plugin update), so EE auto-deactivated<br />\n  them and filed a sticky per-site notice — and the proactive reactivation flipped<br />\n  them back on for EE to deactivate again, regenerating the notice in a loop. (Earlier<br />\n  patches also cleared the notice in the wrong site's context on a network.)</li>\n</ul>\n<p>The lifecycle is now <strong>use-driven</strong>, matching how EE treats every other payment<br />\n  method: the Return/Settlement rows are created/reactivated <strong>lazily on first actual<br />\n  use</strong> (<code>paymentMethodId()</code>), which only happens on the site that records a<br />\n  return/settlement — so no stray rows are planted elsewhere. The eager <code>Schema::install</code><br />\n  activation and the proactive reactivation are removed; the money path is unchanged<br />\n  (it already self-heals the row on use). The PMT <strong>types</strong> are still registered on<br />\n  every load (that is what stops EE deactivating the real active row on the desk site).<br />\n  The stale notice is now <strong>purged through EE's own notice collection</strong> (the<br />\n<code>...PersistentAdminNoticeManager__registerNotices</code> seam), which works in any<br />\n  admin/network-admin context and on any site — fixing the multisite mis-targeting of<br />\n  the previous attempts. New <code>EePersistentNotice::suppressAutoDeactivated()</code>.</p>\n<h2>[0.21.0] — 2026-06-22</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Per-method payment options end-to-end (payment-methods config Phase 3).</strong><br />\n  Settings ▸ Payment Methods now configures, per method: a <strong>display-label<br />\n  override</strong> (all methods), <strong>require a check number</strong> (check), and a <strong>card<br />\n  surcharge</strong> (card). The station honours all three — resolved label, check#-required<br />\n  capture, and surcharge display + charge.</li>\n<li><strong>Card surcharge as a REAL fee line item (the money model).</strong> A configured card<br />\n  surcharge is added to the transaction as a genuine, non-taxable EE fee line item<br />\n  when the card payment is taken: the total rises by it, it prints on the receipt,<br />\n  and it lands in EE's reports. The station launches the Collect reader with<br />\n<code>base + surcharge</code>; the server records the gateway-verified captured amount and<br />\n  adds the matching surcharge line (<code>LIN_code = foh-srcg-{ref}</code>, idempotent on<br />\n  retry), clearing the surcharge-inclusive balance to zero. A divergence between the<br />\n  charged amount and the configured surcharge is audited (<code>card_surcharge_mismatch</code>);<br />\n  a surcharge that cannot be applied fails the record loudly rather than overpaying.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li><strong>Card retired from FOH's built-in registry; now registered by the Collect<br />\n  add-on through <code>eea_foh_register_payment_methods</code>.</strong> FOH no longer carries a<br />\n  transitional <code>card</code> built-in or reads <code>eea_foh_collect_enabled</code>. <code>recordPayment</code><br />\n  resolves card via the registry filter (which foh-collect registers unconditionally<br />\n  at load), so the money path still resolves card on a pure REST request. <strong>Requires<br />\n  eea-foh-collect 0.2.0+</strong> (install it alongside this release — it supplies the card<br />\n  registration). FOH now owns enable/disable + label + surcharge for every method,<br />\n  including card, in one Settings section.</li>\n<li><strong><code>cash_refunds_enabled</code> forward-migrated and dropped</strong> (<code>EEA_FOH_SCHEMA_VERSION</code><br />\n  18→19). On upgrade, the legacy event-wide cash-refund setting is migrated into<br />\n<code>payment_methods.cash.options.allow_refunds</code> (idempotent, gated on the pre-upgrade<br />\n  version) and the legacy key is removed from all reads. An existing install keeps<br />\n  its cash-refund setting; a fresh install defaults off.</li>\n</ul>\n<h3>Hardening (adversarial money-path review)</h3>\n<ul>\n<li>Surcharge is <strong>clamped to the configured amount</strong> so a concurrent payment that<br />\n  races the balance toward zero (or a wrong amount on the reader) can't inflate it<br />\n  into a phantom fee — any excess capture surfaces honestly as an overpaid txn.</li>\n<li>A failed surcharge line-item write now <strong>fails the record loudly</strong> instead of<br />\n  recording a payment that would overpay the transaction.</li>\n<li>Server-side <strong>policy enforcement</strong>: a direct request can no longer record a method<br />\n  the admin disabled (the UI already hid it); idempotent retries are unaffected.</li>\n<li><strong>Surcharge values are capped</strong> (percent ≤ 100, flat ≤ $999.99) so a typo can't<br />\n  become a runaway fee.</li>\n<li>Saving settings while the Collect add-on is <strong>deactivated no longer wipes</strong> the<br />\n  saved card surcharge/label config.</li>\n<li>The cash-refund forward-migration is gated on its own completion flag, so a<br />\n  transient write failure <strong>retries</strong> instead of silently losing the setting.</li>\n<li>A loud <strong>admin notice</strong> fires if the Collect add-on is active but older than 0.2.0<br />\n  (which would otherwise let a card charge succeed at the reader and fail to record).</li>\n</ul>\n<h3>Migration / compatibility</h3>\n<ul>\n<li><strong>Behaviour-preserving by default.</strong> An untouched install offers exactly the same<br />\n  methods as before (card included when Collect was enabled), check numbers stay<br />\n  required unless an admin opts out, and the cash-refund setting is carried forward.<br />\n  Surcharge is off until configured. The money path is unchanged except for the<br />\n  surcharge line, which only applies when a card surcharge is configured. Sequence<br />\n  the install: <strong>eea-foh-collect 0.2.0 first, then eea-foh 0.21.0</strong>, so card never<br />\n  has a gap.</li>\n</ul>\n<h2>[0.20.1] — 2026-06-22</h2>\n<h3>Fixed</h3>\n<ul>\n<li><strong>Recurring \"payment method was automatically deactivated\" admin notice for the<br />\n  Return and Settlement payment methods.</strong> The methods were being reactivated<br />\n  correctly (returns/settlements kept working), but the stale persistent notice<br />\n  kept reappearing. Root cause: EE's <code>PersistentAdminNoticeManager</code> loads every<br />\n  notice into an in-memory collection and <strong>re-saves that whole collection to the<br />\n<code>ee_pers_admin_notices</code> option on <code>shutdown</code></strong> — so the prior fix's raw<br />\n<code>update_option()</code> delete was overwritten every request. The notice is now<br />\n  dismissed <strong>through EE's own collection</strong> (<code>dismissNotice(..., purge: true)</code>),<br />\n  which the shutdown save then removes for good, and the dismissal runs whenever<br />\n  the PMD row is already healthy (not only during a reactivation). New<br />\n<code>Support/EePersistentNotice</code> helper centralises the purge (incl. the<br />\n<code>sanitize_key()</code> collection-id vs raw option-key gotcha). Cosmetic-only,<br />\n  best-effort, never touches the money path.</li>\n</ul>\n<h2>[0.20.0] — 2026-06-22</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Device hardware capabilities (payment-methods config Phase 2 — the capability<br />\n  layer).</strong> Each device can now declare which payment hardware it has via a<br />\n<strong>Hardware</strong> block in the device editor: <strong>card reader</strong> and <strong>cash drawer</strong><br />\n  (extensible). A payment method whose required hardware is unchecked on a device<br />\n  is hidden on that station's point of sale — card needs a card reader, cash needs<br />\n  a cash drawer, check needs neither. This completes <code>capability ∩ policy ∩\n  authority</code>: <code>PaymentsService::availableMethods</code> / <code>methodDescriptors</code> now also<br />\n  intersect the acting device's capabilities.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>New <code>DEV_capabilities</code> column on the devices table (<code>EEA_FOH_SCHEMA_VERSION</code><br />\n  17→18; the column is added by the existing idempotent <code>dbDelta</code> upgrade on next<br />\n  load — additive, non-destructive).</li>\n</ul>\n<h3>Migration / compatibility</h3>\n<ul>\n<li><strong>Behaviour-preserving by default.</strong> Capability is <strong>visibility only</strong> — it never<br />\n  weakens role authority (the <code>can_take_payment</code> / <code>can_cash_refund</code> caps stay the<br />\n  gate) and never touches the money path (<code>recordPayment</code> and EE payment-method<br />\n  resolution are unchanged). A device with no stored capabilities reads as<br />\n<strong>all-true</strong>, so every existing device offers exactly the methods it did at<br />\n  0.19.0 until an admin unchecks a box. Admin (Mode A) and actorless resolution<br />\n  skip the capability layer entirely.</li>\n</ul>\n<h2>[0.19.0] — 2026-06-22</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Payment-methods configuration (Phase 1).</strong> A new data-driven method <strong>registry</strong><br />\n  replaces the hardcoded <code>['cash','check','card']</code> list: cash and check are built-in,<br />\n  and additional methods can be contributed through the new<br />\n<code>eea_foh_register_payment_methods</code> filter (card is the first such method, bridged in<br />\n  during this phase pending foh-collect's own registration in a later phase).</li>\n<li><strong>Settings ▸ Payment Methods.</strong> One row per registered method — enable/disable cash<br />\n  and check, set the cash-refund policy (the former \"Allow Cash Refunds\" toggle now<br />\n  lives here as the Cash method's option), and a read-only Card row showing its status<br />\n  (card-present is still provided by the Collect for Stripe add-on's own toggle).</li>\n<li><strong>Per-profile payment-method override.</strong> An access profile can now inherit the global<br />\n  enabled set (default) or override it to a restricted subset — it can switch a method<br />\n  off for that station but never enable one disabled globally<br />\n  (<code>PRO_scope.payment_methods = { inherit, methods[] }</code>).</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li><code>PaymentsService::availableMethods</code> / <code>methodDescriptors</code> / <code>resolvePaymentMethod</code> now<br />\n  iterate the registry and apply the policy (global ⊕ profile) ∩ role-authority<br />\n  intersection instead of a hardcoded list. The money path is unchanged:<br />\n<code>recordPayment(slug)</code> and EE payment-method resolution semantics are preserved, and<br />\n  role capabilities (<code>can_take_payment</code> / <code>can_cash_refund</code>) remain the authority.</li>\n</ul>\n<h3>Migration / compatibility</h3>\n<ul>\n<li><strong>Behaviour-preserving by default.</strong> An untouched install behaves exactly as 0.18.x —<br />\n  all methods enabled, card offered when Collect is enabled, cash refunds keyed off the<br />\n  migrated <code>payment_methods.cash.options.allow_refunds</code>.</li>\n<li><strong>Non-destructive read-through migration.</strong> The legacy <code>cash_refunds_enabled</code> and<br />\n  foh-collect's <code>eea_foh_collect_enabled</code> options stay readable; the new<br />\n<code>payment_methods</code> structure is derived on read from them (plus registry defaults)<br />\n  until an admin saves the new section, at which point cash/check become authoritative.<br />\n  Card stays read-through to its own plugin's gate. No schema change.</li>\n</ul>\n<h2>[0.18.2] — 2026-06-22</h2>\n<h3>Security</h3>\n<ul>\n<li><strong>Server-side ticket-category scope on the sell write path.</strong> <code>SellService::createSale</code><br />\n  now re-resolves the acting profile's allowed ticket ids (the same <code>eea_foh_scope_tickets</code><br />\n  path the catalog read uses) and refuses any line whose ticket is out of scope. Previously<br />\n  only the READ path (catalog) was scoped, so a clerk restricted to one category could POST a<br />\n  ticket id from another category on the same event. Fail-closed; admin (no profile) and<br />\n  unrestricted profiles are unaffected.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li><strong>Check-number dedup scoped to the transaction.</strong> A check number is only deduped within its<br />\n  own transaction now, so the same check number legitimately reused across different<br />\n  transactions (different payers/visits) is no longer rejected as a duplicate. Card charge-id<br />\n  dedup stays global (replay protection).</li>\n<li><strong>Return payment fails loud on an unresolved Return PMD</strong> instead of silently writing an<br />\n  unclassifiable <code>PMD_ID=0</code> onto a live money row (mirrors the settlement guard).</li>\n<li><strong>Customer-credit reversal is now confirmed + loud.</strong> <code>reverseCarrierPayment</code> returns a hard<br />\n  failure when the payment delete does not take, and both <code>CustomerCreditFlow</code> call sites<br />\n  (settle-store-credit, pay-with-credit) capture that result and leave a loud reconciliation<br />\n  trail — no more silent \"nothing changed\" on a transaction left wrongly paid.</li>\n<li><strong>Incident report is honest.</strong> <code>POST /station/incident</code> returns <code>recorded:false</code> when the<br />\n  audit insert fails (was always <code>true</code>).</li>\n<li><strong>Badge scan feedback.</strong> A no-match scan plays the denied tone + a \"Badge not found\" toast; a<br />\n  multi-match scan plays the already tone + a \"Multiple matches — select one\" toast (single-match<br />\n  auto-action unchanged).</li>\n<li><strong>PWA won't reload mid-incident.</strong> <code>isAppBusy</code> now also blocks on an open<br />\n<code>.incident-modal-overlay</code> so a pending \"Card charged — NOT recorded\" dialog can't be dismissed<br />\n  by an idle/update reload.</li>\n<li><strong>Toast timer</strong> cancels a prior dismissal so a rapid second toast isn't clipped early.</li>\n<li><strong>Service worker no longer evicts the companion PWA's cache.</strong> The activate-cleanup is<br />\n  scoped to FOH's own <code>eea-foh-</code> cache prefix — <code>caches.keys()</code> is per-origin, so the prior<br />\n  blanket deletion was wiping the attendee-facing companion app's <code>eea-ec-*</code> offline caches on<br />\n  every FOH update (both apps share the subsite origin).</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>Device User-Agent is sanitized at enroll; the <code>tendered</code> arg on apply-payment and the incident<br />\n  args are declared in the REST schema (incident <code>kind</code> validated at the schema layer); the<br />\n  Enroll Links admin page routes its action off the query string only (matches the other admin<br />\n  pages).</li>\n</ul>\n<h2>[0.18.1] — 2026-06-22</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Check payments at the desk.</strong> FOH now activates Event Espresso's built-in Check payment method in<br />\n  the admin scope (non-disruptively — it adds admin scope without removing any existing public-cart<br />\n  scope), so a clerk can take a check tender and the payment carries a real, classifiable PMD_ID. The<br />\n<code>check</code> descriptor + the client check-number prompt were already wired; this makes Check available.</li>\n</ul>\n<h3>Security</h3>\n<ul>\n<li><strong>Server-side event-scope enforcement</strong> on every transaction/registration-bound endpoint<br />\n  (PaymentController: paymentInfo, applyPayment, completeTransaction, settle, payCredit, emailReceipt;<br />\n  ReturnController: reverse-sale, exchange, returnable-items). A station clerk can now only act on a<br />\n  transaction/registration whose event is within their profile scope — closes an IDOR where a<br />\n  sequential id from another event drove a money/inventory/PII action. Fail-closed; Mode A admin<br />\n  unscoped.</li>\n<li><strong>Clerk/manager code hardening.</strong> Codes widened from 6-digit (10^6) to 10-digit numeric (10^10) and<br />\n  a per-device brute-force throttle (escalating lockout, loud audit) now guards clerk login, assist<br />\n  login, and the force-checkin override. A remote \"Clear lockout\" action on the Devices admin page<br />\n  lets a manager unstick a locked tablet. The attempted override code is no longer written to the<br />\n  audit log in plaintext.</li>\n</ul>\n<h2>[0.18.0] — 2026-06-22</h2>\n<h3>Security</h3>\n<ul>\n<li><strong>Card-present payments are now verified against the gateway before approval.</strong> A <code>card</code> payment<br />\n  previously recorded as PAID from a forgeable redirect-return URL with no gateway check. <code>applyPayment</code><br />\n  now fails closed: it requires a verifier (the eea-foh-collect companion) to confirm the charge<br />\n  succeeded at Stripe and reports the gateway's true captured amount — which is recorded in place of the<br />\n  client-supplied figure. A transient gateway-unreachable result is distinguished from a real decline so<br />\n  the clerk reconciles rather than re-charging.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li><strong>Idempotency on every first-touch money write.</strong> create-sale, exchange, cash apply-payment,<br />\n  pay-with-credit, and both settle paths now thread a stable idempotency key so a lost-response retry on<br />\n  flaky Wi-Fi can no longer double-apply (double sale/charge/credit-debit). create-sale anchors on a txn<br />\n  extra-meta key; exchange threads it through the replacement sale.</li>\n<li><strong>Audit failures are loud.</strong> <code>AuditRepo::log()</code> now returns a status and <code>error_log</code>s the action + DB<br />\n  error + row on a failed insert, so a lost audit row in the loud-failure channel can never vanish.</li>\n</ul>\n<h2>[0.17.2] — 2026-06-21</h2>\n<h3>Fixed</h3>\n<ul>\n<li><strong>Return / Settlement payment methods now reactivate themselves.</strong> Event Espresso auto-deactivates<br />\n  a payment method on any request where its add-on isn't loaded — which includes the brief<br />\n  deactivate→reactivate swap of a plugin update (and multisite/network contexts where FOH isn't<br />\n  active). Previously the rows stayed off until someone re-activated them by hand, breaking returns<br />\n  and settlements silently. FOH now detects the orphaned-inactive row on the next admin/cron load and<br />\n  at money-path use-time, reactivates it (admin-scope only), and clears EE's stale \"automatically<br />\n  deactivated\" notice. No manual step after an update, ever.</li>\n</ul>\n<h2>[0.17.1] — 2026-06-21</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Walk-up Return.</strong> A card-less entry to the Return / Exchange screen (a \"↩ Return\" button on the<br />\n  check-in screen) for a buyer who purchased earlier and came back with no registration to look up.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li><strong>The sales process now verifies the transaction's TRUE status before completing.</strong> Exiting the<br />\n  payment screen no longer falsely shows \"Sale Complete\" or auto-checks-in an unpaid sale — checkout<br />\n  re-queries Event Espresso for the real paid/balance state and shows an honest \"Payment Not<br />\n  Completed\" result when nothing was collected. Returns/exchanges apply the same check and flag an<br />\n  unresolved refund or balance rather than passing silently. Fail-safe: an unverifiable status is<br />\n  treated as unpaid, never as done.</li>\n</ul>\n<h2>[0.17.0] — 2026-06-21</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Admin-configurable branding.</strong> Four operator-set images on the Front of House Settings<br />\n  page (WP media picker): receipt logo, app icon, splash, and station background. The app icon<br />\n  overrides the PWA icon/manifest; the receipt logo is rasterized onto thermal receipts<br />\n  (resilient — a missing/failed logo never blocks the money path).</li>\n<li><strong>Bluetooth badge printing in wp-admin.</strong> A \"Print badges over Bluetooth\" page on the Clerks<br />\n  screen prints each active clerk's badge (CODE128 + QR) over a thermal printer ONE at a time,<br />\n  with a Next button so the operator can tear between prints. Built as a self-contained admin<br />\n  bundle so the station bundle is unchanged.</li>\n</ul>\n<h2>[0.16.2] — 2026-06-20</h2>\n<h3>Fixed</h3>\n<ul>\n<li>Service worker REST namespace <code>eea-checkin/v1</code> → <code>eea-foh/v1</code> so the never-cache-API guard<br />\n  matches the live namespace (the old pattern was a dead branch). No behavior change on prod.</li>\n</ul>\n<h2>[0.16.1] — 2026-06-20</h2>\n<h3>Changed</h3>\n<ul>\n<li>Self-hosted update channel + repository URLs moved to the <code>ee-extensions</code> org.<br />\n  The in-plugin updater now reads the org-owned public manifest; no change on the<br />\n  running site beyond the source of updates.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li>Removed a hard-coded external domain from the receipt printer's barcode/QR test<br />\n  page; it now prints a neutral placeholder URL.</li>\n</ul>\n<h2>[0.16.0] — 2026-06-19</h2>\n<h3>Changed</h3>\n<ul>\n<li><strong>Taking payment is now a lookup filter, not a separate mode.</strong> \"Take Payment\" was<br />\n  never its own surface — it was the registration search rendered as payment cards. It's<br />\n  now a segmented filter on the lookup screen: <strong>All · Needs check-in · Needs payment</strong><br />\n  (shown when the profile enables payment and the clerk can take payment). The \"Needs<br />\n  payment\" lens narrows to registrations with an outstanding transaction and renders<br />\n  payment cards (+ POS scan-to-pay); \"All\" is the prior check-in behavior; \"Needs<br />\n  check-in\" is a new lens. Removes the empty-page confusion of the old mode. Sell remains<br />\n  its own mode. No schema or server change.</li>\n</ul>\n<h2>[0.15.0] — 2026-06-19</h2>\n<p>Clerk badge printing + scan-to-login (camera or wedge). No schema change (v16).</p>\n<h3>Added</h3>\n<ul>\n<li><strong>Printable clerk badges.</strong> The Receipt Printer modal gains \"Print clerk badges\" —<br />\n  prints a badge per active clerk carrying their login code as both a CODE128 barcode<br />\n  (hardware wedge scanners) and a QR (camera). Backed by a manager-gated<br />\n<code>GET /station/clerk-badges</code>. (Clerk codes are attribution codes, not secrets — treat a<br />\n  printed badge as a physical login key.)</li>\n<li><strong>Camera scan-to-login.</strong> The clerk-login screen and the assist-login modal can scan a<br />\n  badge with the device camera (reusing the check-in scanner) — a decode fills the code<br />\n  and submits. Wedge-scanner login already worked; this adds the camera path for stations<br />\n  with no wedge scanner.</li>\n<li><strong>Per-device camera configuration.</strong> Device Settings → Cameras: detect cameras and pick<br />\n  which camera each scanner uses (login vs check-in may differ), plus an \"auto-start<br />\n  scanner on login\" toggle. Cameras are enumerated when the device is approved.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>The camera scanner is centrally torn down on every view transition and handed off<br />\n  between scanners (check-in ⇄ assist login) so only one holds the camera at a time;<br />\n  html5-qrcode stays lazy-loaded (no initial-bundle weight).</li>\n</ul>\n<h2>[0.14.2] — 2026-06-18</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Receipt Printer configuration modal.</strong> Device Settings → Receipt printer →<br />\n<strong>Configure ›</strong> opens a dedicated modal (driver selector, Bluetooth pair/connect +<br />\n  status, tear-feed) with on-device <strong>test buttons</strong> — \"Test receipt\" (a sample receipt<br />\n  through the real encoder) and \"Test barcode\" (CODE128 + QR) — so a clerk can prove the<br />\n  printer without ringing up a sale. Replaces the inline drawer controls; being a real<br />\n<code>.modal-overlay</code> it's also immune to the focus-reclaim issue by construction.</li>\n</ul>\n<h2>[0.14.1] — 2026-06-18</h2>\n<h3>Fixed</h3>\n<ul>\n<li><strong>Settings drawer form controls were unusable on touch devices.</strong> The station's<br />\n  focus-reclaim (which keeps the barcode-wedge scanner alive) only recognized<br />\n<code>.modal-overlay</code> as a blocking overlay, not the Settings drawer (<code>.drawer-backdrop</code>)<br />\n  or the payment-incident modal. Tapping the receipt-printer <code>&lt;select&gt;</code> (or the tear-feed<br />\n  input) got focus yanked back to the search box ~10ms later — the dropdown wouldn't<br />\n  open and the soft keyboard popped over the drawer. <code>isModalOpen()</code> now recognizes the<br />\n  drawer and the incident modal, so their controls work.</li>\n</ul>\n<h2>[0.14.0] — 2026-06-18</h2>\n<p>Bluetooth thermal receipt printing, templated header/footer, itemized receipts, and<br />\nloud failure handling for the card-present path. No schema change (v16).</p>\n<h3>Added</h3>\n<ul>\n<li><strong>Bluetooth thermal receipt printing.</strong> A Web Bluetooth (BLE GATT → ESC/POS) driver<br />\n  prints receipts directly from the station PWA to a 58mm thermal printer (Munbyn IMP001<br />\n  class) — pair once, reconnect-on-demand at print time, never a false success on a dead<br />\n  link. Select \"Bluetooth (thermal)\" in Device Settings → Connect. Requires HTTPS.</li>\n<li><strong>Templated receipt header/footer.</strong> Plain-text header/footer with <code>{token}</code><br />\n  substitution, authored globally in Check-In Settings with a per-access-profile override.<br />\n  The server ships the raw template + token values; the client substitutes in one pass.<br />\n  The transaction body (totals) is always generated, never templated.</li>\n<li><strong>Itemized receipts.</strong> Receipt body carries line items (tickets + taxes) with 32-col<br />\n  money alignment, derived from the EE line-item tree.</li>\n<li><strong>Configurable tear feed.</strong> Per-device trailing line-feed count for the manual tear.</li>\n<li><strong>Loud charged-but-unrecorded handling.</strong> When a Collect card charges but the record<br />\n  against the transaction fails, the station no longer swallows it: it retries, then<br />\n  escalates across every channel — structured log, persisted incident, a printed manager<br />\n  error slip (both our IDs and Stripe's chargeId/amount/status), a <code>POST /station/incident</code><br />\n  audit beacon, and a blocking manager modal (retry / reprint / acknowledge).</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>The ESC/POS layer (<code>escpos.ts</code>) is now generic primitives + a <code>composeDocument</code> frame;<br />\n  each print context (transaction receipt, error slip) composes its own body.</li>\n</ul>\n<h2>[0.13.0] — 2026-06-18</h2>\n<p>FOH returns, refunds &amp; customer credit — the v1.0.0-blocking foundation. Full design<br />\nin <code>docs/RETURNS-CREDIT-IMPLAN.md</code>.</p>\n<h3>Added</h3>\n<ul>\n<li><strong>Real transaction for returns &amp; exchanges.</strong> The return/exchange path now creates one<br />\n  real <code>EE_Transaction</code> (<code>POST /station/exchange</code>): replacement items are real ticket<br />\n  purchases (variation pricing + stock decrement, sold-out rolls the whole thing back),<br />\n  returned goods are recorded as a typed <strong>+Return payment</strong> (a first-class <code>EE_PMT_Return</code><br />\n  encoding <code>{ticket_id, option_id, qty}</code>), and the server computes the net. Restock fires on<br />\n  approval via the existing inventory hook. Replaces the old transaction-less store-credit<br />\n  IOU that returned no transaction id.</li>\n<li><strong>Settle credit owed (cash refund / forfeit).</strong> When a return/exchange overpays a<br />\n  transaction, the Transaction screen offers a settlement: <strong>Cash refund</strong> (money out of the<br />\n  drawer — gated on a new <code>can_cash_refund</code> role cap <strong>and</strong> an event-wide \"cash refunds<br />\n  enabled\" toggle) or <strong>Forfeit</strong> (the books-balancing \"keep it\"). Each records a typed<br />\n<strong>−payment</strong> clamped to what's owed, idempotency-keyed, stamped with the settle type +<br />\n  acting clerk.</li>\n<li><strong>Store credit + pay-with-credit</strong> (requires the new <strong>eea-customer-credit</strong> plugin).</li>\n<li><em>Store credit settle:</em> the \"Store credit\" button on credit-owed opens a dedicated<br />\n    customer lookup/create screen (email-keyed; echoes name + current balance), then parks<br />\n    the owed credit on the customer's account.</li>\n<li><em>Pay with store credit:</em> a \"Store credit\" payment-method button on a balance-due<br />\n    transaction looks up the customer, shows their available balance, and pays toward the<br />\n    balance — <strong>refused (never clamped)</strong> when the account can't cover it.</li>\n<li>Both go through the plugin's secure seam (the balance move is derived server-side from<br />\n    the real payment, one move per payment); checkin keeps a one-way dependency and hides<br />\n    the affordances entirely when the plugin is absent.</li>\n<li><strong>Suppress tax/fees on exchanges</strong> (per access profile, <strong>default on</strong>). A like-for-like<br />\n  exchange nets a return against the replacement, so EE re-charging full tax on the<br />\n  replacement double-taxes the swap. Exchanges now mark the replacement non-taxable (taxed on<br />\n  the net of $0); pure sales and pure returns are unaffected. Toggle on the profile to<br />\n  restore per-item tax.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li><strong>\"No route was found matching the URL\" on settling a return.</strong> The return path was<br />\n  transaction-less, so the client settled on an undefined transaction id and 404'd. Returns<br />\n  now create a real transaction with a real id.</li>\n<li><strong>Exchanges double-taxed a like-for-like swap</strong> (the patron was left owing the tax/fee on a<br />\n  net-zero exchange). See the exchange tax suppression above.</li>\n</ul>\n<h3>Notes</h3>\n<ul>\n<li>Schema v15 (Return payment method) → v16 (<code>can_cash_refund</code> cap + Settlement method).</li>\n<li>The FOH app stops calculating money client-side: \"owed\" and balances are read consistently<br />\n  from the server-reported remaining balance.</li>\n</ul>\n<h2>[0.12.3] — 2026-06-16</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Automatic PWA updates (safe for a live station).</strong> The app now polls for new<br />\n  service-worker versions (every 5 min + on returning to the foreground) and <strong>auto-applies</strong><br />\n  an update — but only when the station isn't busy (no open modal/transaction/checkout, no<br />\n  assist mode, no pending card redirect, empty search, empty cart), via foreground-return or<br />\n  ~60s-idle triggers, plus a tappable <strong>\"Update ready ↻\"</strong> pill for on-demand refresh. Reload-<br />\n  loop guarded. After this build is on a device, future deploys self-apply — no manual reopen.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li><strong>A–Z search bar no longer leaks into Sell mode.</strong> It's now part of the registration-search<br />\n  surface, so it only shows in Check-In / Take-Payment (where the search exists), not in the<br />\n  Sell/POS grid.</li>\n</ul>\n<h2>[0.12.2] — 2026-06-15</h2>\n<h3>Changed</h3>\n<ul>\n<li><strong>Card is strictly full-remaining.</strong> The card/redirect method ignores any edited partial<br />\n  amount and always charges the entire balance (so a card payment always settles the txn).<br />\n  Partial/split payments are taken cash/check-first (in-screen, leaving the balance open),<br />\n  then card clears the rest. True arbitrary splits across methods can come later.</li>\n</ul>\n<h2>[0.12.1] — 2026-06-15</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Cash tender + change.</strong> Taking a cash payment now prompts for the <strong>amount given</strong> with a<br />\n  live <strong>change-due</strong> readout and Square-style quick-tender buttons (Exact + common bills).<br />\n<code>PAY_amount</code> stays the applied charge; the <strong>tendered</strong> and <strong>change</strong> are recorded on the<br />\n<code>EE_Payment</code> (<code>PAY_extra_accntng</code> human-readable + <code>PAY_details</code> structured cents) and shown<br />\n  on the detail-modal payments list. The success screen calls out the change to hand back.</li>\n</ul>\n<h2>[0.12.0] — 2026-06-15</h2>\n<h3>Added — card-present payments (pluggable; Collect verified on-device)</h3>\n<ul>\n<li><strong>Card-present via a pluggable provider model.</strong> Core stays provider-agnostic: a<br />\n<code>redirect</code>-kind payment-method <strong>descriptor carries its own <code>launch</code> template + <code>return</code><br />\n  param-mapping + <code>record_method</code></strong>, so the PWA drives the deep-link launch and the<br />\n<code>/checkin/payment-result</code> return entirely from the descriptor — zero provider code in<br />\n  core/PWA. Cash/check remain the only core built-ins.</li>\n<li><strong><code>eea-checkin-collect</code> addon plugin</strong> (separate, scoped): registers the <code>card</code> method via<br />\n<code>eea_checkin_payment_methods</code> with the device-confirmed Collect-for-Stripe contract<br />\n  (<code>status</code>/<code>chargeId</code>/<code>finalAmount</code>, GET) and owns its own enable toggle via the new<br />\n<code>eea_checkin_settings_form_extra</code> / <code>eea_checkin_settings_saved</code> hooks. A future Square<br />\n  provider is an addon of the same shape — no core/PWA changes.</li>\n<li><strong>On-demand receipt</strong>: <code>POST /station/email-receipt</code> fires EE's own <code>EED_Messages::payment()</code><br />\n  (the same branded receipt EE's processor sends); the success screen offers an <strong>\"Email<br />\n  receipt\"</strong> action that captures an email on the spot when the walk-up didn't give one.</li>\n<li>Validated end-to-end on the real device: M2 reader, Collect's https callback contract, and<br />\n  the WebAPK in-scope return landing <strong>in the installed PWA</strong> (no <code>assetlinks.json</code> needed).</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>The <code>eea_checkin_payment_methods</code> hardener now preserves <code>record_method</code>/<code>launch</code>/<code>return</code><br />\n  for addon-provided descriptors and drops any malformed redirect descriptor.</li>\n</ul>\n<h2>[0.11.0] — 2026-06-15</h2>\n<h3>Added — Sell / POS mode (front-desk sales)</h3>\n<ul>\n<li><strong>Sell mode</strong> (third station mode; per-profile <code>modes</code> includes <code>sell</code> ∩ clerk<br />\n<code>can_take_payment</code>): a Square-style <strong>item grid</strong> (category tabs derived from ticket<br />\n  class — Admission / Meals / Apparel / …) + a <strong>persistent cart</strong> (quantities, running<br />\n  total) → <strong>native registrant-questions</strong> step → <strong><code>POST /station/create-sale</code></strong> →<br />\n  the shared <strong>Transaction screen</strong> (cash/check) → <strong>check-in</strong> of the new registrations →<br />\n<strong>Finish</strong>. Tablet-first, enterprise styling, all four themes.</li>\n<li><strong>Server</strong>: <code>SellService</code> + <code>SellController</code> with <code>GET /station/ticket-catalog</code>,<br />\n<code>GET /station/ticket-questions</code>, <code>POST /station/create-sale</code>. <code>create-sale</code> builds the<br />\n  transaction + line-item tree + per-item attendee/registration/answers through <strong>EE's own<br />\n  models</strong> (admin/service context — so selling after sale-end / sold-out is a non-issue),<br />\n  with <strong>automatic tax</strong>, <strong>RAP</strong> status, and <strong>full transactional rollback</strong> on any<br />\n  failure (no orphaned rows). Attendee fields mapped via EE's<br />\n<code>system_question_to_attendee_field_mapping()</code>. Sold-out / sale-ended tickets are shown<br />\n  but flagged (still sellable in admin context).</li>\n<li><strong>Native questions render</strong> with the new <strong><code>eea_checkin_registration_questions</code></strong> filter,<br />\n  so ticket-class question-hiding (<code>-cond</code>) applies in Sell exactly as in SPCO. Non-input<br />\n  EE pricing types (<code>monetary</code>/<code>pricing</code>) are excluded.</li>\n</ul>\n<h3>Changed — core is ticket-native; ticket classes moved to the companion</h3>\n<ul>\n<li>Core <code>eea-checkin</code> no longer knows about ticket <strong>classes</strong> (a concept added by the<br />\n  third-party <code>eea-ticket-classes</code> plugin). The profile \"Ticket Class Filter\" (PCRE) is<br />\n  replaced by an EE-native <strong>ticket multi-select</strong> (<code>PRO_scope.tickets</code>; none = all), and<br />\n  search/check-in/catalog scope by ticket IDs. Four hooks let the companion layer classes<br />\n  back on: <code>eea_checkin_scope_tickets</code>, <code>eea_checkin_ticket_catalog</code>,<br />\n<code>eea_checkin_profile_form_extra</code>, <code>eea_checkin_profile_saved</code>. <code>eea-ticket-classes</code> now<br />\n  owns the class-filter config (its own option), class-based scoping, and catalog<br />\n  categories — alongside the question-hiding it already did. No Round-Up specifics in core.</li>\n</ul>\n<h3>Note</h3>\n<ul>\n<li>Card-present (Collect) payment in Sell is intentionally <strong>deferred</strong> — it reuses the<br />\n  existing pluggable registry, and the card method stays disabled until the Collect device<br />\n  round-trip is confirmed. Cash/check work now.</li>\n</ul>\n<h2>[0.10.0] — 2026-06-15</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Assistive Login</strong> (schema v14): a role capability <strong><code>ROL_can_assist</code></strong> lets a permitted<br />\n  clerk <strong>temporarily log in <em>over</em> an active clerk</strong> on a device — a <em>stacked</em> session, not a<br />\n  replacement. The base clerk session is preserved untouched and resumes on exit (its idle<br />\n  timer revived). Endpoints <code>POST /station/assist-login</code> + <code>/station/assist-exit</code><br />\n  (<code>SES_kind</code>/<code>SES_parent_id</code>); assist-mode chrome = a contrasting viewport border, an<br />\n  \"Assisting as {name}\" indicator, and a bottom-left <strong>Exit Assist</strong> button; UI state is<br />\n  preserved across entry/exit. Gated on <code>can_assist</code> <strong>and</strong> the assisting clerk's station<br />\n  scope (audited). Plugin option <code>assist_invalidates_other_devices</code> (default off) ends the<br />\n  assisting clerk's other-device sessions on assist-login.</li>\n<li><strong>Per-device themes + manager Device Settings</strong>: four CSS-only themes via <code>data-theme</code><br />\n  (<strong>Corporate (System)</strong> — default, follows OS light/dark — plus Dark Pro, Light, System),<br />\n  persisted per-device, chosen from a <strong>manager-only Device Settings</strong> panel in the menu.</li>\n<li><strong>Q&amp;A + payments in the details modal</strong>: the role-gated detail now renders the registrant's<br />\n  questions &amp; answers (EE answers via the <code>eea_checkin_registration_answers</code> hook) and a<br />\n  transaction payments breakdown.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li><strong>Enterprise visual refinement</strong>: calmer, more spacious commercial look — glows replaced by<br />\n  crisp borders + subtle elevation, tabular-num money, tighter type/spacing scale, blurred<br />\n  modal backdrops, <code>:focus-visible</code> rings, full <code>prefers-reduced-motion</code> support.</li>\n<li><strong>A–Z search bar</strong>: letters-only (A–Z, no digits) for fast last-name lookup, ⌫ retained, and<br />\n  a bottom <strong>⌨</strong> key that drops into a <em>transient</em> keyboard (for email/address) which<br />\n  auto-reverts to the A–Z bar on input blur.</li>\n</ul>\n<h2>[0.9.0] — 2026-06-15</h2>\n<h3>Added — station modes, in-person payments, corrected check-in model (SPEC §16)</h3>\n<ul>\n<li><strong>Station modes</strong> (§16.5): the station is now modal — <strong>Check-In</strong> and <strong>Take Payment</strong> —<br />\n  with a top-bar mode switcher (per-mode accent so the active mode is unmistakable). Mode<br />\n  availability = a per-profile <strong><code>modes</code></strong> allow-list ∩ clerk capability (schema v12;<br />\n  Take-Payment requires <code>can_take_payment</code>).</li>\n<li><strong>Pluggable payment methods</strong> (§16.4): server registry exposed via the<br />\n<strong><code>eea_checkin_payment_methods</code></strong> filter producing hardened descriptors<br />\n<code>{slug,label,kind,available,ordering,capture?}</code>; the client dispatches by <code>kind</code><br />\n  (<code>instant</code> cash/check, <code>redirect</code> card). New method = new descriptor, no core change.</li>\n<li><strong>Shared Transaction screen</strong> + <strong><code>POST /station/apply-payment</code></strong> /<br />\n<code>GET …/payment-info</code>: take cash/check now; <strong>Collect card is scaffolded</strong> (descriptor +<br />\n<code>/checkin/payment-result</code> shell route) but <code>available:false</code> behind the<br />\n<code>eea_checkin_collect_enabled</code> option until the M2 device round-trip is confirmed.</li>\n<li><strong><code>POST /station/complete-transaction</code></strong>: finalizes an incomplete, zero-balance<br />\n  transaction via EE's own <code>update_status_based_on_total_paid()</code> +<br />\n<code>update_transaction_and_registrations_after_checkout_or_payment()</code> (guarded, idempotent).</li>\n<li><strong>Q&amp;A + payments in the details modal</strong> (§15.11): the role-gated detail endpoint now<br />\n  carries the registrant's questions &amp; answers (via <code>EE_Registration::answers()</code> →<br />\n<code>EE_Answer::pretty_value()</code>) behind the <strong><code>eea_checkin_registration_answers</code></strong> filter<br />\n  (so ticket-class question-hiding wires in at the enrichment layer, not core), plus a<br />\n  transaction <strong>payments</strong> breakdown and <code>balance</code>/<code>complete</code>.</li>\n</ul>\n<h3>Changed — the visibility ↔ action model (corrected; general EE, not Round-Up-specific)</h3>\n<ul>\n<li><strong>Visibility = registration status</strong>, configured per profile via <strong><code>PRO_checkin_statuses</code></strong><br />\n  (schema v13; default <strong><code>RAP</code></strong> = approved-only). Drives the search status-filter; the<br />\n  existing Force-Check-In covers any <em>visible</em> non-approved card. Approved-only visibility<br />\n  structurally hides abandoned/pending carts with zero event-specific code.</li>\n<li><strong>Action = the owning transaction's completeness, not its balance.</strong> Cards carry<br />\n<code>txn_status</code> + <code>txn_complete</code>; the check-in payment gate and the Take-Payment affordance<br />\n  fire on <code>txn_id &gt; 0 &amp;&amp; !txn_complete</code> (an incomplete transaction needs handling even at a<br />\n  $0 balance). The gate is role-governed client-side workflow (managers override; payment-<br />\n  capable clerks resolve inline; others get a manager-override prompt).</li>\n</ul>\n<h3>Polished</h3>\n<ul>\n<li>Full visual pass to a refined POS look: pill mode switcher with per-mode glow, richer<br />\n  result cards + chips, the Transaction screen centerpiece (tabular-nums balance, method-<br />\n  button states, a rewarding \"Paid in full ✓\" success), blurred modal backdrops,<br />\n<code>:focus-visible</code> rings, and comprehensive <code>prefers-reduced-motion</code> support.</li>\n<li><strong>A–Z search bar refined</strong>: letters-only (A–Z, no digits) for fast last-name lookup,<br />\n  ⌫ retained, and a bottom <strong>⌨</strong> key that drops into a <em>transient</em> keyboard mode (for<br />\n  email/address) which auto-reverts to the A–Z bar on input blur.</li>\n</ul>\n<h2>[0.8.0] — 2026-06-15</h2>\n<h3>Added — in-person payment foundation (SPEC §16.1; POS epic begins)</h3>\n<ul>\n<li><strong>Record-payment service</strong> (<code>PaymentsService::recordPayment</code>): records an <code>EE_Payment</code><br />\n  and finalizes via EE's own <code>EE_Payment_Processor::update_txn_based_on_payment</code> — applies<br />\n  to registrations, sets paid, recomputes transaction status, toggles RPP→RAP, fires the<br />\n  standard hooks/emails. Idempotent on the Stripe charge id / check number. The same path<br />\n  EE's admin \"Apply Payment\" uses; the landing pad for cash/check <strong>and</strong> Collect card.</li>\n<li><strong><code>POST /station/apply-payment</code></strong> + <code>GET /station/transaction/{id}/payment-info</code><br />\n  (balance + which methods resolve to an active EE payment method). Gated by a new role<br />\n  capability <strong><code>can_take_payment</code></strong> (schema v11; manager seeded on, clerk off).</li>\n<li>Verified on the dev EE install: an unpaid transaction → check payment → <code>TCM</code>/paid,<br />\n  idempotent re-run no-ops. <code>cash</code>/<code>check</code> resolve to EE's offline methods; <code>card</code>→<br />\n<code>Stripe_Onsite</code> (live only).</li>\n<li><em>Not yet wired:</em> the PWA take-payment UI and the Collect deep-link/return — next.</li>\n</ul>\n<h2>[0.7.2] — 2026-06-14</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Role-gated registration details modal</strong> (new role flag <code>ROL_can_view_details</code>,<br />\n  schema v10): a clerk whose role permits it can tap a result row to open a modal with<br />\n  the fuller record (contact, ticket, status, group/transaction, check-in history, linked<br />\n  context). Server-enforced on the detail endpoint (a real PII gate, <code>403</code> otherwise),<br />\n  not just hidden UI. New-install <code>manager</code> gets it; <code>clerk</code> does not.</li>\n<li><strong>A–Z search bar</strong>: an opt-in toggle (small/portrait screens) swaps the soft keyboard<br />\n  for a vertical right-edge A–Z scrubber (tap to append, one ⌫ to delete); choice is<br />\n  remembered. Wedge/camera scan unaffected.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li><strong>PIN pad no longer raises the Android soft keyboard</strong> (<code>inputmode=\"none\"</code>) — the<br />\n  on-screen keypad, wedge scanner, and paste still work.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li>Manager action-bypass (v0.7.1) and the details flag now take effect on the <em>first</em><br />\n  clerk login, not only after a reload (<code>handleClerkLoggedIn</code> wasn't carrying the role<br />\n  capability flags into the station view).</li>\n</ul>\n<h2>[0.7.1] — 2026-06-14</h2>\n<h3>Changed</h3>\n<ul>\n<li><strong>Managers override the per-station action gate.</strong> A clerk whose role has<br />\n<code>can_override</code> may lookup / check-in / check-out / undo on <em>any</em> station, regardless<br />\n  of the profile's allowed actions (<code>Actor::allows()</code> bypass). The clerk-login payload<br />\n  now carries <code>can_override</code>, and the station shows the full action set (incl. Check Out /<br />\n  Undo) when a manager is signed in. The existing force-checkin override is unchanged.</li>\n</ul>\n<h2>[0.7.0] — 2026-06-14</h2>\n<h3>Added — linked registrations (SPEC §15.10)</h3>\n<ul>\n<li><strong>Reverse-lookup of related registrations</strong> (schema v9, <code>eea_checkin_reg_links</code>):<br />\n  finding one person can surface their related regs as extra, independently-checkable<br />\n  rows — so a meals clerk searching the eater's name finds the meal that's stamped with<br />\n  the <em>buyer's</em> name, and a group purchase surfaces its transaction-mates.</li>\n<li><strong>Deterministic where it can be, imported where it can't:</strong> transaction siblings are<br />\n  live (<code>WHERE TXN_ID = ?</code>, per-profile \"Surface transaction siblings\" toggle); the<br />\n  subtle cross-name/cross-order meal→eater resolution is <strong>imported</strong> from the offline<br />\n  reconciliation resolver (no PHP re-derivation, no divergence) via<br />\n<code>wp eea-checkin import-reg-links &lt;csv&gt; [--relation] [--replace]</code> (refs accept REG_ID or<br />\n  REG_code).</li>\n<li><code>eea_checkin_search_results</code> filter (the \"results mutator\") + <code>ResultCard.linked</code><br />\n  ({via_reg_id, relation, flag?, note?}); the station renders linked rows subordinate,<br />\n  with a caution treatment for <code>flag:'caution'</code> (e.g. a meal with no admission).</li>\n</ul>\n<h2>[0.6.3] — 2026-06-14</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Pluggable row enrichment:</strong> an <code>eea_checkin_search_row</code> filter<br />\n  (<code>$card, EE_Registration $reg, ['dtt_id'=&gt;int]</code>) lets a site/add-on push<br />\n  display-ready items onto <code>$card['extra']</code> (<code>[{label, value, tone?}]</code>, hardened<br />\n  by <code>normalizeExtra()</code>); the station renders them as compact chips under each<br />\n  result. Core stays event-agnostic.</li>\n<li><strong>Example enricher</strong> (<code>examples/roundup-2026-enrichment.php</code>, a standalone<br />\n  mu-plugin — NOT part of core): surfaces this event's merch sizes (QST 22-25) and<br />\n  meal plan (QST 12, <code>d:N</code> decode) on the row.</li>\n</ul>\n<h2>[0.6.2] — 2026-06-14</h2>\n<h3>Changed</h3>\n<ul>\n<li><strong>Clerk timeout combine rule (SPEC §15.3):</strong> the effective timeout is now the<br />\n<strong>lowest-absolute</strong> magnitude across role / station / per-clerk, and <strong>zero-tolerance<br />\n  if any contributor is negative</strong>. <code>0</code>/blank = never (a no-op, excluded). A negative's<br />\n  magnitude is an idle cap layered on zero-tolerance: <code>-30</code> = logout on focus-loss AND a<br />\n  30-min idle cap; <code>-0</code> = focus-loss logout only. Resolved shape is <code>{ztol, minutes}</code>, so<br />\n  a station can run BOTH the idle countdown and instant focus-loss logout.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li><strong>Profile edit corrupted the validity window</strong> → device lockout. Saving a profile with<br />\n  no start/expiry wrote <code>0000-00-00 00:00:00</code> (the edit path coerced null through a <code>%s</code><br />\n  placeholder), which read back as \"expired in year 0\" → <code>ec_profile_expired</code> locked the<br />\n  bound device. <code>update()</code> now writes real <code>NULL</code>; reads normalize any zero-date to null<br />\n  (so an already-corrupted profile un-expires itself on read — re-save to clean the row).</li>\n<li><strong>\"Copy\" on enrollment-link launch URLs</strong> failed on plain HTTP (the Clipboard API is<br />\n  undefined outside secure contexts) — now uses <code>execCommand('copy')</code> with a Clipboard-API<br />\n  fallback and a Ctrl+C prompt.</li>\n</ul>\n<h2>[0.6.1] — 2026-06-14</h2>\n<h3>Added — clerk → station scoping (SPEC §15.9)</h3>\n<ul>\n<li><strong>Clerk → access-profile scoping (schema v8):</strong> a role carries an allowed-stations set<br />\n  (none = all); a clerk may narrow it (intersection). A clerk can't sign into — or keep<br />\n  operating — a station they're not cleared for (<code>ec_clerk_not_authorized</code>, audited<br />\n<code>clerk_denied</code>); enforced at clerk-login and re-checked per request. Role + clerk<br />\n  multiselects in admin; opt-in (ships unrestricted).</li>\n</ul>\n<h3>Added — custom roles &amp; stateful clerk sessions (SPEC §15)</h3>\n<ul>\n<li><strong>Configurable roles</strong> (<code>eea_checkin_roles</code>, schema v7): per-role timeout, multi-login<br />\n  policy, and \"can authorize a forced check-in\" capability. New <em>Clerk Roles</em> admin page;<br />\n  seeds <code>clerk</code> (60 min) and <code>manager</code> (2 min, can-override). Clerks remain custom<br />\n  PIN/badge identities — deliberately NOT WP users (keeps volunteers off the MU user<br />\n  table and out of wp-admin).</li>\n<li><strong>Stateful clerk sessions</strong> (<code>eea_checkin_clerk_sessions</code>): clerk tokens are now v2,<br />\n  session-bound; every clerk request validates a live session row (one indexed read).<br />\n  Enables force-logout.</li>\n<li><strong>Bump / force-logout</strong>: log a clerk out of one device, or everywhere; a live<br />\n  \"Logged-in clerks\" roster on the Devices page; revoking a clerk ends all their sessions.<br />\n  A new login on a shared tablet ends the previous operator's session there.</li>\n<li><strong>Effective timeout = strictest wins</strong> across role, station, and optional per-clerk<br />\n  override. Sentinel encoding: <code>N</code> minutes, <code>0</code> = never, negative (incl. <code>-0</code>) =<br />\n  zero-tolerance (logout on any focus loss). 12-hour hard cap removed.</li>\n<li><strong>Station idle/focus lifecycle</strong>: a confirmation modal (clerk nickname + live countdown,<br />\n  Continue / Log out) on idle-past-¼-timeout, blur, or refocus; <code>never</code> mode skips it;<br />\n  zero-tolerance logs out instantly on blur/sleep/refocus. <code>clerk-heartbeat</code> endpoint<br />\n  slides the session; tokens refresh on heartbeat and check-in.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li><strong>A clerk login is now always required</strong> to operate a station (search + check-in). The<br />\n  per-profile \"Clerk Required\" toggle is removed; <code>PRO_clerk_timeout</code> is relabeled<br />\n  \"Clerk timeout (station cap)\" and feeds the effective-timeout calculation.</li>\n<li>Manager-override / badge \"MANAGER\" tag is driven by the role's can-override capability<br />\n  instead of a hardcoded <code>manager</code> role.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li>New error states <code>ec_clerk_bumped</code> (session force-ended) and <code>ec_clerk_expired</code> (idle<br />\n  timeout) drop the station to clerk-login with distinct copy.</li>\n</ul>\n<h2>[0.5.1] — 2026-06-14</h2>\n<h3>Security</h3>\n<ul>\n<li><strong>Closes a bootstrap privilege-escalation hole.</strong> Through v0.4 the profile token<br />\n  was shared (one per profile), posted as a QR, and doubled as the operating<br />\n  credential; combined with on-screen (public) device UUIDs and a device-secret that<br />\n  auto-issued to whoever polled <code>/session</code> first, a leaked low-value token + a glimpsed<br />\n  UUID could claim a higher-value bound device's secret during the pre-secret window.<br />\n  v0.5 removes the coupling at the root (see below). Verified end-to-end on the dev<br />\n  stack: a foreign enroll token + a victim UUID with no/wrong nonce now gets<br />\n<code>ec_bad_register_nonce</code> and no secret.</li>\n<li><strong>Secret is now the sole operating credential.</strong> Neither a profile token nor an<br />\n  enroll token can drive a station request. Operating endpoints require a valid<br />\n<code>X-EEA-Checkin-Secret</code>; an enroll token can no longer even <em>read</em> a live station's<br />\n  config once a key has been claimed (<code>ec_secret_required</code>).</li>\n<li>Removed the <code>setSecretHash()</code> repo method — resetting a key now goes through<br />\n<code>requireReenroll()</code>, which clears the nonce and returns the device to Pending so a<br />\n  key can never be silently re-auto-issued into a reopened window.</li>\n</ul>\n<h3>Added</h3>\n<ul>\n<li><strong>First-class enrollment links (Schema v6).</strong> A new \"Enrollment Links\" admin page<br />\n  manages enrollment credentials decoupled from profiles: label, optional suggested<br />\n  profile (pre-fills the approval binding), optional expiry, revoke/delete, and a<br />\n  re-displayable QR (<code>/checkin/#e=&lt;token&gt;</code>). Deleting a link never breaks already-<br />\n  approved devices — they operate by their secret.</li>\n<li><strong>Nonce-sealed secret claim.</strong> <code>register-device</code> returns a one-time <code>register_nonce</code><br />\n  only on first registration (a repeat register for a known UUID is a touch — no new<br />\n  nonce, the anti-hijack property). The device-secret is then issued only to the holder<br />\n  of that nonce, atomically (<code>UPDATE … WHERE DEV_secret_hash IS NULL</code>), so a racing<br />\n  second caller is shut out.</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>Profiles page drops every launch-link affordance (the profile token is now dormant);<br />\n  there is nothing to copy, show, or regenerate there.</li>\n<li>\"Reset device key\" → \"Reset &amp; require re-enrollment\": clears the secret <em>and</em> nonce,<br />\n  returns the device to Pending, preserves the binding.</li>\n<li>Station PWA boots from <code>#e=</code> enrollment links, captures the nonce and secret, and<br />\n  authenticates secret-only thereafter; new screens for <code>ec_bad_enroll</code>,<br />\n  re-enroll-needed, <code>ec_secret_required</code>, unbound-device, and the dead <code>#t=</code> link.</li>\n<li>Device approval is now a modal that <strong>requires a nickname and a station/location</strong><br />\n  before approving — no more approve-then-it-does-nothing unbound devices.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li>Station no longer shows \"Offline — waiting for connection\" for server-side search<br />\n  responses (<code>ec_validation</code> query-too-short, <code>ec_out_of_scope</code>, <code>ec_not_found</code>). The<br />\n  offline banner is now reserved for genuine network failures; HTTP error responses<br />\n  render inline (empty results / a toast). Pressing Enter also respects the profile's<br />\n  minimum search length instead of firing a too-short query.</li>\n</ul>\n<h2>[0.4.0] — 2026-06-11</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Approve-to-anywhere (bootstrap-only)</strong>: approving a device bound to any profile<br />\n  brings it up as that station on its next poll — the binding is authoritative during<br />\n  the enrollment window (no secret issued yet) and after an admin key reset. Once a<br />\n  device holds its secret, token-only requests can no longer inherit the binding<br />\n  (UUIDs are visible on-screen; the secret is the device credential).</li>\n<li><strong>Persistent launch links</strong>: profile tokens stored encrypted at rest<br />\n  (libsodium, key derived from wp-config salts) — \"Show Launch Link\" re-displays<br />\n  the URL + QR anytime; each view audited. Pre-existing profiles offer<br />\n  regenerate-to-view. Schema v5.</li>\n<li>Approval dropdown warns when binding a device to a different profile than it<br />\n  enrolled under; Devices list gains Last Clerk column and Last Active rename.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li>Waiting-room poll no longer swallows auth errors (stuck \"Pending Approval\").</li>\n<li>Service worker cache is version-stamped at serve time — plugin updates now<br />\n  actually reach installed devices (<code>ignoreSearch</code> removed, <code>no-cache</code> on sw.js).</li>\n<li>Token rotation confirmation states exactly which devices are and aren't affected.</li>\n</ul>\n<h2>[0.3.0] — 2026-06-11</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Device-secret auth</strong>: the launch-URL token is now an enrollment ticket. On first<br />\n  approved session each device receives a one-time-delivered secret and authenticates<br />\n  with it thereafter; profile comes from the device's server-side binding. Installed<br />\n  homescreen PWAs survive token rotation; reassigning a bound device is zero-touch.<br />\n  \"Reset device key\" admin action; <code>navigator.storage.persist()</code> at boot.</li>\n<li><strong>Distinct failure states</strong>: <code>ec_token_rotated</code> (detected via previous-hash<br />\n  tracking), <code>ec_profile_revoked</code>, <code>ec_profile_expired</code>, <code>ec_profile_not_started</code> —<br />\n  each with its own station screen saying what to do, replacing flattened<br />\n<code>ec_bad_token</code>.</li>\n<li>Schema v4 (<code>DEV_secret_hash</code>, <code>PRO_token_hash_prev</code>), reactivation-free.</li>\n</ul>\n<h2>[0.2.0] — 2026-06-11</h2>\n<h3>Added</h3>\n<ul>\n<li><strong>Ticket-class scoping</strong>: profiles limit stations to tickets whose <code>TKT_class</code><br />\n  tokens match PCRE patterns (gate=<code>attendee</code>, merch=<code>apparel-</code>, meals=<code>meal-</code>);<br />\n  enforced in both search and check-in; save-time regex validation.</li>\n<li><strong>Datetime pinning</strong>: <code>current</code> mode resolves the active datetime by clock —<br />\n  stations show no picker.</li>\n<li><strong>Cascade check-in</strong>: optional per-profile; checking in consumes all datetimes<br />\n  the ticket grants (full-event regs check in once). Checkout never cascades.</li>\n<li><strong>Device→profile binding</strong>: devices may be pinned to one profile at approval or<br />\n  via Devices→Edit; mismatched tokens are rejected and the station explains itself.</li>\n<li><strong>Clerk roles + manager override</strong>: force check-in of non-approved registrations<br />\n  requires a manager — directly, or via a manager-badge override scan recorded in<br />\n  the audit row alongside the acting clerk. MANAGER tag on badges.</li>\n<li><strong>Bulk clerk creation</strong> (all-or-nothing batches, <code>Name, CODE, manager</code> lines) and<br />\n<strong>bulk badge printing</strong> (card grid with cut lines).</li>\n</ul>\n<h3>Changed</h3>\n<ul>\n<li>Admin mutations moved to <code>load-{page}</code> hooks (proper redirect-after-POST).</li>\n<li>Clerk sign-in: visible text input with paste + wedge-scan + keypad.</li>\n<li>Schema v3 (<code>DEV_profile</code>, <code>CLK_role</code>) via reactivation-free migrations.</li>\n</ul>\n<h3>Removed</h3>\n<ul>\n<li>Station checked-in counter (and its per-poll SQL count).</li>\n</ul>\n<h2>[0.1.0] — 2026-06-11</h2>\n<h3>Added</h3>\n<ul>\n<li>Design spec (docs/SPEC.md): data model, REST API, auth flows, station PWA, admin UI.</li>\n<li>Foundation: profiles/devices/clerks/audit tables, opaque-token auth, device<br />\n  approval handshake, HMAC clerk sessions.</li>\n<li>REST layer (<code>eea-checkin/v1</code>), ranked 5-field search, explicit-direction check-in<br />\n  over EE models, append-only audit log.</li>\n<li>Station PWA (fullscreen manifest, service worker, audio cues, camera scanning),<br />\n  wp-admin management pages, Mode A drop-in admin station.</li>\n<li>Docker dev stack with EE core + seeder.</li>\n</ul>"
+  }
 }
diff --git a/eea-foh/eea-foh-0.22.0.zip b/eea-foh/eea-foh-0.22.1.zip
similarity index 90%
rename from eea-foh/eea-foh-0.22.0.zip
rename to eea-foh/eea-foh-0.22.1.zip
index 97d85da3db672392dd72a9b6878eefd0b9d319f6..2f3ad7e56db213aef8386fe8ffce4c56a5253d96 100644
GIT binary patch
delta 31006
zcmV(!K;^&E@EgtX8w^lO0|W{H00000s+5roA0c4UI%-f$0|W{H000O8s+8AUXa(L>
z4pIOB5YPYs6aWdA@6!ev0$|dSXj}!hX4933k;xu^KKVnECQlEZevux0kv{ztfBBg`
zxcDSZ&WozZyCSKZyX2~B?z*JEX`A)+jr?zsbT@fhERtnjmsdsCC#!N*RApTp@vnQo
zD~r2iQS^CPb$iLOS>#nR&)c>vx+IrBbn~`c^<`5}lDSW9lH~Ow>GSJun!IX~t93oc
z6L^zLk0gD=!B^G#x~!+sN)8@c$?;;rb(}O+)28!A{$;Nw<s2VgtuL#xyOE!5;Pq;e
z_XWRJ7gch3&tF^Hhr6bIkA0YKZ`8A5UU4&%O92{xvP<&JdL>^w!~^4D1y80=|B(Fn
z_y1;C!_)1L?C-zh>^j-Js<_VkVcIYK4D^ZCH)wx9`R4Vva(+qG$S7@cxvm$Lj8OL7
zCrQ%W)k#-WSLsb-Gt;+6*_-uh)wKQ0#+$BgR+((WvbmMV9^>_-th+w1`!dG~ji<@;
zUPc6er7Uza<do|q(*crq=g+g`rpOnVTT{ww^>vc>94NbLZc_bpmxZl&vXVjX%3dih
z`<ef0&$rV*c1@ineOq43@+L{A`%xD?&MM7?d~OTbxtGIewj|jaBZY3=UgdL{?_*t4
zRdu!#U2<FI!<jznk~-&rMkaE&H&Yq%n?R?3)qPSf3R&J<Xx5&R(~@`Ed%YK2eNy5o
z$@+0RbJ-{CTf44hto{A2><gQ@OcGO)eM_3F?NxzV?rzHYjU7y<x3X{Zd%3y&x~*q2
z-kYNDt70j0lIh;#f74~r-!zM)#f5J0?K+j~_+B>R65sA{FdV8`xAP(y;lJnkS}s6;
zb0s6{jhL_HD$616<?Fs#=3KF?eo=6CAkIA*S$-~rHg@Q9xt4!i7ND4TQBKn`d=c$4
z#<`LYV2``_&OCYe&U{mTup9GsbFQ`niS2;xQnW>Pxvc)93zF&Pi)C5c!uajBX?oqA
ziBr-7ySiLgeTnV#ODIRab$}zGR=tRS4_!hbhvAJop{lWR$Fi4o6}gbR%noxMwhrVX
z7fN1{F@?;E7OZn~(OojqWlti~7-Pn#zdJqu=S~Emd>JHrGruX8`Qf46jBJAAuVn_S
zw$WwCEZQQTf;_Oqcm;@FH*7X<<%g=t7q~93>w(mG3u-)y1&d&~k|%qJhxhn@RMR;{
z+n$kVZ{$AIppxrSwoLdgsPcYQB)HAZ5=Z{0HONhvd|!N!Eg2Ql>#2-x`{`F-_j*je
zaeAt|86CJ1`;yy!RaSC1xy+`VzrRmbMVoS;B2u92!WH+e88$`;S0re;S`C9<=JWU1
zrmLpKw}tA5FDLnRUdjo{3X8gbXmhelGB*8MiJhvNW;IPlr+HhIMJvM!JCf590<L5^
za}imPNSklrUw5*@*9j&s49#{36A8OB9e*OD;p$X!Yv=be6scEu)c(E@db((3arOTG
zM7Xqk5|g`;KVlWKV%csz`bNIiI{C?nN`Qx)#O~GO$;y<IImRd!vxusH<hxb==Tb-w
z8&<Y*wDPxgUdgC3AtAa^X5V?qk33(D#+jU}^2er@H*a#;{hAz)%ngS}>J$DT9A3UH
zgS9%XZkQGhR<={fP3bU9b5)7-lc^O|SKP@$iz&B^H*@#ifOQO{@K-1W!<(>Gp|Nc0
z;-2CL2O-kNl!7D~2|LJtD|vfyZ(O91<5wOnM<RpC{)}~MXD{E%M&hD$vSav&5OY;U
z_eh?XG4=FtTfzHtN~=5kZ`U`g4#ylQ)#*|uP(@eNH(AAs?DTkQ6ouUw2-1mawQjFT
ztEyd|o(g3`IkD&FO;r_?usCTM7@TQ3ot_nKhnd&?F}TbtJ}t6;21jsl;mgvWMYZUP
zd>Lp0gx>KY)%VWVXMsVJ%lqBHY4OnRm1;l|SLFv^d*JlRvh316m!)uDg0Nh*#ckQF
zAy@lix$2?Zif){p7Q+H`l81+#C|=Mtj)fIH8!muQb1e4`9+rEq@9yu*z%J&U{Wny$
z<!;uCRM?#SPcqtn)CkB8uFC7=>;~HIr(+Rara{Phy5z@y`+p^8Hrh*j1Lvo2t!3I1
z@WpV?bD7AZ?Bt@{r&WGg;I;})i!5I7%F4ZPp(Mw$zYnfm3RUK!1Qx;^>-F-IirR?(
zHu;B9#f|{+i@cSaAp6Z{<ToR9Au`^ho2C{O1`M$RZ51Yev5T&$pvQ7f6aCoFQu{i_
zo#!iI1BHGsd?c~8h@PlFOu5x3^4;hmC=ki{>G6x?ssID6h0NvDRg2PlEVfWlVRMt?
zVeb~n_M&h-a-67Z`NDtdE}tulz-L4_tmOj}s&IY&A-|NnCD(J~%TS;pvQ>*~2ZDeO
zn!hh<WypPhBR4Z?%T5G{m_21bfu^w%y{Qj8lWN(jpWwczCL%m=!CS;D+ZHeyy3IqV
za_}qDPEYhEgI~ZDfM$=od<lAcJS;s^w$~Lc6$4|?_z7muozRo~E-E2+jb|lvv24~g
zFDtLJJs$+ru&vygQTF2bs|%Qf$yW&skglCyr{A}K#nlg@;|PH+S541rQ>$2L?}h#-
zRQ=wE5!14sSL+VE?=qJinbS`FbI~?aIpGDAe>o}n^-|bNp+^BK<IC~H^^69J*d&GZ
zqJ+E|WjMu)@V5)$I$UKoKEleQx5&K3ybv}j-%dmTR@kyDnB;z-va`bK*9)j|IR&=7
zRr8*I3ZckacZ^*ldD#<O7bt8?D7bR|m+P|XWj9Qsz~rG}GsqV+sErKtpi)woa{jC+
z@(VeRz`QSvS}%-IWV<$Pa4LY^;);~!GvG#L!>pQ?bk_}EF~M?C)VMl}Y?@@cCC275
zo;}$`r<Vr?q3)cn5PBg^W|b<Sq<NrmT>=Gvc2h4(HxaSyp7M1ZEY?WEyHJilOZ7~o
zq$p0OZ{E6oJC(CISGEN!LROW=6A)1`J$MY>Xj(`@WkGhW69SjdmR)ddfHBHnA%3dT
zE~_ylTdLdny7_mI&k!cqxS4Q9@}9@aQ{$^l{Z=&!J;DiX6S*)8TqJyB0tO=MA0$nG
zr_x>-tQ=zpg1A}>uL(zmaqr~ibXi`v)Ddxk7HtC^n+oCS>G6e3_TtUSx2G?UFT}ce
z^ZfNI9O;u^{`i-Fc=Dwz<~3{pd4EyRuu0%oncri+A{AkDCHQ!%A5S`+A8up#s_;ix
zTiF(!PVwH<WbRb<zPa-yWO5#Xzf2N;b>tX_71^KKgk;cLs0Xs?fj8Ln-V3Sl?9?B_
z8<>-3gt~?2i0$=3j*L^alYd_nE6@n+!v~ghM9Zt_Zo&(T;wl%#MtJ|#m9c<tWxI<S
zqmJ?g<|e#Qt{F);CFw%ZDelH{Y;R)LB?7z3m#aaNMLbTqpB$K6gdBf>u^xGUE6Bt^
zg>=#2<$=fI{K;pNkq}vKmW}b#AhRH8#$bbwMCR3373{0BR|^^6TnT3ri=R?c%{U=|
z4|6#2Ot=g#BGD-1-ofyudrP@wDeL+`Vm&5r-Qe7iHYqiLyH@Q*D7+tG!5jV_UOoJg
zzOs$|5bbqcEu2YjD+id#8;Z_<lows}>!vC}*0o%kIqjPLeduQk;T+^tW-ikc<$Tp<
zmfO8GWmZ*VyYLHDYu-H%Hpop0y<mJ4i%>{UGHBV!b)8>{O(`U=mwTX-+q_!aL-X7(
zv8a=CT4Ddo|DHTKIG7|jKK|?HUw--J^vf^DN;hKEG<w7`%}bg15^7|BD_;|30Vm5n
z$#1C%IF}KYT@@Q@iAf`pY~%-sHs!8V>q$j;m*1M=Hk|lOS)h_QKKu4&lZ$LJu2R1j
zxBxCFOdt4;tHK-y`85T_AmQk%B0YhUK%!8exy_qC!%mi1gJ7$s3yO<wfD$YSPhO7w
zS~9{FL`qU#ePnmc(z{%L%QdSOt}{^Hz$SGIi!=(I;!e~`VO~9MI5x|Uyj#!b1$aOo
zT~+nA$g0c{*g&mU2J|xQ*lg3cPEz{1xXEE>wJ9tpp?|FR^4>Wa^=)DIa@W`M8**;t
zbi&{uq>B%-s!A_YmoJOpu;_5vFAF)gLahuFUor$0Yu_ID4oy0LjVBu>Ob2E7p7&X8
z44Fj*{vw;E8!v)Fj(y!v1~u?uxueQXAR?I68?06qgC&+##A8(-|A-HPtZvm)OdC;e
z@U9IXN^aT#*PU+>KBpIb^bNR*Flu8Qw%v#DUOuF#s9(qYi}pmK)-F6vaB1Ol^cBjG
zH);XptHCZl`0M_E;Pa3Af`8icyXp5G_DbDYJhWX$yVDOSk0)T{bSJ8?5EN$7Za5o-
z*1?bE+aq;Eb&)5k6B)kh>9>$Kg~D+A`ruMo1y_R2QpV#8@(JOlG+U<0dGJ;rs>zo9
zln*7Nl4|ZeMt97Q2)QYYpiY;ff{11}IB2*P;6*8TqxpA#?{1nZ_Trct0JW(oE->>8
z?(aqIt{PRGzz?(TX5BA@BWALT=8RKKsgzT=DnG#P%<nLkdUG%I-O)H>oJ?3GjuxU4
z46`rXF&%X1w>Mi3DH%)To0wG{J&!wHsZDoOX3y%*ji%En;)-$~#IA1F1>BG{!EuQ+
zY^v*_@K9=h_xKIy>bemXIdB0R8<si30l0TY|2-Xg&**IfM|SyJ<W+wo1O%IpcXqLE
zRe^|IjAOc>=-{_V->x$X0lNzR97y0cujm@!)?;-rD(2PH&#}vEv2XrdT!?OptsnL%
z6^-DQXJn_ELVdk%#A3~58YfLB_oAGqnCyhoyX(_`;!5^Hn1MzHlw)^WhEja-|Efdm
znP{eRz{02&ccx<GlpSDaKkWy5%Au7f+e^3%RempeCGPfVE=Rl24|p)of}nQp&Je=q
z%bpAj)@070-?#P`8Sb)bL~@kwLFKT8SdUG6Xs$1llyKtmwn0{i>672#HwfV3gB)X5
ziYOX?!v(R;>KIlDvS^r;iUpBdg;|{Xb*Rc6G&|A$RjsBkn1m!(LL-{cHNc0kSH`Fd
zh|VOM@PtxL|3X(qH1QxY`C46+&>L_$DOIQo$w_6y5hOqU%m0{|Vk`fN@z%0Dx#RcQ
zq3|_ba|cD3p4I$TbP7mkb6sYlL}a=n&kT%z(6sU^P7e_j523*pRn2!!A*_4ysM{c+
z9VZDLyw6U5cM(6uYq4I|gL@o9!3_uF`6n&bzk$X2%OkU%I7o00np0)4`3BWHTU<UX
zsy@%$%w@n=$O8ln2R{v-1$+~?=0{w}{cG1$@cx_WT_?k-QMbM=J4Z#}+8bvt`ykza
z?+SP(g=;`?gmYDELujDBfalVELp(|R7&!_u9FOW<#-gBMt0nzYOhry%(*wjePEWUj
z=k6C;hj>j;sCeV-+7h|I&{3lv-iYa_D=P1J{YBwOAuUYPQ3(|e)JA(iQFVqTTem2o
zNXuxV27M{&lxl%N!?c@?8+qA$kU8>y*U?LOK#z4_WZ0&qUOKD|`r!L=wZ;CF`6U24
zv_*9vI59r_S3?sI^4hf#*hqQq6LXK(z!2qqZXrkKU{EmB|3-e-7ON__2f)r0>XZHc
z5h&u(<Pn#S|CPTz`h%!7^6sH>A1qus4^Gj2h3?|kt3hvKn6GT<C0!U|Zix<m7R9X;
zdUB_F&0q0j2FIaV6gqbeZHifR<Ib|=vMm?av{s;&tj+r@&#$;qtD>fVAX2AIONrff
z7BE(55Z)V`_5Bl}9UQ>xTElrOx&wk2*G>WFyyXDImfF^FQzx)pcI+AB+Puvo=a(}2
z-Z5Nc!YJfO&ec!0Cs*|Pn$bdkY$-rAB88wk=N3%B!#WqNnaV{765)DLr%2RWErWMA
z%^mq;PsY%%are0Y%DFTqqVCsK+uW9m9gj6tv^R3_tHR7-+ijhyZ7ZU0G5{b0+n^hd
zf0;F!&*^9Khh2LpYguQh8+Tnbmke~9ZOI)S8FL-OsqJHe3(%w0f`ylVaIz3+QS{DU
zF@7gZN$4wb>%eAIlV*_Xv@VoU>UZg&4Q?Nu6kXY)?CkvYMK^C&#dM3vldqEReJvBe
zK)?S(@<TS>5t#pUfjxuMp3d^K7y^(P-IP556vd|3o-`uH?7d;Klpb|e$&df*|K=w$
zrj`LIlm;mjD+YSEg104qkGKzb%uib0hu{+%!e-P}>+A7HL{2Plx?&0F-Q17}Ds~IC
z8^8}~Zf$6||9L`l3{xaG)iW&k|5xwJCEhCrsU~+@<j60lA3(EUB}0(dZ@|Q2A`pk$
zPMC7zsSYk_G86dB3%+COKycvymw4{=dcWG#l9biB3<zF5xBAV0XaA8Xh91}^_x@;j
zD#Y-q*5I@F{V0|@J7PwsxmNXFbnx<4m3zFckprTUMyqPw4fn&n|6>4bHWdlC>-kBK
z)JzhZ`LuOt4q&x2m8<TKHF6??5`HTUoXbkO%^mEU-~?5e)+2R~5)#}IS7UJCLGSqG
z$KbPX;P7!8jh*6ufN>RlI+ua3;ldyT3*ewas80Q>v^3=?vp4cv;7y8AdLsr;W~kS;
zNJGdjvKEYwJR%68xr4I64~vrCsQ`qpaX4~L<3gY5G6i+rm;jag(p>Aot;H5sr41C-
z5o~*}k!`i^{44Y-(l{f7PR<OALe@?3NHo^z@iS9@?K5M4dQJG!Vq&qGs%YQGvPBLG
zLLqG7oDSc!*Kgjcr`i{40jgT@VBvA!YpkCEw`uZ?aQt*$$pRKfMs6cfp93@2+p?~s
zN!Z_ZqYGP}zZ1}6s{U9Z@5Op$t9t-lVbF}ogUgMiHwABk>4;`u))9_624@I8gupJB
zw=tA31Yyd5OW6iOC)e;Y<@2@?Jz!Cirx7g|4Jecn{sO5WvS$VpO75q+tcH-yAGvyk
zhsaDTpl0RRPX@1hT4E1v2YCBT?2V{K-(yF6z1619n3L1J2pYR$+<^W*Jr9M{*rR7J
zpM4|@flEbqRLz5&S9#Z!S0y!!OkTTq{_Lv*VRRaQnuE?~;u8woXj!(c$ovq+Fn{ay
zn%Eyb=d~DHqEV)DMMZZ<ND`6C%E4wdH$>$Gj2&y>-PVVS6FS%1VEUO8*2Fsav;|uN
zpvL#aJdKN{z*l+#Yg7}x6sk`$pVbK`^^I@>7^uQzh=PR{rOQcaDcam87(NB1*$?9o
zkTl>^VkbPBU#SW>6LUQk=oIx_M00KyoRE@maIi-ql_laBdLGFh?j*zTs*>!f+b5>w
zs<`Skuv$TfDJ^dITt2YS;2zwEbPzE%%Kan{n3*a$EA82nt`#?bzk#ef^SIO{uY3)#
zLZ0mD2spB<MkF(Aj=bxS$iN8fdw3jow+;in#KWt~5Jy4=^i>yBO5`CMSk76tTh5tJ
zsn1FQ+)W+35Y&wL?l`$?5VjU08_t?#xk!C8xzA;Hyjp#|?(PS-mAVf*yPCq_YJw&G
zwUmiCDNF`gOs1TF-Hph-h)t+@_v-cA#LsF^*b^m?hSD#K!AlOe?L9*R3o!-_wXc)b
zrM%_hh3nC4IY<1y!o5;2{@~^2blQAX!ps3^#<s2O@X5I%sFNaZ;dF43PESkIz83~K
zutK;@dc(0mS*@|dvZHj|$pN`~=JA&l*sfZ5Vo5-L5Dki9YyyYRJZzQe2++H)O6sZ5
z?r`W+(K0)@zhR#X4-$Rn8aVDaW`Vt`@*1L%Tm$n0eczQU56}W9S}%$sy~^jjonZlD
zvzUUI7V~sJgF;KGuiuaHyTIw#NsP#Z<lRn_wv$K~L_jYj+4~Z1z1zGh7mD|>@RvTQ
z?)W2PBBz{M@}jKa@uDKJ%CF(fSofO#l-Q*+iy-;a8k+{S0?=KE`jOvc{8^LC7e{}e
zgph%v$VimR=g9xaG`YFx%5Cp=W4xghf;mFu1?a9)!+>+Q$qxB{0E`1q8Hs<D{xq4v
zvN%u{5(R}#Jl5M>5&bZa^*K>lmWYkgIb^K)4#ABh^_4AUZk=sha4SsziiMycFx{UG
z<jj!V5(&y#>~BjiAxr?ZrZoilZc2Z}3EYM->)J!#mFF_{M6ZiIGzk%px5Eb}rtwfK
zI57nQ)_QfWu-u~%kB&cLs!fXE%ml%HUhs*DV(bIaNgdtR?)(`}l}JB^{^yz`vZ<MF
ztlCTu?i+IkR7aLWE8F1W(*0zV2zov-5YL~zK2Pq{wFd$taG(daY}<Iyu@`@BLv4qe
zp{N)5Q7nqt+4JXit+z}G^>T;nyRMbLo5qO6&XyYTP6!FUaiklA7xD`hBfmJ<?hCn9
zqQoboCkOxI7h{NtCkOVEP^1{ybN=bcftxHj#ew<pFI!<kDG7?MW1MO-5<1T-&8UC`
zCm4k492KH5PlAeWXU8L=7_xr_H>lHij{e*39LG<2P0D)kJIXfTk_+SCI{}*6KeiVb
zqB7xU7MmKFCq7YtbtS%6vX3zGsCP1G$Uv5Py)4<G7<`_(w;KkFhvWkwK(#+;871|t
zk|`K5r~OEPVdEN~#6I1D=e7#J3)pdHS#^C3EO(%fTt^|Yyi#@2ki>sOD$^>M(Lp_e
z&2@JC{FxCf_W!ydW5Znqt|Qeum%KZF5h6qWS)S80$znF(t_4+sm6i{aviHy}j>6W`
zsxM(1SQ8Wn(x{m}%0;Q<5$!_^mdaE2Y}2nmEPuQ=B7~rP??CQ{L{x%OZ9DY*7`Af2
zJ2`i17-OW=0VxEE96*0<j_-#}DJqTaAMG6YuT&tdHD}v4nz={NA)p5_ZmVKKy%lN-
zA>J0D+hJm10|t2e;3#<R(bM_;z~~v6N$I;Zdz9WGP=~sLcKE9Xmtq}gLd9Xjpo>gI
zW$tvssG*94m0U9pxeH}9FCZu=euXALR^6(p8Pf0RSAnHk<?ny*lkdv(n{o@*xoFm4
z`s)22>Ax7dpBa8przXtmQrONkUZ2c%egpekt;7#hHb2PW!9|^8R!3n6Z2k;Q#_=(W
z)lnV5n975XdF{=-)|(oPbN=mI$no${_yV+R^|!fguAv<6WLCgGa3POngBMOF`#5>_
zHRg)H%0DbaEq8ykt{R(@VM~n-5nH3|5VJ|${P!GnZY*OYw{pw60g>|LZ+85VPj;bb
zWCpXJ0FK#0Lslp}wPI4<77Wg9YKYs(s|v8#(h@C;&GEh}a;XeEv=e3)%r>+C>{=_{
z(cssj!CldV<e&QSFaHotvb)Py8VlJ-vQ0)fppYx)sdj%uimpyZGo=;Bn;Qrra#|`0
zAq5kzD|6_pgBppyu*TaW&LwB2Es{TL#!`#?y~6HDJQk^pF?Q~#8uA<#1-xNq1+)N*
z7qG&2lO1d33T~!5yZG;8lsr;sVG2*8v*kS*@$J-I(bc_0GnsbODF98;ew$hM8>bQS
z?&&WVQN4eLUELR}B){sZliP_*$lGF?-8N#LY#TA(<<<LCY-FWfbCW{W5;Xvr*uA?`
z19_i1Ll8Y4$xov^+57P?|Ir@UL!hw_Y6sJzpxDzg!SiE=CUbcVhy&3u0Y94~hOK^p
z(#(uG{H)BWcG0?_n)cv-&3jq;4#R(Yqx_FyScZRNBPF5R_6^Gsygh$+>RiXv1xIVE
z#(4Un^vqc0`O58d{R1ba?@MSJap^AELo`8@O;!B&5ZL9FR@g>bnyZ!R1_ROxe-!PF
zAczz;Y`J4QI$Tu+CElNT3I!IS;$G*F*XG4b_8blHs=?qsEg>$G#`M^^`w;#M(>Z|r
zJvV>ws>^~dinT`ma00!nJUD}c7ujF}GHst|EWB6Hc$vW-t}1l>F25=cb&vGyC^hYv
z=+x;ou^ft;?xW)i<%fkVJH86rTISAGAbutd;1zu9QmABMB=AkMZsC2Ci8o?TA`Y^I
z)4-X<H!O1?Z1UR%g*6<AVZMcA^xc{8>_vYmOcYU+c6{i`m(Y#XT(lZC$Vu&PELYWo
z_i_)eTiBqci`&zm3<<bO*l;o84>K>Ua^y)V;agPdav(qG_n~JVhp_}GRiC2+TTZW3
z)0~(xBtzqvW+r1fly0|qC^vyu?$NE*Mc+Unx};~838<RLl-#W}F<bf0-WmR+k12n?
zHwiEA=`Pw{)4)@&9&ex}wL-u2Oa^L;aI)~Dqm$RqPM<verKk$OJs<1Xc~~@GmtS7L
zIt63T>DDC17mO!QUO^5RS2M?-6M{NQV0C#asLo}Yd=2l8hHaR}53wl538>YKRxRBV
z!b$<A!Czxs!9d1e>}Vkeo6K*^drD5nTP+u~TS0NBo6!u&+3k}o5kVikp!^|}+kw-B
zF39xw?75n$aG*yHG=_49v1zU}6|#|g)G1N?J;d08_h^1Iru@28SV8Lrpc-shvy)RF
zc>&&&%^!JxztLPJV6Sn5fOA%s0$}!WRVDxUf6DC#emN*H;TQXc;<F)b>nMt7zA?pl
z4D$)OK$}ih`?D20*n4Gg>Xq+I1>|g<x73sSO+~0PE>!~;fC63&{A^Sfpz)8*i3ZiJ
zNk)$m-e)ijH6-MZ<0C@%_8h^e0iCdXzrIJqH2rUXd?hD{1QVVbE$cAw96?*Y)?Cqb
zr>^?Mxdv$h7rQdVlION!U-gdzSVSgdl?1k7BcDG+wG<cI;^%Q#G~H~#Ni2n@W9+*^
zo*eI@Q<Bl`lP^5365(Glq=F@f4}}~d^W`RICS<g39{p4<@#5F^3?&sVs!baLE0Sz<
zyx*IDN?Nw+DpYqIa@!akN?hm}PXL{U)BvuLTTlyK7+hF{qwj+(|LdGCK*RyvL6}}!
zVpH~;(<mOyDW$rAY%0=Lr${#|J|+@@$Xa@$@vE|gu8_OdYhabC9G%6=%NDk93X#>#
zea8Z9y3F^*{d8<@L7v&hN&3d?r1TBb6a4yrsfX46=7kJv4GCik`sq-mE@Xo6V<R9u
zJg^tpHr&av=}L=&XCX|W@{lDDK<kfOE=#Bg-{A~Wd(+kyf*lax9_<LlFKh}lI$;FZ
z0d%gbh#=ZH*a5w|xrPmhHa5&+g9Ch66a(Gd?$8WodsqE3P+~(8lnqMt%U44P(@58U
zbQ`hHWqxm<7%_zjQIkEV@tewGEF7gn(Bi%ZUr{XX)MrGRD(IJ|`XAV?Ewb#)+Z#|r
zgUot6?4o}M`6!wY1&gK;)rHwy!BvP1_^1vA*AMrDIxCpqq^h6aCM$1)<^K3T|4&A3
zx)x?PGyDS22ITI>!3OOUp`V+6S$&>={)u<jfIU_I=lj&WIlxhs2;SyZYD(i>QC{El
zQ5f^HZGG{{FSohZHh<bg@AGnej6lvewGaHp+=mm-8I@1}--xcUOcyT2g6O4%-MJBS
z09pf8G@>XB#)4RL?M&uUgYq7ODromjsBEXehK!Zu3Ekw}_V=Ojn4;cU3d$aTYIM4u
zv<F{>*sH55s7`b)$IeWdS5afjTV;wmfU(fMZA-%P7vr!g3C}$Rwlg6bD|-jlA$mrx
z&QjULDAl2?>GReED$Ph}s_w{gOVu+@^v4$HqwF79mAG=bT-Twj>QysecWH}oe7O`t
z@74wQxeRPz*QSn%<;lauGI&;h!tvV-f%Om5)M)LxUUvpB*NhxbigLaj^2`X6jpt`+
z=B#X?o=M&Hbc3hKI^jgrTZC}HbqzcAp>3h?pm9nJfc~tq2g7f#W|U3!zfzdns63JZ
zE^E#f2X6=bg5Hhft?-(mY8r_u^>feuR%!cJ84Fs_^W^kP)cI=NkC8fmsXLL}14gn?
zua_O6X}6cnhvZ*8Iaqd<^x+wdm?ha2lk?Thiu)F1UDsUokeHVZOGUAoiW<QBI@UV{
z@aQF$^IBdV9P+leol&!G(>C%$H^MP7Wg8I$Y7a*AwXK^8eGNB$%LNfMHC%bQvE&<C
zaCUYjFTk!qoSQxjcUvfbUY<c#ckP2ySDH}M8mrw1CH6P}*^1s@pQ}1DzAG*xPB!}b
z#cA@J<F{|gGf&@~%tYfJC(8Q<P0yELB|L<-gO%s50r+-^qWt`q%jJ&uV)SxdU*6Zr
z^Ot7_2TvHC6Un123fxpK%$y!-<Ekk+=aPz_tw0?g?n6^|rp6P0yUz1R^956P>i5*v
z!JYS_wc4b{dvNbOs8s03!S^iW`R&`cXKxHt77p4scH_XYyJv_Xr>x?)@i!F)+4p_(
zzNml57ze%V`m$denw?<vDA6Tx;7$6x9;Rp>AH?=GlP9G8gm}BT3(NrNZc1ZT$cJ`H
z1+oPbu^K2xG0r7_%&X|UOcETRK5lHeT{a6ORiTiZ0)q`QX*EQP;O`7K#IT&(_X0cT
z(wc)hZYLC#19n|8>X>`}0cdn?#-~pae1`9bo;_i{*R?`gJog~b>FH@y97hy-ucsHg
zROu@N`{Q8_iYXDTgi2rpJOK209m-gE+yn3HurF}S4caJw3Q*4ovxTbt(&HoFX=w}3
zCyC0HbfMycz6kw10uaO}!HE52<2DX%|L%^d0EqZlG@o@_wDJX_lnMlaF{G$))hpd)
zMIFMEI_OuOgyIj2z-1>2uB2&X)>sIDc2&7DOd!0}&!4H1uEBrcBe~q?i<!pvXR1pf
z7WGkNZ$NH;T#8!X)SiSFgsCG&Oq0_<^$gB8GLo4r^}Ps@N=@m9v~c5umU%kLWS3S=
zH|@J@?2aVTc{#_rmrQ8x2+hq9oN2n^naE7Vbzil)>ddr3bP8VVa}=MW7d(tMZk*U~
zUGO*HiVSk=(}(01f{7M%oP?C5UnFybg(n79cQJi``(%1BJxIg$5u2PFuxZWeT%BC3
zPlO?4i)P-<&QIUIJAd^iJvl#p_WW%sO#Q|2tLbu)?MS6_sH_{b%CdMGO#ej)-v|B6
zD&mH)K8;BN=^0G{qo)HC!)B+a7ZGADLvG*(z4#~@;~4`GKv{~Gy~Xs%S|IE!)F<rb
z7RAPYIAJ-jxw&L|R7zODFQ7c86ALM&=G?d?t+huqOa(=W)i`ufVDAm<`?P+iJ#_*_
za*<~Icr*8bRZ9&FLV3w0pS^s0q0ePZ(-b8XUlZxVbzC6Oq?ud%&p-9|KV;(psO7#X
zA**#CQmZKQbb(roiP0N}C51YKQK2_O!HJoF*u38|6yP$8&RoN_ajJm~{rvSiPb;v^
z5tbDbibMYuuizxhoTgEfYA2UjNb0Hpcx2$G+hk;=%erkqp)$>gh};=t$?tg-tv{qo
zCwv%(qf*CGo;K7_T&+-KOWlsUH3K|x5*hg%Ft6iUfO~O9;gFH*9tS4l?(cu2tG7~r
z#ljt$_g$)iOoHrTun5KPji*{UB-Ec)s-sQ(<G=ief#jm%c__n7I68!Rga}HR-Z+7@
zS$cX>lqI9p(H|S80*G?hpLU#m(}vT0yp2%8DgxZBx1>L<;56UNv<VFrSnF9v-WXWt
zamd1H$zJ@Y7y)3=Bhu848$d=)29BwJ{`Z-3p@1zQ9#%KwC@JPQ%*R2*`ElZP1udjJ
zwn|g0Tw{ZZ8snFpvaM#WeGw+}oJxkR?<~L9eeR;w$O`lA^=;+x4$IAbGU;Mn=p5qA
z8xRh=g+#NMSfpM}r+{Vlft0K8Vp(}ay#z^!q~ji-e8Ls;&PJ*b8ikGJ41;%n%oc0e
z9`i=yEV}lup*vhR8@`Z`tJwjGNlVnK9{Z=^-jB0Ty9jIztuUN|0Tm1j4V9O#u7+yz
z<D<lpt!n@0cq|2ya#0|ig)lj~-Vo~!Bj>0qw7_h-P`x6G!&q+^8SWDHo|h=plHAa9
zXQFD-wh405suXTz@=sVmkU6w}3CctfU0s#$3Hwd)AB4^sGprR>Yw*xmsf>iAHz|m)
zi^&yq0hv}5NQ|VaA^oVHD>JyuSJME<QKe}q^uGhli|a{`@V-@sH_-&<`tt)h16HI}
z><sB{-4;QY*viLD-fA(2W;5i);;BgI#D#$!rPe_HVF#wOCuTR(HyGA`qee7TcgB$K
z&R;NpjjYBUV2)E7R2kJ^G<vu#6GNts8(-vFL!P4?DP!`RVv%eA?BKIU1N6nhhsK=@
zqZ+?umLq?6!8#mFbaD%(K}LkbQ*_}XYiTWih>3by;DY9e602kO<<wGEN_C<e!yqqA
zhj7TIP?8s*r|bH%x%D)EiB}CUg=wOV4Maoz+#88(fegnq+;5+JVMPbFi}DC7ju4Ob
zj@QYAo(!;xb{Y^nXudW~yh?V55X+@LO!mO7_Y^{_EGFoX3py>eni=tNgLg!kj>4O1
z^CEnx+9AgnH2J5~Pq#GrFLqEs4#T6j#k&TLfJHLg8gUP%|Bgd{(wQug@pY=Hcu>>#
zJH=z9hR3k_zi3}V6Y%o{Sp3JDzK^ZvVY~0PEfn%IwyI#7TBsEp8FmiHKQ4;JJL{PJ
zxv8os(93nlGIHu4q~SJ;Gd~=91_vny*RTa*ulOb86k7Q&byH0=uxnmQ{}=L#L>xn<
z9aiCBc_z&Li!Tm;x)iyE-s!3HXpqqCYDGRJ9O9iP9wH?6<6r)tJ?JE;=7Jp_{8vJZ
zD0Pg>ir`4f+=*tTuobYXV*(`^OGDPxLbJa^J+z7NU1s5msHvL!P7yl_aq}cwbw9KP
zHgAWO9sl_E|N4IjuG&0KTdazlZ7Jkb8Qpg91273nGO}5J9tqz_Inv?i$s!1XysWe{
zR;3~KVa*c2DN={|jTC+xxsYjD!0LzpyL9=2Nzo3!Zp%e{RkkBXpMRumJS*%VcONcG
z5npMzfFTkqkIkH7LVnwI-LzKbpwL42*ol$>j;MmZxxCzCL-s~FAGDB>24Lb&2=<b4
zdqaGFP(Aj4Og}Q~<Qi?IlCXI~ROlkr>P;gec%hC?n3nAf*}o5ppb<*-Q~gVd@6{t^
z)fl8%<n3iChl{L4d_1^=;zCrctU(uld=}e*na_8U5n;zzj^1NOMPU0Cpksyke0vlL
zgbceb_}7HJ=%!z5D<BhSpJ<&X)FkAfP;BLoxREe_%IIeLlUy?-y5CpGx)c*RwV7Bb
zE*YJo77QlVESK<WA}r3+$j*-c`GtNsvlwT8Gc-2PQ$Ml^dPeF{CXrLJ);Gc452_PQ
zc~AWx@l#B0xDeH@?(6F;xmnA-PQC7mOpp&*kHakX${|8*FbQIP5N7e9GoIEo?17$!
zVnObIKR1hJ&USQ-IUa{Dh&L+r=I`Tk-*!C3=N<|(?&d|I_RICPmXdM5XULHX0n_m(
zJDF81Uzvory=Yde9ZocNuJvHF|1r(wDkE>~kmQp2P0vy!_--3ZP@_WvsJo%v@s??C
zkt}wkXKnDr06(@&mlkk)>{SP>Hcn=>_8bO(%Lt2C2`E-6f)>`i#9cL*?#uy^K2gO(
zdu@Zkst6iKv;dp|wXm>Lni2>4kf{|jnaGrN&8&7#RE~*!91n#|;LiFZL@-Uy{K^0V
zX}o|Av_*&0O)R&a9yo7ML9C<ZxY@p2`!|%Ov7vV>*li(R(xJ45Q4w`k%PC`&FK5qx
zk5Q%`<!qL@t6Bb2H0!)N*1J7PeslU(uMgWy_<>s~GOG*cKCr0dp3l{5yk8*Xtk;+Y
zuO57cRopZB&Cor;rMogJhTQD1N~_qt7{F+Rvv)VS<+K9YY3G=@BbA5rI?_JqQ$_*)
zZSN?Z7xwqe+<u|zu&}3R7cYf107ia)cxb0F8iUe@LPEr#M-ef;Zg~yF!PSdyY~6J>
zIgLBm(A;nD6jPyPrbq}dO)K53J!O~y$fr5$P|Ro5^n*fqXXzq~5}{^_ii9}(H2Gaf
z<B$4L4J{igqp8E><<rEA$DV`=SvP&J=0U~Sx6_u_Kf@s36_>|nf0u-G8oQoQl_4JY
z_w8C)9Wt4SoEa{P9APHPYylfm=s_Ed)=ZInI5P3mmqb&E4Ib>3+PZCCG;>xqi})7}
z2oPHusu2#nqznB{R4H2K6-y}&%69bdlX);D2=$28yqozMev_s!Lw~=1{QG}DX1r*B
zKdPk;+XP>dNeE-_8K*O_HV6%|RyBC{_pLXqE9J6f%(5#LUBnD5eQ@jAM+ug!aZXqi
zFOxP{-rwJKhwI{9O!y2OM+OkpRq)ns!haog^-YP4#r=ICQjoNrTKRooo!b@qfF;;+
zA}Vs4P-|*_OXp}>Du01&EGmtbLC)geLk$8G6q^{(q5K+3%4Cxrkf=QnwoqikPwd-N
zs3-cTnr#k5iTy5*w_?ulc)Qoh%dTt`HJHh}cPb;**SWv%ESXVmQFQ17)WknC;6pUg
z0AC<>D%LbCF-7vb*$}W&EHtX619deH=_G2#tBaw}KR{>M-+w<pJ|jgb#7&i3bp;M9
zh4tAef7FT<+UL-5E;Q^dn~@2X@KD<NMe-Eby(QbQP|RY<IHK-e=y-YIr*hFZ7rtv3
zeCxv0Ei^1l-uUWfVa=fcp4w2Z9K#ubR4~*X8fgVq?3pG$d*wmfRLc~4rPnPGh=JDK
z6d7U_8~iyw+JB3IxY+W9*#|J7n@}B)yu%+$Z%WFJQ3h29)iS*wMp-M@jEY#|r?ZpS
zKnuyC0=Xq4qo}7vFWH7uhJs(K7b8zNzx@g0w)D!e$;hV6Q8m8Na*j4jWjse-aF3HN
zwlY~lB>=WVZ#R>Bvd95}Fg*O<G&yuYwr|3a8vaB^J%1WY#Kp(Su}YW*!Y}W2@OTfw
z`#m~Dq3MEQ@2!60gggBW&tNYZot>PYjx}q~{L%}nFm-xr>xG4<?`oYch0d`f!%&dc
z3n?P$rbeqjVP#`i6V%Z$bFMk_3X7^RU|~A`^Jk(KGNF$uA{*Ik?5TkgY^6kmv$yZz
zmcqGF+kbJg`A3TtZ!p9S#X>hMR%j;=KcVXE^x;F$nz&S|)z2-zr<U1bT@OaCZHJ1=
z`qU+JZm|dz3QW4?Y$0V;5|>u^EbcN_>|CIzXRWA)1k|0==l5<U8e}m?vv1xY5PIZ)
z2JOc7=g2g|@sLtv7qO%d4YrtdWoJ01Xw@BH=^a6=z34(>D0URgS+9l~H|1$V^=q|i
zLq%jwLdQds0W^C_XYFAYQS;KqQRQGYqPq3cBXP)_2hGAk3`T@1bEta+We`DjtHRW6
zD-dyB2lbZizhG#ZSJ|7>Hy5lwHsgOnXRHD2$i$Yihm*xLH~}w{{xmxr-HWpJI&Iwr
zD>q#jtUC*(%VBViVg30H-2E)ylT|e#2;P9Ald;<Xf0KSSCV#K9wwWX^@YhLV!>}Gq
z0PYR-q0kAX5&q`&ZT9y)or;s)S&cA1-~!E_l^eCzE&1&)jup?LUcNH+KXw|>!B)`X
zMuBrh$LQY;(akKtjZj0axsij`^^3$6<dJAM{@?DJ`MB<7PpaF+63Vu8^)PkT?Eq~3
zfnKzygS~QFc7GalL6Fv)9M1EKun8@Dy2|J5#0}4K(auXIi8Xpy*F3~X-2fkyfme2G
zJGM2w1e``x4eg^ef#tcb@)nioG)5^u;g}IX5*2U8Pa?B-&H_P~6<{a}H67&Zo;o0U
ze0He$4Q!4ABL?Xo-9&@@8H!EH98!6CEz=WrqY%4J`+ql09}FyE1BAQ7$EU<I;u8$e
zv0PcF<u$HQV^f4YbjhXXwoZ~C|J8qj--LPSt~5D60!Zm!{Rg2w)FPr&NPQ93RC7O+
zblM-%2}bM%3xCl}lt)CF$C?xNi4{U+vAVu<rB#=M02#~diw@2G3o>%2+sLjnBX&u2
z6J~A8W`9J)HSw-%#Ue^OgIOo{{p|E4`N#j`$rtAFh{uAk#h<31j}Nz^r;4lK@haNJ
zgKi-b5oa<hH~A!#59pg!iX~H?XtM?YUcn#u6M!awCNzf9>9t1k!ioSa<%;F+b8Y?f
z($WYOCZsCBR|Z&j4O~<Lb<SXRU}PzR5rbzYR(~G`_2Mbuvl|h_fD(Jak7GP~2o!AA
zISP9Tr6n}|wo>%P2cT_3=VdxCe$wR@Y&lj6So8Lo7jDCW1`YdrbX=HdBY4R7NkCLh
zc;}(%nzQrQKV%!gd~}1i`UYYuXmwKR3iK!<hBP>6CQ+Cpu}1ai5M`?5SK8+$Ol{(R
z<bRN`O!8BA(1XsP$GdK&joM?_l$rZje*F7?AEFm!ebr=#npYmx>=z0?A{IYF!6R}z
z2Y{+tXmi%MH0Mu-M!Fj&Y6HA8rm3HWZT14tm&Hvv1X<$a{YVppNa23@)YZ<9Y1$em
z*>WFQNt-khIT>{W1R|Kn#2$zK+=P)E1AlUEyOrEWqMmwdM5qp$3))Q=be4#<bb-P%
z$eH4n*^|*wA{ZANlCry?*XY9W78gxuCWK)|hFXZ5){p-S6ae15&!<nGj6bFdcokE#
z9X$xQtra}16Huo*J-s-OR&;o1f5!aPABjhf`QzcCNV>kizhEwmJTZ=F<0rj2u9F=(
za{+ggkvTaC9kQn>T=~OilhQd&e=`t_2_08WTy$Q0<u2moV?jJ%T;cBp^aX|)#w-`f
zuabl07r#jUyNyqvHebZ)HhWpHdPzu&#HJ)xdg12>0Zgqn{Iy!3#zSyy5V;X%k8X~u
zime>frs+ba+))VqlgX@x5*gNy?$#5YkJK<kVp|^-n+RoQ6|3UGy0fNYf4NXOI;PH;
zm4GBV@0O*YPG%R0=6k4^u}%GpWD#^Qm<p2woPu1&N}_3v6yRyfRrk?EhPg&q%7Rsp
z2J4|4Fx;vZr0N&%?b1Sh#bkl%W*)&AD#4+=4_5W#zx&sF9?=~KGh@fd0I_|<%%DF{
zHm)shQ13`~`=4fW_<sJ^SJ@si(H-mKzsmNoP$uDo51AnUBm-op8u6|HvSV>X$y||z
zF@17G0xVX-YA%Ig*A`|yXPh|H(YFATy1BPIrfqhv)S7XcT2gPIn?BLXB7>r{slE(P
zvvfNf0s+30kUbOular-AMFAa?>pho$Pepl%VuN~BiHO4ceP0Dc{<RPQ60C5_S8)PZ
z)EF`Jy33AH-s$jA%Ot=_pvP!dMqH^)m@YQo)2+-ku{rZ7)7o|*q)@8v>>5Zx@cz7-
zTBn%TSd$F>PF6KmRO8V50^YFlx@O4*oma45AMU*IaE;cTO2ZqBpMO#Qw*}*W3Yz2R
zQ{msHDQc$|J0#g>q0Ak5(Zy2y%gIiJ=7O+CQ66bLs<y+TBdWx*@SRoJ?3sfaeFW{y
zwIKjJ?VgC)i?+iLz@lR~{H_}+VJ!*7^T01yr{5C5xsY{Bvj9`ElEF-+(>&-n-PuIX
zJ`06E>h}4b+YJ;np`3uPK!L@7aT4HCYph~Bp9#Md0a)Wu=b==-wf~m&EiHj8{>!8O
z5HZwPtrZ)KrD7CHOod{UefRC@`Dya@pS`+x{w(<_`E@qgaLMnz@g06(q>ydyeiMsH
zG15yLYNr252R64$v>R?_615N(YTV!VMZjg|aCOs=6#N_Y5p-3mC3ft8?AtSFUW8oQ
zEvH>4f4?r^5pV?g-71NYMz(EYXI)bv>XN^mcelSvexIhKBN^xq`VU6o{*WR2{EC^^
zfE=Bl{sucnBM$!!pA1#AEnqju=t5PMsM9)Dw`ad5%XN<+`yMc#**SlNQ)a5Sjav5i
zvIJfUHCrlMCwTR*DF=!uU;p4(>fZNAL#BRb*{NWS_@UTZeOx7ap6fZVlBL;&ZIWT|
z!$<bVlchjn0Y8%nK`8+llQKap0sfO;K|^4Fd-7EH{o?RdW(7yb0dXGzk9LZNKcr=7
z$yOk3Aoyh?FJV-*YbdybWcqY`Xpj=stib&IozlD9XhaVxKquRKNd^V~#!|Mr?AMHV
z62wB)WEM_yMwUsz;TTv3XnJ{*0zxVQC6g^e8GpWlLikL*wQ`0P)^_~r8C|NM9;9$U
z_;_Mzq<krQG`x?_2j|{0K~qp<Hre-omXA)5DGVRW57|U}BIQGKH#9&Ji}~x<Z@<+P
z2!0KTHz9IiG0ffX?&PwbdF^VH%s`-Gy|TtD+Nu%S?VSkk=1#Hg9;&mpV`9r`iew%F
z5LG73h0n3X>#X>&DqA#MLesMBK>jb~|0f3rhy4G{nqMtSt<WdaC}<Ye#6%lzJ5RFz
zUOQ?JHO$8obD%I~oTyFV3w!*cwy?TK0kVTVD}6r?AWM6b8bix}vs<<P!Yi&;|B`$!
zpf9cGW$l)ZTVl*O#^FZT<fGt;fxV?g+}Rq4RU13+%N?vXt<C~VM6E|GO1K<~qI{BA
z-wDi30hzu?IkNjlt@b@;@^PW=%n?YO17FCWF0=|FN&`Y(DddlaA)nA*$`G=_50m#B
z)|nzTRrj+fqqUxY63*2ygVvLOv@sMR++9HYAGz;j)R~AL8ozJU+tjmUi5zY^LePwv
zh<&#SDvd3t@ov3AzN}I_HjD5p7^$7_--tMd@ZtHIK${p0oht{IX{vH=(BVB+3ir*_
z-hlH6Z?qS=0u&fx#CFc<L_HXf2wO))&RtNWFAl)#)wMByxT;1^@hjTU)gdq@WOL&2
zG^Um6j>(W`&tJ{7iaE>qG0({`j#YWd;*r%om6Gqya9a`C*Sb5mBCdrp>2R=4x-Z}H
z5!hqgQ)Y2$MK15)GM)xN)dNSgv;RtO{$~U>^aU2pjQTo0rCU=U(-y2pUOdsd0czi~
zfK3hcISg@s%qH`=jIdrm(5TH9%sfA})(mRfyDVgx*Y$FxHP6By82W0i!&SD`V_=7P
zHm%N#*5i@Q1DIg-9D(RH_PHmM>Y~0A-j`GRbhO27<0<?66!Ek<#U6}v-!m-XSbHt-
zW)iDy`DNO)Gazw8Z_CiNhBcjZgWx!|DER4)O81q2Rd!%&xsvA?scw_OA4G~+S(Z}J
z;yy{DE~RfkhJdwtIXzLJL~k{%W&*v<HMU96&D?zhrD>deB?E3MVXQE3$`>T9R#Ap_
zBUj_e)AWWp9<0b9x?HQhRi+!*KQ=hG_e$A-dzm`@ypA@C3ZW+>J(IeezqcY}q_&`H
zfn1S)Cnt-7W-CVzQlVCk@1*c`rvLc=rh&yE_(<9jqZo4#{g7LbS+x2+xMayrz*{Sq
zg=-lB)9hGMp5x8BN^bJZMw}XBNpD0d^p|3rW^o(it_rQAj3kcy7Ftym3>)6npt5nf
z2fWC~v1>K-gVAanh9@K_y)jxWA{jO^NBiR*@PV=Sj^6O47$>#S+<T&}N_oJti3Gcl
z$=FtB`gfE4Msa^U8x-PEl!ifSMr?k=4p%KSXbDvDw6iN))~<$Ps-J&MgWK%(YmKB)
zYO#k?VudWbTRHt}nXI){23cb9EHa}O!R^8Hv)C7{lnfV*7y-r{N9OzVXMh6JPExEB
z`rC8mW?Ha|KhlThdKV$&1!Zbp9l4>r2)zirZlU&w8oPgS^zNM(<@Jo3RJ)(h@#$!3
zrixlw$cDBn>Pg|eXLev&Vp+X83k$Ja@LftjidCFO!t-@iE>|7N93KXMssP(Tk$oYf
z@)}tf`ciD*XsJI;YO!wJX}fB}RMqN(<dKd3+-{q<H(9SVA=b*=$-#lj(EF-_Su%u<
zcgq9F*A;&VFn@ojx>N!6S522_Su#hVL0yu0&Sqjn)(H53C2GlFHm?I2%MHBniWnDs
zBI60b4&{P8?U{=k+!x5<jZQo|Z_wJSqJ+$h%v+scjhG&*J;&3Ap2#a7@wuQezYd=$
zLPnD@Nvsw+4VLoH($mvpMbDLWs?!xqGp~0)H3Wa}2<zI1wzI!gvyA=@%M9eUvCl6;
zL~>Rb2V{baf<4rYx^UL5z;EwS#(WU5cyvnN=G_e}V-#X@9JHFMR+qy*#8YaDkbnIN
zOU7{g^Fmi7!?+zERZ`MJRue=k5)P$GaA(d8_6N&a2F16Aetn$>SQJU~@E3M>0LeKj
z83__4CjrSB1VxhMBvC;`z$Hiyk_QkGP*9>|BnyI|A~{GF$%-IJ!2sXRa<Bgr_df1<
z?w;xWRdscBRdw%7-)sx0;v`5w$kpNwhzt%|HoZn^E}6}YdgQUSg&N;~GUUHtywgH=
z6`v$?9KAPrM<`ocHy&V-vG>vmUh3n$`l@v6JD#fheW$#Sa>OSt)zJ`FUAWL2b?uJ7
zOf~Zf`*1-qT+w*TOTInI#(g#g!HXK|?-lhG?l&4846wPt!VgRKK6+@}Zhaj@$X{*G
z%TsoH17$W_iO6h}me;_|9ySZT*}W(4gydx|+#r$IrN)QZ5AcpMEY@(=R2ElX@zH8{
zjhpJkX`udej&&X{)}VOlQB8|@5S=n(N%RzIH2gHnJcGN~7Hh%&)d!S(v=2M4x_qvE
z-VAPQd%Ql^-pKkXjr!|1n*Av%<b+qLZmfV<vJPs#>*Ms6)zz6FdwFjKYwXLjUN=@b
zc6sO}5+^vxejH!j_zBGB9E@#C5KJ4{eu|wINsi*8*_yqK>SW86&@T%0_0-?&k$JKd
zox3y4cA+onRtC^fWLz_4mHN_!)-x%0s~Gq$3ZG%@uWbDF(Xx0xGkndB6nJRA!PL{~
z7c_;sx%+9nuN8l)IxK!3blnhI;;sGGacjKncG6GLhzw=>D_?@9d9=GrPXt9iX<C_n
zyO3=sV{R*wGCjWFA^kWZrv@<IDalx)kbWff`hEl30s~Q3&S{35A_PyE-+CL=5*A);
z&EO!d*wd&iE2O@&)`?@wn(6el$}+7TV5zixgR&r6<Ma+P@{f8H{h=dGBZage`J+;N
zLUE?lVdzcot8FEr4NnQh=pwEV+If%iG)%;BYutBnUCLeTzj%Fkx|ew3$$pJ>_d6Cj
zLAj*|CXcE79Q7tkRd(af`>0+X(<Hh!dOP8>=p}@YShYtBt^H$-#q%p_ck$9Uz4B||
zBEJae%cMfotE@I9OFoP2a1SALwcsyZ7o<xzBdZRzSa5J|C$s4Ap-&fS>&WAvl4EoN
z(0dkqT}K?+WKUgBJU-=f4?pZ>CNJws;QUNx);o*3_0ovyHKq6ob$#R4jJ<>)4EJks
z&nM8H5;@c@Xi6!xD46#)AaxEk7+atg>66zeHer>{M(N*hmqK}RB>ay4UILLzc4BHk
zCMs=lq_(|BIwk$=?E4!QSxc>7#`;q!yWtOmS#yXqB0he4NAW4(Mw0J#fbb)-4`z%5
zw38G4D8qSEEx{2}8@x7-!!klGzF42Qo-5<(qnli88U{I;&22)I*Wr3+e8$iGtk>m!
zf5uCvljORkO#tqYw|I=nUcP&pwCrkX%`&-zXPc%S%X;=JCHk-4I2{L-YwGX-Ic4I>
z4|i`_)RDJe`@wrcA9+EW9TxNwjQA+B9yL}e@);%jdW6dD2D_dQJVGmsl}=ioA+&6C
zF!4sosL59*HDXG{@;R^Xxk)~&{L<CbW^YV1%_FWp+}E?I0Kyr_2nXdCXogB=WS+zJ
zlrv3VsjIWPO<2iWxa`BN5l``JRGv<1P}mR)F-oiDecrfY)AP3MqiJWQMS1q)t@8bb
zI$B>;072KnT!&lI==s3LSmU3q5ixUkeDj167a!h)PrpsU<x}CJ;cUs~<cMY(w${IT
zx!Qp8m*{-*IB-{tJh-`Tkva1|*>;y++&Kn~5Q*%jJ(&-H2%EL9U!ML#jX_B1@Xtqy
zi_XspfKc+Y9MZ%qXE=uDJ}8~_-=3uXKK3MW8+FCDs_&hAe9fq`LvApW0{IYUk<vq0
z5?8if()N&qNASu(cshZIZzEY(*z@dkyTETulbbr-u1tHoJ?rH+0yi8q@5M^_e&JoR
ziFm~Oc{A>nzBs?R%Yw1D#J)dkg~yds4_tGRD>g4>&pSTHahGijR0@6+c<r3t<-BVv
z@~j}LDeDD~0tJCg_7+>k+`wvK>Ry(KVVtR6LuApo*M|h^%&F8EeM{=d7H`JyPnDb*
zSa(C@@8>p3`oNt`f#mYW>S349V>g+oEs|^*$eg)jo$-`N3Ew;MpZ!e7Y9Nw^u20>z
zZ$~KGz8vEG`6?GXXGZP}++;077W4~Ts@x3oadC@MlBtZj$o~D>7wA<mpo|QHA=%ED
z;*U?D7s4cm8%sgbZN}mNB)xAY30<Bw|3n2{vUu_SEn?~=12LeN?Foqa=`Zv*BO4$K
zF}DI5;SeJcgt_zys>g>eg`(u4Pd%dqaiGiGXi@ZK=vZ{!STxSS9dr{|M2ahhZmXLk
z#r?twH4LHG8K{9k99K6JYPj5wD+o12_v2O|pa!`ST>ifd0dI}qsz6xV2<{I$2y0o#
zm4+I=ujB3t5kRlRNzi=UkO=NE!`W#d$K5xcbe~iu3mm(oO%8uVl&BpG3bVjDP+JuB
zUd*QQ>Ku+sJv|xYFE&tTVk*I`?62>s9P%bS2_#%2&OdpoRr&~76CPDW)Nblbw~=TW
zr&BmU=R@Ut?m?}!zKL0;b&~5d6`BoR*1hmolD6TTk>t0lxrr|g_EW};7I{j3v+q4~
zpvTl6$xCWQ@s{M3=GhGDSMgrsOOYs)n5O)s@T)N=*ZI<4X5ay?PJy2@!MeeZL{qiS
z)@oAJug%kTNQcSDH#j}+v{8zzz;k<}JT5!#@fYz*JuuM;O|1rNk;f54JQ+CGUU~JM
zjV&pQ?PQ9zFT;o9xf6CHKJp7)6}w`*-c0IP&Lt9LELCSEHqUlLuIX`>+HNE2lV89M
znpV%3QU@2kc<((|U^#mOfA*yy^JRzR%alKg;^~cR^}o}RmhIEbHPDA`*XMo6Z?k>;
zz~R!s<)5;K(iHJ_%Qw`9LI@YR1{-eE-yZz5_-u({TZpdta*wKSat`SOd7Rq|Uz^0j
z+iuEg3VNJg{jnJ!+}un6kPQ<9zqV0NvuHd{&wm<7+=$u8{?d?T8TTsf`#sUX_IVrW
zZzMa1kAB_0t@3q{IaG96y0jW!rs*{9(tM}Itt!tE2`Uc%S;f8-Hv3d#r3%@RXLHr$
z(mRZa1KsvZ5<!+u0ur7{1P<CLeE-htd(F#|i&ybmS^YH?Co+fm4NPPVrHicUQI9Cn
z-sH@BuuU0nEY+h9)=+w)gDZQd=ETxnR3cBFm?lh_vn`kY`pB-jYW)_m+KwWTV!J(8
zQC6>`!rd~ZxO^-6O(mF-nbJ9n(H6oejr$?n=-XA?cNSeag?6G2212fUXt-0G+!sHb
z)|EmY=#P3fs8r}C@et={llR+amIbJ!NJ<;2qCn^U2!1~uNuZU?1ut_R72NF9d^cDo
zlA)n%Yig`0a^Y5~_D6BtZ7bLn{ulH65fr5T`GF5pIEyaRfBi8)I;~_t(WjjxTBMby
zFig$CA3~*`C&%3!M<T0cA{WHJ(jn0>j#zP+weHKPl6gXUh3Y4qN|a~IhED~>M<v2y
z;Vu1<+Wp3%xX4#UmL{{Q83n#qx`d2R*riSf+8gGrbSaz+HeyMcBCF=P=^P|OET`_Y
zFvYi(`~EUc7FG2ZQ^&X$9Qnhki1V{a-P>^-Lq?=;rfJJQ*VlG5xBjkfP{kTE$GpYr
zpMR0V2w-3zJDlc^{KizaU3R#@AFWVT1J8266`&;d;eb~np{(cOg+oQF&Vd*1dV&Pf
ze@QQ8Fp2;M1L?tFAtWs*M1laoU!rhI2%`{#rxHMNh4OGks9{YW9*GAv+)#x>rL3-6
z6^>$t8pIsnN>GEJ16+U@BXS)s2Q{o*hv(8j4KdMhRj6So8vX@iOlQK8Qv5_X3mHW4
z=EB7x!X_6^jHzW_`S9~lLv21h2_vFe42Mc)U34*=nF|sr9yl7|=K=T|4AC%lG{SFV
z@K&gHgU{BEME2I;l&nw#F$n@=m^KMw6sp`%#bf}l3?K;@6n(s%1dWZ5Fr0rc9T-<y
z(<3mpWzZu!plS_XVMJg|dBBKJ!*sMFh`{)kQwVViV~UCx0#m#L#1PGx2K4fC=I=@J
zl|h_?#`H`EaSdb78C8Vf-`G`E1jgfqs)!$$IVsRbC_{2<`iKES$f8#Bqk$cmBkmAl
zCRalAB0(TN3>L!*R#c!TS5Fmz2lg)jRFGVU6Cw&)hCn?p1ZL`zy%3}TMy{Yi;a)LX
z?jjpl0sc=eVG*E)<Q9Dqbr`wqpd-U)gAk+`i@ro1nJ5sApuse#CL{R%9!YTWk)6+z
z5zjD@ajOV{nda6agbqeCNfiPUZU$9|A&g77S`g6sTxZ>asK&$}?aL$YUwVl!RD}jn
zOoYVf_(FuNpu-GeJIW*`9Q_tJMiwZt8Nf5E01c#LjuV-LQR*Xv#CWty2>F!{qr)7D
zSreDdkpgF+2HGg3@Za{EL?JPb&yGUgBtm28rJn)JLdOsI<s(3hg-=6b0uD?=5@A9o
zA4Ebk4laSn0jQh$bR;H}_S2DKn9&L492w%8gABz??Pf7j;%~*0B}g4;L=h!OCQN|k
zS0Ls8#<nYvh7hJ!i7dmU)wf!tE~cRl$%65Oa~o3WZ@I=cq$z~awj*z0)F*cxDO&DA
znq%hof0;wcbUa_i%zLQzJf2g-U>O%dMF%)77$g87!J+{q^qRf8mjlQiYRoLH<N5w5
z;)cO~y!;o|w0wlUTSnG$Lmo;X126$GL<TgGLk)>+fCQxIH5-tK@sNeU5s@PRltGgM
z>dOF_v`Ul#)G)?QC<B-<KcxbMu%QXev^6;bG+2y>oh{s+24JvA%A>>)@&JfI?QMVr
z>XXe0ScP_pAh8F4DX)4SfCI*lb$&+;`+fiy#$&7~025IbDBu~iEd^;q0H}<BdLckR
zbj=zHV2Yx1D8P;h{rH%phS3<n8Dq9$Dgf<8LH|@>1(L8&!(7)rNCWsW(bNk9n7Tul
z4wPcbXu}gg1F{oY2*5F}I8g&&azn2Mpu}`y*Nia>%xMPRp`cZu?4CIuEqbzUi^5<O
z=vBtv-kRUR!%6U(y|ta2y@2;k@84DNzS;D(N!7HLu?ya-HcBE0Xa5h9e5t-#?2{G6
zS;~nEUZ1B$gSn!pBUSr@oO(yh-@;wpK3A=6FKB#~ITy#QS<&o&);3t-+y1X!UtM3z
z7F2-q%y5fq?3H_UEyTSgfo_(wGP1W$7EOe`fBOa$)Dze=y#I9K<=9-$+6^~@1xB;%
zsR`nP8$W}GNSC;#8+HU<y{Rt@5GckodscsWUvJO${^LF0&xYV79m)C|tu<0DqP4<d
zRk>1UX9Zhi>V0y(GMxE__RenGY(7G5e*8Rw%GkHw+*v57C~nVq>E7Fu+*###bLUhH
z*mggI`RUB*J{moWE2qQU%uk|(nagJHXSfX+&AHZ3ZG4N-85am>zD%>FWa3^FB5&b(
z&%*24waL-^ip91s4spS%GbYLP{!I@=ecoI<MenBLpz~9Dyz=sS+j~=>BYepG*R>ZH
z39h3`(v8YUT0~Rj*2;BRwng939+umWj=OkW!v&kKv6gP0rnz%nSJ$CRP})oUtdAKm
z<U0MFU?)sW<@UyKSi-G{(|IfHO|`2RcSWV-FB)IM!?$;>ee*_Ev_?h0$2pjx??M{y
zX-CcH?*r3gzUmNOn$7q{gYrW;ZmD`deDH<L9Yr)5Fx_8QSehf-(xWv~SY)2T*>a{_
z@!ldaM}=R7(8iuylb2n<y@AQ4Z>XQNH-a}^X>Jw=-j|4v)&Fs$O78o|dsaVNL}eb-
z<2pRH7j<#-elzvF{G!GAIn7GPQ>530-O6Rueo%8*)8~mXRDE;9c_B6EbcNGZMsoYc
zWLWqfs;g4kFDgQ%ts-!Dvwdyb;i{&G{CDX_HfwU#FH|8@MaJh_+QzCSn_b?%c3@Q3
z6>%O8FP*jZs!|P6?1;M=FHX`s`sHl#OB`o$pX}XUYve{&F>dVj2Owj#(zX}jFSpZy
zCo0ZbA@c@$96*Le!j9=0{*CvqDGDw(ocvk9h>PO-@}#zUb98ikW>jEYrki;66P3FV
zPI2111k29WO^yOm+|sYXah-{T%l7J9T(bu9ugqG)UQCE==S7Rjm`%hLQ%;JTU0Fs&
z7<H$3m-BM!uD(H#U;5z>#t~7|Ea6sqa8s-dHNlF~U#S?R=kJf#pV=Yo#AA@W@Z`$a
z0!#$ulnBNrwFfE%u@vxdYTiDn5n5L<7V`Gy{7p9&B>fidMW?BkV-W~>3xivt?p?hU
zb#Umlq#N%)`<pGZiGDgTyISFTJ*d%KMgN6j++oDE6nLau<@Ldv9VcrG@A*BJzI{-N
zq#3edGT?j+n~{0lVBM`nmuJ4lq7qH_v*TI`%0NQ<bBvAs1(xTTRyE@`j(6-W5xpiI
z^-qgS`Ct7M%1Hk(4UgnVHlHXLqa1f#He(SOe#NASXUQttUJ&cSLo@Y^<Lb20{P{fG
z1_uHjg(79EAh+lnRdYWdDs)#o3OUgQYfrUu%MpZ)OT7+h=q*f2OcEGp33nMhZ!gX$
znSe?N%O(20wiT`vbzRbvMC@xX>sw7<vgW6@^qvotk)`-NIdu5?jIKn=3(Cot_LtY)
z5UxWC#IQHC0bHX`EsWm{S5#A3nv~sen17uXdNHrqC9zffS(&zCMBKNGrr7UZPb7Wm
zxMbGQ&jQT@^+JAFjGSPSxpVIITfv)5%`s0yQG)AIdS~(vY4k?B9nM-0MW;Q|R#JUi
zKsBH~Tk{54V125aZ8Vrj%$kg;GfdqLufN<`)7qBnTYY{YOEN!w-_H3CMN8dIS`?3I
z#9)}!3*KFl(Y22vJt*U4m$RyAd&#*>uO-a*%izimZ?g}}Cw<-+S0l8~TiePvq^|mM
z%%ZGTqn~Iy)N(shC8Zed(H|}_IsH5tB2>+1cXcS~!ZL+c6w-oSP<W^O3Ojc}i}~`s
zS{gQ_o%mG+@+<=`)BU-JFLRP4sMup;N>r%QZUDm!KkIX~0qbOGHr2+3?;X3`=^pfh
zIA=BHBn(e=xSCdQpRUd`;63RicU1u8xBDHnTE*N@$r5sSEAXKFXK-dm9uBKPuHEGd
zk`WPu!l$ye#d4}Hq^Nb5c-E3|eHvCL$AOj8JnZT`A$p2S@?cH3r^tB?3K!LbEa7Cu
zf@w9b>a^&X#f<iFnHwUYksbXBq5a7*8li9_LMb&tBb#ca6Fm3MpL&fx0kkeR7n`es
z665$9e0rTyA*8caDK#>Cnr%Sp=ImarI4B|Uy<3~*B~FbsSQ0#XTTi@uYN8goj4+;L
zz&F*m(&BL2?BmE655@<^m>&s;mf}6Dbo4R%aCbnrhx1@CFRfBeoxPy<CM{qfy{XyB
zdBF2^G}T<AlY`rXf7b&LRF*#9^u_2Qiu(TBT&6-qIys;9W@;CaiJoKL;7xoFf}-x~
zJ?3)s8y-v&H3?Hg-UrdfaqzUHetYGBU^g0Y6IQdfZGY4mYUq=|s(AbGroF=Zt32+8
z)ZC)uz5ZQ7?c~i(x4u=q@>>l*K~gNLX|JT=!e80WqYL|*aDzpMLso>QHSg}#Yp+l$
z)h;V2lI>iv1fuL052zZyArl4_C3D1ZjOHheDvOr$Ihx)xF6#ApYxFUn+&W>W5K=|F
zL-R>PA?_rpBF?nCCNo3e1x;N;)7M#HelJS+=y3Z_l_Co^hfm?lzcG1|BD82;_%r(h
zyI!4Pyp2vg@?f)lqKz?cTUQ^s3Pe$(2)l!Df-?0%ulMgCF+G;nBiB2pF}(KSp3$eT
zCPayc;Vb$;R|1QT*GqAuOHJv9q{;?3hawTL@&iisk%V{1y4ya*TsqfmxmG!@E&alG
zLejf*Zb&77i%)Ibp^BaD3scfnKRebjzmql!59`U{sM^WA-Ls^ZS%oh&I7#7VJE91;
zb9tLmrv^v#VTa*lto_eJw0u5ndDt4vg+>MT6x>%a$Uck>3FAt<bk02@H^T~6GNpNw
zT~xn-1aYfsTqV<R#d73S%1qd}>r86t)pNI>9~MwY-jhg~yJ^GamqD|lm0NW&kiTDx
zr#E4vF|1zsj%Z4Z-Op2xXW);WjP*XC2rqU40jC%hFA~P(jII?4wnrQCC(e*?!^2)|
zht<dRDsMdge3~|18~>&2SM=XU;DqwjVC56e1c^`d>PB&&T2@}q)3u9&hEFQl&xuh)
zd#pHe<LCL4M+W?2xQ9>D11_a5pGb>v&-F6@#h828`cO8o@a<{g!oxJb#A%aC)Wl|^
zP*)t0*>`fSwb2IFm@UT-xMIfJTg7U~@|oasRNA`ExbFwv<(jLJ4b#H{z?#CLQ{P#5
z;H?+nPVZPt_S}}^@9+lDyz1K;`_y}mau-~LWuMx=s?7W9N;3JwEKN!!^$y##l@97%
zbM3y)jHPg;0z81^WLnkfooI_{8q}CN!If3zBL0t@q-6<l{+Z-Xb?gg~sm+oFUfOYu
z_IT{XB*p^|mi0*`r?a}`l!WD9tUWr<+I)WD#*15T@^2aqxBG3_<_cT}ebk2PW)Jrt
zaOENI<y?icj=W%qljXF_DM+UGDafp}8~I8mnfXX{*1(J|LeMNbCiklc^<FiqJiX+r
z@k$<drZD`n3SG6|yK4~){tbK7KJTeulpL8?p4MM5spu^565zgXMnSfqEXb!fKdf*j
zC``qiGbpoxK0c+~<V~pl2a2EcUfl$751sl|Cbenx)qUu8=TkW^!X*qh%JWXW$lY<M
zAnH2NTNS#`O=Zg}V(k&t%J!ny4n^}0pV7)JB0GZN(%7&Vji1<<8{IX#8T_E-j*B-Q
zJ*+mKyRd}tB8G+Vzf%PFc243@@eNz|df86cGU<t=qsX|u(o55+L*?eW5)Hih`<ZFw
zwj;KqyO)8tUy{<)xr-?RMa-T1arr1URhvDR`Sb$S0xruO8e6dw%T<I44WbI)iAfqc
zXa!O0I0o&7DR1+Iq5lsTYwL}-*M+U%SC)*q&q>H81V7Fsi_&M(ypi{+X?~8Q`V&p7
zL-ph93I&qrNAP0@?a$VoR2`W!+J!6X10@}kM#zOl){}PQm&{Mf7U#U`ZF9c7wvdtB
zkvQ-GfU{?}4LncBQ!B~yru{{Pa+uLGZCHsm_`sKuN`bQv-(ne2u_{-)dARc2+H0$s
zt*V`^UrVM`l4fr-hs$tVGMhiE$z-QSLL`g*NgA`kzDcY`K9y&gSeRspxZ{MbFq1ZC
zhrqa%(aSsi-8fWAX{uh{2`WBz9;0DBfnn;NF6xB%!`)+#Tv9K^dnRbbqR>y(*Y!_Z
zoPTnIH(iA8jKi<FKJ#W`@@kJ7#)a2?GtV_jC<0$S?Kn&Kc20Nd^qF;)G^q?E^{LhM
z)u-Ki7eusYS4noA_%iFaN%HybpzH+rO&VJQTAm9KQR%e2j%kvT705dk@g<V3giP3n
z#Z+xOd3<p)<^d|;*8#{}KemdJ&Ji%^a*?x;wXKma52(o7Fc4ZiyGVRa<;NR;AEOM%
z;1kyNs$T+mJ^EkG6&n8Fxqdy5At0QFlOlPz#M;AeIA*@vw#-}LCs=RTd*NoA=zRj=
zBH~(uAh<WB#j5W4bB_tdulRJQcZf&dU6AD5kP*x?S-PrE{C37kBWhV<A9Y&lOd{*n
zBah}@4hMER-k11gXFLEhB_h^ryc~|uy$0Q^3p&b4!Hxn}624_0+Ld=xbqRBX5)e_(
zN2?TPq<bCLg!)BJH&V>#r^uyf+_8Vj`xtcjLY`qr#jlbheWH}fP6F@O>!Eo7XM+>|
z>y8!e%%$NJgSl9<u72%$sUFmwWYQm=qZEWSu2u2rPF0mmK|9LNJfF>zKHg@P6Ev^p
zzh8!XZ^zS^)NOq4<eb_{!!AR*dWimti>>IpGwCMIoSFz#r^+WdWb>>S;gpm1+doi;
zck2hQpbYsEkdg%bi5I3buE&A-=vO0ZD{F=Dti7hT^Ht*~`PGwB=<3Ud>N;I9q4$w|
z=}vo^$-5Mh7(IdKr)dMS!l%}=J@39!cw(Y))|IuEY3J(l_f0?FTG#Cyo^Int_Oy@Z
zOZ~UsJ&J~R?y0f9xF5%SQome%;2Rq!vWBcZ8~^p5qJOpJ$wY<T&W5Kl_4pl5;hkEG
zAK;7ewkfSUDvE6i4ox`zWmzc0Hy-Wja>5LEDGhhzH4Vv7Y(ZAV_>r6w6#HP-NTSES
zAb}3?<F-30vKf?y6zgWygC}mWJNt;kF0m<)KdAi@*^*V-ar-^44v>>KKal>w((|EE
zj?|MD#rBH=ocaU~R8v)NHRF;g7Qaj8vFFn%&Pd&NGei*8lkWZ!h$-Ab*&&{N#VJ2H
zw4$0(Eq1yp?=-^mqsG!EXaFxkaz>z=h$n=4&cYL^Gw`h}jUk+~504xECdEZCTr7+M
zK_kL2sJpO$zjh)Q_VH(wn5mS!B=6ZRo}%rCLo_42@BAe`za3$}o7DA0(e<FK&g2fD
zult~7gjP5I?n7tI`_48!oG7Bo38jHmDP`MORvwLxcSG-NLo;rwKI8|KnWuvcKg0*_
zG|kFRRUhUjTUj4OyYMYUX?0|1$L`S?JIh$Gy&Df@V!7LEJ})cY!t+>BmMBtoOq*jm
z+&AzMOWVbcZjx}JnxdN@2NuFu#A>(iwD|{F?YtU7MLiN3Oy~Cn@f%TiZ9Z-F*KeiB
zT8!>Gb6A|XywEl$R~TCJ>()uN#x0w?uFh*E!su^wQql8;PYrL&mz}T1nT4G)9BgE8
z6MwG}I2l>GatH9)3by$CyxQxAmH=~b#wi~%*q|J;8PV=sULf8qQU3M-o*G1c2><4n
zB4@UdU)Hr~PB}!(?UY;sGV}pNC@&?W=pD{@_3+#?{57-@aFjmLhuif}MK&8Kg=5`W
zm`^Pg1r)S*vT+2`=mZr=8w?94W$kslcBclMREs>%ak}Bq(1S8(HZ?Z$-FnV5stLQW
z3ai#8hmJ^z&~T8cU_wWr@w(}Q&Hc+unmoVs9;Ba{CG#0>vmFV2Q{>JFcBArHafw@O
zI+k<oKHpa(mu}|hiD^|;Pn-59)QXmsA7j<UA8C7uH}6{7#K3k9p`gt~ZLg-c=PF9_
za`+<puEhE2F;`XjK8=O$_@{_&d&#o{e37A_I5Qoldi(HfgM{L|0Nc;JeG(CQ0m>c~
ziW1b16d4(s2|t2`tas--)%{S!Betg&s7$yRmcnkh*IhBoG0BQgX|#@F05uxj)A?Mk
zJkq&4BcXIA$aZt_iF(2*D(_QG-C|vqrWz@CYoBRN@M`viaq!?<q~xp3>+X`-cuy%X
zlsD${okZ|Oxbr=%7ME3`7h`x*4+O^J)d+Kp)&{ZbI;-`w-9~om>KE~&`0hF0;$v~4
zjKINvXD9mDQjv@6O0r~Eu-dArh4E$(%mCLa|4FW{8+_fwp{tAhRxA4{RibspOad^F
z{?-MKf&Crx^}Le)u(ovzuYF7S9hN&3N!<89Z~gkdl;%Mfeqyh;$>u|rPPL2R#)Hg-
zE5ve_fAAk<icp)?mm<jvf1q&gtZ#Y?$w$r;Z}U&bZLO3#2?Y;-m`n()dv6}H{wg&X
z?^er<euRKWx5k}b;}y<zwX@2nEu>=WLgH2JJP+P?N2uAPo;<-b(@@i+X=CaXa;?fQ
zBH`yb3&XWC?q{zD1M%eF4;DJ;T#{JzELiPpd1g#x;@)-1`9pJAqVNMXRJf|Cmr(u-
zLdDqon{+YmiLrtq@m#mI57OrM82TdhyW(2S0zSkYei^*T93!GC-C&;YShszkI<`4o
z*yW*ne>+y-p@t@k@Qh!;I!{$|pZ2-Fxh|SgjkTE-qDTC;lztQUwYr_Is&6o7JydS|
zdHLklyG|uH|5L5_tYIuaGVh`8Y~Qvi5p^wu&o4S%lufrJ66D|V8R);*wDml{Pu@&?
z5xC+@CbFTc^!*2i*Nu-?r5fc>lFGCMy`9W5Y0>Lv8aGb{Bys7=0q0SsDXb>$hi`<!
zaavn1Gms(|Sc3G_fA~MUww*?Ddq=#D*4_2?TQRd#(8*8fT37aJ!D>hXinODF@=@2p
zRYdbHE~CEDtnak?HD(IA%oVFJ9htFDUZU1nD{-~XzWN3G<|nVH#DEm2Uqi?*wbx5Y
zUf?ZX)uZV%en6YKd~KI?;GT(hry0qIMl-Q|!F}I1C5??i!k1i9@`A$V3GF(<!!HZG
z>vY7KmgDL0B^R9Ogu~lQ9-?H7u3ProzjAUgq<ny{J11Qv2u4sV03PQYA|AU$Yz&ur
zJlXq*a;4}yn>Mk;zbI<U6M=pxs_f{6vp9J{0jIuvc6#vc?ZxE7hfcAVSb*g(CnY$w
zPncCdd}zSIcWrmm#%rrpUke8p2K(Rd(){sg56m6{SWX??ME@Uj{D*45sUd)$;%^3I
z90r&)ZlZt8=6`o>4OJACbyNi0?0(<0{r_|gBSqiuJ^CX<|3?E18U|>Ob%S}t82kZX
zf}@OK$!5lkLVuevW}f;QXyQfRH20u|!Px#$ii6SIXbifJ0IUqQ*RNwS3G;kScLZR<
z6)=Z5?qk~jeh^CehsnlXpw}2cP5WP}zd)+*9zn?{FB)uvYyF63gaa^&z}uq$;V}qf
z<GoQd<n<5KI||SqGxTW2W*P;amZBe?$q>U}oWBi){NNgNq#rFxC?h5;BH-!n_#Z~2
zZ^;|--eX6*FCQH<r~mM#J?J?G2x2p^VhnBIXf&pm<d@N;!q}!s_n;wXffELs{s@De
z`a|(7DQ>c`7Zun?ic5w~z3Dr21mKJRhVawGaq+N$We^zOe+1s{$31Zj!o*Ymdo*-y
z1pUJX>$tT4IeD7nXzJ-d6c{uPoIIurGc!*iYI_}{i-#WDsE<y!kWB#8T3jsf->LFX
z$_RKmd19G~zatNN1b_4gCCeu0IRVfgGYB)ddlTrH;NbwRX8`*D9NQ`cIUYeE%j92a
zhZ&m2BpR~d#b^S9CIJepLHB=;@&7OAj&cuQ>_`-Prhm**NPpTCTK%;A5%WM54uEn~
z00kBhw1&tc)!!sGZD2D5IXfIdmJaaa&cO_cc^c~T`fmsiw3r5nvGo}Mk*(23<az>}
z5NwTxWA}h<Tu3VwdQzrjVKCl5!g@d9w>+I7w%Bm~I#`Z_fWgjE!C=gPh+2YHGr(zV
zmSxPKEz8e8(%e4-FkpjzLeTBv-w;0NUkt}OP}5m7IXiGf4iCVOS740a8X#zW><F44
z`wvHS9yC?svBF?$w~iN%wY4Kr?e_pRR!3w|n`FL5FHq0W;#_|?LJ>@O4+tC^<L@-a
zHK7L+=K#9@jP#RpXv<SE&`B_!9zlS$d*W&t78&#$oH06Xc`}$VhrQ$tK$@9^Fx`V>
zLI|u;c?P|7;rfYziSGeQ(Bi{i@r@Y>w7%hb$Q(hIG6;fWqs2_YTL>!t2RcAs9D^{L
z&dj4BE7c=S=rb2Y#~_R*e+YW;e-Iv+s*1oK+BDX}bDe}R*e3xPjQ@{mnb7~;3Ho4%
zJ_2hL$}FIJ+BW}_M1t$)2oh|Dr9=2Lr+?$<6C+rwPD$ojF*tg~4?<5G-yepBdi_gY
zU=g6h)|1I1x~F%(|01C?CRlrV!`FHqjxN18OfVStA3Y5Q{Y!r1zvMMK=r~WH<<r=Y
z*GG=%f641E{Z(I~8U16g21EZ|;J?;@Tge!C1{IZmpB(!4CJt;~LXWfNhy&M`u-6KP
zWi(V)bYx7~GC&TN6(LBmxh)VPm8yP|r?5dY5M<hN1d*-)G+5nwFxMfistSXBqr^G3
z$<TUvBr5$9fql34M6K;YJ{=5Je*vAaf6T}%5tzG%PPASkBnvjv_EylQjdA{l2*5s0
zBpKF<ko+^)>LVWvrtt9iv=xG0tJt^0<*R7*v*!P(H%A^XrI-{w0qys+qK=^0j{w1c
zmM$}hjQu~7_1KUw>M+|!?X)9x&?%r}5GLbEKS7%QffPPr4+B>S8V7%C!Uy|7Bo#Jw
zZy@q>`oGA9bR^dD$Fqhe?Q;G_n&lu#j|IfvanABboO6~y@>tix2}r*y=5sdCr386A
zVE$J9zYQ(=2RPBGG+qIzW|K9v_x8Ew{$FV{X1>heUYCbnrw`HjC-X<hovy@a068m>
zEXT$Lxqi(2%@X?gDtcwBW`w~c{t)G>I}+uoLoyu`{oC&U6}cn3@3$R^er`h&g8l0N
z@|gTl*9|S|Z{3kFm@E+tcK(m9H~vqa8`}(9Z=n6!)%ClR6JTE#66@C&XfKW92Y%TA
zuoeTBFX)eJp^xb?N3gKk`F|&|ju-RpWpHx?paY>}Sy<Dw>x_d`IXMjGt#^Fy)dAvc
z0wP%ZOJ2+02t%)GVpn0X|ApGombH@&9QcYZAebX#{+j^SDwws2c21(eZxZXke?ib4
zncol|cuNML#^!7DEi_4@@|y%exC-{IJto&j9U+qOKdT1GHd-Bx69xi_odB$P=?X!L
z9!HR*2X@1HAn23d5ro{q4xQOSL&m5hNE-zlPwt~gjOxFy+=0$FF|?ci+~;bA9ErB>
zVE^Vjh0!1SkN!~Lc!nS8|Gpf8XMxU5KlHL7_(!C-#~g|J?*fe2y#HhuZNE?I5#*YR
zwSK03MKc*`M@&K*Rt7YIAl&pLXdeWyFDvIY)TF<mL(h~81{3+i&~>o?D<F-{M5b?O
z&GI!zn#F3c?`TjEl-_&<-E9U)QP{q396xOb?Iw;QzpMrL{nZr9**kqLBzm_6gE^xA
zN#uaR4u$~qZpd29Rzy-%Qo_bYQpiC{L`>L5+*;CJSWH+_Oq9q@Qc6rhL{dV`T3G!5
E0o04c$N&HU

delta 31112
zcmV(-K-|C0@f*_c8w^lO0|W{H00000SS67R9~{UII%-f$0|W{H000O8SS8n7=8jaT
z%~1dVM$eH)9|Fh@k!V~6Hnv^J%#q0+WFGt>Nt34sPrpbHzDS>bif?|F94{8d;*&Hv
zX{x48=Z*Z8tg7{OStsSZsVB*5eOZ;=jeOiUNq<u$>(wIfi)1cusEaDOyyvHFQ5AVt
zBzH~w{;F#3raHXN121@1%&WYWVUw`|8h=IC%Wu{zdD|g=FrJ1LJefZIL-OO_|C?bA
zPq$yPzyFT2>ym}c=Q{6)X}`?t@=8We^cStIa=O2teDnI-q;8U`kx|;@a$PSf8KLaE
zPm-j$tCOy%uF{*vW~NV%vN!A1s%iU~jW=E0tTNe#WpgV(dyL1EvhMo4?n_x<Q-6=A
z$@5-DteZQT9XF#(@;b?MfaKlz^DMb3@&)GBl=4`8o#Z_S%C4H5RA1d?Ve6N+BpLLs
z>~FZt>}UR|{l1<4v1{rq>D%&JmN!W{-H*EHaaL(Q@5|dlcJAdcnk`AT#z>)Cw^#XG
z=KEOJR8^hrM3>x_`EaI>x}?rIpns8x9PZ6jhWut-&#?>g=zUTy3R&Jful!eXTJlVL
zf5fSA^-0;uAF_U&&Rq5h`_`^&8Eb#PEBnG`E|bKRWZ#nJYI{|nmb;sBeq#sIar~}t
z^ZVqy=+|vMlkwgZeP0zznUhTS9{)|3MSs&QlD4_)k_PXt(?!v}myNi@yMH?z42Npg
z?Yu}v`1d?t%LQnzWJJ9Y^L5+e5cl$R-z;;kSXRF%I6DyMo{TIX7eX65^toKiAD0Cv
zCSH`&v<zQF`;2j}<OSH{F1|BQ9=<c*lppNIyxp9u?LcBXV7nA;(OoX9|LB5by7^*R
z*0wOdyKS0YcW2_1w7{+|*MC)CVmtj3%8_p!;7F)dFXBU&P{?6;;!db)Jdqo<kSAna
zMK0tnv%_46tpmBpg_1{POd+$P6_QLg7u_WzUG^j*jWK3?`n%Kff9^y8%9la1H}jif
znI9h7&B!J={#s_RY8zdK%%UygDaa3&7_R`)>xRwdt$a{5`2yGFb$>mO8gD_3pJKsD
zo?OW<`vmleS2dkewCx#*_D1eQ4Jx@VWy^%`f-3J<MS|PhEOF$2T7%q#$@j$v*^*H)
zy`IYGwx53Wb+5<d8>gqbo6&(Qu`jvpS7jxKlgn(%`TP51RkSJhDIx{@j91*ZX4n`Z
z+~le%SF2&r%Y6PG+kbS`w0O5r{qW`_zs^fJAz5Kj7i~^<NyescE3s2m)2yb+=rnJu
zvS?*kVMlUWLco<QXD%WO5^3`({B<Wge4SwO!q9AoFp;o3)A1)V8m>+yw|0InLy>xg
zNA2$mp{I*h7FX}@PlQX$D>1nn`4X#;70Y(((Kqt8*2zysRDS|I<Ro^l9#2-LoXjys
zv6w|vCGV~BKbJyk*s!vdqm}R0c_pLDgoNlunZ4&FU-Eo08fS8@${(9rp1jFr_iJ)I
zGB+F^sZaQWaCmvQ4A$zjx?x&4SlLb?H>JZc%~d7RPo`E>U2!K1EvDQu-pt*51J*H+
z!e5~j3~$0#g@4Afsf&Ax8ytj48&e9BWF+h$ujJ{)y>XF3j$e7S9El7j`!m+5oxOZ3
z8;Oh3$&TSALd;ba-6Q$EjH#!G+X~*FQ(E2Ozg^#~IvjJLRHsXsKown4-((dlveV<K
zQ51G#AV?>w)w;bVt+vhj`bOR$lnLd;em8Hbs-T3$Nq@`0;7rr$^sHz*%)IW8!DU|Y
z*CK0h1Q!>+Ed5wii>}C*fhIuc9WPRS?|gk07&N)O-wm7=5A9y51|)G+e(<#iPM<8x
zF70z!3il-l%T-(4mdzS+wJ(;dzMCemin}B`Ertc?Bo7ZeQM{mQ91AOYHe3Lq=2-3>
zJS_KI-+$fTmw{c(JNs`|6rV{^FH&K1@}Fe1sS%JHT$R_!*$uSaPsbv<OoNd1bjgqZ
z_Ww%GY_ym51kO*NTFbO2;EUm&=Q5E+*~vw@Ppka0z-<+p7FoRDm6dzpLP?Hge;-`C
z6spWc2`q#;*6ZaZ6}1unHu;B9=Xnd_7kMi;L4Wp}zmd<3(1pl&k8YY;R2VSC3ba+2
z#4fs~f*#8`P4s0yOYQ9#cb>0=4HWvm@RG#VB6^~JFy&UC$a|w7L4iolPmf<DR|Obo
zEo3gIu3D7d<E0oP6*f0H9`<gLY%dDeBgculmM{FL?((^^2)ssw!&+W2p$gaMAM#7N
zTYqvrH{J{d8X{Y@xON~2=%D%gqE?37H*zzRw(LZJh}l#26KEPM(VP0fGpUxX`U&of
zY9hh|7raHhvTXsQq1!x!DhIzZ?es)%GWZ2d0ciHP%a@?H$HUSyWqV!GQZX<FjgMgV
z+zCC&=b{pF*LYS!7t3Z{^Rn_f+wX&b8h^HxJ2T2&Jb!folQ8)zfdSIB^Xv5cwz&F1
zbQ~ej<*Mm<ZE6(@?Y+<+g{t5CFk)KP^J?9J_g&_)BXjI#^5>#$rgFjyDF1R&^690p
zmqL#MRK|zniR&2+6tPJP>qQB9Gs<v^7vZ}L;W}JpHa^12qo>Hc#k>$UD(_B20Do54
zva7sw5y71mR=-|Ajms&p<*AzYR0u`Zx?}7b$;+PLx<FxDLcx{uzg(A9FS}t91tt#-
zn?b&qL2YE92bGe#l=EjrkzdGh1m=BV)OulzBHOiTWjorkQ2EU(QmQSMaHFzeR!vK~
z>xQ?OV7Vx2T%AQWO)}jQV{;kLo`3A3)5`;cP<KvO2)&Rdvq}|E(mc?(E`b8OsTZZ2
zh*)+{`8p03Yb4=aD95j*dL~j*6sOZSZ(YBg%2}K%+kzD#t4iYuh^UwzJO*zxEhM3`
zAiLHHfy-;lF1R+p80A}tpQ^OWY7EJi>UO?v{vG5qgb6loCY+JH=dtqC_<t%>zg3Mw
zk8ncUL@vw%7YXl}fPu*R2T9YZv{wcz$Jl`&uGYe9!ck$|J9#)=me(zHL|mXn+d#*r
zLU?+5d?Ay)cysdY>C58_v2NZxfBgza`s9~C{^cK@d?|~04I4n7UlcTK68Kf-_n5Cp
zMHpQPUY_d9lTPP{+Zf&|{C^SFR<=c_Q#>~{nLCxeZ|-~vnVd)9FOx(aImTf{_NO)>
z8T1zFfoyu<4K}^^LMl8v^~dlA=A;>+Zs9p%dwq~2<5cbB-xtLSGy?nZfh8T$@+!KU
z@W7(D%0;me-hXvvEZ|$&?xM!1qkMt62``juM$%15x=?hAyRjVGn}3*fiNLP%<!X>*
z5sy>uCkG}MA;%Xm)+28PnHZ>$E*d;M@K~Hb`D`*0BFoLPF@73k79`CWZ19oDy!xtw
zeO2~qA>*AZ;cQ~@Q);RiCj{_e4kw-om%&9O8im|D7~XVmDVHo|T^~rS$K<UWoEy?6
zr3P@<s=Ww>_aiKL!++nytA{V?E8Ex)(O%cp!kP58a)6n<q3BF`(M7**suE;f%cYsq
zuG!y*ezp+KK~81nGCfhwS8Zmw-CI*;RW-H?zfiU2-Sc3B+?3D@#z(OTh4dtYmYrPJ
z`IXp|Lh^dK2RgaUtF`@Tp8F*hb#hKC?0@;+lP3oUlLW`dzkh!I<(FShzx;BnbR$Mh
zqem>$yp)MAp+>gyHc=LEvfPvWmYRTb8DZH~v7wfjG$P4Het>9G?n<?uRD^f=ttoE9
ziO-Y;Dv9H@Z*Mla$R^_|^?iX0;DW;Rf$z8~%yE!kQ&0>Nj=n0=6DSEJ3iX-Wyy-LS
zWQjEhwraYdxPRydD8Yj8<l)$_B_muxq$K6lM|Q_7z00*+vufcw1LX~DQn#>3qtGet
zM6DF&)#HX^v+T&b^?Y7{2lUZZRd0)|${c|W)Ouw=FT;+_Hht?PrLT*d9ClWl!h#a|
z$9gaCos&`D7IrUpeLcS+=T=T93=TrN_#msQ^fGn%vVRB;iw>9lvXEmd)XFgNB|}iL
z_U(c1(4^CNvSGq>P=@b$pVh{YSybRJvT3^UA}Hk8*ZpKr10R+<s_X<Jf?2)6YGpB4
zVp&BzR`v0Z_z=kIRz1bE5%mV|+VG*|rX6tI`4-`GdeKYYfU5|jHpXGweF*R6LyC&}
zb<DqLzkf*7+J&bHE-k!{zCs!DMlGOxHQ2=mf88H^{!w4>PkVkh{l3FqsT+%jw(Dqj
z`T^zf1dN>SL=_f-!YtYiXQR+M__4fuq>iXA@<eqa!&g217V@M}7;ax5Tq>*JO0ZeV
zczi%!A>5Q^%QQI;-s(d&*|MMVp=4B2&7H^Sj(_<PAvc8))ag=G5Yg-g2MxCZyeI{4
zH2?11O;g2Q98&|JHWkGMW`4o_y{O$)qly#wVb<NO`-O1COm@+najGematc@F2iTqY
z9mY~`?u9-(8fT1?35&$hLR5lb_Jup9gAV=nX3HTZV~Kndv#O)#amOpQ>5j_mx4Ltq
z>3?*JxT4$#v8&s40XHN~a9koDm#v4wL#f^4H=wKQMpWd$1#E0s<_HJi-WmP(bm%>!
zw+$TG<!_N!{f!V1Y(C!E#ky4mB6cy3>4Ktz-y(gx&L{-zD)@6Cf!n;IYk*si)xoHk
zS5rU7F0aMD`Ezk0x+%7P*rQZ5f?J-EoquWy_4T?Di#3;NoHU)>i*lY~vJ*=0u1||A
z*$ZI?8W~WI-EA34@x}kE4zXvVnaTkRqgvdVijh-xfSvucAM7cIR-SAR;WAYDz37#=
z+o!o4?LuGR!8{9s+POPJ2(K@DGB8+^IfH)R+BY)XWz~q}DBXj~VGFSyoA%ILUw<Yk
z;l$-_gRBtKC%?mI5WvL;ImWIOQ8b1NVw=@5tP*6=Few!aBDV^&IQ8vNl{;v5qW!B{
zO<ynxNv?!OG@)yN4`Hv2Q5O)MNi^XJrJ8<2S4A}OATjw^U6jxpa5*Ves0+zSWy299
zKmN=An3!TK|HOD}S)SbS`|MEont!gjgCb1NYJMv^1*EgNE;CUgGTo79MK^EDmF%#5
ziqk^`#Y1SYMOE{iQwZyxJnA+`XvaxH2k*1f-(AGN;<Z>W>%l#aq2Pvt@%)n(>)*g)
z{pFEaPaGt;2hFK6*nETPoh>e(6;+>SZss!JE93zJhJ&95&jP-QTk|6><bVFPYbtpE
z&GfF5;nb*G-<F-DB5>`EvzL94?so+|lfpG1IKsKAwIMW6U%+$ez9F6@K8zd%8IDKw
zE@M&9u+@_ODW)Q)u;~Hf6Q`$J!E^TutwX#fC{(<0c5R7VVCbk(4{yYD)D@L?y#Ata
zq>vV->8OMX2Wq1|pr|^-l7FpRlu)E)G*N@T6m?3qz@TB;&Bl$qY(B^w`RV8-JfO$A
zFEVV?QZF6W27T~-x!PiX%KQ=l9onM051be;{;Q#h2YKz<2yCQ0_ldd3Yq>@u)N>0t
zItPP-q5e1WyS7+W!94(Wrcj^k_m4mkk0y_}bo^Jod-MlUYvkEO<$pd{xN;txqWcQn
z#jRI^-o!9p+0sk8FvQ#v9W07lDfHw{^_sup#|(}`wJ3D%8rl@I=*FF8$z@wEu4%16
zEm@oQS$@CbMy-mP{((rHHZ3J~+gZR^p+R_VY}WTrgm!QMuWJqGt>_L2UR*l`ob#3g
z5L;?n$4#BUcG<CKjDKtMHjA8J%IJH?aFGe4kRv%)KiQsK(d%nQ3$djD(TEg+?wngN
z0YBEcV9iu6LXZg8i#kQ3-f9`VyJ_yoAA2%}evP}w{a4PVF%fmYuG;3dT<mzPsiM7+
zgI^V94%=?)RBc-keUkwI8Q2Ehc>K$((R@xnlmFPYhq9J+mVdf&*Hv@LK)2bJ+|iLS
z*D;*hJ|?&TJz6bTcnK#9ffhyY>=om8!jy!*BDW4~Mm1>$xlZds8Ku6L4%*=M(Mi#j
zJ<86`Ute_dW>rkLh&=f!`QFzu@eB0(KO{e7;~jzdPZ!uTIPK{yKZ_v%nbA$z13*!1
zdhJOgV$9wfCVxxmQCF4x_`m*dej;OP8IVG0kV3Iypm!^HTk?qefXDo#<$VY~u_0_m
zUA4X*e?;WO0;emMfZojwiJ)S)P`d&AkmlBghWno<G{-PSa#KCSg8zT@zFgwDVvuTb
zw?&Tpa{2)@3sy1&iTwslEG7bRxb1`~H-6Q@B~4}mpMQD5XG|Rk4*dTT&%IvnSDRXr
zvKp5G!K>$1zxnJx62;I1+vMIK4Nrv_KGhn$7M~x*a%V@(=rq@=-ir=i-l}qsr!{gw
zG}35Qt-IlVxc7eyfX${N;dVV=>5-aALNlMX4$T3qcBXRG-LXbaL{P$SrGax<Nw>L!
zeG{CZ3V+jjr0!8MSw)i~t|rkdH0T|_{1|-p4IDmBqp?#QFs`Cc=Q8j$To`0v0UT5a
z)v14#mZltK_C`Jnyh$-iZ^Yoq4E5R;X$aXx)`IboM+6}>cTg7iVo}mN6@c(H4oA*u
zT<CAQOhH{YCP3xBG}n4?Yq7;uX#+)d1l!(gWPe+&JAVtkiZss1pp!GhqL6h{JQ9s{
zdi>1PUwh4%UK2jFm{@G4D%$t4Y>|V4PzYN%r^EN`^_#cqsrH3hfT~tJSopc`HP+97
z+cfz`IDR^>WC4pKBe#*L&w&~1ZCTgRB<#E0=)#ug?*z1%sy|l9d$C^G>K;H>7&IgD
z;D2%>=}p0tU^=4Nmvw}rj=>p14<WG2<!uZl3_+OkQnrE6$u+!8`MhmJ4_K7sX++CK
z0}7>tZy*&!_RL^H$^BH9)ey4zBUi8R5SeKO)T|u)$>4QQOYEWT0B@g(y%E*ud+cbh
zx7yShb8@;DL1R~p8_?gU=b?}q`{~)sXMZ0FL*P=;9aZxn=T+Wy<yA=yBa_E2o<IBQ
zKp35d=AiSL_=EyCT9$1qGCxEy%-?#wCiX|qc`e44Xq2g3QPJHIl0>Aka<CcA4N*A(
zW5*hJxAjNG37zY0F#XI4YhoRI+JY?sP~&@Ip2kH};4M9YHL8hT3e_i>&+3Ge`hP|^
z0Sr`OGDN{bi_+z!v=nXb6AYh%((HqA2uK=mu@fH6w^Rk3iMgH%bc%W|qB%DUPDn{O
zIM}0*$`Wx5J&$A$camXvRY~^L?Gw{-Rb2HNSgoMLloq#pE-zSUa1ZW7I*1q><$jU}
z%uJP>mG;|VLrv`w9q1~rx*`i3N|OW@DSz)k)}47=>XKK!23R3a_H+as*;ONw88%1W
z^+#l21ok~Vj=NijfnMUrtI7~ZLI(6z7gS2*M>epWvuwAVGk>K%D+O>jb?ib=Gvd4B
z<gP*3T8wNsYnJ6A_08lym)-Gd_4T^DAKX^zKJ4sj3WKW&mh{KcWwXeu6efc#CVx}T
z?ndNZ#3t0dd-eKl;%Bud?1>UcL+O{r;3bFK_MRbug&2c|+Sf_zQr>d$!u9C2oFjf;
z;a;g1fADg1I&HoxVdeldW7}4Cc;#FX)Jc)Ia5}h1r>CW9-wOjASRq^{z2R7(tk&3J
z*-<*~<bYf~^Y}{&Y*#Hju_Pcrh-C&vHi5%u9=6JK1nAvYCG}KjcR2K^Xqg?{->}bx
z2Z_FO4IFnIv%p?ec@5D>u7P=hzVFJF2WWv4trta+UgdM%&aeQnSxiApi+Q@AL7}D8
z*Z0TxUEp-=Bt~RH@~lYoo4hTPj2A>e4<y<95^lZQyeb!p_p$Jo{!rcVN5(`>Ikn_P
zS;ON+MPij-!<n(}HT@~EOJ^2A@~1U64Qd6TyAbswzsdMolMon3e}4%f14WUMD3#BV
z|B-2ObJ3OC-tWeELn#DvgvblfU8RNr=Wde?P(1?1fv1ebze<0a%wSm@2r)c2^@Y#!
zHdjPH%wv5{RF)-TqjU}#YraEp<4ApFOPO0|8yDOP)4yUNC<sjVX9GDiB)3F@au)mB
z(n|;vK&@#FLB5+(e{ll0A<Vk=(0Apzj6KooVn3RMh{xOE1ryVFs1=-;f&gp1I#*ck
zQHV#!FEQ07MQ~<<U_UST#6&Unf#{@;Zfke`45vz@A4C6hO%mDEOgC0-rU&<pIRmOA
z%b}HRaB=B=GD-wJpBRYe&t9J=ck0>$fe|>+16#IjJm}bqf3~5vL(Nds3w$UR#q8|)
zbGz1Cri6OA!}VR)%HK_6#A0Vl4S6So1m8H)jlm1~1dEYR9BlW6+$vGxlhKod|M814
z#Ke;W`$#BKjO;nTdUD_<OHOfMe*DW;m{3ZBqU#u^nv8_b^GY)+Ai)U+p*lx}Xv~wK
zqTAW=h$x0^f58pvG@he>+nwY1DX&Rc4}M4423&Gs{Cg)rGyBW-0z*_L{LErg1M|cy
z3b3xk_e%B=MjrJ}1`Qd=GOw2<I~0S@Q}=emVDXTA00gM^2Q8zdzEv^>Bj&Up2{3G2
z<CEB@JMi3A;dcQ$&Md30kAdY5^pWc*M3z^oP8yPUe@JCo1v5IRN3glhj-Nj>g2nz{
z7i4U>tH5=ndgqdN=PyEJ$Y0BInkHGy2HdrvO0d%MVN&)Uy2Vl0T3YobYy)e8;y@ZT
z(?_`|l{}(-h`~~M>Yi=-6^P}J_eO*el<ytL{g8-CP^xW*o*%<j4tOW$P7Py>lsX`V
zK#>Eef6ejzuqj2QvHhc+1OJr@q_yU3+eS0@2s#AxAjWM~OsKa)O(DeFB6K@UENs94
zZyy{5&pmoNzaJPq12ZXomu8RBI|S-bSI`cB)!<UB15KznY#4NriKxt-P8c;*k+70$
z#vym1jOGOd1;ww>1jwpeH8n%}J^d=MRIB{`e|_>@nSN7l!8#Ys8cbik-y{8tq5GNP
z7j<gFtS*J^Oyl**Z09$yztu|oKxOlT93EWMIc9YfcEIM(&}1ARvsfL~0gS0U_?Xw;
z%xk@=!8qr4=R%H$hr$=2U8}#%ZF3Ffa3`|@{(%emSvGj#WU`NwXJ2Ek_*VX~47J?R
zf4XXHPKGTtHbiWVvO~-!b@ShI)VZ;Yk=)8H>jp&1lfT*VM?TqwqLCTQegZgV3k_MJ
z@YIS)d0Q|zx2Yj+C$B2NVoOW3EH=mcs>r1>?9fh_Suoqo{<CYXct?X@iw1W^50by?
z$G`kTG|BERUui64Bgr-y;ebM}oTu6ie<`{;8O@Yd9B*zQgve>BB!m=9xUS5huMTP?
z{=yn>i#V5@nYKv&tQku!^7jh6Bk@?IGRD}sqiV==SQPMvnHA6iEMCA0-%WO`nJc)N
z?(E{fk5TeSp@k_tiO!byWW=XacSTqC7R_YZQKtYjMf+`L-EW*m$h)V%TtxL6e|B|W
ztdjhyr%rAsG9hn^X?EL)d9rQ9e3w`6Q?ZeicFj!+SxeLaU}E>~P7UOJ>I^~jcqBiK
z@?`JFzx+r0!5#vQeNa1?76rwgmI;18W@s{(p8;_o8YbXpbHuRK4^Wz!F^8X(In^#&
zH&oLe{I7X0OW$GmZ*P?UF$~Lae{7^AblbjRIfA$6?@pcTn7ZI-ZPgf0Ka`#st2|%1
zovwf2#Pod$O(QPdC3}b_h_b1Q{~iLnywVEWNK13IGTmT6TH#C4-Uxz7VZ)X?wxh#U
zRZ!yjnWs=-5i0I=4tZ@}ykyVO0IwPh?$Z+DGHFbYox2a=zc8Hx$lr4Vf3LbM=%QF_
z<PRs%yUK$zICzl_CLq)HiN?Zv1&x;(?BS|H*YEPH;!yWU&yG^lj)_j4UK7iqsOdgB
zzED0`$g<<Bu&rh8Tm|B1(g0q;yDo)F7DfW!H0u`LH<@@N_9WsUOE?XjS$xAX2f`-5
zZBSUlff(jnNJihC3C~`Xf5Jo&MQO)}o_q=2Sj|PNVS}91?#6OeJ$Nto;JSqkYPz`n
z`ja66R|y*~Mtm{z!YW6eloH-Wr7j2ZgMJ@+=5ZKHfKv5$bYRQrm1>$3Q-)+{9MjBX
zEQiwVHV@?{@X9^9)w<{#C`6a^%rXI06Pc2`l_q8@-`P9ESNb!>fA=Qg;XU0&+iMzl
z>eb^7w4_$(m!8Q$Z4piuzI1f*`q}A|r@s_c;kV~w9Xk(;=Hv3o>sO~>>^a?<#Q1{o
z<jE_@0pn`s_;W%~M+vMhPX*PvOp~wS-O;cO)A%74#W(@An$fDIdqP+#z%=-2j4K$(
z_=_Da<Y1HeZFx`WPI#;3f_5t??sPMn0Xe&Uk|iSOgBO$^gmOD@n$QKA9-lo|GZhZ>
z$brUC&M-F3m8L>Aa*sMCiob^#TksyuZ^o2gmkKLrEkc1K6)wG#mmhfno|6$Ed4KO{
zt`e}<xIw@<D@y?|`?#u-fBZk?_5;5hl$h{|y+iTYkhXOcMKs@-;yi}=gj}FaC#!vJ
z#SZpf8Jv3MJ5vEUTjwqH<bG2T>WoX(zy+Xy7Xv>Vl?7=0V{@WGb!(E*V}$n^3_}eG
z`Eq<j=-!?q7&V|1mhad1Xqcvd$A3q1f=DposnN0y1J4n(<!j9qU3coLPn>IzCUCJU
zLo9i2EA~~t9Ka$nA*&>?4IBCVA*!Xg*cLyJ!=mYC15RQoJRM`-74pmRE;=O{-9Guk
z<0=vU6+<dma(Ge55i(zHa%Mt?;ktx=DwlZiV|#{@3K!L;4S^L&Hagz#O@AdVTXhwx
zI}W*Rj1DC(^o%EfPD5${*T^lXg)R&(EW*+EL6-k@P8T5JfbJknuPw1D`^{+-59X9o
zT|hP!X{%GDn-wn;i9lp6J<<47SwdIHUF$WlN>z@|V&!EETR4Tt>gK*<0XALc`{I5&
zHn$+pY~v(-<8@N{gy{)>{eRTMYTxOB5J-vthbic*LzTLa3Bs3+fbj6ZUS!*FC&#8M
zEef86FoDWLmOKEhKXSP&p(1>TGf3@8TU!WrK!AI+BNV@|DbVPI5nu<<xvnCDXyaf9
z^y=msHXz#AFpCWi@L^F5baT5yGnnmJ^~*qs4M|WoDAg}t4IxY;U4PSU#6Fk#y@6uH
z6edJX_MFCVDvPmjlnz0Q`x<;jvA9#85oxNRU!LlJV7s=+vNLaQKn)Et>+P_M{vPC`
zXhIY$nnqL?W^)BsAu`~jIuu+#+z;xkV1kpXetw&*ybYH7<Ny3W8MWzJnBC0q3p^W;
zyBh}^v`>V7Zu({Qd4KvR-dzLsRQaFpQ}gBkM^z$tn^&nRjdw+PebYx_%+I#<#V5bq
z=3d+UX%oHA%keP+Ip5Si@ELO-PCRE+Uj2U~y2dhHxD*Sbmlk&CM$7?d4OG#HqA(Z>
zV$HQPnM)1Idkm_e-8Z4KodO#&R+1-llXKhOhsI-ydS@vpdw;0W>3Y&0d=+A^uBxCq
z(YYKuGi6>yjV*7LDe3^mLie^U3CmxM!=@xW_Y~O9glMen9ax9x8M!)3WfP-Rhq9*6
zTN9`>BcZ9fBg-vS&p6Q^TcD4!e`HnS%H?uh7q0GJHS=|swg|_UOCj`bU4Wm<zy@|j
zZGnMUo;*w}gMViw9KX#FSpP6hjn=N~b!YH$&B*bjDCf%|&x|nHcz%{<&dL_*nbciR
zH+Y(?6HY|EMF<C6*RW$B+7=2A8mGhn=*KF1F#PsvM%h&VmBQRc<&g|<S#!2Hcst-1
z^ll_?h1U#K(@0dQpL_PVO54B6SkQu=C#PSc&R6SxjDOTg-HGHLFp`COz3d20yS;2a
zB>&>c!LqZY56@u4EXl5zoUd+H+_xa>y5_2f#Jp@+DvH%q)Bx7UvEC_wM=!CQ*YfD#
zkhi_<jGAqmwvivY5srx|+lU}gdoZG}ZQV@hYq;@SE{LG1;mXU6CEw73v$HFC0Col9
z-1K3%+kZmw@(i-NYag7t(uA7USnWnAvA_AxR`mY*T-A~BU2z$4veDNsPLtmpzkN%d
zdHUvLCK~rRQQkLbdcFiJ;UTmgtUPxOz_&vb<>$X#E_b{aqnGRY^1e=<zdSoQc*5wM
zNFHTT;HGk6=JZe-S53(|msI?01?u>4ADX%|HGiJib)G+(FPOShzo)hi?z|VR)h0FG
zgL~&er9xj0zGorNZ{NN>dt;!oaL~T78wZZvJwpUJWfi}T?^GCM-}lY?qW&Rc9Q3m5
z%YJQWc7oNTM3=;YH|g_wn4)=n5Zl*Go{;tv;_c=xFaxB!DUDenAKEDu$QDe*YM>m&
zIDeNgucGrZNpOJrxUuDS*({J$g+gu$3^vH5)etR$zcbtr!*Xul3+$XrYYytTolsN`
z*mcFIWA6C}pwYP*pFTzK8NMHS_JsLf*9vLz+=D=;r>9YI98u`Ko?h%yrLPR^kB2!Z
zrbM(7DuEI31EA0AP{zXJ9(Z1deSuqU(0@izfO<xlEmZB79xwS$OIvt8NmQ<+3l$gi
zLFnfZfFM2zM(igWw{dX$cXvz$K*YzQ`K;Tbl`jybR3He9Aw`9&Ug<6?>JXmPLBHxG
z6n|I*E;~_hB~2r<#zFwJtICyO0^y~8{!Ep04gLck$>ly@%rw3~Q(X$NsE;Ch1AlVk
zQq=mU_9VO@OdT;|nw$ozXK=oek<4VN??s4IYDzz(g&QZd%+paOyR>S$Y2RgIcO;R{
z%Q@D)WI}UCXl{n!Ow$$5L}n_k`>M@VXQmCJQ}AM+qxc-X;9<0J<HUyRg1-S*WRP2*
zJ|wpgOthfmB%~z$BAFX3JTb7ki+}0cC)0!JK^nG?*yP-RO>0)?>f~a5A`Bs0H1lqD
ze){&^`KveS$@%HC=WkPC>MxF8O_z&oM=G5|W!<1vmc`Rx`Y%HGKImUo5jTYOX-pDG
z&u9u5Jsp@BHak7Nh!ATTasxN$#Yf2)&lrFJ%2KrKEv84-0%2#NK4CYvD1SD_3CnrS
z%_Y;LQo;g$0p&5BSV$=~=f*8*tv#Y)Dkw^<#-WP>dv93Zr}aDSsS_xYi!|fMo4F6H
zT54br%1bW!?B&}F{awa1O;JMeHjyq|#{~jSnz_Y){;9wJAsY`sE%!|cS*`n!T1A<s
z3)EsvjNUjbDbyj13cVQ$PJhhA=KYqT0GC;G<{GYzQw?P3=da&+T7hkju&kI+9Qv<#
z1t(eNG>xKEJGsn4Qdb4QBLhF(CL=3d)@=g{m1#yq<jxpNe$S(5{UKdC;l(%{l{%L4
zw4sLLYK0<O>UP|%8Q_VN$jIk_c^%gR+>0{`hm2hJI4~J^fBzd@y?>P|7Vglz?@|q9
z5@Zj9MJRr6Jk`n}q5iZ|9c|(t|K&dnBo`IWLm6hm(ILzuL{Q4~#tEd&($kZoEE%ni
z{@5@TK$OG&wBziXHk{_;ZG;k55#VOMCH-jyr}<{4O=zgVTF)}_#=ts{Ll#a;_TsN%
z1b{)0NK-p*02wtIIDe-4-)G8&0=9s7Slx`Hq?q3@9|sZV$BEY!w2<=HDow3&jSVVl
zjBj?zwwk&2MwrZVDjBxEv;1E7xr<gKE6lgox0S~`EI0Sbq>FW-bBHr<Ksf9c63t>_
zk$N?q0+!haQm(>_W#tj|5+os#j(dRe30KTJ8>vEQ6gHMK41eA+TdZY!%o~lf=-R)A
z?r_~~_(DRiW(OoDEm5m_?5~D<Kh8q!BCs{I!f*-(R4^<wR9-&18mh^Uj}k|=s{Nni
zXDN`BivsB^gvrtMhFEtPIY(Wg1!mKQ>J?EO#(KlZaF?+6yhNdv<c6L*6IGM8O^}mT
zrEn{gf5HNS%zvRxP$r7#>Z*KC*l&t|5ISefuvS>D!9!!EG7^&Bq#(jBCRfk}WLi-m
zF_Nl=^rL#N%-}9xO#>iDm8PZ8{|+!Ot|vXh^Hv$&L=%|n&ky7bSdmt-Go-t9TLfKV
zD<3m?tHm6e&5#$1ry`vb7Y25eS_Aoq9hlCZnB7d@V1HPT8qrYQ8AHB1f5H4UvKn`Q
zIZkO%WmJRF=;5|Z44FD^e35Gnd5&_VjLC0`MXvp`gU=of&=(6I8h0{`YW$R0j{MvO
z>u@m9$t{=$84(Uo(S?hwrM3JaChBQ{3z{QJtd7~2Q%hMX)roElgS;>u!XcYNNnU`S
zuItO@)_>C^UNyiJrinH-5DoQnZzQq>G91%zzkTwB6&=_v$|I~eLOj|tUMCZJGQcX@
zX+Z3t`Pwk?D%l-EESLH)*#o!UQwXiHn4m*0=(N;oX2i!0-VtRw3U8*(i}0apha6+j
z<eyGI-O}X0*g*j~43FLx?;11$7RhjH#66h)JAV#IXR<`b*QuuBhnl|MDIOy=JciZ(
zMf(z(fS)J8;y>2(eQZ4s+kLlfp^%@kRRz=3Lao@yuya8EaZxPZS;y?pO;tsKUamWq
zkyHO54YygG`QgwrI7l(LhAj|##U~-B(8_<Qn`)wgUGq}<U&t#GaSWAqScQY-nK1V+
zzJECAQsfqTr>D-NK|-^u75S8Kh<BcNh>+NifBAp*pp&4Q3wC($UkNdy)G;nAf+Hz&
zCz_SQR=}!`36x|k4Ov$U&HfJc&?drnnT0E&rfTjxMeHcV&68}^{m>TJyd73{{NvyM
z>;ECRYV$a4u_|)5rI1r)blbrXz$7Ti$bV*eBzz;~NQa{*iy#Q{veM32m4?`dHA?`e
zNFC-kQuuA;LZ)Q_s~`UF(&Y;#MLYbuEf?`s*^V52{*kirtgwUJeYh+|e5K(6hDfaZ
zY~~ab^4qTKrnNE$g%-lcPLvFAL>2VS<>ek5vNy{4poNSy026mYu!oe}8{+eW>VL6k
z`jS~E*Jvx1gv}G8LKmr4ZyFK73w3nDv}|X{{(evdjZmte>R(cPuO2C@#vsiiZ!b$Z
zTx2EU<-r{k7ouWi4Z8T_v)B&Ie7=*62s_4d^d37Z0^6?u9V^V|+oMPzWY~4Vzb5QO
zH~m^$0hvJiMC&x6CLsrfVk=+bMt{O6qnqhZa?OzFeqSN$QcUF3W@4eZWORyJFql}g
zT*9x3usBa6J3Id87y9DNVx0ZW(AYpv{m3Th8L2~=L{7<C-voO<s7^HHJ@tRYS24Na
zLR7oDudlP@W-a$R^|~uELH=k_^l<lOu~!ZeVuMK#>w_?h2c7Y2O~W4OX@4jd<o<KB
zXy$B3*O=qc<#a=rCH)!kxo<n3;&Ts$8F%xdQ2XWjT1&~e-!tS$g@Eb!lby^emak00
z(_S>I)ea|`JJ)(J+P_S5xyr~JJ0!Vee$%rQ3BKFL64dCB0P1dNcf4iVTO^Ae=~){*
zF~E;4)1?L69(&aRtBsRct$#g-!7{?)RRW4tilBuxFL755raN;$q)$}w&|ceMuquMa
z5iI~`KrJlnl%~XiK4faeOeQjAT{Ekl6P05kAIFbECU9r{5h9qTXMSY>fizw~2il^;
z=_Z!jP7j<ns36u+bKGp-t^FIy(%8_u73{VUFX>QP!>EWltL2n2%72%$=f@~hk8(E4
z+|?}q6wNxXj`eO&lHZ)Z)$7AH6Mo=Uip=W5xeqKVx#x5B8t)efIqNlM!K(*<!z%6>
z{buN%;L=?g6+>=zSfy3$UJPI~!r8l<+;Un0?X+`D+>y#ddL3yW^eLkN|F(CO&I|iK
zGq+!;IxOtz*~Lp?4S#@<A0FCijK-k!p^y+U=ut$Bk6T^?ad7pb8(VjsO-|zuHZ=F!
zJH=FJnJE$iOw&p?Yfl+w0P@$IbtvYuYWhK;yt8zXMTt-|MMXlKeVY6(r13}nsD_pe
zmC@8;^73io#bZxGg{+&tSM#7^?AvL}>z`qe?~2Rgv%gD1I#Z2Z&&m*w`}=mStPYt>
zM9vHsMUF5NWww9~DfFNXMr)=>J{+0&=}V%i#0C%cN^RXXFPb?kn??MK1_X#L4b=z-
zUebkrC#n=J^NOVu2W30@@sqkRB?$D0*1Vhf89tNeFhhS|KmPr{A2VLGzaQ07hi!s4
z$s~la_l(mSSQ~_fSgRVm`}@`#)|GPEGG^J8iY{UXmi}<-+D8eNtZ`0Q6fe^at77c$
z@4CZv@h&EO296^Gi0UeMYd7J)j=K7$M8@L&J`gEL+D@(fKCsU13Vpy5Y&j7XIZdcF
zHNT~EG%bIXKsFYYM#~^)@%K=Jzy!r626QODhLSSbWCtW_KL}eWGT|roZ7S3g{i$Y~
z15skX%j2z>Gd$kzb@H++8$}If^6Z_;NcDB@?>kFolv@-X`T#ZY&kXnwO*Ft4h@FZx
z4NFXs{BAY`tP~54YUw~-jYB$#n(^vl=<^TIS@wVT&yUYYQ3`QW<yKvR!%AU&Hp(Bh
zVukiObeszfd&_2ILM1$uwtkU31$J-AHY^mgSTc^NyB9iMUihh8^v#9u+6AAwFm($J
z3zIj#x>;CrD1fInlq<(@Mj#aob%#b;ffakEiO*hn&^FaFg<k1(3j|`IbvH$ZSj7f^
zj*ox#VjwQIJYn_$4Cp3Q2PE(CpQSe?WydIks)K5o-VdX!m1{;tEb-CV$!nm6<WPa!
zl95r=)1sGb!zn|-uhol@C!F8D!niHHa%?iPDRWefZ?v4F%~Bc9kr&+Kq>HUgmQV?R
z?a<rJ<en^YKp+ec|2Itz9gyvtFr<b*kx_q-#u9PyadNB@rh)LwdmTL9L-2l&4pC^j
zVAy-B?>OO3f5S7_OGalW=ci-M+B3iO!YWLip4xh0;pwwlr%R!8?8q<_r1e6INV=)f
z>Q7kN*wqAebj+M<&b-2+Dhybdj{p3bsD(`Eql(BzHXD0tpafef5#j9Zd$^@=Zq$Ev
zoNRt+vEmJexS?3+hQ$i)<l$eaIy-&%5VR&Pm1^~K%jc<OwpiDLk!#zbqO$(#k~z0n
zgbD>F-Ey{&vMPy7D|{ArnJacKP}H+lR6_#l&gt`ew-ODqn4{S@Zx9GQ@;`%iWBYSt
z8sT_IDYA=L(uW3H%(}8O98<LF4zM2dAl6=VAu$v?3g)a=LyepAw4wU7TD74fvL>P9
zN0UJ`dr52U$1I}erH!M?!D>Wx>!nBHkU0;Ug@YK32vz1#_Xx@$g6vj>soPc{;=B&(
zE!*E<Xqs2qo6|QJtUos6KcO?$0Cr?zOWBW;1vNMU50gGMI~>`Ivi3S{-32Q*T^Ou8
z3#H3paE@X9`3>BCEuWK>H6aL|fTEMJ+W<e4zBML)*IC<4k{9@PlGre;2NQsMLwzW8
zLTQA*d3~GxeNU(2WOr60%n!IgvuEW-t#wO&`-@}6bEucEjQx+D26V6$w75~=T+uQ5
zy&<}p1-KDvs5Lio(7Jw+xPm+q?Z*G@u9=VPUiM3MyI4ZmmaZPA&bl3dtv}F<_H?jU
zZp%)8gDwctdXvL>UJ*8-WlvZ6oSnGgSuWan$t1Bx59^wT7^xfJgEH{SZf(c5rk8-z
zh^nD|lqRq|*Hzx45}n2<<s%$30!X6b&G<@W_Rd)#=&}L~Wuc~nyxmg=M32u7HNSz)
zQDDR%{iB;`kUvAQNtr_`53gl<!fq5|*J=NMrs;!$C2W9jclh{}ct-pM19U7`)@gZ-
zE7aH&ArD=0>A9_w<i~&YpWruP9=a<{&W`|6`d9x!s1LP>=oC_4gf-RN4<()UhjfAw
zd%?nAG!x|!QRcDcgneR#P+6?5?_6os<sd-DGW()KbN_;j-03#5>&%E<65WJZ+p-yd
z5phkt>sqmh(#~Mk$$dXNJxTuY|9J9+c|78=AZ+o~^z-rIR`gVH6+B)=+j!6|L?Yr$
zX5}WIgz^D>vr4gK$`ftY0KhBw13v=L1ki-WP&&QVNM2YGfTdiq{C%#ipI%xTp~8ez
z1^CJU>#l)|N}$de%npn!MKEIU%*5({!=PR~1$=fRf*4R@5BPD6M-PF5%{oV6FQK%A
zrr%bIzW4yNZRosA=fzLD+=4B~N&#!$KJ&tDIMASBe~*p}6Kw<!`92AVstNBrG+lFc
z{`!Y(1DKC)@K)bIOa-k@N?m~-MZ}N>2hAi3b0pTN9vz}gmHbNk+=Qu3+>ac85|&AR
z>JEC)8T5G9t+Y{l44X1@AIpz_|L;TeqO7l)>`?Q{qniCf!AHd6M<{qiZs!0{RSRv-
z8kgq$$<Ro5!$fU>cg8gJv#`xx0Q$1HDTg3Se7qlNf)FX(FQ2;F`7upf<0M<|BP(f>
zMj|JpZh$}p^O)G<(0?~!<i>!1oZD_C_mQZl-Wn0AgXV&E(*>O+Vl7>u@C<UMxMlXs
zXebekiw#NHUC?WE;dqOSCNvYmFe5`P#7*nR{{;#FZ{FwACr`#7Qw6+=so9Pmgxl5%
z9@Yt{Q=Oh(oJT7<JhZPdfAvS=C&&Eo@K7XO-``&_7e;<Dj%ed2y*aLvT{&|BXOq!6
zIS3xIrzu?d!)ucgI!%8W2*!ktt0pcwuf1{?@$#`C9x$%(_X7F?!wh4Vi{w|yLGp`V
zB>&yUD^Qy+;&hw6ELgoHq(x#=5-Yv%^Me4URvZ3WEl}ejI5vpf2(w2w$5q8v4r<eM
zAye)sg#O87Rzryl>qmF%3C~Ar7$UK)kBUu%GP8<R@nGFqQ?Y+ss2m+rXUs}K5}kL;
zQcx$ei$wE1RLt0>{zb9~Iv7laNditmE@LIpv_=Z>H07%MXd=U0BP?aXDoBI%&<z-F
zRSQz}i}!YEp}u0WKy@>Z;0%@EP~Hct`tjfW>phR?j)R%8V`PBXK4NCjpC=pF7B{GO
zB)k1jvpIY}|La$551HtW_3>Y2dsrxwaKeX7kbjZ^vQv$C*8thEIHF{($ikRDIU)fT
zD`7R4!mw)#vz{|f9O~#>fJxol+a1$3J6CGWI8807H_%O=Xl0Q>(b-gAhF`O^I~xK4
z-jmQh6akTw<vm3K8IvnMmw%_CJVdcUy{be+;r+g^0wVuf2mlFIIOVH20W4~a7<%1h
z$0+Y~c&KF(;3UvvG%F*n)Fw<9oA2pX=9<`?d6a2wI}lPRRd;p`q#$^IUQMl2%xkPk
zhJGij8Y`-C=zRfiSb1Hu<buvC*sl+F-gvl1>rSQN4aU!Jl>cqPxPOA?`1w@$w`q#n
z>BSC7_E{)%M_zQX6#sIv6QQ{v>`|0Q8jq^&u;_>?u`GONRW^I(phho2J9BLa08hIo
zV)ml#@CC5w7!JSdhDumV0`WZX3)bnk1aK~7-O?<;RIFq$Q|UAhI!<>s(X-D&;g7m~
zKIe7=1x+X?;44sIaetfyxYQb}*v@CdFGT>>IMjJ4m2d68WqnIaAdA0w)E^>-8mqNp
zW3g0>LW!wRjI!^(Jv~27-u|;!7tfz1UnRfJCL1pKy*IwY4~!JD&E0QeF)2oRX+zEQ
zpLAezyF|O;W+qV!VWGzTeP0AzW)4?34N1YjQ6E89rCMUg&VRl=gXTrZrQLGcb@Kgn
z0gr$q$nRE3gfy~k6Fcjg3Q?E*?Yz7FRr32ZB^}8?f6zY|h5JK>?DH#TUITJ;e)=2i
z7>zjm8$KDTW?R5+kkN&zDp99(tZvUfO_u8(LH0dhKC^Rv2&c?cZyUAj?_~+R5^A<o
zwodTsUsDbgzbF2|vDCfqk%mnD&azX%8u3H1wfeY9^gP#dU?oel3)>{a;D?Xw%ai6n
zVgX;1NkJ(A7?X2BECGI#pg}`m-#vLM{C;uxDzk#4<AAu2fJZw;!ynQzv}7xgHW2)>
zk(V&4+BFp1K{9<hJ~T*)YF1!={!HmzZZx6?6`+&ty(EKze`6_IUG{56JPBf<YBCF_
zIU~!Y;BX8q12nz-lS4u(0U?uaLK%PFf<pLAy|r?N71nnA>KR?CpB|)eK=^oKX{3B8
z`e}F`oe$2vWrC)l$ZWFj|12+^AX6AVmLIZ-_C(5u=5A<!Bo_16uit*FDG+=c5^qA}
z!eW@a@7>8|J@eYtD4Bsk#d>9pSF}|lwA(uo-p!q2+dWigZO6ox(-g@(1RzyRm<yj{
ziPu^2VO6$hxP+!<*@66D%Ks$?2Z#J$X3eh_rB>*ZX%sXIYht1ex1A^1f3F?2hZ^SN
zi8)Z1GEUT{@P$3TQCnEuqX5~#o|V3z2au)xlUqZ}e{Z*H{e?$dt^OtXUO-=3&&%2^
z9k;}oag4)_u*pZk69aooi@38j5UVzJ-j_RAZCafLmWW!9Sd?%%6h-+YvAz?Sn*uU@
zk#c1Bk6P_}%;e)j-I*hhI0wFvuP(F-B1!{7UMb{{h9Q5Uy_6wjgC8dEH>@*7YO3yM
zQATS$e<hr&VFs-y|7c?<Lb$tt_&;*r$*40CJv4sbsJE$S$r3r-bcCQ8GZFi46I2>o
zPUGErgM3(}cx)EoQ!r9H-@g%Y4B^A`HGwuU7&=!DF4I)y+@QmItQ78>sl5T`5#DGo
zas?<b#E9*j(}{X89uc;Vh@88iMqeC&*Q;w|e{fZep5jxqp{qk+OvvWM<7rGQ)g6-|
z&z`@UX%%yp^JAWqVH~USlEovddnzU0o#D13vafY_Zbe)RWzykbopfKm<4<6ZaZj1W
zsTH}rgUfgt096kh(a!!Wz4_M&Z0G|lni=(Vd`h>b{!Cl29(nOZ>jtQO&jL0z)aNk7
ze=(cP<1)f}{XnBOUoi9h)LJvBZSS&>WnS0ImDW59UoiC5T!*V{tH;0&@oZY18Lh`7
zn+Gt#>Nx_@YwUARCe=lKC%iAG_UUMg+s0G&`6}XRbBa9}=e}oH!m;*R;LRjf+w#k_
zX=gy<hTfK;YYl5U=?1}ZYEkgh9hL4Yf2-`k)^a7!F;d+ogFlEAv9c_spv8TXL|sbX
zfD8d^^>TWmK#AUJTFnG{n`>;7pqsh-21?U7`AP=dRKi$c-jpv$TCJiC?MAM~lc(to
zb39m)L3FuRd#g-0uzzfDZqJpn0rxU>`gt8~6cs{GMtUZ7Ie%|O$VhEL)dIO9e@{*p
z1<h8D9;8C89Pdft>rDUg|4jpnLGY2ZBStaiAo?M<AhT%odvM8;oq)GiE(_N(0;buq
zq&&x)b(P%YnT<F##**HMROm0oHqGKT#$6R!M;S>R`7N}nDi}6At3hSsau0Zsk7L(r
z=m(?KI1EonP<msuSVS^xWRCX79^nOJ?;XA2OEFGrqq+A)Tb1&FWfKW@A(OGK&h&ee
zK1XqX{5B}WqbLo7)Qs5th8?b2XwVX<;%R4Bwya$Z#Z*84m<G4m?bjMfqts##r^E_b
zcDHi+*D_gas|>Ql;#p)yErQ#F>1VMoS}7SW8ZiQlIgZTt>AwLAOgl-jPUvsXm78h7
zE`CTKn(JMJkQbDxd3EH5@*?yi@VbTCBWmn_#?iZXUX<4}YEtcfLdU10rI{*fWg#2d
zuBa!4^Pbs(Wr=0=<}574a=~{g{U}y(8VS$WRk>VsBy+qN{HX$L2SxUUjLK_dVdz7#
zfup7VFsa45b*JsB4O3OC50XbV`g6N&-ri)r(u7zmb0-G}Dnsw93TDX=I^Hc0Aa7TH
zAi(_nq3Tiv)L%7SqGib(g$8v=<~f^*5m_VP1D2>IgW0?eWGpxE!Yg82@D~|R0Cp%B
z<Y~`b+~B@I4sUeg(RqW`UKJ%|W@O&#1Z%|fSnWBUHuOYZ`H0U2jrnzWMG-QZj7eg(
z&}p!gf0mw}9xHmTtW%w?Sekjg`>G*-ct=>*KD3?vt(s-@cUWd1w~c*%5h9Ya!Z;uk
zTomk~Zq$XdZUugOk22<ih{dB*`Zn)wU>Tzjo8zF>RJFPs_9C8AQ-u8MPgpXB<DVD0
zA{oZ*_^6VS9<rJsT9I%lRf0QnX0Sh4)-ovGHT3hnEJAxpSTON*Gmw#%_Tp84Rx;o6
zwtf>82_CHKM4jFvucG(GSVM5o%=S))pS{4(_BNZZD-+)sZJ@P|E<L$bUjK!C2RPO5
z`~Pvq+upMG$liNpOJtT!w#X_XtB$>8#XE$^N=A|$AuCc=$cTiLA|r(OpL2YEeZJ~^
zu76!uu5+K)>%Q;je(vXfp7;BCdbIUcQ0iW6DN*_GWvsx??@FJn;q9wl(c5bIuf7*)
zhI9{o{Bk?9^o#i`iN^}~_zHLgr9NPvl7%{P+xNUvHopX4u9?zZ&5x`*&(-yI4S93L
zGDF$Nw1@j#TUwwS87bW?ZiVt9$B&s0#jQ}B`vMkS77w1)6`J^^Z$I)pXKH?*qJop)
zv*bbVE{?-!nXGF?6)`I?1UzEjNvi#T-`fynnHU`7dN}#1v#-l#J<Fn5@ao#4!btW;
z(s$3^Ca1_>EgEN}HA4NY9#KBf8E{07>{bWXD@<hVoN0C0)bXGbDA`#3`fh#df+LKR
zJ}J;|PyTtkbm`HL16@_=w-a&>^{*TYVj~Z3jM-FcEfe4QGRMStQDKv$tkIrFv9@=#
zrtnfRPW2UIL20w1>Pf^s$I^qc&@%%eJHXSgp3j@czcduH1x<ywyS$Uf^|{8(ij=<e
zD{y;V7%J_N|8bXVN<N`6?wexurMgFXoJs?Brw!lH9JH-conA0OD63z*w6*H&t^b6n
zQk1T5)qO)c=YrOtML1vJ*m*yEreVfKJ!^7r;wXnfN@9gf_$cVy#4{Cn@zL!0)M&E<
zPV@0m0@dyLkZRPsrhRi^9XlAAc@=U|2-v2OQ!Z;!H`2If-_O~HJ95sK?QE~{z`Y|@
z<{1l-mHVqJs>IzNMxb;#zHyb??Ak^p^w|L}vQOVK`quk|OI^9;K`SPu^+qS@C-)ey
zM((>2KR3gh9}RL0$7(6U@71z6$`71Uu_peOy{7Tb)hK{`Z|EcLtKEj-Nu11E^zd;;
zl|u8!{)}UObb)tVp(RB)4pQDsW4p06O6OT|a9Y!Bb@@>zj1qLu;3%c_>jvYTPSeu6
zjDwr@Snnz>ue#EMdH?J*ZhdK-;4~Y3aio9uMXEkZDFQ76<35JhgdhaE{pi&S=tPMa
z>E*Vd6j|gh7zj@PpyaAK!qF)=G(+zpay}(iapo+3!M7`FsyxA3faIHA?MnkyP64$Q
zA~hsjORuCGtZ7Pq3Ll7GUxaV8x!B_Is14`u$<=kr<>f5QDA*A3M);3wZgtg3Jw=W-
zj1BA5W=yDvyqsO>7$$JA=GZiqO7(pft7Sx0>g*-*s&l%HQpZ|~5Lrn{Afsb-q58!=
zkT$PPB4>b|`qsnjA`<;Tr*AuW;tjT3Vq`boIOY=tH9_o==6;1ZXP673Jl4;)R8Ha9
zHQqdhC=KH+CWk10>{s)p+v#*O&-6nwFJ6h0YECI>3Vl)3K}N*HlBi<p_E}5b#7!XR
z_Jb(=u+2P~Uj{Fmwy2pV<0_m4xGG=N4jph;o59qGV-T(^-tn#`YfQF~V0PUKN6x}z
zDG!l6q1uB`kucMU$%653ocPtiUE&;$q3s=E(Isb7-wOM8LS}C+1WW|aOohuMTO%Ac
zuFgxHTgh*=?&dq3ebMzjJbgV<?UCWL&{b#c&~$dncnX_06cidHUqni41tv>lZ)L5&
zbPw;zifMa4wGr*i-FdKn;bW3!>RckX@Zs%-&;+ds>s%hH0FOJi{E|wpjsf&n!`f{-
ziDLC&a)d9hH#7{sdVjDTd5b~P`w;2ozD+mPQ$3c|D<F{!<FRj2H+G>?9`4*c=Y4B$
zNsvr&l1yA>$&+Tjfoy^@t$Z!lLB16~GZFSY_Z`z%<=V`7*EG>jB$v9Zz9wHRQhbjZ
zXvL8_iO=FzPa}mnx4-p&OcQ(xv3_;;@-mT3TjJ$<eV*i}`m3LKbuN<3a4)1HK_3}}
z7Q0=~g-e`L3UZ3I6nT_7Wri!~XbdIg^%$S1rZsz$_dS9Rfu3qd#yq+lg_j0P#IMto
zctUjhZ7KY~42z0i^h#$nz=gYjIz55IWa!`vsEkGbd3jB(I|)v70^A#BK0nk&4v;7B
zV{vq4;K_tS(h`l(x3Sbz8WlmIW?X5;#;3{t_wp9>g)V9F#sVjV=o?+qdW>b!M5u`r
zfF{aW$)G=8w_2e>f3&;C_ctZ`nmigaam|4MjZq91`5SXHSOJY`4sM2_G5#T#k98r9
zc<7JUV$Yzzt&SDOAw}OR<N30;vMT}yQp$(`*`%O!pzQ=ef<lDT#@Exv;|xWhNZ<-7
zR1zhtXD5Sx=Rympq@WULfwmM>FAFWm8iWd?1^t82YB*YO>n&99FW<oCw@?i<3_1qg
zr$xh#R-tlef&3cuhX_8}p|SD~mQ+xd6~;l04r7k-l;@Nt+0Aj&^W-p2;*^AN(3=&;
ziA=q?(0$Y8Cu_>ROmXqc&ZN(es`(yW3JjbKzi>A$aDZ$2u^`F)MxokN>QRF3GATU%
zBD<$*fs$hBnhv9e)4$w@BUM~IoB-FRC2I306_Impr_=7yWw3Ye4i!jPom0~nxb$%N
z!?Y=)W>@JN9!I5O$T`WW64dl{so1jH3FJWje9QCGy`R%2zq+D++sk^7P@-`uovY#O
zx1KAfz@y<a2S0l9lEJ%P_Cot2EjcAX<T4Dr7MYctZ%=ATAbNAq#ZB;Y)XOkt??OkQ
zx2TQjjc8qy6g8npMk71X*G54$no{Yu^0&d}%{yoAwa4{BOlYRV-X_F%{`j8j&5WAG
zD?h!Ar+Mjf`Q8UF$&x4dL~t<&-0vP68!1k5xpmc5sp6OE#_BHa(UMmF1U@t|MQ%10
z%onvgl;jngiaI5x-;U&X*EloubWXJ~_IjmFRNi(VqOzfrohZs{Y2?F<Ow8N}cU#hQ
z?u~8{+Qg`Li{E5|l(Gi6>!np#!iw8j<&Z~xu7`dKP0Y+cb8qfMj4v)+QLlS7>-dh6
znI<js#{DDiZ#y;oPfQPK9TDT^6&n6+LF~3tS+h>kKBhNyRGQ>{n6}PyiJ4e(QSpl<
zy6G|Gt34-|O|)9N1zV0>@+RhPwCz@hP4Hf7TT|@ewNcq6ekV>aJm%;b+tHmeY=}U{
zBhnw6!3{?>8y>wI@Hskoca-Z=IJC~x;U@AUm5h|<y0Af1QhU}!THMg<rWHxXAzXYo
zFW6X0D3^z$*hC;{61Lb$h-2Wv`-}03rVuBaFTrb4k85gd<+eJZ`TAQ))CUyOT-S4g
z{R;gQoD-I(e!fUg*Y+S0|MKDu;dsId(uqA*hK>3~H<*DOOc{@I_)eJ5tW0<y{Fo+Z
zNAx>RLFj6A!S`A|_C|C5w8q3X_T?9*{onl$^E(w8hg%K%DBhM6Jm5L}@Yvu^r+8X%
z#g|kbGGDH9@vMkcmmO`dc|~Ee3{qPix%CRqI-I7N8xz--zLI=-L4!DgaOuW9n?M>3
z5kwMc(d66?jLd%jJTdVm8Q$7bz4YL@CnFuyU$kDIv&p=}QvfgJNG6C#bqkZ?sv^2t
zk{^U$aW6>YJ*XfYniiIEX{G$y-NHLf8Me!o6hW;ij#*#qBKJFd6{Rx@cclNX+Mx^B
zxE1PRs^5ReA^0E(CyeIA_(sD(Nluv12`ReJfj*otW%MAg<%B&!phvwc9}Hc`>Wlec
z?gS)g^``oFhGX#|5ReXR7eUZ~2Gal?8et>}OUFl3KA(Z9palX-uozslpiUEpE^PH%
znlK~_THxypQ$-6Jonb=67>W-}5iQ`k4$G%T3;N?=nrH!KJnTEh4@AnbQmqsiD;XMb
zB_Ae*Mik`3h%sfXx(KF*7Hk*6QZbacM=*2&t?zpTV>ykctPCADPH-63k3sB>A2&{V
z0`?qT$-&*P#}t`wFiJMGK$irLaV&uZK8CL2=we9^<_#h6L6&&{amx520)q3ua|kAi
z`E+oMZ|~^foj7P#9s?ZX$}9u?EXELz2pkhuClNR^#+67(IHqntlZ3Zm1VQrfzb7KF
zULLN5Zqu$j+#BPMyCz)t?{0jg3CBeIvnG5W(<e&?aCJ0Kzz{w}i1z5n>bPNNtl<%a
zn0}R(Fu}ix2Z6-1f$P<%eofMZ<ASR$a4Iwp?h21ZPfB3YH8`g0My|n00SvFWNjduw
zif6(Ou7m%_Bk_lyLi4!%;q@5a`;cSDSwi8Y7>`8aj$QPOgHvM!QE71gzgyCthVirR
z4!i-A7)@nxOfMgm!F4f;^=jalY)h$uk6<F=+zLle*7f<V@TZvcGwnVOKG+R6(nPmm
zg$RMsAwrC(rp2^jGuA9V3U#L&11mbG=|TL{2x_zrw$q4IjM7>W1SX)HB8Y8%j1DUV
zW;W!uMhFR@1*WkG(ZAil8;iii{e3LLp9lp*tpn)6X>|H9W+L$ZBYo~>ATUWco`E33
zq|YLVK=(R$`YvJ!ZR_V<1SXwiGZB)QCSJXN>`nQ7L^!5<MavP=e|zI!j?hIntEU{n
zh)J@=YQ&kpVd75^Mrc^{6GSCuXi3*2^e}>Y1S=*S58Dx{fAjX+5f*5eX$K+@qkg34
zSP^$G!V1&J|2KLlv0R$>ifY%Z?Gyx(X#$2i!)U-ZApik>8A8ybRRY6^SEn#twTgRV
zzl;Y0+3)@z*uke`80|8mjt3o~K{5c76_n(_Gjg<Gh#indD<a?kQZNz95jsZ92?3Sp
zo&l5P0nE@Ek_XOWoTb+QFsXh?0|;YBAuxS+a2cS+;ygtB;pPkgfy7WA51y-D05RCJ
ziCLf3+q(dt(d$M~*9*W@*Ca2%8575yfMbDdAaEKJF*_uHNvj+r(12c}f~H{rx|D!P
zVZb2zvt2lVDU1)p0S-+5zm7i^P$vMc7`H>y0rct=Y)%K3(Tt)D%;);q3_uW*O(b^#
zOzqLR3shiA>0T*t4jmhfhX4!{3hi0|GeDAR0ZNRK!WN8M;9LtZfkaONA?)9Gr>P*2
zH{uWo1q2`B<YXu4?1g&c>SX8W;Usk3|N8IBm}5ER&Cug_^ONcI^$)Zmq9G3*%t_3(
z<Dydqj9*IW8W}ErlW?YQiwOU`zD2~gz^nf=<Raf}>e@Q!_)X^xqL7PAxM$wBILK!F
zQqYY&P#9^GC0#4b@Ns;p!Yf?d%_e)ClqBg=beSKU|K`SGe;WU@i=Q6Vt^3MIH(Og$
z{p`-*zTp@CoC!I%72bHRUZ_QX!`qWDum4LswWp`aA?2ajC*DKr=FvrCN<Gi%HILiE
zi5}-axVyX_AdO$sU$t_va-QsyIGlcF7Cipk|JU{&a{8b_M!wPGYuVM}>TI9QnfZ6(
z&$gK3!S<Z&yvkW_|KwdcUiXh*cH@6u-CUh^&n_nT)W3M^xs7|D--nffC&@G&-WN`7
zeYT(a8kd&VTql$$NE#*WMkKM(o%Kp_?pNVM%Z$xl7dJ7t`SF*i8_(#c7Frcp?k??(
zTh?jcb?8DCdi#Dadid2Y+83Hx(%!loEm-r~BtDI@;cGgfYoby$>pdTDvFw{eu{D_w
zr^N0$uK;@Yh0A$2a7%<DM&%XAHE5P<b?eJYUanV{HOVRSIMi5QTFQSY7-p|WIO?DK
z<f5$X1t_rg!s@A)MZ@0vul2kA`$1{a1q{C;qOUqkAeUC6T6H}Ti|bC8HuQ`a`vlgV
zLWw5@yjWug;v)lkygnv!e4I*nFNHkVN7~WQzHtt%pBxYP*o#-|B|Y_^sujO`O{Zov
zli$|QLi53xX8kK-BDc4aRF#}TOY0&uBS5pyQyUeE3^t1gqCvCNBKJ5Fw~agM!o}C>
ztX*P|0?0>cpuZUv<J35d@W2_by5g;+2URt06x4QbeYV~T3&{nBVBPqUM`Pvgb)gHK
zX__7rdy3T3Zk)90(=nf1KF+xlE7e?KOm@ET$$X8`<oo+ZzBU=sfW~|t36}c7S-;^D
zGI^K@EB%1GUy)&}^7PEa26Lr=T~^UlyH^vNEfkq_MTf!5Bj=mPx73#K>Eu?u4*=!k
zE3w3%jSm>~?e|y*udqy*F*aVk6vgSa!L*q6Y|&DtTu@xN%&exSXr@7~+N0)&@1a*R
zL1rq6Nl_>7%}mz$D@SurQt~@GtW>v&HJ~@MXp~QhHwqBcNIaJTBX8yJD#I=l{8-6i
zR0af*8^eZ14f=Rwof1XrFRM6Qze{afJf`zvszU9Bs$J?JNSxZ;OKvOS*G}sGHeo*R
zXR9^5@LBQMFWVKX2<I83mtckm$yM+X-W8eBbsL_uvLO>3^4y7Mr|q(vGH;Z9{4{H6
zD=OGcZtP7k*Ycp8A?jHKTVEH6QDIEGzCaJXFY?7`E02j30$Pr5k}c?`X||*>m!NTP
zziDzZ^%ZGaEbn{8FfFl{>BN@eDFc43h<VkVSLD~{PIYj&_w8obw<qd68Pk<K!^wBw
zEh8CPs0{}uie01`UMmqqFzWD?UL|6+!XE?npvgH81WH%#@zL>qP9?T4J*{}rxh52b
zZ;qtxyZ=VWi|39^H0+ZB>K*=Y`E}f({nHsZJLfJA#wA1JLLs&7-OB2E5&`MR)%Tih
zQpBT>$HDEF?SD-gN9r=^=zNG=ymDEp(p}bttEr6or(5_+AJz2<|Gby|r7Y2LKGAkh
zUc8RsZhuS4*)VHd(N?Xt`(XMYu4kxuS8jJ68M@hNwCA<%nCLD=DOKTeu8-4k)LolA
zam%{d%9eg9RKT98*MJgeH?)cw^@9*+7gI?&ZzNkz;)=aXT|cj+&bY96F?hYcz?a7w
zPpaH#&32$t=*7XfZ>5xjW2_QgUw&}S+j%)<$FZ+JlbWsTtu%DnB&ej89$04HI=exf
zfvk+_b99bR)nq%z8=1GR|2njLmIF_%S+!0|P}Wzd`i|M4<OYQr>Aqx`{g-~<R#!JR
zBW33rfU2F&sUV%@%oQTO05#E$hF%MGJJjY-MSC7YpCg&nLk|0={FVAvNnt-T*qB7p
zsBUpAs=O*b74NOePhT_~I##pvW!$t1b+6s8iF5?{L49_7&m!q4Cp9r%ECE-4oNsAH
ztoF^tYU^*JMnStiranY=k`YhvROI6|m2~J-w8?`B#C96XHKNk!v{MblH$Ej~5{Z3d
z6U(o?XeIE5N@}_$t+9~3-yr1WY-?SJXrV=~Y+ydcgHuLY?-(}>s1HtGU&FslB#7D-
zs3ujomIt8_IFu|?-}*`&`?`I<yS}!uspaiiXQ(JiDRHwS@zd>~Cn`&0b%HY7rITaI
zgJDohcGq~+l}xqx>LLw?tci5)if!qNkESS)34ZoM>-E&NcfP66i~4pqi^L4an(_&)
z>sQxTE@<<eRta!>h!po{8>X9&ETOMhM!J(MYH_tCnBm7)DLA(U%2B3wtNH5~XcTuH
zh5QJ2X^XpPQA!2JedfY>ZoT4}z7z*-ew=5#ECB=MX+h>YW#L5l8~Z(OFsO~rwX`zj
z{Fi?3<)g@NFE9RRwmJV=NBZJbvm!%2N^K*zlv8@wppT=U!d%%uq*U*ox@ncBBUFGi
zM%`|3m$V|(@jK&T;Y7G_$Q_anoC^H=^s~jO#)`sR9}u%V$iQNqz{7=PQ&t$oJ&*hK
zX8O=8U;Xh2mi;d54K8OJd8ZB=EeX70aJFtI3)yxN6iF=ER{n0@ty&bp`$>Cohl(Yj
zDczgO&0FBRKFt`(d$OFJFg`75t#UJEBtQfijc7`M;c_p^ybXx+-#b^}Ofy?(QQu=9
zb0DoAEhZBMCyy7e%Ws<Rx)aD6N3aXZo)=nli{vw7jZh}JWYfC$^M^e+;5<y%I?|2W
zn0!OMo>|W5ls#}erp-sIaxo>+>XUB_PU4a#(ZM^<_^~$%j**?`KNl?G`R5A0LPnQ;
zH}TdnRl_-uSB+4H5emJH?SG!65lMP_n>X8!S|i|)pMW|`{nD=nrYPqyoX6h$9})+Z
zGv&yZ2b@7y?ff9?AcH^}=b8Z1I?sb$oTF?LR?qhaQ6FP77o05a3rD`T_))7YTqL8`
zx<<1^Kt60Bl)4^tFOc+Jfw5w&uo;qx;d_8P++0v1%%bK|D;~dgt$LvReIhE7H#AE^
za+EE3b$M1YVr;ZE@1~lYS1ftRuIcm_WGKHczszbVS-D@ppX7iyVx^tmcl%&ei>Ea|
zFP}AL)rocEhow8ajEGH^X)eDRb5msZwIBKsheu%>TSZcNorQ;%OB#L-FR%0<*E$&M
z#oRxi6{xmci4y3`izOVrIM83ke5x%F_s~E@wg^AutV6UnlZwG*$am|pV!fc{@Is;k
zJ>vUz(U0eE<j7N$eK+S+>Yw$LJ32pVlL7M&T&N;{$cfa|Oz`H@#bYB+GB2Ps9rY1a
zq`91BNs!4*D|6lKb?zX)-;jkB2a+qei1J}wDX7q(Dz)mWd4J}1GKb0b#@%jF$<+*|
z1PPgo8pvEV#rf+#%sY5pyF@i<B#~PrDO1ENg5bQNAt6mmQe=~(^%#@x?BQ<Gkp#Km
z1l*bd?;-QJ%K|SOOfu(HsrcJFT#xFa+lDwL_i`sYWP;yqSP|7CAGMW4b|D>Wt5j(;
zh7#y{`8w_op#Gcv=)_1@RVl0la+h`JAaEe3BTi5%(MRR;bZQ7Icc6IyeF<QXBOox(
zhch}laJ4X^%Yr$A0-Spjqo(J=s1YtS>D&~eTK1xprAnZhz9A(r`qU3vk|ODNCmEBg
zxlFIl=F<|U;0Ng(oTBp+s%b-NPC%yQwiHGinu;r{dmlA=zDVZS)PyK-*FE82DyksJ
z6XT9?gOItmlQeadtl`}^%O~-<%`n3J(Lc5QAY3{2g?m>y?N@xI+X)43p@$92nMygP
z>Sv@~qQIx>s^;m-X&<!1sm(GC#J)tz+XQ@(pYNaiSp{WqU5*uuNYU#;R<`GhSwhQQ
z<Y1k`oLM%!aBo@?!XU5QejJ8fu`1P{jf<f~3U4E{BIXUAQ0gu*C2{9l*Y8R`P|Sge
zb$$Ni`)r%0+xM)v+<qt3?bv~tkFsgyw_{SSf#o+OK7E-pN9g*I==Ixkzq!YGJK<1_
zmUf-!HqfmgV}GisdHJ%)Ci2$su!d;@h0V+IJ9xc$$+!=Npy7%g``oxB@o6knnWv~j
zFHO33Rkzgxk||j|>+T;Gx(cdVQa&)M)E>n2_1K^1D+=+c;O!)TDm&sA_raEr&94i1
zAa*)JljJ_xlVzMIuU=j)`rgZ;kJKQ@8P>bGLQ4mn8#j^YbY{t@Ob$clHa?xZU0ron
z_%Y$-OKDXb>|P{<oAJ_Di5{uszexT36Z*zVrDm=Ww$4ef^{VpyrNfPpm7V8@odas)
zM%PoS8Y{2l2<BE>u$Z-)vG0^BZ)8%>=iwmSHgcYso=p#ED86gp91&fz0Wfvt@R{a{
zy(^j=h&D207d<yXA7`OXf`qj7R61^4V~a?AdG@t~2M#{d6Or>ob%vb~YNKCkw`r70
z2&HU%4bnPWBi=N~bhF3_7wj##je6=vySx;yTgX00yLYDdqTle2*r#W|T-9lGEzXTD
zeq-f+xX_Iwe}(aG;Yz3M+uqZ3{xLXBSJ(J71NqD(Zbf%!=@v>_z5xP|D>5pNUnuwA
z`>Kt9-f-LOG<gQ^eMa1}_OoBr?H*Eve&Kma{bPnP7*O03MOL{^i;+b<v+%bu1l7`c
zJekzQ7d`nYQ{~;=&2<DupA0l<SA9jwD!0TY_g{U(qW4Ly)w03GQm#_q-rEsvMTFDG
z8$|T^D`RdUMEI)tk8-+gYmm0~pHq3rY4Z(p0Of>eysFdNc}q!0hb%r7&kxH@SP8FE
z-0$LI&GQ+$Q{-YGRAenWM&-9i@TB=cZs;v%5~I52^p6j8JqEYVUsbi!dFrg4*>x6&
z)rIg(o~q{!{RUSD)=`)(Jpti`h5I)0<8K}`zp%*0)m0G+XS#5K<qBISvZqp?k*8aU
zfX?&Ofy?|Gc8%HiJ5-|`j{}{#em#>?Y>{IRWt8x>x#3M7Gh`40_I2TEcX#t3BggW>
zLSOk4%2~)RUYU&$WwMiC<}O^md8g2JxU*FGh>T3<d+<+?@m7l0Phosr;*$1WRfSAS
zBZ^hatzv>e4%gauQT*ihW03lm{^~ZbP3)Bh-xBA>84j&4U)LAT3?TJalW{UpY2M&f
zV#*LDSbgVQ)P3&rb`rbX*fRNo^`IS_MqBcE1CDP`?rP5_LdMTP$BtMMI;NIe+y}Tp
zxw_UNOB|6s2u05ng04^fG5a&Z%KOz@@824|c)ZXBak9-c`quTh*dQF)rmCqn8Ozue
zQprlyrlC}=$=|~*>ZEx_!}peVaJ~g%f3CQtF>t|9idr&eW^30XW)RZ%d8B@?<DrD6
zL~g0LZbD;(iistUTuX>cf+#0fENwPC$X$ezRPj!Y+SX7yyHm%+S<=CQkGlIda`@Cs
zd4?X53fE#~Kysoy9X?WI@r9o`ioLO4m&wFQWIkqlKkJzB<-G08{#ojo0tW)Wj$PAF
zB;uiQmqWy9Vfe%99B!ibF!%%g*N1GWeOeB6)0J#rnGxe$pI(19+_-K&UXn6+>q+l}
zk*h|yZu>vvUTZIQslTyVyk`rirSY!oa=5rS7<?G%0&B%lC@j1oIf-;{OWQj`WI2?A
z`(=Tnc{0@XqsSerGf;6wc~(eaII_jK-Su&CYrXX2fx}bjA>>CeX}vp&mTN_oJ&RV9
zBg8x|Y30tY+)@RbcG|v9GaJEY_%!w?&T_sm$jF$S?g&-l1Fpd)O*8$GF|?Y}A4rmX
zjL%&7U{9Xf9jVE8foTZ&*-G=af#bxycIzyACtE7z4Dw;mrVA_AgVS~L0fLcI=5_)T
z!c}yl^Tyd9DncLDUG86<8@U|Jn%-!nee~|e>3(T-Cf`)kA9GL2rn<Sj38R(6*S>zo
z;V=*SWEi1Wg||6hMV{)k^S&dMU7u7thEmn{@p^l(8Glt&%&XDZSmc9(ugmx>Qr+j$
zCcnHG2rAvr8tBF4jJ+4SPS-pwBu?2fBHd7x@7n!qJ$TSG+BHF(*3C4aHI8zTBQT!0
zNt8jia&Xz&2&T>Cd2d{!&#jbs)3LBkY)C}-sZaC%B(!V(df_y&&S=B=N#7S%hWqRu
zfm={gdmP4iF9waUty1LuO-{8{;_YGWg5alJH-}9O?S(kcsVo-=DAM03yYOr1AXmcn
zhK{Kmo(ai}iSq>y|1hyD5(YlRdyM*L9JI<kaL(QvzI|WgfFLgC{zXd@sW)496|Yc6
z<KRs=O6*#zoIY)nCPN!~_H(X<@p=fv5Ncagny=>pTQzg;*}T~zf+R25508&@?r^dx
z?xi|+eNG<iXX3wZ_c+MZ>ee8H4KF`}lK}es{j=7VkNiRT&{pxPyE2z4D<=D+#nTQR
z<a4_{@3Og2Y|md`%gXMn6f&sz8u%D4^Il|j*oh<QeH=ikCD?jt;s)VsuH{@SI)Bxr
z6=L7zji`ie-%3^CYf8v0Ho4CvHqV@WBz(d)aWC^IIFx-g&{`kMaWbJ8QKh_-JrESJ
zaP)c1=El+*pAHS)Zl_jHgyc+Q;mGY`rStP9qPC4pv%0Y~MVj5g%yjgwUF~;Bye35a
zx_#K1GDKU=W$9A}_T9oi28nX0GD#oaT91`J9I-UGDbPpzdATkX$sF~1pWmnlOv!DH
zyWW1ILOiQ*YrHJA1UFV8<Y-!E9eT@sD64Zdk>u2*m{dy1%zYb8OSQnGWn1>i#i}pK
zC7xegr#80+puF&R<5mONI~-<3b~-t2LT6u$w{O||6DF_OMAglw;|kr}e)ojebiOGq
zGT_G3L7Tzet<z0ai%5~J`SptyoDF2iuV#Er@UPwA<hd-FAGGI(Tn(da8})==&;kdC
zWzP4W^gHGxG497#c&Df98EyF=5}L9;UwU8Gr}I>St<mAl^{MMBz1-(#QeIsc-~U06
z@2+h4YtWbDrJC0DvDtQlY`@B#0hbP$A%6Rj)rE7LjdHD1r@Ve5e{F+0a~_{2Ur7ef
z)+s&S^IW(35s)7sbOWEFWm5e{@uFjMbFtB0Dzg4nQ!@jxPmv}sftgHeiiW$(-Ni6#
z1*<h7X13ON|1?3pIsBU2LR<p@Dj?T`%yYWI>@txnrLEK5#t^z^zwR)-9wnK5WI1cF
z{`P1`Q-Rg&N_PF7k7}Vs_b80&$#S|7cd9sW5DP%?jc<y3=}E&$1)}eHX&K#bOy3dV
zbsxHYTQjA+_eW2E*UKZQfesE70{OpR8v_!J0)ouP`$qpK|MOSJfTk#n1vbn-#~C29
za0mpo!H3!G!@>M3Z3OxKD%MCtMO{}z$iwmXo7g{mcs~j-^5Gf(%dqqDak}m!{9pKk
zd4Lh;45;!JV50cjE%54F)YpONuW8d(jVZ7}UZNn-Z<gTgw*VX66`%hy#5RV4QC$O*
z$AMEcSU{LPHa9d#?--QUc8&TEdzd{=xfK-Vdk|U?19&tBAVmK5d)!JlFxs{X2El}r
z>z{BQZ=i|<qp7TE6~RQp*qHB|g{mr0TVL|T5Xea;KbSNQ2>#&{#_!kTD4#fEF^x;h
zh^51Z5tu+>(&I1~&}IT4#RdvNfnd3$P%vd2paRLrpk$)he3Ww7E>X>bK)!H6AxtNd
zrAP8#E*?ns4#34`hW8!HjPBq+(C33tf<I80Nb7w^p+w(8L9#U{jnsei*|^mn@ejc@
zS_q`c9Rd+L;f&`$TyXy#_VnVLL|J&Uim||Jg{`HS<0z<pWWa?$C{HL~WP$x27XR#2
z2wio#ip5P#V_u_8Rdc{FJLi9-3>t89i=F0o%8;S5<}(LaIS0^5V9|X%z}ZqZT8a@6
z$Si92g!hD(++gSwAc{57N}ea&v_%yUV${YL=Lr%M_+bhV_@hfOiN-RGN}^r~j60yB
zB#aUpC<qP8Idcq})r0{ctr86D*qufruW0^8VpS(Ig97n7AA`JR0Ib=ag$CvL{08BI
zbk||Tf5iDXShp_VPA{N>l|v1I2%l&-GVYi!^d5V<SieUZX-xhHlmes0*7{a7h&dkv
zQqXns^!<;lICjR}l{qg8<;(*L2t?q7GftrBEFgik1ys_eUX-UHkY^7e5bhJCGmnm)
ztDFT+VWr-xSYUaMvS)-EFefu5Z|ImxGzZXNrB3G(oU1`4*bmfva57&i$B(J*a{$(E
zPM$+m@p7<Y4iLr`u~pR9P#h9abP=Eguady&{{a0i22fhMV-Wh7#D5m?yB|>MjQ>Rv
zfUoJ`_<!icWb-N-d4b`#P6lkC^QajLIxYMgga8dh;FMS+^tknDT{SAWOsLY$e4<}u
zC6D=~lJGwxglQdm8iWeVAA@q`vAe7F5e0Jl2Q(=UXZ*v7zsm^iKTbd(=rY2piPldK
z&VKxlNz48moz@y^>bK+gcj`G_1K9jS6<Po&{;+zS$JBPBAG!!3kQE^aMDRq@vkZ={
zk{QD3u~N^_Sugmbs8XB|$mtW*8mr$_1Sn(;C&60B{yk&z=V<T;MHaEA+_gniDAleV
zt8cspr^TxI-%}_M2+s-6?t<SJ0THat>F0m0215lAhw)ERYRIv@D@(vBY?+p_gmP*j
z_84Rlhdooip+RzKXb>gH{0YFrrb*@#3gr6_$n_I|J@Ec5n-^42D-9O<KWmR?*|Gka
zGB_(X{kv%W(3;;Ma!_s=AjXC?Uq&J6TaS@(%K$ajm>quTl+)CNKz1l`{wQdK-N)3x
zZaCJ_N%k3~KaU7ZLHz`^KLa#aJM!P7IDaNK2qu5VzNUJE*6b>R)=Ujfi6H)53}Pw>
z{};4*t7DMO7l7)I=KVb+=}!zv!dNtw5^Rn|o!)u=<v+&dr3)V`+=)=L71y7G>-@ib
zwm-s;sVkVpDpAI<5%lSx|E!vE=w<Es|3QK;G7#9udZ&z1Ru`(C;G=58$zhQR{%Z*&
zyNmcU9LKdn=<zRSUi5kjHJO~8zAEni<}+aJ$U6z4LpM;h0^o;0I8Ka6PO$wez>h5k
zhhI@GTYPk^S@_#ueRS*;>2zE;8LD=xqT(!dLbE{mZz?HRR*qo!|Mv0!HR`zRW>)_X
z-*y$i{m(vNT}65N=?^&TALfqT?O)<?r9v&<o-#ln(kI+qsXJ*70KMw}N?vqwWUQgA
zS-1ZWT6qm1!)mRmRcpW#6&wXraMVs%tNMda2v)3NUp!5t%|)Z$Frf1t)eWQ|${Ybm
z+KbgW5WV<^$_^dF(Z{y_Giuprq~HG_F$cW<$OO!2{e?!xeEL@>h(6<m4QaEELPn5*
zD%&V$lh*-eY@jwYD3bj*2mtrk0TQeMY#AitEI<YCyf6g9cOrm>LdSem6R{fc-#{5r
zm;VjI1s`wx$J#DZdLYA(9Re|b0D<tIF!EacHy;2=Hvd{e|640EE~AkQ{~7GqO_V!h
z#~_e(3w4?feIN~MoA=r0b}UdS8jDKNlS@q;FN_g1ANwk`_h^ZN9+hwPsG)w6`Y7O-
z8uDLM<u`7%<*2tJk*I@nCo9A$<S}(_3;VM#&JR@62*Zv+az6k<tgWKGcYcNjHEGJB
zir2}fhg0Fl)Z`xk)~Tumtv@XO81yq9z+U0Tpe%gTsNx!pDz0oNI#Ci--UfKFC1TJv
zO0#*!vF5=H0Q++fCpm3yK58A9g*sk$a{b-`g6rFV6;I5N5!ykit}H!PeR&69#u^m-
z0%cWPR8V?QK{@#pbNKWhuXX^ePfL4f{bnu4pf@c5Db}+8=gB}+d?3dQQ%~^PE<mq(
z{OFEA^*ID`8TB^>wU!JY0Z`MEguSetl&FN1xTC$KtgM)Xqojy~h@_LGn6s>uq^Ov<
Ntf-WOy_A#v{{!N@hsyu}